@opengeni/react 1.4.0 → 1.4.4

package/dist/{chunk-MBMPHOMA.js → chunk-55DXD22O.js}

@@ -1,6 +1,7 @@
+"use client";
 import {
   usePortalTokenStyle
-} from "./chunk-VZTQ73XT.js";
+} from "./chunk-XEA5BCMA.js";
 
 // src/hooks/use-connect.ts
 import { useMemo, useSyncExternalStore } from "react";
@@ -804,4 +805,4 @@ export {
   SessionMcpCapabilityCard,
   McpConnectionCard
 };
-//# sourceMappingURL=chunk-MBMPHOMA.js.map
+//# sourceMappingURL=chunk-55DXD22O.js.map

package/dist/{chunk-MBMPHOMA.js.map → chunk-55DXD22O.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/use-connect.ts","../src/session-capability-policy.ts","../src/components/session-capability-frame.tsx","../src/components/session-mcp-capability-card.tsx","../src/mcp-connection-status.ts"],"sourcesContent":["import type { ConnectController } from \"@opengeni/connect\";\nimport { useMemo, useSyncExternalStore } from \"react\";\n\n/** Internal consumers import the hook directly so setup surfaces stay lazy. */\nexport function useConnect(controller: ConnectController) {\n  const snapshot = useSyncExternalStore(\n    controller.subscribe,\n    controller.getSnapshot,\n    controller.getSnapshot,\n  );\n  const actions = useMemo(\n    () => ({\n      begin: controller.begin.bind(controller),\n      recover: controller.recover.bind(controller),\n      refresh: controller.refresh.bind(controller),\n      waitForAction: controller.waitForAction.bind(controller),\n      advance: controller.advance.bind(controller),\n      cancel: controller.cancel.bind(controller),\n    }),\n    [controller],\n  );\n  return useMemo(() => ({ ...snapshot, ...actions }), [snapshot, actions]);\n}\n","import type {\n  FirstPartyMcpToolName,\n  CapabilityCatalogItem,\n  Session,\n  UpdateSessionToolPolicyRequest,\n} from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\n\n/** Catalog tool discovery may be lazy; selecting the installed server does not\n * require its individual tool inventory to have been fetched. */\nexport function sessionCapabilityTools(item: CapabilityCatalogItem) {\n  const serverId = item.kind === \"mcp\" ? item.runtime?.mcpServerId : undefined;\n  return serverId && !item.tools.some((tool) => tool.kind === \"mcp\" && tool.id === serverId)\n    ? [...item.tools, { kind: \"mcp\" as const, id: serverId }]\n    : item.tools;\n}\n\n/** A connection never resets the human's existing tool selection. Default-mode\n * sessions discover newly enabled servers at admission; explicit/inherited\n * policies add only this reviewed capability, with the existing CAS fence. */\nexport async function attachSessionCapability(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return;\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const session = await client.getSession(workspaceId, sessionId);\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const request = capabilityToolPolicyUpdate(session, item);\n  if (request) await client.updateSessionToolPolicy(workspaceId, sessionId, request);\n}\n\nfunction capabilityToolPolicyUpdate(\n  session: Session,\n  item: CapabilityCatalogItem,\n): UpdateSessionToolPolicyRequest | null {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return null;\n  // Session.tools includes mandatory runtime servers, which must never be\n  // echoed into the human's explicit selection.\n  let existing = session.tools.filter(\n    (tool) => !session.effectiveToolPolicy?.mandatoryIds?.includes(tool.id),\n  );\n  if (session.toolPolicy.mode === \"workspace_default\") {\n    const policy = session.effectiveToolPolicy;\n    if (!policy || policy.idsTruncated)\n      throw new Error(\n        \"Connected, but the full session tool selection could not be read. Review the Tools picker before continuing.\",\n      );\n    // A workspace may choose a restricted default instead of all enabled servers.\n    // Preserve that exact selection if this connection needs an explicit addition.\n    // selectedIds contains only explicit additions, and is normally empty for\n    // automatic selection. Compare against the resolved defaults instead.\n    existing = policy.effectiveIds\n      .filter((id) => !policy.mandatoryIds.includes(id))\n      .map(\n        (id) =>\n          session.tools.find((tool) => tool.kind === \"mcp\" && tool.id === id) ?? {\n            kind: \"mcp\" as const,\n            id,\n            optional: true,\n          },\n      );\n  }\n  const additions = tools.filter(\n    (tool) =>\n      !session.effectiveToolPolicy?.mandatoryIds.includes(tool.id) &&\n      !existing.some((current) => current.kind === tool.kind && current.id === tool.id),\n  );\n  const recommended = Array.isArray(item.metadata?.firstPartyMcpTools)\n    ? (item.metadata.firstPartyMcpTools.filter(\n        (name): name is string => typeof name === \"string\",\n      ) as FirstPartyMcpToolName[])\n    : [];\n  const firstParty = [...new Set([...session.firstPartyMcpTools, ...recommended])];\n  if (additions.length === 0 && firstParty.length === session.firstPartyMcpTools.length)\n    return null;\n  return {\n    mode: \"explicit\",\n    tools: [...existing, ...additions],\n    firstPartyMcpTools: firstParty,\n    expectedVersion: session.toolPolicyVersion,\n  };\n}\n\n/** Read-only review. Hosts must show ancestor changes and obtain a separate\n * explicit click before applying. This plan is never authorization. */\nexport type SessionCapabilityAccessPlan = {\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  sessions: Array<{\n    id: string;\n    title: string | null;\n    parentSessionId: string | null;\n    toolPolicyVersion: number;\n    request: UpdateSessionToolPolicyRequest | null;\n  }>;\n};\n\nexport async function prepareSessionCapabilityAccess(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<SessionCapabilityAccessPlan> {\n  const sessions: SessionCapabilityAccessPlan[\"sessions\"] = [];\n  if (item.kind === \"skill\" || sessionCapabilityTools(item).length === 0)\n    return { workspaceId, sessionId, capabilityId: item.id, sessions };\n  const visited = new Set<string>();\n  let id: string | null = sessionId;\n  while (id) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (visited.has(id)) throw new Error(\"The parent chat chain could not be verified.\");\n    visited.add(id);\n    const session = await client.getSession(workspaceId, id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const request = capabilityToolPolicyUpdate(session, item);\n    sessions.push({\n      id,\n      title: session.title ?? null,\n      parentSessionId: session.parentSessionId ?? null,\n      toolPolicyVersion: session.toolPolicyVersion,\n      request,\n    });\n    // An unchanged immediate parent already supplies this capability's ceiling.\n    // Do not read or broaden ancestors irrelevant to this addition.\n    if (!request) break;\n    id = session.parentSessionId ?? null;\n  }\n  return { workspaceId, sessionId, capabilityId: item.id, sessions: sessions.reverse() };\n}\n\n/** Preflight the entire review, then apply ordinary CAS-fenced API writes root\n * first. A partial failure may leave approved ancestor changes committed; never\n * claim success or roll back another person's edits. Prepare a new review. */\nexport async function applySessionCapabilityAccess(\n  client: OpenGeniClient,\n  plan: SessionCapabilityAccessPlan,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const current = await client.getSession(plan.workspaceId, reviewed.id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (\n      current.toolPolicyVersion !== reviewed.toolPolicyVersion ||\n      (current.parentSessionId ?? null) !== reviewed.parentSessionId\n    )\n      throw new Error(\"Chat access changed. Click Add tools to review the current choices again.\");\n  }\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (reviewed.request) {\n      const updated = await client.updateSessionToolPolicy(\n        plan.workspaceId,\n        reviewed.id,\n        reviewed.request,\n      );\n      if (\n        reviewed.request.mode === \"explicit\" &&\n        reviewed.request.firstPartyMcpTools.some(\n          (tool) => !updated.firstPartyMcpTools.includes(tool),\n        )\n      )\n        throw new Error(\n          \"This chat's capabilities do not allow these tools. Review its capability settings before adding tools again.\",\n        );\n    }\n  }\n}\n\n/** Native OAuth callbacks have already saved the provider connection. Finish\n * the separate, version-fenced session tool selection before reporting success. */\nexport async function completeSessionCapabilityOAuth(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  capabilityId: string | null,\n): Promise<void> {\n  if (!capabilityId)\n    throw new Error(\n      \"The authorized integration could not be identified. Review its connection card to finish setup.\",\n    );\n  const connected = (await client.listCapabilities(workspaceId)).items.find(\n    (item) => item.id === capabilityId,\n  );\n  if (!connected?.enabled)\n    throw new Error(\"The connection was authorized, but enabling its tools could not be verified.\");\n  await attachSessionCapability(client, workspaceId, sessionId, connected);\n}\n","import { CheckIcon, InfoIcon, ShieldCheckIcon, XIcon } from \"lucide-react\";\nimport { Dialog } from \"radix-ui\";\nimport { useRef, useState, type ReactNode, type RefObject } from \"react\";\nimport { usePortalTokenStyle } from \"../lib/use-portal-token-style\";\n\nexport type SessionCapabilityFrameProps = {\n  name: string;\n  subtitle: string;\n  logo: string | null;\n  typeLabel: string;\n  description: string;\n  skill: boolean;\n  expanded: boolean;\n  complete: boolean;\n  /** Completion copy must reflect the provider's actual scope of access. */\n  completeLabel?: string;\n  actionLabel: string;\n  /** Direct navigation actions should not announce a dialog on the card. */\n  opensDialog?: boolean;\n  note: string;\n  onOpen(): void;\n  onClose(): void;\n  busy?: boolean;\n  opener?: RefObject<HTMLButtonElement | null>;\n  cardRef?: RefObject<HTMLElement | null>;\n  children?: ReactNode;\n  /** A catalogue row can own the opener while reusing the same details dialog. */\n  dialogOnly?: boolean;\n  /**\n   * Replaces the action when the viewer cannot start setup here (the provider\n   * is not configured, or someone else must connect it). Say why and who can.\n   */\n  actionUnavailable?: ReactNode;\n  /** Host-owned content inside the card, under its status or actions. */\n  details?: ReactNode;\n};\n\nfunction Mark({ src, name }: { src: string | null; name: string }) {\n  const [failed, setFailed] = useState<string | null>(null);\n  return (\n    <span className=\"og-session-capability-logo\" aria-hidden>\n      {src && failed !== src ? (\n        <img src={src} alt=\"\" loading=\"lazy\" decoding=\"async\" onError={() => setFailed(src)} />\n      ) : (\n        name.trim().slice(0, 2).toUpperCase()\n      )}\n    </span>\n  );\n}\n\n/** The same conversation card in the console and embedded clients. Setup\n * content owns the provider flow; this frame owns identity and protected focus. */\nexport function SessionCapabilityFrame({\n  name,\n  subtitle,\n  logo,\n  typeLabel,\n  description,\n  skill,\n  expanded,\n  complete,\n  completeLabel,\n  actionLabel,\n  opensDialog = true,\n  note,\n  onOpen,\n  onClose,\n  busy = false,\n  opener,\n  cardRef,\n  children,\n  dialogOnly = false,\n  actionUnavailable,\n  details,\n}: SessionCapabilityFrameProps) {\n  const localOpener = useRef<HTMLButtonElement>(null);\n  const localCard = useRef<HTMLElement>(null);\n  const buttonRef = opener ?? localOpener;\n  const sectionRef = cardRef ?? localCard;\n  const portalStyle = usePortalTokenStyle(sectionRef.current);\n  const identity = (\n    <>\n      <Mark src={logo} name={name} />\n      <div className=\"og-session-capability-identity\">\n        <h3>{name}</h3>\n        <span>{subtitle}</span>\n      </div>\n      <span className=\"og-session-capability-type\">{typeLabel}</span>\n    </>\n  );\n  return (\n    <div className=\"og-session-capability\">\n      <section\n        hidden={dialogOnly}\n        style={dialogOnly ? { display: \"none\" } : undefined}\n        ref={sectionRef}\n        tabIndex={-1}\n        aria-label={`${name} setup`}\n        data-state={complete ? \"complete\" : expanded ? \"setup\" : \"suggested\"}\n        className=\"og-session-capability-shell\"\n      >\n        <div className=\"og-session-capability-header\">\n          {identity}\n          {complete ? <CheckIcon size={16} aria-hidden /> : null}\n        </div>\n        {complete ? (\n          <p role=\"status\" className=\"og-session-capability-copy\">\n            {completeLabel ??\n              (skill ? \"Installed · Workspace\" : \"Connected · Available in this conversation\")}\n          </p>\n        ) : (\n          <>\n            <p className=\"og-session-capability-copy\">{description}</p>\n            {actionUnavailable ? (\n              <div className=\"og-session-capability-actions\" data-unavailable=\"\">\n                <span role=\"note\">\n                  <InfoIcon size={13} aria-hidden />\n                  {actionUnavailable}\n                </span>\n              </div>\n            ) : (\n              <div className=\"og-session-capability-actions\">\n                <span>\n                  <ShieldCheckIcon size={13} aria-hidden />\n                  {skill ? \"Guidance only · no account access\" : \"You choose what to authorize\"}\n                </span>\n                <button\n                  ref={buttonRef}\n                  type=\"button\"\n                  onClick={onOpen}\n                  disabled={busy}\n                  aria-haspopup={opensDialog ? \"dialog\" : undefined}\n                  aria-expanded={opensDialog ? expanded : undefined}\n                >\n                  {actionLabel}\n                </button>\n              </div>\n            )}\n          </>\n        )}\n        {details}\n      </section>\n      {!complete && !dialogOnly && note ? (\n        <p className=\"og-session-capability-note\">{note}</p>\n      ) : null}\n      <Dialog.Root\n        open={expanded && !complete}\n        onOpenChange={(open) => {\n          if (!open && !busy) onClose();\n        }}\n      >\n        <Dialog.Portal>\n          <Dialog.Overlay className=\"og-root og-session-capability-overlay\" style={portalStyle} />\n          <Dialog.Content\n            className=\"og-root og-session-capability-dialog\"\n            style={portalStyle}\n            onEscapeKeyDown={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onInteractOutside={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onCloseAutoFocus={(event) => {\n              event.preventDefault();\n              const target = buttonRef.current?.isConnected\n                ? buttonRef.current\n                : sectionRef.current;\n              if (target?.isConnected) target.focus();\n            }}\n          >\n            <div className=\"og-session-capability-dialog-header\">\n              <Mark src={logo} name={name} />\n              <div>\n                <Dialog.Title>{name}</Dialog.Title>\n                <Dialog.Description>\n                  {typeLabel}\n                  {subtitle ? ` · ${subtitle}` : \"\"}\n                </Dialog.Description>\n              </div>\n              {!busy ? (\n                <Dialog.Close aria-label=\"Close connection setup\">\n                  <XIcon size={18} />\n                </Dialog.Close>\n              ) : null}\n            </div>\n            <div className=\"og-session-capability-dialog-body\">{children}</div>\n          </Dialog.Content>\n        </Dialog.Portal>\n      </Dialog.Root>\n    </div>\n  );\n}\n","import {\n  authorizeConnectAttempt,\n  ConnectPopupClosedError,\n  ConnectController,\n  createBrowserConnectNavigation,\n  reserveBrowserConnectNavigation,\n  type ConnectAttempt,\n  type ConnectNavigation,\n  type ConnectOwnership,\n} from \"@opengeni/connect\";\nimport type { CapabilityCatalogItem } from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useConnect } from \"../hooks/use-connect\";\nimport { attachSessionCapability, sessionCapabilityTools } from \"../session-capability-policy\";\nimport { SessionCapabilityFrame } from \"./session-capability-frame\";\nimport { matchingActiveMcpConnections } from \"../mcp-connection-status\";\n\nexport type SessionMcpCapabilityCardProps = {\n  client: OpenGeniClient;\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  name: string;\n  rationale?: string;\n  /** Exact host route; no console-specific routing is assumed. */\n  returnUrl: string;\n  onConfigured?: (() => void | Promise<void>) | undefined;\n};\n\nexport type McpConnectionCardProps = Omit<SessionMcpCapabilityCardProps, \"sessionId\"> & {\n  /** Omit for connection management: no session tool selection is written. */\n  sessionId?: string;\n  dialogOnly?: boolean;\n  onClose?: (() => void) | undefined;\n  /**\n   * The provider only ever connects someone's own account (official Gmail,\n   * Slack's hosted MCP): no ownership choice, always personal.\n   */\n  personalOnly?: boolean;\n  /** The connect button's words, \"Connect Gmail\". Defaults to \"Continue to <name>\". */\n  connectLabel?: string;\n  /** The line under the dialog title. Defaults to the kind and provider domain. */\n  dialogSubtitle?: string;\n  /** The host's product copy for this connection, instead of the catalog description. */\n  description?: string;\n  /** The host's logo for this connection, when the catalog has no asset. */\n  logoSrc?: string | null;\n  /** The host's words for the ownership choice. */\n  ownershipCopy?: { legend: string; workspace: string; personal: string };\n};\n\n/** Native OAuth recommendation flow. Identity and endpoint come from the live\n * catalog, never from model-authored recommendation text. */\nexport function SessionMcpCapabilityCard(props: SessionMcpCapabilityCardProps) {\n  return <McpConnectionCard {...props} />;\n}\n\nexport function McpConnectionCard(props: McpConnectionCardProps) {\n  const [client, setClient] = useState(props.client);\n  const [generation, setGeneration] = useState(0);\n  if (client !== props.client) {\n    setClient(props.client);\n    setGeneration(generation + 1);\n  }\n  return (\n    <ScopedCard\n      key={`${generation}:${props.workspaceId}:${props.sessionId}:${props.capabilityId}`}\n      {...props}\n    />\n  );\n}\n\nfunction ScopedCard({\n  client,\n  workspaceId,\n  sessionId,\n  capabilityId,\n  name,\n  rationale = \"\",\n  returnUrl,\n  onConfigured,\n  dialogOnly = false,\n  onClose,\n  personalOnly = false,\n  connectLabel,\n  dialogSubtitle,\n  description: hostDescription,\n  logoSrc,\n  ownershipCopy,\n}: McpConnectionCardProps) {\n  const [controller] = useState(\n    () => new ConnectController(client.connectTransport(), workspaceId),\n  );\n  const view = useConnect(controller);\n  const [item, setItem] = useState<CapabilityCatalogItem | null>(null);\n  const [logo, setLogo] = useState<string | null>(null);\n  const [expanded, setExpanded] = useState(dialogOnly);\n  const [complete, setComplete] = useState(false);\n  const [connected, setConnected] = useState(false);\n  const [waiting, setWaiting] = useState(false);\n  const [reconciling, setReconciling] = useState(false);\n  const [busy, setBusy] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [notice, setNotice] = useState<string | null>(null);\n  const [retryFresh, setRetryFresh] = useState(false);\n  const [ownership, setOwnership] = useState<ConnectOwnership>(\n    personalOnly ? \"personal\" : \"workspace\",\n  );\n  const lifetime = useRef<AbortController | null>(null);\n  const authorization = useRef<AbortController | null>(null);\n  const operation = useRef<AbortController | null>(null);\n  const reservedPopup = useRef<(() => void) | null>(null);\n  const startKey = useRef(crypto.randomUUID());\n  const advanceKey = useRef(crypto.randomUUID());\n  const startInput = useRef<string | null>(null);\n  const storageKey = sessionId\n    ? `opengeni:session-connect:${workspaceId}:${sessionId}:${capabilityId}`\n    : `opengeni:workspace-connect:${workspaceId}:${capabilityId}`;\n  const current = () => !!lifetime.current && !lifetime.current.signal.aborted;\n\n  async function load(active: () => boolean = current) {\n    const invocation = lifetime.current;\n    const [catalog, session] = await Promise.all([\n      client.listCapabilities(workspaceId),\n      sessionId ? client.getSession(workspaceId, sessionId) : Promise.resolve(null),\n    ]);\n    if (!invocation || invocation.signal.aborted || lifetime.current !== invocation || !active())\n      return null;\n    let resolved = catalog.items.find((entry) => entry.id === capabilityId);\n    // Custom catalog entries may not declare authentication. Discover it from\n    // the live catalog's endpoint, never from recommendation/host copy.\n    if (resolved?.kind === \"mcp\" && !resolved.enabled && !resolved.authKind) {\n      const endpoint = resolved.mcpUrl ?? resolved.endpointUrl;\n      if (endpoint) {\n        const inspected = await client.inspectMcpAuthentication(workspaceId, endpoint);\n        if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n        if (inspected.kind === \"oauth2\") resolved = { ...resolved, authKind: \"oauth2\" };\n        else if (inspected.kind === \"unknown\")\n          throw new Error(inspected.message ?? \"Could not determine how to sign in. Try again.\");\n      }\n    }\n    if (!resolved || resolved.kind !== \"mcp\" || resolved.authKind !== \"oauth2\")\n      throw new Error(\n        \"This recommendation is not an available OAuth MCP integration. Review the current connection catalog.\",\n      );\n    setItem(resolved);\n    if (resolved.connectionRef)\n      setOwnership(resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\");\n    else if (\n      !item &&\n      (personalOnly || resolved.metadata?.defaultConnectionOwnership === \"personal\")\n    )\n      setOwnership(\"personal\");\n    let accountReady = false;\n    if (resolved.enabled && resolved.connectionRef) {\n      const connections =\n        resolved.connectionRef.subjectScope === \"subject\"\n          ? await client.listOwnConnectionAccounts(workspaceId)\n          : await client.listConnections(workspaceId);\n      if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n      const matches = matchingActiveMcpConnections(resolved, connections);\n      accountReady = matches.length === 1;\n    }\n    if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n    const selected =\n      session?.toolPolicy.mode === \"workspace_default\"\n        ? session.effectiveToolPolicy?.selectedIds\n        : session?.tools.filter((tool) => tool.kind === \"mcp\").map((tool) => tool.id);\n    setConnected(accountReady);\n    setComplete(\n      accountReady &&\n        !!selected &&\n        sessionCapabilityTools(resolved).every((tool) => selected.includes(tool.id)),\n    );\n    return resolved;\n  }\n\n  useEffect(() => {\n    const abort = new AbortController();\n    lifetime.current = abort;\n    // Mount reads are scoped to this effect, not to the user-action lock.\n    // Strict Mode may cancel the first mount while its promise is still in\n    // flight; that must not suppress the replacement mount's initialization.\n    if (dialogOnly) setBusy(true);\n    void (async () => {\n      await load();\n      if (abort.signal.aborted || !dialogOnly) return;\n      await recoverSavedAttempt();\n    })()\n      .catch((failure) => {\n        if (!abort.signal.aborted)\n          setError(\n            failure instanceof Error ? failure.message : \"Couldn't load connection details.\",\n          );\n      })\n      .finally(() => {\n        if (!abort.signal.aborted && dialogOnly) setBusy(false);\n      });\n    return () => {\n      abort.abort();\n    };\n    // ScopedCard remounts for client/workspace/session/capability changes.