@opengeni/react 4.3.3-canary.39786771332001 → 4.4.1

package/src/app/components/capabilities/session-chrome-card.tsx

@@ -0,0 +1,243 @@
+import { t } from "../../lib/console-text";
+import type { AuthNeededItem } from "../../../timeline";
+import { MACHINES_SESSION_POLL_MS } from "../../../machines";
+import { machineDisplayName } from "../../../sandbox-label-model";
+import { OPENGENI_BROWSER_EXTENSION_URL } from "@opengeni/contracts";
+import { OpenGeniApiError } from "@opengeni/sdk";
+import { useEffect, useRef, useState } from "react";
+
+import { useAppApi } from "../../lib/app-api";
+import { ConnectMachineDialog } from "../machines/connect-machine-dialog";
+import { Button } from "../../../ui/button";
+import { Notice } from "../../../ui/notice";
+import { useAppContext } from "../../app-context";
+import { userErrorText } from "../../../ui/api-error";
+import { isMachineComputeSelectable } from "../../lib/machine-selectability";
+import { useDesktopThisComputer } from "../desktop/this-computer";
+import { hasWorkspacePermission } from "../../lib/permissions";
+import { useWorkspaceMachines } from "../../lib/use-workspace-machines";
+import { thisComputerReady, thisComputerNeedsPermissions } from "../../../this-computer";
+import { SessionCapabilityFrame } from "../../../components/session-capability-frame";
+import type { ChatSendContext } from "./session-github-repositories";
+import { useAttachedChrome } from "./session-machine-card";
+
+/** While the connect dialog is open, look for the new machine every few seconds. */
+const WATCH_POLL_MS = 3_000;
+
+/** What the person's message says when they continue after connecting Chrome. */
+export const CHROME_CONNECTED_MESSAGE = "Chrome is connected. Continue.";
+
+/** A neutral browser mark for the card (the frame renders logos as images). */
+const CHROME_CARD_LOGO =
+  "data:image/svg+xml;utf8," +
+  encodeURIComponent(
+    '<svg xmlns="http://www.w3.org/2000/svg" viewBox="-2 -2 28 28" fill="none" stroke="#71717a" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M 12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20"/><path d="M2 12h20"/></svg>',
+  );
+
+export type SessionChromeCapabilityCardProps = {
+  item: AuthNeededItem;
+  workspaceId: string;
+  sessionId: string;
+  /** What a composer Send would carry now, so Continue follows the same rules. */
+  sendContext?: (() => ChatSendContext) | undefined;
+};
+
+/**
+ * The card a browser tool posts when the agent needs the person's own Chrome and
+ * none is connected. It shows one next step at a time: connect a computer, then
+ * add the Opengeni Browser extension there. Once Chrome links up, Continue tells
+ * the agent to go on.
+ */
+export function SessionChromeCapabilityCard({
+  item,
+  workspaceId,
+  sessionId,
+  sendContext,
+}: SessionChromeCapabilityCardProps) {
+  const context = useAppContext();
+  const { apiBaseUrl } = useAppApi();
+  const accessKnown = context.accessContext !== null && context.accessContext !== undefined;
+  const canMessage =
+    !accessKnown || hasWorkspacePermission(context.accessContext, workspaceId, "sessions:control");
+  const [setupOpen, setSetupOpen] = useState(false);
+  const [sending, setSending] = useState(false);
+  const [sent, setSent] = useState(false);
+  const [sendError, setSendError] = useState<string | null>(null);
+  const cardRef = useRef<HTMLElement>(null);
+  const opener = useRef<HTMLButtonElement>(null);
+
+  const fleet = useWorkspaceMachines({
+    workspaceId,
+    sessionId,
+    pollIntervalMs: setupOpen ? WATCH_POLL_MS : MACHINES_SESSION_POLL_MS,
+  });
+  const unavailableOnDeployment =
+    fleet.error instanceof OpenGeniApiError && fleet.error.status === 404;
+  // Chrome runs on a computer with a screen that is online now.
+  const computer =
+    fleet.machines.find(
+      (machine) =>
+        !machine.isSessionGroup &&
+        machine.enrollmentId &&
+        machine.hasDisplay &&
+        isMachineComputeSelectable(machine.state),
+    ) ?? null;
+  // Read again when a computer comes online: its Chrome may already have the
+  // extension, so the card can skip straight to Continue.
+  const chrome = useAttachedChrome(workspaceId, "any", computer?.sandboxId ?? null);
+  // Continue is offered only after this card saw Chrome missing, so an old card,
+  // or one reloaded after Chrome connected, never sends a stray message.
+  const [sawMissing, setSawMissing] = useState(false);
+  useEffect(() => {
+    if (chrome.checked && chrome.connected === null) setSawMissing(true);
+  }, [chrome.checked, chrome.connected]);
+  const desktop = useDesktopThisComputer();
+  const offerThisComputer =
+    computer === null &&
+    desktop !== null &&
+    desktop.computer.status !== null &&
+    desktop.computer.status.state !== "unavailable" &&
+    !thisComputerReady(desktop.computer.status) &&
+    !unavailableOnDeployment;
+  const origin = apiBaseUrl || (typeof window !== "undefined" ? window.location.origin : "");
+  const computerName = computer ? machineDisplayName(t, computer) : "";
+
+  const chat = sendContext?.() ?? { blocked: null, awaitingHuman: false, extras: {} };
+  const canContinue = canMessage && sawMissing && !chat.awaitingHuman && !sent;
+  const sendContinue = async () => {
+    if (sending || !canContinue) return;
+    const current = sendContext?.() ?? chat;
+    if (current.blocked) {
+      setSendError(current.blocked);
+      return;
+    }
+    setSending(true);
+    setSendError(null);
+    try {
+      await context.client.sendMessage(workspaceId, sessionId, {
+        text: CHROME_CONNECTED_MESSAGE,
+        ...current.extras,
+        clientEventId: crypto.randomUUID(),
+      });
+      setSent(true);
+    } catch (failure) {
+      setSendError(userErrorText(failure, "Try again."));
+    } finally {
+      setSending(false);
+    }
+  };
+
+  // One clear next step: connect a computer, then add the extension there.
+  const step: "computer" | "extension" = computer ? "extension" : "computer";
+  const actionUnavailable = unavailableOnDeployment
+    ? "Connected Machines aren't available on this deployment."
+    : step === "computer" && !offerThisComputer && !fleet.canRead
+      ? "You don't have access to this workspace's machines."
+      : step === "computer" && !offerThisComputer && !fleet.canManage
+        ? "Ask a workspace admin to connect a computer."
+        : null;
+
+  return (
+    <>
+      <SessionCapabilityFrame
+        name="Chrome"
+        subtitle="Opengeni Browser extension"
+        logo={CHROME_CARD_LOGO}
+        typeLabel="Browser"
+        description={
+          step === "extension"
+            ? `Add the extension to Chrome on ${computerName}.`
+            : `${item.capability?.rationale ?? "Connect your Chrome so the agent can use it."} First connect a computer, then add the extension.`
+        }
+        skill={false}
+        expanded={false}
+        complete={chrome.connected !== null}
+        completeLabel={
+          chrome.connected
+            ? sent
+              ? `Chrome is connected (${chrome.connected.name}). The agent continues.`
+              : `Chrome is connected (${chrome.connected.name}).`
+            : undefined
+        }
+        actionLabel={
+          step === "extension"
+            ? "Add to Chrome"
+            : offerThisComputer
+              ? desktop.computer.acting
+                ? "Connecting…"
+                : "Use this computer"
+              : "Connect a computer"
+        }
+        busy={step === "computer" && offerThisComputer && desktop.computer.acting}
+        actionUnavailable={actionUnavailable}
+        opensDialog={step === "computer" && !offerThisComputer}
+        note={step === "extension" && chrome.watching ? "Waiting for Chrome to connect…" : ""}
+        onOpen={() => {
+          if (step === "extension") {
+            window.open(OPENGENI_BROWSER_EXTENSION_URL, "_blank", "noopener,noreferrer");
+            chrome.watch();
+            return;
+          }
+          if (!offerThisComputer) return setSetupOpen(true);
+          if (desktop.computer.acting) return;
+          if (thisComputerNeedsPermissions(desktop.computer.status)) return desktop.openSetup();
+          void (
+            desktop.computer.status?.state === "paused"
+              ? desktop.computer.resume().then(() => desktop.computer.status)
+              : desktop.computer.connect({ screenControl: false })
+          ).then((next) => {
+            if (thisComputerNeedsPermissions(next)) desktop.openSetup();
+            void fleet.refresh();
+          });
+        }}
+        onClose={() => setSetupOpen(false)}
+        opener={opener}
+        cardRef={cardRef}
+        details={
+          chrome.connected && (canContinue || sendError) ? (
+            <div
+              data-slot="chrome-continue"
+              className="space-y-2 border-t border-border px-[19px] pt-3 pb-4 max-[480px]:px-3.5"
+            >
+              {sendError ? (
+                <Notice tone="failed" live="assertive" className="text-xs">
+                  {`Couldn't send. ${sendError}`}
+                </Notice>
+              ) : null}
+              {canContinue ? (
+                <Button
+                  type="button"
+                  size="sm"
+                  className="rounded-[10px] pointer-coarse:h-11"
+                  aria-disabled={sending || undefined}
+                  onClick={() => void sendContinue()}
+                >
+                  {sending ? "Sending…" : "Continue"}
+                </Button>
+              ) : null}
+            </div>
+          ) : null
+        }
+      />
+      {fleet.canManage && !unavailableOnDeployment ? (
+        <ConnectMachineDialog
+          open={setupOpen}
+          onOpenChange={(open) => {
+            if (!open) setSetupOpen(false);
+          }}
+          workspaceId={workspaceId}
+          sessionId={sessionId}
+          origin={origin}
+          machines={fleet.machines}
+          machinesLoading={fleet.loading}
+          machinesError={fleet.error}
+          personalWorkspace={
+            context.workspaces?.find((workspace) => workspace.id === workspaceId)?.kind ===
+            "personal"
+          }
+          defaultScope="user"
+        />
+      ) : null}
+    </>
+  );
+}

package/src/app/components/capabilities/session-machine-card.dom-fixture.tsx

@@ -434,6 +434,7 @@ describe("Connected Machine conversation card", () => {
           profileLabel: "Teammate",
           browserName: "Chrome",
           state: "connected",
+          capabilities: { debuggerAttachment: true },
         },
         {
           id: "device",
@@ -442,6 +443,7 @@ describe("Connected Machine conversation card", () => {
           profileLabel: "Work",
           browserName: "Chrome",
           state: "connected",
+          capabilities: { debuggerAttachment: true },
         },
       ],
     };

package/src/app/components/capabilities/session-machine-card.tsx

@@ -45,6 +45,11 @@ const WATCH_POLL_MS = 3_000;
 const CHROME_POLL_MS = 5_000;
 /** Stop checking for the extension after this long without a link. */
 const CHROME_POLL_LIMIT_MS = 10 * 60_000;
+/**
+ * After a computer comes online, keep checking quietly for a short while: its
+ * Chrome profile usually links up a few seconds after the machine does.
+ */
+const CHROME_REFRESH_POLL_LIMIT_MS = 60_000;
 
 export { machineUseMessage } from "../../lib/move-chat-to-machine";
 
