@legioncodeinc/hive 0.2.0 → 0.3.0

package/dist/dashboard/web/onboarding/login-step.js

@@ -0,0 +1,104 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * The onboarding LOGIN STEP, PRD-009b ob-AC-14/ob-AC-15. Closes the known device-code display gap
+ * by reusing the EXACT wire contract `GuidedSetup` (`src/dashboard/web/setup-gate.tsx`) already
+ * defines (`POST /setup/login`, polled `GET /setup/state`) WITHOUT modifying that module: this is
+ * the sibling component the task brief calls for, sharing `wire.ts`'s types/client rather than
+ * duplicating the device-flow request shapes.
+ *
+ * Unlike `/login`'s `GuidedSetup` (which waits for an explicit "First time setup" click), the
+ * onboarding flow has already walked the operator through installs and a health check, so this
+ * step begins the device flow automatically on mount: one fewer click at the end of a long guided
+ * sequence. Once `/setup/state.authenticated` flips true it fires `dashboard_reached`, best-effort
+ * POSTs `/api/onboarding/complete`, then hard-navigates to `/` (ob-AC-15) so the server gate
+ * revalidates and serves the authoritative dashboard, the same discipline `LoginScreen` follows.
+ */
+import React from "react";
+import { createWireClient, FRESH_SETUP_STATE } from "../wire.js";
+/** Mirrors `setup-gate.tsx`'s `SETUP_POLL_MS`, the live-transition poll cadence. */
+export const LOGIN_STEP_POLL_MS = 2500;
+/**
+ * The grant display (ob-AC-14): the `user_code` prominently, plus `verification_uri_complete`
+ * falling back to `verification_uri`, byte-identical fallback rule to `GuidedSetup`'s.
+ */
+function LoginGrant({ grant }) {
+    return (_jsxs("div", { "data-testid": "onboarding-login-grant", style: { display: "flex", flexDirection: "column", gap: 10, alignItems: "center" }, children: [_jsx("p", { style: { fontFamily: "var(--font-sans)", fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0 }, children: "Enter this code to finish linking your Deeplake account:" }), _jsx("code", { "data-testid": "onboarding-login-code", style: { fontFamily: "var(--font-mono)", fontSize: "var(--text-lg)", color: "var(--honey)", letterSpacing: "0.08em" }, children: grant.user_code }), _jsx("a", { href: grant.verification_uri_complete ?? grant.verification_uri, target: "_blank", rel: "noreferrer", "data-testid": "onboarding-login-verification-link", style: { fontSize: "var(--text-sm)", color: "var(--text-secondary)" }, children: "Open the verification page" }), _jsx("span", { style: { fontSize: "var(--text-xs)", color: "var(--text-tertiary)" }, children: "Waiting for you to finish in the browser\u2026" })] }));
+}
+export function LoginStep({ onboardingClient, wire: wireOverride, onAuthenticated, pollMs = LOGIN_STEP_POLL_MS }) {
+    const wire = React.useMemo(() => wireOverride ?? createWireClient(), [wireOverride]);
+    const [state, setState] = React.useState(FRESH_SETUP_STATE);
+    const [grant, setGrant] = React.useState(null);
+    const [error, setError] = React.useState(false);
+    const beginRef = React.useRef(false);
+    const grantShownEventRef = React.useRef(false);
+    const navigatedRef = React.useRef(false);
+    // Auto-begin the device flow on mount (see module doc for why onboarding skips the button
+    // `GuidedSetup` shows on the standalone `/login` route).
+    React.useEffect(() => {
+        if (beginRef.current)
+            return;
+        beginRef.current = true;
+        void (async () => {
+            const result = await wire.setupLogin();
+            if (result === null) {
+                setError(true);
+                return;
+            }
+            setGrant(result);
+        })();
+    }, [wire]);
+    // ob-AC-14, `login_shown` fires the moment the grant (the code the operator must see) renders.
+    React.useEffect(() => {
+        if (grant === null || grantShownEventRef.current)
+            return;
+        grantShownEventRef.current = true;
+        onboardingClient.sendEvent("login_shown");
+    }, [grant, onboardingClient]);
+    // Poll `/setup/state` for the live authenticated transition, exactly like `LoginScreen` does.
+    React.useEffect(() => {
+        if (state.authenticated)
+            return;
+        let alive = true;
+        const tick = async () => {
+            const next = await wire.setupState();
+            if (alive)
+                setState(next);
+        };
+        void tick();
+        const id = setInterval(() => void tick(), pollMs);
+        return () => {
+            alive = false;
+            clearInterval(id);
+        };
+    }, [wire, state.authenticated, pollMs]);
+    // ob-AC-15, authenticated: fire `dashboard_reached`, best-effort POST complete, then hard-nav.
