@tangle-network/agent-app 0.60.195 → 0.60.197

package/dist/workspace-apps/cloud-artifact-origin.d.ts

@@ -0,0 +1,94 @@
+/**
+ * The artifact origin: the only place cloud artifact HTML and scripts run.
+ *
+ * Mount it on a host of its own on a different site from the product (for
+ * GTM, `gtm-artifacts.tangle.sh` against `gtm.tangle.tools`), so a page an
+ * agent wrote never shares cookies, storage or same-site requests with a
+ * signed-in product session. Every response also carries a CSP `sandbox`
+ * without `allow-same-origin`, so each document runs in an opaque origin and
+ * one artifact cannot read another's storage.
+ *
+ * A request names `/<artifactId>/<grant>/<token>/<path>`. The token is a
+ * short-lived capability minted by the product after it authorized the viewer;
+ * `resolve` returns the record only while that grant is still live, so a
+ * revoked share stops serving on its next request.
+ *
+ * Files are streamed from the object store. For a `worker` artifact, a request
+ * that matches no file runs `_worker.js` in a Worker Loader isolate with
+ * `globalOutbound: null` (no network), CPU and subrequest limits, and only the
+ * bindings `workerEnv` grants. Its response headers are replaced with this
+ * origin's, so the isolate cannot loosen them.
+ */
+import type { ObjectStore } from '../object-store';
+import { type CloudArtifactGrant, type CloudArtifactRecord } from './cloud-artifacts';
+/** Script and style CDNs a generated page may load. Everything else is local or inline. */
+export declare const CLOUD_ARTIFACT_SCRIPT_HOSTS: readonly ['https://cdn.jsdelivr.net', 'https://cdnjs.cloudflare.com', 'https://unpkg.com'];
+/** The iframe sandbox for an artifact frame; never add `allow-same-origin`. */
+export declare const CLOUD_ARTIFACT_FRAME_SANDBOX = "allow-scripts allow-forms allow-popups allow-popups-to-escape-sandbox allow-modals allow-downloads";
+/** The Content-Security-Policy every artifact response carries. */
+export declare function cloudArtifactContentSecurityPolicy(input: {
+    origin: string;
+    frameAncestors: readonly string[];
+}): string;
+/** The code shape Worker Loader's `get` callback returns (Cloudflare `WorkerCode`). */
+export interface CloudArtifactWorkerCode {
+    compatibilityDate: string;
+    compatibilityFlags?: string[];
+    mainModule: string;
+    modules: Record<string, string | {
+        js: string;
+    } | {
+        json: unknown;
+    } | {
+        text: string;
+    }>;
+    env?: Record<string, unknown>;
+    globalOutbound: null;
+    limits?: {
+        cpuMs?: number;
+        subRequests?: number;
+    };
+}
+/** Structural `env.LOADER` (a `worker_loaders` binding), so workers-types stays out of the public types. */
+export interface CloudArtifactWorkerLoader {
+    get(id: string, load: () => Promise<CloudArtifactWorkerCode>): {
+        getEntrypoint(name?: string | null, options?: {
+            limits?: {
+                cpuMs?: number;
+                subRequests?: number;
+            };
+        }): {
+            fetch(request: Request): Promise<Response>;
+        };
+    };
+}
+export interface CloudArtifactOriginOptions {
+    /** This origin, such as `https://gtm-artifacts.tangle.sh`. Requests for another host get 404. */
+    origin: string;
+    /** Product origins allowed to frame an artifact (CSP `frame-ancestors`). */
+    frameAncestors: readonly string[];
+    /** The secret the product signs view links with. */
+    secret: string;
+    store: ObjectStore;
+    /**
+     * The artifact's current record for a verified link, or null when it no
+     * longer exists or the grant is no longer live (a revoked share).
+     */
+    resolve(view: {
+        artifactId: string;
+        grant: CloudArtifactGrant;
+    }): Promise<CloudArtifactRecord | null>;
+    /** The `worker_loaders` binding. Without it a `worker` artifact serves only its files. */
+    loader?: CloudArtifactWorkerLoader;
+    /** Bindings granted to a `worker` artifact's isolate; nothing else reaches it. */
+    workerEnv?(record: CloudArtifactRecord, grant: CloudArtifactGrant): Record<string, unknown>;
+    workerLimits?: {
+        cpuMs: number;
+        subRequests: number;
+    };
+    /** Compatibility date for isolates. */
+    workerCompatibilityDate?: string;
+    now?: () => number;
+}
+/** Serve cloud artifacts on their own origin. */
+export declare function createCloudArtifactOrigin(options: CloudArtifactOriginOptions): (request: Request) => Promise<Response>;

package/dist/workspace-apps/cloud-artifacts.d.ts

@@ -0,0 +1,135 @@
+import type { ObjectStore } from '../object-store';
+import type { WorkspaceRole } from '../teams/roles';
+export type CloudArtifactKind = 'static' | 'worker' | 'openui';
+/** One stored file of a version. Bytes live at {@link cloudArtifactObjectKey}. */
+export interface CloudArtifactFile {
+    /** Relative to the bundle root, such as `index.html` or `images/hero.png`. */
+    path: string;
+    contentType: string;
+    size: number;
+    /** Hex SHA-256 of the bytes; identical files share one stored object. */
+    sha256: string;
+}
+/** An immutable snapshot. Its id changes when any path, type or byte changes. */
+export interface CloudArtifactVersion {
+    id: string;
+    kind: CloudArtifactKind;
+    /** The file a link opens: HTML for `static` and `worker`, JSON for `openui`. */
+    entry: string;
+    files: CloudArtifactFile[];
+    createdAt: string;
+}
+/** What the origin needs from the product's record. Products persist more. */
+export interface CloudArtifactRecord {
+    id: string;
+    workspaceId: string;
+    title: string;
+    version: CloudArtifactVersion;
+}
+/** Who a view link was minted for: a workspace member, or a public share. */
+export type CloudArtifactGrant = {
+    type: 'member';
+} | {
+    type: 'share';
+    shareId: string;
+};
+/** Opening an artifact needs `viewer`; creating or revoking a public link needs this role. */
+export declare const CLOUD_ARTIFACT_SHARE_ROLE: WorkspaceRole;
+/** The module a `worker` bundle runs, at the bundle root (the Cloudflare Pages name). */
+export declare const CLOUD_ARTIFACT_WORKER_MODULE = "_worker.js";
+export declare const CLOUD_ARTIFACT_MAX_FILES = 200;
+export declare const CLOUD_ARTIFACT_MAX_FILE_BYTES: number;
+export declare const CLOUD_ARTIFACT_MAX_BYTES: number;
+/** Member view links are re-minted on every page load, so they can be short. */
+export declare const CLOUD_ARTIFACT_VIEW_TTL_MS: number;
+export type CloudArtifactErrorCode = 'invalid_path' | 'duplicate_path' | 'unsupported_type' | 'too_large' | 'too_many_files' | 'missing_entry' | 'invalid_entry';
+export declare class CloudArtifactError extends Error {
+    readonly code: CloudArtifactErrorCode;
+    constructor(code: CloudArtifactErrorCode, message: string);
+}
+/** The served type for a path, or null when cloud artifacts do not serve it. */
+export declare function cloudArtifactContentType(path: string): string | null;
+/** A bundle path: relative, no `.` or `..` segments, no control or URL-special characters. */
+export declare function isCloudArtifactPath(path: string): boolean;
+export interface CloudArtifactInputFile {
+    path: string;
+    body: Uint8Array | string;
+}
+export interface PreparedCloudArtifact {
+    version: CloudArtifactVersion;
+    /** Bytes to store, by SHA-256. Carried files are already stored and absent here. */
+    bodies: ReadonlyMap<string, Uint8Array>;
+}
+/**
+ * Validate and hash a bundle. `carry` keeps files of an earlier version that
+ * the new source could not supply, such as images that existed only on a box
+ * that has since been recycled; their bytes are already stored.
+ */
+export declare function prepareCloudArtifact(input: {
+    files: readonly CloudArtifactInputFile[];
+    entry: string;
+    /** Set for a declarative OpenUI view; otherwise `_worker.js` makes it `worker`. */
+    openui?: boolean;
+    carry?: readonly CloudArtifactFile[];
+    createdAt?: string;
+}): Promise<PreparedCloudArtifact>;
+/** Content-addressed per workspace, so erasing a workspace deletes one prefix. */
+export declare function cloudArtifactObjectKey(workspaceId: string, sha256Hex: string): string;
+/** The prefix holding every stored byte of a workspace's artifacts. */
+export declare function cloudArtifactWorkspacePrefix(workspaceId: string): string;
+/** Store a prepared version's new bytes; objects already present are not rewritten. */
+export declare function storeCloudArtifact(store: ObjectStore, workspaceId: string, prepared: PreparedCloudArtifact): Promise<CloudArtifactVersion>;
+/** Resolve a document-relative reference to a bundle path, or null when it is not a local file. */
+export declare function resolveCloudArtifactReference(reference: string, documentPath: string): string | null;
+/** Local files an HTML, CSS or JavaScript document refers to, as bundle paths. */
+export declare function cloudArtifactReferences(text: string, documentPath: string): string[];
+/**
+ * Gather an entry and every local file it refers to, transitively, plus
+ * `_worker.js` and its imports when the root has one. `readMany` returns the
+ * bytes of the paths it found (paths are bundle-relative); missing files are
+ * reported, not fatal, so a page with one broken image still publishes.
+ */
+export declare function collectCloudArtifactBundle(input: {
+    entry: string;
+    readMany(paths: readonly string[]): Promise<ReadonlyMap<string, Uint8Array>>;
+    maxFiles?: number;
+    maxBytes?: number;
+}): Promise<{
+    files: CloudArtifactInputFile[];
+    missing: string[];
+}>;
+/** A random 32-hex id for an artifact or a share. */
+export declare function createCloudArtifactId(): string;
+/**
+ * A short-lived URL on the artifact origin for one artifact and one grant.
+ * Every file of the bundle sits under the same prefix, so relative links work.
+ * The product mints it only after it has authorized the viewer.
+ */
+export declare function createCloudArtifactViewUrl(input: {
+    origin: string;
+    secret: string;
+    artifactId: string;
+    grant: CloudArtifactGrant;
+    path: string;
+    ttlMs?: number;
+    now?: () => number;
+}): Promise<string>;
+export interface CloudArtifactView {
+    artifactId: string;
+    grant: CloudArtifactGrant;
+    /** Decoded bundle path; empty when the URL names the root. */
+    path: string;
+}
+/** Read and verify a view URL on the artifact origin; null for anything forged, expired or malformed. */
+export declare function readCloudArtifactViewUrl(url: URL, options: {
+    secret: string;
+    now?: () => number;
+}): Promise<CloudArtifactView | null>;
+/**
+ * The secret part of a public link: `<shareId>.<HMAC>`. It is derived, so the
+ * product stores only the share id and can show the link again; revoking the
+ * share row turns the link off at once.
