@flanksource/clicky-ui 0.3.27 → 0.3.29

package/dist/data/ai/SpecRuntimeEditor/permission-mode-visuals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-mode-visuals.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/permission-mode-visuals.ts"],"sourcesContent":["import type { AgentActionMeta } from \"../agent-action-icons\";\nimport { PERMISSION_MODE_ICONS } from \"../agent-action-icons\";\nimport {\n  SPEC_PERMISSION_MODES,\n  type SpecPermissionMode,\n} from \"../SpecRuntimeEditor.model\";\nimport type { RuntimePermissionSupport } from \"../../runtime/runtime-mode\";\nimport {\n  UiHandPalm,\n  UiLock,\n  UiLockOpen,\n  UiPauseCircle,\n  UiPencilSimpleLine,\n  UiShieldSlash,\n} from \"../../../icons\";\n\ntype PermissionModeVisuals = Record<SpecPermissionMode, AgentActionMeta>;\ntype AliasPair = readonly [SpecPermissionMode, SpecPermissionMode];\n\nconst CODEX_PERMISSION_MODES: PermissionModeVisuals = {\n  default: { icon: UiLock, tone: \"slate\", label: \"Read only\" },\n  acceptEdits: {\n    icon: UiHandPalm,\n    tone: \"sky\",\n    label: \"Ask for approval\",\n  },\n  auto: { icon: UiHandPalm, tone: \"sky\", label: \"Ask for approval\" },\n  bypassPermissions: {\n    icon: UiLockOpen,\n    tone: \"rose\",\n    label: \"Full access\",\n  },\n  dontAsk: { icon: UiShieldSlash, tone: \"rose\", label: \"Don't ask\" },\n  plan: { icon: UiPauseCircle, tone: \"teal\", label: \"Plan\" },\n};\n\nconst GEMINI_PERMISSION_MODES: PermissionModeVisuals = {\n  default: { icon: UiHandPalm, tone: \"indigo\", label: \"Manual\" },\n  acceptEdits: {\n    icon: UiPencilSimpleLine,\n    tone: \"amber\",\n    label: \"Auto edit\",\n  },\n  auto: { icon: UiPencilSimpleLine, tone: \"amber\", label: \"Auto edit\" },\n  bypassPermissions: { icon: UiShieldSlash, tone: \"rose\", label: \"YOLO\" },\n  dontAsk: { icon: UiShieldSlash, tone: \"rose\", label: \"YOLO\" },\n  plan: { icon: UiPauseCircle, tone: \"emerald\", label: \"Plan\" },\n};\n\nconst PROVIDER_VISUALS: Partial<Record<string, PermissionModeVisuals>> = {\n  claude: PERMISSION_MODE_ICONS,\n  codex: CODEX_PERMISSION_MODES,\n  gemini: GEMINI_PERMISSION_MODES,\n};\n\nconst PROVIDER_ALIASES: Partial<Record<string, AliasPair[]>> = {\n  codex: [[\"acceptEdits\", \"auto\"]],\n  gemini: [\n    [\"acceptEdits\", \"auto\"],\n    [\"bypassPermissions\", \"dontAsk\"],\n  ],\n};\n\nexport function permissionModeVisual(\n  family: string | undefined,\n  mode: SpecPermissionMode,\n): AgentActionMeta {\n  return PROVIDER_VISUALS[family ?? \"\"]?.[mode] ?? PERMISSION_MODE_ICONS[mode];\n}\n\nexport function collapsePermissionModeAliases(\n  family: string | undefined,\n  available: SpecPermissionMode[],\n  current: SpecPermissionMode | undefined,\n  support: Record<string, RuntimePermissionSupport>,\n): SpecPermissionMode[] {\n  const hidden = new Set<SpecPermissionMode>();\n  for (const pair of PROVIDER_ALIASES[family ?? \"\"] ?? []) {\n    if (!pair.every((mode) => available.includes(mode))) continue;\n    if (!equivalentEnforcement(support[pair[0]], support[pair[1]])) continue;\n    const keep = aliasRepresentative(pair, current, support);\n    hidden.add(pair[0] === keep ? pair[1] : pair[0]);\n  }\n  return SPEC_PERMISSION_MODES.filter(\n    (mode) => available.includes(mode) && !hidden.has(mode),\n  );\n}\n\nfunction aliasRepresentative(\n  pair: AliasPair,\n  current: SpecPermissionMode | undefined,\n  support: Record<string, RuntimePermissionSupport>,\n): SpecPermissionMode {\n  if (current && pair.includes(current)) return current;\n  const [left, right] = pair;\n  if (support[right]?.kind === \"native\" && support[left]?.kind !