@ai-ecoverse/slicc-spectrum 2.1.0 → 2.2.0

package/dist/types/app/approvals.d.ts

@@ -2,7 +2,7 @@ import '@adobe/spectrum-wc/components/button/swc-button.js';
 import '@adobe/spectrum-wc-icons/swc-icon-alert-triangle.js';
 import '@spectrum-web-components/alert-dialog/sp-alert-dialog.js';
 import { type PropertyValues } from 'lit';
-import type { Approval, ApprovalDecision, GuestMessageApproval, GuestToolApproval, SliccModel, SudoApproval, TrayApproval } from '../model/types.js';
+import type { Approval, ApprovalDecision, GuestMessageApproval, GuestToolApproval, SecretApproval, SliccModel, SudoApproval, TrayApproval } from '../model/types.js';
 import { ModelElement } from './base.js';
 export { deadline } from './messages.js';
 export declare function countdown(ms: number): string;
@@ -13,6 +13,11 @@ export declare function guestAlwaysHint(approval: GuestMessageApproval | GuestTo
 export declare function guestAsking(approval: GuestMessageApproval | GuestToolApproval): string;
 export declare function trayTitle(approval: TrayApproval): string;
 export declare function trayAsking(approval: TrayApproval): string;
+export declare function secretTitle(approval: SecretApproval): string;
+export declare function secretAsking(approval: SecretApproval): string;
+export declare function processLine(approval: SecretApproval): string;
+export declare function revealWarning(approval: SecretApproval): string;
+export declare function secretWaiting(approval: SecretApproval): string;
 export declare function approved(approval: Approval): string;
 export declare function truncated(approval: Approval): boolean;
 export declare function guestWaiting(approval: GuestMessageApproval | GuestToolApproval): string;
@@ -20,6 +25,7 @@ type Judged = GuestMessageApproval | GuestToolApproval | SudoApproval;
 export declare function offersAlways(approval: Approval): boolean;
 export declare function verdictNote(approval: Judged): string;
 export declare function waiting(model: SliccModel | null, now: number): Approval[];
+export declare const approvalKinds: readonly Approval['kind'][];
 export declare class SliccApprovals extends ModelElement {
     #private;
     static properties: {
@@ -38,6 +44,9 @@ export declare class SliccApprovals extends ModelElement {
         gone: {
             state: boolean;
         };
+        frameError: {
+            state: boolean;
+        };
     };
     now: number;
     busy: ApprovalDecision | '';
@@ -49,6 +58,10 @@ export declare class SliccApprovals extends ModelElement {
         approval: Approval;
         reason: 'elsewhere' | 'expired';
     } | null;
+    frameError: {
+        id: string;
+        message: string;
+    } | null;
     arming: number;
     constructor();
     static styles: (import("lit").CSSResult[] | import("lit").CSSResult)[];

package/dist/types/app/command-display.d.ts

@@ -1,3 +1,4 @@
 import { type TemplateResult } from 'lit';
+export declare const controlStyles: import("lit").CSSResult;
 export declare function displayCommand(command: string): string;
 export declare function commandText(command: string, multiline?: boolean): Array<string | TemplateResult>;

package/dist/types/app/command.d.ts

@@ -17,6 +17,7 @@ export declare class Ends {
     has(id: string): boolean;
     hidden(id: string): boolean;
     clear(): void;
+    forget(id: string): void;
     observe(): void;
     disconnect(): void;
 }