+ */
+export declare function createCloudArtifactShareToken(shareId: string, secret: string): Promise<string>;
+/** The share id a public link names, or null when its signature does not verify. */
+export declare function readCloudArtifactShareToken(token: string, secret: string): Promise<string | null>;

package/dist/workspace-apps/index.d.ts

@@ -72,3 +72,7 @@ export type WorkspaceAppBuilderInstructionsOptions = {
 export declare function workspaceAppBuilderInstructions(options: WorkspaceAppBuilderInstructionsOptions): string[];
 export { WorkspaceAppDataConflict, createWorkspaceAppDataClient, createWorkspaceAppDataHost, } from './data-bridge';
 export type { WorkspaceAppDataClient, WorkspaceAppDataClientOptions, WorkspaceAppDataEntry, WorkspaceAppDataHost, WorkspaceAppDataHostOptions, } from './data-bridge';
+export { CLOUD_ARTIFACT_MAX_BYTES, CLOUD_ARTIFACT_MAX_FILES, CLOUD_ARTIFACT_MAX_FILE_BYTES, CLOUD_ARTIFACT_SHARE_ROLE, CLOUD_ARTIFACT_VIEW_TTL_MS, CLOUD_ARTIFACT_WORKER_MODULE, CloudArtifactError, cloudArtifactContentType, cloudArtifactObjectKey, cloudArtifactReferences, cloudArtifactWorkspacePrefix, collectCloudArtifactBundle, createCloudArtifactId, createCloudArtifactShareToken, createCloudArtifactViewUrl, isCloudArtifactPath, prepareCloudArtifact, readCloudArtifactShareToken, readCloudArtifactViewUrl, resolveCloudArtifactReference, storeCloudArtifact, } from './cloud-artifacts';
+export type { CloudArtifactErrorCode, CloudArtifactFile, CloudArtifactGrant, CloudArtifactInputFile, CloudArtifactKind, CloudArtifactRecord, CloudArtifactVersion, CloudArtifactView, PreparedCloudArtifact, } from './cloud-artifacts';
+export { CLOUD_ARTIFACT_FRAME_SANDBOX, CLOUD_ARTIFACT_SCRIPT_HOSTS, cloudArtifactContentSecurityPolicy, createCloudArtifactOrigin, } from './cloud-artifact-origin';
+export type { CloudArtifactOriginOptions, CloudArtifactWorkerCode, CloudArtifactWorkerLoader, } from './cloud-artifact-origin';

package/dist/workspace-apps/index.js

@@ -1,3 +1,33 @@
+import {
+  CLOUD_ARTIFACT_FRAME_SANDBOX,
+  CLOUD_ARTIFACT_MAX_BYTES,
+  CLOUD_ARTIFACT_MAX_FILES,
+  CLOUD_ARTIFACT_MAX_FILE_BYTES,
+  CLOUD_ARTIFACT_SCRIPT_HOSTS,
+  CLOUD_ARTIFACT_SHARE_ROLE,
+  CLOUD_ARTIFACT_VIEW_TTL_MS,
+  CLOUD_ARTIFACT_WORKER_MODULE,
+  CloudArtifactError,
+  cloudArtifactContentSecurityPolicy,
+  cloudArtifactContentType,
+  cloudArtifactObjectKey,
+  cloudArtifactReferences,
+  cloudArtifactWorkspacePrefix,
+  collectCloudArtifactBundle,
+  createCloudArtifactId,
+  createCloudArtifactOrigin,
+  createCloudArtifactShareToken,
+  createCloudArtifactViewUrl,
+  isCloudArtifactPath,
+  prepareCloudArtifact,
+  readCloudArtifactShareToken,
+  readCloudArtifactViewUrl,
+  resolveCloudArtifactReference,
+  storeCloudArtifact
+} from "../chunk-7WEPGGOW.js";
+import "../chunk-O7UX55EU.js";
+import "../chunk-S5SRJJQG.js";
+
 // src/workspace-apps/data-bridge.ts
 var protocol = "tangle.workspace-app-data.v1";
 var maxBytes = 65536;
@@ -310,11 +340,36 @@ function workspaceAppBuilderInstructions(options) {
   ];
 }
 export {
+  CLOUD_ARTIFACT_FRAME_SANDBOX,
+  CLOUD_ARTIFACT_MAX_BYTES,
+  CLOUD_ARTIFACT_MAX_FILES,
+  CLOUD_ARTIFACT_MAX_FILE_BYTES,
+  CLOUD_ARTIFACT_SCRIPT_HOSTS,
+  CLOUD_ARTIFACT_SHARE_ROLE,
+  CLOUD_ARTIFACT_VIEW_TTL_MS,
+  CLOUD_ARTIFACT_WORKER_MODULE,
+  CloudArtifactError,
   WorkspaceAppDataConflict,
+  cloudArtifactContentSecurityPolicy,
+  cloudArtifactContentType,
+  cloudArtifactObjectKey,
+  cloudArtifactReferences,
+  cloudArtifactWorkspacePrefix,
+  collectCloudArtifactBundle,
   confirmWorkspaceAppReady,
+  createCloudArtifactId,
+  createCloudArtifactOrigin,
+  createCloudArtifactShareToken,
+  createCloudArtifactViewUrl,
   createWorkspaceAppDataClient,
   createWorkspaceAppDataHost,
+  isCloudArtifactPath,
+  prepareCloudArtifact,
+  readCloudArtifactShareToken,
+  readCloudArtifactViewUrl,
   refreshWorkspaceAppPreview,
+  resolveCloudArtifactReference,
+  storeCloudArtifact,
   workspaceAppBuilderInstructions,
   workspaceAppFromPreviewLink
 };

package/dist/workspace-apps/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/workspace-apps/data-bridge.ts","../../src/workspace-apps/index.ts"],"sourcesContent":["import type { WorkspaceAppRecord } from './index'\n\nconst protocol = 'tangle.workspace-app-data.v1'\nconst maxBytes = 65_536\nconst maxPending = 16\nconst keyPattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/\nconst idPattern = /^[A-Za-z0-9_-]{1,80}$/\n\nexport interface WorkspaceAppDataEntry { value: string; revision: number }\nexport class WorkspaceAppDataConflict extends Error {\n  constructor() {\n    super('Workspace app data changed. Read it again before saving.')\n    this.name = 'WorkspaceAppDataConflict'\n  }\n}\nexport interface WorkspaceAppDataHostOptions {\n  /** Product-authorized registration for the current viewer. */\n  app: Pick<WorkspaceAppRecord, 'id' | 'previewUrl' | 'status'>\n  frame: HTMLIFrameElement\n  /** Product callbacks are bound to the authorized business and app namespace. */\n  read(key: string): Promise<WorkspaceAppDataEntry | null>\n  /** Null creates only if absent; a revision updates only that version. */\n  write(key: string, value: string, expectedRevision: number | null): Promise<{ revision: number }>\n  remove(key: string, expectedRevision: number): Promise<void>\n}\nexport interface WorkspaceAppDataHost { dispose(): void }\nexport interface WorkspaceAppDataClientOptions {\n  appId: string\n  /** Exact authenticated product origin, provided by the product. */\n  parentOrigin: string\n}\nexport interface WorkspaceAppDataClient {\n  ready(): Promise<void>\n  read(key: string): Promise<WorkspaceAppDataEntry | null>\n  write(key: string, value: string, expectedRevision: number | null): Promise<{ revision: number }>\n  remove(key: string, expectedRevision: number): Promise<void>\n  dispose(): void\n}\n\ntype Action = 'ready' | 'read' | 'write' | 'remove'\ntype Packet = {\n  protocol: typeof protocol\n  appId: string\n  requestId: string\n  action: Action\n  key?: string\n  value?: string\n  expectedRevision?: number | null\n  ok?: boolean\n  entry?: WorkspaceAppDataEntry | null\n  revision?: number\n  error?: 'invalid' | 'conflict' | 'unavailable'\n}\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\nfunction key(value: unknown): value is string {\n  return typeof value === 'string' && keyPattern.test(value) && value !== '.' && value !== '..'\n}\nfunction revision(value: unknown): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value > 0\n}\nfunction bounded(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= maxBytes && new TextEncoder().encode(value).byteLength <= maxBytes\n}\nfunction appId(value: string): string {\n  if (!idPattern.test(value)) throw new Error('Invalid workspace app ID')\n  return value\n}\nfunction origin(value: string): string {\n  const url = new URL(value)\n  if (url.origin !== value || (url.protocol !== 'https:' &&\n    !(url.protocol === 'http:' && ['localhost', '127.0.0.1'].includes(url.hostname)))) {\n    throw new Error('Invalid workspace app data origin')\n  }\n  return url.origin\n}\nfunction packet(value: unknown): value is Packet {\n  return object(value) && value.protocol === protocol &&\n    typeof value.appId === 'string' && typeof value.requestId === 'string' &&\n    /^[A-Za-z0-9_-]{1,64}$/.test(value.requestId) &&\n    typeof value.action === 'string' && ['ready', 'read', 'write', 'remove'].includes(value.action)\n}\n\n/** Bind one registered preview to a product-authorized data adapter. */\nexport function createWorkspaceAppDataHost(options: WorkspaceAppDataHostOptions): WorkspaceAppDataHost {\n  const { app, frame } = options\n  appId(app.id)\n  if (app.status !== 'ready') throw new Error('Workspace app is not ready')\n  const preview = new URL(app.previewUrl)\n  const previewOrigin = origin(preview.origin)\n  if (preview.protocol !== 'https:' || preview.username || preview.password || preview.search || preview.hash ||\n    new URL(frame.src).href !== preview.href) {\n    throw new Error('Iframe does not render the registered workspace app preview')\n  }\n  let closed = false\n  let active = 0\n  let messagesLeft = 64\n  let nextWindow = Date.now() + 1000\n  const onMessage = (event: MessageEvent<unknown>): void => {\n    if (closed || event.source !== frame.contentWindow || event.origin !== previewOrigin ||\n      !packet(event.data) || event.data.appId !== app.id) return\n    const now = Date.now()\n    if (now >= nextWindow) { messagesLeft = 64; nextWindow = now + 1000 }\n    if (messagesLeft-- <= 0) return\n    const message = event.data\n    const reply = (result: Pick<Packet, 'ok' | 'entry' | 'revision' | 'error'>): void => {\n      if (closed || event.source !== frame.contentWindow) return\n      frame.contentWindow?.postMessage({\n        protocol, appId: app.id, requestId: message.requestId, action: message.action, ...result,\n      } satisfies Packet, previewOrigin)\n    }\n    if (message.action === 'ready') { reply({ ok: true }); return }\n    if (!key(message.key) ||\n      (message.action === 'write' && (!bounded(message.value) ||\n        !(message.expectedRevision === null || revision(message.expectedRevision)))) ||\n      (message.action === 'remove' && !revision(message.expectedRevision))) {\n      reply({ ok: false, error: 'invalid' }); return\n    }\n    if (active >= maxPending) { reply({ ok: false, error: 'unavailable' }); return }\n    active += 1\n    const checkedKey = message.key\n    void (async () => {\n      try {\n        if (message.action === 'read') {\n          const entry = await options.read(checkedKey)\n          if (entry !== null && (!bounded(entry.value) || !revision(entry.revision))) throw new Error('Invalid entry')\n          reply({ ok: true, entry })\n        } else if (message.action === 'write') {\n          const result = await options.write(checkedKey, message.value as string, message.expectedRevision as number | null)\n          if (!revision(result.revision)) throw new Error('Invalid revision')\n          reply({ ok: true, revision: result.revision })\n        } else {\n          await options.remove(checkedKey, message.expectedRevision as number)\n          reply({ ok: true })\n        }\n      } catch (error) {\n        reply({ ok: false, error: error instanceof WorkspaceAppDataConflict ? 