@octonodes/ui-extensions 0.2.13 → 0.2.26

package/README.md

@@ -41,6 +41,59 @@ ui: {
 
 The first public target is `node.inspector.inputs`. Undeclared or omitted inputs fall back to the standard inspector form.
 
+## Native app contributions (v3)
+
+Installed apps can add navbar/navigation/search launchers, panels, Octonode tabs,
+workflow node bodies and context-menu actions, task badges/details, document and
+editor operations, Git/table/execution views, and settings sections. A hosted app
+page or backend is optional. These changes require the SDK and CLI built from the
+accompanying branch; they are not published yet.
+
+Views use `defineExtension(target, Component)` and `useExtension(target)` from
+`@octonodes/ui-extensions/react`. Actions use `defineAction(target, handler)` from
+`@octonodes/ui-extensions`. The CLI bundles and hashes each immutable browser entry.
+The generated runtime checks the definition's target and action/view kind at startup,
+then calls `startExtension` or `startAction`.
+
+```tsx
+import { defineExtension, useExtension, Section, Button } from "@octonodes/ui-extensions/react";
+export default defineExtension("shell.panel", function Assistant() {
+  const api = useExtension("shell.panel");
+  return (
+    <Section title="Claude Code">
+      <Button onPress={() => void api.ui.openAssistant("Help with this resource.")}>Open assistant</Button>
+    </Section>
+  );
+});
+```
+
+```ts
+import { defineAction } from "@octonodes/ui-extensions";
+export default defineAction("node.action", async (api) => {
+  if (!api.signal.aborted) await api.ui.openAssistant(`Explain node ${api.context.nodeId}`);
+});
+```
+
+The target context contains resource IDs, revisions, selection ranges, and bounded
+metadata batches, never automatic document/file/task bodies. `ui.openPanel`
+opens an own declared view; `ui.openAssistant` hands off to the existing native
+assistant and its authorized tools. `tabs.list/update/undo` operate on registered
+personal layout groups with revision checks. `edits.propose` opens native review
+for a captured file/document draft; native Save owns persistence. Mutating host
+commands require recent native user interaction. No raw filesystem/process or
+private Studio API access is granted.
+
+Node views and task badges return display-only sections named for captured IDs,
+using one sandbox per canvas/task view and at most 100 resources. Other views can
+use host-owned controls. An action has a captured invocation ID and abort signal;
+it completes automatically and has a sixty-second deadline. Legacy node input
+extensions still use protocol v1; native app contributions use protocol v2.
+
+The full target catalog, runnable example, permissions, limits, and actual native
+screenshots are in the engine's native extensions guide (`docs/app-extensions/README.md` in the engine checkout).
+When using a local engine checkout, open `docs/app-extensions/README.md` for the
+branch version. The older examples below describe the separate v1/v2 contracts.
+
 ## Extension-only apps
 
 Apps can contribute only a workspace block; a page and backend are optional. Use the same
@@ -57,9 +110,9 @@ See `examples/workspace-notice-app` and `docs/plugins.md` in the engine reposito
 
 ## Self-hosted apps
 
-This is also the SDK selected for Octonode's developer-authored app extensions. The engine owns its source in `packages/ui-extensions`; `scripts/sync-plugin-sdk.mjs` synchronizes the public package into `octonode-devtools`. Do not create a second app UI SDK.
+This is also the SDK selected for Octonode's developer-authored app extensions. The engine owns its source in `packages/ui-extensions`; `scripts/sync/plugin/sdk.mjs` synchronizes the public package into `octonode-devtools`. Do not create a second app UI SDK.
 
-App targets are `app.page` and `workspace.block`. Register an app in Partner → Apps, publish its HTTPS application URL and extension bundle digests, then install it from Studio → App marketplace. Plugin marketplace remains dedicated to executable node plugins.
+Legacy self-hosted app targets are `app.page` and `workspace.block`. Register an app in Partner → Apps, publish its HTTPS application URL and extension bundle digests, then install it from Studio → App marketplace. Plugin marketplace remains dedicated to executable node plugins.
 
 App controls use the same host design system: `NodeForm`, `Section`, `Button`, and `TextField`. `InputField` is only for node inspectors. Bundle your entry as a browser IIFE, including React and this SDK, and call `startExtension`:
 
@@ -102,7 +155,51 @@ Host the compiled JavaScript with CORS enabled for the Studio origin. Hash the e
 
 The five-minute `octo_app_` bearer is specific to the app installation, approved version, and opening user. Your backend must verify it on **every request** with `GET https://octonodes.com/api/apps/runtime/session`, then check that the returned `appId` equals your registered app ID. Use the verified workspace/user identity rather than values supplied by the browser. Never log the bearer or cache verification. Uninstall, consent changes, session expiry, and removed membership revoke subsequent access.
 
