ryco-cli 0.1.24 → 0.1.25

package/dist/client/assets/{workspaceMetadataProjection-BL4sEIL2.js → workspaceMetadataProjection-j3BGlVOB.js}

@@ -1 +1 @@
-import{Y as e,at as t,nt as n,st as r}from"./src-BSuAGqhK.js";import{Nn as i}from"./runtime-Djy96GJd.js";function a(e){return typeof e==`object`&&!!e}function o(e){return typeof e==`string`&&e.length>0}function s(e,t){return a(e)&&e.environmentId===t}function c(e,t){if(!a(e)||e.schemaVersion!==1||!o(e.environmentId))return!1;let n=e.environmentId;if(t!==void 0&&n!==t||typeof e.capturedAt!=`number`||!Number.isFinite(e.capturedAt)||!Array.isArray(e.projects)||!Array.isArray(e.worktrees)||!Array.isArray(e.threads))return!1;let r=new Set;for(let t of e.projects){if(!s(t,n)||!o(t.id)||!o(t.name)||typeof t.cwd!=`string`||r.has(t.id))return!1;r.add(t.id)}let i=new Set;for(let t of e.worktrees){if(!s(t,n)||!o(t.id)||!o(t.projectId)||!r.has(t.projectId)||i.has(t.id))return!1;i.add(t.id)}let c=new Set;for(let t of e.threads){if(!s(t,n)||!o(t.id)||!o(t.projectId)||!r.has(t.projectId)||c.has(t.id)||t.worktreeId!=null&&!i.has(t.worktreeId))return!1;c.add(t.id)}return!0}function l(e){return new TextEncoder().encode(JSON.stringify(e)).byteLength}function u(e){return JSON.stringify([e.hubOrigin.replace(/\/+$/g,``).toLowerCase(),e.accountId,e.environmentId])}function d(e){let t=e.maxEntries??32,n=e.maxBytes??16777216;if(e.incoming.payloadBytes>n||t<1)return{accepted:!1,evict:[]};let r=u(e.incoming.namespace),i=e.existing.filter(e=>u(e.namespace)!==r).toSorted((e,t)=>e.updatedAt-t.updatedAt||u(e.namespace).localeCompare(u(t.namespace))),a=i.length+1,o=i.reduce((e,t)=>e+t.payloadBytes,0)+e.incoming.payloadBytes,s=[];for(let e of i){if(a<=t&&o<=n)break;s.push(e.namespace),--a,o-=e.payloadBytes}return{accepted:a<=t&&o<=n,evict:s}}function f(t,n=Date.now(),r=!1){let a=i.getState().environmentStateById[t];if(!a?.bootstrapComplete)return null;let o={schemaVersion:1,environmentId:t,capturedAt:n,projects:a.projectIds.flatMap(e=>{let n=a.projectById[e];return n?[{environmentId:t,id:n.id,name:n.name,cwd:n.cwd,repositoryIdentity:n.repositoryIdentity??null,createdAt:n.createdAt??null,updatedAt:n.updatedAt??null}]:[]}),worktrees:(a.worktreeIds??[]).flatMap(e=>{let n=a.worktreeById?.[e];return n?[{environmentId:t,id:n.id,projectId:n.projectId,title:n.title??null,branch:n.branch,worktreePath:n.worktreePath,workItemLabel:n.workItemKey??n.prTitle??n.issueTitle??null,pullRequestNumber:n.prNumber,archivedAt:n.archivedAt,updatedAt:n.updatedAt}]:[]}),threads:a.threadIds.flatMap(n=>{let i=a.sidebarThreadSummaryById[n];return i?[{environmentId:t,id:i.id,projectId:i.projectId,worktreeId:i.worktreeId?e.make(i.worktreeId):null,title:i.title,createdAt:i.createdAt,updatedAt:i.updatedAt??null,archivedAt:i.archivedAt,settledOverride:i.settledOverride??null,settledAt:i.settledAt??null,snoozedUntil:i.snoozedUntil??null,snoozedAt:i.snoozedAt??null,modelSelection:i.modelSelection??null,providerDriver:i.providerDriver??null,branch:i.branch,hasPendingApprovals:i.hasPendingApprovals,hasPendingUserInput:i.hasPendingUserInput,hasActionableProposedPlan:i.hasActionableProposedPlan,deliveryUnknown:r}]:[]})};return c(o,t)?o:null}function p(e,t){return e.environmentId===t?e:{...e,environmentId:t,projects:e.projects.map(e=>({...e,environmentId:t})),worktrees:e.worktrees.map(e=>({...e,environmentId:t})),threads:e.threads.map(e=>({...e,environmentId:t}))}}function m(e){return{capturedAt:e.capturedAt,projects:e.projects.map(e=>({id:e.id,environmentId:e.environmentId,name:e.name,cwd:e.cwd,repositoryIdentity:e.repositoryIdentity,defaultModelSelection:null,createdAt:e.createdAt??void 0,updatedAt:e.updatedAt??void 0,scripts:[]})),worktrees:e.worktrees.map(e=>({id:e.id,environmentId:e.environmentId,projectId:e.projectId,title:e.title,branch:e.branch,worktreePath:e.worktreePath,origin:`manual`,prNumber:e.pullRequestNumber,issueNumber:null,prTitle:e.workItemLabel,issueTitle:null,prState:null,prIsDraft:null,issueState:null,workItemProvider:null,workItemKey:null,workItemTitle:e.workItemLabel,workItemState:null,workItemStateName:null,workItemUrl:null,createdAt:e.updatedAt,updatedAt:e.updatedAt,archivedAt:e.archivedAt,manualPosition:0})),threads:e.threads.map(e=>{let i=e.providerDriver??t.make(`codex`),a=e.modelSelection??{instanceId:r(i),model:n[i]??`gpt-5.6-terra`};return{shell:{id:e.id,environmentId:e.environmentId,codexThreadId:null,projectId:e.projectId,title:e.title,modelSelection:a,runtimeMode:`full-access`,interactionMode:`default`,error:null,createdAt:e.createdAt,archivedAt:e.archivedAt,settledOverride:e.settledOverride??null,settledAt:e.settledAt??null,snoozedUntil:e.snoozedUntil??null,snoozedAt:e.snoozedAt??null,updatedAt:e.updatedAt??void 0,branch:e.branch,worktreePath:null,worktreeId:e.worktreeId},summary:{id:e.id,environmentId:e.environmentId,projectId:e.projectId,title:e.title,interactionMode:`default`,modelSelection:a,providerDriver:e.providerDriver,session:null,createdAt:e.createdAt,archivedAt:e.archivedAt,settledOverride:e.settledOverride??null,settledAt:e.settledAt??null,snoozedUntil:e.snoozedUntil??null,snoozedAt:e.snoozedAt??null,updatedAt:e.updatedAt??void 0,latestTurn:null,branch:e.branch,worktreePath:null,worktreeId:e.worktreeId,latestUserMessageAt:null,hasPendingApprovals:e.hasPendingApprovals,hasPendingUserInput:e.hasPendingUserInput,hasActionableProposedPlan:e.hasActionableProposedPlan}}})}}export{d as a,c as i,p as n,u as o,m as r,l as s,f as t};
+import{Y as e,at as t,nt as n,st as r}from"./src-Bi-5Nw9C.js";import{Nn as i}from"./runtime-Bxg7k81u.js";function a(e){return typeof e==`object`&&!!e}function o(e){return typeof e==`string`&&e.length>0}function s(e,t){return a(e)&&e.environmentId===t}function c(e,t){if(!a(e)||e.schemaVersion!==1||!o(e.environmentId))return!1;let n=e.environmentId;if(t!==void 0&&n!==t||typeof e.capturedAt!=`number`||!Number.isFinite(e.capturedAt)||!Array.isArray(e.projects)||!Array.isArray(e.worktrees)||!Array.isArray(e.threads))return!1;let r=new Set;for(let t of e.projects){if(!s(t,n)||!o(t.id)||!o(t.name)||typeof t.cwd!=`string`||r.has(t.id))return!1;r.add(t.id)}let i=new Set;for(let t of e.worktrees){if(!s(t,n)||!o(t.id)||!o(t.projectId)||!r.has(t.projectId)||i.has(t.id))return!1;i.add(t.id)}let c=new Set;for(let t of e.threads){if(!s(t,n)||!o(t.id)||!o(t.projectId)||!r.has(t.projectId)||c.has(t.id)||t.worktreeId!=null&&!i.has(t.worktreeId))return!1;c.add(t.id)}return!0}function l(e){return new TextEncoder().encode(JSON.stringify(e)).byteLength}function u(e){return JSON.stringify([e.hubOrigin.replace(/\/+$/g,``).toLowerCase(),e.accountId,e.environmentId])}function d(e){let t=e.maxEntries??32,n=e.maxBytes??16777216;if(e.incoming.payloadBytes>n||t<1)return{accepted:!1,evict:[]};let r=u(e.incoming.namespace),i=e.existing.filter(e=>u(e.namespace)!==r).toSorted((e,t)=>e.updatedAt-t.updatedAt||u(e.namespace).localeCompare(u(t.namespace))),a=i.length+1,o=i.reduce((e,t)=>e+t.payloadBytes,0)+e.incoming.payloadBytes,s=[];for(let e of i){if(a<=t&&o<=n)break;s.push(e.namespace),--a,o-=e.payloadBytes}return{accepted:a<=t&&o<=n,evict:s}}function f(t,n=Date.now(),r=!1){let a=i.getState().environmentStateById[t];if(!a?.bootstrapComplete)return null;let o={schemaVersion:1,environmentId:t,capturedAt:n,projects:a.projectIds.flatMap(e=>{let n=a.projectById[e];return n?[{environmentId:t,id:n.id,name:n.name,cwd:n.cwd,repositoryIdentity:n.repositoryIdentity??null,createdAt:n.createdAt??null,updatedAt:n.updatedAt??null}]:[]}),worktrees:(a.worktreeIds??[]).flatMap(e=>{let n=a.worktreeById?.[e];return n?[{environmentId:t,id:n.id,projectId:n.projectId,title:n.title??null,branch:n.branch,worktreePath:n.worktreePath,workItemLabel:n.workItemKey??n.prTitle??n.issueTitle??null,pullRequestNumber:n.prNumber,archivedAt:n.archivedAt,updatedAt:n.updatedAt}]:[]}),threads:a.threadIds.flatMap(n=>{let i=a.sidebarThreadSummaryById[n];return i?[{environmentId:t,id:i.id,projectId:i.projectId,worktreeId:i.worktreeId?e.make(i.worktreeId):null,title:i.title,createdAt:i.createdAt,updatedAt:i.updatedAt??null,archivedAt:i.archivedAt,settledOverride:i.settledOverride??null,settledAt:i.settledAt??null,snoozedUntil:i.snoozedUntil??null,snoozedAt:i.snoozedAt??null,modelSelection:i.modelSelection??null,providerDriver:i.providerDriver??null,branch:i.branch,hasPendingApprovals:i.hasPendingApprovals,hasPendingUserInput:i.hasPendingUserInput,hasActionableProposedPlan:i.hasActionableProposedPlan,deliveryUnknown:r}]:[]})};return c(o,t)?o:null}function p(e,t){return e.environmentId===t?e:{...e,environmentId:t,projects:e.projects.map(e=>({...e,environmentId:t})),worktrees:e.worktrees.map(e=>({...e,environmentId:t})),threads:e.threads.map(e=>({...e,environmentId:t}))}}function m(e){return{capturedAt:e.capturedAt,projects:e.projects.map(e=>({id:e.id,environmentId:e.environmentId,name:e.name,cwd:e.cwd,repositoryIdentity:e.repositoryIdentity,defaultModelSelection:null,createdAt:e.createdAt??void 0,updatedAt:e.updatedAt??void 0,scripts:[]})),worktrees:e.worktrees.map(e=>({id:e.id,environmentId:e.environmentId,projectId:e.projectId,title:e.title,branch:e.branch,worktreePath:e.worktreePath,origin:`manual`,prNumber:e.pullRequestNumber,issueNumber:null,prTitle:e.workItemLabel,issueTitle:null,prState:null,prIsDraft:null,issueState:null,workItemProvider:null,workItemKey:null,workItemTitle:e.workItemLabel,workItemState:null,workItemStateName:null,workItemUrl:null,createdAt:e.updatedAt,updatedAt:e.updatedAt,archivedAt:e.archivedAt,manualPosition:0})),threads:e.threads.map(e=>{let i=e.providerDriver??t.make(`codex`),a=e.modelSelection??{instanceId:r(i),model:n[i]??`gpt-5.6-terra`};return{shell:{id:e.id,environmentId:e.environmentId,codexThreadId:null,projectId:e.projectId,title:e.title,modelSelection:a,runtimeMode:`full-access`,interactionMode:`default`,error:null,createdAt:e.createdAt,archivedAt:e.archivedAt,settledOverride:e.settledOverride??null,settledAt:e.settledAt??null,snoozedUntil:e.snoozedUntil??null,snoozedAt:e.snoozedAt??null,updatedAt:e.updatedAt??void 0,branch:e.branch,worktreePath:null,worktreeId:e.worktreeId},summary:{id:e.id,environmentId:e.environmentId,projectId:e.projectId,title:e.title,interactionMode:`default`,modelSelection:a,providerDriver:e.providerDriver,session:null,createdAt:e.createdAt,archivedAt:e.archivedAt,settledOverride:e.settledOverride??null,settledAt:e.settledAt??null,snoozedUntil:e.snoozedUntil??null,snoozedAt:e.snoozedAt??null,updatedAt:e.updatedAt??void 0,latestTurn:null,branch:e.branch,worktreePath:null,worktreeId:e.worktreeId,latestUserMessageAt:null,hasPendingApprovals:e.hasPendingApprovals,hasPendingUserInput:e.hasPendingUserInput,hasActionableProposedPlan:e.hasActionableProposedPlan}}})}}export{d as a,c as i,p as n,u as o,m as r,l as s,f as t};

package/dist/client/assets/{wrench-Ds8eZerZ.js → wrench-BBIgGxy9.js}

@@ -1 +1 @@
-import{Na as e}from"./runtime-Djy96GJd.js";var t={name:`wrench`,size:24,node:[[`path`,{d:`M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.106-3.105c.32-.322.863-.22.983.218a6 6 0 0 1-8.259 7.057l-7.91 7.91a1 1 0 0 1-2.999-3l7.91-7.91a6 6 0 0 1 7.057-8.259c.438.12.54.662.219.984z`,key:`1ngwbx`}]]};t.node;var n=e(t);export{n as t};
+import{Na as e}from"./runtime-Bxg7k81u.js";var t={name:`wrench`,size:24,node:[[`path`,{d:`M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.106-3.105c.32-.322.863-.22.983.218a6 6 0 0 1-8.259 7.057l-7.91 7.91a1 1 0 0 1-2.999-3l7.91-7.91a6 6 0 0 1 7.057-8.259c.438.12.54.662.219.984z`,key:`1ngwbx`}]]};t.node;var n=e(t);export{n as t};

package/dist/client/index.html

@@ -92,7 +92,7 @@
       }
     </style>
     <title>Ryco (Alpha)</title>
-    <script type="module" crossorigin src="/assets/index-DxCd1PgA.js"></script>
+    <script type="module" crossorigin src="/assets/index-CvRFRkBK.js"></script>
   </head>
   <body>
     <div id="root">

package/dist/{collectUint8StreamText-C_VNyArd.mjs → collectUint8StreamText-CE1Re5Ij.mjs}

