@xopcai/xopc 0.0.272 → 0.0.273

package/dist/src/browser/providers/browser-ext-install.js

@@ -14,6 +14,7 @@ import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { readFile, readdir, rm } from "node:fs/promises";
+import AdmZip from "adm-zip";
 //#region src/browser/providers/browser-ext-install.ts
 /**
 * Install bundled Chrome extension artifacts into {resolveBinDir()}/browser-ext/.
@@ -134,6 +135,20 @@ async function resolveBundledBrowserExtDir() {
 	}
 	return null;
 }
+/** Build a portable archive for installing the bundled extension on another computer. */
+async function createBrowserExtensionArchive() {
+	const bundled = await resolveBundledBrowserExtDir();
+	if (!bundled) throw new Error("Bundled browser extension not found. Reinstall or rebuild xopc.");
+	const root = "xopc-browser-extension";
+	const zip = new AdmZip();
+	zip.addLocalFile(join(bundled.dir, "manifest.json"), root);
+	zip.addLocalFolder(join(bundled.dir, "dist"), `${root}/dist`);
+	zip.addLocalFolder(join(bundled.dir, "icons"), `${root}/icons`);
+	return {
+		filename: `xopc-browser-extension-${PACKAGE_VERSION}.zip`,
+		data: zip.toBuffer()
+	};
+}
 function computeNeedsRefresh(params) {
 	if (params.force) return true;
 	if (!params.installedPath || !validateBrowserExtLayout(params.installedPath)) return true;
@@ -471,4 +486,4 @@ async function openBrowserExtensionInstallUi(opts) {
 	};
 }
 //#endregion
-export { BROWSER_EXT_REQUIRED_FILES, browserExtContentHash, browserExtDoctor, browserNativeHostDoctor, browserNativeManifestDirectories, computeNeedsRefresh, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, installBrowserNativeMessagingHost, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, resolveWindowsExtensionManager, validateBrowserExtLayout };
+export { BROWSER_EXT_REQUIRED_FILES, browserExtContentHash, browserExtDoctor, browserNativeHostDoctor, browserNativeManifestDirectories, computeNeedsRefresh, createBrowserExtensionArchive, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, installBrowserNativeMessagingHost, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, resolveWindowsExtensionManager, validateBrowserExtLayout };

package/dist/src/cli/commands/gateway/run-foreground.js

@@ -69,10 +69,13 @@ async function runGatewayFromCliOptions(options, ctx) {
 	const { resolveGatewayAuth, assertGatewayAuthConfigured } = await import("../../../gateway/auth.js");
 	const { assertGatewayRuntimeConfig } = await import("../../../gateway/runtime-config.js");
 	let auth = resolveGatewayAuth({ authConfig: effectiveConfig.gateway?.auth });
-	if (typeof options.token === "string" && options.token.trim().length > 0) auth = {
-		mode: "token",
-		token: options.token.trim()
-	};
+	if (typeof options.token === "string" && options.token.trim().length > 0) {
+		auth = {
+			mode: "token",
+			token: options.token.trim()
+		};
+		process.env.XOPC_GATEWAY_TOKEN = auth.token;
+	}
 	try {
 		assertGatewayAuthConfigured(auth);
 		assertGatewayRuntimeConfig({
@@ -126,7 +129,7 @@ async function runGatewayFromCliOptions(options, ctx) {
 			});
 			await server.start();
 			const displayHost = bindHost === "0.0.0.0" ? "localhost" : bindHost;
-			const token = options.token || config?.gateway?.auth?.token;
+			const token = auth.mode === "token" ? auth.token : void 0;
 			console.log("✅ Gateway started");
 			console.log(`   URL: http://${displayHost}:${port}`);
 			if (token) console.log(`   Token: ${token.slice(0, 8)}...${token.slice(-8)}`);

package/dist/src/cli/commands/gateway/service.js

@@ -9,8 +9,9 @@ init_paths();
 * Create service install subcommand - actually installs the OS service
 */
 function createInstallCommand() {
-	return new Command("install").description("Install gateway as OS service (LaunchAgent / systemd / Task)").option("--port <port>", "Gateway port").option("--token <token>", "Gateway auth token").option("--force", "Force reinstall if already installed").option("--json", "Output JSON").action(async (options) => {
+	return new Command("install").description("Install gateway as OS service (LaunchAgent / systemd / Task)").option("--port <port>", "Gateway port").option("--token <token>", "Gateway auth token").option("--force", "Force reinstall if already installed").option("--json", "Output JSON").action(async (options, command) => {
 		const configPath = getContextWithOpts().configPath || resolveConfigPath();
+		const force = options.force === true || command.optsWithGlobals().force === true;
 		const [{ loadConfig }, { resolveGatewayService, isDaemonAvailableAsync, getPlatformName }, { buildGatewayInstallArgs }] = await Promise.all([
 			import("../../../config/index.js"),
 			import("../../../daemon/service.js"),
@@ -30,7 +31,7 @@ function createInstallCommand() {
 		}
 		const service = await resolveGatewayService();
 		const loaded = await service.isLoaded({ env: process.env });
-		if (loaded && !options.force) {
+		if (loaded && !force) {
 			if (options.json) console.log(JSON.stringify({
 				ok: true,
 				result: "already-installed"
@@ -38,7 +39,7 @@ function createInstallCommand() {
 			else console.log("ℹ️  Service already installed. Use --force to reinstall.");
 			return;
 		}
-		if (loaded && options.force) try {
+		if (loaded && force) try {
 			await service.uninstall({ env: process.env });
 		} catch {}
 		const installArgs = buildGatewayInstallArgs({

