@chengxianglibra/dsh-data-analysis 0.1.1 → 0.2.0

package/lib/client/credentials/descriptions.js

@@ -0,0 +1,46 @@
+// Presentation-only translations of public Runtime descriptions, not a field schema.
+// Match the complete source text so changed or newly added descriptions retain their meaning.
+const descriptions = {
+    'Global datasource name; letters, digits, underscores, and hyphens only.': 'marivo.credentials.global-datasource-name-use-only-letters-numbers-underscores-and',
+    'Rare JSON-safe ibis keyword arguments not modeled by the typed class.': 'marivo.credentials.additional-connection-parameters-for-ibis-options-not-listed-in',
+    'DuckDB database path; defaults to in-memory.': 'marivo.credentials.duckdb-database-file-path-defaults-to-an-in-memory',
+    'SQLite database path; defaults to in-memory.': 'marivo.credentials.sqlite-database-file-path-defaults-to-an-in-memory',
+    'Open the DuckDB database in read-only mode.': 'marivo.credentials.open-the-duckdb-database-in-read-only-mode',
+    'Open the SQLite database in query-only mode.': 'marivo.credentials.open-the-sqlite-database-in-query-only-mode',
+    'Optional mapping from declared SQLite type names to Ibis type strings.': 'marivo.credentials.optional-mapping-from-sqlite-declared-type-names-to-ibis',
+    'Optional HTTP(S) URL prefix for scoped remote JSON auth.': 'marivo.credentials.optional-http-s-url-prefix-where-remote-json-requests',
+    'Environment variable for a scoped HTTP bearer token.': 'marivo.credentials.credential-reference-for-the-http-bearer-token-within-the',
+    'Optional custom HTTP header names mapped to secret environment variables.': 'marivo.credentials.optional-mapping-from-custom-http-header-names-to-credential',
+    'Trino coordinator host.': 'marivo.credentials.trino-coordinator-host-address',
+    'Trino catalog; mapped to ibis database at connect time.': 'marivo.credentials.trino-catalog-name-mapped-to-the-ibis-database-parameter',
+    'Required environment variable for the Trino user.': 'marivo.credentials.required-credential-reference-for-the-trino-username',
+    'Trino port; ibis default is 8080.': 'marivo.credentials.trino-port-ibis-defaults-to-8080',
+    'Optional default schema.': 'marivo.credentials.optional-default-schema-name',
+    'Optional client application/source tag.': 'marivo.credentials.optional-client-application-or-request-source-identifier',
+    'Optional engine session timezone.': 'marivo.credentials.optional-database-session-timezone',
+    "Set to 'https' for TLS.": 'marivo.credentials.enter-https-to-enable-tls-encryption',
+    'Optional Trino client tags.': 'marivo.credentials.optional-trino-client-tags-as-a-json-array',
+    'Optional Trino session properties.': 'marivo.credentials.optional-trino-session-properties-as-a-json-object',
+    'Environment variable for Trino auth token or password.': 'marivo.credentials.credential-reference-for-the-trino-token-or-password',
+    'MySQL host.': 'marivo.credentials.mysql-server-host-address',
+    'MySQL database name.': 'marivo.credentials.mysql-database-name',
+    'MySQL port; ibis default is 3306.': 'marivo.credentials.mysql-port-ibis-defaults-to-3306',
+    'Optional autocommit override.': 'marivo.credentials.optional-setting-for-automatic-transaction-commits',
+    'Environment variable for MySQL user.': 'marivo.credentials.credential-reference-for-the-mysql-username',
+    'Environment variable for MySQL password.': 'marivo.credentials.credential-reference-for-the-mysql-password',
+    'Postgres host.': 'marivo.credentials.postgresql-server-host-address',
+    'Postgres database name.': 'marivo.credentials.postgresql-database-name',
+    'Postgres port; ibis default is 5432.': 'marivo.credentials.postgresql-port-ibis-defaults-to-5432',
+    'Environment variable for Postgres user.': 'marivo.credentials.credential-reference-for-the-postgresql-username',
+    'Environment variable for Postgres password.': 'marivo.credentials.credential-reference-for-the-postgresql-password',
+    'ClickHouse host.': 'marivo.credentials.clickhouse-server-host-address',
+    'ClickHouse port; native default is 9000, secure default is 9440.': 'marivo.credentials.clickhouse-port-native-connections-default-to-9000-secure-connections',
+    "ClickHouse database; ibis default is 'default'.": 'marivo.credentials.clickhouse-database-name-ibis-defaults-to-default',
+    'Enable TLS for ClickHouse.': 'marivo.credentials.enable-tls-encryption-for-clickhouse',
