@burdenoff/microfe-vibecontrols 2026.710.1 → 2026.713.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. package/dist/components/agents/AgentForm.js.map +1 -1
  2. package/dist/components/security/agentClient.js.map +1 -1
  3. package/dist/components/security/types.js.map +1 -1
  4. package/dist/pages/AgentDetailsPage.js.map +1 -1
  5. package/dist/pages/CatalogDetailPage.js.map +1 -1
  6. package/dist/pages/ComponentDetailPage.js.map +1 -1
  7. package/dist/pages/ScheduledJobDetailPage.js.map +1 -1
  8. package/dist/pages/VibesPage.js.map +1 -1
  9. package/dist/services/createSandboxAssistantTransport.js +11 -114
  10. package/dist/services/createSandboxAssistantTransport.js.map +1 -1
  11. package/dist/types/assistant.js.map +1 -1
  12. package/package.json +2 -2
package/dist/components/agents/AgentForm.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"AgentForm.js","names":[],"sources":["../../../src/components/agents/AgentForm.tsx"],"sourcesContent":["import { useEffect, useRef, useState, useCallback } from 'react';\nimport type { ReactNode } from 'react';\nimport {\n Eye,\n EyeOff,\n CheckCircle2,\n XCircle,\n Loader2,\n ChevronRight,\n ChevronLeft,\n ChevronDown,\n Copy,\n Check,\n Terminal,\n Download,\n RefreshCw,\n Plus,\n Settings2,\n} from 'lucide-react';\nimport {\n Button,\n Input,\n ResponsiveDialog,\n ResponsiveDialogContent,\n ResponsiveDialogDescription,\n ResponsiveDialogFooter,\n ResponsiveDialogHeader,\n ResponsiveDialogTitle,\n Select,\n SelectContent,\n SelectItem,\n SelectTrigger,\n SelectValue,\n Stepper,\n} from '@burdenoff/fe-libs/ui';\nimport { useProbeAgentTunnelLazyQuery } from '@/generated/wspace-operations';\nimport { SearchableSelect, MotionTabPanel, InstallTabs } from '@/components/shared';\nimport type { SearchableSelectOption } from '@/components/shared';\nimport { useTr } from '../../shared/hooks/useTr';\nimport { useField } from '../../shared/hooks/useField';\nimport { isQuotaExhaustedError, wasQuotaHandledLocally } from '@/utils/quotaUtils';\n\ntype WizardStage = 'details' | 'validate';\n\ninterface TargetOption {\n id: string;\n name: string;\n type: string;\n status: string;\n}\n\ninterface AgentFormProps {\n onSubmit: (data: Record<string, unknown>) => Promise<{ id: string } | void>;\n onCancel: () => void;\n isLoading?: boolean;\n /** Navigate to a path (used to go to agent details after creation) */\n onNavigate?: (path: string) => void;\n /** Available targets for the agent to be installed on */\n targets?: TargetOption[];\n /** Whether targets are still loading */\n targetsLoading?: boolean;\n /**\n * Create a new target inline. When provided, the form shows a\n * \"+ Create new target\" affordance that lets users create a DIRECT\n * target on the fly without leaving the dialog. Must return the new\n * target so the form can auto-select it.\n */\n onCreateTarget?: (name: string) => Promise<TargetOption | null>;\n /** Optional extra content (e.g. a draft EntityTagPicker) rendered above the configure-stage actions. */\n extraSection?: ReactNode;\n}\n\nexport function AgentForm({\n onSubmit,\n onCancel,\n isLoading,\n onNavigate,\n targets,\n targetsLoading,\n onCreateTarget,\n extraSection,\n}: AgentFormProps) {\n const tr = useTr();\n const [stage, setStage] = useState<WizardStage>('details');\n const [showApiKey, setShowApiKey] = useState(false);\n const [showInstallInstructions, setShowInstallInstructions] = useState(false);\n const [copiedCommand, setCopiedCommand] = useState<string | null>(null);\n\n // Stage 1: Basic details\n const [name, setName] = useState('');\n // Tracks whether the operator has typed into the name field. Once true,\n // we stop overwriting the value from auto-fill sources (target select +\n // identity probe) so we never clobber their input.\n const [nameEdited, setNameEdited] = useState(false);\n const [tunnelUrl, setTunnelUrl] = useState('');\n const [agentApiKey, setAgentApiKey] = useState('');\n const [selectedTargetId, setSelectedTargetId] = useState('');\n\n // When the operator picks a target, autofill the agent name with the\n // target's display name. Skip if they've already typed something into\n // the name field. The svc append a `-2`/`-3` suffix on collision so\n // it's safe to suggest a duplicate; the actual stored name comes back\n // on the create response.\n useEffect(() => {\n if (nameEdited) return;\n if (!selectedTargetId) return;\n const picked = (targets ?? []).find((t) => t.id === selectedTargetId);\n if (picked?.name) setName(picked.name);\n }, [selectedTargetId, targets, nameEdited]);\n\n // Inline target creation state\n const [showInlineTarget, setShowInlineTarget] = useState(false);\n const [inlineTargetName, setInlineTargetName] = useState('');\n const [creatingTarget, setCreatingTarget] = useState(false);\n const [inlineTargetError, setInlineTargetError] = useState<string | null>(null);\n\n // Stage 2: Validation (via backend-proxied GraphQL query)\n const [validating, setValidating] = useState(false);\n const [healthResult, setHealthResult] = useState<{\n ok: boolean;\n data?: { status: string; version: string; uptime: number };\n error?: string;\n } | null>(null);\n const [identityResult, setIdentityResult] = useState<{\n ok: boolean;\n data?: { hostname: string; platform: string; arch: string };\n error?: string;\n } | null>(null);\n\n // Auto-detected fields (editable overrides)\n const [detectedHostname, setDetectedHostname] = useState('');\n const [detectedPlatform, setDetectedPlatform] = useState('linux');\n const [detectedArch, setDetectedArch] = useState('x86_64');\n const [detectedVersion, setDetectedVersion] = useState('1.0.0');\n\n // Error state for creation failures\n const [createError, setCreateError] = useState<string | null>(null);\n\n // Advanced options (Phase 5B: per-daemon profile name).\n // Defaults to \"default\" (autofilled but editable). Disclosure is closed\n // by default — users only need to touch this for multi-profile setups.\n const [showAdvanced, setShowAdvanced] = useState(false);\n const [profile, setProfile] = useState('default');\n\n // Accessible label/hint/error wiring for every form control. The hook\n // only checks truthiness of `hint` to chain aria-describedby to the\n // always-visible hint <p id={field.hintId}> below each input.\n const HAS_HINT = 'visible';\n const nameField = useField({ hint: HAS_HINT });\n const inlineTargetField = useField({ error: inlineTargetError });\n const tunnelField = useField({ hint: HAS_HINT });\n const apiKeyField = useField({ hint: HAS_HINT });\n const profileField = useField({ hint: HAS_HINT });\n const platformField = useField();\n const archField = useField();\n\n const copyToClipboard = useCallback((text: string, id: string) => {\n navigator.clipboard.writeText(text);\n setCopiedCommand(id);\n setTimeout(() => setCopiedCommand(null), 2000);\n }, []);\n\n const normalizeUrl = (url: string) => {\n let u = url.trim();\n if (u.endsWith('/')) u = u.slice(0, -1);\n return u;\n };\n\n const [runProbe] = useProbeAgentTunnelLazyQuery({ fetchPolicy: 'network-only' });\n\n // Validate the agent through the svc-proxied `probeAgentTunnel` query.\n // svc fans out to /health + /api/profiles/default/agent/identity over\n // its own egress and returns a combined AgentProbeResult — the\n // operator's API key never touches the browser→tunnel path.\n const validateAgent = async () => {\n const baseUrl = normalizeUrl(tunnelUrl);\n if (!baseUrl) return;\n\n setValidating(true);\n setHealthResult(null);\n setIdentityResult(null);\n\n try {\n const { data, error } = await runProbe({\n variables: { url: baseUrl, agentApiKey: agentApiKey || null },\n });\n const probe = data?.probeAgentTunnel;\n if (error || !probe) {\n const msg = error?.message ?? 'Probe failed';\n setHealthResult({ ok: false, error: msg });\n setIdentityResult({ ok: false, error: msg });\n } else {\n setHealthResult(\n probe.healthOk\n ? {\n ok: true,\n data: {\n status: probe.healthStatus ?? 'healthy',\n version: probe.agentVersion ?? 'unknown',\n uptime: probe.uptime ?? 0,\n },\n }\n : { ok: false, error: probe.healthError ?? 'Health check failed' }\n );\n if (probe.agentVersion) setDetectedVersion(probe.agentVersion);\n\n setIdentityResult(\n probe.identityOk\n ? {\n ok: true,\n data: {\n hostname: probe.hostname ?? '',\n platform: probe.platform ?? 'linux',\n arch: probe.architecture ?? 'x86_64',\n },\n }\n : { ok: false, error: probe.identityError ?? 'Identity check failed' }\n );\n if (probe.identityOk) {\n if (probe.platform) setDetectedPlatform(probe.platform);\n if (probe.architecture) setDetectedArch(probe.architecture);\n // Auto-fill name from probe hostname unless (a) the operator\n // has manually typed one, or (b) a target is already selected\n // (target wins as the canonical autogen value).\n if (probe.hostname) {\n setDetectedHostname(probe.hostname);\n if (!nameEdited && !selectedTargetId) setName(probe.hostname);\n }\n }\n }\n } catch (err) {\n const msg = err instanceof Error ? err.message : 'Probe failed';\n setHealthResult({ ok: false, error: msg });\n setIdentityResult({ ok: false, error: msg });\n }\n\n setValidating(false);\n };\n\n // Refs let us short-circuit double-submits before React re-renders\n // the button as disabled. The parent passes `isLoading` (driven by\n // `useState`) and we wire it to the button's `disabled` prop, but\n // `setState` is asynchronous — between the user's first click and\n // React's next commit there is a microtask window in which the button\n // is still clickable. Without this ref a fast double-click fires\n // `addAgentFromTunnel` twice in parallel; the svc sees one in-flight\n // and one fresh call, the second one wins the (workspaceId, name)\n // unique-resolution race, and the workspace ends up with two agent\n // rows (the original autogen + the operator's custom name).\n const submittingRef = useRef(false);\n\n // Create the agent and close the modal\n const handleCreateAgent = async () => {\n if (submittingRef.current) return;\n submittingRef.current = true;\n setCreateError(null);\n\n // Pipe the chosen profile through `metadata.profile`. Phase 5A (svc) is\n // adding first-class AgentProfile rows; in the meantime the backend\n // also reads `metadata.profile` so the create path keeps working\n // regardless of which side of the cut-over the cluster is on.\n const trimmedProfile = profile.trim() || 'default';\n const data: Record<string, unknown> = {\n name: name || detectedHostname || 'Unnamed Agent',\n hostname: detectedHostname || 'unknown',\n platform: detectedPlatform,\n architecture: detectedArch,\n version: detectedVersion,\n tunnelUrl: normalizeUrl(tunnelUrl),\n tunnelStatus: 'ACTIVE',\n agentApiKey,\n metadata: { profile: trimmedProfile },\n ...(selectedTargetId ? { targetId: selectedTargetId } : {}),\n };\n\n try {\n const result = await onSubmit(data);\n const newAgentId = result?.id || null;\n\n if (!newAgentId) {\n // Mutation succeeded but returned no agent ID — treat as failure\n setCreateError('Agent creation returned no ID. The agent may already exist.');\n return;\n }\n\n // Close the modal — the agent list will refetch automatically\n if (onNavigate) {\n onNavigate(`/agents/${newAgentId}`);\n } else {\n onCancel();\n }\n } catch (err) {\n const message = err instanceof Error ? err.message : 'Failed to create agent';\n setCreateError(message);\n } finally {\n submittingRef.current = false;\n }\n };\n\n const isValidationPassed = healthResult?.ok && identityResult?.ok;\n const hasTargets = targets && targets.length > 0;\n // The user must either pick or inline-create a target if inline creation\n // is enabled; otherwise we only require it when targets already exist.\n const targetRequiredButMissing = onCreateTarget\n ? selectedTargetId.length === 0\n : hasTargets && selectedTargetId.length === 0;\n const canProceedToValidate = tunnelUrl.trim().length > 0 && !targetRequiredButMissing;\n\n const handleInlineCreateTarget = useCallback(async () => {\n if (!onCreateTarget || !inlineTargetName.trim()) return;\n setCreatingTarget(true);\n setInlineTargetError(null);\n try {\n const created = await onCreateTarget(inlineTargetName.trim());\n if (created) {\n setSelectedTargetId(created.id);\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else if (wasQuotaHandledLocally()) {\n // Parent surfaced the quota modal — collapse the inline row\n // quietly so the user isn't left with a vague \"try again\"\n // message under an explicit upgrade-your-plan dialog.\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else {\n setInlineTargetError(\n tr('agentsPage.inlineTargetFailed', 'Failed to create target. Please try again.')\n );\n }\n } catch (err) {\n if (isQuotaExhaustedError(err)) {\n // Quota dialog will (or already has) opened at the parent;\n // suppress the generic inline error so the two don't compete.\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else {\n setInlineTargetError(err instanceof Error ? err.message : 'Failed to create target');\n }\n } finally {\n setCreatingTarget(false);\n }\n }, [onCreateTarget, inlineTargetName, tr]);\n\n const renderCopyButton = (text: string, id: string) => {\n const copied = copiedCommand === id;\n return (\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"icon-sm\"\n onClick={() => copyToClipboard(text, id)}\n aria-label={copied ? tr('agentsPage.copied', 'Copied') : tr('agentsPage.copy', 'Copy')}\n className=\"shrink-0\"\n >\n {copied ? (\n <Check className=\"size-3.5 text-status-success-text\" aria-hidden=\"true\" />\n ) : (\n <Copy className=\"size-3.5 text-text-secondary\" aria-hidden=\"true\" />\n )}\n </Button>\n );\n };\n\n const requiredMark = (\n <span aria-hidden=\"true\" className=\"text-status-error-text\">\n {' '}\n *\n </span>\n );\n\n // Stepper\n const steps = [\n { key: 'details', label: tr('agentsPage.stepSetup', 'Setup') },\n { key: 'validate', label: tr('agentsPage.stepValidate', 'Validate') },\n ];\n\n const currentStepIndex = steps.findIndex((s) => s.key === stage);\n\n return (\n <ResponsiveDialog\n open\n onOpenChange={(open) => {\n if (!open && !isLoading) onCancel();\n }}\n >\n {/* Multi-field data-entry dialog: a stray click on the scrim must not\n discard typed input. Escape and the explicit Cancel/X still close. */}\n <ResponsiveDialogContent\n className=\"sm:max-w-xl md:max-h-[min(90vh,52rem)] md:overflow-y-auto\"\n onPointerDownOutside={(event) => event.preventDefault()}\n >\n <ResponsiveDialogHeader>\n <ResponsiveDialogTitle>\n {tr('agentsPage.addNewAgent', 'Add New Agent')}\n </ResponsiveDialogTitle>\n <ResponsiveDialogDescription>\n {tr(\n 'agentsPage.addNewAgentDescription',\n 'Connect a running vibe agent to this workspace.'\n )}\n </ResponsiveDialogDescription>\n </ResponsiveDialogHeader>\n\n <Stepper\n steps={steps}\n active={currentStepIndex}\n onStepClick={(index) => {\n const target = steps[index];\n if (target) setStage(target.key === 'validate' ? 'validate' : 'details');\n }}\n />\n\n <MotionTabPanel tabKey={stage}>\n {stage === 'details' ? (\n <div className=\"space-y-4\">\n {/* Install instructions (collapsible) */}\n <div className=\"border border-border-default rounded-lg overflow-hidden\">\n <button\n type=\"button\"\n onClick={() => setShowInstallInstructions(!showInstallInstructions)}\n aria-expanded={showInstallInstructions}\n className=\"w-full flex items-center justify-between px-4 py-3 bg-bg-sunken hover:bg-bg-sunken/80 transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n >\n <div className=\"flex items-center gap-2\">\n <Download className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n <span className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.installInstructions', 'Agent Install Instructions')}\n </span>\n </div>\n <ChevronRight\n aria-hidden=\"true\"\n className={`size-4 text-text-secondary transition-transform ${showInstallInstructions ? 