package/dist/src/cli/commands/gateway/token.js

@@ -4,6 +4,17 @@ import crypto from "crypto";
 import { Command } from "commander";
 //#region src/cli/commands/gateway/token.ts
 init_paths();
+async function readInstalledServiceToken() {
+	try {
+		const { isDaemonAvailableAsync, resolveGatewayService } = await import("../../../daemon/service.js");
+		if (!await isDaemonAvailableAsync()) return void 0;
+		const service = await resolveGatewayService();
+		if (!await service.isLoaded({ env: process.env })) return void 0;
+		return (await service.readCommand(process.env))?.environment?.XOPC_GATEWAY_TOKEN?.trim() || void 0;
+	} catch {
+		return;
+	}
+}
 /**
 * Create the token subcommand for managing gateway authentication token.
 */
@@ -14,6 +25,7 @@ function createTokenCommand() {
 		const log = createLogger("GatewayTokenCommand");
 		try {
 			const config = loadConfig(configPath);
+			const installedServiceToken = await readInstalledServiceToken();
 			if (options.generate) {
 				const newToken = crypto.randomBytes(24).toString("hex");
 				config.gateway = config.gateway || {};
@@ -31,9 +43,16 @@ function createTokenCommand() {
 				console.log("");
 				console.log("Or set environment variable:");
 				console.log(`   export XOPC_GATEWAY_TOKEN=${newToken}`);
+				if (installedServiceToken && installedServiceToken !== newToken) {
+					console.log("");
+					console.log("⚠️  The installed gateway service still uses its previous token.");
+					console.log("   Run `xopc gateway service install --force`, then restart the service.");
+				}
 				process.exit(0);
 			} else {
-				const currentToken = config.gateway?.auth?.token;
+				const configToken = config.gateway?.auth?.token?.trim();
+				const environmentToken = process.env.XOPC_GATEWAY_TOKEN?.trim();
+				const currentToken = installedServiceToken || environmentToken || configToken;
 				if ((config.gateway?.auth?.mode || "token") === "none") {
 					console.log("⚠️  Gateway authentication is disabled (mode: none)");
 					console.log("");
@@ -46,6 +65,14 @@ function createTokenCommand() {
 					console.log(`   ${currentToken}`);
 					console.log("");
 					console.log(`Preview: ${tokenPreview}`);
+					if (installedServiceToken) console.log("Source: installed gateway service");
+					else if (environmentToken) console.log("Source: XOPC_GATEWAY_TOKEN");
+					else console.log(`Source: ${configPath}`);
+					if (installedServiceToken && configToken && installedServiceToken !== configToken) {
+						console.log("");
+						console.log("⚠️  Token drift detected: the installed service token overrides the config token.");
+						console.log("   Run `xopc gateway service install --force`, then restart the service to sync.");
+					}
 					console.log("");
 					console.log("Usage:");
 					console.log(`   xopc gateway --token ${currentToken}`);

package/dist/src/gateway/device-routes.js

@@ -19,9 +19,6 @@ function routeId(kind, url) {
 function resolveSecureDeviceRoutes(config) {
 	const tunnelStatus = getTunnelService().getStatus();
 	const candidates = [{
-		kind: "custom-https",
-		url: secureUrl(resolveReverseProxyPublicUrl(config))
-	}, {
 		kind: "xopc-secure-link",
 		url: tunnelStatus.state === "connected" ? secureUrl(tunnelStatus.publicUrl) : null
 	}];
@@ -30,6 +27,10 @@ function resolveSecureDeviceRoutes(config) {
 		kind: "tailscale",
 		url: secureUrl(`https://${tailscale.hostname}`)
 	});
+	candidates.push({
+		kind: "custom-https",
+		url: secureUrl(resolveReverseProxyPublicUrl(config))
+	});
 	const seen = /* @__PURE__ */ new Set();
 	const routes = [];
 	for (const candidate of candidates) {

