@geminixiang/mikan 0.3.2 → 0.4.0

package/dist/observability/sentry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.js","sourceRoot":"","sources":["../../src/observability/sentry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,aAAa;IACb,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,aAAa;IACb,eAAe;IACf,MAAM;IACN,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,UAAU;IACV,SAAS;IACT,OAAO;IACP,kBAAkB;IAClB,QAAQ;IACR,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,cAAc;IACd,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,MAAM;IACN,UAAU;IACV,OAAO;IACP,KAAK;IACL,KAAK;IACL,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GACzB,+GAA+G,CAAC;AAClH,MAAM,cAAc,GAAG;IACrB,2BAA2B;IAC3B,gCAAgC;IAChC,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAiBF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAuC,CAAC;AAExE,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,YAAY;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO;QAC/D,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACpE,qBAAqB,EAAE,KAAK;QAC5B,UAAU,EAAE,IAAI;QAChB,UAAU,CAAC,KAAiB,EAAE,IAAe;YAC3C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,cAAc,CAAC,IAAuB;YACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,qBAAqB,CAAC,KAA+B;YACnD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,gBAAgB,CAAC,UAAsB;YACrC,OAAO,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc,EACd,OAAqC;IAErC,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEvC,MAAM,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;QAC5C,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,WAAW;YAAE,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAI,aAAa,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAA6B;SACrE,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAY,EAAE,GAAW,EAAE,KAAyB;IAC1E,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAA8B;IAE9B,OAAO,gBAAgB,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC,cAAc;QACvC,UAAU,EAAE,OAAO,CAAC,cAAc;QAClC,WAAW,EAAE,OAAO,CAAC,UAAU;QAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAyE,EACzE,UAAuC;IAEvC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAA+C,CAAC,CAAC,QAAQ,CAAC;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAuC;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,OAA8B;IACxE,MAAM,UAAU,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAE3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,QAAQ;QAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAElE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAChC,KAAK,CAAC,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,SAAS,EAAE,OAAO,CAAC,cAAc;QACjC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,UAAiE;IAEjE,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAgD,EAAE;QACxF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACxB,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,IAA4D;IAE5D,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,iBAAiB;QAC3B,OAAO;QACP,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAkB,KAAQ,EAAE,KAAiB;IACxE,MAAM,SAAS,GAAM;QACnB,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;aACpD,MAAM,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC;QACxE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAe;QAC/C,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAkB;QACxD,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;KACvB,CAAC;IAEF,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,GAAG;YACnB,GAAG,SAAS,CAAC,QAAQ;YACrB,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAChC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtE,GAAG,KAAK;YACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;YAC9D,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC1B,CAAC,CAAC;oBACE,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC/C,GAAG,KAAK;wBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ;wBAC1E,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;iBACJ;gBACH,CAAC,CAAC,KAAK,CAAC,UAAU;SACrB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAA8B,IAAO;IACvE,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE;YACJ,GAAG,IAAI,CAAC,IAAI;YACZ,GAAG,UAAU;SACd;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAqC,KAAQ;IAC5E,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,EAAE,QAAQ,CAAC;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,MAAM,OAAO,GAAI,SAAoE,CAAC,OAAO,CAAC;IAC9F,KAAK,MAAM,KAAK,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QACnE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAuB,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAsB;IACvD,IAAI,UAAU,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,GAAG,UAAU;QACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO;QACrF,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,IAAI,CAAuB;KAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,GAAY,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAE5C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAClE,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACvF,CAAC;QACF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,OAAO;QACL,GAAG,OAAO;QACV,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,GAAG,IAAI,OAAO,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,KAAK,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC;IACvD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,KAAK,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,aAAa,KAAK,UAAU,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,aAAa,KAAK,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IACrF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,gBAAgB,SAAS,CAAC,MAAM,GAAG,iBAAiB,SAAS,CAAC;IAC/G,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { Breadcrumb, ErrorEvent, Event, EventHint, Scope } from \"@sentry/node\";\nimport * as Sentry from \"@sentry/node\";\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_PATH = \"[REDACTED_PATH]\";\nconst MAX_STRING_LENGTH = 256;\nconst MAX_DEPTH = 4;\n\nconst SENSITIVE_KEYS = new Set([\n  \"accesstoken\",\n  \"apikey\",\n  \"args\",\n  \"attachment\",\n  \"attachments\",\n  \"authorization\",\n  \"body\",\n  \"code\",\n  \"content\",\n  \"contents\",\n  \"cookie\",\n  \"cookies\",\n  \"credential\",\n  \"filepath\",\n  \"headers\",\n  \"image\",\n  \"imageattachments\",\n  \"images\",\n  \"localpath\",\n  \"messages\",\n  \"newusermessage\",\n  \"password\",\n  \"path\",\n  \"paths\",\n  \"prompt\",\n  \"refreshtoken\",\n  \"response\",\n  \"result\",\n  \"secret\",\n  \"systemprompt\",\n  \"text\",\n  \"thinking\",\n  \"token\",\n  \"url\",\n  \"uri\",\n  \"workspacepath\",\n]);\n\nconst ABSOLUTE_PATH_PATTERN =\n  /(?:\\/Users\\/[^\\s\"'`]+|\\/workspace\\/[^\\s\"'`]+|\\/tmp\\/[^\\s\"'`]+|\\/var\\/folders\\/[^\\s\"'`]+|[A-Za-z]:\\\\[^\\s\"'`]+)/;\nconst TOKEN_PATTERNS = [\n  /\\bsk-[A-Za-z0-9_-]{12,}\\b/,\n  /\\bxox[a-z]-[A-Za-z0-9-]{10,}\\b/,\n  /\\bAIza[0-9A-Za-z_-]{20,}\\b/,\n  /\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/,\n];\n\nexport type {\n  ReportUserFacingErrorOptions,\n  SentryAttributionAttributes,\n  SentryRunScopeContext,\n  SentrySpanPayload,\n  SentryTransactionPayload,\n} from \"./types.js\";\nimport type {\n  ReportUserFacingErrorOptions,\n  SentryAttributionAttributes,\n  SentryRunScopeContext,\n  SentrySpanPayload,\n  SentryTransactionPayload,\n} from \"./types.js\";\n\nconst traceAttribution = new Map<string, SentryAttributionAttributes>();\n\nexport function createSentryInitOptions(dsn?: string) {\n  return {\n    dsn,\n    environment: process.env.SENTRY_ENVIRONMENT ?? \"production\",\n    enabled: Boolean(dsn) && process.env.SENTRY_ENABLED !== \"false\",\n    sendDefaultPii: false,\n    tracesSampleRate: process.env.NODE_ENV === \"development\" ? 1.0 : 1.0,\n    includeLocalVariables: false,\n    enableLogs: true,\n    beforeSend(event: ErrorEvent, hint: EventHint): ErrorEvent | null {\n      return sanitizeEvent(event, hint);\n    },\n    beforeSendSpan(span: SentrySpanPayload): SentrySpanPayload {\n      return applySpanAttribution(span);\n    },\n    beforeSendTransaction(event: SentryTransactionPayload): SentryTransactionPayload | null {\n      return sanitizeTransactionEvent(event);\n    },\n    beforeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n      return sanitizeBreadcrumb(breadcrumb);\n    },\n  };\n}\n\nexport function reportUserFacingError(\n  error: unknown,\n  options: ReportUserFacingErrorOptions,\n): string | undefined {\n  if (options.expected) return undefined;\n\n  const exception = error instanceof Error ? error : new Error(String(error));\n  return Sentry.withScope((scope) => {\n    scope.setLevel(options.severity ?? \"error\");\n    scope.setTag(\"user_facing\", \"true\");\n    scope.setTag(\"expected\", \"false\");\n    scope.setTag(\"error_domain\", options.domain);\n    scope.setTag(\"error_surface\", options.surface);\n    scope.setTag(\"operation\", options.operation);\n    setOptionalTag(scope, \"platform\", options.platform);\n    setOptionalTag(scope, \"provider\", options.provider);\n    setOptionalTag(scope, \"model\", options.model);\n    setOptionalTag(scope, \"tool\", options.toolName);\n    setOptionalTag(scope, \"stop_reason\", options.stopReason);\n    for (const [key, value] of Object.entries(options.tags ?? {})) {\n      if (value !== undefined) scope.setTag(key, String(value));\n    }\n    if (options.fingerprint) scope.setFingerprint(options.fingerprint);\n    scope.setContext(\"user_facing_error\", {\n      domain: options.domain,\n      surface: options.surface,\n      operation: options.operation,\n      severity: options.severity ?? \"error\",\n      platform: options.platform,\n      provider: options.provider,\n      model: options.model,\n      toolName: options.toolName,\n      stopReason: options.stopReason,\n      ...(sanitizeValue(options.context ?? {}) as Record<string, unknown>),\n    });\n    return Sentry.captureException(exception);\n  });\n}\n\nfunction setOptionalTag(scope: Scope, key: string, value: string | undefined): void {\n  if (value !== undefined) scope.setTag(key, value);\n}\n\nexport function createRunAttributionAttributes(\n  context: SentryRunScopeContext,\n): SentryAttributionAttributes {\n  return metricAttributes({\n    conversation_id: context.conversationId,\n    channel_id: context.conversationId,\n    session_key: context.sessionKey,\n    message_id: context.messageId,\n    platform: context.platform,\n    user_id: context.userId,\n    thread_ts: context.threadTs,\n    provider: context.provider,\n    model: context.model,\n  });\n}\n\nexport function registerTraceAttribution(\n  span: { setAttributes(attributes: SentryAttributionAttributes): unknown },\n  attributes: SentryAttributionAttributes,\n): void {\n  span.setAttributes(attributes);\n  const traceId = Sentry.spanToJSON(span as Parameters<typeof Sentry.spanToJSON>[0]).trace_id;\n  if (!traceId) return;\n  traceAttribution.set(traceId, { ...traceAttribution.get(traceId), ...attributes });\n}\n\nexport function updateActiveSpanAttribution(attributes: SentryAttributionAttributes): void {\n  const span = Sentry.getActiveSpan();\n  if (!span) return;\n  registerTraceAttribution(span, attributes);\n}\n\nexport function applyRunScope(scope: Scope, context: SentryRunScopeContext): void {\n  const attributes = createRunAttributionAttributes(context);\n\n  for (const [key, value] of Object.entries(attributes)) {\n    scope.setTag(key, value);\n  }\n  scope.setTag(\"conversation_id\", context.conversationId);\n  scope.setTag(\"channel_id\", context.conversationId);\n  if (context.threadTs) scope.setTag(\"thread_ts\", context.threadTs);\n\n  scope.setAttributes(attributes);\n  scope.setUser({\n    id: context.userId,\n    username: context.userName,\n  });\n  scope.setContext(\"agent_run\", {\n    conversationId: context.conversationId,\n    channelId: context.conversationId,\n    sessionKey: context.sessionKey,\n    messageId: context.messageId,\n    threadTs: context.threadTs,\n    platform: context.platform,\n    provider: context.provider,\n    model: context.model,\n  });\n}\n\nexport function metricAttributes(\n  attributes: Record<string, string | number | boolean | undefined>,\n): Record<string, string | number | boolean> {\n  return Object.fromEntries(\n    Object.entries(attributes).filter((entry): entry is [string, string | number | boolean] => {\n      const [, value] = entry;\n      return value !== undefined;\n    }),\n  );\n}\n\nexport function addLifecycleBreadcrumb(\n  message: string,\n  data?: Record<string, string | number | boolean | undefined>,\n): void {\n  Sentry.addBreadcrumb({\n    category: \"agent.lifecycle\",\n    message,\n    level: \"info\",\n    data: data ? metricAttributes(data) : undefined,\n  });\n}\n\nexport function sanitizeEvent<T extends Event>(event: T, _hint?: EventHint): T | null {\n  const sanitized: T = {\n    ...event,\n    breadcrumbs: event.breadcrumbs\n      ?.map((breadcrumb) => sanitizeBreadcrumb(breadcrumb))\n      .filter((breadcrumb): breadcrumb is Breadcrumb => breadcrumb !== null),\n    extra: sanitizeValue(event.extra) as T[\"extra\"],\n    contexts: sanitizeValue(event.contexts) as T[\"contexts\"],\n    request: sanitizeRequest(event.request),\n    user: undefined,\n    server_name: undefined,\n  };\n\n  if (sanitized.message) {\n    sanitized.message = sanitizeString(sanitized.message);\n  }\n\n  if (sanitized.logentry) {\n    sanitized.logentry = {\n      ...sanitized.logentry,\n      message: sanitized.logentry.message ? sanitizeString(sanitized.logentry.message) : undefined,\n    };\n  }\n\n  if (sanitized.exception?.values) {\n    sanitized.exception.values = sanitized.exception.values.map((value) => ({\n      ...value,\n      value: value.value ? sanitizeString(value.value) : value.value,\n      stacktrace: value.stacktrace\n        ? {\n            ...value.stacktrace,\n            frames: value.stacktrace.frames?.map((frame) => ({\n              ...frame,\n              filename: frame.filename ? sanitizeString(frame.filename) : frame.filename,\n              abs_path: frame.abs_path ? sanitizeString(frame.abs_path) : frame.abs_path,\n              vars: undefined,\n            })),\n          }\n        : value.stacktrace,\n    }));\n  }\n\n  return sanitized;\n}\n\nexport function applySpanAttribution<T extends SentrySpanPayload>(span: T): T {\n  const attributes = traceAttribution.get(span.trace_id);\n  if (!attributes) return span;\n  return {\n    ...span,\n    data: {\n      ...span.data,\n      ...attributes,\n    },\n  };\n}\n\nfunction sanitizeTransactionEvent<T extends SentryTransactionPayload>(event: T): T | null {\n  const sanitized = sanitizeEvent(event);\n  if (!sanitized) return null;\n\n  const traceContext = sanitized.contexts?.trace;\n  const traceId = traceContext?.trace_id;\n  if (typeof traceId !== \"string\") return sanitized;\n  const attributes = traceAttribution.get(traceId);\n  if (!attributes) return sanitized;\n\n  const entries = (sanitized as { entries?: Array<{ type?: string; data?: unknown }> }).entries;\n  for (const entry of entries ?? []) {\n    if (entry.type !== \"spans\" || !Array.isArray(entry.data)) continue;\n    entry.data = entry.data.map((span: SentrySpanPayload) => applySpanAttribution(span));\n  }\n\n  traceAttribution.delete(traceId);\n  return sanitized;\n}\n\nexport function sanitizeBreadcrumb(breadcrumb: Breadcrumb): Breadcrumb | null {\n  if (breadcrumb.category === \"console\") {\n    return null;\n  }\n\n  return {\n    ...breadcrumb,\n    message: breadcrumb.message ? sanitizeString(breadcrumb.message) : breadcrumb.message,\n    data: sanitizeValue(breadcrumb.data) as Breadcrumb[\"data\"],\n  };\n}\n\nexport function sanitizeValue(value: unknown, key?: string, depth = 0): unknown {\n  if (value == null) return value;\n  if (depth > MAX_DEPTH) return \"[Truncated]\";\n\n  if (isSensitiveKey(key)) {\n    return summarizeValue(value, key);\n  }\n\n  if (typeof value === \"string\") {\n    return sanitizeString(value);\n  }\n\n  if (Array.isArray(value)) {\n    return value.slice(0, 20).map((entry) => sanitizeValue(entry, key, depth + 1));\n  }\n\n  if (typeof value === \"object\") {\n    const entries = Object.entries(value as Record<string, unknown>).map(\n      ([entryKey, entryValue]) => [entryKey, sanitizeValue(entryValue, entryKey, depth + 1)],\n    );\n    return Object.fromEntries(entries);\n  }\n\n  return value;\n}\n\nfunction sanitizeRequest(request: Event[\"request\"]): Event[\"request\"] {\n  if (!request) return request;\n\n  return {\n    ...request,\n    data: request.data ? summarizeValue(request.data, \"body\") : undefined,\n    headers: undefined,\n    cookies: undefined,\n  };\n}\n\nfunction isSensitiveKey(key?: string): boolean {\n  if (!key) return false;\n  return SENSITIVE_KEYS.has(key.toLowerCase());\n}\n\nfunction summarizeValue(value: unknown, key?: string): string {\n  const label = key ?? \"field\";\n  if (typeof value === \"string\") {\n    return `[Redacted ${label}; length=${value.length}]`;\n  }\n  if (Array.isArray(value)) {\n    return `[Redacted ${label}; items=${value.length}]`;\n  }\n  if (value && typeof value === \"object\") {\n    return `[Redacted ${label}; keys=${Object.keys(value as Record<string, unknown>).length}]`;\n  }\n  return `[Redacted ${label}]`;\n}\n\nfunction sanitizeString(value: string): string {\n  let sanitized = value.replace(new RegExp(ABSOLUTE_PATH_PATTERN, \"g\"), REDACTED_PATH);\n  for (const pattern of TOKEN_PATTERNS) {\n    sanitized = sanitized.replace(new RegExp(pattern, \"g\"), REDACTED);\n  }\n  if (sanitized.length > MAX_STRING_LENGTH) {\n    return `${sanitized.slice(0, MAX_STRING_LENGTH)}… [truncated ${sanitized.length - MAX_STRING_LENGTH} chars]`;\n  }\n  return sanitized;\n}\n"]}

