@flamingo-stack/openframe-frontend-core 0.0.285 → 0.0.286

package/dist/chunk-ZIODAAFY.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-ZIODAAFY.cjs","../src/components/shared/doc-search/format-relative-path.ts","../src/components/shared/doc-search/doc-search-result-row.tsx","../src/components/shared/doc-search/doc-search-bar.tsx","../src/components/shared/doc-search/map-doc-search-results.ts","../src/components/shared/doc-search/resolve-search-result-action.ts","../src/components/shared/doc-search/use-doc-search.ts","../src/components/shared/detail-page-skeleton.tsx","../src/components/shared/article-author-byline.tsx"],"names":["jsx","jsxs"],"mappings":"AAAA,6rBAAY;AACZ;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACA;ACzBO,SAAS,kBAAA,CAAmB,QAAA,EAA0B;AAC3D,EAAA,GAAA,CAAI,CAAC,QAAA,EAAU,OAAO,EAAA;AACtB,EAAA,MAAM,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA;AAExD,EAAA,MAAM,eAAA,EAAiB,QAAA,CAAS,OAAA,EAAS,EAAA,EAAI,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,CAAA,CAAE,EAAA,EAAI,QAAA;AACrE,EAAA,OAAO,cAAA,CACJ,GAAA,CAAI,CAAC,GAAA,EAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,CAAC,CAAA,CAAE,WAAA,CAAY,EAAA,EAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAM,GAAG,CAAC,CAAA,CAC1E,IAAA,CAAK,KAAK,CAAA;AACf;ADwBA;AACA;AEaQ,+CAAA;AAlBD,SAAS,kBAAA,CAAmB;AAAA,EACjC,MAAA;AAAA,EACA;AACF,CAAA,EAA4B;AAC1B,EAAA,MAAM,QAAA,kBAAW,MAAA,qBAAO,QAAA,6BAAU,eAAA,GAA2B,KAAA,CAAA;AAC7D,EAAA,MAAM,WAAA,kBAAc,MAAA,qBAAO,QAAA,6BAAU,aAAA,GAAyB,KAAA,CAAA;AAC9D,EAAA,MAAM,EAAE,IAAA,EAAM,UAAA,EAAY,KAAA,EAAO,UAAU,EAAA,EAAI,iDAAA;AAAkB,IAC/D,UAAA;AAAA,IACA,YAAA,EAAc;AAAA,EAChB,CAAC,CAAA;AACD,EAAA,MAAM,QAAA,kBAAU,MAAA,qBAAO,QAAA,6BAAU,SAAA;AAEjC,EAAA,uBACE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,wCAAA,EACb,QAAA,EAAA;AAAA,oBAAA,6BAAA;AAAA,MAAC,MAAA;AAAA,MAAA;AAAA,QACC,SAAA,EAAU,uCAAA;AAAA,QACV,KAAA,EAAO,SAAA;AAAA,QAEP,QAAA,kBAAA,6BAAA,UAAC,EAAA,EAAW,SAAA,EAAU,SAAA,CAAS;AAAA,MAAA;AAAA,IACjC,CAAA;AAAA,oBACA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,gBAAA,EACb,QAAA,EAAA;AAAA,sBAAA,6BAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAW,CAAA,uCAAA,EACT,cAAA,EAAgB,kBAAA,EAAoB,uBACtC,CAAA,CAAA;AAEwB,UAAA;AAAA,QAAA;AAC1B,MAAA;AAEiB,MAAA;AAInB,IAAA;AACF,EAAA;AAEJ;AFG2H;AACA;AGkBjH;AA5BmB;AAC3B,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACiB,EAAA;AACJ,EAAA;AACD,EAAA;AACZ,EAAA;AACoB;AAElBA,EAAAA;AAAC,IAAA;AAAA,IAAA;AACC,MAAA;AACO,MAAA;AACG,MAAA;AACV,MAAA;AACA,MAAA;AACA,MAAA;AAC8B,MAAA;AAC9B,MAAA;AACA,MAAA;AACA,MAAA;AAIwC,MAAA;AAA8B,IAAA;AAGxE,EAAA;AAEJ;AHS2H;AACA;AI3FxF;AACjC,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACD;AAE6C;AACrB,EAAA;AACL,EAAA;AACD,EAAA;AACU,EAAA;AACJ,EAAA;AACT,EAAA;AACM,EAAA;AACJ,EAAA;AACN,EAAA;AACF,EAAA;AACE,EAAA;AACZ;AAE6E;AACnB,EAAA;AAKnD,EAAA;AAC6B,EAAA;AAEV,EAAA;AACwC,IAAA;AACT,MAAA;AACrC,MAAA;AACwB,MAAA;AACF,MAAA;AACN,QAAA;AACuB,QAAA;AACrD,MAAA;AACK,IAAA;AAC0B,MAAA;AACjC,IAAA;AACF,EAAA;AAEiC,EAAA;AACN,EAAA;AACI,IAAA;AACa,MAAA;AACS,MAAA;AACpC,MAAA;AACY,QAAA;AACoD,QAAA;AAC7D,QAAA;AACR,QAAA;AACI,QAAA;AACc,UAAA;AACD,UAAA;AACH,UAAA;AACN,UAAA;AACH,UAAA;AACe,UAAA;AACd,YAAA;AACO,YAAA;AACT,YAAA;AACQ,YAAA;AACE,YAAA;AAChB,UAAA;AACJ,QAAA;AACD,MAAA;AACI,IAAA;AACa,MAAA;AAC6C,MAAA;AAClD,MAAA;AACH,QAAA;AACG,QAAA;AACiC,QAAA;AAClC,QAAA;AACA,QAAA;AACA,QAAA;AACO,UAAA;AAC8C,UAAA;AACH,UAAA;AAGrD,UAAA;AACkD,UAAA;AACZ,UAAA;AAC7C,QAAA;AACD,MAAA;AACH,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AJkF2H;AACA;AKpKrG;AACa,EAAA;AACR,EAAA;AACR,EAAA;AAKa,IAAA;AACE,IAAA;AACtB,MAAA;AACN,MAAA;AACS,MAAA;AACT,MAAA;AACe,MAAA;AAChB,IAAA;AAGkD,IAAA;AACrD,EAAA;AACmB,EAAA;AACK,EAAA;AACE,EAAA;AACe,EAAA;AAChC,IAAA;AACC,MAAA;AACE,MAAA;AACN,QAAA;AACqE,QAAA;AACvE,MAAA;AACF,IAAA;AACF,EAAA;AACiB,EAAA;AAC2B,IAAA;AAC5C,EAAA;AACsB,EAAA;AACxB;ALgK2H;AACA;AMtM1E;AA6CQ;AACjD,EAAA;AACJ,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACiB,IAAA;AACf,EAAA;AACuE,EAAA;AAElD,EAAA;AAIM,EAAA;AAEM,EAAA;AACoB,EAAA;AACP,EAAA;AACL,EAAA;AAE7B,EAAA;AAC2C,IAAA;AAC1C,MAAA;AACM,MAAA;AACnB,MAAA;AACF,IAAA;AAEgB,IAAA;AAEc,IAAA;AACV,MAAA;AACd,MAAA;AACiC,QAAA;AAC9B,UAAA;AACH,UAAA;AACO,UAAA;AACR,QAAA;AACkD,QAAA;AAEkB,QAAA;AACnD,QAAA;AAC2C,UAAA;AAC7D,QAAA;AAEiC,QAAA;AAE2B,QAAA;AACO,UAAA;AAChD,UAAA;AACnB,QAAA;AACc,MAAA;AAC0B,QAAA;AACxB,QAAA;AACD,UAAA;AACf,QAAA;AACA,MAAA;AACgB,QAAA;AACK,UAAA;AACrB,QAAA;AACF,MAAA;AACF,IAAA;AAEa,IAAA;AAEA,IAAA;AACC,MAAA;AACd,IAAA;AACsD,EAAA;AAKG,EAAA;AAGb,EAAA;AAEnB,EAAA;AAUpB,IAAA;AACY,MAAA;AACb,QAAA;AACA,QAAA;AACoB,wBAAA;AACtB,MAAA;AAYc,MAAA;AAEO,MAAA;AACO,QAAA;AAGkB,UAAA;AACxB,YAAA;AAEoD,YAAA;AAC1C,YAAA;AACX,cAAA;AACb,cAAA;AACA,cAAA;AACM,YAAA;AACR,YAAA;AACF,UAAA;AACiB,UAAA;AACC,YAAA;AACmC,YAAA;AACnD,YAAA;AACF,UAAA;AAOiB,UAAA;AAIX,UAAA;AAC4B,UAAA;AACY,UAAA;AAC9C,UAAA;AACF,QAAA;AACK,QAAA;AAIa,UAAA;AACmC,UAAA;AACnD,UAAA;AACG,QAAA;AAMc,UAAA;AACV,UAAA;AAC4D,YAAA;AACnE,UAAA;AACA,UAAA;AACG,QAAA;AAGc,UAAA;AACK,UAAA;AACtB,UAAA;AACG,QAAA;AACH,UAAA;AACJ,MAAA;AACF,IAAA;AAC6D,IAAA;AAC/D,EAAA;AAGgB,EAAA;AACG,IAAA;AACT,EAAA;AAEH,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACA,IAAA;AACkB,IAAA;AACpB,EAAA;AACF;AN0F2H;AACA;AO1UjH;AATyB;AACf,EAAA;AACC,EAAA;AACZ,EAAA;AACwB;AAIzB,EAAA;AACO,oBAAA;AAKL,oBAAA;AAA8C,sBAAA;AACA,sBAAA;AACA,sBAAA;AAChD,IAAA;AAGgE,oBAAA;AAGL,sBAAA;AACL,sBAAA;AAGtD,IAAA;AAKe,IAAA;AAQqD,IAAA;AAMhE,IAAA;AAA+C,sBAAA;AAE7C,sBAAA;AAAgD,wBAAA;AACA,wBAAA;AACD,wBAAA;AACjD,MAAA;AAEH,IAAA;AACH,EAAA;AAEa,EAAA;AAEfA,EAAAA;AAAC,IAAA;AAAA,IAAA;AACa,MAAA;AACF,MAAA;AAET,MAAA;AAAA,IAAA;AACH,EAAA;AAEJ;APyT2H;AACA;AQ9W5F;AAE/B;AACA;AAoGU;AA/DwC;AACQ,EAAA;AAClB,EAAA;AAKD,EAAA;AAC5B,IAAA;AACF,IAAA;AACC,IAAA;AACI,IAAA;AACX,EAAA;AACH;AAEoC;AAClC,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACO,EAAA;AACP,EAAA;AACA,EAAA;AAC2B;AAII,EAAA;AACX,EAAA;AAKc,EAAA;AACM,IAAA;AACA,IAAA;AACnB,IAAA;AAEjB,EAAA;AAKkD,EAAA;AACF,EAAA;AACb,EAAA;AACO,EAAA;AACY,EAAA;AAGxDC,EAAAA;AAAC,IAAA;AAAA,IAAA;AACY,MAAA;AACT,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AAGA,MAAA;AAEID,wBAAAA;AAAC,UAAA;AAAA,UAAA;AACuB,YAAA;AACjB,YAAA;AACE,YAAA;AACC,YAAA;AAC6E,YAAA;AAAA,UAAA;AAGvFA,QAAAA;AAAC,UAAA;AAAA,UAAA;AACY,YAAA;AACT,cAAA;AACA,cAAA;AACF,YAAA;AAEiE,YAAA;AAAA,UAAA;AAGvE,QAAA;AAIE,wBAAA;AACE,0BAAA;AAEK,4BAAA;AAQa,YAAA;AACgB,8BAAA;AAC7B,cAAA;AACH,YAAA;AAEJ,UAAA;AAGK,UAAA;AAIU,UAAA;AAQjB,QAAA;AAAA,MAAA;AAAA,IAAA;AACF,EAAA;AAEJ;ARkS2H;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-ZIODAAFY.cjs","sourcesContent":[null,"/**\n * Format a full document path as a breadcrumb trail.\n * Shows parent folders only (excludes the last segment / filename).\n *\n * @example\n *   formatRelativePath('openframe-oss-tenant/architecture/api-controllers.md')\n *   // → 'Openframe oss tenant / Architecture'\n */\nexport function formatRelativePath(fullPath: string): string {\n  if (!fullPath) return ''\n  const segments = fullPath.replace(/\\.md$/, '').split('/')\n  // Show only parent path (exclude the filename itself since the title already shows it)\n  const parentSegments = segments.length > 1 ? segments.slice(0, -1) : segments\n  return parentSegments\n    .map((seg) => seg.charAt(0).toUpperCase() + seg.slice(1).replace(/-/g, ' '))\n    .join(' / ')\n}\n","'use client'\n\n/**\n * Single row in the `<SearchInput>` dropdown — the standard layout\n * used by every doc-search-backed surface (company-hub data-room\n * search bar, onboarding-guide catalog search, …). Single source of\n * truth for the row appearance so search dropdowns are visually\n * identical everywhere.\n *\n * Resolves the source icon via the same `resolveSourceIcon()`\n * registry the inline chat-card refs use, so a row pointing at e.g.\n * an onboarding-guide surfaces the SAME `<GraduationCap>` glyph the\n * chat card surfaces — no cross-surface drift.\n */\n\nimport { resolveSourceIcon } from '../../chat/utils/source-row-cta'\nimport { formatRelativePath } from './format-relative-path'\n\n/**\n * Minimal result shape this row renders. Compatible with any\n * doc-search hook whose result type exposes `{ title?, path?,\n * metadata? }`. The two hub consumers (onboarding-guide catalog,\n * data-room sidebar) both satisfy this shape via their\n * `useDocSearch` hook result.\n */\nexport interface DocSearchResultRowEntry {\n  title?: string\n  path?: string\n  metadata?: Record<string, unknown>\n}\n\nexport interface DocSearchResultRowProps {\n  result: DocSearchResultRowEntry\n  isHighlighted: boolean\n}\n\nexport function DocSearchResultRow({\n  result,\n  isHighlighted,\n}: DocSearchResultRowProps) {\n  const docType = (result.metadata?.documentType as string) || undefined\n  const sourceRepo = (result.metadata?.sourceRepo as string) || undefined\n  const { Icon: SourceIcon, label: iconLabel } = resolveSourceIcon({\n    sourceRepo,\n    documentType: docType,\n  })\n  const isGroup = result.metadata?.isGroup as boolean | undefined\n\n  return (\n    <div className=\"flex items-center gap-3 w-full min-w-0\">\n      <span\n        className=\"flex-shrink-0 text-ods-text-secondary\"\n        title={iconLabel}\n      >\n        <SourceIcon className=\"size-4\" />\n      </span>\n      <div className=\"min-w-0 flex-1\">\n        <div\n          className={`text-sm font-medium leading-5 truncate ${\n            isHighlighted ? 'text-ods-accent' : 'text-ods-text-primary'\n          }`}\n        >\n          {result.title || result.path}\n        </div>\n        {!isGroup && result.path?.includes('/') && (\n          <div className=\"text-xs leading-4 text-ods-text-secondary truncate mt-0.5\">\n            {formatRelativePath(result.path)}\n          </div>\n        )}\n      </div>\n    </div>\n  )\n}\n","'use client'\n\n/**\n * `<DocSearchBar>` — the canonical RAG-search dropdown surface.\n *\n * Mounted by every doc-search consumer (data-room sidebar, onboarding-\n * guide catalog, and any future surface that needs typeahead against\n * `/api/docs/search`). Wraps `<SearchInput>` with the lib's standard\n * `<DocSearchResultRow>` so the dropdown looks identical everywhere.\n *\n * ## Why a presentation component, not a \"search bar that owns its\n *    own hook\"\n *\n * The data-fetching hook (`useDocSearch`) lives hub-side because it\n * depends on hub-only context (`useDocNavigation`, the rag-table-\n * config registry, the hub's `decideNewTab` helper). Moving the hook\n * would cascade ~5 more file migrations into the lib.\n *\n * Instead, the hook stays hub-side and callers pass its result into\n * this component as plain props. Both consumers shrink to ~5 lines.\n */\n\nimport type { ReactNode } from 'react'\nimport { SearchInput, type SearchResult } from '../../ui/search-input'\nimport { DocSearchResultRow } from './doc-search-result-row'\n\nexport interface DocSearchBarProps {\n  placeholder: string\n  query: string\n  onQueryChange: (value: string) => void\n  /** Hook-fetched results. Reuses the lib's `<SearchInput>` `SearchResult`\n   *  shape directly so callers don't translate. */\n  results: SearchResult[]\n  isLoading: boolean\n  /** Result selection handler. Mirrors `<SearchInput>` — the second\n   *  `modifiers` argument is preserved so cmd-click / shift-click on\n   *  a result row still forces new-tab behavior. Hub `useDocSearch`\n   *  reads these to short-circuit to `window.open()`. */\n  onResultSelect: (\n    result: SearchResult,\n    modifiers?: {\n      metaKey?: boolean\n      ctrlKey?: boolean\n      shiftKey?: boolean\n      altKey?: boolean\n      button?: number\n    },\n  ) => void\n  /** Lets the caller's hook force the dropdown open after a recent\n   *  internal action (e.g. result navigation). `undefined` falls back\n   *  to `<SearchInput>`'s built-in focus/hover heuristics. */\n  showDropdown?: boolean\n  /** Defaults to 2 — matches the existing data-room and onboarding-\n   *  guide consumers. Override only if a surface needs different\n   *  typeahead semantics. */\n  minQueryLength?: number\n  /** Defaults to 0 — both existing consumers debounce inside the\n   *  hook, not the input. */\n  debounceMs?: number\n  className?: string\n  /** Optional row-renderer override. Defaults to the lib's standard\n   *  `<DocSearchResultRow>` (source icon + title + path breadcrumb).