'conflict' : 'unavailable' })\n      } finally { active -= 1 }\n    })()\n  }\n  window.addEventListener('message', onMessage)\n  return { dispose() { closed = true; window.removeEventListener('message', onMessage) } }\n}\n\n/** Use inside a registered preview; no product credential crosses the frame. */\nexport function createWorkspaceAppDataClient(options: WorkspaceAppDataClientOptions): WorkspaceAppDataClient {\n  const id = appId(options.appId)\n  const parentOrigin = origin(options.parentOrigin)\n  if (window.parent === window) throw new Error('Workspace app data requires an embedded preview')\n  const pending = new Map<string, {\n    action: Action\n    resolve(value: Packet): void\n    reject(error: Error): void\n    timeout: ReturnType<typeof setTimeout>\n  }>()\n  let closed = false\n  let readyPromise: Promise<void> | undefined\n  const onMessage = (event: MessageEvent<unknown>): void => {\n    if (closed || event.source !== window.parent || event.origin !== parentOrigin || !packet(event.data) ||\n      event.data.appId !== id || typeof event.data.ok !== 'boolean') return\n    const waiting = pending.get(event.data.requestId)\n    if (!waiting || waiting.action !== event.data.action) return\n    pending.delete(event.data.requestId)\n    clearTimeout(waiting.timeout)\n    if (event.data.ok) waiting.resolve(event.data)\n    else waiting.reject(event.data.error === 'conflict' ? new WorkspaceAppDataConflict() :\n      new Error('Workspace app data unavailable'))\n  }\n  window.addEventListener('message', onMessage)\n  const send = (action: Action, fields: Partial<Packet> = {}, timeoutMs = 10_000): Promise<Packet> => {\n    if (closed) return Promise.reject(new Error('Workspace app data client is closed'))\n    if (pending.size >= maxPending) return Promise.reject(new Error('Too many workspace app data requests'))\n    const requestId = crypto.randomUUID()\n    return new Promise((resolve, reject) => {\n      const timeout = setTimeout(() => { pending.delete(requestId); reject(new Error('Workspace app data timed out')) }, timeoutMs)\n      pending.set(requestId, { action, resolve, reject, timeout })\n      window.parent.postMessage({ protocol, appId: id, requestId, action, ...fields } satisfies Packet, parentOrigin)\n    })\n  }\n  const ready = (): Promise<void> => {\n    if (readyPromise) return readyPromise\n    readyPromise = new Promise<void>((resolve, reject) => {\n      const deadline = Date.now() + 10_000\n      const attempt = (): void => {\n        if (closed) { reject(new Error('Workspace app data client is closed')); return }\n        if (Date.now() >= deadline) { reject(new Error('Workspace app data host did not become ready')); return }\n        void send('ready', {}, 300).then(() => resolve(), () => setTimeout(attempt, 200))\n      }\n      attempt()\n    }).catch((error: unknown) => { readyPromise = undefined; throw error })\n    return readyPromise\n  }\n  return {\n    ready,\n    async read(value) {\n      if (!key(value)) throw new Error('Invalid workspace app data key')\n      await ready()\n      const response = await send('read', { key: value })\n      if (response.entry !== null && (!object(response.entry) ||\n        !bounded(response.entry.value) || !revision(response.entry.revision))) {\n        throw new Error('Invalid workspace app data response')\n      }\n      return response.entry ?? null\n    },\n    async write(value, data, expectedRevision) {\n      if (!key(value) || !bounded(data) || !(expectedRevision === null || revision(expectedRevision))) {\n        throw new Error('Invalid workspace app data write')\n      }\n      await ready()\n      const response = await send('write', { key: value, value: data, expectedRevision })\n      if (!revision(response.revision)) throw new Error('Invalid workspace app data response')\n      return { revision: response.revision }\n    },\n    async remove(value, expectedRevision) {\n      if (!key(value) || !revision(expectedRevision)) throw new Error('Invalid workspace app data remove')\n      await ready()\n      await send('remove', { key: value, expectedRevision })\n    },\n    dispose() {\n      closed = true\n      window.removeEventListener('message', onMessage)\n      for (const waiting of pending.values()) {\n        clearTimeout(waiting.timeout)\n        waiting.reject(new Error('Workspace app data client is closed'))\n      }\n      pending.clear()\n    },\n  }\n}\n","/** A sandbox app registered in one product workspace. Products persist and authorize these rows. */\nexport interface WorkspaceAppRecord {\n  id: string\n  workspaceId: string\n  name: string\n  sandboxId: string\n  previewId: string\n  port: number\n  previewUrl: string\n  status: 'starting' | 'ready' | 'unavailable'\n  createdAt: string\n  updatedAt: string\n}\n\n/** Structural shape returned by the Sandbox SDK previewLinks API. */\nexport interface WorkspaceAppPreviewLink {\n  previewId: string\n  sandboxId: string\n  port: number\n  protocol: 'tcp' | 'udp'\n  hostname: string\n  url: string\n  status: 'provisioning' | 'ready' | 'error' | 'disabled'\n}\n\nexport interface WorkspaceAppIdentity {\n  /** Assigned by the product, stable across preview updates and deliberate republishes. */\n  id: string\n  /** Taken from the authenticated route or session, never agent tool arguments. */\n  workspaceId: string\n  /** Current box resolved by the product from that workspace or session. */\n  sandboxId: string\n  name: string\n  /** Preserve this when republishing the same app onto a replacement sandbox. */\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction nonempty(value: string, field: string): string {\n  if (typeof value !== 'string' || !value.trim() || /[\\u0000-\\u001f\\u007f]/.test(value)) {\n    throw new Error('Invalid workspace app ' + field)\n  }\n  return value.trim()\n}\n\nfunction checkedLink(link: WorkspaceAppPreviewLink, sandboxId: string): void {\n  if (link.sandboxId !== sandboxId) {\n    throw new Error('Preview link belongs to another sandbox')\n  }\n  nonempty(link.previewId, 'previewId')\n  if (link.protocol !== 'tcp') throw new Error('Workspace app preview must use TCP')\n  if (!Number.isInteger(link.port) || link.port < 1 || link.port > 65535) {\n    throw new Error('Invalid workspace app port')\n  }\n  if (!['provisioning', 'ready', 'error', 'disabled'].includes(link.status)) {\n    throw new Error('Invalid workspace app preview status')\n  }\n  let url: URL\n  try {\n    url = new URL(link.url)\n  } catch {\n    throw new Error('Invalid workspace app preview URL')\n  }\n  if (\n    url.protocol !== 'https:' ||\n    !url.hostname ||\n    url.hostname !== link.hostname ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash\n  ) {\n    throw new Error('Invalid workspace app preview URL')\n  }\n}\n\nfunction appStatus(status: WorkspaceAppPreviewLink['status']): WorkspaceAppRecord['status'] {\n  if (status === 'ready' || status === 'provisioning') return 'starting'\n  return 'unavailable'\n}\n\n/**\n * Build a durable registration from a preview link created on the box that\n * the authenticated product request resolved. The product owns row identity,\n * access policy, persistence, and the decision to publish.\n */\nexport function workspaceAppFromPreviewLink(\n  identity: WorkspaceAppIdentity,\n  link: WorkspaceAppPreviewLink,\n): WorkspaceAppRecord {\n  const sandboxId = nonempty(identity.sandboxId, 'sandboxId')\n  checkedLink(link, sandboxId)\n  const timestamp = identity.updatedAt ?? new Date().toISOString()\n  return {\n    id: nonempty(identity.id, 'id'),\n    workspaceId: nonempty(identity.workspaceId, 'workspaceId'),\n    name: nonempty(identity.name, 'name'),\n    sandboxId,\n    previewId: link.previewId,\n    port: link.port,\n    previewUrl: link.url,\n    status: appStatus(link.status),\n    createdAt: identity.createdAt ?? timestamp,\n    updatedAt: timestamp,\n  }\n}\n\nexport interface WorkspaceAppHttpProof {\n  /** The exact trusted SDK preview URL requested by the server. */\n  previewUrl: string\n  status: number\n  contentType: string\n  /** Number of bytes read from the response body, excluding headers. */\n  bodyBytes: number\n  checkedAt: string\n}\n\n/**\n * Mark an app ready only after the host fetched its HTML over the trusted\n * preview URL. The host owns the request timeout, redirect and credential\n * policy, authorization, and compare-and-swap storage update.\n */\nexport function confirmWorkspaceAppReady(\n  app: WorkspaceAppRecord,\n  proof: WorkspaceAppHttpProof,\n): WorkspaceAppRecord {\n  if (\n    proof.previewUrl !== app.previewUrl ||\n    proof.status !== 200 ||\n    !/^text\\/html(?:\\s*;|\\s*$)/i.test(proof.contentType) ||\n    !Number.isInteger(proof.bodyBytes) ||\n    proof.bodyBytes < 1 ||\n    !Number.isFinite(Date.parse(proof.checkedAt))\n  ) {\n    throw new Error('Workspace app HTML preview is not ready')\n  }\n  return { ...app, status: 'ready', updatedAt: proof.checkedAt }\n}\n\n/** Refresh delivery state without changing which sandbox service this app means. */\nexport function refreshWorkspaceAppPreview(\n  app: WorkspaceAppRecord,\n  link: WorkspaceAppPreviewLink,\n  updatedAt = new Date().toISOString(),\n): WorkspaceAppRecord {\n  checkedLink(link, app.sandboxId)\n  if (link.previewId !== app.previewId || link.port !== app.port) {\n    throw new Error('Preview link does not match workspace app')\n  }\n  return {\n    ...app,\n    previewUrl: link.url,\n    status: appStatus(link.status),\n    updatedAt,\n  }\n}\n\nexport type WorkspaceAppBuilderInstructionsOptions =\n  | {\n    /** Host tool that writes the registration after creating a trusted preview. */\n    publishTool: string\n    /** Optional host tool for finding app IDs the builder may update. */\n    listTool?: string\n    manifestPath?: never\n  }\n  | {\n    /** Host-scoped manifest the builder writes after creating runnable projects. */\n    manifestPath: string\n    publishTool?: never\n    listTool?: never\n  }\n\nfunction toolName(value: string): string {\n  if (!/^[A-Za-z][A-Za-z0-9_.-]*$/.test(value)) {\n    throw new Error('Invalid workspace app tool name')\n  }\n  return value\n}\n\nfunction builderManifestPath(value: string): string {\n  if (\n    !/^[A-Za-z0-9._-]+(?:[/][A-Za-z0-9._-]+)*$/.test(value) ||\n    value.split('/').some(segment => segment === '..' || segment === '.')