-For standalone pages, Octonode opens the registered application URL with `#octonode_session=…`. Read the fragment and immediately remove it using `history.replaceState`; keep the credential in memory. App backends can use `POST /api/apps/runtime/data` for consented project/table/row operations, and `POST /api/apps/runtime/executions` on the cloud gateway for workflow execution. Neither credential works as a general Octonode login. See the engine’s `docs/plugins.md` for request examples.
+## Hosted pages and routing
+
+Use `connectHostedApp()` once when the page mounts, subscribe to its snapshot, and
+call `dispose()` on unmount. Studio displays the hosted page inline and delivers
+short-lived sessions through an origin-checked, window-bound handshake. Tokens stay
+in memory. `app.fetch("/api/projects")` sends the bearer only to your own backend;
+that backend must still verify it with `connectAppServer` on every request.
+
+For React apps, wrap the workspace UI in `OctonodeAppProvider` from
+`@octonodes/ui-extensions/app/react`. It verifies `/api/context` before rendering
+children. Pass every page route in `navigation`, including the overview (`/`), to
+display them in Studio's app sidebar. Studio does not discover routes from your
+hosting provider or browser router. An app can render its own top navbar inside
+the provider; this does not replace sidebar registration. The generated React
+app keeps its navbar off by default; render `<App showNavbar />` to enable it.
+The generated server verifies this route with `connectAppServer`. A direct visit
+without a session shows a translated access landing screen and no workspace UI.
+The provider also shows connecting, expired-session, and verification-error states.
+Customizing this UI does not replace backend session and installation checks.
+
+In the Octonode source checkout, preview the screen with
+`yarn workspace @octonode/ui-extensions dev` on port 5185, then open `/dev/` in your browser.
+Use `?state=expired`, `?state=connecting`, or `?state=error` to preview the other states.
+With that preview running, run `node --test packages/ui-extensions/tests/app/access.test.mjs`
+to check mobile reflow, private-content protection, and recovery after a refreshed token.
+
+```ts
+import { connectHostedApp } from "@octonodes/ui-extensions/app";
+const app = connectHostedApp();
+const unsubscribe = app.subscribe(() => render(app.getSnapshot()));
+app.navigate("/products?sort=name");
+// On unmount: unsubscribe(); app.dispose();
+```
+
+Normal `history.pushState`, `replaceState`, and back/forward navigation work with
+browser routers. Embedded paths appear in Studio’s `appPath` query parameter;
+standalone pages use their own URL. Serve your app shell for nested page routes.
+Do not use Studio’s `/studio/apps/...` path as your app router basename.
+
+Development starts with zero data grants. Explicit administrator consent selects
+actions and projects for one hour; heartbeats extend only the ten-minute idle
+session, not the consent. Source edits on the same host retain consent; host or
+action changes clear it. See the [development guide](https://playbook.octonodes.com/docs/apps/development).
+
+The hosted page's HTML and static assets must be loadable before the iframe session handoff. Keep private workspace content behind the provider and private backend routes behind bearer verification. App backends can use `POST /api/apps/runtime/data` for consented project/table/row operations, and `POST /api/apps/runtime/executions` on the cloud gateway for workflow execution. Neither credential works as a general Octonode login. See the engine’s `docs/plugins.md` for request examples.
 
 For legacy self-hosted v1 apps, developers host app backends and versioned extension assets themselves. Octonode-managed app hosting is reserved for a future paid service. App release metadata pins extension URLs and SHA-256 digests; publishing metadata does not deploy a backend.
 
@@ -139,9 +236,9 @@ The backend helper verifies the bearer on each `connectAppServer` call and uses
 ## End-to-end app guides
 
 The public Playbook is the source for the complete authoring path:
-[quickstart](https://playbook.octonodes.com/docs/apps-quickstart),
-[project configuration](https://playbook.octonodes.com/docs/apps-configuration),
-[SDK imports and permissions](https://playbook.octonodes.com/docs/apps-sdk),
-[hosting](https://playbook.octonodes.com/docs/apps-hosting), and
-[publishing and updates](https://playbook.octonodes.com/docs/apps-publishing).
+[quickstart](https://playbook.octonodes.com/docs/apps/quickstart),
+[project configuration](https://playbook.octonodes.com/docs/apps/configuration),
+[SDK imports and permissions](https://playbook.octonodes.com/docs/apps/sdk),
+[hosting](https://playbook.octonodes.com/docs/apps/hosting), and
+[publishing and updates](https://playbook.octonodes.com/docs/apps/publishing).
 The CLI scaffold supplies a runnable extension-only or full app example.

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.d.ts

@@ -0,0 +1,3 @@
+import type { AppAccessScreenProps } from "./AppAccessScreen.types.js";
+export declare function AppAccessScreen({ status }: AppAccessScreenProps): import("react").JSX.Element;
+//# sourceMappingURL=AppAccessScreen.d.ts.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppAccessScreen.d.ts","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,wBAAgB,eAAe,CAAC,EAAE,MAAM,EAAE,EAAE,oBAAoB,+BA+I/D"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.js

