@opengeni/react 4.0.2 → 5.0.4-canary.0

package/README.md

@@ -24,6 +24,48 @@ ancestor. Components are styled with Tailwind v4 utilities mapped onto the
 tokens, Radix primitives for behavior, and Motion for state-communicating
 animation. Override the tokens to rebrand everything.
 
+## Embedded connections and Sites
+
+Optional `@opengeni/react/connect` exports `useConnect`, `ConnectChooser`,
+`ConnectSetup`, `ConnectAccounts`, and the composed `ConnectPanel`. Inject one
+`@opengeni/connect` controller per authenticated actor/workspace and dispose it
+when that scope changes. The controller uses your authenticated backend proxy;
+never place an organization key in browser props. Import
+`@opengeni/react/connect.css` for opt-in, scoped styles without Tailwind.
+
+```tsx
+import { ConnectPanel } from "@opengeni/react/connect";
+import "@opengeni/react/connect.css";
+
+<ConnectPanel
+  controller={controller}
+  returnUrl={hostSelectedReturnUrl}
+  onAuthorize={hostAuthorizeFromClick}
+/>;
+```
+
+The host owns synchronous popup/full-redirect navigation and pending-attempt
+recovery. Backend state, not a popup message or URL query, proves completion.
+Operation installation uses explicit selection; OAuth success alone is not
+installation. Account disconnect requires an observed version and confirmation,
+revokes local OpenGeni access only, and never silently retries an unknown outcome.
+Provider readiness is deployment-dependent; use the server catalog rather than
+assuming every OAuth application or operator-managed provider is configured.
+
+Optional `@opengeni/react/sites` exports `SiteList`, `SiteDetail`, and `SiteClient`.
+Pass the public SDK client through your host proxy. `onOpen` owns list
+navigation. Authoring buttons and prompts belong to the host and use the ordinary
+session SDK; they are not part of the Site component API. `SiteDetail` reuses `PublishedHtmlArtifactFrame`, accepts
+an optional authenticated/filtered tool bridge, and removes the frame after
+read-authority refresh failure. Loaded Sites revalidate every 15 seconds;
+downloaded HTML cannot be recalled and every tool call still needs live authority.
+
+`canPublish` is only a presentation hint. Version-checked rollback/archive/restore
+remain subject to backend `artifacts:publish` permission. Sites stay workspace
+shared, even if a source session is private. See
+[`examples/embedded-product`](../../examples/embedded-product/README.md) for the
+runnable loopback host reference. Native route reuse and full visual acceptance
+are not implied by these optional package surfaces.
 ## Conversation UI
 
 Use `SessionConversation` for an existing session, or compose `MessageTimeline`

package/dist/artifacts.js

@@ -1,3 +1,10 @@
+import {
+  EditablePresentationArtifactSurface,
+  PresentationArtifactSurface,
+  PresentationEditor,
+  PresentationProjectionArtifactSurface,
+  PresentationProjectionEditor
+} from "./chunk-PEI6RANI.js";
 import {
   DocumentArtifactSurface,
   DocumentEditor,
@@ -5,6 +12,12 @@ import {
   DocumentProjectionEditor,
   EditableDocumentArtifactSurface
 } from "./chunk-HUIKIDM5.js";
+import {
+  PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX,
+  PublishedHtmlArtifactFrame,
+  openGeniSiteBridgePortFromBootstrap,
+  publishedHtmlArtifactDocument
+} from "./chunk-BRFMGY4L.js";
 import {
   EditableSpreadsheetArtifactSurface,
   EditableSpreadsheetGrid,
@@ -12,292 +25,18 @@ import {
   SpreadsheetGrid,
   SpreadsheetProjectionGrid
 } from "./chunk-ICA6R6TW.js";
-import {
-  EditablePresentationArtifactSurface,
-  PresentationArtifactSurface,
-  PresentationEditor,
-  PresentationProjectionArtifactSurface,
-  PresentationProjectionEditor
-} from "./chunk-PEI6RANI.js";
 import {
   ArtifactSurface,
   EditableArtifactMessage
 } from "./chunk-KCGXPP5V.js";
 import "./chunk-22KP6LR5.js";
 
-// src/components/artifacts/published-html-artifact-frame.tsx
-import {
-  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL,
-  OPENGENI_SITE_BRIDGE_READY,
-  OPENGENI_SITE_BRIDGE_RESPONSE,
-  OPENGENI_SITE_BRIDGE_VERSION,
-  isOpenGeniSiteBridgeCancelMessage,
-  isOpenGeniSiteBridgeConnectMessage,
-  isOpenGeniSiteBridgeRequestMessage,
-  sanitizeOpenGeniSiteToolCallRequest,
-  isSiteHttpRequest,
-  serveSiteHttp
-} from "@opengeni/sdk/site";
-import { useEffect, useRef } from "react";
-import { jsx } from "react/jsx-runtime";
-var PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX = [
-  "allow-downloads",
-  "allow-forms",
-  "allow-modals",
-  "allow-orientation-lock",
-  "allow-pointer-lock",
-  "allow-popups",
-  "allow-popups-to-escape-sandbox",
-  "allow-presentation",
-  "allow-scripts"
-].join(" ");
-var SITE_BRIDGE_BOOTSTRAP_SCRIPT = `<script>(()=>{const key=${JSON.stringify(
-  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL
-)};const parentWindow=window.parent;if(parentWindow===window)return;window.addEventListener("message",event=>{const data=event.data;if(event.source!==parentWindow||!data||data.type!==${JSON.stringify(
-  OPENGENI_SITE_BRIDGE_READY
-)}||data.version!==${OPENGENI_SITE_BRIDGE_VERSION}||event.ports.length!==1)return;const port=event.ports[0];const previous=window[key]?.port;if(previous&&previous!==port)previous.close();Object.defineProperty(window,key,{configurable:true,value:{port}});port.start();});})();</script>`;
-function publishedHtmlArtifactDocument(html, toolBridgeEnabled) {
-  if (!toolBridgeEnabled) return html;
-  const doctypeEnd = leadingDoctypeEnd(html);
-  if (doctypeEnd >= 0) {
-    return `${html.slice(0, doctypeEnd + 1)}${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html.slice(doctypeEnd + 1)}`;
-  }
-  return `${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html}`;
-}
-function leadingDoctypeEnd(html) {
-  const lower = html.toLowerCase();
-  let cursor = html.charCodeAt(0) === 65279 ? 1 : 0;
-  while (cursor < html.length) {
-    while (/\s/.test(html[cursor] ?? "")) cursor += 1;
-    if (!html.startsWith("<!--", cursor)) break;
-    const commentEnd = html.indexOf("-->", cursor + 4);
-    if (commentEnd < 0) return -1;
-    cursor = commentEnd + 3;
-  }
-  if (!lower.startsWith("<!doctype", cursor)) return -1;
-  return html.indexOf(">", cursor + 9);
-}
-function PublishedHtmlArtifactFrame(props) {
-  const frameRef = useRef(null);
-  const bridgeRef = useRef(props.toolBridge);
-  const onFrameLoadRef = useRef(() => void 0);
-  const frameLoadPendingRef = useRef(false);
-  const toolBridgeEnabled = props.toolBridge !== void 0;
-  useEffect(() => {
-    bridgeRef.current = props.toolBridge;
-  }, [props.toolBridge]);
-  useEffect(() => {
-    if (!toolBridgeEnabled || typeof window === "undefined") return;
-    const requests = new SiteBridgeRequestRegistry();
-    const attachToolPort = (data, ports) => {
-      const port = openGeniSiteBridgePortFromBootstrap(data, ports);
-      if (!port) return;
-      requests.addPort(port);
-      port.addEventListener("message", (portEvent) => {
-        const message = portEvent.data;
