@agimon-ai/po-web-dashboard 0.0.0-alpha.0

package/dist/web/lib/settingsApi.cjs

@@ -0,0 +1,237 @@
+const require_sealedSession = require("./sealedSession.cjs");
+const require_stepUp = require("./stepUp.cjs");
+const require_settings = require("../../types/settings.cjs");
+//#region src/web/lib/settingsApi.ts
+/**
+* The page's half of the settings routes. The only place the cockpit talks
+* HTTP for configuration, so if the transport changes, it changes here alone.
+*
+* Writes go through the step-up gate for the same reason a provider credential
+* does: changing a planning model redirects where this machine's model traffic
+* goes, and a remote caller should prove itself first.
+*/
+const UNREACHABLE = "The hub is unreachable.";
+const JSON_HEADERS = { "content-type": "application/json" };
+function workspaceRoute(route, workspaceId) {
+	return workspaceId === void 0 ? route : route.replace("/api/", `/api/workspaces/${encodeURIComponent(workspaceId)}/`);
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function errorOf(body, fallback) {
+	return isRecord(body) && typeof body.error === "string" && body.error !== "" ? body.error : fallback;
+}
+async function readBody(response) {
+	const text = await response.text();
+	if (text === "") return void 0;
+	try {
+		return JSON.parse(text);
+	} catch {
+		return;
+	}
+}
+async function readSettingsConfig(repoRoot, keys, workspaceId) {
+	if (repoRoot !== "" && !workspaceId) return {
+		ok: false,
+		error: "Choose an admitted workspace."
+	};
+	const search = new URLSearchParams({ repoRoot });
+	for (const key of keys) search.append("key", key);
+	let response;
+	try {
+		response = await require_sealedSession.sealedHttpSession.fetch(`${workspaceRoute(require_settings.SETTINGS_CONFIG_API_ROUTE, workspaceId)}?${search.toString()}`);
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+	const body = await readBody(response);
+	if (!response.ok) return {
+		ok: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		error: "The hub answered with no configuration."
+	};
+	return {
+		ok: true,
+		config: body
+	};
+}
+async function writeSettingsValue(request, workspaceId) {
+	if (request.scope === "repository" && !workspaceId) return {
+		ok: false,
+		stale: false,
+		error: "Choose an admitted workspace."
+	};
+	let response;
+	try {
+		response = await require_stepUp.fetchWithStepUp(workspaceRoute(require_settings.SETTINGS_VALUE_API_ROUTE, request.scope === "repository" ? workspaceId : void 0), {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+	} catch {
+		return {
+			ok: false,
+			stale: false,
+			error: UNREACHABLE
+		};
+	}
+	const body = await readBody(response);
+	if (response.status === 409) {
+		const hash = isRecord(body) && typeof body.hash === "string" ? body.hash : void 0;
+		return {
+			ok: false,
+			stale: true,
+			error: errorOf(body, "The config changed since it was read."),
+			...hash === void 0 ? {} : { hash }
+		};
+	}
+	if (!response.ok) return {
+		ok: false,
+		stale: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		stale: false,
+		error: "The hub answered with no configuration."
+	};
+	return {
+		ok: true,
+		config: body
+	};
+}
+/** The repositories the picker offers; an empty list is a machine with no sessions. */
+async function listSettingsRepositories() {
+	try {
+		const response = await require_sealedSession.sealedHttpSession.fetch(require_settings.SETTINGS_REPOSITORIES_API_ROUTE);
+		const body = await readBody(response);
+		if (!response.ok || !isRecord(body) || !Array.isArray(body.repositories)) return [];
+		return body.repositories;
+	} catch {
+		return [];
+	}
+}
+async function readRepositorySettings(repositoryId) {
+	try {
+		const response = await require_sealedSession.sealedHttpSession.fetch(workspaceRoute(require_settings.SETTINGS_REPOSITORY_API_ROUTE, repositoryId));
+		const body = await readBody(response);
+		if (!response.ok) return {
+			ok: false,
+			error: errorOf(body, `The hub answered ${String(response.status)}.`)
+		};
+		if (!isRecord(body)) return {
+			ok: false,
+			error: "The hub answered with no repository settings."
+		};
+		return {
+			ok: true,
+			settings: body
+		};
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+async function writeRepositorySelection(request) {
+	try {
+		const response = await require_stepUp.fetchWithStepUp(workspaceRoute(require_settings.SETTINGS_REPOSITORY_SELECTION_API_ROUTE, request.repositoryId), {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+		const body = await readBody(response);
+		if (!response.ok) return {
+			ok: false,
+			error: errorOf(body, `The hub answered ${String(response.status)}.`)
+		};
+		if (!isRecord(body)) return {
+			ok: false,
+			error: "The hub answered with no repository settings."
+		};
+		return {
+			ok: true,
+			settings: body
+		};
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+/**
+* The models a picker offers. An empty list is not an error: a machine with no
+* authenticated provider has none, and those fields fall back to free text.
+*/
+async function listSettingsModels() {
+	try {
+		const response = await require_sealedSession.sealedHttpSession.fetch(require_settings.SETTINGS_MODELS_API_ROUTE);
+		const body = await readBody(response);
+		if (!response.ok || !isRecord(body) || !Array.isArray(body.models)) return [];
+		return body.models;
+	} catch {
+		return [];
+	}
+}
+function imageSettingsOf(response, body) {
+	if (!response.ok) return {
+		ok: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		error: "The hub answered with no image settings."
+	};
+	return {
+		ok: true,
+		images: body
+	};
+}
+async function readImageSettings() {
+	try {
+		const response = await require_sealedSession.sealedHttpSession.fetch(require_settings.SETTINGS_IMAGES_API_ROUTE);
+		return imageSettingsOf(response, await readBody(response));
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+/**
+* Writes through the step-up gate, as every other settings write does: this
+* one decides how much of a screenshot a remote caller can push into a model.
+*/
+async function writeImageSettings(request) {
+	try {
+		const response = await require_stepUp.fetchWithStepUp(require_settings.SETTINGS_IMAGES_API_ROUTE, {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+		return imageSettingsOf(response, await readBody(response));
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+//#endregion
+exports.listSettingsModels = listSettingsModels;
+exports.listSettingsRepositories = listSettingsRepositories;
+exports.readImageSettings = readImageSettings;
+exports.readRepositorySettings = readRepositorySettings;
+exports.readSettingsConfig = readSettingsConfig;
+exports.writeImageSettings = writeImageSettings;
+exports.writeRepositorySelection = writeRepositorySelection;
+exports.writeSettingsValue = writeSettingsValue;
+
+//# sourceMappingURL=settingsApi.cjs.map