package/dist/src/gateway/hono/routes/browser.js

@@ -49,6 +49,10 @@ function isLocalOwnerRequest(c, service) {
 		return false;
 	}
 }
+function isOwnerRequest(c) {
+	const principal = getGatewayPrincipal(c);
+	return principal.kind === "owner" || principal.kind === "trusted-proxy";
+}
 function chromeDevicePrincipal(c) {
 	const principal = getGatewayPrincipal(c);
 	if (principal.kind !== "device" || !principal.deviceId) return void 0;
@@ -235,6 +239,28 @@ function registerBrowserRoutes(authenticated, deps) {
 			}, 500);
 		}
 	});
+	authenticated.get("/api/browser/extension/archive", strictRateLimitMiddleware, async (c) => {
+		if (!isOwnerRequest(c)) return c.json({
+			ok: false,
+			error: "Owner access required."
+		}, 403);
+		try {
+			const { createBrowserExtensionArchive } = await import("../../../browser/providers/browser-ext-install.js");
+			const archive = await createBrowserExtensionArchive();
+			const body = new Uint8Array(archive.data.byteLength);
+			body.set(archive.data);
+			return c.body(body, 200, {
+				"Content-Type": "application/zip",
+				"Content-Disposition": `attachment; filename="${archive.filename}"`,
+				"Cache-Control": "private, no-store"
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 500);
+		}
+	});
 	authenticated.post("/api/browser/extension/open", strictRateLimitMiddleware, async (c) => {
 		if (!isLocalOwnerRequest(c, service)) return c.json({
 			ok: false,

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -8,7 +8,6 @@ import "../../browser/extension-identity.js";
 import crypto from "node:crypto";
 //#region src/storage/sqlite/device-pairing-approval.ts
 const PROOF_WINDOW_MS = 5 * 6e4;
-const APPROVAL_WINDOW_MS = 2 * 6e4;
 const RECOVERY_WINDOW_MS = 1440 * 6e4;
 var DevicePairingError = class extends Error {
 	constructor(code, status = 409) {
@@ -105,9 +104,8 @@ function submitDevicePairingRequest(body, now = Date.now()) {
 		}
 		if (setup.consumed_at !== null) return fail("PAIRING_CANCELLED");
 		if (setup.expires_at <= now) return fail("PAIRING_EXPIRED");
-		const expiresAt = Math.min(setup.expires_at, now + APPROVAL_WINDOW_MS);
 		db.prepare(`INSERT INTO device_pairing_requests (request_id, pairing_id, device_json, status,
-      confirmation_code, expires_at, recovery_until, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(String(body.requestId), setup.pairing_id, deviceJson, autoApprove ? "approved" : "pending", crypto.randomInt(0, 1e6).toString().padStart(6, "0"), expiresAt, setup.expires_at + RECOVERY_WINDOW_MS, now);
+      confirmation_code, expires_at, recovery_until, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`).run(String(body.requestId), setup.pairing_id, deviceJson, autoApprove ? "approved" : "pending", crypto.randomInt(0, 1e6).toString().padStart(6, "0"), setup.expires_at, setup.expires_at + RECOVERY_WINDOW_MS, now);
 		return statusFromRow(requestRow(String(body.requestId), now), now);
 	});
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.272",
+  "version": "0.0.273",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -166,10 +166,10 @@
     "vitest": "4.1.5",
     "vue": "^3.5.35",
     "@xopcai/browser-control-contract": "0.1.0",
-    "@xopcai/realtime-client": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0",
     "@xopcai/gateway-contract": "0.0.0",
-    "@xopcai/endpoint-tools-protocol": "0.0.0"
+    "@xopcai/endpoint-tools-protocol": "0.0.0",
+    "@xopcai/realtime-client": "0.0.0",
+    "@xopcai/realtime-protocol": "0.0.0"
   },
   "scripts": {
     "assets:brand": "node scripts/generate-brand-assets.mjs",

package/dist/browser-ext/dist/pairing-handoff.js

@@ -1,51 +0,0 @@
-const messageType = "browser/stage-pairing-invite";
-function hasPairingPayload() {
-  return new URLSearchParams(location.hash.slice(1)).has("p");
-}
-async function stage(open) {
-  return chrome.runtime.sendMessage({
-    type: messageType,
-    pairingLink: location.href,
-    open
-  });
-}
-function mountOpenButton() {
-  if (document.getElementById("xopc-browser-pairing-handoff")) return;
-  const host = document.createElement("div");
-  host.id = "xopc-browser-pairing-handoff";
-  const root = host.attachShadow({ mode: "closed" });
-  const button = document.createElement("button");
-  button.type = "button";
-  button.textContent = "Open xopc extension";
-  button.style.cssText = [
-    "position:fixed",
-    "right:24px",
-    "bottom:24px",
-    "z-index:2147483647",
-    "border:0",
-    "border-radius:10px",
-    "padding:12px 18px",
-    "background:#2563eb",
-    "color:#fff",
-    "font:600 14px/20px system-ui,sans-serif",
-    "box-shadow:0 8px 24px rgba(15,23,42,.24)",
-    "cursor:pointer"
-  ].join(";");
-  button.addEventListener("click", () => {
-    button.disabled = true;
-    button.textContent = "Opening…";
-    void stage(true).then((result) => {
-      button.textContent = result.ok ? "Opened — approve in Gateway" : result.error || "Could not open xopc";
-      button.disabled = false;
-    }).catch(() => {
-      button.textContent = "Could not open xopc";
-      button.disabled = false;
-    });
-  });
-  root.append(button);
-  document.documentElement.append(host);
-}
-if (hasPairingPayload()) {
-  void stage(false).catch(() => void 0);
-  mountOpenButton();
-}

