@goflowstate/widget-sdk 0.2.2 → 0.3.0

package/README.md

@@ -104,10 +104,13 @@ for await (const ev of widget.ai.stream({
 }
 ```
 
-Available aliases: `widget.gpt` (OpenAI, strongest), `widget.gpt-mini`
-(OpenAI, fast), `widget.haiku` (Anthropic, fast), `widget.sonnet`
-(Anthropic, strongest). Aliases are platform-managed; the model behind one
-can improve without a code change on your side.
+Available aliases: `widget.haiku` (Anthropic, fast), `widget.sonnet`
+(Anthropic, strongest), `widget.gpt` (OpenAI, strongest), `widget.gpt-mini`
+(OpenAI, fast), `widget.gemini` (Google, strongest), `widget.gemini-mini`
+(Google, fast), `widget.sonar` (Perplexity, answers grounded in live web
+search), `widget.sonar-pro` (Perplexity, web-grounded, deeper research).
+Aliases are platform-managed; the model behind one can improve without a
+code change on your side.
 
 Notes:
 
@@ -138,9 +141,24 @@ if (result.granted) {
 widget.notify('Saved!', { level: 'info', duration: 3000 });
 ```
 
+## Viewer claims (shell guests)
+
+A session opened from a unishell shell page belongs to a guest whose name,
+email or phone the shell has already verified. Those facts arrive on every
+state read as `state.viewer.claims`, and the latest ones are on
+`session.claims`:
+
+    const session = CanvasWidget.initSession();
+    const state = await session.join();
+    const email = session.claims?.email; // { type, value, source, verifiedAt? } | undefined
+
+Claims are only ever the reader's own, and they are context, not
+authorization. `session.claims` is `null` for members, for PWA guests and
+before the first state arrives.
+
 ## Full API Reference
 
-See [`docs/widget-development/`](../../docs/widget-development/) for the complete API reference, manifest format, and hosting guide.
+See the [Flowstate developer docs](https://developer.goflowstate.com/docs/) for the complete API reference, the manifest format, the AI integration guide, and the submission pipeline.
 
 ## License
 

package/dist/canvas-widget-sdk.js

@@ -1,4 +1,4 @@
-// @goflowstate/widget-sdk v0.2.2
+// @goflowstate/widget-sdk v0.3.0
 // https://github.com/goflowstate/goflowstate-sdk
 
 "use strict";
@@ -128,7 +128,8 @@ var CanvasWidgetSDK = (() => {
       myContribution: s.myWishlist ?? null,
       doc: s.plan ?? null,
       artifactId: s.artifactId,
-      extension: s.extension ?? null
+      extension: s.extension ?? null,
+      viewer: s.viewer ? { userId: s.viewer.userId, guest: s.viewer.guest, claims: s.viewer.claims ?? null } : null
     };
   }
   var parentOpener = (hostOrigin) => {
@@ -144,6 +145,7 @@ var CanvasWidgetSDK = (() => {
     slug;
     webBase;
     mobileBase;
+    latestClaims = null;
     apiBase;
     tokenPromise;
     opener;
@@ -185,7 +187,12 @@ var CanvasWidgetSDK = (() => {
       }
       const json = await res.json();
       const data = json.data;
-      return toStateView(data.state ?? data);
+      const view = toStateView(data.state ?? data);
+      this.latestClaims = view.viewer?.claims ?? null;
+      return view;
+    }
+    get claims() {
+      return this.latestClaims;
     }
     join() {
       return this.call("/enter", { method: "POST" });
@@ -227,15 +234,37 @@ var CanvasWidgetSDK = (() => {
         body: JSON.stringify(body ?? {})
       });
     }
-    async request(verb, body) {
-      const token = await this.tokenPromise;
+    async request(verb, body, options) {
+      const signal = options?.signal;
+      if (signal?.aborted) {
+        void this.tokenPromise.catch(() => {
+        });
+        signal.throwIfAborted();
+      }
+      let onAbort;
+      let token;
+      try {
+        token = await (signal ? Promise.race([
+          this.tokenPromise,
+          new Promise((_resolve, reject) => {
+            onAbort = () => reject(signal.reason);
+            signal.addEventListener("abort", onAbort, { once: true });
+          })
+        ]) : this.tokenPromise);
+      } finally {
+        if (signal && onAbort) signal.removeEventListener("abort", onAbort);
+      }
       const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\//, "")}`, {
+        signal,
         method: "POST",
         headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
         body: JSON.stringify(body ?? {})
       });
       if (!res.ok) {
-        const errBody = await res.json().catch(() => ({}));
+        const errBody = await res.json().catch(() => {
+          signal?.throwIfAborted();
+          return {};
+        });
         throw new Error(errBody.message ?? `session service ${res.status}`);
       }
       const json = await res.json();
@@ -245,7 +274,7 @@ var CanvasWidgetSDK = (() => {
       this.opener(url);
     }
     revealUrl(artifactId) {
-      return `${this.webBase}/a/${artifactId}`;
+      return this.mobileBase ? `${this.mobileBase}/?a=${artifactId}` : `${this.webBase}/a/${artifactId}`;
     }
   };
   function initSession() {

