@opengeni/react 3.3.2 → 3.4.1-canary.38960406141001

package/dist/chunk-ZQV5W7YC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/use-connect.ts","../src/session-capability-policy.ts","../src/components/session-capability-frame.tsx","../src/components/session-mcp-capability-card.tsx","../src/mcp-connection-status.ts"],"sourcesContent":["import type { ConnectController } from \"@opengeni/connect\";\nimport { useMemo, useSyncExternalStore } from \"react\";\n\n/** Internal consumers import the hook directly so setup surfaces stay lazy. */\nexport function useConnect(controller: ConnectController) {\n  const snapshot = useSyncExternalStore(\n    controller.subscribe,\n    controller.getSnapshot,\n    controller.getSnapshot,\n  );\n  const actions = useMemo(\n    () => ({\n      begin: controller.begin.bind(controller),\n      recover: controller.recover.bind(controller),\n      refresh: controller.refresh.bind(controller),\n      waitForAction: controller.waitForAction.bind(controller),\n      advance: controller.advance.bind(controller),\n      cancel: controller.cancel.bind(controller),\n    }),\n    [controller],\n  );\n  return useMemo(() => ({ ...snapshot, ...actions }), [snapshot, actions]);\n}\n","import type {\n  FirstPartyMcpToolName,\n  CapabilityCatalogItem,\n  Session,\n  UpdateSessionToolPolicyRequest,\n} from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\n\n/** Catalog tool discovery may be lazy; selecting the installed server does not\n * require its individual tool inventory to have been fetched. */\nexport function sessionCapabilityTools(item: CapabilityCatalogItem) {\n  const serverId = item.kind === \"mcp\" ? item.runtime?.mcpServerId : undefined;\n  return serverId && !item.tools.some((tool) => tool.kind === \"mcp\" && tool.id === serverId)\n    ? [...item.tools, { kind: \"mcp\" as const, id: serverId }]\n    : item.tools;\n}\n\n/** A connection never resets the human's existing tool selection. Default-mode\n * sessions discover newly enabled servers at admission; explicit/inherited\n * policies add only this reviewed capability, with the existing CAS fence. */\nexport async function attachSessionCapability(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return;\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const session = await client.getSession(workspaceId, sessionId);\n  if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n  const request = capabilityToolPolicyUpdate(session, item);\n  if (request) await client.updateSessionToolPolicy(workspaceId, sessionId, request);\n}\n\nfunction capabilityToolPolicyUpdate(\n  session: Session,\n  item: CapabilityCatalogItem,\n): UpdateSessionToolPolicyRequest | null {\n  const tools = sessionCapabilityTools(item);\n  if (item.kind === \"skill\" || tools.length === 0) return null;\n  // Session.tools includes mandatory runtime servers, which must never be\n  // echoed into the human's explicit selection.\n  let existing = session.tools.filter(\n    (tool) => !session.effectiveToolPolicy?.mandatoryIds?.includes(tool.id),\n  );\n  if (session.toolPolicy.mode === \"workspace_default\") {\n    const policy = session.effectiveToolPolicy;\n    if (!policy || policy.idsTruncated)\n      throw new Error(\n        \"Connected, but the full session tool selection could not be read. Review the Tools picker before continuing.\",\n      );\n    // A workspace may choose a restricted default instead of all enabled servers.\n    // Preserve that exact selection if this connection needs an explicit addition.\n    // selectedIds contains only explicit additions, and is normally empty for\n    // automatic selection. Compare against the resolved defaults instead.\n    existing = policy.effectiveIds\n      .filter((id) => !policy.mandatoryIds.includes(id))\n      .map(\n        (id) =>\n          session.tools.find((tool) => tool.kind === \"mcp\" && tool.id === id) ?? {\n            kind: \"mcp\" as const,\n            id,\n            optional: true,\n          },\n      );\n  }\n  const additions = tools.filter(\n    (tool) =>\n      !session.effectiveToolPolicy?.mandatoryIds.includes(tool.id) &&\n      !existing.some((current) => current.kind === tool.kind && current.id === tool.id),\n  );\n  const recommended = Array.isArray(item.metadata?.firstPartyMcpTools)\n    ? (item.metadata.firstPartyMcpTools.filter(\n        (name): name is string => typeof name === \"string\",\n      ) as FirstPartyMcpToolName[])\n    : [];\n  const firstParty = [...new Set([...session.firstPartyMcpTools, ...recommended])];\n  if (additions.length === 0 && firstParty.length === session.firstPartyMcpTools.length)\n    return null;\n  return {\n    mode: \"explicit\",\n    tools: [...existing, ...additions],\n    firstPartyMcpTools: firstParty,\n    expectedVersion: session.toolPolicyVersion,\n  };\n}\n\n/** Read-only review. Hosts must show ancestor changes and obtain a separate\n * explicit click before applying. This plan is never authorization. */\nexport type SessionCapabilityAccessPlan = {\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  sessions: Array<{\n    id: string;\n    title: string | null;\n    parentSessionId: string | null;\n    toolPolicyVersion: number;\n    request: UpdateSessionToolPolicyRequest | null;\n  }>;\n};\n\nexport async function prepareSessionCapabilityAccess(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  item: CapabilityCatalogItem,\n  stillCurrent: () => boolean = () => true,\n): Promise<SessionCapabilityAccessPlan> {\n  const sessions: SessionCapabilityAccessPlan[\"sessions\"] = [];\n  if (item.kind === \"skill\" || sessionCapabilityTools(item).length === 0)\n    return { workspaceId, sessionId, capabilityId: item.id, sessions };\n  const visited = new Set<string>();\n  let id: string | null = sessionId;\n  while (id) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (visited.has(id)) throw new Error(\"The parent chat chain could not be verified.\");\n    visited.add(id);\n    const session = await client.getSession(workspaceId, id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const request = capabilityToolPolicyUpdate(session, item);\n    sessions.push({\n      id,\n      title: session.title ?? null,\n      parentSessionId: session.parentSessionId ?? null,\n      toolPolicyVersion: session.toolPolicyVersion,\n      request,\n    });\n    // An unchanged immediate parent already supplies this capability's ceiling.\n    // Do not read or broaden ancestors irrelevant to this addition.\n    if (!request) break;\n    id = session.parentSessionId ?? null;\n  }\n  return { workspaceId, sessionId, capabilityId: item.id, sessions: sessions.reverse() };\n}\n\n/** Preflight the entire review, then apply ordinary CAS-fenced API writes root\n * first. A partial failure may leave approved ancestor changes committed; never\n * claim success or roll back another person's edits. Prepare a new review. */\nexport async function applySessionCapabilityAccess(\n  client: OpenGeniClient,\n  plan: SessionCapabilityAccessPlan,\n  stillCurrent: () => boolean = () => true,\n): Promise<void> {\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    const current = await client.getSession(plan.workspaceId, reviewed.id);\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (\n      current.toolPolicyVersion !== reviewed.toolPolicyVersion ||\n      (current.parentSessionId ?? null) !== reviewed.parentSessionId\n    )\n      throw new Error(\"Chat access changed. Click Add tools to review the current choices again.\");\n  }\n  for (const reviewed of plan.sessions) {\n    if (!stillCurrent()) throw new Error(\"Connection setup was interrupted.\");\n    if (reviewed.request) {\n      const updated = await client.updateSessionToolPolicy(\n        plan.workspaceId,\n        reviewed.id,\n        reviewed.request,\n      );\n      if (\n        reviewed.request.mode === \"explicit\" &&\n        reviewed.request.firstPartyMcpTools.some(\n          (tool) => !updated.firstPartyMcpTools.includes(tool),\n        )\n      )\n        throw new Error(\n          \"This chat's capabilities do not allow these tools. Review its capability settings before adding tools again.\",\n        );\n    }\n  }\n}\n\n/** Native OAuth callbacks have already saved the provider connection. Finish\n * the separate, version-fenced session tool selection before reporting success. */\nexport async function completeSessionCapabilityOAuth(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  capabilityId: string | null,\n): Promise<void> {\n  if (!capabilityId)\n    throw new Error(\n      \"The authorized integration could not be identified. Review its connection card to finish setup.\",\n    );\n  const connected = (await client.listCapabilities(workspaceId)).items.find(\n    (item) => item.id === capabilityId,\n  );\n  if (!connected?.enabled)\n    throw new Error(\"The connection was authorized, but enabling its tools could not be verified.\");\n  await attachSessionCapability(client, workspaceId, sessionId, connected);\n}\n","import { CheckIcon, InfoIcon, ShieldCheckIcon, XIcon } from \"lucide-react\";\nimport { Dialog } from \"radix-ui\";\nimport { useRef, useState, type ReactNode, type RefObject } from \"react\";\nimport { usePortalTokenStyle } from \"../lib/use-portal-token-style\";\n\nexport type SessionCapabilityFrameProps = {\n  name: string;\n  subtitle: string;\n  logo: string | null;\n  typeLabel: string;\n  description: string;\n  skill: boolean;\n  expanded: boolean;\n  complete: boolean;\n  /** Completion copy must reflect the provider's actual scope of access. */\n  completeLabel?: string;\n  actionLabel: string;\n  /** Direct navigation actions should not announce a dialog on the card. */\n  opensDialog?: boolean;\n  note: string;\n  onOpen(): void;\n  onClose(): void;\n  busy?: boolean;\n  opener?: RefObject<HTMLButtonElement | null>;\n  cardRef?: RefObject<HTMLElement | null>;\n  children?: ReactNode;\n  /** A catalogue row can own the opener while reusing the same details dialog. */\n  dialogOnly?: boolean;\n  /**\n   * Replaces the action when the viewer cannot start setup here (the provider\n   * is not configured, or someone else must connect it). Say why and who can.\n   */\n  actionUnavailable?: ReactNode;\n  /** Host-owned content inside the card, under its status or actions. */\n  details?: ReactNode;\n  /** Protected setup can stay in the conversation instead of opening a dialog. */\n  inlineSetup?: ReactNode;\n};\n\nfunction Mark({ src, name }: { src: string | null; name: string }) {\n  const [failed, setFailed] = useState<string | null>(null);\n  return (\n    <span className=\"og-session-capability-logo\" aria-hidden>\n      {src && failed !