@@ -251,12 +251,27 @@ const ExecutionEnvironmentPlatformArch = Schema.Literals([
 	"x64",
 	"other"
 ]);
+const EnvironmentMachineKind = Schema.Literals([
+	"laptop",
+	"desktop",
+	"mini-pc",
+	"workstation",
+	"server",
+	"cloud",
+	"linux",
+	"windows"
+]);
+/** Future icon kinds degrade to Automatic without rejecting a node snapshot. */
+const EnvironmentMachineHint = Schema.NullOr(EnvironmentMachineKind).pipe(Schema.catchDecoding(() => Effect.succeed(Option.some(null))));
 const ExecutionEnvironmentPlatform = Schema.Struct({
 	os: ExecutionEnvironmentPlatformOs,
-	arch: ExecutionEnvironmentPlatformArch
+	arch: ExecutionEnvironmentPlatformArch,
+	machine: Schema.optionalKey(EnvironmentMachineHint)
 });
 const ExecutionEnvironmentCapabilities = Schema.Struct({
 	repositoryIdentity: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
+	projectIcons: Schema.optional(Schema.Boolean),
+	environmentIcon: Schema.optionalKey(Schema.Boolean),
 	threadSnooze: Schema.optional(Schema.Boolean),
 	threadSettlement: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
 	threadPriorityRanking: Schema.Boolean.pipe(Schema.withDecodingDefault(Effect.succeed(false))),
@@ -7094,6 +7109,7 @@ const ObservabilitySettings = Schema$1.Struct({
 */
 const AgentControlSettings = Schema$1.Struct({ enabled: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))) });
 const ServerSettings = Schema$1.Struct({
+	environmentIcon: EnvironmentMachineHint.pipe(Schema$1.withDecodingDefault(Effect.succeed(null))),
 	enableLegacyTokenStreaming: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(false))),
 	enableProviderUpdateChecks: Schema$1.Boolean.pipe(Schema$1.withDecodingDefault(Effect.succeed(true))),
 	defaultThreadEnvMode: ThreadEnvMode.pipe(Schema$1.withDecodingDefault(Effect.succeed("local"))),
@@ -7174,6 +7190,7 @@ const OpenCodeSettingsPatch = Schema$1.Struct({
 	customModels: Schema$1.optionalKey(Schema$1.Array(Schema$1.String))
 });
 const ServerSettingsPatch = Schema$1.Struct({
+	environmentIcon: Schema$1.optionalKey(Schema$1.NullOr(EnvironmentMachineKind)),
 	enableLegacyTokenStreaming: Schema$1.optionalKey(Schema$1.Boolean),
 	enableProviderUpdateChecks: Schema$1.optionalKey(Schema$1.Boolean),
 	defaultThreadEnvMode: Schema$1.optionalKey(ThreadEnvMode),
@@ -11423,6 +11440,20 @@ var ProjectStageFileReferenceError = class extends Schema.TaggedError()("Project
 	message: TrimmedNonEmptyString,
 	cause: Schema.optional(Schema.Defect())
 }) {};
+/** Optional, bounded project artwork carried inside the authenticated node RPC channel. */
+const PROJECT_ICON_MAX_BYTES = 524288;
+const ProjectReadIconInput = Schema.Struct({ projectId: ProjectId });
+const ProjectReadIconResult = Schema.NullOr(Schema.Struct({
+	dataBase64: Schema.String.check(Schema.isMaxLength(Math.ceil(PROJECT_ICON_MAX_BYTES / 3) * 4)),
+	mimeType: Schema.Literals([
+		"image/png",
+		"image/jpeg",
+		"image/webp",
+		"image/svg+xml",
+		"image/x-icon"
+	])
+}));
+var ProjectReadIconError = class extends Schema.TaggedError()("ProjectReadIconError", { message: TrimmedNonEmptyString }) {};
 //#endregion
 //#region ../../packages/contracts/src/filesystem.ts
 const FILESYSTEM_PATH_MAX_LENGTH = 512;
@@ -11454,6 +11485,7 @@ const WS_METHODS = {
 	projectsListEntries: "projects.listEntries",
 	projectsSearchEntries: "projects.searchEntries",
 	projectsReadFile: "projects.readFile",
+	projectsReadIcon: "projects.readIcon",
 	projectsReadFileBinary: "projects.readFileBinary",
 	projectsWriteFile: "projects.writeFile",
 	projectsStageFileReference: "projects.stageFileReference",
@@ -12052,6 +12084,11 @@ const WsProjectsReadFileRpc = Rpc.make(WS_METHODS.projectsReadFile, {
 	success: ProjectReadFileResult,
 	error: Schema.Union([ProjectReadFileError, AuthRpcError])
 });
+const WsProjectsReadIconRpc = Rpc.make(WS_METHODS.projectsReadIcon, {
+	payload: ProjectReadIconInput,
+	success: ProjectReadIconResult,
+	error: Schema.Union([ProjectReadIconError, AuthRpcError])
+});
 const WsProjectsReadFileBinaryRpc = Rpc.make(WS_METHODS.projectsReadFileBinary, {
 	payload: ProjectReadFileBinaryInput,
 	success: ProjectReadFileBinaryResult,
@@ -12456,7 +12493,8 @@ const WsAgentControlDisconnectMcpInstallationRpc = Rpc.make(AGENT_CONTROL_WS_MET
 	success: AgentControlMcpInstallationMutationResult,
 	error: Schema.Union([AgentControlExternalRpcError, AuthRpcError])
 });
-const WsRpcGroup = RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
+/** Keep declaration emit bounded as shared settings and RPC schemas grow. */
+const WsRpcGroup = RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadIconRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
 /**
 * Hosted relay channels carry both groups through one lifecycle-owned encrypted
 * channel. Direct clients keep the device group on its own low-priority socket
@@ -12670,4 +12708,4 @@ const collectUint8StreamText = (input) => {
 	})));
 };
 //#endregion
-export { AgentControlExternalCapabilitiesResult as $, ProviderInstanceId as $a, ThreadMessageSentPayload as $i, UsageReadError as $n, CheckpointRef as $o, OrchestrationActorKind as $r, AgentControlMcpReadDeviceStateResult as $t, AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES as A, WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES as Aa, PROVIDER_SEND_TURN_MAX_FILE_BYTES as Ai, AtlassianCapability as An, RELAY_AUTHENTICATION_DEADLINE_MS as Ao, CHAT_ATTACHMENT_READ_CHUNK_BYTES as Ar, AgentControlMcpOrchestrationEventsResult as At, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT as B, VcsProcessSpawnError as Ba, ProjectionPendingApprovalStatus as Bi, McpInventoryTool as Bn, RelayEffectiveRole as Bo, ContextHandoffActivityPayload as Br, AgentControlMcpProposeDeviceOpenUrlInput as Bt, AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS as C, WorktreeSourceControlStateUpdatedPayload as Ca, OrchestrationStopBackgroundTaskError as Ci, DEVICE_SWIPE_DURATION_MAX_MS as Cn, NATIVE_E2EE_MAX_GRANT_KEYS as Co, ProviderRespondToUserInputInput as Cr, AgentControlMcpListDevicesResult as Ct, AGENT_CONTROL_ERROR_CODES as D, WorktreeId as Da, OrchestrationThreadHistoryError as Di, ThreadPriorityBatchSnapshot as Dn, HubEnrollmentStartResult as Do, ProviderStopBackgroundTaskInput as Dr, AgentControlMcpListThreadsResult as Dt, AGENT_CONTROL_DEVICE_ACTION_KINDS as E, Worktree as Ea, OrchestrationThreadHistoryCursor as Ei, DeviceUdid as En, HubEnrollmentCeremonyDetail as Eo, ProviderSteerTurnInput as Er, AgentControlMcpListThreadsInput as Et, AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS as F, SourceControlRepositoryError as Fa, ProjectDeletedPayload as Fi, GitCommandError as Fn, RELAY_MAX_RETRY_AFTER_MS as Fo, CONTEXT_HANDOFF_MAX_INPUT_CHARS as Fr, AgentControlMcpProposeDeviceBootInput as Ft, AgentControlActionKind as G, ThreadPriorityFingerprint as Ga, ThreadActivityAppendedPayload as Gi, McpServer as Gn, AuthCreatePairingCredentialInput as Go, ContextHandoffMode as Gr, AgentControlMcpProposeProjectUpdateInput as Gt, AGENT_CONTROL_RISK_TAGS as H, VcsUnsupportedOperationError as Ha, ProviderInteractionMode as Hi, McpOauthLoginResult as Hn, RelayProtocolVersion as Ho, ContextHandoffDigest as Hr, AgentControlMcpProposeDeviceShutdownInput as Ht, AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS as I, truncateSourceControlDetailContent as Ia, ProjectMetaUpdatedPayload as Ii, GitManagerError as In, RELAY_MAX_RPC_MESSAGE_BYTES as Io, CONTEXT_HANDOFF_WS_METHODS as Ir, AgentControlMcpProposeDeviceDetachInput as It, AgentControlAutomationDefinition as J, DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER as Ja, ThreadCreatedPayload as Ji, McpServerWritableConfig as Jn, AuthRpcError as Jo, DEFAULT_PROVIDER_INTERACTION_MODE as Jr, AgentControlMcpReadAutomationInput as Jt, AgentControlActionPlan as K, DEFAULT_GIT_TEXT_GENERATION_MODEL as Ka, ThreadArchivedPayload as Ki, McpServerConfig as Kn, AuthRevokeClientSessionInput as Ko, DEFAULT_AGENT_TOKEN_MODE as Kr, AgentControlMcpProposeSettingsChangeInput as Kt, AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS as L, VcsDriverKind as La, ProjectMetadataDir as Li, TextGenerationError as Ln, RELAY_SUPPORTED_VERSION_RANGE as Lo, ChatAttachment as Lr, AgentControlMcpProposeDeviceInputInput as Lt, AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS as M, WorkItemProviderKind as Ma, PROVIDER_SEND_TURN_MAX_INPUT_CHARS as Mi, AtlassianConnectionKind as Mn, RELAY_MAX_CONTROL_FRAME_BYTES as Mo, CONTEXT_HANDOFF_ERROR_MAX_CHARS as Mr, AgentControlMcpProposeAutomationCreateInput as Mt, AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS as N, SOURCE_CONTROL_WORKFLOW_LOG_MAX_BYTES as Na, ProjectAvatarSetPayload as Ni, AtlassianConnectionStatus as Nn, RELAY_MAX_DATA_CHUNK_BYTES as No, CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES as Nr, AgentControlMcpProposeAutomationUpdateInput as Nt, AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE as O, ThreadGoal as Oa, OrchestrationWorktreeShell as Oi, ThreadPriorityCandidateRanking as On, HubIdentitySummary as Oo, ProviderStopSessionInput as Or, AgentControlMcpMutationResult as Ot, AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS as P, SourceControlProviderError as Pa, ProjectCreatedPayload as Pi, AtlassianProduct as Pn, RELAY_MAX_DATA_FRAME_BYTES as Po, CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES as Pr, AgentControlMcpProposeDeviceAttachInput as Pt, AgentControlCapability as Q, ProviderDriverKind as Qa, ThreadInteractionModeSetPayload as Qi, OpinionatedPluginError as Qn, AuthSessionId as Qo, ORCHESTRATION_WS_METHODS as Qr, AgentControlMcpReadDeviceStateInput as Qt, AGENT_CONTROL_MCP_TOOLS as R, VcsOutputDecodeError as Ra, ProjectScript as Ri, McpInventoryResource as Rn, RelayCapability as Ro, ChatAttachmentReadError as Rr, AgentControlMcpProposeDeviceInstallInput as Rt, AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS as S, WorktreeRestoredPayload as Sa, OrchestrationShellSnapshot as Si, DEVICE_FRAME_MAGIC as Sn, HubDeviceGrantClaims as So, ProviderRespondToRequestInput as Sr, AgentControlMcpListDevicesInput as St, AGENT_CONTROL_CAPABILITIES as T, StatusBucket as Ta, OrchestrationThreadActivityTone as Ti, DeviceRpcError as Tn, HubConnectorStatus as To, ProviderSessionStartInput as Tr, AgentControlMcpListProjectsResult as Tt, AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES as U, ThreadPriorityBatchId as Ua, ProviderSessionRuntimeStatus as Ui, McpProviderCapabilities as Un, AuthBootstrapInput as Uo, ContextHandoffEndpointSnapshot as Ur, AgentControlMcpProposeProjectCreateInput as Ut, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX as V, VcsProcessTimeoutError as Va, ProviderApprovalDecision as Vi, McpListServersResult as Vn, RelayFrame as Vo, ContextHandoffAppliedBudget as Vr, AgentControlMcpProposeDeviceRecordingInput as Vt, AGENT_CONTROL_WS_METHODS as W, ThreadPriorityCandidateId as Wa, RuntimeMode as Wi, McpProviderSupport as Wn, AuthClientMetadataDeviceType as Wo, ContextHandoffInspectionError as Wr, AgentControlMcpProposeProjectRemoveInput as Wt, AgentControlAutomationRun as X, MODEL_SLUG_ALIASES_BY_PROVIDER as Xa, ThreadGoalClearedPayload as Xi, McpWorkspace as Xn, AtlassianConnectionId as Xo, ModelContextWindowMetadata as Xr, AgentControlMcpReadControlRequestInput as Xt, AgentControlAutomationId as Y, DEFAULT_MODEL as Ya, ThreadDeletedPayload as Yi, McpSettingsError as Yn, ApprovalRequestId as Yo, FileAttachmentCreateUploadUrlError as Yr, AgentControlMcpReadAutomationResult as Yt, AgentControlAutomationRunId as Z, ModelCapabilities as Za, ThreadGoalUpdatedPayload as Zi, McpWorkspaceId as Zn, AtlassianResourceId as Zo, ModelSelection as Zr, AgentControlMcpReadDeviceContentInput as Zt, ProjectReadFileError as _, WorktreeArchivedPayload as _a, OrchestrationProposedPlanId as _i, AgentControlRequestId as _n, LOCAL_INTRODUCTION_CONTROL_HEADER as _o, THREAD_JUMP_KEYBINDING_COMMANDS as _r, TurnId as _s, AgentControlMcpInterruptThreadInput as _t, ComputerUseBridgeConfig as a, ThreadSessionSetPayload as aa, OrchestrationDispatchCommandError as ai, AgentControlMcpUpdateThreadInput as an, TerminalNotRunningError as ao, CursorSettings as ar, MessageId as as, AgentControlExternalTaskId as at, ProjectWriteFileError as b, WorktreeManualPositionSetPayload as ba, OrchestrationSession as bi, AgentControlRpcError as bn, LocalIntroductionCompleteRequest as bo, isToolLifecycleItemType as br, AgentControlMcpListAutomationsInput as bt, WS_METHODS as c, ThreadSnoozedPayload as ca, OrchestrationEventType as ci, AgentControlOperationId as cn, EDITORS as co, OpenCodeSettings as cr, ProjectId as cs, AgentControlIntegrationId as ct, WsRpcGroup as d, ThreadTurnDiffCompletedPayload as da, OrchestrationGetTaskOutputError as di, AgentControlPlanDigest as dn, DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH as do, ThreadEnvMode as dr, RuntimeRequestId as ds, AgentControlMcpControlRequestResult as dt, ThreadMetaUpdatedPayload as ea, OrchestrationAggregateKind as ei, AgentControlMcpReadThreadInput as en, defaultInstanceIdForDriver as eo, ServerProvider as er, CommandId as es, AgentControlExternalCreateTaskInput as et, FilesystemBrowseError as f, ThreadTurnInterruptRequestedPayload as fa, OrchestrationGetTurnDiffError as fi, AgentControlPrincipal as fn, DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES as fo, KeybindingRule as fr, RuntimeSessionId as fs, AgentControlMcpCreateThreadsInput as ft, ProjectReadFileBinaryError as g, TurnDispatchMode as ga, OrchestrationMessageRole as gi, AgentControlProposalStatus as gn, LOCAL_INTRODUCTION_COMPLETE_PATH as go, ResolvedKeybindingRule as gr, TrimmedNonEmptyString as gs, AgentControlMcpInstallationId as gt, ProjectListEntriesError as h, ThreadUnsnoozedPayload as ha, OrchestrationMessage as hi, AgentControlProposalId as hn, DesktopNativeNodeClaimSignRequest as ho, MODEL_PICKER_JUMP_KEYBINDING_COMMANDS as hr, ThreadId as hs, AgentControlMcpInstallation as ht, fromLenientJson as i, ThreadRuntimeModeSetPayload as ia, OrchestrationCommandReceiptStatus as ii, AgentControlMcpSettingsSummaryResult as in, TerminalHistoryError as io, CopilotSettings as ir, IsoDateTime as is, AgentControlExternalRpcError as it, AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS as j, WorkItemProviderError as ja, PROVIDER_SEND_TURN_MAX_IMAGE_BYTES as ji, AtlassianConnectionError as jn, RELAY_FRAME_TYPES as jo, CONTEXT_HANDOFF_ACTIVITY_KIND as jr, AgentControlMcpProposeAutomationCancelInput as jt, AGENT_CONTROL_EXTERNAL_MCP_TOOLS as k, WORK_ITEM_DETAIL_BODY_MAX_BYTES as ka, PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES as ki, ThreadPriorityRpcError as kn, HubGrantVerificationKeyId as ko, AgentTokenMode as kr, AgentControlMcpOperationalReadInput as kt, WsDeviceRpcGroup as l, ThreadStatusBucketOverriddenPayload as la, OrchestrationGetFullThreadDiffError as li, AgentControlOperationState as ln, OpenError as lo, ServerSettings as lr, ProviderItemId as ls, AgentControlMcpCapabilitiesResult as lt, PROJECT_STAGE_FILE_MAX_BYTES as m, ThreadUnsettledPayload as ma, OrchestrationGetWorkflowScriptError as mi, AgentControlProposal as mn, DesktopNativeNodeClaimCommitRequest as mo, KeybindingsConfigError as mr, RuntimeTaskId as ms, AgentControlMcpDiagnosticsSummaryResult as mt, decodeJsonResult as n, ThreadProposedPlanUpsertedPayload as na, OrchestrationCheckpointStatus as ni, AgentControlMcpRecentActivityResult as nn, DEFAULT_TERMINAL_ID as no, ClaudeSettings as nr, EnvironmentId$1 as ns, AgentControlExternalOverviewResult as nt, ComputerUseRequest as o, ThreadSettledPayload as oa, OrchestrationEvent as oi, AgentControlMcpWaitForControlRequestInput as on, TerminalSessionLookupError as oo, DEFAULT_SERVER_SETTINGS as or, NonNegativeInt as os, AgentControlExternalTaskIdInput as ot, PROJECT_READ_FILE_BINARY_MAX_BYTES as p, ThreadUnarchivedPayload as pa, OrchestrationGetTurnDiffResult as pi, AgentControlPromptSummary as pn, DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH as po, KeybindingsConfig