@particle-academy/agent-integrations 0.28.2 → 0.30.0

package/dist/{chunk-AROVENCE.js → chunk-G5EZNWXJ.js}

@@ -1,6 +1,6 @@
-import { wrapToolWithActivity } from './chunk-ULJL53DL.js';
-import { ensureUndoToolsRegistered } from './chunk-KJ5AOOV7.js';
-import { textResult, errorResult } from './chunk-4KAIV6OD.js';
+import { ensureUndoToolsRegistered } from './chunk-CT3LRNH7.js';
+import { wrapToolWithActivity } from './chunk-2VENWGLZ.js';
+import { textResult, errorResult } from './chunk-DF3PLL2E.js';
 
 // src/bridges/charts.ts
 var DEFAULT_AGENT = { id: "agent", name: "Agent", color: "#a855f7" };
@@ -118,5 +118,5 @@ function registerChartsBridge(host, options) {
 }
 
 export { registerChartsBridge };
-//# sourceMappingURL=chunk-AROVENCE.js.map
-//# sourceMappingURL=chunk-AROVENCE.js.map
+//# sourceMappingURL=chunk-G5EZNWXJ.js.map
+//# sourceMappingURL=chunk-G5EZNWXJ.js.map

package/dist/{chunk-AROVENCE.js.map → chunk-G5EZNWXJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/bridges/charts.ts"],"names":[],"mappings":";;;;;AAmCA,IAAM,gBAAgB,EAAE,EAAA,EAAI,SAAS,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAK9D,SAAS,oBAAA,CACd,MACA,OAAA,EACQ;AACR,EAAA,MAAM,EAAE,SAAQ,GAAI,OAAA;AACpB,EAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,aAAA,EAAe,GAAI,OAAA,CAAQ,KAAA,IAAS,EAAC,EAAG;AAC3D,EAAA,MAAM,YAA+B,EAAC;AAItC,EAAA,yBAAA,CAA0B,IAAA,EAAM,EAAE,cAAA,EAAgB,KAAA,CAAM,IAAI,CAAA;AAE5D,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,OAAA;AAAA,IACN,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,WAAW,OAAA,CAAQ,EAAA;AAAA,IACnB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ;AAAA,GAClC;AAEA,EAAA,MAAM,MAAM,CACV,IAAA,EACA,aACA,UAAA,EACA,QAAA,EACA,SACA,UAAA,KACG;AACH,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,KAAqB;AAC1C,MAAA,IAAI;AAAE,QAAA,OAAO,MAAM,QAAQ,IAAI,CAAA;AAAA,MAAG,SAC3B,CAAA,EAAG;AAAE,QAAA,OAAO,YAAY,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAAG;AAAA,IAC9E,CAAA;AACA,IAAA,MAAM,KAAA,GAAQ,UAAA,GACV,oBAAA,CAAqB,OAAA,EAAS;AAAA,MAC5B,QAAA,EAAU,IAAA;AAAA,MAAM,KAAA;AAAA,MAAO,IAAA,EAAM,OAAA;AAAA,MAAS,UAAU,OAAA,CAAQ,QAAA;AAAA,MACxD,eAAe,MAAM;AAAA,KACtB,CAAA,GACD,OAAA;AACJ,IAAA,SAAA,CAAU,IAAA;AAAA,MACR,IAAA,CAAK,YAAA;AAAA,QACH,EAAE,IAAA,EAAM,WAAA,EAAa,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAA+B,QAAA,EAAU,oBAAA,EAAsB,KAAA,EAAM,EAAE;AAAA,QAC3H;AAAA;AACF,KACF;AAAA,EACF,CAAA;AAEA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,CAAA,oBAAA,EAAuB,QAAQ,EAAE,CAAA,+CAAA,CAAA;AAAA,IACjC,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,GAAA,GAAM,QAAQ,SAAA,EAAU;AAC9B,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,GAAI,GAAA,CAAI,SAAS,EAAC;AACzD,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAI,OAAA,CAAQ,EAAA;AAAA,QACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,aAAa,MAAA,CAAO,MAAA;AAAA,QACpB,aAAa,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAW,CAAA,EAAG,QAAQ,SAAS,CAAA;AAAA,QACxD,QAAA,EAAU,CAAC,CAAC,GAAA,CAAI,KAAA;AAAA,QAChB,QAAA,EAAU,CAAC,CAAC,GAAA,CAAI;AAAA,OAClB;AACA,MAAA,OAAO,UAAA,CAAW,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,IACpD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,6DAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,GAAA,GAAM,QAAQ,SAAA,EAAU;AAC9B,MAAA,OAAO,WAAW,IAAA,CAAK,SAAA,CAAU,KAAK,IAAA,EAAM,CAAC,GAAG,GAAG,CAAA;AAAA,IACrD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,iFAAA;AAAA,IACA,EAAE,MAAA,EAAQ,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC7B,CAAC,QAAQ,CAAA;AAAA,IACT,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,GAAA,GAAO,KAAK,MAAA,IAAU,OAAO,KAAK,MAAA,KAAW,QAAA,GAAY,IAAA,CAAK,MAAA,GAAoC,EAAC;AACzG,MAAA,OAAA,CAAQ,UAAU,GAAG,CAAA;AACrB,MAAA,OAAO,UAAA,CAAW,uBAAA,EAAyB,EAAG,CAAA;AAAA,IAChD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,qBAAA;AAAA,IACA,gFAAA;AAAA,IACA,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC9B,CAAC,SAAS,CAAA;AAAA,IACV,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,OAAA,GAAW,KAAK,OAAA,IAAW,OAAO,KAAK,OAAA,KAAY,QAAA,GAAY,IAAA,CAAK,OAAA,GAAqC,EAAC;AAChH,MAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,QAAA,OAAA,CAAQ,aAAa,OAAO,CAAA;AAAA,MAC9B,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,SAAA,CAAU,EAAE,GAAG,OAAA,CAAQ,WAAU,EAAG,GAAG,SAAS,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,UAAA,CAAW,uBAAuB,EAAE,IAAA,EAAM,OAAO,IAAA,CAAK,OAAO,GAAG,CAAA;AAAA,IACzE,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,mBAAA;AAAA,IACA,2FAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,WAAA,EAAa,oEAAmE,EAAE;AAAA,IAC5F,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,EAAY,OAAO,YAAY,kCAAkC,CAAA;AAC9E,MAAA,OAAA,CAAQ,UAAA,CAAW,KAAK,IAAI,CAAA;AAC5B,MAAA,OAAO,UAAA,CAAW,oBAAA,EAAsB,EAAG,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,MAAA,EAAS,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,IACvB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,EAAA;AAAA,IAChC,SAAS,MAAM;AAAE,MAAA,KAAA,MAAW,CAAA,IAAK,WAAW,CAAA,EAAE;AAAA,IAAG;AAAA,GACnD;AACF","file":"chunk-AROVENCE.js","sourcesContent":["import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport type { JsonObject } from \"../mcp/types\";\nimport type { Bridge } from \"./types\";\nimport { wrapToolWithActivity } from \"../presence/wrap-tool-with-activity\";\nimport { ensureUndoToolsRegistered } from \"../undo/undo-tools\";\nimport type { AgentTarget } from \"../presence/types\";\n\n/**\n * Adapter wires a single fancy-echarts chart to the bridge. Charts are\n * already prop-driven, so the adapter just exposes the data + option\n * setters and a way to read what's currently rendered.\n */\nexport type ChartsBridgeAdapter = {\n  /** Stable id for this chart instance. */\n  id: string;\n  title?: string;\n  screenId?: string;\n  /** Read the current ECharts option object the chart is rendering. */\n  getOption: () => Record<string, unknown>;\n  /** Replace the entire option. */\n  setOption: (option: Record<string, unknown>) => void;\n  /** Convenience: shallow-merge a partial option update. */\n  updateOption?: (partial: Record<string, unknown>) => void;\n  /** Read just the data series (subset of option for quick agent reads). */\n  getData?: () => unknown;\n  /** Update only the data, leaving axes/colors/etc. alone. */\n  updateData?: (data: unknown) => void;\n};\n\nexport type ChartsBridgeOptions = {\n  adapter: ChartsBridgeAdapter;\n  agent?: { id: string; name?: string; color?: string };\n};\n\nconst DEFAULT_AGENT = { id: \"agent\", name: \"Agent\", color: \"#a855f7\" };\n\n/**\n * registerChartsBridge — schema-aware MCP access to a single chart.\n */\nexport function registerChartsBridge(\n  host: ToolHost,\n  options: ChartsBridgeOptions,\n): Bridge {\n  const { adapter } = options;\n  const agent = { ...DEFAULT_AGENT, ...(options.agent ?? {}) };\n  const disposers: Array<() => void> = [];\n\n  // agent_undo / agent_redo / agent_history are registered whenever any bridge\n  // mounts, so undo availability doesn't hinge on which bridges are co-present.\n  ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });\n\n  const target: AgentTarget = {\n    kind: \"chart\",\n    screenId: adapter.screenId,\n    elementId: adapter.id,\n    label: adapter.title ?? adapter.id,\n  };\n\n  const reg = (\n    name: string,\n    description: string,\n    properties: Record<string, unknown>,\n    required: string[],\n    handler: (args: JsonObject) => Promise<any> | any,\n    isMutation: boolean,\n  ) => {\n    const wrapped = async (args: JsonObject) => {\n      try { return await handler(args); }\n      catch (e) { return errorResult(e instanceof Error ? e.message : String(e)); }\n    };\n    const final = isMutation\n      ? wrapToolWithActivity(wrapped, {\n          toolName: name, agent, kind: \"chart\", screenId: adapter.screenId,\n          resolveTarget: () => target,\n        })\n      : wrapped;\n    disposers.push(\n      host.registerTool(\n        { name, description, inputSchema: { type: \"object\", properties: properties as any, required, additionalProperties: false } },\n        final as any,\n      ),\n    );\n  };\n\n  reg(\n    \"chart_describe\",\n    `Describe the chart \"${adapter.id}\" — series count, type guesses, axis info.`,\n    {},\n    [],\n    () => {\n      const opt = adapter.getOption();\n      const series = Array.isArray(opt.series) ? opt.series : [];\n      const summary = {\n        id: adapter.id,\n        title: adapter.title,\n        seriesCount: series.length,\n        seriesTypes: series.map((s: any) => s?.type ?? \"unknown\"),\n        hasXAxis: !!opt.xAxis,\n        hasYAxis: !!opt.yAxis,\n      };\n      return textResult(JSON.stringify(summary), summary);\n    },\n    false,\n  );\n\n  reg(\n    \"chart_get_option\",\n    \"Read the full ECharts option object the chart is rendering.\",\n    {},\n    [],\n    () => {\n      const opt = adapter.getOption();\n      return textResult(JSON.stringify(opt, null, 2), opt);\n    },\n    false,\n  );\n\n  reg(\n    \"chart_set_option\",\n    \"Replace the entire ECharts option. Use chart_update_option for partial updates.\",\n    { option: { type: \"object\" } },\n    [\"option\"],\n    (args) => {\n      const opt = (args.option && typeof args.option === \"object\") ? args.option as Record<string, unknown> : {};\n      adapter.setOption(opt);\n      return textResult(\"Replaced chart option\", { });\n    },\n    true,\n  );\n\n  reg(\n    \"chart_update_option\",\n    \"Shallow-merge a partial option update — only the keys you provide change.\",\n    { partial: { type: \"object\" } },\n    [\"partial\"],\n    (args) => {\n      const partial = (args.partial && typeof args.partial === \"object\") ? args.partial as Record<string, unknown> : {};\n      if (adapter.updateOption) {\n        adapter.updateOption(partial);\n      } else {\n        adapter.setOption({ ...adapter.getOption(), ...partial });\n      }\n      return textResult(\"Merged chart option\", { keys: Object.keys(partial) });\n    },\n    true,\n  );\n\n  reg(\n    \"chart_update_data\",\n    \"Update only the data (typically the `series` field). Leaves layout / axes / colors alone.\",\n    { data: { description: \"New series array (or whatever shape the host's adapter expects).\" } },\n    [\"data\"],\n    (args) => {\n      if (!adapter.updateData) return errorResult(\"Host did not provide updateData.\");\n      adapter.updateData(args.data);\n      return textResult(\"Updated chart data\", { });\n    },\n    true,\n  );\n\n  return {\n    id: `chart:${adapter.id}`,\n    title: adapter.title ?? adapter.id,\n    dispose: () => { for (const d of disposers) d(); },\n  };\n}\n"]}
+{"version":3,"sources":["../src/bridges/charts.ts"],"names":[],"mappings":";;;;;AAmCA,IAAM,gBAAgB,EAAE,EAAA,EAAI,SAAS,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAK9D,SAAS,oBAAA,CACd,MACA,OAAA,EACQ;AACR,EAAA,MAAM,EAAE,SAAQ,GAAI,OAAA;AACpB,EAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,aAAA,EAAe,GAAI,OAAA,CAAQ,KAAA,IAAS,EAAC,EAAG;AAC3D,EAAA,MAAM,YAA+B,EAAC;AAItC,EAAA,yBAAA,CAA0B,IAAA,EAAM,EAAE,cAAA,EAAgB,KAAA,CAAM,IAAI,CAAA;AAE5D,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,OAAA;AAAA,IACN,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,WAAW,OAAA,CAAQ,EAAA;AAAA,IACnB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ;AAAA,GAClC;AAEA,EAAA,MAAM,MAAM,CACV,IAAA,EACA,aACA,UAAA,EACA,QAAA,EACA,SACA,UAAA,KACG;AACH,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,KAAqB;AAC1C,MAAA,IAAI;AAAE,QAAA,OAAO,MAAM,QAAQ,IAAI,CAAA;AAAA,MAAG,SAC3B,CAAA,EAAG;AAAE,QAAA,OAAO,YAAY,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAAG;AAAA,IAC9E,CAAA;AACA,IAAA,MAAM,KAAA,GAAQ,UAAA,GACV,oBAAA,CAAqB,OAAA,EAAS;AAAA,MAC5B,QAAA,EAAU,IAAA;AAAA,MAAM,KAAA;AAAA,MAAO,IAAA,EAAM,OAAA;AAAA,MAAS,UAAU,OAAA,CAAQ,QAAA;AAAA,MACxD,eAAe,MAAM;AAAA,KACtB,CAAA,GACD,OAAA;AACJ,IAAA,SAAA,CAAU,IAAA;AAAA,MACR,IAAA,CAAK,YAAA;AAAA,QACH,EAAE,IAAA,EAAM,WAAA,EAAa,WAAA,EAAa,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAA+B,QAAA,EAAU,oBAAA,EAAsB,KAAA,EAAM,EAAE;AAAA,QAC3H;AAAA;AACF,KACF;AAAA,EACF,CAAA;AAEA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,CAAA,oBAAA,EAAuB,QAAQ,EAAE,CAAA,+CAAA,CAAA;AAAA,IACjC,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,GAAA,GAAM,QAAQ,SAAA,EAAU;AAC9B,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,GAAI,GAAA,CAAI,SAAS,EAAC;AACzD,MAAA,MAAM,OAAA,GAAU;AAAA,QACd,IAAI,OAAA,CAAQ,EAAA;AAAA,QACZ,OAAO,OAAA,CAAQ,KAAA;AAAA,QACf,aAAa,MAAA,CAAO,MAAA;AAAA,QACpB,aAAa,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAW,CAAA,EAAG,QAAQ,SAAS,CAAA;AAAA,QACxD,QAAA,EAAU,CAAC,CAAC,GAAA,CAAI,KAAA;AAAA,QAChB,QAAA,EAAU,CAAC,CAAC,GAAA,CAAI;AAAA,OAClB;AACA,MAAA,OAAO,UAAA,CAAW,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,IACpD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,6DAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,GAAA,GAAM,QAAQ,SAAA,EAAU;AAC9B,MAAA,OAAO,WAAW,IAAA,CAAK,SAAA,CAAU,KAAK,IAAA,EAAM,CAAC,GAAG,GAAG,CAAA;AAAA,IACrD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,iFAAA;AAAA,IACA,EAAE,MAAA,EAAQ,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC7B,CAAC,QAAQ,CAAA;AAAA,IACT,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,GAAA,GAAO,KAAK,MAAA,IAAU,OAAO,KAAK,MAAA,KAAW,QAAA,GAAY,IAAA,CAAK,MAAA,GAAoC,EAAC;AACzG,MAAA,OAAA,CAAQ,UAAU,GAAG,CAAA;AACrB,MAAA,OAAO,UAAA,CAAW,uBAAA,EAAyB,EAAG,CAAA;AAAA,IAChD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,qBAAA;AAAA,IACA,gFAAA;AAAA,IACA,EAAE,OAAA,EAAS,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC9B,CAAC,SAAS,CAAA;AAAA,IACV,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,OAAA,GAAW,KAAK,OAAA,IAAW,OAAO,KAAK,OAAA,KAAY,QAAA,GAAY,IAAA,CAAK,OAAA,GAAqC,EAAC;AAChH,MAAA,IAAI,QAAQ,YAAA,EAAc;AACxB,QAAA,OAAA,CAAQ,aAAa,OAAO,CAAA;AAAA,MAC9B,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,SAAA,CAAU,EAAE,GAAG,OAAA,CAAQ,WAAU,EAAG,GAAG,SAAS,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,UAAA,CAAW,uBAAuB,EAAE,IAAA,EAAM,OAAO,IAAA,CAAK,OAAO,GAAG,CAAA;AAAA,IACzE,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,mBAAA;AAAA,IACA,2FAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,WAAA,EAAa,oEAAmE,EAAE;AAAA,IAC5F,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,IAAI,CAAC,OAAA,CAAQ,UAAA,EAAY,OAAO,YAAY,kCAAkC,CAAA;AAC9E,MAAA,OAAA,CAAQ,UAAA,CAAW,KAAK,IAAI,CAAA;AAC5B,MAAA,OAAO,UAAA,CAAW,oBAAA,EAAsB,EAAG,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,MAAA,EAAS,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,IACvB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,EAAA;AAAA,IAChC,SAAS,MAAM;AAAE,MAAA,KAAA,MAAW,CAAA,IAAK,WAAW,CAAA,EAAE;AAAA,IAAG;AAAA,GACnD;AACF","file":"chunk-G5EZNWXJ.js","sourcesContent":["import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport type { JsonObject } from \"../mcp/types\";\nimport type { Bridge } from \"./types\";\nimport { wrapToolWithActivity } from \"../presence/wrap-tool-with-activity\";\nimport { ensureUndoToolsRegistered } from \"../undo/undo-tools\";\nimport type { AgentTarget } from \"../presence/types\";\n\n/**\n * Adapter wires a single fancy-echarts chart to the bridge. Charts are\n * already prop-driven, so the adapter just exposes the data + option\n * setters and a way to read what's currently rendered.\n */\nexport type ChartsBridgeAdapter = {\n  /** Stable id for this chart instance. */\n  id: string;\n  title?: string;\n  screenId?: string;\n  /** Read the current ECharts option object the chart is rendering. */\n  getOption: () => Record<string, unknown>;\n  /** Replace the entire option. */\n  setOption: (option: Record<string, unknown>) => void;\n  /** Convenience: shallow-merge a partial option update. */\n  updateOption?: (partial: Record<string, unknown>) => void;\n  /** Read just the data series (subset of option for quick agent reads). */\n  getData?: () => unknown;\n  /** Update only the data, leaving axes/colors/etc. alone. */\n  updateData?: (data: unknown) => void;\n};\n\nexport type ChartsBridgeOptions = {\n  adapter: ChartsBridgeAdapter;\n  agent?: { id: string; name?: string; color?: string };\n};\n\nconst DEFAULT_AGENT = { id: \"agent\", name: \"Agent\", color: \"#a855f7\" };\n\n/**\n * registerChartsBridge — schema-aware MCP access to a single chart.\n */\nexport function registerChartsBridge(\n  host: ToolHost,\n  options: ChartsBridgeOptions,\n): Bridge {\n  const { adapter } = options;\n  const agent = { ...DEFAULT_AGENT, ...(options.agent ?? {}) };\n  const disposers: Array<() => void> = [];\n\n  // agent_undo / agent_redo / agent_history are registered whenever any bridge\n  // mounts, so undo availability doesn't hinge on which bridges are co-present.\n  ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });\n\n  const target: AgentTarget = {\n    kind: \"chart\",\n    screenId: adapter.screenId,\n    elementId: adapter.id,\n    label: adapter.title ?? adapter.id,\n  };\n\n  const reg = (\n    name: string,\n    description: string,\n    properties: Record<string, unknown>,\n    required: string[],\n    handler: (args: JsonObject) => Promise<any> | any,\n    isMutation: boolean,\n  ) => {\n    const wrapped = async (args: JsonObject) => {\n      try { return await handler(args); }\n      catch (e) { return errorResult(e instanceof Error ? e.message : String(e)); }\n    };\n    const final = isMutation\n      ? wrapToolWithActivity(wrapped, {\n          toolName: name, agent, kind: \"chart\", screenId: adapter.screenId,\n          resolveTarget: () => target,\n        })\n      : wrapped;\n    disposers.push(\n      host.registerTool(\n        { name, description, inputSchema: { type: \"object\", properties: properties as any, required, additionalProperties: false } },\n        final as any,\n      ),\n    );\n  };\n\n  reg(\n    \"chart_describe\",\n    `Describe the chart \"${adapter.id}\" — series count, type guesses, axis info.`,\n    {},\n    [],\n    () => {\n      const opt = adapter.getOption();\n      const series = Array.isArray(opt.series) ? opt.series : [];\n      const summary = {\n        id: adapter.id,\n        title: adapter.title,\n        seriesCount: series.length,\n        seriesTypes: series.map((s: any) => s?.type ?? \"unknown\"),\n        hasXAxis: !!opt.xAxis,\n        hasYAxis: !!opt.yAxis,\n      };\n      return textResult(JSON.stringify(summary), summary);\n    },\n    false,\n  );\n\n  reg(\n    \"chart_get_option\",\n    \"Read the full ECharts option object the chart is rendering.\",\n    {},\n    [],\n    () => {\n      const opt = adapter.getOption();\n      return textResult(JSON.stringify(opt, null, 2), opt);\n    },\n    false,\n  );\n\n  reg(\n    \"chart_set_option\",\n    \"Replace the entire ECharts option. Use chart_update_option for partial updates.\",\n    { option: { type: \"object\" } },\n    [\"option\"],\n    (args) => {\n      const opt = (args.option && typeof args.option === \"object\") ? args.option as Record<string, unknown> : {};\n      adapter.setOption(opt);\n      return textResult(\"Replaced chart option\", { });\n    },\n    true,\n  );\n\n  reg(\n    \"chart_update_option\",\n    \"Shallow-merge a partial option update — only the keys you provide change.\",\n    { partial: { type: \"object\" } },\n    [\"partial\"],\n    (args) => {\n      const partial = (args.partial && typeof args.partial === \"object\") ? args.partial as Record<string, unknown> : {};\n      if (adapter.updateOption) {\n        adapter.updateOption(partial);\n      } else {\n        adapter.setOption({ ...adapter.getOption(), ...partial });\n      }\n      return textResult(\"Merged chart option\", { keys: Object.keys(partial) });\n    },\n    true,\n  );\n\n  reg(\n    \"chart_update_data\",\n    \"Update only the data (typically the `series` field). Leaves layout / axes / colors alone.\",\n    { data: { description: \"New series array (or whatever shape the host's adapter expects).\" } },\n    [\"data\"],\n    (args) => {\n      if (!adapter.updateData) return errorResult(\"Host did not provide updateData.\");\n      adapter.updateData(args.data);\n      return textResult(\"Updated chart data\", { });\n    },\n    true,\n  );\n\n  return {\n    id: `chart:${adapter.id}`,\n    title: adapter.title ?? adapter.id,\n    dispose: () => { for (const d of disposers) d(); },\n  };\n}\n"]}