package/dist/observability/types.d.ts

@@ -0,0 +1,47 @@
+import type { Event } from "@sentry/node";
+type SentryPrimitive = string | number | boolean;
+type SentrySpanAttributeValue = SentryPrimitive | Array<null | undefined | string> | Array<null | undefined | number> | Array<null | undefined | boolean>;
+export interface SentryRunScopeContext {
+    conversationId: string;
+    sessionKey: string;
+    messageId: string;
+    platform: string;
+    userId: string;
+    userName?: string;
+    threadTs?: string;
+    provider?: string;
+    model?: string;
+}
+export type SentryAttributionAttributes = Record<string, SentryPrimitive>;
+export interface SentrySpanPayload {
+    trace_id: string;
+    span_id: string;
+    start_timestamp: number;
+    data: Record<string, SentrySpanAttributeValue | undefined>;
+}
+export interface SentryTransactionPayload extends Event {
+    type: "transaction";
+    entries?: Array<{
+        type?: string;
+        data?: unknown;
+    }>;
+}
+type UserFacingErrorDomain = "llm" | "chat_platform" | "mikan" | "sandbox" | "login" | "events" | "session_view";
+type UserFacingErrorSeverity = "warning" | "error" | "fatal";
+export interface ReportUserFacingErrorOptions {
+    domain: UserFacingErrorDomain;
+    surface: string;
+    operation: string;
+    severity?: UserFacingErrorSeverity;
+    platform?: string;
+    provider?: string;
+    model?: string;
+    toolName?: string;
+    stopReason?: string;
+    expected?: boolean;
+    fingerprint?: string[];
+    tags?: Record<string, SentryPrimitive | undefined>;
+    context?: Record<string, unknown>;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/observability/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/observability/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C,KAAK,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AACjD,KAAK,wBAAwB,GACzB,eAAe,GACf,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,GAChC,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,GAChC,KAAK,CAAC,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,CAAC;AAEtC,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAE1E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,wBAAyB,SAAQ,KAAK;IACrD,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,KAAK,qBAAqB,GACtB,KAAK,GACL,eAAe,GACf,OAAO,GACP,SAAS,GACT,OAAO,GACP,QAAQ,GACR,cAAc,CAAC;AAEnB,KAAK,uBAAuB,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC","sourcesContent":["import type { Event } from \"@sentry/node\";\n\ntype SentryPrimitive = string | number | boolean;\ntype SentrySpanAttributeValue =\n  | SentryPrimitive\n  | Array<null | undefined | string>\n  | Array<null | undefined | number>\n  | Array<null | undefined | boolean>;\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n}\n\nexport type SentryAttributionAttributes = Record<string, SentryPrimitive>;\n\nexport interface SentrySpanPayload {\n  trace_id: string;\n  span_id: string;\n  start_timestamp: number;\n  data: Record<string, SentrySpanAttributeValue | undefined>;\n}\n\nexport interface SentryTransactionPayload extends Event {\n  type: \"transaction\";\n  entries?: Array<{ type?: string; data?: unknown }>;\n}\n\ntype UserFacingErrorDomain =\n  | \"llm\"\n  | \"chat_platform\"\n  | \"mikan\"\n  | \"sandbox\"\n  | \"login\"\n  | \"events\"\n  | \"session_view\";\n\ntype UserFacingErrorSeverity = \"warning\" | \"error\" | \"fatal\";\n\nexport interface ReportUserFacingErrorOptions {\n  domain: UserFacingErrorDomain;\n  surface: string;\n  operation: string;\n  severity?: UserFacingErrorSeverity;\n  platform?: string;\n  provider?: string;\n  model?: string;\n  toolName?: string;\n  stopReason?: string;\n  expected?: boolean;\n  fingerprint?: string[];\n  tags?: Record<string, SentryPrimitive | undefined>;\n  context?: Record<string, unknown>;\n}\n"]}

package/dist/observability/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/observability/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/observability/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Event } from \"@sentry/node\";\n\ntype SentryPrimitive = string | number | boolean;\ntype SentrySpanAttributeValue =\n  | SentryPrimitive\n  | Array<null | undefined | string>\n  | Array<null | undefined | number>\n  | Array<null | undefined | boolean>;\n\nexport interface SentryRunScopeContext {\n  conversationId: string;\n  sessionKey: string;\n  messageId: string;\n  platform: string;\n  userId: string;\n  userName?: string;\n  threadTs?: string;\n  provider?: string;\n  model?: string;\n}\n\nexport type SentryAttributionAttributes = Record<string, SentryPrimitive>;\n\nexport interface SentrySpanPayload {\n  trace_id: string;\n  span_id: string;\n  start_timestamp: number;\n  data: Record<string, SentrySpanAttributeValue | undefined>;\n}\n\nexport interface SentryTransactionPayload extends Event {\n  type: \"transaction\";\n  entries?: Array<{ type?: string; data?: unknown }>;\n}\n\ntype UserFacingErrorDomain =\n  | \"llm\"\n  | \"chat_platform\"\n  | \"mikan\"\n  | \"sandbox\"\n  | \"login\"\n  | \"events\"\n  | \"session_view\";\n\ntype UserFacingErrorSeverity = \"warning\" | \"error\" | \"fatal\";\n\nexport interface ReportUserFacingErrorOptions {\n  domain: UserFacingErrorDomain;\n  surface: string;\n  operation: string;\n  severity?: UserFacingErrorSeverity;\n  platform?: string;\n  provider?: string;\n  model?: string;\n  toolName?: string;\n  stopReason?: string;\n  expected?: boolean;\n  fingerprint?: string[];\n  tags?: Record<string, SentryPrimitive | undefined>;\n  context?: Record<string, unknown>;\n}\n"]}

package/dist/{ui-copy.d.ts → platform-messages.d.ts}

@@ -9,4 +9,4 @@ export declare function formatAlreadyWorking(source: PlatformSource, stopCommand
 }): string;
 export declare function formatForceStopped(source: PlatformSource, actorLabel: string): string;
 export {};
-//# sourceMappingURL=ui-copy.d.ts.map
+//# sourceMappingURL=platform-messages.d.ts.map

package/dist/platform-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-messages.d.ts","sourceRoot":"","sources":["../src/platform-messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEtD,eAAO,MAAM,YAAY,UAAU,CAAC;AAEpC,KAAK,cAAc,GAAG,GAAG,GAAG,YAAY,GAAG,MAAM,CAAC;AAoBlD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAE5D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,GAC7B,MAAM,CAMR;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAErF","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mikan\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatStopped(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopped.\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}

package/dist/{ui-copy.js → platform-messages.js}

@@ -33,4 +33,4 @@ export function formatAlreadyWorking(source, stopCommand, options) {
 export function formatForceStopped(source, actorLabel) {
     return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);
 }
-//# sourceMappingURL=ui-copy.js.map
+//# sourceMappingURL=platform-messages.js.map

package/dist/platform-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-messages.js","sourceRoot":"","sources":["../src/platform-messages.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AAIpC,SAAS,mBAAmB,CAAC,MAAsB;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,iBAAiB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB;IAClD,OAAO,YAAY,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB,EAAE,IAAY;IACtD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,IAAY;IACpD,OAAO,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAsB,EACtB,WAAmB,EACnB,OAA8B;IAE9B,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACvF,OAAO,YAAY,CAAC,YAAY,EAAE,GAAG,MAAM,SAAS,OAAO,aAAa,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,UAAkB;IAC3E,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,oBAAoB,UAAU,GAAG,CAAC,CAAC;AACtF,CAAC","sourcesContent":["import type { Bot, PlatformInfo } from \"./adapter.js\";\n\nexport const PRODUCT_NAME = \"mikan\";\n\ntype PlatformSource = Bot | PlatformInfo | string;\n\nfunction resolvePlatformName(source: PlatformSource): string {\n  if (typeof source === \"string\") return source;\n  if (\"getPlatformInfo\" in source) return source.getPlatformInfo().name;\n  return source.name;\n}\n\nfunction supportsHtmlFormatting(platformName: string): boolean {\n  return platformName === \"telegram\";\n}\n\nfunction formatItalic(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? text : `_${text}_`;\n}\n\nfunction formatCode(platformName: string, text: string): string {\n  return supportsHtmlFormatting(platformName) ? `<code>${text}</code>` : `\\`${text}\\``;\n}\n\nexport function formatNothingRunning(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Nothing running.\");\n}\n\nexport function formatStopping(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopping…\");\n}\n\nexport function formatStopped(source: PlatformSource): string {\n  return formatItalic(resolvePlatformName(source), \"Stopped.\");\n}\n\nexport function formatAlreadyWorking(\n  source: PlatformSource,\n  stopCommand: string,\n  options?: { scope?: \"thread\" },\n): string {\n  const platformName = resolvePlatformName(source);\n  const command = formatCode(platformName, stopCommand);\n  const prefix =\n    options?.scope === \"thread\" ? \"Already working in this thread.\" : \"Already working.\";\n  return formatItalic(platformName, `${prefix} Send ${command} to cancel.`);\n}\n\nexport function formatForceStopped(source: PlatformSource, actorLabel: string): string {\n  return formatItalic(resolvePlatformName(source), `Force stopped by ${actorLabel}.`);\n}\n"]}

package/dist/portal-shell.d.ts

@@ -1,30 +1,4 @@
-type PortalView = "admin" | "session" | "vault";
-export interface PortalShellOptions {
-    activeView: PortalView;
-    pageTitle: string;
-    identity?: {
-        primary: string;
-        secondary?: string;
-    };
-    conversationSwitcher?: {
-        currentId: string;
-        options?: Array<{
-            id: string;
-            label: string;
-            running?: boolean;
-        }>;
-    };
-    navLinks?: Partial<Record<PortalView, string>>;
-    body: string;
-    /** Additional CSS appended after the shared stylesheet. */
-    extraStyles?: string;
-    /** Inline script run after body. */
-    inlineScript?: string;
-    /** Extra <head> markup (e.g., third-party fonts already loaded by shared CSS, so usually empty). */
-    extraHead?: string;
-    /** Body-level data-* attributes (e.g., data-session-running). */
-    bodyAttributes?: Record<string, string>;
-}
+export type { PortalShellOptions } from "./types.js";
+import type { PortalShellOptions } from "./types.js";
 export declare function renderPortalShell(options: PortalShellOptions): string;
-export {};
 //# sourceMappingURL=portal-shell.d.ts.map