\n  ) {\n    throw new Error('Invalid workspace app manifest path')\n  }\n  return value\n}\n\n/** Portable instructions for an agent profile that builds workspace apps. */\nexport function workspaceAppBuilderInstructions(\n  options: WorkspaceAppBuilderInstructionsOptions,\n): string[] {\n  const common = [\n    'Build a working HTTP application in the current sandbox when the user asks for an app.',\n    'Keep the same app ID for later revisions of that app.',\n    'Treat a preview link as public. Do not embed secrets or private business facts in client code or responses.',\n    'Read real business data through authorized product APIs. Do not fabricate records to make the app look complete.',\n    'Report the app as available only after the host confirms its preview is ready.',\n  ] as const\n  if (options.manifestPath !== undefined) {\n    const path = builderManifestPath(options.manifestPath)\n    return [\n      common[0],\n      'Inspect the existing app projects and manifest before creating or updating an app.',\n      'Keep each runnable project under apps/<id> relative to the sandbox working directory. Give it a package.json dev script; its HTTP server must listen on 0.0.0.0 and use PORT when supplied.',\n      'Write ' + path + ' as JSON with exactly an apps array of { id, name, projectPath } records; each projectPath is apps/<id>.',\n      'Do not put URLs, credentials, tokens, sandbox IDs, or preview IDs in that manifest.',\n      'The host reads this manifest and owns server launch, port selection, preview creation, registration, and access policy.',\n      ...common.slice(1),\n    ]\n  }\n  const publish = toolName(options.publishTool)\n  const list = options.listTool ? toolName(options.listTool) : undefined\n  return [\n    common[0],\n    ...(list ? ['Use ' + list + ' to inspect the existing apps before creating or updating one.'] : []),\n    'Start its server on 0.0.0.0 using an available, unclaimed port.',\n    'Call ' + publish + ' with the app name, stable app ID when updating, and listening port.',\n    'Use the host tool result as the source of the registered app URL and status; never invent a preview URL.',\n    ...common.slice(1),\n  ]\n}\n\nexport {\n  WorkspaceAppDataConflict,\n  createWorkspaceAppDataClient,\n  createWorkspaceAppDataHost,\n} from './data-bridge'\nexport type {\n  WorkspaceAppDataClient,\n  WorkspaceAppDataClientOptions,\n  WorkspaceAppDataEntry,\n  WorkspaceAppDataHost,\n  WorkspaceAppDataHostOptions,\n} from './data-bridge'\n"],"mappings":";AAEA,IAAM,WAAW;AACjB,IAAM,WAAW;AACjB,IAAM,aAAa;AACnB,IAAM,aAAa;AACnB,IAAM,YAAY;AAGX,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,cAAc;AACZ,UAAM,0DAA0D;AAChE,SAAK,OAAO;AAAA,EACd;AACF;AAuCA,SAAS,OAAO,OAAkD;AAChE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AACA,SAAS,IAAI,OAAiC;AAC5C,SAAO,OAAO,UAAU,YAAY,WAAW,KAAK,KAAK,KAAK,UAAU,OAAO,UAAU;AAC3F;AACA,SAAS,SAAS,OAAiC;AACjD,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,QAAQ;AAC7E;AACA,SAAS,QAAQ,OAAiC;AAChD,SAAO,OAAO,UAAU,YAAY,MAAM,UAAU,YAAY,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE,cAAc;AAChH;AACA,SAAS,MAAM,OAAuB;AACpC,MAAI,CAAC,UAAU,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACtE,SAAO;AACT;AACA,SAAS,OAAO,OAAuB;AACrC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MAAI,IAAI,WAAW,SAAU,IAAI,aAAa,YAC5C,EAAE,IAAI,aAAa,WAAW,CAAC,aAAa,WAAW,EAAE,SAAS,IAAI,QAAQ,IAAK;AACnF,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,IAAI;AACb;AACA,SAAS,OAAO,OAAiC;AAC/C,SAAO,OAAO,KAAK,KAAK,MAAM,aAAa,YACzC,OAAO,MAAM,UAAU,YAAY,OAAO,MAAM,cAAc,YAC9D,wBAAwB,KAAK,MAAM,SAAS,KAC5C,OAAO,MAAM,WAAW,YAAY,CAAC,SAAS,QAAQ,SAAS,QAAQ,EAAE,SAAS,MAAM,MAAM;AAClG;AAGO,SAAS,2BAA2B,SAA4D;AACrG,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,IAAI,EAAE;AACZ,MAAI,IAAI,WAAW,QAAS,OAAM,IAAI,MAAM,4BAA4B;AACxE,QAAM,UAAU,IAAI,IAAI,IAAI,UAAU;AACtC,QAAM,gBAAgB,OAAO,QAAQ,MAAM;AAC3C,MAAI,QAAQ,aAAa,YAAY,QAAQ,YAAY,QAAQ,YAAY,QAAQ,UAAU,QAAQ,QACrG,IAAI,IAAI,MAAM,GAAG,EAAE,SAAS,QAAQ,MAAM;AAC1C,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,SAAS;AACb,MAAI,SAAS;AACb,MAAI,eAAe;AACnB,MAAI,aAAa,KAAK,IAAI,IAAI;AAC9B,QAAM,YAAY,CAAC,UAAuC;AACxD,QAAI,UAAU,MAAM,WAAW,MAAM,iBAAiB,MAAM,WAAW,iBACrE,CAAC,OAAO,MAAM,IAAI,KAAK,MAAM,KAAK,UAAU,IAAI,GAAI;AACtD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,YAAY;AAAE,qBAAe;AAAI,mBAAa,MAAM;AAAA,IAAK;AACpE,QAAI,kBAAkB,EAAG;AACzB,UAAM,UAAU,MAAM;AACtB,UAAM,QAAQ,CAAC,WAAsE;AACnF,UAAI,UAAU,MAAM,WAAW,MAAM,cAAe;AACpD,YAAM,eAAe,YAAY;AAAA,QAC/B;AAAA,QAAU,OAAO,IAAI;AAAA,QAAI,WAAW,QAAQ;AAAA,QAAW,QAAQ,QAAQ;AAAA,QAAQ,GAAG;AAAA,MACpF,GAAoB,aAAa;AAAA,IACnC;AACA,QAAI,QAAQ,WAAW,SAAS;AAAE,YAAM,EAAE,IAAI,KAAK,CAAC;AAAG;AAAA,IAAO;AAC9D,QAAI,CAAC,IAAI,QAAQ,GAAG,KACjB,QAAQ,WAAW,YAAY,CAAC,QAAQ,QAAQ,KAAK,KACpD,EAAE,QAAQ,qBAAqB,QAAQ,SAAS,QAAQ,gBAAgB,OACzE,QAAQ,WAAW,YAAY,CAAC,SAAS,QAAQ,gBAAgB,GAAI;AACtE,YAAM,EAAE,IAAI,OAAO,OAAO,UAAU,CAAC;AAAG;AAAA,IAC1C;AACA,QAAI,UAAU,YAAY;AAAE,YAAM,EAAE,IAAI,OAAO,OAAO,cAAc,CAAC;AAAG;AAAA,IAAO;AAC/E,cAAU;AACV,UAAM,aAAa,QAAQ;AAC3B,UAAM,YAAY;AAChB,UAAI;AACF,YAAI,QAAQ,WAAW,QAAQ;AAC7B,gBAAM,QAAQ,MAAM,QAAQ,KAAK,UAAU;AAC3C,cAAI,UAAU,SAAS,CAAC,QAAQ,MAAM,KAAK,KAAK,CAAC,SAAS,MAAM,QAAQ,GAAI,OAAM,IAAI,MAAM,eAAe;AAC3G,gBAAM,EAAE,IAAI,MAAM,MAAM,CAAC;AAAA,QAC3B,WAAW,QAAQ,WAAW,SAAS;AACrC,gBAAM,SAAS,MAAM,QAAQ,MAAM,YAAY,QAAQ,OAAiB,QAAQ,gBAAiC;AACjH,cAAI,CAAC,SAAS,OAAO,QAAQ,EAAG,OAAM,IAAI,MAAM,kBAAkB;AAClE,gBAAM,EAAE,IAAI,MAAM,UAAU,OAAO,SAAS,CAAC;AAAA,QAC/C,OAAO;AACL,gBAAM,QAAQ,OAAO,YAAY,QAAQ,gBAA0B;AACnE,gBAAM,EAAE,IAAI,KAAK,CAAC;AAAA,QACpB;AAAA,MACF,SAAS,OAAO;AACd,cAAM,EAAE,IAAI,OAAO,OAAO,iBAAiB,2BAA2B,aAAa,cAAc,CAAC;AAAA,MACpG,UAAE;AAAU,kBAAU;AAAA,MAAE;AAAA,IAC1B,GAAG;AAAA,EACL;AACA,SAAO,iBAAiB,WAAW,SAAS;AAC5C,SAAO,EAAE,UAAU;AAAE,aAAS;AAAM,WAAO,oBAAoB,WAAW,SAAS;AAAA,EAAE,EAAE;AACzF;AAGO,SAAS,6BAA6B,SAAgE;AAC3G,QAAM,KAAK,MAAM,QAAQ,KAAK;AAC9B,QAAM,eAAe,OAAO,QAAQ,YAAY;AAChD,MAAI,OAAO,WAAW,OAAQ,OAAM,IAAI,MAAM,iDAAiD;AAC/F,QAAM,UAAU,oBAAI,IAKjB;AACH,MAAI,SAAS;AACb,MAAI;AACJ,QAAM,YAAY,CAAC,UAAuC;AACxD,QAAI,UAAU,MAAM,WAAW,OAAO,UAAU,MAAM,WAAW,gBAAgB,CAAC,OAAO,MAAM,IAAI,KACjG,MAAM,KAAK,UAAU,MAAM,OAAO,MAAM,KAAK,OAAO,UAAW;AACjE,UAAM,UAAU,QAAQ,IAAI,MAAM,KAAK,SAAS;AAChD,QAAI,CAAC,WAAW,QAAQ,WAAW,MAAM,KAAK,OAAQ;AACtD,YAAQ,OAAO,MAAM,KAAK,SAAS;AACnC,iBAAa,QAAQ,OAAO;AAC5B,QAAI,MAAM,KAAK,GAAI,SAAQ,QAAQ,MAAM,IAAI;AAAA,QACxC,SAAQ,OAAO,MAAM,KAAK,UAAU,aAAa,IAAI,yBAAyB,IACjF,IAAI,MAAM,gCAAgC,CAAC;AAAA,EAC/C;AACA,SAAO,iBAAiB,WAAW,SAAS;AAC5C,QAAM,OAAO,CAAC,QAAgB,SAA0B,CAAC,GAAG,YAAY,QAA4B;AAClG,QAAI,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,qCAAqC,CAAC;AAClF,QAAI,QAAQ,QAAQ,WAAY,QAAO,QAAQ,OAAO,IAAI,MAAM,sCAAsC,CAAC;AACvG,UAAM,YAAY,OAAO,WAAW;AACpC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,WAAW,MAAM;AAAE,gBAAQ,OAAO,SAAS;AAAG,eAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,MAAE,GAAG,SAAS;AAC5H,cAAQ,IAAI,WAAW,EAAE,QAAQ,SAAS,QAAQ,QAAQ,CAAC;AAC3D,aAAO,OAAO,YAAY,EAAE,UAAU,OAAO,IAAI,WAAW,QAAQ,GAAG,OAAO,GAAoB,YAAY;AAAA,IAChH,CAAC;AAAA,EACH;AACA,QAAM,QAAQ,MAAqB;AACjC,QAAI,aAAc,QAAO;AACzB,mBAAe,IAAI,QAAc,CAAC,SAAS,WAAW;AACpD,YAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,YAAM,UAAU,MAAY;AAC1B,YAAI,QAAQ;AAAE,iBAAO,IAAI,MAAM,qCAAqC,CAAC;AAAG;AAAA,QAAO;AAC/E,YAAI,KAAK,IAAI,KAAK,UAAU;AAAE,iBAAO,IAAI,MAAM,8CAA8C,CAAC;AAAG;AAAA,QAAO;AACxG,aAAK,KAAK,SAAS,CAAC,GAAG,GAAG,EAAE,KAAK,MAAM,QAAQ,GAAG,MAAM,WAAW,SAAS,GAAG,CAAC;AAAA,MAClF;AACA,cAAQ;AAAA,IACV,CAAC,EAAE,MAAM,CAAC,UAAmB;AAAE,qBAAe;AAAW,YAAM;AAAA,IAAM,CAAC;AACtE,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,OAAO;AAChB,UAAI,CAAC,IAAI,KAAK,EAAG,OAAM,IAAI,MAAM,gCAAgC;AACjE,YAAM,MAAM;AACZ,YAAM,WAAW,MAAM,KAAK,QAAQ,EAAE,KAAK,MAAM,CAAC;AAClD,UAAI,SAAS,UAAU,SAAS,CAAC,OAAO,SAAS,KAAK,KACpD,CAAC,QAAQ,SAAS,MAAM,KAAK,KAAK,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI;AACvE,cAAM,IAAI,MAAM,qCAAqC;AAAA,MACvD;AACA,aAAO,SAAS,SAAS;AAAA,IAC3B;AAAA,IACA,MAAM,MAAM,OAAO,MAAM,kBAAkB;AACzC,UAAI,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,qBAAqB,QAAQ,SAAS,gBAAgB,IAAI;AAC/F,cAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AACA,YAAM,MAAM;AACZ,YAAM,WAAW,MAAM,KAAK,SAAS,EAAE,KAAK,OAAO,OAAO,MAAM,iBAAiB,CAAC;AAClF,UAAI,CAAC,SAAS,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACvF,aAAO,EAAE,UAAU,SAAS,SAAS;AAAA,IACvC;AAAA,IACA,MAAM,OAAO,OAAO,kBAAkB;AACpC,UAAI,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,gBAAgB,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACnG,YAAM,MAAM;AACZ,YAAM,KAAK,UAAU,EAAE,KAAK,OAAO,iBAAiB,CAAC;AAAA,IACvD;AAAA,IACA,UAAU;AACR,eAAS;AACT,aAAO,oBAAoB,WAAW,SAAS;AAC/C,iBAAW,WAAW,QAAQ,OAAO,GAAG;AACtC,qBAAa,QAAQ,OAAO;AAC5B,gBAAQ,OAAO,IAAI,MAAM,qCAAqC,CAAC;AAAA,MACjE;AACA,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACF;;;AC/LA,SAAS,SAAS,OAAe,OAAuB;AACtD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,wBAAwB,KAAK,KAAK,GAAG;AACrF,UAAM,IAAI,MAAM,2BAA2B,KAAK;AAAA,EAClD;AACA,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,YAAY,MAA+B,WAAyB;AAC3E,MAAI,KAAK,cAAc,WAAW;AAChC,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,WAAS,KAAK,WAAW,WAAW;AACpC,MAAI,KAAK,aAAa,MAAO,OAAM,IAAI,MAAM,oCAAoC;AACjF,MAAI,CAAC,OAAO,UAAU,KAAK,IAAI,KAAK,KAAK,OAAO,KAAK,KAAK,OAAO,OAAO;AACtE,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,MAAI,CAAC,CAAC,gBAAgB,SAAS,SAAS,UAAU,EAAE,SAAS,KAAK,MAAM,GAAG;AACzE,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,KAAK,GAAG;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,MACE,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,IAAI,aAAa,KAAK,YACtB,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,MACJ;AACA,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACF;AAEA,SAAS,UAAU,QAAyE;AAC1F,MAAI,WAAW,WAAW,WAAW,eAAgB,QAAO;AAC5D,SAAO;AACT;AAOO,SAAS,4BACd,UACA,MACoB;AACpB,QAAM,YAAY,SAAS,SAAS,WAAW,WAAW;AAC1D,cAAY,MAAM,SAAS;AAC3B,QAAM,YAAY,SAAS,cAAa,oBAAI,KAAK,GAAE,YAAY;AAC/D,SAAO;AAAA,IACL,IAAI,SAAS,SAAS,IAAI,IAAI;AAAA,IAC9B,aAAa,SAAS,SAAS,aAAa,aAAa;AAAA,IACzD,MAAM,SAAS,SAAS,MAAM,MAAM;AAAA,IACpC;AAAA,IACA,WAAW,KAAK;AAAA,IAChB,MAAM,KAAK;AAAA,IACX,YAAY,KAAK;AAAA,IACjB,QAAQ,UAAU,KAAK,MAAM;AAAA,IAC7B,WAAW,SAAS,aAAa;AAAA,IACjC,WAAW;AAAA,EACb;AACF;AAiBO,SAAS,yBACd,KACA,OACoB;AACpB,MACE,MAAM,eAAe,IAAI,cACzB,MAAM,WAAW,OACjB,CAAC,4BAA4B,KAAK,MAAM,WAAW,KACnD,CAAC,OAAO,UAAU,MAAM,SAAS,KACjC,MAAM,YAAY,KAClB,CAAC,OAAO,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,GAC5C;AACA,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,SAAO,EAAE,GAAG,KAAK,QAAQ,SAAS,WAAW,MAAM,UAAU;AAC/D;AAGO,SAAS,2BACd,KACA,MACA,aAAY,oBAAI,KAAK,GAAE,YAAY,GACf;AACpB,cAAY,MAAM,IAAI,SAAS;AAC/B,MAAI,KAAK,cAAc,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM;AAC9D,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,YAAY,KAAK;AAAA,IACjB,QAAQ,UAAU,KAAK,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAiBA,SAAS,SAAS,OAAuB;AACvC,MAAI,CAAC,4BAA4B,KAAK,KAAK,GAAG;AAC5C,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MACE,CAAC,2CAA2C,KAAK,KAAK,KACtD,MAAM,MAAM,GAAG,EAAE,KAAK,aAAW,YAAY,QAAQ,YAAY,GAAG,GACpE;AACA,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,SAAO;AACT;AAGO,SAAS,gCACd,SACU;AACV,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAQ,iBAAiB,QAAW;AACtC,UAAM,OAAO,oBAAoB,QAAQ,YAAY;AACrD,WAAO;AAAA,MACL,OAAO,CAAC;AAAA,MACR;AAAA,MACA;AAAA,MACA,WAAW,OAAO;AAAA,MAClB;AAAA,MACA;AAAA,MACA,GAAG,OAAO,MAAM,CAAC;AAAA,IACnB;AAAA,EACF;AACA,QAAM,UAAU,SAAS,QAAQ,WAAW;AAC5C,QAAM,OAAO,QAAQ,WAAW,SAAS,QAAQ,QAAQ,IAAI;AAC7D,SAAO;AAAA,IACL,OAAO,CAAC;AAAA,IACR,GAAI,OAAO,CAAC,SAAS,OAAO,gEAAgE,IAAI,CAAC;AAAA,IACjG;AAAA,IACA,UAAU,UAAU;AAAA,IACpB;AAAA,IACA,GAAG,OAAO,MAAM,CAAC;AAAA,EACnB;AACF;","names":[]}