package/dist/{chunk-OIX2ANFS.js → chunk-GRHPEK6M.js}

@@ -169,8 +169,37 @@ var RelayBroker = class {
       sub.resolveNext?.(sub.queue.shift() ?? null);
     }
   }
+  /**
+   * Validate that a peer-supplied payload is a well-formed JSON-RPC 2.0 frame
+   * (or batch) before it is fanned out. Previously this was a substring match on
+   * `"jsonrpc"`, which let any token holder inject spoofed frames — a forged
+   * `notifications/peer_joined` / `peer_left` (broker-reserved presence control),
+   * a fake `notifications/agent_activity {source:"user"}` ("human took control"),
+   * or a forged response with a matching id. We now parse + shape-check, and
+   * reject the broker-reserved control methods (the broker emits those itself,
+   * never a peer).
+   */
   isFrame(payload) {
-    return payload.length > 0 && payload.includes('"jsonrpc"');
+    if (payload.length === 0) return false;
+    let parsed;
+    try {
+      parsed = JSON.parse(payload);
+    } catch {
+      return false;
+    }
+    const frames = Array.isArray(parsed) ? parsed : [parsed];
+    return frames.length > 0 && frames.every((f) => this.isValidFrame(f));
+  }
+  isValidFrame(f) {
+    if (!f || typeof f !== "object" || Array.isArray(f)) return false;
+    const o = f;
+    if (o.jsonrpc !== "2.0") return false;
+    const method = typeof o.method === "string" ? o.method : void 0;
+    if (method === "notifications/peer_joined" || method === "notifications/peer_left") return false;
+    if (method !== void 0) return true;
+    const hasResult = "result" in o;
+    const hasError = "error" in o;
+    return "id" in o && hasResult !== hasError;
   }
   reap() {
     const cutoff = Date.now() - this.ttlMs;
@@ -197,10 +226,17 @@ function createNodeRelay(opts = {}) {
   const broker = new RelayBroker(opts);
   const prefix = (opts.pathPrefix ?? "").replace(/\/$/, "");
   const cors = opts.corsAllowOrigin ?? "*";
-  function setCorsHeaders(res) {
-    res.setHeader("access-control-allow-origin", cors);
+  const allowedOrigins = opts.allowedOrigins;
+  function setCorsHeaders(res, req) {
+    if (allowedOrigins && allowedOrigins.length) {
+      const origin = req?.headers.origin;
+      res.setHeader("access-control-allow-origin", origin && allowedOrigins.includes(origin) ? origin : "null");
+      res.setHeader("vary", "origin");
+    } else {
+      res.setHeader("access-control-allow-origin", cors);
+    }
     res.setHeader("access-control-allow-methods", "GET, POST, OPTIONS");
-    res.setHeader("access-control-allow-headers", "content-type, x-csrf-token, accept");
+    res.setHeader("access-control-allow-headers", "content-type, x-csrf-token, accept, authorization");
     res.setHeader("access-control-max-age", "86400");
   }
   function readBody(req) {
@@ -236,7 +272,7 @@ function createNodeRelay(opts = {}) {
     return u.pathname;
   }
   const register = async (req, res) => {
-    setCorsHeaders(res);
+    setCorsHeaders(res, req);
     if (req.method === "OPTIONS") {
       res.statusCode = 204;
       return res.end();
@@ -264,7 +300,7 @@ function createNodeRelay(opts = {}) {
   };
   function makeSessionHandler(direction) {
     return async (req, res) => {
-      setCorsHeaders(res);
+      setCorsHeaders(res, req);
       if (req.method === "OPTIONS") {
         res.statusCode = 204;
         return res.end();
@@ -291,7 +327,7 @@ function createNodeRelay(opts = {}) {
   const outbox = makeSessionHandler("outbound");
   const unregister = makeSessionHandler("unregister");
   const events = async (req, res) => {
-    setCorsHeaders(res);
+    setCorsHeaders(res, req);
     if (req.method === "OPTIONS") {
       res.statusCode = 204;
       return res.end();
@@ -382,5 +418,5 @@ function flush(res) {
 }
 
 export { RelayBroker, createNodeRelay };
-//# sourceMappingURL=chunk-OIX2ANFS.js.map
-//# sourceMappingURL=chunk-OIX2ANFS.js.map
+//# sourceMappingURL=chunk-GRHPEK6M.js.map
+//# sourceMappingURL=chunk-GRHPEK6M.js.map

