@elinpf/dsh-ops-access-ui 0.1.0

package/lib/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Ops-access-ui: carries the browser half of the @-access-mention feature.
+ *
+ * The host row exists for exactly one reason: client-half discovery. The web
+ * app's ClientModuleRegistry scans the composed HOST cordis entries for
+ * packages with `dsh.client`, so this package must stay mounted host-plane
+ * for the panel script to reach the browser. The host side itself is empty —
+ * the candidate data route lives in the ops-access core package (preset
+ * plane, next to the data; see its src/index.ts), because reaching the
+ * preset-realm service from here would require stateful dsh internals that
+ * dual-instance under an external package's node_modules.
+ *
+ * @module @elinpf/dsh-ops-access-ui
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+export declare const name = "ops-access-ui";
+export declare const inject: string[];
+export declare const Config: z<Schemastery.ObjectS<{}>, Schemastery.ObjectT<{}>>;
+export declare function apply(_ctx: Context, _config: Record<string, never>): void;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.js

@@ -0,0 +1,24 @@
+/**
+ * Ops-access-ui: carries the browser half of the @-access-mention feature.
+ *
+ * The host row exists for exactly one reason: client-half discovery. The web
+ * app's ClientModuleRegistry scans the composed HOST cordis entries for
+ * packages with `dsh.client`, so this package must stay mounted host-plane
+ * for the panel script to reach the browser. The host side itself is empty —
+ * the candidate data route lives in the ops-access core package (preset
+ * plane, next to the data; see its src/index.ts), because reaching the
+ * preset-realm service from here would require stateful dsh internals that
+ * dual-instance under an external package's node_modules.
+ *
+ * @module @elinpf/dsh-ops-access-ui
+ */
+import z from '@deepseek-ai/schemastery';
+// ── Plugin identity ───────────────────────────────────────────────────────────
+export const name = 'ops-access-ui';
+export const inject = [];
+// ── Config ───────────────────────────────────────────────────────────────────
+export const Config = z.object({});
+export function apply(_ctx, _config) {
+    // Intentionally empty — see the module doc.
+}
+//# sourceMappingURL=index.js.map

package/lib/invariant.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Invariant companion for @elinpf/dsh-ops-access-ui.
+ *
+ * @module @elinpf/dsh-ops-access-ui/invariant
+ */
+/** Cordis companion plugin name. */
+declare const name = "ops-access-ui-invariant";
+/** Service required before the companion can reserve package ownership. */
+declare const inject: string[];
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Context carrying the invariant service.
+ * @returns a promise resolving after registration.
+ */
+declare const apply: (ctx: any) => Promise<void>;
+export { apply, inject, name };
+//# sourceMappingURL=invariant.d.ts.map

package/lib/invariant.js

@@ -0,0 +1,28 @@
+/**
+ * Invariant companion for @elinpf/dsh-ops-access-ui.
+ *
+ * @module @elinpf/dsh-ops-access-ui/invariant
+ */
+const PACKAGE_NAME = '@elinpf/dsh-ops-access-ui';
+/** Cordis companion plugin name. */
+const name = 'ops-access-ui-invariant';
+/** Service required before the companion can reserve package ownership. */
+const inject = ['invariants'];
+/**
+ * No runtime invariant: this package appends no session events and owns no
+ * durable state — it is a pure browser-half carrier. All credential and
+ * grant state lives in the ops-access core package (whose gate owns the
+ * relevant invariants); the surfaces here only render route data, and the
+ * host row is empty by design (client-bundle discovery only).
+ */
+const install = () => { };
+/**
+ * Register this package's invariant companion.
+ * @param ctx - Context carrying the invariant service.
+ * @returns a promise resolving after registration.
+ */
+const apply = async (ctx) => {
+    ctx.invariants.register(PACKAGE_NAME, install);
+};
+export { apply, inject, name };
+//# sourceMappingURL=invariant.js.map