package/dist/portal-shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal-shell.d.ts","sourceRoot":"","sources":["../src/portal-shell.ts"],"names":[],"mappings":"AAcA,KAAK,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,oBAAoB,CAAC,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;KACnE,CAAC;IACF,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AA+ED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CA8BrE","sourcesContent":["import { escapeHtml } from \"./html.js\";\nimport { PRODUCT_NAME } from \"./ui-copy.js\";\n\n// ── Shared portal shell ────────────────────────────────────────────────────────\n//\n// Three portals (admin / session / vault aka login) share the same chrome:\n// - Fixed left rail with three round icon buttons (admin, session, vault)\n// - Compact topbar (product wordmark + identity + optional conversation switcher)\n// - Main content area\n//\n// Each portal renders its own page-head + body inside <main class=\"shell\">.\n// Sidebar buttons whose target token isn't available are rendered as anchors\n// only when href is provided; otherwise they are buttons in a disabled state.\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  /** Additional CSS appended after the shared stylesheet. */\n  extraStyles?: string;\n  /** Inline script run after body. */\n  inlineScript?: string;\n  /** Extra <head> markup (e.g., third-party fonts already loaded by shared CSS, so usually empty). */\n  extraHead?: string;\n  /** Body-level data-* attributes (e.g., data-session-running). */\n  bodyAttributes?: Record<string, string>;\n}\n\nconst NAV_ICONS: Record<PortalView, { label: string; svg: string }> = {\n  admin: {\n    label: \"Admin\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"3\"/>\n      <path d=\"M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09a1.65 1.65 0 0 0-1-1.51 1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09a1.65 1.65 0 0 0 1.51-1 1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33h.01a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82v.01a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z\"/>\n    </svg>`,\n  },\n  session: {\n    label: \"Session\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M21 11.5a8.38 8.38 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.38 8.38 0 0 1-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.38 8.38 0 0 1 3.8-.9h.5a8.48 8.48 0 0 1 8 8v.5z\"/>\n    </svg>`,\n  },\n  vault: {\n    label: \"Vault\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\" ry=\"2\"/>\n      <path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/>\n    </svg>`,\n  },\n};\n\nfunction renderNav(activeView: PortalView, navLinks: Partial<Record<PortalView, string>>): string {\n  const views: PortalView[] = [\"admin\", \"session\", \"vault\"];\n  const buttons = views.map((view) => {\n    const meta = NAV_ICONS[view];\n    const isActive = view === activeView;\n    const href = navLinks[view];\n    const baseClass = `view-nav-btn${isActive ? \" active\" : \"\"}${!href && !isActive ? \" disabled\" : \"\"}`;\n    const attrs = `data-view=\"${view}\" aria-label=\"${escapeHtml(meta.label)}\" data-tooltip=\"${escapeHtml(meta.label)}\"`;\n    if (href && !isActive) {\n      return `<a class=\"${baseClass}\" href=\"${escapeHtml(href)}\" ${attrs}>${meta.svg}</a>`;\n    }\n    if (isActive) {\n      return `<span class=\"${baseClass}\" aria-current=\"page\" ${attrs}>${meta.svg}</span>`;\n    }\n    return `<span class=\"${baseClass}\" aria-disabled=\"true\" ${attrs} data-tooltip=\"${escapeHtml(meta.label)} (no token)\">${meta.svg}</span>`;\n  });\n  return `<nav class=\"floating-view-nav\" aria-label=\"Primary views\">${buttons.join(\"\")}</nav>`;\n}\n\nfunction renderTopbar(options: PortalShellOptions): string {\n  const identity = options.identity\n    ? `<span class=\"topbar-user\">${escapeHtml(options.identity.primary)}${options.identity.secondary ? ` · ${escapeHtml(options.identity.secondary)}` : \"\"}</span>`\n    : \"\";\n\n  let switcher = \"\";\n  if (options.conversationSwitcher) {\n    const { currentId, options: convOptions } = options.conversationSwitcher;\n    if (convOptions && convOptions.length > 0) {\n      const opts = convOptions\n        .map((c) => {\n          const label = `${c.label}${c.running ? \" (running)\" : \"\"}`;\n          const selected = c.id === currentId ? \" selected\" : \"\";\n          return `<option value=\"${escapeHtml(c.id)}\"${selected}>${escapeHtml(label)}</option>`;\n        })\n        .join(\"\");\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\">${opts}</select>`;\n    } else {\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\"><option>${escapeHtml(currentId)}</option></select>`;\n    }\n  }\n\n  return `<header class=\"topbar\">\n    <div class=\"topbar-brand\">\n      <span class=\"topbar-wordmark\">${PRODUCT_NAME}</span>\n      <span class=\"topbar-sep\">·</span>\n      <span class=\"topbar-title\">${escapeHtml(options.pageTitle)}</span>\n    </div>\n    <div class=\"topbar-meta\">\n      ${identity}\n      ${switcher}\n    </div>\n  </header>`;\n}\n\nexport function renderPortalShell(options: PortalShellOptions): string {\n  const bodyAttrs = Object.entries(options.bodyAttributes ?? {})\n    .map(([key, value]) => `${escapeHtml(key)}=\"${escapeHtml(value)}\"`)\n    .join(\" \");\n  const titleText = `${options.pageTitle} — ${PRODUCT_NAME}`;\n  const nav = renderNav(options.activeView, options.navLinks ?? {});\n  const topbar = renderTopbar(options);\n  const extraStyles = options.extraStyles ? `<style>${options.extraStyles}</style>` : \"\";\n  const inlineScript = options.inlineScript ? `<script>${options.inlineScript}</script>` : \"\";\n  const extraHead = options.extraHead ?? \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${escapeHtml(titleText)}</title>\n  <style>${portalShellStyles}</style>\n  ${extraStyles}\n  ${extraHead}\n</head>\n<body${bodyAttrs ? ` ${bodyAttrs}` : \"\"}>\n  ${nav}\n  <main class=\"shell\">\n    ${topbar}\n    ${options.body}\n  </main>\n  ${inlineScript}\n</body>\n</html>`;\n}\n\n// ── Shared stylesheet ──────────────────────────────────────────────────────────\n\nconst portalShellStyles = `\n  @import url('https://fonts.googleapis.com/css2?family=Lora:wght@400;600&family=DM+Sans:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap');\n\n  :root {\n    --bg: #f0ece3;\n    --surface: #ffffff;\n    --border: rgba(0, 0, 0, 0.08);\n    --text: #18181b;\n    --muted: #71717a;\n    --subtle: #a1a1aa;\n    --accent: #d97706;\n\n    --ok-bg: #f0fdf4;\n    --ok-text: #15803d;\n    --ok-border: rgba(21, 128, 61, 0.16);\n    --warn-bg: #fffbeb;\n    --warn-text: #92400e;\n    --err-bg: #fef2f2;\n    --err-text: #b91c1c;\n    --err-border: rgba(185, 28, 28, 0.14);\n  }\n\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n\n  body {\n    min-height: 100vh;\n    padding: 28px 24px 60px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    background-color: var(--bg);\n    background-image: radial-gradient(ellipse 80% 40% at 50% -10%, rgba(255,255,255,0.65) 0%, transparent 70%);\n    color: var(--text);\n    font-family: 'DM Sans', 'Segoe UI', system-ui, sans-serif;\n    font-size: 15px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n  }\n\n  .shell {\n    width: 100%;\n    max-width: 960px;\n    margin-left: 72px;\n    display: flex;\n    flex-direction: column;\n    gap: 18px;\n  }\n\n  /* ── Topbar ─────────────────────────────────────────────────────────── */\n\n  .topbar {\n    display: flex; align-items: center; justify-content: space-between;\n    gap: 16px; padding: 10px 18px;\n    border: 1px solid var(--border); border-radius: 14px;\n    background: rgba(255,255,255,0.7); backdrop-filter: blur(8px);\n  }\n  .topbar-brand { display: flex; align-items: baseline; gap: 8px; min-width: 0; }\n  .topbar-wordmark {\n    font-family: 'Lora', Georgia, serif; font-size: 1.05rem; font-weight: 600;\n    color: var(--text); letter-spacing: -0.01em;\n  }\n  .topbar-sep { color: var(--subtle); font-size: 0.9rem; }\n  .topbar-title { font-size: 0.86rem; color: var(--muted); font-weight: 500; }\n  .topbar-meta {\n    display: flex; align-items: center; gap: 12px; min-width: 0; flex-wrap: wrap;\n    justify-content: flex-end;\n  }\n  .topbar-user {\n    font-size: 0.8rem; color: var(--muted);\n    padding: 4px 10px; border-radius: 999px; background: rgba(0,0,0,0.04);\n    white-space: nowrap;\n  }\n  .conv-inline-select {\n    max-width: min(360px, 100%);\n    padding: 6px 10px; border: 1px solid var(--border); border-radius: 10px;\n    background: #fff; font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.76rem;\n    color: var(--text); cursor: pointer;\n    transition: border-color 120ms;\n  }\n  .conv-inline-select:hover { border-color: rgba(0,0,0,0.18); }\n  .conv-inline-select:focus-visible { outline: 2px solid var(--text); outline-offset: 1px; }\n\n  /* ── Floating icon nav ──────────────────────────────────────────────── */\n\n  .floating-view-nav {\n    position: fixed;\n    left: 20px;\n    top: 50%;\n    transform: translateY(-50%);\n    z-index: 20;\n    display: flex;\n    flex-direction: column;\n    gap: 4px;\n    padding: 6px;\n    border: 1px solid var(--border);\n    border-radius: 999px;\n    background: rgba(255,255,255,0.88);\n    box-shadow: 0 10px 32px rgba(0,0,0,0.10), 0 2px 6px rgba(0,0,0,0.04);\n    backdrop-filter: blur(14px);\n  }\n  .view-nav-btn {\n    position: relative;\n    display: flex; align-items: center; justify-content: center;\n    width: 40px; height: 40px;\n    border: none; border-radius: 999px; background: transparent;\n    color: var(--muted); cursor: pointer;\n    text-decoration: none;\n    transition: background 160ms, color 160ms, transform 160ms;\n  }\n  .view-nav-btn:hover { background: rgba(0,0,0,0.05); color: var(--text); }\n  .view-nav-btn:active { transform: scale(0.94); }\n  .view-nav-btn.active {\n    background: var(--text); color: #fff;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.18);\n    cursor: default;\n  }\n  .view-nav-btn.disabled {\n    opacity: 0.4; cursor: not-allowed;\n  }\n  .view-nav-btn.disabled:hover { background: transparent; color: var(--muted); }\n  .view-nav-btn svg { display: block; }\n\n  /* Tooltip */\n  .view-nav-btn::after {\n    content: attr(data-tooltip);\n    position: absolute;\n    left: calc(100% + 12px);\n    top: 50%;\n    transform: translateY(-50%) translateX(-4px);\n    padding: 5px 10px;\n    border-radius: 8px;\n    background: var(--text);\n    color: #fff;\n    font: 500 0.76rem/1 'DM Sans', sans-serif;\n    white-space: nowrap;\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms, transform 140ms;\n    box-shadow: 0 4px 12px rgba(0,0,0,0.16);\n  }\n  .view-nav-btn::before {\n    content: '';\n    position: absolute;\n    left: calc(100% + 6px);\n    top: 50%;\n    transform: translateY(-50%);\n    border: 5px solid transparent;\n    border-right-color: var(--text);\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms;\n  }\n  .view-nav-btn:hover::after,\n  .view-nav-btn:focus-visible::after {\n    opacity: 1;\n    transform: translateY(-50%) translateX(0);\n  }\n  .view-nav-btn:hover::before,\n  .view-nav-btn:focus-visible::before {\n    opacity: 1;\n  }\n\n  /* ── Generic page-head ───────────────────────────────────────────────── */\n\n  .page-head {\n    display: flex; justify-content: space-between; align-items: flex-start; gap: 14px;\n    padding: 2px 4px;\n  }\n  .page-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.35rem, 2.4vw, 1.6rem);\n    font-weight: 600; line-height: 1.2; letter-spacing: -0.01em;\n  }\n  .page-desc { color: var(--muted); font-size: 0.9rem; margin-top: 4px; }\n  .eyebrow {\n    color: var(--subtle); font-size: 0.72rem; font-weight: 600;\n    letter-spacing: 0.12em; text-transform: uppercase; margin-bottom: 6px;\n  }\n\n  /* ── Cards ──────────────────────────────────────────────────────────── */\n\n  .card {\n    padding: 24px 28px;\n    border: 1px solid var(--border);\n    border-radius: 20px;\n    background: var(--surface);\n    box-shadow: 0 1px 2px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.06);\n  }\n  .card-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.1rem, 2vw, 1.3rem);\n    font-weight: 600; line-height: 1.25; letter-spacing: -0.01em;\n    margin-bottom: 10px;\n  }\n  .card-subtitle { font-size: 1rem; font-weight: 650; margin-bottom: 10px; line-height: 1.3; }\n\n  code {\n    font-family: 'JetBrains Mono', ui-monospace, monospace;\n    font-size: 0.82em; padding: 0.14em 0.36em;\n    border-radius: 6px; background: rgba(0,0,0,0.05); color: var(--text);\n  }\n\n  button:focus-visible { outline: 2px solid var(--text); outline-offset: 2px; }\n\n  .primary-action-btn {\n    padding: 9px 16px;\n    border: none; border-radius: 10px;\n    background: var(--text); color: #fff;\n    font: 500 0.86rem/1.2 'DM Sans', sans-serif;\n    cursor: pointer;\n    transition: opacity 120ms;\n  }\n  .primary-action-btn:hover:not(:disabled) { opacity: 0.85; }\n  .primary-action-btn:disabled { opacity: 0.5; cursor: wait; }\n\n  .loading-msg { color: var(--muted); font-size: 0.9rem; padding: 8px 0; }\n  .err-msg {\n    padding: 12px 16px; border-radius: 10px;\n    background: var(--err-bg); color: var(--err-text);\n    border: 1px solid var(--err-border); font-size: 0.88rem;\n  }\n  .empty-state {\n    padding: 18px 8px; text-align: center; color: var(--muted);\n    font-size: 0.88rem;\n  }\n  .inline-result {\n    padding: 8px 12px; border-radius: 8px; font-size: 0.82rem; margin-top: 4px;\n  }\n  .inline-result.ok { background: var(--ok-bg); color: var(--ok-text); border: 1px solid var(--ok-border); }\n  .inline-result.err { background: var(--err-bg); color: var(--err-text); border: 1px solid var(--err-border); }\n\n  @media (max-width: 900px) {\n    .shell { margin-left: 0; }\n    .floating-view-nav {\n      left: 50%; right: auto; top: auto; bottom: 18px;\n      transform: translateX(-50%); flex-direction: row;\n    }\n    .view-nav-btn::after {\n      left: 50%; top: auto; bottom: calc(100% + 10px);\n      transform: translateX(-50%) translateY(4px);\n    }\n    .view-nav-btn::before {\n      left: 50%; top: auto; bottom: calc(100% + 4px);\n      transform: translateX(-50%);\n      border-right-color: transparent;\n      border-top-color: var(--text);\n    }\n    .view-nav-btn:hover::after,\n    .view-nav-btn:focus-visible::after { transform: translateX(-50%) translateY(0); }\n  }\n\n  @media (max-width: 640px) {\n    body { padding: 16px 12px 96px; }\n    .topbar { padding: 10px 14px; border-radius: 12px; }\n    .topbar-meta { gap: 8px; }\n    .page-head { padding-inline: 2px; }\n    .card { padding: 18px; border-radius: 16px; }\n  }\n`;\n"]}
+{"version":3,"file":"portal-shell.d.ts","sourceRoot":"","sources":["../src/portal-shell.ts"],"names":[],"mappings":"AAcA,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAiFrD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CA8BrE","sourcesContent":["import { escapeHtml } from \"./utils/html.js\";\nimport { PRODUCT_NAME } from \"./platform-messages.js\";\n\n// ── Shared portal shell ────────────────────────────────────────────────────────\n//\n// Three portals (admin / session / vault aka login) share the same chrome:\n// - Fixed left rail with three round icon buttons (admin, session, vault)\n// - Compact topbar (product wordmark + identity + optional conversation switcher)\n// - Main content area\n//\n// Each portal renders its own page-head + body inside <main class=\"shell\">.\n// Sidebar buttons whose target token isn't available are rendered as anchors\n// only when href is provided; otherwise they are buttons in a disabled state.\n\nexport type { PortalShellOptions } from \"./types.js\";\nimport type { PortalShellOptions } from \"./types.js\";\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nconst NAV_ICONS: Record<PortalView, { label: string; svg: string }> = {\n  admin: {\n    label: \"Admin\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"3\"/>\n      <path d=\"M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09a1.65 1.65 0 0 0-1-1.51 1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09a1.65 1.65 0 0 0 1.51-1 1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33h.01a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82v.01a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z\"/>\n    </svg>`,\n  },\n  session: {\n    label: \"Session\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M21 11.5a8.38 8.38 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.38 8.38 0 0 1-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.38 8.38 0 0 1 3.8-.9h.5a8.48 8.48 0 0 1 8 8v.5z\"/>\n    </svg>`,\n  },\n  vault: {\n    label: \"Vault\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\" ry=\"2\"/>\n      <path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/>\n    </svg>`,\n  },\n};\n\nfunction renderNav(activeView: PortalView, navLinks: Partial<Record<PortalView, string>>): string {\n  const views: PortalView[] = [\"admin\", \"session\", \"vault\"];\n  const buttons = views.map((view) => {\n    const meta = NAV_ICONS[view];\n    const isActive = view === activeView;\n    const href = navLinks[view];\n    const baseClass = `view-nav-btn${isActive ? \" active\" : \"\"}${!href && !isActive ? \" disabled\" : \"\"}`;\n    const attrs = `data-view=\"${view}\" aria-label=\"${escapeHtml(meta.label)}\" data-tooltip=\"${escapeHtml(meta.label)}\"`;\n    if (href && !isActive) {\n      return `<a class=\"${baseClass}\" href=\"${escapeHtml(href)}\" ${attrs}>${meta.svg}</a>`;\n    }\n    if (isActive) {\n      return `<span class=\"${baseClass}\" aria-current=\"page\" ${attrs}>${meta.svg}</span>`;\n    }\n    return `<span class=\"${baseClass}\" aria-disabled=\"true\" ${attrs} data-tooltip=\"${escapeHtml(meta.label)} (no token)\">${meta.svg}</span>`;\n  });\n  return `<nav class=\"floating-view-nav\" aria-label=\"Primary views\">${buttons.join(\"\")}</nav>`;\n}\n\nfunction renderTopbar(options: PortalShellOptions): string {\n  const identity = options.identity\n    ? `<span class=\"topbar-user\">${escapeHtml(options.identity.primary)}${options.identity.secondary ? ` · ${escapeHtml(options.identity.secondary)}` : \"\"}</span>`\n    : \"\";\n\n  let switcher = \"\";\n  if (options.conversationSwitcher) {\n    const { currentId, options: convOptions } = options.conversationSwitcher;\n    if (convOptions && convOptions.length > 0) {\n      const opts = convOptions\n        .map((c) => {\n          const label = `${c.label}${c.running ? \" (running)\" : \"\"}`;\n          const selected = c.id === currentId ? \" selected\" : \"\";\n          return `<option value=\"${escapeHtml(c.id)}\"${selected}>${escapeHtml(label)}</option>`;\n        })\n        .join(\"\");\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\">${opts}</select>`;\n    } else {\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\"><option>${escapeHtml(currentId)}</option></select>`;\n    }\n  }\n\n  return `<header class=\"topbar\">\n    <div class=\"topbar-brand\">\n      <span class=\"topbar-wordmark\">${PRODUCT_NAME}</span>\n      <span class=\"topbar-sep\">·</span>\n      <span class=\"topbar-title\">${escapeHtml(options.pageTitle)}</span>\n    </div>\n    <div class=\"topbar-meta\">\n      ${identity}\n      ${switcher}\n    </div>\n  </header>`;\n}\n\nexport function renderPortalShell(options: PortalShellOptions): string {\n  const bodyAttrs = Object.entries(options.bodyAttributes ?? {})\n    .map(([key, value]) => `${escapeHtml(key)}=\"${escapeHtml(value)}\"`)\n    .join(\" \");\n  const titleText = `${options.pageTitle} — ${PRODUCT_NAME}`;\n  const nav = renderNav(options.activeView, options.navLinks ?? {});\n  const topbar = renderTopbar(options);\n  const extraStyles = options.extraStyles ? `<style>${options.extraStyles}</style>` : \"\";\n  const inlineScript = options.inlineScript ? `<script>${options.inlineScript}</script>` : \"\";\n  const extraHead = options.extraHead ?? \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${escapeHtml(titleText)}</title>\n  <style>${portalShellStyles}</style>\n  ${extraStyles}\n  ${extraHead}\n</head>\n<body${bodyAttrs ? ` ${bodyAttrs}` : \"\"}>\n  ${nav}\n  <main class=\"shell\">\n    ${topbar}\n    ${options.body}\n  </main>\n  ${inlineScript}\n</body>\n</html>`;\n}\n\n// ── Shared stylesheet ──────────────────────────────────────────────────────────\n\nconst portalShellStyles = `\n  @import url('https://fonts.googleapis.com/css2?family=Lora:wght@400;600&family=DM+Sans:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap');\n\n  :root {\n    --bg: #f0ece3;\n    --surface: #ffffff;\n    --border: rgba(0, 0, 0, 0.08);\n    --text: #18181b;\n    --muted: #71717a;\n    --subtle: #a1a1aa;\n    --accent: #d97706;\n\n    --ok-bg: #f0fdf4;\n    --ok-text: #15803d;\n    --ok-border: rgba(21, 128, 61, 0.16);\n    --warn-bg: #fffbeb;\n    --warn-text: #92400e;\n    --err-bg: #fef2f2;\n    --err-text: #b91c1c;\n    --err-border: rgba(185, 28, 28, 0.14);\n  }\n\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n\n  body {\n    min-height: 100vh;\n    padding: 28px 24px 60px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    background-color: var(--bg);\n    background-image: radial-gradient(ellipse 80% 40% at 50% -10%, rgba(255,255,255,0.65) 0%, transparent 70%);\n    color: var(--text);\n    font-family: 'DM Sans', 'Segoe UI', system-ui, sans-serif;\n    font-size: 15px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n  }\n\n  .shell {\n    width: 100%;\n    max-width: 960px;\n    margin-left: 72px;\n    display: flex;\n    flex-direction: column;\n    gap: 18px;\n  }\n\n  /* ── Topbar ─────────────────────────────────────────────────────────── */\n\n  .topbar {\n    display: flex; align-items: center; justify-content: space-between;\n    gap: 16px; padding: 10px 18px;\n    border: 1px solid var(--border); border-radius: 14px;\n    background: rgba(255,255,255,0.7); backdrop-filter: blur(8px);\n  }\n  .topbar-brand { display: flex; align-items: baseline; gap: 8px; min-width: 0; }\n  .topbar-wordmark {\n    font-family: 'Lora', Georgia, serif; font-size: 1.05rem; font-weight: 600;\n    color: var(--text); letter-spacing: -0.01em;\n  }\n  .topbar-sep { color: var(--subtle); font-size: 0.9rem; }\n  .topbar-title { font-size: 0.86rem; color: var(--muted); font-weight: 500; }\n  .topbar-meta {\n    display: flex; align-items: center; gap: 12px; min-width: 0; flex-wrap: wrap;\n    justify-content: flex-end;\n  }\n  .topbar-user {\n    font-size: 0.8rem; color: var(--muted);\n    padding: 4px 10px; border-radius: 999px; background: rgba(0,0,0,0.04);\n    white-space: nowrap;\n  }\n  .conv-inline-select {\n    max-width: min(360px, 100%);\n    padding: 6px 10px; border: 1px solid var(--border); border-radius: 10px;\n    background: #fff; font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.76rem;\n    color: var(--text); cursor: pointer;\n    transition: border-color 120ms;\n  }\n  .conv-inline-select:hover { border-color: rgba(0,0,0,0.18); }\n  .conv-inline-select:focus-visible { outline: 2px solid var(--text); outline-offset: 1px; }\n\n  /* ── Floating icon nav ──────────────────────────────────────────────── */\n\n  .floating-view-nav {\n    position: fixed;\n    left: 20px;\n    top: 50%;\n    transform: translateY(-50%);\n    z-index: 20;\n    display: flex;\n    flex-direction: column;\n    gap: 4px;\n    padding: 6px;\n    border: 1px solid var(--border);\n    border-radius: 999px;\n    background: rgba(255,255,255,0.88);\n    box-shadow: 0 10px 32px rgba(0,0,0,0.10), 0 2px 6px rgba(0,0,0,0.04);\n    backdrop-filter: blur(14px);\n  }\n  .view-nav-btn {\n    position: relative;\n    display: flex; align-items: center; justify-content: center;\n    width: 40px; height: 40px;\n    border: none; border-radius: 999px; background: transparent;\n    color: var(--muted); cursor: pointer;\n    text-decoration: none;\n    transition: background 160ms, color 160ms, transform 160ms;\n  }\n  .view-nav-btn:hover { background: rgba(0,0,0,0.05); color: var(--text); }\n  .view-nav-btn:active { transform: scale(0.94); }\n  .view-nav-btn.active {\n    background: var(--text); color: #fff;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.18);\n    cursor: default;\n  }\n  .view-nav-btn.disabled {\n    opacity: 0.4; cursor: not-allowed;\n  }\n  .view-nav-btn.disabled:hover { background: transparent; color: var(--muted); }\n  .view-nav-btn svg { display: block; }\n\n  /* Tooltip */\n  .view-nav-btn::after {\n    content: attr(data-tooltip);\n    position: absolute;\n    left: calc(100% + 12px);\n    top: 50%;\n    transform: translateY(-50%) translateX(-4px);\n    padding: 5px 10px;\n    border-radius: 8px;\n    background: var(--text);\n    color: #fff;\n    font: 500 0.76rem/1 'DM Sans', sans-serif;\n    white-space: nowrap;\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms, transform 140ms;\n    box-shadow: 0 4px 12px rgba(0,0,0,0.16);\n  }\n  .view-nav-btn::before {\n    content: '';\n    position: absolute;\n    left: calc(100% + 6px);\n    top: 50%;\n    transform: translateY(-50%);\n    border: 5px solid transparent;\n    border-right-color: var(--text);\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms;\n  }\n  .view-nav-btn:hover::after,\n  .view-nav-btn:focus-visible::after {\n    opacity: 1;\n    transform: translateY(-50%) translateX(0);\n  }\n  .view-nav-btn:hover::before,\n  .view-nav-btn:focus-visible::before {\n    opacity: 1;\n  }\n\n  /* ── Generic page-head ───────────────────────────────────────────────── */\n\n  .page-head {\n    display: flex; justify-content: space-between; align-items: flex-start; gap: 14px;\n    padding: 2px 4px;\n  }\n  .page-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.35rem, 2.4vw, 1.6rem);\n    font-weight: 600; line-height: 1.2; letter-spacing: -0.01em;\n  }\n  .page-desc { color: var(--muted); font-size: 0.9rem; margin-top: 4px; }\n  .eyebrow {\n    color: var(--subtle); font-size: 0.72rem; font-weight: 600;\n    letter-spacing: 0.12em; text-transform: uppercase; margin-bottom: 6px;\n  }\n\n  /* ── Cards ──────────────────────────────────────────────────────────── */\n\n  .card {\n    padding: 24px 28px;\n    border: 1px solid var(--border);\n    border-radius: 20px;\n    background: var(--surface);\n    box-shadow: 0 1px 2px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.06);\n  }\n  .card-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.1rem, 2vw, 1.3rem);\n    font-weight: 600; line-height: 1.25; letter-spacing: -0.01em;\n    margin-bottom: 10px;\n  }\n  .card-subtitle { font-size: 1rem; font-weight: 650; margin-bottom: 10px; line-height: 1.3; }\n\n  code {\n    font-family: 'JetBrains Mono', ui-monospace, monospace;\n    font-size: 0.82em; padding: 0.14em 0.36em;\n    border-radius: 6px; background: rgba(0,0,0,0.05); color: var(--text);\n  }\n\n  button:focus-visible { outline: 2px solid var(--text); outline-offset: 2px; }\n\n  .primary-action-btn {\n    padding: 9px 16px;\n    border: none; border-radius: 10px;\n    background: var(--text); color: #fff;\n    font: 500 0.86rem/1.2 'DM Sans', sans-serif;\n    cursor: pointer;\n    transition: opacity 120ms;\n  }\n  .primary-action-btn:hover:not(:disabled) { opacity: 0.85; }\n  .primary-action-btn:disabled { opacity: 0.5; cursor: wait; }\n\n  .loading-msg { color: var(--muted); font-size: 0.9rem; padding: 8px 0; }\n  .err-msg {\n    padding: 12px 16px; border-radius: 10px;\n    background: var(--err-bg); color: var(--err-text);\n    border: 1px solid var(--err-border); font-size: 0.88rem;\n  }\n  .empty-state {\n    padding: 18px 8px; text-align: center; color: var(--muted);\n    font-size: 0.88rem;\n  }\n  .inline-result {\n    padding: 8px 12px; border-radius: 8px; font-size: 0.82rem; margin-top: 4px;\n  }\n  .inline-result.ok { background: var(--ok-bg); color: var(--ok-text); border: 1px solid var(--ok-border); }\n  .inline-result.err { background: var(--err-bg); color: var(--err-text); border: 1px solid var(--err-border); }\n\n  @media (max-width: 900px) {\n    .shell { margin-left: 0; }\n    .floating-view-nav {\n      left: 50%; right: auto; top: auto; bottom: 18px;\n      transform: translateX(-50%); flex-direction: row;\n    }\n    .view-nav-btn::after {\n      left: 50%; top: auto; bottom: calc(100% + 10px);\n      transform: translateX(-50%) translateY(4px);\n    }\n    .view-nav-btn::before {\n      left: 50%; top: auto; bottom: calc(100% + 4px);\n      transform: translateX(-50%);\n      border-right-color: transparent;\n      border-top-color: var(--text);\n    }\n    .view-nav-btn:hover::after,\n    .view-nav-btn:focus-visible::after { transform: translateX(-50%) translateY(0); }\n  }\n\n  @media (max-width: 640px) {\n    body { padding: 16px 12px 96px; }\n    .topbar { padding: 10px 14px; border-radius: 12px; }\n    .topbar-meta { gap: 8px; }\n    .page-head { padding-inline: 2px; }\n    .card { padding: 18px; border-radius: 16px; }\n  }\n`;\n"]}