package/dist/canvas-widget-sdk.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/sdk.ts", "../src/service.ts", "../src/session.ts"],
-  "sourcesContent": ["// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  AiAPI,\n  AiCallOptions,\n  AiCompleteResult,\n  AiStreamEvent,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Platform LLM access (widget.* aliases only). Requests ride the same\n   *  widget-gateway auth as db/storage; the platform meters every call and\n   *  attributes it to this widget's publishing org. */\n  get ai(): AiAPI {\n    const complete = (opts: AiCallOptions): Promise<AiCompleteResult> =>\n      this.widgetApiRequest('/widget-api/ai/complete', 'POST', opts) as Promise<AiCompleteResult>;\n    const streamRequest = (opts: AiCallOptions): Promise<Response> => this.widgetApiStream(opts);\n    return {\n      complete,\n      // Async generator over the gateway's SSE frames. Ends on [DONE] or\n      // stream end; returning early (break) cancels the fetch body, which\n      // the gateway sees as a disconnect and aborts the upstream call, so\n      // an abandoned stream stops generating and billing.\n      async *stream(opts: AiCallOptions): AsyncGenerator<AiStreamEvent> {\n        const response = await streamRequest(opts);\n        const reader = response.body?.getReader();\n        if (!reader) throw new Error('ai.stream: response has no body');\n        const decoder = new TextDecoder();\n        let buffer = '';\n        try {\n          for (;;) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += decoder.decode(value, { stream: true });\n            const frames = buffer.split('\\n\\n');\n            buffer = frames.pop() ?? '';\n            for (const frame of frames) {\n              const dataLine = frame.split('\\n').find((l) => l.startsWith('data:'));\n              if (!dataLine) continue;\n              const payload = dataLine.slice(5).trim();\n              if (!payload || payload === '[DONE]') continue;\n              let parsed: AiStreamEvent;\n              try {\n                parsed = JSON.parse(payload) as AiStreamEvent;\n              } catch {\n                continue;\n              }\n              yield parsed;\n            }\n          }\n        } finally {\n          // Break/return path: releases the connection so the gateway's\n          // req.on('close') fires and the upstream call aborts.\n          await reader.cancel().catch(() => {});\n        }\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  /** Raw streaming POST against the widget gateway \u2014 same auth as\n   *  widgetApiRequest, but returns the Response for SSE consumption\n   *  instead of parsing a JSON envelope. */\n  private async widgetApiStream(body: unknown): Promise<Response> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? 'ai.stream request failed');\n    }\n    return response;\n  }\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n  /** Base URL of the mobile PWA, when the host provided one via the optional\n   *  `mobile` iframe param. Participant-facing join links (e.g. a projected\n   *  QR) should prefer it and fall back to `webBase` when absent. Optional so\n   *  hand-rolled SessionClient implementations keep compiling. */\n  readonly mobileBase?: string | null;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. */\n  request<T = unknown>(verb: string, body?: unknown): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n  /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null\n   *  when the host didn't send one \u2014 legacy hosts never do \u2014 so consumers\n   *  fall back to `webBase` links. Optional so hand-built params keep\n   *  compiling. */\n  mobileBase?: string | null;\n  /** Origin of the page that FRAMES the widget \u2014 the `host` iframe param.\n   *  The ready/init ticket handshake and `flowstate:navigate` are addressed\n   *  to this origin (0.2.2). Defaults to `webBase` when absent, which is\n   *  what every pre-0.2.2 host is: the web /w page framing the widget. The\n   *  mobile PWA frames the widget itself (its native lobby) and names itself\n   *  here \u2014 without it the browser drops every postMessage between them\n   *  (target-origin mismatch) and the widget never boots. */\n  hostBase?: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  // `mobile` is optional and has NO default: absent means the host predates\n  // the PWA doors (or has none configured) and consumers must keep minting\n  // legacy webBase links.\n  const mobile = q.get('mobile');\n  const webBase = (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, '');\n  const host = q.get('host');\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase,\n    mobileBase: mobile ? mobile.replace(/\\/$/, '') : null,\n    hostBase: host ? host.replace(/\\/$/, '') : webBase,\n  };\n}\n\n/** The origin the handshake is addressed to: the framing page. */\nexport const hostOriginOf = (params: Pick<SessionLaunchParams, 'webBase' | 'hostBase'>): string =>\n  new URL(params.hostBase ?? params.webBase).origin;\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent (host) page and wait for it to hand over\n *  the single-use session ticket. `hostOrigin` is the framing page's origin\n *  (`hostOriginOf`) \u2014 the web /w page or the mobile PWA's native lobby. */\nfunction awaitInitTicket(hostOrigin: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = hostOrigin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\nfunction toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (hostOrigin: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the host page to navigate itself (the web /w page shares the\n      // session cookie; the PWA lobby routes reveals natively).\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, hostOrigin);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc>\n  implements SessionClient<TSetup, TContribution, TDoc>\n{\n  readonly slug: string;\n  readonly webBase: string;\n  readonly mobileBase: string | null;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.mobileBase = params.mobileBase ?? null;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(hostOriginOf(params));\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(hostOriginOf(params));\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    return toStateView((data.state ?? data) as WireSessionState);\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(verb: string, body?: unknown): Promise<T> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    return `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    { userId: 'mock-me', name: opts.me ?? 'You', color: palette[0], sealed: false, isMe: true, isHost: true },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,WAAS,oBAAoB,MAAuD;AACzF,UAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,UAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,mBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,YAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,YAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,cAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,UAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,gBAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAChD;AACA,aAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC5C;AAEA,WAAO;AAAA,MACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,YAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,YAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,YAAI,IAAI,WAAW,KAAK;AACtB,kBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,gBAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,QACpC;AAEA,YAAI,CAAC,IAAI,IAAI;AACX,cAAI,OAA6B,CAAC;AAClC,cAAI;AACF,mBAAQ,MAAM,IAAI,KAAK;AAAA,UACzB,QAAQ;AAAA,UAER;AACA,gBAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,QACxF;AACA,eAAQ,MAAM,IAAI,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;;;ACsIO,WAAS,0BAAsD;AACpE,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,UAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,UAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,QAAI,CAAC,KAAM,QAAO;AAIlB,UAAM,SAAS,EAAE,IAAI,QAAQ;AAC7B,UAAM,WAAW,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAC5E,UAAM,OAAO,EAAE,IAAI,MAAM;AACzB,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,MACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,MACrE;AAAA,MACA,YAAY,SAAS,OAAO,QAAQ,OAAO,EAAE,IAAI;AAAA,MACjD,UAAU,OAAO,KAAK,QAAQ,OAAO,EAAE,IAAI;AAAA,IAC7C;AAAA,EACF;AAGO,MAAM,eAAe,CAAC,WAC3B,IAAI,IAAI,OAAO,YAAY,OAAO,OAAO,EAAE;AAE7C,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AAKjC,WAAS,gBAAgB,YAAqC;AAC5D,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,eAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,MACF;AACA,YAAM,YAAY;AAClB,YAAM,QAAQ,WAAW,MAAM;AAC7B,eAAO,oBAAoB,WAAW,SAAS;AAC/C,eAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,MAC/D,GAAG,uBAAuB;AAC1B,YAAM,YAAY,CAAC,MAAoB;AACrC,YAAI,EAAE,WAAW,UAAW;AAC5B,cAAM,OAAO,EAAE;AACf,YAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,qBAAa,KAAK;AAClB,eAAO,oBAAoB,WAAW,SAAS;AAC/C,gBAAQ,KAAK,MAAM;AAAA,MACrB;AACA,aAAO,iBAAiB,WAAW,SAAS;AAC5C,aAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,IAClE,CAAC;AAAA,EACH;AAiCA,MAAM,aAA8D;AAAA,IAClE,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAEA,WAAS,YACP,GAC+C;AAC/C,WAAO;AAAA,MACL,MAAM,EAAE;AAAA,MACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,MAC9B,QAAQ,EAAE;AAAA,MACV,OAAQ,EAAE,SAA2B;AAAA,MACrC,SAAS,EAAE;AAAA,MACX,aAAa,EAAE;AAAA,MACf,aAAa,EAAE;AAAA,MACf,WAAW,EAAE;AAAA,MACb,WAAW,EAAE,aAAa,EAAE;AAAA,MAC5B,MAAM,EAAE,QAAQ;AAAA,MAChB,MAAM,EAAE,QAAQ;AAAA,MAChB,gBAAiB,EAAE,cAAuC;AAAA,MAC1D,KAAM,EAAE,QAAwB;AAAA,MAChC,YAAY,EAAE;AAAA,MACd,WAAW,EAAE,aAAa;AAAA,IAC5B;AAAA,EACF;AAQA,MAAM,eAAe,CAAC,eAAuC;AAC3D,WAAO,CAAC,QAAQ;AACd,UAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAG7D,eAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,UAAU;AACzE;AAAA,MACF;AACA,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,EACF;AAEA,MAAM,oBAAN,MAEA;AAAA,IACW;AAAA,IACA;AAAA,IACA;AAAA,IACQ;AAAA,IACA;AAAA,IACA;AAAA,IAEjB,YAAY,QAA6B,QAAyB;AAChE,WAAK,OAAO,OAAO;AACnB,WAAK,UAAU,OAAO;AACtB,WAAK,aAAa,OAAO,cAAc;AACvC,WAAK,UAAU,OAAO;AACtB,WAAK,SAAS,UAAU,aAAa,aAAa,MAAM,CAAC;AAGzD,WAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IAC3E;AAAA,IAEA,MAAc,cAAc,QAA8C;AACxE,UAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,aAAO,gBAAgB,aAAa,MAAM,CAAC;AAAA,IAC7C;AAAA,IAEA,MAAc,OAAO,QAAiC;AACpD,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,QAChE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,MACjC,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,YAAM,QAAQ,MAAM,KAAK;AACzB,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,QACnE,GAAG;AAAA,QACH,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,QACvB;AAAA,MACF,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,cAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,MACjE;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,YAAM,OAAO,KAAK;AAClB,aAAO,YAAa,KAAK,SAAS,IAAyB;AAAA,IAC7D;AAAA,IAEA,OAAO;AACL,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C;AAAA,IAEA,QAAQ;AACN,aAAO,KAAK,KAAK,QAAQ;AAAA,IAC3B;AAAA,IAEA,KACE,SACA,MACY;AACZ,YAAM,WAAW,MAAM,cAAc;AACrC,UAAI,UAAU;AACd,UAAI,QAA8C;AAClD,YAAM,OAAO,YAAY;AACvB,YAAI;AACF,gBAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,cAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,QACzB,SAAS,KAAK;AACZ,gBAAM,UAAU,GAAG;AAAA,QACrB;AACA,YAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,MACjD;AACA,WAAK,KAAK;AACV,aAAO,MAAM;AACX,kBAAU;AACV,YAAI,MAAO,cAAa,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IAEA,YAAY,OAAe;AACzB,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,IAChF;AAAA,IAEA,WAAW,SAAwB;AACjC,aAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,IACvF;AAAA,IAEA,QAAQ;AACN,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C;AAAA,IAEA,OAAO,MAAc,MAAgB;AACnC,aAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,QAC9C,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,QAAqB,MAAc,MAA4B;AACnE,YAAM,QAAQ,MAAM,KAAK;AACzB,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,QACvF,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,QAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,MACjC,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,MACpE;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK;AAAA,IACd;AAAA,IAEA,aAAa,KAAmB;AAC9B,WAAK,OAAO,GAAG;AAAA,IACjB;AAAA,IAEA,UAAU,YAA4B;AACpC,aAAO,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,IACxC;AAAA,EACF;AA0HO,WAAS,cAIuC;AACrD,UAAM,SAAS,wBAAwB;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO,IAAI,kBAA+C,MAAM;AAAA,EAClE;;;AF9hBA,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAOxB,WAAS,iBAAyB;AAChC,UAAM,IAAI,WAAW;AACrB,QAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,UAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,QAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,QAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,MAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,MAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,UAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,WAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AAAA,EACnI;AAgBA,MAAI,YAAuD;AAE3D,iBAAe,WAAW,QAAoC;AAC5D,QAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,UAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,QAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,UAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,MAC9F;AAAA,IACF,CAAC;AAED,gBAAY,EAAE,QAAQ,IAAI;AAC1B,WAAO;AAAA,EACT;AAEA,iBAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,UAAM,MAAM,MAAM,WAAW,MAAM;AACnC,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,UAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,QAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,UAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,WAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAAA,EACZ;AAOO,MAAM,sBAAN,MAAqD;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,oBAAI,IAG7B;AAAA,IACM,aAA0D;AAAA,IAC1D,kBAA8D,CAAC;AAAA,IAC/D,gBAAoC;AAAA,IACpC,yBAAqE,CAAC;AAAA,IACtE,WAAW;AAAA,IACX,kBAAqD,CAAC;AAAA,IACtD,2BAA+E,CAAC;AAAA,IAChF,kBAAkB,oBAAI,IAAiD;AAAA,IACvE;AAAA,IACA;AAAA;AAAA,IAGC;AAAA,IAET,YAAY,MAAmB;AAC7B,WAAK,YAAY,KAAK;AACtB,WAAK,SAAS,KAAK;AACnB,WAAK,cAAc,KAAK;AACxB,WAAK,QAAQ,KAAK;AAClB,WAAK,aAAa,KAAK,aAAa;AACpC,WAAK,gBAAgB,KAAK;AAC1B,WAAK,kBAAkB,KAAK,kBAAkB;AAC9C,WAAK,kBAAkB,KAAK;AAC5B,WAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,UAAI,KAAK,YAAY;AACnB,aAAK,UAAU,oBAAoB;AAAA,UACjC,SAAS,KAAK;AAAA,UACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,QAC9D,CAAC;AAAA,MACH;AAEA,WAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,aAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,IACzD;AAAA;AAAA,IAGA,IAAI,WAAmB;AACrB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,QAA4B;AAC9B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,OAA2B;AAC7B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA;AAAA,IAIA,IAAI,YAA8D;AAChE,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,IAAqD;AACjE,WAAK,gBAAgB,KAAK,EAAE;AAC5B,aAAO,MAAM;AACX,cAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,YAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF;AAAA;AAAA,IAGA,gBAAsB;AACpB,WAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,IAChC;AAAA;AAAA,IAGA,kBAAwB;AACtB,WAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,IAClC;AAAA;AAAA,IAGA,kBAAsC;AACpC,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,qBAAqB,UAA2D;AAC9E,WAAK,uBAAuB,KAAK,QAAQ;AACzC,aAAO,MAAM;AACX,aAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC1F;AAAA,IACF;AAAA;AAAA,IAGA,YAAqB;AACnB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,UAAkD;AAC9D,WAAK,gBAAgB,KAAK,QAAQ;AAClC,aAAO,MAAM;AACX,aAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC5E;AAAA,IACF;AAAA;AAAA,IAGA,oBAA0B;AACxB,WAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,IACpC;AAAA;AAAA,IAGA,KAAK,OAAe,SAAwB;AAC1C,WAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC5C;AAAA;AAAA,IAGA,UAAU,OAAe,IAA8C;AACrE,YAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,WAAK,KAAK,EAAE;AACZ,WAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,aAAO,MAAM;AACX,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,YAAI,CAAC,QAAS;AACd,cAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,YAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,MACvC;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,WAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,IACzD;AAAA;AAAA,IAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,aAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,cAAM,UAAU,WAAW,MAAM;AAC/B,eAAK,iBAAiB,OAAO,KAAK;AAClC,iBAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,QAC/C,GAAG,GAAK;AAER,aAAK,iBAAiB,IAAI,OAAO;AAAA,UAC/B,SAAS,CAAC,MAAqB;AAC7B,yBAAa,OAAO;AACpB,oBAAQ,CAAC;AAAA,UACX;AAAA,UACA,QAAQ,CAAC,MAAa;AACpB,yBAAa,OAAO;AACpB,mBAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAED,aAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,MAChD,CAAC;AAAA,IACH;AAAA;AAAA,IAGA,MAAM,OAAO,cAAyC;AACpD,UAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,eAAO,KAAK,WAAW;AAAA,MACzB;AACA,YAAM,IAAI,MAAM,mEAA8D;AAAA,IAChF;AAAA;AAAA,IAGA,IAAI,UAAsB;AACxB,aAAO;AAAA,QACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,QACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,QAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,MAC3E;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,KAAY;AACd,YAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,aAAO;AAAA,QACL,WAAW,MAA4B;AACrC,gBAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,iBAAO;AAAA,YACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,YACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,YAC3D,MAAM,CAAC,SAAyB;AAC9B,oBAAM,KAAK,IAAI,gBAAgB;AAC/B,kBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,kBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,oBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,qBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,YACtC;AAAA,YACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,YAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,YAAC,CAAC;AAAA,UACxG;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAY;AACd,YAAM,WAAW,CAAC,SAChB,KAAK,iBAAiB,2BAA2B,QAAQ,IAAI;AAC/D,YAAM,gBAAgB,CAAC,SAA2C,KAAK,gBAAgB,IAAI;AAC3F,aAAO;AAAA,QACL;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,OAAO,OAAO,MAAoD;AAChE,gBAAM,WAAW,MAAM,cAAc,IAAI;AACzC,gBAAM,SAAS,SAAS,MAAM,UAAU;AACxC,cAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,gBAAM,UAAU,IAAI,YAAY;AAChC,cAAI,SAAS;AACb,cAAI;AACF,uBAAS;AACP,oBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,kBAAI,KAAM;AACV,wBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,oBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,uBAAS,OAAO,IAAI,KAAK;AACzB,yBAAW,SAAS,QAAQ;AAC1B,sBAAM,WAAW,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC;AACpE,oBAAI,CAAC,SAAU;AACf,sBAAM,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK;AACvC,oBAAI,CAAC,WAAW,YAAY,SAAU;AACtC,oBAAI;AACJ,oBAAI;AACF,2BAAS,KAAK,MAAM,OAAO;AAAA,gBAC7B,QAAQ;AACN;AAAA,gBACF;AACA,sBAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF,UAAE;AAGA,kBAAM,OAAO,OAAO,EAAE,MAAM,MAAM;AAAA,YAAC,CAAC;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,WAAwB;AAC1B,aAAO;AAAA,QACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,QAChC,KAAK,CAAC,gBAAyC;AAC7C,eAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,eAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,QAC1D;AAAA,QACA,gBAAgB,CAAC,OAAoD;AACnE,eAAK,yBAAyB,KAAK,EAAE;AACrC,iBAAO,MAAM;AACX,iBAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,UACxF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,WAAK,KAAK,gBAAgB;AAAA,QACxB;AAAA,QACA,OAAO,MAAM,SAAS;AAAA,QACtB,UAAU,MAAM,YAAY;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAc,gBAAgB,MAAkC;AAC9D,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,UAAI,KAAK,iBAAiB;AACxB,gBAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,MAC3D;AACA,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,aAAa,yBAAyB;AAAA,QACzE,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAO,IAA+B,WAAW,0BAA0B;AAAA,MACvF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,YAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,UAAI,KAAK,iBAAiB;AACxB,gBAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,MAC3D;AACA,YAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,UAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,aAAK,OAAO,KAAK,UAAU,IAAI;AAAA,MACjC;AACA,YAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,MAC/F;AACA,UAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,cAAM,SAAS,MAAM,SAAS,KAAK;AACnC,eAAQ,OAAmC;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAAA,IAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,aAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,IAC9F;AAAA,IAEQ,cAAc,OAA2B;AAC/C,YAAM,MAAM,MAAM;AAClB,UAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK,gBAAgB;AACnB,gBAAM,UAAU,IAAI;AACpB,eAAK,SAAS,QAAQ;AACtB,qBAAW,YAAY,KAAK,iBAAiB;AAC3C,qBAAS,QAAQ,KAAK;AAAA,UACxB;AACA;AAAA,QACF;AAAA,QACA,KAAK,mBAAmB;AACtB,gBAAM,UAAU,IAAI;AACpB,gBAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,cAAI,WAAW;AACb,kBAAM,MAAmB;AAAA,cACvB,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,WAAW,QAAQ;AAAA,YACrB;AACA,uBAAW,YAAY,WAAW;AAChC,uBAAS,GAAG;AAAA,YACd;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK,kBAAkB;AACrB,gBAAM,UAAU,IAAI;AACpB,gBAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,cAAI,SAAS;AACX,iBAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,oBAAQ,QAAQ;AAAA,cACd,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,YAAY,QAAQ;AAAA,cACpB,WAAW,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH;AACA;AAAA,QACF;AAAA,QACA,KAAK,sBAAsB;AACzB,gBAAM,UAAU,IAAI;AACpB,eAAK,aAAa;AAAA,YAChB,OAAO,QAAQ;AAAA,YACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,UAC9C;AACA;AAAA,QACF;AAAA,QACA,KAAK,wBAAwB;AAC3B,gBAAM,WAAW,IAAI,SAAS;AAC9B,cAAI,UAAU;AACZ,iBAAK,gBAAgB;AACrB,iBAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,UAC1D;AACA;AAAA,QACF;AAAA,QACA,KAAK,gBAAgB;AACnB,gBAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,cAAI,SAAS,KAAK,UAAU;AAC1B,iBAAK,WAAW;AAChB,iBAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,UAC/C;AACA;AAAA,QACF;AAAA,QACA,KAAK,0BAA0B;AAC7B,gBAAM,IAAI,IAAI;AACd,eAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,qBAAW,MAAM,KAAK,0BAA0B;AAC9C,gBAAI;AACF,iBAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,YAC1B,QAAQ;AAAA,YAER;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAEH;AAAA,MACJ;AAAA,IACF;AAAA,IAEQ,KAAK,MAAc,SAAwC;AAEjE,WAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,eAAO,OAAO,YAAY,KAAK,GAAG;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,IAEA,MAAc,aACZ,MACA,SACwB;AACxB,YAAM,QAAQ,eAAe;AAC7B,YAAM,YAAY,KAAK,IAAI;AAE3B,UAAI;AACJ,UAAI,KAAK,aAAa;AACpB,gBAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,MAClF,OAAO;AACL,gBAAQ;AAAA,MACV;AAEA,aAAO;AAAA,QACL,UAAU;AAAA,QACV;AAAA,QACA,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,UAAgB;AACd,aAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,WAAK,gBAAgB,SAAS;AAC9B,WAAK,gBAAgB,MAAM;AAC3B,iBAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,gBAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,MAC9C;AACA,WAAK,iBAAiB,MAAM;AAAA,IAC9B;AAAA,EACF;AAeO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,OAAiC;AAC/B,aAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU,WAAW,MAAM;AAC/B,iBAAO,oBAAoB,WAAW,OAAO;AAC7C,iBAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,QAC1F,GAAG,eAAe;AAElB,cAAM,UAAU,CAAC,UAAwB;AACvC,gBAAM,MAAM,MAAM;AAClB,cAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,cAAI,IAAI,SAAS,OAAQ;AAEzB,uBAAa,OAAO;AACpB,iBAAO,oBAAoB,WAAW,OAAO;AAE7C,gBAAM,UAAU,IAAI;AACpB,gBAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,kBAAQ,GAAG;AAAA,QACb;AAEA,eAAO,iBAAiB,WAAW,OAAO;AAG1C,cAAM,WAA0B;AAAA,UAC9B,UAAU;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA;AAAA,UACV,OAAO,eAAe;AAAA,UACtB,WAAW,KAAK,IAAI;AAAA,UACpB,OAAO;AAAA;AAAA,UACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,QAClC;AAEA,eAAO,OAAO,YAAY,UAAU,GAAG;AAAA,MACzC,CAAC;AAAA,IACH;AAAA,EACF;",
+  "sourcesContent": ["// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  AiAPI,\n  AiCallOptions,\n  AiCompleteResult,\n  AiStreamEvent,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Platform LLM access (widget.* aliases only). Requests ride the same\n   *  widget-gateway auth as db/storage; the platform meters every call and\n   *  attributes it to this widget's publishing org. */\n  get ai(): AiAPI {\n    const complete = (opts: AiCallOptions): Promise<AiCompleteResult> =>\n      this.widgetApiRequest('/widget-api/ai/complete', 'POST', opts) as Promise<AiCompleteResult>;\n    const streamRequest = (opts: AiCallOptions): Promise<Response> => this.widgetApiStream(opts);\n    return {\n      complete,\n      // Async generator over the gateway's SSE frames. Ends on [DONE] or\n      // stream end; returning early (break) cancels the fetch body, which\n      // the gateway sees as a disconnect and aborts the upstream call, so\n      // an abandoned stream stops generating and billing.\n      async *stream(opts: AiCallOptions): AsyncGenerator<AiStreamEvent> {\n        const response = await streamRequest(opts);\n        const reader = response.body?.getReader();\n        if (!reader) throw new Error('ai.stream: response has no body');\n        const decoder = new TextDecoder();\n        let buffer = '';\n        try {\n          for (;;) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += decoder.decode(value, { stream: true });\n            const frames = buffer.split('\\n\\n');\n            buffer = frames.pop() ?? '';\n            for (const frame of frames) {\n              const dataLine = frame.split('\\n').find((l) => l.startsWith('data:'));\n              if (!dataLine) continue;\n              const payload = dataLine.slice(5).trim();\n              if (!payload || payload === '[DONE]') continue;\n              let parsed: AiStreamEvent;\n              try {\n                parsed = JSON.parse(payload) as AiStreamEvent;\n              } catch {\n                continue;\n              }\n              yield parsed;\n            }\n          }\n        } finally {\n          // Break/return path: releases the connection so the gateway's\n          // req.on('close') fires and the upstream call aborts.\n          await reader.cancel().catch(() => {});\n        }\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  /** Raw streaming POST against the widget gateway \u2014 same auth as\n   *  widgetApiRequest, but returns the Response for SSE consumption\n   *  instead of parsing a JSON envelope. */\n  private async widgetApiStream(body: unknown): Promise<Response> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? 'ai.stream request failed');\n    }\n    return response;\n  }\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** One verified (or user-entered) fact about the viewer, from a unishell\n *  shell. Read-only context: never use it to authorize anything. */\nexport interface SessionClaim {\n  type: 'name' | 'email' | 'phone';\n  value: string;\n  /** 'user-entered', 'otp', or a surface id such as 'discord'. */\n  source: string;\n  /** Present only when the value was proven. */\n  verifiedAt?: string;\n}\n\nexport interface SessionClaimSet {\n  name?: SessionClaim;\n  email?: SessionClaim;\n  phone?: SessionClaim;\n}\n\n/** Who this state was read for. `claims` is set only for a shell guest\n *  reading their own state; it is never another participant's. */\nexport interface SessionViewer {\n  userId: string;\n  guest: boolean;\n  claims: SessionClaimSet | null;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n  /** The reader of this state; null when the server sent none (servers\n   *  before the shell endpoints). Optional so hand-built views keep compiling. */\n  viewer?: SessionViewer | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n  /** Base URL of the mobile PWA, when the host provided one via the optional\n   *  `mobile` iframe param. Participant-facing join links (e.g. a projected\n   *  QR) should prefer it and fall back to `webBase` when absent. Optional so\n   *  hand-rolled SessionClient implementations keep compiling. */\n  readonly mobileBase?: string | null;\n  /** The viewer's own shell claims from the most recent state read; null\n   *  until a state arrives or when there are none. Optional so hand-rolled\n   *  SessionClient implementations keep compiling. */\n  readonly claims?: SessionClaimSet | null;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. Optional cancellation stops this request,\n   *  including its wait for the shared ticket; it does not cancel ticket redemption. */\n  request<T = unknown>(\n    verb: string,\n    body?: unknown,\n    options?: { signal?: AbortSignal }\n  ): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n  /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null\n   *  when the host didn't send one \u2014 legacy hosts never do \u2014 so consumers\n   *  fall back to `webBase` links. Optional so hand-built params keep\n   *  compiling. */\n  mobileBase?: string | null;\n  /** Origin of the page that FRAMES the widget \u2014 the `host` iframe param.\n   *  The ready/init ticket handshake and `flowstate:navigate` are addressed\n   *  to this origin (0.2.2). Defaults to `webBase` when absent, which is\n   *  what every pre-0.2.2 host is: the web /w page framing the widget. The\n   *  mobile PWA frames the widget itself (its native lobby) and names itself\n   *  here \u2014 without it the browser drops every postMessage between them\n   *  (target-origin mismatch) and the widget never boots. */\n  hostBase?: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  // `mobile` is optional and has NO default: absent means the host predates\n  // the PWA doors (or has none configured) and consumers must keep minting\n  // legacy webBase links.\n  const mobile = q.get('mobile');\n  const webBase = (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, '');\n  const host = q.get('host');\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase,\n    mobileBase: mobile ? mobile.replace(/\\/$/, '') : null,\n    hostBase: host ? host.replace(/\\/$/, '') : webBase,\n  };\n}\n\n/** The origin the handshake is addressed to: the framing page. */\nexport const hostOriginOf = (params: Pick<SessionLaunchParams, 'webBase' | 'hostBase'>): string =>\n  new URL(params.hostBase ?? params.webBase).origin;\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent (host) page and wait for it to hand over\n *  the single-use session ticket. `hostOrigin` is the framing page's origin\n *  (`hostOriginOf`) \u2014 the web /w page or the mobile PWA's native lobby. */\nfunction awaitInitTicket(hostOrigin: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = hostOrigin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n  viewer?: { userId: string; guest: boolean; claims?: SessionClaimSet };\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\n/** Exported for tests; not part of the package entry point. */\nexport function toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n    viewer: s.viewer\n      ? { userId: s.viewer.userId, guest: s.viewer.guest, claims: s.viewer.claims ?? null }\n      : null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (hostOrigin: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the host page to navigate itself (the web /w page shares the\n      // session cookie; the PWA lobby routes reveals natively).\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, hostOrigin);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc> implements SessionClient<\n  TSetup,\n  TContribution,\n  TDoc\n> {\n  readonly slug: string;\n  readonly webBase: string;\n  readonly mobileBase: string | null;\n  private latestClaims: SessionClaimSet | null = null;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.mobileBase = params.mobileBase ?? null;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(hostOriginOf(params));\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(hostOriginOf(params));\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    const view = toStateView<TSetup, TContribution, TDoc>((data.state ?? data) as WireSessionState);\n    this.latestClaims = view.viewer?.claims ?? null;\n    return view;\n  }\n\n  get claims(): SessionClaimSet | null {\n    return this.latestClaims;\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(\n    verb: string,\n    body?: unknown,\n    options?: { signal?: AbortSignal }\n  ): Promise<T> {\n    const signal = options?.signal;\n    if (signal?.aborted) {\n      // Observe eager redemption even when this caller never waits for it.\n      // Retain the original promise so other callers still receive its failure.\n      void this.tokenPromise.catch(() => {});\n      signal.throwIfAborted();\n    }\n    let onAbort: (() => void) | undefined;\n    let token: string;\n    try {\n      token = await (signal\n        ? Promise.race([\n            this.tokenPromise,\n            new Promise<never>((_resolve, reject) => {\n              onAbort = () => reject(signal.reason);\n              signal.addEventListener('abort', onAbort, { once: true });\n            }),\n          ])\n        : this.tokenPromise);\n    } finally {\n      if (signal && onAbort) signal.removeEventListener('abort', onAbort);\n    }\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      signal,\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => {\n        signal?.throwIfAborted();\n        return {};\n      })) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    // FB-133: honour the PWA base like the wall's take-home QR does \u2014 a\n    // phone-born session's reveal opens in the PWA, not the legacy web page.\n    return this.mobileBase\n      ? `${this.mobileBase}/?a=${artifactId}`\n      : `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Claims the mock viewer carries (shell-guest dev). Default null. */\n  claims?: SessionClaimSet | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    {\n      userId: 'mock-me',\n      name: opts.me ?? 'You',\n      color: palette[0],\n      sealed: false,\n      isMe: true,\n      isHost: true,\n    },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n      viewer: { userId: 'mock-me', guest: false, claims: opts.claims ?? null },\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    claims: opts.claims ?? null,\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,WAAS,oBAAoB,MAAuD;AACzF,UAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,UAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,mBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,YAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,YAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,cAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,UAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,gBAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAChD;AACA,aAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC5C;AAEA,WAAO;AAAA,MACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,YAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,YAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,YAAI,IAAI,WAAW,KAAK;AACtB,kBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,gBAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,QACpC;AAEA,YAAI,CAAC,IAAI,IAAI;AACX,cAAI,OAA6B,CAAC;AAClC,cAAI;AACF,mBAAQ,MAAM,IAAI,KAAK;AAAA,UACzB,QAAQ;AAAA,UAER;AACA,gBAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,QACxF;AACA,eAAQ,MAAM,IAAI,KAAK;AAAA,MACzB;AAAA,IACF;AAAA,EACF;;;AC2KO,WAAS,0BAAsD;AACpE,QAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,UAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,UAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,QAAI,CAAC,KAAM,QAAO;AAIlB,UAAM,SAAS,EAAE,IAAI,QAAQ;AAC7B,UAAM,WAAW,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAC5E,UAAM,OAAO,EAAE,IAAI,MAAM;AACzB,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,MACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,MACrE;AAAA,MACA,YAAY,SAAS,OAAO,QAAQ,OAAO,EAAE,IAAI;AAAA,MACjD,UAAU,OAAO,KAAK,QAAQ,OAAO,EAAE,IAAI;AAAA,IAC7C;AAAA,EACF;AAGO,MAAM,eAAe,CAAC,WAC3B,IAAI,IAAI,OAAO,YAAY,OAAO,OAAO,EAAE;AAE7C,MAAM,0BAA0B;AAChC,MAAM,2BAA2B;AAKjC,WAAS,gBAAgB,YAAqC;AAC5D,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,eAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,MACF;AACA,YAAM,YAAY;AAClB,YAAM,QAAQ,WAAW,MAAM;AAC7B,eAAO,oBAAoB,WAAW,SAAS;AAC/C,eAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,MAC/D,GAAG,uBAAuB;AAC1B,YAAM,YAAY,CAAC,MAAoB;AACrC,YAAI,EAAE,WAAW,UAAW;AAC5B,cAAM,OAAO,EAAE;AACf,YAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,qBAAa,KAAK;AAClB,eAAO,oBAAoB,WAAW,SAAS;AAC/C,gBAAQ,KAAK,MAAM;AAAA,MACrB;AACA,aAAO,iBAAiB,WAAW,SAAS;AAC5C,aAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,IAClE,CAAC;AAAA,EACH;AAkCA,MAAM,aAA8D;AAAA,IAClE,OAAO;AAAA,IACP,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAGO,WAAS,YACd,GAC+C;AAC/C,WAAO;AAAA,MACL,MAAM,EAAE;AAAA,MACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,MAC9B,QAAQ,EAAE;AAAA,MACV,OAAQ,EAAE,SAA2B;AAAA,MACrC,SAAS,EAAE;AAAA,MACX,aAAa,EAAE;AAAA,MACf,aAAa,EAAE;AAAA,MACf,WAAW,EAAE;AAAA,MACb,WAAW,EAAE,aAAa,EAAE;AAAA,MAC5B,MAAM,EAAE,QAAQ;AAAA,MAChB,MAAM,EAAE,QAAQ;AAAA,MAChB,gBAAiB,EAAE,cAAuC;AAAA,MAC1D,KAAM,EAAE,QAAwB;AAAA,MAChC,YAAY,EAAE;AAAA,MACd,WAAW,EAAE,aAAa;AAAA,MAC1B,QAAQ,EAAE,SACN,EAAE,QAAQ,EAAE,OAAO,QAAQ,OAAO,EAAE,OAAO,OAAO,QAAQ,EAAE,OAAO,UAAU,KAAK,IAClF;AAAA,IACN;AAAA,EACF;AAQA,MAAM,eAAe,CAAC,eAAuC;AAC3D,WAAO,CAAC,QAAQ;AACd,UAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAG7D,eAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,UAAU;AACzE;AAAA,MACF;AACA,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,EACF;AAEA,MAAM,oBAAN,MAIE;AAAA,IACS;AAAA,IACA;AAAA,IACA;AAAA,IACD,eAAuC;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,IAEjB,YAAY,QAA6B,QAAyB;AAChE,WAAK,OAAO,OAAO;AACnB,WAAK,UAAU,OAAO;AACtB,WAAK,aAAa,OAAO,cAAc;AACvC,WAAK,UAAU,OAAO;AACtB,WAAK,SAAS,UAAU,aAAa,aAAa,MAAM,CAAC;AAGzD,WAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,IAC3E;AAAA,IAEA,MAAc,cAAc,QAA8C;AACxE,UAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,aAAO,gBAAgB,aAAa,MAAM,CAAC;AAAA,IAC7C;AAAA,IAEA,MAAc,OAAO,QAAiC;AACpD,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,QAChE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,MACjC,CAAC;AACD,UAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,IAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,YAAM,QAAQ,MAAM,KAAK;AACzB,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,QACnE,GAAG;AAAA,QACH,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,UAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,QACvB;AAAA,MACF,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,cAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,MACjE;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,YAAM,OAAO,KAAK;AAClB,YAAM,OAAO,YAA0C,KAAK,SAAS,IAAyB;AAC9F,WAAK,eAAe,KAAK,QAAQ,UAAU;AAC3C,aAAO;AAAA,IACT;AAAA,IAEA,IAAI,SAAiC;AACnC,aAAO,KAAK;AAAA,IACd;AAAA,IAEA,OAAO;AACL,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C;AAAA,IAEA,QAAQ;AACN,aAAO,KAAK,KAAK,QAAQ;AAAA,IAC3B;AAAA,IAEA,KACE,SACA,MACY;AACZ,YAAM,WAAW,MAAM,cAAc;AACrC,UAAI,UAAU;AACd,UAAI,QAA8C;AAClD,YAAM,OAAO,YAAY;AACvB,YAAI;AACF,gBAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,cAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,QACzB,SAAS,KAAK;AACZ,gBAAM,UAAU,GAAG;AAAA,QACrB;AACA,YAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,MACjD;AACA,WAAK,KAAK;AACV,aAAO,MAAM;AACX,kBAAU;AACV,YAAI,MAAO,cAAa,KAAK;AAAA,MAC/B;AAAA,IACF;AAAA,IAEA,YAAY,OAAe;AACzB,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,IAChF;AAAA,IAEA,WAAW,SAAwB;AACjC,aAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,IACvF;AAAA,IAEA,QAAQ;AACN,aAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,IAC/C;AAAA,IAEA,OAAO,MAAc,MAAgB;AACnC,aAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,QAC9C,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,MACjC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,QACJ,MACA,MACA,SACY;AACZ,YAAM,SAAS,SAAS;AACxB,UAAI,QAAQ,SAAS;AAGnB,aAAK,KAAK,aAAa,MAAM,MAAM;AAAA,QAAC,CAAC;AACrC,eAAO,eAAe;AAAA,MACxB;AACA,UAAI;AACJ,UAAI;AACJ,UAAI;AACF,gBAAQ,OAAO,SACX,QAAQ,KAAK;AAAA,UACX,KAAK;AAAA,UACL,IAAI,QAAe,CAAC,UAAU,WAAW;AACvC,sBAAU,MAAM,OAAO,OAAO,MAAM;AACpC,mBAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,UAC1D,CAAC;AAAA,QACH,CAAC,IACD,KAAK;AAAA,MACX,UAAE;AACA,YAAI,UAAU,QAAS,QAAO,oBAAoB,SAAS,OAAO;AAAA,MACpE;AACA,YAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,QACvF;AAAA,QACA,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,QAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,MACjC,CAAC;AACD,UAAI,CAAC,IAAI,IAAI;AACX,cAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM;AAC5C,kBAAQ,eAAe;AACvB,iBAAO,CAAC;AAAA,QACV,CAAC;AACD,cAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,MACpE;AACA,YAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,aAAO,KAAK;AAAA,IACd;AAAA,IAEA,aAAa,KAAmB;AAC9B,WAAK,OAAO,GAAG;AAAA,IACjB;AAAA,IAEA,UAAU,YAA4B;AAGpC,aAAO,KAAK,aACR,GAAG,KAAK,UAAU,OAAO,UAAU,KACnC,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,IACrC;AAAA,EACF;AAqIO,WAAS,cAIuC;AACrD,UAAM,SAAS,wBAAwB;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO,IAAI,kBAA+C,MAAM;AAAA,EAClE;;;AF7nBA,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,kBAAkB;AAOxB,WAAS,iBAAyB;AAChC,UAAM,IAAI,WAAW;AACrB,QAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,UAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,QAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,QAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,MAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,MAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,UAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,WAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AAAA,EACnI;AAgBA,MAAI,YAAuD;AAE3D,iBAAe,WAAW,QAAoC;AAC5D,QAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,UAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,UAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,QAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,UAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,MAC9F;AAAA,IACF,CAAC;AAED,gBAAY,EAAE,QAAQ,IAAI;AAC1B,WAAO;AAAA,EACT;AAEA,iBAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,UAAM,MAAM,MAAM,WAAW,MAAM;AACnC,UAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,UAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,QAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,UAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,WAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AAAA,EACZ;AAOO,MAAM,sBAAN,MAAqD;AAAA,IAClD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,oBAAI,IAG7B;AAAA,IACM,aAA0D;AAAA,IAC1D,kBAA8D,CAAC;AAAA,IAC/D,gBAAoC;AAAA,IACpC,yBAAqE,CAAC;AAAA,IACtE,WAAW;AAAA,IACX,kBAAqD,CAAC;AAAA,IACtD,2BAA+E,CAAC;AAAA,IAChF,kBAAkB,oBAAI,IAAiD;AAAA,IACvE;AAAA,IACA;AAAA;AAAA,IAGC;AAAA,IAET,YAAY,MAAmB;AAC7B,WAAK,YAAY,KAAK;AACtB,WAAK,SAAS,KAAK;AACnB,WAAK,cAAc,KAAK;AACxB,WAAK,QAAQ,KAAK;AAClB,WAAK,aAAa,KAAK,aAAa;AACpC,WAAK,gBAAgB,KAAK;AAC1B,WAAK,kBAAkB,KAAK,kBAAkB;AAC9C,WAAK,kBAAkB,KAAK;AAC5B,WAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,UAAI,KAAK,YAAY;AACnB,aAAK,UAAU,oBAAoB;AAAA,UACjC,SAAS,KAAK;AAAA,UACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,QAC9D,CAAC;AAAA,MACH;AAEA,WAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,aAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,IACzD;AAAA;AAAA,IAGA,IAAI,WAAmB;AACrB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,QAA4B;AAC9B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,IAAI,OAA2B;AAC7B,aAAO,KAAK;AAAA,IACd;AAAA;AAAA;AAAA,IAIA,IAAI,YAA8D;AAChE,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,IAAqD;AACjE,WAAK,gBAAgB,KAAK,EAAE;AAC5B,aAAO,MAAM;AACX,cAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,YAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,MACpD;AAAA,IACF;AAAA;AAAA,IAGA,gBAAsB;AACpB,WAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,IAChC;AAAA;AAAA,IAGA,kBAAwB;AACtB,WAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,IAClC;AAAA;AAAA,IAGA,kBAAsC;AACpC,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,qBAAqB,UAA2D;AAC9E,WAAK,uBAAuB,KAAK,QAAQ;AACzC,aAAO,MAAM;AACX,aAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC1F;AAAA,IACF;AAAA;AAAA,IAGA,YAAqB;AACnB,aAAO,KAAK;AAAA,IACd;AAAA;AAAA,IAGA,cAAc,UAAkD;AAC9D,WAAK,gBAAgB,KAAK,QAAQ;AAClC,aAAO,MAAM;AACX,aAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,MAC5E;AAAA,IACF;AAAA;AAAA,IAGA,oBAA0B;AACxB,WAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,IACpC;AAAA;AAAA,IAGA,KAAK,OAAe,SAAwB;AAC1C,WAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,IAC5C;AAAA;AAAA,IAGA,UAAU,OAAe,IAA8C;AACrE,YAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,WAAK,KAAK,EAAE;AACZ,WAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,aAAO,MAAM;AACX,cAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,YAAI,CAAC,QAAS;AACd,cAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,YAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,MACvC;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,WAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,IACzD;AAAA;AAAA,IAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,aAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,cAAM,UAAU,WAAW,MAAM;AAC/B,eAAK,iBAAiB,OAAO,KAAK;AAClC,iBAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,QAC/C,GAAG,GAAK;AAER,aAAK,iBAAiB,IAAI,OAAO;AAAA,UAC/B,SAAS,CAAC,MAAqB;AAC7B,yBAAa,OAAO;AACpB,oBAAQ,CAAC;AAAA,UACX;AAAA,UACA,QAAQ,CAAC,MAAa;AACpB,yBAAa,OAAO;AACpB,mBAAO,CAAC;AAAA,UACV;AAAA,QACF,CAAC;AAED,aAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,MAChD,CAAC;AAAA,IACH;AAAA;AAAA,IAGA,MAAM,OAAO,cAAyC;AACpD,UAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,eAAO,KAAK,WAAW;AAAA,MACzB;AACA,YAAM,IAAI,MAAM,mEAA8D;AAAA,IAChF;AAAA;AAAA,IAGA,IAAI,UAAsB;AACxB,aAAO;AAAA,QACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,QACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,QAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,QAAC,CAAC;AAAA,MAC3E;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,KAAY;AACd,YAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,aAAO;AAAA,QACL,WAAW,MAA4B;AACrC,gBAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,iBAAO;AAAA,YACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,YACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,YAC3D,MAAM,CAAC,SAAyB;AAC9B,oBAAM,KAAK,IAAI,gBAAgB;AAC/B,kBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,kBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,kBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,oBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,qBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,YACtC;AAAA,YACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,YAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,YAAC,CAAC;AAAA,UACxG;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA,IAAI,KAAY;AACd,YAAM,WAAW,CAAC,SAChB,KAAK,iBAAiB,2BAA2B,QAAQ,IAAI;AAC/D,YAAM,gBAAgB,CAAC,SAA2C,KAAK,gBAAgB,IAAI;AAC3F,aAAO;AAAA,QACL;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,OAAO,OAAO,MAAoD;AAChE,gBAAM,WAAW,MAAM,cAAc,IAAI;AACzC,gBAAM,SAAS,SAAS,MAAM,UAAU;AACxC,cAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,gBAAM,UAAU,IAAI,YAAY;AAChC,cAAI,SAAS;AACb,cAAI;AACF,uBAAS;AACP,oBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,kBAAI,KAAM;AACV,wBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,oBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,uBAAS,OAAO,IAAI,KAAK;AACzB,yBAAW,SAAS,QAAQ;AAC1B,sBAAM,WAAW,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC;AACpE,oBAAI,CAAC,SAAU;AACf,sBAAM,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK;AACvC,oBAAI,CAAC,WAAW,YAAY,SAAU;AACtC,oBAAI;AACJ,oBAAI;AACF,2BAAS,KAAK,MAAM,OAAO;AAAA,gBAC7B,QAAQ;AACN;AAAA,gBACF;AACA,sBAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF,UAAE;AAGA,kBAAM,OAAO,OAAO,EAAE,MAAM,MAAM;AAAA,YAAC,CAAC;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,IAAI,WAAwB;AAC1B,aAAO;AAAA,QACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,QAChC,KAAK,CAAC,gBAAyC;AAC7C,eAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,eAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,QAC1D;AAAA,QACA,gBAAgB,CAAC,OAAoD;AACnE,eAAK,yBAAyB,KAAK,EAAE;AACrC,iBAAO,MAAM;AACX,iBAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,UACxF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,WAAK,KAAK,gBAAgB;AAAA,QACxB;AAAA,QACA,OAAO,MAAM,SAAS;AAAA,QACtB,UAAU,MAAM,YAAY;AAAA,MAC9B,CAAC;AAAA,IACH;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAc,gBAAgB,MAAkC;AAC9D,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,UAAI,KAAK,iBAAiB;AACxB,gBAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,MAC3D;AACA,YAAM,WAAW,MAAM,MAAM,GAAG,KAAK,aAAa,yBAAyB;AAAA,QACzE,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAO,IAA+B,WAAW,0BAA0B;AAAA,MACvF;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,UAAI,CAAC,KAAK,eAAe;AACvB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,YAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,YAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,UAAI,KAAK,iBAAiB;AACxB,gBAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,MAC3D;AACA,YAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,UAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,aAAK,OAAO,KAAK,UAAU,IAAI;AAAA,MACjC;AACA,YAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,cAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,MAC/F;AACA,UAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,cAAM,SAAS,MAAM,SAAS,KAAK;AACnC,eAAQ,OAAmC;AAAA,MAC7C;AACA,aAAO;AAAA,IACT;AAAA,IAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,aAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,IAC9F;AAAA,IAEQ,cAAc,OAA2B;AAC/C,YAAM,MAAM,MAAM;AAClB,UAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,cAAQ,IAAI,MAAM;AAAA,QAChB,KAAK,gBAAgB;AACnB,gBAAM,UAAU,IAAI;AACpB,eAAK,SAAS,QAAQ;AACtB,qBAAW,YAAY,KAAK,iBAAiB;AAC3C,qBAAS,QAAQ,KAAK;AAAA,UACxB;AACA;AAAA,QACF;AAAA,QACA,KAAK,mBAAmB;AACtB,gBAAM,UAAU,IAAI;AACpB,gBAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,cAAI,WAAW;AACb,kBAAM,MAAmB;AAAA,cACvB,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,WAAW,QAAQ;AAAA,YACrB;AACA,uBAAW,YAAY,WAAW;AAChC,uBAAS,GAAG;AAAA,YACd;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK,kBAAkB;AACrB,gBAAM,UAAU,IAAI;AACpB,gBAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,cAAI,SAAS;AACX,iBAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,oBAAQ,QAAQ;AAAA,cACd,OAAO,QAAQ;AAAA,cACf,SAAS,QAAQ;AAAA,cACjB,YAAY,QAAQ;AAAA,cACpB,WAAW,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH;AACA;AAAA,QACF;AAAA,QACA,KAAK,sBAAsB;AACzB,gBAAM,UAAU,IAAI;AACpB,eAAK,aAAa;AAAA,YAChB,OAAO,QAAQ;AAAA,YACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,UAC9C;AACA;AAAA,QACF;AAAA,QACA,KAAK,wBAAwB;AAC3B,gBAAM,WAAW,IAAI,SAAS;AAC9B,cAAI,UAAU;AACZ,iBAAK,gBAAgB;AACrB,iBAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,UAC1D;AACA;AAAA,QACF;AAAA,QACA,KAAK,gBAAgB;AACnB,gBAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,cAAI,SAAS,KAAK,UAAU;AAC1B,iBAAK,WAAW;AAChB,iBAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,UAC/C;AACA;AAAA,QACF;AAAA,QACA,KAAK,0BAA0B;AAC7B,gBAAM,IAAI,IAAI;AACd,eAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,qBAAW,MAAM,KAAK,0BAA0B;AAC9C,gBAAI;AACF,iBAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,YAC1B,QAAQ;AAAA,YAER;AAAA,UACF;AACA;AAAA,QACF;AAAA,QACA,KAAK;AAAA,QACL,KAAK;AAEH;AAAA,MACJ;AAAA,IACF;AAAA,IAEQ,KAAK,MAAc,SAAwC;AAEjE,WAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,eAAO,OAAO,YAAY,KAAK,GAAG;AAAA,MACpC,CAAC;AAAA,IACH;AAAA,IAEA,MAAc,aACZ,MACA,SACwB;AACxB,YAAM,QAAQ,eAAe;AAC7B,YAAM,YAAY,KAAK,IAAI;AAE3B,UAAI;AACJ,UAAI,KAAK,aAAa;AACpB,gBAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,MAClF,OAAO;AACL,gBAAQ;AAAA,MACV;AAEA,aAAO;AAAA,QACL,UAAU;AAAA,QACV;AAAA,QACA,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA;AAAA,IAGA,UAAgB;AACd,aAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,WAAK,gBAAgB,SAAS;AAC9B,WAAK,gBAAgB,MAAM;AAC3B,iBAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,gBAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,MAC9C;AACA,WAAK,iBAAiB,MAAM;AAAA,IAC9B;AAAA,EACF;AAeO,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,OAAiC;AAC/B,aAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,cAAM,UAAU,WAAW,MAAM;AAC/B,iBAAO,oBAAoB,WAAW,OAAO;AAC7C,iBAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,QAC1F,GAAG,eAAe;AAElB,cAAM,UAAU,CAAC,UAAwB;AACvC,gBAAM,MAAM,MAAM;AAClB,cAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,cAAI,IAAI,SAAS,OAAQ;AAEzB,uBAAa,OAAO;AACpB,iBAAO,oBAAoB,WAAW,OAAO;AAE7C,gBAAM,UAAU,IAAI;AACpB,gBAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,kBAAQ,GAAG;AAAA,QACb;AAEA,eAAO,iBAAiB,WAAW,OAAO;AAG1C,cAAM,WAA0B;AAAA,UAC9B,UAAU;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA;AAAA,UACV,OAAO,eAAe;AAAA,UACtB,WAAW,KAAK,IAAI;AAAA,UACpB,OAAO;AAAA;AAAA,UACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,QAClC;AAEA,eAAO,OAAO,YAAY,UAAU,GAAG;AAAA,MACzC,CAAC;AAAA,IACH;AAAA,EACF;",
   "names": []
 }