+    'Optional ClickHouse settings map.': 'marivo.credentials.optional-clickhouse-settings-as-a-json-object',
+    'Environment variable for ClickHouse user.': 'marivo.credentials.credential-reference-for-the-clickhouse-username',
+    'Environment variable for ClickHouse password.': 'marivo.credentials.credential-reference-for-the-clickhouse-password',
+};
+export function datasourceDescription(description) {
+    return descriptions[description] ?? description;
+}

package/lib/client/credentials/install.js

@@ -0,0 +1,319 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState, useSyncExternalStore } from 'react';
+import { useCopy } from "./../i18n/context.js";
+import { localized } from "../i18n/host.js";
+import { CreateDatasource } from "./create-datasource.js";
+import { CredentialClientModel, credentialMessage } from "./model.js";
+import { ReportPublishingCredentials } from "./report-publishing.js";
+import { credentialStyles } from "./styles.js";
+const statusLabels = {
+    'awaiting-input': 'marivo.credentials.awaiting-input',
+    executing: 'marivo.credentials.saving-or-validating-77',
+    'awaiting-decision': 'marivo.credentials.connection-validation-failed-action-needed',
+    succeeded: 'marivo.credentials.validated-original-call-continues',
+    'handed-off': 'marivo.credentials.handed-to-the-assistant-for-investigation',
+    'call-ended': 'marivo.credentials.original-call-ended',
+    cancelled: 'marivo.credentials.configuration-request-cancelled',
+    'context-changed': 'marivo.credentials.context-changed',
+};
+export function CredentialIcon({ name, size = 18 }) {
+    return (_jsxs("svg", { width: size, height: size, viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.6", strokeLinecap: "round", strokeLinejoin: "round", "aria-hidden": "true", children: [name === 'database' && (_jsxs(_Fragment, { children: [_jsx("ellipse", { cx: "12", cy: "5", rx: "8", ry: "3" }), _jsx("path", { d: "M4 5v14c0 4 16 4 16 0V5M4 12c0 4 16 4 16 0" })] })), name === 'refresh' && (_jsx("path", { d: "M20 7v5h-5M4 17v-5h5M6.1 6a8 8 0 0 1 13.4 3M4.5 15a8 8 0 0 0 13.4 3" })), name === 'add' && _jsx("path", { d: "M12 5v14M5 12h14" }), name === 'edit' && _jsx("path", { d: "m16 3 5 5L9 20l-6 1 1-6L16 3ZM13 6l5 5" }), name === 'delete' && _jsx("path", { d: "M3 6h18M9 6V3h6v3M5 6l1 15h12l1-15M10 10v7m4-7v7" }), name === 'test' && (_jsx("path", { d: "M9 3h6M10 3v6l-6 10a1.3 1.3 0 0 0 1 2h14a1.3 1.3 0 0 0 1-2L14 9V3M7 15h10" })), name === 'check' && _jsx("path", { d: "m5 12 4 4L19 6" }), name === 'info' && (_jsxs(_Fragment, { children: [_jsx("circle", { cx: "12", cy: "12", r: "9" }), _jsx("path", { d: "M12 11v6m0-10v.01" })] }))] }));
+}
+export function TestResult({ result, stale = false }) {
+    const t = useCopy();
+    if (!result)
+        return null;
+    return (_jsxs("div", { className: "mc-result", "data-tone": t(stale ? 'stale' : result.ok ? 'success' : 'error'), role: "status", children: [_jsxs("div", { className: "mc-result-title", children: [_jsx(CredentialIcon, { name: stale || !result.ok ? 'info' : 'check', size: 16 }), stale
+                        ? t('marivo.credentials.configuration-changed-test-again')
+                        : result.ok
+                            ? t('marivo.credentials.connection-test-succeeded')
+                            : t('marivo.credentials.connection-test-failed')] }), !result.ok && !stale && (_jsxs(_Fragment, { children: [_jsx("p", { children: t(result.failure?.message) }), result.repair?.action && _jsx("p", { children: result.repair.action }), result.failure?.code && (_jsxs("details", { children: [_jsx("summary", { children: t('marivo.credentials.show-error-code') }), _jsx("pre", { children: result.failure.code })] }))] }))] }));
+}
+function OperationOutcome({ entry }) {
+    const t = useCopy();
+    if (!entry)
+        return null;
+    const operation = entry.operation;
+    const errors = operation?.errors ?? [];
+    if (operation?.action === 'delete-datasource')
+        return (_jsxs("div", { className: "mc-operation-note", "data-error": operation.status !== 'succeeded', role: "status", children: [_jsx("p", { children: operation.datasourceRemoved
+                        ? t('marivo.credentials.datasource-value-was-deleted', { p0: entry.name })
+                        : t('marivo.credentials.deletion-of-datasource-value-is-unconfirmed-refresh-the-list', {
+                            p0: entry.name,