@@ -237,7 +242,9 @@ export function SessionMachineCapabilityCard({
     null;
   const chrome = useAttachedChrome(
     workspaceId,
-    fleet.canRead ? (chromeMachine?.enrollmentId ?? null) : null,
+    fleet.canRead && chromeMachine?.enrollmentId
+      ? { enrollmentId: chromeMachine.enrollmentId }
+      : null,
   );
   const fresh = justConnected
     ? (machines.find((machine) => machine.sandboxId === justConnected) ?? null)
@@ -478,11 +485,13 @@ export function SessionMachineCapabilityCard({
  * An earlier Connected Machine card whose request the agent made again further
  * down. The newer card is the live one, so this stays a single quiet line.
  */
-export function RepeatedMachineRequestNote() {
+export function RepeatedMachineRequestNote({ chrome = false }: { chrome?: boolean }) {
   return (
     <p className="flex items-center gap-2 text-xs text-fg-muted">
       <LaptopIcon aria-hidden className="size-3.5 shrink-0" />
-      The agent asked to use a machine. It asked again below.
+      {chrome
+        ? "The agent asked to connect Chrome. It asked again below."
+        : "The agent asked to use a machine. It asked again below."}
     </p>
   );
 }
@@ -562,32 +571,55 @@ function MachineRow({
   );
 }
 
-type ChromeState = {
+export type ChromeState = {
   connected: { name: string } | null;
+  /** A read completed, so a null `connected` means Chrome is not linked yet. */
+  checked: boolean;
   /** Start checking for the extension (after the person opens the store). */
   watch: () => void;
+  /** Checking for the extension after the person opened the store. */
+  watching: boolean;
 };
 
+/** Which Chrome to look for: one on an exact machine, or any the person connected. */
+export type AttachedChromeScope = { enrollmentId: string } | "any" | null;
+
 /**
- * Whether the Opengeni Browser extension linked a Chrome profile on this exact
- * machine. Reads once; polls only after the person opens the store, stops once
- * linked, after a bounded time, or when the inventory is not available to them.
+ * Whether the Opengeni Browser extension linked a Chrome profile the agent can
+ * use (the same check browser_open applies) on this exact machine, or, with
+ * "any", on any machine. Reads once, and again whenever `refreshKey` changes
+ * (for example when a computer comes online); polls only after the person opens
+ * the store, stops once linked, after a bounded time, or when the inventory is
+ * not available to them.
  */
-function useAttachedChrome(workspaceId: string, enrollmentId: string | null): ChromeState {
+export function useAttachedChrome(
+  workspaceId: string,
+  scope: AttachedChromeScope,
+  refreshKey: string | null = null,
+): ChromeState {
   const { client } = useAppContext();
   // Poll on its own timer; a new client identity on re-render must not refetch.
   const clientRef = useRef(client);
   clientRef.current = client;
   const [connected, setConnected] = useState<{ name: string } | null>(null);
+  const [checked, setChecked] = useState(false);
   const [watchSince, setWatchSince] = useState<number | null>(null);
+  const [refreshSince, setRefreshSince] = useState<number | null>(null);
+  const [expired, setExpired] = useState(false);
   const [denied, setDenied] = useState(false);
   const linked = connected !== null;
+  const enrollmentId = scope === null ? null : scope === "any" ? "*" : scope.enrollmentId;
 
   useEffect(() => {
     setConnected(null);
+    setChecked(false);
     setDenied(false);
   }, [enrollmentId]);
 
+  useEffect(() => {
+    setRefreshSince(refreshKey === null ? null : Date.now());
+  }, [refreshKey]);
+
   useEffect(() => {
     if (!enrollmentId || denied) return;
     let cancelled = false;
@@ -596,9 +628,13 @@ function useAttachedChrome(workspaceId: string, enrollmentId: string | null): Ch
         const result = await clientRef.current.listAttachedBrowsers(workspaceId);
         if (cancelled) return;
         const device = result.devices.find(
-          (candidate) => candidate.state === "connected" && candidate.enrollmentId === enrollmentId,
+          (candidate) =>
+            candidate.state === "connected" &&
+            candidate.capabilities.debuggerAttachment &&
+            (enrollmentId === "*" || candidate.enrollmentId === enrollmentId),
         );
         setConnected(device ? { name: device.profileLabel ?? device.browserName } : null);
+        setChecked(true);
       } catch (failure) {
         // Without inventory access the step still offers the install link.
         if (
@@ -612,10 +648,17 @@ function useAttachedChrome(workspaceId: string, enrollmentId: string | null): Ch
       }
     };
     void read();
-    if (linked || watchSince === null) return () => void (cancelled = true);
+    if (linked || (watchSince === null && refreshSince === null)) {
+      return () => void (cancelled = true);
+    }
     const timer = window.setInterval(() => {
-      if (Date.now() - watchSince > CHROME_POLL_LIMIT_MS) {
+      const now = Date.now();
+      const watching = watchSince !== null && now - watchSince <= CHROME_POLL_LIMIT_MS;
+      const refreshing =
+        refreshSince !== null && now - refreshSince <= CHROME_REFRESH_POLL_LIMIT_MS;
+      if (!watching && !refreshing) {
         window.clearInterval(timer);
+        if (watchSince !== null) setExpired(true);
         return;
       }
       if (document.visibilityState !== "hidden") void read();
@@ -624,10 +667,18 @@ function useAttachedChrome(workspaceId: string, enrollmentId: string | null): Ch
       cancelled = true;
       window.clearInterval(timer);
     };
-  }, [denied, enrollmentId, linked, watchSince, workspaceId]);
+  }, [denied, enrollmentId, linked, refreshSince, watchSince, workspaceId]);
 
-  const watch = useCallback(() => setWatchSince(Date.now()), []);
-  return { connected, watch };
+  const watch = useCallback(() => {
+    setExpired(false);
+    setWatchSince(Date.now());
+  }, []);
+  return {
+    connected,
+    checked,
+    watch,
+    watching: watchSince !== null && !linked && !expired && !denied,
+  };
 }
 
 /** How long to keep checking for the new consent, or a granted Mac permission. */

package/src/timeline/projection.ts

@@ -1498,6 +1498,7 @@ export function buildTimeline(
           capability,
           setupRequest,
           requestedSandboxId: stringValue(payload.requestedSandboxId) || null,
+          ...(payload.purpose === "chrome" ? { purpose: "chrome" as const } : {}),
           occurredAt: event.occurredAt,
         });
         break;
@@ -2197,14 +2198,15 @@ const CONNECTED_MACHINE_CARD_ID = "api:connected-machine";
  * An agent that is refused a machine often asks again in later turns. Only the
  * newest Connected Machine card for the same request stays a full card; earlier
  * ones become a short note, so a chat never piles up copies of the same card.
- * Cards that name different machines are separate requests.
+ * Cards that name different machines, or ask for Chrome rather than a machine,
+ * are separate requests.
  */
 function markRepeatedMachineRequests(items: TimelineItem[]): void {
   const seen = new Set<string>();
   for (let index = items.length - 1; index >= 0; index -= 1) {
     const item = items[index]!;
     if (item.kind !== "auth-needed" || item.capability?.id !== CONNECTED_MACHINE_CARD_ID) continue;
-    const key = item.requestedSandboxId ?? "";
+    const key = `${item.purpose ?? ""}:${item.requestedSandboxId ?? ""}`;
     if (seen.has(key)) item.askedAgainLater = true;
     else seen.add(key);
   }

package/src/timeline/types.ts

@@ -600,6 +600,8 @@ export type AuthNeededItem = {
   setupRequest?: ToolAuthNeededPayload["setupRequest"] | null | undefined;
   /** The Connected Machine the agent asked for, when the card names one. */
   requestedSandboxId?: string | null | undefined;
+  /** `chrome`: the Connected Machine card is for the person's own Chrome. */
+  purpose?: "chrome" | undefined;
   /**
    * A later Connected Machine card in this chat asks for the same thing, so
    * this one is shown as a short note instead of a second full card.