as pr, RuntimeSubagentId as ps, AgentControlMcpDiagnosticsSummaryInput as pt, AgentControlAutomation as q, DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER as qa, ThreadAttachedToWorktreePayload as qi, McpServerName as qn, AuthRevokePairingLinkInput as qo, DEFAULT_PROJECT_METADATA_DIR as qr, AgentControlMcpProviderRuntimeEventsResult as qt, formatSchemaError as r, ThreadRevertedPayload as ra, OrchestrationCheckpointSummary as ri, AgentControlMcpSendMessageInput as rn, TerminalCwdError as ro, CodexSettings as rr, EventId as rs, AgentControlExternalProjectScope as rt, ComputerUseResult as s, ThreadSettlementOverride as sa, OrchestrationEventMetadata as si, AgentControlOperation as sn, TerminalSubscriptionResyncError as so, GrokSettings as sr, PositiveInt as ss, AgentControlExternalWaitForTaskInput as st, collectUint8StreamText as t, ThreadPriorityProjectedRanking as ta, OrchestrationCheckpointFile as ti, AgentControlMcpReadThreadResult as tn, isProviderDriverKind as to, ServerProviderUpdateError as tr, ContextHandoffId as ts, AgentControlExternalIntegration as tt, WsHostedRpcGroup as u, ThreadTokenModeSetPayload as ua, OrchestrationGetSnapshotError as ui, AgentControlOperationStatus as un, DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH as uo, ServerSettingsError as ur, RuntimeItemId as us, AgentControlMcpContextResult as ut, ProjectSearchEntriesError as v, WorktreeCreatedPayload as va, OrchestrationReadModel as vi, AgentControlResultEnvelope as vn, LOCAL_INTRODUCTION_DESCRIPTOR_PATH as vo, RuntimeSubagentStatus as vr, AgentControlMcpListAutomationRunsInput as vt, AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS as w, PullRequestState as wa, OrchestrationThread as wi, DEVICE_WS_METHODS as wn, NodeE2eeAdmissionPolicy as wo, ProviderSendTurnInput as wr, AgentControlMcpListProjectsInput as wt, AGENT_CONTROL_ACTION_CAPABILITIES as x, WorktreeMetaUpdatedPayload as xa, OrchestrationSessionStatus as xi, DEVICE_CAPABILITY_LABELS as xn, HUB_DEVICE_GRANT_MAX_BYTES as xo, ProviderInterruptTurnInput as xr, AgentControlMcpListAutomationsResult as xt, ProjectStageFileReferenceError as y, WorktreeDeletedPayload as ya, OrchestrationReplayEventsError as yi, AgentControlRiskTag as yn, LOCAL_INTRODUCTION_MAX_BODY_BYTES as yo, ToolLifecycleItemType as yr, AgentControlMcpListAutomationRunsResult as yt, AGENT_CONTROL_MCP_TOOL_NAMES as z, VcsProcessExitError as za, ProjectionPendingApprovalDecision as zi, McpInventoryResourceTemplate as zn, RelayChannelId as zo, ClientOrchestrationCommand as zr, AgentControlMcpProposeDeviceLaunchInput as zt };
+export { AgentControlAutomationRunId as $, ModelCapabilities as $a, ThreadGoalUpdatedPayload as $i, McpWorkspaceId as $n, AtlassianResourceId as $o, ModelSelection as $r, AgentControlMcpReadDeviceContentInput as $t, AGENT_CONTROL_EXTERNAL_CREDENTIAL_AUDIENCE as A, ThreadGoal as Aa, OrchestrationWorktreeShell as Ai, ThreadPriorityCandidateRanking as An, HubIdentitySummary as Ao, ProviderStopSessionInput as Ar, AgentControlMcpMutationResult as At, AGENT_CONTROL_MCP_TOOLS as B, VcsOutputDecodeError as Ba, ProjectScript as Bi, McpInventoryResource as Bn, RelayCapability as Bo, ChatAttachmentReadError as Br, AgentControlMcpProposeDeviceInstallInput as Bt, AGENT_CONTROL_ACTION_CAPABILITIES as C, WorktreeMetaUpdatedPayload as Ca, OrchestrationSessionStatus as Ci, DEVICE_CAPABILITY_LABELS as Cn, HUB_DEVICE_GRANT_MAX_BYTES as Co, ProviderInterruptTurnInput as Cr, AgentControlMcpListAutomationsResult as Ct, AGENT_CONTROL_CAPABILITIES as D, StatusBucket as Da, OrchestrationThreadActivityTone as Di, DeviceRpcError as Dn, HubConnectorStatus as Do, ProviderSessionStartInput as Dr, AgentControlMcpListProjectsResult as Dt, AGENT_CONTROL_AUTOMATION_PROPOSAL_TTL_MS as E, PullRequestState as Ea, OrchestrationThread as Ei, DEVICE_WS_METHODS as En, NodeE2eeAdmissionPolicy as Eo, ProviderSendTurnInput as Er, AgentControlMcpListProjectsInput as Et, AGENT_CONTROL_MCP_AUTOMATION_LIST_PROMPT_MAX_CHARS as F, SOURCE_CONTROL_WORKFLOW_LOG_MAX_BYTES as Fa, ProjectAvatarSetPayload as Fi, AtlassianConnectionStatus as Fn, RELAY_MAX_DATA_CHUNK_BYTES as Fo, CONTEXT_HANDOFF_INSPECTION_CHUNK_MAX_BYTES as Fr, AgentControlMcpProposeAutomationUpdateInput as Ft, AGENT_CONTROL_TERMINAL_PROPOSAL_STATUSES as G, ThreadPriorityBatchId as Ga, ProviderSessionRuntimeStatus as Gi, McpProviderCapabilities as Gn, AuthBootstrapInput as Go, ContextHandoffEndpointSnapshot as Gr, AgentControlMcpProposeProjectCreateInput as Gt, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_DEFAULT as H, VcsProcessSpawnError as Ha, ProjectionPendingApprovalStatus as Hi, McpInventoryTool as Hn, RelayEffectiveRole as Ho, ContextHandoffActivityPayload as Hr, AgentControlMcpProposeDeviceOpenUrlInput as Ht, AGENT_CONTROL_MCP_MESSAGE_TEXT_MAX_CHARS as I, SourceControlProviderError as Ia, ProjectCreatedPayload as Ii, AtlassianProduct as In, RELAY_MAX_DATA_FRAME_BYTES as Io, CONTEXT_HANDOFF_INSPECTION_MAX_RESPONSE_BYTES as Ir, AgentControlMcpProposeDeviceAttachInput as It, AgentControlActionPlan as J, DEFAULT_GIT_TEXT_GENERATION_MODEL as Ja, ThreadArchivedPayload as Ji, McpServerConfig as Jn, AuthRevokeClientSessionInput as Jo, DEFAULT_AGENT_TOKEN_MODE as Jr, AgentControlMcpProposeSettingsChangeInput as Jt, AGENT_CONTROL_WS_METHODS as K, ThreadPriorityCandidateId as Ka, RuntimeMode as Ki, McpProviderSupport as Kn, AuthClientMetadataDeviceType as Ko, ContextHandoffInspectionError as Kr, AgentControlMcpProposeProjectRemoveInput as Kt, AGENT_CONTROL_MCP_OPERATIONAL_RANGE_MAX_MS as L, SourceControlRepositoryError as La, ProjectDeletedPayload as Li, GitCommandError as Ln, RELAY_MAX_RETRY_AFTER_MS as Lo, CONTEXT_HANDOFF_MAX_INPUT_CHARS as Lr, AgentControlMcpProposeDeviceBootInput as Lt, AGENT_CONTROL_EXTERNAL_MCP_TOOL_NAMES as M, WORK_ITEM_DETAIL_COMMENT_BODY_MAX_BYTES as Ma, PROVIDER_SEND_TURN_MAX_FILE_BYTES as Mi, AtlassianCapability as Mn, RELAY_AUTHENTICATION_DEADLINE_MS as Mo, CHAT_ATTACHMENT_READ_CHUNK_BYTES as Mr, AgentControlMcpOrchestrationEventsResult as Mt, AGENT_CONTROL_EXTERNAL_PAIRING_CODE_TTL_MS as N, WorkItemProviderError as Na, PROVIDER_SEND_TURN_MAX_IMAGE_BYTES as Ni, AtlassianConnectionError as Nn, RELAY_FRAME_TYPES as No, CONTEXT_HANDOFF_ACTIVITY_KIND as Nr, AgentControlMcpProposeAutomationCancelInput as Nt, AGENT_CONTROL_DEVICE_ACTION_KINDS as O, Worktree as Oa, OrchestrationThreadHistoryCursor as Oi, DeviceUdid as On, HubEnrollmentCeremonyDetail as Oo, ProviderSteerTurnInput as Or, AgentControlMcpListThreadsInput as Ot, AGENT_CONTROL_EXTERNAL_PROPOSAL_TTL_MS as P, WorkItemProviderKind as Pa, PROVIDER_SEND_TURN_MAX_INPUT_CHARS as Pi, AtlassianConnectionKind as Pn, RELAY_MAX_CONTROL_FRAME_BYTES as Po, CONTEXT_HANDOFF_ERROR_MAX_CHARS as Pr, AgentControlMcpProposeAutomationCreateInput as Pt, AgentControlAutomationRun as Q, MODEL_SLUG_ALIASES_BY_PROVIDER as Qa, ThreadGoalClearedPayload as Qi, McpWorkspace as Qn, AtlassianConnectionId as Qo, ModelContextWindowMetadata as Qr, AgentControlMcpReadControlRequestInput as Qt, AGENT_CONTROL_MCP_OPERATIONAL_RETENTION_MS as R, truncateSourceControlDetailContent as Ra, ProjectMetaUpdatedPayload as Ri, GitManagerError as Rn, RELAY_MAX_RPC_MESSAGE_BYTES as Ro, CONTEXT_HANDOFF_WS_METHODS as Rr, AgentControlMcpProposeDeviceDetachInput as Rt, ProjectWriteFileError as S, WorktreeManualPositionSetPayload as Sa, OrchestrationSession as Si, AgentControlRpcError as Sn, LocalIntroductionCompleteRequest as So, isToolLifecycleItemType as Sr, AgentControlMcpListAutomationsInput as St, AGENT_CONTROL_AUTOMATION_MIN_INTERVAL_MS as T, WorktreeSourceControlStateUpdatedPayload as Ta, OrchestrationStopBackgroundTaskError as Ti, DEVICE_SWIPE_DURATION_MAX_MS as Tn, NATIVE_E2EE_MAX_GRANT_KEYS as To, ProviderRespondToUserInputInput as Tr, AgentControlMcpListDevicesResult as Tt, AGENT_CONTROL_MCP_WAIT_TIMEOUT_MS_MAX as U, VcsProcessTimeoutError as Ua, ProviderApprovalDecision as Ui, McpListServersResult as Un, RelayFrame as Uo, ContextHandoffAppliedBudget as Ur, AgentControlMcpProposeDeviceRecordingInput as Ut, AGENT_CONTROL_MCP_TOOL_NAMES as V, VcsProcessExitError as Va, ProjectionPendingApprovalDecision as Vi, McpInventoryResourceTemplate as Vn, RelayChannelId as Vo, ClientOrchestrationCommand as Vr, AgentControlMcpProposeDeviceLaunchInput as Vt, AGENT_CONTROL_RISK_TAGS as W, VcsUnsupportedOperationError as Wa, ProviderInteractionMode as Wi, McpOauthLoginResult as Wn, RelayProtocolVersion as Wo, ContextHandoffDigest as Wr, AgentControlMcpProposeDeviceShutdownInput as Wt, AgentControlAutomationDefinition as X, DEFAULT_GIT_TEXT_GENERATION_OPTIONS_BY_PROVIDER as Xa, ThreadCreatedPayload as Xi, McpServerWritableConfig as Xn, AuthRpcError as Xo, DEFAULT_PROVIDER_INTERACTION_MODE as Xr, AgentControlMcpReadAutomationInput as Xt, AgentControlAutomation as Y, DEFAULT_GIT_TEXT_GENERATION_MODEL_BY_PROVIDER as Ya, ThreadAttachedToWorktreePayload as Yi, McpServerName as Yn, AuthRevokePairingLinkInput as Yo, DEFAULT_PROJECT_METADATA_DIR as Yr, AgentControlMcpProviderRuntimeEventsResult as Yt, AgentControlAutomationId as Z, DEFAULT_MODEL as Za, ThreadDeletedPayload as Zi, McpSettingsError as Zn, ApprovalRequestId as Zo, FileAttachmentCreateUploadUrlError as Zr, AgentControlMcpReadAutomationResult as Zt, ProjectReadFileBinaryError as _, ThreadUnsnoozedPayload as _a, OrchestrationMessage as _i, AgentControlProposalId as _n, DesktopNativeNodeClaimSignRequest as _o, MODEL_PICKER_JUMP_KEYBINDING_COMMANDS as _r, ThreadId as _s, AgentControlMcpInstallation as _t, ComputerUseBridgeConfig as a, ThreadRevertedPayload as aa, OrchestrationCheckpointSummary as ai, AgentControlMcpSendMessageInput as an, TerminalCwdError as ao, CodexSettings as ar, EventId as as, AgentControlExternalProjectScope as at, ProjectSearchEntriesError as b, WorktreeCreatedPayload as ba, OrchestrationReadModel as bi, AgentControlResultEnvelope as bn, LOCAL_INTRODUCTION_DESCRIPTOR_PATH as bo, RuntimeSubagentStatus as br, AgentControlMcpListAutomationRunsInput as bt, WS_METHODS as c, ThreadSettledPayload as ca, OrchestrationEvent as ci, AgentControlMcpWaitForControlRequestInput as cn, TerminalSessionLookupError as co, DEFAULT_SERVER_SETTINGS as cr, NonNegativeInt as cs, AgentControlExternalTaskIdInput as ct, WsRpcGroup as d, ThreadStatusBucketOverriddenPayload as da, OrchestrationGetFullThreadDiffError as di, AgentControlOperationState as dn, OpenError as do, ServerSettings as dr, ProviderItemId as ds, AgentControlMcpCapabilitiesResult as dt, ThreadInteractionModeSetPayload as ea, ORCHESTRATION_WS_METHODS as ei, AgentControlMcpReadDeviceStateInput as en, ProviderDriverKind as eo, OpinionatedPluginError as er, AuthSessionId as es, AgentControlCapability as et, FilesystemBrowseError as f, ThreadTokenModeSetPayload as fa, OrchestrationGetSnapshotError as fi, AgentControlOperationStatus as fn, DESKTOP_NATIVE_NODE_CLAIM_COMMIT_PATH as fo, ServerSettingsError as fr, RuntimeItemId as fs, AgentControlMcpContextResult as ft, ProjectListEntriesError as g, ThreadUnsettledPayload as ga, OrchestrationGetWorkflowScriptError as gi, AgentControlProposal as gn, DesktopNativeNodeClaimCommitRequest as go, KeybindingsConfigError as gr, RuntimeTaskId as gs, AgentControlMcpDiagnosticsSummaryResult as gt, PROJECT_STAGE_FILE_MAX_BYTES as h, ThreadUnarchivedPayload as ha, OrchestrationGetTurnDiffResult as hi, AgentControlPromptSummary as hn, DESKTOP_NATIVE_NODE_CLAIM_SIGN_PATH as ho, KeybindingsConfig as hr, RuntimeSubagentId as hs, AgentControlMcpDiagnosticsSummaryInput as ht, fromLenientJson as i, ThreadProposedPlanUpsertedPayload as ia, OrchestrationCheckpointStatus as ii, AgentControlMcpRecentActivityResult as in, DEFAULT_TERMINAL_ID as io, ClaudeSettings as ir, EnvironmentId$1 as is, AgentControlExternalOverviewResult as it, AGENT_CONTROL_EXTERNAL_MCP_TOOLS as j, WORK_ITEM_DETAIL_BODY_MAX_BYTES as ja, PROVIDER_SEND_TURN_MAX_ATTACHMENT_TOTAL_BYTES as ji, ThreadPriorityRpcError as jn, HubGrantVerificationKeyId as jo, AgentTokenMode as jr, AgentControlMcpOperationalReadInput as jt, AGENT_CONTROL_ERROR_CODES as k, WorktreeId as ka, OrchestrationThreadHistoryError as ki, ThreadPriorityBatchSnapshot as kn, HubEnrollmentStartResult as ko, ProviderStopBackgroundTaskInput as kr, AgentControlMcpListThreadsResult as kt, WsDeviceRpcGroup as l, ThreadSettlementOverride as la, OrchestrationEventMetadata as li, AgentControlOperation as ln, TerminalSubscriptionResyncError as lo, GrokSettings as lr, PositiveInt as ls, AgentControlExternalWaitForTaskInput as lt, PROJECT_READ_FILE_BINARY_MAX_BYTES as m, ThreadTurnInterruptRequestedPayload as ma, OrchestrationGetTurnDiffError as mi, AgentControlPrincipal as mn, DESKTOP_NATIVE_NODE_CLAIM_MAX_BODY_BYTES as mo, KeybindingRule as mr, RuntimeSessionId as ms, AgentControlMcpCreateThreadsInput as mt, decodeJsonResult as n, ThreadMetaUpdatedPayload as na, OrchestrationAggregateKind as ni, AgentControlMcpReadThreadInput as nn, defaultInstanceIdForDriver as no, ServerProvider as nr, CommandId as ns, AgentControlExternalCreateTaskInput as nt, ComputerUseRequest as o, ThreadRuntimeModeSetPayload as oa, OrchestrationCommandReceiptStatus as oi, AgentControlMcpSettingsSummaryResult as on, TerminalHistoryError as oo, CopilotSettings as or, IsoDateTime as os, AgentControlExternalRpcError as ot, PROJECT_ICON_MAX_BYTES as p, ThreadTurnDiffCompletedPayload as pa, OrchestrationGetTaskOutputError as pi, AgentControlPlanDigest as pn, DESKTOP_NATIVE_NODE_CLAIM_DESCRIPTOR_PATH as po, ThreadEnvMode as pr, RuntimeRequestId as ps, AgentControlMcpControlRequestResult as pt, AgentControlActionKind as q, ThreadPriorityFingerprint as qa, ThreadActivityAppendedPayload as qi, McpServer as qn, AuthCreatePairingCredentialInput as qo, ContextHandoffMode as qr, AgentControlMcpProposeProjectUpdateInput as qt, formatSchemaError as r, ThreadPriorityProjectedRanking as ra, OrchestrationCheckpointFile as ri, AgentControlMcpReadThreadResult as rn, isProviderDriverKind as ro, ServerProviderUpdateError as rr, ContextHandoffId as rs, AgentControlExternalIntegration as rt, ComputerUseResult as s, ThreadSessionSetPayload as sa, OrchestrationDispatchCommandError as si, AgentControlMcpUpdateThreadInput as sn, TerminalNotRunningError as so, CursorSettings as sr, MessageId as ss, AgentControlExternalTaskId as st, collectUint8StreamText as t, ThreadMessageSentPayload as ta, OrchestrationActorKind as ti, AgentControlMcpReadDeviceStateResult as tn, ProviderInstanceId as to, UsageReadError as tr, CheckpointRef as ts, AgentControlExternalCapabilitiesResult as tt, WsHostedRpcGroup as u, ThreadSnoozedPayload as ua, OrchestrationEventType as ui, AgentControlOperationId as un, EDITORS as uo, OpenCodeSettings as ur, ProjectId as us, AgentControlIntegrationId as ut, ProjectReadFileError as v, TurnDispatchMode as va, OrchestrationMessageRole as vi, AgentControlProposalStatus as vn, LOCAL_INTRODUCTION_COMPLETE_PATH as vo, ResolvedKeybindingRule as vr, TrimmedNonEmptyString as vs, AgentControlMcpInstallationId as vt, AGENT_CONTROL_AUTOMATION_MAX_HORIZON_MS as w, WorktreeRestoredPayload as wa, OrchestrationShellSnapshot as wi, DEVICE_FRAME_MAGIC as wn, HubDeviceGrantClaims as wo, ProviderRespondToRequestInput as wr, AgentControlMcpListDevicesInput as wt, ProjectStageFileReferenceError as x, WorktreeDeletedPayload as xa, OrchestrationReplayEventsError as xi, AgentControlRiskTag as xn, LOCAL_INTRODUCTION_MAX_BODY_BYTES as xo, ToolLifecycleItemType as xr, AgentControlMcpListAutomationRunsResult as xt, ProjectReadIconError as y, WorktreeArchivedPayload as ya, OrchestrationProposedPlanId as yi, AgentControlRequestId as yn, LOCAL_INTRODUCTION_CONTROL_HEADER as yo, THREAD_JUMP_KEYBINDING_COMMANDS as yr, TurnId as ys, AgentControlMcpInterruptThreadInput as yt, AGENT_CONTROL_MCP_READ_THREAD_TEXT_BUDGET_CHARS as z, VcsDriverKind as za, ProjectMetadataDir as zi, TextGenerationError as zn, RELAY_SUPPORTED_VERSION_RANGE as zo, ChatAttachment as zr, AgentControlMcpProposeDeviceInputInput as zt };