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { createServiceClient } from './service';
 export type { WidgetManifestServiceBlock, WidgetManifestServiceScope, WidgetServiceClient, DbRecord, DbCollection, DbAPI, DbListOptions, } from './types';
 export type { CreateServiceClientOptions } from './service';
 export { initSession, createMockSession, hostOriginOf, readSessionLaunchParams } from './session';
-export type { SessionClient, SessionStateView, SessionMember, SessionPhase, SessionGateView, SessionFlowView, SessionPollOptions, SessionLaunchParams, MockSessionOptions, } from './session';
+export type { SessionClient, SessionStateView, SessionMember, SessionPhase, SessionGateView, SessionFlowView, SessionClaim, SessionClaimSet, SessionViewer, SessionPollOptions, SessionLaunchParams, MockSessionOptions, } from './session';
 export { getInitialTheme, onThemeChange, applyWidgetTheme, initWidgetTheme } from './theme';
 export type { WidgetTheme } from './theme';
 export { onArtifactIngested, INGEST_MESSAGE_TYPE } from './ingest';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClG,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC5F,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EACV,0BAA0B,EAC1B,0BAA0B,EAC1B,mBAAmB,EACnB,QAAQ,EACR,YAAY,EACZ,KAAK,EACL,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAClG,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC5F,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACnE,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-// @goflowstate/widget-sdk v0.2.2
+// @goflowstate/widget-sdk v0.3.0
 // https://github.com/goflowstate/goflowstate-sdk
 
 var __defProp = Object.defineProperty;
@@ -105,7 +105,8 @@ function toStateView(s) {
     myContribution: s.myWishlist ?? null,
     doc: s.plan ?? null,
     artifactId: s.artifactId,
-    extension: s.extension ?? null
+    extension: s.extension ?? null,
+    viewer: s.viewer ? { userId: s.viewer.userId, guest: s.viewer.guest, claims: s.viewer.claims ?? null } : null
   };
 }
 var parentOpener = (hostOrigin) => {
@@ -122,6 +123,7 @@ var HttpSessionClient = class {
     __publicField(this, "slug");
     __publicField(this, "webBase");
     __publicField(this, "mobileBase");
+    __publicField(this, "latestClaims", null);
     __publicField(this, "apiBase");
     __publicField(this, "tokenPromise");
     __publicField(this, "opener");
@@ -162,7 +164,12 @@ var HttpSessionClient = class {
     }
     const json = await res.json();
     const data = json.data;
-    return toStateView(data.state ?? data);
+    const view = toStateView(data.state ?? data);
+    this.latestClaims = view.viewer?.claims ?? null;
+    return view;
+  }
+  get claims() {
+    return this.latestClaims;
   }
   join() {
     return this.call("/enter", { method: "POST" });
@@ -204,15 +211,37 @@ var HttpSessionClient = class {
       body: JSON.stringify(body ?? {})
     });
   }
-  async request(verb, body) {
-    const token = await this.tokenPromise;
+  async request(verb, body, options) {
+    const signal = options?.signal;
+    if (signal?.aborted) {
+      void this.tokenPromise.catch(() => {
+      });
+      signal.throwIfAborted();
+    }
+    let onAbort;
+    let token;
+    try {
+      token = await (signal ? Promise.race([
+        this.tokenPromise,
+        new Promise((_resolve, reject) => {
+          onAbort = () => reject(signal.reason);
+          signal.addEventListener("abort", onAbort, { once: true });
+        })
+      ]) : this.tokenPromise);
+    } finally {
+      if (signal && onAbort) signal.removeEventListener("abort", onAbort);
+    }
     const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\//, "")}`, {
+      signal,
       method: "POST",
       headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
       body: JSON.stringify(body ?? {})
     });
     if (!res.ok) {
-      const errBody = await res.json().catch(() => ({}));
+      const errBody = await res.json().catch(() => {
+        signal?.throwIfAborted();
+        return {};
+      });
       throw new Error(errBody.message ?? `session service ${res.status}`);
     }
     const json = await res.json();
@@ -222,13 +251,20 @@ var HttpSessionClient = class {
     this.opener(url);
   }
   revealUrl(artifactId) {
-    return `${this.webBase}/a/${artifactId}`;
+    return this.mobileBase ? `${this.mobileBase}/?a=${artifactId}` : `${this.webBase}/a/${artifactId}`;
   }
 };
 function createMockSession(opts = {}) {
   const palette = ["#8b7ef8", "#f8a34d", "#4dc9a4", "#f26d8f", "#5aa9e6"];
   const members = [
-    { userId: "mock-me", name: opts.me ?? "You", color: palette[0], sealed: false, isMe: true, isHost: true },
+    {
+      userId: "mock-me",
+      name: opts.me ?? "You",
+      color: palette[0],
+      sealed: false,
+      isMe: true,
+      isHost: true
+    },
     ...(opts.others ?? []).map((name, i) => ({
       userId: `mock-${i + 1}`,
       name,
@@ -261,12 +297,14 @@ function createMockSession(opts = {}) {
       myContribution,
       doc,
       artifactId: doc ? "mock-artifact" : null,
-      extension: null
+      extension: null,
+      viewer: { userId: "mock-me", guest: false, claims: opts.claims ?? null }
     };
   };
   return {
     slug: "mock-session",
     webBase: "http://localhost:14321",
+    claims: opts.claims ?? null,
     async join() {
       return view();
     },