package/dist/portal-shell.js

@@ -1,5 +1,5 @@
-import { escapeHtml } from "./html.js";
-import { PRODUCT_NAME } from "./ui-copy.js";
+import { escapeHtml } from "./utils/html.js";
+import { PRODUCT_NAME } from "./platform-messages.js";
 const NAV_ICONS = {
     admin: {
         label: "Admin",

package/dist/portal-shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"portal-shell.js","sourceRoot":"","sources":["../src/portal-shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAsC5C,MAAM,SAAS,GAAuD;IACpE,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,GAAG,EAAE;;;WAGE;KACR;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE;;WAEE;KACR;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,GAAG,EAAE;;;WAGE;KACR;CACF,CAAC;AAEF,SAAS,SAAS,CAAC,UAAsB,EAAE,QAA6C;IACtF,MAAM,KAAK,GAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,eAAe,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrG,MAAM,KAAK,GAAG,cAAc,IAAI,iBAAiB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACpH,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,aAAa,SAAS,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC;QACvF,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,gBAAgB,SAAS,yBAAyB,KAAK,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC;QACtF,CAAC;QACD,OAAO,gBAAgB,SAAS,0BAA0B,KAAK,kBAAkB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3I,CAAC,CAAC,CAAC;IACH,OAAO,6DAA6D,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,CAAC,CAAC,6BAA6B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS;QAC/J,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzE,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,WAAW;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,kBAAkB,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YACxF,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,QAAQ,GAAG,0FAA0F,IAAI,WAAW,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,kGAAkG,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACzJ,CAAC;IACH,CAAC;IAED,OAAO;;sCAE6B,YAAY;;mCAEf,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;;;QAGxD,QAAQ;QACR,QAAQ;;YAEJ,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,SAAS,MAAM,YAAY,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,WAAW,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAE1C,OAAO;;;;;WAKE,UAAU,CAAC,SAAS,CAAC;WACrB,iBAAiB;IACxB,WAAW;IACX,SAAS;;OAEN,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;IACnC,GAAG;;MAED,MAAM;MACN,OAAO,CAAC,IAAI;;IAEd,YAAY;;QAER,CAAC;AACT,CAAC;AAED,kFAAkF;AAElF,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkQzB,CAAC","sourcesContent":["import { escapeHtml } from \"./html.js\";\nimport { PRODUCT_NAME } from \"./ui-copy.js\";\n\n// ── Shared portal shell ────────────────────────────────────────────────────────\n//\n// Three portals (admin / session / vault aka login) share the same chrome:\n// - Fixed left rail with three round icon buttons (admin, session, vault)\n// - Compact topbar (product wordmark + identity + optional conversation switcher)\n// - Main content area\n//\n// Each portal renders its own page-head + body inside <main class=\"shell\">.\n// Sidebar buttons whose target token isn't available are rendered as anchors\n// only when href is provided; otherwise they are buttons in a disabled state.\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nexport interface PortalShellOptions {\n  activeView: PortalView;\n  pageTitle: string;\n  identity?: {\n    primary: string;\n    secondary?: string;\n  };\n  conversationSwitcher?: {\n    currentId: string;\n    options?: Array<{ id: string; label: string; running?: boolean }>;\n  };\n  navLinks?: Partial<Record<PortalView, string>>;\n  body: string;\n  /** Additional CSS appended after the shared stylesheet. */\n  extraStyles?: string;\n  /** Inline script run after body. */\n  inlineScript?: string;\n  /** Extra <head> markup (e.g., third-party fonts already loaded by shared CSS, so usually empty). */\n  extraHead?: string;\n  /** Body-level data-* attributes (e.g., data-session-running). */\n  bodyAttributes?: Record<string, string>;\n}\n\nconst NAV_ICONS: Record<PortalView, { label: string; svg: string }> = {\n  admin: {\n    label: \"Admin\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"3\"/>\n      <path d=\"M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09a1.65 1.65 0 0 0-1-1.51 1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09a1.65 1.65 0 0 0 1.51-1 1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33h.01a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82v.01a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z\"/>\n    </svg>`,\n  },\n  session: {\n    label: \"Session\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M21 11.5a8.38 8.38 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.38 8.38 0 0 1-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.38 8.38 0 0 1 3.8-.9h.5a8.48 8.48 0 0 1 8 8v.5z\"/>\n    </svg>`,\n  },\n  vault: {\n    label: \"Vault\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\" ry=\"2\"/>\n      <path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/>\n    </svg>`,\n  },\n};\n\nfunction renderNav(activeView: PortalView, navLinks: Partial<Record<PortalView, string>>): string {\n  const views: PortalView[] = [\"admin\", \"session\", \"vault\"];\n  const buttons = views.map((view) => {\n    const meta = NAV_ICONS[view];\n    const isActive = view === activeView;\n    const href = navLinks[view];\n    const baseClass = `view-nav-btn${isActive ? \" active\" : \"\"}${!href && !isActive ? \" disabled\" : \"\"}`;\n    const attrs = `data-view=\"${view}\" aria-label=\"${escapeHtml(meta.label)}\" data-tooltip=\"${escapeHtml(meta.label)}\"`;\n    if (href && !isActive) {\n      return `<a class=\"${baseClass}\" href=\"${escapeHtml(href)}\" ${attrs}>${meta.svg}</a>`;\n    }\n    if (isActive) {\n      return `<span class=\"${baseClass}\" aria-current=\"page\" ${attrs}>${meta.svg}</span>`;\n    }\n    return `<span class=\"${baseClass}\" aria-disabled=\"true\" ${attrs} data-tooltip=\"${escapeHtml(meta.label)} (no token)\">${meta.svg}</span>`;\n  });\n  return `<nav class=\"floating-view-nav\" aria-label=\"Primary views\">${buttons.join(\"\")}</nav>`;\n}\n\nfunction renderTopbar(options: PortalShellOptions): string {\n  const identity = options.identity\n    ? `<span class=\"topbar-user\">${escapeHtml(options.identity.primary)}${options.identity.secondary ? ` · ${escapeHtml(options.identity.secondary)}` : \"\"}</span>`\n    : \"\";\n\n  let switcher = \"\";\n  if (options.conversationSwitcher) {\n    const { currentId, options: convOptions } = options.conversationSwitcher;\n    if (convOptions && convOptions.length > 0) {\n      const opts = convOptions\n        .map((c) => {\n          const label = `${c.label}${c.running ? \" (running)\" : \"\"}`;\n          const selected = c.id === currentId ? \" selected\" : \"\";\n          return `<option value=\"${escapeHtml(c.id)}\"${selected}>${escapeHtml(label)}</option>`;\n        })\n        .join(\"\");\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\">${opts}</select>`;\n    } else {\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\"><option>${escapeHtml(currentId)}</option></select>`;\n    }\n  }\n\n  return `<header class=\"topbar\">\n    <div class=\"topbar-brand\">\n      <span class=\"topbar-wordmark\">${PRODUCT_NAME}</span>\n      <span class=\"topbar-sep\">·</span>\n      <span class=\"topbar-title\">${escapeHtml(options.pageTitle)}</span>\n    </div>\n    <div class=\"topbar-meta\">\n      ${identity}\n      ${switcher}\n    </div>\n  </header>`;\n}\n\nexport function renderPortalShell(options: PortalShellOptions): string {\n  const bodyAttrs = Object.entries(options.bodyAttributes ?? {})\n    .map(([key, value]) => `${escapeHtml(key)}=\"${escapeHtml(value)}\"`)\n    .join(\" \");\n  const titleText = `${options.pageTitle} — ${PRODUCT_NAME}`;\n  const nav = renderNav(options.activeView, options.navLinks ?? {});\n  const topbar = renderTopbar(options);\n  const extraStyles = options.extraStyles ? `<style>${options.extraStyles}</style>` : \"\";\n  const inlineScript = options.inlineScript ? `<script>${options.inlineScript}</script>` : \"\";\n  const extraHead = options.extraHead ?? \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${escapeHtml(titleText)}</title>\n  <style>${portalShellStyles}</style>\n  ${extraStyles}\n  ${extraHead}\n</head>\n<body${bodyAttrs ? ` ${bodyAttrs}` : \"\"}>\n  ${nav}\n  <main class=\"shell\">\n    ${topbar}\n    ${options.body}\n  </main>\n  ${inlineScript}\n</body>\n</html>`;\n}\n\n// ── Shared stylesheet ──────────────────────────────────────────────────────────\n\nconst portalShellStyles = `\n  @import url('https://fonts.googleapis.com/css2?family=Lora:wght@400;600&family=DM+Sans:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap');\n\n  :root {\n    --bg: #f0ece3;\n    --surface: #ffffff;\n    --border: rgba(0, 0, 0, 0.08);\n    --text: #18181b;\n    --muted: #71717a;\n    --subtle: #a1a1aa;\n    --accent: #d97706;\n\n    --ok-bg: #f0fdf4;\n    --ok-text: #15803d;\n    --ok-border: rgba(21, 128, 61, 0.16);\n    --warn-bg: #fffbeb;\n    --warn-text: #92400e;\n    --err-bg: #fef2f2;\n    --err-text: #b91c1c;\n    --err-border: rgba(185, 28, 28, 0.14);\n  }\n\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n\n  body {\n    min-height: 100vh;\n    padding: 28px 24px 60px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    background-color: var(--bg);\n    background-image: radial-gradient(ellipse 80% 40% at 50% -10%, rgba(255,255,255,0.65) 0%, transparent 70%);\n    color: var(--text);\n    font-family: 'DM Sans', 'Segoe UI', system-ui, sans-serif;\n    font-size: 15px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n  }\n\n  .shell {\n    width: 100%;\n    max-width: 960px;\n    margin-left: 72px;\n    display: flex;\n    flex-direction: column;\n    gap: 18px;\n  }\n\n  /* ── Topbar ─────────────────────────────────────────────────────────── */\n\n  .topbar {\n    display: flex; align-items: center; justify-content: space-between;\n    gap: 16px; padding: 10px 18px;\n    border: 1px solid var(--border); border-radius: 14px;\n    background: rgba(255,255,255,0.7); backdrop-filter: blur(8px);\n  }\n  .topbar-brand { display: flex; align-items: baseline; gap: 8px; min-width: 0; }\n  .topbar-wordmark {\n    font-family: 'Lora', Georgia, serif; font-size: 1.05rem; font-weight: 600;\n    color: var(--text); letter-spacing: -0.01em;\n  }\n  .topbar-sep { color: var(--subtle); font-size: 0.9rem; }\n  .topbar-title { font-size: 0.86rem; color: var(--muted); font-weight: 500; }\n  .topbar-meta {\n    display: flex; align-items: center; gap: 12px; min-width: 0; flex-wrap: wrap;\n    justify-content: flex-end;\n  }\n  .topbar-user {\n    font-size: 0.8rem; color: var(--muted);\n    padding: 4px 10px; border-radius: 999px; background: rgba(0,0,0,0.04);\n    white-space: nowrap;\n  }\n  .conv-inline-select {\n    max-width: min(360px, 100%);\n    padding: 6px 10px; border: 1px solid var(--border); border-radius: 10px;\n    background: #fff; font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.76rem;\n    color: var(--text); cursor: pointer;\n    transition: border-color 120ms;\n  }\n  .conv-inline-select:hover { border-color: rgba(0,0,0,0.18); }\n  .conv-inline-select:focus-visible { outline: 2px solid var(--text); outline-offset: 1px; }\n\n  /* ── Floating icon nav ──────────────────────────────────────────────── */\n\n  .floating-view-nav {\n    position: fixed;\n    left: 20px;\n    top: 50%;\n    transform: translateY(-50%);\n    z-index: 20;\n    display: flex;\n    flex-direction: column;\n    gap: 4px;\n    padding: 6px;\n    border: 1px solid var(--border);\n    border-radius: 999px;\n    background: rgba(255,255,255,0.88);\n    box-shadow: 0 10px 32px rgba(0,0,0,0.10), 0 2px 6px rgba(0,0,0,0.04);\n    backdrop-filter: blur(14px);\n  }\n  .view-nav-btn {\n    position: relative;\n    display: flex; align-items: center; justify-content: center;\n    width: 40px; height: 40px;\n    border: none; border-radius: 999px; background: transparent;\n    color: var(--muted); cursor: pointer;\n    text-decoration: none;\n    transition: background 160ms, color 160ms, transform 160ms;\n  }\n  .view-nav-btn:hover { background: rgba(0,0,0,0.05); color: var(--text); }\n  .view-nav-btn:active { transform: scale(0.94); }\n  .view-nav-btn.active {\n    background: var(--text); color: #fff;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.18);\n    cursor: default;\n  }\n  .view-nav-btn.disabled {\n    opacity: 0.4; cursor: not-allowed;\n  }\n  .view-nav-btn.disabled:hover { background: transparent; color: var(--muted); }\n  .view-nav-btn svg { display: block; }\n\n  /* Tooltip */\n  .view-nav-btn::after {\n    content: attr(data-tooltip);\n    position: absolute;\n    left: calc(100% + 12px);\n    top: 50%;\n    transform: translateY(-50%) translateX(-4px);\n    padding: 5px 10px;\n    border-radius: 8px;\n    background: var(--text);\n    color: #fff;\n    font: 500 0.76rem/1 'DM Sans', sans-serif;\n    white-space: nowrap;\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms, transform 140ms;\n    box-shadow: 0 4px 12px rgba(0,0,0,0.16);\n  }\n  .view-nav-btn::before {\n    content: '';\n    position: absolute;\n    left: calc(100% + 6px);\n    top: 50%;\n    transform: translateY(-50%);\n    border: 5px solid transparent;\n    border-right-color: var(--text);\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms;\n  }\n  .view-nav-btn:hover::after,\n  .view-nav-btn:focus-visible::after {\n    opacity: 1;\n    transform: translateY(-50%) translateX(0);\n  }\n  .view-nav-btn:hover::before,\n  .view-nav-btn:focus-visible::before {\n    opacity: 1;\n  }\n\n  /* ── Generic page-head ───────────────────────────────────────────────── */\n\n  .page-head {\n    display: flex; justify-content: space-between; align-items: flex-start; gap: 14px;\n    padding: 2px 4px;\n  }\n  .page-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.35rem, 2.4vw, 1.6rem);\n    font-weight: 600; line-height: 1.2; letter-spacing: -0.01em;\n  }\n  .page-desc { color: var(--muted); font-size: 0.9rem; margin-top: 4px; }\n  .eyebrow {\n    color: var(--subtle); font-size: 0.72rem; font-weight: 600;\n    letter-spacing: 0.12em; text-transform: uppercase; margin-bottom: 6px;\n  }\n\n  /* ── Cards ──────────────────────────────────────────────────────────── */\n\n  .card {\n    padding: 24px 28px;\n    border: 1px solid var(--border);\n    border-radius: 20px;\n    background: var(--surface);\n    box-shadow: 0 1px 2px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.06);\n  }\n  .card-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.1rem, 2vw, 1.3rem);\n    font-weight: 600; line-height: 1.25; letter-spacing: -0.01em;\n    margin-bottom: 10px;\n  }\n  .card-subtitle { font-size: 1rem; font-weight: 650; margin-bottom: 10px; line-height: 1.3; }\n\n  code {\n    font-family: 'JetBrains Mono', ui-monospace, monospace;\n    font-size: 0.82em; padding: 0.14em 0.36em;\n    border-radius: 6px; background: rgba(0,0,0,0.05); color: var(--text);\n  }\n\n  button:focus-visible { outline: 2px solid var(--text); outline-offset: 2px; }\n\n  .primary-action-btn {\n    padding: 9px 16px;\n    border: none; border-radius: 10px;\n    background: var(--text); color: #fff;\n    font: 500 0.86rem/1.2 'DM Sans', sans-serif;\n    cursor: pointer;\n    transition: opacity 120ms;\n  }\n  .primary-action-btn:hover:not(:disabled) { opacity: 0.85; }\n  .primary-action-btn:disabled { opacity: 0.5; cursor: wait; }\n\n  .loading-msg { color: var(--muted); font-size: 0.9rem; padding: 8px 0; }\n  .err-msg {\n    padding: 12px 16px; border-radius: 10px;\n    background: var(--err-bg); color: var(--err-text);\n    border: 1px solid var(--err-border); font-size: 0.88rem;\n  }\n  .empty-state {\n    padding: 18px 8px; text-align: center; color: var(--muted);\n    font-size: 0.88rem;\n  }\n  .inline-result {\n    padding: 8px 12px; border-radius: 8px; font-size: 0.82rem; margin-top: 4px;\n  }\n  .inline-result.ok { background: var(--ok-bg); color: var(--ok-text); border: 1px solid var(--ok-border); }\n  .inline-result.err { background: var(--err-bg); color: var(--err-text); border: 1px solid var(--err-border); }\n\n  @media (max-width: 900px) {\n    .shell { margin-left: 0; }\n    .floating-view-nav {\n      left: 50%; right: auto; top: auto; bottom: 18px;\n      transform: translateX(-50%); flex-direction: row;\n    }\n    .view-nav-btn::after {\n      left: 50%; top: auto; bottom: calc(100% + 10px);\n      transform: translateX(-50%) translateY(4px);\n    }\n    .view-nav-btn::before {\n      left: 50%; top: auto; bottom: calc(100% + 4px);\n      transform: translateX(-50%);\n      border-right-color: transparent;\n      border-top-color: var(--text);\n    }\n    .view-nav-btn:hover::after,\n    .view-nav-btn:focus-visible::after { transform: translateX(-50%) translateY(0); }\n  }\n\n  @media (max-width: 640px) {\n    body { padding: 16px 12px 96px; }\n    .topbar { padding: 10px 14px; border-radius: 12px; }\n    .topbar-meta { gap: 8px; }\n    .page-head { padding-inline: 2px; }\n    .card { padding: 18px; border-radius: 16px; }\n  }\n`;\n"]}