'rotate-90' : ''}`}\n />\n </button>\n {showInstallInstructions && (\n <div className=\"px-4 py-3 space-y-3 border-t border-border-default\">\n <div className=\"space-y-3\">\n <div>\n <p className=\"text-xs text-text-secondary mb-2\">\n {tr('agentsPage.installStep1', '1. Install the agent globally')}\n </p>\n {/* Curl-first install (works on any OS, no package\n manager). See docs.vibecontrols.com/users/installing-the-agent */}\n <InstallTabs compact />\n </div>\n <div>\n <p className=\"text-xs text-text-secondary mb-1\">\n {tr(\n 'agentsPage.installStep2',\n '2. Start the agent (prints tunnel URL + API key)'\n )}\n </p>\n <div className=\"flex items-center gap-2 bg-bg-sunken rounded-md px-3 py-1.5 font-mono text-xs text-text-primary\">\n <Terminal\n className=\"size-3 text-text-muted flex-shrink-0\"\n aria-hidden=\"true\"\n />\n <code className=\"flex-1 min-w-0 break-words\">vibe start</code>\n {renderCopyButton('vibe start', 'vibe start')}\n </div>\n </div>\n <p className=\"text-xs text-text-secondary pt-1\">\n {tr(\n 'agentsPage.installHint',\n 'After running vibe start, copy the printed tunnel URL and API key into the fields above.'\n )}\n </p>\n </div>\n </div>\n )}\n </div>\n\n {/* Agent Name — visible upfront so operators see (and can\n override) the autogen before validation. The autofill\n chain still runs in the background: picking a target\n pulls in its name; clicking Validate falls back to the\n probed hostname when the user hasn't typed anything.\n The svc dedupes inside the workspace via\n resolveUniqueAgentName(), so suffixes like `-2` may\n still get appended at submit time even when the user\n picked their own string. */}\n <div>\n <label\n htmlFor={nameField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.name', 'Name')}\n </label>\n <Input\n {...nameField.inputProps}\n type=\"text\"\n value={name}\n onChange={(e) => {\n setName(e.target.value);\n setNameEdited(true);\n }}\n placeholder={tr(\n 'agentsPage.namePlaceholderUpfront',\n 'My laptop, prod jump-host, …'\n )}\n className=\"text-base md:text-sm\"\n data-testid=\"agent-form-name-input\"\n />\n <p id={nameField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.nameHint',\n \"How this agent shows up in the UI. Defaults to the target's name (or the machine's hostname after Validate) — leave blank to accept the autogen.\"\n )}\n </p>\n </div>\n\n {/* Target Selection — with inline creation */}\n <div>\n <span className=\"mb-1.5 block text-sm font-medium text-text-primary\">\n {tr('agentsPage.target', 'Target')}\n {requiredMark}\n </span>\n\n {hasTargets && !showInlineTarget && (\n <>\n <SearchableSelect\n placeholder={tr('agentsPage.selectTarget', 'Select a target...')}\n searchPlaceholder={tr('agentsPage.searchTargets', 'Search targets...')}\n options={(targets ?? []).map(\n (tgt): SearchableSelectOption => ({\n value: tgt.id,\n label: tgt.name,\n description: `${tgt.type}${tgt.status ? ` · ${tgt.status}` : ''}`,\n })\n )}\n value={selectedTargetId}\n onChange={setSelectedTargetId}\n clearable\n />\n <p className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.targetDescription',\n 'The target machine this agent will be installed on.'\n )}{' '}\n {onCreateTarget && (\n <button\n type=\"button\"\n onClick={() => {\n setShowInlineTarget(true);\n setInlineTargetName(name.trim() || '');\n }}\n className=\"text-text-link hover:text-text-linkHover hover:underline inline-flex items-center gap-1 rounded-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n >\n <Plus className=\"size-3\" aria-hidden=\"true\" />\n {tr('agentsPage.createNewTarget', 'Create a new target')}\n </button>\n )}\n </p>\n </>\n )}\n\n {/* Empty state prompt (no targets exist yet) */}\n {!hasTargets && !targetsLoading && onCreateTarget && !showInlineTarget && (\n <div className=\"p-3 bg-bg-sunken border border-border-default rounded-lg\">\n <p className=\"text-sm text-text-secondary mb-2\">\n {tr(\n 'agentsPage.noTargetsInlinePrompt',\n \"You don't have any targets yet. Create one now to install this agent on it.\"\n )}\n </p>\n <Button\n type=\"button\"\n size=\"sm\"\n onClick={() => {\n setShowInlineTarget(true);\n setInlineTargetName(name.trim() || '');\n }}\n >\n <Plus className=\"size-4\" aria-hidden=\"true\" />\n {tr('agentsPage.createFirstTarget', 'Create first target')}\n </Button>\n </div>\n )}\n\n {/* Inline creation form */}\n {showInlineTarget && onCreateTarget && (\n <div className=\"p-3 bg-bg-sunken border border-border-default rounded-lg space-y-2\">\n <p className=\"text-xs font-medium text-text-secondary\">\n {tr(\n 'agentsPage.newDirectTarget',\n 'New target (Direct — you can change the type later)'\n )}\n </p>\n <div>\n <label\n htmlFor={inlineTargetField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.targetName', 'Target name')}\n </label>\n <Input\n {...inlineTargetField.inputProps}\n type=\"text\"\n value={inlineTargetName}\n onChange={(e) => setInlineTargetName(e.target.value)}\n placeholder={tr('agentsPage.targetName', 'Target name')}\n className=\"text-base md:text-sm\"\n onKeyDown={(e) => {\n if (e.key === 'Enter') {\n e.preventDefault();\n void handleInlineCreateTarget();\n }\n }}\n />\n {inlineTargetError && (\n <p\n id={inlineTargetField.errorId}\n role=\"alert\"\n className=\"mt-1.5 text-sm text-status-error-text\"\n >\n {inlineTargetError}\n </p>\n )}\n </div>\n <div className=\"flex flex-wrap items-center gap-2\">\n <Button\n type=\"button\"\n size=\"sm\"\n onClick={() => void handleInlineCreateTarget()}\n disabled={!inlineTargetName.trim() || creatingTarget}\n aria-busy={creatingTarget}\n >\n {creatingTarget ? (\n <Loader2 className=\"size-3.5 animate-spin\" aria-hidden=\"true\" />\n ) : (\n <Check className=\"size-3.5\" aria-hidden=\"true\" />\n )}\n {tr('agentsPage.create', 'Create')}\n </Button>\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"sm\"\n onClick={() => {\n setShowInlineTarget(false);\n setInlineTargetName('');\n setInlineTargetError(null);\n }}\n >\n {tr('agentsPage.cancel', 'Cancel')}\n </Button>\n </div>\n </div>\n )}\n\n {/* Loading placeholder */}\n {targetsLoading && !hasTargets && (\n <div\n role=\"status\"\n className=\"p-3 bg-bg-sunken border border-border-default rounded-lg flex items-center gap-2 text-sm text-text-secondary\"\n >\n <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n {tr('agentsPage.loadingTargets', 'Loading targets...')}\n </div>\n )}\n </div>\n\n {/* API/Tunnel URL */}\n <div>\n <label\n htmlFor={tunnelField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.apiTunnelUrl', 'API / Tunnel URL')}\n {requiredMark}\n </label>\n <Input\n {...tunnelField.inputProps}\n type=\"url\"\n value={tunnelUrl}\n onChange={(e) => setTunnelUrl(e.target.value)}\n placeholder=\"https://your-tunnel.trycloudflare.com\"\n aria-required=\"true\"\n className=\"text-base md:text-sm font-mono\"\n />\n <p id={tunnelField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.tunnelUrlHint',\n \"The agent's tunnel URL or local API URL (e.g. http://localhost:3005)\"\n )}\n </p>\n </div>\n\n {/* Agent API Key */}\n <div>\n <label\n htmlFor={apiKeyField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.agentApiKey', 'Agent API Key')}\n {requiredMark}\n </label>\n <div className=\"relative\">\n <Input\n {...apiKeyField.inputProps}\n type={showApiKey ? 'text' : 'password'}\n value={agentApiKey}\n onChange={(e) => setAgentApiKey(e.target.value)}\n placeholder=\"vcak_...\"\n aria-required=\"true\"\n className=\"pr-10 text-base md:text-sm font-mono\"\n />\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"icon-sm\"\n onClick={() => setShowApiKey(!showApiKey)}\n aria-label={\n showApiKey\n ? tr('agentsPage.hideApiKey', 'Hide API key')\n : tr('agentsPage.showApiKey', 'Show API key')\n }\n aria-pressed={showApiKey}\n className=\"absolute right-1 top-1/2 -translate-y-1/2\"\n >\n {showApiKey ? (\n <EyeOff className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n ) : (\n <Eye className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n )}\n </Button>\n </div>\n <p id={apiKeyField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr('agentsPage.apiKeyHint', 'Run')}{' '}\n <code className=\"bg-bg-sunken px-1 rounded\">vibe key</code>{' '}\n {tr(\n 'agentsPage.apiKeyHintSuffix',\n 'on the agent to get this. Changes on restart.'\n )}\n </p>\n </div>\n\n {/* Advanced options — per-daemon profile name (Phase 5B) */}\n <div className=\"border border-border-default rounded-lg overflow-hidden\">\n <button\n type=\"button\"\n onClick={() => setShowAdvanced((v) => !v)}\n className=\"w-full flex items-center justify-between px-4 py-2.5 bg-bg-sunken hover:bg-bg-sunken/80 transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n aria-expanded={showAdvanced}\n data-testid=\"agent-form-advanced-toggle\"\n >\n <div className=\"flex items-center gap-2\">\n <Settings2 className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n <span className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.advancedOptions', 'Advanced options')}\n </span>\n </div>\n <ChevronDown\n aria-hidden=\"true\"\n className={`size-4 text-text-secondary transition-transform ${showAdvanced ? 'rotate-180' : ''}`}\n />\n </button>\n {showAdvanced && (\n <div className=\"px-4 py-3 space-y-3 border-t border-border-default\">\n <div>\n <label\n htmlFor={profileField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.profileName', 'Profile name')}\n </label>\n <Input\n {...profileField.inputProps}\n type=\"text\"\n value={profile}\n onChange={(e) => setProfile(e.target.value)}\n placeholder=\"default\"\n className=\"text-base md:text-sm font-mono\"\n data-testid=\"agent-form-profile-input\"\n />\n <p id={profileField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.profileNameHint',\n 'Each profile runs an isolated CLI on the daemon. Leave as \"default\" unless you want this agent to host multiple parallel profiles.'\n )}\n </p>\n </div>\n </div>\n )}\n </div>\n\n {extraSection && (\n <div className=\"border-t border-border-default pt-4 mt-4\">{extraSection}</div>\n )}\n\n {/* Actions */}\n <ResponsiveDialogFooter className=\"pt-2\">\n <Button type=\"button\" variant=\"outline\" onClick={onCancel}>\n {tr('agentsPage.cancel', 'Cancel')}\n </Button>\n <Button\n type=\"button\"\n disabled={!canProceedToValidate}\n onClick={() => {\n setStage('validate');\n validateAgent();\n }}\n >\n {tr('agentsPage.nextValidate', 'Next: Validate')}\n <ChevronRight className=\"size-4\" aria-hidden=\"true\" />\n </Button>\n </ResponsiveDialogFooter>\n </div>\n ) : (\n <div className=\"space-y-4\">\n {/* Validation Results */}\n <div className=\"space-y-3\">\n {/* Health Check */}\n <div\n role=\"status\"\n className={`flex items-center gap-3 p-3 rounded-lg border ${\n healthResult === null\n ? 'border-border-default bg-bg-sunken'\n : healthResult.ok\n ? 'border-status-success-border bg-status-success-bg-subtle'\n : 'border-status-error-border bg-status-error-bg-subtle'\n }`}\n >\n {validating && !healthResult ? (\n <Loader2\n className=\"size-5 text-text-secondary animate-spin\"\n aria-hidden=\"true\"\n />\n ) : healthResult?.ok ? (\n <CheckCircle2 className=\"size-5 text-status-success-text\" aria-hidden=\"true\" />\n ) : healthResult ? (\n <XCircle className=\"size-5 text-status-error-text\" aria-hidden=\"true\" />\n ) : (\n <div\n className=\"size-5 rounded-full border-2 border-border-default\"\n aria-hidden=\"true\"\n />\n )}\n <div className=\"flex-1 min-w-0\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.healthCheck', 'Health Check')}\n </p>\n {healthResult?.ok && healthResult.data && (\n <p className=\"text-xs text-text-secondary break-words\">\n Status: {healthResult.data.status} | Version: {healthResult.data.version} |\n Uptime: {Math.round(healthResult.data.uptime)}s\n </p>\n )}\n {healthResult && !healthResult.ok && (\n <p className=\"text-xs text-status-error-text break-words\">\n {healthResult.error}\n </p>\n )}\n </div>\n </div>\n\n {/* API Access Check */}\n <div\n role=\"status\"\n className={`flex items-center gap-3 p-3 rounded-lg border ${\n identityResult === null\n ? 'border-border-default bg-bg-sunken'\n : identityResult.ok\n ? 'border-status-success-border bg-status-success-bg-subtle'\n : 'border-status-error-border bg-status-error-bg-subtle'\n }`}\n >\n {validating && !identityResult ? (\n <Loader2\n className=\"size-5 text-text-secondary animate-spin\"\n aria-hidden=\"true\"\n />\n ) : identityResult?.ok ? (\n <CheckCircle2 className=\"size-5 text-status-success-text\" aria-hidden=\"true\" />\n ) : identityResult ? (\n <XCircle className=\"size-5 text-status-error-text\" aria-hidden=\"true\" />\n ) : (\n <div\n className=\"size-5 rounded-full border-2 border-border-default\"\n aria-hidden=\"true\"\n />\n )}\n <div className=\"flex-1 min-w-0\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.apiAccess', 'API Access')}\n </p>\n {identityResult?.ok && identityResult.data && (\n <p className=\"text-xs text-text-secondary break-words\">\n Host: {identityResult.data.hostname} | {identityResult.data.platform} /{' '}\n {identityResult.data.arch}\n </p>\n )}\n {identityResult && !identityResult.ok && (\n <p className=\"text-xs text-status-error-text break-words\">\n {identityResult.error}\n </p>\n )}\n </div>\n </div>\n </div>\n\n {/* Retry button */}\n {!validating && (!healthResult?.ok || !identityResult?.ok) && (\n <Button type=\"button\" variant=\"ghost\" size=\"sm\" onClick={validateAgent}>\n <RefreshCw className=\"size-3.5\" aria-hidden=\"true\" />\n {tr('agentsPage.retryValidation', 'Retry validation')}\n </Button>\n )}\n\n {/* Detected info (editable overrides) — Name lives upfront\n now; this section shows the validate-time fields only. */}\n {isValidationPassed && (\n <div className=\"space-y-3 pt-2\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.detectedAgentInfo', 'Detected Agent Info')}\n </p>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-3\">\n <div>\n <label\n htmlFor={platformField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.platform', 'Platform')}\n </label>\n <Select value={detectedPlatform} onValueChange={setDetectedPlatform}>\n <SelectTrigger id={platformField.id} className=\"text-base md:text-sm\">\n <SelectValue />\n </SelectTrigger>\n <SelectContent>\n <SelectItem value=\"linux\">Linux</SelectItem>\n <SelectItem value=\"darwin\">macOS</SelectItem>\n <SelectItem value=\"windows\">Windows</SelectItem>\n </SelectContent>\n </Select>\n </div>\n <div>\n <label\n htmlFor={archField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.architecture', 'Architecture')}\n </label>\n <Select value={detectedArch} onValueChange={setDetectedArch}>\n <SelectTrigger id={archField.id} className=\"text-base md:text-sm\">\n <SelectValue />\n </SelectTrigger>\n <SelectContent>\n <SelectItem value=\"x86_64\">x86_64</SelectItem>\n <SelectItem value=\"arm64\">arm64</SelectItem>\n <SelectItem value=\"aarch64\">aarch64</SelectItem>\n </SelectContent>\n </Select>\n </div>\n </div>\n </div>\n )}\n\n {/* Creation error */}\n {createError && (\n <div\n role=\"alert\"\n className=\"p-3 bg-status-error-bg-subtle border border-status-error-border rounded-lg\"\n >\n <div className=\"flex items-center gap-2\">\n <XCircle\n className=\"size-5 text-status-error-text flex-shrink-0\"\n aria-hidden=\"true\"\n />\n <p className=\"text-sm text-status-error-text break-words\">{createError}</p>\n </div>\n <div className=\"flex flex-wrap items-center gap-2 mt-3\">\n <Button\n type=\"button\"\n variant=\"outline\"\n size=\"sm\"\n onClick={() => {\n setCreateError(null);\n // Reset form to allow entering different credentials\n setStage('details');\n setTunnelUrl('');\n setAgentApiKey('');\n setHealthResult(null);\n setIdentityResult(null);\n }}\n >\n <RefreshCw className=\"size-3.5\" aria-hidden=\"true\" />\n {tr('agentsPage.tryDifferentAgent', 'Try Different Agent')}\n </Button>\n <Button type=\"button\" variant=\"ghost\" size=\"sm\" onClick={onCancel}>\n {tr('agentsPage.close', 'Close')}\n </Button>\n </div>\n </div>\n )}\n\n {/* Actions */}\n <ResponsiveDialogFooter className=\"pt-2\">\n <Button type=\"button\" variant=\"outline\" onClick={() => setStage('details')}>\n <ChevronLeft className=\"size-4\" aria-hidden=\"true\" />\n {tr('agentsPage.back', 'Back')}\n </Button>\n <Button\n type=\"button\"\n disabled={!isValidationPassed || isLoading || validating}\n onClick={handleCreateAgent}\n aria-busy={isLoading}\n >\n {isLoading ? (\n <>\n <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n {tr('agentsPage.adding', 'Adding...')