@rubytech/create-sitedesk-code 0.1.401 → 0.1.404

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/commands/make-media.md

@@ -4,10 +4,10 @@ argument-hint: <images-dir-or-zip> [website-url] [social-links] [notes…]
 allowed-tools: Bash, Read, Write, Edit, Glob, Grep, WebFetch, Skill, AskUserQuestion
 ---
 
-Run the `make-media` skill end-to-end on the inputs below.
+Build the media deliverable end-to-end on the inputs below, orchestrating the steps yourself.
 
 Inputs: $ARGUMENTS
 
-Follow the orchestrator's routing: `brand-extract` (website + logo + tokens + company facts) → ask the operator the intake questions for every field still missing → `microsite` (build the single-page site into `<output>/site/`) → `socials` in `microsite` mode (render the Open Graph + social tiles, gallery and captions into `<output>/site/socials/`).
+Route: `web-designer:brand-extract` (website + logo + tokens + company facts) → ask the operator for every field still missing → `microsite` (drives `web-designer:web-design` with the construction framing to build the single-page site into `<output>/site/`) → `socials` in `microsite` mode (renders the Open Graph + social tiles, gallery and captions into `<output>/site/socials/` via `web-designer:socials`).
 
 Never invent a fact. Where the website and the operator's notes do not supply a value, ask for it before building. Stop at the finished site + social bundle and report the paths.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/microsite/SKILL.md

@@ -1,7 +1,8 @@
 ---
 name: microsite
-description: Build a finished, scrollable single-page marketing micro-site for a small business from the placeholder template, the brand pack, and the operator's curated photos and copy. Produces a self-contained site/ directory — index.html (hero rotator, story, services, founder section, testimonial, "by the numbers", FAQ, CTA, footer, back-to-top) plus an llms.txt — with structured data (JSON-LD) for answer engines. Use after brand-extract, or directly when the brand pack and copy already exist. Trigger phrases include "build the microsite", "lay out the landing page", "turn this brand + photos into a one-page site".
+description: Build SiteDesk's construction micro-site by driving the shared web-designer builder with construction framing. Runs web-designer:web-design against the brand pack, the operator's copy and their curated photos, supplying the construction schema, UK geography, and the trade-shaped section labels as inputs. Owns no template — the single source is web-designer's. Use after brand-extract, or directly when the brand pack and copy already exist. Trigger phrases include "build the microsite", "lay out the landing page", "turn this brand + photos into a one-page site".
 allowed-tools:
+  - Skill
   - Bash
   - Read
   - Write
@@ -12,77 +13,53 @@ allowed-tools:
 
 # microsite
 
-Renders the canonical single-page site from `templates/index.html` and
-`templates/llms.txt` by substituting every `{{ PLACEHOLDER }}`. The template is
-the spec: copy it, fill it, never rebuild it from scratch from this prose.
-
-## Canonical template — the only starting point
-
-`templates/index.html` ships with this skill. It encodes the entire site —
-structure, CSS, the JS hero rotator + drawer + sticky sub-nav + back-to-top, the
-responsive rules, and the JSON-LD — with every business-specific value as a
-`{{ TOKEN }}`. Copy it to `<output>/site/index.html` and substitute. Do the same
-with `templates/llms.txt`. The full token list and what fills each is in
-[`references/placeholders.md`](references/placeholders.md); the section catalogue
-and the image-naming convention are in [`references/sections.md`](references/sections.md).
-
-A run that hand-builds the HTML from this prose, or starts from a previous
-client's rendered `index.html`, is a defect — it drifts every cycle. Copy the
-canonical and substitute.
-
-## Substitution contract
-
-- After substitution, `grep "{{" site/index.html site/llms.txt` returns **zero**
-  matches. Any surviving `{{ }}` is a bug.
-- Palette tokens come from the brand pack's ten values. `ACCENT_TEXT` is the
-  deepened, legible form of `ACCENT` — not the same value.
-- Copy tokens are written in the plain register (the `plainly` skill): no
-  em-dashes in body text, no inflation vocabulary, no AI-marketing cadence. A
-  real client testimonial is used **verbatim**; never reword it.
-- Never invent a fact to fill a token. If `make-media` did not collect it, go back
-  and ask. An empty contact detail or a guessed year is a defect.
-
-## Images — curate by content, name by convention
-
-The template references images by a fixed convention so the operator can tell
-what each slot is from the filename:
-
-- `hero-01.webp … hero-10.webp` — the 10-slide hero rotator (configurable down;
-  the JS cycles however many `.hero-slide` elements exist).
-- `grid-01.webp … grid-12.webp` — the photo grids.
-- `fullbleed-01.webp` — the full-width intermission image.
-- `founder-portrait.webp`, `founder-avatar.webp` — the person who fronts the firm.
-- `feature-project.webp`, `gift.webp` — the founder section's feature image and
-  any thank-you artefact.
-- `testimonial.webp` — the finished-result image beside the client quote.
-- `logo.png`, `icon.png` — from brand-extract.
-
-Curate by **content, verified by eye**, never by filename. Build a labelled
-contact sheet (≤ 2000px) and look: match each photo to its slot. Lead the hero
-with the strongest finished "arrive here" shot; put the best finished result in
-the testimonial; distribute the rest. A person's photo is founder-only; it never
-goes in the rotator as a landscape crop. Rewrite every `alt` to describe the
-actual photo — the template's alts are exemplar and must not survive as-is if they
-don't match the picture.
-
-### The 2000px rule
-
-Never `Read` an image whose longest edge exceeds 2000px — measure first, preview a
-downscaled `/tmp` copy if larger, delete it. Optimise to webp: body tier ~1300px
-q82; hero tier source-resolution q88; the founder portrait kept tall.
-
-## Verify every page state
-
-Serve `site/` over a local HTTP server and check, at a 1280px desktop and a 390px
-mobile viewport: no horizontal overflow, no broken images, the hero rotates, the
-drawer opens with every link, the sticky sub-nav reveals on scroll, the back-to-top
-appears and works, and both JSON-LD blocks are valid JSON once substituted. Bottom
--align paired images and equal-height cards where the layout calls for it.
-
-## Completion criteria
-
-- `site/index.html` and `site/llms.txt` exist with zero surviving `{{ }}`.
-- Every referenced image resolves; alts describe the real photos.
-- Desktop + mobile verified; hero, drawer, sub-nav, back-to-top all work.
-- JSON-LD (`GeneralContractor`/`LocalBusiness`/the right `SCHEMA_TYPE`, plus
-  `FAQPage`) parses and matches the visible copy.
+SiteDesk's construction micro-site is the shared `web-designer` site with
+construction framing supplied as input. This skill owns **no template**: it drives
+`web-designer:web-design`, which holds the one canonical template, substitution
+contract, image convention, and page-state verification. Do not copy or hand-build
+any HTML here.
+
+## Method
+
+Run `web-designer:web-design` (after `web-designer:brand-extract` has produced the
+brand pack) against the curated photos and the operator's copy. Fill web-design's
+tokens as it specifies, with these SiteDesk construction values for the framing
+tokens it exposes:
+
+**Schema and geography**
+- `SCHEMA_TYPE` — `GeneralContractor`, or `HomeAndConstructionBusiness` for a
+  broader building firm; a narrower schema.org construction subtype when one fits.
+- `COUNTRY_CODE` — `GB`.
+- `PAGE_LANG` — `en-GB`.
+- `COMPANY_NUMBER_LABEL` — `UK company number`.
+
+**Section framing (the seven web-design label tokens)**
+- `NAV_STORY_LABEL` — `Our story`
+- `NAV_OFFER_LABEL` — `What we build`
+- `NAV_HOW_LABEL` — `Our craft`
+- `OFFER_EYEBROW` — `What we build`
+- `HOW_EYEBROW` — `Ground to finish`
+- `OFFER_SECTION_ID` — `build`
+- `HOW_SECTION_ID` — `craft`
+
+**Copy framing** — write the offer block (`BUILD_*`) as what the firm builds, and
+the process block (`CRAFT_*`) as how a job runs ground to finish. The founder
+section and its "latest update" cards read in the trade's voice — a real job, a
+site the firm is on — never invented. Every copy and photo fact is the operator's;
+a fact you cannot source is a gap you flag, not one you make up.
+
+## Verify and report
+
+`web-designer:web-design` owns the completion checks (zero surviving `{{ }}`, every
+image resolves, desktop + mobile render, hero/drawer/sub-nav/back-to-top work, both
+JSON-LD blocks parse). Confirm the built site shows the construction framing — the
+nav reads `Our story` / `What we build` / `Our craft`, and the JSON-LD `@type` is
+the construction schema — then report the built `site/` path and any gaps.
+
+## What this does not do
+
+- It ships no template and no placeholder or section reference — those live in
+  `web-designer:web-design`.
+- It runs no brand extraction or intake of its own — `web-designer:brand-extract`
+  produces the brand pack and the pipeline gathers the copy.
+- It does not deploy, and it does not render social tiles — that is `socials`.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/socials/SKILL.md