== src ? (\n        <img src={src} alt=\"\" loading=\"lazy\" decoding=\"async\" onError={() => setFailed(src)} />\n      ) : (\n        name.trim().slice(0, 2).toUpperCase()\n      )}\n    </span>\n  );\n}\n\n/** The same conversation card in the console and embedded clients. Setup\n * content owns the provider flow; this frame owns identity and protected focus. */\nexport function SessionCapabilityFrame({\n  name,\n  subtitle,\n  logo,\n  typeLabel,\n  description,\n  skill,\n  expanded,\n  complete,\n  completeLabel,\n  actionLabel,\n  opensDialog = true,\n  note,\n  onOpen,\n  onClose,\n  busy = false,\n  opener,\n  cardRef,\n  children,\n  dialogOnly = false,\n  actionUnavailable,\n  details,\n  inlineSetup,\n}: SessionCapabilityFrameProps) {\n  const localOpener = useRef<HTMLButtonElement>(null);\n  const localCard = useRef<HTMLElement>(null);\n  const buttonRef = opener ?? localOpener;\n  const sectionRef = cardRef ?? localCard;\n  const portalStyle = usePortalTokenStyle(sectionRef.current);\n  const identity = (\n    <>\n      <Mark src={logo} name={name} />\n      <div className=\"og-session-capability-identity\">\n        <h3>{name}</h3>\n        <span>{subtitle}</span>\n      </div>\n      <span className=\"og-session-capability-type\">{typeLabel}</span>\n    </>\n  );\n  return (\n    <div className=\"og-session-capability\">\n      <section\n        hidden={dialogOnly}\n        style={dialogOnly ? { display: \"none\" } : undefined}\n        ref={sectionRef}\n        tabIndex={-1}\n        aria-label={`${name} setup`}\n        data-state={complete ? \"complete\" : expanded ? \"setup\" : \"suggested\"}\n        className=\"og-session-capability-shell\"\n      >\n        <div className=\"og-session-capability-header\">\n          {identity}\n          {complete ? <CheckIcon size={16} aria-hidden /> : null}\n        </div>\n        {complete ? (\n          <p role=\"status\" className=\"og-session-capability-copy\">\n            {completeLabel ??\n              (skill ? \"Installed · Workspace\" : \"Connected · Available in this conversation\")}\n          </p>\n        ) : (\n          <>\n            <p className=\"og-session-capability-copy\">{description}</p>\n            {inlineSetup ? (\n              <div className=\"og-session-capability-setup\">{inlineSetup}</div>\n            ) : actionUnavailable ? (\n              <div className=\"og-session-capability-actions\" data-unavailable=\"\">\n                <span role=\"note\">\n                  <InfoIcon size={13} aria-hidden />\n                  {actionUnavailable}\n                </span>\n              </div>\n            ) : (\n              <div className=\"og-session-capability-actions\">\n                <span>\n                  <ShieldCheckIcon size={13} aria-hidden />\n                  {skill ? \"Guidance only · no account access\" : \"You choose what to authorize\"}\n                </span>\n                <button\n                  ref={buttonRef}\n                  type=\"button\"\n                  onClick={onOpen}\n                  disabled={busy}\n                  aria-haspopup={opensDialog ? \"dialog\" : undefined}\n                  aria-expanded={opensDialog ? expanded : undefined}\n                >\n                  {actionLabel}\n                </button>\n              </div>\n            )}\n          </>\n        )}\n        {details}\n      </section>\n      {!complete && !dialogOnly && note ? (\n        <p className=\"og-session-capability-note\">{note}</p>\n      ) : null}\n      <Dialog.Root\n        open={expanded && !complete}\n        onOpenChange={(open) => {\n          if (!open && !busy) onClose();\n        }}\n      >\n        <Dialog.Portal>\n          <Dialog.Overlay className=\"og-root og-session-capability-overlay\" style={portalStyle} />\n          <Dialog.Content\n            className=\"og-root og-session-capability-dialog\"\n            style={portalStyle}\n            onEscapeKeyDown={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onInteractOutside={(event) => {\n              if (busy) event.preventDefault();\n            }}\n            onCloseAutoFocus={(event) => {\n              event.preventDefault();\n              const target = buttonRef.current?.isConnected\n                ? buttonRef.current\n                : sectionRef.current;\n              if (target?.isConnected) target.focus();\n            }}\n          >\n            <div className=\"og-session-capability-dialog-header\">\n              <Mark src={logo} name={name} />\n              <div>\n                <Dialog.Title>{name}</Dialog.Title>\n                <Dialog.Description>\n                  {typeLabel}\n                  {subtitle ? ` · ${subtitle}` : \"\"}\n                </Dialog.Description>\n              </div>\n              {!busy ? (\n                <Dialog.Close aria-label=\"Close connection setup\">\n                  <XIcon size={18} />\n                </Dialog.Close>\n              ) : null}\n            </div>\n            <div className=\"og-session-capability-dialog-body\">{children}</div>\n          </Dialog.Content>\n        </Dialog.Portal>\n      </Dialog.Root>\n    </div>\n  );\n}\n","import {\n  authorizeConnectAttempt,\n  ConnectPopupClosedError,\n  ConnectController,\n  createBrowserConnectNavigation,\n  reserveBrowserConnectNavigation,\n  type ConnectAttempt,\n  type ConnectNavigation,\n  type ConnectOwnership,\n} from \"@opengeni/connect\";\nimport type { CapabilityCatalogItem } from \"@opengeni/sdk\";\nimport type { OpenGeniBrowserClient as OpenGeniClient } from \"@opengeni/sdk/browser\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { useConnect } from \"../hooks/use-connect\";\nimport { attachSessionCapability, sessionCapabilityTools } from \"../session-capability-policy\";\nimport { SessionCapabilityFrame } from \"./session-capability-frame\";\nimport { matchingActiveMcpConnections } from \"../mcp-connection-status\";\n\nexport type SessionMcpCapabilityCardProps = {\n  client: OpenGeniClient;\n  workspaceId: string;\n  sessionId: string;\n  capabilityId: string;\n  name: string;\n  rationale?: string;\n  /** Exact host route; no console-specific routing is assumed. */\n  returnUrl: string;\n  onConfigured?: (() => void | Promise<void>) | undefined;\n};\n\nexport type McpConnectionCardProps = Omit<SessionMcpCapabilityCardProps, \"sessionId\"> & {\n  /** Omit for connection management: no session tool selection is written. */\n  sessionId?: string;\n  dialogOnly?: boolean;\n  onClose?: (() => void) | undefined;\n  /**\n   * The provider only ever connects someone's own account (official Gmail,\n   * Slack's hosted MCP): no ownership choice, always personal.\n   */\n  personalOnly?: boolean;\n  /** The connect button's words, \"Connect Gmail\". Defaults to \"Continue to <name>\". */\n  connectLabel?: string;\n  /** The line under the dialog title. Defaults to the kind and provider domain. */\n  dialogSubtitle?: string;\n  /** The host's product copy for this connection, instead of the catalog description. */\n  description?: string;\n  /** The host's logo for this connection, when the catalog has no asset. */\n  logoSrc?: string | null;\n  /** The host's words for the ownership choice. */\n  ownershipCopy?: { legend: string; workspace: string; personal: string };\n};\n\n/** Native OAuth recommendation flow. Identity and endpoint come from the live\n * catalog, never from model-authored recommendation text. */\nexport function SessionMcpCapabilityCard(props: SessionMcpCapabilityCardProps) {\n  return <McpConnectionCard {...props} />;\n}\n\nexport function McpConnectionCard(props: McpConnectionCardProps) {\n  const [client, setClient] = useState(props.client);\n  const [generation, setGeneration] = useState(0);\n  if (client !== props.client) {\n    setClient(props.client);\n    setGeneration(generation + 1);\n  }\n  return (\n    <ScopedCard\n      key={`${generation}:${props.workspaceId}:${props.sessionId}:${props.capabilityId}`}\n      {...props}\n    />\n  );\n}\n\nfunction ScopedCard({\n  client,\n  workspaceId,\n  sessionId,\n  capabilityId,\n  name,\n  rationale = \"\",\n  returnUrl,\n  onConfigured,\n  dialogOnly = false,\n  onClose,\n  personalOnly = false,\n  connectLabel,\n  dialogSubtitle,\n  description: hostDescription,\n  logoSrc,\n  ownershipCopy,\n}: McpConnectionCardProps) {\n  const [controller] = useState(\n    () => new ConnectController(client.connectTransport(), workspaceId),\n  );\n  const view = useConnect(controller);\n  const [item, setItem] = useState<CapabilityCatalogItem | null>(null);\n  const [logo, setLogo] = useState<string | null>(null);\n  const [expanded, setExpanded] = useState(dialogOnly);\n  const [complete, setComplete] = useState(false);\n  const [connected, setConnected] = useState(false);\n  const [waiting, setWaiting] = useState(false);\n  const [reconciling, setReconciling] = useState(false);\n  const [busy, setBusy] = useState(false);\n  const [error, setError] = useState<string | null>(null);\n  const [notice, setNotice] = useState<string | null>(null);\n  const [retryFresh, setRetryFresh] = useState(false);\n  const [ownership, setOwnership] = useState<ConnectOwnership>(\n    personalOnly ? \"personal\" : \"workspace\",\n  );\n  const lifetime = useRef<AbortController | null>(null);\n  const authorization = useRef<AbortController | null>(null);\n  const operation = useRef<AbortController | null>(null);\n  const reservedPopup = useRef<(() => void) | null>(null);\n  const startKey = useRef(crypto.randomUUID());\n  const advanceKey = useRef(crypto.randomUUID());\n  const startInput = useRef<string | null>(null);\n  const storageKey = sessionId\n    ? `opengeni:session-connect:${workspaceId}:${sessionId}:${capabilityId}`\n    : `opengeni:workspace-connect:${workspaceId}:${capabilityId}`;\n  const current = () => !!lifetime.current && !lifetime.current.signal.aborted;\n\n  async function load(active: () => boolean = current) {\n    const invocation = lifetime.current;\n    const [catalog, session] = await Promise.all([\n      client.listCapabilities(workspaceId),\n      sessionId ? client.getSession(workspaceId, sessionId) : Promise.resolve(null),\n    ]);\n    if (!invocation || invocation.signal.aborted || lifetime.current !== invocation || !active())\n      return null;\n    let resolved = catalog.items.find((entry) => entry.id === capabilityId);\n    // Custom catalog entries may not declare authentication. Discover it from\n    // the live catalog's endpoint, never from recommendation/host copy.