@dsh-cc/tui 0.5.0

package/lib/project.js

@@ -0,0 +1,196 @@
+/**
+ * Project (working-directory identity) resolution for session management.
+ *
+ * A "project" is the namespace sessions, resume markers, and input history
+ * share. For a cwd inside a git repository the project is pinned to the
+ * *main repo root*, so an isolation worktree (`--worktree`,
+ * `.claude/worktrees/<slug>`) keeps the same project as its main checkout;
+ * for a cwd outside git the project is the directory itself. Every member
+ * path is `resolve()`d to a canonical absolute form and keyed by a short
+ * sha256 of the project root (deliberately not a lossy string encoding like
+ * Claude Code's `-` separator scheme — see design).
+ *
+ * All git probing runs through an injectable synchronous exec so tests never
+ * spawn git; any failure or timeout degrades to the directory identity.
+ *
+ * @module @dsh-cc/tui/project
+ */
+import { createHash } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import { dirname, join, resolve, sep } from 'node:path';
+/**
+ * Git invocation timeout. A hung git (network FS, broken env) must not block
+ * session boot; expiry degrades to the directory identity. Generous for
+ * slow repos while still bounding the worst case.
+ */
+export const GIT_PROBE_TIMEOUT_MS = 2000;
+/** The default exec: real `git` via spawnSync with a bounded timeout. */
+export const gitExecSync = (argv, cwd) => {
+    const result = spawnSync('git', [...argv], {
+        cwd,
+        encoding: 'utf8',
+        timeout: GIT_PROBE_TIMEOUT_MS,
+    });
+    if (result.error !== undefined || result.status !== 0)
+        return undefined;
+    return { stdout: result.stdout };
+};
+/**
+ * True when `commonDir` marks a *linked* worktree whose project root is its
+ * directory's parent. The common dir of a standard layout is `<root>/.git`;
+ * a linked worktree reports its main checkout's `/.git`, which differs from
+ * its own `top/.git`. Anything else (main checkout, a submodule's
+ * `<super>/.git/modules/<name>`, bare, exotic GIT_DIR) is not a linked
+ * worktree and keeps `resolve(top)` as its project root — so submodules do
+ * not collapse onto their superproject.
+ *
+ * Keep in sync with `isLinkedWorktree` in
+ * `packages/settings/settings-cascade/src/local-root.ts`, which replicates
+ * this detector for local-settings hoisting (see its module doc).
+ */
+function isLinkedWorktree(commonDir, top) {
+    if (!commonDir.endsWith(`${sep}.git`))
+        return false;
+    return resolve(commonDir) !== resolve(join(top, '.git'));
+}
+/** Resolve one `worktree <path>` porcelain line, handling git's C-style quoting. */
+function unquoteWorktreePath(line) {
+    if (line.length === 0 || line[0] !== '"')
+        return line;
+    // strip surrounding quotes and decode git's C-style escapes (`\n` `\t`
+    // `\"` `\\`); unknown escapes keep the backslash verbatim.
+    const inner = line.slice(1, -1);
+    let out = '';
+    for (let i = 0; i < inner.length; i += 1) {
+        const ch = inner[i];
+        if (ch === '\\' && i + 1 < inner.length) {
+            const next = inner[i + 1];
+            if (next === 'n') {
+                out += '\n';
+                i += 1;
+                continue;
+            }
+            if (next === 't') {
+                out += '\t';
+                i += 1;
+                continue;
+            }
+            if (next === '\\' || next === '"') {
+                out += next;
+                i += 1;
+                continue;
+            }
+        }
+        out += ch;
+    }
+    return out;
+}
+/**
+ * Resolve the project identity for `cwd`. Git is probed via the injectable
+ * exec (defaults to real `git`); any failure or timeout degrades to a
+ * directory identity (`projectRoot = resolve(cwd)`, no worktrees).