package/dist/chunk-GRHPEK6M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/relay-server/core.ts","../src/relay-server/node.ts"],"names":["next","ok"],"mappings":";;;;AAuDA,IAAM,cAAN,MAAmC;AAAA,EAAnC,WAAA,GAAA;AACE,IAAA,IAAA,CAAQ,QAAA,uBAAe,GAAA,EAAqB;AAAA,EAAA;AAAA,EAC5C,WAAW,CAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,EAAA,EAAI,CAAC,CAAA;AAAA,EAAG;AAAA,EACrD,WAAW,EAAA,EAAY;AAAE,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAAA,EAAG;AAAA,EACvD,cAAc,EAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,EAAG;AAAA,EACtD,kBAAkB,MAAA,EAAgB;AAChC,IAAA,MAAM,MAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,CAAC,CAAA,IAAK,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA,CAAE,QAAA,GAAW,MAAA,EAAQ,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA;AACzE,IAAA,OAAO,GAAA;AAAA,EACT;AACF,CAAA;AAEA,IAAM,kBAAA,GAAqB,uBAAA;AAEpB,IAAM,cAAN,MAAkB;AAAA,EAOvB,WAAA,CAAY,IAAA,GAA2B,EAAC,EAAG;AAH3C;AAAA,IAAA,IAAA,CAAQ,IAAA,uBAA8D,GAAA,EAAI;AAIxE,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,CAAA,GAAI,KAAK,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,IAAI,WAAA,EAAY;AAC3C,IAAA,MAAM,IAAA,GAAO,KAAK,cAAA,IAAkB,GAAA;AACpC,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,IAAA,CAAK,SAAS,WAAA,CAAY,MAAM,IAAA,CAAK,IAAA,IAAQ,IAAI,CAAA;AAEjD,MAAA,IAAI,OAAQ,IAAA,CAAK,MAAA,CAAkC,KAAA,KAAU,UAAA,EAAY;AACvE,QAAC,IAAA,CAAK,OAAiC,KAAA,EAAM;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAA,GAAU;AACR,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,EAClB;AAAA;AAAA;AAAA,EAIA,QAAA,CAAS,IAAY,KAAA,EAA6D;AAChF,IAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,EAAE,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,oBAAA,EAAqB;AACnF,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,EAAA,IAAM,KAAA,CAAM,SAAS,GAAA,EAAK;AACxE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC9C;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AACzC,IAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,SAAA,EAAW,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC/F,MAAA,QAAA,CAAS,QAAA,GAAW,KAAK,GAAA,EAAI;AAC7B,MAAA,IAAA,CAAK,KAAA,CAAM,WAAW,QAAQ,CAAA;AAC9B,MAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,IACpB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,EAAA,EAAI,SAAA,EAAW,MAAM,QAAA,EAAU,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACnE,IAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,EACpB;AAAA,EAEA,UAAA,CAAW,IAAY,KAAA,EAAwB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAC3B,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,QAAA,CAAS,IAAY,KAAA,EAAwB;AAC3C,IAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,KAAA;AAC1B,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AAClC,IAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,IAAA,IAAI,CAAC,mBAAmB,CAAA,CAAE,SAAA,EAAW,UAAU,KAAK,CAAC,GAAG,OAAO,KAAA;AAC/D,IAAA,CAAA,CAAE,QAAA,GAAW,KAAK,GAAA,EAAI;AACtB,IAAA,IAAA,CAAK,KAAA,CAAM,WAAW,CAAC,CAAA;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,KAAA,CAAM,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AACzD,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,OAAO,CAAA;AAClC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAA,CAAO,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AAC1D,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,UAAA,EAAY,OAAO,CAAA;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,CAAU,EAAA,EAAY,KAAA,EAAe,SAAA,EAAuC;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC3E,IAAA,MAAM,YAAA,GAAe,WAAA,CAAY,CAAC,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD,IAAA,MAAM,UAAA,GAAyB,EAAE,EAAA,EAAI,YAAA,EAAc,WAAW,KAAA,EAAO,EAAC,EAAG,WAAA,EAAa,IAAA,EAAK;AAC3F,IAAA,IAAA,CAAK,WAAW,EAAA,EAAI,SAAS,CAAA,CAAE,GAAA,CAAI,cAAc,UAAU,CAAA;AAI3D,IAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,MAAA,IAAA,CAAK,MAAA;AAAA,QACH,EAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAK,SAAA,CAAU;AAAA,UACb,OAAA,EAAS,KAAA;AAAA,UACT,MAAA,EAAQ,2BAAA;AAAA,UACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,SACxC;AAAA,OACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAc,MAAM;AACxB,MAAA,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,SAAS,CAAA,CAAE,OAAO,YAAY,CAAA;AAClD,MAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,QAAA,IAAA,CAAK,MAAA;AAAA,UACH,EAAA;AAAA,UACA,SAAA;AAAA,UACA,KAAK,SAAA,CAAU;AAAA,YACb,OAAA,EAAS,KAAA;AAAA,YACT,MAAA,EAAQ,yBAAA;AAAA,YACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,WACxC;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAA;AAIA,IAAA,MAAM,SAAS,mBAAuE;AACpF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG;AACzB,UAAA,MAAMA,KAAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AAC9B,UAAA,IAAIA,KAAAA,KAAS,QAAW,MAAMA,KAAAA;AAC9B,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAI,OAAA,CAAuB,CAAC,OAAA,KAAY;AACzD,UAAA,IAAA,CAAK,WAAA,GAAc,OAAA;AAAA,QACrB,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,IAAI,SAAS,IAAA,EAAM;AACnB,QAAA,MAAM,IAAA;AAAA,MACR;AAAA,IACF,CAAA,CAAE,KAAK,UAAU,CAAA;AAEjB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,YAAA;AAAA,MACA,QAAQ,MAAA,EAAO;AAAA,MACf,aAAa,MAAM;AAEjB,QAAA,UAAA,CAAW,cAAc,IAAI,CAAA;AAC7B,QAAA,WAAA,EAAY;AAAA,MACd;AAAA,KACF;AAAA,EACF;AAAA;AAAA,EAIQ,UAAA,CAAW,WAAmB,SAAA,EAA+C;AACnF,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AACvC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,uBAAgB,GAAA,EAAI;AACpB,MAAA,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,SAAS,CAAA;AAAA,IACpC;AACA,IAAA,IAAI,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,SAAS,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,uBAAY,GAAA,EAAI;AAChB,MAAA,SAAA,CAAU,GAAA,CAAI,WAAW,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEQ,MAAA,CAAO,SAAA,EAAmB,SAAA,EAAsB,OAAA,EAAiB;AACvE,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAI,SAAS,CAAA,EAAG,IAAI,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,OAAO,CAAA;AACtB,MAAA,GAAA,CAAI,WAAA,GAAc,GAAA,CAAI,KAAA,CAAM,KAAA,MAAW,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,QAAQ,OAAA,EAA0B;AACxC,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,MAAM,CAAA;AACvD,IAAA,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,KAAM,IAAA,CAAK,YAAA,CAAa,CAAC,CAAC,CAAA;AAAA,EACtE;AAAA,EAEQ,aAAa,CAAA,EAAqB;AACxC,IAAA,IAAI,CAAC,KAAK,OAAO,CAAA,KAAM,YAAY,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,KAAA;AAC5D,IAAA,MAAM,CAAA,GAAI,CAAA;AACV,IAAA,IAAI,CAAA,CAAE,OAAA,KAAY,KAAA,EAAO,OAAO,KAAA;AAChC,IAAA,MAAM,SAAS,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS,MAAA;AAEzD,IAAA,IAAI,MAAA,KAAW,2BAAA,IAA+B,MAAA,KAAW,yBAAA,EAA2B,OAAO,KAAA;AAC3F,IAAA,IAAI,MAAA,KAAW,QAAW,OAAO,IAAA;AAEjC,IAAA,MAAM,YAAY,QAAA,IAAY,CAAA;AAC9B,IAAA,MAAM,WAAW,OAAA,IAAW,CAAA;AAC5B,IAAA,OAAO,IAAA,IAAQ,KAAK,SAAA,KAAc,QAAA;AAAA,EACpC;AAAA,EAEQ,IAAA,GAAO;AACb,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,KAAA;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,KAAA,CAAM,iBAAA,CAAkB,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM;AACR,QAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,EAAO,EAAG;AAC/B,UAAA,KAAA,MAAW,OAAO,GAAA,CAAI,MAAA,EAAO,EAAG,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,QACxD;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAAA,IAC7B;AAAA,EACF;AACF;AAWA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAO,WAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAEA,SAAS,kBAAA,CAAmB,GAAW,CAAA,EAAoB;AACzD,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAC,CAAA;AACrE;AC5PO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAAc;AACtE,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,CAAY,IAAI,CAAA;AACnC,EAAA,MAAM,UAAU,IAAA,CAAK,UAAA,IAAc,EAAA,EAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,GAAA;AAErC,EAAA,MAAM,iBAAiB,IAAA,CAAK,cAAA;AAE5B,EAAA,SAAS,cAAA,CAAe,KAAqB,GAAA,EAAuB;AAClE,IAAA,IAAI,cAAA,IAAkB,eAAe,MAAA,EAAQ;AAG3C,MAAA,MAAM,MAAA,GAAS,KAAK,OAAA,CAAQ,MAAA;AAC5B,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,MAAA,IAAU,cAAA,CAAe,SAAS,MAAM,CAAA,GAAI,SAAS,MAAM,CAAA;AACxG,MAAA,GAAA,CAAI,SAAA,CAAU,QAAQ,QAAQ,CAAA;AAAA,IAChC,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AAAA,IACnD;AACA,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAElE,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,mDAAmD,CAAA;AACjG,IAAA,GAAA,CAAI,SAAA,CAAU,0BAA0B,OAAO,CAAA;AAAA,EACjD;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAmB,EAAC;AAC1B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,QAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AAEf,QAAA,IAAI,KAAA,GAAQ,MAAM,IAAA,EAAM;AACtB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,mBAAmB,CAAC,CAAA;AACrC,UAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,UAAA;AAAA,QACF;AACA,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,IAAA,CAAK,GAAA,EAAqB,MAAA,EAAgB,IAAA,EAAqB;AACtE,IAAA,GAAA,CAAI,UAAA,GAAa,MAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EAC9B;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,YAAA;AAAA,EACX;AAEA,EAAA,SAAS,YAAY,GAAA,EAA8B;AACjD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,QAAA;AAAA,EACX;AAEA,EAAA,MAAM,QAAA,GAAwB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAAE,MAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,IAAG,SAAS,CAAA,EAAG;AAC5C,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,IACnF;AACA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAAE,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAE,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,IAAG;AAC7F,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAK,UAAU,EAAC;AACvC,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,UAAU,QAAA,EAAU;AAC5D,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,kBAAkB,CAAA;AAAA,IACnD;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC9D,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACpC,CAAA;AAKA,EAAA,SAAS,mBACP,SAAA,EACa;AACb,IAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,MAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,MAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,QAAA,OAAO,IAAI,GAAA,EAAI;AAAA,MAAG;AACxE,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,MAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,MAAA,MAAM,QAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAE5C,MAAA,IAAI,cAAc,YAAA,EAAc;AAC9B,QAAA,MAAMC,GAAAA,GAAK,MAAA,CAAO,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA;AAC3C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAKA,GAAAA,GAAK,GAAA,GAAM,GAAA,EAAKA,GAAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,MACjF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AAAE,QAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,MAAG,SAAS,CAAA,EAAG;AAC5C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,MACnF;AACA,MAAA,MAAM,EAAA,GAAK,SAAA,KAAc,SAAA,GACrB,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,KAAA,EAAO,IAAI,CAAA,GACjC,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,OAAO,IAAI,CAAA;AACtC,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,EAAA,GAAK,GAAA,GAAM,GAAA,EAAK,EAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,0BAA0B,CAAA;AAAA,IAC1F,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,mBAAmB,SAAS,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,mBAAmB,UAAU,CAAA;AAC5C,EAAA,MAAM,UAAA,GAAa,mBAAmB,YAAY,CAAA;AAElD,EAAA,MAAM,MAAA,GAAsB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAC/E,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,IAAA,MAAM,CAAA,GAAI,SAAS,GAAG,CAAA;AACtB,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAChC,IAAA,MAAM,YAAY,CAAA,CAAE,GAAA,CAAI,WAAW,CAAA,KAAM,aAAa,UAAA,GAAa,SAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,OAAO,SAAS,CAAA;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAuB,IAAI,MAAM;;AAAA,CAAM,CAAA;AACjD,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IACjB;AAEA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AACvC,IAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,IAAA,KAAA,CAAM,GAAG,CAAA;AAET,IAAA,IAAI,SAAA,GAAmD,YAAY,MAAM;AACvE,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,KAAA,CAAM,GAAG,CAAA;AAAA,IACX,GAAG,IAAM,CAAA;AACT,IAAA,IAAI,SAAA,IAAa,OAAQ,SAAA,CAAqC,KAAA,KAAU,UAAA,EAAY;AAClF,MAAC,UAAoC,KAAA,EAAM;AAAA,IAC7C;AAEA,IAAA,MAAM,UAAU,MAAM;AACpB,MAAA,IAAI,SAAA,EAAW;AAAE,QAAA,aAAA,CAAc,SAAS,CAAA;AAAG,QAAA,SAAA,GAAY,IAAA;AAAA,MAAM;AAC7D,MAAA,GAAA,CAAI,WAAA,EAAY;AAAA,IAClB,CAAA;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAEvB,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,IAAI,MAAA,EAAQ;AACpC,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAqB,KAAK;;AAAA,CAAM,CAAA;AAC1C,QAAA,KAAA,CAAM,GAAG,CAAA;AAAA,MACX;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,OAAA,EAAQ;AACR,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,OAAA,GAAuB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC/C,IAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,IAAA,IAAI,CAAC,QAAA,CAAS,UAAA,CAAW,MAAA,GAAS,GAAG,CAAA,EAAG;AACtC,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IAC9C;AACA,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACzC,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,OAAO,QAAA,CAAS,KAAK,GAAG,CAAA;AAClD,IAAA,MAAM,CAAA,GAAI,6DAAA,CAA8D,IAAA,CAAK,IAAI,CAAA;AACjF,IAAA,IAAI,CAAC,GAAG,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,WAAA,EAAa,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,EAAE,CAAC,CAAA;AACjB,IAAA,IAAI,KAAA,KAAU,OAAA,EAAS,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AAC5C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,YAAA,EAAc,OAAO,UAAA,CAAW,KAAK,GAAG,CAAA;AACtD,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,EAC9C,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAU,KAAA,EAAO,MAAA,EAAQ,QAAQ,UAAA,EAAW;AACxE;AAEA,SAAS,cAAA,CAAe,KAAsB,MAAA,EAA+B;AAC3E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,IAAI,UAAU,CAAC,IAAA,CAAK,WAAW,MAAA,GAAS,GAAG,GAAG,OAAO,IAAA;AACrD,EAAA,MAAM,OAAO,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,4BAAA,CAA6B,IAAA,CAAK,IAAI,CAAA;AAChD,EAAA,OAAO,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,IAAA;AACpB;AAEA,SAAS,MAAM,GAAA,EAAqB;AAGlC,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,CAAA,CAAE,KAAA,IAAQ;AACZ","file":"chunk-GRHPEK6M.js","sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\n\n/**\n * RelayBroker — pure logic for the SSE+POST tunnel described in\n * docs/relay-protocol.md, hostable in any Node-compatible runtime\n * (Node, Bun, Deno-with-Node-compat, Cloudflare Workers via the Web\n * standards subset). No HTTP framework opinions; this class just\n * stores sessions, validates tokens, enqueues frames, and produces\n * SSE event payloads ready to flush.\n *\n *   const broker = new RelayBroker();\n *   const reg     = broker.register(\"session-id\", \"token\");      // ok / error\n *   broker.inbox(\"session-id\", \"token\", '{\"jsonrpc\":\"2.0\",…}');  // enqueue inbound\n *   const sub = broker.subscribe(\"session-id\", \"token\", \"inbound\");\n *   for await (const payload of sub.frames()) yield encodeSse(payload);\n *\n * Storage is an in-memory Map by default — fine for a single relay\n * process. To run multiple instances behind a load balancer, swap\n * `MemoryStore` for a Redis-backed equivalent (same Store interface).\n */\n\nexport type Direction = \"inbound\" | \"outbound\";\n\nexport type Session = {\n  id: string;\n  /** SHA-256 hex of the original token. Compared with timing-safe equals. */\n  tokenHash: string;\n  /** Last touched (ms since epoch). Used for TTL cleanup. */\n  lastSeen: number;\n};\n\nexport type Subscriber = {\n  id: string;\n  direction: Direction;\n  queue: string[];\n  resolveNext: ((frame: string | null) => void) | null;\n};\n\nexport type RelayBrokerOptions = {\n  /** Sessions auto-expire after this many ms of inactivity. Default 4h. */\n  ttlMs?: number;\n  /** Cleanup tick interval in ms. Default 60 000. */\n  reapIntervalMs?: number;\n  /** Bring-your-own storage layer (redis, etc.). Defaults to in-memory. */\n  store?: Store;\n};\n\nexport interface Store {\n  putSession(s: Session): void;\n  getSession(id: string): Session | undefined;\n  deleteSession(id: string): void;\n  /** Used by the reap tick — return ids whose lastSeen < cutoff. */\n  expiredSessionIds(cutoff: number): string[];\n}\n\nclass MemoryStore implements Store {\n  private sessions = new Map<string, Session>();\n  putSession(s: Session) { this.sessions.set(s.id, s); }\n  getSession(id: string) { return this.sessions.get(id); }\n  deleteSession(id: string) { this.sessions.delete(id); }\n  expiredSessionIds(cutoff: number) {\n    const out: string[] = [];\n    for (const [id, s] of this.sessions) if (s.lastSeen < cutoff) out.push(id);\n    return out;\n  }\n}\n\nconst SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,64}$/;\n\nexport class RelayBroker {\n  private readonly ttlMs: number;\n  private readonly store: Store;\n  /** Per-session, per-direction subscriber list. */\n  private subs: Map<string, Map<string, Map<string, Subscriber>>> = new Map();\n  private reaper?: ReturnType<typeof setInterval>;\n\n  constructor(opts: RelayBrokerOptions = {}) {\n    this.ttlMs = opts.ttlMs ?? 4 * 60 * 60 * 1000; // 4h\n    this.store = opts.store ?? new MemoryStore();\n    const tick = opts.reapIntervalMs ?? 60_000;\n    if (tick > 0) {\n      this.reaper = setInterval(() => this.reap(), tick);\n      // Don't keep the process alive just for the reaper.\n      if (typeof (this.reaper as { unref?: () => void }).unref === \"function\") {\n        (this.reaper as { unref: () => void }).unref();\n      }\n    }\n  }\n\n  dispose() {\n    if (this.reaper) clearInterval(this.reaper);\n    this.subs.clear();\n  }\n\n  /** Register a session id + token. Idempotent — same id+token re-registers,\n   *  different token fails. */\n  register(id: string, token: string): { ok: true } | { ok: false; reason: string } {\n    if (!SESSION_ID_PATTERN.test(id)) return { ok: false, reason: \"invalid_session_id\" };\n    if (typeof token !== \"string\" || token.length < 16 || token.length > 128) {\n      return { ok: false, reason: \"invalid_token\" };\n    }\n    const existing = this.store.getSession(id);\n    const hash = sha256Hex(token);\n    if (existing) {\n      if (!timingSafeEqualHex(existing.tokenHash, hash)) return { ok: false, reason: \"session_taken\" };\n      existing.lastSeen = Date.now();\n      this.store.putSession(existing);\n      return { ok: true };\n    }\n    this.store.putSession({ id, tokenHash: hash, lastSeen: Date.now() });\n    return { ok: true };\n  }\n\n  unregister(id: string, token: string): boolean {\n    if (!this.validate(id, token)) return false;\n    this.store.deleteSession(id);\n    this.subs.delete(id);\n    return true;\n  }\n\n  /** Validate an authenticated touch and slide the TTL forward. */\n  validate(id: string, token: string): boolean {\n    if (!id || !token) return false;\n    const s = this.store.getSession(id);\n    if (!s) return false;\n    if (!timingSafeEqualHex(s.tokenHash, sha256Hex(token))) return false;\n    s.lastSeen = Date.now();\n    this.store.putSession(s);\n    return true;\n  }\n\n  /** Push a frame onto the inbound queue (external agent → browser). */\n  inbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"inbound\", payload);\n    return true;\n  }\n\n  /** Push a frame onto the outbound queue (browser server → external agents). */\n  outbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"outbound\", payload);\n    return true;\n  }\n\n  /**\n   * Subscribe to a session's queue for one direction. Returns an iterable\n   * the caller (an HTTP handler) pumps as SSE.\n   */\n  subscribe(id: string, token: string, direction: Direction): SubscribeResult {\n    if (!this.validate(id, token)) return { ok: false, reason: \"invalid_token\" };\n    const subscriberId = randomBytes(8).toString(\"hex\");\n    const subscriber: Subscriber = { id: subscriberId, direction, queue: [], resolveNext: null };\n    this.getDirSubs(id, direction).set(subscriberId, subscriber);\n\n    // Notify the inbound side (= browser) that an outbound subscriber\n    // (= external agent) just connected.\n    if (direction === \"outbound\") {\n      this.fanOut(\n        id,\n        \"inbound\",\n        JSON.stringify({\n          jsonrpc: \"2.0\",\n          method: \"notifications/peer_joined\",\n          params: { subscriberId, ts: Date.now() },\n        }),\n      );\n    }\n\n    const unsubscribe = () => {\n      this.getDirSubs(id, direction).delete(subscriberId);\n      if (direction === \"outbound\") {\n        this.fanOut(\n          id,\n          \"inbound\",\n          JSON.stringify({\n            jsonrpc: \"2.0\",\n            method: \"notifications/peer_left\",\n            params: { subscriberId, ts: Date.now() },\n          }),\n        );\n      }\n    };\n\n    /** Async generator the HTTP handler drains. Yields raw frame payloads;\n     *  the handler is responsible for SSE framing (`event: mcp\\ndata: …`). */\n    const frames = async function* (this: Subscriber): AsyncGenerator<string, void, void> {\n      while (true) {\n        if (this.queue.length > 0) {\n          const next = this.queue.shift();\n          if (next !== undefined) yield next;\n          continue;\n        }\n        const next = await new Promise<string | null>((resolve) => {\n          this.resolveNext = resolve;\n        });\n        this.resolveNext = null;\n        if (next === null) return;\n        yield next;\n      }\n    }.bind(subscriber);\n\n    return {\n      ok: true,\n      subscriberId,\n      frames: frames(),\n      unsubscribe: () => {\n        // Wake the generator and let it return cleanly.\n        subscriber.resolveNext?.(null);\n        unsubscribe();\n      },\n    };\n  }\n\n  // ────────────────────────────────────────────────────────────── internals\n\n  private getDirSubs(sessionId: string, direction: Direction): Map<string, Subscriber> {\n    let bySession = this.subs.get(sessionId);\n    if (!bySession) {\n      bySession = new Map();\n      this.subs.set(sessionId, bySession);\n    }\n    let byDir = bySession.get(direction);\n    if (!byDir) {\n      byDir = new Map();\n      bySession.set(direction, byDir);\n    }\n    return byDir;\n  }\n\n  private fanOut(sessionId: string, direction: Direction, payload: string) {\n    const dir = this.subs.get(sessionId)?.get(direction);\n    if (!dir) return;\n    for (const sub of dir.values()) {\n      sub.queue.push(payload);\n      sub.resolveNext?.(sub.queue.shift() ?? null);\n    }\n  }\n\n  /**\n   * Validate that a peer-supplied payload is a well-formed JSON-RPC 2.0 frame\n   * (or batch) before it is fanned out. Previously this was a substring match on\n   * `\"jsonrpc\"`, which let any token holder inject spoofed frames — a forged\n   * `notifications/peer_joined` / `peer_left` (broker-reserved presence control),\n   * a fake `notifications/agent_activity {source:\"user\"}` (\"human took control\"),\n   * or a forged response with a matching id. We now parse + shape-check, and\n   * reject the broker-reserved control methods (the broker emits those itself,\n   * never a peer).\n   */\n  private isFrame(payload: string): boolean {\n    if (payload.length === 0) return false;\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(payload);\n    } catch {\n      return false;\n    }\n    const frames = Array.isArray(parsed) ? parsed : [parsed];\n    return frames.length > 0 && frames.every((f) => this.isValidFrame(f));\n  }\n\n  private isValidFrame(f: unknown): boolean {\n    if (!f || typeof f !== \"object\" || Array.isArray(f)) return false;\n    const o = f as Record<string, unknown>;\n    if (o.jsonrpc !== \"2.0\") return false;\n    const method = typeof o.method === \"string\" ? o.method : undefined;\n    // Broker-reserved control frames may never arrive from a peer.\n    if (method === \"notifications/peer_joined\" || method === \"notifications/peer_left\") return false;\n    if (method !== undefined) return true; // request or notification\n    // Response: needs an id and exactly one of result / error.\n    const hasResult = \"result\" in o;\n    const hasError = \"error\" in o;\n    return \"id\" in o && hasResult !== hasError;\n  }\n\n  private reap() {\n    const cutoff = Date.now() - this.ttlMs;\n    for (const id of this.store.expiredSessionIds(cutoff)) {\n      const dirs = this.subs.get(id);\n      if (dirs) {\n        for (const dir of dirs.values()) {\n          for (const sub of dir.values()) sub.resolveNext?.(null);\n        }\n      }\n      this.subs.delete(id);\n      this.store.deleteSession(id);\n    }\n  }\n}\n\nexport type SubscribeResult =\n  | { ok: false; reason: string }\n  | {\n      ok: true;\n      subscriberId: string;\n      frames: AsyncGenerator<string, void, void>;\n      unsubscribe: () => void;\n    };\n\nfunction sha256Hex(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction timingSafeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { URL } from \"node:url\";\nimport { RelayBroker, type RelayBrokerOptions } from \"./core\";\n\n/**\n * Node HTTP adapter for {@link RelayBroker}. Returns a single request\n * handler plus per-route handlers, so you can either drop it into\n * `http.createServer(...)` directly or mount the individual handlers\n * onto your existing Node HTTP framework (Express, Hono w/ node-adapter,\n * native http).\n *\n *   const relay = createNodeRelay({ pathPrefix: \"/mcp-relay\" });\n *   http.createServer(relay.handler).listen(8787);\n *\n *   // Or piecemeal:\n *   app.post(\"/mcp-relay/register\",       relay.register);\n *   app.post(\"/mcp-relay/:s/inbox\",       relay.inbox);\n *   app.post(\"/mcp-relay/:s/outbox\",      relay.outbox);\n *   app.get (\"/mcp-relay/:s/events\",      relay.events);\n *   app.post(\"/mcp-relay/:s/unregister\",  relay.unregister);\n */\n\nexport type NodeRelayOptions = RelayBrokerOptions & {\n  /** URL path prefix (without trailing slash). Default `\"\"` — handlers\n   *  expect paths like `/register`, `/{id}/inbox`, etc. directly. */\n  pathPrefix?: string;\n  /** Comma-separated origins (or `*`) for CORS. Default `*` — relays\n   *  are typically called cross-origin from the demo host. */\n  corsAllowOrigin?: string;\n  /**\n   * Strict browser-origin allow-list. When set, only these Origins get a\n   * matching `Access-Control-Allow-Origin` (the request's own Origin is\n   * reflected, never `*`), which blunts DNS-rebinding + hostile cross-origin\n   * pages from reading relay responses. Recommended for any browser-facing\n   * deployment. When unset, `corsAllowOrigin` (default `*`) is used and the\n   * session token is the only auth — pair that with a loopback bind.\n   */\n  allowedOrigins?: string[];\n};\n\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => unknown | Promise<unknown>;\n\nexport type NodeRelay = {\n  broker: RelayBroker;\n  /** Single-handler shape — routes internally based on method + URL. */\n  handler: NodeHandler;\n  /** Per-route handlers. Each handler ignores the URL prefix and\n   *  acts on the path remainder, so you can mount them under any\n   *  prefix in your existing app. */\n  register: NodeHandler;\n  inbox: NodeHandler;\n  outbox: NodeHandler;\n  events: NodeHandler;\n  unregister: NodeHandler;\n};\n\nexport function createNodeRelay(opts: NodeRelayOptions = {}): NodeRelay {\n  const broker = new RelayBroker(opts);\n  const prefix = (opts.pathPrefix ?? \"\").replace(/\\/$/, \"\");\n  const cors = opts.corsAllowOrigin ?? \"*\";\n\n  const allowedOrigins = opts.allowedOrigins;\n\n  function setCorsHeaders(res: ServerResponse, req?: IncomingMessage) {\n    if (allowedOrigins && allowedOrigins.length) {\n      // Strict mode: reflect the request Origin only when it's allow-listed;\n      // otherwise emit an origin that no browser will match.\n      const origin = req?.headers.origin;\n      res.setHeader(\"access-control-allow-origin\", origin && allowedOrigins.includes(origin) ? origin : \"null\");\n      res.setHeader(\"vary\", \"origin\");\n    } else {\n      res.setHeader(\"access-control-allow-origin\", cors);\n    }\n    res.setHeader(\"access-control-allow-methods\", \"GET, POST, OPTIONS\");\n    // `authorization` is forward-compat for a header-borne session token.\n    res.setHeader(\"access-control-allow-headers\", \"content-type, x-csrf-token, accept, authorization\");\n    res.setHeader(\"access-control-max-age\", \"86400\");\n  }\n\n  function readBody(req: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      const chunks: Buffer[] = [];\n      let bytes = 0;\n      req.on(\"data\", (chunk: Buffer) => {\n        bytes += chunk.length;\n        // Cap individual frames at 256 KB — protect against runaway payloads.\n        if (bytes > 256 * 1024) {\n          reject(new Error(\"payload_too_large\"));\n          req.destroy();\n          return;\n        }\n        chunks.push(chunk);\n      });\n      req.on(\"end\", () => resolve(Buffer.concat(chunks).toString(\"utf8\")));\n      req.on(\"error\", reject);\n    });\n  }\n\n  function json(res: ServerResponse, status: number, body: unknown): void {\n    res.statusCode = status;\n    res.setHeader(\"content-type\", \"application/json\");\n    res.end(JSON.stringify(body));\n  }\n\n  function getQuery(req: IncomingMessage): URLSearchParams {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.searchParams;\n  }\n\n  function getPathname(req: IncomingMessage): string {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.pathname;\n  }\n\n  const register: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n    let body: string;\n    try { body = await readBody(req); } catch (e) {\n      return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n    }\n    let parsed: unknown;\n    try { parsed = JSON.parse(body); } catch { return json(res, 400, { error: \"invalid_json\" }); }\n    const { session, token } = (parsed ?? {}) as { session?: string; token?: string };\n    if (typeof session !== \"string\" || typeof token !== \"string\") {\n      return json(res, 400, { error: \"missing_fields\" });\n    }\n    const result = broker.register(session, token);\n    if (!result.ok) return json(res, 401, { error: result.reason });\n    return json(res, 200, { ok: true });\n  };\n\n  /** Handler for endpoints with a `{session}` segment. The path matcher\n   *  caller passes the session id explicitly so this works mounted under\n   *  any route shape. */\n  function makeSessionHandler(\n    direction: Direction | \"unregister\",\n  ): NodeHandler {\n    return async (req, res) => {\n      setCorsHeaders(res, req);\n      if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n      if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n      const session = extractSession(req, prefix);\n      if (!session) return json(res, 400, { error: \"missing_session\" });\n      const token = getQuery(req).get(\"token\") ?? \"\";\n\n      if (direction === \"unregister\") {\n        const ok = broker.unregister(session, token);\n        return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token\" });\n      }\n\n      let body: string;\n      try { body = await readBody(req); } catch (e) {\n        return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n      }\n      const ok = direction === \"inbound\"\n        ? broker.inbox(session, token, body)\n        : broker.outbox(session, token, body);\n      return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token_or_frame\" });\n    };\n  }\n\n  const inbox = makeSessionHandler(\"inbound\");\n  const outbox = makeSessionHandler(\"outbound\");\n  const unregister = makeSessionHandler(\"unregister\");\n\n  const events: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"GET\") return json(res, 405, { error: \"method_not_allowed\" });\n    const session = extractSession(req, prefix);\n    if (!session) return json(res, 400, { error: \"missing_session\" });\n    const q = getQuery(req);\n    const token = q.get(\"token\") ?? \"\";\n    const direction = q.get(\"direction\") === \"outbound\" ? \"outbound\" : \"inbound\";\n\n    const sub = broker.subscribe(session, token, direction);\n    if (!sub.ok) {\n      res.statusCode = 401;\n      res.setHeader(\"content-type\", \"text/event-stream\");\n      res.write(`event: error\\ndata: ${sub.reason}\\n\\n`);\n      return res.end();\n    }\n\n    res.statusCode = 200;\n    res.setHeader(\"content-type\", \"text/event-stream\");\n    res.setHeader(\"cache-control\", \"no-cache\");\n    res.setHeader(\"connection\", \"keep-alive\");\n    res.setHeader(\"x-accel-buffering\", \"no\");\n    res.write(\"retry: 2000\\n\\n\");\n    flush(res);\n\n    let heartbeat: ReturnType<typeof setInterval> | null = setInterval(() => {\n      res.write(\": keepalive\\n\\n\");\n      flush(res);\n    }, 15_000);\n    if (heartbeat && typeof (heartbeat as { unref?: () => void }).unref === \"function\") {\n      (heartbeat as { unref: () => void }).unref();\n    }\n\n    const cleanup = () => {\n      if (heartbeat) { clearInterval(heartbeat); heartbeat = null; }\n      sub.unsubscribe();\n    };\n    req.on(\"close\", cleanup);\n    req.on(\"error\", cleanup);\n\n    try {\n      for await (const frame of sub.frames) {\n        res.write(`event: mcp\\ndata: ${frame}\\n\\n`);\n        flush(res);\n      }\n    } catch {\n      /* stream ended */\n    } finally {\n      cleanup();\n      res.end();\n    }\n  };\n\n  /**\n   * Single handler — routes based on method + path. Useful for mounting\n   * via `http.createServer(relay.handler)` without an Express layer.\n   */\n  const handler: NodeHandler = async (req, res) => {\n    const pathname = getPathname(req);\n    if (!pathname.startsWith(prefix + \"/\")) {\n      return json(res, 404, { error: \"not_found\" });\n    }\n    const rest = pathname.slice(prefix.length); // \"/register\", \"/<id>/inbox\", etc.\n    if (rest === \"/register\") return register(req, res);\n    const m = /^\\/([A-Za-z0-9_-]{4,64})\\/(inbox|outbox|events|unregister)$/.exec(rest);\n    if (!m) return json(res, 404, { error: \"not_found\" });\n    const route = m[2];\n    if (route === \"inbox\") return inbox(req, res);\n    if (route === \"outbox\") return outbox(req, res);\n    if (route === \"events\") return events(req, res);\n    if (route === \"unregister\") return unregister(req, res);\n    return json(res, 404, { error: \"not_found\" });\n  };\n\n  return { broker, handler, register, inbox, outbox, events, unregister };\n}\n\nfunction extractSession(req: IncomingMessage, prefix: string): string | null {\n  const host = req.headers.host || \"x\";\n  const u = new URL(req.url || \"/\", `http://${host}`);\n  const path = u.pathname;\n  if (prefix && !path.startsWith(prefix + \"/\")) return null;\n  const rest = prefix ? path.slice(prefix.length) : path;\n  const m = /^\\/([A-Za-z0-9_-]{4,64})\\//.exec(rest);\n  return m ? m[1] : null;\n}\n\nfunction flush(res: ServerResponse) {\n  // Node doesn't expose explicit flush, but write returns false when buffered;\n  // explicit flushHeaders + write is enough for SSE in practice.\n  const r = res as { flush?: () => void };\n  r.flush?.();\n}\n\ntype Direction = \"inbound\" | \"outbound\";\n"]}

package/dist/{chunk-XMMCSQ4I.js → chunk-HRHC5GM5.js}

@@ -1,9 +1,25 @@
-import { wrapToolWithActivity } from './chunk-ULJL53DL.js';
-import { ensureUndoToolsRegistered, pushUndoEntry } from './chunk-KJ5AOOV7.js';
-import { textResult, errorResult } from './chunk-4KAIV6OD.js';
+import { ensureUndoToolsRegistered, pushUndoEntry } from './chunk-CT3LRNH7.js';
+import { wrapToolWithActivity } from './chunk-2VENWGLZ.js';
+import { textResult, errorResult } from './chunk-DF3PLL2E.js';
 