\n    if (resolved?.kind === \"mcp\" && !resolved.enabled && !resolved.authKind) {\n      const endpoint = resolved.mcpUrl ?? resolved.endpointUrl;\n      if (endpoint) {\n        const inspected = await client.inspectMcpAuthentication(workspaceId, endpoint);\n        if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n        if (inspected.kind === \"oauth2\") resolved = { ...resolved, authKind: \"oauth2\" };\n        else if (inspected.kind === \"unknown\")\n          throw new Error(inspected.message ?? \"Could not determine how to sign in. Try again.\");\n      }\n    }\n    if (!resolved || resolved.kind !== \"mcp\" || resolved.authKind !== \"oauth2\")\n      throw new Error(\n        \"This recommendation is not an available OAuth MCP integration. Review the current connection catalog.\",\n      );\n    setItem(resolved);\n    if (resolved.connectionRef)\n      setOwnership(resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\");\n    else if (\n      !item &&\n      (personalOnly || resolved.metadata?.defaultConnectionOwnership === \"personal\")\n    )\n      setOwnership(\"personal\");\n    let accountReady = false;\n    if (resolved.enabled && resolved.connectionRef) {\n      const connections =\n        resolved.connectionRef.subjectScope === \"subject\"\n          ? await client.listOwnConnectionAccounts(workspaceId)\n          : await client.listConnections(workspaceId);\n      if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n      const matches = matchingActiveMcpConnections(resolved, connections);\n      accountReady = matches.length === 1;\n    }\n    if (invocation.signal.aborted || lifetime.current !== invocation || !active()) return null;\n    const selected =\n      session?.toolPolicy.mode === \"workspace_default\"\n        ? session.effectiveToolPolicy?.selectedIds\n        : session?.tools.filter((tool) => tool.kind === \"mcp\").map((tool) => tool.id);\n    setConnected(accountReady);\n    setComplete(\n      accountReady &&\n        !!selected &&\n        sessionCapabilityTools(resolved).every((tool) => selected.includes(tool.id)),\n    );\n    return resolved;\n  }\n\n  useEffect(() => {\n    const abort = new AbortController();\n    lifetime.current = abort;\n    // Mount reads are scoped to this effect, not to the user-action lock.\n    // Strict Mode may cancel the first mount while its promise is still in\n    // flight; that must not suppress the replacement mount's initialization.\n    if (dialogOnly) setBusy(true);\n    void (async () => {\n      await load();\n      if (abort.signal.aborted || !dialogOnly) return;\n      await recoverSavedAttempt();\n    })()\n      .catch((failure) => {\n        if (!abort.signal.aborted)\n          setError(\n            failure instanceof Error ? failure.message : \"Couldn't load connection details.\",\n          );\n      })\n      .finally(() => {\n        if (!abort.signal.aborted && dialogOnly) setBusy(false);\n      });\n    return () => {\n      abort.abort();\n    };\n    // ScopedCard remounts for client/workspace/session/capability changes.\n    // These reads initialize that scope; rerunning on action closures would\n    // cancel initialization whenever its own state updates render the card.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client, workspaceId, sessionId, capabilityId, dialogOnly]);\n\n  useEffect(() => {\n    const path = item?.logoAssetPath;\n    setLogo(null);\n    if (!path?.startsWith(\"catalog-assets/\")) return;\n    const abort = new AbortController();\n    let objectUrl: string | null = null;\n    // Embeds can require authentication even for the API's public catalog\n    // asset route. Use the client's transport instead of an unauthenticated img.\n    void client\n      .downloadCatalogAsset(path, { signal: abort.signal })\n      .then((blob) => {\n        if (abort.signal.aborted || !blob.type.startsWith(\"image/\") || blob.size > 2_000_000)\n          return;\n        objectUrl = URL.createObjectURL(blob);\n        setLogo(objectUrl);\n      })\n      .catch(() => {\n        /* Keep the provider's initials if its passive mark is unavailable. */\n      });\n    return () => {\n      abort.abort();\n      if (objectUrl) URL.revokeObjectURL(objectUrl);\n    };\n  }, [client, item?.logoAssetPath]);\n\n  async function run(action: (active: () => boolean) => Promise<void>) {\n    if (operation.current || !current()) return;\n    const pending = new AbortController();\n    operation.current = pending;\n    const active = () => current() && operation.current === pending && !pending.signal.aborted;\n    setBusy(true);\n    setError(null);\n    setNotice(null);\n    setRetryFresh(false);\n    try {\n      await action(active);\n    } catch (failure) {\n      if (active()) {\n        if (failure instanceof ConnectPopupClosedError) setNotice(failure.message);\n        else\n          setError(\n            failure instanceof Error\n              ? failure.message\n              : \"Connection setup could not finish. Try again.\",\n          );\n      }\n    } finally {\n      if (operation.current === pending) {\n        operation.current = null;\n        if (current()) setBusy(false);\n      }\n    }\n  }\n\n  function remember(attemptId: string) {\n    // An opaque recovery hint only. The backend rechecks the authenticated\n    // owner on recover; this value never grants access or proves completion.\n    try {\n      sessionStorage.setItem(storageKey, attemptId);\n    } catch {\n      /* Storage may be disabled. */\n    }\n  }\n\n  async function reconcile(attempt: ConnectAttempt, active: () => boolean = current) {\n    if (!active()) return;\n    if (attempt.state !== \"complete\" || !attempt.account || !attempt.credentialsCommitted) return;\n    const resolved = await load(active);\n    if (!resolved || !active()) return;\n    const connection = (await client.listConnections(workspaceId)).find(\n      (entry) => entry.id === attempt.account!.id,\n    );\n    if (!active()) return;\n    if (\n      !connection ||\n      connection.status !== \"active\" ||\n      connection.kind !== \"oauth2\" ||\n      connection.metadata.mcpUrl !== (resolved.mcpUrl ?? resolved.endpointUrl) ||\n      (connection.subjectId !== null) !== (attempt.ownership === \"personal\")\n    )\n      throw new Error(\n        \"The authorized account does not match this integration. Review its connection settings.\",\n      );\n    const previous = resolved.connectionRef;\n    if (\n      resolved.enabled &&\n      previous?.subjectScope !== \"subject\" &&\n      previous?.connectionId &&\n      previous.connectionId !== connection.id\n    )\n      throw new Error(\n        \"This integration's selected account changed during setup. Review it before continuing.\",\n      );\n    await client.enableCapability(workspaceId, capabilityId, {\n      connectionRef:\n        attempt.ownership === \"personal\"\n          ? { providerDomain: connection.providerDomain, kind: \"oauth2\", subjectScope: \"subject\" }\n          : {\n              providerDomain: connection.providerDomain,\n              kind: \"oauth2\",\n              subjectScope: \"workspace\",\n              connectionId: connection.id,\n            },\n    });\n    if (!active()) return;\n    const enabled = await load(active);\n    if (enabled && active()) {\n      await finishConnection(enabled, active);\n    }\n    if (!active()) return;\n    try {\n      sessionStorage.removeItem(storageKey);\n    } catch {\n      /* Recovery hint only. */\n    }\n  }\n\n  async function open() {\n    setExpanded(true);\n    await run(async (active) => {\n      await load(active);\n      if (!active()) return;\n      await recoverSavedAttempt(active);\n    });\n  }\n\n  async function recoverSavedAttempt(active: () => boolean = current) {\n    let saved: string | null = null;\n    try {\n      saved = sessionStorage.getItem(storageKey);\n    } catch {\n      /* No persisted attempt. */\n    }\n    if (saved) {\n      const attempt = await controller.recover(saved);\n      if (!active()) return;\n      if ([\"failed\", \"expired\", \"cancelled\"].includes(attempt.state)) setRetryFresh(true);\n      if (attempt.state === \"complete\") setReconciling(true);\n      try {\n        await reconcile(attempt, active);\n      } finally {\n        if (active()) setReconciling(false);\n      }\n    }\n  }\n\n  async function begin(fresh = false) {\n    await run(async (active) => {\n      if (\n        fresh ||\n        (view.attempt && [\"failed\", \"expired\", \"cancelled\"].includes(view.attempt.state))\n      ) {\n        startKey.current = crypto.randomUUID();\n        advanceKey.current = crypto.randomUUID();\n      }\n      const reserved = reserveBrowserConnectNavigation(window);\n      reservedPopup.current = reserved.close;\n      try {\n        const resolved = await load(active);\n        if (!resolved || !active()) return;\n        if (\n          resolved.connectionRef &&\n          ownership !==\n            (resolved.connectionRef.subjectScope === \"subject\" ? \"personal\" : \"workspace\")\n        )\n          throw new Error(\n            \"The connection ownership changed. Review the current account before continuing.\",\n          );\n        const mcpUrl = resolved.mcpUrl ?? resolved.endpointUrl;\n        if (!mcpUrl)\n          throw new Error(\n            \"The current catalog has no authorization endpoint for this integration.\",\n          );\n        // Never silently replace an already selected account. Reauthorization\n        // stays on its exact native connection ID.\n        let reconnectAccountId = resolved.connectionRef?.connectionId ?? undefined;\n        if (resolved.connectionRef?.subjectScope === \"subject\") {\n          const connections = (await client.listConnections(workspaceId)).filter(\n            (entry) =>\n              entry.subjectId !== null &&\n              entry.kind === \"oauth2\" &&\n              entry.metadata.mcpUrl === mcpUrl,\n          );\n          if (!active()) return;\n          if (connections.length > 1)\n            throw new Error(\n              \"More than one personal account matches. Choose the account in connection settings before reconnecting.\",\n            );\n          reconnectAccountId = connections[0]?.id;\n        }\n        // A closed request can still have reached the server. Keep its key for\n        // an exact replay, but never reuse it when ownership or another input\n        // changes while the user reopens setup.\n        const input = JSON.stringify({ ownership, returnUrl, reconnectAccountId, mcpUrl });\n        if (startInput.current !== null && startInput.current !== input) {\n          startKey.current = crypto.randomUUID();\n          advanceKey.current = crypto.randomUUID();\n        }\n        startInput.current = input;\n        let attempt = await controller.begin({\n          providerId: \"mcp-oauth\",\n          ownership,\n          returnUrl,\n          idempotencyKey: startKey.current,\n          ...