\n    // These reads initialize that scope; rerunning on action closures would\n    // cancel initialization whenever its own state updates render the card.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client, workspaceId, sessionId, capabilityId, dialogOnly]);\n\n  useEffect(() => {\n    const path = item?.logoAssetPath;\n    setLogo(null);\n    if (!path?.startsWith(\"catalog-assets/\")) return;\n    const abort = new AbortController();\n    let objectUrl: string | null = null;\n    // Embeds can require authentication even for the API's public catalog\n    // asset route. Use the client's transport instead of an unauthenticated img.\n    void client\n      .downloadCatalogAsset(path, { signal: abort.signal })\n      .then((blob) => {\n        if (abort.signal.aborted || !blob.type.startsWith(\"image/\") || blob.size > 2_000_000)\n          return;\n        objectUrl = URL.createObjectURL(blob);\n        setLogo(objectUrl);\n      })\n      .catch(() => {\n        /* Keep the provider's initials if its passive mark is unavailable. */\n      });\n    return () => {\n      abort.abort();\n      if (objectUrl) URL.revokeObjectURL(objectUrl);\n    };\n  }, [client, item?.logoAssetPath]);\n\n  async function run(action: (active: () => boolean) => Promise<void>) {\n    if (operation.current || !current()) return;\n    const pending = new AbortController();\n    operation.current = pending;\n    const active = () => current() && operation.current === pending && !pending.signal.aborted;\n    setBusy(true);\n    setError(null);\n    setNotice(null);\n    setRetryFresh(false);\n    try {\n      await action(active);\n    } catch (failure) {\n      if (active()) {\n        if (failure instanceof ConnectPopupClosedError) setNotice(failure.message);\n        else\n          setError(\n            failure instanceof Error\n              ? failure.message\n              : \"Connection setup could not finish. Try again.\",\n          );\n      }\n    } finally {\n      if (operation.current === pending) {\n        operation.current = null;\n        if (current()) setBusy(false);\n      }\n    }\n  }\n\n  function remember(attemptId: string) {\n    // An opaque recovery hint only. The backend rechecks the authenticated\n    // owner on recover; this value never grants access or proves completion.\n    try {\n      sessionStorage.setItem(storageKey, attemptId);\n    } catch {\n      /* Storage may be disabled. */\n    }\n  }\n\n  async function reconcile(attempt: ConnectAttempt, active: () => boolean = current) {\n    if (!active()) return;\n    if (attempt.state !== \"complete\" || !attempt.account || !attempt.credentialsCommitted) return;\n    const resolved = await load(active);\n    if (!resolved || !active()) return;\n    const connection = (await client.listConnections(workspaceId)).find(\n      (entry) => entry.id === attempt.account!.id,\n    );\n    if (!active()) return;\n    if (\n      !connection ||\n      connection.status !== \"active\" ||\n      connection.kind !== \"oauth2\" ||\n      connection.metadata.mcpUrl !== (resolved.mcpUrl ?? resolved.endpointUrl) ||\n      (connection.subjectId !== null) !== (attempt.ownership === \"personal\")\n    )\n      throw new Error(\n        \"The authorized account does not match this integration. Review its connection settings.\",\n      );\n    const previous = resolved.connectionRef;\n    if (\n      resolved.enabled &&\n      previous?.subjectScope !== \"subject\" &&\n      previous?.connectionId &&\n      previous.connectionId !== connection.id\n    )\n      throw new Error(\n        \"This integration's selected account changed during setup. Review it before continuing.\",\n      );\n    await client.enableCapability(workspaceId, capabilityId, {\n      connectionRef:\n        attempt.ownership === \"personal\"\n          ? { providerDomain: connection.providerDomain, kind: \"oauth2\", subjectScope: \"subject\" }\n          : {\n              providerDomain: connection.providerDomain,\n              kind: \"oauth2\",\n              subjectScope: \"workspace\",\n              connectionId: connection.id,\n            },\n    });\n    if (!active()) return;\n    const enabled = await load(active);\n    if (enabled && active()) {\n      await finishConnection(enabled, active);\n    }\n    if (!active()) return;\n    try {\n      sessionStorage.removeItem(storageKey);\n    } catch {\n      /* Recovery hint only. */\n    }\n  }\n\n  async function open() {\n    setExpanded(true);\n    await run(async (active) => {\n      await load(active);\n      if (!active()) return;\n      await recoverSavedAttempt(active);\n    });\n  }\n\n  async function recoverSavedAttempt(active: () => boolean = current) {\n    let saved: string | null = null;\n    try {\n      saved = sessionStorage.getItem(storageKey);\n    } catch {\n      /* No persisted attempt. */\n    }\n    if (saved) {\n      const attempt = await controller.recover(saved);\n      if (!active()) return;\n      if ([\"failed\", \"expired\", \"cancelled\"].includes(attempt.state)) setRetryFresh(true);\n      if (attempt.state === \"complete\") setReconciling(true);\n      try {\n        await reconcile(attempt, active);\n      } finally {\n        if (active()) setReconciling(false);\n      }\n    }\n  }\n\n  async function begin(fresh = false) {\n    await run(async (active) => {\n      if (\n        fresh ||\n        (view.attempt && [\"failed\", \"expired\", \"cancelled\"].includes(view.attempt.state))\n      ) {\n        startKey.current = crypto.randomUUID();\n        advanceKey.current = crypto.randomUUID();\n      }\n      const reserved = reserveBrowserConnectNavigation(window);\n      reservedPopup.current = reserved.close;\n      try {\n        const resolved = await load(active);\n        if (!resolved || !active()) return;\n        if (\n          resolved.connectionRef &&\n          ownership !==\n            (resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\")\n        )\n          throw new Error(\n            \"The connection ownership changed. Review the current account before continuing.\",\n          );\n        const mcpUrl = resolved.mcpUrl ?? resolved.endpointUrl;\n        if (!mcpUrl)\n          throw new Error(\n            \"The current catalog has no authorization endpoint for this integration.\",\n          );\n        // Never silently replace an already selected account. Reauthorization\n        // stays on its exact native connection ID.\n        let reconnectAccountId = resolved.connectionRef?.connectionId ?? undefined;\n        if (resolved.connectionRef?.subjectScope === \"subject\") {\n          const connections = (await client.listConnections(workspaceId)).filter(\n            (entry) =>\n              entry.subjectId !== null &&\n              entry.kind === \"oauth2\" &&\n              entry.metadata.mcpUrl === mcpUrl,\n          );\n          if (!active()) return;\n          if (connections.length > 1)\n            throw new Error(\n              \"More than one personal account matches. Choose the account in connection settings before reconnecting.\",\n            );\n          reconnectAccountId = connections[0]?.id;\n        }\n        // A closed request can still have reached the server. Keep its key for\n        // an exact replay, but never reuse it when ownership or another input\n        // changes while the user reopens setup.\n        const input = JSON.stringify({ ownership, returnUrl, reconnectAccountId, mcpUrl });\n        if (startInput.current !== null && startInput.current !== input) {\n          startKey.current = crypto.randomUUID();\n          advanceKey.current = crypto.randomUUID();\n        }\n        startInput.current = input;\n        let attempt = await controller.begin({\n          providerId: \"mcp-oauth\",\n          ownership,\n          returnUrl,\n          idempotencyKey: startKey.current,\n          ...(reconnectAccountId ? { reconnectAccountId } : {}),\n        });\n        if (!active()) return;\n        remember(attempt.id);\n        if (attempt.state === \"credential_input\")\n          attempt = await controller.advance(\n            { type: \"credentials\", values: { mcpUrl } },\n            advanceKey.current,\n          );\n        if (!active()) return;\n        if (attempt.nextAction.type === \"authorize\")\n          await performAuthorization(attempt, reserved.navigation, active);\n        else await reconcile(attempt, active);\n      } finally {\n        if (reservedPopup.current === reserved.close) reservedPopup.current = null;\n        reserved.close();\n      }\n    });\n  }\n\n  async function performAuthorization(\n    attempt: ConnectAttempt,\n    navigation: ConnectNavigation,\n    active: () => boolean,\n  ) {\n    if (!active()) return;\n    const pending = new AbortController();\n    authorization.current = pending;\n    const abortOnUnmount = () => pending.abort(lifetime.current?.signal.reason);\n    lifetime.current!.signal.addEventListener(\"abort\", abortOnUnmount, { once: true });\n    setWaiting(true);\n    try {\n      const result = await authorizeConnectAttempt(controller.transport, attempt, navigation, {\n        mode: \"popup\",\n        signal: pending.signal,\n      });\n      if (!active() || !result) return;\n      setWaiting(false);\n      setReconciling(true);\n      await reconcile(result, active);\n      if (!active()) return;\n      if (result.state === \"cancelled\") {\n        setNotice(\"Sign-in was cancelled. You can try connecting again.\");\n        setRetryFresh(true);\n        return;\n      }\n      if (result.state !== \"complete\") {\n        if ([\"failed\", \"expired\"].includes(result.state)) setRetryFresh(true);\n        throw new Error(\"Sign-in did not finish. You can try connecting again.\");\n      }\n    } finally {\n      lifetime.current?.signal.removeEventListener(\"abort\", abortOnUnmount);\n      if (authorization.current === pending) authorization.current = null;\n      if (active()) {\n        setReconciling(false);\n        setWaiting(false);\n      }\n    }\n  }\n\n  function authorize(attempt: ConnectAttempt) {\n    // run invokes action synchronously, retaining the browser click gesture.\n    return run((active) =>\n      performAuthorization(attempt, createBrowserConnectNavigation(window), active),\n    );\n  }\n\n  async function finishConnection(\n    capability: CapabilityCatalogItem,\n    active: () => boolean = current,\n  ) {\n    if (!sessionId) {\n      // Connection management does not select session tools.\n      await onConfigured?.();\n      if (!active()) return;\n      setComplete(true);\n      setExpanded(false);\n      onClose?.();\n      return;\n    }\n    if (capability.connectionRef && capability.connectionRef.subjectScope !== \"subject\") {\n      const selected = (await client.listConnections(workspaceId)).find(\n        (entry) => entry.id === capability.connectionRef?.connectionId,\n      );\n      if (!active()) return;\n      if (!selected || selected.status !== \"active\")\n        throw new Error(\"This account needs reconnection before it can be used here.\");\n    }\n    if (capability.connectionRef?.subjectScope === \"subject\") {\n      const accounts = await client.listOwnConnectionAccounts(workspaceId);\n      if (!active()) return;\n      if (matchingActiveMcpConnections(capability, accounts).length === 0)\n        throw new Error(\"Your account needs reconnection before it can be used here.\");\n    }\n    if (!active()) return;\n    await attachSessionCapability(client, workspaceId, sessionId, capability, active);\n    if (!active()) return;\n    await onConfigured?.();\n    if (!active()) return;\n    setComplete(true);\n    setExpanded(false);\n  }\n\n  async function useHere() {\n    await run(async (active) => {\n      if (item) await finishConnection(item, active);\n    });\n  }\n\n  function close() {\n    const pending = operation.current;\n    if (pending) {\n      operation.current = null;\n      pending.abort(new ConnectPopupClosedError());\n      authorization.current?.abort(new ConnectPopupClosedError());\n      authorization.current = null;\n      reservedPopup.current?.();\n      setBusy(false);\n      setWaiting(false);\n      setReconciling(false);\n    }\n    setExpanded(false);\n    onClose?.();\n  }\n\n  return (\n    <SessionCapabilityFrame\n      name={item?.name ?? name}\n      subtitle={dialogSubtitle !== undefined ? \"\" : (item?.providerDomain ?? \"\")}\n      logo={logo ?? logoSrc ?? null}\n      typeLabel={dialogSubtitle ?? \"MCP server\"}\n      description={hostDescription || item?.description || rationale}\n      skill={false}\n      expanded={expanded}\n      complete={complete}\n      actionLabel={\n        connected\n          ? sessionId\n            ? \"Use in this conversation\"\n            : \"Connected\"\n          : `Connect ${item?.name ?? name}`\n      }\n      note={\n        sessionId\n          ? \"Review access before signing in. You'll return to this conversation after authorization.\"\n          : \"Review access before signing in. You'll return here after authorization.\"\n      }\n      onOpen={() => void open()}\n      onClose={close}\n      dialogOnly={dialogOnly}\n    >\n      <div className=\"og-session-capability-setup\">\n        {error ? <p role=\"alert\">{error}</p> : null}\n        {notice ? (\n          <p role=\"status\" className=\"og-session-capability-notice\">\n            {notice}\n          </p>\n        ) : null}\n        {!item ? (\n          <>\n            <p role=\"status\">\n              {busy ? \"Loading connection details…\" : \"Connection details are unavailable.\"}\n            </p>\n            <button disabled={busy} onClick={() => void open()}>\n              Retry\n            </button>\n          </>\n        ) : (\n          <>\n            <p>{hostDescription || item.description || rationale}</p>\n            {busy ? (\n              <>\n                <p role=\"status\" className=\"og-session-capability-progress\">\n                  {waiting\n                    ? `Finish signing in with ${item.name} in the opened window. This will close automatically when you’re connected.`\n                    : reconciling\n                      ? \"Finishing your connection…\"\n                      : \"Preparing your connection…\"}\n                </p>\n                {waiting ? (\n                  <button\n                    type=\"button\"\n                    className=\"og-session-capability-stop\"\n                    onClick={() => authorization.current?.abort(new ConnectPopupClosedError())}\n                  >\n                    Stop waiting\n                  </button>\n                ) : null}\n              </>\n            ) : !connected ? (\n              <>\n                {!item.connectionRef && !personalOnly ? (\n                  <fieldset disabled={busy}>\n                    <legend>{ownershipCopy?.legend ?? \"Who can use this connection?\"}</legend>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"workspace\"}\n                        onChange={() => setOwnership(\"workspace\")}\n                      />\n                      Everyone in this workspace\n                    </label>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"personal\"}\n                        onChange={() => setOwnership(\"personal\")}\n                      />\n                      Only me\n                    </label>\n                  </fieldset>\n                ) : null}\n                <p className=\"og-session-capability-scope\">\n                  {personalOnly && ownership === \"personal\"\n                    ? \"Connects your own account. Only work you start can use it.\"\n                    : ownershipCopy\n                      ? ownership === \"workspace\"\n                        ? ownershipCopy.workspace\n                        : ownershipCopy.personal\n                      : ownership === \"workspace\"\n                        ? sessionId\n                          ? \"This connection will be available to your workspace and used in this conversation.\"\n                          : \"This connection will be available to your workspace.\"\n                        : \"This connection belongs to you. Your messages can use it; other participants use their own accounts.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  onClick={() => {\n                    if (notice || retryFresh) void begin(true);\n                    else if (\n                      view.attempt?.nextAction.type === \"authorize\" &&\n                      view.attempt.ownership === ownership\n                    )\n                      void authorize(view.attempt);\n                    else void begin();\n                  }}\n                >\n                  {retryFresh ||\n                  ((error || notice) && view.attempt?.nextAction.type === \"authorize\")\n                    ? \"Try signing in again\"\n                    : (connectLabel ?? `Continue to ${item.name}`)}\n                </button>\n              </>\n            ) : null}\n            {connected && !busy ? (\n              <>\n                <p className=\"og-session-capability-scope\">\n                  {sessionId\n                    ? \"Your account is connected. Enable it for this conversation to finish.\"\n                    : \"Your account is connected.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  disabled={busy || view.busy}\n                  onClick={() => void useHere()}\n                >\n                  {sessionId ? \"Use in this conversation\" : \"Done\"}\n                </button>\n              </>\n            ) : null}\n          </>\n        )}\n      </div>\n    </SessionCapabilityFrame>\n  );\n}\n","import type { CapabilityCatalogItem, ConnectionMetadata } from \"@opengeni/sdk\";\n\n/** Status only; runtime use is authorized for the authenticated initiating user. */\nexport function matchingActiveMcpConnections(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  return matchingMcpConnections(item, connections).filter((entry) => entry.status === \"active\");\n}\n\nfunction matchingMcpConnections(item: CapabilityCatalogItem, connections: ConnectionMetadata[]) {\n  const ref = item.connectionRef;\n  if (!item.enabled || !ref) return [];\n  return connections.filter(\n    (entry) =>\n      entry.status !== \"revoked\" &&\n      entry.kind === \"oauth2\" &&\n      entry.metadata.mcpUrl === (item.mcpUrl ?? item.endpointUrl) &&\n      (ref.subjectScope !== \"subject\"\n        ? entry.id === ref.connectionId && entry.subjectId === null\n        : entry.subjectId !== null),\n  );\n}\n\n/** Installation availability is not account readiness. Revoked history is not actionable. */\nexport function mcpConnectionDiscoveryState(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  const matching = matchingMcpConnections(item, connections);\n  const active = matching.filter((entry) => entry.status === \"active\");\n  if (active.length === 1) return { status: \"added\", label: \"Connected\" } as const;\n  if (matching.length > 0) return { status: \"attention\", label: \"Review connection\" } as const;\n  return { status: \"available\", label: \"Connect\" } as const;\n}\n"],"mappings":";;;;;AACA,SAAS,SAAS,4BAA4B;AAGvC,SAAS,WAAW,YAA+B;AACxD,QAAM,WAAW;AAAA,IACf,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACA,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,MACL,OAAO,WAAW,MAAM,KAAK,UAAU;AAAA,MACvC,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,eAAe,WAAW,cAAc,KAAK,UAAU;AAAA,MACvD,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,QAAQ,WAAW,OAAO,KAAK,UAAU;AAAA,IAC3C;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AACA,SAAO,QAAQ,OAAO,EAAE,GAAG,UAAU,GAAG,QAAQ,IAAI,CAAC,UAAU,OAAO,CAAC;AACzE;;;ACZO,SAAS,uBAAuB,MAA6B;AAClE,QAAM,WAAW,KAAK,SAAS,QAAQ,KAAK,SAAS,cAAc;AACnE,SAAO,YAAY,CAAC,KAAK,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,QAAQ,IACrF,CAAC,GAAG,KAAK,OAAO,EAAE,MAAM,OAAgB,IAAI,SAAS,CAAC,IACtD,KAAK;AACX;AAKA,eAAsB,wBACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACrB;AACf,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG;AACjD,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,MAAM,OAAO,WAAW,aAAa,SAAS;AAC9D,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,MAAI,QAAS,OAAM,OAAO,wBAAwB,aAAa,WAAW,OAAO;AACnF;AAEA,SAAS,2BACP,SACA,MACuC;AACvC,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG,QAAO;AAGxD,MAAI,WAAW,QAAQ,MAAM;AAAA,IAC3B,CAAC,SAAS,CAAC,QAAQ,qBAAqB,cAAc,SAAS,KAAK,EAAE;AAAA,EACxE;AACA,MAAI,QAAQ,WAAW,SAAS,qBAAqB;AACnD,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,UAAU,OAAO;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAKF,eAAW,OAAO,aACf,OAAO,CAAC,OAAO,CAAC,OAAO,aAAa,SAAS,EAAE,CAAC,EAChD;AAAA,MACC,CAAC,OACC,QAAQ,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,EAAE,KAAK;AAAA,QACrE,MAAM;AAAA,QACN;AAAA,QACA,UAAU;AAAA,MACZ;AAAA,IACJ;AAAA,EACJ;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,CAAC,SACC,CAAC,QAAQ,qBAAqB,aAAa,SAAS,KAAK,EAAE,KAC3D,CAAC,SAAS,KAAK,CAAC,YAAY,QAAQ,SAAS,KAAK,QAAQ,QAAQ,OAAO,KAAK,EAAE;AAAA,EACpF;AACA,QAAM,cAAc,MAAM,QAAQ,KAAK,UAAU,kBAAkB,IAC9D,KAAK,SAAS,mBAAmB;AAAA,IAChC,CAAC,SAAyB,OAAO,SAAS;AAAA,EAC5C,IACA,CAAC;AACL,QAAM,aAAa,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,oBAAoB,GAAG,WAAW,CAAC,CAAC;AAC/E,MAAI,UAAU,WAAW,KAAK,WAAW,WAAW,QAAQ,mBAAmB;AAC7E,WAAO;AACT,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,CAAC,GAAG,UAAU,GAAG,SAAS;AAAA,IACjC,oBAAoB;AAAA,IACpB,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAiBA,eAAsB,+BACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACE;AACtC,QAAM,WAAoD,CAAC;AAC3D,MAAI,KAAK,SAAS,WAAW,uBAAuB,IAAI,EAAE,WAAW;AACnE,WAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,SAAS;AACnE,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI,KAAoB;AACxB,SAAO,IAAI;AACT,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,QAAQ,IAAI,EAAE,EAAG,OAAM,IAAI,MAAM,8CAA8C;AACnF,YAAQ,IAAI,EAAE;AACd,UAAM,UAAU,MAAM,OAAO,WAAW,aAAa,EAAE;AACvD,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,aAAS,KAAK;AAAA,MACZ;AAAA,MACA,OAAO,QAAQ,SAAS;AAAA,MACxB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,mBAAmB,QAAQ;AAAA,MAC3B;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,QAAS;AACd,SAAK,QAAQ,mBAAmB;AAAA,EAClC;AACA,SAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,UAAU,SAAS,QAAQ,EAAE;AACvF;AAKA,eAAsB,6BACpB,QACA,MACA,eAA8B,MAAM,MACrB;AACf,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,MAAM,OAAO,WAAW,KAAK,aAAa,SAAS,EAAE;AACrE,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QACE,QAAQ,sBAAsB,SAAS,sBACtC,QAAQ,mBAAmB,UAAU,SAAS;AAE/C,YAAM,IAAI,MAAM,2EAA2E;AAAA,EAC/F;AACA,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,SAAS,SAAS;AACpB,YAAM,UAAU,MAAM,OAAO;AAAA,QAC3B,KAAK;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AACA,UACE,SAAS,QAAQ,SAAS,cAC1B,SAAS,QAAQ,mBAAmB;AAAA,QAClC,CAAC,SAAS,CAAC,QAAQ,mBAAmB,SAAS,IAAI;AAAA,MACrD;AAEA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAIA,eAAsB,+BACpB,QACA,aACA,WACA,cACe;AACf,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AACF,QAAM,aAAa,MAAM,OAAO,iBAAiB,WAAW,GAAG,MAAM;AAAA,IACnE,CAAC,SAAS,KAAK,OAAO;AAAA,EACxB;AACA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,8EAA8E;AAChG,QAAM,wBAAwB,QAAQ,aAAa,WAAW,SAAS;AACzE;;;ACnMA,SAAS,WAAW,UAAU,iBAAiB,aAAa;AAC5D,SAAS,cAAc;AACvB,SAAS,QAAQ,gBAAgD;AAwCzD,SAuCJ,UAvCI,KAyCF,YAzCE;AALR,SAAS,KAAK,EAAE,KAAK,KAAK,GAAyC;AACjE,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,SACE,oBAAC,UAAK,WAAU,8BAA6B,eAAW,MACrD,iBAAO,WAAW,MACjB,oBAAC,SAAI,KAAU,KAAI,IAAG,SAAQ,QAAO,UAAS,SAAQ,SAAS,MAAM,UAAU,GAAG,GAAG,IAErF,KAAK,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,YAAY,GAExC;AAEJ;AAIO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AACF,GAAgC;AAC9B,QAAM,cAAc,OAA0B,IAAI;AAClD,QAAM,YAAY,OAAoB,IAAI;AAC1C,QAAM,YAAY,UAAU;AAC5B,QAAM,aAAa,WAAW;AAC9B,QAAM,cAAc,oBAAoB,WAAW,OAAO;AAC1D,QAAM,WACJ,iCACE;AAAA,wBAAC,QAAK,KAAK,MAAM,MAAY;AAAA,IAC7B,qBAAC,SAAI,WAAU,kCACb;AAAA,0BAAC,QAAI,gBAAK;AAAA,MACV,oBAAC,UAAM,oBAAS;AAAA,OAClB;AAAA,IACA,oBAAC,UAAK,WAAU,8BAA8B,qBAAU;AAAA,KAC1D;AAEF,SACE,qBAAC,SAAI,WAAU,yBACb;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ;AAAA,QACR,OAAO,aAAa,EAAE,SAAS,OAAO,IAAI;AAAA,QAC1C,KAAK;AAAA,QACL,UAAU;AAAA,QACV,cAAY,GAAG,IAAI;AAAA,QACnB,cAAY,WAAW,aAAa,WAAW,UAAU;AAAA,QACzD,WAAU;AAAA,QAEV;AAAA,+BAAC,SAAI,WAAU,gCACZ;AAAA;AAAA,YACA,WAAW,oBAAC,aAAU,MAAM,IAAI,eAAW,MAAC,IAAK;AAAA,aACpD;AAAA,UACC,WACC,oBAAC,OAAE,MAAK,UAAS,WAAU,8BACxB,4BACE,QAAQ,6BAA0B,kDACvC,IAEA,iCACE;AAAA,gCAAC,OAAE,WAAU,8BAA8B,uBAAY;AAAA,YACtD,oBACC,oBAAC,SAAI,WAAU,iCAAgC,oBAAiB,IAC9D,+BAAC,UAAK,MAAK,QACT;AAAA,kCAAC,YAAS,MAAM,IAAI,eAAW,MAAC;AAAA,cAC/B;AAAA,eACH,GACF,IAEA,qBAAC,SAAI,WAAU,iCACb;AAAA,mCAAC,UACC;AAAA,oCAAC,mBAAgB,MAAM,IAAI,eAAW,MAAC;AAAA,gBACtC,QAAQ,yCAAsC;AAAA,iBACjD;AAAA,cACA;AAAA,gBAAC;AAAA;AAAA,kBACC,KAAK;AAAA,kBACL,MAAK;AAAA,kBACL,SAAS;AAAA,kBACT,UAAU;AAAA,kBACV,iBAAe,cAAc,WAAW;AAAA,kBACxC,iBAAe,cAAc,WAAW;AAAA,kBAEvC;AAAA;AAAA,cACH;AAAA,eACF;AAAA,aAEJ;AAAA,UAED;AAAA;AAAA;AAAA,IACH;AAAA,IACC,CAAC,YAAY,CAAC,cAAc,OAC3B,oBAAC,OAAE,WAAU,8BAA8B,gBAAK,IAC9C;AAAA,IACJ;AAAA,MAAC,OAAO;AAAA,MAAP;AAAA,QACC,MAAM,YAAY,CAAC;AAAA,QACnB,cAAc,CAAC,SAAS;AACtB,cAAI,CAAC,QAAQ,CAAC,KAAM,SAAQ;AAAA,QAC9B;AAAA,QAEA,+BAAC,OAAO,QAAP,EACC;AAAA,8BAAC,OAAO,SAAP,EAAe,WAAU,yCAAwC,OAAO,aAAa;AAAA,UACtF;AAAA,YAAC,OAAO;AAAA,YAAP;AAAA,cACC,WAAU;AAAA,cACV,OAAO;AAAA,cACP,iBAAiB,CAAC,UAAU;AAC1B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,mBAAmB,CAAC,UAAU;AAC5B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,kBAAkB,CAAC,UAAU;AAC3B,sBAAM,eAAe;AACrB,sBAAM,SAAS,UAAU,SAAS,cAC9B,UAAU,UACV,WAAW;AACf,oBAAI,QAAQ,YAAa,QAAO,MAAM;AAAA,cACxC;AAAA,cAEA;AAAA,qCAAC,SAAI,WAAU,uCACb;AAAA,sCAAC,QAAK,KAAK,MAAM,MAAY;AAAA,kBAC7B,qBAAC,SACC;AAAA,wCAAC,OAAO,OAAP,EAAc,gBAAK;AAAA,oBACpB,qBAAC,OAAO,aAAP,EACE;AAAA;AAAA,sBACA,WAAW,SAAM,QAAQ,KAAK;AAAA,uBACjC;AAAA,qBACF;AAAA,kBACC,CAAC,OACA,oBAAC,OAAO,OAAP,EAAa,cAAW,0BACvB,8BAAC,SAAM,MAAM,IAAI,GACnB,IACE;AAAA,mBACN;AAAA,gBACA,oBAAC,SAAI,WAAU,qCAAqC,UAAS;AAAA;AAAA;AAAA,UAC/D;AAAA,WACF;AAAA;AAAA,IACF;AAAA,KACF;AAEJ;;;AC/LA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,WAAW,UAAAA,SAAQ,YAAAC,iBAAgB;;;ACTrC,SAAS,6BACd,MACA,aACA;AACA,SAAO,uBAAuB,MAAM,WAAW,EAAE,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AAC9F;AAEA,SAAS,uBAAuB,MAA6B,aAAmC;AAC9F,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,WAAW,CAAC,IAAK,QAAO,CAAC;AACnC,SAAO,YAAY;AAAA,IACjB,CAAC,UACC,MAAM,WAAW,aACjB,MAAM,SAAS,YACf,MAAM,SAAS,YAAY,KAAK,UAAU,KAAK,iBAC9C,IAAI,iBAAiB,YAClB,MAAM,OAAO,IAAI,gBAAgB,MAAM,cAAc,OACrD,MAAM,cAAc;AAAA,EAC5B;AACF;AAGO,SAAS,4BACd,MACA,aACA;AACA,QAAM,WAAW,uBAAuB,MAAM,WAAW;AACzD,QAAM,SAAS,SAAS,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AACnE,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,QAAQ,SAAS,OAAO,YAAY;AACtE,MAAI,SAAS,SAAS,EAAG,QAAO,EAAE,QAAQ,aAAa,OAAO,oBAAoB;AAClF,SAAO,EAAE,QAAQ,aAAa,OAAO,UAAU;AACjD;;;ADqBS,SAogBC,YAAAC,WApgBD,OAAAC,MAogBC,QAAAC,aApgBD;AADF,SAAS,yBAAyB,OAAsC;AAC7E,SAAO,gBAAAD,KAAC,qBAAmB,GAAG,OAAO;AACvC;AAEO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,CAAC,QAAQ,SAAS,IAAIE,UAAS,MAAM,MAAM;AACjD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,CAAC;AAC9C,MAAI,WAAW,MAAM,QAAQ;AAC3B,cAAU,MAAM,MAAM;AACtB,kBAAc,aAAa,CAAC;AAAA,EAC9B;AACA,SACE,gBAAAF;AAAA,IAAC;AAAA;AAAA,MAEE,GAAG;AAAA;AAAA,IADC,GAAG,UAAU,IAAI,MAAM,WAAW,IAAI,MAAM,SAAS,IAAI,MAAM,YAAY;AAAA,EAElF;AAEJ;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,UAAU,IAAIE;AAAA,IACnB,MAAM,IAAI,kBAAkB,OAAO,iBAAiB,GAAG,WAAW;AAAA,EACpE;AACA,QAAM,OAAO,WAAW,UAAU;AAClC,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAuC,IAAI;AACnE,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAwB,IAAI;AACpD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,UAAU;AACnD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,KAAK;AAC9C,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,KAAK;AAChD,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,KAAK;AAC5C,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AACpD,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAwB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAIA,UAAwB,IAAI;AACxD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,KAAK;AAClD,QAAM,CAAC,WAAW,YAAY,IAAIA;AAAA,IAChC,eAAe,aAAa;AAAA,EAC9B;AACA,QAAM,WAAWC,QAA+B,IAAI;AACpD,QAAM,gBAAgBA,QAA+B,IAAI;AACzD,QAAM,YAAYA,QAA+B,IAAI;AACrD,QAAM,gBAAgBA,QAA4B,IAAI;AACtD,QAAM,WAAWA,QAAO,OAAO,WAAW,CAAC;AAC3C,QAAM,aAAaA,QAAO,OAAO,WAAW,CAAC;AAC7C,QAAM,aAAaA,QAAsB,IAAI;AAC7C,QAAM,aAAa,YACf,4BAA4B,WAAW,IAAI,SAAS,IAAI,YAAY,KACpE,8BAA8B,WAAW,IAAI,YAAY;AAC7D,QAAM,UAAU,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,SAAS,QAAQ,OAAO;AAErE,iBAAe,KAAK,SAAwB,SAAS;AACnD,UAAM,aAAa,SAAS;AAC5B,UAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3C,OAAO,iBAAiB,WAAW;AAAA,MACnC,YAAY,OAAO,WAAW,aAAa,SAAS,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC9E,CAAC;AACD,QAAI,CAAC,cAAc,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO;AACzF,aAAO;AACT,QAAI,WAAW,QAAQ,MAAM,KAAK,CAAC,UAAU,MAAM,OAAO,YAAY;AAGtE,QAAI,UAAU,SAAS,SAAS,CAAC,SAAS,WAAW,CAAC,SAAS,UAAU;AACvE,YAAM,WAAW,SAAS,UAAU,SAAS;AAC7C,UAAI,UAAU;AACZ,cAAM,YAAY,MAAM,OAAO,yBAAyB,aAAa,QAAQ;AAC7E,YAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAI,UAAU,SAAS,SAAU,YAAW,EAAE,GAAG,UAAU,UAAU,SAAS;AAAA,iBACrE,UAAU,SAAS;AAC1B,gBAAM,IAAI,MAAM,UAAU,WAAW,gDAAgD;AAAA,MACzF;AAAA,IACF;AACA,QAAI,CAAC,YAAY,SAAS,SAAS,SAAS,SAAS,aAAa;AAChE,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,YAAQ,QAAQ;AAChB,QAAI,SAAS;AACX,mBAAa,SAAS,cAAc,iBAAiB,YAAY,aAAa,WAAW;AAAA,aAEzF,CAAC,SACA,gBAAgB,SAAS,UAAU,+BAA+B;AAEnE,mBAAa,UAAU;AACzB,QAAI,eAAe;AACnB,QAAI,SAAS,WAAW,SAAS,eAAe;AAC9C,YAAM,cACJ,SAAS,cAAc,iBAAiB,YACpC,MAAM,OAAO,0BAA0B,WAAW,IAClD,MAAM,OAAO,gBAAgB,WAAW;AAC9C,UAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAM,UAAU,6BAA6B,UAAU,WAAW;AAClE,qBAAe,QAAQ,WAAW;AAAA,IACpC;AACA,QAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,UAAM,WACJ,SAAS,WAAW,SAAS,sBACzB,QAAQ,qBAAqB,cAC7B,SAAS,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE;AAChF,iBAAa,YAAY;AACzB;AAAA,MACE,gBACE,CAAC,CAAC,YACF,uBAAuB,QAAQ,EAAE,MAAM,CAAC,SAAS,SAAS,SAAS,KAAK,EAAE,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AAEA,YAAU,MAAM;AACd,UAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAS,UAAU;AAInB,QAAI,WAAY,SAAQ,IAAI;AAC5B,UAAM,YAAY;AAChB,YAAM,KAAK;AACX,UAAI,MAAM,OAAO,WAAW,CAAC,WAAY;AACzC,YAAM,oBAAoB;AAAA,IAC5B,GAAG,EACA,MAAM,CAAC,YAAY;AAClB,UAAI,CAAC,MAAM,OAAO;AAChB;AAAA,UACE,mBAAmB,QAAQ,QAAQ,UAAU;AAAA,QAC/C;AAAA,IACJ,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,MAAM,OAAO,WAAW,WAAY,SAAQ,KAAK;AAAA,IACxD,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AAAA,IACd;AAAA,EAKF,GAAG,CAAC,QAAQ,aAAa,WAAW,cAAc,UAAU,CAAC;AAE7D,YAAU,MAAM;AACd,UAAM,OAAO,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,CAAC,MAAM,WAAW,iBAAiB,EAAG;AAC1C,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,YAA2B;AAG/B,SAAK,OACF,qBAAqB,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC,EACnD,KAAK,CAAC,SAAS;AACd,UAAI,MAAM,OAAO,WAAW,CAAC,KAAK,KAAK,WAAW,QAAQ,KAAK,KAAK,OAAO;AACzE;AACF,kBAAY,IAAI,gBAAgB,IAAI;AACpC,cAAQ,SAAS;AAAA,IACnB,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AACZ,UAAI,UAAW,KAAI,gBAAgB,SAAS;AAAA,IAC9C;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,aAAa,CAAC;AAEhC,iBAAe,IAAI,QAAkD;AACnE,QAAI,UAAU,WAAW,CAAC,QAAQ,EAAG;AACrC,UAAM,UAAU,IAAI,gBAAgB;AACpC,cAAU,UAAU;AACpB,UAAM,SAAS,MAAM,QAAQ,KAAK,UAAU,YAAY,WAAW,CAAC,QAAQ,OAAO;AACnF,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,cAAU,IAAI;AACd,kBAAc,KAAK;AACnB,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,SAAS,SAAS;AAChB,UAAI,OAAO,GAAG;AACZ,YAAI,mBAAmB,wBAAyB,WAAU,QAAQ,OAAO;AAAA;AAEvE;AAAA,YACE,mBAAmB,QACf,QAAQ,UACR;AAAA,UACN;AAAA,MACJ;AAAA,IACF,UAAE;AACA,UAAI,UAAU,YAAY,SAAS;AACjC,kBAAU,UAAU;AACpB,YAAI,QAAQ,EAAG,SAAQ,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,SAAS,WAAmB;AAGnC,QAAI;AACF,qBAAe,QAAQ,YAAY,SAAS;AAAA,IAC9C,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,UAAU,SAAyB,SAAwB,SAAS;AACjF,QAAI,CAAC,OAAO,EAAG;AACf,QAAI,QAAQ,UAAU,cAAc,CAAC,QAAQ,WAAW,CAAC,QAAQ,qBAAsB;AACvF,UAAM,WAAW,MAAM,KAAK,MAAM;AAClC,QAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,UAAM,cAAc,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,MAC7D,CAAC,UAAU,MAAM,OAAO,QAAQ,QAAS;AAAA,IAC3C;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QACE,CAAC,cACD,WAAW,WAAW,YACtB,WAAW,SAAS,YACpB,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,gBAC3D,WAAW,cAAc,UAAW,QAAQ,cAAc;AAE3D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,WAAW,SAAS;AAC1B,QACE,SAAS,WACT,UAAU,iBAAiB,aAC3B,UAAU,gBACV,SAAS,iBAAiB,WAAW;AAErC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,OAAO,iBAAiB,aAAa,cAAc;AAAA,MACvD,eACE,QAAQ,cAAc,aAClB,EAAE,gBAAgB,WAAW,gBAAgB,MAAM,UAAU,cAAc,UAAU,IACrF;AAAA,QACE,gBAAgB,WAAW;AAAA,QAC3B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc,WAAW;AAAA,MAC3B;AAAA,IACR,CAAC;AACD,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,MAAM,KAAK,MAAM;AACjC,QAAI,WAAW,OAAO,GAAG;AACvB,YAAM,iBAAiB,SAAS,MAAM;AAAA,IACxC;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QAAI;AACF,qBAAe,WAAW,UAAU;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,OAAO;AACpB,gBAAY,IAAI;AAChB,UAAM,IAAI,OAAO,WAAW;AAC1B,YAAM,KAAK,MAAM;AACjB,UAAI,CAAC,OAAO,EAAG;AACf,YAAM,oBAAoB,MAAM;AAAA,IAClC,CAAC;AAAA,EACH;AAEA,iBAAe,oBAAoB,SAAwB,SAAS;AAClE,QAAI,QAAuB;AAC3B,QAAI;AACF,cAAQ,eAAe,QAAQ,UAAU;AAAA,IAC3C,QAAQ;AAAA,IAER;AACA,QAAI,OAAO;AACT,YAAM,UAAU,MAAM,WAAW,QAAQ,KAAK;AAC9C,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAG,eAAc,IAAI;AAClF,UAAI,QAAQ,UAAU,WAAY,gBAAe,IAAI;AACrD,UAAI;AACF,cAAM,UAAU,SAAS,MAAM;AAAA,MACjC,UAAE;AACA,YAAI,OAAO,EAAG,gBAAe,KAAK;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,MAAM,QAAQ,OAAO;AAClC,UAAM,IAAI,OAAO,WAAW;AAC1B,UACE,SACC,KAAK,WAAW,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,KAAK,QAAQ,KAAK,GAC/E;AACA,iBAAS,UAAU,OAAO,WAAW;AACrC,mBAAW,UAAU,OAAO,WAAW;AAAA,MACzC;AACA,YAAM,WAAW,gCAAgC,MAAM;AACvD,oBAAc,UAAU,SAAS;AACjC,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,MAAM;AAClC,YAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,YACE,SAAS,iBACT,eACG,SAAS,cAAc,iBAAiB,YAAY,aAAa;AAEpE,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AACF,cAAM,SAAS,SAAS,UAAU,SAAS;AAC3C,YAAI,CAAC;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAGF,YAAI,qBAAqB,SAAS,eAAe,gBAAgB;AACjE,YAAI,SAAS,eAAe,iBAAiB,WAAW;AACtD,gBAAM,eAAe,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,YAC9D,CAAC,UACC,MAAM,cAAc,QACpB,MAAM,SAAS,YACf,MAAM,SAAS,WAAW;AAAA,UAC9B;AACA,cAAI,CAAC,OAAO,EAAG;AACf,cAAI,YAAY,SAAS;AACvB,kBAAM,IAAI;AAAA,cACR;AAAA,YACF;AACF,+BAAqB,YAAY,CAAC,GAAG;AAAA,QACvC;AAIA,cAAM,QAAQ,KAAK,UAAU,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AACjF,YAAI,WAAW,YAAY,QAAQ,WAAW,YAAY,OAAO;AAC/D,mBAAS,UAAU,OAAO,WAAW;AACrC,qBAAW,UAAU,OAAO,WAAW;AAAA,QACzC;AACA,mBAAW,UAAU;AACrB,YAAI,UAAU,MAAM,WAAW,MAAM;AAAA,UACnC,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,gBAAgB,SAAS;AAAA,UACzB,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,QACrD,CAAC;AACD,YAAI,CAAC,OAAO,EAAG;AACf,iBAAS,QAAQ,EAAE;AACnB,YAAI,QAAQ,UAAU;AACpB,oBAAU,MAAM,WAAW;AAAA,YACzB,EAAE,MAAM,eAAe,QAAQ,EAAE,OAAO,EAAE;AAAA,YAC1C,WAAW;AAAA,UACb;AACF,YAAI,CAAC,OAAO,EAAG;AACf,YAAI,QAAQ,WAAW,SAAS;AAC9B,gBAAM,qBAAqB,SAAS,SAAS,YAAY,MAAM;AAAA,YAC5D,OAAM,UAAU,SAAS,MAAM;AAAA,MACtC,UAAE;AACA,YAAI,cAAc,YAAY,SAAS,MAAO,eAAc,UAAU;AACtE,iBAAS,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,iBAAe,qBACb,SACA,YACA,QACA;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,IAAI,gBAAgB;AACpC,kBAAc,UAAU;AACxB,UAAM,iBAAiB,MAAM,QAAQ,MAAM,SAAS,SAAS,OAAO,MAAM;AAC1E,aAAS,QAAS,OAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AACjF,eAAW,IAAI;AACf,QAAI;AACF,YAAM,SAAS,MAAM,wBAAwB,WAAW,WAAW,SAAS,YAAY;AAAA,QACtF,MAAM;AAAA,QACN,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,OAAO,KAAK,CAAC,OAAQ;AAC1B,iBAAW,KAAK;AAChB,qBAAe,IAAI;AACnB,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,OAAO,UAAU,aAAa;AAChC,kBAAU,sDAAsD;AAChE,sBAAc,IAAI;AAClB;AAAA,MACF;AACA,UAAI,OAAO,UAAU,YAAY;AAC/B,YAAI,CAAC,UAAU,SAAS,EAAE,SAAS,OAAO,KAAK,EAAG,eAAc,IAAI;AACpE,cAAM,IAAI,MAAM,uDAAuD;AAAA,MACzE;AAAA,IACF,UAAE;AACA,eAAS,SAAS,OAAO,oBAAoB,SAAS,cAAc;AACpE,UAAI,cAAc,YAAY,QAAS,eAAc,UAAU;AAC/D,UAAI,OAAO,GAAG;AACZ,uBAAe,KAAK;AACpB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAU,SAAyB;AAE1C,WAAO;AAAA,MAAI,CAAC,WACV,qBAAqB,SAAS,+BAA+B,MAAM,GAAG,MAAM;AAAA,IAC9E;AAAA,EACF;AAEA,iBAAe,iBACb,YACA,SAAwB,SACxB;AACA,QAAI,CAAC,WAAW;AAEd,YAAM,eAAe;AACrB,UAAI,CAAC,OAAO,EAAG;AACf,kBAAY,IAAI;AAChB,kBAAY,KAAK;AACjB,gBAAU;AACV;AAAA,IACF;AACA,QAAI,WAAW,iBAAiB,WAAW,cAAc,iBAAiB,WAAW;AACnF,YAAM,YAAY,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,QAC3D,CAAC,UAAU,MAAM,OAAO,WAAW,eAAe;AAAA,MACpD;AACA,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,YAAY,SAAS,WAAW;AACnC,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,WAAW,eAAe,iBAAiB,WAAW;AACxD,YAAM,WAAW,MAAM,OAAO,0BAA0B,WAAW;AACnE,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,6BAA6B,YAAY,QAAQ,EAAE,WAAW;AAChE,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,wBAAwB,QAAQ,aAAa,WAAW,YAAY,MAAM;AAChF,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,eAAe;AACrB,QAAI,CAAC,OAAO,EAAG;AACf,gBAAY,IAAI;AAChB,gBAAY,KAAK;AAAA,EACnB;AAEA,iBAAe,UAAU;AACvB,UAAM,IAAI,OAAO,WAAW;AAC1B,UAAI,KAAM,OAAM,iBAAiB,MAAM,MAAM;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,WAAS,QAAQ;AACf,UAAM,UAAU,UAAU;AAC1B,QAAI,SAAS;AACX,gBAAU,UAAU;AACpB,cAAQ,MAAM,IAAI,wBAAwB,CAAC;AAC3C,oBAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAC1D,oBAAc,UAAU;AACxB,oBAAc,UAAU;AACxB,cAAQ,KAAK;AACb,iBAAW,KAAK;AAChB,qBAAe,KAAK;AAAA,IACtB;AACA,gBAAY,KAAK;AACjB,cAAU;AAAA,EACZ;AAEA,SACE,gBAAAH;AAAA,IAAC;AAAA;AAAA,MACC,MAAM,MAAM,QAAQ;AAAA,MACpB,UAAU,mBAAmB,SAAY,KAAM,MAAM,kBAAkB;AAAA,MACvE,MAAM,QAAQ,WAAW;AAAA,MACzB,WAAW,kBAAkB;AAAA,MAC7B,aAAa,mBAAmB,MAAM,eAAe;AAAA,MACrD,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA,aACE,YACI,YACE,6BACA,cACF,WAAW,MAAM,QAAQ,IAAI;AAAA,MAEnC,MACE,YACI,6FACA;AAAA,MAEN,QAAQ,MAAM,KAAK,KAAK;AAAA,MACxB,SAAS;AAAA,MACT;AAAA,MAEA,0BAAAC,MAAC,SAAI,WAAU,+BACZ;AAAA,gBAAQ,gBAAAD,KAAC,OAAE,MAAK,SAAS,iBAAM,IAAO;AAAA,QACtC,SACC,gBAAAA,KAAC,OAAE,MAAK,UAAS,WAAU,gCACxB,kBACH,IACE;AAAA,QACH,CAAC,OACA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAE,MAAK,UACL,iBAAO,qCAAgC,uCAC1C;AAAA,UACA,gBAAAA,KAAC,YAAO,UAAU,MAAM,SAAS,MAAM,KAAK,KAAK,GAAG,mBAEpD;AAAA,WACF,IAEA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAG,6BAAmB,KAAK,eAAe,WAAU;AAAA,UACpD,OACC,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,MAAK,UAAS,WAAU,kCACxB,oBACG,0BAA0B,KAAK,IAAI,qFACnC,cACE,oCACA,mCACR;AAAA,YACC,UACC,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,WAAU;AAAA,gBACV,SAAS,MAAM,cAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAAA,gBAC1E;AAAA;AAAA,YAED,IACE;AAAA,aACN,IACE,CAAC,YACH,gBAAAC,MAAAF,WAAA,EACG;AAAA,aAAC,KAAK,iBAAiB,CAAC,eACvB,gBAAAE,MAAC,cAAS,UAAU,MAClB;AAAA,8BAAAD,KAAC,YAAQ,yBAAe,UAAU,gCAA+B;AAAA,cACjE,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,WAAW;AAAA;AAAA,gBAC1C;AAAA,gBAAE;AAAA,iBAEJ;AAAA,cACA,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,UAAU;AAAA;AAAA,gBACzC;AAAA,gBAAE;AAAA,iBAEJ;AAAA,eACF,IACE;AAAA,YACJ,gBAAAA,KAAC,OAAE,WAAU,+BACV,0BAAgB,cAAc,aAC3B,+DACA,gBACE,cAAc,cACZ,cAAc,YACd,cAAc,WAChB,cAAc,cACZ,YACE,uFACA,yDACF,wGACV;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,SAAS,MAAM;AACb,sBAAI,UAAU,WAAY,MAAK,MAAM,IAAI;AAAA,2BAEvC,KAAK,SAAS,WAAW,SAAS,eAClC,KAAK,QAAQ,cAAc;AAE3B,yBAAK,UAAU,KAAK,OAAO;AAAA,sBACxB,MAAK,MAAM;AAAA,gBAClB;AAAA,gBAEC,yBACC,SAAS,WAAW,KAAK,SAAS,WAAW,SAAS,cACpD,yBACC,gBAAgB,eAAe,KAAK,IAAI;AAAA;AAAA,YAC/C;AAAA,aACF,IACE;AAAA,UACH,aAAa,CAAC,OACb,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,WAAU,+BACV,sBACG,0EACA,8BACN;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,UAAU,QAAQ,KAAK;AAAA,gBACvB,SAAS,MAAM,KAAK,QAAQ;AAAA,gBAE3B,sBAAY,6BAA6B;AAAA;AAAA,YAC5C;AAAA,aACF,IACE;AAAA,WACN;AAAA,SAEJ;AAAA;AAAA,EACF;AAEJ;","names":["useRef","useState","Fragment","jsx","jsxs","useState","useRef"]}
+{"version":3,"sources":["../src/hooks/use-connect.ts","../src/session-capability-policy.ts","../src/components/session-capability-frame.tsx","../src/components/session-mcp-capability-card.tsx","../src/mcp-connection-status.ts"],"sourcesContent":["import type { ConnectController } from \"@opengeni/connect\";\nimport { useMemo, useSyncExternalStore } from \"react\";\n\n/** Internal consumers import the hook directly so setup surfaces stay lazy. */\nexport function useConnect(controller: ConnectController) {\n  const snapshot = useSyncExternalStore(\n    controller.subscribe,\n    controller.getSnapshot,\n    controller.getSnapshot,\n  );\n  const actions = useMemo(\n    () => ({\n      begin: controller.begin.bind(controller),\n      recover: controller.recover.bind(controller),\n      refresh: controller.refresh.bind(controller),\n      waitForAction: controller.waitForAction.bind(controller),\n      advance: controller.advance.bind(controller),\n      cancel: controller.cancel.bind(controller),\n    }),\n    [controller],\n  );\n  return useMemo(() => ({ ...snapshot, ...actions }), [snapshot, actions]);\n}\n","import type {\n  FirstPartyMcpToolName,\n  CapabilityCatalogItem,\n  Session,\n  UpdateSessionToolPolicyRequest,\n} from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\n\n/** Catalog tool discovery may be lazy; selecting the installed server does not\n * require its individual tool inventory to have been fetched. */\nexport function sessionCapabilityTools(item: CapabilityCatalogItem) {\n  const serverId = item.kind === \"mcp\" ? item.runtime?.mcpServerId : undefined;\n  return serverId && !item.tools.some((tool) => tool.kind === \"mcp\" && tool.id === serverId)\n    ? [...item.tools, { kind: \"mcp\" as const, id: serverId }]\n    : item.tools;\n}\n\n/** A connection never resets the human's existing tool selection. Default-mode\n * sessions discover newly enabled servers at admission; explicit/inherited\n * policies add only this reviewed capability, with the existing CAS fence. */\nexport async function attachSessionCapability(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return;\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const session = await client.getSession(workspaceId, sessionId);\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const request = capabilityToolPolicyUpdate(session, item);\n  if (request) await client.updateSessionToolPolicy(workspaceId, sessionId, request);\n}\n\nfunction capabilityToolPolicyUpdate(\n  session: Session,\n  item: CapabilityCatalogItem,\n): UpdateSessionToolPolicyRequest | null {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return null;\n  // Session.tools includes mandatory runtime servers, which must never be\n  // echoed into the human's explicit selection.\n  let existing = session.tools.filter(\n    (tool) => !session.effectiveToolPolicy?.mandatoryIds?.includes(tool.id),\n  );\n  if (session.toolPolicy.mode === \"workspace_default\") {\n    const policy = session.effectiveToolPolicy;\n    if (!policy || policy.idsTruncated)\n      throw new Error(\n        \"Connected, but the full session tool selection could not be read. Review the Tools picker before continuing.\",\n      );\n    // A workspace may choose a restricted default instead of all enabled servers.\n    // Preserve that exact selection if this connection needs an explicit addition.\n    // selectedIds contains only explicit additions, and is normally empty for\n    // automatic selection. Compare against the resolved defaults instead.\n    existing = policy.effectiveIds\n      .filter((id) => !policy.mandatoryIds.includes(id))\n      .map(\n        (id) =>\n          session.tools.find((tool) => tool.kind === \"mcp\" && tool.id === id) ?? {\n            kind: \"mcp\" as const,\n            id,\n            optional: true,\n          },\n      );\n  }\n  const additions = tools.filter(\n    (tool) =>\n      !session.effectiveToolPolicy?.mandatoryIds.includes(tool.id) &&\n      !existing.some((current) => current.kind === tool.kind && current.id === tool.id),\n  );\n  const recommended = Array.isArray(item.metadata?.firstPartyMcpTools)\n    ? (item.metadata.firstPartyMcpTools.filter(\n        (name): name is string => typeof name === \"string\",\n      ) as FirstPartyMcpToolName[])\n    : [];\n  const firstParty = [...new Set([...session.firstPartyMcpTools, ...recommended])];\n  if (additions.length === 0 && firstParty.length === session.firstPartyMcpTools.length)\n    return null;\n  return {\n    mode: \"explicit\",\n    tools: [...existing, ...additions],\n    firstPartyMcpTools: firstParty,\n    expectedVersion: session.toolPolicyVersion,\n  };\n}\n\n/** Read-only review. Hosts must show ancestor changes and obtain a separate\n * explicit click before applying. This plan is never authorization. */\nexport type SessionCapabilityAccessPlan = {\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  sessions: Array<{\n    id: string;\n    title: string | null;\n    parentSessionId: string | null;\n    toolPolicyVersion: number;\n    request: UpdateSessionToolPolicyRequest | null;\n  }>;\n};\n\nexport async function prepareSessionCapabilityAccess(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<SessionCapabilityAccessPlan> {\n  const sessions: SessionCapabilityAccessPlan[\"sessions\"] = [];\n  if (item.kind === \"skill\" || sessionCapabilityTools(item).length === 0)\n    return { workspaceId, sessionId, capabilityId: item.id, sessions };\n  const visited = new Set<string>();\n  let id: string | null = sessionId;\n  while (id) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (visited.has(id)) throw new Error(\"The parent chat chain could not be verified.\");\n    visited.add(id);\n    const session = await client.getSession(workspaceId, id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const request = capabilityToolPolicyUpdate(session, item);\n    sessions.push({\n      id,\n      title: session.title ?? null,\n      parentSessionId: session.parentSessionId ?? null,\n      toolPolicyVersion: session.toolPolicyVersion,\n      request,\n    });\n    // An unchanged immediate parent already supplies this capability's ceiling.\n    // Do not read or broaden ancestors irrelevant to this addition.\n    if (!request) break;\n    id = session.parentSessionId ?? null;\n  }\n  return { workspaceId, sessionId, capabilityId: item.id, sessions: sessions.reverse() };\n}\n\n/** Preflight the entire review, then apply ordinary CAS-fenced API writes root\n * first. A partial failure may leave approved ancestor changes committed; never\n * claim success or roll back another person's edits. Prepare a new review. */\nexport async function applySessionCapabilityAccess(\n  client: OpenGeniClient,\n  plan: SessionCapabilityAccessPlan,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const current = await client.getSession(plan.workspaceId, reviewed.id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (\n      current.toolPolicyVersion !== reviewed.toolPolicyVersion ||\n      (current.parentSessionId ?? null) !== reviewed.parentSessionId\n    )\n      throw new Error(\"Chat access changed. Click Add tools to review the current choices again.\");\n  }\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (reviewed.request) {\n      const updated = await client.updateSessionToolPolicy(\n        plan.workspaceId,\n        reviewed.id,\n        reviewed.request,\n      );\n      if (\n        reviewed.request.mode === \"explicit\" &&\n        reviewed.request.firstPartyMcpTools.some(\n          (tool) => !updated.firstPartyMcpTools.includes(tool),\n        )\n      )\n        throw new Error(\n          \"This chat's capabilities do not allow these tools. Review its capability settings before adding tools again.