+{"version":3,"sources":["../../src/workspace-apps/data-bridge.ts","../../src/workspace-apps/index.ts"],"sourcesContent":["import type { WorkspaceAppRecord } from './index'\n\nconst protocol = 'tangle.workspace-app-data.v1'\nconst maxBytes = 65_536\nconst maxPending = 16\nconst keyPattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,79}$/\nconst idPattern = /^[A-Za-z0-9_-]{1,80}$/\n\nexport interface WorkspaceAppDataEntry { value: string; revision: number }\nexport class WorkspaceAppDataConflict extends Error {\n  constructor() {\n    super('Workspace app data changed. Read it again before saving.')\n    this.name = 'WorkspaceAppDataConflict'\n  }\n}\nexport interface WorkspaceAppDataHostOptions {\n  /** Product-authorized registration for the current viewer. */\n  app: Pick<WorkspaceAppRecord, 'id' | 'previewUrl' | 'status'>\n  frame: HTMLIFrameElement\n  /** Product callbacks are bound to the authorized business and app namespace. */\n  read(key: string): Promise<WorkspaceAppDataEntry | null>\n  /** Null creates only if absent; a revision updates only that version. */\n  write(key: string, value: string, expectedRevision: number | null): Promise<{ revision: number }>\n  remove(key: string, expectedRevision: number): Promise<void>\n}\nexport interface WorkspaceAppDataHost { dispose(): void }\nexport interface WorkspaceAppDataClientOptions {\n  appId: string\n  /** Exact authenticated product origin, provided by the product. */\n  parentOrigin: string\n}\nexport interface WorkspaceAppDataClient {\n  ready(): Promise<void>\n  read(key: string): Promise<WorkspaceAppDataEntry | null>\n  write(key: string, value: string, expectedRevision: number | null): Promise<{ revision: number }>\n  remove(key: string, expectedRevision: number): Promise<void>\n  dispose(): void\n}\n\ntype Action = 'ready' | 'read' | 'write' | 'remove'\ntype Packet = {\n  protocol: typeof protocol\n  appId: string\n  requestId: string\n  action: Action\n  key?: string\n  value?: string\n  expectedRevision?: number | null\n  ok?: boolean\n  entry?: WorkspaceAppDataEntry | null\n  revision?: number\n  error?: 'invalid' | 'conflict' | 'unavailable'\n}\nfunction object(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n}\nfunction key(value: unknown): value is string {\n  return typeof value === 'string' && keyPattern.test(value) && value !== '.' && value !== '..'\n}\nfunction revision(value: unknown): value is number {\n  return typeof value === 'number' && Number.isSafeInteger(value) && value > 0\n}\nfunction bounded(value: unknown): value is string {\n  return typeof value === 'string' && value.length <= maxBytes && new TextEncoder().encode(value).byteLength <= maxBytes\n}\nfunction appId(value: string): string {\n  if (!idPattern.test(value)) throw new Error('Invalid workspace app ID')\n  return value\n}\nfunction origin(value: string): string {\n  const url = new URL(value)\n  if (url.origin !== value || (url.protocol !== 'https:' &&\n    !(url.protocol === 'http:' && ['localhost', '127.0.0.1'].includes(url.hostname)))) {\n    throw new Error('Invalid workspace app data origin')\n  }\n  return url.origin\n}\nfunction packet(value: unknown): value is Packet {\n  return object(value) && value.protocol === protocol &&\n    typeof value.appId === 'string' && typeof value.requestId === 'string' &&\n    /^[A-Za-z0-9_-]{1,64}$/.test(value.requestId) &&\n    typeof value.action === 'string' && ['ready', 'read', 'write', 'remove'].includes(value.action)\n}\n\n/** Bind one registered preview to a product-authorized data adapter. */\nexport function createWorkspaceAppDataHost(options: WorkspaceAppDataHostOptions): WorkspaceAppDataHost {\n  const { app, frame } = options\n  appId(app.id)\n  if (app.status !== 'ready') throw new Error('Workspace app is not ready')\n  const preview = new URL(app.previewUrl)\n  const previewOrigin = origin(preview.origin)\n  if (preview.protocol !== 'https:' || preview.username || preview.password || preview.search || preview.hash ||\n    new URL(frame.src).href !== preview.href) {\n    throw new Error('Iframe does not render the registered workspace app preview')\n  }\n  let closed = false\n  let active = 0\n  let messagesLeft = 64\n  let nextWindow = Date.now() + 1000\n  const onMessage = (event: MessageEvent<unknown>): void => {\n    if (closed || event.source !== frame.contentWindow || event.origin !== previewOrigin ||\n      !packet(event.data) || event.data.appId !== app.id) return\n    const now = Date.now()\n    if (now >= nextWindow) { messagesLeft = 64; nextWindow = now + 1000 }\n    if (messagesLeft-- <= 0) return\n    const message = event.data\n    const reply = (result: Pick<Packet, 'ok' | 'entry' | 'revision' | 'error'>): void => {\n      if (closed || event.source !== frame.contentWindow) return\n      frame.contentWindow?.postMessage({\n        protocol, appId: app.id, requestId: message.requestId, action: message.action, ...result,\n      } satisfies Packet, previewOrigin)\n    }\n    if (message.action === 'ready') { reply({ ok: true }); return }\n    if (!key(message.key) ||\n      (message.action === 'write' && (!bounded(message.value) ||\n        !(message.expectedRevision === null || revision(message.expectedRevision)))) ||\n      (message.action === 'remove' && !revision(message.expectedRevision))) {\n      reply({ ok: false, error: 'invalid' }); return\n    }\n    if (active >= maxPending) { reply({ ok: false, error: 'unavailable' }); return }\n    active += 1\n    const checkedKey = message.key\n    void (async () => {\n      try {\n        if (message.action === 'read') {\n          const entry = await options.read(checkedKey)\n          if (entry !== null && (!bounded(entry.value) || !revision(entry.revision))) throw new Error('Invalid entry')\n          reply({ ok: true, entry })\n        } else if (message.action === 'write') {\n          const result = await options.write(checkedKey, message.value as string, message.expectedRevision as number | null)\n          if (!revision(result.revision)) throw new Error('Invalid revision')\n          reply({ ok: true, revision: result.revision })\n        } else {\n          await options.remove(checkedKey, message.expectedRevision as number)\n          reply({ ok: true })\n        }\n      } catch (error) {\n        reply({ ok: false, error: error instanceof WorkspaceAppDataConflict ? 'conflict' : 'unavailable' })\n      } finally { active -= 1 }\n    })()\n  }\n  window.addEventListener('message', onMessage)\n  return { dispose() { closed = true; window.removeEventListener('message', onMessage) } }\n}\n\n/** Use inside a registered preview; no product credential crosses the frame. */\nexport function createWorkspaceAppDataClient(options: WorkspaceAppDataClientOptions): WorkspaceAppDataClient {\n  const id = appId(options.appId)\n  const parentOrigin = origin(options.parentOrigin)\n  if (window.parent === window) throw new Error('Workspace app data requires an embedded preview')\n  const pending = new Map<string, {\n    action: Action\n    resolve(value: Packet): void\n    reject(error: Error): void\n    timeout: ReturnType<typeof setTimeout>\n  }>()\n  let closed = false\n  let readyPromise: Promise<void> | undefined\n  const onMessage = (event: MessageEvent<unknown>): void => {\n    if (closed || event.source !== window.parent || event.origin !== parentOrigin || !packet(event.data) ||\n      event.data.appId !== id || typeof event.data.ok !== 'boolean') return\n    const waiting = pending.get(event.data.requestId)\n    if (!waiting || waiting.action !== event.data.action) return\n    pending.delete(event.data.requestId)\n    clearTimeout(waiting.timeout)\n    if (event.data.ok) waiting.resolve(event.data)\n    else waiting.reject(event.data.error === 'conflict' ? new WorkspaceAppDataConflict() :\n      new Error('Workspace app data unavailable'))\n  }\n  window.addEventListener('message', onMessage)\n  const send = (action: Action, fields: Partial<Packet> = {}, timeoutMs = 10_000): Promise<Packet> => {\n    if (closed) return Promise.reject(new Error('Workspace app data client is closed'))\n    if (pending.size >= maxPending) return Promise.reject(new Error('Too many workspace app data requests'))\n    const requestId = crypto.randomUUID()\n    return new Promise((resolve, reject) => {\n      const timeout = setTimeout(() => { pending.delete(requestId); reject(new Error('Workspace app data timed out')) }, timeoutMs)\n      pending.set(requestId, { action, resolve, reject, timeout })\n      window.parent.postMessage({ protocol, appId: id, requestId, action, ...fields } satisfies Packet, parentOrigin)\n    })\n  }\n  const ready = (): Promise<void> => {\n    if (readyPromise) return readyPromise\n    readyPromise = new Promise<void>((resolve, reject) => {\n      const deadline = Date.now() + 10_000\n      const attempt = (): void => {\n        if (closed) { reject(new Error('Workspace app data client is closed')); return }\n        if (Date.now() >= deadline) { reject(new Error('Workspace app data host did not become ready')); return }\n        void send('ready', {}, 300).then(() => resolve(), () => setTimeout(attempt, 200))\n      }\n      attempt()\n    }).catch((error: unknown) => { readyPromise = undefined; throw error })\n    return readyPromise\n  }\n  return {\n    ready,\n    async read(value) {\n      if (!key(value)) throw new Error('Invalid workspace app data key')\n      await ready()\n      const response = await send('read', { key: value })\n      if (response.entry !