+    React.useEffect(() => {
+        if (!state.authenticated || navigatedRef.current)
+            return;
+        navigatedRef.current = true;
+        onboardingClient.sendEvent("dashboard_reached");
+        void (async () => {
+            await onboardingClient.complete();
+            if (onAuthenticated !== undefined) {
+                onAuthenticated();
+                return;
+            }
+            if (typeof window !== "undefined")
+                window.location.assign("/");
+        })();
+    }, [state.authenticated, onboardingClient, onAuthenticated]);
+    if (state.authenticated)
+        return _jsx(_Fragment, {});
+    return (_jsxs("div", { "data-testid": "onboarding-login-step", style: {
+            display: "flex",
+            flexDirection: "column",
+            alignItems: "center",
+            justifyContent: "center",
+            gap: 18,
+            minHeight: "100vh",
+            padding: 28,
+            background: "var(--bg-canvas)",
+            textAlign: "center",
+        }, children: [_jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 8, maxWidth: 460 }, children: [_jsx("h1", { style: { fontSize: "var(--text-xl)", fontWeight: 700, color: "var(--text-primary)", margin: 0, letterSpacing: "-0.02em" }, children: "One last step: link Deeplake" }), _jsx("p", { style: { fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0, lineHeight: 1.5 }, children: "Your fleet is up. Link your Deeplake account and you are on your dashboard." })] }), grant !== null ? (_jsx(LoginGrant, { grant: grant })) : error ? (_jsxs("p", { "data-testid": "onboarding-login-error", style: { fontSize: "var(--text-sm)", color: "var(--severity-critical)", margin: 0 }, children: ["Could not start the login. Retry, or run ", _jsx("code", { children: "honeycomb login" }), " in your terminal."] })) : (_jsx("p", { style: { fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0 }, children: "Starting login\u2026" }))] }));
+}
+//# sourceMappingURL=login-step.js.map

package/dist/dashboard/web/onboarding/login-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-step.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/login-step.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAA6D,MAAM,YAAY,CAAC;AAG5H,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAa,CAAC;AAYhD;;;GAGG;AACH,SAAS,UAAU,CAAC,EAAE,KAAK,EAAsC;IAChE,OAAO,CACN,8BAAiB,wBAAwB,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,aAC3H,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,yEAE/G,EACJ,8BACa,uBAAuB,EACnC,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,YAEpH,KAAK,CAAC,SAAS,GACV,EACP,YACC,IAAI,EAAE,KAAK,CAAC,yBAAyB,IAAI,KAAK,CAAC,gBAAgB,EAC/D,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,YAAY,iBACJ,oCAAoC,EAChD,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,2CAGlE,EACJ,eAAM,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,+DAAkD,IACvH,CACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,GAAG,kBAAkB,EAAkB;IAC/H,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAa,GAAG,EAAE,CAAC,YAAY,IAAI,gBAAgB,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAiB,iBAAiB,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAwB,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEzC,0FAA0F;IAC1F,yDAAyD;IACzD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO;QAC7B,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;QACxB,KAAK,CAAC,KAAK,IAAmB,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACrB,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,OAAO;YACR,CAAC;YACD,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEX,+FAA+F;IAC/F,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,KAAK,KAAK,IAAI,IAAI,kBAAkB,CAAC,OAAO;YAAE,OAAO;QACzD,kBAAkB,CAAC,OAAO,GAAG,IAAI,CAAC;QAClC,gBAAgB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE9B,8FAA8F;IAC9F,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,KAAK,CAAC,aAAa;YAAE,OAAO;QAChC,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,KAAK,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,GAAG,EAAE;YACX,KAAK,GAAG,KAAK,CAAC;YACd,aAAa,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAExC,+FAA+F;IAC/F,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,YAAY,CAAC,OAAO;YAAE,OAAO;QACzD,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC;QAC5B,gBAAgB,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAChD,KAAK,CAAC,KAAK,IAAmB,EAAE;YAC/B,MAAM,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBACnC,eAAe,EAAE,CAAC;gBAClB,OAAO;YACR,CAAC;YACD,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;IAE7D,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,mBAAK,CAAC;IAEtC,OAAO,CACN,8BACa,uBAAuB,EACnC,KAAK,EAAE;YACN,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,QAAQ;YACvB,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,GAAG,EAAE,EAAE;YACP,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,kBAAkB;YAC9B,SAAS,EAAE,QAAQ;SACnB,aAED,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,aAC9E,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,6CAExH,EACL,YAAG,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,4FAEhG,IACC,EAEL,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CACjB,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,GAAI,CAC5B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACX,4BAAe,wBAAwB,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,CAAC,EAAE,0DACjF,6CAA4B,0BAClE,CACJ,CAAC,CAAC,CAAC,CACH,YAAG,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,qCAAqB,CACxG,IACI,CACN,CAAC;AACH,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-client.d.ts

@@ -0,0 +1,52 @@
+/**
+ * The `/onboarding` route's WIRE CLIENT, PRD-009b, talking to the PRD-009a installer service.
+ * Mirrors `wire.ts`'s fetch+zod discipline (fail-soft, never throws into React) but is kept
+ * LOCAL to the onboarding feature folder per the file-ownership split with the daemon-side agent
+ * building `src/daemon/installer/**` in parallel.
+ *
+ * Every call carries the one-time onboarding token as the `x-onboarding-token` header (the PRD's
+ * "carried on every installer call"), EXCEPT the SSE subscription: `EventSource` cannot set request
+ * headers, so the token rides as a `?t=` query param there instead (the implementation note both
+ * the parent brief and PRD-009a's SSE contract call for).
+ */
+import { type DetectResponse, type HealthResponse, type InstallableProduct, type InstallProgressEvent, type InstallStartResult } from "./contracts.js";
+/** The header carrying the one-time onboarding token on every installer call (never the SSE query). */
+export declare const ONBOARDING_TOKEN_HEADER: "x-onboarding-token";
+/** A fetch-like function, injectable so tests never hit the network (mirrors `wire.ts`'s `FetchLike`). */
+type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** An `EventSource`-constructor-like injectable, so tests never open a real connection. */
+type EventSourceCtorLike = new (url: string | URL) => EventSource;
+export interface OnboardingClientOptions {
+    /** Prefixed onto every request path (defaults to same-origin, `""`). A test injects a base. */
+    readonly origin?: string;
+    /** Defaults to the global `fetch`; a test injects a mock. */
+    readonly fetchImpl?: FetchLike;
+    /** Defaults to the global `EventSource`; a test injects a fake (jsdom has none, see module doc below). */
+    readonly eventSourceCtor?: EventSourceCtorLike;
+}
+/** The onboarding wire surface every onboarding component reads/writes through. */
+export interface OnboardingClient {
+    /** `GET /api/onboarding/detect`, never assumes a product set; a failure degrades to {@link EMPTY_DETECTION}. */
+    detect(): Promise<DetectResponse>;
+    /** `POST /api/onboarding/install`, starts (or short-circuits) one product's install. `null` on failure. */
+    startInstall(product: InstallableProduct): Promise<InstallStartResult | null>;
+    /**
+     * `GET /api/onboarding/install/:product/events` (SSE). Returns an unsubscribe function. In an
+     * `EventSource`-less environment (jsdom, mirroring `use-fleet-telemetry.ts`'s documented gap)
+     * this is a no-op subscription, the caller's install-card falls back to its optimistic local
+     * stage tracking rather than throwing.