package/dist/chunk-VSQHDBHU.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/app/components/capabilities/session-machine-card.tsx"],"sourcesContent":["import { t } from \"../../lib/console-text\";\nimport type { AuthNeededItem } from \"../../../timeline\";\nimport { MACHINES_SESSION_POLL_MS, type MachineView } from \"../../../machines\";\nimport { machineDisplayName, machineScopeLabel } from \"../../../sandbox-label-model\";\nimport { OPENGENI_BROWSER_EXTENSION_URL } from \"@opengeni/contracts\";\nimport { OpenGeniApiError } from \"@opengeni/sdk\";\nimport {\n  ArrowUpRightIcon,\n  CheckIcon,\n  ChevronRightIcon,\n  LaptopIcon,\n  Loader2Icon,\n  MonitorIcon,\n  PlusIcon,\n  PuzzleIcon,\n  ServerIcon,\n} from \"lucide-react\";\nimport { useCallback, useEffect, useMemo, useRef, useState, type ReactNode } from \"react\";\n\nimport { useAppApi } from \"../../lib/app-api\";\nimport {\n  ConnectMachineDialog,\n  connectScopeFor,\n  type ConnectMachineScope,\n} from \"../machines/connect-machine-dialog\";\nimport { Button } from \"../../../ui/button\";\nimport { ListRow, RowList } from \"../../../ui/list-row\";\nimport { LogoTile } from \"../../../ui/logo-tile\";\nimport { Notice } from \"../../../ui/notice\";\nimport { RowButton } from \"../../../ui/page-actions\";\nimport { useAppContext } from \"../../app-context\";\nimport { userErrorText } from \"../../../ui/api-error\";\nimport { isMachineComputeSelectable } from \"../../lib/machine-selectability\";\nimport { useDesktopThisComputer } from \"../desktop/this-computer\";\nimport { moveChatToMachine } from \"../../lib/move-chat-to-machine\";\nimport { hasWorkspacePermission } from \"../../lib/permissions\";\nimport { useWorkspaceMachines } from \"../../lib/use-workspace-machines\";\nimport { thisComputerReady, thisComputerNeedsPermissions } from \"../../../this-computer\";\nimport { SessionCapabilityFrame } from \"../../../components/session-capability-frame\";\nimport type { ChatSendContext } from \"./session-github-repositories\";\n\n/** While the connect dialog is open, look for the new machine every few seconds. */\nconst WATCH_POLL_MS = 3_000;\n/** After \"Add to Chrome\", how often to check whether the extension linked up. */\nconst CHROME_POLL_MS = 5_000;\n/** Stop checking for the extension after this long without a link. */\nconst CHROME_POLL_LIMIT_MS = 10 * 60_000;\n\nexport { machineUseMessage } from \"../../lib/move-chat-to-machine\";\n\n/** A neutral laptop mark for the card (the frame renders logos as images). */\nexport const CONNECTED_MACHINE_LOGO =\n  \"data:image/svg+xml;utf8,\" +\n  encodeURIComponent(\n    '<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"-2 -2 28 28\" fill=\"none\" stroke=\"#71717a\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M18 5a2 2 0 0 1 2 2v8.526a2 2 0 0 0 .212.897l1.068 2.127a1 1 0 0 1-.9 1.45H3.62a1 1 0 0 1-.9-1.45l1.068-2.127A2 2 0 0 0 4 15.526V7a2 2 0 0 1 2-2z\"/><path d=\"M20.054 15.987H3.946\"/></svg>',\n  );\n\nexport type SessionMachineCapabilityCardProps = {\n  item: AuthNeededItem;\n  workspaceId: string;\n  sessionId: string;\n  /** What a composer Send would carry now, so this Send follows the same rules. */\n  sendContext?: (() => ChatSendContext) | undefined;\n  /** Re-read the session after the chat moves to a machine. */\n  onConfigured?: (() => Promise<void>) | undefined;\n};\n\nfunction stateLabel(machine: MachineView): string {\n  switch (machine.state) {\n    case \"online\":\n    case \"consent_required\":\n      return \"Online\";\n    case \"display_unavailable\":\n      return \"Online · no display\";\n    case \"reconnecting\":\n      return \"Reconnecting\";\n    case \"enrolling\":\n      return \"Connecting\";\n    default:\n      return \"Offline\";\n  }\n}\n\n/** Focus moves only when the person is not working somewhere else. */\nfunction focusIfIdle(card: HTMLElement | null, target: HTMLElement | null = card) {\n  requestAnimationFrame(() => {\n    const active = document.activeElement;\n    const idle = !active || active === document.body || (card?.contains(active) ?? false);\n    if (idle && target?.isConnected) target.focus();\n    else if (idle && card?.isConnected) card.focus();\n  });\n}\n\n/**\n * The Connected Machine card in a conversation. The agent can post it, but only\n * the person can connect a machine or move this chat onto one. Once a machine with a\n * screen is reachable, the card offers the Opengeni Browser extension for it.\n */\nexport function SessionMachineCapabilityCard({\n  item,\n  workspaceId,\n  sessionId,\n  sendContext,\n  onConfigured,\n}: SessionMachineCapabilityCardProps) {\n  const context = useAppContext();\n  const { apiBaseUrl } = useAppApi();\n  const recommendation = item.capability!;\n  const accessKnown = context.accessContext !== null && context.accessContext !== undefined;\n  const canMessage =\n    !accessKnown || hasWorkspacePermission(context.accessContext, workspaceId, \"sessions:control\");\n\n  const [setupOpen, setSetupOpen] = useState(false);\n  // Reconnecting to turn screen control on starts with it already chosen, and\n  // with the machine's own access so the same machine reconnects as it was.\n  const [setupScreenControl, setSetupScreenControl] = useState(false);\n  const [setupScope, setSetupScope] = useState<ConnectMachineScope>(\"user\");\n  const [justConnected, setJustConnected] = useState<string | null>(null);\n  const [using, setUsing] = useState<string | null>(null);\n  const [useError, setUseError] = useState<{ name: string; reason: string | null } | null>(null);\n  const [outcome, setOutcome] = useState<{ sandboxId: string; text: string } | null>(null);\n  const [announcement, setAnnouncement] = useState(\"\");\n  const [othersOpen, setOthersOpen] = useState(false);\n  const cardRef = useRef<HTMLElement>(null);\n  const opener = useRef<HTMLButtonElement>(null);\n  const setupOpener = useRef<HTMLElement | null>(null);\n  const alive = useRef(true);\n  useEffect(() => {\n    alive.current = true;\n    return () => {\n      alive.current = false;\n    };\n  }, []);\n\n  const fleet = useWorkspaceMachines({\n    workspaceId,\n    sessionId,\n    pollIntervalMs: setupOpen ? WATCH_POLL_MS : MACHINES_SESSION_POLL_MS,\n  });\n  const unavailableOnDeployment =\n    fleet.error instanceof OpenGeniApiError && fleet.error.status === 404;\n  const machines = useMemo(\n    () => fleet.machines.filter((machine) => !machine.isSessionGroup && machine.enrollmentId),\n    [fleet.machines],\n  );\n  const activeMachine = machines.find((machine) => machine.active) ?? null;\n  const reachable = machines.filter((machine) => isMachineComputeSelectable(machine.state));\n  // The machine the agent asked for, while this chat doesn't run on it yet.\n  const requested =\n    (item.requestedSandboxId\n      ? machines.find((machine) => machine.sandboxId === item.requestedSandboxId)\n      : undefined) ?? null;\n  const asking = requested !== null && !requested.active;\n  const requestedName = requested ? machineDisplayName(t, requested) : \"\";\n  // The person can allow it right here: lead with that, other machines fold away.\n  const allowHere =\n    asking && fleet.canAttach && isMachineComputeSelectable(requested.state) ? requested : null;\n  const personalWorkspace =\n    context.workspaces?.find((workspace) => workspace.id === workspaceId)?.kind === \"personal\";\n\n  const openSetup = (reconnect?: MachineView) => {\n    const active = document.activeElement;\n    setupOpener.current = active instanceof HTMLElement ? active : null;\n    setJustConnected(null);\n    setSetupScreenControl(reconnect !== undefined);\n    setSetupScope(reconnect ? connectScopeFor(reconnect) : \"user\");\n    setSetupOpen(true);\n  };\n  const closeSetup = () => {\n    // Fast polling ends with the dialog; focus returns to what opened it.\n    setSetupOpen(false);\n    const back = setupOpener.current?.isConnected ? setupOpener.current : opener.current;\n    focusIfIdle(cardRef.current, back);\n  };\n\n  const ordered = useMemo(() => {\n    const rank = (machine: MachineView) =>\n      machine.sandboxId === justConnected\n        ? 0\n        : machine.active\n          ? 1\n          : isMachineComputeSelectable(machine.state)\n            ? 2\n            : 3;\n    return [...machines]\n      .filter((machine) => machine.sandboxId !== allowHere?.sandboxId)\n      .sort(\n        (left, right) =>\n          rank(left) - rank(right) ||\n          machineDisplayName(t, left).localeCompare(machineDisplayName(t, right)),\n      );\n  }, [allowHere?.sandboxId, justConnected, machines]);\n\n  const use = useCallback(\n    async (machine: MachineView) => {\n      if (using !