== null && (!object(response.entry) ||\n        !bounded(response.entry.value) || !revision(response.entry.revision))) {\n        throw new Error('Invalid workspace app data response')\n      }\n      return response.entry ?? null\n    },\n    async write(value, data, expectedRevision) {\n      if (!key(value) || !bounded(data) || !(expectedRevision === null || revision(expectedRevision))) {\n        throw new Error('Invalid workspace app data write')\n      }\n      await ready()\n      const response = await send('write', { key: value, value: data, expectedRevision })\n      if (!revision(response.revision)) throw new Error('Invalid workspace app data response')\n      return { revision: response.revision }\n    },\n    async remove(value, expectedRevision) {\n      if (!key(value) || !revision(expectedRevision)) throw new Error('Invalid workspace app data remove')\n      await ready()\n      await send('remove', { key: value, expectedRevision })\n    },\n    dispose() {\n      closed = true\n      window.removeEventListener('message', onMessage)\n      for (const waiting of pending.values()) {\n        clearTimeout(waiting.timeout)\n        waiting.reject(new Error('Workspace app data client is closed'))\n      }\n      pending.clear()\n    },\n  }\n}\n","/** A sandbox app registered in one product workspace. Products persist and authorize these rows. */\nexport interface WorkspaceAppRecord {\n  id: string\n  workspaceId: string\n  name: string\n  sandboxId: string\n  previewId: string\n  port: number\n  previewUrl: string\n  status: 'starting' | 'ready' | 'unavailable'\n  createdAt: string\n  updatedAt: string\n}\n\n/** Structural shape returned by the Sandbox SDK previewLinks API. */\nexport interface WorkspaceAppPreviewLink {\n  previewId: string\n  sandboxId: string\n  port: number\n  protocol: 'tcp' | 'udp'\n  hostname: string\n  url: string\n  status: 'provisioning' | 'ready' | 'error' | 'disabled'\n}\n\nexport interface WorkspaceAppIdentity {\n  /** Assigned by the product, stable across preview updates and deliberate republishes. */\n  id: string\n  /** Taken from the authenticated route or session, never agent tool arguments. */\n  workspaceId: string\n  /** Current box resolved by the product from that workspace or session. */\n  sandboxId: string\n  name: string\n  /** Preserve this when republishing the same app onto a replacement sandbox. */\n  createdAt?: string\n  updatedAt?: string\n}\n\nfunction nonempty(value: string, field: string): string {\n  if (typeof value !== 'string' || !value.trim() || /[\\u0000-\\u001f\\u007f]/.test(value)) {\n    throw new Error('Invalid workspace app ' + field)\n  }\n  return value.trim()\n}\n\nfunction checkedLink(link: WorkspaceAppPreviewLink, sandboxId: string): void {\n  if (link.sandboxId !== sandboxId) {\n    throw new Error('Preview link belongs to another sandbox')\n  }\n  nonempty(link.previewId, 'previewId')\n  if (link.protocol !== 'tcp') throw new Error('Workspace app preview must use TCP')\n  if (!Number.isInteger(link.port) || link.port < 1 || link.port > 65535) {\n    throw new Error('Invalid workspace app port')\n  }\n  if (!['provisioning', 'ready', 'error', 'disabled'].includes(link.status)) {\n    throw new Error('Invalid workspace app preview status')\n  }\n  let url: URL\n  try {\n    url = new URL(link.url)\n  } catch {\n    throw new Error('Invalid workspace app preview URL')\n  }\n  if (\n    url.protocol !== 'https:' ||\n    !url.hostname ||\n    url.hostname !== link.hostname ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash\n  ) {\n    throw new Error('Invalid workspace app preview URL')\n  }\n}\n\nfunction appStatus(status: WorkspaceAppPreviewLink['status']): WorkspaceAppRecord['status'] {\n  if (status === 'ready' || status === 'provisioning') return 'starting'\n  return 'unavailable'\n}\n\n/**\n * Build a durable registration from a preview link created on the box that\n * the authenticated product request resolved. The product owns row identity,\n * access policy, persistence, and the decision to publish.\n */\nexport function workspaceAppFromPreviewLink(\n  identity: WorkspaceAppIdentity,\n  link: WorkspaceAppPreviewLink,\n): WorkspaceAppRecord {\n  const sandboxId = nonempty(identity.sandboxId, 'sandboxId')\n  checkedLink(link, sandboxId)\n  const timestamp = identity.updatedAt ?? new Date().toISOString()\n  return {\n    id: nonempty(identity.id, 'id'),\n    workspaceId: nonempty(identity.workspaceId, 'workspaceId'),\n    name: nonempty(identity.name, 'name'),\n    sandboxId,\n    previewId: link.previewId,\n    port: link.port,\n    previewUrl: link.url,\n    status: appStatus(link.status),\n    createdAt: identity.createdAt ?? timestamp,\n    updatedAt: timestamp,\n  }\n}\n\nexport interface WorkspaceAppHttpProof {\n  /** The exact trusted SDK preview URL requested by the server. */\n  previewUrl: string\n  status: number\n  contentType: string\n  /** Number of bytes read from the response body, excluding headers. */\n  bodyBytes: number\n  checkedAt: string\n}\n\n/**\n * Mark an app ready only after the host fetched its HTML over the trusted\n * preview URL. The host owns the request timeout, redirect and credential\n * policy, authorization, and compare-and-swap storage update.\n */\nexport function confirmWorkspaceAppReady(\n  app: WorkspaceAppRecord,\n  proof: WorkspaceAppHttpProof,\n): WorkspaceAppRecord {\n  if (\n    proof.previewUrl !== app.previewUrl ||\n    proof.status !== 200 ||\n    !/^text\\/html(?:\\s*;|\\s*$)/i.test(proof.contentType) ||\n    !Number.isInteger(proof.bodyBytes) ||\n    proof.bodyBytes < 1 ||\n    !Number.isFinite(Date.parse(proof.checkedAt))\n  ) {\n    throw new Error('Workspace app HTML preview is not ready')\n  }\n  return { ...app, status: 'ready', updatedAt: proof.checkedAt }\n}\n\n/** Refresh delivery state without changing which sandbox service this app means. */\nexport function refreshWorkspaceAppPreview(\n  app: WorkspaceAppRecord,\n  link: WorkspaceAppPreviewLink,\n  updatedAt = new Date().toISOString(),\n): WorkspaceAppRecord {\n  checkedLink(link, app.sandboxId)\n  if (link.previewId !== app.previewId || link.port !== app.port) {\n    throw new Error('Preview link does not match workspace app')\n  }\n  return {\n    ...app,\n    previewUrl: link.url,\n    status: appStatus(link.status),\n    updatedAt,\n  }\n}\n\nexport type WorkspaceAppBuilderInstructionsOptions =\n  | {\n    /** Host tool that writes the registration after creating a trusted preview. */\n    publishTool: string\n    /** Optional host tool for finding app IDs the builder may update. */\n    listTool?: string\n    manifestPath?: never\n  }\n  | {\n    /** Host-scoped manifest the builder writes after creating runnable projects. */\n    manifestPath: string\n    publishTool?: never\n    listTool?: never\n  }\n\nfunction toolName(value: string): string {\n  if (!/^[A-Za-z][A-Za-z0-9_.-]*$/.test(value)) {\n    throw new Error('Invalid workspace app tool name')\n  }\n  return value\n}\n\nfunction builderManifestPath(value: string): string {\n  if (\n    !/^[A-Za-z0-9._-]+(?:[/][A-Za-z0-9._-]+)*$/.test(value) ||\n    value.split('/').some(segment => segment === '..' || segment === '.')\n  ) {\n    throw new Error('Invalid workspace app manifest path')\n  }\n  return value\n}\n\n/** Portable instructions for an agent profile that builds workspace apps. */\nexport function workspaceAppBuilderInstructions(\n  options: WorkspaceAppBuilderInstructionsOptions,\n): string[] {\n  const common = [\n    'Build a working HTTP application in the current sandbox when the user asks for an app.',\n    'Keep the same app ID for later revisions of that app.',\n    'Treat a preview link as public. Do not embed secrets or private business facts in client code or responses.',\n    'Read real business data through authorized product APIs. Do not fabricate records to make the app look complete.',\n    'Report the app as available only after the host confirms its preview is ready.',\n  ] as const\n  if (options.manifestPath !== undefined) {\n    const path = builderManifestPath(options.manifestPath)\n    return [\n      common[0],\n      'Inspect the existing app projects and manifest before creating or updating an app.',\n      'Keep each runnable project under apps/<id> relative to the sandbox working directory. Give it a package.json dev script; its HTTP server must listen on 0.0.0.0 and use PORT when supplied.',\n      'Write ' + path + ' as JSON with exactly an apps array of { id, name, projectPath } records; each projectPath is apps/<id>.',\n      'Do not put URLs, credentials, tokens, sandbox IDs, or preview IDs in that manifest.',\n      'The host reads this manifest and owns server launch, port selection, preview creation, registration, and access policy.',\n      ...common.slice(1),\n    ]\n  }\n  const publish = toolName(options.publishTool)\n  const list = options.listTool ? toolName(options.listTool) : undefined\n  return [\n    common[0],\n    ...