@hosty-sdk/app 0.32.0 → 0.34.2

package/README.md

@@ -81,6 +81,20 @@ rebuild, without editing this wiring. New mandatory Core capabilities can requir
 `node packages/app-sdk/scripts/check-overlay-upgrade.mjs` checks the published export layout using
 identical consumer source before and after a dependency-only presentation revision (run SDK build first).
 
+Standard SDK presentation uses the Hosty ink/mist palette, lime interaction and focus treatment,
+light/dark cards and notices, and reduced-motion-aware progress. The package carries its own local
+IBM Plex Sans and JetBrains Mono subsets and OFL notices; a browser bundler resolves their static
+asset URLs without a CDN or an app-side CSS/font import. Server markup and initial hydration use
+identical base styles; mounted chrome shares one document-owned font sheet using browser-resolved
+URLs. StrictMode and access-portal replay retain that sheet, and the last owner releases it.
+The private family names apply only to SDK-owned controls. The app document keeps its own typography, palette and focus styles; the four
+`--hosty-panel-*` overrides remain supported. This is scoped styling of the existing light-DOM
+renderers, not a Shadow DOM boundary or a change to the composition/authentication contracts.
+
+The installation dialog collects only the source, opens Core confirmation and reports Core's
+actual outcome. Preparation and execution have indeterminate progress; installed does not imply
+configured, running or healthy. Closing the dialog does not cancel a Core-confirmed operation.
+
 Legacy `AppIdentityBridge` exports, `renderState` and `onSession` remain compatible for consumers
 that have not migrated. See [Hosty Overlay](../../docs/features/hosty-overlay/feature.md) for behavior.
 

package/dist/activity-react.js

@@ -2,6 +2,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useState } from "react";
 import { AuthNotice, AuthNoticeButton } from "./auth-notice.js";
+import { exchangeAppCode } from "./app-code-exchange.js";
 import { APP_SESSION_ENDED, APP_ACTIVITY_RENEWED, appActivityNeedsRenewal, configureAppActivity, updateAppActivity, renewAppActivity, cancelActivityRenewal } from "./browser-auth.js";
 import { resolveLaunchMode, detectLaunchMode, normalizeLaunchMode, LAUNCH_MODE_ATTRIBUTE, LAUNCH_MODE_PARAM, LAUNCH_MODE_STORAGE_KEY } from "./index.js";
 import { acceptAppAuthProtocol, refreshAppAuthProtocol } from "./browser-auth.js";
@@ -33,13 +34,12 @@ export function useAppActivity(options) {
             const mode = normalizeLaunchMode(document.documentElement.getAttribute(LAUNCH_MODE_ATTRIBUTE)) ?? resolveLaunchMode({
                 param: new URL(window.location.href).searchParams.get(LAUNCH_MODE_PARAM), stored, heuristic: detectLaunchMode(window),
             }).mode;
-            cleanup = configureAppActivity({ openUrl, appAuthProtocol: protocol, probePath, native: native ?? mode === "native", activeUntil, activityRequired, validateSession, exchangeCode: async (proof) => {
-                    const response = await fetch(appCodePath, { method: "POST", credentials: "same-origin", redirect: "error",
-                        headers: { "Content-Type": "application/json" }, body: JSON.stringify(proof) });
-                    const body = await response.json();
-                    if (!response.ok)
-                        throw new Error(body.message ?? "Could not renew app activity.");
-                    return body;
+            cleanup = configureAppActivity({ openUrl, appAuthProtocol: protocol, probePath, native: native ?? mode === "native", activeUntil, activityRequired, validateSession, exchangeCode: async (proof, signal) => {
+                    const { ok, body } = await exchangeAppCode(appCodePath, proof, signal);
+                    if (!ok)
+                        throw new Error(typeof body?.message === "string" ? body.message : "Could not renew app activity.");
+                    return { ...(typeof body?.accessToken === "string" ? { accessToken: body.accessToken } : {}),
+                        ...(typeof body?.activeUntil === "string" || body?.activeUntil === null ? { activeUntil: body.activeUntil } : {}) };
                 } });
         };
         if (appAuthProtocol !== undefined && !(appAuthProtocol === 1 && acceptAppAuthProtocol(new URL(openUrl).origin, 1) === null))
@@ -69,5 +69,5 @@ export function AppActivityBridge(options) {
     const { needed, pending, error, renew, cancel } = useAppActivity(options);
     if (!needed)
         return null;
-    return _jsxs(AuthNotice, { children: [_jsx("span", { children: error || "Renew access through Core to continue. Your work stays on this page." }), _jsx(AuthNoticeButton, { disabled: pending, onClick: renew, children: pending ? "Waiting for Core…" : "Renew access" }), _jsx(AuthNoticeButton, { secondary: true, onClick: cancel, children: "Later" })] });
+    return _jsxs(AuthNotice, { busy: pending, children: [_jsx("span", { children: error || "Renew access through Core to continue. Your work stays on this page." }), _jsx(AuthNoticeButton, { disabled: pending, onClick: renew, children: pending ? "Waiting for Core…" : "Renew access" }), _jsx(AuthNoticeButton, { secondary: true, onClick: cancel, children: "Later" })] });
 }

