@legioncodeinc/hive 0.2.1 → 0.3.1

package/dist/dashboard/web/onboarding/onboarding-hero.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-hero.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-hero.tsx"],"names":[],"mappings":";AAaA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,sGAAsG;AACtG,MAAM,kBAAkB,GAAiC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAa3F,0EAA0E;AAC1E,SAAS,SAAS,CAAC,EAClB,GAAG,EACH,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,GAQN;IACA,OAAO,CACN,8BACc,MAAM,EACnB,SAAS,EAAE,qBAAqB,QAAQ,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B,EAAE,EACtG,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,OAAO,IAAI,EAAE,YAEjE,cAAK,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAC,EAAE,GAAG,GAC7C,CACP,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,GAAG,GAAG,EAAuB;IACrH,OAAO,CACN,8BACa,iBAAiB,EAC7B,KAAK,EAAE;YACN,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,kBAAkB;YAC9B,SAAS,EAAE,QAAQ;SACnB,aAED,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,aACpH,8BAAiB,uBAAuB,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,aAC1H,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CACvC,KAAC,SAAS,IAET,MAAM,EAAE,wBAAwB,OAAO,EAAE,EACzC,GAAG,EAAE,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,EACvC,OAAO,EAAE,CAAC,GAAG,SAAS,EACtB,IAAI,EAAE,EAAE,EACR,QAAQ,EAAE,KAAK,IALV,OAAO,CAMX,CACF,CAAC,EAEF,KAAC,SAAS,IACT,MAAM,EAAC,sBAAsB,EAC7B,GAAG,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EACtC,OAAO,EAAE,kBAAkB,CAAC,MAAM,GAAG,SAAS,EAC9C,IAAI,EAAE,EAAE,EACR,QAAQ,SACP,IACG,EAEN,eAAK,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,aAC/D,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,oCAEzH,EACL,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,+DAEjH,IACC,EAEN,8BACa,oBAAoB,EAChC,SAAS,EAAC,oBAAoB,EAC9B,KAAK,EAAE;4BACN,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS,IAAI;4BAClE,OAAO,EAAE,MAAM;4BACf,GAAG,EAAE,EAAE;4BACP,QAAQ,EAAE,MAAM;4BAChB,cAAc,EAAE,QAAQ;yBACxB,aAED,kBAAQ,IAAI,EAAC,QAAQ,iBAAa,4BAA4B,EAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,aAC5H,eAAM,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,8BAAsB,EACtD,eAAM,KAAK,EAAE,kBAAkB,CAAC,SAAS,CAAC,gDAAwC,IAC1E,EACT,kBAAQ,IAAI,EAAC,QAAQ,iBAAa,4BAA4B,EAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,CAAC,WAAW,CAAC,aAC9H,eAAM,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,8BAAsB,EACtD,eAAM,KAAK,EAAE,kBAAkB,CAAC,WAAW,CAAC,oCAA4B,IAChE,IACJ,IACD,EAEN,0BACE;oBACA,qFAAqF;oBACrF,yGAAyG;oBACzG,yEAAyE;oBACzE,iFAAiF;oBACjF,sDAAsD;oBACtD,kDAAkD;oBAClD,+FAA+F;oBAC/F,oFAAoF;oBACpF,4FAA4F;oBAC5F,iKAAiK;oBACjK,GAAG;oBACH,sJAAsJ;oBACtJ,wJAAwJ;iBACxJ,CAAC,IAAI,CAAC,IAAI,CAAC,GACL,IACH,CACN,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgC;IAC1D,OAAO;QACN,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,QAAQ;QACvB,UAAU,EAAE,YAAY;QACxB,GAAG,EAAE,CAAC;QACN,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,WAAW;QACpB,YAAY,EAAE,kBAAkB;QAChC,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gCAAgC;QAC1F,UAAU,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB;QACzE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB;QACxE,MAAM,EAAE,SAAS;QACjB,UAAU,EAAE,kBAAkB;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,SAAS,EAAE,MAAM;KACjB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgC;IAC3D,OAAO;QACN,QAAQ,EAAE,gBAAgB;QAC1B,UAAU,EAAE,GAAG;QACf,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB;QAC1E,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACzC,CAAC;AACH,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-screen.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The `/onboarding` route's TOP-LEVEL screen, PRD-009b. Mirrors `/buzzing`/`/login`'s posture
+ * (`buzzing-screen.tsx`, `setup-gate.tsx`): a single top-level component `main.tsx` mounts directly
+ * (via `boot-route.ts`), owning its own state machine rather than nesting inside the authenticated
+ * `<Shell>`. The state machine:
+ *
+ *   detect (+ an upfront health read for ob-AC-3) ─┬─ all installed AND healthy → short-circuit
+ *                                                   ├─ a remaining product is mid-flight/failed →
+ *                                                   │    resume straight into "installing" (ob-AC-16/17)
+ *                                                   └─ otherwise → the first-run hero (ob-AC-4/5)
+ *   hero ─ Standard → installing(all remaining, fixed order)         (ob-AC-6)
+ *        └ Advanced → picker → installing(exactly the chosen subset)  (ob-AC-7)
+ *   installing(queue, index) ── each card completes+dwells → advance → next index, else → health
+ *   health ── polls until ready → login
+ *   login ── device-code display, then a hard navigation to `/` on authenticated (ob-AC-14/15)
+ *
+ * Resume honesty (ob-AC-16): the Standard/Advanced choice is persisted client-side
+ * (onboarding-selection-store), so a resumed install uses `buildResumeQueue`, which excludes a
+ * not-installed product the operator explicitly deselected in Advanced. Without that memory, resume
+ * would fall back to only products that are genuinely mid-flight or failed, never silently
+ * reinstalling a deselected one.
+ */
+import React from "react";
+import { type OnboardingClient } from "./onboarding-client.js";
+import type { WireClient } from "../wire.js";
+export interface OnboardingScreenProps {
+    readonly assetBase?: string;
+    /** Test seam: inject a fake onboarding client, bypassing the real token + fetch wiring entirely. */
+    readonly client?: OnboardingClient;
+    /** Test seam: inject a fake proxied setup wire client for the login step. */
+    readonly wire?: WireClient;
+    /** Test seam: override the brief install dwell (ob-AC-11, revised). */
+    readonly minDwellMs?: number;
+    /** Test seam: override the health-check poll interval. */
+    readonly healthPollMs?: number;
+    /** Test seam: override the login step's `/setup/state` poll interval. */
+    readonly loginPollMs?: number;
+    /** Test seam: called instead of the real hard navigation from the short-circuit summary. */
+    readonly onShortCircuitNavigate?: () => void;
+    /** Test seam: called instead of the real hard navigation once login completes (ob-AC-15). */
+    readonly onAuthenticated?: () => void;
+}
+export declare function OnboardingScreen({ assetBase, client: clientOverride, wire, minDwellMs, healthPollMs, loginPollMs, onShortCircuitNavigate, onAuthenticated, }: OnboardingScreenProps): React.JSX.Element;