-        if (isOpenGeniSiteBridgeCancelMessage(message)) {
-          requests.cancel(port, message.requestId);
-          return;
-        }
-        if (isSiteHttpRequest(message) && portEvent.ports.length === 1) {
-          const controller2 = requests.start(port, message.requestId);
-          if (!controller2) {
-            portEvent.ports[0].close();
-            return;
-          }
-          void serveSiteHttp(
-            message,
-            portEvent.ports[0],
-            async (request, signal) => {
-              const fetch = bridgeRef.current?.fetch;
-              if (!fetch) throw new Error("This Site host does not support the session SDK");
-              return fetch(request, signal);
-            },
-            controller2.signal
-          ).finally(() => requests.complete(port, message.requestId, controller2));
-          return;
-        }
-        if (!isOpenGeniSiteBridgeRequestMessage(message)) return;
-        const controller = requests.start(port, message.requestId);
-        if (!controller) {
-          port.postMessage({
-            type: OPENGENI_SITE_BRIDGE_RESPONSE,
-            version: OPENGENI_SITE_BRIDGE_VERSION,
-            requestId: message.requestId,
-            ok: false,
-            error: {
-              code: "duplicate_request_id",
-              message: "A Site tool request with this id is already running",
-              retryable: false
-            }
-          });
-          return;
-        }
-        void handleSiteBridgeRequest(bridgeRef.current, message, controller.signal).then((value) => {
-          if (!controller.signal.aborted) {
-            port.postMessage({
-              type: OPENGENI_SITE_BRIDGE_RESPONSE,
-              version: OPENGENI_SITE_BRIDGE_VERSION,
-              requestId: message.requestId,
-              ok: true,
-              value
-            });
-          }
-        }).catch((error) => {
-          if (!controller.signal.aborted) {
-            port.postMessage({
-              type: OPENGENI_SITE_BRIDGE_RESPONSE,
-              version: OPENGENI_SITE_BRIDGE_VERSION,
-              requestId: message.requestId,
-              ok: false,
-              error: siteBridgeError(error)
-            });
-          }
-        }).finally(() => requests.complete(port, message.requestId, controller));
-      });
-      port.addEventListener("messageerror", () => requests.closePort(port));
-      port.start();
-      port.postMessage({
-        type: OPENGENI_SITE_BRIDGE_READY,
-        version: OPENGENI_SITE_BRIDGE_VERSION
-      });
-    };
-    const documentLease = new SiteBridgeDocumentLease(attachToolPort, () => requests.closeAll());
-    const onFrameLoad = () => {
-      frameLoadPendingRef.current = false;
-      const frameWindow = frameRef.current?.contentWindow ?? null;
-      if (!frameWindow) return;
-      documentLease.load(frameWindow);
-    };
-    onFrameLoadRef.current = onFrameLoad;
-    if (frameLoadPendingRef.current) {
-      frameLoadPendingRef.current = false;
-      onFrameLoad();
-    }
-    return () => {
-      onFrameLoadRef.current = () => void 0;
-      documentLease.close();
-    };
-  }, [props.html, toolBridgeEnabled]);
-  return /* @__PURE__ */ jsx(
-    "iframe",
-    {
-      ref: frameRef,
-      title: props.title,
-      sandbox: PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX,
-      referrerPolicy: "no-referrer",
-      srcDoc: publishedHtmlArtifactDocument(props.html, toolBridgeEnabled),
-      onLoad: () => {
-        frameLoadPendingRef.current = true;
-        onFrameLoadRef.current();
-      },
-      className: props.className,
-      style: props.style
-    }
-  );
-}
-var SiteBridgeRequestRegistry = class {
-  controllersByPort = /* @__PURE__ */ new Map();
-  addPort(port) {
-    if (!this.controllersByPort.has(port)) this.controllersByPort.set(port, /* @__PURE__ */ new Map());
-  }
-  start(port, requestId) {
-    const controllers = this.controllersByPort.get(port);
-    if (!controllers || controllers.has(requestId)) return null;
-    const controller = new AbortController();
-    controllers.set(requestId, controller);
-    return controller;
-  }
-  cancel(port, requestId) {
-    const controllers = this.controllersByPort.get(port);
-    const controller = controllers?.get(requestId);
-    if (!controller) return;
-    controller.abort(new Error("Site tool request cancelled"));
-    controllers.delete(requestId);
-  }
-  complete(port, requestId, controller) {
-    const controllers = this.controllersByPort.get(port);
-    if (controllers?.get(requestId) === controller) controllers.delete(requestId);
-  }
-  closePort(port) {
-    const controllers = this.controllersByPort.get(port);
-    if (!controllers) return;
-    for (const controller of controllers.values()) {
-      controller.abort(new Error("Site tool bridge port closed"));
-    }
-    controllers.clear();
-    this.controllersByPort.delete(port);
-    port.close();
-  }
-  closeAll() {
-    for (const port of [...this.controllersByPort.keys()]) this.closePort(port);
-  }
-};
-var SiteBridgeDocumentLease = class {
-  constructor(attachToolPort, closeActivePorts, createMessageChannel = () => new MessageChannel()) {
-    this.attachToolPort = attachToolPort;
-    this.closeActivePorts = closeActivePorts;
-    this.createMessageChannel = createMessageChannel;
-  }
-  loaded = false;
-  bootstrapPort = null;
-  load(frameWindow) {
-    if (this.loaded) {
-      this.close();
-      return false;
-    }
-    this.loaded = true;
-    const channel = this.createMessageChannel();
-    this.bootstrapPort = channel.port1;
-    channel.port1.addEventListener("message", (event) => {
-      this.attachToolPort(event.data, event.ports);
-    });
-    channel.port1.start();
-    frameWindow.postMessage(
-      {
-        type: OPENGENI_SITE_BRIDGE_READY,
-        version: OPENGENI_SITE_BRIDGE_VERSION
-      },
-      "*",
-      [channel.port2]
-    );
-    return true;
-  }
-  close() {
-    this.bootstrapPort?.close();
-    this.bootstrapPort = null;
-    this.closeActivePorts();
-  }
-};
-function openGeniSiteBridgePortFromBootstrap(data, ports) {
-  if (!isOpenGeniSiteBridgeConnectMessage(data)) return null;
-  return ports.length === 1 ? ports[0] : null;
-}
-async function handleSiteBridgeRequest(bridge, message, signal) {
-  if (!bridge) throw new Error("Site tool bridge is unavailable");
-  if (message.method === "catalog") return await bridge.catalog({ signal });
-  if (message.method === "declarations") {
-    if (!bridge.declarations) throw new Error("Site tool declarations are unavailable");
-    return await bridge.declarations({ signal });
-  }
-  return await bridge.call(sanitizeOpenGeniSiteToolCallRequest(message.payload), { signal });
-}
-function siteBridgeError(error) {
-  const candidate = error;
-  return {
-    code: typeof candidate?.code === "string" ? candidate.code : "site_tool_call_failed",
-    message: typeof candidate?.message === "string" ? candidate.message : "Site tool request failed",
