@ai-ecoverse/slicc-spectrum 1.90.0 → 1.92.0

package/README.md

@@ -406,7 +406,7 @@ An account whose status is `signing-in` (or a non-API-key account while its `con
 Accounts with `group: 'mcp'` (MCP servers) get their own **MCP servers** heading (`.accounts[data-group=mcp]`).
 An `api-key` account asks for its `secret`: “{provider} API key” by default, “{provider} token” for `secret: 'token'`; when it is `expired` it reads **API key rejected** or **Token rejected**.
 An MCP server with `auth: 'oauth'` signs in in a pop-up: its button reads **Sign in**, and it reads **Needs sign-in** when `disconnected` and **Sign-in expired** when `expired`.
-An account with `fields` (`{ name, label, required? }`) shows a plain labelled input for each, and their values go to `connect(id, secret?, fields)`.
+An account with `fields` (`{ name, label, required?, options?, value? }`) shows a plain labelled input for each, and their values go to `connect(id, secret?, fields)`. A field with `options` (`{ value, label }`) is a dropdown (`select[data-account-field]`, with the inputs' `aria-required`, `aria-invalid` and `aria-describedby`) instead, so a provider can offer only the values it accepts, such as Bedrock's regions; it starts on the field's current `value`, otherwise on the first option, and an empty `options` list is a disabled dropdown, never a free-text input, and doesn't hold up Save even when `required`. The dummy's Amazon Bedrock account has one for its region.
 An account with `store: 'vault'` keeps its key in the vault when the `vault` port has `put`: the masked key field (C5's value rules) goes to `vault.put(name, key, undefined, { kind: 'model', provider: account.id })` (or `{ kind: 'mcp', server }` for `mcp:<server>` accounts, named `MCP_<SERVER>_TOKEN`; model records use pi-ai's environment-variable name), then `connect(id)` runs without the secret; a connected one says “Key kept in the vault”, “Token kept in the vault” or “Kept in the vault”, and Disconnect removes the record first.
 Without `store: 'vault'` or `vault.put`, the key goes to `connect(id, secret)` as before.
 A `show-surface` whose `section` is an account id scrolls to that row and focuses its button, and `accounts` scrolls to the Accounts heading (`h2[data-section=accounts]`).
@@ -429,7 +429,7 @@ The secrets, sorted by name (`li[data-secret][data-state]`, with `[data-rules]`,
 Locked, every form (Add secret, Replace value, Import, Export) says "Unlock the vault first" (`p[data-locked]`) next to the vault's own small **Unlock** button (`slicc-vault-button[data-action=unlock]`) and disables its submit; once unlocked, the form stays open with what was typed and its submit enables.
 Vault errors show their message, EACCES as "Unlock the vault first" and ENOTSUP as "This arrives with a later vault version".
 Each action shows only when the port has its method.
-Then **Rules SLICC refused** (`[data-refused]`), where the rules live (`[data-policy]`) and **Activity** (`ol.audit li[data-seq][data-type]`; an entry with `uid` and `tag` both `null` reads "by you", a `refresh` entry "Refreshed automatically" (with the sign-in it used), an `mcp` entry "Sent to the MCP server SERVER at DOMAIN" with its request and exit, and a policy entry lists its changes, its warning and, when accepted, how to change the file back; **Only reveals to programs**, `data-action="reveals"`, and **Show older**, `data-action="older"`).
+Then **Rules SLICC refused** (`[data-refused]`), where the rules live (`[data-policy]`) and **Activity** (`ol.audit li[data-seq][data-type]`; an entry with `uid` and `tag` both `null` reads "by you", a `refresh` entry "Refreshed automatically" (with the sign-in it used), an `endpoints` entry (the vault removing model URLs an older agent registered) "Removed custom model URLs an agent set, automatically:" with each provider and URL and no "by …", an `mcp` entry "Sent to the MCP server SERVER at DOMAIN" with its request and exit, and a policy entry lists its changes, its warning and, when accepted, how to change the file back; **Only reveals to programs**, `data-action="reveals"`, and **Show older**, `data-action="older"`).
 The section's `data-vault` is `locked`, `unlocked` or `loading`.
 A popup the browser blocked shows how to allow it (`[data-popup=blocked]`).
 Widened-rule notices aren't shown.
@@ -982,7 +982,8 @@ Like slicc-agent's snapshot, the dummy's vitals are the budget, Spend, Active ag
 (`guest-follower`: the same without `decide`), or (`guest-always`) one guest tool call from Seat 2 (Mara) to `read_file` with `always: true`.