+                        }) }), operation.datasourceRemoved && !operation.deleteCredentials && (_jsx("p", { children: t('marivo.credentials.associated-saved-credentials-were-retained') })), operation.deletedCredentials?.length > 0 && (_jsxs("p", { children: [t('marivo.credentials.deleted-credentials'), operation.deletedCredentials.join('、'), "\u3002"] })), operation.credentialDeleteFailures?.length > 0 && (_jsxs("p", { children: [t('marivo.credentials.credentials-that-could-not-be-deleted'), operation.credentialDeleteFailures.join('、'), "\u3002"] })), operation.status === 'cancelled' && (_jsx("p", { children: t('marivo.credentials.operation-cancelled-completed-deletions-remain-other-credentials-may-still') })), errors.length > 0 && _jsx("p", { children: errors.map(credentialMessage).join(' ') })] }));
+    const unsuccessful = entry.error ||
+        operation?.status === 'cancelled' ||
+        operation?.status === 'failed' ||
+        operation?.result?.ok === false;
+    if (!unsuccessful && operation?.action !== 'delete')
+        return null;
+    return (_jsxs("div", { className: "mc-operation-note", "data-error": t(Boolean(entry.error || errors.length)), role: "status", children: [entry.error && _jsx("p", { children: t(entry.error) }), operation?.status === 'cancelled' && (_jsx("p", { children: t('marivo.credentials.this-operation-was-cancelled') })), operation?.status === 'succeeded' && operation.action === 'delete' && (_jsx("p", { children: t('marivo.credentials.saved-value-deleted-configuration-status-updated') })), errors.length > 0 && _jsx("p", { children: errors.map(credentialMessage).join(' ') }), operation?.status === 'failed' && errors.length === 0 && !operation.result && (_jsx("p", { children: t('marivo.credentials.operation-incomplete-please-retry') })), unsuccessful && operation?.saved.length > 0 && (_jsxs("p", { children: [t('marivo.credentials.saved'), operation.saved.join('、'), "\u3002"] }))] }));
+}
+export function DatasourceProperties({ context }) {
+    const t = useCopy();
+    const properties = Object.entries(context.properties ?? {});
+    return (_jsxs("section", { className: "mc-properties", "aria-label": t('marivo.credentials.datasource-properties'), children: [_jsx("h4", { className: "mc-section-heading", children: t('marivo.credentials.datasource-properties') }), _jsxs("dl", { className: "mc-property-list", children: [_jsxs("div", { className: "mc-property", children: [_jsx("dt", { children: t('marivo.credentials.engine') }), _jsx("dd", { children: context.backend || t('marivo.credentials.not-provided') })] }), properties.map(([field, value]) => (_jsxs("div", { className: "mc-property", children: [_jsx("dt", { children: field }), _jsx("dd", { children: value !== null && typeof value === 'object' ? (_jsx("section", { className: "mc-property-json", 
+                                    // biome-ignore lint/a11y/noNoninteractiveTabindex: Keyboard users must be able to scroll long JSON values.
+                                    tabIndex: 0, "aria-label": t('marivo.credentials.value-configuration-value', { p0: field }), children: _jsx("pre", { children: JSON.stringify(value, null, 2) }) })) : (_jsx("span", { children: typeof value === 'string' && value !== '' ? value : JSON.stringify(value) })) })] }, field)))] })] }));
+}
+function CredentialForm({ context, request, state, model, workspaceId, onEdit }) {
+    const t = useCopy();
+    const [values, setValues] = useState({});
+    const [editing, setEditing] = useState({});
+    const [deleting, setDeleting] = useState('');
+    const [removingDatasource, setRemovingDatasource] = useState(false);
+    const [removeCredentials, setRemoveCredentials] = useState(false);
+    const busy = request?.status === 'executing' ||
+        state.operations.some((entry) => entry.handle.scope === context.token);
+    const ended = request?.endedAt !== undefined;
+    const configured = context.refs.filter((ref) => context.credentials[ref]?.configured).length;
+    const ready = configured === context.refs.length;
+    const outcome = state.outcomes[context.token];
+    const latestTest = !outcome?.overviewUpdated && outcome?.operation?.result
+        ? { result: outcome.operation.result, at: outcome.operation.endedAt, stale: false }
+        : context.lastTest;
+    const latestResult = request?.failure ?? latestTest?.result;
+    // biome-ignore lint/correctness/useExhaustiveDependencies: Identity or credential revision changes must discard unsubmitted secrets.