}\n </>\n ) : (\n <>\n {tr('agentsPage.addAgent', 'Add Agent')}\n <ChevronRight className=\"size-4\" aria-hidden=\"true\" />\n </>\n )}\n </Button>\n </ResponsiveDialogFooter>\n </div>\n )}\n </MotionTabPanel>\n </ResponsiveDialogContent>\n </ResponsiveDialog>\n );\n}\n"],"mappings":";;;;;;;;;;;;;AAwEA,SAAgB,GAAU,EACxB,cACA,aACA,cACA,gBACA,YACA,oBACA,mBACA,oBACiB;CACjB,IAAM,IAAK,GAAO,EACZ,CAAC,GAAO,KAAY,EAAsB,UAAU,EACpD,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAyB,MAA8B,EAAS,GAAM,EACvE,CAAC,IAAe,MAAoB,EAAwB,KAAK,EAGjE,CAAC,GAAM,KAAW,EAAS,GAAG,EAI9B,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAW,MAAgB,EAAS,GAAG,EACxC,CAAC,GAAa,MAAkB,EAAS,GAAG,EAC5C,CAAC,GAAkB,MAAuB,EAAS,GAAG;AAO5D,UAAgB;AAEd,MADI,KACA,CAAC,EAAkB;EACvB,IAAM,KAAU,KAAW,EAAE,EAAE,MAAM,MAAM,EAAE,OAAO,EAAiB;AACrE,EAAI,GAAQ,QAAM,EAAQ,EAAO,KAAK;IACrC;EAAC;EAAkB;EAAS;EAAW,CAAC;CAG3C,IAAM,CAAC,GAAkB,KAAuB,EAAS,GAAM,EACzD,CAAC,GAAkB,KAAuB,EAAS,GAAG,EACtD,CAAC,GAAgB,MAAqB,EAAS,GAAM,EACrD,CAAC,GAAmB,KAAwB,EAAwB,KAAK,EAGzE,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAc,KAAmB,EAI9B,KAAK,EACT,CAAC,GAAgB,KAAqB,EAIlC,KAAK,EAGT,CAAC,IAAkB,MAAuB,EAAS,GAAG,EACtD,CAAC,IAAkB,MAAuB,EAAS,QAAQ,EAC3D,CAAC,IAAc,MAAmB,EAAS,SAAS,EACpD,CAAC,IAAiB,MAAsB,EAAS,QAAQ,EAGzD,CAAC,IAAa,KAAkB,EAAwB,KAAK,EAK7D,CAAC,GAAc,MAAmB,EAAS,GAAM,EACjD,CAAC,IAAS,MAAc,EAAS,UAAU,EAK3C,IAAW,WACX,IAAY,EAAS,EAAE,MAAM,GAAU,CAAC,EACxC,IAAoB,EAAS,EAAE,OAAO,GAAmB,CAAC,EAC1D,IAAc,EAAS,EAAE,MAAM,GAAU,CAAC,EAC1C,IAAc,EAAS,EAAE,MAAM,GAAU,CAAC,EAC1C,IAAe,EAAS,EAAE,MAAM,GAAU,CAAC,EAC3C,KAAgB,GAAU,EAC1B,KAAY,GAAU,EAEtB,KAAkB,IAAa,GAAc,MAAe;AAGhE,EAFA,UAAU,UAAU,UAAU,EAAK,EACnC,GAAiB,EAAG,EACpB,iBAAiB,GAAiB,KAAK,EAAE,IAAK;IAC7C,EAAE,CAAC,EAEA,MAAgB,MAAgB;EACpC,IAAI,IAAI,EAAI,MAAM;AAElB,SADI,EAAE,SAAS,IAAI,KAAE,IAAI,EAAE,MAAM,GAAG,GAAG,GAChC;IAGH,CAAC,MAAY,EAA6B,EAAE,aAAa,gBAAgB,CAAC,EAM1E,KAAgB,YAAY;EAChC,IAAM,IAAU,GAAa,EAAU;AAClC,SAIL;GAFA,GAAc,GAAK,EACnB,EAAgB,KAAK,EACrB,EAAkB,KAAK;AAEvB,OAAI;IACF,IAAM,EAAE,SAAM,aAAU,MAAM,GAAS,EACrC,WAAW;KAAE,KAAK;KAAS,aAAa,KAAe;KAAM,EAC9D,CAAC,EACI,IAAQ,GAAM;AACpB,QAAI,KAAS,CAAC,GAAO;KACnB,IAAM,IAAM,GAAO,WAAW;AAE9B,KADA,EAAgB;MAAE,IAAI;MAAO,OAAO;MAAK,CAAC,EAC1C,EAAkB;MAAE,IAAI;MAAO,OAAO;MAAK,CAAC;UA4B5C,CA1BA,EACE,EAAM,WACF;KACE,IAAI;KACJ,MAAM;MACJ,QAAQ,EAAM,gBAAgB;MAC9B,SAAS,EAAM,gBAAgB;MAC/B,QAAQ,EAAM,UAAU;MACzB;KACF,GACD;KAAE,IAAI;KAAO,OAAO,EAAM,eAAe;KAAuB,CACrE,EACG,EAAM,gBAAc,GAAmB,EAAM,aAAa,EAE9D,EACE,EAAM,aACF;KACE,IAAI;KACJ,MAAM;MACJ,UAAU,EAAM,YAAY;MAC5B,UAAU,EAAM,YAAY;MAC5B,MAAM,EAAM,gBAAgB;MAC7B;KACF,GACD;KAAE,IAAI;KAAO,OAAO,EAAM,iBAAiB;KAAyB,CACzE,EACG,EAAM,eACJ,EAAM,YAAU,GAAoB,EAAM,SAAS,EACnD,EAAM,gBAAc,GAAgB,EAAM,aAAa,EAIvD,EAAM,aACR,GAAoB,EAAM,SAAS,EAC/B,CAAC,KAAc,CAAC,KAAkB,EAAQ,EAAM,SAAS;YAI5D,GAAK;IACZ,IAAM,IAAM,aAAe,QAAQ,EAAI,UAAU;AAEjD,IADA,EAAgB;KAAE,IAAI;KAAO,OAAO;KAAK,CAAC,EAC1C,EAAkB;KAAE,IAAI;KAAO,OAAO;KAAK,CAAC;;AAG9C,MAAc,GAAM;;IAahB,IAAgB,GAAO,GAAM,EAG7B,KAAoB,YAAY;AACpC,MAAI,EAAc,QAAS;AAE3B,EADA,EAAc,UAAU,IACxB,EAAe,KAAK;EAMpB,IAAM,IAAiB,GAAQ,MAAM,IAAI,WACnC,IAAgC;GACpC,MAAM,KAAQ,MAAoB;GAClC,UAAU,MAAoB;GAC9B,UAAU;GACV,cAAc;GACd,SAAS;GACT,WAAW,GAAa,EAAU;GAClC,cAAc;GACd;GACA,UAAU,EAAE,SAAS,GAAgB;GACrC,GAAI,IAAmB,EAAE,UAAU,GAAkB,GAAG,EAAE;GAC3D;AAED,MAAI;GAEF,IAAM,KADS,MAAM,GAAS,EAAK,GACR,MAAM;AAEjC,OAAI,CAAC,GAAY;AAEf,MAAe,8DAA8D;AAC7E;;AAIF,GAAI,KACF,GAAW,WAAW,IAAa,GAEnC,GAAU;WAEL,GAAK;AAEZ,KADgB,aAAe,QAAQ,EAAI,UAAU,yBAC9B;YACf;AACR,KAAc,UAAU;;IAItB,KAAqB,GAAc,MAAM,GAAgB,IACzD,IAAa,KAAW,EAAQ,SAAS,GAGzC,MAA2B,KAE7B,MADA,EAAiB,WAAW,GAE1B,KAAuB,EAAU,MAAM,CAAC,SAAS,KAAK,CAAC,IAEvD,KAA2B,GAAY,YAAY;AACnD,SAAC,KAAkB,CAAC,EAAiB,MAAM,GAE/C;GADA,GAAkB,GAAK,EACvB,EAAqB,KAAK;AAC1B,OAAI;IACF,IAAM,IAAU,MAAM,EAAe,EAAiB,MAAM,CAAC;AAC7D,IAAI,KACF,GAAoB,EAAQ,GAAG,EAC/B,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IACd,GAAwB,IAIjC,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IAEvB,EACE,EAAG,iCAAiC,6CAA6C,CAClF;YAEI,GAAK;AACZ,IAAI,EAAsB,EAAI,IAG5B,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IAEvB,EAAqB,aAAe,QAAQ,EAAI,UAAU,0BAA0B;aAE9E;AACR,OAAkB,GAAM;;;IAEzB;EAAC;EAAgB;EAAkB;EAAG,CAAC,EAEpC,MAAoB,GAAc,MAAe;EACrD,IAAM,IAAS,OAAkB;AACjC,SACE,kBAAC,GAAD;GACE,MAAK;GACL,SAAQ;GACR,MAAK;GACL,eAAe,GAAgB,GAAM,EAAG;GACxC,cAAY,IAAS,EAAG,qBAAqB,SAAS,GAAG,EAAG,mBAAmB,OAAO;GACtF,WAAU;aAET,IACC,kBAAC,IAAD;IAAO,WAAU;IAAoC,eAAY;IAAS,CAAA,GAE1E,kBAAC,IAAD;IAAM,WAAU;IAA+B,eAAY;IAAS,CAAA;GAE/D,CAAA;IAIP,IACJ,kBAAC,QAAD;EAAM,eAAY;EAAO,WAAU;YAAnC,CACG,KAAI,IAEA;KAIH,IAAQ,CACZ;EAAE,KAAK;EAAW,OAAO,EAAG,wBAAwB,QAAQ;EAAE,EAC9D;EAAE,KAAK;EAAY,OAAO,EAAG,2BAA2B,WAAW;EAAE,CACtE,EAEK,KAAmB,EAAM,WAAW,MAAM,EAAE,QAAQ,EAAM;AAEhE,QACE,kBAAC,IAAD;EACE,MAAA;EACA,eAAe,MAAS;AACtB,GAAI,CAAC,KAAQ,CAAC,KAAW,GAAU;;YAKrC,kBAAC,IAAD;GACE,WAAU;GACV,uBAAuB,MAAU,EAAM,gBAAgB;aAFzD;IAIE,kBAAC,IAAD,EAAA,UAAA,CACE,kBAAC,IAAD,EAAA,UACG,EAAG,0BAA0B,gBAAgB,EACxB,CAAA,EACxB,kBAAC,IAAD,EAAA,UACG,EACC,qCACA,kDACD,EAC2B,CAAA,CACP,EAAA,CAAA;IAEzB,kBAAC,IAAD;KACS;KACP,QAAQ;KACR,cAAc,MAAU;MACtB,IAAM,IAAS,EAAM;AACrB,MAAI,KAAQ,EAAS,EAAO,QAAQ,aAAa,aAAa,UAAU;;KAE1E,CAAA;IAEF,kBAAC,IAAD;KAAgB,QAAQ;eACrB,MAAU,YACT,kBAAC,OAAD;MAAK,WAAU;gBAAf;OAEE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,GAA2B,CAAC,EAAwB;SACnE,iBAAe;SACf,WAAU;mBAJZ,CAME,kBAAC,OAAD;UAAK,WAAU;oBAAf,CACE,kBAAC,IAAD;WAAU,WAAU;WAA6B,eAAY;WAAS,CAAA,EACtE,kBAAC,QAAD;WAAM,WAAU;qBACb,EAAG,kCAAkC,6BAA6B;WAC9D,CAAA,CACH;aACN,kBAAC,GAAD;UACE,eAAY;UACZ,WAAW,mDAAmD,IAA0B,cAAc;UACtG,CAAA,CACK;YACR,KACC,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,2BAA2B,gCAAgC;YAC7D,CAAA,EAGJ,kBAAC,IAAD,EAAa,SAAA,IAAU,CAAA,CACnB,EAAA,CAAA;WACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EACC,2BACA,mDACD;YACC,CAAA,EACJ,kBAAC,OAAD;YAAK,WAAU;sBAAf;aACE,kBAAC,IAAD;cACE,WAAU;cACV,eAAY;cACZ,CAAA;aACF,kBAAC,QAAD;cAAM,WAAU;wBAA6B;cAAiB,CAAA;aAC7D,GAAiB,cAAc,aAAa;aACzC;cACF,EAAA,CAAA;WACN,kBAAC,KAAD;YAAG,WAAU;sBACV,EACC,0BACA,2FACD;YACC,CAAA;WACA;;SACF,CAAA,CAEJ;;OAWN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAU;SACnB,WAAU;mBAET,EAAG,mBAAmB,OAAO;SACxB,CAAA;QACR,kBAAC,GAAD;SACE,GAAI,EAAU;SACd,MAAK;SACL,OAAO;SACP,WAAW,MAAM;AAEf,UADA,EAAQ,EAAE,OAAO,MAAM,EACvB,GAAc,GAAK;;SAErB,aAAa,EACX,qCACA,+BACD;SACD,WAAU;SACV,eAAY;SACZ,CAAA;QACF,kBAAC,KAAD;SAAG,IAAI,EAAU;SAAQ,WAAU;mBAChC,EACC,uBACA,mJACD;SACC,CAAA;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,QAAD;SAAM,WAAU;mBAAhB,CACG,EAAG,qBAAqB,SAAS,EACjC,EACI;;QAEN,KAAc,CAAC,KACd,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,IAAD;SACE,aAAa,EAAG,2BAA2B,qBAAqB;SAChE,mBAAmB,EAAG,4BAA4B,oBAAoB;SACtE,UAAU,KAAW,EAAE,EAAE,KACtB,OAAiC;UAChC,OAAO,EAAI;UACX,OAAO,EAAI;UACX,aAAa,GAAG,EAAI,OAAO,EAAI,SAAS,MAAM,EAAI,WAAW;UAC9D,EACF;SACD,OAAO;SACP,UAAU;SACV,WAAA;SACA,CAAA,EACF,kBAAC,KAAD;SAAG,WAAU;mBAAb;UACG,EACC,gCACA,sDACD;UAAE;UACF,KACC,kBAAC,UAAD;WACE,MAAK;WACL,eAAe;AAEb,YADA,EAAoB,GAAK,EACzB,EAAoB,EAAK,MAAM,IAAI,GAAG;;WAExC,WAAU;qBANZ,CAQE,kBAAC,IAAD;YAAM,WAAU;YAAS,eAAY;YAAS,CAAA,EAC7C,EAAG,8BAA8B,sBAAsB,CACjD;;UAET;WACH,EAAA,CAAA;QAIJ,CAAC,KAAc,CAAC,MAAkB,KAAkB,CAAC,KACpD,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,KAAD;UAAG,WAAU;oBACV,EACC,oCACA,8EACD;UACC,CAAA,EACJ,kBAAC,GAAD;UACE,MAAK;UACL,MAAK;UACL,eAAe;AAEb,WADA,EAAoB,GAAK,EACzB,EAAoB,EAAK,MAAM,IAAI,GAAG;;oBAL1C,CAQE,kBAAC,IAAD;WAAM,WAAU;WAAS,eAAY;WAAS,CAAA,EAC7C,EAAG,gCAAgC,sBAAsB,CACnD;YACL;;QAIP,KAAoB,KACnB,kBAAC,OAAD;SAAK,WAAU;mBAAf;UACE,kBAAC,KAAD;WAAG,WAAU;qBACV,EACC,8BACA,sDACD;WACC,CAAA;UACJ,kBAAC,OAAD,EAAA,UAAA;WACE,kBAAC,SAAD;YACE,SAAS,EAAkB;YAC3B,WAAU;sBAET,EAAG,yBAAyB,cAAc;YACrC,CAAA;WACR,kBAAC,GAAD;YACE,GAAI,EAAkB;YACtB,MAAK;YACL,OAAO;YACP,WAAW,MAAM,EAAoB,EAAE,OAAO,MAAM;YACpD,aAAa,EAAG,yBAAyB,cAAc;YACvD,WAAU;YACV,YAAY,MAAM;AAChB,aAAI,EAAE,QAAQ,YACZ,EAAE,gBAAgB,EACb,IAA0B;;YAGnC,CAAA;WACD,KACC,kBAAC,KAAD;YACE,IAAI,EAAkB;YACtB,MAAK;YACL,WAAU;sBAET;YACC,CAAA;WAEF,EAAA,CAAA;UACN,kBAAC,OAAD;WAAK,WAAU;qBAAf,CACE,kBAAC,GAAD;YACE,MAAK;YACL,MAAK;YACL,eAAe,KAAK,IAA0B;YAC9C,UAAU,CAAC,EAAiB,MAAM,IAAI;YACtC,aAAW;sBALb,CAOG,IACC,kBAAC,GAAD;aAAS,WAAU;aAAwB,eAAY;aAAS,CAAA,GAEhE,kBAAC,IAAD;aAAO,WAAU;aAAW,eAAY;aAAS,CAAA,EAElD,EAAG,qBAAqB,SAAS,CAC3B;eACT,kBAAC,GAAD;YACE,MAAK;YACL,SAAQ;YACR,MAAK;YACL,eAAe;AAGb,aAFA,EAAoB,GAAM,EAC1B,EAAoB,GAAG,EACvB,EAAqB,KAAK;;sBAG3B,EAAG,qBAAqB,SAAS;YAC3B,CAAA,CACL;;UACF;;QAIP,MAAkB,CAAC,KAClB,kBAAC,OAAD;SACE,MAAK;SACL,WAAU;mBAFZ,CAIE,kBAAC,GAAD;UAAS,WAAU;UAAsB,eAAY;UAAS,CAAA,EAC7D,EAAG,6BAA6B,qBAAqB,CAClD;;QAEJ,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAY;SACrB,WAAU;mBAFZ,CAIG,EAAG,2BAA2B,mBAAmB,EACjD,EACK;;QACR,kBAAC,GAAD;SACE,GAAI,EAAY;SAChB,MAAK;SACL,OAAO;SACP,WAAW,MAAM,GAAa,EAAE,OAAO,MAAM;SAC7C,aAAY;SACZ,iBAAc;SACd,WAAU;SACV,CAAA;QACF,kBAAC,KAAD;SAAG,IAAI,EAAY;SAAQ,WAAU;mBAClC,EACC,4BACA,uEACD;SACC,CAAA;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAY;SACrB,WAAU;mBAFZ,CAIG,EAAG,0BAA0B,gBAAgB,EAC7C,EACK;;QACR,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,GAAI,EAAY;UAChB,MAAM,IAAa,SAAS;UAC5B,OAAO;UACP,WAAW,MAAM,GAAe,EAAE,OAAO,MAAM;UAC/C,aAAY;UACZ,iBAAc;UACd,WAAU;UACV,CAAA,EACF,kBAAC,GAAD;UACE,MAAK;UACL,SAAQ;UACR,MAAK;UACL,eAAe,GAAc,CAAC,EAAW;UACzC,cACE,IACI,EAAG,yBAAyB,eAAe,GAC3C,EAAG,yBAAyB,eAAe;UAEjD,gBAAc;UACd,WAAU;oBAGR,EADD,IACE,KAEA,IAFD;WAAQ,WAAU;WAA6B,eAAY;WAAS,CAEH;UAE5D,CAAA,CACL;;QACN,kBAAC,KAAD;SAAG,IAAI,EAAY;SAAQ,WAAU;mBAArC;UACG,EAAG,yBAAyB,MAAM;UAAE;UACrC,kBAAC,QAAD;WAAM,WAAU;qBAA4B;WAAe,CAAA;UAAC;UAC3D,EACC,+BACA,gDACD;UACC;;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,IAAiB,MAAM,CAAC,EAAE;SACzC,WAAU;SACV,iBAAe;SACf,eAAY;mBALd,CAOE,kBAAC,OAAD;UAAK,WAAU;oBAAf,CACE,kBAAC,IAAD;WAAW,WAAU;WAA6B,eAAY;WAAS,CAAA,EACvE,kBAAC,QAAD;WAAM,WAAU;qBACb,EAAG,8BAA8B,mBAAmB;WAChD,CAAA,CACH;aACN,kBAAC,IAAD;UACE,eAAY;UACZ,WAAW,mDAAmD,IAAe,eAAe;UAC5F,CAAA,CACK;YACR,KACC,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,OAAD,EAAA,UAAA;UACE,kBAAC,SAAD;WACE,SAAS,EAAa;WACtB,WAAU;qBAET,EAAG,0BAA0B,eAAe;WACvC,CAAA;UACR,kBAAC,GAAD;WACE,GAAI,EAAa;WACjB,MAAK;WACL,OAAO;WACP,WAAW,MAAM,GAAW,EAAE,OAAO,MAAM;WAC3C,aAAY;WACZ,WAAU;WACV,eAAY;WACZ,CAAA;UACF,kBAAC,KAAD;WAAG,IAAI,EAAa;WAAQ,WAAU;qBACnC,EACC,8BACA,uIACD;WACC,CAAA;UACA,EAAA,CAAA;SACF,CAAA,CAEJ;;OAEL,MACC,kBAAC,OAAD;QAAK,WAAU;kBAA4C;QAAmB,CAAA;OAIhF,kBAAC,IAAD;QAAwB,WAAU;kBAAlC,CACE,kBAAC,GAAD;SAAQ,MAAK;SAAS,SAAQ;SAAU,SAAS;mBAC9C,EAAG,qBAAqB,SAAS;SAC3B,CAAA,EACT,kBAAC,GAAD;SACE,MAAK;SACL,UAAU,CAAC;SACX,eAAe;AAEb,UADA,EAAS,WAAW,EACpB,IAAe;;mBALnB,CAQG,EAAG,2BAA2B,iBAAiB,EAChD,kBAAC,GAAD;UAAc,WAAU;UAAS,eAAY;UAAS,CAAA,CAC/C;WACc;;OACrB;UAEN,kBAAC,OAAD;MAAK,WAAU;gBAAf;OAEE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CAEE,kBAAC,OAAD;SACE,MAAK;SACL,WAAW,iDACT,MAAiB,OACb,uCACA,EAAa,KACX,6DACA;mBAPV,CAUG,KAAc,CAAC,IACd,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,GACA,GAAc,KAChB,kBAAC,IAAD;UAAc,WAAU;UAAkC,eAAY;UAAS,CAAA,GAC7E,IACF,kBAAC,GAAD;UAAS,WAAU;UAAgC,eAAY;UAAS,CAAA,GAExE,kBAAC,OAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EAEJ,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,0BAA0B,eAAe;YAC3C,CAAA;WACH,GAAc,MAAM,EAAa,QAChC,kBAAC,KAAD;YAAG,WAAU;sBAAb;aAAuD;aAC5C,EAAa,KAAK;aAAO;aAAa,EAAa,KAAK;aAAQ;aAChE,KAAK,MAAM,EAAa,KAAK,OAAO;aAAC;aAC5C;;WAEL,KAAgB,CAAC,EAAa,MAC7B,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAa;YACZ,CAAA;WAEF;YACF;YAGN,kBAAC,OAAD;SACE,MAAK;SACL,WAAW,iDACT,MAAmB,OACf,uCACA,EAAe,KACb,6DACA;mBAPV,CAUG,KAAc,CAAC,IACd,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,GACA,GAAgB,KAClB,kBAAC,IAAD;UAAc,WAAU;UAAkC,eAAY;UAAS,CAAA,GAC7E,IACF,kBAAC,GAAD;UAAS,WAAU;UAAgC,eAAY;UAAS,CAAA,GAExE,kBAAC,OAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EAEJ,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,wBAAwB,aAAa;YACvC,CAAA;WACH,GAAgB,MAAM,EAAe,QACpC,kBAAC,KAAD;YAAG,WAAU;sBAAb;aAAuD;aAC9C,EAAe,KAAK;aAAS;aAAI,EAAe,KAAK;aAAS;aAAG;aACvE,EAAe,KAAK;aACnB;;WAEL,KAAkB,CAAC,EAAe,MACjC,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAe;YACd,CAAA;WAEF;YACF;WACF;;OAGL,CAAC,MAAe,CAAC,GAAc,MAAM,CAAC,GAAgB,OACrD,kBAAC,GAAD;QAAQ,MAAK;QAAS,SAAQ;QAAQ,MAAK;QAAK,SAAS;kBAAzD,CACE,kBAAC,IAAD;SAAW,WAAU;SAAW,eAAY;SAAS,CAAA,EACpD,EAAG,8BAA8B,mBAAmB,CAC9C;;OAKV,MACC,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,KAAD;SAAG,WAAU;mBACV,EAAG,gCAAgC,sBAAsB;SACxD,CAAA,EAEJ,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,SAAD;UACE,SAAS,GAAc;UACvB,WAAU;oBAET,EAAG,uBAAuB,WAAW;UAChC,CAAA,EACR,kBAAC,IAAD;UAAQ,OAAO;UAAkB,eAAe;oBAAhD,CACE,kBAAC,IAAD;WAAe,IAAI,GAAc;WAAI,WAAU;qBAC7C,kBAAC,IAAD,EAAe,CAAA;WACD,CAAA,EAChB,kBAAC,IAAD,EAAA,UAAA;WACE,kBAAC,GAAD;YAAY,OAAM;sBAAQ;YAAkB,CAAA;WAC5C,kBAAC,GAAD;YAAY,OAAM;sBAAS;YAAkB,CAAA;WAC7C,kBAAC,GAAD;YAAY,OAAM;sBAAU;YAAoB,CAAA;WAClC,EAAA,CAAA,CACT;YACL,EAAA,CAAA,EACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,SAAD;UACE,SAAS,GAAU;UACnB,WAAU;oBAET,EAAG,2BAA2B,eAAe;UACxC,CAAA,EACR,kBAAC,IAAD;UAAQ,OAAO;UAAc,eAAe;oBAA5C,CACE,kBAAC,IAAD;WAAe,IAAI,GAAU;WAAI,WAAU;qBACzC,kBAAC,IAAD,EAAe,CAAA;WACD,CAAA,EAChB,kBAAC,IAAD,EAAA,UAAA;WACE,kBAAC,GAAD;YAAY,OAAM;sBAAS;YAAmB,CAAA;WAC9C,kBAAC,GAAD;YAAY,OAAM;sBAAQ;YAAkB,CAAA;WAC5C,kBAAC,GAAD;YAAY,OAAM;sBAAU;YAAoB,CAAA;WAClC,EAAA,CAAA,CACT;YACL,EAAA,CAAA,CACF;WACF;;OAIP,MACC,kBAAC,OAAD;QACE,MAAK;QACL,WAAU;kBAFZ,CAIE,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EACF,kBAAC,KAAD;UAAG,WAAU;oBAA8C;UAAgB,CAAA,CACvE;YACN,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,MAAK;UACL,SAAQ;UACR,MAAK;UACL,eAAe;AAOb,WANA,EAAe,KAAK,EAEpB,EAAS,UAAU,EACnB,GAAa,GAAG,EAChB,GAAe,GAAG,EAClB,EAAgB,KAAK,EACrB,EAAkB,KAAK;;oBAX3B,CAcE,kBAAC,IAAD;WAAW,WAAU;WAAW,eAAY;WAAS,CAAA,EACpD,EAAG,gCAAgC,sBAAsB,CACnD;aACT,kBAAC,GAAD;UAAQ,MAAK;UAAS,SAAQ;UAAQ,MAAK;UAAK,SAAS;oBACtD,EAAG,oBAAoB,QAAQ;UACzB,CAAA,CACL;WACF;;OAIR,kBAAC,IAAD;QAAwB,WAAU;kBAAlC,CACE,kBAAC,GAAD;SAAQ,MAAK;SAAS,SAAQ;SAAU,eAAe,EAAS,UAAU;mBAA1E,CACE,kBAAC,IAAD;UAAa,WAAU;UAAS,eAAY;UAAS,CAAA,EACpD,EAAG,mBAAmB,OAAO,CACvB;YACT,kBAAC,GAAD;SACE,MAAK;SACL,UAAU,CAAC,MAAsB,KAAa;SAC9C,SAAS;SACT,aAAW;mBAEV,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD;UAAS,WAAU;UAAsB,eAAY;UAAS,CAAA,EAC7D,EAAG,qBAAqB,YAAY,CACpC,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA,CACG,EAAG,uBAAuB,YAAY,EACvC,kBAAC,GAAD;UAAc,WAAU;UAAS,eAAY;UAAS,CAAA,CACrD,EAAA,CAAA;SAEE,CAAA,CACc;;OACrB;;KAEO,CAAA;IACO;;EACT,CAAA"}
1