+ *
+ * Results are memoised per resolved `cwd` so every process probes git at
+ * most once per working directory (driver clients call this in hot spots —
+ * boot, picker open, history rebind — and reuse the same identity). Only
+ * default-exec calls participate: an injected `exec` bypasses the cache
+ * entirely, so scripted-exec tests and external probing stay deterministic.
+ * {@link __clearProjectCache} resets the memo (used by tests).
+ */
+export function resolveProject(cwd, exec = gitExecSync) {
+    const key = resolve(cwd);
+    const memoised = exec === gitExecSync ? projectCache.get(key) : undefined;
+    if (memoised !== undefined)
+        return memoised;
+    const info = probeProject(cwd, exec);
+    if (exec === gitExecSync)
+        projectCache.set(key, info);
+    return info;
+}
+/** Module-level memo keyed by `resolve(cwd)` (see {@link resolveProject}). */
+const projectCache = new Map();
+/** Test hook: drop the module-level memo (also safe as a no-op cleanup). */
+export function __clearProjectCache() {
+    projectCache.clear();
+}
+/**
+ * Canonicalise a path: `resolve()` then dereference symlinks via realpath so
+ * a repo reached through a symlinked ancestor (e.g. macOS `/var` →
+ * `/private/var`) yields the SAME string whether it came from `resolve(cwd)`,
+ * git's toplevel, or git's common-dir — git may mix realpath'd and non-
+ * realpath'd output for the same directory, which would otherwise split one
+ * project into two keys. Falls back to `resolve()` if realpath fails (e.g.
+ * the path no longer exists).
+ */
+function canonical(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+/** The uncached git probe (shared by {@link resolveProject} and tests). */
+function probeProject(cwd, exec) {
+    const top = exec(['rev-parse', '--show-toplevel'], cwd)?.stdout.trim();
+    if (top === undefined || top.length === 0)
+        return fallbackProject(cwd);
+    const commonRaw = exec(['rev-parse', '--git-common-dir'], cwd)?.stdout.trim();
+    if (commonRaw === undefined || commonRaw.length === 0)
+        return fallbackProject(cwd);
+    const topAbs = canonical(top);
+    const commonDir = canonical(resolve(cwd, commonRaw));
+    const projectRoot = isLinkedWorktree(commonDir, topAbs) ? dirname(commonDir) : topAbs;
+    // Best-effort worktree enumeration; a failure just yields an empty set —
+    // the caller's prefix heuristic still covers the main checkout.
+    let worktrees = [];
+    const porcelain = exec(['worktree', 'list', '--porcelain'], cwd);
+    if (porcelain !== undefined) {
+        for (const line of porcelain.stdout.split('\n')) {
+            if (!line.startsWith('worktree '))
+                continue;
+            const path = unquoteWorktreePath(line.slice('worktree '.length).trim());
+            if (path.length > 0)
+                worktrees.push(canonical(path));
+        }
+    }
+    return { projectRoot, projectKey: projectKeyFor(projectRoot), worktrees };
+}
+/** Degraded identity for a non-git (or un-probeable) cwd. */
+function fallbackProject(cwd) {
+    const projectRoot = resolve(cwd);
+    return { projectRoot, projectKey: projectKeyFor(projectRoot), worktrees: [] };
+}
+/** `sha256(root)` first 16 hex chars — the per-project bucket key. */
+function projectKeyFor(projectRoot) {
+    return createHash('sha256').update(projectRoot).digest('hex').slice(0, 16);
+}
+/**
+ * Whether `entryCwd` belongs to the project: it equals the project root or
+ * any worktree path, or sits beneath one at a path-separator boundary
+ * (`/repo` matches `/repo` and `/repo/x`, never `/repo2`). Both `/` and `\`
+ * count as boundary separators so Windows-style recorded cwds are handled
+ * regardless of the host separator.