\",\n        );\n    }\n  }\n}\n\n/** Native OAuth callbacks have already saved the provider connection. Finish\n * the separate, version-fenced session tool selection before reporting success. */\nexport async function completeSessionCapabilityOAuth(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  capabilityId: string | null,\n): Promise<void> {\n  if (!capabilityId)\n    throw new Error(\n      \"The authorized integration could not be identified. Review its connection card to finish setup.\",\n    );\n  const connected = (await client.listCapabilities(workspaceId)).items.find(\n    (item) => item.id === capabilityId,\n  );\n  if (!connected?.enabled)\n    throw new Error(\"The connection was authorized, but enabling its tools could not be verified.\");\n  await attachSessionCapability(client, workspaceId, sessionId, connected);\n}\n","import { CheckIcon, InfoIcon, ShieldCheckIcon, XIcon } from \"lucide-react\";\nimport { Dialog } from \"radix-ui\";\nimport { useRef, useState, type ReactNode, type RefObject } from \"react\";\nimport { usePortalTokenStyle } from \"../lib/use-portal-token-style\";\n\nexport type SessionCapabilityFrameProps = {\n  name: string;\n  subtitle: string;\n  logo: string | null;\n  typeLabel: string;\n  description: string;\n  skill: boolean;\n  expanded: boolean;\n  complete: boolean;\n  /** Completion copy must reflect the provider's actual scope of access. */\n  completeLabel?: string;\n  actionLabel: string;\n  /** Direct navigation actions should not announce a dialog on the card. */\n  opensDialog?: boolean;\n  note: string;\n  onOpen(): void;\n  onClose(): void;\n  busy?: boolean;\n  opener?: RefObject<HTMLButtonElement | null>;\n  cardRef?: RefObject<HTMLElement | null>;\n  children?: ReactNode;\n  /** A catalogue row can own the opener while reusing the same details dialog. */\n  dialogOnly?: boolean;\n  /**\n   * Replaces the action when the viewer cannot start setup here (the provider\n   * is not configured, or someone else must connect it). Say why and who can.\n   */\n  actionUnavailable?: ReactNode;\n  /** Host-owned content inside the card, under its status or actions. */\n  details?: ReactNode;\n};\n\nfunction Mark({ src, name }: { src: string | null; name: string }) {\n  const [failed, setFailed] = useState<string | null>(null);\n  return (\n    <span className=\"og-session-capability-logo\" aria-hidden>\n      {src && failed !== src ? (\n        <img src={src} alt=\"\" loading=\"lazy\" decoding=\"async\" onError={() => setFailed(src)} />\n      ) : (\n        name.trim().slice(0, 2).toUpperCase()\n      )}\n    </span>\n  );\n}\n\n/** The same conversation card in the console and embedded clients. Setup\n * content owns the provider flow; this frame owns identity and protected focus. */\nexport function SessionCapabilityFrame({\n  name,\n  subtitle,\n  logo,\n  typeLabel,\n  description,\n  skill,\n  expanded,\n  complete,\n  completeLabel,\n  actionLabel,\n  opensDialog = true,\n  note,\n  onOpen,\n  onClose,\n  busy = false,\n  opener,\n  cardRef,\n  children,\n  dialogOnly = false,\n  actionUnavailable,\n  details,\n}: SessionCapabilityFrameProps) {\n  const localOpener = useRef<HTMLButtonElement>(null);\n  const localCard = useRef<HTMLElement>(null);\n  const buttonRef = opener ?? localOpener;\n  const sectionRef = cardRef ?? localCard;\n  const portalStyle = usePortalTokenStyle(sectionRef.current);\n  const identity = (\n    <>\n      <Mark src={logo} name={name} />\n      <div className=\"og-session-capability-identity\">\n        <h3>{name}</h3>\n        <span>{subtitle}</span>\n      </div>\n      <span className=\"og-session-capability-type\">{typeLabel}</span>\n    </>\n  );\n  return (\n    <div className=\"og-session-capability\">\n      <section\n        hidden={dialogOnly}\n        style={dialogOnly ? { display: \"none\" } : undefined}\n        ref={sectionRef}\n        tabIndex={-1}\n        aria-label={`${name} setup`}\n        data-state={complete ? \"complete\" : expanded ? \"setup\" : \"suggested\"}\n        className=\"og-session-capability-shell\"\n      >\n        <div className=\"og-session-capability-header\">\n          {identity}\n          {complete ? <CheckIcon size={16} aria-hidden /> : null}\n        </div>\n        {complete ? (\n          <p role=\"status\" className=\"og-session-capability-copy\">\n            {completeLabel ??\n              (skill ? \"Installed · Workspace\" : \"Connected · Available in this conversation\")}\n          </p>\n        ) : (\n          <>\n            <p className=\"og-session-capability-copy\">{description}</p>\n            {actionUnavailable ? (\n              <div className=\"og-session-capability-actions\" data-unavailable=\"\">\n                <span role=\"note\">\n                  <InfoIcon size={13} aria-hidden />\n                  {actionUnavailable}\n                </span>\n              </div>\n            ) : (\n              <div className=\"og-session-capability-actions\">\n                <span>\n                  <ShieldCheckIcon size={13} aria-hidden />\n                  {skill ? \"Guidance only · no account access\" : \"You choose what to authorize\"}\n                </span>\n                <button\n                  ref={buttonRef}\n                  type=\"button\"\n                  onClick={onOpen}\n                  disabled={busy}\n                  aria-haspopup={opensDialog ? \"dialog\" : undefined}\n                  aria-expanded={opensDialog ? expanded : undefined}\n                >\n                  {actionLabel}\n                </button>\n              </div>\n            )}\n          </>\n        )}\n        {details}\n      </section>\n      {!complete && !dialogOnly && note ? (\n        <p className=\"og-session-capability-note\">{note}</p>\n      ) : null}\n      <Dialog.Root\n        open={expanded && !complete}\n        onOpenChange={(open) => {\n          if (!open && !busy) onClose();\n        }}\n      >\n        <Dialog.Portal>\n          <Dialog.Overlay className=\"og-root og-session-capability-overlay\" style={portalStyle} />\n          <Dialog.Content\n            className=\"og-root og-session-capability-dialog\"\n            style={portalStyle}\n            onEscapeKeyDown={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onInteractOutside={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onCloseAutoFocus={(event) => {\n              event.preventDefault();\n              const target = buttonRef.current?.isConnected\n                ? buttonRef.current\n                : sectionRef.current;\n              if (target?.isConnected) target.focus();\n            }}\n          >\n            <div className=\"og-session-capability-dialog-header\">\n              <Mark src={logo} name={name} />\n              <div>\n                <Dialog.Title>{name}</Dialog.Title>\n                <Dialog.Description>\n                  {typeLabel}\n                  {subtitle ? ` · ${subtitle}` : \"\"}\n                </Dialog.Description>\n              </div>\n              {!busy ? (\n                <Dialog.Close aria-label=\"Close connection setup\">\n                  <XIcon size={18} />\n                </Dialog.Close>\n              ) : null}\n            </div>\n            <div className=\"og-session-capability-dialog-body\">{children}</div>\n          </Dialog.Content>\n        </Dialog.Portal>\n      </Dialog.Root>\n    </div>\n  );\n}\n","import {\n  authorizeConnectAttempt,\n  ConnectPopupClosedError,\n  ConnectController,\n  createBrowserConnectNavigation,\n  reserveBrowserConnectNavigation,\n  type ConnectAttempt,\n  type ConnectNavigation,\n  type ConnectOwnership,\n} from \"@opengeni/connect\";\nimport type { CapabilityCatalogItem } from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useConnect } from \"../hooks/use-connect\";\nimport { attachSessionCapability, sessionCapabilityTools } from \"../session-capability-policy\";\nimport { SessionCapabilityFrame } from \"./session-capability-frame\";\nimport { matchingActiveMcpConnections } from \"../mcp-connection-status\";\n\nexport type SessionMcpCapabilityCardProps = {\n  client: OpenGeniClient;\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  name: string;\n  rationale?: string;\n  /** Exact host route; no console-specific routing is assumed. */\n  returnUrl: string;\n  onConfigured?: (() => void | Promise<void>) | undefined;\n};\n\nexport type McpConnectionCardProps = Omit<SessionMcpCapabilityCardProps, \"sessionId\"> & {\n  /** Omit for connection management: no session tool selection is written. */\n  sessionId?: string;\n  dialogOnly?: boolean;\n  onClose?: (() => void) | undefined;\n  /**\n   * The provider only ever connects someone's own account (official Gmail,\n   * Slack's hosted MCP): no ownership choice, always personal.\n   */\n  personalOnly?: boolean;\n  /** The connect button's words, \"Connect Gmail\". Defaults to \"Continue to <name>\". */\n  connectLabel?: string;\n  /** The line under the dialog title. Defaults to the kind and provider domain. */\n  dialogSubtitle?: string;\n  /** The host's product copy for this connection, instead of the catalog description. */\n  description?: string;\n  /** The host's logo for this connection, when the catalog has no asset. */\n  logoSrc?: string | null;\n  /** The host's words for the ownership choice. */\n  ownershipCopy?: { legend: string; workspace: string; personal: string };\n};\n\n/** Native OAuth recommendation flow. Identity and endpoint come from the live\n * catalog, never from model-authored recommendation text. */\nexport function SessionMcpCapabilityCard(props: SessionMcpCapabilityCardProps) {\n  return <McpConnectionCard {...props} />;\n}\n\nexport function McpConnectionCard(props: McpConnectionCardProps) {\n  const [client, setClient] = useState(props.client);\n  const [generation, setGeneration] = useState(0);\n  if (client !== props.client) {\n    setClient(props.client);\n    setGeneration(generation + 1);\n  }\n  return (\n    <ScopedCard\n      key={`${generation}:${props.workspaceId}:${props.sessionId}:${props.capabilityId}`}\n      {...props}\n    />\n  );\n}\n\nfunction ScopedCard({\n  client,\n  workspaceId,\n  sessionId,\n  capabilityId,\n  name,\n  rationale = \"\",\n  returnUrl,\n  onConfigured,\n  dialogOnly = false,\n  onClose,\n  personalOnly = false,\n  connectLabel,\n  dialogSubtitle,\n  description: hostDescription,\n  logoSrc,\n  ownershipCopy,\n}: McpConnectionCardProps) {\n  const [controller] = useState(\n    () => new ConnectController(client.connectTransport(), workspaceId),\n  );\n  const view = useConnect(controller);\n  const [item, setItem] = useState<CapabilityCatalogItem | null>(null);\n  const [logo, setLogo] = useState<string | null>(null);\n  const [expanded, setExpanded] = useState(dialogOnly);\n  const [complete, setComplete] = useState(false);\n  const [connected, setConnected] = useState(false);\n  const [waiting, setWaiting] = useState(false);\n  const [reconciling, setReconciling] = useState(false);\n  const [busy, setBusy] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [notice, setNotice] = useState<string | null>(null);\n  const [retryFresh, setRetryFresh] = useState(false);\n  const [ownership, setOwnership] = useState<ConnectOwnership>(\n    personalOnly ? \"personal\" : \"workspace\",\n  );\n  const lifetime = useRef<AbortController | null>(null);\n  const authorization = useRef<AbortController | null>(null);\n  const operation = useRef<AbortController | null>(null);\n  const reservedPopup = useRef<(() => void) | null>(null);\n  const startKey = useRef(crypto.randomUUID());\n  const advanceKey = useRef(crypto.randomUUID());\n  const startInput = useRef<string | null>(null);\n  const storageKey = sessionId\n    ? `opengeni:session-connect:${workspaceId}:${sessionId}:${capabilityId}`\n    : `opengeni:workspace-connect:${workspaceId}:${capabilityId}`;\n  const current = () => !!lifetime.current && !lifetime.current.signal.aborted;\n\n  async function load(active: () => boolean = current) {\n    const invocation = lifetime.current;\n    const [catalog, session] = await Promise.all([\n      client.listCapabilities(workspaceId),\n      sessionId ? client.getSession(workspaceId, sessionId) : Promise.resolve(null),\n    ]);\n    if (!invocation || invocation.signal.aborted || lifetime.current !== invocation || !active())\n      return null;\n    let resolved = catalog.items.find((entry) => entry.id === capabilityId);\n    // Custom catalog entries may not declare authentication. Discover it from\n    // the live catalog's endpoint, never from recommendation/host copy.\n    if (resolved?.kind === \"mcp\" && !resolved.enabled && !resolved.authKind) {\n      const endpoint = resolved.mcpUrl ?? resolved.endpointUrl;\n      if (endpoint) {\n        const inspected = await client.inspectMcpAuthentication(workspaceId, endpoint);\n        if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n        if (inspected.kind === \"oauth2\") resolved = { ...resolved, authKind: \"oauth2\" };\n        else if (inspected.kind === \"unknown\")\n          throw new Error(inspected.message ?? \"Could not determine how to sign in. Try again.\");\n      }\n    }\n    if (!resolved || resolved.kind !== \"mcp\" || resolved.authKind !== \"oauth2\")\n      throw new Error(\n        \"This recommendation is not an available OAuth MCP integration. Review the current connection catalog.\",\n      );\n    setItem(resolved);\n    if (resolved.connectionRef)\n      setOwnership(resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\");\n    else if (\n      !item &&\n      (personalOnly || resolved.metadata?.defaultConnectionOwnership === \"personal\")\n    )\n      setOwnership(\"personal\");\n    let accountReady = false;\n    if (resolved.enabled && resolved.connectionRef) {\n      const connections =\n        resolved.connectionRef.subjectScope === \"subject\"\n          ? await client.listOwnConnectionAccounts(workspaceId)\n          : await client.listConnections(workspaceId);\n      if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n      const matches = matchingActiveMcpConnections(resolved, connections);\n      accountReady = matches.length === 1;\n    }\n    if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n    const selected =\n      session?.toolPolicy.mode === \"workspace_default\"\n        ? session.effectiveToolPolicy?.selectedIds\n        : session?.tools.filter((tool) => tool.kind === \"mcp\").map((tool) => tool.id);\n    setConnected(accountReady);\n    setComplete(\n      accountReady &&\n        !!selected &&\n        sessionCapabilityTools(resolved).every((tool) => selected.includes(tool.id)),\n    );\n    return resolved;\n  }\n\n  useEffect(() => {\n    const abort = new AbortController();\n    lifetime.current = abort;\n    // Mount reads are scoped to this effect, not to the user-action lock.\n    // Strict Mode may cancel the first mount while its promise is still in\n    // flight; that must not suppress the replacement mount's initialization.\n    if (dialogOnly) setBusy(true);\n    void (async () => {\n      await load();\n      if (abort.signal.aborted || !dialogOnly) return;\n      await recoverSavedAttempt();\n    })()\n      .catch((failure) => {\n        if (!abort.signal.aborted)\n          setError(\n            failure instanceof Error ? failure.message : \"Couldn't load connection details.\",\n          );\n      })\n      .finally(() => {\n        if (!abort.signal.aborted && dialogOnly) setBusy(false);\n      });\n    return () => {\n      abort.abort();\n    };\n    // ScopedCard remounts for client/workspace/session/capability changes.\n    // These reads initialize that scope; rerunning on action closures would\n    // cancel initialization whenever its own state updates render the card.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client, workspaceId, sessionId, capabilityId, dialogOnly]);\n\n  useEffect(() => {\n    const path = item?.logoAssetPath;\n    setLogo(null);\n    if (!path?.startsWith(\"catalog-assets/\")) return;\n    const abort = new AbortController();\n    let objectUrl: string | null = null;\n    // Embeds can require authentication even for the API's public catalog\n    // asset route. Use the client's transport instead of an unauthenticated img.\n    void client\n      .downloadCatalogAsset(path, { signal: abort.signal })\n      .then((blob) => {\n        if (abort.signal.aborted || !blob.type.startsWith(\"image/\") || blob.size > 2_000_000)\n          return;\n        objectUrl = URL.createObjectURL(blob);\n        setLogo(objectUrl);\n      })\n      .catch(() => {\n        /* Keep the provider's initials if its passive mark is unavailable. */\n      });\n    return () => {\n      abort.abort();\n      if (objectUrl) URL.revokeObjectURL(objectUrl);\n    };\n  }, [client, item?.logoAssetPath]);\n\n  async function run(action: (active: () => boolean) => Promise<void>) {\n    if (operation.current || !current()) return;\n    const pending = new AbortController();\n    operation.current = pending;\n    const active = () => current() && operation.current === pending && !pending.signal.aborted;\n    setBusy(true);\n    setError(null);\n    setNotice(null);\n    setRetryFresh(false);\n    try {\n      await action(active);\n    } catch (failure) {\n      if (active()) {\n        if (failure instanceof ConnectPopupClosedError) setNotice(failure.message);\n        else\n          setError(\n            failure instanceof Error\n              ? failure.message\n              : \"Connection setup could not finish. Try again.\",\n          );\n      }\n    } finally {\n      if (operation.current === pending) {\n        operation.current = null;\n        if (current()) setBusy(false);\n      }\n    }\n  }\n\n  function remember(attemptId: string) {\n    // An opaque recovery hint only. The backend rechecks the authenticated\n    // owner on recover; this value never grants access or proves completion.\n    try {\n      sessionStorage.setItem(storageKey, attemptId);\n    } catch {\n      /* Storage may be disabled. */\n    }\n  }\n\n  async function reconcile(attempt: ConnectAttempt, active: () => boolean = current) {\n    if (!active()) return;\n    if (attempt.state !== \"complete\" || !attempt.account || !attempt.credentialsCommitted) return;\n    const resolved = await load(active);\n    if (!resolved || !active()) return;\n    const connection = (await client.listConnections(workspaceId)).find(\n      (entry) => entry.id === attempt.account!.id,\n    );\n    if (!active()) return;\n    if (\n      !connection ||\n      connection.status !== \"active\" ||\n      connection.kind !== \"oauth2\" ||\n      connection.metadata.mcpUrl !== (resolved.mcpUrl ?? resolved.endpointUrl) ||\n      (connection.subjectId !== null) !== (attempt.ownership === \"personal\")\n    )\n      throw new Error(\n        \"The authorized account does not match this integration. Review its connection settings.\",\n      );\n    const previous = resolved.connectionRef;\n    if (\n      resolved.enabled &&\n      previous?.subjectScope !== \"subject\" &&\n      previous?.connectionId &&\n      previous.connectionId !== connection.id\n    )\n      throw new Error(\n        \"This integration's selected account changed during setup. Review it before continuing.\",\n      );\n    await client.enableCapability(workspaceId, capabilityId, {\n      connectionRef:\n        attempt.ownership === \"personal\"\n          ? { providerDomain: connection.providerDomain, kind: \"oauth2\", subjectScope: \"subject\" }\n          : {\n              providerDomain: connection.providerDomain,\n              kind: \"oauth2\",\n              subjectScope: \"workspace\",\n              connectionId: connection.id,\n            },\n    });\n    if (!active()) return;\n    const enabled = await load(active);\n    if (enabled && active()) {\n      await finishConnection(enabled, active);\n    }\n    if (!active()) return;\n    try {\n      sessionStorage.removeItem(storageKey);\n    } catch {\n      /* Recovery hint only. */\n    }\n  }\n\n  async function open() {\n    setExpanded(true);\n    await run(async (active) => {\n      await load(active);\n      if (!active()) return;\n      await recoverSavedAttempt(active);\n    });\n  }\n\n  async function recoverSavedAttempt(active: () => boolean = current) {\n    let saved: string | null = null;\n    try {\n      saved = sessionStorage.getItem(storageKey);\n    } catch {\n      /* No persisted attempt. */\n    }\n    if (saved) {\n      const attempt = await controller.recover(saved);\n      if (!active()) return;\n      if ([\"failed\", \"expired\", \"cancelled\"].includes(attempt.state)) setRetryFresh(true);\n      if (attempt.state === \"complete\") setReconciling(true);\n      try {\n        await reconcile(attempt, active);\n      } finally {\n        if (active()) setReconciling(false);\n      }\n    }\n  }\n\n  async function begin(fresh = false) {\n    await run(async (active) => {\n      if (\n        fresh ||\n        (view.attempt && [\"failed\", \"expired\", \"cancelled\"].includes(view.attempt.state))\n      ) {\n        startKey.current = crypto.randomUUID();\n        advanceKey.current = crypto.randomUUID();\n      }\n      const reserved = reserveBrowserConnectNavigation(window);\n      reservedPopup.current = reserved.close;\n      try {\n        const resolved = await load(active);\n        if (!resolved || !active()) return;\n        if (\n          resolved.connectionRef &&\n          ownership !==\n            (resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\")\n        )\n          throw new Error(\n            \"The connection ownership changed. Review the current account before continuing.\",\n          );\n        const mcpUrl = resolved.mcpUrl ?? resolved.endpointUrl;\n        if (!mcpUrl)\n          throw new Error(\n            \"The current catalog has no authorization endpoint for this integration.\",\n          );\n        // Never silently replace an already selected account. Reauthorization\n        // stays on its exact native connection ID.\n        let reconnectAccountId = resolved.connectionRef?.connectionId ?? undefined;\n        if (resolved.connectionRef?.subjectScope === \"subject\") {\n          const connections = (await client.listConnections(workspaceId)).filter(\n            (entry) =>\n              entry.subjectId !== null &&\n              entry.kind === \"oauth2\" &&\n              entry.metadata.mcpUrl === mcpUrl,\n          );\n          if (!active()) return;\n          if (connections.length > 1)\n            throw new Error(\n              \"More than one personal account matches. Choose the account in connection settings before reconnecting.\",\n            );\n          reconnectAccountId = connections[0]?.id;\n        }\n        // A closed request can still have reached the server. Keep its key for\n        // an exact replay, but never reuse it when ownership or another input\n        // changes while the user reopens setup.\n        const input = JSON.stringify({ ownership, returnUrl, reconnectAccountId, mcpUrl });\n        if (startInput.current !== null && startInput.current !== input) {\n          startKey.current = crypto.randomUUID();\n          advanceKey.current = crypto.randomUUID();\n        }\n        startInput.current = input;\n        let attempt = await controller.begin({\n          providerId: \"mcp-oauth\",\n          ownership,\n          returnUrl,\n          idempotencyKey: startKey.current,\n          ...