(reconnectAccountId ? { reconnectAccountId } : {}),\n        });\n        if (!active()) return;\n        remember(attempt.id);\n        if (attempt.state === \"credential_input\")\n          attempt = await controller.advance(\n            { type: \"credentials\", values: { mcpUrl } },\n            advanceKey.current,\n          );\n        if (!active()) return;\n        if (attempt.nextAction.type === \"authorize\")\n          await performAuthorization(attempt, reserved.navigation, active);\n        else await reconcile(attempt, active);\n      } finally {\n        if (reservedPopup.current === reserved.close) reservedPopup.current = null;\n        reserved.close();\n      }\n    });\n  }\n\n  async function performAuthorization(\n    attempt: ConnectAttempt,\n    navigation: ConnectNavigation,\n    active: () => boolean,\n  ) {\n    if (!active()) return;\n    const pending = new AbortController();\n    authorization.current = pending;\n    const abortOnUnmount = () => pending.abort(lifetime.current?.signal.reason);\n    lifetime.current!.signal.addEventListener(\"abort\", abortOnUnmount, { once: true });\n    setWaiting(true);\n    try {\n      const result = await authorizeConnectAttempt(controller.transport, attempt, navigation, {\n        mode: \"popup\",\n        signal: pending.signal,\n      });\n      if (!active() || !result) return;\n      setWaiting(false);\n      setReconciling(true);\n      await reconcile(result, active);\n      if (!active()) return;\n      if (result.state === \"cancelled\") {\n        setNotice(\"Sign-in was cancelled. You can try connecting again.\");\n        setRetryFresh(true);\n        return;\n      }\n      if (result.state !== \"complete\") {\n        if ([\"failed\", \"expired\"].includes(result.state)) setRetryFresh(true);\n        throw new Error(\"Sign-in did not finish. You can try connecting again.\");\n      }\n    } finally {\n      lifetime.current?.signal.removeEventListener(\"abort\", abortOnUnmount);\n      if (authorization.current === pending) authorization.current = null;\n      if (active()) {\n        setReconciling(false);\n        setWaiting(false);\n      }\n    }\n  }\n\n  function authorize(attempt: ConnectAttempt) {\n    // run invokes action synchronously, retaining the browser click gesture.\n    return run((active) =>\n      performAuthorization(attempt, createBrowserConnectNavigation(window), active),\n    );\n  }\n\n  async function finishConnection(\n    capability: CapabilityCatalogItem,\n    active: () => boolean = current,\n  ) {\n    if (!sessionId) {\n      // Connection management does not select session tools.\n      await onConfigured?.();\n      if (!active()) return;\n      setComplete(true);\n      setExpanded(false);\n      onClose?.();\n      return;\n    }\n    if (capability.connectionRef && capability.connectionRef.subjectScope !== \"subject\") {\n      const selected = (await client.listConnections(workspaceId)).find(\n        (entry) => entry.id === capability.connectionRef?.connectionId,\n      );\n      if (!active()) return;\n      if (!selected || selected.status !== \"active\")\n        throw new Error(\"This account needs reconnection before it can be used here.\");\n    }\n    if (capability.connectionRef?.subjectScope === \"subject\") {\n      const accounts = await client.listOwnConnectionAccounts(workspaceId);\n      if (!active()) return;\n      if (matchingActiveMcpConnections(capability, accounts).length === 0)\n        throw new Error(\"Your account needs reconnection before it can be used here.\");\n    }\n    if (!active()) return;\n    await attachSessionCapability(client, workspaceId, sessionId, capability, active);\n    if (!active()) return;\n    await onConfigured?.();\n    if (!active()) return;\n    setComplete(true);\n    setExpanded(false);\n  }\n\n  async function useHere() {\n    await run(async (active) => {\n      if (item) await finishConnection(item, active);\n    });\n  }\n\n  function close() {\n    const pending = operation.current;\n    if (pending) {\n      operation.current = null;\n      pending.abort(new ConnectPopupClosedError());\n      authorization.current?.abort(new ConnectPopupClosedError());\n      authorization.current = null;\n      reservedPopup.current?.();\n      setBusy(false);\n      setWaiting(false);\n      setReconciling(false);\n    }\n    setExpanded(false);\n    onClose?.();\n  }\n\n  return (\n    <SessionCapabilityFrame\n      name={item?.name ?? name}\n      subtitle={dialogSubtitle !== undefined ? \"\" : (item?.providerDomain ?? \"\")}\n      logo={logo ?? logoSrc ?? null}\n      typeLabel={dialogSubtitle ?? \"MCP server\"}\n      description={hostDescription || item?.description || rationale}\n      skill={false}\n      expanded={expanded}\n      complete={complete}\n      actionLabel={\n        connected\n          ? sessionId\n            ? \"Use in this conversation\"\n            : \"Connected\"\n          : `Connect ${item?.name ?? name}`\n      }\n      note={\n        sessionId\n          ? \"Review access before signing in. You'll return to this conversation after authorization.\"\n          : \"Review access before signing in. You'll return here after authorization.\"\n      }\n      onOpen={() => void open()}\n      onClose={close}\n      dialogOnly={dialogOnly}\n    >\n      <div className=\"og-session-capability-setup\">\n        {error ? <p role=\"alert\">{error}</p> : null}\n        {notice ? (\n          <p role=\"status\" className=\"og-session-capability-notice\">\n            {notice}\n          </p>\n        ) : null}\n        {!item ? (\n          <>\n            <p role=\"status\">\n              {busy ? \"Loading connection details…\" : \"Connection details are unavailable.\"}\n            </p>\n            <button disabled={busy} onClick={() => void open()}>\n              Retry\n            </button>\n          </>\n        ) : (\n          <>\n            <p>{hostDescription || item.description || rationale}</p>\n            {busy ? (\n              <>\n                <p role=\"status\" className=\"og-session-capability-progress\">\n                  {waiting\n                    ? `Finish signing in with ${item.name} in the opened window. This will close automatically when you’re connected.`\n                    : reconciling\n                      ? \"Finishing your connection…\"\n                      : \"Preparing your connection…\"}\n                </p>\n                {waiting ? (\n                  <button\n                    type=\"button\"\n                    className=\"og-session-capability-stop\"\n                    onClick={() => authorization.current?.abort(new ConnectPopupClosedError())}\n                  >\n                    Stop waiting\n                  </button>\n                ) : null}\n              </>\n            ) : !connected ? (\n              <>\n                {!item.connectionRef && !personalOnly ? (\n                  <fieldset disabled={busy}>\n                    <legend>{ownershipCopy?.legend ?? \"Who can use this connection?\"}</legend>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"workspace\"}\n                        onChange={() => setOwnership(\"workspace\")}\n                      />\n                      Everyone in this workspace\n                    </label>\n                    <label>\n                      <input\n                        type=\"radio\"\n                        name={`${capabilityId}-ownership`}\n                        checked={ownership === \"personal\"}\n                        onChange={() => setOwnership(\"personal\")}\n                      />\n                      Only me\n                    </label>\n                  </fieldset>\n                ) : null}\n                <p className=\"og-session-capability-scope\">\n                  {personalOnly && ownership === \"personal\"\n                    ? \"Connects your own account. Only work you start can use it.\"\n                    : ownershipCopy\n                      ? ownership === \"workspace\"\n                        ? ownershipCopy.workspace\n                        : ownershipCopy.personal\n                      : ownership === \"workspace\"\n                        ? sessionId\n                          ? \"This connection will be available to your workspace and used in this conversation.\"\n                          : \"This connection will be available to your workspace.\"\n                        : \"This connection belongs to you. Your messages can use it; other participants use their own accounts.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  onClick={() => {\n                    if (notice || retryFresh) void begin(true);\n                    else if (\n                      view.attempt?.nextAction.type === \"authorize\" &&\n                      view.attempt.ownership === ownership\n                    )\n                      void authorize(view.attempt);\n                    else void begin();\n                  }}\n                >\n                  {retryFresh ||\n                  ((error || notice) && view.attempt?.nextAction.type === \"authorize\")\n                    ? \"Try signing in again\"\n                    : (connectLabel ?? `Continue to ${item.name}`)}\n                </button>\n              </>\n            ) : null}\n            {connected && !busy ? (\n              <>\n                <p className=\"og-session-capability-scope\">\n                  {sessionId\n                    ? \"Your account is connected. Enable it for this conversation to finish.\"\n                    : \"Your account is connected.\"}\n                </p>\n                <button\n                  className=\"og-session-capability-primary\"\n                  disabled={busy || view.busy}\n                  onClick={() => void useHere()}\n                >\n                  {sessionId ? \"Use in this conversation\" : \"Done\"}\n                </button>\n              </>\n            ) : null}\n          </>\n        )}\n      </div>\n    </SessionCapabilityFrame>\n  );\n}\n","import type { CapabilityCatalogItem, ConnectionMetadata } from \"@opengeni/sdk\";\n\n/** Status only; runtime use is authorized for the authenticated initiating user. */\nexport function matchingActiveMcpConnections(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  return matchingMcpConnections(item, connections).filter((entry) => entry.status === \"active\");\n}\n\nfunction matchingMcpConnections(item: CapabilityCatalogItem, connections: ConnectionMetadata[]) {\n  const ref = item.connectionRef;\n  if (!item.enabled || !ref) return [];\n  return connections.filter(\n    (entry) =>\n      entry.status !