@tangle-network/agent-app 0.45.29 → 0.45.30

package/dist/chunk-L7FHRORY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/web-react/provider-logo.tsx","../src/web-react/controls.tsx","../src/web-react/use-composer-attachments.ts","../src/web-react/agent-session-controls.tsx"],"sourcesContent":["/**\n * Provider brand marks — real logo path data (simple-icons / SVG Logos, both\n * CC0) inlined so the picker shows actual provider identity instead of\n * colored-initial monograms. Providers without a usable mark fall back to a\n * tinted monogram chip. Aliases (z-ai/zai, moonshot/moonshotai, deepseek_ai)\n * normalize to one entry.\n */\n\nimport type { ReactNode } from 'react'\n\ninterface LogoDef {\n  viewBox: string\n  fill: string\n  paths: string[]\n}\n\nconst LOGOS: Record<string, LogoDef> = {\n  anthropic: { viewBox: '0 0 24 24', fill: '#D97757', paths: [\"M17.3041 3.541h-3.6718l6.696 16.918H24Zm-10.6082 0L0 20.459h3.7442l1.3693-3.5527h7.0052l1.3693 3.5528h3.7442L10.5363 3.5409Zm-.3712 10.2232 2.2914-5.9456 2.2914 5.9456Z\"] },\n  google: { viewBox: '0 0 24 24', fill: '#8E75B2', paths: [\"M11.04 19.32Q12 21.51 12 24q0-2.49.93-4.68.96-2.19 2.58-3.81t3.81-2.55Q21.51 12 24 12q-2.49 0-4.68-.93a12.3 12.3 0 0 1-3.81-2.58 12.3 12.3 0 0 1-2.58-3.81Q12 2.49 12 0q0 2.49-.96 4.68-.93 2.19-2.55 3.81a12.3 12.3 0 0 1-3.81 2.58Q2.49 12 0 12q2.49 0 4.68.96 2.19.93 3.81 2.55t2.55 3.81\"] },\n  deepseek: { viewBox: '0 0 24 24', fill: '#4D6BFE', paths: [\"M23.748 4.651c-.254-.124-.364.113-.512.233-.051.04-.094.09-.137.137-.372.397-.806.657-1.373.626-.829-.046-1.537.214-2.163.848-.133-.782-.575-1.248-1.247-1.548-.352-.155-.708-.311-.955-.65-.172-.24-.219-.509-.305-.774-.055-.16-.11-.323-.293-.35-.2-.031-.278.136-.356.276-.313.572-.434 1.202-.422 1.84.027 1.436.633 2.58 1.838 3.393.137.094.172.187.129.323-.082.28-.18.553-.266.833-.055.179-.137.218-.328.14a5.5 5.5 0 0 1-1.737-1.179c-.857-.828-1.631-1.743-2.597-2.46a12 12 0 0 0-.689-.47c-.985-.957.13-1.743.387-1.836.27-.098.094-.433-.778-.428-.872.003-1.67.295-2.687.685a3 3 0 0 1-.465.136 9.6 9.6 0 0 0-2.883-.101c-1.885.21-3.39 1.1-4.497 2.622C.082 8.776-.231 10.854.152 13.02c.403 2.284 1.568 4.175 3.36 5.653 1.857 1.533 3.997 2.284 6.438 2.14 1.482-.085 3.132-.284 4.994-1.86.47.234.962.328 1.78.398.629.058 1.235-.031 1.705-.129.735-.155.684-.836.418-.961-2.155-1.004-1.682-.595-2.112-.926 1.095-1.295 2.768-3.598 3.284-6.733.05-.346.115-.834.108-1.114-.004-.171.035-.238.23-.257a4.2 4.2 0 0 0 1.545-.475c1.397-.763 1.96-2.016 2.093-3.517.02-.23-.004-.467-.247-.588M11.58 18.168c-2.088-1.642-3.101-2.183-3.52-2.16-.39.024-.32.472-.234.763.09.288.207.487.371.74.114.167.192.416-.113.603-.673.416-1.842-.14-1.897-.168-1.361-.801-2.5-1.86-3.301-3.306-.775-1.393-1.225-2.888-1.299-4.482-.02-.385.094-.522.477-.592a4.7 4.7 0 0 1 1.53-.038c2.131.311 3.946 1.264 5.467 2.774.868.86 1.525 1.887 2.202 2.89.72 1.066 1.494 2.082 2.48 2.915.348.291.626.513.892.677-.802.09-2.14.109-3.055-.615zm1.001-6.44a.306.306 0 0 1 .415-.287.3.3 0 0 1 .113.074.3.3 0 0 1 .086.214c0 .17-.136.307-.308.307a.303.303 0 0 1-.306-.307m3.11 1.596c-.2.081-.4.151-.591.16a1.25 1.25 0 0 1-.798-.254c-.274-.23-.47-.358-.551-.758a1.7 1.7 0 0 1 .015-.588c.07-.327-.007-.537-.238-.727-.188-.156-.426-.199-.689-.199a.6.6 0 0 1-.254-.078.253.253 0 0 1-.114-.358 1 1 0 0 1 .192-.21c.356-.202.767-.136 1.146.016.352.144.618.408 1.001.782.392.451.462.576.685.915.176.264.336.536.446.848.066.194-.02.353-.25.45\"] },\n  mistral: { viewBox: '0 0 24 24', fill: '#FA520F', paths: [\"M17.143 3.429v3.428h-3.429v3.429h-3.428V6.857H6.857V3.43H3.43v13.714H0v3.428h10.286v-3.428H6.857v-3.429h3.429v3.429h3.429v-3.429h3.428v3.429h-3.428v3.428H24v-3.428h-3.43V3.429z\"] },\n  xai: { viewBox: '0 0 24 24', fill: '#000000', paths: [\"M14.234 10.162 22.977 0h-2.072l-7.591 8.824L7.251 0H.258l9.168 13.343L.258 24H2.33l8.016-9.318L16.749 24h6.993zm-2.837 3.299-.929-1.329L3.076 1.56h3.182l5.965 8.532.929 1.329 7.754 11.09h-3.182z\"] },\n  nvidia: { viewBox: '0 0 24 24', fill: '#76B900', paths: [\"M8.948 8.798v-1.43a6.7 6.7 0 0 1 .424-.018c3.922-.124 6.493 3.374 6.493 3.374s-2.774 3.851-5.75 3.851c-.398 0-.787-.062-1.158-.185v-4.346c1.528.185 1.837.857 2.747 2.385l2.04-1.714s-1.492-1.952-4-1.952a6.016 6.016 0 0 0-.796.035m0-4.735v2.138l.424-.027c5.45-.185 9.01 4.47 9.01 4.47s-4.08 4.964-8.33 4.964c-.37 0-.733-.035-1.095-.097v1.325c.3.035.61.062.91.062 3.957 0 6.82-2.023 9.593-4.408.459.371 2.34 1.263 2.73 1.652-2.633 2.208-8.772 3.984-12.253 3.984-.335 0-.653-.018-.971-.053v1.864H24V4.063zm0 10.326v1.131c-3.657-.654-4.673-4.46-4.673-4.46s1.758-1.944 4.673-2.262v1.237H8.94c-1.528-.186-2.73 1.245-2.73 1.245s.68 2.412 2.739 3.11M2.456 10.9s2.164-3.197 6.5-3.533V6.201C4.153 6.59 0 10.653 0 10.653s2.35 6.802 8.948 7.42v-1.237c-4.84-.6-6.492-5.936-6.492-5.936z\"] },\n  meta: { viewBox: '0 0 24 24', fill: '#0467DF', paths: [\"M6.915 4.03c-1.968 0-3.683 1.28-4.871 3.113C.704 9.208 0 11.883 0 14.449c0 .706.07 1.369.21 1.973a6.624 6.624 0 0 0 .265.86 5.297 5.297 0 0 0 .371.761c.696 1.159 1.818 1.927 3.593 1.927 1.497 0 2.633-.671 3.965-2.444.76-1.012 1.144-1.626 2.663-4.32l.756-1.339.186-.325c.061.1.121.196.183.3l2.152 3.595c.724 1.21 1.665 2.556 2.47 3.314 1.046.987 1.992 1.22 3.06 1.22 1.075 0 1.876-.355 2.455-.843a3.743 3.743 0 0 0 .81-.973c.542-.939.861-2.127.861-3.745 0-2.72-.681-5.357-2.084-7.45-1.282-1.912-2.957-2.93-4.716-2.93-1.047 0-2.088.467-3.053 1.308-.652.57-1.257 1.29-1.82 2.05-.69-.875-1.335-1.547-1.958-2.056-1.182-.966-2.315-1.303-3.454-1.303zm10.16 2.053c1.147 0 2.188.758 2.992 1.999 1.132 1.748 1.647 4.195 1.647 6.4 0 1.548-.368 2.9-1.839 2.9-.58 0-1.027-.23-1.664-1.004-.496-.601-1.343-1.878-2.832-4.358l-.617-1.028a44.908 44.908 0 0 0-1.255-1.98c.07-.109.141-.224.211-.327 1.12-1.667 2.118-2.602 3.358-2.602zm-10.201.553c1.265 0 2.058.791 2.675 1.446.307.327.737.871 1.234 1.579l-1.02 1.566c-.757 1.163-1.882 3.017-2.837 4.338-1.191 1.649-1.81 1.817-2.486 1.817-.524 0-1.038-.237-1.383-.794-.263-.426-.464-1.13-.464-2.046 0-2.221.63-4.535 1.66-6.088.454-.687.964-1.226 1.533-1.533a2.264 2.264 0 0 1 1.088-.285z\"] },\n  moonshotai: { viewBox: '0 0 24 24', fill: '#16191E', paths: [\"m1.053 16.91 9.538 2.55a21 20.981 0 0 0 .06 2.031l5.956 1.592a12 11.99 0 0 1-15.554-6.172m-1.02-5.79 11.352 3.035a21 20.981 0 0 0-.469 2.01l10.817 2.89a12 11.99 0 0 1-1.845 2.004L.658 15.918a12 11.99 0 0 1-.625-4.796m1.593-5.146L13.573 9.17a21 20.981 0 0 0-1.01 1.874l11.297 3.02a21 20.981 0 0 1-.67 2.362l-11.55-3.087L.125 10.26a12 11.99 0 0 1 1.499-4.285ZM6.067 1.58l11.285 3.016a21 20.981 0 0 0-1.688 1.719l7.824 2.091a21 20.981 0 0 1 .513 2.664L2.107 5.218a12 11.99 0 0 1 3.96-3.638M21.68 4.866 7.222 1.003A12 11.99 0 0 1 21.68 4.866\"] },\n  openai: { viewBox: '0 0 256 260', fill: '#10A37F', paths: [\"M239.184 106.203a64.72 64.72 0 0 0-5.576-53.103C219.452 28.459 191 15.784 163.213 21.74A65.586 65.586 0 0 0 52.096 45.22a64.72 64.72 0 0 0-43.23 31.36c-14.31 24.602-11.061 55.634 8.033 76.74a64.67 64.67 0 0 0 5.525 53.102c14.174 24.65 42.644 37.324 70.446 31.36a64.72 64.72 0 0 0 48.754 21.744c28.481.025 53.714-18.361 62.414-45.481a64.77 64.77 0 0 0 43.229-31.36c14.137-24.558 10.875-55.423-8.083-76.483m-97.56 136.338a48.4 48.4 0 0 1-31.105-11.255l1.535-.87l51.67-29.825a8.6 8.6 0 0 0 4.247-7.367v-72.85l21.845 12.636c.218.111.37.32.409.563v60.367c-.056 26.818-21.783 48.545-48.601 48.601M37.158 197.93a48.35 48.35 0 0 1-5.781-32.589l1.534.921l51.722 29.826a8.34 8.34 0 0 0 8.441 0l63.181-36.425v25.221a.87.87 0 0 1-.358.665l-52.335 30.184c-23.257 13.398-52.97 5.431-66.404-17.803M23.549 85.38a48.5 48.5 0 0 1 25.58-21.333v61.39a8.29 8.29 0 0 0 4.195 7.316l62.874 36.272l-21.845 12.636a.82.82 0 0 1-.767 0L41.353 151.53c-23.211-13.454-31.171-43.144-17.804-66.405zm179.466 41.695l-63.08-36.63L161.73 77.86a.82.82 0 0 1 .768 0l52.233 30.184a48.6 48.6 0 0 1-7.316 87.635v-61.391a8.54 8.54 0 0 0-4.4-7.213m21.742-32.69l-1.535-.922l-51.619-30.081a8.39 8.39 0 0 0-8.492 0L99.98 99.808V74.587a.72.72 0 0 1 .307-.665l52.233-30.133a48.652 48.652 0 0 1 72.236 50.391zM88.061 139.097l-21.845-12.585a.87.87 0 0 1-.41-.614V65.685a48.652 48.652 0 0 1 79.757-37.346l-1.535.87l-51.67 29.825a8.6 8.6 0 0 0-4.246 7.367zm11.868-25.58L128.067 97.3l28.188 16.218v32.434l-28.086 16.218l-28.188-16.218z\"] },\n}\n\nconst ALIASES: Record<string, string> = {\n  moonshot: 'moonshotai',\n  deepseek_ai: 'deepseek',\n  'x-ai': 'xai',\n  'meta-llama': 'meta',\n}\n\nconst MONOGRAM: Record<string, { bg: string; fg: string }> = {\n  cohere: { bg: '#fae8ff', fg: '#c026d3' },\n  groq: { bg: '#fce7f3', fg: '#db2777' },\n  cerebras: { bg: '#ccfbf1', fg: '#0d9488' },\n  zai: { bg: '#ede9fe', fg: '#7c3aed' },\n  'z-ai': { bg: '#ede9fe', fg: '#7c3aed' },\n  tuner: { bg: '#dbeafe', fg: '#2563eb' },\n}\n\nexport interface ProviderLogoProps {\n  provider?: string\n  size?: number\n}\n\n/** Real brand mark when we have one; tinted monogram otherwise. */\nexport function ProviderLogo({ provider, size = 16 }: ProviderLogoProps): ReactNode {\n  const key = ALIASES[provider ?? ''] ?? provider ?? ''\n  const logo = LOGOS[key]\n  if (logo) {\n    return (\n      <svg width={size} height={size} viewBox={logo.viewBox} role=\"img\" aria-label={key}>\n        {logo.paths.map((d, i) => (\n          <path key={i} d={d} fill={logo.fill} />\n        ))}\n      </svg>\n    )\n  }\n  const mono = MONOGRAM[key] ?? { bg: '#f3f4f6', fg: '#6b7280' }\n  return (\n    <svg width={size} height={size} viewBox=\"0 0 16 16\" role=\"img\" aria-label={key || 'model'}>\n      <rect width=\"16\" height=\"16\" rx=\"4\" fill={mono.bg} />\n      <text x=\"8\" y=\"11.6\" textAnchor=\"middle\" fill={mono.fg} fontSize=\"9\" fontWeight=\"700\" fontFamily=\"system-ui, sans-serif\">\n        {(key || '?').charAt(0).toUpperCase()}\n      </text>\n    </svg>\n  )\n}\n","/**\n * Shared chat-shell control primitives — the LEAF that both the web-react barrel\n * (`./index`) and the composer children (`./agent-session-controls`,\n * `./seat-paywall`) import directly, so neither child has to reach back through\n * the barrel (which would re-create an import cycle). The barrel re-exports the\n * public names (`usePopover`, `usePending`, `ModelPicker`, `EffortPicker`, …)\n * unchanged, so the published export surface is identical.\n *\n * Styling contract matches the rest of `web-react`: Tailwind classes against the\n * shared design tokens; the glyphs are inline SVGs, no icon-library dependency.\n */\n\nimport { useEffect, useMemo, useRef, useState, type ReactNode } from 'react'\nimport { ProviderLogo } from './provider-logo'\nimport type { CatalogModel } from '../runtime/model-catalog'\n\n// ── shared glyphs (no icon-library dependency) ────────────────────────────\n\nexport function ChevronDown({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden>\n      <path d=\"m6 9 6 6 6-6\" />\n    </svg>\n  )\n}\n\nfunction SearchGlyph({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden>\n      <circle cx=\"11\" cy=\"11\" r=\"8\" />\n      <path d=\"m21 21-4.3-4.3\" />\n    </svg>\n  )\n}\n\nfunction SparkleGlyph({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden>\n      <path d=\"M12 3v3m0 12v3M3 12h3m12 0h3M5.6 5.6l2.1 2.1m8.6 8.6 2.1 2.1m0-12.8-2.1 2.1M7.7 16.3l-2.1 2.1\" />\n    </svg>\n  )\n}\n\n/**\n * Keyboard + pointer model for a trigger-and-popover pair, dependency-free.\n * Outside-mousedown and Escape both close; Escape also returns focus to the\n * trigger so keyboard users aren't dropped at the top of the document. The\n * returned `triggerProps` carry the ARIA contract (`aria-haspopup`/\n * `aria-expanded`); spread them onto the trigger button.\n */\nexport function usePopover(open: boolean, setOpen: (open: boolean) => void) {\n  const containerRef = useRef<HTMLDivElement>(null)\n  const triggerRef = useRef<HTMLButtonElement>(null)\n\n  useEffect(() => {\n    if (!open) return\n    function onMouseDown(e: MouseEvent) {\n      if (containerRef.current && !containerRef.current.contains(e.target as Node)) setOpen(false)\n    }\n    function onKeyDown(e: KeyboardEvent) {\n      if (e.key === 'Escape') {\n        setOpen(false)\n        triggerRef.current?.focus()\n      }\n    }\n    document.addEventListener('mousedown', onMouseDown)\n    document.addEventListener('keydown', onKeyDown)\n    return () => {\n      document.removeEventListener('mousedown', onMouseDown)\n      document.removeEventListener('keydown', onKeyDown)\n    }\n  }, [open, setOpen])\n\n  return {\n    containerRef,\n    triggerRef,\n    triggerProps: {\n      ref: triggerRef,\n      'aria-haspopup': true as const,\n      'aria-expanded': open,\n    },\n  }\n}\n\n/**\n * Focus treatment for a row inside a popover panel.\n *\n * The ring itself now comes from the `:focus-visible` floor in tokens.css, so\n * this no longer restates a width or a colour. What it still has to say is\n * WHERE the ring is drawn: a popover option is a full-width row inside a panel\n * that clips its own corners (`overflow-hidden rounded-xl`), and an outward\n * ring on the first or last row is clipped away by that panel. Pulling the\n * offset negative draws the same ring just inside the row instead.\n */\nexport const POPOVER_OPTION_FOCUS = 'focus-visible:[outline-offset:-2px]'\n\n/**\n * Guard an async action against double-submit. `run` ignores re-entrant calls\n * while a promise is in flight and flips `pending` so the caller can disable\n * the control — the fix for double-charge / double-approve on a slow network.\n * Settles (success or throw) before clearing, and no-ops state updates after\n * unmount.\n */\nexport function usePending(): { pending: boolean; run: (action: () => void | Promise<void>) => void } {\n  const [pending, setPending] = useState(false)\n  const inFlight = useRef(false)\n  const mounted = useRef(true)\n  useEffect(() => {\n    mounted.current = true\n    return () => {\n      mounted.current = false\n    }\n  }, [])\n  const run = (action: () => void | Promise<void>) => {\n    if (inFlight.current) return\n    let result: void | Promise<void>\n    try {\n      result = action()\n    } catch {\n      return\n    }\n    if (!(result instanceof Promise)) return\n    inFlight.current = true\n    setPending(true)\n    void result.finally(() => {\n      inFlight.current = false\n      if (mounted.current) setPending(false)\n    })\n  }\n  return { pending, run }\n}\n\n// ── ModelPicker ───────────────────────────────────────────────────────────\n\nexport interface ModelPickerProps {\n  value: string\n  onChange: (id: string) => void\n  /** Catalogue models — from `GET`ing the app's catalogue route (see\n   *  `runtime/model-catalog`), plus any product-specific entries appended. */\n  models: CatalogModel[]\n  loading?: boolean\n  /** Render a provider logo/badge; default is a generic sparkle. */\n  renderProviderBadge?: (provider: string) => ReactNode\n  /** Section label for `featured` models. */\n  recommendedLabel?: string\n  /** Pin a labeled section to the TOP of the list (above Recommended) for the\n   *  models a product wants surfaced first — e.g. a tuner app's own fine-tuned\n   *  models (`{ label: 'Your Fine-Tuned Models', match: (m) => m.provider === 'tuner' }`).\n   *  Matching models are shown only in this section, not duplicated below. */\n  priorityGroup?: {\n    label: string\n    match: (model: CatalogModel) => boolean\n  }\n}\n\nfunction formatPrice(p?: string): string | undefined {\n  if (!p) return undefined\n  const n = Number(p)\n  if (isNaN(n) || n === 0) return undefined\n  const perM = n * 1_000_000\n  return perM >= 1 ? `$${perM.toFixed(0)}/M` : `$${perM.toFixed(2)}/M`\n}\n\nfunction formatContext(len?: number): string | undefined {\n  if (!len) return undefined\n  if (len >= 1_000_000) return `${(len / 1_000_000).toFixed(1)}M ctx`\n  if (len >= 1_000) return `${Math.round(len / 1_000)}K ctx`\n  return `${len} ctx`\n}\n\nfunction SectionHeader({ children }: { children: ReactNode }) {\n  return (\n    <div className=\"px-3 pb-1 pt-3 text-xs font-semibold uppercase tracking-wide text-muted-foreground\">\n      {children}\n    </div>\n  )\n}\n\nfunction ModelRow({\n  model,\n  selected,\n  onSelect,\n  renderProviderBadge,\n}: {\n  model: CatalogModel\n  selected: boolean\n  onSelect: () => void\n  renderProviderBadge?: (provider: string) => ReactNode\n}) {\n  const price = formatPrice(model.pricing?.prompt)\n  const ctx = formatContext(model.contextLength)\n  return (\n    <button\n      type=\"button\"\n      onClick={onSelect}\n      className={`flex w-full items-center gap-2.5 rounded-md px-3 py-2.5 text-left text-sm transition ${POPOVER_OPTION_FOCUS} ${\n        selected ? 'bg-primary/10 font-medium' : 'hover:bg-accent/30'\n      }`}\n    >\n      {renderProviderBadge ? renderProviderBadge(model.provider) : <ProviderLogo provider={model.provider} size={16} />}\n      <span className=\"truncate\">{model.name}</span>\n      {!model.supportsTools && (\n        <span className=\"shrink-0 rounded bg-muted/60 px-1.5 py-0.5 text-[10px] font-medium text-muted-foreground\">\n          no tools\n        </span>\n      )}\n      <span className=\"ml-auto flex shrink-0 items-center gap-2 text-xs text-muted-foreground\">\n        {ctx && <span>{ctx}</span>}\n        {price && <span>{price}</span>}\n      </span>\n    </button>\n  )\n}\n\n/**\n * Searchable model picker pill + popover: a featured/recommended section\n * first, then per-provider groups in catalogue order (the server already\n * sorts providers by tier).\n *\n * This is the CANONICAL ecosystem model picker (see \"UI chrome ownership\n * (picker canon)\" in AGENTS.md). sandbox-ui's `dashboard/ModelPicker` is\n * legacy — deprecated, frozen, removed at sandbox-ui's next major; new code\n * belongs here.\n */\nexport function ModelPicker({ value, onChange, models, loading, renderProviderBadge, recommendedLabel = 'Recommended', priorityGroup }: ModelPickerProps) {\n  const [open, setOpen] = useState(false)\n  const [query, setQuery] = useState('')\n  const { containerRef, triggerProps } = usePopover(open, setOpen)\n  const inputRef = useRef<HTMLInputElement>(null)\n  const popoverRef = useRef<HTMLDivElement>(null)\n\n  useEffect(() => {\n    if (open) inputRef.current?.focus()\n  }, [open])\n\n  // Keep the wide popover inside the viewport. It is left-anchored under the\n  // trigger, so inside a narrow RIGHT-docked shell (the assistant drawer near\n  // its minimum width) the 420px card runs past the window's right edge and\n  // the price/context column clips. Shift it left just enough to fit — a no-op\n  // whenever it already fits (the common case), so anchoring is unchanged.\n  useEffect(() => {\n    if (!open) return\n    const el = popoverRef.current\n    if (!el) return\n    const overflowRight = el.getBoundingClientRect().right - (window.innerWidth - 16)\n    el.style.transform = overflowRight > 0 ? `translateX(-${Math.ceil(overflowRight)}px)` : ''\n  }, [open])\n\n  const selected = models.find((m) => m.id === value)\n\n  const filtered = useMemo(() => {\n    const q = query.trim().toLowerCase()\n    if (!q) return null\n    return models.filter(\n      (m) =>\n        m.id.toLowerCase().includes(q) ||\n        m.name.toLowerCase().includes(q) ||\n        (m.description?.toLowerCase() ?? '').includes(q) ||\n        m.provider.toLowerCase().includes(q),\n    )\n  }, [models, query])\n\n  const sections = useMemo(() => {\n    const isPriority = priorityGroup ? (m: CatalogModel) => priorityGroup.match(m) : () => false\n    const priority = priorityGroup ? models.filter(isPriority) : []\n    const recommended = models.filter((m) => m.featured && !isPriority(m))\n    const byProvider: Array<{ provider: string; items: CatalogModel[] }> = []\n    for (const m of models) {\n      if (m.featured || isPriority(m)) continue\n      const last = byProvider[byProvider.length - 1]\n      if (last && last.provider === m.provider) last.items.push(m)\n      else byProvider.push({ provider: m.provider, items: [m] })\n    }\n    return { priority, recommended, byProvider }\n  }, [models, priorityGroup])\n\n  const select = (id: string) => {\n    onChange(id)\n    setOpen(false)\n    setQuery('')\n  }\n\n  return (\n    <div ref={containerRef} className=\"relative inline-flex\">\n      <button\n        type=\"button\"\n        {...triggerProps}\n        onClick={() => setOpen(!open)}\n        className=\"inline-flex items-center gap-1.5 rounded-full border border-border bg-card px-3 py-1.5 text-sm font-medium text-foreground transition hover:bg-accent/30\"\n      >\n        {selected ? (renderProviderBadge ? renderProviderBadge(selected.provider) : <ProviderLogo provider={selected.provider} size={16} />) : <SparkleGlyph className=\"h-3.5 w-3.5 text-muted-foreground\" />}\n        <span className=\"max-w-[160px] truncate\">{selected?.name ?? value}</span>\n        <ChevronDown className=\"h-3.5 w-3.5 text-muted-foreground\" />\n      </button>\n\n      {open && (\n        <div ref={popoverRef} className=\"absolute bottom-full left-0 z-50 mb-2 w-[420px] max-w-[calc(100vw-2rem)] overflow-hidden rounded-xl border border-border bg-card shadow-lg\">\n          <div className=\"border-b border-border px-3 py-2\">\n            <div className=\"flex items-center gap-2 rounded-lg border border-border bg-background px-3 py-2\">\n              <SearchGlyph className=\"h-3.5 w-3.5 text-muted-foreground\" />\n              <input\n                ref={inputRef}\n                type=\"text\"\n                value={query}\n                onChange={(e) => setQuery(e.target.value)}\n                placeholder=\"Search models...