@ai-ecoverse/slicc-spectrum 1.94.1 → 1.95.0

package/README.md

@@ -412,8 +412,9 @@ Without `store: 'vault'` or `vault.put`, the key goes to `connect(id, secret)` a
 A `show-surface` whose `section` is an account id scrolls to that row and focuses its button, and `accounts` scrolls to the Accounts heading (`h2[data-section=accounts]`).
 With a `vault` port, **Secrets** (`<slicc-secrets>`) follows.
 With `providers()`, Accounts lists only the added providers (`.accounts[data-group=providers]`), connected first, then expired, signing in and not connected; each row adds **Remove** (`data-action="remove-account"`, a quiet delete icon named “Remove {provider}”) when the port has `remove`, which asks “Remove {provider}?” (“Its key is deleted from the vault. Models from it stop working.”, “Its sign-in is deleted from the vault…” for OAuth, only “Models from it stop working.” for a local one) with a destructive **Remove** and Cancel focused, then runs `vault.remove(vaultName, 'model')` for a vaulted key and `settings.remove(id)`, stopping with the vault's error inline when it refuses; Disconnect removes the same record and keeps the row.
-An account with `needs: 'cors-free-transport'` says “Needs the SLICC extension or CLI, because the browser blocks direct requests to it.” under its row (`.notes [data-notice]`), and an OAuth account that is signing in says “Continue in the sign-in window that opened.”, then, after `SliccChat.closedAfter`, “Closed the sign-in window? Cancel, then Log in again.” (`[data-signing]`).
-**Add a provider** (`data-action="add-provider"`, a quiet button under the list) opens a modal picker (`dialog.picker[data-picker=pick]`): **Search providers** filters `providers()` in their order by every word of the name, id and description; each row (`.option[data-provider][data-auth][role=option]`) shows the name, the `description` and a hint (API key, Sign in, Endpoint and key, On this device), and “Needs the SLICC extension or CLI” for a CORS-free one; added providers read **Added** and can't be picked (`aria-disabled`); no match reads “No provider matches “{q}”.”. Down arrow moves from the search to the rows, Up, Down, Home and End walk them, typing goes back to the search, Enter or Space picks, Enter in the search picks the first match that isn't added, and Escape closes and gives focus back to **Add a provider**.
+Before the row goes, Remove closes its tooltip and waits for it: a Gen2 `swc-tooltip` that updates after its row is removed throws (`getRootNode().getElementById is not a function`), which a pointer click on Remove without the vault used to trigger.
+An account with `blocked: 'cors-free-transport'`, which the port sets while the current transport can't reach it, says “Needs the SLICC extension or CLI, because the browser blocks direct requests to it.” under its row (`.notes [data-notice][data-blocked]`) with an inline **Set up** link (`data-action="setup-network"`) that sends `show-surface` `{ id: 'network', section: 'whole' }`, so Network opens at Get the whole web; its Connect, Reconnect and Save are disabled, and a connected one keeps its key and identity, reads **Unreachable** (a notice light with the word) and keeps Disconnect and Remove. When `blocked` clears, through the `accounts` and `providers` events, the notice and Set up go and everything enables again; `needs` alone shows nothing. An OAuth account that is signing in says “Continue in the sign-in window that opened.”, then, after `SliccChat.closedAfter`, “Closed the sign-in window? Cancel, then Log in again.” (`[data-signing]`).
+**Add a provider** (`data-action="add-provider"`, a quiet button under the list) opens a modal picker (`dialog.picker[data-picker=pick]`): **Search providers** filters `providers()` in their order by every word of the name, id and description; each row (`.option[data-provider][data-auth][role=option]`) shows the name, the `description` and a hint (API key, Sign in, Endpoint and key, On this device), and, while it is `blocked`, “Needs the SLICC extension or CLI” with **Set up** (`.option[data-blocked]`); added providers read **Added**, and added and blocked ones can't be picked by click, Enter or Space (`aria-disabled`; the arrows still reach them, and Tab reaches Set up); no match reads “No provider matches “{q}”.”. Down arrow moves from the search to the rows, Up, Down, Home and End walk them, typing goes back to the search, Enter or Space picks, Enter in the search picks the first match that isn't added, and Escape closes and gives focus back to **Add a provider**.
 Picking one opens **Add {name}** (`dialog.picker[data-picker=connect]`, `.step[data-step=<auth>]`): `api-key` and `fields` get the key form (the vault form when there is one, `vault.put(vaultName ?? recordName, key, undefined, { kind: 'model', provider: id })`), with the provider's `fields` and **Get a key** (`data-action="get-key"`, `keyUrl` in a new tab); **Connect** stays disabled until the key and the required fields are filled; a `customBase` field whose value is an `https:` URL is bound to the key's record after its `put` and before `connect`, with `vault.endpoints({ add: { model: [{ name, url }] } })` (`name` is the record's, `vaultName ?? recordName`; without a vault record nothing is bound) (a bare name, such as an Azure resource, isn't), a refusal shows on that field and `connect` doesn't run, a changed URL (against the field's `value`, else the one this page bound) is one call that removes the old and adds the new, and a bare value only removes the old; a rejected `connect` reverses that call and shows on that field when it names it as a whole word (or https, URL, port or userinfo); **Remove** leaves the URLs to `vault.remove`, which drops them with the record; the saved `value`s prefill the fields and count as filled; `oauth` gets **Sign in** (`data-action="sign-in"`), which calls `connect(id)` within the click, then reads “Signing in…” with Cancel and the same window hints; `local` says “SLICC connects to {name} on this device.” and offers **Connect**. **Back** returns to the list. A rejected `connect` shows its message inline and keeps the form and its fields, clearing only the key; once the account is `connected`, the picker closes and focus lands on its row.
 Without `providers()`, Accounts is as before.
 When the model for new cones was moved off a provider that isn't set up, a quiet note under its picker (`p[data-switched][role=status]`) says “Switched to {model} because the previous model's provider isn't set up.” until a model is picked.
@@ -731,7 +732,7 @@ Later backed by: local storage.
 Theme, model, thinking level, composer and diff preferences, the models on offer, and accounts.
 A model can say it is its provider's `default`.
 Emit `settings` or `accounts` when the models on offer change.
-The optional `providers()` returns the `ProviderOption`s that can be added (`{ id, name, description?, auth: 'api-key' | 'oauth' | 'fields' | 'local', fields?, keyUrl?, needs?, vaultName? }`, sorted by name, added ones included), with a `providers` event when they change; `id` is pi-ai's provider id and becomes the `Account.id`. With it, `accounts()` lists only added accounts, `connect(id, secret?, fields?)` adds one (`group: 'providers'`; a `fields` provider becomes an `api-key` account with `store: 'vault'` and only its non-secret `fields`), and the optional `remove(id)` drops one. `Account` adds `keyUrl`, `description` and `vaultName`, the vault record for its key (else pi-ai's environment-variable name).
+The optional `providers()` returns the `ProviderOption`s that can be added (`{ id, name, description?, auth: 'api-key' | 'oauth' | 'fields' | 'local', fields?, keyUrl?, needs?, blocked?, vaultName? }`, sorted by name, added ones included), with a `providers` event when they change; `id` is pi-ai's provider id and becomes the `Account.id`. With it, `accounts()` lists only added accounts, `connect(id, secret?, fields?)` adds one (`group: 'providers'`; a `fields` provider becomes an `api-key` account with `store: 'vault'` and only its non-secret `fields`), and the optional `remove(id)` drops one. `Account` adds `keyUrl`, `description` and `vaultName`, the vault record for its key (else pi-ai's environment-variable name). `needs: 'cors-free-transport'` on either is static (the provider doesn't answer a browser); `blocked: 'cors-free-transport'` is live, set while the current transport can't reach it, and cleared by a `providers` and an `accounts` event when an extension or a linked slicc appears.
 