+    useEffect(() => {
+        setValues({});
+        setEditing({});
+        setDeleting('');
+        setRemovingDatasource(false);
+        setRemoveCredentials(false);
+    }, [context.token, context.version]);
+    const saveReference = (ref) => {
+        const changes = { [ref]: values[ref] };
+        setValues({ ...values, [ref]: '' });
+        setEditing({ ...editing, [ref]: false });
+        void model.start(context, 'save', changes);
+    };
+    const submit = () => {
+        const changes = Object.fromEntries(Object.entries(values).filter(([, value]) => value !== ''));
+        setValues({});
+        setEditing({});
+        void model.start(context, request ? 'submit' : 'update', changes);
+    };
+    return (_jsxs("section", { className: "mc-form", "aria-label": t('marivo.credentials.value-credential-configuration', { p0: context.name }), children: [_jsxs("div", { className: "mc-form-body", children: [_jsxs("div", { className: "mc-detail-heading mc-datasource-heading", children: [_jsx("p", { className: "mc-eyebrow", children: t('marivo.credentials.datasource-configuration') }), _jsxs("div", { className: "mc-name-row", children: [_jsx("h3", { children: context.name }), _jsxs("div", { className: "mc-heading-actions", children: [_jsxs("span", { className: "mc-badge", "data-ready": ready, children: [ready && _jsx(CredentialIcon, { name: "check", size: 13 }), context.refs.length === 0
+                                                        ? t('marivo.credentials.no-credentials-required')
+                                                        : ready
+                                                            ? t('marivo.credentials.all-credentials-configured')
+                                                            : t('marivo.credentials.value-value-configured', {
+                                                                p0: configured,
+                                                                p1: context.refs.length,
+                                                            })] }), !ended && (_jsx("button", { className: "mc-icon-button", type: "button", title: t('marivo.credentials.edit-configuration'), "aria-label": t('marivo.credentials.edit-configuration'), disabled: busy, onClick: onEdit, children: _jsx(CredentialIcon, { name: "edit" }) })), !request && (_jsx("button", { className: "mc-icon-button mc-danger", type: "button", title: t('marivo.credentials.delete-datasource'), "aria-label": t('marivo.credentials.delete-datasource'), disabled: busy || state.loading, onClick: () => setRemovingDatasource(true), children: _jsx(CredentialIcon, { name: "delete" }) }))] })] })] }), removingDatasource && (_jsxs("fieldset", { className: "mc-confirm", "aria-label": t('marivo.credentials.confirm-datasource-deletion'), children: [_jsxs("p", { children: [t('marivo.credentials.confirm-datasource-deletion'), context.name, t('marivo.credentials.this-removes-the-datasource-definition-from-this-workspace-not')] }), context.refs.length > 0 && (_jsxs(_Fragment, { children: [_jsxs("label", { children: [_jsx("input", { type: "checkbox", checked: removeCredentials, disabled: busy, onChange: (event) => setRemoveCredentials(event.target.checked) }), ' ', t('marivo.credentials.also-delete-associated-saved-credentials')] }), _jsxs("p", { children: [t('marivo.credentials.credential-references'), context.refs.join('、'), t('marivo.credentials.other-datasources-or-workspaces-may-share-these-credentials-and')] })] })), _jsx("button", { className: "mc-danger", type: "button", disabled: busy || state.loading, onClick: () => {
+                                    setRemovingDatasource(false);
+                                    void model.start(context, 'delete-datasource', {}, undefined, removeCredentials);
+                                }, children: t('marivo.credentials.confirm-datasource-deletion') }), _jsx("button", { type: "button", disabled: busy, onClick: () => {
+                                    setRemovingDatasource(false);
+                                    setRemoveCredentials(false);
+                                }, children: t('marivo.credentials.cancel') })] })), request && (_jsxs("div", { className: "mc-request-status", role: "status", children: [_jsx("strong", { children: t(statusLabels[request.status]) }), !ended && (_jsx("p", { children: t('marivo.credentials.continue-the-current-task-after-successful-validation') })), (request.status === 'call-ended' || request.status === 'context-changed') && (_jsx("p", { children: t('marivo.credentials.start-the-task-again') }))] })), _jsx(DatasourceProperties, { context: context }), _jsx("h4", { className: "mc-section-heading", children: t('marivo.credentials.credentials') }), context.refs.length === 0 && (_jsx("p", { className: "mc-note", children: t('marivo.credentials.this-datasource-has-no-credential-references-you-can-test') })), context.refs.length > 0 && (_jsx("div", { className: "mc-fields", children: context.refs.map((ref) => {
+                            const info = context.credentials[ref];
+                            const shared = state.datasources
+                                .filter((item) => item.refs.includes(ref))
+                                .map((item) => item.name);
+                            return (_jsxs("fieldset", { className: "mc-field", disabled: busy || ended, "aria-label": ref, children: [_jsxs("div", { className: "mc-field-header", children: [_jsxs("div", { className: "mc-field-title", children: [_jsx("h4", { children: ref }), _jsxs("p", { children: [t('marivo.credentials.field'), Object.entries(context.fields)
+                                                                .filter(([, value]) => value === ref)
+                                                                .map(([field]) => field)
+                                                                .join('、'), ' ', t('marivo.credentials.source'), info?.source ?? t('marivo.credentials.none'), !info?.writable && t('marivo.credentials.read-only-source')] })] }), _jsxs("div", { className: "mc-field-actions", children: [_jsx("span", { className: "mc-badge", "data-ready": Boolean(info?.configured), children: info?.configured
+                                                            ? t('marivo.credentials.configured')
+                                                            : t('marivo.credentials.not-configured') }), info?.writable && info.configured && !editing[ref] && (_jsx("button", { type: "button", onClick: () => setEditing({ ...editing, [ref]: true }), children: t('marivo.credentials.replace') })), info?.writable && info.configured && editing[ref] && (_jsx("button", { type: "button", onClick: () => {
