@opendatalabs/vana-sdk 4.4.0-connect-sheet.0-pr.218.7f5d342 → 4.4.0

package/README.md

@@ -261,49 +261,6 @@ accepts write entries in `scopes`, but its scope part must be a concrete
 scope: this flow reads approved scopes back one at a time, so wildcards are
 rejected there for read and write alike.
 
-### PDPP grants
-
-Ask for PDPP data as **grants**: a registry `source_id` and the streams you
-want from it. The controller turns each stream into one scope key,
-`pdpp.<source>.<stream>`, and that key is what the request, the signed grant
-and your reads carry.
-
-```typescript
-export const vana = createDirectDataController({
-  // ...
-  source: "chatgpt",
-  grants: [
-    {
-      source_id: "https://registry.pdpp.dev/sources/chatgpt",
-      streams: ["conversations", "messages"],
-    },
-  ],
-});
-// Requests ["pdpp.chatgpt.conversations", "pdpp.chatgpt.messages"].
-
-await vana.readApprovedData({ requestId, scope: "pdpp.chatgpt.messages" });
-```
-
-- `grants` and `scopes` can be combined. The request is the union: your
-  `scopes` verbatim, then the derived keys that are not already in it.
-  Existing apps that pass only `scopes` are unchanged.
-- The `pdpp.` namespace is separate from legacy scopes. PDPP's ChatGPT
-  `conversations` stream is `pdpp.chatgpt.conversations`, not the legacy
-  `chatgpt.conversations`, and `pdpp.chatgpt.*` covers only PDPP streams.
-  A legacy `scopes` entry under `pdpp.` that is not a valid key is rejected.
-- The mapping is strict and never slugifies. `source_id` must be
-  `https://registry.pdpp.dev/sources/<source>`, and `<source>` and each stream
-  must be lowercase letters, digits and underscores, not starting with an
-  underscore. Anything else throws `InvalidPdppGrantError` when the controller
-  is created.
-- `pdppScopeKey(source_id, stream)`, `parsePdppScopeKey(key)` (`{ source_id,
-stream }` or `null`), `isPdppScopeKey(key)`, `pdppGrantsToScopes(grants)`
-  and `grantRequestScopes({ grants, scopes })` are exported from `/server`,
-  the root entry points and `@opendatalabs/vana-sdk/protocol/scopes`. Use them
-  rather than building keys by hand. Other implementations can check
-  themselves against the vectors in
-  [`src/protocol/fixtures/pdpp-scope-keys.json`](src/protocol/fixtures/pdpp-scope-keys.json).
-
 ### Backend controller
 
 ```typescript
@@ -500,139 +457,6 @@ pass the same explicit `idempotencyKey` on the retry to avoid a duplicate DCR.
 `react` is an optional peer dependency. The underlying
 `createDirectConnectFlow` store is also exported for non-React frontends.
 
-### Connect in Vana's in-page sheet
-
-Instead of a Vana tab, the person can approve in a sheet Vana draws over your
-page (it signs them in, shows the request, and finishes inside the sheet). The
-sheet is `presentation: "sheet"` of the same flow: the request, the status poll
-and the read are unchanged. The integration is two files.
-
-Backend: one catch-all route serves `config`, `request`, `status` and `data`,
-binding each request to the browser that created it. The controller decides
-what is requested (its `grants` and `scopes`, see [PDPP grants](#pdpp-grants));
-the browser never chooses.
-
-```ts
-// app/api/vana/[action]/route.ts
-import { createVanaConnectHandler } from "@opendatalabs/vana-sdk/server";
-import { vana } from "@/lib/vana"; // your createDirectDataController({ grants, ... })
-
-const handler = createVanaConnectHandler({
-  controller: vana,
-  returnUrl: `${process.env.APP_URL}/connect/return`,
-  clientId: "my-app", // the embed client id Vana Account registered for your origin
-  // Recommended in production: only your signed-in users create requests.
-  session: async (request) => (await getSession(request))?.userId ?? null,
-});
-export { handler as GET, handler as POST };
-```
-
-The handler reports the Vana Account origin from the controller's `env`
-(`account.vana.org` for `production`, `account-dev.vana.org` for `dev`), so a
-dev app never frames production.
-
-Frontend:
-
-```tsx
-"use client";
-import { useVanaConnect } from "@opendatalabs/vana-sdk/react";
-
-export function ConnectButton() {
-  const { state, start } = useVanaConnect<MyData>({ endpoint: "/api/vana" });
-  if (state.type === "done") return <Result data={state.result.data} />;
-  return (
-    <>
-      <button
-        disabled={
-          state.type === "creating" || state.type === "awaiting_approval"
-        }
-        onClick={start}
-      >
-        Connect with Vana
-      </button>
-      {state.type === "awaiting_approval" && state.popupBlocked && (
-        // The sheet could not run here (state.sheetUnavailable says why).
-        <a href={state.request.approvalUrl} target="_blank" rel="noreferrer">
-          Open Vana
-        </a>
-      )}
-    </>
-  );
-}
-```
-
-- While the sheet is up, `state.sheet` reports `completion` (`in_browser` or
-  `remote_collect`) once the person approves, coarse `progress`
-  (`collecting`, `writing`), and any `error` it is showing.
-- **Approval is not delivery.** The sheet's `connected` event (and
-  `state.sheet.completion`) means the person approved; the data may still be
-  collecting. The flow reaches `done` only when your backend's status poll
-  says the request is readable and the read succeeds, and `error` when the
-  poll reports `denied`, `expired` or `completed` or the read fails. The sheet
-  sends no terminal event of its own; its events only make the flow poll
-  sooner.
-- Closing the sheet before approving returns to `idle`. Closing it after
-  approving keeps polling, since the data may still be readable.
-- If the frame cannot run (`frame_blocked`, `origin_not_registered`,
-  `incompatible_version`), the flow falls back to the tab presentation with
-  `popupBlocked: true`, so the "Open approval" link above still finishes it.
-  `origin_not_registered` arrives at once: the launcher asks Vana
-  (`GET <account>/api/embed/connect/client`, no credentials) alongside
-  framing. `vana_unavailable` means Vana's own side is down or misconfigured;
-  the sheet stays open and says so.
-- The partner reads; it cannot write through the sheet. Pass
-  `sheet: { closeAfterDoneMs: null }` to leave the sheet open after the read.
-- If your page sets a CSP, allow the frame and the client check:
-  `vanaConnectCsp(env)` from `/server` (or `/connect/protocol`) returns
-  `{ "frame-src": [accountOrigin], "connect-src": [accountOrigin] }`. It has
-  no default environment.
-- `createVanaConnectHandler` takes `session` to bind requests to your own
-  signed-in user (recommended: without it anyone who loads your page can
-  create requests as your app), `createOptions` for per-request create input
-  (questions, owner), and `read` to replace the default `readApprovedData`.
-  Use `toNodeHandler(handler)` for Express or plain `http`.
-- Creating a request is rate limited. The default, `createMemoryRateLimit()`,
-  allows 10 creates a minute per client IP and per session, in memory. It is
-  not production-grade (each instance counts alone, and the IP comes from
-  proxy headers): pass `rateLimit` backed by a shared store, or `false` when
-  a limiter already sits in front of the route. A refusal is
-  `429 rate_limited` with `Retry-After`.
-
-Choosing the Vana Account origin yourself (a custom flow, or preview deploys
-of Vana Account) goes through `resolveVanaAccountOrigin`; never match origins
-with your own pattern. It returns the environment's origin unless overrides
-are switched on for this build and the override is exactly an `https` origin
-on your allowlist:
-
-```ts
-import {
-  parseOriginAllowlist,
-  resolveVanaAccountOrigin,
-} from "@opendatalabs/vana-sdk/connect";
-
-const accountOrigin = resolveVanaAccountOrigin({
-  env: "dev",
-  override: new URLSearchParams(location.search).get("vana_account"),
-  previewOrigins: parseOriginAllowlist(
-    process.env.NEXT_PUBLIC_VANA_ACCOUNT_PREVIEW_ORIGINS,
-  ),
-  // From build-time config, never the request. Off in production.
-  allowOverride: process.env.NEXT_PUBLIC_DEPLOY_ENV === "preview",
-});
-```
-
-`createDirectConnectFlow` and the launcher take that origin (or an `env`)
-explicitly; neither falls back to production.
-
-Lower-level pieces: `createDirectConnectFlow(transports, { presentation:
-"sheet", sheet: { clientId, appName, accountOrigin } })` with an
-`authorizeRequest` transport backed by
-`controller.authorizeRequestRead(requestId)`; the launcher itself
-(`@opendatalabs/vana-sdk/connect`); and the zero-dependency message protocol
-(`@opendatalabs/vana-sdk/connect/protocol`). A backend in another language
-implements the [connect wire contract](./src/connect/WIRE_CONTRACT.md), which has test
-vectors.