+ */
+export function isProjectMember(entryCwd, project) {
+    const entry = resolve(entryCwd);
+    const candidates = [project.projectRoot, ...project.worktrees];
+    for (const candidate of candidates) {
+        if (isWithin(candidate, entry))
+            return true;
+    }
+    return false;
+}
+/** True when `child` equals `parent` or sits beneath it at a separator boundary. */
+function isWithin(parent, child) {
+    const p = resolve(parent);
+    const c = resolve(child);
+    if (c === p)
+        return true;
+    if (!c.startsWith(p))
+        return false;
+    const rest = c.slice(p.length);
+    return rest.startsWith('/') || rest.startsWith('\\');
+}
+//# sourceMappingURL=project.js.map

package/lib/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAA;AAcxC,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACzC,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,oBAAoB;KAC9B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAClC,CAAC,CAAA;AAmBD;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,SAAiB,EAAE,GAAW;IACtD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACrD,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACnD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;YACnD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAAC,GAAG,IAAI,IAAI,CAAC;gBAAC,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAQ;YAAC,CAAC;QACtE,CAAC;QACD,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,OAAoB,WAAW;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxB,MAAM,QAAQ,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAEpC,IAAI,IAAI,KAAK,WAAW;QAAE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACrD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAA;AAEnD,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB;IACjC,YAAY,CAAC,KAAK,EAAE,CAAA;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,GAAW,EAAE,IAAiB;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IACtE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IAC7E,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAElF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAA;IACpD,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAErF,yEAAyE;IACzE,gEAAgE;IAChE,IAAI,SAAS,GAAa,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,CAAC,CAAA;IAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,SAAQ;YAC3C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YACvE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAA;AAC3E,CAAC;AAED,6DAA6D;AAC7D,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;AAC/E,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,WAAmB;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,OAAuD;IAEvD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/B,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IAC7C,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;AACtD,CAAC"}

package/lib/provider-actions.d.ts

@@ -0,0 +1,37 @@
+import { type ProviderPanelState } from './store/provider-panel.ts';
+import type { ProviderCore } from './provider-command.ts';
+/** Ordered wizard steps for the add-preset flow (§4.3). */
+export declare const PRESET_STEPS: readonly ["credential", "verify", "done"];
+/** Ordered wizard steps for the custom-provider flow (§4.6). */
+export declare const CUSTOM_STEPS: readonly ["route", "displayName", "baseURL", "protocol", "ref", "key", "models", "done"];
+/** Rotate/replace-key flow (§4.4): one masked key step. */
+export declare const ROTATE_STEPS: readonly ["key"];
+/** §4.6 protocol single-select options (all three wire protocols). */
+export declare const CUSTOM_PROTOCOLS: readonly ["openai-completions", "openai-responses", "anthropic-messages"];
+/** Wizard steps that render a live text `Input` (masked for secrets). */
+export declare const TEXT_STEPS: Record<string, {
+    masked: boolean;
+}>;
+/** Line shown when the environment shadows a credential ref (§7, C4). */
+export declare function envShadowLine(ref: string): string;
+export declare function credentialRefFor(route: string): string;
+/** The live wizard step, if a wizard is open. */
+export declare const currentStep: (panel: ProviderPanelState | undefined) => string | undefined;
+/** Clear the wizard text field and the transient key buffer (§6). */
+export declare const clearField: (core: ProviderCore) => void;
+/** Open a fresh text field for the wizard's active step (prefilled). */
+export declare const openField: (core: ProviderCore, panel: ProviderPanelState | undefined) => void;
+/** Drop and reopen the text field for the (advanced) wizard step. */
+export declare const reopenField: (core: ProviderCore, panel: ProviderPanelState | undefined) => void;
+/**
+ * The wizard action flows (§4.3 add, §4.6 custom): returns the runtime
+ * members that drive the wizard, closing over the field/secret buffers and
+ * the shared helpers on `core`.
