@clawnify/app 0.3.0 → 0.4.0

package/dist/client/index.d.ts

@@ -153,18 +153,22 @@ type HostToAppMessage = {
  */
 declare const embedded: boolean;
 /**
- * Open the dashboard's chat, optionally with a prompt in the composer. The
- * prompt is a DRAFT: the user reads it and presses send. The host never sends
- * text an app wrote, because an app renders data other people typed (a form
- * submission, a contact note) and that text must not drive the user's agent.
+ * Open the chat, optionally with a prompt in its composer. Inside Clawnify
+ * that is the dashboard's chat; outside, the app's own `<AppChat standalone>`
+ * panel. The prompt is a DRAFT: the user reads it and presses send. It is
+ * never sent for them, because an app renders data other people typed (a form
+ * submission, a contact note) and that text must not drive anyone's agent.
  *
- * Returns false when standalone (no dashboard, no chat): hide the button then,
- * or check `embedded` before rendering it.
+ * Returns false when there is no chat to open (standalone with no `<AppChat>`
+ * mounted). Render the button behind `useHasChat()`:
  *
- *   {embedded && <button onClick={() => openChat(`Draft a follow-up for ${c.name}`)}>Ask AI</button>}
- *   {embedded && <button onClick={() => openChat()}>Chat</button>}   // no prompt: just open it
+ *   const hasChat = useHasChat();
+ *   {hasChat && <button onClick={() => openChat(`Draft a follow-up for ${c.name}`)}>Ask AI</button>}
+ *   {hasChat && <button onClick={() => openChat()}>Chat</button>}   // no prompt: just open it
  */
 declare function openChat(prompt?: string): boolean;
+/** Whether `openChat` has somewhere to go: the dashboard, or a mounted `<AppChat>`. */
+declare function useHasChat(): boolean;
 /**
  * Tell the dashboard's chat what the user is looking at, so "this contact"
  * means the one on screen. Call it from the screen that shows the record; the
@@ -174,6 +178,39 @@ declare function openChat(prompt?: string): boolean;
  *   useChatContext({ label: "Contact", record: { type: "contact", id: c.id, label: c.name } });
  */
 declare function useChatContext(context: ChatContext | null): void;
+/** What `<AppChat standalone>` hands the app's own chat panel. */
+interface StandaloneChat {
+    open: boolean;
+    /**
+     * The last prompt `openChat` passed, for the composer. A new object on every
+     * call (compare by identity, or by `id`), so the same prompt twice prefills
+     * twice. Null when opened without one.
+     */
+    draft: {
+        id: number;
+        text: string;
+    } | null;
+    /** What `useChatContext` reports is on screen; send it with each message. */
+    context: ChatContext | null;
+    close: () => void;
+}
+interface AppChatProps {
+    /**
+     * The app's own chat, drawn only outside Clawnify. It talks to the app's own
+     * endpoint (`/api/chat` with the app's own model key, say). Inside the
+     * dashboard nothing renders and `openChat` opens the dashboard's chat.
+     */
+    standalone: (chat: StandaloneChat) => ReactNode;
+}
+/**
+ * Where `openChat` lands when the app runs outside Clawnify. Mount it once,
+ * near the root:
+ *
+ *   <AppChat standalone={(chat) => <MyChatPanel {...chat} />} />
+ *
+ * Mount at most one: the last one mounted receives `openChat`.
+ */
+declare function AppChat({ standalone }: AppChatProps): react.JSX.Element | null;
 /**
  * Run `onChange` when the dashboard's chat has written this app's data (a
  * POST, PUT, PATCH or DELETE through your API), with the API paths it called.
@@ -213,8 +250,26 @@ interface AppNavProps {
     active?: string;
     /** Called with the item the user chose, from either renderer. */
     onNavigate: (item: AppNavItem) => void;
-    /** Rendered at the bottom of the standalone sidebar (a footer action, say). */
+    /** Rendered at the bottom of the built-in sidebar (a footer action, say). */
     children?: ReactNode;
+    /**
+     * The app's own sidebar, drawn instead of the built-in one outside
+     * Clawnify, from the same nav data (so the navigation is still defined
+     * once). Inside the dashboard it never renders: the dashboard draws the nav.
+     *
+     *   standalone={(nav) => <MySidebar groups={nav.groups} active={nav.active} onSelect={nav.onNavigate} />}
+     */
+    standalone?: (nav: StandaloneNav) => ReactNode;
+}
+/** What `<AppNav standalone>` hands the app's own sidebar. */
+interface StandaloneNav {
+    title: string;
+    icon?: string;
+    groups: AppNavGroup[];
+    active?: string;
+    /** The `home: true` item, which the built-in sidebar opens from its brand row. */
+    home?: AppNavItem;
+    onNavigate: (item: AppNavItem) => void;
 }
 /**
  * The app's navigation: sidebar when standalone, host-fed when embedded.
@@ -225,6 +280,6 @@ interface AppNavProps {
  * `--border`, `--primary`…) and falls back to the platform defaults when a
  * token is missing.
  */
-declare function AppNav({ title, icon, groups, active, onNavigate, children }: AppNavProps): react.JSX.Element | null;
+declare function AppNav({ title, icon, groups, active, onNavigate, children, standalone }: AppNavProps): react.JSX.Element | null;
 
-export { AppNav, type AppNavGroup, type AppNavItem, type AppNavProps, type AppToHostMessage, type ChatContext, HOST_BRIDGE_VERSION, type HostFeature, type HostToAppMessage, NAV_COLORS, type NavColor, TILE_ICONS, TileIcon, type TileIconName, type TileIconProps, embedded, navColorFor, openChat, reportLocation, useChatContext, useHostChanges, useHostNavigate };
+export { AppChat, type AppChatProps, AppNav, type AppNavGroup, type AppNavItem, type AppNavProps, type AppToHostMessage, type ChatContext, HOST_BRIDGE_VERSION, type HostFeature, type HostToAppMessage, NAV_COLORS, type NavColor, type StandaloneChat, type StandaloneNav, TILE_ICONS, TileIcon, type TileIconName, type TileIconProps, embedded, navColorFor, openChat, reportLocation, useChatContext, useHasChat, useHostChanges, useHostNavigate };

package/dist/client/index.js

@@ -1,7 +1,8 @@
 // src/client/index.tsx
 import {
   useEffect,
-  useRef
+  useRef,
+  useState
 } from "react";
 import {
   AddressBook,
@@ -233,26 +234,47 @@ function subscribe(listener, feature) {
 function isAppPath(path) {
   return typeof path === "string" && path.length <= 2048 && /^\/(?![/\\])/.test(path);
 }
+var standaloneOpen = null;
+var chatListeners = /* @__PURE__ */ new Set();
+function notifyChat() {
+  for (const l of [...chatListeners]) l();
+}
+function useChatVersion() {
+  const [, setVersion] = useState(0);
+  useEffect(() => {
+    const l = () => setVersion((v) => v + 1);
+    chatListeners.add(l);
+    return () => {
+      chatListeners.delete(l);
+    };
+  }, []);
+}
 function openChat(prompt) {
-  if (!embedded) return false;
-  post({
-    source: "clawnify-app",
-    v: HOST_BRIDGE_VERSION,
-    type: "chat",
-    ...prompt ? { prompt: String(prompt).slice(0, 2e3) } : {}
-  });
+  const draft = prompt ? String(prompt).slice(0, 2e3) : null;
+  if (!embedded) {
+    if (!standaloneOpen) return false;
+    standaloneOpen(draft);
+    return true;
+  }
+  post({ source: "clawnify-app", v: HOST_BRIDGE_VERSION, type: "chat", ...draft ? { prompt: draft } : {} });
   return true;
 }
+function useHasChat() {
+  useChatVersion();
+  return embedded || standaloneOpen !== null;
+}
 function useChatContext(context) {
-  const key = embedded && context ? JSON.stringify(sanitizeContext(context)) : "";
+  const key = context ? JSON.stringify(sanitizeContext(context)) : "";
   useEffect(() => {
-    if (!embedded || !key) return;
+    if (!key) return;
     listen();
     chatContext = JSON.parse(key);
     post({ source: "clawnify-app", v: HOST_BRIDGE_VERSION, type: "context", context: chatContext });
+    notifyChat();
     return () => {
       chatContext = null;
       post({ source: "clawnify-app", v: HOST_BRIDGE_VERSION, type: "context", context: null });
+      notifyChat();
     };
   }, [key]);
 }
@@ -268,6 +290,27 @@ function sanitizeContext(c) {
     } : {}
   };
 }
+function AppChat({ standalone }) {
+  const [open, setOpen] = useState(false);
+  const [draft, setDraft] = useState(null);
+  const nextId = useRef(0);
+  useChatVersion();
+  useEffect(() => {
+    if (embedded) return;
+    const handler = (text) => {
+      setDraft(text ? { id: ++nextId.current, text } : null);
+      setOpen(true);
+    };
+    standaloneOpen = handler;
+    notifyChat();
+    return () => {
+      if (standaloneOpen === handler) standaloneOpen = null;
+      notifyChat();
+    };
+  }, []);
+  if (embedded) return null;
+  return /* @__PURE__ */ jsx(Fragment, { children: standalone({ open, draft, context: chatContext, close: () => setOpen(false) }) });
+}
 function useHostChanges(onChange) {
   const ref = useRef(onChange);
   ref.current = onChange;
@@ -300,7 +343,7 @@ function reportLocation(path) {
   }
   post({ source: "clawnify-app", v: HOST_BRIDGE_VERSION, type: "location", path: clean });
 }
-function AppNav({ title, icon, groups, active, onNavigate, children }) {
+function AppNav({ title, icon, groups, active, onNavigate, children, standalone }) {
   const onNavigateRef = useRef(onNavigate);
   onNavigateRef.current = onNavigate;
   const groupsRef = useRef(groups);
@@ -331,6 +374,7 @@ function AppNav({ title, icon, groups, active, onNavigate, children }) {
   );
   if (embedded) return null;
   const home = groups.flatMap((g) => g.items).find((i) => i.home);
+  if (standalone) return /* @__PURE__ */ jsx(Fragment, { children: standalone({ title, icon, groups, active, home, onNavigate }) });
   const brand = /* @__PURE__ */ jsxs(Fragment, { children: [
     (() => {
       const I = iconFor(icon);
@@ -505,6 +549,7 @@ a.cn-nav-brand:hover{background:var(--sunken,#f1f5f9)}
 }
 `;
 export {
+  AppChat,
   AppNav,
   HOST_BRIDGE_VERSION,
   NAV_COLORS,
@@ -515,6 +560,7 @@ export {
   openChat,
   reportLocation,
   useChatContext,
+  useHasChat,
   useHostChanges,
   useHostNavigate
 };

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/index.tsx"],"sourcesContent":["/**\n * @clawnify/app/client — the host bridge for a Clawnify app's browser side.\n *\n * A Clawnify app is a full page on its own origin. Opened directly (local\n * `pnpm dev`, or `<slug>.apps.clawnify.com`) it renders its own sidebar.\n * Opened inside the Clawnify dashboard it sits in an iframe, and the dashboard\n * wants to render that same navigation in ITS sidebar so the user sees one\n * nav, not two.\n *\n * `<AppNav>` is the one definition of the app's navigation that serves both:\n *\n *   • standalone → it draws the app's sidebar (desktop rail, mobile strip)\n *   • embedded   → it draws nothing and posts the nav tree to the host over\n *                  `postMessage`; the host renders it and posts `navigate`\n *                  back when the user clicks.\n *\n * Nothing about the app changes between the two: same router, same screens,\n * same data. Only who paints the list of links.\n *\n *   import { AppNav, reportLocation } from \"@clawnify/app/client\";\n *\n *   <AppNav\n *     title=\"OpenDialer\"\n *     icon=\"phone\"\n *     groups={[{ label: \"Work\", items: [\n *       { id: \"dashboard\", label: \"Dashboard\", href: \"/\", home: true },\n *       { id: \"leads\", label: \"Leads\", href: \"/leads\", icon: \"users\", count: 12 },\n *     ]}]}\n *     active=\"leads\"\n *     onNavigate={(item) => navigate(item.href!)}\n *   />\n *\n * Re-render with a new `groups` / `active` and the host sidebar updates in\n * the same tick — counts are just a field, so \"Leads 12\" becomes \"Leads 11\"\n * the moment your own state does. No polling, no endpoint.\n *\n * Embedding is detected from the `clawnify_host=1` query parameter the\n * dashboard appends to the iframe URL, remembered in sessionStorage so a\n * full-page navigation inside the iframe stays in embedded mode. A page that\n * is iframed by anything else, or opened directly, is \"standalone\".\n *\n * The same channel connects the app to the dashboard's chat (the AG-UI idea:\n * the agent and the screen share one loop):\n *\n *   openChat(\"Draft a follow-up for Mario\")   opens the chat, text as a draft\n *   setChatContext({ label, record })         what the user is looking at\n *   useHostChanges((paths) => refetch())      the chat just wrote your data\n *   useHostNavigate((path) => navigate(path)) the chat opens one of your pages\n *\n * Protocol (versioned, additive):\n *\n *   app  → host   { source: \"clawnify-app\",  v: 1, type: \"ready\", features? }\n *                 { source: \"clawnify-app\",  v: 1, type: \"nav\", title, icon?, groups, active? }\n *                 { source: \"clawnify-app\",  v: 1, type: \"location\", path }\n *                 { source: \"clawnify-app\",  v: 1, type: \"context\", context }\n *                 { source: \"clawnify-app\",  v: 1, type: \"chat\", prompt? }\n *   host → app    { source: \"clawnify-host\", v: 1, type: \"hello\" }\n *                 { source: \"clawnify-host\", v: 1, type: \"navigate\", id }\n *                 { source: \"clawnify-host\", v: 1, type: \"navigate\", path }\n *                 { source: \"clawnify-host\", v: 1, type: \"changed\", paths }\n *\n * `features` tells the host which of its messages the app handles, so it can\n * fall back for the ones it does not: without \"changes\" the host reloads the\n * iframe after the chat writes data, without \"path\" it reloads it at the new\n * path instead of asking the app's router.\n */\nimport {\n  useEffect,\n  useRef,\n  type MouseEvent,\n  type ReactNode,\n} from \"react\";\nimport {\n  AddressBook,\n  Archive,\n  Bell,\n  BookOpen,\n  Briefcase,\n  Building,\n  Calendar,\n  CalendarDots,\n  Camera,\n  ChartBar,\n  ChartPie,\n  ChatCircle,\n  CheckSquare,\n  ClipboardText,\n  Clock,\n  ClockCounterClockwise,\n  Code,\n  CreditCard,\n  CurrencyDollar,\n  Database,\n  Envelope,\n  File,\n  FileText,\n  Folder,\n  Gear,\n  Globe,\n  GridFour,\n  Hash,\n  House,\n  Image,\n  Kanban,\n  Lightning,\n  Link,\n  List,\n  ListChecks,\n  MagnifyingGlass,\n  MapTrifold,\n  Microphone,\n  Package,\n  PaperPlaneTilt,\n  Phone,\n  Play,\n  Pulse,\n  Robot,\n  ShoppingCart,\n  Sparkle,\n  SquaresFour,\n  Stack,\n  Star,\n  Table,\n  Tag,\n  Target,\n  Tray,\n  Truck,\n  Upload,\n  User,\n  VideoCamera,\n  Wallet,\n  type Icon as PhosphorIcon,\n} from \"@phosphor-icons/react\";\n\nexport const HOST_BRIDGE_VERSION = 1 as const;\n\n/** One row in the navigation. `icon` is a lucide icon name (kebab-case). */\nexport interface AppNavItem {\n  /** Stable identifier the host hands back on `navigate`. */\n  id: string;\n  label: string;\n  /**\n   * In-app path this item opens. Optional: a state-driven view can omit it.\n   * When present the host uses it to restore the view on reload and to make\n   * the dashboard URL shareable.\n   */\n  href?: string;\n  /** Icon name from TILE_ICONS, e.g. \"layout-dashboard\". Unknown names render a dot. */\n  icon?: string;\n  /** Live badge, e.g. items waiting. Omit for none. */\n  count?: number;\n  /**\n   * The app's home screen. Not listed as a row: standalone the brand row\n   * opens it, and in the dashboard the app's own header does. One per app.\n   */\n  home?: boolean;\n  /**\n   * Tile colour for this section. Sections are the records inside an app,\n   * so they draw as a small coloured tile with a white glyph (the app itself\n   * is navigation and stays an outline glyph). One of `NAV_COLORS`; omitted\n   * = picked from the palette by `id`, stable across renders and hosts.\n   */\n  color?: NavColor;\n}\n\n/** The section tile palette, shared by the standalone sidebar and the dashboard. */\nexport const NAV_COLORS = {\n  red: \"#ef4444\",\n  orange: \"#f97514\",\n  amber: \"#f59e0b\",\n  green: \"#22c55e\",\n  sky: \"#17bde9\",\n  blue: \"#266df0\",\n  violet: \"#8b5cf6\",\n  pink: \"#ec4899\",\n} as const;\nexport type NavColor = keyof typeof NAV_COLORS;\n\n/** Deterministic palette pick for an item without an explicit colour. */\nexport function navColorFor(id: string): NavColor {\n  const names = Object.keys(NAV_COLORS) as NavColor[];\n  let h = 0;\n  for (let i = 0; i < id.length; i++) h = (h * 31 + id.charCodeAt(i)) >>> 0;\n  return names[h % names.length];\n}\n\n/**\n * The icon library: the names the Clawnify dashboard can draw for an app\n * and its sections (resolved to the Phosphor set in both sidebars). Pick\n * from these; the apps AGENTS.md lists them by meaning.