+ {"version":3,"file":"AgentForm.js","names":[],"sources":["../../../src/components/agents/AgentForm.tsx"],"sourcesContent":["import { useEffect, useRef, useState, useCallback } from 'react';\nimport type { ReactNode } from 'react';\nimport {\n Eye,\n EyeOff,\n CheckCircle2,\n XCircle,\n Loader2,\n ChevronRight,\n ChevronLeft,\n ChevronDown,\n Copy,\n Check,\n Terminal,\n Download,\n RefreshCw,\n Plus,\n Settings2,\n} from 'lucide-react';\nimport {\n Button,\n Input,\n ResponsiveDialog,\n ResponsiveDialogContent,\n ResponsiveDialogDescription,\n ResponsiveDialogFooter,\n ResponsiveDialogHeader,\n ResponsiveDialogTitle,\n Select,\n SelectContent,\n SelectItem,\n SelectTrigger,\n SelectValue,\n Stepper,\n} from '@burdenoff/fe-libs/ui';\nimport { useProbeAgentTunnelLazyQuery } from '@/generated/wspace-operations';\nimport { SearchableSelect, MotionTabPanel, InstallTabs } from '@/components/shared';\nimport type { SearchableSelectOption } from '@/components/shared';\nimport { useTr } from '../../shared/hooks/useTr';\nimport { useField } from '../../shared/hooks/useField';\nimport { isQuotaExhaustedError, wasQuotaHandledLocally } from '@/utils/quotaUtils';\n\ntype WizardStage = 'details' | 'validate';\n\ninterface TargetOption {\n id: string;\n name: string;\n type: string;\n status: string;\n}\n\ninterface AgentFormProps {\n onSubmit: (data: Record<string, unknown>) => Promise<{ id: string } | void>;\n onCancel: () => void;\n isLoading?: boolean;\n /** Navigate to a path (used to go to agent details after creation) */\n onNavigate?: (path: string) => void;\n /** Available targets for the agent to be installed on */\n targets?: TargetOption[];\n /** Whether targets are still loading */\n targetsLoading?: boolean;\n /**\n * Create a new target inline. When provided, the form shows a\n * \"+ Create new target\" affordance that lets users create a DIRECT\n * target on the fly without leaving the dialog. Must return the new\n * target so the form can auto-select it.\n */\n onCreateTarget?: (name: string) => Promise<TargetOption | null>;\n /** Optional extra content (e.g. a draft EntityTagPicker) rendered above the configure-stage actions. */\n extraSection?: ReactNode;\n}\n\nexport function AgentForm({\n onSubmit,\n onCancel,\n isLoading,\n onNavigate,\n targets,\n targetsLoading,\n onCreateTarget,\n extraSection,\n}: AgentFormProps) {\n const tr = useTr();\n const [stage, setStage] = useState<WizardStage>('details');\n const [showApiKey, setShowApiKey] = useState(false);\n const [showInstallInstructions, setShowInstallInstructions] = useState(false);\n const [copiedCommand, setCopiedCommand] = useState<string | null>(null);\n\n // Stage 1: Basic details\n const [name, setName] = useState('');\n // Tracks whether the operator has typed into the name field. Once true,\n // we stop overwriting the value from auto-fill sources (target select +\n // identity probe) so we never clobber their input.\n const [nameEdited, setNameEdited] = useState(false);\n const [tunnelUrl, setTunnelUrl] = useState('');\n const [agentApiKey, setAgentApiKey] = useState('');\n const [selectedTargetId, setSelectedTargetId] = useState('');\n\n // When the operator picks a target, autofill the agent name with the\n // target's display name. Skip if they've already typed something into\n // the name field. The svc append a `-2`/`-3` suffix on collision so\n // it's safe to suggest a duplicate; the actual stored name comes back\n // on the create response.\n useEffect(() => {\n if (nameEdited) return;\n if (!selectedTargetId) return;\n const picked = (targets ?? []).find((t) => t.id === selectedTargetId);\n if (picked?.name) setName(picked.name);\n }, [selectedTargetId, targets, nameEdited]);\n\n // Inline target creation state\n const [showInlineTarget, setShowInlineTarget] = useState(false);\n const [inlineTargetName, setInlineTargetName] = useState('');\n const [creatingTarget, setCreatingTarget] = useState(false);\n const [inlineTargetError, setInlineTargetError] = useState<string | null>(null);\n\n // Stage 2: Validation (via backend-proxied GraphQL query)\n const [validating, setValidating] = useState(false);\n const [healthResult, setHealthResult] = useState<{\n ok: boolean;\n data?: { status: string; version: string; uptime: number };\n error?: string;\n } | null>(null);\n const [identityResult, setIdentityResult] = useState<{\n ok: boolean;\n data?: { hostname: string; platform: string; arch: string };\n error?: string;\n } | null>(null);\n\n // Auto-detected fields (editable overrides)\n const [detectedHostname, setDetectedHostname] = useState('');\n const [detectedPlatform, setDetectedPlatform] = useState('linux');\n const [detectedArch, setDetectedArch] = useState('x86_64');\n const [detectedVersion, setDetectedVersion] = useState('1.0.0');\n\n // Error state for creation failures\n const [createError, setCreateError] = useState<string | null>(null);\n\n // Advanced options (Phase 5B: per-daemon profile name).\n // Defaults to \"default\" (autofilled but editable). Disclosure is closed\n // by default — users only need to touch this for multi-profile setups.\n const [showAdvanced, setShowAdvanced] = useState(false);\n const [profile, setProfile] = useState('default');\n\n // Accessible label/hint/error wiring for every form control. The hook\n // only checks truthiness of `hint` to chain aria-describedby to the\n // always-visible hint <p id={field.hintId}> below each input.\n const HAS_HINT = 'visible';\n const nameField = useField({ hint: HAS_HINT });\n const inlineTargetField = useField({ error: inlineTargetError });\n const tunnelField = useField({ hint: HAS_HINT });\n const apiKeyField = useField({ hint: HAS_HINT });\n const profileField = useField({ hint: HAS_HINT });\n const platformField = useField();\n const archField = useField();\n\n const copyToClipboard = useCallback((text: string, id: string) => {\n navigator.clipboard.writeText(text);\n setCopiedCommand(id);\n setTimeout(() => setCopiedCommand(null), 2000);\n }, []);\n\n const normalizeUrl = (url: string) => {\n let u = url.trim();\n if (u.endsWith('/')) u = u.slice(0, -1);\n return u;\n };\n\n const [runProbe] = useProbeAgentTunnelLazyQuery({ fetchPolicy: 'network-only' });\n\n // Validate the agent through the svc-proxied `probeAgentTunnel` query.\n // svc fans out to /health + /api/profiles/default/agent/identity over\n // its own egress and returns a combined AgentProbeResult — the\n // operator's API key never touches the browser→tunnel path.\n const validateAgent = async () => {\n const baseUrl = normalizeUrl(tunnelUrl);\n if (!baseUrl) return;\n\n setValidating(true);\n setHealthResult(null);\n setIdentityResult(null);\n\n try {\n const { data, error } = await runProbe({\n variables: { url: baseUrl, agentApiKey: agentApiKey || null },\n });\n const probe = data?.probeAgentTunnel;\n if (error || !probe) {\n const msg = error?.message ?? 'Probe failed';\n setHealthResult({ ok: false, error: msg });\n setIdentityResult({ ok: false, error: msg });\n } else {\n setHealthResult(\n probe.healthOk\n ? {\n ok: true,\n data: {\n status: probe.healthStatus ?? 'healthy',\n version: probe.agentVersion ?? 'unknown',\n uptime: probe.uptime ?? 0,\n },\n }\n : { ok: false, error: probe.healthError ?? 'Health check failed' }\n );\n if (probe.agentVersion) setDetectedVersion(probe.agentVersion);\n\n setIdentityResult(\n probe.identityOk\n ? {\n ok: true,\n data: {\n hostname: probe.hostname ?? '',\n platform: probe.platform ?? 'linux',\n arch: probe.architecture ?? 'x86_64',\n },\n }\n : { ok: false, error: probe.identityError ?? 'Identity check failed' }\n );\n if (probe.identityOk) {\n if (probe.platform) setDetectedPlatform(probe.platform);\n if (probe.architecture) setDetectedArch(probe.architecture);\n // Auto-fill name from probe hostname unless (a) the operator\n // has manually typed one, or (b) a target is already selected\n // (target wins as the canonical autogen value).\n if (probe.hostname) {\n setDetectedHostname(probe.hostname);\n if (!nameEdited && !selectedTargetId) setName(probe.hostname);\n }\n }\n }\n } catch (err) {\n const msg = err instanceof Error ? err.message : 'Probe failed';\n setHealthResult({ ok: false, error: msg });\n setIdentityResult({ ok: false, error: msg });\n }\n\n setValidating(false);\n };\n\n // Refs let us short-circuit double-submits before React re-renders\n // the button as disabled. The parent passes `isLoading` (driven by\n // `useState`) and we wire it to the button's `disabled` prop, but\n // `setState` is asynchronous — between the user's first click and\n // React's next commit there is a microtask window in which the button\n // is still clickable. Without this ref a fast double-click fires\n // `addAgentFromTunnel` twice in parallel; the svc sees one in-flight\n // and one fresh call, the second one wins the (workspaceId, name)\n // unique-resolution race, and the workspace ends up with two agent\n // rows (the original autogen + the operator's custom name).\n const submittingRef = useRef(false);\n\n // Create the agent and close the modal\n const handleCreateAgent = async () => {\n if (submittingRef.current) return;\n submittingRef.current = true;\n setCreateError(null);\n\n // Pipe the chosen profile through `metadata.profile`. Phase 5A (svc) is\n // adding first-class AgentProfile rows; in the meantime the backend\n // also reads `metadata.profile` so the create path keeps working\n // regardless of which side of the cut-over the cluster is on.\n const trimmedProfile = profile.trim() || 'default';\n const data: Record<string, unknown> = {\n name: name || detectedHostname || 'Unnamed Agent',\n hostname: detectedHostname || 'unknown',\n platform: detectedPlatform,\n architecture: detectedArch,\n version: detectedVersion,\n tunnelUrl: normalizeUrl(tunnelUrl),\n tunnelStatus: 'ACTIVE',\n agentApiKey,\n metadata: { profile: trimmedProfile },\n ...(selectedTargetId ? { targetId: selectedTargetId } : {}),\n };\n\n try {\n const result = await onSubmit(data);\n const newAgentId = result?.id || null;\n\n if (!newAgentId) {\n // Mutation succeeded but returned no agent ID — treat as failure\n setCreateError('Agent creation returned no ID. The agent may already exist.');\n return;\n }\n\n // Close the modal — the agent list will refetch automatically\n if (onNavigate) {\n onNavigate(`/agents/${newAgentId}`);\n } else {\n onCancel();\n }\n } catch (err) {\n const message = err instanceof Error ? err.message : 'Failed to create agent';\n setCreateError(message);\n } finally {\n submittingRef.current = false;\n }\n };\n\n const isValidationPassed = healthResult?.ok && identityResult?.ok;\n const hasTargets = targets && targets.length > 0;\n // The user must either pick or inline-create a target if inline creation\n // is enabled; otherwise we only require it when targets already exist.\n const targetRequiredButMissing = onCreateTarget\n ? selectedTargetId.length === 0\n : hasTargets && selectedTargetId.length === 0;\n const canProceedToValidate = tunnelUrl.trim().length > 0 && !targetRequiredButMissing;\n\n const handleInlineCreateTarget = useCallback(async () => {\n if (!onCreateTarget || !inlineTargetName.trim()) return;\n setCreatingTarget(true);\n setInlineTargetError(null);\n try {\n const created = await onCreateTarget(inlineTargetName.trim());\n if (created) {\n setSelectedTargetId(created.id);\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else if (wasQuotaHandledLocally()) {\n // Parent surfaced the quota modal — collapse the inline row\n // quietly so the user isn't left with a vague \"try again\"\n // message under an explicit upgrade-your-plan dialog.\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else {\n setInlineTargetError(\n tr('agentsPage.inlineTargetFailed', 'Failed to create target. Please try again.')\n );\n }\n } catch (err) {\n if (isQuotaExhaustedError(err)) {\n // Quota dialog will (or already has) opened at the parent;\n // suppress the generic inline error so the two don't compete.\n setShowInlineTarget(false);\n setInlineTargetName('');\n } else {\n setInlineTargetError(err instanceof Error ? err.message : 'Failed to create target');\n }\n } finally {\n setCreatingTarget(false);\n }\n }, [onCreateTarget, inlineTargetName, tr]);\n\n const renderCopyButton = (text: string, id: string) => {\n const copied = copiedCommand === id;\n return (\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"icon-sm\"\n onClick={() => copyToClipboard(text, id)}\n aria-label={copied ? tr('agentsPage.copied', 'Copied') : tr('agentsPage.copy', 'Copy')}\n className=\"shrink-0\"\n >\n {copied ? (\n <Check className=\"size-3.5 text-status-success-text\" aria-hidden=\"true\" />\n ) : (\n <Copy className=\"size-3.5 text-text-secondary\" aria-hidden=\"true\" />\n )}\n </Button>\n );\n };\n\n const requiredMark = (\n <span aria-hidden=\"true\" className=\"text-status-error-text\">\n {' '}\n *\n </span>\n );\n\n // Stepper\n const steps = [\n { key: 'details', label: tr('agentsPage.stepSetup', 'Setup') },\n { key: 'validate', label: tr('agentsPage.stepValidate', 'Validate') },\n ];\n\n const currentStepIndex = steps.findIndex((s) => s.key === stage);\n\n return (\n <ResponsiveDialog\n open\n onOpenChange={(open) => {\n if (!open && !isLoading) onCancel();\n }}\n >\n {/* Multi-field data-entry dialog: a stray click on the scrim must not\n discard typed input. Escape and the explicit Cancel/X still close. */}\n <ResponsiveDialogContent\n className=\"sm:max-w-xl md:max-h-[min(90vh,52rem)] md:overflow-y-auto\"\n onPointerDownOutside={(event) => event.preventDefault()}\n >\n <ResponsiveDialogHeader>\n <ResponsiveDialogTitle>\n {tr('agentsPage.addNewAgent', 'Add New Agent')}\n </ResponsiveDialogTitle>\n <ResponsiveDialogDescription>\n {tr(\n 'agentsPage.addNewAgentDescription',\n 'Connect a running vibe agent to this workspace.'\n )}\n </ResponsiveDialogDescription>\n </ResponsiveDialogHeader>\n\n <Stepper\n steps={steps}\n active={currentStepIndex}\n onStepClick={(index) => {\n const target = steps[index];\n if (target) setStage(target.key === 'validate' ? 'validate' : 'details');\n }}\n />\n\n <MotionTabPanel tabKey={stage}>\n {stage === 'details' ? (\n <div className=\"space-y-4\">\n {/* Install instructions (collapsible) */}\n <div className=\"border border-border-default rounded-lg overflow-hidden\">\n <button\n type=\"button\"\n onClick={() => setShowInstallInstructions(!showInstallInstructions)}\n aria-expanded={showInstallInstructions}\n className=\"w-full flex items-center justify-between px-4 py-3 bg-bg-sunken hover:bg-bg-sunken/80 transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n >\n <div className=\"flex items-center gap-2\">\n <Download className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n <span className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.installInstructions', 'Agent Install Instructions')}\n </span>\n </div>\n <ChevronRight\n aria-hidden=\"true\"\n className={`size-4 text-text-secondary transition-transform ${showInstallInstructions ? 'rotate-90' : ''}`}\n />\n </button>\n {showInstallInstructions && (\n <div className=\"px-4 py-3 space-y-3 border-t border-border-default\">\n <div className=\"space-y-3\">\n <div>\n <p className=\"text-xs text-text-secondary mb-2\">\n {tr('agentsPage.installStep1', '1. Install the agent globally')}\n </p>\n {/* Curl-first install (works on any OS, no package\n manager). See docs.vibecontrols.com/users/installing-the-agent */}\n <InstallTabs compact />\n </div>\n <div>\n <p className=\"text-xs text-text-secondary mb-1\">\n {tr(\n 'agentsPage.installStep2',\n '2. Start the agent (prints tunnel URL + API key)'\n )}\n </p>\n <div className=\"flex items-center gap-2 bg-bg-sunken rounded-md px-3 py-1.5 font-mono text-xs text-text-primary\">\n <Terminal\n className=\"size-3 text-text-muted flex-shrink-0\"\n aria-hidden=\"true\"\n />\n <code className=\"flex-1 min-w-0 break-words\">vibe start</code>\n {renderCopyButton('vibe start', 'vibe start')}\n </div>\n </div>\n <p className=\"text-xs text-text-secondary pt-1\">\n {tr(\n 'agentsPage.installHint',\n 'After running vibe start, copy the printed tunnel URL and API key into the fields above.'\n )}\n </p>\n </div>\n </div>\n )}\n </div>\n\n {/* Agent Name — visible upfront so operators see (and can\n override) the autogen before validation. The autofill\n chain still runs in the background: picking a target\n pulls in its name; clicking Validate falls back to the\n probed hostname when the user hasn't typed anything.