package/dist/types/app/secrets.d.ts

@@ -7,7 +7,7 @@ import '@adobe/spectrum-wc-icons/swc-icon-info-circle.js';
 import '@spectrum-web-components/menu/sp-menu-item.js';
 import '@spectrum-web-components/picker/sp-picker.js';
 import { nothing, type PropertyValues, type TemplateResult } from 'lit';
-import type { AuditEntry, EndpointsEntry, ImportCandidate, ImportKind, LinkedDevice, PendingRequest, PolicyEntry, PutOptions, SecretView, SliccModel, VaultPort } from '../model/types.js';
+import type { AskRevealEntry, AuditEntry, EndpointsEntry, ImportCandidate, ImportKind, LinkedDevice, PendingRequest, PolicyEntry, PutOptions, RevealEntry, SecretView, SliccModel, VaultPort } from '../model/types.js';
 import { ThemedElement } from './base.js';
 import { type PopupDetail } from './vault.js';
 export declare function until(at: number, now?: number): string;
@@ -21,6 +21,7 @@ export declare function putOptions(secret: SecretView): PutOptions | undefined;
 export declare function agentUse(secret: SecretView): boolean;
 export declare function byName(a: SecretView, b: SecretView): number;
 export declare function sourceLine(secret: SecretView, devices: readonly LinkedDevice[]): string;
+export declare function toProgram(entry: AuditEntry): entry is RevealEntry | AskRevealEntry;
 export declare function revealed(name: string, entries: readonly AuditEntry[], now?: number, more?: boolean): TemplateResult | null;
 export declare function changes(entry: PolicyEntry, devices: readonly LinkedDevice[]): string[][];
 export declare function endpointsLine(entry: EndpointsEntry, named?: (provider: string) => string): TemplateResult;

package/dist/types/app/vault.d.ts

@@ -1,5 +1,5 @@
 import { LitElement, type PropertyValues } from 'lit';
-import type { ButtonConfig, ExecGrant, ExecMode, ExitName, LinkedDevice, PolicyChange, PopupIntent, PopupState, Rule, SliccModel, VaultPort, Widening } from '../model/types.js';
+import type { ButtonConfig, ExecGrant, ExecMode, ExitName, LinkedDevice, PolicyChange, PopupIntent, PopupState, Rule, SliccModel, ValueConfig, ValueEvent, VaultPort, Widening } from '../model/types.js';
 export declare function devicesOf(model: SliccModel | null): readonly LinkedDevice[];
 export declare function deviceName(id: string, devices: readonly LinkedDevice[]): string;
 export declare function exitLabel(exit: ExitName, devices: readonly LinkedDevice[]): string;
@@ -40,3 +40,31 @@ export declare class SliccVaultButton extends LitElement {
     focus(): void;
     protected updated(changed: PropertyValues): void;
 }
+export type ValueDetail = Extract<ValueEvent, {
+    event: 'done' | 'gone' | 'error' | 'escape';
+}>;
+export declare const frameHeight = 480;
+export declare const frameInset = 4;
+export declare class SliccVaultValue extends LitElement {
+    #private;
+    static properties: {
+        vault: {
+            attribute: boolean;
+        };
+        request: {
+            attribute: boolean;
+        };
+        config: {
+            attribute: boolean;
+        };
+    };
+    vault: VaultPort | null | undefined;
+    request: string;
+    config: ValueConfig;
+    static styles: import("lit").CSSResult;
+    constructor();
+    connectedCallback(): void;
+    disconnectedCallback(): void;
+    focus(): void;
+    protected updated(changed: PropertyValues): void;
+}