package/dist/dashboard/web/onboarding/onboarding-screen.js

@@ -0,0 +1,193 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The `/onboarding` route's TOP-LEVEL screen, PRD-009b. Mirrors `/buzzing`/`/login`'s posture
+ * (`buzzing-screen.tsx`, `setup-gate.tsx`): a single top-level component `main.tsx` mounts directly
+ * (via `boot-route.ts`), owning its own state machine rather than nesting inside the authenticated
+ * `<Shell>`. The state machine:
+ *
+ *   detect (+ an upfront health read for ob-AC-3) ─┬─ all installed AND healthy → short-circuit
+ *                                                   ├─ a remaining product is mid-flight/failed →
+ *                                                   │    resume straight into "installing" (ob-AC-16/17)
+ *                                                   └─ otherwise → the first-run hero (ob-AC-4/5)
+ *   hero ─ Standard → installing(all remaining, fixed order)         (ob-AC-6)
+ *        └ Advanced → picker → installing(exactly the chosen subset)  (ob-AC-7)
+ *   installing(queue, index) ── each card completes+dwells → advance → next index, else → health
+ *   health ── polls until ready → login
+ *   login ── device-code display, then a hard navigation to `/` on authenticated (ob-AC-14/15)
+ *
+ * Resume honesty (ob-AC-16): the Standard/Advanced choice is persisted client-side
+ * (onboarding-selection-store), so a resumed install uses `buildResumeQueue`, which excludes a
+ * not-installed product the operator explicitly deselected in Advanced. Without that memory, resume
+ * would fall back to only products that are genuinely mid-flight or failed, never silently
+ * reinstalling a deselected one.
+ */
+import React from "react";
+import { AdvancedPicker } from "./advanced-picker.js";
+import { buildResumeQueue, DEFAULT_PRODUCT_DETECTION, detectionFor, hasResumableInstall, isFleetFullyInstalled, remainingProducts, } from "./contracts.js";
+import { clearSelection, persistSelection, readSelection } from "./onboarding-selection-store.js";
+import { HealthView } from "./health-view.js";
+import { InstallCard } from "./install-card.js";
+import { LoginStep } from "./login-step.js";
+import { createOnboardingClient } from "./onboarding-client.js";
+import { OnboardingHero } from "./onboarding-hero.js";
+import { useOnboardingToken } from "./use-onboarding-token.js";
+import { Button } from "../primitives.js";
+/** An empty install queue means nothing more to do, skip straight to the health gate. */
+function installingOrHealth(queue) {
+    return queue.length === 0 ? { kind: "health" } : { kind: "installing", queue, index: 0 };
+}
+/** ob-AC-3, the terminal "nothing to do" screen for an already-installed, healthy machine. */
+function ShortCircuitSummary({ onGoToDashboard }) {
+    return (_jsx("div", { "data-testid": "onboarding-short-circuit", style: { display: "flex", alignItems: "center", justifyContent: "center", minHeight: "100vh", padding: 32, background: "var(--bg-canvas)", textAlign: "center" }, children: _jsxs("div", { style: {
+                display: "flex",
+                flexDirection: "column",
+                alignItems: "center",
+                gap: 18,
+                maxWidth: 440,
+                padding: "40px 32px",
+                background: "var(--bg-surface)",
+                border: "1px solid var(--border-default)",
+                borderRadius: "var(--radius-xl)",
+            }, children: [_jsx("h1", { style: { fontSize: "var(--text-xl)", fontWeight: 700, color: "var(--text-primary)", margin: 0, letterSpacing: "-0.02em" }, children: "Your fleet is already up" }), _jsx("p", { style: { fontFamily: "var(--font-sans)", fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0, lineHeight: 1.5 }, children: "Every product is installed and the fleet reads healthy. Nothing to install here." }), _jsx(Button, { variant: "primary", size: "lg", "data-testid": "onboarding-go-to-dashboard", onClick: onGoToDashboard, children: "Go to dashboard" })] }) }));
+}
+/**
+ * The terminal "no token" screen. The one-time token rides the opened URL (`/onboarding?t=...`) and
+ * is held in memory only, so landing here without one (a refresh after the URL scrub, the printed
+ * fallback link, a bookmark) can never recover on its own — the operator re-runs the installer,
+ * which mints a fresh token and reopens the portal.
+ */
+function MissingTokenNotice() {
+    return (_jsx("div", { "data-testid": "onboarding-missing-token", style: { display: "flex", alignItems: "center", justifyContent: "center", minHeight: "100vh", padding: 32, background: "var(--bg-canvas)", textAlign: "center" }, children: _jsxs("div", { style: {
+                display: "flex",
+                flexDirection: "column",
+                alignItems: "center",
+                gap: 18,
+                maxWidth: 480,
+                padding: "40px 32px",
+                background: "var(--bg-surface)",
+                border: "1px solid var(--border-default)",
+                borderRadius: "var(--radius-xl)",
+            }, children: [_jsx("h1", { style: { fontSize: "var(--text-xl)", fontWeight: 700, color: "var(--text-primary)", margin: 0, letterSpacing: "-0.02em" }, children: "This setup link has expired" }), _jsx("p", { style: { fontFamily: "var(--font-sans)", fontSize: "var(--text-sm)", color: "var(--text-secondary)", margin: 0, lineHeight: 1.5 }, children: "The setup page needs the one-time link the installer opens for you, and this visit did not carry it (refreshing this page drops it too). Re-run the installer to get a fresh link:" }), _jsx("code", { style: {
+                        fontFamily: "var(--font-mono)",
+                        fontSize: "var(--text-xs)",
+                        color: "var(--text-primary)",
+                        background: "var(--bg-canvas)",
+                        border: "1px solid var(--border-default)",
+                        borderRadius: "var(--radius-md)",
+                        padding: "10px 14px",
+                    }, children: "curl -fsSL https://get.theapiary.sh | sh" })] }) }));
+}