package/dist/app-code-exchange.d.ts

@@ -0,0 +1,8 @@
+import type { AppSignInResult } from "./browser-auth.js";
+type Exchange = {
+    ok: boolean;
+    body: Record<string, unknown> | null;
+};
+/** A one-use proof is submitted once; timeout or cancellation never retries it. */
+export declare function exchangeAppCode(path: string, proof: AppSignInResult, signal?: AbortSignal): Promise<Exchange>;
+export {};

package/dist/app-code-exchange.js

@@ -0,0 +1,31 @@
+/** A one-use proof is submitted once; timeout or cancellation never retries it. */
+export async function exchangeAppCode(path, proof, signal) {
+    const url = new URL(path, window.location.href);
+    if (url.origin !== window.location.origin || url.username || url.password)
+        throw new Error("App sign-in requests must stay on this app's origin.");
+    if (signal?.aborted)
+        throw new DOMException("Sign-in was cancelled.", "AbortError");
+    const controller = new AbortController();
+    let interrupt;
+    const interrupted = new Promise((_resolve, reject) => { interrupt = reject; });
+    const abort = () => { controller.abort(); interrupt(new DOMException("Sign-in was cancelled.", "AbortError")); };
+    signal?.addEventListener("abort", abort, { once: true });
+    const timer = window.setTimeout(() => {
+        controller.abort();
+        interrupt(new Error("Hosty sign-in connection timed out. Please try again."));
+    }, 4_000);
+    const operation = (async () => {
+        const response = await fetch(url.href, { method: "POST", headers: { "Content-Type": "application/json" },
+            body: JSON.stringify(proof), credentials: "same-origin", redirect: "error", signal: controller.signal });
+        const value = await response.json().catch(() => null);
+        const body = value && typeof value === "object" && !Array.isArray(value) ? value : null;
+        return { ok: response.ok, body };
+    })();
+    try {
+        return await Promise.race([operation, interrupted]);
+    }
+    finally {
+        window.clearTimeout(timer);
+        signal?.removeEventListener("abort", abort);
+    }
+}

package/dist/assets/jetbrains-mono-LICENSE.txt

@@ -0,0 +1,93 @@
+Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+
+This license is copied below, and is also available with a FAQ at: https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

package/dist/assets/plex-sans-LICENSE.txt

@@ -0,0 +1,93 @@
+Copyright © 2017 IBM Corp. with Reserved Font Name "Plex"
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+
+This license is copied below, and is also available with a FAQ at: http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.

package/dist/auth-notice.d.ts

@@ -1,9 +1,9 @@
-import type { ButtonHTMLAttributes, CSSProperties, ReactNode } from "react";
+import type { ButtonHTMLAttributes, ReactNode } from "react";
 /** Shared SDK chrome for sign-in and renewal, independent of the app's CSS framework. */
-export declare function AuthNotice({ children }: {
+export declare function AuthNotice({ children, busy }: {
     children: ReactNode;
+    busy?: boolean;
 }): import("react").JSX.Element;
-export declare function AuthNoticeButton({ secondary, disabled, ...props }: ButtonHTMLAttributes<HTMLButtonElement> & {
+export declare function AuthNoticeButton({ secondary, className, ...props }: ButtonHTMLAttributes<HTMLButtonElement> & {
     secondary?: boolean;
 }): import("react").JSX.Element;
-export declare const authNoticeActionStyle: CSSProperties;