\n   *  Override only when a surface needs custom row chrome. */\n  renderResult?: (result: SearchResult, isHighlighted: boolean) => ReactNode\n}\n\nexport function DocSearchBar({\n  placeholder,\n  query,\n  onQueryChange,\n  results,\n  isLoading,\n  onResultSelect,\n  showDropdown,\n  minQueryLength = 2,\n  debounceMs = 0,\n  className = 'w-full',\n  renderResult,\n}: DocSearchBarProps) {\n  return (\n    <SearchInput\n      placeholder={placeholder}\n      value={query}\n      onChange={onQueryChange}\n      results={results}\n      isLoading={isLoading}\n      onResultSelect={onResultSelect}\n      showDropdown={showDropdown || undefined}\n      debounceMs={debounceMs}\n      minQueryLength={minQueryLength}\n      className={className}\n      renderResult={\n        renderResult ??\n        ((result, isHighlighted) => (\n          <DocSearchResultRow result={result} isHighlighted={isHighlighted} />\n        ))\n      }\n    />\n  )\n}\n","/**\n * Map RAG `/api/docs/search` wire results into the `<DocSearchBar>`\n * dropdown's row shape, collapsing entity-table rows into grouped\n * results so the dropdown lists ONE \"Cap Table (12 records)\" row\n * instead of 12 individual rows.\n *\n * Pure transform — no telemetry, no navigation, no React deps. Lifted\n * from the hub's `hooks/use-docs.ts:mapDocSearchResults` (the hub's\n * `traceCompose` call was hub-only telemetry and is intentionally\n * dropped — callers that want logging can wrap this helper).\n */\n\nimport type { SearchResult } from '../../ui/search-input'\nimport type { DocSearchResult } from './types'\n\n/** Source repos that should be collapsed into grouped results in the search bar.\n *  Only financial tables (all rows link to the same admin page).\n *  Content tables (blog, webinar, podcast, etc.) stay individual since each has a unique URL. */\nconst SEARCH_GROUP_REPOS = new Set([\n  'financial-cap-table',\n  'financial-kpis',\n  'financial-pnl',\n  'financial-balance-sheet',\n  'financial-cash-flow',\n])\n\nconst ENTITY_LABELS: Record<string, string> = {\n  'financial-cap-table': 'Cap Table',\n  'financial-kpis': 'Financial KPIs',\n  'financial-pnl': 'Profit & Loss',\n  'financial-balance-sheet': 'Balance Sheets',\n  'financial-cash-flow': 'Cash Flow',\n  'blog-posts': 'Blog Posts',\n  'product-releases': 'Product Releases',\n  'case-studies': 'Case Studies',\n  webinars: 'Webinars',\n  events: 'Events',\n  podcasts: 'Podcasts',\n}\n\nexport function mapDocSearchResults(docs: DocSearchResult[]): SearchResult[] {\n  const entityGroups = new Map<string, DocSearchResult[]>()\n  // Track insertion order — groups appear where the FIRST row of that\n  // repo appeared in the response.\n  const order: Array<\n    { type: 'entity'; repo: string } | { type: 'doc'; doc: DocSearchResult }\n  > = []\n  const seenRepos = new Set<string>()\n\n  for (const doc of docs) {\n    if (doc.sourceRepo && SEARCH_GROUP_REPOS.has(doc.sourceRepo)) {\n      const group = entityGroups.get(doc.sourceRepo) || []\n      group.push(doc)\n      entityGroups.set(doc.sourceRepo, group)\n      if (!seenRepos.has(doc.sourceRepo)) {\n        seenRepos.add(doc.sourceRepo)\n        order.push({ type: 'entity', repo: doc.sourceRepo })\n      }\n    } else {\n      order.push({ type: 'doc', doc })\n    }\n  }\n\n  const results: SearchResult[] = []\n  for (const entry of order) {\n    if (entry.type === 'entity') {\n      const rows = entityGroups.get(entry.repo)!\n      const label = ENTITY_LABELS[entry.repo] || entry.repo\n      results.push({\n        id: `group-${entry.repo}`,\n        title: `${label} (${rows.length} ${rows.length === 1 ? 'record' : 'records'})`,\n        path: rows[0].path,\n        type: 'file',\n        metadata: {\n          documentType: rows[0].documentType,\n          externalUrl: rows[0].externalUrl,\n          sourceRepo: entry.repo,\n          id: rows[0].entityId,\n          isGroup: true,\n          items: rows.map((r) => ({\n            name: r.name,\n            externalUrl: r.externalUrl,\n            id: r.entityId,\n            sourceRepo: r.sourceRepo,\n            documentType: r.documentType,\n          })),\n        },\n      })\n    } else {\n      const doc = entry.doc\n      const isNonMarkdown = doc.documentType && doc.documentType !== 'markdown'\n      results.push({\n        id: doc.path,\n        title: doc.name,\n        description: isNonMarkdown ? doc.name : doc.snippet,\n        path: doc.path,\n        type: doc.type,\n        metadata: {\n          matchType: doc.matchType,\n          ...(doc.documentType ? { documentType: doc.documentType } : {}),\n          ...(doc.externalUrl ? { externalUrl: doc.externalUrl } : {}),\n          ...(doc.targetPlatform != null\n            ? { targetPlatform: doc.targetPlatform }\n            : {}),\n          ...(doc.sourceRepo ? { sourceRepo: doc.sourceRepo } : {}),\n          ...(doc.entityId ? { id: doc.entityId } : {}),\n        },\n      })\n    }\n  }\n\n  return results\n}\n","/**\n * Resolve what should happen when the user picks a search result.\n * Returns one of five typed actions so the caller is a single switch.\n *\n * Resolution order:\n *  1. `externalUrl` present → use `decideNewTab` to choose same-tab vs\n *     new-tab against the row's `targetPlatform`.\n *  2. Row has `id` + `sourceRepo` + `documentType` → synth an Ask-AI\n *     action (entity drill-in via primary key, no URL).\n *  3. Row has only `path` → legacy navigation fallback.\n *  4. Nothing actionable → noop.\n *\n * Lifted from the hub's `hooks/use-docs.ts:resolveSearchResultAction`.\n * Pure — no React, no telemetry.\n */\n\nimport type { SearchResult } from '../../ui/search-input'\nimport type { ChatRef } from '../../chat/chat-ref.types'\nimport { decideNewTab } from '../../chat/utils/decide-new-tab'\n\nexport type SearchResultAction =\n  | { kind: 'navigate-same-tab'; href: string }\n  | { kind: 'navigate-new-tab'; href: string }\n  | { kind: 'ask-ai'; detail: { source: string; ref: ChatRef } }\n  | { kind: 'route'; path: string }\n  | { kind: 'noop' }\n\nexport function resolveSearchResultAction(\n  result: SearchResult,\n  source: string,\n  runtimeMode?: 'host' | 'embed',\n): SearchResultAction {\n  const meta = result.metadata ?? {}\n  const externalUrl = meta.externalUrl as string | undefined\n  if (externalUrl) {\n    // Same pure helper `useNavLink` and `useUnifiedNav` call — single\n    // decision rule across cards, chips, and autocomplete rows. Thread\n    // the caller's `source` as `currentSource` so the platform-vs-\n    // platform comparison matches the hub's pre-migration behavior.\n    const targetPlatform = meta.targetPlatform as string | null | undefined\n    const isNewTab = decideNewTab({\n      href: externalUrl,\n      targetPlatform,\n      surface: 'useUnifiedNav',\n      runtimeMode,\n      currentSource: source,\n    })\n    return isNewTab\n      ? { kind: 'navigate-new-tab', href: externalUrl }\n      : { kind: 'navigate-same-tab', href: externalUrl }\n  }\n  const rowId = meta.id as string | undefined\n  const sourceRepo = meta.sourceRepo as string | undefined\n  const documentType = meta.documentType as string | undefined\n  if (rowId && sourceRepo && documentType) {\n    return {\n      kind: 'ask-ai',\n      detail: {\n        source,\n        ref: { type: documentType, id: rowId, title: result.title, url: null },\n      },\n    }\n  }\n  if (result.path) {\n    return { kind: 'route', path: result.path }\n  }\n  return { kind: 'noop' }\n}\n","'use client'\n\n/**\n * `useDocSearch` — debounced RAG-search hook against `/api/docs/search`.\n *\n * Pure fetch + navigation glue. Embedders can mount this directly\n * (any host with a reverse-proxy that exposes `/api/docs/search` will\n * work). Hub callers wire it into the lib `<DocSearchBar>` for the\n * canonical typeahead dropdown.\n *\n * ## What moved from hub to lib\n *\n * Lifted from `multi-platform-hub/hooks/use-docs.ts:useDocSearch`. Two\n * hub-only concerns are now optional injection points instead of\n * direct imports:\n *\n *   - `useDocNavigation()` (hub's in-page doc-tree swap) → optional\n *     `onInPageSwap?: (path: string) => boolean` config callback. When\n *     present and returns true, the hook treats a same-origin result\n *     click as \"handled in-page\"; when absent or returns false, the\n *     hook falls back to `onNavigate(path)` (`router.push` on hub,\n *     `window.location.assign` on bare embedders).\n *   - `traceCompose` (hub-only telemetry) → dropped. The lib has no\n *     equivalent runtime-context yet; bring it back when there is one.\n *\n * Everything else (debounce, `useChatRuntime` for embed-mode short-\n * circuit, embed-shim router, the action-resolver + result-mapper) is\n * now lib-resident.\n */\n\nimport { useState, useEffect, useCallback } from 'react'\nimport { useRouter } from '../../../embed-shims'\nimport { useDebounce } from '../../../hooks/ui/use-debounce'\nimport { useChatRuntime } from '../../../contexts/chat-runtime-context'\nimport type { SearchResult } from '../../ui/search-input'\nimport {\n  resolveExternalNavigation,\n  stripSameOriginToPath,\n  NEW_TAB_FEATURES,\n} from '../../chat/utils/chat-nav-resolution'\nimport type { DocSearchResult } from './types'\nimport { mapDocSearchResults } from './map-doc-search-results'\nimport { resolveSearchResultAction } from './resolve-search-result-action'\n\nexport interface UseDocSearchConfig {\n  /** Discriminator passed to `/api/docs/search?source=` (e.g.\n   *  `'openframe'`). Embedders set it to whatever discriminator their\n   *  reverse-proxy expects. */\n  source: string\n  /** Base route prefix this search lives under (e.g. `'/onboarding-guides'`).