\n */\nexport const TILE_ICONS = [\n  \"activity\",\n  \"archive\",\n  \"bar-chart-3\",\n  \"bell\",\n  \"book-open\",\n  \"bot\",\n  \"briefcase\",\n  \"building-2\",\n  \"calendar\",\n  \"calendar-days\",\n  \"camera\",\n  \"check-square\",\n  \"clipboard-list\",\n  \"clock\",\n  \"code-2\",\n  \"contact\",\n  \"credit-card\",\n  \"database\",\n  \"dollar-sign\",\n  \"file\",\n  \"file-text\",\n  \"folder\",\n  \"globe\",\n  \"hash\",\n  \"history\",\n  \"home\",\n  \"image\",\n  \"inbox\",\n  \"kanban\",\n  \"layers\",\n  \"layout-dashboard\",\n  \"layout-grid\",\n  \"link\",\n  \"list\",\n  \"list-checks\",\n  \"mail\",\n  \"map\",\n  \"message-square\",\n  \"mic\",\n  \"package\",\n  \"phone\",\n  \"pie-chart\",\n  \"play\",\n  \"search\",\n  \"send\",\n  \"settings\",\n  \"shopping-cart\",\n  \"sparkles\",\n  \"star\",\n  \"table\",\n  \"tag\",\n  \"target\",\n  \"truck\",\n  \"upload\",\n  \"user\",\n  \"users\",\n  \"video\",\n  \"wallet\",\n  \"zap\",\n] as const;\nexport type TileIconName = (typeof TILE_ICONS)[number];\n\nexport interface TileIconProps {\n  /** Icon name from TILE_ICONS. Unknown or missing = a small dot. */\n  icon?: string;\n  /** Palette colour. Omitted = picked from `seed` (or `icon`) by hash. */\n  color?: NavColor;\n  /** Stable string the colour is derived from when `color` is not given. */\n  seed?: string;\n  /** Tile edge in px. The glyph scales with it. Default 16. */\n  size?: number;\n  className?: string;\n  title?: string;\n}\n\n/**\n * The record tile: a small rounded square in a palette colour with a white\n * lucide glyph. The sidebar draws every app section with it; apps can use\n * the same tile anywhere a record type needs an identity mark (table rows,\n * cards, pickers) so the two surfaces stay one system. Self-contained inline\n * styles, so it works outside <AppNav> and in any stylesheet setup.\n *\n *   <TileIcon icon=\"users\" color=\"blue\" />\n *   <TileIcon icon=\"phone\" seed={lead.id} size={20} />\n */\nexport function TileIcon({ icon, color, seed, size = 16, className, title }: TileIconProps) {\n  const fill = NAV_COLORS[color ?? navColorFor(seed ?? icon ?? \"\")];\n  // The glyph box is 0.7 of the tile: Phosphor draws on ~224 of its 256\n  // units, so the visible glyph lands near 60% of the tile with clear\n  // padding around it, solid white — Attio's record-tile proportion.\n  const glyph = Math.round(size * 0.7);\n  return (\n    <span\n      className={className}\n      title={title}\n      aria-hidden={title ? undefined : true}\n      style={{\n        display: \"inline-flex\",\n        width: size,\n        height: size,\n        flexShrink: 0,\n        alignItems: \"center\",\n        justifyContent: \"center\",\n        borderRadius: \"30%\",\n        border: \"1px solid rgb(0 0 0 / 0.06)\",\n        background: fill,\n        color: \"#fff\",\n      }}\n    >\n      {iconFor(icon) ? (\n        (() => { const I = iconFor(icon)!; return <I size={glyph} weight=\"fill\" aria-hidden />; })()\n      ) : (\n        <span style={{ width: glyph * 0.6, height: glyph * 0.6, borderRadius: 9999, background: \"currentColor\" }} />\n      )}\n    </span>\n  );\n}\n\nexport interface AppNavGroup {\n  /** Eyebrow shown above the items. Omit for an unlabelled group. */\n  label?: string;\n  items: AppNavItem[];\n}\n\n/** Host messages this app handles itself. The host falls back for the rest. */\nexport type HostFeature = \"changes\" | \"path\";\n\n/**\n * What the user is looking at, for the dashboard's chat. It lets them say\n * \"this contact\" and be understood. Labels and ids only: the chat reads the\n * record itself through your API if it needs more.\n */\nexport interface ChatContext {\n  /** The screen, e.g. \"Contact\" or \"Pipeline\". */\n  label?: string;\n  /** The record on screen, when there is one. */\n  record?: { type: string; id: string; label?: string };\n}\n\nexport type AppToHostMessage =\n  | { source: \"clawnify-app\"; v: 1; type: \"ready\"; features?: HostFeature[] }\n  | {\n      source: \"clawnify-app\";\n      v: 1;\n      type: \"nav\";\n      title: string;\n      /** lucide icon name for the app itself. */\n      icon?: string;\n      groups: AppNavGroup[];\n      active?: string;\n    }\n  | { source: \"clawnify-app\"; v: 1; type: \"location\"; path: string }\n  | { source: \"clawnify-app\"; v: 1; type: \"context\"; context: ChatContext | null }\n  | { source: \"clawnify-app\"; v: 1; type: \"chat\"; prompt?: string };\n\nexport type HostToAppMessage =\n  | { source: \"clawnify-host\"; v: 1; type: \"hello\" }\n  | { source: \"clawnify-host\"; v: 1; type: \"navigate\"; id: string }\n  | { source: \"clawnify-host\"; v: 1; type: \"navigate\"; path: string }\n  | { source: \"clawnify-host\"; v: 1; type: \"changed\"; paths: string[] };\n\nconst HOST_PARAM = \"clawnify_host\";\nconst STORAGE_KEY = \"clawnify_host\";\n\n/**\n * Whether this page is running inside the Clawnify dashboard. Computed once at\n * module load — the query parameter is only on the initial URL — and remembered\n * for the tab so in-iframe full navigations keep the mode.\n */\nexport const embedded: boolean = (() => {\n  if (typeof window === \"undefined\") return false;\n  if (window.parent === window) return false;\n  let flagged = false;\n  try {\n    flagged = new URLSearchParams(window.location.search).get(HOST_PARAM) === \"1\";\n    if (flagged) window.sessionStorage.setItem(STORAGE_KEY, \"1\");\n    else flagged = window.sessionStorage.getItem(STORAGE_KEY) === \"1\";\n  } catch {\n    // Storage can throw in a partitioned or locked-down iframe; the query\n    // parameter alone still decides for this document.\n  }\n  return flagged;\n})();\n\nfunction post(message: AppToHostMessage) {\n  if (!embedded) return;\n  // The dashboard may live on app.clawnify.com or a white-label domain, so the\n  // app cannot pin the target origin. The payload is navigation labels, a\n  // path, record labels and a draft prompt — nothing secret — and the host\n  // verifies the sender is its own iframe.\n  window.parent.postMessage(message, \"*\");\n}\n\n// ── One channel for every SDK surface ──────────────────────────────────────\n// <AppNav>, the chat context and the host hooks share one window listener, so\n// an app can use any of them without the others (a single-screen app has no\n// <AppNav> but can still refresh when the chat writes its data).\n\ntype HostListener = (message: HostToAppMessage) => void;\nconst hostListeners = new Set<HostListener>();\n/** How many mounted hooks handle each feature; announced while above zero. */\nconst featureCounts = new Map<HostFeature, number>();\nlet listening = false;\nlet chatContext: ChatContext | null = null;\n\nfunction announce() {\n  post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"ready\", features: [...featureCounts.keys()] });\n}\n\nfunction listen() {\n  if (listening || !embedded) return;\n  listening = true;\n  window.addEventListener(\"message\", (e: MessageEvent) => {\n    if (e.source !== window.parent) return;\n    const d = e.data as HostToAppMessage | undefined;\n    if (!d || d.source !== \"clawnify-host\" || d.v !== HOST_BRIDGE_VERSION) return;\n    // Host (re)mounted its listener: it has lost what we told it.\n    if (d.type === \"hello\" && chatContext) {\n      post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: chatContext });\n    }\n    for (const listener of [...hostListeners]) listener(d);\n  });\n  announce();\n}\n\nfunction subscribe(listener: HostListener, feature?: HostFeature): () => void {\n  if (!embedded) return () => {};\n  listen();\n  hostListeners.add(listener);\n  if (feature) {\n    const n = featureCounts.get(feature) ?? 0;\n    featureCounts.set(feature, n + 1);\n    if (n === 0) announce();\n  }\n  return () => {\n    hostListeners.delete(listener);\n    if (!feature) return;\n    const n = (featureCounts.get(feature) ?? 1) - 1;\n    if (n > 0) featureCounts.set(feature, n);\n    else {\n      featureCounts.delete(feature);\n      announce();\n    }\n  };\n}\n\n/** An in-app path the host may hand us: absolute, same origin. */\nfunction isAppPath(path: unknown): path is string {\n  return typeof path === \"string\" && path.length <= 2048 && /^\\/(?![/\\\\])/.test(path);\n}\n\n/**\n * Open the dashboard's chat, optionally with a prompt in the composer. The\n * prompt is a DRAFT: the user reads it and presses send. The host never sends\n * text an app wrote, because an app renders data other people typed (a form\n * submission, a contact note) and that text must not drive the user's agent.\n *\n * Returns false when standalone (no dashboard, no chat): hide the button then,\n * or check `embedded` before rendering it.\n *\n *   {embedded && <button onClick={() => openChat(`Draft a follow-up for ${c.name}`)}>Ask AI</button>}\n *   {embedded && <button onClick={() => openChat()}>Chat</button>}   // no prompt: just open it\n */\nexport function openChat(prompt?: string): boolean {\n  if (!embedded) return false;\n  post({\n    source: \"clawnify-app\",\n    v: HOST_BRIDGE_VERSION,\n    type: \"chat\",\n    ...(prompt ? { prompt: String(prompt).slice(0, 2000) } : {}),\n  });\n  return true;\n}\n\n/**\n * Tell the dashboard's chat what the user is looking at, so \"this contact\"\n * means the one on screen. Call it from the screen that shows the record; the\n * context clears when that screen unmounts. Labels and ids only, never the\n * record's content: the chat reads that through your API when it needs to.\n *\n *   useChatContext({ label: \"Contact\", record: { type: \"contact\", id: c.id, label: c.name } });\n */\nexport function useChatContext(context: ChatContext | null) {\n  const key = embedded && context ? JSON.stringify(sanitizeContext(context)) : \"\";\n  useEffect(() => {\n    if (!embedded || !key) return;\n    listen();\n    chatContext = JSON.parse(key) as ChatContext;\n    post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: chatContext });\n    return () => {\n      chatContext = null;\n      post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: null });\n    };\n  }, [key]);\n}\n\nfunction sanitizeContext(c: ChatContext): ChatContext {\n  return {\n    ...(c.label ? { label: String(c.label).slice(0, 60) } : {}),\n    ...(c.record && c.record.type && c.record.id\n      ? {\n          record: {\n            type: String(c.record.type).slice(0, 40),\n            id: String(c.record.id).slice(0, 80),\n            ...(c.record.label ? { label: String(c.record.label).slice(0, 80) } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\n/**\n * Run `onChange` when the dashboard's chat has written this app's data (a\n * POST, PUT, PATCH or DELETE through your API), with the API paths it called.\n * Refetch what is on screen. While no mounted component uses this hook, the\n * dashboard reloads the whole iframe after such a write instead.\n *\n *   useHostChanges(() => { void reload(); });\n */\nexport function useHostChanges(onChange: (paths: string[]) => void) {\n  const ref = useRef(onChange);\n  ref.current = onChange;\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type !== \"changed\" || !Array.isArray(d.paths)) return;\n        ref.current(d.paths.filter((p): p is string => typeof p === \"string\").slice(0, 20));\n      }, \"changes\"),\n    [],\n  );\n}\n\n/**\n * Let the dashboard (its chat, a deep link) open any page of the app through\n * your router, without reloading the iframe. `path` is an in-app path such as\n * \"/contacts/42?tab=deals\". While no mounted component uses this hook, the\n * dashboard reloads the iframe at that path instead.\n *\n *   useHostNavigate((path) => navigate(path));\n */\nexport function useHostNavigate(onNavigate: (path: string) => void) {\n  const ref = useRef(onNavigate);\n  ref.current = onNavigate;\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type === \"navigate\" && \"path\" in d && isAppPath(d.path)) ref.current(d.path);\n      }, \"path\"),\n    [],\n  );\n}\n\n/**\n * Tell the host where the app is, so the dashboard URL can restore this view\n * on reload. Call it whenever your router's location changes; a no-op when\n * standalone.\n */\nexport function reportLocation(path: string) {\n  // The initial URL carries the dashboard's own parameters (the app token\n  // and the host flag). They are not part of the app's location and must\n  // never land in a URL the dashboard writes, so strip them here as well.\n  let clean = path;\n  try {\n    const u = new URL(path, \"http://app.invalid\");\n    u.searchParams.delete(\"token\");\n    u.searchParams.delete(HOST_PARAM);\n    clean = u.pathname + u.search + u.hash;\n  } catch {\n    // Not a path we can parse: send as-is, the host validates its shape.\n  }\n  post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"location\", path: clean });\n}\n\nexport interface AppNavProps {\n  /** App name, shown in the brand row standalone and in the host's switcher. */\n  title: string;\n  /**\n   * The app's own glyph, a lucide icon name (kebab-case). Drawn as an\n   * outline icon with no background: in the standalone brand row, and by the\n   * dashboard on the app's sidebar item. Tiles are for records, not for\n   * navigation, so the app's coloured tile icon stays out of the sidebar.\n   */\n  icon?: string;\n  groups: AppNavGroup[];\n  /** `id` of the active item. */\n  active?: string;\n  /** Called with the item the user chose, from either renderer. */\n  onNavigate: (item: AppNavItem) => void;\n  /** Rendered at the bottom of the standalone sidebar (a footer action, say). */\n  children?: ReactNode;\n}\n\n/**\n * The app's navigation: sidebar when standalone, host-fed when embedded.\n *\n * Standalone layout: the sidebar is a 260px column at ≥768px and a horizontal\n * strip below that, so put it first inside a `flex flex-col md:flex-row`\n * container. It paints with the app's own theme tokens (`--surface`,\n * `--border`, `--primary`…) and falls back to the platform defaults when a\n * token is missing.\n */\nexport function AppNav({ title, icon, groups, active, onNavigate, children }: AppNavProps) {\n  // Always the latest callback, so the host listener never calls a stale one.\n  const onNavigateRef = useRef(onNavigate);\n  onNavigateRef.current = onNavigate;\n  const groupsRef = useRef(groups);\n  groupsRef.current = groups;\n\n  // Embedded: publish the tree whenever it changes. Serialising is the cheap\n  // way to dedupe — apps build `groups` inline every render.\n  const payload = embedded\n    ? JSON.stringify({ title, icon, groups: sanitize(groups), active })\n    : \"\";\n  const lastSent = useRef(\"\");\n  useEffect(() => {\n    if (!embedded || payload === lastSent.current) return;\n    lastSent.current = payload;\n    const { title, icon, groups, active } = JSON.parse(payload) as {\n      title: string;\n      icon?: string;\n      groups: AppNavGroup[];\n      active?: string;\n    };\n    post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"nav\", title, icon, groups, active });\n  }, [payload]);\n\n  // Embedded: handshake + listen for the host's clicks.\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type === \"hello\") {\n          // Host (re)mounted its listener after we first published: resend.\n          lastSent.current = \"\";\n          const g = sanitize(groupsRef.current);\n          post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"nav\", title, icon, groups: g, active });\n        } else if (d.type === \"navigate\" && \"id\" in d && typeof d.id === \"string\") {\n          const item = groupsRef.current.flatMap((g) => g.items).find((i) => i.id === d.id);\n          if (item) onNavigateRef.current(item);\n        }\n      }),\n    // title/active are read from the closure only on `hello`; the publish\n    // effect above covers their normal updates.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [],\n  );\n\n  if (embedded) return null;\n\n  const home = groups.flatMap((g) => g.items).find((i) => i.home);\n  const brand = (\n    <>\n      {(() => { const I = iconFor(icon); return I ? <I size={16} aria-hidden /> : null; })()}\n      <span>{title}</span>\n    </>\n  );\n\n  return (\n    <aside className=\"cn-nav\">\n      <style>{CSS}</style>\n      {home ? (\n        <a\n          href={home.href ?? \"/\"}\n          className=\"cn-nav-brand\"\n          data-active={home.id === active || undefined}\n          aria-current={home.id === active ? \"page\" : undefined}\n          onClick={(e: MouseEvent) => {\n            if (e.metaKey || e.ctrlKey || e.shiftKey || e.button !