@@ -1,133 +1,65 @@
 ---
 name: socials
-description: Render share-ready Open Graph and social tiles plus per-platform captions for a named subject — a brand micro-site, a job's progress, a valuation cycle, or a bespoke topic — with a PII gate for any source that can carry client data. Resolves the subject through a source adapter into candidate images and copy, overlays brand typography, screenshots landscape (1200×628), square (1200×1200) and portrait (1080×1350) PNG tiles via the on-device browser, assembles a gallery and a captions file for all five platforms, and emits a redaction report reconciling every source item. For micro-sites it also wires the site's og:image. Never posts — the bundle is for operator review. Trigger phrases include "social tiles for this job", "og images for the site", "Instagram tiles + captions for <subject>", "social collateral for <business>".
+description: Render share-ready Open Graph and social tiles plus captions for a SiteDesk subject — a brand micro-site, a job's progress, a valuation cycle, or a bespoke topic. The micro-site and bespoke subjects delegate straight to web-designer:socials. The job and valuation subjects are SiteDesk-specific: they read the job's progress from carried job state under a strict money boundary, stage a brand-safe brief, and render it through web-designer:socials in bespoke mode. Never posts — the bundle is for operator review. Trigger phrases include "social tiles for this job", "og images for the site", "valuation-cycle tiles for <job>", "social collateral for <business>".
 allowed-tools:
+  - Skill
   - Bash
   - Read
   - Write
   - Edit
   - Glob
   - Grep
-  - mcp__plugin_browser_browser__browser-render
-  - mcp__plugin_browser_browser__browser-navigate
-  - mcp__plugin_browser_browser__browser-evaluate
-  - mcp__plugin_browser_browser__browser-resize
-  - mcp__plugin_browser_browser__browser-screenshot
-  - mcp__plugin_browser_browser__browser-wait-for
 ---
 
