@goflowstate/widget-sdk 0.2.0 → 0.2.2

package/dist/index.mjs

@@ -1,5 +1,5 @@
-// @goflowstate/widget-sdk v0.2.0
-// https://github.com/starteryllp/goflowstate-sdk
+// @goflowstate/widget-sdk v0.2.2
+// https://github.com/goflowstate/goflowstate-sdk
 
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
@@ -45,22 +45,28 @@ function readSessionLaunchParams() {
   const q = new URLSearchParams(window.location.search);
   const slug = q.get("slug") ?? q.get("tripId") ?? "";
   if (!slug) return null;
+  const mobile = q.get("mobile");
+  const webBase = (q.get("web") ?? "http://localhost:14321").replace(/\/$/, "");
+  const host = q.get("host");
   return {
     slug,
     ticket: q.get("ticket"),
     apiBase: (q.get("api") ?? "http://localhost:13002").replace(/\/$/, ""),
-    webBase: (q.get("web") ?? "http://localhost:14321").replace(/\/$/, "")
+    webBase,
+    mobileBase: mobile ? mobile.replace(/\/$/, "") : null,
+    hostBase: host ? host.replace(/\/$/, "") : webBase
   };
 }
+var hostOriginOf = (params) => new URL(params.hostBase ?? params.webBase).origin;
 var SESSION_INIT_TIMEOUT_MS = 1e4;
 var DEFAULT_POLL_INTERVAL_MS = 4e3;
-function awaitInitTicket(webBase) {
+function awaitInitTicket(hostOrigin) {
   return new Promise((resolve, reject) => {
     if (typeof window === "undefined" || window.parent === window) {
       reject(new Error("no parent page to receive a ticket from"));
       return;
     }
-    const webOrigin = new URL(webBase).origin;
+    const webOrigin = hostOrigin;
     const timer = setTimeout(() => {
       window.removeEventListener("message", onMessage);
       reject(new Error("timed out waiting for the session handoff"));
@@ -102,10 +108,10 @@ function toStateView(s) {
     extension: s.extension ?? null
   };
 }
-var parentOpener = (webBase) => {
+var parentOpener = (hostOrigin) => {
   return (url) => {
     if (typeof window !== "undefined" && window.parent !== window) {
-      window.parent.postMessage({ type: "flowstate:navigate", url }, webBase);
+      window.parent.postMessage({ type: "flowstate:navigate", url }, hostOrigin);
       return;
     }
     if (typeof window !== "undefined") window.open(url, "_blank", "noopener");
@@ -115,18 +121,20 @@ var HttpSessionClient = class {
   constructor(params, opener) {
     __publicField(this, "slug");
     __publicField(this, "webBase");
+    __publicField(this, "mobileBase");
     __publicField(this, "apiBase");
     __publicField(this, "tokenPromise");
     __publicField(this, "opener");
     this.slug = params.slug;
     this.webBase = params.webBase;
+    this.mobileBase = params.mobileBase ?? null;
     this.apiBase = params.apiBase;
-    this.opener = opener ?? parentOpener(params.webBase);
+    this.opener = opener ?? parentOpener(hostOriginOf(params));
     this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));
   }
   async acquireTicket(params) {
     if (params.ticket) return params.ticket;
-    return awaitInitTicket(params.webBase);
+    return awaitInitTicket(hostOriginOf(params));
   }
   async redeem(ticket) {
     const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {
@@ -523,6 +531,52 @@ var CanvasWidgetSDKImpl = class {
       }
     };
   }
+  /** Platform LLM access (widget.* aliases only). Requests ride the same
+   *  widget-gateway auth as db/storage; the platform meters every call and
+   *  attributes it to this widget's publishing org. */
+  get ai() {
+    const complete = (opts) => this.widgetApiRequest("/widget-api/ai/complete", "POST", opts);
+    const streamRequest = (opts) => this.widgetApiStream(opts);
+    return {
+      complete,
+      // Async generator over the gateway's SSE frames. Ends on [DONE] or
+      // stream end; returning early (break) cancels the fetch body, which
+      // the gateway sees as a disconnect and aborts the upstream call, so
+      // an abandoned stream stops generating and billing.
+      async *stream(opts) {
+        const response = await streamRequest(opts);
+        const reader = response.body?.getReader();
+        if (!reader) throw new Error("ai.stream: response has no body");
+        const decoder = new TextDecoder();
+        let buffer = "";
+        try {
+          for (; ; ) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            buffer += decoder.decode(value, { stream: true });
+            const frames = buffer.split("\n\n");
+            buffer = frames.pop() ?? "";
+            for (const frame of frames) {
+              const dataLine = frame.split("\n").find((l) => l.startsWith("data:"));
+              if (!dataLine) continue;
+              const payload = dataLine.slice(5).trim();
+              if (!payload || payload === "[DONE]") continue;
+              let parsed;
+              try {
+                parsed = JSON.parse(payload);
+              } catch {
+                continue;
+              }
+              yield parsed;
+            }
+          }
+        } finally {
+          await reader.cancel().catch(() => {
+          });
+        }
+      }
+    };
+  }
   /** Widget configuration settings persisted by the canvas host. */
   get settings() {
     return {
@@ -548,6 +602,28 @@ var CanvasWidgetSDKImpl = class {
     });
   }
   // ── Private ─────────────────────────────────────────────────
+  /** Raw streaming POST against the widget gateway — same auth as
+   *  widgetApiRequest, but returns the Response for SSE consumption
+   *  instead of parsing a JSON envelope. */
+  async widgetApiStream(body) {
+    if (!this._widgetApiUrl) {
+      throw new Error("Widget API Gateway URL not available");
+    }
+    const headers = { "Content-Type": "application/json" };
+    if (this._widgetApiToken) {
+      headers["Authorization"] = `Bearer ${this._widgetApiToken}`;
+    }
+    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(body)
+    });
+    if (!response.ok) {
+      const err = await response.json().catch(() => ({}));
+      throw new Error(err.message ?? "ai.stream request failed");
+    }
+    return response;
+  }
   async widgetApiRequest(path, method, body) {
     if (!this._widgetApiUrl) {
       throw new Error("Widget API Gateway URL not available");
@@ -812,6 +888,7 @@ export {
   createMockSession,
   createServiceClient,
   getInitialTheme,
+  hostOriginOf,
   initSession,
   initWidgetTheme,
   onArtifactIngested,

package/dist/index.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/service.ts", "../src/session.ts", "../src/sdk.ts", "../src/theme.ts", "../src/ingest.ts"],
-  "sourcesContent": ["// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. */\n  request<T = unknown>(verb: string, body?: unknown): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase: (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, ''),\n  };\n}\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent /w page and wait for it to hand over the\n *  single-use session ticket. */\nfunction awaitInitTicket(webBase: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = new URL(webBase).origin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\nfunction toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (webBase: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the /w page (same session cookie) to navigate itself.\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, webBase);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc>\n  implements SessionClient<TSetup, TContribution, TDoc>\n{\n  readonly slug: string;\n  readonly webBase: string;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(params.webBase);\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(params.webBase);\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    return toStateView((data.state ?? data) as WireSessionState);\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(verb: string, body?: unknown): Promise<T> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    return `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    { userId: 'mock-me', name: opts.me ?? 'You', color: palette[0], sealed: false, isMe: true, isHost: true },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n", "// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// ============================================\n// Widget theme utilities \u2014 the Flowstate Theme Contract (ADR-048)\n// ============================================\n//\n// Flowstate has exactly three themes: 'light' | 'dark' | 'glass'.