package/dist/web/lib/settingsApi.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsApi.cjs","names":["sealedHttpSession","SETTINGS_CONFIG_API_ROUTE","fetchWithStepUp","SETTINGS_VALUE_API_ROUTE","SETTINGS_REPOSITORIES_API_ROUTE","SETTINGS_REPOSITORY_API_ROUTE","SETTINGS_REPOSITORY_SELECTION_API_ROUTE","SETTINGS_MODELS_API_ROUTE","SETTINGS_IMAGES_API_ROUTE"],"sources":["../../../src/web/lib/settingsApi.ts"],"sourcesContent":["import {\n  SETTINGS_CONFIG_API_ROUTE,\n  SETTINGS_IMAGES_API_ROUTE,\n  SETTINGS_MODELS_API_ROUTE,\n  SETTINGS_REPOSITORIES_API_ROUTE,\n  SETTINGS_REPOSITORY_API_ROUTE,\n  SETTINGS_REPOSITORY_SELECTION_API_ROUTE,\n  SETTINGS_VALUE_API_ROUTE,\n  type RepositorySelectionWriteRequest,\n  type RepositorySettingsView,\n  type SettingsConfigView,\n  type SettingsImagesView,\n  type SettingsImagesWriteRequest,\n  type SettingsModel,\n  type SettingsRepository,\n  type SettingsWriteRequest,\n  type SettingsBatchWriteRequest,\n} from '../../types/settings';\nimport { sealedHttpSession } from './sealedSession';\nimport { fetchWithStepUp } from './stepUp';\n\n/**\n * The page's half of the settings routes. The only place the cockpit talks\n * HTTP for configuration, so if the transport changes, it changes here alone.\n *\n * Writes go through the step-up gate for the same reason a provider credential\n * does: changing a planning model redirects where this machine's model traffic\n * goes, and a remote caller should prove itself first.\n */\n\nconst UNREACHABLE = 'The hub is unreachable.';\nconst JSON_HEADERS = { 'content-type': 'application/json' };\n\nfunction workspaceRoute(route: string, workspaceId: string | undefined): string {\n  return workspaceId === undefined\n    ? route\n    : route.replace('/api/', `/api/workspaces/${encodeURIComponent(workspaceId)}/`);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction errorOf(body: unknown, fallback: string): string {\n  return isRecord(body) && typeof body.error === 'string' && body.error !== '' ? body.error : fallback;\n}\n\nasync function readBody(response: Response): Promise<unknown> {\n  const text = await response.text();\n  if (text === '') return undefined;\n  try {\n    return JSON.parse(text) as unknown;\n  } catch {\n    return undefined;\n  }\n}\n\nexport type ReadConfigResult = { ok: true; config: SettingsConfigView } | { ok: false; error: string };\n\nexport async function readSettingsConfig(\n  repoRoot: string,\n  keys: readonly string[],\n  workspaceId?: string,\n): Promise<ReadConfigResult> {\n  if (repoRoot !== '' && !workspaceId) return { ok: false, error: 'Choose an admitted workspace.' };\n  const search = new URLSearchParams({ repoRoot });\n  for (const key of keys) search.append('key', key);\n  let response: Response;\n  try {\n    response = await sealedHttpSession.fetch(\n      `${workspaceRoute(SETTINGS_CONFIG_API_ROUTE, workspaceId)}?${search.toString()}`,\n    );\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n  const body = await readBody(response);\n  if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  if (!isRecord(body)) return { ok: false, error: 'The hub answered with no configuration.' };\n  return { ok: true, config: body as unknown as SettingsConfigView };\n}\n\nexport type WriteConfigResult =\n  | { ok: true; config: SettingsConfigView }\n  /** The file moved under the page; `hash` is what it holds now. */\n  | { ok: false; stale: true; error: string; hash?: string }\n  | { ok: false; stale: false; error: string };\n\nexport async function writeSettingsValue(\n  request: SettingsWriteRequest | SettingsBatchWriteRequest,\n  workspaceId?: string,\n): Promise<WriteConfigResult> {\n  if (request.scope === 'repository' && !workspaceId)\n    return { ok: false, stale: false, error: 'Choose an admitted workspace.' };\n  let response: Response;\n  try {\n    response = await fetchWithStepUp(\n      workspaceRoute(SETTINGS_VALUE_API_ROUTE, request.scope === 'repository' ? workspaceId : undefined),\n      {\n        method: 'PUT',\n        headers: JSON_HEADERS,\n        body: JSON.stringify(request),\n      },\n    );\n  } catch {\n    return { ok: false, stale: false, error: UNREACHABLE };\n  }\n  const body = await readBody(response);\n  if (response.status === 409) {\n    const hash = isRecord(body) && typeof body.hash === 'string' ? body.hash : undefined;\n    return {\n      ok: false,\n      stale: true,\n      error: errorOf(body, 'The config changed since it was read.'),\n      ...(hash === undefined ? {} : { hash }),\n    };\n  }\n  if (!response.ok) {\n    return { ok: false, stale: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  }\n  if (!isRecord(body)) return { ok: false, stale: false, error: 'The hub answered with no configuration.' };\n  return { ok: true, config: body as unknown as SettingsConfigView };\n}\n\n/** The repositories the picker offers; an empty list is a machine with no sessions. */\nexport async function listSettingsRepositories(): Promise<readonly SettingsRepository[]> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_REPOSITORIES_API_ROUTE);\n    const body = await readBody(response);\n    if (!response.ok || !isRecord(body) || !Array.isArray(body.repositories)) return [];\n    return body.repositories as SettingsRepository[];\n  } catch {\n    return [];\n  }\n}\n\nexport type ReadRepositorySettingsResult =\n  | { ok: true; settings: RepositorySettingsView }\n  | { ok: false; error: string };\n\nexport async function readRepositorySettings(repositoryId: string): Promise<ReadRepositorySettingsResult> {\n  try {\n    const response = await sealedHttpSession.fetch(workspaceRoute(SETTINGS_REPOSITORY_API_ROUTE, repositoryId));\n    const body = await readBody(response);\n    if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n    if (!isRecord(body)) return { ok: false, error: 'The hub answered with no repository settings.' };\n    return { ok: true, settings: body as unknown as RepositorySettingsView };\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n\nexport async function writeRepositorySelection(\n  request: RepositorySelectionWriteRequest,\n): Promise<ReadRepositorySettingsResult> {\n  try {\n    const response = await fetchWithStepUp(\n      workspaceRoute(SETTINGS_REPOSITORY_SELECTION_API_ROUTE, request.repositoryId),\n      {\n        method: 'PUT',\n        headers: JSON_HEADERS,\n        body: JSON.stringify(request),\n      },\n    );\n    const body = await readBody(response);\n    if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n    if (!isRecord(body)) return { ok: false, error: 'The hub answered with no repository settings.' };\n    return { ok: true, settings: body as unknown as RepositorySettingsView };\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n/**\n * The models a picker offers. An empty list is not an error: a machine with no\n * authenticated provider has none, and those fields fall back to free text.\n */\nexport async function listSettingsModels(): Promise<readonly SettingsModel[]> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_MODELS_API_ROUTE);\n    const body = await readBody(response);\n    if (!response.ok || !isRecord(body) || !Array.isArray(body.models)) return [];\n    return body.models as SettingsModel[];\n  } catch {\n    return [];\n  }\n}\n\nexport type ImageSettingsResult = { ok: true; images: SettingsImagesView } | { ok: false; error: string };\n\nfunction imageSettingsOf(response: Response, body: unknown): ImageSettingsResult {\n  if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  if (!isRecord(body)) return { ok: false, error: 'The hub answered with no image settings.' };\n  return { ok: true, images: body as unknown as SettingsImagesView };\n}\n\nexport async function readImageSettings(): Promise<ImageSettingsResult> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_IMAGES_API_ROUTE);\n    return imageSettingsOf(response, await readBody(response));\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n\n/**\n * Writes through the step-up gate, as every other settings write does: this\n * one decides how much of a screenshot a remote caller can push into a model.\n */\nexport async function writeImageSettings(request: SettingsImagesWriteRequest): Promise<ImageSettingsResult> {\n  try {\n    const response = await fetchWithStepUp(SETTINGS_IMAGES_API_ROUTE, {\n      method: 'PUT',\n      headers: JSON_HEADERS,\n      body: JSON.stringify(request),\n    });\n    return imageSettingsOf(response, await readBody(response));\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA8BA,MAAM,cAAc;AACpB,MAAM,eAAe,EAAE,gBAAgB,mBAAmB;AAE1D,SAAS,eAAe,OAAe,aAAyC;CAC9E,OAAO,gBAAgB,KAAA,IACnB,QACA,MAAM,QAAQ,SAAS,mBAAmB,mBAAmB,WAAW,EAAE,EAAE;AAClF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,QAAQ,MAAe,UAA0B;CACxD,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,KAAK,KAAK,QAAQ;AAC9F;AAEA,eAAe,SAAS,UAAsC;CAC5D,MAAM,OAAO,MAAM,SAAS,KAAK;CACjC,IAAI,SAAS,IAAI,OAAO,KAAA;CACxB,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,QAAQ;EACN;CACF;AACF;AAIA,eAAsB,mBACpB,UACA,MACA,aAC2B;CAC3B,IAAI,aAAa,MAAM,CAAC,aAAa,OAAO;EAAE,IAAI;EAAO,OAAO;CAAgC;CAChG,MAAM,SAAS,IAAI,gBAAgB,EAAE,SAAS,CAAC;CAC/C,KAAK,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,GAAG;CAChD,IAAI;CACJ,IAAI;EACF,WAAW,MAAMA,sBAAAA,kBAAkB,MACjC,GAAG,eAAeC,iBAAAA,2BAA2B,WAAW,EAAE,GAAG,OAAO,SAAS,GAC/E;CACF,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;CACA,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,CAAC,SAAS,IAAI,OAAO;EAAE,IAAI;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAA0C;CAC1F,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;AAQA,eAAsB,mBACpB,SACA,aAC4B;CAC5B,IAAI,QAAQ,UAAU,gBAAgB,CAAC,aACrC,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO;CAAgC;CAC3E,IAAI;CACJ,IAAI;EACF,WAAW,MAAMC,eAAAA,gBACf,eAAeC,iBAAAA,0BAA0B,QAAQ,UAAU,eAAe,cAAc,KAAA,CAAS,GACjG;GACE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CACF;CACF,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;GAAO,OAAO;EAAY;CACvD;CACA,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EAC3E,OAAO;GACL,IAAI;GACJ,OAAO;GACP,OAAO,QAAQ,MAAM,uCAAuC;GAC5D,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;EACvC;CACF;CACA,IAAI,CAAC,SAAS,IACZ,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAEzG,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO;CAA0C;CACxG,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;;AAGA,eAAsB,2BAAmE;CACvF,IAAI;EACF,MAAM,WAAW,MAAMH,sBAAAA,kBAAkB,MAAMI,iBAAAA,+BAA+B;EAC9E,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,YAAY,GAAG,OAAO,CAAC;EAClF,OAAO,KAAK;CACd,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAMA,eAAsB,uBAAuB,cAA6D;CACxG,IAAI;EACF,MAAM,WAAW,MAAMJ,sBAAAA,kBAAkB,MAAM,eAAeK,iBAAAA,+BAA+B,YAAY,CAAC;EAC1G,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,IAAI,OAAO;GAAE,IAAI;GAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;EAAE;EAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;GAAE,IAAI;GAAO,OAAO;EAAgD;EAChG,OAAO;GAAE,IAAI;GAAM,UAAU;EAA0C;CACzE,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;AAEA,eAAsB,yBACpB,SACuC;CACvC,IAAI;EACF,MAAM,WAAW,MAAMH,eAAAA,gBACrB,eAAeI,iBAAAA,yCAAyC,QAAQ,YAAY,GAC5E;GACE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CACF;EACA,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,IAAI,OAAO;GAAE,IAAI;GAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;EAAE;EAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;GAAE,IAAI;GAAO,OAAO;EAAgD;EAChG,OAAO;GAAE,IAAI;GAAM,UAAU;EAA0C;CACzE,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;;;;;AAKA,eAAsB,qBAAwD;CAC5E,IAAI;EACF,MAAM,WAAW,MAAMN,sBAAAA,kBAAkB,MAAMO,iBAAAA,yBAAyB;EACxE,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,MAAM,GAAG,OAAO,CAAC;EAC5E,OAAO,KAAK;CACd,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAIA,SAAS,gBAAgB,UAAoB,MAAoC;CAC/E,IAAI,CAAC,SAAS,IAAI,OAAO;EAAE,IAAI;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAC3F,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;AAEA,eAAsB,oBAAkD;CACtE,IAAI;EACF,MAAM,WAAW,MAAMP,sBAAAA,kBAAkB,MAAMQ,iBAAAA,yBAAyB;EACxE,OAAO,gBAAgB,UAAU,MAAM,SAAS,QAAQ,CAAC;CAC3D,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;;;;;AAMA,eAAsB,mBAAmB,SAAmE;CAC1G,IAAI;EACF,MAAM,WAAW,MAAMN,eAAAA,gBAAgBM,iBAAAA,2BAA2B;GAChE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CAAC;EACD,OAAO,gBAAgB,UAAU,MAAM,SAAS,QAAQ,CAAC;CAC3D,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF"}

