@rubytech/create-sitedesk-code 0.1.526 → 0.1.528

package/payload/platform/templates/specialists/agents/personal-assistant.md

@@ -3,7 +3,7 @@ name: personal-assistant
 description: "Platform settings, messaging channels (Telegram, WhatsApp, email, Outlook), and browser automation, plus mechanical calendar subtasks you hand it with the facts already resolved (export these event IDs to .ics, parse this inbound .ics). Delegate when the work is configuring the platform, sending or reading messages, or driving a browser. Do not delegate calendar reasoning or an availability-affecting booking: only your admin session sees the connector-backed real calendar, so the specialist would answer from the internal scheduling store alone and miss it. You own what is on the calendar and what booking against it does."
 summary: "Handles the operational tasks you'd give a personal assistant: scheduling meetings, managing your platform settings, connecting messaging channels, and completing browser-based tasks on your behalf."
 model: claude-sonnet-5
-tools: Skill, mcp__plugin_admin_admin__system-status, mcp__plugin_admin_admin__brand-settings, mcp__plugin_admin_admin__account-manage, mcp__plugin_admin_admin__account-update, mcp__plugin_admin_admin__logs-read, mcp__plugin_admin_admin__plugin-read, mcp__plugin_admin_admin__wifi, mcp__plugin_contacts_contacts__contact-create, mcp__plugin_contacts_contacts__contact-lookup, mcp__plugin_contacts_contacts__contact-update, mcp__plugin_contacts_contacts__contact-delete, mcp__plugin_contacts_contacts__contact-list, mcp__plugin_contacts_contacts__contact-export, mcp__plugin_contacts_contacts__contact-erase, mcp__plugin_contacts_contacts__group-create, mcp__plugin_contacts_contacts__group-manage, mcp__plugin_telegram_telegram__message, mcp__plugin_telegram_telegram__message-history, mcp__plugin_telegram_telegram__telegram-webhook-register, mcp__plugin_whatsapp_whatsapp__whatsapp-login-start, mcp__plugin_whatsapp_whatsapp__whatsapp-login-wait, mcp__plugin_whatsapp_whatsapp__whatsapp-status, mcp__plugin_whatsapp_whatsapp__whatsapp-disconnect, mcp__plugin_whatsapp_whatsapp__whatsapp-config, mcp__plugin_whatsapp_whatsapp__whatsapp-activity, mcp__plugin_whatsapp_whatsapp__whatsapp-conversations, mcp__plugin_whatsapp_whatsapp__whatsapp-messages, mcp__plugin_whatsapp_whatsapp__whatsapp-conversation-graph-state, mcp__plugin_whatsapp_whatsapp__whatsapp-group-info, mcp__plugin_whatsapp_whatsapp__whatsapp-send-admin, mcp__plugin_whatsapp_whatsapp__whatsapp-reply, mcp__plugin_email_email__email-provider-info, mcp__plugin_email_email__email-setup, mcp__plugin_email_email__email-signature-set, mcp__plugin_email_email__email-read, mcp__plugin_email_email__email-fetch-body, mcp__plugin_email_email__email-fetch-attachment, mcp__plugin_email_email__email-send, mcp__plugin_email_email__email-draft, mcp__plugin_email_email__email-draft-edit, mcp__plugin_email_email__email-draft-send, mcp__plugin_email_email__email-draft-list, mcp__plugin_email_email__email-reply, mcp__plugin_email_email__email-search, mcp__plugin_email_email__email-delete, mcp__plugin_email_email__email-graph-query, mcp__plugin_email_email__email-otp-extract, mcp__plugin_email_email__email-status, mcp__plugin_email_email__email-fetch, mcp__plugin_email_email__email-ingest, mcp__plugin_outlook_outlook__outlook-account-register, mcp__plugin_outlook_outlook__outlook-account-register-poll, mcp__plugin_outlook_outlook__outlook-mail-list, mcp__plugin_outlook_outlook__outlook-mail-search, mcp__plugin_outlook_outlook__outlook-mail-fetch-body, mcp__plugin_outlook_outlook__outlook-mail-attachment, mcp__plugin_outlook_outlook__outlook-mail-reply, mcp__plugin_outlook_outlook__outlook-mail-delete, mcp__plugin_outlook_outlook__outlook-mail-ingest, mcp__plugin_outlook_outlook__outlook-mail-otp-extract, mcp__plugin_outlook_outlook__outlook-mail-send, mcp__plugin_outlook_outlook__outlook-draft, mcp__plugin_outlook_outlook__outlook-draft-edit, mcp__plugin_outlook_outlook__outlook-draft-send, mcp__plugin_outlook_outlook__outlook-calendar-list, mcp__plugin_outlook_outlook__outlook-calendar-event, mcp__plugin_outlook_outlook__outlook-calendar-create, mcp__plugin_outlook_outlook__outlook-calendar-update, mcp__plugin_outlook_outlook__outlook-calendar-cancel, mcp__plugin_outlook_outlook__outlook-calendar-respond, mcp__plugin_outlook_outlook__outlook-calendar-freebusy, mcp__plugin_outlook_outlook__outlook-contacts-list, mcp__plugin_outlook_outlook__outlook-mailbox-info, mcp__plugin_outlook_outlook__outlook-mailbox-list, mcp__plugin_outlook_outlook__outlook-shared-mailbox-add, mcp__plugin_outlook_outlook__outlook-shared-mailbox-remove, mcp__plugin_google_google__google-account-register, mcp__plugin_google_google__google-account-register-poll, mcp__plugin_google_google__google-account-register-submit, mcp__plugin_google_google__google-calendar-list, mcp__plugin_google_google__google-calendar-event, mcp__plugin_google_google__google-calendar-create, mcp__plugin_google_google__google-calendar-update, mcp__plugin_google_google__google-calendar-cancel, mcp__plugin_google_google__google-calendar-respond, mcp__plugin_google_google__google-calendar-freebusy, mcp__plugin_google_google__google-account-info, mcp__plugin_google_google__google-account-list, mcp__plugin_scheduling_scheduling__schedule-event, mcp__plugin_scheduling_scheduling__schedule-list, mcp__plugin_scheduling_scheduling__schedule-get, mcp__plugin_scheduling_scheduling__schedule-runs, mcp__plugin_scheduling_scheduling__schedule-update, mcp__plugin_scheduling_scheduling__schedule-cancel, mcp__plugin_scheduling_scheduling__schedule-export-ics, mcp__plugin_scheduling_scheduling__schedule-import-ics, mcp__plugin_scheduling_scheduling__time-resolve, mcp__plugin_memory_memory__memory-search, mcp__plugin_memory_memory__profile-update, mcp__plugin_url-get_url-get__url-get, mcp__plugin_browser_browser__browser-render, mcp__plugin_browser_browser__browser-navigate, mcp__plugin_browser_browser__browser-snapshot, mcp__plugin_browser_browser__browser-click, mcp__plugin_browser_browser__browser-fill, mcp__plugin_browser_browser__browser-fill-form, mcp__plugin_browser_browser__browser-type, mcp__plugin_browser_browser__browser-press-key, mcp__plugin_browser_browser__browser-hover, mcp__plugin_browser_browser__browser-select-option, mcp__plugin_browser_browser__browser-wait-for, mcp__plugin_browser_browser__browser-handle-dialog, mcp__plugin_browser_browser__browser-evaluate, mcp__plugin_browser_browser__browser-console-messages, mcp__plugin_browser_browser__browser-tabs, mcp__plugin_browser_browser__browser-pdf-save, mcp__plugin_browser_browser__browser-screenshot, mcp__plugin_browser_browser__browser-resize