package/dist/types/dummy/approvals.d.ts

@@ -1,14 +1,16 @@
 import { Emitter } from '../model/emitter.js';
-import type { Approval, ApprovalDecision, ApprovalEnd, ApprovalsEvents, ApprovalsPort } from '../model/types.js';
+import type { Approval, ApprovalDecision, ApprovalEnd, ApprovalsEvents, ApprovalsPort, PendingRequest, SecretApproval } from '../model/types.js';
 import type { Clock } from './clock.js';
-export type ApprovalScenario = 'agent' | 'user' | 'many' | 'follower' | 'fail' | 'soon' | 'elsewhere' | 'withdrawn' | 'secrets' | 'judge-denied' | 'level-1' | 'level-2' | 'level-3' | 'checking' | 'no-verdict' | 'legacy' | 'guest' | 'guest-follower' | 'guest-always' | 'long' | 'controls-cr' | 'controls-lf' | 'controls-place' | 'controls-cwd' | 'guest-args' | 'guest-empty' | 'guest-truncated' | 'tray' | 'tray-url' | 'tray-rotate' | 'tray-unlink' | 'tray-expired' | 'none';
+import type { DummyVault } from './vault.js';
+export type ApprovalScenario = 'agent' | 'user' | 'many' | 'follower' | 'fail' | 'soon' | 'elsewhere' | 'withdrawn' | 'secrets' | 'judge-denied' | 'level-1' | 'level-2' | 'level-3' | 'checking' | 'no-verdict' | 'legacy' | 'guest' | 'guest-follower' | 'guest-always' | 'long' | 'controls-cr' | 'controls-lf' | 'controls-place' | 'controls-cwd' | 'guest-args' | 'guest-empty' | 'guest-truncated' | 'tray' | 'tray-url' | 'tray-rotate' | 'tray-unlink' | 'tray-expired' | 'secret' | 'secret-enter' | 'secret-reveal' | 'secret-long' | 'none';
 export declare const guestArgs: string;
+export declare function pendingAsk(approval: SecretApproval): PendingRequest;
 export declare function approvalFixtures(scenario: ApprovalScenario, now?: number): Approval[];
 export declare class DummyApprovals extends Emitter<ApprovalsEvents> implements ApprovalsPort {
     #private;
     decisions: Array<[string, ApprovalDecision]>;
     decide?: (id: string, decision: ApprovalDecision) => Promise<void>;
-    constructor(scenario: ApprovalScenario, time: Clock);
+    constructor(scenario: ApprovalScenario, time: Clock, vault?: DummyVault);
     raise(approval: Approval): void;
     end(id: string, reason: ApprovalEnd): void;
     list(): readonly Approval[];

package/dist/types/dummy/vault.d.ts

@@ -1,5 +1,5 @@
 import { Emitter } from '../model/emitter.js';
-import type { AuditEntry, AuditPage, Availability, ButtonConfig, ButtonEvent, ButtonMessage, ErrorCode, ImportKind, ImportPick, ImportResult, PolicyNotice, PopupIntent, PutOptions, RecordKind, RefusedRule, RequestState, SealResult, SecretView, VaultButton, VaultEndpointChange, VaultError, VaultEvents, VaultList, VaultPort, VaultStatus } from '../model/types.js';
+import type { AuditEntry, AuditPage, Availability, ButtonConfig, ButtonEvent, ButtonMessage, ErrorCode, ImportKind, ImportPick, ImportResult, PendingRequest, PolicyNotice, PopupIntent, PutOptions, RecordKind, RefusedRule, RequestState, SealResult, SecretView, ValueConfig, ValueEvent, ValueMessage, VaultButton, VaultEndpointChange, VaultError, VaultEvents, VaultList, VaultPort, VaultStatus, VaultValueFrame } from '../model/types.js';
 import type { Clock } from './clock.js';
 export type VaultScenario = 'empty' | 'secrets' | 'policy' | 'notice' | 'locked' | 'paused' | 'request' | 'backup' | 'waiting' | 'purged' | 'session' | 'endpoints-fail';
 export declare function vaultSecrets(now?: number): SecretView[];
@@ -25,6 +25,17 @@ export declare class DummyVaultButton implements VaultButton {
     post(message: ButtonMessage): void;
     listen(listener: (event: ButtonEvent) => void): () => void;
 }
+export declare class DummyValueFrame implements VaultValueFrame {
+    #private;
+    element: HTMLElement;
+    request: string;
+    config: ValueConfig | null;
+    messages: ValueMessage[];
+    arming: number;
+    constructor(vault: DummyVault, time: Clock, request: string);
+    post(message: ValueMessage): void;
+    listen(listener: (event: ValueEvent) => void): () => void;
+}
 export interface DummyImport {
     kind: ImportKind;
     size: number;
@@ -34,6 +45,9 @@ export interface DummyImport {
 export declare class DummyVault extends Emitter<VaultEvents> implements VaultPort {
     #private;
     buttons: DummyVaultButton[];
+    frames: DummyValueFrame[];
+    answered: Set<string>;
+    revealed: string[];
     puts: {
         name: string;
         request?: string;
@@ -72,6 +86,11 @@ export declare class DummyVault extends Emitter<VaultEvents> implements VaultPor
     export(passphrase: string): Promise<Uint8Array>;
     lock(): Promise<void>;
     button(): DummyVaultButton;
+    valueFrame(request: string): DummyValueFrame;
+    hold(request: PendingRequest): void;
+    ask(request: string): PendingRequest | undefined;
+    seal(request: string, value: string): Promise<SealResult>;
+    allow(request: string): Promise<void>;
     autoLabel(): string;
     autoIntent(): PopupIntent;
     answer(intent: PopupIntent): Promise<void>;