== \"revoked\" &&\n      entry.kind === \"oauth2\" &&\n      entry.metadata.mcpUrl === (item.mcpUrl ?? item.endpointUrl) &&\n      (ref.subjectScope !== \"subject\"\n        ? entry.id === ref.connectionId && entry.subjectId === null\n        : entry.subjectId !== null),\n  );\n}\n\n/** Installation availability is not account readiness. Revoked history is not actionable. */\nexport function mcpConnectionDiscoveryState(\n  item: CapabilityCatalogItem,\n  connections: ConnectionMetadata[],\n) {\n  const matching = matchingMcpConnections(item, connections);\n  const active = matching.filter((entry) => entry.status === \"active\");\n  if (active.length === 1) return { status: \"added\", label: \"Connected\" } as const;\n  if (matching.length > 0) return { status: \"attention\", label: \"Review connection\" } as const;\n  return { status: \"available\", label: \"Connect\" } as const;\n}\n"],"mappings":";;;;;;AACA,SAAS,SAAS,4BAA4B;AAGvC,SAAS,WAAW,YAA+B;AACxD,QAAM,WAAW;AAAA,IACf,WAAW;AAAA,IACX,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACA,QAAM,UAAU;AAAA,IACd,OAAO;AAAA,MACL,OAAO,WAAW,MAAM,KAAK,UAAU;AAAA,MACvC,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,eAAe,WAAW,cAAc,KAAK,UAAU;AAAA,MACvD,SAAS,WAAW,QAAQ,KAAK,UAAU;AAAA,MAC3C,QAAQ,WAAW,OAAO,KAAK,UAAU;AAAA,IAC3C;AAAA,IACA,CAAC,UAAU;AAAA,EACb;AACA,SAAO,QAAQ,OAAO,EAAE,GAAG,UAAU,GAAG,QAAQ,IAAI,CAAC,UAAU,OAAO,CAAC;AACzE;;;ACZO,SAAS,uBAAuB,MAA6B;AAClE,QAAM,WAAW,KAAK,SAAS,QAAQ,KAAK,SAAS,cAAc;AACnE,SAAO,YAAY,CAAC,KAAK,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,QAAQ,IACrF,CAAC,GAAG,KAAK,OAAO,EAAE,MAAM,OAAgB,IAAI,SAAS,CAAC,IACtD,KAAK;AACX;AAKA,eAAsB,wBACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACrB;AACf,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG;AACjD,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,MAAM,OAAO,WAAW,aAAa,SAAS;AAC9D,MAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,MAAI,QAAS,OAAM,OAAO,wBAAwB,aAAa,WAAW,OAAO;AACnF;AAEA,SAAS,2BACP,SACA,MACuC;AACvC,QAAM,QAAQ,uBAAuB,IAAI;AACzC,MAAI,KAAK,SAAS,WAAW,MAAM,WAAW,EAAG,QAAO;AAGxD,MAAI,WAAW,QAAQ,MAAM;AAAA,IAC3B,CAAC,SAAS,CAAC,QAAQ,qBAAqB,cAAc,SAAS,KAAK,EAAE;AAAA,EACxE;AACA,MAAI,QAAQ,WAAW,SAAS,qBAAqB;AACnD,UAAM,SAAS,QAAQ;AACvB,QAAI,CAAC,UAAU,OAAO;AACpB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAKF,eAAW,OAAO,aACf,OAAO,CAAC,OAAO,CAAC,OAAO,aAAa,SAAS,EAAE,CAAC,EAChD;AAAA,MACC,CAAC,OACC,QAAQ,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,SAAS,KAAK,OAAO,EAAE,KAAK;AAAA,QACrE,MAAM;AAAA,QACN;AAAA,QACA,UAAU;AAAA,MACZ;AAAA,IACJ;AAAA,EACJ;AACA,QAAM,YAAY,MAAM;AAAA,IACtB,CAAC,SACC,CAAC,QAAQ,qBAAqB,aAAa,SAAS,KAAK,EAAE,KAC3D,CAAC,SAAS,KAAK,CAAC,YAAY,QAAQ,SAAS,KAAK,QAAQ,QAAQ,OAAO,KAAK,EAAE;AAAA,EACpF;AACA,QAAM,cAAc,MAAM,QAAQ,KAAK,UAAU,kBAAkB,IAC9D,KAAK,SAAS,mBAAmB;AAAA,IAChC,CAAC,SAAyB,OAAO,SAAS;AAAA,EAC5C,IACA,CAAC;AACL,QAAM,aAAa,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,QAAQ,oBAAoB,GAAG,WAAW,CAAC,CAAC;AAC/E,MAAI,UAAU,WAAW,KAAK,WAAW,WAAW,QAAQ,mBAAmB;AAC7E,WAAO;AACT,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,CAAC,GAAG,UAAU,GAAG,SAAS;AAAA,IACjC,oBAAoB;AAAA,IACpB,iBAAiB,QAAQ;AAAA,EAC3B;AACF;AAiBA,eAAsB,+BACpB,QACA,aACA,WACA,MACA,eAA8B,MAAM,MACE;AACtC,QAAM,WAAoD,CAAC;AAC3D,MAAI,KAAK,SAAS,WAAW,uBAAuB,IAAI,EAAE,WAAW;AACnE,WAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,SAAS;AACnE,QAAM,UAAU,oBAAI,IAAY;AAChC,MAAI,KAAoB;AACxB,SAAO,IAAI;AACT,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,QAAQ,IAAI,EAAE,EAAG,OAAM,IAAI,MAAM,8CAA8C;AACnF,YAAQ,IAAI,EAAE;AACd,UAAM,UAAU,MAAM,OAAO,WAAW,aAAa,EAAE;AACvD,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,2BAA2B,SAAS,IAAI;AACxD,aAAS,KAAK;AAAA,MACZ;AAAA,MACA,OAAO,QAAQ,SAAS;AAAA,MACxB,iBAAiB,QAAQ,mBAAmB;AAAA,MAC5C,mBAAmB,QAAQ;AAAA,MAC3B;AAAA,IACF,CAAC;AAGD,QAAI,CAAC,QAAS;AACd,SAAK,QAAQ,mBAAmB;AAAA,EAClC;AACA,SAAO,EAAE,aAAa,WAAW,cAAc,KAAK,IAAI,UAAU,SAAS,QAAQ,EAAE;AACvF;AAKA,eAAsB,6BACpB,QACA,MACA,eAA8B,MAAM,MACrB;AACf,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,UAAM,UAAU,MAAM,OAAO,WAAW,KAAK,aAAa,SAAS,EAAE;AACrE,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QACE,QAAQ,sBAAsB,SAAS,sBACtC,QAAQ,mBAAmB,UAAU,SAAS;AAE/C,YAAM,IAAI,MAAM,2EAA2E;AAAA,EAC/F;AACA,aAAW,YAAY,KAAK,UAAU;AACpC,QAAI,CAAC,aAAa,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACxE,QAAI,SAAS,SAAS;AACpB,YAAM,UAAU,MAAM,OAAO;AAAA,QAC3B,KAAK;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AACA,UACE,SAAS,QAAQ,SAAS,cAC1B,SAAS,QAAQ,mBAAmB;AAAA,QAClC,CAAC,SAAS,CAAC,QAAQ,mBAAmB,SAAS,IAAI;AAAA,MACrD;AAEA,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,IACJ;AAAA,EACF;AACF;AAIA,eAAsB,+BACpB,QACA,aACA,WACA,cACe;AACf,MAAI,CAAC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AACF,QAAM,aAAa,MAAM,OAAO,iBAAiB,WAAW,GAAG,MAAM;AAAA,IACnE,CAAC,SAAS,KAAK,OAAO;AAAA,EACxB;AACA,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,8EAA8E;AAChG,QAAM,wBAAwB,QAAQ,aAAa,WAAW,SAAS;AACzE;;;ACnMA,SAAS,WAAW,UAAU,iBAAiB,aAAa;AAC5D,SAAS,cAAc;AACvB,SAAS,QAAQ,gBAAgD;AA0CzD,SAwCJ,UAxCI,KA0CF,YA1CE;AALR,SAAS,KAAK,EAAE,KAAK,KAAK,GAAyC;AACjE,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAwB,IAAI;AACxD,SACE,oBAAC,UAAK,WAAU,8BAA6B,eAAW,MACrD,iBAAO,WAAW,MACjB,oBAAC,SAAI,KAAU,KAAI,IAAG,SAAQ,QAAO,UAAS,SAAQ,SAAS,MAAM,UAAU,GAAG,GAAG,IAErF,KAAK,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,YAAY,GAExC;AAEJ;AAIO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA;AACF,GAAgC;AAC9B,QAAM,cAAc,OAA0B,IAAI;AAClD,QAAM,YAAY,OAAoB,IAAI;AAC1C,QAAM,YAAY,UAAU;AAC5B,QAAM,aAAa,WAAW;AAC9B,QAAM,cAAc,oBAAoB,WAAW,OAAO;AAC1D,QAAM,WACJ,iCACE;AAAA,wBAAC,QAAK,KAAK,MAAM,MAAY;AAAA,IAC7B,qBAAC,SAAI,WAAU,kCACb;AAAA,0BAAC,QAAI,gBAAK;AAAA,MACV,oBAAC,UAAM,oBAAS;AAAA,OAClB;AAAA,IACA,oBAAC,UAAK,WAAU,8BAA8B,qBAAU;AAAA,KAC1D;AAEF,SACE,qBAAC,SAAI,WAAU,yBACb;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ;AAAA,QACR,OAAO,aAAa,EAAE,SAAS,OAAO,IAAI;AAAA,QAC1C,KAAK;AAAA,QACL,UAAU;AAAA,QACV,cAAY,GAAG,IAAI;AAAA,QACnB,cAAY,WAAW,aAAa,WAAW,UAAU;AAAA,QACzD,WAAU;AAAA,QAEV;AAAA,+BAAC,SAAI,WAAU,gCACZ;AAAA;AAAA,YACA,WAAW,oBAAC,aAAU,MAAM,IAAI,eAAW,MAAC,IAAK;AAAA,aACpD;AAAA,UACC,WACC,oBAAC,OAAE,MAAK,UAAS,WAAU,8BACxB,4BACE,QAAQ,6BAA0B,kDACvC,IAEA,iCACE;AAAA,gCAAC,OAAE,WAAU,8BAA8B,uBAAY;AAAA,YACtD,cACC,oBAAC,SAAI,WAAU,+BAA+B,uBAAY,IACxD,oBACF,oBAAC,SAAI,WAAU,iCAAgC,oBAAiB,IAC9D,+BAAC,UAAK,MAAK,QACT;AAAA,kCAAC,YAAS,MAAM,IAAI,eAAW,MAAC;AAAA,cAC/B;AAAA,eACH,GACF,IAEA,qBAAC,SAAI,WAAU,iCACb;AAAA,mCAAC,UACC;AAAA,oCAAC,mBAAgB,MAAM,IAAI,eAAW,MAAC;AAAA,gBACtC,QAAQ,yCAAsC;AAAA,iBACjD;AAAA,cACA;AAAA,gBAAC;AAAA;AAAA,kBACC,KAAK;AAAA,kBACL,MAAK;AAAA,kBACL,SAAS;AAAA,kBACT,UAAU;AAAA,kBACV,iBAAe,cAAc,WAAW;AAAA,kBACxC,iBAAe,cAAc,WAAW;AAAA,kBAEvC;AAAA;AAAA,cACH;AAAA,eACF;AAAA,aAEJ;AAAA,UAED;AAAA;AAAA;AAAA,IACH;AAAA,IACC,CAAC,YAAY,CAAC,cAAc,OAC3B,oBAAC,OAAE,WAAU,8BAA8B,gBAAK,IAC9C;AAAA,IACJ;AAAA,MAAC,OAAO;AAAA,MAAP;AAAA,QACC,MAAM,YAAY,CAAC;AAAA,QACnB,cAAc,CAAC,SAAS;AACtB,cAAI,CAAC,QAAQ,CAAC,KAAM,SAAQ;AAAA,QAC9B;AAAA,QAEA,+BAAC,OAAO,QAAP,EACC;AAAA,8BAAC,OAAO,SAAP,EAAe,WAAU,yCAAwC,OAAO,aAAa;AAAA,UACtF;AAAA,YAAC,OAAO;AAAA,YAAP;AAAA,cACC,WAAU;AAAA,cACV,OAAO;AAAA,cACP,iBAAiB,CAAC,UAAU;AAC1B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,mBAAmB,CAAC,UAAU;AAC5B,oBAAI,KAAM,OAAM,eAAe;AAAA,cACjC;AAAA,cACA,kBAAkB,CAAC,UAAU;AAC3B,sBAAM,eAAe;AACrB,sBAAM,SAAS,UAAU,SAAS,cAC9B,UAAU,UACV,WAAW;AACf,oBAAI,QAAQ,YAAa,QAAO,MAAM;AAAA,cACxC;AAAA,cAEA;AAAA,qCAAC,SAAI,WAAU,uCACb;AAAA,sCAAC,QAAK,KAAK,MAAM,MAAY;AAAA,kBAC7B,qBAAC,SACC;AAAA,wCAAC,OAAO,OAAP,EAAc,gBAAK;AAAA,oBACpB,qBAAC,OAAO,aAAP,EACE;AAAA;AAAA,sBACA,WAAW,SAAM,QAAQ,KAAK;AAAA,uBACjC;AAAA,qBACF;AAAA,kBACC,CAAC,OACA,oBAAC,OAAO,OAAP,EAAa,cAAW,0BACvB,8BAAC,SAAM,MAAM,IAAI,GACnB,IACE;AAAA,mBACN;AAAA,gBACA,oBAAC,SAAI,WAAU,qCAAqC,UAAS;AAAA;AAAA;AAAA,UAC/D;AAAA,WACF;AAAA;AAAA,IACF;AAAA,KACF;AAEJ;;;ACpMA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAGP,SAAS,WAAW,UAAAA,SAAQ,YAAAC,iBAAgB;;;ACTrC,SAAS,6BACd,MACA,aACA;AACA,SAAO,uBAAuB,MAAM,WAAW,EAAE,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AAC9F;AAEA,SAAS,uBAAuB,MAA6B,aAAmC;AAC9F,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,WAAW,CAAC,IAAK,QAAO,CAAC;AACnC,SAAO,YAAY;AAAA,IACjB,CAAC,UACC,MAAM,WAAW,aACjB,MAAM,SAAS,YACf,MAAM,SAAS,YAAY,KAAK,UAAU,KAAK,iBAC9C,IAAI,iBAAiB,YAClB,MAAM,OAAO,IAAI,gBAAgB,MAAM,cAAc,OACrD,MAAM,cAAc;AAAA,EAC5B;AACF;AAGO,SAAS,4BACd,MACA,aACA;AACA,QAAM,WAAW,uBAAuB,MAAM,WAAW;AACzD,QAAM,SAAS,SAAS,OAAO,CAAC,UAAU,MAAM,WAAW,QAAQ;AACnE,MAAI,OAAO,WAAW,EAAG,QAAO,EAAE,QAAQ,SAAS,OAAO,YAAY;AACtE,MAAI,SAAS,SAAS,EAAG,QAAO,EAAE,QAAQ,aAAa,OAAO,oBAAoB;AAClF,SAAO,EAAE,QAAQ,aAAa,OAAO,UAAU;AACjD;;;ADqBS,SAogBC,YAAAC,WApgBD,OAAAC,MAogBC,QAAAC,aApgBD;AADF,SAAS,yBAAyB,OAAsC;AAC7E,SAAO,gBAAAD,KAAC,qBAAmB,GAAG,OAAO;AACvC;AAEO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,CAAC,QAAQ,SAAS,IAAIE,UAAS,MAAM,MAAM;AACjD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,CAAC;AAC9C,MAAI,WAAW,MAAM,QAAQ;AAC3B,cAAU,MAAM,MAAM;AACtB,kBAAc,aAAa,CAAC;AAAA,EAC9B;AACA,SACE,gBAAAF;AAAA,IAAC;AAAA;AAAA,MAEE,GAAG;AAAA;AAAA,IADC,GAAG,UAAU,IAAI,MAAM,WAAW,IAAI,MAAM,SAAS,IAAI,MAAM,YAAY;AAAA,EAElF;AAEJ;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA,eAAe;AAAA,EACf;AAAA,EACA;AAAA,EACA,aAAa;AAAA,EACb;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,UAAU,IAAIE;AAAA,IACnB,MAAM,IAAI,kBAAkB,OAAO,iBAAiB,GAAG,WAAW;AAAA,EACpE;AACA,QAAM,OAAO,WAAW,UAAU;AAClC,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAuC,IAAI;AACnE,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAwB,IAAI;AACpD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,UAAU;AACnD,QAAM,CAAC,UAAU,WAAW,IAAIA,UAAS,KAAK;AAC9C,QAAM,CAAC,WAAW,YAAY,IAAIA,UAAS,KAAK;AAChD,QAAM,CAAC,SAAS,UAAU,IAAIA,UAAS,KAAK;AAC5C,QAAM,CAAC,aAAa,cAAc,IAAIA,UAAS,KAAK;AACpD,QAAM,CAAC,MAAM,OAAO,IAAIA,UAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAwB,IAAI;AACtD,QAAM,CAAC,QAAQ,SAAS,IAAIA,UAAwB,IAAI;AACxD,QAAM,CAAC,YAAY,aAAa,IAAIA,UAAS,KAAK;AAClD,QAAM,CAAC,WAAW,YAAY,IAAIA;AAAA,IAChC,eAAe,aAAa;AAAA,EAC9B;AACA,QAAM,WAAWC,QAA+B,IAAI;AACpD,QAAM,gBAAgBA,QAA+B,IAAI;AACzD,QAAM,YAAYA,QAA+B,IAAI;AACrD,QAAM,gBAAgBA,QAA4B,IAAI;AACtD,QAAM,WAAWA,QAAO,OAAO,WAAW,CAAC;AAC3C,QAAM,aAAaA,QAAO,OAAO,WAAW,CAAC;AAC7C,QAAM,aAAaA,QAAsB,IAAI;AAC7C,QAAM,aAAa,YACf,4BAA4B,WAAW,IAAI,SAAS,IAAI,YAAY,KACpE,8BAA8B,WAAW,IAAI,YAAY;AAC7D,QAAM,UAAU,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,SAAS,QAAQ,OAAO;AAErE,iBAAe,KAAK,SAAwB,SAAS;AACnD,UAAM,aAAa,SAAS;AAC5B,UAAM,CAAC,SAAS,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC3C,OAAO,iBAAiB,WAAW;AAAA,MACnC,YAAY,OAAO,WAAW,aAAa,SAAS,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC9E,CAAC;AACD,QAAI,CAAC,cAAc,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO;AACzF,aAAO;AACT,QAAI,WAAW,QAAQ,MAAM,KAAK,CAAC,UAAU,MAAM,OAAO,YAAY;AAGtE,QAAI,UAAU,SAAS,SAAS,CAAC,SAAS,WAAW,CAAC,SAAS,UAAU;AACvE,YAAM,WAAW