== null) return;\n      const name = machineDisplayName(t, machine);\n      setUseError(null);\n      setOutcome(null);\n      const chat = sendContext?.() ?? { blocked: null, awaitingHuman: false, extras: {} };\n      if (chat.blocked) {\n        setUseError({ name, reason: chat.blocked });\n        return;\n      }\n      setUsing(machine.sandboxId);\n      const result = await moveChatToMachine({\n        machine,\n        chat,\n        canMessage,\n        previousSandboxId: fleet.machines.find((candidate) => candidate.active)?.sandboxId ?? null,\n        attach: fleet.attach,\n        sendMessage: (message) => context.client.sendMessage(workspaceId, sessionId, message),\n      });\n      if (!alive.current) return;\n      if (!result.moved) {\n        setUsing(null);\n        setUseError({ name, reason: result.reason });\n        return;\n      }\n      const text = result.text;\n      setUsing(null);\n      setOutcome({ sandboxId: machine.sandboxId, text });\n      setAnnouncement(text);\n      focusIfIdle(cardRef.current);\n      await onConfigured?.().catch(() => {});\n    },\n    [canMessage, context.client, fleet, onConfigured, sendContext, sessionId, using, workspaceId],\n  );\n\n  // Chrome belongs to a machine with a screen: the one this chat runs on if it\n  // has one, otherwise the first reachable one.\n  const chromeMachine =\n    (activeMachine?.hasDisplay && isMachineComputeSelectable(activeMachine.state)\n      ? activeMachine\n      : null) ??\n    reachable.find((machine) => machine.hasDisplay) ??\n    null;\n  const chrome = useAttachedChrome(\n    workspaceId,\n    fleet.canRead ? (chromeMachine?.enrollmentId ?? null) : null,\n  );\n  const fresh = justConnected\n    ? (machines.find((machine) => machine.sandboxId === justConnected) ?? null)\n    : null;\n  const origin = apiBaseUrl || (typeof window !== \"undefined\" ? window.location.origin : \"\");\n\n  // One clear action per state. With a reachable machine, the list's \"Use in\n  // this chat\" is primary and connecting another is a quiet secondary action.\n  const actionUnavailable = unavailableOnDeployment\n    ? \"Connected Machines aren't available on this deployment.\"\n    : asking && !isMachineComputeSelectable(requested.state)\n      ? `Turn on ${requestedName} to allow it here.`\n      : !fleet.canRead\n        ? \"You don't have access to this workspace's machines.\"\n        : fresh && fleet.canAttach && !fresh.active\n          ? `${machineDisplayName(t, fresh)} connected. Choose it below to use it here.`\n          : reachable.length > 0 && fleet.canAttach\n            ? \"Choose where this chat runs.\"\n            : reachable.length > 0\n              ? \"You can't change where this chat runs.\"\n              : fleet.canManage\n                ? null\n                : machines.length > 0\n                  ? \"Turn on one of the machines below to use it here.\"\n                  : \"Ask a workspace admin to connect a machine.\";\n  // Inside the desktop app, the computer it runs on is one click away.\n  const desktop = useDesktopThisComputer();\n  const desktopReady =\n    thisComputerReady(desktop?.computer.status ?? null) && !desktop?.computer.status?.reconnecting;\n  const offerThisComputer =\n    desktop !== null &&\n    desktop.computer.status !== null &&\n    desktop.computer.status.state !== \"unavailable\" &&\n    !thisComputerReady(desktop.computer.status) &&\n    !unavailableOnDeployment &&\n    fleet.canRead;\n  const connectAnother = fleet.canManage && (reachable.length > 0 || activeMachine !== null);\n  const visibleDetails =\n    useError !== null || ordered.length > 0 || chromeMachine !== null || connectAnother;\n  // While the agent's request can be allowed here, everything else is one\n  // click away instead of competing with it.\n  const folded = allowHere !== null && !othersOpen;\n  const foldable =\n    allowHere !== null && (ordered.length > 0 || chromeMachine !== null || connectAnother);\n\n  return (\n    <>\n      <SessionCapabilityFrame\n        name={asking ? requestedName : recommendation.name || \"Connected Machine\"}\n        subtitle={\n          asking\n            ? `${stateLabel(requested)} · ${machineScopeLabel(t, requested.scope)}`\n            : \"Your computer or server\"\n        }\n        logo={CONNECTED_MACHINE_LOGO}\n        typeLabel=\"Machine\"\n        description={\n          allowHere\n            ? \"The agent asked to use this machine. Allowing it moves this chat here, and the agent continues on it.\"\n            : asking\n              ? `The agent asked to use ${requestedName}.`\n              : recommendation.rationale\n        }\n        skill={false}\n        expanded={false}\n        complete={activeMachine !== null || desktopReady}\n        completeLabel={\n          activeMachine\n            ? outcome?.sandboxId === activeMachine.sandboxId\n              ? outcome.text\n              : `This chat runs on ${machineDisplayName(t, activeMachine)}`\n            : desktopReady\n              ? `Your agents can use ${desktop?.computer.status?.machineName || \"this computer\"}.`\n              : undefined\n        }\n        actionLabel={\n          allowHere\n            ? using === allowHere.sandboxId\n              ? \"Allowing…\"\n              : \"Allow\"\n            : offerThisComputer\n              ? desktop.computer.acting\n                ? \"Connecting…\"\n                : \"Use this computer\"\n              : \"Connect a computer\"\n        }\n        busy={allowHere ? using !== null : offerThisComputer && desktop.computer.acting}\n        actionUnavailable={allowHere || offerThisComputer ? null : actionUnavailable}\n        opensDialog={false}\n        note={\n          allowHere\n            ? \"\"\n            : offerThisComputer\n              ? \"Only you can use this computer. Your agents can work with files and use the screen after you allow system permissions. Turn it off anytime in the app.\"\n              : fleet.canManage\n                ? \"You can remove a connected machine anytime from Machines.\"\n                : \"\"\n        }\n        onOpen={() => {\n          if (allowHere) return void use(allowHere);\n          if (!offerThisComputer) return openSetup();\n          if (desktop.computer.acting) return;\n          if (thisComputerNeedsPermissions(desktop.computer.status)) return desktop.openSetup();\n          void (\n            desktop.computer.status?.state === \"paused\"\n              ? desktop.computer.resume().then(() => desktop.computer.status)\n              : desktop.computer.connect({ screenControl: true })\n          ).then((next) => {\n            if (thisComputerNeedsPermissions(next)) desktop.openSetup();\n            void fleet.refresh();\n          });\n        }}\n        onClose={closeSetup}\n        opener={opener}\n        cardRef={cardRef}\n        details={\n          unavailableOnDeployment || !fleet.canRead ? null : (\n            <>\n              {desktop?.computer.actionError !== null &&\n              desktop?.computer.actionError !== undefined ? (\n                <Notice tone=\"failed\" live=\"assertive\" className=\"mx-4 mb-3 text-xs\">\n                  Couldn't connect this computer. {desktop.computer.actionError || \"Try again.\"}\n                </Notice>\n              ) : null}\n              {/* Always mounted, so moves and new machines are announced. */}\n              <span className=\"sr-only\" role=\"status\" aria-live=\"polite\">\n                {announcement}\n              </span>\n              {visibleDetails ? (\n                <div\n                  data-slot=\"connected-machines\"\n                  className=\"space-y-3 border-t border-border px-[19px] pt-3 pb-4 max-[480px]:px-3.5\"\n                >\n                  {useError ? (\n                    <Notice tone=\"failed\" live=\"assertive\" className=\"text-xs\">\n                      {`Couldn't move this chat to ${useError.name}. ${\n                        useError.reason ??\n                        (fleet.mutationError\n                          ? userErrorText(fleet.mutationError, \"Try again.\")\n                          : \"Try again.