\n// Glass is the signature default (the liquid-glass look) \u2014 widgets treat it\n// as the unthemed plane. The host hands the active theme to external iframe\n// widgets in two ways:\n//\n//   1. Boot:  a `?theme=` query param appended to the iframe src.\n//   2. Live:  a `postMessage` of `{ type: 'flowstate:theme', theme }`.\n//\n// Widgets map the theme onto their own tokens by setting `data-theme` on\n// their <html> element ('glass' removes the attribute, so widget CSS keeps\n// the glass plane as its default styles).\n//\n// Usage in a widget entry:\n//   import { initWidgetTheme } from '@goflowstate/widget-sdk';\n//   initWidgetTheme(); // apply boot theme + follow live host updates\n\nexport type WidgetTheme = 'light' | 'dark' | 'glass';\n\nconst THEME_MESSAGE_TYPE = 'flowstate:theme';\nconst DEFAULT_THEME: WidgetTheme = 'glass';\n\nfunction isWidgetTheme(value: unknown): value is WidgetTheme {\n  return value === 'light' || value === 'dark' || value === 'glass';\n}\n\n/**\n * Read the theme the host handed the widget at boot via the `?theme=` URL\n * param. Invalid or missing values fall back to 'glass' (the default plane).\n */\nexport function getInitialTheme(): WidgetTheme {\n  if (typeof window === 'undefined') return DEFAULT_THEME;\n  try {\n    const param = new URLSearchParams(window.location.search).get('theme');\n    return isWidgetTheme(param) ? param : DEFAULT_THEME;\n  } catch {\n    return DEFAULT_THEME;\n  }\n}\n\n/**\n * Subscribe to live theme updates pushed by the host\n * (`postMessage({ type: 'flowstate:theme', theme })`). Non-theme messages\n * and invalid theme values are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted,\n * mirroring the ingest channel; a hostile sibling frame cannot restyle the\n * widget. Pass `allowedOrigin` to additionally pin the host's origin.\n */\nexport function onThemeChange(\n  cb: (theme: WidgetTheme) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; theme?: unknown };\n    if (message.type !== THEME_MESSAGE_TYPE) return;\n    if (!isWidgetTheme(message.theme)) return;\n    cb(message.theme);\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n\n/**\n * Apply a theme to the widget document by setting `data-theme` on <html>.\n * 'glass' REMOVES the attribute \u2014 widget CSS treats glass as the default\n * plane, with `[data-theme='light']` / `[data-theme='dark']` overrides.\n */\nexport function applyWidgetTheme(theme: WidgetTheme): void {\n  if (typeof document === 'undefined') return;\n  if (theme === 'glass') {\n    delete document.documentElement.dataset.theme;\n  } else {\n    document.documentElement.dataset.theme = theme;\n  }\n}\n\n/**\n * Convenience boot helper: apply the initial (`?theme=`) theme, then follow\n * live host updates, applying each. Returns the unsubscribe function.\n */\nexport function initWidgetTheme(): () => void {\n  applyWidgetTheme(getInitialTheme());\n  return onThemeChange(applyWidgetTheme);\n}\n", "// ============================================\n// Widget ingest channel \u2014 ADR-043 in-place delivery\n// ============================================\n//\n// When an artifact is dropped on (or sent to) a widget and the ingestion\n// transform produces a result, the HOST pushes the produced artifact into\n// any open iframe of the target widget:\n//\n//   postMessage({ type: 'flowstate:ingest', artifactId, kind?, payload? })\n//\n// `payload` is the produced artifact's parsed JSON content when the host\n// could fetch it (small structured artifacts like kanban boards); widgets\n// without a payload can show an affordance around `artifactId` instead.\n// Same channel shape as the theme handoff (`flowstate:theme`).\n//\n// Usage in a widget entry:\n//   import { onArtifactIngested } from '@goflowstate/widget-sdk';\n//   onArtifactIngested(({ payload }) => mergeBoard(payload));\n\nexport const INGEST_MESSAGE_TYPE = 'flowstate:ingest';\n\nexport interface IngestedArtifact {\n  /** The produced artifact's id (host route: /a/:id). */\n  artifactId: string;\n  /** The produced artifact kind (e.g. 'kanban-board'), when known. */\n  kind?: string;\n  /** Parsed JSON content of the produced artifact, when the host fetched it. */\n  payload?: unknown;\n}\n\n/**\n * Subscribe to ingestion results pushed by the host. Non-ingest messages and\n * malformed payloads are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted \u2014\n * a hostile sibling frame or opener cannot inject into the channel. Pass\n * `allowedOrigin` to additionally pin the host's origin (the session module\n * derives the same value from `webBase`).\n */\nexport function onArtifactIngested(\n  cb: (artifact: IngestedArtifact) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; artifactId?: unknown; kind?: unknown; payload?: unknown };\n    if (message.type !== INGEST_MESSAGE_TYPE) return;\n    if (typeof message.artifactId !== 'string' || !message.artifactId) return;\n    cb({\n      artifactId: message.artifactId,\n      kind: typeof message.kind === 'string' ? message.kind : undefined,\n      payload: message.payload,\n    });\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n"],
-  "mappings": ";;;;;;;;AAUO,SAAS,oBAAoB,MAAuD;AACzF,QAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,QAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,iBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,UAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,QAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AACA,WAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,UAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,UAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,UAAI,IAAI,WAAW,KAAK;AACtB,gBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,cAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,MACpC;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,OAA6B,CAAC;AAClC,YAAI;AACF,iBAAQ,MAAM,IAAI,KAAK;AAAA,QACzB,QAAQ;AAAA,QAER;AACA,cAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,MACxF;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,EACF;AACF;;;ACoHO,SAAS,0BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,QAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,IACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,IACrE,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,EACvE;AACF;AAEA,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAIjC,SAAS,gBAAgB,SAAkC;AACzD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,aAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,IACF;AACA,UAAM,YAAY,IAAI,IAAI,OAAO,EAAE;AACnC,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,WAAW,SAAS;AAC/C,aAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,IAC/D,GAAG,uBAAuB;AAC1B,UAAM,YAAY,CAAC,MAAoB;AACrC,UAAI,EAAE,WAAW,UAAW;AAC5B,YAAM,OAAO,EAAE;AACf,UAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,mBAAa,KAAK;AAClB,aAAO,oBAAoB,WAAW,SAAS;AAC/C,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO,iBAAiB,WAAW,SAAS;AAC5C,WAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,EAClE,CAAC;AACH;AAiCA,IAAM,aAA8D;AAAA,EAClE,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACR;AAEA,SAAS,YACP,GAC+C;AAC/C,SAAO;AAAA,IACL,MAAM,EAAE;AAAA,IACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,IAC9B,QAAQ,EAAE;AAAA,IACV,OAAQ,EAAE,SAA2B;AAAA,IACrC,SAAS,EAAE;AAAA,IACX,aAAa,EAAE;AAAA,IACf,aAAa,EAAE;AAAA,IACf,WAAW,EAAE;AAAA,IACb,WAAW,EAAE,aAAa,EAAE;AAAA,IAC5B,MAAM,EAAE,QAAQ;AAAA,IAChB,MAAM,EAAE,QAAQ;AAAA,IAChB,gBAAiB,EAAE,cAAuC;AAAA,IAC1D,KAAM,EAAE,QAAwB;AAAA,IAChC,YAAY,EAAE;AAAA,IACd,WAAW,EAAE,aAAa;AAAA,EAC5B;AACF;AAQA,IAAM,eAAe,CAAC,YAAoC;AACxD,SAAO,CAAC,QAAQ;AACd,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAE7D,aAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,OAAO;AACtE;AAAA,IACF;AACA,QAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,EAC1E;AACF;AAEA,IAAM,oBAAN,MAEA;AAAA,EAOE,YAAY,QAA6B,QAAyB;AANlE,wBAAS;AACT,wBAAS;AACT,wBAAiB;AACjB,wBAAiB;AACjB,wBAAiB;AAGf,SAAK,OAAO,OAAO;AACnB,SAAK,UAAU,OAAO;AACtB,SAAK,UAAU,OAAO;AACtB,SAAK,SAAS,UAAU,aAAa,OAAO,OAAO;AAGnD,SAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,EAC3E;AAAA,EAEA,MAAc,cAAc,QAA8C;AACxE,QAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,WAAO,gBAAgB,OAAO,OAAO;AAAA,EACvC;AAAA,EAEA,MAAc,OAAO,QAAiC;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,MACnE,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,MACvB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACjE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