-    retryable: candidate?.retryable === true,
-    outcomeUnknown: candidate?.outcomeUnknown === true
-  };
-}
-
 // src/components/artifacts/editable-artifact-workbench.tsx
 import {
   createBrowserEditableArtifactSession
 } from "@opengeni/sdk/editable-artifacts";
-import { useCallback, useEffect as useEffect2, useRef as useRef2, useState } from "react";
-import { jsx as jsx2 } from "react/jsx-runtime";
+import { useCallback, useEffect, useRef, useState } from "react";
+import { jsx } from "react/jsx-runtime";
 function EditableArtifactWorkbench({
   session,
   document,
@@ -306,7 +45,7 @@ function EditableArtifactWorkbench({
 }) {
   switch (session.modality) {
     case "document":
-      return /* @__PURE__ */ jsx2(
+      return /* @__PURE__ */ jsx(
         EditableDocumentArtifactSurface,
         {
           ...document,
@@ -315,9 +54,9 @@ function EditableArtifactWorkbench({
         }
       );
     case "spreadsheet":
-      return /* @__PURE__ */ jsx2(EditableSpreadsheetArtifactSurface, { ...spreadsheet, session });
+      return /* @__PURE__ */ jsx(EditableSpreadsheetArtifactSurface, { ...spreadsheet, session });
     case "presentation":
-      return /* @__PURE__ */ jsx2(EditablePresentationArtifactSurface, { ...presentation, session });
+      return /* @__PURE__ */ jsx(EditablePresentationArtifactSurface, { ...presentation, session });
   }
 }
 function EditableArtifactWorkbenchHost({
@@ -327,13 +66,13 @@ function EditableArtifactWorkbenchHost({
   spreadsheet,
   presentation
 }) {
-  const createSessionRef = useRef2(createSession);
+  const createSessionRef = useRef(createSession);
   const [retryEpoch, setRetryEpoch] = useState(0);
   const [state, setState] = useState({ key: null, session: null, error: null });
-  useEffect2(() => {
+  useEffect(() => {
     createSessionRef.current = createSession;
   }, [createSession]);
-  useEffect2(() => {
+  useEffect(() => {
     let owned = null;
     setState({ key: sessionKey, session: null, error: null });
     try {
@@ -355,7 +94,7 @@ function EditableArtifactWorkbenchHost({
   const retry = useCallback(() => setRetryEpoch((value) => value + 1), []);
   const currentError = state.key === sessionKey ? state.error : null;
   if (state.key === sessionKey && state.session) {
-    return /* @__PURE__ */ jsx2(
+    return /* @__PURE__ */ jsx(
       EditableArtifactWorkbench,
       {
         session: state.session,
@@ -365,7 +104,7 @@ function EditableArtifactWorkbenchHost({
       }
     );
   }
-  return /* @__PURE__ */ jsx2(
+  return /* @__PURE__ */ jsx(
     EditableArtifactMessage,
     {
       title: currentError ? "Could not open this artifact" : "Opening artifact",
@@ -382,7 +121,7 @@ function BrowserEditableArtifactWorkbench({
 }) {
   const sessionKey = browserSessionKey(options);
   const createSession = useCallback(() => createBrowserEditableArtifactSession(options), [options]);
-  return /* @__PURE__ */ jsx2(
+  return /* @__PURE__ */ jsx(
     EditableArtifactWorkbenchHost,
     {
       sessionKey,

package/dist/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/components/artifacts/published-html-artifact-frame.tsx","../src/components/artifacts/editable-artifact-workbench.tsx"],"sourcesContent":["import {\n  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL,\n  OPENGENI_SITE_BRIDGE_READY,\n  OPENGENI_SITE_BRIDGE_RESPONSE,\n  OPENGENI_SITE_BRIDGE_VERSION,\n  isOpenGeniSiteBridgeCancelMessage,\n  isOpenGeniSiteBridgeConnectMessage,\n  isOpenGeniSiteBridgeRequestMessage,\n  sanitizeOpenGeniSiteToolCallRequest,\n  isSiteHttpRequest,\n  serveSiteHttp,\n  type SiteHttpRequest,\n  type OpenGeniSiteBridgeResponseMessage,\n  type OpenGeniSiteToolCatalog,\n} from \"@opengeni/sdk/site\";\nimport type {\n  ToolGatewayCallRequest,\n  ToolGatewayCallResponse,\n  ToolGatewayDeclarationsResponse,\n} from \"@opengeni/sdk\";\nimport { useEffect, useRef, type CSSProperties } from \"react\";\n\nexport const PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX = [\n  \"allow-downloads\",\n  \"allow-forms\",\n  \"allow-modals\",\n  \"allow-orientation-lock\",\n  \"allow-pointer-lock\",\n  \"allow-popups\",\n  \"allow-popups-to-escape-sandbox\",\n  \"allow-presentation\",\n  \"allow-scripts\",\n].join(\" \");\n\nexport type PublishedHtmlArtifactFrameProps = {\n  html: string;\n  title: string;\n  className?: string;\n  style?: CSSProperties;\n  toolBridge?: PublishedHtmlArtifactToolBridge;\n};\n\nexport type PublishedHtmlArtifactToolBridge = {\n  fetch?: (request: SiteHttpRequest, signal: AbortSignal) => Promise<Response>;\n  catalog: (options: { signal: AbortSignal }) => Promise<OpenGeniSiteToolCatalog>;\n  call: (\n    request: ToolGatewayCallRequest,\n    options: { signal: AbortSignal },\n  ) => Promise<ToolGatewayCallResponse>;\n  declarations?: (options: { signal: AbortSignal }) => Promise<ToolGatewayDeclarationsResponse>;\n};\n\nconst SITE_BRIDGE_BOOTSTRAP_SCRIPT = `<script>(()=>{const key=${JSON.stringify(\n  OPENGENI_SITE_BRIDGE_BOOTSTRAP_GLOBAL,\n)};const parentWindow=window.parent;if(parentWindow===window)return;window.addEventListener(\"message\",event=>{const data=event.data;if(event.source!==parentWindow||!data||data.type!==${JSON.stringify(\n  OPENGENI_SITE_BRIDGE_READY,\n)}||data.version!==${OPENGENI_SITE_BRIDGE_VERSION}||event.ports.length!==1)return;const port=event.ports[0];const previous=window[key]?.port;if(previous&&previous!==port)previous.close();Object.defineProperty(window,key,{configurable:true,value:{port}});port.start();});})();</script>`;\n\nexport function publishedHtmlArtifactDocument(html: string, toolBridgeEnabled: boolean): string {\n  if (!toolBridgeEnabled) return html;\n  const doctypeEnd = leadingDoctypeEnd(html);\n  if (doctypeEnd >= 0) {\n    return `${html.slice(0, doctypeEnd + 1)}${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html.slice(doctypeEnd + 1)}`;\n  }\n  return `${SITE_BRIDGE_BOOTSTRAP_SCRIPT}${html}`;\n}\n\nfunction leadingDoctypeEnd(html: string): number {\n  const lower = html.toLowerCase();\n  let cursor = html.charCodeAt(0) === 0xfeff ? 1 : 0;\n  while (cursor < html.length) {\n    while (/\\s/.test(html[cursor] ?? \"\")) cursor += 1;\n    if (!html.startsWith(\"<!--\", cursor)) break;\n    const commentEnd = html.indexOf(\"-->\", cursor + 4);\n    if (commentEnd < 0) return -1;\n    cursor = commentEnd + 3;\n  }\n  if (!lower.startsWith(\"<!doctype\", cursor)) return -1;\n  return html.indexOf(\">\", cursor + 9);\n}\n\n/**\n * Render exact published HTML in an opaque-origin iframe. Artifact scripts,\n * external resources, forms, popups, downloads, and the host-filtered tool\n * bridge work without granting parent-origin authority, shared cookies/storage,\n * or top-level navigation.\n */\nexport function PublishedHtmlArtifactFrame(props: PublishedHtmlArtifactFrameProps) {\n  const frameRef = useRef<HTMLIFrameElement | null>(null);\n  const bridgeRef = useRef(props.toolBridge);\n  const onFrameLoadRef = useRef<() => void>(() => undefined);\n  const frameLoadPendingRef = useRef(false);\n  const toolBridgeEnabled = props.toolBridge !