 # socials
 
-One skill, one subject at a time. You take a named **subject**, resolve it through a
-source adapter, and emit a publication bundle: exact-size PNG social tiles, captions
-for all five platforms, a gallery, and — for any subject that can carry client data
-— a redaction report. You **never post**. The bundle is for the operator to review
-and sign off. You ship no business content; every fact is the operator's own data,
-read from the resolved source.
-
-## Inputs
-
-- **subject** — a name (the business, the job, the topic).
-- **mode** — one of `microsite`, `job`, `valuation`, `bespoke`.
-- **material** — the path the adapter reads (a built `site/`, a job folder, or the
-  operator's own photos and notes).
-- **output** — where the bundle lands (for `microsite`, the site's own `site/`).
-
-## 1. Resolve the subject, and echo it
-
-Resolve the subject through its adapter in [`references/sources.md`](references/sources.md)
-to the normalized intermediate (`topic`, headline/sub candidates, copy facts,
-candidate images, `piiBearing`). **Before you render anything, state the resolved
-subject and the source mode back** — e.g. "Resolving job 1737 in `valuation` mode,
-this period's progress." A mis-resolution must be visible here, not discovered in a
-finished tile.
-
-## 2. PII gate (if `piiBearing`)
-
-If the adapter's `piiBearing` is true (`job` and `valuation` always; `bespoke`
-unless the operator declared the material brand-safe), run the gate in
-[`references/pii-strip.md`](references/pii-strip.md) over **every** candidate image
-and **every** copy fact — before any of it reaches a template. Write
-`redaction-report.md` reconciling every source photo and text field as
-*used / redacted / rejected*. If every photo is rejected, stop and ask for a usable
-image; never emit an imageless bundle. **Do not present a bundle without the report.**
-`microsite` skips this step (the site is already published copy).
-
-## 3. Render the tiles (browser plugin, PNG)
-
-1. Build the resolved render page: copy [`templates/og.html`](templates/og.html) to
-   `<output>/og.html` and substitute `{{ CANDIDATES_JSON }}` with the vetted
-   candidate set (`{ key: { img, pos, head, sub }, … }`) plus the scalar tokens
-   (palette, eyebrow, specs, domain, phone). The logo and hero images resolve from
-   the output dir's `images/`.
-2. Serve `<output>/` over a local HTTP server so relative paths and webfonts load
-   (`cd <output> && python3 -m http.server <port>` via `Bash`; `file://` will not
-   load the fonts).
-3. For each tile, drive the on-device browser:
-   - `browser-navigate` to `http://localhost:<port>/og.html?format=F&hero=H`,
-   - `browser-resize` to the exact size — landscape `1200×628`, square `1200×1200`,
-     portrait `1080×1350`,
-   - `browser-evaluate` `document.fonts.ready.then(() => true)` (and a short settle)
-     so the webfonts have landed before capture,
-   - `browser-screenshot` to `<output>/socials/og-F-H.png`.
-   A **person** hero (`isPerson: true`) renders **portrait only** — a landscape or
-   square crop cuts off the head.
-4. `Read` each finished PNG to confirm it rendered: logo legible, copy readable,
-   scrim adequate. A **sub-20KB** file is a blank page (server not running, wrong
-   port, or the page threw) — diagnose before re-running, never ship it.
-
-## 4. Captions — all five platforms, plain register
-
-Build `<output>/social-posts.md` from [`templates/social-posts.md`](templates/social-posts.md):
-one block per tile, with copy for **Instagram, LinkedIn, TikTok, Facebook, and X**.
-Write every line in the plain register (the `plainly` skill): no em-dashes, no
-inflation vocabulary, no "it's not X, it's Y", no rhetorical openers, no emoji faking
-enthusiasm. For a `piiBearing` subject, no caption names the client, the address or
-postcode, any figure, any individual, or any email sender.
-
-## 5. Gallery, and (microsite only) the og:image
-
-Build `<output>/socials.html` from [`templates/socials.html`](templates/socials.html):
-repeat the group block once per tile key. For a **person** hero (`isPerson: true`),
-write only the portrait `<div class="tile">` cell for that key — delete the landscape
-and square cells, since those files are never rendered for a person.
-
-The OG snippet (`<div class="snippet">…</div>`) is **microsite only**. In `microsite`
-mode, keep it, render the tiles into the site's `site/socials/`, and set the site's
-`og:image`/`twitter:image` to `<WEBSITE_URL>socials/og-landscape-main.png` (a true
-1200×628 card beats a raw hero for link previews; `WEBSITE_URL` is the site's absolute
-URL from the brand pack). For a **job/valuation/bespoke** bundle there is no site to
-wire — **delete the whole `<div class="snippet">` block** from the copied template
-before substituting, so no `WEBSITE_URL` token survives.
-
-## Output contract
-
-```
-<output>/
-  og.html                         # the resolved render page (kept for re-runs)
-  socials/
-    og-landscape-<key>.png  og-square-<key>.png  og-portrait-<key>.png   # per tile
-    og-portrait-<person-key>.png  # a person hero: portrait only
-  socials.html                    # gallery: each tile at size, download links
-  social-posts.md                 # captions per tile, all five platforms
-  redaction-report.md             # piiBearing subjects only — the standing reconciliation
-```
-
-## Completion criteria
-
-- Every tile exists at its exact pixel size; a person tile is portrait only.
-- Captions cover all five platforms; `socials.html` previews each tile with a working
-  download link.
-- For a `piiBearing` subject, `redaction-report.md` is present and accounts for
-  **every** source photo and text field; no output names the client, the address, a
-  figure, an individual, or an email sender.
-- In `microsite` mode, the site's `og:image`/`twitter:image` point at the landscape
-  main tile.
-- `Read` each finished PNG — file size alone is not proof.
-
-## When NOT to use
-
-- The operator wants to **post** — this skill never posts; it produces a reviewable
-  bundle and stops.
-- The deliverable is the micro-site itself → `microsite`. The full marketing run
-  (site + tiles) → `make-media`, which calls this skill in `microsite` mode.
+SiteDesk renders tiles for four subjects: `microsite`, `bespoke`, `job`, and
+`valuation`. The **render core is web-designer's** — this skill owns no tile
+template, gallery, caption, or PII-gate machinery. It owns one thing: turning a
+SiteDesk **job** or **valuation** into a brand-safe brief that `web-designer:socials`
+can render. You **never post**; the bundle is for the operator to review.
+
+## microsite and bespoke — delegate
+
+Run `web-designer:socials` directly in the same mode on the same subject. For a
+built `site/`, that is `microsite` mode (it also wires the site's `og:image`); for
+an operator-chosen topic with the operator's own photos and notes, that is `bespoke`
+mode (its PII gate runs unless the operator declares the material brand-safe). Add
+nothing here — web-designer owns the whole run.
+
+## job and valuation — resolve, then render as bespoke
+
+These read the operator's live job state, so SiteDesk owns the read under a strict
+money boundary; the rendering is still web-designer's.
+
+1. **Resolve the job under the money boundary.** Read the job folder per
+   [`references/sources.md`](references/sources.md) — the `job` adapter for a
+   whole-job milestone, the `valuation` adapter for this cycle's progress. Read only
+   the allowed non-money progress fields; **never** the money fields or the issued
+   `valuations/` documents. `sources.md` is the exact contract; it is the one place
+   the money boundary is written.
+2. **Stage a brand-safe brief.** Write the resolved subject to a staging folder as a
+   bespoke brief: a `topic`, headline and sub candidates from the strongest progress
+   lines, `copyFacts` limited to neutral context (a stage name, a trade, a month, a
+   town — never a figure or a client identifier), and the `source/` photos as
+   candidate images. No money field and no client identifier reaches the brief.
+3. **Render through web-designer.** Run `web-designer:socials` in `bespoke` mode on
+   the staged brief. Its PII gate runs over the staged images and copy as a second
+   check and writes the redaction report; `web-designer:socials` never reads the job
+   folder or `state.json`. State the resolved subject back before rendering — e.g.
+   "Resolving job 1737 in valuation mode, this period's progress."
+
+## The money boundary is absolute
+
+No tile, caption, or brief SiteDesk produces from a job may carry a contract,
+valuation, or payment figure, any `pctComplete` value, or any client identifier.
+The progress is the story; the figures never leave the job folder. This boundary is
+enforced at the read in step 1 (only non-money fields are ever read) and re-checked
+by web-designer's gate at step 3.
+
+## What this does not do
+
+- It ships no render template, gallery, caption set, or PII-gate reference — those
+  live in `web-designer:socials`.
+- It never posts, never deploys, and never reads a money field or a `valuations/`
+  document.

package/payload/premium-plugins/sitedesk/plugins/sitedesk-media/skills/socials/references/sources.md

@@ -1,13 +1,17 @@
-# socials — source adapters
+# socials — SiteDesk job source adapters
 
-The `socials` skill resolves a named **subject** to a normalized intermediate that
-the shared render core consumes. One adapter per subject kind. This file is the
-contract and the **extension point**: a future subject (a quote, a timesheet, a
-testimonial) is a new row here, not a new skill.
+SiteDesk owns two subject adapters: `job` and `valuation`. Both read the operator's
+live job state and resolve it to the normalized intermediate below, which
+`web-designer:socials` renders in `bespoke` mode. The `microsite` and `bespoke`
+adapters are web-designer's — this file does not repeat them.
+
+This file is the one place SiteDesk's **money boundary** is written. It is the
+contract for what a job tile may and may not carry.
 
 ## The normalized intermediate
 
-Every adapter resolves its subject to this shape:
+Each adapter resolves its subject to the shape `web-designer:socials` bespoke mode
+consumes:
 
 ```
 {
@@ -16,40 +20,16 @@ Every adapter resolves its subject to this shape:
   subCandidates,      // [string] — supporting lines, paired to headlines
   copyFacts,          // { eyebrow, specs[], domain, phone } — overlay scalars
   candidateImages,    // [{ key, path, isPerson }] — vetted backgrounds
-  piiBearing          // boolean — does this source carry client data?
+  piiBearing          // boolean — job and valuation are always true
 }
 ```
 
-`candidateImages[].key` becomes the tile `hero` and the filename suffix
-(`og-<format>-<key>.png`). `isPerson: true` marks a hero that must render
-**portrait only** (a landscape or square crop cuts off the head). `piiBearing`
-decides whether the PII gate in [`pii-strip.md`](pii-strip.md) runs before any of
-this reaches a template.
-
-## Adapters
-
-### `microsite` — `piiBearing: false`
-
-Reads a built `site/` directory (the output of `microsite`): the brand pack
-(`brand.md` tokens, `images/logo.png`) and the curated hero photos at the fixed
-paths the micro-site uses:
-
-| key | image | leads with |
-|---|---|---|
-| `main` | `images/hero-01.webp` | the firm's lead line |
-| `interior` | `images/hero-03.webp` | a finishes line |
-| `build` | `images/hero-06.webp` | a process line |
-| `founder` | `images/founder-portrait.webp` | "meet the…" — **`isPerson: true`, portrait only** |
-
-`copyFacts` for `microsite` is the brand pack's own credential cells (sector,
-trades, areas, years) plus `domain`, `phone`, and the site's full `WEBSITE_URL` (the
-microsite-only og:image wiring needs the absolute URL, not just the domain).
+`candidateImages[].key` becomes the tile `hero` and the filename suffix.
+`isPerson: true` marks a hero that must render portrait only. `piiBearing: true`
+means web-designer's PII gate runs over the staged brief before any of it reaches a
+template.
 