+                                                            setValues({ ...values, [ref]: '' });
+                                                            setEditing({ ...editing, [ref]: false });
+                                                        }, children: t('marivo.credentials.cancel-replacement') })), info?.writable && !request && info.configured && (_jsx("button", { className: "mc-danger", type: "button", onClick: () => setDeleting(ref), children: t('marivo.credentials.delete-saved-value') }))] })] }), info?.writable && (!info.configured || editing[ref]) && (_jsxs("label", { className: "mc-secret-input", children: [t('marivo.credentials.new-value'), _jsx("input", { type: "password", autoComplete: "new-password", placeholder: t('marivo.credentials.enter-credential-value-127'), value: values[ref] ?? '', onChange: (event) => setValues({ ...values, [ref]: event.target.value }) }), !request && (_jsx("button", { type: "button", className: "mc-primary", disabled: !values[ref], onClick: () => saveReference(ref), children: info.configured
+                                                    ? t('marivo.credentials.confirm-replacement')
+                                                    : t('marivo.credentials.add-credential') }))] })), shared.length > 1 && (_jsxs("p", { className: "mc-field-note", children: [t('marivo.credentials.and'), shared.filter((name) => name !== context.name).join('、'), ' ', t('marivo.credentials.share-this-reference')] })), deleting === ref && (_jsxs("div", { className: "mc-confirm", children: [_jsxs("p", { children: [t('marivo.credentials.confirm-deletion-of'), ref, " ", t('marivo.credentials.the-saved-value')] }), _jsx("button", { className: "mc-danger", type: "button", onClick: () => {
+                                                    setDeleting('');
+                                                    void model.start(context, 'delete', {}, ref);
+                                                }, children: t('marivo.credentials.confirm-saved-value-deletion') }), _jsx("button", { type: "button", onClick: () => setDeleting(''), children: t('marivo.credentials.keep') })] }))] }, ref));
+                        }) })), _jsxs("div", { className: "mc-test", children: [_jsxs("div", { className: "mc-test-heading", children: [_jsx("h4", { children: t('marivo.credentials.connection-status') }), _jsxs("div", { className: "mc-heading-actions", children: [latestTest?.at !== undefined && (_jsxs("time", { dateTime: new Date(latestTest.at).toISOString(), children: [t('marivo.credentials.last-test'), new Date(latestTest.at).toLocaleString()] })), !request && (_jsx("button", { className: "mc-icon-button", type: "button", title: t('marivo.credentials.test-connection'), "aria-label": t('marivo.credentials.test-connection'), disabled: busy, onClick: () => void model.start(context, 'test'), children: _jsx(CredentialIcon, { name: "test" }) }))] })] }), latestResult ? (_jsx(TestResult, { result: latestResult, stale: !request?.failure && latestTest?.stale })) : (_jsx("p", { className: "mc-empty-test", children: t('marivo.credentials.connection-has-not-been-tested') })), outcome?.operation?.action !== 'delete-datasource' && (_jsx(OperationOutcome, { entry: outcome }))] })] }), !ended && (request || busy) && (_jsxs("div", { className: "mc-form-footer", children: [request && (_jsx("button", { className: "mc-primary", type: "button", disabled: busy, onClick: submit, children: t('marivo.credentials.submit-credentials-and-continue') })), request && (_jsx("button", { type: "button", disabled: busy, onClick: () => void model.start(context, 'submit'), children: t('marivo.credentials.validate-existing-configuration-and-continue') })), request?.failure && (_jsx("button", { type: "button", disabled: busy, onClick: () => void model.start(context, 'diagnose'), children: t('marivo.credentials.ask-the-assistant-to-investigate') })), request ? (_jsx("button", { className: "mc-quiet mc-cancel", type: "button", onClick: () => void model.cancelRequest(request.id), children: t('marivo.credentials.cancel-this-round') })) : (busy && (_jsx("button", { className: "mc-quiet mc-cancel", type: "button", onClick: () => void model.cancelOperation(context.token), children: t('marivo.credentials.cancel-operation') })))] })), ended && (_jsx("div", { className: "mc-form-footer", children: _jsx("button", { type: "button", onClick: () => model.show(workspaceId), children: t('marivo.credentials.back-to-datasource-management') }) }))] }));
+}
+export function CredentialPanel({ model, workspaces, onRefresh }) {
+    const t = useCopy();
+    const state = useSyncExternalStore(model.subscribe, model.getSnapshot);
+    const columns = useRef(null);
+    const navigation = useRef(null);
+    const main = useRef(null);
+    const [creating, setCreating] = useState(false);
+    const [editingName, setEditingName] = useState('');
+    const [requestError, setRequestError] = useState('');
+    const [requestChoice, setRequestChoice] = useState('create');
+    // biome-ignore lint/correctness/useExhaustiveDependencies: Switching context discards the creation form.
+    useEffect(() => {
+        setCreating(false);
+        setEditingName('');
+        setRequestError('');
+        setRequestChoice('create');
+    }, [state.open, state.workspaceId, state.requestId]);
+    const request = state.requests.find((item) => item.id === state.requestId);
+    // biome-ignore lint/correctness/useExhaustiveDependencies: Open the initial form once per request occurrence; live watch updates must preserve user navigation.
+    useEffect(() => {
+        if (!request?.configuration || request.context || request.endedAt !== undefined)
+            return;
+        setCreating(true);
+        setEditingName(request.configuration.mode === 'edit' ? request.configuration.name : '');
+    }, [request?.id, state.open]);
+    useEffect(() => {
+        if (request?.endedAt === undefined)
+            return;
+        setCreating(false);
+        setEditingName('');
+    }, [request?.endedAt]);
+    const pending = state.requests.filter((item) => item.endedAt === undefined && item.sessionId === state.sessionId);
+    const context = request
+        ? request.context
+        : state.datasources.find((item) => item.token === state.selected);
+    // biome-ignore lint/correctness/useExhaustiveDependencies: A different detail or creation page starts at the top of its content.