 Decisions are recorded in `model.approvals.decisions`, and `model.approvals.end(id, reason)` ends a request.
 
-`createDummyModel({ vault: 'empty' | 'secrets' | 'policy' | 'locked' | 'request' | 'backup' | 'waiting' | 'off' })` (`?vault=` on `/ui/`, off by default; `notice` is kept as another name for `policy`) adds an invented vault: no secrets yet; five secrets (an API key, a jerk lease from pier-nuc revealed to `pier publish`, a Tide Mail sign-in, one without a rule and a removed one) with an activity log that pages back once; the same with a refused rule and a policy change in the log; locked before the first unlock, with a waiting request from docs-pass; unlocked with a `fnox set` request for `TIDE_STATION_TOKEN`; the secrets with a due backup reminder; or a vault that hasn't answered yet (`model.vault.arrive()` brings it).
+`createDummyModel({ vault: 'empty' | 'secrets' | 'policy' | 'locked' | 'request' | 'backup' | 'waiting' | 'purged' | 'off' })` (`?vault=` on `/ui/`, off by default; `notice` is kept as another name for `policy`) adds an invented vault: no secrets yet; five secrets (an API key, a jerk lease from pier-nuc revealed to `pier publish`, a Tide Mail sign-in, one without a rule and a removed one) with an activity log that pages back once; the same with a refused rule and a policy change in the log; locked before the first unlock, with a waiting request from docs-pass; unlocked with a `fnox set` request for `TIDE_STATION_TOKEN`; the secrets with a due backup reminder; or a vault that hasn't answered yet (`model.vault.arrive()` brings it).
+`purged` is `secrets` plus an `endpoints` audit entry for two invented model URLs.
 It implements every op with the vault's checks, and keeps only names: `model.vault.puts` records `{ name, request? }`, `cancelled` the cancelled requests, `imports` each import's kind, size and pick, and `exported` the exports.
 Import offers five invented candidates (one replaces a secret, one is a model key, one is refused with a reason that the done stage repeats; KeePass adds a `_2` duplicate), six answers ENOTSUP, page ops are recorded with `uid: null, tag: null`, and value ops while locked answer EACCES.
 `model.vault.fail(code, message)` makes the next op fail.

package/dist/{chunk-VRFAMBWK.js → chunk-3CM23WFV.js}

@@ -67,9 +67,13 @@ var DummySettings = class extends Emitter {
     );
     this.emit("accounts", this.accounts());
   }
-  async connect(id, secret) {
+  async connect(id, secret, fields) {
     const activation = globalThis.navigator?.userActivation;
-    this.connects.push({ id, gesture: activation ? activation.isActive : null });
+    this.connects.push({
+      id,
+      gesture: activation ? activation.isActive : null,
+      ...fields ? { fields } : {}
+    });
     const account = this.#accounts.find((candidate) => candidate.id === id);
     if (account && account.auth !== "api-key" && !await this.#signIn(account)) return;
     if (account && account.auth !== "api-key" && this.#fails) {
@@ -115,4 +119,4 @@ export {
   dummySettingsKey,
   DummySettings
 };
-//# sourceMappingURL=chunk-VRFAMBWK.js.map
+//# sourceMappingURL=chunk-3CM23WFV.js.map

package/dist/chunk-3CM23WFV.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/dummy/clock.ts", "../src/dummy/settings.ts"],