\"\n                className=\"flex-1 bg-transparent text-sm placeholder:text-muted-foreground\"\n              />\n            </div>\n          </div>\n          <div className=\"max-h-[400px] overflow-y-auto p-1 pb-2\">\n            {loading && <div className=\"px-3 py-4 text-center text-sm text-muted-foreground\">Loading models...</div>}\n            {!loading && filtered && (\n              <>\n                {filtered.length === 0 && (\n                  <div className=\"px-3 py-4 text-center text-sm text-muted-foreground\">No models match your search</div>\n                )}\n                {filtered.map((m) => (\n                  <ModelRow key={m.id} model={m} selected={m.id === value} onSelect={() => select(m.id)} renderProviderBadge={renderProviderBadge} />\n                ))}\n              </>\n            )}\n            {!loading && !filtered && models.length === 0 && (\n              <div className=\"px-3 py-4 text-center text-sm text-muted-foreground\">No models available</div>\n            )}\n            {!loading && !filtered && models.length > 0 && (\n              <>\n                {priorityGroup && sections.priority.length > 0 && (\n                  <>\n                    <SectionHeader>{priorityGroup.label}</SectionHeader>\n                    {sections.priority.map((m) => (\n                      <ModelRow key={m.id} model={m} selected={m.id === value} onSelect={() => select(m.id)} renderProviderBadge={renderProviderBadge} />\n                    ))}\n                  </>\n                )}\n                {sections.recommended.length > 0 && (\n                  <>\n                    <SectionHeader>{recommendedLabel}</SectionHeader>\n                    {sections.recommended.map((m) => (\n                      <ModelRow key={m.id} model={m} selected={m.id === value} onSelect={() => select(m.id)} renderProviderBadge={renderProviderBadge} />\n                    ))}\n                  </>\n                )}\n                {sections.byProvider.map((g) => (\n                  <div key={g.provider}>\n                    <SectionHeader>{g.provider}</SectionHeader>\n                    {g.items.map((m) => (\n                      <ModelRow key={m.id} model={m} selected={m.id === value} onSelect={() => select(m.id)} renderProviderBadge={renderProviderBadge} />\n                    ))}\n                  </div>\n                ))}\n              </>\n            )}\n          </div>\n        </div>\n      )}\n    </div>\n  )\n}\n\n// ── EffortPicker ──────────────────────────────────────────────────────────\n\n/** One reasoning-budget level: the engine `id` is unchanged (the value the\n *  product sends to the loop); only the user-facing `label` is renamed to the\n *  plainer \"how hard should it think\" vocabulary from docs/product-surfaces.md.\n *  `low`→Quick, `medium`→Standard, `high`→Extended. The mapping is overridable\n *  via `EffortPickerProps.levels`, so a product can relabel without losing the\n *  ids the runtime expects. */\nexport interface EffortLevel {\n  id: string\n  label: string\n}\n\nexport const DEFAULT_EFFORT_LEVELS: readonly EffortLevel[] = [\n  { id: 'off', label: 'Off' },\n  { id: 'low', label: 'Quick' },\n  { id: 'medium', label: 'Standard' },\n  { id: 'high', label: 'Extended' },\n]\n\nexport interface EffortPickerProps {\n  value: string\n  onChange: (id: string) => void\n  /** Selectable levels (engine id + user-facing label). Defaults to the plain\n   *  \"Thinking\" vocabulary; override to relabel without changing the ids the\n   *  runtime receives. */\n  levels?: readonly EffortLevel[]\n  /** Prefix shown before the active level on the pill — the \"what is this\"\n   *  context the bare value lacked. Default \"Thinking\". Pass '' to hide it. */\n  label?: string\n}\n\n/** Thinking-budget selector pill, styled to match {@link ModelPicker}. Show\n *  it only when the selected model `supportsReasoning`. \"Thinking\" is the\n *  plain-English name for what was internally called \"effort\".\n *\n *  The CANONICAL ecosystem effort picker — sandbox-ui's reasoning menu (inside\n *  its `chat/AgentSessionControls`) is legacy and frozen. */\nexport function EffortPicker({ value, onChange, levels = DEFAULT_EFFORT_LEVELS, label = 'Thinking' }: EffortPickerProps) {\n  const [open, setOpen] = useState(false)\n  const { containerRef, triggerProps } = usePopover(open, setOpen)\n  const selected = levels.find((l) => l.id === value) ?? levels[2] ?? levels[0]\n\n  return (\n    <div ref={containerRef} className=\"relative inline-flex\">\n      <button\n        type=\"button\"\n        {...triggerProps}\n        onClick={() => setOpen(!open)}\n        title={label ? `${label} — how hard the agent reasons before answering` : 'Reasoning effort'}\n        className=\"inline-flex min-h-[36px] items-center gap-1.5 rounded-full border border-border bg-card px-3 py-1.5 text-sm font-medium text-foreground transition hover:bg-accent/30\"\n      >\n        <SparkleGlyph className=\"h-3.5 w-3.5 text-muted-foreground\" />\n        <span>\n          {label ? <span className=\"text-muted-foreground\">{label}: </span> : null}\n          {selected?.label}\n        </span>\n        <ChevronDown className=\"h-3.5 w-3.5 text-muted-foreground\" />\n      </button>\n      {open && (\n        <div role=\"menu\" className=\"absolute bottom-full left-0 z-50 mb-2 w-40 overflow-hidden rounded-xl border border-border bg-card p-1 shadow-lg\">\n          {levels.map((l) => (\n            <button\n              key={l.id}\n              type=\"button\"\n              role=\"menuitemradio\"\n              aria-checked={l.id === value}\n              onClick={() => {\n                onChange(l.id)\n                setOpen(false)\n              }}\n              className={`flex min-h-[40px] w-full items-center rounded-md px-3 py-2 text-left text-sm transition ${POPOVER_OPTION_FOCUS} ${\n                l.id === value ? 'bg-primary/10 font-medium' : 'hover:bg-accent/30'\n              }`}\n            >\n              {l.label}\n            </button>\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n","/**\n * `useComposerAttachments` — the composer's staged-upload lifecycle: validate\n * selected/dropped/pasted files against the shared limits (the SAME\n * `sniffBinary`/`checkAttachmentType`/size-cap vocabulary the store-backed\n * upload route enforces server-side, `../chat-routes/attachment-validation`\n * + `../chat-routes/binary-sniff`), upload each accepted file with one POST\n * request per file (so a single failure never poisons the batch), and track\n * every file's status so a host composer can render chips and gate sending.\n *\n * Ported from gtm-agent's `src/components/composer-attachments.tsx`\n * (gtm#584/#592/#593 hardened the sniff gate and batch semantics this leans\n * on), de-gtm-ified:\n *   - the hardcoded `/api/vault/upload?workspaceId=` URL becomes\n *     `uploadUrl`/`buildUploadRequest` (the latter wins — it hands back both\n *     the URL and a `RequestInit` override, e.g. an auth header);\n *   - `sonner` toasts become `onReject` (client pre-validation, never hits the\n *     network) and `onError` (a request that reached the server and failed);\n *   - the sandbox-ui `validateComposerFiles` import becomes a small\n *     accept-list matcher re-implemented locally (`isAcceptedFileType`,\n *     mirroring its `accept`-string matching byte-for-byte) — this module\n *     stays free of the sandbox-ui peer;\n *   - the response is expected to be `{ files: ChatAttachmentInput[] }` (full\n *     server-authoritative descriptors — size/mediaType/kind — not gtm's\n *     `{path, name}`), so `references` is a verbatim pass-through with no\n *     client recompute;\n *   - `workspaceId`'s truthiness gate becomes `enabled` (default `true`).\n *\n * Import-free beyond React + the browser-safe `/chat-routes` validation core:\n * this module ships through `/web-react` into client bundles\n * (`tests/browser-safe-subpaths.test.ts` walks the graph), so nothing here\n * may reach a Node builtin, `sandbox-ui`, or an engine package.\n */\n\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react'\nimport type { ChatAttachmentInput, ChatAttachmentKind } from './chat-stream'\nimport type { ComposerFile } from './chat-composer'\nimport {\n  ATTACHMENT_ACCEPT,\n  ATTACHMENT_MAX_COUNT,\n  MAX_ATTACHMENT_TOTAL_BYTES,\n  MAX_BINARY_ATTACHMENT_BYTES,\n  MAX_TEXT_ATTACHMENT_BYTES,\n  attachmentSizeErrorMessage,\n  attachmentTotalSizeErrorMessage,\n  checkAttachmentType,\n  sanitizeAttachmentFileName,\n} from '../chat-routes/attachment-validation'\nimport { sniffBinary } from '../chat-routes/binary-sniff'\n\nexport { ATTACHMENT_ACCEPT } from '../chat-routes/attachment-validation'\n\n/** One staged file and its upload lifecycle. `file` is retained so a failed\n *  upload can be retried without re-selecting; `previewUrl` is an object URL\n *  for image thumbnails and must be revoked when the entry leaves the queue.\n *  `reference` is the server's authoritative descriptor once the upload\n *  lands — stored verbatim, never recomputed client-side. */\ninterface StagedAttachment {\n  id: string\n  file: File\n  name: string\n  size: number\n  status: 'pending' | 'uploading' | 'ready' | 'error'\n  reference?: ChatAttachmentInput\n  previewUrl?: string\n  errorMessage?: string\n}\n\n/** Define options for configuring file upload behavior and handling in a composer component */\nexport interface UseComposerAttachmentsOptions {\n  /** Simple upload target: every file POSTs here. Ignored when\n   *  `buildUploadRequest` is provided. */\n  uploadUrl?: string\n  /** Full request-building seam (auth headers, per-file routing, …) — wins\n   *  over `uploadUrl` when both are set. */\n  buildUploadRequest?: (args: { file: File; name: string; form: FormData }) => {\n    url: string\n    init?: Omit<RequestInit, 'body' | 'signal'>\n  }\n  /** Client pre-validation rejections — a file that never reaches the\n   *  network (bad type, over a size cap, over count, disallowed kind). */\n  onReject?: (reason: string, file?: File) => void\n  /** A file that reached the upload endpoint and failed (HTTP error,\n   *  transport error, malformed response). */\n  onError?: (reason: string) => void\n  limits?: {\n    maxCount?: number\n    maxBinaryBytes?: number\n    maxTextBytes?: number\n    maxTotalBytes?: number\n  }\n  /** Attachment kinds accepted, checked against the sniffed content's\n   *  mime. Default: both (`['image', 'file']` — i.e. no restriction). */\n  allowedKinds?: ChatAttachmentKind[]\n  /** `<input accept>`-style gate for the file picker/drop/paste path.\n   *  Default {@link ATTACHMENT_ACCEPT}. */\n  accept?: string\n  /** When `false`, `addFiles` rejects every call via `onReject` (and\n   *  `blockReason` explains why) instead of staging anything — the\n   *  replacement for gtm's `workspaceId`-truthiness gate (e.g. no workspace\n   *  loaded yet). Default `true`. */\n  enabled?: boolean\n}\n\n/** Provide staged file chips, ready attachments, and methods to add, retry, or drop composer files */\nexport interface UseComposerAttachmentsResult {\n  /** Chip models for `ChatComposer`'s `pendingFiles` prop, one per staged\n   *  file — `kind` is always `'file'` (agent-app's `ComposerFile.kind`\n   *  discriminates file-vs-folder chips, not attachment media type). */\n  composerFiles: ComposerFile[]\n  /** Ready-to-send attachment descriptors — only files whose upload\n   *  succeeded, straight from the server's response (no recompute). Feed\n   *  this into `ChatTurnRequestPayload.attachments`. */\n  references: ChatAttachmentInput[]\n  /** Validate + stage + upload the given files, one request per file. */\n  addFiles: (files: File[] | FileList) => Promise<void>\n  /** Re-upload a failed entry using its retained `File`. */\n  retry: (id: string) => void\n  /** Drop one staged entry, aborting its upload and revoking its preview. */\n  removeAttachment: (id: string) => void\n  /** Forget every staged entry (call after a successful send). */\n  clear: () => void\n  /** True while any file is still pending or uploading. */\n  hasPending: boolean\n  /** True while any file failed to upload. */\n  hasError: boolean\n  /** Why a send is blocked, or `null` when the queue is clean. */\n  blockReason: string | null\n}\n\nfunction newId(): string {\n  const cryptoObject = globalThis.crypto\n  if (typeof cryptoObject?.randomUUID === 'function') return cryptoObject.randomUUID()\n  return `att-${Date.now()}-${Math.random().toString(36).slice(2)}`\n}\n\n/** Suffix a name (`report.pdf` → `report-2.pdf`) until it's unused. The\n *  server writes to a name-derived store path, so identical names would\n *  overwrite. The suffix stays inside the store-path charset (see\n *  `sanitizeAttachmentFileName`). Ported byte-for-byte from gtm's\n *  `dedupeName`. */\nfunction dedupeName(name: string, taken: Set<string>): string {\n  if (!taken.has(name)) return name\n  const dot = name.lastIndexOf('.')\n  const base = dot > 0 ? name.slice(0, dot) : name\n  const ext = dot > 0 ? name.slice(dot) : ''\n  let n = 2\n  let candidate = `${base}-${n}${ext}`\n  while (taken.has(candidate)) {\n    n += 1\n    candidate = `${base}-${n}${ext}`\n  }\n  return candidate\n}\n\n/** `image/*` → `'image'`, everything else → `'file'`. Deliberately\n *  reimplemented here (not imported from `../chat-store/parts`, which pulls\n *  the drizzle-adjacent `/chat-store` barrel): this module must stay reachable\n *  from a browser bundle with only the `/chat-routes` validation core as a\n *  dependency. */\nfunction kindForMime(mime: string): ChatAttachmentKind {\n  return mime.startsWith('image/') ? 'image' : 'file'\n}\n\n/** `<input accept>`-style matcher: extension (`.pdf`), wildcard mime\n *  (`image/*`), or exact mime. Reimplemented locally (NOT imported from\n *  `@tangle-network/sandbox-ui`'s `validateComposerFiles`/`isAcceptedType`) so\n *  this module has no sandbox-ui dependency; the matching semantics are kept\n *  identical so a rejection reads the same either side of the fence. */\nfunction isAcceptedFileType(file: File, accept: string): boolean {\n  const patterns = accept.split(',').map((p) => p.trim()).filter((p) => p.length > 0)\n  if (patterns.length === 0) return true\n  const name = file.name.toLowerCase()\n  const type = (file.type || '').toLowerCase()\n  return patterns.some((pattern) => {\n    const lower = pattern.toLowerCase()\n    if (lower.startsWith('.')) return name.endsWith(lower)\n    if (lower.endsWith('/*')) return type.startsWith(lower.slice(0, -1))\n    return type === lower\n  })\n}\n\n/** Pull a human-readable message out of the upload endpoint's error body.\n *  Ported from gtm's `parseUploadError`: handles both `{ error: string }`\n *  (size/count/access errors) and `{ error: { message } }` (the\n *  `createAttachmentUploadRoute` envelope, `{error:{code,message,path?}}`). */\nasync function parseUploadError(res: Response): Promise<string> {\n  const detail = await res.json().catch(() => null)\n  if (detail && typeof detail === 'object' && 'error' in detail) {\n    const error = (detail as { error: unknown }).error\n    if (typeof error === 'string' && error) return error\n    if (error && typeof error === 'object' && 'message' in error) {\n      const message = (error as { message: unknown }).message\n      if (typeof message === 'string' && message) return message\n    }\n  }\n  return `Upload failed (${res.status})`\n}\n\n/** Shown when neither `uploadUrl` nor `buildUploadRequest` is configured\n *  while `enabled` — a product wiring bug, not a user-facing rejection, so it\n *  lands each affected entry in `error` (with `onError`) rather than blocking\n *  `addFiles` outright via `onReject`: the files still stage and can be\n *  retried once the product fixes its config, instead of silently vanishing. */\nconst NO_UPLOAD_TARGET_MESSAGE = 'No upload destination configured (pass uploadUrl or buildUploadRequest)'\n\n/**\n * Owns the composer's attachment lifecycle: validate selected/dropped/pasted\n * files against the shared limits, upload each accepted file to the\n * product's store (one request per file), and track every file's status so\n * the composer can render chips and gate sending.\n *\n * Failures surface loud — a rejected file calls `onReject` and is never\n * uploaded; a failed upload calls `onError` and leaves an error chip the user\n * can retry or remove. `references` only ever contains files whose upload the\n * server actually confirmed.\n */\nexport function useComposerAttachments(\n  options: UseComposerAttachmentsOptions,\n): UseComposerAttachmentsResult {\n  // Latest options, read from inside stable callbacks — avoids re-creating\n  // `addFiles`/`upload` (and therefore breaking referential stability for\n  // effects a host might hang off them) every time a caller passes a fresh\n  // options object literal.\n  const optionsRef = useRef(options)\n  optionsRef.current = options\n\n  const [staged, setStagedState] = useState<StagedAttachment[]>([])\n  // Mirror of `staged` kept in lockstep so dedupe/aggregate-cap/abort read\n  // current values synchronously (setState callbacks alone can't answer\n  // \"what's staged right now\" mid-validation).\n  const stagedRef = useRef<StagedAttachment[]>([])\n  const controllersRef = useRef<Map<string, AbortController>>(new Map())\n\n  // Post-unmount calls reduce to a React no-op setState; the refs they touch\n  // die with the instance.\n  const setStaged = useCallback(\n    (updater: StagedAttachment[] | ((prev: StagedAttachment[]) => StagedAttachment[])) => {\n      const next =\n        typeof updater === 'function'\n          ? (updater as (prev: StagedAttachment[]) => StagedAttachment[])(stagedRef.current)\n          : updater\n      stagedRef.current = next\n      setStagedState(next)\n    },\n    [],\n  )\n\n  const upload = useCallback(\n    async (id: string, file: File, name: string) => {\n      const opts = optionsRef.current\n      setStaged((prev) =>\n        prev.map((s) => (s.id === id ? { ...s, status: 'uploading', errorMessage: undefined } : s)),\n      )\n      const controller = new AbortController()\n      controllersRef.current.set(id, controller)\n      const form = new FormData()\n      form.append('file', file, name)\n\n      const request = opts.buildUploadRequest\n        ? opts.buildUploadRequest({ file, name, form })\n        : opts.uploadUrl\n          ? { url: opts.uploadUrl }\n          : null\n\n      if (!request) {\n        setStaged((prev) =>\n          prev.map((s) =>\n            s.id === id ? { ...s, status: 'error', errorMessage: NO_UPLOAD_TARGET_MESSAGE } : s,\n          ),\n        )\n        opts.onError?.