@tangle-network/agent-app 0.45.29 → 0.45.30

package/dist/chunk-5FAKBTCK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/preflight/index.ts"],"sourcesContent":["/**\n * `/preflight` — deploy-time secret-liveness probes.\n *\n * WHY THIS EXISTS: on 2026-07-15 four secrets were simultaneously dead in one\n * production day — a dead `SANDBOX_API_KEY`, a stale `SANDBOX_API_URL`, and a\n * dead LiteLLM router key + URL. Each one was present in `wrangler secret list`\n * (so nothing looked wrong) yet invalid against its live endpoint, and nothing\n * anywhere checked liveness. CI cannot hold production secrets, so this binds\n * at DEPLOY time instead: a product declares a handful of probes built from its\n * real env, the deploy workflow runs `agent-app-preflight` as a step, and a\n * dead secret fails the deploy with a message that names exactly which secret\n * to rotate.\n *\n * A probe is `{ name, run, critical? }`; `run()` returns `{ ok, detail? }`.\n * The standard builders (`requiredValueProbe`, `routerChatProbe`,\n * `sandboxAuthProbe`, `httpHeadProbe`) each take explicit config — they read\n * nothing global — so the same probe runs identically in a deploy step, a test,\n * or a local check. `runPreflight` fans\n * the probes out, times each, and folds them into a pass/fail report: any\n * failed CRITICAL probe fails the whole run (probes are critical by default).\n *\n * Server-only: probes carry live API keys and hit live endpoints. This subpath\n * must never reach a browser bundle.\n */\n\n/** One probe's outcome. `detail` should name the secret to rotate on failure. */\nexport interface PreflightProbeResult {\n  ok: boolean\n  detail?: string\n}\n\n/**\n * A liveness probe. `run` performs one cheap live call and maps the result to\n * `{ ok, detail }`. `critical` defaults to `true` — a failed critical probe\n * fails the whole preflight (and the deploy).\n */\nexport interface PreflightProbe {\n  name: string\n  run: () => Promise<PreflightProbeResult>\n  critical?: boolean\n}\n\n/** Per-probe verdict enriched with the resolved criticality and measured latency. */\nexport interface PreflightProbeVerdict {\n  name: string\n  ok: boolean\n  critical: boolean\n  latencyMs: number\n  detail?: string\n}\n\n/** Aggregate of every probe verdict plus the overall pass/fail decision. */\nexport interface PreflightReport {\n  /** `false` if any critical probe failed. */\n  ok: boolean\n  probes: PreflightProbeVerdict[]\n  passed: number\n  failed: number\n  criticalFailures: number\n  durationMs: number\n}\n\n/** Deploy-time deadline for a single probe. Cold upstreams are slow; a dead\n *  endpoint should still fail fast, so 10s is the ceiling, not the target. */\nconst DEFAULT_TIMEOUT_MS = 10_000\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' ? performance.now() : Date.now()\n}\n\nfunction isAbortLike(err: unknown): boolean {\n  return err instanceof Error && (err.name === 'TimeoutError' || err.name === 'AbortError')\n}\n\n/** Strip bearer tokens / key material before an upstream string is surfaced in\n *  a report (deploy logs are not always private). */\nfunction sanitizeUpstreamMessage(input: unknown): string {\n  const message = input instanceof Error ? input.message : String(input)\n  return message\n    .replace(/Bearer\\s+[^\\s]+/gi, 'Bearer [redacted]')\n    .replace(/\\b(?:sk|pk|tc)[_-][A-Za-z0-9_-]{8,}\\b/g, '[redacted-key]')\n}\n\nfunction snippet(body: string): string {\n  const trimmed = body.trim()\n  if (!trimmed) return ''\n  const clipped = trimmed.length > 180 ? `${trimmed.slice(0, 180)}…` : trimmed\n  return `: ${sanitizeUpstreamMessage(clipped)}`\n}\n\ntype ProbeOutcome =\n  | { kind: 'status'; status: number; bodyText: string }\n  | { kind: 'timeout'; timeoutMs: number }\n  | { kind: 'network'; message: string }\n\ninterface HttpProbeCall {\n  fetchImpl: typeof fetch\n  url: string\n  method: string\n  headers?: Record<string, string>\n  body?: string\n  timeoutMs: number\n}\n\n/** One live HTTP call, folded to a probe outcome. Never throws: a timeout, a\n *  DNS/connection failure, and any thrown error all become an outcome so the\n *  probe can classify them into an actionable detail. */\nasync function runHttp(call: HttpProbeCall): Promise<ProbeOutcome> {\n  let response: Response\n  try {\n    response = await call.fetchImpl(call.url, {\n      method: call.method,\n      headers: call.headers,\n      body: call.body,\n      signal: AbortSignal.timeout(call.timeoutMs),\n    })\n  } catch (err) {\n    if (isAbortLike(err)) return { kind: 'timeout', timeoutMs: call.timeoutMs }\n    return { kind: 'network', message: sanitizeUpstreamMessage(err) }\n  }\n  let bodyText = ''\n  try {\n    bodyText = await response.text()\n  } catch {\n    bodyText = ''\n  }\n  return { kind: 'status', status: response.status, bodyText }\n}\n\ninterface AuthedClassifyContext {\n  /** Full endpoint reached, for the message. */\n  endpoint: string\n  /** How to name the API-key secret when the endpoint reports auth failure. */\n  keyLabel: string\n  /** How to name the URL secret when the endpoint is unreachable. */\n  urlLabel: string\n}\n\n/**\n * Shared classification for an authed liveness endpoint (router, sandbox):\n * 2xx → live; 401/403 → the KEY is dead, name it; 503 → the UPSTREAM is down,\n * the key still looks valid, don't rotate; timeout / unreachable → the URL is\n * likely stale, name it; anything else → an unexpected status with a snippet.\n */\nfunction classifyAuthed(outcome: ProbeOutcome, ctx: AuthedClassifyContext): PreflightProbeResult {\n  switch (outcome.kind) {\n    case 'status': {\n      const { status, bodyText } = outcome\n      if (status >= 200 && status < 300) return { ok: true, detail: `${status} OK` }\n      if (status === 401 || status === 403) {\n        return {\n          ok: false,\n          detail: `DEAD KEY — ${ctx.endpoint} returned ${status}; rotate ${ctx.keyLabel}`,\n        }\n      }\n      if (status === 503) {\n        return {\n          ok: false,\n          detail: `UPSTREAM DOWN — ${ctx.endpoint} returned 503; ${ctx.keyLabel} still looks valid, retry or check the provider (do NOT rotate)`,\n        }\n      }\n      return { ok: false, detail: `UNEXPECTED ${status} from ${ctx.endpoint}${snippet(bodyText)}` }\n    }\n    case 'timeout':\n      return {\n        ok: false,\n        detail: `TIMEOUT after ${outcome.timeoutMs}ms reaching ${ctx.endpoint} — check ${ctx.urlLabel}`,\n      }\n    case 'network':\n      return {\n        ok: false,\n        detail: `UNREACHABLE ${ctx.endpoint} (${outcome.message}) — check ${ctx.urlLabel}`,\n      }\n  }\n}\n\nfunction trimTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, '')\n}\n\n// --- Standard probe builders --------------------------------------------------\n\n/** Configuration for a required non-empty production value. */\nexport interface RequiredValueProbeConfig {\n  /** Human-readable value name, normally the environment variable name. */\n  name: string\n  /** Value supplied by the caller. It is checked but never included in output. */\n  value: string | null | undefined\n  /** Default `true`. */\n  critical?: boolean\n  /** Failure detail. Defaults to `NAME is unset`. */\n  missingDetail?: string\n}\n\n/**\n * Require a non-empty string without ever printing its value.\n *\n * This covers local signing keys and other values that have no external\n * endpoint to probe. Credentials with a live API should use a liveness probe\n * instead, because presence alone cannot detect an expired key.