-
 ### Test with large sample data
 
 When testing with realistic exports, use the public fixture catalog in

package/dist/direct/connect-flow.cjs

@@ -22,13 +22,6 @@ __export(connect_flow_exports, {
 });
 module.exports = __toCommonJS(connect_flow_exports);
 var import_types = require("./types");
-var import_launcher = require("../connect/launcher");
-const SHEET_FALLBACK_CODES = [
-  "frame_blocked",
-  "origin_not_registered",
-  "incompatible_version"
-];
-const DEFAULT_CLOSE_AFTER_DONE_MS = 1500;
 const DEFAULT_POLL_INTERVAL_MS = 1500;
 const DEFAULT_TIMEOUT_MS = 3e5;
 function toError(value) {
@@ -84,18 +77,10 @@ function createDirectConnectFlow(transports, options = {}) {
   let state = { type: "idle" };
   const listeners = /* @__PURE__ */ new Set();
   let pollHandle = null;
-  let pollTarget = null;
-  let pollInFlight = false;
-  let pollNudged = false;
   let running = false;
   let approvedRequest = null;
   let activeRunId = 0;
   let openedWindow = null;
-  let sheetHandle = null;
-  let sheetState = null;
-  let sheetUnavailable = null;
-  let sheetCloseAfterDoneMs = DEFAULT_CLOSE_AFTER_DONE_MS;
-  let sheetCloseTimer = null;
   function emit() {
     for (const listener of listeners) listener();
   }
@@ -108,19 +93,6 @@ function createDirectConnectFlow(transports, options = {}) {
       clearTimeoutFn(pollHandle);
       pollHandle = null;
     }
-    pollTarget = null;
-    pollNudged = false;
-  }
-  function nudgePoll() {
-    if (!running) return;
-    if (pollInFlight) {
-      pollNudged = true;
-      return;
-    }
-    const target = pollTarget;
-    if (pollHandle === null || !target) return;
-    clearPoll();
-    void poll(target.request, target.deadline);
   }
   function closeUnnavigatedWindow() {
     if (openedWindow) {
@@ -131,114 +103,12 @@ function createDirectConnectFlow(transports, options = {}) {
   function isRunningPhase() {
     return state.type === "creating" || state.type === "awaiting_approval" || state.type === "ready_to_open" || state.type === "reading";
   }
-  function closeSheet() {
-    const handle = sheetHandle;
-    sheetHandle = null;
-    handle?.close();
-  }
-  function clearSheet() {
-    if (sheetCloseTimer !== null) {
-      clearTimeoutFn(sheetCloseTimer);
-      sheetCloseTimer = null;
-    }
-    closeSheet();
-    sheetState = null;
-    sheetUnavailable = null;
-  }
-  function awaitingState(request) {
-    if (sheetUnavailable) {
-      return {
-        type: "awaiting_approval",
-        request,
-        popupBlocked: true,
-        sheetUnavailable
-      };
-    }
-    return {
-      type: "awaiting_approval",
-      request,
-      popupBlocked: false,
-      ...sheetState ? { sheet: { ...sheetState } } : {}
-    };
-  }
-  function updateSheet(patch) {
-    if (!sheetState) return;
-    sheetState = { ...sheetState, ...patch };
-    if (state.type === "awaiting_approval" && state.sheet) {
-      setState(awaitingState(state.request));
-    }
-  }
-  function failRun(error) {
-    running = false;
-    clearPoll();
-    setState({ type: "error", error });
-  }
-  function handleSheetEvent(event) {
-    switch (event.type) {
-      case "connected":
-        updateSheet({ completion: event.completion });
-        nudgePoll();
-        return;
-      case "progress":
-        updateSheet({ progress: event.phase });
-        return;
-      case "error": {
-        if (event.code === "request_failed") {
-          if (!running) return;
-          closeSheet();
-          failRun(new Error("Could not prepare the request for Vana's sheet"));
-          return;
-        }
-        if (SHEET_FALLBACK_CODES.includes(event.code)) {
-          sheetUnavailable = event.code;
-          sheetState = null;
-          closeSheet();
-          if (state.type === "awaiting_approval") {
-            setState(awaitingState(state.request));
-          }
-          return;
-        }
-        updateSheet({ error: event.code });
-        return;
-      }
-      case "close": {
-        if (!sheetHandle) return;
-        sheetHandle = null;
-        if (!running) return;
-        if (sheetState?.error) {
-          failRun(new Error(`Vana's sheet failed: ${sheetState.error}`));
-          return;
-        }
-        if (!sheetState?.completion) {
-          running = false;
-          activeRunId++;
-          clearPoll();
-          sheetState = null;
-          setState({ type: "idle" });
-          return;
-        }
-        updateSheet({ open: false });
-        return;
-      }
-      default:
-        return;
-    }
-  }
   async function readAndFinish(request) {
     setState({ type: "reading", request });
     try {
       const result = await transports.readResult(request.requestId);
       if (!running) return;
       setState({ type: "done", result });
-      if (sheetHandle) {
-        sheetHandle.setRequestStatus("completed");
-        if (sheetCloseAfterDoneMs !== null) {
-          sheetCloseTimer = setTimeoutFn(() => {
-            sheetCloseTimer = null;
-            closeSheet();
-          }, sheetCloseAfterDoneMs);
-        }
-      }
     } catch (err) {
       if (!running) return;
       setState({ type: "error", error: toError(err) });
@@ -247,13 +117,9 @@ function createDirectConnectFlow(transports, options = {}) {
     }
   }
   function scheduleNextPoll(request, deadline) {
-    const delay = pollNudged ? 0 : pollIntervalMs;
-    pollNudged = false;
-    pollTarget = { request, deadline };
     pollHandle = setTimeoutFn(() => {
-      pollHandle = null;
       void poll(request, deadline);
-    }, delay);
+    }, pollIntervalMs);
   }
   function requestDeadline(request) {
     if (request.expiresAt !== void 0) {
@@ -263,7 +129,6 @@ function createDirectConnectFlow(transports, options = {}) {
     return now() + timeoutMs;
   }
   function startPolling(request, initialState) {
-    pollNudged = false;
     setState(initialState);
     const deadline = requestDeadline(request);
     if (now() >= deadline) {
@@ -287,7 +152,6 @@ function createDirectConnectFlow(transports, options = {}) {
       return;
     }
     let status;
-    pollInFlight = true;
     try {
       status = await transports.getStatus(request.requestId);
     } catch (err) {
@@ -295,8 +159,6 @@ function createDirectConnectFlow(transports, options = {}) {
       running = false;
       setState({ type: "error", error: toError(err) });
       return;
-    } finally {
-      pollInFlight = false;
     }
     if (!running) return;
     if (status.status === "pending" && state.type === "ready_to_open") {
@@ -319,7 +181,6 @@ function createDirectConnectFlow(transports, options = {}) {
       return;
     }
     if (status.status === "completed" || status.status === "denied" || status.status === "expired") {
-      sheetHandle?.setRequestStatus(status.status);
       running = false;
       setState({
         type: "error",
@@ -342,11 +203,6 @@ function createDirectConnectFlow(transports, options = {}) {
       running = true;
       approvedRequest = null;
       const runId = ++activeRunId;
-      clearSheet();
-      if (options.presentation === "sheet") {
-        await startSheet(runId);
-        return;
-      }
       const browserPlatform = (options.browserPlatformPolicy ?? defaultBrowserPlatformPolicy()).current();
       const approvalWindow = browserPlatform === "desktop" ? (options.openApprovalWindow ?? defaultOpenApprovalWindow)() : null;
       openedWindow = approvalWindow;
@@ -436,75 +292,9 @@ function createDirectConnectFlow(transports, options = {}) {
       activeRunId++;
       clearPoll();
       closeUnnavigatedWindow();
-      clearSheet();
       setState({ type: "idle" });
     }
   };
-  async function startSheet(runId) {
-    setState({ type: "creating" });
-    const fail = (error) => {
-      if (runId !== activeRunId) return;
-      clearSheet();
-      failRun(toError(error));
-    };
-    const authorizeRequest = transports.authorizeRequest;
-    if (!authorizeRequest) {
-      fail(
-        new Error('presentation: "sheet" needs the authorizeRequest transport')
-      );
-      return;
-    }
-    let sheetOptions;
-    try {
-      const configured = options.sheet;
-      if (!configured) {
-        throw new Error('presentation: "sheet" needs sheet options');
-      }
-      sheetOptions = typeof configured === "function" ? await configured() : configured;
-    } catch (err) {
-      fail(err);
-      return;
-    }
-    if (runId !== activeRunId) return;
-    const created = transports.createRequest();
-    created.catch(() => void 0);
-    sheetCloseAfterDoneMs = sheetOptions.closeAfterDoneMs === void 0 ? DEFAULT_CLOSE_AFTER_DONE_MS : sheetOptions.closeAfterDoneMs;
-    sheetState = { open: true };
-    try {
-      sheetHandle = (sheetOptions.open ?? import_launcher.openConnectSheet)({
-        clientId: sheetOptions.clientId,
-        appName: sheetOptions.appName,
-        vanaOrigin: sheetOptions.accountOrigin,
-        container: sheetOptions.container,
-        readyTimeoutMs: sheetOptions.readyTimeoutMs,
-        async getRequest() {
-          const request2 = await created;
-          return {
-            id: request2.requestId,
-            authorization: await authorizeRequest(request2.requestId)
-          };
-        },
-        onEvent(event) {
-          if (runId !== activeRunId) return;
-          sheetOptions.onEvent?.(event);
-          handleSheetEvent(event);
-        }
-      });
-    } catch {
-      sheetHandle = null;
-      sheetState = null;
-      sheetUnavailable = "sheet_failed";
-    }
-    let request;
-    try {
-      request = await created;
-    } catch (err) {
-      fail(err);
-      return;
-    }
-    if (runId !== activeRunId || !running) return;
-    startPolling(request, awaitingState(request));
-  }
   return flow;
