@ai-ecoverse/slicc-spectrum 1.108.1 → 1.108.2

package/dist/slicc-ui.js

@@ -63,10 +63,11 @@ import {
   define
 } from "./chunk-SQG7U2FN.js";
 import {
+  isPolicyPaused,
   isVaultFailure,
   nameProblem,
   valueProblem
-} from "./chunk-XQHRTHDQ.js";
+} from "./chunk-BUSDBLS7.js";
 import {
   Emitter
 } from "./chunk-T5NHW4KC.js";
@@ -34855,6 +34856,7 @@ function widening(change, devices) {
   }
 }
 function failureText(error) {
+  if (isPolicyPaused(error)) return "Secrets are paused until the missing policy file is back";
   const text4 = isVaultFailure(error) ? codeTexts[error.code] : void 0;
   return text4 ?? (error instanceof Error ? error.message : "The vault did not answer");
 }
@@ -52712,7 +52714,23 @@ var sessionTrust = {
 };
 var sessionProtocol = (protocol) => Object.hasOwn(sessionProtocols, protocol) ? sessionProtocols[protocol] : protocol;
 var sessionTrusted = (verifiedBy) => verifiedBy && Object.hasOwn(sessionTrust, verifiedBy) ? `${sessionTrust[verifiedBy]}, ` : "";
-function auditLine(entry, devices, named2) {
+function returned(entries) {
+  const paused = /* @__PURE__ */ new Set();
+  const back = /* @__PURE__ */ new Map();
+  for (const entry of [...entries].reverse()) {
+    if (entry.type !== "policy") continue;
+    if (entry.absent) paused.add(entry.file);
+    else if (entry.accepted && paused.delete(entry.file)) back.set(entry.seq, paused.size === 0);
+  }
+  return back;
+}
+function policyHead(entry, running2) {
+  if (entry.absent) return "was removed. Secrets are paused until it\u2019s back.";
+  if (running2 !== void 0)
+    return running2 ? "is back. Secrets are running again." : "is back. Secrets stay paused until the other file is back.";
+  return entry.accepted ? "changed" : "changed and was refused";
+}
+function auditLine(entry, devices, named2, back = /* @__PURE__ */ new Map()) {
   switch (entry.type) {
     case "inject":
     case "forward":
@@ -52734,7 +52752,7 @@ function auditLine(entry, devices, named2) {
     case "refresh":
       return entry.grant ? b`Refreshed automatically with the sign-in <code>${entry.grant}</code>` : b`Refreshed automatically`;
     default:
-      return b`<code>${entry.file}</code> ${entry.accepted ? "changed" : "changed and was refused"}${changes(entry, devices).map(([kind, line]) => b`<span class="change" data-change=${kind}>${line}</span>`)}${entry.warning ? b`<span class="warning" data-warning>${entry.warning}</span>` : A}${entry.accepted ? b`<span class="hint" data-hint>If you didn’t mean this, change the file back with sudo.</span>` : A}`;
+      return b`<code>${entry.file}</code> ${policyHead(entry, back.get(entry.seq))}${changes(entry, devices).map(([kind, line]) => b`<span class="change" data-change=${kind}>${line}</span>`)}${entry.warning ? b`<span class="warning" data-warning>${entry.warning}</span>` : A}${entry.accepted && !entry.absent && !back.has(entry.seq) ? b`<span class="hint" data-hint>If you didn’t mean this, change the file back with sudo.</span>` : A}`;
   }
 }
 function merged(...pages2) {
@@ -53662,24 +53680,25 @@ var SliccSecrets = class extends ThemedElement {
       if (this.#mine(vault)) this.unpinning = null;
     }
   }
-  #entry(entry, devices, vault, all2 = []) {
+  #entry(entry, devices, vault, all2 = [], back) {
     const date = new Date(entry.at);
     const name = entry.type === "policy" || entry.type === "endpoints" ? null : entry.name;
     return b`<li data-seq=${entry.seq} data-type=${entry.type}>
       <time datetime=${date.toISOString()} title=${date.toLocaleString("en-GB", { dateStyle: "medium", timeStyle: "short" })}>${since(entry.at)}</time>
-      <span class="what">${name ? b`<code>${name}</code> · ` : A}${auditLine(entry, devices, (provider) => this.#provider(provider))}${entry.type === "policy" || entry.type === "refresh" || entry.type === "endpoints" ? A : b` <span class="by">by ${who(entry)}</span>`}${entry.type === "endpoints" && vault ? this.#unpin(vault, entry, all2) : A}</span>
+      <span class="what">${name ? b`<code>${name}</code> · ` : A}${auditLine(entry, devices, (provider) => this.#provider(provider), back)}${entry.type === "policy" || entry.type === "refresh" || entry.type === "endpoints" ? A : b` <span class="by">by ${who(entry)}</span>`}${entry.type === "endpoints" && vault ? this.#unpin(vault, entry, all2) : A}</span>