package/dist/web/lib/settingsApi.d.mts

@@ -0,0 +1,57 @@
+import { RepositorySelectionWriteRequest, RepositorySettingsView, SettingsBatchWriteRequest, SettingsConfigView, SettingsImagesView, SettingsImagesWriteRequest, SettingsModel, SettingsRepository, SettingsWriteRequest } from "../../types/settings.mjs";
+//#region src/web/lib/settingsApi.d.ts
+export type ReadConfigResult = {
+  ok: true;
+  config: SettingsConfigView;
+} | {
+  ok: false;
+  error: string;
+};
+export declare function readSettingsConfig(repoRoot: string, keys: readonly string[], workspaceId?: string): Promise<ReadConfigResult>;
+export type WriteConfigResult = {
+  ok: true;
+  config: SettingsConfigView;
+} |
+/** The file moved under the page; `hash` is what it holds now. */
+{
+  ok: false;
+  stale: true;
+  error: string;
+  hash?: string;
+} | {
+  ok: false;
+  stale: false;
+  error: string;
+};
+export declare function writeSettingsValue(request: SettingsWriteRequest | SettingsBatchWriteRequest, workspaceId?: string): Promise<WriteConfigResult>;
+/** The repositories the picker offers; an empty list is a machine with no sessions. */
+export declare function listSettingsRepositories(): Promise<readonly SettingsRepository[]>;
+export type ReadRepositorySettingsResult = {
+  ok: true;
+  settings: RepositorySettingsView;
+} | {
+  ok: false;
+  error: string;
+};
+export declare function readRepositorySettings(repositoryId: string): Promise<ReadRepositorySettingsResult>;
+export declare function writeRepositorySelection(request: RepositorySelectionWriteRequest): Promise<ReadRepositorySettingsResult>;
+/**
+ * The models a picker offers. An empty list is not an error: a machine with no
+ * authenticated provider has none, and those fields fall back to free text.
+ */
+export declare function listSettingsModels(): Promise<readonly SettingsModel[]>;
+export type ImageSettingsResult = {
+  ok: true;
+  images: SettingsImagesView;
+} | {
+  ok: false;
+  error: string;
+};
+export declare function readImageSettings(): Promise<ImageSettingsResult>;
+/**
+ * Writes through the step-up gate, as every other settings write does: this
+ * one decides how much of a screenshot a remote caller can push into a model.
+ */
+export declare function writeImageSettings(request: SettingsImagesWriteRequest): Promise<ImageSettingsResult>;
+//#endregion
+//# sourceMappingURL=settingsApi.d.mts.map

package/dist/web/lib/settingsApi.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsApi.d.mts","names":[],"sources":["../../../src/web/lib/settingsApi.ts"],"mappings":";;YAyDY;EAAqB;EAAU,QAAQ;;EAAyB;EAAW;;wBAEjE,mBACpB,kBACA,yBACA,uBACC,QAAQ;YAkBC;EACN;EAAU,QAAQ;;;;EAElB;EAAW;EAAa;EAAe;;EACvC;EAAW;EAAc;;wBAET,mBACpB,SAAS,uBAAuB,2BAChC,uBACC,QAAQ;;wBAkCW,4BAA4B,iBAAiB;YAWvD;EACN;EAAU,UAAU;;EACpB;EAAW;;wBAEK,uBAAuB,uBAAuB,QAAQ;wBAYtD,yBACpB,SAAS,kCACR,QAAQ;;;;;wBAsBW,sBAAsB,iBAAiB;YAWjD;EAAwB;EAAU,QAAQ;;EAAyB;EAAW;;wBAQpE,qBAAqB,QAAQ;;;;;wBAa7B,mBAAmB,SAAS,6BAA6B,QAAQ"}