\")\n                      }`}\n                    </Notice>\n                  ) : null}\n                  {foldable ? (\n                    <Button\n                      type=\"button\"\n                      variant=\"ghost\"\n                      size=\"sm\"\n                      className=\"-ml-2 text-fg-muted\"\n                      aria-expanded={othersOpen}\n                      onClick={() => setOthersOpen((open) => !open)}\n                    >\n                      <ChevronRightIcon\n                        aria-hidden\n                        className={\n                          othersOpen ? \"rotate-90 transition-transform\" : \"transition-transform\"\n                        }\n                      />\n                      Use a different machine\n                    </Button>\n                  ) : null}\n                  {!folded && ordered.length > 0 ? (\n                    <RowList label=\"Connected machines\" flush>\n                      {ordered.map((machine) => (\n                        <MachineRow\n                          key={machine.sandboxId}\n                          machine={machine}\n                          primary={machine.sandboxId === justConnected || reachable.length === 1}\n                          canUse={fleet.canAttach}\n                          busy={using === machine.sandboxId}\n                          locked={using !== null || fleet.attaching}\n                          onUse={() => void use(machine)}\n                        />\n                      ))}\n                    </RowList>\n                  ) : null}\n                  {!folded && chromeMachine ? (\n                    <ScreenControlStep\n                      key={chromeMachine.sandboxId}\n                      machine={chromeMachine}\n                      workspaceId={workspaceId}\n                      canManage={fleet.canManage}\n                      refresh={fleet.refresh}\n                      onReconnect={() => openSetup(chromeMachine)}\n                    />\n                  ) : null}\n                  {!folded && chromeMachine ? (\n                    <ChromeStep\n                      chrome={chrome}\n                      machineName={machineDisplayName(t, chromeMachine)}\n                    />\n                  ) : null}\n                  {!folded && connectAnother ? (\n                    <Button\n                      type=\"button\"\n                      variant=\"ghost\"\n                      size=\"sm\"\n                      className=\"-ml-2 text-fg-muted\"\n                      onClick={() => openSetup()}\n                    >\n                      <PlusIcon aria-hidden />\n                      Connect another machine\n                    </Button>\n                  ) : null}\n                </div>\n              ) : null}\n            </>\n          )\n        }\n      />\n      {fleet.canManage && !unavailableOnDeployment ? (\n        <ConnectMachineDialog\n          open={setupOpen}\n          onOpenChange={(open) => {\n            if (!open) closeSetup();\n          }}\n          workspaceId={workspaceId}\n          sessionId={sessionId}\n          origin={origin}\n          machines={fleet.machines}\n          machinesLoading={fleet.loading}\n          machinesError={fleet.error}\n          personalWorkspace={personalWorkspace}\n          defaultScope={setupScope}\n          defaultAllowScreenControl={setupScreenControl}\n          onConnected={(machine) => {\n            setJustConnected(machine.sandboxId);\n            setAnnouncement(`${machineDisplayName(t, machine)} connected.`);\n          }}\n          useInChat={{ canUse: fleet.canAttach, onUse: (machine) => void use(machine) }}\n        />\n      ) : null}\n    </>\n  );\n}\n\n/**\n * An earlier Connected Machine card whose request the agent made again further\n * down. The newer card is the live one, so this stays a single quiet line.\n */\nexport function RepeatedMachineRequestNote() {\n  return (\n    <p className=\"flex items-center gap-2 text-xs text-fg-muted\">\n      <LaptopIcon aria-hidden className=\"size-3.5 shrink-0\" />\n      The agent asked to use a machine. It asked again below.\n    </p>\n  );\n}\n\nfunction MachineRow({\n  machine,\n  primary,\n  canUse,\n  busy,\n  locked,\n  onUse,\n}: {\n  machine: MachineView;\n  primary: boolean;\n  canUse: boolean;\n  busy: boolean;\n  locked: boolean;\n  onUse: () => void;\n}) {\n  const name = machineDisplayName(t, machine);\n  const selectable = isMachineComputeSelectable(machine.state);\n  const Icon = machine.os === \"linux\" && !machine.hasDisplay ? ServerIcon : LaptopIcon;\n  const common = {\n    leading: <LogoTile icon={<Icon />} />,\n    title: name,\n    meta: [stateLabel(machine), machineScopeLabel(t, machine.scope)],\n  };\n  if (machine.active) {\n    return (\n      <ListRow\n        {...common}\n        control={\n          <span className=\"inline-flex items-center gap-1 text-xs font-medium text-status-idle\">\n            <CheckIcon aria-hidden className=\"size-3.5\" />\n            In this chat\n          </span>\n        }\n      />\n    );\n  }\n  // The meta line already says why (\"Offline\", \"Reconnecting\").\n  if (!selectable) return <ListRow {...common} disabled />;\n  if (!canUse) return <ListRow {...common} />;\n  const label = busy ? `Moving this chat to ${name}` : `Use ${name} in this chat`;\n  return (\n    <ListRow\n      {...common}\n      control={\n        primary ? (\n          <Button\n            type=\"button\"\n            size=\"sm\"\n            aria-label={label}\n            aria-disabled={locked || undefined}\n            className=\"rounded-[10px] pointer-coarse:h-11\"\n            onClick={() => {\n              if (!locked) onUse();\n            }}\n          >\n            {busy ? <Loader2Icon aria-hidden className=\"animate-spin\" /> : null}\n            {busy ? \"Moving…\" : \"Use in this chat\"}\n          </Button>\n        ) : (\n          <RowButton\n            aria-label={label}\n            aria-disabled={locked || undefined}\n            onClick={() => {\n              if (!locked) onUse();\n            }}\n          >\n            {busy ? <Loader2Icon aria-hidden className=\"animate-spin\" /> : null}\n            {busy ? \"Moving…\" : \"Use\"}\n          </RowButton>\n        )\n      }\n    />\n  );\n}\n\ntype ChromeState = {\n  connected: { name: string } | null;\n  /** Start checking for the extension (after the person opens the store). */\n  watch: () => void;\n};\n\n/**\n * Whether the Opengeni Browser extension linked a Chrome profile on this exact\n * machine. Reads once; polls only after the person opens the store, stops once\n * linked, after a bounded time, or when the inventory is not available to them.\n */\nfunction useAttachedChrome(workspaceId: string, enrollmentId: string | null): ChromeState {\n  const { client } = useAppContext();\n  // Poll on its own timer; a new client identity on re-render must not refetch.\n  const clientRef = useRef(client);\n  clientRef.current = client;\n  const [connected, setConnected] = useState<{ name: string } | null>(null);\n  const [watchSince, setWatchSince] = useState<number | null>(null);\n  const [denied, setDenied] = useState(false);\n  const linked = connected !== null;\n\n  useEffect(() => {\n    setConnected(null);\n    setDenied(false);\n  }, [enrollmentId]);\n\n  useEffect(() => {\n    if (!enrollmentId || denied) return;\n    let cancelled = false;\n    const read = async () => {\n      try {\n        const result = await clientRef.current.listAttachedBrowsers(workspaceId);\n        if (cancelled) return;\n        const device = result.devices.find(\n          (candidate) => candidate.state === \"connected\" && candidate.enrollmentId === enrollmentId,\n        );\n        setConnected(device ? { name: device.profileLabel ?? device.browserName } : null);\n      } catch (failure) {\n        // Without inventory access the step still offers the install link.\n        if (\n          !cancelled &&\n          failure instanceof OpenGeniApiError &&\n          failure.status >= 400 &&\n          failure.status < 500\n        ) {\n          setDenied(true);\n        }\n      }\n    };\n    void read();\n    if (linked || watchSince === null) return () => void (cancelled = true);\n    const timer = window.setInterval(() => {\n      if (Date.now() - watchSince > CHROME_POLL_LIMIT_MS) {\n        window.clearInterval(timer);\n        return;\n      }\n      if (document.visibilityState !