\n */\nexport function requiredValueProbe(config: RequiredValueProbeConfig): PreflightProbe {\n  return {\n    name: `required:${config.name}`,\n    critical: config.critical,\n    run: async () => {\n      const ok = typeof config.value === 'string' && config.value.trim().length > 0\n      return { ok, detail: ok ? undefined : (config.missingDetail ?? `${config.name} is unset`) }\n    },\n  }\n}\n\n/** Define configuration options for probing an LLM router with authentication and model details */\nexport interface RouterChatProbeConfig {\n  /** LLM router base URL (LiteLLM / OpenAI-compatible), e.g. `https://router…`. */\n  baseUrl: string\n  apiKey: string\n  /** A cheap model id available on the router. */\n  model: string\n  /** Probe name in the report. Default `'router-chat'`. */\n  name?: string\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the API key, named verbatim in a dead-key failure. */\n  keySecret?: string\n  /** Env-var name of the base URL, named verbatim in an unreachable failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Probe an OpenAI-compatible LLM router with one cheap `POST /chat/completions`\n * (`max_tokens: 1`). 200 → live; 401/403 → dead router key; 503 → upstream\n * provider down (key still valid); timeout / unreachable → check the router URL.\n */\nexport function routerChatProbe(config: RouterChatProbeConfig): PreflightProbe {\n  const keyLabel = config.keySecret ?? 'the router API key'\n  const urlLabel = config.urlSecret ?? 'the router base URL'\n  return {\n    name: config.name ?? 'router-chat',\n    critical: config.critical,\n    run: async () => {\n      const base = trimTrailingSlash(config.baseUrl)\n      const endpoint = `${base}/chat/completions`\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: endpoint,\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${config.apiKey}`,\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({\n          model: config.model,\n          messages: [{ role: 'user', content: 'ping' }],\n          max_tokens: 1,\n        }),\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      return classifyAuthed(outcome, { endpoint, keyLabel, urlLabel })\n    },\n  }\n}\n\n/** Define configuration options for probing sandbox authentication endpoints */\nexport interface SandboxAuthProbeConfig {\n  /** Sandbox API base URL. */\n  baseUrl: string\n  apiKey: string\n  /** Probe name in the report. Default `'sandbox-auth'`. */\n  name?: string\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the API key, named verbatim in a dead-key failure. */\n  keySecret?: string\n  /** Env-var name of the base URL, named verbatim in an unreachable failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Probe the sandbox API with a cheap authed `GET /v1/sandboxes?limit=1`.\n * 200 → live; 401/403 → dead sandbox key; 503 → sandbox platform down (key\n * still valid); timeout / unreachable → check the sandbox URL.\n */\nexport function sandboxAuthProbe(config: SandboxAuthProbeConfig): PreflightProbe {\n  const keyLabel = config.keySecret ?? 'the sandbox API key'\n  const urlLabel = config.urlSecret ?? 'the sandbox base URL'\n  return {\n    name: config.name ?? 'sandbox-auth',\n    critical: config.critical,\n    run: async () => {\n      const base = trimTrailingSlash(config.baseUrl)\n      const endpoint = `${base}/v1/sandboxes?limit=1`\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: endpoint,\n        method: 'GET',\n        headers: { Authorization: `Bearer ${config.apiKey}` },\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      return classifyAuthed(outcome, { endpoint, keyLabel, urlLabel })\n    },\n  }\n}\n\n/** Define configuration options for performing an HTTP HEAD probe to check URL availability */\nexport interface HttpHeadProbeConfig {\n  /** Probe name in the report. */\n  name: string\n  /** URL to `HEAD`. */\n  url: string\n  /**\n   * Accepted status(es). A single number requires an exact match; an array\n   * requires membership. Omitted → any 2xx/3xx (the host is up and the path\n   * resolves) counts as live.\n   */\n  expectStatus?: number | number[]\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the URL, named verbatim in a failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\nfunction statusMatches(status: number, expect?: number | number[]): boolean {\n  if (expect === undefined) return status >= 200 && status < 400\n  if (Array.isArray(expect)) return expect.includes(status)\n  return status === expect\n}\n\nfunction describeExpected(expect?: number | number[]): string {\n  if (expect === undefined) return '2xx/3xx'\n  if (Array.isArray(expect)) return expect.join(' or ')\n  return String(expect)\n}\n\n/**\n * Probe a plain reachability endpoint (e.g. a platform base URL) with a `HEAD`.\n * Confirms the URL is live and resolving — the class of failure behind a stale\n * platform URL that still sits in the secret store.\n */\nexport function httpHeadProbe(config: HttpHeadProbeConfig): PreflightProbe {\n  const urlLabel = config.urlSecret ?? `the URL for ${config.name}`\n  return {\n    name: config.name,\n    critical: config.critical,\n    run: async () => {\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: config.url,\n        method: 'HEAD',\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      switch (outcome.kind) {\n        case 'status': {\n          if (statusMatches(outcome.status, config.expectStatus)) {\n            return { ok: true, detail: `${outcome.status} OK` }\n          }\n          return {\n            ok: false,\n            detail: `UNEXPECTED ${outcome.status} from ${config.url} (expected ${describeExpected(config.expectStatus)}) — check ${urlLabel}`,\n          }\n        }\n        case 'timeout':\n          return {\n            ok: false,\n            detail: `TIMEOUT after ${outcome.timeoutMs}ms reaching ${config.url} — check ${urlLabel}`,\n          }\n        case 'network':\n          return {\n            ok: false,\n            detail: `UNREACHABLE ${config.url} (${outcome.message}) — check ${urlLabel}`,\n          }\n      }\n    },\n  }\n}\n\n// --- Runner + report ----------------------------------------------------------\n\nasync function runOne(probe: PreflightProbe): Promise<PreflightProbeVerdict> {\n  const critical = probe.critical ?? true\n  const start = nowMs()\n  try {\n    const result = await probe.run()\n    return {\n      name: probe.name,\n      ok: result.ok,\n      critical,\n      latencyMs: Math.round(nowMs() - start),\n      detail: result.detail,\n    }\n  } catch (err) {\n    return {\n      name: probe.name,\n      ok: false,\n      critical,\n      latencyMs: Math.round(nowMs() - start),\n      detail: `probe threw: ${sanitizeUpstreamMessage(err)}`,\n    }\n  }\n}\n\n/**\n * Run every probe (concurrently), time each, and fold into a report. The run\n * fails (`ok: false`) iff a critical probe fails; a failed non-critical probe\n * is a warning that does not block the deploy.\n */\nexport async function runPreflight(probes: PreflightProbe[]): Promise<PreflightReport> {\n  const start = nowMs()\n  const verdicts = await Promise.all(probes.map(runOne))\n  const failed = verdicts.filter((v) => !v.ok)\n  const criticalFailures = failed.filter((v) => v.critical).length\n  return {\n    ok: criticalFailures === 0,\n    probes: verdicts,\n    passed: verdicts.length - failed.length,\n    failed: failed.length,\n    criticalFailures,\n    durationMs: Math.round(nowMs() - start),\n  }\n}\n\ninterface FormatRow {\n  status: string\n  name: string\n  latency: string\n  detail: string\n}\n\n/** Render a report as an aligned, operator-readable table + verdict line. Pure\n *  (no I/O) so it is trivially testable and reusable by the bin. */\nexport function formatPreflightReport(report: PreflightReport): string {\n  const header: FormatRow = { status: 'STATUS', name: 'PROBE', latency: 'LATENCY', detail: 'DETAIL' }\n  const rows: FormatRow[] = report.probes.map((p) => ({\n    status: p.ok ? 'PASS' : p.critical ? 