+tools: Skill, mcp__plugin_admin_admin__system-status, mcp__plugin_admin_admin__brand-settings, mcp__plugin_admin_admin__account-manage, mcp__plugin_admin_admin__account-update, mcp__plugin_admin_admin__logs-read, mcp__plugin_admin_admin__plugin-read, mcp__plugin_admin_admin__wifi, mcp__plugin_contacts_contacts__contact-create, mcp__plugin_contacts_contacts__contact-lookup, mcp__plugin_contacts_contacts__contact-update, mcp__plugin_contacts_contacts__contact-delete, mcp__plugin_contacts_contacts__contact-list, mcp__plugin_contacts_contacts__contact-export, mcp__plugin_contacts_contacts__contact-erase, mcp__plugin_contacts_contacts__group-create, mcp__plugin_contacts_contacts__group-manage, mcp__plugin_telegram_telegram__message, mcp__plugin_telegram_telegram__message-history, mcp__plugin_telegram_telegram__telegram-webhook-register, mcp__plugin_whatsapp_whatsapp__whatsapp-login-start, mcp__plugin_whatsapp_whatsapp__whatsapp-login-wait, mcp__plugin_whatsapp_whatsapp__whatsapp-status, mcp__plugin_whatsapp_whatsapp__whatsapp-disconnect, mcp__plugin_whatsapp_whatsapp__whatsapp-config, mcp__plugin_whatsapp_whatsapp__whatsapp-activity, mcp__plugin_whatsapp_whatsapp__whatsapp-conversations, mcp__plugin_whatsapp_whatsapp__whatsapp-messages, mcp__plugin_whatsapp_whatsapp__whatsapp-conversation-graph-state, mcp__plugin_whatsapp_whatsapp__whatsapp-group-info, mcp__plugin_whatsapp_whatsapp__whatsapp-send-admin, mcp__plugin_whatsapp_whatsapp__whatsapp-reply, mcp__plugin_email_email__email-provider-info, mcp__plugin_email_email__email-setup, mcp__plugin_email_email__email-signature-set, mcp__plugin_email_email__email-sending-identity-set, mcp__plugin_email_email__email-read, mcp__plugin_email_email__email-fetch-body, mcp__plugin_email_email__email-fetch-attachment, mcp__plugin_email_email__email-send, mcp__plugin_email_email__email-draft, mcp__plugin_email_email__email-draft-edit, mcp__plugin_email_email__email-draft-send, mcp__plugin_email_email__email-draft-list, mcp__plugin_email_email__email-reply, mcp__plugin_email_email__email-search, mcp__plugin_email_email__email-delete, mcp__plugin_email_email__email-graph-query, mcp__plugin_email_email__email-otp-extract, mcp__plugin_email_email__email-status, mcp__plugin_email_email__email-fetch, mcp__plugin_email_email__email-ingest, mcp__plugin_outlook_outlook__outlook-account-register, mcp__plugin_outlook_outlook__outlook-account-register-poll, mcp__plugin_outlook_outlook__outlook-mail-list, mcp__plugin_outlook_outlook__outlook-mail-search, mcp__plugin_outlook_outlook__outlook-mail-fetch-body, mcp__plugin_outlook_outlook__outlook-mail-attachment, mcp__plugin_outlook_outlook__outlook-mail-reply, mcp__plugin_outlook_outlook__outlook-mail-delete, mcp__plugin_outlook_outlook__outlook-mail-ingest, mcp__plugin_outlook_outlook__outlook-mail-otp-extract, mcp__plugin_outlook_outlook__outlook-mail-send, mcp__plugin_outlook_outlook__outlook-draft, mcp__plugin_outlook_outlook__outlook-draft-edit, mcp__plugin_outlook_outlook__outlook-draft-send, mcp__plugin_outlook_outlook__outlook-calendar-list, mcp__plugin_outlook_outlook__outlook-calendar-event, mcp__plugin_outlook_outlook__outlook-calendar-create, mcp__plugin_outlook_outlook__outlook-calendar-update, mcp__plugin_outlook_outlook__outlook-calendar-cancel, mcp__plugin_outlook_outlook__outlook-calendar-respond, mcp__plugin_outlook_outlook__outlook-calendar-freebusy, mcp__plugin_outlook_outlook__outlook-contacts-list, mcp__plugin_outlook_outlook__outlook-mailbox-info, mcp__plugin_outlook_outlook__outlook-mailbox-list, mcp__plugin_outlook_outlook__outlook-shared-mailbox-add, mcp__plugin_outlook_outlook__outlook-shared-mailbox-remove, mcp__plugin_google_google__google-account-register, mcp__plugin_google_google__google-account-register-poll, mcp__plugin_google_google__google-account-register-submit, mcp__plugin_google_google__google-calendar-list, mcp__plugin_google_google__google-calendar-event, mcp__plugin_google_google__google-calendar-create, mcp__plugin_google_google__google-calendar-update, mcp__plugin_google_google__google-calendar-cancel, mcp__plugin_google_google__google-calendar-respond, mcp__plugin_google_google__google-calendar-freebusy, mcp__plugin_google_google__google-account-info, mcp__plugin_google_google__google-account-list, mcp__plugin_scheduling_scheduling__schedule-event, mcp__plugin_scheduling_scheduling__schedule-list, mcp__plugin_scheduling_scheduling__schedule-get, mcp__plugin_scheduling_scheduling__schedule-runs, mcp__plugin_scheduling_scheduling__schedule-update, mcp__plugin_scheduling_scheduling__schedule-cancel, mcp__plugin_scheduling_scheduling__schedule-export-ics, mcp__plugin_scheduling_scheduling__schedule-import-ics, mcp__plugin_scheduling_scheduling__time-resolve, mcp__plugin_memory_memory__memory-search, mcp__plugin_memory_memory__profile-update, mcp__plugin_url-get_url-get__url-get, mcp__plugin_browser_browser__browser-render, mcp__plugin_browser_browser__browser-navigate, mcp__plugin_browser_browser__browser-snapshot, mcp__plugin_browser_browser__browser-click, mcp__plugin_browser_browser__browser-fill, mcp__plugin_browser_browser__browser-fill-form, mcp__plugin_browser_browser__browser-type, mcp__plugin_browser_browser__browser-press-key, mcp__plugin_browser_browser__browser-hover, mcp__plugin_browser_browser__browser-select-option, mcp__plugin_browser_browser__browser-wait-for, mcp__plugin_browser_browser__browser-handle-dialog, mcp__plugin_browser_browser__browser-evaluate, mcp__plugin_browser_browser__browser-console-messages, mcp__plugin_browser_browser__browser-tabs, mcp__plugin_browser_browser__browser-pdf-save, mcp__plugin_browser_browser__browser-screenshot, mcp__plugin_browser_browser__browser-resize
 pattern_deliverable: false
 ---
 