,UAAM,OAAO,KAAK;AAClB,WAAO,YAAa,KAAK,SAAS,IAAyB;AAAA,EAC7D;AAAA,EAEA,OAAO;AACL,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,KACE,SACA,MACY;AACZ,UAAM,WAAW,MAAM,cAAc;AACrC,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,YAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,GAAG;AAAA,MACrB;AACA,UAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,IACjD;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,YAAY,OAAe;AACzB,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,EAChF;AAAA,EAEA,WAAW,SAAwB;AACjC,WAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EACvF;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,OAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MAC9C,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QAAqB,MAAc,MAA4B;AACnE,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MACvF,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,MAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAAa,KAAmB;AAC9B,SAAK,OAAO,GAAG;AAAA,EACjB;AAAA,EAEA,UAAU,YAA4B;AACpC,WAAO,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,EACxC;AACF;AAkBO,SAAS,kBAId,OAAyC,CAAC,GAA+C;AACzF,QAAM,UAAU,CAAC,WAAW,WAAW,WAAW,WAAW,SAAS;AACtE,QAAM,UAA2B;AAAA,IAC/B,EAAE,QAAQ,WAAW,MAAM,KAAK,MAAM,OAAO,OAAO,QAAQ,CAAC,GAAG,QAAQ,OAAO,MAAM,MAAM,QAAQ,KAAK;AAAA,IACxG,IAAI,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO;AAAA,MACvC,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACrB;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,QAAQ,MAAM;AAAA,MACvC,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACA,MAAI,QAAuB,KAAK,SAAS;AACzC,MAAI,iBAAuC;AAC3C,MAAI,MAAmB;AACvB,MAAI,SAAS;AAEb,QAAM,OAAO,MAAqD;AAChE,UAAM,cAAc,QAAQ,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;AACpD,UAAM,YAAY,QAAQ,SAAS,KAAK,eAAe,QAAQ;AAC/D,UAAM,QACJ,WAAW,YAAY,MAAM,aAAa,CAAC,QAAQ,UAAU,YAAY,WAAW;AACtF,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AAAA,MACtC;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,MAAM,kBAAkB;AAAA,MACpC,WAAW;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,MAAM,OAAO;AACX,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO,KAAK;AAAA,IACd;AAAA,IACA,KAAK,SAAS,UAAU;AACtB,YAAM,WAAW,UAAU,cAAc;AACzC,YAAM,QAAQ,YAAY,MAAM,QAAQ,KAAK,CAAC,GAAG,QAAQ;AACzD,cAAQ,KAAK,CAAC;AACd,aAAO,MAAM,cAAc,KAAK;AAAA,IAClC;AAAA,IACA,MAAM,YAAY,GAAW;AAC3B,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,WAAW,SAAwB;AACvC,uBAAiB;AACjB,YAAM,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,IAAI;AACrC,UAAI,GAAI,IAAG,SAAS;AACpB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,eAAS;AACT,YAAM,KAAK,aACP,KAAK,WAAW,CAAC,cAAc,CAAC,IAC/B,EAAE,MAAM,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,SAAS;AACb,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,UAAuB;AAC3B,aAAO,CAAC;AAAA,IACV;AAAA,IACA,aAAa,KAAa;AACxB,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,IACA,UAAU,YAAoB;AAC5B,aAAO,4BAA4B,UAAU;AAAA,IAC/C;AAAA,EACF;AACF;AAaO,SAAS,cAIuC;AACrD,QAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,IAAI,kBAA+C,MAAM;AAClE;;;AChgBA,IAAM,WAAW;AACjB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAOxB,SAAS,iBAAyB;AAChC,QAAM,IAAI,WAAW;AACrB,MAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,QAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,MAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,MAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,QAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,SAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AACnI;AAgBA,IAAI,YAAuD;AAE3D,eAAe,WAAW,QAAoC;AAC5D,MAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,QAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,MAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,IAC9F;AAAA,EACF,CAAC;AAED,cAAY,EAAE,QAAQ,IAAI;AAC1B,SAAO;AACT;AAEA,eAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,QAAM,MAAM,MAAM,WAAW,MAAM;AACnC,QAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,QAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,MAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAOO,IAAM,sBAAN,MAAqD;AAAA,EA2B1D,YAAY,MAAmB;AA1B/B,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ,oBAAmB,oBAAI,IAG7B;AACF,wBAAQ,cAA0D;AAClE,wBAAQ,mBAA8D,CAAC;AACvE,wBAAQ,iBAAoC;AAC5C,wBAAQ,0BAAqE,CAAC;AAC9E,wBAAQ,YAAW;AACnB,wBAAQ,mBAAqD,CAAC;AAC9D,wBAAQ,4BAA+E,CAAC;AACxF,wBAAQ,mBAAkB,oBAAI,IAAiD;AAC/E,wBAAQ;AACR,wBAAQ;AAGR;AAAA,wBAAS;AAGP,SAAK,YAAY,KAAK;AACtB,SAAK,SAAS,KAAK;AACnB,SAAK,cAAc,KAAK;AACxB,SAAK,QAAQ,KAAK;AAClB,SAAK,aAAa,KAAK,aAAa;AACpC,SAAK,gBAAgB,KAAK;AAC1B,SAAK,kBAAkB,KAAK,kBAAkB;AAC9C,SAAK,kBAAkB,KAAK;AAC5B,SAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,QAAI,KAAK,YAAY;AACnB,WAAK,UAAU,oBAAoB;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,SAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,WAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,EACzD;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,QAA4B;AAC9B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA,EAIA,IAAI,YAA8D;AAChE,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,IAAqD;AACjE,SAAK,gBAAgB,KAAK,EAAE;AAC5B,WAAO,MAAM;AACX,YAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,UAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA;AAAA,EAGA,gBAAsB;AACpB,SAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,EAChC;AAAA;AAAA,EAGA,kBAAwB;AACtB,SAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,EAClC;AAAA;AAAA,EAGA,kBAAsC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,qBAAqB,UAA2D;AAC9E,SAAK,uBAAuB,KAAK,QAAQ;AACzC,WAAO,MAAM;AACX,WAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,UAAkD;AAC9D,SAAK,gBAAgB,KAAK,QAAQ;AAClC,WAAO,MAAM;AACX,WAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC5E;AAAA,EACF;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,EACpC;AAAA;AAAA,EAGA,KAAK,OAAe,SAAwB;AAC1C,SAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGA,UAAU,OAAe,IAA8C;AACrE,UAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,SAAK,KAAK,EAAE;AACZ,SAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,WAAO,MAAM;AACX,YAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,UAAI,CAAC,QAAS;AACd,YAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,UAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,IACvC;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,SAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,WAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,YAAM,UAAU,WAAW,MAAM;AAC/B,aAAK,iBAAiB,OAAO,KAAK;AAClC,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,MAC/C,GAAG,GAAK;AAER,WAAK,iBAAiB,IAAI,OAAO;AAAA,QAC/B,SAAS,CAAC,MAAqB;AAC7B,uBAAa,OAAO;AACpB,kBAAQ,CAAC;AAAA,QACX;AAAA,QACA,QAAQ,CAAC,MAAa;AACpB,uBAAa,OAAO;AACpB,iBAAO,CAAC;AAAA,QACV;AAAA,MACF,CAAC;AAED,WAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAO,cAAyC;AACpD,QAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,aAAO,KAAK,WAAW;AAAA,IACzB;AACA,UAAM,IAAI,MAAM,mEAA8D;AAAA,EAChF;AAAA;AAAA,EAGA,IAAI,UAAsB;AACxB,WAAO;AAAA,MACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,MACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,MAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,KAAY;AACd,UAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,WAAO;AAAA,MACL,WAAW,MAA4B;AACrC,cAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,eAAO;AAAA,UACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,UAC3D,MAAM,CAAC,SAAyB;AAC9B,kBAAM,KAAK,IAAI,gBAAgB;AAC/B,gBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,gBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,kBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,mBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,UACtC;AAAA,UACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,UAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,UAAC,CAAC;AAAA,QACxG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,WAAwB;AAC1B,WAAO;AAAA,MACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,MAChC,KAAK,CAAC,gBAAyC;AAC7C,aAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,aAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,MAC1D;AAAA,MACA,gBAAgB,CAAC,OAAoD;AACnE,aAAK,yBAAyB,KAAK,EAAE;AACrC,eAAO,MAAM;AACX,eAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,SAAK,KAAK,gBAAgB;AAAA,MACxB;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA;AAAA,EAIA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AACA,UAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,IAC/F;AACA,QAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAQ,OAAmC;AAAA,IAC7C;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,WAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,EAC9F;AAAA,EAEQ,cAAc,OAA2B;AAC/C,UAAM,MAAM,MAAM;AAClB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,gBAAgB;AACnB,cAAM,UAAU,IAAI;AACpB,aAAK,SAAS,QAAQ;AACtB,mBAAW,YAAY,KAAK,iBAAiB;AAC3C,mBAAS,QAAQ,KAAK;AAAA,QACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,mBAAmB;AACtB,cAAM,UAAU,IAAI;AACpB,cAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,YAAI,WAAW;AACb,gBAAM,MAAmB;AAAA,YACvB,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,WAAW,QAAQ;AAAA,UACrB;AACA,qBAAW,YAAY,WAAW;AAChC,qBAAS,GAAG;AAAA,UACd;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK,kBAAkB;AACrB,cAAM,UAAU,IAAI;AACpB,cAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,YAAI,SAAS;AACX,eAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,kBAAQ,QAAQ;AAAA,YACd,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,YACpB,WAAW,QAAQ;AAAA,UACrB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,UAAU,IAAI;AACpB,aAAK,aAAa;AAAA,UAChB,OAAO,QAAQ;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,IAAI,SAAS;AAC9B,YAAI,UAAU;AACZ,eAAK,gBAAgB;AACrB,eAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,QAC1D;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,YAAI,SAAS,KAAK,UAAU;AAC1B,eAAK,WAAW;AAChB,eAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,QAC/C;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,IAAI,IAAI;AACd,aAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,mBAAW,MAAM,KAAK,0BAA0B;AAC9C,cAAI;AACF,eAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,UAC1B,QAAQ;AAAA,UAER;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAEH;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,KAAK,MAAc,SAAwC;AAEjE,SAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,aAAO,OAAO,YAAY,KAAK,GAAG;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,aACZ,MACA,SACwB;AACxB,UAAM,QAAQ,eAAe;AAC7B,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACJ,QAAI,KAAK,aAAa;AACpB,cAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,IAClF,OAAO;AACL,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,UAAgB;AACd,WAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,SAAK,gBAAgB,SAAS;AAC9B,SAAK,gBAAgB,MAAM;AAC3B,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,cAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC9C;AACA,SAAK,iBAAiB,MAAM;AAAA,EAC9B;AACF;AAeO,IAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAiC;AAC/B,WAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,YAAM,UAAU,WAAW,MAAM;AAC/B,eAAO,oBAAoB,WAAW,OAAO;AAC7C,eAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,MAC1F,GAAG,eAAe;AAElB,YAAM,UAAU,CAAC,UAAwB;AACvC,cAAM,MAAM,MAAM;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,YAAI,IAAI,SAAS,OAAQ;AAEzB,qBAAa,OAAO;AACpB,eAAO,oBAAoB,WAAW,OAAO;AAE7C,cAAM,UAAU,IAAI;AACpB,cAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,gBAAQ,GAAG;AAAA,MACb;AAEA,aAAO,iBAAiB,WAAW,OAAO;AAG1C,YAAM,WAA0B;AAAA,QAC9B,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA;AAAA,QACV,OAAO,eAAe;AAAA,QACtB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO;AAAA;AAAA,QACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,MAClC;AAEA,aAAO,OAAO,YAAY,UAAU,GAAG;AAAA,IACzC,CAAC;AAAA,EACH;AACF;;;AChiBA,IAAM,qBAAqB;AAC3B,IAAM,gBAA6B;AAEnC,SAAS,cAAc,OAAsC;AAC3D,SAAO,UAAU,WAAW,UAAU,UAAU,UAAU;AAC5D;AAMO,SAAS,kBAA+B;AAC7C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,QAAQ,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,OAAO;AACrE,WAAO,cAAc,KAAK,IAAI,QAAQ;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,cACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,mBAAoB;AACzC,QAAI,CAAC,cAAc,QAAQ,KAAK,EAAG;AACnC,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;AAOO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,OAAO,aAAa,YAAa;AACrC,MAAI,UAAU,SAAS;AACrB,WAAO,SAAS,gBAAgB,QAAQ;AAAA,EAC1C,OAAO;AACL,aAAS,gBAAgB,QAAQ,QAAQ;AAAA,EAC3C;AACF;AAMO,SAAS,kBAA8B;AAC5C,mBAAiB,gBAAgB,CAAC;AAClC,SAAO,cAAc,gBAAgB;AACvC;;;ACzEO,IAAM,sBAAsB;AAoB5B,SAAS,mBACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,oBAAqB;AAC1C,QAAI,OAAO,QAAQ,eAAe,YAAY,CAAC,QAAQ,WAAY;AACnE,OAAG;AAAA,MACD,YAAY,QAAQ;AAAA,MACpB,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,MACxD,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;",
+  "sourcesContent": ["// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n  /** Base URL of the mobile PWA, when the host provided one via the optional\n   *  `mobile` iframe param. Participant-facing join links (e.g. a projected\n   *  QR) should prefer it and fall back to `webBase` when absent. Optional so\n   *  hand-rolled SessionClient implementations keep compiling. */\n  readonly mobileBase?: string | null;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. */\n  request<T = unknown>(verb: string, body?: unknown): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n  /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null\n   *  when the host didn't send one \u2014 legacy hosts never do \u2014 so consumers\n   *  fall back to `webBase` links. Optional so hand-built params keep\n   *  compiling. */\n  mobileBase?: string | null;\n  /** Origin of the page that FRAMES the widget \u2014 the `host` iframe param.\n   *  The ready/init ticket handshake and `flowstate:navigate` are addressed\n   *  to this origin (0.2.2). Defaults to `webBase` when absent, which is\n   *  what every pre-0.2.2 host is: the web /w page framing the widget. The\n   *  mobile PWA frames the widget itself (its native lobby) and names itself\n   *  here \u2014 without it the browser drops every postMessage between them\n   *  (target-origin mismatch) and the widget never boots. */\n  hostBase?: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  // `mobile` is optional and has NO default: absent means the host predates\n  // the PWA doors (or has none configured) and consumers must keep minting\n  // legacy webBase links.\n  const mobile = q.get('mobile');\n  const webBase = (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, '');\n  const host = q.get('host');\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase,\n    mobileBase: mobile ? mobile.replace(/\\/$/, '') : null,\n    hostBase: host ? host.replace(/\\/$/, '') : webBase,\n  };\n}\n\n/** The origin the handshake is addressed to: the framing page. */\nexport const hostOriginOf = (params: Pick<SessionLaunchParams, 'webBase' | 'hostBase'>): string =>\n  new URL(params.hostBase ?? params.webBase).origin;\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent (host) page and wait for it to hand over\n *  the single-use session ticket. `hostOrigin` is the framing page's origin\n *  (`hostOriginOf`) \u2014 the web /w page or the mobile PWA's native lobby. */\nfunction awaitInitTicket(hostOrigin: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = hostOrigin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\nfunction toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (hostOrigin: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the host page to navigate itself (the web /w page shares the\n      // session cookie; the PWA lobby routes reveals natively).\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, hostOrigin);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc>\n  implements SessionClient<TSetup, TContribution, TDoc>\n{\n  readonly slug: string;\n  readonly webBase: string;\n  readonly mobileBase: string | null;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.mobileBase = params.mobileBase ?? null;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(hostOriginOf(params));\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(hostOriginOf(params));\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    return toStateView((data.state ?? data) as WireSessionState);\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(verb: string, body?: unknown): Promise<T> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    return `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    { userId: 'mock-me', name: opts.me ?? 'You', color: palette[0], sealed: false, isMe: true, isHost: true },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n", "// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  AiAPI,\n  AiCallOptions,\n  AiCompleteResult,\n  AiStreamEvent,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Platform LLM access (widget.