'FAIL' : 'WARN',\n    name: p.name,\n    latency: `${p.latencyMs}ms`,\n    detail: p.detail ?? '',\n  }))\n  const statusW = Math.max(header.status.length, ...rows.map((r) => r.status.length))\n  const nameW = Math.max(header.name.length, ...rows.map((r) => r.name.length))\n  const latencyW = Math.max(header.latency.length, ...rows.map((r) => r.latency.length))\n  const line = (r: FormatRow): string =>\n    `${r.status.padEnd(statusW)}  ${r.name.padEnd(nameW)}  ${r.latency.padStart(latencyW)}  ${r.detail}`.trimEnd()\n\n  const out: string[] = [\n    line(header),\n    `${'-'.repeat(statusW)}  ${'-'.repeat(nameW)}  ${'-'.repeat(latencyW)}  ------`,\n    ...rows.map(line),\n    '',\n  ]\n  if (report.ok) {\n    const warn = report.failed > 0 ? ` (${report.failed} non-critical warning(s))` : ''\n    out.push(`Preflight PASSED — ${report.passed}/${report.probes.length} probe(s) live${warn}`)\n  } else {\n    const dead = report.probes\n      .filter((p) => !p.ok && p.critical)\n      .map((p) => p.name)\n      .join(', ')\n    out.push(`Preflight FAILED — ${report.criticalFailures} critical probe(s) dead: ${dead}`)\n    out.push('Rotate the secret named in each FAIL row above, then redeploy.')\n  }\n  return out.join('\\n')\n}\n"],"mappings":";AAgEA,IAAM,qBAAqB;AAE3B,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,cAAc,YAAY,IAAI,IAAI,KAAK,IAAI;AAC3E;AAEA,SAAS,YAAY,KAAuB;AAC1C,SAAO,eAAe,UAAU,IAAI,SAAS,kBAAkB,IAAI,SAAS;AAC9E;AAIA,SAAS,wBAAwB,OAAwB;AACvD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QACJ,QAAQ,qBAAqB,mBAAmB,EAChD,QAAQ,0CAA0C,gBAAgB;AACvE;AAEA,SAAS,QAAQ,MAAsB;AACrC,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,GAAG,CAAC,WAAM;AACrE,SAAO,KAAK,wBAAwB,OAAO,CAAC;AAC9C;AAmBA,eAAe,QAAQ,MAA4C;AACjE,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK,UAAU,KAAK,KAAK;AAAA,MACxC,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,QAAQ,KAAK,SAAS;AAAA,IAC5C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,YAAY,GAAG,EAAG,QAAO,EAAE,MAAM,WAAW,WAAW,KAAK,UAAU;AAC1E,WAAO,EAAE,MAAM,WAAW,SAAS,wBAAwB,GAAG,EAAE;AAAA,EAClE;AACA,MAAI,WAAW;AACf,MAAI;AACF,eAAW,MAAM,SAAS,KAAK;AAAA,EACjC,QAAQ;AACN,eAAW;AAAA,EACb;AACA,SAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,QAAQ,SAAS;AAC7D;AAiBA,SAAS,eAAe,SAAuB,KAAkD;AAC/F,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK,UAAU;AACb,YAAM,EAAE,QAAQ,SAAS,IAAI;AAC7B,UAAI,UAAU,OAAO,SAAS,IAAK,QAAO,EAAE,IAAI,MAAM,QAAQ,GAAG,MAAM,MAAM;AAC7E,UAAI,WAAW,OAAO,WAAW,KAAK;AACpC,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,mBAAc,IAAI,QAAQ,aAAa,MAAM,YAAY,IAAI,QAAQ;AAAA,QAC/E;AAAA,MACF;AACA,UAAI,WAAW,KAAK;AAClB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,wBAAmB,IAAI,QAAQ,kBAAkB,IAAI,QAAQ;AAAA,QACvE;AAAA,MACF;AACA,aAAO,EAAE,IAAI,OAAO,QAAQ,cAAc,MAAM,SAAS,IAAI,QAAQ,GAAG,QAAQ,QAAQ,CAAC,GAAG;AAAA,IAC9F;AAAA,IACA,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ,iBAAiB,QAAQ,SAAS,eAAe,IAAI,QAAQ,iBAAY,IAAI,QAAQ;AAAA,MAC/F;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ,eAAe,IAAI,QAAQ,KAAK,QAAQ,OAAO,kBAAa,IAAI,QAAQ;AAAA,MAClF;AAAA,EACJ;AACF;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;AAuBO,SAAS,mBAAmB,QAAkD;AACnF,SAAO;AAAA,IACL,MAAM,YAAY,OAAO,IAAI;AAAA,IAC7B,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,KAAK,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,EAAE,SAAS;AAC5E,aAAO,EAAE,IAAI,QAAQ,KAAK,SAAa,OAAO,iBAAiB,GAAG,OAAO,IAAI,YAAa;AAAA,IAC5F;AAAA,EACF;AACF;AA4BO,SAAS,gBAAgB,QAA+C;AAC7E,QAAM,WAAW,OAAO,aAAa;AACrC,QAAM,WAAW,OAAO,aAAa;AACrC,SAAO;AAAA,IACL,MAAM,OAAO,QAAQ;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,OAAO,kBAAkB,OAAO,OAAO;AAC7C,YAAM,WAAW,GAAG,IAAI;AACxB,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,OAAO,MAAM;AAAA,UACtC,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,OAAO,CAAC;AAAA,UAC5C,YAAY;AAAA,QACd,CAAC;AAAA,QACD,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,aAAO,eAAe,SAAS,EAAE,UAAU,UAAU,SAAS,CAAC;AAAA,IACjE;AAAA,EACF;AACF;AA0BO,SAAS,iBAAiB,QAAgD;AAC/E,QAAM,WAAW,OAAO,aAAa;AACrC,QAAM,WAAW,OAAO,aAAa;AACrC,SAAO;AAAA,IACL,MAAM,OAAO,QAAQ;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,OAAO,kBAAkB,OAAO,OAAO;AAC7C,YAAM,WAAW,GAAG,IAAI;AACxB,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAAA,QACpD,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,aAAO,eAAe,SAAS,EAAE,UAAU,UAAU,SAAS,CAAC;AAAA,IACjE;AAAA,EACF;AACF;AAwBA,SAAS,cAAc,QAAgB,QAAqC;AAC1E,MAAI,WAAW,OAAW,QAAO,UAAU,OAAO,SAAS;AAC3D,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,SAAS,MAAM;AACxD,SAAO,WAAW;AACpB;AAEA,SAAS,iBAAiB,QAAoC;AAC5D,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,KAAK,MAAM;AACpD,SAAO,OAAO,MAAM;AACtB;AAOO,SAAS,cAAc,QAA6C;AACzE,QAAM,WAAW,OAAO,aAAa,eAAe,OAAO,IAAI;AAC/D,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK,OAAO;AAAA,QACZ,QAAQ;AAAA,QACR,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,cAAQ,QAAQ,MAAM;AAAA,QACpB,KAAK,UAAU;AACb,cAAI,cAAc,QAAQ,QAAQ,OAAO,YAAY,GAAG;AACtD,mBAAO,EAAE,IAAI,MAAM,QAAQ,GAAG,QAAQ,MAAM,MAAM;AAAA,UACpD;AACA,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,cAAc,QAAQ,MAAM,SAAS,OAAO,GAAG,cAAc,iBAAiB,OAAO,YAAY,CAAC,kBAAa,QAAQ;AAAA,UACjI;AAAA,QACF;AAAA,QACA,KAAK;AACH,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,iBAAiB,QAAQ,SAAS,eAAe,OAAO,GAAG,iBAAY,QAAQ;AAAA,UACzF;AAAA,QACF,KAAK;AACH,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,eAAe,OAAO,GAAG,KAAK,QAAQ,OAAO,kBAAa,QAAQ;AAAA,UAC5E;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAIA,eAAe,OAAO,OAAuD;AAC3E,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,QAAQ,MAAM;AACpB,MAAI;AACF,UAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,IAAI,OAAO;AAAA,MACX;AAAA,MACA,WAAW,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,MACrC,QAAQ,OAAO;AAAA,IACjB;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,IAAI;AAAA,MACJ;AAAA,MACA,WAAW,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,MACrC,QAAQ,gBAAgB,wBAAwB,GAAG,CAAC;AAAA,IACtD;AAAA,EACF;AACF;AAOA,eAAsB,aAAa,QAAoD;AACrF,QAAM,QAAQ,MAAM;AACpB,QAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,MAAM,CAAC;AACrD,QAAM,SAAS,SAAS,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE;AAC3C,QAAM,mBAAmB,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;AAC1D,SAAO;AAAA,IACL,IAAI,qBAAqB;AAAA,IACzB,QAAQ;AAAA,IACR,QAAQ,SAAS,SAAS,OAAO;AAAA,IACjC,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,YAAY,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,EACxC;AACF;AAWO,SAAS,sBAAsB,QAAiC;AACrE,QAAM,SAAoB,EAAE,QAAQ,UAAU,MAAM,SAAS,SAAS,WAAW,QAAQ,SAAS;AAClG,QAAM,OAAoB,OAAO,OAAO,IAAI,CAAC,OAAO;AAAA,IAClD,QAAQ,EAAE,KAAK,SAAS,EAAE,WAAW,SAAS;AAAA,IAC9C,MAAM,EAAE;AAAA,IACR,SAAS,GAAG,EAAE,SAAS;AAAA,IACvB,QAAQ,EAAE,UAAU;AAAA,EACtB,EAAE;AACF,QAAM,UAAU,KAAK,IAAI,OAAO,OAAO,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,OAAO,MAAM,CAAC;AAClF,QAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAC5E,QAAM,WAAW,KAAK,IAAI,OAAO,QAAQ,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,MAAM,CAAC;AACrF,QAAM,OAAO,CAAC,MACZ,GAAG,EAAE,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,SAAS,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;AAE/G,QAAM,MAAgB;AAAA,IACpB,KAAK,MAAM;AAAA,IACX,GAAG,IAAI,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,IACrE,GAAG,KAAK,IAAI,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,IAAI;AACb,UAAM,OAAO,OAAO,SAAS,IAAI,KAAK,OAAO,MAAM,8BAA8B;AACjF,QAAI,KAAK,2BAAsB,OAAO,MAAM,IAAI,OAAO,OAAO,MAAM,iBAAiB,IAAI,EAAE;AAAA,EAC7F,OAAO;AACL,UAAM,OAAO,OAAO,OACjB,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EACjC,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK,IAAI;AACZ,QAAI,KAAK,2BAAsB,OAAO,gBAAgB,4BAA4B,IAAI,EAAE;AACxF,QAAI,KAAK,gEAAgE;AAAA,EAC3E;AACA,SAAO,IAAI,KAAK,IAAI;AACtB;","names":[]}

package/dist/chunk-E4DHYENH.js

@@ -1,292 +0,0 @@
-import {
-  ATTACHMENT_ACCEPT,
-  ATTACHMENT_MAX_COUNT,
-  MAX_ATTACHMENT_TOTAL_BYTES,
-  MAX_BINARY_ATTACHMENT_BYTES,
-  MAX_TEXT_ATTACHMENT_BYTES,