@@ -0,0 +1,17 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+// Generated from packages/ui-extensions/src/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.tsx. Do not edit; run the Octonode SDK sync.
+import { useEffect, useState } from "react";
+import { locales } from "../../../locales/index.js";
+import { ACCESS_SCREEN_CSS, OCTONODE_LOGO } from "./constants.js";
+export function AppAccessScreen({ status }) {
+    const [language, setLanguage] = useState("en");
+    useEffect(() => {
+        const lang = (document.documentElement.lang || navigator.language).split("-")[0];
+        if (Object.prototype.hasOwnProperty.call(locales, lang))
+            setLanguage(lang);
+    }, []);
+    const t = locales[language];
+    const connecting = status === "connecting";
+    return (_jsxs("div", { className: `octo-access octo-access-${status}`, lang: language, children: [_jsx("style", { children: ACCESS_SCREEN_CSS }), _jsxs("header", { className: "octo-access-header", children: [_jsxs("a", { className: "octo-access-brand", href: "https://octonodes.com", target: "_blank", rel: "noopener noreferrer", children: [_jsx("img", { src: OCTONODE_LOGO, alt: "" }), "octonode"] }), _jsxs("a", { className: "octo-access-guide", href: "https://playbook.octonodes.com/docs/apps", target: "_blank", rel: "noopener noreferrer", children: [t.guide, _jsx("span", { "aria-hidden": "true", children: "\u2197" })] })] }), _jsxs("main", { className: "octo-access-main", children: [_jsxs("section", { className: "octo-access-copy", "aria-labelledby": "octo-access-title", children: [_jsxs("p", { className: "octo-access-status", role: status === "expired" || status === "error" ? "alert" : "status", children: [_jsx("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.7", "aria-hidden": "true", children: connecting ? (_jsx("path", { d: "M20 12a8 8 0 1 1-8-8" })) : (_jsxs(_Fragment, { children: [_jsx("rect", { x: "6", y: "10", width: "12", height: "10", rx: "2" }), _jsx("path", { d: "M9 10V7a3 3 0 0 1 6 0v3" })] })) }), t[`${status}Status`]] }), _jsx("h1", { id: "octo-access-title", children: t[`${status}Title`] }), _jsx("p", { className: "octo-access-description", children: t[`${status}Description`] }), !connecting && (_jsxs(_Fragment, { children: [_jsxs("div", { className: "octo-access-actions", children: [_jsxs("a", { className: "octo-access-primary", href: "https://octonodes.com/studio", target: "_blank", rel: "noopener noreferrer", children: [t.open, _jsx("span", { "aria-hidden": "true", children: "\u2197" })] }), _jsx("a", { className: "octo-access-secondary", href: "https://playbook.octonodes.com/docs/apps", target: "_blank", rel: "noopener noreferrer", children: t.about })] }), _jsxs("p", { className: "octo-access-hint", children: [_jsxs("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.5", "aria-hidden": "true", children: [_jsx("path", { d: "m12 3 8 3v6c0 5-8 9-8 9s-8-4-8-9V6Z" }), _jsx("path", { d: "m8 12 3 3 5-6" })] }), t.hint] })] }))] }), _jsxs("div", { className: "octo-access-visual", "aria-hidden": "true", children: [_jsx("div", { className: "octo-access-orbit" }), _jsxs("div", { className: "octo-access-workspace", children: [_jsxs("div", { className: "octo-access-window", children: [_jsx("i", {}), _jsx("i", {}), _jsx("i", {}), _jsx("span", { children: "octonode / workspace" }), _jsx("b", {})] }), _jsxs("div", { className: "octo-access-body", children: [_jsxs("div", { className: "octo-access-workspace-title", children: [_jsx("img", { src: OCTONODE_LOGO, alt: "" }), t.workspace] }), _jsx("div", { className: "octo-access-skeleton" }), _jsxs("div", { className: "octo-access-flow", children: [_jsx("div", { className: "octo-access-node", children: _jsxs("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.5", children: [_jsx("rect", { x: "3", y: "3", width: "7", height: "7", rx: "2" }), _jsx("rect", { x: "14", y: "3", width: "7", height: "7", rx: "2" }), _jsx("rect", { x: "3", y: "14", width: "7", height: "7", rx: "2" }), _jsx("rect", { x: "14", y: "14", width: "7", height: "7", rx: "2" })] }) }), _jsx("div", { className: "octo-access-wire" }), _jsx("div", { className: "octo-access-node active", children: _jsxs("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.5", children: [_jsx("path", { d: "m12 3 8 5v8l-8 5-8-5V8Z" }), _jsx("path", { d: "m4 8 8 5 8-5M12 13v8" })] }) }), _jsx("div", { className: "octo-access-wire" }), _jsx("div", { className: "octo-access-node", children: _jsxs("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.5", children: [_jsx("ellipse", { cx: "12", cy: "5", rx: "8", ry: "3" }), _jsx("path", { d: "M4 5v14c0 4 16 4 16 0V5M4 12c0 4 16 4 16 0" })] }) })] }), _jsxs("div", { className: "octo-access-placeholder", children: [_jsx("i", {}), _jsx("i", {})] }), _jsxs("div", { className: "octo-access-placeholder", children: [_jsx("i", {}), _jsx("i", {})] })] })] }), _jsx("div", { className: "octo-access-lock", children: _jsxs("svg", { viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.5", children: [_jsx("rect", { x: "5", y: "10", width: "14", height: "11", rx: "3" }), _jsx("path", { d: "M8 10V7a4 4 0 0 1 8 0v3M12 14v3" })] }) }), _jsx("p", { className: "octo-access-caption", children: t.caption })] })] }), _jsxs("footer", { className: "octo-access-footer", children: [_jsx("p", { children: t.footer }), _jsx("a", { href: "https://playbook.octonodes.com/docs/apps", target: "_blank", rel: "noopener noreferrer", children: t.help })] })] }));