== \"native\") {\n    return right;\n  }\n  return left;\n}\n\nconst ENFORCEMENT_EFFECT_KEYS = [\"flag\", \"sandbox\", \"approval\"] as const;\n\nfunction equivalentEnforcement(\n  left: RuntimePermissionSupport | undefined,\n  right: RuntimePermissionSupport | undefined,\n): boolean {\n  const publishesEnforcement = ENFORCEMENT_EFFECT_KEYS.some(\n    (key) =>\n      left?.effects?.[key] !== undefined || right?.effects?.[key] !== undefined,\n  );\n  return (\n    publishesEnforcement &&\n    ENFORCEMENT_EFFECT_KEYS.every(\n      (key) => left?.effects?.[key] === right?.effects?.[key],\n    )\n  );\n}\n"],"names":[],"mappings":";;;;;;;;AAmBA,MAAM,yBAAgD;AAAA,EACpD,SAAS,EAAE,MAAM,QAAQ,MAAM,SAAS,OAAO,YAAA;AAAA,EAC/C,aAAa;AAAA,IACX,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO;AAAA,EAAA;AAAA,EAET,MAAM,EAAE,MAAM,YAAY,MAAM,OAAO,OAAO,mBAAA;AAAA,EAC9C,mBAAmB;AAAA,IACjB,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO;AAAA,EAAA;AAAA,EAET,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,OAAO,YAAA;AAAA,EACrD,MAAM,EAAE,MAAM,eAAe,MAAM,QAAQ,OAAO,OAAA;AACpD;AAEA,MAAM,0BAAiD;AAAA,EACrD,SAAS,EAAE,MAAM,YAAY,MAAM,UAAU,OAAO,SAAA;AAAA,EACpD,aAAa;AAAA,IACX,MAAM;AAAA,IACN,MAAM;AAAA,IACN,OAAO;AAAA,EAAA;AAAA,EAET,MAAM,EAAE,MAAM,oBAAoB,MAAM,SAAS,OAAO,YAAA;AAAA,EACxD,mBAAmB,EAAE,MAAM,eAAe,MAAM,QAAQ,OAAO,OAAA;AAAA,EAC/D,SAAS,EAAE,MAAM,eAAe,MAAM,QAAQ,OAAO,OAAA;AAAA,EACrD,MAAM,EAAE,MAAM,eAAe,MAAM,WAAW,OAAO,OAAA;AACvD;AAEA,MAAM,mBAAmE;AAAA,EACvE,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AACV;AAEA,MAAM,mBAAyD;AAAA,EAC7D,OAAO,CAAC,CAAC,eAAe,MAAM,CAAC;AAAA,EAC/B,QAAQ;AAAA,IACN,CAAC,eAAe,MAAM;AAAA,IACtB,CAAC,qBAAqB,SAAS;AAAA,EAAA;AAEnC;AAEO,SAAS,qBACd,QACA,MACiB;;AACjB,WAAO,sBAAiB,UAAU,EAAE,MAA7B,mBAAiC,UAAS,sBAAsB,IAAI;AAC7E;AAEO,SAAS,8BACd,QACA,WACA,SACA,SACsB;AACtB,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,iBAAiB,UAAU,EAAE,KAAK,CAAA,GAAI;AACvD,QAAI,CAAC,KAAK,MAAM,CAAC,SAAS,UAAU,SAAS,IAAI,CAAC,EAAG;AACrD,QAAI,CAAC,sBAAsB,QAAQ,KAAK,CAAC,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAG;AAChE,UAAM,OAAO,oBAAoB,MAAM,SAAS,OAAO;AACvD,WAAO,IAAI,KAAK,CAAC,MAAM,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;AAAA,EACjD;AACA,SAAO,sBAAsB;AAAA,IAC3B,CAAC,SAAS,UAAU,SAAS,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI;AAAA,EAAA;AAE1D;AAEA,SAAS,oBACP,MACA,SACA,SACoB;;AACpB,MAAI,WAAW,KAAK,SAAS,OAAO,EAAG,QAAO;AAC9C,QAAM,CAAC,MAAM,KAAK,IAAI;AACtB,QAAI,aAAQ,KAAK,MAAb,mBAAgB,UAAS,cAAY,aAAQ,IAAI,MAAZ,mBAAe,UAAS,UAAU;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,MAAM,0BAA0B,CAAC,QAAQ,WAAW,UAAU;AAE9D,SAAS,sBACP,MACA,OACS;AACT,QAAM,uBAAuB,wBAAwB;AAAA,IACnD,CAAC,QAAA;;AACC,iDAAM,YAAN,mBAAgB,UAAS,YAAa,oCAAO,YAAP,mBAAiB,UAAS;AAAA;AAAA,EAAA;AAEpE,SACE,wBACA,wBAAwB;AAAA,IACtB,CAAC;;AAAQ,iDAAM,YAAN,mBAAgB,YAAS,oCAAO,YAAP,mBAAiB;AAAA;AAAA,EAAG;AAG5D;"}