-Brand-safe by construction (the site is already published copy), so the PII gate is
-skipped. This is the path `make-media` calls as its final stage; it also wires the
-site's `og:image`/`twitter:image` to the landscape `main` tile.
-
-### `job` — `piiBearing: true`
+## `job` — `piiBearing: true`
 
 A whole-job progress milestone. Topic = the site/job overall. Reads the job folder
 `{ACCOUNT_DIR}/jobs/{jobId}/`:
@@ -72,25 +52,10 @@ client should never see on a public tile. `lines[].id` and `variations[].number`
 **keys only** — use them to select a line, never as copy on a tile or caption (an
 operator may have keyed a line with a client name or address fragment).
 
-### `valuation` — `piiBearing: true`
+## `valuation` — `piiBearing: true`
 
 The current valuation cycle's progress. Same job folder and the **same non-money
 fields** as `job`, but framed to **this period**: the lines and variations whose
 `pctComplete` advanced this cycle. Topic = "this period's progress on the job". The
 same money-field and `valuations/`-document exclusions apply — read the progress,
 never the figures.
-
-### `bespoke` — `piiBearing: true` (operator may waive)
-
-An operator-chosen topic with the operator's own photos and notes. The operator
-supplies the topic, the headline/sub ideas, and the candidate images. The PII gate
-runs by default; the operator may declare the material brand-safe (their own
-marketing photos, no client identifiable) to skip it — that declaration is the only
-way the gate is waived for a bespoke subject.
-
-## Adding a subject later
-
-A new subject kind (quote, timesheet, testimonial, …) is a new adapter section here:
-name what it reads, how it maps to the normalized intermediate, and its `piiBearing`
-value. No new skill, no new render core, no new caption register. If the source can
-carry client data, set `piiBearing: true` and the existing gate covers it.

package/payload/server/public/assets/{AdminLoginScreens-rlk263u9.js → AdminLoginScreens-BzErD9Zo.js}