+/** The brief pre-detection placeholder, visible only for the moment detect+health are in flight. */
+function LoadingPlaceholder() {
+    return (_jsx("div", { "data-testid": "onboarding-loading", style: { display: "flex", alignItems: "center", justifyContent: "center", minHeight: "100vh", background: "var(--bg-canvas)" }, children: _jsx("p", { style: { fontFamily: "var(--font-mono)", fontSize: "var(--text-xs)", color: "var(--text-tertiary)" }, children: "Checking what is already installed\u2026" }) }));
+}
+export function OnboardingScreen({ assetBase = "assets", client: clientOverride, wire, minDwellMs, healthPollMs, loginPollMs, onShortCircuitNavigate, onAuthenticated, }) {
+    const token = useOnboardingToken();
+    // A test-injected client bypasses the token gate entirely (it never talks to the real token
+    // wiring); real usage waits for `useOnboardingToken` to resolve the `?t=` query param first.
+    // A RESOLVED-ABSENT token (`""`) is terminal: without it every installer call 401s, so the
+    // screen shows recovery guidance below instead of spinning on the loading placeholder forever.
+    const tokenReady = clientOverride !== undefined || (token !== null && token !== "");
+    const tokenMissing = clientOverride === undefined && token === "";
+    const client = React.useMemo(() => clientOverride ?? createOnboardingClient(token ?? ""), [clientOverride, token]);
+    const [phase, setPhase] = React.useState({ kind: "loading" });
+    const [detection, setDetection] = React.useState(null);
+    const startedEventFiredRef = React.useRef(false);
+    React.useEffect(() => {
+        if (!tokenReady || startedEventFiredRef.current)
+            return;
+        startedEventFiredRef.current = true;
+        client.sendEvent("onboarding_started");
+    }, [client, tokenReady]);
+    React.useEffect(() => {
+        if (!tokenReady)
+            return;
+        let alive = true;
+        void (async () => {
+            const [detectResult, healthResult] = await Promise.all([client.detect(), client.health()]);
+            if (!alive)
+                return;
+            setDetection(detectResult);
+            if (isFleetFullyInstalled(detectResult) && healthResult.ready) {
+                setPhase({ kind: "short-circuit" });
+            }
+            else if (hasResumableInstall(detectResult)) {
+                // Resume honors the operator's persisted subset so a deselected product is never
+                // silently reinstalled; falls back to only mid-flight/failed products when unknown.
+                setPhase(installingOrHealth(buildResumeQueue(detectResult, readSelection())));
+            }
+            else {
+                setPhase({ kind: "hero" });
+            }
+        })();
+        return () => {
+            alive = false;
+        };
+    }, [client, tokenReady]);
+    const chooseMode = React.useCallback((mode) => {
+        client.sendEvent("mode_selected", { mode });
+        if (mode === "standard") {
+            const queue = detection !== null ? remainingProducts(detection) : [];
+            persistSelection(queue);
+            setPhase(installingOrHealth(queue));
+        }
+        else {
+            setPhase({ kind: "picker" });
+        }
+    }, [client, detection]);
+    const confirmAdvanced = React.useCallback((selected) => {
+        persistSelection(selected);
+        setPhase(installingOrHealth(selected));
+    }, []);
+    const advanceInstall = React.useCallback(() => {
+        setPhase((current) => {
+            if (current.kind !== "installing")
+                return current;
+            const nextIndex = current.index + 1;
+            return nextIndex >= current.queue.length ? { kind: "health" } : { kind: "installing", queue: current.queue, index: nextIndex };
+        });
+    }, []);
+    const goToLogin = React.useCallback(() => setPhase({ kind: "login" }), []);
+    const handleShortCircuitNavigate = React.useCallback(() => {
+        clearSelection();
+        if (onShortCircuitNavigate !== undefined) {
+            onShortCircuitNavigate();
+            return;
+        }
+        if (typeof window !== "undefined")
+            window.location.assign("/");
+    }, [onShortCircuitNavigate]);
+    // Onboarding reached its terminal state (login complete): drop the persisted subset so a later
+    // visit starts clean rather than resuming against a stale choice.
+    const handleAuthenticated = React.useCallback(() => {
+        clearSelection();
+        if (onAuthenticated !== undefined)
+            onAuthenticated();
+    }, [onAuthenticated]);
+    if (tokenMissing)
+        return _jsx(MissingTokenNotice, {});
+    switch (phase.kind) {
+        case "loading":
+            return _jsx(LoadingPlaceholder, {});
+        case "short-circuit":
+            return _jsx(ShortCircuitSummary, { onGoToDashboard: handleShortCircuitNavigate });
+        case "hero":
+            return _jsx(OnboardingHero, { assetBase: assetBase, onChooseStandard: () => chooseMode("standard"), onChooseAdvanced: () => chooseMode("advanced") });
+        case "picker":
+            return _jsx(AdvancedPicker, { products: detection !== null ? remainingProducts(detection) : [], assetBase: assetBase, onConfirm: confirmAdvanced });
+        case "installing": {
+            const product = phase.queue[phase.index];
+            const initialDetection = detection !== null ? detectionFor(detection, product) : DEFAULT_PRODUCT_DETECTION;
+            return (_jsx(InstallCard, { product: product, initialDetection: initialDetection, client: client, assetBase: assetBase, onAdvance: advanceInstall, minDwellMs: minDwellMs }, product));
+        }
+        case "health":
+            return _jsx(HealthView, { client: client, onReady: goToLogin, pollMs: healthPollMs });
+        case "login":
+            return _jsx(LoginStep, { onboardingClient: client, wire: wire, onAuthenticated: handleAuthenticated, pollMs: loginPollMs });
+        default: {
+            const exhaustive = phase;
+            return exhaustive;
+        }
+    }
+}
+//# sourceMappingURL=onboarding-screen.js.map