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/direct/connect-flow.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/direct/connect-flow.ts"],"sourcesContent":["/**\n * Framework-agnostic connect-flow state machine for the browser two-tab helper.\n *\n * @remarks\n * This is the testable core behind {@link useDirectVanaConnect}. It is pure\n * TypeScript (no React, no DOM-only APIs beyond an injectable window opener and\n * timers) so the full flow — create request, open Vana, poll status, read data —\n * can be exercised in a Node test environment.\n *\n * The React hook is a thin `useSyncExternalStore` binding over this store.\n *\n * @category Direct\n * @module direct/connect-flow\n */\n\nimport type {\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./types\";\nimport { normalizeMobileContinuationUrl } from \"./types\";\nimport {\n  openConnectSheet,\n  type ConnectEvent,\n  type ConnectHandle,\n  type ConnectOpenOptions,\n} from \"../connect/launcher\";\nimport type {\n  ConnectCompletion,\n  ConnectProgressPhase,\n  RequestAuthorization,\n  SheetErrorCode,\n} from \"../connect/protocol\";\n\n/**\n * Caller-supplied transports. These typically `fetch` the app's own backend\n * routes, which in turn delegate to a {@link DirectDataController}.\n */\nexport interface DirectConnectTransports<T = unknown> {\n  /** Ask the backend to create an access request. */\n  createRequest: () => Promise<AccessRequest>;\n  /** Ask the backend for the current status of a request. */\n  getStatus: (requestId: string) => Promise<AccessRequestStatus>;\n  /** Ask the backend to read the approved data. */\n  readResult: (requestId: string) => Promise<ApprovedDataResult<T>>;\n  /**\n   * Ask the backend to sign the sheet's short-lived read capability for a\n   * request it created for this browser (`controller.authorizeRequestRead`).\n   * Required for `presentation: \"sheet\"`; called each time the sheet asks.\n   */\n  authorizeRequest?: (requestId: string) => Promise<RequestAuthorization>;\n}\n\n/** How the person approves: a Vana tab (default) or Vana's in-page sheet. */\nexport type DirectConnectPresentation = \"tab\" | \"sheet\";\n\n/** Sheet settings for `presentation: \"sheet\"`. */\nexport interface DirectConnectSheetOptions {\n  /** The embed client id Vana Account registered for this page's origin. */\n  clientId: string;\n  /** Label on the sheet chrome (Vana shows the registered name inside). */\n  appName: string;\n  /**\n   * Vana Account origin that serves the sheet. Required: there is no\n   * production default, so a dev app never silently talks to production.\n   * Use `VANA_ACCOUNT_ORIGINS[env]`, or `resolveVanaAccountOrigin` for\n   * preview deploys. `useVanaConnect` fills it from the backend's config.\n   */\n  accountOrigin: string;\n  /** Element the sheet mounts in. Defaults to `document.body`. */\n  container?: HTMLElement;\n  /** How long to wait for the sheet to start before falling back. */\n  readyTimeoutMs?: number;\n  /**\n   * Close the sheet this long (ms) after the data is read, so the person sees\n   * it finish. Defaults to 1500; `null` leaves it open for the person to close.\n   */\n  closeAfterDoneMs?: number | null;\n  /** Every raw launcher event, for logging or custom UI. */\n  onEvent?: (event: ConnectEvent) => void;\n  /** Launcher. Defaults to the SDK's `openConnectSheet`; injectable for tests. */\n  open?: (options: ConnectOpenOptions) => ConnectHandle;\n}\n\n/**\n * What the sheet has reported, while it presents approval.\n *\n * @remarks\n * These are hints for the UI, not outcomes. The flow settles only from the\n * backend: `done` once the status poll says the request is readable and the\n * read succeeds, `error` when the poll reports `denied`, `expired` or\n * `completed`, or the read fails.\n */\nexport interface DirectConnectSheetState {\n  /** `false` once the person closed the sheet after approving. */\n  open: boolean;\n  /**\n   * Set once the person approved: how the data will arrive. Approval is not\n   * delivery; wait for `state.type === \"done\"` before treating data as\n   * delivered.\n   */\n  completion?: ConnectCompletion;\n  /** Coarse `remote_collect` progress. */\n  progress?: ConnectProgressPhase;\n  /** A failure the sheet is showing; it stays open for the person to read. */\n  error?: SheetErrorCode;\n}\n\n/**\n * Sheet errors after which the flow closes the sheet and falls back to the\n * tab presentation (`popupBlocked: true`, so the UI shows the approval link).\n */\nconst SHEET_FALLBACK_CODES: readonly SheetErrorCode[] = [\n  \"frame_blocked\",\n  \"origin_not_registered\",\n  \"incompatible_version\",\n];\n\nconst DEFAULT_CLOSE_AFTER_DONE_MS = 1500;\n\n/**\n * A handle to a tab opened synchronously under the user's click gesture.\n *\n * @remarks\n * The flow opens this tab *before* it knows the approval URL (popup blockers\n * only allow `window.open()` during the click's transient activation), then\n * navigates it once `createRequest` resolves.\n */\nexport interface ConnectWindow {\n  /** Point the already-open tab at the approval URL. */\n  navigate(url: string): void;\n  /** Close the tab (used to clean up an un-navigated tab on failure/reset). */\n  close(): void;\n}\n\n/** Browser class used only to choose the destination returned by Vana. */\nexport type DirectBrowserPlatform = \"desktop\" | \"mobile\";\n\n/** Injectable browser-platform policy; it never asserts whether an app exists. */\nexport interface DirectBrowserPlatformPolicy {\n  current(): DirectBrowserPlatform;\n}\n\n/** Tunables for the connect flow. */\nexport interface DirectConnectOptions {\n  /** Status poll interval in ms. Defaults to 1500. */\n  pollIntervalMs?: number;\n  /**\n   * Overall timeout in ms before giving up. Defaults to 300000 (5 min).\n   * Used only when the access request does not carry an authoritative\n   * `expiresAt` value.\n   */\n  timeoutMs?: number;\n  /**\n   * Synchronously open a blank tab under the click's transient activation and\n   * return a handle to navigate later, or `null` if the browser blocked it.\n   * Defaults to `window.open(\"\", \"_blank\")` (with `opener` severed). Injectable\n   * for tests.\n   *\n   * @remarks\n   * Renamed from the pre-3.8 `openWindow?: (url) => void`. The old contract was\n   * the BUI-622 bug itself (it was called with the URL *after* an `await`, so\n   * the popup blocker suppressed it); it cannot be preserved while fixing the\n   * bug. Custom openers must now open synchronously and return a navigable\n   * handle.\n   */\n  openApprovalWindow?: () => ConnectWindow | null;\n  /** SDK-owned mobile/desktop policy. Injectable for deterministic tests. */\n  browserPlatformPolicy?: DirectBrowserPlatformPolicy;\n  /** `setTimeout`. Injectable for tests. Defaults to `globalThis.setTimeout`. */\n  setTimeoutFn?: (cb: () => void, ms: number) => unknown;\n  /**\n   * `\"sheet\"` presents approval in Vana's in-page sheet instead of a tab;\n   * needs {@link DirectConnectOptions.sheet} and the `authorizeRequest`\n   * transport. Defaults to `\"tab\"`.\n   */\n  presentation?: DirectConnectPresentation;\n  /** Sheet settings, or a loader for them (fetched at `start()`). */\n  sheet?:\n    | DirectConnectSheetOptions\n    | (() => Promise<DirectConnectSheetOptions>);\n  /** `clearTimeout`. Injectable for tests. Defaults to `globalThis.clearTimeout`. */\n  clearTimeoutFn?: (handle: unknown) => void;\n  /** Clock source in ms. Injectable for tests. Defaults to `Date.now`. */\n  now?: () => number;\n}\n\n/**\n * Discriminated connect-flow state.\n *\n * @remarks\n * `type` matches the builder guide: it starts at `\"idle\"` and is non-idle while\n * connecting. The intermediate phases give richer UIs something to render.\n *\n * Desktop and light-data requests move through `\"awaiting_approval\"` (Vana Web\n * opens in a popup). A deep Direct request on a mobile browser moves through\n * `\"ready_to_open\"` instead: the SDK exposes a plain HTTPS\n * `mobileContinuationUrl` for the UI to render as a primary \"Open Vana\" link,\n * never launching it automatically, and keeps polling in memory.\n */\nexport type DirectConnectState<T = unknown> =\n  | { type: \"idle\" }\n  | { type: \"creating\" }\n  | {\n      type: \"awaiting_approval\";\n      request: AccessRequest;\n      /**\n       * `true` when the popup was blocked. The UI should render the universal\n       * HTTPS `request.approvalUrl` as a manual \"Open approval\" link.\n       */\n      popupBlocked: boolean;\n      /** Present while Vana's sheet presents approval (`presentation: \"sheet\"`). */\n      sheet?: DirectConnectSheetState;\n      /**\n       * Set when the sheet could not run here and the flow fell back to the\n       * tab presentation (with `popupBlocked: true`).\n       */\n      sheetUnavailable?: SheetErrorCode;\n    }\n  | {\n      type: \"ready_to_open\";\n      request: AccessRequest;\n      /**\n       * Validated HTTPS continuation URL the mobile UI renders as the primary\n       * \"Open Vana\" tap. Polling continues while it is shown; its embedded\n       * ticket may rotate to a fresh URL between polls.\n       */\n      mobileContinuationUrl: string;\n    }\n  | { type: \"reading\"; request: AccessRequest }\n  | { type: \"done\"; result: ApprovedDataResult<T> }\n  | { type: \"error\"; error: Error };\n\n/** Whether an explicit read retry reused consent or started fresh approval. */\nexport type DirectConnectRetryOutcome =\n  | \"retried_existing_grant\"\n  | \"fresh_approval_required\";\n\n/** The store returned by {@link createDirectConnectFlow}. */\nexport interface DirectConnectFlow<T = unknown> {\n  /** Current state. */\n  getState(): DirectConnectState<T>;\n  /** Subscribe to state changes; returns an unsubscribe function. */\n  subscribe(listener: () => void): () => void;\n  /** Begin the flow. No-op if already running. */\n  start(): Promise<void>;\n  /**\n   * Retry a failed read, reusing a still-live approved request when possible.\n   *\n   * @remarks\n   * This explicit path avoids the observed double-approval symptom where\n   * \"Try that again\" minted a new request after a transient read failure.\n   * The return value tells callers whether existing consent was reused or a\n   * fresh approval was required.\n   */\n  retryRead(): Promise<DirectConnectRetryOutcome>;\n  /** Reset to `idle` and stop any in-flight polling. */\n  reset(): void;\n}\n\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_TIMEOUT_MS = 300_000;\n\nfunction toError(value: unknown): Error {\n  return value instanceof Error ? value : new Error(String(value));\n}\n\nfunction isReadReadyStatus(status: AccessRequestStatusValue): boolean {\n  return status === \"approved\" || status === \"ready_for_read\";\n}\n\nconst MOBILE_USER_AGENT =\n  /Android|iPhone|iPad|iPod|Mobile|Silk|Kindle|Opera Mini|IEMobile/i;\n\nfunction defaultBrowserPlatformPolicy(): DirectBrowserPlatformPolicy {\n  return {\n    current() {\n      if (typeof navigator === \"undefined\") return \"desktop\";\n      const isTouchCapableIpad =\n        navigator.platform === \"MacIntel\" && navigator.maxTouchPoints > 1;\n      return MOBILE_USER_AGENT.test(navigator.userAgent) || isTouchCapableIpad\n        ? \"mobile\"\n        : \"desktop\";\n    },\n  };\n}\n\n/**\n * Default {@link DirectConnectOptions.openApprovalWindow}: open a blank tab\n * synchronously (inside the click gesture) and return a handle to navigate\n * once the approval URL is known. Returns `null` when blocked or non-DOM.\n */\nfunction defaultOpenApprovalWindow(): ConnectWindow | null {\n  if (typeof window === \"undefined\" || !window.open) return null;\n  // We can't pass the \"noopener\"/\"noreferrer\" feature string here: it makes\n  // window.open() return null, which would throw away the handle we need to\n  // navigate later. So we open plain and re-create both protections by hand.\n  const opened = window.open(\"\", \"_blank\");\n  if (!opened) return null;\n  // Sever the opener link while the tab is still about:blank, so the approval\n  // page can't reach back into the app (reverse tab-nabbing).\n  try {\n    opened.opener = null;\n  } catch {\n    // Some environments make `opener` read-only; best-effort only.\n  }\n  return {\n    navigate(url: string) {\n      // Restore the no-referrer protection the old \"noreferrer\" feature gave:\n      // tag the blank document so the upcoming navigation sends no Referer to\n      // the approval page (best-effort; the blank doc is same-origin here).\n      try {\n        const meta = opened.document.createElement(\"meta\");\n        meta.name = \"referrer\";\n        meta.content = \"no-referrer\";\n        (opened.document.head ?? opened.document.documentElement)?.appendChild(\n          meta,\n        );\n      } catch {\n        // Cross-origin/unavailable document: skip, navigation still proceeds.