package/payload/server/{chunk-XCR5D2G3.js → chunk-BP7LH7MC.js}

@@ -2149,7 +2149,6 @@ export {
   RFB_PORT,
   WEBSOCKIFY_PORT,
   CDP_PORT,
-  CHROMIUM_PROFILE_DIR,
   USERS_FILE,
   LID_MAP_FILE,
   LOG_DIR,

package/payload/server/{chunk-WT2PFGY4.js → chunk-DLG7XSLA.js}

@@ -12,7 +12,7 @@ import {
   getConversationOwner,
   isValidAccountId,
   registerLoop
-} from "./chunk-XCR5D2G3.js";
+} from "./chunk-BP7LH7MC.js";
 
 // node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
@@ -4075,6 +4075,214 @@ var clientIpMiddleware = async (c, next) => {
   await next();
 };
 
+// app/lib/cdp-screencast.ts
+var CDP_WS_PATH = "/cdp-screencast";
+var TARGET_ID_RE = /^[0-9A-Fa-f]{32}$/;
+function selectPageTargets(parsed) {
+  if (!Array.isArray(parsed)) return [];
+  const out = [];
+  for (const raw2 of parsed) {
+    if (raw2?.type !== "page") continue;
+    const id = typeof raw2.id === "string" ? raw2.id : "";
+    if (!TARGET_ID_RE.test(id)) continue;
+    const url = typeof raw2.url === "string" ? raw2.url : "";
+    const title = typeof raw2.title === "string" && raw2.title.length > 0 ? raw2.title : url;
+    out.push({ id, title, url });
+  }
+  return out;
+}
+var CLIENT_SCREENCAST_OPS = [
+  "request",
+  "screencast-started",
+  "start-failed",
+  "send-failed",
+  "frame",
+  "input",
+  "teardown"
+];
+function isClientScreencastOp(v) {
+  return typeof v === "string" && CLIENT_SCREENCAST_OPS.includes(v);
+}
+
+// app/lib/cdp-screencast-server.ts
+var HOP_BY_HOP = /* @__PURE__ */ new Set([
+  "connection",
+  "keep-alive",
+  "proxy-authenticate",
+  "proxy-authorization",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+var DROP_UPSTREAM = /* @__PURE__ */ new Set(["origin", "cookie"]);
+function decideCdpUpgrade(input) {
+  const corrId = newCorrId();
+  const qsIndex = input.url.indexOf("?");
+  const pathname = qsIndex === -1 ? input.url : input.url.slice(0, qsIndex);
+  const query = qsIndex === -1 ? "" : input.url.slice(qsIndex + 1);
+  const sid = sanitizeClientCorrId(parseQueryParam(query, "sid"));
+  if (pathname !== CDP_WS_PATH) {
+    return { allow: false, reason: "wrong-path", status: 0, sid, corrId };
+  }
+  const access = input.canAccess({
+    host: input.host,
+    remoteAddress: input.remoteAddress,
+    xForwardedFor: input.xForwardedFor,
+    cookieHeader: input.cookieHeader,
+    isPublicHost: input.isPublicHost
+  });
+  if (!access.allow) {
+    const publicHost = access.reason === "public-host";
+    return {
+      allow: false,
+      reason: publicHost ? "public-host" : "unauthorized",
+      status: publicHost ? 404 : 401,
+      sid,
+      corrId
+    };
+  }
+  const originHost = parseOriginHost(input.origin);
+  if (!originHost) {
+    return { allow: false, reason: "origin-missing-or-invalid", status: 403, sid, corrId };
+  }
+  if (originHost !== input.host) {
+    return { allow: false, reason: "origin-mismatch", status: 403, sid, corrId };
+  }
+  if (input.isPublicHost(originHost)) {
+    return { allow: false, reason: "origin-public-host", status: 403, sid, corrId };
+  }
+  if (input.isOperatorHost(originHost)) {
+    return { allow: false, reason: "origin-operator-host", status: 403, sid, corrId };
+  }
+  const targetId = parseQueryParam(query, "targetId");
+  if (!targetId || !TARGET_ID_RE.test(targetId)) {
+    return { allow: false, reason: "target-id-invalid", status: 400, sid, corrId };
+  }
+  return { allow: true, targetId, sid, corrId };
+}
+function buildCdpUpstreamRequest(input) {
+  const lines = [];
+  lines.push(`${input.method} /devtools/page/${input.targetId} HTTP/${input.httpVersion}`);
+  lines.push(`host: ${input.upstreamHost}:${input.upstreamPort}`);
+  for (const [rawName, value] of Object.entries(input.headers)) {
+    const name = rawName.toLowerCase();
+    if (name === "host") continue;
+    if (HOP_BY_HOP.has(name)) continue;
+    if (DROP_UPSTREAM.has(name)) continue;
+    if (value == null) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) lines.push(`${name}: ${v}`);
+    } else {
+      lines.push(`${name}: ${value}`);
+    }
+  }
+  const upgrade = headerString(input.headers.upgrade);
+  const connection = headerString(input.headers.connection);
+  if (upgrade) lines.push(`upgrade: ${upgrade}`);
+  if (connection) lines.push(`connection: ${connection}`);
+  return lines.join("\r\n") + "\r\n\r\n";
+}
+async function fetchPageTargets(deps) {
+  if (deps.platform !== "linux") {
+    return {
+      ok: false,
+      status: 501,
+      error: "The device browser is available on the Linux display stack only."
+    };
+  }
+  let res;
+  try {
+    res = await deps.fetchImpl(`http://127.0.0.1:${deps.cdpPort}/json/list`, {
+      signal: AbortSignal.timeout(5e3)
+    });
+  } catch {
+    return { ok: false, status: 502, error: "Chromium is not reachable on this device." };
+  }
+  if (!res.ok) {
+    return { ok: false, status: 502, error: `CDP /json/list returned ${res.status}` };
+  }
+  let parsed;
+  try {
+    parsed = await res.json();
+  } catch {
+    return { ok: false, status: 502, error: "CDP /json/list response was not JSON." };
+  }
+  return { ok: true, targets: selectPageTargets(parsed) };
+}
+var EVENT_DETAIL_KEYS = [
+  "seq",
+  "kind",
+  "count",
+  "format",
+  "everyNthFrame",
+  "stopSent",
+  "ackMs",
+  "err",
+  "method"
+];
+var DETAIL_MAX_LEN = 128;
+function parseScreencastEvent(body) {
+  if (typeof body !== "object" || body === null) return { ok: false };
+  const raw2 = body;
+  if (!isClientScreencastOp(raw2.op)) return { ok: false };
+  const detail = {
+    sid: sanitizeClientCorrId(typeof raw2.sid === "string" ? raw2.sid : null)
+  };
+  for (const key of EVENT_DETAIL_KEYS) {
+    const v = raw2[key];
+    if (typeof v === "number" || typeof v === "boolean") {
+      detail[key] = v;
+    } else if (typeof v === "string") {
+      detail[key] = sanitizeLogValue(v);
+    }
+  }
+  return { ok: true, op: raw2.op, detail };
+}
+function sanitizeLogValue(v) {
+  return v.replace(/[\r\n]+/g, " ").slice(0, DETAIL_MAX_LEN);
+}
+function renderFields(fields) {
+  return Object.entries(fields).filter(([, v]) => v !== void 0).map(([k, v]) => {
+    const s = v === null ? "null" : String(v);
+    return `${k}=${sanitizeLogValue(s)}`;
+  }).join(" ");
+}
+function screencastLog(op, fields = {}) {
+  const rendered = renderFields(fields);
+  console.error(`[browser/screencast] op=${sanitizeLogValue(op)}${rendered ? " " + rendered : ""}`);
+}
+function cdpWsCensusLog(fields) {
+  console.error(`[cdp-ws-census] ${renderFields(fields)}`);
+}
+function parseQueryParam(query, key) {
+  if (!query) return null;
+  for (const pair of query.split("&")) {
+    const eq = pair.indexOf("=");
+    const k = eq === -1 ? pair : pair.slice(0, eq);
+    if (k !== key) continue;
+    const v = eq === -1 ? "" : pair.slice(eq + 1);
+    try {
+      return decodeURIComponent(v);
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+function headerString(value) {
+  if (value == null) return void 0;
+  return Array.isArray(value) ? value[0] : value;
+}
+function parseOriginHost(origin) {
+  if (!origin) return null;
+  try {
+    return new URL(origin).hostname;
+  } catch {
+    return null;
+  }
+}
+
 export {
   HTTPException,
   HtmlEscapedCallbackPhase,
@@ -4137,5 +4345,12 @@ export {
   requireAdminSession,
   tryCookieBridgeForConversation,
   requireAdminCookie,
-  clientIpMiddleware
+  clientIpMiddleware,
+  CDP_WS_PATH,
+  decideCdpUpgrade,
+  buildCdpUpstreamRequest,
+  fetchPageTargets,
+  parseScreencastEvent,
+  screencastLog,
+  cdpWsCensusLog
 };