package/dist/auth-notice.js

@@ -1,48 +1,16 @@
 "use client";
-import { jsx as _jsx } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { SdkBrand, SdkChromeStyles, SdkSpinner } from "./sdk-chrome.js";
 /** Shared SDK chrome for sign-in and renewal, independent of the app's CSS framework. */
-export function AuthNotice({ children }) {
-    return _jsx("div", { "data-hosty-activity-control": true, role: "status", style: barStyle, children: children });
+export function AuthNotice({ children, busy = false }) {
+    return _jsxs("div", { "data-hosty-sdk": true, "data-hosty-activity-control": true, className: "hosty-auth-notice", role: "status", "aria-busy": busy, children: [_jsx(SdkChromeStyles, {}), _jsx("style", { children: styles }), _jsx(SdkBrand, {}), busy && _jsx(SdkSpinner, {}), _jsx("div", { className: "hosty-auth-notice-content", children: children })] });
 }
-export function AuthNoticeButton({ secondary = false, disabled, ...props }) {
-    return _jsx("button", { ...props, type: "button", disabled: disabled, style: {
-            ...authNoticeActionStyle,
-            ...(secondary ? { background: "transparent", color: "#422006", boxShadow: "inset 0 0 0 1px #a16207" } : {}),
-            ...(disabled ? { opacity: 0.65, cursor: "wait" } : {}),
-        } });
+export function AuthNoticeButton({ secondary = false, className = "", ...props }) {
+    return _jsx("button", { ...props, type: "button", className: `hosty-sdk-button ${secondary ? "" : "hosty-sdk-primary"} ${className}` });
 }
-const barStyle = {
-    position: "fixed",
-    insetInline: 0,
-    bottom: 0,
-    zIndex: 2147483647,
-    display: "flex",
-    flexWrap: "wrap",
-    alignItems: "center",
-    justifyContent: "center",
-    gap: "12px",
-    padding: "12px 16px",
-    margin: 0,
-    border: 0,
-    borderTop: "1px solid #d97706",
-    boxSizing: "border-box",
-    background: "#fef3c7",
-    color: "#422006",
-    font: "500 14px/1.4 system-ui, sans-serif",
-    textAlign: "center",
-    boxShadow: "0 -2px 8px rgba(66,32,6,0.12)",
-};
-export const authNoticeActionStyle = {
-    display: "inline-block",
-    padding: "6px 14px",
-    margin: 0,
-    borderRadius: "8px",
-    background: "#422006",
-    color: "#fffbeb",
-    border: "none",
-    cursor: "pointer",
-    font: "650 14px/1.4 system-ui, sans-serif",
-    textDecoration: "none",
-    textTransform: "none",
-    letterSpacing: "normal",
-};
+const styles = `
+.hosty-auth-notice{position:fixed;inset-inline:12px;bottom:max(12px,env(safe-area-inset-bottom));z-index:2147483647;display:flex;align-items:center;flex-wrap:wrap;gap:12px;box-sizing:border-box;margin:0;padding:12px 16px;border:1px solid var(--hs-warning-border);border-radius:10px;background:var(--hs-card);color:var(--hs-fg);box-shadow:0 4px 14px -4px #0F1B2D29;text-align:left}
+.hosty-auth-notice-content{flex:1;display:flex;align-items:center;flex-wrap:wrap;gap:8px 12px;min-width:0}
+.hosty-auth-notice-content>span{flex:1;min-width:min(100%,200px)}
+@media(max-width:480px){.hosty-auth-notice{inset-inline:8px;padding:12px}.hosty-auth-notice-content{flex-basis:100%}}
+`;

package/dist/browser-auth.d.ts

@@ -56,7 +56,7 @@ export type AppActivityConfig = {
     probePath?: string;
     activeUntil?: string | null;
     activityRequired?: boolean;
-    exchangeCode: (result: AppSignInResult) => Promise<{
+    exchangeCode: (result: AppSignInResult, signal?: AbortSignal) => Promise<{
         accessToken?: string;
         activeUntil?: string | null;
     }>;

package/dist/browser-auth.js

@@ -577,7 +577,7 @@ export function renewAppActivity() {
     renewal = popup.then(async (proof) => {
         if (config.appAuthProtocol === 1 && acceptAppAuthProtocol(new URL(config.openUrl).origin, 1) === null)
             config.appAuthProtocol = 2;
-        const result = await config.exchangeCode(proof);
+        const result = await config.exchangeCode(proof, controller.signal);
         if (controller.signal.aborted || activityConfig !== config || revision !== grantRevision)
             throw new Error("Sign-in was cancelled.");
         if (result.accessToken)

package/dist/chrome-mark.d.ts

@@ -0,0 +1,3 @@
+import type { SVGProps } from "react";
+export { CORE_MARK_CELLS } from "./core-mark-geometry.js";
+export declare function CoreMark(props: SVGProps<SVGSVGElement>): import("react").JSX.Element;