+    useEffect(() => {
+        if (main.current) {
+            main.current.scrollTop = 0;
+            const page = main.current.closest('.rt-page');
+            if (page)
+                page.scrollTop = 0;
+        }
+        if (columns.current)
+            columns.current.scrollTop = 0;
+        const list = navigation.current;
+        const selected = list?.querySelector('[aria-pressed="true"]');
+        if (selected) {
+            const bounds = selected.getBoundingClientRect();
+            const viewport = list.getBoundingClientRect();
+            if (bounds.left < viewport.left)
+                list.scrollLeft += bounds.left - viewport.left;
+            else if (bounds.right > viewport.right)
+                list.scrollLeft += bounds.right - viewport.right;
+        }
+    }, [creating, context?.token]);
+    const workspaceId = request
+        ? (workspaces.find((item) => item.sessionIds.includes(request.sessionId))?.workspaceId ?? '')
+        : state.workspaceId;
+    const datasources = request ? (request.context ? [request.context] : []) : state.datasources;
+    const operations = state.operations.filter((entry) => entry.workspaceId === workspaceId);
+    const activeOperation = operations.find((entry) => entry.handle.id === state.handle?.id)?.operation;
+    if (!state.open)
+        return null;
+    return (_jsxs("section", { className: "mc-panel", "aria-label": t('marivo.credentials.datasources-and-credentials'), children: [_jsx("style", { children: credentialStyles }), _jsxs("div", { className: "rt-heading-row", children: [_jsx("h2", { className: "rt-heading", children: t('marivo.credentials.datasources-and-credentials') }), _jsxs("div", { className: "mc-heading-actions", children: [!request && (_jsx("button", { className: "mc-icon-button", type: "button", title: t('marivo.credentials.add-datasource'), "aria-label": t('marivo.credentials.add-datasource'), disabled: !workspaceId || state.loading, onClick: () => {
+                                    setEditingName('');
+                                    setCreating(true);
+                                }, children: _jsx(CredentialIcon, { name: "add" }) })), _jsx("button", { className: "mc-icon-button", type: "button", title: t('marivo.credentials.refresh-datasources'), "aria-label": t('marivo.credentials.refresh-datasources'), disabled: state.loading, onClick: onRefresh ?? (() => void model.refreshDatasources()), children: _jsx(CredentialIcon, { name: "refresh" }) })] })] }), _jsx("p", { className: "rt-caption", children: workspaces.find((item) => item.workspaceId === workspaceId)?.title ?? workspaceId }), _jsxs("div", { className: "mc-shell", children: [(pending.length > 0 || request) && (_jsxs("div", { className: "mc-requests", children: [_jsx("span", { children: pending.length
+                                    ? t('marivo.credentials.requests-in-this-session')
+                                    : t('marivo.credentials.configuration-result') }), pending.map((item) => (_jsxs("button", { type: "button", onClick: () => model.openRequest(item.id), children: [item.context?.name ??
+                                        item.configuration?.name ??
+                                        t('marivo.credentials.add-datasource'), ' ', "\u00B7 ", t(statusLabels[item.status])] }, item.id))), request && (_jsx("button", { className: "mc-quiet", type: "button", onClick: () => model.show(workspaceId), children: t('marivo.credentials.datasource-management') }))] })), _jsxs("div", { className: "mc-columns", ref: columns, children: [!request && (_jsx("aside", { className: "mc-nav", "aria-label": t('marivo.credentials.datasource-navigation'), children: _jsxs("div", { children: [_jsx("div", { className: "mc-nav-heading", children: _jsx("h3", { children: request
+                                                    ? t('marivo.credentials.requested-datasource')
+                                                    : t('marivo.credentials.datasource-value', { p0: datasources.length }) }) }), _jsx("ul", { className: "mc-datasources", ref: navigation, children: datasources.map((item) => {
+                                                const count = item.refs.filter((ref) => item.credentials[ref]?.configured).length;
+                                                const ready = count === item.refs.length;
+                                                const running = state.operations.some((entry) => entry.handle.scope === item.token);
+                                                return (_jsx("li", { children: _jsxs("button", { className: "mc-datasource", type: "button", "aria-label": t('marivo.credentials.select-datasource-value', {
+                                                            p0: item.name,
+                                                        }), "aria-pressed": !creating && context?.token === item.token, onClick: () => {
+                                                            if (request)
+                                                                model.openRequest(request.id);
+                                                            else {
+                                                                setCreating(false);
+                                                                model.select(item.token);
+                                                            }
+                                                        }, children: [_jsx(CredentialIcon, { name: "database" }), _jsxs("span", { className: "mc-datasource-copy", children: [_jsx("span", { className: "mc-datasource-name", children: item.name }), _jsxs("span", { className: "mc-datasource-status", children: [_jsx("span", { className: "mc-dot", "data-ready": ready }), running
+                                                                                ? t('marivo.credentials.processing')
+                                                                                : item.refs.length === 0
+                                                                                    ? t('marivo.credentials.no-credentials-required')
+                                                                                    : ready
+                                                                                        ? t('marivo.credentials.all-credentials-configured')