+  "sourcesContent": ["export interface Clock {\n  delay: number;\n  sleep(ticks?: number): Promise<void>;\n}\n\nexport function clock(delay: number): Clock {\n  return {\n    delay,\n    sleep: (ticks = 1) => new Promise((resolve) => setTimeout(resolve, delay * ticks)),\n  };\n}\n", "import { Emitter } from '../model/emitter.ts';\nimport type {\n  Account,\n  AccountStatus,\n  ModelOption,\n  Settings,\n  SettingsEvents,\n  SettingsPort,\n} from '../model/types.ts';\nimport type { Clock } from './clock.ts';\n\nexport const dummySettingsKey = 'slicc-ui.settings';\nexport const signInClosed = 'The sign-in window was closed before it finished.';\n\nexport class DummySettings extends Emitter<SettingsEvents> implements SettingsPort {\n  #settings: Settings;\n  #accounts: Account[];\n  #models: readonly ModelOption[];\n  #storage: Storage | null;\n  #clock: Clock;\n  #keys: readonly string[];\n  #signIns = new Map<string, { before: AccountStatus; stop: () => void }>();\n  #gated: boolean;\n  #fails: boolean;\n  readonly connects: Array<{\n    id: string;\n    gesture: boolean | null;\n    fields?: Record<string, string>;\n  }> = [];\n\n  constructor(\n    defaults: Settings,\n    models: readonly ModelOption[],\n    accounts: readonly Account[],\n    storage: Storage | null,\n    clock: Clock,\n    keys: readonly string[] = [dummySettingsKey],\n    gated = false,\n    login?: 'ok' | 'fail'\n  ) {\n    super();\n    this.#fails = login === 'fail';\n    this.#gated = gated;\n    this.#keys = keys;\n    this.#storage = storage;\n    this.#clock = clock;\n    this.#models = models;\n    this.#accounts = accounts.map((account) => ({ ...account }));\n    this.#settings = { ...defaults, ...this.#load() };\n  }\n\n  #load(): Partial<Settings> {\n    try {\n      const saved = this.#keys\n        .map((key) => this.#storage?.getItem(key))\n        .find((value) => value != null);\n      return JSON.parse(saved ?? '{}');\n    } catch {\n      return {};\n    }\n  }\n\n  get(): Settings {\n    return { ...this.#settings };\n  }\n\n  update(patch: Partial<Settings>): void {\n    this.#settings = { ...this.#settings, ...patch };\n    this.#storage?.setItem(this.#keys[0], JSON.stringify(this.#settings));\n    this.emit('settings', this.get());\n  }\n\n  models(): readonly ModelOption[] {\n    if (!this.#gated) return this.#models;\n    const live = new Set(\n      this.#accounts\n        .filter((account) => account.status === 'connected')\n        .map((account) => account.provider)\n    );\n    return this.#models.filter((option) => live.has(option.provider));\n  }\n\n  accounts(): readonly Account[] {\n    return this.#accounts.map((account) => ({ ...account }));\n  }\n\n  #set(id: string, patch: Partial<Account>): void {\n    this.#accounts = this.#accounts.map((account) =>\n      account.id === id ? { ...account, ...patch } : account\n    );\n    this.emit('accounts', this.accounts());\n  }\n\n  async connect(id: string, secret?: string, fields?: Record<string, string>): Promise<void> {\n    const activation = (globalThis.navigator as Navigator | undefined)?.userActivation;\n    this.connects.push({\n      id,\n      gesture: activation ? activation.isActive : null,\n      ...(fields ? { fields } : {}),\n    });\n    const account = this.#accounts.find((candidate) => candidate.id === id);\n    if (account && account.auth !== 'api-key' && !(await this.#signIn(account))) return;\n    if (account && account.auth !== 'api-key' && this.#fails) {\n      this.