== \"hidden\") void read();\n    }, CHROME_POLL_MS);\n    return () => {\n      cancelled = true;\n      window.clearInterval(timer);\n    };\n  }, [denied, enrollmentId, linked, watchSince, workspaceId]);\n\n  const watch = useCallback(() => setWatchSince(Date.now()), []);\n  return { connected, watch };\n}\n\n/** How long to keep checking for the new consent, or a granted Mac permission. */\nconst SCREEN_CONTROL_WATCH_MS = 90_000;\nconst MAC_PERMISSION_WATCH_MS = 3 * 60_000;\nconst SCREEN_CONTROL_POLL_MS = 3_000;\n\ntype MacPermissionPane = \"screen_recording\" | \"accessibility\" | \"input_monitoring\";\ntype MacPermissions = NonNullable<NonNullable<MachineView[\"runtime\"]>[\"macPermissions\"]>;\n\n/** The order the agent needs them in: seeing the screen first, then input. */\nconst MAC_PERMISSIONS: ReadonlyArray<{\n  pane: MacPermissionPane;\n  key: keyof MacPermissions;\n  label: string;\n}> = [\n  { pane: \"screen_recording\", key: \"screenRecording\", label: \"Screen Recording\" },\n  { pane: \"accessibility\", key: \"accessibility\", label: \"Accessibility\" },\n  { pane: \"input_monitoring\", key: \"inputMonitoring\", label: \"Input Monitoring\" },\n];\n\nfunction isOnline(machine: MachineView): boolean {\n  return (\n    machine.state === \"online\" ||\n    machine.state === \"consent_required\" ||\n    machine.state === \"display_unavailable\"\n  );\n}\n\n/**\n * Screen control for the machine with a screen. Turning it on changes this\n * machine in place (agents can do the same themselves); the step then follows\n * what the machine reports: the agent's own consent, then on a Mac each of the\n * three OS permissions, one System Settings pane at a time.\n */\nfunction ScreenControlStep({\n  machine,\n  workspaceId,\n  canManage,\n  refresh,\n  onReconnect,\n}: {\n  machine: MachineView;\n  workspaceId: string;\n  canManage: boolean;\n  refresh: () => Promise<void>;\n  /** Open the connect command, for a connection too old to change in place. */\n  onReconnect: () => void;\n}) {\n  const { client } = useAppContext();\n  const stepRef = useRef<HTMLDivElement>(null);\n  const refreshRef = useRef(refresh);\n  refreshRef.current = refresh;\n  const [busy, setBusy] = useState(false);\n  const [note, setNote] = useState<string | null>(null);\n  const [opened, setOpened] = useState<MacPermissionPane | null>(null);\n  const [watchUntil, setWatchUntil] = useState(0);\n  const [stalled, setStalled] = useState(false);\n  const [reconnect, setReconnect] = useState(false);\n\n  const online = isOnline(machine);\n  const runtime = machine.runtime;\n  const allowed = machine.allowScreenControl;\n  // Older reports cannot say whether the agent holds the consent; trust the row.\n  const applied = allowed && (runtime?.capabilities.screenControl ?? true);\n  const renewable = runtime?.capabilities.credentialRenew === true;\n  const mac = machine.os === \"macos\";\n  const permissions = mac ? (runtime?.macPermissions ?? null) : null;\n  const reason = machine.desktopUnavailableReason?.trim() || null;\n  const missing = permissions\n    ? (MAC_PERMISSIONS.find((step) => !permissions[step.key]) ?? null)\n    : mac && reason !== null && /screen recording/i.test(reason)\n      ? MAC_PERMISSIONS[0]!\n      : null;\n  const updating = runtime?.versionState === \"updating\";\n  const waiting =\n    (allowed && !applied && online && (renewable || updating) && !reconnect) || opened !== null;\n\n  // Also when the card opens on a change already underway (a reload, or an\n  // agent turned it on): watch for a while, then offer Try again.\n  useEffect(() => {\n    if (waiting && watchUntil === 0) setWatchUntil(Date.now() + SCREEN_CONTROL_WATCH_MS);\n  }, [waiting, watchUntil]);\n\n  // Re-read the machine while a change is on its way, for a bounded time.\n  useEffect(() => {\n    if (!waiting || watchUntil === 0) return;\n    const timer = window.setInterval(() => {\n      if (Date.now() > watchUntil) {\n        window.clearInterval(timer);\n        setStalled(true);\n        return;\n      }\n      void refreshRef.current().catch(() => {});\n    }, SCREEN_CONTROL_POLL_MS);\n    return () => window.clearInterval(timer);\n  }, [waiting, watchUntil]);\n\n  async function turnOn() {\n    if (busy || !machine.enrollmentId) return;\n    setBusy(true);\n    setNote(null);\n    setStalled(false);\n    try {\n      const result = await client.enableMachineScreenControl(workspaceId, machine.enrollmentId);\n      if (result.reason === \"renewal_failed\") setNote(result.message);\n      setReconnect(result.reason === \"reconnect_required\");\n      setWatchUntil(Date.now() + SCREEN_CONTROL_WATCH_MS);\n      await refreshRef.current().catch(() => {});\n    } catch (failure) {\n      setNote(\n        failure instanceof OpenGeniApiError && failure.status === 403\n          ? \"Only an organization admin can turn this on.\"\n          : userErrorText(failure, \"Try again.\"),\n      );\n    } finally {\n      setBusy(false);\n      focusIfIdle(stepRef.current);\n    }\n  }\n\n  async function updateAgent() {\n    if (busy || !machine.enrollmentId) return;\n    setBusy(true);\n    setNote(null);\n    try {\n      await client.updateMachineAgent(workspaceId, machine.enrollmentId);\n      setStalled(false);\n      setWatchUntil(Date.now() + MAC_PERMISSION_WATCH_MS);\n      await refreshRef.current().catch(() => {});\n    } catch (failure) {\n      setNote(userErrorText(failure, \"Try again.\"));\n    } finally {\n      setBusy(false);\n    }\n  }\n\n  async function openPane(pane: MacPermissionPane) {\n    if (busy || !machine.enrollmentId) return;\n    setBusy(true);\n    setNote(null);\n    try {\n      const result = await client.openMachinePrivacySettings(workspaceId, machine.enrollmentId, {\n        pane,\n      });\n      if (result.opened) {\n        setOpened(pane);\n        setStalled(false);\n        setWatchUntil(Date.now() + MAC_PERMISSION_WATCH_MS);\n      } else {\n        setNote(result.message);\n      }\n    } catch (failure) {\n      setNote(userErrorText(failure, \"Try again.\"));\n    } finally {\n      setBusy(false);\n    }\n  }\n\n  const button = (label: string, onClick: () => void) => (\n    <RowButton aria-disabled={busy || undefined} aria-busy={busy || undefined} onClick={onClick}>\n      {busy ? <Loader2Icon aria-hidden className=\"animate-spin\" /> : null}\n      {label}\n    </RowButton>\n  );\n  const done = (\n    <span className=\"inline-flex items-center gap-1 text-xs font-medium text-status-idle\">\n      <CheckIcon aria-hidden className=\"size-3.5\" />\n      On\n    </span>\n  );\n\n  // The row stays one short line like its neighbours; anything the person has\n  // to do on the machine goes in the wrapping line under it.\n  let description: string;\n  let hint: string | null = null;\n  let control: ReactNode = null;\n  if (!allowed) {\n    description = canManage\n      ? \"Let agents see and use this screen\"\n      : \"Ask a workspace admin to turn it on\";\n    if (canManage) control = button(busy ? \"Turning on…\" : \"Turn on\", () => void turnOn());\n  } else if (!applied) {\n    // The step only shows for a reachable machine.\n    if (reconnect) {\n      description = \"Needs a fresh connection\";\n      hint = \"Run the connect command on this machine again, with screen control on.\";\n      if (canManage) control = button(\"Connect again\", onReconnect);\n    } else if (updating) {\n      description = \"Updating the agent…\";\n    } else if (!renewable) {\n      description = \"Waiting for an agent update\";\n      hint = \"It turns on by itself once this machine's agent is updated.\";\n      if (canManage && !runtime?.updateBlockedReason) {\n        control = button(busy ? \"Updating…\" : \"Update agent\", () => void updateAgent());\n      }\n    } else if (stalled || note) {\n      description = \"Not on yet\";\n      if (canManage) control = button(busy ? \"Trying…\" : \"Try again\", () => void turnOn());\n    } else {\n      description = \"Turning on…\";\n    }\n  } else if (missing) {\n    const shown = opened === missing.pane;\n    // The row stays short at any width; the hint names the permission.\n    description = \"Mac permission needed\";\n    hint = shown\n      ? `On the Mac, switch on Opengeni under ${missing.label}.${\n          missing.pane === \"screen_recording\" ? \" Choose Quit & Reopen if macOS asks.\" : \"\"\n        }`\n      : `Allow ${missing.label} for Opengeni on this Mac.