* aliases only). Requests ride the same\n   *  widget-gateway auth as db/storage; the platform meters every call and\n   *  attributes it to this widget's publishing org. */\n  get ai(): AiAPI {\n    const complete = (opts: AiCallOptions): Promise<AiCompleteResult> =>\n      this.widgetApiRequest('/widget-api/ai/complete', 'POST', opts) as Promise<AiCompleteResult>;\n    const streamRequest = (opts: AiCallOptions): Promise<Response> => this.widgetApiStream(opts);\n    return {\n      complete,\n      // Async generator over the gateway's SSE frames. Ends on [DONE] or\n      // stream end; returning early (break) cancels the fetch body, which\n      // the gateway sees as a disconnect and aborts the upstream call, so\n      // an abandoned stream stops generating and billing.\n      async *stream(opts: AiCallOptions): AsyncGenerator<AiStreamEvent> {\n        const response = await streamRequest(opts);\n        const reader = response.body?.getReader();\n        if (!reader) throw new Error('ai.stream: response has no body');\n        const decoder = new TextDecoder();\n        let buffer = '';\n        try {\n          for (;;) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += decoder.decode(value, { stream: true });\n            const frames = buffer.split('\\n\\n');\n            buffer = frames.pop() ?? '';\n            for (const frame of frames) {\n              const dataLine = frame.split('\\n').find((l) => l.startsWith('data:'));\n              if (!dataLine) continue;\n              const payload = dataLine.slice(5).trim();\n              if (!payload || payload === '[DONE]') continue;\n              let parsed: AiStreamEvent;\n              try {\n                parsed = JSON.parse(payload) as AiStreamEvent;\n              } catch {\n                continue;\n              }\n              yield parsed;\n            }\n          }\n        } finally {\n          // Break/return path: releases the connection so the gateway's\n          // req.on('close') fires and the upstream call aborts.\n          await reader.cancel().catch(() => {});\n        }\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  /** Raw streaming POST against the widget gateway \u2014 same auth as\n   *  widgetApiRequest, but returns the Response for SSE consumption\n   *  instead of parsing a JSON envelope. */\n  private async widgetApiStream(body: unknown): Promise<Response> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? 'ai.stream request failed');\n    }\n    return response;\n  }\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// ============================================\n// Widget theme utilities \u2014 the Flowstate Theme Contract (ADR-048)\n// ============================================\n//\n// Flowstate has exactly three themes: 'light' | 'dark' | 'glass'.\n// Glass is the signature default (the liquid-glass look) \u2014 widgets treat it\n// as the unthemed plane. The host hands the active theme to external iframe\n// widgets in two ways:\n//\n//   1. Boot:  a `?theme=` query param appended to the iframe src.\n//   2. Live:  a `postMessage` of `{ type: 'flowstate:theme', theme }`.\n//\n// Widgets map the theme onto their own tokens by setting `data-theme` on\n// their <html> element ('glass' removes the attribute, so widget CSS keeps\n// the glass plane as its default styles).\n//\n// Usage in a widget entry:\n//   import { initWidgetTheme } from '@goflowstate/widget-sdk';\n//   initWidgetTheme(); // apply boot theme + follow live host updates\n\nexport type WidgetTheme = 'light' | 'dark' | 'glass';\n\nconst THEME_MESSAGE_TYPE = 'flowstate:theme';\nconst DEFAULT_THEME: WidgetTheme = 'glass';\n\nfunction isWidgetTheme(value: unknown): value is WidgetTheme {\n  return value === 'light' || value === 'dark' || value === 'glass';\n}\n\n/**\n * Read the theme the host handed the widget at boot via the `?theme=` URL\n * param. Invalid or missing values fall back to 'glass' (the default plane).\n */\nexport function getInitialTheme(): WidgetTheme {\n  if (typeof window === 'undefined') return DEFAULT_THEME;\n  try {\n    const param = new URLSearchParams(window.location.search).get('theme');\n    return isWidgetTheme(param) ? param : DEFAULT_THEME;\n  } catch {\n    return DEFAULT_THEME;\n  }\n}\n\n/**\n * Subscribe to live theme updates pushed by the host\n * (`postMessage({ type: 'flowstate:theme', theme })`). Non-theme messages\n * and invalid theme values are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted,\n * mirroring the ingest channel; a hostile sibling frame cannot restyle the\n * widget. Pass `allowedOrigin` to additionally pin the host's origin.\n */\nexport function onThemeChange(\n  cb: (theme: WidgetTheme) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; theme?: unknown };\n    if (message.type !== THEME_MESSAGE_TYPE) return;\n    if (!isWidgetTheme(message.theme)) return;\n    cb(message.theme);\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n\n/**\n * Apply a theme to the widget document by setting `data-theme` on <html>.\n * 'glass' REMOVES the attribute \u2014 widget CSS treats glass as the default\n * plane, with `[data-theme='light']` / `[data-theme='dark']` overrides.\n */\nexport function applyWidgetTheme(theme: WidgetTheme): void {\n  if (typeof document === 'undefined') return;\n  if (theme === 'glass') {\n    delete document.documentElement.dataset.theme;\n  } else {\n    document.documentElement.dataset.theme = theme;\n  }\n}\n\n/**\n * Convenience boot helper: apply the initial (`?theme=`) theme, then follow\n * live host updates, applying each. Returns the unsubscribe function.\n */\nexport function initWidgetTheme(): () => void {\n  applyWidgetTheme(getInitialTheme());\n  return onThemeChange(applyWidgetTheme);\n}\n", "// ============================================\n// Widget ingest channel \u2014 ADR-043 in-place delivery\n// ============================================\n//\n// When an artifact is dropped on (or sent to) a widget and the ingestion\n// transform produces a result, the HOST pushes the produced artifact into\n// any open iframe of the target widget:\n//\n//   postMessage({ type: 'flowstate:ingest', artifactId, kind?, payload? })\n//\n// `payload` is the produced artifact's parsed JSON content when the host\n// could fetch it (small structured artifacts like kanban boards); widgets\n// without a payload can show an affordance around `artifactId` instead.\n// Same channel shape as the theme handoff (`flowstate:theme`).\n//\n// Usage in a widget entry:\n//   import { onArtifactIngested } from '@goflowstate/widget-sdk';\n//   onArtifactIngested(({ payload }) => mergeBoard(payload));\n\nexport const INGEST_MESSAGE_TYPE = 'flowstate:ingest';\n\nexport interface IngestedArtifact {\n  /** The produced artifact's id (host route: /a/:id). */\n  artifactId: string;\n  /** The produced artifact kind (e.g. 'kanban-board'), when known. */\n  kind?: string;\n  /** Parsed JSON content of the produced artifact, when the host fetched it. */\n  payload?: unknown;\n}\n\n/**\n * Subscribe to ingestion results pushed by the host. Non-ingest messages and\n * malformed payloads are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted \u2014\n * a hostile sibling frame or opener cannot inject into the channel. Pass\n * `allowedOrigin` to additionally pin the host's origin (the session module\n * derives the same value from `webBase`).\n */\nexport function onArtifactIngested(\n  cb: (artifact: IngestedArtifact) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; artifactId?: unknown; kind?: unknown; payload?: unknown };\n    if (message.type !== INGEST_MESSAGE_TYPE) return;\n    if (typeof message.artifactId !== 'string' || !message.artifactId) return;\n    cb({\n      artifactId: message.artifactId,\n      kind: typeof message.kind === 'string' ? message.kind : undefined,\n      payload: message.payload,\n    });\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n"],