\n   *  When a result's href starts with `${baseRoute}/`, the hook\n   *  attempts the optional in-page swap path before falling through\n   *  to a full nav. */\n  baseRoute: string\n  /** Imperative navigation fallback. Called when no override\n   *  (in-page swap, new-tab) applies. Hub callers pass\n   *  `(path) => router.push(path)`; embedders pass an equivalent. */\n  onNavigate: (path: string) => void\n  /** Optional `RagTableConfig.id` list to narrow the search to specific\n   *  tables (e.g. `['onboarding-guides']`). Forwarded to\n   *  `/api/docs/search?tableIds=…` which intersects with the source's\n   *  standing set. */\n  tableIds?: string[]\n  /** Optional in-page swap callback. When the result's href is under\n   *  `baseRoute` AND this callback returns true, the hook treats the\n   *  click as handled in-page (no router push). Hub's\n   *  `<DocumentationSection>` wires this to\n   *  `useDocNavigation().navigate(path)`. */\n  onInPageSwap?: (path: string) => boolean\n  /** Optional endpoint override. Defaults to `'/api/docs/search'`\n   *  (the hub's reverse-proxy route). Embedders with a different\n   *  path can override. */\n  searchEndpoint?: string\n}\n\nexport function useDocSearch(config: UseDocSearchConfig) {\n  const {\n    source,\n    baseRoute,\n    onNavigate,\n    tableIds,\n    onInPageSwap,\n    searchEndpoint = '/api/docs/search',\n  } = config\n  const tableIdsKey = tableIds && tableIds.length > 0 ? tableIds.join(',') : ''\n\n  const router = useRouter()\n  // Optional chat-runtime read — when present and mode='embed' the\n  // search-result row click short-circuits to a new-tab open against\n  // the absolutized URL. Null/host preserves today's behavior.\n  const runtime = useChatRuntime()\n\n  const [query, setQuery] = useState('')\n  const [results, setResults] = useState<SearchResult[]>([])\n  const [isFetching, setIsFetching] = useState(false)\n  const debouncedQuery = useDebounce(query, 300)\n\n  useEffect(() => {\n    if (!debouncedQuery || debouncedQuery.trim().length < 2) {\n      setResults([])\n      setIsFetching(false)\n      return\n    }\n\n    let cancelled = false\n\n    async function fetchResults() {\n      setIsFetching(true)\n      try {\n        const params = new URLSearchParams({\n          q: debouncedQuery,\n          source,\n          limit: '10',\n        })\n        if (tableIdsKey) params.set('tableIds', tableIdsKey)\n\n        const response = await fetch(`${searchEndpoint}?${params.toString()}`)\n        if (!response.ok) {\n          throw new Error(`Search request failed: ${response.status}`)\n        }\n\n        const json = await response.json()\n\n        if (!cancelled && json.success && Array.isArray(json.data)) {\n          const mapped = mapDocSearchResults(json.data as DocSearchResult[])\n          setResults(mapped)\n        }\n      } catch (error) {\n        console.error('Doc search error:', error)\n        if (!cancelled) {\n          setResults([])\n        }\n      } finally {\n        if (!cancelled) {\n          setIsFetching(false)\n        }\n      }\n    }\n\n    fetchResults()\n\n    return () => {\n      cancelled = true\n    }\n  }, [debouncedQuery, source, tableIdsKey, searchEndpoint])\n\n  // Derived loading state — single source of truth for \"should the\n  // dropdown show 'Loading...' instead of 'No results found'\":\n  const isLoading =\n    query.trim().length >= 2 && (query !== debouncedQuery || isFetching)\n\n  // Track whether dropdown should stay open (external link opened in new tab).\n  const [keepOpen, setKeepOpen] = useState(false)\n\n  const handleResultSelect = useCallback(\n    (\n      result: SearchResult,\n      modifiers?: {\n        metaKey?: boolean\n        ctrlKey?: boolean\n        shiftKey?: boolean\n        altKey?: boolean\n        button?: number\n      },\n    ) => {\n      const action = resolveSearchResultAction(\n        result,\n        source,\n        runtime?.navigation.mode,\n      )\n      // Modifier / non-primary mouse click → force new tab regardless of\n      // same-tab/new-tab decision. The dropdown row is a `<div>`, not an\n      // `<a target=\"_blank\">`, so the browser doesn't background-tab\n      // natively on cmd-click. Honor it explicitly here for parity with\n      // the anchor-based surfaces (cards, chips, related-content). Plain\n      // Enter from the keyboard passes `modifiers === undefined`.\n      const wantsNewTab =\n        modifiers &&\n        (modifiers.metaKey ||\n          modifiers.ctrlKey ||\n          modifiers.shiftKey ||\n          modifiers.altKey ||\n          (typeof modifiers.button === 'number' && modifiers.button !== 0))\n      switch (action.kind) {\n        case 'navigate-same-tab': {\n          // Embed-mode short-circuit — autocomplete row clicked while\n          // the chat panel is hosted inside an embedding app.\n          if (runtime?.navigation.mode === 'embed') {\n            setKeepOpen(true)\n            const targetPlatform =\n              (result.metadata?.targetPlatform as string | null | undefined) ?? null\n            resolveExternalNavigation({\n              href: action.href,\n              targetPlatform,\n              runtime,\n            }).open()\n            return\n          }\n          if (wantsNewTab) {\n            setKeepOpen(true)\n            window.open(action.href, '_blank', NEW_TAB_FEATURES)\n            return\n          }\n          // Same-origin click:\n          //   1. If the href is under the current doc-tree's baseRoute AND\n          //      an `onInPageSwap` callback is wired AND returns true →\n          //      consider in-page swap handled.\n          //   2. Otherwise → embed-shim `router.push()` (soft RSC nav on\n          //      Next.js hosts, window.location.assign on bare hosts).\n          setKeepOpen(false)\n          const path =\n            baseRoute && action.href.startsWith(`${baseRoute}/`)\n              ? action.href.slice(baseRoute.length + 1)\n              : null\n          if (path && onInPageSwap?.(path)) return\n          router.push(stripSameOriginToPath(action.href))\n          return\n        }\n        case 'navigate-new-tab':\n          // Cross-origin (e.g. clicking a flamingo.run release from\n          // product-hub) — open in a new tab. Keep dropdown open so the\n          // user can pick another result without re-searching.\n          setKeepOpen(true)\n          window.open(action.href, '_blank', NEW_TAB_FEATURES)\n          return\n        case 'ask-ai':\n          // Row is searchable-but-not-openable (cap_table positions,\n          // financial-kpi snapshots, anything backed by\n          // `resolveUrl: () => null`). Dispatch a CustomEvent that\n          // GlobalAskAI listens for — opens chat + drills via\n          // `entityIdFilter` (primary-key only, same as inline-card Ask).\n          setKeepOpen(false)\n          window.dispatchEvent(\n            new CustomEvent('ask-ai:open-with-ref', { detail: action.detail }),\n          )\n          return\n        case 'route':\n          // Final fallback: legacy navigation by path. Hits when a row\n          // has neither URL nor pk metadata — a mapper/API regression.\n          setKeepOpen(false)\n          onNavigate(action.path)\n          return\n        case 'noop':\n          return\n      }\n    },\n    [onNavigate, source, baseRoute, router, onInPageSwap, runtime],\n  )\n\n  // Reset keepOpen when query changes.\n  useEffect(() => {\n    setKeepOpen(false)\n  }, [query])\n\n  return {\n    query,\n    setQuery,\n    results,\n    isLoading,\n    handleResultSelect,\n    keepDropdownOpen: keepOpen,\n  }\n}\n","\"use client\";\n\nimport { PageLayout } from '../layout/page-layout';\n\nexport interface DetailPageSkeletonProps {\n  metadataColumns?: number; // Number of metadata grid columns (default 4)\n  showImageGallery?: boolean; // Show horizontal image gallery (default true)\n  /** Render only the skeleton blocks, WITHOUT the self-contained page wrapper\n   *  — the caller supplies its own (e.g. `<PageShell>`) so the loading state\n   *  matches the loaded page's width, padding, and min-height. Default false\n   *  (self-contained `<PageLayout>` at the hub article width). */\n  bare?: boolean;\n}\n\nexport function DetailPageSkeleton({\n  metadataColumns = 4,\n  showImageGallery = true,\n  bare = false\n}: DetailPageSkeletonProps = {}) {\n  const content = (\n      <div className=\"space-y-6 md:space-y-10 animate-pulse\">\n        {/* Title Block */}\n        <div className=\"flex flex-col gap-6 w-full\">\n          <div className=\"h-16 md:h-20 w-full max-w-3xl bg-ods-card rounded\"></div>\n        </div>\n\n        {/* Category Tags Skeleton */}\n        <div className=\"flex flex-wrap gap-2 w-full\">\n          <div className=\"h-8 w-32 bg-ods-card rounded\"></div>\n          <div className=\"h-8 w-28 bg-ods-card rounded\"></div>\n          <div className=\"h-8 w-36 bg-ods-card rounded\"></div>\n        </div>\n\n        {/* Metadata Grid Skeleton */}\n        <div className={`grid grid-cols-1 md:grid-cols-${metadataColumns} border border-ods-border rounded-md overflow-hidden w-full`}>\n          {Array.from({ length: metadataColumns }).map((_, i) => (\n            <div key={i} className=\"bg-ods-card border-b md:border-b-0 md:border-r last:border-r-0 border-ods-border p-4\">\n              <div className=\"h-6 w-24 bg-ods-border rounded mb-2\"></div>\n              <div className=\"h-5 w-20 bg-ods-border rounded\"></div>\n            </div>\n          ))}\n        </div>\n\n        {/* Image Gallery Skeleton */}\n        {showImageGallery && (\n          <div className=\"flex gap-6 overflow-x-auto w-full\">\n            {[1, 2, 3, 4, 5].map((i) => (\n              <div key={i} className=\"shrink-0 w-[240px] h-[200px] bg-ods-card rounded-md border border-ods-border\"></div>\n            ))}\n          </div>\n        )}\n\n        {/* Featured Image Skeleton (for case studies) */}\n        {!showImageGallery && (\n          <div className=\"aspect-[2560/1366] w-full bg-ods-card rounded-md\"></div>\n        )}\n\n        {/* Content Sections Skeleton */}\n        {[1, 2, 3].map((section) => (\n          <div key={section} className=\"space-y-6\">\n            <div className=\"h-16 w-64 bg-ods-card rounded\"></div>\n            <div className=\"space-y-3\">\n              <div className=\"h-6 w-full bg-ods-card rounded\"></div>\n              <div className=\"h-6 w-full bg-ods-card rounded\"></div>\n              <div className=\"h-6 w-4/5 bg-ods-card rounded\"></div>\n            </div>\n          </div>\n        ))}\n      </div>\n  );\n  if (bare) return content;\n  return (\n    <PageLayout\n      showHeader={false}\n      className=\"bg-ods-bg max-w-[1280px] mx-auto py-6 md:py-10 px-6 md:px-20\"\n    >\n      {content}\n    </PageLayout>\n  );\n}\n","'use client'\n\n/**\n * Shared \"author byline\" card used by article-shaped detail pages\n * (blog post, product release, onboarding guide, investor update).\n *\n * MOVED from the hub so any consuming app can embed it; hub call sites\n * import it directly and pass their platform-aware copy explicitly\n * (`fallbackBio={defaultAuthorFallbackBio()}` from the hub's app-config).\n *\n * Embed-readiness contract:\n *   - `Link` / `Image` render through the embed-shims (plain `<a>` / `<img>`\n *     in non-Next hosts; the real Next primitives once the host registers\n *     them at app init).\n *   - The avatar is proxied through the OPTIONAL ambient `ChatRuntime`\n *     (`endpoints.imageProxyUrlPrefix`, same config `useProxiedImageUrl`\n *     reads) — when no runtime is mounted the raw URL renders as-is, so the\n *     component never throws outside a provider. Hosts can also inject\n *     `proxyImageUrl` to bypass the runtime entirely.\n *   - `fallbackBio` is a PLAIN prop (no app-config import): the lib has no\n *     platform awareness; pass copy or leave it absent to render nothing.\n *\n * Render order: avatar → name + job title + date → bio (when present).