 #### `changes` (optional)
 
@@ -980,7 +981,8 @@ Update this one to send prompts.", and shows a warning notice without a close bu
 
 The kitchen sink's “docs-pass failed” card is an expired-session error for the invented `ai-adobe` account (Adobe AI, harbor-ops@example.com, `expired`, OAuth): **Log in** goes `signing-in`, then `connected` after a short wait, and the dummy records each `connect` in `settings.connects` (`{ id, gesture }`, whether `navigator.userActivation.isActive` was true at the call); inbox-triage's “Tickets connector” card names `mcp:tickets`, a token account, so its **Log in** opens Settings at that row; `createDummyModel({ login: 'fail' })` (`?login=fail` on `/ui/`) makes OAuth sign-ins reject with “The sign-in window was closed before it finished.”
 `createDummyModel({ providers: 'none' })` (`?providers=none` on `/ui/`) starts with no model provider connected: `models()` offers only the models of connected accounts, and connecting OpenAI offers the invented GPT-6 and GPT-6 mini (its `default`).
-`createDummyModel({ providers: 'all' })` (`?providers=all` on `/ui/`) adds `providers()` and `remove` with 14 invented providers (`providerFixtures` from `/dummy`): API keys for Anthropic, Cerebras, Groq, Mistral, OpenAI and OpenRouter, OAuth for Adobe AI, GitHub Copilot and OpenAI Codex, fields for Amazon Bedrock (region, CORS-free), Azure OpenAI (endpoint, a `customBase`, and deployment) and Cloudflare (account id, CORS-free, its own `vaultName`), and Ollama and LM Studio on this device; today's rows start as added, with Amazon Bedrock and a connected Ollama (`providerAccounts(accounts)`, `providerAccount(option)`). `connect` adds a provider and drops it again when it fails or is cancelled, a key or field starting with `bad` is refused (“{name} didn’t accept that key.”), an endpoint without `https://` is refused, and `remove` drops it.
+`createDummyModel({ providers: 'all' })` (`?providers=all` on `/ui/`) adds `providers()` and `remove` with 14 invented providers (`providerFixtures` from `/dummy`): API keys for Anthropic, Cerebras, Groq, Mistral, OpenAI and OpenRouter, OAuth for Adobe AI, GitHub Copilot and OpenAI Codex, fields for Amazon Bedrock (region), Azure OpenAI (endpoint, a `customBase`, and deployment) and Cloudflare (account id, CORS-free, its own `vaultName`), and Ollama and LM Studio on this device; today's rows start as added, with Amazon Bedrock and a connected Ollama (`providerAccounts(accounts)`, `providerAccount(option)`). `connect` adds a provider and drops it again when it fails or is cancelled, a key or field starting with `bad` is refused (“{name} didn’t accept that key.”), an endpoint without `https://` is refused, and `remove` drops it.
+`createDummyModel({ providers: 'all', transport: 'none' })` (`?providers=all&transport=none`) has no CORS-free transport: every provider with `needs` is also `blocked`, and Cloudflare starts connected, so it reads Unreachable. `model.settings.setTransport('extension')` (or `'link'`) clears `blocked` live, with a `providers` and an `accounts` event, and `setTransport('none')` sets it again.
 