-  attachmentSizeErrorMessage,
-  attachmentTotalSizeErrorMessage,
-  checkAttachmentType,
-  sanitizeAttachmentFileName,
-  sniffBinary
-} from "./chunk-CCVG2TL6.js";
-
-// src/web-react/use-composer-attachments.ts
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-function newId() {
-  const cryptoObject = globalThis.crypto;
-  if (typeof cryptoObject?.randomUUID === "function") return cryptoObject.randomUUID();
-  return `att-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-}
-function dedupeName(name, taken) {
-  if (!taken.has(name)) return name;
-  const dot = name.lastIndexOf(".");
-  const base = dot > 0 ? name.slice(0, dot) : name;
-  const ext = dot > 0 ? name.slice(dot) : "";
-  let n = 2;
-  let candidate = `${base}-${n}${ext}`;
-  while (taken.has(candidate)) {
-    n += 1;
-    candidate = `${base}-${n}${ext}`;
-  }
-  return candidate;
-}
-function kindForMime(mime) {
-  return mime.startsWith("image/") ? "image" : "file";
-}
-function isAcceptedFileType(file, accept) {
-  const patterns = accept.split(",").map((p) => p.trim()).filter((p) => p.length > 0);
-  if (patterns.length === 0) return true;
-  const name = file.name.toLowerCase();
-  const type = (file.type || "").toLowerCase();
-  return patterns.some((pattern) => {
-    const lower = pattern.toLowerCase();
-    if (lower.startsWith(".")) return name.endsWith(lower);
-    if (lower.endsWith("/*")) return type.startsWith(lower.slice(0, -1));
-    return type === lower;
-  });
-}
-async function parseUploadError(res) {
-  const detail = await res.json().catch(() => null);
-  if (detail && typeof detail === "object" && "error" in detail) {
-    const error = detail.error;
-    if (typeof error === "string" && error) return error;
-    if (error && typeof error === "object" && "message" in error) {
-      const message = error.message;
-      if (typeof message === "string" && message) return message;
-    }
-  }
-  return `Upload failed (${res.status})`;
-}
-var NO_UPLOAD_TARGET_MESSAGE = "No upload destination configured (pass uploadUrl or buildUploadRequest)";
-function useComposerAttachments(options) {
-  const optionsRef = useRef(options);
-  optionsRef.current = options;
-  const [staged, setStagedState] = useState([]);
-  const stagedRef = useRef([]);
-  const controllersRef = useRef(/* @__PURE__ */ new Map());
-  const setStaged = useCallback(
-    (updater) => {
-      const next = typeof updater === "function" ? updater(stagedRef.current) : updater;
-      stagedRef.current = next;
-      setStagedState(next);
-    },
-    []
-  );
-  const upload = useCallback(
-    async (id, file, name) => {
-      const opts = optionsRef.current;
-      setStaged(
-        (prev) => prev.map((s) => s.id === id ? { ...s, status: "uploading", errorMessage: void 0 } : s)
-      );
-      const controller = new AbortController();
-      controllersRef.current.set(id, controller);
-      const form = new FormData();
-      form.append("file", file, name);
-      const request = opts.buildUploadRequest ? opts.buildUploadRequest({ file, name, form }) : opts.uploadUrl ? { url: opts.uploadUrl } : null;
-      if (!request) {
-        setStaged(
-          (prev) => prev.map(
-            (s) => s.id === id ? { ...s, status: "error", errorMessage: NO_UPLOAD_TARGET_MESSAGE } : s
-          )
-        );
-        opts.onError?.(NO_UPLOAD_TARGET_MESSAGE);
-        controllersRef.current.delete(id);
-        return;
-      }
-      try {
-        const res = await fetch(request.url, {
-          method: "POST",
-          credentials: "same-origin",
-          ...request.init,
-          body: form,
-          signal: controller.signal
-        });
-        if (!res.ok) {
-          const message = await parseUploadError(res);
-          setStaged(
-            (prev) => prev.map((s) => s.id === id ? { ...s, status: "error", errorMessage: message } : s)
-          );
-          opts.onError?.(message);
-          return;
-        }
-        const data = await res.json();
-        const uploaded = data.files?.[0];
-        if (!uploaded) {
-          const message = "Upload returned no file";
-          setStaged(
-            (prev) => prev.map((s) => s.id === id ? { ...s, status: "error", errorMessage: message } : s)
-          );
-          opts.onError?.(message);
-          return;
-        }
-        setStaged(
-          (prev) => prev.map((s) => s.id === id ? { ...s, status: "ready", reference: uploaded } : s)
-        );
-      } catch (err) {
-        if (err.name === "AbortError") return;
-        const message = err instanceof Error && err.message ? err.message : "Upload failed \u2014 check your connection";
-        setStaged(
-          (prev) => prev.map((s) => s.id === id ? { ...s, status: "error", errorMessage: message } : s)
-        );
-        opts.onError?.(message);
-      } finally {
-        controllersRef.current.delete(id);
-      }
-    },
-    [setStaged]
-  );
-  const addFiles = useCallback(
-    async (files) => {
-      const opts = optionsRef.current;
-      const enabled2 = opts.enabled ?? true;
-      if (!enabled2) {
-        opts.onReject?.("Attachments are disabled");
-        return;
-      }
-      const accept = opts.accept ?? ATTACHMENT_ACCEPT;
-      const maxCount = opts.limits?.maxCount ?? ATTACHMENT_MAX_COUNT;
-      const maxBinaryBytes = opts.limits?.maxBinaryBytes ?? MAX_BINARY_ATTACHMENT_BYTES;
-      const maxTextBytes = opts.limits?.maxTextBytes ?? MAX_TEXT_ATTACHMENT_BYTES;
-      const maxTotalBytes = opts.limits?.maxTotalBytes ?? MAX_ATTACHMENT_TOTAL_BYTES;
-      const allowedKinds = opts.allowedKinds ?? ["image", "file"];
-      const list = Array.isArray(files) ? files : Array.from(files);
-      const currentCount = stagedRef.current.length;
-      const countAccepted = [];
-      for (const file of list) {
-        if (!isAcceptedFileType(file, accept)) {
-          opts.onReject?.(`"${file.name}" is not an accepted file type (${accept}).`, file);
-          continue;
-        }
-        if (currentCount + countAccepted.length >= maxCount) {
-          opts.onReject?.(`"${file.name}" was not added \u2014 the ${maxCount}-file limit is already reached.`, file);
-          continue;
-        }
-        countAccepted.push(file);
-      }
-      const sizeAccepted = [];
-      for (const file of countAccepted) {
-        const bytes = new Uint8Array(await file.arrayBuffer());
-        const sniff = sniffBinary(bytes);
-        const typeCheck = checkAttachmentType(file.name, sniff);
-        if (!typeCheck.succeeded) {
-          opts.onReject?.(typeCheck.message, file);
-          continue;
-        }
-        const limit = sniff.binary ? maxBinaryBytes : maxTextBytes;
-        if (file.size > limit) {
-          opts.onReject?.(attachmentSizeErrorMessage(file.name, file.size, limit), file);
-          continue;
-        }
-        const mediaType = sniff.mime ?? file.type ?? "";
-        const kind = kindForMime(mediaType);
-        if (!allowedKinds.includes(kind)) {
-          opts.onReject?.(`"${file.name}" is a ${kind} attachment, which isn't accepted here`, file);
-          continue;
-        }
-        sizeAccepted.push(file);
-      }
-      const accepted = [];
-      let totalBytes = stagedRef.current.reduce((total, s) => total + s.size, 0);
-      for (const file of sizeAccepted) {
-        const nextTotalBytes = totalBytes + file.size;
-        if (nextTotalBytes > maxTotalBytes) {
-          opts.onReject?.(attachmentTotalSizeErrorMessage(nextTotalBytes, maxTotalBytes), file);
-          continue;
-        }
-        accepted.push(file);
-        totalBytes = nextTotalBytes;
-      }
-      if (accepted.length === 0) return;
-      const taken = new Set(stagedRef.current.map((s) => s.name));
-      const entries = accepted.map((file) => {