package/dist/gateway/static/root/assets/device-pairing-wizard-CPth92s6.js

@@ -1 +0,0 @@
-import{i as e,n as t}from"./rolldown-runtime-aKtaBQYM.js";import{a as n,n as r,t as i}from"./vendor-react-BOUWij0V.js";import{a,i as o,o as s,r as c,s as l,t as u}from"./dist-CpzYSoz7.js";import{t as d}from"./circle-check-C23XjkUj.js";import{t as f}from"./x-B_N4OPjy.js";import{t as p}from"./messages-DH_HCgmw.js";import{n as m}from"./locale-store-CRNble2Z.js";import{t as h}from"./cn-JdwAhgNB.js";import{i as g}from"./vendor-swr-BIWyz7Rc.js";import{t as _}from"./button-B11EPpor.js";import{t as v}from"./skeleton-BwbyijEw.js";import{i as y,o as b}from"./settings-shell-dialog-layer-BU3UuiJr.js";import{B as x,Ic as S,Mi as C,R as w,St as T,ac as E,co as D,wt as O,xt as k,z as A}from"./index-C6PmD0cK.js";import{c as j,f as M,g as N,h as P,i as F,l as I,n as L,o as R,p as z,r as B,t as V,u as ee}from"./tunnel-api-CWsRPM84.js";import{t as H}from"./browser-BLJWD7WI.js";var U=e(n(),1),W=r(),G=e(H(),1),K={width:216,margin:4,errorCorrectionLevel:`M`,color:{dark:`#000000ff`,light:`#ffffffff`}};async function te(e){let t=await G.toString(e,{...K,type:`svg`});return`data:image/svg+xml;charset=utf-8,${encodeURIComponent(t)}`}var q=i();function ne(){let e=p(m(e=>e.language)),t=e.endpointToolsSettings.deviceAccess.flow,n=e.tunnelSettings,{data:r,error:i,mutate:a}=g(`tunnel-status`,V,{refreshInterval:1500}),[o,s]=(0,U.useState)(!1),[c,l]=(0,U.useState)(!1),[u,d]=(0,U.useState)(!0),[f,h]=(0,U.useState)(`idle`),[y,b]=(0,U.useState)(!1),[S,C]=(0,U.useState)(``),E=(0,U.useRef)(!0);(0,U.useEffect)(()=>(E.current=!0,()=>{E.current=!1}),[]);let D=async()=>{if(!r)return;if(r.consentRequired&&!o){l(!0);return}let e=r.registrationSecret?.configured?null:x(),t,n=!1;b(!1);try{if(r.consentRequired&&await F(),!r.registrationSecret?.configured){h(`authorizing`);let r=sessionStorage.getItem(`device-pairing-oauth`),i=r?JSON.parse(r):null;t=i&&i.expiresAt>Date.now()?i.sessionId:(await O(`xopc-tunnel`)).sessionId,sessionStorage.setItem(`device-pairing-oauth`,JSON.stringify({sessionId:t,expiresAt:i&&i.expiresAt>Date.now()?i.expiresAt:Date.now()+5*6e4}));let a=``,o=Date.now()+5*6e4,s=!1;for(;E.current&&Date.now()<o;){let r=await T(t);if(r.authUrl&&r.authUrl!==a&&(a=r.authUrl,await A(a,e)||C(a)),r.status===`completed`){s=!0,n=!0;break}if(r.status===`failed`||r.status===`cancelled`)throw Error(`Authorization cancelled`);await new Promise(e=>setTimeout(e,1e3))}if(!E.current)return;if(!s)throw Error(`Authorization expired`);await B()}if(!E.current)return;h(`starting`),await R(),u&&await L({autoStart:!0}),await a(),n=!0}catch{n=!0,E.current&&b(!0)}finally{w(e),n&&(sessionStorage.removeItem(`device-pairing-oauth`),t&&k(t).catch(()=>{})),E.current&&(h(`idle`),C(``))}};if(!r&&!i)return(0,q.jsxs)(`div`,{className:`space-y-5`,children:[(0,q.jsx)(v,{className:`h-5 w-4/5`}),(0,q.jsx)(v,{className:`h-24 w-full`})]});let j=f===`starting`||r?.state===`connecting`||r?.state===`reconnecting`;return(0,q.jsxs)(`div`,{className:`flex min-h-full flex-col`,children:[(0,q.jsx)(`p`,{className:`text-sm leading-relaxed text-fg-muted`,children:j?t.preparingHint:f===`authorizing`?t.authorizing:t.enableHint}),S&&f===`authorizing`?(0,q.jsx)(`a`,{href:S,target:`_blank`,rel:`noopener noreferrer`,className:`mt-4 inline-flex min-h-11 items-center text-sm text-accent`,children:t.openAuthorization}):null,j?