+ */
+export declare function createActions(core: ProviderCore): {
+    startPresetWizard(route: string): Promise<void>;
+    wizardSubmit(panel: ProviderPanelState): void;
+    fetchModels(panel: ProviderPanelState): void;
+    removeJustAdded(panel: ProviderPanelState): void;
+};
+//# sourceMappingURL=provider-actions.d.ts.map

package/lib/provider-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-actions.d.ts","sourceRoot":"","sources":["../src/provider-actions.ts"],"names":[],"mappings":"AAUA,OAAO,EASL,KAAK,kBAAkB,EACxB,MAAM,2BAA2B,CAAA;AAelC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEzD,2DAA2D;AAC3D,eAAO,MAAM,YAAY,2CAA4C,CAAA;AAErE,gEAAgE;AAChE,eAAO,MAAM,YAAY,0FAA2F,CAAA;AAEpH,2DAA2D;AAC3D,eAAO,MAAM,YAAY,kBAAmB,CAAA;AAE5C,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,2EAA4E,CAAA;AAEzG,yEAAyE;AACzE,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAQ1D,CAAA;AAED,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,iDAAiD;AACjD,eAAO,MAAM,WAAW,GAAI,OAAO,kBAAkB,GAAG,SAAS,KAAG,MAAM,GAAG,SAG5E,CAAA;AAED,qEAAqE;AACrE,eAAO,MAAM,UAAU,GAAI,MAAM,YAAY,KAAG,IAI/C,CAAA;AAED,wEAAwE;AACxE,eAAO,MAAM,SAAS,GAAI,MAAM,YAAY,EAAE,OAAO,kBAAkB,GAAG,SAAS,KAAG,IAYrF,CAAA;AAED,qEAAqE;AACrE,eAAO,MAAM,WAAW,GAAI,MAAM,YAAY,EAAE,OAAO,kBAAkB,GAAG,SAAS,KAAG,IAGvF,CAAA;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG;IACjD,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAC7C,WAAW,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAA;IAC5C,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAA;CACjD,CAqUA"}

package/lib/provider-actions.js

@@ -0,0 +1,417 @@
+/**
+ * `/provider` action wizard engines (design doc docs/plans/2026-09-05-provider-
+ * management.md §4.3 add-preset, §4.4 rotate, §4.6 custom, §8-S2 verify probe):
+ * the wizard text field, step submissions, persistence, and the settings
+ * path-op write. Split out of provider-command.ts purely for line budget.
+ * @module @dsh-cc/tui/provider-command-actions
+ */
+import { Input } from '@dsh-cc/pi-tui';
+import { MaskedInput } from "./components/masked-input.js";
+import { setProviderOverlay } from "./store.js";
+import { backFromWizard, setMessage, startWizardFor, wizardNext, wizardSetAnswer, wizardSetModelErrors, wizardSetNote, wizardSetVerify, } from "./store/provider-panel.js";
+import { materializeCustomProfile, materializeProfile, normalizeRouteId, routeCollision, parseModelList, verifyProbeFor, } from "./provider-flow.js";
+import { PRESETS, deriveCredentialRef, presetByRoute } from "./provider-presets.js";
+import { PROVIDER_SETTINGS_NAMESPACE, readConfiguredProviders, loadDirectory } from "./provider-read.js";
+import { setAsDefault, settingsWriteOf, writeRoute } from "./provider-settings.js";
+/** Ordered wizard steps for the add-preset flow (§4.3). */
+export const PRESET_STEPS = ['credential', 'verify', 'done'];
+/** Ordered wizard steps for the custom-provider flow (§4.6). */
+export const CUSTOM_STEPS = ['route', 'displayName', 'baseURL', 'protocol', 'ref', 'key', 'models', 'done'];
+/** Rotate/replace-key flow (§4.4): one masked key step. */
+export const ROTATE_STEPS = ['key'];
+/** §4.6 protocol single-select options (all three wire protocols). */
+export const CUSTOM_PROTOCOLS = ['openai-completions', 'openai-responses', 'anthropic-messages'];