+     */
+    subscribeInstallEvents(product: InstallableProduct, onEvent: (event: InstallProgressEvent) => void): () => void;
+    /** `GET /api/onboarding/health`, a failure degrades to {@link UNREACHABLE_HEALTH} (never `ready:true`). */
+    health(): Promise<HealthResponse>;
+    /** `POST /api/onboarding/complete` (204). Best-effort: never throws, never blocks the caller's navigation. */
+    complete(): Promise<void>;
+    /**
+     * `POST /api/onboarding/event` (202), the UI funnel chokepoint. FIRE-AND-FORGET by design: the
+     * caller never awaits this (a slow/broken telemetry endpoint must never stall the guided flow).
+     */
+    sendEvent(event: string, properties?: Record<string, string>): void;
+}
+/** Build the onboarding wire client bound to one onboarding token (read once from `?t=`, kept in memory). */
+export declare function createOnboardingClient(token: string, options?: OnboardingClientOptions): OnboardingClient;
+export {};

package/dist/dashboard/web/onboarding/onboarding-client.js

@@ -0,0 +1,133 @@
+/**
+ * The `/onboarding` route's WIRE CLIENT, PRD-009b, talking to the PRD-009a installer service.
+ * Mirrors `wire.ts`'s fetch+zod discipline (fail-soft, never throws into React) but is kept
+ * LOCAL to the onboarding feature folder per the file-ownership split with the daemon-side agent
+ * building `src/daemon/installer/**` in parallel.
+ *
+ * Every call carries the one-time onboarding token as the `x-onboarding-token` header (the PRD's
+ * "carried on every installer call"), EXCEPT the SSE subscription: `EventSource` cannot set request
+ * headers, so the token rides as a `?t=` query param there instead (the implementation note both
+ * the parent brief and PRD-009a's SSE contract call for).
+ */
+import { DetectResponseSchema, EMPTY_DETECTION, InstallProgressEventSchema, InstallRefusalResponseSchema, InstallStartResponseSchema, parseHealthResponse, UNREACHABLE_HEALTH, } from "./contracts.js";
+/** The header carrying the one-time onboarding token on every installer call (never the SSE query). */
+export const ONBOARDING_TOKEN_HEADER = "x-onboarding-token";
+function tokenHeaders(token) {
+    return token !== "" ? { [ONBOARDING_TOKEN_HEADER]: token } : {};
+}
+/** Build the onboarding wire client bound to one onboarding token (read once from `?t=`, kept in memory). */
+export function createOnboardingClient(token, options = {}) {
+    const origin = options.origin ?? "";
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const url = (path) => `${origin}${path}`;
+    return {
+        async detect() {
+            try {
+                const res = await fetchImpl(url("/api/onboarding/detect"), {
+                    headers: { accept: "application/json", ...tokenHeaders(token) },
+                });
+                if (!res.ok)
+                    return EMPTY_DETECTION;
+                const parsed = DetectResponseSchema.safeParse(await res.json());
+                return parsed.success ? parsed.data : EMPTY_DETECTION;
+            }
+            catch {
+                return EMPTY_DETECTION;
+            }
+        },
+        async startInstall(product) {
+            try {
+                const res = await fetchImpl(url("/api/onboarding/install"), {
+                    method: "POST",
+                    headers: { "content-type": "application/json", accept: "application/json", ...tokenHeaders(token) },
+                    body: JSON.stringify({ product }),
+                });
+                if (res.status === 409) {
+                    const parsed = InstallRefusalResponseSchema.safeParse(await res.json());
+                    return parsed.success ? parsed.data : null;
+                }
+                if (!res.ok)
+                    return null;
+                const parsed = InstallStartResponseSchema.safeParse(await res.json());
+                return parsed.success ? parsed.data : null;
+            }
+            catch {
+                return null;
+            }
+        },
+        subscribeInstallEvents(product, onEvent) {
+            const EventSourceCtor = options.eventSourceCtor ?? globalThis.EventSource;
+            if (EventSourceCtor === undefined) {
+                // jsdom (this repo's test environment) has no EventSource, mirroring the exact gap
+                // `use-fleet-telemetry.ts` documents. Tests inject a fake constructor to exercise this path.
+                return () => { };
+            }
+            const qs = token !== "" ? `?t=${encodeURIComponent(token)}` : "";
+            let source = null;
+            try {
+                source = new EventSourceCtor(url(`/api/onboarding/install/${encodeURIComponent(product)}/events${qs}`));
+            }
+            catch {
+                return () => { };
+            }
+            // The contract names no custom SSE event type, so this subscribes to the default unnamed
+            // `message` frame (see the onboarding-client research note in the final report: if the
+            // daemon's implementation ends up naming the event, this is a one-line integration fix).