package/dist/index.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/service.ts", "../src/session.ts", "../src/sdk.ts", "../src/theme.ts", "../src/ingest.ts"],
-  "sourcesContent": ["// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n  /** Base URL of the mobile PWA, when the host provided one via the optional\n   *  `mobile` iframe param. Participant-facing join links (e.g. a projected\n   *  QR) should prefer it and fall back to `webBase` when absent. Optional so\n   *  hand-rolled SessionClient implementations keep compiling. */\n  readonly mobileBase?: string | null;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. */\n  request<T = unknown>(verb: string, body?: unknown): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n  /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null\n   *  when the host didn't send one \u2014 legacy hosts never do \u2014 so consumers\n   *  fall back to `webBase` links. Optional so hand-built params keep\n   *  compiling. */\n  mobileBase?: string | null;\n  /** Origin of the page that FRAMES the widget \u2014 the `host` iframe param.\n   *  The ready/init ticket handshake and `flowstate:navigate` are addressed\n   *  to this origin (0.2.2). Defaults to `webBase` when absent, which is\n   *  what every pre-0.2.2 host is: the web /w page framing the widget. The\n   *  mobile PWA frames the widget itself (its native lobby) and names itself\n   *  here \u2014 without it the browser drops every postMessage between them\n   *  (target-origin mismatch) and the widget never boots. */\n  hostBase?: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  // `mobile` is optional and has NO default: absent means the host predates\n  // the PWA doors (or has none configured) and consumers must keep minting\n  // legacy webBase links.\n  const mobile = q.get('mobile');\n  const webBase = (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, '');\n  const host = q.get('host');\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase,\n    mobileBase: mobile ? mobile.replace(/\\/$/, '') : null,\n    hostBase: host ? host.replace(/\\/$/, '') : webBase,\n  };\n}\n\n/** The origin the handshake is addressed to: the framing page. */\nexport const hostOriginOf = (params: Pick<SessionLaunchParams, 'webBase' | 'hostBase'>): string =>\n  new URL(params.hostBase ?? params.webBase).origin;\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent (host) page and wait for it to hand over\n *  the single-use session ticket. `hostOrigin` is the framing page's origin\n *  (`hostOriginOf`) \u2014 the web /w page or the mobile PWA's native lobby. */\nfunction awaitInitTicket(hostOrigin: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = hostOrigin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\nfunction toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (hostOrigin: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the host page to navigate itself (the web /w page shares the\n      // session cookie; the PWA lobby routes reveals natively).\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, hostOrigin);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc>\n  implements SessionClient<TSetup, TContribution, TDoc>\n{\n  readonly slug: string;\n  readonly webBase: string;\n  readonly mobileBase: string | null;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.mobileBase = params.mobileBase ?? null;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(hostOriginOf(params));\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(hostOriginOf(params));\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    return toStateView((data.state ?? data) as WireSessionState);\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(verb: string, body?: unknown): Promise<T> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    return `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    { userId: 'mock-me', name: opts.me ?? 'You', color: palette[0], sealed: false, isMe: true, isHost: true },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n", "// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  AiAPI,\n  AiCallOptions,\n  AiCompleteResult,\n  AiStreamEvent,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Platform LLM access (widget.* aliases only). Requests ride the same\n   *  widget-gateway auth as db/storage; the platform meters every call and\n   *  attributes it to this widget's publishing org. */\n  get ai(): AiAPI {\n    const complete = (opts: AiCallOptions): Promise<AiCompleteResult> =>\n      this.widgetApiRequest('/widget-api/ai/complete', 'POST', opts) as Promise<AiCompleteResult>;\n    const streamRequest = (opts: AiCallOptions): Promise<Response> => this.widgetApiStream(opts);\n    return {\n      complete,\n      // Async generator over the gateway's SSE frames. Ends on [DONE] or\n      // stream end; returning early (break) cancels the fetch body, which\n      // the gateway sees as a disconnect and aborts the upstream call, so\n      // an abandoned stream stops generating and billing.\n      async *stream(opts: AiCallOptions): AsyncGenerator<AiStreamEvent> {\n        const response = await streamRequest(opts);\n        const reader = response.body?.getReader();\n        if (!reader) throw new Error('ai.stream: response has no body');\n        const decoder = new TextDecoder();\n        let buffer = '';\n        try {\n          for (;;) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += decoder.decode(value, { stream: true });\n            const frames = buffer.split('\\n\\n');\n            buffer = frames.pop() ?? '';\n            for (const frame of frames) {\n              const dataLine = frame.split('\\n').find((l) => l.startsWith('data:'));\n              if (!dataLine) continue;\n              const payload = dataLine.slice(5).trim();\n              if (!payload || payload === '[DONE]') continue;\n              let parsed: AiStreamEvent;\n              try {\n                parsed = JSON.parse(payload) as AiStreamEvent;\n              } catch {\n                continue;\n              }\n              yield parsed;\n            }\n          }\n        } finally {\n          // Break/return path: releases the connection so the gateway's\n          // req.on('close') fires and the upstream call aborts.\n          await reader.cancel().catch(() => {});\n        }\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  /** Raw streaming POST against the widget gateway \u2014 same auth as\n   *  widgetApiRequest, but returns the Response for SSE consumption\n   *  instead of parsing a JSON envelope. */\n  private async widgetApiStream(body: unknown): Promise<Response> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? 'ai.stream request failed');\n    }\n    return response;\n  }\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// ============================================\n// Widget theme utilities \u2014 the Flowstate Theme Contract (ADR-048)\n// ============================================\n//\n// Flowstate has exactly three themes: 'light' | 'dark' | 'glass'.\n// Glass is the signature default (the liquid-glass look) \u2014 widgets treat it\n// as the unthemed plane. The host hands the active theme to external iframe\n// widgets in two ways:\n//\n//   1. Boot:  a `?theme=` query param appended to the iframe src.\n//   2. Live:  a `postMessage` of `{ type: 'flowstate:theme', theme }`.\n//\n// Widgets map the theme onto their own tokens by setting `data-theme` on\n// their <html> element ('glass' removes the attribute, so widget CSS keeps\n// the glass plane as its default styles).\n//\n// Usage in a widget entry:\n//   import { initWidgetTheme } from '@goflowstate/widget-sdk';\n//   initWidgetTheme(); // apply boot theme + follow live host updates\n\nexport type WidgetTheme = 'light' | 'dark' | 'glass';\n\nconst THEME_MESSAGE_TYPE = 'flowstate:theme';\nconst DEFAULT_THEME: WidgetTheme = 'glass';\n\nfunction isWidgetTheme(value: unknown): value is WidgetTheme {\n  return value === 'light' || value === 'dark' || value === 'glass';\n}\n\n/**\n * Read the theme the host handed the widget at boot via the `?theme=` URL\n * param. Invalid or missing values fall back to 'glass' (the default plane).\n */\nexport function getInitialTheme(): WidgetTheme {\n  if (typeof window === 'undefined') return DEFAULT_THEME;\n  try {\n    const param = new URLSearchParams(window.location.search).get('theme');\n    return isWidgetTheme(param) ? param : DEFAULT_THEME;\n  } catch {\n    return DEFAULT_THEME;\n  }\n}\n\n/**\n * Subscribe to live theme updates pushed by the host\n * (`postMessage({ type: 'flowstate:theme', theme })`). Non-theme messages\n * and invalid theme values are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted,\n * mirroring the ingest channel; a hostile sibling frame cannot restyle the\n * widget. Pass `allowedOrigin` to additionally pin the host's origin.\n */\nexport function onThemeChange(\n  cb: (theme: WidgetTheme) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; theme?: unknown };\n    if (message.type !== THEME_MESSAGE_TYPE) return;\n    if (!isWidgetTheme(message.theme)) return;\n    cb(message.theme);\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n\n/**\n * Apply a theme to the widget document by setting `data-theme` on <html>.\n * 'glass' REMOVES the attribute \u2014 widget CSS treats glass as the default\n * plane, with `[data-theme='light']` / `[data-theme='dark']` overrides.\n */\nexport function applyWidgetTheme(theme: WidgetTheme): void {\n  if (typeof document === 'undefined') return;\n  if (theme === 'glass') {\n    delete document.documentElement.dataset.theme;\n  } else {\n    document.documentElement.dataset.theme = theme;\n  }\n}\n\n/**\n * Convenience boot helper: apply the initial (`?theme=`) theme, then follow\n * live host updates, applying each. Returns the unsubscribe function.\n */\nexport function initWidgetTheme(): () => void {\n  applyWidgetTheme(getInitialTheme());\n  return onThemeChange(applyWidgetTheme);\n}\n", "// ============================================\n// Widget ingest channel \u2014 ADR-043 in-place delivery\n// ============================================\n//\n// When an artifact is dropped on (or sent to) a widget and the ingestion\n// transform produces a result, the HOST pushes the produced artifact into\n// any open iframe of the target widget:\n//\n//   postMessage({ type: 'flowstate:ingest', artifactId, kind?, payload? })\n//\n// `payload` is the produced artifact's parsed JSON content when the host\n// could fetch it (small structured artifacts like kanban boards); widgets\n// without a payload can show an affordance around `artifactId` instead.\n// Same channel shape as the theme handoff (`flowstate:theme`).\n//\n// Usage in a widget entry:\n//   import { onArtifactIngested } from '@goflowstate/widget-sdk';\n//   onArtifactIngested(({ payload }) => mergeBoard(payload));\n\nexport const INGEST_MESSAGE_TYPE = 'flowstate:ingest';\n\nexport interface IngestedArtifact {\n  /** The produced artifact's id (host route: /a/:id). */\n  artifactId: string;\n  /** The produced artifact kind (e.g. 'kanban-board'), when known. */\n  kind?: string;\n  /** Parsed JSON content of the produced artifact, when the host fetched it. */\n  payload?: unknown;\n}\n\n/**\n * Subscribe to ingestion results pushed by the host. Non-ingest messages and\n * malformed payloads are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted \u2014\n * a hostile sibling frame or opener cannot inject into the channel. Pass\n * `allowedOrigin` to additionally pin the host's origin (the session module\n * derives the same value from `webBase`).\n */\nexport function onArtifactIngested(\n  cb: (artifact: IngestedArtifact) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; artifactId?: unknown; kind?: unknown; payload?: unknown };\n    if (message.type !== INGEST_MESSAGE_TYPE) return;\n    if (typeof message.artifactId !== 'string' || !message.artifactId) return;\n    cb({\n      artifactId: message.artifactId,\n      kind: typeof message.kind === 'string' ? message.kind : undefined,\n      payload: message.payload,\n    });\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n"],
-  "mappings": ";;;;;;;;AAUO,SAAS,oBAAoB,MAAuD;AACzF,QAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,QAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,iBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,UAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,QAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AACA,WAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,UAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,UAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,UAAI,IAAI,WAAW,KAAK;AACtB,gBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,cAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,MACpC;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,OAA6B,CAAC;AAClC,YAAI;AACF,iBAAQ,MAAM,IAAI,KAAK;AAAA,QACzB,QAAQ;AAAA,QAER;AACA,cAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,MACxF;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,EACF;AACF;;;ACsIO,SAAS,0BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,QAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,MAAI,CAAC,KAAM,QAAO;AAIlB,QAAM,SAAS,EAAE,IAAI,QAAQ;AAC7B,QAAM,WAAW,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAC5E,QAAM,OAAO,EAAE,IAAI,MAAM;AACzB,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,IACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,IACrE;AAAA,IACA,YAAY,SAAS,OAAO,QAAQ,OAAO,EAAE,IAAI;AAAA,IACjD,UAAU,OAAO,KAAK,QAAQ,OAAO,EAAE,IAAI;AAAA,EAC7C;AACF;AAGO,IAAM,eAAe,CAAC,WAC3B,IAAI,IAAI,OAAO,YAAY,OAAO,OAAO,EAAE;AAE7C,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAKjC,SAAS,gBAAgB,YAAqC;AAC5D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,aAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,IACF;AACA,UAAM,YAAY;AAClB,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,WAAW,SAAS;AAC/C,aAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,IAC/D,GAAG,uBAAuB;AAC1B,UAAM,YAAY,CAAC,MAAoB;AACrC,UAAI,EAAE,WAAW,UAAW;AAC5B,YAAM,OAAO,EAAE;AACf,UAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,mBAAa,KAAK;AAClB,aAAO,oBAAoB,WAAW,SAAS;AAC/C,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO,iBAAiB,WAAW,SAAS;AAC5C,WAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,EAClE,CAAC;AACH;AAiCA,IAAM,aAA8D;AAAA,EAClE,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACR;AAEA,SAAS,YACP,GAC+C;AAC/C,SAAO;AAAA,IACL,MAAM,EAAE;AAAA,IACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,IAC9B,QAAQ,EAAE;AAAA,IACV,OAAQ,EAAE,SAA2B;AAAA,IACrC,SAAS,EAAE;AAAA,IACX,aAAa,EAAE;AAAA,IACf,aAAa,EAAE;AAAA,IACf,WAAW,EAAE;AAAA,IACb,WAAW,EAAE,aAAa,EAAE;AAAA,IAC5B,MAAM,EAAE,QAAQ;AAAA,IAChB,MAAM,EAAE,QAAQ;AAAA,IAChB,gBAAiB,EAAE,cAAuC;AAAA,IAC1D,KAAM,EAAE,QAAwB;AAAA,IAChC,YAAY,EAAE;AAAA,IACd,WAAW,EAAE,aAAa;AAAA,EAC5B;AACF;AAQA,IAAM,eAAe,CAAC,eAAuC;AAC3D,SAAO,CAAC,QAAQ;AACd,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAG7D,aAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,UAAU;AACzE;AAAA,IACF;AACA,QAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,EAC1E;AACF;AAEA,IAAM,oBAAN,MAEA;AAAA,EAQE,YAAY,QAA6B,QAAyB;AAPlE,wBAAS;AACT,wBAAS;AACT,wBAAS;AACT,wBAAiB;AACjB,wBAAiB;AACjB,wBAAiB;AAGf,SAAK,OAAO,OAAO;AACnB,SAAK,UAAU,OAAO;AACtB,SAAK,aAAa,OAAO,cAAc;AACvC,SAAK,UAAU,OAAO;AACtB,SAAK,SAAS,UAAU,aAAa,aAAa,MAAM,CAAC;AAGzD,SAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,EAC3E;AAAA,EAEA,MAAc,cAAc,QAA8C;AACxE,QAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,WAAO,gBAAgB,aAAa,MAAM,CAAC;AAAA,EAC7C;AAAA,EAEA,MAAc,OAAO,QAAiC;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,MACnE,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,MACvB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACjE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,UAAM,OAAO,KAAK;AAClB,WAAO,YAAa,KAAK,SAAS,IAAyB;AAAA,EAC7D;AAAA,EAEA,OAAO;AACL,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,KACE,SACA,MACY;AACZ,UAAM,WAAW,MAAM,cAAc;AACrC,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,YAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,GAAG;AAAA,MACrB;AACA,UAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,IACjD;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,YAAY,OAAe;AACzB,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,EAChF;AAAA,EAEA,WAAW,SAAwB;AACjC,WAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EACvF;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,OAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MAC9C,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QAAqB,MAAc,MAA4B;AACnE,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MACvF,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,MAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAAa,KAAmB;AAC9B,SAAK,OAAO,GAAG;AAAA,EACjB;AAAA,EAEA,UAAU,YAA4B;AACpC,WAAO,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,EACxC;AACF;AAkBO,SAAS,kBAId,OAAyC,CAAC,GAA+C;AACzF,QAAM,UAAU,CAAC,WAAW,WAAW,WAAW,WAAW,SAAS;AACtE,QAAM,UAA2B;AAAA,IAC/B,EAAE,QAAQ,WAAW,MAAM,KAAK,MAAM,OAAO,OAAO,QAAQ,CAAC,GAAG,QAAQ,OAAO,MAAM,MAAM,QAAQ,KAAK;AAAA,IACxG,IAAI,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO;AAAA,MACvC,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACrB;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,QAAQ,MAAM;AAAA,MACvC,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACA,MAAI,QAAuB,KAAK,SAAS;AACzC,MAAI,iBAAuC;AAC3C,MAAI,MAAmB;AACvB,MAAI,SAAS;AAEb,QAAM,OAAO,MAAqD;AAChE,UAAM,cAAc,QAAQ,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;AACpD,UAAM,YAAY,QAAQ,SAAS,KAAK,eAAe,QAAQ;AAC/D,UAAM,QACJ,WAAW,YAAY,MAAM,aAAa,CAAC,QAAQ,UAAU,YAAY,WAAW;AACtF,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AAAA,MACtC;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,MAAM,kBAAkB;AAAA,MACpC,WAAW;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,MAAM,OAAO;AACX,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO,KAAK;AAAA,IACd;AAAA,IACA,KAAK,SAAS,UAAU;AACtB,YAAM,WAAW,UAAU,cAAc;AACzC,YAAM,QAAQ,YAAY,MAAM,QAAQ,KAAK,CAAC,GAAG,QAAQ;AACzD,cAAQ,KAAK,CAAC;AACd,aAAO,MAAM,cAAc,KAAK;AAAA,IAClC;AAAA,IACA,MAAM,YAAY,GAAW;AAC3B,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,WAAW,SAAwB;AACvC,uBAAiB;AACjB,YAAM,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,IAAI;AACrC,UAAI,GAAI,IAAG,SAAS;AACpB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,eAAS;AACT,YAAM,KAAK,aACP,KAAK,WAAW,CAAC,cAAc,CAAC,IAC/B,EAAE,MAAM,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,SAAS;AACb,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,UAAuB;AAC3B,aAAO,CAAC;AAAA,IACV;AAAA,IACA,aAAa,KAAa;AACxB,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,IACA,UAAU,YAAoB;AAC5B,aAAO,4BAA4B,UAAU;AAAA,IAC/C;AAAA,EACF;AACF;AAaO,SAAS,cAIuC;AACrD,QAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,IAAI,kBAA+C,MAAM;AAClE;;;AC9hBA,IAAM,WAAW;AACjB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAOxB,SAAS,iBAAyB;AAChC,QAAM,IAAI,WAAW;AACrB,MAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,QAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,MAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,MAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,QAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,SAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AACnI;AAgBA,IAAI,YAAuD;AAE3D,eAAe,WAAW,QAAoC;AAC5D,MAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,QAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,MAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,IAC9F;AAAA,EACF,CAAC;AAED,cAAY,EAAE,QAAQ,IAAI;AAC1B,SAAO;AACT;AAEA,eAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,QAAM,MAAM,MAAM,WAAW,MAAM;AACnC,QAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,QAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,MAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAOO,IAAM,sBAAN,MAAqD;AAAA,EA2B1D,YAAY,MAAmB;AA1B/B,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ,oBAAmB,oBAAI,IAG7B;AACF,wBAAQ,cAA0D;AAClE,wBAAQ,mBAA8D,CAAC;AACvE,wBAAQ,iBAAoC;AAC5C,wBAAQ,0BAAqE,CAAC;AAC9E,wBAAQ,YAAW;AACnB,wBAAQ,mBAAqD,CAAC;AAC9D,wBAAQ,4BAA+E,CAAC;AACxF,wBAAQ,mBAAkB,oBAAI,IAAiD;AAC/E,wBAAQ;AACR,wBAAQ;AAGR;AAAA,wBAAS;AAGP,SAAK,YAAY,KAAK;AACtB,SAAK,SAAS,KAAK;AACnB,SAAK,cAAc,KAAK;AACxB,SAAK,QAAQ,KAAK;AAClB,SAAK,aAAa,KAAK,aAAa;AACpC,SAAK,gBAAgB,KAAK;AAC1B,SAAK,kBAAkB,KAAK,kBAAkB;AAC9C,SAAK,kBAAkB,KAAK;AAC5B,SAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,QAAI,KAAK,YAAY;AACnB,WAAK,UAAU,oBAAoB;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,SAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,WAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,EACzD;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,QAA4B;AAC9B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA,EAIA,IAAI,YAA8D;AAChE,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,IAAqD;AACjE,SAAK,gBAAgB,KAAK,EAAE;AAC5B,WAAO,MAAM;AACX,YAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,UAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA;AAAA,EAGA,gBAAsB;AACpB,SAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,EAChC;AAAA;AAAA,EAGA,kBAAwB;AACtB,SAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,EAClC;AAAA;AAAA,EAGA,kBAAsC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,qBAAqB,UAA2D;AAC9E,SAAK,uBAAuB,KAAK,QAAQ;AACzC,WAAO,MAAM;AACX,WAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,UAAkD;AAC9D,SAAK,gBAAgB,KAAK,QAAQ;AAClC,WAAO,MAAM;AACX,WAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC5E;AAAA,EACF;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,EACpC;AAAA;AAAA,EAGA,KAAK,OAAe,SAAwB;AAC1C,SAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGA,UAAU,OAAe,IAA8C;AACrE,UAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,SAAK,KAAK,EAAE;AACZ,SAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,WAAO,MAAM;AACX,YAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,UAAI,CAAC,QAAS;AACd,YAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,UAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,IACvC;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,SAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,WAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,YAAM,UAAU,WAAW,MAAM;AAC/B,aAAK,iBAAiB,OAAO,KAAK;AAClC,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,MAC/C,GAAG,GAAK;AAER,WAAK,iBAAiB,IAAI,OAAO;AAAA,QAC/B,SAAS,CAAC,MAAqB;AAC7B,uBAAa,OAAO;AACpB,kBAAQ,CAAC;AAAA,QACX;AAAA,QACA,QAAQ,CAAC,MAAa;AACpB,uBAAa,OAAO;AACpB,iBAAO,CAAC;AAAA,QACV;AAAA,MACF,CAAC;AAED,WAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAO,cAAyC;AACpD,QAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,aAAO,KAAK,WAAW;AAAA,IACzB;AACA,UAAM,IAAI,MAAM,mEAA8D;AAAA,EAChF;AAAA;AAAA,EAGA,IAAI,UAAsB;AACxB,WAAO;AAAA,MACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,MACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,MAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,KAAY;AACd,UAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,WAAO;AAAA,MACL,WAAW,MAA4B;AACrC,cAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,eAAO;AAAA,UACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,UAC3D,MAAM,CAAC,SAAyB;AAC9B,kBAAM,KAAK,IAAI,gBAAgB;AAC/B,gBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,gBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,kBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,mBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,UACtC;AAAA,UACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,UAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,UAAC,CAAC;AAAA,QACxG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,KAAY;AACd,UAAM,WAAW,CAAC,SAChB,KAAK,iBAAiB,2BAA2B,QAAQ,IAAI;AAC/D,UAAM,gBAAgB,CAAC,SAA2C,KAAK,gBAAgB,IAAI;AAC3F,WAAO;AAAA,MACL;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,OAAO,MAAoD;AAChE,cAAM,WAAW,MAAM,cAAc,IAAI;AACzC,cAAM,SAAS,SAAS,MAAM,UAAU;AACxC,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,cAAM,UAAU,IAAI,YAAY;AAChC,YAAI,SAAS;AACb,YAAI;AACF,qBAAS;AACP,kBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,gBAAI,KAAM;AACV,sBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,kBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,qBAAS,OAAO,IAAI,KAAK;AACzB,uBAAW,SAAS,QAAQ;AAC1B,oBAAM,WAAW,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC;AACpE,kBAAI,CAAC,SAAU;AACf,oBAAM,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK;AACvC,kBAAI,CAAC,WAAW,YAAY,SAAU;AACtC,kBAAI;AACJ,kBAAI;AACF,yBAAS,KAAK,MAAM,OAAO;AAAA,cAC7B,QAAQ;AACN;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,UAAE;AAGA,gBAAM,OAAO,OAAO,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,WAAwB;AAC1B,WAAO;AAAA,MACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,MAChC,KAAK,CAAC,gBAAyC;AAC7C,aAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,aAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,MAC1D;AAAA,MACA,gBAAgB,CAAC,OAAoD;AACnE,aAAK,yBAAyB,KAAK,EAAE;AACrC,eAAO,MAAM;AACX,eAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,SAAK,KAAK,gBAAgB;AAAA,MACxB;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,gBAAgB,MAAkC;AAC9D,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,aAAa,yBAAyB;AAAA,MACzE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,0BAA0B;AAAA,IACvF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AACA,UAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,IAC/F;AACA,QAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAQ,OAAmC;AAAA,IAC7C;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,WAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,EAC9F;AAAA,EAEQ,cAAc,OAA2B;AAC/C,UAAM,MAAM,MAAM;AAClB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,gBAAgB;AACnB,cAAM,UAAU,IAAI;AACpB,aAAK,SAAS,QAAQ;AACtB,mBAAW,YAAY,KAAK,iBAAiB;AAC3C,mBAAS,QAAQ,KAAK;AAAA,QACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,mBAAmB;AACtB,cAAM,UAAU,IAAI;AACpB,cAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,YAAI,WAAW;AACb,gBAAM,MAAmB;AAAA,YACvB,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,WAAW,QAAQ;AAAA,UACrB;AACA,qBAAW,YAAY,WAAW;AAChC,qBAAS,GAAG;AAAA,UACd;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK,kBAAkB;AACrB,cAAM,UAAU,IAAI;AACpB,cAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,YAAI,SAAS;AACX,eAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,kBAAQ,QAAQ;AAAA,YACd,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,YACpB,WAAW,QAAQ;AAAA,UACrB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,UAAU,IAAI;AACpB,aAAK,aAAa;AAAA,UAChB,OAAO,QAAQ;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,IAAI,SAAS;AAC9B,YAAI,UAAU;AACZ,eAAK,gBAAgB;AACrB,eAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,QAC1D;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,YAAI,SAAS,KAAK,UAAU;AAC1B,eAAK,WAAW;AAChB,eAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,QAC/C;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,IAAI,IAAI;AACd,aAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,mBAAW,MAAM,KAAK,0BAA0B;AAC9C,cAAI;AACF,eAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,UAC1B,QAAQ;AAAA,UAER;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAEH;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,KAAK,MAAc,SAAwC;AAEjE,SAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,aAAO,OAAO,YAAY,KAAK,GAAG;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,aACZ,MACA,SACwB;AACxB,UAAM,QAAQ,eAAe;AAC7B,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACJ,QAAI,KAAK,aAAa;AACpB,cAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,IAClF,OAAO;AACL,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,UAAgB;AACd,WAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,SAAK,gBAAgB,SAAS;AAC9B,SAAK,gBAAgB,MAAM;AAC3B,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,cAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC9C;AACA,SAAK,iBAAiB,MAAM;AAAA,EAC9B;AACF;AAeO,IAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAiC;AAC/B,WAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,YAAM,UAAU,WAAW,MAAM;AAC/B,eAAO,oBAAoB,WAAW,OAAO;AAC7C,eAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,MAC1F,GAAG,eAAe;AAElB,YAAM,UAAU,CAAC,UAAwB;AACvC,cAAM,MAAM,MAAM;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,YAAI,IAAI,SAAS,OAAQ;AAEzB,qBAAa,OAAO;AACpB,eAAO,oBAAoB,WAAW,OAAO;AAE7C,cAAM,UAAU,IAAI;AACpB,cAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,gBAAQ,GAAG;AAAA,MACb;AAEA,aAAO,iBAAiB,WAAW,OAAO;AAG1C,YAAM,WAA0B;AAAA,QAC9B,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA;AAAA,QACV,OAAO,eAAe;AAAA,QACtB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO;AAAA;AAAA,QACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,MAClC;AAEA,aAAO,OAAO,YAAY,UAAU,GAAG;AAAA,IACzC,CAAC;AAAA,EACH;AACF;;;AC5mBA,IAAM,qBAAqB;AAC3B,IAAM,gBAA6B;AAEnC,SAAS,cAAc,OAAsC;AAC3D,SAAO,UAAU,WAAW,UAAU,UAAU,UAAU;AAC5D;AAMO,SAAS,kBAA+B;AAC7C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,QAAQ,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,OAAO;AACrE,WAAO,cAAc,KAAK,IAAI,QAAQ;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,cACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,mBAAoB;AACzC,QAAI,CAAC,cAAc,QAAQ,KAAK,EAAG;AACnC,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;AAOO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,OAAO,aAAa,YAAa;AACrC,MAAI,UAAU,SAAS;AACrB,WAAO,SAAS,gBAAgB,QAAQ;AAAA,EAC1C,OAAO;AACL,aAAS,gBAAgB,QAAQ,QAAQ;AAAA,EAC3C;AACF;AAMO,SAAS,kBAA8B;AAC5C,mBAAiB,gBAAgB,CAAC;AAClC,SAAO,cAAc,gBAAgB;AACvC;;;ACzEO,IAAM,sBAAsB;AAoB5B,SAAS,mBACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,oBAAqB;AAC1C,QAAI,OAAO,QAAQ,eAAe,YAAY,CAAC,QAAQ,WAAY;AACnE,OAAG;AAAA,MACD,YAAY,QAAQ;AAAA,MACpB,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,MACxD,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;",