(NO_UPLOAD_TARGET_MESSAGE)\n        controllersRef.current.delete(id)\n        return\n      }\n\n      try {\n        const res = await fetch(request.url, {\n          method: 'POST',\n          credentials: 'same-origin',\n          ...request.init,\n          body: form,\n          signal: controller.signal,\n        })\n        if (!res.ok) {\n          const message = await parseUploadError(res)\n          setStaged((prev) =>\n            prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n          )\n          opts.onError?.(message)\n          return\n        }\n        const data = (await res.json()) as { files?: ChatAttachmentInput[] }\n        const uploaded = data.files?.[0]\n        if (!uploaded) {\n          const message = 'Upload returned no file'\n          setStaged((prev) =>\n            prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n          )\n          opts.onError?.(message)\n          return\n        }\n        setStaged((prev) =>\n          prev.map((s) => (s.id === id ? { ...s, status: 'ready', reference: uploaded } : s)),\n        )\n      } catch (err) {\n        if ((err as Error).name === 'AbortError') return // silent removal — see removeAttachment/clear\n        const message =\n          err instanceof Error && err.message ? err.message : 'Upload failed — check your connection'\n        setStaged((prev) =>\n          prev.map((s) => (s.id === id ? { ...s, status: 'error', errorMessage: message } : s)),\n        )\n        opts.onError?.(message)\n      } finally {\n        controllersRef.current.delete(id)\n      }\n    },\n    [setStaged],\n  )\n\n  const addFiles = useCallback(\n    async (files: File[] | FileList) => {\n      const opts = optionsRef.current\n      const enabled = opts.enabled ?? true\n      if (!enabled) {\n        opts.onReject?.('Attachments are disabled')\n        return\n      }\n\n      const accept = opts.accept ?? ATTACHMENT_ACCEPT\n      const maxCount = opts.limits?.maxCount ?? ATTACHMENT_MAX_COUNT\n      const maxBinaryBytes = opts.limits?.maxBinaryBytes ?? MAX_BINARY_ATTACHMENT_BYTES\n      const maxTextBytes = opts.limits?.maxTextBytes ?? MAX_TEXT_ATTACHMENT_BYTES\n      const maxTotalBytes = opts.limits?.maxTotalBytes ?? MAX_ATTACHMENT_TOTAL_BYTES\n      const allowedKinds = opts.allowedKinds ?? (['image', 'file'] as ChatAttachmentKind[])\n\n      const list = Array.isArray(files) ? files : Array.from(files)\n\n      // Pass 1: accept-list + count cap, mirroring sandbox-ui's\n      // `validateComposerFiles` semantics (accept checked before count, count\n      // checked against currently-staged + already-accepted-this-batch).\n      const currentCount = stagedRef.current.length\n      const countAccepted: File[] = []\n      for (const file of list) {\n        if (!isAcceptedFileType(file, accept)) {\n          opts.onReject?.(`\"${file.name}\" is not an accepted file type (${accept}).`, file)\n          continue\n        }\n        if (currentCount + countAccepted.length >= maxCount) {\n          opts.onReject?.(`\"${file.name}\" was not added — the ${maxCount}-file limit is already reached.`, file)\n          continue\n        }\n        countAccepted.push(file)\n      }\n\n      // Pass 2: real content sniff + type gate + per-kind size cap +\n      // allowed-kinds gate — the SAME checks the server enforces, so a\n      // rejection never differs depending on which side classified the bytes\n      // first. Nothing here ever reaches the network.\n      const sizeAccepted: File[] = []\n      for (const file of countAccepted) {\n        const bytes = new Uint8Array(await file.arrayBuffer())\n        const sniff = sniffBinary(bytes)\n        const typeCheck = checkAttachmentType(file.name, sniff)\n        if (!typeCheck.succeeded) {\n          opts.onReject?.(typeCheck.message, file)\n          continue\n        }\n        const limit = sniff.binary ? maxBinaryBytes : maxTextBytes\n        if (file.size > limit) {\n          opts.onReject?.(attachmentSizeErrorMessage(file.name, file.size, limit), file)\n          continue\n        }\n        const mediaType = sniff.mime ?? file.type ?? ''\n        const kind = kindForMime(mediaType)\n        if (!allowedKinds.includes(kind)) {\n          opts.onReject?.(`\"${file.name}\" is a ${kind} attachment, which isn't accepted here`, file)\n          continue\n        }\n        sizeAccepted.push(file)\n      }\n\n      // Pass 3: running aggregate cap across this batch + everything already\n      // staged (any status) — a partial batch can still land.\n      const accepted: File[] = []\n      let totalBytes = stagedRef.current.reduce((total, s) => total + s.size, 0)\n      for (const file of sizeAccepted) {\n        const nextTotalBytes = totalBytes + file.size\n        if (nextTotalBytes > maxTotalBytes) {\n          opts.onReject?.(attachmentTotalSizeErrorMessage(nextTotalBytes, maxTotalBytes), file)\n          continue\n        }\n        accepted.push(file)\n        totalBytes = nextTotalBytes\n      }\n      if (accepted.length === 0) return\n\n      // Stage under the name the server will actually store, so the chip and\n      // the message's attachment references never diverge.\n      const taken = new Set(stagedRef.current.map((s) => s.name))\n      const entries: StagedAttachment[] = accepted.map((file) => {\n        const name = dedupeName(sanitizeAttachmentFileName(file.name), taken)\n        taken.add(name)\n        return {\n          id: newId(),\n          file,\n          name,\n          size: file.size,\n          status: 'pending',\n          previewUrl: file.type.startsWith('image/') ? URL.createObjectURL(file) : undefined,\n        }\n      })\n      setStaged((prev) => [...prev, ...entries])\n      for (const entry of entries) void upload(entry.id, entry.file, entry.name)\n    },\n    [setStaged, upload],\n  )\n\n  const retry = useCallback(\n    (id: string) => {\n      const entry = stagedRef.current.find((s) => s.id === id)\n      if (!entry) return\n      void upload(entry.id, entry.file, entry.name)\n    },\n    [upload],\n  )\n\n  const removeAttachment = useCallback(\n    (id: string) => {\n      controllersRef.current.get(id)?.abort()\n      controllersRef.current.delete(id)\n      const entry = stagedRef.current.find((s) => s.id === id)\n      if (entry?.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n      setStaged((prev) => prev.filter((s) => s.id !== id))\n    },\n    [setStaged],\n  )\n\n  const clear = useCallback(() => {\n    for (const controller of controllersRef.current.values()) controller.abort()\n    controllersRef.current.clear()\n    for (const entry of stagedRef.current) {\n      if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n    }\n    setStaged([])\n  }, [setStaged])\n\n  useEffect(\n    () => () => {\n      for (const controller of controllersRef.current.values()) controller.abort()\n      controllersRef.current.clear()\n      for (const entry of stagedRef.current) {\n        if (entry.previewUrl) URL.revokeObjectURL(entry.previewUrl)\n      }\n    },\n    [],\n  )\n\n  const composerFiles = useMemo<ComposerFile[]>(\n    () =>\n      staged.map((s) => ({\n        id: s.id,\n        name: s.name,\n        size: s.size,\n        kind: 'file' as const,\n        status: s.status,\n      })),\n    [staged],\n  )\n\n  const references = useMemo<ChatAttachmentInput[]>(\n    () =>\n      staged\n        .filter((s): s is StagedAttachment & { reference: ChatAttachmentInput } => s.status === 'ready' && !!s.reference)\n        .map((s) => s.reference),\n    [staged],\n  )\n\n  const hasPending = useMemo(\n    () => staged.some((s) => s.status === 'pending' || s.status === 'uploading'),\n    [staged],\n  )\n  const hasError = useMemo(() => staged.some((s) => s.status === 'error'), [staged])\n  const enabled = options.enabled ?? true\n  const blockReason = !enabled\n    ? 'Attachments are disabled'\n    : hasPending\n      ? 'Attachments are still uploading'\n      : hasError\n        ? 'Remove failed attachments to send'\n        : null\n\n  return {\n    composerFiles,\n    references,\n    addFiles,\n    retry,\n    removeAttachment,\n    clear,\n    hasPending,\n    hasError,\n    blockReason,\n  }\n}\n","/**\n * `AgentSessionControls` — the CANONICAL model + harness + reasoning-effort\n * cluster a chat composer docks (see \"UI chrome ownership (picker canon)\" in\n * AGENTS.md). One component so every product's two composers (and every\n * product) share the same control surface and harness↔model coherence policy.\n *\n * PICKER CANON. The model menu below IS `/web-react`'s `ModelPicker` and the\n * thinking-budget pill IS `EffortPicker` — the canonical ecosystem pickers.\n * sandbox-ui's `dashboard/ModelPicker` and the model menu inside sandbox-ui's\n * `chat/AgentSessionControls` are legacy (deprecated, frozen, removed at\n * sandbox-ui's next major), and the `/chat-react` `ComposerAgentControls`\n * adapter that rendered sandbox-ui's strip is REMOVED — a surface that still\n * renders the sandbox-ui strip is showing the old design; migrate it\n * (props mapping in `docs/ui-picker-canon.md`).\n *\n * Dependency-free beyond React by design: `/web-react` must not force the\n * optional sandbox-ui peer, so this component — the canonical one — can never\n * require it.\n *\n * Two layouts, additive — the default preserves the prior hand-rolled behavior:\n *  - `layout=\"inline\"` (default): model, harness, and effort sit side by side as\n *    pills. This is the original arrangement; existing call sites that mounted\n *    `ModelPicker` + a harness picker + `EffortPicker` in a row get the same UI.\n *  - `layout=\"compact\"`: the model picker stays inline and visible; the agent\n *    backend (\"harness\") and reasoning-effort controls — internal jargon a user\n *    rarely needs — tuck behind a single gear popover with plain-English copy.\n *\n * Harness ↔ model coherence is identical in both layouts, via the substrate's\n * snap helpers (`@tangle-network/agent-app/harness`): changing the harness snaps\n * an incompatible model to that harness's best catalog option; changing the\n * model switches to the model's native harness. Catalog model ids are canonical\n * (\"provider/model\"), which is exactly what the snap helpers expect — no id\n * translation is needed here.\n *\n * Dependency-free beyond React: inline SVG glyphs, CSS-var / Tailwind tokens the\n * app shell defines. The harness picker is rendered inline so this needs no\n * sandbox-ui dependency.\n */\n\nimport { useMemo, useState, type ReactNode } from 'react'\nimport {\n  snapHarnessToModel,\n  snapModelToHarness,\n  type Harness,\n} from '../harness'\nimport type { CatalogModel } from '../runtime/model-catalog'\nimport { ModelPicker, EffortPicker, usePopover } from './controls'\n\n/** Plain-English labels for the harnesses a product is likely to expose. Unknown\n *  ids fall back to the raw value so a new backend still renders a usable label. */\nconst HARNESS_LABELS: Partial<Record<Harness, string>> = {\n  opencode: 'OpenCode (any model)',\n  'claude-code': 'Claude Code (Anthropic)',\n  codex: 'Codex (OpenAI)',\n  'kimi-code': 'Kimi (Moonshot)',\n  amp: 'Amp',\n  'factory-droids': 'Factory Droids',\n  cursor: 'Cursor',\n  hermes: 'Hermes',\n  forge: 'Forge',\n  pi: 'Pi',\n  openclaw: 'OpenClaw',\n  acp: 'ACP',\n  'cli-base': 'CLI',\n}\n\nfunction harnessLabel(h: Harness): string {\n  return HARNESS_LABELS[h] ?? h\n}\n\nfunction ChevronDown({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden>\n      <path d=\"m6 9 6 6 6-6\" />\n    </svg>\n  )\n}\n\nfunction GearGlyph({ className }: { className?: string }) {\n  return (\n    <svg className={className} viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2\" strokeLinecap=\"round\" strokeLinejoin=\"round\" aria-hidden>\n      <circle cx=\"12\" cy=\"12\" r=\"3\" />\n      <path d=\"M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06a1.65 1.65 0 0 0 .33-1.82 1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06a1.65 1.65 0 0 0 1.82.33H9a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1Z\" />\n    </svg>\n  )\n}\n\n/** Tailwind utilities for keyboard-visible focus on popover options + triggers. */\nconst FOCUS_RING =\n  ''\n\n/** Pill-styled harness picker — inline, no sandbox-ui dependency. */\nfunction HarnessPicker({\n  value,\n  onChange,\n  available,\n}: {\n  value: Harness\n  onChange: (h: Harness) => void\n  available?: ReadonlyArray<Harness>\n}) {\n  const [open, setOpen] = useState(false)\n  const { containerRef, triggerProps } = usePopover(open, setOpen)\n  const options = available ?? (Object.keys(HARNESS_LABELS) as Harness[])\n  return (\n    <div ref={containerRef} className=\"relative inline-flex\">\n      <button\n        type=\"button\"\n        {...triggerProps}\n        onClick={() => setOpen(!open)}\n        title=\"Agent backend\"\n        className={`inline-flex w-full items-center justify-between gap-1.5 rounded-lg border border-border bg-card px-3 py-1.5 text-sm font-medium text-foreground transition hover:bg-accent/30 ${FOCUS_RING}`}\n      >\n        <span className=\"truncate\">{harnessLabel(value)}</span>\n        <ChevronDown className=\"h-3.5 w-3.5 text-muted-foreground\" />\n      </button>\n      {open && (\n        <div role=\"menu\" className=\"absolute bottom-full left-0 z-50 mb-2 max-h-64 w-full min-w-[220px] overflow-y-auto rounded-xl border border-border bg-card p-1 shadow-lg\">\n          {options.map((h) => (\n            <button\n              key={h}\n              type=\"button\"\n              role=\"menuitemradio\"\n              aria-checked={h === value}\n              onClick={() => {\n                onChange(h)\n                setOpen(false)\n              }}\n              className={`flex w-full items-center rounded-md px-3 py-2 text-left text-sm transition ${FOCUS_RING} ${\n                h === value ? 'bg-primary/10 font-medium' : 'hover:bg-accent/30'\n              }`}\n            >\n              {harnessLabel(h)}\n            </button>\n          ))}\n        </div>\n      )}\n    </div>\n  )\n}\n\nexport interface AgentSessionControlsProps {\n  /** Catalog models — canonical provider-prefixed ids. */\n  models: CatalogModel[]\n  modelsLoading?: boolean\n  /** Selected canonical model id. */\n  model: string\n  onModelChange(modelId: string): void\n  /** Current harness; harness↔model coherence is enforced on every change. */\n  harness: Harness\n  onHarnessChange(harness: Harness): void\n  /** Harnesses to offer; defaults to the labeled set. */\n  availableHarnesses?: ReadonlyArray<Harness>\n  /** Reasoning-effort value + setter. Shown only when the selected model\n   *  `supportsReasoning`, matching `EffortPicker`'s guidance. */\n  effort: string\n  onEffortChange(effort: string): void\n  /**\n   * `inline` (default): model, harness, effort side by side — the prior\n   * behavior. `compact`: model inline, harness + effort behind a gear popover.\n   */\n  layout?: 'inline' | 'compact'\n  /** Hide the harness control entirely (single-harness products). */\n  showHarness?: boolean\n  renderProviderBadge?: (provider: string) => ReactNode\n  className?: string\n}\n\n/**\n * Apply the harness↔model coherence policy and emit the resulting change(s).\n * Returned from a hook-free helper so both layouts share one implementation.\n */\nfunction useCoherentHandlers(props: AgentSessionControlsProps) {\n  const { model, models, harness, onModelChange, onHarnessChange } = props\n  const canonicalIds = useMemo(() => models.map((m) => m.id), [models])\n\n  const onModel = (next: string) => {\n    onModelChange(next)\n    const nextHarness = snapHarnessToModel(harness, next)\n    if (nextHarness !== harness) onHarnessChange(nextHarness)\n  }\n\n  const onHarness = (next: Harness) => {\n    onHarnessChange(next)\n    const snapped = snapModelToHarness(next, model, canonicalIds)\n    if (snapped !== model) onModelChange(snapped)\n  }\n\n  return { onModel, onHarness }\n}\n\nexport function AgentSessionControls(props: AgentSessionControlsProps) {\n  const {\n    models,\n    modelsLoading,\n    model,\n    harness,\n    availableHarnesses,\n    effort,\n    onEffortChange,\n    layout = 'inline',\n    showHarness = true,\n    renderProviderBadge,\n    className,\n  } = props\n  const { onModel, onHarness } = useCoherentHandlers(props)\n  const [open, setOpen] = useState(false)\n  const { containerRef: popoverRef, triggerProps } = usePopover(open, setOpen)\n\n  const selectedModel = models.find((m) => m.id === model)\n  const showEffort = selectedModel?.supportsReasoning ?? true\n\n  const modelPicker = (\n    <ModelPicker\n      value={model}\n      onChange={onModel}\n      models={models}\n      loading={modelsLoading}\n      renderProviderBadge={renderProviderBadge}\n    />\n  )\n\n  if (layout === 'inline') {\n    return (\n      <div className={`flex items-center gap-1.5 ${className ?? ''}`}>\n        {modelPicker}\n        {showHarness && (\n          <HarnessPicker value={harness} onChange={onHarness} available={availableHarnesses} />\n        )}\n        {showEffort && <EffortPicker value={effort} onChange={onEffortChange} />}\n      </div>\n    )\n  }\n\n  // compact: model inline; harness + effort behind a gear popover.\n  const hasAdvanced = showHarness || showEffort\n  return (\n    <div className={`flex items-center gap-1.5 ${className ?? ''}`}>\n      {modelPicker}\n      {hasAdvanced && (\n        <div ref={popoverRef} className=\"relative inline-flex\">\n          <button\n            type=\"button\"\n            {...triggerProps}\n            onClick={() => setOpen(!open)}\n            title=\"Model settings — pick the agent backend and how hard it thinks\"\n            className={`flex h-8 w-8 items-center justify-center rounded-full text-muted-foreground transition-colors hover:bg-muted hover:text-foreground data-[state=open]:bg-muted ${FOCUS_RING}`}\n            data-state={open ? 'open' : 'closed'}\n          >\n            <GearGlyph className=\"h-4 w-4\" />\n          </button>\n          {open && (\n            <div className=\"absolute bottom-full left-0 z-50 mb-2 w-72 space-y-3 rounded-xl border border-border bg-card p-3 shadow-lg\">\n              {showHarness && (\n                <div className=\"space-y-1.5\">\n                  <p className=\"text-xs font-medium text-foreground\">Agent backend</p>\n                  <HarnessPicker value={harness} onChange={onHarness} available={availableHarnesses} />\n                  <p className=\"text-[11px] leading-snug text-muted-foreground\">\n                    The engine that runs the agent. Switching it keeps your model choice compatible.\n                  </p>\n                </div>\n              )}\n              {showEffort && (\n                <div className=\"space-y-1.5\">\n                  <p className=\"text-xs font-medium text-foreground\">Thinking</p>\n                  <EffortPicker value={effort} onChange={onEffortChange} label=\"\" />\n                  <p className=\"text-[11px] leading-snug text-muted-foreground\">\n                    How hard the agent thinks before answering. Higher is slower but more thorough.