== 0) return;\n            e.preventDefault();\n            onNavigate(home);\n          }}\n        >\n          {brand}\n        </a>\n      ) : (\n        <div className=\"cn-nav-brand\">{brand}</div>\n      )}\n      <nav className=\"cn-nav-groups\" aria-label=\"Primary\">\n        {groups.map((g, gi) => (\n          <div className=\"cn-nav-group\" key={g.label ?? gi}>\n            {g.label && <p className=\"cn-nav-eyebrow\">{g.label}</p>}\n            {g.items\n              .filter((item) => !item.home)\n              .map((item) => (\n                <NavRow key={item.id} item={item} active={item.id === active} onNavigate={onNavigate} />\n              ))}\n          </div>\n        ))}\n      </nav>\n      {children && <div className=\"cn-nav-footer\">{children}</div>}\n    </aside>\n  );\n}\n\nfunction NavRow({\n  item,\n  active,\n  onNavigate,\n}: {\n  item: AppNavItem;\n  active: boolean;\n  onNavigate: (item: AppNavItem) => void;\n}) {\n  const body = (\n    <>\n      <TileIcon icon={item.icon} color={item.color} seed={item.id} />\n      <span className=\"cn-nav-label\">{item.label}</span>\n      {typeof item.count === \"number\" && <span className=\"cn-nav-count\">{item.count}</span>}\n    </>\n  );\n  // A real link when there is an href — middle-click and copy-link keep\n  // working — but the click itself goes through the app's router.\n  if (item.href) {\n    return (\n      <a\n        href={item.href}\n        className=\"cn-nav-item\"\n        data-active={active || undefined}\n        aria-current={active ? \"page\" : undefined}\n        onClick={(e: MouseEvent) => {\n          if (e.metaKey || e.ctrlKey || e.shiftKey || e.button !== 0) return;\n          e.preventDefault();\n          onNavigate(item);\n        }}\n      >\n        {body}\n      </a>\n    );\n  }\n  return (\n    <button\n      type=\"button\"\n      className=\"cn-nav-item\"\n      data-active={active || undefined}\n      aria-current={active ? \"page\" : undefined}\n      onClick={() => onNavigate(item)}\n    >\n      {body}\n    </button>\n  );\n}\n\n/** Our names → Phosphor components; the same map the dashboard holds. */\nconst ICONS: Record<string, PhosphorIcon> = {\n  \"activity\": Pulse,\n  \"archive\": Archive,\n  \"bar-chart-3\": ChartBar,\n  \"bell\": Bell,\n  \"book-open\": BookOpen,\n  \"bot\": Robot,\n  \"briefcase\": Briefcase,\n  \"building-2\": Building,\n  \"calendar\": Calendar,\n  \"calendar-days\": CalendarDots,\n  \"camera\": Camera,\n  \"check-square\": CheckSquare,\n  \"clipboard-list\": ClipboardText,\n  \"clock\": Clock,\n  \"code-2\": Code,\n  \"contact\": AddressBook,\n  \"credit-card\": CreditCard,\n  \"database\": Database,\n  \"dollar-sign\": CurrencyDollar,\n  \"file\": File,\n  \"file-text\": FileText,\n  \"folder\": Folder,\n  \"globe\": Globe,\n  \"hash\": Hash,\n  \"history\": ClockCounterClockwise,\n  \"home\": House,\n  \"image\": Image,\n  \"inbox\": Tray,\n  \"kanban\": Kanban,\n  \"layers\": Stack,\n  \"layout-dashboard\": SquaresFour,\n  \"layout-grid\": GridFour,\n  \"link\": Link,\n  \"list\": List,\n  \"list-checks\": ListChecks,\n  \"mail\": Envelope,\n  \"map\": MapTrifold,\n  \"message-square\": ChatCircle,\n  \"mic\": Microphone,\n  \"package\": Package,\n  \"phone\": Phone,\n  \"pie-chart\": ChartPie,\n  \"play\": Play,\n  \"search\": MagnifyingGlass,\n  \"send\": PaperPlaneTilt,\n  \"settings\": Gear,\n  \"shopping-cart\": ShoppingCart,\n  \"sparkles\": Sparkle,\n  \"star\": Star,\n  \"table\": Table,\n  \"tag\": Tag,\n  \"target\": Target,\n  \"truck\": Truck,\n  \"upload\": Upload,\n  \"user\": User,\n  \"users\": User,\n  \"video\": VideoCamera,\n  \"wallet\": Wallet,\n  \"zap\": Lightning,\n};\nfunction iconFor(name?: string): PhosphorIcon | undefined {\n  return name ? ICONS[name] : undefined;\n}\n\n/** Only the fields the protocol defines, with sane bounds, cross the bridge. */\nfunction sanitize(groups: AppNavGroup[]): AppNavGroup[] {\n  return groups.slice(0, 20).map((g) => ({\n    ...(g.label ? { label: String(g.label).slice(0, 40) } : {}),\n    items: g.items.slice(0, 100).map((i) => ({\n      id: String(i.id),\n      label: String(i.label).slice(0, 60),\n      ...(i.href ? { href: String(i.href) } : {}),\n      ...(i.icon ? { icon: String(i.icon) } : {}),\n      ...(typeof i.count === \"number\" && Number.isFinite(i.count) ? { count: i.count } : {}),\n      ...(i.home ? { home: true } : {}),\n      ...(i.color && i.color in NAV_COLORS ? { color: i.color } : {}),\n    })),\n  }));\n}\n\n// Scoped by class prefix; tokens follow apps/DESIGN.md with its light defaults\n// as fallbacks, so an app with a partial theme still gets a readable sidebar.\nconst CSS = `\n.cn-nav{width:16.25rem;flex-shrink:0;display:flex;flex-direction:column;border-right:1px solid var(--border,#e2e8f0);background:var(--surface,#fff);color:var(--foreground,#1a202c)}\n.cn-nav-brand{height:3.5rem;flex-shrink:0;display:flex;align-items:center;gap:.5rem;padding:0 1.25rem;border-bottom:1px solid var(--border,#e2e8f0);font-size:.875rem;font-weight:600;color:inherit;text-decoration:none}\na.cn-nav-brand:hover{background:var(--sunken,#f1f5f9)}\n.cn-nav-brand>svg{color:var(--primary,#dd5164)}\n.cn-nav-groups{flex:1;overflow-y:auto;padding:.75rem}\n.cn-nav-group+.cn-nav-group{margin-top:1rem}\n.cn-nav-eyebrow{margin:0 0 .25rem;padding:0 .625rem;font-size:.75rem;font-weight:500;color:var(--muted,#475569)}\n.cn-nav-item{display:flex;align-items:center;gap:.5rem;width:100%;margin:0 0 .125rem;padding:.4375rem .625rem;border:0;border-radius:.375rem;background:none;color:inherit;font:inherit;font-size:.875rem;text-align:left;text-decoration:none;cursor:pointer}\n.cn-nav-item:hover{background:var(--sunken,#f1f5f9)}\n.cn-nav-item[data-active]{background:color-mix(in srgb,var(--primary,#dd5164) 12%,transparent);color:var(--primary,#dd5164);font-weight:600}\n.cn-nav-item:focus-visible{outline:2px solid var(--ring,#2563eb);outline-offset:-2px}\n.cn-nav-label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.cn-nav-count{font-size:.75rem;font-variant-numeric:tabular-nums;color:var(--muted,#475569)}\n.cn-nav-item[data-active] .cn-nav-count{color:inherit}\n.cn-nav-footer{padding:.75rem;border-top:1px solid var(--border,#e2e8f0)}\n@media (max-width:767px){\n.cn-nav{width:100%;flex-direction:row;border-right:0;border-bottom:1px solid var(--border,#e2e8f0)}\n.cn-nav-brand,.cn-nav-eyebrow,.cn-nav-footer{display:none}\n.cn-nav-groups{display:flex;gap:.25rem;padding:.5rem .75rem;overflow-x:auto;overflow-y:hidden}\n.cn-nav-group{display:flex;gap:.25rem}\n.cn-nav-group+.cn-nav-group{margin:0}\n.cn-nav-item{width:auto;margin:0;white-space:nowrap}\n}\n`;\n"],"mappings":";AAkEA;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA0K2C,SAoV9C,UApV8C,KAoV9C,YApV8C;AAxK3C,IAAM,sBAAsB;AAgC5B,IAAM,aAAa;AAAA,EACxB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,OAAO;AAAA,EACP,KAAK;AAAA,EACL,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AACR;AAIO,SAAS,YAAY,IAAsB;AAChD,QAAM,QAAQ,OAAO,KAAK,UAAU;AACpC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,GAAG,QAAQ,IAAK,KAAK,IAAI,KAAK,GAAG,WAAW,CAAC,MAAO;AACxE,SAAO,MAAM,IAAI,MAAM,MAAM;AAC/B;AAOO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA0BO,SAAS,SAAS,EAAE,MAAM,OAAO,MAAM,OAAO,IAAI,WAAW,MAAM,GAAkB;AAC1F,QAAM,OAAO,WAAW,SAAS,YAAY,QAAQ,QAAQ,EAAE,CAAC;AAIhE,QAAM,QAAQ,KAAK,MAAM,OAAO,GAAG;AACnC,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA,eAAa,QAAQ,SAAY;AAAA,MACjC,OAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,OAAO;AAAA,MACT;AAAA,MAEC,kBAAQ,IAAI,KACV,MAAM;AAAE,cAAM,IAAI,QAAQ,IAAI;AAAI,eAAO,oBAAC,KAAE,MAAM,OAAO,QAAO,QAAO,eAAW,MAAC;AAAA,MAAI,GAAG,IAE3F,oBAAC,UAAK,OAAO,EAAE,OAAO,QAAQ,KAAK,QAAQ,QAAQ,KAAK,cAAc,MAAM,YAAY,eAAe,GAAG;AAAA;AAAA,EAE9G;AAEJ;AA6CA,IAAM,aAAa;AACnB,IAAM,cAAc;AAOb,IAAM,YAAqB,MAAM;AACtC,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,MAAI,UAAU;AACd,MAAI;AACF,cAAU,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,UAAU,MAAM;AAC1E,QAAI,QAAS,QAAO,eAAe,QAAQ,aAAa,GAAG;AAAA,QACtD,WAAU,OAAO,eAAe,QAAQ,WAAW,MAAM;AAAA,EAChE,QAAQ;AAAA,EAGR;AACA,SAAO;AACT,GAAG;AAEH,SAAS,KAAK,SAA2B;AACvC,MAAI,CAAC,SAAU;AAKf,SAAO,OAAO,YAAY,SAAS,GAAG;AACxC;AAQA,IAAM,gBAAgB,oBAAI,IAAkB;AAE5C,IAAM,gBAAgB,oBAAI,IAAyB;AACnD,IAAI,YAAY;AAChB,IAAI,cAAkC;AAEtC,SAAS,WAAW;AAClB,OAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,SAAS,UAAU,CAAC,GAAG,cAAc,KAAK,CAAC,EAAE,CAAC;AAC7G;AAEA,SAAS,SAAS;AAChB,MAAI,aAAa,CAAC,SAAU;AAC5B,cAAY;AACZ,SAAO,iBAAiB,WAAW,CAAC,MAAoB;AACtD,QAAI,EAAE,WAAW,OAAO,OAAQ;AAChC,UAAM,IAAI,EAAE;AACZ,QAAI,CAAC,KAAK,EAAE,WAAW,mBAAmB,EAAE,MAAM,oBAAqB;AAEvE,QAAI,EAAE,SAAS,WAAW,aAAa;AACrC,WAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,YAAY,CAAC;AAAA,IAChG;AACA,eAAW,YAAY,CAAC,GAAG,aAAa,EAAG,UAAS,CAAC;AAAA,EACvD,CAAC;AACD,WAAS;AACX;AAEA,SAAS,UAAU,UAAwB,SAAmC;AAC5E,MAAI,CAAC,SAAU,QAAO,MAAM;AAAA,EAAC;AAC7B,SAAO;AACP,gBAAc,IAAI,QAAQ;AAC1B,MAAI,SAAS;AACX,UAAM,IAAI,cAAc,IAAI,OAAO,KAAK;AACxC,kBAAc,IAAI,SAAS,IAAI,CAAC;AAChC,QAAI,MAAM,EAAG,UAAS;AAAA,EACxB;AACA,SAAO,MAAM;AACX,kBAAc,OAAO,QAAQ;AAC7B,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,cAAc,IAAI,OAAO,KAAK,KAAK;AAC9C,QAAI,IAAI,EAAG,eAAc,IAAI,SAAS,CAAC;AAAA,SAClC;AACH,oBAAc,OAAO,OAAO;AAC5B,eAAS;AAAA,IACX;AAAA,EACF;AACF;AAGA,SAAS,UAAU,MAA+B;AAChD,SAAO,OAAO,SAAS,YAAY,KAAK,UAAU,QAAQ,eAAe,KAAK,IAAI;AACpF;AAcO,SAAS,SAAS,QAA0B;AACjD,MAAI,CAAC,SAAU,QAAO;AACtB,OAAK;AAAA,IACH,QAAQ;AAAA,IACR,GAAG;AAAA,IACH,MAAM;AAAA,IACN,GAAI,SAAS,EAAE,QAAQ,OAAO,MAAM,EAAE,MAAM,GAAG,GAAI,EAAE,IAAI,CAAC;AAAA,EAC5D,CAAC;AACD,SAAO;AACT;AAUO,SAAS,eAAe,SAA6B;AAC1D,QAAM,MAAM,YAAY,UAAU,KAAK,UAAU,gBAAgB,OAAO,CAAC,IAAI;AAC7E,YAAU,MAAM;AACd,QAAI,CAAC,YAAY,CAAC,IAAK;AACvB,WAAO;AACP,kBAAc,KAAK,MAAM,GAAG;AAC5B,SAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,YAAY,CAAC;AAC9F,WAAO,MAAM;AACX,oBAAc;AACd,WAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,IACzF;AAAA,EACF,GAAG,CAAC,GAAG,CAAC;AACV;AAEA,SAAS,gBAAgB,GAA6B;AACpD,SAAO;AAAA,IACL,GAAI,EAAE,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,IACzD,GAAI,EAAE,UAAU,EAAE,OAAO,QAAQ,EAAE,OAAO,KACtC;AAAA,MACE,QAAQ;AAAA,QACN,MAAM,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,GAAG,EAAE;AAAA,QACvC,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,QACnC,GAAI,EAAE,OAAO,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,MACzE;AAAA,IACF,IACA,CAAC;AAAA,EACP;AACF;AAUO,SAAS,eAAe,UAAqC;AAClE,QAAM,MAAM,OAAO,QAAQ;AAC3B,MAAI,UAAU;AACd;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,aAAa,CAAC,MAAM,QAAQ,EAAE,KAAK,EAAG;AACrD,UAAI,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,IACpF,GAAG,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AACF;AAUO,SAAS,gBAAgB,YAAoC;AAClE,QAAM,MAAM,OAAO,UAAU;AAC7B,MAAI,UAAU;AACd;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,cAAc,UAAU,KAAK,UAAU,EAAE,IAAI,EAAG,KAAI,QAAQ,EAAE,IAAI;AAAA,IACnF,GAAG,MAAM;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAOO,SAAS,eAAe,MAAc;AAI3C,MAAI,QAAQ;AACZ,MAAI;AACF,UAAM,IAAI,IAAI,IAAI,MAAM,oBAAoB;AAC5C,MAAE,aAAa,OAAO,OAAO;AAC7B,MAAE,aAAa,OAAO,UAAU;AAChC,YAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;AAAA,EACpC,QAAQ;AAAA,EAER;AACA,OAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,YAAY,MAAM,MAAM,CAAC;AACxF;AA8BO,SAAS,OAAO,EAAE,OAAO,MAAM,QAAQ,QAAQ,YAAY,SAAS,GAAgB;AAEzF,QAAM,gBAAgB,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,YAAY,OAAO,MAAM;AAC/B,YAAU,UAAU;AAIpB,QAAM,UAAU,WACZ,KAAK,UAAU,EAAE,OAAO,MAAM,QAAQ,SAAS,MAAM,GAAG,OAAO,CAAC,IAChE;AACJ,QAAM,WAAW,OAAO,EAAE;AAC1B,YAAU,MAAM;AACd,QAAI,CAAC,YAAY,YAAY,SAAS,QAAS;AAC/C,aAAS,UAAU;AACnB,UAAM,EAAE,OAAAA,QAAO,MAAAC,OAAM,QAAAC,SAAQ,QAAAC,QAAO,IAAI,KAAK,MAAM,OAAO;AAM1D,SAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,OAAO,OAAAH,QAAO,MAAAC,OAAM,QAAAC,SAAQ,QAAAC,QAAO,CAAC;AAAA,EACnG,GAAG,CAAC,OAAO,CAAC;AAGZ;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,SAAS;AAEtB,iBAAS,UAAU;AACnB,cAAM,IAAI,SAAS,UAAU,OAAO;AACpC,aAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,OAAO,OAAO,MAAM,QAAQ,GAAG,OAAO,CAAC;AAAA,MACtG,WAAW,EAAE,SAAS,cAAc,QAAQ,KAAK,OAAO,EAAE,OAAO,UAAU;AACzE,cAAM,OAAO,UAAU,QAAQ,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;AAChF,YAAI,KAAM,eAAc,QAAQ,IAAI;AAAA,MACtC;AAAA,IACF,CAAC;AAAA;AAAA;AAAA;AAAA,IAIH,CAAC;AAAA,EACH;AAEA,MAAI,SAAU,QAAO;AAErB,QAAM,OAAO,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAC9D,QAAM,QACJ,iCACI;AAAA,WAAM;AAAE,YAAM,IAAI,QAAQ,IAAI;AAAG,aAAO,IAAI,oBAAC,KAAE,MAAM,IAAI,eAAW,MAAC,IAAK;AAAA,IAAM,GAAG;AAAA,IACrF,oBAAC,UAAM,iBAAM;AAAA,KACf;AAGF,SACE,qBAAC,WAAM,WAAU,UACf;AAAA,wBAAC,WAAO,eAAI;AAAA,IACX,OACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,KAAK,QAAQ;AAAA,QACnB,WAAU;AAAA,QACV,eAAa,KAAK,OAAO,UAAU;AAAA,QACnC,gBAAc,KAAK,OAAO,SAAS,SAAS;AAAA,QAC5C,SAAS,CAAC,MAAkB;AAC1B,cAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAG;AAC5D,YAAE,eAAe;AACjB,qBAAW,IAAI;AAAA,QACjB;AAAA,QAEC;AAAA;AAAA,IACH,IAEA,oBAAC,SAAI,WAAU,gBAAgB,iBAAM;AAAA,IAEvC,oBAAC,SAAI,WAAU,iBAAgB,cAAW,WACvC,iBAAO,IAAI,CAAC,GAAG,OACd,qBAAC,SAAI,WAAU,gBACZ;AAAA,QAAE,SAAS,oBAAC,OAAE,WAAU,kBAAkB,YAAE,OAAM;AAAA,MAClD,EAAE,MACA,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAC3B,IAAI,CAAC,SACJ,oBAAC,UAAqB,MAAY,QAAQ,KAAK,OAAO,QAAQ,cAAjD,KAAK,EAAoE,CACvF;AAAA,SAN8B,EAAE,SAAS,EAO9C,CACD,GACH;AAAA,IACC,YAAY,oBAAC,SAAI,WAAU,iBAAiB,UAAS;AAAA,KACxD;AAEJ;AAEA,SAAS,OAAO;AAAA,EACd;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,OACJ,iCACE;AAAA,wBAAC,YAAS,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,MAAM,KAAK,IAAI;AAAA,IAC7D,oBAAC,UAAK,WAAU,gBAAgB,eAAK,OAAM;AAAA,IAC1C,OAAO,KAAK,UAAU,YAAY,oBAAC,UAAK,WAAU,gBAAgB,eAAK,OAAM;AAAA,KAChF;AAIF,MAAI,KAAK,MAAM;AACb,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,KAAK;AAAA,QACX,WAAU;AAAA,QACV,eAAa,UAAU;AAAA,QACvB,gBAAc,SAAS,SAAS;AAAA,QAChC,SAAS,CAAC,MAAkB;AAC1B,cAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAG;AAC5D,YAAE,eAAe;AACjB,qBAAW,IAAI;AAAA,QACjB;AAAA,QAEC;AAAA;AAAA,IACH;AAAA,EAEJ;AACA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,WAAU;AAAA,MACV,eAAa,UAAU;AAAA,MACvB,gBAAc,SAAS,SAAS;AAAA,MAChC,SAAS,MAAM,WAAW,IAAI;AAAA,MAE7B;AAAA;AAAA,EACH;AAEJ;AAGA,IAAM,QAAsC;AAAA,EAC1C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,OAAO;AAAA,EACP,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,WAAW;AAAA,EACX,SAAS;AAAA,EACT,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,OAAO;AACT;AACA,SAAS,QAAQ,MAAyC;AACxD,SAAO,OAAO,MAAM,IAAI,IAAI;AAC9B;AAGA,SAAS,SAAS,QAAsC;AACtD,SAAO,OAAO,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO;AAAA,IACrC,GAAI,EAAE,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,IACzD,OAAO,EAAE,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,OAAO;AAAA,MACvC,IAAI,OAAO,EAAE,EAAE;AAAA,MACf,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,MAClC,GAAI,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,MACzC,GAAI,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,MACzC,GAAI,OAAO,EAAE,UAAU,YAAY,OAAO,SAAS,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MACpF,GAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MAC/B,GAAI,EAAE,SAAS,EAAE,SAAS,aAAa,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,IAC/D,EAAE;AAAA,EACJ,EAAE;AACJ;AAIA,IAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":["title","icon","groups","active"]}