(reconnectAccountId ? { reconnectAccountId } : {}),\n        });\n        if (!active()) return;\n        remember(attempt.id);\n        if (attempt.state === \"credential_input\")\n          attempt = await controller.advance(\n            { type: \"credentials\", values: { mcpUrl } },\n            advanceKey.current,\n          );\n        if (!active()) return;\n        if (attempt.nextAction.type === \"authorize\")\n          await performAuthorization(attempt, reserved.navigation, active);\n        else await reconcile(attempt, active);\n      } finally {\n        if (reservedPopup.current === reserved.close) reservedPopup.current = null;\n        reserved.close();\n      }\n    });\n  }\n\n  async function performAuthorization(\n    attempt: ConnectAttempt,\n    navigation: ConnectNavigation,\n    active: () => boolean,\n  ) {\n    if (!active()) return;\n    const pending = new AbortController();\n    authorization.current = pending;\n    const abortOnUnmount = () => pending.abort(lifetime.current?.signal.reason);\n    lifetime.current!.signal.addEventListener(\"abort\", abortOnUnmount, { once: true });\n    setWaiting(true);\n    try {\n      const result = await authorizeConnectAttempt(controller.transport, attempt, navigation, {\n        mode: \"popup\",\n        signal: pending.signal,\n      });\n      if (!active() || !result) return;\n      setWaiting(false);\n      setReconciling(true);\n      await reconcile(result, active);\n      if (!active()) return;\n      if (result.state === \"cancelled\") {\n        setNotice(\"Sign-in was cancelled. You can try connecting again.\");\n        setRetryFresh(true);\n        return;\n      }\n      if (result.state !== \"complete\") {\n        if ([\"failed\", \"expired\"].includes(result.state)) setRetryFresh(true);\n        throw new Error(\"Sign-in did not finish. You can try connecting again.\");\n      }\n    } finally {\n      lifetime.current?.signal.removeEventListener(\"abort\", abortOnUnmount);\n      if (authorization.current === pending) authorization.current = null;\n      if (active()) {\n        setReconciling(false);\n        setWaiting(false);\n      }\n    }\n  }\n\n  function authorize(attempt: ConnectAttempt) {\n    // run invokes action synchronously, retaining the browser click gesture.\n    return run((active) =>\n      performAuthorization(attempt, createBrowserConnectNavigation(window), active),\n    );\n  }\n\n  async function finishConnection(\n    capability: CapabilityCatalogItem,\n    active: () => boolean = current,\n  ) {\n    if (!sessionId) {\n      // Connection management does not select session tools.\n      await onConfigured?.();\n      if (!active()) return;\n      setComplete(true);\n      setExpanded(false);\n      onClose?.();\n      return;\n    }\n    if (capability.connectionRef && capability.connectionRef.subjectScope !== \"subject\") {\n      const selected = (await client.listConnections(workspaceId)).find(\n        (entry) => entry.id === capability.connectionRef?.connectionId,\n      );\n      if (!active()) return;\n      if (!selected || selected.status !== \"active\")\n        throw new Error(\"This account needs reconnection before it can be used here.\");\n    }\n    if (capability.connectionRef?.subjectScope === \"subject\") {\n      const accounts = await client.listOwnConnectionAccounts(workspaceId);\n      if (!active()) return;\n      if (matchingActiveMcpConnections(capability, accounts).length === 0)\n        throw new Error(\"Your account needs reconnection before it can be used here.\");\n    }\n    if (!active()) return;\n    await attachSessionCapability(client, workspaceId, sessionId, capability, active);\n    if (!active()) return;\n    await onConfigured?.();\n    if (!active()) return;\n    setComplete(true);\n    setExpanded(false);\n  }\n\n  async function useHere() {\n    await run(async (active) => {\n      if (item) await finishConnection(item, active);\n    });\n  }\n\n  function close() {\n    const pending = operation.current;\n    if (pending) {\n      operation.current = null;\n      pending.abort(new ConnectPopupClosedError());\n      authorization.current?.abort(new ConnectPopupClosedError());\n      authorization.current = null;\n      reservedPopup.current?.();\n      setBusy(false);\n      setWaiting(false);\n      setReconciling(false);\n    }\n    setExpanded(false);\n    onClose?.();\n  }\n\n  return (\n    <SessionCapabilityFrame\n      name={item?.name ?? name}\n      subtitle={dialogSubtitle !== undefined ? \"\" : (item?.providerDomain ?? \"\")}\n      logo={logo ?? logoSrc ?? null}\n      typeLabel={dialogSubtitle ?? \"MCP server\"}\n      description={hostDescription || item?.description || rationale}\n      skill={false}\n      expanded={expanded}\n      complete={complete}\n      actionLabel={\n        connected\n          ? sessionId\n            ? \"Use in this conversation\"\n            : \"Connected\"\n          : `Connect ${item?.name ?? name}`\n      }\n      note={\n        sessionId\n          ? \"Review access before signing in. You'll return to this conversation after authorization.\"\n          : \"Review access before signing in. You'll return here after authorization.\"\n      }\n      onOpen={() => void open()}\n      onClose={close}\n      dialogOnly={dialogOnly}\n    >\n      <div className=\"og-session-capability-setup\">\n        {error ? <p role=\"alert\">{error}</p> : null}\n        {notice ? (\n          <p role=\"status\" className=\"og-session-capability-notice\">\n            {notice}\n          </p>\n        ) : null}\n        {!item ? (\n          <>\n            <p role=\"status\">\n              {busy ? \"Loading connection details…\" : \"Connection details are unavailable.\"}\n            </p>\n            <button disabled={busy} onClick={() => void open()}>\n              Retry\n            </button>\n          </>\n        ) : (\n          <>\n            <p>{hostDescription || item.description || rationale}</p>\n            {busy ? (\n              <>\n                <p role=\"status\" className=\"og-session-capability-progress\">\n                  {waiting\n                    ? `Finish signing in with ${item.name} in the opened window. This will close automatically when you’re connected.`\n                    : reconciling\n                      ? \"Finishing your connection…\"\n                      : \"Preparing your connection…\"}\n                </p>\n                {waiting ? (\n                  <button\n                    type=\"button\"\n                    className=\"og-session-capability-stop\"\n                    onClick={() => authorization.current?.abort(new ConnectPopupClosedError())}\n                  >\n                    Stop waiting\n                  </button>\n                ) : null}\n              </>\n            ) : !connected ? (\n              <>\n                {!item.connectionRef && !personalOnly ? (\n                  <fieldset disabled={busy}>\n                    <legend>{ownershipCopy?.legend ?? \"Who can use this connection?\"}</legend>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"workspace\"}\n                        onChange={() => setOwnership(\"workspace\")}\n                      />\n                      Everyone in this workspace\n                    </label>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"personal\"}\n                        onChange={() => setOwnership(\"personal\")}\n                      />\n                      Only me\n                    </label>\n                  </fieldset>\n                ) : null}\n                <p className=\"og-session-capability-scope\">\n                  {personalOnly && ownership === \"personal\"\n                    ? \"Connects your own account. Only work you start can use it.\"\n                    : ownershipCopy\n                      ? ownership === \"workspace\"\n                        ? ownershipCopy.workspace\n                        : ownershipCopy.personal\n                      : ownership === \"workspace\"\n                        ? sessionId\n                          ? \"This connection will be available to your workspace and used in this conversation.\"\n                          : \"This connection will be available to your workspace.\"\n                        : \"This connection belongs to you. Your messages can use it; other participants use their own accounts.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  onClick={() => {\n                    if (notice || retryFresh) void begin(true);\n                    else if (\n                      view.attempt?.nextAction.type === \"authorize\" &&\n                      view.attempt.ownership === ownership\n                    )\n                      void authorize(view.attempt);\n                    else void begin();\n                  }}\n                >\n                  {retryFresh ||\n                  ((error || notice) && view.attempt?.nextAction.type === \"authorize\")\n                    ? \"Try signing in again\"\n                    : (connectLabel ?? `Continue to ${item.name}`)}\n                </button>\n              </>\n            ) : null}\n            {connected && !busy ? (\n              <>\n                <p className=\"og-session-capability-scope\">\n                  {sessionId\n                    ? \"Your account is connected. Enable it for this conversation to finish.\"\n                    : \"Your account is connected.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  disabled={busy || view.busy}\n                  onClick={() => void useHere()}\n                >\n                  {sessionId ? \"Use in this conversation\" : \"Done\"}\n                </button>\n              </>\n            ) : null}\n          </>\n        )}\n      </div>\n    </SessionCapabilityFrame>\n  );\n}\n","import type { CapabilityCatalogItem, ConnectionMetadata } from \"@opengeni/sdk\";\n\n/** Status only; runtime use is authorized for the authenticated initiating user. */\nexport function matchingActiveMcpConnections(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  return matchingMcpConnections(item, connections).filter((entry) => entry.status === \"active\");\n}\n\nfunction matchingMcpConnections(item: CapabilityCatalogItem, connections: ConnectionMetadata[]) {\n  const ref = item.connectionRef;\n  if (!item.enabled || !ref) return [];\n  return connections.filter(\n    (entry) =>\n      entry.status !== \"revoked\" &&\n      entry.kind === \"oauth2\" &&\n      entry.metadata.mcpUrl === (item.mcpUrl ?? item.endpointUrl) &&\n      (ref.subjectScope !== \"subject\"\n        ? entry.id === ref.connectionId && entry.subjectId === null\n        : entry.subjectId !== null),\n  );\n}\n\n/** Installation availability is not account readiness. Revoked history is not actionable. */\nexport function mcpConnectionDiscoveryState(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  const matching = matchingMcpConnections(item, connections);\n  const active = matching.filter((entry) => entry.status === \"active\");\n  if (active.length === 1) return { status: \"added\", label: \"Connected\" } as const;\n  if (matching.length > 0) return { status: \"attention\", label: \"Review connection\" } as const;\n  return { status: \"available\", label: \"Connect\" } as const;\n}\n"],"mappings":";;;;;;AACA,SAAS,SAAS,4BAA4B;AAGvC,SAAS,WAAW,YAA+B;AACxD,QAAM,WAAW;AAAA,IACf,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACA,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,MACL,OAAO,WAAW,MAAM,KAAK,UAAU;AAAA,MACvC,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,eAAe,WAAW,cAAc,KAAK,UAAU;AAAA,MACvD,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,QAAQ,WAAW,OAAO,KAAK,UAAU;AAAA,IAC3C;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AACA,SAAO,QAAQ,OAAO,EAAE,GAAG,UAAU,GAAG,QAAQ,IAAI,CAAC,UAAU,OAAO,CAAC;AACzE;;;ACZO,SAAS,uBAAuB,MAA6B;AAClE,QAAM,WAAW,KAAK,SAAS,QAAQ,KAAK,SAAS,cAAc;AACnE,SAAO,YAAY,CAAC,KAAK,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,QAAQ,IACrF,CAAC,GAAG,KAAK,OAAO,EAAE,MAAM,OAAgB,IAAI,SAAS,CAAC,IACtD,KAAK;AACX;AAKA,eAAsB,wBACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACrB;AACf,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG;AACjD,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,MAAM,OAAO,WAAW,aAAa,SAAS;AAC9D,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,MAAI,QAAS,OAAM,OAAO,wBAAwB,aAAa,WAAW,OAAO;AACnF;AAEA,SAAS,2BACP,SACA,MACuC;AACvC,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG,QAAO;AAGxD,MAAI,WAAW,QAAQ,MAAM;AAAA,IAC3B,CAAC,SAAS,CAAC,QAAQ,qBAAqB,cAAc,SAAS,KAAK,EAAE;AAAA,EACxE;AACA,MAAI,QAAQ,WAAW,SAAS,qBAAqB;AACnD,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,UAAU,OAAO;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAKF,eAAW,OAAO,aACf,OAAO,CAAC,OAAO,CAAC,OAAO,aAAa,SAAS,EAAE,CAAC,EAChD;AAAA,MACC,CAAC,OACC,QAAQ,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,EAAE,KAAK;AAAA,QACrE,MAAM;AAAA,QACN;AAAA,QACA,UAAU;AAAA,MACZ;AAAA,IACJ;AAAA,EACJ;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,CAAC,SACC,CAAC,QAAQ,qBAAqB,aAAa,SAAS,KAAK,EAAE,KAC3D,CAAC,SAAS,KAAK,CAAC,YAAY,QAAQ,SAAS,KAAK,QAAQ,QAAQ,OAAO,KAAK,EAAE;AAAA,EACpF;AACA,QAAM,cAAc,MAAM,QAAQ,KAAK,UAAU,kBAAkB,IAC9D,KAAK,SAAS,mBAAmB;AAAA,IAChC,CAAC,SAAyB,OAAO,SAAS;AAAA,EAC5C,IACA,CAAC;AACL,QAAM,aAAa,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,oBAAoB,GAAG,WAAW,CAAC,CAAC;AAC/E,MAAI,UAAU,WAAW,KAAK,WAAW,WAAW,QAAQ,mBAAmB;AAC7E,WAAO;AACT,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,CAAC,GAAG,UAAU,GAAG,SAAS;AAAA,IACjC,oBAAoB;AAAA,IACpB,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAiBA,eAAsB,+BACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACE;AACtC,QAAM,WAAoD,CAAC;AAC3D,MAAI,KAAK,SAAS,WAAW,uBAAuB,IAAI,EAAE,WAAW;AACnE,WAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,SAAS;AACnE,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI,KAAoB;AACxB,SAAO,IAAI;AACT,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,QAAQ,IAAI,EAAE,EAAG,OAAM,IAAI,MAAM,8CAA8C;AACnF,YAAQ,IAAI,EAAE;AACd,UAAM,UAAU,MAAM,OAAO,WAAW,aAAa,EAAE;AACvD,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,aAAS,KAAK;AAAA,MACZ;AAAA,MACA,OAAO,QAAQ,SAAS;AAAA,MACxB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,mBAAmB,QAAQ;AAAA,MAC3B;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,QAAS;AACd,SAAK,QAAQ,mBAAmB;AAAA,EAClC;AACA,SAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,UAAU,SAAS,QAAQ,EAAE;AACvF;AAKA,eAAsB,6BACpB,QACA,MACA,eAA8B,MAAM,MACrB;AACf,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,MAAM,OAAO,WAAW,KAAK,aAAa,SAAS,EAAE;AACrE,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QACE,QAAQ,sBAAsB,SAAS,sBACtC,QAAQ,mBAAmB,UAAU,SAAS;AAE/C,YAAM,IAAI,MAAM,2EAA2E;AAAA,EAC/F;AACA,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,SAAS,SAAS;AACpB,YAAM,UAAU,MAAM,OAAO;AAAA,QAC3B,KAAK;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AACA,UACE,SAAS,QAAQ,SAAS,cAC1B,SAAS,QAAQ,mBAAmB;AAAA,QAClC,CAAC,SAAS,CAAC,QAAQ,mBAAmB,SAAS,IAAI;AAAA,MACrD;AAEA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAIA,eAAsB,+BACpB,QACA,aACA,WACA,cACe;AACf,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AACF,QAAM,aAAa,MAAM,OAAO,iBAAiB,WAAW,GAAG,MAAM;AAAA,IACnE,CAAC,SAAS,KAAK,OAAO;AAAA,EACxB;AACA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,8EAA8E;AAChG,QAAM,wBAAwB,QAAQ,aAAa,WAAW,SAAS;AACzE;;;ACnMA,SAAS,WAAW,UAAU,iBAAiB,aAAa;AAC5D,SAAS,cAAc;AACvB,SAAS,QAAQ,gBAAgD;AAwCzD,SAuCJ,UAvCI,KAyCF,YAzCE;AALR,SAAS,KAAK,EAAE,KAAK,KAAK,GAAyC;AACjE,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,SACE,oBAAC,UAAK,WAAU,8BAA6B,eAAW,MACrD,iBAAO,WAAW,MACjB,oBAAC,SAAI,KAAU,KAAI,IAAG,SAAQ,QAAO,UAAS,SAAQ,SAAS,MAAM,UAAU,GAAG,GAAG,IAErF,KAAK,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,YAAY,GAExC;AAEJ;AAIO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AACF,GAAgC;AAC9B,QAAM,cAAc,OAA0B,IAAI;AAClD,QAAM,YAAY,OAAoB,IAAI;AAC1C,QAAM,YAAY,UAAU;AAC5B,QAAM,aAAa,WAAW;AAC9B,QAAM,cAAc,oBAAoB,WAAW,OAAO;AAC1D,QAAM,WACJ,iCACE;AAAA,wBAAC,QAAK,KAAK,MAAM,MAAY;AAAA,IAC7B,qBAAC,SAAI,WAAU,kCACb;AAAA,0BAAC,QAAI,gBAAK;AAAA,MACV,oBAAC,UAAM,oBAAS;AAAA,OAClB;AAAA,IACA,oBAAC,UAAK,WAAU,8BAA8B,qBAAU;AAAA,KAC1D;AAEF,SACE,qBAAC,SAAI,WAAU,yBACb;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ;AAAA,QACR,OAAO,aAAa,EAAE,SAAS,OAAO,IAAI;AAAA,QAC1C,KAAK;AAAA,QACL,UAAU;AAAA,QACV,cAAY,GAAG,IAAI;AAAA,QACnB,cAAY,WAAW,aAAa,WAAW,UAAU;AAAA,QACzD,WAAU;AAAA,QAEV;AAAA,+BAAC,SAAI,WAAU,gCACZ;AAAA;AAAA,YACA,WAAW,oBAAC,aAAU,MAAM,IAAI,eAAW,MAAC,IAAK;AAAA,aACpD;AAAA,UACC,WACC,oBAAC,OAAE,MAAK,UAAS,WAAU,8BACxB,4BACE,QAAQ,6BAA0B,kDACvC,IAEA,iCACE;AAAA,gCAAC,OAAE,WAAU,8BAA8B,uBAAY;AAAA,YACtD,oBACC,oBAAC,SAAI,WAAU,iCAAgC,oBAAiB,IAC9D,+BAAC,UAAK,MAAK,QACT;AAAA,kCAAC,YAAS,MAAM,IAAI,eAAW,MAAC;AAAA,cAC/B;AAAA,eACH,GACF,IAEA,qBAAC,SAAI,WAAU,iCACb;AAAA,mCAAC,UACC;AAAA,oCAAC,mBAAgB,MAAM,IAAI,eAAW,MAAC;AAAA,gBACtC,QAAQ,yCAAsC;AAAA,iBACjD;AAAA,cACA;AAAA,gBAAC;AAAA;AAAA,kBACC,KAAK;AAAA,kBACL,MAAK;AAAA,kBACL,SAAS;AAAA,kBACT,UAAU;AAAA,kBACV,iBAAe,cAAc,WAAW;AAAA,kBACxC,iBAAe,cAAc,WAAW;AAAA,kBAEvC;AAAA;AAAA,cACH;AAAA,eACF;AAAA,aAEJ;AAAA,UAED;AAAA;AAAA;AAAA,IACH;AAAA,IACC,CAAC,YAAY,CAAC,cAAc,OAC3B,oBAAC,OAAE,WAAU,8BAA8B,gBAAK,IAC9C;AAAA,IACJ;AAAA,MAAC,OAAO;AAAA,MAAP;AAAA,QACC,MAAM,YAAY,CAAC;AAAA,QACnB,cAAc,CAAC,SAAS;AACtB,cAAI,CAAC,QAAQ,CAAC,KAAM,SAAQ;AAAA,QAC9B;AAAA,QAEA,+BAAC,OAAO,QAAP,EACC;AAAA,8BAAC,OAAO,SAAP,EAAe,WAAU,yCAAwC,OAAO,aAAa;AAAA,UACtF;AAAA,YAAC,OAAO;AAAA,YAAP;AAAA,cACC,WAAU;AAAA,cACV,OAAO;AAAA,cACP,iBAAiB,CAAC,UAAU;AAC1B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,mBAAmB,CAAC,UAAU;AAC5B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,kBAAkB,CAAC,UAAU;AAC3B,sBAAM,eAAe;AACrB,sBAAM,SAAS,UAAU,SAAS,cAC9B,UAAU,UACV,WAAW;AACf,oBAAI,QAAQ,YAAa,QAAO,MAAM;AAAA,cACxC;AAAA,cAEA;AAAA,qCAAC,SAAI,WAAU,uCACb;AAAA,sCAAC,QAAK,KAAK,MAAM,MAAY;AAAA,kBAC7B,qBAAC,SACC;AAAA,wCAAC,OAAO,OAAP,EAAc,gBAAK;AAAA,oBACpB,qBAAC,OAAO,aAAP,EACE;AAAA;AAAA,sBACA,WAAW,SAAM,QAAQ,KAAK;AAAA,uBACjC;AAAA,qBACF;AAAA,kBACC,CAAC,OACA,oBAAC,OAAO,OAAP,EAAa,cAAW,0BACvB,8BAAC,SAAM,MAAM,IAAI,GACnB,IACE;AAAA,mBACN;AAAA,gBACA,oBAAC,SAAI,WAAU,qCAAqC,UAAS;AAAA;AAAA;AAAA,UAC/D;AAAA,WACF;AAAA;AAAA,IACF;AAAA,KACF;AAEJ;;;AC/LA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,WAAW,UAAAA,SAAQ,YAAAC,iBAAgB;;;ACTrC,SAAS,6BACd,MACA,aACA;AACA,SAAO,uBAAuB,MAAM,WAAW,EAAE,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AAC9F;AAEA,SAAS,uBAAuB,MAA6B,aAAmC;AAC9F,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,WAAW,CAAC,IAAK,QAAO,CAAC;AACnC,SAAO,YAAY;AAAA,IACjB,CAAC,UACC,MAAM,WAAW,aACjB,MAAM,SAAS,YACf,MAAM,SAAS,YAAY,KAAK,UAAU,KAAK,iBAC9C,IAAI,iBAAiB,YAClB,MAAM,OAAO,IAAI,gBAAgB,MAAM,cAAc,OACrD,MAAM,cAAc;AAAA,EAC5B;AACF;AAGO,SAAS,4BACd,MACA,aACA;AACA,QAAM,WAAW,uBAAuB,MAAM,WAAW;AACzD,QAAM,SAAS,SAAS,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AACnE,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,QAAQ,SAAS,OAAO,YAAY;AACtE,MAAI,SAAS,SAAS,EAAG,QAAO,EAAE,QAAQ,aAAa,OAAO,oBAAoB;AAClF,SAAO,EAAE,QAAQ,aAAa,OAAO,UAAU;AACjD;;;ADqBS,SAogBC,YAAAC,WApgBD,OAAAC,MAogBC,QAAAC,aApgBD;AADF,SAAS,yBAAyB,OAAsC;AAC7E,SAAO,gBAAAD,KAAC,qBAAmB,GAAG,OAAO;AACvC;AAEO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,CAAC,QAAQ,SAAS,IAAIE,UAAS,MAAM,MAAM;AACjD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,CAAC;AAC9C,MAAI,WAAW,MAAM,QAAQ;AAC3B,cAAU,MAAM,MAAM;AACtB,kBAAc,aAAa,CAAC;AAAA,EAC9B;AACA,SACE,gBAAAF;AAAA,IAAC;AAAA;AAAA,MAEE,GAAG;AAAA;AAAA,IADC,GAAG,UAAU,IAAI,MAAM,WAAW,IAAI,MAAM,SAAS,IAAI,MAAM,YAAY;AAAA,EAElF;AAEJ;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,UAAU,IAAIE;AAAA,IACnB,MAAM,IAAI,kBAAkB,OAAO,iBAAiB,GAAG,WAAW;AAAA,EACpE;AACA,QAAM,OAAO,WAAW,UAAU;AAClC,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAuC,IAAI;AACnE,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAwB,IAAI;AACpD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,UAAU;AACnD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,KAAK;AAC9C,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,KAAK;AAChD,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,KAAK;AAC5C,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AACpD,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAwB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAIA,UAAwB,IAAI;AACxD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,KAAK;AAClD,QAAM,CAAC,WAAW,YAAY,IAAIA;AAAA,IAChC,eAAe,aAAa;AAAA,EAC9B;AACA,QAAM,WAAWC,QAA+B,IAAI;AACpD,QAAM,gBAAgBA,QAA+B,IAAI;AACzD,QAAM,YAAYA,QAA+B,IAAI;AACrD,QAAM,gBAAgBA,QAA4B,IAAI;AACtD,QAAM,WAAWA,QAAO,OAAO,WAAW,CAAC;AAC3C,QAAM,aAAaA,QAAO,OAAO,WAAW,CAAC;AAC7C,QAAM,aAAaA,QAAsB,IAAI;AAC7C,QAAM,aAAa,YACf,4BAA4B,WAAW,IAAI,SAAS,IAAI,YAAY,KACpE,8BAA8B,WAAW,IAAI,YAAY;AAC7D,QAAM,UAAU,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,SAAS,QAAQ,OAAO;AAErE,iBAAe,KAAK,SAAwB,SAAS;AACnD,UAAM,aAAa,SAAS;AAC5B,UAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3C,OAAO,iBAAiB,WAAW;AAAA,MACnC,YAAY,OAAO,WAAW,aAAa,SAAS,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC9E,CAAC;AACD,QAAI,CAAC,cAAc,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO;AACzF,aAAO;AACT,QAAI,WAAW,QAAQ,MAAM,KAAK,CAAC,UAAU,MAAM,OAAO,YAAY;AAGtE,QAAI,UAAU,SAAS,SAAS,CAAC,SAAS,WAAW,CAAC,SAAS,UAAU;AACvE,YAAM,WAAW,SAAS,UAAU,SAAS;AAC7C,UAAI,UAAU;AACZ,cAAM,YAAY,MAAM,OAAO,yBAAyB,aAAa,QAAQ;AAC7E,YAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAI,UAAU,SAAS,SAAU,YAAW,EAAE,GAAG,UAAU,UAAU,SAAS;AAAA,iBACrE,UAAU,SAAS;AAC1B,gBAAM,IAAI,MAAM,UAAU,WAAW,gDAAgD;AAAA,MACzF;AAAA,IACF;AACA,QAAI,CAAC,YAAY,SAAS,SAAS,SAAS,SAAS,aAAa;AAChE,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,YAAQ,QAAQ;AAChB,QAAI,SAAS;AACX,mBAAa,SAAS,cAAc,iBAAiB,YAAY,aAAa,WAAW;AAAA,aAEzF,CAAC,SACA,gBAAgB,SAAS,UAAU,+BAA+B;AAEnE,mBAAa,UAAU;AACzB,QAAI,eAAe;AACnB,QAAI,SAAS,WAAW,SAAS,eAAe;AAC9C,YAAM,cACJ,SAAS,cAAc,iBAAiB,YACpC,MAAM,OAAO,0BAA0B,WAAW,IAClD,MAAM,OAAO,gBAAgB,WAAW;AAC9C,UAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAM,UAAU,6BAA6B,UAAU,WAAW;AAClE,qBAAe,QAAQ,WAAW;AAAA,IACpC;AACA,QAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,UAAM,WACJ,SAAS,WAAW,SAAS,sBACzB,QAAQ,qBAAqB,cAC7B,SAAS,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE;AAChF,iBAAa,YAAY;AACzB;AAAA,MACE,gBACE,CAAC,CAAC,YACF,uBAAuB,QAAQ,EAAE,MAAM,CAAC,SAAS,SAAS,SAAS,KAAK,EAAE,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AAEA,YAAU,MAAM;AACd,UAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAS,UAAU;AAInB,QAAI,WAAY,SAAQ,IAAI;AAC5B,UAAM,YAAY;AAChB,YAAM,KAAK;AACX,UAAI,MAAM,OAAO,WAAW,CAAC,WAAY;AACzC,YAAM,oBAAoB;AAAA,IAC5B,GAAG,EACA,MAAM,CAAC,YAAY;AAClB,UAAI,CAAC,MAAM,OAAO;AAChB;AAAA,UACE,mBAAmB,QAAQ,QAAQ,UAAU;AAAA,QAC/C;AAAA,IACJ,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,MAAM,OAAO,WAAW,WAAY,SAAQ,KAAK;AAAA,IACxD,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AAAA,IACd;AAAA,EAKF,GAAG,CAAC,QAAQ,aAAa,WAAW,cAAc,UAAU,CAAC;AAE7D,YAAU,MAAM;AACd,UAAM,OAAO,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,CAAC,MAAM,WAAW,iBAAiB,EAAG;AAC1C,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,YAA2B;AAG/B,SAAK,OACF,qBAAqB,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC,EACnD,KAAK,CAAC,SAAS;AACd,UAAI,MAAM,OAAO,WAAW,CAAC,KAAK,KAAK,WAAW,QAAQ,KAAK,KAAK,OAAO;AACzE;AACF,kBAAY,IAAI,gBAAgB,IAAI;AACpC,cAAQ,SAAS;AAAA,IACnB,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AACZ,UAAI,UAAW,KAAI,gBAAgB,SAAS;AAAA,IAC9C;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,aAAa,CAAC;AAEhC,iBAAe,IAAI,QAAkD;AACnE,QAAI,UAAU,WAAW,CAAC,QAAQ,EAAG;AACrC,UAAM,UAAU,IAAI,gBAAgB;AACpC,cAAU,UAAU;AACpB,UAAM,SAAS,MAAM,QAAQ,KAAK,UAAU,YAAY,WAAW,CAAC,QAAQ,OAAO;AACnF,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,cAAU,IAAI;AACd,kBAAc,KAAK;AACnB,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,SAAS,SAAS;AAChB,UAAI,OAAO,GAAG;AACZ,YAAI,mBAAmB,wBAAyB,WAAU,QAAQ,OAAO;AAAA;AAEvE;AAAA,YACE,mBAAmB,QACf,QAAQ,UACR;AAAA,UACN;AAAA,MACJ;AAAA,IACF,UAAE;AACA,UAAI,UAAU,YAAY,SAAS;AACjC,kBAAU,UAAU;AACpB,YAAI,QAAQ,EAAG,SAAQ,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,SAAS,WAAmB;AAGnC,QAAI;AACF,qBAAe,QAAQ,YAAY,SAAS;AAAA,IAC9C,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,UAAU,SAAyB,SAAwB,SAAS;AACjF,QAAI,CAAC,OAAO,EAAG;AACf,QAAI,QAAQ,UAAU,cAAc,CAAC,QAAQ,WAAW,CAAC,QAAQ,qBAAsB;AACvF,UAAM,WAAW,MAAM,KAAK,MAAM;AAClC,QAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,UAAM,cAAc,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,MAC7D,CAAC,UAAU,MAAM,OAAO,QAAQ,QAAS;AAAA,IAC3C;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QACE,CAAC,cACD,WAAW,WAAW,YACtB,WAAW,SAAS,YACpB,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