+            const handler = (event) => {
+                const raw = typeof event.data === "string" ? event.data : String(event.data);
+                try {
+                    const parsed = InstallProgressEventSchema.safeParse(JSON.parse(raw));
+                    if (parsed.success)
+                        onEvent(parsed.data);
+                }
+                catch {
+                    // A malformed frame is dropped; the next frame (or the server's on-subscribe
+                    // current-stage resend, ob-AC-17) carries the truth forward.
+                }
+            };
+            source.addEventListener("message", handler);
+            return () => {
+                try {
+                    source?.removeEventListener("message", handler);
+                    source?.close();
+                }
+                catch {
+                    // Closing an already-closed/errored source must never throw into the caller's cleanup.
+                }
+            };
+        },
+        async health() {
+            try {
+                const res = await fetchImpl(url("/api/onboarding/health"), {
+                    headers: { accept: "application/json", ...tokenHeaders(token) },
+                });
+                if (!res.ok)
+                    return UNREACHABLE_HEALTH;
+                return parseHealthResponse(await res.json());
+            }
+            catch {
+                return UNREACHABLE_HEALTH;
+            }
+        },
+        async complete() {
+            try {
+                await fetchImpl(url("/api/onboarding/complete"), { method: "POST", headers: tokenHeaders(token) });
+            }
+            catch {
+                // Best-effort: the login step navigates to the dashboard regardless (never gets the
+                // operator stuck because a completion beacon failed to land).
+            }
+        },
+        sendEvent(event, properties) {
+            const body = properties !== undefined ? { event, properties } : { event };
+            // Fire-and-forget: the caller never awaits this, so a slow/broken telemetry endpoint can
+            // never stall the guided flow. Swallow every failure silently (fail-soft telemetry posture).
+            void fetchImpl(url("/api/onboarding/event"), {
+                method: "POST",
+                headers: { "content-type": "application/json", ...tokenHeaders(token) },
+                body: JSON.stringify(body),
+            }).catch(() => { });
+        },
+    };
+}
+//# sourceMappingURL=onboarding-client.js.map

package/dist/dashboard/web/onboarding/onboarding-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-client.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACN,oBAAoB,EACpB,eAAe,EACf,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,GAQlB,MAAM,gBAAgB,CAAC;AAExB,uGAAuG;AACvG,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAA6B,CAAC;AAyCrE,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,UAAmC,EAAE;IAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;IAEzD,OAAO;QACN,KAAK,CAAC,MAAM;YACX,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;oBAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE;iBAC/D,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,eAAe,CAAC;gBACpC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,eAAe,CAAC;YACxB,CAAC;QACF,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAA2B;YAC7C,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE;oBAC3D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE;oBACnG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;iBACjC,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxB,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;oBACxE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5C,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBACzB,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACtE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,sBAAsB,CAAC,OAA2B,EAAE,OAA8C;YACjG,MAAM,eAAe,GACpB,OAAO,CAAC,eAAe,IAAK,UAAoD,CAAC,WAAW,CAAC;YAC9F,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBACnC,mFAAmF;gBACnF,6FAA6F;gBAC7F,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YACjB,CAAC;YAED,MAAM,EAAE,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,MAAM,GAAuB,IAAI,CAAC;YACtC,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,2BAA2B,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YACjB,CAAC;YAED,yFAAyF;YACzF,uFAAuF;YACvF,yFAAyF;YACzF,MAAM,OAAO,GAAG,CAAC,KAAmB,EAAQ,EAAE;gBAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7E,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrE,IAAI,MAAM,CAAC,OAAO;wBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACR,6EAA6E;oBAC7E,6DAA6D;gBAC9D,CAAC;YACF,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAwB,CAAC,CAAC;YAE7D,OAAO,GAAG,EAAE;gBACX,IAAI,CAAC;oBACJ,MAAM,EAAE,mBAAmB,CAAC,SAAS,EAAE,OAAwB,CAAC,CAAC;oBACjE,MAAM,EAAE,KAAK,EAAE,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACR,uFAAuF;gBACxF,CAAC;YACF,CAAC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM;YACX,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;oBAC1D,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE;iBAC/D,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,kBAAkB,CAAC;gBACvC,OAAO,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,kBAAkB,CAAC;YAC3B,CAAC;QACF,CAAC;QAED,KAAK,CAAC,QAAQ;YACb,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YAAC,MAAM,CAAC;gBACR,oFAAoF;gBACpF,8DAA8D;YAC/D,CAAC;QACF,CAAC;QAED,SAAS,CAAC,KAAa,EAAE,UAAmC;YAC3D,MAAM,IAAI,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YAC1E,yFAAyF;YACzF,6FAA6F;YAC7F,KAAK,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE;gBACvE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpB,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-hero.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The first-run HERO, PRD-009b ob-AC-4/ob-AC-5. A staggered entrance anchored by the Hive mark:
+ * the product logos rise and fade in one by one on a spring-like curve, the Hive mark settles
+ * center LAST, then the two choice buttons fade in. Pure CSS animation/transition (no new
+ * dependency); `prefers-reduced-motion` collapses every entrance to a plain opacity fade with no
+ * transform (see the `hc-onboarding-anim` rule below: the SAFE default IS the reduced-motion form,
+ * and a `(prefers-reduced-motion: no-preference)` media query is what OPTS IN to the richer motion,
+ * so an environment that cannot evaluate the media query at all still gets the safe fade).
+ */
+import React from "react";
+/** ob-AC-5, the exact two choices, verbatim copy. */
+export type OnboardingMode = "standard" | "advanced";
+export interface OnboardingHeroProps {
+    readonly assetBase: string;
+    readonly onChooseStandard: () => void;
+    readonly onChooseAdvanced: () => void;
+    /** The per-entry stagger delay (ms) between each product logo. Overridable for tests. */
+    readonly staggerMs?: number;
+}
+/**
+ * The first-run hero + the two-choice entry point. Renders unconditionally once the caller has
+ * already decided this IS a first-run (no detection re-derivation happens here, per ob-AC-2).