 // src/bridges/files.ts
 var DEFAULT_AGENT = { id: "agent", name: "Agent", color: "#a855f7" };
+var MAX_SNAPSHOT_DEPTH = 8;
+function assertPathWithinRoot(root, path) {
+  const segments = path.replace(/[\\/]+/g, "/").split("/");
+  if (segments.includes("..")) {
+    throw new Error(`Path may not contain '..': ${path}`);
+  }
+  const isAbsolute = /^([A-Za-z]:)?[\\/]/.test(path) || /^[A-Za-z]:/.test(path);
+  if (isAbsolute) {
+    const norm = (p2) => p2.replace(/[\\/]+/g, "/").replace(/\/+$/, "").toLowerCase();
+    const r = norm(root);
+    const p = norm(path);
+    if (p !== r && !p.startsWith(r + "/")) {
+      throw new Error(`Path escapes the configured root: ${path}`);
+    }
+  }
+}
 var str = (v, fallback = "") => typeof v === "string" ? v : fallback;
 var num = (v, fallback) => typeof v === "number" && Number.isFinite(v) ? v : 0;
 var asPaths = (v) => {
@@ -19,6 +35,10 @@ function registerFilesBridge(host, options) {
   const { adapter } = options;
   const agent = { ...DEFAULT_AGENT, ...options.agent ?? {} };
   const disposers = [];
+  const guard = (path) => {
+    if (options.root !== void 0) assertPathWithinRoot(options.root, path);
+    return path;
+  };
   ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });
   const fTarget = (args, _result) => ({
     kind: "files",
@@ -74,7 +94,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string", description: "Folder path to list; defaults to the current directory." } },
     [],
     async (args) => {
-      const path = args.path !== void 0 ? str(args.path) : adapter.getPath();
+      const path = guard(args.path !== void 0 ? str(args.path) : adapter.getPath());
       const entries = await adapter.listChildren(path);
       const summary = entries.map((e) => ({
         path: e.path,
@@ -93,7 +113,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str(args.path);
+      const path = guard(str(args.path));
       const prev = adapter.getPath();
       adapter.setPath(path);
       pushUndoEntry(agent.id, {
@@ -114,7 +134,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str(args.path);
+      const path = guard(str(args.path));
       if (adapter.getExpanded().includes(path)) {
         return textResult(`${path} already expanded`, { path, expanded: true });
       }
@@ -137,7 +157,7 @@ function registerFilesBridge(host, options) {
     { path: { type: "string" } },
     ["path"],
     (args) => {
-      const path = str(args.path);
+      const path = guard(str(args.path));
       if (!adapter.getExpanded().includes(path)) {
         return textResult(`${path} already collapsed`, { path, expanded: false });
       }
@@ -163,7 +183,7 @@ function registerFilesBridge(host, options) {
     },
     [],
     (args) => {
-      const next = args.paths !== void 0 ? asPaths(args.paths) : asPaths(args.path);
+      const next = (args.paths !== void 0 ? asPaths(args.paths) : asPaths(args.path)).map(guard);
       const prev = adapter.getSelection();
       adapter.setSelection(next);
       pushUndoEntry(agent.id, {
@@ -192,8 +212,8 @@ function registerFilesBridge(host, options) {
       if (!adapter.requestSnapshot) {
         return errorResult("Host did not wire requestSnapshot (snapshot mode not enabled).");
       }
-      const path = args.path !== void 0 ? str(args.path) : adapter.getPath();
-      const depth = args.depth !== void 0 ? num(args.depth) : void 0;
+      const path = guard(args.path !== void 0 ? str(args.path) : adapter.getPath());
+      const depth = args.depth !== void 0 ? Math.max(0, Math.min(MAX_SNAPSHOT_DEPTH, num(args.depth))) : void 0;
       const tree = await adapter.requestSnapshot(path, depth);
       const count = Array.isArray(tree) ? tree.length : 0;
       return textResult(`Snapshot of ${path}: ${count} top-level entr${count === 1 ? "y" : "ies"}.`, {
@@ -212,6 +232,6 @@ function registerFilesBridge(host, options) {
   };
 }
 
-export { registerFilesBridge };
-//# sourceMappingURL=chunk-XMMCSQ4I.js.map
-//# sourceMappingURL=chunk-XMMCSQ4I.js.map
+export { assertPathWithinRoot, registerFilesBridge };
+//# sourceMappingURL=chunk-HRHC5GM5.js.map
+//# sourceMappingURL=chunk-HRHC5GM5.js.map

package/dist/chunk-HRHC5GM5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridges/files.ts"],"names":["p"],"mappings":";;;;;AAgEA,IAAM,gBAAgB,EAAE,EAAA,EAAI,SAAS,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAIrE,IAAM,kBAAA,GAAqB,CAAA;AAQpB,SAAS,oBAAA,CAAqB,MAAc,IAAA,EAAoB;AACrE,EAAA,MAAM,WAAW,IAAA,CAAK,OAAA,CAAQ,WAAW,GAAG,CAAA,CAAE,MAAM,GAAG,CAAA;AACvD,EAAA,IAAI,QAAA,CAAS,QAAA,CAAS,IAAI,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,2BAAA,EAA8B,IAAI,CAAA,CAAE,CAAA;AAAA,EACtD;AACA,EAAA,MAAM,aAAa,oBAAA,CAAqB,IAAA,CAAK,IAAI,CAAA,IAAK,YAAA,CAAa,KAAK,IAAI,CAAA;AAC5E,EAAA,IAAI,UAAA,EAAY;AACd,IAAA,MAAM,IAAA,GAAO,CAACA,EAAAA,KAAsBA,EAAAA,CAAE,OAAA,CAAQ,SAAA,EAAW,GAAG,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA,CAAE,WAAA,EAAY;AAC9F,IAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,IAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,IAAA,IAAI,MAAM,CAAA,IAAK,CAAC,EAAE,UAAA,CAAW,CAAA,GAAI,GAAG,CAAA,EAAG;AACrC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,IAAI,CAAA,CAAE,CAAA;AAAA,IAC7D;AAAA,EACF;AACF;AAEA,IAAM,GAAA,GAAM,CAAC,CAAA,EAAY,QAAA,GAAW,OAAgB,OAAO,CAAA,KAAM,WAAW,CAAA,GAAI,QAAA;AAChF,IAAM,GAAA,GAAM,CAAC,CAAA,EAAY,QAAA,KACvB,OAAO,CAAA,KAAM,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,GAAI,CAAA,GAAgB,CAAA;AAChE,IAAM,OAAA,GAAU,CAAC,CAAA,KAAyB;AACxC,EAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AACzB,IAAA,OAAO,CAAC,CAAC,CAAA;AAAA,EACX;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACpB,IAAA,OAAO,EAAE,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AAAA,EAC3D;AACA,EAAA,OAAO,EAAC;AACV,CAAA;AAeO,SAAS,mBAAA,CAAoB,MAAgB,OAAA,EAAqC;AACvF,EAAA,MAAM,EAAE,SAAQ,GAAI,OAAA;AACpB,EAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,aAAA,EAAe,GAAI,OAAA,CAAQ,KAAA,IAAS,EAAC,EAAG;AAC3D,EAAA,MAAM,YAA+B,EAAC;AAItC,EAAA,MAAM,KAAA,GAAQ,CAAC,IAAA,KAAyB;AACtC,IAAA,IAAI,QAAQ,IAAA,KAAS,MAAA,EAAW,oBAAA,CAAqB,OAAA,CAAQ,MAAM,IAAI,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAGA,EAAA,yBAAA,CAA0B,IAAA,EAAM,EAAE,cAAA,EAAgB,KAAA,CAAM,IAAI,CAAA;AAE5D,EAAA,MAAM,OAAA,GAAU,CAAC,IAAA,EAAW,OAAA,MAAoC;AAAA,IAC9D,IAAA,EAAM,OAAA;AAAA,IACN,SAAA,EAAY,MAAM,IAAA,IAA+B;AAAA,GACnD,CAAA;AAEA,EAAA,MAAM,MAAM,CACV,IAAA,EACA,aACA,UAAA,EACA,QAAA,EACA,SACA,aAAA,KACG;AACH,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,KAAqB;AAC1C,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,QAAQ,IAAI,CAAA;AAAA,MAC3B,SAAS,CAAA,EAAG;AACV,QAAA,OAAO,YAAY,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D;AAAA,IACF,CAAA;AACA,IAAA,MAAM,KAAA,GAAQ,aAAA,GACV,oBAAA,CAAqB,OAAA,EAAS;AAAA,MAC5B,QAAA,EAAU,IAAA;AAAA,MACV,KAAA,EAAO,EAAE,EAAA,EAAI,KAAA,CAAM,EAAA,EAAI,MAAM,KAAA,CAAM,IAAA,EAAM,KAAA,EAAO,KAAA,CAAM,KAAA,EAAM;AAAA,MAC5D,IAAA,EAAM,OAAA;AAAA,MACN,aAAA,EAAe,CAAC,EAAE,IAAA,EAAM,QAAO,KAAM,aAAA,CAAc,MAAM,MAAM;AAAA,KAChE,CAAA,GACD,OAAA;AACJ,IAAA,SAAA,CAAU,IAAA;AAAA,MACR,IAAA,CAAK,YAAA;AAAA,QACH;AAAA,UACE,IAAA;AAAA,UACA,WAAA;AAAA,UACA,WAAA,EAAa;AAAA,YACX,IAAA,EAAM,QAAA;AAAA,YACN,UAAA;AAAA,YACA,QAAA;AAAA,YACA,oBAAA,EAAsB;AAAA;AACxB,SACF;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF,CAAA;AAIA,EAAA,GAAA;AAAA,IACE,iBAAA;AAAA,IACA,mFAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,KAAA,GAAQ;AAAA,QACZ,IAAA,EAAM,QAAQ,OAAA,EAAQ;AAAA,QACtB,QAAA,EAAU,QAAQ,YAAA,EAAa;AAAA,QAC/B,QAAA,EAAU,QAAQ,WAAA;AAAY,OAChC;AACA,MAAA,OAAO,WAAW,IAAA,CAAK,SAAA,CAAU,OAAO,IAAA,EAAM,CAAC,GAAG,KAAK,CAAA;AAAA,IACzD;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,YAAA;AAAA,IACA,mLAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,MAAM,QAAA,EAAU,WAAA,EAAa,2DAA0D,EAAE;AAAA,IACnG,EAAC;AAAA,IACD,OAAO,IAAA,KAAS;AACd,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,CAAK,IAAA,KAAS,KAAA,CAAA,GAAY,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,OAAA,EAAS,CAAA;AAC/E,MAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,YAAA,CAAa,IAAI,CAAA;AAC/C,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QAClC,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,GAAI,EAAE,IAAA,KAAS,KAAA,CAAA,GAAY,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK,GAAI,EAAC;AAAA,QAC/C,GAAI,EAAE,KAAA,KAAU,KAAA,CAAA,GAAY,EAAE,KAAA,EAAO,CAAA,CAAE,KAAA,EAAM,GAAI;AAAC,OACpD,CAAE,CAAA;AACF,MAAA,MAAM,IAAA,GACJ,QAAQ,GAAA,CAAI,CAAC,MAAM,CAAA,EAAG,CAAA,CAAE,SAAS,KAAA,GAAQ,WAAA,GAAO,WAAI,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA,IAC3E,WAAW,IAAI,CAAA,CAAA,CAAA;AACjB,MAAA,OAAO,WAAW,IAAA,EAAM,EAAE,IAAA,EAAM,OAAA,EAAS,SAAS,CAAA;AAAA,IACpD;AAAA,GACF;AAIA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,qFAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC3B,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,IAAA,CAAK,IAAI,CAAC,CAAA;AACjC,MAAA,MAAM,IAAA,GAAO,QAAQ,OAAA,EAAQ;AAC7B,MAAA,OAAA,CAAQ,QAAQ,IAAI,CAAA;AACpB,MAAA,aAAA,CAAc,MAAM,EAAA,EAAI;AAAA,QACtB,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,gBAAA;AAAA,QACR,KAAA,EAAO,gBAAgB,IAAI,CAAA,CAAA;AAAA,QAC3B,IAAA,EAAM,MAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAAA,QAChC,IAAA,EAAM,MAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI;AAAA,OACjC,CAAA;AACD,MAAA,OAAO,WAAW,CAAA,yBAAA,EAAuB,IAAI,CAAA,CAAA,EAAI,EAAE,MAAM,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA;AAAA,GACF;AAIA,EAAA,GAAA;AAAA,IACE,cAAA;AAAA,IACA,6DAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC3B,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,IAAA,CAAK,IAAI,CAAC,CAAA;AACjC,MAAA,IAAI,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,IAAI,CAAA,EAAG;AACxC,QAAA,OAAO,UAAA,CAAW,GAAG,IAAI,CAAA,iBAAA,CAAA,EAAqB,EAAE,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,MACxE;AACA,MAAA,OAAA,CAAQ,YAAY,CAAC,IAAA,KAAS,CAAC,GAAG,IAAA,EAAM,IAAI,CAAC,CAAA;AAC7C,MAAA,aAAA,CAAc,MAAM,EAAA,EAAI;AAAA,QACtB,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,cAAA;AAAA,QACR,KAAA,EAAO,YAAY,IAAI,CAAA,CAAA;AAAA,QACvB,IAAA,EAAM,MAAM,OAAA,CAAQ,WAAA,CAAY,CAAC,IAAA,KAAS,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,IAAI,CAAC,CAAA;AAAA,QACxE,IAAA,EAAM,MAAM,OAAA,CAAQ,WAAA,CAAY,CAAC,IAAA,KAAU,IAAA,CAAK,QAAA,CAAS,IAAI,IAAI,IAAA,GAAO,CAAC,GAAG,IAAA,EAAM,IAAI,CAAE;AAAA,OACzF,CAAA;AACD,MAAA,OAAO,UAAA,CAAW,YAAY,IAAI,CAAA,CAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,IAChE,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,gCAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC3B,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,IAAA,CAAK,IAAI,CAAC,CAAA;AACjC,MAAA,IAAI,CAAC,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,IAAI,CAAA,EAAG;AACzC,QAAA,OAAO,UAAA,CAAW,GAAG,IAAI,CAAA,kBAAA,CAAA,EAAsB,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,CAAA;AAAA,MAC1E;AACA,MAAA,OAAA,CAAQ,WAAA,CAAY,CAAC,IAAA,KAAS,IAAA,CAAK,OAAO,CAAC,CAAA,KAAM,CAAA,KAAM,IAAI,CAAC,CAAA;AAC5D,MAAA,aAAA,CAAc,MAAM,EAAA,EAAI;AAAA,QACtB,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,gBAAA;AAAA,QACR,KAAA,EAAO,aAAa,IAAI,CAAA,CAAA;AAAA,QACxB,IAAA,EAAM,MAAM,OAAA,CAAQ,WAAA,CAAY,CAAC,IAAA,KAAU,IAAA,CAAK,QAAA,CAAS,IAAI,IAAI,IAAA,GAAO,CAAC,GAAG,IAAA,EAAM,IAAI,CAAE,CAAA;AAAA,QACxF,IAAA,EAAM,MAAM,OAAA,CAAQ,WAAA,CAAY,CAAC,IAAA,KAAS,IAAA,CAAK,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,KAAM,IAAI,CAAC;AAAA,OACzE,CAAA;AACD,MAAA,OAAO,UAAA,CAAW,aAAa,IAAI,CAAA,CAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,OAAO,CAAA;AAAA,IAClE,CAAA;AAAA,IACA;AAAA,GACF;AAIA,EAAA,GAAA;AAAA,IACE,cAAA;AAAA,IACA,yIAAA;AAAA,IACA;AAAA,MACE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,0BAAA,EAA2B;AAAA,MAChE,KAAA,EAAO,EAAE,IAAA,EAAM,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAS,EAAG,WAAA,EAAa,yCAAA;AAA0C,KAC5G;AAAA,IACA,EAAC;AAAA,IACD,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAA,GAAA,CAAQ,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,OAAA,CAAQ,IAAA,CAAK,KAAK,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,EAAG,IAAI,KAAK,CAAA;AAC5F,MAAA,MAAM,IAAA,GAAO,QAAQ,YAAA,EAAa;AAClC,MAAA,OAAA,CAAQ,aAAa,IAAI,CAAA;AACzB,MAAA,aAAA,CAAc,MAAM,EAAA,EAAI;AAAA,QACtB,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,QAAA,EAAU,OAAA;AAAA,QACV,MAAA,EAAQ,cAAA;AAAA,QACR,KAAA,EAAO,KAAK,MAAA,GAAS,CAAA,SAAA,EAAY,KAAK,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,mBAAA;AAAA,QACrD,IAAA,EAAM,MAAM,OAAA,CAAQ,YAAA,CAAa,IAAI,CAAA;AAAA,QACrC,IAAA,EAAM,MAAM,OAAA,CAAQ,YAAA,CAAa,IAAI;AAAA,OACtC,CAAA;AACD,MAAA,OAAO,UAAA,CAAW,KAAK,MAAA,GAAS,CAAA,SAAA,EAAY,KAAK,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GAAK,mBAAA,EAAqB;AAAA,QACnF,QAAA,EAAU;AAAA,OACX,CAAA;AAAA,IACH,CAAA;AAAA,IACA;AAAA,GACF;AAIA,EAAA,GAAA;AAAA,IACE,wBAAA;AAAA,IACA,mKAAA;AAAA,IACA;AAAA,MACE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,yDAAA,EAA0D;AAAA,MAC/F,KAAA,EAAO,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,6DAAA;AAA8D,KACtG;AAAA,IACA,EAAC;AAAA,IACD,OAAO,IAAA,KAAS;AACd,MAAA,IAAI,CAAC,QAAQ,eAAA,EAAiB;AAC5B,QAAA,OAAO,YAAY,gEAAgE,CAAA;AAAA,MACrF;AACA,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,CAAK,IAAA,KAAS,MAAA,GAAY,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,OAAA,EAAS,CAAA;AAE/E,MAAA,MAAM,KAAA,GACJ,IAAA,CAAK,KAAA,KAAU,MAAA,GAAY,KAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,oBAAoB,GAAA,CAAI,IAAA,CAAK,KAAK,CAAC,CAAC,CAAA,GAAI,MAAA;AAC1F,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,eAAA,CAAgB,MAAM,KAAK,CAAA;AACtD,MAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,GAAI,KAAK,MAAA,GAAS,CAAA;AAClD,MAAA,OAAO,UAAA,CAAW,CAAA,YAAA,EAAe,IAAI,CAAA,EAAA,EAAK,KAAK,kBAAkB,KAAA,KAAU,CAAA,GAAI,GAAA,GAAM,KAAK,CAAA,CAAA,CAAA,EAAK;AAAA,QAC7F,IAAA;AAAA,QACA,QAAA,EAAU;AAAA,OACX,CAAA;AAAA,IACH,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,KAAA,EAAO,OAAA;AAAA,IACP,SAAS,MAAM;AACb,MAAA,KAAA,MAAW,CAAA,IAAK,WAAW,CAAA,EAAE;AAAA,IAC/B;AAAA,GACF;AACF","file":"chunk-HRHC5GM5.js","sourcesContent":["// Loose types so this bridge builds standalone without a hard dep on\n// @particle-academy/react-fancy. Hosts using FileBrowser pass its own\n// FileEntry / FileSnapshotNode values straight through — the shapes match.\ntype FileKind = \"file\" | \"dir\";\ntype FileEntry = {\n  path: string;\n  name: string;\n  kind: FileKind;\n  size?: number;\n  mtime?: string;\n  hasChildren?: boolean;\n  disabled?: boolean;\n};\ntype FileSnapshotNode = FileEntry & { children?: FileSnapshotNode[] };\n\nimport { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport type { JsonObject } from \"../mcp/types\";\nimport type { Bridge } from \"./types\";\nimport { wrapToolWithActivity } from \"../presence/wrap-tool-with-activity\";\nimport type { AgentTarget as FilesAgentTarget } from \"../presence/types\";\nimport { pushUndoEntry } from \"../undo/undo-stack\";\nimport { ensureUndoToolsRegistered } from \"../undo/undo-tools\";\n\n/**\n * Adapter the host provides — getters/setters over the SAME controlled props it\n * passes to react-fancy's `<FileBrowser>` (`value`/`path`/`expandedPaths`), plus\n * `listChildren` (wire to your `provider.loadChildren` or the loaded cache) and,\n * for snapshot mode, an optional `requestSnapshot`.\n */\nexport type FilesBridgeAdapter = {\n  /** Current directory (the `path` prop). */\n  getPath: () => string;\n  setPath: (path: string) => void;\n  /** Selected path(s) — normalize FileBrowser's `value` (string | string[] | null) to an array. */\n  getSelection: () => string[];\n  setSelection: (paths: string[]) => void;\n  /** Expanded folder paths (the `expandedPaths` prop). */\n  getExpanded: () => string[];\n  setExpanded: (next: string[] | ((prev: string[]) => string[])) => void;\n  /** Direct children of a path — wire to `provider.loadChildren` (async) or the loaded/snapshot cache. */\n  listChildren: (path: string) => Promise<FileEntry[]> | FileEntry[];\n  /** Optional (snapshot mode): fetch/refresh a snapshot subtree so an agent can pull remote state on demand. */\n  requestSnapshot?: (path: string, depth?: number) => Promise<FileSnapshotNode[]> | FileSnapshotNode[];\n};\n\nexport type FilesBridgeOptions = {\n  adapter: FilesBridgeAdapter;\n  /** Identity tagged onto agent-driven actions. */\n  agent?: { id: string; name?: string; color?: string };\n  /**\n   * Optional containment root. When set, every agent-supplied path is checked\n   * with {@link assertPathWithinRoot} before it reaches the adapter: a `..`\n   * segment or an absolute path outside `root` is rejected. This is a\n   * fail-closed, string-level guard (no filesystem access — the bridge runs in\n   * the browser). It is NOT sufficient on its own: a host over a real\n   * filesystem MUST additionally resolve symlinks/junctions (realpath) and\n   * enforce the root, because a link under `root` can still point outside it.\n   * When `root` is unset the bridge does no containment and the adapter is\n   * SOLELY responsible for sandboxing what `listChildren`/`requestSnapshot` expose.\n   */\n  root?: string;\n};\n\nconst DEFAULT_AGENT = { id: \"agent\", name: \"Agent\", color: \"#a855f7\" };\n\n/** Host default cap on snapshot recursion, so an agent can't request an\n *  unbounded deep walk. */\nconst MAX_SNAPSHOT_DEPTH = 8;\n\n/**\n * Fail-closed, filesystem-free path containment. Throws when `path` contains a\n * `..` segment, or is absolute and not within `root`. Relative paths without\n * `..` pass (resolved within root by the host). String-level only — see the\n * `root` docs: hosts over a real fs must ALSO realpath to defeat symlinks.\n */\nexport function assertPathWithinRoot(root: string, path: string): void {\n  const segments = path.replace(/[\\\\/]+/g, \"/\").split(\"/\");\n  if (segments.includes(\"..\")) {\n    throw new Error(`Path may not contain '..': ${path}`);\n  }\n  const isAbsolute = /^([A-Za-z]:)?[\\\\/]/.test(path) || /^[A-Za-z]:/.test(path);\n  if (isAbsolute) {\n    const norm = (p: string): string => p.replace(/[\\\\/]+/g, \"/\").replace(/\\/+$/, \"\").toLowerCase();\n    const r = norm(root);\n    const p = norm(path);\n    if (p !== r && !p.startsWith(r + \"/\")) {\n      throw new Error(`Path escapes the configured root: ${path}`);\n    }\n  }\n}\n\nconst str = (v: unknown, fallback = \"\"): string => (typeof v === \"string\" ? v : fallback);\nconst num = (v: unknown, fallback?: number): number =>\n  typeof v === \"number\" && Number.isFinite(v) ? v : fallback ?? 0;\nconst asPaths = (v: unknown): string[] => {\n  if (typeof v === \"string\") {\n    return [v];\n  }\n  if (Array.isArray(v)) {\n    return v.filter((x): x is string => typeof x === \"string\");\n  }\n  return [];\n};\n\n/**\n * registerFilesBridge — an MCP tool set over a react-fancy `<FileBrowser>`'s\n * controlled state, so a human and an agent share one file browser. The agent\n * lists a folder's children, navigates, expands/collapses folders, selects\n * entries, and (in snapshot mode) requests a fresh subtree — driving the same\n * `value`/`path`/`expandedPaths` props, no DOM scraping. Every mutation\n * broadcasts AgentActivity (presence) and pushes an undo entry. Mirrors the\n * map / whiteboard / flow bridges in shape.\n *\n * Read-only browse in v1: no content preview (pair with fancy-code's\n * FileViewer) and no write ops (rename/delete/upload) — those arrive later\n * behind a pendingMode-gated iteration.\n */\nexport function registerFilesBridge(host: ToolHost, options: FilesBridgeOptions): Bridge {\n  const { adapter } = options;\n  const agent = { ...DEFAULT_AGENT, ...(options.agent ?? {}) };\n  const disposers: Array<() => void> = [];\n\n  // Reject traversal / out-of-root paths before they reach the adapter (no-op\n  // when no root is configured — the adapter is then responsible for sandboxing).\n  const guard = (path: string): string => {\n    if (options.root !== undefined) assertPathWithinRoot(options.root, path);\n    return path;\n  };\n\n  // Register agent_undo / agent_redo / agent_history once per host. Idempotent.\n  ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });\n\n  const fTarget = (args: any, _result: any): FilesAgentTarget => ({\n    kind: \"files\",\n    elementId: (args?.path as string | undefined) ?? undefined,\n  });\n\n  const reg = (\n    name: string,\n    description: string,\n    properties: Record<string, unknown>,\n    required: string[],\n    handler: (args: JsonObject) => Promise<any> | any,\n    resolveTarget?: (args: JsonObject, result: any) => FilesAgentTarget | null,\n  ) => {\n    const wrapped = async (args: JsonObject) => {\n      try {\n        return await handler(args);\n      } catch (e) {\n        return errorResult(e instanceof Error ? e.message : String(e));\n      }\n    };\n    const final = resolveTarget\n      ? wrapToolWithActivity(wrapped, {\n          toolName: name,\n          agent: { id: agent.id, name: agent.name, color: agent.color },\n          kind: \"files\",\n          resolveTarget: ({ args, result }) => resolveTarget(args, result),\n        })\n      : wrapped;\n    disposers.push(\n      host.registerTool(\n        {\n          name,\n          description,\n          inputSchema: {\n            type: \"object\",\n            properties: properties as any,\n            required,\n            additionalProperties: false,\n          },\n        },\n        final as any,\n      ),\n    );\n  };\n\n  // ───────────── Read ─────────────\n\n  reg(\n    \"files_get_state\",\n    \"Get the file browser's current directory, selected path(s), and expanded folders.\",\n    {},\n    [],\n    () => {\n      const state = {\n        path: adapter.getPath(),\n        selected: adapter.getSelection(),\n        expanded: adapter.getExpanded(),\n      };\n      return textResult(JSON.stringify(state, null, 2), state);\n    },\n  );\n\n  reg(\n    \"files_list\",\n    \"List the direct children of a folder (files + subfolders). Omit `path` for the current directory. Loads lazily from the host's provider/snapshot — never an eager tree walk.\",\n    { path: { type: \"string\", description: \"Folder path to list; defaults to the current directory.\" } },\n    [],\n    async (args) => {\n      const path = guard(args.path !== undefined ? str(args.path) : adapter.getPath());\n      const entries = await adapter.listChildren(path);\n      const summary = entries.map((e) => ({\n        path: e.path,\n        name: e.name,\n        kind: e.kind,\n        ...(e.size !== undefined ? { size: e.size } : {}),\n        ...(e.mtime !== undefined ? { mtime: e.mtime } : {}),\n      }));\n      const text =\n        summary.map((e) => `${e.kind === \"dir\" ? \"📁\" : \"📄\"} ${e.path}`).join(\"\\n\") ||\n        `(empty: ${path})`;\n      return textResult(text, { path, entries: summary });\n    },\n  );\n\n  // ───────────── Navigation ─────────────\n\n  reg(\n    \"files_navigate\",\n    \"Set the current directory (as if the user clicked a breadcrumb or opened a folder).\",\n    { path: { type: \"string\" } },\n    [\"path\"],\n    (args) => {\n      const path = guard(str(args.path));\n      const prev = adapter.getPath();\n      adapter.setPath(path);\n      pushUndoEntry(agent.id, {\n        timestamp: Date.now(),\n        bridgeId: \"files\",\n        action: \"files_navigate\",\n        label: `Navigated to ${path}`,\n        undo: () => adapter.setPath(prev),\n        redo: () => adapter.setPath(path),\n      });\n      return textResult(`Current directory → ${path}`, { path });\n    },\n    fTarget,\n  );\n\n  // ───────────── Expansion ─────────────\n\n  reg(\n    \"files_expand\",\n    \"Expand a folder in the tree (loads its children if needed).\",\n    { path: { type: \"string\" } },\n    [\"path\"],\n    (args) => {\n      const path = guard(str(args.path));\n      if (adapter.getExpanded().includes(path)) {\n        return textResult(`${path} already expanded`, { path, expanded: true });\n      }\n      adapter.setExpanded((prev) => [...prev, path]);\n      pushUndoEntry(agent.id, {\n        timestamp: Date.now(),\n        bridgeId: \"files\",\n        action: \"files_expand\",\n        label: `Expanded ${path}`,\n        undo: () => adapter.setExpanded((prev) => prev.filter((p) => p !== path)),\n        redo: () => adapter.setExpanded((prev) => (prev.includes(path) ? prev : [...prev, path])),\n      });\n      return textResult(`Expanded ${path}`, { path, expanded: true });\n    },\n    fTarget,\n  );\n\n  reg(\n    \"files_collapse\",\n    \"Collapse a folder in the tree.\",\n    { path: { type: \"string\" } },\n    [\"path\"],\n    (args) => {\n      const path = guard(str(args.path));\n      if (!adapter.getExpanded().includes(path)) {\n        return textResult(`${path} already collapsed`, { path, expanded: false });\n      }\n      adapter.setExpanded((prev) => prev.filter((p) => p !== path));\n      pushUndoEntry(agent.id, {\n        timestamp: Date.now(),\n        bridgeId: \"files\",\n        action: \"files_collapse\",\n        label: `Collapsed ${path}`,\n        undo: () => adapter.setExpanded((prev) => (prev.includes(path) ? prev : [...prev, path])),\n        redo: () => adapter.setExpanded((prev) => prev.filter((p) => p !== path)),\n      });\n      return textResult(`Collapsed ${path}`, { path, expanded: false });\n    },\n    fTarget,\n  );\n\n  // ───────────── Selection ─────────────\n\n  reg(\n    \"files_select\",\n    \"Set the selection to the given path(s). Pass a single `path`, or `paths` for a multi-select browser; either empty clears the selection.\",\n    {\n      path: { type: \"string\", description: \"A single path to select.\" },\n      paths: { type: \"array\", items: { type: \"string\" }, description: \"Multiple paths (multi-select browsers).\" },\n    },\n    [],\n    (args) => {\n      const next = (args.paths !== undefined ? asPaths(args.paths) : asPaths(args.path)).map(guard);\n      const prev = adapter.getSelection();\n      adapter.setSelection(next);\n      pushUndoEntry(agent.id, {\n        timestamp: Date.now(),\n        bridgeId: \"files\",\n        action: \"files_select\",\n        label: next.length ? `Selected ${next.join(\", \")}` : \"Cleared selection\",\n        undo: () => adapter.setSelection(prev),\n        redo: () => adapter.setSelection(next),\n      });\n      return textResult(next.length ? `Selected ${next.join(\", \")}` : \"Cleared selection\", {\n        selected: next,\n      });\n    },\n    fTarget,\n  );\n\n  // ───────────── Snapshot (streamed remote trees) ─────────────\n\n  reg(\n    \"files_request_snapshot\",\n    \"Request a fresh snapshot subtree rooted at `path` (snapshot mode) — e.g. to pull a remote machine's current tree. Requires the host to wire requestSnapshot.\",\n    {\n      path: { type: \"string\", description: \"Root of the subtree; defaults to the current directory.\" },\n      depth: { type: \"number\", description: \"How many levels deep to materialize (host-defined default).\" },\n    },\n    [],\n    async (args) => {\n      if (!adapter.requestSnapshot) {\n        return errorResult(\"Host did not wire requestSnapshot (snapshot mode not enabled).\");\n      }\n      const path = guard(args.path !== undefined ? str(args.path) : adapter.getPath());\n      // Clamp depth so an agent can't demand an unbounded recursive walk.\n      const depth =\n        args.depth !== undefined ? Math.max(0, Math.min(MAX_SNAPSHOT_DEPTH, num(args.depth))) : undefined;\n      const tree = await adapter.requestSnapshot(path, depth);\n      const count = Array.isArray(tree) ? tree.length : 0;\n      return textResult(`Snapshot of ${path}: ${count} top-level entr${count === 1 ? \"y\" : \"ies\"}.`, {\n        path,\n        snapshot: tree,\n      });\n    },\n    fTarget,\n  );\n\n  return {\n    id: \"files\",\n    title: \"Files\",\n    dispose: () => {\n      for (const d of disposers) d();\n    },\n  };\n}\n"]}