+}
+//# sourceMappingURL=AppAccessScreen.js.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppAccessScreen.js","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.tsx"],"names":[],"mappings":";AAAA,iJAAiJ;AACjJ,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGlE,MAAM,UAAU,eAAe,CAAC,EAAE,MAAM,EAAwB;IAC9D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAuB,IAAI,CAAC,CAAC;IACrE,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,WAAW,CAAC,IAA4B,CAAC,CAAC;IACrG,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,KAAK,YAAY,CAAC;IAE3C,OAAO,CACL,eAAK,SAAS,EAAE,2BAA2B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,aACjE,0BAAQ,iBAAiB,GAAS,EAClC,kBAAQ,SAAS,EAAC,oBAAoB,aACpC,aAAG,SAAS,EAAC,mBAAmB,EAAC,IAAI,EAAC,uBAAuB,EAAC,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,aACrG,cAAK,GAAG,EAAE,aAAa,EAAE,GAAG,EAAC,EAAE,GAAG,gBAEhC,EACJ,aACE,SAAS,EAAC,mBAAmB,EAC7B,IAAI,EAAC,0CAA0C,EAC/C,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,aAExB,CAAC,CAAC,KAAK,EACR,8BAAkB,MAAM,uBAAS,IAC/B,IACG,EACT,gBAAM,SAAS,EAAC,kBAAkB,aAChC,mBAAS,SAAS,EAAC,kBAAkB,qBAAiB,mBAAmB,aACvE,aAAG,SAAS,EAAC,oBAAoB,EAAC,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,aACrG,cAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,iBAAa,MAAM,YAC5F,UAAU,CAAC,CAAC,CAAC,CACZ,eAAM,CAAC,EAAC,sBAAsB,GAAG,CAClC,CAAC,CAAC,CAAC,CACF,8BACE,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,GAAG,EACnD,eAAM,CAAC,EAAC,yBAAyB,GAAG,IACnC,CACJ,GACG,EACL,CAAC,CAAC,GAAG,MAAM,QAAQ,CAAC,IACnB,EACJ,aAAI,EAAE,EAAC,mBAAmB,YAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAM,EACrD,YAAG,SAAS,EAAC,yBAAyB,YAAE,CAAC,CAAC,GAAG,MAAM,aAAa,CAAC,GAAK,EACrE,CAAC,UAAU,IAAI,CACd,8BACE,eAAK,SAAS,EAAC,qBAAqB,aAElC,aACE,SAAS,EAAC,qBAAqB,EAC/B,IAAI,EAAC,8BAA8B,EACnC,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,aAExB,CAAC,CAAC,IAAI,EACP,8BAAkB,MAAM,uBAAS,IAC/B,EACJ,YACE,SAAS,EAAC,uBAAuB,EACjC,IAAI,EAAC,0CAA0C,EAC/C,MAAM,EAAC,QAAQ,EACf,GAAG,EAAC,qBAAqB,YAExB,CAAC,CAAC,KAAK,GACN,IACA,EACN,aAAG,SAAS,EAAC,kBAAkB,aAC7B,eAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,iBAAa,MAAM,aAC7F,eAAM,CAAC,EAAC,qCAAqC,GAAG,EAChD,eAAM,CAAC,EAAC,eAAe,GAAG,IACtB,EACL,CAAC,CAAC,IAAI,IACL,IACH,CACJ,IACO,EACV,eAAK,SAAS,EAAC,oBAAoB,iBAAa,MAAM,aACpD,cAAK,SAAS,EAAC,mBAAmB,GAAG,EACrC,eAAK,SAAS,EAAC,uBAAuB,aACpC,eAAK,SAAS,EAAC,oBAAoB,aACjC,aAAK,EACL,aAAK,EACL,aAAK,EACL,kDAAiC,EACjC,aAAK,IACD,EACN,eAAK,SAAS,EAAC,kBAAkB,aAC/B,eAAK,SAAS,EAAC,6BAA6B,aAC1C,cAAK,GAAG,EAAE,aAAa,EAAE,GAAG,EAAC,EAAE,GAAG,EACjC,CAAC,CAAC,SAAS,IACR,EACN,cAAK,SAAS,EAAC,sBAAsB,GAAG,EACxC,eAAK,SAAS,EAAC,kBAAkB,aAC/B,cAAK,SAAS,EAAC,kBAAkB,YAC/B,eAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,aAC1E,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAG,EAChD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,GAAG,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAG,EACjD,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAG,EACjD,eAAM,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,GAAG,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAG,IAC9C,GACF,EACN,cAAK,SAAS,EAAC,kBAAkB,GAAG,EACpC,cAAK,SAAS,EAAC,yBAAyB,YACtC,eAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,aAC1E,eAAM,CAAC,EAAC,yBAAyB,GAAG,EACpC,eAAM,CAAC,EAAC,sBAAsB,GAAG,IAC7B,GACF,EACN,cAAK,SAAS,EAAC,kBAAkB,GAAG,EACpC,cAAK,SAAS,EAAC,kBAAkB,YAC/B,eAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,aAC1E,kBAAS,EAAE,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,EAAC,EAAE,EAAC,GAAG,GAAG,EACxC,eAAM,CAAC,EAAC,4CAA4C,GAAG,IACnD,GACF,IACF,EACN,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAK,EACL,aAAK,IACD,EACN,eAAK,SAAS,EAAC,yBAAyB,aACtC,aAAK,EACL,aAAK,IACD,IACF,IACF,EACN,cAAK,SAAS,EAAC,kBAAkB,YAC/B,eAAK,OAAO,EAAC,WAAW,EAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,cAAc,EAAC,WAAW,EAAC,KAAK,aAC1E,eAAM,CAAC,EAAC,GAAG,EAAC,CAAC,EAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,EAAE,EAAC,GAAG,GAAG,EACnD,eAAM,CAAC,EAAC,iCAAiC,GAAG,IACxC,GACF,EACN,YAAG,SAAS,EAAC,qBAAqB,YAAE,CAAC,CAAC,OAAO,GAAK,IAC9C,IACD,EACP,kBAAQ,SAAS,EAAC,oBAAoB,aACpC,sBAAI,CAAC,CAAC,MAAM,GAAK,EACjB,YAAG,IAAI,EAAC,0CAA0C,EAAC,MAAM,EAAC,QAAQ,EAAC,GAAG,EAAC,qBAAqB,YACzF,CAAC,CAAC,IAAI,GACL,IACG,IACL,CACP,CAAC;AACJ,CAAC"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.d.ts