== undefined;\n  useEffect(() => {\n    bridgeRef.current = props.toolBridge;\n  }, [props.toolBridge]);\n  useEffect(() => {\n    if (!toolBridgeEnabled || typeof window === \"undefined\") return;\n    const requests = new SiteBridgeRequestRegistry();\n    const attachToolPort = (data: unknown, ports: readonly MessagePort[]) => {\n      const port = openGeniSiteBridgePortFromBootstrap(data, ports);\n      if (!port) return;\n      requests.addPort(port);\n      port.addEventListener(\"message\", (portEvent: MessageEvent<unknown>) => {\n        const message = portEvent.data;\n        if (isOpenGeniSiteBridgeCancelMessage(message)) {\n          requests.cancel(port, message.requestId);\n          return;\n        }\n        if (isSiteHttpRequest(message) && portEvent.ports.length === 1) {\n          const controller = requests.start(port, message.requestId);\n          if (!controller) {\n            portEvent.ports[0]!.close();\n            return;\n          }\n          void serveSiteHttp(\n            message,\n            portEvent.ports[0]!,\n            async (request, signal) => {\n              const fetch = bridgeRef.current?.fetch;\n              if (!fetch) throw new Error(\"This Site host does not support the session SDK\");\n              return fetch(request, signal);\n            },\n            controller.signal,\n          ).finally(() => requests.complete(port, message.requestId, controller));\n          return;\n        }\n        if (!isOpenGeniSiteBridgeRequestMessage(message)) return;\n        const controller = requests.start(port, message.requestId);\n        if (!controller) {\n          port.postMessage({\n            type: OPENGENI_SITE_BRIDGE_RESPONSE,\n            version: OPENGENI_SITE_BRIDGE_VERSION,\n            requestId: message.requestId,\n            ok: false,\n            error: {\n              code: \"duplicate_request_id\",\n              message: \"A Site tool request with this id is already running\",\n              retryable: false,\n            },\n          } satisfies OpenGeniSiteBridgeResponseMessage);\n          return;\n        }\n        void handleSiteBridgeRequest(bridgeRef.current, message, controller.signal)\n          .then((value) => {\n            if (!controller.signal.aborted) {\n              port.postMessage({\n                type: OPENGENI_SITE_BRIDGE_RESPONSE,\n                version: OPENGENI_SITE_BRIDGE_VERSION,\n                requestId: message.requestId,\n                ok: true,\n                value,\n              } satisfies OpenGeniSiteBridgeResponseMessage);\n            }\n          })\n          .catch((error) => {\n            if (!controller.signal.aborted) {\n              port.postMessage({\n                type: OPENGENI_SITE_BRIDGE_RESPONSE,\n                version: OPENGENI_SITE_BRIDGE_VERSION,\n                requestId: message.requestId,\n                ok: false,\n                error: siteBridgeError(error),\n              } satisfies OpenGeniSiteBridgeResponseMessage);\n            }\n          })\n          .finally(() => requests.complete(port, message.requestId, controller));\n      });\n      port.addEventListener(\"messageerror\", () => requests.closePort(port));\n      port.start();\n      port.postMessage({\n        type: OPENGENI_SITE_BRIDGE_READY,\n        version: OPENGENI_SITE_BRIDGE_VERSION,\n      });\n    };\n    const documentLease = new SiteBridgeDocumentLease(attachToolPort, () => requests.closeAll());\n    const onFrameLoad = () => {\n      frameLoadPendingRef.current = false;\n      const frameWindow = frameRef.current?.contentWindow ?? null;\n      if (!frameWindow) return;\n      documentLease.load(frameWindow);\n    };\n    onFrameLoadRef.current = onFrameLoad;\n    if (frameLoadPendingRef.current) {\n      frameLoadPendingRef.current = false;\n      onFrameLoad();\n    }\n    return () => {\n      onFrameLoadRef.current = () => undefined;\n      documentLease.close();\n    };\n  }, [props.html, toolBridgeEnabled]);\n  return (\n    <iframe\n      ref={frameRef}\n      title={props.title}\n      sandbox={PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX}\n      referrerPolicy=\"no-referrer\"\n      srcDoc={publishedHtmlArtifactDocument(props.html, toolBridgeEnabled)}\n      onLoad={() => {\n        frameLoadPendingRef.current = true;\n        onFrameLoadRef.current();\n      }}\n      className={props.className}\n      style={props.style}\n    />\n  );\n}\n\nexport class SiteBridgeRequestRegistry {\n  private readonly controllersByPort = new Map<MessagePort, Map<string, AbortController>>();\n\n  addPort(port: MessagePort): void {\n    // Several SDK clients may share one document bootstrap. Document teardown,\n    // not another client connecting, revokes all of that document's ports.\n    if (!this.controllersByPort.has(port)) this.controllersByPort.set(port, new Map());\n  }\n\n  start(port: MessagePort, requestId: string): AbortController | null {\n    const controllers = this.controllersByPort.get(port);\n    if (!controllers || controllers.has(requestId)) return null;\n    const controller = new AbortController();\n    controllers.set(requestId, controller);\n    return controller;\n  }\n\n  cancel(port: MessagePort, requestId: string): void {\n    const controllers = this.controllersByPort.get(port);\n    const controller = controllers?.get(requestId);\n    if (!controller) return;\n    controller.abort(new Error(\"Site tool request cancelled\"));\n    controllers!.delete(requestId);\n  }\n\n  complete(port: MessagePort, requestId: string, controller: AbortController): void {\n    const controllers = this.controllersByPort.get(port);\n    if (controllers?.get(requestId) === controller) controllers.delete(requestId);\n  }\n\n  closePort(port: MessagePort): void {\n    const controllers = this.controllersByPort.get(port);\n    if (!controllers) return;\n    for (const controller of controllers.values()) {\n      controller.abort(new Error(\"Site tool bridge port closed\"));\n    }\n    controllers.clear();\n    this.controllersByPort.delete(port);\n    port.close();\n  }\n\n  closeAll(): void {\n    for (const port of [...this.controllersByPort.keys()]) this.closePort(port);\n  }\n}\n\nexport class SiteBridgeDocumentLease {\n  private loaded = false;\n  private bootstrapPort: MessagePort | null = null;\n\n  constructor(\n    private readonly attachToolPort: (data: unknown, ports: readonly MessagePort[]) => void,\n    private readonly closeActivePorts: () => void,\n    private readonly createMessageChannel: () => MessageChannel = () => new MessageChannel(),\n  ) {}\n\n  load(frameWindow: Pick<Window, \"postMessage\">): boolean {\n    if (this.loaded) {\n      this.close();\n      return false;\n    }\n    this.loaded = true;\n    const channel = this.createMessageChannel();\n    this.bootstrapPort = channel.port1;\n    