package/dist/web/lib/settingsApi.mjs

@@ -0,0 +1,230 @@
+import { sealedHttpSession } from "./sealedSession.mjs";
+import { fetchWithStepUp } from "./stepUp.mjs";
+import { SETTINGS_CONFIG_API_ROUTE, SETTINGS_IMAGES_API_ROUTE, SETTINGS_MODELS_API_ROUTE, SETTINGS_REPOSITORIES_API_ROUTE, SETTINGS_REPOSITORY_API_ROUTE, SETTINGS_REPOSITORY_SELECTION_API_ROUTE, SETTINGS_VALUE_API_ROUTE } from "../../types/settings.mjs";
+//#region src/web/lib/settingsApi.ts
+/**
+* The page's half of the settings routes. The only place the cockpit talks
+* HTTP for configuration, so if the transport changes, it changes here alone.
+*
+* Writes go through the step-up gate for the same reason a provider credential
+* does: changing a planning model redirects where this machine's model traffic
+* goes, and a remote caller should prove itself first.
+*/
+const UNREACHABLE = "The hub is unreachable.";
+const JSON_HEADERS = { "content-type": "application/json" };
+function workspaceRoute(route, workspaceId) {
+	return workspaceId === void 0 ? route : route.replace("/api/", `/api/workspaces/${encodeURIComponent(workspaceId)}/`);
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function errorOf(body, fallback) {
+	return isRecord(body) && typeof body.error === "string" && body.error !== "" ? body.error : fallback;
+}
+async function readBody(response) {
+	const text = await response.text();
+	if (text === "") return void 0;
+	try {
+		return JSON.parse(text);
+	} catch {
+		return;
+	}
+}
+async function readSettingsConfig(repoRoot, keys, workspaceId) {
+	if (repoRoot !== "" && !workspaceId) return {
+		ok: false,
+		error: "Choose an admitted workspace."
+	};
+	const search = new URLSearchParams({ repoRoot });
+	for (const key of keys) search.append("key", key);
+	let response;
+	try {
+		response = await sealedHttpSession.fetch(`${workspaceRoute(SETTINGS_CONFIG_API_ROUTE, workspaceId)}?${search.toString()}`);
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+	const body = await readBody(response);
+	if (!response.ok) return {
+		ok: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		error: "The hub answered with no configuration."
+	};
+	return {
+		ok: true,
+		config: body
+	};
+}
+async function writeSettingsValue(request, workspaceId) {
+	if (request.scope === "repository" && !workspaceId) return {
+		ok: false,
+		stale: false,
+		error: "Choose an admitted workspace."
+	};
+	let response;
+	try {
+		response = await fetchWithStepUp(workspaceRoute(SETTINGS_VALUE_API_ROUTE, request.scope === "repository" ? workspaceId : void 0), {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+	} catch {
+		return {
+			ok: false,
+			stale: false,
+			error: UNREACHABLE
+		};
+	}
+	const body = await readBody(response);
+	if (response.status === 409) {
+		const hash = isRecord(body) && typeof body.hash === "string" ? body.hash : void 0;
+		return {
+			ok: false,
+			stale: true,
+			error: errorOf(body, "The config changed since it was read."),
+			...hash === void 0 ? {} : { hash }
+		};
+	}
+	if (!response.ok) return {
+		ok: false,
+		stale: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		stale: false,
+		error: "The hub answered with no configuration."
+	};
+	return {
+		ok: true,
+		config: body
+	};
+}
+/** The repositories the picker offers; an empty list is a machine with no sessions. */
+async function listSettingsRepositories() {
+	try {
+		const response = await sealedHttpSession.fetch(SETTINGS_REPOSITORIES_API_ROUTE);
+		const body = await readBody(response);
+		if (!response.ok || !isRecord(body) || !Array.isArray(body.repositories)) return [];
+		return body.repositories;
+	} catch {
+		return [];
+	}
+}
+async function readRepositorySettings(repositoryId) {
+	try {
+		const response = await sealedHttpSession.fetch(workspaceRoute(SETTINGS_REPOSITORY_API_ROUTE, repositoryId));
+		const body = await readBody(response);
+		if (!response.ok) return {
+			ok: false,
+			error: errorOf(body, `The hub answered ${String(response.status)}.`)
+		};
+		if (!isRecord(body)) return {
+			ok: false,
+			error: "The hub answered with no repository settings."
+		};
+		return {
+			ok: true,
+			settings: body
+		};
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+async function writeRepositorySelection(request) {
+	try {
+		const response = await fetchWithStepUp(workspaceRoute(SETTINGS_REPOSITORY_SELECTION_API_ROUTE, request.repositoryId), {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+		const body = await readBody(response);
+		if (!response.ok) return {
+			ok: false,
+			error: errorOf(body, `The hub answered ${String(response.status)}.`)
+		};
+		if (!isRecord(body)) return {
+			ok: false,
+			error: "The hub answered with no repository settings."
+		};
+		return {
+			ok: true,
+			settings: body
+		};
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+/**
+* The models a picker offers. An empty list is not an error: a machine with no
+* authenticated provider has none, and those fields fall back to free text.
+*/
+async function listSettingsModels() {
+	try {
+		const response = await sealedHttpSession.fetch(SETTINGS_MODELS_API_ROUTE);
+		const body = await readBody(response);
+		if (!response.ok || !isRecord(body) || !Array.isArray(body.models)) return [];
+		return body.models;
+	} catch {
+		return [];
+	}
+}
+function imageSettingsOf(response, body) {
+	if (!response.ok) return {
+		ok: false,
+		error: errorOf(body, `The hub answered ${String(response.status)}.`)
+	};
+	if (!isRecord(body)) return {
+		ok: false,
+		error: "The hub answered with no image settings."
+	};
+	return {
+		ok: true,
+		images: body
+	};
+}
+async function readImageSettings() {
+	try {
+		const response = await sealedHttpSession.fetch(SETTINGS_IMAGES_API_ROUTE);
+		return imageSettingsOf(response, await readBody(response));
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+/**
+* Writes through the step-up gate, as every other settings write does: this
+* one decides how much of a screenshot a remote caller can push into a model.
+*/
+async function writeImageSettings(request) {
+	try {
+		const response = await fetchWithStepUp(SETTINGS_IMAGES_API_ROUTE, {
+			method: "PUT",
+			headers: JSON_HEADERS,
+			body: JSON.stringify(request)
+		});
+		return imageSettingsOf(response, await readBody(response));
+	} catch {
+		return {
+			ok: false,
+			error: UNREACHABLE
+		};
+	}
+}
+//#endregion
+export { listSettingsModels, listSettingsRepositories, readImageSettings, readRepositorySettings, readSettingsConfig, writeImageSettings, writeRepositorySelection, writeSettingsValue };
+
+//# sourceMappingURL=settingsApi.mjs.map