@@ -0,0 +1,4 @@
+export type AppAccessScreenProps = {
+    status: "standalone" | "expired" | "connecting" | "error";
+};
+//# sourceMappingURL=AppAccessScreen.types.d.ts.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppAccessScreen.types.d.ts","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,CAAC;CAC3D,CAAC"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=AppAccessScreen.types.js.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppAccessScreen.types.js","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/AppAccessScreen.types.ts"],"names":[],"mappings":""}

package/dist/app/OctonodeAppProvider/AppAccessScreen/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const ACCESS_SCREEN_CSS = "\n.octo-access{--octo-ink:#252536;--octo-muted:#636374;--octo-coral:#ff765f;box-sizing:border-box;min-height:100svh;background:#f7f8fc;color:var(--octo-ink);font-family:\"Avenir Next\",Avenir,\"Segoe UI\",sans-serif;font-size:16px;line-height:1.5;padding:0 48px;isolation:isolate}\n.octo-access *{box-sizing:border-box}.octo-access a{color:inherit;text-decoration:none}.octo-access a:focus-visible{outline:3px solid #af3e29;outline-offset:5px}.octo-access a:hover{text-decoration:underline}\n.octo-access-header,.octo-access-footer{max-width:1120px;margin:auto;display:flex;justify-content:space-between;align-items:center;gap:24px}.octo-access-header{height:100px;border-bottom:1px solid #e3e5ee}.octo-access-brand{display:flex;align-items:center;gap:10px;font-size:23px;font-weight:750;letter-spacing:-1px}.octo-access-brand img{width:36px;height:36px}.octo-access a.octo-access-guide{font-size:14px;color:var(--octo-muted);display:flex;align-items:center;gap:8px}\n.octo-access-main{max-width:1120px;min-height:calc(100svh - 185px);margin:auto;display:grid;grid-template-columns:1.05fr 1fr;align-items:center;gap:70px;padding:72px 0}.octo-access-copy{max-width:520px}.octo-access-status{display:inline-flex;align-items:center;gap:8px;margin:0 0 24px;padding:6px 11px;border:1px solid #dedeea;background:#eeeff6;border-radius:6px;font-size:12px;font-weight:600;color:#515164}.octo-access-status svg{width:14px;height:14px}.octo-access h1{margin:0;font-size:clamp(40px,4.3vw,62px);font-weight:650;letter-spacing:-2.8px;line-height:1.09;text-wrap:balance}.octo-access-description{max-width:430px;margin:24px 0 30px;font-size:17px;line-height:1.75;color:var(--octo-muted)}.octo-access-actions{display:flex;align-items:center;gap:23px;flex-wrap:wrap}.octo-access a.octo-access-primary{display:inline-flex;align-items:center;justify-content:center;gap:12px;min-height:50px;padding:13px 21px;border-radius:9px;background:var(--octo-ink);color:#fff;font-size:14px;font-weight:650;box-shadow:0 4px 0 #25253612}.octo-access a.octo-access-primary:hover{background:#404056;text-decoration:none}.octo-access-secondary{font-size:14px;font-weight:600}.octo-access-hint{display:flex;align-items:flex-start;gap:9px;max-width:415px;margin:27px 0 0;color:var(--octo-muted);font-size:12px;line-height:1.65}.octo-access-hint svg{flex:none;width:15px;height:15px;margin-top:2px}\n.octo-access-visual{position:relative;aspect-ratio:1;display:grid;place-items:center}.octo-access-orbit{position:absolute;width:87%;aspect-ratio:1;border:1px solid #dfe2ee;border-radius:50%}.octo-access-orbit::before{content:\"\";position:absolute;inset:42px;border:1px dashed #dfe2ee;border-radius:50%}.octo-access-orbit::after{content:\"\";position:absolute;width:10px;height:10px;border-radius:50%;background:#b2b7cf;top:13%;left:13%;box-shadow:285px 240px 0 #ffb7a8}.octo-access-workspace{position:relative;transform:rotate(-5deg);width:90%;max-width:405px;background:#fff;border:1px solid #dee1ed;border-radius:14px;box-shadow:0 24px 65px #373e6510;overflow:hidden}.octo-access-window{height:39px;border-bottom:1px solid #eceef4;display:flex;align-items:center;gap:5px;padding:0 16px;background:#fafbfe}.octo-access-window i{width:6px;height:6px;border-radius:50%;background:#d3d7e3}.octo-access-window span{margin:auto;color:#888d9f;font-size:10px}.octo-access-window b{width:22px}.octo-access-body{padding:25px 24px 22px}.octo-access-workspace-title{font-size:13px;font-weight:650;display:flex;align-items:center;gap:9px}.octo-access-workspace-title img{width:23px;height:23px;border-radius:6px}.octo-access-skeleton{height:6px;width:42%;margin-top:11px;border-radius:3px;background:#eceef5}.octo-access-flow{display:flex;align-items:center;margin:29px 0}.octo-access-node{width:62px;height:61px;display:grid;place-items:center;background:#f4f5fa;border:1px solid #e1e4ef;border-radius:11px}.octo-access-node svg{width:23px;height:23px;color:#9ca3bc}.octo-access-node.active{background:#fff0eb;border-color:#ffc4b7}.octo-access-node.active svg{color:#bd4832}.octo-access-wire{height:1px;background:#d9ddec;flex:1}.octo-access-placeholder{display:flex;gap:8px;margin-top:12px}.octo-access-placeholder i{height:6px;width:35%;border-radius:3px;background:#eceef5}.octo-access-placeholder i+ i{width:20%}.octo-access-lock{position:absolute;bottom:10%;right:0;width:76px;height:76px;display:grid;place-items:center;border:7px solid #f7f8fc;border-radius:22px;background:#fff0eb;transform:rotate(7deg);box-shadow:0 8px 25px #373e650a}.octo-access-lock svg{width:29px;height:29px;color:#bd4832}.octo-access-caption{position:absolute;bottom:0;margin:0;font-size:12px;color:#73788e;text-align:center}\n.octo-access-footer{min-height:85px;border-top:1px solid #e3e5ee;color:#737383;font-size:12px}.octo-access-footer p{margin:0}.octo-access-footer a{padding:10px 0}.octo-access-connecting .octo-access-status svg{animation:octo-turn 2s linear infinite}@keyframes octo-turn{to{transform:rotate(360deg)}}@media(prefers-reduced-motion:reduce){.octo-access-connecting .octo-access-status svg{animation:none}}\n@media(max-width:850px){.octo-access{padding:0 28px}.octo-access-main{gap:25px}.octo-access h1{font-size:44px}.octo-access-visual{min-width:0}.octo-access-body{padding:18px}.octo-access-orbit::after{box-shadow:none}}@media(max-width:650px){.octo-access{padding:0 24px}.octo-access-header{height:80px}.octo-access-brand{font-size:21px}.octo-access-main{grid-template-columns:1fr;gap:45px;padding:48px 0 40px}.octo-access-copy{max-width:480px}.octo-access h1{font-size:clamp(38px,8vw,46px);letter-spacing:-2px}.octo-access-description{font-size:16px}.octo-access-visual{width:100%;max-width:390px;margin:auto;aspect-ratio:auto;min-height:340px;padding-bottom:40px}.octo-access-footer{align-items:flex-start;padding:22px 0;min-height:80px;font-size:11px}.octo-access a.octo-access-guide{font-size:12px}.octo-access-caption{font-size:11px}.octo-access-lock{right:4%}}\n";
+export declare const OCTONODE_LOGO: string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,8yLAQ7B,CAAC;AACF,eAAO,MAAM,aAAa,QAIvB,CAAC"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/constants.js