\n                  </p>\n                </div>\n              )}\n            </div>\n          )}\n        </div>\n      )}\n    </div>\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyDU,cAON,YAPM;AAzCV,IAAM,QAAiC;AAAA,EACrC,WAAW,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,0KAA0K,EAAE;AAAA,EACxO,QAAQ,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,8RAA8R,EAAE;AAAA,EACzV,UAAU,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,w7DAAw7D,EAAE;AAAA,EACr/D,SAAS,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,kLAAkL,EAAE;AAAA,EAC9O,KAAK,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,oMAAoM,EAAE;AAAA,EAC5P,QAAQ,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,qwBAAqwB,EAAE;AAAA,EACh0B,MAAM,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,ksCAAksC,EAAE;AAAA,EAC3vC,YAAY,EAAE,SAAS,aAAa,MAAM,WAAW,OAAO,CAAC,2hBAA2hB,EAAE;AAAA,EAC1lB,QAAQ,EAAE,SAAS,eAAe,MAAM,WAAW,OAAO,CAAC,28CAA28C,EAAE;AAC1gD;AAEA,IAAM,UAAkC;AAAA,EACtC,UAAU;AAAA,EACV,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,cAAc;AAChB;AAEA,IAAM,WAAuD;AAAA,EAC3D,QAAQ,EAAE,IAAI,WAAW,IAAI,UAAU;AAAA,EACvC,MAAM,EAAE,IAAI,WAAW,IAAI,UAAU;AAAA,EACrC,UAAU,EAAE,IAAI,WAAW,IAAI,UAAU;AAAA,EACzC,KAAK,EAAE,IAAI,WAAW,IAAI,UAAU;AAAA,EACpC,QAAQ,EAAE,IAAI,WAAW,IAAI,UAAU;AAAA,EACvC,OAAO,EAAE,IAAI,WAAW,IAAI,UAAU;AACxC;AAQO,SAAS,aAAa,EAAE,UAAU,OAAO,GAAG,GAAiC;AAClF,QAAM,MAAM,QAAQ,YAAY,EAAE,KAAK,YAAY;AACnD,QAAM,OAAO,MAAM,GAAG;AACtB,MAAI,MAAM;AACR,WACE,oBAAC,SAAI,OAAO,MAAM,QAAQ,MAAM,SAAS,KAAK,SAAS,MAAK,OAAM,cAAY,KAC3E,eAAK,MAAM,IAAI,CAAC,GAAG,MAClB,oBAAC,UAAa,GAAM,MAAM,KAAK,QAApB,CAA0B,CACtC,GACH;AAAA,EAEJ;AACA,QAAM,OAAO,SAAS,GAAG,KAAK,EAAE,IAAI,WAAW,IAAI,UAAU;AAC7D,SACE,qBAAC,SAAI,OAAO,MAAM,QAAQ,MAAM,SAAQ,aAAY,MAAK,OAAM,cAAY,OAAO,SAChF;AAAA,wBAAC,UAAK,OAAM,MAAK,QAAO,MAAK,IAAG,KAAI,MAAM,KAAK,IAAI;AAAA,IACnD,oBAAC,UAAK,GAAE,KAAI,GAAE,QAAO,YAAW,UAAS,MAAM,KAAK,IAAI,UAAS,KAAI,YAAW,OAAM,YAAW,yBAC7F,kBAAO,KAAK,OAAO,CAAC,EAAE,YAAY,GACtC;AAAA,KACF;AAEJ;;;AC3DA,SAAS,WAAW,SAAS,QAAQ,gBAAgC;AAS/D,SAoSQ,UApSR,OAAAA,MAOF,QAAAC,aAPE;AAHC,SAAS,YAAY,EAAE,UAAU,GAA2B;AACjE,SACE,gBAAAD,KAAC,SAAI,WAAsB,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,KAAI,eAAc,SAAQ,gBAAe,SAAQ,eAAW,MACvJ,0BAAAA,KAAC,UAAK,GAAE,gBAAe,GACzB;AAEJ;AAEA,SAAS,YAAY,EAAE,UAAU,GAA2B;AAC1D,SACE,gBAAAC,MAAC,SAAI,WAAsB,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,KAAI,eAAc,SAAQ,gBAAe,SAAQ,eAAW,MACvJ;AAAA,oBAAAD,KAAC,YAAO,IAAG,MAAK,IAAG,MAAK,GAAE,KAAI;AAAA,IAC9B,gBAAAA,KAAC,UAAK,GAAE,kBAAiB;AAAA,KAC3B;AAEJ;AAEA,SAAS,aAAa,EAAE,UAAU,GAA2B;AAC3D,SACE,gBAAAA,KAAC,SAAI,WAAsB,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,KAAI,eAAc,SAAQ,gBAAe,SAAQ,eAAW,MACvJ,0BAAAA,KAAC,UAAK,GAAE,iGAAgG,GAC1G;AAEJ;AASO,SAAS,WAAW,MAAe,SAAkC;AAC1E,QAAM,eAAe,OAAuB,IAAI;AAChD,QAAM,aAAa,OAA0B,IAAI;AAEjD,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,aAAS,YAAY,GAAe;AAClC,UAAI,aAAa,WAAW,CAAC,aAAa,QAAQ,SAAS,EAAE,MAAc,EAAG,SAAQ,KAAK;AAAA,IAC7F;AACA,aAAS,UAAU,GAAkB;AACnC,UAAI,EAAE,QAAQ,UAAU;AACtB,gBAAQ,KAAK;AACb,mBAAW,SAAS,MAAM;AAAA,MAC5B;AAAA,IACF;AACA,aAAS,iBAAiB,aAAa,WAAW;AAClD,aAAS,iBAAiB,WAAW,SAAS;AAC9C,WAAO,MAAM;AACX,eAAS,oBAAoB,aAAa,WAAW;AACrD,eAAS,oBAAoB,WAAW,SAAS;AAAA,IACnD;AAAA,EACF,GAAG,CAAC,MAAM,OAAO,CAAC;AAElB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,cAAc;AAAA,MACZ,KAAK;AAAA,MACL,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,IACnB;AAAA,EACF;AACF;AAYO,IAAM,uBAAuB;AAS7B,SAAS,aAAsF;AACpG,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,WAAW,OAAO,KAAK;AAC7B,QAAM,UAAU,OAAO,IAAI;AAC3B,YAAU,MAAM;AACd,YAAQ,UAAU;AAClB,WAAO,MAAM;AACX,cAAQ,UAAU;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,CAAC;AACL,QAAM,MAAM,CAAC,WAAuC;AAClD,QAAI,SAAS,QAAS;AACtB,QAAI;AACJ,QAAI;AACF,eAAS,OAAO;AAAA,IAClB,QAAQ;AACN;AAAA,IACF;AACA,QAAI,EAAE,kBAAkB,SAAU;AAClC,aAAS,UAAU;AACnB,eAAW,IAAI;AACf,SAAK,OAAO,QAAQ,MAAM;AACxB,eAAS,UAAU;AACnB,UAAI,QAAQ,QAAS,YAAW,KAAK;AAAA,IACvC,CAAC;AAAA,EACH;AACA,SAAO,EAAE,SAAS,IAAI;AACxB;AAyBA,SAAS,YAAY,GAAgC;AACnD,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,IAAI,OAAO,CAAC;AAClB,MAAI,MAAM,CAAC,KAAK,MAAM,EAAG,QAAO;AAChC,QAAM,OAAO,IAAI;AACjB,SAAO,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAClE;AAEA,SAAS,cAAc,KAAkC;AACvD,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,OAAO,IAAW,QAAO,IAAI,MAAM,KAAW,QAAQ,CAAC,CAAC;AAC5D,MAAI,OAAO,IAAO,QAAO,GAAG,KAAK,MAAM,MAAM,GAAK,CAAC;AACnD,SAAO,GAAG,GAAG;AACf;AAEA,SAAS,cAAc,EAAE,SAAS,GAA4B;AAC5D,SACE,gBAAAA,KAAC,SAAI,WAAU,sFACZ,UACH;AAEJ;AAEA,SAAS,SAAS;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAKG;AACD,QAAM,QAAQ,YAAY,MAAM,SAAS,MAAM;AAC/C,QAAM,MAAM,cAAc,MAAM,aAAa;AAC7C,SACE,gBAAAC;AAAA,IAAC;AAAA;AAAA,MACC,MAAK;AAAA,MACL,SAAS;AAAA,MACT,WAAW,wFAAwF,oBAAoB,IACrH,WAAW,8BAA8B,oBAC3C;AAAA,MAEC;AAAA,8BAAsB,oBAAoB,MAAM,QAAQ,IAAI,gBAAAD,KAAC,gBAAa,UAAU,MAAM,UAAU,MAAM,IAAI;AAAA,QAC/G,gBAAAA,KAAC,UAAK,WAAU,YAAY,gBAAM,MAAK;AAAA,QACtC,CAAC,MAAM,iBACN,gBAAAA,KAAC,UAAK,WAAU,4FAA2F,sBAE3G;AAAA,QAEF,gBAAAC,MAAC,UAAK,WAAU,0EACb;AAAA,iBAAO,gBAAAD,KAAC,UAAM,eAAI;AAAA,UAClB,SAAS,gBAAAA,KAAC,UAAM,iBAAM;AAAA,WACzB;AAAA;AAAA;AAAA,EACF;AAEJ;AAYO,SAAS,YAAY,EAAE,OAAO,UAAU,QAAQ,SAAS,qBAAqB,mBAAmB,eAAe,cAAc,GAAqB;AACxJ,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAS,EAAE;AACrC,QAAM,EAAE,cAAc,aAAa,IAAI,WAAW,MAAM,OAAO;AAC/D,QAAM,WAAW,OAAyB,IAAI;AAC9C,QAAM,aAAa,OAAuB,IAAI;AAE9C,YAAU,MAAM;AACd,QAAI,KAAM,UAAS,SAAS,MAAM;AAAA,EACpC,GAAG,CAAC,IAAI,CAAC;AAOT,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,UAAM,KAAK,WAAW;AACtB,QAAI,CAAC,GAAI;AACT,UAAM,gBAAgB,GAAG,sBAAsB,EAAE,SAAS,OAAO,aAAa;AAC9E,OAAG,MAAM,YAAY,gBAAgB,IAAI,eAAe,KAAK,KAAK,aAAa,CAAC,QAAQ;AAAA,EAC1F,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,WAAW,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK;AAElD,QAAM,WAAW,QAAQ,MAAM;AAC7B,UAAM,IAAI,MAAM,KAAK,EAAE,YAAY;AACnC,QAAI,CAAC,EAAG,QAAO;AACf,WAAO,OAAO;AAAA,MACZ,CAAC,MACC,EAAE,GAAG,YAAY,EAAE,SAAS,CAAC,KAC7B,EAAE,KAAK,YAAY,EAAE,SAAS,CAAC,MAC9B,EAAE,aAAa,YAAY,KAAK,IAAI,SAAS,CAAC,KAC/C,EAAE,SAAS,YAAY,EAAE,SAAS,CAAC;AAAA,IACvC;AAAA,EACF,GAAG,CAAC,QAAQ,KAAK,CAAC;AAElB,QAAM,WAAW,QAAQ,MAAM;AAC7B,UAAM,aAAa,gBAAgB,CAAC,MAAoB,cAAc,MAAM,CAAC,IAAI,MAAM;AACvF,UAAM,WAAW,gBAAgB,OAAO,OAAO,UAAU,IAAI,CAAC;AAC9D,UAAM,cAAc,OAAO,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;AACrE,UAAM,aAAiE,CAAC;AACxE,eAAW,KAAK,QAAQ;AACtB,UAAI,EAAE,YAAY,WAAW,CAAC,EAAG;AACjC,YAAM,OAAO,WAAW,WAAW,SAAS,CAAC;AAC7C,UAAI,QAAQ,KAAK,aAAa,EAAE,SAAU,MAAK,MAAM,KAAK,CAAC;AAAA,UACtD,YAAW,KAAK,EAAE,UAAU,EAAE,UAAU,OAAO,CAAC,CAAC,EAAE,CAAC;AAAA,IAC3D;AACA,WAAO,EAAE,UAAU,aAAa,WAAW;AAAA,EAC7C,GAAG,CAAC,QAAQ,aAAa,CAAC;AAE1B,QAAM,SAAS,CAAC,OAAe;AAC7B,aAAS,EAAE;AACX,YAAQ,KAAK;AACb,aAAS,EAAE;AAAA,EACb;AAEA,SACE,gBAAAC,MAAC,SAAI,KAAK,cAAc,WAAU,wBAChC;AAAA,oBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACJ,GAAG;AAAA,QACJ,SAAS,MAAM,QAAQ,CAAC,IAAI;AAAA,QAC5B,WAAU;AAAA,QAET;AAAA,qBAAY,sBAAsB,oBAAoB,SAAS,QAAQ,IAAI,gBAAAD,KAAC,gBAAa,UAAU,SAAS,UAAU,MAAM,IAAI,IAAM,gBAAAA,KAAC,gBAAa,WAAU,qCAAoC;AAAA,UACnM,gBAAAA,KAAC,UAAK,WAAU,0BAA0B,oBAAU,QAAQ,OAAM;AAAA,UAClE,gBAAAA,KAAC,eAAY,WAAU,qCAAoC;AAAA;AAAA;AAAA,IAC7D;AAAA,IAEC,QACC,gBAAAC,MAAC,SAAI,KAAK,YAAY,WAAU,8IAC9B;AAAA,sBAAAD,KAAC,SAAI,WAAU,oCACb,0BAAAC,MAAC,SAAI,WAAU,mFACb;AAAA,wBAAAD,KAAC,eAAY,WAAU,qCAAoC;AAAA,QAC3D,gBAAAA;AAAA,UAAC;AAAA;AAAA,YACC,KAAK;AAAA,YACL,MAAK;AAAA,YACL,OAAO;AAAA,YACP,UAAU,CAAC,MAAM,SAAS,EAAE,OAAO,KAAK;AAAA,YACxC,aAAY;AAAA,YACZ,WAAU;AAAA;AAAA,QACZ;AAAA,SACF,GACF;AAAA,MACA,gBAAAC,MAAC,SAAI,WAAU,0CACZ;AAAA,mBAAW,gBAAAD,KAAC,SAAI,WAAU,uDAAsD,+BAAiB;AAAA,QACjG,CAAC,WAAW,YACX,gBAAAC,MAAA,YACG;AAAA,mBAAS,WAAW,KACnB,gBAAAD,KAAC,SAAI,WAAU,uDAAsD,yCAA2B;AAAA,UAEjG,SAAS,IAAI,CAAC,MACb,gBAAAA,KAAC,YAAoB,OAAO,GAAG,UAAU,EAAE,OAAO,OAAO,UAAU,MAAM,OAAO,EAAE,EAAE,GAAG,uBAAxE,EAAE,EAAgH,CAClI;AAAA,WACH;AAAA,QAED,CAAC,WAAW,CAAC,YAAY,OAAO,WAAW,KAC1C,gBAAAA,KAAC,SAAI,WAAU,uDAAsD,iCAAmB;AAAA,QAEzF,CAAC,WAAW,CAAC,YAAY,OAAO,SAAS,KACxC,gBAAAC,MAAA,YACG;AAAA,2BAAiB,SAAS,SAAS,SAAS,KAC3C,gBAAAA,MAAA,YACE;AAAA,4BAAAD,KAAC,iBAAe,wBAAc,OAAM;AAAA,YACnC,SAAS,SAAS,IAAI,CAAC,MACtB,gBAAAA,KAAC,YAAoB,OAAO,GAAG,UAAU,EAAE,OAAO,OAAO,UAAU,MAAM,OAAO,EAAE,EAAE,GAAG,uBAAxE,EAAE,EAAgH,CAClI;AAAA,aACH;AAAA,UAED,SAAS,YAAY,SAAS,KAC7B,gBAAAC,MAAA,YACE;AAAA,4BAAAD,KAAC,iBAAe,4BAAiB;AAAA,YAChC,SAAS,YAAY,IAAI,CAAC,MACzB,gBAAAA,KAAC,YAAoB,OAAO,GAAG,UAAU,EAAE,OAAO,OAAO,UAAU,MAAM,OAAO,EAAE,EAAE,GAAG,uBAAxE,EAAE,EAAgH,CAClI;AAAA,aACH;AAAA,UAED,SAAS,WAAW,IAAI,CAAC,MACxB,gBAAAC,MAAC,SACC;AAAA,4BAAAD,KAAC,iBAAe,YAAE,UAAS;AAAA,YAC1B,EAAE,MAAM,IAAI,CAAC,MACZ,gBAAAA,KAAC,YAAoB,OAAO,GAAG,UAAU,EAAE,OAAO,OAAO,UAAU,MAAM,OAAO,EAAE,EAAE,GAAG,uBAAxE,EAAE,EAAgH,CAClI;AAAA,eAJO,EAAE,QAKZ,CACD;AAAA,WACH;AAAA,SAEJ;AAAA,OACF;AAAA,KAEJ;AAEJ;AAeO,IAAM,wBAAgD;AAAA,EAC3D,EAAE,IAAI,OAAO,OAAO,MAAM;AAAA,EAC1B,EAAE,IAAI,OAAO,OAAO,QAAQ;AAAA,EAC5B,EAAE,IAAI,UAAU,OAAO,WAAW;AAAA,EAClC,EAAE,IAAI,QAAQ,OAAO,WAAW;AAClC;AAoBO,SAAS,aAAa,EAAE,OAAO,UAAU,SAAS,uBAAuB,QAAQ,WAAW,GAAsB;AACvH,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,EAAE,cAAc,aAAa,IAAI,WAAW,MAAM,OAAO;AAC/D,QAAM,WAAW,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,KAAK,OAAO,CAAC,KAAK,OAAO,CAAC;AAE5E,SACE,gBAAAC,MAAC,SAAI,KAAK,cAAc,WAAU,wBAChC;AAAA,oBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACJ,GAAG;AAAA,QACJ,SAAS,MAAM,QAAQ,CAAC,IAAI;AAAA,QAC5B,OAAO,QAAQ,GAAG,KAAK,wDAAmD;AAAA,QAC1E,WAAU;AAAA,QAEV;AAAA,0BAAAD,KAAC,gBAAa,WAAU,qCAAoC;AAAA,UAC5D,gBAAAC,MAAC,UACE;AAAA,oBAAQ,gBAAAA,MAAC,UAAK,WAAU,yBAAyB;AAAA;AAAA,cAAM;AAAA,eAAE,IAAU;AAAA,YACnE,UAAU;AAAA,aACb;AAAA,UACA,gBAAAD,KAAC,eAAY,WAAU,qCAAoC;AAAA;AAAA;AAAA,IAC7D;AAAA,IACC,QACC,gBAAAA,KAAC,SAAI,MAAK,QAAO,WAAU,oHACxB,iBAAO,IAAI,CAAC,MACX,gBAAAA;AAAA,MAAC;AAAA;AAAA,QAEC,MAAK;AAAA,QACL,MAAK;AAAA,QACL,gBAAc,EAAE,OAAO;AAAA,QACvB,SAAS,MAAM;AACb,mBAAS,EAAE,EAAE;AACb,kBAAQ,KAAK;AAAA,QACf;AAAA,QACA,WAAW,2FAA2F,oBAAoB,IACxH,EAAE,OAAO,QAAQ,8BAA8B,oBACjD;AAAA,QAEC,YAAE;AAAA;AAAA,MAZE,EAAE;AAAA,IAaT,CACD,GACH;AAAA,KAEJ;AAEJ;;;ACzZA,SAAS,aAAa,aAAAE,YAAW,WAAAC,UAAS,UAAAC,SAAQ,YAAAC,iBAAgB;AAgGlE,SAAS,QAAgB;AACvB,QAAM,eAAe,WAAW;AAChC,MAAI,OAAO,cAAc,eAAe,WAAY,QAAO,aAAa,WAAW;AACnF,SAAO,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjE;AAOA,SAAS,WAAW,MAAc,OAA4B;AAC5D,MAAI,CAAC,MAAM,IAAI,IAAI,EAAG,QAAO;AAC7B,QAAM,MAAM,KAAK,YAAY,GAAG;AAChC,QAAM,OAAO,MAAM,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI;AAC5C,QAAM,MAAM,MAAM,IAAI,KAAK,MAAM,GAAG,IAAI;AACxC,MAAI,IAAI;AACR,MAAI,YAAY,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG;AAClC,SAAO,MAAM,IAAI,SAAS,GAAG;AAC3B,SAAK;AACL,gBAAY,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG;AAAA,EAChC;AACA,SAAO;AACT;AAOA,SAAS,YAAY,MAAkC;AACrD,SAAO,KAAK,WAAW,QAAQ,IAAI,UAAU;AAC/C;AAOA,SAAS,mBAAmB,MAAY,QAAyB;AAC/D,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAClF,MAAI,SAAS,WAAW,EAAG,QAAO;AAClC,QAAM,OAAO,KAAK,KAAK,YAAY;AACnC,QAAM,QAAQ,KAAK,QAAQ,IAAI,YAAY;AAC3C,SAAO,SAAS,KAAK,CAAC,YAAY;AAChC,UAAM,QAAQ,QAAQ,YAAY;AAClC,QAAI,MAAM,WAAW,GAAG,EAAG,QAAO,KAAK,SAAS,KAAK;AACrD,QAAI,MAAM,SAAS,IAAI,EAAG,QAAO,KAAK,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;AACnE,WAAO,SAAS;AAAA,EAClB,CAAC;AACH;AAMA,eAAe,iBAAiB,KAAgC;AAC9D,QAAM,SAAS,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AAChD,MAAI,UAAU,OAAO,WAAW,YAAY,WAAW,QAAQ;AAC7D,UAAM,QAAS,OAA8B;AAC7C,QAAI,OAAO,UAAU,YAAY,MAAO,QAAO;AAC/C,QAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;AAC5D,YAAM,UAAW,MAA+B;AAChD,UAAI,OAAO,YAAY,YAAY,QAAS,QAAO;AAAA,IACrD;AAAA,EACF;AACA,SAAO,kBAAkB,IAAI,MAAM;AACrC;AAOA,IAAM,2BAA2B;AAa1B,SAAS,uBACd,SAC8B;AAK9B,QAAM,aAAaC,QAAO,OAAO;AACjC,aAAW,UAAU;AAErB,QAAM,CAAC,QAAQ,cAAc,IAAIC,UAA6B,CAAC,CAAC;AAIhE,QAAM,YAAYD,QAA2B,CAAC,CAAC;AAC/C,QAAM,iBAAiBA,QAAqC,oBAAI,IAAI,CAAC;AAIrE,QAAM,YAAY;AAAA,IAChB,CAAC,YAAqF;AACpF,YAAM,OACJ,OAAO,YAAY,aACd,QAA6D,UAAU,OAAO,IAC/E;AACN,gBAAU,UAAU;AACpB,qBAAe,IAAI;AAAA,IACrB;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,SAAS;AAAA,IACb,OAAO,IAAY,MAAY,SAAiB;AAC9C,YAAM,OAAO,WAAW;AACxB;AAAA,QAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,aAAa,cAAc,OAAU,IAAI,CAAE;AAAA,MAC5F;AACA,YAAM,aAAa,IAAI,gBAAgB;AACvC,qBAAe,QAAQ,IAAI,IAAI,UAAU;AACzC,YAAM,OAAO,IAAI,SAAS;AAC1B,WAAK,OAAO,QAAQ,MAAM,IAAI;AAE9B,YAAM,UAAU,KAAK,qBACjB,KAAK,mBAAmB,EAAE,MAAM,MAAM,KAAK,CAAC,IAC5C,KAAK,YACH,EAAE,KAAK,KAAK,UAAU,IACtB;AAEN,UAAI,CAAC,SAAS;AACZ;AAAA,UAAU,CAAC,SACT,KAAK;AAAA,YAAI,CAAC,MACR,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,yBAAyB,IAAI;AAAA,UACpF;AAAA,QACF;AACA,aAAK,UAAU,wBAAwB;AACvC,uBAAe,QAAQ,OAAO,EAAE;AAChC;AAAA,MACF;AAEA,UAAI;AACF,cAAM,MAAM,MAAM,MAAM,QAAQ,KAAK;AAAA,UACnC,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,GAAG,QAAQ;AAAA,UACX,MAAM;AAAA,UACN,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,YAAI,CAAC,IAAI,IAAI;AACX,gBAAM,UAAU,MAAM,iBAAiB,GAAG;AAC1C;AAAA,YAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,UACtF;AACA,eAAK,UAAU,OAAO;AACtB;AAAA,QACF;AACA,cAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,cAAM,WAAW,KAAK,QAAQ,CAAC;AAC/B,YAAI,CAAC,UAAU;AACb,gBAAM,UAAU;AAChB;AAAA,YAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,UACtF;AACA,eAAK,UAAU,OAAO;AACtB;AAAA,QACF;AACA;AAAA,UAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,WAAW,SAAS,IAAI,CAAE;AAAA,QACpF;AAAA,MACF,SAAS,KAAK;AACZ,YAAK,IAAc,SAAS,aAAc;AAC1C,cAAM,UACJ,eAAe,SAAS,IAAI,UAAU,IAAI,UAAU;AACtD;AAAA,UAAU,CAAC,SACT,KAAK,IAAI,CAAC,MAAO,EAAE,OAAO,KAAK,EAAE,GAAG,GAAG,QAAQ,SAAS,cAAc,QAAQ,IAAI,CAAE;AAAA,QACtF;AACA,aAAK,UAAU,OAAO;AAAA,MACxB,UAAE;AACA,uBAAe,QAAQ,OAAO,EAAE;AAAA,MAClC;AAAA,IACF;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,WAAW;AAAA,IACf,OAAO,UAA6B;AAClC,YAAM,OAAO,WAAW;AACxB,YAAME,WAAU,KAAK,WAAW;AAChC,UAAI,CAACA,UAAS;AACZ,aAAK,WAAW,0BAA0B;AAC1C;AAAA,MACF;AAEA,YAAM,SAAS,KAAK,UAAU;AAC9B,YAAM,WAAW,KAAK,QAAQ,YAAY;AAC1C,YAAM,iBAAiB,KAAK,QAAQ,kBAAkB;AACtD,YAAM,eAAe,KAAK,QAAQ,gBAAgB;AAClD,YAAM,gBAAgB,KAAK,QAAQ,iBAAiB;AACpD,YAAM,eAAe,KAAK,gBAAiB,CAAC,SAAS,MAAM;AAE3D,YAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,MAAM,KAAK,KAAK;AAK5D,YAAM,eAAe,UAAU,QAAQ;AACvC,YAAM,gBAAwB,CAAC;AAC/B,iBAAW,QAAQ,MAAM;AACvB,YAAI,CAAC,mBAAmB,MAAM,MAAM,GAAG;AACrC,eAAK,WAAW,IAAI,KAAK,IAAI,mCAAmC,MAAM,MAAM,IAAI;AAChF;AAAA,QACF;AACA,YAAI,eAAe,cAAc,UAAU,UAAU;AACnD,eAAK,WAAW,IAAI,KAAK,IAAI,8BAAyB,QAAQ,mCAAmC,IAAI;AACrG;AAAA,QACF;AACA,sBAAc,KAAK,IAAI;AAAA,MACzB;AAMA,YAAM,eAAuB,CAAC;AAC9B,iBAAW,QAAQ,eAAe;AAChC,cAAM,QAAQ,IAAI,WAAW,MAAM,KAAK,YAAY,CAAC;AACrD,cAAM,QAAQ,YAAY,KAAK;AAC/B,cAAM,YAAY,oBAAoB,KAAK,MAAM,KAAK;AACtD,YAAI,CAAC,UAAU,WAAW;AACxB,eAAK,WAAW,UAAU,SAAS,IAAI;AACvC;AAAA,QACF;AACA,cAAM,QAAQ,MAAM,SAAS,iBAAiB;AAC9C,YAAI,KAAK,OAAO,OAAO;AACrB,eAAK,WAAW,2BAA2B,KAAK,MAAM,KAAK,MAAM,KAAK,GAAG,IAAI;AAC7E;AAAA,QACF;AACA,cAAM,YAAY,MAAM,QAAQ,KAAK,QAAQ;AAC7C,cAAM,OAAO,YAAY,SAAS;AAClC,YAAI,CAAC,aAAa,SAAS,IAAI,GAAG;AAChC,eAAK,WAAW,IAAI,KAAK,IAAI,UAAU,IAAI,0CAA0C,IAAI;AACzF;AAAA,QACF;AACA,qBAAa,KAAK,IAAI;AAAA,MACxB;AAIA,YAAM,WAAmB,CAAC;AAC1B,UAAI,aAAa,UAAU,QAAQ,OAAO,CAAC,OAAO,MAAM,QAAQ,EAAE,MAAM,CAAC;AACzE,iBAAW,QAAQ,cAAc;AAC/B,cAAM,iBAAiB,aAAa,KAAK;AACzC,YAAI,iBAAiB,eAAe;AAClC,eAAK,WAAW,gCAAgC,gBAAgB,aAAa,GAAG,IAAI;AACpF;AAAA,QACF;AACA,iBAAS,KAAK,IAAI;AAClB,qBAAa;AAAA,MACf;AACA,UAAI,SAAS,WAAW,EAAG;AAI3B,YAAM,QAAQ,IAAI,IAAI,UAAU,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAC1D,YAAM,UAA8B,SAAS,IAAI,CAAC,SAAS;AACzD,cAAM,OAAO,WAAW,2BAA2B,KAAK,IAAI,GAAG,KAAK;AACpE,cAAM,IAAI,IAAI;AACd,eAAO;AAAA,UACL,IAAI,MAAM;AAAA,UACV;AAAA,UACA;AAAA,UACA,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,UACR,YAAY,KAAK,KAAK,WAAW,QAAQ,IAAI,IAAI,gBAAgB,IAAI,IAAI;AAAA,QAC3E;AAAA,MACF,CAAC;AACD,gBAAU,CAAC,SAAS,CAAC,GAAG,MAAM,GAAG,OAAO,CAAC;AACzC,iBAAW,SAAS,QAAS,MAAK,OAAO,MAAM,IAAI,MAAM,MAAM,MAAM,IAAI;AAAA,IAC3E;AAAA,IACA,CAAC,WAAW,MAAM;AAAA,EACpB;AAEA,QAAM,QAAQ;AAAA,IACZ,CAAC,OAAe;AACd,YAAM,QAAQ,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACvD,UAAI,CAAC,MAAO;AACZ,WAAK,OAAO,MAAM,IAAI,MAAM,MAAM,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,mBAAmB;AAAA,IACvB,CAAC,OAAe;AACd,qBAAe,QAAQ,IAAI,EAAE,GAAG,MAAM;AACtC,qBAAe,QAAQ,OAAO,EAAE;AAChC,YAAM,QAAQ,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACvD,UAAI,OAAO,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAC3D,gBAAU,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAAA,IACrD;AAAA,IACA,CAAC,SAAS;AAAA,EACZ;AAEA,QAAM,QAAQ,YAAY,MAAM;AAC9B,eAAW,cAAc,eAAe,QAAQ,OAAO,EAAG,YAAW,MAAM;AAC3E,mBAAe,QAAQ,MAAM;AAC7B,eAAW,SAAS,UAAU,SAAS;AACrC,UAAI,MAAM,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAAA,IAC5D;AACA,cAAU,CAAC,CAAC;AAAA,EACd,GAAG,CAAC,SAAS,CAAC;AAEd,EAAAC;AAAA,IACE,MAAM,MAAM;AACV,iBAAW,cAAc,eAAe,QAAQ,OAAO,EAAG,YAAW,MAAM;AAC3E,qBAAe,QAAQ,MAAM;AAC7B,iBAAW,SAAS,UAAU,SAAS;AACrC,YAAI,MAAM,WAAY,KAAI,gBAAgB,MAAM,UAAU;AAAA,MAC5D;AAAA,IACF;AAAA,IACA,CAAC;AAAA,EACH;AAEA,QAAM,gBAAgBC;AAAA,IACpB,MACE,OAAO,IAAI,CAAC,OAAO;AAAA,MACjB,IAAI,EAAE;AAAA,MACN,MAAM,EAAE;AAAA,MACR,MAAM,EAAE;AAAA,MACR,MAAM;AAAA,MACN,QAAQ,EAAE;AAAA,IACZ,EAAE;AAAA,IACJ,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,aAAaA;AAAA,IACjB,MACE,OACG,OAAO,CAAC,MAAkE,EAAE,WAAW,WAAW,CAAC,CAAC,EAAE,SAAS,EAC/G,IAAI,CAAC,MAAM,EAAE,SAAS;AAAA,IAC3B,CAAC,MAAM;AAAA,EACT;AAEA,QAAM,aAAaA;AAAA,IACjB,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,aAAa,EAAE,WAAW,WAAW;AAAA,IAC3E,CAAC,MAAM;AAAA,EACT;AACA,QAAM,WAAWA,SAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,OAAO,GAAG,CAAC,MAAM,CAAC;AACjF,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,cAAc,CAAC,UACjB,6BACA,aACE,oCACA,WACE,sCACA;AAER,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;AC/cA,SAAS,WAAAC,UAAS,YAAAC,iBAAgC;AAkC5C,gBAAAC,MAOF,QAAAC,aAPE;AAvBN,IAAM,iBAAmD;AAAA,EACvD,UAAU;AAAA,EACV,eAAe;AAAA,EACf,OAAO;AAAA,EACP,aAAa;AAAA,EACb,KAAK;AAAA,EACL,kBAAkB;AAAA,EAClB,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,UAAU;AAAA,EACV,KAAK;AAAA,EACL,YAAY;AACd;AAEA,SAAS,aAAa,GAAoB;AACxC,SAAO,eAAe,CAAC,KAAK;AAC9B;AAEA,SAASC,aAAY,EAAE,UAAU,GAA2B;AAC1D,SACE,gBAAAF,KAAC,SAAI,WAAsB,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,KAAI,eAAc,SAAQ,gBAAe,SAAQ,eAAW,MACvJ,0BAAAA,KAAC,UAAK,GAAE,gBAAe,GACzB;AAEJ;AAEA,SAAS,UAAU,EAAE,UAAU,GAA2B;AACxD,SACE,gBAAAC,MAAC,SAAI,WAAsB,SAAQ,aAAY,MAAK,QAAO,QAAO,gBAAe,aAAY,KAAI,eAAc,SAAQ,gBAAe,SAAQ,eAAW,MACvJ;AAAA,oBAAAD,KAAC,YAAO,IAAG,MAAK,IAAG,MAAK,GAAE,KAAI;AAAA,IAC9B,gBAAAA,KAAC,UAAK,GAAE,knBAAinB;AAAA,KAC3nB;AAEJ;AAGA,IAAM,aACJ;AAGF,SAAS,cAAc;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AACF,GAIG;AACD,QAAM,CAAC,MAAM,OAAO,IAAIG,UAAS,KAAK;AACtC,QAAM,EAAE,cAAc,aAAa,IAAI,WAAW,MAAM,OAAO;AAC/D,QAAM,UAAU,aAAc,OAAO,KAAK,cAAc;AACxD,SACE,gBAAAF,MAAC,SAAI,KAAK,cAAc,WAAU,wBAChC;AAAA,oBAAAA;AAAA,MAAC;AAAA;AAAA,QACC,MAAK;AAAA,QACJ,GAAG;AAAA,QACJ,SAAS,MAAM,QAAQ,CAAC,IAAI;AAAA,QAC5B,OAAM;AAAA,QACN,WAAW,iLAAiL,UAAU;AAAA,QAEtM;AAAA,0BAAAD,KAAC,UAAK,WAAU,YAAY,uBAAa,KAAK,GAAE;AAAA,UAChD,gBAAAA,KAACE,cAAA,EAAY,WAAU,qCAAoC;AAAA;AAAA;AAAA,IAC7D;AAAA,IACC,QACC,gBAAAF,KAAC,SAAI,MAAK,QAAO,WAAU,6IACxB,kBAAQ,IAAI,CAAC,MACZ,gBAAAA;AAAA,MAAC;AAAA;AAAA,QAEC,MAAK;AAAA,QACL,MAAK;AAAA,QACL,gBAAc,MAAM;AAAA,QACpB,SAAS,MAAM;AACb,mBAAS,CAAC;AACV,kBAAQ,KAAK;AAAA,QACf;AAAA,QACA,WAAW,8EAA8E,UAAU,IACjG,MAAM,QAAQ,8BAA8B,oBAC9C;AAAA,QAEC,uBAAa,CAAC;AAAA;AAAA,MAZV;AAAA,IAaP,CACD,GACH;AAAA,KAEJ;AAEJ;AAiCA,SAAS,oBAAoB,OAAkC;AAC7D,QAAM,EAAE,OAAO,QAAQ,SAAS,eAAe,gBAAgB,IAAI;AACnE,QAAM,eAAeI,SAAQ,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC;AAEpE,QAAM,UAAU,CAAC,SAAiB;AAChC,kBAAc,IAAI;AAClB,UAAM,cAAc,mBAAmB,SAAS,IAAI;AACpD,QAAI,gBAAgB,QAAS,iBAAgB,WAAW;AAAA,EAC1D;AAEA,QAAM,YAAY,CAAC,SAAkB;AACnC,oBAAgB,IAAI;AACpB,UAAM,UAAU,mBAAmB,MAAM,OAAO,YAAY;AAC5D,QAAI,YAAY,MAAO,eAAc,OAAO;AAAA,EAC9C;AAEA,SAAO,EAAE,SAAS,UAAU;AAC9B;AAEO,SAAS,qBAAqB,OAAkC;AACrE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,IAAI;AACJ,QAAM,EAAE,SAAS,UAAU,IAAI,oBAAoB,KAAK;AACxD,QAAM,CAAC,MAAM,OAAO,IAAID,UAAS,KAAK;AACtC,QAAM,EAAE,cAAc,YAAY,aAAa,IAAI,WAAW,MAAM,OAAO;AAE3E,QAAM,gBAAgB,OAAO,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK;AACvD,QAAM,aAAa,eAAe,qBAAqB;AAEvD,QAAM,cACJ,gBAAAH;AAAA,IAAC;AAAA;AAAA,MACC,OAAO;AAAA,MACP,UAAU;AAAA,MACV;AAAA,MACA,SAAS;AAAA,MACT;AAAA;AAAA,EACF;AAGF,MAAI,WAAW,UAAU;AACvB,WACE,gBAAAC,MAAC,SAAI,WAAW,6BAA6B,aAAa,EAAE,IACzD;AAAA;AAAA,MACA,eACC,gBAAAD,KAAC,iBAAc,OAAO,SAAS,UAAU,WAAW,WAAW,oBAAoB;AAAA,MAEpF,cAAc,gBAAAA,KAAC,gBAAa,OAAO,QAAQ,UAAU,gBAAgB;AAAA,OACxE;AAAA,EAEJ;AAGA,QAAM,cAAc,eAAe;AACnC,SACE,gBAAAC,MAAC,SAAI,WAAW,6BAA6B,aAAa,EAAE,IACzD;AAAA;AAAA,IACA,eACC,gBAAAA,MAAC,SAAI,KAAK,YAAY,WAAU,wBAC9B;AAAA,sBAAAD;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACJ,GAAG;AAAA,UACJ,SAAS,MAAM,QAAQ,CAAC,IAAI;AAAA,UAC5B,OAAM;AAAA,UACN,WAAW,iKAAiK,UAAU;AAAA,UACtL,cAAY,OAAO,SAAS;AAAA,UAE5B,0BAAAA,KAAC,aAAU,WAAU,WAAU;AAAA;AAAA,MACjC;AAAA,MACC,QACC,gBAAAC,MAAC,SAAI,WAAU,8GACZ;AAAA,uBACC,gBAAAA,MAAC,SAAI,WAAU,eACb;AAAA,0BAAAD,KAAC,OAAE,WAAU,uCAAsC,2BAAa;AAAA,UAChE,gBAAAA,KAAC,iBAAc,OAAO,SAAS,UAAU,WAAW,WAAW,oBAAoB;AAAA,UACnF,gBAAAA,KAAC,OAAE,WAAU,kDAAiD,8FAE9D;AAAA,WACF;AAAA,QAED,cACC,gBAAAC,MAAC,SAAI,WAAU,eACb;AAAA,0BAAAD,KAAC,OAAE,WAAU,uCAAsC,sBAAQ;AAAA,UAC3D,gBAAAA,KAAC,gBAAa,OAAO,QAAQ,UAAU,gBAAgB,OAAM,IAAG;AAAA,UAChE,gBAAAA,KAAC,OAAE,WAAU,kDAAiD,6FAE9D;AAAA,WACF;AAAA,SAEJ;AAAA,OAEJ;AAAA,KAEJ;AAEJ;","names":["jsx","jsxs","useEffect","useMemo","useRef","useState","useRef","useState","enabled","useEffect","useMemo","useMemo","useState","jsx","jsxs","ChevronDown","useState","useMemo"]}