,SAAS,UAAU,SAAS;AAC7C,UAAI,UAAU;AACZ,cAAM,YAAY,MAAM,OAAO,yBAAyB,aAAa,QAAQ;AAC7E,YAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAI,UAAU,SAAS,SAAU,YAAW,EAAE,GAAG,UAAU,UAAU,SAAS;AAAA,iBACrE,UAAU,SAAS;AAC1B,gBAAM,IAAI,MAAM,UAAU,WAAW,gDAAgD;AAAA,MACzF;AAAA,IACF;AACA,QAAI,CAAC,YAAY,SAAS,SAAS,SAAS,SAAS,aAAa;AAChE,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,YAAQ,QAAQ;AAChB,QAAI,SAAS;AACX,mBAAa,SAAS,cAAc,iBAAiB,YAAY,aAAa,WAAW;AAAA,aAEzF,CAAC,SACA,gBAAgB,SAAS,UAAU,+BAA+B;AAEnE,mBAAa,UAAU;AACzB,QAAI,eAAe;AACnB,QAAI,SAAS,WAAW,SAAS,eAAe;AAC9C,YAAM,cACJ,SAAS,cAAc,iBAAiB,YACpC,MAAM,OAAO,0BAA0B,WAAW,IAClD,MAAM,OAAO,gBAAgB,WAAW;AAC9C,UAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,YAAM,UAAU,6BAA6B,UAAU,WAAW;AAClE,qBAAe,QAAQ,WAAW;AAAA,IACpC;AACA,QAAI,WAAW,OAAO,WAAW,SAAS,YAAY,cAAc,CAAC,OAAO,EAAG,QAAO;AACtF,UAAM,WACJ,SAAS,WAAW,SAAS,sBACzB,QAAQ,qBAAqB,cAC7B,SAAS,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,KAAK,EAAE;AAChF,iBAAa,YAAY;AACzB;AAAA,MACE,gBACE,CAAC,CAAC,YACF,uBAAuB,QAAQ,EAAE,MAAM,CAAC,SAAS,SAAS,SAAS,KAAK,EAAE,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AAEA,YAAU,MAAM;AACd,UAAM,QAAQ,IAAI,gBAAgB;AAClC,aAAS,UAAU;AAInB,QAAI,WAAY,SAAQ,IAAI;AAC5B,UAAM,YAAY;AAChB,YAAM,KAAK;AACX,UAAI,MAAM,OAAO,WAAW,CAAC,WAAY;AACzC,YAAM,oBAAoB;AAAA,IAC5B,GAAG,EACA,MAAM,CAAC,YAAY;AAClB,UAAI,CAAC,MAAM,OAAO;AAChB;AAAA,UACE,mBAAmB,QAAQ,QAAQ,UAAU;AAAA,QAC/C;AAAA,IACJ,CAAC,EACA,QAAQ,MAAM;AACb,UAAI,CAAC,MAAM,OAAO,WAAW,WAAY,SAAQ,KAAK;AAAA,IACxD,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AAAA,IACd;AAAA,EAKF,GAAG,CAAC,QAAQ,aAAa,WAAW,cAAc,UAAU,CAAC;AAE7D,YAAU,MAAM;AACd,UAAM,OAAO,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,CAAC,MAAM,WAAW,iBAAiB,EAAG;AAC1C,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,YAA2B;AAG/B,SAAK,OACF,qBAAqB,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC,EACnD,KAAK,CAAC,SAAS;AACd,UAAI,MAAM,OAAO,WAAW,CAAC,KAAK,KAAK,WAAW,QAAQ,KAAK,KAAK,OAAO;AACzE;AACF,kBAAY,IAAI,gBAAgB,IAAI;AACpC,cAAQ,SAAS;AAAA,IACnB,CAAC,EACA,MAAM,MAAM;AAAA,IAEb,CAAC;AACH,WAAO,MAAM;AACX,YAAM,MAAM;AACZ,UAAI,UAAW,KAAI,gBAAgB,SAAS;AAAA,IAC9C;AAAA,EACF,GAAG,CAAC,QAAQ,MAAM,aAAa,CAAC;AAEhC,iBAAe,IAAI,QAAkD;AACnE,QAAI,UAAU,WAAW,CAAC,QAAQ,EAAG;AACrC,UAAM,UAAU,IAAI,gBAAgB;AACpC,cAAU,UAAU;AACpB,UAAM,SAAS,MAAM,QAAQ,KAAK,UAAU,YAAY,WAAW,CAAC,QAAQ,OAAO;AACnF,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,cAAU,IAAI;AACd,kBAAc,KAAK;AACnB,QAAI;AACF,YAAM,OAAO,MAAM;AAAA,IACrB,SAAS,SAAS;AAChB,UAAI,OAAO,GAAG;AACZ,YAAI,mBAAmB,wBAAyB,WAAU,QAAQ,OAAO;AAAA;AAEvE;AAAA,YACE,mBAAmB,QACf,QAAQ,UACR;AAAA,UACN;AAAA,MACJ;AAAA,IACF,UAAE;AACA,UAAI,UAAU,YAAY,SAAS;AACjC,kBAAU,UAAU;AACpB,YAAI,QAAQ,EAAG,SAAQ,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AAEA,WAAS,SAAS,WAAmB;AAGnC,QAAI;AACF,qBAAe,QAAQ,YAAY,SAAS;AAAA,IAC9C,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,UAAU,SAAyB,SAAwB,SAAS;AACjF,QAAI,CAAC,OAAO,EAAG;AACf,QAAI,QAAQ,UAAU,cAAc,CAAC,QAAQ,WAAW,CAAC,QAAQ,qBAAsB;AACvF,UAAM,WAAW,MAAM,KAAK,MAAM;AAClC,QAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,UAAM,cAAc,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,MAC7D,CAAC,UAAU,MAAM,OAAO,QAAQ,QAAS;AAAA,IAC3C;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QACE,CAAC,cACD,WAAW,WAAW,YACtB,WAAW,SAAS,YACpB,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,gBAC3D,WAAW,cAAc,UAAW,QAAQ,cAAc;AAE3D,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,WAAW,SAAS;AAC1B,QACE,SAAS,WACT,UAAU,iBAAiB,aAC3B,UAAU,gBACV,SAAS,iBAAiB,WAAW;AAErC,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AACF,UAAM,OAAO,iBAAiB,aAAa,cAAc;AAAA,MACvD,eACE,QAAQ,cAAc,aAClB,EAAE,gBAAgB,WAAW,gBAAgB,MAAM,UAAU,cAAc,UAAU,IACrF;AAAA,QACE,gBAAgB,WAAW;AAAA,QAC3B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc,WAAW;AAAA,MAC3B;AAAA,IACR,CAAC;AACD,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,MAAM,KAAK,MAAM;AACjC,QAAI,WAAW,OAAO,GAAG;AACvB,YAAM,iBAAiB,SAAS,MAAM;AAAA,IACxC;AACA,QAAI,CAAC,OAAO,EAAG;AACf,QAAI;AACF,qBAAe,WAAW,UAAU;AAAA,IACtC,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe,OAAO;AACpB,gBAAY,IAAI;AAChB,UAAM,IAAI,OAAO,WAAW;AAC1B,YAAM,KAAK,MAAM;AACjB,UAAI,CAAC,OAAO,EAAG;AACf,YAAM,oBAAoB,MAAM;AAAA,IAClC,CAAC;AAAA,EACH;AAEA,iBAAe,oBAAoB,SAAwB,SAAS;AAClE,QAAI,QAAuB;AAC3B,QAAI;AACF,cAAQ,eAAe,QAAQ,UAAU;AAAA,IAC3C,QAAQ;AAAA,IAER;AACA,QAAI,OAAO;AACT,YAAM,UAAU,MAAM,WAAW,QAAQ,KAAK;AAC9C,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,QAAQ,KAAK,EAAG,eAAc,IAAI;AAClF,UAAI,QAAQ,UAAU,WAAY,gBAAe,IAAI;AACrD,UAAI;AACF,cAAM,UAAU,SAAS,MAAM;AAAA,MACjC,UAAE;AACA,YAAI,OAAO,EAAG,gBAAe,KAAK;AAAA,MACpC;AAAA,IACF;AAAA,EACF;AAEA,iBAAe,MAAM,QAAQ,OAAO;AAClC,UAAM,IAAI,OAAO,WAAW;AAC1B,UACE,SACC,KAAK,WAAW,CAAC,UAAU,WAAW,WAAW,EAAE,SAAS,KAAK,QAAQ,KAAK,GAC/E;AACA,iBAAS,UAAU,OAAO,WAAW;AACrC,mBAAW,UAAU,OAAO,WAAW;AAAA,MACzC;AACA,YAAM,WAAW,gCAAgC,MAAM;AACvD,oBAAc,UAAU,SAAS;AACjC,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,MAAM;AAClC,YAAI,CAAC,YAAY,CAAC,OAAO,EAAG;AAC5B,YACE,SAAS,iBACT,eACG,SAAS,cAAc,iBAAiB,YAAY,aAAa;AAEpE,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AACF,cAAM,SAAS,SAAS,UAAU,SAAS;AAC3C,YAAI,CAAC;AACH,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAGF,YAAI,qBAAqB,SAAS,eAAe,gBAAgB;AACjE,YAAI,SAAS,eAAe,iBAAiB,WAAW;AACtD,gBAAM,eAAe,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,YAC9D,CAAC,UACC,MAAM,cAAc,QACpB,MAAM,SAAS,YACf,MAAM,SAAS,WAAW;AAAA,UAC9B;AACA,cAAI,CAAC,OAAO,EAAG;AACf,cAAI,YAAY,SAAS;AACvB,kBAAM,IAAI;AAAA,cACR;AAAA,YACF;AACF,+BAAqB,YAAY,CAAC,GAAG;AAAA,QACvC;AAIA,cAAM,QAAQ,KAAK,UAAU,EAAE,WAAW,WAAW,oBAAoB,OAAO,CAAC;AACjF,YAAI,WAAW,YAAY,QAAQ,WAAW,YAAY,OAAO;AAC/D,mBAAS,UAAU,OAAO,WAAW;AACrC,qBAAW,UAAU,OAAO,WAAW;AAAA,QACzC;AACA,mBAAW,UAAU;AACrB,YAAI,UAAU,MAAM,WAAW,MAAM;AAAA,UACnC,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,gBAAgB,SAAS;AAAA,UACzB,GAAI,qBAAqB,EAAE,mBAAmB,IAAI,CAAC;AAAA,QACrD,CAAC;AACD,YAAI,CAAC,OAAO,EAAG;AACf,iBAAS,QAAQ,EAAE;AACnB,YAAI,QAAQ,UAAU;AACpB,oBAAU,MAAM,WAAW;AAAA,YACzB,EAAE,MAAM,eAAe,QAAQ,EAAE,OAAO,EAAE;AAAA,YAC1C,WAAW;AAAA,UACb;AACF,YAAI,CAAC,OAAO,EAAG;AACf,YAAI,QAAQ,WAAW,SAAS;AAC9B,gBAAM,qBAAqB,SAAS,SAAS,YAAY,MAAM;AAAA,YAC5D,OAAM,UAAU,SAAS,MAAM;AAAA,MACtC,UAAE;AACA,YAAI,cAAc,YAAY,SAAS,MAAO,eAAc,UAAU;AACtE,iBAAS,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,iBAAe,qBACb,SACA,YACA,QACA;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,UAAU,IAAI,gBAAgB;AACpC,kBAAc,UAAU;AACxB,UAAM,iBAAiB,MAAM,QAAQ,MAAM,SAAS,SAAS,OAAO,MAAM;AAC1E,aAAS,QAAS,OAAO,iBAAiB,SAAS,gBAAgB,EAAE,MAAM,KAAK,CAAC;AACjF,eAAW,IAAI;AACf,QAAI;AACF,YAAM,SAAS,MAAM,wBAAwB,WAAW,WAAW,SAAS,YAAY;AAAA,QACtF,MAAM;AAAA,QACN,QAAQ,QAAQ;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,OAAO,KAAK,CAAC,OAAQ;AAC1B,iBAAW,KAAK;AAChB,qBAAe,IAAI;AACnB,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,OAAO,UAAU,aAAa;AAChC,kBAAU,sDAAsD;AAChE,sBAAc,IAAI;AAClB;AAAA,MACF;AACA,UAAI,OAAO,UAAU,YAAY;AAC/B,YAAI,CAAC,UAAU,SAAS,EAAE,SAAS,OAAO,KAAK,EAAG,eAAc,IAAI;AACpE,cAAM,IAAI,MAAM,uDAAuD;AAAA,MACzE;AAAA,IACF,UAAE;AACA,eAAS,SAAS,OAAO,oBAAoB,SAAS,cAAc;AACpE,UAAI,cAAc,YAAY,QAAS,eAAc,UAAU;AAC/D,UAAI,OAAO,GAAG;AACZ,uBAAe,KAAK;AACpB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,UAAU,SAAyB;AAE1C,WAAO;AAAA,MAAI,CAAC,WACV,qBAAqB,SAAS,+BAA+B,MAAM,GAAG,MAAM;AAAA,IAC9E;AAAA,EACF;AAEA,iBAAe,iBACb,YACA,SAAwB,SACxB;AACA,QAAI,CAAC,WAAW;AAEd,YAAM,eAAe;AACrB,UAAI,CAAC,OAAO,EAAG;AACf,kBAAY,IAAI;AAChB,kBAAY,KAAK;AACjB,gBAAU;AACV;AAAA,IACF;AACA,QAAI,WAAW,iBAAiB,WAAW,cAAc,iBAAiB,WAAW;AACnF,YAAM,YAAY,MAAM,OAAO,gBAAgB,WAAW,GAAG;AAAA,QAC3D,CAAC,UAAU,MAAM,OAAO,WAAW,eAAe;AAAA,MACpD;AACA,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,CAAC,YAAY,SAAS,WAAW;AACnC,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,WAAW,eAAe,iBAAiB,WAAW;AACxD,YAAM,WAAW,MAAM,OAAO,0BAA0B,WAAW;AACnE,UAAI,CAAC,OAAO,EAAG;AACf,UAAI,6BAA6B,YAAY,QAAQ,EAAE,WAAW;AAChE,cAAM,IAAI,MAAM,6DAA6D;AAAA,IACjF;AACA,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,wBAAwB,QAAQ,aAAa,WAAW,YAAY,MAAM;AAChF,QAAI,CAAC,OAAO,EAAG;AACf,UAAM,eAAe;AACrB,QAAI,CAAC,OAAO,EAAG;AACf,gBAAY,IAAI;AAChB,gBAAY,KAAK;AAAA,EACnB;AAEA,iBAAe,UAAU;AACvB,UAAM,IAAI,OAAO,WAAW;AAC1B,UAAI,KAAM,OAAM,iBAAiB,MAAM,MAAM;AAAA,IAC/C,CAAC;AAAA,EACH;AAEA,WAAS,QAAQ;AACf,UAAM,UAAU,UAAU;AAC1B,QAAI,SAAS;AACX,gBAAU,UAAU;AACpB,cAAQ,MAAM,IAAI,wBAAwB,CAAC;AAC3C,oBAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAC1D,oBAAc,UAAU;AACxB,oBAAc,UAAU;AACxB,cAAQ,KAAK;AACb,iBAAW,KAAK;AAChB,qBAAe,KAAK;AAAA,IACtB;AACA,gBAAY,KAAK;AACjB,cAAU;AAAA,EACZ;AAEA,SACE,gBAAAH;AAAA,IAAC;AAAA;AAAA,MACC,MAAM,MAAM,QAAQ;AAAA,MACpB,UAAU,mBAAmB,SAAY,KAAM,MAAM,kBAAkB;AAAA,MACvE,MAAM,QAAQ,WAAW;AAAA,MACzB,WAAW,kBAAkB;AAAA,MAC7B,aAAa,mBAAmB,MAAM,eAAe;AAAA,MACrD,OAAO;AAAA,MACP;AAAA,MACA;AAAA,MACA,aACE,YACI,YACE,6BACA,cACF,WAAW,MAAM,QAAQ,IAAI;AAAA,MAEnC,MACE,YACI,6FACA;AAAA,MAEN,QAAQ,MAAM,KAAK,KAAK;AAAA,MACxB,SAAS;AAAA,MACT;AAAA,MAEA,0BAAAC,MAAC,SAAI,WAAU,+BACZ;AAAA,gBAAQ,gBAAAD,KAAC,OAAE,MAAK,SAAS,iBAAM,IAAO;AAAA,QACtC,SACC,gBAAAA,KAAC,OAAE,MAAK,UAAS,WAAU,gCACxB,kBACH,IACE;AAAA,QACH,CAAC,OACA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAE,MAAK,UACL,iBAAO,qCAAgC,uCAC1C;AAAA,UACA,gBAAAA,KAAC,YAAO,UAAU,MAAM,SAAS,MAAM,KAAK,KAAK,GAAG,mBAEpD;AAAA,WACF,IAEA,gBAAAC,MAAAF,WAAA,EACE;AAAA,0BAAAC,KAAC,OAAG,6BAAmB,KAAK,eAAe,WAAU;AAAA,UACpD,OACC,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,MAAK,UAAS,WAAU,kCACxB,oBACG,0BAA0B,KAAK,IAAI,qFACnC,cACE,oCACA,mCACR;AAAA,YACC,UACC,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,MAAK;AAAA,gBACL,WAAU;AAAA,gBACV,SAAS,MAAM,cAAc,SAAS,MAAM,IAAI,wBAAwB,CAAC;AAAA,gBAC1E;AAAA;AAAA,YAED,IACE;AAAA,aACN,IACE,CAAC,YACH,gBAAAC,MAAAF,WAAA,EACG;AAAA,aAAC,KAAK,iBAAiB,CAAC,eACvB,gBAAAE,MAAC,cAAS,UAAU,MAClB;AAAA,8BAAAD,KAAC,YAAQ,yBAAe,UAAU,gCAA+B;AAAA,cACjE,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,WAAW;AAAA;AAAA,gBAC1C;AAAA,gBAAE;AAAA,iBAEJ;AAAA,cACA,gBAAAC,MAAC,WACC;AAAA,gCAAAD;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,MAAM,GAAG,YAAY;AAAA,oBACrB,SAAS,cAAc;AAAA,oBACvB,UAAU,MAAM,aAAa,UAAU;AAAA;AAAA,gBACzC;AAAA,gBAAE;AAAA,iBAEJ;AAAA,eACF,IACE;AAAA,YACJ,gBAAAA,KAAC,OAAE,WAAU,+BACV,0BAAgB,cAAc,aAC3B,+DACA,gBACE,cAAc,cACZ,cAAc,YACd,cAAc,WAChB,cAAc,cACZ,YACE,uFACA,yDACF,wGACV;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,SAAS,MAAM;AACb,sBAAI,UAAU,WAAY,MAAK,MAAM,IAAI;AAAA,2BAEvC,KAAK,SAAS,WAAW,SAAS,eAClC,KAAK,QAAQ,cAAc;AAE3B,yBAAK,UAAU,KAAK,OAAO;AAAA,sBACxB,MAAK,MAAM;AAAA,gBAClB;AAAA,gBAEC,yBACC,SAAS,WAAW,KAAK,SAAS,WAAW,SAAS,cACpD,yBACC,gBAAgB,eAAe,KAAK,IAAI;AAAA;AAAA,YAC/C;AAAA,aACF,IACE;AAAA,UACH,aAAa,CAAC,OACb,gBAAAC,MAAAF,WAAA,EACE;AAAA,4BAAAC,KAAC,OAAE,WAAU,+BACV,sBACG,0EACA,8BACN;AAAA,YACA,gBAAAA;AAAA,cAAC;AAAA;AAAA,gBACC,WAAU;AAAA,gBACV,UAAU,QAAQ,KAAK;AAAA,gBACvB,SAAS,MAAM,KAAK,QAAQ;AAAA,gBAE3B,sBAAY,6BAA6B;AAAA;AAAA,YAC5C;AAAA,aACF,IACE;AAAA,WACN;AAAA,SAEJ;AAAA;AAAA,EACF;AAEJ;","names":["useRef","useState","Fragment","jsx","jsxs","useState","useRef"]}