(list ? ['Use ' + list + ' to inspect the existing apps before creating or updating one.'] : []),\n    'Start its server on 0.0.0.0 using an available, unclaimed port.',\n    'Call ' + publish + ' with the app name, stable app ID when updating, and listening port.',\n    'Use the host tool result as the source of the registered app URL and status; never invent a preview URL.',\n    ...common.slice(1),\n  ]\n}\n\nexport {\n  WorkspaceAppDataConflict,\n  createWorkspaceAppDataClient,\n  createWorkspaceAppDataHost,\n} from './data-bridge'\nexport type {\n  WorkspaceAppDataClient,\n  WorkspaceAppDataClientOptions,\n  WorkspaceAppDataEntry,\n  WorkspaceAppDataHost,\n  WorkspaceAppDataHostOptions,\n} from './data-bridge'\n\nexport {\n  CLOUD_ARTIFACT_MAX_BYTES,\n  CLOUD_ARTIFACT_MAX_FILES,\n  CLOUD_ARTIFACT_MAX_FILE_BYTES,\n  CLOUD_ARTIFACT_SHARE_ROLE,\n  CLOUD_ARTIFACT_VIEW_TTL_MS,\n  CLOUD_ARTIFACT_WORKER_MODULE,\n  CloudArtifactError,\n  cloudArtifactContentType,\n  cloudArtifactObjectKey,\n  cloudArtifactReferences,\n  cloudArtifactWorkspacePrefix,\n  collectCloudArtifactBundle,\n  createCloudArtifactId,\n  createCloudArtifactShareToken,\n  createCloudArtifactViewUrl,\n  isCloudArtifactPath,\n  prepareCloudArtifact,\n  readCloudArtifactShareToken,\n  readCloudArtifactViewUrl,\n  resolveCloudArtifactReference,\n  storeCloudArtifact,\n} from './cloud-artifacts'\nexport type {\n  CloudArtifactErrorCode,\n  CloudArtifactFile,\n  CloudArtifactGrant,\n  CloudArtifactInputFile,\n  CloudArtifactKind,\n  CloudArtifactRecord,\n  CloudArtifactVersion,\n  CloudArtifactView,\n  PreparedCloudArtifact,\n} from './cloud-artifacts'\nexport {\n  CLOUD_ARTIFACT_FRAME_SANDBOX,\n  CLOUD_ARTIFACT_SCRIPT_HOSTS,\n  cloudArtifactContentSecurityPolicy,\n  createCloudArtifactOrigin,\n} from './cloud-artifact-origin'\nexport type {\n  CloudArtifactOriginOptions,\n  CloudArtifactWorkerCode,\n  CloudArtifactWorkerLoader,\n} from './cloud-artifact-origin'\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,IAAM,WAAW;AACjB,IAAM,WAAW;AACjB,IAAM,aAAa;AACnB,IAAM,aAAa;AACnB,IAAM,YAAY;AAGX,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,cAAc;AACZ,UAAM,0DAA0D;AAChE,SAAK,OAAO;AAAA,EACd;AACF;AAuCA,SAAS,OAAO,OAAkD;AAChE,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK;AAC5E;AACA,SAAS,IAAI,OAAiC;AAC5C,SAAO,OAAO,UAAU,YAAY,WAAW,KAAK,KAAK,KAAK,UAAU,OAAO,UAAU;AAC3F;AACA,SAAS,SAAS,OAAiC;AACjD,SAAO,OAAO,UAAU,YAAY,OAAO,cAAc,KAAK,KAAK,QAAQ;AAC7E;AACA,SAAS,QAAQ,OAAiC;AAChD,SAAO,OAAO,UAAU,YAAY,MAAM,UAAU,YAAY,IAAI,YAAY,EAAE,OAAO,KAAK,EAAE,cAAc;AAChH;AACA,SAAS,MAAM,OAAuB;AACpC,MAAI,CAAC,UAAU,KAAK,KAAK,EAAG,OAAM,IAAI,MAAM,0BAA0B;AACtE,SAAO;AACT;AACA,SAAS,OAAO,OAAuB;AACrC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,MAAI,IAAI,WAAW,SAAU,IAAI,aAAa,YAC5C,EAAE,IAAI,aAAa,WAAW,CAAC,aAAa,WAAW,EAAE,SAAS,IAAI,QAAQ,IAAK;AACnF,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,IAAI;AACb;AACA,SAAS,OAAO,OAAiC;AAC/C,SAAO,OAAO,KAAK,KAAK,MAAM,aAAa,YACzC,OAAO,MAAM,UAAU,YAAY,OAAO,MAAM,cAAc,YAC9D,wBAAwB,KAAK,MAAM,SAAS,KAC5C,OAAO,MAAM,WAAW,YAAY,CAAC,SAAS,QAAQ,SAAS,QAAQ,EAAE,SAAS,MAAM,MAAM;AAClG;AAGO,SAAS,2BAA2B,SAA4D;AACrG,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,IAAI,EAAE;AACZ,MAAI,IAAI,WAAW,QAAS,OAAM,IAAI,MAAM,4BAA4B;AACxE,QAAM,UAAU,IAAI,IAAI,IAAI,UAAU;AACtC,QAAM,gBAAgB,OAAO,QAAQ,MAAM;AAC3C,MAAI,QAAQ,aAAa,YAAY,QAAQ,YAAY,QAAQ,YAAY,QAAQ,UAAU,QAAQ,QACrG,IAAI,IAAI,MAAM,GAAG,EAAE,SAAS,QAAQ,MAAM;AAC1C,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,SAAS;AACb,MAAI,SAAS;AACb,MAAI,eAAe;AACnB,MAAI,aAAa,KAAK,IAAI,IAAI;AAC9B,QAAM,YAAY,CAAC,UAAuC;AACxD,QAAI,UAAU,MAAM,WAAW,MAAM,iBAAiB,MAAM,WAAW,iBACrE,CAAC,OAAO,MAAM,IAAI,KAAK,MAAM,KAAK,UAAU,IAAI,GAAI;AACtD,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,OAAO,YAAY;AAAE,qBAAe;AAAI,mBAAa,MAAM;AAAA,IAAK;AACpE,QAAI,kBAAkB,EAAG;AACzB,UAAM,UAAU,MAAM;AACtB,UAAM,QAAQ,CAAC,WAAsE;AACnF,UAAI,UAAU,MAAM,WAAW,MAAM,cAAe;AACpD,YAAM,eAAe,YAAY;AAAA,QAC/B;AAAA,QAAU,OAAO,IAAI;AAAA,QAAI,WAAW,QAAQ;AAAA,QAAW,QAAQ,QAAQ;AAAA,QAAQ,GAAG;AAAA,MACpF,GAAoB,aAAa;AAAA,IACnC;AACA,QAAI,QAAQ,WAAW,SAAS;AAAE,YAAM,EAAE,IAAI,KAAK,CAAC;AAAG;AAAA,IAAO;AAC9D,QAAI,CAAC,IAAI,QAAQ,GAAG,KACjB,QAAQ,WAAW,YAAY,CAAC,QAAQ,QAAQ,KAAK,KACpD,EAAE,QAAQ,qBAAqB,QAAQ,SAAS,QAAQ,gBAAgB,OACzE,QAAQ,WAAW,YAAY,CAAC,SAAS,QAAQ,gBAAgB,GAAI;AACtE,YAAM,EAAE,IAAI,OAAO,OAAO,UAAU,CAAC;AAAG;AAAA,IAC1C;AACA,QAAI,UAAU,YAAY;AAAE,YAAM,EAAE,IAAI,OAAO,OAAO,cAAc,CAAC;AAAG;AAAA,IAAO;AAC/E,cAAU;AACV,UAAM,aAAa,QAAQ;AAC3B,UAAM,YAAY;AAChB,UAAI;AACF,YAAI,QAAQ,WAAW,QAAQ;AAC7B,gBAAM,QAAQ,MAAM,QAAQ,KAAK,UAAU;AAC3C,cAAI,UAAU,SAAS,CAAC,QAAQ,MAAM,KAAK,KAAK,CAAC,SAAS,MAAM,QAAQ,GAAI,OAAM,IAAI,MAAM,eAAe;AAC3G,gBAAM,EAAE,IAAI,MAAM,MAAM,CAAC;AAAA,QAC3B,WAAW,QAAQ,WAAW,SAAS;AACrC,gBAAM,SAAS,MAAM,QAAQ,MAAM,YAAY,QAAQ,OAAiB,QAAQ,gBAAiC;AACjH,cAAI,CAAC,SAAS,OAAO,QAAQ,EAAG,OAAM,IAAI,MAAM,kBAAkB;AAClE,gBAAM,EAAE,IAAI,MAAM,UAAU,OAAO,SAAS,CAAC;AAAA,QAC/C,OAAO;AACL,gBAAM,QAAQ,OAAO,YAAY,QAAQ,gBAA0B;AACnE,gBAAM,EAAE,IAAI,KAAK,CAAC;AAAA,QACpB;AAAA,MACF,SAAS,OAAO;AACd,cAAM,EAAE,IAAI,OAAO,OAAO,iBAAiB,2BAA2B,aAAa,cAAc,CAAC;AAAA,MACpG,UAAE;AAAU,kBAAU;AAAA,MAAE;AAAA,IAC1B,GAAG;AAAA,EACL;AACA,SAAO,iBAAiB,WAAW,SAAS;AAC5C,SAAO,EAAE,UAAU;AAAE,aAAS;AAAM,WAAO,oBAAoB,WAAW,SAAS;AAAA,EAAE,EAAE;AACzF;AAGO,SAAS,6BAA6B,SAAgE;AAC3G,QAAM,KAAK,MAAM,QAAQ,KAAK;AAC9B,QAAM,eAAe,OAAO,QAAQ,YAAY;AAChD,MAAI,OAAO,WAAW,OAAQ,OAAM,IAAI,MAAM,iDAAiD;AAC/F,QAAM,UAAU,oBAAI,IAKjB;AACH,MAAI,SAAS;AACb,MAAI;AACJ,QAAM,YAAY,CAAC,UAAuC;AACxD,QAAI,UAAU,MAAM,WAAW,OAAO,UAAU,MAAM,WAAW,gBAAgB,CAAC,OAAO,MAAM,IAAI,KACjG,MAAM,KAAK,UAAU,MAAM,OAAO,MAAM,KAAK,OAAO,UAAW;AACjE,UAAM,UAAU,QAAQ,IAAI,MAAM,KAAK,SAAS;AAChD,QAAI,CAAC,WAAW,QAAQ,WAAW,MAAM,KAAK,OAAQ;AACtD,YAAQ,OAAO,MAAM,KAAK,SAAS;AACnC,iBAAa,QAAQ,OAAO;AAC5B,QAAI,MAAM,KAAK,GAAI,SAAQ,QAAQ,MAAM,IAAI;AAAA,QACxC,SAAQ,OAAO,MAAM,KAAK,UAAU,aAAa,IAAI,yBAAyB,IACjF,IAAI,MAAM,gCAAgC,CAAC;AAAA,EAC/C;AACA,SAAO,iBAAiB,WAAW,SAAS;AAC5C,QAAM,OAAO,CAAC,QAAgB,SAA0B,CAAC,GAAG,YAAY,QAA4B;AAClG,QAAI,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,qCAAqC,CAAC;AAClF,QAAI,QAAQ,QAAQ,WAAY,QAAO,QAAQ,OAAO,IAAI,MAAM,sCAAsC,CAAC;AACvG,UAAM,YAAY,OAAO,WAAW;AACpC,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAU,WAAW,MAAM;AAAE,gBAAQ,OAAO,SAAS;AAAG,eAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,MAAE,GAAG,SAAS;AAC5H,cAAQ,IAAI,WAAW,EAAE,QAAQ,SAAS,QAAQ,QAAQ,CAAC;AAC3D,aAAO,OAAO,YAAY,EAAE,UAAU,OAAO,IAAI,WAAW,QAAQ,GAAG,OAAO,GAAoB,YAAY;AAAA,IAChH,CAAC;AAAA,EACH;AACA,QAAM,QAAQ,MAAqB;AACjC,QAAI,aAAc,QAAO;AACzB,mBAAe,IAAI,QAAc,CAAC,SAAS,WAAW;AACpD,YAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,YAAM,UAAU,MAAY;AAC1B,YAAI,QAAQ;AAAE,iBAAO,IAAI,MAAM,qCAAqC,CAAC;AAAG;AAAA,QAAO;AAC/E,YAAI,KAAK,IAAI,KAAK,UAAU;AAAE,iBAAO,IAAI,MAAM,8CAA8C,CAAC;AAAG;AAAA,QAAO;AACxG,aAAK,KAAK,SAAS,CAAC,GAAG,GAAG,EAAE,KAAK,MAAM,QAAQ,GAAG,MAAM,WAAW,SAAS,GAAG,CAAC;AAAA,MAClF;AACA,cAAQ;AAAA,IACV,CAAC,EAAE,MAAM,CAAC,UAAmB;AAAE,qBAAe;AAAW,YAAM;AAAA,IAAM,CAAC;AACtE,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,OAAO;AAChB,UAAI,CAAC,IAAI,KAAK,EAAG,OAAM,IAAI,MAAM,gCAAgC;AACjE,YAAM,MAAM;AACZ,YAAM,WAAW,MAAM,KAAK,QAAQ,EAAE,KAAK,MAAM,CAAC;AAClD,UAAI,SAAS,UAAU,SAAS,CAAC,OAAO,SAAS,KAAK,KACpD,CAAC,QAAQ,SAAS,MAAM,KAAK,KAAK,CAAC,SAAS,SAAS,MAAM,QAAQ,IAAI;AACvE,cAAM,IAAI,MAAM,qCAAqC;AAAA,MACvD;AACA,aAAO,SAAS,SAAS;AAAA,IAC3B;AAAA,IACA,MAAM,MAAM,OAAO,MAAM,kBAAkB;AACzC,UAAI,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,KAAK,EAAE,qBAAqB,QAAQ,SAAS,gBAAgB,IAAI;AAC/F,cAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AACA,YAAM,MAAM;AACZ,YAAM,WAAW,MAAM,KAAK,SAAS,EAAE,KAAK,OAAO,OAAO,MAAM,iBAAiB,CAAC;AAClF,UAAI,CAAC,SAAS,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,qCAAqC;AACvF,aAAO,EAAE,UAAU,SAAS,SAAS;AAAA,IACvC;AAAA,IACA,MAAM,OAAO,OAAO,kBAAkB;AACpC,UAAI,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,gBAAgB,EAAG,OAAM,IAAI,MAAM,mCAAmC;AACnG,YAAM,MAAM;AACZ,YAAM,KAAK,UAAU,EAAE,KAAK,OAAO,iBAAiB,CAAC;AAAA,IACvD;AAAA,IACA,UAAU;AACR,eAAS;AACT,aAAO,oBAAoB,WAAW,SAAS;AAC/C,iBAAW,WAAW,QAAQ,OAAO,GAAG;AACtC,qBAAa,QAAQ,OAAO;AAC5B,gBAAQ,OAAO,IAAI,MAAM,qCAAqC,CAAC;AAAA,MACjE;AACA,cAAQ,MAAM;AAAA,IAChB;AAAA,EACF;AACF;;;AC/LA,SAAS,SAAS,OAAe,OAAuB;AACtD,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,KAAK,wBAAwB,KAAK,KAAK,GAAG;AACrF,UAAM,IAAI,MAAM,2BAA2B,KAAK;AAAA,EAClD;AACA,SAAO,MAAM,KAAK;AACpB;AAEA,SAAS,YAAY,MAA+B,WAAyB;AAC3E,MAAI,KAAK,cAAc,WAAW;AAChC,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,WAAS,KAAK,WAAW,WAAW;AACpC,MAAI,KAAK,aAAa,MAAO,OAAM,IAAI,MAAM,oCAAoC;AACjF,MAAI,CAAC,OAAO,UAAU,KAAK,IAAI,KAAK,KAAK,OAAO,KAAK,KAAK,OAAO,OAAO;AACtE,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AACA,MAAI,CAAC,CAAC,gBAAgB,SAAS,SAAS,UAAU,EAAE,SAAS,KAAK,MAAM,GAAG;AACzE,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACA,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,KAAK,GAAG;AAAA,EACxB,QAAQ;AACN,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,MACE,IAAI,aAAa,YACjB,CAAC,IAAI,YACL,IAAI,aAAa,KAAK,YACtB,IAAI,YACJ,IAAI,YACJ,IAAI,UACJ,IAAI,MACJ;AACA,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACF;AAEA,SAAS,UAAU,QAAyE;AAC1F,MAAI,WAAW,WAAW,WAAW,eAAgB,QAAO;AAC5D,SAAO;AACT;AAOO,SAAS,4BACd,UACA,MACoB;AACpB,QAAM,YAAY,SAAS,SAAS,WAAW,WAAW;AAC1D,cAAY,MAAM,SAAS;AAC3B,QAAM,YAAY,SAAS,cAAa,oBAAI,KAAK,GAAE,YAAY;AAC/D,SAAO;AAAA,IACL,IAAI,SAAS,SAAS,IAAI,IAAI;AAAA,IAC9B,aAAa,SAAS,SAAS,aAAa,aAAa;AAAA,IACzD,MAAM,SAAS,SAAS,MAAM,MAAM;AAAA,IACpC;AAAA,IACA,WAAW,KAAK;AAAA,IAChB,MAAM,KAAK;AAAA,IACX,YAAY,KAAK;AAAA,IACjB,QAAQ,UAAU,KAAK,MAAM;AAAA,IAC7B,WAAW,SAAS,aAAa;AAAA,IACjC,WAAW;AAAA,EACb;AACF;AAiBO,SAAS,yBACd,KACA,OACoB;AACpB,MACE,MAAM,eAAe,IAAI,cACzB,MAAM,WAAW,OACjB,CAAC,4BAA4B,KAAK,MAAM,WAAW,KACnD,CAAC,OAAO,UAAU,MAAM,SAAS,KACjC,MAAM,YAAY,KAClB,CAAC,OAAO,SAAS,KAAK,MAAM,MAAM,SAAS,CAAC,GAC5C;AACA,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,SAAO,EAAE,GAAG,KAAK,QAAQ,SAAS,WAAW,MAAM,UAAU;AAC/D;AAGO,SAAS,2BACd,KACA,MACA,aAAY,oBAAI,KAAK,GAAE,YAAY,GACf;AACpB,cAAY,MAAM,IAAI,SAAS;AAC/B,MAAI,KAAK,cAAc,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM;AAC9D,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,YAAY,KAAK;AAAA,IACjB,QAAQ,UAAU,KAAK,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAiBA,SAAS,SAAS,OAAuB;AACvC,MAAI,CAAC,4BAA4B,KAAK,KAAK,GAAG;AAC5C,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MACE,CAAC,2CAA2C,KAAK,KAAK,KACtD,MAAM,MAAM,GAAG,EAAE,KAAK,aAAW,YAAY,QAAQ,YAAY,GAAG,GACpE;AACA,UAAM,IAAI,MAAM,qCAAqC;AAAA,EACvD;AACA,SAAO;AACT;AAGO,SAAS,gCACd,SACU;AACV,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAQ,iBAAiB,QAAW;AACtC,UAAM,OAAO,oBAAoB,QAAQ,YAAY;AACrD,WAAO;AAAA,MACL,OAAO,CAAC;AAAA,MACR;AAAA,MACA;AAAA,MACA,WAAW,OAAO;AAAA,MAClB;AAAA,MACA;AAAA,MACA,GAAG,OAAO,MAAM,CAAC;AAAA,IACnB;AAAA,EACF;AACA,QAAM,UAAU,SAAS,QAAQ,WAAW;AAC5C,QAAM,OAAO,QAAQ,WAAW,SAAS,QAAQ,QAAQ,IAAI;AAC7D,SAAO;AAAA,IACL,OAAO,CAAC;AAAA,IACR,GAAI,OAAO,CAAC,SAAS,OAAO,gEAAgE,IAAI,CAAC;AAAA,IACjG;AAAA,IACA,UAAU,UAAU;AAAA,IACpB;AAAA,IACA,GAAG,OAAO,MAAM,CAAC;AAAA,EACnB;AACF;","names":[]}

package/dist/workspace-apps/react.d.ts

@@ -0,0 +1,25 @@
+import type { MutationOutcome } from '../web-react/async/use-confirmed-mutation';
+import { CLOUD_ARTIFACT_FRAME_SANDBOX } from './cloud-artifact-origin';
+export { CLOUD_ARTIFACT_FRAME_SANDBOX };
+/** Render a cloud artifact from its view URL on the artifact origin. */
+export declare function CloudArtifactFrame({ src, title, className }: {
+    /** A view URL the server minted for this viewer (`createCloudArtifactViewUrl`). */
+    src: string;
+    title: string;
+    className?: string;
+}): import("react").JSX.Element;
+/** A live public link to one artifact. */