package/dist/{collectUint8StreamText-DStwNTTK.cjs → collectUint8StreamText-whblCEfg.cjs}

@@ -256,12 +256,27 @@ const ExecutionEnvironmentPlatformArch = effect.Schema.Literals([
 	"x64",
 	"other"
 ]);
+const EnvironmentMachineKind = effect.Schema.Literals([
+	"laptop",
+	"desktop",
+	"mini-pc",
+	"workstation",
+	"server",
+	"cloud",
+	"linux",
+	"windows"
+]);
+/** Future icon kinds degrade to Automatic without rejecting a node snapshot. */
+const EnvironmentMachineHint = effect.Schema.NullOr(EnvironmentMachineKind).pipe(effect.Schema.catchDecoding(() => effect.Effect.succeed(effect.Option.some(null))));
 const ExecutionEnvironmentPlatform = effect.Schema.Struct({
 	os: ExecutionEnvironmentPlatformOs,
-	arch: ExecutionEnvironmentPlatformArch
+	arch: ExecutionEnvironmentPlatformArch,
+	machine: effect.Schema.optionalKey(EnvironmentMachineHint)
 });
 const ExecutionEnvironmentCapabilities = effect.Schema.Struct({
 	repositoryIdentity: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
+	projectIcons: effect.Schema.optional(effect.Schema.Boolean),
+	environmentIcon: effect.Schema.optionalKey(effect.Schema.Boolean),
 	threadSnooze: effect.Schema.optional(effect.Schema.Boolean),
 	threadSettlement: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
 	threadPriorityRanking: effect.Schema.Boolean.pipe(effect.Schema.withDecodingDefault(effect.Effect.succeed(false))),
@@ -7099,6 +7114,7 @@ const ObservabilitySettings = effect_Schema.Struct({
 */
 const AgentControlSettings = effect_Schema.Struct({ enabled: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))) });
 const ServerSettings = effect_Schema.Struct({
+	environmentIcon: EnvironmentMachineHint.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(null))),
 	enableLegacyTokenStreaming: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(false))),
 	enableProviderUpdateChecks: effect_Schema.Boolean.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed(true))),
 	defaultThreadEnvMode: ThreadEnvMode.pipe(effect_Schema.withDecodingDefault(effect.Effect.succeed("local"))),
@@ -7179,6 +7195,7 @@ const OpenCodeSettingsPatch = effect_Schema.Struct({
 	customModels: effect_Schema.optionalKey(effect_Schema.Array(effect_Schema.String))
 });
 const ServerSettingsPatch = effect_Schema.Struct({
+	environmentIcon: effect_Schema.optionalKey(effect_Schema.NullOr(EnvironmentMachineKind)),
 	enableLegacyTokenStreaming: effect_Schema.optionalKey(effect_Schema.Boolean),
 	enableProviderUpdateChecks: effect_Schema.optionalKey(effect_Schema.Boolean),
 	defaultThreadEnvMode: effect_Schema.optionalKey(ThreadEnvMode),
@@ -11428,6 +11445,20 @@ var ProjectStageFileReferenceError = class extends effect.Schema.TaggedError()("
 	message: TrimmedNonEmptyString,
 	cause: effect.Schema.optional(effect.Schema.Defect())
 }) {};
+/** Optional, bounded project artwork carried inside the authenticated node RPC channel. */
+const PROJECT_ICON_MAX_BYTES = 524288;
+const ProjectReadIconInput = effect.Schema.Struct({ projectId: ProjectId });
+const ProjectReadIconResult = effect.Schema.NullOr(effect.Schema.Struct({
+	dataBase64: effect.Schema.String.check(effect.Schema.isMaxLength(Math.ceil(PROJECT_ICON_MAX_BYTES / 3) * 4)),
+	mimeType: effect.Schema.Literals([
+		"image/png",
+		"image/jpeg",
+		"image/webp",
+		"image/svg+xml",
+		"image/x-icon"
+	])
+}));
+var ProjectReadIconError = class extends effect.Schema.TaggedError()("ProjectReadIconError", { message: TrimmedNonEmptyString }) {};
 //#endregion
 //#region ../../packages/contracts/src/filesystem.ts
 const FILESYSTEM_PATH_MAX_LENGTH = 512;
@@ -11459,6 +11490,7 @@ const WS_METHODS = {
 	projectsListEntries: "projects.listEntries",
 	projectsSearchEntries: "projects.searchEntries",
 	projectsReadFile: "projects.readFile",
+	projectsReadIcon: "projects.readIcon",
 	projectsReadFileBinary: "projects.readFileBinary",
 	projectsWriteFile: "projects.writeFile",
 	projectsStageFileReference: "projects.stageFileReference",
@@ -12057,6 +12089,11 @@ const WsProjectsReadFileRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.projectsRe
 	success: ProjectReadFileResult,
 	error: effect.Schema.Union([ProjectReadFileError, AuthRpcError])
 });
+const WsProjectsReadIconRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.projectsReadIcon, {
+	payload: ProjectReadIconInput,
+	success: ProjectReadIconResult,
+	error: effect.Schema.Union([ProjectReadIconError, AuthRpcError])
+});
 const WsProjectsReadFileBinaryRpc = effect_unstable_rpc_Rpc.make(WS_METHODS.projectsReadFileBinary, {
 	payload: ProjectReadFileBinaryInput,
 	success: ProjectReadFileBinaryResult,
@@ -12461,7 +12498,8 @@ const WsAgentControlDisconnectMcpInstallationRpc = effect_unstable_rpc_Rpc.make(
 	success: AgentControlMcpInstallationMutationResult,
 	error: effect.Schema.Union([AgentControlExternalRpcError, AuthRpcError])
 });
-const WsRpcGroup = effect_unstable_rpc_RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
+/** Keep declaration emit bounded as shared settings and RPC schemas grow. */
+const WsRpcGroup = effect_unstable_rpc_RpcGroup.make(WsServerGetConfigRpc, WsServerGetAdvertisedEndpointsRpc, WsServerGetDiagnosticsMetricsRpc, WsServerGetStatisticsRpc, WsServerGetUsageSummaryRpc, WsServerRefreshProvidersRpc, WsServerUpdateProviderRpc, WsServerUpsertKeybindingRpc, WsKeybindingsReplaceCustomRpc, WsServerGetSettingsRpc, WsServerUpdateSettingsRpc, WsServerGetDiagnosticsSnapshotRpc, WsServerSignalDiagnosticProcessRpc, WsServerGetResourceTelemetryHistoryRpc, WsServerRetryResourceTelemetryRpc, WsServerDiscoverSourceControlRpc, WsServerListOpinionatedPluginsRpc, WsServerCheckOpinionatedPluginsRpc, WsServerInstallOpinionatedPluginRpc, WsMcpListWorkspacesRpc, WsMcpListServersRpc, WsMcpUpsertServerRpc, WsMcpSetServerEnabledRpc, WsMcpRemoveServerRpc, WsMcpReloadServersRpc, WsMcpStartOauthLoginRpc, WsSourceControlLookupRepositoryRpc, WsSourceControlSearchRepositoriesRpc, WsSourceControlCloneRepositoryRpc, WsSourceControlPublishRepositoryRpc, WsSourceControlListIssuesRpc, WsSourceControlGetIssueRpc, WsSourceControlSearchIssuesRpc, WsSourceControlListChangeRequestsRpc, WsSourceControlSearchChangeRequestsRpc, WsSourceControlGetChangeRequestDetailRpc, WsSourceControlGetChangeRequestDiffRpc, WsSourceControlMergeChangeRequestRpc, WsSourceControlCreateIssueRpc, WsSourceControlAddIssueCommentRpc, WsSourceControlAddIssueCommentReactionRpc, WsSourceControlAddChangeRequestCommentRpc, WsSourceControlAddChangeRequestCommentReactionRpc, WsSourceControlListIssueLabelsRpc, WsSourceControlListIssueAssigneesRpc, WsSourceControlListWorkflowRunsRpc, WsSourceControlGetWorkflowRunJobsRpc, WsSourceControlGetWorkflowJobLogRpc, WsSourceControlRerunWorkflowRpc, WsTextGenerationGenerateIssueContentRpc, WsTextGenerationGenerateBranchNameRpc, WsAtlassianListConnectionsRpc, WsAtlassianStartOAuthRpc, WsAtlassianDisconnectRpc, WsAtlassianRefreshRpc, WsAtlassianListResourcesRpc, WsAtlassianGetProjectLinkRpc, WsAtlassianSaveProjectLinkRpc, WsAtlassianSaveManualBitbucketTokenRpc, WsAtlassianSaveManualJiraTokenRpc, WsWorkItemsListProjectsRpc, WsWorkItemsListRpc, WsWorkItemsSearchRpc, WsWorkItemsGetRpc, WsWorkItemsAddCommentRpc, WsWorkItemsEditCommentRpc, WsWorkItemsUpdateRpc, WsWorkItemsListTransitionsRpc, WsWorkItemsTransitionRpc, WsProjectsListEntriesRpc, WsProjectsSearchEntriesRpc, WsProjectsReadFileRpc, WsProjectsReadIconRpc, WsProjectsReadFileBinaryRpc, WsProjectsWriteFileRpc, WsProjectsStageFileReferenceRpc, WsChatAttachmentsCreateFileUploadRpc, WsChatAttachmentsReadChunkRpc, WsShellOpenInEditorRpc, WsFilesystemBrowseRpc, WsSubscribeVcsStatusRpc, WsVcsPullRpc, WsVcsRefreshStatusRpc, WsGitRunStackedActionRpc, WsGitResolvePullRequestRpc, WsGitPreparePullRequestThreadRpc, WsGitCreateWorktreeForProjectRpc, WsGitFindWorktreeForOriginRpc, WsGitArchiveWorktreeRpc, WsGitRestoreWorktreeRpc, WsGitDeleteWorktreeRpc, WsThreadsSetManualBucketRpc, WsThreadsSetManualPositionRpc, WsSearchThreadMessagesRpc, WsThreadPriorityEnsureCurrentRpc, WsWorktreesSetManualPositionRpc, WsProjectsInitializeGitRpc, WsVcsListRefsRpc, WsVcsCreateWorktreeRpc, WsVcsRemoveWorktreeRpc, WsVcsCreateRefRpc, WsVcsSwitchRefRpc, WsVcsInitRpc, WsTerminalOpenRpc, WsTerminalWriteRpc, WsTerminalResizeRpc, WsTerminalClearRpc, WsTerminalRestartRpc, WsTerminalCloseRpc, WsSubscribeTerminalEventsRpc, WsSubscribeServerConfigRpc, WsSubscribeServerLifecycleRpc, WsSubscribeAuthAccessRpc, WsAgentControlListProposalsRpc, WsAgentControlGetProposalRpc, WsAgentControlAcceptProposalRpc, WsAgentControlRejectProposalRpc, WsAgentControlSubscribeProposalsRpc, WsAgentControlListIntegrationsRpc, WsAgentControlCreateIntegrationRpc, WsAgentControlUpdateIntegrationRpc, WsAgentControlResumeIntegrationPairingRpc, WsAgentControlRevokeIntegrationRpc, WsAgentControlDeleteIntegrationRpc, WsAgentControlListMcpInstallationsRpc, WsAgentControlConnectMcpInstallationRpc, WsAgentControlRepairMcpInstallationRpc, WsAgentControlDisconnectMcpInstallationRpc, WsOrchestrationDispatchCommandRpc, WsOrchestrationGetWorkflowScriptRpc, WsOrchestrationGetTaskOutputRpc, WsOrchestrationStopBackgroundTaskRpc, WsOrchestrationGetTurnDiffRpc, WsOrchestrationGetFullThreadDiffRpc, WsOrchestrationSearchThreadMessagesRpc, WsOrchestrationGetThreadWindowRpc, WsOrchestrationGetThreadHistoryPageRpc, WsOrchestrationReplayEventsRpc, WsOrchestrationReplayEventsPageRpc, WsOrchestrationSubscribeShellRpc, WsOrchestrationSubscribeThreadRpc, WsOrchestrationSubscribeThreadWindowRpc, WsContextHandoffGetInspectionSummaryRpc, WsContextHandoffListInspectionEntriesRpc, WsContextHandoffReadRawPayloadChunkRpc, WsContextHandoffReadExportChunkRpc);
 /**
 * Hosted relay channels carry both groups through one lifecycle-owned encrypted
 * channel. Direct clients keep the device group on its own low-priority socket
@@ -14187,6 +14225,12 @@ Object.defineProperty(exports, "OrchestrationWorktreeShell", {
 		return OrchestrationWorktreeShell;
 	}
 });
+Object.defineProperty(exports, "PROJECT_ICON_MAX_BYTES", {
+	enumerable: true,
+	get: function() {
+		return PROJECT_ICON_MAX_BYTES;
+	}
+});
 Object.defineProperty(exports, "PROJECT_READ_FILE_BINARY_MAX_BYTES", {
 	enumerable: true,
 	get: function() {
@@ -14283,6 +14327,12 @@ Object.defineProperty(exports, "ProjectReadFileError", {
 		return ProjectReadFileError;
 	}
 });
+Object.defineProperty(exports, "ProjectReadIconError", {
+	enumerable: true,
+	get: function() {
+		return ProjectReadIconError;
+	}
+});
 Object.defineProperty(exports, "ProjectScript", {
 	enumerable: true,
 	get: function() {