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const presets = require("./presets.cjs");
+function readSavedPermissionPresets() {
+  if (typeof window === "undefined") return [];
+  try {
+    const raw = window.localStorage.getItem(presets.SPEC_PERMISSION_PRESET_STORAGE_KEY);
+    if (!raw) return [];
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(isSavedPermissionPreset);
+  } catch {
+    return [];
+  }
+}
+function writeSavedPermissionPresets(presets$1) {
+  if (typeof window === "undefined") return;
+  window.localStorage.setItem(
+    presets.SPEC_PERMISSION_PRESET_STORAGE_KEY,
+    JSON.stringify(presets$1)
+  );
+}
+function permissionPresetSlug(value) {
+  const slug = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return slug || "preset";
+}
+function isSavedPermissionPreset(value) {
+  if (!value || typeof value !== "object") return false;
+  const item = value;
+  return typeof item.id === "string" && typeof item.label === "string" && typeof item.updatedAt === "string" && !!item.snapshot && typeof item.snapshot === "object" && !!item.snapshot.permissions;
+}
+exports.permissionPresetSlug = permissionPresetSlug;
+exports.readSavedPermissionPresets = readSavedPermissionPresets;
+exports.writeSavedPermissionPresets = writeSavedPermissionPresets;
+//# sourceMappingURL=permission-preset-storage.cjs.map