+  "mappings": ";;;;;;;;AAUO,SAAS,oBAAoB,MAAuD;AACzF,QAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,QAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,iBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,UAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,QAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AACA,WAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,UAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,UAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,UAAI,IAAI,WAAW,KAAK;AACtB,gBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,cAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,MACpC;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,OAA6B,CAAC;AAClC,YAAI;AACF,iBAAQ,MAAM,IAAI,KAAK;AAAA,QACzB,QAAQ;AAAA,QAER;AACA,cAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,MACxF;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,EACF;AACF;;;ACsIO,SAAS,0BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,QAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,MAAI,CAAC,KAAM,QAAO;AAIlB,QAAM,SAAS,EAAE,IAAI,QAAQ;AAC7B,QAAM,WAAW,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAC5E,QAAM,OAAO,EAAE,IAAI,MAAM;AACzB,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,IACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,IACrE;AAAA,IACA,YAAY,SAAS,OAAO,QAAQ,OAAO,EAAE,IAAI;AAAA,IACjD,UAAU,OAAO,KAAK,QAAQ,OAAO,EAAE,IAAI;AAAA,EAC7C;AACF;AAGO,IAAM,eAAe,CAAC,WAC3B,IAAI,IAAI,OAAO,YAAY,OAAO,OAAO,EAAE;AAE7C,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAKjC,SAAS,gBAAgB,YAAqC;AAC5D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,aAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,IACF;AACA,UAAM,YAAY;AAClB,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,WAAW,SAAS;AAC/C,aAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,IAC/D,GAAG,uBAAuB;AAC1B,UAAM,YAAY,CAAC,MAAoB;AACrC,UAAI,EAAE,WAAW,UAAW;AAC5B,YAAM,OAAO,EAAE;AACf,UAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,mBAAa,KAAK;AAClB,aAAO,oBAAoB,WAAW,SAAS;AAC/C,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO,iBAAiB,WAAW,SAAS;AAC5C,WAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,EAClE,CAAC;AACH;AAiCA,IAAM,aAA8D;AAAA,EAClE,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACR;AAEA,SAAS,YACP,GAC+C;AAC/C,SAAO;AAAA,IACL,MAAM,EAAE;AAAA,IACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,IAC9B,QAAQ,EAAE;AAAA,IACV,OAAQ,EAAE,SAA2B;AAAA,IACrC,SAAS,EAAE;AAAA,IACX,aAAa,EAAE;AAAA,IACf,aAAa,EAAE;AAAA,IACf,WAAW,EAAE;AAAA,IACb,WAAW,EAAE,aAAa,EAAE;AAAA,IAC5B,MAAM,EAAE,QAAQ;AAAA,IAChB,MAAM,EAAE,QAAQ;AAAA,IAChB,gBAAiB,EAAE,cAAuC;AAAA,IAC1D,KAAM,EAAE,QAAwB;AAAA,IAChC,YAAY,EAAE;AAAA,IACd,WAAW,EAAE,aAAa;AAAA,EAC5B;AACF;AAQA,IAAM,eAAe,CAAC,eAAuC;AAC3D,SAAO,CAAC,QAAQ;AACd,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAG7D,aAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,UAAU;AACzE;AAAA,IACF;AACA,QAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,EAC1E;AACF;AAEA,IAAM,oBAAN,MAEA;AAAA,EAQE,YAAY,QAA6B,QAAyB;AAPlE,wBAAS;AACT,wBAAS;AACT,wBAAS;AACT,wBAAiB;AACjB,wBAAiB;AACjB,wBAAiB;AAGf,SAAK,OAAO,OAAO;AACnB,SAAK,UAAU,OAAO;AACtB,SAAK,aAAa,OAAO,cAAc;AACvC,SAAK,UAAU,OAAO;AACtB,SAAK,SAAS,UAAU,aAAa,aAAa,MAAM,CAAC;AAGzD,SAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,EAC3E;AAAA,EAEA,MAAc,cAAc,QAA8C;AACxE,QAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,WAAO,gBAAgB,aAAa,MAAM,CAAC;AAAA,EAC7C;AAAA,EAEA,MAAc,OAAO,QAAiC;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,MACnE,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,MACvB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACjE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,UAAM,OAAO,KAAK;AAClB,WAAO,YAAa,KAAK,SAAS,IAAyB;AAAA,EAC7D;AAAA,EAEA,OAAO;AACL,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,KACE,SACA,MACY;AACZ,UAAM,WAAW,MAAM,cAAc;AACrC,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,YAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,GAAG;AAAA,MACrB;AACA,UAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,IACjD;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,YAAY,OAAe;AACzB,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,EAChF;AAAA,EAEA,WAAW,SAAwB;AACjC,WAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EACvF;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,OAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MAC9C,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QAAqB,MAAc,MAA4B;AACnE,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MACvF,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,MAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAAa,KAAmB;AAC9B,SAAK,OAAO,GAAG;AAAA,EACjB;AAAA,EAEA,UAAU,YAA4B;AACpC,WAAO,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,EACxC;AACF;AAkBO,SAAS,kBAId,OAAyC,CAAC,GAA+C;AACzF,QAAM,UAAU,CAAC,WAAW,WAAW,WAAW,WAAW,SAAS;AACtE,QAAM,UAA2B;AAAA,IAC/B,EAAE,QAAQ,WAAW,MAAM,KAAK,MAAM,OAAO,OAAO,QAAQ,CAAC,GAAG,QAAQ,OAAO,MAAM,MAAM,QAAQ,KAAK;AAAA,IACxG,IAAI,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO;AAAA,MACvC,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACrB;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,QAAQ,MAAM;AAAA,MACvC,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACA,MAAI,QAAuB,KAAK,SAAS;AACzC,MAAI,iBAAuC;AAC3C,MAAI,MAAmB;AACvB,MAAI,SAAS;AAEb,QAAM,OAAO,MAAqD;AAChE,UAAM,cAAc,QAAQ,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;AACpD,UAAM,YAAY,QAAQ,SAAS,KAAK,eAAe,QAAQ;AAC/D,UAAM,QACJ,WAAW,YAAY,MAAM,aAAa,CAAC,QAAQ,UAAU,YAAY,WAAW;AACtF,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AAAA,MACtC;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,MAAM,kBAAkB;AAAA,MACpC,WAAW;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,MAAM,OAAO;AACX,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO,KAAK;AAAA,IACd;AAAA,IACA,KAAK,SAAS,UAAU;AACtB,YAAM,WAAW,UAAU,cAAc;AACzC,YAAM,QAAQ,YAAY,MAAM,QAAQ,KAAK,CAAC,GAAG,QAAQ;AACzD,cAAQ,KAAK,CAAC;AACd,aAAO,MAAM,cAAc,KAAK;AAAA,IAClC;AAAA,IACA,MAAM,YAAY,GAAW;AAC3B,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,WAAW,SAAwB;AACvC,uBAAiB;AACjB,YAAM,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,IAAI;AACrC,UAAI,GAAI,IAAG,SAAS;AACpB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,eAAS;AACT,YAAM,KAAK,aACP,KAAK,WAAW,CAAC,cAAc,CAAC,IAC/B,EAAE,MAAM,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,SAAS;AACb,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,UAAuB;AAC3B,aAAO,CAAC;AAAA,IACV;AAAA,IACA,aAAa,KAAa;AACxB,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,IACA,UAAU,YAAoB;AAC5B,aAAO,4BAA4B,UAAU;AAAA,IAC/C;AAAA,EACF;AACF;AAaO,SAAS,cAIuC;AACrD,QAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,IAAI,kBAA+C,MAAM;AAClE;;;AC9hBA,IAAM,WAAW;AACjB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAOxB,SAAS,iBAAyB;AAChC,QAAM,IAAI,WAAW;AACrB,MAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,QAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,MAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,MAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,QAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,SAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AACnI;AAgBA,IAAI,YAAuD;AAE3D,eAAe,WAAW,QAAoC;AAC5D,MAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,QAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,MAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,IAC9F;AAAA,EACF,CAAC;AAED,cAAY,EAAE,QAAQ,IAAI;AAC1B,SAAO;AACT;AAEA,eAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,QAAM,MAAM,MAAM,WAAW,MAAM;AACnC,QAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,QAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,MAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAOO,IAAM,sBAAN,MAAqD;AAAA,EA2B1D,YAAY,MAAmB;AA1B/B,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ,oBAAmB,oBAAI,IAG7B;AACF,wBAAQ,cAA0D;AAClE,wBAAQ,mBAA8D,CAAC;AACvE,wBAAQ,iBAAoC;AAC5C,wBAAQ,0BAAqE,CAAC;AAC9E,wBAAQ,YAAW;AACnB,wBAAQ,mBAAqD,CAAC;AAC9D,wBAAQ,4BAA+E,CAAC;AACxF,wBAAQ,mBAAkB,oBAAI,IAAiD;AAC/E,wBAAQ;AACR,wBAAQ;AAGR;AAAA,wBAAS;AAGP,SAAK,YAAY,KAAK;AACtB,SAAK,SAAS,KAAK;AACnB,SAAK,cAAc,KAAK;AACxB,SAAK,QAAQ,KAAK;AAClB,SAAK,aAAa,KAAK,aAAa;AACpC,SAAK,gBAAgB,KAAK;AAC1B,SAAK,kBAAkB,KAAK,kBAAkB;AAC9C,SAAK,kBAAkB,KAAK;AAC5B,SAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,QAAI,KAAK,YAAY;AACnB,WAAK,UAAU,oBAAoB;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,SAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,WAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,EACzD;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,QAA4B;AAC9B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA,EAIA,IAAI,YAA8D;AAChE,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,IAAqD;AACjE,SAAK,gBAAgB,KAAK,EAAE;AAC5B,WAAO,MAAM;AACX,YAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,UAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA;AAAA,EAGA,gBAAsB;AACpB,SAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,EAChC;AAAA;AAAA,EAGA,kBAAwB;AACtB,SAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,EAClC;AAAA;AAAA,EAGA,kBAAsC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