\n      }\n      opened.location.href = url;\n    },\n    close() {\n      opened.close();\n    },\n  };\n}\n\n/**\n * Create a connect-flow store.\n *\n * @param transports - Backend transports (`createRequest`, `getStatus`, `readResult`).\n * @param options - Polling/timeout tunables and injectable side effects.\n * @returns A {@link DirectConnectFlow} store.\n */\nexport function createDirectConnectFlow<T = unknown>(\n  transports: DirectConnectTransports<T>,\n  options: DirectConnectOptions = {},\n): DirectConnectFlow<T> {\n  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  // `openApprovalWindow` and `browserPlatformPolicy` are resolved lazily at\n  // start() (see below) so options swapped in after construction are still\n  // honoured — matching the latest-callback pattern the React hook uses for its\n  // transports.\n  const setTimeoutFn =\n    options.setTimeoutFn ??\n    ((cb: () => void, ms: number) => globalThis.setTimeout(cb, ms));\n  const clearTimeoutFn =\n    options.clearTimeoutFn ??\n    ((handle: unknown) => {\n      globalThis.clearTimeout(handle as never);\n    });\n  const now = options.now ?? (() => Date.now());\n  let state: DirectConnectState<T> = { type: \"idle\" };\n  const listeners = new Set<() => void>();\n  let pollHandle: unknown = null;\n  // The request and deadline the poll loop is on, so a sheet event can ask\n  // for the next poll now instead of after the interval.\n  let pollTarget: { request: AccessRequest; deadline: number } | null = null;\n  let pollInFlight = false;\n  let pollNudged = false;\n  let running = false;\n  // Retained only after status proved this request had a read-ready grant.\n  // A retry rechecks that status before trusting the prior consent.\n  let approvedRequest: AccessRequest | null = null;\n  // Monotonic id for the current start() invocation. reset() (and an\n  // immediately following start()) bumps it, so a previous run whose async\n  // createRequest is still in flight can detect it has been superseded and\n  // avoid touching shared state / the newer run's tab.\n  let activeRunId = 0;\n  // Holds the tab we opened only while it is still blank (un-navigated). Once\n  // navigated to the approval URL we drop the reference so reset/cleanup never\n  // closes the live approval tab the user is interacting with.\n  let openedWindow: ConnectWindow | null = null;\n  // The sheet of the current run (`presentation: \"sheet\"`), while open.\n  let sheetHandle: ConnectHandle | null = null;\n  let sheetState: DirectConnectSheetState | null = null;\n  let sheetUnavailable: SheetErrorCode | null = null;\n  let sheetCloseAfterDoneMs: number | null = DEFAULT_CLOSE_AFTER_DONE_MS;\n  let sheetCloseTimer: unknown = null;\n\n  function emit(): void {\n    for (const listener of listeners) listener();\n  }\n\n  function setState(next: DirectConnectState<T>): void {\n    state = next;\n    emit();\n  }\n\n  function clearPoll(): void {\n    if (pollHandle !== null) {\n      clearTimeoutFn(pollHandle);\n      pollHandle = null;\n    }\n    pollTarget = null;\n    pollNudged = false;\n  }\n\n  /**\n   * Poll now rather than after the interval. Sheet events call this: they\n   * hint that the backend's status may have moved, but never settle the flow\n   * themselves. The poll stays the one authority for `done` and `error`.\n   */\n  function nudgePoll(): void {\n    if (!running) return;\n    if (pollInFlight) {\n      pollNudged = true;\n      return;\n    }\n    const target = pollTarget;\n    if (pollHandle === null || !target) return;\n    clearPoll();\n    void poll(target.request, target.deadline);\n  }\n\n  /** Close the opened tab if it is still blank (never navigated). */\n  function closeUnnavigatedWindow(): void {\n    if (openedWindow) {\n      openedWindow.close();\n      openedWindow = null;\n    }\n  }\n\n  function isRunningPhase(): boolean {\n    return (\n      state.type === \"creating\" ||\n      state.type === \"awaiting_approval\" ||\n      state.type === \"ready_to_open\" ||\n      state.type === \"reading\"\n    );\n  }\n\n  /** Close the sheet without treating its close event as the person's. */\n  function closeSheet(): void {\n    const handle = sheetHandle;\n    sheetHandle = null;\n    handle?.close();\n  }\n\n  function clearSheet(): void {\n    if (sheetCloseTimer !== null) {\n      clearTimeoutFn(sheetCloseTimer);\n      sheetCloseTimer = null;\n    }\n    closeSheet();\n    sheetState = null;\n    sheetUnavailable = null;\n  }\n\n  /** The waiting state for `request`, given what the sheet has reported. */\n  function awaitingState(request: AccessRequest): DirectConnectState<T> {\n    if (sheetUnavailable) {\n      return {\n        type: \"awaiting_approval\",\n        request,\n        popupBlocked: true,\n        sheetUnavailable,\n      };\n    }\n    return {\n      type: \"awaiting_approval\",\n      request,\n      popupBlocked: false,\n      ...(sheetState ? { sheet: { ...sheetState } } : {}),\n    };\n  }\n\n  function updateSheet(patch: Partial<DirectConnectSheetState>): void {\n    if (!sheetState) return;\n    sheetState = { ...sheetState, ...patch };\n    if (state.type === \"awaiting_approval\" && state.sheet) {\n      setState(awaitingState(state.request));\n    }\n  }\n\n  function failRun(error: Error): void {\n    running = false;\n    clearPoll();\n    setState({ type: \"error\", error });\n  }\n\n  /**\n   * Sheet events update what the UI shows and nudge the status poll; none of\n   * them is an outcome. `connected` is the person's approval, not delivery.\n   * A future terminal sheet event belongs here too, as another nudge: the\n   * backend poll and read still decide `done` or `error`.\n   */\n  function handleSheetEvent(event: ConnectEvent): void {\n    switch (event.type) {\n      case \"connected\":\n        updateSheet({ completion: event.completion });\n        nudgePoll();\n        return;\n      case \"progress\":\n        updateSheet({ progress: event.phase });\n        return;\n      case \"error\": {\n        if (event.code === \"request_failed\") {\n          // The backend could not create or sign the request for the sheet.\n          if (!running) return;\n          closeSheet();\n          failRun(new Error(\"Could not prepare the request for Vana's sheet\"));\n          return;\n        }\n        if (SHEET_FALLBACK_CODES.includes(event.code)) {\n          // The sheet cannot run on this page: fall back to the approval URL.\n          sheetUnavailable = event.code;\n          sheetState = null;\n          closeSheet();\n          if (state.type === \"awaiting_approval\") {\n            setState(awaitingState(state.request));\n          }\n          return;\n        }\n        updateSheet({ error: event.code });\n        return;\n      }\n      case \"close\": {\n        if (!sheetHandle) return; // closed by the flow itself\n        sheetHandle = null;\n        if (!running) return;\n        if (sheetState?.error) {\n          failRun(new Error(`Vana's sheet failed: ${sheetState.error}`));\n          return;\n        }\n        if (!sheetState?.completion) {\n          // Closed before approving: the person backed out.\n          running = false;\n          activeRunId++;\n          clearPoll();\n          sheetState = null;\n          setState({ type: \"idle\" });\n          return;\n        }\n        // Approved, then closed. The data may still be readable (a durable\n        // Personal Server), so keep polling until the request settles.\n        updateSheet({ open: false });\n        return;\n      }\n      default:\n        return;\n    }\n  }\n\n  async function readAndFinish(request: AccessRequest): Promise<void> {\n    setState({ type: \"reading\", request });\n    try {\n      const result = await transports.readResult(request.requestId);\n      if (!running) return;\n      setState({ type: \"done\", result });\n      if (sheetHandle) {\n        sheetHandle.setRequestStatus(\"completed\");\n        if (sheetCloseAfterDoneMs !== null) {\n          sheetCloseTimer = setTimeoutFn(() => {\n            sheetCloseTimer = null;\n            closeSheet();\n          }, sheetCloseAfterDoneMs);\n        }\n      }\n    } catch (err) {\n      if (!running) return;\n      setState({ type: \"error\", error: toError(err) });\n    } finally {\n      running = false;\n    }\n  }\n\n  function scheduleNextPoll(request: AccessRequest, deadline: number): void {\n    const delay = pollNudged ? 0 : pollIntervalMs;\n    pollNudged = false;\n    pollTarget = { request, deadline };\n    pollHandle = setTimeoutFn(() => {\n      pollHandle = null;\n      void poll(request, deadline);\n    }, delay);\n  }\n\n  function requestDeadline(request: AccessRequest): number {\n    if (request.expiresAt !== undefined) {\n      const expiresAt = Date.parse(request.expiresAt);\n      if (Number.isFinite(expiresAt)) return expiresAt;\n    }\n    return now() + timeoutMs;\n  }\n\n  /**\n   * Enter the polling loop from the given initial state (either\n   * `awaiting_approval` for desktop/light or `ready_to_open` for mobile-deep).\n   * Errors out immediately if the request has already expired.\n   */\n  function startPolling(\n    request: AccessRequest,\n    initialState: DirectConnectState<T>,\n  ): void {\n    pollNudged = false;\n    setState(initialState);\n    const deadline = requestDeadline(request);\n    if (now() >= deadline) {\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(\"Access request expired\"),\n      });\n      return;\n    }\n    scheduleNextPoll(request, deadline);\n  }\n\n  async function poll(request: AccessRequest, deadline: number): Promise<void> {\n    if (!running) return;\n    if (now() >= deadline) {\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(\"Timed out waiting for approval\"),\n      });\n      return;\n    }\n    let status: AccessRequestStatus;\n    pollInFlight = true;\n    try {\n      status = await transports.getStatus(request.requestId);\n    } catch (err) {\n      if (!running) return;\n      running = false;\n      setState({ type: \"error\", error: toError(err) });\n      return;\n    } finally {\n      pollInFlight = false;\n    }\n    if (!running) return;\n\n    // A pending deep-mobile status may rotate the continuation ticket. Adopt a\n    // fresh, still-valid URL so the rendered \"Open Vana\" link always points at a\n    // live ticket; ignore it on the desktop/light path.\n    if (status.status === \"pending\" && state.type === \"ready_to_open\") {\n      const refreshed = normalizeMobileContinuationUrl(\n        status.mobileContinuationUrl,\n      );\n      if (refreshed && refreshed !== state.mobileContinuationUrl) {\n        request = { ...request, mobileContinuationUrl: refreshed };\n        setState({\n          type: \"ready_to_open\",\n          request,\n          mobileContinuationUrl: refreshed,\n        });\n      }\n    }\n\n    if (isReadReadyStatus(status.status)) {\n      clearPoll();\n      approvedRequest = request;\n      await readAndFinish(request);\n      return;\n    }\n    if (\n      status.status === \"completed\" ||\n      status.status === \"denied\" ||\n      status.status === \"expired\"\n    ) {\n      // The sheet shows the outcome; it stays open for the person to close.