package/dist/web/lib/settingsApi.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsApi.mjs","names":[],"sources":["../../../src/web/lib/settingsApi.ts"],"sourcesContent":["import {\n  SETTINGS_CONFIG_API_ROUTE,\n  SETTINGS_IMAGES_API_ROUTE,\n  SETTINGS_MODELS_API_ROUTE,\n  SETTINGS_REPOSITORIES_API_ROUTE,\n  SETTINGS_REPOSITORY_API_ROUTE,\n  SETTINGS_REPOSITORY_SELECTION_API_ROUTE,\n  SETTINGS_VALUE_API_ROUTE,\n  type RepositorySelectionWriteRequest,\n  type RepositorySettingsView,\n  type SettingsConfigView,\n  type SettingsImagesView,\n  type SettingsImagesWriteRequest,\n  type SettingsModel,\n  type SettingsRepository,\n  type SettingsWriteRequest,\n  type SettingsBatchWriteRequest,\n} from '../../types/settings';\nimport { sealedHttpSession } from './sealedSession';\nimport { fetchWithStepUp } from './stepUp';\n\n/**\n * The page's half of the settings routes. The only place the cockpit talks\n * HTTP for configuration, so if the transport changes, it changes here alone.\n *\n * Writes go through the step-up gate for the same reason a provider credential\n * does: changing a planning model redirects where this machine's model traffic\n * goes, and a remote caller should prove itself first.\n */\n\nconst UNREACHABLE = 'The hub is unreachable.';\nconst JSON_HEADERS = { 'content-type': 'application/json' };\n\nfunction workspaceRoute(route: string, workspaceId: string | undefined): string {\n  return workspaceId === undefined\n    ? route\n    : route.replace('/api/', `/api/workspaces/${encodeURIComponent(workspaceId)}/`);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction errorOf(body: unknown, fallback: string): string {\n  return isRecord(body) && typeof body.error === 'string' && body.error !== '' ? body.error : fallback;\n}\n\nasync function readBody(response: Response): Promise<unknown> {\n  const text = await response.text();\n  if (text === '') return undefined;\n  try {\n    return JSON.parse(text) as unknown;\n  } catch {\n    return undefined;\n  }\n}\n\nexport type ReadConfigResult = { ok: true; config: SettingsConfigView } | { ok: false; error: string };\n\nexport async function readSettingsConfig(\n  repoRoot: string,\n  keys: readonly string[],\n  workspaceId?: string,\n): Promise<ReadConfigResult> {\n  if (repoRoot !== '' && !workspaceId) return { ok: false, error: 'Choose an admitted workspace.' };\n  const search = new URLSearchParams({ repoRoot });\n  for (const key of keys) search.append('key', key);\n  let response: Response;\n  try {\n    response = await sealedHttpSession.fetch(\n      `${workspaceRoute(SETTINGS_CONFIG_API_ROUTE, workspaceId)}?${search.toString()}`,\n    );\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n  const body = await readBody(response);\n  if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  if (!isRecord(body)) return { ok: false, error: 'The hub answered with no configuration.' };\n  return { ok: true, config: body as unknown as SettingsConfigView };\n}\n\nexport type WriteConfigResult =\n  | { ok: true; config: SettingsConfigView }\n  /** The file moved under the page; `hash` is what it holds now. */\n  | { ok: false; stale: true; error: string; hash?: string }\n  | { ok: false; stale: false; error: string };\n\nexport async function writeSettingsValue(\n  request: SettingsWriteRequest | SettingsBatchWriteRequest,\n  workspaceId?: string,\n): Promise<WriteConfigResult> {\n  if (request.scope === 'repository' && !workspaceId)\n    return { ok: false, stale: false, error: 'Choose an admitted workspace.' };\n  let response: Response;\n  try {\n    response = await fetchWithStepUp(\n      workspaceRoute(SETTINGS_VALUE_API_ROUTE, request.scope === 'repository' ? workspaceId : undefined),\n      {\n        method: 'PUT',\n        headers: JSON_HEADERS,\n        body: JSON.stringify(request),\n      },\n    );\n  } catch {\n    return { ok: false, stale: false, error: UNREACHABLE };\n  }\n  const body = await readBody(response);\n  if (response.status === 409) {\n    const hash = isRecord(body) && typeof body.hash === 'string' ? body.hash : undefined;\n    return {\n      ok: false,\n      stale: true,\n      error: errorOf(body, 'The config changed since it was read.'),\n      ...(hash === undefined ? {} : { hash }),\n    };\n  }\n  if (!response.ok) {\n    return { ok: false, stale: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  }\n  if (!isRecord(body)) return { ok: false, stale: false, error: 'The hub answered with no configuration.' };\n  return { ok: true, config: body as unknown as SettingsConfigView };\n}\n\n/** The repositories the picker offers; an empty list is a machine with no sessions. */\nexport async function listSettingsRepositories(): Promise<readonly SettingsRepository[]> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_REPOSITORIES_API_ROUTE);\n    const body = await readBody(response);\n    if (!response.ok || !isRecord(body) || !Array.isArray(body.repositories)) return [];\n    return body.repositories as SettingsRepository[];\n  } catch {\n    return [];\n  }\n}\n\nexport type ReadRepositorySettingsResult =\n  | { ok: true; settings: RepositorySettingsView }\n  | { ok: false; error: string };\n\nexport async function readRepositorySettings(repositoryId: string): Promise<ReadRepositorySettingsResult> {\n  try {\n    const response = await sealedHttpSession.fetch(workspaceRoute(SETTINGS_REPOSITORY_API_ROUTE, repositoryId));\n    const body = await readBody(response);\n    if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n    if (!isRecord(body)) return { ok: false, error: 'The hub answered with no repository settings.' };\n    return { ok: true, settings: body as unknown as RepositorySettingsView };\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n\nexport async function writeRepositorySelection(\n  request: RepositorySelectionWriteRequest,\n): Promise<ReadRepositorySettingsResult> {\n  try {\n    const response = await fetchWithStepUp(\n      workspaceRoute(SETTINGS_REPOSITORY_SELECTION_API_ROUTE, request.repositoryId),\n      {\n        method: 'PUT',\n        headers: JSON_HEADERS,\n        body: JSON.stringify(request),\n      },\n    );\n    const body = await readBody(response);\n    if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n    if (!isRecord(body)) return { ok: false, error: 'The hub answered with no repository settings.' };\n    return { ok: true, settings: body as unknown as RepositorySettingsView };\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n/**\n * The models a picker offers. An empty list is not an error: a machine with no\n * authenticated provider has none, and those fields fall back to free text.