@@ -1 +1 @@
-import{o as e}from"./chunk-CAM3fms7.js";import{A as t,L as n,M as r,N as i,O as a}from"./useSubAccountSwitcher-BVCMAnWK.js";import{i as o}from"./admin-types-hioowVct.js";import{b as s,x as c}from"./AdminShell-C5vWTy2n.js";import{t as l}from"./Checkbox-Chz6bfy-.js";var u=`admin-landing-redirected`,d=`/graph`;function f(e){return e.variant===`operator`?!1:e.appState===`chat`&&!e.alreadyRedirected}var p=e(n(),1);function m(e=`admin`){let[t,n]=(0,p.useState)(`loading`),[r,a]=(0,p.useState)(``),[s,l]=(0,p.useState)(``),[m,h]=(0,p.useState)(``),[g,_]=(0,p.useState)(!1),[v,y]=(0,p.useState)(!1),[b,x]=(0,p.useState)(!1),[S,C]=(0,p.useState)(!1),[w,T]=(0,p.useState)(!1),[E,D]=(0,p.useState)(null),[O,k]=(0,p.useState)(null),[A,j]=(0,p.useState)(void 0),[M,N]=(0,p.useState)(null),[P,F]=(0,p.useState)(void 0),[I,L]=(0,p.useState)(null),[R,z]=(0,p.useState)(null),[B,V]=(0,p.useState)(void 0),H=(0,p.useRef)(void 0),[U,W]=(0,p.useState)(!1),[G,K]=(0,p.useState)(!0);(0,p.useEffect)(()=>{typeof window>`u`||fetch(`/api/remote-auth/status`).then(e=>e.ok?e.json():null).then(e=>{e?.configured&&W(!0)}).catch(()=>{})},[]);let q=(0,p.useRef)(null),J=(0,p.useRef)(null);(0,p.useEffect)(()=>{async function e(){let e=null;try{e=sessionStorage.getItem(`maxy-admin-session-key`)}catch{}if(!e)return!1;try{let t=await fetch(`/api/admin/session?session_key=${encodeURIComponent(e)}`);if(t.status===401){try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return!1}if(!t.ok)return!1;let r=await t.json();D(r.session_key),z(r.sessionId??null),j(r.businessName),N(r.role??null),F(r.userName===void 0?null:r.userName),L(r.avatar??null);let i=o(r.thinkingView);return H.current=i,V(i),n(`chat`),!0}catch(e){return console.error(`[admin] session restore failed:`,e),!1}}async function t(r=2){try{let i=await fetch(`/api/health`);if(!i.ok){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check returned ${i.status} after retries`),n(`set-pin`);return}let a=await i.json();if(!a.pin_configured){n(`set-pin`);return}K(!!a.claude_authenticated);let o=!1;try{o=new URLSearchParams(window.location.search).get(`connect`)===`claude`}catch{}if(o){try{let e=new URL(window.location.href);e.searchParams.delete(`connect`),window.history.replaceState(null,``,e.pathname+e.search+e.hash)}catch{}if(!a.claude_authenticated){n(`connect-claude`);return}}if(await e())return;n(`enter-pin`)}catch(e){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check failed:`,e),n(`set-pin`)}}t()},[]),(0,p.useEffect)(()=>{t===`chat`&&fetch(`/api/admin/claude-info`).then(e=>{if(e.ok)return e.json()}).then(e=>{e&&k(e)}).catch(()=>{})},[t]),(0,p.useEffect)(()=>{if(typeof window>`u`)return;let n=!1;try{n=sessionStorage.getItem(u)===`1`}catch{}if(f({appState:t,alreadyRedirected:n,variant:e})){try{sessionStorage.setItem(u,`1`)}catch{}console.info(`[admin-ui] landing-redirect target=${d}`),window.location.replace(d)}},[t,e]);let Y=(0,p.useRef)(null);(0,p.useEffect)(()=>{if(t!==`chat`)return;let e=setInterval(async()=>{try{let e=await fetch(`/api/health`);if(e.ok){let t=await e.json();K(t.auth_status!==`dead`&&t.auth_status!==`missing`)}}catch{}if(E)try{let e=await fetch(`/api/admin/session?session_key=${encodeURIComponent(E)}`);if(e.status!==401)return;let t=(await e.clone().json().catch(()=>null))?.code??`unknown-401`;if(t===`remote-auth-required`){i(`heartbeat`,`/api/admin/session`);return}console.warn(`[admin-auth] outcome=heartbeat-detected-expiry code=${t}`),Y.current?.()}catch{}},300*1e3);return()=>clearInterval(e)},[t,E]),(0,p.useEffect)(()=>{t===`connect-claude`&&fetch(`/api/health`).then(e=>e.ok?e.json():null).then(e=>{e?.claude_authenticated&&(K(!0),n(`enter-pin`))}).catch(()=>{})},[t]);async function X(e,t){y(!0);try{let r=await fetch(`/api/admin/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:e,...t?{accountId:t}:{}})});if(!r.ok){let e=await r.json().catch(()=>({}));if(r.status===401&&e?.code===`remote-auth-required`){i(`enter-pin`,`/api/admin/session`);return}h(e.error||`Invalid PIN`);return}let s=await r.json();D(s.session_key),z(s.sessionId??null),j(s.businessName),N(s.role??null),F(s.userName===void 0?null:s.userName),L(s.avatar??null);let c=o(s.thinkingView);H.current=c,V(c);try{sessionStorage.setItem(`maxy-admin-session-key`,s.session_key)}catch{}a(``),n(`chat`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}}let Z=(0,p.useCallback)(async e=>{if(e.preventDefault(),v)return;h(``);let t=s.trim();if(!t){h(`Please enter your name.`);return}if(r.length<4){h(`PIN must be at least 4 characters.`);return}let o=r;y(!0);try{let e=await fetch(`/api/onboarding/set-pin`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:o,name:t})});if(!e.ok){let t=await e.json().catch(()=>({}));if(e.status===401&&t?.code===`remote-auth-required`){i(`set-pin`,`/api/onboarding/set-pin`);return}if(e.status===409){console.log(`[admin] PIN already configured — re-checking health`);try{let e=await fetch(`/api/health`);if(e.ok){let r=await e.json();r.pin_configured&&r.claude_authenticated?n(`enter-pin`):r.pin_configured?n(`connect-claude`):h(t.error||`Failed to set PIN.`)}else n(`enter-pin`)}catch{n(`enter-pin`)}return}h(t.error||`Failed to set PIN.`);return}let r=await fetch(`/api/health`);if((r.ok?await r.json():null)?.claude_authenticated){await X(o);return}a(``),n(`connect-claude`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}},[r,v,s]),Q=(0,p.useCallback)(async e=>{e.preventDefault(),h(``),await X(r)},[r]),ee=(0,p.useCallback)(async()=>{T(!0);try{if(!await c())return console.warn(`[admin-ui] claude-disconnect not verified — credentials may persist; staying put`),!1;K(!1),D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}return n(`connect-claude`),!0}finally{T(!1)}},[]),$=(0,p.useCallback)(()=>{D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}a(``),h(``),n(`enter-pin`)},[]);return(0,p.useEffect)(()=>{Y.current=$},[$]),{appState:t,setAppState:n,pin:r,setPin:a,operatorName:s,setOperatorName:l,pinError:m,setPinError:h,showPin:g,setShowPin:_,pinLoading:v,authPolling:b,setAuthPolling:x,authLoading:S,setAuthLoading:C,disconnecting:w,cacheKey:E,setCacheKey:D,claudeInfo:O,setClaudeInfo:k,businessName:A,role:M,userName:P,userAvatar:I,sessionId:R,setSessionId:z,expandAll:B,setExpandAll:V,expandAllDefaultRef:H,remoteAuthEnabled:U,claudeConnected:G,pinInputRef:q,setPinFormRef:J,handleSetPin:Z,handleLogin:Q,handleDisconnect:ee,handleLogout:$}}var h=r();function g({inputRef:e,value:t,onChange:n,onComplete:r,showPin:i,autoFocus:a}){let o=(0,p.useRef)([]);function s(e,r){r.key===`Backspace`?(r.preventDefault(),t[e]?n(t.slice(0,e)+t.slice(e+1)):e>0&&(n(t.slice(0,e-1)+t.slice(e)),o.current[e-1]?.focus())):r.key===`ArrowLeft`&&e>0?o.current[e-1]?.focus():r.key===`ArrowRight`&&e<5?o.current[e+1]?.focus():r.key===`Enter`&&(r.preventDefault(),r.currentTarget.form?.requestSubmit())}function c(e,i){let a=i.nativeEvent.data;if(!a||!/^\d$/.test(a))return;let s=t.split(``);for(s[e]=a;s.length<e;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);n(c),c.length===6?r?.(c):e<5&&o.current[e+1]?.focus()}function l(e){e.preventDefault();let t=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);t&&(n(t),t.length===6?r?.(t):o.current[t.length]?.focus())}return(0,h.jsx)(`div`,{className:`pin-field`,children:Array.from({length:6}).map((n,r)=>(0,h.jsx)(`input`,{ref:t=>{o.current[r]=t,r===0&&e&&(e.current=t)},type:`text`,inputMode:`numeric`,className:`pin-box${t[r]?