\n      sheetHandle?.setRequestStatus(status.status);\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(`Access request ${status.status}`),\n      });\n      return;\n    }\n    scheduleNextPoll(request, deadline);\n  }\n\n  const flow: DirectConnectFlow<T> = {\n    getState() {\n      return state;\n    },\n\n    subscribe(listener: () => void) {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n\n    async start(): Promise<void> {\n      if (running || isRunningPhase()) return;\n      running = true;\n      // start() deliberately keeps its established first-run semantics: every\n      // explicit start creates a request. Only retryRead() may reuse consent.\n      approvedRequest = null;\n      const runId = ++activeRunId;\n      clearSheet();\n      if (options.presentation === \"sheet\") {\n        await startSheet(runId);\n        return;\n      }\n      // Read the platform policy at start time, like openApprovalWindow below,\n      // so a policy swapped in after construction (a React rerender forwards\n      // options through a ref) still decides this run's destination.\n      const browserPlatform = (\n        options.browserPlatformPolicy ?? defaultBrowserPlatformPolicy()\n      ).current();\n\n      // Desktop preserves the pre-mobile synchronous popup contract: open a\n      // blank tab while the click's transient activation is live, then navigate\n      // it once createRequest returns the approval URL (BUI-622). Mobile never\n      // creates that transient tab; deep requests expose one explicit HTTPS\n      // link, while light requests retain the manual approvalUrl fallback.\n      // Read the opener option at start time so a swapped-in custom opener is\n      // still honored for desktop flows.\n      const approvalWindow =\n        browserPlatform === \"desktop\"\n          ? (options.openApprovalWindow ?? defaultOpenApprovalWindow)()\n          : null;\n      openedWindow = approvalWindow;\n\n      setState({ type: \"creating\" });\n\n      let request: AccessRequest;\n      try {\n        request = await transports.createRequest();\n      } catch (err) {\n        // If we were superseded (reset, possibly + a newer start()) while this\n        // request was in flight, only clean up our own tab — never the shared\n        // state or the newer run's window.\n        if (runId !== activeRunId) {\n          approvalWindow?.close();\n          return;\n        }\n        running = false;\n        closeUnnavigatedWindow();\n        setState({ type: \"error\", error: toError(err) });\n        return;\n      }\n      if (runId !== activeRunId) {\n        approvalWindow?.close();\n        return;\n      }\n      // Re-validate the continuation URL at the SDK boundary (defense in depth\n      // for custom transports that bypass the default client).\n      request = {\n        ...request,\n        mobileContinuationUrl: normalizeMobileContinuationUrl(\n          request.mobileContinuationUrl,\n        ),\n      };\n\n      // The SDK owns only the small mobile-versus-desktop destination choice.\n      // A deep Direct request on mobile carries a validated continuation URL;\n      // desktop keeps its popup contract, while mobile light exposes the HTTPS\n      // approval URL as the existing manual fallback without opening a tab.\n      const mobileContinuationUrl =\n        browserPlatform === \"mobile\"\n          ? request.mobileContinuationUrl\n          : undefined;\n\n      if (mobileContinuationUrl) {\n        // Do not auto-launch: DCR creation is async, so the original Connect\n        // gesture can no longer be trusted to retain iOS user activation. Let\n        // the UI render an explicit primary \"Open Vana\" link; polling continues\n        // in this tab.\n        startPolling(request, {\n          type: \"ready_to_open\",\n          request,\n          mobileContinuationUrl,\n        });\n        return;\n      }\n\n      // Desktop/light: navigate the synchronously-opened tab to the HTTPS\n      // approval URL. `approvalWindow === null` means the popup was blocked;\n      // surface it so the UI renders request.approvalUrl as a visible manual\n      // \"Open approval\" link instead of hanging. We poll either way, so a manual\n      // open still resolves the flow, and the timeout still bounds the wait.\n      if (approvalWindow) {\n        approvalWindow.navigate(request.approvalUrl);\n        // Hand the tab off to the user; we no longer own/close it.\n        openedWindow = null;\n      }\n      startPolling(request, {\n        type: \"awaiting_approval\",\n        request,\n        popupBlocked: approvalWindow === null,\n      });\n    },\n\n    async retryRead(): Promise<DirectConnectRetryOutcome> {\n      if (running || isRunningPhase()) {\n        throw new Error(\n          \"Cannot retry a read while the connect flow is running\",\n        );\n      }\n\n      const request = approvedRequest;\n      const parsedExpiry = request?.expiresAt\n        ? Date.parse(request.expiresAt)\n        : Number.NaN;\n      const requestExpired =\n        Number.isFinite(parsedExpiry) && now() >= parsedExpiry;\n\n      if (request && !requestExpired) {\n        running = true;\n        const runId = ++activeRunId;\n        let status: AccessRequestStatus;\n        try {\n          status = await transports.getStatus(request.requestId);\n        } catch (err) {\n          if (runId !== activeRunId) {\n            throw new Error(\"Read retry was superseded\");\n          }\n          running = false;\n          const error = toError(err);\n          setState({ type: \"error\", error });\n          throw error;\n        }\n        if (runId !== activeRunId) {\n          throw new Error(\"Read retry was superseded\");\n        }\n        if (isReadReadyStatus(status.status)) {\n          await readAndFinish(request);\n          return \"retried_existing_grant\";\n        }\n        running = false;\n      }\n\n      approvedRequest = null;\n      await flow.start();\n      return \"fresh_approval_required\";\n    },\n\n    reset(): void {\n      running = false;\n      approvedRequest = null;\n      // Invalidate any in-flight start() so a late createRequest can't clobber\n      // a subsequent run.\n      activeRunId++;\n      clearPoll();\n      closeUnnavigatedWindow();\n      clearSheet();\n      setState({ type: \"idle\" });\n    },\n  };\n\n  /**\n   * `presentation: \"sheet\"`: open Vana's sheet at once and create the request\n   * alongside it, so the request is ready by the time the person has signed\n   * in. The sheet asks for the request's read capability; the status poll and\n   * the read are the tab flow's.\n   */\n  async function startSheet(runId: number): Promise<void> {\n    setState({ type: \"creating\" });\n    const fail = (error: unknown) => {\n      if (runId !== activeRunId) return;\n      clearSheet();\n      failRun(toError(error));\n    };\n\n    const authorizeRequest = transports.authorizeRequest;\n    if (!authorizeRequest) {\n      fail(\n        new Error('presentation: \"sheet\" needs the authorizeRequest transport'),\n      );\n      return;\n    }\n    let sheetOptions: DirectConnectSheetOptions;\n    try {\n      const configured = options.sheet;\n      if (!configured) {\n        throw new Error('presentation: \"sheet\" needs sheet options');\n      }\n      sheetOptions =\n        typeof configured === \"function\" ? await configured() : configured;\n    } catch (err) {\n      fail(err);\n      return;\n    }\n    if (runId !== activeRunId) return;\n\n    const created = transports.createRequest();\n    // Observed below; this keeps an early rejection from going unhandled.\n    created.catch(() => undefined);\n    sheetCloseAfterDoneMs =\n      sheetOptions.closeAfterDoneMs === undefined\n        ? DEFAULT_CLOSE_AFTER_DONE_MS\n        : sheetOptions.closeAfterDoneMs;\n    sheetState = { open: true };\n    try {\n      sheetHandle = (sheetOptions.open ?? openConnectSheet)({\n        clientId: sheetOptions.clientId,\n        appName: sheetOptions.appName,\n        vanaOrigin: sheetOptions.accountOrigin,\n        container: sheetOptions.container,\n        readyTimeoutMs: sheetOptions.readyTimeoutMs,\n        async getRequest() {\n          const request = await created;\n          return {\n            id: request.requestId,\n            authorization: await authorizeRequest(request.requestId),\n          };\n        },\n        onEvent(event) {\n          if (runId !== activeRunId) return;\n          sheetOptions.onEvent?.(event);\n          handleSheetEvent(event);\n        },\n      });\n    } catch {\n      // A launcher that cannot open (no DOM, bad origin) is a sheet that\n      // cannot run here: fall back to the approval URL.\n      sheetHandle = null;\n      sheetState = null;\n      sheetUnavailable = \"sheet_failed\";\n    }\n\n    let request: AccessRequest;\n    try {\n      request = await created;\n    } catch (err) {\n      fail(err);\n      return;\n    }\n    if (runId !== activeRunId || !running) return;\n    startPolling(request, awaitingState(request));\n  }\n\n  return flow;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAqBA,mBAA+C;AAC/C,sBAKO;AAsFP,MAAM,uBAAkD;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,8BAA8B;AA8IpC,MAAM,2BAA2B;AACjC,MAAM,qBAAqB;AAE3B,SAAS,QAAQ,OAAuB;AACtC,SAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAEA,SAAS,kBAAkB,QAA2C;AACpE,SAAO,WAAW,cAAc,WAAW;AAC7C;AAEA,MAAM,oBACJ;AAEF,SAAS,+BAA4D;AACnE,SAAO;AAAA,IACL,UAAU;AACR,UAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,YAAM,qBACJ,UAAU,aAAa,cAAc,UAAU,iBAAiB;AAClE,aAAO,kBAAkB,KAAK,UAAU,SAAS,KAAK,qBAClD,WACA;AAAA,IACN;AAAA,EACF;AACF;AAOA,SAAS,4BAAkD;AACzD,MAAI,OAAO,WAAW,eAAe,CAAC,OAAO,KAAM,QAAO;AAI1D,QAAM,SAAS,OAAO,KAAK,IAAI,QAAQ;AACvC,MAAI,CAAC,OAAQ,QAAO;AAGpB,MAAI;AACF,WAAO,SAAS;AAAA,EAClB,QAAQ;AAAA,EAER;AACA,SAAO;AAAA,IACL,SAAS,KAAa;AAIpB,UAAI;AACF,cAAM,OAAO,OAAO,SAAS,cAAc,MAAM;AACjD,aAAK,OAAO;AACZ,aAAK,UAAU;AACf,SAAC,OAAO,SAAS,QAAQ,OAAO,SAAS,kBAAkB;AAAA,UACzD;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AACA,aAAO,SAAS,OAAO;AAAA,IACzB;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AAAA,IACf;AAAA,EACF;AACF;AASO,SAAS,wBACd,YACA,UAAgC,CAAC,GACX;AACtB,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,YAAY,QAAQ,aAAa;AAKvC,QAAM,eACJ,QAAQ,iBACP,CAAC,IAAgB,OAAe,WAAW,WAAW,IAAI,EAAE;AAC/D,QAAM,iBACJ,QAAQ,mBACP,CAAC,WAAoB;AACpB,eAAW,aAAa,MAAe;AAAA,EACzC;AACF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,MAAI,QAA+B,EAAE,MAAM,OAAO;AAClD,QAAM,YAAY,oBAAI,IAAgB;AACtC,MAAI,aAAsB;AAG1B,MAAI,aAAkE;AACtE,MAAI,eAAe;AACnB,MAAI,aAAa;AACjB,MAAI,UAAU;AAGd,MAAI,kBAAwC;AAK5C,MAAI,cAAc;AAIlB,MAAI,eAAqC;AAEzC,MAAI,cAAoC;AACxC,MAAI,aAA6C;AACjD,MAAI,mBAA0C;AAC9C,MAAI,wBAAuC;AAC3C,MAAI,kBAA2B;AAE/B,WAAS,OAAa;AACpB,eAAW,YAAY,UAAW,UAAS;AAAA,EAC7C;AAEA,WAAS,SAAS,MAAmC;AACnD,YAAQ;AACR,SAAK;AAAA,EACP;AAEA,WAAS,YAAkB;AACzB,QAAI,eAAe,MAAM;AACvB,qBAAe,UAAU;AACzB,mBAAa;AAAA,IACf;AACA,iBAAa;AACb,iBAAa;AAAA,EACf;AAOA,WAAS,YAAkB;AACzB,QAAI,CAAC,QAAS;AACd,QAAI,cAAc;AAChB,mBAAa;AACb;AAAA,IACF;AACA,UAAM,SAAS;AACf,QAAI,eAAe,QAAQ,CAAC,OAAQ;AACpC,cAAU;AACV,SAAK,KAAK,OAAO,SAAS,OAAO,QAAQ;AAAA,EAC3C;AAGA,WAAS,yBAA+B;AACtC,QAAI,cAAc;AAChB,mBAAa,MAAM;AACnB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,WAAS,iBAA0B;AACjC,WACE,MAAM,SAAS,cACf,MAAM,SAAS,uBACf,MAAM,SAAS,mBACf,MAAM,SAAS;AAAA,EAEnB;AAGA,WAAS,aAAmB;AAC1B,UAAM,SAAS;AACf,kBAAc;AACd,YAAQ,MAAM;AAAA,EAChB;AAEA,WAAS,aAAmB;AAC1B,QAAI,oBAAoB,MAAM;AAC5B,qBAAe,eAAe;AAC9B,wBAAkB;AAAA,IACpB;AACA,eAAW;AACX,iBAAa;AACb,uBAAmB;AAAA,EACrB;AAGA,WAAS,cAAc,SAA+C;AACpE,QAAI,kBAAkB;AACpB,aAAO;AAAA,QACL,MAAM;AAAA,QACN;AAAA,QACA,cAAc;AAAA,QACd;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,cAAc;AAAA,MACd,GAAI,aAAa,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,IAAI,CAAC;AAAA,IACnD;AAAA,EACF;AAEA,WAAS,YAAY,OAA+C;AAClE,QAAI,CAAC,WAAY;AACjB,iBAAa,EAAE,GAAG,YAAY,GAAG,MAAM;AACvC,QAAI,MAAM,SAAS,uBAAuB,MAAM,OAAO;AACrD,eAAS,cAAc,MAAM,OAAO,CAAC;AAAA,IACvC;AAAA,EACF;AAEA,WAAS,QAAQ,OAAoB;AACnC,cAAU;AACV,cAAU;AACV,aAAS,EAAE,MAAM,SAAS,MAAM,CAAC;AAAA,EACnC;AAQA,WAAS,iBAAiB,OAA2B;AACnD,YAAQ,MAAM,MAAM;AAAA,MAClB,KAAK;AACH,oBAAY,EAAE,YAAY,MAAM,WAAW,CAAC;AAC5C,kBAAU;AACV;AAAA,MACF,KAAK;AACH,oBAAY,EAAE,UAAU,MAAM,MAAM,CAAC;AACrC;AAAA,MACF,KAAK,SAAS;AACZ,YAAI,MAAM,SAAS,kBAAkB;AAEnC,cAAI,CAAC,QAAS;AACd,qBAAW;AACX,kBAAQ,IAAI,MAAM,gDAAgD,CAAC;AACnE;AAAA,QACF;AACA,YAAI,qBAAqB,SAAS,MAAM,IAAI,GAAG;AAE7C,6BAAmB,MAAM;AACzB,uBAAa;AACb,qBAAW;AACX,cAAI,MAAM,SAAS,qBAAqB;AACtC,qBAAS,cAAc,MAAM,OAAO,CAAC;AAAA,UACvC;AACA;AAAA,QACF;AACA,oBAAY,EAAE,OAAO,MAAM,KAAK,CAAC;AACjC;AAAA,MACF;AAAA,MACA,KAAK,SAAS;AACZ,YAAI,CAAC,YAAa;AAClB,sBAAc;AACd,YAAI,CAAC,QAAS;AACd,YAAI,YAAY,OAAO;AACrB,kBAAQ,IAAI,MAAM,wBAAwB,WAAW,KAAK,EAAE,CAAC;AAC7D;AAAA,QACF;AACA,YAAI,CAAC,YAAY,YAAY;AAE3B,oBAAU;AACV;AACA,oBAAU;AACV,uBAAa;AACb,mBAAS,EAAE,MAAM,OAAO,CAAC;AACzB;AAAA,QACF;AAGA,oBAAY,EAAE,MAAM,MAAM,CAAC;AAC3B;AAAA,MACF;AAAA,MACA;AACE;AAAA,IACJ;AAAA,EACF;AAEA,iBAAe,cAAc,SAAuC;AAClE,aAAS,EAAE,MAAM,WAAW,QAAQ,CAAC;AACrC,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,WAAW,QAAQ,SAAS;AAC5D,UAAI,CAAC,QAAS;AACd,eAAS,EAAE,MAAM,QAAQ,OAAO,CAAC;AACjC,UAAI,aAAa;AACf,oBAAY,iBAAiB,WAAW;AACxC,YAAI,0BAA0B,MAAM;AAClC,4BAAkB,aAAa,MAAM;AACnC,8BAAkB;AAClB,uBAAW;AAAA,UACb,GAAG,qBAAqB;AAAA,QAC1B;AAAA,MACF;AAAA,IACF,SAAS,KAAK;AACZ,UAAI,CAAC,QAAS;AACd,eAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAAA,IACjD,UAAE;AACA,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,WAAS,iBAAiB,SAAwB,UAAwB;AACxE,UAAM,QAAQ,aAAa,IAAI;AAC/B,iBAAa;AACb,iBAAa,EAAE,SAAS,SAAS;AACjC,iBAAa,aAAa,MAAM;AAC9B,mBAAa;AACb,WAAK,KAAK,SAAS,QAAQ;AAAA,IAC7B,GAAG,KAAK;AAAA,EACV;AAEA,WAAS,gBAAgB,SAAgC;AACvD,QAAI,QAAQ,cAAc,QAAW;AACnC,YAAM,YAAY,KAAK,MAAM,QAAQ,SAAS;AAC9C,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO;AAAA,IACzC;AACA,WAAO,IAAI,IAAI;AAAA,EACjB;AAOA,WAAS,aACP,SACA,cACM;AACN,iBAAa;AACb,aAAS,YAAY;AACrB,UAAM,WAAW,gBAAgB,OAAO;AACxC,QAAI,IAAI,KAAK,UAAU;AACrB,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,wBAAwB;AAAA,MAC3C,CAAC;AACD;AAAA,IACF;AACA,qBAAiB,SAAS,QAAQ;AAAA,EACpC;AAEA,iBAAe,KAAK,SAAwB,UAAiC;AAC3E,QAAI,CAAC,QAAS;AACd,QAAI,IAAI,KAAK,UAAU;AACrB,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,gCAAgC;AAAA,MACnD,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,mBAAe;AACf,QAAI;AACF,eAAS,MAAM,WAAW,UAAU,QAAQ,SAAS;AAAA,IACvD,SAAS,KAAK;AACZ,UAAI,CAAC,QAAS;AACd,gBAAU;AACV,eAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAC/C;AAAA,IACF,UAAE;AACA,qBAAe;AAAA,IACjB;AACA,QAAI,CAAC,QAAS;AAKd,QAAI,OAAO,WAAW,aAAa,MAAM,SAAS,iBAAiB;AACjE,YAAM,gBAAY;AAAA,QAChB,OAAO;AAAA,MACT;AACA,UAAI,aAAa,cAAc,MAAM,uBAAuB;AAC1D,kBAAU,EAAE,GAAG,SAAS,uBAAuB,UAAU;AACzD,iBAAS;AAAA,UACP,MAAM;AAAA,UACN;AAAA,UACA,uBAAuB;AAAA,QACzB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,kBAAkB,OAAO,MAAM,GAAG;AACpC,gBAAU;AACV,wBAAkB;AAClB,YAAM,cAAc,OAAO;AAC3B;AAAA,IACF;AACA,QACE,OAAO,WAAW,eAClB,OAAO,WAAW,YAClB,OAAO,WAAW,WAClB;AAEA,mBAAa,iBAAiB,OAAO,MAAM;AAC3C,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,kBAAkB,OAAO,MAAM,EAAE;AAAA,MACpD,CAAC;AACD;AAAA,IACF;AACA,qBAAiB,SAAS,QAAQ;AAAA,EACpC;AAEA,QAAM,OAA6B;AAAA,IACjC,WAAW;AACT,aAAO;AAAA,IACT;AAAA,IAEA,UAAU,UAAsB;AAC9B,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM,UAAU,OAAO,QAAQ;AAAA,IACxC;AAAA,IAEA,MAAM,QAAuB;AAC3B,UAAI,WAAW,eAAe,EAAG;AACjC,gBAAU;AAGV,wBAAkB;AAClB,YAAM,QAAQ,EAAE;AAChB,iBAAW;AACX,UAAI,QAAQ,iBAAiB,SAAS;AACpC,cAAM,WAAW,KAAK;AACtB;AAAA,MACF;AAIA,YAAM,mBACJ,QAAQ,yBAAyB,6BAA6B,GAC9D,QAAQ;AASV,YAAM,iBACJ,oBAAoB,aACf,QAAQ,sBAAsB,2BAA2B,IAC1D;AACN,qBAAe;AAEf,eAAS,EAAE,MAAM,WAAW,CAAC;AAE7B,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,WAAW,cAAc;AAAA,MAC3C,SAAS,KAAK;AAIZ,YAAI,UAAU,aAAa;AACzB,0BAAgB,MAAM;AACtB;AAAA,QACF;AACA,kBAAU;AACV,+BAAuB;AACvB,iBAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAC/C;AAAA,MACF;AACA,UAAI,UAAU,aAAa;AACzB,wBAAgB,MAAM;AACtB;AAAA,MACF;AAGA,gBAAU;AAAA,QACR,GAAG;AAAA,QACH,2BAAuB;AAAA,UACrB,QAAQ;AAAA,QACV;AAAA,MACF;AAMA,YAAM,wBACJ,oBAAoB,WAChB,QAAQ,wBACR;AAEN,UAAI,uBAAuB;AAKzB,qBAAa,SAAS;AAAA,UACpB,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAOA,UAAI,gBAAgB;AAClB,uBAAe,SAAS,QAAQ,WAAW;AAE3C,uBAAe;AAAA,MACjB;AACA,mBAAa,SAAS;AAAA,QACpB,MAAM;AAAA,QACN;AAAA,QACA,cAAc,mBAAmB;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAgD;AACpD,UAAI,WAAW,eAAe,GAAG;AAC/B,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU;AAChB,YAAM,eAAe,SAAS,YAC1B,KAAK,MAAM,QAAQ,SAAS,IAC5B,OAAO;AACX,YAAM,iBACJ,OAAO,SAAS,YAAY,KAAK,IAAI,KAAK;AAE5C,UAAI,WAAW,CAAC,gBAAgB;AAC9B,kBAAU;AACV,cAAM,QAAQ,EAAE;AAChB,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,WAAW,UAAU,QAAQ,SAAS;AAAA,QACvD,SAAS,KAAK;AACZ,cAAI,UAAU,aAAa;AACzB,kBAAM,IAAI,MAAM,2BAA2B;AAAA,UAC7C;AACA,oBAAU;AACV,gBAAM,QAAQ,QAAQ,GAAG;AACzB,mBAAS,EAAE,MAAM,SAAS,MAAM,CAAC;AACjC,gBAAM;AAAA,QACR;AACA,YAAI,UAAU,aAAa;AACzB,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C;AACA,YAAI,kBAAkB,OAAO,MAAM,GAAG;AACpC,gBAAM,cAAc,OAAO;AAC3B,iBAAO;AAAA,QACT;AACA,kBAAU;AAAA,MACZ;AAEA,wBAAkB;AAClB,YAAM,KAAK,MAAM;AACjB,aAAO;AAAA,IACT;AAAA,IAEA,QAAc;AACZ,gBAAU;AACV,wBAAkB;AAGlB;AACA,gBAAU;AACV,6BAAuB;AACvB,iBAAW;AACX,eAAS,EAAE,MAAM,OAAO,CAAC;AAAA,IAC3B;AAAA,EACF;AAQA,iBAAe,WAAW,OAA8B;AACtD,aAAS,EAAE,MAAM,WAAW,CAAC;AAC7B,UAAM,OAAO,CAAC,UAAmB;AAC/B,UAAI,UAAU,YAAa;AAC3B,iBAAW;AACX,cAAQ,QAAQ,KAAK,CAAC;AAAA,IACxB;AAEA,UAAM,mBAAmB,WAAW;AACpC,QAAI,CAAC,kBAAkB;AACrB;AAAA,QACE,IAAI,MAAM,4DAA4D;AAAA,MACxE;AACA;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,YAAM,aAAa,QAAQ;AAC3B,UAAI,CAAC,YAAY;AACf,cAAM,IAAI,MAAM,2CAA2C;AAAA,MAC7D;AACA,qBACE,OAAO,eAAe,aAAa,MAAM,WAAW,IAAI;AAAA,IAC5D,SAAS,KAAK;AACZ,WAAK,GAAG;AACR;AAAA,IACF;AACA,QAAI,UAAU,YAAa;AAE3B,UAAM,UAAU,WAAW,cAAc;AAEzC,YAAQ,MAAM,MAAM,MAAS;AAC7B,4BACE,aAAa,qBAAqB,SAC9B,8BACA,aAAa;AACnB,iBAAa,EAAE,MAAM,KAAK;AAC1B,QAAI;AACF,qBAAe,aAAa,QAAQ,kCAAkB;AAAA,QACpD,UAAU,aAAa;AAAA,QACvB,SAAS,aAAa;AAAA,QACtB,YAAY,aAAa;AAAA,QACzB,WAAW,aAAa;AAAA,QACxB,gBAAgB,aAAa;AAAA,QAC7B,MAAM,aAAa;AACjB,gBAAMA,WAAU,MAAM;AACtB,iBAAO;AAAA,YACL,IAAIA,SAAQ;AAAA,YACZ,eAAe,MAAM,iBAAiBA,SAAQ,SAAS;AAAA,UACzD;AAAA,QACF;AAAA,QACA,QAAQ,OAAO;AACb,cAAI,UAAU,YAAa;AAC3B,uBAAa,UAAU,KAAK;AAC5B,2BAAiB,KAAK;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AAGN,oBAAc;AACd,mBAAa;AACb,yBAAmB;AAAA,IACrB;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM;AAAA,IAClB,SAAS,KAAK;AACZ,WAAK,GAAG;AACR;AAAA,IACF;AACA,QAAI,UAAU,eAAe,CAAC,QAAS;AACvC,iBAAa,SAAS,cAAc,OAAO,CAAC;AAAA,EAC9C;AAEA,SAAO;AACT;","names":["request"]}
+{"version":3,"sources":["../../src/direct/connect-flow.ts"],"sourcesContent":["/**\n * Framework-agnostic connect-flow state machine for the browser two-tab helper.\n *\n * @remarks\n * This is the testable core behind {@link useDirectVanaConnect}. It is pure\n * TypeScript (no React, no DOM-only APIs beyond an injectable window opener and\n * timers) so the full flow — create request, open Vana, poll status, read data —\n * can be exercised in a Node test environment.\n *\n * The React hook is a thin `useSyncExternalStore` binding over this store.\n *\n * @category Direct\n * @module direct/connect-flow\n */\n\nimport type {\n  AccessRequest,\n  AccessRequestStatus,\n  AccessRequestStatusValue,\n  ApprovedDataResult,\n} from \"./types\";\nimport { normalizeMobileContinuationUrl } from \"./types\";\n\n/**\n * Caller-supplied transports. These typically `fetch` the app's own backend\n * routes, which in turn delegate to a {@link DirectDataController}.\n */\nexport interface DirectConnectTransports<T = unknown> {\n  /** Ask the backend to create an access request. */\n  createRequest: () => Promise<AccessRequest>;\n  /** Ask the backend for the current status of a request. */\n  getStatus: (requestId: string) => Promise<AccessRequestStatus>;\n  /** Ask the backend to read the approved data. */\n  readResult: (requestId: string) => Promise<ApprovedDataResult<T>>;\n}\n\n/**\n * A handle to a tab opened synchronously under the user's click gesture.\n *\n * @remarks\n * The flow opens this tab *before* it knows the approval URL (popup blockers\n * only allow `window.open()` during the click's transient activation), then\n * navigates it once `createRequest` resolves.\n */\nexport interface ConnectWindow {\n  /** Point the already-open tab at the approval URL. */\n  navigate(url: string): void;\n  /** Close the tab (used to clean up an un-navigated tab on failure/reset). */\n  close(): void;\n}\n\n/** Browser class used only to choose the destination returned by Vana. */\nexport type DirectBrowserPlatform = \"desktop\" | \"mobile\";\n\n/** Injectable browser-platform policy; it never asserts whether an app exists. */\nexport interface DirectBrowserPlatformPolicy {\n  current(): DirectBrowserPlatform;\n}\n\n/** Tunables for the connect flow. */\nexport interface DirectConnectOptions {\n  /** Status poll interval in ms. Defaults to 1500. */\n  pollIntervalMs?: number;\n  /**\n   * Overall timeout in ms before giving up. Defaults to 300000 (5 min).\n   * Used only when the access request does not carry an authoritative\n   * `expiresAt` value.\n   */\n  timeoutMs?: number;\n  /**\n   * Synchronously open a blank tab under the click's transient activation and\n   * return a handle to navigate later, or `null` if the browser blocked it.\n   * Defaults to `window.open(\"\", \"_blank\")` (with `opener` severed). Injectable\n   * for tests.\n   *\n   * @remarks\n   * Renamed from the pre-3.8 `openWindow?: (url) => void`. The old contract was\n   * the BUI-622 bug itself (it was called with the URL *after* an `await`, so\n   * the popup blocker suppressed it); it cannot be preserved while fixing the\n   * bug. Custom openers must now open synchronously and return a navigable\n   * handle.\n   */\n  openApprovalWindow?: () => ConnectWindow | null;\n  /** SDK-owned mobile/desktop policy. Injectable for deterministic tests. */\n  browserPlatformPolicy?: DirectBrowserPlatformPolicy;\n  /** `setTimeout`. Injectable for tests. Defaults to `globalThis.setTimeout`. */\n  setTimeoutFn?: (cb: () => void, ms: number) => unknown;\n  /** `clearTimeout`. Injectable for tests. Defaults to `globalThis.clearTimeout`. */\n  clearTimeoutFn?: (handle: unknown) => void;\n  /** Clock source in ms. Injectable for tests. Defaults to `Date.now`. */\n  now?: () => number;\n}\n\n/**\n * Discriminated connect-flow state.\n *\n * @remarks\n * `type` matches the builder guide: it starts at `\"idle\"` and is non-idle while\n * connecting. The intermediate phases give richer UIs something to render.