+  "sourcesContent": ["// packages/widget-sdk/src/service.ts\n\nimport type { WidgetServiceClient } from './types';\n\nexport interface CreateServiceClientOptions {\n  baseUrl: string;\n  getJwt: (forceRefresh?: boolean) => Promise<string>;\n  fetchImpl?: typeof fetch;\n}\n\nexport function createServiceClient(opts: CreateServiceClientOptions): WidgetServiceClient {\n  const fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);\n  const baseUrl = opts.baseUrl.replace(/\\/+$/, '');\n\n  async function call(path: string, init: RequestInit, token: string): Promise<Response> {\n    const url = `${baseUrl}${path.startsWith('/') ? path : `/${path}`}`;\n    const headers = new Headers(init.headers);\n    headers.set('authorization', `Bearer ${token}`);\n    if (init.body && !headers.has('content-type')) {\n      headers.set('content-type', 'application/json');\n    }\n    return fetchImpl(url, { ...init, headers });\n  }\n\n  return {\n    async fetch<T = unknown>(path: string, init: RequestInit = {}): Promise<T> {\n      let token = await opts.getJwt(false);\n      let res = await call(path, init, token);\n\n      if (res.status === 401) {\n        token = await opts.getJwt(true);\n        res = await call(path, init, token);\n      }\n\n      if (!res.ok) {\n        let body: { message?: string } = {};\n        try {\n          body = (await res.json()) as { message?: string };\n        } catch {\n          // non-JSON body \u2014 ignore\n        }\n        throw new Error(`Widget service request failed (${res.status}): ${body.message ?? ''}`);\n      }\n      return (await res.json()) as T;\n    },\n  };\n}\n", "// Session module \u2014 the official client for Flowstate widget-session rails.\n//\n// Group-session widgets (decision sprint, and any future multi-contributor\n// widget) run inside the app's /w/[slug] page. The page hands the iframe a\n// single-use auth ticket over postMessage (ADR-025: never in the URL on the\n// production path), the ticket is redeemed for a session token, and every\n// session verb is a REST call against /api/w/:slug on the widget gateway.\n//\n// This module wraps that whole contract so a widget never hand-rolls the\n// bridge:\n//\n// ```ts\n// import { CanvasWidget } from '@goflowstate/widget-sdk';\n// const session = await CanvasWidget.initSession();\n// if (session) {\n//   const state = await session.join();\n//   const stop = session.poll((s) => render(s));\n//   await session.contribute({ evidence: { pins } });\n// } else {\n//   // no launch params \u2014 standalone dev; use createMockSession()\n// }\n// ```\n//\n// The wire vocabulary is the generic session shape the rails speak\n// (historically named after the expedition: `tripId`, `myWishlist`, `plan`).\n// This module maps it onto neutral names once, here, so widgets never see the\n// legacy keys.\n\n// ============================================\n// State view\n// ============================================\n\nexport interface SessionMember {\n  userId: string;\n  name: string;\n  /** Deterministic per-user accent color (hex), stable across sessions. */\n  color: string;\n  /** True once this member has contributed (sealed) in the current round. */\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\n/** Gate policy surfaced to widgets (ADR-047). Optional server-side \u2014 links\n *  minted without a gate report null. */\nexport interface SessionGateView {\n  deadlineAt: string | null;\n  quorum?: { mode: 'all' | 'count' | 'pct'; min?: number };\n}\n\n/** Flow context when this session is a node in a running flow (ADR-047). */\nexport interface SessionFlowView {\n  runId: string;\n  nodeIndex: number;\n  nodeCount: number;\n  nodes: Array<{\n    key: string;\n    title: string;\n    status: 'pending' | 'active' | 'resolved' | 'expired';\n    artifactId?: string;\n    linkSlug?: string;\n  }>;\n}\n\n/** One verified (or user-entered) fact about the viewer, from a unishell\n *  shell. Read-only context: never use it to authorize anything. */\nexport interface SessionClaim {\n  type: 'name' | 'email' | 'phone';\n  value: string;\n  /** 'user-entered', 'otp', or a surface id such as 'discord'. */\n  source: string;\n  /** Present only when the value was proven. */\n  verifiedAt?: string;\n}\n\nexport interface SessionClaimSet {\n  name?: SessionClaim;\n  email?: SessionClaim;\n  phone?: SessionClaim;\n}\n\n/** Who this state was read for. `claims` is set only for a shell guest\n *  reading their own state; it is never another participant's. */\nexport interface SessionViewer {\n  userId: string;\n  guest: boolean;\n  claims: SessionClaimSet | null;\n}\n\n/** The rails' phase model: `setup` until the host commits framing, `open`\n *  while contributions are being collected, `sealed` once quorum is met and\n *  the session awaits close, `resolved` after synthesis produced the\n *  artifact. (Wire values `wishlist`/`plan` are mapped to `open`/`resolved`.) */\nexport type SessionPhase = 'setup' | 'open' | 'sealed' | 'resolved';\n\nexport interface SessionStateView<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  /** The widget-link slug \u2014 the session's identity and its /w/:slug URL key. */\n  slug: string;\n  phase: SessionPhase;\n  status: string;\n  setup: TSetup | null;\n  members: SessionMember[];\n  sealedCount: number;\n  memberCount: number;\n  /** True when every member has sealed (legacy all-hands quorum). */\n  allSealed: boolean;\n  /** True when the configured quorum policy is satisfied (falls back to\n   *  allSealed when the link carries no gate). */\n  quorumMet: boolean;\n  gate: SessionGateView | null;\n  flow: SessionFlowView | null;\n  /** Own contribution only \u2014 others stay blind until synthesis. */\n  myContribution: TContribution | null;\n  /** The synthesized document, present once the session resolved. */\n  doc: TDoc | null;\n  artifactId: string | null;\n  /** Widget-specific state-view extension (e.g. the decision sprint's stage\n   *  + ballot), passed through verbatim when the server provides one. */\n  extension: Record<string, unknown> | null;\n  /** The reader of this state; null when the server sent none (servers\n   *  before the shell endpoints). Optional so hand-built views keep compiling. */\n  viewer?: SessionViewer | null;\n}\n\n// ============================================\n// Client interface\n// ============================================\n\nexport interface SessionPollOptions {\n  /** Poll cadence in ms. Default 4000 (matches the historical widgets). */\n  intervalMs?: number;\n}\n\nexport interface SessionClient<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n> {\n  readonly slug: string;\n  /** Base URL of the web app (for reveal links and parent navigation). */\n  readonly webBase: string;\n  /** Base URL of the mobile PWA, when the host provided one via the optional\n   *  `mobile` iframe param. Participant-facing join links (e.g. a projected\n   *  QR) should prefer it and fall back to `webBase` when absent. Optional so\n   *  hand-rolled SessionClient implementations keep compiling. */\n  readonly mobileBase?: string | null;\n  /** The viewer's own shell claims from the most recent state read; null\n   *  until a state arrives or when there are none. Optional so hand-rolled\n   *  SessionClient implementations keep compiling. */\n  readonly claims?: SessionClaimSet | null;\n\n  /** Enter the session: the first identified enter creates the group. */\n  join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Fetch the current blind-aware state. */\n  state(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Poll state on a cadence. Returns a stop function. Errors are passed to\n   *  onError (or swallowed) so a transient failure never kills the loop. */\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void;\n  /** Host-only: commit the session framing. */\n  commitSetup(setup: TSetup): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Upsert my contribution (seal). One contribution row per member; widgets\n   *  with multi-stage payloads post the merged object every time. */\n  contribute(payload: TContribution): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Host-only close: synthesis runs, the artifact is born. Idempotent. */\n  close(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb that returns a session STATE (e.g. the sprint's\n   *  /advance). Body is JSON-encoded; the response's state is returned. */\n  action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;\n  /** Widget-specific verb with a NON-state response (e.g. /assist). Returns\n   *  the response's raw `data` value. Optional cancellation stops this request,\n   *  including its wait for the shared ticket; it does not cancel ticket redemption. */\n  request<T = unknown>(\n    verb: string,\n    body?: unknown,\n    options?: { signal?: AbortSignal }\n  ): Promise<T>;\n  /** Open a Flowstate URL outside the widget (parent navigation preferred \u2014\n   *  the /w page owns the session cookie). */\n  openExternal(url: string): void;\n  /** Deep link to an artifact reveal on the web app. */\n  revealUrl(artifactId: string): string;\n}\n\n// ============================================\n// Launch params + ticket handshake (ADR-025)\n// ============================================\n\nexport interface SessionLaunchParams {\n  slug: string;\n  /** Dev-only fallback: a ticket in the URL. Production receives the ticket\n   *  via the parent's `flowstate:init` postMessage \u2014 URLs leak into\n   *  history/referrers/logs. */\n  ticket: string | null;\n  apiBase: string;\n  webBase: string;\n  /** Base URL of the mobile PWA (the optional `mobile` iframe param). Null\n   *  when the host didn't send one \u2014 legacy hosts never do \u2014 so consumers\n   *  fall back to `webBase` links. Optional so hand-built params keep\n   *  compiling. */\n  mobileBase?: string | null;\n  /** Origin of the page that FRAMES the widget \u2014 the `host` iframe param.\n   *  The ready/init ticket handshake and `flowstate:navigate` are addressed\n   *  to this origin (0.2.2). Defaults to `webBase` when absent, which is\n   *  what every pre-0.2.2 host is: the web /w page framing the widget. The\n   *  mobile PWA frames the widget itself (its native lobby) and names itself\n   *  here \u2014 without it the browser drops every postMessage between them\n   *  (target-origin mismatch) and the widget never boots. */\n  hostBase?: string;\n}\n\nexport function readSessionLaunchParams(): SessionLaunchParams | null {\n  if (typeof window === 'undefined') return null;\n  const q = new URLSearchParams(window.location.search);\n  // `tripId` is the historical param name the /w page passes; keep reading it\n  // so hosts don't have to change. `slug` is accepted as the modern alias.\n  const slug = q.get('slug') ?? q.get('tripId') ?? '';\n  if (!slug) return null;\n  // `mobile` is optional and has NO default: absent means the host predates\n  // the PWA doors (or has none configured) and consumers must keep minting\n  // legacy webBase links.\n  const mobile = q.get('mobile');\n  const webBase = (q.get('web') ?? 'http://localhost:14321').replace(/\\/$/, '');\n  const host = q.get('host');\n  return {\n    slug,\n    ticket: q.get('ticket'),\n    apiBase: (q.get('api') ?? 'http://localhost:13002').replace(/\\/$/, ''),\n    webBase,\n    mobileBase: mobile ? mobile.replace(/\\/$/, '') : null,\n    hostBase: host ? host.replace(/\\/$/, '') : webBase,\n  };\n}\n\n/** The origin the handshake is addressed to: the framing page. */\nexport const hostOriginOf = (params: Pick<SessionLaunchParams, 'webBase' | 'hostBase'>): string =>\n  new URL(params.hostBase ?? params.webBase).origin;\n\nconst SESSION_INIT_TIMEOUT_MS = 10_000;\nconst DEFAULT_POLL_INTERVAL_MS = 4_000;\n\n/** Announce readiness to the parent (host) page and wait for it to hand over\n *  the single-use session ticket. `hostOrigin` is the framing page's origin\n *  (`hostOriginOf`) \u2014 the web /w page or the mobile PWA's native lobby. */\nfunction awaitInitTicket(hostOrigin: string): Promise<string> {\n  return new Promise((resolve, reject) => {\n    if (typeof window === 'undefined' || window.parent === window) {\n      reject(new Error('no parent page to receive a ticket from'));\n      return;\n    }\n    const webOrigin = hostOrigin;\n    const timer = setTimeout(() => {\n      window.removeEventListener('message', onMessage);\n      reject(new Error('timed out waiting for the session handoff'));\n    }, SESSION_INIT_TIMEOUT_MS);\n    const onMessage = (e: MessageEvent) => {\n      if (e.origin !== webOrigin) return;\n      const data = e.data as { type?: string; ticket?: string } | null;\n      if (data?.type !== 'flowstate:init' || typeof data.ticket !== 'string') return;\n      clearTimeout(timer);\n      window.removeEventListener('message', onMessage);\n      resolve(data.ticket);\n    };\n    window.addEventListener('message', onMessage);\n    window.parent.postMessage({ type: 'flowstate:ready' }, webOrigin);\n  });\n}\n\n// ============================================\n// Wire mapping\n// ============================================\n\ninterface WireMember {\n  userId: string;\n  name: string;\n  color: string;\n  sealed: boolean;\n  isMe: boolean;\n  isHost: boolean;\n}\n\ninterface WireSessionState {\n  tripId: string;\n  phase: 'setup' | 'wishlist' | 'sealed' | 'plan';\n  status: string;\n  setup: Record<string, unknown> | null;\n  members: WireMember[];\n  sealedCount: number;\n  memberCount: number;\n  allSealed: boolean;\n  quorumMet?: boolean;\n  gate?: SessionGateView | null;\n  flow?: SessionFlowView | null;\n  myWishlist: unknown;\n  plan: Record<string, unknown> | null;\n  artifactId: string | null;\n  extension?: Record<string, unknown> | null;\n  viewer?: { userId: string; guest: boolean; claims?: SessionClaimSet };\n}\n\nconst WIRE_PHASE: Record<WireSessionState['phase'], SessionPhase> = {\n  setup: 'setup',\n  wishlist: 'open',\n  sealed: 'sealed',\n  plan: 'resolved',\n};\n\n/** Exported for tests; not part of the package entry point. */\nexport function toStateView<TSetup, TContribution, TDoc>(\n  s: WireSessionState\n): SessionStateView<TSetup, TContribution, TDoc> {\n  return {\n    slug: s.tripId,\n    phase: WIRE_PHASE[s.phase] ?? 'open',\n    status: s.status,\n    setup: (s.setup as TSetup | null) ?? null,\n    members: s.members,\n    sealedCount: s.sealedCount,\n    memberCount: s.memberCount,\n    allSealed: s.allSealed,\n    quorumMet: s.quorumMet ?? s.allSealed,\n    gate: s.gate ?? null,\n    flow: s.flow ?? null,\n    myContribution: (s.myWishlist as TContribution | null) ?? null,\n    doc: (s.plan as TDoc | null) ?? null,\n    artifactId: s.artifactId,\n    extension: s.extension ?? null,\n    viewer: s.viewer\n      ? { userId: s.viewer.userId, guest: s.viewer.guest, claims: s.viewer.claims ?? null }\n      : null,\n  };\n}\n\n// ============================================\n// HTTP client over the session rails\n// ============================================\n\ntype ExternalOpener = (url: string) => void;\n\nconst parentOpener = (hostOrigin: string): ExternalOpener => {\n  return (url) => {\n    if (typeof window !== 'undefined' && window.parent !== window) {\n      // Ask the host page to navigate itself (the web /w page shares the\n      // session cookie; the PWA lobby routes reveals natively).\n      window.parent.postMessage({ type: 'flowstate:navigate', url }, hostOrigin);\n      return;\n    }\n    if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n  };\n};\n\nclass HttpSessionClient<TSetup, TContribution, TDoc> implements SessionClient<\n  TSetup,\n  TContribution,\n  TDoc\n> {\n  readonly slug: string;\n  readonly webBase: string;\n  readonly mobileBase: string | null;\n  private latestClaims: SessionClaimSet | null = null;\n  private readonly apiBase: string;\n  private readonly tokenPromise: Promise<string>;\n  private readonly opener: ExternalOpener;\n\n  constructor(params: SessionLaunchParams, opener?: ExternalOpener) {\n    this.slug = params.slug;\n    this.webBase = params.webBase;\n    this.mobileBase = params.mobileBase ?? null;\n    this.apiBase = params.apiBase;\n    this.opener = opener ?? parentOpener(hostOriginOf(params));\n    // Redeem eagerly: the ticket is single-use + short-lived; trade it for a\n    // session token before the user spends time in the widget.\n    this.tokenPromise = this.acquireTicket(params).then((t) => this.redeem(t));\n  }\n\n  private async acquireTicket(params: SessionLaunchParams): Promise<string> {\n    if (params.ticket) return params.ticket; // dev fallback\n    return awaitInitTicket(hostOriginOf(params));\n  }\n\n  private async redeem(ticket: string): Promise<string> {\n    const res = await fetch(`${this.apiBase}/api/auth/ticket/redeem`, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify({ ticket }),\n    });\n    if (!res.ok) throw new Error(`ticket redeem failed (${res.status})`);\n    const json = (await res.json()) as { data: { token: string } };\n    return json.data.token;\n  }\n\n  private async call(\n    path: string,\n    init: RequestInit = {}\n  ): Promise<SessionStateView<TSetup, TContribution, TDoc>> {\n    const token = await this.tokenPromise;\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}${path}`, {\n      ...init,\n      headers: {\n        authorization: `Bearer ${token}`,\n        ...(init.body ? { 'content-type': 'application/json' } : {}),\n        ...(init.headers ?? {}),\n      },\n    });\n    if (!res.ok) {\n      const body = (await res.json().catch(() => ({}))) as { message?: string };\n      throw new Error(body.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as {\n      data: WireSessionState | { state: WireSessionState };\n    };\n    const data = json.data as Record<string, unknown>;\n    const view = toStateView<TSetup, TContribution, TDoc>((data.state ?? data) as WireSessionState);\n    this.latestClaims = view.viewer?.claims ?? null;\n    return view;\n  }\n\n  get claims(): SessionClaimSet | null {\n    return this.latestClaims;\n  }\n\n  join() {\n    return this.call('/enter', { method: 'POST' });\n  }\n\n  state() {\n    return this.call('/state');\n  }\n\n  poll(\n    onState: (s: SessionStateView<TSetup, TContribution, TDoc>) => void,\n    opts?: SessionPollOptions & { onError?: (err: unknown) => void }\n  ): () => void {\n    const interval = opts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    let stopped = false;\n    let timer: ReturnType<typeof setTimeout> | null = null;\n    const tick = async () => {\n      try {\n        const s = await this.state();\n        if (!stopped) onState(s);\n      } catch (err) {\n        opts?.onError?.(err);\n      }\n      if (!stopped) timer = setTimeout(tick, interval);\n    };\n    void tick();\n    return () => {\n      stopped = true;\n      if (timer) clearTimeout(timer);\n    };\n  }\n\n  commitSetup(setup: TSetup) {\n    return this.call('/setup', { method: 'POST', body: JSON.stringify({ setup }) });\n  }\n\n  contribute(payload: TContribution) {\n    return this.call('/contribute', { method: 'POST', body: JSON.stringify({ payload }) });\n  }\n\n  close() {\n    return this.call('/close', { method: 'POST' });\n  }\n\n  action(verb: string, body?: unknown) {\n    return this.call(`/${verb.replace(/^\\//, '')}`, {\n      method: 'POST',\n      body: JSON.stringify(body ?? {}),\n    });\n  }\n\n  async request<T = unknown>(\n    verb: string,\n    body?: unknown,\n    options?: { signal?: AbortSignal }\n  ): Promise<T> {\n    const signal = options?.signal;\n    if (signal?.aborted) {\n      // Observe eager redemption even when this caller never waits for it.\n      // Retain the original promise so other callers still receive its failure.\n      void this.tokenPromise.catch(() => {});\n      signal.throwIfAborted();\n    }\n    let onAbort: (() => void) | undefined;\n    let token: string;\n    try {\n      token = await (signal\n        ? Promise.race([\n            this.tokenPromise,\n            new Promise<never>((_resolve, reject) => {\n              onAbort = () => reject(signal.reason);\n              signal.addEventListener('abort', onAbort, { once: true });\n            }),\n          ])\n        : this.tokenPromise);\n    } finally {\n      if (signal && onAbort) signal.removeEventListener('abort', onAbort);\n    }\n    const res = await fetch(`${this.apiBase}/api/w/${this.slug}/${verb.replace(/^\\//, '')}`, {\n      signal,\n      method: 'POST',\n      headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },\n      body: JSON.stringify(body ?? {}),\n    });\n    if (!res.ok) {\n      const errBody = (await res.json().catch(() => {\n        signal?.throwIfAborted();\n        return {};\n      })) as { message?: string };\n      throw new Error(errBody.message ?? `session service ${res.status}`);\n    }\n    const json = (await res.json()) as { data: T };\n    return json.data;\n  }\n\n  openExternal(url: string): void {\n    this.opener(url);\n  }\n\n  revealUrl(artifactId: string): string {\n    // FB-133: honour the PWA base like the wall's take-home QR does \u2014 a\n    // phone-born session's reveal opens in the PWA, not the legacy web page.\n    return this.mobileBase\n      ? `${this.mobileBase}/?a=${artifactId}`\n      : `${this.webBase}/a/${artifactId}`;\n  }\n}\n\n// ============================================\n// Standalone mock (widget dev outside the canvas)\n// ============================================\n\nexport interface MockSessionOptions<TSetup, TDoc> {\n  /** Display name for the single mock member. Default \"You\". */\n  me?: string;\n  /** Extra fake members (all unsealed initially). */\n  others?: string[];\n  setup?: TSetup | null;\n  /** Claims the mock viewer carries (shell-guest dev). Default null. */\n  claims?: SessionClaimSet | null;\n  /** Called on close() to synthesize the mock doc. */\n  synthesize?: (contributions: unknown[]) => TDoc;\n}\n\n/** In-memory SessionClient for standalone dev \u2014 same interface, no host, no\n *  network. The mock's \"host\" is always you. */\nexport function createMockSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(opts: MockSessionOptions<TSetup, TDoc> = {}): SessionClient<TSetup, TContribution, TDoc> {\n  const palette = ['#8b7ef8', '#f8a34d', '#4dc9a4', '#f26d8f', '#5aa9e6'];\n  const members: SessionMember[] = [\n    {\n      userId: 'mock-me',\n      name: opts.me ?? 'You',\n      color: palette[0],\n      sealed: false,\n      isMe: true,\n      isHost: true,\n    },\n    ...(opts.others ?? []).map((name, i) => ({\n      userId: `mock-${i + 1}`,\n      name,\n      color: palette[(i + 1) % palette.length],\n      sealed: false,\n      isMe: false,\n      isHost: false,\n    })),\n  ];\n  let setup: TSetup | null = opts.setup ?? null;\n  let myContribution: TContribution | null = null;\n  let doc: TDoc | null = null;\n  let status = 'open';\n\n  const view = (): SessionStateView<TSetup, TContribution, TDoc> => {\n    const sealedCount = members.filter((m) => m.sealed).length;\n    const allSealed = members.length > 0 && sealedCount >= members.length;\n    const phase: SessionPhase =\n      status === 'closed' && doc ? 'resolved' : !setup ? 'setup' : allSealed ? 