channel.port1.addEventListener(\"message\", (event: MessageEvent<unknown>) => {\n      this.attachToolPort(event.data, event.ports);\n    });\n    channel.port1.start();\n    frameWindow.postMessage(\n      {\n        type: OPENGENI_SITE_BRIDGE_READY,\n        version: OPENGENI_SITE_BRIDGE_VERSION,\n      },\n      \"*\",\n      [channel.port2],\n    );\n    return true;\n  }\n\n  close(): void {\n    this.bootstrapPort?.close();\n    this.bootstrapPort = null;\n    this.closeActivePorts();\n  }\n}\n\nexport function openGeniSiteBridgePortFromBootstrap(\n  data: unknown,\n  ports: readonly MessagePort[],\n): MessagePort | null {\n  if (!isOpenGeniSiteBridgeConnectMessage(data)) return null;\n  return ports.length === 1 ? ports[0]! : null;\n}\n\nasync function handleSiteBridgeRequest(\n  bridge: PublishedHtmlArtifactToolBridge | undefined,\n  message: Parameters<typeof isOpenGeniSiteBridgeRequestMessage>[0] & {\n    method: \"catalog\" | \"call\" | \"declarations\";\n    requestId: string;\n    payload?: ToolGatewayCallRequest;\n  },\n  signal: AbortSignal,\n): Promise<OpenGeniSiteToolCatalog | ToolGatewayCallResponse | ToolGatewayDeclarationsResponse> {\n  if (!bridge) throw new Error(\"Site tool bridge is unavailable\");\n  if (message.method === \"catalog\") return await bridge.catalog({ signal });\n  if (message.method === \"declarations\") {\n    if (!bridge.declarations) throw new Error(\"Site tool declarations are unavailable\");\n    return await bridge.declarations({ signal });\n  }\n  return await bridge.call(sanitizeOpenGeniSiteToolCallRequest(message.payload!), { signal });\n}\n\nexport function siteBridgeError(error: unknown): {\n  code: string;\n  message: string;\n  retryable: boolean;\n  outcomeUnknown: boolean;\n} {\n  const candidate = error as {\n    code?: unknown;\n    message?: unknown;\n    retryable?: unknown;\n    outcomeUnknown?: unknown;\n  };\n  return {\n    code: typeof candidate?.code === \"string\" ? candidate.code : \"site_tool_call_failed\",\n    message:\n      typeof candidate?.message === \"string\" ? candidate.message : \"Site tool request failed\",\n    retryable: candidate?.retryable === true,\n    outcomeUnknown: candidate?.outcomeUnknown === true,\n  };\n}\n","import {\n  createBrowserEditableArtifactSession,\n  type CreateBrowserEditableArtifactSessionOptions,\n  type EditableArtifactBrowserRuntime,\n  type EditableArtifactSession,\n} from \"@opengeni/sdk/editable-artifacts\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\n\nimport { EditableArtifactMessage } from \"./editable-artifact-ui\";\nimport {\n  EditableDocumentArtifactSurface,\n  type EditableDocumentArtifactSurfaceProps,\n} from \"./editable-document\";\nimport {\n  EditablePresentationArtifactSurface,\n  type EditablePresentationArtifactSurfaceProps,\n} from \"./editable-presentation\";\nimport {\n  EditableSpreadsheetArtifactSurface,\n  type EditableSpreadsheetArtifactSurfaceProps,\n} from \"./editable-spreadsheet\";\n\nexport type EditableArtifactWorkbenchProps = Readonly<{\n  session: EditableArtifactSession;\n  document?: Omit<EditableDocumentArtifactSurfaceProps, \"session\">;\n  spreadsheet?: Omit<EditableSpreadsheetArtifactSurfaceProps, \"session\">;\n  presentation?: Omit<EditablePresentationArtifactSurfaceProps, \"session\">;\n}>;\n\nexport type EditableArtifactWorkbenchHostProps = Omit<EditableArtifactWorkbenchProps, \"session\"> &\n  Readonly<{\n    /**\n     * Complete identity of the browser session authority. Change this when the\n     * artifact, deployment, principal, or authorization epoch changes.\n     */\n    sessionKey: string;\n    /** Called for the active keyed lifecycle and again only after replacement or retry. */\n    createSession: () => EditableArtifactSession;\n  }>;\n\ntype DefaultBrowserArtifactTransport = Omit<\n  NonNullable<CreateBrowserEditableArtifactSessionOptions[\"transport\"]>,\n  \"apiKey\" | \"fetch\" | \"headers\" | \"webSocketFactory\"\n> &\n  Readonly<{\n    /** Static deployment auth headers; rotate authorizationEpoch when they change. */\n    headers?: Readonly<Record<string, string>>;\n  }>;\n\nexport type BrowserEditableArtifactWorkbenchOptions = Omit<\n  CreateBrowserEditableArtifactSessionOptions,\n  \"runtime\" | \"storage\" | \"transport\"\n> &\n  Readonly<{\n    /** Default module Worker only; custom Worker hosts use EditableArtifactWorkbenchHost. */\n    runtime: Omit<EditableArtifactBrowserRuntime, \"workerFactory\">;\n    /** Default fetch/WebSocket only; static deployment auth headers are supported. */\n    transport?: DefaultBrowserArtifactTransport;\n  }>;\n\nexport type BrowserEditableArtifactWorkbenchProps = Omit<\n  EditableArtifactWorkbenchProps,\n  \"session\"\n> &\n  Readonly<{ options: BrowserEditableArtifactWorkbenchOptions }>;\n\n/**\n * One modality-neutral SDK workbench. Embedding hosts keep one route/component;\n * each artifact still renders through its complete first-party editor surface.\n */\nexport function EditableArtifactWorkbench({\n  session,\n  document,\n  spreadsheet,\n  presentation,\n}: EditableArtifactWorkbenchProps) {\n  switch (session.modality) {\n    case \"document\":\n      return (\n        <EditableDocumentArtifactSurface\n          {...document}\n          session={session}\n          title={document?.title ?? \"Document\"}\n        />\n      );\n    case \"spreadsheet\":\n      return <EditableSpreadsheetArtifactSurface {...spreadsheet} session={session} />;\n    case \"presentation\":\n      return <EditablePresentationArtifactSurface {...presentation} session={session} />;\n  }\n}\n\n/**\n * Route/embed composition that owns exactly one SDK session. The host supplies\n * the authenticated SDK factory; React guarantees replacement and teardown.\n */\nexport function EditableArtifactWorkbenchHost({\n  sessionKey,\n  createSession,\n  document,\n  spreadsheet,\n  presentation,\n}: EditableArtifactWorkbenchHostProps) {\n  const createSessionRef = useRef(createSession);\n  const [retryEpoch, setRetryEpoch] = useState(0);\n  const [state, setState] = useState<\n    | Readonly<{ key: string; session: EditableArtifactSession; error: null }>\n    | Readonly<{ key: string | null; session: null; error: Error | null }>\n  >({ key: null, session: null, error: null });\n\n  useEffect(() => {\n    createSessionRef.current = createSession;\n  }, [createSession]);\n\n  useEffect(() => {\n    let owned: EditableArtifactSession | null = null;\n    setState({ key: sessionKey, session: null, error: null });\n    try {\n      owned = createSessionRef.current();\n      setState({ key: sessionKey, session: owned, error: null });\n    } catch (cause) {\n      setState({\n        key: sessionKey,\n        session: null,\n        error: cause instanceof Error ? cause : new Error(\"Could not create artifact session\"),\n      });\n    }\n    return () => {\n      const closing = owned;\n      owned = null;\n      if (closing) void closing.close().catch(() => undefined);\n    };\n  }, [retryEpoch, sessionKey]);\n\n  const retry = useCallback(() => setRetryEpoch((value) => value + 1), []);\n  const currentError = state.key === sessionKey ? state.error : null;\n  if (state.key === sessionKey && state.session) {\n    return (\n      <EditableArtifactWorkbench\n        session={state.session}\n        {...