(0,q.jsxs)(`div`,{className:`mt-8 space-y-3`,"aria-label":t.preparing,children:[(0,q.jsx)(v,{className:`h-2 w-full`}),(0,q.jsx)(`p`,{className:`text-sm text-fg-muted`,children:t.preparing})]}):null,(c||r?.consentRequired)&&f===`idle`?(0,q.jsxs)(`div`,{className:`mt-6 space-y-4`,children:[(0,q.jsxs)(`details`,{open:c,className:`text-sm text-fg-muted`,children:[(0,q.jsx)(`summary`,{className:`cursor-pointer py-2`,children:t.details}),(0,q.jsx)(`p`,{className:`mt-2`,children:n.consentIntro}),(0,q.jsx)(`ul`,{className:`mt-3 list-disc space-y-2 pl-5`,children:[n.consentBullet1,n.consentBullet2,n.consentBullet3].map(e=>(0,q.jsx)(`li`,{children:e},e))})]}),(0,q.jsxs)(`label`,{className:`flex items-start gap-3 text-sm text-fg`,children:[(0,q.jsx)(`input`,{type:`checkbox`,checked:o,onChange:e=>s(e.target.checked),className:`mt-1 size-4 accent-accent`}),n.consentCheckbox]})]}):null,y||i||r?.state===`error`?(0,q.jsx)(`p`,{role:`alert`,className:`mt-4 text-sm text-danger`,children:t.failed}):null,(0,q.jsx)(`div`,{className:`flex-1`}),(0,q.jsxs)(`label`,{className:`my-5 flex items-center gap-3 text-sm text-fg-muted`,children:[(0,q.jsx)(`input`,{type:`checkbox`,checked:u,disabled:f!==`idle`,onChange:e=>d(e.target.checked),className:`size-4 accent-accent`}),t.autoStart]}),(0,q.jsx)(_,{className:`w-full`,variant:`primary`,disabled:!r||f!==`idle`||j||c&&!o,onClick:()=>void D(),children:f===`authorizing`?t.authorizing:j?t.preparing:y?t.retry:t.enable}),i&&!r?(0,q.jsx)(_,{variant:`ghost`,onClick:()=>void a(),children:t.retry}):null]})}var J=t({DevicePairingWizard:()=>Y});function Y(e){let t=(0,W.c)(15),{open:n,onOpenChange:r,onPaired:i,targetKind:a}=e,[o,s]=(0,U.useState)(a),c,l;t[0]===a?(c=t[1],l=t[2]):(c=()=>{s(a)},l=[a],t[0]=a,t[1]=c,t[2]=l),(0,U.useEffect)(c,l);let d;t[3]!==r||t[4]!==a?(d=e=>{e||s(a),r(e)},t[3]=r,t[4]=a,t[5]=d):d=t[5];let f=d,p;t[6]!==f||t[7]!==i||t[8]!==n||t[9]!==o?(p=n?o?(0,q.jsx)(re,{targetKind:o,onClose:()=>f(!1),onPaired:i}):(0,q.jsx)(X,{onChoose:s,onClose:()=>f(!1)}):null,t[6]=f,t[7]=i,t[8]=n,t[9]=o,t[10]=p):p=t[10];let m;return t[11]!==f||t[12]!==n||t[13]!==p?(m=(0,q.jsx)(u,{open:n,onOpenChange:f,children:p}),t[11]=f,t[12]=n,t[13]=p,t[14]=m):m=t[14],m}function X(e){let t=(0,W.c)(45),{onChoose:n,onClose:r}=e,i=m(Z),u;t[0]===i?u=t[1]:(u=p(i),t[0]=i,t[1]=u);let d=u.endpointToolsSettings.deviceAccess,g;t[2]===Symbol.for(`react.memo_cache_sentinel`)?(g=(0,q.jsx)(a,{className:h(`fixed inset-0 bg-scrim backdrop-blur-[1px]`,b)}),t[2]=g):g=t[2];let _;t[3]===Symbol.for(`react.memo_cache_sentinel`)?(_=h(`fixed left-1/2 top-1/2 flex h-[min(460px,calc(100dvh-48px))] w-[min(520px,calc(100vw-32px))] -translate-x-1/2 -translate-y-1/2 flex-col overflow-hidden rounded-xl border border-edge bg-surface-panel shadow-popover`,y),t[3]=_):_=t[3];let v;t[4]===Symbol.for(`react.memo_cache_sentinel`)?(v=(0,q.jsx)(`span`,{className:`text-lg font-semibold tracking-tight text-fg`,children:`xopc`}),t[4]=v):v=t[4];let x;t[5]===Symbol.for(`react.memo_cache_sentinel`)?(x=(0,q.jsx)(f,{className:`size-4`}),t[5]=x):x=t[5];let C;t[6]!==d.cancel||t[7]!==r?