+{"version":3,"file":"portal-shell.js","sourceRoot":"","sources":["../src/portal-shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAkBtD,MAAM,SAAS,GAAuD;IACpE,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,GAAG,EAAE;;;WAGE;KACR;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE;;WAEE;KACR;IACD,KAAK,EAAE;QACL,KAAK,EAAE,OAAO;QACd,GAAG,EAAE;;;WAGE;KACR;CACF,CAAC;AAEF,SAAS,SAAS,CAAC,UAAsB,EAAE,QAA6C;IACtF,MAAM,KAAK,GAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,KAAK,UAAU,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,eAAe,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACrG,MAAM,KAAK,GAAG,cAAc,IAAI,iBAAiB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QACpH,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,aAAa,SAAS,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,MAAM,CAAC;QACvF,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,gBAAgB,SAAS,yBAAyB,KAAK,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC;QACtF,CAAC;QACD,OAAO,gBAAgB,SAAS,0BAA0B,KAAK,kBAAkB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3I,CAAC,CAAC,CAAC;IACH,OAAO,6DAA6D,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ;QAC/B,CAAC,CAAC,6BAA6B,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS;QAC/J,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACzE,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,WAAW;iBACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACT,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,kBAAkB,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YACxF,CAAC,CAAC;iBACD,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,QAAQ,GAAG,0FAA0F,IAAI,WAAW,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,kGAAkG,UAAU,CAAC,SAAS,CAAC,oBAAoB,CAAC;QACzJ,CAAC;IACH,CAAC;IAED,OAAO;;sCAE6B,YAAY;;mCAEf,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;;;QAGxD,QAAQ;QACR,QAAQ;;YAEJ,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,SAAS,MAAM,YAAY,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,WAAW,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAE1C,OAAO;;;;;WAKE,UAAU,CAAC,SAAS,CAAC;WACrB,iBAAiB;IACxB,WAAW;IACX,SAAS;;OAEN,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE;IACnC,GAAG;;MAED,MAAM;MACN,OAAO,CAAC,IAAI;;IAEd,YAAY;;QAER,CAAC;AACT,CAAC;AAED,kFAAkF;AAElF,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkQzB,CAAC","sourcesContent":["import { escapeHtml } from \"./utils/html.js\";\nimport { PRODUCT_NAME } from \"./platform-messages.js\";\n\n// ── Shared portal shell ────────────────────────────────────────────────────────\n//\n// Three portals (admin / session / vault aka login) share the same chrome:\n// - Fixed left rail with three round icon buttons (admin, session, vault)\n// - Compact topbar (product wordmark + identity + optional conversation switcher)\n// - Main content area\n//\n// Each portal renders its own page-head + body inside <main class=\"shell\">.\n// Sidebar buttons whose target token isn't available are rendered as anchors\n// only when href is provided; otherwise they are buttons in a disabled state.\n\nexport type { PortalShellOptions } from \"./types.js\";\nimport type { PortalShellOptions } from \"./types.js\";\n\ntype PortalView = \"admin\" | \"session\" | \"vault\";\n\nconst NAV_ICONS: Record<PortalView, { label: string; svg: string }> = {\n  admin: {\n    label: \"Admin\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <circle cx=\"12\" cy=\"12\" r=\"3\"/>\n      <path d=\"M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09a1.65 1.65 0 0 0-1-1.51 1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09a1.65 1.65 0 0 0 1.51-1 1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33h.01a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82v.01a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z\"/>\n    </svg>`,\n  },\n  session: {\n    label: \"Session\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <path d=\"M21 11.5a8.38 8.38 0 0 1-.9 3.8 8.5 8.5 0 0 1-7.6 4.7 8.38 8.38 0 0 1-3.8-.9L3 21l1.9-5.7a8.38 8.38 0 0 1-.9-3.8 8.5 8.5 0 0 1 4.7-7.6 8.38 8.38 0 0 1 3.8-.9h.5a8.48 8.48 0 0 1 8 8v.5z\"/>\n    </svg>`,\n  },\n  vault: {\n    label: \"Vault\",\n    svg: `<svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\" aria-hidden=\"true\">\n      <rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\" ry=\"2\"/>\n      <path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/>\n    </svg>`,\n  },\n};\n\nfunction renderNav(activeView: PortalView, navLinks: Partial<Record<PortalView, string>>): string {\n  const views: PortalView[] = [\"admin\", \"session\", \"vault\"];\n  const buttons = views.map((view) => {\n    const meta = NAV_ICONS[view];\n    const isActive = view === activeView;\n    const href = navLinks[view];\n    const baseClass = `view-nav-btn${isActive ? \" active\" : \"\"}${!href && !isActive ? \" disabled\" : \"\"}`;\n    const attrs = `data-view=\"${view}\" aria-label=\"${escapeHtml(meta.label)}\" data-tooltip=\"${escapeHtml(meta.label)}\"`;\n    if (href && !isActive) {\n      return `<a class=\"${baseClass}\" href=\"${escapeHtml(href)}\" ${attrs}>${meta.svg}</a>`;\n    }\n    if (isActive) {\n      return `<span class=\"${baseClass}\" aria-current=\"page\" ${attrs}>${meta.svg}</span>`;\n    }\n    return `<span class=\"${baseClass}\" aria-disabled=\"true\" ${attrs} data-tooltip=\"${escapeHtml(meta.label)} (no token)\">${meta.svg}</span>`;\n  });\n  return `<nav class=\"floating-view-nav\" aria-label=\"Primary views\">${buttons.join(\"\")}</nav>`;\n}\n\nfunction renderTopbar(options: PortalShellOptions): string {\n  const identity = options.identity\n    ? `<span class=\"topbar-user\">${escapeHtml(options.identity.primary)}${options.identity.secondary ? ` · ${escapeHtml(options.identity.secondary)}` : \"\"}</span>`\n    : \"\";\n\n  let switcher = \"\";\n  if (options.conversationSwitcher) {\n    const { currentId, options: convOptions } = options.conversationSwitcher;\n    if (convOptions && convOptions.length > 0) {\n      const opts = convOptions\n        .map((c) => {\n          const label = `${c.label}${c.running ? \" (running)\" : \"\"}`;\n          const selected = c.id === currentId ? \" selected\" : \"\";\n          return `<option value=\"${escapeHtml(c.id)}\"${selected}>${escapeHtml(label)}</option>`;\n        })\n        .join(\"\");\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\">${opts}</select>`;\n    } else {\n      switcher = `<select id=\"conv-switcher\" class=\"conv-inline-select\" aria-label=\"Switch conversation\"><option>${escapeHtml(currentId)}</option></select>`;\n    }\n  }\n\n  return `<header class=\"topbar\">\n    <div class=\"topbar-brand\">\n      <span class=\"topbar-wordmark\">${PRODUCT_NAME}</span>\n      <span class=\"topbar-sep\">·</span>\n      <span class=\"topbar-title\">${escapeHtml(options.pageTitle)}</span>\n    </div>\n    <div class=\"topbar-meta\">\n      ${identity}\n      ${switcher}\n    </div>\n  </header>`;\n}\n\nexport function renderPortalShell(options: PortalShellOptions): string {\n  const bodyAttrs = Object.entries(options.bodyAttributes ?? {})\n    .map(([key, value]) => `${escapeHtml(key)}=\"${escapeHtml(value)}\"`)\n    .join(\" \");\n  const titleText = `${options.pageTitle} — ${PRODUCT_NAME}`;\n  const nav = renderNav(options.activeView, options.navLinks ?? {});\n  const topbar = renderTopbar(options);\n  const extraStyles = options.extraStyles ? `<style>${options.extraStyles}</style>` : \"\";\n  const inlineScript = options.inlineScript ? `<script>${options.inlineScript}</script>` : \"\";\n  const extraHead = options.extraHead ?? \"\";\n\n  return `<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <meta charset=\"utf-8\">\n  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n  <title>${escapeHtml(titleText)}</title>\n  <style>${portalShellStyles}</style>\n  ${extraStyles}\n  ${extraHead}\n</head>\n<body${bodyAttrs ? ` ${bodyAttrs}` : \"\"}>\n  ${nav}\n  <main class=\"shell\">\n    ${topbar}\n    ${options.body}\n  </main>\n  ${inlineScript}\n</body>\n</html>`;\n}\n\n// ── Shared stylesheet ──────────────────────────────────────────────────────────\n\nconst portalShellStyles = `\n  @import url('https://fonts.googleapis.com/css2?family=Lora:wght@400;600&family=DM+Sans:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap');\n\n  :root {\n    --bg: #f0ece3;\n    --surface: #ffffff;\n    --border: rgba(0, 0, 0, 0.08);\n    --text: #18181b;\n    --muted: #71717a;\n    --subtle: #a1a1aa;\n    --accent: #d97706;\n\n    --ok-bg: #f0fdf4;\n    --ok-text: #15803d;\n    --ok-border: rgba(21, 128, 61, 0.16);\n    --warn-bg: #fffbeb;\n    --warn-text: #92400e;\n    --err-bg: #fef2f2;\n    --err-text: #b91c1c;\n    --err-border: rgba(185, 28, 28, 0.14);\n  }\n\n  *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n\n  body {\n    min-height: 100vh;\n    padding: 28px 24px 60px;\n    display: flex;\n    flex-direction: column;\n    align-items: center;\n    background-color: var(--bg);\n    background-image: radial-gradient(ellipse 80% 40% at 50% -10%, rgba(255,255,255,0.65) 0%, transparent 70%);\n    color: var(--text);\n    font-family: 'DM Sans', 'Segoe UI', system-ui, sans-serif;\n    font-size: 15px;\n    line-height: 1.5;\n    -webkit-font-smoothing: antialiased;\n  }\n\n  .shell {\n    width: 100%;\n    max-width: 960px;\n    margin-left: 72px;\n    display: flex;\n    flex-direction: column;\n    gap: 18px;\n  }\n\n  /* ── Topbar ─────────────────────────────────────────────────────────── */\n\n  .topbar {\n    display: flex; align-items: center; justify-content: space-between;\n    gap: 16px; padding: 10px 18px;\n    border: 1px solid var(--border); border-radius: 14px;\n    background: rgba(255,255,255,0.7); backdrop-filter: blur(8px);\n  }\n  .topbar-brand { display: flex; align-items: baseline; gap: 8px; min-width: 0; }\n  .topbar-wordmark {\n    font-family: 'Lora', Georgia, serif; font-size: 1.05rem; font-weight: 600;\n    color: var(--text); letter-spacing: -0.01em;\n  }\n  .topbar-sep { color: var(--subtle); font-size: 0.9rem; }\n  .topbar-title { font-size: 0.86rem; color: var(--muted); font-weight: 500; }\n  .topbar-meta {\n    display: flex; align-items: center; gap: 12px; min-width: 0; flex-wrap: wrap;\n    justify-content: flex-end;\n  }\n  .topbar-user {\n    font-size: 0.8rem; color: var(--muted);\n    padding: 4px 10px; border-radius: 999px; background: rgba(0,0,0,0.04);\n    white-space: nowrap;\n  }\n  .conv-inline-select {\n    max-width: min(360px, 100%);\n    padding: 6px 10px; border: 1px solid var(--border); border-radius: 10px;\n    background: #fff; font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.76rem;\n    color: var(--text); cursor: pointer;\n    transition: border-color 120ms;\n  }\n  .conv-inline-select:hover { border-color: rgba(0,0,0,0.18); }\n  .conv-inline-select:focus-visible { outline: 2px solid var(--text); outline-offset: 1px; }\n\n  /* ── Floating icon nav ──────────────────────────────────────────────── */\n\n  .floating-view-nav {\n    position: fixed;\n    left: 20px;\n    top: 50%;\n    transform: translateY(-50%);\n    z-index: 20;\n    display: flex;\n    flex-direction: column;\n    gap: 4px;\n    padding: 6px;\n    border: 1px solid var(--border);\n    border-radius: 999px;\n    background: rgba(255,255,255,0.88);\n    box-shadow: 0 10px 32px rgba(0,0,0,0.10), 0 2px 6px rgba(0,0,0,0.04);\n    backdrop-filter: blur(14px);\n  }\n  .view-nav-btn {\n    position: relative;\n    display: flex; align-items: center; justify-content: center;\n    width: 40px; height: 40px;\n    border: none; border-radius: 999px; background: transparent;\n    color: var(--muted); cursor: pointer;\n    text-decoration: none;\n    transition: background 160ms, color 160ms, transform 160ms;\n  }\n  .view-nav-btn:hover { background: rgba(0,0,0,0.05); color: var(--text); }\n  .view-nav-btn:active { transform: scale(0.94); }\n  .view-nav-btn.active {\n    background: var(--text); color: #fff;\n    box-shadow: 0 2px 8px rgba(0,0,0,0.18);\n    cursor: default;\n  }\n  .view-nav-btn.disabled {\n    opacity: 0.4; cursor: not-allowed;\n  }\n  .view-nav-btn.disabled:hover { background: transparent; color: var(--muted); }\n  .view-nav-btn svg { display: block; }\n\n  /* Tooltip */\n  .view-nav-btn::after {\n    content: attr(data-tooltip);\n    position: absolute;\n    left: calc(100% + 12px);\n    top: 50%;\n    transform: translateY(-50%) translateX(-4px);\n    padding: 5px 10px;\n    border-radius: 8px;\n    background: var(--text);\n    color: #fff;\n    font: 500 0.76rem/1 'DM Sans', sans-serif;\n    white-space: nowrap;\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms, transform 140ms;\n    box-shadow: 0 4px 12px rgba(0,0,0,0.16);\n  }\n  .view-nav-btn::before {\n    content: '';\n    position: absolute;\n    left: calc(100% + 6px);\n    top: 50%;\n    transform: translateY(-50%);\n    border: 5px solid transparent;\n    border-right-color: var(--text);\n    opacity: 0;\n    pointer-events: none;\n    transition: opacity 140ms;\n  }\n  .view-nav-btn:hover::after,\n  .view-nav-btn:focus-visible::after {\n    opacity: 1;\n    transform: translateY(-50%) translateX(0);\n  }\n  .view-nav-btn:hover::before,\n  .view-nav-btn:focus-visible::before {\n    opacity: 1;\n  }\n\n  /* ── Generic page-head ───────────────────────────────────────────────── */\n\n  .page-head {\n    display: flex; justify-content: space-between; align-items: flex-start; gap: 14px;\n    padding: 2px 4px;\n  }\n  .page-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.35rem, 2.4vw, 1.6rem);\n    font-weight: 600; line-height: 1.2; letter-spacing: -0.01em;\n  }\n  .page-desc { color: var(--muted); font-size: 0.9rem; margin-top: 4px; }\n  .eyebrow {\n    color: var(--subtle); font-size: 0.72rem; font-weight: 600;\n    letter-spacing: 0.12em; text-transform: uppercase; margin-bottom: 6px;\n  }\n\n  /* ── Cards ──────────────────────────────────────────────────────────── */\n\n  .card {\n    padding: 24px 28px;\n    border: 1px solid var(--border);\n    border-radius: 20px;\n    background: var(--surface);\n    box-shadow: 0 1px 2px rgba(0,0,0,0.04), 0 4px 16px rgba(0,0,0,0.06);\n  }\n  .card-title {\n    font-family: 'Lora', Georgia, serif;\n    font-size: clamp(1.1rem, 2vw, 1.3rem);\n    font-weight: 600; line-height: 1.25; letter-spacing: -0.01em;\n    margin-bottom: 10px;\n  }\n  .card-subtitle { font-size: 1rem; font-weight: 650; margin-bottom: 10px; line-height: 1.3; }\n\n  code {\n    font-family: 'JetBrains Mono', ui-monospace, monospace;\n    font-size: 0.82em; padding: 0.14em 0.36em;\n    border-radius: 6px; background: rgba(0,0,0,0.05); color: var(--text);\n  }\n\n  button:focus-visible { outline: 2px solid var(--text); outline-offset: 2px; }\n\n  .primary-action-btn {\n    padding: 9px 16px;\n    border: none; border-radius: 10px;\n    background: var(--text); color: #fff;\n    font: 500 0.86rem/1.2 'DM Sans', sans-serif;\n    cursor: pointer;\n    transition: opacity 120ms;\n  }\n  .primary-action-btn:hover:not(:disabled) { opacity: 0.85; }\n  .primary-action-btn:disabled { opacity: 0.5; cursor: wait; }\n\n  .loading-msg { color: var(--muted); font-size: 0.9rem; padding: 8px 0; }\n  .err-msg {\n    padding: 12px 16px; border-radius: 10px;\n    background: var(--err-bg); color: var(--err-text);\n    border: 1px solid var(--err-border); font-size: 0.88rem;\n  }\n  .empty-state {\n    padding: 18px 8px; text-align: center; color: var(--muted);\n    font-size: 0.88rem;\n  }\n  .inline-result {\n    padding: 8px 12px; border-radius: 8px; font-size: 0.82rem; margin-top: 4px;\n  }\n  .inline-result.ok { background: var(--ok-bg); color: var(--ok-text); border: 1px solid var(--ok-border); }\n  .inline-result.err { background: var(--err-bg); color: var(--err-text); border: 1px solid var(--err-border); }\n\n  @media (max-width: 900px) {\n    .shell { margin-left: 0; }\n    .floating-view-nav {\n      left: 50%; right: auto; top: auto; bottom: 18px;\n      transform: translateX(-50%); flex-direction: row;\n    }\n    .view-nav-btn::after {\n      left: 50%; top: auto; bottom: calc(100% + 10px);\n      transform: translateX(-50%) translateY(4px);\n    }\n    .view-nav-btn::before {\n      left: 50%; top: auto; bottom: calc(100% + 4px);\n      transform: translateX(-50%);\n      border-right-color: transparent;\n      border-top-color: var(--text);\n    }\n    .view-nav-btn:hover::after,\n    .view-nav-btn:focus-visible::after { transform: translateX(-50%) translateY(0); }\n  }\n\n  @media (max-width: 640px) {\n    body { padding: 16px 12px 96px; }\n    .topbar { padding: 10px 14px; border-radius: 12px; }\n    .topbar-meta { gap: 8px; }\n    .page-head { padding-inline: 2px; }\n    .card { padding: 18px; border-radius: 16px; }\n  }\n`;\n"]}