package/dist/dashboard/web/onboarding/onboarding-screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-screen.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-screen.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,GAGjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAyB,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAY1C,yFAAyF;AACzF,SAAS,kBAAkB,CAAC,KAAoC;IAC/D,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAoBD,8FAA8F;AAC9F,SAAS,mBAAmB,CAAC,EAAE,eAAe,EAA4C;IACzF,OAAO,CACN,6BACa,0BAA0B,EACtC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,YAEhK,eACC,KAAK,EAAE;gBACN,OAAO,EAAE,MAAM;gBACf,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,QAAQ;gBACpB,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,GAAG;gBACb,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,mBAAmB;gBAC/B,MAAM,EAAE,iCAAiC;gBACzC,YAAY,EAAE,kBAAkB;aAChC,aAED,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,yCAExH,EACL,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,iGAEhI,EACJ,KAAC,MAAM,IAAC,OAAO,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,iBAAa,4BAA4B,EAAC,OAAO,EAAE,eAAe,gCAE5F,IACJ,GACD,CACN,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB;IAC1B,OAAO,CACN,6BACa,0BAA0B,EACtC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,YAEhK,eACC,KAAK,EAAE;gBACN,OAAO,EAAE,MAAM;gBACf,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,QAAQ;gBACpB,GAAG,EAAE,EAAE;gBACP,QAAQ,EAAE,GAAG;gBACb,OAAO,EAAE,WAAW;gBACpB,UAAU,EAAE,mBAAmB;gBAC/B,MAAM,EAAE,iCAAiC;gBACzC,YAAY,EAAE,kBAAkB;aAChC,aAED,aAAI,KAAK,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,4CAExH,EACL,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,mMAGhI,EACJ,eACC,KAAK,EAAE;wBACN,UAAU,EAAE,kBAAkB;wBAC9B,QAAQ,EAAE,gBAAgB;wBAC1B,KAAK,EAAE,qBAAqB;wBAC5B,UAAU,EAAE,kBAAkB;wBAC9B,MAAM,EAAE,iCAAiC;wBACzC,YAAY,EAAE,kBAAkB;wBAChC,OAAO,EAAE,WAAW;qBACpB,yDAGK,IACF,GACD,CACN,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB;IAC1B,OAAO,CACN,6BACa,oBAAoB,EAChC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,YAE9H,YAAG,KAAK,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,yDAAyC,GAC3I,CACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAChC,SAAS,GAAG,QAAQ,EACpB,MAAM,EAAE,cAAc,EACtB,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,sBAAsB,EACtB,eAAe,GACQ;IACvB,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,4FAA4F;IAC5F,6FAA6F;IAC7F,2FAA2F;IAC3F,+FAA+F;IAC/F,MAAM,UAAU,GAAG,cAAc,KAAK,SAAS,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,cAAc,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAmB,GAAG,EAAE,CAAC,cAAc,IAAI,sBAAsB,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IAErI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAwB,IAAI,CAAC,CAAC;IAE9E,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC,OAAO;YAAE,OAAO;QACxD,oBAAoB,CAAC,OAAO,GAAG,IAAI,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzB,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,UAAU;YAAE,OAAO;QACxB,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,CAAC,KAAK,IAAmB,EAAE;YAC/B,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,YAAY,CAAC,YAAY,CAAC,CAAC;YAC3B,IAAI,qBAAqB,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC/D,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YACrC,CAAC;iBAAM,IAAI,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,iFAAiF;gBACjF,oFAAoF;gBACpF,QAAQ,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACP,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5B,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACX,KAAK,GAAG,KAAK,CAAC;QACf,CAAC,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzB,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CACnC,CAAC,IAAoB,EAAQ,EAAE;QAC9B,MAAM,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACP,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;IACF,CAAC,EACD,CAAC,MAAM,EAAE,SAAS,CAAC,CACnB,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,QAAuC,EAAQ,EAAE;QAC3F,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QACnD,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;YACpB,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;gBAAE,OAAO,OAAO,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;YACpC,OAAO,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAChI,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjF,MAAM,0BAA0B,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QAC/D,cAAc,EAAE,CAAC;QACjB,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;YAC1C,sBAAsB,EAAE,CAAC;YACzB,OAAO;QACR,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE7B,+FAA+F;IAC/F,kEAAkE;IAClE,MAAM,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,GAAS,EAAE;QACxD,cAAc,EAAE,CAAC;QACjB,IAAI,eAAe,KAAK,SAAS;YAAE,eAAe,EAAE,CAAC;IACtD,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAEtB,IAAI,YAAY;QAAE,OAAO,KAAC,kBAAkB,KAAG,CAAC;IAEhD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,SAAS;YACb,OAAO,KAAC,kBAAkB,KAAG,CAAC;QAC/B,KAAK,eAAe;YACnB,OAAO,KAAC,mBAAmB,IAAC,eAAe,EAAE,0BAA0B,GAAI,CAAC;QAC7E,KAAK,MAAM;YACV,OAAO,KAAC,cAAc,IAAC,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAI,CAAC;QACjJ,KAAK,QAAQ;YACZ,OAAO,KAAC,cAAc,IAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,GAAI,CAAC;QAC/I,KAAK,YAAY,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC3G,OAAO,CACN,KAAC,WAAW,IAEX,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,gBAAgB,EAClC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,cAAc,EACzB,UAAU,EAAE,UAAU,IANjB,OAAO,CAOX,CACF,CAAC;QACH,CAAC;QACD,KAAK,QAAQ;YACZ,OAAO,KAAC,UAAU,IAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAI,CAAC;QACjF,KAAK,OAAO;YACX,OAAO,KAAC,SAAS,IAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAI,CAAC;QACvH,OAAO,CAAC,CAAC,CAAC;YACT,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,OAAO,UAAU,CAAC;QACnB,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/dashboard/web/onboarding/onboarding-selection-store.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Session-scoped memory of the product subset the operator chose (Standard = the whole fleet,
+ * Advanced = exactly the checked products). PRD-009b ob-AC-16 resume honesty: without this, an
+ * interrupted Advanced install resumes from `remainingProducts(detection)`, which is every
+ * not-installed product, so a product the operator explicitly DESELECTED would be silently
+ * reinstalled on re-entry. Persisting the choice lets `buildResumeQueue` exclude a not-installed
+ * product the operator never asked for, while still resuming any product that is genuinely
+ * mid-flight or failed (those are in-flight facts, not assumptions).
+ *
+ * Storage is `sessionStorage` (per browser session, cleared when the tab closes) and every access
+ * is guarded: a missing `window`, a storage exception (private mode, quota, disabled), or a
+ * malformed value all degrade to "no memory" rather than throwing into the onboarding flow.
+ */
+import { type InstallableProduct } from "./contracts.js";
+/** Persist the chosen installable subset (order-normalized to the fixed order, de-duplicated). */
+export declare function persistSelection(selected: readonly InstallableProduct[]): void;
+/** Read the persisted subset, or null when nothing valid is stored. */
+export declare function readSelection(): readonly InstallableProduct[] | null;
+/** Drop the persisted subset (call when onboarding reaches a terminal state). */
+export declare function clearSelection(): void;

