@ai-ecoverse/slicc-spectrum 1.108.0 → 1.108.2

package/dist/slicc-ui.js

@@ -63,10 +63,11 @@ import {
   define
 } from "./chunk-SQG7U2FN.js";
 import {
+  isPolicyPaused,
   isVaultFailure,
   nameProblem,
   valueProblem
-} from "./chunk-XQHRTHDQ.js";
+} from "./chunk-BUSDBLS7.js";
 import {
   Emitter
 } from "./chunk-T5NHW4KC.js";
@@ -34855,6 +34856,7 @@ function widening(change, devices) {
   }
 }
 function failureText(error) {
+  if (isPolicyPaused(error)) return "Secrets are paused until the missing policy file is back";
   const text4 = isVaultFailure(error) ? codeTexts[error.code] : void 0;
   return text4 ?? (error instanceof Error ? error.message : "The vault did not answer");
 }
@@ -52712,7 +52714,23 @@ var sessionTrust = {
 };
 var sessionProtocol = (protocol) => Object.hasOwn(sessionProtocols, protocol) ? sessionProtocols[protocol] : protocol;
 var sessionTrusted = (verifiedBy) => verifiedBy && Object.hasOwn(sessionTrust, verifiedBy) ? `${sessionTrust[verifiedBy]}, ` : "";
-function auditLine(entry, devices, named2) {
+function returned(entries) {
+  const paused = /* @__PURE__ */ new Set();
+  const back = /* @__PURE__ */ new Map();
+  for (const entry of [...entries].reverse()) {
+    if (entry.type !== "policy") continue;
+    if (entry.absent) paused.add(entry.file);
+    else if (entry.accepted && paused.delete(entry.file)) back.set(entry.seq, paused.size === 0);
+  }
+  return back;
+}
+function policyHead(entry, running2) {
+  if (entry.absent) return "was removed. Secrets are paused until it\u2019s back.";
+  if (running2 !== void 0)
+    return running2 ? "is back. Secrets are running again." : "is back. Secrets stay paused until the other file is back.";
+  return entry.accepted ? "changed" : "changed and was refused";
+}
+function auditLine(entry, devices, named2, back = /* @__PURE__ */ new Map()) {
   switch (entry.type) {
     case "inject":
     case "forward":
@@ -52734,7 +52752,7 @@ function auditLine(entry, devices, named2) {
     case "refresh":
       return entry.grant ? b`Refreshed automatically with the sign-in <code>${entry.grant}</code>` : b`Refreshed automatically`;
     default:
-      return b`<code>${entry.file}</code> ${entry.accepted ? "changed" : "changed and was refused"}${changes(entry, devices).map(([kind, line]) => b`<span class="change" data-change=${kind}>${line}</span>`)}${entry.warning ? b`<span class="warning" data-warning>${entry.warning}</span>` : A}${entry.accepted ? b`<span class="hint" data-hint>If you didn’t mean this, change the file back with sudo.</span>` : A}`;
+      return b`<code>${entry.file}</code> ${policyHead(entry, back.get(entry.seq))}${changes(entry, devices).map(([kind, line]) => b`<span class="change" data-change=${kind}>${line}</span>`)}${entry.warning ? b`<span class="warning" data-warning>${entry.warning}</span>` : A}${entry.accepted && !entry.absent && !back.has(entry.seq) ? b`<span class="hint" data-hint>If you didn’t mean this, change the file back with sudo.</span>` : A}`;
   }
 }
 function merged(...pages2) {
@@ -53662,24 +53680,25 @@ var SliccSecrets = class extends ThemedElement {
       if (this.#mine(vault)) this.unpinning = null;
     }
   }
-  #entry(entry, devices, vault, all2 = []) {
+  #entry(entry, devices, vault, all2 = [], back) {
     const date = new Date(entry.at);
     const name = entry.type === "policy" || entry.type === "endpoints" ? null : entry.name;
     return b`<li data-seq=${entry.seq} data-type=${entry.type}>
       <time datetime=${date.toISOString()} title=${date.toLocaleString("en-GB", { dateStyle: "medium", timeStyle: "short" })}>${since(entry.at)}</time>
-      <span class="what">${name ? b`<code>${name}</code> · ` : A}${auditLine(entry, devices, (provider) => this.#provider(provider))}${entry.type === "policy" || entry.type === "refresh" || entry.type === "endpoints" ? A : b` <span class="by">by ${who(entry)}</span>`}${entry.type === "endpoints" && vault ? this.#unpin(vault, entry, all2) : A}</span>