\n The svc dedupes inside the workspace via\n resolveUniqueAgentName(), so suffixes like `-2` may\n still get appended at submit time even when the user\n picked their own string. */}\n <div>\n <label\n htmlFor={nameField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.name', 'Name')}\n </label>\n <Input\n {...nameField.inputProps}\n type=\"text\"\n value={name}\n onChange={(e) => {\n setName(e.target.value);\n setNameEdited(true);\n }}\n placeholder={tr(\n 'agentsPage.namePlaceholderUpfront',\n 'My laptop, prod jump-host, …'\n )}\n className=\"text-base md:text-sm\"\n data-testid=\"agent-form-name-input\"\n />\n <p id={nameField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.nameHint',\n \"How this agent shows up in the UI. Defaults to the target's name (or the machine's hostname after Validate) — leave blank to accept the autogen.\"\n )}\n </p>\n </div>\n\n {/* Target Selection — with inline creation */}\n <div>\n <span className=\"mb-1.5 block text-sm font-medium text-text-primary\">\n {tr('agentsPage.target', 'Target')}\n {requiredMark}\n </span>\n\n {hasTargets && !showInlineTarget && (\n <>\n <SearchableSelect\n placeholder={tr('agentsPage.selectTarget', 'Select a target...')}\n searchPlaceholder={tr('agentsPage.searchTargets', 'Search targets...')}\n options={(targets ?? []).map((tgt): SearchableSelectOption => ({\n value: tgt.id,\n label: tgt.name,\n description: `${tgt.type}${tgt.status ? ` · ${tgt.status}` : ''}`,\n }))}\n value={selectedTargetId}\n onChange={setSelectedTargetId}\n clearable\n />\n <p className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.targetDescription',\n 'The target machine this agent will be installed on.'\n )}{' '}\n {onCreateTarget && (\n <button\n type=\"button\"\n onClick={() => {\n setShowInlineTarget(true);\n setInlineTargetName(name.trim() || '');\n }}\n className=\"text-text-link hover:text-text-linkHover hover:underline inline-flex items-center gap-1 rounded-sm focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n >\n <Plus className=\"size-3\" aria-hidden=\"true\" />\n {tr('agentsPage.createNewTarget', 'Create a new target')}\n </button>\n )}\n </p>\n </>\n )}\n\n {/* Empty state prompt (no targets exist yet) */}\n {!hasTargets && !targetsLoading && onCreateTarget && !showInlineTarget && (\n <div className=\"p-3 bg-bg-sunken border border-border-default rounded-lg\">\n <p className=\"text-sm text-text-secondary mb-2\">\n {tr(\n 'agentsPage.noTargetsInlinePrompt',\n \"You don't have any targets yet. Create one now to install this agent on it.\"\n )}\n </p>\n <Button\n type=\"button\"\n size=\"sm\"\n onClick={() => {\n setShowInlineTarget(true);\n setInlineTargetName(name.trim() || '');\n }}\n >\n <Plus className=\"size-4\" aria-hidden=\"true\" />\n {tr('agentsPage.createFirstTarget', 'Create first target')}\n </Button>\n </div>\n )}\n\n {/* Inline creation form */}\n {showInlineTarget && onCreateTarget && (\n <div className=\"p-3 bg-bg-sunken border border-border-default rounded-lg space-y-2\">\n <p className=\"text-xs font-medium text-text-secondary\">\n {tr(\n 'agentsPage.newDirectTarget',\n 'New target (Direct — you can change the type later)'\n )}\n </p>\n <div>\n <label\n htmlFor={inlineTargetField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.targetName', 'Target name')}\n </label>\n <Input\n {...inlineTargetField.inputProps}\n type=\"text\"\n value={inlineTargetName}\n onChange={(e) => setInlineTargetName(e.target.value)}\n placeholder={tr('agentsPage.targetName', 'Target name')}\n className=\"text-base md:text-sm\"\n onKeyDown={(e) => {\n if (e.key === 'Enter') {\n e.preventDefault();\n void handleInlineCreateTarget();\n }\n }}\n />\n {inlineTargetError && (\n <p\n id={inlineTargetField.errorId}\n role=\"alert\"\n className=\"mt-1.5 text-sm text-status-error-text\"\n >\n {inlineTargetError}\n </p>\n )}\n </div>\n <div className=\"flex flex-wrap items-center gap-2\">\n <Button\n type=\"button\"\n size=\"sm\"\n onClick={() => void handleInlineCreateTarget()}\n disabled={!inlineTargetName.trim() || creatingTarget}\n aria-busy={creatingTarget}\n >\n {creatingTarget ? (\n <Loader2 className=\"size-3.5 animate-spin\" aria-hidden=\"true\" />\n ) : (\n <Check className=\"size-3.5\" aria-hidden=\"true\" />\n )}\n {tr('agentsPage.create', 'Create')}\n </Button>\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"sm\"\n onClick={() => {\n setShowInlineTarget(false);\n setInlineTargetName('');\n setInlineTargetError(null);\n }}\n >\n {tr('agentsPage.cancel', 'Cancel')}\n </Button>\n </div>\n </div>\n )}\n\n {/* Loading placeholder */}\n {targetsLoading && !hasTargets && (\n <div\n role=\"status\"\n className=\"p-3 bg-bg-sunken border border-border-default rounded-lg flex items-center gap-2 text-sm text-text-secondary\"\n >\n <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n {tr('agentsPage.loadingTargets', 'Loading targets...')}\n </div>\n )}\n </div>\n\n {/* API/Tunnel URL */}\n <div>\n <label\n htmlFor={tunnelField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.apiTunnelUrl', 'API / Tunnel URL')}\n {requiredMark}\n </label>\n <Input\n {...tunnelField.inputProps}\n type=\"url\"\n value={tunnelUrl}\n onChange={(e) => setTunnelUrl(e.target.value)}\n placeholder=\"https://your-tunnel.trycloudflare.com\"\n aria-required=\"true\"\n className=\"text-base md:text-sm font-mono\"\n />\n <p id={tunnelField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.tunnelUrlHint',\n \"The agent's tunnel URL or local API URL (e.g. http://localhost:3005)\"\n )}\n </p>\n </div>\n\n {/* Agent API Key */}\n <div>\n <label\n htmlFor={apiKeyField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.agentApiKey', 'Agent API Key')}\n {requiredMark}\n </label>\n <div className=\"relative\">\n <Input\n {...apiKeyField.inputProps}\n type={showApiKey ? 'text' : 'password'}\n value={agentApiKey}\n onChange={(e) => setAgentApiKey(e.target.value)}\n placeholder=\"vcak_...\"\n aria-required=\"true\"\n className=\"pr-10 text-base md:text-sm font-mono\"\n />\n <Button\n type=\"button\"\n variant=\"ghost\"\n size=\"icon-sm\"\n onClick={() => setShowApiKey(!showApiKey)}\n aria-label={\n showApiKey\n ? tr('agentsPage.hideApiKey', 'Hide API key')\n : tr('agentsPage.showApiKey', 'Show API key')\n }\n aria-pressed={showApiKey}\n className=\"absolute right-1 top-1/2 -translate-y-1/2\"\n >\n {showApiKey ? (\n <EyeOff className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n ) : (\n <Eye className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n )}\n </Button>\n </div>\n <p id={apiKeyField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr('agentsPage.apiKeyHint', 'Run')}{' '}\n <code className=\"bg-bg-sunken px-1 rounded\">vibe key</code>{' '}\n {tr(\n 'agentsPage.apiKeyHintSuffix',\n 'on the agent to get this. Changes on restart.'\n )}\n </p>\n </div>\n\n {/* Advanced options — per-daemon profile name (Phase 5B) */}\n <div className=\"border border-border-default rounded-lg overflow-hidden\">\n <button\n type=\"button\"\n onClick={() => setShowAdvanced((v) => !v)}\n className=\"w-full flex items-center justify-between px-4 py-2.5 bg-bg-sunken hover:bg-bg-sunken/80 transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n aria-expanded={showAdvanced}\n data-testid=\"agent-form-advanced-toggle\"\n >\n <div className=\"flex items-center gap-2\">\n <Settings2 className=\"size-4 text-text-secondary\" aria-hidden=\"true\" />\n <span className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.advancedOptions', 'Advanced options')}\n </span>\n </div>\n <ChevronDown\n aria-hidden=\"true\"\n className={`size-4 text-text-secondary transition-transform ${showAdvanced ? 'rotate-180' : ''}`}\n />\n </button>\n {showAdvanced && (\n <div className=\"px-4 py-3 space-y-3 border-t border-border-default\">\n <div>\n <label\n htmlFor={profileField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.profileName', 'Profile name')}\n </label>\n <Input\n {...profileField.inputProps}\n type=\"text\"\n value={profile}\n onChange={(e) => setProfile(e.target.value)}\n placeholder=\"default\"\n className=\"text-base md:text-sm font-mono\"\n data-testid=\"agent-form-profile-input\"\n />\n <p id={profileField.hintId} className=\"mt-1.5 text-xs text-text-muted\">\n {tr(\n 'agentsPage.profileNameHint',\n 'Each profile runs an isolated CLI on the daemon. Leave as \"default\" unless you want this agent to host multiple parallel profiles.'\n )}\n </p>\n </div>\n </div>\n )}\n </div>\n\n {extraSection && (\n <div className=\"border-t border-border-default pt-4 mt-4\">{extraSection}</div>\n )}\n\n {/* Actions */}\n <ResponsiveDialogFooter className=\"pt-2\">\n <Button type=\"button\" variant=\"outline\" onClick={onCancel}>\n {tr('agentsPage.cancel', 'Cancel')}\n </Button>\n <Button\n type=\"button\"\n disabled={!canProceedToValidate}\n onClick={() => {\n setStage('validate');\n validateAgent();\n }}\n >\n {tr('agentsPage.nextValidate', 'Next: Validate')}\n <ChevronRight className=\"size-4\" aria-hidden=\"true\" />\n </Button>\n </ResponsiveDialogFooter>\n </div>\n ) : (\n <div className=\"space-y-4\">\n {/* Validation Results */}\n <div className=\"space-y-3\">\n {/* Health Check */}\n <div\n role=\"status\"\n className={`flex items-center gap-3 p-3 rounded-lg border ${\n healthResult === null\n ? 'border-border-default bg-bg-sunken'\n : healthResult.ok\n ? 'border-status-success-border bg-status-success-bg-subtle'\n : 'border-status-error-border bg-status-error-bg-subtle'\n }`}\n >\n {validating && !healthResult ? (\n <Loader2\n className=\"size-5 text-text-secondary animate-spin\"\n aria-hidden=\"true\"\n />\n ) : healthResult?.ok ? (\n <CheckCircle2 className=\"size-5 text-status-success-text\" aria-hidden=\"true\" />\n ) : healthResult ? (\n <XCircle className=\"size-5 text-status-error-text\" aria-hidden=\"true\" />\n ) : (\n <div\n className=\"size-5 rounded-full border-2 border-border-default\"\n aria-hidden=\"true\"\n />\n )}\n <div className=\"flex-1 min-w-0\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.healthCheck', 'Health Check')}\n </p>\n {healthResult?.ok && healthResult.data && (\n <p className=\"text-xs text-text-secondary break-words\">\n Status: {healthResult.data.status} | Version: {healthResult.data.version} |\n Uptime: {Math.round(healthResult.data.uptime)}s\n </p>\n )}\n {healthResult && !healthResult.ok && (\n <p className=\"text-xs text-status-error-text break-words\">\n {healthResult.error}\n </p>\n )}\n </div>\n </div>\n\n {/* API Access Check */}\n <div\n role=\"status\"\n className={`flex items-center gap-3 p-3 rounded-lg border ${\n identityResult === null\n ? 'border-border-default bg-bg-sunken'\n : identityResult.ok\n ? 'border-status-success-border bg-status-success-bg-subtle'\n : 'border-status-error-border bg-status-error-bg-subtle'\n }`}\n >\n {validating && !identityResult ? (\n <Loader2\n className=\"size-5 text-text-secondary animate-spin\"\n aria-hidden=\"true\"\n />\n ) : identityResult?.ok ? (\n <CheckCircle2 className=\"size-5 text-status-success-text\" aria-hidden=\"true\" />\n ) : identityResult ? (\n <XCircle className=\"size-5 text-status-error-text\" aria-hidden=\"true\" />\n ) : (\n <div\n className=\"size-5 rounded-full border-2 border-border-default\"\n aria-hidden=\"true\"\n />\n )}\n <div className=\"flex-1 min-w-0\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.apiAccess', 'API Access')}\n </p>\n {identityResult?.ok && identityResult.data && (\n <p className=\"text-xs text-text-secondary break-words\">\n Host: {identityResult.data.hostname} | {identityResult.data.platform} /{' '}\n {identityResult.data.arch}\n </p>\n )}\n {identityResult && !identityResult.ok && (\n <p className=\"text-xs text-status-error-text break-words\">\n {identityResult.error}\n </p>\n )}\n </div>\n </div>\n </div>\n\n {/* Retry button */}\n {!validating && (!healthResult?.ok || !identityResult?.ok) && (\n <Button type=\"button\" variant=\"ghost\" size=\"sm\" onClick={validateAgent}>\n <RefreshCw className=\"size-3.5\" aria-hidden=\"true\" />\n {tr('agentsPage.retryValidation', 'Retry validation')}\n </Button>\n )}\n\n {/* Detected info (editable overrides) — Name lives upfront\n now; this section shows the validate-time fields only. */}\n {isValidationPassed && (\n <div className=\"space-y-3 pt-2\">\n <p className=\"text-sm font-medium text-text-primary\">\n {tr('agentsPage.detectedAgentInfo', 'Detected Agent Info')}\n </p>\n\n <div className=\"grid grid-cols-1 sm:grid-cols-2 gap-3\">\n <div>\n <label\n htmlFor={platformField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.platform', 'Platform')}\n </label>\n <Select value={detectedPlatform} onValueChange={setDetectedPlatform}>\n <SelectTrigger id={platformField.id} className=\"text-base md:text-sm\">\n <SelectValue />\n </SelectTrigger>\n <SelectContent>\n <SelectItem value=\"linux\">Linux</SelectItem>\n <SelectItem value=\"darwin\">macOS</SelectItem>\n <SelectItem value=\"windows\">Windows</SelectItem>\n </SelectContent>\n </Select>\n </div>\n <div>\n <label\n htmlFor={archField.id}\n className=\"mb-1.5 block text-sm font-medium text-text-primary\"\n >\n {tr('agentsPage.architecture', 'Architecture')}\n </label>\n <Select value={detectedArch} onValueChange={setDetectedArch}>\n <SelectTrigger id={archField.id} className=\"text-base md:text-sm\">\n <SelectValue />\n </SelectTrigger>\n <SelectContent>\n <SelectItem value=\"x86_64\">x86_64</SelectItem>\n <SelectItem value=\"arm64\">arm64</SelectItem>\n <SelectItem value=\"aarch64\">aarch64</SelectItem>\n </SelectContent>\n </Select>\n </div>\n </div>\n </div>\n )}\n\n {/* Creation error */}\n {createError && (\n <div\n role=\"alert\"\n className=\"p-3 bg-status-error-bg-subtle border border-status-error-border rounded-lg\"\n >\n <div className=\"flex items-center gap-2\">\n <XCircle\n className=\"size-5 text-status-error-text flex-shrink-0\"\n aria-hidden=\"true\"\n />\n <p className=\"text-sm text-status-error-text break-words\">{createError}</p>\n </div>\n <div className=\"flex flex-wrap items-center gap-2 mt-3\">\n <Button\n type=\"button\"\n variant=\"outline\"\n size=\"sm\"\n onClick={() => {\n setCreateError(null);\n // Reset form to allow entering different credentials\n setStage('details');\n setTunnelUrl('');\n setAgentApiKey('');\n setHealthResult(null);\n setIdentityResult(null);\n }}\n >\n <RefreshCw className=\"size-3.5\" aria-hidden=\"true\" />\n {tr('agentsPage.tryDifferentAgent', 'Try Different Agent')}\n </Button>\n <Button type=\"button\" variant=\"ghost\" size=\"sm\" onClick={onCancel}>\n {tr('agentsPage.close', 'Close')}\n </Button>\n </div>\n </div>\n )}\n\n {/* Actions */}\n <ResponsiveDialogFooter className=\"pt-2\">\n <Button type=\"button\" variant=\"outline\" onClick={() => setStage('details')}>\n <ChevronLeft className=\"size-4\" aria-hidden=\"true\" />\n {tr('agentsPage.back', 'Back')}\n </Button>\n <Button\n type=\"button\"\n disabled={!isValidationPassed || isLoading || validating}\n onClick={handleCreateAgent}\n aria-busy={isLoading}\n >\n {isLoading ? (\n <>\n <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n {tr('agentsPage.adding', 'Adding...')