package/dist/dashboard/web/onboarding/onboarding-selection-store.js

@@ -0,0 +1,76 @@
+/**
+ * Session-scoped memory of the product subset the operator chose (Standard = the whole fleet,
+ * Advanced = exactly the checked products). PRD-009b ob-AC-16 resume honesty: without this, an
+ * interrupted Advanced install resumes from `remainingProducts(detection)`, which is every
+ * not-installed product, so a product the operator explicitly DESELECTED would be silently
+ * reinstalled on re-entry. Persisting the choice lets `buildResumeQueue` exclude a not-installed
+ * product the operator never asked for, while still resuming any product that is genuinely
+ * mid-flight or failed (those are in-flight facts, not assumptions).
+ *
+ * Storage is `sessionStorage` (per browser session, cleared when the tab closes) and every access
+ * is guarded: a missing `window`, a storage exception (private mode, quota, disabled), or a
+ * malformed value all degrade to "no memory" rather than throwing into the onboarding flow.
+ */
+import { FIXED_PRODUCT_ORDER, isInstallableProduct } from "./contracts.js";
+const SELECTION_KEY = "hive-onboarding-selection";
+function storage() {
+    try {
+        if (typeof window === "undefined")
+            return null;
+        return window.sessionStorage;
+    }
+    catch {
+        return null;
+    }
+}
+/** Persist the chosen installable subset (order-normalized to the fixed order, de-duplicated). */
+export function persistSelection(selected) {
+    const store = storage();
+    if (store === null)
+        return;
+    const normalized = FIXED_PRODUCT_ORDER.filter((p) => selected.includes(p));
+    try {
+        store.setItem(SELECTION_KEY, JSON.stringify(normalized));
+    }
+    catch {
+        // A storage write failure is non-fatal: resume simply falls back to the conservative path.
+    }
+}
+/** Read the persisted subset, or null when nothing valid is stored. */
+export function readSelection() {
+    const store = storage();
+    if (store === null)
+        return null;
+    let raw;
+    try {
+        raw = store.getItem(SELECTION_KEY);
+    }
+    catch {
+        return null;
+    }
+    if (raw === null)
+        return null;
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return null;
+        const products = parsed.filter((v) => typeof v === "string" && isInstallableProduct(v));
+        return products.length > 0 ? FIXED_PRODUCT_ORDER.filter((p) => products.includes(p)) : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Drop the persisted subset (call when onboarding reaches a terminal state). */
+export function clearSelection() {
+    const store = storage();
+    if (store === null)
+        return;
+    try {
+        store.removeItem(SELECTION_KEY);
+    }
+    catch {
+        // Non-fatal.
+    }
+}
+//# sourceMappingURL=onboarding-selection-store.js.map