package/dist/{chunk-5FAKBTCK.js → chunk-XDB7IBYE.js}

@@ -1,3 +1,7 @@
+import {
+  checkSlackCredential
+} from "./chunk-COP2K4LF.js";
+
 // src/preflight/index.ts
 var DEFAULT_TIMEOUT_MS = 1e4;
 function nowMs() {
@@ -175,6 +179,22 @@ function httpHeadProbe(config) {
     }
   };
 }
+function slackAlertProbe(config) {
+  const keyLabel = config.keySecret ?? "SLACK_BOT_TOKEN";
+  return {
+    name: config.name ?? "slack-alerting",
+    critical: config.critical ?? false,
+    run: async () => {
+      const verdict = await checkSlackCredential({
+        token: config.token,
+        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        fetchImpl: config.fetchImpl
+      });
+      if (verdict.live) return { ok: true, detail: `live as ${verdict.botId} in ${verdict.team}` };
+      return { ok: false, detail: `${verdict.detail} (secret: ${keyLabel})` };
+    }
+  };
+}
 async function runOne(probe) {
   const critical = probe.critical ?? true;
   const start = nowMs();
@@ -245,7 +265,8 @@ export {
   routerChatProbe,
   sandboxAuthProbe,
   httpHeadProbe,
+  slackAlertProbe,
   runPreflight,
   formatPreflightReport
 };
-//# sourceMappingURL=chunk-5FAKBTCK.js.map
+//# sourceMappingURL=chunk-XDB7IBYE.js.map