}\n </>\n ) : (\n <>\n {tr('agentsPage.addAgent', 'Add Agent')}\n <ChevronRight className=\"size-4\" aria-hidden=\"true\" />\n </>\n )}\n </Button>\n </ResponsiveDialogFooter>\n </div>\n )}\n </MotionTabPanel>\n </ResponsiveDialogContent>\n </ResponsiveDialog>\n );\n}\n"],"mappings":";;;;;;;;;;;;;AAwEA,SAAgB,GAAU,EACxB,cACA,aACA,cACA,gBACA,YACA,oBACA,mBACA,oBACiB;CACjB,IAAM,IAAK,GAAO,EACZ,CAAC,GAAO,KAAY,EAAsB,UAAU,EACpD,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAyB,MAA8B,EAAS,GAAM,EACvE,CAAC,IAAe,MAAoB,EAAwB,KAAK,EAGjE,CAAC,GAAM,KAAW,EAAS,GAAG,EAI9B,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAW,MAAgB,EAAS,GAAG,EACxC,CAAC,GAAa,MAAkB,EAAS,GAAG,EAC5C,CAAC,GAAkB,MAAuB,EAAS,GAAG;AAO5D,UAAgB;AAEd,MADI,KACA,CAAC,EAAkB;EACvB,IAAM,KAAU,KAAW,EAAE,EAAE,MAAM,MAAM,EAAE,OAAO,EAAiB;AACrE,EAAI,GAAQ,QAAM,EAAQ,EAAO,KAAK;IACrC;EAAC;EAAkB;EAAS;EAAW,CAAC;CAG3C,IAAM,CAAC,GAAkB,KAAuB,EAAS,GAAM,EACzD,CAAC,GAAkB,KAAuB,EAAS,GAAG,EACtD,CAAC,GAAgB,MAAqB,EAAS,GAAM,EACrD,CAAC,GAAmB,KAAwB,EAAwB,KAAK,EAGzE,CAAC,GAAY,MAAiB,EAAS,GAAM,EAC7C,CAAC,GAAc,KAAmB,EAI9B,KAAK,EACT,CAAC,GAAgB,KAAqB,EAIlC,KAAK,EAGT,CAAC,IAAkB,MAAuB,EAAS,GAAG,EACtD,CAAC,IAAkB,MAAuB,EAAS,QAAQ,EAC3D,CAAC,IAAc,MAAmB,EAAS,SAAS,EACpD,CAAC,IAAiB,MAAsB,EAAS,QAAQ,EAGzD,CAAC,IAAa,KAAkB,EAAwB,KAAK,EAK7D,CAAC,GAAc,MAAmB,EAAS,GAAM,EACjD,CAAC,IAAS,MAAc,EAAS,UAAU,EAK3C,IAAW,WACX,IAAY,EAAS,EAAE,MAAM,GAAU,CAAC,EACxC,IAAoB,EAAS,EAAE,OAAO,GAAmB,CAAC,EAC1D,IAAc,EAAS,EAAE,MAAM,GAAU,CAAC,EAC1C,IAAc,EAAS,EAAE,MAAM,GAAU,CAAC,EAC1C,IAAe,EAAS,EAAE,MAAM,GAAU,CAAC,EAC3C,KAAgB,GAAU,EAC1B,KAAY,GAAU,EAEtB,KAAkB,IAAa,GAAc,MAAe;AAGhE,EAFA,UAAU,UAAU,UAAU,EAAK,EACnC,GAAiB,EAAG,EACpB,iBAAiB,GAAiB,KAAK,EAAE,IAAK;IAC7C,EAAE,CAAC,EAEA,MAAgB,MAAgB;EACpC,IAAI,IAAI,EAAI,MAAM;AAElB,SADI,EAAE,SAAS,IAAI,KAAE,IAAI,EAAE,MAAM,GAAG,GAAG,GAChC;IAGH,CAAC,MAAY,EAA6B,EAAE,aAAa,gBAAgB,CAAC,EAM1E,KAAgB,YAAY;EAChC,IAAM,IAAU,GAAa,EAAU;AAClC,SAIL;GAFA,GAAc,GAAK,EACnB,EAAgB,KAAK,EACrB,EAAkB,KAAK;AAEvB,OAAI;IACF,IAAM,EAAE,SAAM,aAAU,MAAM,GAAS,EACrC,WAAW;KAAE,KAAK;KAAS,aAAa,KAAe;KAAM,EAC9D,CAAC,EACI,IAAQ,GAAM;AACpB,QAAI,KAAS,CAAC,GAAO;KACnB,IAAM,IAAM,GAAO,WAAW;AAE9B,KADA,EAAgB;MAAE,IAAI;MAAO,OAAO;MAAK,CAAC,EAC1C,EAAkB;MAAE,IAAI;MAAO,OAAO;MAAK,CAAC;UA4B5C,CA1BA,EACE,EAAM,WACF;KACE,IAAI;KACJ,MAAM;MACJ,QAAQ,EAAM,gBAAgB;MAC9B,SAAS,EAAM,gBAAgB;MAC/B,QAAQ,EAAM,UAAU;MACzB;KACF,GACD;KAAE,IAAI;KAAO,OAAO,EAAM,eAAe;KAAuB,CACrE,EACG,EAAM,gBAAc,GAAmB,EAAM,aAAa,EAE9D,EACE,EAAM,aACF;KACE,IAAI;KACJ,MAAM;MACJ,UAAU,EAAM,YAAY;MAC5B,UAAU,EAAM,YAAY;MAC5B,MAAM,EAAM,gBAAgB;MAC7B;KACF,GACD;KAAE,IAAI;KAAO,OAAO,EAAM,iBAAiB;KAAyB,CACzE,EACG,EAAM,eACJ,EAAM,YAAU,GAAoB,EAAM,SAAS,EACnD,EAAM,gBAAc,GAAgB,EAAM,aAAa,EAIvD,EAAM,aACR,GAAoB,EAAM,SAAS,EAC/B,CAAC,KAAc,CAAC,KAAkB,EAAQ,EAAM,SAAS;YAI5D,GAAK;IACZ,IAAM,IAAM,aAAe,QAAQ,EAAI,UAAU;AAEjD,IADA,EAAgB;KAAE,IAAI;KAAO,OAAO;KAAK,CAAC,EAC1C,EAAkB;KAAE,IAAI;KAAO,OAAO;KAAK,CAAC;;AAG9C,MAAc,GAAM;;IAahB,IAAgB,GAAO,GAAM,EAG7B,KAAoB,YAAY;AACpC,MAAI,EAAc,QAAS;AAE3B,EADA,EAAc,UAAU,IACxB,EAAe,KAAK;EAMpB,IAAM,IAAiB,GAAQ,MAAM,IAAI,WACnC,IAAgC;GACpC,MAAM,KAAQ,MAAoB;GAClC,UAAU,MAAoB;GAC9B,UAAU;GACV,cAAc;GACd,SAAS;GACT,WAAW,GAAa,EAAU;GAClC,cAAc;GACd;GACA,UAAU,EAAE,SAAS,GAAgB;GACrC,GAAI,IAAmB,EAAE,UAAU,GAAkB,GAAG,EAAE;GAC3D;AAED,MAAI;GAEF,IAAM,KADS,MAAM,GAAS,EAAK,GACR,MAAM;AAEjC,OAAI,CAAC,GAAY;AAEf,MAAe,8DAA8D;AAC7E;;AAIF,GAAI,KACF,GAAW,WAAW,IAAa,GAEnC,GAAU;WAEL,GAAK;AAEZ,KADgB,aAAe,QAAQ,EAAI,UAAU,yBAC9B;YACf;AACR,KAAc,UAAU;;IAItB,KAAqB,GAAc,MAAM,GAAgB,IACzD,IAAa,KAAW,EAAQ,SAAS,GAGzC,MAA2B,KAE7B,MADA,EAAiB,WAAW,GAE1B,KAAuB,EAAU,MAAM,CAAC,SAAS,KAAK,CAAC,IAEvD,KAA2B,GAAY,YAAY;AACnD,SAAC,KAAkB,CAAC,EAAiB,MAAM,GAE/C;GADA,GAAkB,GAAK,EACvB,EAAqB,KAAK;AAC1B,OAAI;IACF,IAAM,IAAU,MAAM,EAAe,EAAiB,MAAM,CAAC;AAC7D,IAAI,KACF,GAAoB,EAAQ,GAAG,EAC/B,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IACd,GAAwB,IAIjC,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IAEvB,EACE,EAAG,iCAAiC,6CAA6C,CAClF;YAEI,GAAK;AACZ,IAAI,EAAsB,EAAI,IAG5B,EAAoB,GAAM,EAC1B,EAAoB,GAAG,IAEvB,EAAqB,aAAe,QAAQ,EAAI,UAAU,0BAA0B;aAE9E;AACR,OAAkB,GAAM;;;IAEzB;EAAC;EAAgB;EAAkB;EAAG,CAAC,EAEpC,MAAoB,GAAc,MAAe;EACrD,IAAM,IAAS,OAAkB;AACjC,SACE,kBAAC,GAAD;GACE,MAAK;GACL,SAAQ;GACR,MAAK;GACL,eAAe,GAAgB,GAAM,EAAG;GACxC,cAAY,IAAS,EAAG,qBAAqB,SAAS,GAAG,EAAG,mBAAmB,OAAO;GACtF,WAAU;aAET,IACC,kBAAC,IAAD;IAAO,WAAU;IAAoC,eAAY;IAAS,CAAA,GAE1E,kBAAC,IAAD;IAAM,WAAU;IAA+B,eAAY;IAAS,CAAA;GAE/D,CAAA;IAIP,IACJ,kBAAC,QAAD;EAAM,eAAY;EAAO,WAAU;YAAnC,CACG,KAAI,IAEA;KAIH,IAAQ,CACZ;EAAE,KAAK;EAAW,OAAO,EAAG,wBAAwB,QAAQ;EAAE,EAC9D;EAAE,KAAK;EAAY,OAAO,EAAG,2BAA2B,WAAW;EAAE,CACtE,EAEK,KAAmB,EAAM,WAAW,MAAM,EAAE,QAAQ,EAAM;AAEhE,QACE,kBAAC,IAAD;EACE,MAAA;EACA,eAAe,MAAS;AACtB,GAAI,CAAC,KAAQ,CAAC,KAAW,GAAU;;YAKrC,kBAAC,IAAD;GACE,WAAU;GACV,uBAAuB,MAAU,EAAM,gBAAgB;aAFzD;IAIE,kBAAC,IAAD,EAAA,UAAA,CACE,kBAAC,IAAD,EAAA,UACG,EAAG,0BAA0B,gBAAgB,EACxB,CAAA,EACxB,kBAAC,IAAD,EAAA,UACG,EACC,qCACA,kDACD,EAC2B,CAAA,CACP,EAAA,CAAA;IAEzB,kBAAC,IAAD;KACS;KACP,QAAQ;KACR,cAAc,MAAU;MACtB,IAAM,IAAS,EAAM;AACrB,MAAI,KAAQ,EAAS,EAAO,QAAQ,aAAa,aAAa,UAAU;;KAE1E,CAAA;IAEF,kBAAC,IAAD;KAAgB,QAAQ;eACrB,MAAU,YACT,kBAAC,OAAD;MAAK,WAAU;gBAAf;OAEE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,GAA2B,CAAC,EAAwB;SACnE,iBAAe;SACf,WAAU;mBAJZ,CAME,kBAAC,OAAD;UAAK,WAAU;oBAAf,CACE,kBAAC,IAAD;WAAU,WAAU;WAA6B,eAAY;WAAS,CAAA,EACtE,kBAAC,QAAD;WAAM,WAAU;qBACb,EAAG,kCAAkC,6BAA6B;WAC9D,CAAA,CACH;aACN,kBAAC,GAAD;UACE,eAAY;UACZ,WAAW,mDAAmD,IAA0B,cAAc;UACtG,CAAA,CACK;YACR,KACC,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,2BAA2B,gCAAgC;YAC7D,CAAA,EAGJ,kBAAC,IAAD,EAAa,SAAA,IAAU,CAAA,CACnB,EAAA,CAAA;WACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EACC,2BACA,mDACD;YACC,CAAA,EACJ,kBAAC,OAAD;YAAK,WAAU;sBAAf;aACE,kBAAC,IAAD;cACE,WAAU;cACV,eAAY;cACZ,CAAA;aACF,kBAAC,QAAD;cAAM,WAAU;wBAA6B;cAAiB,CAAA;aAC7D,GAAiB,cAAc,aAAa;aACzC;cACF,EAAA,CAAA;WACN,kBAAC,KAAD;YAAG,WAAU;sBACV,EACC,0BACA,2FACD;YACC,CAAA;WACA;;SACF,CAAA,CAEJ;;OAWN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAU;SACnB,WAAU;mBAET,EAAG,mBAAmB,OAAO;SACxB,CAAA;QACR,kBAAC,GAAD;SACE,GAAI,EAAU;SACd,MAAK;SACL,OAAO;SACP,WAAW,MAAM;AAEf,UADA,EAAQ,EAAE,OAAO,MAAM,EACvB,GAAc,GAAK;;SAErB,aAAa,EACX,qCACA,+BACD;SACD,WAAU;SACV,eAAY;SACZ,CAAA;QACF,kBAAC,KAAD;SAAG,IAAI,EAAU;SAAQ,WAAU;mBAChC,EACC,uBACA,mJACD;SACC,CAAA;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,QAAD;SAAM,WAAU;mBAAhB,CACG,EAAG,qBAAqB,SAAS,EACjC,EACI;;QAEN,KAAc,CAAC,KACd,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,IAAD;SACE,aAAa,EAAG,2BAA2B,qBAAqB;SAChE,mBAAmB,EAAG,4BAA4B,oBAAoB;SACtE,UAAU,KAAW,EAAE,EAAE,KAAK,OAAiC;UAC7D,OAAO,EAAI;UACX,OAAO,EAAI;UACX,aAAa,GAAG,EAAI,OAAO,EAAI,SAAS,MAAM,EAAI,WAAW;UAC9D,EAAE;SACH,OAAO;SACP,UAAU;SACV,WAAA;SACA,CAAA,EACF,kBAAC,KAAD;SAAG,WAAU;mBAAb;UACG,EACC,gCACA,sDACD;UAAE;UACF,KACC,kBAAC,UAAD;WACE,MAAK;WACL,eAAe;AAEb,YADA,EAAoB,GAAK,EACzB,EAAoB,EAAK,MAAM,IAAI,GAAG;;WAExC,WAAU;qBANZ,CAQE,kBAAC,IAAD;YAAM,WAAU;YAAS,eAAY;YAAS,CAAA,EAC7C,EAAG,8BAA8B,sBAAsB,CACjD;;UAET;WACH,EAAA,CAAA;QAIJ,CAAC,KAAc,CAAC,MAAkB,KAAkB,CAAC,KACpD,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,KAAD;UAAG,WAAU;oBACV,EACC,oCACA,8EACD;UACC,CAAA,EACJ,kBAAC,GAAD;UACE,MAAK;UACL,MAAK;UACL,eAAe;AAEb,WADA,EAAoB,GAAK,EACzB,EAAoB,EAAK,MAAM,IAAI,GAAG;;oBAL1C,CAQE,kBAAC,IAAD;WAAM,WAAU;WAAS,eAAY;WAAS,CAAA,EAC7C,EAAG,gCAAgC,sBAAsB,CACnD;YACL;;QAIP,KAAoB,KACnB,kBAAC,OAAD;SAAK,WAAU;mBAAf;UACE,kBAAC,KAAD;WAAG,WAAU;qBACV,EACC,8BACA,sDACD;WACC,CAAA;UACJ,kBAAC,OAAD,EAAA,UAAA;WACE,kBAAC,SAAD;YACE,SAAS,EAAkB;YAC3B,WAAU;sBAET,EAAG,yBAAyB,cAAc;YACrC,CAAA;WACR,kBAAC,GAAD;YACE,GAAI,EAAkB;YACtB,MAAK;YACL,OAAO;YACP,WAAW,MAAM,EAAoB,EAAE,OAAO,MAAM;YACpD,aAAa,EAAG,yBAAyB,cAAc;YACvD,WAAU;YACV,YAAY,MAAM;AAChB,aAAI,EAAE,QAAQ,YACZ,EAAE,gBAAgB,EACb,IAA0B;;YAGnC,CAAA;WACD,KACC,kBAAC,KAAD;YACE,IAAI,EAAkB;YACtB,MAAK;YACL,WAAU;sBAET;YACC,CAAA;WAEF,EAAA,CAAA;UACN,kBAAC,OAAD;WAAK,WAAU;qBAAf,CACE,kBAAC,GAAD;YACE,MAAK;YACL,MAAK;YACL,eAAe,KAAK,IAA0B;YAC9C,UAAU,CAAC,EAAiB,MAAM,IAAI;YACtC,aAAW;sBALb,CAOG,IACC,kBAAC,GAAD;aAAS,WAAU;aAAwB,eAAY;aAAS,CAAA,GAEhE,kBAAC,IAAD;aAAO,WAAU;aAAW,eAAY;aAAS,CAAA,EAElD,EAAG,qBAAqB,SAAS,CAC3B;eACT,kBAAC,GAAD;YACE,MAAK;YACL,SAAQ;YACR,MAAK;YACL,eAAe;AAGb,aAFA,EAAoB,GAAM,EAC1B,EAAoB,GAAG,EACvB,EAAqB,KAAK;;sBAG3B,EAAG,qBAAqB,SAAS;YAC3B,CAAA,CACL;;UACF;;QAIP,MAAkB,CAAC,KAClB,kBAAC,OAAD;SACE,MAAK;SACL,WAAU;mBAFZ,CAIE,kBAAC,GAAD;UAAS,WAAU;UAAsB,eAAY;UAAS,CAAA,EAC7D,EAAG,6BAA6B,qBAAqB,CAClD;;QAEJ,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAY;SACrB,WAAU;mBAFZ,CAIG,EAAG,2BAA2B,mBAAmB,EACjD,EACK;;QACR,kBAAC,GAAD;SACE,GAAI,EAAY;SAChB,MAAK;SACL,OAAO;SACP,WAAW,MAAM,GAAa,EAAE,OAAO,MAAM;SAC7C,aAAY;SACZ,iBAAc;SACd,WAAU;SACV,CAAA;QACF,kBAAC,KAAD;SAAG,IAAI,EAAY;SAAQ,WAAU;mBAClC,EACC,4BACA,uEACD;SACC,CAAA;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD,EAAA,UAAA;QACE,kBAAC,SAAD;SACE,SAAS,EAAY;SACrB,WAAU;mBAFZ,CAIG,EAAG,0BAA0B,gBAAgB,EAC7C,EACK;;QACR,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,GAAI,EAAY;UAChB,MAAM,IAAa,SAAS;UAC5B,OAAO;UACP,WAAW,MAAM,GAAe,EAAE,OAAO,MAAM;UAC/C,aAAY;UACZ,iBAAc;UACd,WAAU;UACV,CAAA,EACF,kBAAC,GAAD;UACE,MAAK;UACL,SAAQ;UACR,MAAK;UACL,eAAe,GAAc,CAAC,EAAW;UACzC,cACE,IACI,EAAG,yBAAyB,eAAe,GAC3C,EAAG,yBAAyB,eAAe;UAEjD,gBAAc;UACd,WAAU;oBAGR,EADD,IACE,KAEA,IAFD;WAAQ,WAAU;WAA6B,eAAY;WAAS,CAEH;UAE5D,CAAA,CACL;;QACN,kBAAC,KAAD;SAAG,IAAI,EAAY;SAAQ,WAAU;mBAArC;UACG,EAAG,yBAAyB,MAAM;UAAE;UACrC,kBAAC,QAAD;WAAM,WAAU;qBAA4B;WAAe,CAAA;UAAC;UAC3D,EACC,+BACA,gDACD;UACC;;QACA,EAAA,CAAA;OAGN,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,UAAD;SACE,MAAK;SACL,eAAe,IAAiB,MAAM,CAAC,EAAE;SACzC,WAAU;SACV,iBAAe;SACf,eAAY;mBALd,CAOE,kBAAC,OAAD;UAAK,WAAU;oBAAf,CACE,kBAAC,IAAD;WAAW,WAAU;WAA6B,eAAY;WAAS,CAAA,EACvE,kBAAC,QAAD;WAAM,WAAU;qBACb,EAAG,8BAA8B,mBAAmB;WAChD,CAAA,CACH;aACN,kBAAC,IAAD;UACE,eAAY;UACZ,WAAW,mDAAmD,IAAe,eAAe;UAC5F,CAAA,CACK;YACR,KACC,kBAAC,OAAD;SAAK,WAAU;mBACb,kBAAC,OAAD,EAAA,UAAA;UACE,kBAAC,SAAD;WACE,SAAS,EAAa;WACtB,WAAU;qBAET,EAAG,0BAA0B,eAAe;WACvC,CAAA;UACR,kBAAC,GAAD;WACE,GAAI,EAAa;WACjB,MAAK;WACL,OAAO;WACP,WAAW,MAAM,GAAW,EAAE,OAAO,MAAM;WAC3C,aAAY;WACZ,WAAU;WACV,eAAY;WACZ,CAAA;UACF,kBAAC,KAAD;WAAG,IAAI,EAAa;WAAQ,WAAU;qBACnC,EACC,8BACA,uIACD;WACC,CAAA;UACA,EAAA,CAAA;SACF,CAAA,CAEJ;;OAEL,MACC,kBAAC,OAAD;QAAK,WAAU;kBAA4C;QAAmB,CAAA;OAIhF,kBAAC,IAAD;QAAwB,WAAU;kBAAlC,CACE,kBAAC,GAAD;SAAQ,MAAK;SAAS,SAAQ;SAAU,SAAS;mBAC9C,EAAG,qBAAqB,SAAS;SAC3B,CAAA,EACT,kBAAC,GAAD;SACE,MAAK;SACL,UAAU,CAAC;SACX,eAAe;AAEb,UADA,EAAS,WAAW,EACpB,IAAe;;mBALnB,CAQG,EAAG,2BAA2B,iBAAiB,EAChD,kBAAC,GAAD;UAAc,WAAU;UAAS,eAAY;UAAS,CAAA,CAC/C;WACc;;OACrB;UAEN,kBAAC,OAAD;MAAK,WAAU;gBAAf;OAEE,kBAAC,OAAD;QAAK,WAAU;kBAAf,CAEE,kBAAC,OAAD;SACE,MAAK;SACL,WAAW,iDACT,MAAiB,OACb,uCACA,EAAa,KACX,6DACA;mBAPV,CAUG,KAAc,CAAC,IACd,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,GACA,GAAc,KAChB,kBAAC,IAAD;UAAc,WAAU;UAAkC,eAAY;UAAS,CAAA,GAC7E,IACF,kBAAC,GAAD;UAAS,WAAU;UAAgC,eAAY;UAAS,CAAA,GAExE,kBAAC,OAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EAEJ,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,0BAA0B,eAAe;YAC3C,CAAA;WACH,GAAc,MAAM,EAAa,QAChC,kBAAC,KAAD;YAAG,WAAU;sBAAb;aAAuD;aAC5C,EAAa,KAAK;aAAO;aAAa,EAAa,KAAK;aAAQ;aAChE,KAAK,MAAM,EAAa,KAAK,OAAO;aAAC;aAC5C;;WAEL,KAAgB,CAAC,EAAa,MAC7B,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAa;YACZ,CAAA;WAEF;YACF;YAGN,kBAAC,OAAD;SACE,MAAK;SACL,WAAW,iDACT,MAAmB,OACf,uCACA,EAAe,KACb,6DACA;mBAPV,CAUG,KAAc,CAAC,IACd,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,GACA,GAAgB,KAClB,kBAAC,IAAD;UAAc,WAAU;UAAkC,eAAY;UAAS,CAAA,GAC7E,IACF,kBAAC,GAAD;UAAS,WAAU;UAAgC,eAAY;UAAS,CAAA,GAExE,kBAAC,OAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EAEJ,kBAAC,OAAD;UAAK,WAAU;oBAAf;WACE,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAG,wBAAwB,aAAa;YACvC,CAAA;WACH,GAAgB,MAAM,EAAe,QACpC,kBAAC,KAAD;YAAG,WAAU;sBAAb;aAAuD;aAC9C,EAAe,KAAK;aAAS;aAAI,EAAe,KAAK;aAAS;aAAG;aACvE,EAAe,KAAK;aACnB;;WAEL,KAAkB,CAAC,EAAe,MACjC,kBAAC,KAAD;YAAG,WAAU;sBACV,EAAe;YACd,CAAA;WAEF;YACF;WACF;;OAGL,CAAC,MAAe,CAAC,GAAc,MAAM,CAAC,GAAgB,OACrD,kBAAC,GAAD;QAAQ,MAAK;QAAS,SAAQ;QAAQ,MAAK;QAAK,SAAS;kBAAzD,CACE,kBAAC,IAAD;SAAW,WAAU;SAAW,eAAY;SAAS,CAAA,EACpD,EAAG,8BAA8B,mBAAmB,CAC9C;;OAKV,MACC,kBAAC,OAAD;QAAK,WAAU;kBAAf,CACE,kBAAC,KAAD;SAAG,WAAU;mBACV,EAAG,gCAAgC,sBAAsB;SACxD,CAAA,EAEJ,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,SAAD;UACE,SAAS,GAAc;UACvB,WAAU;oBAET,EAAG,uBAAuB,WAAW;UAChC,CAAA,EACR,kBAAC,IAAD;UAAQ,OAAO;UAAkB,eAAe;oBAAhD,CACE,kBAAC,IAAD;WAAe,IAAI,GAAc;WAAI,WAAU;qBAC7C,kBAAC,IAAD,EAAe,CAAA;WACD,CAAA,EAChB,kBAAC,IAAD,EAAA,UAAA;WACE,kBAAC,GAAD;YAAY,OAAM;sBAAQ;YAAkB,CAAA;WAC5C,kBAAC,GAAD;YAAY,OAAM;sBAAS;YAAkB,CAAA;WAC7C,kBAAC,GAAD;YAAY,OAAM;sBAAU;YAAoB,CAAA;WAClC,EAAA,CAAA,CACT;YACL,EAAA,CAAA,EACN,kBAAC,OAAD,EAAA,UAAA,CACE,kBAAC,SAAD;UACE,SAAS,GAAU;UACnB,WAAU;oBAET,EAAG,2BAA2B,eAAe;UACxC,CAAA,EACR,kBAAC,IAAD;UAAQ,OAAO;UAAc,eAAe;oBAA5C,CACE,kBAAC,IAAD;WAAe,IAAI,GAAU;WAAI,WAAU;qBACzC,kBAAC,IAAD,EAAe,CAAA;WACD,CAAA,EAChB,kBAAC,IAAD,EAAA,UAAA;WACE,kBAAC,GAAD;YAAY,OAAM;sBAAS;YAAmB,CAAA;WAC9C,kBAAC,GAAD;YAAY,OAAM;sBAAQ;YAAkB,CAAA;WAC5C,kBAAC,GAAD;YAAY,OAAM;sBAAU;YAAoB,CAAA;WAClC,EAAA,CAAA,CACT;YACL,EAAA,CAAA,CACF;WACF;;OAIP,MACC,kBAAC,OAAD;QACE,MAAK;QACL,WAAU;kBAFZ,CAIE,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,WAAU;UACV,eAAY;UACZ,CAAA,EACF,kBAAC,KAAD;UAAG,WAAU;oBAA8C;UAAgB,CAAA,CACvE;YACN,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,GAAD;UACE,MAAK;UACL,SAAQ;UACR,MAAK;UACL,eAAe;AAOb,WANA,EAAe,KAAK,EAEpB,EAAS,UAAU,EACnB,GAAa,GAAG,EAChB,GAAe,GAAG,EAClB,EAAgB,KAAK,EACrB,EAAkB,KAAK;;oBAX3B,CAcE,kBAAC,IAAD;WAAW,WAAU;WAAW,eAAY;WAAS,CAAA,EACpD,EAAG,gCAAgC,sBAAsB,CACnD;aACT,kBAAC,GAAD;UAAQ,MAAK;UAAS,SAAQ;UAAQ,MAAK;UAAK,SAAS;oBACtD,EAAG,oBAAoB,QAAQ;UACzB,CAAA,CACL;WACF;;OAIR,kBAAC,IAAD;QAAwB,WAAU;kBAAlC,CACE,kBAAC,GAAD;SAAQ,MAAK;SAAS,SAAQ;SAAU,eAAe,EAAS,UAAU;mBAA1E,CACE,kBAAC,IAAD;UAAa,WAAU;UAAS,eAAY;UAAS,CAAA,EACpD,EAAG,mBAAmB,OAAO,CACvB;YACT,kBAAC,GAAD;SACE,MAAK;SACL,UAAU,CAAC,MAAsB,KAAa;SAC9C,SAAS;SACT,aAAW;mBAEV,IACC,kBAAA,GAAA,EAAA,UAAA,CACE,kBAAC,GAAD;UAAS,WAAU;UAAsB,eAAY;UAAS,CAAA,EAC7D,EAAG,qBAAqB,YAAY,CACpC,EAAA,CAAA,GAEH,kBAAA,GAAA,EAAA,UAAA,CACG,EAAG,uBAAuB,YAAY,EACvC,kBAAC,GAAD;UAAc,WAAU;UAAS,eAAY;UAAS,CAAA,CACrD,EAAA,CAAA;SAEE,CAAA,CACc;;OACrB;;KAEO,CAAA;IACO;;EACT,CAAA"}