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-preset-storage.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/permission-preset-storage.ts"],"sourcesContent":["import {\n  SPEC_PERMISSION_PRESET_STORAGE_KEY,\n  type SavedPermissionPreset,\n} from \"./presets\";\n\nexport function readSavedPermissionPresets(): SavedPermissionPreset[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(SPEC_PERMISSION_PRESET_STORAGE_KEY);\n    if (!raw) return [];\n    const parsed = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(isSavedPermissionPreset);\n  } catch {\n    return [];\n  }\n}\n\nexport function writeSavedPermissionPresets(presets: SavedPermissionPreset[]) {\n  if (typeof window === \"undefined\") return;\n  window.localStorage.setItem(\n    SPEC_PERMISSION_PRESET_STORAGE_KEY,\n    JSON.stringify(presets),\n  );\n}\n\nexport function permissionPresetSlug(value: string) {\n  const slug = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"preset\";\n}\n\nfunction isSavedPermissionPreset(\n  value: unknown,\n): value is SavedPermissionPreset {\n  if (!value || typeof value !== \"object\") return false;\n  const item = value as Partial<SavedPermissionPreset>;\n  return (\n    typeof item.id === \"string\" &&\n    typeof item.label === \"string\" &&\n    typeof item.updatedAt === \"string\" &&\n    !!item.snapshot &&\n    typeof item.snapshot === \"object\" &&\n    !!item.snapshot.permissions\n  );\n}\n"],"names":["SPEC_PERMISSION_PRESET_STORAGE_KEY","presets"],"mappings":";;;AAKO,SAAS,6BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO,CAAA;AAC1C,MAAI;AACF,UAAM,MAAM,OAAO,aAAa,QAAQA,QAAAA,kCAAkC;AAC1E,QAAI,CAAC,IAAK,QAAO,CAAA;AACjB,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,CAAC,MAAM,QAAQ,MAAM,UAAU,CAAA;AACnC,WAAO,OAAO,OAAO,uBAAuB;AAAA,EAC9C,QAAQ;AACN,WAAO,CAAA;AAAA,EACT;AACF;AAEO,SAAS,4BAA4BC,WAAkC;AAC5E,MAAI,OAAO,WAAW,YAAa;AACnC,SAAO,aAAa;AAAA,IAClBD,QAAAA;AAAAA,IACA,KAAK,UAAUC,SAAO;AAAA,EAAA;AAE1B;AAEO,SAAS,qBAAqB,OAAe;AAClD,QAAM,OAAO,MACV,KAAA,EACA,YAAA,EACA,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AAEA,SAAS,wBACP,OACgC;AAChC,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,OAAO;AACb,SACE,OAAO,KAAK,OAAO,YACnB,OAAO,KAAK,UAAU,YACtB,OAAO,KAAK,cAAc,YAC1B,CAAC,CAAC,KAAK,YACP,OAAO,KAAK,aAAa,YACzB,CAAC,CAAC,KAAK,SAAS;AAEpB;;;;"}

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.d.ts

@@ -0,0 +1,5 @@
+import { SavedPermissionPreset } from './presets';
+export declare function readSavedPermissionPresets(): SavedPermissionPreset[];
+export declare function writeSavedPermissionPresets(presets: SavedPermissionPreset[]): void;
+export declare function permissionPresetSlug(value: string): string;
+//# sourceMappingURL=permission-preset-storage.d.ts.map

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-preset-storage.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/permission-preset-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,WAAW,CAAC;AAEnB,wBAAgB,0BAA0B,IAAI,qBAAqB,EAAE,CAWpE;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,qBAAqB,EAAE,QAM3E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,UAOjD"}

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.js

@@ -0,0 +1,35 @@
+import { SPEC_PERMISSION_PRESET_STORAGE_KEY } from "./presets.js";
+function readSavedPermissionPresets() {
+  if (typeof window === "undefined") return [];
+  try {
+    const raw = window.localStorage.getItem(SPEC_PERMISSION_PRESET_STORAGE_KEY);
+    if (!raw) return [];
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(isSavedPermissionPreset);
+  } catch {
+    return [];
+  }
+}
+function writeSavedPermissionPresets(presets) {
+  if (typeof window === "undefined") return;
+  window.localStorage.setItem(
+    SPEC_PERMISSION_PRESET_STORAGE_KEY,
+    JSON.stringify(presets)
+  );
+}
+function permissionPresetSlug(value) {
+  const slug = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+  return slug || "preset";
+}
+function isSavedPermissionPreset(value) {
+  if (!value || typeof value !== "object") return false;
+  const item = value;
+  return typeof item.id === "string" && typeof item.label === "string" && typeof item.updatedAt === "string" && !!item.snapshot && typeof item.snapshot === "object" && !!item.snapshot.permissions;
+}
+export {
+  permissionPresetSlug,
+  readSavedPermissionPresets,
+  writeSavedPermissionPresets
+};
+//# sourceMappingURL=permission-preset-storage.js.map