@@ -0,0 +1,14 @@
+// Generated from packages/ui-extensions/src/app/OctonodeAppProvider/AppAccessScreen/constants.ts. Do not edit; run the Octonode SDK sync.
+// Inline, scoped styles keep the public React SDK independent of host CSS and asset loaders.
+export const ACCESS_SCREEN_CSS = `
+.octo-access{--octo-ink:#252536;--octo-muted:#636374;--octo-coral:#ff765f;box-sizing:border-box;min-height:100svh;background:#f7f8fc;color:var(--octo-ink);font-family:"Avenir Next",Avenir,"Segoe UI",sans-serif;font-size:16px;line-height:1.5;padding:0 48px;isolation:isolate}
+.octo-access *{box-sizing:border-box}.octo-access a{color:inherit;text-decoration:none}.octo-access a:focus-visible{outline:3px solid #af3e29;outline-offset:5px}.octo-access a:hover{text-decoration:underline}
+.octo-access-header,.octo-access-footer{max-width:1120px;margin:auto;display:flex;justify-content:space-between;align-items:center;gap:24px}.octo-access-header{height:100px;border-bottom:1px solid #e3e5ee}.octo-access-brand{display:flex;align-items:center;gap:10px;font-size:23px;font-weight:750;letter-spacing:-1px}.octo-access-brand img{width:36px;height:36px}.octo-access a.octo-access-guide{font-size:14px;color:var(--octo-muted);display:flex;align-items:center;gap:8px}
+.octo-access-main{max-width:1120px;min-height:calc(100svh - 185px);margin:auto;display:grid;grid-template-columns:1.05fr 1fr;align-items:center;gap:70px;padding:72px 0}.octo-access-copy{max-width:520px}.octo-access-status{display:inline-flex;align-items:center;gap:8px;margin:0 0 24px;padding:6px 11px;border:1px solid #dedeea;background:#eeeff6;border-radius:6px;font-size:12px;font-weight:600;color:#515164}.octo-access-status svg{width:14px;height:14px}.octo-access h1{margin:0;font-size:clamp(40px,4.3vw,62px);font-weight:650;letter-spacing:-2.8px;line-height:1.09;text-wrap:balance}.octo-access-description{max-width:430px;margin:24px 0 30px;font-size:17px;line-height:1.75;color:var(--octo-muted)}.octo-access-actions{display:flex;align-items:center;gap:23px;flex-wrap:wrap}.octo-access a.octo-access-primary{display:inline-flex;align-items:center;justify-content:center;gap:12px;min-height:50px;padding:13px 21px;border-radius:9px;background:var(--octo-ink);color:#fff;font-size:14px;font-weight:650;box-shadow:0 4px 0 #25253612}.octo-access a.octo-access-primary:hover{background:#404056;text-decoration:none}.octo-access-secondary{font-size:14px;font-weight:600}.octo-access-hint{display:flex;align-items:flex-start;gap:9px;max-width:415px;margin:27px 0 0;color:var(--octo-muted);font-size:12px;line-height:1.65}.octo-access-hint svg{flex:none;width:15px;height:15px;margin-top:2px}
+.octo-access-visual{position:relative;aspect-ratio:1;display:grid;place-items:center}.octo-access-orbit{position:absolute;width:87%;aspect-ratio:1;border:1px solid #dfe2ee;border-radius:50%}.octo-access-orbit::before{content:"";position:absolute;inset:42px;border:1px dashed #dfe2ee;border-radius:50%}.octo-access-orbit::after{content:"";position:absolute;width:10px;height:10px;border-radius:50%;background:#b2b7cf;top:13%;left:13%;box-shadow:285px 240px 0 #ffb7a8}.octo-access-workspace{position:relative;transform:rotate(-5deg);width:90%;max-width:405px;background:#fff;border:1px solid #dee1ed;border-radius:14px;box-shadow:0 24px 65px #373e6510;overflow:hidden}.octo-access-window{height:39px;border-bottom:1px solid #eceef4;display:flex;align-items:center;gap:5px;padding:0 16px;background:#fafbfe}.octo-access-window i{width:6px;height:6px;border-radius:50%;background:#d3d7e3}.octo-access-window span{margin:auto;color:#888d9f;font-size:10px}.octo-access-window b{width:22px}.octo-access-body{padding:25px 24px 22px}.octo-access-workspace-title{font-size:13px;font-weight:650;display:flex;align-items:center;gap:9px}.octo-access-workspace-title img{width:23px;height:23px;border-radius:6px}.octo-access-skeleton{height:6px;width:42%;margin-top:11px;border-radius:3px;background:#eceef5}.octo-access-flow{display:flex;align-items:center;margin:29px 0}.octo-access-node{width:62px;height:61px;display:grid;place-items:center;background:#f4f5fa;border:1px solid #e1e4ef;border-radius:11px}.octo-access-node svg{width:23px;height:23px;color:#9ca3bc}.octo-access-node.active{background:#fff0eb;border-color:#ffc4b7}.octo-access-node.active svg{color:#bd4832}.octo-access-wire{height:1px;background:#d9ddec;flex:1}.octo-access-placeholder{display:flex;gap:8px;margin-top:12px}.octo-access-placeholder i{height:6px;width:35%;border-radius:3px;background:#eceef5}.octo-access-placeholder i+ i{width:20%}.octo-access-lock{position:absolute;bottom:10%;right:0;width:76px;height:76px;display:grid;place-items:center;border:7px solid #f7f8fc;border-radius:22px;background:#fff0eb;transform:rotate(7deg);box-shadow:0 8px 25px #373e650a}.octo-access-lock svg{width:29px;height:29px;color:#bd4832}.octo-access-caption{position:absolute;bottom:0;margin:0;font-size:12px;color:#73788e;text-align:center}
+.octo-access-footer{min-height:85px;border-top:1px solid #e3e5ee;color:#737383;font-size:12px}.octo-access-footer p{margin:0}.octo-access-footer a{padding:10px 0}.octo-access-connecting .octo-access-status svg{animation:octo-turn 2s linear infinite}@keyframes octo-turn{to{transform:rotate(360deg)}}@media(prefers-reduced-motion:reduce){.octo-access-connecting .octo-access-status svg{animation:none}}
+@media(max-width:850px){.octo-access{padding:0 28px}.octo-access-main{gap:25px}.octo-access h1{font-size:44px}.octo-access-visual{min-width:0}.octo-access-body{padding:18px}.octo-access-orbit::after{box-shadow:none}}@media(max-width:650px){.octo-access{padding:0 24px}.octo-access-header{height:80px}.octo-access-brand{font-size:21px}.octo-access-main{grid-template-columns:1fr;gap:45px;padding:48px 0 40px}.octo-access-copy{max-width:480px}.octo-access h1{font-size:clamp(38px,8vw,46px);letter-spacing:-2px}.octo-access-description{font-size:16px}.octo-access-visual{width:100%;max-width:390px;margin:auto;aspect-ratio:auto;min-height:340px;padding-bottom:40px}.octo-access-footer{align-items:flex-start;padding:22px 0;min-height:80px;font-size:11px}.octo-access a.octo-access-guide{font-size:12px}.octo-access-caption{font-size:11px}.octo-access-lock{right:4%}}
+`;
+export const OCTONODE_LOGO = "data:image/svg+xml," +
+    encodeURIComponent('<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" fill="none">\n  <title>Octonode</title>\n  <rect width="64" height="64" rx="16" fill="#181721"/>\n  <path d="M24 10h16l14 14v16L40 54H24L10 40V24Z" stroke="#FF765F" stroke-linejoin="round" stroke-width="3.5"/>\n  <path d="m21 24 11 8 11-8M32 32v13" stroke="#FF765F" stroke-linecap="round" stroke-linejoin="round" stroke-width="3"/>\n  <g fill="#FF765F"><circle cx="21" cy="24" r="3"/><circle cx="43" cy="24" r="3"/><circle cx="32" cy="32" r="4"/><circle cx="32" cy="45" r="3"/></g>\n</svg>\n');
+//# sourceMappingURL=constants.js.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/constants.ts"],"names":[],"mappings":"AAAA,0IAA0I;AAC1I,6FAA6F;AAC7F,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;CAQhC,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GACxB,qBAAqB;IACrB,kBAAkB,CAChB,yiBAAyiB,CAC1iB,CAAC"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/index.d.ts