package/dist/components/security/agentClient.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"agentClient.js","names":[],"sources":["../../../src/components/security/agentClient.ts"],"sourcesContent":["/**\n * Security-scan client over the svc GraphQL proxy.\n *\n * F4 Wave C: removed the direct browser→agent REST path. The browser\n * never sees the agent's API key — instead it hands the svc an\n * `agentId`, a canonical profile, and an opaque `pathTail`; the svc\n * owns the agentApiKey, validates the path, and forwards to\n * `/api/profiles/<profile>/security<pathTail>` via `proxyAgentRequest`.\n *\n * The svc returns an `AgentProxyResponse { ok, status, data, error }`;\n * we parse `.data` here per the vibe-plugin-security wire shape.\n */\nimport type { ApolloClient } from '@apollo/client';\nimport {\n AgentSecurityScanProxyDocument,\n AgentSecurityScanMutateDocument,\n type AgentSecurityScanProxyQuery,\n type AgentSecurityScanProxyQueryVariables,\n type AgentSecurityScanMutateMutation,\n type AgentSecurityScanMutateMutationVariables,\n} from '@/generated/wspace-operations';\nimport type { SecuritySummary } from './types';\n\n/**\n * Caller-supplied opts: the svc-side proxy owns the agentApiKey, so the\n * browser only needs the agent id, the canonical profile, and an Apollo\n * client to talk GraphQL with.\n */\nexport interface SecurityAgentOpts {\n /** Agent id — required by the @rbac decorator on the svc proxy fields. */\n agentId: string;\n /** Canonical profile name (e.g. \"default\"). */\n profile: string;\n /** Apollo client (injected via `useApolloClient()` in hooks). */\n apolloClient: ApolloClient;\n}\n\nexport class SecurityAgentError extends Error {\n readonly code: string;\n readonly status: number;\n constructor(code: string, status: number, message: string) {\n super(message);\n this.name = 'SecurityAgentError';\n this.code = code;\n this.status = status;\n }\n}\n\n/** Agent-side severity enum (lowercase) — see vibe-plugin-security types.ts. */\nexport type AgentSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';\n\n/** Agent-side finding status enum (lowercase). */\nexport type AgentFindingStatus = 'open' | 'accepted' | 'fixed' | 'false_positive' | 'suppressed';\n\n/** Agent-side scan status enum (lowercase). */\nexport type AgentScanStatus =\n | 'queued'\n | 'running'\n | 'succeeded'\n | 'failed'\n | 'errored'\n | 'cancelled';\n\n/** Agent-side scan conclusion enum (lowercase). */\nexport type AgentScanConclusion = 'pass' | 'warn' | 'fail' | 'skipped';\n\n/** Agent-side policy level enum (lowercase). */\nexport type AgentPolicyLevel = 'advisory' | 'warn' | 'block';\n\n/** Agent-side stage enum — dotted form (e.g. `pull_request.fast`). */\nexport type AgentStage =\n | 'repo.onboard'\n | 'developer.local'\n | 'pull_request.fast'\n | 'pull_request.deep'\n | 'main.merge'\n | 'build'\n | 'package.publish'\n | 'deploy.preview'\n | 'deploy.alpha'\n | 'promote.prod'\n | 'runtime.continuous'\n | 'scheduled.rescan'\n | 'incident.response'\n | 'archive.offboard';\n\n/** Per-stage provider directory returned by GET /providers. */\nexport interface SecurityProvidersByStage {\n stages: Record<string, Array<{ name: string; isDefault: boolean }>>;\n}\n\n/** One scan run as surfaced by GET /scan/:runId. Mirrors `ScanRunRecord`. */\nexport interface SecurityScanRun {\n runId: string;\n vibeId: string;\n workspaceId: string;\n repoUrl: string;\n commit: string;\n stage: AgentStage;\n providerName: string;\n status: AgentScanStatus;\n conclusion?: AgentScanConclusion;\n startedAt?: number;\n finishedAt?: number;\n durationMs?: number;\n summary: SecuritySummary;\n policyLevel: AgentPolicyLevel;\n errorReason?: string;\n pushed?: boolean;\n}\n\n/** One finding as surfaced by GET /findings. Mirrors `FindingRecord`. */\nexport interface SecurityFinding {\n fingerprint: string;\n vibeId: string;\n scanRunId: string;\n ruleId: string;\n title: string;\n description?: string;\n severity: AgentSeverity;\n category: string;\n status: AgentFindingStatus;\n cwe?: string[];\n cve?: string;\n file?: string;\n line?: number;\n column?: number;\n packageName?: string;\n packageVersion?: string;\n fixedVersion?: string;\n remediation?: string;\n rawProviderRef?: string;\n redactedSample?: string;\n firstSeenAt: number;\n lastSeenAt: number;\n}\n\nexport interface FindingsFilter {\n vibeId?: string;\n severity?: AgentSeverity;\n status?: AgentFindingStatus;\n limit?: number;\n}\n\nexport interface FindingsPage {\n findings: SecurityFinding[];\n total: number;\n}\n\nexport interface StartScanInput {\n vibeId: string;\n workspaceId: string;\n repoUrl: string;\n repoLocalPath: string;\n commit: string;\n stage: AgentStage;\n providerName?: string;\n policyLevel?: AgentPolicyLevel;\n config?: Record<string, unknown>;\n profile?: { kind: string; languages: string[]; runtimes: string[] };\n}\n\nexport interface StartScanResult {\n runId: string;\n status: AgentScanStatus;\n}\n\ninterface ProxyEnvelope {\n ok: boolean;\n status: number;\n data: unknown;\n error: string | null;\n}\n\nfunction unwrap<T>(env: ProxyEnvelope | null | undefined, pathTail: string): T {\n if (!env) {\n throw new SecurityAgentError('NO_RESPONSE', 0, `security ${pathTail}: no svc response`);\n }\n if (!env.ok) {\n const status = env.status || 0;\n let code = 'UPSTREAM';\n let message = env.error || `security ${pathTail} ${status}`;\n // The agent emits `{ code, error }` JSON on failures, and the svc\n // forwards it untouched in `data` when the upstream replied with\n // structured JSON. Prefer that over the generic envelope.error.\n if (env.data && typeof env.data === 'object') {\n const body = env.data as { code?: string; error?: string };\n if (body.code) code = body.code;\n if (body.error) message = body.error;\n }\n throw new SecurityAgentError(code, status, message);\n }\n return env.data as T;\n}\n\nasync function proxyGet<T>(o: SecurityAgentOpts, pathTail: string): Promise<T> {\n const res = await o.apolloClient.query<\n AgentSecurityScanProxyQuery,\n AgentSecurityScanProxyQueryVariables\n >({\n query: AgentSecurityScanProxyDocument,\n variables: { agentId: o.agentId, profile: o.profile, pathTail },\n fetchPolicy: 'network-only',\n });\n return unwrap<T>(res.data?.agentSecurityScanProxy as ProxyEnvelope | undefined, pathTail);\n}\n\nasync function proxyPost<T>(o: SecurityAgentOpts, pathTail: string, body?: unknown): Promise<T> {\n const res = await o.apolloClient.mutate<\n AgentSecurityScanMutateMutation,\n AgentSecurityScanMutateMutationVariables\n >({\n mutation: AgentSecurityScanMutateDocument,\n variables: {\n agentId: o.agentId,\n profile: o.profile,\n pathTail,\n body: (body ?? null) as AgentSecurityScanMutateMutationVariables['body'],\n },\n });\n return unwrap<T>(res.data?.agentSecurityScanMutate as ProxyEnvelope | undefined, pathTail);\n}\n\nexport const securityAgent = {\n /** GET /providers — per-stage provider directory. */\n listProviders(o: SecurityAgentOpts): Promise<SecurityProvidersByStage> {\n return proxyGet(o, '/providers');\n },\n\n /** GET /findings — filtered finding list. */\n listFindings(o: SecurityAgentOpts, filter: FindingsFilter = {}): Promise<FindingsPage> {\n const q = new URLSearchParams();\n if (filter.vibeId) q.set('vibeId', filter.vibeId);\n if (filter.severity) q.set('severity', filter.severity);\n if (filter.status) q.set('status', filter.status);\n if (filter.limit !== undefined) q.set('limit', String(filter.limit));\n const qs = q.toString();\n return proxyGet(o, `/findings${qs ? `?${qs}` : ''}`);\n },\n\n /** GET /scan/:runId — single scan run by id. */\n async getScan(o: SecurityAgentOpts, runId: string): Promise<SecurityScanRun> {\n const res = await proxyGet<{ run: SecurityScanRun }>(o, `/scan/${encodeURIComponent(runId)}`);\n return res.run;\n },\n\n /** POST /scan — start a scan. */\n startScan(o: SecurityAgentOpts, input: StartScanInput): Promise<StartScanResult> {\n return proxyPost(o, '/scan', input);\n },\n\n /** POST /scan/:runId/cancel — cancel an in-flight scan. */\n cancelScan(o: SecurityAgentOpts, runId: string): Promise<{ cancelled: boolean }> {\n return proxyPost(o, `/scan/${encodeURIComponent(runId)}/cancel`);\n },\n\n /**\n * Aggregate recent scan runs for a vibe by fanning out from the\n * findings list (the agent doesn't expose a list-runs endpoint).\n *\n * Strategy: list findings filtered by vibeId, take the distinct\n * `scanRunId`s (preserving last-seen order from the agent's\n * `ORDER BY last_seen_at DESC`), then resolve each id via\n * GET /scan/:runId. Unresolvable runs are dropped silently.\n */\n async listRecentScanRuns(\n o: SecurityAgentOpts,\n vibeId: string,\n limit = 20\n ): Promise<SecurityScanRun[]> {\n // Pull enough findings to surface ~`limit` distinct runs even when a\n // single run produces many findings. The agent caps at 1000.\n const page = await securityAgent.listFindings(o, {\n vibeId,\n limit: Math.min(1000, Math.max(100, limit * 25)),\n });\n const seen = new Set<string>();\n const ids: string[] = [];\n for (const f of page.findings) {\n if (!seen.has(f.scanRunId)) {\n seen.add(f.scanRunId);\n ids.push(f.scanRunId);\n if (ids.length >= limit) break;\n }\n }\n const runs = await Promise.all(\n ids.map(async (id) => {\n try {\n return await securityAgent.getScan(o, id);\n } catch (err) {\n if (err instanceof SecurityAgentError && err.status === 404) return null;\n throw err;\n }\n })\n );\n return runs.filter((r): r is SecurityScanRun => r !== null);\n },\n};\n"],"mappings":";;AAqCA,IAAa,IAAb,cAAwC,MAAM;CAC5C;CACA;CACA,YAAY,GAAc,GAAgB,GAAiB;AAIzD,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,sBACZ,KAAK,OAAO,GACZ,KAAK,SAAS;;;AAkIlB,SAAS,EAAU,GAAuC,GAAqB;AAC7E,KAAI,CAAC,EACH,OAAM,IAAI,EAAmB,eAAe,GAAG,YAAY,EAAS,mBAAmB;AAEzF,KAAI,CAAC,EAAI,IAAI;EACX,IAAM,IAAS,EAAI,UAAU,GACzB,IAAO,YACP,IAAU,EAAI,SAAS,YAAY,EAAS,GAAG;AAInD,MAAI,EAAI,QAAQ,OAAO,EAAI,QAAS,UAAU;GAC5C,IAAM,IAAO,EAAI;AAEjB,GADI,EAAK,SAAM,IAAO,EAAK,OACvB,EAAK,UAAO,IAAU,EAAK;;AAEjC,QAAM,IAAI,EAAmB,GAAM,GAAQ,EAAQ;;AAErD,QAAO,EAAI;;AAGb,eAAe,EAAY,GAAsB,GAA8B;AAS7E,QAAO,GARK,MAAM,EAAE,aAAa,MAG/B;EACA,OAAO;EACP,WAAW;GAAE,SAAS,EAAE;GAAS,SAAS,EAAE;GAAS;GAAU;EAC/D,aAAa;EACd,CAAC,EACmB,MAAM,wBAAqD,EAAS;;AAG3F,eAAe,EAAa,GAAsB,GAAkB,GAA4B;AAa9F,QAAO,GAZK,MAAM,EAAE,aAAa,OAG/B;EACA,UAAU;EACV,WAAW;GACT,SAAS,EAAE;GACX,SAAS,EAAE;GACX;GACA,MAAO,KAAQ;GAChB;EACF,CAAC,EACmB,MAAM,yBAAsD,EAAS;;AAG5F,IAAa,IAAgB;CAE3B,cAAc,GAAyD;AACrE,SAAO,EAAS,GAAG,aAAa;;CAIlC,aAAa,GAAsB,IAAyB,EAAE,EAAyB;EACrF,IAAM,IAAI,IAAI,iBAAiB;AAI/B,EAHI,EAAO,UAAQ,EAAE,IAAI,UAAU,EAAO,OAAO,EAC7C,EAAO,YAAU,EAAE,IAAI,YAAY,EAAO,SAAS,EACnD,EAAO,UAAQ,EAAE,IAAI,UAAU,EAAO,OAAO,EAC7C,EAAO,UAAU,KAAA,KAAW,EAAE,IAAI,SAAS,OAAO,EAAO,MAAM,CAAC;EACpE,IAAM,IAAK,EAAE,UAAU;AACvB,SAAO,EAAS,GAAG,YAAY,IAAK,IAAI,MAAO,KAAK;;CAItD,MAAM,QAAQ,GAAsB,GAAyC;AAE3E,UADY,MAAM,EAAmC,GAAG,SAAS,mBAAmB,EAAM,GAAG,EAClF;;CAIb,UAAU,GAAsB,GAAiD;AAC/E,SAAO,EAAU,GAAG,SAAS,EAAM;;CAIrC,WAAW,GAAsB,GAAgD;AAC/E,SAAO,EAAU,GAAG,SAAS,mBAAmB,EAAM,CAAC,SAAS;;CAYlE,MAAM,mBACJ,GACA,GACA,IAAQ,IACoB;EAG5B,IAAM,IAAO,MAAM,EAAc,aAAa,GAAG;GAC/C;GACA,OAAO,KAAK,IAAI,KAAM,KAAK,IAAI,KAAK,IAAQ,GAAG,CAAC;GACjD,CAAC,EACI,oBAAO,IAAI,KAAa,EACxB,IAAgB,EAAE;AACxB,OAAK,IAAM,KAAK,EAAK,SACnB,KAAI,CAAC,EAAK,IAAI,EAAE,UAAU,KACxB,EAAK,IAAI,EAAE,UAAU,EACrB,EAAI,KAAK,EAAE,UAAU,EACjB,EAAI,UAAU,GAAO;AAa7B,UAVa,MAAM,QAAQ,IACzB,EAAI,IAAI,OAAO,MAAO;AACpB,OAAI;AACF,WAAO,MAAM,EAAc,QAAQ,GAAG,EAAG;YAClC,GAAK;AACZ,QAAI,aAAe,KAAsB,EAAI,WAAW,IAAK,QAAO;AACpE,UAAM;;IAER,CACH,EACW,QAAQ,MAA4B,MAAM,KAAK;;CAE9D"}
1
+ {"version":3,"file":"agentClient.js","names":[],"sources":["../../../src/components/security/agentClient.ts"],"sourcesContent":["/**\n * Security-scan client over the svc GraphQL proxy.\n *\n * F4 Wave C: removed the direct browser→agent REST path. The browser\n * never sees the agent's API key — instead it hands the svc an\n * `agentId`, a canonical profile, and an opaque `pathTail`; the svc\n * owns the agentApiKey, validates the path, and forwards to\n * `/api/profiles/<profile>/security<pathTail>` via `proxyAgentRequest`.\n *\n * The svc returns an `AgentProxyResponse { ok, status, data, error }`;\n * we parse `.data` here per the vibe-plugin-security wire shape.\n */\nimport type { ApolloClient } from '@apollo/client';\nimport {\n AgentSecurityScanProxyDocument,\n AgentSecurityScanMutateDocument,\n type AgentSecurityScanProxyQuery,\n type AgentSecurityScanProxyQueryVariables,\n type AgentSecurityScanMutateMutation,\n type AgentSecurityScanMutateMutationVariables,\n} from '@/generated/wspace-operations';\nimport type { SecuritySummary } from './types';\n\n/**\n * Caller-supplied opts: the svc-side proxy owns the agentApiKey, so the\n * browser only needs the agent id, the canonical profile, and an Apollo\n * client to talk GraphQL with.\n */\nexport interface SecurityAgentOpts {\n /** Agent id — required by the @rbac decorator on the svc proxy fields. */\n agentId: string;\n /** Canonical profile name (e.g. \"default\"). */\n profile: string;\n /** Apollo client (injected via `useApolloClient()` in hooks). */\n apolloClient: ApolloClient;\n}\n\nexport class SecurityAgentError extends Error {\n readonly code: string;\n readonly status: number;\n constructor(code: string, status: number, message: string) {\n super(message);\n this.name = 'SecurityAgentError';\n this.code = code;\n this.status = status;\n }\n}\n\n/** Agent-side severity enum (lowercase) — see vibe-plugin-security types.ts. */\nexport type AgentSeverity = 'critical' | 'high' | 'medium' | 'low' | 'info';\n\n/** Agent-side finding status enum (lowercase). */\nexport type AgentFindingStatus = 'open' | 'accepted' | 'fixed' | 'false_positive' | 'suppressed';\n\n/** Agent-side scan status enum (lowercase). */\nexport type AgentScanStatus =\n 'queued' | 'running' | 'succeeded' | 'failed' | 'errored' | 'cancelled';\n\n/** Agent-side scan conclusion enum (lowercase). */\nexport type AgentScanConclusion = 'pass' | 'warn' | 'fail' | 'skipped';\n\n/** Agent-side policy level enum (lowercase). */\nexport type AgentPolicyLevel = 'advisory' | 'warn' | 'block';\n\n/** Agent-side stage enum — dotted form (e.g. `pull_request.fast`). */\nexport type AgentStage =\n | 'repo.onboard'\n | 'developer.local'\n | 'pull_request.fast'\n | 'pull_request.deep'\n | 'main.merge'\n | 'build'\n | 'package.publish'\n | 'deploy.preview'\n | 'deploy.alpha'\n | 'promote.prod'\n | 'runtime.continuous'\n | 'scheduled.rescan'\n | 'incident.response'\n | 'archive.offboard';\n\n/** Per-stage provider directory returned by GET /providers. */\nexport interface SecurityProvidersByStage {\n stages: Record<string, Array<{ name: string; isDefault: boolean }>>;\n}\n\n/** One scan run as surfaced by GET /scan/:runId. Mirrors `ScanRunRecord`. */\nexport interface SecurityScanRun {\n runId: string;\n vibeId: string;\n workspaceId: string;\n repoUrl: string;\n commit: string;\n stage: AgentStage;\n providerName: string;\n status: AgentScanStatus;\n conclusion?: AgentScanConclusion;\n startedAt?: number;\n finishedAt?: number;\n durationMs?: number;\n summary: SecuritySummary;\n policyLevel: AgentPolicyLevel;\n errorReason?: string;\n pushed?: boolean;\n}\n\n/** One finding as surfaced by GET /findings. Mirrors `FindingRecord`. */\nexport interface SecurityFinding {\n fingerprint: string;\n vibeId: string;\n scanRunId: string;\n ruleId: string;\n title: string;\n description?: string;\n severity: AgentSeverity;\n category: string;\n status: AgentFindingStatus;\n cwe?: string[];\n cve?: string;\n file?: string;\n line?: number;\n column?: number;\n packageName?: string;\n packageVersion?: string;\n fixedVersion?: string;\n remediation?: string;\n rawProviderRef?: string;\n redactedSample?: string;\n firstSeenAt: number;\n lastSeenAt: number;\n}\n\nexport interface FindingsFilter {\n vibeId?: string;\n severity?: AgentSeverity;\n status?: AgentFindingStatus;\n limit?: number;\n}\n\nexport interface FindingsPage {\n findings: SecurityFinding[];\n total: number;\n}\n\nexport interface StartScanInput {\n vibeId: string;\n workspaceId: string;\n repoUrl: string;\n repoLocalPath: string;\n commit: string;\n stage: AgentStage;\n providerName?: string;\n policyLevel?: AgentPolicyLevel;\n config?: Record<string, unknown>;\n profile?: { kind: string; languages: string[]; runtimes: string[] };\n}\n\nexport interface StartScanResult {\n runId: string;\n status: AgentScanStatus;\n}\n\ninterface ProxyEnvelope {\n ok: boolean;\n status: number;\n data: unknown;\n error: string | null;\n}\n\nfunction unwrap<T>(env: ProxyEnvelope | null | undefined, pathTail: string): T {\n if (!env) {\n throw new SecurityAgentError('NO_RESPONSE', 0, `security ${pathTail}: no svc response`);\n }\n if (!env.ok) {\n const status = env.status || 0;\n let code = 'UPSTREAM';\n let message = env.error || `security ${pathTail} ${status}`;\n // The agent emits `{ code, error }` JSON on failures, and the svc\n // forwards it untouched in `data` when the upstream replied with\n // structured JSON. Prefer that over the generic envelope.error.\n if (env.data && typeof env.data === 'object') {\n const body = env.data as { code?: string; error?: string };\n if (body.code) code = body.code;\n if (body.error) message = body.error;\n }\n throw new SecurityAgentError(code, status, message);\n }\n return env.data as T;\n}\n\nasync function proxyGet<T>(o: SecurityAgentOpts, pathTail: string): Promise<T> {\n const res = await o.apolloClient.query<\n AgentSecurityScanProxyQuery,\n AgentSecurityScanProxyQueryVariables\n >({\n query: AgentSecurityScanProxyDocument,\n variables: { agentId: o.agentId, profile: o.profile, pathTail },\n fetchPolicy: 'network-only',\n });\n return unwrap<T>(res.data?.agentSecurityScanProxy as ProxyEnvelope | undefined, pathTail);\n}\n\nasync function proxyPost<T>(o: SecurityAgentOpts, pathTail: string, body?: unknown): Promise<T> {\n const res = await o.apolloClient.mutate<\n AgentSecurityScanMutateMutation,\n AgentSecurityScanMutateMutationVariables\n >({\n mutation: AgentSecurityScanMutateDocument,\n variables: {\n agentId: o.agentId,\n profile: o.profile,\n pathTail,\n body: (body ?? null) as AgentSecurityScanMutateMutationVariables['body'],\n },\n });\n return unwrap<T>(res.data?.agentSecurityScanMutate as ProxyEnvelope | undefined, pathTail);\n}\n\nexport const securityAgent = {\n /** GET /providers — per-stage provider directory. */\n listProviders(o: SecurityAgentOpts): Promise<SecurityProvidersByStage> {\n return proxyGet(o, '/providers');\n },\n\n /** GET /findings — filtered finding list. */\n listFindings(o: SecurityAgentOpts, filter: FindingsFilter = {}): Promise<FindingsPage> {\n const q = new URLSearchParams();\n if (filter.vibeId) q.set('vibeId', filter.vibeId);\n if (filter.severity) q.set('severity', filter.severity);\n if (filter.status) q.set('status', filter.status);\n if (filter.limit !