package/dist/data/ai/SpecRuntimeEditor/permission-preset-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-preset-storage.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/permission-preset-storage.ts"],"sourcesContent":["import {\n  SPEC_PERMISSION_PRESET_STORAGE_KEY,\n  type SavedPermissionPreset,\n} from \"./presets\";\n\nexport function readSavedPermissionPresets(): SavedPermissionPreset[] {\n  if (typeof window === \"undefined\") return [];\n  try {\n    const raw = window.localStorage.getItem(SPEC_PERMISSION_PRESET_STORAGE_KEY);\n    if (!raw) return [];\n    const parsed = JSON.parse(raw);\n    if (!Array.isArray(parsed)) return [];\n    return parsed.filter(isSavedPermissionPreset);\n  } catch {\n    return [];\n  }\n}\n\nexport function writeSavedPermissionPresets(presets: SavedPermissionPreset[]) {\n  if (typeof window === \"undefined\") return;\n  window.localStorage.setItem(\n    SPEC_PERMISSION_PRESET_STORAGE_KEY,\n    JSON.stringify(presets),\n  );\n}\n\nexport function permissionPresetSlug(value: string) {\n  const slug = value\n    .trim()\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return slug || \"preset\";\n}\n\nfunction isSavedPermissionPreset(\n  value: unknown,\n): value is SavedPermissionPreset {\n  if (!value || typeof value !== \"object\") return false;\n  const item = value as Partial<SavedPermissionPreset>;\n  return (\n    typeof item.id === \"string\" &&\n    typeof item.label === \"string\" &&\n    typeof item.updatedAt === \"string\" &&\n    !!item.snapshot &&\n    typeof item.snapshot === \"object\" &&\n    !!item.snapshot.permissions\n  );\n}\n"],"names":[],"mappings":";AAKO,SAAS,6BAAsD;AACpE,MAAI,OAAO,WAAW,YAAa,QAAO,CAAA;AAC1C,MAAI;AACF,UAAM,MAAM,OAAO,aAAa,QAAQ,kCAAkC;AAC1E,QAAI,CAAC,IAAK,QAAO,CAAA;AACjB,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,CAAC,MAAM,QAAQ,MAAM,UAAU,CAAA;AACnC,WAAO,OAAO,OAAO,uBAAuB;AAAA,EAC9C,QAAQ;AACN,WAAO,CAAA;AAAA,EACT;AACF;AAEO,SAAS,4BAA4B,SAAkC;AAC5E,MAAI,OAAO,WAAW,YAAa;AACnC,SAAO,aAAa;AAAA,IAClB;AAAA,IACA,KAAK,UAAU,OAAO;AAAA,EAAA;AAE1B;AAEO,SAAS,qBAAqB,OAAe;AAClD,QAAM,OAAO,MACV,KAAA,EACA,YAAA,EACA,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AACzB,SAAO,QAAQ;AACjB;AAEA,SAAS,wBACP,OACgC;AAChC,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,OAAO;AACb,SACE,OAAO,KAAK,OAAO,YACnB,OAAO,KAAK,UAAU,YACtB,OAAO,KAAK,cAAc,YAC1B,CAAC,CAAC,KAAK,YACP,OAAO,KAAK,aAAa,YACzB,CAAC,CAAC,KAAK,SAAS;AAEpB;"}