package/dist/{makeManagedServerProvider-GZcpSLrW.mjs → makeManagedServerProvider-CwYhl_P-.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import "./collectUint8StreamText-C_VNyArd.mjs";
+import "./collectUint8StreamText-CE1Re5Ij.mjs";
 import { r as ignoreProviderBackgroundCause, wt as ProviderAdapterValidationError } from "./bin.mjs";
 import { Clock, Deferred, Duration, Effect, Equal, Fiber, PubSub, Ref, Stream, SynchronizedRef } from "effect";
 import * as Semaphore$1 from "effect/Semaphore";

package/dist/{makeManagedServerProvider-VzxWN-04.cjs → makeManagedServerProvider-Dy2Ny9tk.cjs}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 const require_rolldown_runtime = require("./rolldown-runtime-LGfotAqq.cjs");
-require("./collectUint8StreamText-DStwNTTK.cjs");
+require("./collectUint8StreamText-whblCEfg.cjs");
 const require_bin = require("./bin.cjs");
 let effect = require("effect");
 let effect_Semaphore = require("effect/Semaphore");

package/package.json

@@ -10,7 +10,7 @@
     "ryco-cli": "dist/bin.mjs"
   },
   "type": "module",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "engines": {
     "node": "^22.16 || ^23.11 || >=24.10"
   },