'sealed' : 'open';\n    return {\n      slug: 'mock-session',\n      phase,\n      status,\n      setup,\n      members: members.map((m) => ({ ...m })),\n      sealedCount,\n      memberCount: members.length,\n      allSealed,\n      quorumMet: allSealed,\n      gate: null,\n      flow: null,\n      myContribution,\n      doc,\n      artifactId: doc ? 'mock-artifact' : null,\n      extension: null,\n      viewer: { userId: 'mock-me', guest: false, claims: opts.claims ?? null },\n    };\n  };\n\n  return {\n    slug: 'mock-session',\n    webBase: 'http://localhost:14321',\n    claims: opts.claims ?? null,\n    async join() {\n      return view();\n    },\n    async state() {\n      return view();\n    },\n    poll(onState, pollOpts) {\n      const interval = pollOpts?.intervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n      const timer = setInterval(() => onState(view()), interval);\n      onState(view());\n      return () => clearInterval(timer);\n    },\n    async commitSetup(s: TSetup) {\n      setup = s;\n      return view();\n    },\n    async contribute(payload: TContribution) {\n      myContribution = payload;\n      const me = members.find((m) => m.isMe);\n      if (me) me.sealed = true;\n      return view();\n    },\n    async close() {\n      status = 'closed';\n      doc = opts.synthesize\n        ? opts.synthesize([myContribution])\n        : ({ mock: true } as unknown as TDoc);\n      return view();\n    },\n    async action() {\n      return view();\n    },\n    async request<T = unknown>() {\n      return {} as T;\n    },\n    openExternal(url: string) {\n      if (typeof window !== 'undefined') window.open(url, '_blank', 'noopener');\n    },\n    revealUrl(artifactId: string) {\n      return `http://localhost:14321/a/${artifactId}`;\n    },\n  };\n}\n\n// ============================================\n// Entry point\n// ============================================\n\n/**\n * Initialize a widget-session client from the launch context.\n *\n * Returns `null` when the page carries no session launch params (standalone\n * dev, or a canvas-hosted widget that has no group session) \u2014 callers fall\n * back to {@link createMockSession} or their own local state.\n */\nexport function initSession<\n  TSetup = Record<string, unknown>,\n  TContribution = unknown,\n  TDoc = Record<string, unknown>,\n>(): SessionClient<TSetup, TContribution, TDoc> | null {\n  const params = readSessionLaunchParams();\n  if (!params) return null;\n  return new HttpSessionClient<TSetup, TContribution, TDoc>(params);\n}\n", "// ============================================\n// Canvas Widget SDK \u2014 runs inside widget iframes\n// ============================================\n//\n// Usage in a widget:\n//   <script src=\"canvas-widget-sdk.js\"></script>\n//   <script>\n//     const widget = await CanvasWidget.init();\n//     widget.onStateChange(state => { ... });\n//   </script>\n\nimport type {\n  CanvasWidgetSDK,\n  WidgetDisplayState,\n  WidgetEvent,\n  InitPayload,\n  StateChangePayload,\n  EventBroadcastPayload,\n  ConsentResult,\n  ConsentResultPayload,\n  UserContext,\n  StorageAPI,\n  SettingsAPI,\n  WidgetServiceClient,\n  AiAPI,\n  AiCallOptions,\n  AiCompleteResult,\n  AiStreamEvent,\n  DbAPI,\n  DbCollection,\n  DbRecord,\n  DbListOptions,\n} from './types';\nimport { createServiceClient } from './service';\nimport { initSession } from './session';\n\nconst PROTOCOL = 'canvas-widget-v1';\nconst DEV_MODE_TOKEN = 'dev-mode-skip';\nconst INIT_TIMEOUT_MS = 5000;\n\n// crypto.randomUUID only exists in SECURE contexts (HTTPS or localhost). When\n// a widget iframe is served over plain http on a LAN IP (e.g. dev-on-phone at\n// http://10.0.0.x), it's undefined and init() throws \u2014 the widget never\n// hands shakes and the host times it out (\"failed to load\"). Fall back to a\n// getRandomValues-based v4 UUID (also secure-context-independent).\nfunction safeRandomUUID(): string {\n  const c = globalThis.crypto;\n  if (c && typeof c.randomUUID === 'function') return c.randomUUID();\n  const b = new Uint8Array(16);\n  if (c && typeof c.getRandomValues === 'function') c.getRandomValues(b);\n  else for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);\n  b[6] = (b[6] & 0x0f) | 0x40;\n  b[8] = (b[8] & 0x3f) | 0x80;\n  const h = Array.from(b, (x) => x.toString(16).padStart(2, '0'));\n  return `${h[0]}${h[1]}${h[2]}${h[3]}-${h[4]}${h[5]}-${h[6]}${h[7]}-${h[8]}${h[9]}-${h[10]}${h[11]}${h[12]}${h[13]}${h[14]}${h[15]}`;\n}\n\ninterface CanvasMessage {\n  protocol: string;\n  type: string;\n  widgetId: string;\n  nonce: string;\n  timestamp: number;\n  token: string;\n  payload: Record<string, unknown>;\n}\n\n// ============================================\n// HMAC utilities (mirrored from host side)\n// ============================================\n\nlet cachedKey: { secret: string; key: CryptoKey } | null = null;\n\nasync function getHmacKey(secret: string): Promise<CryptoKey> {\n  if (cachedKey && cachedKey.secret === secret) return cachedKey.key;\n\n  const encoded = new TextEncoder().encode(secret);\n  const buf = new ArrayBuffer(encoded.byteLength);\n  new Uint8Array(buf).set(encoded);\n\n  const key = await crypto.subtle.importKey('raw', buf, { name: 'HMAC', hash: 'SHA-256' }, false, [\n    'sign',\n  ]);\n\n  cachedKey = { secret, key };\n  return key;\n}\n\nasync function signToken(\n  secret: string,\n  type: string,\n  widgetId: string,\n  nonce: string,\n  timestamp: number\n): Promise<string> {\n  const key = await getHmacKey(secret);\n  const data = new TextEncoder().encode(`${type}:${widgetId}:${nonce}:${timestamp}`);\n  const buf = new ArrayBuffer(data.byteLength);\n  new Uint8Array(buf).set(data);\n  const sig = await crypto.subtle.sign('HMAC', key, buf);\n  return Array.from(new Uint8Array(sig))\n    .map((b) => b.toString(16).padStart(2, '0'))\n    .join('');\n}\n\n// ============================================\n// SDK Implementation\n// ============================================\n\n/** Internal SDK implementation \u2014 not exposed directly to widget authors. */\nexport class CanvasWidgetSDKImpl implements CanvasWidgetSDK {\n  private _widgetId: string;\n  private _state: WidgetDisplayState;\n  private _hmacSecret: string | null;\n  private _user: UserContext | null;\n  private _namespace: { officeId: string; memberCount: number } | null;\n  private _widgetApiUrl: string | null;\n  private _widgetApiToken: string | null;\n  private _installationId: string;\n  private _pendingConsents = new Map<\n    string,\n    { resolve: (r: ConsentResult) => void; reject: (e: Error) => void }\n  >();\n  private _cachedJwt: { token: string; expiresAt: number } | null = null;\n  private _stateListeners: Array<(state: WidgetDisplayState) => void> = [];\n  private _displayState: WidgetDisplayState = 'collapsed';\n  private _displayStateCallbacks: Array<(state: WidgetDisplayState) => void> = [];\n  private _focused = false;\n  private _focusCallbacks: Array<(focused: boolean) => void> = [];\n  private _settingsRemoteListeners: Array<(settings: Record<string, unknown>) => void> = [];\n  private _eventListeners = new Map<string, Array<(event: WidgetEvent) => void>>();\n  private _settings: Record<string, unknown>;\n  private _messageHandler: (event: MessageEvent) => void;\n\n  /** Authenticated HTTP client scoped to the widget's declared service URL. Undefined when no service is declared. */\n  readonly service: WidgetServiceClient | undefined;\n\n  constructor(init: InitPayload) {\n    this._widgetId = init.widgetId;\n    this._state = init.state;\n    this._hmacSecret = init.hmacSecret;\n    this._user = init.user;\n    this._namespace = init.namespace ?? null;\n    this._widgetApiUrl = init.widgetApiUrl;\n    this._widgetApiToken = init.widgetApiToken ?? null;\n    this._installationId = init.installationId;\n    this._settings = init.settings ?? {};\n\n    // Wire sdk.service when the host provides a service URL from the manifest\n    if (init.serviceUrl) {\n      this.service = createServiceClient({\n        baseUrl: init.serviceUrl,\n        getJwt: (forceRefresh?: boolean) => this.getJwt(forceRefresh),\n      });\n    }\n\n    this._messageHandler = this.handleMessage.bind(this);\n    window.addEventListener('message', this._messageHandler);\n  }\n\n  /** The unique identifier for this widget instance on the canvas. */\n  get widgetId(): string {\n    return this._widgetId;\n  }\n\n  /** The current display state of the widget (collapsed, expanding, expanded, collapsing). */\n  get state(): WidgetDisplayState {\n    return this._state;\n  }\n\n  /** The authenticated user context, or null when user data access has not been granted. */\n  get user(): UserContext | null {\n    return this._user;\n  }\n\n  /** Namespace (office) context \u2014 id and owner-inclusive member count \u2014 or\n   *  null on a personal canvas. What the `canvas.context` permission grants. */\n  get namespace(): { officeId: string; memberCount: number } | null {\n    return this._namespace;\n  }\n\n  /** Subscribe to display state changes; returns an unsubscribe function. */\n  onStateChange(cb: (state: WidgetDisplayState) => void): () => void {\n    this._stateListeners.push(cb);\n    return () => {\n      const idx = this._stateListeners.indexOf(cb);\n      if (idx !== -1) this._stateListeners.splice(idx, 1);\n    };\n  }\n\n  /** Ask the canvas host to expand this widget into its modal view. */\n  requestExpand(): void {\n    this.send('EXPAND_REQUEST', {});\n  }\n\n  /** Ask the canvas host to collapse this widget back to its tile view. */\n  requestCollapse(): void {\n    this.send('COLLAPSE_REQUEST', {});\n  }\n\n  /** Get the current display state */\n  getDisplayState(): WidgetDisplayState {\n    return this._displayState;\n  }\n\n  /** Register a callback for display state changes */\n  onDisplayStateChange(callback: (state: WidgetDisplayState) => void): () => void {\n    this._displayStateCallbacks.push(callback);\n    return () => {\n      this._displayStateCallbacks = this._displayStateCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Is this widget the user's current focus? Updates via FOCUS_CHANGE. */\n  isFocused(): boolean {\n    return this._focused;\n  }\n\n  /** Subscribe to focus transitions. Returns an unsubscribe function. */\n  onFocusChange(callback: (focused: boolean) => void): () => void {\n    this._focusCallbacks.push(callback);\n    return () => {\n      this._focusCallbacks = this._focusCallbacks.filter((cb) => cb !== callback);\n    };\n  }\n\n  /** Request promotion to fullscreen from partial */\n  requestFullscreen(): void {\n    this.send('FULLSCREEN_REQUEST', {});\n  }\n\n  /** Broadcast an event on the given topic to all subscribed widgets on the canvas. */\n  emit(topic: string, payload: unknown): void {\n    this.send('EVENT_EMIT', { topic, payload });\n  }\n\n  /** Subscribe to events on the given topic; returns an unsubscribe function. */\n  subscribe(topic: string, cb: (event: WidgetEvent) => void): () => void {\n    const list = this._eventListeners.get(topic) ?? [];\n    list.push(cb);\n    this._eventListeners.set(topic, list);\n    return () => {\n      const current = this._eventListeners.get(topic);\n      if (!current) return;\n      const idx = current.indexOf(cb);\n      if (idx !== -1) current.splice(idx, 1);\n    };\n  }\n\n  /** Send a structured log entry to the canvas host for centralized debugging. */\n  log(level: 'info' | 'warn' | 'error', message: string, data?: unknown): void {\n    this.send('LOG', { level, message, data: data ?? null });\n  }\n\n  /** Request user consent for a named data scope; resolves with the consent decision. */\n  async requestConsent(scope: string, reason: string): Promise<ConsentResult> {\n    return new Promise<ConsentResult>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this._pendingConsents.delete(scope);\n        reject(new Error('Consent request timed out'));\n      }, 60000);\n\n      this._pendingConsents.set(scope, {\n        resolve: (r: ConsentResult) => {\n          clearTimeout(timeout);\n          resolve(r);\n        },\n        reject: (e: Error) => {\n          clearTimeout(timeout);\n          reject(e);\n        },\n      });\n\n      this.send('CONSENT_REQUEST', { scope, reason });\n    });\n  }\n\n  /** Return the cached JWT for authenticating requests to external APIs; throws if no token is available. Pass forceRefresh=true to bypass the cache. */\n  async getJwt(forceRefresh?: boolean): Promise<string> {\n    if (!forceRefresh && this._cachedJwt && Date.now() < this._cachedJwt.expiresAt - 30000) {\n      return this._cachedJwt.token;\n    }\n    throw new Error('No cached JWT \u2014 widget must use OAuth flow for token refresh');\n  }\n\n  /** Persistent key-value storage scoped to this widget installation. */\n  get storage(): StorageAPI {\n    return {\n      get: (key: string) => this.storageRequest('GET', key),\n      set: (key: string, value: unknown) => this.storageRequest('PUT', key, value).then(() => {}),\n      delete: (key: string) => this.storageRequest('DELETE', key).then(() => {}),\n    };\n  }\n\n  /** Ad-hoc collections/records backend scoped to the canvas/room. */\n  get db(): DbAPI {\n    const req = (path: string, method: string, body?: unknown) => this.widgetApiRequest(path, method, body);\n    return {\n      collection(name: string): DbCollection {\n        const base = `/widget-api/db/${encodeURIComponent(name)}`;\n        return {\n          create: (data) => req(base, 'POST', data) as Promise<DbRecord>,\n          get: (id) => req(`${base}/${encodeURIComponent(id)}`, 'GET') as Promise<DbRecord>,\n          list: (opts?: DbListOptions) => {\n            const qs = new URLSearchParams();\n            if (opts?.limit != null) qs.set('limit', String(opts.limit));\n            if (opts?.cursor) qs.set('cursor', opts.cursor);\n            if (opts?.sort) qs.set('sort', opts.sort);\n            if (opts?.mine) qs.set('mine', 'true');\n            const suffix = qs.toString() ? `?${qs.toString()}` : '';\n            return req(`${base}${suffix}`, 'GET') as Promise<DbRecord[]>;\n          },\n          update: (id, patch) => req(`${base}/${encodeURIComponent(id)}`, 'PATCH', patch) as Promise<DbRecord>,\n          delete: (id) => (req(`${base}/${encodeURIComponent(id)}`, 'DELETE') as Promise<unknown>).then(() => {}),\n        };\n      },\n    };\n  }\n\n  /** Platform LLM access (widget.* aliases only). Requests ride the same\n   *  widget-gateway auth as db/storage; the platform meters every call and\n   *  attributes it to this widget's publishing org. */\n  get ai(): AiAPI {\n    const complete = (opts: AiCallOptions): Promise<AiCompleteResult> =>\n      this.widgetApiRequest('/widget-api/ai/complete', 'POST', opts) as Promise<AiCompleteResult>;\n    const streamRequest = (opts: AiCallOptions): Promise<Response> => this.widgetApiStream(opts);\n    return {\n      complete,\n      // Async generator over the gateway's SSE frames. Ends on [DONE] or\n      // stream end; returning early (break) cancels the fetch body, which\n      // the gateway sees as a disconnect and aborts the upstream call, so\n      // an abandoned stream stops generating and billing.\n      async *stream(opts: AiCallOptions): AsyncGenerator<AiStreamEvent> {\n        const response = await streamRequest(opts);\n        const reader = response.body?.getReader();\n        if (!reader) throw new Error('ai.stream: response has no body');\n        const decoder = new TextDecoder();\n        let buffer = '';\n        try {\n          for (;;) {\n            const { done, value } = await reader.read();\n            if (done) break;\n            buffer += decoder.decode(value, { stream: true });\n            const frames = buffer.split('\\n\\n');\n            buffer = frames.pop() ?? '';\n            for (const frame of frames) {\n              const dataLine = frame.split('\\n').find((l) => l.startsWith('data:'));\n              if (!dataLine) continue;\n              const payload = dataLine.slice(5).trim();\n              if (!payload || payload === '[DONE]') continue;\n              let parsed: AiStreamEvent;\n              try {\n                parsed = JSON.parse(payload) as AiStreamEvent;\n              } catch {\n                continue;\n              }\n              yield parsed;\n            }\n          }\n        } finally {\n          // Break/return path: releases the connection so the gateway's\n          // req.on('close') fires and the upstream call aborts.\n          await reader.cancel().catch(() => {});\n        }\n      },\n    };\n  }\n\n  /** Widget configuration settings persisted by the canvas host. */\n  get settings(): SettingsAPI {\n    return {\n      get: () => ({ ...this._settings }),\n      set: (newSettings: Record<string, unknown>) => {\n        this._settings = { ...this._settings, ...newSettings };\n        this.send('SETTINGS_WRITE', { settings: this._settings });\n      },\n      onRemoteChange: (cb: (settings: Record<string, unknown>) => void) => {\n        this._settingsRemoteListeners.push(cb);\n        return () => {\n          this._settingsRemoteListeners = this._settingsRemoteListeners.filter((fn) => fn !== cb);\n        };\n      },\n    };\n  }\n\n  /** Display a toast notification in the canvas host UI. */\n  async notify(message: string, opts?: { level?: string; duration?: number }): Promise<void> {\n    this.send('NOTIFICATION', {\n      message,\n      level: opts?.level ?? 'info',\n      duration: opts?.duration ?? 5000,\n    });\n  }\n\n  // \u2500\u2500 Private \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n  /** Raw streaming POST against the widget gateway \u2014 same auth as\n   *  widgetApiRequest, but returns the Response for SSE consumption\n   *  instead of parsing a JSON envelope. */\n  private async widgetApiStream(body: unknown): Promise<Response> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const response = await fetch(`${this._widgetApiUrl}/widget-api/ai/stream`, {\n      method: 'POST',\n      headers,\n      body: JSON.stringify(body),\n    });\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? 'ai.stream request failed');\n    }\n    return response;\n  }\n\n  private async widgetApiRequest(path: string, method: string, body?: unknown): Promise<unknown> {\n    if (!this._widgetApiUrl) {\n      throw new Error('Widget API Gateway URL not available');\n    }\n    const url = `${this._widgetApiUrl}${path}`;\n    const headers: Record<string, string> = { 'Content-Type': 'application/json' };\n    if (this._widgetApiToken) {\n      headers['Authorization'] = `Bearer ${this._widgetApiToken}`;\n    }\n    const opts: RequestInit = { method, headers };\n    if (body !== undefined && method !== 'GET' && method !== 'DELETE') {\n      opts.body = JSON.stringify(body);\n    }\n    const response = await fetch(url, opts);\n    if (!response.ok) {\n      const err = await response.json().catch(() => ({}));\n      throw new Error((err as Record<string, string>).message ?? `Request ${method} ${path} failed`);\n    }\n    if (method === 'GET' || method === 'POST' || method === 'PATCH') {\n      const result = await response.json();\n      return (result as Record<string, unknown>).data;\n    }\n    return undefined;\n  }\n\n  private storageRequest(method: string, key: string, value?: unknown): Promise<unknown> {\n    return this.widgetApiRequest(`/widget-api/storage/${encodeURIComponent(key)}`, method, value);\n  }\n\n  private handleMessage(event: MessageEvent): void {\n    const msg = event.data;\n    if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n\n    switch (msg.type) {\n      case 'STATE_CHANGE': {\n        const payload = msg.payload as StateChangePayload;\n        this._state = payload.state;\n        for (const listener of this._stateListeners) {\n          listener(payload.state);\n        }\n        break;\n      }\n      case 'EVENT_BROADCAST': {\n        const payload = msg.payload as EventBroadcastPayload;\n        const listeners = this._eventListeners.get(payload.topic);\n        if (listeners) {\n          const evt: WidgetEvent = {\n            topic: payload.topic,\n            payload: payload.payload,\n            emittedAt: payload.emittedAt,\n          };\n          for (const listener of listeners) {\n            listener(evt);\n          }\n        }\n        break;\n      }\n      case 'CONSENT_RESULT': {\n        const payload = msg.payload as ConsentResultPayload;\n        const pending = this._pendingConsents.get(payload.scope);\n        if (pending) {\n          this._pendingConsents.delete(payload.scope);\n          pending.resolve({\n            scope: payload.scope,\n            granted: payload.granted,\n            grantToken: payload.grantToken,\n            expiresIn: payload.expiresIn,\n          });\n        }\n        break;\n      }\n      case 'AUTH_TOKEN_REFRESH': {\n        const payload = msg.payload as { token: string; expiresIn: number };\n        this._cachedJwt = {\n          token: payload.token,\n          expiresAt: Date.now() + payload.expiresIn * 1000,\n        };\n        break;\n      }\n      case 'DISPLAY_STATE_CHANGE': {\n        const newState = msg.payload?.displayState as WidgetDisplayState;\n        if (newState) {\n          this._displayState = newState;\n          this._displayStateCallbacks.forEach((cb) => cb(newState));\n        }\n        break;\n      }\n      case 'FOCUS_CHANGE': {\n        const next = !!msg.payload?.focused;\n        if (next !== this._focused) {\n          this._focused = next;\n          this._focusCallbacks.forEach((cb) => cb(next));\n        }\n        break;\n      }\n      case 'SETTINGS_REMOTE_UPDATE': {\n        const p = msg.payload as { settings: Record<string, unknown> };\n        this._settings = { ...p.settings };\n        for (const fn of this._settingsRemoteListeners) {\n          try {\n            fn({ ...this._settings });\n          } catch {\n            // a listener throwing must not break message handling\n          }\n        }\n        break;\n      }\n      case 'USER_CONTEXT':\n      case 'CANVAS_CONTEXT':\n        // Phase 3+ \u2014 reserved for future use\n        break;\n    }\n  }\n\n  private send(type: string, payload: Record<string, unknown>): void {\n    // Fire and forget \u2014 sign is async but we don't need to await delivery\n    this.buildMessage(type, payload).then((msg) => {\n      window.parent.postMessage(msg, '*');\n    });\n  }\n\n  private async buildMessage(\n    type: string,\n    payload: Record<string, unknown>\n  ): Promise<CanvasMessage> {\n    const nonce = safeRandomUUID();\n    const timestamp = Date.now();\n\n    let token: string;\n    if (this._hmacSecret) {\n      token = await signToken(this._hmacSecret, type, this._widgetId, nonce, timestamp);\n    } else {\n      token = DEV_MODE_TOKEN;\n    }\n\n    return {\n      protocol: PROTOCOL,\n      type,\n      widgetId: this._widgetId,\n      nonce,\n      timestamp,\n      token,\n      payload,\n    };\n  }\n\n  /** Tear down the SDK instance, remove all listeners, and reject pending consent requests. */\n  destroy(): void {\n    window.removeEventListener('message', this._messageHandler);\n    this._stateListeners.length = 0;\n    this._eventListeners.clear();\n    for (const [, pending] of this._pendingConsents) {\n      pending.reject(new Error('Widget destroyed'));\n    }\n    this._pendingConsents.clear();\n  }\n}\n\n// ============================================\n// Public API: CanvasWidget.init()\n// ============================================\n\n/**\n * Entry point for the Flowstate Canvas Widget SDK.\n *\n * Usage:\n * ```ts\n * import { CanvasWidget } from '@goflowstate/widget-sdk';\n * const widget = await CanvasWidget.init();\n * ```\n */\nexport const CanvasWidget = {\n  /**\n   * Initialize a group-session client for widgets hosted on the /w/[slug]\n   * session page (ticket handshake + session REST rails). Returns null when\n   * the launch context carries no session params \u2014 see `initSession` in\n   * ./session for details and `createMockSession` for standalone dev.\n   */\n  initSession,\n\n  /**\n   * Initialize the SDK and establish communication with the canvas host.\n   *\n   * Sends a READY message to the host and waits for an INIT response.\n   * Resolves with a fully initialized {@link CanvasWidgetSDK} instance.\n   * Rejects after 5 seconds if no INIT is received from the host.\n   */\n  init(): Promise<CanvasWidgetSDK> {\n    return new Promise<CanvasWidgetSDK>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        window.removeEventListener('message', handler);\n        reject(new Error('CanvasWidget.init() timed out \u2014 no INIT received from host within 5s'));\n      }, INIT_TIMEOUT_MS);\n\n      const handler = (event: MessageEvent) => {\n        const msg = event.data;\n        if (!msg || typeof msg !== 'object' || msg.protocol !== PROTOCOL) return;\n        if (msg.type !== 'INIT') return;\n\n        clearTimeout(timeout);\n        window.removeEventListener('message', handler);\n\n        const payload = msg.payload as InitPayload;\n        const sdk = new CanvasWidgetSDKImpl(payload);\n        resolve(sdk);\n      };\n\n      window.addEventListener('message', handler);\n\n      // Send READY to host \u2014 the host will respond with INIT\n      const readyMsg: CanvasMessage = {\n        protocol: PROTOCOL,\n        type: 'READY',\n        widgetId: '', // Not yet known \u2014 host identifies us by iframe source\n        nonce: safeRandomUUID(),\n        timestamp: Date.now(),\n        token: DEV_MODE_TOKEN, // READY is always allowed, token doesn't matter\n        payload: { manifestVersion: '1' },\n      };\n\n      window.parent.postMessage(readyMsg, '*');\n    });\n  },\n};\n", "// ============================================\n// Widget theme utilities \u2014 the Flowstate Theme Contract (ADR-048)\n// ============================================\n//\n// Flowstate has exactly three themes: 'light' | 'dark' | 'glass'.\n// Glass is the signature default (the liquid-glass look) \u2014 widgets treat it\n// as the unthemed plane. The host hands the active theme to external iframe\n// widgets in two ways:\n//\n//   1. Boot:  a `?theme=` query param appended to the iframe src.\n//   2. Live:  a `postMessage` of `{ type: 'flowstate:theme', theme }`.\n//\n// Widgets map the theme onto their own tokens by setting `data-theme` on\n// their <html> element ('glass' removes the attribute, so widget CSS keeps\n// the glass plane as its default styles).