\n * Returns null when `author` is empty (no card rendered).\n */\n\nimport React from 'react'\nimport { Calendar, User } from 'lucide-react'\nimport Image from '../../embed-shims/next-image'\nimport Link from '../../embed-shims/next-link'\nimport { cn } from '../../utils/cn'\nimport { formatBioText } from '../../utils/format'\nimport { getProxiedImageUrl } from '../../utils/image-proxy'\nimport { useChatRuntime } from '../../contexts/chat-runtime-context'\n\nexport interface ArticleAuthorBylineProps {\n  /** Author display name. Required — block is hidden when null/empty. */\n  author: string | null\n  /** Avatar URL. Falls back to a placeholder when null. */\n  avatar?: string | null\n  /** Optional bio paragraph rendered below the name. */\n  bio?: string | null\n  /** Optional job title rendered immediately under the name. */\n  jobTitle?: string | null\n  /** Optional published date (ISO string or Date). Rendered next to the name. */\n  publishedAt?: string | Date | null\n  /** Optional link target for the author name (e.g. the author page). */\n  href?: string | null\n  /**\n   * Fallback paragraph when `bio` is empty. Plain copy — the lib has no\n   * platform/config awareness, so hosts that want a branded default\n   * (\"Contributing author on the {platform} platform\") pass it explicitly\n   * (the hub wrapper derives it from `getAppConfig()`). Absent/null ⇒\n   * nothing renders below the name when `bio` is empty.\n   */\n  fallbackBio?: string | null\n  /** Avatar size variant. `md` = 56px (default), `lg` = 64px. */\n  size?: 'md' | 'lg'\n  /**\n   * Host-injected avatar-URL mapper. Wins over the ambient-runtime proxy\n   * resolution. Use when the host proxies images outside the `ChatRuntime`\n   * config (e.g. a bespoke CDN rewrite).\n   */\n  proxyImageUrl?: (url: string) => string\n  className?: string\n}\n\nfunction formatDate(value: string | Date): string {\n  const d = typeof value === 'string' ? new Date(value) : value\n  if (Number.isNaN(d.getTime())) return ''\n  // `timeZone: 'UTC'` keeps the SSR (server = UTC) and client (user's local tz)\n  // renders identical — without it a published_at near a midnight boundary\n  // formats to a different day on each side, triggering a React #418 hydration\n  // text mismatch. Matches the convention in blog-metadata.tsx / investor-update.\n  return d.toLocaleDateString('en-US', {\n    month: 'long',\n    day: 'numeric',\n    year: 'numeric',\n    timeZone: 'UTC',\n  })\n}\n\nexport function ArticleAuthorByline({\n  author,\n  avatar,\n  bio,\n  jobTitle,\n  publishedAt,\n  href,\n  fallbackBio,\n  size = 'md',\n  proxyImageUrl,\n  className,\n}: ArticleAuthorBylineProps) {\n  // Optional runtime — `useChatRuntime` returns null outside a provider, so\n  // the byline works in bare embeds (raw avatar URL) and proxies whenever the\n  // host mounted a runtime with `imageProxyUrlPrefix` (the hub always does).\n  const runtime = useChatRuntime()\n  if (!author) return null\n\n  const proxiedAvatar = avatar\n    ? proxyImageUrl\n      ? proxyImageUrl(avatar)\n      : (getProxiedImageUrl(avatar, {\n          proxyPrefix: runtime?.endpoints.imageProxyUrlPrefix,\n          skipDomains: runtime?.endpoints.imageProxySkipDomains,\n          directHttps: true,\n        }) ?? avatar)\n    : ''\n\n  // Class-driven sizing (md = 56px, lg = 64px). The numeric pair feeds only\n  // the Image element's intrinsic width/height attributes (required by the\n  // Next image shim) — layout comes from the classes.\n  const avatarSizeClass = size === 'lg' ? 'w-16 h-16' : 'w-14 h-14'\n  const avatarIconClass = size === 'lg' ? 'w-8 h-8' : 'w-7 h-7'\n  const avatarDim = size === 'lg' ? 64 : 56\n  const formattedBio = formatBioText(bio ?? null)\n  const dateLabel = publishedAt ? formatDate(publishedAt) : ''\n\n  return (\n    <div\n      className={cn(\n        'bg-ods-card border border-ods-border rounded-lg p-6',\n        'flex flex-col md:flex-row gap-4 items-start',\n        className,\n      )}\n    >\n      {/* Avatar */}\n      <div className=\"flex-shrink-0\">\n        {avatar ? (\n          <Image\n            src={proxiedAvatar || avatar}\n            alt={author}\n            width={avatarDim}\n            height={avatarDim}\n            className={cn('rounded-full border-2 border-ods-border object-cover', avatarSizeClass)}\n          />\n        ) : (\n          <div\n            className={cn(\n              'rounded-full border-2 border-ods-border bg-ods-bg flex items-center justify-center',\n              avatarSizeClass,\n            )}\n          >\n            <User className={cn('text-ods-text-secondary', avatarIconClass)} />\n          </div>\n        )}\n      </div>\n\n      {/* Name + meta + bio */}\n      <div className=\"flex-1 min-w-0\">\n        <div className=\"flex flex-wrap items-baseline gap-x-3 gap-y-1\">\n          <h3 className=\"text-h5 text-ods-text-primary\">\n            {href ? (\n              <Link href={href} className=\"hover:text-ods-accent transition-colors\">\n                {author}\n              </Link>\n            ) : (\n              author\n            )}\n          </h3>\n          {dateLabel && (\n            <span className=\"inline-flex items-center gap-1 font-body text-body-sm text-ods-text-secondary\">\n              <Calendar className=\"h-3 w-3\" />\n              {dateLabel}\n            </span>\n          )}\n        </div>\n        {jobTitle && (\n          <p className=\"font-body text-body-sm text-ods-text-secondary mt-0.5\">\n            {jobTitle}\n          </p>\n        )}\n        {formattedBio ? (\n          <p className=\"font-body text-body-md text-ods-text-secondary leading-relaxed mt-2\">\n            {formattedBio}\n          </p>\n        ) : fallbackBio ? (\n          <p className=\"font-body text-body-md text-ods-text-secondary italic mt-2\">\n            {fallbackBio}\n          </p>\n        ) : null}\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/chunk-ZSUNQJRO.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-ZSUNQJRO.cjs","../src/hooks/ui/use-auto-limit-tags.ts","../src/hooks/ui/use-debounce.ts","../src/utils/local-storage-adapter.ts","../src/utils/app-config.ts","../src/utils/embed-proxy-auth-storage.ts","../src/utils/embed-authed-fetch.ts","../src/hooks/use-near-viewport.ts","../src/hooks/use-og-placeholder.ts","../src/utils/embed-content-fetch.ts"],"names":["useState","useEffect","adapter","useRef","useCallback"],"mappings":"AAAA,6rBAAY;AACZ;AACA;ACAA,8BAAyD;AA2ClD,SAAS,gBAAA,CAAiB;AAAA,EAC/B,KAAA;AAAA,EACA,UAAA,EAAY,MAAA;AAAA,EACZ,YAAA,EAAc,EAAA;AAAA,EACd,kBAAA,EAAoB;AACtB,CAAA,EAAoD;AAClD,EAAA,MAAM,UAAA,EAAY,2BAAA,IAA2B,CAAA;AAC7C,EAAA,MAAM,WAAA,EAAa,2BAAA,IAA2B,CAAA;AAC9C,EAAA,MAAM,eAAA,EAAiB,2BAAA,IAA4B,CAAA;AACnD,EAAA,MAAM,SAAA,EAAW,2BAAA,IAA8B,CAAA;AAC/C,EAAA,MAAM,SAAA,EAAW,2BAAA,IAA6B,CAAA;AAC9C,EAAA,MAAM,CAAC,YAAA,EAAc,eAAe,EAAA,EAAI,6BAAA,KAAc,CAAA;AAEtD,EAAA,MAAM,YAAA,EAAc,gCAAA,CAAY,EAAA,GAAM;AAEpC,IAAA,GAAA,CAAI,UAAA,IAAc,MAAA,EAAQ;AACxB,MAAA,eAAA,CAAgB,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,KAAK,CAAC,CAAA;AAC1C,MAAA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,EAAS,SAAA,CAAU,OAAA;AACzB,IAAA,MAAM,QAAA,EAAU,UAAA,CAAW,OAAA;AAC3B,IAAA,GAAA,CAAI,CAAC,OAAA,GAAU,CAAC,OAAA,EAAS;AACvB,MAAA,eAAA,CAAgB,KAAK,CAAA;AACrB,MAAA,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,MAAA,IAAU,CAAA,EAAG;AACf,MAAA,eAAA,CAAgB,CAAC,CAAA;AACjB,MAAA,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,EAAK,gBAAA,CAAiB,MAAM,CAAA;AAClC,IAAA,MAAM,KAAA,EAAO,UAAA,CAAW,EAAA,CAAG,WAAW,EAAA,GAAK,CAAA;AAC3C,IAAA,MAAM,KAAA,EAAO,UAAA,CAAW,EAAA,CAAG,YAAY,EAAA,GAAK,CAAA;AAC5C,IAAA,MAAM,IAAA,EAAM,UAAA,CAAW,EAAA,CAAG,GAAG,EAAA,GAAK,CAAA;AAClC,IAAA,MAAM,QAAA,EAAU,MAAA,CAAO,WAAA;AAKvB,IAAA,IAAI,eAAA,EAAiB,CAAA;AACrB,IAAA,IAAI,YAAA,EAAc,CAAA;AAClB,IAAA,GAAA,CAAI,iBAAA,EAAmB;AACrB,MAAA,MAAM,MAAA,mCAAQ,cAAA,mBAAe,OAAA,6BAAS,aAAA,UAAe,IAAA;AACrD,MAAA,MAAM,UAAA,EAAY,QAAA,CAAS,QAAA,EACvB,UAAA,CAAW,gBAAA,CAAiB,QAAA,CAAS,OAAO,CAAA,CAAE,QAAQ,EAAA,GAAK,GAAA,EAC3D,EAAA;AACJ,MAAA,eAAA,EAAiB,IAAA,CAAK,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAG,SAAS,CAAA;AAC9C,MAAA,YAAA,EAAc,GAAA;AAAA,IAChB;AAGA,IAAA,MAAM,UAAA,EAAY,QAAA,EAAU,KAAA,EAAO,KAAA,EAAO,eAAA,EAAiB,WAAA;AAG3D,IAAA,MAAM,OAAA,EAAS,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,QAAQ,CAAA;AAC1C,IAAA,MAAM,OAAA,EAAS,MAAA,CAAO,GAAA,CAAI,CAAC,EAAA,EAAA,GAAO,EAAA,CAAG,WAAW,CAAA;AAGhD,IAAA,IAAI,MAAA,EAAQ,CAAA;AACZ,IAAA,IAAA,CAAA,IAAS,EAAA,EAAI,CAAA,EAAG,EAAA,EAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK;AACtC,MAAA,MAAA,GAAS,MAAA,CAAO,CAAC,EAAA,EAAA,CAAK,EAAA,EAAI,EAAA,EAAI,IAAA,EAAM,CAAA,CAAA;AAAA,IACtC;AACA,IAAA,GAAA,CAAI,MAAA,GAAS,SAAA,EAAW;AACtB,MAAA,eAAA,CAAgB,KAAK,CAAA;AACrB,MAAA,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,OAAA,mCAAS,QAAA,qBAAS,OAAA,6BAAS,aAAA,UAAe,IAAA;AAChD,IAAA,MAAM,eAAA,EAAiB,UAAA,EAAY,OAAA,EAAS,GAAA;AAE5C,IAAA,IAAI,KAAA,EAAO,CAAA;AACX,IAAA,IAAI,SAAA,EAAW,CAAA;AACf,IAAA,IAAA,CAAA,IAAS,EAAA,EAAI,CAAA,EAAG,EAAA,EAAI,MAAA,CAAO,MAAA,EAAQ,CAAA,EAAA,EAAK;AACtC,MAAA,MAAM,KAAA,EAAO,MAAA,CAAO,CAAC,EAAA,EAAA,CAAK,EAAA,EAAI,EAAA,EAAI,IAAA,EAAM,CAAA,CAAA;AACxC,MAAA,GAAA,CAAI,KAAA,EAAO,KAAA,EAAO,cAAA,EAAgB,KAAA;AAClC,MAAA,KAAA,GAAQ,IAAA;AACR,MAAA,QAAA,EAAA;AAAA,IACF;AAEA,IAAA,eAAA,CAAgB,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,EACvC,CAAA,EAAG,CAAC,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,iBAAiB,CAAC,CAAA;AAGrD,EAAA,8BAAA,CAAU,EAAA,GAAM;AACd,IAAA,WAAA,CAAY,CAAA;AAAA,EACd,CAAA,EAAG,CAAC,WAAW,CAAC,CAAA;AAGhB,EAAA,8BAAA,CAAU,EAAA,GAAM;AACd,IAAA,MAAM,GAAA,EAAK,SAAA,CAAU,OAAA;AACrB,IAAA,GAAA,CAAI,CAAC,EAAA,EAAI,MAAA;AACT,IAAA,MAAM,GAAA,EAAK,IAAI,cAAA,CAAe,WAAW,CAAA;AACzC,IAAA,EAAA,CAAG,OAAA,CAAQ,EAAE,CAAA;AACb,IAAA,OAAO,CAAA,EAAA,GAAM,EAAA,CAAG,UAAA,CAAW,CAAA;AAAA,EAC7B,CAAA,EAAG,CAAC,WAAW,CAAC,CAAA;AAEhB,EAAA,OAAO,EAAE,YAAA,EAAc,SAAA,EAAW,UAAA,EAAY,cAAA,EAAgB,QAAA,EAAU,SAAS,CAAA;AACnF;ADlEA;AACA;AE9EA;AAQO,SAAS,WAAA,CAAe,KAAA,EAAU,MAAA,EAAQ,GAAA,EAAQ;AACvD,EAAA,MAAM,CAAC,cAAA,EAAgB,iBAAiB,EAAA,EAAIA,6BAAAA,KAAiB,CAAA;AAE7D,EAAAC,8BAAAA,CAAU,EAAA,GAAM;AAEd,IAAA,MAAM,MAAA,EAAQ,UAAA,CAAW,CAAA,EAAA,GAAM;AAC7B,MAAA,iBAAA,CAAkB,KAAK,CAAA;AAAA,IACzB,CAAA,EAAG,KAAK,CAAA;AAGR,IAAA,OAAO,CAAA,EAAA,GAAM;AACX,MAAA,YAAA,CAAa,KAAK,CAAA;AAAA,IACpB,CAAA;AAAA,EACF,CAAA,EAAG,CAAC,KAAA,EAAO,KAAK,CAAC,CAAA;AAEjB,EAAA,OAAO,cAAA;AACT;AFoEA;AACA;AG/CA,SAAS,UAAA,CAAW,OAAA,EAA4C;AAC9D,EAAA,GAAA,CAAI,OAAO,OAAA,IAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,IAAI;AACF,IAAA,OAAO,QAAA,IAAY,UAAA,EAAY,MAAA,CAAO,eAAA,EAAiB,MAAA,CAAO,YAAA;AAAA,EAChE,EAAA,UAAQ;AAGN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,yBAAA,CACd,OAAA,EACwB;AACxB,EAAA,MAAM,IAAA,mBAAM,OAAA,CAAQ,MAAA,UAAU,mBAAA;AAC9B,EAAA,MAAM,QAAA,mBAA6B,OAAA,CAAQ,OAAA,UAAW,SAAA;AACtD,EAAA,MAAM,WAAA,EAAa,CAAA,EAAA,GAAc;AAC/B,IAAA,MAAM,GAAA,kBAAK,OAAA,qBAAQ,SAAA,0BAAA,CAAY,GAAA;AAC/B,IAAA,OAAO,GAAA,EAAK,CAAA,EAAA;AACd,EAAA;AAEO,EAAA;AACL,IAAA;AACO,IAAA;AACC,MAAA;AACD,MAAA;AACD,MAAA;AACI,QAAA;AACI,QAAA;AACJ,QAAA;AACF,QAAA;AACG,QAAA;AACA,MAAA;AACC,QAAA;AACD,QAAA;AACT,MAAA;AACF,IAAA;AACe,IAAA;AACP,MAAA;AACD,MAAA;AACD,MAAA;AACM,QAAA;AACD,MAAA;AACC,QAAA;AACV,MAAA;AACF,IAAA;AACQ,IAAA;AACA,MAAA;AACD,MAAA;AACD,MAAA;AACM,QAAA;AACD,MAAA;AACC,QAAA;AACV,MAAA;AACF,IAAA;AACF,EAAA;AACF;AH2CiB;AACA;AInID;AACC,EAAA;AACjB;AJqIiB;AACA;AKrGR;AACO,EAAA;AACJ,EAAA;AAEC,EAAA;AAKL,EAAA;AACA,EAAA;AACA,EAAA;AACC,EAAA;AACT;AAEgB;AAA0C;AAAA;AAAA;AAInD,EAAA;AACM,EAAA;AACD,EAAA;AACF,EAAA;AAAA;AAAA;AAAA;AAAA;AAKC,EAAA;AACV;AAIQ;AACK,EAAA;AACN,EAAA;AACS,EAAA;AACjB;AAOgB;AACR,EAAA;AACU,EAAA;AACT,EAAA;AACG,IAAA;AACD,IAAA;AACI,IAAA;AACD,IAAA;AACC,IAAA;AACb,EAAA;AACF;AAMgB;AACR,EAAA;AACC,EAAA;AACT;AAIgB;AACD,EAAA;AACH,IAAA;AACK,IAAA;AACF,IAAA;AACD,IAAA;AACC,IAAA;AACZ,EAAA;AACH;AAGgB;AACA,EAAA;AAChB;AAagB;AAID,EAAA;AACP,EAAA;AACI,EAAA;AACA,IAAA;AACV,EAAA;AACU,EAAA;AACA,IAAA;AACV,EAAA;AAGU,EAAA;AACA,EAAA;AACA,EAAA;AACI,EAAA;AAChB;AL6DiB;AACA;AM1HX;AAEG;AACI,EAAA;AACH,EAAA;AACV;AAES;AACI,EAAA;AAC8B,EAAA;AAC3C;AAYgB;AACVC,EAAAA;AACM,IAAA;AACN,MAAA;AAGF,IAAA;AACF,EAAA;AACA,EAAA;AACF;AAQgB;AACP,EAAA;AACT;AA6BgB;AAId,EAAA;AAaI,EAAA;AACK,EAAA;AACP,IAAA;AACK,EAAA;AACL,IAAA;AACS,IAAA;AACF,MAAA;AACH,QAAA;AACD,MAAA;AACQ,IAAA;AACE,MAAA;AACN,IAAA;AACE,MAAA;AACT,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AAeM;AAEG;AACI,EAAA;AAEP,EAAA;AAKN;AAES;AACI,EAAA;AAC8B,EAAA;AAC3C;AAES;AACDA,EAAAA;AACQ,EAAA;AACV,EAAA;AACC,EAAA;AAIH,IAAA;AAII,MAAA;AACD,IAAA;AACH,IAAA;AACF,EAAA;AACO,EAAA;AACT;AAQe;AAUA,EAAA;AAOPA,EAAAA;AACO,EAAA;AAIC,IAAA;AACA,MAAA;AACZ,IAAA;AACF,EAAA;AACM,EAAA;AAEA,EAAA;AACD,IAAA;AACH,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,IAAA;AACD,EAAA;AAKY,EAAA;AACL,IAAA;AACF,IAAA;AACK,MAAA;AACT,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AAqBS;AACI,EAAA;AACP,EAAA;AACA,EAAA;AACA,EAAA;AACW,IAAA;AAKA,IAAA;AACP,EAAA;AACI,IAAA;AACZ,EAAA;AACW,EAAA;AACC,IAAA;AACR,MAAA;AACF,IAAA;AACF,EAAA;AACW,EAAA;AASG,IAAA;AACF,MAAA;AACN,QAAA;AAGF,MAAA;AACA,MAAA;AACF,IAAA;AACU,IAAA;AACR,MAAA;AACF,IAAA;AACF,EAAA;AACF;ANnCiB;AACA;AOvTR;AAIS;AACZ;AAEG;AACD,EAAA;AACQ,EAAA;AAEC,EAAA;AACA,IAAA;AACH,MAAA;AACD,QAAA;AAGC,QAAA;AACE,QAAA;AACH,UAAA;AACA,UAAA;AACH,UAAA;AACF,QAAA;AACD,MAAA;AACH,IAAA;AACa,IAAA;AACf,EAAA;AACc,EAAA;AACP,EAAA;AACT;AAegB;AAGC,EAAA;AACDC,EAAAA;AAGFC,EAAAA;AACU,IAAA;AACZ,MAAA;AAII,MAAA;AACF,QAAA;AACF,QAAA;AACF,UAAA;AACA,0BAAA;AACF,QAAA;AACF,MAAA;AAEM,MAAA;AACK,MAAA;AAEA,MAAA;AACX,MAAA;AACA,MAAA;AACF,IAAA;AACW,IAAA;AACb,EAAA;AAGU,EAAA;AACK,IAAA;AACA,MAAA;AACF,MAAA;AACL,MAAA;AACF,QAAA;AACA,wBAAA;AACF,MAAA;AACF,IAAA;AACa,EAAA;AAED,EAAA;AAChB;APwRiB;AACA;AQ5YR;AA4BO;AAOC,EAAA;AACR,IAAA;AACC,IAAA;AACQ,IAAA;AACV,IAAA;AACG,IAAA;AACK,EAAA;AAChB;AR6WiB;AACA;ASpYJ;AACN,EAAA;AAIH,EAAA;AACK,EAAA;AACT;ATmYiB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-ZSUNQJRO.cjs","sourcesContent":[null,"\"use client\"\n\nimport { useCallback, useEffect, useRef, useState } from \"react\"\n\nexport interface UseAutoLimitTagsOptions {\n  /** Total number of tags */\n  count: number\n  /** Fixed limit or \"auto\" for DOM-based measurement. Default \"auto\" */\n  limitTags?: number | \"auto\"\n  /** Placeholder text used to reserve input width (only used in \"auto\" mode) */\n  placeholder?: string\n  /**\n   * Reserve trailing space for a text input (the autocomplete combobox). Set\n   * `false` for a pure chip row that has no input — then only the chips and the\n   * \"+N\" / \"⋯\" overflow badge compete for the available width. Default `true`.\n   */\n  reserveInputWidth?: boolean\n}\n\nexport interface UseAutoLimitTagsReturn {\n  /** How many tags to show */\n  visibleCount: number\n  /** Ref for the zone that contains tags + input (must have overflow-hidden, gap, padding) */\n  middleRef: React.RefObject<HTMLDivElement | null>\n  /** Ref for the off-screen container that holds measurement copies of ALL tags */\n  measureRef: React.RefObject<HTMLDivElement | null>\n  /** Ref for the hidden span that measures placeholder text width */\n  textMeasureRef: React.RefObject<HTMLSpanElement | null>\n  /** Ref for the \"+N\" badge element (used to measure its width) */\n  badgeRef: React.RefObject<HTMLButtonElement | null>\n  /** Ref for the input element (used to read its min-width) */\n  inputRef: React.RefObject<HTMLInputElement | null>\n}\n\n/**\n * Calculates how many tags fit in a single-line container.\n *\n * Requires three off-screen measurement elements rendered by the consumer:\n * 1. A `<div ref={measureRef}>` containing Tag copies for every item (to measure widths)\n * 2. A `<span ref={textMeasureRef}>` containing the placeholder text (to reserve input width)\n * 3. The `<button ref={badgeRef}>` for the \"+N\" badge (to measure badge width)\n *\n * The hook reads real CSS values (padding, gap) from the middleRef container,\n * so it works regardless of responsive breakpoints or custom styling.\n */\nexport function useAutoLimitTags({\n  count,\n  limitTags = \"auto\",\n  placeholder = \"\",\n  reserveInputWidth = true,\n}: UseAutoLimitTagsOptions): UseAutoLimitTagsReturn {\n  const middleRef = useRef<HTMLDivElement>(null)\n  const measureRef = useRef<HTMLDivElement>(null)\n  const textMeasureRef = useRef<HTMLSpanElement>(null)\n  const badgeRef = useRef<HTMLButtonElement>(null)\n  const inputRef = useRef<HTMLInputElement>(null)\n  const [visibleCount, setVisibleCount] = useState(count)\n\n  const recalculate = useCallback(() => {\n    // Fixed limit — skip DOM measurement\n    if (limitTags !== \"auto\") {\n      setVisibleCount(Math.min(limitTags, count))\n      return\n    }\n\n    const middle = middleRef.current\n    const measure = measureRef.current\n    if (!middle || !measure) {\n      setVisibleCount(count)\n      return\n    }\n    if (count === 0) {\n      setVisibleCount(0)\n      return\n    }\n\n    // Read real CSS metrics from the middle zone\n    const cs = getComputedStyle(middle)\n    const padL = parseFloat(cs.paddingLeft) || 0\n    const padR = parseFloat(cs.paddingRight) || 0\n    const gap = parseFloat(cs.gap) || 0\n    const middleW = middle.clientWidth\n\n    // Reserve trailing space for the input (autocomplete only). A pure chip row\n    // (`reserveInputWidth: false`) has no input, so nothing — and no gap before\n    // it — is reserved.\n    let inputReservedW = 0\n    let trailingGap = 0\n    if (reserveInputWidth) {\n      const textW = textMeasureRef.current?.offsetWidth ?? 60\n      const inputMinW = inputRef.current\n        ? parseFloat(getComputedStyle(inputRef.current).minWidth) || 60\n        : 60\n      inputReservedW = Math.max(textW + 8, inputMinW)\n      trailingGap = gap\n    }\n\n    // Available = middle zone − padding − input reserved − gap before input\n    const available = middleW - padL - padR - inputReservedW - trailingGap\n\n    // Measure every tag from the off-screen container\n    const tagEls = Array.from(measure.children) as HTMLElement[]\n    const widths = tagEls.map((el) => el.offsetWidth)\n\n    // Fast check: do ALL tags fit?\n    let total = 0\n    for (let i = 0; i < widths.length; i++) {\n      total += widths[i] + (i > 0 ? gap : 0)\n    }\n    if (total <= available) {\n      setVisibleCount(count)\n      return\n    }\n\n    // Not all fit → reserve space for the \"+N\" badge\n    const badgeW = badgeRef.current?.offsetWidth ?? 40\n    const spaceWithBadge = available - badgeW - gap\n\n    let used = 0\n    let fitCount = 0\n    for (let i = 0; i < widths.length; i++) {\n      const need = widths[i] + (i > 0 ? gap : 0)\n      if (used + need > spaceWithBadge) break\n      used += need\n      fitCount++\n    }\n\n    setVisibleCount(Math.max(0, fitCount))\n  }, [count, limitTags, placeholder, reserveInputWidth])\n\n  // Recalculate when inputs change\n  useEffect(() => {\n    recalculate()\n  }, [recalculate])\n\n  // Recalculate on container resize\n  useEffect(() => {\n    const el = middleRef.current\n    if (!el) return\n    const ro = new ResizeObserver(recalculate)\n    ro.observe(el)\n    return () => ro.disconnect()\n  }, [recalculate])\n\n  return { visibleCount, middleRef, measureRef, textMeasureRef, badgeRef, inputRef }\n}\n","\"use client\"\n\nimport { useState, useEffect } from \"react\"\n\n/**\n * Hook to debounce a value\n * @param value - Value to debounce\n * @param delay - Delay in milliseconds\n * @returns Debounced value\n */\nexport function useDebounce<T>(value: T, delay = 500): T {\n  const [debouncedValue, setDebouncedValue] = useState<T>(value)\n\n  useEffect(() => {\n    // Set up timeout to update debounced value\n    const timer = setTimeout(() => {\n      setDebouncedValue(value)\n    }, delay)\n\n    // Clean up timeout on value change or unmount\n    return () => {\n      clearTimeout(timer)\n    }\n  }, [value, delay])\n\n  return debouncedValue\n}\n","/**\n * Thin JSON-typed Web-Storage adapter (localStorage or sessionStorage).\n *\n * Centralizes the SSR-guard + try/catch + silent quota-failure pattern\n * that every per-feature storage util would otherwise re-implement.\n *\n * Optional `namespace` prefix supports platform / user partitioning —\n * the resolver runs lazily at call time so the namespace can vary across\n * the lifetime of the page (e.g. proxy-auth switches user, which switches\n * the key suffix).\n *\n * Backend selection (`backend: 'local' | 'session'`):\n *   - `'local'` (default): persists across browser sessions. Use for\n *     UI state, chat history metadata, feature-flag opt-ins.\n *   - `'session'`: cleared when the tab closes. Use for ANY auth-adjacent\n *     value (bearer tokens, act-as identity, proxy credentials). Reduces\n *     the XSS-exfiltration attack window from \"indefinite\" to \"until tab\n *     close\" without losing per-session ergonomics.\n */\n\nexport type WebStorageBackend = 'local' | 'session'\n\nexport interface LocalStorageAdapter<T> {\n  load(): T | null\n  save(value: T): void\n  clear(): void\n  /** Resolved storage key for the current call. Useful for tests. */\n  resolveKey(): string\n}\n\nexport interface LocalStorageAdapterOptions<T> {\n  /** Base storage key. Combined with `namespace()` when provided. */\n  key: string\n  /** Optional dynamic namespace prefix appended via `.` separator.\n   *  Called on EVERY read/write so the key can vary across the page\n   *  lifetime (e.g. when the platform or user identity changes). */\n  namespace?: () => string | null | undefined\n  /** Runtime shape check. Falsey return → `load()` yields null. */\n  validate?: (parsed: unknown) => parsed is T\n  /** Diagnostic prefix written to `console.warn` on parse / write\n   *  failures. Defaults to `'[local-storage]'`. */\n  logTag?: string\n  /** Which Web-Storage backend to use. Defaults to `'local'`. Pass\n   *  `'session'` for anything auth-adjacent so the value evaporates\n   *  when the tab closes. */\n  backend?: WebStorageBackend\n}\n\nfunction getStorage(backend: WebStorageBackend): Storage | null {\n  if (typeof window === 'undefined') return null\n  try {\n    return backend === 'session' ? window.sessionStorage : window.localStorage\n  } catch {\n    // Some sandboxed contexts (Safari private mode older versions,\n    // strict CSP) throw on storage access — treat as unavailable.\n    return null\n  }\n}\n\nexport function createLocalStorageAdapter<T>(\n  options: LocalStorageAdapterOptions<T>,\n): LocalStorageAdapter<T> {\n  const tag = options.logTag ?? '[local-storage]'\n  const backend: WebStorageBackend = options.backend ?? 'local'\n  const resolveKey = (): string => {\n    const ns = options.namespace?.()\n    return ns ? `${ns}.