package/dist/provisioner.d.ts

@@ -1,28 +1,8 @@
 import { execFile } from "child_process";
 declare const execFileAsync: typeof execFile.__promisify__;
 type ExecFileAsync = typeof execFileAsync;
-export interface ContainerMount {
-    source: string;
-    target: string;
-}
-export interface ResourceLimits {
-    cpus?: string;
-    memory?: string;
-}
-export interface SandboxLimitStatus {
-    limits?: ResourceLimits;
-    boosted: boolean;
-}
-export interface ProvisionOptions {
-    containerName?: string;
-    mounts?: ContainerMount[];
-    conversationId?: string;
-}
-export interface DockerContainerManagerOptions {
-    limits?: ResourceLimits;
-    boostLimits?: ResourceLimits;
-    execFileImpl?: ExecFileAsync;
-}
+export type { ContainerMount, DockerContainerManagerOptions, ProvisionOptions, ResourceLimits, SandboxLimitStatus, } from "./types.js";
+import type { DockerContainerManagerOptions, ProvisionOptions, ResourceLimits, SandboxLimitStatus } from "./types.js";
 export declare class DockerContainerManager {
     private readonly image;
     private state;
@@ -81,5 +61,4 @@ export declare class DockerContainerManager {
     private forceRemoveContainer;
     private removeLegacyContainer;
 }
-export {};
 //# sourceMappingURL=provisioner.d.ts.map