package/payload/server/{chunk-7MGR5M6G.js → chunk-UTIHI6KV.js}

@@ -8,7 +8,7 @@ import {
   getUserTimezone,
   isValidAccountId,
   registerLoop
-} from "./chunk-XCR5D2G3.js";
+} from "./chunk-BP7LH7MC.js";
 
 // app/lib/whatsapp/schema.ts
 import { z } from "zod";

package/payload/server/{manager-6XOWHREK.js → manager-B4LRDZKC.js}

@@ -28,8 +28,8 @@ import {
   startConnection,
   stopConnection,
   storeMessage
-} from "./chunk-7MGR5M6G.js";
-import "./chunk-XCR5D2G3.js";
+} from "./chunk-UTIHI6KV.js";
+import "./chunk-BP7LH7MC.js";
 import "./chunk-PFF6I7KP.js";
 export {
   buildNotifyPending,

package/payload/server/maxy-edge.js

@@ -1,8 +1,12 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
+  CDP_WS_PATH,
   Hono,
+  buildCdpUpstreamRequest,
   canAccessAdmin,
+  cdpWsCensusLog,
   clientIpMiddleware,
+  decideCdpUpgrade,
   describeRemoteSession,
   getOperatorDomains,
   getRequestListener,
@@ -12,18 +16,20 @@ import {
   requireAdminCookie,
   requirePortEnv,
   sanitizeClientCorrId,
+  screencastLog,
   vncLog,
   websockifyLog
-} from "./chunk-WT2PFGY4.js";
+} from "./chunk-DLG7XSLA.js";
 import {
+  CDP_PORT,
   LOG_DIR,
   WEBSOCKIFY_PORT
-} from "./chunk-XCR5D2G3.js";
+} from "./chunk-BP7LH7MC.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts
 import { createServer, request as httpRequest } from "http";
-import { createConnection as createConnection2 } from "net";
+import { createConnection as createConnection3 } from "net";
 import { readFileSync as readFileSync4, existsSync as existsSync4, watchFile } from "fs";
 import { homedir } from "os";
 import { join as join4 } from "path";
@@ -315,10 +321,10 @@ function parseOriginHost(origin) {
     return null;
   }
 }
-function writeStatusAndDestroy(socket, status, statusText) {
+function writeStatusAndDestroy(socket, status, statusText2) {
   try {
     socket.write(
-      `HTTP/1.1 ${status} ${statusText}\r
+      `HTTP/1.1 ${status} ${statusText2}\r
 Connection: close\r
 Content-Length: 0\r
 \r
@@ -329,6 +335,215 @@ Content-Length: 0\r
   socket.destroy();
 }
 