package/dist/chunk-XDB7IBYE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/preflight/index.ts"],"sourcesContent":["/**\n * `/preflight` — deploy-time secret-liveness probes.\n *\n * WHY THIS EXISTS: on 2026-07-15 four secrets were simultaneously dead in one\n * production day — a dead `SANDBOX_API_KEY`, a stale `SANDBOX_API_URL`, and a\n * dead LiteLLM router key + URL. Each one was present in `wrangler secret list`\n * (so nothing looked wrong) yet invalid against its live endpoint, and nothing\n * anywhere checked liveness. CI cannot hold production secrets, so this binds\n * at DEPLOY time instead: a product declares a handful of probes built from its\n * real env, the deploy workflow runs `agent-app-preflight` as a step, and a\n * dead secret fails the deploy with a message that names exactly which secret\n * to rotate.\n *\n * A probe is `{ name, run, critical? }`; `run()` returns `{ ok, detail? }`.\n * The standard builders (`requiredValueProbe`, `routerChatProbe`,\n * `sandboxAuthProbe`, `httpHeadProbe`, `slackAlertProbe`) each take explicit config — they read\n * nothing global — so the same probe runs identically in a deploy step, a test,\n * or a local check. `runPreflight` fans\n * the probes out, times each, and folds them into a pass/fail report: any\n * failed CRITICAL probe fails the whole run (probes are critical by default).\n *\n * Server-only: probes carry live API keys and hit live endpoints. This subpath\n * must never reach a browser bundle.\n */\n\n/** One probe's outcome. `detail` should name the secret to rotate on failure. */\nexport interface PreflightProbeResult {\n  ok: boolean\n  detail?: string\n}\n\n/**\n * A liveness probe. `run` performs one cheap live call and maps the result to\n * `{ ok, detail }`. `critical` defaults to `true` — a failed critical probe\n * fails the whole preflight (and the deploy).\n */\nexport interface PreflightProbe {\n  name: string\n  run: () => Promise<PreflightProbeResult>\n  critical?: boolean\n}\n\n/** Per-probe verdict enriched with the resolved criticality and measured latency. */\nexport interface PreflightProbeVerdict {\n  name: string\n  ok: boolean\n  critical: boolean\n  latencyMs: number\n  detail?: string\n}\n\n/** Aggregate of every probe verdict plus the overall pass/fail decision. */\nexport interface PreflightReport {\n  /** `false` if any critical probe failed. */\n  ok: boolean\n  probes: PreflightProbeVerdict[]\n  passed: number\n  failed: number\n  criticalFailures: number\n  durationMs: number\n}\n\nimport { checkSlackCredential } from '../alerting/slack'\n\n/** Deploy-time deadline for a single probe. Cold upstreams are slow; a dead\n *  endpoint should still fail fast, so 10s is the ceiling, not the target. */\nconst DEFAULT_TIMEOUT_MS = 10_000\n\nfunction nowMs(): number {\n  return typeof performance !== 'undefined' ? performance.now() : Date.now()\n}\n\nfunction isAbortLike(err: unknown): boolean {\n  return err instanceof Error && (err.name === 'TimeoutError' || err.name === 'AbortError')\n}\n\n/** Strip bearer tokens / key material before an upstream string is surfaced in\n *  a report (deploy logs are not always private). */\nfunction sanitizeUpstreamMessage(input: unknown): string {\n  const message = input instanceof Error ? input.message : String(input)\n  return message\n    .replace(/Bearer\\s+[^\\s]+/gi, 'Bearer [redacted]')\n    .replace(/\\b(?:sk|pk|tc)[_-][A-Za-z0-9_-]{8,}\\b/g, '[redacted-key]')\n}\n\nfunction snippet(body: string): string {\n  const trimmed = body.trim()\n  if (!trimmed) return ''\n  const clipped = trimmed.length > 180 ? `${trimmed.slice(0, 180)}…` : trimmed\n  return `: ${sanitizeUpstreamMessage(clipped)}`\n}\n\ntype ProbeOutcome =\n  | { kind: 'status'; status: number; bodyText: string }\n  | { kind: 'timeout'; timeoutMs: number }\n  | { kind: 'network'; message: string }\n\ninterface HttpProbeCall {\n  fetchImpl: typeof fetch\n  url: string\n  method: string\n  headers?: Record<string, string>\n  body?: string\n  timeoutMs: number\n}\n\n/** One live HTTP call, folded to a probe outcome. Never throws: a timeout, a\n *  DNS/connection failure, and any thrown error all become an outcome so the\n *  probe can classify them into an actionable detail. */\nasync function runHttp(call: HttpProbeCall): Promise<ProbeOutcome> {\n  let response: Response\n  try {\n    response = await call.fetchImpl(call.url, {\n      method: call.method,\n      headers: call.headers,\n      body: call.body,\n      signal: AbortSignal.timeout(call.timeoutMs),\n    })\n  } catch (err) {\n    if (isAbortLike(err)) return { kind: 'timeout', timeoutMs: call.timeoutMs }\n    return { kind: 'network', message: sanitizeUpstreamMessage(err) }\n  }\n  let bodyText = ''\n  try {\n    bodyText = await response.text()\n  } catch {\n    bodyText = ''\n  }\n  return { kind: 'status', status: response.status, bodyText }\n}\n\ninterface AuthedClassifyContext {\n  /** Full endpoint reached, for the message. */\n  endpoint: string\n  /** How to name the API-key secret when the endpoint reports auth failure. */\n  keyLabel: string\n  /** How to name the URL secret when the endpoint is unreachable. */\n  urlLabel: string\n}\n\n/**\n * Shared classification for an authed liveness endpoint (router, sandbox):\n * 2xx → live; 401/403 → the KEY is dead, name it; 503 → the UPSTREAM is down,\n * the key still looks valid, don't rotate; timeout / unreachable → the URL is\n * likely stale, name it; anything else → an unexpected status with a snippet.\n */\nfunction classifyAuthed(outcome: ProbeOutcome, ctx: AuthedClassifyContext): PreflightProbeResult {\n  switch (outcome.kind) {\n    case 'status': {\n      const { status, bodyText } = outcome\n      if (status >= 200 && status < 300) return { ok: true, detail: `${status} OK` }\n      if (status === 401 || status === 403) {\n        return {\n          ok: false,\n          detail: `DEAD KEY — ${ctx.endpoint} returned ${status}; rotate ${ctx.keyLabel}`,\n        }\n      }\n      if (status === 503) {\n        return {\n          ok: false,\n          detail: `UPSTREAM DOWN — ${ctx.endpoint} returned 503; ${ctx.keyLabel} still looks valid, retry or check the provider (do NOT rotate)`,\n        }\n      }\n      return { ok: false, detail: `UNEXPECTED ${status} from ${ctx.endpoint}${snippet(bodyText)}` }\n    }\n    case 'timeout':\n      return {\n        ok: false,\n        detail: `TIMEOUT after ${outcome.timeoutMs}ms reaching ${ctx.endpoint} — check ${ctx.urlLabel}`,\n      }\n    case 'network':\n      return {\n        ok: false,\n        detail: `UNREACHABLE ${ctx.endpoint} (${outcome.message}) — check ${ctx.urlLabel}`,\n      }\n  }\n}\n\nfunction trimTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, '')\n}\n\n// --- Standard probe builders --------------------------------------------------\n\n/** Configuration for a required non-empty production value. */\nexport interface RequiredValueProbeConfig {\n  /** Human-readable value name, normally the environment variable name. */\n  name: string\n  /** Value supplied by the caller. It is checked but never included in output. */\n  value: string | null | undefined\n  /** Default `true`. */\n  critical?: boolean\n  /** Failure detail. Defaults to `NAME is unset`. */\n  missingDetail?: string\n}\n\n/**\n * Require a non-empty string without ever printing its value.\n *\n * This covers local signing keys and other values that have no external\n * endpoint to probe. Credentials with a live API should use a liveness probe\n * instead, because presence alone cannot detect an expired key.\n */\nexport function requiredValueProbe(config: RequiredValueProbeConfig): PreflightProbe {\n  return {\n    name: `required:${config.name}`,\n    critical: config.critical,\n    run: async () => {\n      const ok = typeof config.value === 'string' && config.value.trim().length > 0\n      return { ok, detail: ok ? undefined : (config.missingDetail ?? `${config.name} is unset`) }\n    },\n  }\n}\n\n/** Define configuration options for probing an LLM router with authentication and model details */\nexport interface RouterChatProbeConfig {\n  /** LLM router base URL (LiteLLM / OpenAI-compatible), e.g. `https://router…`. */\n  baseUrl: string\n  apiKey: string\n  /** A cheap model id available on the router. */\n  model: string\n  /** Probe name in the report. Default `'router-chat'`. */\n  name?: string\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the API key, named verbatim in a dead-key failure. */\n  keySecret?: string\n  /** Env-var name of the base URL, named verbatim in an unreachable failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Probe an OpenAI-compatible LLM router with one cheap `POST /chat/completions`\n * (`max_tokens: 1`). 200 → live; 401/403 → dead router key; 503 → upstream\n * provider down (key still valid); timeout / unreachable → check the router URL.\n */\nexport function routerChatProbe(config: RouterChatProbeConfig): PreflightProbe {\n  const keyLabel = config.keySecret ?? 'the router API key'\n  const urlLabel = config.urlSecret ?? 'the router base URL'\n  return {\n    name: config.name ?? 'router-chat',\n    critical: config.critical,\n    run: async () => {\n      const base = trimTrailingSlash(config.baseUrl)\n      const endpoint = `${base}/chat/completions`\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: endpoint,\n        method: 'POST',\n        headers: {\n          Authorization: `Bearer ${config.apiKey}`,\n          'Content-Type': 'application/json',\n        },\n        body: JSON.stringify({\n          model: config.model,\n          messages: [{ role: 'user', content: 'ping' }],\n          max_tokens: 1,\n        }),\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      return classifyAuthed(outcome, { endpoint, keyLabel, urlLabel })\n    },\n  }\n}\n\n/** Define configuration options for probing sandbox authentication endpoints */\nexport interface SandboxAuthProbeConfig {\n  /** Sandbox API base URL. */\n  baseUrl: string\n  apiKey: string\n  /** Probe name in the report. Default `'sandbox-auth'`. */\n  name?: string\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the API key, named verbatim in a dead-key failure. */\n  keySecret?: string\n  /** Env-var name of the base URL, named verbatim in an unreachable failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Probe the sandbox API with a cheap authed `GET /v1/sandboxes?limit=1`.\n * 200 → live; 401/403 → dead sandbox key; 503 → sandbox platform down (key\n * still valid); timeout / unreachable → check the sandbox URL.\n */\nexport function sandboxAuthProbe(config: SandboxAuthProbeConfig): PreflightProbe {\n  const keyLabel = config.keySecret ?? 'the sandbox API key'\n  const urlLabel = config.urlSecret ?? 'the sandbox base URL'\n  return {\n    name: config.name ?? 'sandbox-auth',\n    critical: config.critical,\n    run: async () => {\n      const base = trimTrailingSlash(config.baseUrl)\n      const endpoint = `${base}/v1/sandboxes?limit=1`\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: endpoint,\n        method: 'GET',\n        headers: { Authorization: `Bearer ${config.apiKey}` },\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      return classifyAuthed(outcome, { endpoint, keyLabel, urlLabel })\n    },\n  }\n}\n\n/** Define configuration options for performing an HTTP HEAD probe to check URL availability */\nexport interface HttpHeadProbeConfig {\n  /** Probe name in the report. */\n  name: string\n  /** URL to `HEAD`. */\n  url: string\n  /**\n   * Accepted status(es). A single number requires an exact match; an array\n   * requires membership. Omitted → any 2xx/3xx (the host is up and the path\n   * resolves) counts as live.\n   */\n  expectStatus?: number | number[]\n  /** Default `true`. */\n  critical?: boolean\n  /** Env-var name of the URL, named verbatim in a failure. */\n  urlSecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\nfunction statusMatches(status: number, expect?: number | number[]): boolean {\n  if (expect === undefined) return status >= 200 && status < 400\n  if (Array.isArray(expect)) return expect.includes(status)\n  return status === expect\n}\n\nfunction describeExpected(expect?: number | number[]): string {\n  if (expect === undefined) return '2xx/3xx'\n  if (Array.isArray(expect)) return expect.join(' or ')\n  return String(expect)\n}\n\n/**\n * Probe a plain reachability endpoint (e.g. a platform base URL) with a `HEAD`.\n * Confirms the URL is live and resolving — the class of failure behind a stale\n * platform URL that still sits in the secret store.\n */\nexport function httpHeadProbe(config: HttpHeadProbeConfig): PreflightProbe {\n  const urlLabel = config.urlSecret ?? `the URL for ${config.name}`\n  return {\n    name: config.name,\n    critical: config.critical,\n    run: async () => {\n      const outcome = await runHttp({\n        fetchImpl: config.fetchImpl ?? fetch,\n        url: config.url,\n        method: 'HEAD',\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      })\n      switch (outcome.kind) {\n        case 'status': {\n          if (statusMatches(outcome.status, config.expectStatus)) {\n            return { ok: true, detail: `${outcome.status} OK` }\n          }\n          return {\n            ok: false,\n            detail: `UNEXPECTED ${outcome.status} from ${config.url} (expected ${describeExpected(config.expectStatus)}) — check ${urlLabel}`,\n          }\n        }\n        case 'timeout':\n          return {\n            ok: false,\n            detail: `TIMEOUT after ${outcome.timeoutMs}ms reaching ${config.url} — check ${urlLabel}`,\n          }\n        case 'network':\n          return {\n            ok: false,\n            detail: `UNREACHABLE ${config.url} (${outcome.message}) — check ${urlLabel}`,\n          }\n      }\n    },\n  }\n}\n\n/** Define configuration options for probing that the Slack alerting channel is live */\nexport interface SlackAlertProbeConfig {\n  /** Slack bot token (`xoxb-…`). */\n  token: string | undefined\n  /** Probe name in the report. Default `'slack-alerting'`. */\n  name?: string\n  /**\n   * Default `false`. A dead alerting channel is a serious finding but not a\n   * reason to refuse a deploy — the deploy is often the fix for whatever the\n   * alerts were about, and blocking it would make a broken alert channel an\n   * outage of its own.\n   */\n  critical?: boolean\n  /** Env-var name of the token, named verbatim in a dead-credential failure. */\n  keySecret?: string\n  /** Per-probe deadline. Default 10s. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global `fetch`. */\n  fetchImpl?: typeof fetch\n}\n\n/**\n * Probe that the Slack alerting credential is alive, via `auth.test` — no\n * message is posted.\n *\n * This closes the gap that hid a total alerting outage: every Slack credential\n * the org held was revoked at once and nothing noticed, because an incoming\n * webhook is write-only (the only way to test one is to post to it) and the\n * secret sat in the store looking configured. A bot token can be ASKED, so a\n * deploy can answer the question nobody was asking.\n *\n * Non-critical by default — see `critical`.\n */\nexport function slackAlertProbe(config: SlackAlertProbeConfig): PreflightProbe {\n  const keyLabel = config.keySecret ?? 'SLACK_BOT_TOKEN'\n  return {\n    name: config.name ?? 'slack-alerting',\n    critical: config.critical ?? false,\n    run: async () => {\n      const verdict = await checkSlackCredential({\n        token: config.token,\n        timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n        fetchImpl: config.fetchImpl,\n      })\n      if (verdict.live) return { ok: true, detail: `live as ${verdict.botId} in ${verdict.team}` }\n      return { ok: false, detail: `${verdict.detail} (secret: ${keyLabel})` }\n    },\n  }\n}\n\n// --- Runner + report ----------------------------------------------------------\n\nasync function runOne(probe: PreflightProbe): Promise<PreflightProbeVerdict> {\n  const critical = probe.critical ?? true\n  const start = nowMs()\n  try {\n    const result = await probe.run()\n    return {\n      name: probe.name,\n      ok: result.ok,\n      critical,\n      latencyMs: Math.round(nowMs() - start),\n      detail: result.detail,\n    }\n  } catch (err) {\n    return {\n      name: probe.name,\n      ok: false,\n      critical,\n      latencyMs: Math.round(nowMs() - start),\n      detail: `probe threw: ${sanitizeUpstreamMessage(err)}`,\n    }\n  }\n}\n\n/**\n * Run every probe (concurrently), time each, and fold into a report. The run\n * fails (`ok: false`) iff a critical probe fails; a failed non-critical probe\n * is a warning that does not block the deploy.\n */\nexport async function runPreflight(probes: PreflightProbe[]): Promise<PreflightReport> {\n  const start = nowMs()\n  const verdicts = await Promise.all(probes.map(runOne))\n  const failed = verdicts.filter((v) => !v.ok)\n  const criticalFailures = failed.filter((v) => v.critical).length\n  return {\n    ok: criticalFailures === 0,\n    probes: verdicts,\n    passed: verdicts.length - failed.length,\n    failed: failed.length,\n    criticalFailures,\n    durationMs: Math.round(nowMs() - start),\n  }\n}\n\ninterface FormatRow {\n  status: string\n  name: string\n  latency: string\n  detail: string\n}\n\n/** Render a report as an aligned, operator-readable table + verdict line. Pure\n *  (no I/O) so it is trivially testable and reusable by the bin. */\nexport function formatPreflightReport(report: PreflightReport): string {\n  const header: FormatRow = { status: 'STATUS', name: 'PROBE', latency: 'LATENCY', detail: 'DETAIL' }\n  const rows: FormatRow[] = report.probes.map((p) => ({\n    status: p.ok ? 'PASS' : p.critical ? 'FAIL' : 'WARN',\n    name: p.name,\n    latency: `${p.latencyMs}ms`,\n    detail: p.detail ?? '',\n  }))\n  const statusW = Math.max(header.status.length, ...rows.map((r) => r.status.length))\n  const nameW = Math.max(header.name.length, ...rows.map((r) => r.name.length))\n  const latencyW = Math.max(header.latency.length, ...rows.map((r) => r.latency.length))\n  const line = (r: FormatRow): string =>\n    `${r.status.padEnd(statusW)}  ${r.name.padEnd(nameW)}  ${r.latency.padStart(latencyW)}  ${r.detail}`.trimEnd()\n\n  const out: string[] = [\n    line(header),\n    `${'-'.repeat(statusW)}  ${'-'.repeat(nameW)}  ${'-'.repeat(latencyW)}  ------`,\n    ...rows.map(line),\n    '',\n  ]\n  if (report.ok) {\n    const warn = report.failed > 0 ? ` (${report.failed} non-critical warning(s))` : ''\n    out.push(`Preflight PASSED — ${report.passed}/${report.probes.length} probe(s) live${warn}`)\n  } else {\n    const dead = report.probes\n      .filter((p) => !p.ok && p.critical)\n      .map((p) => p.name)\n      .join(', ')\n    out.push(`Preflight FAILED — ${report.criticalFailures} critical probe(s) dead: ${dead}`)\n    out.push('Rotate the secret named in each FAIL row above, then redeploy.')\n  }\n  return out.join('\\n')\n}\n"],"mappings":";;;;;AAkEA,IAAM,qBAAqB;AAE3B,SAAS,QAAgB;AACvB,SAAO,OAAO,gBAAgB,cAAc,YAAY,IAAI,IAAI,KAAK,IAAI;AAC3E;AAEA,SAAS,YAAY,KAAuB;AAC1C,SAAO,eAAe,UAAU,IAAI,SAAS,kBAAkB,IAAI,SAAS;AAC9E;AAIA,SAAS,wBAAwB,OAAwB;AACvD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QACJ,QAAQ,qBAAqB,mBAAmB,EAChD,QAAQ,0CAA0C,gBAAgB;AACvE;AAEA,SAAS,QAAQ,MAAsB;AACrC,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,UAAU,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,GAAG,CAAC,WAAM;AACrE,SAAO,KAAK,wBAAwB,OAAO,CAAC;AAC9C;AAmBA,eAAe,QAAQ,MAA4C;AACjE,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK,UAAU,KAAK,KAAK;AAAA,MACxC,QAAQ,KAAK;AAAA,MACb,SAAS,KAAK;AAAA,MACd,MAAM,KAAK;AAAA,MACX,QAAQ,YAAY,QAAQ,KAAK,SAAS;AAAA,IAC5C,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,YAAY,GAAG,EAAG,QAAO,EAAE,MAAM,WAAW,WAAW,KAAK,UAAU;AAC1E,WAAO,EAAE,MAAM,WAAW,SAAS,wBAAwB,GAAG,EAAE;AAAA,EAClE;AACA,MAAI,WAAW;AACf,MAAI;AACF,eAAW,MAAM,SAAS,KAAK;AAAA,EACjC,QAAQ;AACN,eAAW;AAAA,EACb;AACA,SAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,QAAQ,SAAS;AAC7D;AAiBA,SAAS,eAAe,SAAuB,KAAkD;AAC/F,UAAQ,QAAQ,MAAM;AAAA,IACpB,KAAK,UAAU;AACb,YAAM,EAAE,QAAQ,SAAS,IAAI;AAC7B,UAAI,UAAU,OAAO,SAAS,IAAK,QAAO,EAAE,IAAI,MAAM,QAAQ,GAAG,MAAM,MAAM;AAC7E,UAAI,WAAW,OAAO,WAAW,KAAK;AACpC,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,mBAAc,IAAI,QAAQ,aAAa,MAAM,YAAY,IAAI,QAAQ;AAAA,QAC/E;AAAA,MACF;AACA,UAAI,WAAW,KAAK;AAClB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,QAAQ,wBAAmB,IAAI,QAAQ,kBAAkB,IAAI,QAAQ;AAAA,QACvE;AAAA,MACF;AACA,aAAO,EAAE,IAAI,OAAO,QAAQ,cAAc,MAAM,SAAS,IAAI,QAAQ,GAAG,QAAQ,QAAQ,CAAC,GAAG;AAAA,IAC9F;AAAA,IACA,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ,iBAAiB,QAAQ,SAAS,eAAe,IAAI,QAAQ,iBAAY,IAAI,QAAQ;AAAA,MAC/F;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,QAAQ,eAAe,IAAI,QAAQ,KAAK,QAAQ,OAAO,kBAAa,IAAI,QAAQ;AAAA,MAClF;AAAA,EACJ;AACF;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,SAAO,IAAI,QAAQ,QAAQ,EAAE;AAC/B;AAuBO,SAAS,mBAAmB,QAAkD;AACnF,SAAO;AAAA,IACL,MAAM,YAAY,OAAO,IAAI;AAAA,IAC7B,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,KAAK,OAAO,OAAO,UAAU,YAAY,OAAO,MAAM,KAAK,EAAE,SAAS;AAC5E,aAAO,EAAE,IAAI,QAAQ,KAAK,SAAa,OAAO,iBAAiB,GAAG,OAAO,IAAI,YAAa;AAAA,IAC5F;AAAA,EACF;AACF;AA4BO,SAAS,gBAAgB,QAA+C;AAC7E,QAAM,WAAW,OAAO,aAAa;AACrC,QAAM,WAAW,OAAO,aAAa;AACrC,SAAO;AAAA,IACL,MAAM,OAAO,QAAQ;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,OAAO,kBAAkB,OAAO,OAAO;AAC7C,YAAM,WAAW,GAAG,IAAI;AACxB,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,OAAO,MAAM;AAAA,UACtC,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,OAAO,OAAO;AAAA,UACd,UAAU,CAAC,EAAE,MAAM,QAAQ,SAAS,OAAO,CAAC;AAAA,UAC5C,YAAY;AAAA,QACd,CAAC;AAAA,QACD,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,aAAO,eAAe,SAAS,EAAE,UAAU,UAAU,SAAS,CAAC;AAAA,IACjE;AAAA,EACF;AACF;AA0BO,SAAS,iBAAiB,QAAgD;AAC/E,QAAM,WAAW,OAAO,aAAa;AACrC,QAAM,WAAW,OAAO,aAAa;AACrC,SAAO;AAAA,IACL,MAAM,OAAO,QAAQ;AAAA,IACrB,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,OAAO,kBAAkB,OAAO,OAAO;AAC7C,YAAM,WAAW,GAAG,IAAI;AACxB,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK;AAAA,QACL,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,OAAO,MAAM,GAAG;AAAA,QACpD,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,aAAO,eAAe,SAAS,EAAE,UAAU,UAAU,SAAS,CAAC;AAAA,IACjE;AAAA,EACF;AACF;AAwBA,SAAS,cAAc,QAAgB,QAAqC;AAC1E,MAAI,WAAW,OAAW,QAAO,UAAU,OAAO,SAAS;AAC3D,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,SAAS,MAAM;AACxD,SAAO,WAAW;AACpB;AAEA,SAAS,iBAAiB,QAAoC;AAC5D,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,MAAM,QAAQ,MAAM,EAAG,QAAO,OAAO,KAAK,MAAM;AACpD,SAAO,OAAO,MAAM;AACtB;AAOO,SAAS,cAAc,QAA6C;AACzE,QAAM,WAAW,OAAO,aAAa,eAAe,OAAO,IAAI;AAC/D,SAAO;AAAA,IACL,MAAM,OAAO;AAAA,IACb,UAAU,OAAO;AAAA,IACjB,KAAK,YAAY;AACf,YAAM,UAAU,MAAM,QAAQ;AAAA,QAC5B,WAAW,OAAO,aAAa;AAAA,QAC/B,KAAK,OAAO;AAAA,QACZ,QAAQ;AAAA,QACR,WAAW,OAAO,aAAa;AAAA,MACjC,CAAC;AACD,cAAQ,QAAQ,MAAM;AAAA,QACpB,KAAK,UAAU;AACb,cAAI,cAAc,QAAQ,QAAQ,OAAO,YAAY,GAAG;AACtD,mBAAO,EAAE,IAAI,MAAM,QAAQ,GAAG,QAAQ,MAAM,MAAM;AAAA,UACpD;AACA,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,cAAc,QAAQ,MAAM,SAAS,OAAO,GAAG,cAAc,iBAAiB,OAAO,YAAY,CAAC,kBAAa,QAAQ;AAAA,UACjI;AAAA,QACF;AAAA,QACA,KAAK;AACH,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,iBAAiB,QAAQ,SAAS,eAAe,OAAO,GAAG,iBAAY,QAAQ;AAAA,UACzF;AAAA,QACF,KAAK;AACH,iBAAO;AAAA,YACL,IAAI;AAAA,YACJ,QAAQ,eAAe,OAAO,GAAG,KAAK,QAAQ,OAAO,kBAAa,QAAQ;AAAA,UAC5E;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACF;AAmCO,SAAS,gBAAgB,QAA+C;AAC7E,QAAM,WAAW,OAAO,aAAa;AACrC,SAAO;AAAA,IACL,MAAM,OAAO,QAAQ;AAAA,IACrB,UAAU,OAAO,YAAY;AAAA,IAC7B,KAAK,YAAY;AACf,YAAM,UAAU,MAAM,qBAAqB;AAAA,QACzC,OAAO,OAAO;AAAA,QACd,WAAW,OAAO,aAAa;AAAA,QAC/B,WAAW,OAAO;AAAA,MACpB,CAAC;AACD,UAAI,QAAQ,KAAM,QAAO,EAAE,IAAI,MAAM,QAAQ,WAAW,QAAQ,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC3F,aAAO,EAAE,IAAI,OAAO,QAAQ,GAAG,QAAQ,MAAM,aAAa,QAAQ,IAAI;AAAA,IACxE;AAAA,EACF;AACF;AAIA,eAAe,OAAO,OAAuD;AAC3E,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,QAAQ,MAAM;AACpB,MAAI;AACF,UAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,IAAI,OAAO;AAAA,MACX;AAAA,MACA,WAAW,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,MACrC,QAAQ,OAAO;AAAA,IACjB;AAAA,EACF,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,MAAM,MAAM;AAAA,MACZ,IAAI;AAAA,MACJ;AAAA,MACA,WAAW,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,MACrC,QAAQ,gBAAgB,wBAAwB,GAAG,CAAC;AAAA,IACtD;AAAA,EACF;AACF;AAOA,eAAsB,aAAa,QAAoD;AACrF,QAAM,QAAQ,MAAM;AACpB,QAAM,WAAW,MAAM,QAAQ,IAAI,OAAO,IAAI,MAAM,CAAC;AACrD,QAAM,SAAS,SAAS,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE;AAC3C,QAAM,mBAAmB,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE;AAC1D,SAAO;AAAA,IACL,IAAI,qBAAqB;AAAA,IACzB,QAAQ;AAAA,IACR,QAAQ,SAAS,SAAS,OAAO;AAAA,IACjC,QAAQ,OAAO;AAAA,IACf;AAAA,IACA,YAAY,KAAK,MAAM,MAAM,IAAI,KAAK;AAAA,EACxC;AACF;AAWO,SAAS,sBAAsB,QAAiC;AACrE,QAAM,SAAoB,EAAE,QAAQ,UAAU,MAAM,SAAS,SAAS,WAAW,QAAQ,SAAS;AAClG,QAAM,OAAoB,OAAO,OAAO,IAAI,CAAC,OAAO;AAAA,IAClD,QAAQ,EAAE,KAAK,SAAS,EAAE,WAAW,SAAS;AAAA,IAC9C,MAAM,EAAE;AAAA,IACR,SAAS,GAAG,EAAE,SAAS;AAAA,IACvB,QAAQ,EAAE,UAAU;AAAA,EACtB,EAAE;AACF,QAAM,UAAU,KAAK,IAAI,OAAO,OAAO,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,OAAO,MAAM,CAAC;AAClF,QAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC;AAC5E,QAAM,WAAW,KAAK,IAAI,OAAO,QAAQ,QAAQ,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,QAAQ,MAAM,CAAC;AACrF,QAAM,OAAO,CAAC,MACZ,GAAG,EAAE,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,SAAS,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ;AAE/G,QAAM,MAAgB;AAAA,IACpB,KAAK,MAAM;AAAA,IACX,GAAG,IAAI,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,IACrE,GAAG,KAAK,IAAI,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,OAAO,IAAI;AACb,UAAM,OAAO,OAAO,SAAS,IAAI,KAAK,OAAO,MAAM,8BAA8B;AACjF,QAAI,KAAK,2BAAsB,OAAO,MAAM,IAAI,OAAO,OAAO,MAAM,iBAAiB,IAAI,EAAE;AAAA,EAC7F,OAAO;AACL,UAAM,OAAO,OAAO,OACjB,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EACjC,IAAI,CAAC,MAAM,EAAE,IAAI,EACjB,KAAK,IAAI;AACZ,QAAI,KAAK,2BAAsB,OAAO,gBAAgB,4BAA4B,IAAI,EAAE;AACxF,QAAI,KAAK,gEAAgE;AAAA,EAC3E;AACA,SAAO,IAAI,KAAK,IAAI;AACtB;","names":[]}