package/dist/provisioner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provisioner.d.ts","sourceRoot":"","sources":["../src/provisioner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAOzC,QAAA,MAAM,aAAa,+BAAsB,CAAC;AAC1C,KAAK,aAAa,GAAG,OAAO,aAAa,CAAC;AA2B1C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,YAAY,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,qBAAa,sBAAsB;IAgB/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAfxB,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAwB;IAC7D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IACjE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAoB;IAC9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IAE5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAiB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAE7C,YACmB,KAAK,EAAE,MAAM,EAC9B,OAAO,GAAE,6BAA6B,GAAG,aAAkB,EAS5D;IAED,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM5C;IAED,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEjD;IAED,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/C;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CASrF;YAEa,cAAc;IAkCtB,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY7D;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAQzF;IAED,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,kBAAkB,CAGvD;IAED,gBAAgB,IAAI,cAAc,GAAG,SAAS,CAE7C;IAED,cAAc,IAAI,cAAc,GAAG,SAAS,CAE3C;IAEK,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAc9C;IAEK,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhD;IAEK,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/C;IAEK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CA0C/B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;YAIJ,YAAY;IA4C1B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,iBAAiB;YAaX,mBAAmB;YA2BnB,eAAe;YAcf,iBAAiB;IAS/B,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,SAAS;YAQH,sBAAsB;IAgBpC,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,sBAAsB;YAYhB,iBAAiB;YAqBjB,mBAAmB;YAWnB,aAAa;YAwBb,aAAa;YAeb,yBAAyB;YAsBzB,0BAA0B;IAoBxC,OAAO,CAAC,cAAc;YAOR,uBAAuB;IA4BrC,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,6BAA6B;YAOvB,oBAAoB;YAapB,qBAAqB;CAOpC","sourcesContent":["import { execFile } from \"child_process\";\nimport { createHash } from \"crypto\";\nimport { readFileSync, statSync } from \"fs\";\nimport { promisify } from \"util\";\nimport * as log from \"./log.js\";\nimport { reportUserFacingError } from \"./sentry.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\ntype ContainerStatus = \"running\" | \"stopped\" | \"missing\";\n\nfunction isDockerNotFoundError(err: unknown): boolean {\n  if (!err || typeof err !== \"object\") return false;\n  const stderr = (err as { stderr?: unknown }).stderr;\n  const message = (err as { message?: unknown }).message;\n  const haystack = `${typeof stderr === \"string\" ? stderr : \"\"}\\n${\n    typeof message === \"string\" ? message : \"\"\n  }`.toLowerCase();\n  return (\n    haystack.includes(\"no such network\") ||\n    haystack.includes(\"no such container\") ||\n    haystack.includes(\"no such object\") ||\n    haystack.includes(\"network not found\") ||\n    /network [^\\n]+ not found/.test(haystack) ||\n    /error: no such [^\\n]+/.test(haystack)\n  );\n}\n\ninterface ContainerState {\n  status: ContainerStatus;\n  lastUsed: number;\n  containerName: string;\n}\n\nexport interface ContainerMount {\n  source: string;\n  target: string;\n}\n\nexport interface ResourceLimits {\n  cpus?: string;\n  memory?: string;\n}\n\nexport interface SandboxLimitStatus {\n  limits?: ResourceLimits;\n  boosted: boolean;\n}\n\nexport interface ProvisionOptions {\n  containerName?: string;\n  mounts?: ContainerMount[];\n  conversationId?: string;\n}\n\nexport interface DockerContainerManagerOptions {\n  limits?: ResourceLimits;\n  boostLimits?: ResourceLimits;\n  execFileImpl?: ExecFileAsync;\n}\n\nexport class DockerContainerManager {\n  private state = new Map<string, ContainerState>();\n  private inflight = new Map<string, Promise<string>>();\n  private static readonly MANAGED_LABEL = \"mikan.managed=true\";\n  private static readonly IMAGE_MODE_LABEL = \"mikan.sandbox=image\";\n  private static readonly VAULT_ID_LABEL_KEY = \"mikan.vault-id\";\n  private static readonly CONVERSATION_ID_LABEL_KEY = \"mikan.conversation-id\";\n  private static readonly MOUNT_SIGNATURE_LABEL_KEY = \"mikan.mount-signature\";\n\n  private readonly limits?: ResourceLimits;\n  private readonly boostLimits?: ResourceLimits;\n  private readonly boostedKeys = new Set<string>();\n  private readonly overrideLimits = new Map<string, ResourceLimits>();\n  private readonly execFileImpl: ExecFileAsync;\n\n  constructor(\n    private readonly image: string,\n    options: DockerContainerManagerOptions | ExecFileAsync = {},\n  ) {\n    if (typeof options === \"function\") {\n      this.execFileImpl = options;\n    } else {\n      this.limits = options.limits;\n      this.boostLimits = options.boostLimits;\n      this.execFileImpl = options.execFileImpl ?? execFileAsync;\n    }\n  }\n\n  static sanitizeSegment(value: string): string {\n    const sanitized = value\n      .toLowerCase()\n      .replace(/[^a-z0-9]+/g, \"-\")\n      .replace(/^-+|-+$/g, \"\");\n    return sanitized || \"unknown\";\n  }\n\n  static containerName(containerKey: string): string {\n    return `mikan-sandbox-${containerKey}`;\n  }\n\n  static networkName(containerKey: string): string {\n    return `mikan-sandbox-net-${containerKey}`;\n  }\n\n  async provision(containerKey: string, options: ProvisionOptions = {}): Promise<string> {\n    const existing = this.inflight.get(containerKey);\n    if (existing) return existing;\n\n    const pending = this.provisionInner(containerKey, options).finally(() => {\n      this.inflight.delete(containerKey);\n    });\n    this.inflight.set(containerKey, pending);\n    return pending;\n  }\n\n  private async provisionInner(containerKey: string, options: ProvisionOptions): Promise<string> {\n    const containerName =\n      options.containerName ?? DockerContainerManager.containerName(containerKey);\n    const mounts = options.mounts ?? [];\n    const status = await this.inspectStatus(containerName);\n\n    try {\n      if (\n        status !== \"missing\" &&\n        (await this.hasRuntimeDrift(containerKey, containerName, mounts))\n      ) {\n        log.logInfo(`Container ${containerName} configuration changed; recreating container`);\n        await this.execFileImpl(\"docker\", [\"rm\", \"-f\", containerName]);\n        await this.runContainer(containerKey, containerName, mounts, options);\n        log.logInfo(`Container ${containerName} recreated`);\n      } else if (status === \"running\") {\n        log.logInfo(`Container ${containerName} already running`);\n      } else if (status === \"stopped\") {\n        await this.execFileImpl(\"docker\", [\"start\", containerName]);\n        log.logInfo(`Container ${containerName} started`);\n      } else {\n        await this.runContainer(containerKey, containerName, mounts, options);\n        log.logInfo(`Container ${containerName} created`);\n      }\n    } catch (err) {\n      this.state.delete(containerKey);\n      throw err;\n    }\n\n    this.setState(containerKey, \"running\", containerName);\n    await this.applyResourceLimits(containerKey, containerName);\n    return containerName;\n  }\n\n  async boost(containerKey: string): Promise<SandboxLimitStatus> {\n    if (!this.boostLimits?.cpus && !this.boostLimits?.memory) {\n      return this.getLimitStatus(containerKey);\n    }\n\n    this.overrideLimits.delete(containerKey);\n    this.boostedKeys.add(containerKey);\n    const state = this.state.get(containerKey);\n    if (state?.status === \"running\") {\n      await this.applyResourceLimits(containerKey, state.containerName);\n    }\n    return this.getLimitStatus(containerKey);\n  }\n\n  async setLimits(containerKey: string, limits: ResourceLimits): Promise<SandboxLimitStatus> {\n    this.boostedKeys.delete(containerKey);\n    this.overrideLimits.set(containerKey, { ...this.limits, ...limits });\n    const state = this.state.get(containerKey);\n    if (state?.status === \"running\") {\n      await this.applyResourceLimits(containerKey, state.containerName);\n    }\n    return this.getLimitStatus(containerKey);\n  }\n\n  getLimitStatus(containerKey: string): SandboxLimitStatus {\n    const boosted = this.boostedKeys.has(containerKey);\n    return { limits: this.effectiveLimits(containerKey), boosted };\n  }\n\n  getDefaultLimits(): ResourceLimits | undefined {\n    return this.limits;\n  }\n\n  getBoostLimits(): ResourceLimits | undefined {\n    return this.boostLimits;\n  }\n\n  async stop(containerKey: string): Promise<void> {\n    const containerName = this.getContainerName(containerKey);\n    try {\n      await this.execFileImpl(\"docker\", [\"stop\", containerName]);\n      this.setState(containerKey, \"stopped\", containerName);\n      this.boostedKeys.delete(containerKey);\n      this.overrideLimits.delete(containerKey);\n      log.logInfo(`Container ${containerName} stopped (idle)`);\n    } catch (err) {\n      log.logWarning(\n        `Failed to stop container ${containerName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n  }\n\n  async remove(containerKey: string): Promise<void> {\n    const containerName = this.getContainerName(containerKey);\n    const networkName = DockerContainerManager.networkName(containerKey);\n\n    await this.forceRemoveContainer(\n      containerName,\n      `Container ${containerName} removed`,\n      `Failed to remove container ${containerName}`,\n    );\n\n    try {\n      await this.execFileImpl(\"docker\", [\"network\", \"rm\", networkName]);\n      log.logInfo(`Network ${networkName} removed`);\n    } catch (err) {\n      log.logWarning(\n        `Failed to remove network ${networkName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n\n    this.state.delete(containerKey);\n    this.boostedKeys.delete(containerKey);\n    this.overrideLimits.delete(containerKey);\n  }\n\n  async stopIdle(maxIdleMs: number): Promise<void> {\n    const now = Date.now();\n    const toStop: string[] = [];\n    for (const [containerKey, containerState] of this.state) {\n      if (containerState.status === \"running\" && now - containerState.lastUsed > maxIdleMs) {\n        toStop.push(containerKey);\n      }\n    }\n    await Promise.all(toStop.map((containerKey) => this.stop(containerKey)));\n  }\n\n  async reconcile(): Promise<void> {\n    const discovered = new Set<string>();\n    const labeledNames = await this.listContainerNamesByLabel();\n    for (const name of labeledNames) discovered.add(name);\n    const legacyNames = await this.listContainerNamesByPrefix();\n    for (const name of legacyNames) discovered.add(name);\n\n    this.state.clear();\n\n    const inspected = await Promise.all(\n      Array.from(discovered).map(async (containerName) => ({\n        containerName,\n        details: await this.inspectContainerDetails(containerName),\n      })),\n    );\n\n    const legacyRemovals: Promise<void>[] = [];\n    for (const { containerName, details } of inspected) {\n      if (!details) continue;\n\n      if (!details.conversationId) {\n        legacyRemovals.push(this.removeLegacyContainer(containerName));\n        continue;\n      }\n\n      const containerKey = this.containerKeyFromContainerName(containerName);\n      if (!containerKey) {\n        log.logWarning(`Skipping unmanaged-style container without container key`, containerName);\n        continue;\n      }\n\n      const status: ContainerStatus = details.running ? \"running\" : \"stopped\";\n      const lastUsed = details.startedAtMs ?? Date.now();\n      this.state.set(containerKey, { status, lastUsed, containerName });\n    }\n    await Promise.all(legacyRemovals);\n\n    const running = Array.from(this.state.values()).filter((s) => s.status === \"running\").length;\n    const stopped = this.state.size - running;\n    log.logInfo(\n      `Reconciled ${this.state.size} managed containers (running=${running}, stopped=${stopped})`,\n    );\n  }\n\n  private setState(containerKey: string, status: ContainerStatus, containerName: string): void {\n    this.state.set(containerKey, { status, lastUsed: Date.now(), containerName });\n  }\n\n  private getContainerName(containerKey: string): string {\n    return (\n      this.state.get(containerKey)?.containerName ??\n      DockerContainerManager.containerName(containerKey)\n    );\n  }\n\n  private mountArgs(mounts: ContainerMount[]): string[] {\n    return mounts.flatMap((mount) => [\"-v\", this.toBindSpec(mount)]);\n  }\n\n  private toBindSpec(mount: ContainerMount): string {\n    return `${mount.source}:${mount.target}`;\n  }\n\n  private async runContainer(\n    containerKey: string,\n    containerName: string,\n    mounts: ContainerMount[],\n    options: ProvisionOptions,\n  ): Promise<void> {\n    const networkName = await this.ensureNetwork(containerKey);\n    log.logInfo(`Creating container ${containerName} from image ${this.image}`);\n    const labels = [\n      \"--label\",\n      DockerContainerManager.MANAGED_LABEL,\n      \"--label\",\n      DockerContainerManager.IMAGE_MODE_LABEL,\n      \"--label\",\n      `${DockerContainerManager.VAULT_ID_LABEL_KEY}=${containerKey}`,\n    ];\n    if (options.conversationId) {\n      labels.push(\n        \"--label\",\n        `${DockerContainerManager.CONVERSATION_ID_LABEL_KEY}=${options.conversationId}`,\n      );\n    }\n    if (mounts.length > 0) {\n      labels.push(\n        \"--label\",\n        `${DockerContainerManager.MOUNT_SIGNATURE_LABEL_KEY}=${this.mountSignature(mounts)}`,\n      );\n    }\n    await this.execFileImpl(\"docker\", [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      \"--network\",\n      networkName,\n      ...labels,\n      ...this.resourceLimitArgs(this.effectiveLimits(containerKey)),\n      ...this.mountArgs(mounts),\n      this.image,\n      \"sleep\",\n      \"infinity\",\n    ]);\n  }\n\n  private effectiveLimits(containerKey: string): ResourceLimits | undefined {\n    const override = this.overrideLimits.get(containerKey);\n    if (override) return override;\n    if (!this.boostedKeys.has(containerKey)) return this.limits;\n    return { ...this.limits, ...this.boostLimits };\n  }\n\n  private resourceLimitArgs(limits: ResourceLimits | undefined): string[] {\n    const args: string[] = [];\n    if (limits?.cpus) args.push(\"--cpus\", limits.cpus);\n    if (limits?.memory) {\n      args.push(\"--memory\", limits.memory);\n      // Keep Docker's no-extra-swap semantics explicit. Docker requires\n      // memory-swap to be updated together when raising an existing memory\n      // limit above the current swap limit.\n      args.push(\"--memory-swap\", limits.memory);\n    }\n    return args;\n  }\n\n  private async applyResourceLimits(containerKey: string, containerName: string): Promise<void> {\n    const limitArgs = this.resourceLimitArgs(this.effectiveLimits(containerKey));\n    if (limitArgs.length === 0) return;\n    const args = [\"update\", ...limitArgs, containerName];\n    try {\n      await this.execFileImpl(\"docker\", args);\n    } catch (err) {\n      log.logWarning(\n        `Failed to apply resource limits to container ${containerName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n      reportUserFacingError(err, {\n        domain: \"sandbox\",\n        surface: \"sandbox_provision\",\n        operation: \"apply_resource_limits\",\n        severity: \"warning\",\n        context: {\n          sandboxType: \"image\",\n          containerKey,\n          containerName,\n          limitArgCount: limitArgs.length,\n          fatal: false,\n        },\n      });\n    }\n  }\n\n  private async hasRuntimeDrift(\n    containerKey: string,\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    if (await this.hasBindMountDrift(containerName, mounts)) {\n      return true;\n    }\n    if (await this.hasMountSignatureDrift(containerName, mounts)) {\n      return true;\n    }\n    return this.hasNetworkModeDrift(containerKey, containerName);\n  }\n\n  private async hasBindMountDrift(\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    const expected = this.expectedBinds(mounts);\n    const actual = await this.inspectBindMounts(containerName);\n    return !this.sameBinds(expected, actual);\n  }\n\n  private expectedBinds(mounts: ContainerMount[]): string[] {\n    return mounts\n      .map((mount) => this.toBindSpec(mount))\n      .slice()\n      .toSorted();\n  }\n\n  private sameBinds(expected: string[], actual: string[]): boolean {\n    if (expected.length !== actual.length) {\n      return false;\n    }\n\n    return expected.every((bind, index) => bind === actual[index]);\n  }\n\n  private async hasMountSignatureDrift(\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    if (mounts.length === 0) return false;\n    const expected = this.mountSignature(mounts);\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      `{{index .Config.Labels \"${DockerContainerManager.MOUNT_SIGNATURE_LABEL_KEY}\"}}`,\n      containerName,\n    ]);\n    const actual = this.normalizeDockerValue(stdout.trim());\n    return actual !== expected;\n  }\n\n  private mountSignature(mounts: ContainerMount[]): string {\n    const payload = mounts\n      .map((mount) => ({\n        source: mount.source,\n        target: mount.target,\n        fingerprint: this.mountSourceFingerprint(mount.source),\n      }))\n      .toSorted((left, right) =>\n        `${left.target}\\0${left.source}`.localeCompare(`${right.target}\\0${right.source}`),\n      );\n    return createHash(\"sha256\").update(JSON.stringify(payload)).digest(\"hex\");\n  }\n\n  private mountSourceFingerprint(source: string): string {\n    try {\n      const stat = statSync(source);\n      if (stat.isFile()) {\n        return createHash(\"sha256\").update(readFileSync(source)).digest(\"hex\");\n      }\n      return `${stat.isDirectory() ? \"dir\" : \"other\"}:${stat.size}:${stat.mtimeMs}`;\n    } catch {\n      return \"missing\";\n    }\n  }\n\n  private async inspectBindMounts(containerName: string): Promise<string[]> {\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{json .HostConfig.Binds}}\",\n      containerName,\n    ]);\n    const payload = stdout.trim();\n    const parsed = JSON.parse(payload.length > 0 ? payload : \"null\") as unknown;\n\n    if (parsed === null) {\n      return [];\n    }\n\n    if (!Array.isArray(parsed) || parsed.some((bind) => typeof bind !== \"string\")) {\n      throw new Error(`Unexpected docker bind mount payload for container \"${containerName}\"`);\n    }\n\n    return [...parsed].toSorted();\n  }\n\n  private async hasNetworkModeDrift(containerKey: string, containerName: string): Promise<boolean> {\n    const expected = DockerContainerManager.networkName(containerKey);\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.HostConfig.NetworkMode}}\",\n      containerName,\n    ]);\n    return stdout.trim() !== expected;\n  }\n\n  private async ensureNetwork(containerKey: string): Promise<string> {\n    const networkName = DockerContainerManager.networkName(containerKey);\n    try {\n      await this.execFileImpl(\"docker\", [\"network\", \"inspect\", networkName]);\n      return networkName;\n    } catch (err) {\n      if (!isDockerNotFoundError(err)) throw err;\n    }\n    await this.execFileImpl(\"docker\", [\n      \"network\",\n      \"create\",\n      \"--driver\",\n      \"bridge\",\n      \"--label\",\n      DockerContainerManager.MANAGED_LABEL,\n      \"--label\",\n      DockerContainerManager.IMAGE_MODE_LABEL,\n      \"--label\",\n      `${DockerContainerManager.VAULT_ID_LABEL_KEY}=${containerKey}`,\n      networkName,\n    ]);\n    return networkName;\n  }\n\n  private async inspectStatus(containerName: string): Promise<ContainerStatus> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"inspect\",\n        \"-f\",\n        \"{{.State.Running}}\",\n        containerName,\n      ]);\n      return stdout.trim() === \"true\" ? \"running\" : \"stopped\";\n    } catch (err) {\n      if (isDockerNotFoundError(err)) return \"missing\";\n      throw err;\n    }\n  }\n\n  private async listContainerNamesByLabel(): Promise<string[]> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"ps\",\n        \"-a\",\n        \"--filter\",\n        `label=${DockerContainerManager.MANAGED_LABEL}`,\n        \"--filter\",\n        `label=${DockerContainerManager.IMAGE_MODE_LABEL}`,\n        \"--format\",\n        \"{{.Names}}\",\n      ]);\n      return this.parseNameLines(stdout);\n    } catch (err) {\n      log.logWarning(\n        \"Failed to list labeled managed containers\",\n        err instanceof Error ? err.message : String(err),\n      );\n      return [];\n    }\n  }\n\n  private async listContainerNamesByPrefix(): Promise<string[]> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"ps\",\n        \"-a\",\n        \"--filter\",\n        `name=${DockerContainerManager.containerName(\"\")}`,\n        \"--format\",\n        \"{{.Names}}\",\n      ]);\n      return this.parseNameLines(stdout);\n    } catch (err) {\n      log.logWarning(\n        \"Failed to list legacy managed containers\",\n        err instanceof Error ? err.message : String(err),\n      );\n      return [];\n    }\n  }\n\n  private parseNameLines(stdout: string): string[] {\n    return stdout\n      .split(\"\\n\")\n      .map((line) => line.trim())\n      .filter((line) => line.length > 0);\n  }\n\n  private async inspectContainerDetails(\n    containerName: string,\n  ): Promise<\n    | { running: boolean; startedAtMs?: number; vaultId?: string; conversationId?: string }\n    | undefined\n  > {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"inspect\",\n        \"-f\",\n        `{{.State.Running}}\\t{{.State.StartedAt}}\\t{{index .Config.Labels \"${DockerContainerManager.VAULT_ID_LABEL_KEY}\"}}\\t{{index .Config.Labels \"${DockerContainerManager.CONVERSATION_ID_LABEL_KEY}\"}}`,\n        containerName,\n      ]);\n      const [runningRaw, startedAtRaw, vaultIdRaw, conversationIdRaw] = stdout.trim().split(\"\\t\");\n      const running = runningRaw === \"true\";\n      const startedAtMs = this.parseDockerTimestamp(startedAtRaw);\n      const vaultId = this.normalizeDockerValue(vaultIdRaw);\n      const conversationId = this.normalizeDockerValue(conversationIdRaw);\n      return { running, startedAtMs, vaultId, conversationId };\n    } catch (err) {\n      log.logWarning(\n        `Failed to inspect container ${containerName} during reconcile`,\n        err instanceof Error ? err.message : String(err),\n      );\n      return undefined;\n    }\n  }\n\n  private normalizeDockerValue(value?: string): string | undefined {\n    if (!value || value === \"<no value>\") return undefined;\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n\n  private parseDockerTimestamp(value?: string): number | undefined {\n    const normalized = this.normalizeDockerValue(value);\n    if (!normalized || normalized.startsWith(\"0001-\")) return undefined;\n    const parsed = Date.parse(normalized);\n    return Number.isNaN(parsed) ? undefined : parsed;\n  }\n\n  private containerKeyFromContainerName(containerName: string): string | undefined {\n    const prefix = DockerContainerManager.containerName(\"\");\n    if (!containerName.startsWith(prefix)) return undefined;\n    const containerKey = containerName.slice(prefix.length);\n    return containerKey.length > 0 ? containerKey : undefined;\n  }\n\n  private async forceRemoveContainer(\n    containerName: string,\n    successLog: string,\n    failureLog: string,\n  ): Promise<void> {\n    try {\n      await this.execFileImpl(\"docker\", [\"rm\", \"-f\", containerName]);\n      log.logInfo(successLog);\n    } catch (err) {\n      log.logWarning(failureLog, err instanceof Error ? err.message : String(err));\n    }\n  }\n\n  private async removeLegacyContainer(containerName: string): Promise<void> {\n    await this.forceRemoveContainer(\n      containerName,\n      `Removed legacy mikan container ${containerName} (pre-channel-isolation scheme)`,\n      `Failed to remove legacy mikan container ${containerName}`,\n    );\n  }\n}\n"]}