+ */
+export declare function OnboardingHero({ assetBase, onChooseStandard, onChooseAdvanced, staggerMs }: OnboardingHeroProps): React.JSX.Element;

package/dist/dashboard/web/onboarding/onboarding-hero.js

@@ -0,0 +1,70 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { productLogoUrl } from "./product-copy.js";
+/** The hero's hardcoded hero mark, in the order they animate in BEFORE the Hive mark settles last. */
+const HERO_PRODUCT_MARKS = ["honeycomb", "doctor", "nectar"];
+/** One staggered hero entry (a product logo, or the Hive mark itself). */
+function HeroEntry({ src, delayMs, size, isAnchor, testId, }) {
+    return (_jsx("span", { "data-testid": testId, className: `hc-onboarding-anim${isAnchor ? " hc-onboarding-hero-anchor" : " hc-onboarding-hero-logo"}`, style: { display: "inline-flex", animationDelay: `${delayMs}ms` }, children: _jsx("img", { src: src, width: size, height: size, alt: "" }) }));
+}
+/**
+ * The first-run hero + the two-choice entry point. Renders unconditionally once the caller has
+ * already decided this IS a first-run (no detection re-derivation happens here, per ob-AC-2).
+ */
+export function OnboardingHero({ assetBase, onChooseStandard, onChooseAdvanced, staggerMs = 140 }) {
+    return (_jsxs("div", { "data-testid": "onboarding-hero", style: {
+            display: "flex",
+            alignItems: "center",
+            justifyContent: "center",
+            minHeight: "100vh",
+            padding: 32,
+            background: "var(--bg-canvas)",
+            textAlign: "center",
+        }, children: [_jsxs("div", { style: { display: "flex", flexDirection: "column", alignItems: "center", gap: 36, width: "100%", maxWidth: 620 }, children: [_jsxs("div", { "data-testid": "onboarding-hero-marks", style: { display: "flex", alignItems: "center", justifyContent: "center", gap: 20 }, children: [HERO_PRODUCT_MARKS.map((product, i) => (_jsx(HeroEntry, { testId: `onboarding-hero-logo-${product}`, src: productLogoUrl(product, assetBase), delayMs: i * staggerMs, size: 44, isAnchor: false }, product))), _jsx(HeroEntry, { testId: "onboarding-hero-mark", src: productLogoUrl("hive", assetBase), delayMs: HERO_PRODUCT_MARKS.length * staggerMs, size: 56, isAnchor: true })] }), _jsxs("div", { style: { display: "flex", flexDirection: "column", gap: 8 }, children: [_jsx("h1", { style: { fontSize: "var(--text-3xl)", fontWeight: 700, color: "var(--text-primary)", margin: 0, letterSpacing: "-0.02em" }, children: "Welcome to the hive" }), _jsx("p", { style: { fontFamily: "var(--font-sans)", fontSize: "var(--text-base)", color: "var(--text-secondary)", margin: 0 }, children: "Let\u2019s get the rest of your fleet running." })] }), _jsxs("div", { "data-testid": "onboarding-choices", className: "hc-onboarding-anim", style: {
+                            animationDelay: `${(HERO_PRODUCT_MARKS.length + 1) * staggerMs}ms`,
+                            display: "flex",
+                            gap: 16,
+                            flexWrap: "wrap",
+                            justifyContent: "center",
+                        }, children: [_jsxs("button", { type: "button", "data-testid": "onboarding-standard-button", onClick: onChooseStandard, style: choiceButtonStyle("primary"), children: [_jsx("span", { style: { fontWeight: 700 }, children: "Standard User" }), _jsx("span", { style: choiceSubtextStyle("primary"), children: "Install the fleet (recommended)" })] }), _jsxs("button", { type: "button", "data-testid": "onboarding-advanced-button", onClick: onChooseAdvanced, style: choiceButtonStyle("secondary"), children: [_jsx("span", { style: { fontWeight: 700 }, children: "Advanced User" }), _jsx("span", { style: choiceSubtextStyle("secondary"), children: "Custom installation" })] })] })] }), _jsx("style", { children: [
+                    // SAFE default: a plain opacity fade, no transform, this IS the reduced-motion form.
+                    ".hc-onboarding-anim { opacity: 0; animation: hc-onboarding-fade var(--dur-slow) var(--ease-out) both; }",
+                    "@keyframes hc-onboarding-fade { from { opacity: 0 } to { opacity: 1 } }",
+                    // Motion allowed: swap in the richer rise-and-settle keyframes, staggered by the
+                    // inline `animationDelay` each entry already carries.
+                    "@media (prefers-reduced-motion: no-preference) {",
+                    "  .hc-onboarding-hero-logo { animation-name: hc-onboarding-rise; animation-duration: 620ms; }",
+                    // The Hive mark settling last gets a spring-like overshoot curve, distinct from the
+                    // plain ease-out the product logos use, so it visually "settles" rather than just arriving.