-        const name = dedupeName(sanitizeAttachmentFileName(file.name), taken);
-        taken.add(name);
-        return {
-          id: newId(),
-          file,
-          name,
-          size: file.size,
-          status: "pending",
-          previewUrl: file.type.startsWith("image/") ? URL.createObjectURL(file) : void 0
-        };
-      });
-      setStaged((prev) => [...prev, ...entries]);
-      for (const entry of entries) void upload(entry.id, entry.file, entry.name);
-    },
-    [setStaged, upload]
-  );
-  const retry = useCallback(
-    (id) => {
-      const entry = stagedRef.current.find((s) => s.id === id);
-      if (!entry) return;
-      void upload(entry.id, entry.file, entry.name);
-    },
-    [upload]
-  );
-  const removeAttachment = useCallback(
-    (id) => {
-      controllersRef.current.get(id)?.abort();
-      controllersRef.current.delete(id);
-      const entry = stagedRef.current.find((s) => s.id === id);
-      if (entry?.previewUrl) URL.revokeObjectURL(entry.previewUrl);
-      setStaged((prev) => prev.filter((s) => s.id !== id));
-    },
-    [setStaged]
-  );
-  const clear = useCallback(() => {
-    for (const controller of controllersRef.current.values()) controller.abort();
-    controllersRef.current.clear();
-    for (const entry of stagedRef.current) {
-      if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl);
-    }
-    setStaged([]);
-  }, [setStaged]);
-  useEffect(
-    () => () => {
-      for (const controller of controllersRef.current.values()) controller.abort();
-      controllersRef.current.clear();
-      for (const entry of stagedRef.current) {
-        if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl);
-      }
-    },
-    []
-  );
-  const composerFiles = useMemo(
-    () => staged.map((s) => ({
-      id: s.id,
-      name: s.name,
-      size: s.size,
-      kind: "file",
-      status: s.status
-    })),
-    [staged]
-  );
-  const references = useMemo(
-    () => staged.filter((s) => s.status === "ready" && !!s.reference).map((s) => s.reference),
-    [staged]
-  );
-  const hasPending = useMemo(
-    () => staged.some((s) => s.status === "pending" || s.status === "uploading"),
-    [staged]
-  );
-  const hasError = useMemo(() => staged.some((s) => s.status === "error"), [staged]);
-  const enabled = options.enabled ?? true;
-  const blockReason = !enabled ? "Attachments are disabled" : hasPending ? "Attachments are still uploading" : hasError ? "Remove failed attachments to send" : null;
-  return {
-    composerFiles,
-    references,
-    addFiles,
-    retry,
-    removeAttachment,
-    clear,
-    hasPending,
-    hasError,
-    blockReason
-  };
-}
-
-export {
-  useComposerAttachments
-};
-//# sourceMappingURL=chunk-E4DHYENH.js.map

package/dist/chunk-E4DHYENH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/web-react/use-composer-attachments.ts"],"sourcesContent":["/**\n * `useComposerAttachments` — the composer's staged-upload lifecycle: validate\n * selected/dropped/pasted files against the shared limits (the SAME\n * `sniffBinary`/`checkAttachmentType`/size-cap vocabulary the store-backed\n * upload route enforces server-side, `../chat-routes/attachment-validation`\n * + `../chat-routes/binary-sniff`), upload each accepted file with one POST\n * request per file (so a single failure never poisons the batch), and track\n * every file's status so a host composer can render chips and gate sending.\n *\n * Ported from gtm-agent's `src/components/composer-attachments.tsx`\n * (gtm#584/#592/#593 hardened the sniff gate and batch semantics this leans\n * on), de-gtm-ified:\n *   - the hardcoded `/api/vault/upload?workspaceId=` URL becomes\n *     `uploadUrl`/`buildUploadRequest` (the latter wins — it hands back both\n *     the URL and a `RequestInit` override, e.g. an auth header);\n *   - `sonner` toasts become `onReject` (client pre-validation, never hits the\n *     network) and `onError` (a request that reached the server and failed);\n *   - the sandbox-ui `validateComposerFiles` import becomes a small\n *     accept-list matcher re-implemented locally (`isAcceptedFileType`,\n *     mirroring its `accept`-string matching byte-for-byte) — this module\n *     stays free of the sandbox-ui peer;\n *   - the response is expected to be `{ files: ChatAttachmentInput[] }` (full\n *     server-authoritative descriptors — size/mediaType/kind — not gtm's\n *     `{path, name}`), so `references` is a verbatim pass-through with no\n *     client recompute;\n *   - `workspaceId`'s truthiness gate becomes `enabled` (default `true`).\n *\n * Import-free beyond React + the browser-safe `/chat-routes` validation core:\n * this module ships through `/web-react` into client bundles\n * (`tests/browser-safe-subpaths.test.ts` walks the graph), so nothing here\n * may reach a Node builtin, `sandbox-ui`, or an engine package.\n */\n\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react'\nimport type { ChatAttachmentInput, ChatAttachmentKind } from './chat-stream'\nimport type { ComposerFile } from './chat-composer'\nimport {\n  ATTACHMENT_ACCEPT,\n  ATTACHMENT_MAX_COUNT,\n  MAX_ATTACHMENT_TOTAL_BYTES,\n  MAX_BINARY_ATTACHMENT_BYTES,\n  MAX_TEXT_ATTACHMENT_BYTES,\n  attachmentSizeErrorMessage,\n  attachmentTotalSizeErrorMessage,\n  checkAttachmentType,\n  sanitizeAttachmentFileName,\n} from '../chat-routes/attachment-validation'\nimport { sniffBinary } from '../chat-routes/binary-sniff'\n\nexport { ATTACHMENT_ACCEPT } from '../chat-routes/attachment-validation'\n\n/** One staged file and its upload lifecycle. `file` is retained so a failed\n *  upload can be retried without re-selecting; `previewUrl` is an object URL\n *  for image thumbnails and must be revoked when the entry leaves the queue.\n *  `reference` is the server's authoritative descriptor once the upload\n *  lands — stored verbatim, never recomputed client-side. */\ninterface StagedAttachment {\n  id: string\n  file: File\n  name: string\n  size: number\n  status: 'pending' | 'uploading' | 'ready' | 'error'\n  reference?: ChatAttachmentInput\n  previewUrl?: string\n  errorMessage?: string\n}\n\n/** Define options for configuring file upload behavior and handling in a composer component */\nexport interface UseComposerAttachmentsOptions {\n  /** Simple upload target: every file POSTs here. Ignored when\n   *  `buildUploadRequest` is provided. */\n  uploadUrl?: string\n  /** Full request-building seam (auth headers, per-file routing, …) — wins\n   *  over `uploadUrl` when both are set. */\n  buildUploadRequest?: (args: { file: File; name: string; form: FormData }) => {\n    url: string\n    init?: Omit<RequestInit, 'body' | 'signal'>\n  }\n  /** Client pre-validation rejections — a file that never reaches the\n   *  network (bad type, over a size cap, over count, disallowed kind). */\n  onReject?: (reason: string, file?: File) => void\n  /** A file that reached the upload endpoint and failed (HTTP error,\n   *  transport error, malformed response). */\n  onError?: (reason: string) => void\n  limits?: {\n    maxCount?: number\n    maxBinaryBytes?: number\n    maxTextBytes?: number\n    maxTotalBytes?: number\n  }\n  /** Attachment kinds accepted, checked against the sniffed content's\n   *  mime. Default: both (`['image', 'file']` — i.e. no restriction). */\n  allowedKinds?: ChatAttachmentKind[]\n  /** `<input accept>`-style gate for the file picker/drop/paste path.