,qBAAqB,UAA2D;AAC9E,SAAK,uBAAuB,KAAK,QAAQ;AACzC,WAAO,MAAM;AACX,WAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,UAAkD;AAC9D,SAAK,gBAAgB,KAAK,QAAQ;AAClC,WAAO,MAAM;AACX,WAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC5E;AAAA,EACF;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,EACpC;AAAA;AAAA,EAGA,KAAK,OAAe,SAAwB;AAC1C,SAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGA,UAAU,OAAe,IAA8C;AACrE,UAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,SAAK,KAAK,EAAE;AACZ,SAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,WAAO,MAAM;AACX,YAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,UAAI,CAAC,QAAS;AACd,YAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,UAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,IACvC;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,SAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,WAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,YAAM,UAAU,WAAW,MAAM;AAC/B,aAAK,iBAAiB,OAAO,KAAK;AAClC,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,MAC/C,GAAG,GAAK;AAER,WAAK,iBAAiB,IAAI,OAAO;AAAA,QAC/B,SAAS,CAAC,MAAqB;AAC7B,uBAAa,OAAO;AACpB,kBAAQ,CAAC;AAAA,QACX;AAAA,QACA,QAAQ,CAAC,MAAa;AACpB,uBAAa,OAAO;AACpB,iBAAO,CAAC;AAAA,QACV;AAAA,MACF,CAAC;AAED,WAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAO,cAAyC;AACpD,QAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,aAAO,KAAK,WAAW;AAAA,IACzB;AACA,UAAM,IAAI,MAAM,mEAA8D;AAAA,EAChF;AAAA;AAAA,EAGA,IAAI,UAAsB;AACxB,WAAO;AAAA,MACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,MACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,MAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,KAAY;AACd,UAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,WAAO;AAAA,MACL,WAAW,MAA4B;AACrC,cAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,eAAO;AAAA,UACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,UAC3D,MAAM,CAAC,SAAyB;AAC9B,kBAAM,KAAK,IAAI,gBAAgB;AAC/B,gBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,gBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,kBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,mBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,UACtC;AAAA,UACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,UAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,UAAC,CAAC;AAAA,QACxG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,KAAY;AACd,UAAM,WAAW,CAAC,SAChB,KAAK,iBAAiB,2BAA2B,QAAQ,IAAI;AAC/D,UAAM,gBAAgB,CAAC,SAA2C,KAAK,gBAAgB,IAAI;AAC3F,WAAO;AAAA,MACL;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,OAAO,MAAoD;AAChE,cAAM,WAAW,MAAM,cAAc,IAAI;AACzC,cAAM,SAAS,SAAS,MAAM,UAAU;AACxC,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,cAAM,UAAU,IAAI,YAAY;AAChC,YAAI,SAAS;AACb,YAAI;AACF,qBAAS;AACP,kBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,gBAAI,KAAM;AACV,sBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,kBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,qBAAS,OAAO,IAAI,KAAK;AACzB,uBAAW,SAAS,QAAQ;AAC1B,oBAAM,WAAW,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC;AACpE,kBAAI,CAAC,SAAU;AACf,oBAAM,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK;AACvC,kBAAI,CAAC,WAAW,YAAY,SAAU;AACtC,kBAAI;AACJ,kBAAI;AACF,yBAAS,KAAK,MAAM,OAAO;AAAA,cAC7B,QAAQ;AACN;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,UAAE;AAGA,gBAAM,OAAO,OAAO,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,WAAwB;AAC1B,WAAO;AAAA,MACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,MAChC,KAAK,CAAC,gBAAyC;AAC7C,aAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,aAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,MAC1D;AAAA,MACA,gBAAgB,CAAC,OAAoD;AACnE,aAAK,yBAAyB,KAAK,EAAE;AACrC,eAAO,MAAM;AACX,eAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,SAAK,KAAK,gBAAgB;AAAA,MACxB;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,gBAAgB,MAAkC;AAC9D,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,aAAa,yBAAyB;AAAA,MACzE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,0BAA0B;AAAA,IACvF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AACA,UAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,IAC/F;AACA,QAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAQ,OAAmC;AAAA,IAC7C;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,WAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,EAC9F;AAAA,EAEQ,cAAc,OAA2B;AAC/C,UAAM,MAAM,MAAM;AAClB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,gBAAgB;AACnB,cAAM,UAAU,IAAI;AACpB,aAAK,SAAS,QAAQ;AACtB,mBAAW,YAAY,KAAK,iBAAiB;AAC3C,mBAAS,QAAQ,KAAK;AAAA,QACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,mBAAmB;AACtB,cAAM,UAAU,IAAI;AACpB,cAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,YAAI,WAAW;AACb,gBAAM,MAAmB;AAAA,YACvB,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,WAAW,QAAQ;AAAA,UACrB;AACA,qBAAW,YAAY,WAAW;AAChC,qBAAS,GAAG;AAAA,UACd;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK,kBAAkB;AACrB,cAAM,UAAU,IAAI;AACpB,cAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,YAAI,SAAS;AACX,eAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,kBAAQ,QAAQ;AAAA,YACd,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,YACpB,WAAW,QAAQ;AAAA,UACrB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,UAAU,IAAI;AACpB,aAAK,aAAa;AAAA,UAChB,OAAO,QAAQ;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,IAAI,SAAS;AAC9B,YAAI,UAAU;AACZ,eAAK,gBAAgB;AACrB,eAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,QAC1D;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,YAAI,SAAS,KAAK,UAAU;AAC1B,eAAK,WAAW;AAChB,eAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,QAC/C;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,IAAI,IAAI;AACd,aAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,mBAAW,MAAM,KAAK,0BAA0B;AAC9C,cAAI;AACF,eAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,UAC1B,QAAQ;AAAA,UAER;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAEH;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,KAAK,MAAc,SAAwC;AAEjE,SAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,aAAO,OAAO,YAAY,KAAK,GAAG;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,aACZ,MACA,SACwB;AACxB,UAAM,QAAQ,eAAe;AAC7B,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACJ,QAAI,KAAK,aAAa;AACpB,cAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,IAClF,OAAO;AACL,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,UAAgB;AACd,WAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,SAAK,gBAAgB,SAAS;AAC9B,SAAK,gBAAgB,MAAM;AAC3B,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,cAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC9C;AACA,SAAK,iBAAiB,MAAM;AAAA,EAC9B;AACF;AAeO,IAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAiC;AAC/B,WAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,YAAM,UAAU,WAAW,MAAM;AAC/B,eAAO,oBAAoB,WAAW,OAAO;AAC7C,eAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,MAC1F,GAAG,eAAe;AAElB,YAAM,UAAU,CAAC,UAAwB;AACvC,cAAM,MAAM,MAAM;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,YAAI,IAAI,SAAS,OAAQ;AAEzB,qBAAa,OAAO;AACpB,eAAO,oBAAoB,WAAW,OAAO;AAE7C,cAAM,UAAU,IAAI;AACpB,cAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,gBAAQ,GAAG;AAAA,MACb;AAEA,aAAO,iBAAiB,WAAW,OAAO;AAG1C,YAAM,WAA0B;AAAA,QAC9B,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA;AAAA,QACV,OAAO,eAAe;AAAA,QACtB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO;AAAA;AAAA,QACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,MAClC;AAEA,aAAO,OAAO,YAAY,UAAU,GAAG;AAAA,IACzC,CAAC;AAAA,EACH;AACF;;;AC5mBA,IAAM,qBAAqB;AAC3B,IAAM,gBAA6B;AAEnC,SAAS,cAAc,OAAsC;AAC3D,SAAO,UAAU,WAAW,UAAU,UAAU,UAAU;AAC5D;AAMO,SAAS,kBAA+B;AAC7C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,QAAQ,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,OAAO;AACrE,WAAO,cAAc,KAAK,IAAI,QAAQ;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,cACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,mBAAoB;AACzC,QAAI,CAAC,cAAc,QAAQ,KAAK,EAAG;AACnC,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;AAOO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,OAAO,aAAa,YAAa;AACrC,MAAI,UAAU,SAAS;AACrB,WAAO,SAAS,gBAAgB,QAAQ;AAAA,EAC1C,OAAO;AACL,aAAS,gBAAgB,QAAQ,QAAQ;AAAA,EAC3C;AACF;AAMO,SAAS,kBAA8B;AAC5C,mBAAiB,gBAAgB,CAAC;AAClC,SAAO,cAAc,gBAAgB;AACvC;;;ACzEO,IAAM,sBAAsB;AAoB5B,SAAS,mBACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,oBAAqB;AAC1C,QAAI,OAAO,QAAQ,eAAe,YAAY,CAAC,QAAQ,WAAY;AACnE,OAAG;AAAA,MACD,YAAY,QAAQ;AAAA,MACpB,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,MACxD,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;",