+      <span class="what">${name ? b`<code>${name}</code> · ` : A}${auditLine(entry, devices, (provider) => this.#provider(provider), back)}${entry.type === "policy" || entry.type === "refresh" || entry.type === "endpoints" ? A : b` <span class="by">by ${who(entry)}</span>`}${entry.type === "endpoints" && vault ? this.#unpin(vault, entry, all2) : A}</span>
     </li>`;
   }
   #audit(vault, list6, entries, devices) {
     const shown4 = this.reveals ? entries.filter((entry) => entry.type === "materialize") : entries;
     const more = this.more ?? list6.auditMore;
+    const back = returned(entries);
     return b`<div class="audit-head">
         <h3 id="secrets-audit">Activity</h3>
         <sp-switch size="s" data-action="reveals" .checked=${this.reveals} @change=${(event2) => {
       this.reveals = event2.target.checked;
     }}>Only reveals to programs</sp-switch>
       </div>
-      ${shown4.length ? b`<ol class="audit" aria-labelledby="secrets-audit">${shown4.map((entry) => this.#entry(entry, devices, vault, entries))}</ol>` : b`<p class="muted" data-audit-empty>${this.reveals ? more ? "No reveals in the activity loaded so far." : "No program has been given a secret." : "Nothing has used a secret yet."}</p>`}
+      ${shown4.length ? b`<ol class="audit" aria-labelledby="secrets-audit">${shown4.map((entry) => this.#entry(entry, devices, vault, entries, back))}</ol>` : b`<p class="muted" data-audit-empty>${this.reveals ? more ? "No reveals in the activity loaded so far." : "No program has been given a secret." : "Nothing has used a secret yet."}</p>`}
       ${more ? b`<div class="row"><swc-button size="s" variant="secondary" fill-style="outline" data-action="older" ?pending=${this.loading} @click=${() => this.showOlder(vault, entries)}>Show older</swc-button></div>` : A}`;
   }
   #feedback() {
@@ -53708,11 +53727,16 @@ var SliccSecrets = class extends ThemedElement {
       </div>
     </div>`;
   }
+  #paused(status2) {
+    const [first2, ...rest] = (status2.policy ?? []).filter((file) => file.paused);
+    if (!first2) return A;
+    return b`<swc-status-light size="m" variant="notice" data-paused>Paused: <code>${first2.path}</code> ${rest.length ? `and ${rest.length} more are` : "is"} missing</swc-status-light>`;
+  }
   #header(vault, status2) {
     if (!status2) return A;
     if (this.#offline)
       return b`<swc-status-light size="m" variant="neutral">Waiting</swc-status-light>`;
-    return b`<swc-status-light size="m" variant=${status2.locked ? "notice" : "positive"}>${status2.locked ? "Locked" : "Unlocked"}</swc-status-light><span class="muted">${lockModes[status2.lock]}</span>
+    return b`<swc-status-light size="m" variant=${status2.locked ? "notice" : "positive"}>${status2.locked ? "Locked" : "Unlocked"}</swc-status-light>${this.#paused(status2)}<span class="muted">${lockModes[status2.lock]}</span>
       <span class="controls">${status2.locked ? b`${status2.scrub?.needed && !status2.scrub.ready ? b`<span class="availability" role="status" data-availability="unlock"><swc-icon-info-circle size="s" aria-hidden="true"></swc-icon-info-circle><span>Unlock the vault to continue</span></span>` : A}${this.#button({ intent: { kind: "unlock" }, label: "Unlock", variant: "accent" }, "unlock")}` : b`${vault.lock ? b`<swc-button size="m" variant="secondary" fill-style="outline" data-action="lock" ?pending=${this.acting.has("lock")} @click=${() => this.lockVault(vault)}>Lock</swc-button>` : A}
             ${this.#button({ intent: { kind: "protect" }, label: status2.lock === "auto" ? "Protect with a passkey" : "Change protection" }, "protect")}`}</span>`;
   }
@@ -53845,6 +53869,18 @@ var removeBodies = {
   local: "Models from it stop working."