package/dist/chrome-mark.js

@@ -0,0 +1,7 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { CORE_MARK, CORE_MARK_CELLS } from "./core-mark-geometry.js";
+export { CORE_MARK_CELLS } from "./core-mark-geometry.js";
+export function CoreMark(props) {
+    return _jsx("svg", { viewBox: "0 0 100 100", fill: "currentColor", "aria-hidden": "true", focusable: "false", ...props, children: CORE_MARK_CELLS.flatMap((row, y) => [...row].map((cell, x) => cell === "." ? null :
+            _jsx("rect", { x: CORE_MARK.plain.inset + x * (CORE_MARK.plain.size + CORE_MARK.plain.gap), y: CORE_MARK.plain.inset + y * (CORE_MARK.plain.size + CORE_MARK.plain.gap), width: CORE_MARK.plain.size, height: CORE_MARK.plain.size, fill: cell === "*" ? CORE_MARK.accent : "currentColor" }, `${x}:${y}`))) });
+}

package/dist/core-mark-geometry.d.ts

@@ -0,0 +1,17 @@
+/** Canonical seven-cell platform mark, shared by web chrome and generated brand assets. */
+export declare const CORE_MARK: {
+    readonly cells: readonly ["X.X", "X*X", "X.X"];
+    readonly accent: "#A3E635";
+    readonly plain: {
+        readonly size: 22;
+        readonly gap: 7;
+        readonly inset: 10;
+    };
+    readonly tile: {
+        readonly size: 16;
+        readonly gap: 5.5;
+        readonly inset: 20.5;
+        readonly radius: 22;
+    };
+};
+export declare const CORE_MARK_CELLS: readonly ["X.X", "X*X", "X.X"];

package/dist/core-mark-geometry.js

@@ -0,0 +1,8 @@
+/** Canonical seven-cell platform mark, shared by web chrome and generated brand assets. */
+export const CORE_MARK = {
+    cells: ["X.X", "X*X", "X.X"],
+    accent: "#A3E635",
+    plain: { size: 22, gap: 7, inset: 10 },
+    tile: { size: 16, gap: 5.5, inset: 20.5, radius: 22 },
+};
+export const CORE_MARK_CELLS = CORE_MARK.cells;