+                    "  .hc-onboarding-hero-anchor { animation-name: hc-onboarding-settle; animation-duration: 760ms; animation-timing-function: cubic-bezier(0.34, 1.56, 0.64, 1); }",
+                    "}",
+                    "@keyframes hc-onboarding-rise { from { opacity: 0; transform: translateY(18px) scale(0.9); } to { opacity: 1; transform: translateY(0) scale(1); } }",
+                    "@keyframes hc-onboarding-settle { from { opacity: 0; transform: translateY(24px) scale(0.7); } to { opacity: 1; transform: translateY(0) scale(1); } }",
+                ].join("\n") })] }));
+}
+function choiceButtonStyle(variant) {
+    return {
+        display: "flex",
+        flexDirection: "column",
+        alignItems: "flex-start",
+        gap: 4,
+        minWidth: 220,
+        padding: "16px 22px",
+        borderRadius: "var(--radius-lg)",
+        border: variant === "primary" ? "1px solid transparent" : "1px solid var(--border-strong)",
+        background: variant === "primary" ? "var(--honey)" : "var(--bg-elevated)",
+        color: variant === "primary" ? "var(--honey-on)" : "var(--text-primary)",
+        cursor: "pointer",
+        fontFamily: "var(--font-sans)",
+        fontSize: "var(--text-base)",
+        textAlign: "left",
+    };
+}
+function choiceSubtextStyle(variant) {
+    return {
+        fontSize: "var(--text-xs)",
+        fontWeight: 500,
+        color: variant === "primary" ? "var(--honey-on)" : "var(--text-secondary)",
+        opacity: variant === "primary" ? 0.85 : 1,
+    };
+}
+//# sourceMappingURL=onboarding-hero.js.map

package/dist/dashboard/web/onboarding/onboarding-hero.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-hero.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-hero.tsx"],"names":[],"mappings":";AAaA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,sGAAsG;AACtG,MAAM,kBAAkB,GAAiC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAa3F,0EAA0E;AAC1E,SAAS,SAAS,CAAC,EAClB,GAAG,EACH,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,GAQN;IACA,OAAO,CACN,8BACc,MAAM,EACnB,SAAS,EAAE,qBAAqB,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B,EAAE,EACtG,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,YAEjE,cAAK,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAC,EAAE,GAAG,GAC7C,CACP,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,GAAG,GAAG,EAAuB;IACrH,OAAO,CACN,8BACa,iBAAiB,EAC7B,KAAK,EAAE;YACN,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,kBAAkB;YAC9B,SAAS,EAAE,QAAQ;SACnB,aAED,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,aACpH,8BAAiB,uBAAuB,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,aAC1H,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CACvC,KAAC,SAAS,IAET,MAAM,EAAE,wBAAwB,OAAO,EAAE,EACzC,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,EACvC,OAAO,EAAE,CAAC,GAAG,SAAS,EACtB,IAAI,EAAE,EAAE,EACR,QAAQ,EAAE,KAAK,IALV,OAAO,CAMX,CACF,CAAC,EAEF,KAAC,SAAS,IACT,MAAM,EAAC,sBAAsB,EAC7B,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EACtC,OAAO,EAAE,kBAAkB,CAAC,MAAM,GAAG,SAAS,EAC9C,IAAI,EAAE,EAAE,EACR,QAAQ,SACP,IACG,EAEN,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,aAC/D,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,oCAEzH,EACL,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,+DAEjH,IACC,EAEN,8BACa,oBAAoB,EAChC,SAAS,EAAC,oBAAoB,EAC9B,KAAK,EAAE;4BACN,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,IAAI;4BAClE,OAAO,EAAE,MAAM;4BACf,GAAG,EAAE,EAAE;4BACP,QAAQ,EAAE,MAAM;4BAChB,cAAc,EAAE,QAAQ;yBACxB,aAED,kBAAQ,IAAI,EAAC,QAAQ,iBAAa,4BAA4B,EAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,aAC5H,eAAM,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,8BAAsB,EACtD,eAAM,KAAK,EAAE,kBAAkB,CAAC,SAAS,CAAC,gDAAwC,IAC1E,EACT,kBAAQ,IAAI,EAAC,QAAQ,iBAAa,4BAA4B,EAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,CAAC,WAAW,CAAC,aAC9H,eAAM,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,8BAAsB,EACtD,eAAM,KAAK,EAAE,kBAAkB,CAAC,WAAW,CAAC,oCAA4B,IAChE,IACJ,IACD,EAEN,0BACE;oBACA,qFAAqF;oBACrF,yGAAyG;oBACzG,yEAAyE;oBACzE,iFAAiF;oBACjF,sDAAsD;oBACtD,kDAAkD;oBAClD,+FAA+F;oBAC/F,oFAAoF;oBACpF,4FAA4F;oBAC5F,iKAAiK;oBACjK,GAAG;oBACH,sJAAsJ;oBACtJ,wJAAwJ;iBACxJ,CAAC,IAAI,CAAC,IAAI,CAAC,GACL,IACH,CACN,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgC;IAC1D,OAAO;QACN,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,QAAQ;QACvB,UAAU,EAAE,YAAY;QACxB,GAAG,EAAE,CAAC;QACN,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,kBAAkB;QAChC,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gCAAgC;QAC1F,UAAU,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB;QACzE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB;QACxE,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,SAAS,EAAE,MAAM;KACjB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgC;IAC3D,OAAO;QACN,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB;QAC1E,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACzC,CAAC;AACH,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-screen.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The `/onboarding` route's TOP-LEVEL screen, PRD-009b. Mirrors `/buzzing`/`/login`'s posture
+ * (`buzzing-screen.tsx`, `setup-gate.tsx`): a single top-level component `main.tsx` mounts directly
+ * (via `boot-route.ts`), owning its own state machine rather than nesting inside the authenticated
+ * `<Shell>`. The state machine:
+ *
+ *   detect (+ an upfront health read for ob-AC-3) ─┬─ all installed AND healthy → short-circuit
+ *                                                   ├─ a remaining product is mid-flight/failed →
+ *                                                   │    resume straight into "installing" (ob-AC-16/17)
+ *                                                   └─ otherwise → the first-run hero (ob-AC-4/5)
+ *   hero ─ Standard → installing(all remaining, fixed order)         (ob-AC-6)
+ *        └ Advanced → picker → installing(exactly the chosen subset)  (ob-AC-7)
+ *   installing(queue, index) ── each card completes+dwells → advance → next index, else → health
+ *   health ── polls until ready → login
+ *   login ── device-code display, then a hard navigation to `/` on authenticated (ob-AC-14/15)
+ *
+ * Resume honesty (ob-AC-16): the Standard/Advanced choice is persisted client-side
+ * (onboarding-selection-store), so a resumed install uses `buildResumeQueue`, which excludes a
+ * not-installed product the operator explicitly deselected in Advanced. Without that memory, resume
+ * would fall back to only products that are genuinely mid-flight or failed, never silently
+ * reinstalling a deselected one.