package/dist/dashboard/web/onboarding/onboarding-selection-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-selection-store.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/onboarding-selection-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAA2B,MAAM,gBAAgB,CAAC;AAEpG,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,SAAS,OAAO;IACf,IAAI,CAAC;QACJ,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC,cAAc,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,QAAuC;IACvE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACR,2FAA2F;IAC5F,CAAC;AACF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa;IAC5B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc;IAC7B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,IAAI,CAAC;QACJ,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,aAAa;IACd,CAAC;AACF,CAAC"}

package/dist/dashboard/web/onboarding/product-copy.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The onboarding CONTENT layer, PRD-009b ob-AC-8/ob-AC-10. Per-product benefit copy (drafted from
+ * each sibling repo's README voice: `honeycomb/README.md`, `doctor/README.md`, `nectar/README.md`)
+ * plus the npm-safety reassurance every install card carries and the Doctor-deselect warning the
+ * Advanced picker shows (ob-AC-7). Kept as data, not JSX, so copy review never touches a component.
+ */
+import type { InstallableProduct, OnboardingProduct } from "./contracts.js";
+export interface ProductCopy {
+    readonly title: string;
+    /** A punchy, honest headline (drafted from the product's README hero line). */
+    readonly headline: string;
+    /** Two short supporting lines, concrete, no invented claims. */
+    readonly lines: readonly [string, string];
+    /** Doctor carries the `Recommended` badge in the Advanced picker (ob-AC-7). */
+    readonly recommended: boolean;
+}
+/**
+ * Drafted verbatim from each product's README (see the task report for the source lines this
+ * copy distills): Doctor's "watchdog that keeps your agents' brain alive" + repair-ladder pitch,
+ * Honeycomb's "shared, persistent memory" + skillify/propagation pitch, Nectar's "stable identity
+ * that survives refactors" + the fourth-recall-arm pitch. Honest and concrete, no invented claims.
+ */
+export declare const PRODUCT_COPY: Record<InstallableProduct, ProductCopy>;
+/**
+ * ob-AC-10, the npm-safety reassurance every install card carries, verbatim. Checkably true for
+ * all four packages (`@legioncodeinc/{honeycomb,doctor,hive,nectar}` each publish with npm Trusted
+ * Publishing OIDC provenance per the parent PRD's overview), so this never overstates the claim.
+ */
+export declare const NPM_SAFETY_COPY = "Installed straight from the public npm registry. Every package here is signed and provenance verified through npm Trusted Publishing (OIDC), so what installs is exactly what we published.";
+/** ob-AC-7, shown when Doctor is deselected in the Advanced picker. */
+export declare const DOCTOR_DESELECT_WARNING = "Without Doctor, nothing restarts your daemons after a crash or reboot.";
+/**
+ * Resolve a product's brand mark URL. Honeycomb keeps its existing top-level, `assetBase`-relative
+ * route (`host.ts`'s `DASHBOARD_LOGO_PATH`, unchanged by this PRD); Doctor, Hive, and Nectar are
+ * served by the daemon agent at the new fixed `/assets/brand/<name>-mark.svg` route (see the task
+ * brief), independent of `assetBase`.
+ */
+export declare function productLogoUrl(product: OnboardingProduct, assetBase: string): string;
+/** The install-stage vocabulary (ob-AC-9): a short human label per stage, never a percentage. */
+export declare const INSTALL_STAGE_LABEL: Record<"resolving" | "downloading" | "linking" | "registering_service" | "completed" | "failed", string>;