\n *\n * Desktop and light-data requests move through `\"awaiting_approval\"` (Vana Web\n * opens in a popup). A deep Direct request on a mobile browser moves through\n * `\"ready_to_open\"` instead: the SDK exposes a plain HTTPS\n * `mobileContinuationUrl` for the UI to render as a primary \"Open Vana\" link,\n * never launching it automatically, and keeps polling in memory.\n */\nexport type DirectConnectState<T = unknown> =\n  | { type: \"idle\" }\n  | { type: \"creating\" }\n  | {\n      type: \"awaiting_approval\";\n      request: AccessRequest;\n      /**\n       * `true` when the popup was blocked. The UI should render the universal\n       * HTTPS `request.approvalUrl` as a manual \"Open approval\" link.\n       */\n      popupBlocked: boolean;\n    }\n  | {\n      type: \"ready_to_open\";\n      request: AccessRequest;\n      /**\n       * Validated HTTPS continuation URL the mobile UI renders as the primary\n       * \"Open Vana\" tap. Polling continues while it is shown; its embedded\n       * ticket may rotate to a fresh URL between polls.\n       */\n      mobileContinuationUrl: string;\n    }\n  | { type: \"reading\"; request: AccessRequest }\n  | { type: \"done\"; result: ApprovedDataResult<T> }\n  | { type: \"error\"; error: Error };\n\n/** Whether an explicit read retry reused consent or started fresh approval. */\nexport type DirectConnectRetryOutcome =\n  | \"retried_existing_grant\"\n  | \"fresh_approval_required\";\n\n/** The store returned by {@link createDirectConnectFlow}. */\nexport interface DirectConnectFlow<T = unknown> {\n  /** Current state. */\n  getState(): DirectConnectState<T>;\n  /** Subscribe to state changes; returns an unsubscribe function. */\n  subscribe(listener: () => void): () => void;\n  /** Begin the flow. No-op if already running. */\n  start(): Promise<void>;\n  /**\n   * Retry a failed read, reusing a still-live approved request when possible.\n   *\n   * @remarks\n   * This explicit path avoids the observed double-approval symptom where\n   * \"Try that again\" minted a new request after a transient read failure.\n   * The return value tells callers whether existing consent was reused or a\n   * fresh approval was required.\n   */\n  retryRead(): Promise<DirectConnectRetryOutcome>;\n  /** Reset to `idle` and stop any in-flight polling. */\n  reset(): void;\n}\n\nconst DEFAULT_POLL_INTERVAL_MS = 1500;\nconst DEFAULT_TIMEOUT_MS = 300_000;\n\nfunction toError(value: unknown): Error {\n  return value instanceof Error ? value : new Error(String(value));\n}\n\nfunction isReadReadyStatus(status: AccessRequestStatusValue): boolean {\n  return status === \"approved\" || status === \"ready_for_read\";\n}\n\nconst MOBILE_USER_AGENT =\n  /Android|iPhone|iPad|iPod|Mobile|Silk|Kindle|Opera Mini|IEMobile/i;\n\nfunction defaultBrowserPlatformPolicy(): DirectBrowserPlatformPolicy {\n  return {\n    current() {\n      if (typeof navigator === \"undefined\") return \"desktop\";\n      const isTouchCapableIpad =\n        navigator.platform === \"MacIntel\" && navigator.maxTouchPoints > 1;\n      return MOBILE_USER_AGENT.test(navigator.userAgent) || isTouchCapableIpad\n        ? \"mobile\"\n        : \"desktop\";\n    },\n  };\n}\n\n/**\n * Default {@link DirectConnectOptions.openApprovalWindow}: open a blank tab\n * synchronously (inside the click gesture) and return a handle to navigate\n * once the approval URL is known. Returns `null` when blocked or non-DOM.\n */\nfunction defaultOpenApprovalWindow(): ConnectWindow | null {\n  if (typeof window === \"undefined\" || !window.open) return null;\n  // We can't pass the \"noopener\"/\"noreferrer\" feature string here: it makes\n  // window.open() return null, which would throw away the handle we need to\n  // navigate later. So we open plain and re-create both protections by hand.\n  const opened = window.open(\"\", \"_blank\");\n  if (!opened) return null;\n  // Sever the opener link while the tab is still about:blank, so the approval\n  // page can't reach back into the app (reverse tab-nabbing).\n  try {\n    opened.opener = null;\n  } catch {\n    // Some environments make `opener` read-only; best-effort only.\n  }\n  return {\n    navigate(url: string) {\n      // Restore the no-referrer protection the old \"noreferrer\" feature gave:\n      // tag the blank document so the upcoming navigation sends no Referer to\n      // the approval page (best-effort; the blank doc is same-origin here).\n      try {\n        const meta = opened.document.createElement(\"meta\");\n        meta.name = \"referrer\";\n        meta.content = \"no-referrer\";\n        (opened.document.head ?? opened.document.documentElement)?.appendChild(\n          meta,\n        );\n      } catch {\n        // Cross-origin/unavailable document: skip, navigation still proceeds.\n      }\n      opened.location.href = url;\n    },\n    close() {\n      opened.close();\n    },\n  };\n}\n\n/**\n * Create a connect-flow store.\n *\n * @param transports - Backend transports (`createRequest`, `getStatus`, `readResult`).\n * @param options - Polling/timeout tunables and injectable side effects.\n * @returns A {@link DirectConnectFlow} store.\n */\nexport function createDirectConnectFlow<T = unknown>(\n  transports: DirectConnectTransports<T>,\n  options: DirectConnectOptions = {},\n): DirectConnectFlow<T> {\n  const pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  // `openApprovalWindow` and `browserPlatformPolicy` are resolved lazily at\n  // start() (see below) so options swapped in after construction are still\n  // honoured — matching the latest-callback pattern the React hook uses for its\n  // transports.\n  const setTimeoutFn =\n    options.setTimeoutFn ??\n    ((cb: () => void, ms: number) => globalThis.setTimeout(cb, ms));\n  const clearTimeoutFn =\n    options.clearTimeoutFn ??\n    ((handle: unknown) => {\n      globalThis.clearTimeout(handle as never);\n    });\n  const now = options.now ?? (() => Date.now());\n  let state: DirectConnectState<T> = { type: \"idle\" };\n  const listeners = new Set<() => void>();\n  let pollHandle: unknown = null;\n  let running = false;\n  // Retained only after status proved this request had a read-ready grant.\n  // A retry rechecks that status before trusting the prior consent.\n  let approvedRequest: AccessRequest | null = null;\n  // Monotonic id for the current start() invocation. reset() (and an\n  // immediately following start()) bumps it, so a previous run whose async\n  // createRequest is still in flight can detect it has been superseded and\n  // avoid touching shared state / the newer run's tab.\n  let activeRunId = 0;\n  // Holds the tab we opened only while it is still blank (un-navigated). Once\n  // navigated to the approval URL we drop the reference so reset/cleanup never\n  // closes the live approval tab the user is interacting with.\n  let openedWindow: ConnectWindow | null = null;\n\n  function emit(): void {\n    for (const listener of listeners) listener();\n  }\n\n  function setState(next: DirectConnectState<T>): void {\n    state = next;\n    emit();\n  }\n\n  function clearPoll(): void {\n    if (pollHandle !== null) {\n      clearTimeoutFn(pollHandle);\n      pollHandle = null;\n    }\n  }\n\n  /** Close the opened tab if it is still blank (never navigated). */\n  function closeUnnavigatedWindow(): void {\n    if (openedWindow) {\n      openedWindow.close();\n      openedWindow = null;\n    }\n  }\n\n  function isRunningPhase(): boolean {\n    return (\n      state.type === \"creating\" ||\n      state.type === \"awaiting_approval\" ||\n      state.type === \"ready_to_open\" ||\n      state.type === \"reading\"\n    );\n  }\n\n  async function readAndFinish(request: AccessRequest): Promise<void> {\n    setState({ type: \"reading\", request });\n    try {\n      const result = await transports.readResult(request.requestId);\n      if (!running) return;\n      setState({ type: \"done\", result });\n    } catch (err) {\n      if (!running) return;\n      setState({ type: \"error\", error: toError(err) });\n    } finally {\n      running = false;\n    }\n  }\n\n  function scheduleNextPoll(request: AccessRequest, deadline: number): void {\n    pollHandle = setTimeoutFn(() => {\n      void poll(request, deadline);\n    }, pollIntervalMs);\n  }\n\n  function requestDeadline(request: AccessRequest): number {\n    if (request.expiresAt !== undefined) {\n      const expiresAt = Date.parse(request.expiresAt);\n      if (Number.isFinite(expiresAt)) return expiresAt;\n    }\n    return now() + timeoutMs;\n  }\n\n  /**\n   * Enter the polling loop from the given initial state (either\n   * `awaiting_approval` for desktop/light or `ready_to_open` for mobile-deep).\n   * Errors out immediately if the request has already expired.\n   */\n  function startPolling(\n    request: AccessRequest,\n    initialState: DirectConnectState<T>,\n  ): void {\n    setState(initialState);\n    const deadline = requestDeadline(request);\n    if (now() >= deadline) {\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(\"Access request expired\"),\n      });\n      return;\n    }\n    scheduleNextPoll(request, deadline);\n  }\n\n  async function poll(request: AccessRequest, deadline: number): Promise<void> {\n    if (!running) return;\n    if (now() >= deadline) {\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(\"Timed out waiting for approval\"),\n      });\n      return;\n    }\n    let status: AccessRequestStatus;\n    try {\n      status = await transports.getStatus(request.requestId);\n    } catch (err) {\n      if (!running) return;\n      running = false;\n      setState({ type: \"error\", error: toError(err) });\n      return;\n    }\n    if (!running) return;\n\n    // A pending deep-mobile status may rotate the continuation ticket. Adopt a\n    // fresh, still-valid URL so the rendered \"Open Vana\" link always points at a\n    // live ticket; ignore it on the desktop/light path.\n    if (status.status === \"pending\" && state.type === \"ready_to_open\") {\n      const refreshed = normalizeMobileContinuationUrl(\n        status.mobileContinuationUrl,\n      );\n      if (refreshed && refreshed !== state.mobileContinuationUrl) {\n        request = { ...request, mobileContinuationUrl: refreshed };\n        setState({\n          type: \"ready_to_open\",\n          request,\n          mobileContinuationUrl: refreshed,\n        });\n      }\n    }\n\n    if (isReadReadyStatus(status.status)) {\n      clearPoll();\n      approvedRequest = request;\n      await readAndFinish(request);\n      return;\n    }\n    if (\n      status.status === \"completed\" ||\n      status.status === \"denied\" ||\n      status.status === \"expired\"\n    ) {\n      running = false;\n      setState({\n        type: \"error\",\n        error: new Error(`Access request ${status.status}`),\n      });\n      return;\n    }\n    scheduleNextPoll(request, deadline);\n  }\n\n  const flow: DirectConnectFlow<T> = {\n    getState() {\n      return state;\n    },\n\n    subscribe(listener: () => void) {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n\n    async start(): Promise<void> {\n      if (running || isRunningPhase()) return;\n      running = true;\n      // start() deliberately keeps its established first-run semantics: every\n      // explicit start creates a request. Only retryRead() may reuse consent.