+                                                                                        : t('marivo.credentials.value-value-configured', {
+                                                                                            p0: count,
+                                                                                            p1: item.refs.length,
+                                                                                        })] })] })] }) }, item.token));
+                                            }) })] }) })), _jsxs("main", { className: "mc-main", ref: main, children: [Object.values(state.outcomes)
+                                        .filter((entry) => entry.workspaceId === workspaceId &&
+                                        entry.operation?.action === 'delete-datasource')
+                                        .map((entry) => (_jsxs("div", { className: "mc-request-status", children: [_jsx(OperationOutcome, { entry: entry }), _jsx("button", { type: "button", onClick: () => model.dismissOutcome(entry.handle.scope), children: t('marivo.credentials.dismiss-deletion-result') })] }, entry.handle.id))), state.error && (_jsx("p", { role: "alert", className: "mc-alert", children: t(state.error) })), state.loading && (_jsx("p", { className: "mc-loading", role: "status", children: t('marivo.credentials.loading-datasources-and-credential-status') })), !request && !creating && !state.loading && !context && !state.error && (_jsxs("div", { className: "mc-empty", children: [_jsx(CredentialIcon, { name: "database", size: 32 }), _jsx("h3", { children: !state.workspaceId
+                                                    ? t('marivo.credentials.this-session-is-not-bound-to-a-workspace')
+                                                    : state.datasources.length === 0
+                                                        ? t('marivo.credentials.no-datasources')
+                                                        : t('marivo.credentials.select-a-datasource') }), _jsx("p", { children: !state.workspaceId
+                                                    ? t('marivo.credentials.return-to-the-session-and-retry')
+                                                    : state.datasources.length === 0
+                                                        ? t('marivo.credentials.this-workspace-has-no-defined-datasources')
+                                                        : t('marivo.credentials.view-credential-configuration-and-the-latest-connection-test') })] })), request?.configuration && (_jsxs("section", { className: "mc-request-status", "aria-label": t('marivo.credentials.configuration-request'), children: [_jsxs("div", { className: "mc-request-heading", children: [_jsx("h3", { children: t('marivo.credentials.configure-a-datasource-to-continue') }), _jsx("span", { className: "mc-badge", role: "status", children: t(statusLabels[request.status]) }), request.endedAt === undefined && (_jsx("button", { className: "mc-quiet", type: "button", onClick: () => void model.cancelRequest(request.id), children: t('marivo.credentials.cancel-configuration-request') }))] }), _jsxs("details", { className: "mc-request-reason", children: [_jsx("summary", { children: t('marivo.credentials.show-assistant-request-details') }), _jsx("p", { children: t(request.configuration.reason) })] }), requestError && _jsx("p", { role: "alert", children: t(requestError) }), request.endedAt === undefined && request.status !== 'executing' && (_jsxs(_Fragment, { children: [request.configuration.mode === 'create' && !context && (_jsxs(_Fragment, { children: [_jsxs("fieldset", { className: "mc-request-choice", "aria-label": t('marivo.credentials.configuration-method'), children: [_jsx("button", { type: "button", "aria-pressed": requestChoice === 'create', onClick: () => {
+                                                                            setRequestChoice('create');
+                                                                            setCreating(true);
+                                                                            setEditingName('');
+                                                                            setRequestError('');
+                                                                        }, children: t('marivo.credentials.add-datasource') }), _jsx("button", { type: "button", "aria-pressed": requestChoice === 'existing', onClick: () => {
+                                                                            setRequestChoice('existing');
+                                                                            setCreating(false);
+                                                                            setEditingName('');
+                                                                            setRequestError('');
+                                                                        }, children: t('marivo.credentials.use-an-existing-datasource') })] }), requestChoice === 'existing' && (_jsxs("div", { className: "mc-existing-source", children: [_jsx("p", { children: t('marivo.credentials.if-an-existing-connection-can-access-the-target-table') }), _jsxs("label", { className: "mc-secret-input", children: [t('marivo.credentials.select-an-existing-datasource'), _jsxs("select", { "aria-label": t('marivo.credentials.select-an-existing-datasource'), value: "", onChange: async (event) => {
+                                                                                    if (!event.target.value)
+                                                                                        return;
+                                                                                    try {
+                                                                                        await model.selectConfiguration(workspaceId, request.id, event.target.value);
+                                                                                        setCreating(false);
+                                                                                        setEditingName('');
+                                                                                    }
+                                                                                    catch (error) {