` pin-box-filled`:``}`,value:t[r]?i?t[r]:`•`:``,onKeyDown:e=>s(r,e),onInput:e=>c(r,e),onPaste:l,onFocus:e=>e.target.select(),autoFocus:a&&r===0,autoComplete:`off`,maxLength:1,"aria-label":`PIN digit ${r+1}`},r))})}function _(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:c,pinError:u,pinInputRef:d,setPinFormRef:f,onSubmit:p,operatorName:m,setOperatorName:_}=e;return(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Welcome to `,a.productName]}),(0,h.jsxs)(`p`,{className:`connect-subtitle`,children:[`Tell `,a.productName,` who you are, then choose a PIN.`]}),(0,h.jsxs)(`form`,{ref:f,onSubmit:p,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(`input`,{type:`text`,className:`connect-name-input`,placeholder:`Your full name`,value:m,onChange:e=>_(e.target.value),autoComplete:`name`,autoFocus:!0,required:!0,"aria-label":`Your full name`}),(0,h.jsx)(`div`,{style:{width:38,flexShrink:0},"aria-hidden":`true`})]}),(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i}),(0,h.jsx)(s,{variant:`send`,type:`submit`,disabled:!n||!m.trim(),loading:c,"aria-label":`Set PIN`,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})})}function v(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:c,pinError:u,pinInputRef:d,onSubmit:f,remoteAuthEnabled:p,onSignOutRemote:m}=e;return(0,h.jsxs)(`div`,{className:`connect-page`,children:[p&&m&&(0,h.jsx)(`button`,{type:`button`,className:`connect-signout`,onClick:m,children:`Sign out`}),(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsx)(`h1`,{className:`connect-title`,children:a.productName}),(0,h.jsxs)(`form`,{onSubmit:f,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i,autoFocus:!0}),(0,h.jsx)(s,{variant:`send`,type:`submit`,disabled:!n,loading:c,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(`div`,{className:`pin-options`,children:(0,h.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})]})}function y(e){let{authPolling:n,setAuthPolling:r,authLoading:i,setAuthLoading:o,pinError:c,setPinError:l,setAppState:u}=e,[d,f]=(0,p.useState)(!1),[m,g]=(0,p.useState)(!1),[_,v]=(0,p.useState)(``),[y,b]=(0,p.useState)(``),[x,S]=(0,p.useState)(``);async function C(){S(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`paste-code`,code:y})})).json();e.accepted?(S(`Code submitted. Finishing sign-in…`),b(``)):S(e.error||`Could not submit code.`)}catch(e){console.error(`[admin] paste-code error:`,e),S(`Could not submit code.`)}}async function w(){g(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`launch-browser`})})).json();e.launched?f(!0):e.error&&l(e.error)}catch(e){console.error(`[admin] browser launch error:`,e),l(`Could not launch browser.`)}g(!1)}async function T(){o(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`})).json();if(e.started){r(!0),f(!0),o(!1),v(e.transport||``);for(let e=0;e<120;e++)if(await new Promise(e=>setTimeout(e,2e3)),(await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`wait`})})).json()).authenticated){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),u(`enter-pin`);return}l(`Timed out waiting for sign-in. Try again.`),r(!1)}else e.error&&l(e.error)}catch(e){console.error(`[admin] auth flow error:`,e),l(`Could not start auth flow.`)}o(!1)}async function E(){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),r(!1),l(``)}return n||d?(0,h.jsxs)(`div`,{style:{display:`flex`,flexDirection:`column`,height:`100dvh`,overflow:`auto`},children:[(0,h.jsxs)(`header`,{className:`chat-header`,style:{paddingBottom:`12px`,flexShrink:0,position:`relative`,maxWidth:`680px`,width:`100%`,margin:`0 auto`,padding:`24px 20px 12px`},children:[n?(0,h.jsx)(`button`,{onClick:E,style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Cancel`,children:`✕`}):(0,h.jsx)(`button`,{onClick:()=>f(!1),style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Close browser`,children:`✕`}),(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`chat-logo`}),(0,h.jsx)(`h1`,{className:`chat-tagline`,children:`Connect Claude`}),(0,h.jsx)(`p`,{className:`chat-intro`,children:n?`Sign in and authorize in the browser below.`:`Open your email or prepare your accounts, then sign in.`}),!n&&(0,h.jsx)(`div`,{style:{marginTop:`12px`},children:(0,h.jsx)(s,{variant:`primary`,onClick:T,disabled:i,children:i?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`})}),n&&_===`native`&&(0,h.jsxs)(`div`,{style:{marginTop:`14px`,maxWidth:`420px`,margin:`14px auto 0`,display:`flex`,flexDirection:`column`,gap:`8px`},children:[(0,h.jsx)(`label`,{style:{fontSize:`12px`,color:`#999`,lineHeight:1.4},children:`If the browser didn't finish sign-in, paste the code or full redirect URL from Claude's page:`}),(0,h.jsxs)(`div`,{style:{display:`flex`,gap:`8px`},children:[(0,h.jsx)(`input`,{type:`text`,value:y,onChange:e=>b(e.target.value),placeholder:`Paste code or redirect URL`,style:{flex:1,padding:`8px 10px`,fontSize:`13px`,border:`1px solid #ccc`,borderRadius:`6px`}}),(0,h.jsx)(s,{variant:`primary`,onClick:C,disabled:!y.trim(),children:`Submit`})]}),x&&(0,h.jsx)(`p`,{style:{fontSize:`12px`,color:`#999`,margin:0},children:x})]})]}),(0,h.jsx)(`div`,{style:{flex:1,display:`flex`,flexDirection:`column`,minHeight:0,gap:`10px`,padding:`0 0 16px`},children:(0,h.jsx)(`iframe`,{src:`/vnc-viewer.html`,style:{flex:1,width:`100%`,minHeight:0,border:`none`,background:`#111`,display:`block`},title:`Claude Sign-in`})}),c&&(0,h.jsx)(`p`,{className:`admin-pin-error`,style:{textAlign:`center`,padding:`0 20px 16px`},children:c})]}):(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsxs)(`div`,{className:`connect-logos`,children:[(0,h.jsx)(`div`,{className:`connect-logo-wrap`,children:(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`connect-logo`})}),(0,h.jsx)(`svg`,{className:`connect-arrow`,viewBox:`0 0 48 24`,fill:`none`,xmlns:`http://www.w3.org/2000/svg`,children:(0,h.jsx)(`path`,{d:`M0 12h44m0 0l-8-8m8 8l-8 8`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`})}),(0,h.jsxs)(`div`,{className:`connect-logo-wrap`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsx)(`span`,{className:`connect-logo-label`,children:a.productName})]})]}),(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Connect Claude to power `,a.productName]}),(0,h.jsx)(`p`,{className:`connect-subtitle`,children:`Sign in with your Anthropic account to get started.`}),(0,h.jsx)(s,{variant:`primary`,onClick:T,disabled:i,children:i?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`}),(0,h.jsx)(`p`,{style:{marginTop:`6px`,fontSize:`11px`,color:`#999`,maxWidth:`300px`,textAlign:`center`,lineHeight:`1.4`},children:`First time? You may need to sign into your email and Anthropic account in the browser before connecting.`}),(0,h.jsx)(`button`,{onClick:w,disabled:m,style:{marginTop:`12px`,background:`none`,border:`none`,color:`var(--color-primary, #666)`,fontSize:`13px`,cursor:`pointer`,textDecoration:`underline`,textUnderlineOffset:`3px`},children:m?`Launching…`:`Open browser first`}),c&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:c})]})})}function b({auth:e}){return e.appState===`loading`?(0,h.jsx)(`div`,{className:`connect-page`}):e.appState===`set-pin`?(0,h.jsx)(_,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,setPinFormRef:e.setPinFormRef,onSubmit:e.handleSetPin,operatorName:e.operatorName,setOperatorName:e.setOperatorName}):e.appState===`connect-claude`?(0,h.jsx)(y,{authPolling:e.authPolling,setAuthPolling:e.setAuthPolling,authLoading:e.authLoading,setAuthLoading:e.setAuthLoading,pinError:e.pinError,setPinError:e.setPinError,setAppState:e.setAppState}):e.appState===`enter-pin`?(0,h.jsx)(v,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,onSubmit:e.handleLogin,remoteAuthEnabled:e.remoteAuthEnabled,onSignOutRemote:()=>{console.info(`[admin-ui] remote-auth sign-out → /__remote-auth/logout`),window.location.href=`/__remote-auth/logout`}}):null}export{m as n,b as t};