(document ? { document } : {})}\n        {...(spreadsheet ? { spreadsheet } : {})}\n        {...(presentation ? { presentation } : {})}\n      />\n    );\n  }\n  return (\n    <EditableArtifactMessage\n      title={currentError ? \"Could not open this artifact\" : \"Opening artifact\"}\n      detail={currentError?.message ?? \"Starting the secure editing session…\"}\n      retry={currentError ? retry : undefined}\n    />\n  );\n}\n\n/**\n * Complete default-browser composition for embedders: verified WASM Worker,\n * durable IndexedDB state, authenticated live sync, teardown, and the matching\n * first-party editor. Advanced/custom transports compose the lower-level host.\n */\nexport function BrowserEditableArtifactWorkbench({\n  options,\n  document,\n  spreadsheet,\n  presentation,\n}: BrowserEditableArtifactWorkbenchProps) {\n  const sessionKey = browserSessionKey(options);\n  const createSession = useCallback(() => createBrowserEditableArtifactSession(options), [options]);\n  return (\n    <EditableArtifactWorkbenchHost\n      sessionKey={sessionKey}\n      createSession={createSession}\n      {...(document ? { document } : {})}\n      {...(spreadsheet ? { spreadsheet } : {})}\n      {...(presentation ? { presentation } : {})}\n    />\n  );\n}\n\nfunction browserSessionKey(options: BrowserEditableArtifactWorkbenchOptions): string {\n  const transport = options.transport\n    ? {\n        ...options.transport,\n        // Credentials must not be copied into React lifecycle keys. The\n        // authorization epoch is the explicit credential/grant rotation fence.\n        headers: options.transport.headers\n          ? Object.keys(options.transport.headers).sort()\n          : undefined,\n      }\n    : null;\n  return JSON.stringify(\n    {\n      baseUrl: options.baseUrl,\n      workspaceId: options.workspaceId,\n      artifact: { id: options.artifact.id, modality: options.artifact.modality },\n      storageAuthority: options.storageAuthority,\n      runtime: options.runtime,\n      replicaId: options.replicaId ?? null,\n      transport,\n    },\n    (_key, value: unknown) => (value instanceof URL ? value.href : value),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAMP,SAAS,WAAW,cAAkC;AA6KlD;AA3KG,IAAM,yCAAyC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,GAAG;AAoBV,IAAM,+BAA+B,2BAA2B,KAAK;AAAA,EACnE;AACF,CAAC,wLAAwL,KAAK;AAAA,EAC5L;AACF,CAAC,oBAAoB,4BAA4B;AAE1C,SAAS,8BAA8B,MAAc,mBAAoC;AAC9F,MAAI,CAAC,kBAAmB,QAAO;AAC/B,QAAM,aAAa,kBAAkB,IAAI;AACzC,MAAI,cAAc,GAAG;AACnB,WAAO,GAAG,KAAK,MAAM,GAAG,aAAa,CAAC,CAAC,GAAG,4BAA4B,GAAG,KAAK,MAAM,aAAa,CAAC,CAAC;AAAA,EACrG;AACA,SAAO,GAAG,4BAA4B,GAAG,IAAI;AAC/C;AAEA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,QAAQ,KAAK,YAAY;AAC/B,MAAI,SAAS,KAAK,WAAW,CAAC,MAAM,QAAS,IAAI;AACjD,SAAO,SAAS,KAAK,QAAQ;AAC3B,WAAO,KAAK,KAAK,KAAK,MAAM,KAAK,EAAE,EAAG,WAAU;AAChD,QAAI,CAAC,KAAK,WAAW,QAAQ,MAAM,EAAG;AACtC,UAAM,aAAa,KAAK,QAAQ,OAAO,SAAS,CAAC;AACjD,QAAI,aAAa,EAAG,QAAO;AAC3B,aAAS,aAAa;AAAA,EACxB;AACA,MAAI,CAAC,MAAM,WAAW,aAAa,MAAM,EAAG,QAAO;AACnD,SAAO,KAAK,QAAQ,KAAK,SAAS,CAAC;AACrC;AAQO,SAAS,2BAA2B,OAAwC;AACjF,QAAM,WAAW,OAAiC,IAAI;AACtD,QAAM,YAAY,OAAO,MAAM,UAAU;AACzC,QAAM,iBAAiB,OAAmB,MAAM,MAAS;AACzD,QAAM,sBAAsB,OAAO,KAAK;AACxC,QAAM,oBAAoB,MAAM,eAAe;AAC/C,YAAU,MAAM;AACd,cAAU,UAAU,MAAM;AAAA,EAC5B,GAAG,CAAC,MAAM,UAAU,CAAC;AACrB,YAAU,MAAM;AACd,QAAI,CAAC,qBAAqB,OAAO,WAAW,YAAa;AACzD,UAAM,WAAW,IAAI,0BAA0B;AAC/C,UAAM,iBAAiB,CAAC,MAAe,UAAkC;AACvE,YAAM,OAAO,oCAAoC,MAAM,KAAK;AAC5D,UAAI,CAAC,KAAM;AACX,eAAS,QAAQ,IAAI;AACrB,WAAK,iBAAiB,WAAW,CAAC,cAAqC;AACrE,cAAM,UAAU,UAAU;AAC1B,YAAI,kCAAkC,OAAO,GAAG;AAC9C,mBAAS,OAAO,MAAM,QAAQ,SAAS;AACvC;AAAA,QACF;AACA,YAAI,kBAAkB,OAAO,KAAK,UAAU,MAAM,WAAW,GAAG;AAC9D,gBAAMA,cAAa,SAAS,MAAM,MAAM,QAAQ,SAAS;AACzD,cAAI,CAACA,aAAY;AACf,sBAAU,MAAM,CAAC,EAAG,MAAM;AAC1B;AAAA,UACF;AACA,eAAK;AAAA,YACH;AAAA,YACA,UAAU,MAAM,CAAC;AAAA,YACjB,OAAO,SAAS,WAAW;AACzB,oBAAM,QAAQ,UAAU,SAAS;AACjC,kBAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iDAAiD;AAC7E,qBAAO,MAAM,SAAS,MAAM;AAAA,YAC9B;AAAA,YACAA,YAAW;AAAA,UACb,EAAE,QAAQ,MAAM,SAAS,SAAS,MAAM,QAAQ,WAAWA,WAAU,CAAC;AACtE;AAAA,QACF;AACA,YAAI,CAAC,mCAAmC,OAAO,EAAG;AAClD,cAAM,aAAa,SAAS,MAAM,MAAM,QAAQ,SAAS;AACzD,YAAI,CAAC,YAAY;AACf,eAAK,YAAY;AAAA,YACf,MAAM;AAAA,YACN,SAAS;AAAA,YACT,WAAW,QAAQ;AAAA,YACnB,IAAI;AAAA,YACJ,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS;AAAA,cACT,WAAW;AAAA,YACb;AAAA,UACF,CAA6C;AAC7C;AAAA,QACF;AACA,aAAK,wBAAwB,UAAU,SAAS,SAAS,WAAW,MAAM,EACvE,KAAK,CAAC,UAAU;AACf,cAAI,CAAC,WAAW,OAAO,SAAS;AAC9B,iBAAK,YAAY;AAAA,cACf,MAAM;AAAA,cACN,SAAS;AAAA,cACT,WAAW,QAAQ;AAAA,cACnB,IAAI;AAAA,cACJ;AAAA,YACF,CAA6C;AAAA,UAC/C;AAAA,QACF,CAAC,EACA,MAAM,CAAC,UAAU;AAChB,cAAI,CAAC,WAAW,OAAO,SAAS;AAC9B,iBAAK,YAAY;AAAA,cACf,MAAM;AAAA,cACN,SAAS;AAAA,cACT,WAAW,QAAQ;AAAA,cACnB,IAAI;AAAA,cACJ,OAAO,gBAAgB,KAAK;AAAA,YAC9B,CAA6C;AAAA,UAC/C;AAAA,QACF,CAAC,EACA,QAAQ,MAAM,SAAS,SAAS,MAAM,QAAQ,WAAW,UAAU,CAAC;AAAA,MACzE,CAAC;AACD,WAAK,iBAAiB,gBAAgB,MAAM,SAAS,UAAU,IAAI,CAAC;AACpE,WAAK,MAAM;AACX,WAAK,YAAY;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,UAAM,gBAAgB,IAAI,wBAAwB,gBAAgB,MAAM,SAAS,SAAS,CAAC;AAC3F,UAAM,cAAc,MAAM;AACxB,0BAAoB,UAAU;AAC9B,YAAM,cAAc,SAAS,SAAS,iBAAiB;AACvD,UAAI,CAAC,YAAa;AAClB,oBAAc,KAAK,WAAW;AAAA,IAChC;AACA,mBAAe,UAAU;AACzB,QAAI,oBAAoB,SAAS;AAC/B,0BAAoB,UAAU;AAC9B,kBAAY;AAAA,IACd;AACA,WAAO,MAAM;AACX,qBAAe,UAAU,MAAM;AAC/B,oBAAc,MAAM;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,MAAM,MAAM,iBAAiB,CAAC;AAClC,SACE;AAAA,IAAC;AAAA;AAAA,MACC,KAAK;AAAA,MACL,OAAO,MAAM;AAAA,MACb,SAAS;AAAA,MACT,gBAAe;AAAA,MACf,QAAQ,8BAA8B,MAAM,MAAM,iBAAiB;AAAA,MACnE,QAAQ,MAAM;AACZ,4BAAoB,UAAU;AAC9B,uBAAe,QAAQ;AAAA,MACzB;AAAA,MACA,WAAW,MAAM;AAAA,MACjB,OAAO,MAAM;AAAA;AAAA,EACf;AAEJ;AAEO,IAAM,4BAAN,MAAgC;AAAA,EACpB,oBAAoB,oBAAI,IAA+C;AAAA,EAExF,QAAQ,MAAyB;AAG/B,QAAI,CAAC,KAAK,kBAAkB,IAAI,IAAI,EAAG,MAAK,kBAAkB,IAAI,MAAM,oBAAI,IAAI,CAAC;AAAA,EACnF;AAAA,EAEA,MAAM,MAAmB,WAA2C;AAClE,UAAM,cAAc,KAAK,kBAAkB,IAAI,IAAI;AACnD,QAAI,CAAC,eAAe,YAAY,IAAI,SAAS,EAAG,QAAO;AACvD,UAAM,aAAa,IAAI,gBAAgB;AACvC,gBAAY,IAAI,WAAW,UAAU;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,MAAmB,WAAyB;AACjD,UAAM,cAAc,KAAK,kBAAkB,IAAI,IAAI;AACnD,UAAM,aAAa,aAAa,IAAI,SAAS;AAC7C,QAAI,CAAC,WAAY;AACjB,eAAW,MAAM,IAAI,MAAM,6BAA6B,CAAC;AACzD,gBAAa,OAAO,SAAS;AAAA,EAC/B;AAAA,EAEA,SAAS,MAAmB,WAAmB,YAAmC;AAChF,UAAM,cAAc,KAAK,kBAAkB,IAAI,IAAI;AACnD,QAAI,aAAa,IAAI,SAAS,MAAM,WAAY,aAAY,OAAO,SAAS;AAAA,EAC9E;AAAA,EAEA,UAAU,MAAyB;AACjC,UAAM,cAAc,KAAK,kBAAkB,IAAI,IAAI;AACnD,QAAI,CAAC,YAAa;AAClB,eAAW,cAAc,YAAY,OAAO,GAAG;AAC7C,iBAAW,MAAM,IAAI,MAAM,8BAA8B,CAAC;AAAA,IAC5D;AACA,gBAAY,MAAM;AAClB,SAAK,kBAAkB,OAAO,IAAI;AAClC,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,WAAiB;AACf,eAAW,QAAQ,CAAC,GAAG,KAAK,kBAAkB,KAAK,CAAC,EAAG,MAAK,UAAU,IAAI;AAAA,EAC5E;AACF;AAEO,IAAM,0BAAN,MAA8B;AAAA,EAInC,YACmB,gBACA,kBACA,uBAA6C,MAAM,IAAI,eAAe,GACvF;AAHiB;AACA;AACA;AAAA,EAChB;AAAA,EAPK,SAAS;AAAA,EACT,gBAAoC;AAAA,EAQ5C,KAAK,aAAmD;AACtD,QAAI,KAAK,QAAQ;AACf,WAAK,MAAM;AACX,aAAO;AAAA,IACT;AACA,SAAK,SAAS;AACd,UAAM,UAAU,KAAK,qBAAqB;AAC1C,SAAK,gBAAgB,QAAQ;AAC7B,YAAQ,MAAM,iBAAiB,WAAW,CAAC,UAAiC;AAC1E,WAAK,eAAe,MAAM,MAAM,MAAM,KAAK;AAAA,IAC7C,CAAC;AACD,YAAQ,MAAM,MAAM;AACpB,gBAAY;AAAA,MACV;AAAA,QACE,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,MACA;AAAA,MACA,CAAC,QAAQ,KAAK;AAAA,IAChB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,QAAc;AACZ,SAAK,eAAe,MAAM;AAC1B,SAAK,gBAAgB;AACrB,SAAK,iBAAiB;AAAA,EACxB;AACF;AAEO,SAAS,oCACd,MACA,OACoB;AACpB,MAAI,CAAC,mCAAmC,IAAI,EAAG,QAAO;AACtD,SAAO,MAAM,WAAW,IAAI,MAAM,CAAC,IAAK;AAC1C;AAEA,eAAe,wBACb,QACA,SAKA,QAC8F;AAC9F,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,iCAAiC;AAC9D,MAAI,QAAQ,WAAW,UAAW,QAAO,MAAM,OAAO,QAAQ,EAAE,OAAO,CAAC;AACxE,MAAI,QAAQ,WAAW,gBAAgB;AACrC,QAAI,CAAC,OAAO,aAAc,OAAM,IAAI,MAAM,wCAAwC;AAClF,WAAO,MAAM,OAAO,aAAa,EAAE,OAAO,CAAC;AAAA,EAC7C;AACA,SAAO,MAAM,OAAO,KAAK,oCAAoC,QAAQ,OAAQ,GAAG,EAAE,OAAO,CAAC;AAC5F;AAEO,SAAS,gBAAgB,OAK9B;AACA,QAAM,YAAY;AAMlB,SAAO;AAAA,IACL,MAAM,OAAO,WAAW,SAAS,WAAW,UAAU,OAAO;AAAA,IAC7D,SACE,OAAO,WAAW,YAAY,WAAW,UAAU,UAAU;AAAA,IAC/D,WAAW,WAAW,cAAc;AAAA,IACpC,gBAAgB,WAAW,mBAAmB;AAAA,EAChD;AACF;;;ACpVA;AAAA,EACE;AAAA,OAIK;AACP,SAAS,aAAa,aAAAC,YAAW,UAAAC,SAAQ,gBAAgB;AAyEjD,gBAAAC,YAAA;AATD,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAmC;AACjC,UAAQ,QAAQ,UAAU;AAAA,IACxB,KAAK;AACH,aACE,gBAAAA;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ;AAAA,UACA,OAAO,UAAU,SAAS;AAAA;AAAA,MAC5B;AAAA,IAEJ,KAAK;AACH,aAAO,gBAAAA,KAAC,sCAAoC,GAAG,aAAa,SAAkB;AAAA,IAChF,KAAK;AACH,aAAO,gBAAAA,KAAC,uCAAqC,GAAG,cAAc,SAAkB;AAAA,EACpF;AACF;AAMO,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuC;AACrC,QAAM,mBAAmBC,QAAO,aAAa;AAC7C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,CAAC;AAC9C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAGxB,EAAE,KAAK,MAAM,SAAS,MAAM,OAAO,KAAK,CAAC;AAE3C,EAAAC,WAAU,MAAM;AACd,qBAAiB,UAAU;AAAA,EAC7B,GAAG,CAAC,aAAa,CAAC;AAElB,EAAAA,WAAU,MAAM;AACd,QAAI,QAAwC;AAC5C,aAAS,EAAE,KAAK,YAAY,SAAS,MAAM,OAAO,KAAK,CAAC;AACxD,QAAI;AACF,cAAQ,iBAAiB,QAAQ;AACjC,eAAS,EAAE,KAAK,YAAY,SAAS,OAAO,OAAO,KAAK,CAAC;AAAA,IAC3D,SAAS,OAAO;AACd,eAAS;AAAA,QACP,KAAK;AAAA,QACL,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,mCAAmC;AAAA,MACvF,CAAC;AAAA,IACH;AACA,WAAO,MAAM;AACX,YAAM,UAAU;AAChB,cAAQ;AACR,UAAI,QAAS,MAAK,QAAQ,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,YAAY,UAAU,CAAC;AAE3B,QAAM,QAAQ,YAAY,MAAM,cAAc,CAAC,UAAU,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvE,QAAM,eAAe,MAAM,QAAQ,aAAa,MAAM,QAAQ;AAC9D,MAAI,MAAM,QAAQ,cAAc,MAAM,SAAS;AAC7C,WACE,gBAAAF;AAAA,MAAC;AAAA;AAAA,QACC,SAAS,MAAM;AAAA,QACd,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,QAC/B,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACrC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA;AAAA,IAC1C;AAAA,EAEJ;AACA,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,eAAe,iCAAiC;AAAA,MACvD,QAAQ,cAAc,WAAW;AAAA,MACjC,OAAO,eAAe,QAAQ;AAAA;AAAA,EAChC;AAEJ;AAOO,SAAS,iCAAiC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA0C;AACxC,QAAM,aAAa,kBAAkB,OAAO;AAC5C,QAAM,gBAAgB,YAAY,MAAM,qCAAqC,OAAO,GAAG,CAAC,OAAO,CAAC;AAChG,SACE,gBAAAA;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACC,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,MACrC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA;AAAA,EAC1C;AAEJ;AAEA,SAAS,kBAAkB,SAA0D;AACnF,QAAM,YAAY,QAAQ,YACtB;AAAA,IACE,GAAG,QAAQ;AAAA;AAAA;AAAA,IAGX,SAAS,QAAQ,UAAU,UACvB,OAAO,KAAK,QAAQ,UAAU,OAAO,EAAE,KAAK,IAC5C;AAAA,EACN,IACA;AACJ,SAAO,KAAK;AAAA,IACV;AAAA,MACE,SAAS,QAAQ;AAAA,MACjB,aAAa,QAAQ;AAAA,MACrB,UAAU,EAAE,IAAI,QAAQ,SAAS,IAAI,UAAU,QAAQ,SAAS,SAAS;AAAA,MACzE,kBAAkB,QAAQ;AAAA,MAC1B,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ,aAAa;AAAA,MAChC;AAAA,IACF;AAAA,IACA,CAAC,MAAM,UAAoB,iBAAiB,MAAM,MAAM,OAAO;AAAA,EACjE;AACF;","names":["controller","useEffect","useRef","jsx","useRef","useEffect"]}
+{"version":3,"sources":["../src/components/artifacts/editable-artifact-workbench.tsx"],"sourcesContent":["import {\n  createBrowserEditableArtifactSession,\n  type CreateBrowserEditableArtifactSessionOptions,\n  type EditableArtifactBrowserRuntime,\n  type EditableArtifactSession,\n} from \"@opengeni/sdk/editable-artifacts\";\nimport { useCallback, useEffect, useRef, useState } from \"react\";\n\nimport { EditableArtifactMessage } from \"./editable-artifact-ui\";\nimport {\n  EditableDocumentArtifactSurface,\n  type EditableDocumentArtifactSurfaceProps,\n} from \"./editable-document\";\nimport {\n  EditablePresentationArtifactSurface,\n  type EditablePresentationArtifactSurfaceProps,\n} from \"./editable-presentation\";\nimport {\n  EditableSpreadsheetArtifactSurface,\n  type EditableSpreadsheetArtifactSurfaceProps,\n} from \"./editable-spreadsheet\";\n\nexport type EditableArtifactWorkbenchProps = Readonly<{\n  session: EditableArtifactSession;\n  document?: Omit<EditableDocumentArtifactSurfaceProps, \"session\">;\n  spreadsheet?: Omit<EditableSpreadsheetArtifactSurfaceProps, \"session\">;\n  presentation?: Omit<EditablePresentationArtifactSurfaceProps, \"session\">;\n}>;\n\nexport type EditableArtifactWorkbenchHostProps = Omit<EditableArtifactWorkbenchProps, \"session\"> &\n  Readonly<{\n    /**\n     * Complete identity of the browser session authority. Change this when the\n     * artifact, deployment, principal, or authorization epoch changes.\n     */\n    sessionKey: string;\n    /** Called for the active keyed lifecycle and again only after replacement or retry. */\n    createSession: () => EditableArtifactSession;\n  }>;\n\ntype DefaultBrowserArtifactTransport = Omit<\n  NonNullable<CreateBrowserEditableArtifactSessionOptions[\"transport\"]>,\n  \"apiKey\" | \"fetch\" | \"headers\" | \"webSocketFactory\"\n> &\n  Readonly<{\n    /** Static deployment auth headers; rotate authorizationEpoch when they change. */\n    headers?: Readonly<Record<string, string>>;\n  }>;\n\nexport type BrowserEditableArtifactWorkbenchOptions = Omit<\n  CreateBrowserEditableArtifactSessionOptions,\n  \"runtime\" | \"storage\" | \"transport\"\n> &\n  Readonly<{\n    /** Default module Worker only; custom Worker hosts use EditableArtifactWorkbenchHost. */\n    runtime: Omit<EditableArtifactBrowserRuntime, \"workerFactory\">;\n    /** Default fetch/WebSocket only; static deployment auth headers are supported. */\n    transport?: DefaultBrowserArtifactTransport;\n  }>;\n\nexport type BrowserEditableArtifactWorkbenchProps = Omit<\n  EditableArtifactWorkbenchProps,\n  \"session\"\n> &\n  Readonly<{ options: BrowserEditableArtifactWorkbenchOptions }>;\n\n/**\n * One modality-neutral SDK workbench. Embedding hosts keep one route/component;\n * each artifact still renders through its complete first-party editor surface.