package/dist/install-react.js

@@ -1,6 +1,7 @@
 "use client";
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useId, useMemo, useRef, useState, useSyncExternalStore } from "react";
+import { SdkBrand, SdkChromeStyles, SdkIcon, SdkProgress, SdkSpinner } from "./sdk-chrome.js";
 import { InstallationFlow, openInstallationConfirmation, showInstallationConfirmation, } from "./install.js";
 /** Custom dialogs can use this hook without adopting the default presentation. */
 export function useInstallation(client) {
@@ -149,9 +150,12 @@ function InstallationSession({ client, source, confirmationWindow, onClose, onCh
             return null;
         }
     })();
-    return _jsxs("dialog", { ref: dialog, className: "hosty-install", "aria-labelledby": titleId, onCancel: event => { event.preventDefault(); close(); }, children: [_jsx("style", { children: styles }), _jsxs("header", { children: [_jsx("h2", { id: titleId, children: "Install app" }), _jsx("button", { type: "button", onClick: close, "aria-label": "Close installation", children: "\u00D7" })] }), !hasSource && !request && _jsxs("form", { onSubmit: event => { event.preventDefault(); void install(); }, children: [_jsxs("label", { children: ["Manifest, app directory, or URL", _jsx("input", { value: manifestPath, onChange: event => setManifestPath(event.target.value), required: true, disabled: busy })] }), _jsx("button", { className: "primary", disabled: busy || !manifestPath.trim(), children: "Install" })] }), busy && _jsx("p", { role: "status", children: "Preparing Core confirmation\u2026" }), (error || presentationError) && _jsxs("div", { role: "alert", children: [_jsx("p", { children: error || presentationError }), (!frozen || uncertainSubmit) && _jsx("button", { type: "button", disabled: busy, onClick: () => void retry(), children: uncertainSubmit ? "Check request status" : "Retry" }), !frozen && onChooseSource && _jsx("button", { type: "button", disabled: busy, onClick: () => { closeUnusedPopup(); onChooseSource(); }, children: "Change source" })] }), uncertainSubmit && _jsx("p", { role: "status", children: "Core may have received this request. Check its status before continuing." }), request && request.status !== "draft" && _jsxs("section", { role: "status", children: [_jsx("p", { children: request.status === "pending" ? "Confirm runtime, automatic startup and permissions in Hosty Core." : request.status === "executing" ? "Core is installing your app…" : request.status === "succeeded" ? "App installed." : request.status === "denied" ? "Installation cancelled." : "Installation failed. Close this dialog to begin a new request." }), confirmationUrl && _jsx("a", { href: confirmationUrl, target: "_blank", rel: "noopener noreferrer", children: "Open Core confirmation" }), _jsx("p", { children: _jsx("small", { children: "Closing this dialog does not cancel an operation already confirmed in Core." }) })] })] });
+    const preparing = busy && (!request || request.status === "draft");
+    return _jsxs("dialog", { ref: dialog, "data-hosty-sdk": true, className: "hosty-install", "aria-labelledby": titleId, onCancel: event => { event.preventDefault(); close(); }, children: [_jsx(SdkChromeStyles, {}), _jsx("style", { children: styles }), _jsxs("header", { children: [_jsxs("div", { children: [_jsx(SdkBrand, {}), _jsx("h2", { id: titleId, children: "Install app" })] }), _jsx("button", { type: "button", className: "hosty-sdk-button hosty-sdk-ghost hosty-sdk-icon-button", onClick: close, "aria-label": "Close installation", children: _jsx(SdkIcon, { name: "close" }) })] }), !hasSource && !request && _jsxs("form", { onSubmit: event => { event.preventDefault(); void install(); }, children: [_jsx("p", { className: "hosty-install-description", children: "Hosty reads the manifest and prepares a request. Review runtime, startup and permissions in Core." }), _jsxs("label", { children: ["Manifest, app directory, or URL", _jsx("input", { className: "hosty-sdk-input", value: manifestPath, onChange: event => setManifestPath(event.target.value), required: true, disabled: busy })] }), _jsx("button", { className: "hosty-sdk-button hosty-sdk-primary", disabled: busy || !manifestPath.trim(), children: "Install" })] }), preparing && _jsxs("section", { className: "hosty-install-state", role: "status", "aria-busy": "true", children: [_jsxs("p", { className: "hosty-sdk-status", children: [_jsx(SdkSpinner, {}), "Preparing Core confirmation\u2026"] }), _jsx(SdkProgress, { label: "Preparing Core confirmation" })] }), (error || presentationError) && _jsxs("div", { className: "hosty-install-error", role: "alert", children: [_jsxs("p", { children: [_jsx(SdkIcon, { name: "error" }), _jsx("span", { children: error || presentationError })] }), _jsxs("div", { className: "hosty-install-actions", children: [(!frozen || uncertainSubmit) && _jsx("button", { type: "button", className: "hosty-sdk-button", disabled: busy, onClick: () => void retry(), children: uncertainSubmit ? "Check request status" : "Retry" }), !frozen && onChooseSource && _jsx("button", { type: "button", className: "hosty-sdk-button hosty-sdk-ghost", disabled: busy, onClick: () => { closeUnusedPopup(); onChooseSource(); }, children: "Change source" })] })] }), uncertainSubmit && _jsx("p", { className: "hosty-install-description", role: "status", children: "Core may have received this request. Check its status before continuing." }), request && request.status !