+import{o as e}from"./chunk-CAM3fms7.js";import{A as t,L as n,M as r,N as i,O as a}from"./useSubAccountSwitcher-Bg0RH3Gk.js";import{i as o}from"./admin-types-hioowVct.js";import{b as s,x as c}from"./AdminShell-BihejKg_.js";import{t as l}from"./Checkbox-Ds004CBE.js";var u=`admin-landing-redirected`,d=`/graph`;function f(e){return e.variant===`operator`?!1:e.appState===`chat`&&!e.alreadyRedirected}var p=e(n(),1);function m(e=`admin`){let[t,n]=(0,p.useState)(`loading`),[r,a]=(0,p.useState)(``),[s,l]=(0,p.useState)(``),[m,h]=(0,p.useState)(``),[g,_]=(0,p.useState)(!1),[v,y]=(0,p.useState)(!1),[b,x]=(0,p.useState)(!1),[S,C]=(0,p.useState)(!1),[w,T]=(0,p.useState)(!1),[E,D]=(0,p.useState)(null),[O,k]=(0,p.useState)(null),[A,j]=(0,p.useState)(void 0),[M,N]=(0,p.useState)(null),[P,F]=(0,p.useState)(void 0),[I,L]=(0,p.useState)(null),[R,z]=(0,p.useState)(null),[B,V]=(0,p.useState)(void 0),H=(0,p.useRef)(void 0),[U,W]=(0,p.useState)(!1),[G,K]=(0,p.useState)(!0);(0,p.useEffect)(()=>{typeof window>`u`||fetch(`/api/remote-auth/status`).then(e=>e.ok?e.json():null).then(e=>{e?.configured&&W(!0)}).catch(()=>{})},[]);let q=(0,p.useRef)(null),J=(0,p.useRef)(null);(0,p.useEffect)(()=>{async function e(){let e=null;try{e=sessionStorage.getItem(`maxy-admin-session-key`)}catch{}if(!e)return!1;try{let t=await fetch(`/api/admin/session?session_key=${encodeURIComponent(e)}`);if(t.status===401){try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return!1}if(!t.ok)return!1;let r=await t.json();D(r.session_key),z(r.sessionId??null),j(r.businessName),N(r.role??null),F(r.userName===void 0?null:r.userName),L(r.avatar??null);let i=o(r.thinkingView);return H.current=i,V(i),n(`chat`),!0}catch(e){return console.error(`[admin] session restore failed:`,e),!1}}async function t(r=2){try{let i=await fetch(`/api/health`);if(!i.ok){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check returned ${i.status} after retries`),n(`set-pin`);return}let a=await i.json();if(!a.pin_configured){n(`set-pin`);return}K(!!a.claude_authenticated);let o=!1;try{o=new URLSearchParams(window.location.search).get(`connect`)===`claude`}catch{}if(o){try{let e=new URL(window.location.href);e.searchParams.delete(`connect`),window.history.replaceState(null,``,e.pathname+e.search+e.hash)}catch{}if(!a.claude_authenticated){n(`connect-claude`);return}}if(await e())return;n(`enter-pin`)}catch(e){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check failed:`,e),n(`set-pin`)}}t()},[]),(0,p.useEffect)(()=>{t===`chat`&&fetch(`/api/admin/claude-info`).then(e=>{if(e.ok)return e.json()}).then(e=>{e&&k(e)}).catch(()=>{})},[t]),(0,p.useEffect)(()=>{if(typeof window>`u`)return;let n=!1;try{n=sessionStorage.getItem(u)===`1`}catch{}if(f({appState:t,alreadyRedirected:n,variant:e})){try{sessionStorage.setItem(u,`1`)}catch{}console.info(`[admin-ui] landing-redirect target=${d}`),window.location.replace(d)}},[t,e]);let Y=(0,p.useRef)(null);(0,p.useEffect)(()=>{if(t!==`chat`)return;let e=setInterval(async()=>{try{let e=await fetch(`/api/health`);if(e.ok){let t=await e.json();K(t.auth_status!==`dead`&&t.auth_status!==`missing`)}}catch{}if(E)try{let e=await fetch(`/api/admin/session?session_key=${encodeURIComponent(E)}`);if(e.status!==401)return;let t=(await e.clone().json().catch(()=>null))?.code??`unknown-401`;if(t===`remote-auth-required`){i(`heartbeat`,`/api/admin/session`);return}console.warn(`[admin-auth] outcome=heartbeat-detected-expiry code=${t}`),Y.current?.()}catch{}},300*1e3);return()=>clearInterval(e)},[t,E]),(0,p.useEffect)(()=>{t===`connect-claude`&&fetch(`/api/health`).then(e=>e.ok?e.json():null).then(e=>{e?.claude_authenticated&&(K(!0),n(`enter-pin`))}).catch(()=>{})},[t]);async function X(e,t){y(!0);try{let r=await fetch(`/api/admin/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:e,...t?{accountId:t}:{}})});if(!r.ok){let e=await r.json().catch(()=>({}));if(r.status===401&&e?.code===`remote-auth-required`){i(`enter-pin`,`/api/admin/session`);return}h(e.error||`Invalid PIN`);return}let s=await r.json();D(s.session_key),z(s.sessionId??null),j(s.businessName),N(s.role??null),F(s.userName===void 0?null:s.userName),L(s.avatar??null);let c=o(s.thinkingView);H.current=c,V(c);try{sessionStorage.setItem(`maxy-admin-session-key`,s.session_key)}catch{}a(``),n(`chat`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}}let Z=(0,p.useCallback)(async e=>{if(e.preventDefault(),v)return;h(``);let t=s.trim();if(!t){h(`Please enter your name.`);return}if(r.length<4){h(`PIN must be at least 4 characters.`);return}let o=r;y(!0);try{let e=await fetch(`/api/onboarding/set-pin`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:o,name:t})});if(!e.ok){let t=await e.json().catch(()=>({}));if(e.status===401&&t?.code===`remote-auth-required`){i(`set-pin`,`/api/onboarding/set-pin`);return}if(e.status===409){console.log(`[admin] PIN already configured — re-checking health`);try{let e=await fetch(`/api/health`);if(e.ok){let r=await e.json();r.pin_configured&&r.claude_authenticated?n(`enter-pin`):r.pin_configured?n(`connect-claude`):h(t.error||`Failed to set PIN.`)}else n(`enter-pin`)}catch{n(`enter-pin`)}return}h(t.error||`Failed to set PIN.`);return}let r=await fetch(`/api/health`);if((r.ok?await r.json():null)?.claude_authenticated){await X(o);return}a(``),n(`connect-claude`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}},[r,v,s]),Q=(0,p.useCallback)(async e=>{e.preventDefault(),h(``),await X(r)},[r]),ee=(0,p.useCallback)(async()=>{T(!0);try{if(!await c())return console.warn(`[admin-ui] claude-disconnect not verified — credentials may persist; staying put`),!1;K(!1),D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}return n(`connect-claude`),!0}finally{T(!1)}},[]),$=(0,p.useCallback)(()=>{D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}a(``),h(``),n(`enter-pin`)},[]);return(0,p.useEffect)(()=>{Y.current=$},[$]),{appState:t,setAppState:n,pin:r,setPin:a,operatorName:s,setOperatorName:l,pinError:m,setPinError:h,showPin:g,setShowPin:_,pinLoading:v,authPolling:b,setAuthPolling:x,authLoading:S,setAuthLoading:C,disconnecting:w,cacheKey:E,setCacheKey:D,claudeInfo:O,setClaudeInfo:k,businessName:A,role:M,userName:P,userAvatar:I,sessionId:R,setSessionId:z,expandAll:B,setExpandAll:V,expandAllDefaultRef:H,remoteAuthEnabled:U,claudeConnected:G,pinInputRef:q,setPinFormRef:J,handleSetPin:Z,handleLogin:Q,handleDisconnect:ee,handleLogout:$}}var h=r();function g({inputRef:e,value:t,onChange:n,onComplete:r,showPin:i,autoFocus:a}){let o=(0,p.useRef)([]);function s(e,r){r.key===`Backspace`?(r.preventDefault(),t[e]?n(t.slice(0,e)+t.slice(e+1)):e>0&&(n(t.slice(0,e-1)+t.slice(e)),o.current[e-1]?.focus())):r.key===`ArrowLeft`&&e>0?o.current[e-1]?.focus():r.key===`ArrowRight`&&e<5?o.current[e+1]?.focus():r.key===`Enter`&&(r.preventDefault(),r.currentTarget.form?.requestSubmit())}function c(e,i){let a=i.nativeEvent.data;if(!a||!/^\d$/.test(a))return;let s=t.split(``);for(s[e]=a;s.length<e;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);n(c),c.length===6?r?.(c):e<5&&o.current[e+1]?.focus()}function l(e){e.preventDefault();let t=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);t&&(n(t),t.length===6?r?.(t):o.current[t.length]?.focus())}return(0,h.jsx)(`div`,{className:`pin-field`,children:Array.from({length:6}).map((n,r)=>(0,h.jsx)(`input`,{ref:t=>{o.current[r]=t,r===0&&e&&(e.current=t)},type:`text`,inputMode:`numeric`,className:`pin-box${t[r]?