package/dist/preflight/cli.js

@@ -2,7 +2,8 @@
 import {
   formatPreflightReport,
   runPreflight
-} from "../chunk-5FAKBTCK.js";
+} from "../chunk-XDB7IBYE.js";
+import "../chunk-COP2K4LF.js";
 import {
   invokedAsScript
 } from "../chunk-C3CAYGGQ.js";

package/dist/preflight/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/preflight/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `agent-app-preflight` — the deploy-time probe runner.\n *\n * Loads a product's `preflight.config.mjs` (default export: `PreflightProbe[]`),\n * runs every probe, prints the operator table, and exits non-zero when a\n * critical probe fails so a deploy step can gate on it.\n *\n * Run it where the REAL secrets are — after `wrangler secret put …`, not in CI.\n * CI has no secrets, so a probe there proves nothing.\n *\n *   agent-app-preflight                    # ./preflight.config.mjs\n *   agent-app-preflight ops/probes.mjs     # explicit path\n *\n * This bin existed only as a promise in the module docs until 0.44.0; at least\n * one product had hand-rolled a byte-identical `scripts/preflight.mjs` around\n * `runPreflight` + `formatPreflightReport` to fill the gap.\n */\nimport { pathToFileURL } from 'node:url'\nimport { resolve } from 'node:path'\nimport { existsSync } from 'node:fs'\nimport { formatPreflightReport, runPreflight, type PreflightProbe } from './index'\nimport { invokedAsScript } from '../signoff/invoked-as-script'\n\nconst DEFAULT_CONFIG = 'preflight.config.mjs'\n\n/**\n * Load the probe list from a config module. Fail loud on every miss — a\n * preflight that silently probes nothing and exits 0 is worse than no\n * preflight, because it reports the deploy as verified.\n */\nexport async function loadProbes(configPath: string): Promise<PreflightProbe[]> {\n  const abs = resolve(process.cwd(), configPath)\n  if (!existsSync(abs)) {\n    throw new Error(\n      `agent-app-preflight: no config at \"${abs}\". Create one that default-exports a PreflightProbe[], or pass a path.`,\n    )\n  }\n  const mod: unknown = await import(pathToFileURL(abs).href)\n  const probes = (mod as { default?: unknown }).default\n  if (!Array.isArray(probes)) {\n    throw new Error(\n      `agent-app-preflight: \"${abs}\" must default-export an array of probes; got ${typeof probes}.`,\n    )\n  }\n  if (probes.length === 0) {\n    throw new Error(`agent-app-preflight: \"${abs}\" exported an empty probe list — nothing would be verified.`)\n  }\n  return probes as PreflightProbe[]\n}\n\n/** Run the probes named by `argv` and resolve with the process exit code. */\nexport async function runPreflightCli(argv: readonly string[]): Promise<number> {\n  const probes = await loadProbes(argv[0] ?? DEFAULT_CONFIG)\n  const report = await runPreflight(probes)\n  console.log(formatPreflightReport(report))\n  return report.ok ? 0 : 1\n}\n\n/* c8 ignore start — process wiring, exercised by the bin itself */\nif (invokedAsScript(import.meta.url, process.argv[1])) {\n  runPreflightCli(process.argv.slice(2))\n    .then((code) => {\n      process.exit(code)\n    })\n    .catch((err: unknown) => {\n      console.error(err instanceof Error ? err.message : String(err))\n      process.exit(1)\n    })\n}\n/* c8 ignore stop */\n"],"mappings":";;;;;;;;;;AAkBA,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,kBAAkB;AAI3B,IAAM,iBAAiB;AAOvB,eAAsB,WAAW,YAA+C;AAC9E,QAAM,MAAM,QAAQ,QAAQ,IAAI,GAAG,UAAU;AAC7C,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,UAAM,IAAI;AAAA,MACR,sCAAsC,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,QAAM,MAAe,MAAM,OAAO,cAAc,GAAG,EAAE;AACrD,QAAM,SAAU,IAA8B;AAC9C,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,yBAAyB,GAAG,iDAAiD,OAAO,MAAM;AAAA,IAC5F;AAAA,EACF;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,yBAAyB,GAAG,kEAA6D;AAAA,EAC3G;AACA,SAAO;AACT;AAGA,eAAsB,gBAAgB,MAA0C;AAC9E,QAAM,SAAS,MAAM,WAAW,KAAK,CAAC,KAAK,cAAc;AACzD,QAAM,SAAS,MAAM,aAAa,MAAM;AACxC,UAAQ,IAAI,sBAAsB,MAAM,CAAC;AACzC,SAAO,OAAO,KAAK,IAAI;AACzB;AAGA,IAAI,gBAAgB,YAAY,KAAK,QAAQ,KAAK,CAAC,CAAC,GAAG;AACrD,kBAAgB,QAAQ,KAAK,MAAM,CAAC,CAAC,EAClC,KAAK,CAAC,SAAS;AACd,YAAQ,KAAK,IAAI;AAAA,EACnB,CAAC,EACA,MAAM,CAAC,QAAiB;AACvB,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACL;","names":[]}
+{"version":3,"sources":["../../src/preflight/cli.ts"],"sourcesContent":["#!/usr/bin/env node\n/**\n * `agent-app-preflight` — the deploy-time probe runner.\n *\n * Loads a product's `preflight.config.mjs` (default export: `PreflightProbe[]`),\n * runs every probe, prints the operator table, and exits non-zero when a\n * critical probe fails so a deploy step can gate on it.\n *\n * Run it where the REAL secrets are — after `wrangler secret put …`, not in CI.\n * CI has no secrets, so a probe there proves nothing.\n *\n *   agent-app-preflight                    # ./preflight.config.mjs\n *   agent-app-preflight ops/probes.mjs     # explicit path\n *\n * This bin existed only as a promise in the module docs until 0.44.0; at least\n * one product had hand-rolled a byte-identical `scripts/preflight.mjs` around\n * `runPreflight` + `formatPreflightReport` to fill the gap.\n */\nimport { pathToFileURL } from 'node:url'\nimport { resolve } from 'node:path'\nimport { existsSync } from 'node:fs'\nimport { formatPreflightReport, runPreflight, type PreflightProbe } from './index'\nimport { invokedAsScript } from '../signoff/invoked-as-script'\n\nconst DEFAULT_CONFIG = 'preflight.config.mjs'\n\n/**\n * Load the probe list from a config module. Fail loud on every miss — a\n * preflight that silently probes nothing and exits 0 is worse than no\n * preflight, because it reports the deploy as verified.\n */\nexport async function loadProbes(configPath: string): Promise<PreflightProbe[]> {\n  const abs = resolve(process.cwd(), configPath)\n  if (!existsSync(abs)) {\n    throw new Error(\n      `agent-app-preflight: no config at \"${abs}\". Create one that default-exports a PreflightProbe[], or pass a path.`,\n    )\n  }\n  const mod: unknown = await import(pathToFileURL(abs).href)\n  const probes = (mod as { default?: unknown }).default\n  if (!Array.isArray(probes)) {\n    throw new Error(\n      `agent-app-preflight: \"${abs}\" must default-export an array of probes; got ${typeof probes}.`,\n    )\n  }\n  if (probes.length === 0) {\n    throw new Error(`agent-app-preflight: \"${abs}\" exported an empty probe list — nothing would be verified.`)\n  }\n  return probes as PreflightProbe[]\n}\n\n/** Run the probes named by `argv` and resolve with the process exit code. */\nexport async function runPreflightCli(argv: readonly string[]): Promise<number> {\n  const probes = await loadProbes(argv[0] ?? DEFAULT_CONFIG)\n  const report = await runPreflight(probes)\n  console.log(formatPreflightReport(report))\n  return report.ok ? 0 : 1\n}\n\n/* c8 ignore start — process wiring, exercised by the bin itself */\nif (invokedAsScript(import.meta.url, process.argv[1])) {\n  runPreflightCli(process.argv.slice(2))\n    .then((code) => {\n      process.exit(code)\n    })\n    .catch((err: unknown) => {\n      console.error(err instanceof Error ? err.message : String(err))\n      process.exit(1)\n    })\n}\n/* c8 ignore stop */\n"],"mappings":";;;;;;;;;;;AAkBA,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AACxB,SAAS,kBAAkB;AAI3B,IAAM,iBAAiB;AAOvB,eAAsB,WAAW,YAA+C;AAC9E,QAAM,MAAM,QAAQ,QAAQ,IAAI,GAAG,UAAU;AAC7C,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,UAAM,IAAI;AAAA,MACR,sCAAsC,GAAG;AAAA,IAC3C;AAAA,EACF;AACA,QAAM,MAAe,MAAM,OAAO,cAAc,GAAG,EAAE;AACrD,QAAM,SAAU,IAA8B;AAC9C,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,yBAAyB,GAAG,iDAAiD,OAAO,MAAM;AAAA,IAC5F;AAAA,EACF;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,IAAI,MAAM,yBAAyB,GAAG,kEAA6D;AAAA,EAC3G;AACA,SAAO;AACT;AAGA,eAAsB,gBAAgB,MAA0C;AAC9E,QAAM,SAAS,MAAM,WAAW,KAAK,CAAC,KAAK,cAAc;AACzD,QAAM,SAAS,MAAM,aAAa,MAAM;AACxC,UAAQ,IAAI,sBAAsB,MAAM,CAAC;AACzC,SAAO,OAAO,KAAK,IAAI;AACzB;AAGA,IAAI,gBAAgB,YAAY,KAAK,QAAQ,KAAK,CAAC,CAAC,GAAG;AACrD,kBAAgB,QAAQ,KAAK,MAAM,CAAC,CAAC,EAClC,KAAK,CAAC,SAAS;AACd,YAAQ,KAAK,IAAI;AAAA,EACnB,CAAC,EACA,MAAM,CAAC,QAAiB;AACvB,YAAQ,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAC9D,YAAQ,KAAK,CAAC;AAAA,EAChB,CAAC;AACL;","names":[]}

package/dist/preflight/index.d.ts

@@ -13,7 +13,7 @@
  *
  * A probe is `{ name, run, critical? }`; `run()` returns `{ ok, detail? }`.
  * The standard builders (`requiredValueProbe`, `routerChatProbe`,
- * `sandboxAuthProbe`, `httpHeadProbe`) each take explicit config — they read
+ * `sandboxAuthProbe`, `httpHeadProbe`, `slackAlertProbe`) each take explicit config — they read
  * nothing global — so the same probe runs identically in a deploy step, a test,
  * or a local check. `runPreflight` fans
  * the probes out, times each, and folds them into a pass/fail report: any
@@ -151,6 +151,39 @@ interface HttpHeadProbeConfig {
  * platform URL that still sits in the secret store.
  */
 declare function httpHeadProbe(config: HttpHeadProbeConfig): PreflightProbe;
+/** Define configuration options for probing that the Slack alerting channel is live */
+interface SlackAlertProbeConfig {
+    /** Slack bot token (`xoxb-…`). */
+    token: string | undefined;
+    /** Probe name in the report. Default `'slack-alerting'`. */
+    name?: string;
+    /**
+     * Default `false`. A dead alerting channel is a serious finding but not a
+     * reason to refuse a deploy — the deploy is often the fix for whatever the
+     * alerts were about, and blocking it would make a broken alert channel an
+     * outage of its own.
+     */
+    critical?: boolean;
+    /** Env-var name of the token, named verbatim in a dead-credential failure. */
+    keySecret?: string;
+    /** Per-probe deadline. Default 10s. */
+    timeoutMs?: number;
+    /** Injection seam for tests; defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Probe that the Slack alerting credential is alive, via `auth.test` — no
+ * message is posted.
+ *
+ * This closes the gap that hid a total alerting outage: every Slack credential
+ * the org held was revoked at once and nothing noticed, because an incoming
+ * webhook is write-only (the only way to test one is to post to it) and the
+ * secret sat in the store looking configured. A bot token can be ASKED, so a
+ * deploy can answer the question nobody was asking.
+ *
+ * Non-critical by default — see `critical`.
+ */
+declare function slackAlertProbe(config: SlackAlertProbeConfig): PreflightProbe;
 /**
  * Run every probe (concurrently), time each, and fold into a report. The run
  * fails (`ok: false`) iff a critical probe fails; a failed non-critical probe
@@ -161,4 +194,4 @@ declare function runPreflight(probes: PreflightProbe[]): Promise<PreflightReport
  *  (no I/O) so it is trivially testable and reusable by the bin. */
 declare function formatPreflightReport(report: PreflightReport): string;
 