package/dist/types/dummy.d.ts

@@ -26,4 +26,4 @@ export { DummyTabs, tabsFixtures } from './dummy/tabs.js';
 export type { BetaScenario, DummyUpdatesOptions, PackageConfirm, PackageScenario, UpdateScenario, } from './dummy/updates.js';
 export { betaFixtures, DummyUpdates, packageFixtures, updateFixtures, } from './dummy/updates.js';
 export type { VaultScenario } from './dummy/vault.js';
-export { DummyVault, DummyVaultButton, vaultAudit, vaultFixtures, vaultNotice, vaultOlder, vaultPaused, vaultPinned, vaultPolicy, vaultPurged, vaultRefused, vaultSecrets, vaultSessions, } from './dummy/vault.js';
+export { DummyValueFrame, DummyVault, DummyVaultButton, vaultAudit, vaultFixtures, vaultNotice, vaultOlder, vaultPaused, vaultPinned, vaultPolicy, vaultPurged, vaultRefused, vaultSecrets, vaultSessions, } from './dummy/vault.js';

package/dist/types/model/types.d.ts

@@ -1058,7 +1058,27 @@ export interface TrayApproval {
     createdAt: number;
     expiresAt: number;
 }
-export type Approval = SudoApproval | GuestMessageApproval | GuestToolApproval | TrayApproval;
+export interface SecretApproval {
+    id: string;
+    kind: 'secret';
+    mode: 'enter' | 'reveal';
+    name: string;
+    prompt?: string;
+    reveal: boolean;
+    requester: {
+        kind: 'agent' | 'user';
+        name: string;
+        where?: string;
+    };
+    process: {
+        exe: string;
+        argv: string[];
+        cwd: string;
+    };
+    createdAt: number;
+    expiresAt: number;
+}
+export type Approval = SudoApproval | GuestMessageApproval | GuestToolApproval | TrayApproval | SecretApproval;
 export type ApprovalEnd = 'answered' | 'withdrawn' | 'expired';
 export interface ApprovalsEvents {
     approvals: readonly Approval[];
@@ -1105,8 +1125,8 @@ export type RecordKind = 'secret' | 'grant' | 'model' | 'mcp';
 export type RecordState = 'active' | 'inert' | 'removed';
 export type RecordSource = 'settings' | 'popup' | 'process' | `jerk:${string}@${DeviceId}` | `oauth:${string}` | `import:${string}`;
 export type LockMode = 'auto' | 'passkey' | 'passphrase';
-export type RequestKind = 'value' | 'oauth' | 'jerk-seal' | 'jerk' | 'unseal';
-export type RequestState = 'pending' | 'done' | 'cancelled' | 'expired';
+export type RequestKind = 'value' | 'oauth' | 'jerk-seal' | 'jerk' | 'unseal' | 'ask';
+export type RequestState = 'pending' | 'done' | 'cancelled' | 'expired' | 'withdrawn';
 export type ErrorCode = 'EINVAL' | 'ENOENT' | 'EACCES' | 'EEXIST' | 'EAGAIN' | 'ETIMEDOUT' | 'ENOTCONN' | 'ENOTSUP';
 export type ErrorCause = 'policy-paused' | 'no-placeholder' | 'url-invalid' | 'placeholder-in-url' | 'placeholder-in-header-name' | 'url-credentials' | 'insecure-destination' | 'path-ambiguous' | 'exit-encoded-bodies' | 'record-removed' | 'record-kind' | 'record-expired' | 'vault-locked' | 'no-rule' | 'rule-domain' | 'rule-request' | 'rule-exit' | 'placeholder-repeated' | 'mcp-server' | 'exit-follows-redirects' | 'value-overlaps' | 'basic-invalid' | 'basic-user' | 'header-unsafe' | 'users-off' | 'endpoint-protected' | 'endpoint-model' | 'mcp-body-framing' | 'changed';
 export interface VaultError {
@@ -1160,11 +1180,25 @@ export interface PendingRequest {
     name?: string;
     provider?: string;
     prompt?: string;
+    mode?: 'enter' | 'reveal';
+    reveal?: boolean;
+    replace?: boolean;
+    requester?: AskRequester;