\n//\n// Usage in a widget entry:\n//   import { initWidgetTheme } from '@goflowstate/widget-sdk';\n//   initWidgetTheme(); // apply boot theme + follow live host updates\n\nexport type WidgetTheme = 'light' | 'dark' | 'glass';\n\nconst THEME_MESSAGE_TYPE = 'flowstate:theme';\nconst DEFAULT_THEME: WidgetTheme = 'glass';\n\nfunction isWidgetTheme(value: unknown): value is WidgetTheme {\n  return value === 'light' || value === 'dark' || value === 'glass';\n}\n\n/**\n * Read the theme the host handed the widget at boot via the `?theme=` URL\n * param. Invalid or missing values fall back to 'glass' (the default plane).\n */\nexport function getInitialTheme(): WidgetTheme {\n  if (typeof window === 'undefined') return DEFAULT_THEME;\n  try {\n    const param = new URLSearchParams(window.location.search).get('theme');\n    return isWidgetTheme(param) ? param : DEFAULT_THEME;\n  } catch {\n    return DEFAULT_THEME;\n  }\n}\n\n/**\n * Subscribe to live theme updates pushed by the host\n * (`postMessage({ type: 'flowstate:theme', theme })`). Non-theme messages\n * and invalid theme values are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted,\n * mirroring the ingest channel; a hostile sibling frame cannot restyle the\n * widget. Pass `allowedOrigin` to additionally pin the host's origin.\n */\nexport function onThemeChange(\n  cb: (theme: WidgetTheme) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; theme?: unknown };\n    if (message.type !== THEME_MESSAGE_TYPE) return;\n    if (!isWidgetTheme(message.theme)) return;\n    cb(message.theme);\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n\n/**\n * Apply a theme to the widget document by setting `data-theme` on <html>.\n * 'glass' REMOVES the attribute \u2014 widget CSS treats glass as the default\n * plane, with `[data-theme='light']` / `[data-theme='dark']` overrides.\n */\nexport function applyWidgetTheme(theme: WidgetTheme): void {\n  if (typeof document === 'undefined') return;\n  if (theme === 'glass') {\n    delete document.documentElement.dataset.theme;\n  } else {\n    document.documentElement.dataset.theme = theme;\n  }\n}\n\n/**\n * Convenience boot helper: apply the initial (`?theme=`) theme, then follow\n * live host updates, applying each. Returns the unsubscribe function.\n */\nexport function initWidgetTheme(): () => void {\n  applyWidgetTheme(getInitialTheme());\n  return onThemeChange(applyWidgetTheme);\n}\n", "// ============================================\n// Widget ingest channel \u2014 ADR-043 in-place delivery\n// ============================================\n//\n// When an artifact is dropped on (or sent to) a widget and the ingestion\n// transform produces a result, the HOST pushes the produced artifact into\n// any open iframe of the target widget:\n//\n//   postMessage({ type: 'flowstate:ingest', artifactId, kind?, payload? })\n//\n// `payload` is the produced artifact's parsed JSON content when the host\n// could fetch it (small structured artifacts like kanban boards); widgets\n// without a payload can show an affordance around `artifactId` instead.\n// Same channel shape as the theme handoff (`flowstate:theme`).\n//\n// Usage in a widget entry:\n//   import { onArtifactIngested } from '@goflowstate/widget-sdk';\n//   onArtifactIngested(({ payload }) => mergeBoard(payload));\n\nexport const INGEST_MESSAGE_TYPE = 'flowstate:ingest';\n\nexport interface IngestedArtifact {\n  /** The produced artifact's id (host route: /a/:id). */\n  artifactId: string;\n  /** The produced artifact kind (e.g. 'kanban-board'), when known. */\n  kind?: string;\n  /** Parsed JSON content of the produced artifact, when the host fetched it. */\n  payload?: unknown;\n}\n\n/**\n * Subscribe to ingestion results pushed by the host. Non-ingest messages and\n * malformed payloads are ignored. Returns an unsubscribe function.\n *\n * Only messages from the embedding host page (`window.parent`) are accepted \u2014\n * a hostile sibling frame or opener cannot inject into the channel. Pass\n * `allowedOrigin` to additionally pin the host's origin (the session module\n * derives the same value from `webBase`).\n */\nexport function onArtifactIngested(\n  cb: (artifact: IngestedArtifact) => void,\n  opts?: { allowedOrigin?: string }\n): () => void {\n  if (typeof window === 'undefined') return () => {};\n  const listener = (event: MessageEvent): void => {\n    if (event.source !== window.parent) return;\n    if (opts?.allowedOrigin && event.origin !== opts.allowedOrigin) return;\n    const data: unknown = event.data;\n    if (typeof data !== 'object' || data === null) return;\n    const message = data as { type?: unknown; artifactId?: unknown; kind?: unknown; payload?: unknown };\n    if (message.type !== INGEST_MESSAGE_TYPE) return;\n    if (typeof message.artifactId !== 'string' || !message.artifactId) return;\n    cb({\n      artifactId: message.artifactId,\n      kind: typeof message.kind === 'string' ? message.kind : undefined,\n      payload: message.payload,\n    });\n  };\n  window.addEventListener('message', listener);\n  return () => window.removeEventListener('message', listener);\n}\n"],
+  "mappings": ";;;;;;;;AAUO,SAAS,oBAAoB,MAAuD;AACzF,QAAM,YAAY,KAAK,aAAa,WAAW,MAAM,KAAK,UAAU;AACpE,QAAM,UAAU,KAAK,QAAQ,QAAQ,QAAQ,EAAE;AAE/C,iBAAe,KAAK,MAAc,MAAmB,OAAkC;AACrF,UAAM,MAAM,GAAG,OAAO,GAAG,KAAK,WAAW,GAAG,IAAI,OAAO,IAAI,IAAI,EAAE;AACjE,UAAM,UAAU,IAAI,QAAQ,KAAK,OAAO;AACxC,YAAQ,IAAI,iBAAiB,UAAU,KAAK,EAAE;AAC9C,QAAI,KAAK,QAAQ,CAAC,QAAQ,IAAI,cAAc,GAAG;AAC7C,cAAQ,IAAI,gBAAgB,kBAAkB;AAAA,IAChD;AACA,WAAO,UAAU,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,EAC5C;AAEA,SAAO;AAAA,IACL,MAAM,MAAmB,MAAc,OAAoB,CAAC,GAAe;AACzE,UAAI,QAAQ,MAAM,KAAK,OAAO,KAAK;AACnC,UAAI,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAEtC,UAAI,IAAI,WAAW,KAAK;AACtB,gBAAQ,MAAM,KAAK,OAAO,IAAI;AAC9B,cAAM,MAAM,KAAK,MAAM,MAAM,KAAK;AAAA,MACpC;AAEA,UAAI,CAAC,IAAI,IAAI;AACX,YAAI,OAA6B,CAAC;AAClC,YAAI;AACF,iBAAQ,MAAM,IAAI,KAAK;AAAA,QACzB,QAAQ;AAAA,QAER;AACA,cAAM,IAAI,MAAM,kCAAkC,IAAI,MAAM,MAAM,KAAK,WAAW,EAAE,EAAE;AAAA,MACxF;AACA,aAAQ,MAAM,IAAI,KAAK;AAAA,IACzB;AAAA,EACF;AACF;;;AC2KO,SAAS,0BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,QAAM,IAAI,IAAI,gBAAgB,OAAO,SAAS,MAAM;AAGpD,QAAM,OAAO,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,QAAQ,KAAK;AACjD,MAAI,CAAC,KAAM,QAAO;AAIlB,QAAM,SAAS,EAAE,IAAI,QAAQ;AAC7B,QAAM,WAAW,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAC5E,QAAM,OAAO,EAAE,IAAI,MAAM;AACzB,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,EAAE,IAAI,QAAQ;AAAA,IACtB,UAAU,EAAE,IAAI,KAAK,KAAK,0BAA0B,QAAQ,OAAO,EAAE;AAAA,IACrE;AAAA,IACA,YAAY,SAAS,OAAO,QAAQ,OAAO,EAAE,IAAI;AAAA,IACjD,UAAU,OAAO,KAAK,QAAQ,OAAO,EAAE,IAAI;AAAA,EAC7C;AACF;AAGO,IAAM,eAAe,CAAC,WAC3B,IAAI,IAAI,OAAO,YAAY,OAAO,OAAO,EAAE;AAE7C,IAAM,0BAA0B;AAChC,IAAM,2BAA2B;AAKjC,SAAS,gBAAgB,YAAqC;AAC5D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAC7D,aAAO,IAAI,MAAM,yCAAyC,CAAC;AAC3D;AAAA,IACF;AACA,UAAM,YAAY;AAClB,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,WAAW,SAAS;AAC/C,aAAO,IAAI,MAAM,2CAA2C,CAAC;AAAA,IAC/D,GAAG,uBAAuB;AAC1B,UAAM,YAAY,CAAC,MAAoB;AACrC,UAAI,EAAE,WAAW,UAAW;AAC5B,YAAM,OAAO,EAAE;AACf,UAAI,MAAM,SAAS,oBAAoB,OAAO,KAAK,WAAW,SAAU;AACxE,mBAAa,KAAK;AAClB,aAAO,oBAAoB,WAAW,SAAS;AAC/C,cAAQ,KAAK,MAAM;AAAA,IACrB;AACA,WAAO,iBAAiB,WAAW,SAAS;AAC5C,WAAO,OAAO,YAAY,EAAE,MAAM,kBAAkB,GAAG,SAAS;AAAA,EAClE,CAAC;AACH;AAkCA,IAAM,aAA8D;AAAA,EAClE,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,MAAM;AACR;AAGO,SAAS,YACd,GAC+C;AAC/C,SAAO;AAAA,IACL,MAAM,EAAE;AAAA,IACR,OAAO,WAAW,EAAE,KAAK,KAAK;AAAA,IAC9B,QAAQ,EAAE;AAAA,IACV,OAAQ,EAAE,SAA2B;AAAA,IACrC,SAAS,EAAE;AAAA,IACX,aAAa,EAAE;AAAA,IACf,aAAa,EAAE;AAAA,IACf,WAAW,EAAE;AAAA,IACb,WAAW,EAAE,aAAa,EAAE;AAAA,IAC5B,MAAM,EAAE,QAAQ;AAAA,IAChB,MAAM,EAAE,QAAQ;AAAA,IAChB,gBAAiB,EAAE,cAAuC;AAAA,IAC1D,KAAM,EAAE,QAAwB;AAAA,IAChC,YAAY,EAAE;AAAA,IACd,WAAW,EAAE,aAAa;AAAA,IAC1B,QAAQ,EAAE,SACN,EAAE,QAAQ,EAAE,OAAO,QAAQ,OAAO,EAAE,OAAO,OAAO,QAAQ,EAAE,OAAO,UAAU,KAAK,IAClF;AAAA,EACN;AACF;AAQA,IAAM,eAAe,CAAC,eAAuC;AAC3D,SAAO,CAAC,QAAQ;AACd,QAAI,OAAO,WAAW,eAAe,OAAO,WAAW,QAAQ;AAG7D,aAAO,OAAO,YAAY,EAAE,MAAM,sBAAsB,IAAI,GAAG,UAAU;AACzE;AAAA,IACF;AACA,QAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,EAC1E;AACF;AAEA,IAAM,oBAAN,MAIE;AAAA,EASA,YAAY,QAA6B,QAAyB;AARlE,wBAAS;AACT,wBAAS;AACT,wBAAS;AACT,wBAAQ,gBAAuC;AAC/C,wBAAiB;AACjB,wBAAiB;AACjB,wBAAiB;AAGf,SAAK,OAAO,OAAO;AACnB,SAAK,UAAU,OAAO;AACtB,SAAK,aAAa,OAAO,cAAc;AACvC,SAAK,UAAU,OAAO;AACtB,SAAK,SAAS,UAAU,aAAa,aAAa,MAAM,CAAC;AAGzD,SAAK,eAAe,KAAK,cAAc,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;AAAA,EAC3E;AAAA,EAEA,MAAc,cAAc,QAA8C;AACxE,QAAI,OAAO,OAAQ,QAAO,OAAO;AACjC,WAAO,gBAAgB,aAAa,MAAM,CAAC;AAAA,EAC7C;AAAA,EAEA,MAAc,OAAO,QAAiC;AACpD,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,2BAA2B;AAAA,MAChE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,yBAAyB,IAAI,MAAM,GAAG;AACnE,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAc,KACZ,MACA,OAAoB,CAAC,GACmC;AACxD,UAAM,QAAQ,MAAM,KAAK;AACzB,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,GAAG,IAAI,IAAI;AAAA,MACnE,GAAG;AAAA,MACH,SAAS;AAAA,QACP,eAAe,UAAU,KAAK;AAAA,QAC9B,GAAI,KAAK,OAAO,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,QAC1D,GAAI,KAAK,WAAW,CAAC;AAAA,MACvB;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,OAAQ,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC/C,YAAM,IAAI,MAAM,KAAK,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACjE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAG7B,UAAM,OAAO,KAAK;AAClB,UAAM,OAAO,YAA0C,KAAK,SAAS,IAAyB;AAC9F,SAAK,eAAe,KAAK,QAAQ,UAAU;AAC3C,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,SAAiC;AACnC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,OAAO;AACL,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA,EAEA,KACE,SACA,MACY;AACZ,UAAM,WAAW,MAAM,cAAc;AACrC,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,IAAI,MAAM,KAAK,MAAM;AAC3B,YAAI,CAAC,QAAS,SAAQ,CAAC;AAAA,MACzB,SAAS,KAAK;AACZ,cAAM,UAAU,GAAG;AAAA,MACrB;AACA,UAAI,CAAC,QAAS,SAAQ,WAAW,MAAM,QAAQ;AAAA,IACjD;AACA,SAAK,KAAK;AACV,WAAO,MAAM;AACX,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAAA,IAC/B;AAAA,EACF;AAAA,EAEA,YAAY,OAAe;AACzB,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;AAAA,EAChF;AAAA,EAEA,WAAW,SAAwB;AACjC,WAAO,KAAK,KAAK,eAAe,EAAE,QAAQ,QAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;AAAA,EACvF;AAAA,EAEA,QAAQ;AACN,WAAO,KAAK,KAAK,UAAU,EAAE,QAAQ,OAAO,CAAC;AAAA,EAC/C;AAAA,EAEA,OAAO,MAAc,MAAgB;AACnC,WAAO,KAAK,KAAK,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MAC9C,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,MACA,MACA,SACY;AACZ,UAAM,SAAS,SAAS;AACxB,QAAI,QAAQ,SAAS;AAGnB,WAAK,KAAK,aAAa,MAAM,MAAM;AAAA,MAAC,CAAC;AACrC,aAAO,eAAe;AAAA,IACxB;AACA,QAAI;AACJ,QAAI;AACJ,QAAI;AACF,cAAQ,OAAO,SACX,QAAQ,KAAK;AAAA,QACX,KAAK;AAAA,QACL,IAAI,QAAe,CAAC,UAAU,WAAW;AACvC,oBAAU,MAAM,OAAO,OAAO,MAAM;AACpC,iBAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,QAC1D,CAAC;AAAA,MACH,CAAC,IACD,KAAK;AAAA,IACX,UAAE;AACA,UAAI,UAAU,QAAS,QAAO,oBAAoB,SAAS,OAAO;AAAA,IACpE;AACA,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,KAAK,QAAQ,OAAO,EAAE,CAAC,IAAI;AAAA,MACvF;AAAA,MACA,QAAQ;AAAA,MACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,MAChF,MAAM,KAAK,UAAU,QAAQ,CAAC,CAAC;AAAA,IACjC,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,UAAW,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM;AAC5C,gBAAQ,eAAe;AACvB,eAAO,CAAC;AAAA,MACV,CAAC;AACD,YAAM,IAAI,MAAM,QAAQ,WAAW,mBAAmB,IAAI,MAAM,EAAE;AAAA,IACpE;AACA,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,aAAa,KAAmB;AAC9B,SAAK,OAAO,GAAG;AAAA,EACjB;AAAA,EAEA,UAAU,YAA4B;AAGpC,WAAO,KAAK,aACR,GAAG,KAAK,UAAU,OAAO,UAAU,KACnC,GAAG,KAAK,OAAO,MAAM,UAAU;AAAA,EACrC;AACF;AAoBO,SAAS,kBAId,OAAyC,CAAC,GAA+C;AACzF,QAAM,UAAU,CAAC,WAAW,WAAW,WAAW,WAAW,SAAS;AACtE,QAAM,UAA2B;AAAA,IAC/B;AAAA,MACE,QAAQ;AAAA,MACR,MAAM,KAAK,MAAM;AAAA,MACjB,OAAO,QAAQ,CAAC;AAAA,MAChB,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,IACV;AAAA,IACA,IAAI,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO;AAAA,MACvC,QAAQ,QAAQ,IAAI,CAAC;AAAA,MACrB;AAAA,MACA,OAAO,SAAS,IAAI,KAAK,QAAQ,MAAM;AAAA,MACvC,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,QAAQ;AAAA,IACV,EAAE;AAAA,EACJ;AACA,MAAI,QAAuB,KAAK,SAAS;AACzC,MAAI,iBAAuC;AAC3C,MAAI,MAAmB;AACvB,MAAI,SAAS;AAEb,QAAM,OAAO,MAAqD;AAChE,UAAM,cAAc,QAAQ,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;AACpD,UAAM,YAAY,QAAQ,SAAS,KAAK,eAAe,QAAQ;AAC/D,UAAM,QACJ,WAAW,YAAY,MAAM,aAAa,CAAC,QAAQ,UAAU,YAAY,WAAW;AACtF,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,QAAQ,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AAAA,MACtC;AAAA,MACA,aAAa,QAAQ;AAAA,MACrB;AAAA,MACA,WAAW;AAAA,MACX,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,YAAY,MAAM,kBAAkB;AAAA,MACpC,WAAW;AAAA,MACX,QAAQ,EAAE,QAAQ,WAAW,OAAO,OAAO,QAAQ,KAAK,UAAU,KAAK;AAAA,IACzE;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ,KAAK,UAAU;AAAA,IACvB,MAAM,OAAO;AACX,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO,KAAK;AAAA,IACd;AAAA,IACA,KAAK,SAAS,UAAU;AACtB,YAAM,WAAW,UAAU,cAAc;AACzC,YAAM,QAAQ,YAAY,MAAM,QAAQ,KAAK,CAAC,GAAG,QAAQ;AACzD,cAAQ,KAAK,CAAC;AACd,aAAO,MAAM,cAAc,KAAK;AAAA,IAClC;AAAA,IACA,MAAM,YAAY,GAAW;AAC3B,cAAQ;AACR,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,WAAW,SAAwB;AACvC,uBAAiB;AACjB,YAAM,KAAK,QAAQ,KAAK,CAAC,MAAM,EAAE,IAAI;AACrC,UAAI,GAAI,IAAG,SAAS;AACpB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,QAAQ;AACZ,eAAS;AACT,YAAM,KAAK,aACP,KAAK,WAAW,CAAC,cAAc,CAAC,IAC/B,EAAE,MAAM,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,SAAS;AACb,aAAO,KAAK;AAAA,IACd;AAAA,IACA,MAAM,UAAuB;AAC3B,aAAO,CAAC;AAAA,IACV;AAAA,IACA,aAAa,KAAa;AACxB,UAAI,OAAO,WAAW,YAAa,QAAO,KAAK,KAAK,UAAU,UAAU;AAAA,IAC1E;AAAA,IACA,UAAU,YAAoB;AAC5B,aAAO,4BAA4B,UAAU;AAAA,IAC/C;AAAA,EACF;AACF;AAaO,SAAS,cAIuC;AACrD,QAAM,SAAS,wBAAwB;AACvC,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,IAAI,kBAA+C,MAAM;AAClE;;;AC7nBA,IAAM,WAAW;AACjB,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AAOxB,SAAS,iBAAyB;AAChC,QAAM,IAAI,WAAW;AACrB,MAAI,KAAK,OAAO,EAAE,eAAe,WAAY,QAAO,EAAE,WAAW;AACjE,QAAM,IAAI,IAAI,WAAW,EAAE;AAC3B,MAAI,KAAK,OAAO,EAAE,oBAAoB,WAAY,GAAE,gBAAgB,CAAC;AAAA,MAChE,UAAS,IAAI,GAAG,IAAI,IAAI,IAAK,GAAE,CAAC,IAAI,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACvE,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,IAAE,CAAC,IAAK,EAAE,CAAC,IAAI,KAAQ;AACvB,QAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAC9D,SAAO,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;AACnI;AAgBA,IAAI,YAAuD;AAE3D,eAAe,WAAW,QAAoC;AAC5D,MAAI,aAAa,UAAU,WAAW,OAAQ,QAAO,UAAU;AAE/D,QAAM,UAAU,IAAI,YAAY,EAAE,OAAO,MAAM;AAC/C,QAAM,MAAM,IAAI,YAAY,QAAQ,UAAU;AAC9C,MAAI,WAAW,GAAG,EAAE,IAAI,OAAO;AAE/B,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,GAAG,OAAO;AAAA,IAC9F;AAAA,EACF,CAAC;AAED,cAAY,EAAE,QAAQ,IAAI;AAC1B,SAAO;AACT;AAEA,eAAe,UACb,QACA,MACA,UACA,OACA,WACiB;AACjB,QAAM,MAAM,MAAM,WAAW,MAAM;AACnC,QAAM,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,EAAE;AACjF,QAAM,MAAM,IAAI,YAAY,KAAK,UAAU;AAC3C,MAAI,WAAW,GAAG,EAAE,IAAI,IAAI;AAC5B,QAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,GAAG;AACrD,SAAO,MAAM,KAAK,IAAI,WAAW,GAAG,CAAC,EAClC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAC1C,KAAK,EAAE;AACZ;AAOO,IAAM,sBAAN,MAAqD;AAAA,EA2B1D,YAAY,MAAmB;AA1B/B,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ;AACR,wBAAQ,oBAAmB,oBAAI,IAG7B;AACF,wBAAQ,cAA0D;AAClE,wBAAQ,mBAA8D,CAAC;AACvE,wBAAQ,iBAAoC;AAC5C,wBAAQ,0BAAqE,CAAC;AAC9E,wBAAQ,YAAW;AACnB,wBAAQ,mBAAqD,CAAC;AAC9D,wBAAQ,4BAA+E,CAAC;AACxF,wBAAQ,mBAAkB,oBAAI,IAAiD;AAC/E,wBAAQ;AACR,wBAAQ;AAGR;AAAA,wBAAS;AAGP,SAAK,YAAY,KAAK;AACtB,SAAK,SAAS,KAAK;AACnB,SAAK,cAAc,KAAK;AACxB,SAAK,QAAQ,KAAK;AAClB,SAAK,aAAa,KAAK,aAAa;AACpC,SAAK,gBAAgB,KAAK;AAC1B,SAAK,kBAAkB,KAAK,kBAAkB;AAC9C,SAAK,kBAAkB,KAAK;AAC5B,SAAK,YAAY,KAAK,YAAY,CAAC;AAGnC,QAAI,KAAK,YAAY;AACnB,WAAK,UAAU,oBAAoB;AAAA,QACjC,SAAS,KAAK;AAAA,QACd,QAAQ,CAAC,iBAA2B,KAAK,OAAO,YAAY;AAAA,MAC9D,CAAC;AAAA,IACH;AAEA,SAAK,kBAAkB,KAAK,cAAc,KAAK,IAAI;AACnD,WAAO,iBAAiB,WAAW,KAAK,eAAe;AAAA,EACzD;AAAA;AAAA,EAGA,IAAI,WAAmB;AACrB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,QAA4B;AAC9B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,IAAI,OAA2B;AAC7B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA,EAIA,IAAI,YAA8D;AAChE,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,IAAqD;AACjE,SAAK,gBAAgB,KAAK,EAAE;AAC5B,WAAO,MAAM;AACX,YAAM,MAAM,KAAK,gBAAgB,QAAQ,EAAE;AAC3C,UAAI,QAAQ,GAAI,MAAK,gBAAgB,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA;AAAA,EAGA,gBAAsB;AACpB,SAAK,KAAK,kBAAkB,CAAC,CAAC;AAAA,EAChC;AAAA;AAAA,EAGA,kBAAwB;AACtB,SAAK,KAAK,oBAAoB,CAAC,CAAC;AAAA,EAClC;AAAA;AAAA,EAGA,kBAAsC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,qBAAqB,UAA2D;AAC9E,SAAK,uBAAuB,KAAK,QAAQ;AACzC,WAAO,MAAM;AACX,WAAK,yBAAyB,KAAK,uBAAuB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC1F;AAAA,EACF;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,cAAc,UAAkD;AAC9D,SAAK,gBAAgB,KAAK,QAAQ;AAClC,WAAO,MAAM;AACX,WAAK,kBAAkB,KAAK,gBAAgB,OAAO,CAAC,OAAO,OAAO,QAAQ;AAAA,IAC5E;AAAA,EACF;AAAA;AAAA,EAGA,oBAA0B;AACxB,SAAK,KAAK,sBAAsB,CAAC,CAAC;AAAA,EACpC;AAAA;AAAA,EAGA,KAAK,OAAe,SAAwB;AAC1C,SAAK,KAAK,cAAc,EAAE,OAAO,QAAQ,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGA,UAAU,OAAe,IAA8C;AACrE,UAAM,OAAO,KAAK,gBAAgB,IAAI,KAAK,KAAK,CAAC;AACjD,SAAK,KAAK,EAAE;AACZ,SAAK,gBAAgB,IAAI,OAAO,IAAI;AACpC,WAAO,MAAM;AACX,YAAM,UAAU,KAAK,gBAAgB,IAAI,KAAK;AAC9C,UAAI,CAAC,QAAS;AACd,YAAM,MAAM,QAAQ,QAAQ,EAAE;AAC9B,UAAI,QAAQ,GAAI,SAAQ,OAAO,KAAK,CAAC;AAAA,IACvC;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,OAAkC,SAAiB,MAAsB;AAC3E,SAAK,KAAK,OAAO,EAAE,OAAO,SAAS,MAAM,QAAQ,KAAK,CAAC;AAAA,EACzD;AAAA;AAAA,EAGA,MAAM,eAAe,OAAe,QAAwC;AAC1E,WAAO,IAAI,QAAuB,CAAC,SAAS,WAAW;AACrD,YAAM,UAAU,WAAW,MAAM;AAC/B,aAAK,iBAAiB,OAAO,KAAK;AAClC,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,MAC/C,GAAG,GAAK;AAER,WAAK,iBAAiB,IAAI,OAAO;AAAA,QAC/B,SAAS,CAAC,MAAqB;AAC7B,uBAAa,OAAO;AACpB,kBAAQ,CAAC;AAAA,QACX;AAAA,QACA,QAAQ,CAAC,MAAa;AACpB,uBAAa,OAAO;AACpB,iBAAO,CAAC;AAAA,QACV;AAAA,MACF,CAAC;AAED,WAAK,KAAK,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAAA,IAChD,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAO,cAAyC;AACpD,QAAI,CAAC,gBAAgB,KAAK,cAAc,KAAK,IAAI,IAAI,KAAK,WAAW,YAAY,KAAO;AACtF,aAAO,KAAK,WAAW;AAAA,IACzB;AACA,UAAM,IAAI,MAAM,mEAA8D;AAAA,EAChF;AAAA;AAAA,EAGA,IAAI,UAAsB;AACxB,WAAO;AAAA,MACL,KAAK,CAAC,QAAgB,KAAK,eAAe,OAAO,GAAG;AAAA,MACpD,KAAK,CAAC,KAAa,UAAmB,KAAK,eAAe,OAAO,KAAK,KAAK,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,MAC1F,QAAQ,CAAC,QAAgB,KAAK,eAAe,UAAU,GAAG,EAAE,KAAK,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3E;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,KAAY;AACd,UAAM,MAAM,CAAC,MAAc,QAAgB,SAAmB,KAAK,iBAAiB,MAAM,QAAQ,IAAI;AACtG,WAAO;AAAA,MACL,WAAW,MAA4B;AACrC,cAAM,OAAO,kBAAkB,mBAAmB,IAAI,CAAC;AACvD,eAAO;AAAA,UACL,QAAQ,CAAC,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,UACxC,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,KAAK;AAAA,UAC3D,MAAM,CAAC,SAAyB;AAC9B,kBAAM,KAAK,IAAI,gBAAgB;AAC/B,gBAAI,MAAM,SAAS,KAAM,IAAG,IAAI,SAAS,OAAO,KAAK,KAAK,CAAC;AAC3D,gBAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,MAAM;AAC9C,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,KAAK,IAAI;AACxC,gBAAI,MAAM,KAAM,IAAG,IAAI,QAAQ,MAAM;AACrC,kBAAM,SAAS,GAAG,SAAS,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK;AACrD,mBAAO,IAAI,GAAG,IAAI,GAAG,MAAM,IAAI,KAAK;AAAA,UACtC;AAAA,UACA,QAAQ,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,SAAS,KAAK;AAAA,UAC9E,QAAQ,CAAC,OAAQ,IAAI,GAAG,IAAI,IAAI,mBAAmB,EAAE,CAAC,IAAI,QAAQ,EAAuB,KAAK,MAAM;AAAA,UAAC,CAAC;AAAA,QACxG;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,KAAY;AACd,UAAM,WAAW,CAAC,SAChB,KAAK,iBAAiB,2BAA2B,QAAQ,IAAI;AAC/D,UAAM,gBAAgB,CAAC,SAA2C,KAAK,gBAAgB,IAAI;AAC3F,WAAO;AAAA,MACL;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,OAAO,OAAO,MAAoD;AAChE,cAAM,WAAW,MAAM,cAAc,IAAI;AACzC,cAAM,SAAS,SAAS,MAAM,UAAU;AACxC,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,cAAM,UAAU,IAAI,YAAY;AAChC,YAAI,SAAS;AACb,YAAI;AACF,qBAAS;AACP,kBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,gBAAI,KAAM;AACV,sBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,kBAAM,SAAS,OAAO,MAAM,MAAM;AAClC,qBAAS,OAAO,IAAI,KAAK;AACzB,uBAAW,SAAS,QAAQ;AAC1B,oBAAM,WAAW,MAAM,MAAM,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,CAAC;AACpE,kBAAI,CAAC,SAAU;AACf,oBAAM,UAAU,SAAS,MAAM,CAAC,EAAE,KAAK;AACvC,kBAAI,CAAC,WAAW,YAAY,SAAU;AACtC,kBAAI;AACJ,kBAAI;AACF,yBAAS,KAAK,MAAM,OAAO;AAAA,cAC7B,QAAQ;AACN;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,UAAE;AAGA,gBAAM,OAAO,OAAO,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,WAAwB;AAC1B,WAAO;AAAA,MACL,KAAK,OAAO,EAAE,GAAG,KAAK,UAAU;AAAA,MAChC,KAAK,CAAC,gBAAyC;AAC7C,aAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,YAAY;AACrD,aAAK,KAAK,kBAAkB,EAAE,UAAU,KAAK,UAAU,CAAC;AAAA,MAC1D;AAAA,MACA,gBAAgB,CAAC,OAAoD;AACnE,aAAK,yBAAyB,KAAK,EAAE;AACrC,eAAO,MAAM;AACX,eAAK,2BAA2B,KAAK,yBAAyB,OAAO,CAAC,OAAO,OAAO,EAAE;AAAA,QACxF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,OAAO,SAAiB,MAA6D;AACzF,SAAK,KAAK,gBAAgB;AAAA,MACxB;AAAA,MACA,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,gBAAgB,MAAkC;AAC9D,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,WAAW,MAAM,MAAM,GAAG,KAAK,aAAa,yBAAyB;AAAA,MACzE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,IAAI;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,0BAA0B;AAAA,IACvF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,iBAAiB,MAAc,QAAgB,MAAkC;AAC7F,QAAI,CAAC,KAAK,eAAe;AACvB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,MAAM,GAAG,KAAK,aAAa,GAAG,IAAI;AACxC,UAAM,UAAkC,EAAE,gBAAgB,mBAAmB;AAC7E,QAAI,KAAK,iBAAiB;AACxB,cAAQ,eAAe,IAAI,UAAU,KAAK,eAAe;AAAA,IAC3D;AACA,UAAM,OAAoB,EAAE,QAAQ,QAAQ;AAC5C,QAAI,SAAS,UAAa,WAAW,SAAS,WAAW,UAAU;AACjE,WAAK,OAAO,KAAK,UAAU,IAAI;AAAA,IACjC;AACA,UAAM,WAAW,MAAM,MAAM,KAAK,IAAI;AACtC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,YAAM,IAAI,MAAO,IAA+B,WAAW,WAAW,MAAM,IAAI,IAAI,SAAS;AAAA,IAC/F;AACA,QAAI,WAAW,SAAS,WAAW,UAAU,WAAW,SAAS;AAC/D,YAAM,SAAS,MAAM,SAAS,KAAK;AACnC,aAAQ,OAAmC;AAAA,IAC7C;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,QAAgB,KAAa,OAAmC;AACrF,WAAO,KAAK,iBAAiB,uBAAuB,mBAAmB,GAAG,CAAC,IAAI,QAAQ,KAAK;AAAA,EAC9F;AAAA,EAEQ,cAAc,OAA2B;AAC/C,UAAM,MAAM,MAAM;AAClB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAElE,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,gBAAgB;AACnB,cAAM,UAAU,IAAI;AACpB,aAAK,SAAS,QAAQ;AACtB,mBAAW,YAAY,KAAK,iBAAiB;AAC3C,mBAAS,QAAQ,KAAK;AAAA,QACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,mBAAmB;AACtB,cAAM,UAAU,IAAI;AACpB,cAAM,YAAY,KAAK,gBAAgB,IAAI,QAAQ,KAAK;AACxD,YAAI,WAAW;AACb,gBAAM,MAAmB;AAAA,YACvB,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,WAAW,QAAQ;AAAA,UACrB;AACA,qBAAW,YAAY,WAAW;AAChC,qBAAS,GAAG;AAAA,UACd;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK,kBAAkB;AACrB,cAAM,UAAU,IAAI;AACpB,cAAM,UAAU,KAAK,iBAAiB,IAAI,QAAQ,KAAK;AACvD,YAAI,SAAS;AACX,eAAK,iBAAiB,OAAO,QAAQ,KAAK;AAC1C,kBAAQ,QAAQ;AAAA,YACd,OAAO,QAAQ;AAAA,YACf,SAAS,QAAQ;AAAA,YACjB,YAAY,QAAQ;AAAA,YACpB,WAAW,QAAQ;AAAA,UACrB,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,cAAM,UAAU,IAAI;AACpB,aAAK,aAAa;AAAA,UAChB,OAAO,QAAQ;AAAA,UACf,WAAW,KAAK,IAAI,IAAI,QAAQ,YAAY;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,IAAI,SAAS;AAC9B,YAAI,UAAU;AACZ,eAAK,gBAAgB;AACrB,eAAK,uBAAuB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;AAAA,QAC1D;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,OAAO,CAAC,CAAC,IAAI,SAAS;AAC5B,YAAI,SAAS,KAAK,UAAU;AAC1B,eAAK,WAAW;AAChB,eAAK,gBAAgB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;AAAA,QAC/C;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,IAAI,IAAI;AACd,aAAK,YAAY,EAAE,GAAG,EAAE,SAAS;AACjC,mBAAW,MAAM,KAAK,0BAA0B;AAC9C,cAAI;AACF,eAAG,EAAE,GAAG,KAAK,UAAU,CAAC;AAAA,UAC1B,QAAQ;AAAA,UAER;AAAA,QACF;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAEH;AAAA,IACJ;AAAA,EACF;AAAA,EAEQ,KAAK,MAAc,SAAwC;AAEjE,SAAK,aAAa,MAAM,OAAO,EAAE,KAAK,CAAC,QAAQ;AAC7C,aAAO,OAAO,YAAY,KAAK,GAAG;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,aACZ,MACA,SACwB;AACxB,UAAM,QAAQ,eAAe;AAC7B,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AACJ,QAAI,KAAK,aAAa;AACpB,cAAQ,MAAM,UAAU,KAAK,aAAa,MAAM,KAAK,WAAW,OAAO,SAAS;AAAA,IAClF,OAAO;AACL,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL,UAAU;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,UAAgB;AACd,WAAO,oBAAoB,WAAW,KAAK,eAAe;AAC1D,SAAK,gBAAgB,SAAS;AAC9B,SAAK,gBAAgB,MAAM;AAC3B,eAAW,CAAC,EAAE,OAAO,KAAK,KAAK,kBAAkB;AAC/C,cAAQ,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAAA,IAC9C;AACA,SAAK,iBAAiB,MAAM;AAAA,EAC9B;AACF;AAeO,IAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO1B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAiC;AAC/B,WAAO,IAAI,QAAyB,CAAC,SAAS,WAAW;AACvD,YAAM,UAAU,WAAW,MAAM;AAC/B,eAAO,oBAAoB,WAAW,OAAO;AAC7C,eAAO,IAAI,MAAM,2EAAsE,CAAC;AAAA,MAC1F,GAAG,eAAe;AAElB,YAAM,UAAU,CAAC,UAAwB;AACvC,cAAM,MAAM,MAAM;AAClB,YAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,IAAI,aAAa,SAAU;AAClE,YAAI,IAAI,SAAS,OAAQ;AAEzB,qBAAa,OAAO;AACpB,eAAO,oBAAoB,WAAW,OAAO;AAE7C,cAAM,UAAU,IAAI;AACpB,cAAM,MAAM,IAAI,oBAAoB,OAAO;AAC3C,gBAAQ,GAAG;AAAA,MACb;AAEA,aAAO,iBAAiB,WAAW,OAAO;AAG1C,YAAM,WAA0B;AAAA,QAC9B,UAAU;AAAA,QACV,MAAM;AAAA,QACN,UAAU;AAAA;AAAA,QACV,OAAO,eAAe;AAAA,QACtB,WAAW,KAAK,IAAI;AAAA,QACpB,OAAO;AAAA;AAAA,QACP,SAAS,EAAE,iBAAiB,IAAI;AAAA,MAClC;AAEA,aAAO,OAAO,YAAY,UAAU,GAAG;AAAA,IACzC,CAAC;AAAA,EACH;AACF;;;AC5mBA,IAAM,qBAAqB;AAC3B,IAAM,gBAA6B;AAEnC,SAAS,cAAc,OAAsC;AAC3D,SAAO,UAAU,WAAW,UAAU,UAAU,UAAU;AAC5D;AAMO,SAAS,kBAA+B;AAC7C,MAAI,OAAO,WAAW,YAAa,QAAO;AAC1C,MAAI;AACF,UAAM,QAAQ,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,OAAO;AACrE,WAAO,cAAc,KAAK,IAAI,QAAQ;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAWO,SAAS,cACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,mBAAoB;AACzC,QAAI,CAAC,cAAc,QAAQ,KAAK,EAAG;AACnC,OAAG,QAAQ,KAAK;AAAA,EAClB;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;AAOO,SAAS,iBAAiB,OAA0B;AACzD,MAAI,OAAO,aAAa,YAAa;AACrC,MAAI,UAAU,SAAS;AACrB,WAAO,SAAS,gBAAgB,QAAQ;AAAA,EAC1C,OAAO;AACL,aAAS,gBAAgB,QAAQ,QAAQ;AAAA,EAC3C;AACF;AAMO,SAAS,kBAA8B;AAC5C,mBAAiB,gBAAgB,CAAC;AAClC,SAAO,cAAc,gBAAgB;AACvC;;;ACzEO,IAAM,sBAAsB;AAoB5B,SAAS,mBACd,IACA,MACY;AACZ,MAAI,OAAO,WAAW,YAAa,QAAO,MAAM;AAAA,EAAC;AACjD,QAAM,WAAW,CAAC,UAA8B;AAC9C,QAAI,MAAM,WAAW,OAAO,OAAQ;AACpC,QAAI,MAAM,iBAAiB,MAAM,WAAW,KAAK,cAAe;AAChE,UAAM,OAAgB,MAAM;AAC5B,QAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,UAAM,UAAU;AAChB,QAAI,QAAQ,SAAS,oBAAqB;AAC1C,QAAI,OAAO,QAAQ,eAAe,YAAY,CAAC,QAAQ,WAAY;AACnE,OAAG;AAAA,MACD,YAAY,QAAQ;AAAA,MACpB,MAAM,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAAA,MACxD,SAAS,QAAQ;AAAA,IACnB,CAAC;AAAA,EACH;AACA,SAAO,iBAAiB,WAAW,QAAQ;AAC3C,SAAO,MAAM,OAAO,oBAAoB,WAAW,QAAQ;AAC7D;",
   "names": []
 }