+/** Wizard steps that render a live text `Input` (masked for secrets). */
+export const TEXT_STEPS = {
+    credential: { masked: true },
+    key: { masked: true },
+    route: { masked: false },
+    displayName: { masked: false },
+    baseURL: { masked: false },
+    ref: { masked: false },
+    models: { masked: false },
+};
+/** Line shown when the environment shadows a credential ref (§7, C4). */
+export function envShadowLine(ref) {
+    return `${ref} is supplied by your environment and read-only in this UI — unset the environment variable to manage it here.`;
+}
+export function credentialRefFor(route) {
+    return presetByRoute(route)?.credentialRef ?? deriveCredentialRef(route);
+}
+/** The live wizard step, if a wizard is open. */
+export const currentStep = (panel) => {
+    const wizard = panel?.wizard;
+    return wizard === undefined ? undefined : wizard.steps[wizard.stepIndex];
+};
+/** Clear the wizard text field and the transient key buffer (§6). */
+export const clearField = (core) => {
+    if (core.buf.field !== undefined)
+        core.buf.field.setValue('');
+    core.buf.field = undefined;
+    core.buf.secret = undefined;
+};
+/** Open a fresh text field for the wizard's active step (prefilled). */
+export const openField = (core, panel) => {
+    const step = currentStep(panel);
+    const spec = step === undefined ? undefined : TEXT_STEPS[step];
+    if (spec === undefined || panel?.wizard === undefined || step === undefined)
+        return;
+    const input = spec.masked ? new MaskedInput() : new Input();
+    const wizard = panel.wizard;
+    if (!spec.masked && step !== 'models') {
+        const answer = wizard.answers[step];
+        const prefill = step === 'route' && answer === undefined ? wizard.answers['route'] : answer;
+        if (prefill !== undefined && prefill !== '')
+            input.setValue(prefill);
+    }
+    core.buf.field = input;
+};
+/** Drop and reopen the text field for the (advanced) wizard step. */
+export const reopenField = (core, panel) => {
+    core.buf.field = undefined;
+    openField(core, panel);
+};
+/**
+ * The wizard action flows (§4.3 add, §4.6 custom): returns the runtime
+ * members that drive the wizard, closing over the field/secret buffers and
+ * the shared helpers on `core`.
+ */
+export function createActions(core) {
+    const { rt, buf } = core;
+    const submitKey = (panel, step, value) => {
+        const wizard = panel.wizard;
+        if (value === '') {
+            // Empty is absent (C4): never write a blank key.
+            clearField(core);
+            rt.emit(setProviderOverlay(rt.state(), setMessage(backFromWizard(panel), 'No key entered — nothing was written.')));
+            return;
+        }
+        buf.secret = value;
+        if (step === 'key' && wizard.kind === 'rotate') {
+            core.begin(rotateKey(wizard.route, value));
+            return;
+        }
+        if (step === 'key' && wizard.kind === 'custom') {
+            // The custom flow persists at the models step; keep the key buffered.
+            buf.field?.setValue('');
+            rt.emit(setProviderOverlay(rt.state(), wizardNext(panel)));
+            reopenField(core, rt.state().providerPanel);
+            return;
+        }
+        // Preset credential step: persist key then profile, then verify (§4.3.2).