`;\n    if (canManage && online) {\n      control = button(shown ? \"Open again\" : \"Open settings\", () => void openPane(missing.pane));\n    }\n  } else if (reason) {\n    description = reason;\n  } else {\n    description = \"Agents can see and use this screen\";\n    control = done;\n  }\n  const notice = note ?? hint;\n\n  return (\n    <div\n      data-slot=\"screen-control\"\n      ref={stepRef}\n      tabIndex={-1}\n      className=\"space-y-2 outline-hidden\"\n    >\n      <RowList label=\"Screen control\" flush>\n        <ListRow\n          leading={<LogoTile icon={<MonitorIcon />} />}\n          title=\"Screen control\"\n          description={description}\n          control={control}\n        />\n      </RowList>\n      <span className=\"sr-only\" aria-live=\"polite\">\n        {notice ? `${description}. ${notice}` : description}\n      </span>\n      {notice ? (\n        <Notice tone=\"waiting\" className=\"text-xs\">\n          {notice}\n        </Notice>\n      ) : null}\n    </div>\n  );\n}\n\nfunction ChromeStep({ chrome, machineName }: { chrome: ChromeState; machineName: string }) {\n  return (\n    <div data-slot=\"chrome-extension\">\n      <RowList label=\"Chrome\" flush>\n        <ListRow\n          leading={<LogoTile icon={<PuzzleIcon />} />}\n          title=\"Chrome\"\n          description={\n            chrome.connected\n              ? `${chrome.connected.name} on ${machineName}`\n              : `Add Opengeni Browser on ${machineName}`\n          }\n          control={\n            chrome.connected ? (\n              <span className=\"inline-flex items-center gap-1 text-xs font-medium text-status-idle\">\n                <CheckIcon aria-hidden className=\"size-3.5\" />\n                Connected\n              </span>\n            ) : (\n              <Button asChild size=\"sm\" variant=\"outline\" className=\"rounded-[10px]\">\n                <a\n                  href={OPENGENI_BROWSER_EXTENSION_URL}\n                  target=\"_blank\"\n                  rel=\"noreferrer\"\n                  onClick={chrome.watch}\n                >\n                  Add to Chrome\n                  <ArrowUpRightIcon aria-hidden />\n                  <span className=\"sr-only\"> (opens the Chrome Web Store in a new tab)</span>\n                </a>\n              </Button>\n            )\n          }\n        />\n      </RowList>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,SAAS,sCAAsC;AAC/C,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,aAAa,WAAW,SAAS,QAAQ,gBAAgC;AAoVtE,mBAQE,KALE,YAHJ;AA3TZ,IAAM,gBAAgB;AAEtB,IAAM,iBAAiB;AAEvB,IAAM,uBAAuB,KAAK;AAK3B,IAAM,yBACX,6BACA;AAAA,EACE;AACF;AAYF,SAAS,WAAW,SAA8B;AAChD,UAAQ,QAAQ,OAAO;AAAA,IACrB,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAGA,SAAS,YAAY,MAA0B,SAA6B,MAAM;AAChF,wBAAsB,MAAM;AAC1B,UAAM,SAAS,SAAS;AACxB,UAAM,OAAO,CAAC,UAAU,WAAW,SAAS,SAAS,MAAM,SAAS,MAAM,KAAK;AAC/E,QAAI,QAAQ,QAAQ,YAAa,QAAO,MAAM;AAAA,aACrC,QAAQ,MAAM,YAAa,MAAK,MAAM;AAAA,EACjD,CAAC;AACH;AAOO,SAAS,6BAA6B;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAsC;AACpC,QAAM,UAAU,cAAc;AAC9B,QAAM,EAAE,WAAW,IAAI,UAAU;AACjC,QAAM,iBAAiB,KAAK;AAC5B,QAAM,cAAc,QAAQ,kBAAkB,QAAQ,QAAQ,kBAAkB;AAChF,QAAM,aACJ,CAAC,eAAe,uBAAuB,QAAQ,eAAe,aAAa,kBAAkB;AAE/F,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAGhD,QAAM,CAAC,oBAAoB,qBAAqB,IAAI,SAAS,KAAK;AAClE,QAAM,CAAC,YAAY,aAAa,IAAI,SAA8B,MAAM;AACxE,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAwB,IAAI;AACtE,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAyD,IAAI;AAC7F,QAAM,CAAC,SAAS,UAAU,IAAI,SAAqD,IAAI;AACvF,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,EAAE;AACnD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,UAAU,OAAoB,IAAI;AACxC,QAAM,SAAS,OAA0B,IAAI;AAC7C,QAAM,cAAc,OAA2B,IAAI;AACnD,QAAM,QAAQ,OAAO,IAAI;AACzB,YAAU,MAAM;AACd,UAAM,UAAU;AAChB,WAAO,MAAM;AACX,YAAM,UAAU;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,QAAM,QAAQ,qBAAqB;AAAA,IACjC;AAAA,IACA;AAAA,IACA,gBAAgB,YAAY,gBAAgB;AAAA,EAC9C,CAAC;AACD,QAAM,0BACJ,MAAM,iBAAiB,oBAAoB,MAAM,MAAM,WAAW;AACpE,QAAM,WAAW;AAAA,IACf,MAAM,MAAM,SAAS,OAAO,CAAC,YAAY,CAAC,QAAQ,kBAAkB,QAAQ,YAAY;AAAA,IACxF,CAAC,MAAM,QAAQ;AAAA,EACjB;AACA,QAAM,gBAAgB,SAAS,KAAK,CAAC,YAAY,QAAQ,MAAM,KAAK;AACpE,QAAM,YAAY,SAAS,OAAO,CAAC,YAAY,2BAA2B,QAAQ,KAAK,CAAC;AAExF,QAAM,aACH,KAAK,qBACF,SAAS,KAAK,CAAC,YAAY,QAAQ,cAAc,KAAK,kBAAkB,IACxE,WAAc;AACpB,QAAM,SAAS,cAAc,QAAQ,CAAC,UAAU;AAChD,QAAM,gBAAgB,YAAY,mBAAmB,GAAG,SAAS,IAAI;AAErE,QAAM,YACJ,UAAU,MAAM,aAAa,2BAA2B,UAAU,KAAK,IAAI,YAAY;AACzF,QAAM,oBACJ,QAAQ,YAAY,KAAK,CAAC,cAAc,UAAU,OAAO,WAAW,GAAG,SAAS;AAElF,QAAM,YAAY,CAAC,cAA4B;AAC7C,UAAM,SAAS,SAAS;AACxB,gBAAY,UAAU,kBAAkB,cAAc,SAAS;AAC/D,qBAAiB,IAAI;AACrB,0BAAsB,cAAc,MAAS;AAC7C,kBAAc,YAAY,gBAAgB,SAAS,IAAI,MAAM;AAC7D,iBAAa,IAAI;AAAA,EACnB;AACA,QAAM,aAAa,MAAM;AAEvB,iBAAa,KAAK;AAClB,UAAM,OAAO,YAAY,SAAS,cAAc,YAAY,UAAU,OAAO;AAC7E,gBAAY,QAAQ,SAAS,IAAI;AAAA,EACnC;AAEA,QAAM,UAAU,QAAQ,MAAM;AAC5B,UAAM,OAAO,CAAC,YACZ,QAAQ,cAAc,gBAClB,IACA,QAAQ,SACN,IACA,2BAA2B,QAAQ,KAAK,IACtC,IACA;AACV,WAAO,CAAC,GAAG,QAAQ,EAChB,OAAO,CAAC,YAAY,QAAQ,cAAc,WAAW,SAAS,EAC9D;AAAA,MACC,CAAC,MAAM,UACL,KAAK,IAAI,IAAI,KAAK,KAAK,KACvB,mBAAmB,GAAG,IAAI,EAAE,cAAc,mBAAmB,GAAG,KAAK,CAAC;AAAA,IAC1E;AAAA,EACJ,GAAG,CAAC,WAAW,WAAW,eAAe,QAAQ,CAAC;AAElD,QAAM,MAAM;AAAA,IACV,OAAO,YAAyB;AAC9B,UAAI,UAAU,KAAM;AACpB,YAAM,OAAO,mBAAmB,GAAG,OAAO;AAC1C,kBAAY,IAAI;AAChB,iBAAW,IAAI;AACf,YAAM,OAAO,cAAc,KAAK,EAAE,SAAS,MAAM,eAAe,OAAO,QAAQ,CAAC,EAAE;AAClF,UAAI,KAAK,SAAS;AAChB,oBAAY,EAAE,MAAM,QAAQ,KAAK,QAAQ,CAAC;AAC1C;AAAA,MACF;AACA,eAAS,QAAQ,SAAS;AAC1B,YAAM,SAAS,MAAM,kBAAkB;AAAA,QACrC;AAAA,QACA;AAAA,QACA;AAAA,QACA,mBAAmB,MAAM,SAAS,KAAK,CAAC,cAAc,UAAU,MAAM,GAAG,aAAa;AAAA,QACtF,QAAQ,MAAM;AAAA,QACd,aAAa,CAAC,YAAY,QAAQ,OAAO,YAAY,aAAa,WAAW,OAAO;AAAA,MACtF,CAAC;AACD,UAAI,CAAC,MAAM,QAAS;AACpB,UAAI,CAAC,OAAO,OAAO;AACjB,iBAAS,IAAI;AACb,oBAAY,EAAE,MAAM,QAAQ,OAAO,OAAO,CAAC;AAC3C;AAAA,MACF;AACA,YAAM,OAAO,OAAO;AACpB,eAAS,IAAI;AACb,iBAAW,EAAE,WAAW,QAAQ,WAAW,KAAK,CAAC;AACjD,sBAAgB,IAAI;AACpB,kBAAY,QAAQ,OAAO;AAC3B,YAAM,eAAe,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IACvC;AAAA,IACA,CAAC,YAAY,QAAQ,QAAQ,OAAO,cAAc,aAAa,WAAW,OAAO,WAAW;AAAA,EAC9F;AAIA,QAAM,iBACH,eAAe,cAAc,2BAA2B,cAAc,KAAK,IACxE,gBACA,SACJ,UAAU,KAAK,CAAC,YAAY,QAAQ,UAAU,KAC9C;AACF,QAAM,SAAS;AAAA,IACb;AAAA,IACA,MAAM,UAAW,eAAe,gBAAgB,OAAQ;AAAA,EAC1D;AACA,QAAM,QAAQ,gBACT,SAAS,KAAK,CAAC,YAAY,QAAQ,cAAc,aAAa,KAAK,OACpE;AACJ,QAAM,SAAS,eAAe,OAAO,WAAW,cAAc,OAAO,SAAS,SAAS;AAIvF,QAAM,oBAAoB,0BACtB,4DACA,UAAU,CAAC,2BAA2B,UAAU,KAAK,IACnD,WAAW,aAAa,uBACxB,CAAC,MAAM,UACL,wDACA,SAAS,MAAM,aAAa,CAAC,MAAM,SACjC,GAAG,mBAAmB,GAAG,KAAK,CAAC,gDAC/B,UAAU,SAAS,KAAK,MAAM,YAC5B,iCACA,UAAU,SAAS,IACjB,2CACA,MAAM,YACJ,OACA,SAAS,SAAS,IAChB,sDACA;AAElB,QAAM,UAAU,uBAAuB;AACvC,QAAM,eACJ,kBAAkB,SAAS,SAAS,UAAU,IAAI,KAAK,CAAC,SAAS,SAAS,QAAQ;AACpF,QAAM,oBACJ,YAAY,QACZ,QAAQ,SAAS,WAAW,QAC5B,QAAQ,SAAS,OAAO,UAAU,iBAClC,CAAC,kBAAkB,QAAQ,SAAS,MAAM,KAC1C,CAAC,2BACD,MAAM;AACR,QAAM,iBAAiB,MAAM,cAAc,UAAU,SAAS,KAAK,kBAAkB;AACrF,QAAM,iBACJ,aAAa,QAAQ,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AAGvE,QAAM,SAAS,cAAc,QAAQ,CAAC;AACtC,QAAM,WACJ,cAAc,SAAS,QAAQ,SAAS,KAAK,kBAAkB,QAAQ;AAEzE,SACE,iCACE;AAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAM,SAAS,gBAAgB,eAAe,QAAQ;AAAA,QACtD,UACE,SACI,GAAG,WAAW,SAAS,CAAC,SAAM,kBAAkB,GAAG,UAAU,KAAK,CAAC,KACnE;AAAA,QAEN,MAAM;AAAA,QACN,WAAU;AAAA,QACV,aACE,YACI,0GACA,SACE,0BAA0B,aAAa,MACvC,eAAe;AAAA,QAEvB,OAAO;AAAA,QACP,UAAU;AAAA,QACV,UAAU,kBAAkB,QAAQ;AAAA,QACpC,eACE,gBACI,SAAS,cAAc,cAAc,YACnC,QAAQ,OACR,qBAAqB,mBAAmB,GAAG,aAAa,CAAC,KAC3D,eACE,uBAAuB,SAAS,SAAS,QAAQ,eAAe,eAAe,MAC/E;AAAA,QAER,aACE,YACI,UAAU,UAAU,YAClB,mBACA,UACF,oBACE,QAAQ,SAAS,SACf,qBACA,sBACF;AAAA,QAER,MAAM,YAAY,UAAU,OAAO,qBAAqB,QAAQ,SAAS;AAAA,QACzE,mBAAmB,aAAa,oBAAoB,OAAO;AAAA,QAC3D,aAAa;AAAA,QACb,MACE,YACI,KACA,oBACE,2JACA,MAAM,YACJ,8DACA;AAAA,QAEV,QAAQ,MAAM;AACZ,cAAI,UAAW,QAAO,KAAK,IAAI,SAAS;AACxC,cAAI,CAAC,kBAAmB,QAAO,UAAU;AACzC,cAAI,QAAQ,SAAS,OAAQ;AAC7B,cAAI,6BAA6B,QAAQ,SAAS,MAAM,EAAG,QAAO,QAAQ,UAAU;AACpF,gBACE,QAAQ,SAAS,QAAQ,UAAU,WAC/B,QAAQ,SAAS,OAAO,EAAE,KAAK,MAAM,QAAQ,SAAS,MAAM,IAC5D,QAAQ,SAAS,QAAQ,EAAE,eAAe,KAAK,CAAC,GACpD,KAAK,CAAC,SAAS;AACf,gBAAI,6BAA6B,IAAI,EAAG,SAAQ,UAAU;AAC1D,iBAAK,MAAM,QAAQ;AAAA,UACrB,CAAC;AAAA,QACH;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA;AAAA,QACA,SACE,2BAA2B,CAAC,MAAM,UAAU,OAC1C,iCACG;AAAA,mBAAS,SAAS,gBAAgB,QACnC,SAAS,SAAS,gBAAgB,SAChC,qBAAC,UAAO,MAAK,UAAS,MAAK,aAAY,WAAU,qBAAoB;AAAA;AAAA,YAClC,QAAQ,SAAS,eAAe;AAAA,aACnE,IACE;AAAA,UAEJ,oBAAC,UAAK,WAAU,WAAU,MAAK,UAAS,aAAU,UAC/C,wBACH;AAAA,UACC,iBACC;AAAA,YAAC;AAAA;AAAA,cACC,aAAU;AAAA,cACV,WAAU;AAAA,cAET;AAAA,2BACC,oBAAC,UAAO,MAAK,UAAS,MAAK,aAAY,WAAU,WAC9C,wCAA8B,SAAS,IAAI,KAC1C,SAAS,WACR,MAAM,gBACH,cAAc,MAAM,eAAe,YAAY,IAC/C,aACN,IACF,IACE;AAAA,gBACH,WACC;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,SAAQ;AAAA,oBACR,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,iBAAe;AAAA,oBACf,SAAS,MAAM,cAAc,CAAC,SAAS,CAAC,IAAI;AAAA,oBAE5C;AAAA;AAAA,wBAAC;AAAA;AAAA,0BACC,eAAW;AAAA,0BACX,WACE,aAAa,mCAAmC;AAAA;AAAA,sBAEpD;AAAA,sBAAE;AAAA;AAAA;AAAA,gBAEJ,IACE;AAAA,gBACH,CAAC,UAAU,QAAQ,SAAS,IAC3B,oBAAC,WAAQ,OAAM,sBAAqB,OAAK,MACtC,kBAAQ,IAAI,CAAC,YACZ;AAAA,kBAAC;AAAA;AAAA,oBAEC;AAAA,oBACA,SAAS,QAAQ,cAAc,iBAAiB,UAAU,WAAW;AAAA,oBACrE,QAAQ,MAAM;AAAA,oBACd,MAAM,UAAU,QAAQ;AAAA,oBACxB,QAAQ,UAAU,QAAQ,MAAM;AAAA,oBAChC,OAAO,MAAM,KAAK,IAAI,OAAO;AAAA;AAAA,kBANxB,QAAQ;AAAA,gBAOf,CACD,GACH,IACE;AAAA,gBACH,CAAC,UAAU,gBACV;AAAA,kBAAC;AAAA;AAAA,oBAEC,SAAS;AAAA,oBACT;AAAA,oBACA,WAAW,MAAM;AAAA,oBACjB,SAAS,