+// server/cdp-ws-proxy.ts
+import { createConnection as createConnection2 } from "net";
+var UPSTREAM_TIMEOUT_MS2 = 5e3;
+var REAP_INTERVAL_MS = 6e4;
+var liveSockets = /* @__PURE__ */ new Set();
+var reaper = null;
+function cdpSessionCount() {
+  const sids = /* @__PURE__ */ new Set();
+  for (const e of liveSockets) sids.add(e.sid);
+  return sids.size;
+}
+function ensureReaperArmed() {
+  if (reaper) return;
+  reaper = setInterval(sweepOrphans, REAP_INTERVAL_MS);
+  if (typeof reaper.unref === "function") reaper.unref();
+}
+function disarmReaperIfIdle() {
+  if (liveSockets.size > 0 || !reaper) return;
+  clearInterval(reaper);
+  reaper = null;
+}
+function sweepOrphans() {
+  reapOrphanedCdpSockets();
+  disarmReaperIfIdle();
+}
+function registerCdpSocket(entry) {
+  liveSockets.add(entry);
+  ensureReaperArmed();
+  cdpWsCensusLog({ liveSockets: liveSockets.size, sessions: cdpSessionCount() });
+}
+function unregisterCdpSocket(entry) {
+  if (!liveSockets.delete(entry)) return;
+  disarmReaperIfIdle();
+  cdpWsCensusLog({ liveSockets: liveSockets.size, sessions: cdpSessionCount() });
+}
+function reapOrphanedCdpSockets() {
+  let reaped = 0;
+  for (const entry of [...liveSockets]) {
+    if (!entry.client.destroyed) continue;
+    if (!entry.upstream.destroyed) {
+      try {
+        entry.upstream.destroy();
+      } catch {
+      }
+    }
+    liveSockets.delete(entry);
+    reaped += 1;
+  }
+  if (reaped > 0) {
+    screencastLog("orphan-reap", { closed: reaped, liveSockets: liveSockets.size });
+    cdpWsCensusLog({ liveSockets: liveSockets.size, sessions: cdpSessionCount() });
+  }
+  return reaped;
+}
+function attachCdpWsProxy(server2, opts) {
+  const upstreamHost = opts.upstreamHost ?? "127.0.0.1";
+  const upstreamPort = opts.upstreamPort ?? CDP_PORT;
+  const isOperatorHost2 = opts.isOperatorHost ?? (() => false);
+  server2.on("upgrade", (req, clientSocket, head) => {
+    try {
+      handleCdpUpgrade(req, clientSocket, head, {
+        isPublicHost: opts.isPublicHost,
+        isOperatorHost: isOperatorHost2,
+        upstreamHost,
+        upstreamPort
+      });
+    } catch (err) {
+      screencastLog("gate", { decision: "reject-handler-exception", err: err.message });
+      clientSocket.destroy();
+    }
+  });
+}
+function handleCdpUpgrade(req, clientSocket, head, opts) {
+  const host = (req.headers.host ?? "").split(":")[0];
+  const decision = decideCdpUpgrade({
+    url: req.url ?? "",
+    host,
+    origin: headerString2(req.headers.origin),
+    cookieHeader: headerString2(req.headers.cookie),
+    remoteAddress: req.socket.remoteAddress,
+    xForwardedFor: headerString2(req.headers["x-forwarded-for"]),
+    isPublicHost: opts.isPublicHost,
+    isOperatorHost: opts.isOperatorHost,
+    canAccess: canAccessAdmin
+  });
+  if (!decision.allow && decision.reason === "wrong-path") return;
+  if (!decision.allow) {
+    screencastLog("gate", {
+      sid: decision.sid,
+      corrId: decision.corrId,
+      decision: `reject-${decision.reason}`,
+      host,
+      ip: req.socket.remoteAddress
+    });
+    writeStatusAndDestroy2(clientSocket, decision.status, statusText(decision.status));
+    return;
+  }
+  const sid = decision.sid ?? decision.corrId;
+  screencastLog("gate", {
+    sid,
+    corrId: decision.corrId,
+    decision: "allow",
+    host,
+    cdpPort: opts.upstreamPort
+  });
+  const upstream = createConnection2({ host: opts.upstreamHost, port: opts.upstreamPort });
+  upstream.setTimeout(UPSTREAM_TIMEOUT_MS2);
+  const entry = {
+    sid,
+    client: clientSocket,
+    upstream
+  };
+  let bytesClientToUpstream = 0;
+  let bytesUpstreamToClient = 0;
+  let closedBy = null;
+  let proxyOpened = false;
+  const openedAt = Date.now();
+  const finish = (side, reason) => {
+    if (closedBy) return;
+    closedBy = side;
+    if (proxyOpened) {
+      unregisterCdpSocket(entry);
+      screencastLog("socket-closed", {
+        sid,
+        closedBy: side,
+        reason,
+        clientBytes: bytesClientToUpstream,
+        upstreamBytes: bytesUpstreamToClient,
+        durationMs: Date.now() - openedAt,
+        liveSockets: liveSockets.size
+      });
+    }
+    clientSocket.destroy();
+    upstream.destroy();
+  };
+  upstream.once("connect", () => {
+    upstream.setTimeout(0);
+    proxyOpened = true;
+    registerCdpSocket(entry);
+    screencastLog("cdp-connected", {
+      sid,
+      wsTarget: `/devtools/page/${decision.targetId}`,
+      liveSockets: liveSockets.size
+    });
+    upstream.write(
+      buildCdpUpstreamRequest({
+        method: req.method ?? "GET",
+        httpVersion: req.httpVersion,
+        headers: req.headers,
+        targetId: decision.targetId,
+        upstreamHost: opts.upstreamHost,
+        upstreamPort: opts.upstreamPort
+      })
+    );
+    if (head && head.length > 0) upstream.write(head);
+    clientSocket.on("data", (chunk) => {
+      bytesClientToUpstream += chunk.length;
+    });
+    upstream.on("data", (chunk) => {
+      bytesUpstreamToClient += chunk.length;
+    });
+    clientSocket.pipe(upstream);
+    upstream.pipe(clientSocket);
+    clientSocket.once("close", (hadError) => finish("client", hadError ? "error" : "normal"));
+    upstream.once("close", (hadError) => finish("upstream", hadError ? "error" : "normal"));
+    clientSocket.once("error", (err) => {
+      screencastLog("socket-error", { sid, side: "client", err: err.message });
+      finish("client", "error");
+    });
+    upstream.once("error", (err) => {
+      screencastLog("socket-error", { sid, side: "upstream", err: err.message });
+      finish("upstream", "error");
+    });
+  });
+  upstream.once("timeout", () => {
+    if (proxyOpened) return;
+    screencastLog("cdp-connect-failed", { sid, err: "timeout", timeoutMs: UPSTREAM_TIMEOUT_MS2 });
+    writeStatusAndDestroy2(clientSocket, 504, "Gateway Timeout");
+    upstream.destroy();
+  });
+  upstream.once("error", (err) => {
+    if (proxyOpened) return;
+    screencastLog("cdp-connect-failed", { sid, err: err.message });
+    writeStatusAndDestroy2(clientSocket, 502, "Bad Gateway");
+    upstream.destroy();
+  });
+}
+function headerString2(value) {
+  if (value == null) return void 0;
+  return Array.isArray(value) ? value[0] : value;
+}
+function statusText(status) {
+  if (status === 400) return "Bad Request";
+  if (status === 401) return "Unauthorized";
+  if (status === 404) return "Not Found";
+  return "Forbidden";
+}
+function writeStatusAndDestroy2(socket, status, text) {
+  try {
+    socket.write(`HTTP/1.1 ${status} ${text}\r
+Connection: close\r
+Content-Length: 0\r
+\r
+`);
+  } catch {
+  }
+  socket.destroy();
+}
+
 // server/routes/admin/version.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import { resolve, join as join2 } from "path";
@@ -764,7 +979,7 @@ function forwardHttp(clientReq, clientRes) {
   clientReq.pipe(upstream);
 }
 function forwardUpgrade(req, clientSocket, head) {
-  const upstream = createConnection2({ host: UPSTREAM_HOST, port: UPSTREAM_PORT });
+  const upstream = createConnection3({ host: UPSTREAM_HOST, port: UPSTREAM_PORT });
   upstream.setTimeout(5e3);
   upstream.once("connect", () => {
     upstream.setTimeout(0);
@@ -838,16 +1053,21 @@ attachVncWsProxy(server, {
   upstreamPort: WEBSOCKIFY_PORT2,
   brand: BRAND.productName
 });
+attachCdpWsProxy(server, {
+  isPublicHost,
+  isOperatorHost: (h) => isOperatorHost(h, getOperatorDomains())
+});
 server.on("upgrade", (req, socket, head) => {
   const url = req.url ?? "";
   const qsIndex = url.indexOf("?");
   const pathname = qsIndex === -1 ? url : url.slice(0, qsIndex);
-  if (pathname === "/websockify") return;
+  if (pathname === "/websockify" || pathname === CDP_WS_PATH) return;
   forwardUpgrade(req, socket, head);
 });
 server.listen(EDGE_PORT, EDGE_HOSTNAME, () => {
   console.log(`[edge] listening on http://${EDGE_HOSTNAME}:${EDGE_PORT}`);
   console.log(`[edge] brand=${BRAND.productName} holding-logo=${BRAND.logoDataUri ? "inlined" : "missing"} assets-dir=${BRAND_ASSETS_DIR || "(none)"}`);
   console.log(`[edge] /websockify \u2192 ${WEBSOCKIFY_HOST}:${WEBSOCKIFY_PORT2}`);
+  console.log(`[edge] ${CDP_WS_PATH} \u2192 127.0.0.1:${CDP_PORT} (screencast)`);
   console.log(`[edge] everything else \u2192 ${UPSTREAM_HOST}:${UPSTREAM_PORT}`);
 });