` pin-box-filled`:``}`,value:t[r]?i?t[r]:`•`:``,onKeyDown:e=>s(r,e),onInput:e=>c(r,e),onPaste:l,onFocus:e=>e.target.select(),autoFocus:a&&r===0,autoComplete:`off`,maxLength:1,"aria-label":`PIN digit ${r+1}`},r))})}function _(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:c,pinError:u,pinInputRef:d,setPinFormRef:f,onSubmit:p,operatorName:m,setOperatorName:_}=e;return(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Welcome to `,a.productName]}),(0,h.jsxs)(`p`,{className:`connect-subtitle`,children:[`Tell `,a.productName,` who you are, then choose a PIN.`]}),(0,h.jsxs)(`form`,{ref:f,onSubmit:p,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(`input`,{type:`text`,className:`connect-name-input`,placeholder:`Your full name`,value:m,onChange:e=>_(e.target.value),autoComplete:`name`,autoFocus:!0,required:!0,"aria-label":`Your full name`}),(0,h.jsx)(`div`,{style:{width:38,flexShrink:0},"aria-hidden":`true`})]}),(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i}),(0,h.jsx)(s,{variant:`send`,type:`submit`,disabled:!n||!m.trim(),loading:c,"aria-label":`Set PIN`,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})})}function v(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:c,pinError:u,pinInputRef:d,onSubmit:f,remoteAuthEnabled:p,onSignOutRemote:m}=e;return(0,h.jsxs)(`div`,{className:`connect-page`,children:[p&&m&&(0,h.jsx)(`button`,{type:`button`,className:`connect-signout`,onClick:m,children:`Sign out`}),(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsx)(`h1`,{className:`connect-title`,children:a.productName}),(0,h.jsxs)(`form`,{onSubmit:f,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i,autoFocus:!0}),(0,h.jsx)(s,{variant:`send`,type:`submit`,disabled:!n,loading:c,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(`div`,{className:`pin-options`,children:(0,h.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})]})}function y(e){let{authPolling:n,setAuthPolling:r,authLoading:i,setAuthLoading:o,pinError:c,setPinError:l,setAppState:u}=e,[d,f]=(0,p.useState)(!1),[m,g]=(0,p.useState)(!1),[_,v]=(0,p.useState)(``),[y,b]=(0,p.useState)(``),[x,S]=(0,p.useState)(``);async function C(){S(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`paste-code`,code:y})})).json();e.accepted?(S(`Code submitted. Finishing sign-in…`),b(``)):S(e.error||`Could not submit code.`)}catch(e){console.error(`[admin] paste-code error:`,e),S(`Could not submit code.`)}}async function w(){g(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`launch-browser`})})).json();e.launched?f(!0):e.error&&l(e.error)}catch(e){console.error(`[admin] browser launch error:`,e),l(`Could not launch browser.`)}g(!1)}async function T(){o(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`})).json();if(e.started){r(!0),f(!0),o(!1),v(e.transport||``);for(let e=0;e<120;e++)if(await new Promise(e=>setTimeout(e,2e3)),(await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`wait`})})).json()).authenticated){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),u(`enter-pin`);return}l(`Timed out waiting for sign-in. Try again.`),r(!1)}else e.error&&l(e.error)}catch(e){console.error(`[admin] auth flow error:`,e),l(`Could not start auth flow.`)}o(!1)}async function E(){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),r(!1),l(``)}return n||d?(0,h.jsxs)(`div`,{style:{display:`flex`,flexDirection:`column`,height:`100dvh`,overflow:`auto`},children:[(0,h.jsxs)(`header`,{className:`chat-header`,style:{paddingBottom:`12px`,flexShrink:0,position:`relative`,maxWidth:`680px`,width:`100%`,margin:`0 auto`,padding:`24px 20px 12px`},children:[n?(0,h.jsx)(`button`,{onClick:E,style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Cancel`,children:`✕`}):(0,h.jsx)(`button`,{onClick:()=>f(!1),style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Close browser`,children:`✕`}),(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`chat-logo`}),(0,h.jsx)(`h1`,{className:`chat-tagline`,children:`Connect Claude`}),(0,h.jsx)(`p`,{className:`chat-intro`,children:n?`Sign in and authorize in the browser below.`:`Open your email or prepare your accounts, then sign in.`}),!n&&(0,h.jsx)(`div`,{style:{marginTop:`12px`},children:(0,h.jsx)(s,{variant:`primary`,onClick:T,disabled:i,children:i?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`})}),n&&_===`native`&&(0,h.jsxs)(`div`,{style:{marginTop:`14px`,maxWidth:`420px`,margin:`14px auto 0`,display:`flex`,flexDirection:`column`,gap:`8px`},children:[(0,h.jsx)(`label`,{style:{fontSize:`12px`,color:`#999`,lineHeight:1.4},children:`If the browser didn't finish sign-in, paste the code or full redirect URL from Claude's page:`}),(0,h.jsxs)(`div`,{style:{display:`flex`,gap:`8px`},children:[(0,h.jsx)(`input`,{type:`text`,value:y,onChange:e=>b(e.target.value),placeholder:`Paste code or redirect URL`,style:{flex:1,padding:`8px 10px`,fontSize:`13px`,border:`1px solid #ccc`,borderRadius:`6px`}}),(0,h.jsx)(s,{variant:`primary`,onClick:C,disabled:!y.trim(),children:`Submit`})]}),x&&(0,h.jsx)(`p`,{style:{fontSize:`12px`,color:`#999`,margin:0},children:x})]})]}),(0,h.jsx)(`div`,{style:{flex:1,display:`flex`,flexDirection:`column`,minHeight:0,gap:`10px`,padding:`0 0 16px`},children:(0,h.jsx)(`iframe`,{src:`/vnc-viewer.html`,style:{flex:1,width:`100%`,minHeight:0,border:`none`,background:`#111`,display:`block`},title:`Claude Sign-in`})}),c&&(0,h.jsx)(`p`,{className:`admin-pin-error`,style:{textAlign:`center`,padding:`0 20px 16px`},children:c})]}):(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsxs)(`div`,{className:`connect-logos`,children:[(0,h.jsx)(`div`,{className:`connect-logo-wrap`,children:(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`connect-logo`})}),(0,h.jsx)(`svg`,{className:`connect-arrow`,viewBox:`0 0 48 24`,fill:`none`,xmlns:`http://www.w3.org/2000/svg`,children:(0,h.jsx)(`path`,{d:`M0 12h44m0 0l-8-8m8 8l-8 8`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`})}),(0,h.jsxs)(`div`,{className:`connect-logo-wrap`,children:[(0,h.jsx)(`img`,{src:t,alt:a.productName,className:`connect-logo connect-logo--maxy`}),!a.logoContainsName&&(0,h.jsx)(`span`,{className:`connect-logo-label`,children:a.productName})]})]}),(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Connect Claude to power `,a.productName]}),(0,h.jsx)(`p`,{className:`connect-subtitle`,children:`Sign in with your Anthropic account to get started.`}),(0,h.jsx)(s,{variant:`primary`,onClick:T,disabled:i,children:i?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`}),(0,h.jsx)(`p`,{style:{marginTop:`6px`,fontSize:`11px`,color:`#999`,maxWidth:`300px`,textAlign:`center`,lineHeight:`1.4`},children:`First time? You may need to sign into your email and Anthropic account in the browser before connecting.`}),(0,h.jsx)(`button`,{onClick:w,disabled:m,style:{marginTop:`12px`,background:`none`,border:`none`,color:`var(--color-primary, #666)`,fontSize:`13px`,cursor:`pointer`,textDecoration:`underline`,textUnderlineOffset:`3px`},children:m?`Launching…`:`Open browser first`}),c&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:c})]})})}function b({auth:e}){return e.appState===`loading`?(0,h.jsx)(`div`,{className:`connect-page`}):e.appState===`set-pin`?(0,h.jsx)(_,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,setPinFormRef:e.setPinFormRef,onSubmit:e.handleSetPin,operatorName:e.operatorName,setOperatorName:e.setOperatorName}):e.appState===`connect-claude`?(0,h.jsx)(y,{authPolling:e.authPolling,setAuthPolling:e.setAuthPolling,authLoading:e.authLoading,setAuthLoading:e.setAuthLoading,pinError:e.pinError,setPinError:e.setPinError,setAppState:e.setAppState}):e.appState===`enter-pin`?(0,h.jsx)(v,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,onSubmit:e.handleLogin,remoteAuthEnabled:e.remoteAuthEnabled,onSignOutRemote:()=>{console.info(`[admin-ui] remote-auth sign-out → /__remote-auth/logout`),window.location.href=`/__remote-auth/logout`}}):null}export{m as n,b as t};