+        core.begin(persistPreset(wizard.route, value));
+    };
+    const submitText = (panel, step, value) => {
+        const wizard = panel.wizard;
+        if (step === 'route') {
+            const normalized = normalizeRouteId(value);
+            if (normalized === null) {
+                buf.field?.setValue('');
+                core.patch(p => wizardSetNote(p, 'Enter a route id using lowercase letters, numbers, and dashes.'));
+                return;
+            }
+            const collision = routeCollision(normalized, {
+                configured: readConfiguredProviders(settingsWriteOf(core)),
+                presets: PRESETS,
+                directory: loadDirectory(rt.ctx.get('llm')),
+            });
+            if (collision !== null) {
+                const what = collision === 'configured' ? 'already configured' : collision === 'preset' ? 'offered as a built-in preset' : 'known to the provider directory';
+                buf.field?.setValue('');
+                core.patch(p => wizardSetNote(p, `Route "${normalized}" is ${what} — pick another id.`));
+                return;
+            }
+            core.patch(p => wizardSetAnswer(wizardNext(wizardSetAnswer(p, 'ref', deriveCredentialRef(normalized))), 'route', normalized));
+            reopenField(core, rt.state().providerPanel);
+            return;
+        }
+        if (step === 'displayName') {
+            if (value.trim() === '') {
+                buf.field?.setValue('');
+                core.patch(p => wizardSetNote(p, 'Enter a display name.'));
+                return;
+            }
+            core.patch(p => wizardSetAnswer(wizardNext(p), 'displayName', value.trim()));
+            reopenField(core, rt.state().providerPanel);
+            return;
+        }
+        if (step === 'baseURL') {
+            let parsed;
+            try {
+                parsed = new URL(value.trim());
+            }
+            catch {
+                buf.field?.setValue('');
+                core.patch(p => wizardSetNote(p, 'baseURL must be an absolute http(s) URL — e.g. https://gw.example.com/v1'));
+                return;
+            }
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+                buf.field?.setValue('');
+                core.patch(p => wizardSetNote(p, 'baseURL must be an absolute http(s) URL — e.g. https://gw.example.com/v1'));
+                return;
+            }
+            core.patch(p => wizardSetAnswer(wizardNext(p), 'baseURL', value.trim()));
+            reopenField(core, rt.state().providerPanel);
+            return;
+        }
+        if (step === 'ref') {
+            const ref = value.trim() === '' ? deriveCredentialRef(wizard.answers['route'] ?? wizard.route) : value.trim();
+            core.patch(p => wizardSetAnswer(wizardNext(p), 'ref', ref));
+            reopenField(core, rt.state().providerPanel);
+            return;
+        }
+        if (step === 'models') {
+            const { models, errors } = parseModelList(buf.field?.getValue() ?? '');
+            if (errors.length > 0) {
+                // Per-line errors; the field keeps its text so the user can fix it.
+                core.patch(p => wizardSetModelErrors(p, errors));
+                return;
+            }
+            core.patch(p => wizardSetAnswer(p, 'models', JSON.stringify(models)));
+            core.begin(persistCustom());
+        }
+    };
+    const rotateKey = async (route, key) => {
+        const ref = credentialRefFor(route);
+        try {
+            await rt.ctx.get('credentials')?.set(ref, key);
+        }
+        catch {
+            clearField(core);
+            core.patch(p => setMessage(p, envShadowLine(ref)));
+            return;
+        }
+        clearField(core);
+        core.patch(p => {
+            const { wizard: _dropped, ...rest } = p;
+            return setMessage({ ...rest, phase: 'detail' }, `Key for ${ref} updated — credentials resolve per request, so the next message uses it.`);
+        });
+    };
+    const persistPreset = async (route, key) => {
+        const preset = presetByRoute(route);
+        if (preset === undefined)
+            return;
+        const ref = preset.credentialRef;
+        try {
+            await rt.ctx.get('credentials')?.set(ref, key);
+        }
+        catch {
+            // Env-shadow rejection: explain, keep the wizard alive on the key step.
+            clearField(core);
+            core.patch(p => wizardSetNote(p, envShadowLine(ref)));
+            return;
+        }
+        const profile = { ...materializeProfile(preset), apiKeyEnv: ref };
+        const error = await writeRoute(core, { op: 'set', path: ['providers', route], value: profile });
+        clearField(core);
+        if (error !== undefined) {
+            core.patch(p => wizardSetNote(p, error));
+            return;
+        }
+        core.patch(p => wizardNext(p));
+        await runVerify(preset, key);
+    };
+    const runVerify = async (preset, key) => {
+        // Draft-form probe (C5, review Blocker B1): NEVER the provider form.