package/payload/server/public/activity.html

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Activity — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/activity-DGQt5ys_.js"></script>
+  <script type="module" crossorigin src="/assets/activity-BaSYn62l.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/triangle-alert--PCKaewD.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/triangle-alert-eLJHC_QJ.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/agents.html

@@ -5,11 +5,11 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Agents — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/agents-Bc2LZjwC.js"></script>
+  <script type="module" crossorigin src="/assets/agents-D8EJG-ta.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/assets/AdminLoginScreens-Bx9vPuUg.js

@@ -0,0 +1 @@
+import{o as e}from"./chunk-CltuBf4Z.js";import{B as t,H as n,J as r,R as i,W as a,g as o}from"./useSubAccountSwitcher-DMr3DR5N.js";import{k as s}from"./useVoiceRecorder-D5bFDRqL.js";import{D as c,E as l,O as u}from"./AdminShell-BxJPbC3p.js";import{t as d}from"./CdpScreencastSurface-5HLhTQTV.js";var f=e(r(),1);function p(e=`admin`){let[t,n]=(0,f.useState)(`loading`),[r,i]=(0,f.useState)(``),[o,c]=(0,f.useState)(``),[l,d]=(0,f.useState)(``),[p,m]=(0,f.useState)(!1),[h,g]=(0,f.useState)(!1),[_,v]=(0,f.useState)(!1),[y,b]=(0,f.useState)(!1),[x,S]=(0,f.useState)(!1),[C,w]=(0,f.useState)(null),[T,E]=(0,f.useState)(null),[D,O]=(0,f.useState)(void 0),[k,A]=(0,f.useState)(null),[j,M]=(0,f.useState)(void 0),[N,P]=(0,f.useState)(null),[F,I]=(0,f.useState)(null),[L,R]=(0,f.useState)(void 0),z=(0,f.useRef)(void 0),[B,V]=(0,f.useState)(!1),[H,U]=(0,f.useState)(!0);(0,f.useEffect)(()=>{typeof window>`u`||fetch(`/api/remote-auth/status`).then(e=>e.ok?e.json():null).then(e=>{e?.configured&&V(!0)}).catch(()=>{})},[]);let W=(0,f.useRef)(null),G=(0,f.useRef)(null);(0,f.useEffect)(()=>{async function e(){let e=null;try{e=sessionStorage.getItem(`maxy-admin-session-key`)}catch{}if(!e)return!1;try{let t=await fetch(`/api/admin/session?session_key=${encodeURIComponent(e)}`);if(t.status===401){try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return!1}if(!t.ok)return!1;let r=await t.json();w(r.session_key),I(r.sessionId??null),O(r.businessName),A(r.role??null),M(r.userName===void 0?null:r.userName),P(r.avatar??null);let i=s(r.thinkingView);return z.current=i,R(i),n(`chat`),!0}catch(e){return console.error(`[admin] session restore failed:`,e),!1}}async function t(r=2){try{let i=await fetch(`/api/health`);if(!i.ok){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check returned ${i.status} after retries`),n(`set-pin`);return}let a=await i.json();if(!a.pin_configured){n(`set-pin`);return}U(!!a.claude_authenticated);let o=!1;try{o=new URLSearchParams(window.location.search).get(`connect`)===`claude`}catch{}if(o){try{let e=new URL(window.location.href);e.searchParams.delete(`connect`),window.history.replaceState(null,``,e.pathname+e.search+e.hash)}catch{}if(!a.claude_authenticated){n(`connect-claude`);return}}if(await e())return;n(`enter-pin`)}catch(e){if(r>0)return await new Promise(e=>setTimeout(e,1500)),t(r-1);console.error(`[admin] health check failed:`,e),n(`set-pin`)}}t()},[]),(0,f.useEffect)(()=>{t===`chat`&&C&&fetch(`/api/admin/claude-info?session_key=${encodeURIComponent(C)}`).then(e=>{if(e.ok)return e.json()}).then(e=>{e&&E(e)}).catch(()=>{})},[t,C]);let K=(0,f.useRef)(null);(0,f.useEffect)(()=>{if(t!==`chat`)return;let e=setInterval(async()=>{try{let e=await fetch(`/api/health`);if(e.ok){let t=await e.json();U(t.auth_status!==`dead`&&t.auth_status!==`missing`)}}catch{}if(C)try{let e=await fetch(`/api/admin/session?session_key=${encodeURIComponent(C)}`);if(e.status!==401)return;let t=(await e.clone().json().catch(()=>null))?.code??`unknown-401`;if(t===`remote-auth-required`){a(`heartbeat`,`/api/admin/session`);return}console.warn(`[admin-auth] outcome=heartbeat-detected-expiry code=${t}`),K.current?.()}catch{}},300*1e3);return()=>clearInterval(e)},[t,C]),(0,f.useEffect)(()=>{t===`connect-claude`&&fetch(`/api/health`).then(e=>e.ok?e.json():null).then(e=>{e?.claude_authenticated&&(U(!0),n(`enter-pin`))}).catch(()=>{})},[t]);async function q(e,t){g(!0);try{let r=await fetch(`/api/admin/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:e,...t?{accountId:t}:{}})});if(!r.ok){let e=await r.json().catch(()=>({}));if(r.status===401&&e?.code===`remote-auth-required`){a(`enter-pin`,`/api/admin/session`);return}d(e.error||`Invalid PIN`);return}let o=await r.json();w(o.session_key),I(o.sessionId??null),O(o.businessName),A(o.role??null),M(o.userName===void 0?null:o.userName),P(o.avatar??null);let c=s(o.thinkingView);z.current=c,R(c);try{sessionStorage.setItem(`maxy-admin-session-key`,o.session_key)}catch{}i(``),n(`chat`)}catch(e){console.error(`[admin] connection error:`,e),d(`Could not connect.`)}finally{g(!1)}}let J=(0,f.useCallback)(async e=>{if(e.preventDefault(),h)return;d(``);let t=o.trim();if(!t){d(`Please enter your name.`);return}if(r.length<4){d(`PIN must be at least 4 characters.`);return}let s=r;g(!0);try{let e=await fetch(`/api/onboarding/set-pin`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:s,name:t})});if(!e.ok){let t=await e.json().catch(()=>({}));if(e.status===401&&t?.code===`remote-auth-required`){a(`set-pin`,`/api/onboarding/set-pin`);return}if(e.status===409){console.log(`[admin] PIN already configured — re-checking health`);try{let e=await fetch(`/api/health`);if(e.ok){let r=await e.json();r.pin_configured&&r.claude_authenticated?n(`enter-pin`):r.pin_configured?n(`connect-claude`):d(t.error||`Failed to set PIN.`)}else n(`enter-pin`)}catch{n(`enter-pin`)}return}d(t.error||`Failed to set PIN.