+ */
+import React from "react";
+import { type OnboardingClient } from "./onboarding-client.js";
+import type { WireClient } from "../wire.js";
+export interface OnboardingScreenProps {
+    readonly assetBase?: string;
+    /** Test seam: inject a fake onboarding client, bypassing the real token + fetch wiring entirely. */
+    readonly client?: OnboardingClient;
+    /** Test seam: inject a fake proxied setup wire client for the login step. */
+    readonly wire?: WireClient;
+    /** Test seam: override the ~30s install dwell (ob-AC-11). */
+    readonly minDwellMs?: number;
+    /** Test seam: override the health-check poll interval. */
+    readonly healthPollMs?: number;
+    /** Test seam: override the login step's `/setup/state` poll interval. */
+    readonly loginPollMs?: number;
+    /** Test seam: called instead of the real hard navigation from the short-circuit summary. */
+    readonly onShortCircuitNavigate?: () => void;
+    /** Test seam: called instead of the real hard navigation once login completes (ob-AC-15). */
+    readonly onAuthenticated?: () => void;
+}
+export declare function OnboardingScreen({ assetBase, client: clientOverride, wire, minDwellMs, healthPollMs, loginPollMs, onShortCircuitNavigate, onAuthenticated, }: OnboardingScreenProps): React.JSX.Element;

package/dist/dashboard/web/onboarding/onboarding-screen.js

@@ -0,0 +1,161 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The `/onboarding` route's TOP-LEVEL screen, PRD-009b. Mirrors `/buzzing`/`/login`'s posture
+ * (`buzzing-screen.tsx`, `setup-gate.tsx`): a single top-level component `main.tsx` mounts directly
+ * (via `boot-route.ts`), owning its own state machine rather than nesting inside the authenticated
+ * `<Shell>`. The state machine:
+ *
+ *   detect (+ an upfront health read for ob-AC-3) ─┬─ all installed AND healthy → short-circuit
+ *                                                   ├─ a remaining product is mid-flight/failed →
+ *                                                   │    resume straight into "installing" (ob-AC-16/17)
+ *                                                   └─ otherwise → the first-run hero (ob-AC-4/5)
+ *   hero ─ Standard → installing(all remaining, fixed order)         (ob-AC-6)
+ *        └ Advanced → picker → installing(exactly the chosen subset)  (ob-AC-7)
+ *   installing(queue, index) ── each card completes+dwells → advance → next index, else → health
+ *   health ── polls until ready → login
+ *   login ── device-code display, then a hard navigation to `/` on authenticated (ob-AC-14/15)
+ *
+ * Resume honesty (ob-AC-16): the Standard/Advanced choice is persisted client-side
+ * (onboarding-selection-store), so a resumed install uses `buildResumeQueue`, which excludes a
+ * not-installed product the operator explicitly deselected in Advanced. Without that memory, resume
+ * would fall back to only products that are genuinely mid-flight or failed, never silently
+ * reinstalling a deselected one.
+ */
+import React from "react";
+import { AdvancedPicker } from "./advanced-picker.js";
+import { buildResumeQueue, DEFAULT_PRODUCT_DETECTION, detectionFor, hasResumableInstall, isFleetFullyInstalled, remainingProducts, } from "./contracts.js";
+import { clearSelection, persistSelection, readSelection } from "./onboarding-selection-store.js";
+import { HealthView } from "./health-view.js";
+import { InstallCard } from "./install-card.js";
+import { LoginStep } from "./login-step.js";
+import { createOnboardingClient } from "./onboarding-client.js";
+import { OnboardingHero } from "./onboarding-hero.js";
+import { useOnboardingToken } from "./use-onboarding-token.js";
+import { Button } from "../primitives.js";
+/** An empty install queue means nothing more to do, skip straight to the health gate. */
+function installingOrHealth(queue) {
+    return queue.length === 0 ? { kind: "health" } : { kind: "installing", queue, index: 0 };
+}
+/** ob-AC-3, the terminal "nothing to do" screen for an already-installed, healthy machine. */
+function ShortCircuitSummary({ onGoToDashboard }) {
+    return (_jsx("div", { "data-testid": "onboarding-short-circuit", style: { display: "flex", alignItems: "center", justifyContent: "center", minHeight: "100vh", padding: 32, background: "var(--bg-canvas)", textAlign: "center" }, children: _jsxs("div", { style: {
+                display: "flex",
+                flexDirection: "column",
+                alignItems: "center",
+                gap: 18,
+                maxWidth: 440,
+                padding: "40px 32px",
+                background: "var(--bg-surface)",
+                border: "1px solid var(--border-default)",
+                borderRadius: "var(--radius-xl)",
+            }, children: [_jsx("h1", { style: { fontSize: "var(--text-xl)", fontWeight: 700, color: "var(--text-primary)", margin: 0, letterSpacing: "-0.02em" }, children: "Your fleet is already up" }), _jsx("p", { style: { fontFamily: "var(--font-sans)", fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0, lineHeight: 1.5 }, children: "Every product is installed and the fleet reads healthy. Nothing to install here." }), _jsx(Button, { variant: "primary", size: "lg", "data-testid": "onboarding-go-to-dashboard", onClick: onGoToDashboard, children: "Go to dashboard" })] }) }));
+}
+/** The brief pre-detection placeholder, visible only for the moment detect+health are in flight. */
+function LoadingPlaceholder() {
+    return (_jsx("div", { "data-testid": "onboarding-loading", style: { display: "flex", alignItems: "center", justifyContent: "center", minHeight: "100vh", background: "var(--bg-canvas)" }, children: _jsx("p", { style: { fontFamily: "var(--font-mono)", fontSize: "var(--text-xs)", color: "var(--text-tertiary)" }, children: "Checking what is already installed\u2026" }) }));
+}
+export function OnboardingScreen({ assetBase = "assets", client: clientOverride, wire, minDwellMs, healthPollMs, loginPollMs, onShortCircuitNavigate, onAuthenticated, }) {
+    const token = useOnboardingToken();
+    // A test-injected client bypasses the token gate entirely (it never talks to the real token
+    // wiring); real usage waits for `useOnboardingToken` to resolve the `?t=` query param first.