+{"version":3,"sources":["../../src/client/index.tsx"],"sourcesContent":["/**\n * @clawnify/app/client — the host bridge for a Clawnify app's browser side.\n *\n * A Clawnify app is a full page on its own origin. Opened directly (local\n * `pnpm dev`, or `<slug>.apps.clawnify.com`) it renders its own sidebar.\n * Opened inside the Clawnify dashboard it sits in an iframe, and the dashboard\n * wants to render that same navigation in ITS sidebar so the user sees one\n * nav, not two.\n *\n * `<AppNav>` is the one definition of the app's navigation that serves both:\n *\n *   • standalone → it draws the app's sidebar (desktop rail, mobile strip)\n *   • embedded   → it draws nothing and posts the nav tree to the host over\n *                  `postMessage`; the host renders it and posts `navigate`\n *                  back when the user clicks.\n *\n * Nothing about the app changes between the two: same router, same screens,\n * same data. Only who paints the list of links.\n *\n *   import { AppNav, reportLocation } from \"@clawnify/app/client\";\n *\n *   <AppNav\n *     title=\"OpenDialer\"\n *     icon=\"phone\"\n *     groups={[{ label: \"Work\", items: [\n *       { id: \"dashboard\", label: \"Dashboard\", href: \"/\", home: true },\n *       { id: \"leads\", label: \"Leads\", href: \"/leads\", icon: \"users\", count: 12 },\n *     ]}]}\n *     active=\"leads\"\n *     onNavigate={(item) => navigate(item.href!)}\n *   />\n *\n * Re-render with a new `groups` / `active` and the host sidebar updates in\n * the same tick — counts are just a field, so \"Leads 12\" becomes \"Leads 11\"\n * the moment your own state does. No polling, no endpoint.\n *\n * Embedding is detected from the `clawnify_host=1` query parameter the\n * dashboard appends to the iframe URL, remembered in sessionStorage so a\n * full-page navigation inside the iframe stays in embedded mode. A page that\n * is iframed by anything else, or opened directly, is \"standalone\".\n *\n * The same channel connects the app to the dashboard's chat (the AG-UI idea:\n * the agent and the screen share one loop):\n *\n *   openChat(\"Draft a follow-up for Mario\")   opens the chat, text as a draft\n *   setChatContext({ label, record })         what the user is looking at\n *   useHostChanges((paths) => refetch())      the chat just wrote your data\n *   useHostNavigate((path) => navigate(path)) the chat opens one of your pages\n *\n * Protocol (versioned, additive):\n *\n *   app  → host   { source: \"clawnify-app\",  v: 1, type: \"ready\", features? }\n *                 { source: \"clawnify-app\",  v: 1, type: \"nav\", title, icon?, groups, active? }\n *                 { source: \"clawnify-app\",  v: 1, type: \"location\", path }\n *                 { source: \"clawnify-app\",  v: 1, type: \"context\", context }\n *                 { source: \"clawnify-app\",  v: 1, type: \"chat\", prompt? }\n *   host → app    { source: \"clawnify-host\", v: 1, type: \"hello\" }\n *                 { source: \"clawnify-host\", v: 1, type: \"navigate\", id }\n *                 { source: \"clawnify-host\", v: 1, type: \"navigate\", path }\n *                 { source: \"clawnify-host\", v: 1, type: \"changed\", paths }\n *\n * Outside Clawnify there is no dashboard, so both surfaces fall back to the\n * app's own: `<AppNav standalone>` draws the app's own sidebar from the same\n * nav data, and `<AppChat standalone>` is where `openChat` and\n * `useChatContext` land, a panel the app wires to its own chat endpoint.\n *\n * `features` tells the host which of its messages the app handles, so it can\n * fall back for the ones it does not: without \"changes\" the host reloads the\n * iframe after the chat writes data, without \"path\" it reloads it at the new\n * path instead of asking the app's router.\n */\nimport {\n  useEffect,\n  useRef,\n  useState,\n  type MouseEvent,\n  type ReactNode,\n} from \"react\";\nimport {\n  AddressBook,\n  Archive,\n  Bell,\n  BookOpen,\n  Briefcase,\n  Building,\n  Calendar,\n  CalendarDots,\n  Camera,\n  ChartBar,\n  ChartPie,\n  ChatCircle,\n  CheckSquare,\n  ClipboardText,\n  Clock,\n  ClockCounterClockwise,\n  Code,\n  CreditCard,\n  CurrencyDollar,\n  Database,\n  Envelope,\n  File,\n  FileText,\n  Folder,\n  Gear,\n  Globe,\n  GridFour,\n  Hash,\n  House,\n  Image,\n  Kanban,\n  Lightning,\n  Link,\n  List,\n  ListChecks,\n  MagnifyingGlass,\n  MapTrifold,\n  Microphone,\n  Package,\n  PaperPlaneTilt,\n  Phone,\n  Play,\n  Pulse,\n  Robot,\n  ShoppingCart,\n  Sparkle,\n  SquaresFour,\n  Stack,\n  Star,\n  Table,\n  Tag,\n  Target,\n  Tray,\n  Truck,\n  Upload,\n  User,\n  VideoCamera,\n  Wallet,\n  type Icon as PhosphorIcon,\n} from \"@phosphor-icons/react\";\n\nexport const HOST_BRIDGE_VERSION = 1 as const;\n\n/** One row in the navigation. `icon` is a lucide icon name (kebab-case). */\nexport interface AppNavItem {\n  /** Stable identifier the host hands back on `navigate`. */\n  id: string;\n  label: string;\n  /**\n   * In-app path this item opens. Optional: a state-driven view can omit it.\n   * When present the host uses it to restore the view on reload and to make\n   * the dashboard URL shareable.\n   */\n  href?: string;\n  /** Icon name from TILE_ICONS, e.g. \"layout-dashboard\". Unknown names render a dot. */\n  icon?: string;\n  /** Live badge, e.g. items waiting. Omit for none. */\n  count?: number;\n  /**\n   * The app's home screen. Not listed as a row: standalone the brand row\n   * opens it, and in the dashboard the app's own header does. One per app.\n   */\n  home?: boolean;\n  /**\n   * Tile colour for this section. Sections are the records inside an app,\n   * so they draw as a small coloured tile with a white glyph (the app itself\n   * is navigation and stays an outline glyph). One of `NAV_COLORS`; omitted\n   * = picked from the palette by `id`, stable across renders and hosts.\n   */\n  color?: NavColor;\n}\n\n/** The section tile palette, shared by the standalone sidebar and the dashboard. */\nexport const NAV_COLORS = {\n  red: \"#ef4444\",\n  orange: \"#f97514\",\n  amber: \"#f59e0b\",\n  green: \"#22c55e\",\n  sky: \"#17bde9\",\n  blue: \"#266df0\",\n  violet: \"#8b5cf6\",\n  pink: \"#ec4899\",\n} as const;\nexport type NavColor = keyof typeof NAV_COLORS;\n\n/** Deterministic palette pick for an item without an explicit colour. */\nexport function navColorFor(id: string): NavColor {\n  const names = Object.keys(NAV_COLORS) as NavColor[];\n  let h = 0;\n  for (let i = 0; i < id.length; i++) h = (h * 31 + id.charCodeAt(i)) >>> 0;\n  return names[h % names.length];\n}\n\n/**\n * The icon library: the names the Clawnify dashboard can draw for an app\n * and its sections (resolved to the Phosphor set in both sidebars). Pick\n * from these; the apps AGENTS.md lists them by meaning.\n */\nexport const TILE_ICONS = [\n  \"activity\",\n  \"archive\",\n  \"bar-chart-3\",\n  \"bell\",\n  \"book-open\",\n  \"bot\",\n  \"briefcase\",\n  \"building-2\",\n  \"calendar\",\n  \"calendar-days\",\n  \"camera\",\n  \"check-square\",\n  \"clipboard-list\",\n  \"clock\",\n  \"code-2\",\n  \"contact\",\n  \"credit-card\",\n  \"database\",\n  \"dollar-sign\",\n  \"file\",\n  \"file-text\",\n  \"folder\",\n  \"globe\",\n  \"hash\",\n  \"history\",\n  \"home\",\n  \"image\",\n  \"inbox\",\n  \"kanban\",\n  \"layers\",\n  \"layout-dashboard\",\n  \"layout-grid\",\n  \"link\",\n  \"list\",\n  \"list-checks\",\n  \"mail\",\n  \"map\",\n  \"message-square\",\n  \"mic\",\n  \"package\",\n  \"phone\",\n  \"pie-chart\",\n  \"play\",\n  \"search\",\n  \"send\",\n  \"settings\",\n  \"shopping-cart\",\n  \"sparkles\",\n  \"star\",\n  \"table\",\n  \"tag\",\n  \"target\",\n  \"truck\",\n  \"upload\",\n  \"user\",\n  \"users\",\n  \"video\",\n  \"wallet\",\n  \"zap\",\n] as const;\nexport type TileIconName = (typeof TILE_ICONS)[number];\n\nexport interface TileIconProps {\n  /** Icon name from TILE_ICONS. Unknown or missing = a small dot. */\n  icon?: string;\n  /** Palette colour. Omitted = picked from `seed` (or `icon`) by hash. */\n  color?: NavColor;\n  /** Stable string the colour is derived from when `color` is not given. */\n  seed?: string;\n  /** Tile edge in px. The glyph scales with it. Default 16. */\n  size?: number;\n  className?: string;\n  title?: string;\n}\n\n/**\n * The record tile: a small rounded square in a palette colour with a white\n * lucide glyph. The sidebar draws every app section with it; apps can use\n * the same tile anywhere a record type needs an identity mark (table rows,\n * cards, pickers) so the two surfaces stay one system. Self-contained inline\n * styles, so it works outside <AppNav> and in any stylesheet setup.\n *\n *   <TileIcon icon=\"users\" color=\"blue\" />\n *   <TileIcon icon=\"phone\" seed={lead.id} size={20} />\n */\nexport function TileIcon({ icon, color, seed, size = 16, className, title }: TileIconProps) {\n  const fill = NAV_COLORS[color ?? navColorFor(seed ?? icon ?? \"\")];\n  // The glyph box is 0.7 of the tile: Phosphor draws on ~224 of its 256\n  // units, so the visible glyph lands near 60% of the tile with clear\n  // padding around it, solid white — Attio's record-tile proportion.\n  const glyph = Math.round(size * 0.7);\n  return (\n    <span\n      className={className}\n      title={title}\n      aria-hidden={title ? undefined : true}\n      style={{\n        display: \"inline-flex\",\n        width: size,\n        height: size,\n        flexShrink: 0,\n        alignItems: \"center\",\n        justifyContent: \"center\",\n        borderRadius: \"30%\",\n        border: \"1px solid rgb(0 0 0 / 0.06)\",\n        background: fill,\n        color: \"#fff\",\n      }}\n    >\n      {iconFor(icon) ? (\n        (() => { const I = iconFor(icon)!; return <I size={glyph} weight=\"fill\" aria-hidden />; })()\n      ) : (\n        <span style={{ width: glyph * 0.6, height: glyph * 0.6, borderRadius: 9999, background: \"currentColor\" }} />\n      )}\n    </span>\n  );\n}\n\nexport interface AppNavGroup {\n  /** Eyebrow shown above the items. Omit for an unlabelled group. */\n  label?: string;\n  items: AppNavItem[];\n}\n\n/** Host messages this app handles itself. The host falls back for the rest. */\nexport type HostFeature = \"changes\" | \"path\";\n\n/**\n * What the user is looking at, for the dashboard's chat. It lets them say\n * \"this contact\" and be understood. Labels and ids only: the chat reads the\n * record itself through your API if it needs more.\n */\nexport interface ChatContext {\n  /** The screen, e.g. \"Contact\" or \"Pipeline\". */\n  label?: string;\n  /** The record on screen, when there is one. */\n  record?: { type: string; id: string; label?: string };\n}\n\nexport type AppToHostMessage =\n  | { source: \"clawnify-app\"; v: 1; type: \"ready\"; features?: HostFeature[] }\n  | {\n      source: \"clawnify-app\";\n      v: 1;\n      type: \"nav\";\n      title: string;\n      /** lucide icon name for the app itself. */\n      icon?: string;\n      groups: AppNavGroup[];\n      active?: string;\n    }\n  | { source: \"clawnify-app\"; v: 1; type: \"location\"; path: string }\n  | { source: \"clawnify-app\"; v: 1; type: \"context\"; context: ChatContext | null }\n  | { source: \"clawnify-app\"; v: 1; type: \"chat\"; prompt?: string };\n\nexport type HostToAppMessage =\n  | { source: \"clawnify-host\"; v: 1; type: \"hello\" }\n  | { source: \"clawnify-host\"; v: 1; type: \"navigate\"; id: string }\n  | { source: \"clawnify-host\"; v: 1; type: \"navigate\"; path: string }\n  | { source: \"clawnify-host\"; v: 1; type: \"changed\"; paths: string[] };\n\nconst HOST_PARAM = \"clawnify_host\";\nconst STORAGE_KEY = \"clawnify_host\";\n\n/**\n * Whether this page is running inside the Clawnify dashboard. Computed once at\n * module load — the query parameter is only on the initial URL — and remembered\n * for the tab so in-iframe full navigations keep the mode.\n */\nexport const embedded: boolean = (() => {\n  if (typeof window === \"undefined\") return false;\n  if (window.parent === window) return false;\n  let flagged = false;\n  try {\n    flagged = new URLSearchParams(window.location.search).get(HOST_PARAM) === \"1\";\n    if (flagged) window.sessionStorage.setItem(STORAGE_KEY, \"1\");\n    else flagged = window.sessionStorage.getItem(STORAGE_KEY) === \"1\";\n  } catch {\n    // Storage can throw in a partitioned or locked-down iframe; the query\n    // parameter alone still decides for this document.\n  }\n  return flagged;\n})();\n\nfunction post(message: AppToHostMessage) {\n  if (!embedded) return;\n  // The dashboard may live on app.clawnify.com or a white-label domain, so the\n  // app cannot pin the target origin. The payload is navigation labels, a\n  // path, record labels and a draft prompt — nothing secret — and the host\n  // verifies the sender is its own iframe.\n  window.parent.postMessage(message, \"*\");\n}\n\n// ── One channel for every SDK surface ──────────────────────────────────────\n// <AppNav>, the chat context and the host hooks share one window listener, so\n// an app can use any of them without the others (a single-screen app has no\n// <AppNav> but can still refresh when the chat writes its data).\n\ntype HostListener = (message: HostToAppMessage) => void;\nconst hostListeners = new Set<HostListener>();\n/** How many mounted hooks handle each feature; announced while above zero. */\nconst featureCounts = new Map<HostFeature, number>();\nlet listening = false;\nlet chatContext: ChatContext | null = null;\n\nfunction announce() {\n  post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"ready\", features: [...featureCounts.keys()] });\n}\n\nfunction listen() {\n  if (listening || !embedded) return;\n  listening = true;\n  window.addEventListener(\"message\", (e: MessageEvent) => {\n    if (e.source !== window.parent) return;\n    const d = e.data as HostToAppMessage | undefined;\n    if (!d || d.source !== \"clawnify-host\" || d.v !== HOST_BRIDGE_VERSION) return;\n    // Host (re)mounted its listener: it has lost what we told it.\n    if (d.type === \"hello\" && chatContext) {\n      post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: chatContext });\n    }\n    for (const listener of [...hostListeners]) listener(d);\n  });\n  announce();\n}\n\nfunction subscribe(listener: HostListener, feature?: HostFeature): () => void {\n  if (!embedded) return () => {};\n  listen();\n  hostListeners.add(listener);\n  if (feature) {\n    const n = featureCounts.get(feature) ?? 0;\n    featureCounts.set(feature, n + 1);\n    if (n === 0) announce();\n  }\n  return () => {\n    hostListeners.delete(listener);\n    if (!feature) return;\n    const n = (featureCounts.get(feature) ?? 1) - 1;\n    if (n > 0) featureCounts.set(feature, n);\n    else {\n      featureCounts.delete(feature);\n      announce();\n    }\n  };\n}\n\n/** An in-app path the host may hand us: absolute, same origin. */\nfunction isAppPath(path: unknown): path is string {\n  return typeof path === \"string\" && path.length <= 2048 && /^\\/(?![/\\\\])/.test(path);\n}\n\n// ── Standalone chat: where openChat lands outside Clawnify ────────────────\n// One mounted <AppChat standalone> registers itself here. Listeners keep\n// useHasChat and the panel's context in step without a React provider, so the\n// hooks work from any component, however deep.\n\ntype StandaloneOpen = (draft: string | null) => void;\nlet standaloneOpen: StandaloneOpen | null = null;\nconst chatListeners = new Set<() => void>();\nfunction notifyChat() {\n  for (const l of [...chatListeners]) l();\n}\nfunction useChatVersion() {\n  const [, setVersion] = useState(0);\n  useEffect(() => {\n    const l = () => setVersion((v) => v + 1);\n    chatListeners.add(l);\n    return () => {\n      chatListeners.delete(l);\n    };\n  }, []);\n}\n\n/**\n * Open the chat, optionally with a prompt in its composer. Inside Clawnify\n * that is the dashboard's chat; outside, the app's own `<AppChat standalone>`\n * panel. The prompt is a DRAFT: the user reads it and presses send. It is\n * never sent for them, because an app renders data other people typed (a form\n * submission, a contact note) and that text must not drive anyone's agent.\n *\n * Returns false when there is no chat to open (standalone with no `<AppChat>`\n * mounted). Render the button behind `useHasChat()`:\n *\n *   const hasChat = useHasChat();\n *   {hasChat && <button onClick={() => openChat(`Draft a follow-up for ${c.name}`)}>Ask AI</button>}\n *   {hasChat && <button onClick={() => openChat()}>Chat</button>}   // no prompt: just open it\n */\nexport function openChat(prompt?: string): boolean {\n  const draft = prompt ? String(prompt).slice(0, 2000) : null;\n  if (!embedded) {\n    if (!standaloneOpen) return false;\n    standaloneOpen(draft);\n    return true;\n  }\n  post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"chat\", ...(draft ? { prompt: draft } : {}) });\n  return true;\n}\n\n/** Whether `openChat` has somewhere to go: the dashboard, or a mounted `<AppChat>`. */\nexport function useHasChat(): boolean {\n  useChatVersion();\n  return embedded || standaloneOpen !== null;\n}\n\n/**\n * Tell the dashboard's chat what the user is looking at, so \"this contact\"\n * means the one on screen. Call it from the screen that shows the record; the\n * context clears when that screen unmounts. Labels and ids only, never the\n * record's content: the chat reads that through your API when it needs to.