package/dist/dashboard/web/onboarding/product-copy.js

@@ -0,0 +1,70 @@
+/**
+ * The onboarding CONTENT layer, PRD-009b ob-AC-8/ob-AC-10. Per-product benefit copy (drafted from
+ * each sibling repo's README voice: `honeycomb/README.md`, `doctor/README.md`, `nectar/README.md`)
+ * plus the npm-safety reassurance every install card carries and the Doctor-deselect warning the
+ * Advanced picker shows (ob-AC-7). Kept as data, not JSX, so copy review never touches a component.
+ */
+/**
+ * Drafted verbatim from each product's README (see the task report for the source lines this
+ * copy distills): Doctor's "watchdog that keeps your agents' brain alive" + repair-ladder pitch,
+ * Honeycomb's "shared, persistent memory" + skillify/propagation pitch, Nectar's "stable identity
+ * that survives refactors" + the fourth-recall-arm pitch. Honest and concrete, no invented claims.
+ */
+export const PRODUCT_COPY = {
+    doctor: {
+        title: "Doctor",
+        headline: "Doctor keeps your daemons alive while you are not looking.",
+        lines: [
+            "Restarts a crashed daemon, then climbs an escalating repair ladder if a plain restart is not enough.",
+            "Runs OS-supervised so it starts on boot and survives its own crashes too.",
+        ],
+        recommended: true,
+    },
+    honeycomb: {
+        title: "Honeycomb",
+        headline: "Honeycomb is the shared memory your agents keep across sessions.",
+        lines: [
+            "Captures what happens on every turn and recalls it in any harness, on any machine.",
+            "Mines reusable skills from real sessions and propagates them to your whole team automatically.",
+        ],
+        recommended: false,
+    },
+    nectar: {
+        title: "Nectar",
+        headline: "Nectar gives every file in your repo an identity that survives refactors.",
+        lines: [
+            "Tracks files through renames and moves, so memory tied to an old path never goes stale.",
+            "Feeds Honeycomb's recall a fourth arm, so asking where the login logic lives actually works.",
+        ],
+        recommended: false,
+    },
+};
+/**
+ * ob-AC-10, the npm-safety reassurance every install card carries, verbatim. Checkably true for
+ * all four packages (`@legioncodeinc/{honeycomb,doctor,hive,nectar}` each publish with npm Trusted
+ * Publishing OIDC provenance per the parent PRD's overview), so this never overstates the claim.
+ */
+export const NPM_SAFETY_COPY = "Installed straight from the public npm registry. Every package here is signed and provenance verified through npm Trusted Publishing (OIDC), so what installs is exactly what we published.";
+/** ob-AC-7, shown when Doctor is deselected in the Advanced picker. */
+export const DOCTOR_DESELECT_WARNING = "Without Doctor, nothing restarts your daemons after a crash or reboot.";
+/**
+ * Resolve a product's brand mark URL. Honeycomb keeps its existing top-level, `assetBase`-relative
+ * route (`host.ts`'s `DASHBOARD_LOGO_PATH`, unchanged by this PRD); Doctor, Hive, and Nectar are
+ * served by the daemon agent at the new fixed `/assets/brand/<name>-mark.svg` route (see the task
+ * brief), independent of `assetBase`.
+ */
+export function productLogoUrl(product, assetBase) {
+    if (product === "honeycomb")
+        return `${assetBase}/honeycomb-memory-cluster.svg`;
+    return `/assets/brand/${product}-mark.svg`;
+}
+/** The install-stage vocabulary (ob-AC-9): a short human label per stage, never a percentage. */
+export const INSTALL_STAGE_LABEL = {
+    resolving: "Resolving the package",
+    downloading: "Downloading from npm",
+    linking: "Linking the binary",
+    registering_service: "Registering the service",
+    completed: "Installed",
+    failed: "Installation failed",
+};
+//# sourceMappingURL=product-copy.js.map

package/dist/dashboard/web/onboarding/product-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-copy.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/product-copy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAA4C;IACpE,MAAM,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,4DAA4D;QACtE,KAAK,EAAE;YACN,sGAAsG;YACtG,2EAA2E;SAC3E;QACD,WAAW,EAAE,IAAI;KACjB;IACD,SAAS,EAAE;QACV,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,kEAAkE;QAC5E,KAAK,EAAE;YACN,oFAAoF;YACpF,gGAAgG;SAChG;QACD,WAAW,EAAE,KAAK;KAClB;IACD,MAAM,EAAE;QACP,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,2EAA2E;QACrF,KAAK,EAAE;YACN,yFAAyF;YACzF,8FAA8F;SAC9F;QACD,WAAW,EAAE,KAAK;KAClB;CACD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAC3B,6LAA6L,CAAC;AAE/L,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wEAAwE,CAAC;AAEhH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAA0B,EAAE,SAAiB;IAC3E,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO,GAAG,SAAS,+BAA+B,CAAC;IAChF,OAAO,iBAAiB,OAAO,WAAW,CAAC;AAC5C,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAG5B;IACH,SAAS,EAAE,uBAAuB;IAClC,WAAW,EAAE,sBAAsB;IACnC,OAAO,EAAE,oBAAoB;IAC7B,mBAAmB,EAAE,yBAAyB;IAC9C,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,qBAAqB;CAC7B,CAAC"}

package/dist/dashboard/web/onboarding/use-install-dwell.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The install card's MINIMUM DWELL hook, PRD-009b ob-AC-11 (revised). The card advances as soon as
+ * the install actually completes, held only long enough for the completed state to visibly register
+ * (a sub-second flash-through would read as broken); a longer install simply holds the card until
+ * its own terminal state. The dwell timer NEVER masks a failure, this hook only ever gates the
+ * advance-on-SUCCESS path; a failed card renders its error immediately regardless of how much
+ * dwell time has elapsed (the caller never calls this hook's `ready` with a failure in mind).
+ */
+/**
+ * The minimum time a card stays up after mount before a SUCCESSFUL install may advance. Short by
+ * design: the real install time drives the pace (originally ~30s per ob-AC-11, cut down because
+ * holding a finished install visibly idle reads as slowness, not polish). Overridable in tests.
+ */
+export declare const DEFAULT_MIN_DWELL_MS = 2000;
+export interface UseInstallDwellOptions {
+    /** Called exactly once, after `ready` has been true for the remaining minimum-dwell duration. */
+    readonly onDwellSatisfied: () => void;
+    /** Overrides {@link DEFAULT_MIN_DWELL_MS} (a test injects a short window). */
+    readonly minDwellMs?: number;
+}
+/**
+ * `ready` flips true once the install reaches its `completed` terminal state. The card's mount
+ * time is the dwell clock's start (installs begin the instant a card mounts), so a completion that
+ * lands at second 6 still holds the card until second 30; a completion that lands at second 40 has
+ * already satisfied the dwell and advances immediately.
+ */
+export declare function useInstallDwell(ready: boolean, options: UseInstallDwellOptions): void;