\n   *  Default {@link ATTACHMENT_ACCEPT}. */\n  accept?: string\n  /** When `false`, `addFiles` rejects every call via `onReject` (and\n   *  `blockReason` explains why) instead of staging anything — the\n   *  replacement for gtm's `workspaceId`-truthiness gate (e.g. no workspace\n   *  loaded yet). Default `true`. */\n  enabled?: boolean\n}\n\n/** Provide staged file chips, ready attachments, and methods to add, retry, or drop composer files */\nexport interface UseComposerAttachmentsResult {\n  /** Chip models for `ChatComposer`'s `pendingFiles` prop, one per staged\n   *  file — `kind` is always `'file'` (agent-app's `ComposerFile.kind`\n   *  discriminates file-vs-folder chips, not attachment media type). */\n  composerFiles: ComposerFile[]\n  /** Ready-to-send attachment descriptors — only files whose upload\n   *  succeeded, straight from the server's response (no recompute). Feed\n   *  this into `ChatTurnRequestPayload.attachments`. */\n  references: ChatAttachmentInput[]\n  /** Validate + stage + upload the given files, one request per file. */\n  addFiles: (files: File[] | FileList) => Promise<void>\n  /** Re-upload a failed entry using its retained `File`. */\n  retry: (id: string) => void\n  /** Drop one staged entry, aborting its upload and revoking its preview. */\n  removeAttachment: (id: string) => void\n  /** Forget every staged entry (call after a successful send). */\n  clear: () => void\n  /** True while any file is still pending or uploading. */\n  hasPending: boolean\n  /** True while any file failed to upload. */\n  hasError: boolean\n  /** Why a send is blocked, or `null` when the queue is clean. */\n  blockReason: string | null\n}\n\nfunction newId(): string {\n  const cryptoObject = globalThis.crypto\n  if (typeof cryptoObject?.randomUUID === 'function') return cryptoObject.randomUUID()\n  return `att-${Date.now()}-${Math.random().toString(36).slice(2)}`\n}\n\n/** Suffix a name (`report.pdf` → `report-2.pdf`) until it's unused. The\n *  server writes to a name-derived store path, so identical names would\n *  overwrite. The suffix stays inside the store-path charset (see\n *  `sanitizeAttachmentFileName`). Ported byte-for-byte from gtm's\n *  `dedupeName`. */\nfunction dedupeName(name: string, taken: Set<string>): string {\n  if (!taken.has(name)) return name\n  const dot = name.lastIndexOf('.')\n  const base = dot > 0 ? name.slice(0, dot) : name\n  const ext = dot > 0 ? name.slice(dot) : ''\n  let n = 2\n  let candidate = `${base}-${n}${ext}`\n  while (taken.has(candidate)) {\n    n += 1\n    candidate = `${base}-${n}${ext}`\n  }\n  return candidate\n}\n\n/** `image/*` → `'image'`, everything else → `'file'`. Deliberately\n *  reimplemented here (not imported from `../chat-store/parts`, which pulls\n *  the drizzle-adjacent `/chat-store` barrel): this module must stay reachable\n *  from a browser bundle with only the `/chat-routes` validation core as a\n *  dependency. */\nfunction kindForMime(mime: string): ChatAttachmentKind {\n  return mime.startsWith('image/') ? 'image' : 'file'\n}\n\n/** `<input accept>`-style matcher: extension (`.pdf`), wildcard mime\n *  (`image/*`), or exact mime. Reimplemented locally (NOT imported from\n *  `@tangle-network/sandbox-ui`'s `validateComposerFiles`/`isAcceptedType`) so\n *  this module has no sandbox-ui dependency; the matching semantics are kept\n *  identical so a rejection reads the same either side of the fence. */\nfunction isAcceptedFileType(file: File, accept: string): boolean {\n  const patterns = accept.split(',').map((p) => p.trim()).filter((p) => p.length > 0)\n  if (patterns.length === 0) return true\n  const name = file.name.toLowerCase()\n  const type = (file.type || '').toLowerCase()\n  return patterns.some((pattern) => {\n    const lower = pattern.toLowerCase()\n    if (lower.startsWith('.')) return name.endsWith(lower)\n    if (lower.endsWith('/*')) return type.startsWith(lower.slice(0, -1))\n    return type === lower\n  })\n}\n\n/** Pull a human-readable message out of the upload endpoint's error body.\n *  Ported from gtm's `parseUploadError`: handles both `{ error: string }`\n *  (size/count/access errors) and `{ error: { message } }` (the\n *  `createAttachmentUploadRoute` envelope, `{error:{code,message,path?}}`). */\nasync function parseUploadError(res: Response): Promise<string> {\n  const detail = await res.json().catch(() => null)\n  if (detail && typeof detail === 'object' && 'error' in detail) {\n    const error = (detail as { error: unknown }).error\n    if (typeof error === 'string' && error) return error\n    if (error && typeof error === 'object' && 'message' in error) {\n      const message = (error as { message: unknown }).message\n      if (typeof message === 'string' && message) return message\n    }\n  }\n  return `Upload failed (${res.status})`\n}\n\n/** Shown when neither `uploadUrl` nor `buildUploadRequest` is configured\n *  while `enabled` — a product wiring bug, not a user-facing rejection, so it\n *  lands each affected entry in `error` (with `onError`) rather than blocking\n *  `addFiles` outright via `onReject`: the files still stage and can be\n *  retried once the product fixes its config, instead of silently vanishing. */\nconst NO_UPLOAD_TARGET_MESSAGE = 'No upload destination configured (pass uploadUrl or buildUploadRequest)'\n\n/**\n * Owns the composer's attachment lifecycle: validate selected/dropped/pasted\n * files against the shared limits, upload each accepted file to the\n * product's store (one request per file), and track every file's status so\n * the composer can render chips and gate sending.\n *\n * Failures surface loud — a rejected file calls `onReject` and is never\n * uploaded; a failed upload calls `onError` and leaves an error chip the user\n * can retry or remove. `references` only ever contains files whose upload the\n * server actually confirmed.\n */\nexport function useComposerAttachments(\n  options: UseComposerAttachmentsOptions,\n): UseComposerAttachmentsResult {\n  // Latest options, read from inside stable callbacks — avoids re-creating\n  // `addFiles`/`upload` (and therefore breaking referential stability for\n  // effects a host might hang off them) every time a caller passes a fresh\n  // options object literal.\n  const optionsRef = useRef(options)\n  optionsRef.current = options\n\n  const [staged, setStagedState] = useState<StagedAttachment[]>([])\n  // Mirror of `staged` kept in lockstep so dedupe/aggregate-cap/abort read\n  // current values synchronously (setState callbacks alone can't answer\n  // \"what's staged right now\" mid-validation).\n  const stagedRef = useRef<StagedAttachment[]>([])\n  const controllersRef = useRef<Map<string, AbortController>>(new Map())\n\n  // Post-unmount calls reduce to a React no-op setState; the refs they touch\n  // die with the instance.\n  const setStaged = useCallback(\n    (updater: StagedAttachment[] | ((prev: StagedAttachment[]) => StagedAttachment[])) => {\n      const next =\n        typeof updater === 'function'\n          ? (updater as (prev: StagedAttachment[]) => StagedAttachment[])(stagedRef.current)\n          : updater\n      stagedRef.current = next\n      setStagedState(next)\n    },\n    [],\n  )\n\n  const upload = useCallback(\n    async (id: string, file: File, name: string) => {\n      const opts = optionsRef.current\n      setStaged((prev) =>\n        prev.map((s) => (s.id === id ? { ...s, status: 'uploading', errorMessage: undefined } : s)),\n      )\n      const controller = new AbortController()\n      controllersRef.current.set(id, controller)\n      const form = new FormData()\n      form.append('file', file, name)\n\n      const request = opts.buildUploadRequest\n        ? opts.buildUploadRequest({ file, name, form })\n        : opts.uploadUrl\n          ? { url: opts.uploadUrl }\n          : null\n\n      if (!request) {\n        setStaged((prev) =>\n          prev.map((s) =>\n            s.id === id ? { ...s, status: 'error', errorMessage: NO_UPLOAD_TARGET_MESSAGE } : s,\n          ),\n        )\n        opts.onError?.