== undefined) q.set('limit', String(filter.limit));\n const qs = q.toString();\n return proxyGet(o, `/findings${qs ? `?${qs}` : ''}`);\n },\n\n /** GET /scan/:runId — single scan run by id. */\n async getScan(o: SecurityAgentOpts, runId: string): Promise<SecurityScanRun> {\n const res = await proxyGet<{ run: SecurityScanRun }>(o, `/scan/${encodeURIComponent(runId)}`);\n return res.run;\n },\n\n /** POST /scan — start a scan. */\n startScan(o: SecurityAgentOpts, input: StartScanInput): Promise<StartScanResult> {\n return proxyPost(o, '/scan', input);\n },\n\n /** POST /scan/:runId/cancel — cancel an in-flight scan. */\n cancelScan(o: SecurityAgentOpts, runId: string): Promise<{ cancelled: boolean }> {\n return proxyPost(o, `/scan/${encodeURIComponent(runId)}/cancel`);\n },\n\n /**\n * Aggregate recent scan runs for a vibe by fanning out from the\n * findings list (the agent doesn't expose a list-runs endpoint).\n *\n * Strategy: list findings filtered by vibeId, take the distinct\n * `scanRunId`s (preserving last-seen order from the agent's\n * `ORDER BY last_seen_at DESC`), then resolve each id via\n * GET /scan/:runId. Unresolvable runs are dropped silently.\n */\n async listRecentScanRuns(\n o: SecurityAgentOpts,\n vibeId: string,\n limit = 20\n ): Promise<SecurityScanRun[]> {\n // Pull enough findings to surface ~`limit` distinct runs even when a\n // single run produces many findings. The agent caps at 1000.\n const page = await securityAgent.listFindings(o, {\n vibeId,\n limit: Math.min(1000, Math.max(100, limit * 25)),\n });\n const seen = new Set<string>();\n const ids: string[] = [];\n for (const f of page.findings) {\n if (!seen.has(f.scanRunId)) {\n seen.add(f.scanRunId);\n ids.push(f.scanRunId);\n if (ids.length >= limit) break;\n }\n }\n const runs = await Promise.all(\n ids.map(async (id) => {\n try {\n return await securityAgent.getScan(o, id);\n } catch (err) {\n if (err instanceof SecurityAgentError && err.status === 404) return null;\n throw err;\n }\n })\n );\n return runs.filter((r): r is SecurityScanRun => r !== null);\n },\n};\n"],"mappings":";;AAqCA,IAAa,IAAb,cAAwC,MAAM;CAC5C;CACA;CACA,YAAY,GAAc,GAAgB,GAAiB;AAIzD,EAHA,MAAM,EAAQ,EACd,KAAK,OAAO,sBACZ,KAAK,OAAO,GACZ,KAAK,SAAS;;;AA6HlB,SAAS,EAAU,GAAuC,GAAqB;AAC7E,KAAI,CAAC,EACH,OAAM,IAAI,EAAmB,eAAe,GAAG,YAAY,EAAS,mBAAmB;AAEzF,KAAI,CAAC,EAAI,IAAI;EACX,IAAM,IAAS,EAAI,UAAU,GACzB,IAAO,YACP,IAAU,EAAI,SAAS,YAAY,EAAS,GAAG;AAInD,MAAI,EAAI,QAAQ,OAAO,EAAI,QAAS,UAAU;GAC5C,IAAM,IAAO,EAAI;AAEjB,GADI,EAAK,SAAM,IAAO,EAAK,OACvB,EAAK,UAAO,IAAU,EAAK;;AAEjC,QAAM,IAAI,EAAmB,GAAM,GAAQ,EAAQ;;AAErD,QAAO,EAAI;;AAGb,eAAe,EAAY,GAAsB,GAA8B;AAS7E,QAAO,GARK,MAAM,EAAE,aAAa,MAG/B;EACA,OAAO;EACP,WAAW;GAAE,SAAS,EAAE;GAAS,SAAS,EAAE;GAAS;GAAU;EAC/D,aAAa;EACd,CAAC,EACmB,MAAM,wBAAqD,EAAS;;AAG3F,eAAe,EAAa,GAAsB,GAAkB,GAA4B;AAa9F,QAAO,GAZK,MAAM,EAAE,aAAa,OAG/B;EACA,UAAU;EACV,WAAW;GACT,SAAS,EAAE;GACX,SAAS,EAAE;GACX;GACA,MAAO,KAAQ;GAChB;EACF,CAAC,EACmB,MAAM,yBAAsD,EAAS;;AAG5F,IAAa,IAAgB;CAE3B,cAAc,GAAyD;AACrE,SAAO,EAAS,GAAG,aAAa;;CAIlC,aAAa,GAAsB,IAAyB,EAAE,EAAyB;EACrF,IAAM,IAAI,IAAI,iBAAiB;AAI/B,EAHI,EAAO,UAAQ,EAAE,IAAI,UAAU,EAAO,OAAO,EAC7C,EAAO,YAAU,EAAE,IAAI,YAAY,EAAO,SAAS,EACnD,EAAO,UAAQ,EAAE,IAAI,UAAU,EAAO,OAAO,EAC7C,EAAO,UAAU,KAAA,KAAW,EAAE,IAAI,SAAS,OAAO,EAAO,MAAM,CAAC;EACpE,IAAM,IAAK,EAAE,UAAU;AACvB,SAAO,EAAS,GAAG,YAAY,IAAK,IAAI,MAAO,KAAK;;CAItD,MAAM,QAAQ,GAAsB,GAAyC;AAE3E,UADY,MAAM,EAAmC,GAAG,SAAS,mBAAmB,EAAM,GAAG,EAClF;;CAIb,UAAU,GAAsB,GAAiD;AAC/E,SAAO,EAAU,GAAG,SAAS,EAAM;;CAIrC,WAAW,GAAsB,GAAgD;AAC/E,SAAO,EAAU,GAAG,SAAS,mBAAmB,EAAM,CAAC,SAAS;;CAYlE,MAAM,mBACJ,GACA,GACA,IAAQ,IACoB;EAG5B,IAAM,IAAO,MAAM,EAAc,aAAa,GAAG;GAC/C;GACA,OAAO,KAAK,IAAI,KAAM,KAAK,IAAI,KAAK,IAAQ,GAAG,CAAC;GACjD,CAAC,EACI,oBAAO,IAAI,KAAa,EACxB,IAAgB,EAAE;AACxB,OAAK,IAAM,KAAK,EAAK,SACnB,KAAI,CAAC,EAAK,IAAI,EAAE,UAAU,KACxB,EAAK,IAAI,EAAE,UAAU,EACrB,EAAI,KAAK,EAAE,UAAU,EACjB,EAAI,UAAU,GAAO;AAa7B,UAVa,MAAM,QAAQ,IACzB,EAAI,IAAI,OAAO,MAAO;AACpB,OAAI;AACF,WAAO,MAAM,EAAc,QAAQ,GAAG,EAAG;YAClC,GAAK;AACZ,QAAI,aAAe,KAAsB,EAAI,WAAW,IAAK,QAAO;AACpE,UAAM;;IAER,CACH,EACW,QAAQ,MAA4B,MAAM,KAAK;;CAE9D"}
package/dist/components/security/types.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"types.js","names":[],"sources":["../../../src/components/security/types.ts"],"sourcesContent":["/**\n * Security-tab local types. These mirror the wspace-vibecontrols-svc\n * GraphQL schema; once that schema is published to Hive Cloud and the\n * microfe regenerates codegen, the typed hooks/types from\n * src/generated/* replace these.\n */\n\nexport type SecurityStage =\n | 'REPO_ONBOARD'\n | 'DEVELOPER_LOCAL'\n | 'PULL_REQUEST_FAST'\n | 'PULL_REQUEST_DEEP'\n | 'MAIN_MERGE'\n | 'BUILD'\n | 'PACKAGE_PUBLISH'\n | 'DEPLOY_PREVIEW'\n | 'DEPLOY_ALPHA'\n | 'PROMOTE_PROD'\n | 'RUNTIME_CONTINUOUS'\n | 'SCHEDULED_RESCAN'\n | 'INCIDENT_RESPONSE'\n | 'ARCHIVE_OFFBOARD';\n\nexport const ALL_STAGES: readonly { id: SecurityStage; slug: string; label: string }[] = [\n { id: 'REPO_ONBOARD', slug: 'repo-onboard', label: '01 Onboard' },\n { id: 'DEVELOPER_LOCAL', slug: 'developer-local', label: '02 Local' },\n { id: 'PULL_REQUEST_FAST', slug: 'pull-request-fast', label: '03 PR fast' },\n { id: 'PULL_REQUEST_DEEP', slug: 'pull-request-deep', label: '04 PR deep' },\n { id: 'MAIN_MERGE', slug: 'main-merge', label: '05 Merge' },\n { id: 'BUILD', slug: 'build', label: '06 Build' },\n { id: 'PACKAGE_PUBLISH', slug: 'package-publish', label: '07 Publish' },\n { id: 'DEPLOY_PREVIEW', slug: 'deploy-preview', label: '08 Preview' },\n { id: 'DEPLOY_ALPHA', slug: 'deploy-alpha', label: '09 Alpha' },\n { id: 'PROMOTE_PROD', slug: 'promote-prod', label: '10 Prod gate' },\n { id: 'RUNTIME_CONTINUOUS', slug: 'runtime-continuous', label: '11 Runtime' },\n { id: 'SCHEDULED_RESCAN', slug: 'scheduled-rescan', label: '12 Rescan' },\n { id: 'INCIDENT_RESPONSE', slug: 'incident-response', label: '13 Incident' },\n { id: 'ARCHIVE_OFFBOARD', slug: 'archive-offboard', label: '14 Archive' },\n];\n\nexport const STAGE_BY_ID = new Map(ALL_STAGES.map((s) => [s.id, s]));\n\nexport type SecurityScanStatus =\n | 'QUEUED'\n | 'RUNNING'\n | 'SUCCEEDED'\n | 'FAILED'\n | 'ERRORED'\n | 'CANCELLED';\n\nexport type SecurityScanConclusion = 'PASS' | 'WARN' | 'FAIL' | 'SKIPPED';\nexport type SecuritySeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';\nexport type SecurityFindingCategory =\n | 'SECRET'\n | 'VULN'\n | 'SAST'\n | 'LICENSE'\n | 'POLICY'\n | 'CONFIG'\n | 'SUPPLYCHAIN';\nexport type SecurityFindingStatus = 'OPEN' | 'ACCEPTED' | 'FIXED' | 'FALSE_POSITIVE' | 'SUPPRESSED';\nexport type SecurityPolicyLevel = 'ADVISORY' | 'WARN' | 'BLOCK';\n\nexport interface SecuritySummary {\n critical: number;\n high: number;\n medium: number;\n low: number;\n info: number;\n}\n\nexport interface SecurityScanRun {\n id: string;\n vibeId: string;\n stage: SecurityStage;\n status: SecurityScanStatus;\n conclusion?: SecurityScanConclusion | null;\n providerName: string;\n startedAt?: string | null;\n finishedAt?: string | null;\n durationMs?: number | null;\n summary: SecuritySummary;\n evidence?: SecurityEvidenceRow[];\n}\n\nexport interface SecurityEvidenceRow {\n id: string;\n type: string;\n sha256: string;\n sizeBytes: number;\n downloadUrl?: string | null;\n}\n\nexport interface SecurityFindingRow {\n id: string;\n fingerprint: string;\n ruleId: string;\n title: string;\n severity: SecuritySeverity;\n category: SecurityFindingCategory;\n file?: string | null;\n line?: number | null;\n packageName?: string | null;\n packageVersion?: string | null;\n fixedVersion?: string | null;\n status: SecurityFindingStatus;\n remediation?: string | null;\n redactedSample?: string | null;\n firstSeenAt: string;\n lastSeenAt: string;\n}\n\nexport interface SecurityProviderRow {\n id: string;\n pluginName: string;\n providerName: string;\n stage: SecurityStage;\n toolVersion: string;\n isDefault: boolean;\n enabled: boolean;\n}\n\nexport interface SecurityStatusPayload {\n vibeId: string;\n policyLevel: SecurityPolicyLevel;\n lastScanAt?: string | null;\n perStage: Record<string, { lastRun?: SecurityScanRun; conclusion?: SecurityScanConclusion }>;\n totals: SecuritySummary;\n}\n\nexport type StageNodeStatus =\n | 'never-run'\n | 'in-progress'\n | 'passed'\n | 'warn'\n | 'failed'\n | 'skipped';\n\nexport function deriveStageStatus(\n stage: SecurityStatusPayload['perStage'][string]\n): StageNodeStatus {\n if (!stage?.lastRun) return 'never-run';\n if (stage.lastRun.status === 'RUNNING' || stage.lastRun.status === 'QUEUED') return 'in-progress';\n if (stage.conclusion === 'PASS') return 'passed';\n if (stage.conclusion === 'WARN') return 'warn';\n if (stage.conclusion === 'FAIL') return 'failed';\n return 'skipped';\n}\n"],"mappings":";AAuBA,IAAa,IAA4E;CACvF;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAc;CACjE;EAAE,IAAI;EAAmB,MAAM;EAAmB,OAAO;EAAY;CACrE;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAc;CAC3E;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAc;CAC3E;EAAE,IAAI;EAAc,MAAM;EAAc,OAAO;EAAY;CAC3D;EAAE,IAAI;EAAS,MAAM;EAAS,OAAO;EAAY;CACjD;EAAE,IAAI;EAAmB,MAAM;EAAmB,OAAO;EAAc;CACvE;EAAE,IAAI;EAAkB,MAAM;EAAkB,OAAO;EAAc;CACrE;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAY;CAC/D;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAgB;CACnE;EAAE,IAAI;EAAsB,MAAM;EAAsB,OAAO;EAAc;CAC7E;EAAE,IAAI;EAAoB,MAAM;EAAoB,OAAO;EAAa;CACxE;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAe;CAC5E;EAAE,IAAI;EAAoB,MAAM;EAAoB,OAAO;EAAc;CAC1E;AAE0B,IAAI,IAAI,EAAW,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC"}
1
+ {"version":3,"file":"types.js","names":[],"sources":["../../../src/components/security/types.ts"],"sourcesContent":["/**\n * Security-tab local types. These mirror the wspace-vibecontrols-svc\n * GraphQL schema; once that schema is published to Hive Cloud and the\n * microfe regenerates codegen, the typed hooks/types from\n * src/generated/* replace these.\n */\n\nexport type SecurityStage =\n | 'REPO_ONBOARD'\n | 'DEVELOPER_LOCAL'\n | 'PULL_REQUEST_FAST'\n | 'PULL_REQUEST_DEEP'\n | 'MAIN_MERGE'\n | 'BUILD'\n | 'PACKAGE_PUBLISH'\n | 'DEPLOY_PREVIEW'\n | 'DEPLOY_ALPHA'\n | 'PROMOTE_PROD'\n | 'RUNTIME_CONTINUOUS'\n | 'SCHEDULED_RESCAN'\n | 'INCIDENT_RESPONSE'\n | 'ARCHIVE_OFFBOARD';\n\nexport const ALL_STAGES: readonly { id: SecurityStage; slug: string; label: string }[] = [\n { id: 'REPO_ONBOARD', slug: 'repo-onboard', label: '01 Onboard' },\n { id: 'DEVELOPER_LOCAL', slug: 'developer-local', label: '02 Local' },\n { id: 'PULL_REQUEST_FAST', slug: 'pull-request-fast', label: '03 PR fast' },\n { id: 'PULL_REQUEST_DEEP', slug: 'pull-request-deep', label: '04 PR deep' },\n { id: 'MAIN_MERGE', slug: 'main-merge', label: '05 Merge' },\n { id: 'BUILD', slug: 'build', label: '06 Build' },\n { id: 'PACKAGE_PUBLISH', slug: 'package-publish', label: '07 Publish' },\n { id: 'DEPLOY_PREVIEW', slug: 'deploy-preview', label: '08 Preview' },\n { id: 'DEPLOY_ALPHA', slug: 'deploy-alpha', label: '09 Alpha' },\n { id: 'PROMOTE_PROD', slug: 'promote-prod', label: '10 Prod gate' },\n { id: 'RUNTIME_CONTINUOUS', slug: 'runtime-continuous', label: '11 Runtime' },\n { id: 'SCHEDULED_RESCAN', slug: 'scheduled-rescan', label: '12 Rescan' },\n { id: 'INCIDENT_RESPONSE', slug: 'incident-response', label: '13 Incident' },\n { id: 'ARCHIVE_OFFBOARD', slug: 'archive-offboard', label: '14 Archive' },\n];\n\nexport const STAGE_BY_ID = new Map(ALL_STAGES.map((s) => [s.id, s]));\n\nexport type SecurityScanStatus =\n 'QUEUED' | 'RUNNING' | 'SUCCEEDED' | 'FAILED' | 'ERRORED' | 'CANCELLED';\n\nexport type SecurityScanConclusion = 'PASS' | 'WARN' | 'FAIL' | 'SKIPPED';\nexport type SecuritySeverity = 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW' | 'INFO';\nexport type SecurityFindingCategory =\n 'SECRET' | 'VULN' | 'SAST' | 'LICENSE' | 'POLICY' | 'CONFIG' | 'SUPPLYCHAIN';\nexport type SecurityFindingStatus = 'OPEN' | 'ACCEPTED' | 'FIXED' | 'FALSE_POSITIVE' | 'SUPPRESSED';\nexport type SecurityPolicyLevel = 'ADVISORY' | 'WARN' | 'BLOCK';\n\nexport interface SecuritySummary {\n critical: number;\n high: number;\n medium: number;\n low: number;\n info: number;\n}\n\nexport interface SecurityScanRun {\n id: string;\n vibeId: string;\n stage: SecurityStage;\n status: SecurityScanStatus;\n conclusion?: SecurityScanConclusion | null;\n providerName: string;\n startedAt?: string | null;\n finishedAt?: string | null;\n durationMs?: number | null;\n summary: SecuritySummary;\n evidence?: SecurityEvidenceRow[];\n}\n\nexport interface SecurityEvidenceRow {\n id: string;\n type: string;\n sha256: string;\n sizeBytes: number;\n downloadUrl?: string | null;\n}\n\nexport interface SecurityFindingRow {\n id: string;\n fingerprint: string;\n ruleId: string;\n title: string;\n severity: SecuritySeverity;\n category: SecurityFindingCategory;\n file?: string | null;\n line?: number | null;\n packageName?: string | null;\n packageVersion?: string | null;\n fixedVersion?: string | null;\n status: SecurityFindingStatus;\n remediation?: string | null;\n redactedSample?: string | null;\n firstSeenAt: string;\n lastSeenAt: string;\n}\n\nexport interface SecurityProviderRow {\n id: string;\n pluginName: string;\n providerName: string;\n stage: SecurityStage;\n toolVersion: string;\n isDefault: boolean;\n enabled: boolean;\n}\n\nexport interface SecurityStatusPayload {\n vibeId: string;\n policyLevel: SecurityPolicyLevel;\n lastScanAt?: string | null;\n perStage: Record<string, { lastRun?: SecurityScanRun; conclusion?: SecurityScanConclusion }>;\n totals: SecuritySummary;\n}\n\nexport type StageNodeStatus =\n 'never-run' | 'in-progress' | 'passed' | 'warn' | 'failed' | 'skipped';\n\nexport function deriveStageStatus(\n stage: SecurityStatusPayload['perStage'][string]\n): StageNodeStatus {\n if (!stage?.lastRun) return 'never-run';\n if (stage.lastRun.status === 'RUNNING' || stage.lastRun.status === 'QUEUED') return 'in-progress';\n if (stage.conclusion === 'PASS') return 'passed';\n if (stage.conclusion === 'WARN') return 'warn';\n if (stage.conclusion === 'FAIL') return 'failed';\n return 'skipped';\n}\n"],"mappings":";AAuBA,IAAa,IAA4E;CACvF;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAc;CACjE;EAAE,IAAI;EAAmB,MAAM;EAAmB,OAAO;EAAY;CACrE;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAc;CAC3E;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAc;CAC3E;EAAE,IAAI;EAAc,MAAM;EAAc,OAAO;EAAY;CAC3D;EAAE,IAAI;EAAS,MAAM;EAAS,OAAO;EAAY;CACjD;EAAE,IAAI;EAAmB,MAAM;EAAmB,OAAO;EAAc;CACvE;EAAE,IAAI;EAAkB,MAAM;EAAkB,OAAO;EAAc;CACrE;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAY;CAC/D;EAAE,IAAI;EAAgB,MAAM;EAAgB,OAAO;EAAgB;CACnE;EAAE,IAAI;EAAsB,MAAM;EAAsB,OAAO;EAAc;CAC7E;EAAE,IAAI;EAAoB,MAAM;EAAoB,OAAO;EAAa;CACxE;EAAE,IAAI;EAAqB,MAAM;EAAqB,OAAO;EAAe;CAC5E;EAAE,IAAI;EAAoB,MAAM;EAAoB,OAAO;EAAc;CAC1E;AAE0B,IAAI,IAAI,EAAW,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC"}