package/lib/types.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Pure wire types for @elinpf/dsh-ops-access-ui.
+ *
+ * These mirror the HTTP routes served by the ops-access core package
+ * (preset plane): the @-mention list route, the admin routes, and the
+ * access-gate's human-side panel routes. Types only — no runtime values;
+ * the client half imports them (erased at bundle time) and re-exports the
+ * public group for compatibility.
+ *
+ * @module @elinpf/dsh-ops-access-ui/types
+ */
+export interface AccessMentionCandidate {
+    kind: string;
+    name: string;
+    description?: string;
+    environment?: string;
+    /** Tier readiness — entries with only an rw tier still appear (ro derivable). */
+    ro: boolean;
+    rw: boolean;
+    /** Per-tier probe verdicts for ok tiers, when the provider probes (ticket 10). */
+    probe?: {
+        ro?: string;
+        rw?: string;
+    };
+    mention: string;
+}
+/** One entry in the merged admin view: envelope + per-tier validation, never fields. */
+export interface AdminEntry {
+    kind: string;
+    /** Stable id (registry key). */
+    name: string;
+    /** envelope.name is the editable display label. */
+    envelope: {
+        name?: string;
+        description?: string;
+        environment?: string;
+    };
+    tiers: {
+        ro: AdminTierStatus;
+        rw: AdminTierStatus;
+    };
+}
+/** Validation status of one entry in one tier. */
+export interface AdminTierStatus {
+    ok: boolean;
+    error?: string;
+    /** Capability-probe outcome recorded at save time (ticket 10). */
+    probe?: {
+        status: 'verified' | 'mismatch' | 'unverifiable';
+        detail?: string;
+        probedAt: string;
+    };
+}
+/** One registered credential kind: its JSON Schema and optional field docs. */
+export interface KindDescriptor {
+    kind: string;
+    jsonSchema: Record<string, unknown>;
+    fieldsDoc?: string;
+    fileFields?: string[];
+}
+/** Body for POST /ops-access/admin/entry. */
+export interface SubmitEntryBody {
+    kind: string;
+    /** The entry's stable id (registry key, paths, mentions). */
+    name: string;
+    tier: 'ro' | 'rw';
+    fields: Record<string, unknown>;
+    contentFiles?: Record<string, string>;
+    /** Display label (editable, not an identity). */
+    displayName?: string;
+    description?: string;
+    environment?: string;
+}
+/** Generic API result shape from the admin routes. */
+export interface ApiResult {
+    ok: boolean;
+    error?: string;
+}
+/** One live grant row as reported by GET /ops-access/grants. */
+export interface PanelGrant {
+    kind: string;
+    name: string;
+    expiresAt: number;
+    reason: string;
+    approvedBy: string;
+    remainingMinutes: number;
+}
+/** One parked request_access call awaiting a human decision. */
+export interface PanelPendingRequest {
+    id: string;
+    session: string;
+    /** The dispatching session, when the requester is a spawned sub-agent (血缘). */
+    parentSession?: string;
+    kind: string;
+    name: string;
+    requestedTtlMinutes: number;
+    reason: string;
+    createdAt: number;
+    decidesAt: number;
+}
+/** One operator lockdown row as reported by GET /ops-access/grants (ticket 12). */
+export interface PanelDenied {
+    kind: string;
+    name: string;
+    deniedAt: number;
+    reason: string;
+    deniedBy: string;
+}
+/** One cross-session grant row as reported by GET /ops-access/grants/all. */
+export interface OverviewGrant extends PanelGrant {
+    session: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types.js

@@ -0,0 +1,13 @@
+/**
+ * Pure wire types for @elinpf/dsh-ops-access-ui.
+ *
+ * These mirror the HTTP routes served by the ops-access core package
+ * (preset plane): the @-mention list route, the admin routes, and the
+ * access-gate's human-side panel routes. Types only — no runtime values;
+ * the client half imports them (erased at bundle time) and re-exports the
+ * public group for compatibility.
+ *
+ * @module @elinpf/dsh-ops-access-ui/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@elinpf/dsh-ops-access-ui",
+  "version": "0.1.0",
+  "description": "Browser half carrier for @-mentioning ops-access profiles: the host row exists only for client-bundle discovery; candidates come from GET /ops-access/list served by @elinpf/dsh-ops-access, and mention expansion (agent/pre-step) lives there too.",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./client": {
+      "default": "./lib/client.js"
+    },
+    "./invariant": {
+      "types": "./lib/invariant.d.ts",
+      "default": "./lib/invariant.js"
+    },
+    "./types": {
+      "types": "./lib/types.d.ts",
+      "default": "./lib/types.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/index.js",
+    "lib/client.js",
+    "lib/invariant.js",
+    "lib/types.js",
+    "lib/**/*.d.ts",
+    "cordis.patch.yml"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web"
+    }
+  },
+  "dependencies": {
+    "@deepseek-ai/schemastery": "^3.18.1"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.1",
+    "@deepseek-ai/dsh-invariants": "^0.0.1-rc.1",
+    "react": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "4.0.1",
+    "esbuild": "^0.24.0",
+    "typescript": "^5.4.0",
+    "vitest": "^4.1.11",
+    "@deepseek-ai/dsh-client-ui-input-trigger": "0.0.1-rc.3",
+    "react": "18.3.1"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc && node esbuild.config.mjs",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}