 };
 var serverGone = "Agents can\u2019t use it any more.";
+var serversFailure = "mcp";
+function serverLeft(account, left) {
+  const url = left.some(([part2]) => part2 === "url");
+  const record = left.some(([part2]) => part2 === "record");
+  const held2 = account.auth === "oauth" ? "sign-in" : "token";
+  const locked = left.some(
+    ([, error]) => isVaultFailure(error) && error.code === "EACCES" && !isPolicyPaused(error)
+  );
+  const what = !url ? `its ${held2} stayed in the vault` : record ? `its ${held2} and URL stayed in the vault` : "the vault kept its URL";
+  const next = url ? locked ? "Unlock the vault, then add the server and remove it again." : "Add the server and remove it again." : locked ? "Unlock the vault, then remove it under Secrets." : "Open Secrets to remove it.";
+  return `${account.provider} is removed, but ${what}. ${next}`;
+}
 var refusedEntry = "This entry was refused. Remove it and add it again here.";
 var urlSecret = "This URL contains a secret. Remove it, turn on Uses a token, and paste the token when you connect.";
 var sentence2 = (text4) => text4.charAt(0).toUpperCase() + text4.slice(1);
@@ -54339,6 +54375,7 @@ var SliccSettings = class extends ThemedElement {
     queueMicrotask(() => settleModels(model));
     this.removing = /* @__PURE__ */ new Set();
     this.refusals = {};
+    if (this.failure?.id === serversFailure) this.failure = null;
     void this.#readRefusals(model);
     if (model.updates !== this.#developerPort) {
       this.#developerPort = model.updates;
@@ -55163,16 +55200,26 @@ var SliccSettings = class extends ThemedElement {
     const held2 = account.auth === "oauth" ? "sign-in" : "token";
     return `Its ${held2} is deleted from the vault. ${serverGone}`;
   }
-  async #clearServer(model, account) {
+  #serverClear(model, account) {
     const vault = model.vault;
     const server = serverOf(account);
     const records = vault?.remove ? this.#serverRecords(account, vault) : [];
     const held2 = !!vault?.remove && this.#heldRecords(account, vault).length > 0;
     const pinned = !!this.#pinned(account);
     const url = registrations2()[server] ?? (held2 && !pinned && this.#mcpUrl(account));
-    for (const [name, kind] of records) await gone2(vault, name, kind);
-    if (url) await vault?.endpoints?.({ remove: { mcp: [{ server, url }] } });
-    register(server, void 0);
+    return async () => {
+      const left = [];
+      for (const [name, kind] of records)
+        await gone2(vault, name, kind).catch((error) => left.push(["record", error]));
+      try {
+        if (url) await vault?.endpoints?.({ remove: { mcp: [{ server, url }] } });
+        register(server, void 0);
+      } catch (error) {
+        register(server, url);
+        left.push(["url", error]);
+      }
+      return left;
+    };
   }
   #markRemoving(id, on2) {
     const rest = [...this.removing].filter((candidate) => candidate !== id);
@@ -55210,10 +55257,13 @@ var SliccSettings = class extends ThemedElement {
       if (this.model === model) this.failure = { id, message };
     };
     try {
-      await this.#clearServer(model, account);
+      const clear2 = this.#serverClear(model, account);
       const edit = await model.settings.removeServer?.(id);
-      if (!edit.ok) refused3(sentence2(edit.reason));
-      else if (this.model === model) this.focusOn("[data-action=add-server]");
+      if (!edit.ok) return refused3(sentence2(edit.reason));
+      const left = await clear2();
+      if (this.model !== model) return;
+      if (left.length) this.failure = { id: serversFailure, message: serverLeft(account, left) };
+      this.focusOn("[data-action=add-server]");
     } catch (error) {
       refused3(failureText(error));
     }
@@ -55317,13 +55367,14 @@ var SliccSettings = class extends ThemedElement {
   }
   #serverList(servers) {
     const add = !!this.model?.settings.addServer;
-    if (!(servers.length || add)) return A;
+    const failed2 = this.failure?.id === serversFailure;
+    if (!(servers.length || add || failed2)) return A;
     return b`<h2>MCP servers</h2>
       <div class="accounts" data-group="mcp">${c(
       servers,
       (account) => account.id,
       (account) => this.#account(account)
-    )}</div>
+    )}${failed2 ? b`<div class="failure" role="alert" data-failure="servers"><swc-icon-alert-triangle size="s" aria-hidden="true"></swc-icon-alert-triangle><span>${this.failure?.message}</span></div>` : A}</div>
       ${add && this.serverOpen ? this.#serverForm() : add ? b`<div class="add"><swc-action-button size="m" quiet data-action="add-server" @click=${() => this.#openServerForm()}><swc-icon-add slot="icon"></swc-icon-add>Add server</swc-action-button></div>` : A}`;
   }
   #notice(row, size4 = "long") {