\n */\nexport async function listSettingsModels(): Promise<readonly SettingsModel[]> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_MODELS_API_ROUTE);\n    const body = await readBody(response);\n    if (!response.ok || !isRecord(body) || !Array.isArray(body.models)) return [];\n    return body.models as SettingsModel[];\n  } catch {\n    return [];\n  }\n}\n\nexport type ImageSettingsResult = { ok: true; images: SettingsImagesView } | { ok: false; error: string };\n\nfunction imageSettingsOf(response: Response, body: unknown): ImageSettingsResult {\n  if (!response.ok) return { ok: false, error: errorOf(body, `The hub answered ${String(response.status)}.`) };\n  if (!isRecord(body)) return { ok: false, error: 'The hub answered with no image settings.' };\n  return { ok: true, images: body as unknown as SettingsImagesView };\n}\n\nexport async function readImageSettings(): Promise<ImageSettingsResult> {\n  try {\n    const response = await sealedHttpSession.fetch(SETTINGS_IMAGES_API_ROUTE);\n    return imageSettingsOf(response, await readBody(response));\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n\n/**\n * Writes through the step-up gate, as every other settings write does: this\n * one decides how much of a screenshot a remote caller can push into a model.\n */\nexport async function writeImageSettings(request: SettingsImagesWriteRequest): Promise<ImageSettingsResult> {\n  try {\n    const response = await fetchWithStepUp(SETTINGS_IMAGES_API_ROUTE, {\n      method: 'PUT',\n      headers: JSON_HEADERS,\n      body: JSON.stringify(request),\n    });\n    return imageSettingsOf(response, await readBody(response));\n  } catch {\n    return { ok: false, error: UNREACHABLE };\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA8BA,MAAM,cAAc;AACpB,MAAM,eAAe,EAAE,gBAAgB,mBAAmB;AAE1D,SAAS,eAAe,OAAe,aAAyC;CAC9E,OAAO,gBAAgB,KAAA,IACnB,QACA,MAAM,QAAQ,SAAS,mBAAmB,mBAAmB,WAAW,EAAE,EAAE;AAClF;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,QAAQ,MAAe,UAA0B;CACxD,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,KAAK,KAAK,QAAQ;AAC9F;AAEA,eAAe,SAAS,UAAsC;CAC5D,MAAM,OAAO,MAAM,SAAS,KAAK;CACjC,IAAI,SAAS,IAAI,OAAO,KAAA;CACxB,IAAI;EACF,OAAO,KAAK,MAAM,IAAI;CACxB,QAAQ;EACN;CACF;AACF;AAIA,eAAsB,mBACpB,UACA,MACA,aAC2B;CAC3B,IAAI,aAAa,MAAM,CAAC,aAAa,OAAO;EAAE,IAAI;EAAO,OAAO;CAAgC;CAChG,MAAM,SAAS,IAAI,gBAAgB,EAAE,SAAS,CAAC;CAC/C,KAAK,MAAM,OAAO,MAAM,OAAO,OAAO,OAAO,GAAG;CAChD,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,kBAAkB,MACjC,GAAG,eAAe,2BAA2B,WAAW,EAAE,GAAG,OAAO,SAAS,GAC/E;CACF,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;CACA,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,CAAC,SAAS,IAAI,OAAO;EAAE,IAAI;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAA0C;CAC1F,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;AAQA,eAAsB,mBACpB,SACA,aAC4B;CAC5B,IAAI,QAAQ,UAAU,gBAAgB,CAAC,aACrC,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO;CAAgC;CAC3E,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,gBACf,eAAe,0BAA0B,QAAQ,UAAU,eAAe,cAAc,KAAA,CAAS,GACjG;GACE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CACF;CACF,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;GAAO,OAAO;EAAY;CACvD;CACA,MAAM,OAAO,MAAM,SAAS,QAAQ;CACpC,IAAI,SAAS,WAAW,KAAK;EAC3B,MAAM,OAAO,SAAS,IAAI,KAAK,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EAC3E,OAAO;GACL,IAAI;GACJ,OAAO;GACP,OAAO,QAAQ,MAAM,uCAAuC;GAC5D,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;EACvC;CACF;CACA,IAAI,CAAC,SAAS,IACZ,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAEzG,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;EAAO,OAAO;CAA0C;CACxG,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;;AAGA,eAAsB,2BAAmE;CACvF,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,MAAM,+BAA+B;EAC9E,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,YAAY,GAAG,OAAO,CAAC;EAClF,OAAO,KAAK;CACd,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAMA,eAAsB,uBAAuB,cAA6D;CACxG,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,MAAM,eAAe,+BAA+B,YAAY,CAAC;EAC1G,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,IAAI,OAAO;GAAE,IAAI;GAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;EAAE;EAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;GAAE,IAAI;GAAO,OAAO;EAAgD;EAChG,OAAO;GAAE,IAAI;GAAM,UAAU;EAA0C;CACzE,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;AAEA,eAAsB,yBACpB,SACuC;CACvC,IAAI;EACF,MAAM,WAAW,MAAM,gBACrB,eAAe,yCAAyC,QAAQ,YAAY,GAC5E;GACE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CACF;EACA,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,IAAI,OAAO;GAAE,IAAI;GAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;EAAE;EAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;GAAE,IAAI;GAAO,OAAO;EAAgD;EAChG,OAAO;GAAE,IAAI;GAAM,UAAU;EAA0C;CACzE,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;;;;;AAKA,eAAsB,qBAAwD;CAC5E,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,MAAM,yBAAyB;EACxE,MAAM,OAAO,MAAM,SAAS,QAAQ;EACpC,IAAI,CAAC,SAAS,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,KAAK,MAAM,GAAG,OAAO,CAAC;EAC5E,OAAO,KAAK;CACd,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAIA,SAAS,gBAAgB,UAAoB,MAAoC;CAC/E,IAAI,CAAC,SAAS,IAAI,OAAO;EAAE,IAAI;EAAO,OAAO,QAAQ,MAAM,oBAAoB,OAAO,SAAS,MAAM,EAAE,EAAE;CAAE;CAC3G,IAAI,CAAC,SAAS,IAAI,GAAG,OAAO;EAAE,IAAI;EAAO,OAAO;CAA2C;CAC3F,OAAO;EAAE,IAAI;EAAM,QAAQ;CAAsC;AACnE;AAEA,eAAsB,oBAAkD;CACtE,IAAI;EACF,MAAM,WAAW,MAAM,kBAAkB,MAAM,yBAAyB;EACxE,OAAO,gBAAgB,UAAU,MAAM,SAAS,QAAQ,CAAC;CAC3D,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF;;;;;AAMA,eAAsB,mBAAmB,SAAmE;CAC1G,IAAI;EACF,MAAM,WAAW,MAAM,gBAAgB,2BAA2B;GAChE,QAAQ;GACR,SAAS;GACT,MAAM,KAAK,UAAU,OAAO;EAC9B,CAAC;EACD,OAAO,gBAAgB,UAAU,MAAM,SAAS,QAAQ,CAAC;CAC3D,QAAQ;EACN,OAAO;GAAE,IAAI;GAAO,OAAO;EAAY;CACzC;AACF"}