 `createDummyModel({ monitor: 'agent' })` (`?monitor=agent` on `/ui/`) adds the agent's Tasks (a tree by `depth`), Processes and Recent problems sections to the monitor, and its Running vital.
 Like slicc-agent's snapshot, the dummy's vitals are the budget, Spend, Active agents, Processes and Process memory (both with a `series`) and Fullest context.

package/dist/{chunk-2R4DLSKG.js → chunk-QGY4KBEB.js}

@@ -1568,7 +1568,6 @@ var options = [
     description: "Claude and more through AWS",
     auth: "fields",
     keyUrl: "https://console.aws.example/bedrock/api-keys",
-    needs: "cors-free-transport",
     fields: accounts.find((account) => account.id === "amazon-bedrock")?.fields
   },
   {
@@ -1692,10 +1691,11 @@ function providerAccount(option) {
     ...option.keyUrl ? { keyUrl: option.keyUrl } : {},
     ...option.description ? { description: option.description } : {},
     ...option.needs ? { needs: option.needs } : {},
+    ...option.blocked ? { blocked: option.blocked } : {},
     ...option.vaultName ? { vaultName: option.vaultName } : {}
   };
 }
-function providerAccounts(rows) {
+function providerAccounts(rows, transport) {
   const added = (id, patch) => ({
     ...providerAccount(providerFixtures.find((option) => option.id === id)),
     ...patch
@@ -1709,6 +1709,7 @@ function providerAccounts(rows) {
   return [
     ...providers,
     added("ollama", { status: "connected", identity: "On this device" }),
+    ...transport ? [added("cloudflare", { status: "connected", identity: "API key" })] : [],
     ...servers
   ];
 }
@@ -1746,13 +1747,17 @@ var DummySettings = class extends Emitter {
   #signIns = /* @__PURE__ */ new Map();
   #gated;
   #fails;
+  #transport;
+  #options = [];
   connects = [];
   providers;
   remove;
-  constructor(defaults2, models2, accounts2, storage, clock2, keys = [dummySettingsKey], gated = false, login, providers) {
+  constructor(defaults2, models2, accounts2, storage, clock2, keys = [dummySettingsKey], gated = false, login, providers, transport) {
     super();
+    this.#transport = transport;
     if (providers) {
-      this.providers = () => providers;
+      this.#options = providers;
+      this.providers = () => this.#transport === "none" ? providers.map((option) => this.#block(option)) : providers;
       this.remove = async (id) => this.#drop(id);
     }
     this.#fails = login === "fail";
@@ -1788,7 +1793,16 @@ var DummySettings = class extends Emitter {
     return this.#models.filter((option) => live.has(option.provider));
   }
   accounts() {
-    return this.#accounts.map((account) => ({ ...account }));
+    return this.#accounts.map((account) => this.#block({ ...account }));
+  }
+  #block(row) {
+    if (this.#transport !== "none" || !row.needs) return row;
+    return { ...row, blocked: row.needs };
+  }
+  setTransport(transport) {
+    this.#transport = transport;
+    if (this.providers) this.emit("providers", this.providers());
+    this.emit("accounts", this.accounts());
   }
   #set(id, patch) {
     this.#accounts = this.#accounts.map(
@@ -1802,7 +1816,7 @@ var DummySettings = class extends Emitter {
     this.emit("accounts", this.accounts());
   }
   #add(id) {
-    const option = this.providers?.().find((candidate) => candidate.id === id);
+    const option = this.#options.find((candidate) => candidate.id === id);
     if (!option || this.#accounts.some((account) => account.id === id)) return false;
     this.#accounts = [...this.#accounts, providerAccount(option)];
     this.emit("accounts", this.accounts());
@@ -1894,4 +1908,4 @@ export {
   dummySettingsKey,
   DummySettings
 };
-//# sourceMappingURL=chunk-2R4DLSKG.js.map
+//# sourceMappingURL=chunk-QGY4KBEB.js.map