package/dist/session.d.ts

@@ -30,6 +30,28 @@ export interface SessionFlowView {
         linkSlug?: string;
     }>;
 }
+/** One verified (or user-entered) fact about the viewer, from a unishell
+ *  shell. Read-only context: never use it to authorize anything. */
+export interface SessionClaim {
+    type: 'name' | 'email' | 'phone';
+    value: string;
+    /** 'user-entered', 'otp', or a surface id such as 'discord'. */
+    source: string;
+    /** Present only when the value was proven. */
+    verifiedAt?: string;
+}
+export interface SessionClaimSet {
+    name?: SessionClaim;
+    email?: SessionClaim;
+    phone?: SessionClaim;
+}
+/** Who this state was read for. `claims` is set only for a shell guest
+ *  reading their own state; it is never another participant's. */
+export interface SessionViewer {
+    userId: string;
+    guest: boolean;
+    claims: SessionClaimSet | null;
+}
 /** The rails' phase model: `setup` until the host commits framing, `open`
  *  while contributions are being collected, `sealed` once quorum is met and
  *  the session awaits close, `resolved` after synthesis produced the
@@ -59,6 +81,9 @@ export interface SessionStateView<TSetup = Record<string, unknown>, TContributio
     /** Widget-specific state-view extension (e.g. the decision sprint's stage
      *  + ballot), passed through verbatim when the server provides one. */
     extension: Record<string, unknown> | null;
+    /** The reader of this state; null when the server sent none (servers
+     *  before the shell endpoints). Optional so hand-built views keep compiling. */
+    viewer?: SessionViewer | null;
 }
 export interface SessionPollOptions {
     /** Poll cadence in ms. Default 4000 (matches the historical widgets). */
@@ -73,6 +98,10 @@ export interface SessionClient<TSetup = Record<string, unknown>, TContribution =
      *  QR) should prefer it and fall back to `webBase` when absent. Optional so
      *  hand-rolled SessionClient implementations keep compiling. */
     readonly mobileBase?: string | null;
+    /** The viewer's own shell claims from the most recent state read; null
+     *  until a state arrives or when there are none. Optional so hand-rolled
+     *  SessionClient implementations keep compiling. */
+    readonly claims?: SessionClaimSet | null;
     /** Enter the session: the first identified enter creates the group. */
     join(): Promise<SessionStateView<TSetup, TContribution, TDoc>>;
     /** Fetch the current blind-aware state. */
@@ -93,8 +122,11 @@ export interface SessionClient<TSetup = Record<string, unknown>, TContribution =
      *  /advance). Body is JSON-encoded; the response's state is returned. */
     action(verb: string, body?: unknown): Promise<SessionStateView<TSetup, TContribution, TDoc>>;
     /** Widget-specific verb with a NON-state response (e.g. /assist). Returns
-     *  the response's raw `data` value. */
-    request<T = unknown>(verb: string, body?: unknown): Promise<T>;
+     *  the response's raw `data` value. Optional cancellation stops this request,
+     *  including its wait for the shared ticket; it does not cancel ticket redemption. */
+    request<T = unknown>(verb: string, body?: unknown, options?: {
+        signal?: AbortSignal;
+    }): Promise<T>;
     /** Open a Flowstate URL outside the widget (parent navigation preferred —
      *  the /w page owns the session cookie). */
     openExternal(url: string): void;
@@ -126,12 +158,46 @@ export interface SessionLaunchParams {
 export declare function readSessionLaunchParams(): SessionLaunchParams | null;
 /** The origin the handshake is addressed to: the framing page. */
 export declare const hostOriginOf: (params: Pick<SessionLaunchParams, "webBase" | "hostBase">) => string;
+interface WireMember {
+    userId: string;
+    name: string;
+    color: string;
+    sealed: boolean;
+    isMe: boolean;
+    isHost: boolean;
+}
+interface WireSessionState {
+    tripId: string;
+    phase: 'setup' | 'wishlist' | 'sealed' | 'plan';
+    status: string;
+    setup: Record<string, unknown> | null;
+    members: WireMember[];
+    sealedCount: number;
+    memberCount: number;
+    allSealed: boolean;
+    quorumMet?: boolean;
+    gate?: SessionGateView | null;
+    flow?: SessionFlowView | null;
+    myWishlist: unknown;
+    plan: Record<string, unknown> | null;
+    artifactId: string | null;
+    extension?: Record<string, unknown> | null;
+    viewer?: {
+        userId: string;
+        guest: boolean;
+        claims?: SessionClaimSet;
+    };
+}
+/** Exported for tests; not part of the package entry point. */
+export declare function toStateView<TSetup, TContribution, TDoc>(s: WireSessionState): SessionStateView<TSetup, TContribution, TDoc>;
 export interface MockSessionOptions<TSetup, TDoc> {
     /** Display name for the single mock member. Default "You". */
     me?: string;
     /** Extra fake members (all unsealed initially). */
     others?: string[];
     setup?: TSetup | null;
+    /** Claims the mock viewer carries (shell-guest dev). Default null. */
+    claims?: SessionClaimSet | null;
     /** Called on close() to synthesize the mock doc. */
     synthesize?: (contributions: unknown[]) => TDoc;
 }
@@ -146,4 +212,5 @@ export declare function createMockSession<TSetup = Record<string, unknown>, TCon
  * back to {@link createMockSession} or their own local state.
  */
 export declare function initSession<TSetup = Record<string, unknown>, TContribution = unknown, TDoc = Record<string, unknown>>(): SessionClient<TSetup, TContribution, TDoc> | null;
+export {};
 //# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;yCACyC;AACzC,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;QACtD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;;;iFAGiF;AACjF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpE,MAAM,WAAW,gBAAgB,CAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB;oDACgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,iEAAiE;IACjE,cAAc,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,mEAAmE;IACnE,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAMD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa,CAC5B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;oEAGgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAEpC,uEAAuE;IACvE,IAAI,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,2CAA2C;IAC3C,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE;8EAC0E;IAC1E,IAAI,CACF,OAAO,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EACnE,IAAI,CAAC,EAAE,kBAAkB,GAAG;QAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,GAC/D,MAAM,IAAI,CAAC;IACd,6CAA6C;IAC7C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF;uEACmE;IACnE,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3F,yEAAyE;IACzE,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE;6EACyE;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7F;2CACuC;IACvC,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D;gDAC4C;IAC5C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sDAAsD;IACtD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;CACvC;AAMD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb;;kCAE8B;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;qBAGiB;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;+DAM2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,uBAAuB,IAAI,mBAAmB,GAAG,IAAI,CAqBpE;AAED,kEAAkE;AAClE,eAAO,MAAM,YAAY,GAAI,QAAQ,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,UAAU,CAAC,KAAG,MACtC,CAAC;AAyPpD,MAAM,WAAW,kBAAkB,CAAC,MAAM,EAAE,IAAI;IAC9C,8DAA8D;IAC9D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,oDAAoD;IACpD,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACjD;AAED;gDACgD;AAChD,wBAAgB,iBAAiB,CAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,GAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAM,GAAG,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAuFzF;AAMD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,IAAI,CAIrD"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;yCACyC;AACzC,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;QACtD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;oEACoE;AACpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;kEACkE;AAClE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAED;;;iFAGiF;AACjF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpE,MAAM,WAAW,gBAAgB,CAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;IACnB;oDACgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,IAAI,EAAE,eAAe,GAAG,IAAI,CAAC;IAC7B,iEAAiE;IACjE,cAAc,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,mEAAmE;IACnE,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;2EACuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C;oFACgF;IAChF,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;CAC/B;AAMD,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa,CAC5B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAE9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;oEAGgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;;wDAEoD;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAEzC,uEAAuE;IACvE,IAAI,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/D,2CAA2C;IAC3C,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE;8EAC0E;IAC1E,IAAI,CACF,OAAO,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EACnE,IAAI,CAAC,EAAE,kBAAkB,GAAG;QAAE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,GAC/D,MAAM,IAAI,CAAC;IACd,6CAA6C;IAC7C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF;uEACmE;IACnE,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3F,yEAAyE;IACzE,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE;6EACyE;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7F;;0FAEsF;IACtF,OAAO,CAAC,CAAC,GAAG,OAAO,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACjC,OAAO,CAAC,CAAC,CAAC,CAAC;IACd;gDAC4C;IAC5C,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,sDAAsD;IACtD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;CACvC;AAMD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb;;kCAE8B;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;qBAGiB;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;+DAM2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,uBAAuB,IAAI,mBAAmB,GAAG,IAAI,CAqBpE;AAED,kEAAkE;AAClE,eAAO,MAAM,YAAY,GAAI,QAAQ,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,UAAU,CAAC,KAAG,MACtC,CAAC;AAoCpD,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,UAAU,gBAAgB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CACvE;AASD,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EACrD,CAAC,EAAE,gBAAgB,GAClB,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAqB/C;AAyMD,MAAM,WAAW,kBAAkB,CAAC,MAAM,EAAE,IAAI;IAC9C,8DAA8D;IAC9D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,sEAAsE;IACtE,MAAM,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,oDAAoD;IACpD,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACjD;AAED;gDACgD;AAChD,wBAAgB,iBAAiB,CAC/B,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,GAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAM,GAAG,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAgGzF;AAMD;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,GAAG,OAAO,EACvB,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,IAAI,CAIrD"}

package/dist/session.request.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session.request.test.d.ts.map

package/dist/session.request.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.request.test.d.ts","sourceRoot":"","sources":["../src/session.request.test.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@goflowstate/widget-sdk",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "SDK for building Flowstate Canvas widgets",
   "type": "module",
   "main": "./dist/canvas-widget-sdk.js",