${options.key}` : options.key\n  }\n\n  return {\n    resolveKey,\n    load() {\n      const storage = getStorage(backend)\n      if (!storage) return null\n      try {\n        const raw = storage.getItem(resolveKey())\n        if (!raw) return null\n        const parsed = JSON.parse(raw) as unknown\n        if (options.validate && !options.validate(parsed)) return null\n        return parsed as T\n      } catch (err) {\n        console.warn(`${tag} parse failed for key ${resolveKey()}:`, err)\n        return null\n      }\n    },\n    save(value: T) {\n      const storage = getStorage(backend)\n      if (!storage) return\n      try {\n        storage.setItem(resolveKey(), JSON.stringify(value))\n      } catch (err) {\n        console.warn(`${tag} write failed for key ${resolveKey()}:`, err)\n      }\n    },\n    clear() {\n      const storage = getStorage(backend)\n      if (!storage) return\n      try {\n        storage.removeItem(resolveKey())\n      } catch (err) {\n        console.warn(`${tag} clear failed for key ${resolveKey()}:`, err)\n      }\n    },\n  }\n}\n","// Stub app config\nexport const APP_CONFIG = {\n  app: {\n    type: 'openmsp',\n    name: 'OpenMSP',\n    domain: 'openmsp.ai'\n  },\n  features: {\n    announcements: true,\n    notifications: true\n  }\n} as const;\n\nexport function getAppConfig() {\n  return APP_CONFIG;\n}\n\nexport function getAppType() {\n  return process.env.NEXT_PUBLIC_APP_TYPE || 'openmsp';\n}","'use client'\n\n/**\n * Client-side persistence for embed-surface proxy credentials\n * (`CHAT_PROXY_SECRET` + impersonation email). Used by every embedded\n * surface — the chat widget AND the ticket center AND any future\n * embedded React component that needs to identify itself as the\n * impersonated customer.\n *\n * When set, the surface attaches the creds as\n *   `Authorization: Bearer <secret>` + `X-Chat-Act-As: <email>`\n * on every call to `/api/docs/chat`, `/api/chat/*`, and any other route\n * gated by `requireChatAuth` — proving to the server that this session\n * is acting on behalf of <email>.\n *\n * **Naming history:** the wire-side header names are still `X-Chat-*`\n * and the env var is `CHAT_PROXY_SECRET`. Those are server contracts;\n * renaming them would require a coordinated deploy + customer-side\n * env-var migration. The CLIENT-side helpers were renamed `Embed*` so\n * non-chat surfaces (e.g. ticket center) don't have to import a\n * chat-prefixed symbol just to send the same headers.\n *\n * Persists to **`localStorage`** so the bearer token + act-as identity\n * survive tab close, new-tab opens, and browser restarts — the\n * `/debug` paste-creds UI is an admin tool and re-pasting every tab\n * cycle was rejected as a dev-experience tradeoff that wasn't worth\n * the security gain. An XSS sink on this origin can read the value\n * indefinitely (vs only-this-tab with sessionStorage), but `/debug`\n * is admin-gated behind the platform's `askAI.enabled` flag and the\n * impersonation header it sets is server-validated against\n * `CHAT_PROXY_SECRET` anyway. Explicit \"Clear\" button on the creds\n * bar is the supported logout path; closing the tab is no longer.\n *\n * Namespaced under `<platform>.chat.proxy-auth.v1` (the storage key is\n * unchanged from the old chat-prefixed helper — that's a storage\n * contract; renaming it would log everyone out).\n */\n\nimport { createLocalStorageAdapter } from './local-storage-adapter'\nimport { getAppType } from './app-config'\n\nexport interface EmbedProxyAuth {\n  secret: string\n  email: string\n  /** Optional identity passthrough — empty/omitted = not sent. Server\n   *  parses these as `X-Chat-{First,Last}-Name` / `X-Chat-Avatar-Url` and\n   *  threads them through `resolveChatProxyIdentity`'s returned user. */\n  firstName?: string\n  lastName?: string\n  avatarUrl?: string\n}\n\nfunction isValidPersistedAuth(value: unknown): value is EmbedProxyAuth {\n  if (!value || typeof value !== 'object') return false\n  const v = value as Record<string, unknown>\n  if (\n    typeof v.secret !== 'string' || v.secret.trim().length === 0 ||\n    typeof v.email !== 'string' || v.email.trim().length === 0\n  ) return false\n  // Optional fields: when present must be strings. Empty string is treated\n  // as absent later (in `getEmbedProxyAuth`).\n  if (v.firstName != null && typeof v.firstName !== 'string') return false\n  if (v.lastName != null && typeof v.lastName !== 'string') return false\n  if (v.avatarUrl != null && typeof v.avatarUrl !== 'string') return false\n  return true\n}\n\nconst adapter = createLocalStorageAdapter<EmbedProxyAuth>({\n  // Storage key unchanged from the legacy chat-prefixed helper. Renaming\n  // it would silently log every existing admin out — the key is a\n  // storage contract, not a code identifier.\n  key: 'chat.proxy-auth.v1',\n  namespace: () => getAppType(),\n  validate: isValidPersistedAuth,\n  logTag: '[embed-proxy-auth-storage]',\n  // localStorage — survives tab close, new tabs, and browser restarts.\n  // Admin re-pasting creds every tab cycle was the dev-experience\n  // tradeoff prior `sessionStorage` setup demanded — rejected. See\n  // file-level doc comment for the security tradeoff rationale.\n  backend: 'local',\n})\n\n/** Trim + null-coerce an optional identity field so consumers can do\n *  `auth.firstName ?? ''` without worrying about whitespace-only strings. */\nfunction normalizeOptional(value: string | undefined): string | undefined {\n  if (!value) return undefined\n  const trimmed = value.trim()\n  return trimmed.length > 0 ? trimmed : undefined\n}\n\n/**\n * Returns full credentials (secret + email + optional identity passthrough)\n * when secret + email are available. Returns `null` when nothing is saved —\n * callers treat that as \"fall back to cookie auth\".\n */\nexport function getEmbedProxyAuth(): EmbedProxyAuth | null {\n  const persisted = adapter.load()\n  if (!persisted) return null\n  return {\n    secret: persisted.secret,\n    email: persisted.email.trim().toLowerCase(),\n    firstName: normalizeOptional(persisted.firstName),\n    lastName: normalizeOptional(persisted.lastName),\n    avatarUrl: normalizeOptional(persisted.avatarUrl),\n  }\n}\n\n/**\n * Returns the LAST email the admin saved. The proxy creds bar reads\n * this to pre-fill the email field on mount.\n */\nexport function getPersistedProxyEmail(): string | null {\n  const persisted = adapter.load()\n  return persisted?.email.trim().toLowerCase() ?? null\n}\n\n/** Save the proxy creds. Secret + email are required; identity-passthrough\n *  fields are persisted only when non-empty. */\nexport function setEmbedProxyAuth(value: EmbedProxyAuth): void {\n  adapter.save({\n    secret: value.secret,\n    email: value.email.trim().toLowerCase(),\n    firstName: normalizeOptional(value.firstName),\n    lastName: normalizeOptional(value.lastName),\n    avatarUrl: normalizeOptional(value.avatarUrl),\n  })\n}\n\n/** Drop the persisted creds. */\nexport function clearEmbedProxyAuth(): void {\n  adapter.clear()\n}\n\n/**\n * Apply the embed-proxy auth (Bearer + X-Chat-Act-As) to a fetch call's\n * URL + headers. Used by every embedded-surface route that needs to\n * identify itself as the proxied customer (chat stream, agent-* routes,\n * ticket-center actions). When proxy auth is absent (regular\n * cookie-session users), returns the inputs unchanged so the cookie-auth\n * path still works.\n *\n * `X-Chat-Act-As` header (vs a URL query param) keeps PII out of access\n * logs, Sentry breadcrumbs, browser history, and CDN analytics.\n */\nexport function applyProxyAuth(\n  url: string,\n  baseHeaders: Record<string, string> = { 'Content-Type': 'application/json' },\n): { url: string; headers: Record<string, string> } {\n  const auth = getEmbedProxyAuth()\n  const headers = { ...baseHeaders }\n  if (auth?.secret) {\n    headers.Authorization = `Bearer ${auth.secret}`\n  }\n  if (auth?.email) {\n    headers['X-Chat-Act-As'] = auth.email\n  }\n  // Optional identity passthrough — only attached when present so the\n  // server's \"required vs optional\" header shape stays exact.\n  if (auth?.firstName) headers['X-Chat-First-Name'] = auth.firstName\n  if (auth?.lastName) headers['X-Chat-Last-Name'] = auth.lastName\n  if (auth?.avatarUrl) headers['X-Chat-Avatar-Url'] = auth.avatarUrl\n  return { url, headers }\n}\n","'use client'\n\n/**\n * Shared `fetch` wrapper for any embedded surface (chat, ticket center,\n * future widgets) that needs to carry the bearer-act-as identity\n * (proxy `Authorization` + `X-Chat-Act-As` headers from\n * `embed-proxy-auth-storage.ts`).\n *\n * Wire header names are `X-Chat-*` for historical reasons — that's a\n * server contract, not a UI namespace. The wrapper itself is generic.\n *\n * Drop-in replacement for `fetch()` — `Authorization` / `X-Chat-Act-As`\n * are merged into `init.headers` when proxy creds are stashed in\n * sessionStorage, otherwise the call falls through to the cookie-auth\n * path unchanged.\n *\n * Use this for any client-side fetch hitting `/api/chat/*`, `/api/docs/chat/*`,\n * or `/api/storage/generate-upload-url` (chat-attachment surface — shared\n * with the ticket center). Routes that do NOT need bearer-act-as\n * (e.g. `/api/profile/me`) keep using vanilla `fetch`.\n */\n\nimport { applyProxyAuth } from './embed-proxy-auth-storage'\n\n// =============================================================================\n// Host-supplied auth adapter (opt-in)\n// =============================================================================\n\n/**\n * Hosts that have their own auth model (cookie sessions, app-specific\n * JWT in localStorage, OAuth access tokens, …) can register an adapter\n * to override the lib's default `embedProxyAuth` flow. When set, the\n * adapter's `getHeaders()` result is merged onto every `embedAuthedFetch`\n * call AFTER the default proxy-auth header step (so adapter headers\n * win over both caller and proxy values), and `credentials` overrides\n * the default `'same-origin'` behaviour.\n *\n * Default (no adapter): MPH-style proxy-impersonation — bearer + act-as\n * read from localStorage, `credentials: 'same-origin'`. No consumer\n * needs to touch this unless they want a different auth model.\n *\n * Use cases:\n *   - openframe-frontend has its own JWT in `localStorage.of_access_token`\n *     and cookie-based session; register an adapter to attach the JWT\n *     and request `credentials: 'include'` so cookies travel cross-origin\n *     to the openframe gateway.\n *   - Future embed hosts with OAuth access tokens, signed URLs, etc.\n *\n * Lifetime: setter is module-level (intentionally — `embedAuthedFetch`\n * is a plain utility, not a hook, so it can't read React context). Host\n * runtime providers should call `setEmbedAuthAdapter(...)` on mount and\n * `setEmbedAuthAdapter(null)` on unmount. Multiple hosts registering at\n * once is a programming error (one chat panel per app).\n */\nexport interface EmbedAuthAdapter {\n  /** Headers merged onto every embedded-fetch call. Return `{}` to add\n   *  nothing. Called per-request so reactive token refresh sees the latest\n   *  value from your auth store / storage. Values typed as\n   *  `string | undefined` so the common narrowed shape\n   *  `{ Authorization: token ? 