+                                                                                        setRequestError(error.message);
+                                                                                    }
+                                                                                }, children: [_jsx("option", { value: "", children: t('marivo.credentials.please-select') }), state.datasources.map((item) => (_jsx("option", { value: item.name, children: item.name }, item.name)))] })] }), state.datasources.length === 0 && (_jsx("p", { children: t('marivo.credentials.no-reusable-datasource-is-available-switch-to-add-datasource') }))] }))] })), !creating &&
+                                                        !context &&
+                                                        (request.configuration.mode === 'edit' || requestChoice === 'create') && (_jsx("button", { type: "button", onClick: () => {
+                                                            setCreating(true);
+                                                            setEditingName(request.configuration.name ?? '');
+                                                        }, children: t('marivo.credentials.open-configuration-form') }))] }))] })), creating && request?.endedAt === undefined && (_jsx(CreateDatasource, { name: editingName || undefined, requestId: request?.configuration ? request.id : undefined, model: model, workspaceId: workspaceId, close: () => setCreating(false) }, `${workspaceId}/${editingName}/${request?.id ?? ''}`)), !creating && context && (_jsx(CredentialForm, { context: context, request: request, state: state, model: model, workspaceId: workspaceId, onEdit: () => {
+                                            setEditingName(context.name);
+                                            setCreating(true);
+                                        } }, context.token)), operations.length > 0 && (_jsxs("section", { className: "mc-activity", "aria-label": t('marivo.credentials.credential-operations-in-progress'), children: [_jsxs("p", { className: "mc-activity-heading", children: [t('marivo.credentials.in-progress'), operations.length] }), _jsx("div", { className: "mc-activity-list", children: operations.map((entry) => (_jsxs("button", { type: "button", "aria-pressed": state.handle?.id === entry.handle.id, onClick: () => model.selectOperation(entry.handle.id), children: [entry.name, " ", t('marivo.credentials.processing-177')] }, entry.handle.id))) }), activeOperation?.status === 'running' && (_jsxs("div", { className: "mc-progress", children: [_jsxs("p", { children: [state.operations.find((entry) => entry.handle.id === state.handle?.id)?.name, ' ', "\u00B7", ' ', activeOperation.phase === 'removing'
+                                                                ? t('marivo.credentials.deleting')
+                                                                : activeOperation.phase === 'saving'
+                                                                    ? t('marivo.credentials.saving')
+                                                                    : t('marivo.credentials.validating-connection')] }), _jsx("button", { type: "button", onClick: () => void model.cancelOperation(), children: t('marivo.credentials.cancel-this-operation') }), activeOperation.saved.length > 0 && (_jsxs("p", { children: [t('marivo.credentials.saved'), activeOperation.saved.join('、'), "\u3002"] }))] }))] }))] })] })] }), !request && workspaceId && (_jsx(ReportPublishingCredentials, { model: model, workspaceId: workspaceId }, workspaceId))] }));
+}
+export function installCredentials(ctx, rpc, changes) {
+    let storage;
+    try {
+        storage = window.sessionStorage;
+    }
+    catch {
+        /* optional query-handle persistence */
+    }
+    const model = new CredentialClientModel(rpc, storage, changes);
+    model.recover();
+    ctx.effect(() => () => model.dispose(), 'dsh-data-analysis: credential client lifecycle');
+    ctx.on('connection/reset', () => model.reset());
+    ctx.slots.inject('conversation.session.header.actions', () => ctx.slots.register({
+        locale: 'marivo.navigation',
+        name: 'conversation.session.header.actions',
+        id: 'marivo-credential-requests',
+        order: 120,
+    }, localized(ctx, function Pending({ sessionId }) {
+        const t = useCopy();
+        const state = useSyncExternalStore(model.subscribe, model.getSnapshot);
+        const request = state.requests.find((item) => item.sessionId === sessionId && item.endedAt === undefined);
+        return request ? (_jsx("button", { className: "mc-pending-entry", style: {
+                flex: 'none',
+                whiteSpace: 'nowrap',
+                fontSize: 12,
+                padding: '4px 6px',
+                border: '1px solid currentColor',
+                borderRadius: 7,
+                background: 'transparent',
+                color: 'inherit',
+                cursor: 'pointer',
+            }, "aria-label": request.configuration
+                ? t('marivo.credentials.awaiting-datasource-configuration')
+                : t('marivo.credentials.awaiting-credentials'), title: request.configuration
+                ? t('marivo.credentials.awaiting-datasource-configuration')
+                : t('marivo.credentials.awaiting-credentials'), type: "button", onClick: () => model.openRequest(request.id), children: t('marivo.credentials.configuration-needed') })) : null;
+    })));
+    ctx.slots.inject('shell.overlay', () => ctx.slots.register({ locale: 'marivo.navigation', name: 'shell.overlay', id: 'marivo-credential-observer' }, localized(ctx, function Observer({ useSessions, useWorkspaces }) {
+        const sessionId = useSessions((state) => state.current) ?? '';
+        const workspaces = useWorkspaces((state) => state.items);
+        const currentWorkspace = workspaces.find((item) => item.sessionIds.includes(sessionId))?.workspaceId ?? '';
+        useEffect(() => model.session(sessionId), [sessionId]);
+        // biome-ignore lint/correctness/useExhaustiveDependencies: Workspace reassignment must dismiss old content.
+        useEffect(() => model.close(), [currentWorkspace]);
+        return null;
+    })));
+    return model;
+}