     </li>`;
   }
   #audit(vault, list6, entries, devices) {
     const shown4 = this.reveals ? entries.filter((entry) => entry.type === "materialize") : entries;
     const more = this.more ?? list6.auditMore;
+    const back = returned(entries);
     return b`<div class="audit-head">
         <h3 id="secrets-audit">Activity</h3>
         <sp-switch size="s" data-action="reveals" .checked=${this.reveals} @change=${(event2) => {
       this.reveals = event2.target.checked;
     }}>Only reveals to programs</sp-switch>
       </div>
-      ${shown4.length ? b`<ol class="audit" aria-labelledby="secrets-audit">${shown4.map((entry) => this.#entry(entry, devices, vault, entries))}</ol>` : b`<p class="muted" data-audit-empty>${this.reveals ? more ? "No reveals in the activity loaded so far." : "No program has been given a secret." : "Nothing has used a secret yet."}</p>`}
+      ${shown4.length ? b`<ol class="audit" aria-labelledby="secrets-audit">${shown4.map((entry) => this.#entry(entry, devices, vault, entries, back))}</ol>` : b`<p class="muted" data-audit-empty>${this.reveals ? more ? "No reveals in the activity loaded so far." : "No program has been given a secret." : "Nothing has used a secret yet."}</p>`}
       ${more ? b`<div class="row"><swc-button size="s" variant="secondary" fill-style="outline" data-action="older" ?pending=${this.loading} @click=${() => this.showOlder(vault, entries)}>Show older</swc-button></div>` : A}`;
   }
   #feedback() {
@@ -53708,11 +53727,16 @@ var SliccSecrets = class extends ThemedElement {
       </div>
     </div>`;
   }
+  #paused(status2) {
+    const [first2, ...rest] = (status2.policy ?? []).filter((file) => file.paused);
+    if (!first2) return A;
+    return b`<swc-status-light size="m" variant="notice" data-paused>Paused: <code>${first2.path}</code> ${rest.length ? `and ${rest.length} more are` : "is"} missing</swc-status-light>`;
+  }
   #header(vault, status2) {
     if (!status2) return A;
     if (this.#offline)
       return b`<swc-status-light size="m" variant="neutral">Waiting</swc-status-light>`;
-    return b`<swc-status-light size="m" variant=${status2.locked ? "notice" : "positive"}>${status2.locked ? "Locked" : "Unlocked"}</swc-status-light><span class="muted">${lockModes[status2.lock]}</span>
+    return b`<swc-status-light size="m" variant=${status2.locked ? "notice" : "positive"}>${status2.locked ? "Locked" : "Unlocked"}</swc-status-light>${this.#paused(status2)}<span class="muted">${lockModes[status2.lock]}</span>
       <span class="controls">${status2.locked ? b`${status2.scrub?.needed && !status2.scrub.ready ? b`<span class="availability" role="status" data-availability="unlock"><swc-icon-info-circle size="s" aria-hidden="true"></swc-icon-info-circle><span>Unlock the vault to continue</span></span>` : A}${this.#button({ intent: { kind: "unlock" }, label: "Unlock", variant: "accent" }, "unlock")}` : b`${vault.lock ? b`<swc-button size="m" variant="secondary" fill-style="outline" data-action="lock" ?pending=${this.acting.has("lock")} @click=${() => this.lockVault(vault)}>Lock</swc-button>` : A}
             ${this.#button({ intent: { kind: "protect" }, label: status2.lock === "auto" ? "Protect with a passkey" : "Change protection" }, "protect")}`}</span>`;
   }
@@ -53850,7 +53874,9 @@ function serverLeft(account, left) {
   const url = left.some(([part2]) => part2 === "url");
   const record = left.some(([part2]) => part2 === "record");
   const held2 = account.auth === "oauth" ? "sign-in" : "token";
-  const locked = left.some(([, error]) => isVaultFailure(error) && error.code === "EACCES");
+  const locked = left.some(
+    ([, error]) => isVaultFailure(error) && error.code === "EACCES" && !isPolicyPaused(error)
+  );
   const what = !url ? `its ${held2} stayed in the vault` : record ? `its ${held2} and URL stayed in the vault` : "the vault kept its URL";
   const next = url ? locked ? "Unlock the vault, then add the server and remove it again." : "Add the server and remove it again." : locked ? "Unlock the vault, then remove it under Secrets." : "Open Secrets to remove it.";
   return `${account.provider} is removed, but ${what}. ${next}`;