\n *\n *   useChatContext({ label: \"Contact\", record: { type: \"contact\", id: c.id, label: c.name } });\n */\nexport function useChatContext(context: ChatContext | null) {\n  const key = context ? JSON.stringify(sanitizeContext(context)) : \"\";\n  useEffect(() => {\n    if (!key) return;\n    listen();\n    chatContext = JSON.parse(key) as ChatContext;\n    post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: chatContext });\n    notifyChat();\n    return () => {\n      chatContext = null;\n      post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"context\", context: null });\n      notifyChat();\n    };\n  }, [key]);\n}\n\nfunction sanitizeContext(c: ChatContext): ChatContext {\n  return {\n    ...(c.label ? { label: String(c.label).slice(0, 60) } : {}),\n    ...(c.record && c.record.type && c.record.id\n      ? {\n          record: {\n            type: String(c.record.type).slice(0, 40),\n            id: String(c.record.id).slice(0, 80),\n            ...(c.record.label ? { label: String(c.record.label).slice(0, 80) } : {}),\n          },\n        }\n      : {}),\n  };\n}\n\n/** What `<AppChat standalone>` hands the app's own chat panel. */\nexport interface StandaloneChat {\n  open: boolean;\n  /**\n   * The last prompt `openChat` passed, for the composer. A new object on every\n   * call (compare by identity, or by `id`), so the same prompt twice prefills\n   * twice. Null when opened without one.\n   */\n  draft: { id: number; text: string } | null;\n  /** What `useChatContext` reports is on screen; send it with each message. */\n  context: ChatContext | null;\n  close: () => void;\n}\n\nexport interface AppChatProps {\n  /**\n   * The app's own chat, drawn only outside Clawnify. It talks to the app's own\n   * endpoint (`/api/chat` with the app's own model key, say). Inside the\n   * dashboard nothing renders and `openChat` opens the dashboard's chat.\n   */\n  standalone: (chat: StandaloneChat) => ReactNode;\n}\n\n/**\n * Where `openChat` lands when the app runs outside Clawnify. Mount it once,\n * near the root:\n *\n *   <AppChat standalone={(chat) => <MyChatPanel {...chat} />} />\n *\n * Mount at most one: the last one mounted receives `openChat`.\n */\nexport function AppChat({ standalone }: AppChatProps) {\n  const [open, setOpen] = useState(false);\n  const [draft, setDraft] = useState<StandaloneChat[\"draft\"]>(null);\n  const nextId = useRef(0);\n  useChatVersion();\n  useEffect(() => {\n    if (embedded) return;\n    const handler: StandaloneOpen = (text) => {\n      setDraft(text ? { id: ++nextId.current, text } : null);\n      setOpen(true);\n    };\n    standaloneOpen = handler;\n    notifyChat();\n    return () => {\n      if (standaloneOpen === handler) standaloneOpen = null;\n      notifyChat();\n    };\n  }, []);\n  if (embedded) return null;\n  return <>{standalone({ open, draft, context: chatContext, close: () => setOpen(false) })}</>;\n}\n\n/**\n * Run `onChange` when the dashboard's chat has written this app's data (a\n * POST, PUT, PATCH or DELETE through your API), with the API paths it called.\n * Refetch what is on screen. While no mounted component uses this hook, the\n * dashboard reloads the whole iframe after such a write instead.\n *\n *   useHostChanges(() => { void reload(); });\n */\nexport function useHostChanges(onChange: (paths: string[]) => void) {\n  const ref = useRef(onChange);\n  ref.current = onChange;\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type !== \"changed\" || !Array.isArray(d.paths)) return;\n        ref.current(d.paths.filter((p): p is string => typeof p === \"string\").slice(0, 20));\n      }, \"changes\"),\n    [],\n  );\n}\n\n/**\n * Let the dashboard (its chat, a deep link) open any page of the app through\n * your router, without reloading the iframe. `path` is an in-app path such as\n * \"/contacts/42?tab=deals\". While no mounted component uses this hook, the\n * dashboard reloads the iframe at that path instead.\n *\n *   useHostNavigate((path) => navigate(path));\n */\nexport function useHostNavigate(onNavigate: (path: string) => void) {\n  const ref = useRef(onNavigate);\n  ref.current = onNavigate;\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type === \"navigate\" && \"path\" in d && isAppPath(d.path)) ref.current(d.path);\n      }, \"path\"),\n    [],\n  );\n}\n\n/**\n * Tell the host where the app is, so the dashboard URL can restore this view\n * on reload. Call it whenever your router's location changes; a no-op when\n * standalone.\n */\nexport function reportLocation(path: string) {\n  // The initial URL carries the dashboard's own parameters (the app token\n  // and the host flag). They are not part of the app's location and must\n  // never land in a URL the dashboard writes, so strip them here as well.\n  let clean = path;\n  try {\n    const u = new URL(path, \"http://app.invalid\");\n    u.searchParams.delete(\"token\");\n    u.searchParams.delete(HOST_PARAM);\n    clean = u.pathname + u.search + u.hash;\n  } catch {\n    // Not a path we can parse: send as-is, the host validates its shape.\n  }\n  post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"location\", path: clean });\n}\n\nexport interface AppNavProps {\n  /** App name, shown in the brand row standalone and in the host's switcher. */\n  title: string;\n  /**\n   * The app's own glyph, a lucide icon name (kebab-case). Drawn as an\n   * outline icon with no background: in the standalone brand row, and by the\n   * dashboard on the app's sidebar item. Tiles are for records, not for\n   * navigation, so the app's coloured tile icon stays out of the sidebar.\n   */\n  icon?: string;\n  groups: AppNavGroup[];\n  /** `id` of the active item. */\n  active?: string;\n  /** Called with the item the user chose, from either renderer. */\n  onNavigate: (item: AppNavItem) => void;\n  /** Rendered at the bottom of the built-in sidebar (a footer action, say). */\n  children?: ReactNode;\n  /**\n   * The app's own sidebar, drawn instead of the built-in one outside\n   * Clawnify, from the same nav data (so the navigation is still defined\n   * once). Inside the dashboard it never renders: the dashboard draws the nav.\n   *\n   *   standalone={(nav) => <MySidebar groups={nav.groups} active={nav.active} onSelect={nav.onNavigate} />}\n   */\n  standalone?: (nav: StandaloneNav) => ReactNode;\n}\n\n/** What `<AppNav standalone>` hands the app's own sidebar. */\nexport interface StandaloneNav {\n  title: string;\n  icon?: string;\n  groups: AppNavGroup[];\n  active?: string;\n  /** The `home: true` item, which the built-in sidebar opens from its brand row. */\n  home?: AppNavItem;\n  onNavigate: (item: AppNavItem) => void;\n}\n\n/**\n * The app's navigation: sidebar when standalone, host-fed when embedded.\n *\n * Standalone layout: the sidebar is a 260px column at ≥768px and a horizontal\n * strip below that, so put it first inside a `flex flex-col md:flex-row`\n * container. It paints with the app's own theme tokens (`--surface`,\n * `--border`, `--primary`…) and falls back to the platform defaults when a\n * token is missing.\n */\nexport function AppNav({ title, icon, groups, active, onNavigate, children, standalone }: AppNavProps) {\n  // Always the latest callback, so the host listener never calls a stale one.\n  const onNavigateRef = useRef(onNavigate);\n  onNavigateRef.current = onNavigate;\n  const groupsRef = useRef(groups);\n  groupsRef.current = groups;\n\n  // Embedded: publish the tree whenever it changes. Serialising is the cheap\n  // way to dedupe — apps build `groups` inline every render.\n  const payload = embedded\n    ? JSON.stringify({ title, icon, groups: sanitize(groups), active })\n    : \"\";\n  const lastSent = useRef(\"\");\n  useEffect(() => {\n    if (!embedded || payload === lastSent.current) return;\n    lastSent.current = payload;\n    const { title, icon, groups, active } = JSON.parse(payload) as {\n      title: string;\n      icon?: string;\n      groups: AppNavGroup[];\n      active?: string;\n    };\n    post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"nav\", title, icon, groups, active });\n  }, [payload]);\n\n  // Embedded: handshake + listen for the host's clicks.\n  useEffect(\n    () =>\n      subscribe((d) => {\n        if (d.type === \"hello\") {\n          // Host (re)mounted its listener after we first published: resend.\n          lastSent.current = \"\";\n          const g = sanitize(groupsRef.current);\n          post({ source: \"clawnify-app\", v: HOST_BRIDGE_VERSION, type: \"nav\", title, icon, groups: g, active });\n        } else if (d.type === \"navigate\" && \"id\" in d && typeof d.id === \"string\") {\n          const item = groupsRef.current.flatMap((g) => g.items).find((i) => i.id === d.id);\n          if (item) onNavigateRef.current(item);\n        }\n      }),\n    // title/active are read from the closure only on `hello`; the publish\n    // effect above covers their normal updates.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [],\n  );\n\n  if (embedded) return null;\n\n  const home = groups.flatMap((g) => g.items).find((i) => i.home);\n  if (standalone) return <>{standalone({ title, icon, groups, active, home, onNavigate })}</>;\n  const brand = (\n    <>\n      {(() => { const I = iconFor(icon); return I ? <I size={16} aria-hidden /> : null; })()}\n      <span>{title}</span>\n    </>\n  );\n\n  return (\n    <aside className=\"cn-nav\">\n      <style>{CSS}</style>\n      {home ? (\n        <a\n          href={home.href ?? \"/\"}\n          className=\"cn-nav-brand\"\n          data-active={home.id === active || undefined}\n          aria-current={home.id === active ? \"page\" : undefined}\n          onClick={(e: MouseEvent) => {\n            if (e.metaKey || e.ctrlKey || e.shiftKey || e.button !== 0) return;\n            e.preventDefault();\n            onNavigate(home);\n          }}\n        >\n          {brand}\n        </a>\n      ) : (\n        <div className=\"cn-nav-brand\">{brand}</div>\n      )}\n      <nav className=\"cn-nav-groups\" aria-label=\"Primary\">\n        {groups.map((g, gi) => (\n          <div className=\"cn-nav-group\" key={g.label ?? gi}>\n            {g.label && <p className=\"cn-nav-eyebrow\">{g.label}</p>}\n            {g.items\n              .filter((item) => !item.home)\n              .map((item) => (\n                <NavRow key={item.id} item={item} active={item.id === active} onNavigate={onNavigate} />\n              ))}\n          </div>\n        ))}\n      </nav>\n      {children && <div className=\"cn-nav-footer\">{children}</div>}\n    </aside>\n  );\n}\n\nfunction NavRow({\n  item,\n  active,\n  onNavigate,\n}: {\n  item: AppNavItem;\n  active: boolean;\n  onNavigate: (item: AppNavItem) => void;\n}) {\n  const body = (\n    <>\n      <TileIcon icon={item.icon} color={item.color} seed={item.id} />\n      <span className=\"cn-nav-label\">{item.label}</span>\n      {typeof item.count === \"number\" && <span className=\"cn-nav-count\">{item.count}</span>}\n    </>\n  );\n  // A real link when there is an href — middle-click and copy-link keep\n  // working — but the click itself goes through the app's router.\n  if (item.href) {\n    return (\n      <a\n        href={item.href}\n        className=\"cn-nav-item\"\n        data-active={active || undefined}\n        aria-current={active ? \"page\" : undefined}\n        onClick={(e: MouseEvent) => {\n          if (e.metaKey || e.ctrlKey || e.shiftKey || e.button !== 0) return;\n          e.preventDefault();\n          onNavigate(item);\n        }}\n      >\n        {body}\n      </a>\n    );\n  }\n  return (\n    <button\n      type=\"button\"\n      className=\"cn-nav-item\"\n      data-active={active || undefined}\n      aria-current={active ? \"page\" : undefined}\n      onClick={() => onNavigate(item)}\n    >\n      {body}\n    </button>\n  );\n}\n\n/** Our names → Phosphor components; the same map the dashboard holds. */\nconst ICONS: Record<string, PhosphorIcon> = {\n  \"activity\": Pulse,\n  \"archive\": Archive,\n  \"bar-chart-3\": ChartBar,\n  \"bell\": Bell,\n  \"book-open\": BookOpen,\n  \"bot\": Robot,\n  \"briefcase\": Briefcase,\n  \"building-2\": Building,\n  \"calendar\": Calendar,\n  \"calendar-days\": CalendarDots,\n  \"camera\": Camera,\n  \"check-square\": CheckSquare,\n  \"clipboard-list\": ClipboardText,\n  \"clock\": Clock,\n  \"code-2\": Code,\n  \"contact\": AddressBook,\n  \"credit-card\": CreditCard,\n  \"database\": Database,\n  \"dollar-sign\": CurrencyDollar,\n  \"file\": File,\n  \"file-text\": FileText,\n  \"folder\": Folder,\n  \"globe\": Globe,\n  \"hash\": Hash,\n  \"history\": ClockCounterClockwise,\n  \"home\": House,\n  \"image\": Image,\n  \"inbox\": Tray,\n  \"kanban\": Kanban,\n  \"layers\": Stack,\n  \"layout-dashboard\": SquaresFour,\n  \"layout-grid\": GridFour,\n  \"link\": Link,\n  \"list\": List,\n  \"list-checks\": ListChecks,\n  \"mail\": Envelope,\n  \"map\": MapTrifold,\n  \"message-square\": ChatCircle,\n  \"mic\": Microphone,\n  \"package\": Package,\n  \"phone\": Phone,\n  \"pie-chart\": ChartPie,\n  \"play\": Play,\n  \"search\": MagnifyingGlass,\n  \"send\": PaperPlaneTilt,\n  \"settings\": Gear,\n  \"shopping-cart\": ShoppingCart,\n  \"sparkles\": Sparkle,\n  \"star\": Star,\n  \"table\": Table,\n  \"tag\": Tag,\n  \"target\": Target,\n  \"truck\": Truck,\n  \"upload\": Upload,\n  \"user\": User,\n  \"users\": User,\n  \"video\": VideoCamera,\n  \"wallet\": Wallet,\n  \"zap\": Lightning,\n};\nfunction iconFor(name?: string): PhosphorIcon | undefined {\n  return name ? ICONS[name] : undefined;\n}\n\n/** Only the fields the protocol defines, with sane bounds, cross the bridge. */\nfunction sanitize(groups: AppNavGroup[]): AppNavGroup[] {\n  return groups.slice(0, 20).map((g) => ({\n    ...(g.label ? { label: String(g.label).slice(0, 40) } : {}),\n    items: g.items.slice(0, 100).map((i) => ({\n      id: String(i.id),\n      label: String(i.label).slice(0, 60),\n      ...(i.href ? { href: String(i.href) } : {}),\n      ...(i.icon ? { icon: String(i.icon) } : {}),\n      ...(typeof i.count === \"number\" && Number.isFinite(i.count) ? { count: i.count } : {}),\n      ...(i.home ? { home: true } : {}),\n      ...(i.color && i.color in NAV_COLORS ? { color: i.color } : {}),\n    })),\n  }));\n}\n\n// Scoped by class prefix; tokens follow apps/DESIGN.md with its light defaults\n// as fallbacks, so an app with a partial theme still gets a readable sidebar.