+export interface CloudArtifactPublicLink {
+    id: string;
+    url: string;
+    createdAt: string;
+}
+export interface CloudArtifactSharePanelProps {
+    link: CloudArtifactPublicLink | null;
+    /** Whether this viewer may create or revoke the link (`CLOUD_ARTIFACT_SHARE_ROLE`). */
+    canShare: boolean;
+    onCreate(): Promise<MutationOutcome<CloudArtifactPublicLink>>;
+    onRevoke(link: CloudArtifactPublicLink): Promise<MutationOutcome<unknown>>;
+}
+/** Turn an artifact's public link on, copy it, or turn it off. */
+export declare function CloudArtifactSharePanel({ link: initial, canShare, onCreate, onRevoke }: CloudArtifactSharePanelProps): import("react").JSX.Element;

package/dist/workspace-apps/react.js

@@ -0,0 +1,65 @@
+import {
+  CLOUD_ARTIFACT_FRAME_SANDBOX
+} from "../chunk-7WEPGGOW.js";
+import "../chunk-O7UX55EU.js";
+import "../chunk-S5SRJJQG.js";
+
+// src/workspace-apps/react.tsx
+import { useState } from "react";
+import { Button, CopyButton, Input } from "@tangle-network/ui/primitives";
+import { jsx, jsxs } from "react/jsx-runtime";
+function CloudArtifactFrame({ src, title, className }) {
+  return /* @__PURE__ */ jsx(
+    "iframe",
+    {
+      src,
+      title,
+      className: className ?? "h-full w-full border-0 bg-white",
+      sandbox: CLOUD_ARTIFACT_FRAME_SANDBOX,
+      referrerPolicy: "no-referrer",
+      allow: "fullscreen; clipboard-write"
+    }
+  );
+}
+function CloudArtifactSharePanel({ link: initial, canShare, onCreate, onRevoke }) {
+  const [link, setLink] = useState(initial);
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState(null);
+  const create = async () => {
+    setBusy(true);
+    setError(null);
+    const outcome = await onCreate();
+    setBusy(false);
+    if (outcome.succeeded) setLink(outcome.value);
+    else setError(outcome.message);
+  };
+  const revoke = async () => {
+    if (!link) return;
+    setBusy(true);
+    setError(null);
+    const outcome = await onRevoke(link);
+    setBusy(false);
+    if (outcome.succeeded) setLink(null);
+    else setError(outcome.message);
+  };
+  return /* @__PURE__ */ jsxs("section", { "aria-labelledby": "cloud-artifact-share-title", className: "flex flex-col gap-3 text-sm", children: [
+    /* @__PURE__ */ jsxs("div", { children: [
+      /* @__PURE__ */ jsx("h2", { id: "cloud-artifact-share-title", className: "text-sm font-semibold text-foreground", children: "Public link" }),
+      /* @__PURE__ */ jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: link ? "Anyone with this link can open the page. Turning it off stops the link right away." : "Only members of this workspace can open this page." })
+    ] }),
+    link ? /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-2 sm:flex-row sm:items-center", children: [
+      /* @__PURE__ */ jsx(Input, { readOnly: true, value: link.url, "aria-label": "Public link", className: "min-w-0 flex-1 text-sm", onFocus: (event) => event.currentTarget.select() }),
+      /* @__PURE__ */ jsxs("div", { className: "flex shrink-0 gap-2", children: [
+        /* @__PURE__ */ jsx(CopyButton, { text: link.url, label: "Copy link", copiedLabel: "Copied" }),
+        canShare && /* @__PURE__ */ jsx(Button, { type: "button", variant: "outline", size: "sm", disabled: busy, onClick: () => void revoke(), children: busy ? "Turning off\u2026" : "Turn off link" })
+      ] })
+    ] }) : canShare ? /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, { type: "button", size: "sm", disabled: busy, onClick: () => void create(), children: busy ? "Creating\u2026" : "Create public link" }) }) : /* @__PURE__ */ jsx("p", { className: "text-sm text-muted-foreground", children: "Editors and owners can share it." }),
+    error && /* @__PURE__ */ jsx("p", { role: "alert", className: "text-sm text-destructive", children: error })
+  ] });
+}
+export {
+  CLOUD_ARTIFACT_FRAME_SANDBOX,
+  CloudArtifactFrame,
+  CloudArtifactSharePanel
+};
+//# sourceMappingURL=react.js.map

package/dist/workspace-apps/react.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/workspace-apps/react.tsx"],"sourcesContent":["/**\n * Browser parts of cloud artifacts: the frame that renders one from the\n * artifact origin, and the owner's public-link control. Products supply the\n * minted view URL and the share calls; authorization stays on the server.\n */\nimport { useState } from 'react'\nimport { Button, CopyButton, Input } from '@tangle-network/ui/primitives'\nimport type { MutationOutcome } from '../web-react/async/use-confirmed-mutation'\nimport { CLOUD_ARTIFACT_FRAME_SANDBOX } from './cloud-artifact-origin'\n\nexport { CLOUD_ARTIFACT_FRAME_SANDBOX }\n\n/** Render a cloud artifact from its view URL on the artifact origin. */\nexport function CloudArtifactFrame({ src, title, className }: {\n  /** A view URL the server minted for this viewer (`createCloudArtifactViewUrl`). */\n  src: string\n  title: string\n  className?: string\n}) {\n  return (\n    <iframe\n      src={src}\n      title={title}\n      className={className ?? 'h-full w-full border-0 bg-white'}\n      sandbox={CLOUD_ARTIFACT_FRAME_SANDBOX}\n      referrerPolicy=\"no-referrer\"\n      allow=\"fullscreen; clipboard-write\"\n    />\n  )\n}\n\n/** A live public link to one artifact. */\nexport interface CloudArtifactPublicLink {\n  id: string\n  url: string\n  createdAt: string\n}\n\nexport interface CloudArtifactSharePanelProps {\n  link: CloudArtifactPublicLink | null\n  /** Whether this viewer may create or revoke the link (`CLOUD_ARTIFACT_SHARE_ROLE`). */\n  canShare: boolean\n  onCreate(): Promise<MutationOutcome<CloudArtifactPublicLink>>\n  onRevoke(link: CloudArtifactPublicLink): Promise<MutationOutcome<unknown>>\n}\n\n/** Turn an artifact's public link on, copy it, or turn it off. */\nexport function CloudArtifactSharePanel({ link: initial, canShare, onCreate, onRevoke }: CloudArtifactSharePanelProps) {\n  const [link, setLink] = useState(initial)\n  const [busy, setBusy] = useState(false)\n  const [error, setError] = useState<string | null>(null)\n\n  const create = async () => {\n    setBusy(true)\n    setError(null)\n    const outcome = await onCreate()\n    setBusy(false)\n    if (outcome.succeeded) setLink(outcome.value)\n    else setError(outcome.message)\n  }\n  const revoke = async () => {\n    if (!link) return\n    setBusy(true)\n    setError(null)\n    const outcome = await onRevoke(link)\n    setBusy(false)\n    if (outcome.succeeded) setLink(null)\n    else setError(outcome.message)\n  }\n\n  return (\n    <section aria-labelledby=\"cloud-artifact-share-title\" className=\"flex flex-col gap-3 text-sm\">\n      <div>\n        <h2 id=\"cloud-artifact-share-title\" className=\"text-sm font-semibold text-foreground\">Public link</h2>\n        <p className=\"mt-1 text-sm text-muted-foreground\">\n          {link\n            ? 'Anyone with this link can open the page. Turning it off stops the link right away.'\n            : 'Only members of this workspace can open this page.'}\n        </p>\n      </div>\n      {link ? (\n        <div className=\"flex flex-col gap-2 sm:flex-row sm:items-center\">\n          <Input readOnly value={link.url} aria-label=\"Public link\" className=\"min-w-0 flex-1 text-sm\" onFocus={(event) => event.currentTarget.select()} />\n          <div className=\"flex shrink-0 gap-2\">\n            <CopyButton text={link.url} label=\"Copy link\" copiedLabel=\"Copied\" />\n            {canShare && (\n              <Button type=\"button\" variant=\"outline\" size=\"sm\" disabled={busy} onClick={() => void revoke()}>\n                {busy ? 'Turning off…' : 'Turn off link'}\n              </Button>\n            )}\n          </div>\n        </div>\n      ) : canShare ? (\n        <div>\n          <Button type=\"button\" size=\"sm\" disabled={busy} onClick={() => void create()}>\n            {busy ? 'Creating…' : 'Create public link'}\n          </Button>\n        </div>\n      ) : (\n        <p className=\"text-sm text-muted-foreground\">Editors and owners can share it.</p>\n      )}\n      {error && <p role=\"alert\" className=\"text-sm text-destructive\">{error}</p>}\n    </section>\n  )\n}\n"],"mappings":";;;;;;;AAKA,SAAS,gBAAgB;AACzB,SAAS,QAAQ,YAAY,aAAa;AActC,cAoDE,YApDF;AAPG,SAAS,mBAAmB,EAAE,KAAK,OAAO,UAAU,GAKxD;AACD,SACE;AAAA,IAAC;AAAA;AAAA,MACC;AAAA,MACA;AAAA,MACA,WAAW,aAAa;AAAA,MACxB,SAAS;AAAA,MACT,gBAAe;AAAA,MACf,OAAM;AAAA;AAAA,EACR;AAEJ;AAkBO,SAAS,wBAAwB,EAAE,MAAM,SAAS,UAAU,UAAU,SAAS,GAAiC;AACrH,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,OAAO;AACxC,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AAEtD,QAAM,SAAS,YAAY;AACzB,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,UAAM,UAAU,MAAM,SAAS;AAC/B,YAAQ,KAAK;AACb,QAAI,QAAQ,UAAW,SAAQ,QAAQ,KAAK;AAAA,QACvC,UAAS,QAAQ,OAAO;AAAA,EAC/B;AACA,QAAM,SAAS,YAAY;AACzB,QAAI,CAAC,KAAM;AACX,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,UAAM,UAAU,MAAM,SAAS,IAAI;AACnC,YAAQ,KAAK;AACb,QAAI,QAAQ,UAAW,SAAQ,IAAI;AAAA,QAC9B,UAAS,QAAQ,OAAO;AAAA,EAC/B;AAEA,SACE,qBAAC,aAAQ,mBAAgB,8BAA6B,WAAU,+BAC9D;AAAA,yBAAC,SACC;AAAA,0BAAC,QAAG,IAAG,8BAA6B,WAAU,yCAAwC,yBAAW;AAAA,MACjG,oBAAC,OAAE,WAAU,sCACV,iBACG,uFACA,sDACN;AAAA,OACF;AAAA,IACC,OACC,qBAAC,SAAI,WAAU,mDACb;AAAA,0BAAC,SAAM,UAAQ,MAAC,OAAO,KAAK,KAAK,cAAW,eAAc,WAAU,0BAAyB,SAAS,CAAC,UAAU,MAAM,cAAc,OAAO,GAAG;AAAA,MAC/I,qBAAC,SAAI,WAAU,uBACb;AAAA,4BAAC,cAAW,MAAM,KAAK,KAAK,OAAM,aAAY,aAAY,UAAS;AAAA,QAClE,YACC,oBAAC,UAAO,MAAK,UAAS,SAAQ,WAAU,MAAK,MAAK,UAAU,MAAM,SAAS,MAAM,KAAK,OAAO,GAC1F,iBAAO,sBAAiB,iBAC3B;AAAA,SAEJ;AAAA,OACF,IACE,WACF,oBAAC,SACC,8BAAC,UAAO,MAAK,UAAS,MAAK,MAAK,UAAU,MAAM,SAAS,MAAM,KAAK,OAAO,GACxE,iBAAO,mBAAc,sBACxB,GACF,IAEA,oBAAC,OAAE,WAAU,iCAAgC,8CAAgC;AAAA,IAE9E,SAAS,oBAAC,OAAE,MAAK,SAAQ,WAAU,4BAA4B,iBAAM;AAAA,KACxE;AAEJ;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.60.195",
+  "version": "0.60.197",
   "packageManager": "pnpm@11.24.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [
@@ -433,6 +433,11 @@
       "import": "./dist/workspace-apps/index.js",
       "default": "./dist/workspace-apps/index.js"
     },
+    "./workspace-apps/react": {
+      "types": "./dist/workspace-apps/react.d.ts",
+      "import": "./dist/workspace-apps/react.js",
+      "default": "./dist/workspace-apps/react.js"
+    },
     "./workspace-react": {
       "types": "./dist/workspace-react/index.d.ts",
       "import": "./dist/workspace-react/index.js",