(C=(0,q.jsxs)(`header`,{className:`flex shrink-0 items-center justify-between border-b border-edge-subtle px-6 py-3`,children:[v,(0,q.jsx)(`button`,{type:`button`,className:`flex size-10 items-center justify-center rounded-lg text-fg-muted hover:bg-surface-hover`,"aria-label":d.cancel,onClick:r,children:x})]}),t[6]=d.cancel,t[7]=r,t[8]=C):C=t[8];let w;t[9]===d.chooseTitle?w=t[10]:(w=(0,q.jsx)(l,{className:`text-xl font-semibold tracking-tight text-fg`,children:d.chooseTitle}),t[9]=d.chooseTitle,t[10]=w);let T;t[11]===d.chooseHint?T=t[12]:(T=(0,q.jsx)(o,{className:`mt-2 text-sm leading-relaxed text-fg-muted`,children:d.chooseHint}),t[11]=d.chooseHint,t[12]=T);let D;t[13]===n?D=t[14]:(D=()=>n(`mobile`),t[13]=n,t[14]=D);let O;t[15]===Symbol.for(`react.memo_cache_sentinel`)?(O=(0,q.jsx)(E,{className:`size-5 text-accent`}),t[15]=O):O=t[15];let k;t[16]===d.mobileTitle?k=t[17]:(k=(0,q.jsx)(`span`,{className:`mt-4 block text-sm font-semibold text-fg`,children:d.mobileTitle}),t[16]=d.mobileTitle,t[17]=k);let A;t[18]===d.mobileHint?A=t[19]:(A=(0,q.jsx)(`span`,{className:`mt-1 block text-xs leading-5 text-fg-muted`,children:d.mobileHint}),t[18]=d.mobileHint,t[19]=A);let j;t[20]!==k||t[21]!==A||t[22]!==D?(j=(0,q.jsxs)(`button`,{type:`button`,className:`rounded-xl border border-edge bg-surface-base p-5 text-left hover:border-edge-strong hover:bg-surface-hover`,onClick:D,children:[O,k,A]}),t[20]=k,t[21]=A,t[22]=D,t[23]=j):j=t[23];let M;t[24]===n?M=t[25]:(M=()=>n(`browser`),t[24]=n,t[25]=M);let N;t[26]===Symbol.for(`react.memo_cache_sentinel`)?(N=(0,q.jsx)(S,{className:`size-5 text-accent`}),t[26]=N):N=t[26];let P;t[27]===d.browserTitle?P=t[28]:(P=(0,q.jsx)(`span`,{className:`mt-4 block text-sm font-semibold text-fg`,children:d.browserTitle}),t[27]=d.browserTitle,t[28]=P);let F;t[29]===d.browserHint?F=t[30]:(F=(0,q.jsx)(`span`,{className:`mt-1 block text-xs leading-5 text-fg-muted`,children:d.browserHint}),t[29]=d.browserHint,t[30]=F);let I;t[31]!==M||t[32]!==P||t[33]!==F?(I=(0,q.jsxs)(`button`,{type:`button`,className:`rounded-xl border border-edge bg-surface-base p-5 text-left hover:border-edge-strong hover:bg-surface-hover`,onClick:M,children:[N,P,F]}),t[31]=M,t[32]=P,t[33]=F,t[34]=I):I=t[34];let L;t[35]!==j||t[36]!==I?(L=(0,q.jsxs)(`div`,{className:`mt-7 grid gap-3 sm:grid-cols-2`,children:[j,I]}),t[35]=j,t[36]=I,t[37]=L):L=t[37];let R;t[38]!==L||t[39]!==w||t[40]!==T?(R=(0,q.jsxs)(`div`,{className:`min-h-0 flex-1 overflow-y-auto px-8 py-7`,children:[w,T,L]}),t[38]=L,t[39]=w,t[40]=T,t[41]=R):R=t[41];let z;return t[42]!==R||t[43]!==C?(z=(0,q.jsxs)(s,{children:[g,(0,q.jsxs)(c,{className:_,children:[C,R]})]}),t[42]=R,t[43]=C,t[44]=z):z=t[44],z}function Z(e){return e.language}function re({targetKind:e,onClose:t,onPaired:n}){let r=p(m(e=>e.language)),i=r.endpointToolsSettings.deviceAccess,u=i.flow,x=g(`device-pairing-readiness`,M,{refreshInterval:1500}),[S,w]=(0,U.useState)(),[T,E]=(0,U.useState)(!1),[O,k]=(0,U.useState)(!1),[A,F]=(0,U.useState)(Date.now()),[L,R]=(0,U.useState)(null),B=(0,U.useRef)(!0),V=(0,U.useRef)(null),H=(0,U.useRef)(!1),W=(0,U.useRef)(!1),G=g(S?[`device-pairing-setup`,S.id]:null,()=>z(S.id),{refreshInterval:1500}),K=G.data?.request,J=K?.status===`completed`,Y=g(J&&window.electronAPI?.system?`system-behavior`:null,()=>window.electronAPI.system.getBehavior()),X=D(()=>te(S?.universalLink??``),[S?.universalLink],{enabled:!!