\nconst CSS = `\n.cn-nav{width:16.25rem;flex-shrink:0;display:flex;flex-direction:column;border-right:1px solid var(--border,#e2e8f0);background:var(--surface,#fff);color:var(--foreground,#1a202c)}\n.cn-nav-brand{height:3.5rem;flex-shrink:0;display:flex;align-items:center;gap:.5rem;padding:0 1.25rem;border-bottom:1px solid var(--border,#e2e8f0);font-size:.875rem;font-weight:600;color:inherit;text-decoration:none}\na.cn-nav-brand:hover{background:var(--sunken,#f1f5f9)}\n.cn-nav-brand>svg{color:var(--primary,#dd5164)}\n.cn-nav-groups{flex:1;overflow-y:auto;padding:.75rem}\n.cn-nav-group+.cn-nav-group{margin-top:1rem}\n.cn-nav-eyebrow{margin:0 0 .25rem;padding:0 .625rem;font-size:.75rem;font-weight:500;color:var(--muted,#475569)}\n.cn-nav-item{display:flex;align-items:center;gap:.5rem;width:100%;margin:0 0 .125rem;padding:.4375rem .625rem;border:0;border-radius:.375rem;background:none;color:inherit;font:inherit;font-size:.875rem;text-align:left;text-decoration:none;cursor:pointer}\n.cn-nav-item:hover{background:var(--sunken,#f1f5f9)}\n.cn-nav-item[data-active]{background:color-mix(in srgb,var(--primary,#dd5164) 12%,transparent);color:var(--primary,#dd5164);font-weight:600}\n.cn-nav-item:focus-visible{outline:2px solid var(--ring,#2563eb);outline-offset:-2px}\n.cn-nav-label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.cn-nav-count{font-size:.75rem;font-variant-numeric:tabular-nums;color:var(--muted,#475569)}\n.cn-nav-item[data-active] .cn-nav-count{color:inherit}\n.cn-nav-footer{padding:.75rem;border-top:1px solid var(--border,#e2e8f0)}\n@media (max-width:767px){\n.cn-nav{width:100%;flex-direction:row;border-right:0;border-bottom:1px solid var(--border,#e2e8f0)}\n.cn-nav-brand,.cn-nav-eyebrow,.cn-nav-footer{display:none}\n.cn-nav-groups{display:flex;gap:.25rem;padding:.5rem .75rem;overflow-x:auto;overflow-y:hidden}\n.cn-nav-group{display:flex;gap:.25rem}\n.cn-nav-group+.cn-nav-group{margin:0}\n.cn-nav-item{width:auto;margin:0;white-space:nowrap}\n}\n`;\n"],"mappings":";AAuEA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA0K2C,SA2RzC,UA3RyC,KA6b9C,YA7b8C;AAxK3C,IAAM,sBAAsB;AAgC5B,IAAM,aAAa;AAAA,EACxB,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,OAAO;AAAA,EACP,KAAK;AAAA,EACL,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AACR;AAIO,SAAS,YAAY,IAAsB;AAChD,QAAM,QAAQ,OAAO,KAAK,UAAU;AACpC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,GAAG,QAAQ,IAAK,KAAK,IAAI,KAAK,GAAG,WAAW,CAAC,MAAO;AACxE,SAAO,MAAM,IAAI,MAAM,MAAM;AAC/B;AAOO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AA0BO,SAAS,SAAS,EAAE,MAAM,OAAO,MAAM,OAAO,IAAI,WAAW,MAAM,GAAkB;AAC1F,QAAM,OAAO,WAAW,SAAS,YAAY,QAAQ,QAAQ,EAAE,CAAC;AAIhE,QAAM,QAAQ,KAAK,MAAM,OAAO,GAAG;AACnC,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA,eAAa,QAAQ,SAAY;AAAA,MACjC,OAAO;AAAA,QACL,SAAS;AAAA,QACT,OAAO;AAAA,QACP,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,gBAAgB;AAAA,QAChB,cAAc;AAAA,QACd,QAAQ;AAAA,QACR,YAAY;AAAA,QACZ,OAAO;AAAA,MACT;AAAA,MAEC,kBAAQ,IAAI,KACV,MAAM;AAAE,cAAM,IAAI,QAAQ,IAAI;AAAI,eAAO,oBAAC,KAAE,MAAM,OAAO,QAAO,QAAO,eAAW,MAAC;AAAA,MAAI,GAAG,IAE3F,oBAAC,UAAK,OAAO,EAAE,OAAO,QAAQ,KAAK,QAAQ,QAAQ,KAAK,cAAc,MAAM,YAAY,eAAe,GAAG;AAAA;AAAA,EAE9G;AAEJ;AA6CA,IAAM,aAAa;AACnB,IAAM,cAAc;AAOb,IAAM,YAAqB,MAAM;AACtC,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI,OAAO,WAAW,OAAQ,QAAO;AACrC,MAAI,UAAU;AACd,MAAI;AACF,cAAU,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,UAAU,MAAM;AAC1E,QAAI,QAAS,QAAO,eAAe,QAAQ,aAAa,GAAG;AAAA,QACtD,WAAU,OAAO,eAAe,QAAQ,WAAW,MAAM;AAAA,EAChE,QAAQ;AAAA,EAGR;AACA,SAAO;AACT,GAAG;AAEH,SAAS,KAAK,SAA2B;AACvC,MAAI,CAAC,SAAU;AAKf,SAAO,OAAO,YAAY,SAAS,GAAG;AACxC;AAQA,IAAM,gBAAgB,oBAAI,IAAkB;AAE5C,IAAM,gBAAgB,oBAAI,IAAyB;AACnD,IAAI,YAAY;AAChB,IAAI,cAAkC;AAEtC,SAAS,WAAW;AAClB,OAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,SAAS,UAAU,CAAC,GAAG,cAAc,KAAK,CAAC,EAAE,CAAC;AAC7G;AAEA,SAAS,SAAS;AAChB,MAAI,aAAa,CAAC,SAAU;AAC5B,cAAY;AACZ,SAAO,iBAAiB,WAAW,CAAC,MAAoB;AACtD,QAAI,EAAE,WAAW,OAAO,OAAQ;AAChC,UAAM,IAAI,EAAE;AACZ,QAAI,CAAC,KAAK,EAAE,WAAW,mBAAmB,EAAE,MAAM,oBAAqB;AAEvE,QAAI,EAAE,SAAS,WAAW,aAAa;AACrC,WAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,YAAY,CAAC;AAAA,IAChG;AACA,eAAW,YAAY,CAAC,GAAG,aAAa,EAAG,UAAS,CAAC;AAAA,EACvD,CAAC;AACD,WAAS;AACX;AAEA,SAAS,UAAU,UAAwB,SAAmC;AAC5E,MAAI,CAAC,SAAU,QAAO,MAAM;AAAA,EAAC;AAC7B,SAAO;AACP,gBAAc,IAAI,QAAQ;AAC1B,MAAI,SAAS;AACX,UAAM,IAAI,cAAc,IAAI,OAAO,KAAK;AACxC,kBAAc,IAAI,SAAS,IAAI,CAAC;AAChC,QAAI,MAAM,EAAG,UAAS;AAAA,EACxB;AACA,SAAO,MAAM;AACX,kBAAc,OAAO,QAAQ;AAC7B,QAAI,CAAC,QAAS;AACd,UAAM,KAAK,cAAc,IAAI,OAAO,KAAK,KAAK;AAC9C,QAAI,IAAI,EAAG,eAAc,IAAI,SAAS,CAAC;AAAA,SAClC;AACH,oBAAc,OAAO,OAAO;AAC5B,eAAS;AAAA,IACX;AAAA,EACF;AACF;AAGA,SAAS,UAAU,MAA+B;AAChD,SAAO,OAAO,SAAS,YAAY,KAAK,UAAU,QAAQ,eAAe,KAAK,IAAI;AACpF;AAQA,IAAI,iBAAwC;AAC5C,IAAM,gBAAgB,oBAAI,IAAgB;AAC1C,SAAS,aAAa;AACpB,aAAW,KAAK,CAAC,GAAG,aAAa,EAAG,GAAE;AACxC;AACA,SAAS,iBAAiB;AACxB,QAAM,CAAC,EAAE,UAAU,IAAI,SAAS,CAAC;AACjC,YAAU,MAAM;AACd,UAAM,IAAI,MAAM,WAAW,CAAC,MAAM,IAAI,CAAC;AACvC,kBAAc,IAAI,CAAC;AACnB,WAAO,MAAM;AACX,oBAAc,OAAO,CAAC;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,CAAC;AACP;AAgBO,SAAS,SAAS,QAA0B;AACjD,QAAM,QAAQ,SAAS,OAAO,MAAM,EAAE,MAAM,GAAG,GAAI,IAAI;AACvD,MAAI,CAAC,UAAU;AACb,QAAI,CAAC,eAAgB,QAAO;AAC5B,mBAAe,KAAK;AACpB,WAAO;AAAA,EACT;AACA,OAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,QAAQ,GAAI,QAAQ,EAAE,QAAQ,MAAM,IAAI,CAAC,EAAG,CAAC;AAC1G,SAAO;AACT;AAGO,SAAS,aAAsB;AACpC,iBAAe;AACf,SAAO,YAAY,mBAAmB;AACxC;AAUO,SAAS,eAAe,SAA6B;AAC1D,QAAM,MAAM,UAAU,KAAK,UAAU,gBAAgB,OAAO,CAAC,IAAI;AACjE,YAAU,MAAM;AACd,QAAI,CAAC,IAAK;AACV,WAAO;AACP,kBAAc,KAAK,MAAM,GAAG;AAC5B,SAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,YAAY,CAAC;AAC9F,eAAW;AACX,WAAO,MAAM;AACX,oBAAc;AACd,WAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,WAAW,SAAS,KAAK,CAAC;AACvF,iBAAW;AAAA,IACb;AAAA,EACF,GAAG,CAAC,GAAG,CAAC;AACV;AAEA,SAAS,gBAAgB,GAA6B;AACpD,SAAO;AAAA,IACL,GAAI,EAAE,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,IACzD,GAAI,EAAE,UAAU,EAAE,OAAO,QAAQ,EAAE,OAAO,KACtC;AAAA,MACE,QAAQ;AAAA,QACN,MAAM,OAAO,EAAE,OAAO,IAAI,EAAE,MAAM,GAAG,EAAE;AAAA,QACvC,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,GAAG,EAAE;AAAA,QACnC,GAAI,EAAE,OAAO,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,MACzE;AAAA,IACF,IACA,CAAC;AAAA,EACP;AACF;AAiCO,SAAS,QAAQ,EAAE,WAAW,GAAiB;AACpD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAkC,IAAI;AAChE,QAAM,SAAS,OAAO,CAAC;AACvB,iBAAe;AACf,YAAU,MAAM;AACd,QAAI,SAAU;AACd,UAAM,UAA0B,CAAC,SAAS;AACxC,eAAS,OAAO,EAAE,IAAI,EAAE,OAAO,SAAS,KAAK,IAAI,IAAI;AACrD,cAAQ,IAAI;AAAA,IACd;AACA,qBAAiB;AACjB,eAAW;AACX,WAAO,MAAM;AACX,UAAI,mBAAmB,QAAS,kBAAiB;AACjD,iBAAW;AAAA,IACb;AAAA,EACF,GAAG,CAAC,CAAC;AACL,MAAI,SAAU,QAAO;AACrB,SAAO,gCAAG,qBAAW,EAAE,MAAM,OAAO,SAAS,aAAa,OAAO,MAAM,QAAQ,KAAK,EAAE,CAAC,GAAE;AAC3F;AAUO,SAAS,eAAe,UAAqC;AAClE,QAAM,MAAM,OAAO,QAAQ;AAC3B,MAAI,UAAU;AACd;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,aAAa,CAAC,MAAM,QAAQ,EAAE,KAAK,EAAG;AACrD,UAAI,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA,IACpF,GAAG,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AACF;AAUO,SAAS,gBAAgB,YAAoC;AAClE,QAAM,MAAM,OAAO,UAAU;AAC7B,MAAI,UAAU;AACd;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,cAAc,UAAU,KAAK,UAAU,EAAE,IAAI,EAAG,KAAI,QAAQ,EAAE,IAAI;AAAA,IACnF,GAAG,MAAM;AAAA,IACX,CAAC;AAAA,EACH;AACF;AAOO,SAAS,eAAe,MAAc;AAI3C,MAAI,QAAQ;AACZ,MAAI;AACF,UAAM,IAAI,IAAI,IAAI,MAAM,oBAAoB;AAC5C,MAAE,aAAa,OAAO,OAAO;AAC7B,MAAE,aAAa,OAAO,UAAU;AAChC,YAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;AAAA,EACpC,QAAQ;AAAA,EAER;AACA,OAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,YAAY,MAAM,MAAM,CAAC;AACxF;AAiDO,SAAS,OAAO,EAAE,OAAO,MAAM,QAAQ,QAAQ,YAAY,UAAU,WAAW,GAAgB;AAErG,QAAM,gBAAgB,OAAO,UAAU;AACvC,gBAAc,UAAU;AACxB,QAAM,YAAY,OAAO,MAAM;AAC/B,YAAU,UAAU;AAIpB,QAAM,UAAU,WACZ,KAAK,UAAU,EAAE,OAAO,MAAM,QAAQ,SAAS,MAAM,GAAG,OAAO,CAAC,IAChE;AACJ,QAAM,WAAW,OAAO,EAAE;AAC1B,YAAU,MAAM;AACd,QAAI,CAAC,YAAY,YAAY,SAAS,QAAS;AAC/C,aAAS,UAAU;AACnB,UAAM,EAAE,OAAAA,QAAO,MAAAC,OAAM,QAAAC,SAAQ,QAAAC,QAAO,IAAI,KAAK,MAAM,OAAO;AAM1D,SAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,OAAO,OAAAH,QAAO,MAAAC,OAAM,QAAAC,SAAQ,QAAAC,QAAO,CAAC;AAAA,EACnG,GAAG,CAAC,OAAO,CAAC;AAGZ;AAAA,IACE,MACE,UAAU,CAAC,MAAM;AACf,UAAI,EAAE,SAAS,SAAS;AAEtB,iBAAS,UAAU;AACnB,cAAM,IAAI,SAAS,UAAU,OAAO;AACpC,aAAK,EAAE,QAAQ,gBAAgB,GAAG,qBAAqB,MAAM,OAAO,OAAO,MAAM,QAAQ,GAAG,OAAO,CAAC;AAAA,MACtG,WAAW,EAAE,SAAS,cAAc,QAAQ,KAAK,OAAO,EAAE,OAAO,UAAU;AACzE,cAAM,OAAO,UAAU,QAAQ,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;AAChF,YAAI,KAAM,eAAc,QAAQ,IAAI;AAAA,MACtC;AAAA,IACF,CAAC;AAAA;AAAA;AAAA;AAAA,IAIH,CAAC;AAAA,EACH;AAEA,MAAI,SAAU,QAAO;AAErB,QAAM,OAAO,OAAO,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI;AAC9D,MAAI,WAAY,QAAO,gCAAG,qBAAW,EAAE,OAAO,MAAM,QAAQ,QAAQ,MAAM,WAAW,CAAC,GAAE;AACxF,QAAM,QACJ,iCACI;AAAA,WAAM;AAAE,YAAM,IAAI,QAAQ,IAAI;AAAG,aAAO,IAAI,oBAAC,KAAE,MAAM,IAAI,eAAW,MAAC,IAAK;AAAA,IAAM,GAAG;AAAA,IACrF,oBAAC,UAAM,iBAAM;AAAA,KACf;AAGF,SACE,qBAAC,WAAM,WAAU,UACf;AAAA,wBAAC,WAAO,eAAI;AAAA,IACX,OACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,KAAK,QAAQ;AAAA,QACnB,WAAU;AAAA,QACV,eAAa,KAAK,OAAO,UAAU;AAAA,QACnC,gBAAc,KAAK,OAAO,SAAS,SAAS;AAAA,QAC5C,SAAS,CAAC,MAAkB;AAC1B,cAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAG;AAC5D,YAAE,eAAe;AACjB,qBAAW,IAAI;AAAA,QACjB;AAAA,QAEC;AAAA;AAAA,IACH,IAEA,oBAAC,SAAI,WAAU,gBAAgB,iBAAM;AAAA,IAEvC,oBAAC,SAAI,WAAU,iBAAgB,cAAW,WACvC,iBAAO,IAAI,CAAC,GAAG,OACd,qBAAC,SAAI,WAAU,gBACZ;AAAA,QAAE,SAAS,oBAAC,OAAE,WAAU,kBAAkB,YAAE,OAAM;AAAA,MAClD,EAAE,MACA,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,EAC3B,IAAI,CAAC,SACJ,oBAAC,UAAqB,MAAY,QAAQ,KAAK,OAAO,QAAQ,cAAjD,KAAK,EAAoE,CACvF;AAAA,SAN8B,EAAE,SAAS,EAO9C,CACD,GACH;AAAA,IACC,YAAY,oBAAC,SAAI,WAAU,iBAAiB,UAAS;AAAA,KACxD;AAEJ;AAEA,SAAS,OAAO;AAAA,EACd;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,OACJ,iCACE;AAAA,wBAAC,YAAS,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,MAAM,KAAK,IAAI;AAAA,IAC7D,oBAAC,UAAK,WAAU,gBAAgB,eAAK,OAAM;AAAA,IAC1C,OAAO,KAAK,UAAU,YAAY,oBAAC,UAAK,WAAU,gBAAgB,eAAK,OAAM;AAAA,KAChF;AAIF,MAAI,KAAK,MAAM;AACb,WACE;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,KAAK;AAAA,QACX,WAAU;AAAA,QACV,eAAa,UAAU;AAAA,QACvB,gBAAc,SAAS,SAAS;AAAA,QAChC,SAAS,CAAC,MAAkB;AAC1B,cAAI,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAG;AAC5D,YAAE,eAAe;AACjB,qBAAW,IAAI;AAAA,QACjB;AAAA,QAEC;AAAA;AAAA,IACH;AAAA,EAEJ;AACA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,WAAU;AAAA,MACV,eAAa,UAAU;AAAA,MACvB,gBAAc,SAAS,SAAS;AAAA,MAChC,SAAS,MAAM,WAAW,IAAI;AAAA,MAE7B;AAAA;AAAA,EACH;AAEJ;AAGA,IAAM,QAAsC;AAAA,EAC1C,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,OAAO;AAAA,EACP,aAAa;AAAA,EACb,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,UAAU;AAAA,EACV,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,WAAW;AAAA,EACX,SAAS;AAAA,EACT,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AAAA,EACP,UAAU;AAAA,EACV,SAAS;AAAA,EACT,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,OAAO;AACT;AACA,SAAS,QAAQ,MAAyC;AACxD,SAAO,OAAO,MAAM,IAAI,IAAI;AAC9B;AAGA,SAAS,SAAS,QAAsC;AACtD,SAAO,OAAO,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO;AAAA,IACrC,GAAI,EAAE,QAAQ,EAAE,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC;AAAA,IACzD,OAAO,EAAE,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,OAAO;AAAA,MACvC,IAAI,OAAO,EAAE,EAAE;AAAA,MACf,OAAO,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE;AAAA,MAClC,GAAI,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,MACzC,GAAI,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,MACzC,GAAI,OAAO,EAAE,UAAU,YAAY,OAAO,SAAS,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,MACpF,GAAI,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MAC/B,GAAI,EAAE,SAAS,EAAE,SAAS,aAAa,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAAA,IAC/D,EAAE;AAAA,EACJ,EAAE;AACJ;AAIA,IAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":["title","icon","groups","active"]}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { DiscoveryOptions, OpenAPIHono } from '@clawnify/routes';
+import { z, OpenAPIHono, DiscoveryOptions } from '@clawnify/routes';
 export { DEFAULT_PAGE_LIMIT, DiscoverableApp, DiscoveryOptions, MAX_PAGE_LIMIT, OpenAPIHono, PageParams, PageQuery, createRoute, describeRoutes, mountDiscovery, pageParams, pagedResponse, z } from '@clawnify/routes';
-import { Env } from 'hono';
+import { Env, Context } from 'hono';
 
 /**
  * Identity — who is calling this app.
@@ -104,6 +104,196 @@ declare function orgId(c: RequestLike): string | null;
  */
 declare function user(c: RequestLike): AppUser | null;
 
+/**
+ * Dashboard widgets: glanceable tiles an app offers, drawn by the Clawnify
+ * dashboard while the app itself is closed.
+ *
+ * The widget kinds are standard and the dashboard renders them with its own
+ * components. An app supplies DATA only — no markup, no CSS, no chart code —
+ * so every widget looks native and no app can break the home page.
+ *
+ *   import { createApp, widgets, orgId } from "@clawnify/app";
+ *   const app = createApp<Env>({ title: "CRM" });
+ *   widgets(app, async (c) => [
+ *     { key: "deals-this-month", kind: "metric", title: "Deals created this month",
+ *       value: await countDealsThisMonth(c), at: "/deals?created=this-month" },
+ *   ]);
+ *
+ * Served at GET /api/widgets and listed in /api/openapi.json, so an agent can
+ * read the same summary a person sees. The handler runs with the caller's
+ * identity (`user(c)` / `orgId(c)`), so return only what that caller may see.
+ *
+ * The dashboard re-validates everything it receives (apps/api
+ * services/app-widgets.ts is the trust boundary); the schema here exists so an
+ * author gets a clear error at their own desk instead of a silently dropped
+ * tile. Keep the two in step: kinds, fields and caps.
+ */
+
+declare const WIDGET_LIMITS: {
+    readonly widgets: 6;
+    readonly seriesPoints: 90;
+    readonly breakdownItems: 12;
+    readonly listItems: 5;
+    readonly text: 80;
+};
+declare const WidgetSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"metric">;
+    value: z.ZodNumber;
+    format: z.ZodOptional<z.ZodEnum<["number", "currency", "percent"]>>;
+    currency: z.ZodOptional<z.ZodString>;
+    /** Stable id, unique within the app: lowercase letters, digits, dashes. */
+    key: z.ZodString;
+    title: z.ZodString;
+    at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kind: "metric";
+    value: number;
+    title: string;
+    key: string;
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}, {
+    kind: "metric";
+    value: number;
+    title: string;
+    key: string;
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"series">;
+    /** Oldest first. `x` is an ISO date or a short label. */
+    points: z.ZodArray<z.ZodObject<{
+        x: z.ZodString;
+        y: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        x: string;
+        y: number;
+    }, {
+        x: string;
+        y: number;
+    }>, "many">;
+    format: z.ZodOptional<z.ZodEnum<["number", "currency", "percent"]>>;
+    currency: z.ZodOptional<z.ZodString>;
+    /** Stable id, unique within the app: lowercase letters, digits, dashes. */
+    key: z.ZodString;
+    title: z.ZodString;
+    at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kind: "series";
+    title: string;
+    key: string;
+    points: {
+        x: string;
+        y: number;
+    }[];
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}, {
+    kind: "series";
+    title: string;
+    key: string;
+    points: {
+        x: string;
+        y: number;
+    }[];
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"breakdown">;
+    /** Drawn as ranked horizontal bars in one hue, largest first. */
+    items: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        value: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        value: number;
+        label: string;
+    }, {
+        value: number;
+        label: string;
+    }>, "many">;
+    format: z.ZodOptional<z.ZodEnum<["number", "currency", "percent"]>>;
+    currency: z.ZodOptional<z.ZodString>;
+    /** Stable id, unique within the app: lowercase letters, digits, dashes. */
+    key: z.ZodString;
+    title: z.ZodString;
+    at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kind: "breakdown";
+    items: {
+        value: number;
+        label: string;
+    }[];
+    title: string;
+    key: string;
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}, {
+    kind: "breakdown";
+    items: {
+        value: number;
+        label: string;
+    }[];
+    title: string;
+    key: string;
+    at?: string | undefined;
+    currency?: string | undefined;
+    format?: "number" | "currency" | "percent" | undefined;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"list">;
+    items: z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        meta: z.ZodOptional<z.ZodString>;
+        at: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        at?: string | undefined;
+        meta?: string | undefined;
+    }, {
+        label: string;
+        at?: string | undefined;
+        meta?: string | undefined;
+    }>, "many">;
+    /** Stable id, unique within the app: lowercase letters, digits, dashes. */
+    key: z.ZodString;
+    title: z.ZodString;
+    at: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kind: "list";
+    items: {
+        label: string;
+        at?: string | undefined;
+        meta?: string | undefined;
+    }[];
+    title: string;
+    key: string;
+    at?: string | undefined;
+}, {
+    kind: "list";
+    items: {
+        label: string;
+        at?: string | undefined;
+        meta?: string | undefined;
+    }[];
+    title: string;
+    key: string;
+    at?: string | undefined;
+}>]>;
+type Widget = z.infer<typeof WidgetSchema>;
+/**
+ * Serve the app's dashboard widgets at GET /api/widgets.
+ *
+ * `list` is called per request with the Hono context. Throwing (or returning
+ * an invalid widget) yields a 500 naming the problem, so a broken widget is
+ * loud in development; the dashboard shows that app's tiles as unavailable
+ * and keeps rendering everything else.
+ */
+declare function widgets<E extends Env>(app: OpenAPIHono<E>, list: (c: Context<E>) => Widget[] | Promise<Widget[]>): void;
+
 /**
  * @clawnify/app — the standard Clawnify app skeleton in one call.