`);return}let r=await fetch(`/api/health`);if((r.ok?await r.json():null)?.claude_authenticated){await q(s);return}i(``),n(`connect-claude`)}catch(e){console.error(`[admin] connection error:`,e),d(`Could not connect.`)}finally{g(!1)}},[r,h,o]),Y=(0,f.useCallback)(async e=>{e.preventDefault(),d(``),await q(r)},[r]),X=(0,f.useCallback)(async()=>{S(!0);try{if(!await u())return console.warn(`[admin-ui] claude-disconnect not verified — credentials may persist; staying put`),!1;U(!1),w(null),A(null),M(void 0),P(null);try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return n(`connect-claude`),!0}finally{S(!1)}},[]),Z=(0,f.useCallback)(()=>{w(null),A(null),M(void 0),P(null);try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}i(``),d(``),n(`enter-pin`)},[]);return(0,f.useEffect)(()=>{K.current=Z},[Z]),{appState:t,setAppState:n,pin:r,setPin:i,operatorName:o,setOperatorName:c,pinError:l,setPinError:d,showPin:p,setShowPin:m,pinLoading:h,authPolling:_,setAuthPolling:v,authLoading:y,setAuthLoading:b,disconnecting:x,cacheKey:C,setCacheKey:w,claudeInfo:T,setClaudeInfo:E,businessName:D,role:k,userName:j,userAvatar:N,sessionId:F,setSessionId:I,expandAll:L,setExpandAll:R,expandAllDefaultRef:z,remoteAuthEnabled:B,claudeConnected:H,pinInputRef:W,setPinFormRef:G,handleSetPin:J,handleLogin:Y,handleDisconnect:X,handleLogout:Z}}var m=n();function h({inputRef:e,value:t,onChange:n,onComplete:r,showPin:i,autoFocus:a}){let o=(0,f.useRef)([]);function s(e,r){r.key===`Backspace`?(r.preventDefault(),t[e]?n(t.slice(0,e)+t.slice(e+1)):e>0&&(n(t.slice(0,e-1)+t.slice(e)),o.current[e-1]?.focus())):r.key===`ArrowLeft`&&e>0?o.current[e-1]?.focus():r.key===`ArrowRight`&&e<5?o.current[e+1]?.focus():r.key===`Enter`&&(r.preventDefault(),r.currentTarget.form?.requestSubmit())}function c(e,i){let a=i.nativeEvent.data;if(!a||!/^\d$/.test(a))return;let s=t.split(``);for(s[e]=a;s.length<e;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);n(c),c.length===6?r?.(c):e<5&&o.current[e+1]?.focus()}function l(e){e.preventDefault();let t=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);t&&(n(t),t.length===6?r?.(t):o.current[t.length]?.focus())}return(0,m.jsx)(`div`,{className:`pin-field`,children:Array.from({length:6}).map((n,r)=>(0,m.jsx)(`input`,{ref:t=>{o.current[r]=t,r===0&&e&&(e.current=t)},type:`text`,inputMode:`numeric`,className:`pin-box${t[r]?` pin-box-filled`:``}`,value:t[r]?i?t[r]:`•`:``,onKeyDown:e=>s(r,e),onInput:e=>c(r,e),onPaste:l,onFocus:e=>e.target.select(),autoFocus:a&&r===0,autoComplete:`off`,maxLength:1,"aria-label":`PIN digit ${r+1}`},r))})}function g(e){let{pin:n,setPin:r,showPin:a,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,setPinFormRef:f,onSubmit:p,operatorName:g,setOperatorName:_}=e;return(0,m.jsx)(`div`,{className:`connect-page`,children:(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsx)(`img`,{src:t,alt:i.productName,className:`connect-logo connect-logo--maxy`}),!i.logoContainsName&&(0,m.jsxs)(`h1`,{className:`connect-title`,children:[`Welcome to `,i.productName]}),(0,m.jsxs)(`p`,{className:`connect-subtitle`,children:[`Tell `,i.productName,` who you are, then choose a PIN.`]}),(0,m.jsxs)(`form`,{ref:f,onSubmit:p,className:`connect-pin-form`,children:[(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(`input`,{type:`text`,className:`connect-name-input`,placeholder:`Your full name`,value:g,onChange:e=>_(e.target.value),autoComplete:`name`,autoFocus:!0,required:!0,"aria-label":`Your full name`}),(0,m.jsx)(`div`,{style:{width:38,flexShrink:0},"aria-hidden":`true`})]}),(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(h,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:a}),(0,m.jsx)(l,{variant:`send`,type:`submit`,disabled:!n||!g.trim(),loading:s,"aria-label":`Set PIN`,children:(0,m.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,m.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,m.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,m.jsx)(c,{checked:a,onChange:()=>o(e=>!e),label:`Show PIN`})]}),u&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:u})]})})}function _(e){let{pin:n,setPin:r,showPin:a,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,onSubmit:f,remoteAuthEnabled:p,onSignOutRemote:g}=e;return(0,m.jsxs)(`div`,{className:`connect-page`,children:[p&&g&&(0,m.jsx)(`button`,{type:`button`,className:`connect-signout`,onClick:g,children:`Sign out`}),(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsx)(`img`,{src:t,alt:i.productName,className:`connect-logo connect-logo--maxy`}),!i.logoContainsName&&(0,m.jsx)(`h1`,{className:`connect-title`,children:i.productName}),(0,m.jsxs)(`form`,{onSubmit:f,className:`connect-pin-form`,children:[(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(h,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:a,autoFocus:!0}),(0,m.jsx)(l,{variant:`send`,type:`submit`,disabled:!n,loading:s,children:(0,m.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,m.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,m.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,m.jsx)(`div`,{className:`pin-options`,children:(0,m.jsx)(c,{checked:a,onChange:()=>o(e=>!e),label:`Show PIN`})})]}),u&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:u})]})]})}function v(e){let{authPolling:n,setAuthPolling:r,authLoading:a,setAuthLoading:o,pinError:s,setPinError:c,setAppState:u}=e,[p,h]=(0,f.useState)(!1),[g,_]=(0,f.useState)(!1),[v,y]=(0,f.useState)(``),[b,x]=(0,f.useState)(``),[S,C]=(0,f.useState)(``),[w,T]=(0,f.useState)(null),[E,D]=(0,f.useState)(null),[O,k]=(0,f.useState)(!1);(0,f.useEffect)(()=>{try{D(sessionStorage.getItem(`maxy-admin-session-key`))}catch{}k(!0)},[]);async function A(){C(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`paste-code`,code:b})})).json();e.accepted?