== "draft" && _jsxs("section", { className: "hosty-install-state", "data-state": request.status, role: "status", "aria-busy": request.status === "executing", children: [request.status === "executing" ? _jsx(SdkSpinner, {}) : _jsx("span", { className: "hosty-install-state-icon", children: _jsx(SdkIcon, { name: request.status === "pending" ? "external" : request.status === "succeeded" ? "check" : request.status === "denied" ? "close" : "error" }) }), _jsx("h3", { children: request.status === "pending" ? "Confirm in Hosty Core" : request.status === "executing" ? "Installing app" : request.status === "succeeded" ? "App installed" : request.status === "denied" ? "Installation cancelled" : "Installation failed" }), _jsx("p", { children: request.status === "pending" ? "Confirm runtime, automatic startup and permissions in Hosty Core." : request.status === "executing" ? "Core is installing your app…" : request.status === "succeeded" ? "App installed." : request.status === "denied" ? "Installation cancelled." : "Installation failed. Close this dialog to begin a new request." }), request.status === "executing" && _jsx(SdkProgress, { label: "Installing app" }), confirmationUrl && _jsxs("a", { className: "hosty-sdk-button", href: confirmationUrl, target: "_blank", rel: "noopener noreferrer", children: [_jsx(SdkIcon, { name: "external" }), "Open Core confirmation"] }), request.status === "succeeded" && _jsx("p", { className: "hosty-install-description", children: "Open Apps to check configuration and runtime status." }), _jsx("p", { children: _jsx("small", { children: "Closing this dialog does not cancel an operation already confirmed in Core." }) }), ["succeeded", "denied", "failed"].includes(request.status) && _jsx("button", { type: "button", className: "hosty-sdk-button hosty-sdk-primary", onClick: close, children: "Done" })] })] });
 }
 const styles = `
-.hosty-install{box-sizing:border-box;width:min(480px,calc(100vw - 32px));max-height:calc(100dvh - 32px);padding:24px;border:1px solid var(--border,#aaa);border-radius:12px;background:var(--background,Canvas);color:var(--foreground,CanvasText);font:inherit;overflow:auto;margin:auto}
-.hosty-install::backdrop{background:#0008}.hosty-install header{display:flex;align-items:center;justify-content:space-between;gap:16px}.hosty-install h2{font-size:1.25rem;margin:0}.hosty-install p{margin:12px 0;font-size:.9rem}.hosty-install small{font-size:.8rem;opacity:.75}.hosty-install label{display:flex;flex-direction:column;gap:6px;margin:16px 0;font-size:.9rem}.hosty-install input{box-sizing:border-box;width:100%;border:1px solid var(--border,#aaa);border-radius:6px;padding:8px 10px;background:transparent;color:inherit;font:inherit}.hosty-install button{border:1px solid var(--border,#aaa);border-radius:6px;padding:8px 12px;font:inherit;background:transparent;color:inherit;cursor:pointer}.hosty-install button:disabled{opacity:.5;cursor:default}.hosty-install .primary{background:#2563eb;color:white;border-color:#2563eb}.hosty-install [role=alert]{color:#d33}.hosty-install a{color:#2563eb;text-decoration:underline}.hosty-install :focus-visible{outline:2px solid #60a5fa;outline-offset:3px}
+.hosty-install{box-sizing:border-box;width:min(440px,calc(100vw - 32px));max-height:calc(100dvh - 32px);padding:24px;border:1px solid var(--hs-border);border-radius:14px;background:var(--hs-card);color:var(--hs-fg);overflow:auto;margin:auto;box-shadow:0 14px 34px -8px #0F1B2D3D}
+.hosty-install::backdrop{background:#0F1B2D57}.hosty-install>header{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;margin-bottom:20px}.hosty-install header .hosty-sdk-brand{margin-bottom:8px}.hosty-install h2{font:600 20px/26px var(--hs-font);letter-spacing:-.02em;margin:0}.hosty-install h3{font:600 16px/22px var(--hs-font);margin:0}.hosty-install p{margin:0;font-size:14px;line-height:22px;color:var(--hs-muted)}.hosty-install small{font-size:12px;line-height:18px}.hosty-install form{display:flex;flex-direction:column;gap:16px}.hosty-install label{display:flex;flex-direction:column;gap:6px;font-size:13px;font-weight:500}.hosty-install input.hosty-sdk-input{font-family:var(--hs-mono);font-size:13px}
+.hosty-install-state{display:flex;flex-direction:column;align-items:flex-start;gap:12px}.hosty-install-state>.hosty-sdk-button{align-self:stretch}.hosty-install-state-icon{display:grid;place-items:center;width:36px;height:36px;border-radius:50%;background:var(--hs-danger-soft);color:var(--hs-danger)}.hosty-install-state[data-state=pending]>.hosty-install-state-icon{background:var(--hs-warning-soft);color:var(--hs-warning)}.hosty-install-state[data-state=succeeded]>.hosty-install-state-icon{background:var(--hs-success-soft);color:var(--hs-success)}.hosty-install-state[data-state=denied]>.hosty-install-state-icon{background:var(--hs-soft);color:var(--hs-muted)}.hosty-install-state[data-state=executing]>.hosty-sdk-spinner{width:24px;height:24px}.hosty-install .hosty-install-error{margin:16px 0;padding:12px;border-radius:10px;background:var(--hs-danger-soft)}.hosty-install-error>p{display:flex;align-items:flex-start;gap:8px;overflow-wrap:anywhere;color:var(--hs-danger)}.hosty-install-error svg{margin-top:3px}.hosty-install-actions{display:flex;flex-wrap:wrap;gap:8px;margin-top:12px}.hosty-install>.hosty-install-description{margin:12px 0}
+@media(max-width:480px){.hosty-install{padding:20px}.hosty-install input.hosty-sdk-input{font-size:16px}}
 `;