package/dist/{chunk-5KLUYF4D.js → chunk-HSI5RVF4.js}

@@ -1,4 +1,4 @@
-import { buildShareUrl, buildShareConfig } from './chunk-KMSRG5KH.js';
+import { buildShareUrl, buildShareConfig } from './chunk-N6RLSLOF.js';
 import { useRef, useEffect, useState } from 'react';
 import { jsxs, jsx } from 'react/jsx-runtime';
 
@@ -326,5 +326,5 @@ function buildCurlRecipe(session) {
 }
 
 export { AgentActivityHighlight, AgentCursor, AgentPanel, ShareControls, buildAgentPrompt };
-//# sourceMappingURL=chunk-5KLUYF4D.js.map
-//# sourceMappingURL=chunk-5KLUYF4D.js.map
+//# sourceMappingURL=chunk-HSI5RVF4.js.map
+//# sourceMappingURL=chunk-HSI5RVF4.js.map

package/dist/{chunk-5KLUYF4D.js.map → chunk-HSI5RVF4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/components/AgentPanel/AgentPanel.tsx","../src/components/AgentCursor/AgentCursor.tsx","../src/components/AgentActivityHighlight/AgentActivityHighlight.tsx","../src/components/ShareControls/ShareControls.tsx"],"names":["jsxs","jsx","useEffect","useState"],"mappings":";;;;AAoCO,SAAS,UAAA,CAAW,EAAE,KAAA,EAAO,QAAA,EAAU,UAAU,IAAA,EAAM,OAAA,EAAS,SAAA,EAAW,KAAA,EAAM,EAAoB;AAC1G,EAAA,MAAM,SAAA,GAAY,OAAuB,IAAI,CAAA;AAC7C,EAAA,MAAM,QAAA,GAAW,OAA4B,IAAI,CAAA;AAEjD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,KAAK,SAAA,CAAU,OAAA;AACrB,IAAA,IAAI,CAAC,EAAA,EAAI;AACT,IAAA,EAAA,CAAG,YAAY,EAAA,CAAG,YAAA;AAAA,EACpB,CAAA,EAAG,CAAC,QAAA,CAAS,MAAM,CAAC,CAAA;AAEpB,EAAA,MAAM,YAAA,GAAe,CAAC,CAAA,KAAuB;AAC3C,IAAA,CAAA,CAAE,cAAA,EAAe;AACjB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,OAAA,EAAS,KAAA,CAAM,IAAA,EAAK;AAC3C,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACzB,IAAA,QAAA,CAAS,KAAK,CAAA;AACd,IAAA,IAAI,QAAA,CAAS,OAAA,EAAS,QAAA,CAAS,OAAA,CAAQ,KAAA,GAAQ,EAAA;AAAA,EACjD,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,IAAS,SAAA;AAC9B,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,IAAQ,OAAA;AAE5B,EAAA,uBACE,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,aAAa,SAAA,IAAa,EAAE,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EACxE,QAAA,EAAA;AAAA,oBAAA,IAAA,CAAC,QAAA,EAAA,EAAO,WAAU,mBAAA,EAChB,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mBAAA;AAAA,UACV,KAAA,EAAO,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,UAC3B,aAAA,EAAW,IAAA;AAAA,UAEV,QAAA,EAAA,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC;AAAA;AAAA,OAClB;AAAA,sBACA,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,kBAAA,EACb,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,YAAQ,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,wBACd,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAA,EACb,iBAAO,eAAA,GAAa,CAAA,EAAG,QAAA,CAAS,MAAM,SAAS,QAAA,CAAS,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,GAAG,CAAA,CAAA,EAClF;AAAA,OAAA,EACF,CAAA;AAAA,MACC,OAAA,oBAAW,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,sBAAsB,QAAA,EAAA,OAAA,EAAQ;AAAA,KAAA,EAC3D,CAAA;AAAA,oBAEA,GAAA,CAAC,KAAA,EAAA,EAAI,GAAA,EAAK,SAAA,EAAW,SAAA,EAAU,mBAAA,EAC5B,QAAA,EAAA,QAAA,CAAS,MAAA,KAAW,CAAA,mBACnB,GAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,kBAAA,EAAmB,8BAAgB,CAAA,GAEhD,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,qBAAM,GAAA,CAAC,WAAA,EAAA,EAAuB,IAAA,EAAM,CAAA,EAAA,EAAZ,CAAA,CAAE,EAAa,CAAE,CAAA,EAE3D,CAAA;AAAA,IAEC,4BACC,IAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAA,EAAsB,UAAU,YAAA,EAC9C,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,UAAA;AAAA,QAAA;AAAA,UACC,GAAA,EAAK,QAAA;AAAA,UACL,SAAA,EAAU,kBAAA;AAAA,UACV,WAAA,EAAa,OAAO,eAAA,GAAa,qBAAA;AAAA,UACjC,QAAA,EAAU,IAAA;AAAA,UACV,IAAA,EAAM,CAAA;AAAA,UACN,SAAA,EAAW,CAAC,CAAA,KAAM;AAChB,YAAA,IAAI,CAAA,CAAE,GAAA,KAAQ,OAAA,IAAW,CAAC,EAAE,QAAA,EAAU;AACpC,cAAA,CAAA,CAAE,cAAA,EAAe;AACjB,cAAA,YAAA,CAAa,CAA+B,CAAA;AAAA,YAC9C;AAAA,UACF;AAAA;AAAA,OACF;AAAA,sBACA,GAAA,CAAC,YAAO,IAAA,EAAK,QAAA,EAAS,WAAU,iBAAA,EAAkB,QAAA,EAAU,MAAM,QAAA,EAAA,MAAA,EAElE;AAAA,KAAA,EACF;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAEA,SAAS,WAAA,CAAY,EAAE,IAAA,EAAK,EAA4B;AACtD,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,IAAA,CAAK,EAAE,CAAA;AAC/B,EAAA,4BACG,KAAA,EAAA,EAAI,SAAA,EAAW,CAAA,iBAAA,EAAoB,IAAA,CAAK,IAAI,CAAA,CAAA,EAC3C,QAAA,EAAA;AAAA,oBAAA,IAAA,CAAC,KAAA,EAAA,EAAI,WAAU,eAAA,EACb,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,iBAAA,EAAmB,QAAA,EAAA,IAAA,CAAK,MAAA,EAAO,CAAA;AAAA,sBAC/C,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,eAAA,EAAiB,QAAA,EAAA,IAAA,EAAK;AAAA,KAAA,EACxC,CAAA;AAAA,oBACA,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,eAAA,EAAiB,eAAK,IAAA,EAAK,CAAA;AAAA,IACzC,KAAK,MAAA,KAAW,MAAA,oBACf,IAAA,CAAC,SAAA,EAAA,EAAQ,WAAU,iBAAA,EACjB,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,aAAQ,QAAA,EAAA,SAAA,EAAO,CAAA;AAAA,sBAChB,GAAA,CAAC,KAAA,EAAA,EAAK,QAAA,EAAA,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAE;AAAA,KAAA,EAC9B;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAEA,SAAS,WAAW,EAAA,EAAoB;AACtC,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,CAAK,EAAE,CAAA;AACrB,EAAA,MAAM,EAAA,GAAK,EAAE,QAAA,EAAS,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClD,EAAA,MAAM,EAAA,GAAK,EAAE,UAAA,EAAW,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpD,EAAA,MAAM,EAAA,GAAK,EAAE,UAAA,EAAW,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpD,EAAA,OAAO,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,EAAE,IAAI,EAAE,CAAA,CAAA;AAC1B;AAEA,SAAS,SAAS,CAAA,EAAoB;AACpC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,CAAA,EAAG,IAAA,EAAM,CAAC,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,OAAO,CAAC,CAAA;AAAA,EACjB;AACF;AC3HO,SAAS,WAAA,CAAY,EAAE,CAAA,EAAG,CAAA,EAAG,IAAA,EAAM,QAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAM,EAAqB;AACzG,EAAA,uBACEA,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,CAAC,YAAA,EAAc,SAAA,IAAa,EAAE,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAAA,MACnE,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,IAAA,EAAM,CAAA;AAAA,QACN,GAAA,EAAK,CAAA;AAAA,QACL,aAAA,EAAe,MAAA;AAAA,QACf,SAAA,EAAW,uBAAA;AAAA,QACX,GAAG;AAAA,OACL;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAM,IAAA,EAAK,MAAA,EAAO,MAAK,OAAA,EAAQ,WAAA,EAAY,aAAA,EAAW,IAAA,EACzD,QAAA,kBAAAA,GAAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,CAAA,EAAE,+CAAA;AAAA,YACF,IAAA,EAAM,KAAA;AAAA,YACN,MAAA,EAAO,OAAA;AAAA,YACP,WAAA,EAAY;AAAA;AAAA,SACd,EACF,CAAA;AAAA,QACC,wBACCD,IAAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,iBAAA;AAAA,YACV,KAAA,EAAO,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,YAE1B,QAAA,EAAA;AAAA,cAAA,IAAA;AAAA,cACA,MAAA,mBAASA,IAAAA,CAAC,IAAA,EAAA,EAAG,WAAU,oBAAA,EAAqB,QAAA,EAAA;AAAA,gBAAA,QAAA;AAAA,gBAAI;AAAA,eAAA,EAAO,CAAA,GAAQ;AAAA;AAAA;AAAA;AAClE;AAAA;AAAA,GAEJ;AAEJ;AC3BO,SAAS,sBAAA,CAAuB;AAAA,EACrC,CAAA;AAAA,EACA,CAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ,SAAA;AAAA,EACR,QAAA,GAAW,IAAA;AAAA,EACX,SAAA;AAAA,EACA;AACF,CAAA,EAAgC;AAC9B,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAI,SAAS,KAAK,CAAA;AAE5C,EAAAE,UAAU,MAAM;AACd,IAAA,IAAI,aAAa,MAAA,EAAW;AAC5B,IAAA,UAAA,CAAW,IAAI,CAAA;AACf,IAAA,MAAM,IAAI,UAAA,CAAW,MAAM,UAAA,CAAW,KAAK,GAAG,QAAQ,CAAA;AACtD,IAAA,OAAO,MAAM,aAAa,CAAC,CAAA;AAAA,EAC7B,CAAA,EAAG,CAAC,QAAA,EAAU,QAAQ,CAAC,CAAA;AAEvB,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,uBACED,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,CAAC,eAAA,EAAiB,SAAA,IAAa,EAAE,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAAA,MACtE,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,MAAM,CAAA,GAAI,CAAA;AAAA,QACV,KAAK,CAAA,GAAI,CAAA;AAAA,QACT,OAAO,KAAA,GAAQ,CAAA;AAAA,QACf,QAAQ,MAAA,GAAS,CAAA;AAAA,QACjB,YAAA,EAAc,CAAA;AAAA,QACd,SAAA,EAAW,CAAA,UAAA,EAAa,KAAK,CAAA,WAAA,EAAc,KAAK,CAAA,EAAA,CAAA;AAAA,QAChD,aAAA,EAAe,MAAA;AAAA,QACf,SAAA,EAAW,aAAa,QAAQ,CAAA,oBAAA,CAAA;AAAA,QAChC,GAAG;AAAA;AACL;AAAA,GACF;AAEJ;ACvCO,SAAS,aAAA,CAAc;AAAA,EAC5B,OAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,YAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAAuB;AACrB,EAAA,MAAM,CAAC,GAAA,EAAK,MAAM,CAAA,GAAIE,SAAc,QAAQ,CAAA;AAE5C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,uBACEH,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,2BAAA,EAA6B,SAAA,IAAa,EAAE,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EACxF,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,YAAO,IAAA,EAAK,QAAA,EAAS,WAAU,kBAAA,EAAmB,OAAA,EAAS,SAAS,QAAA,EAAA,sBAAA,EAErE,CAAA;AAAA,sBACAD,IAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,iBAAA,EAAkB,QAAA,EAAA;AAAA,QAAA,kDAAA;AAAA,wBACmBC,GAAAA,CAAC,QAAA,EAAA,EAAO,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,QAAS;AAAA,OAAA,EAC/E;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,OAAA,EAAS,YAAY,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,iBAAiB,OAAO,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,gBAAgB,OAAO,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,iBAAiB,GAAG,CAAA;AAEnC,EAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,6BAAA,EAA+B,SAAA,IAAa,EAAE,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EAC1F,QAAA,EAAA;AAAA,oBAAAA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mBAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,KAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,YAAO,QAAA,EAAA,SAAA,EAAO,CAAA;AAAA,wBACfD,IAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,eAAA,EAAgB,QAAA,EAAA;AAAA,UAAA,UAAA;AAAA,0BACtBC,GAAAA,CAAC,MAAA,EAAA,EAAM,QAAA,EAAA,OAAA,CAAQ,EAAA,EAAG,CAAA;AAAA,UAAO,cAAA;AAAA,0BAASD,KAAC,MAAA,EAAA,EAAM,QAAA,EAAA;AAAA,YAAA,OAAA,CAAQ,OAAA;AAAA,YAAQ;AAAA,WAAA,EAAC;AAAA,SAAA,EACpE;AAAA,OAAA,EACF,CAAA;AAAA,sBACAA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,2BAAA,EACZ,QAAA,EAAA;AAAA,QAAA,MAAA,oBAAUC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAqB,QAAA,EAAA,MAAA,EAAO,CAAA;AAAA,wBACvDA,IAAC,QAAA,EAAA,EAAO,IAAA,EAAK,UAAS,SAAA,EAAU,iBAAA,EAAkB,OAAA,EAAS,MAAA,EAAQ,QAAA,EAAA,MAAA,EAEnE;AAAA,OAAA,EACF;AAAA,KAAA,EACF,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,iBAAA,EAAkB,MAAK,SAAA,EACpC,QAAA,EAAA;AAAA,sBAAAC,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,UAAS,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,sBACjEA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,OAAM,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,KAAA,EAAG,CAAA;AAAA,sBACrDA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,QAAO,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,MAAA,EAAI,CAAA;AAAA,sBACvDA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,QAAO,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,aAAA,EAAW;AAAA,KAAA,EAChE,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,kBAAA,EACZ,QAAA,EAAA;AAAA,MAAA,GAAA,KAAQ,4BACPC,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,8EAAA;AAAA,UACN,KAAA,EAAO,MAAA;AAAA,UACP,SAAA,EAAS;AAAA;AAAA,OACX;AAAA,MAED,GAAA,KAAQ,yBAASA,GAAAA,CAAC,WAAQ,KAAA,EAAM,kDAAA,EAAmD,OAAO,GAAA,EAAK,CAAA;AAAA,MAC/F,GAAA,KAAQ,0BACPA,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,qDAAA;AAAA,UACN,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC;AAAA;AAAA,OACvC;AAAA,MAED,GAAA,KAAQ,0BACPA,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,2DAAA;AAAA,UACN,KAAA,EAAO,IAAA;AAAA,UACP,SAAA,EAAS;AAAA;AAAA;AACX,KAAA,EAEJ;AAAA,GAAA,EACF,CAAA;AAEJ;AAEA,SAAS,UAAU,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,UAAS,EAAmF;AACpI,EAAA,uBACEA,GAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,IAAA,EAAK,KAAA;AAAA,MACL,iBAAe,GAAA,KAAQ,MAAA;AAAA,MACvB,SAAA,EAAW,CAAA,cAAA,EAAiB,GAAA,KAAQ,MAAA,GAAS,eAAe,EAAE,CAAA,CAAA;AAAA,MAC9D,OAAA,EAAS,MAAM,MAAA,CAAO,GAAG,CAAA;AAAA,MAExB;AAAA;AAAA,GACH;AAEJ;AAEA,SAAS,OAAA,CAAQ,EAAE,KAAA,EAAO,KAAA,EAAO,WAAU,EAA0D;AACnG,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIE,SAAS,KAAK,CAAA;AAC1C,EAAA,MAAM,OAAO,YAAY;AACvB,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,CAAU,SAAA,CAAU,SAAA,CAAU,KAAK,CAAA;AACzC,MAAA,SAAA,CAAU,IAAI,CAAA;AACd,MAAA,UAAA,CAAW,MAAM,SAAA,CAAU,KAAK,CAAA,EAAG,IAAI,CAAA;AAAA,IACzC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF,CAAA;AACA,EAAA,uBACEH,KAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,oBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wBAAA,EAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,oBAC/CD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,iBAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,SAAI,SAAA,EAAW,CAAA,cAAA,EAAiB,YAAY,WAAA,GAAc,EAAE,IAAK,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACxEA,GAAAA,CAAC,QAAA,EAAA,EAAO,IAAA,EAAK,QAAA,EAAS,SAAA,EAAU,qBAAA,EAAsB,OAAA,EAAS,IAAA,EAC5D,QAAA,EAAA,MAAA,GAAS,QAAA,GAAW,MAAA,EACvB;AAAA,KAAA,EACF;AAAA,GAAA,EACF,CAAA;AAEJ;AAQO,SAAS,iBAAiB,GAAA,EAAqB;AACpD,EAAA,OAAO;AAAA,IACL,CAAA,6EAAA,CAAA;AAAA,IACA,CAAA,mFAAA,CAAA;AAAA,IACA,CAAA,4EAAA,CAAA;AAAA,IACA,CAAA,sEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,0EAAA,CAAA;AAAA,IACA,KAAK,GAAG,CAAA,CAAA;AAAA,IACR,CAAA,CAAA;AAAA,IACA,CAAA,oEAAA,CAAA;AAAA,IACA,8BAA8B,GAAG,CAAA,CAAA,CAAA;AAAA,IACjC,CAAA,CAAA;AAAA,IACA,CAAA,2EAAA,CAAA;AAAA,IACA,CAAA,+EAAA,CAAA;AAAA,IACA,CAAA,KAAA,CAAA;AAAA,IACA,CAAA,kFAAA,CAAA;AAAA,IACA,CAAA,sFAAA,CAAA;AAAA,IACA,CAAA,8EAAA,CAAA;AAAA,IACA,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,2EAAA,CAAA;AAAA,IACA,CAAA,6FAAA,CAAA;AAAA,IACA,sBAAsB,GAAG,CAAA,OAAA,CAAA;AAAA,IACzB,sBAAsB,GAAG,CAAA,yBAAA;AAAA,GAC3B,CAAE,KAAK,IAAI,CAAA;AACb;AAGA,SAAS,gBAAgB,OAAA,EAAoC;AAC3D,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GACd,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,GACpD,kBAAA;AACN,EAAA,MAAM,KAAA,GAAQ,GAAG,IAAI,CAAA,aAAA,EAAgB,QAAQ,EAAE,CAAA,aAAA,EAAgB,QAAQ,KAAK,CAAA,CAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,GAAG,IAAI,CAAA,aAAA,EAAgB,QAAQ,EAAE,CAAA,cAAA,EAAiB,QAAQ,KAAK,CAAA,CAAA;AAC9E,EAAA,OAAO;AAAA,IACL,CAAA,6DAAA,CAAA;AAAA,IACA,YAAY,MAAM,CAAA,CAAA,CAAA;AAAA,IAClB,CAAA,CAAA;AAAA,IACA,CAAA,sDAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,iEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,sCAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,qDAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,sBAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,sJAAA;AAAA,GACF,CAAE,KAAK,IAAI,CAAA;AACb","file":"chunk-5KLUYF4D.js","sourcesContent":["import { type CSSProperties, type ReactNode, useEffect, useRef } from \"react\";\n\nexport type AgentActivity = {\n  id: string;\n  /** Wall-clock timestamp; component formats it. */\n  at: number;\n  /** \"tool\" for MCP tool invocations, \"message\" for chat, \"info\" for status. */\n  kind: \"tool\" | \"message\" | \"info\" | \"error\";\n  /** Short label, e.g. \"whiteboard_add_sticky\" or \"Agent\". */\n  source: string;\n  /** Body text. */\n  text: string;\n  /** Optional structured payload, rendered as collapsed JSON. */\n  detail?: unknown;\n};\n\nexport type AgentPanelProps = {\n  /** The agent's identity (name + color appears in the header). */\n  agent?: { name?: string; color?: string };\n  /** Activity stream. Most recent at the end. */\n  activity: AgentActivity[];\n  /** Optional chat composer — pass an onSubmit to enable. */\n  onSubmit?: (message: string) => void;\n  /** Disabled while a request is in flight. */\n  busy?: boolean;\n  /** Right-rail header actions. */\n  actions?: ReactNode;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentPanel — sidebar showing the agent's identity, a tool-and-chat log,\n * and an optional input composer. Pure presentational: hosts feed it the\n * activity stream from their own state (typically the MCP transport log).\n */\nexport function AgentPanel({ agent, activity, onSubmit, busy, actions, className, style }: AgentPanelProps) {\n  const scrollRef = useRef<HTMLDivElement>(null);\n  const inputRef = useRef<HTMLTextAreaElement>(null);\n\n  useEffect(() => {\n    const el = scrollRef.current;\n    if (!el) return;\n    el.scrollTop = el.scrollHeight;\n  }, [activity.length]);\n\n  const handleSubmit = (e: React.FormEvent) => {\n    e.preventDefault();\n    const value = inputRef.current?.value.trim();\n    if (!value || !onSubmit) return;\n    onSubmit(value);\n    if (inputRef.current) inputRef.current.value = \"\";\n  };\n\n  const color = agent?.color ?? \"#a855f7\";\n  const name = agent?.name ?? \"Agent\";\n\n  return (\n    <div className={[\"fai-panel\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n      <header className=\"fai-panel__header\">\n        <div\n          className=\"fai-panel__avatar\"\n          style={{ background: color }}\n          aria-hidden\n        >\n          {name.slice(0, 1)}\n        </div>\n        <div className=\"fai-panel__title\">\n          <strong>{name}</strong>\n          <span className=\"fai-panel__subtitle\">\n            {busy ? \"Working…\" : `${activity.length} event${activity.length === 1 ? \"\" : \"s\"}`}\n          </span>\n        </div>\n        {actions && <div className=\"fai-panel__actions\">{actions}</div>}\n      </header>\n\n      <div ref={scrollRef} className=\"fai-panel__stream\">\n        {activity.length === 0 ? (\n          <p className=\"fai-panel__empty\">No activity yet.</p>\n        ) : (\n          activity.map((a) => <ActivityRow key={a.id} item={a} />)\n        )}\n      </div>\n\n      {onSubmit && (\n        <form className=\"fai-panel__composer\" onSubmit={handleSubmit}>\n          <textarea\n            ref={inputRef}\n            className=\"fai-panel__input\"\n            placeholder={busy ? \"Working…\" : \"Ask the agent…\"}\n            disabled={busy}\n            rows={2}\n            onKeyDown={(e) => {\n              if (e.key === \"Enter\" && !e.shiftKey) {\n                e.preventDefault();\n                handleSubmit(e as unknown as React.FormEvent);\n              }\n            }}\n          />\n          <button type=\"submit\" className=\"fai-panel__send\" disabled={busy}>\n            Send\n          </button>\n        </form>\n      )}\n    </div>\n  );\n}\n\nfunction ActivityRow({ item }: { item: AgentActivity }) {\n  const time = formatTime(item.at);\n  return (\n    <div className={`fai-row fai-row--${item.kind}`}>\n      <div className=\"fai-row__meta\">\n        <span className=\"fai-row__source\">{item.source}</span>\n        <span className=\"fai-row__time\">{time}</span>\n      </div>\n      <div className=\"fai-row__text\">{item.text}</div>\n      {item.detail !== undefined && (\n        <details className=\"fai-row__detail\">\n          <summary>details</summary>\n          <pre>{safeJson(item.detail)}</pre>\n        </details>\n      )}\n    </div>\n  );\n}\n\nfunction formatTime(at: number): string {\n  const d = new Date(at);\n  const hh = d.getHours().toString().padStart(2, \"0\");\n  const mm = d.getMinutes().toString().padStart(2, \"0\");\n  const ss = d.getSeconds().toString().padStart(2, \"0\");\n  return `${hh}:${mm}:${ss}`;\n}\n\nfunction safeJson(v: unknown): string {\n  try {\n    return JSON.stringify(v, null, 2);\n  } catch {\n    return String(v);\n  }\n}\n","import type { CSSProperties } from \"react\";\n\nexport type AgentCursorProps = {\n  x: number;\n  y: number;\n  name?: string;\n  color?: string;\n  /** Optional caption shown under the name (e.g. current tool). */\n  status?: string;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentCursor — on-canvas presence marker for the agent. Drop it inside\n * (or alongside) a fancy-whiteboard <Board> at screen coords matching\n * the agent's reported position.