(NO_UPLOAD_TARGET_MESSAGE)\n        controllersRef.current.delete(id)\n        return\n      }\n\n      try {\n        const res = await fetch(request.url, {\n          method: 'POST',\n          credentials: 'same-origin',\n          ...request.init,\n          body: form,\n          signal: controller.signal,\n        })\n        if (!res.ok) {\n          const message = await parseUploadError(res)\n          setStaged((prev) =>\n            prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n          )\n          opts.onError?.(message)\n          return\n        }\n        const data = (await res.json()) as { files?: ChatAttachmentInput[] }\n        const uploaded = data.files?.[0]\n        if (!uploaded) {\n          const message = 'Upload returned no file'\n          setStaged((prev) =>\n            prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n          )\n          opts.onError?.(message)\n          return\n        }\n        setStaged((prev) =>\n          prev.map((s) => (s.id === id ? { ...s, status: 'ready', reference: uploaded } : s)),\n        )\n      } catch (err) {\n        if ((err as Error).name === 'AbortError') return // silent removal — see removeAttachment/clear\n        const message =\n          err instanceof Error && err.message ? err.message : 'Upload failed — check your connection'\n        setStaged((prev) =>\n          prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n        )\n        opts.onError?.(message)\n      } finally {\n        controllersRef.current.delete(id)\n      }\n    },\n    [setStaged],\n  )\n\n  const addFiles = useCallback(\n    async (files: File[] | FileList) => {\n      const opts = optionsRef.current\n      const enabled = opts.enabled ?? true\n      if (!enabled) {\n        opts.onReject?.('Attachments are disabled')\n        return\n      }\n\n      const accept = opts.accept ?? ATTACHMENT_ACCEPT\n      const maxCount = opts.limits?.maxCount ?? ATTACHMENT_MAX_COUNT\n      const maxBinaryBytes = opts.limits?.maxBinaryBytes ?? MAX_BINARY_ATTACHMENT_BYTES\n      const maxTextBytes = opts.limits?.maxTextBytes ?? MAX_TEXT_ATTACHMENT_BYTES\n      const maxTotalBytes = opts.limits?.maxTotalBytes ?? MAX_ATTACHMENT_TOTAL_BYTES\n      const allowedKinds = opts.allowedKinds ?? (['image', 'file'] as ChatAttachmentKind[])\n\n      const list = Array.isArray(files) ? files : Array.from(files)\n\n      // Pass 1: accept-list + count cap, mirroring sandbox-ui's\n      // `validateComposerFiles` semantics (accept checked before count, count\n      // checked against currently-staged + already-accepted-this-batch).\n      const currentCount = stagedRef.current.length\n      const countAccepted: File[] = []\n      for (const file of list) {\n        if (!isAcceptedFileType(file, accept)) {\n          opts.onReject?.(`\"${file.name}\" is not an accepted file type (${accept}).`, file)\n          continue\n        }\n        if (currentCount + countAccepted.length >= maxCount) {\n          opts.onReject?.(`\"${file.name}\" was not added — the ${maxCount}-file limit is already reached.`, file)\n          continue\n        }\n        countAccepted.push(file)\n      }\n\n      // Pass 2: real content sniff + type gate + per-kind size cap +\n      // allowed-kinds gate — the SAME checks the server enforces, so a\n      // rejection never differs depending on which side classified the bytes\n      // first. Nothing here ever reaches the network.\n      const sizeAccepted: File[] = []\n      for (const file of countAccepted) {\n        const bytes = new Uint8Array(await file.arrayBuffer())\n        const sniff = sniffBinary(bytes)\n        const typeCheck = checkAttachmentType(file.name, sniff)\n        if (!typeCheck.succeeded) {\n          opts.onReject?.(typeCheck.message, file)\n          continue\n        }\n        const limit = sniff.binary ? maxBinaryBytes : maxTextBytes\n        if (file.size > limit) {\n          opts.onReject?.(attachmentSizeErrorMessage(file.name, file.size, limit), file)\n          continue\n        }\n        const mediaType = sniff.mime ?? file.type ?? ''\n        const kind = kindForMime(mediaType)\n        if (!allowedKinds.includes(kind)) {\n          opts.onReject?.(`\"${file.name}\" is a ${kind} attachment, which isn't accepted here`, file)\n          continue\n        }\n        sizeAccepted.push(file)\n      }\n\n      // Pass 3: running aggregate cap across this batch + everything already\n      // staged (any status) — a partial batch can still land.\n      const accepted: File[] = []\n      let totalBytes = stagedRef.current.reduce((total, s) => total + s.size, 0)\n      for (const file of sizeAccepted) {\n        const nextTotalBytes = totalBytes + file.size\n        if (nextTotalBytes > maxTotalBytes) {\n          opts.onReject?.(attachmentTotalSizeErrorMessage(nextTotalBytes, maxTotalBytes), file)\n          continue\n        }\n        accepted.push(file)\n        totalBytes = nextTotalBytes\n      }\n      if (accepted.length === 0) return\n\n      // Stage under the name the server will actually store, so the chip and\n      // the message's attachment references never diverge.\n      const taken = new Set(stagedRef.current.map((s) => s.name))\n      const entries: StagedAttachment[] = accepted.map((file) => {\n        const name = dedupeName(sanitizeAttachmentFileName(file.name), taken)\n        taken.add(name)\n        return {\n          id: newId(),\n          file,\n          name,\n          size: file.size,\n          status: 'pending',\n          previewUrl: file.type.startsWith('image/') ? URL.createObjectURL(file) : undefined,\n        }\n      })\n      setStaged((prev) => [...prev, ...entries])\n      for (const entry of entries) void upload(entry.id, entry.file, entry.name)\n    },\n    [setStaged, upload],\n  )\n\n  const retry = useCallback(\n    (id: string) => {\n      const entry = stagedRef.current.find((s) => s.id === id)\n      if (!entry) return\n      void upload(entry.id, entry.file, entry.name)\n    },\n    [upload],\n  )\n\n  const removeAttachment = useCallback(\n    (id: string) => {\n      controllersRef.current.get(id)?.abort()\n      controllersRef.current.delete(id)\n      const entry = stagedRef.current.find((s) => s.id === id)\n      if (entry?.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n      setStaged((prev) => prev.filter((s) => s.id !== id))\n    },\n    [setStaged],\n  )\n\n  const clear = useCallback(() => {\n    for (const controller of controllersRef.current.values()) controller.abort()\n    controllersRef.current.clear()\n    for (const entry of stagedRef.current) {\n      if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n    }\n    setStaged([])\n  }, [setStaged])\n\n  useEffect(\n    () => () => {\n      for (const controller of controllersRef.current.values()) controller.abort()\n      controllersRef.current.clear()\n      for (const entry of stagedRef.current) {\n        if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n      }\n    },\n    [],\n  )\n\n  const composerFiles = useMemo<ComposerFile[]>(\n    () =>\n      staged.map((s) => ({\n        id: s.id,\n        name: s.name,\n        size: s.size,\n        kind: 'file' as const,\n        status: s.status,\n      })),\n    [staged],\n  )\n\n  const references = useMemo<ChatAttachmentInput[]>(\n    () =>\n      staged\n        .filter((s): s is StagedAttachment & { reference: ChatAttachmentInput } => s.status === 'ready' && !!s.reference)\n        .map((s) => s.reference),\n    [staged],\n  )\n\n  const hasPending = useMemo(\n    () => staged.some((s) => s.status === 'pending' || s.status === 'uploading'),\n    [staged],\n  )\n  const hasError = useMemo(() => staged.some((s) => s.status === 'error'), [staged])\n  const enabled = options.enabled ?? true\n  const blockReason = !enabled\n    ? 