\n */\nexport function EditableArtifactWorkbench({\n  session,\n  document,\n  spreadsheet,\n  presentation,\n}: EditableArtifactWorkbenchProps) {\n  switch (session.modality) {\n    case \"document\":\n      return (\n        <EditableDocumentArtifactSurface\n          {...document}\n          session={session}\n          title={document?.title ?? \"Document\"}\n        />\n      );\n    case \"spreadsheet\":\n      return <EditableSpreadsheetArtifactSurface {...spreadsheet} session={session} />;\n    case \"presentation\":\n      return <EditablePresentationArtifactSurface {...presentation} session={session} />;\n  }\n}\n\n/**\n * Route/embed composition that owns exactly one SDK session. The host supplies\n * the authenticated SDK factory; React guarantees replacement and teardown.\n */\nexport function EditableArtifactWorkbenchHost({\n  sessionKey,\n  createSession,\n  document,\n  spreadsheet,\n  presentation,\n}: EditableArtifactWorkbenchHostProps) {\n  const createSessionRef = useRef(createSession);\n  const [retryEpoch, setRetryEpoch] = useState(0);\n  const [state, setState] = useState<\n    | Readonly<{ key: string; session: EditableArtifactSession; error: null }>\n    | Readonly<{ key: string | null; session: null; error: Error | null }>\n  >({ key: null, session: null, error: null });\n\n  useEffect(() => {\n    createSessionRef.current = createSession;\n  }, [createSession]);\n\n  useEffect(() => {\n    let owned: EditableArtifactSession | null = null;\n    setState({ key: sessionKey, session: null, error: null });\n    try {\n      owned = createSessionRef.current();\n      setState({ key: sessionKey, session: owned, error: null });\n    } catch (cause) {\n      setState({\n        key: sessionKey,\n        session: null,\n        error: cause instanceof Error ? cause : new Error(\"Could not create artifact session\"),\n      });\n    }\n    return () => {\n      const closing = owned;\n      owned = null;\n      if (closing) void closing.close().catch(() => undefined);\n    };\n  }, [retryEpoch, sessionKey]);\n\n  const retry = useCallback(() => setRetryEpoch((value) => value + 1), []);\n  const currentError = state.key === sessionKey ? state.error : null;\n  if (state.key === sessionKey && state.session) {\n    return (\n      <EditableArtifactWorkbench\n        session={state.session}\n        {...(document ? { document } : {})}\n        {...(spreadsheet ? { spreadsheet } : {})}\n        {...(presentation ? { presentation } : {})}\n      />\n    );\n  }\n  return (\n    <EditableArtifactMessage\n      title={currentError ? \"Could not open this artifact\" : \"Opening artifact\"}\n      detail={currentError?.message ?? \"Starting the secure editing session…\"}\n      retry={currentError ? retry : undefined}\n    />\n  );\n}\n\n/**\n * Complete default-browser composition for embedders: verified WASM Worker,\n * durable IndexedDB state, authenticated live sync, teardown, and the matching\n * first-party editor. Advanced/custom transports compose the lower-level host.\n */\nexport function BrowserEditableArtifactWorkbench({\n  options,\n  document,\n  spreadsheet,\n  presentation,\n}: BrowserEditableArtifactWorkbenchProps) {\n  const sessionKey = browserSessionKey(options);\n  const createSession = useCallback(() => createBrowserEditableArtifactSession(options), [options]);\n  return (\n    <EditableArtifactWorkbenchHost\n      sessionKey={sessionKey}\n      createSession={createSession}\n      {...(document ? { document } : {})}\n      {...(spreadsheet ? { spreadsheet } : {})}\n      {...(presentation ? { presentation } : {})}\n    />\n  );\n}\n\nfunction browserSessionKey(options: BrowserEditableArtifactWorkbenchOptions): string {\n  const transport = options.transport\n    ? {\n        ...options.transport,\n        // Credentials must not be copied into React lifecycle keys. The\n        // authorization epoch is the explicit credential/grant rotation fence.\n        headers: options.transport.headers\n          ? Object.keys(options.transport.headers).sort()\n          : undefined,\n      }\n    : null;\n  return JSON.stringify(\n    {\n      baseUrl: options.baseUrl,\n      workspaceId: options.workspaceId,\n      artifact: { id: options.artifact.id, modality: options.artifact.modality },\n      storageAuthority: options.storageAuthority,\n      runtime: options.runtime,\n      replicaId: options.replicaId ?? null,\n      transport,\n    },\n    (_key, value: unknown) => (value instanceof URL ? value.href : value),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE;AAAA,OAIK;AACP,SAAS,aAAa,WAAW,QAAQ,gBAAgB;AAyEjD;AATD,SAAS,0BAA0B;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAmC;AACjC,UAAQ,QAAQ,UAAU;AAAA,IACxB,KAAK;AACH,aACE;AAAA,QAAC;AAAA;AAAA,UACE,GAAG;AAAA,UACJ;AAAA,UACA,OAAO,UAAU,SAAS;AAAA;AAAA,MAC5B;AAAA,IAEJ,KAAK;AACH,aAAO,oBAAC,sCAAoC,GAAG,aAAa,SAAkB;AAAA,IAChF,KAAK;AACH,aAAO,oBAAC,uCAAqC,GAAG,cAAc,SAAkB;AAAA,EACpF;AACF;AAMO,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAuC;AACrC,QAAM,mBAAmB,OAAO,aAAa;AAC7C,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,CAAC;AAC9C,QAAM,CAAC,OAAO,QAAQ,IAAI,SAGxB,EAAE,KAAK,MAAM,SAAS,MAAM,OAAO,KAAK,CAAC;AAE3C,YAAU,MAAM;AACd,qBAAiB,UAAU;AAAA,EAC7B,GAAG,CAAC,aAAa,CAAC;AAElB,YAAU,MAAM;AACd,QAAI,QAAwC;AAC5C,aAAS,EAAE,KAAK,YAAY,SAAS,MAAM,OAAO,KAAK,CAAC;AACxD,QAAI;AACF,cAAQ,iBAAiB,QAAQ;AACjC,eAAS,EAAE,KAAK,YAAY,SAAS,OAAO,OAAO,KAAK,CAAC;AAAA,IAC3D,SAAS,OAAO;AACd,eAAS;AAAA,QACP,KAAK;AAAA,QACL,SAAS;AAAA,QACT,OAAO,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,mCAAmC;AAAA,MACvF,CAAC;AAAA,IACH;AACA,WAAO,MAAM;AACX,YAAM,UAAU;AAChB,cAAQ;AACR,UAAI,QAAS,MAAK,QAAQ,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,IACzD;AAAA,EACF,GAAG,CAAC,YAAY,UAAU,CAAC;AAE3B,QAAM,QAAQ,YAAY,MAAM,cAAc,CAAC,UAAU,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvE,QAAM,eAAe,MAAM,QAAQ,aAAa,MAAM,QAAQ;AAC9D,MAAI,MAAM,QAAQ,cAAc,MAAM,SAAS;AAC7C,WACE;AAAA,MAAC;AAAA;AAAA,QACC,SAAS,MAAM;AAAA,QACd,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,QAC/B,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACrC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA;AAAA,IAC1C;AAAA,EAEJ;AACA,SACE;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,eAAe,iCAAiC;AAAA,MACvD,QAAQ,cAAc,WAAW;AAAA,MACjC,OAAO,eAAe,QAAQ;AAAA;AAAA,EAChC;AAEJ;AAOO,SAAS,iCAAiC;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAA0C;AACxC,QAAM,aAAa,kBAAkB,OAAO;AAC5C,QAAM,gBAAgB,YAAY,MAAM,qCAAqC,OAAO,GAAG,CAAC,OAAO,CAAC;AAChG,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACC,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,MACrC,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;AAAA;AAAA,EAC1C;AAEJ;AAEA,SAAS,kBAAkB,SAA0D;AACnF,QAAM,YAAY,QAAQ,YACtB;AAAA,IACE,GAAG,QAAQ;AAAA;AAAA;AAAA,IAGX,SAAS,QAAQ,UAAU,UACvB,OAAO,KAAK,QAAQ,UAAU,OAAO,EAAE,KAAK,IAC5C;AAAA,EACN,IACA;AACJ,SAAO,KAAK;AAAA,IACV;AAAA,MACE,SAAS,QAAQ;AAAA,MACjB,aAAa,QAAQ;AAAA,MACrB,UAAU,EAAE,IAAI,QAAQ,SAAS,IAAI,UAAU,QAAQ,SAAS,SAAS;AAAA,MACzE,kBAAkB,QAAQ;AAAA,MAC1B,SAAS,QAAQ;AAAA,MACjB,WAAW,QAAQ,aAAa;AAAA,MAChC;AAAA,IACF;AAAA,IACA,CAAC,MAAM,UAAoB,iBAAiB,MAAM,MAAM,OAAO;AAAA,EACjE;AACF;","names":[]}