MAAM;AAAA,oBACf,aAAa,MAAM,UAAU,aAAa;AAAA;AAAA,kBALrC,cAAc;AAAA,gBAMrB,IACE;AAAA,gBACH,CAAC,UAAU,gBACV;AAAA,kBAAC;AAAA;AAAA,oBACC;AAAA,oBACA,aAAa,mBAAmB,GAAG,aAAa;AAAA;AAAA,gBAClD,IACE;AAAA,gBACH,CAAC,UAAU,iBACV;AAAA,kBAAC;AAAA;AAAA,oBACC,MAAK;AAAA,oBACL,SAAQ;AAAA,oBACR,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,SAAS,MAAM,UAAU;AAAA,oBAEzB;AAAA,0CAAC,YAAS,eAAW,MAAC;AAAA,sBAAE;AAAA;AAAA;AAAA,gBAE1B,IACE;AAAA;AAAA;AAAA,UACN,IACE;AAAA,WACN;AAAA;AAAA,IAGN;AAAA,IACC,MAAM,aAAa,CAAC,0BACnB;AAAA,MAAC;AAAA;AAAA,QACC,MAAM;AAAA,QACN,cAAc,CAAC,SAAS;AACtB,cAAI,CAAC,KAAM,YAAW;AAAA,QACxB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,MAAM;AAAA,QAChB,iBAAiB,MAAM;AAAA,QACvB,eAAe,MAAM;AAAA,QACrB;AAAA,QACA,cAAc;AAAA,QACd,2BAA2B;AAAA,QAC3B,aAAa,CAAC,YAAY;AACxB,2BAAiB,QAAQ,SAAS;AAClC,0BAAgB,GAAG,mBAAmB,GAAG,OAAO,CAAC,aAAa;AAAA,QAChE;AAAA,QACA,WAAW,EAAE,QAAQ,MAAM,WAAW,OAAO,CAAC,YAAY,KAAK,IAAI,OAAO,EAAE;AAAA;AAAA,IAC9E,IACE;AAAA,KACN;AAEJ;AAMO,SAAS,6BAA6B;AAC3C,SACE,qBAAC,OAAE,WAAU,iDACX;AAAA,wBAAC,cAAW,eAAW,MAAC,WAAU,qBAAoB;AAAA,IAAE;AAAA,KAE1D;AAEJ;AAEA,SAAS,WAAW;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,mBAAmB,GAAG,OAAO;AAC1C,QAAM,aAAa,2BAA2B,QAAQ,KAAK;AAC3D,QAAM,OAAO,QAAQ,OAAO,WAAW,CAAC,QAAQ,aAAa,aAAa;AAC1E,QAAM,SAAS;AAAA,IACb,SAAS,oBAAC,YAAS,MAAM,oBAAC,QAAK,GAAI;AAAA,IACnC,OAAO;AAAA,IACP,MAAM,CAAC,WAAW,OAAO,GAAG,kBAAkB,GAAG,QAAQ,KAAK,CAAC;AAAA,EACjE;AACA,MAAI,QAAQ,QAAQ;AAClB,WACE;AAAA,MAAC;AAAA;AAAA,QACE,GAAG;AAAA,QACJ,SACE,qBAAC,UAAK,WAAU,uEACd;AAAA,8BAAC,aAAU,eAAW,MAAC,WAAU,YAAW;AAAA,UAAE;AAAA,WAEhD;AAAA;AAAA,IAEJ;AAAA,EAEJ;AAEA,MAAI,CAAC,WAAY,QAAO,oBAAC,WAAS,GAAG,QAAQ,UAAQ,MAAC;AACtD,MAAI,CAAC,OAAQ,QAAO,oBAAC,WAAS,GAAG,QAAQ;AACzC,QAAM,QAAQ,OAAO,uBAAuB,IAAI,KAAK,OAAO,IAAI;AAChE,SACE;AAAA,IAAC;AAAA;AAAA,MACE,GAAG;AAAA,MACJ,SACE,UACE;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,cAAY;AAAA,UACZ,iBAAe,UAAU;AAAA,UACzB,WAAU;AAAA,UACV,SAAS,MAAM;AACb,gBAAI,CAAC,OAAQ,OAAM;AAAA,UACrB;AAAA,UAEC;AAAA,mBAAO,oBAAC,eAAY,eAAW,MAAC,WAAU,gBAAe,IAAK;AAAA,YAC9D,OAAO,iBAAY;AAAA;AAAA;AAAA,MACtB,IAEA;AAAA,QAAC;AAAA;AAAA,UACC,cAAY;AAAA,UACZ,iBAAe,UAAU;AAAA,UACzB,SAAS,MAAM;AACb,gBAAI,CAAC,OAAQ,OAAM;AAAA,UACrB;AAAA,UAEC;AAAA,mBAAO,oBAAC,eAAY,eAAW,MAAC,WAAU,gBAAe,IAAK;AAAA,YAC9D,OAAO,iBAAY;AAAA;AAAA;AAAA,MACtB;AAAA;AAAA,EAGN;AAEJ;AAaA,SAAS,kBAAkB,aAAqB,cAA0C;AACxF,QAAM,EAAE,OAAO,IAAI,cAAc;AAEjC,QAAM,YAAY,OAAO,MAAM;AAC/B,YAAU,UAAU;AACpB,QAAM,CAAC,WAAW,YAAY,IAAI,SAAkC,IAAI;AACxE,QAAM,CAAC,YAAY,aAAa,IAAI,SAAwB,IAAI;AAChE,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAS,KAAK;AAC1C,QAAM,SAAS,cAAc;AAE7B,YAAU,MAAM;AACd,iBAAa,IAAI;AACjB,cAAU,KAAK;AAAA,EACjB,GAAG,CAAC,YAAY,CAAC;AAEjB,YAAU,MAAM;AACd,QAAI,CAAC,gBAAgB,OAAQ;AAC7B,QAAI,YAAY;AAChB,UAAM,OAAO,YAAY;AACvB,UAAI;AACF,cAAM,SAAS,MAAM,UAAU,QAAQ,qBAAqB,WAAW;AACvE,YAAI,UAAW;AACf,cAAM,SAAS,OAAO,QAAQ;AAAA,UAC5B,CAAC,cAAc,UAAU,UAAU,eAAe,UAAU,iBAAiB;AAAA,QAC/E;AACA,qBAAa,SAAS,EAAE,MAAM,OAAO,gBAAgB,OAAO,YAAY,IAAI,IAAI;AAAA,MAClF,SAAS,SAAS;AAEhB,YACE,CAAC,aACD,mBAAmB,oBACnB,QAAQ,UAAU,OAClB,QAAQ,SAAS,KACjB;AACA,oBAAU,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AACA,SAAK,KAAK;AACV,QAAI,UAAU,eAAe,KAAM,QAAO,MAAM,MAAM,YAAY;AAClE,UAAM,QAAQ,OAAO,YAAY,MAAM;AACrC,UAAI,KAAK,IAAI,IAAI,aAAa,sBAAsB;AAClD,eAAO,cAAc,KAAK;AAC1B;AAAA,MACF;AACA,UAAI,SAAS,oBAAoB,SAAU,MAAK,KAAK;AAAA,IACvD,GAAG,cAAc;AACjB,WAAO,MAAM;AACX,kBAAY;AACZ,aAAO,cAAc,KAAK;AAAA,IAC5B;AAAA,EACF,GAAG,CAAC,QAAQ,cAAc,QAAQ,YAAY,WAAW,CAAC;AAE1D,QAAM,QAAQ,YAAY,MAAM,cAAc,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,SAAO,EAAE,WAAW,MAAM;AAC5B;AAGA,IAAM,0BAA0B;AAChC,IAAM,0BAA0B,IAAI;AACpC,IAAM,yBAAyB;AAM/B,IAAM,kBAID;AAAA,EACH,EAAE,MAAM,oBAAoB,KAAK,mBAAmB,OAAO,mBAAmB;AAAA,EAC9E,EAAE,MAAM,iBAAiB,KAAK,iBAAiB,OAAO,gBAAgB;AAAA,EACtE,EAAE,MAAM,oBAAoB,KAAK,mBAAmB,OAAO,mBAAmB;AAChF;AAEA,SAAS,SAAS,SAA+B;AAC/C,SACE,QAAQ,UAAU,YAClB,QAAQ,UAAU,sBAClB,QAAQ,UAAU;AAEtB;AAQA,SAAS,kBAAkB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,EAAE,OAAO,IAAI,cAAc;AACjC,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AACrB,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAwB,IAAI;AACpD,QAAM,CAAC,QAAQ,SAAS,IAAI,SAAmC,IAAI;AACnE,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,CAAC;AAC9C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAEhD,QAAM,SAAS,SAAS,OAAO;AAC/B,QAAM,UAAU,QAAQ;AACxB,QAAM,UAAU,QAAQ;AAExB,QAAM,UAAU,YAAY,SAAS,aAAa,iBAAiB;AACnE,QAAM,YAAY,SAAS,aAAa,oBAAoB;AAC5D,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,cAAc,MAAO,SAAS,kBAAkB,OAAQ;AAC9D,QAAM,SAAS,QAAQ,0BAA0B,KAAK,KAAK;AAC3D,QAAM,UAAU,cACX,gBAAgB,KAAK,CAAC,SAAS,CAAC,YAAY,KAAK,GAAG,CAAC,KAAK,OAC3D,OAAO,WAAW,QAAQ,oBAAoB,KAAK,MAAM,IACvD,gBAAgB,CAAC,IACjB;AACN,QAAM,WAAW,SAAS,iBAAiB;AAC3C,QAAM,UACH,WAAW,CAAC,WAAW,WAAW,aAAa,aAAa,CAAC,aAAc,WAAW;AAIzF,YAAU,MAAM;AACd,QAAI,WAAW,eAAe,EAAG,eAAc,KAAK,IAAI,IAAI,uBAAuB;AAAA,EACrF,GAAG,CAAC,SAAS,UAAU,CAAC;AAGxB,YAAU,MAAM;AACd,QAAI,CAAC,WAAW,eAAe,EAAG;AAClC,UAAM,QAAQ,OAAO,YAAY,MAAM;AACrC,UAAI,KAAK,IAAI,IAAI,YAAY;AAC3B,eAAO,cAAc,KAAK;AAC1B,mBAAW,IAAI;AACf;AAAA,MACF;AACA,WAAK,WAAW,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC1C,GAAG,sBAAsB;AACzB,WAAO,MAAM,OAAO,cAAc,KAAK;AAAA,EACzC,GAAG,CAAC,SAAS,UAAU,CAAC;AAExB,iBAAe,SAAS;AACtB,QAAI,QAAQ,CAAC,QAAQ,aAAc;AACnC,YAAQ,IAAI;AACZ,YAAQ,IAAI;AACZ,eAAW,KAAK;AAChB,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,2BAA2B,aAAa,QAAQ,YAAY;AACxF,UAAI,OAAO,WAAW,iBAAkB,SAAQ,OAAO,OAAO;AAC9D,mBAAa,OAAO,WAAW,oBAAoB;AACnD,oBAAc,KAAK,IAAI,IAAI,uBAAuB;AAClD,YAAM,WAAW,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3C,SAAS,SAAS;AAChB;AAAA,QACE,mBAAmB,oBAAoB,QAAQ,WAAW,MACtD,iDACA,cAAc,SAAS,YAAY;AAAA,MACzC;AAAA,IACF,UAAE;AACA,cAAQ,KAAK;AACb,kBAAY,QAAQ,OAAO;AAAA,IAC7B;AAAA,EACF;AAEA,iBAAe,cAAc;AAC3B,QAAI,QAAQ,CAAC,QAAQ,aAAc;AACnC,YAAQ,IAAI;AACZ,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,OAAO,mBAAmB,aAAa,QAAQ,YAAY;AACjE,iBAAW,KAAK;AAChB,oBAAc,KAAK,IAAI,IAAI,uBAAuB;AAClD,YAAM,WAAW,QAAQ,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC3C,SAAS,SAAS;AAChB,cAAQ,cAAc,SAAS,YAAY,CAAC;AAAA,IAC9C,UAAE;AACA,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,iBAAe,SAAS,MAAyB;AAC/C,QAAI,QAAQ,CAAC,QAAQ,aAAc;AACnC,YAAQ,IAAI;AACZ,YAAQ,IAAI;AACZ,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,2BAA2B,aAAa,QAAQ,cAAc;AAAA,QACxF;AAAA,MACF,CAAC;AACD,UAAI,OAAO,QAAQ;AACjB,kBAAU,IAAI;AACd,mBAAW,KAAK;AAChB,sBAAc,KAAK,IAAI,IAAI,uBAAuB;AAAA,MACpD,OAAO;AACL,gBAAQ,OAAO,OAAO;AAAA,MACxB;AAAA,IACF,SAAS,SAAS;AAChB,cAAQ,cAAc,SAAS,YAAY,CAAC;AAAA,IAC9C,UAAE;AACA,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,QAAM,SAAS,CAAC,OAAe,YAC7B,qBAAC,aAAU,iBAAe,QAAQ,QAAW,aAAW,QAAQ,QAAW,SACxE;AAAA,WAAO,oBAAC,eAAY,eAAW,MAAC,WAAU,gBAAe,IAAK;AAAA,IAC9D;AAAA,KACH;AAEF,QAAM,OACJ,qBAAC,UAAK,WAAU,uEACd;AAAA,wBAAC,aAAU,eAAW,MAAC,WAAU,YAAW;AAAA,IAAE;AAAA,KAEhD;AAKF,MAAI;AACJ,MAAI,OAAsB;AAC1B,MAAI,UAAqB;AACzB,MAAI,CAAC,SAAS;AACZ,kBAAc,YACV,uCACA;AACJ,QAAI,UAAW,WAAU,OAAO,OAAO,qBAAgB,WAAW,MAAM,KAAK,OAAO,CAAC;AAAA,EACvF,WAAW,CAAC,SAAS;AAEnB,QAAI,WAAW;AACb,oBAAc;AACd,aAAO;AACP,UAAI,UAAW,WAAU,OAAO,iBAAiB,WAAW;AAAA,IAC9D,WAAW,UAAU;AACnB,oBAAc;AAAA,IAChB,WAAW,CAAC,WAAW;AACrB,oBAAc;AACd,aAAO;AACP,UAAI,aAAa,CAAC,SAAS,qBAAqB;AAC9C,kBAAU,OAAO,OAAO,mBAAc,gBAAgB,MAAM,KAAK,YAAY,CAAC;AAAA,MAChF;AAAA,IACF,WAAW,WAAW,MAAM;AAC1B,oBAAc;AACd,UAAI,UAAW,WAAU,OAAO,OAAO,iBAAY,aAAa,MAAM,KAAK,OAAO,CAAC;AAAA,IACrF,OAAO;AACL,oBAAc;AAAA,IAChB;AAAA,EACF,WAAW,SAAS;AAClB,UAAM,QAAQ,WAAW,QAAQ;AAEjC,kBAAc;AACd,WAAO,QACH,wCAAwC,QAAQ,KAAK,IACnD,QAAQ,SAAS,qBAAqB,yCAAyC,EACjF,KACA,SAAS,QAAQ,KAAK;AAC1B,QAAI,aAAa,QAAQ;AACvB,gBAAU,OAAO,QAAQ,eAAe,iBAAiB,MAAM,KAAK,SAAS,QAAQ,IAAI,CAAC;AAAA,IAC5F;AAAA,EACF,WAAW,QAAQ;AACjB,kBAAc;AAAA,EAChB,OAAO;AACL,kBAAc;AACd,cAAU;AAAA,EACZ;AACA,QAAM,SAAS,QAAQ;AAEvB,SACE;AAAA,IAAC;AAAA;AAAA,MACC,aAAU;AAAA,MACV,KAAK;AAAA,MACL,UAAU;AAAA,MACV,WAAU;AAAA,MAEV;AAAA,4BAAC,WAAQ,OAAM,kBAAiB,OAAK,MACnC;AAAA,UAAC;AAAA;AAAA,YACC,SAAS,oBAAC,YAAS,MAAM,oBAAC,eAAY,GAAI;AAAA,YAC1C,OAAM;AAAA,YACN;AAAA,YACA;AAAA;AAAA,QACF,GACF;AAAA,QACA,oBAAC,UAAK,WAAU,WAAU,aAAU,UACjC,mBAAS,GAAG,WAAW,KAAK,MAAM,KAAK,aAC1C;AAAA,QACC,SACC,oBAAC,UAAO,MAAK,WAAU,WAAU,WAC9B,kBACH,IACE;AAAA;AAAA;AAAA,EACN;AAEJ;AAEA,SAAS,WAAW,EAAE,QAAQ,YAAY,GAAiD;AACzF,SACE,oBAAC,SAAI,aAAU,oBACb,8BAAC,WAAQ,OAAM,UAAS,OAAK,MAC3B;AAAA,IAAC;AAAA;AAAA,MACC,SAAS,oBAAC,YAAS,MAAM,oBAAC,cAAW,GAAI;AAAA,MACzC,OAAM;AAAA,MACN,aACE,OAAO,YACH,GAAG,OAAO,UAAU,IAAI,OAAO,WAAW,KAC1C,2BAA2B,WAAW;AAAA,MAE5C,SACE,OAAO,YACL,qBAAC,UAAK,WAAU,uEACd;AAAA,4BAAC,aAAU,eAAW,MAAC,WAAU,YAAW;AAAA,QAAE;AAAA,SAEhD,IAEA,oBAAC,UAAO,SAAO,MAAC,MAAK,MAAK,SAAQ,WAAU,WAAU,kBACpD;AAAA,QAAC;AAAA;AAAA,UACC,MAAM;AAAA,UACN,QAAO;AAAA,UACP,KAAI;AAAA,UACJ,SAAS,OAAO;AAAA,UACjB;AAAA;AAAA,YAEC,oBAAC,oBAAiB,eAAW,MAAC;AAAA,YAC9B,oBAAC,UAAK,WAAU,WAAU,wDAA0C;AAAA;AAAA;AAAA,MACtE,GACF;AAAA;AAAA,EAGN,GACF,GACF;AAEJ;","names":[]}