package/dist/chunk-ZUWF4NF7.js

@@ -0,0 +1,13 @@
+"use client";
+
+// src/lib/host-platform.ts
+function interactionHostPlatform() {
+  if (typeof navigator === "undefined") return "other";
+  const platform = navigator.platform || navigator.userAgent;
+  return /Mac|iPhone|iPad|iPod/u.test(platform) ? "mac" : "other";
+}
+
+export {
+  interactionHostPlatform
+};
+//# sourceMappingURL=chunk-ZUWF4NF7.js.map

package/dist/chunk-ZUWF4NF7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/host-platform.ts"],"sourcesContent":["export type InteractionHostPlatform = \"mac\" | \"other\";\n\n/** Physical client platform. Remote input adapters use this only to identify\n * the user's primary shortcut modifier; the target platform is resolved\n * separately. */\nexport function interactionHostPlatform(): InteractionHostPlatform {\n  if (typeof navigator === \"undefined\") return \"other\";\n  const platform = navigator.platform || navigator.userAgent;\n  return /Mac|iPhone|iPad|iPod/u.test(platform) ? \"mac\" : \"other\";\n}\n"],"mappings":";;;AAKO,SAAS,0BAAmD;AACjE,MAAI,OAAO,cAAc,YAAa,QAAO;AAC7C,QAAM,WAAW,UAAU,YAAY,UAAU;AACjD,SAAO,wBAAwB,KAAK,QAAQ,IAAI,QAAQ;AAC1D;","names":[]}

package/dist/client.d.ts

@@ -4,12 +4,14 @@ import type { OpenGeniClient } from "@opengeni/sdk";
  * pass the real SDK client, a proxy-backed client that routes through their
  * own API, or a scripted client in tests/demos.
  */
-export type SessionClientLike = Pick<OpenGeniClient, "getClientConfig" | "getSession" | "getSessionLineage" | "updateSession" | "updateSessionPin" | "listSessions" | "listSessionPage" | "sendMessage" | "steerMessage" | "pauseSession" | "resumeSession" | "sendApprovalDecision" | "listHumanInputRequests" | "getHumanInputRequest" | "submitHumanInputResponse" | "listEvents" | "streamEvents" | "getQueue" | "moveQueueItem" | "editQueueItem" | "steerQueueItem" | "deleteQueueItem" | "getComposerDraft" | "saveComposerDraft" | "submitComposerDraft" | "listTurns" | "getGoal" | "updateGoal" | "deleteGoal" | "clearSessionContext" | "compactSessionContext" | "listScheduledTasks" | "uploadFile" | "getFile" | "createFileDownloadUrl" | "listVariableSets" | "getVariableSetVariable" | "createVariableSet" | "updateVariableSet" | "deleteVariableSet" | "setVariableSetVariable" | "deleteVariableSetVariable" | "listEnvironments" | "createEnvironment" | "updateEnvironment" | "deleteEnvironment" | "setEnvironmentVariable" | "deleteEnvironmentVariable" | "listChannels" | "createChannel" | "updateChannel" | "reorderChannels" | "deleteChannel" | "updateSessionChannel" | "listRigs" | "createRig" | "getRig" | "updateRig" | "deleteRig" | "listRigVersions" | "activateRigVersion" | "listRigChanges" | "proposeRigChange" | "getRigChange" | "verifyRigChange" | "promoteRigChange" | "verifyRig" | "listPacks" | "registerPack" | "enablePack" | "previewPackInstallation" | "installPack" | "previewPackUninstall" | "uninstallPack" | "deletePack" | "listWorkspaces" | "createWorkspace" | "updateWorkspace" | "setWorkspaceInferenceState" | "getWorkspace" | "getWorkspaceModelCatalog" | "listWorkspaceControlEvents" | "streamWorkspaceControlEvents" | "streamWorkspaceInteractionRevisions" | "getBillingUsage" | "getClientConfig" | "getStreamCapabilities" | "acknowledgeStream" | "attachViewer" | "heartbeatViewer" | "detachViewer" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "protectedBrowserAuthFill" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession" | "fsList" | "fsListBatch" | "fsRead" | "fsWrite" | "fsDelete" | "fsMove" | "fsMkdir" | "gitStatus" | "gitDiff" | "gitReadBatch" | "getWorkspaceCapture" | "getWorkspaceCaptureFile" | "terminalExec" | "terminalPtyOpen" | "terminalPtyWrite" | "terminalPtyResize" | "terminalPtyClose"> & Partial<Pick<OpenGeniClient, "createVideoArtifactPlaybackSource" | "streamWorkspaceLiveEvents" | "listSessionBackgroundCommands" | "cancelSessionBackgroundCommand">>;
+type SessionClientMethods = Pick<OpenGeniClient, "getClientConfig" | "getSession" | "getSessionLineage" | "updateSession" | "updateSessionPin" | "listSessions" | "listSessionPage" | "sendMessage" | "steerMessage" | "pauseSession" | "resumeSession" | "sendApprovalDecision" | "listHumanInputRequests" | "getHumanInputRequest" | "submitHumanInputResponse" | "listEvents" | "streamEvents" | "getQueue" | "moveQueueItem" | "editQueueItem" | "steerQueueItem" | "deleteQueueItem" | "getComposerDraft" | "saveComposerDraft" | "submitComposerDraft" | "listTurns" | "getGoal" | "updateGoal" | "deleteGoal" | "clearSessionContext" | "compactSessionContext" | "listScheduledTasks" | "uploadFile" | "getFile" | "createFileDownloadUrl" | "listChannels" | "createChannel" | "updateChannel" | "reorderChannels" | "deleteChannel" | "updateSessionChannel" | "listRigs" | "createRig" | "getRig" | "updateRig" | "deleteRig" | "listRigVersions" | "activateRigVersion" | "listRigChanges" | "proposeRigChange" | "getRigChange" | "verifyRigChange" | "promoteRigChange" | "verifyRig" | "listWorkspaces" | "createWorkspace" | "updateWorkspace" | "setWorkspaceInferenceState" | "getWorkspace" | "getWorkspaceModelCatalog" | "listWorkspaceControlEvents" | "streamWorkspaceControlEvents" | "streamWorkspaceInteractionRevisions" | "getBillingUsage" | "getClientConfig" | "getStreamCapabilities" | "acknowledgeStream" | "attachViewer" | "heartbeatViewer" | "detachViewer" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession" | "fsList" | "fsListBatch" | "fsRead" | "fsWrite" | "fsDelete" | "fsMove" | "fsMkdir" | "gitStatus" | "gitDiff" | "gitReadBatch" | "getWorkspaceCapture" | "getWorkspaceCaptureFile" | "terminalExec" | "terminalPtyOpen" | "terminalPtyWrite" | "terminalPtyResize" | "terminalPtyClose"> & Partial<Pick<OpenGeniClient, "createVideoArtifactPlaybackSource" | "streamWorkspaceLiveEvents" | "listSessionBackgroundCommands" | "cancelSessionBackgroundCommand" | "getComputerInputPosture" | "getSessionModelAccount">>;
+/** Compact list transport is optional for scripted and older clients. */
+export type SessionClientLike = SessionClientMethods & Partial<Pick<OpenGeniClient, "listSessionSummaryPage" | "findGoal">>;
 /**
  * Tenant-safe client surface required by the session-only React entry.
  *
  * A host proxy can implement only these session-scoped operations instead of
- * stubbing OpenGeni's workbench, billing, rig, file-system, and workspace
+ * stubbing Opengeni's workbench, billing, rig, file-system, and workspace
  * administration APIs. Workspace-level resume is deliberately optional: a
  * host that does not expose that authority still supports every session-local
  * composer/control path.
@@ -21,12 +23,18 @@ export type EmbeddedSessionClientLike = Pick<OpenGeniClient, "getSession" | "lis
 export type EmbeddedSessionEventClientLike = Pick<OpenGeniClient, "getSession" | "streamEvents">;
 /** Exact client surface required by {@link useSession}. */
 export type EmbeddedSessionReadClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "getSession" | "updateSession">;
-/** Exact client surface required by {@link useGoal}. */
-export type EmbeddedGoalClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "getGoal" | "updateGoal" | "deleteGoal">;
+/**
+ * Exact client surface required by {@link useGoal}. `findGoal` is optional:
+ * when present the hook reads a goal-less session as a successful `null`
+ * instead of an absorbed 404.
+ */
+export type EmbeddedGoalClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "getGoal" | "updateGoal" | "deleteGoal"> & {
+    findGoal?: OpenGeniClient["findGoal"] | undefined;
+};
 /** Exact client surface required by {@link useSessionLineage}. */
 export type EmbeddedSessionLineageClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "getSessionLineage">;
 /** Exact client surface required by {@link useFileAttachments}. */
-export type EmbeddedFileAttachmentClientLike = Pick<OpenGeniClient, "uploadFile">;
+export type EmbeddedFileAttachmentClientLike = Pick<OpenGeniClient, "uploadFile"> & Partial<Pick<OpenGeniClient, "createFileDownloadUrl">>;
 /** Exact client surface required by structured human-input hooks. */
 export type EmbeddedHumanInputSessionClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "listHumanInputRequests" | "submitHumanInputResponse">;
 /** Exact client surface required by MCP approval-policy hooks. */
@@ -36,8 +44,9 @@ export type EmbeddedRealtimeSessionClientLike = Pick<OpenGeniClient, "getWorkspa
 /** Exact public SDK surface required by cross-surface human interventions. */
 export type EmbeddedInterventionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention">;
 /** Exact public SDK surface required by BrowserSession hooks and components. */
-export type EmbeddedBrowserInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "protectedBrowserAuthFill" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession"> & EmbeddedInterventionClientLike;
+export type EmbeddedBrowserInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession"> & EmbeddedInterventionClientLike;
 /** Exact public SDK surface required by ComputerSession hooks and components. */
-export type EmbeddedComputerInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession"> & EmbeddedInterventionClientLike;
+export type EmbeddedComputerInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession"> & EmbeddedInterventionClientLike & Partial<Pick<OpenGeniClient, "getComputerInputPosture">>;
 /** Complete public Browser + Computer interaction surface. */
 export type EmbeddedInteractionClientLike = EmbeddedBrowserInteractionClientLike & EmbeddedComputerInteractionClientLike;
+export {};

package/dist/clipboard.js

@@ -1,6 +1,8 @@
+"use client";
+import "./chunk-M357MHH3.js";
 import {
   copyTextToClipboard
-} from "./chunk-JVYQRRC4.js";
+} from "./chunk-PEHTX3V7.js";
 export {
   copyTextToClipboard
 };

package/dist/commands/types.d.ts

@@ -40,6 +40,8 @@ export type CommandContext = {
     permissions: Permission[];
     /** Surface a transient ok/error notice in the composer. */
     notice: (notice: Notice) => void;
+    /** Optional presentation hook for native command failures; never rewrites command content. */
+    formatError?: ((error: unknown, defaultMessage: string) => string) | undefined;
     /** Open the in-composer /help panel (rendered from the registry). */
     openHelp: () => void;
     /**

package/dist/components/anthropic-mark.d.ts

@@ -0,0 +1,3 @@
+import type { SVGProps } from "react";
+/** AnthropicMark: Simple Icons, CC0; https://github.com/simple-icons/simple-icons */
+export declare function AnthropicMark(props: SVGProps<SVGSVGElement>): import("react").JSX.Element;

package/dist/components/approval-surface.d.ts

@@ -1,5 +1,7 @@
 import { type ReactNode } from "react";
+import { type ToolActionReview } from "@opengeni/sdk";
 import type { PendingApproval } from "../approvals.js";
+import { type ToolReviewDetailsLoader } from "./tool-action-review.js";
 export type ApprovalSurfaceMessages = {
     title: string;
     description: string;
@@ -8,6 +10,8 @@ export type ApprovalSurfaceMessages = {
     approving: string;
     rejecting: string;
     formatToolName: (name: string) => string;
+    showDetails?: string | undefined;
+    hideDetails?: string | undefined;
 };
 export declare const defaultApprovalSurfaceMessages: ApprovalSurfaceMessages;
 export type ApprovalSurfaceProps = {
@@ -18,11 +22,20 @@ export type ApprovalSurfaceProps = {
     error?: string | Error | null | undefined;
     messages?: Partial<ApprovalSurfaceMessages> | undefined;
     renderApproval?: ((approval: PendingApproval) => ReactNode) | undefined;
+    /** Authenticated server facts; hosts need not import any web-app code. */
+    loadReview?: ((approval: PendingApproval) => Promise<ToolActionReview>) | undefined;
+    loadDetails?: ToolReviewDetailsLoader | undefined;
+    onViewDetails?: ((review: ToolActionReview, path: string) => void) | undefined;
+    selectedApprovalId?: string | null | undefined;
+    onSelectedApprovalChange?: ((id: string) => void) | undefined;
     className?: string | undefined;
 };
-/**
- * Host-neutral approval presentation backed by the native pending-approval
- * projection and control callbacks. It owns only presentation and duplicate
- * click fencing; OpenGeni remains the authority for approval state.
- */
-export declare function ApprovalSurface({ approvals, onApprove, onReject, responding, error, messages: overrides, renderApproval, className, }: ApprovalSurfaceProps): import("react").JSX.Element | null;
+export type ApprovalField = {
+    key: string;
+    label: string;
+    value: string;
+};
+/** @deprecated Prefer the versioned server review; retained for small custom renderers. */
+export declare function approvalArgumentFields(value: unknown): ApprovalField[] | null;
+/** Hosts provide decisions; this surface never mutates the approved payload. */
+export declare function ApprovalSurface({ approvals, onApprove, onReject, responding, error, messages: overrides, renderApproval, loadReview, loadDetails, onViewDetails, selectedApprovalId, onSelectedApprovalChange, className, }: ApprovalSurfaceProps): import("react").JSX.Element | null;