+    const tokenReady = clientOverride !== undefined || token !== "";
+    const client = React.useMemo(() => clientOverride ?? createOnboardingClient(token), [clientOverride, token]);
+    const [phase, setPhase] = React.useState({ kind: "loading" });
+    const [detection, setDetection] = React.useState(null);
+    const startedEventFiredRef = React.useRef(false);
+    React.useEffect(() => {
+        if (!tokenReady || startedEventFiredRef.current)
+            return;
+        startedEventFiredRef.current = true;
+        client.sendEvent("onboarding_started");
+    }, [client, tokenReady]);
+    React.useEffect(() => {
+        if (!tokenReady)
+            return;
+        let alive = true;
+        void (async () => {
+            const [detectResult, healthResult] = await Promise.all([client.detect(), client.health()]);
+            if (!alive)
+                return;
+            setDetection(detectResult);
+            if (isFleetFullyInstalled(detectResult) && healthResult.ready) {
+                setPhase({ kind: "short-circuit" });
+            }
+            else if (hasResumableInstall(detectResult)) {
+                // Resume honors the operator's persisted subset so a deselected product is never
+                // silently reinstalled; falls back to only mid-flight/failed products when unknown.
+                setPhase(installingOrHealth(buildResumeQueue(detectResult, readSelection())));
+            }
+            else {
+                setPhase({ kind: "hero" });
+            }
+        })();
+        return () => {
+            alive = false;
+        };
+    }, [client, tokenReady]);
+    const chooseMode = React.useCallback((mode) => {
+        client.sendEvent("mode_selected", { mode });
+        if (mode === "standard") {
+            const queue = detection !== null ? remainingProducts(detection) : [];
+            persistSelection(queue);
+            setPhase(installingOrHealth(queue));
+        }
+        else {
+            setPhase({ kind: "picker" });
+        }
+    }, [client, detection]);
+    const confirmAdvanced = React.useCallback((selected) => {
+        persistSelection(selected);
+        setPhase(installingOrHealth(selected));
+    }, []);
+    const advanceInstall = React.useCallback(() => {
+        setPhase((current) => {
+            if (current.kind !== "installing")
+                return current;
+            const nextIndex = current.index + 1;
+            return nextIndex >= current.queue.length ? { kind: "health" } : { kind: "installing", queue: current.queue, index: nextIndex };
+        });
+    }, []);
+    const goToLogin = React.useCallback(() => setPhase({ kind: "login" }), []);
+    const handleShortCircuitNavigate = React.useCallback(() => {
+        clearSelection();
+        if (onShortCircuitNavigate !== undefined) {
+            onShortCircuitNavigate();
+            return;
+        }
+        if (typeof window !== "undefined")
+            window.location.assign("/");
+    }, [onShortCircuitNavigate]);
+    // Onboarding reached its terminal state (login complete): drop the persisted subset so a later
+    // visit starts clean rather than resuming against a stale choice.
+    const handleAuthenticated = React.useCallback(() => {
+        clearSelection();
+        if (onAuthenticated !== undefined)
+            onAuthenticated();
+    }, [onAuthenticated]);
+    switch (phase.kind) {
+        case "loading":
+            return _jsx(LoadingPlaceholder, {});
+        case "short-circuit":
+            return _jsx(ShortCircuitSummary, { onGoToDashboard: handleShortCircuitNavigate });
+        case "hero":
+            return _jsx(OnboardingHero, { assetBase: assetBase, onChooseStandard: () => chooseMode("standard"), onChooseAdvanced: () => chooseMode("advanced") });
+        case "picker":
+            return _jsx(AdvancedPicker, { products: detection !== null ? remainingProducts(detection) : [], assetBase: assetBase, onConfirm: confirmAdvanced });
+        case "installing": {
+            const product = phase.queue[phase.index];
+            const initialDetection = detection !== null ? detectionFor(detection, product) : DEFAULT_PRODUCT_DETECTION;
+            return (_jsx(InstallCard, { product: product, initialDetection: initialDetection, client: client, assetBase: assetBase, onAdvance: advanceInstall, minDwellMs: minDwellMs }, product));
+        }
+        case "health":
+            return _jsx(HealthView, { client: client, onReady: goToLogin, pollMs: healthPollMs });
+        case "login":
+            return _jsx(LoginStep, { onboardingClient: client, wire: wire, onAuthenticated: handleAuthenticated, pollMs: loginPollMs });
+        default: {
+            const exhaustive = phase;
+            return exhaustive;
+        }
+    }
+}
+//# sourceMappingURL=onboarding-screen.js.map