\n */\nexport function AgentCursor({ x, y, name, color = \"#a855f7\", status, className, style }: AgentCursorProps) {\n  return (\n    <div\n      className={[\"fai-cursor\", className ?? \"\"].filter(Boolean).join(\" \")}\n      style={{\n        position: \"absolute\",\n        left: x,\n        top: y,\n        pointerEvents: \"none\",\n        transform: \"translate(-2px, -2px)\",\n        ...style,\n      }}\n    >\n      <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" aria-hidden>\n        <path\n          d=\"M2 2 L2 17 L7 13 L10 19 L12 18 L9 12 L15 12 Z\"\n          fill={color}\n          stroke=\"white\"\n          strokeWidth=\"1.2\"\n        />\n      </svg>\n      {name && (\n        <span\n          className=\"fai-cursor__tag\"\n          style={{ background: color }}\n        >\n          {name}\n          {status ? <em className=\"fai-cursor__status\"> · {status}</em> : null}\n        </span>\n      )}\n    </div>\n  );\n}\n","import { type CSSProperties, useEffect, useState } from \"react\";\n\nexport type AgentActivityHighlightProps = {\n  /** Bounds of the highlighted item in the parent's coord system. */\n  x: number;\n  y: number;\n  width: number;\n  height: number;\n  /** Trigger token — change it (e.g. set to Date.now()) to re-fire the pulse. */\n  pulseKey?: string | number;\n  /** Highlight tint. */\n  color?: string;\n  /** Pulse duration in ms. Defaults 1200. */\n  duration?: number;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentActivityHighlight — short pulsing outline that flashes around an\n * item the agent just touched. Position the parent so this can be placed\n * absolutely matching the item's bounds.\n */\nexport function AgentActivityHighlight({\n  x,\n  y,\n  width,\n  height,\n  pulseKey,\n  color = \"#a855f7\",\n  duration = 1200,\n  className,\n  style,\n}: AgentActivityHighlightProps) {\n  const [visible, setVisible] = useState(false);\n\n  useEffect(() => {\n    if (pulseKey === undefined) return;\n    setVisible(true);\n    const t = setTimeout(() => setVisible(false), duration);\n    return () => clearTimeout(t);\n  }, [pulseKey, duration]);\n\n  if (!visible) return null;\n\n  return (\n    <div\n      className={[\"fai-highlight\", className ?? \"\"].filter(Boolean).join(\" \")}\n      style={{\n        position: \"absolute\",\n        left: x - 4,\n        top: y - 4,\n        width: width + 8,\n        height: height + 8,\n        borderRadius: 8,\n        boxShadow: `0 0 0 2px ${color}, 0 0 16px ${color}66`,\n        pointerEvents: \"none\",\n        animation: `fai-pulse ${duration}ms ease-out forwards`,\n        ...style,\n      }}\n    />\n  );\n}\n","import { type CSSProperties, useState } from \"react\";\nimport type { SessionDescriptor } from \"../../sharing/token\";\nimport { buildShareConfig, buildShareUrl } from \"../../sharing/token\";\n\nexport type ShareControlsProps = {\n  /** The active session, or null when not sharing yet. */\n  session: SessionDescriptor | null;\n  onStart: () => void;\n  onStop: () => void;\n  /** Optional connection-state badge text. */\n  status?: string;\n  /** Override the URL base used in the share URL. */\n  shareBaseUrl?: string;\n  className?: string;\n  style?: CSSProperties;\n};\n\ntype Tab = \"prompt\" | \"url\" | \"json\" | \"curl\";\n\n/**\n * ShareControls — the host-facing UI for turning sharing on/off and\n * surfacing the resulting connection details (URL / JSON / cURL).\n */\nexport function ShareControls({\n  session,\n  onStart,\n  onStop,\n  status,\n  shareBaseUrl,\n  className,\n  style,\n}: ShareControlsProps) {\n  const [tab, setTab] = useState<Tab>(\"prompt\");\n\n  if (!session) {\n    return (\n      <div className={[\"fai-share fai-share--idle\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n        <button type=\"button\" className=\"fai-share__start\" onClick={onStart}>\n          Start shared session\n        </button>\n        <p className=\"fai-share__hint\">\n          Generates a session id + secret token. Hand the <strong>Agent prompt</strong> to an AI agent, share the URL with humans, or give the JSON config to an MCP-capable client.\n        </p>\n      </div>\n    );\n  }\n\n  const url = buildShareUrl(session, shareBaseUrl);\n  const config = buildShareConfig(session);\n  const curl = buildCurlRecipe(session);\n  const prompt = buildAgentPrompt(url);\n\n  return (\n    <div className={[\"fai-share fai-share--active\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n      <div className=\"fai-share__header\">\n        <div>\n          <strong>Sharing</strong>\n          <span className=\"fai-share__id\">\n            session <code>{session.id}</code> · token <code>{session.display}…</code>\n          </span>\n        </div>\n        <div className=\"fai-share__header-actions\">\n          {status && <span className=\"fai-share__status\">{status}</span>}\n          <button type=\"button\" className=\"fai-share__stop\" onClick={onStop}>\n            Stop\n          </button>\n        </div>\n      </div>\n\n      <div className=\"fai-share__tabs\" role=\"tablist\">\n        <TabButton tab=\"prompt\" active={tab} setTab={setTab}>Agent prompt</TabButton>\n        <TabButton tab=\"url\" active={tab} setTab={setTab}>URL</TabButton>\n        <TabButton tab=\"json\" active={tab} setTab={setTab}>JSON</TabButton>\n        <TabButton tab=\"curl\" active={tab} setTab={setTab}>cURL recipe</TabButton>\n      </div>\n\n      <div className=\"fai-share__panel\">\n        {tab === \"prompt\" && (\n          <CopyBox\n            label=\"Paste this straight into an AI agent — it connects over MCP, no browser\"\n            value={prompt}\n            multiline\n          />\n        )}\n        {tab === \"url\" && <CopyBox label=\"Open this URL in another tab to join the session\" value={url} />}\n        {tab === \"json\" && (\n          <CopyBox\n            label=\"Paste into Claude Desktop / Cline MCP server config\"\n            value={JSON.stringify(config, null, 2)}\n          />\n        )}\n        {tab === \"curl\" && (\n          <CopyBox\n            label=\"Connect from a terminal (verifies the relay is reachable)\"\n            value={curl}\n            multiline\n          />\n        )}\n      </div>\n    </div>\n  );\n}\n\nfunction TabButton({ tab, active, setTab, children }: { tab: Tab; active: Tab; setTab: (t: Tab) => void; children: React.ReactNode }) {\n  return (\n    <button\n      type=\"button\"\n      role=\"tab\"\n      aria-selected={tab === active}\n      className={`fai-share__tab${tab === active ? \" is-active\" : \"\"}`}\n      onClick={() => setTab(tab)}\n    >\n      {children}\n    </button>\n  );\n}\n\nfunction CopyBox({ label, value, multiline }: { label: string; value: string; multiline?: boolean }) {\n  const [copied, setCopied] = useState(false);\n  const copy = async () => {\n    try {\n      await navigator.clipboard.writeText(value);\n      setCopied(true);\n      setTimeout(() => setCopied(false), 1200);\n    } catch {\n      // ignore\n    }\n  };\n  return (\n    <div>\n      <div className=\"fai-share__panel-label\">{label}</div>\n      <div className=\"fai-share__copy\">\n        <pre className={`fai-share__pre${multiline ? \" is-multi\" : \"\"}`}>{value}</pre>\n        <button type=\"button\" className=\"fai-share__copy-btn\" onClick={copy}>\n          {copied ? \"Copied\" : \"Copy\"}\n        </button>\n      </div>\n    </div>\n  );\n}\n\n/**\n * Build a copy-paste natural-language prompt to hand directly to an AI agent.\n * Agents handed a bare URL tend to try to *open it in a browser* — this spells\n * out that the link is a live MCP co-browsing session it should drive over MCP\n * tools (via the zero-install relay client), never visit.\n */\nexport function buildAgentPrompt(url: string): string {\n  return [\n    `You're joining a live Human+ co-browsing session on a web app. This is an MCP`,\n    `(Model Context Protocol) session — NOT a website to visit. Do NOT open the URL`,\n    `in a browser and do NOT use any browser/Playwright tool. You drive the real,`,\n    `running app through MCP tools while a human watches and can take over.`,\n    ``,\n    `Session link (carries the session id + token — treat it as a secret):`,\n    `  ${url}`,\n    ``,\n    `Connect by running the relay client as an MCP server (zero install):`,\n    `  npx -y mcp-relay-client \"${url}\"`,\n    ``,\n    `That exposes the app's own tools (e.g. page_describe, page_read, nav_visit,`,\n    `page_click, page_set_field, page_submit, plus surface tools like whiteboard_*).`,\n    `Then:`,\n    `  1. Call page_describe first to see the current page and its interactive handles.`,\n    `  2. Act only on the STABLE HANDLES the tools return — never guess DOM selectors.`,\n    `  3. Navigate with nav_visit, type with page_set_field, click with page_click.`,\n    `     Submits and destructive clicks are staged for the human to confirm.`,\n    ``,\n    `If you can't register an MCP server but can run a shell, drive it directly:`,\n    `  curl -O https://raw.githubusercontent.com/Particle-Academy/mcp-relay-client/main/connect.sh`,\n    `  bash connect.sh \"${url}\" tools`,\n    `  bash connect.sh \"${url}\" call page_describe '{}'`,\n  ].join(\"\\n\");\n}\n\n/** Build a copy-paste cURL recipe for connecting an external MCP client. */\nfunction buildCurlRecipe(session: SessionDescriptor): string {\n  const base =\n    typeof window !== \"undefined\"\n      ? `${window.location.protocol}//${window.location.host}`\n      : \"http://localhost\";\n  const inbox = `${base}/agent-relay/${session.id}/inbox?token=${session.token}`;\n  const events = `${base}/agent-relay/${session.id}/events?token=${session.token}`;\n  return [\n    `# 1) In one terminal, subscribe to server-pushed frames (SSE)`,\n    `curl -N \"${events}\"`,\n    ``,\n    `# 2) In another terminal, send an initialize handshake`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{}}'`,\n    ``,\n    `# 3) List the tools the bridge exposes`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/list\"}'`,\n    ``,\n    `# 4) Add a sticky note`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"tools/call\",\"params\":{\"name\":\"whiteboard_add_sticky\",\"arguments\":{\"x\":300,\"y\":300,\"text\":\"hello from curl\"}}}'`,\n  ].join(\"\\n\");\n}\n"]}
+{"version":3,"sources":["../src/components/AgentPanel/AgentPanel.tsx","../src/components/AgentCursor/AgentCursor.tsx","../src/components/AgentActivityHighlight/AgentActivityHighlight.tsx","../src/components/ShareControls/ShareControls.tsx"],"names":["jsxs","jsx","useEffect","useState"],"mappings":";;;;AAoCO,SAAS,UAAA,CAAW,EAAE,KAAA,EAAO,QAAA,EAAU,UAAU,IAAA,EAAM,OAAA,EAAS,SAAA,EAAW,KAAA,EAAM,EAAoB;AAC1G,EAAA,MAAM,SAAA,GAAY,OAAuB,IAAI,CAAA;AAC7C,EAAA,MAAM,QAAA,GAAW,OAA4B,IAAI,CAAA;AAEjD,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,MAAM,KAAK,SAAA,CAAU,OAAA;AACrB,IAAA,IAAI,CAAC,EAAA,EAAI;AACT,IAAA,EAAA,CAAG,YAAY,EAAA,CAAG,YAAA;AAAA,EACpB,CAAA,EAAG,CAAC,QAAA,CAAS,MAAM,CAAC,CAAA;AAEpB,EAAA,MAAM,YAAA,GAAe,CAAC,CAAA,KAAuB;AAC3C,IAAA,CAAA,CAAE,cAAA,EAAe;AACjB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,OAAA,EAAS,KAAA,CAAM,IAAA,EAAK;AAC3C,IAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACzB,IAAA,QAAA,CAAS,KAAK,CAAA;AACd,IAAA,IAAI,QAAA,CAAS,OAAA,EAAS,QAAA,CAAS,OAAA,CAAQ,KAAA,GAAQ,EAAA;AAAA,EACjD,CAAA;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,IAAS,SAAA;AAC9B,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,IAAQ,OAAA;AAE5B,EAAA,uBACE,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,aAAa,SAAA,IAAa,EAAE,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EACxE,QAAA,EAAA;AAAA,oBAAA,IAAA,CAAC,QAAA,EAAA,EAAO,WAAU,mBAAA,EAChB,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,KAAA;AAAA,QAAA;AAAA,UACC,SAAA,EAAU,mBAAA;AAAA,UACV,KAAA,EAAO,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,UAC3B,aAAA,EAAW,IAAA;AAAA,UAEV,QAAA,EAAA,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC;AAAA;AAAA,OAClB;AAAA,sBACA,IAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,kBAAA,EACb,QAAA,EAAA;AAAA,wBAAA,GAAA,CAAC,YAAQ,QAAA,EAAA,IAAA,EAAK,CAAA;AAAA,wBACd,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAA,EACb,iBAAO,eAAA,GAAa,CAAA,EAAG,QAAA,CAAS,MAAM,SAAS,QAAA,CAAS,MAAA,KAAW,CAAA,GAAI,EAAA,GAAK,GAAG,CAAA,CAAA,EAClF;AAAA,OAAA,EACF,CAAA;AAAA,MACC,OAAA,oBAAW,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,sBAAsB,QAAA,EAAA,OAAA,EAAQ;AAAA,KAAA,EAC3D,CAAA;AAAA,oBAEA,GAAA,CAAC,KAAA,EAAA,EAAI,GAAA,EAAK,SAAA,EAAW,SAAA,EAAU,mBAAA,EAC5B,QAAA,EAAA,QAAA,CAAS,MAAA,KAAW,CAAA,mBACnB,GAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,kBAAA,EAAmB,8BAAgB,CAAA,GAEhD,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,qBAAM,GAAA,CAAC,WAAA,EAAA,EAAuB,IAAA,EAAM,CAAA,EAAA,EAAZ,CAAA,CAAE,EAAa,CAAE,CAAA,EAE3D,CAAA;AAAA,IAEC,4BACC,IAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAA,EAAsB,UAAU,YAAA,EAC9C,QAAA,EAAA;AAAA,sBAAA,GAAA;AAAA,QAAC,UAAA;AAAA,QAAA;AAAA,UACC,GAAA,EAAK,QAAA;AAAA,UACL,SAAA,EAAU,kBAAA;AAAA,UACV,WAAA,EAAa,OAAO,eAAA,GAAa,qBAAA;AAAA,UACjC,QAAA,EAAU,IAAA;AAAA,UACV,IAAA,EAAM,CAAA;AAAA,UACN,SAAA,EAAW,CAAC,CAAA,KAAM;AAChB,YAAA,IAAI,CAAA,CAAE,GAAA,KAAQ,OAAA,IAAW,CAAC,EAAE,QAAA,EAAU;AACpC,cAAA,CAAA,CAAE,cAAA,EAAe;AACjB,cAAA,YAAA,CAAa,CAA+B,CAAA;AAAA,YAC9C;AAAA,UACF;AAAA;AAAA,OACF;AAAA,sBACA,GAAA,CAAC,YAAO,IAAA,EAAK,QAAA,EAAS,WAAU,iBAAA,EAAkB,QAAA,EAAU,MAAM,QAAA,EAAA,MAAA,EAElE;AAAA,KAAA,EACF;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAEA,SAAS,WAAA,CAAY,EAAE,IAAA,EAAK,EAA4B;AACtD,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,IAAA,CAAK,EAAE,CAAA;AAC/B,EAAA,4BACG,KAAA,EAAA,EAAI,SAAA,EAAW,CAAA,iBAAA,EAAoB,IAAA,CAAK,IAAI,CAAA,CAAA,EAC3C,QAAA,EAAA;AAAA,oBAAA,IAAA,CAAC,KAAA,EAAA,EAAI,WAAU,eAAA,EACb,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,iBAAA,EAAmB,QAAA,EAAA,IAAA,CAAK,MAAA,EAAO,CAAA;AAAA,sBAC/C,GAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,eAAA,EAAiB,QAAA,EAAA,IAAA,EAAK;AAAA,KAAA,EACxC,CAAA;AAAA,oBACA,GAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,eAAA,EAAiB,eAAK,IAAA,EAAK,CAAA;AAAA,IACzC,KAAK,MAAA,KAAW,MAAA,oBACf,IAAA,CAAC,SAAA,EAAA,EAAQ,WAAU,iBAAA,EACjB,QAAA,EAAA;AAAA,sBAAA,GAAA,CAAC,aAAQ,QAAA,EAAA,SAAA,EAAO,CAAA;AAAA,sBAChB,GAAA,CAAC,KAAA,EAAA,EAAK,QAAA,EAAA,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA,EAAE;AAAA,KAAA,EAC9B;AAAA,GAAA,EAEJ,CAAA;AAEJ;AAEA,SAAS,WAAW,EAAA,EAAoB;AACtC,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,CAAK,EAAE,CAAA;AACrB,EAAA,MAAM,EAAA,GAAK,EAAE,QAAA,EAAS,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAClD,EAAA,MAAM,EAAA,GAAK,EAAE,UAAA,EAAW,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpD,EAAA,MAAM,EAAA,GAAK,EAAE,UAAA,EAAW,CAAE,UAAS,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AACpD,EAAA,OAAO,CAAA,EAAG,EAAE,CAAA,CAAA,EAAI,EAAE,IAAI,EAAE,CAAA,CAAA;AAC1B;AAEA,SAAS,SAAS,CAAA,EAAoB;AACpC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,CAAA,EAAG,IAAA,EAAM,CAAC,CAAA;AAAA,EAClC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,OAAO,CAAC,CAAA;AAAA,EACjB;AACF;AC3HO,SAAS,WAAA,CAAY,EAAE,CAAA,EAAG,CAAA,EAAG,IAAA,EAAM,QAAQ,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAM,EAAqB;AACzG,EAAA,uBACEA,IAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,CAAC,YAAA,EAAc,SAAA,IAAa,EAAE,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAAA,MACnE,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,IAAA,EAAM,CAAA;AAAA,QACN,GAAA,EAAK,CAAA;AAAA,QACL,aAAA,EAAe,MAAA;AAAA,QACf,SAAA,EAAW,uBAAA;AAAA,QACX,GAAG;AAAA,OACL;AAAA,MAEA,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,KAAA,EAAM,IAAA,EAAK,MAAA,EAAO,MAAK,OAAA,EAAQ,WAAA,EAAY,aAAA,EAAW,IAAA,EACzD,QAAA,kBAAAA,GAAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,CAAA,EAAE,+CAAA;AAAA,YACF,IAAA,EAAM,KAAA;AAAA,YACN,MAAA,EAAO,OAAA;AAAA,YACP,WAAA,EAAY;AAAA;AAAA,SACd,EACF,CAAA;AAAA,QACC,wBACCD,IAAAA;AAAA,UAAC,MAAA;AAAA,UAAA;AAAA,YACC,SAAA,EAAU,iBAAA;AAAA,YACV,KAAA,EAAO,EAAE,UAAA,EAAY,KAAA,EAAM;AAAA,YAE1B,QAAA,EAAA;AAAA,cAAA,IAAA;AAAA,cACA,MAAA,mBAASA,IAAAA,CAAC,IAAA,EAAA,EAAG,WAAU,oBAAA,EAAqB,QAAA,EAAA;AAAA,gBAAA,QAAA;AAAA,gBAAI;AAAA,eAAA,EAAO,CAAA,GAAQ;AAAA;AAAA;AAAA;AAClE;AAAA;AAAA,GAEJ;AAEJ;AC3BO,SAAS,sBAAA,CAAuB;AAAA,EACrC,CAAA;AAAA,EACA,CAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA,GAAQ,SAAA;AAAA,EACR,QAAA,GAAW,IAAA;AAAA,EACX,SAAA;AAAA,EACA;AACF,CAAA,EAAgC;AAC9B,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAI,SAAS,KAAK,CAAA;AAE5C,EAAAE,UAAU,MAAM;AACd,IAAA,IAAI,aAAa,MAAA,EAAW;AAC5B,IAAA,UAAA,CAAW,IAAI,CAAA;AACf,IAAA,MAAM,IAAI,UAAA,CAAW,MAAM,UAAA,CAAW,KAAK,GAAG,QAAQ,CAAA;AACtD,IAAA,OAAO,MAAM,aAAa,CAAC,CAAA;AAAA,EAC7B,CAAA,EAAG,CAAC,QAAA,EAAU,QAAQ,CAAC,CAAA;AAEvB,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AAErB,EAAA,uBACED,GAAAA;AAAA,IAAC,KAAA;AAAA,IAAA;AAAA,MACC,SAAA,EAAW,CAAC,eAAA,EAAiB,SAAA,IAAa,EAAE,EAAE,MAAA,CAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAAA,MACtE,KAAA,EAAO;AAAA,QACL,QAAA,EAAU,UAAA;AAAA,QACV,MAAM,CAAA,GAAI,CAAA;AAAA,QACV,KAAK,CAAA,GAAI,CAAA;AAAA,QACT,OAAO,KAAA,GAAQ,CAAA;AAAA,QACf,QAAQ,MAAA,GAAS,CAAA;AAAA,QACjB,YAAA,EAAc,CAAA;AAAA,QACd,SAAA,EAAW,CAAA,UAAA,EAAa,KAAK,CAAA,WAAA,EAAc,KAAK,CAAA,EAAA,CAAA;AAAA,QAChD,aAAA,EAAe,MAAA;AAAA,QACf,SAAA,EAAW,aAAa,QAAQ,CAAA,oBAAA,CAAA;AAAA,QAChC,GAAG;AAAA;AACL;AAAA,GACF;AAEJ;ACvCO,SAAS,aAAA,CAAc;AAAA,EAC5B,OAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,YAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAAuB;AACrB,EAAA,MAAM,CAAC,GAAA,EAAK,MAAM,CAAA,GAAIE,SAAc,QAAQ,CAAA;AAE5C,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,uBACEH,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,2BAAA,EAA6B,SAAA,IAAa,EAAE,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EACxF,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,YAAO,IAAA,EAAK,QAAA,EAAS,WAAU,kBAAA,EAAmB,OAAA,EAAS,SAAS,QAAA,EAAA,sBAAA,EAErE,CAAA;AAAA,sBACAD,IAAAA,CAAC,GAAA,EAAA,EAAE,SAAA,EAAU,iBAAA,EAAkB,QAAA,EAAA;AAAA,QAAA,kDAAA;AAAA,wBACmBC,GAAAA,CAAC,QAAA,EAAA,EAAO,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,QAAS;AAAA,OAAA,EAC/E;AAAA,KAAA,EACF,CAAA;AAAA,EAEJ;AAEA,EAAA,MAAM,GAAA,GAAM,aAAA,CAAc,OAAA,EAAS,YAAY,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,iBAAiB,OAAO,CAAA;AACvC,EAAA,MAAM,IAAA,GAAO,gBAAgB,OAAO,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,iBAAiB,GAAG,CAAA;AAEnC,EAAA,uBACED,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAW,CAAC,6BAAA,EAA+B,SAAA,IAAa,EAAE,CAAA,CAAE,OAAO,OAAO,CAAA,CAAE,IAAA,CAAK,GAAG,GAAG,KAAA,EAC1F,QAAA,EAAA;AAAA,oBAAAA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,mBAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,KAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,wBAAAC,GAAAA,CAAC,YAAO,QAAA,EAAA,SAAA,EAAO,CAAA;AAAA,wBACfD,IAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,eAAA,EAAgB,QAAA,EAAA;AAAA,UAAA,UAAA;AAAA,0BACtBC,GAAAA,CAAC,MAAA,EAAA,EAAM,QAAA,EAAA,OAAA,CAAQ,EAAA,EAAG,CAAA;AAAA,UAAO,cAAA;AAAA,0BAASD,KAAC,MAAA,EAAA,EAAM,QAAA,EAAA;AAAA,YAAA,OAAA,CAAQ,OAAA;AAAA,YAAQ;AAAA,WAAA,EAAC;AAAA,SAAA,EACpE;AAAA,OAAA,EACF,CAAA;AAAA,sBACAA,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,2BAAA,EACZ,QAAA,EAAA;AAAA,QAAA,MAAA,oBAAUC,GAAAA,CAAC,MAAA,EAAA,EAAK,SAAA,EAAU,qBAAqB,QAAA,EAAA,MAAA,EAAO,CAAA;AAAA,wBACvDA,IAAC,QAAA,EAAA,EAAO,IAAA,EAAK,UAAS,SAAA,EAAU,iBAAA,EAAkB,OAAA,EAAS,MAAA,EAAQ,QAAA,EAAA,MAAA,EAEnE;AAAA,OAAA,EACF;AAAA,KAAA,EACF,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,iBAAA,EAAkB,MAAK,SAAA,EACpC,QAAA,EAAA;AAAA,sBAAAC,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,UAAS,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,cAAA,EAAY,CAAA;AAAA,sBACjEA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,OAAM,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,KAAA,EAAG,CAAA;AAAA,sBACrDA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,QAAO,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,MAAA,EAAI,CAAA;AAAA,sBACvDA,IAAC,SAAA,EAAA,EAAU,GAAA,EAAI,QAAO,MAAA,EAAQ,GAAA,EAAK,QAAgB,QAAA,EAAA,aAAA,EAAW;AAAA,KAAA,EAChE,CAAA;AAAA,oBAEAD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,kBAAA,EACZ,QAAA,EAAA;AAAA,MAAA,GAAA,KAAQ,4BACPC,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,8EAAA;AAAA,UACN,KAAA,EAAO,MAAA;AAAA,UACP,SAAA,EAAS;AAAA;AAAA,OACX;AAAA,MAED,GAAA,KAAQ,yBAASA,GAAAA,CAAC,WAAQ,KAAA,EAAM,kDAAA,EAAmD,OAAO,GAAA,EAAK,CAAA;AAAA,MAC/F,GAAA,KAAQ,0BACPA,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,qDAAA;AAAA,UACN,KAAA,EAAO,IAAA,CAAK,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC;AAAA;AAAA,OACvC;AAAA,MAED,GAAA,KAAQ,0BACPA,GAAAA;AAAA,QAAC,OAAA;AAAA,QAAA;AAAA,UACC,KAAA,EAAM,2DAAA;AAAA,UACN,KAAA,EAAO,IAAA;AAAA,UACP,SAAA,EAAS;AAAA;AAAA;AACX,KAAA,EAEJ;AAAA,GAAA,EACF,CAAA;AAEJ;AAEA,SAAS,UAAU,EAAE,GAAA,EAAK,MAAA,EAAQ,MAAA,EAAQ,UAAS,EAAmF;AACpI,EAAA,uBACEA,GAAAA;AAAA,IAAC,QAAA;AAAA,IAAA;AAAA,MACC,IAAA,EAAK,QAAA;AAAA,MACL,IAAA,EAAK,KAAA;AAAA,MACL,iBAAe,GAAA,KAAQ,MAAA;AAAA,MACvB,SAAA,EAAW,CAAA,cAAA,EAAiB,GAAA,KAAQ,MAAA,GAAS,eAAe,EAAE,CAAA,CAAA;AAAA,MAC9D,OAAA,EAAS,MAAM,MAAA,CAAO,GAAG,CAAA;AAAA,MAExB;AAAA;AAAA,GACH;AAEJ;AAEA,SAAS,OAAA,CAAQ,EAAE,KAAA,EAAO,KAAA,EAAO,WAAU,EAA0D;AACnG,EAAA,MAAM,CAAC,MAAA,EAAQ,SAAS,CAAA,GAAIE,SAAS,KAAK,CAAA;AAC1C,EAAA,MAAM,OAAO,YAAY;AACvB,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,CAAU,SAAA,CAAU,SAAA,CAAU,KAAK,CAAA;AACzC,MAAA,SAAA,CAAU,IAAI,CAAA;AACd,MAAA,UAAA,CAAW,MAAM,SAAA,CAAU,KAAK,CAAA,EAAG,IAAI,CAAA;AAAA,IACzC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF,CAAA;AACA,EAAA,uBACEH,KAAC,KAAA,EAAA,EACC,QAAA,EAAA;AAAA,oBAAAC,GAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,wBAAA,EAA0B,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,oBAC/CD,IAAAA,CAAC,KAAA,EAAA,EAAI,SAAA,EAAU,iBAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,GAAAA,CAAC,SAAI,SAAA,EAAW,CAAA,cAAA,EAAiB,YAAY,WAAA,GAAc,EAAE,IAAK,QAAA,EAAA,KAAA,EAAM,CAAA;AAAA,sBACxEA,GAAAA,CAAC,QAAA,EAAA,EAAO,IAAA,EAAK,QAAA,EAAS,SAAA,EAAU,qBAAA,EAAsB,OAAA,EAAS,IAAA,EAC5D,QAAA,EAAA,MAAA,GAAS,QAAA,GAAW,MAAA,EACvB;AAAA,KAAA,EACF;AAAA,GAAA,EACF,CAAA;AAEJ;AAQO,SAAS,iBAAiB,GAAA,EAAqB;AACpD,EAAA,OAAO;AAAA,IACL,CAAA,6EAAA,CAAA;AAAA,IACA,CAAA,mFAAA,CAAA;AAAA,IACA,CAAA,4EAAA,CAAA;AAAA,IACA,CAAA,sEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,0EAAA,CAAA;AAAA,IACA,KAAK,GAAG,CAAA,CAAA;AAAA,IACR,CAAA,CAAA;AAAA,IACA,CAAA,oEAAA,CAAA;AAAA,IACA,8BAA8B,GAAG,CAAA,CAAA,CAAA;AAAA,IACjC,CAAA,CAAA;AAAA,IACA,CAAA,2EAAA,CAAA;AAAA,IACA,CAAA,+EAAA,CAAA;AAAA,IACA,CAAA,KAAA,CAAA;AAAA,IACA,CAAA,kFAAA,CAAA;AAAA,IACA,CAAA,sFAAA,CAAA;AAAA,IACA,CAAA,8EAAA,CAAA;AAAA,IACA,CAAA,wEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,2EAAA,CAAA;AAAA,IACA,CAAA,6FAAA,CAAA;AAAA,IACA,sBAAsB,GAAG,CAAA,OAAA,CAAA;AAAA,IACzB,sBAAsB,GAAG,CAAA,yBAAA;AAAA,GAC3B,CAAE,KAAK,IAAI,CAAA;AACb;AAGA,SAAS,gBAAgB,OAAA,EAAoC;AAC3D,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,GACd,CAAA,EAAG,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,GACpD,kBAAA;AACN,EAAA,MAAM,KAAA,GAAQ,GAAG,IAAI,CAAA,aAAA,EAAgB,QAAQ,EAAE,CAAA,aAAA,EAAgB,QAAQ,KAAK,CAAA,CAAA;AAC5E,EAAA,MAAM,MAAA,GAAS,GAAG,IAAI,CAAA,aAAA,EAAgB,QAAQ,EAAE,CAAA,cAAA,EAAiB,QAAQ,KAAK,CAAA,CAAA;AAC9E,EAAA,OAAO;AAAA,IACL,CAAA,6DAAA,CAAA;AAAA,IACA,YAAY,MAAM,CAAA,CAAA,CAAA;AAAA,IAClB,CAAA,CAAA;AAAA,IACA,CAAA,sDAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,iEAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,sCAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,qDAAA,CAAA;AAAA,IACA,CAAA,CAAA;AAAA,IACA,CAAA,sBAAA,CAAA;AAAA,IACA,iBAAiB,KAAK,CAAA,IAAA,CAAA;AAAA,IACtB,CAAA,wCAAA,CAAA;AAAA,IACA,CAAA,sJAAA;AAAA,GACF,CAAE,KAAK,IAAI,CAAA;AACb","file":"chunk-HSI5RVF4.js","sourcesContent":["import { type CSSProperties, type ReactNode, useEffect, useRef } from \"react\";\n\nexport type AgentActivity = {\n  id: string;\n  /** Wall-clock timestamp; component formats it. */\n  at: number;\n  /** \"tool\" for MCP tool invocations, \"message\" for chat, \"info\" for status. */\n  kind: \"tool\" | \"message\" | \"info\" | \"error\";\n  /** Short label, e.g. \"whiteboard_add_sticky\" or \"Agent\". */\n  source: string;\n  /** Body text. */\n  text: string;\n  /** Optional structured payload, rendered as collapsed JSON. */\n  detail?: unknown;\n};\n\nexport type AgentPanelProps = {\n  /** The agent's identity (name + color appears in the header). */\n  agent?: { name?: string; color?: string };\n  /** Activity stream. Most recent at the end. */\n  activity: AgentActivity[];\n  /** Optional chat composer — pass an onSubmit to enable. */\n  onSubmit?: (message: string) => void;\n  /** Disabled while a request is in flight. */\n  busy?: boolean;\n  /** Right-rail header actions. */\n  actions?: ReactNode;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentPanel — sidebar showing the agent's identity, a tool-and-chat log,\n * and an optional input composer. Pure presentational: hosts feed it the\n * activity stream from their own state (typically the MCP transport log).\n */\nexport function AgentPanel({ agent, activity, onSubmit, busy, actions, className, style }: AgentPanelProps) {\n  const scrollRef = useRef<HTMLDivElement>(null);\n  const inputRef = useRef<HTMLTextAreaElement>(null);\n\n  useEffect(() => {\n    const el = scrollRef.current;\n    if (!el) return;\n    el.scrollTop = el.scrollHeight;\n  }, [activity.length]);\n\n  const handleSubmit = (e: React.FormEvent) => {\n    e.preventDefault();\n    const value = inputRef.current?.value.trim();\n    if (!value || !onSubmit) return;\n    onSubmit(value);\n    if (inputRef.current) inputRef.current.value = \"\";\n  };\n\n  const color = agent?.color ?? \"#a855f7\";\n  const name = agent?.name ?? \"Agent\";\n\n  return (\n    <div className={[\"fai-panel\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n      <header className=\"fai-panel__header\">\n        <div\n          className=\"fai-panel__avatar\"\n          style={{ background: color }}\n          aria-hidden\n        >\n          {name.slice(0, 1)}\n        </div>\n        <div className=\"fai-panel__title\">\n          <strong>{name}</strong>\n          <span className=\"fai-panel__subtitle\">\n            {busy ? \"Working…\" : `${activity.length} event${activity.length === 1 ? \"\" : \"s\"}`}\n          </span>\n        </div>\n        {actions && <div className=\"fai-panel__actions\">{actions}</div>}\n      </header>\n\n      <div ref={scrollRef} className=\"fai-panel__stream\">\n        {activity.length === 0 ? (\n          <p className=\"fai-panel__empty\">No activity yet.</p>\n        ) : (\n          activity.map((a) => <ActivityRow key={a.id} item={a} />)\n        )}\n      </div>\n\n      {onSubmit && (\n        <form className=\"fai-panel__composer\" onSubmit={handleSubmit}>\n          <textarea\n            ref={inputRef}\n            className=\"fai-panel__input\"\n            placeholder={busy ? \"Working…\" : \"Ask the agent…\"}\n            disabled={busy}\n            rows={2}\n            onKeyDown={(e) => {\n              if (e.key === \"Enter\" && !e.shiftKey) {\n                e.preventDefault();\n                handleSubmit(e as unknown as React.FormEvent);\n              }\n            }}\n          />\n          <button type=\"submit\" className=\"fai-panel__send\" disabled={busy}>\n            Send\n          </button>\n        </form>\n      )}\n    </div>\n  );\n}\n\nfunction ActivityRow({ item }: { item: AgentActivity }) {\n  const time = formatTime(item.at);\n  return (\n    <div className={`fai-row fai-row--${item.kind}`}>\n      <div className=\"fai-row__meta\">\n        <span className=\"fai-row__source\">{item.source}</span>\n        <span className=\"fai-row__time\">{time}</span>\n      </div>\n      <div className=\"fai-row__text\">{item.text}</div>\n      {item.detail !== undefined && (\n        <details className=\"fai-row__detail\">\n          <summary>details</summary>\n          <pre>{safeJson(item.detail)}</pre>\n        </details>\n      )}\n    </div>\n  );\n}\n\nfunction formatTime(at: number): string {\n  const d = new Date(at);\n  const hh = d.getHours().toString().padStart(2, \"0\");\n  const mm = d.getMinutes().toString().padStart(2, \"0\");\n  const ss = d.getSeconds().toString().padStart(2, \"0\");\n  return `${hh}:${mm}:${ss}`;\n}\n\nfunction safeJson(v: unknown): string {\n  try {\n    return JSON.stringify(v, null, 2);\n  } catch {\n    return String(v);\n  }\n}\n","import type { CSSProperties } from \"react\";\n\nexport type AgentCursorProps = {\n  x: number;\n  y: number;\n  name?: string;\n  color?: string;\n  /** Optional caption shown under the name (e.g. current tool). */\n  status?: string;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentCursor — on-canvas presence marker for the agent. Drop it inside\n * (or alongside) a fancy-whiteboard <Board> at screen coords matching\n * the agent's reported position.\n */\nexport function AgentCursor({ x, y, name, color = \"#a855f7\", status, className, style }: AgentCursorProps) {\n  return (\n    <div\n      className={[\"fai-cursor\", className ?? \"\"].filter(Boolean).join(\" \")}\n      style={{\n        position: \"absolute\",\n        left: x,\n        top: y,\n        pointerEvents: \"none\",\n        transform: \"translate(-2px, -2px)\",\n        ...style,\n      }}\n    >\n      <svg width=\"22\" height=\"22\" viewBox=\"0 0 22 22\" aria-hidden>\n        <path\n          d=\"M2 2 L2 17 L7 13 L10 19 L12 18 L9 12 L15 12 Z\"\n          fill={color}\n          stroke=\"white\"\n          strokeWidth=\"1.2\"\n        />\n      </svg>\n      {name && (\n        <span\n          className=\"fai-cursor__tag\"\n          style={{ background: color }}\n        >\n          {name}\n          {status ? <em className=\"fai-cursor__status\"> · {status}</em> : null}\n        </span>\n      )}\n    </div>\n  );\n}\n","import { type CSSProperties, useEffect, useState } from \"react\";\n\nexport type AgentActivityHighlightProps = {\n  /** Bounds of the highlighted item in the parent's coord system. */\n  x: number;\n  y: number;\n  width: number;\n  height: number;\n  /** Trigger token — change it (e.g. set to Date.now()) to re-fire the pulse. */\n  pulseKey?: string | number;\n  /** Highlight tint. */\n  color?: string;\n  /** Pulse duration in ms. Defaults 1200. */\n  duration?: number;\n  className?: string;\n  style?: CSSProperties;\n};\n\n/**\n * AgentActivityHighlight — short pulsing outline that flashes around an\n * item the agent just touched. Position the parent so this can be placed\n * absolutely matching the item's bounds.\n */\nexport function AgentActivityHighlight({\n  x,\n  y,\n  width,\n  height,\n  pulseKey,\n  color = \"#a855f7\",\n  duration = 1200,\n  className,\n  style,\n}: AgentActivityHighlightProps) {\n  const [visible, setVisible] = useState(false);\n\n  useEffect(() => {\n    if (pulseKey === undefined) return;\n    setVisible(true);\n    const t = setTimeout(() => setVisible(false), duration);\n    return () => clearTimeout(t);\n  }, [pulseKey, duration]);\n\n  if (!visible) return null;\n\n  return (\n    <div\n      className={[\"fai-highlight\", className ?? \"\"].filter(Boolean).join(\" \")}\n      style={{\n        position: \"absolute\",\n        left: x - 4,\n        top: y - 4,\n        width: width + 8,\n        height: height + 8,\n        borderRadius: 8,\n        boxShadow: `0 0 0 2px ${color}, 0 0 16px ${color}66`,\n        pointerEvents: \"none\",\n        animation: `fai-pulse ${duration}ms ease-out forwards`,\n        ...style,\n      }}\n    />\n  );\n}\n","import { type CSSProperties, useState } from \"react\";\nimport type { SessionDescriptor } from \"../../sharing/token\";\nimport { buildShareConfig, buildShareUrl } from \"../../sharing/token\";\n\nexport type ShareControlsProps = {\n  /** The active session, or null when not sharing yet. */\n  session: SessionDescriptor | null;\n  onStart: () => void;\n  onStop: () => void;\n  /** Optional connection-state badge text. */\n  status?: string;\n  /** Override the URL base used in the share URL. */\n  shareBaseUrl?: string;\n  className?: string;\n  style?: CSSProperties;\n};\n\ntype Tab = \"prompt\" | \"url\" | \"json\" | \"curl\";\n\n/**\n * ShareControls — the host-facing UI for turning sharing on/off and\n * surfacing the resulting connection details (URL / JSON / cURL).\n */\nexport function ShareControls({\n  session,\n  onStart,\n  onStop,\n  status,\n  shareBaseUrl,\n  className,\n  style,\n}: ShareControlsProps) {\n  const [tab, setTab] = useState<Tab>(\"prompt\");\n\n  if (!session) {\n    return (\n      <div className={[\"fai-share fai-share--idle\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n        <button type=\"button\" className=\"fai-share__start\" onClick={onStart}>\n          Start shared session\n        </button>\n        <p className=\"fai-share__hint\">\n          Generates a session id + secret token. Hand the <strong>Agent prompt</strong> to an AI agent, share the URL with humans, or give the JSON config to an MCP-capable client.\n        </p>\n      </div>\n    );\n  }\n\n  const url = buildShareUrl(session, shareBaseUrl);\n  const config = buildShareConfig(session);\n  const curl = buildCurlRecipe(session);\n  const prompt = buildAgentPrompt(url);\n\n  return (\n    <div className={[\"fai-share fai-share--active\", className ?? \"\"].filter(Boolean).join(\" \")} style={style}>\n      <div className=\"fai-share__header\">\n        <div>\n          <strong>Sharing</strong>\n          <span className=\"fai-share__id\">\n            session <code>{session.id}</code> · token <code>{session.display}…</code>\n          </span>\n        </div>\n        <div className=\"fai-share__header-actions\">\n          {status && <span className=\"fai-share__status\">{status}</span>}\n          <button type=\"button\" className=\"fai-share__stop\" onClick={onStop}>\n            Stop\n          </button>\n        </div>\n      </div>\n\n      <div className=\"fai-share__tabs\" role=\"tablist\">\n        <TabButton tab=\"prompt\" active={tab} setTab={setTab}>Agent prompt</TabButton>\n        <TabButton tab=\"url\" active={tab} setTab={setTab}>URL</TabButton>\n        <TabButton tab=\"json\" active={tab} setTab={setTab}>JSON</TabButton>\n        <TabButton tab=\"curl\" active={tab} setTab={setTab}>cURL recipe</TabButton>\n      </div>\n\n      <div className=\"fai-share__panel\">\n        {tab === \"prompt\" && (\n          <CopyBox\n            label=\"Paste this straight into an AI agent — it connects over MCP, no browser\"\n            value={prompt}\n            multiline\n          />\n        )}\n        {tab === \"url\" && <CopyBox label=\"Open this URL in another tab to join the session\" value={url} />}\n        {tab === \"json\" && (\n          <CopyBox\n            label=\"Paste into Claude Desktop / Cline MCP server config\"\n            value={JSON.stringify(config, null, 2)}\n          />\n        )}\n        {tab === \"curl\" && (\n          <CopyBox\n            label=\"Connect from a terminal (verifies the relay is reachable)\"\n            value={curl}\n            multiline\n          />\n        )}\n      </div>\n    </div>\n  );\n}\n\nfunction TabButton({ tab, active, setTab, children }: { tab: Tab; active: Tab; setTab: (t: Tab) => void; children: React.ReactNode }) {\n  return (\n    <button\n      type=\"button\"\n      role=\"tab\"\n      aria-selected={tab === active}\n      className={`fai-share__tab${tab === active ? \" is-active\" : \"\"}`}\n      onClick={() => setTab(tab)}\n    >\n      {children}\n    </button>\n  );\n}\n\nfunction CopyBox({ label, value, multiline }: { label: string; value: string; multiline?: boolean }) {\n  const [copied, setCopied] = useState(false);\n  const copy = async () => {\n    try {\n      await navigator.clipboard.writeText(value);\n      setCopied(true);\n      setTimeout(() => setCopied(false), 1200);\n    } catch {\n      // ignore\n    }\n  };\n  return (\n    <div>\n      <div className=\"fai-share__panel-label\">{label}</div>\n      <div className=\"fai-share__copy\">\n        <pre className={`fai-share__pre${multiline ? \" is-multi\" : \"\"}`}>{value}</pre>\n        <button type=\"button\" className=\"fai-share__copy-btn\" onClick={copy}>\n          {copied ? \"Copied\" : \"Copy\"}\n        </button>\n      </div>\n    </div>\n  );\n}\n\n/**\n * Build a copy-paste natural-language prompt to hand directly to an AI agent.\n * Agents handed a bare URL tend to try to *open it in a browser* — this spells\n * out that the link is a live MCP co-browsing session it should drive over MCP\n * tools (via the zero-install relay client), never visit.\n */\nexport function buildAgentPrompt(url: string): string {\n  return [\n    `You're joining a live Human+ co-browsing session on a web app. This is an MCP`,\n    `(Model Context Protocol) session — NOT a website to visit. Do NOT open the URL`,\n    `in a browser and do NOT use any browser/Playwright tool. You drive the real,`,\n    `running app through MCP tools while a human watches and can take over.`,\n    ``,\n    `Session link (carries the session id + token — treat it as a secret):`,\n    `  ${url}`,\n    ``,\n    `Connect by running the relay client as an MCP server (zero install):`,\n    `  npx -y mcp-relay-client \"${url}\"`,\n    ``,\n    `That exposes the app's own tools (e.g. page_describe, page_read, nav_visit,`,\n    `page_click, page_set_field, page_submit, plus surface tools like whiteboard_*).`,\n    `Then:`,\n    `  1. Call page_describe first to see the current page and its interactive handles.`,\n    `  2. Act only on the STABLE HANDLES the tools return — never guess DOM selectors.`,\n    `  3. Navigate with nav_visit, type with page_set_field, click with page_click.`,\n    `     Submits and destructive clicks are staged for the human to confirm.`,\n    ``,\n    `If you can't register an MCP server but can run a shell, drive it directly:`,\n    `  curl -O https://raw.githubusercontent.com/Particle-Academy/mcp-relay-client/main/connect.sh`,\n    `  bash connect.sh \"${url}\" tools`,\n    `  bash connect.sh \"${url}\" call page_describe '{}'`,\n  ].join(\"\\n\");\n}\n\n/** Build a copy-paste cURL recipe for connecting an external MCP client. */\nfunction buildCurlRecipe(session: SessionDescriptor): string {\n  const base =\n    typeof window !== \"undefined\"\n      ? `${window.location.protocol}//${window.location.host}`\n      : \"http://localhost\";\n  const inbox = `${base}/agent-relay/${session.id}/inbox?token=${session.token}`;\n  const events = `${base}/agent-relay/${session.id}/events?token=${session.token}`;\n  return [\n    `# 1) In one terminal, subscribe to server-pushed frames (SSE)`,\n    `curl -N \"${events}\"`,\n    ``,\n    `# 2) In another terminal, send an initialize handshake`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\",\"params\":{}}'`,\n    ``,\n    `# 3) List the tools the bridge exposes`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/list\"}'`,\n    ``,\n    `# 4) Add a sticky note`,\n    `curl -X POST \"${inbox}\" \\\\`,\n    `  -H 'content-type: application/json' \\\\`,\n    `  -d '{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"tools/call\",\"params\":{\"name\":\"whiteboard_add_sticky\",\"arguments\":{\"x\":300,\"y\":300,\"text\":\"hello from curl\"}}}'`,\n  ].join(\"\\n\");\n}\n"]}