package/dist/client/assets/AccountSettings-ApnDA1f-.js

@@ -1 +0,0 @@
-import{i as e,t}from"./react-SIfiwpqq.js";import"./src-BSuAGqhK.js";import{Da as n,I as r,Ma as i,N as a,Na as o,P as s,Rr as c,_l as l,wa as u,zr as d}from"./runtime-Djy96GJd.js";import{A as f,F as p,Ft as m,I as h,It as g,M as _,Mt as v,N as ee,Nt as y,P as te,Pt as ne,an as b,ct as x,j as S,jt as re,kt as C,r as w}from"./switch-DD1qVLgN.js";import{t as T}from"./compiler-runtime-qmuS0Svy.js";import{t as E}from"./badge-Dg7mXiOh.js";import{K as D}from"./ContextHandoffEndpointLabel-BildLLDY.js";import{t as O}from"./key-round-D2DtQ7aS.js";import{t as k}from"./refresh-cw-DY3_Ph-S.js";import{t as A}from"./shield-check-CO4SMhAs.js";import{t as j}from"./user-round-DctamWV6.js";import{_ as M,o as N}from"./authorization-CjOFkg7b.js";import{n as ie,t as ae}from"./input-DrOL1KPS.js";import{i as P,n as oe,r as F,t as I}from"./alert-CXnC_RJc.js";import{C as L,S as R,_ as z,a as se,b as B,c as ce,d as le,f as V,g as H,h as U,i as W,l as G,m as K,n as q,o as J,p as Y,r as ue,s as X,t as de,u as fe,v as Z,x as pe,y as me}from"./ExternalIdentityWeb.logic-arHvT6AX.js";import{i as he,n as ge,r as _e}from"./settingsLayout-C6SUmJVB.js";import{t as ve}from"./qr-code-Bk1kdf_k.js";var ye={name:`monitor-smartphone`,size:24,node:[[`path`,{d:`M18 8V6a2 2 0 0 0-2-2H4a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h8`,key:`10dyio`}],[`path`,{d:`M10 19v-3.96 3.15`,key:`1irgej`}],[`path`,{d:`M7 19h5`,key:`qswx4l`}],[`rect`,{width:`6`,height:`10`,x:`16`,y:`12`,rx:`2`,key:`1egngj`}]]};ye.node;var be=o(ye),Q=e(t(),1),xe=T(),Se=`Signed-in native apps use these device keys to establish encrypted connections automatically. The Hub authorizes account-trusted connections, so this does not protect against a malicious Hub; independent node verification remains the stronger option.`,Ce={darwin:`macOS`,linux:`Linux`,windows:`Windows`,ios:`iPhone or iPad`,android:`Android`},we={"secure-enclave":`Secure Enclave`,strongbox:`StrongBox`,tee:`Hardware-backed TEE`,tpm:`TPM`,"hardware-backed":`Hardware backed`,unavailable:`Unavailable`};function Te(e){return Ce[e.platform]}function Ee(e){return`${we[e.reportedKeyBacking]} · reported by device`}function De(e){switch(e.status){case`active`:return`Active`;case`revoked`:return`Revoked`;case`superseded`:return`Superseded`}}function Oe(e){let t=e.trim();return t.length>0&&t.length<=100?t:null}function ke(e,t){return[{label:`Enrollment`,value:e.enrollmentId},{label:`Identity fingerprint`,value:e.identityFingerprint,fingerprint:!0},{label:`Agreement fingerprint`,value:e.agreementFingerprint,fingerprint:!0},{label:`Key backing`,value:Ee(e)},{label:`First enrolled`,value:t(e.createdAt)},{label:`Last used`,value:e.lastUsedAt===null?`Not used yet`:t(e.lastUsedAt)},...e.revokedAt===null?[]:[{label:`Revoked`,value:t(e.revokedAt)}]]}var $=l(),Ae=new Intl.DateTimeFormat(void 0,{dateStyle:`medium`,timeStyle:`short`});function je(e){return Ae.format(new Date(e))}function Me(){let e=(0,xe.c)(75),t=a(Re),n=a(Le),r=a(Ie),[i,o]=(0,Q.useState)(null),[s,c]=(0,Q.useState)(``),[l,u]=(0,Q.useState)(null),b=r!==`idle`,T=r===`renaming-e2ee-device`,D=r===`revoking-e2ee-device`,O;e[0]===s?O=e[1]:(O=Oe(s),e[0]=s,e[1]=O);let k=O,A;e[2]===Symbol.for(`react.memo_cache_sentinel`)?(A=[],e[2]=A):A=e[2],(0,Q.useEffect)(Fe,A);let j;e[3]!==k||e[4]!==i?(j=async()=>{i&&k!==null&&(await N.renameE2eeDevice(i.enrollmentId,{expectedEnrollmentRevision:i.enrollmentRevision,deviceLabel:k})).status===`committed`&&(o(null),c(``))},e[3]=k,e[4]=i,e[5]=j):j=e[5];let M=j,P;e[6]===l?P=e[7]:(P=async()=>{l&&(await N.revokeE2eeDevice(l.enrollmentId,{expectedEnrollmentRevision:l.enrollmentRevision,reasonCode:`owner_requested`})).status===`committed`&&u(null)},e[6]=l,e[7]=P);let oe=P,F;e[8]===Symbol.for(`react.memo_cache_sentinel`)?(F=(0,$.jsx)(be,{"aria-hidden":!0,className:`size-3.5`}),e[8]=F):F=e[8];let I=b||n===`loading`,L;e[9]===I?L=e[10]:(L=(0,$.jsx)(d,{size:`xs`,variant:`ghost`,disabled:I,onClick:Pe,children:`Refresh`}),e[9]=I,e[10]=L);let R;e[11]===Symbol.for(`react.memo_cache_sentinel`)?(R=(0,$.jsx)(_e,{title:`Automatic native encryption`,description:Se,status:`A new signed-in Desktop or mobile app enrolls its own keys; private keys stay on that device.`}),e[11]=R):R=e[11];let z;e[12]!==b||e[13]!==t||e[14]!==n?(z=t.length===0?(0,$.jsx)(_e,{title:n===`loading`?`Loading devices…`:`No native devices yet`,description:`Sign in from Ryco Desktop or mobile to enroll that app automatically. Web sessions stay separate and do not join this native device trust set.`,status:n===`stale`?`The device directory is temporarily unavailable.`:null,control:n===`loading`?(0,$.jsx)(x,{className:`size-3.5`}):null}):t.map(e=>{let t=e.status===`active`;return(0,$.jsx)(_e,{title:(0,$.jsxs)(`span`,{className:`flex flex-wrap items-center gap-2`,children:[e.deviceLabel,(0,$.jsx)(E,{variant:t?`success`:`secondary`,children:De(e)})]}),description:`${Te(e)} · Ryco ${e.appVersion}`,status:n===`stale`?`Showing the last device directory Ryco read.`:null,control:t?(0,$.jsxs)($.Fragment,{children:[(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:b,onClick:()=>{o(e),c(e.deviceLabel)},children:`Rename`}),(0,$.jsx)(d,{size:`xs`,variant:`destructive-outline`,disabled:b,onClick:()=>u(e),children:`Revoke`})]}):null,children:(0,$.jsx)(`dl`,{className:`mt-3 grid grid-cols-[auto_1fr] gap-x-4 gap-y-2 border-t border-border/60 py-3`,children:ke(e,je).map(Ne)})},`${e.enrollmentId}:${String(e.enrollmentRevision)}`)}),e[12]=b,e[13]=t,e[14]=n,e[15]=z):z=e[15];let se=i!==null,B;e[16]===T?B=e[17]:(B=e=>{e||T||(o(null),c(``))},e[16]=T,e[17]=B);let ce;e[18]===M?ce=e[19]:(ce=e=>{e.preventDefault(),M()},e[18]=M,e[19]=ce);let le;e[20]===Symbol.for(`react.memo_cache_sentinel`)?(le=(0,$.jsxs)(y,{children:[(0,$.jsx)(g,{children:`Rename encrypted device`}),(0,$.jsx)(re,{children:`This label is account metadata. Renaming does not rotate or replace the device keys.`})]}),e[20]=le):le=e[20];let V;e[21]===Symbol.for(`react.memo_cache_sentinel`)?(V=(0,$.jsx)(w,{htmlFor:`account-e2ee-device-label`,children:`Device name`}),e[21]=V):V=e[21];let H;e[22]===Symbol.for(`react.memo_cache_sentinel`)?(H=e=>c(e.target.value),e[22]=H):H=e[22];let U;e[23]!==s||e[24]!==T?(U=(0,$.jsxs)(ne,{className:`space-y-2`,children:[V,(0,$.jsx)(ae,{id:`account-e2ee-device-label`,value:s,maxLength:100,disabled:T,className:ie,onChange:H})]}),e[23]=s,e[24]=T,e[25]=U):U=e[25];let W;e[26]===Symbol.for(`react.memo_cache_sentinel`)?(W=()=>{o(null),c(``)},e[26]=W):W=e[26];let G;e[27]===T?G=e[28]:(G=(0,$.jsx)(d,{type:`button`,variant:`outline`,disabled:T,onClick:W,children:`Cancel`}),e[27]=T,e[28]=G);let K=T||k===null,q;e[29]===T?q=e[30]:(q=T?(0,$.jsx)(x,{className:`size-3.5`}):null,e[29]=T,e[30]=q);let J;e[31]!==K||e[32]!==q?(J=(0,$.jsxs)(d,{type:`submit`,disabled:K,children:[q,`Save name`]}),e[31]=K,e[32]=q,e[33]=J):J=e[33];let Y;e[34]!==G||e[35]!==J?(Y=(0,$.jsxs)(v,{children:[G,J]}),e[34]=G,e[35]=J,e[36]=Y):Y=e[36];let ue;e[37]!==ce||e[38]!==U||e[39]!==Y?(ue=(0,$.jsx)(m,{className:`max-w-sm`,children:(0,$.jsxs)(`form`,{onSubmit:ce,children:[le,U,Y]})}),e[37]=ce,e[38]=U,e[39]=Y,e[40]=ue):ue=e[40];let X;e[41]!==B||e[42]!==ue||e[43]!==se?(X=(0,$.jsx)(C,{open:se,onOpenChange:B,children:ue}),e[41]=B,e[42]=ue,e[43]=se,e[44]=X):X=e[44];let de=l!==null,fe;e[45]===D?fe=e[46]:(fe=e=>{!e&&!D&&u(null)},e[45]=D,e[46]=fe);let Z;e[47]===Symbol.for(`react.memo_cache_sentinel`)?(Z=(0,$.jsx)(h,{children:`Revoke this encrypted device?`}),e[47]=Z):Z=e[47];let pe=l?.deviceLabel??`This device`,me;e[48]===pe?me=e[49]:(me=(0,$.jsxs)(te,{children:[Z,(0,$.jsxs)(_,{children:[pe,` will lose account-authorized native connections. Signing in again can enroll fresh keys, but this enrollment cannot be restored.`]})]}),e[48]=pe,e[49]=me);let ge;e[50]===D?ge=e[51]:(ge=(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`,disabled:D}),children:`Cancel`}),e[50]=D,e[51]=ge);let ve;e[52]===oe?ve=e[53]:(ve=()=>void oe(),e[52]=oe,e[53]=ve);let ye;e[54]===D?ye=e[55]:(ye=D?(0,$.jsx)(x,{className:`size-3.5`}):null,e[54]=D,e[55]=ye);let Ce;e[56]!==D||e[57]!==ve||e[58]!==ye?(Ce=(0,$.jsxs)(d,{variant:`destructive`,disabled:D,onClick:ve,children:[ye,`Revoke device`]}),e[56]=D,e[57]=ve,e[58]=ye,e[59]=Ce):Ce=e[59];let we;e[60]!==ge||e[61]!==Ce?(we=(0,$.jsxs)(ee,{children:[ge,Ce]}),e[60]=ge,e[61]=Ce,e[62]=we):we=e[62];let Ee;e[63]!==me||e[64]!==we?(Ee=(0,$.jsxs)(p,{children:[me,we]}),e[63]=me,e[64]=we,e[65]=Ee):Ee=e[65];let Ae;e[66]!==de||e[67]!==fe||e[68]!==Ee?(Ae=(0,$.jsx)(f,{open:de,onOpenChange:fe,children:Ee}),e[66]=de,e[67]=fe,e[68]=Ee,e[69]=Ae):Ae=e[69];let Me;return e[70]!==X||e[71]!==Ae||e[72]!==L||e[73]!==z?(Me=(0,$.jsxs)(he,{title:`Encrypted devices`,icon:F,headerAction:L,children:[R,z,X,Ae]}),e[70]=X,e[71]=Ae,e[72]=L,e[73]=z,e[74]=Me):Me=e[74],Me}function Ne(e){return(0,$.jsxs)(`div`,{className:`contents`,children:[(0,$.jsx)(`dt`,{className:`text-xs text-muted-foreground`,children:e.label}),(0,$.jsx)(`dd`,{className:e.fingerprint?`min-w-0 font-mono text-xs break-all`:`min-w-0 text-xs break-all`,children:e.value})]},e.label)}function Pe(){N.refreshE2eeDevices({force:!0})}function Fe(){N.refreshE2eeDevices()}function Ie(e){return e.actionStatus}function Le(e){return e.e2eeDevicesStatus??`idle`}function Re(e){return e.e2eeDevices??[]}var ze=new Intl.DateTimeFormat(void 0,{dateStyle:`medium`,timeStyle:`short`});function Be(e){return e===null||!Number.isFinite(e)?null:ze.format(new Date(e))}function Ve(){let e=(0,xe.c)(15),[t,n]=(0,Q.useState)(null),[r,i]=(0,Q.useState)(0),[a,o]=(0,Q.useState)(``),[s,c]=(0,Q.useState)(!1),l=(0,Q.useRef)(0),u;e[0]===Symbol.for(`react.memo_cache_sentinel`)?(u=()=>{n(null),i(0),o(``)},e[0]=u):u=e[0];let d=u,f;e[1]===t?.options?f=e[2]:(f=()=>{l.current+=1,N.cancelAccountAction(),t?.options?.onAbandoned?.(),c(!1),d()},e[1]=t?.options,e[2]=f);let p=f,m;e[3]===Symbol.for(`react.memo_cache_sentinel`)?(m=async(e,t,r)=>{let a=l.current+=1;c(!1);let s=await t({});if(l.current===a){if(V(s)){o(``),i(0),n({action:e,run:t,options:r,inferred:s.inferredErrorCode===!0});return}s.status===`committed`&&r?.onCommitted?.()}},e[3]=m):m=e[3];let h=m,g;e[4]!==t||e[5]!==a||e[6]!==r?(g=async()=>{if(!t)return;let e=U(a);if(e.length===0)return;let n=l.current+=1,s=await t.run({totpCode:e});if(l.current===n){if(V(s)){let e=r+1;if(B(s,e)){i(e),o(``);return}c(!0),t.options?.onAbandoned?.(),d();return}s.status===`committed`&&t.options?.onCommitted?.(),d()}},e[4]=t,e[5]=a,e[6]=r,e[7]=g):g=e[7];let _=g,v;return e[8]!==p||e[9]!==t||e[10]!==a||e[11]!==r||e[12]!==s||e[13]!==_?(v={run:h,cancel:p,stepUp:t,stepUpAttempts:r,stepUpCode:a,stepUpUnresolved:s,setStepUpCode:o,submitStepUp:_},e[8]=p,e[9]=t,e[10]=a,e[11]=r,e[12]=s,e[13]=_,e[14]=v):v=e[14],v}function He(){let e=(0,xe.c)(1),t;e[0]===Symbol.for(`react.memo_cache_sentinel`)?(t=[],e[0]=t):t=e[0],(0,Q.useEffect)(Ue,t)}function Ue(){return N.leaseRecoveryCodeDisplay()}function We(e){let t=(0,xe.c)(3),{busy:n,children:r}=e,i;return t[0]!==n||t[1]!==r?(i=n?(0,$.jsxs)($.Fragment,{children:[(0,$.jsx)(x,{className:`size-3.5`}),r]}):(0,$.jsx)($.Fragment,{children:r}),t[0]=n,t[1]=r,t[2]=i):i=t[2],i}function Ge(){let e=(0,xe.c)(100),t=s(ut),n=s(lt),[i,o]=(0,Q.useState)(!1),c=a(ct),l=a(st),f=a(ot),p=a(at),m=a(it),h=a(rt),g=a(nt),_=a(tt),v=s(et),ee=s($e),[y,te]=(0,Q.useState)(!1),[ne,b]=(0,Q.useState)(null),x=(0,Q.useRef)(!1),S=Ve(),re=S.run;He();let C=h!==`idle`,w;e[0]===m?w=e[1]:(w=ue(m),e[0]=m,e[1]=w);let T=w,E;e[2]===f?.externalIdentities?E=e[3]:(E=f?.externalIdentities.find(Qe)??null,e[2]=f?.externalIdentities,e[3]=E);let D=E,O;e[4]===y?O=e[5]:(O=async()=>{if(!y){te(!0),b(null);try{await de({intent:`link`,returnTo:`/account/security`,start:Ze,navigate:Xe})}catch(e){let t=e;b(t instanceof M?t.message:`GitHub connection is temporarily unavailable.`),te(!1)}}},e[4]=y,e[5]=O);let k=O,N;e[6]===Symbol.for(`react.memo_cache_sentinel`)?(N=[],e[6]=N):N=e[6],(0,Q.useEffect)(Ye,N);let ie,ae;if(e[7]!==t||e[8]!==re?(ie=()=>{if(t!==`authenticated`||x.current)return;x.current=!0;let e=new AbortController;return r.getPendingExternalIdentity(e.signal).then(e=>{if(e.status===`link`)return re(`connect-github`,Je);e.status===`error`&&b(q(e.code))}).catch(qe),()=>e.abort()},ae=[t,re],e[7]=t,e[8]=re,e[9]=ie,e[10]=ae):(ie=e[9],ae=e[10]),(0,Q.useEffect)(ie,ae),t!==`authenticated`){let t;return e[11]===Symbol.for(`react.memo_cache_sentinel`)?(t=(0,$.jsx)(ge,{children:(0,$.jsxs)(I,{variant:`warning`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:`Not signed in`}),(0,$.jsx)(F,{children:`Sign in to the Hub to manage passkeys, two-factor authentication, and recovery codes.`})]})}),e[11]=t):t=e[11],t}let L;e[12]!==S.stepUp||e[13]!==S.stepUpUnresolved||e[14]!==_||e[15]!==g?(L=S.stepUpUnresolved?W:G(g,_,S.stepUp!==null),e[12]=S.stepUp,e[13]=S.stepUpUnresolved,e[14]=_,e[15]=g,e[16]=L):L=e[16];let R=L,z;e[17]!==S.stepUpUnresolved||e[18]!==_?(z=!S.stepUpUnresolved&&le(_),e[17]=S.stepUpUnresolved,e[18]=_,e[19]=z):z=e[19];let B=z,ce;e[20]!==c||e[21]!==l?(ce=se(c,l),e[20]=c,e[21]=l,e[22]=ce):ce=e[22];let V=ce,H;e[23]!==R||e[24]!==B?(H=R?(0,$.jsxs)(I,{variant:B?`info`:`error`,"aria-live":`polite`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:B?`Passkey needed`:`That did not work`}),(0,$.jsx)(F,{children:R})]}):null,e[23]=R,e[24]=B,e[25]=H):H=e[25];let U;e[26]===ne?U=e[27]:(U=ne?(0,$.jsxs)(I,{variant:`warning`,"aria-live":`polite`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:`GitHub connection did not complete`}),(0,$.jsx)(F,{children:ne})]}):null,e[26]=ne,e[27]=U);let K;e[28]!==f||e[29]!==p?(K=f===null&&p!==`stale`?(0,$.jsxs)(I,{variant:`info`,"aria-live":`polite`,children:[(0,$.jsx)(A,{"aria-hidden":!0}),(0,$.jsx)(P,{children:`Checking account security`}),(0,$.jsx)(F,{children:`Reading which fallback sign-in methods are configured on this Hub.`})]}):null,e[28]=f,e[29]=p,e[30]=K):K=e[30];let J;e[31]!==C||e[32]!==f||e[33]!==p?(J=p===`stale`?(0,$.jsxs)(I,{variant:`warning`,"aria-live":`polite`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:f===null?`Account security unavailable`:`Account security may be outdated`}),(0,$.jsx)(F,{children:f===null?`Ryco could not read the current password, authenticator, and email state.`:`These controls use the last state Ryco successfully read from the Hub.`}),(0,$.jsx)(oe,{children:(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:C,onClick:Ke,children:`Retry`})})]}):null,e[31]=C,e[32]=f,e[33]=p,e[34]=J):J=e[34];let Y;e[35]!==C||e[36]!==V?(Y=V?(0,$.jsxs)(I,{variant:V.variant,"aria-live":`polite`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:V.title}),(0,$.jsx)(F,{children:V.description}),(0,$.jsx)(oe,{children:(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:C,onClick:()=>o(!0),children:V.actionLabel})})]}):null,e[35]=C,e[36]=V,e[37]=Y):Y=e[37];let X;e[38]===Symbol.for(`react.memo_cache_sentinel`)?