package/dist/web/lib/settingsDraft.cjs

@@ -0,0 +1,48 @@
+//#region src/web/lib/settingsDraft.ts
+/**
+* What a settings page does with pending edits, kept out of the component so it
+* can be checked without a browser.
+*
+* The rules that matter are all here: a field is only editable at a scope the
+* key is actually read from, a cleared field removes the key rather than
+* writing an empty value the parser rejects, and numeric drafts retain their
+* type when the page combines these edits into one atomic save.
+*/
+const KEY_SEPARATOR = ".";
+function settingsKeyOf(field) {
+	return field.keyPath.join(KEY_SEPARATOR);
+}
+/** Why a field cannot be edited at the selected scope, or nothing. */
+function settingsLockedReason(view, scope) {
+	if (view === void 0 || view.scope === "both" || view.scope === scope) return void 0;
+	return view.scope === "global" ? "global only" : "repository only";
+}
+/**
+* The typed edits a save combines into one request with the file's read hash.
+* Keeping contribution order makes the result predictable for callers.
+*/
+function plannedSettingsWrites(input) {
+	return input.fields.filter((field) => settingsKeyOf(field) in input.drafts).map((field) => {
+		const draft = input.drafts[settingsKeyOf(field)] ?? null;
+		const numeric = field.kind === "number" && draft !== null && draft.trim() !== "" ? Number(draft) : void 0;
+		return {
+			repoRoot: input.repoRoot,
+			scope: input.scope,
+			keyPath: field.keyPath,
+			value: numeric !== void 0 && Number.isFinite(numeric) ? numeric : draft,
+			expectedHash: input.startingHash
+		};
+	});
+}
+/** Whether a save can be attempted at all: something changed, and it can land somewhere. */
+function canSaveSettings(input) {
+	if (input.dirty === 0) return false;
+	return input.scope === "global" || input.repoRoot !== "";
+}
+//#endregion
+exports.canSaveSettings = canSaveSettings;
+exports.plannedSettingsWrites = plannedSettingsWrites;
+exports.settingsKeyOf = settingsKeyOf;
+exports.settingsLockedReason = settingsLockedReason;
+
+//# sourceMappingURL=settingsDraft.cjs.map