\n      approvedRequest = null;\n      const runId = ++activeRunId;\n      // Read the platform policy at start time, like openApprovalWindow below,\n      // so a policy swapped in after construction (a React rerender forwards\n      // options through a ref) still decides this run's destination.\n      const browserPlatform = (\n        options.browserPlatformPolicy ?? defaultBrowserPlatformPolicy()\n      ).current();\n\n      // Desktop preserves the pre-mobile synchronous popup contract: open a\n      // blank tab while the click's transient activation is live, then navigate\n      // it once createRequest returns the approval URL (BUI-622). Mobile never\n      // creates that transient tab; deep requests expose one explicit HTTPS\n      // link, while light requests retain the manual approvalUrl fallback.\n      // Read the opener option at start time so a swapped-in custom opener is\n      // still honored for desktop flows.\n      const approvalWindow =\n        browserPlatform === \"desktop\"\n          ? (options.openApprovalWindow ?? defaultOpenApprovalWindow)()\n          : null;\n      openedWindow = approvalWindow;\n\n      setState({ type: \"creating\" });\n\n      let request: AccessRequest;\n      try {\n        request = await transports.createRequest();\n      } catch (err) {\n        // If we were superseded (reset, possibly + a newer start()) while this\n        // request was in flight, only clean up our own tab — never the shared\n        // state or the newer run's window.\n        if (runId !== activeRunId) {\n          approvalWindow?.close();\n          return;\n        }\n        running = false;\n        closeUnnavigatedWindow();\n        setState({ type: \"error\", error: toError(err) });\n        return;\n      }\n      if (runId !== activeRunId) {\n        approvalWindow?.close();\n        return;\n      }\n      // Re-validate the continuation URL at the SDK boundary (defense in depth\n      // for custom transports that bypass the default client).\n      request = {\n        ...request,\n        mobileContinuationUrl: normalizeMobileContinuationUrl(\n          request.mobileContinuationUrl,\n        ),\n      };\n\n      // The SDK owns only the small mobile-versus-desktop destination choice.\n      // A deep Direct request on mobile carries a validated continuation URL;\n      // desktop keeps its popup contract, while mobile light exposes the HTTPS\n      // approval URL as the existing manual fallback without opening a tab.\n      const mobileContinuationUrl =\n        browserPlatform === \"mobile\"\n          ? request.mobileContinuationUrl\n          : undefined;\n\n      if (mobileContinuationUrl) {\n        // Do not auto-launch: DCR creation is async, so the original Connect\n        // gesture can no longer be trusted to retain iOS user activation. Let\n        // the UI render an explicit primary \"Open Vana\" link; polling continues\n        // in this tab.\n        startPolling(request, {\n          type: \"ready_to_open\",\n          request,\n          mobileContinuationUrl,\n        });\n        return;\n      }\n\n      // Desktop/light: navigate the synchronously-opened tab to the HTTPS\n      // approval URL. `approvalWindow === null` means the popup was blocked;\n      // surface it so the UI renders request.approvalUrl as a visible manual\n      // \"Open approval\" link instead of hanging. We poll either way, so a manual\n      // open still resolves the flow, and the timeout still bounds the wait.\n      if (approvalWindow) {\n        approvalWindow.navigate(request.approvalUrl);\n        // Hand the tab off to the user; we no longer own/close it.\n        openedWindow = null;\n      }\n      startPolling(request, {\n        type: \"awaiting_approval\",\n        request,\n        popupBlocked: approvalWindow === null,\n      });\n    },\n\n    async retryRead(): Promise<DirectConnectRetryOutcome> {\n      if (running || isRunningPhase()) {\n        throw new Error(\n          \"Cannot retry a read while the connect flow is running\",\n        );\n      }\n\n      const request = approvedRequest;\n      const parsedExpiry = request?.expiresAt\n        ? Date.parse(request.expiresAt)\n        : Number.NaN;\n      const requestExpired =\n        Number.isFinite(parsedExpiry) && now() >= parsedExpiry;\n\n      if (request && !requestExpired) {\n        running = true;\n        const runId = ++activeRunId;\n        let status: AccessRequestStatus;\n        try {\n          status = await transports.getStatus(request.requestId);\n        } catch (err) {\n          if (runId !== activeRunId) {\n            throw new Error(\"Read retry was superseded\");\n          }\n          running = false;\n          const error = toError(err);\n          setState({ type: \"error\", error });\n          throw error;\n        }\n        if (runId !== activeRunId) {\n          throw new Error(\"Read retry was superseded\");\n        }\n        if (isReadReadyStatus(status.status)) {\n          await readAndFinish(request);\n          return \"retried_existing_grant\";\n        }\n        running = false;\n      }\n\n      approvedRequest = null;\n      await flow.start();\n      return \"fresh_approval_required\";\n    },\n\n    reset(): void {\n      running = false;\n      approvedRequest = null;\n      // Invalidate any in-flight start() so a late createRequest can't clobber\n      // a subsequent run.\n      activeRunId++;\n      clearPoll();\n      closeUnnavigatedWindow();\n      setState({ type: \"idle\" });\n    },\n  };\n\n  return flow;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAqBA,mBAA+C;AA0I/C,MAAM,2BAA2B;AACjC,MAAM,qBAAqB;AAE3B,SAAS,QAAQ,OAAuB;AACtC,SAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;AAEA,SAAS,kBAAkB,QAA2C;AACpE,SAAO,WAAW,cAAc,WAAW;AAC7C;AAEA,MAAM,oBACJ;AAEF,SAAS,+BAA4D;AACnE,SAAO;AAAA,IACL,UAAU;AACR,UAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,YAAM,qBACJ,UAAU,aAAa,cAAc,UAAU,iBAAiB;AAClE,aAAO,kBAAkB,KAAK,UAAU,SAAS,KAAK,qBAClD,WACA;AAAA,IACN;AAAA,EACF;AACF;AAOA,SAAS,4BAAkD;AACzD,MAAI,OAAO,WAAW,eAAe,CAAC,OAAO,KAAM,QAAO;AAI1D,QAAM,SAAS,OAAO,KAAK,IAAI,QAAQ;AACvC,MAAI,CAAC,OAAQ,QAAO;AAGpB,MAAI;AACF,WAAO,SAAS;AAAA,EAClB,QAAQ;AAAA,EAER;AACA,SAAO;AAAA,IACL,SAAS,KAAa;AAIpB,UAAI;AACF,cAAM,OAAO,OAAO,SAAS,cAAc,MAAM;AACjD,aAAK,OAAO;AACZ,aAAK,UAAU;AACf,SAAC,OAAO,SAAS,QAAQ,OAAO,SAAS,kBAAkB;AAAA,UACzD;AAAA,QACF;AAAA,MACF,QAAQ;AAAA,MAER;AACA,aAAO,SAAS,OAAO;AAAA,IACzB;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AAAA,IACf;AAAA,EACF;AACF;AASO,SAAS,wBACd,YACA,UAAgC,CAAC,GACX;AACtB,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,YAAY,QAAQ,aAAa;AAKvC,QAAM,eACJ,QAAQ,iBACP,CAAC,IAAgB,OAAe,WAAW,WAAW,IAAI,EAAE;AAC/D,QAAM,iBACJ,QAAQ,mBACP,CAAC,WAAoB;AACpB,eAAW,aAAa,MAAe;AAAA,EACzC;AACF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,MAAI,QAA+B,EAAE,MAAM,OAAO;AAClD,QAAM,YAAY,oBAAI,IAAgB;AACtC,MAAI,aAAsB;AAC1B,MAAI,UAAU;AAGd,MAAI,kBAAwC;AAK5C,MAAI,cAAc;AAIlB,MAAI,eAAqC;AAEzC,WAAS,OAAa;AACpB,eAAW,YAAY,UAAW,UAAS;AAAA,EAC7C;AAEA,WAAS,SAAS,MAAmC;AACnD,YAAQ;AACR,SAAK;AAAA,EACP;AAEA,WAAS,YAAkB;AACzB,QAAI,eAAe,MAAM;AACvB,qBAAe,UAAU;AACzB,mBAAa;AAAA,IACf;AAAA,EACF;AAGA,WAAS,yBAA+B;AACtC,QAAI,cAAc;AAChB,mBAAa,MAAM;AACnB,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,WAAS,iBAA0B;AACjC,WACE,MAAM,SAAS,cACf,MAAM,SAAS,uBACf,MAAM,SAAS,mBACf,MAAM,SAAS;AAAA,EAEnB;AAEA,iBAAe,cAAc,SAAuC;AAClE,aAAS,EAAE,MAAM,WAAW,QAAQ,CAAC;AACrC,QAAI;AACF,YAAM,SAAS,MAAM,WAAW,WAAW,QAAQ,SAAS;AAC5D,UAAI,CAAC,QAAS;AACd,eAAS,EAAE,MAAM,QAAQ,OAAO,CAAC;AAAA,IACnC,SAAS,KAAK;AACZ,UAAI,CAAC,QAAS;AACd,eAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAAA,IACjD,UAAE;AACA,gBAAU;AAAA,IACZ;AAAA,EACF;AAEA,WAAS,iBAAiB,SAAwB,UAAwB;AACxE,iBAAa,aAAa,MAAM;AAC9B,WAAK,KAAK,SAAS,QAAQ;AAAA,IAC7B,GAAG,cAAc;AAAA,EACnB;AAEA,WAAS,gBAAgB,SAAgC;AACvD,QAAI,QAAQ,cAAc,QAAW;AACnC,YAAM,YAAY,KAAK,MAAM,QAAQ,SAAS;AAC9C,UAAI,OAAO,SAAS,SAAS,EAAG,QAAO;AAAA,IACzC;AACA,WAAO,IAAI,IAAI;AAAA,EACjB;AAOA,WAAS,aACP,SACA,cACM;AACN,aAAS,YAAY;AACrB,UAAM,WAAW,gBAAgB,OAAO;AACxC,QAAI,IAAI,KAAK,UAAU;AACrB,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,wBAAwB;AAAA,MAC3C,CAAC;AACD;AAAA,IACF;AACA,qBAAiB,SAAS,QAAQ;AAAA,EACpC;AAEA,iBAAe,KAAK,SAAwB,UAAiC;AAC3E,QAAI,CAAC,QAAS;AACd,QAAI,IAAI,KAAK,UAAU;AACrB,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,gCAAgC;AAAA,MACnD,CAAC;AACD;AAAA,IACF;AACA,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,WAAW,UAAU,QAAQ,SAAS;AAAA,IACvD,SAAS,KAAK;AACZ,UAAI,CAAC,QAAS;AACd,gBAAU;AACV,eAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAC/C;AAAA,IACF;AACA,QAAI,CAAC,QAAS;AAKd,QAAI,OAAO,WAAW,aAAa,MAAM,SAAS,iBAAiB;AACjE,YAAM,gBAAY;AAAA,QAChB,OAAO;AAAA,MACT;AACA,UAAI,aAAa,cAAc,MAAM,uBAAuB;AAC1D,kBAAU,EAAE,GAAG,SAAS,uBAAuB,UAAU;AACzD,iBAAS;AAAA,UACP,MAAM;AAAA,UACN;AAAA,UACA,uBAAuB;AAAA,QACzB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,QAAI,kBAAkB,OAAO,MAAM,GAAG;AACpC,gBAAU;AACV,wBAAkB;AAClB,YAAM,cAAc,OAAO;AAC3B;AAAA,IACF;AACA,QACE,OAAO,WAAW,eAClB,OAAO,WAAW,YAClB,OAAO,WAAW,WAClB;AACA,gBAAU;AACV,eAAS;AAAA,QACP,MAAM;AAAA,QACN,OAAO,IAAI,MAAM,kBAAkB,OAAO,MAAM,EAAE;AAAA,MACpD,CAAC;AACD;AAAA,IACF;AACA,qBAAiB,SAAS,QAAQ;AAAA,EACpC;AAEA,QAAM,OAA6B;AAAA,IACjC,WAAW;AACT,aAAO;AAAA,IACT;AAAA,IAEA,UAAU,UAAsB;AAC9B,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM,UAAU,OAAO,QAAQ;AAAA,IACxC;AAAA,IAEA,MAAM,QAAuB;AAC3B,UAAI,WAAW,eAAe,EAAG;AACjC,gBAAU;AAGV,wBAAkB;AAClB,YAAM,QAAQ,EAAE;AAIhB,YAAM,mBACJ,QAAQ,yBAAyB,6BAA6B,GAC9D,QAAQ;AASV,YAAM,iBACJ,oBAAoB,aACf,QAAQ,sBAAsB,2BAA2B,IAC1D;AACN,qBAAe;AAEf,eAAS,EAAE,MAAM,WAAW,CAAC;AAE7B,UAAI;AACJ,UAAI;AACF,kBAAU,MAAM,WAAW,cAAc;AAAA,MAC3C,SAAS,KAAK;AAIZ,YAAI,UAAU,aAAa;AACzB,0BAAgB,MAAM;AACtB;AAAA,QACF;AACA,kBAAU;AACV,+BAAuB;AACvB,iBAAS,EAAE,MAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,CAAC;AAC/C;AAAA,MACF;AACA,UAAI,UAAU,aAAa;AACzB,wBAAgB,MAAM;AACtB;AAAA,MACF;AAGA,gBAAU;AAAA,QACR,GAAG;AAAA,QACH,2BAAuB;AAAA,UACrB,QAAQ;AAAA,QACV;AAAA,MACF;AAMA,YAAM,wBACJ,oBAAoB,WAChB,QAAQ,wBACR;AAEN,UAAI,uBAAuB;AAKzB,qBAAa,SAAS;AAAA,UACpB,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AACD;AAAA,MACF;AAOA,UAAI,gBAAgB;AAClB,uBAAe,SAAS,QAAQ,WAAW;AAE3C,uBAAe;AAAA,MACjB;AACA,mBAAa,SAAS;AAAA,QACpB,MAAM;AAAA,QACN;AAAA,QACA,cAAc,mBAAmB;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,YAAgD;AACpD,UAAI,WAAW,eAAe,GAAG;AAC/B,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAEA,YAAM,UAAU;AAChB,YAAM,eAAe,SAAS,YAC1B,KAAK,MAAM,QAAQ,SAAS,IAC5B,OAAO;AACX,YAAM,iBACJ,OAAO,SAAS,YAAY,KAAK,IAAI,KAAK;AAE5C,UAAI,WAAW,CAAC,gBAAgB;AAC9B,kBAAU;AACV,cAAM,QAAQ,EAAE;AAChB,YAAI;AACJ,YAAI;AACF,mBAAS,MAAM,WAAW,UAAU,QAAQ,SAAS;AAAA,QACvD,SAAS,KAAK;AACZ,cAAI,UAAU,aAAa;AACzB,kBAAM,IAAI,MAAM,2BAA2B;AAAA,UAC7C;AACA,oBAAU;AACV,gBAAM,QAAQ,QAAQ,GAAG;AACzB,mBAAS,EAAE,MAAM,SAAS,MAAM,CAAC;AACjC,gBAAM;AAAA,QACR;AACA,YAAI,UAAU,aAAa;AACzB,gBAAM,IAAI,MAAM,2BAA2B;AAAA,QAC7C;AACA,YAAI,kBAAkB,OAAO,MAAM,GAAG;AACpC,gBAAM,cAAc,OAAO;AAC3B,iBAAO;AAAA,QACT;AACA,kBAAU;AAAA,MACZ;AAEA,wBAAkB;AAClB,YAAM,KAAK,MAAM;AACjB,aAAO;AAAA,IACT;AAAA,IAEA,QAAc;AACZ,gBAAU;AACV,wBAAkB;AAGlB;AACA,gBAAU;AACV,6BAAuB;AACvB,eAAS,EAAE,MAAM,OAAO,CAAC;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}