(X=(0,$.jsx)(j,{"aria-hidden":!0,className:`size-3.5`}),e[38]=X):X=e[38];let fe=n?.displayName??`Signed in`,Z;e[39]===n?Z=e[40]:(Z=n?`${n.role} · joined ${Be(n.createdAt)??`unknown`}`:null,e[39]=n,e[40]=Z);let pe;e[41]!==fe||e[42]!==Z?(pe=(0,$.jsx)(he,{title:`Account`,icon:X,children:(0,$.jsx)(_e,{title:fe,description:`The Hub account these credentials belong to.`,status:Z})}),e[41]=fe,e[42]=Z,e[43]=pe):pe=e[43];let me;e[44]===Symbol.for(`react.memo_cache_sentinel`)?(me=(0,$.jsx)(Me,{}),e[44]=me):me=e[44];let ve;e[45]!==h||e[46]!==C||e[47]!==y||e[48]!==D||e[49]!==T?.link||e[50]!==re||e[51]!==k?(ve=D||T?.link?(0,$.jsx)(dt,{identity:D,actionsAvailable:T?.link===!0,busy:C||y,actionStatus:h,onConnect:()=>void k(),run:re}):null,e[45]=h,e[46]=C,e[47]=y,e[48]=D,e[49]=T?.link,e[50]=re,e[51]=k,e[52]=ve):ve=e[52];let ye=l===`loading`,be=l===`stale`,Se;e[53]!==S.cancel||e[54]!==S.run||e[55]!==h||e[56]!==i||e[57]!==C||e[58]!==c||e[59]!==ye||e[60]!==be?(Se=(0,$.jsx)(pt,{passkeys:c,loading:ye,stale:be,busy:C,actionStatus:h,addOpen:i,setAddOpen:o,run:S.run,cancel:S.cancel}),e[53]=S.cancel,e[54]=S.run,e[55]=h,e[56]=i,e[57]=C,e[58]=c,e[59]=ye,e[60]=be,e[61]=Se):Se=e[61];let Ce=f?.totpEnrolled??null,we;e[62]!==S.run||e[63]!==h||e[64]!==C||e[65]!==Ce||e[66]!==ee?(we=(0,$.jsx)(mt,{busy:C,actionStatus:h,enrollment:ee,enrolled:Ce,run:S.run}),e[62]=S.run,e[63]=h,e[64]=C,e[65]=Ce,e[66]=ee,e[67]=we):we=e[67];let Te;e[68]!==S.run||e[69]!==h||e[70]!==C||e[71]!==v?(Te=(0,$.jsx)(bt,{busy:C,actionStatus:h,recoveryCodes:v,run:S.run}),e[68]=S.run,e[69]=h,e[70]=C,e[71]=v,e[72]=Te):Te=e[72];let Ee;e[73]!==S.cancel||e[74]!==S.run||e[75]!==h||e[76]!==C||e[77]!==f?(Ee=(0,$.jsx)(_t,{busy:C,actionStatus:h,security:f,run:S.run,cancel:S.cancel}),e[73]=S.cancel,e[74]=S.run,e[75]=h,e[76]=C,e[77]=f,e[78]=Ee):Ee=e[78];let De;e[79]!==S.cancel||e[80]!==S.setStepUpCode||e[81]!==S.stepUp||e[82]!==S.stepUpAttempts||e[83]!==S.stepUpCode||e[84]!==S.submitStepUp||e[85]!==C?(De=(0,$.jsx)(Tt,{pending:S.stepUp,attempts:S.stepUpAttempts,code:S.stepUpCode,onCodeChange:S.setStepUpCode,onSubmit:S.submitStepUp,onCancel:S.cancel,busy:C}),e[79]=S.cancel,e[80]=S.setStepUpCode,e[81]=S.stepUp,e[82]=S.stepUpAttempts,e[83]=S.stepUpCode,e[84]=S.submitStepUp,e[85]=C,e[86]=De):De=e[86];let Oe;return e[87]!==U||e[88]!==K||e[89]!==J||e[90]!==Y||e[91]!==pe||e[92]!==ve||e[93]!==Se||e[94]!==we||e[95]!==Te||e[96]!==Ee||e[97]!==De||e[98]!==H?(Oe=(0,$.jsxs)(ge,{children:[H,U,K,J,Y,pe,me,ve,Se,we,Te,Ee,De]}),e[87]=U,e[88]=K,e[89]=J,e[90]=Y,e[91]=pe,e[92]=ve,e[93]=Se,e[94]=we,e[95]=Te,e[96]=Ee,e[97]=De,e[98]=H,e[99]=Oe):Oe=e[99],Oe}function Ke(){N.refreshAccountSecurity({force:!0})}function qe(){}function Je(e){return N.finishBrowserExternalIdentityConnection(`github`,e)}function Ye(){N.refreshPasskeys(),N.refreshAccountSecurity(),N.refreshExternalIdentityConfiguration()}function Xe(e){return window.location.assign(e)}function Ze(e){return r.startExternalIdentityAuthorization(e)}function Qe(e){return e.provider===`github`}function $e(e){return e.totpEnrollment??null}function et(e){return e.recoveryCodes}function tt(e){return e.errorCode??null}function nt(e){return e.errorMessage}function rt(e){return e.actionStatus}function it(e){return e.externalIdentityConfiguration}function at(e){return e.securityStatus}function ot(e){return e.security}function st(e){return e.passkeysStatus}function ct(e){return e.passkeys}function lt(e){return e.account}function ut(e){return e.accountStatus}function dt(e){let t=(0,xe.c)(33),{identity:n,actionsAvailable:r,busy:i,actionStatus:a,onConnect:o,run:s}=e,[c,l]=(0,Q.useState)(!1),u=a===`connecting-external-identity`,m=a===`disconnecting-external-identity`,g;t[0]===s?g=t[1]:(g=async()=>{await s(`disconnect-github`,ft,{onCommitted:()=>l(!1)})},t[0]=s,t[1]=g);let v=g,y;t[2]===Symbol.for(`react.memo_cache_sentinel`)?(y=(0,$.jsx)(b,{"aria-hidden":!0,className:`size-3.5`}),t[2]=y):y=t[2];let ne=n?`GitHub · @${n.login}`:`GitHub`,x=n?`Use this GitHub identity to sign in to Ryco. Repository access remains separate.`:`Connect GitHub as another way to sign in. Ryco requests no repository access.`,re;t[3]===n?re=t[4]:(re=n?`Connected ${Be(n.connectedAt)??`at an unknown time`}${n.lastUsedAt===null?``:` · last used ${Be(n.lastUsedAt)??`at an unknown time`}`}`:null,t[3]=n,t[4]=re);let C;t[5]!==r||t[6]!==i||t[7]!==u||t[8]!==m||t[9]!==n||t[10]!==o?(C=r?n?(0,$.jsx)(d,{size:`sm`,variant:`outline`,disabled:i,onClick:()=>l(!0),children:(0,$.jsx)(We,{busy:m,children:`Disconnect`})}):(0,$.jsx)(d,{size:`sm`,variant:`outline`,disabled:i,onClick:o,children:(0,$.jsx)(We,{busy:u,children:`Connect GitHub`})}):null,t[5]=r,t[6]=i,t[7]=u,t[8]=m,t[9]=n,t[10]=o,t[11]=C):C=t[11];let w;t[12]!==ne||t[13]!==x||t[14]!==re||t[15]!==C?(w=(0,$.jsx)(_e,{title:ne,description:x,status:re,control:C}),t[12]=ne,t[13]=x,t[14]=re,t[15]=C,t[16]=w):w=t[16];let T;t[17]===Symbol.for(`react.memo_cache_sentinel`)?(T=(0,$.jsxs)(te,{children:[(0,$.jsx)(h,{children:`Disconnect GitHub?`}),(0,$.jsx)(_,{children:`You will no longer be able to sign in with GitHub. Ryco refuses this change if GitHub is your only remaining sign-in method.`})]}),t[17]=T):T=t[17];let E;t[18]===Symbol.for(`react.memo_cache_sentinel`)?(E=(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`}),children:`Cancel`}),t[18]=E):E=t[18];let D;t[19]===v?D=t[20]:(D=()=>void v(),t[19]=v,t[20]=D);let O;t[21]===m?O=t[22]:(O=(0,$.jsx)(We,{busy:m,children:`Disconnect GitHub`}),t[21]=m,t[22]=O);let k;t[23]!==i||t[24]!==D||t[25]!==O?(k=(0,$.jsxs)(p,{children:[T,(0,$.jsxs)(ee,{children:[E,(0,$.jsx)(d,{disabled:i,onClick:D,children:O})]})]}),t[23]=i,t[24]=D,t[25]=O,t[26]=k):k=t[26];let A;t[27]!==c||t[28]!==k?(A=(0,$.jsx)(f,{open:c,onOpenChange:l,children:k}),t[27]=c,t[28]=k,t[29]=A):A=t[29];let j;return t[30]!==A||t[31]!==w?(j=(0,$.jsxs)(he,{title:`Connected accounts`,icon:y,children:[w,A]}),t[30]=A,t[31]=w,t[32]=j):j=t[32],j}function ft(e){return N.disconnectExternalIdentity(`github`,e)}function pt({passkeys:e,loading:t,stale:n,busy:r,actionStatus:i,addOpen:a,setAddOpen:o,run:s,cancel:c}){let[l,u]=(0,Q.useState)(``),[b,x]=(0,Q.useState)(null),[T,k]=(0,Q.useState)(null),A=i===`adding-passkey`,j=i===`revoking-passkey`,M=J(e),P=L(e),oe=H(e),F=(0,Q.useCallback)(()=>{u(``),o(!1)},[o]),I=async e=>{e.preventDefault();let t=K(l);await s(`add-passkey`,e=>N.addPasskey({passkeyLabel:t,...e}),{onCommitted:F,onAbandoned:F})},R=async()=>{let e=b;if(e){x(null),k(e.id);try{await N.revokePasskey(e.id)}finally{k(null)}}};return(0,$.jsxs)(he,{title:`Passkeys`,icon:(0,$.jsx)(O,{"aria-hidden":!0,className:`size-3.5`}),headerAction:(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:r,onClick:()=>o(!0),children:`Add passkey`}),children:[(0,$.jsx)(_e,{title:`Passkeys on this account`,description:`A passkey is the strongest way in. Add one for every device you sign in from, and keep at least two so losing a device does not lock you out.`,status:n?`This list could not be refreshed and may be out of date.`:(0,$.jsxs)($.Fragment,{children:[(0,$.jsx)(`span`,{children:`${String(M.length)} usable ${M.length===1?`passkey`:`passkeys`}`}),P>0?(0,$.jsx)(`span`,{children:` · ${String(P)} synced to a password manager`}):null]})}),t&&e.length===0?(0,$.jsx)(_e,{title:`Loading passkeys…`,description:`Reading the credentials on file.`}):null,!t&&e.length===0?(0,$.jsx)(_e,{title:`No passkeys yet`,description:`Add one now — without a passkey you can only get back in through a fallback credential.`}):null,oe.map(e=>{let t=fe(e),n=z(e),i=Be(e.createdAt),a=Be(e.lastUsedAt);return(0,$.jsx)(_e,{title:(0,$.jsxs)(`span`,{className:`flex items-center gap-2`,children:[Z(e),t?(0,$.jsx)(E,{variant:`error`,size:`sm`,children:`Revoked`}):null]}),description:t?`Revoked${e.revocationReasonCode?` — ${e.revocationReasonCode}`:``}. This credential can no longer sign in.`:n??`The Hub did not report whether this credential is backed up.`,status:[i?`Added ${i}`:null,a?`Last used ${a}`:`Never used`].filter(e=>e!==null).join(` · `),control:t?null:(0,$.jsx)(d,{size:`xs`,variant:`destructive-outline`,"aria-label":`Revoke ${Z(e)}`,disabled:r,onClick:()=>x(e),children:(0,$.jsxs)(We,{busy:j&&T===e.id,children:[(0,$.jsx)(D,{"aria-hidden":!0}),`Revoke`]})})},e.id)}),(0,$.jsx)(C,{open:a,onOpenChange:e=>{if(e){o(!0);return}r||F()},children:(0,$.jsx)(m,{className:`max-w-md`,children:(0,$.jsxs)(`form`,{onSubmit:e=>void I(e),children:[(0,$.jsxs)(y,{children:[(0,$.jsx)(g,{children:`Add a passkey`}),(0,$.jsx)(re,{children:`Your browser will ask you to create a passkey for this account. Adding one replaces the current Hub session with a fresh one.`})]}),(0,$.jsxs)(ne,{className:`space-y-3`,children:[(0,$.jsx)(w,{htmlFor:`account-passkey-label`,children:`Name (optional)`}),(0,$.jsx)(ae,{id:`account-passkey-label`,value:l,autoComplete:`off`,placeholder:`Work laptop`,disabled:A,className:ie,onChange:e=>u(e.target.value)})]}),(0,$.jsxs)(v,{children:[(0,$.jsx)(d,{variant:`outline`,onClick:()=>{c(),F()},children:`Cancel`}),(0,$.jsx)(d,{type:`submit`,disabled:r,children:(0,$.jsx)(We,{busy:A,children:`Create passkey`})})]})]})})}),(0,$.jsx)(f,{open:b!==null,onOpenChange:e=>{r||e||x(null)},children:(0,$.jsxs)(p,{children:[(0,$.jsxs)(te,{children:[(0,$.jsx)(h,{children:`Revoke this passkey?`}),(0,$.jsxs)(_,{children:[M.length===1?`This is the only usable passkey on this account. `:``,b?Z(b):``,` will stop working immediately, on every device it is stored on. This cannot be undone — you would have to enrol the device again.`]})]}),(0,$.jsxs)(ee,{children:[(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`}),children:`Keep it`}),(0,$.jsx)(d,{variant:`destructive`,disabled:r,onClick:()=>void R(),children:`Revoke passkey`})]})]})})]})}function mt(e){let t=(0,xe.c)(61),{busy:n,actionStatus:r,enrollment:i,enrolled:a,run:o}=e,[s,c]=(0,Q.useState)(``),[l,u]=(0,Q.useState)(!1),b=r===`enrolling-totp`,x=r===`confirming-totp`,T=r===`revoking-totp`,E;t[0]===Symbol.for(`react.memo_cache_sentinel`)?(E=()=>{c(``),N.dismissTotpEnrollment()},t[0]=E):E=t[0];let D=E,O;t[1]===s?O=t[2]:(O=async e=>{e.preventDefault();let t=U(s);t.length!==0&&(await N.confirmTotpEnrollment({code:t}),c(``))},t[1]=s,t[2]=O);let k=O,j;t[3]===o?j=t[4]:(j=async()=>{u(!1),await o(`revoke-totp`,gt)},t[3]=o,t[4]=j);let M=j,P;t[5]===Symbol.for(`react.memo_cache_sentinel`)?(P=(0,$.jsx)(A,{"aria-hidden":!0,className:`size-3.5`}),t[5]=P):P=t[5];let oe=a===null?`Checking current state…`:a?`On`:`Off`,F;t[6]!==n||t[7]!==a||t[8]!==b||t[9]!==T?(F=a===null?null:a?(0,$.jsx)(d,{size:`xs`,variant:`destructive-outline`,"aria-label":`Turn off two-factor authentication`,disabled:n,onClick:()=>u(!0),children:(0,$.jsx)(We,{busy:T,children:`Turn off`})}):(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:n,onClick:ht,children:(0,$.jsx)(We,{busy:b,children:`Set up`})}),t[6]=n,t[7]=a,t[8]=b,t[9]=T,t[10]=F):F=t[10];let I;t[11]!==oe||t[12]!==F?(I=(0,$.jsx)(_e,{title:`Authenticator app`,description:`A six-digit code from an authenticator app, required whenever you change credentials from a session that was not started with a passkey. Signing in with a passkey never asks for one.`,status:oe,control:F}),t[11]=oe,t[12]=F,t[13]=I):I=t[13];let L=i!==null,R;t[14]===Symbol.for(`react.memo_cache_sentinel`)?(R=e=>{e||D()},t[14]=R):R=t[14];let z;t[15]===k?z=t[16]:(z=e=>void k(e),t[15]=k,t[16]=z);let se;t[17]===Symbol.for(`react.memo_cache_sentinel`)?(se=(0,$.jsxs)(y,{children:[(0,$.jsx)(g,{children:`Set up two-factor authentication`}),(0,$.jsx)(re,{children:`Scan this with your authenticator app, then enter the code it shows. This is the only time the key is displayed.`})]}),t[17]=se):se=t[17];let B;t[18]===i?B=t[19]:(B=i?(0,$.jsxs)($.Fragment,{children:[(0,$.jsx)(`div`,{className:`flex justify-center rounded-xl border border-border bg-white p-4`,children:(0,$.jsx)(ve,{value:i.provisioningUri,size:168,level:`M`,marginSize:1,title:`Two-factor setup code`})}),(0,$.jsxs)(`div`,{className:`space-y-1`,children:[(0,$.jsx)(`p`,{className:`text-xs text-muted-foreground`,children:`Can't scan? Enter this key manually:`}),(0,$.jsx)(`p`,{"aria-label":`Two-factor setup key`,className:`rounded-lg border border-border bg-background px-3 py-2 font-mono text-sm break-all`,children:i.secretBase32})]})]}):null,t[18]=i,t[19]=B);let ce;t[20]===Symbol.for(`react.memo_cache_sentinel`)?(ce=(0,$.jsx)(w,{htmlFor:`account-totp-confirm`,children:`Code from your app`}),t[20]=ce):ce=t[20];let le;t[21]===Symbol.for(`react.memo_cache_sentinel`)?(le=e=>c(U(e.target.value)),t[21]=le):le=t[21];let V;t[22]!==s||t[23]!==x?(V=(0,$.jsxs)(`div`,{className:`space-y-2`,children:[ce,(0,$.jsx)(ae,{id:`account-totp-confirm`,value:s,inputMode:`numeric`,autoComplete:`one-time-code`,maxLength:16,disabled:x,className:ie,onChange:le})]}),t[22]=s,t[23]=x,t[24]=V):V=t[24];let H;t[25]!==B||t[26]!==V?(H=(0,$.jsxs)(ne,{className:`space-y-4`,children:[B,V]}),t[25]=B,t[26]=V,t[27]=H):H=t[27];let W;t[28]===Symbol.for(`react.memo_cache_sentinel`)?(W=(0,$.jsx)(d,{variant:`outline`,onClick:D,children:`Cancel`}),t[28]=W):W=t[28];let G;t[29]!==n||t[30]!==s?(G=n||!Y(s),t[29]=n,t[30]=s,t[31]=G):G=t[31];let K;t[32]===x?K=t[33]:(K=(0,$.jsx)(We,{busy:x,children:`Turn on`}),t[32]=x,t[33]=K);let q;t[34]!==G||t[35]!==K?(q=(0,$.jsxs)(v,{children:[W,(0,$.jsx)(d,{type:`submit`,disabled:G,children:K})]}),t[34]=G,t[35]=K,t[36]=q):q=t[36];let J;t[37]!==z||t[38]!==H||t[39]!==q?(J=(0,$.jsx)(m,{className:`max-w-md`,children:(0,$.jsxs)(`form`,{onSubmit:z,children:[se,H,q]})}),t[37]=z,t[38]=H,t[39]=q,t[40]=J):J=t[40];let ue;t[41]!==J||t[42]!==L?(ue=(0,$.jsx)(C,{open:L,onOpenChange:R,children:J}),t[41]=J,t[42]=L,t[43]=ue):ue=t[43];let X;t[44]===n?X=t[45]:(X=e=>{n||u(e)},t[44]=n,t[45]=X);let de;t[46]===Symbol.for(`react.memo_cache_sentinel`)?(de=(0,$.jsxs)(te,{children:[(0,$.jsx)(h,{children:`Remove two-factor authentication?`}),(0,$.jsx)(_,{children:`Password, recovery-code, and emailed-link sign-ins will no longer need a code from your authenticator app. You can set it up again at any time.`})]}),t[46]=de):de=t[46];let fe;t[47]===Symbol.for(`react.memo_cache_sentinel`)?(fe=(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`}),children:`Keep it on`}),t[47]=fe):fe=t[47];let Z;t[48]===M?Z=t[49]:(Z=()=>void M(),t[48]=M,t[49]=Z);let pe;t[50]!==n||t[51]!==Z?(pe=(0,$.jsxs)(p,{children:[de,(0,$.jsxs)(ee,{children:[fe,(0,$.jsx)(d,{variant:`destructive`,disabled:n,onClick:Z,children:`Remove two-factor`})]})]}),t[50]=n,t[51]=Z,t[52]=pe):pe=t[52];let me;t[53]!==l||t[54]!==X||t[55]!==pe?(me=(0,$.jsx)(f,{open:l,onOpenChange:X,children:pe}),t[53]=l,t[54]=X,t[55]=pe,t[56]=me):me=t[56];let ge;return t[57]!==ue||t[58]!==me||t[59]!==I?