+        const probe = verifyProbeFor({ baseURL: preset.probe?.baseURL, api: preset.probe?.api, apiKey: key });
+        if (probe === null) {
+            buf.secret = undefined;
+            core.patch(p => wizardSetVerify(wizardNext(p), {
+                status: 'skipped',
+                message: "This endpoint can't be listed programmatically — the first message is the test.",
+            }));
+            return;
+        }
+        const llm = rt.ctx.get('llm');
+        if (llm === undefined || typeof llm.discoverModels !== 'function') {
+            buf.secret = undefined;
+            core.patch(p => wizardSetVerify(wizardNext(p), {
+                status: 'skipped',
+                message: 'Model discovery is unavailable in this profile — the probe was skipped; the first message is the test.',
+            }));
+            return;
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 15000);
+        try {
+            const models = await llm.discoverModels(PROVIDER_SETTINGS_NAMESPACE, { ...probe, signal: controller.signal });
+            core.patch(p => wizardSetVerify(wizardNext(p), { status: 'ok', message: `${models.length} models reachable` }));
+        }
+        catch (error) {
+            const reason = error instanceof Error ? error.message : String(error);
+            core.patch(p => wizardSetVerify(p, {
+                status: 'failed',
+                message: `Verification failed: ${reason} — the configuration was kept; enter keeps it, x removes it.`,
+            }));
+            return;
+        }
+        finally {
+            clearTimeout(timer);
+            buf.secret = undefined;
+        }
+    };
+    const persistCustom = async () => {
+        const wizard = rt.state().providerPanel?.wizard;
+        if (wizard === undefined)
+            return;
+        const route = wizard.answers['route'] ?? '';
+        const ref = wizard.answers['ref'] ?? deriveCredentialRef(route);
+        let models = [];
+        try {
+            models = JSON.parse(wizard.answers['models'] ?? '[]');
+        }
+        catch {
+            models = [];
+        }
+        try {
+            await rt.ctx.get('credentials')?.set(ref, buf.secret ?? '');
+        }
+        catch {
+            clearField(core);
+            core.patch(p => wizardSetNote(p, envShadowLine(ref)));
+            return;
+        }
+        let profile;
+        try {
+            profile = {
+                apiKeyEnv: ref,
+                ...materializeCustomProfile({
+                    routeId: route,
+                    displayName: wizard.answers['displayName'] ?? route,
+                    baseURL: wizard.answers['baseURL'] ?? '',
+                    api: wizard.answers['api'] ?? '',
+                    ...(models.length > 0 ? { models } : {}),
+                }),
+            };
+        }
+        catch (error) {
+            clearField(core);
+            core.patch(p => wizardSetNote(p, error instanceof Error ? error.message : String(error)));
+            return;
+        }
+        const error = await writeRoute(core, { op: 'set', path: ['providers', route], value: profile });
+        clearField(core);
+        if (error !== undefined) {
+            core.patch(p => wizardSetNote(p, error));
+            return;
+        }
+        core.patch(p => setMessage(wizardNext(p), undefined));
+    };
+    return {
+        /** §4.3 add flow for a preset (custom wizard seeded for unknown ids). */
+        async startPresetWizard(route) {
+            const preset = presetByRoute(route);
+            const panel = rt.state().providerPanel;
+            if (panel === undefined)
+                return;
+            if (preset === undefined) {
+                // Unknown id: run the custom wizard with the id seeded (§4.6 shape).
+                const normalized = normalizeRouteId(route) ?? '';
+                rt.emit(setProviderOverlay(rt.state(), startWizardFor(panel, '', [...CUSTOM_STEPS], {
+                    kind: 'custom',
+                    ...(normalized === '' ? {} : { answers: { route: normalized, ref: deriveCredentialRef(normalized) } }),
+                })));
+                openField(core, rt.state().providerPanel);
+                return;
+            }
+            void (async () => {
+                const ref = preset.credentialRef;
+                const state = await core.describeRef(ref);
+                const fresh = rt.state().providerPanel;
+                if (fresh === undefined || fresh.phase !== 'list')
+                    return;
+                if (state?.configured === true && state.source === 'env') {
+                    // Env-shadowed: skip the key step with the one-line explanation (§4.3.1).