#set(id, { status: account.status });\n      throw new Error(signInClosed);\n    }\n    if (account?.auth === 'api-key' || !account) await this.#clock.sleep(10);\n    if (account?.auth === 'api-key' && account.store !== 'vault' && !secret)\n      throw new Error(\n        `${account.provider} needs ${account.secret === 'token' ? 'a token' : 'an API key'}`\n      );\n    const identity =\n      account?.group === 'mcp'\n        ? account.identity\n        : account?.auth === 'api-key'\n          ? 'API key'\n          : account?.identity || `${id}-user@example.com`;\n    this.#set(id, { status: 'connected', identity });\n  }\n\n  #signIn(account: Account): Promise<boolean> {\n    const before = this.#signIns.get(account.id)?.before ?? account.status;\n    this.#signIns.get(account.id)?.stop();\n    this.#set(account.id, { status: 'signing-in' });\n    return new Promise((resolve) => {\n      const stop = () => {\n        this.#signIns.delete(account.id);\n        this.#set(account.id, { status: before });\n        resolve(false);\n      };\n      this.#signIns.set(account.id, { before, stop });\n      void this.#clock.sleep(100).then(() => {\n        if (this.#signIns.get(account.id)?.stop !== stop) return;\n        this.#signIns.delete(account.id);\n        resolve(true);\n      });\n    });\n  }\n\n  cancel(id: string): void {\n    this.#signIns.get(id)?.stop();\n  }\n\n  disconnect(id: string): void {\n    this.#set(id, { status: 'disconnected' });\n  }\n}\n"],
+  "mappings": ";;;;;AAKO,SAAS,MAAM,OAAsB;AAC1C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,CAAC,QAAQ,MAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,QAAQ,KAAK,CAAC;AAAA,EACnF;AACF;;;ACCO,IAAM,mBAAmB;AACzB,IAAM,eAAe;AAErB,IAAM,gBAAN,cAA4B,QAAgD;AAAA,EACjF;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,oBAAI,IAAyD;AAAA,EACxE;AAAA,EACA;AAAA,EACS,WAIJ,CAAC;AAAA,EAEN,YACE,UACA,QACA,UACA,SACAA,QACA,OAA0B,CAAC,gBAAgB,GAC3C,QAAQ,OACR,OACA;AACA,UAAM;AACN,SAAK,SAAS,UAAU;AACxB,SAAK,SAAS;AACd,SAAK,QAAQ;AACb,SAAK,WAAW;AAChB,SAAK,SAASA;AACd,SAAK,UAAU;AACf,SAAK,YAAY,SAAS,IAAI,CAAC,aAAa,EAAE,GAAG,QAAQ,EAAE;AAC3D,SAAK,YAAY,EAAE,GAAG,UAAU,GAAG,KAAK,MAAM,EAAE;AAAA,EAClD;AAAA,EAEA,QAA2B;AACzB,QAAI;AACF,YAAM,QAAQ,KAAK,MAChB,IAAI,CAAC,QAAQ,KAAK,UAAU,QAAQ,GAAG,CAAC,EACxC,KAAK,CAAC,UAAU,SAAS,IAAI;AAChC,aAAO,KAAK,MAAM,SAAS,IAAI;AAAA,IACjC,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA,EAEA,MAAgB;AACd,WAAO,EAAE,GAAG,KAAK,UAAU;AAAA,EAC7B;AAAA,EAEA,OAAO,OAAgC;AACrC,SAAK,YAAY,EAAE,GAAG,KAAK,WAAW,GAAG,MAAM;AAC/C,SAAK,UAAU,QAAQ,KAAK,MAAM,CAAC,GAAG,KAAK,UAAU,KAAK,SAAS,CAAC;AACpE,SAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EAEA,SAAiC;AAC/B,QAAI,CAAC,KAAK,OAAQ,QAAO,KAAK;AAC9B,UAAM,OAAO,IAAI;AAAA,MACf,KAAK,UACF,OAAO,CAAC,YAAY,QAAQ,WAAW,WAAW,EAClD,IAAI,CAAC,YAAY,QAAQ,QAAQ;AAAA,IACtC;AACA,WAAO,KAAK,QAAQ,OAAO,CAAC,WAAW,KAAK,IAAI,OAAO,QAAQ,CAAC;AAAA,EAClE;AAAA,EAEA,WAA+B;AAC7B,WAAO,KAAK,UAAU,IAAI,CAAC,aAAa,EAAE,GAAG,QAAQ,EAAE;AAAA,EACzD;AAAA,EAEA,KAAK,IAAY,OAA+B;AAC9C,SAAK,YAAY,KAAK,UAAU;AAAA,MAAI,CAAC,YACnC,QAAQ,OAAO,KAAK,EAAE,GAAG,SAAS,GAAG,MAAM,IAAI;AAAA,IACjD;AACA,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,QAAQ,IAAY,QAAiB,QAAgD;AACzF,UAAM,aAAc,WAAW,WAAqC;AACpE,SAAK,SAAS,KAAK;AAAA,MACjB;AAAA,MACA,SAAS,aAAa,WAAW,WAAW;AAAA,MAC5C,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IAC7B,CAAC;AACD,UAAM,UAAU,KAAK,UAAU,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE;AACtE,QAAI,WAAW,QAAQ,SAAS,aAAa,CAAE,MAAM,KAAK,QAAQ,OAAO,EAAI;AAC7E,QAAI,WAAW,QAAQ,SAAS,aAAa,KAAK,QAAQ;AACxD,WAAK,KAAK,IAAI,EAAE,QAAQ,QAAQ,OAAO,CAAC;AACxC,YAAM,IAAI,MAAM,YAAY;AAAA,IAC9B;AACA,QAAI,SAAS,SAAS,aAAa,CAAC,QAAS,OAAM,KAAK,OAAO,MAAM,EAAE;AACvE,QAAI,SAAS,SAAS,aAAa,QAAQ,UAAU,WAAW,CAAC;AAC/D,YAAM,IAAI;AAAA,QACR,GAAG,QAAQ,QAAQ,UAAU,QAAQ,WAAW,UAAU,YAAY,YAAY;AAAA,MACpF;AACF,UAAM,WACJ,SAAS,UAAU,QACf,QAAQ,WACR,SAAS,SAAS,YAChB,YACA,SAAS,YAAY,GAAG,EAAE;AAClC,SAAK,KAAK,IAAI,EAAE,QAAQ,aAAa,SAAS,CAAC;AAAA,EACjD;AAAA,EAEA,QAAQ,SAAoC;AAC1C,UAAM,SAAS,KAAK,SAAS,IAAI,QAAQ,EAAE,GAAG,UAAU,QAAQ;AAChE,SAAK,SAAS,IAAI,QAAQ,EAAE,GAAG,KAAK;AACpC,SAAK,KAAK,QAAQ,IAAI,EAAE,QAAQ,aAAa,CAAC;AAC9C,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,YAAM,OAAO,MAAM;AACjB,aAAK,SAAS,OAAO,QAAQ,EAAE;AAC/B,aAAK,KAAK,QAAQ,IAAI,EAAE,QAAQ,OAAO,CAAC;AACxC,gBAAQ,KAAK;AAAA,MACf;AACA,WAAK,SAAS,IAAI,QAAQ,IAAI,EAAE,QAAQ,KAAK,CAAC;AAC9C,WAAK,KAAK,OAAO,MAAM,GAAG,EAAE,KAAK,MAAM;AACrC,YAAI,KAAK,SAAS,IAAI,QAAQ,EAAE,GAAG,SAAS,KAAM;AAClD,aAAK,SAAS,OAAO,QAAQ,EAAE;AAC/B,gBAAQ,IAAI;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,IAAkB;AACvB,SAAK,SAAS,IAAI,EAAE,GAAG,KAAK;AAAA,EAC9B;AAAA,EAEA,WAAW,IAAkB;AAC3B,SAAK,KAAK,IAAI,EAAE,QAAQ,eAAe,CAAC;AAAA,EAC1C;AACF;",
+  "names": ["clock"]
+}

package/dist/slicc-dummy.js

@@ -6,7 +6,7 @@ import {
 import {
   DummySettings,
   clock
-} from "./chunk-VRFAMBWK.js";
+} from "./chunk-3CM23WFV.js";
 import {
   Emitter
 } from "./chunk-T5NHW4KC.js";
@@ -1587,6 +1587,27 @@ var accounts = [
     auth: "oauth"
   },
   { id: "openai", provider: "OpenAI", identity: "", status: "disconnected", auth: "api-key" },
+  {
+    id: "amazon-bedrock",
+    provider: "Amazon Bedrock",
+    identity: "",
+    status: "disconnected",
+    auth: "api-key",
+    fields: [
+      {
+        name: "region",
+        label: "Region",
+        required: true,
+        options: [
+          { value: "us-east-1", label: "US East (N. Virginia)" },
+          { value: "us-west-2", label: "US West (Oregon)" },
+          { value: "eu-central-1", label: "Europe (Frankfurt)" },
+          { value: "ap-northeast-1", label: "Asia Pacific (Tokyo)" }
+        ],
+        value: "us-west-2"
+      }
+    ]
+  },
   {
     id: "mcp:docs",
     provider: "docs",
@@ -7020,6 +7041,20 @@ function vaultRefused() {
     }
   ];
 }
+function vaultPurged(now2 = Date.now()) {
+  return {
+    type: "endpoints",
+    seq: 13,
+    id: "audit-13",
+    at: now2 - 30 * minute3,
+    uid: null,
+    tag: null,
+    purged: [
+      { provider: "openai", url: "https://models.harbor.example/v1" },
+      { provider: "anthropic", url: "https://relay.harbor.example" }
+    ]
+  };
+}
 function vaultPolicy(now2 = Date.now()) {
   return {
     type: "policy",
@@ -7109,7 +7144,11 @@ function vaultFixtures(scenario, now2 = Date.now()) {
   const list = {
     secrets,
     refused: policy ? vaultRefused() : [],
-    audit: empty ? [] : [...policy ? [vaultPolicy(now2)] : [], ...vaultAudit(now2)],
+    audit: empty ? [] : [
+      ...policy ? [vaultPolicy(now2)] : [],
+      ...scenario === "purged" ? [vaultPurged(now2)] : [],
+      ...vaultAudit(now2)
+    ],
     auditMore: !empty,
     exits: {
       file: "/etc/slicc/secrets-policy.toml",
@@ -7615,6 +7654,7 @@ export {
   vaultNotice,
   vaultOlder,
   vaultPolicy,
+  vaultPurged,
   vaultRefused,
   vaultSecrets
 };