package/dist/web/lib/settingsDraft.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsDraft.cjs","names":[],"sources":["../../../src/web/lib/settingsDraft.ts"],"sourcesContent":["import type { SettingsFieldContribution } from '@agimon-ai/po-core/web';\n\nimport type { SettingsScope, SettingsValueView, SettingsWriteRequest } from '../../types/settings';\n\n/**\n * What a settings page does with pending edits, kept out of the component so it\n * can be checked without a browser.\n *\n * The rules that matter are all here: a field is only editable at a scope the\n * key is actually read from, a cleared field removes the key rather than\n * writing an empty value the parser rejects, and numeric drafts retain their\n * type when the page combines these edits into one atomic save.\n */\n\nconst KEY_SEPARATOR = '.';\n\nexport function settingsKeyOf(field: SettingsFieldContribution): string {\n  return field.keyPath.join(KEY_SEPARATOR);\n}\n\n/** Why a field cannot be edited at the selected scope, or nothing. */\nexport function settingsLockedReason(view: SettingsValueView | undefined, scope: SettingsScope): string | undefined {\n  if (view === undefined || view.scope === 'both' || view.scope === scope) return undefined;\n  return view.scope === 'global' ? 'global only' : 'repository only';\n}\n\nexport interface PlannedWritesInput {\n  fields: readonly SettingsFieldContribution[];\n  /** Pending edits by dotted key; null clears the key. */\n  drafts: Readonly<Record<string, string | null>>;\n  scope: SettingsScope;\n  repoRoot: string;\n  /** The target file's hash when the page last read it. */\n  startingHash: string;\n}\n\n/**\n * The typed edits a save combines into one request with the file's read hash.\n * Keeping contribution order makes the result predictable for callers.\n */\nexport function plannedSettingsWrites(input: PlannedWritesInput): SettingsWriteRequest[] {\n  return input.fields\n    .filter((field) => settingsKeyOf(field) in input.drafts)\n    .map((field) => {\n      const draft = input.drafts[settingsKeyOf(field)] ?? null;\n      const numeric = field.kind === 'number' && draft !== null && draft.trim() !== '' ? Number(draft) : undefined;\n      return {\n        repoRoot: input.repoRoot,\n        scope: input.scope,\n        keyPath: field.keyPath,\n        value: numeric !== undefined && Number.isFinite(numeric) ? numeric : draft,\n        expectedHash: input.startingHash,\n      };\n    });\n}\n\n/** Whether a save can be attempted at all: something changed, and it can land somewhere. */\nexport function canSaveSettings(input: { dirty: number; scope: SettingsScope; repoRoot: string }): boolean {\n  if (input.dirty === 0) return false;\n  // A repository write needs a repository; a global one never does.\n  return input.scope === 'global' || input.repoRoot !== '';\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,gBAAgB;AAEtB,SAAgB,cAAc,OAA0C;CACtE,OAAO,MAAM,QAAQ,KAAK,aAAa;AACzC;;AAGA,SAAgB,qBAAqB,MAAqC,OAA0C;CAClH,IAAI,SAAS,KAAA,KAAa,KAAK,UAAU,UAAU,KAAK,UAAU,OAAO,OAAO,KAAA;CAChF,OAAO,KAAK,UAAU,WAAW,gBAAgB;AACnD;;;;;AAgBA,SAAgB,sBAAsB,OAAmD;CACvF,OAAO,MAAM,OACV,QAAQ,UAAU,cAAc,KAAK,KAAK,MAAM,MAAM,CAAC,CACvD,KAAK,UAAU;EACd,MAAM,QAAQ,MAAM,OAAO,cAAc,KAAK,MAAM;EACpD,MAAM,UAAU,MAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,KAAK,MAAM,KAAK,OAAO,KAAK,IAAI,KAAA;EACnG,OAAO;GACL,UAAU,MAAM;GAChB,OAAO,MAAM;GACb,SAAS,MAAM;GACf,OAAO,YAAY,KAAA,KAAa,OAAO,SAAS,OAAO,IAAI,UAAU;GACrE,cAAc,MAAM;EACtB;CACF,CAAC;AACL;;AAGA,SAAgB,gBAAgB,OAA2E;CACzG,IAAI,MAAM,UAAU,GAAG,OAAO;CAE9B,OAAO,MAAM,UAAU,YAAY,MAAM,aAAa;AACxD"}

package/dist/web/lib/settingsDraft.d.mts

@@ -0,0 +1,28 @@
+import { SettingsScope, SettingsValueView, SettingsWriteRequest } from "../../types/settings.mjs";
+import { SettingsFieldContribution } from "@agimon-ai/po-core/web";
+//#region src/web/lib/settingsDraft.d.ts
+export declare function settingsKeyOf(field: SettingsFieldContribution): string;
+/** Why a field cannot be edited at the selected scope, or nothing. */
+export declare function settingsLockedReason(view: SettingsValueView | undefined, scope: SettingsScope): string | undefined;
+export interface PlannedWritesInput {
+  fields: readonly SettingsFieldContribution[];
+  /** Pending edits by dotted key; null clears the key. */
+  drafts: Readonly<Record<string, string | null>>;
+  scope: SettingsScope;
+  repoRoot: string;
+  /** The target file's hash when the page last read it. */
+  startingHash: string;
+}
+/**
+ * The typed edits a save combines into one request with the file's read hash.
+ * Keeping contribution order makes the result predictable for callers.
+ */
+export declare function plannedSettingsWrites(input: PlannedWritesInput): SettingsWriteRequest[];
+/** Whether a save can be attempted at all: something changed, and it can land somewhere. */
+export declare function canSaveSettings(input: {
+  dirty: number;
+  scope: SettingsScope;
+  repoRoot: string;
+}): boolean;
+//#endregion
+//# sourceMappingURL=settingsDraft.d.mts.map

package/dist/web/lib/settingsDraft.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsDraft.d.mts","names":[],"sources":["../../../src/web/lib/settingsDraft.ts"],"mappings":";;;wBAgBgB,cAAc,OAAO;;wBAKrB,qBAAqB,MAAM,+BAA+B,OAAO;iBAKhE;EACf,iBAAiB;;EAEjB,QAAQ,SAAS;EACjB,OAAO;EACP;;EAEA;;;;;;wBAOc,sBAAsB,OAAO,qBAAqB;;wBAiBlD,gBAAgB;EAAS;EAAe,OAAO;EAAe"}