-export { type HttpHeadProbeConfig, type PreflightProbe, type PreflightProbeResult, type PreflightProbeVerdict, type PreflightReport, type RequiredValueProbeConfig, type RouterChatProbeConfig, type SandboxAuthProbeConfig, formatPreflightReport, httpHeadProbe, requiredValueProbe, routerChatProbe, runPreflight, sandboxAuthProbe };
+export { type HttpHeadProbeConfig, type PreflightProbe, type PreflightProbeResult, type PreflightProbeVerdict, type PreflightReport, type RequiredValueProbeConfig, type RouterChatProbeConfig, type SandboxAuthProbeConfig, type SlackAlertProbeConfig, formatPreflightReport, httpHeadProbe, requiredValueProbe, routerChatProbe, runPreflight, sandboxAuthProbe, slackAlertProbe };

package/dist/preflight/index.js

@@ -4,14 +4,17 @@ import {
   requiredValueProbe,
   routerChatProbe,
   runPreflight,
-  sandboxAuthProbe
-} from "../chunk-5FAKBTCK.js";
+  sandboxAuthProbe,
+  slackAlertProbe
+} from "../chunk-XDB7IBYE.js";
+import "../chunk-COP2K4LF.js";
 export {
   formatPreflightReport,
   httpHeadProbe,
   requiredValueProbe,
   routerChatProbe,
   runPreflight,
-  sandboxAuthProbe
+  sandboxAuthProbe,
+  slackAlertProbe
 };
 //# sourceMappingURL=index.js.map

package/dist/teams/index.js

@@ -1,3 +1,8 @@
+import {
+  generateInviteToken,
+  isInviteTokenShape,
+  validateInviteToken
+} from "../chunk-DJ4VJIH5.js";
 import {
   INVITATION_EXPIRY_DAYS,
   generateInvitationToken,
@@ -7,11 +12,6 @@ import {
   parseInvitationPermission,
   renderInvitationEmail
 } from "../chunk-2DRYTJHI.js";
-import {
-  generateInviteToken,
-  isInviteTokenShape,
-  validateInviteToken
-} from "../chunk-DJ4VJIH5.js";
 import {
   ASSIGNABLE_WORKSPACE_ROLES,
   ORGANIZATION_ROLES,

package/dist/teams/invitations-api.js

@@ -1,3 +1,7 @@
+import {
+  SeatLimitError
+} from "../chunk-MEUNTJL5.js";
+import "../chunk-DJ4VJIH5.js";
 import {
   generateInvitationToken,
   getInvitationExpiresAt,
@@ -5,10 +9,6 @@ import {
   normalizeInvitationEmail,
   parseInvitationPermission
 } from "../chunk-2DRYTJHI.js";
-import {
-  SeatLimitError
-} from "../chunk-MEUNTJL5.js";
-import "../chunk-DJ4VJIH5.js";
 import {
   hasWorkspaceRole
 } from "../chunk-6XIAPIW6.js";

package/dist/web-react/index.d.ts

@@ -8,7 +8,7 @@ export { InteractionData, InteractionOutcome, InteractionRequest } from '@tangle
 import { e as ChatMentionPart, a as ChatAttachmentPart } from '../parts-BqIHMdyu.js';
 export { s as attachmentInputToPart, t as attachmentKindForMime, u as attachmentPartsFromMessageParts, x as isChatAttachmentPart, H as mentionInputToPart, I as mentionPartsFromMessageParts } from '../parts-BqIHMdyu.js';
 import { E as EvidenceEntry, g as ExceptionEntry, b as WorkProductProvenance, P as ProfileBacktestSummary, Q as QualityCheck, W as WorkProductPersistedPart, h as WorkProductStatus } from '../types-CCeYywdS.js';
-export { C as ComposerMentionProp, D as DEFAULT_MENTION_EMPTY_TEXT, a as DEFAULT_MENTION_LIMIT, I as INDEX_REFRESH_AFTER_MS, M as MentionItem, b as UseFileMentionsOptions, U as UseFileMentionsResult, r as rankFileMentions, u as useFileMentions } from '../use-file-mentions-CZ-Ua_sb.js';
+export { a as AgentSessionControls, A as AgentSessionControlsProps, C as ComposerMentionProp, D as DEFAULT_MENTION_EMPTY_TEXT, b as DEFAULT_MENTION_LIMIT, I as INDEX_REFRESH_AFTER_MS, M as MentionItem, c as UseFileMentionsOptions, U as UseFileMentionsResult, r as rankFileMentions, u as useFileMentions } from '../agent-session-controls-BwImzYKC.js';
 import { a as ChatAttachmentKind, b as ChatAttachmentInput } from '../wire-DOZ-O6hD.js';
 export { C as ChatMentionKind, e as ChatTurnFilePartInput, d as ChatTurnPartInput, c as ChatTurnRequestPayload, D as DISPATCH_MAX_MEDIA_PARTS, i as DISPATCH_MAX_PARTS, j as DISPATCH_REQUEST_MAX_BYTES, k as DISPATCH_STRUCTURAL_RESERVE_BYTES, F as FileMention, P as ProducerErrorEvent, m as ProducerNoticeEvent, n as ProducerPassthroughEvent, o as ProducerPassthroughEventType, p as ProducerReasoningEvent, q as ProducerTextEvent, r as ProducerToolCallEvent, s as ProducerToolResultEvent, t as ProducerUsageEvent, u as ProducerWireEvent, w as base64WireLen, x as buildMentionPromptBlock, y as chatTurnRequestInit, z as fileMentionsToParts, B as mediaTypeForMentionPath, E as mentionKindForPath } from '../wire-DOZ-O6hD.js';
 import { S as StepAgentActivity } from '../agent-activity-C8ZG0F0M.js';
@@ -20,9 +20,9 @@ import { i as ProductSeatOffer } from '../billing-BibxgALe.js';
 import { SessionSort, SessionPage, SessionSummary, SessionRailAction } from '../session-shell/index.js';
 import { AsyncResourceState, AsyncEmptySpec } from './async/index.js';
 import { CatalogModel } from '../catalog/index.js';
-import { Harness } from '../harness/index.js';
 export { a as ATTACHMENT_ACCEPT, e as FileIndexReadyResponse, f as FileIndexResponse, g as FileIndexWarmingResponse } from '../attachment-validation-BfJDBU1g.js';
 export { a as attachmentPartKey } from '../stream-normalizer-DKRxyVlZ.js';
+import '../harness/index.js';
 import '../billing/index.js';
 
 /** Represent durable plan decisions as either approved or rejected */
@@ -2007,34 +2007,6 @@ interface EffortPickerProps {
  *  its `chat/AgentSessionControls`) is legacy and frozen. */
 declare function EffortPicker({ value, onChange, levels, label }: EffortPickerProps): react.JSX.Element;
 
-interface AgentSessionControlsProps {
-    /** Catalog models — canonical provider-prefixed ids. */
-    models: CatalogModel[];
-    modelsLoading?: boolean;
-    /** Selected canonical model id. */
-    model: string;
-    onModelChange(modelId: string): void;
-    /** Current harness; harness↔model coherence is enforced on every change. */
-    harness: Harness;
-    onHarnessChange(harness: Harness): void;
-    /** Harnesses to offer; defaults to the labeled set. */
-    availableHarnesses?: ReadonlyArray<Harness>;
-    /** Reasoning-effort value + setter. Shown only when the selected model
-     *  `supportsReasoning`, matching `EffortPicker`'s guidance. */
-    effort: string;
-    onEffortChange(effort: string): void;
-    /**
-     * `inline` (default): model, harness, effort side by side — the prior
-     * behavior. `compact`: model inline, harness + effort behind a gear popover.
-     */
-    layout?: 'inline' | 'compact';
-    /** Hide the harness control entirely (single-harness products). */
-    showHarness?: boolean;
-    renderProviderBadge?: (provider: string) => ReactNode;
-    className?: string;
-}
-declare function AgentSessionControls(props: AgentSessionControlsProps): react.JSX.Element;
-
 /** Describe metrics related to a chat message including model, token counts, and duration */
 interface ChatMessageMetrics {
     modelUsed?: string;
@@ -2230,4 +2202,4 @@ declare function useThinkingSeconds(active: boolean): number;
  */
 declare function ChatMessages({ messages, messageSize, chrome, models, renderMarkdown, renderExtras, durableCards, userLabel, agentLabel, loading, approval, onToolCallClick, toolRenderers, error, onRetry, renderEmpty, emptyState, header, resolveAttachmentUrl, workProductCards, }: ChatMessagesProps): react.JSX.Element;
 
-export { type ActivityTone, type AgentActivityPage, AgentActivityPanel, type AgentActivityPanelProps, type AgentActivityRecord, AgentSessionControls, type AgentSessionControlsProps, type AttachmentFileResult, CatalogModel, ChatAttachmentInput, ChatAttachmentKind, ChatAttachmentPart, ChatComposer, type ChatComposerProps, type ChatEmptyDoor, ChatEmptyState, type ChatEmptyStateProps, ChatInteraction, ChatInteractionField, type ChatInteractionRestoreMode, ChatInteractionStatus, ChatMentionPart, type ChatMessageMetrics, type ChatMessageSegment, ChatMessages, type ChatMessagesProps, ChatSelectField, type ChatStreamCallbacks, type ChatStreamToolCall, type ChatStreamToolResult, type ChatToolCallInfo, type ChatUiMessage, type ComposerFile, type ComposerFilePart, type ComposerSendFailure, type ComposerSendHandler, type ComposerSendOutcome, type ComposerSendPartsHandler, type ComposerSendRejected, type ComposerSendResult, type ConsumeChatStreamResult, DEFAULT_EFFORT_LEVELS, DEFAULT_PROVENANCE_CONFIDENCE_POLICY, type DurableChatCard, DurableChatCards, type DurableChatCardsProps, type DurableInteractionAnswerSubmitterOptions, DurablePlanCard, type DurablePlanCardProps, DurablePlanClientError, type DurablePlanCurrentInput, type DurablePlanDecision, type DurablePlanDecisionClient, type DurablePlanDecisionClientOptions, type DurablePlanDecisionInput, type DurablePlanDecisionResult, type DurablePlanFollowUpReceipt, EMPTY_RECORD_GRID_OVERLAY, type EffortLevel, EffortPicker, type EffortPickerProps, EvidenceLineageTable, type EvidenceLineageTableProps, ExceptionList, type ExceptionListProps, type FetchSessionPage, type FieldValues, FlowWaterfall, type FlowWaterfallProps, INTERACTION_SUBMIT_TIMEOUT_MESSAGE, INTERACTION_SUBMIT_TIMEOUT_MS, InteractionActionButton, type InteractionAnswerSubmission, type InteractionAnswerSubmitterOptions, InteractionAnswers, type InteractionAttemptStore, InteractionBadge, type InteractionBadgeVariant, InteractionCancelData, InteractionPlanCard, type InteractionPlanCardProps, InteractionQuestionCard, type InteractionQuestionCardProps, InteractionRequestWire, type InteractionSubmitResult, type LinkLikeComponent, type LinkLikeProps, type MentionTextSegment, MessageAttachments, type MessageAttachmentsProps, MissionActivityLane, type MissionActivityLaneProps, ModelPicker, type ModelPickerProps, PROVENANCE_BASES, type ProposalApprovalHandlers, type ProvenanceBasis, type ProvenanceBasisMeta, type ProvenanceConfidencePolicy, type ProvenanceGap, type ProvenanceGapKind, ProvenanceLegend, type ProvenanceLegendProps, type ProvenanceRecord, type ProvenanceSource, type ProvenanceSourceStatus, ProvenanceStamp, type ProvenanceStampProps, type ProvenanceStanding, type ProvenanceStandingMeta, ProvenanceValue, type ProvenanceValueProps, ProviderLogo, type ProviderLogoProps, QualityCheckList, type QualityCheckListProps, QuestionOptionList, type QuestionOptionListProps, RecordGrid, type RecordGridBooleanColumn, type RecordGridCellChange, type RecordGridCellOutcome, type RecordGridCellSource, type RecordGridColumn, type RecordGridColumnBase, type RecordGridCreateOutcome, type RecordGridCurrencyColumn, type RecordGridDateColumn, type RecordGridDependency, type RecordGridNumberColumn, type RecordGridOverlay, type RecordGridProps, type RecordGridRow, type RecordGridRowOutcome, type RecordGridSelectColumn, type RecordGridSelectOption, type RecordGridSourceBasis, type RecordGridTextColumn, type RecordGridValue, type RecordGridWriteOutcome, type RestoreChatInteractionsOptions, ReviewQueueItem, type ReviewQueuePage, ReviewQueuePanel, type ReviewQueuePanelProps, ReviewQueueState, RunDrillIn, type RunDrillInProps, SeatPaywall, type SeatPaywallProps, type SessionActionLabels, type SessionActions, type SessionActionsOptions, type SessionBulkAction, SessionHistoryPanel, type SessionHistoryPanelProps, type SessionHistoryState, type SessionPageQuery, type SmoothRevealOptions, type StreamChatOptions, type SubmitInteractionAnswer, type ToolDetailRenderers, type ToolRunRecord, type ToolRunStep, type UseChatInteractionsOptions, type UseChatInteractionsResult, type UseComposerAttachmentsOptions, type UseComposerAttachmentsResult, type UseDurablePlanFlowOptions, type UseDurablePlanFlowResult, type UseInfiniteScrollOptions, type UseSessionHistoryOptions, type WaterfallRow, WorkProductCard, type WorkProductCardProps, __resetAttachmentFileCacheForTests, activityTone, buildAnswerData, cancelChatInteraction, consumeChatStream, createDurableInteractionAnswerSubmitter, createDurablePlanDecisionClient, createInteractionAnswerSubmitter, createMemoryInteractionAttemptStore, createSessionInteractionAttemptStore, describeProvenance, describeProvenanceSourceStatus, dispatchChatStreamLine, durableChatCardsFromParts, fieldAnswer, fieldValuesFromAnswers, formatActivityCost, formatActivityDuration, formatModelCost, formatRecordGridValue, formatSessionTimestamp, formatTokensPerSecond, hasSecretField, hydrateChatInteractions, interactionStatusLabels, interactionSubmissionSignature, interactionTerminalNotes, isLateAnswerableStatus, isRecordGridCellApplicable, lateAnswerMessage, loadAttachmentFile, loadingProvenanceSources, mergeActivityPages, mergeReviewQueuePages, nextRevealCount, parseRecordGridInput, pendingApprovalOf, projectRecordGridRows, provenanceBasisMeta, provenanceGaps, provenanceNextMove, provenanceStandingMeta, provenanceTriggerLabel, pruneRecordGridOverlay, readRecordGridCell, recordGridEditorText, recordGridFail, recordGridOk, recordGridRowLabel, resolveChatInteraction, resolveProvenanceStanding, responseErrorMessage, restoreChatInteractions, reviewQueueStateLabel, rollUpProvenanceStanding, sameRecordGridValue, segmentMentionContent, settleInteractionSubmit, standingFromConfidence, streamChatTurn, sumRecordGridColumn, terminalizePendingChatInteractions, triggerAttachmentDownload, upsertChatInteraction, useChatInteractions, useComposerAttachments, useDurablePlanFlow, useInfiniteScroll, usePending, usePopover, useSessionActions, useSessionHistory, useSmoothText, useThinkingSeconds, validateRecordGridCell, validateRecordGridRow, waterfallLayout, weakerProvenanceStanding, withRecordGridCreated, withRecordGridRemoved, withRecordGridServerRow, withRecordGridUpdate, withoutRecordGridCreated, withoutRecordGridRemoved, withoutRecordGridUpdate, workProductPartsFromMessageParts, workProductStatusLabel };
+export { type ActivityTone, type AgentActivityPage, AgentActivityPanel, type AgentActivityPanelProps, type AgentActivityRecord, type AttachmentFileResult, CatalogModel, ChatAttachmentInput, ChatAttachmentKind, ChatAttachmentPart, ChatComposer, type ChatComposerProps, type ChatEmptyDoor, ChatEmptyState, type ChatEmptyStateProps, ChatInteraction, ChatInteractionField, type ChatInteractionRestoreMode, ChatInteractionStatus, ChatMentionPart, type ChatMessageMetrics, type ChatMessageSegment, ChatMessages, type ChatMessagesProps, ChatSelectField, type ChatStreamCallbacks, type ChatStreamToolCall, type ChatStreamToolResult, type ChatToolCallInfo, type ChatUiMessage, type ComposerFile, type ComposerFilePart, type ComposerSendFailure, type ComposerSendHandler, type ComposerSendOutcome, type ComposerSendPartsHandler, type ComposerSendRejected, type ComposerSendResult, type ConsumeChatStreamResult, DEFAULT_EFFORT_LEVELS, DEFAULT_PROVENANCE_CONFIDENCE_POLICY, type DurableChatCard, DurableChatCards, type DurableChatCardsProps, type DurableInteractionAnswerSubmitterOptions, DurablePlanCard, type DurablePlanCardProps, DurablePlanClientError, type DurablePlanCurrentInput, type DurablePlanDecision, type DurablePlanDecisionClient, type DurablePlanDecisionClientOptions, type DurablePlanDecisionInput, type DurablePlanDecisionResult, type DurablePlanFollowUpReceipt, EMPTY_RECORD_GRID_OVERLAY, type EffortLevel, EffortPicker, type EffortPickerProps, EvidenceLineageTable, type EvidenceLineageTableProps, ExceptionList, type ExceptionListProps, type FetchSessionPage, type FieldValues, FlowWaterfall, type FlowWaterfallProps, INTERACTION_SUBMIT_TIMEOUT_MESSAGE, INTERACTION_SUBMIT_TIMEOUT_MS, InteractionActionButton, type InteractionAnswerSubmission, type InteractionAnswerSubmitterOptions, InteractionAnswers, type InteractionAttemptStore, InteractionBadge, type InteractionBadgeVariant, InteractionCancelData, InteractionPlanCard, type InteractionPlanCardProps, InteractionQuestionCard, type InteractionQuestionCardProps, InteractionRequestWire, type InteractionSubmitResult, type LinkLikeComponent, type LinkLikeProps, type MentionTextSegment, MessageAttachments, type MessageAttachmentsProps, MissionActivityLane, type MissionActivityLaneProps, ModelPicker, type ModelPickerProps, PROVENANCE_BASES, type ProposalApprovalHandlers, type ProvenanceBasis, type ProvenanceBasisMeta, type ProvenanceConfidencePolicy, type ProvenanceGap, type ProvenanceGapKind, ProvenanceLegend, type ProvenanceLegendProps, type ProvenanceRecord, type ProvenanceSource, type ProvenanceSourceStatus, ProvenanceStamp, type ProvenanceStampProps, type ProvenanceStanding, type ProvenanceStandingMeta, ProvenanceValue, type ProvenanceValueProps, ProviderLogo, type ProviderLogoProps, QualityCheckList, type QualityCheckListProps, QuestionOptionList, type QuestionOptionListProps, RecordGrid, type RecordGridBooleanColumn, type RecordGridCellChange, type RecordGridCellOutcome, type RecordGridCellSource, type RecordGridColumn, type RecordGridColumnBase, type RecordGridCreateOutcome, type RecordGridCurrencyColumn, type RecordGridDateColumn, type RecordGridDependency, type RecordGridNumberColumn, type RecordGridOverlay, type RecordGridProps, type RecordGridRow, type RecordGridRowOutcome, type RecordGridSelectColumn, type RecordGridSelectOption, type RecordGridSourceBasis, type RecordGridTextColumn, type RecordGridValue, type RecordGridWriteOutcome, type RestoreChatInteractionsOptions, ReviewQueueItem, type ReviewQueuePage, ReviewQueuePanel, type ReviewQueuePanelProps, ReviewQueueState, RunDrillIn, type RunDrillInProps, SeatPaywall, type SeatPaywallProps, type SessionActionLabels, type SessionActions, type SessionActionsOptions, type SessionBulkAction, SessionHistoryPanel, type SessionHistoryPanelProps, type SessionHistoryState, type SessionPageQuery, type SmoothRevealOptions, type StreamChatOptions, type SubmitInteractionAnswer, type ToolDetailRenderers, type ToolRunRecord, type ToolRunStep, type UseChatInteractionsOptions, type UseChatInteractionsResult, type UseComposerAttachmentsOptions, type UseComposerAttachmentsResult, type UseDurablePlanFlowOptions, type UseDurablePlanFlowResult, type UseInfiniteScrollOptions, type UseSessionHistoryOptions, type WaterfallRow, WorkProductCard, type WorkProductCardProps, __resetAttachmentFileCacheForTests, activityTone, buildAnswerData, cancelChatInteraction, consumeChatStream, createDurableInteractionAnswerSubmitter, createDurablePlanDecisionClient, createInteractionAnswerSubmitter, createMemoryInteractionAttemptStore, createSessionInteractionAttemptStore, describeProvenance, describeProvenanceSourceStatus, dispatchChatStreamLine, durableChatCardsFromParts, fieldAnswer, fieldValuesFromAnswers, formatActivityCost, formatActivityDuration, formatModelCost, formatRecordGridValue, formatSessionTimestamp, formatTokensPerSecond, hasSecretField, hydrateChatInteractions, interactionStatusLabels, interactionSubmissionSignature, interactionTerminalNotes, isLateAnswerableStatus, isRecordGridCellApplicable, lateAnswerMessage, loadAttachmentFile, loadingProvenanceSources, mergeActivityPages, mergeReviewQueuePages, nextRevealCount, parseRecordGridInput, pendingApprovalOf, projectRecordGridRows, provenanceBasisMeta, provenanceGaps, provenanceNextMove, provenanceStandingMeta, provenanceTriggerLabel, pruneRecordGridOverlay, readRecordGridCell, recordGridEditorText, recordGridFail, recordGridOk, recordGridRowLabel, resolveChatInteraction, resolveProvenanceStanding, responseErrorMessage, restoreChatInteractions, reviewQueueStateLabel, rollUpProvenanceStanding, sameRecordGridValue, segmentMentionContent, settleInteractionSubmit, standingFromConfidence, streamChatTurn, sumRecordGridColumn, terminalizePendingChatInteractions, triggerAttachmentDownload, upsertChatInteraction, useChatInteractions, useComposerAttachments, useDurablePlanFlow, useInfiniteScroll, usePending, usePopover, useSessionActions, useSessionHistory, useSmoothText, useThinkingSeconds, validateRecordGridCell, validateRecordGridRow, waterfallLayout, weakerProvenanceStanding, withRecordGridCreated, withRecordGridRemoved, withRecordGridServerRow, withRecordGridUpdate, withoutRecordGridCreated, withoutRecordGridRemoved, withoutRecordGridUpdate, workProductPartsFromMessageParts, workProductStatusLabel };

package/dist/web-react/index.js

@@ -1,10 +1,8 @@
 import {
   AgentActivityPanel,
-  AgentSessionControls,
   ChatComposer,
   ChatEmptyState,
   ChatMessages,
-  DEFAULT_EFFORT_LEVELS,
   DEFAULT_MENTION_EMPTY_TEXT,
   DEFAULT_MENTION_LIMIT,
   DEFAULT_PROVENANCE_CONFIDENCE_POLICY,
@@ -12,7 +10,6 @@ import {
   DurablePlanCard,
   DurablePlanClientError,
   EMPTY_RECORD_GRID_OVERLAY,
-  EffortPicker,
   FlowWaterfall,
   INDEX_REFRESH_AFTER_MS,
   INTERACTION_SUBMIT_TIMEOUT_MESSAGE,
@@ -23,11 +20,9 @@ import {
   InteractionQuestionCard,
   MessageAttachments,
   MissionActivityLane,
-  ModelPicker,
   PROVENANCE_BASES,
   ProvenanceLegend,
   ProvenanceValue,
-  ProviderLogo,
   QuestionOptionList,
   RecordGrid,
   RunDrillIn,
@@ -100,8 +95,6 @@ import {
   useDurablePlanFlow,
   useFileMentions,
   useInfiniteScroll,
-  usePending,
-  usePopover,
   useSessionActions,
   useSessionHistory,
   useSmoothText,
@@ -117,7 +110,7 @@ import {
   withoutRecordGridCreated,
   withoutRecordGridRemoved,
   withoutRecordGridUpdate
-} from "../chunk-3I27SDU3.js";
+} from "../chunk-IFYJDX3J.js";
 import "../chunk-FBVLEGEG.js";
 import {
   EvidenceLineageTable,
@@ -135,8 +128,15 @@ import {
   parseReviewQueueItem
 } from "../chunk-GEYACSFW.js";
 import {
-  useComposerAttachments
-} from "../chunk-E4DHYENH.js";
+  AgentSessionControls,
+  DEFAULT_EFFORT_LEVELS,
+  EffortPicker,
+  ModelPicker,
+  ProviderLogo,
+  useComposerAttachments,
+  usePending,
+  usePopover
+} from "../chunk-L7FHRORY.js";
 import {
   tabTerminalConnectionId,
   useSandboxTerminalConnection