+{"version":3,"file":"provisioner.d.ts","sourceRoot":"","sources":["../src/provisioner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAOzC,QAAA,MAAM,aAAa,+BAAsB,CAAC;AAC1C,KAAK,aAAa,GAAG,OAAO,aAAa,CAAC;AA2B1C,YAAY,EACV,cAAc,EACd,6BAA6B,EAC7B,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAEV,6BAA6B,EAC7B,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,qBAAa,sBAAsB;IAgB/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAfxB,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAwB;IAC7D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IACjE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAoB;IAC9D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IAC5E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAA2B;IAE5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAiB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqC;IACpE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAE7C,YACmB,KAAK,EAAE,MAAM,EAC9B,OAAO,GAAE,6BAA6B,GAAG,aAAkB,EAS5D;IAED,MAAM,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM5C;IAED,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEjD;IAED,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/C;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CASrF;YAEa,cAAc;IAkCtB,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAY7D;IAEK,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAQzF;IAED,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,kBAAkB,CAGvD;IAED,gBAAgB,IAAI,cAAc,GAAG,SAAS,CAE7C;IAED,cAAc,IAAI,cAAc,GAAG,SAAS,CAE3C;IAEK,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAc9C;IAEK,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhD;IAEK,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS/C;IAEK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CA0C/B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;YAIJ,YAAY;IA4C1B,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,iBAAiB;YAaX,mBAAmB;YA2BnB,eAAe;YAcf,iBAAiB;IAS/B,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,SAAS;YAQH,sBAAsB;IAgBpC,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,sBAAsB;YAYhB,iBAAiB;YAqBjB,mBAAmB;YAWnB,aAAa;YAwBb,aAAa;YAeb,yBAAyB;YAsBzB,0BAA0B;IAoBxC,OAAO,CAAC,cAAc;YAOR,uBAAuB;IA4BrC,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,oBAAoB;IAO5B,OAAO,CAAC,6BAA6B;YAOvB,oBAAoB;YAapB,qBAAqB;CAOpC","sourcesContent":["import { execFile } from \"child_process\";\nimport { createHash } from \"crypto\";\nimport { readFileSync, statSync } from \"fs\";\nimport { promisify } from \"util\";\nimport * as log from \"./log.js\";\nimport { reportUserFacingError } from \"./observability/sentry.js\";\n\nconst execFileAsync = promisify(execFile);\ntype ExecFileAsync = typeof execFileAsync;\n\ntype ContainerStatus = \"running\" | \"stopped\" | \"missing\";\n\nfunction isDockerNotFoundError(err: unknown): boolean {\n  if (!err || typeof err !== \"object\") return false;\n  const stderr = (err as { stderr?: unknown }).stderr;\n  const message = (err as { message?: unknown }).message;\n  const haystack = `${typeof stderr === \"string\" ? stderr : \"\"}\\n${\n    typeof message === \"string\" ? message : \"\"\n  }`.toLowerCase();\n  return (\n    haystack.includes(\"no such network\") ||\n    haystack.includes(\"no such container\") ||\n    haystack.includes(\"no such object\") ||\n    haystack.includes(\"network not found\") ||\n    /network [^\\n]+ not found/.test(haystack) ||\n    /error: no such [^\\n]+/.test(haystack)\n  );\n}\n\ninterface ContainerState {\n  status: ContainerStatus;\n  lastUsed: number;\n  containerName: string;\n}\n\nexport type {\n  ContainerMount,\n  DockerContainerManagerOptions,\n  ProvisionOptions,\n  ResourceLimits,\n  SandboxLimitStatus,\n} from \"./types.js\";\nimport type {\n  ContainerMount,\n  DockerContainerManagerOptions,\n  ProvisionOptions,\n  ResourceLimits,\n  SandboxLimitStatus,\n} from \"./types.js\";\n\nexport class DockerContainerManager {\n  private state = new Map<string, ContainerState>();\n  private inflight = new Map<string, Promise<string>>();\n  private static readonly MANAGED_LABEL = \"mikan.managed=true\";\n  private static readonly IMAGE_MODE_LABEL = \"mikan.sandbox=image\";\n  private static readonly VAULT_ID_LABEL_KEY = \"mikan.vault-id\";\n  private static readonly CONVERSATION_ID_LABEL_KEY = \"mikan.conversation-id\";\n  private static readonly MOUNT_SIGNATURE_LABEL_KEY = \"mikan.mount-signature\";\n\n  private readonly limits?: ResourceLimits;\n  private readonly boostLimits?: ResourceLimits;\n  private readonly boostedKeys = new Set<string>();\n  private readonly overrideLimits = new Map<string, ResourceLimits>();\n  private readonly execFileImpl: ExecFileAsync;\n\n  constructor(\n    private readonly image: string,\n    options: DockerContainerManagerOptions | ExecFileAsync = {},\n  ) {\n    if (typeof options === \"function\") {\n      this.execFileImpl = options;\n    } else {\n      this.limits = options.limits;\n      this.boostLimits = options.boostLimits;\n      this.execFileImpl = options.execFileImpl ?? execFileAsync;\n    }\n  }\n\n  static sanitizeSegment(value: string): string {\n    const sanitized = value\n      .toLowerCase()\n      .replace(/[^a-z0-9]+/g, \"-\")\n      .replace(/^-+|-+$/g, \"\");\n    return sanitized || \"unknown\";\n  }\n\n  static containerName(containerKey: string): string {\n    return `mikan-sandbox-${containerKey}`;\n  }\n\n  static networkName(containerKey: string): string {\n    return `mikan-sandbox-net-${containerKey}`;\n  }\n\n  async provision(containerKey: string, options: ProvisionOptions = {}): Promise<string> {\n    const existing = this.inflight.get(containerKey);\n    if (existing) return existing;\n\n    const pending = this.provisionInner(containerKey, options).finally(() => {\n      this.inflight.delete(containerKey);\n    });\n    this.inflight.set(containerKey, pending);\n    return pending;\n  }\n\n  private async provisionInner(containerKey: string, options: ProvisionOptions): Promise<string> {\n    const containerName =\n      options.containerName ?? DockerContainerManager.containerName(containerKey);\n    const mounts = options.mounts ?? [];\n    const status = await this.inspectStatus(containerName);\n\n    try {\n      if (\n        status !== \"missing\" &&\n        (await this.hasRuntimeDrift(containerKey, containerName, mounts))\n      ) {\n        log.logInfo(`Container ${containerName} configuration changed; recreating container`);\n        await this.execFileImpl(\"docker\", [\"rm\", \"-f\", containerName]);\n        await this.runContainer(containerKey, containerName, mounts, options);\n        log.logInfo(`Container ${containerName} recreated`);\n      } else if (status === \"running\") {\n        log.logInfo(`Container ${containerName} already running`);\n      } else if (status === \"stopped\") {\n        await this.execFileImpl(\"docker\", [\"start\", containerName]);\n        log.logInfo(`Container ${containerName} started`);\n      } else {\n        await this.runContainer(containerKey, containerName, mounts, options);\n        log.logInfo(`Container ${containerName} created`);\n      }\n    } catch (err) {\n      this.state.delete(containerKey);\n      throw err;\n    }\n\n    this.setState(containerKey, \"running\", containerName);\n    await this.applyResourceLimits(containerKey, containerName);\n    return containerName;\n  }\n\n  async boost(containerKey: string): Promise<SandboxLimitStatus> {\n    if (!this.boostLimits?.cpus && !this.boostLimits?.memory) {\n      return this.getLimitStatus(containerKey);\n    }\n\n    this.overrideLimits.delete(containerKey);\n    this.boostedKeys.add(containerKey);\n    const state = this.state.get(containerKey);\n    if (state?.status === \"running\") {\n      await this.applyResourceLimits(containerKey, state.containerName);\n    }\n    return this.getLimitStatus(containerKey);\n  }\n\n  async setLimits(containerKey: string, limits: ResourceLimits): Promise<SandboxLimitStatus> {\n    this.boostedKeys.delete(containerKey);\n    this.overrideLimits.set(containerKey, { ...this.limits, ...limits });\n    const state = this.state.get(containerKey);\n    if (state?.status === \"running\") {\n      await this.applyResourceLimits(containerKey, state.containerName);\n    }\n    return this.getLimitStatus(containerKey);\n  }\n\n  getLimitStatus(containerKey: string): SandboxLimitStatus {\n    const boosted = this.boostedKeys.has(containerKey);\n    return { limits: this.effectiveLimits(containerKey), boosted };\n  }\n\n  getDefaultLimits(): ResourceLimits | undefined {\n    return this.limits;\n  }\n\n  getBoostLimits(): ResourceLimits | undefined {\n    return this.boostLimits;\n  }\n\n  async stop(containerKey: string): Promise<void> {\n    const containerName = this.getContainerName(containerKey);\n    try {\n      await this.execFileImpl(\"docker\", [\"stop\", containerName]);\n      this.setState(containerKey, \"stopped\", containerName);\n      this.boostedKeys.delete(containerKey);\n      this.overrideLimits.delete(containerKey);\n      log.logInfo(`Container ${containerName} stopped (idle)`);\n    } catch (err) {\n      log.logWarning(\n        `Failed to stop container ${containerName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n  }\n\n  async remove(containerKey: string): Promise<void> {\n    const containerName = this.getContainerName(containerKey);\n    const networkName = DockerContainerManager.networkName(containerKey);\n\n    await this.forceRemoveContainer(\n      containerName,\n      `Container ${containerName} removed`,\n      `Failed to remove container ${containerName}`,\n    );\n\n    try {\n      await this.execFileImpl(\"docker\", [\"network\", \"rm\", networkName]);\n      log.logInfo(`Network ${networkName} removed`);\n    } catch (err) {\n      log.logWarning(\n        `Failed to remove network ${networkName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n    }\n\n    this.state.delete(containerKey);\n    this.boostedKeys.delete(containerKey);\n    this.overrideLimits.delete(containerKey);\n  }\n\n  async stopIdle(maxIdleMs: number): Promise<void> {\n    const now = Date.now();\n    const toStop: string[] = [];\n    for (const [containerKey, containerState] of this.state) {\n      if (containerState.status === \"running\" && now - containerState.lastUsed > maxIdleMs) {\n        toStop.push(containerKey);\n      }\n    }\n    await Promise.all(toStop.map((containerKey) => this.stop(containerKey)));\n  }\n\n  async reconcile(): Promise<void> {\n    const discovered = new Set<string>();\n    const labeledNames = await this.listContainerNamesByLabel();\n    for (const name of labeledNames) discovered.add(name);\n    const legacyNames = await this.listContainerNamesByPrefix();\n    for (const name of legacyNames) discovered.add(name);\n\n    this.state.clear();\n\n    const inspected = await Promise.all(\n      Array.from(discovered).map(async (containerName) => ({\n        containerName,\n        details: await this.inspectContainerDetails(containerName),\n      })),\n    );\n\n    const legacyRemovals: Promise<void>[] = [];\n    for (const { containerName, details } of inspected) {\n      if (!details) continue;\n\n      if (!details.conversationId) {\n        legacyRemovals.push(this.removeLegacyContainer(containerName));\n        continue;\n      }\n\n      const containerKey = this.containerKeyFromContainerName(containerName);\n      if (!containerKey) {\n        log.logWarning(`Skipping unmanaged-style container without container key`, containerName);\n        continue;\n      }\n\n      const status: ContainerStatus = details.running ? \"running\" : \"stopped\";\n      const lastUsed = details.startedAtMs ?? Date.now();\n      this.state.set(containerKey, { status, lastUsed, containerName });\n    }\n    await Promise.all(legacyRemovals);\n\n    const running = Array.from(this.state.values()).filter((s) => s.status === \"running\").length;\n    const stopped = this.state.size - running;\n    log.logInfo(\n      `Reconciled ${this.state.size} managed containers (running=${running}, stopped=${stopped})`,\n    );\n  }\n\n  private setState(containerKey: string, status: ContainerStatus, containerName: string): void {\n    this.state.set(containerKey, { status, lastUsed: Date.now(), containerName });\n  }\n\n  private getContainerName(containerKey: string): string {\n    return (\n      this.state.get(containerKey)?.containerName ??\n      DockerContainerManager.containerName(containerKey)\n    );\n  }\n\n  private mountArgs(mounts: ContainerMount[]): string[] {\n    return mounts.flatMap((mount) => [\"-v\", this.toBindSpec(mount)]);\n  }\n\n  private toBindSpec(mount: ContainerMount): string {\n    return `${mount.source}:${mount.target}`;\n  }\n\n  private async runContainer(\n    containerKey: string,\n    containerName: string,\n    mounts: ContainerMount[],\n    options: ProvisionOptions,\n  ): Promise<void> {\n    const networkName = await this.ensureNetwork(containerKey);\n    log.logInfo(`Creating container ${containerName} from image ${this.image}`);\n    const labels = [\n      \"--label\",\n      DockerContainerManager.MANAGED_LABEL,\n      \"--label\",\n      DockerContainerManager.IMAGE_MODE_LABEL,\n      \"--label\",\n      `${DockerContainerManager.VAULT_ID_LABEL_KEY}=${containerKey}`,\n    ];\n    if (options.conversationId) {\n      labels.push(\n        \"--label\",\n        `${DockerContainerManager.CONVERSATION_ID_LABEL_KEY}=${options.conversationId}`,\n      );\n    }\n    if (mounts.length > 0) {\n      labels.push(\n        \"--label\",\n        `${DockerContainerManager.MOUNT_SIGNATURE_LABEL_KEY}=${this.mountSignature(mounts)}`,\n      );\n    }\n    await this.execFileImpl(\"docker\", [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      \"--network\",\n      networkName,\n      ...labels,\n      ...this.resourceLimitArgs(this.effectiveLimits(containerKey)),\n      ...this.mountArgs(mounts),\n      this.image,\n      \"sleep\",\n      \"infinity\",\n    ]);\n  }\n\n  private effectiveLimits(containerKey: string): ResourceLimits | undefined {\n    const override = this.overrideLimits.get(containerKey);\n    if (override) return override;\n    if (!this.boostedKeys.has(containerKey)) return this.limits;\n    return { ...this.limits, ...this.boostLimits };\n  }\n\n  private resourceLimitArgs(limits: ResourceLimits | undefined): string[] {\n    const args: string[] = [];\n    if (limits?.cpus) args.push(\"--cpus\", limits.cpus);\n    if (limits?.memory) {\n      args.push(\"--memory\", limits.memory);\n      // Keep Docker's no-extra-swap semantics explicit. Docker requires\n      // memory-swap to be updated together when raising an existing memory\n      // limit above the current swap limit.\n      args.push(\"--memory-swap\", limits.memory);\n    }\n    return args;\n  }\n\n  private async applyResourceLimits(containerKey: string, containerName: string): Promise<void> {\n    const limitArgs = this.resourceLimitArgs(this.effectiveLimits(containerKey));\n    if (limitArgs.length === 0) return;\n    const args = [\"update\", ...limitArgs, containerName];\n    try {\n      await this.execFileImpl(\"docker\", args);\n    } catch (err) {\n      log.logWarning(\n        `Failed to apply resource limits to container ${containerName}`,\n        err instanceof Error ? err.message : String(err),\n      );\n      reportUserFacingError(err, {\n        domain: \"sandbox\",\n        surface: \"sandbox_provision\",\n        operation: \"apply_resource_limits\",\n        severity: \"warning\",\n        context: {\n          sandboxType: \"image\",\n          containerKey,\n          containerName,\n          limitArgCount: limitArgs.length,\n          fatal: false,\n        },\n      });\n    }\n  }\n\n  private async hasRuntimeDrift(\n    containerKey: string,\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    if (await this.hasBindMountDrift(containerName, mounts)) {\n      return true;\n    }\n    if (await this.hasMountSignatureDrift(containerName, mounts)) {\n      return true;\n    }\n    return this.hasNetworkModeDrift(containerKey, containerName);\n  }\n\n  private async hasBindMountDrift(\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    const expected = this.expectedBinds(mounts);\n    const actual = await this.inspectBindMounts(containerName);\n    return !this.sameBinds(expected, actual);\n  }\n\n  private expectedBinds(mounts: ContainerMount[]): string[] {\n    return mounts\n      .map((mount) => this.toBindSpec(mount))\n      .slice()\n      .toSorted();\n  }\n\n  private sameBinds(expected: string[], actual: string[]): boolean {\n    if (expected.length !== actual.length) {\n      return false;\n    }\n\n    return expected.every((bind, index) => bind === actual[index]);\n  }\n\n  private async hasMountSignatureDrift(\n    containerName: string,\n    mounts: ContainerMount[],\n  ): Promise<boolean> {\n    if (mounts.length === 0) return false;\n    const expected = this.mountSignature(mounts);\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      `{{index .Config.Labels \"${DockerContainerManager.MOUNT_SIGNATURE_LABEL_KEY}\"}}`,\n      containerName,\n    ]);\n    const actual = this.normalizeDockerValue(stdout.trim());\n    return actual !== expected;\n  }\n\n  private mountSignature(mounts: ContainerMount[]): string {\n    const payload = mounts\n      .map((mount) => ({\n        source: mount.source,\n        target: mount.target,\n        fingerprint: this.mountSourceFingerprint(mount.source),\n      }))\n      .toSorted((left, right) =>\n        `${left.target}\\0${left.source}`.localeCompare(`${right.target}\\0${right.source}`),\n      );\n    return createHash(\"sha256\").update(JSON.stringify(payload)).digest(\"hex\");\n  }\n\n  private mountSourceFingerprint(source: string): string {\n    try {\n      const stat = statSync(source);\n      if (stat.isFile()) {\n        return createHash(\"sha256\").update(readFileSync(source)).digest(\"hex\");\n      }\n      return `${stat.isDirectory() ? \"dir\" : \"other\"}:${stat.size}:${stat.mtimeMs}`;\n    } catch {\n      return \"missing\";\n    }\n  }\n\n  private async inspectBindMounts(containerName: string): Promise<string[]> {\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{json .HostConfig.Binds}}\",\n      containerName,\n    ]);\n    const payload = stdout.trim();\n    const parsed = JSON.parse(payload.length > 0 ? payload : \"null\") as unknown;\n\n    if (parsed === null) {\n      return [];\n    }\n\n    if (!Array.isArray(parsed) || parsed.some((bind) => typeof bind !== \"string\")) {\n      throw new Error(`Unexpected docker bind mount payload for container \"${containerName}\"`);\n    }\n\n    return [...parsed].toSorted();\n  }\n\n  private async hasNetworkModeDrift(containerKey: string, containerName: string): Promise<boolean> {\n    const expected = DockerContainerManager.networkName(containerKey);\n    const { stdout } = await this.execFileImpl(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.HostConfig.NetworkMode}}\",\n      containerName,\n    ]);\n    return stdout.trim() !== expected;\n  }\n\n  private async ensureNetwork(containerKey: string): Promise<string> {\n    const networkName = DockerContainerManager.networkName(containerKey);\n    try {\n      await this.execFileImpl(\"docker\", [\"network\", \"inspect\", networkName]);\n      return networkName;\n    } catch (err) {\n      if (!isDockerNotFoundError(err)) throw err;\n    }\n    await this.execFileImpl(\"docker\", [\n      \"network\",\n      \"create\",\n      \"--driver\",\n      \"bridge\",\n      \"--label\",\n      DockerContainerManager.MANAGED_LABEL,\n      \"--label\",\n      DockerContainerManager.IMAGE_MODE_LABEL,\n      \"--label\",\n      `${DockerContainerManager.VAULT_ID_LABEL_KEY}=${containerKey}`,\n      networkName,\n    ]);\n    return networkName;\n  }\n\n  private async inspectStatus(containerName: string): Promise<ContainerStatus> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"inspect\",\n        \"-f\",\n        \"{{.State.Running}}\",\n        containerName,\n      ]);\n      return stdout.trim() === \"true\" ? \"running\" : \"stopped\";\n    } catch (err) {\n      if (isDockerNotFoundError(err)) return \"missing\";\n      throw err;\n    }\n  }\n\n  private async listContainerNamesByLabel(): Promise<string[]> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"ps\",\n        \"-a\",\n        \"--filter\",\n        `label=${DockerContainerManager.MANAGED_LABEL}`,\n        \"--filter\",\n        `label=${DockerContainerManager.IMAGE_MODE_LABEL}`,\n        \"--format\",\n        \"{{.Names}}\",\n      ]);\n      return this.parseNameLines(stdout);\n    } catch (err) {\n      log.logWarning(\n        \"Failed to list labeled managed containers\",\n        err instanceof Error ? err.message : String(err),\n      );\n      return [];\n    }\n  }\n\n  private async listContainerNamesByPrefix(): Promise<string[]> {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"ps\",\n        \"-a\",\n        \"--filter\",\n        `name=${DockerContainerManager.containerName(\"\")}`,\n        \"--format\",\n        \"{{.Names}}\",\n      ]);\n      return this.parseNameLines(stdout);\n    } catch (err) {\n      log.logWarning(\n        \"Failed to list legacy managed containers\",\n        err instanceof Error ? err.message : String(err),\n      );\n      return [];\n    }\n  }\n\n  private parseNameLines(stdout: string): string[] {\n    return stdout\n      .split(\"\\n\")\n      .map((line) => line.trim())\n      .filter((line) => line.length > 0);\n  }\n\n  private async inspectContainerDetails(\n    containerName: string,\n  ): Promise<\n    | { running: boolean; startedAtMs?: number; vaultId?: string; conversationId?: string }\n    | undefined\n  > {\n    try {\n      const { stdout } = await this.execFileImpl(\"docker\", [\n        \"inspect\",\n        \"-f\",\n        `{{.State.Running}}\\t{{.State.StartedAt}}\\t{{index .Config.Labels \"${DockerContainerManager.VAULT_ID_LABEL_KEY}\"}}\\t{{index .Config.Labels \"${DockerContainerManager.CONVERSATION_ID_LABEL_KEY}\"}}`,\n        containerName,\n      ]);\n      const [runningRaw, startedAtRaw, vaultIdRaw, conversationIdRaw] = stdout.trim().split(\"\\t\");\n      const running = runningRaw === \"true\";\n      const startedAtMs = this.parseDockerTimestamp(startedAtRaw);\n      const vaultId = this.normalizeDockerValue(vaultIdRaw);\n      const conversationId = this.normalizeDockerValue(conversationIdRaw);\n      return { running, startedAtMs, vaultId, conversationId };\n    } catch (err) {\n      log.logWarning(\n        `Failed to inspect container ${containerName} during reconcile`,\n        err instanceof Error ? err.message : String(err),\n      );\n      return undefined;\n    }\n  }\n\n  private normalizeDockerValue(value?: string): string | undefined {\n    if (!value || value === \"<no value>\") return undefined;\n    const trimmed = value.trim();\n    return trimmed.length > 0 ? trimmed : undefined;\n  }\n\n  private parseDockerTimestamp(value?: string): number | undefined {\n    const normalized = this.normalizeDockerValue(value);\n    if (!normalized || normalized.startsWith(\"0001-\")) return undefined;\n    const parsed = Date.parse(normalized);\n    return Number.isNaN(parsed) ? undefined : parsed;\n  }\n\n  private containerKeyFromContainerName(containerName: string): string | undefined {\n    const prefix = DockerContainerManager.containerName(\"\");\n    if (!containerName.startsWith(prefix)) return undefined;\n    const containerKey = containerName.slice(prefix.length);\n    return containerKey.length > 0 ? containerKey : undefined;\n  }\n\n  private async forceRemoveContainer(\n    containerName: string,\n    successLog: string,\n    failureLog: string,\n  ): Promise<void> {\n    try {\n      await this.execFileImpl(\"docker\", [\"rm\", \"-f\", containerName]);\n      log.logInfo(successLog);\n    } catch (err) {\n      log.logWarning(failureLog, err instanceof Error ? err.message : String(err));\n    }\n  }\n\n  private async removeLegacyContainer(containerName: string): Promise<void> {\n    await this.forceRemoveContainer(\n      containerName,\n      `Removed legacy mikan container ${containerName} (pre-channel-isolation scheme)`,\n      `Failed to remove legacy mikan container ${containerName}`,\n    );\n  }\n}\n"]}

package/dist/provisioner.js

@@ -3,7 +3,7 @@ import { createHash } from "crypto";
 import { readFileSync, statSync } from "fs";
 import { promisify } from "util";
 import * as log from "./log.js";
-import { reportUserFacingError } from "./sentry.js";
+import { reportUserFacingError } from "./observability/sentry.js";
 const execFileAsync = promisify(execFile);
 function isDockerNotFoundError(err) {
     if (!err || typeof err !== "object")