     uid: number;
     tag: string | null;
     createdAt: number;
     expiresAt: number;
 }
+export interface AskRequester {
+    kind: 'agent' | 'user';
+    name?: string;
+    where?: string;
+    exe: string;
+    argv: string[];
+    cwd: string;
+    tty: string | null;
+    stdin: 'tty' | 'none' | 'pipe' | 'file';
+}
 export interface ScrubState {
     needed: boolean;
     version: number;
@@ -1241,6 +1275,11 @@ export type PolicyChange = {
     field: string;
     from: number;
     to: number;
+} | {
+    kind: 'reveal';
+    field: 'agent';
+    from: boolean;
+    to: boolean;
 };
 export type PolicyFile = '/etc/fnox/config.toml' | '/etc/slicc/secrets-policy.toml';
 export interface PolicyNotice {
@@ -1293,6 +1332,15 @@ export interface RevealEntry extends AuditBase {
     ticket: string;
     consumed: boolean;
 }
+export interface AskRevealEntry extends AuditBase {
+    type: 'reveal';
+    uid: number;
+    exe: string;
+    argv: string;
+    cwd: string;
+    requester: 'agent' | 'user';
+    request: string;
+}
 export interface SealEntry extends AuditBase {
     type: 'seal';
     source: RecordSource;
@@ -1350,7 +1398,7 @@ export interface PolicyEntry {
     changes?: PolicyChange[];
     warning?: string;
 }
-export type AuditEntry = InjectionEntry | SessionEntry | McpEntry | RevealEntry | SealEntry | RemoveEntry | RefreshEntry | EndpointsEntry | PolicyEntry;
+export type AuditEntry = InjectionEntry | SessionEntry | McpEntry | RevealEntry | AskRevealEntry | SealEntry | RemoveEntry | RefreshEntry | EndpointsEntry | PolicyEntry;
 export interface AuditPage {
     audit: AuditEntry[];
     more: boolean;
@@ -1478,6 +1526,56 @@ export interface VaultButton {
     post(message: ButtonMessage): void;
     listen(listener: (event: ButtonEvent) => void): () => void;
 }
+export interface ValueConfig {
+    theme?: 'light' | 'dark';
+    dir?: 'ltr' | 'rtl';
+    lang?: string;
+    scale?: 'medium' | 'large';
+}
+export type ValueMessage = {
+    type: 'slicc-vault';
+    v: 1;
+    op: 'value';
+    request: string;
+    config: ValueConfig;
+} | {
+    type: 'slicc-vault';
+    v: 1;
+    op: 'focus';
+};
+export type ValueEvent = {
+    type: 'slicc-vault';
+    v: 1;
+} & ({
+    event: 'ready';
+} | {
+    event: 'size';
+    width: number;
+    height: number;
+    inset: number;
+} | {
+    event: 'focus';
+    direction: 'next' | 'previous';
+} | {
+    event: 'done';
+    request: string;
+    state: 'sealed' | 'allowed';
+} | {
+    event: 'gone';
+    request: string;
+    state: RequestState;
+} | {
+    event: 'error';
+    code: ErrorCode;
+    message: string;
+} | {
+    event: 'escape';
+});
+export interface VaultValueFrame {
+    element: HTMLElement;
+    post(message: ValueMessage): void;
+    listen(listener: (event: ValueEvent) => void): () => void;
+}
 export interface VaultEvents {
     status: VaultStatus;
     list: VaultList;
@@ -1511,6 +1609,7 @@ export interface VaultPort extends Subscribable<VaultEvents> {
     endpoints?(change: VaultEndpointChange): Promise<void>;
     settings?(name: string, kind: RecordKind, settings: Record<string, string>): Promise<void>;
     button(): VaultButton;
+    valueFrame?(request: string): VaultValueFrame;
 }
 export type GuestGate = 'user' | 'cone' | 'agent' | `scoop:${string}` | 'off';
 export interface GuestGates {