(S&&e===`mobile`),initial:null,errorData:null});(0,U.useEffect)(()=>{B.current=!0;let e=setInterval(()=>F(Date.now()),1e3);return()=>{B.current=!1,clearInterval(e),V.current&&j(V.current).catch(()=>{})}},[]);let Z=(0,U.useCallback)(async()=>{if(!H.current){H.current=!0,k(!0),E(!1);try{V.current&&await j(V.current),V.current=null,w(void 0);let t=await I(e);if(t.kind===`ready`){if(!B.current){await j(t.setup.id);return}V.current=t.setup.id,w(t.setup)}else await x.mutate()}catch{B.current&&E(!0)}finally{H.current=!1,B.current&&k(!1)}}},[x,e]);(0,U.useEffect)(()=>{x.data?.ready&&!S&&!T&&!H.current&&Z()},[x.data,S,T,Z]),(0,U.useEffect)(()=>{J&&!W.current&&(W.current=!0,n?.())},[J,n]);let re=async e=>{if(K){k(!0),E(!1);try{await ee(K,e),await G.mutate()}catch{E(!0),await G.mutate()}finally{B.current&&k(!1)}}},ie=(0,U.useRef)(0);(0,U.useEffect)(()=>{G.data&&(ie.current=G.data.serverTime-Date.now())},[G.data]);let Q=A+ie.current,ae=S&&Q>=S.expiresAt&&!K,oe=K&&[`expired`,`rejected`,`cancelled`].includes(K.status),$=e===`mobile`?{connect:i.mobileScan,connectHint:i.mobileScanHint,allowTitle:i.mobileAllowTitle,success:i.mobileSuccess,successHint:i.mobileSuccessHint}:{connect:i.browserConnect,connectHint:i.browserConnectHint,allowTitle:i.browserAllowTitle,success:i.browserSuccess,successHint:i.browserSuccessHint},se=J?$.success:K?.status===`pending`?$.allowTitle:K?.status===`approved`?u.waiting:S?$.connect:u.title;return(0,q.jsxs)(s,{children:[(0,q.jsx)(a,{className:h(`fixed inset-0 bg-scrim backdrop-blur-[1px]`,b)}),(0,q.jsxs)(c,{className:h(`fixed left-1/2 top-1/2 flex h-[min(600px,calc(100dvh-48px))] w-[min(560px,calc(100vw-32px))] -translate-x-1/2 -translate-y-1/2 flex-col overflow-hidden rounded-xl border border-edge bg-surface-panel shadow-popover`,y),children:[(0,q.jsxs)(`header`,{className:`flex shrink-0 items-center justify-between border-b border-edge-subtle px-6 py-3`,children:[(0,q.jsx)(`span`,{className:`text-lg font-semibold tracking-tight text-fg`,children:`xopc`}),(0,q.jsx)(`button`,{type:`button`,className:`flex size-10 items-center justify-center rounded-lg text-fg-muted hover:bg-surface-hover`,"aria-label":u.cancel,onClick:t,children:(0,q.jsx)(f,{className:`size-4`})})]}),(0,q.jsxs)(`div`,{className:`flex min-h-0 flex-1 flex-col overflow-y-auto px-8 py-7`,children:[J?(0,q.jsx)(d,{className:`mb-5 size-7 text-success`}):null,(0,q.jsx)(l,{className:`text-xl font-semibold tracking-tight text-fg`,children:se}),(0,q.jsx)(o,{className:`mt-2 text-sm leading-relaxed text-fg-muted`,children:J?$.successHint:K?K.displayName:S?$.connectHint:u.intro}),T||x.error||G.error||X.error?(0,q.jsx)(`p`,{role:`alert`,className:`mt-4 text-sm text-danger`,children:u.failed}):null,x.data?J?(0,q.jsxs)(q.Fragment,{children:[Y.data?(0,q.jsxs)(`label`,{className:`mt-8 flex items-center justify-between gap-4 border-y border-edge-subtle py-5 text-sm text-fg`,children:[i.background,(0,q.jsx)(`input`,{type:`checkbox`,role:`switch`,"aria-checked":Y.data.runInBackground??!1,disabled:!Y.data.backgroundSupported,checked:Y.data.runInBackground??!1,className:`size-5 accent-accent`,onChange:e=>{window.electronAPI.system.setBehavior({runInBackground:e.target.checked}).then(e=>Y.mutate(e.behavior)).catch(()=>E(!0))}})]}):null,(0,q.jsx)(`p`,{className:`mt-4 text-xs text-fg-muted`,children:i.sleep})]}):oe||ae?(0,q.jsxs)(`div`,{className:`mt-10 space-y-5`,children:[(0,q.jsx)(`p`,{className:`text-sm text-fg-muted`,children:ae||K?.status===`expired`?u.expired:u.declined}),(0,q.jsx)(_,{variant:`primary`,onClick:()=>void Z(),disabled:O,children:u.refresh})]}):K?