  *
@@ -159,4 +349,4 @@ interface CreateAppOptions extends DiscoveryOptions {
  */
 declare function createApp<E extends Env = Env>(opts?: CreateAppOptions): OpenAPIHono<E>;
 
-export { type AppUser, type Caller, type CreateAppOptions, type RequestLike, caller, createApp, orgId, user };
+export { type AppUser, type Caller, type CreateAppOptions, type RequestLike, WIDGET_LIMITS, type Widget, WidgetSchema, caller, createApp, orgId, user, widgets };

package/dist/index.js

@@ -3,8 +3,8 @@ import { OpenAPIHono, mountDiscovery } from "@clawnify/routes";
 import { initDB } from "@clawnify/db";
 import {
   OpenAPIHono as OpenAPIHono2,
-  createRoute,
-  z,
+  createRoute as createRoute2,
+  z as z2,
   mountDiscovery as mountDiscovery2,
   describeRoutes,
   PageQuery,
@@ -58,6 +58,82 @@ function user(c) {
   };
 }
 
+// src/widgets.ts
+import { createRoute, z } from "@clawnify/routes";
+var WIDGET_LIMITS = {
+  widgets: 6,
+  seriesPoints: 90,
+  breakdownItems: 12,
+  listItems: 5,
+  text: 80
+};
+var text = z.string().min(1).max(WIDGET_LIMITS.text);
+var at = z.string().max(512).regex(/^\/(?!\/)/, "must be an in-app path starting with a single /");
+var format = z.enum(["number", "currency", "percent"]).optional();
+var currency = z.string().regex(/^[A-Z]{3}$/).optional();
+var base = {
+  /** Stable id, unique within the app: lowercase letters, digits, dashes. */
+  key: z.string().regex(/^[a-z0-9][a-z0-9-]{0,39}$/),
+  title: text,
+  at: at.optional()
+};
+var WidgetSchema = z.discriminatedUnion("kind", [
+  z.object({
+    ...base,
+    kind: z.literal("metric"),
+    value: z.number().finite(),
+    format,
+    currency
+  }),
+  z.object({
+    ...base,
+    kind: z.literal("series"),
+    /** Oldest first. `x` is an ISO date or a short label. */
+    points: z.array(z.object({ x: text, y: z.number().finite() })).max(WIDGET_LIMITS.seriesPoints),
+    format,
+    currency
+  }),
+  z.object({
+    ...base,
+    kind: z.literal("breakdown"),
+    /** Drawn as ranked horizontal bars in one hue, largest first. */
+    items: z.array(z.object({ label: text, value: z.number().finite() })).max(WIDGET_LIMITS.breakdownItems),
+    format,
+    currency
+  }),
+  z.object({
+    ...base,
+    kind: z.literal("list"),
+    items: z.array(z.object({ label: text, meta: text.optional(), at: at.optional() })).max(WIDGET_LIMITS.listItems)
+  })
+]);
+var WidgetsResponse = z.object({
+  widgets: z.array(WidgetSchema).max(WIDGET_LIMITS.widgets)
+});
+var route = createRoute({
+  method: "get",
+  path: "/api/widgets",
+  summary: "Dashboard widgets: a bounded summary of this app for the current caller",
+  responses: {
+    200: {
+      description: "The app's widgets with their current data",
+      content: { "application/json": { schema: WidgetsResponse } }
+    }
+  }
+});
+function widgets(app, list) {
+  app.openapi(route, async (c) => {
+    const parsed = WidgetsResponse.safeParse({ widgets: await list(c) });
+    if (!parsed.success) {
+      return c.json(
+        { error: "invalid widgets", issues: parsed.error.issues.slice(0, 5) },
+        500
+      );
+    }
+    return c.json(parsed.data, 200);
+  });
+}
+
 // src/index.ts
 function createApp(opts = {}) {
   const app = new OpenAPIHono();
@@ -77,15 +153,18 @@ export {
   MAX_PAGE_LIMIT,
   OpenAPIHono2 as OpenAPIHono,
   PageQuery,
+  WIDGET_LIMITS,
+  WidgetSchema,
   caller,
   createApp,
-  createRoute,
+  createRoute2 as createRoute,
   describeRoutes,
   mountDiscovery2 as mountDiscovery,
   orgId,
   pageParams,
   pagedResponse,
   user,
-  z
+  widgets,
+  z2 as z
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/identity.ts"],"sourcesContent":["/**\n * @clawnify/app — the standard Clawnify app skeleton in one call.\n *\n * `createApp(opts)` returns a fully-wired OpenAPIHono with every always-required,\n * cross-cutting concern pre-baked, so an app's server file is just imports +\n * routes + `export default app`:\n *\n *   import { createApp, createRoute, z } from \"@clawnify/app\";\n *   const app = createApp<Env>({ title: \"CRM App\", version: \"1.0.0\" });\n *   app.openapi(listContacts, handler);\n *   export default app;\n *\n * What it bakes in — the boilerplate every app used to re-write in its server\n * file, and could forget:\n *   • OpenAPIHono construction (typed to your Env).\n *   • Database init — `initDB(c.env)` middleware on every request. @clawnify/db\n *     auto-detects the D1 binding (production WfP) or the Storage capability\n *     binding (Dynamic Workers preview), so handlers can query immediately.\n *   • API discovery — `mountDiscovery` serves GET /api/openapi.json (the machine\n *     contract) and GET /llms.txt (the lean agent index), generated from the\n *     live routes so they can't drift.\n *   • Identity — `user(c)` / `orgId(c)` / `caller(c)` read the platform-injected\n *     `X-Clawnify-*` headers, so an app never hand-parses them (see identity.ts).\n *\n * The point: a new always-required concern is added HERE once and every app\n * inherits it on the next rebuild — instead of a line each agent must remember\n * to write (and a build gate to enforce) in every app.\n */\nimport { OpenAPIHono, mountDiscovery, type DiscoveryOptions } from \"@clawnify/routes\";\nimport { initDB } from \"@clawnify/db\";\nimport type { Env } from \"hono\";\n\n// One routing import for app authors: everything needed to declare routes and\n// build the app comes from @clawnify/app. These are re-exports of the same\n// @hono/zod-openapi primitives @clawnify/routes exposes — never reimplemented —\n// so route creation, discovery, and construction all live behind one import.\nexport {\n  OpenAPIHono,\n  createRoute,\n  z,\n  mountDiscovery,\n  describeRoutes,\n  PageQuery,\n  pageParams,\n  pagedResponse,\n  DEFAULT_PAGE_LIMIT,\n  MAX_PAGE_LIMIT,\n} from \"@clawnify/routes\";\nexport type { DiscoveryOptions, DiscoverableApp, PageParams } from \"@clawnify/routes\";\n\n// Identity of the caller, read from the platform-injected headers. Apps never\n// authenticate anyone themselves — see identity.ts.\nexport { user, orgId, caller } from \"./identity\";\nexport type { AppUser, Caller, RequestLike } from \"./identity\";\n\nexport interface CreateAppOptions extends DiscoveryOptions {\n  /**\n   * Wire the per-request database middleware (`initDB(c.env)` on `*`). Default\n   * true — every Clawnify app has a D1 / Storage binding. Set false only for the\n   * rare app with no database.\n   */\n  db?: boolean;\n  /**\n   * Mount GET /api/openapi.json + GET /llms.txt discovery. Default true. Set\n   * false only if the app deliberately opts out of API discovery.\n   */\n  discovery?: boolean;\n}\n\n/**\n * Create a fully-wired Clawnify app.\n *\n * `E` is your Hono env — `{ Bindings: { DB: D1Database, ... } }` — pass it so\n * route handlers get a typed `c.env`. Everything after this call is your app's\n * own routes and business logic:\n *\n *   const app = createApp<Env>({ title: \"CRM App\", version: \"1.0.0\" });\n *   app.openapi(route, handler);\n *   export default app;\n */\nexport function createApp<E extends Env = Env>(\n  opts: CreateAppOptions = {},\n): OpenAPIHono<E> {\n  const app = new OpenAPIHono<E>();\n\n  if (opts.db !== false) {\n    app.use(\"*\", async (c, next) => {\n      // @clawnify/db reads the DB (D1) or Storage binding off the env and caches\n      // the Drizzle client for this request. Safe to call on every request.\n      initDB(c.env as unknown as Parameters<typeof initDB>[0]);\n      await next();\n    });\n  }\n\n  if (opts.discovery !== false) {\n    mountDiscovery(app, opts);\n  }\n\n  return app;\n}\n","/**\n * Identity — who is calling this app.\n *\n * The platform authenticates the caller at the perimeter (app-router, the\n * app-supervisor preview tier, or the /v1/apps/:id/proxy API) and injects a\n * *fresh* set of `X-Clawnify-*` headers. Any client-supplied `X-Clawnify-*` is\n * stripped first, so these headers cannot be spoofed and an app can trust them\n * directly.\n *\n * Apps therefore never authenticate anyone themselves: never read\n * `Authorization`, never parse a cookie, never verify a JWT. Read these\n * helpers instead.\n *\n *   import { user, orgId, caller } from \"@clawnify/app\";\n *\n *   app.openapi(route, (c) => {\n *     const u = user(c);                       // null when the caller isn't a person\n *     return c.json({ hello: u?.name ?? \"there\", org: orgId(c) });\n *   });\n */\n\n/**\n * Minimal shape this module needs — Hono's `Context` satisfies it structurally,\n * so `user(c)` works in any handler regardless of the app's Env generics.\n */\nexport interface RequestLike {\n  req: { header(name: string): string | undefined };\n}\n\n/**\n * What kind of principal is calling.\n *\n * Only `user`, `api` and `agent` carry a human identity; the rest are machine\n * or anonymous callers, for which `user()` returns null.\n *\n * | Value           | Who                                                        |\n * |-----------------|------------------------------------------------------------|\n * | `user`          | a signed-in person in a browser                             |\n * | `api`           | a person via the REST API / CLI / MCP (their own token)     |\n * | `agent`         | the org's OpenClaw agent calling the app's API              |\n * | `agent-browser` | the agent driving a real browser on its VPS                 |\n * | `public`        | an unauthenticated visitor on a declared public route       |\n * | `bypass`        | platform-internal fetch (build/screenshot)                  |\n * | `system`        | the build pipeline                                          |\n * | `app`           | another app in the same org (or a headless org-token caller)|\n */\nexport type Caller =\n  | \"user\"\n  | \"api\"\n  | \"agent\"\n  | \"agent-browser\"\n  | \"public\"\n  | \"bypass\"\n  | \"system\"\n  | \"app\";\n\nconst CALLERS = new Set<Caller>([\n  \"user\",\n  \"api\",\n  \"agent\",\n  \"agent-browser\",\n  \"public\",\n  \"bypass\",\n  \"system\",\n  \"app\",\n]);\n\n/** The signed-in person behind a request. */\nexport interface AppUser {\n  /** Supabase user id — the stable key to store on rows (`created_by`). */\n  id: string;\n  email: string | null;\n  /** Display name, e.g. \"Ada Lovelace\". Null if the account has no name set. */\n  name: string | null;\n  /** Profile picture URL (https). Null if the account has no avatar. */\n  avatarUrl: string | null;\n  /**\n   * Best-effort split of `name` — a HEURISTIC, not platform data.\n   *\n   * The platform stores one `full_name`; there is no real given/family split\n   * behind it. This takes the first whitespace-separated token, which is wrong\n   * for many names (mononyms, multi-word given names, family-name-first\n   * cultures). Use it for a friendly greeting (\"Hi, Ada\"), never as a stored\n   * field or a record of someone's legal name — persist `name` instead.\n   */\n  firstName: string | null;\n  /** Remainder of `name` after the first token. Same heuristic caveat. */\n  lastName: string | null;\n}\n\nfunction read(c: RequestLike, name: string): string | null {\n  const v = c.req.header(name);\n  if (v === undefined) return null;\n  const trimmed = v.trim();\n  return trimmed === \"\" ? null : trimmed;\n}\n\nfunction splitName(name: string | null): Pick<AppUser, \"firstName\" | \"lastName\"> {\n  if (!name) return { firstName: null, lastName: null };\n  const parts = name.split(/\\s+/).filter(Boolean);\n  if (parts.length === 0) return { firstName: null, lastName: null };\n  if (parts.length === 1) return { firstName: parts[0], lastName: null };\n  return { firstName: parts[0], lastName: parts.slice(1).join(\" \") };\n}\n\n/**\n * What kind of principal is calling.\n *\n * Defaults to `\"public\"` — the least-privileged value — when the header is\n * missing or unrecognised, which happens when the app is reached outside the\n * platform perimeter (local `pnpm dev`). Gate privileged behaviour on an\n * explicit check (`caller(c) === \"user\"`), never on \"not public\".\n */\nexport function caller(c: RequestLike): Caller {\n  const v = read(c, \"X-Clawnify-Caller\");\n  return v && CALLERS.has(v as Caller) ? (v as Caller) : \"public\";\n}\n\n/**\n * The organization this request belongs to — the tenant key. Scope every query\n * by it.\n *\n * Present for `user`, `api`, `agent` and `app` callers. **Null** for\n * `agent-browser`, `public` and `bypass` — those reach the app through the\n * perimeter without an org-scoped identity — and null outside the platform.\n *\n * Treat null as \"no access\", never as a wildcard: a query filtered on a null\n * org must return nothing, not everything.\n */\nexport function orgId(c: RequestLike): string | null {\n  return read(c, \"X-Clawnify-Org-Id\");\n}\n\n/**\n * The person behind this request, or `null` when the caller isn't one.\n *\n * Null for `agent-browser`, `public`, `bypass`, `system` and `app` — five of\n * the eight caller types — so always handle the null case rather than assuming\n * a user is present:\n *\n *   const u = user(c);\n *   const label = u ? u.name ?? u.email : \"Automated\";\n */\nexport function user(c: RequestLike): AppUser | null {\n  const id = read(c, \"X-Clawnify-User-Id\");\n  if (!id) return null;\n\n  const name = read(c, \"X-Clawnify-User-Name\");\n  return {\n    id,\n    email: read(c, \"X-Clawnify-User-Email\"),\n    name,\n    avatarUrl: read(c, \"X-Clawnify-User-Avatar\"),\n    ...splitName(name),\n  };\n}\n"],"mappings":";AA4BA,SAAS,aAAa,sBAA6C;AACnE,SAAS,cAAc;AAOvB;AAAA,EACE,eAAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACSP,IAAM,UAAU,oBAAI,IAAY;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAyBD,SAAS,KAAK,GAAgB,MAA6B;AACzD,QAAM,IAAI,EAAE,IAAI,OAAO,IAAI;AAC3B,MAAI,MAAM,OAAW,QAAO;AAC5B,QAAM,UAAU,EAAE,KAAK;AACvB,SAAO,YAAY,KAAK,OAAO;AACjC;AAEA,SAAS,UAAU,MAA8D;AAC/E,MAAI,CAAC,KAAM,QAAO,EAAE,WAAW,MAAM,UAAU,KAAK;AACpD,QAAM,QAAQ,KAAK,MAAM,KAAK,EAAE,OAAO,OAAO;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,WAAW,MAAM,UAAU,KAAK;AACjE,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,WAAW,MAAM,CAAC,GAAG,UAAU,KAAK;AACrE,SAAO,EAAE,WAAW,MAAM,CAAC,GAAG,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE;AACnE;AAUO,SAAS,OAAO,GAAwB;AAC7C,QAAM,IAAI,KAAK,GAAG,mBAAmB;AACrC,SAAO,KAAK,QAAQ,IAAI,CAAW,IAAK,IAAe;AACzD;AAaO,SAAS,MAAM,GAA+B;AACnD,SAAO,KAAK,GAAG,mBAAmB;AACpC;AAYO,SAAS,KAAK,GAAgC;AACnD,QAAM,KAAK,KAAK,GAAG,oBAAoB;AACvC,MAAI,CAAC,GAAI,QAAO;AAEhB,QAAM,OAAO,KAAK,GAAG,sBAAsB;AAC3C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,KAAK,GAAG,uBAAuB;AAAA,IACtC;AAAA,IACA,WAAW,KAAK,GAAG,wBAAwB;AAAA,IAC3C,GAAG,UAAU,IAAI;AAAA,EACnB;AACF;;;AD3EO,SAAS,UACd,OAAyB,CAAC,GACV;AAChB,QAAM,MAAM,IAAI,YAAe;AAE/B,MAAI,KAAK,OAAO,OAAO;AACrB,QAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAG9B,aAAO,EAAE,GAA8C;AACvD,YAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,MAAI,KAAK,cAAc,OAAO;AAC5B,mBAAe,KAAK,IAAI;AAAA,EAC1B;AAEA,SAAO;AACT;","names":["OpenAPIHono","mountDiscovery"]}