,gBAC3D,WAAW,cAAc,UAAW,QAAQ,cAAc;AAE3D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,WAAW,SAAS;AAC1B,QACE,SAAS,WACT,UAAU,iBAAiB,aAC3B,UAAU,gBACV,SAAS,iBAAiB,WAAW;AAErC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,OAAO,iBAAiB,aAAa,cAAc;AAAA,MACvD,eACE,QAAQ,cAAc,aAClB,EAAE,gBAAgB,WAAW,gBAAgB,MAAM,UAAU,cAAc,UAAU,IACrF;AAAA,QACE,gBAAgB,WAAW;AAAA,QAC3B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc,WAAW;AAAA,MAC3B;AAAA,IACR,CAAC;AACD,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,MAAM,KAAK,MAAM;AACjC,QAAI,WAAW,OAAO,GAAG;AACvB,YAAM,iBAAiB,SAAS,MAAM;AAAA,IACxC;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QAAI;AACF,qBAAe,WAAW,UAAU;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,OAAO;AACpB,gBAAY,IAAI;AAChB,UAAM,IAAI,OAAO,WAAW;AAC1B,YAAM,KAAK,MAAM;AACjB,UAAI,CAAC,OAAO,EAAG;AACf,YAAM,oBAAoB,MAAM;AAAA,IAClC,CAAC;AAAA,EACH;AAEA,iBAAe,oBAAoB,SAAwB,SAAS;AAClE,QAAI,QAAuB;AAC3B,QAAI;AACF,cAAQ,eAAe,QAAQ,UAAU;AAAA,IAC3C,QAAQ;AAAA,IAER;AACA,QAAI,OAAO;AACT,YAAM,UAAU,MAAM,WAAW,QAAQ,KAAK;AAC9C,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAG,eAAc,IAAI;AAClF,UAAI,QAAQ,UAAU,WAAY,gBAAe,IAAI;AACrD,UAAI;AACF,cAAM,UAAU,SAAS,MAAM;AAAA,MACjC,UAAE;AACA,YAAI,OAAO,EAAG,gBAAe,KAAK;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,MAAM,QAAQ,OAAO;AAClC,UAAM,IAAI,OAAO,WAAW;AAC1B,UACE,SACC,KAAK,WAAW,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,KAAK,QAAQ,KAAK,GAC/E;AACA,iBAAS,UAAU,OAAO,WAAW;AACrC,mBAAW,UAAU,OAAO,WAAW;AAAA,MACzC;AACA,YAAM,WAAW,gCAAgC,MAAM;AACvD,oBAAc,UAAU,SAAS;AACjC,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,MAAM;AAClC,YAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,YACE,SAAS,iBACT,eACG,SAAS,cAAc,iBAAiB,YAAY,aAAa;AAEpE,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AACF,cAAM,SAAS,SAAS,UAAU,SAAS;AAC3C,YAAI,CAAC;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAGF,YAAI,qBAAqB,SAAS,eAAe,gBAAgB;AACjE,YAAI,SAAS,eAAe,iBAAiB,WAAW;AACtD,gBAAM,eAAe,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,YAC9D,CAAC,UACC,MAAM,cAAc,QACpB,MAAM,SAAS,YACf,MAAM,SAAS,WAAW;AAAA,UAC9B;AACA,cAAI,CAAC,OAAO,EAAG;AACf,cAAI,YAAY,SAAS;AACvB,kBAAM,IAAI;AAAA,cACR;AAAA,YACF;AACF,+BAAqB,YAAY,CAAC,GAAG;AAAA,QACvC;AAIA,cAAM,QAAQ,KAAK,UAAU,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AACjF,YAAI,WAAW,YAAY,QAAQ,WAAW,YAAY,OAAO;AAC/D,mBAAS,UAAU,OAAO,WAAW;AACrC,qBAAW,UAAU,OAAO,WAAW;AAAA,QACzC;AACA,mBAAW,UAAU;AACrB,YAAI,UAAU,MAAM,WAAW,MAAM;AAAA,UACnC,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,gBAAgB,SAAS;AAAA,UACzB,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,QACrD,CAAC;AACD,YAAI,CAAC,OAAO,EAAG;AACf,iBAAS,QAAQ,EAAE;AACnB,YAAI,QAAQ,UAAU;AACpB,oBAAU,MAAM,WAAW;AAAA,YACzB,EAAE,MAAM,eAAe,QAAQ,EAAE,OAAO,EAAE;AAAA,YAC1C,WAAW;AAAA,UACb;AACF,YAAI,CAAC,OAAO,EAAG;AACf,YAAI,QAAQ,WAAW,SAAS;AAC9B,gBAAM,qBAAqB,SAAS,SAAS,YAAY,MAAM;AAAA,YAC5D,OAAM,UAAU,SAAS,MAAM;AAAA,MACtC,UAAE;AACA,YAAI,cAAc,YAAY,SAAS,MAAO,eAAc,UAAU;AACtE,iBAAS,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,iBAAe,qBACb,SACA,YACA,QACA;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,IAAI,gBAAgB;AACpC,kBAAc,UAAU;AACxB,UAAM,iBAAiB,MAAM,QAAQ,MAAM,SAAS,SAAS,OAAO,MAAM;AAC1E,aAAS,QAAS,OAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AACjF,eAAW,IAAI;AACf,QAAI;AACF,YAAM,SAAS,MAAM,wBAAwB,WAAW,WAAW,SAAS,YAAY;AAAA,QACtF,MAAM;AAAA,QACN,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,OAAO,KAAK,CAAC,OAAQ;AAC1B,iBAAW,KAAK;AAChB,qBAAe,IAAI;AACnB,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,OAAO,UAAU,aAAa;AAChC,kBAAU,sDAAsD;AAChE,sBAAc,IAAI;AAClB;AAAA,MACF;AACA,UAAI,OAAO,UAAU,YAAY;AAC/B,YAAI,CAAC,UAAU,SAAS,EAAE,SAAS,OAAO,KAAK,EAAG,eAAc,IAAI;AACpE,cAAM,IAAI,MAAM,uDAAuD;AAAA,MACzE;AAAA,IACF,UAAE;AACA,eAAS,SAAS,OAAO,oBAAoB,SAAS,cAAc;AACpE,UAAI,cAAc,YAAY,QAAS,eAAc,UAAU;AAC/D,UAAI,OAAO,GAAG;AACZ,uBAAe,KAAK;AACpB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAU,SAAyB;AAE1C,WAAO;AAAA,MAAI,CAAC,WACV,qBAAqB,SAAS,+BAA+B,MAAM,GAAG,MAAM;AAAA,IAC9E;AAAA,EACF;AAEA,iBAAe,iBACb,YACA,SAAwB,SACxB;AACA,QAAI,CAAC,WAAW;AAEd,YAAM,eAAe;AACrB,UAAI,CAAC,OAAO,EAAG;AACf,kBAAY,IAAI;AAChB,kBAAY,KAAK;AACjB,gBAAU;AACV;AAAA,IACF;AACA,QAAI,WAAW,iBAAiB,WAAW,cAAc,iBAAiB,WAAW;AACnF,YAAM,YAAY,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,QAC3D,CAAC,UAAU,MAAM,OAAO,WAAW,eAAe;AAAA,MACpD;AACA,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,YAAY,SAAS,WAAW;AACnC,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,WAAW,eAAe,iBAAiB,WAAW;AACxD,YAAM,WAAW,MAAM,OAAO,0BAA0B,WAAW;AACnE,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,6BAA6B,YAAY,QAAQ,EAAE,WAAW;AAChE,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,wBAAwB,QAAQ,aAAa,WAAW,YAAY,MAAM;AAChF,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,eAAe;AACrB,QAAI,CAAC,OAAO,EAAG;AACf,gBAAY,IAAI;AAChB,gBAAY,KAAK;AAAA,EACnB;AAEA,iBAAe,UAAU;AACvB,UAAM,IAAI,OAAO,WAAW;AAC1B,UAAI,KAAM,OAAM,iBAAiB,MAAM,MAAM;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,WAAS,QAAQ;AACf,UAAM,UAAU,UAAU;AAC1B,QAAI,SAAS;AACX,gBAAU,UAAU;AACpB,cAAQ,MAAM,IAAI,wBAAwB,CAAC;AAC3C,oBAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAC1D,oBAAc,UAAU;AACxB,oBAAc,UAAU;AACxB,cAAQ,KAAK;AACb,iBAAW,KAAK;AAChB,qBAAe,KAAK;AAAA,IACtB;AACA,gBAAY,KAAK;AACjB,cAAU;AAAA,EACZ;AAEA,SACE,gBAAAH;AAAA,IAAC;AAAA;AAAA,MACC,MAAM,MAAM,QAAQ;AAAA,MACpB,UAAU,mBAAmB,SAAY,KAAM,MAAM,kBAAkB;AAAA,MACvE,MAAM,QAAQ,WAAW;AAAA,MACzB,WAAW,kBAAkB;AAAA,MAC7B,aAAa,mBAAmB,MAAM,eAAe;AAAA,MACrD,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA,aACE,YACI,YACE,6BACA,cACF,WAAW,MAAM,QAAQ,IAAI;AAAA,MAEnC,MACE,YACI,6FACA;AAAA,MAEN,QAAQ,MAAM,KAAK,KAAK;AAAA,MACxB,SAAS;AAAA,MACT;AAAA,MAEA,0BAAAC,MAAC,SAAI,WAAU,+BACZ;AAAA,gBAAQ,gBAAAD,KAAC,OAAE,MAAK,SAAS,iBAAM,IAAO;AAAA,QACtC,SACC,gBAAAA,KAAC,OAAE,MAAK,UAAS,WAAU,gCACxB,kBACH,IACE;AAAA,QACH,CAAC,OACA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAE,MAAK,UACL,iBAAO,qCAAgC,uCAC1C;AAAA,UACA,gBAAAA,KAAC,YAAO,UAAU,MAAM,SAAS,MAAM,KAAK,KAAK,GAAG,mBAEpD;AAAA,WACF,IAEA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAG,6BAAmB,KAAK,eAAe,WAAU;AAAA,UACpD,OACC,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,MAAK,UAAS,WAAU,kCACxB,oBACG,0BAA0B,KAAK,IAAI,qFACnC,cACE,oCACA,mCACR;AAAA,YACC,UACC,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,WAAU;AAAA,gBACV,SAAS,MAAM,cAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAAA,gBAC1E;AAAA;AAAA,YAED,IACE;AAAA,aACN,IACE,CAAC,YACH,gBAAAC,MAAAF,WAAA,EACG;AAAA,aAAC,KAAK,iBAAiB,CAAC,eACvB,gBAAAE,MAAC,cAAS,UAAU,MAClB;AAAA,8BAAAD,KAAC,YAAQ,yBAAe,UAAU,gCAA+B;AAAA,cACjE,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,WAAW;AAAA;AAAA,gBAC1C;AAAA,gBAAE;AAAA,iBAEJ;AAAA,cACA,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,UAAU;AAAA;AAAA,gBACzC;AAAA,gBAAE;AAAA,iBAEJ;AAAA,eACF,IACE;AAAA,YACJ,gBAAAA,KAAC,OAAE,WAAU,+BACV,0BAAgB,cAAc,aAC3B,+DACA,gBACE,cAAc,cACZ,cAAc,YACd,cAAc,WAChB,cAAc,cACZ,YACE,uFACA,yDACF,wGACV;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,SAAS,MAAM;AACb,sBAAI,UAAU,WAAY,MAAK,MAAM,IAAI;AAAA,2BAEvC,KAAK,SAAS,WAAW,SAAS,eAClC,KAAK,QAAQ,cAAc;AAE3B,yBAAK,UAAU,KAAK,OAAO;AAAA,sBACxB,MAAK,MAAM;AAAA,gBAClB;AAAA,gBAEC,yBACC,SAAS,WAAW,KAAK,SAAS,WAAW,SAAS,cACpD,yBACC,gBAAgB,eAAe,KAAK,IAAI;AAAA;AAAA,YAC/C;AAAA,aACF,IACE;AAAA,UACH,aAAa,CAAC,OACb,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,WAAU,+BACV,sBACG,0EACA,8BACN;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,UAAU,QAAQ,KAAK;AAAA,gBACvB,SAAS,MAAM,KAAK,QAAQ;AAAA,gBAE3B,sBAAY,6BAA6B;AAAA;AAAA,YAC5C;AAAA,aACF,IACE;AAAA,WACN;AAAA,SAEJ;AAAA;AAAA,EACF;AAEJ;","names":["useRef","useState","Fragment","jsx","jsxs","useState","useRef"]}

package/dist/{chunk-JT4JW7BC.js → chunk-5I4VRWBB.js}

@@ -1,3 +1,5 @@
+"use client";
+
 // src/lib/workbench-peers.ts
 function optionalPeer(setup) {
   let loader = null;
@@ -51,4 +53,4 @@ export {
   registerCodeEditor,
   registerDesktopViewer
 };
-//# sourceMappingURL=chunk-JT4JW7BC.js.map
+//# sourceMappingURL=chunk-5I4VRWBB.js.map

package/dist/{chunk-JT4JW7BC.js.map → chunk-5I4VRWBB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/workbench-peers.ts"],"sourcesContent":["import type { DesktopRfbFactory } from \"@opengeni/sdk\";\n\n/** Host-owned imports keep optional peers outside the root's bundler graph. */\nexport type WorkbenchPeerLoader<T = unknown> = () => Promise<T>;\nexport type CodeEditorLanguage = \"javascript\" | \"json\" | \"python\" | \"markdown\" | \"css\" | \"html\";\nexport type CodeEditorLanguages = Partial<Record<CodeEditorLanguage, WorkbenchPeerLoader>>;\nexport type CodeEditorPeers = { module: unknown; languages?: CodeEditorLanguages | undefined };\nexport type SandboxTerminalPeers = {\n  Terminal: unknown;\n  FitAddon: unknown;\n  WebLinksAddon: unknown;\n  loadWebgl?: WorkbenchPeerLoader | undefined;\n};\n\nfunction optionalPeer<T>(setup: string) {\n  let loader: WorkbenchPeerLoader<T> | null = null;\n  let loaded: Promise<T> | null = null;\n  let version = 0;\n  const listeners = new Set<() => void>();\n  return {\n    register(next: WorkbenchPeerLoader<T> | null): void {\n      if (next === loader) return;\n      loader = next;\n      loaded = null;\n      version += 1;\n      for (const listener of listeners) listener();\n    },\n    revision: () => version,\n    subscribe(listener: () => void): () => void {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    load(): Promise<T> {\n      if (!loader) return Promise.reject(new Error(`Call ${setup} to enable this surface`));\n      if (!loaded) {\n        // A synchronous host-loader failure is also a rejected, retryable load.\n        const pending = Promise.resolve()\n          .then(loader)\n          .catch((error: unknown) => {\n            if (loaded === pending) loaded = null;\n            throw error;\n          });\n        loaded = pending;\n      }\n      return loaded;\n    },\n  };\n}\n\nexport const sandboxTerminalPeers = optionalPeer<SandboxTerminalPeers>(\n  \"enableSandboxTerminal() from @opengeni/react/terminal\",\n);\nexport const codeEditorPeers = optionalPeer<CodeEditorPeers>(\n  \"enableCodeEditor() from @opengeni/react/editor\",\n);\nexport const desktopViewerPeers = optionalPeer<DesktopRfbFactory>(\n  \"enableDesktopViewer() from @opengeni/react/desktop\",\n);\n\nexport const registerSandboxTerminal = sandboxTerminalPeers.register;\nexport const registerCodeEditor = codeEditorPeers.register;\nexport const registerDesktopViewer = desktopViewerPeers.register;\n"],"mappings":";AAcA,SAAS,aAAgB,OAAe;AACtC,MAAI,SAAwC;AAC5C,MAAI,SAA4B;AAChC,MAAI,UAAU;AACd,QAAM,YAAY,oBAAI,IAAgB;AACtC,SAAO;AAAA,IACL,SAAS,MAA2C;AAClD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,eAAS;AACT,iBAAW;AACX,iBAAW,YAAY,UAAW,UAAS;AAAA,IAC7C;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,UAAU,UAAkC;AAC1C,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM,UAAU,OAAO,QAAQ;AAAA,IACxC;AAAA,IACA,OAAmB;AACjB,UAAI,CAAC,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,KAAK,yBAAyB,CAAC;AACpF,UAAI,CAAC,QAAQ;AAEX,cAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,EACX,MAAM,CAAC,UAAmB;AACzB,cAAI,WAAW,QAAS,UAAS;AACjC,gBAAM;AAAA,QACR,CAAC;AACH,iBAAS;AAAA,MACX;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,IAAM,uBAAuB;AAAA,EAClC;AACF;AACO,IAAM,kBAAkB;AAAA,EAC7B;AACF;AACO,IAAM,qBAAqB;AAAA,EAChC;AACF;AAEO,IAAM,0BAA0B,qBAAqB;AACrD,IAAM,qBAAqB,gBAAgB;AAC3C,IAAM,wBAAwB,mBAAmB;","names":[]}
+{"version":3,"sources":["../src/lib/workbench-peers.ts"],"sourcesContent":["import type { DesktopRfbFactory } from \"@opengeni/sdk\";\n\n/** Host-owned imports keep optional peers outside the root's bundler graph. */\nexport type WorkbenchPeerLoader<T = unknown> = () => Promise<T>;\nexport type CodeEditorLanguage = \"javascript\" | \"json\" | \"python\" | \"markdown\" | \"css\" | \"html\";\nexport type CodeEditorLanguages = Partial<Record<CodeEditorLanguage, WorkbenchPeerLoader>>;\nexport type CodeEditorPeers = { module: unknown; languages?: CodeEditorLanguages | undefined };\nexport type SandboxTerminalPeers = {\n  Terminal: unknown;\n  FitAddon: unknown;\n  WebLinksAddon: unknown;\n  loadWebgl?: WorkbenchPeerLoader | undefined;\n};\n\nfunction optionalPeer<T>(setup: string) {\n  let loader: WorkbenchPeerLoader<T> | null = null;\n  let loaded: Promise<T> | null = null;\n  let version = 0;\n  const listeners = new Set<() => void>();\n  return {\n    register(next: WorkbenchPeerLoader<T> | null): void {\n      if (next === loader) return;\n      loader = next;\n      loaded = null;\n      version += 1;\n      for (const listener of listeners) listener();\n    },\n    revision: () => version,\n    subscribe(listener: () => void): () => void {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    load(): Promise<T> {\n      if (!loader) return Promise.reject(new Error(`Call ${setup} to enable this surface`));\n      if (!loaded) {\n        // A synchronous host-loader failure is also a rejected, retryable load.\n        const pending = Promise.resolve()\n          .then(loader)\n          .catch((error: unknown) => {\n            if (loaded === pending) loaded = null;\n            throw error;\n          });\n        loaded = pending;\n      }\n      return loaded;\n    },\n  };\n}\n\nexport const sandboxTerminalPeers = optionalPeer<SandboxTerminalPeers>(\n  \"enableSandboxTerminal() from @opengeni/react/terminal\",\n);\nexport const codeEditorPeers = optionalPeer<CodeEditorPeers>(\n  \"enableCodeEditor() from @opengeni/react/editor\",\n);\nexport const desktopViewerPeers = optionalPeer<DesktopRfbFactory>(\n  \"enableDesktopViewer() from @opengeni/react/desktop\",\n);\n\nexport const registerSandboxTerminal = sandboxTerminalPeers.register;\nexport const registerCodeEditor = codeEditorPeers.register;\nexport const registerDesktopViewer = desktopViewerPeers.register;\n"],"mappings":";;;AAcA,SAAS,aAAgB,OAAe;AACtC,MAAI,SAAwC;AAC5C,MAAI,SAA4B;AAChC,MAAI,UAAU;AACd,QAAM,YAAY,oBAAI,IAAgB;AACtC,SAAO;AAAA,IACL,SAAS,MAA2C;AAClD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,eAAS;AACT,iBAAW;AACX,iBAAW,YAAY,UAAW,UAAS;AAAA,IAC7C;AAAA,IACA,UAAU,MAAM;AAAA,IAChB,UAAU,UAAkC;AAC1C,gBAAU,IAAI,QAAQ;AACtB,aAAO,MAAM,UAAU,OAAO,QAAQ;AAAA,IACxC;AAAA,IACA,OAAmB;AACjB,UAAI,CAAC,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,KAAK,yBAAyB,CAAC;AACpF,UAAI,CAAC,QAAQ;AAEX,cAAM,UAAU,QAAQ,QAAQ,EAC7B,KAAK,MAAM,EACX,MAAM,CAAC,UAAmB;AACzB,cAAI,WAAW,QAAS,UAAS;AACjC,gBAAM;AAAA,QACR,CAAC;AACH,iBAAS;AAAA,MACX;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEO,IAAM,uBAAuB;AAAA,EAClC;AACF;AACO,IAAM,kBAAkB;AAAA,EAC7B;AACF;AACO,IAAM,qBAAqB;AAAA,EAChC;AACF;AAEO,IAAM,0BAA0B,qBAAqB;AACrD,IAAM,qBAAqB,gBAAgB;AAC3C,IAAM,wBAAwB,mBAAmB;","names":[]}

package/dist/{chunk-UK4TINKT.js → chunk-B27E3V37.js}

@@ -1,3 +1,5 @@
+"use client";
+
 // src/lib/use-theme-type.ts
 import { useEffect, useState } from "react";
 function useThemeType(forced) {
@@ -24,4 +26,4 @@ function useThemeType(forced) {
 export {
   useThemeType
 };
-//# sourceMappingURL=chunk-UK4TINKT.js.map
+//# sourceMappingURL=chunk-B27E3V37.js.map

package/dist/{chunk-UK4TINKT.js.map → chunk-B27E3V37.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/lib/use-theme-type.ts"],"sourcesContent":["import { useEffect, useState } from \"react\";\n\n/* ----------------------------------------------------------------------------\n   useThemeType\n\n   Resolve the effective dark/light theme for surfaces (the Pierre/Shiki diff)\n   that render outside the reach of host CSS — they need the theme as a value,\n   not a cascade. An explicit prop always wins; otherwise read the host's\n   `data-og-theme` attribute (set on `<html>` or any ancestor by the same opt-in\n   the tokens use) and default to dark, the first-class theme. A MutationObserver\n   keeps it live across runtime theme flips.\n\n   One detector, shared by every diff surface (the Files tab and the timeline),\n   so the two can never drift onto different themes.\n   -------------------------------------------------------------------------- */\n\n/**\n * Resolve the diff theme. An explicit `forced` value wins; otherwise auto-detect\n * from the host `data-og-theme` (defaulting to dark) and track live flips.\n */\nexport function useThemeType(forced: \"dark\" | \"light\" | undefined): \"dark\" | \"light\" {\n  const [detected, setDetected] = useState<\"dark\" | \"light\">(\"dark\");\n  useEffect(() => {\n    if (forced || typeof document === \"undefined\") return;\n    const read = () => {\n      const el = document.querySelector(\"[data-og-theme]\");\n      const value = el?.getAttribute(\"data-og-theme\");\n      setDetected(value === \"light\" ? \"light\" : \"dark\");\n    };\n    read();\n    const observer = new MutationObserver(read);\n    observer.observe(document.documentElement, {\n      attributes: true,\n      attributeFilter: [\"data-og-theme\"],\n      subtree: true,\n    });\n    return () => observer.disconnect();\n  }, [forced]);\n  return forced ?? detected;\n}\n"],"mappings":";AAAA,SAAS,WAAW,gBAAgB;AAoB7B,SAAS,aAAa,QAAwD;AACnF,QAAM,CAAC,UAAU,WAAW,IAAI,SAA2B,MAAM;AACjE,YAAU,MAAM;AACd,QAAI,UAAU,OAAO,aAAa,YAAa;AAC/C,UAAM,OAAO,MAAM;AACjB,YAAM,KAAK,SAAS,cAAc,iBAAiB;AACnD,YAAM,QAAQ,IAAI,aAAa,eAAe;AAC9C,kBAAY,UAAU,UAAU,UAAU,MAAM;AAAA,IAClD;AACA,SAAK;AACL,UAAM,WAAW,IAAI,iBAAiB,IAAI;AAC1C,aAAS,QAAQ,SAAS,iBAAiB;AAAA,MACzC,YAAY;AAAA,MACZ,iBAAiB,CAAC,eAAe;AAAA,MACjC,SAAS;AAAA,IACX,CAAC;AACD,WAAO,MAAM,SAAS,WAAW;AAAA,EACnC,GAAG,CAAC,MAAM,CAAC;AACX,SAAO,UAAU;AACnB;","names":[]}
+{"version":3,"sources":["../src/lib/use-theme-type.ts"],"sourcesContent":["import { useEffect, useState } from \"react\";\n\n/* ----------------------------------------------------------------------------\n   useThemeType\n\n   Resolve the effective dark/light theme for surfaces (the Pierre/Shiki diff)\n   that render outside the reach of host CSS — they need the theme as a value,\n   not a cascade. An explicit prop always wins; otherwise read the host's\n   `data-og-theme` attribute (set on `<html>` or any ancestor by the same opt-in\n   the tokens use) and default to dark, the first-class theme. A MutationObserver\n   keeps it live across runtime theme flips.\n\n   One detector, shared by every diff surface (the Files tab and the timeline),\n   so the two can never drift onto different themes.\n   -------------------------------------------------------------------------- */\n\n/**\n * Resolve the diff theme. An explicit `forced` value wins; otherwise auto-detect\n * from the host `data-og-theme` (defaulting to dark) and track live flips.\n */\nexport function useThemeType(forced: \"dark\" | \"light\" | undefined): \"dark\" | \"light\" {\n  const [detected, setDetected] = useState<\"dark\" | \"light\">(\"dark\");\n  useEffect(() => {\n    if (forced || typeof document === \"undefined\") return;\n    const read = () => {\n      const el = document.querySelector(\"[data-og-theme]\");\n      const value = el?.getAttribute(\"data-og-theme\");\n      setDetected(value === \"light\" ? \"light\" : \"dark\");\n    };\n    read();\n    const observer = new MutationObserver(read);\n    observer.observe(document.documentElement, {\n      attributes: true,\n      attributeFilter: [\"data-og-theme\"],\n      subtree: true,\n    });\n    return () => observer.disconnect();\n  }, [forced]);\n  return forced ?? detected;\n}\n"],"mappings":";;;AAAA,SAAS,WAAW,gBAAgB;AAoB7B,SAAS,aAAa,QAAwD;AACnF,QAAM,CAAC,UAAU,WAAW,IAAI,SAA2B,MAAM;AACjE,YAAU,MAAM;AACd,QAAI,UAAU,OAAO,aAAa,YAAa;AAC/C,UAAM,OAAO,MAAM;AACjB,YAAM,KAAK,SAAS,cAAc,iBAAiB;AACnD,YAAM,QAAQ,IAAI,aAAa,eAAe;AAC9C,kBAAY,UAAU,UAAU,UAAU,MAAM;AAAA,IAClD;AACA,SAAK;AACL,UAAM,WAAW,IAAI,iBAAiB,IAAI;AAC1C,aAAS,QAAQ,SAAS,iBAAiB;AAAA,MACzC,YAAY;AAAA,MACZ,iBAAiB,CAAC,eAAe;AAAA,MACjC,SAAS;AAAA,IACX,CAAC;AACD,WAAO,MAAM,SAAS,WAAW;AAAA,EACnC,GAAG,CAAC,MAAM,CAAC;AACX,SAAO,UAAU;AACnB;","names":[]}

package/dist/{chunk-J6DBS4T3.js → chunk-BNKV5ZLF.js}

@@ -1,12 +1,13 @@
+"use client";
 import {
   usePageLiveActivity
-} from "./chunk-YQEAA6LT.js";
+} from "./chunk-QHUE7E4N.js";
 import {
   useEmbeddedInterventions
-} from "./chunk-TKOTKRWY.js";
+} from "./chunk-XTD7TZHW.js";
 import {
   cn
-} from "./chunk-22KP6LR5.js";
+} from "./chunk-TXS65BB2.js";
 
 // src/hooks/use-interaction-interventions.ts
 import { useCallback, useEffect as useEffect2, useRef as useRef2, useState } from "react";
@@ -368,4 +369,4 @@ export {
   InteractionInterventionBanner,
   useViewerMenuDismiss
 };
-//# sourceMappingURL=chunk-J6DBS4T3.js.map
+//# sourceMappingURL=chunk-BNKV5ZLF.js.map