'Attachments are disabled'\n    : hasPending\n      ? 'Attachments are still uploading'\n      : hasError\n        ? 'Remove failed attachments to send'\n        : null\n\n  return {\n    composerFiles,\n    references,\n    addFiles,\n    retry,\n    removeAttachment,\n    clear,\n    hasPending,\n    hasError,\n    blockReason,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAiCA,SAAS,aAAa,WAAW,SAAS,QAAQ,gBAAgB;AAgGlE,SAAS,QAAgB;AACvB,QAAM,eAAe,WAAW;AAChC,MAAI,OAAO,cAAc,eAAe,WAAY,QAAO,aAAa,WAAW;AACnF,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjE;AAOA,SAAS,WAAW,MAAc,OAA4B;AAC5D,MAAI,CAAC,MAAM,IAAI,IAAI,EAAG,QAAO;AAC7B,QAAM,MAAM,KAAK,YAAY,GAAG;AAChC,QAAM,OAAO,MAAM,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI;AAC5C,QAAM,MAAM,MAAM,IAAI,KAAK,MAAM,GAAG,IAAI;AACxC,MAAI,IAAI;AACR,MAAI,YAAY,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG;AAClC,SAAO,MAAM,IAAI,SAAS,GAAG;AAC3B,SAAK;AACL,gBAAY,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG;AAAA,EAChC;AACA,SAAO;AACT;AAOA,SAAS,YAAY,MAAkC;AACrD,SAAO,KAAK,WAAW,QAAQ,IAAI,UAAU;AAC/C;AAOA,SAAS,mBAAmB,MAAY,QAAyB;AAC/D,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAClF,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,OAAO,KAAK,KAAK,YAAY;AACnC,QAAM,QAAQ,KAAK,QAAQ,IAAI,YAAY;AAC3C,SAAO,SAAS,KAAK,CAAC,YAAY;AAChC,UAAM,QAAQ,QAAQ,YAAY;AAClC,QAAI,MAAM,WAAW,GAAG,EAAG,QAAO,KAAK,SAAS,KAAK;AACrD,QAAI,MAAM,SAAS,IAAI,EAAG,QAAO,KAAK,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AACnE,WAAO,SAAS;AAAA,EAClB,CAAC;AACH;AAMA,eAAe,iBAAiB,KAAgC;AAC9D,QAAM,SAAS,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAChD,MAAI,UAAU,OAAO,WAAW,YAAY,WAAW,QAAQ;AAC7D,UAAM,QAAS,OAA8B;AAC7C,QAAI,OAAO,UAAU,YAAY,MAAO,QAAO;AAC/C,QAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;AAC5D,YAAM,UAAW,MAA+B;AAChD,UAAI,OAAO,YAAY,YAAY,QAAS,QAAO;AAAA,IACrD;AAAA,EACF;AACA,SAAO,kBAAkB,IAAI,MAAM;AACrC;AAOA,IAAM,2BAA2B;AAa1B,SAAS,uBACd,SAC8B;AAK9B,QAAM,aAAa,OAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,CAAC,QAAQ,cAAc,IAAI,SAA6B,CAAC,CAAC;AAIhE,QAAM,YAAY,OAA2B,CAAC,CAAC;AAC/C,QAAM,iBAAiB,OAAqC,oBAAI,IAAI,CAAC;AAIrE,QAAM,YAAY;AAAA,IAChB,CAAC,YAAqF;AACpF,YAAM,OACJ,OAAO,YAAY,aACd,QAA6D,UAAU,OAAO,IAC/E;AACN,gBAAU,UAAU;AACpB,qBAAe,IAAI;AAAA,IACrB;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,SAAS;AAAA,IACb,OAAO,IAAY,MAAY,SAAiB;AAC9C,YAAM,OAAO,WAAW;AACxB;AAAA,QAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,aAAa,cAAc,OAAU,IAAI,CAAE;AAAA,MAC5F;AACA,YAAM,aAAa,IAAI,gBAAgB;AACvC,qBAAe,QAAQ,IAAI,IAAI,UAAU;AACzC,YAAM,OAAO,IAAI,SAAS;AAC1B,WAAK,OAAO,QAAQ,MAAM,IAAI;AAE9B,YAAM,UAAU,KAAK,qBACjB,KAAK,mBAAmB,EAAE,MAAM,MAAM,KAAK,CAAC,IAC5C,KAAK,YACH,EAAE,KAAK,KAAK,UAAU,IACtB;AAEN,UAAI,CAAC,SAAS;AACZ;AAAA,UAAU,CAAC,SACT,KAAK;AAAA,YAAI,CAAC,MACR,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,yBAAyB,IAAI;AAAA,UACpF;AAAA,QACF;AACA,aAAK,UAAU,wBAAwB;AACvC,uBAAe,QAAQ,OAAO,EAAE;AAChC;AAAA,MACF;AAEA,UAAI;AACF,cAAM,MAAM,MAAM,MAAM,QAAQ,KAAK;AAAA,UACnC,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,GAAG,QAAQ;AAAA,UACX,MAAM;AAAA,UACN,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,IAAI,IAAI;AACX,gBAAM,UAAU,MAAM,iBAAiB,GAAG;AAC1C;AAAA,YAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,UACtF;AACA,eAAK,UAAU,OAAO;AACtB;AAAA,QACF;AACA,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,cAAM,WAAW,KAAK,QAAQ,CAAC;AAC/B,YAAI,CAAC,UAAU;AACb,gBAAM,UAAU;AAChB;AAAA,YAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,UACtF;AACA,eAAK,UAAU,OAAO;AACtB;AAAA,QACF;AACA;AAAA,UAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,WAAW,SAAS,IAAI,CAAE;AAAA,QACpF;AAAA,MACF,SAAS,KAAK;AACZ,YAAK,IAAc,SAAS,aAAc;AAC1C,cAAM,UACJ,eAAe,SAAS,IAAI,UAAU,IAAI,UAAU;AACtD;AAAA,UAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,QACtF;AACA,aAAK,UAAU,OAAO;AAAA,MACxB,UAAE;AACA,uBAAe,QAAQ,OAAO,EAAE;AAAA,MAClC;AAAA,IACF;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,UAA6B;AAClC,YAAM,OAAO,WAAW;AACxB,YAAMA,WAAU,KAAK,WAAW;AAChC,UAAI,CAACA,UAAS;AACZ,aAAK,WAAW,0BAA0B;AAC1C;AAAA,MACF;AAEA,YAAM,SAAS,KAAK,UAAU;AAC9B,YAAM,WAAW,KAAK,QAAQ,YAAY;AAC1C,YAAM,iBAAiB,KAAK,QAAQ,kBAAkB;AACtD,YAAM,eAAe,KAAK,QAAQ,gBAAgB;AAClD,YAAM,gBAAgB,KAAK,QAAQ,iBAAiB;AACpD,YAAM,eAAe,KAAK,gBAAiB,CAAC,SAAS,MAAM;AAE3D,YAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,MAAM,KAAK,KAAK;AAK5D,YAAM,eAAe,UAAU,QAAQ;AACvC,YAAM,gBAAwB,CAAC;AAC/B,iBAAW,QAAQ,MAAM;AACvB,YAAI,CAAC,mBAAmB,MAAM,MAAM,GAAG;AACrC,eAAK,WAAW,IAAI,KAAK,IAAI,mCAAmC,MAAM,MAAM,IAAI;AAChF;AAAA,QACF;AACA,YAAI,eAAe,cAAc,UAAU,UAAU;AACnD,eAAK,WAAW,IAAI,KAAK,IAAI,8BAAyB,QAAQ,mCAAmC,IAAI;AACrG;AAAA,QACF;AACA,sBAAc,KAAK,IAAI;AAAA,MACzB;AAMA,YAAM,eAAuB,CAAC;AAC9B,iBAAW,QAAQ,eAAe;AAChC,cAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,YAAY,CAAC;AACrD,cAAM,QAAQ,YAAY,KAAK;AAC/B,cAAM,YAAY,oBAAoB,KAAK,MAAM,KAAK;AACtD,YAAI,CAAC,UAAU,WAAW;AACxB,eAAK,WAAW,UAAU,SAAS,IAAI;AACvC;AAAA,QACF;AACA,cAAM,QAAQ,MAAM,SAAS,iBAAiB;AAC9C,YAAI,KAAK,OAAO,OAAO;AACrB,eAAK,WAAW,2BAA2B,KAAK,MAAM,KAAK,MAAM,KAAK,GAAG,IAAI;AAC7E;AAAA,QACF;AACA,cAAM,YAAY,MAAM,QAAQ,KAAK,QAAQ;AAC7C,cAAM,OAAO,YAAY,SAAS;AAClC,YAAI,CAAC,aAAa,SAAS,IAAI,GAAG;AAChC,eAAK,WAAW,IAAI,KAAK,IAAI,UAAU,IAAI,0CAA0C,IAAI;AACzF;AAAA,QACF;AACA,qBAAa,KAAK,IAAI;AAAA,MACxB;AAIA,YAAM,WAAmB,CAAC;AAC1B,UAAI,aAAa,UAAU,QAAQ,OAAO,CAAC,OAAO,MAAM,QAAQ,EAAE,MAAM,CAAC;AACzE,iBAAW,QAAQ,cAAc;AAC/B,cAAM,iBAAiB,aAAa,KAAK;AACzC,YAAI,iBAAiB,eAAe;AAClC,eAAK,WAAW,gCAAgC,gBAAgB,aAAa,GAAG,IAAI;AACpF;AAAA,QACF;AACA,iBAAS,KAAK,IAAI;AAClB,qBAAa;AAAA,MACf;AACA,UAAI,SAAS,WAAW,EAAG;AAI3B,YAAM,QAAQ,IAAI,IAAI,UAAU,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,YAAM,UAA8B,SAAS,IAAI,CAAC,SAAS;AACzD,cAAM,OAAO,WAAW,2BAA2B,KAAK,IAAI,GAAG,KAAK;AACpE,cAAM,IAAI,IAAI;AACd,eAAO;AAAA,UACL,IAAI,MAAM;AAAA,UACV;AAAA,UACA;AAAA,UACA,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,YAAY,KAAK,KAAK,WAAW,QAAQ,IAAI,IAAI,gBAAgB,IAAI,IAAI;AAAA,QAC3E;AAAA,MACF,CAAC;AACD,gBAAU,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC;AACzC,iBAAW,SAAS,QAAS,MAAK,OAAO,MAAM,IAAI,MAAM,MAAM,MAAM,IAAI;AAAA,IAC3E;AAAA,IACA,CAAC,WAAW,MAAM;AAAA,EACpB;AAEA,QAAM,QAAQ;AAAA,IACZ,CAAC,OAAe;AACd,YAAM,QAAQ,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACvD,UAAI,CAAC,MAAO;AACZ,WAAK,OAAO,MAAM,IAAI,MAAM,MAAM,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,mBAAmB;AAAA,IACvB,CAAC,OAAe;AACd,qBAAe,QAAQ,IAAI,EAAE,GAAG,MAAM;AACtC,qBAAe,QAAQ,OAAO,EAAE;AAChC,YAAM,QAAQ,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACvD,UAAI,OAAO,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAC3D,gBAAU,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,IACrD;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,QAAQ,YAAY,MAAM;AAC9B,eAAW,cAAc,eAAe,QAAQ,OAAO,EAAG,YAAW,MAAM;AAC3E,mBAAe,QAAQ,MAAM;AAC7B,eAAW,SAAS,UAAU,SAAS;AACrC,UAAI,MAAM,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAAA,IAC5D;AACA,cAAU,CAAC,CAAC;AAAA,EACd,GAAG,CAAC,SAAS,CAAC;AAEd;AAAA,IACE,MAAM,MAAM;AACV,iBAAW,cAAc,eAAe,QAAQ,OAAO,EAAG,YAAW,MAAM;AAC3E,qBAAe,QAAQ,MAAM;AAC7B,iBAAW,SAAS,UAAU,SAAS;AACrC,YAAI,MAAM,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAAA,MAC5D;AAAA,IACF;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgB;AAAA,IACpB,MACE,OAAO,IAAI,CAAC,OAAO;AAAA,MACjB,IAAI,EAAE;AAAA,MACN,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,IACZ,EAAE;AAAA,IACJ,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,aAAa;AAAA,IACjB,MACE,OACG,OAAO,CAAC,MAAkE,EAAE,WAAW,WAAW,CAAC,CAAC,EAAE,SAAS,EAC/G,IAAI,CAAC,MAAM,EAAE,SAAS;AAAA,IAC3B,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,aAAa;AAAA,IACjB,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,aAAa,EAAE,WAAW,WAAW;AAAA,IAC3E,CAAC,MAAM;AAAA,EACT;AACA,QAAM,WAAW,QAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,GAAG,CAAC,MAAM,CAAC;AACjF,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,cAAc,CAAC,UACjB,6BACA,aACE,oCACA,WACE,sCACA;AAER,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["enabled"]}