+{"version":3,"sources":["../src/index.ts","../src/identity.ts","../src/widgets.ts"],"sourcesContent":["/**\n * @clawnify/app — the standard Clawnify app skeleton in one call.\n *\n * `createApp(opts)` returns a fully-wired OpenAPIHono with every always-required,\n * cross-cutting concern pre-baked, so an app's server file is just imports +\n * routes + `export default app`:\n *\n *   import { createApp, createRoute, z } from \"@clawnify/app\";\n *   const app = createApp<Env>({ title: \"CRM App\", version: \"1.0.0\" });\n *   app.openapi(listContacts, handler);\n *   export default app;\n *\n * What it bakes in — the boilerplate every app used to re-write in its server\n * file, and could forget:\n *   • OpenAPIHono construction (typed to your Env).\n *   • Database init — `initDB(c.env)` middleware on every request. @clawnify/db\n *     auto-detects the D1 binding (production WfP) or the Storage capability\n *     binding (Dynamic Workers preview), so handlers can query immediately.\n *   • API discovery — `mountDiscovery` serves GET /api/openapi.json (the machine\n *     contract) and GET /llms.txt (the lean agent index), generated from the\n *     live routes so they can't drift.\n *   • Identity — `user(c)` / `orgId(c)` / `caller(c)` read the platform-injected\n *     `X-Clawnify-*` headers, so an app never hand-parses them (see identity.ts).\n *\n * The point: a new always-required concern is added HERE once and every app\n * inherits it on the next rebuild — instead of a line each agent must remember\n * to write (and a build gate to enforce) in every app.\n */\nimport { OpenAPIHono, mountDiscovery, type DiscoveryOptions } from \"@clawnify/routes\";\nimport { initDB } from \"@clawnify/db\";\nimport type { Env } from \"hono\";\n\n// One routing import for app authors: everything needed to declare routes and\n// build the app comes from @clawnify/app. These are re-exports of the same\n// @hono/zod-openapi primitives @clawnify/routes exposes — never reimplemented —\n// so route creation, discovery, and construction all live behind one import.\nexport {\n  OpenAPIHono,\n  createRoute,\n  z,\n  mountDiscovery,\n  describeRoutes,\n  PageQuery,\n  pageParams,\n  pagedResponse,\n  DEFAULT_PAGE_LIMIT,\n  MAX_PAGE_LIMIT,\n} from \"@clawnify/routes\";\nexport type { DiscoveryOptions, DiscoverableApp, PageParams } from \"@clawnify/routes\";\n\n// Identity of the caller, read from the platform-injected headers. Apps never\n// authenticate anyone themselves — see identity.ts.\nexport { user, orgId, caller } from \"./identity\";\nexport type { AppUser, Caller, RequestLike } from \"./identity\";\n\n// Dashboard widgets: standard tiles the dashboard draws from data the app\n// serves at GET /api/widgets — see widgets.ts.\nexport { widgets, WidgetSchema, WIDGET_LIMITS } from \"./widgets\";\nexport type { Widget } from \"./widgets\";\n\nexport interface CreateAppOptions extends DiscoveryOptions {\n  /**\n   * Wire the per-request database middleware (`initDB(c.env)` on `*`). Default\n   * true — every Clawnify app has a D1 / Storage binding. Set false only for the\n   * rare app with no database.\n   */\n  db?: boolean;\n  /**\n   * Mount GET /api/openapi.json + GET /llms.txt discovery. Default true. Set\n   * false only if the app deliberately opts out of API discovery.\n   */\n  discovery?: boolean;\n}\n\n/**\n * Create a fully-wired Clawnify app.\n *\n * `E` is your Hono env — `{ Bindings: { DB: D1Database, ... } }` — pass it so\n * route handlers get a typed `c.env`. Everything after this call is your app's\n * own routes and business logic:\n *\n *   const app = createApp<Env>({ title: \"CRM App\", version: \"1.0.0\" });\n *   app.openapi(route, handler);\n *   export default app;\n */\nexport function createApp<E extends Env = Env>(\n  opts: CreateAppOptions = {},\n): OpenAPIHono<E> {\n  const app = new OpenAPIHono<E>();\n\n  if (opts.db !== false) {\n    app.use(\"*\", async (c, next) => {\n      // @clawnify/db reads the DB (D1) or Storage binding off the env and caches\n      // the Drizzle client for this request. Safe to call on every request.\n      initDB(c.env as unknown as Parameters<typeof initDB>[0]);\n      await next();\n    });\n  }\n\n  if (opts.discovery !== false) {\n    mountDiscovery(app, opts);\n  }\n\n  return app;\n}\n","/**\n * Identity — who is calling this app.\n *\n * The platform authenticates the caller at the perimeter (app-router, the\n * app-supervisor preview tier, or the /v1/apps/:id/proxy API) and injects a\n * *fresh* set of `X-Clawnify-*` headers. Any client-supplied `X-Clawnify-*` is\n * stripped first, so these headers cannot be spoofed and an app can trust them\n * directly.\n *\n * Apps therefore never authenticate anyone themselves: never read\n * `Authorization`, never parse a cookie, never verify a JWT. Read these\n * helpers instead.\n *\n *   import { user, orgId, caller } from \"@clawnify/app\";\n *\n *   app.openapi(route, (c) => {\n *     const u = user(c);                       // null when the caller isn't a person\n *     return c.json({ hello: u?.name ?? \"there\", org: orgId(c) });\n *   });\n */\n\n/**\n * Minimal shape this module needs — Hono's `Context` satisfies it structurally,\n * so `user(c)` works in any handler regardless of the app's Env generics.\n */\nexport interface RequestLike {\n  req: { header(name: string): string | undefined };\n}\n\n/**\n * What kind of principal is calling.\n *\n * Only `user`, `api` and `agent` carry a human identity; the rest are machine\n * or anonymous callers, for which `user()` returns null.\n *\n * | Value           | Who                                                        |\n * |-----------------|------------------------------------------------------------|\n * | `user`          | a signed-in person in a browser                             |\n * | `api`           | a person via the REST API / CLI / MCP (their own token)     |\n * | `agent`         | the org's OpenClaw agent calling the app's API              |\n * | `agent-browser` | the agent driving a real browser on its VPS                 |\n * | `public`        | an unauthenticated visitor on a declared public route       |\n * | `bypass`        | platform-internal fetch (build/screenshot)                  |\n * | `system`        | the build pipeline                                          |\n * | `app`           | another app in the same org (or a headless org-token caller)|\n */\nexport type Caller =\n  | \"user\"\n  | \"api\"\n  | \"agent\"\n  | \"agent-browser\"\n  | \"public\"\n  | \"bypass\"\n  | \"system\"\n  | \"app\";\n\nconst CALLERS = new Set<Caller>([\n  \"user\",\n  \"api\",\n  \"agent\",\n  \"agent-browser\",\n  \"public\",\n  \"bypass\",\n  \"system\",\n  \"app\",\n]);\n\n/** The signed-in person behind a request. */\nexport interface AppUser {\n  /** Supabase user id — the stable key to store on rows (`created_by`). */\n  id: string;\n  email: string | null;\n  /** Display name, e.g. \"Ada Lovelace\". Null if the account has no name set. */\n  name: string | null;\n  /** Profile picture URL (https). Null if the account has no avatar. */\n  avatarUrl: string | null;\n  /**\n   * Best-effort split of `name` — a HEURISTIC, not platform data.\n   *\n   * The platform stores one `full_name`; there is no real given/family split\n   * behind it. This takes the first whitespace-separated token, which is wrong\n   * for many names (mononyms, multi-word given names, family-name-first\n   * cultures). Use it for a friendly greeting (\"Hi, Ada\"), never as a stored\n   * field or a record of someone's legal name — persist `name` instead.\n   */\n  firstName: string | null;\n  /** Remainder of `name` after the first token. Same heuristic caveat. */\n  lastName: string | null;\n}\n\nfunction read(c: RequestLike, name: string): string | null {\n  const v = c.req.header(name);\n  if (v === undefined) return null;\n  const trimmed = v.trim();\n  return trimmed === \"\" ? null : trimmed;\n}\n\nfunction splitName(name: string | null): Pick<AppUser, \"firstName\" | \"lastName\"> {\n  if (!name) return { firstName: null, lastName: null };\n  const parts = name.split(/\\s+/).filter(Boolean);\n  if (parts.length === 0) return { firstName: null, lastName: null };\n  if (parts.length === 1) return { firstName: parts[0], lastName: null };\n  return { firstName: parts[0], lastName: parts.slice(1).join(\" \") };\n}\n\n/**\n * What kind of principal is calling.\n *\n * Defaults to `\"public\"` — the least-privileged value — when the header is\n * missing or unrecognised, which happens when the app is reached outside the\n * platform perimeter (local `pnpm dev`). Gate privileged behaviour on an\n * explicit check (`caller(c) === \"user\"`), never on \"not public\".\n */\nexport function caller(c: RequestLike): Caller {\n  const v = read(c, \"X-Clawnify-Caller\");\n  return v && CALLERS.has(v as Caller) ? (v as Caller) : \"public\";\n}\n\n/**\n * The organization this request belongs to — the tenant key. Scope every query\n * by it.\n *\n * Present for `user`, `api`, `agent` and `app` callers. **Null** for\n * `agent-browser`, `public` and `bypass` — those reach the app through the\n * perimeter without an org-scoped identity — and null outside the platform.\n *\n * Treat null as \"no access\", never as a wildcard: a query filtered on a null\n * org must return nothing, not everything.\n */\nexport function orgId(c: RequestLike): string | null {\n  return read(c, \"X-Clawnify-Org-Id\");\n}\n\n/**\n * The person behind this request, or `null` when the caller isn't one.\n *\n * Null for `agent-browser`, `public`, `bypass`, `system` and `app` — five of\n * the eight caller types — so always handle the null case rather than assuming\n * a user is present:\n *\n *   const u = user(c);\n *   const label = u ? u.name ?? u.email : \"Automated\";\n */\nexport function user(c: RequestLike): AppUser | null {\n  const id = read(c, \"X-Clawnify-User-Id\");\n  if (!id) return null;\n\n  const name = read(c, \"X-Clawnify-User-Name\");\n  return {\n    id,\n    email: read(c, \"X-Clawnify-User-Email\"),\n    name,\n    avatarUrl: read(c, \"X-Clawnify-User-Avatar\"),\n    ...splitName(name),\n  };\n}\n","/**\n * Dashboard widgets: glanceable tiles an app offers, drawn by the Clawnify\n * dashboard while the app itself is closed.\n *\n * The widget kinds are standard and the dashboard renders them with its own\n * components. An app supplies DATA only — no markup, no CSS, no chart code —\n * so every widget looks native and no app can break the home page.\n *\n *   import { createApp, widgets, orgId } from \"@clawnify/app\";\n *   const app = createApp<Env>({ title: \"CRM\" });\n *   widgets(app, async (c) => [\n *     { key: \"deals-this-month\", kind: \"metric\", title: \"Deals created this month\",\n *       value: await countDealsThisMonth(c), at: \"/deals?created=this-month\" },\n *   ]);\n *\n * Served at GET /api/widgets and listed in /api/openapi.json, so an agent can\n * read the same summary a person sees. The handler runs with the caller's\n * identity (`user(c)` / `orgId(c)`), so return only what that caller may see.\n *\n * The dashboard re-validates everything it receives (apps/api\n * services/app-widgets.ts is the trust boundary); the schema here exists so an\n * author gets a clear error at their own desk instead of a silently dropped\n * tile. Keep the two in step: kinds, fields and caps.\n */\nimport { createRoute, z, type OpenAPIHono } from \"@clawnify/routes\";\nimport type { Context, Env } from \"hono\";\n\nexport const WIDGET_LIMITS = {\n  widgets: 6,\n  seriesPoints: 90,\n  breakdownItems: 12,\n  listItems: 5,\n  text: 80,\n} as const;\n\nconst text = z.string().min(1).max(WIDGET_LIMITS.text);\n// An in-app path. The dashboard opens the app there (its `?at=` deep link).\nconst at = z\n  .string()\n  .max(512)\n  .regex(/^\\/(?!\\/)/, \"must be an in-app path starting with a single /\");\n// \"percent\" takes a fraction: 0.42 renders as 42%.\nconst format = z.enum([\"number\", \"currency\", \"percent\"]).optional();\n// ISO 4217, only meaningful with format \"currency\".\nconst currency = z.string().regex(/^[A-Z]{3}$/).optional();\n\nconst base = {\n  /** Stable id, unique within the app: lowercase letters, digits, dashes. */\n  key: z.string().regex(/^[a-z0-9][a-z0-9-]{0,39}$/),\n  title: text,\n  at: at.optional(),\n};\n\nexport const WidgetSchema = z.discriminatedUnion(\"kind\", [\n  z.object({\n    ...base,\n    kind: z.literal(\"metric\"),\n    value: z.number().finite(),\n    format,\n    currency,\n  }),\n  z.object({\n    ...base,\n    kind: z.literal(\"series\"),\n    /** Oldest first. `x` is an ISO date or a short label. */\n    points: z\n      .array(z.object({ x: text, y: z.number().finite() }))\n      .max(WIDGET_LIMITS.seriesPoints),\n    format,\n    currency,\n  }),\n  z.object({\n    ...base,\n    kind: z.literal(\"breakdown\"),\n    /** Drawn as ranked horizontal bars in one hue, largest first. */\n    items: z\n      .array(z.object({ label: text, value: z.number().finite() }))\n      .max(WIDGET_LIMITS.breakdownItems),\n    format,\n    currency,\n  }),\n  z.object({\n    ...base,\n    kind: z.literal(\"list\"),\n    items: z\n      .array(z.object({ label: text, meta: text.optional(), at: at.optional() }))\n      .max(WIDGET_LIMITS.listItems),\n  }),\n]);\n\nexport type Widget = z.infer<typeof WidgetSchema>;\n\nconst WidgetsResponse = z.object({\n  widgets: z.array(WidgetSchema).max(WIDGET_LIMITS.widgets),\n});\n\nconst route = createRoute({\n  method: \"get\",\n  path: \"/api/widgets\",\n  summary: \"Dashboard widgets: a bounded summary of this app for the current caller\",\n  responses: {\n    200: {\n      description: \"The app's widgets with their current data\",\n      content: { \"application/json\": { schema: WidgetsResponse } },\n    },\n  },\n});\n\n/**\n * Serve the app's dashboard widgets at GET /api/widgets.\n *\n * `list` is called per request with the Hono context. Throwing (or returning\n * an invalid widget) yields a 500 naming the problem, so a broken widget is\n * loud in development; the dashboard shows that app's tiles as unavailable\n * and keeps rendering everything else.\n */\nexport function widgets<E extends Env>(\n  app: OpenAPIHono<E>,\n  list: (c: Context<E>) => Widget[] | Promise<Widget[]>,\n): void {\n  app.openapi(route, async (c) => {\n    const parsed = WidgetsResponse.safeParse({ widgets: await list(c as unknown as Context<E>) });\n    if (!parsed.success) {\n      return c.json(\n        { error: \"invalid widgets\", issues: parsed.error.issues.slice(0, 5) },\n        500,\n      ) as never;\n    }\n    return c.json(parsed.data, 200);\n  });\n}\n"],"mappings":";AA4BA,SAAS,aAAa,sBAA6C;AACnE,SAAS,cAAc;AAOvB;AAAA,EACE,eAAAA;AAAA,EACA,eAAAC;AAAA,EACA,KAAAC;AAAA,EACA,kBAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;;;ACSP,IAAM,UAAU,oBAAI,IAAY;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAyBD,SAAS,KAAK,GAAgB,MAA6B;AACzD,QAAM,IAAI,EAAE,IAAI,OAAO,IAAI;AAC3B,MAAI,MAAM,OAAW,QAAO;AAC5B,QAAM,UAAU,EAAE,KAAK;AACvB,SAAO,YAAY,KAAK,OAAO;AACjC;AAEA,SAAS,UAAU,MAA8D;AAC/E,MAAI,CAAC,KAAM,QAAO,EAAE,WAAW,MAAM,UAAU,KAAK;AACpD,QAAM,QAAQ,KAAK,MAAM,KAAK,EAAE,OAAO,OAAO;AAC9C,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,WAAW,MAAM,UAAU,KAAK;AACjE,MAAI,MAAM,WAAW,EAAG,QAAO,EAAE,WAAW,MAAM,CAAC,GAAG,UAAU,KAAK;AACrE,SAAO,EAAE,WAAW,MAAM,CAAC,GAAG,UAAU,MAAM,MAAM,CAAC,EAAE,KAAK,GAAG,EAAE;AACnE;AAUO,SAAS,OAAO,GAAwB;AAC7C,QAAM,IAAI,KAAK,GAAG,mBAAmB;AACrC,SAAO,KAAK,QAAQ,IAAI,CAAW,IAAK,IAAe;AACzD;AAaO,SAAS,MAAM,GAA+B;AACnD,SAAO,KAAK,GAAG,mBAAmB;AACpC;AAYO,SAAS,KAAK,GAAgC;AACnD,QAAM,KAAK,KAAK,GAAG,oBAAoB;AACvC,MAAI,CAAC,GAAI,QAAO;AAEhB,QAAM,OAAO,KAAK,GAAG,sBAAsB;AAC3C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,KAAK,GAAG,uBAAuB;AAAA,IACtC;AAAA,IACA,WAAW,KAAK,GAAG,wBAAwB;AAAA,IAC3C,GAAG,UAAU,IAAI;AAAA,EACnB;AACF;;;ACnIA,SAAS,aAAa,SAA2B;AAG1C,IAAM,gBAAgB;AAAA,EAC3B,SAAS;AAAA,EACT,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,MAAM;AACR;AAEA,IAAM,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,cAAc,IAAI;AAErD,IAAM,KAAK,EACR,OAAO,EACP,IAAI,GAAG,EACP,MAAM,aAAa,iDAAiD;AAEvE,IAAM,SAAS,EAAE,KAAK,CAAC,UAAU,YAAY,SAAS,CAAC,EAAE,SAAS;AAElE,IAAM,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,EAAE,SAAS;AAEzD,IAAM,OAAO;AAAA;AAAA,EAEX,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B;AAAA,EACjD,OAAO;AAAA,EACP,IAAI,GAAG,SAAS;AAClB;AAEO,IAAM,eAAe,EAAE,mBAAmB,QAAQ;AAAA,EACvD,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,IACH,MAAM,EAAE,QAAQ,QAAQ;AAAA,IACxB,OAAO,EAAE,OAAO,EAAE,OAAO;AAAA,IACzB;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,IACH,MAAM,EAAE,QAAQ,QAAQ;AAAA;AAAA,IAExB,QAAQ,EACL,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EACnD,IAAI,cAAc,YAAY;AAAA,IACjC;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,IACH,MAAM,EAAE,QAAQ,WAAW;AAAA;AAAA,IAE3B,OAAO,EACJ,MAAM,EAAE,OAAO,EAAE,OAAO,MAAM,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAC3D,IAAI,cAAc,cAAc;AAAA,IACnC;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,GAAG;AAAA,IACH,MAAM,EAAE,QAAQ,MAAM;AAAA,IACtB,OAAO,EACJ,MAAM,EAAE,OAAO,EAAE,OAAO,MAAM,MAAM,KAAK,SAAS,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,EACzE,IAAI,cAAc,SAAS;AAAA,EAChC,CAAC;AACH,CAAC;AAID,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,SAAS,EAAE,MAAM,YAAY,EAAE,IAAI,cAAc,OAAO;AAC1D,CAAC;AAED,IAAM,QAAQ,YAAY;AAAA,EACxB,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,SAAS;AAAA,EACT,WAAW;AAAA,IACT,KAAK;AAAA,MACH,aAAa;AAAA,MACb,SAAS,EAAE,oBAAoB,EAAE,QAAQ,gBAAgB,EAAE;AAAA,IAC7D;AAAA,EACF;AACF,CAAC;AAUM,SAAS,QACd,KACA,MACM;AACN,MAAI,QAAQ,OAAO,OAAO,MAAM;AAC9B,UAAM,SAAS,gBAAgB,UAAU,EAAE,SAAS,MAAM,KAAK,CAA0B,EAAE,CAAC;AAC5F,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,EAAE;AAAA,QACP,EAAE,OAAO,mBAAmB,QAAQ,OAAO,MAAM,OAAO,MAAM,GAAG,CAAC,EAAE;AAAA,QACpE;AAAA,MACF;AAAA,IACF;AACA,WAAO,EAAE,KAAK,OAAO,MAAM,GAAG;AAAA,EAChC,CAAC;AACH;;;AF7CO,SAAS,UACd,OAAyB,CAAC,GACV;AAChB,QAAM,MAAM,IAAI,YAAe;AAE/B,MAAI,KAAK,OAAO,OAAO;AACrB,QAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAG9B,aAAO,EAAE,GAA8C;AACvD,YAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH;AAEA,MAAI,KAAK,cAAc,OAAO;AAC5B,mBAAe,KAAK,IAAI;AAAA,EAC1B;AAEA,SAAO;AACT;","names":["OpenAPIHono","createRoute","z","mountDiscovery"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clawnify/app",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "The standard Clawnify app skeleton in one call. createApp() returns a fully-wired OpenAPIHono with D1/Storage init + /api/openapi.json + /llms.txt discovery pre-baked, so an app is just imports + routes + export.",
   "type": "module",
   "main": "./dist/index.js",
@@ -23,8 +23,8 @@
     "dist"
   ],
   "dependencies": {
-    "@clawnify/db": "^0.4.2",
-    "@clawnify/routes": "^0.3.0"
+    "@clawnify/routes": "^0.3.0",
+    "@clawnify/db": "^0.4.2"
   },
   "peerDependencies": {
     "@hono/zod-openapi": ">=0.18 <1",