@@ -0,0 +1,3 @@
+export { AppAccessScreen } from "./AppAccessScreen.js";
+export type { AppAccessScreenProps } from "./AppAccessScreen.types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/app/OctonodeAppProvider/AppAccessScreen/index.js

@@ -0,0 +1,3 @@
+// Generated from packages/ui-extensions/src/app/OctonodeAppProvider/AppAccessScreen/index.ts. Do not edit; run the Octonode SDK sync.
+export { AppAccessScreen } from "./AppAccessScreen.js";
+//# sourceMappingURL=index.js.map

package/dist/app/OctonodeAppProvider/AppAccessScreen/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/app/OctonodeAppProvider/AppAccessScreen/index.ts"],"names":[],"mappings":"AAAA,sIAAsI;AACtI,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.d.ts

@@ -0,0 +1,5 @@
+import type { OctonodeAppContext, OctonodeAppProviderProps } from "./OctonodeAppProvider.types.js";
+/** Render app content only after the hosted backend verifies the workspace session. */
+export declare function OctonodeAppProvider({ children, navigation }: OctonodeAppProviderProps): import("react").JSX.Element;
+export declare function useOctonodeApp(): OctonodeAppContext;
+//# sourceMappingURL=OctonodeAppProvider.d.ts.map

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OctonodeAppProvider.d.ts","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/OctonodeAppProvider.tsx"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAKnG,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,EAAE,QAAQ,EAAE,UAA8B,EAAE,EAAE,wBAAwB,+BAoDzG;AAED,wBAAgB,cAAc,IAAI,kBAAkB,CAInD"}

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.js

@@ -0,0 +1,72 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// Generated from packages/ui-extensions/src/app/OctonodeAppProvider/OctonodeAppProvider.tsx. Do not edit; run the Octonode SDK sync.
+import { createContext, useContext, useEffect, useState } from "react";
+import { AppAccessScreen } from "./AppAccessScreen/index.js";
+import { connectHostedApp } from "../hosted.js";
+const Context = createContext(null);
+const defaultNavigation = [];
+/** Render app content only after the hosted backend verifies the workspace session. */
+export function OctonodeAppProvider({ children, navigation = defaultNavigation }) {
+    const [bridge, setBridge] = useState();
+    const [session, setSession] = useState();
+    const [verified, setVerified] = useState();
+    const [error, setError] = useState(false);
+    useEffect(() => {
+        try {
+            const app = connectHostedApp();
+            setBridge(app);
+            setSession(app.getSnapshot());
+            const unsubscribe = app.subscribe(() => setSession(app.getSnapshot()));
+            return () => {
+                unsubscribe();
+                app.dispose();
+            };
+        }
+        catch {
+            setError(true);
+        }
+    }, []);
+    useEffect(() => {
+        bridge?.setNavigation(navigation);
+    }, [bridge, navigation]);
+    useEffect(() => {
+        if (!bridge || session?.status !== "ready" || !session.token)
+            return;
+        const token = session.token;
+        const controller = new AbortController();
+        bridge
+            .fetch("/api/context", { signal: controller.signal })
+            .then(async (response) => {
+            if (!response.ok)
+                throw new Error("Workspace access could not be verified");
+            const context = (await response.json());
+            if (!context.workspace?.kind || !context.workspace.id)
+                throw new Error("Missing workspace scope");
+            if (!controller.signal.aborted) {
+                setVerified({ token, workspace: context.workspace });
+                setError(false);
+            }
+        })
+            .catch(() => {
+            if (!controller.signal.aborted)
+                setError(true);
+        });
+        return () => controller.abort();
+    }, [bridge, session?.status, session?.token]);
+    if (session?.status === "expired")
+        return _jsx(AppAccessScreen, { status: "expired" });
+    if (error)
+        return _jsx(AppAccessScreen, { status: "error" });
+    if (session?.status === "standalone")
+        return _jsx(AppAccessScreen, { status: "standalone" });
+    if (!bridge || !session || !verified || verified.token !== session.token)
+        return _jsx(AppAccessScreen, { status: "connecting" });
+    return _jsx(Context.Provider, { value: { bridge, session, workspace: verified.workspace }, children: children });
+}
+export function useOctonodeApp() {
+    const context = useContext(Context);
+    if (!context)
+        throw new Error("useOctonodeApp requires OctonodeAppProvider");
+    return context;
+}
+//# sourceMappingURL=OctonodeAppProvider.js.map