package/dist/dashboard/web/onboarding/use-install-dwell.js

@@ -0,0 +1,42 @@
+/**
+ * The install card's MINIMUM DWELL hook, PRD-009b ob-AC-11 (revised). The card advances as soon as
+ * the install actually completes, held only long enough for the completed state to visibly register
+ * (a sub-second flash-through would read as broken); a longer install simply holds the card until
+ * its own terminal state. The dwell timer NEVER masks a failure, this hook only ever gates the
+ * advance-on-SUCCESS path; a failed card renders its error immediately regardless of how much
+ * dwell time has elapsed (the caller never calls this hook's `ready` with a failure in mind).
+ */
+import React from "react";
+/**
+ * The minimum time a card stays up after mount before a SUCCESSFUL install may advance. Short by
+ * design: the real install time drives the pace (originally ~30s per ob-AC-11, cut down because
+ * holding a finished install visibly idle reads as slowness, not polish). Overridable in tests.
+ */
+export const DEFAULT_MIN_DWELL_MS = 2_000;
+/**
+ * `ready` flips true once the install reaches its `completed` terminal state. The card's mount
+ * time is the dwell clock's start (installs begin the instant a card mounts), so a completion that
+ * lands at second 6 still holds the card until second 30; a completion that lands at second 40 has
+ * already satisfied the dwell and advances immediately.
+ */
+export function useInstallDwell(ready, options) {
+    const { minDwellMs = DEFAULT_MIN_DWELL_MS } = options;
+    const startedAtRef = React.useRef(Date.now());
+    const firedRef = React.useRef(false);
+    // Read through a ref so a caller passing a fresh `onDwellSatisfied` closure every render never
+    // re-triggers the scheduling effect below (only `ready`/`minDwellMs` should do that).
+    const onDwellSatisfiedRef = React.useRef(options.onDwellSatisfied);
+    onDwellSatisfiedRef.current = options.onDwellSatisfied;
+    React.useEffect(() => {
+        if (!ready || firedRef.current)
+            return;
+        const elapsed = Date.now() - startedAtRef.current;
+        const remaining = Math.max(0, minDwellMs - elapsed);
+        const id = setTimeout(() => {
+            firedRef.current = true;
+            onDwellSatisfiedRef.current();
+        }, remaining);
+        return () => clearTimeout(id);
+    }, [ready, minDwellMs]);
+}
+//# sourceMappingURL=use-install-dwell.js.map

package/dist/dashboard/web/onboarding/use-install-dwell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-install-dwell.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/use-install-dwell.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAS1C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAA+B;IAC9E,MAAM,EAAE,UAAU,GAAG,oBAAoB,EAAE,GAAG,OAAO,CAAC;IACtD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAS,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErC,+FAA+F;IAC/F,sFAAsF;IACtF,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnE,mBAAmB,CAAC,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,mBAAmB,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/dashboard/web/onboarding/use-onboarding-token.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The one-time onboarding TOKEN hook, PRD-009b implementation note. The bootstrap mints the token
+ * and hands it to the browser via `/onboarding?t=...`; this hook reads it ONCE on mount, keeps it
+ * in React state (memory only) for the page's lifetime, and immediately strips it from the visible
+ * URL via `history.replaceState` so casual screen-sharing never exposes it. The read+strip is a side
+ * effect, so it runs inside `useEffect` (not a `useState` lazy initializer), render must stay pure.
+ */
+/**
+ * Read `?t=` once, strip it from the visible URL, and return the token. Tri-state so the caller can
+ * distinguish "still resolving" from "resolved, absent": `null` until the mount effect has run,
+ * `""` when the URL carried no token (the caller shows recovery guidance rather than spinning
+ * forever), and the token string otherwise.
+ */
+export declare function useOnboardingToken(): string | null;

package/dist/dashboard/web/onboarding/use-onboarding-token.js

@@ -0,0 +1,41 @@
+/**
+ * The one-time onboarding TOKEN hook, PRD-009b implementation note. The bootstrap mints the token
+ * and hands it to the browser via `/onboarding?t=...`; this hook reads it ONCE on mount, keeps it
+ * in React state (memory only) for the page's lifetime, and immediately strips it from the visible
+ * URL via `history.replaceState` so casual screen-sharing never exposes it. The read+strip is a side
+ * effect, so it runs inside `useEffect` (not a `useState` lazy initializer), render must stay pure.
+ */
+import React from "react";
+const TOKEN_QUERY_PARAM = "t";
+/**
+ * Read `?t=` once, strip it from the visible URL, and return the token. Tri-state so the caller can
+ * distinguish "still resolving" from "resolved, absent": `null` until the mount effect has run,
+ * `""` when the URL carried no token (the caller shows recovery guidance rather than spinning
+ * forever), and the token string otherwise.
+ */
+export function useOnboardingToken() {
+    const [token, setToken] = React.useState(null);
+    React.useEffect(() => {
+        if (typeof window === "undefined")
+            return;
+        const params = new URLSearchParams(window.location.search);
+        const fromUrl = params.get(TOKEN_QUERY_PARAM);
+        if (fromUrl === null || fromUrl === "") {
+            setToken("");
+            return;
+        }
+        setToken(fromUrl);
+        // Move it out of the visible URL (PRD implementation note), the token stays in memory only.
+        try {
+            const url = new URL(window.location.href);
+            url.searchParams.delete(TOKEN_QUERY_PARAM);
+            window.history.replaceState(null, "", `${url.pathname}${url.search}${url.hash}`);
+        }
+        catch {
+            // A `history` API failure (e.g. an unusual embedding context) must never block the flow ,
+            // the token still landed in state; only the cosmetic URL scrub is skipped.
+        }
+    }, []);
+    return token;
+}
+//# sourceMappingURL=use-onboarding-token.js.map

package/dist/dashboard/web/onboarding/use-onboarding-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-onboarding-token.js","sourceRoot":"","sources":["../../../../src/dashboard/web/onboarding/use-onboarding-token.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,iBAAiB,GAAG,GAAY,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IACjC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAE9D,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE;QACpB,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO;QAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACxC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACb,OAAO;QACR,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,CAAC;QAElB,4FAA4F;QAC5F,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACR,0FAA0F;YAC1F,2EAA2E;QAC5E,CAAC;IACF,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,KAAK,CAAC;AACd,CAAC"}