(ge=(0,$.jsxs)(he,{title:`Two-factor authentication`,icon:P,children:[I,ue,me]}),t[57]=ue,t[58]=me,t[59]=I,t[60]=ge):ge=t[60],ge}function ht(){N.beginTotpEnrollment()}function gt(e){return N.revokeTotp(e)}function _t(e){let t=(0,xe.c)(86),{busy:n,actionStatus:r,security:i,run:a,cancel:o}=e,[s,c]=(0,Q.useState)(!1),[l,u]=(0,Q.useState)(``),[b,x]=(0,Q.useState)(``),[T,E]=(0,Q.useState)(!1),[D,k]=(0,Q.useState)(!1),A=r===`setting-password`,j=r===`removing-password`,M;t[0]!==b||t[1]!==l?(M=me(l,b),t[0]=b,t[1]=l,t[2]=M):M=t[2];let P=M,oe;t[3]===Symbol.for(`react.memo_cache_sentinel`)?(oe=()=>{u(``),x(``),E(!1)},t[3]=oe):oe=t[3];let F=oe,I;t[4]===Symbol.for(`react.memo_cache_sentinel`)?(I=()=>{F(),c(!1)},t[4]=I):I=t[4];let L=I,R;t[5]===o?R=t[6]:(R=()=>{o(),L()},t[5]=o,t[6]=R);let z=R,se;t[7]!==P||t[8]!==l||t[9]!==a?(se=async e=>{e.preventDefault(),E(!0),!P&&await a(`set-password`,e=>N.setPassword({password:l,...e}),{onCommitted:L,onAbandoned:L})},t[7]=P,t[8]=l,t[9]=a,t[10]=se):se=t[10];let B=se,ce;t[11]===a?ce=t[12]:(ce=async()=>{k(!1),await a(`remove-password`,vt)},t[11]=a,t[12]=ce);let le=ce,V;t[13]===Symbol.for(`react.memo_cache_sentinel`)?(V=(0,$.jsx)(O,{"aria-hidden":!0,className:`size-3.5`}),t[13]=V):V=t[13];let H=i===null?`Checking current state…`:i.passwordConfigured?`Set`:`Not set`,U;t[14]!==n||t[15]!==j||t[16]!==i||t[17]!==A?(U=i===null?null:(0,$.jsxs)(`div`,{className:`flex flex-wrap gap-2`,children:[(0,$.jsx)(d,{size:`xs`,variant:`outline`,disabled:n,onClick:()=>c(!0),children:(0,$.jsx)(We,{busy:A,children:i.passwordConfigured?`Change`:`Set password`})}),i.passwordConfigured?(0,$.jsx)(d,{size:`xs`,variant:`destructive-outline`,"aria-label":`Delete the fallback password`,disabled:n,onClick:()=>k(!0),children:(0,$.jsx)(We,{busy:j,children:`Remove`})}):null]}),t[14]=n,t[15]=j,t[16]=i,t[17]=A,t[18]=U):U=t[18];let W;t[19]!==H||t[20]!==U?(W=(0,$.jsx)(_e,{title:`Fallback password`,description:`A password is a fallback, not an equal of a passkey: it can be phished and reused, and a session started with one has to prove itself again before changing credentials. Keep a passkey as your normal way in.`,status:H,control:U}),t[19]=H,t[20]=U,t[21]=W):W=t[21];let G=i===null?void 0:i.email,K=i?.emailDeliveryConfigured,q;t[22]!==r||t[23]!==n||t[24]!==a||t[25]!==G||t[26]!==K?(q=(0,$.jsx)(yt,{busy:n,actionStatus:r,email:G,deliveryConfigured:K,run:a}),t[22]=r,t[23]=n,t[24]=a,t[25]=G,t[26]=K,t[27]=q):q=t[27];let J;t[28]===z?J=t[29]:(J=e=>{if(e){c(!0);return}z()},t[28]=z,t[29]=J);let Y;t[30]===B?Y=t[31]:(Y=e=>void B(e),t[30]=B,t[31]=Y);let ue;t[32]===Symbol.for(`react.memo_cache_sentinel`)?(ue=(0,$.jsxs)(y,{children:[(0,$.jsx)(g,{children:`Set a fallback password`}),(0,$.jsx)(re,{children:`This replaces any password already on the account. The Hub rejects passwords that have appeared in a known breach.`})]}),t[32]=ue):ue=t[32];let X;t[33]===Symbol.for(`react.memo_cache_sentinel`)?(X=(0,$.jsx)(w,{htmlFor:`account-password`,children:`New password`}),t[33]=X):X=t[33];let de;t[34]===Symbol.for(`react.memo_cache_sentinel`)?(de=e=>u(e.target.value),t[34]=de):de=t[34];let fe;t[35]!==l||t[36]!==A?(fe=(0,$.jsxs)(`div`,{className:`space-y-2`,children:[X,(0,$.jsx)(ae,{id:`account-password`,type:`password`,value:l,autoComplete:`new-password`,maxLength:256,disabled:A,className:ie,onChange:de})]}),t[35]=l,t[36]=A,t[37]=fe):fe=t[37];let Z;t[38]===Symbol.for(`react.memo_cache_sentinel`)?(Z=(0,$.jsx)(w,{htmlFor:`account-password-confirm`,children:`Confirm password`}),t[38]=Z):Z=t[38];let pe;t[39]===Symbol.for(`react.memo_cache_sentinel`)?(pe=e=>x(e.target.value),t[39]=pe):pe=t[39];let ge;t[40]!==b||t[41]!==A?(ge=(0,$.jsxs)(`div`,{className:`space-y-2`,children:[Z,(0,$.jsx)(ae,{id:`account-password-confirm`,type:`password`,value:b,autoComplete:`new-password`,maxLength:256,disabled:A,className:ie,onChange:pe})]}),t[40]=b,t[41]=A,t[42]=ge):ge=t[42];let ve;t[43]!==P||t[44]!==T?(ve=T&&P?(0,$.jsx)(`p`,{role:`alert`,className:`text-xs text-destructive-foreground`,children:P}):null,t[43]=P,t[44]=T,t[45]=ve):ve=t[45];let ye;t[46]!==fe||t[47]!==ge||t[48]!==ve?(ye=(0,$.jsxs)(ne,{className:`space-y-3`,children:[fe,ge,ve]}),t[46]=fe,t[47]=ge,t[48]=ve,t[49]=ye):ye=t[49];let be;t[50]===z?be=t[51]:(be=(0,$.jsx)(d,{variant:`outline`,onClick:z,children:`Cancel`}),t[50]=z,t[51]=be);let Se;t[52]===A?Se=t[53]:(Se=(0,$.jsx)(We,{busy:A,children:`Save password`}),t[52]=A,t[53]=Se);let Ce;t[54]!==n||t[55]!==Se?(Ce=(0,$.jsx)(d,{type:`submit`,disabled:n,children:Se}),t[54]=n,t[55]=Se,t[56]=Ce):Ce=t[56];let we;t[57]!==be||t[58]!==Ce?(we=(0,$.jsxs)(v,{children:[be,Ce]}),t[57]=be,t[58]=Ce,t[59]=we):we=t[59];let Te;t[60]!==Y||t[61]!==ye||t[62]!==we?(Te=(0,$.jsx)(m,{className:`max-w-md`,children:(0,$.jsxs)(`form`,{onSubmit:Y,children:[ue,ye,we]})}),t[60]=Y,t[61]=ye,t[62]=we,t[63]=Te):Te=t[63];let Ee;t[64]!==s||t[65]!==J||t[66]!==Te?(Ee=(0,$.jsx)(C,{open:s,onOpenChange:J,children:Te}),t[64]=s,t[65]=J,t[66]=Te,t[67]=Ee):Ee=t[67];let De;t[68]===n?De=t[69]:(De=e=>{n||k(e)},t[68]=n,t[69]=De);let Oe;t[70]===Symbol.for(`react.memo_cache_sentinel`)?(Oe=(0,$.jsxs)(te,{children:[(0,$.jsx)(h,{children:`Remove the password?`}),(0,$.jsx)(_,{children:`You will no longer be able to sign in with a password. Make sure you still have a passkey, or recovery codes you have saved.`})]}),t[70]=Oe):Oe=t[70];let ke;t[71]===Symbol.for(`react.memo_cache_sentinel`)?(ke=(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`}),children:`Keep it`}),t[71]=ke):ke=t[71];let Ae;t[72]===le?Ae=t[73]:(Ae=()=>void le(),t[72]=le,t[73]=Ae);let je;t[74]!==n||t[75]!==Ae?(je=(0,$.jsxs)(p,{children:[Oe,(0,$.jsxs)(ee,{children:[ke,(0,$.jsx)(d,{variant:`destructive`,disabled:n,onClick:Ae,children:`Remove password`})]})]}),t[74]=n,t[75]=Ae,t[76]=je):je=t[76];let Me;t[77]!==D||t[78]!==De||t[79]!==je?(Me=(0,$.jsx)(f,{open:D,onOpenChange:De,children:je}),t[77]=D,t[78]=De,t[79]=je,t[80]=Me):Me=t[80];let Ne;return t[81]!==W||t[82]!==q||t[83]!==Ee||t[84]!==Me?(Ne=(0,$.jsxs)(he,{title:`Fallback sign-in`,icon:V,children:[W,q,Ee,Me]}),t[81]=W,t[82]=q,t[83]=Ee,t[84]=Me,t[85]=Ne):Ne=t[85],Ne}function vt(e){return N.removePassword(e)}function yt(e){let t=(0,xe.c)(25),{busy:n,actionStatus:r,email:i,deliveryConfigured:a,run:o}=e,[s,c]=(0,Q.useState)(``),[l,f]=(0,Q.useState)(!1),[p,m]=(0,Q.useState)(!1),h=r===`requesting-email-verification`,g;t[0]===s?g=t[1]:(g=X(s),t[0]=s,t[1]=g);let _=g,v;t[2]!==s||t[3]!==_||t[4]!==o?(v=async e=>{e.preventDefault(),f(!0),m(!1),!_&&await o(`request-email-verification`,e=>N.requestEmailVerification({email:s.trim(),...e}),{onCommitted:()=>{m(!0),c(``),f(!1)}})},t[2]=s,t[3]=_,t[4]=o,t[5]=v):v=t[5];let ee=v,y;t[6]===a?y=t[7]:(y=a===!1?(0,$.jsx)(`div`,{className:`border-t border-border/60 px-4 pt-3.5 sm:px-5`,children:(0,$.jsxs)(I,{variant:`warning`,children:[(0,$.jsx)(u,{"aria-hidden":!0}),(0,$.jsx)(P,{children:`No mail will arrive yet`}),(0,$.jsx)(F,{children:`This Hub has no mail transport configured, so verification messages are generated and discarded. The request below will be accepted and nothing will be delivered until an operator wires one up. Do not rely on email as your way back into the account.`})]})}):null,t[6]=a,t[7]=y);let te=a?`Used for account recovery after verification. The Hub answers the same way whether or not the address is already known, so this never confirms who owns it.`:`Used for account recovery once mail delivery is switched on. The Hub answers the same way whether or not the address is already known, so this never confirms who owns it.`,ne=i===void 0?`Checking current state…`:i===null?`Not set`:`${i.verified?`Verified`:`Verification pending`} · ${i.address}`,b;t[8]!==p||t[9]!==n||t[10]!==i||t[11]!==a||t[12]!==s||t[13]!==_||t[14]!==h||t[15]!==ee||t[16]!==l?(b=i===void 0?null:(0,$.jsxs)(`form`,{className:`pt-3 pb-3.5`,onSubmit:e=>void ee(e),children:[(0,$.jsxs)(`div`,{className:`flex flex-col gap-2 sm:flex-row`,children:[(0,$.jsx)(ae,{"aria-label":`Email address`,type:`email`,value:s,autoComplete:`email`,placeholder:`you@example.com`,maxLength:254,disabled:h,className:ie,onChange:e=>{c(e.target.value),m(!1)}}),(0,$.jsx)(d,{type:`submit`,size:`sm`,variant:`outline`,disabled:n,className:`shrink-0`,children:(0,$.jsx)(We,{busy:h,children:i===null?`Send verification`:i.verified?`Change email`:`Resend or change`})})]}),l&&_?(0,$.jsx)(`p`,{role:`alert`,className:`pt-2 text-xs text-destructive-foreground`,children:_}):null,p?(0,$.jsx)(`p`,{role:`status`,className:`pt-2 text-xs text-muted-foreground`,children:a?`Verification email requested. Check your inbox and spam folder; delivery may take a moment.`:`Request accepted by the Hub. No message will be delivered until a mail transport is configured.`}):null]}),t[8]=p,t[9]=n,t[10]=i,t[11]=a,t[12]=s,t[13]=_,t[14]=h,t[15]=ee,t[16]=l,t[17]=b):b=t[17];let x;t[18]!==te||t[19]!==ne||t[20]!==b?(x=(0,$.jsx)(_e,{title:`Recovery email`,description:te,status:ne,children:b}),t[18]=te,t[19]=ne,t[20]=b,t[21]=x):x=t[21];let S;return t[22]!==y||t[23]!==x?(S=(0,$.jsxs)($.Fragment,{children:[y,x]}),t[22]=y,t[23]=x,t[24]=S):S=t[24],S}function bt(e){let t=(0,xe.c)(52),{busy:r,actionStatus:a,recoveryCodes:o,run:s}=e,[l,u]=(0,Q.useState)(!1),b=a===`regenerating-recovery-codes`,{copyToClipboard:x,isCopied:w}=c(),T;t[0]===s?T=t[1]:(T=async()=>{u(!1),await s(`regenerate-recovery-codes`,wt)},t[0]=s,t[1]=T);let E=T,D;t[2]===Symbol.for(`react.memo_cache_sentinel`)?(D=(0,$.jsx)(k,{"aria-hidden":!0,className:`size-3.5`}),t[2]=D):D=t[2];let O;t[3]===Symbol.for(`react.memo_cache_sentinel`)?(O=()=>u(!0),t[3]=O):O=t[3];let A;t[4]===b?A=t[5]:(A=(0,$.jsx)(We,{busy:b,children:`Generate new codes`}),t[4]=b,t[5]=A);let j;t[6]!==r||t[7]!==A?(j=(0,$.jsx)(_e,{title:`One-time recovery codes`,description:`Single-use codes that get you back in when you have lost every passkey. They are a last resort, not a substitute for one — anyone holding a code can sign in as you.`,status:`Ryco shows them once and never writes them to browser storage.`,control:(0,$.jsx)(d,{size:`xs`,variant:`destructive-outline`,disabled:r,onClick:O,children:A})}),t[6]=r,t[7]=A,t[8]=j):j=t[8];let M;t[9]===r?M=t[10]:(M=e=>{r||u(e)},t[9]=r,t[10]=M);let N;t[11]===Symbol.for(`react.memo_cache_sentinel`)?(N=(0,$.jsxs)(te,{children:[(0,$.jsx)(h,{children:`Replace your recovery codes?`}),(0,$.jsx)(_,{children:`Every code you have already saved stops working immediately. You will get a new set, shown once — if you lose them you will have to generate another set from a session you can still sign in to.`})]}),t[11]=N):N=t[11];let ie;t[12]===Symbol.for(`react.memo_cache_sentinel`)?(ie=(0,$.jsx)(S,{render:(0,$.jsx)(d,{variant:`outline`}),children:`Cancel`}),t[12]=ie):ie=t[12];let ae;t[13]===E?ae=t[14]:(ae=()=>void E(),t[13]=E,t[14]=ae);let P;t[15]!==r||t[16]!==ae?(P=(0,$.jsxs)(p,{children:[N,(0,$.jsxs)(ee,{children:[ie,(0,$.jsx)(d,{variant:`destructive`,disabled:r,onClick:ae,children:`Replace codes`})]})]}),t[15]=r,t[16]=ae,t[17]=P):P=t[17];let oe;t[18]!==l||t[19]!==P||t[20]!==M?(oe=(0,$.jsx)(f,{open:l,onOpenChange:M,children:P}),t[18]=l,t[19]=P,t[20]=M,t[21]=oe):oe=t[21];let F=o.length>0,I;t[22]===Symbol.for(`react.memo_cache_sentinel`)?(I=(0,$.jsx)(g,{children:`Save your recovery codes`}),t[22]=I):I=t[22];let L=String(o.length),R;t[23]===L?R=t[24]:(R=(0,$.jsxs)(y,{children:[I,(0,$.jsxs)(re,{children:[`Save all `,L,` codes — they are shown once and cannot be retrieved later. Store them somewhere only you can reach — a password manager, or paper somewhere safe.`]})]}),t[23]=L,t[24]=R);let z;t[25]===o?z=t[26]:(z=o.map(St),t[25]=o,t[26]=z);let se;t[27]===z?se=t[28]:(se=(0,$.jsx)(ne,{children:(0,$.jsx)(`ul`,{"aria-label":`Recovery codes`,className:`grid gap-2 rounded-xl border border-border bg-background p-4 font-mono text-sm break-all sm:grid-cols-2`,children:z})}),t[27]=z,t[28]=se);let B;t[29]!==x||t[30]!==o?(B=()=>x(ce(o),void 0),t[29]=x,t[30]=o,t[31]=B):B=t[31];let le;t[32]===w?le=t[33]:(le=w?(0,$.jsx)(i,{"aria-hidden":!0}):(0,$.jsx)(n,{"aria-hidden":!0}),t[32]=w,t[33]=le);let V=w?`Copied`:`Copy codes`,H;t[34]!==B||t[35]!==le||t[36]!==V?(H=(0,$.jsxs)(d,{variant:`outline`,onClick:B,children:[le,V]}),t[34]=B,t[35]=le,t[36]=V,t[37]=H):H=t[37];let U;t[38]===Symbol.for(`react.memo_cache_sentinel`)?(U=(0,$.jsx)(d,{onClick:xt,children:`I saved the codes`}),t[38]=U):U=t[38];let W;t[39]===H?W=t[40]:(W=(0,$.jsxs)(v,{children:[H,U]}),t[39]=H,t[40]=W);let G;t[41]!==R||t[42]!==se||t[43]!==W?(G=(0,$.jsxs)(m,{className:`max-w-md`,showCloseButton:!1,children:[R,se,W]}),t[41]=R,t[42]=se,t[43]=W,t[44]=G):G=t[44];let K;t[45]!==F||t[46]!==G?(K=(0,$.jsx)(C,{open:F,disablePointerDismissal:!0,onOpenChange:Ct,children:G}),t[45]=F,t[46]=G,t[47]=K):K=t[47];let q;return t[48]!==oe||t[49]!==K||t[50]!==j?(q=(0,$.jsxs)(he,{title:`Recovery codes`,icon:D,children:[j,oe,K]}),t[48]=oe,t[49]=K,t[50]=j,t[51]=q):q=t[51],q}function xt(){return N.dismissRecoveryCodes()}function St(e){return(0,$.jsx)(`li`,{children:e},e)}function Ct(e,t){e||t.cancel()}function wt(e){return N.regenerateRecoveryCodes(e)}function Tt(e){let t=(0,xe.c)(45),{pending:n,attempts:r,code:i,onCodeChange:a,onSubmit:o,onCancel:s,busy:c}=e,l=n!==null,u;t[0]===s?u=t[1]:(u=e=>{e||s()},t[0]=s,t[1]=u);let f;t[2]===o?f=t[3]:(f=e=>{e.preventDefault(),o()},t[2]=o,t[3]=f);let p;t[4]===n?p=t[5]:(p=n?R(n.action):``,t[4]=n,t[5]=p);let h;t[6]===p?h=t[7]:(h=(0,$.jsx)(g,{children:p}),t[6]=p,t[7]=h);let _=n?.inferred??!1,ee;t[8]!==r||t[9]!==_?(ee=pe(r,_),t[8]=r,t[9]=_,t[10]=ee):ee=t[10];let te;t[11]===ee?te=t[12]:(te=(0,$.jsx)(re,{children:ee}),t[11]=ee,t[12]=te);let b;t[13]!==h||t[14]!==te?(b=(0,$.jsxs)(y,{children:[h,te]}),t[13]=h,t[14]=te,t[15]=b):b=t[15];let x;t[16]===Symbol.for(`react.memo_cache_sentinel`)?(x=(0,$.jsx)(w,{htmlFor:`account-step-up-code`,children:`Authenticator code`}),t[16]=x):x=t[16];let S;t[17]===a?S=t[18]:(S=e=>a(U(e.target.value)),t[17]=a,t[18]=S);let T;t[19]!==c||t[20]!==i||t[21]!==S?(T=(0,$.jsxs)(ne,{className:`space-y-2`,children:[x,(0,$.jsx)(ae,{id:`account-step-up-code`,value:i,inputMode:`numeric`,autoComplete:`one-time-code`,maxLength:16,disabled:c,className:ie,onChange:S})]}),t[19]=c,t[20]=i,t[21]=S,t[22]=T):T=t[22];let E;t[23]===s?E=t[24]:(E=(0,$.jsx)(d,{variant:`outline`,onClick:s,children:`Cancel`}),t[23]=s,t[24]=E);let D;t[25]!==c||t[26]!==i?(D=c||!Y(i),t[25]=c,t[26]=i,t[27]=D):D=t[27];let O;t[28]===c?O=t[29]:(O=(0,$.jsx)(We,{busy:c,children:`Confirm code`}),t[28]=c,t[29]=O);let k;t[30]!==D||t[31]!==O?(k=(0,$.jsx)(d,{type:`submit`,disabled:D,children:O}),t[30]=D,t[31]=O,t[32]=k):k=t[32];let A;t[33]!==E||t[34]!==k?(A=(0,$.jsxs)(v,{children:[E,k]}),t[33]=E,t[34]=k,t[35]=A):A=t[35];let j;t[36]!==T||t[37]!==A||t[38]!==f||t[39]!==b?(j=(0,$.jsx)(m,{className:`max-w-sm`,children:(0,$.jsxs)(`form`,{onSubmit:f,children:[b,T,A]})}),t[36]=T,t[37]=A,t[38]=f,t[39]=b,t[40]=j):j=t[40];let M;return t[41]!==l||t[42]!==j||t[43]!==u?(M=(0,$.jsx)(C,{open:l,onOpenChange:u,children:j}),t[41]=l,t[42]=j,t[43]=u,t[44]=M):M=t[44],M}export{Ge as AccountSettingsPanel};