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OctonodeAppProvider.js","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/OctonodeAppProvider.tsx"],"names":[],"mappings":";AAAA,qIAAqI;AACrI,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIhD,MAAM,OAAO,GAAG,aAAa,CAA4B,IAAI,CAAC,CAAC;AAC/D,MAAM,iBAAiB,GAAwD,EAAE,CAAC;AAElF,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,EAAE,QAAQ,EAAE,UAAU,GAAG,iBAAiB,EAA4B;IACxG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,EAAa,CAAC;IAClD,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,EAAkB,CAAC;IACzD,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,EAAiE,CAAC;IAC1G,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE1C,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;YAC/B,SAAS,CAAC,GAAG,CAAC,CAAC;YACf,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9B,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACvE,OAAO,GAAG,EAAE;gBACV,WAAW,EAAE,CAAC;gBACd,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAEzB,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO;QACrE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM;aACH,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;aACpD,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACvB,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoD,CAAC;YAC3F,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAClG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/B,WAAW,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBACrD,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAE9C,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS;QAAE,OAAO,KAAC,eAAe,IAAC,MAAM,EAAC,SAAS,GAAG,CAAC;IAC/E,IAAI,KAAK;QAAE,OAAO,KAAC,eAAe,IAAC,MAAM,EAAC,OAAO,GAAG,CAAC;IACrD,IAAI,OAAO,EAAE,MAAM,KAAK,YAAY;QAAE,OAAO,KAAC,eAAe,IAAC,MAAM,EAAC,YAAY,GAAG,CAAC;IACrF,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;QACtE,OAAO,KAAC,eAAe,IAAC,MAAM,EAAC,YAAY,GAAG,CAAC;IACjD,OAAO,KAAC,OAAO,CAAC,QAAQ,IAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAG,QAAQ,GAAoB,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.types.d.ts

@@ -0,0 +1,12 @@
+import type { ReactNode } from "react";
+import type { AppContext, HostedApp, HostedAppNavigationItem, HostedAppState } from "../types.js";
+export type OctonodeAppProviderProps = {
+    children: ReactNode;
+    navigation?: HostedAppNavigationItem[];
+};
+export type OctonodeAppContext = {
+    bridge: HostedApp;
+    session: HostedAppState;
+    workspace: AppContext["workspace"];
+};
+//# sourceMappingURL=OctonodeAppProvider.types.d.ts.map

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OctonodeAppProvider.types.d.ts","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/OctonodeAppProvider.types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElG,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,SAAS,CAAC;IACpB,UAAU,CAAC,EAAE,uBAAuB,EAAE,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CACpC,CAAC"}

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=OctonodeAppProvider.types.js.map

package/dist/app/OctonodeAppProvider/OctonodeAppProvider.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OctonodeAppProvider.types.js","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/OctonodeAppProvider.types.ts"],"names":[],"mappings":""}

package/dist/app/OctonodeAppProvider/index.d.ts

@@ -0,0 +1,3 @@
+export { OctonodeAppProvider, useOctonodeApp } from "./OctonodeAppProvider.js";
+export type { OctonodeAppContext, OctonodeAppProviderProps } from "./OctonodeAppProvider.types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/app/OctonodeAppProvider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/E,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/app/OctonodeAppProvider/index.js

@@ -0,0 +1,3 @@
+// Generated from packages/ui-extensions/src/app/OctonodeAppProvider/index.ts. Do not edit; run the Octonode SDK sync.
+export { OctonodeAppProvider, useOctonodeApp } from "./OctonodeAppProvider.js";
+//# sourceMappingURL=index.js.map

package/dist/app/OctonodeAppProvider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/app/OctonodeAppProvider/index.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/app/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const HOSTED_APP_PROTOCOL = "octonode-hosted-app/v1";
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/app/constants.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,mBAAmB,2BAA2B,CAAC"}

package/dist/app/constants.js

@@ -0,0 +1,3 @@
+// Generated from packages/ui-extensions/src/app/constants.ts. Do not edit; run the Octonode SDK sync.
+export const HOSTED_APP_PROTOCOL = "octonode-hosted-app/v1";
+//# sourceMappingURL=constants.js.map

package/dist/app/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/app/constants.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC"}

package/dist/app/hosted.d.ts

@@ -0,0 +1,6 @@
+import type { HostedApp } from "./types.js";
+/** Only app-relative routes may cross the Studio boundary. */
+export declare function appRoute(value: unknown): string | null;
+/** Browser history remains the router. The bridge mirrors it into the Studio URL. */
+export declare function connectHostedApp(): HostedApp;
+//# sourceMappingURL=hosted.d.ts.map

package/dist/app/hosted.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted.d.ts","sourceRoot":"","sources":["../../src/app/hosted.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAA2C,MAAM,YAAY,CAAC;AAGrF,8DAA8D;AAC9D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWtD;AAED,qFAAqF;AACrF,wBAAgB,gBAAgB,IAAI,SAAS,CA6J5C"}