package/dist/{chunk-FF5F526J.js → chunk-LQZKRBWR.js}

@@ -1,6 +1,6 @@
-import { wrapToolWithActivity } from './chunk-ULJL53DL.js';
-import { ensureUndoToolsRegistered, pushUndoEntry } from './chunk-KJ5AOOV7.js';
-import { textResult, errorResult } from './chunk-4KAIV6OD.js';
+import { ensureUndoToolsRegistered, pushUndoEntry } from './chunk-CT3LRNH7.js';
+import { wrapToolWithActivity } from './chunk-2VENWGLZ.js';
+import { textResult, errorResult } from './chunk-DF3PLL2E.js';
 import { treeReducer, autoApply, childrenOf, appendOrder, descendantsOf } from '@particle-academy/fancy-doc-commons';
 
 var DEFAULT_AGENT = { id: "agent", name: "Agent", color: "#a855f7" };
@@ -241,5 +241,5 @@ function registerDocBridge(host, options) {
 }
 
 export { registerDocBridge };
-//# sourceMappingURL=chunk-FF5F526J.js.map
-//# sourceMappingURL=chunk-FF5F526J.js.map
+//# sourceMappingURL=chunk-LQZKRBWR.js.map
+//# sourceMappingURL=chunk-LQZKRBWR.js.map