package/dist/{chunk-J6DBS4T3.js.map → chunk-BNKV5ZLF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/use-interaction-interventions.ts","../src/hooks/use-interaction-invalidation.ts","../src/lib/interaction-errors.ts","../src/components/interaction-intervention-banner.tsx","../src/components/use-viewer-menu-dismiss.ts"],"sourcesContent":["import type {\n  CreateInteractionInterventionRequest,\n  InteractionIntervention,\n  InteractionInterventionMutationResponse,\n  ResolveInteractionInterventionRequest,\n} from \"@opengeni/sdk/interaction\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\nimport type { EmbeddedInterventionClientLike } from \"../client\";\nimport {\n  type EmbeddedInterventionClientOverride,\n  useEmbeddedInterventions,\n} from \"../session-context\";\nimport { useInteractionInvalidation } from \"./use-interaction-invalidation\";\n\nexport type UseInteractionInterventionsOptions = EmbeddedInterventionClientOverride & {\n  enabled?: boolean | undefined;\n  resourceKind?: \"browser_session\" | \"computer_session\" | undefined;\n  resourceId?: string | null | undefined;\n  includeSettled?: boolean | undefined;\n  pollIntervalMs?: number | undefined;\n};\n\nexport type UseInteractionInterventionsResult = {\n  interventions: InteractionIntervention[];\n  loading: boolean;\n  refreshing: boolean;\n  mutating: boolean;\n  error: Error | null;\n  refresh: () => Promise<void>;\n  create: (\n    request: Omit<CreateInteractionInterventionRequest, \"operationId\"> & {\n      operationId?: string;\n    },\n  ) => Promise<InteractionInterventionMutationResponse>;\n  resolve: (\n    interventionId: string,\n    request: Omit<ResolveInteractionInterventionRequest, \"operationId\"> & {\n      operationId?: string;\n    },\n  ) => Promise<InteractionInterventionMutationResponse>;\n};\n\n/** Human-action bridge shared by Browser and Computer surfaces. */\nexport function useInteractionInterventions(\n  options: UseInteractionInterventionsOptions = {},\n): UseInteractionInterventionsResult {\n  const { client, workspaceId, workspaceInteractionEvent, workspaceInteractionConnectionState } =\n    useEmbeddedInterventions(options);\n  const enabled = (options.enabled ?? true) && options.resourceId !== null;\n  const resourceKind = options.resourceKind;\n  const resourceId = options.resourceId ?? undefined;\n  const includeSettled = options.includeSettled ?? false;\n  const key = `${workspaceId}:${resourceKind ?? \"*\"}:${resourceId ?? \"*\"}:${includeSettled}`;\n  const [state, setState] = useState(() => emptyState(key, enabled));\n  const [mutationCount, setMutationCount] = useState(0);\n  const requestRef = useRef<{ id: number; controller: AbortController | null }>({\n    id: 0,\n    controller: null,\n  });\n  const mountedRef = useRef(true);\n  const visible = state.key === key ? state : emptyState(key, enabled);\n\n  const cancelLoad = useCallback(() => {\n    requestRef.current.controller?.abort();\n    requestRef.current = { id: requestRef.current.id + 1, controller: null };\n  }, []);\n\n  const load = useCallback(\n    async (foreground: boolean, replace = true): Promise<void> => {\n      if (!enabled) return;\n      if (requestRef.current.controller && !replace) return;\n      const id = requestRef.current.id + 1;\n      requestRef.current.controller?.abort();\n      const controller = new AbortController();\n      requestRef.current = { id, controller };\n      if (foreground || replace) {\n        setState((current) => ({\n          ...(current.key === key ? current : emptyState(key, true)),\n          loading: foreground,\n          refreshing: !foreground,\n          error: foreground ? null : current.error,\n        }));\n      }\n      try {\n        const response = await client.listInteractionInterventions(workspaceId, {\n          ...(resourceKind ? { resourceKind } : {}),\n          ...(resourceId ? { resourceId } : {}),\n          includeSettled,\n          signal: controller.signal,\n        });\n        if (!mountedRef.current || requestRef.current.id !== id) return;\n        setState({\n          key,\n          interventions: sortInterventions(response.interventions),\n          loading: false,\n          refreshing: false,\n          error: null,\n        });\n      } catch (cause) {\n        if (controller.signal.aborted || !mountedRef.current || requestRef.current.id !== id)\n          return;\n        setState((current) => ({\n          ...(current.key === key ? current : emptyState(key, true)),\n          loading: false,\n          refreshing: false,\n          error: asError(cause),\n        }));\n      } finally {\n        if (requestRef.current.id === id) requestRef.current = { id, controller: null };\n      }\n    },\n    [client, enabled, includeSettled, key, resourceId, resourceKind, workspaceId],\n  );\n\n  const refresh = useCallback(async () => await load(false, true), [load]);\n\n  useEffect(() => {\n    mountedRef.current = true;\n    if (!enabled) {\n      cancelLoad();\n      setState(emptyState(key, false));\n      return;\n    }\n    void load(true);\n    return () => {\n      mountedRef.current = false;\n      cancelLoad();\n    };\n  }, [cancelLoad, enabled, key, load]);\n\n  useInteractionInvalidation({\n    workspaceId,\n    key,\n    enabled,\n    event: workspaceInteractionEvent,\n    connectionState: workspaceInteractionConnectionState,\n    refresh,\n    fallbackPollIntervalMs: options.pollIntervalMs ?? 2_000,\n  });\n\n  const mutate = useCallback(async <T>(operation: () => Promise<T>): Promise<T> => {\n    setMutationCount((count) => count + 1);\n    try {\n      return await operation();\n    } finally {\n      if (mountedRef.current) setMutationCount((count) => Math.max(0, count - 1));\n    }\n  }, []);\n\n  const merge = useCallback(\n    (intervention: InteractionIntervention) => {\n      setState((current) => {\n        if (current.key !== key) return current;\n        const interventions = current.interventions.filter(\n          (candidate) => candidate.id !== intervention.id,\n        );\n        const matches =\n          (!resourceKind || intervention.resourceKind === resourceKind) &&\n          (!resourceId || intervention.resourceId === resourceId);\n        if (matches && (includeSettled || intervention.status === \"open\")) {\n          interventions.push(intervention);\n        }\n        return {\n          ...current,\n          interventions: sortInterventions(interventions),\n          error: null,\n        };\n      });\n    },\n    [includeSettled, key, resourceId, resourceKind],\n  );\n\n  const create = useCallback(\n    async (\n      request: Omit<CreateInteractionInterventionRequest, \"operationId\"> & {\n        operationId?: string;\n      },\n    ): Promise<InteractionInterventionMutationResponse> =>\n      await mutate(async () => {\n        const response = await client.createInteractionIntervention(workspaceId, {\n          ...request,\n          operationId: request.operationId ?? crypto.randomUUID(),\n        });\n        merge(response.intervention);\n        return response;\n      }),\n    [client, merge, mutate, workspaceId],\n  );\n\n  const resolve = useCallback(\n    async (\n      interventionId: string,\n      request: Omit<ResolveInteractionInterventionRequest, \"operationId\"> & {\n        operationId?: string;\n      },\n    ): Promise<InteractionInterventionMutationResponse> =>\n      await mutate(async () => {\n        const response = await client.resolveInteractionIntervention(workspaceId, interventionId, {\n          ...request,\n          operationId: request.operationId ?? crypto.randomUUID(),\n        });\n        merge(response.intervention);\n        return response;\n      }),\n    [client, merge, mutate, workspaceId],\n  );\n\n  return {\n    interventions: visible.interventions,\n    loading: visible.loading,\n    refreshing: visible.refreshing,\n    mutating: mutationCount > 0,\n    error: visible.error,\n    refresh,\n    create,\n    resolve,\n  };\n}\n\nfunction emptyState(key: string, loading: boolean) {\n  return {\n    key,\n    interventions: [] as InteractionIntervention[],\n    loading,\n    refreshing: false,\n    error: null as Error | null,\n  };\n}\n\nfunction sortInterventions(\n  interventions: readonly InteractionIntervention[],\n): InteractionIntervention[] {\n  return [...interventions].sort(\n    (left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt),\n  );\n}\n\nfunction asError(cause: unknown): Error {\n  return cause instanceof Error ? cause : new Error(String(cause));\n}\n\nexport type InteractionInterventionsClient = EmbeddedInterventionClientLike;\n","import type { StreamConnectionState, WorkspaceInteractionRevisionEvent } from \"@opengeni/sdk\";\nimport { useEffect, useRef } from \"react\";\nimport { usePageLiveActivity } from \"./internal\";\n\nexport type InteractionInvalidationOptions = {\n  workspaceId: string;\n  /** Distinguishes filtered projections of the same workspace catalog. */\n  key: string;\n  enabled: boolean;\n  event: WorkspaceInteractionRevisionEvent | null;\n  connectionState: StreamConnectionState | \"idle\" | \"error\";\n  /** Catalog responses carry the workspace revision; live-state lists do not. */\n  knownRevision?: number | undefined;\n  refresh: () => Promise<void>;\n  fallbackPollIntervalMs?: number | undefined;\n};\n\n/**\n * Refetch authoritative lists on the shared latest-revision stream. Poll only\n * while that stream is unavailable, preserving standalone-hook degradation\n * without multiplying healthy-provider traffic.\n */\nexport function useInteractionInvalidation(options: InteractionInvalidationOptions): void {\n  const {\n    workspaceId,\n    key,\n    enabled,\n    event,\n    connectionState,\n    knownRevision,\n    refresh,\n    fallbackPollIntervalMs,\n  } = options;\n  const pageLive = usePageLiveActivity();\n  const lastUnversionedEvent = useRef<{ key: string; sequence: number }>({\n    key,\n    sequence: 0,\n  });\n  const eventSequence = event?.workspaceId === workspaceId ? event.sequence : 0;\n\n  useEffect(() => {\n    if (!enabled || eventSequence <= 0) return;\n    if (knownRevision !== undefined) {\n      if (eventSequence > knownRevision) void refresh();\n      return;\n    }\n    if (lastUnversionedEvent.current.key !== key) {\n      lastUnversionedEvent.current = { key, sequence: 0 };\n    }\n    if (eventSequence <= lastUnversionedEvent.current.sequence) return;\n    lastUnversionedEvent.current = { key, sequence: eventSequence };\n    void refresh();\n  }, [enabled, eventSequence, key, knownRevision, refresh]);\n\n  useEffect(() => {\n    if (!enabled || !pageLive || connectionState === \"live\") return;\n    const interval = boundedPollInterval(fallbackPollIntervalMs ?? 3_000);\n    const timer = setInterval(() => void refresh(), interval);\n    return () => clearInterval(timer);\n  }, [connectionState, enabled, fallbackPollIntervalMs, pageLive, refresh]);\n}\n\nfunction boundedPollInterval(value: number): number {\n  if (!Number.isFinite(value)) return 3_000;\n  return Math.min(60_000, Math.max(1_000, Math.floor(value)));\n}\n","import { OpenGeniApiError } from \"@opengeni/sdk\";\nimport { interactionControlFailureFromError } from \"@opengeni/sdk/interaction\";\n\n/** Media can remain live when the independent control service is unavailable.\n * A target refusal or an uncertain mutation does not establish a service outage. */\nexport function isInteractionControlUnavailable(\n  error: unknown,\n  request: \"control\" | \"observation\" = \"control\",\n): error is OpenGeniApiError {\n  if (!(error instanceof OpenGeniApiError)) return false;\n  const failure = interactionControlFailureFromError(error);\n  if (failure) return failure.code === \"agent_offline\" || failure.code === \"draining\";\n  return (\n    request === \"control\" && !error.outcomeUnknown && (error.status >= 500 || error.status === 0)\n  );\n}\n\nexport function isNonRetryableInteractionError(error: unknown): error is OpenGeniApiError {\n  return error instanceof OpenGeniApiError && error.retryable === false;\n}\n\nexport function isSourcePlacementChangedError(\n  error: unknown,\n  resource: \"browser_session\" | \"computer_session\",\n): error is OpenGeniApiError {\n  return (\n    isNonRetryableInteractionError(error) &&\n    error.status === 409 &&\n    error.details?.interactionResource === resource &&\n    error.details?.interactionFailureCode === \"source_placement_changed\" &&\n    error.details?.interactionLifecycle === \"lost\"\n  );\n}\n","import type { InteractionIntervention } from \"@opengeni/sdk/interaction\";\nimport { CheckIcon, CircleAlertIcon, LoaderCircleIcon, XIcon } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\n\nexport type InteractionInterventionBannerProps = {\n  interventions: InteractionIntervention[];\n  activeTargetId?: string | null | undefined;\n  mutating?: boolean | undefined;\n  className?: string | undefined;\n  onOpen?: ((intervention: InteractionIntervention) => void) | undefined;\n  onResolve: (intervention: InteractionIntervention, outcome: \"completed\" | \"dismissed\") => void;\n};\n\n/** Compact durable human-action prompt shared by Browser and Computer viewers. */\nexport function InteractionInterventionBanner({\n  interventions,\n  activeTargetId,\n  mutating = false,\n  className,\n  onOpen,\n  onResolve,\n}: InteractionInterventionBannerProps) {\n  const intervention = interventions[0];\n  if (!intervention) return null;\n  const targetOpen = activeTargetId === undefined || activeTargetId === intervention.targetId;\n  return (\n    <div\n      className={cn(\n        \"flex shrink-0 items-center gap-2 border-b border-og-status-waiting/25 bg-og-status-waiting/[0.07] px-3 py-2\",\n        className,\n      )}\n      role=\"status\"\n    >\n      <span className=\"grid size-7 shrink-0 place-items-center rounded-og-sm bg-og-status-waiting/10 text-og-status-waiting\">\n        <CircleAlertIcon className=\"size-3.5\" />\n      </span>\n      <span className=\"min-w-0 flex-1\">\n        <span className=\"flex items-center gap-1.5 text-og-control font-medium text-og-fg\">\n          {interventionTitle(intervention.kind)}\n          {interventions.length > 1 ? (\n            <span className=\"rounded-full bg-og-surface-2 px-1.5 py-0.5 text-[10px] font-normal text-og-muted\">\n              +{interventions.length - 1}\n            </span>\n          ) : null}\n        </span>\n        <span className=\"block truncate text-og-xs text-og-muted\">{intervention.reason}</span>\n      </span>\n      {!targetOpen && onOpen ? (\n        <button\n          type=\"button\"\n          onClick={() => onOpen(intervention)}\n          disabled={mutating}\n          className=\"h-7 shrink-0 rounded-og-sm border border-og-primary-border bg-og-primary px-2.5 text-og-control font-medium text-og-primary-fg transition hover:bg-og-primary-hover disabled:opacity-50\"\n        >\n          Open\n        </button>\n      ) : (\n        <button\n          type=\"button\"\n          onClick={() => onResolve(intervention, \"completed\")}\n          disabled={mutating}\n          className=\"inline-flex h-7 shrink-0 items-center gap-1 rounded-og-sm border border-og-primary-border bg-og-primary text-og-primary-fg px-2.5 text-og-control font-medium transition hover:bg-og-primary-hover disabled:opacity-50\"\n        >\n          {mutating ? (\n            <LoaderCircleIcon className=\"size-3 animate-spin\" />\n          ) : (\n            <CheckIcon className=\"size-3\" />\n          )}\n          Done\n        </button>\n      )}\n      <button\n        type=\"button\"\n        onClick={() => onResolve(intervention, \"dismissed\")}\n        disabled={mutating}\n        className=\"grid size-7 shrink-0 place-items-center rounded-og-sm text-og-muted transition hover:bg-og-surface-2 hover:text-og-fg disabled:opacity-50\"\n        aria-label=\"Cancel request\"\n        title=\"Cancel request\"\n      >\n        <XIcon className=\"size-3.5\" />\n      </button>\n    </div>\n  );\n}\n\nfunction interventionTitle(kind: InteractionIntervention[\"kind\"]): string {\n  switch (kind) {\n    case \"manual_login\":\n      return \"Sign in needed\";\n    case \"mfa\":\n      return \"Verification needed\";\n    case \"external_action\":\n      return \"Action needed\";\n    case \"confirmation\":\n      return \"Confirmation needed\";\n    case \"other\":\n      return \"Agent needs your help\";\n  }\n}\n","import { useEffect, useRef } from \"react\";\n\n/** Keep native details menus dismissible without letting Escape close the dock. */\nexport function useViewerMenuDismiss(enabled = true) {\n  const ref = useRef<HTMLDetailsElement | null>(null);\n  useEffect(() => {\n    const menu = ref.current;\n    if (!enabled || !menu) return;\n    const document = menu.ownerDocument;\n    const pointerDown = (event: PointerEvent) => {\n      if (menu.open && !event.composedPath().includes(menu)) menu.open = false;\n    };\n    const focusIn = (event: FocusEvent) => {\n      if (menu.open && !event.composedPath().includes(menu)) menu.open = false;\n    };\n    const keyDown = (event: KeyboardEvent) => {\n      if (!menu.open || event.key !== \"Escape\" || !event.composedPath().includes(menu)) return;\n      event.preventDefault();\n      event.stopPropagation();\n      menu.open = false;\n      menu.querySelector(\"summary\")?.focus();\n    };\n    document.addEventListener(\"pointerdown\", pointerDown, true);\n    document.addEventListener(\"focusin\", focusIn, true);\n    document.addEventListener(\"keydown\", keyDown, true);\n    return () => {\n      document.removeEventListener(\"pointerdown\", pointerDown, true);\n      document.removeEventListener(\"focusin\", focusIn, true);\n      document.removeEventListener(\"keydown\", keyDown, true);\n    };\n  }, [enabled]);\n  return ref;\n}\n"],"mappings":";;;;;;;;;;;AAMA,SAAS,aAAa,aAAAA,YAAW,UAAAC,SAAQ,gBAAgB;;;ACLzD,SAAS,WAAW,cAAc;AAqB3B,SAAS,2BAA2B,SAA+C;AACxF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,WAAW,oBAAoB;AACrC,QAAM,uBAAuB,OAA0C;AAAA,IACrE;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,gBAAgB,OAAO,gBAAgB,cAAc,MAAM,WAAW;AAE5E,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,iBAAiB,EAAG;AACpC,QAAI,kBAAkB,QAAW;AAC/B,UAAI,gBAAgB,cAAe,MAAK,QAAQ;AAChD;AAAA,IACF;AACA,QAAI,qBAAqB,QAAQ,QAAQ,KAAK;AAC5C,2BAAqB,UAAU,EAAE,KAAK,UAAU,EAAE;AAAA,IACpD;AACA,QAAI,iBAAiB,qBAAqB,QAAQ,SAAU;AAC5D,yBAAqB,UAAU,EAAE,KAAK,UAAU,cAAc;AAC9D,SAAK,QAAQ;AAAA,EACf,GAAG,CAAC,SAAS,eAAe,KAAK,eAAe,OAAO,CAAC;AAExD,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,YAAY,oBAAoB,OAAQ;AACzD,UAAM,WAAW,oBAAoB,0BAA0B,GAAK;AACpE,UAAM,QAAQ,YAAY,MAAM,KAAK,QAAQ,GAAG,QAAQ;AACxD,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC,GAAG,CAAC,iBAAiB,SAAS,wBAAwB,UAAU,OAAO,CAAC;AAC1E;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAQ,KAAK,IAAI,KAAO,KAAK,MAAM,KAAK,CAAC,CAAC;AAC5D;;;ADtBO,SAAS,4BACd,UAA8C,CAAC,GACZ;AACnC,QAAM,EAAE,QAAQ,aAAa,2BAA2B,oCAAoC,IAC1F,yBAAyB,OAAO;AAClC,QAAM,WAAW,QAAQ,WAAW,SAAS,QAAQ,eAAe;AACpE,QAAM,eAAe,QAAQ;AAC7B,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,GAAG,WAAW,IAAI,gBAAgB,GAAG,IAAI,cAAc,GAAG,IAAI,cAAc;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,MAAM,WAAW,KAAK,OAAO,CAAC;AACjE,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,CAAC;AACpD,QAAM,aAAaC,QAA2D;AAAA,IAC5E,IAAI;AAAA,IACJ,YAAY;AAAA,EACd,CAAC;AACD,QAAM,aAAaA,QAAO,IAAI;AAC9B,QAAM,UAAU,MAAM,QAAQ,MAAM,QAAQ,WAAW,KAAK,OAAO;AAEnE,QAAM,aAAa,YAAY,MAAM;AACnC,eAAW,QAAQ,YAAY,MAAM;AACrC,eAAW,UAAU,EAAE,IAAI,WAAW,QAAQ,KAAK,GAAG,YAAY,KAAK;AAAA,EACzE,GAAG,CAAC,CAAC;AAEL,QAAM,OAAO;AAAA,IACX,OAAO,YAAqB,UAAU,SAAwB;AAC5D,UAAI,CAAC,QAAS;AACd,UAAI,WAAW,QAAQ,cAAc,CAAC,QAAS;AAC/C,YAAM,KAAK,WAAW,QAAQ,KAAK;AACnC,iBAAW,QAAQ,YAAY,MAAM;AACrC,YAAM,aAAa,IAAI,gBAAgB;AACvC,iBAAW,UAAU,EAAE,IAAI,WAAW;AACtC,UAAI,cAAc,SAAS;AACzB,iBAAS,CAAC,aAAa;AAAA,UACrB,GAAI,QAAQ,QAAQ,MAAM,UAAU,WAAW,KAAK,IAAI;AAAA,UACxD,SAAS;AAAA,UACT,YAAY,CAAC;AAAA,UACb,OAAO,aAAa,OAAO,QAAQ;AAAA,QACrC,EAAE;AAAA,MACJ;AACA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,6BAA6B,aAAa;AAAA,UACtE,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,UACvC,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,UACnC;AAAA,UACA,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,WAAW,WAAW,WAAW,QAAQ,OAAO,GAAI;AACzD,iBAAS;AAAA,UACP;AAAA,UACA,eAAe,kBAAkB,SAAS,aAAa;AAAA,UACvD,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,OAAO;AAAA,QACT,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,WAAW,OAAO,WAAW,CAAC,WAAW,WAAW,WAAW,QAAQ,OAAO;AAChF;AACF,iBAAS,CAAC,aAAa;AAAA,UACrB,GAAI,QAAQ,QAAQ,MAAM,UAAU,WAAW,KAAK,IAAI;AAAA,UACxD,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,OAAO,QAAQ,KAAK;AAAA,QACtB,EAAE;AAAA,MACJ,UAAE;AACA,YAAI,WAAW,QAAQ,OAAO,GAAI,YAAW,UAAU,EAAE,IAAI,YAAY,KAAK;AAAA,MAChF;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,SAAS,gBAAgB,KAAK,YAAY,cAAc,WAAW;AAAA,EAC9E;AAEA,QAAM,UAAU,YAAY,YAAY,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC;AAEvE,EAAAC,WAAU,MAAM;AACd,eAAW,UAAU;AACrB,QAAI,CAAC,SAAS;AACZ,iBAAW;AACX,eAAS,WAAW,KAAK,KAAK,CAAC;AAC/B;AAAA,IACF;AACA,SAAK,KAAK,IAAI;AACd,WAAO,MAAM;AACX,iBAAW,UAAU;AACrB,iBAAW;AAAA,IACb;AAAA,EACF,GAAG,CAAC,YAAY,SAAS,KAAK,IAAI,CAAC;AAEnC,6BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,iBAAiB;AAAA,IACjB;AAAA,IACA,wBAAwB,QAAQ,kBAAkB;AAAA,EACpD,CAAC;AAED,QAAM,SAAS,YAAY,OAAU,cAA4C;AAC/E,qBAAiB,CAAC,UAAU,QAAQ,CAAC;AACrC,QAAI;AACF,aAAO,MAAM,UAAU;AAAA,IACzB,UAAE;AACA,UAAI,WAAW,QAAS,kBAAiB,CAAC,UAAU,KAAK,IAAI,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC5E;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ;AAAA,IACZ,CAAC,iBAA0C;AACzC,eAAS,CAAC,YAAY;AACpB,YAAI,QAAQ,QAAQ,IAAK,QAAO;AAChC,cAAM,gBAAgB,QAAQ,cAAc;AAAA,UAC1C,CAAC,cAAc,UAAU,OAAO,aAAa;AAAA,QAC/C;AACA,cAAM,WACH,CAAC,gBAAgB,aAAa,iBAAiB,kBAC/C,CAAC,cAAc,aAAa,eAAe;AAC9C,YAAI,YAAY,kBAAkB,aAAa,WAAW,SAAS;AACjE,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,eAAO;AAAA,UACL,GAAG;AAAA,UACH,eAAe,kBAAkB,aAAa;AAAA,UAC9C,OAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,gBAAgB,KAAK,YAAY,YAAY;AAAA,EAChD;AAEA,QAAM,SAAS;AAAA,IACb,OACE,YAIA,MAAM,OAAO,YAAY;AACvB,YAAM,WAAW,MAAM,OAAO,8BAA8B,aAAa;AAAA,QACvE,GAAG;AAAA,QACH,aAAa,QAAQ,eAAe,OAAO,WAAW;AAAA,MACxD,CAAC;AACD,YAAM,SAAS,YAAY;AAC3B,aAAO;AAAA,IACT,CAAC;AAAA,IACH,CAAC,QAAQ,OAAO,QAAQ,WAAW;AAAA,EACrC;AAEA,QAAM,UAAU;AAAA,IACd,OACE,gBACA,YAIA,MAAM,OAAO,YAAY;AACvB,YAAM,WAAW,MAAM,OAAO,+BAA+B,aAAa,gBAAgB;AAAA,QACxF,GAAG;AAAA,QACH,aAAa,QAAQ,eAAe,OAAO,WAAW;AAAA,MACxD,CAAC;AACD,YAAM,SAAS,YAAY;AAC3B,aAAO;AAAA,IACT,CAAC;AAAA,IACH,CAAC,QAAQ,OAAO,QAAQ,WAAW;AAAA,EACrC;AAEA,SAAO;AAAA,IACL,eAAe,QAAQ;AAAA,IACvB,SAAS,QAAQ;AAAA,IACjB,YAAY,QAAQ;AAAA,IACpB,UAAU,gBAAgB;AAAA,IAC1B,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,WAAW,KAAa,SAAkB;AACjD,SAAO;AAAA,IACL;AAAA,IACA,eAAe,CAAC;AAAA,IAChB;AAAA,IACA,YAAY;AAAA,IACZ,OAAO;AAAA,EACT;AACF;AAEA,SAAS,kBACP,eAC2B;AAC3B,SAAO,CAAC,GAAG,aAAa,EAAE;AAAA,IACxB,CAAC,MAAM,UAAU,KAAK,MAAM,MAAM,SAAS,IAAI,KAAK,MAAM,KAAK,SAAS;AAAA,EAC1E;AACF;AAEA,SAAS,QAAQ,OAAuB;AACtC,SAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;;;AE/OA,SAAS,wBAAwB;AACjC,SAAS,0CAA0C;AAI5C,SAAS,gCACd,OACA,UAAqC,WACV;AAC3B,MAAI,EAAE,iBAAiB,kBAAmB,QAAO;AACjD,QAAM,UAAU,mCAAmC,KAAK;AACxD,MAAI,QAAS,QAAO,QAAQ,SAAS,mBAAmB,QAAQ,SAAS;AACzE,SACE,YAAY,aAAa,CAAC,MAAM,mBAAmB,MAAM,UAAU,OAAO,MAAM,WAAW;AAE/F;AAEO,SAAS,+BAA+B,OAA2C;AACxF,SAAO,iBAAiB,oBAAoB,MAAM,cAAc;AAClE;AAEO,SAAS,8BACd,OACA,UAC2B;AAC3B,SACE,+BAA+B,KAAK,KACpC,MAAM,WAAW,OACjB,MAAM,SAAS,wBAAwB,YACvC,MAAM,SAAS,2BAA2B,8BAC1C,MAAM,SAAS,yBAAyB;AAE5C;;;AC/BA,SAAS,WAAW,iBAAiB,kBAAkB,aAAa;AAiC5D,cAMI,YANJ;AApBD,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,GAAuC;AACrC,QAAM,eAAe,cAAc,CAAC;AACpC,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,aAAa,mBAAmB,UAAa,mBAAmB,aAAa;AACnF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAW;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,MACA,MAAK;AAAA,MAEL;AAAA,4BAAC,UAAK,WAAU,wGACd,8BAAC,mBAAgB,WAAU,YAAW,GACxC;AAAA,QACA,qBAAC,UAAK,WAAU,kBACd;AAAA,+BAAC,UAAK,WAAU,oEACb;AAAA,8BAAkB,aAAa,IAAI;AAAA,YACnC,cAAc,SAAS,IACtB,qBAAC,UAAK,WAAU,oFAAmF;AAAA;AAAA,cAC/F,cAAc,SAAS;AAAA,eAC3B,IACE;AAAA,aACN;AAAA,UACA,oBAAC,UAAK,WAAU,2CAA2C,uBAAa,QAAO;AAAA,WACjF;AAAA,QACC,CAAC,cAAc,SACd;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,OAAO,YAAY;AAAA,YAClC,UAAU;AAAA,YACV,WAAU;AAAA,YACX;AAAA;AAAA,QAED,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,UAAU,cAAc,WAAW;AAAA,YAClD,UAAU;AAAA,YACV,WAAU;AAAA,YAET;AAAA,yBACC,oBAAC,oBAAiB,WAAU,uBAAsB,IAElD,oBAAC,aAAU,WAAU,UAAS;AAAA,cAC9B;AAAA;AAAA;AAAA,QAEJ;AAAA,QAEF;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,UAAU,cAAc,WAAW;AAAA,YAClD,UAAU;AAAA,YACV,WAAU;AAAA,YACV,cAAW;AAAA,YACX,OAAM;AAAA,YAEN,8BAAC,SAAM,WAAU,YAAW;AAAA;AAAA,QAC9B;AAAA;AAAA;AAAA,EACF;AAEJ;AAEA,SAAS,kBAAkB,MAA+C;AACxE,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;;;AClGA,SAAS,aAAAC,YAAW,UAAAC,eAAc;AAG3B,SAAS,qBAAqB,UAAU,MAAM;AACnD,QAAM,MAAMA,QAAkC,IAAI;AAClD,EAAAD,WAAU,MAAM;AACd,UAAM,OAAO,IAAI;AACjB,QAAI,CAAC,WAAW,CAAC,KAAM;AACvB,UAAM,WAAW,KAAK;AACtB,UAAM,cAAc,CAAC,UAAwB;AAC3C,UAAI,KAAK,QAAQ,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG,MAAK,OAAO;AAAA,IACrE;AACA,UAAM,UAAU,CAAC,UAAsB;AACrC,UAAI,KAAK,QAAQ,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG,MAAK,OAAO;AAAA,IACrE;AACA,UAAM,UAAU,CAAC,UAAyB;AACxC,UAAI,CAAC,KAAK,QAAQ,MAAM,QAAQ,YAAY,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG;AAClF,YAAM,eAAe;AACrB,YAAM,gBAAgB;AACtB,WAAK,OAAO;AACZ,WAAK,cAAc,SAAS,GAAG,MAAM;AAAA,IACvC;AACA,aAAS,iBAAiB,eAAe,aAAa,IAAI;AAC1D,aAAS,iBAAiB,WAAW,SAAS,IAAI;AAClD,aAAS,iBAAiB,WAAW,SAAS,IAAI;AAClD,WAAO,MAAM;AACX,eAAS,oBAAoB,eAAe,aAAa,IAAI;AAC7D,eAAS,oBAAoB,WAAW,SAAS,IAAI;AACrD,eAAS,oBAAoB,WAAW,SAAS,IAAI;AAAA,IACvD;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AACZ,SAAO;AACT;","names":["useEffect","useRef","useRef","useEffect","useEffect","useRef"]}