(C(`Code submitted. Finishing sign-in…`),x(``)):C(e.error||`Could not submit code.`)}catch(e){console.error(`[admin] paste-code error:`,e),C(`Could not submit code.`)}}async function j(){_(!0),c(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`launch-browser`})})).json();e.launched?h(!0):e.error&&c(e.error)}catch(e){console.error(`[admin] browser launch error:`,e),c(`Could not launch browser.`)}_(!1)}async function M(){o(!0),c(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`})).json();if(e.started){r(!0),h(!0),o(!1),y(e.transport||``);for(let e=0;e<120;e++){await new Promise(e=>setTimeout(e,2e3));let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`wait`})})).json();if(typeof e.authTargetId==`string`&&T(e.authTargetId),e.authenticated){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),u(`enter-pin`);return}}c(`Timed out waiting for sign-in. Try again.`),r(!1)}else e.error&&c(e.error)}catch(e){console.error(`[admin] auth flow error:`,e),c(`Could not start auth flow.`)}o(!1)}async function N(){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),r(!1),c(``)}return n||p?(0,m.jsxs)(`div`,{style:{display:`flex`,flexDirection:`column`,height:`100dvh`,overflow:`auto`},children:[(0,m.jsxs)(`header`,{className:`chat-header`,style:{paddingBottom:`12px`,flexShrink:0,position:`relative`,maxWidth:`680px`,width:`100%`,margin:`0 auto`,padding:`24px 20px 12px`},children:[n?(0,m.jsx)(`button`,{onClick:N,style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Cancel`,children:`✕`}):(0,m.jsx)(`button`,{onClick:()=>h(!1),style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Close browser`,children:`✕`}),(0,m.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`chat-logo`}),(0,m.jsx)(`h1`,{className:`chat-tagline`,children:`Connect Claude`}),(0,m.jsx)(`p`,{className:`chat-intro`,children:n?`Sign in and authorize in the browser below.`:`Open your email or prepare your accounts, then sign in.`}),!n&&(0,m.jsx)(`div`,{style:{marginTop:`12px`},children:(0,m.jsx)(l,{variant:`primary`,onClick:M,disabled:a,children:a?(0,m.jsxs)(m.Fragment,{children:[(0,m.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`})}),n&&v===`native`&&(0,m.jsxs)(`div`,{style:{marginTop:`14px`,maxWidth:`420px`,margin:`14px auto 0`,display:`flex`,flexDirection:`column`,gap:`8px`},children:[(0,m.jsx)(`label`,{style:{fontSize:`12px`,color:`#999`,lineHeight:1.4},children:`If the browser didn't finish sign-in, paste the code or full redirect URL from Claude's page:`}),(0,m.jsxs)(`div`,{style:{display:`flex`,gap:`8px`},children:[(0,m.jsx)(`input`,{type:`text`,value:b,onChange:e=>x(e.target.value),placeholder:`Paste code or redirect URL`,style:{flex:1,padding:`8px 10px`,fontSize:`13px`,border:`1px solid #ccc`,borderRadius:`6px`}}),(0,m.jsx)(l,{variant:`primary`,onClick:A,disabled:!b.trim(),children:`Submit`})]}),S&&(0,m.jsx)(`p`,{style:{fontSize:`12px`,color:`#999`,margin:0},children:S})]})]}),(0,m.jsx)(`div`,{style:{flex:1,display:`flex`,flexDirection:`column`,minHeight:0,gap:`10px`,padding:`0 0 16px`},children:O&&(0,m.jsx)(d,{preferTargetId:w,cacheKey:E})}),s&&(0,m.jsx)(`p`,{className:`admin-pin-error`,style:{textAlign:`center`,padding:`0 20px 16px`},children:s})]}):(0,m.jsx)(`div`,{className:`connect-page`,children:(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsxs)(`div`,{className:`connect-logos`,children:[(0,m.jsx)(`div`,{className:`connect-logo-wrap`,children:(0,m.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`connect-logo`})}),(0,m.jsx)(`svg`,{className:`connect-arrow`,viewBox:`0 0 48 24`,fill:`none`,xmlns:`http://www.w3.org/2000/svg`,children:(0,m.jsx)(`path`,{d:`M0 12h44m0 0l-8-8m8 8l-8 8`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`})}),(0,m.jsxs)(`div`,{className:`connect-logo-wrap`,children:[(0,m.jsx)(`img`,{src:t,alt:i.productName,className:`connect-logo connect-logo--maxy`}),!i.logoContainsName&&(0,m.jsx)(`span`,{className:`connect-logo-label`,children:i.productName})]})]}),(0,m.jsxs)(`h1`,{className:`connect-title`,children:[`Connect Claude to power `,i.productName]}),(0,m.jsx)(`p`,{className:`connect-subtitle`,children:`Sign in with your Anthropic account to get started.`}),(0,m.jsx)(l,{variant:`primary`,onClick:M,disabled:a,children:a?(0,m.jsxs)(m.Fragment,{children:[(0,m.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`}),(0,m.jsx)(`p`,{style:{marginTop:`6px`,fontSize:`11px`,color:`#999`,maxWidth:`300px`,textAlign:`center`,lineHeight:`1.4`},children:`First time? You may need to sign into your email and Anthropic account in the browser before connecting.`}),(0,m.jsx)(`button`,{onClick:j,disabled:g,style:{marginTop:`12px`,background:`none`,border:`none`,color:`var(--color-primary, #666)`,fontSize:`13px`,cursor:`pointer`,textDecoration:`underline`,textUnderlineOffset:`3px`},children:g?`Launching…`:`Open browser first`}),s&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:s})]})})}function y({auth:e}){return e.appState===`loading`?(0,m.jsx)(o,{surface:`gate`}):e.appState===`set-pin`?(0,m.jsx)(g,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,setPinFormRef:e.setPinFormRef,onSubmit:e.handleSetPin,operatorName:e.operatorName,setOperatorName:e.setOperatorName}):e.appState===`connect-claude`?(0,m.jsx)(v,{authPolling:e.authPolling,setAuthPolling:e.setAuthPolling,authLoading:e.authLoading,setAuthLoading:e.setAuthLoading,pinError:e.pinError,setPinError:e.setPinError,setAppState:e.setAppState}):e.appState===`enter-pin`?(0,m.jsx)(_,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,onSubmit:e.handleLogin,remoteAuthEnabled:e.remoteAuthEnabled,onSignOutRemote:()=>{console.info(`[admin-ui] remote-auth sign-out → /__remote-auth/logout`),window.location.href=`/__remote-auth/logout`}}):null}export{p as n,y as t};