package/dist/components/artifacts/artifact-chrome.d.ts

@@ -0,0 +1,120 @@
+import { type ComponentProps, type ReactNode } from "react";
+/**
+ * Shared chrome for artifact surfaces: the Opengeni console and embedding hosts
+ * render the same header, controls, and load states. Class names use the
+ * package theme aliases, so the console's own Tailwind build and the compiled
+ * `.og-root` stylesheet resolve them identically.
+ */
+export type ArtifactKind = "document" | "spreadsheet" | "presentation" | "site" | "image" | "file";
+declare const BUTTON_VARIANT: {
+    readonly ghost: "hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50";
+    readonly outline: "border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:border-border dark:bg-input/30 dark:hover:bg-input/50";
+};
+declare const BUTTON_SIZE: {
+    readonly sm: "h-8 gap-1.5 rounded-md px-3 has-[>svg]:px-2.5";
+    readonly icon: "size-9";
+    readonly "icon-sm": "size-8";
+};
+export declare function ArtifactButton({ variant, size, className, type, ...props }: ComponentProps<"button"> & {
+    variant?: keyof typeof BUTTON_VARIANT;
+    size?: keyof typeof BUTTON_SIZE;
+}): import("react").JSX.Element;
+export declare function ArtifactBadge({ className, ...props }: ComponentProps<"span">): import("react").JSX.Element;
+export declare const ArtifactSelect: import("react").ForwardRefExoticComponent<Omit<import("react").DetailedHTMLProps<import("react").SelectHTMLAttributes<HTMLSelectElement>, HTMLSelectElement>, "ref"> & import("react").RefAttributes<HTMLSelectElement>>;
+export declare function artifactKindIcon(kind: ArtifactKind): ReactNode;
+export declare function artifactKindSubtitle(kind: ArtifactKind): string;
+type LoadErrorCopy = Readonly<Record<"unavailable" | "invalid" | "transient", {
+    title: string;
+    message: string;
+}>>;
+/**
+ * Every user-facing string in the artifact surfaces (inline Site preview, Site
+ * frame, viewer header and states). Hosts translate by passing a partial
+ * `labels` object; unspecified keys keep the English defaults.
+ */
+export type ArtifactLabels = Readonly<{
+    back: string;
+    close: string;
+    /** Header title and loading copy until an artifact's title is known. */
+    opening: string;
+    /** Header title when an artifact cannot be opened. */
+    artifact: string;
+    startingEditor: string;
+    kindSubtitle: (kind: ArtifactKind) => string;
+    live: string;
+    reloadSite: string;
+    openFullScreen: string;
+    editWithAgent: string;
+    editShort: string;
+    preview: string;
+    loadPreview: string;
+    loadSitePreview: string;
+    siteVersion: string;
+    savedVersion: string;
+    version: (revision: number) => string;
+    openSite: string;
+    loadingSite: string;
+    siteArchived: string;
+    siteUnpublished: string;
+    siteReferenceInvalid: string;
+    siteLoadFailed: string;
+    retry: string;
+    tryAgain: string;
+    toolCount: (count: number) => string;
+    toolsAvailable: (count: number) => string;
+    sourceFileCount: (count: number) => string;
+    viewingDisabled: {
+        title: string;
+        message: string;
+    };
+    editorsMissing: {
+        title: string;
+        message: string;
+    };
+    siteErrors: LoadErrorCopy;
+    editableErrors: LoadErrorCopy;
+    reference: (id: string) => string;
+}>;
+export declare const DEFAULT_ARTIFACT_LABELS: ArtifactLabels;
+/** Translate every artifact surface below; nested providers override outer ones. */
+export declare function ArtifactLabelsProvider({ labels, children, }: {
+    labels: Partial<ArtifactLabels> | undefined;
+    children: ReactNode;
+}): import("react").JSX.Element;
+export declare function useArtifactLabels(): ArtifactLabels;
+/**
+ * One artifact header: optional Back, the kind tile, title (or a host-supplied
+ * title control), trailing actions, and optional Close. The console dock and
+ * embedded viewers share it.
+ */
+export declare function ArtifactViewerHeader({ kind, title, subtitle, titleSlot, onBack, backLabel, actions, onClose, closeLabel, }: Readonly<{
+    /** `null` while the host does not know the modality yet. */
+    kind: ArtifactKind | null;
+    title: string;
+    subtitle?: string | undefined;
+    /** Replaces the title text, for example with a picker. */
+    titleSlot?: ReactNode;
+    onBack?: (() => void) | undefined;
+    backLabel?: string | undefined;
+    actions?: ReactNode;
+    onClose?: (() => void) | undefined;
+    closeLabel?: string | undefined;
+}>): import("react").JSX.Element;
+export declare function ArtifactLoading({ label }: {
+    label: string;
+}): import("react").JSX.Element;
+export declare function ArtifactProblem({ view, onRetry, }: {
+    view: ArtifactLoadErrorView;
+    onRetry?: (() => void) | undefined;
+}): import("react").JSX.Element;
+export type ArtifactLoadErrorKind = "site" | "editable";
+export type ArtifactLoadErrorView = Readonly<{
+    title: string;
+    message: string;
+    retryable: boolean;
+    correlationId?: string;
+}>;
+/** Site/editor load copy. Never surfaces raw Opengeni API status text. */
+export declare function artifactLoadErrorView(error: unknown, kind: ArtifactLoadErrorKind, labels?: ArtifactLabels): ArtifactLoadErrorView;
+export declare function artifactLoadErrorMessage(view: ArtifactLoadErrorView, labels?: ArtifactLabels): string;
+export {};

package/dist/components/artifacts/artifact-sandbox.d.ts

@@ -0,0 +1,30 @@
+import { type ReactNode } from "react";
+import type { SiteViewer } from "@opengeni/sdk";
+import { type PublishedHtmlArtifactToolBridge } from "./published-html-artifact-frame.js";
+export type ArtifactSandboxProps = {
+    html: string;
+    height?: number | undefined;
+    autoHeight?: boolean | undefined;
+    theme?: "light" | "dark" | undefined;
+    headerControls?: ReactNode | undefined;
+    title: string;
+    /** Hide the visible title/icon while retaining the accessible iframe title. */
+    showTitle?: boolean | undefined;
+    showLiveStatus?: boolean | undefined;
+    versionLabel?: string | undefined;
+    className?: string | undefined;
+    editDisabled?: boolean | undefined;
+    onEdit?: (() => void) | undefined;
+    toolBridge?: PublishedHtmlArtifactToolBridge | undefined;
+    /** Who is viewing, answered to the Site's `site.viewer` over the bridge. */
+    viewer?: SiteViewer | undefined;
+    connectedToolCount?: number | undefined;
+    sourceFileCount?: number | undefined;
+    fill?: boolean | undefined;
+};
+/**
+ * The Site/preview frame chrome shared by the console and embedding hosts:
+ * title, version and tool badges, live status, reload, and a full-screen mode
+ * that escapes the host's scroll containers through the modal top layer.
+ */
+export declare function ArtifactSandbox(props: ArtifactSandboxProps): import("react").JSX.Element;

package/dist/components/artifacts/artifact-surface.d.ts

@@ -3,6 +3,8 @@ export type ArtifactModality = "spreadsheet" | "document" | "presentation";
 export type ArtifactSurfaceProps = {
     modality: ArtifactModality;
     title: string;
+    /** An embedding host may already provide the artifact title and navigation. */
+    showHeader?: boolean | undefined;
     subtitle?: ReactNode | undefined;
     actions?: ReactNode | undefined;
     children: ReactNode;
@@ -13,6 +15,6 @@ export type ArtifactSurfaceProps = {
 /**
  * Modality-neutral artifact chrome. It deliberately owns no file, session, or
  * persistence state: hosts can use the same surface for a local draft, a
- * durable OpenGeni artifact, or a collaborative projection.
+ * durable Opengeni artifact, or a collaborative projection.
  */
-export declare function ArtifactSurface({ modality, title, subtitle, actions, children, footer, busy, className, }: ArtifactSurfaceProps): import("react").JSX.Element;
+export declare function ArtifactSurface({ modality, title, showHeader, subtitle, actions, children, footer, busy, className, }: ArtifactSurfaceProps): import("react").JSX.Element;

package/dist/components/artifacts/chat-interactive-block.d.ts

@@ -0,0 +1,29 @@
+import type { OpenGeniClient, ToolGatewayIdentity } from "@opengeni/sdk";
+import { type ArtifactLabels } from "./artifact-chrome.js";
+import type { PublishedHtmlArtifactToolBridge } from "./published-html-artifact-frame.js";
+/** Reads a Site needs to render; the console client, the SDK client, or a proxy. */
+export type SiteSnapshotClient = Pick<OpenGeniClient, "getWorkspaceArtifact" | "getWorkspaceArtifactHtml"> & Partial<Pick<OpenGeniClient, "getWorkspaceArtifactContent">>;
+/** The exact saved Site a tool bridge is pinned to (absent for inline HTML). */
+export type SiteToolScope = {
+    artifactId: string;
+    siteVersionId: string;
+    requestedTools: readonly ToolGatewayIdentity[];
+};
+/** Host-owned Site API access. Omit it and Sites render without workspace tools. */
+export type SiteToolBridgeFactory = (site?: SiteToolScope) => PublishedHtmlArtifactToolBridge | undefined;
+export type ChatInteractiveBlockProps = {
+    workspaceId: string;
+    kind: "html" | "site";
+    content: string;
+    client: SiteSnapshotClient;
+    toolBridge?: SiteToolBridgeFactory | undefined;
+    theme?: "light" | "dark" | undefined;
+    /** Translations for the preview's copy; defaults to English. */
+    labels?: Partial<ArtifactLabels> | undefined;
+};
+/**
+ * Inline preview for an assistant `opengeni-html` or `opengeni-site` fence, as
+ * the Opengeni console renders it. "Open Site" goes through the nearest
+ * `resolveLink`, so a host decides where a Site opens.
+ */
+export declare function ChatInteractiveBlock({ labels, ...props }: ChatInteractiveBlockProps): import("react").JSX.Element;

package/dist/components/artifacts/deferred-chat-media.d.ts

@@ -0,0 +1,15 @@
+import { type ReactNode } from "react";
+/**
+ * Reserve the chat slot before starting expensive media work. Activation is
+ * one-way: scrolling away must not discard an interactive preview's state.
+ * The timeline parks at its initial tip in layout effects before this observer
+ * is attached, so historical previews above the entry viewport stay dormant.
+ */
+export declare function DeferredChatMedia({ children, height, label, actionLabel, }: {
+    children: ReactNode;
+    height: number;
+    /** What is loading, as in "Load {label}". */
+    label?: string | undefined;
+    /** The complete (translated) activation label; overrides `label`. */
+    actionLabel?: string | undefined;
+}): import("react").JSX.Element;

package/dist/components/artifacts/document-editor.d.ts

@@ -150,6 +150,7 @@ export type DocumentProjectionEditorProps = Omit<DocumentEditorProps, "document"
 };
 export type DocumentProjectionArtifactSurfaceProps = Omit<DocumentProjectionEditorProps, "ariaLabel" | "className"> & {
     title: string;
+    showHeader?: boolean | undefined;
     subtitle?: ReactNode | undefined;
     busy?: boolean | undefined;
     className?: string | undefined;
@@ -157,6 +158,7 @@ export type DocumentProjectionArtifactSurfaceProps = Omit<DocumentProjectionEdit
 };
 export type DocumentArtifactSurfaceProps = Omit<DocumentEditorProps, "ariaLabel" | "className"> & {
     title: string;
+    showHeader?: boolean | undefined;
     subtitle?: ReactNode | undefined;
     busy?: boolean | undefined;
     className?: string | undefined;
@@ -167,6 +169,6 @@ export declare function DocumentEditor(props: DocumentEditorProps): import("reac
 /** Projection-first document editor with one async command boundary. */
 export declare function DocumentProjectionEditor({ projection, commit, onCommandError, onSelectionChange, readOnly, ...props }: DocumentProjectionEditorProps): import("react").JSX.Element;
 /** Artifact chrome plus the reusable document editor. */
-export declare function DocumentArtifactSurface({ document, title, subtitle, busy, className, editorClassName, ...editorProps }: DocumentArtifactSurfaceProps): import("react").JSX.Element;
+export declare function DocumentArtifactSurface({ document, title, showHeader, subtitle, busy, className, editorClassName, ...editorProps }: DocumentArtifactSurfaceProps): import("react").JSX.Element;
 /** Artifact chrome over the projection-first document editor. */
-export declare function DocumentProjectionArtifactSurface({ projection, title, subtitle, busy, className, editorClassName, ...editorProps }: DocumentProjectionArtifactSurfaceProps): import("react").JSX.Element;
+export declare function DocumentProjectionArtifactSurface({ projection, title, showHeader, subtitle, busy, className, editorClassName, ...editorProps }: DocumentProjectionArtifactSurfaceProps): import("react").JSX.Element;

package/dist/components/artifacts/editable-artifact-ui.d.ts

@@ -5,9 +5,10 @@ export declare function editableArtifactProjectionKey(view: EditableArtifactSync
 export declare function editableArtifactStatusLabel(view: EditableArtifactSyncView): string;
 /** Revoked read authority must hide any projection retained before invalidation. */
 export declare function editableArtifactAccessRevoked(view: EditableArtifactSyncView): boolean;
-export declare function EditableArtifactMessage({ title, detail, retry, }: {
+export declare function EditableArtifactMessage({ title, detail, retry, retryLabel, }: {
     title: string;
     detail: string;
     retry?: (() => void) | undefined;
+    retryLabel?: string | undefined;
 }): import("react").JSX.Element;
 export declare function asEditableArtifactError(cause: unknown, fallback: string): Error;