'Bearer …' : undefined }` (or a conditional\n   *  `token ? { Authorization: … } : {}`) assigns cleanly — `undefined`\n   *  values are filtered before being merged into the request headers. */\n  getHeaders?: () => Record<string, string | undefined>\n  /** `RequestInit.credentials` mode. Default when no adapter: callers'\n   *  `init.credentials` or `'same-origin'`. Use `'include'` for cookie\n   *  auth against a different origin (CORS + `SameSite=None` required). */\n  credentials?: RequestCredentials\n  /**\n   * Optional 401 self-heal. When a request comes back `401`,\n   * `embedAuthedFetch` calls this once, and — if it resolves `true` —\n   * retries the SAME request exactly once with freshly-recomputed\n   * headers (so a rotated bearer from `getHeaders()` is picked up).\n   * Resolve `false` to surface the 401 to the caller unchanged.\n   *\n   * This is the capability the openframe `apiClient` has had all along\n   * (refresh-the-access-token-then-retry); registering it here gives the\n   * embedded chat/ticket surfaces the same self-healing auth instead of\n   * dying on an expired token. Concurrent 401s are de-duplicated by the\n   * wrapper, so this fires at most once per refresh cycle even when a\n   * stampede of chat requests all expire together — your implementation\n   * does NOT need its own in-flight guard (though a token-refresh manager\n   * that already dedups is harmless).\n   *\n   * Keep it idempotent and side-effect-light: on failure the wrapper just\n   * returns the original 401 — logout/redirect decisions belong to the\n   * host's own auth layer, not to this fetch wrapper.\n   */\n  refresh?: () => Promise<boolean>\n}\n\n/**\n * The registered adapter is parked on `globalThis`, NOT in a module-private\n * `let`. Reason: this lib ships multiple entry points (`/utils`,\n * `/components/chat`, …) and a consumer's bundler can inline this file into\n * more than one chunk — giving each chunk its OWN module scope. If the host\n * calls `setEmbedAuthAdapter` from the `/utils` copy while the chat's\n * `embedAuthedFetch` runs from the `/components/chat` copy, a module-local\n * `let` would be set on one copy and read as `null` on the other (the exact\n * \"credentials: same-origin, no Bearer, no refresh\" symptom). A single\n * `globalThis` slot is shared across every copy, so registration always\n * reaches the fetch path.\n */\nconst ADAPTER_GLOBAL_KEY = '__embedAuthedFetchAdapter__'\n\nfunction getRegisteredAuthAdapter(): EmbedAuthAdapter | null {\n  if (typeof globalThis === 'undefined') return null\n  return (globalThis as Record<string, unknown>)[ADAPTER_GLOBAL_KEY] as EmbedAuthAdapter | null ?? null\n}\n\nfunction storeRegisteredAuthAdapter(adapter: EmbedAuthAdapter | null): void {\n  if (typeof globalThis === 'undefined') return\n  ;(globalThis as Record<string, unknown>)[ADAPTER_GLOBAL_KEY] = adapter\n}\n\n/**\n * Register a host-owned auth adapter for `embedAuthedFetch`. Pass `null`\n * to clear (typically on provider unmount).\n *\n * Module-level state — there is one chat panel per app, so a single\n * registration is sufficient. Calling this twice with different non-null\n * adapters replaces the previous one (the most recent registration wins);\n * a `console.warn` flags the overwrite so duplicate-provider mounts get\n * caught in dev.\n */\nexport function setEmbedAuthAdapter(adapter: EmbedAuthAdapter | null): void {\n  if (adapter && getRegisteredAuthAdapter() && process.env.NODE_ENV !== 'production') {\n    console.warn(\n      '[setEmbedAuthAdapter] overwriting a previously-registered auth ' +\n        'adapter. Two chat-runtime providers should not coexist — verify ' +\n        'mount order and pass `null` from the unmounting provider.',\n    )\n  }\n  storeRegisteredAuthAdapter(adapter)\n}\n\n/**\n * Whether a host auth adapter is currently registered. Lets sibling helpers\n * (e.g. `contentFetch`) route through `embedAuthedFetch` ONLY when a host has\n * opted into embedded auth, and stay a plain `fetch` otherwise — so there's a\n * single auth knob (the adapter), not a second content-fetch registration.\n */\nexport function hasEmbedAuthAdapter(): boolean {\n  return getRegisteredAuthAdapter() !== null\n}\n\n/**\n * `fetch` wrapper that attaches embed-proxy bearer headers (when\n * present in sessionStorage) and forces `credentials: 'same-origin'`\n * so Supabase auth cookies travel too.\n *\n * **Header merge direction (proxy WINS over caller):** the implementation\n * spreads `baseHeaders` first inside `applyProxyAuth`, then sets the\n * `Authorization` / `X-Chat-*` keys — so the proxy values take precedence\n * over anything the caller passed. The motivation is that the bearer +\n * act-as identity is the source of truth for embedded auth; a caller\n * accidentally passing a stale `Authorization` header should NOT override\n * the live proxy creds.\n *\n * **Cross-origin defense:** the wrapper assumes a same-origin `/api/…`\n * relative URL. Absolute URLs are accepted only when their origin matches\n * the current window's origin; cross-origin URLs throw before the bearer\n * leaves the page. This is a defense-in-depth guard for future call sites\n * — there is no legitimate cross-origin use of this fetch wrapper.\n *\n * **401 self-heal:** when a registered adapter supplies `refresh`, a `401`\n * response triggers a single token refresh + retry of the same request\n * (see `EmbedAuthAdapter.refresh`). This is the openframe `apiClient`'s\n * refresh-then-retry behaviour, lifted into the lib so embedded surfaces\n * no longer need a host-side `window.fetch` monkey-patch to survive an\n * expired access token mid-chat. With no adapter (or no `refresh`), the\n * 401 passes straight through unchanged.\n */\nexport function embedAuthedFetch(url: string, init: RequestInit = {}): Promise<Response> {\n  // Same-origin guard runs SYNCHRONOUSLY (not awaited inside the async\n  // helper below) so a bearer-leaking cross-origin URL throws before any\n  // promise is created — callers and tests rely on the synchronous throw.\n  assertSameOrigin(url)\n\n  // `applyProxyAuth` accepts `Record<string, string>`; normalize the\n  // caller's headers to that shape ONCE, up front. RequestInit accepts\n  // `HeadersInit` which is broader (Headers instance OR array of tuples).\n  // We re-derive the per-request headers from this base on every attempt\n  // (initial + post-refresh retry) so a rotated bearer is picked up.\n  //\n  // When the caller passes no headers, fall back to the same default\n  // `applyProxyAuth` uses internally — `Content-Type: application/json` —\n  // so JSON POSTs keep their content-type when only `embedAuthedFetch(url)`\n  // is used at the call site. GET callers that explicitly want no body\n  // headers can pass `init.headers = {}` to opt out.\n  let baseHeaders: Record<string, string>\n  if (init.headers === undefined) {\n    baseHeaders = { 'Content-Type': 'application/json' }\n  } else {\n    baseHeaders = {}\n    if (init.headers instanceof Headers) {\n      init.headers.forEach((v, k) => {\n        baseHeaders[k] = v\n      })\n    } else if (Array.isArray(init.headers)) {\n      for (const [k, v] of init.headers) baseHeaders[k] = v\n    } else {\n      Object.assign(baseHeaders, init.headers as Record<string, string>)\n    }\n  }\n\n  return fetchWithRefresh(url, init, baseHeaders, false)\n}\n\n/**\n * Single in-flight refresh shared across all concurrent `embedAuthedFetch`\n * callers. A stampede of chat requests that all 401 at the same moment must\n * trigger the adapter's `refresh()` ONCE, not N times — otherwise an\n * expiring session fires a thundering herd of refresh calls at the auth\n * server. Resets to `null` once settled so the next genuine expiry can\n * refresh again.\n */\n// Stored on `globalThis` rather than a module-local so the \"single refresh\"\n// guarantee survives module duplication. Bundlers can ship more than one copy\n// of this module (e.g. across chunks or a host + embedded build); a per-module\n// variable would let each copy run its own refresh cycle, re-creating the\n// thundering-herd this dedupe exists to prevent.\nconst IN_FLIGHT_REFRESH_GLOBAL_KEY = '__embedAuthedFetchInFlightRefresh__'\n\nfunction getInFlightRefresh(): Promise<boolean> | null {\n  if (typeof globalThis === 'undefined') return null\n  return (\n    ((globalThis as Record<string, unknown>)[IN_FLIGHT_REFRESH_GLOBAL_KEY] as\n      | Promise<boolean>\n      | null\n      | undefined) ?? null\n  )\n}\n\nfunction setInFlightRefresh(refresh: Promise<boolean> | null): void {\n  if (typeof globalThis === 'undefined') return\n  ;(globalThis as Record<string, unknown>)[IN_FLIGHT_REFRESH_GLOBAL_KEY] = refresh\n}\n\nfunction dedupedRefresh(): Promise<boolean> {\n  const adapter = getRegisteredAuthAdapter()\n  if (!adapter?.refresh) return Promise.resolve(false)\n  let inFlightRefresh = getInFlightRefresh()\n  if (!inFlightRefresh) {\n    // Wrap in `Promise.resolve` so an adapter that throws synchronously\n    // (rather than rejecting) still funnels through the shared slot and\n    // clears it. A rejected refresh is treated as \"could not refresh\".\n    inFlightRefresh = Promise.resolve()\n      .then(() => adapter.refresh!())\n      .catch(() => false)\n      .finally(() => {\n        setInFlightRefresh(null)\n      })\n    setInFlightRefresh(inFlightRefresh)\n  }\n  return inFlightRefresh\n}\n\n/**\n * Core fetch path: merge proxy-auth + adapter headers, issue the request,\n * and — on a `401` with a refresh-capable adapter — refresh once and retry\n * the identical request a single time. Mirrors the openframe `apiClient`'s\n * refresh-then-retry contract (`isRetry` guards against infinite loops).\n */\nasync function fetchWithRefresh(\n  url: string,\n  init: RequestInit,\n  baseHeaders: Record<string, string>,\n  isRetry: boolean,\n): Promise<Response> {\n  // Re-run the merge each attempt: `applyProxyAuth` reads the latest stored\n  // proxy creds and `getHeaders()` reads the latest bearer, so a retry after\n  // refresh carries the rotated token rather than the stale one. `{...baseHeaders}`\n  // keeps the caller's normalized headers immutable across attempts.\n  const { url: authedUrl, headers } = applyProxyAuth(url, { ...baseHeaders })\n\n  // Host-supplied auth adapter layer. Runs AFTER the proxy-auth merge so\n  // adapter headers override both caller and proxy values — the adapter\n  // is the host's explicit \"this is my auth model\" override, intentionally\n  // last-writer-wins. When no adapter is registered, this is a zero-cost\n  // no-op (object spread of `{}`).\n  const adapter = getRegisteredAuthAdapter()\n  if (adapter?.getHeaders) {\n    // Filter `undefined` values — the adapter type allows them so consumers\n    // don't have to narrow `{ Authorization: token ? '…' : undefined }`-shaped\n    // returns, but `fetch` headers must be strings.\n    for (const [k, v] of Object.entries(adapter.getHeaders())) {\n      if (v !== undefined) headers[k] = v\n    }\n  }\n  const credentials = adapter?.credentials ?? init.credentials ?? 