(0,q.jsxs)(q.Fragment,{children:[(0,q.jsx)(`p`,{className:`mt-2 text-xs text-fg-muted`,children:u.scope}),(0,q.jsxs)(`p`,{className:`mt-10 font-mono text-4xl tracking-[0.16em] text-fg`,"aria-live":`polite`,children:[K.confirmationCode.slice(0,3),` `,K.confirmationCode.slice(3)]}),(0,q.jsx)(`p`,{className:`mt-3 text-xs text-fg-muted`,children:u.compare}),(0,q.jsxs)(`details`,{className:`mt-6 text-xs text-fg-muted`,children:[(0,q.jsx)(`summary`,{className:`cursor-pointer py-2`,children:u.access}),(0,q.jsx)(`p`,{children:u.accessHint})]})]}):S&&e===`mobile`?(0,q.jsxs)(q.Fragment,{children:[(0,q.jsx)(`div`,{className:`my-6 flex justify-center`,children:X.data?(0,q.jsx)(`img`,{src:X.data,alt:i.qrAlt,width:216,height:216,className:`size-[216px] max-w-full rounded-lg bg-white`}):(0,q.jsx)(v,{className:`size-[216px]`})}),(0,q.jsx)(`p`,{className:`text-center text-xs text-fg-muted`,children:S.expiresAt-Q<6e4?`${Math.max(0,Math.ceil((S.expiresAt-Q)/1e3))}s`:u.valid}),(0,q.jsxs)(`details`,{className:`mt-5 text-xs text-fg-muted`,children:[(0,q.jsx)(`summary`,{className:`cursor-pointer py-2`,children:u.fallback}),(0,q.jsx)(C,{text:S.universalLink,labels:{copy:i.copy,copied:i.copied,copyFailed:r.clipboard.copyFailed}})]})]}):S?(0,q.jsxs)(q.Fragment,{children:[(0,q.jsx)(_,{className:`mt-8 w-full`,variant:`primary`,onClick:()=>window.open(S.universalLink,`_blank`,`noopener,noreferrer`),children:i.openBrowserInvitation}),(0,q.jsx)(`p`,{className:`mt-3 text-center text-xs leading-5 text-fg-muted`,children:i.openBrowserInvitationHint}),(0,q.jsx)(`p`,{className:`mt-2 text-center text-xs text-fg-muted`,children:S.expiresAt-Q<6e4?`${Math.max(0,Math.ceil((S.expiresAt-Q)/1e3))}s`:u.valid}),(0,q.jsxs)(`details`,{className:`mt-5 text-xs text-fg-muted`,children:[(0,q.jsx)(`summary`,{className:`cursor-pointer py-2`,children:i.browserInvitationFallback}),(0,q.jsx)(C,{text:S.universalLink,labels:{copy:i.copy,copied:i.copied,copyFailed:r.clipboard.copyFailed}})]})]}):x.data.ready?(0,q.jsx)(`div`,{className:`mt-8`,children:(0,q.jsx)(v,{className:`mx-auto size-[216px]`})}):(0,q.jsxs)(`div`,{className:`mt-6 flex flex-1 flex-col`,children:[L===`tailscale`?(0,q.jsx)(N,{embedded:!0}):L===`https`?(0,q.jsx)(P,{}):L===`choices`?(0,q.jsxs)(`div`,{className:`space-y-3`,children:[(0,q.jsx)(_,{variant:`secondary`,className:`w-full`,onClick:()=>R(`tailscale`),children:i.useTailscale}),(0,q.jsx)(_,{variant:`secondary`,className:`w-full`,onClick:()=>R(`https`),children:i.useOwnHttps})]}):(0,q.jsx)(ne,{}),(0,q.jsx)(_,{variant:`ghost`,className:`mt-3 w-full`,onClick:()=>R(L?null:`choices`),children:L?u.back:u.existing})]}):(0,q.jsxs)(`div`,{className:`mt-8 space-y-4`,children:[(0,q.jsx)(v,{className:`h-5 w-3/4`}),(0,q.jsx)(v,{className:`h-40 w-full`})]})]}),J||K?.status===`pending`||T?(0,q.jsx)(`footer`,{className:`shrink-0 px-8 pb-6`,children:J?(0,q.jsx)(_,{className:`w-full`,variant:`primary`,onClick:t,children:u.done}):K?.status===`pending`?(0,q.jsxs)(`div`,{className:`flex flex-col gap-2`,children:[(0,q.jsx)(_,{className:`w-full`,variant:`primary`,disabled:O,onClick:()=>void re(`approve`),children:u.allow}),(0,q.jsx)(_,{className:`w-full`,variant:`ghost`,disabled:O,onClick:()=>void re(`reject`),children:u.cancel})]}):(0,q.jsx)(_,{className:`w-full`,variant:`primary`,disabled:O,onClick:()=>void Z(),children:u.retry})}):null]})]})}export{J as n,Y as t};