+{"version":3,"sources":["../src/hooks/use-interaction-interventions.ts","../src/hooks/use-interaction-invalidation.ts","../src/lib/interaction-errors.ts","../src/components/interaction-intervention-banner.tsx","../src/components/use-viewer-menu-dismiss.ts"],"sourcesContent":["import type {\n  CreateInteractionInterventionRequest,\n  InteractionIntervention,\n  InteractionInterventionMutationResponse,\n  ResolveInteractionInterventionRequest,\n} from \"@opengeni/sdk/interaction\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\nimport type { EmbeddedInterventionClientLike } from \"../client\";\nimport {\n  type EmbeddedInterventionClientOverride,\n  useEmbeddedInterventions,\n} from \"../session-context\";\nimport { useInteractionInvalidation } from \"./use-interaction-invalidation\";\n\nexport type UseInteractionInterventionsOptions = EmbeddedInterventionClientOverride & {\n  enabled?: boolean | undefined;\n  resourceKind?: \"browser_session\" | \"computer_session\" | undefined;\n  resourceId?: string | null | undefined;\n  includeSettled?: boolean | undefined;\n  pollIntervalMs?: number | undefined;\n};\n\nexport type UseInteractionInterventionsResult = {\n  interventions: InteractionIntervention[];\n  loading: boolean;\n  refreshing: boolean;\n  mutating: boolean;\n  error: Error | null;\n  refresh: () => Promise<void>;\n  create: (\n    request: Omit<CreateInteractionInterventionRequest, \"operationId\"> & {\n      operationId?: string;\n    },\n  ) => Promise<InteractionInterventionMutationResponse>;\n  resolve: (\n    interventionId: string,\n    request: Omit<ResolveInteractionInterventionRequest, \"operationId\"> & {\n      operationId?: string;\n    },\n  ) => Promise<InteractionInterventionMutationResponse>;\n};\n\n/** Human-action bridge shared by Browser and Computer surfaces. */\nexport function useInteractionInterventions(\n  options: UseInteractionInterventionsOptions = {},\n): UseInteractionInterventionsResult {\n  const { client, workspaceId, workspaceInteractionEvent, workspaceInteractionConnectionState } =\n    useEmbeddedInterventions(options);\n  const enabled = (options.enabled ?? true) && options.resourceId !== null;\n  const resourceKind = options.resourceKind;\n  const resourceId = options.resourceId ?? undefined;\n  const includeSettled = options.includeSettled ?? false;\n  const key = `${workspaceId}:${resourceKind ?? \"*\"}:${resourceId ?? \"*\"}:${includeSettled}`;\n  const [state, setState] = useState(() => emptyState(key, enabled));\n  const [mutationCount, setMutationCount] = useState(0);\n  const requestRef = useRef<{ id: number; controller: AbortController | null }>({\n    id: 0,\n    controller: null,\n  });\n  const mountedRef = useRef(true);\n  const visible = state.key === key ? state : emptyState(key, enabled);\n\n  const cancelLoad = useCallback(() => {\n    requestRef.current.controller?.abort();\n    requestRef.current = { id: requestRef.current.id + 1, controller: null };\n  }, []);\n\n  const load = useCallback(\n    async (foreground: boolean, replace = true): Promise<void> => {\n      if (!enabled) return;\n      if (requestRef.current.controller && !replace) return;\n      const id = requestRef.current.id + 1;\n      requestRef.current.controller?.abort();\n      const controller = new AbortController();\n      requestRef.current = { id, controller };\n      if (foreground || replace) {\n        setState((current) => ({\n          ...(current.key === key ? current : emptyState(key, true)),\n          loading: foreground,\n          refreshing: !foreground,\n          error: foreground ? null : current.error,\n        }));\n      }\n      try {\n        const response = await client.listInteractionInterventions(workspaceId, {\n          ...(resourceKind ? { resourceKind } : {}),\n          ...(resourceId ? { resourceId } : {}),\n          includeSettled,\n          signal: controller.signal,\n        });\n        if (!mountedRef.current || requestRef.current.id !== id) return;\n        setState({\n          key,\n          interventions: sortInterventions(response.interventions),\n          loading: false,\n          refreshing: false,\n          error: null,\n        });\n      } catch (cause) {\n        if (controller.signal.aborted || !mountedRef.current || requestRef.current.id !== id)\n          return;\n        setState((current) => ({\n          ...(current.key === key ? current : emptyState(key, true)),\n          loading: false,\n          refreshing: false,\n          error: asError(cause),\n        }));\n      } finally {\n        if (requestRef.current.id === id) requestRef.current = { id, controller: null };\n      }\n    },\n    [client, enabled, includeSettled, key, resourceId, resourceKind, workspaceId],\n  );\n\n  const refresh = useCallback(async () => await load(false, true), [load]);\n\n  useEffect(() => {\n    mountedRef.current = true;\n    if (!enabled) {\n      cancelLoad();\n      setState(emptyState(key, false));\n      return;\n    }\n    void load(true);\n    return () => {\n      mountedRef.current = false;\n      cancelLoad();\n    };\n  }, [cancelLoad, enabled, key, load]);\n\n  useInteractionInvalidation({\n    workspaceId,\n    key,\n    enabled,\n    event: workspaceInteractionEvent,\n    connectionState: workspaceInteractionConnectionState,\n    refresh,\n    fallbackPollIntervalMs: options.pollIntervalMs ?? 2_000,\n  });\n\n  const mutate = useCallback(async <T>(operation: () => Promise<T>): Promise<T> => {\n    setMutationCount((count) => count + 1);\n    try {\n      return await operation();\n    } finally {\n      if (mountedRef.current) setMutationCount((count) => Math.max(0, count - 1));\n    }\n  }, []);\n\n  const merge = useCallback(\n    (intervention: InteractionIntervention) => {\n      setState((current) => {\n        if (current.key !== key) return current;\n        const interventions = current.interventions.filter(\n          (candidate) => candidate.id !== intervention.id,\n        );\n        const matches =\n          (!resourceKind || intervention.resourceKind === resourceKind) &&\n          (!resourceId || intervention.resourceId === resourceId);\n        if (matches && (includeSettled || intervention.status === \"open\")) {\n          interventions.push(intervention);\n        }\n        return {\n          ...current,\n          interventions: sortInterventions(interventions),\n          error: null,\n        };\n      });\n    },\n    [includeSettled, key, resourceId, resourceKind],\n  );\n\n  const create = useCallback(\n    async (\n      request: Omit<CreateInteractionInterventionRequest, \"operationId\"> & {\n        operationId?: string;\n      },\n    ): Promise<InteractionInterventionMutationResponse> =>\n      await mutate(async () => {\n        const response = await client.createInteractionIntervention(workspaceId, {\n          ...request,\n          operationId: request.operationId ?? crypto.randomUUID(),\n        });\n        merge(response.intervention);\n        return response;\n      }),\n    [client, merge, mutate, workspaceId],\n  );\n\n  const resolve = useCallback(\n    async (\n      interventionId: string,\n      request: Omit<ResolveInteractionInterventionRequest, \"operationId\"> & {\n        operationId?: string;\n      },\n    ): Promise<InteractionInterventionMutationResponse> =>\n      await mutate(async () => {\n        const response = await client.resolveInteractionIntervention(workspaceId, interventionId, {\n          ...request,\n          operationId: request.operationId ?? crypto.randomUUID(),\n        });\n        merge(response.intervention);\n        return response;\n      }),\n    [client, merge, mutate, workspaceId],\n  );\n\n  return {\n    interventions: visible.interventions,\n    loading: visible.loading,\n    refreshing: visible.refreshing,\n    mutating: mutationCount > 0,\n    error: visible.error,\n    refresh,\n    create,\n    resolve,\n  };\n}\n\nfunction emptyState(key: string, loading: boolean) {\n  return {\n    key,\n    interventions: [] as InteractionIntervention[],\n    loading,\n    refreshing: false,\n    error: null as Error | null,\n  };\n}\n\nfunction sortInterventions(\n  interventions: readonly InteractionIntervention[],\n): InteractionIntervention[] {\n  return [...interventions].sort(\n    (left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt),\n  );\n}\n\nfunction asError(cause: unknown): Error {\n  return cause instanceof Error ? cause : new Error(String(cause));\n}\n\nexport type InteractionInterventionsClient = EmbeddedInterventionClientLike;\n","import type { StreamConnectionState, WorkspaceInteractionRevisionEvent } from \"@opengeni/sdk\";\nimport { useEffect, useRef } from \"react\";\nimport { usePageLiveActivity } from \"./internal\";\n\nexport type InteractionInvalidationOptions = {\n  workspaceId: string;\n  /** Distinguishes filtered projections of the same workspace catalog. */\n  key: string;\n  enabled: boolean;\n  event: WorkspaceInteractionRevisionEvent | null;\n  connectionState: StreamConnectionState | \"idle\" | \"error\";\n  /** Catalog responses carry the workspace revision; live-state lists do not. */\n  knownRevision?: number | undefined;\n  refresh: () => Promise<void>;\n  fallbackPollIntervalMs?: number | undefined;\n};\n\n/**\n * Refetch authoritative lists on the shared latest-revision stream. Poll only\n * while that stream is unavailable, preserving standalone-hook degradation\n * without multiplying healthy-provider traffic.\n */\nexport function useInteractionInvalidation(options: InteractionInvalidationOptions): void {\n  const {\n    workspaceId,\n    key,\n    enabled,\n    event,\n    connectionState,\n    knownRevision,\n    refresh,\n    fallbackPollIntervalMs,\n  } = options;\n  const pageLive = usePageLiveActivity();\n  const lastUnversionedEvent = useRef<{ key: string; sequence: number }>({\n    key,\n    sequence: 0,\n  });\n  const eventSequence = event?.workspaceId === workspaceId ? event.sequence : 0;\n\n  useEffect(() => {\n    if (!enabled || eventSequence <= 0) return;\n    if (knownRevision !== undefined) {\n      if (eventSequence > knownRevision) void refresh();\n      return;\n    }\n    if (lastUnversionedEvent.current.key !== key) {\n      lastUnversionedEvent.current = { key, sequence: 0 };\n    }\n    if (eventSequence <= lastUnversionedEvent.current.sequence) return;\n    lastUnversionedEvent.current = { key, sequence: eventSequence };\n    void refresh();\n  }, [enabled, eventSequence, key, knownRevision, refresh]);\n\n  useEffect(() => {\n    if (!enabled || !pageLive || connectionState === \"live\") return;\n    const interval = boundedPollInterval(fallbackPollIntervalMs ?? 3_000);\n    const timer = setInterval(() => void refresh(), interval);\n    return () => clearInterval(timer);\n  }, [connectionState, enabled, fallbackPollIntervalMs, pageLive, refresh]);\n}\n\nfunction boundedPollInterval(value: number): number {\n  if (!Number.isFinite(value)) return 3_000;\n  return Math.min(60_000, Math.max(1_000, Math.floor(value)));\n}\n","import { OpenGeniApiError } from \"@opengeni/sdk\";\nimport { interactionControlFailureFromError } from \"@opengeni/sdk/interaction\";\n\n/** Media can remain live when the independent control service is unavailable.\n * A target refusal or an uncertain mutation does not establish a service outage. */\nexport function isInteractionControlUnavailable(\n  error: unknown,\n  request: \"control\" | \"observation\" = \"control\",\n): error is OpenGeniApiError {\n  if (!(error instanceof OpenGeniApiError)) return false;\n  const failure = interactionControlFailureFromError(error);\n  if (failure) return failure.code === \"agent_offline\" || failure.code === \"draining\";\n  return (\n    request === \"control\" && !error.outcomeUnknown && (error.status >= 500 || error.status === 0)\n  );\n}\n\nexport function isNonRetryableInteractionError(error: unknown): error is OpenGeniApiError {\n  return error instanceof OpenGeniApiError && error.retryable === false;\n}\n\nexport function isSourcePlacementChangedError(\n  error: unknown,\n  resource: \"browser_session\" | \"computer_session\",\n): error is OpenGeniApiError {\n  return (\n    isNonRetryableInteractionError(error) &&\n    error.status === 409 &&\n    error.details?.interactionResource === resource &&\n    error.details?.interactionFailureCode === \"source_placement_changed\" &&\n    error.details?.interactionLifecycle === \"lost\"\n  );\n}\n","import type { InteractionIntervention } from \"@opengeni/sdk/interaction\";\nimport { CheckIcon, CircleAlertIcon, LoaderCircleIcon, XIcon } from \"lucide-react\";\nimport { cn } from \"../lib/cn\";\n\nexport type InteractionInterventionBannerProps = {\n  interventions: InteractionIntervention[];\n  activeTargetId?: string | null | undefined;\n  mutating?: boolean | undefined;\n  className?: string | undefined;\n  onOpen?: ((intervention: InteractionIntervention) => void) | undefined;\n  onResolve: (intervention: InteractionIntervention, outcome: \"completed\" | \"dismissed\") => void;\n};\n\n/** Compact durable human-action prompt shared by Browser and Computer viewers. */\nexport function InteractionInterventionBanner({\n  interventions,\n  activeTargetId,\n  mutating = false,\n  className,\n  onOpen,\n  onResolve,\n}: InteractionInterventionBannerProps) {\n  const intervention = interventions[0];\n  if (!intervention) return null;\n  const targetOpen = activeTargetId === undefined || activeTargetId === intervention.targetId;\n  return (\n    <div\n      className={cn(\n        \"flex shrink-0 items-center gap-2 border-b border-og-status-waiting/25 bg-og-status-waiting/[0.07] px-3 py-2\",\n        className,\n      )}\n      role=\"status\"\n    >\n      <span className=\"grid size-7 shrink-0 place-items-center rounded-og-sm bg-og-status-waiting/10 text-og-status-waiting\">\n        <CircleAlertIcon className=\"size-3.5\" />\n      </span>\n      <span className=\"min-w-0 flex-1\">\n        <span className=\"flex items-center gap-1.5 text-og-control font-medium text-og-fg\">\n          {interventionTitle(intervention.kind)}\n          {interventions.length > 1 ? (\n            <span className=\"rounded-full bg-og-surface-2 px-1.5 py-0.5 text-[10px] font-normal text-og-muted\">\n              +{interventions.length - 1}\n            </span>\n          ) : null}\n        </span>\n        <span className=\"block truncate text-og-xs text-og-muted\">{intervention.reason}</span>\n      </span>\n      {!targetOpen && onOpen ? (\n        <button\n          type=\"button\"\n          onClick={() => onOpen(intervention)}\n          disabled={mutating}\n          className=\"h-7 shrink-0 rounded-og-sm border border-og-primary-border bg-og-primary px-2.5 text-og-control font-medium text-og-primary-fg transition hover:bg-og-primary-hover disabled:opacity-50\"\n        >\n          Open\n        </button>\n      ) : (\n        <button\n          type=\"button\"\n          onClick={() => onResolve(intervention, \"completed\")}\n          disabled={mutating}\n          className=\"inline-flex h-7 shrink-0 items-center gap-1 rounded-og-sm border border-og-primary-border bg-og-primary text-og-primary-fg px-2.5 text-og-control font-medium transition hover:bg-og-primary-hover disabled:opacity-50\"\n        >\n          {mutating ? (\n            <LoaderCircleIcon className=\"size-3 animate-spin\" />\n          ) : (\n            <CheckIcon className=\"size-3\" />\n          )}\n          Done\n        </button>\n      )}\n      <button\n        type=\"button\"\n        onClick={() => onResolve(intervention, \"dismissed\")}\n        disabled={mutating}\n        className=\"grid size-7 shrink-0 place-items-center rounded-og-sm text-og-muted transition hover:bg-og-surface-2 hover:text-og-fg disabled:opacity-50\"\n        aria-label=\"Cancel request\"\n        title=\"Cancel request\"\n      >\n        <XIcon className=\"size-3.5\" />\n      </button>\n    </div>\n  );\n}\n\nfunction interventionTitle(kind: InteractionIntervention[\"kind\"]): string {\n  switch (kind) {\n    case \"manual_login\":\n      return \"Sign in needed\";\n    case \"mfa\":\n      return \"Verification needed\";\n    case \"external_action\":\n      return \"Action needed\";\n    case \"confirmation\":\n      return \"Confirmation needed\";\n    case \"other\":\n      return \"Agent needs your help\";\n  }\n}\n","import { useEffect, useRef } from \"react\";\n\n/** Keep native details menus dismissible without letting Escape close the dock. */\nexport function useViewerMenuDismiss(enabled = true) {\n  const ref = useRef<HTMLDetailsElement | null>(null);\n  useEffect(() => {\n    const menu = ref.current;\n    if (!enabled || !menu) return;\n    const document = menu.ownerDocument;\n    const pointerDown = (event: PointerEvent) => {\n      if (menu.open && !event.composedPath().includes(menu)) menu.open = false;\n    };\n    const focusIn = (event: FocusEvent) => {\n      if (menu.open && !event.composedPath().includes(menu)) menu.open = false;\n    };\n    const keyDown = (event: KeyboardEvent) => {\n      if (!menu.open || event.key !== \"Escape\" || !event.composedPath().includes(menu)) return;\n      event.preventDefault();\n      event.stopPropagation();\n      menu.open = false;\n      menu.querySelector(\"summary\")?.focus();\n    };\n    document.addEventListener(\"pointerdown\", pointerDown, true);\n    document.addEventListener(\"focusin\", focusIn, true);\n    document.addEventListener(\"keydown\", keyDown, true);\n    return () => {\n      document.removeEventListener(\"pointerdown\", pointerDown, true);\n      document.removeEventListener(\"focusin\", focusIn, true);\n      document.removeEventListener(\"keydown\", keyDown, true);\n    };\n  }, [enabled]);\n  return ref;\n}\n"],"mappings":";;;;;;;;;;;;AAMA,SAAS,aAAa,aAAAA,YAAW,UAAAC,SAAQ,gBAAgB;;;ACLzD,SAAS,WAAW,cAAc;AAqB3B,SAAS,2BAA2B,SAA+C;AACxF,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,WAAW,oBAAoB;AACrC,QAAM,uBAAuB,OAA0C;AAAA,IACrE;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACD,QAAM,gBAAgB,OAAO,gBAAgB,cAAc,MAAM,WAAW;AAE5E,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,iBAAiB,EAAG;AACpC,QAAI,kBAAkB,QAAW;AAC/B,UAAI,gBAAgB,cAAe,MAAK,QAAQ;AAChD;AAAA,IACF;AACA,QAAI,qBAAqB,QAAQ,QAAQ,KAAK;AAC5C,2BAAqB,UAAU,EAAE,KAAK,UAAU,EAAE;AAAA,IACpD;AACA,QAAI,iBAAiB,qBAAqB,QAAQ,SAAU;AAC5D,yBAAqB,UAAU,EAAE,KAAK,UAAU,cAAc;AAC9D,SAAK,QAAQ;AAAA,EACf,GAAG,CAAC,SAAS,eAAe,KAAK,eAAe,OAAO,CAAC;AAExD,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,CAAC,YAAY,oBAAoB,OAAQ;AACzD,UAAM,WAAW,oBAAoB,0BAA0B,GAAK;AACpE,UAAM,QAAQ,YAAY,MAAM,KAAK,QAAQ,GAAG,QAAQ;AACxD,WAAO,MAAM,cAAc,KAAK;AAAA,EAClC,GAAG,CAAC,iBAAiB,SAAS,wBAAwB,UAAU,OAAO,CAAC;AAC1E;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAQ,KAAK,IAAI,KAAO,KAAK,MAAM,KAAK,CAAC,CAAC;AAC5D;;;ADtBO,SAAS,4BACd,UAA8C,CAAC,GACZ;AACnC,QAAM,EAAE,QAAQ,aAAa,2BAA2B,oCAAoC,IAC1F,yBAAyB,OAAO;AAClC,QAAM,WAAW,QAAQ,WAAW,SAAS,QAAQ,eAAe;AACpE,QAAM,eAAe,QAAQ;AAC7B,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,MAAM,GAAG,WAAW,IAAI,gBAAgB,GAAG,IAAI,cAAc,GAAG,IAAI,cAAc;AACxF,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,MAAM,WAAW,KAAK,OAAO,CAAC;AACjE,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,CAAC;AACpD,QAAM,aAAaC,QAA2D;AAAA,IAC5E,IAAI;AAAA,IACJ,YAAY;AAAA,EACd,CAAC;AACD,QAAM,aAAaA,QAAO,IAAI;AAC9B,QAAM,UAAU,MAAM,QAAQ,MAAM,QAAQ,WAAW,KAAK,OAAO;AAEnE,QAAM,aAAa,YAAY,MAAM;AACnC,eAAW,QAAQ,YAAY,MAAM;AACrC,eAAW,UAAU,EAAE,IAAI,WAAW,QAAQ,KAAK,GAAG,YAAY,KAAK;AAAA,EACzE,GAAG,CAAC,CAAC;AAEL,QAAM,OAAO;AAAA,IACX,OAAO,YAAqB,UAAU,SAAwB;AAC5D,UAAI,CAAC,QAAS;AACd,UAAI,WAAW,QAAQ,cAAc,CAAC,QAAS;AAC/C,YAAM,KAAK,WAAW,QAAQ,KAAK;AACnC,iBAAW,QAAQ,YAAY,MAAM;AACrC,YAAM,aAAa,IAAI,gBAAgB;AACvC,iBAAW,UAAU,EAAE,IAAI,WAAW;AACtC,UAAI,cAAc,SAAS;AACzB,iBAAS,CAAC,aAAa;AAAA,UACrB,GAAI,QAAQ,QAAQ,MAAM,UAAU,WAAW,KAAK,IAAI;AAAA,UACxD,SAAS;AAAA,UACT,YAAY,CAAC;AAAA,UACb,OAAO,aAAa,OAAO,QAAQ;AAAA,QACrC,EAAE;AAAA,MACJ;AACA,UAAI;AACF,cAAM,WAAW,MAAM,OAAO,6BAA6B,aAAa;AAAA,UACtE,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA,UACvC,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,UACnC;AAAA,UACA,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,WAAW,WAAW,WAAW,QAAQ,OAAO,GAAI;AACzD,iBAAS;AAAA,UACP;AAAA,UACA,eAAe,kBAAkB,SAAS,aAAa;AAAA,UACvD,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,OAAO;AAAA,QACT,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,WAAW,OAAO,WAAW,CAAC,WAAW,WAAW,WAAW,QAAQ,OAAO;AAChF;AACF,iBAAS,CAAC,aAAa;AAAA,UACrB,GAAI,QAAQ,QAAQ,MAAM,UAAU,WAAW,KAAK,IAAI;AAAA,UACxD,SAAS;AAAA,UACT,YAAY;AAAA,UACZ,OAAO,QAAQ,KAAK;AAAA,QACtB,EAAE;AAAA,MACJ,UAAE;AACA,YAAI,WAAW,QAAQ,OAAO,GAAI,YAAW,UAAU,EAAE,IAAI,YAAY,KAAK;AAAA,MAChF;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,SAAS,gBAAgB,KAAK,YAAY,cAAc,WAAW;AAAA,EAC9E;AAEA,QAAM,UAAU,YAAY,YAAY,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC;AAEvE,EAAAC,WAAU,MAAM;AACd,eAAW,UAAU;AACrB,QAAI,CAAC,SAAS;AACZ,iBAAW;AACX,eAAS,WAAW,KAAK,KAAK,CAAC;AAC/B;AAAA,IACF;AACA,SAAK,KAAK,IAAI;AACd,WAAO,MAAM;AACX,iBAAW,UAAU;AACrB,iBAAW;AAAA,IACb;AAAA,EACF,GAAG,CAAC,YAAY,SAAS,KAAK,IAAI,CAAC;AAEnC,6BAA2B;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP,iBAAiB;AAAA,IACjB;AAAA,IACA,wBAAwB,QAAQ,kBAAkB;AAAA,EACpD,CAAC;AAED,QAAM,SAAS,YAAY,OAAU,cAA4C;AAC/E,qBAAiB,CAAC,UAAU,QAAQ,CAAC;AACrC,QAAI;AACF,aAAO,MAAM,UAAU;AAAA,IACzB,UAAE;AACA,UAAI,WAAW,QAAS,kBAAiB,CAAC,UAAU,KAAK,IAAI,GAAG,QAAQ,CAAC,CAAC;AAAA,IAC5E;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ;AAAA,IACZ,CAAC,iBAA0C;AACzC,eAAS,CAAC,YAAY;AACpB,YAAI,QAAQ,QAAQ,IAAK,QAAO;AAChC,cAAM,gBAAgB,QAAQ,cAAc;AAAA,UAC1C,CAAC,cAAc,UAAU,OAAO,aAAa;AAAA,QAC/C;AACA,cAAM,WACH,CAAC,gBAAgB,aAAa,iBAAiB,kBAC/C,CAAC,cAAc,aAAa,eAAe;AAC9C,YAAI,YAAY,kBAAkB,aAAa,WAAW,SAAS;AACjE,wBAAc,KAAK,YAAY;AAAA,QACjC;AACA,eAAO;AAAA,UACL,GAAG;AAAA,UACH,eAAe,kBAAkB,aAAa;AAAA,UAC9C,OAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IACA,CAAC,gBAAgB,KAAK,YAAY,YAAY;AAAA,EAChD;AAEA,QAAM,SAAS;AAAA,IACb,OACE,YAIA,MAAM,OAAO,YAAY;AACvB,YAAM,WAAW,MAAM,OAAO,8BAA8B,aAAa;AAAA,QACvE,GAAG;AAAA,QACH,aAAa,QAAQ,eAAe,OAAO,WAAW;AAAA,MACxD,CAAC;AACD,YAAM,SAAS,YAAY;AAC3B,aAAO;AAAA,IACT,CAAC;AAAA,IACH,CAAC,QAAQ,OAAO,QAAQ,WAAW;AAAA,EACrC;AAEA,QAAM,UAAU;AAAA,IACd,OACE,gBACA,YAIA,MAAM,OAAO,YAAY;AACvB,YAAM,WAAW,MAAM,OAAO,+BAA+B,aAAa,gBAAgB;AAAA,QACxF,GAAG;AAAA,QACH,aAAa,QAAQ,eAAe,OAAO,WAAW;AAAA,MACxD,CAAC;AACD,YAAM,SAAS,YAAY;AAC3B,aAAO;AAAA,IACT,CAAC;AAAA,IACH,CAAC,QAAQ,OAAO,QAAQ,WAAW;AAAA,EACrC;AAEA,SAAO;AAAA,IACL,eAAe,QAAQ;AAAA,IACvB,SAAS,QAAQ;AAAA,IACjB,YAAY,QAAQ;AAAA,IACpB,UAAU,gBAAgB;AAAA,IAC1B,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,WAAW,KAAa,SAAkB;AACjD,SAAO;AAAA,IACL;AAAA,IACA,eAAe,CAAC;AAAA,IAChB;AAAA,IACA,YAAY;AAAA,IACZ,OAAO;AAAA,EACT;AACF;AAEA,SAAS,kBACP,eAC2B;AAC3B,SAAO,CAAC,GAAG,aAAa,EAAE;AAAA,IACxB,CAAC,MAAM,UAAU,KAAK,MAAM,MAAM,SAAS,IAAI,KAAK,MAAM,KAAK,SAAS;AAAA,EAC1E;AACF;AAEA,SAAS,QAAQ,OAAuB;AACtC,SAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AACjE;;;AE/OA,SAAS,wBAAwB;AACjC,SAAS,0CAA0C;AAI5C,SAAS,gCACd,OACA,UAAqC,WACV;AAC3B,MAAI,EAAE,iBAAiB,kBAAmB,QAAO;AACjD,QAAM,UAAU,mCAAmC,KAAK;AACxD,MAAI,QAAS,QAAO,QAAQ,SAAS,mBAAmB,QAAQ,SAAS;AACzE,SACE,YAAY,aAAa,CAAC,MAAM,mBAAmB,MAAM,UAAU,OAAO,MAAM,WAAW;AAE/F;AAEO,SAAS,+BAA+B,OAA2C;AACxF,SAAO,iBAAiB,oBAAoB,MAAM,cAAc;AAClE;AAEO,SAAS,8BACd,OACA,UAC2B;AAC3B,SACE,+BAA+B,KAAK,KACpC,MAAM,WAAW,OACjB,MAAM,SAAS,wBAAwB,YACvC,MAAM,SAAS,2BAA2B,8BAC1C,MAAM,SAAS,yBAAyB;AAE5C;;;AC/BA,SAAS,WAAW,iBAAiB,kBAAkB,aAAa;AAiC5D,cAMI,YANJ;AApBD,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EACA;AACF,GAAuC;AACrC,QAAM,eAAe,cAAc,CAAC;AACpC,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,aAAa,mBAAmB,UAAa,mBAAmB,aAAa;AACnF,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAW;AAAA,QACT;AAAA,QACA;AAAA,MACF;AAAA,MACA,MAAK;AAAA,MAEL;AAAA,4BAAC,UAAK,WAAU,wGACd,8BAAC,mBAAgB,WAAU,YAAW,GACxC;AAAA,QACA,qBAAC,UAAK,WAAU,kBACd;AAAA,+BAAC,UAAK,WAAU,oEACb;AAAA,8BAAkB,aAAa,IAAI;AAAA,YACnC,cAAc,SAAS,IACtB,qBAAC,UAAK,WAAU,oFAAmF;AAAA;AAAA,cAC/F,cAAc,SAAS;AAAA,eAC3B,IACE;AAAA,aACN;AAAA,UACA,oBAAC,UAAK,WAAU,2CAA2C,uBAAa,QAAO;AAAA,WACjF;AAAA,QACC,CAAC,cAAc,SACd;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,OAAO,YAAY;AAAA,YAClC,UAAU;AAAA,YACV,WAAU;AAAA,YACX;AAAA;AAAA,QAED,IAEA;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,UAAU,cAAc,WAAW;AAAA,YAClD,UAAU;AAAA,YACV,WAAU;AAAA,YAET;AAAA,yBACC,oBAAC,oBAAiB,WAAU,uBAAsB,IAElD,oBAAC,aAAU,WAAU,UAAS;AAAA,cAC9B;AAAA;AAAA;AAAA,QAEJ;AAAA,QAEF;AAAA,UAAC;AAAA;AAAA,YACC,MAAK;AAAA,YACL,SAAS,MAAM,UAAU,cAAc,WAAW;AAAA,YAClD,UAAU;AAAA,YACV,WAAU;AAAA,YACV,cAAW;AAAA,YACX,OAAM;AAAA,YAEN,8BAAC,SAAM,WAAU,YAAW;AAAA;AAAA,QAC9B;AAAA;AAAA;AAAA,EACF;AAEJ;AAEA,SAAS,kBAAkB,MAA+C;AACxE,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;;;AClGA,SAAS,aAAAC,YAAW,UAAAC,eAAc;AAG3B,SAAS,qBAAqB,UAAU,MAAM;AACnD,QAAM,MAAMA,QAAkC,IAAI;AAClD,EAAAD,WAAU,MAAM;AACd,UAAM,OAAO,IAAI;AACjB,QAAI,CAAC,WAAW,CAAC,KAAM;AACvB,UAAM,WAAW,KAAK;AACtB,UAAM,cAAc,CAAC,UAAwB;AAC3C,UAAI,KAAK,QAAQ,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG,MAAK,OAAO;AAAA,IACrE;AACA,UAAM,UAAU,CAAC,UAAsB;AACrC,UAAI,KAAK,QAAQ,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG,MAAK,OAAO;AAAA,IACrE;AACA,UAAM,UAAU,CAAC,UAAyB;AACxC,UAAI,CAAC,KAAK,QAAQ,MAAM,QAAQ,YAAY,CAAC,MAAM,aAAa,EAAE,SAAS,IAAI,EAAG;AAClF,YAAM,eAAe;AACrB,YAAM,gBAAgB;AACtB,WAAK,OAAO;AACZ,WAAK,cAAc,SAAS,GAAG,MAAM;AAAA,IACvC;AACA,aAAS,iBAAiB,eAAe,aAAa,IAAI;AAC1D,aAAS,iBAAiB,WAAW,SAAS,IAAI;AAClD,aAAS,iBAAiB,WAAW,SAAS,IAAI;AAClD,WAAO,MAAM;AACX,eAAS,oBAAoB,eAAe,aAAa,IAAI;AAC7D,eAAS,oBAAoB,WAAW,SAAS,IAAI;AACrD,eAAS,oBAAoB,WAAW,SAAS,IAAI;AAAA,IACvD;AAAA,EACF,GAAG,CAAC,OAAO,CAAC;AACZ,SAAO;AACT;","names":["useEffect","useRef","useRef","useEffect","useEffect","useRef"]}