'same-origin'\n\n  const response = await fetch(authedUrl, {\n    ...init,\n    headers,\n    // Default `same-origin` carries Supabase cookies for the MPH proxy-\n    // auth model. Hosts on different origins (openframe-frontend ↔\n    // openframe gateway) register `credentials: 'include'` via the\n    // adapter to make their own cookies travel cross-origin (CORS +\n    // `SameSite=None` must be configured server-side for that to work).\n    credentials,\n  })\n\n  // 401 self-heal: refresh the token once and retry. Only when an adapter\n  // opted into `refresh`, and only on the first attempt — a 401 on the\n  // retry means the fresh token is also unauthorized, so surface it.\n  if (response.status === 401 && !isRetry && adapter?.refresh) {\n    const refreshed = await dedupedRefresh()\n    if (refreshed) {\n      return fetchWithRefresh(url, init, baseHeaders, true)\n    }\n  }\n\n  return response\n}\n\n/**\n * Reject any URL that resolves to a cross-origin destination or to a\n * non-http(s) scheme. Every input is resolved against\n * `window.location.href` so the same rule covers path-only\n * (`/api/...`), absolute (`https://...`), protocol-relative\n * (`//host/...`), AND whitespace-prefixed forms (`\\t//evil.com/...`) —\n * the WHATWG fetch spec strips leading ASCII whitespace before\n * parsing, so any regex-based \"skip relative\" shortcut is bypassable\n * with a leading `\\t`/`\\n`/`\\r`/space. We resolve unconditionally\n * instead and compare origins.\n *\n * Also blocks `javascript:` / `data:` / `blob:` etc. — only `http(s):`\n * is allowed. This is explicit allowlisting rather than relying on\n * `origin === 'null'` to fall out wrong.\n *\n * Server-side rendering: when `typeof window === 'undefined'` we skip\n * the check — the bearer comes from sessionStorage which doesn't exist\n * on the server, so there's nothing to leak anyway.\n */\nfunction assertSameOrigin(url: string): void {\n  if (typeof window === 'undefined') return\n  let target: URL\n  let pageOrigin: string\n  try {\n    target = new URL(url, window.location.href)\n    // Derive the page origin from `href` rather than reading\n    // `window.location.origin` directly so the check works in test\n    // environments that mock `window.location` to a plain object\n    // without an `origin` field (jsdom setups do this).\n    pageOrigin = new URL(window.location.href).origin\n  } catch {\n    throw new Error(`embedAuthedFetch: refusing to fetch malformed URL (${JSON.stringify(url)})`)\n  }\n  if (target.protocol !== 'http:' && target.protocol !== 'https:') {\n    throw new Error(\n      `embedAuthedFetch: refusing non-http(s) URL (${target.protocol}) — pass a relative /api/* path instead`,\n    )\n  }\n  if (target.origin !== pageOrigin) {\n    // Dev-mode escape hatch — embedded apps (e.g. openframe-frontend)\n    // run on a different origin from their gateway during local dev,\n    // and forcing a Next.js `rewrites()` workaround is more error-prone\n    // than relaxing the guard for the dev build. In production\n    // (`NODE_ENV === 'production'`) the guard stays absolute — same\n    // defense-in-depth bearer-leak protection as before. The check is\n    // baked at build time by Next/webpack/Turbopack so prod bundles\n    // contain only the throwing branch (no dev string in the artifact).\n    if (process.env.NODE_ENV !== 'production') {\n      console.warn(\n        `[embedAuthedFetch] cross-origin fetch to ${target.origin} ` +\n          `allowed in dev (NODE_ENV !== 'production'). Production builds ` +\n          `will reject this — wire a same-origin proxy before shipping.`,\n      )\n      return\n    }\n    throw new Error(\n      `embedAuthedFetch: refusing cross-origin fetch to ${target.origin} — pass a relative /api/* path instead`,\n    )\n  }\n}\n","/**\n * useNearViewport — module-level shared IntersectionObserver in hook form.\n *\n * Single IO instance per `rootMargin` value, shared across every component\n * that mounts the hook. Reduces overhead vs. one IO per component on\n * grid/list pages where many subscribers observe the viewport with the same\n * margin. Promoted from the inline singleton at\n * `multi-platform-hub/components/shared/video-bites-display.tsx:21-43`,\n * which is the only IO pattern in either repo today.\n *\n * Usage:\n * ```tsx\n * function MyCard() {\n *   const { ref, isNear } = useNearViewport('500px');\n *   return <div ref={ref}>{isNear ? <HeavyChild /> : <Placeholder />}</div>;\n * }\n * ```\n *\n * StrictMode safety: cleanup uses an identity check on the registered\n * callback so React's dev double-mount (mount → cleanup → re-mount) does\n * not drop the second mount's freshly-set subscription. The IO callback\n * also checks `subscribers.get(target)` before invoking so a fire that\n * races with unmount cannot crash on a torn-down component.\n *\n * The hook fires once — on first intersection it sets `isNear=true` and\n * unobserves the element. Callers that need re-observation should\n * unmount and remount (or fork the hook for two-way behavior).\n */\n\nimport { useEffect, useRef, useState, useCallback } from 'react';\n\n// Per-rootMargin IO map. Multiple call sites with different margins each\n// get their own singleton observer.\nconst observers = new Map<string, IntersectionObserver>();\nconst subscribers = new WeakMap<Element, () => void>();\n\nfunction getObserverFor(rootMargin: string): IntersectionObserver {\n  const existing = observers.get(rootMargin);\n  if (existing) return existing;\n\n  const io = new IntersectionObserver(\n    (entries) => {\n      entries.forEach((entry) => {\n        if (!entry.isIntersecting) return;\n        // Race-safe: re-read the callback at fire time. A late IO firing\n        // after cleanup must not invoke a stale callback.\n        const cb = subscribers.get(entry.target);\n        if (cb) {\n          cb();\n          io.unobserve(entry.target);\n          subscribers.delete(entry.target);\n        }\n      });\n    },\n    { rootMargin }\n  );\n  observers.set(rootMargin, io);\n  return io;\n}\n\nexport interface UseNearViewportResult<T extends Element = HTMLElement> {\n  /** Ref to attach to the element you want to gate on visibility. */\n  ref: (node: T | null) => void;\n  /** Flips to `true` once the element enters within `rootMargin` of the viewport. Never flips back. */\n  isNear: boolean;\n}\n\n/**\n * @param rootMargin Margin around the viewport (CSS-style string).\n *                   '500px' = element starts mounting 500px before scroll-in.\n *                   '1000px' = a full viewport's worth of lookahead.\n *                   '0px' = strict on-screen detection.\n */\nexport function useNearViewport<T extends Element = HTMLElement>(\n  rootMargin: string = '500px'\n): UseNearViewportResult<T> {\n  const [isNear, setIsNear] = useState(false);\n  const elRef = useRef<T | null>(null);\n\n  // Subscribe/unsubscribe on element change.\n  const ref = useCallback(\n    (node: T | null) => {\n      const prev = elRef.current;\n\n      // Unsubscribe previous, if any. Identity-check the callback so a\n      // StrictMode re-mount that has already re-registered keeps its sub.\n      if (prev) {\n        const stillOurs = subscribers.get(prev);\n        if (stillOurs) {\n          subscribers.delete(prev);\n          observers.get(rootMargin)?.unobserve(prev);\n        }\n      }\n\n      elRef.current = node;\n      if (!node) return;\n\n      const cb = () => setIsNear(true);\n      subscribers.set(node, cb);\n      getObserverFor(rootMargin).observe(node);\n    },\n    [rootMargin]\n  );\n\n  // Unsubscribe on unmount. Identity check guards the StrictMode race.\n  useEffect(() => {\n    return () => {\n      const el = elRef.current;\n      if (!el) return;\n      if (subscribers.get(el)) {\n        subscribers.delete(el);\n        observers.get(rootMargin)?.unobserve(el);\n      }\n    };\n  }, [rootMargin]);\n\n  return { ref, isNear };\n}\n","'use client'\n\nimport { useMemo } from 'react'\n\n/**\n * Hook that generates a branded placeholder image URL using the\n * host's `/api/og-placeholder` server-side image generator (or any\n * builder the caller supplies).\n *\n * THIS HOOK IS A THIN CLIENT-SIDE WRAPPER. The hub-side wrapper\n * (`hooks/use-og-placeholder.ts` in multi-platform-hub) injects its\n * canonical `buildOgPlaceholderUrl` from `lib/utils/entity-image.ts`.\n * The lib version takes the builder as an argument so the lib has no\n * hub dependency.\n *\n * @param buildUrl - Function that builds the placeholder URL from a\n *                   title + options object (`{ site?, aspect? }`).\n *                   Hub passes `buildOgPlaceholderUrl` from\n *                   `lib/utils/entity-image.ts`. Embedded apps can\n *                   wire any equivalent that hits their own placeholder\n *                   route.\n * @param title    - Text to display on the placeholder\n * @param siteName - Site name shown below the title (optional —\n *                   defaults to empty)\n * @param enabled  - Whether to generate the URL (default: true)\n * @param aspect   - `'wide'` (1200×630 social-card; default) or `'square'`\n *                   (1024×1024 — used by compact chat-inline card slots\n *                   so `object-cover` doesn't crop the title off).\n * @returns Placeholder image URL or null if disabled / no title\n */\nexport function useOgPlaceholder(\n  buildUrl: (title: string, options: { site?: string; aspect?: 'wide' | 'square' }) => string,\n  title: string | undefined | null,\n  siteName: string = '',\n  enabled: boolean = true,\n  aspect: 'wide' | 'square' = 'wide',\n): string | null {\n  return useMemo(() => {\n    if (!enabled || !title) return null\n    const options: { site?: string; aspect?: 'wide' | 'square' } = {}\n    if (siteName) options.site = siteName\n    if (aspect === 'square') options.aspect = 'square'\n    return buildUrl(title, options)\n  }, [buildUrl, title, siteName, enabled, aspect])\n}\n","'use client'\n\n/**\n * `contentFetch` — the fetch the lib's SELF-FETCHING content surfaces use:\n * roadmap (list + vote + per-task refresh), delivery, product releases,\n * onboarding guides (catalog + detail), legal docs, and the release-detail\n * injected roadmap/delivery sections.\n *\n * It deliberately reuses the SINGLE embed-auth knob — the registered\n * `EmbedAuthAdapter` — instead of introducing a second registration:\n *   - adapter registered (host opted into embedded auth, e.g. openframe-frontend\n *     for its embedded chat) → route through `embedAuthedFetch`, so content GETs/\n *     POSTs carry the SAME bearer/cookie + 401-refresh as the chat.\n *   - no adapter (the public hub, or the embedding example whose proxy injects\n *     auth server-side) → a plain, byte-for-byte unchanged `fetch`.\n *\n * So a host wires auth ONCE (the chat adapter) and content inherits it; there is\n * no content-specific fetcher to configure.\n */\n\nimport { embedAuthedFetch, hasEmbedAuthAdapter } from './embed-authed-fetch'\n\nexport const contentFetch: typeof fetch = (input, init) => {\n  if (!hasEmbedAuthAdapter()) return fetch(input, init)\n  // embedAuthedFetch takes a string url; coerce the broader `fetch` input shape\n  // (content surfaces always pass strings, but handle URL/Request defensively).\n  const url =\n    typeof input === 'string' ? input : input instanceof URL ? input.href : (input as Request).url\n  return embedAuthedFetch(url, init)\n}\n"]}