package/dist/types/ui.d.ts

@@ -1,7 +1,7 @@
 import './app/spectrum.ts';
 import { SliccAgents } from './app/agents.js';
 import { SliccApp } from './app/app.js';
-import { SliccApprovals } from './app/approvals.js';
+import { approvalKinds, SliccApprovals } from './app/approvals.js';
 import { SliccBrowser } from './app/browser.js';
 import { SliccChanges, SliccDiffPanel } from './app/changes.js';
 import { SliccChat } from './app/chat.js';
@@ -16,7 +16,7 @@ import { SliccNotices } from './app/notices.js';
 import { SliccSecrets } from './app/secrets.js';
 import { SliccUpdates } from './app/updates.js';
 import { SliccValueRequest } from './app/value-request.js';
-import { SliccVaultButton } from './app/vault.js';
+import { SliccVaultButton, SliccVaultValue } from './app/vault.js';
 import { SliccCodeView, SliccDiffView } from './components/code-view.js';
 import { SliccDock } from './components/dock.js';
 import { SliccFileTree } from './components/file-tree.js';
@@ -36,5 +36,5 @@ export type { Listener, Subscribable } from './model/emitter.js';
 export { Emitter } from './model/emitter.js';
 export type * from './model/types.js';
 export { isVaultFailure } from './model/values.js';
-export { SliccAgents, SliccApp, SliccApprovals, SliccBrowser, SliccChanges, SliccChat, SliccCodeView, SliccComposer, SliccConfirm, SliccDiffPanel, SliccDiffView, SliccDock, SliccFiles, SliccFileTree, SliccFileView, SliccFollow, SliccFreezerImport, SliccGuestInvite, SliccNetwork, SliccNotices, SliccPrompt, SliccSecrets, SliccUpdates, SliccValueRequest, SliccVaultButton, };
+export { approvalKinds, SliccAgents, SliccApp, SliccApprovals, SliccBrowser, SliccChanges, SliccChat, SliccCodeView, SliccComposer, SliccConfirm, SliccDiffPanel, SliccDiffView, SliccDock, SliccFiles, SliccFileTree, SliccFileView, SliccFollow, SliccFreezerImport, SliccGuestInvite, SliccNetwork, SliccNotices, SliccPrompt, SliccSecrets, SliccUpdates, SliccValueRequest, SliccVaultButton, SliccVaultValue, };
 export declare function define(): void;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-spectrum",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Web components for SLICC on Spectrum Web Components: the terminal, the app shell and its surfaces",
   "type": "module",
   "license": "Apache-2.0",
@@ -62,10 +62,10 @@
   "devDependencies": {
     "@adobe/spectrum-wc": "2.0.0-beta.6",
     "@adobe/spectrum-wc-icons": "2.0.0-beta.6",
-    "@ai-ecoverse/slicc-cdp": "1.46.2",
-    "@ai-ecoverse/slicc-kernel": "1.174.0",
+    "@ai-ecoverse/slicc-cdp": "1.46.4",
+    "@ai-ecoverse/slicc-kernel": "1.174.2",
     "@ai-ecoverse/slicc-shared-web": "2.13.10",
-    "@ai-ecoverse/slicc-vault": "1.22.1",
+    "@ai-ecoverse/slicc-vault": "1.23.0",
     "@ai-ecoverse/wasm-bash": "5.3.0-23",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-15",
     "@biomejs/biome": "2.6.4",
@@ -89,7 +89,7 @@
     "@wterm/core": "0.5.7",
     "@wterm/dom": "0.5.7",
     "@wterm/ghostty": "0.5.7",
-    "dockview-core": "8.8.2",
+    "dockview-core": "8.8.3",
     "esbuild": "0.28.2",
     "happy-dom": "21.0.4",
     "lefthook": "2.2.2",