   "names": []
 }

package/dist/sdk.d.ts

@@ -1,4 +1,4 @@
-import type { CanvasWidgetSDK, WidgetDisplayState, WidgetEvent, InitPayload, ConsentResult, UserContext, StorageAPI, SettingsAPI, WidgetServiceClient, DbAPI } from './types';
+import type { CanvasWidgetSDK, WidgetDisplayState, WidgetEvent, InitPayload, ConsentResult, UserContext, StorageAPI, SettingsAPI, WidgetServiceClient, AiAPI, DbAPI } from './types';
 import { initSession } from './session';
 /** Internal SDK implementation — not exposed directly to widget authors. */
 export declare class CanvasWidgetSDKImpl implements CanvasWidgetSDK {
@@ -66,6 +66,10 @@ export declare class CanvasWidgetSDKImpl implements CanvasWidgetSDK {
     get storage(): StorageAPI;
     /** Ad-hoc collections/records backend scoped to the canvas/room. */
     get db(): DbAPI;
+    /** Platform LLM access (widget.* aliases only). Requests ride the same
+     *  widget-gateway auth as db/storage; the platform meters every call and
+     *  attributes it to this widget's publishing org. */
+    get ai(): AiAPI;
     /** Widget configuration settings persisted by the canvas host. */
     get settings(): SettingsAPI;
     /** Display a toast notification in the canvas host UI. */
@@ -73,6 +77,10 @@ export declare class CanvasWidgetSDKImpl implements CanvasWidgetSDK {
         level?: string;
         duration?: number;
     }): Promise<void>;
+    /** Raw streaming POST against the widget gateway — same auth as
+     *  widgetApiRequest, but returns the Response for SSE consumption
+     *  instead of parsing a JSON envelope. */
+    private widgetApiStream;
     private widgetApiRequest;
     private storageRequest;
     private handleMessage;

package/dist/sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,WAAW,EAGX,aAAa,EAEb,WAAW,EACX,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,KAAK,EAIN,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AA2ExC,4EAA4E;AAC5E,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,UAAU,CAAmD;IACrE,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,gBAAgB,CAGpB;IACJ,OAAO,CAAC,UAAU,CAAqD;IACvE,OAAO,CAAC,eAAe,CAAkD;IACzE,OAAO,CAAC,aAAa,CAAmC;IACxD,OAAO,CAAC,sBAAsB,CAAkD;IAChF,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAyC;IAChE,OAAO,CAAC,wBAAwB,CAA0D;IAC1F,OAAO,CAAC,eAAe,CAA0D;IACjF,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,eAAe,CAAgC;IAEvD,oHAAoH;IACpH,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAEtC,IAAI,EAAE,WAAW;IAuB7B,oEAAoE;IACpE,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,4FAA4F;IAC5F,IAAI,KAAK,IAAI,kBAAkB,CAE9B;IAED,0FAA0F;IAC1F,IAAI,IAAI,IAAI,WAAW,GAAG,IAAI,CAE7B;IAED;kFAC8E;IAC9E,IAAI,SAAS,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAEhE;IAED,2EAA2E;IAC3E,aAAa,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAQlE,qEAAqE;IACrE,aAAa,IAAI,IAAI;IAIrB,yEAAyE;IACzE,eAAe,IAAI,IAAI;IAIvB,oCAAoC;IACpC,eAAe,IAAI,kBAAkB;IAIrC,oDAAoD;IACpD,oBAAoB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAO/E,yEAAyE;IACzE,SAAS,IAAI,OAAO;IAIpB,uEAAuE;IACvE,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAO/D,mDAAmD;IACnD,iBAAiB,IAAI,IAAI;IAIzB,qFAAqF;IACrF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAI3C,+EAA+E;IAC/E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI;IAYtE,gFAAgF;IAChF,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5E,uFAAuF;IACjF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsB3E,uJAAuJ;IACjJ,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAOrD,uEAAuE;IACvE,IAAI,OAAO,IAAI,UAAU,CAMxB;IAED,oEAAoE;IACpE,IAAI,EAAE,IAAI,KAAK,CAsBd;IAED,kEAAkE;IAClE,IAAI,QAAQ,IAAI,WAAW,CAc1B;IAED,0DAA0D;IACpD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAU5E,gBAAgB;IAyB9B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAqFrB,OAAO,CAAC,IAAI;YAOE,YAAY;IAyB1B,6FAA6F;IAC7F,OAAO,IAAI,IAAI;CAShB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;IACvB;;;;;OAKG;;IAGH;;;;;;OAMG;YACK,OAAO,CAAC,eAAe,CAAC;CAoCjC,CAAC"}
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,WAAW,EAGX,aAAa,EAEb,WAAW,EACX,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,KAAK,EAIL,KAAK,EAIN,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AA2ExC,4EAA4E;AAC5E,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,UAAU,CAAmD;IACrE,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,gBAAgB,CAGpB;IACJ,OAAO,CAAC,UAAU,CAAqD;IACvE,OAAO,CAAC,eAAe,CAAkD;IACzE,OAAO,CAAC,aAAa,CAAmC;IACxD,OAAO,CAAC,sBAAsB,CAAkD;IAChF,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAyC;IAChE,OAAO,CAAC,wBAAwB,CAA0D;IAC1F,OAAO,CAAC,eAAe,CAA0D;IACjF,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,eAAe,CAAgC;IAEvD,oHAAoH;IACpH,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAEtC,IAAI,EAAE,WAAW;IAuB7B,oEAAoE;IACpE,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,4FAA4F;IAC5F,IAAI,KAAK,IAAI,kBAAkB,CAE9B;IAED,0FAA0F;IAC1F,IAAI,IAAI,IAAI,WAAW,GAAG,IAAI,CAE7B;IAED;kFAC8E;IAC9E,IAAI,SAAS,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAEhE;IAED,2EAA2E;IAC3E,aAAa,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAQlE,qEAAqE;IACrE,aAAa,IAAI,IAAI;IAIrB,yEAAyE;IACzE,eAAe,IAAI,IAAI;IAIvB,oCAAoC;IACpC,eAAe,IAAI,kBAAkB;IAIrC,oDAAoD;IACpD,oBAAoB,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,GAAG,MAAM,IAAI;IAO/E,yEAAyE;IACzE,SAAS,IAAI,OAAO;IAIpB,uEAAuE;IACvE,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;IAO/D,mDAAmD;IACnD,iBAAiB,IAAI,IAAI;IAIzB,qFAAqF;IACrF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAI3C,+EAA+E;IAC/E,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI;IAYtE,gFAAgF;IAChF,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAI5E,uFAAuF;IACjF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsB3E,uJAAuJ;IACjJ,MAAM,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;IAOrD,uEAAuE;IACvE,IAAI,OAAO,IAAI,UAAU,CAMxB;IAED,oEAAoE;IACpE,IAAI,EAAE,IAAI,KAAK,CAsBd;IAED;;yDAEqD;IACrD,IAAI,EAAE,IAAI,KAAK,CA4Cd;IAED,kEAAkE;IAClE,IAAI,QAAQ,IAAI,WAAW,CAc1B;IAED,0DAA0D;IACpD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1F;;8CAE0C;YAC5B,eAAe;YAoBf,gBAAgB;IAyB9B,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,aAAa;IAqFrB,OAAO,CAAC,IAAI;YAOE,YAAY;IAyB1B,6FAA6F;IAC7F,OAAO,IAAI,IAAI;CAShB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;IACvB;;;;;OAKG;;IAGH;;;;;;OAMG;YACK,OAAO,CAAC,eAAe,CAAC;CAoCjC,CAAC"}

package/dist/session.d.ts

@@ -68,6 +68,11 @@ export interface SessionClient<TSetup = Record<string, unknown>, TContribution =
     readonly slug: string;
     /** Base URL of the web app (for reveal links and parent navigation). */
     readonly webBase: string;
+    /** Base URL of the mobile PWA, when the host provided one via the optional
+     *  `mobile` iframe param. Participant-facing join links (e.g. a projected
+     *  QR) should prefer it and fall back to `webBase` when absent. Optional so
+     *  hand-rolled SessionClient implementations keep compiling. */
+    readonly mobileBase?: string | null;
     /** Enter the session: the first identified enter creates the group. */
     join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;
     /** Fetch the current blind-aware state. */
@@ -104,8 +109,23 @@ export interface SessionLaunchParams {
     ticket: string | null;
     apiBase: string;
     webBase: string;
+    /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null
+     *  when the host didn't send one — legacy hosts never do — so consumers
+     *  fall back to `webBase` links. Optional so hand-built params keep
+     *  compiling. */
+    mobileBase?: string | null;
+    /** Origin of the page that FRAMES the widget — the `host` iframe param.
+     *  The ready/init ticket handshake and `flowstate:navigate` are addressed
+     *  to this origin (0.2.2). Defaults to `webBase` when absent, which is
+     *  what every pre-0.2.2 host is: the web /w page framing the widget. The
+     *  mobile PWA frames the widget itself (its native lobby) and names itself
+     *  here — without it the browser drops every postMessage between them
+     *  (target-origin mismatch) and the widget never boots. */
+    hostBase?: string;
 }
 export declare function readSessionLaunchParams(): SessionLaunchParams | null;
+/** The origin the handshake is addressed to: the framing page. */
+export declare const hostOriginOf: (params: Pick<SessionLaunchParams, "webBase" | "hostBase">) => string;
 export interface MockSessionOptions<TSetup, TDoc> {
     /** Display name for the single mock member. Default "You". */
     me?: string;