+                    rt.emit(setProviderOverlay(rt.state(), wizardSetNote(wizardNext(startWizardFor(fresh, route, [...PRESET_STEPS], {
+                        kind: 'preset',
+                        answers: { ref, credential: 'env' },
+                    })), `${ref} is already supplied by your environment — the key step was skipped.`)));
+                    return;
+                }
+                rt.emit(setProviderOverlay(rt.state(), startWizardFor(fresh, route, [...PRESET_STEPS], { kind: 'preset', answers: { ref } })));
+                openField(core, rt.state().providerPanel);
+            })();
+        },
+        /** Advance the wizard from its current step. */
+        wizardSubmit(panel) {
+            const wizard = panel.wizard;
+            if (wizard === undefined)
+                return;
+            const step = wizard.steps[wizard.stepIndex];
+            if (step === undefined)
+                return;
+            if (step === 'protocol') {
+                const api = CUSTOM_PROTOCOLS[wizard.selectIndex ?? 0] ?? CUSTOM_PROTOCOLS[0];
+                core.patch(p => wizardSetAnswer(wizardNext(p), 'api', api));
+                reopenField(core, rt.state().providerPanel);
+                return;
+            }
+            if (step === 'verify') {
+                // Enter = keep (§4.3.2): the config stays even when the probe failed.
+                if (wizard.verify?.status === 'failed')
+                    core.patch(p => wizardSetNote(wizardNext(p), undefined));
+                return;
+            }
+            if (step === 'done') {
+                core.begin(setAsDefault(core, wizard.kind === 'custom' ? wizard.answers['route'] ?? wizard.route : wizard.route));
+                return;
+            }
+            const spec = TEXT_STEPS[step];
+            if (spec === undefined)
+                return;
+            const value = buf.field?.getValue() ?? '';
+            if (spec.masked)
+                submitKey(panel, step, value);
+            else
+                submitText(panel, step, value);
+        },
+        /** Models-step fetch (tab): draft-form probe → prefill. */
+        fetchModels(panel) {
+            const wizard = panel.wizard;
+            if (wizard === undefined || wizard.steps[wizard.stepIndex] !== 'models')
+                return;
+            const probe = verifyProbeFor({ baseURL: wizard.answers['baseURL'], api: wizard.answers['api'], apiKey: buf.secret });
+            if (probe === null) {
+                core.patch(p => wizardSetNote(p, "This endpoint can't be listed programmatically — enter the model ids manually."));
+                return;
+            }
+            const llm = rt.ctx.get('llm');
+            if (llm === undefined || typeof llm.discoverModels !== 'function') {
+                core.patch(p => wizardSetNote(p, 'Model discovery is unavailable in this profile — enter the model ids manually.'));
+                return;
+            }
+            core.begin((async () => {
+                try {
+                    const models = await llm.discoverModels(PROVIDER_SETTINGS_NAMESPACE, probe);
+                    buf.field?.setValue(models.map(m => m.id).join(', '));
+                    core.patch(p => wizardSetNote(p, undefined));
+                }
+                catch (error) {
+                    const reason = error instanceof Error ? error.message : String(error);
+                    core.patch(p => wizardSetNote(p, `Model fetch failed: ${reason} — enter the ids manually.`));
+                }
+            })());
+        },
+        /** keep/remove choice on a failed verify — remove unsets the just-written route. */
+        removeJustAdded(panel) {
+            const route = panel.wizard?.route;
+            if (route === undefined || route === '')
+                return;
+            core.begin((async () => {
+                const error = await writeRoute(core, { op: 'unset', path: ['providers', route] });
+                if (error !== undefined) {
+                    core.patch(p => setMessage(p, `Removal failed: ${error}`));
+                    return;
+                }
+                try {
+                    await rt.ctx.get('credentials')?.unset(credentialRefFor(route));
+                }
+                catch {
+                    // Best-effort: the route removal stands regardless.
+                }
+                core.patch(p => setMessage(backFromWizard(p), `Removed ${route}.`));
+            })());
+        }
+    };
+}
+//# sourceMappingURL=provider-actions.js.map