package/dist/data/ai/SpecRuntimeEditor/presets.cjs

@@ -6,7 +6,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "edit",
     label: "Edit",
     description: "Edits auto, shell and web ask.",
-    mode: "acceptEdits",
     policies: {
       Read: "allow",
       Edit: "auto",
@@ -23,7 +22,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "plan",
     label: "Plan",
     description: "Read and web ask, writes off.",
-    mode: "plan",
     policies: {
       Read: "allow",
       Edit: "deny",
@@ -40,7 +38,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "readonly",
     label: "Read-only",
     description: "No writes, shell, network, or resources.",
-    mode: "default",
     policies: {
       Read: "ask",
       Edit: "deny",
@@ -74,10 +71,7 @@ function applyPermissionPresetSnapshot(value, snapshot) {
   return memory ? { ...next, memory } : next;
 }
 function buildPermissionPresetSnapshot(value, entries) {
-  var _a;
-  const permissions = {
-    mode: ((_a = value.permissions) == null ? void 0 : _a.mode) || "default"
-  };
+  const permissions = {};
   const tools = {};
   const mcp = {};
   const plugins = {};
@@ -119,7 +113,7 @@ function savedPresetMatches(value, entries, preset) {
   return canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) === canonicalSnapshot(preset.snapshot);
 }
 function buildBuiltinPermissionSnapshot(preset, entries) {
-  const permissions = { mode: preset.mode };
+  const permissions = {};
   const tools = {};
   const mcp = {};
   const plugins = {};
@@ -162,7 +156,6 @@ function presetMemory(value) {
 }
 function clonePermissions(value) {
   const permissions = {};
-  if (value.mode) permissions.mode = value.mode;
   if (value.tools)
     permissions.tools = { ...value.tools };
   if (value.mcp) {

package/dist/data/ai/SpecRuntimeEditor/presets.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"presets.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"sourcesContent":["import type {\n  AISpecRuntimeMCPPermissions,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimeResourcePolicies,\n  AISpecRuntimeToolPolicies,\n  AISpecRuntimeValue,\n  SpecPermissionMode,\n  SpecResourceMode,\n  SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\nimport type {\n  PermissionDomain,\n  PermissionListEntry,\n} from \"./permissions-model\";\n\nexport type SpecRuntimePresetId = \"edit\" | \"plan\" | \"readonly\";\n\nexport type SpecRuntimePermissionSnapshot = {\n  permissions: AISpecRuntimePermissions;\n  memory?: AISpecRuntimeMemory | undefined;\n};\n\nexport type SavedPermissionPreset = {\n  id: string;\n  label: string;\n  snapshot: SpecRuntimePermissionSnapshot;\n  updatedAt: string;\n};\n\nexport type SpecRuntimePreset = {\n  id: SpecRuntimePresetId;\n  label: string;\n  description: string;\n  mode: SpecPermissionMode;\n  /** Per-tool policies applied by id. */\n  policies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools by group, when not named in policies. */\n  groupPolicies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools without an explicit or group policy. */\n  defaultToolPolicy: SpecToolPolicy;\n  /** Resource policies applied to MCP servers, plugins, and skills. */\n  resources: Record<Exclude<PermissionDomain, \"tools\">, SpecResourceMode>;\n};\n\nexport const SPEC_PERMISSION_PRESET_STORAGE_KEY =\n  \"clicky-ui:spec-runtime-editor:permission-presets:v1\";\n\nexport const SPEC_RUNTIME_PRESETS: SpecRuntimePreset[] = [\n  {\n    id: \"edit\",\n    label: \"Edit\",\n    description: \"Edits auto, shell and web ask.\",\n    mode: \"acceptEdits\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"auto\",\n      Write: \"auto\",\n      Bash: \"ask\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"auto\", Shell: \"ask\", Web: \"ask\" },\n    defaultToolPolicy: \"ask\",\n    resources: { mcp: \"enabled\", plugins: \"enabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"plan\",\n    label: \"Plan\",\n    description: \"Read and web ask, writes off.\",\n    mode: \"plan\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"ask\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"readonly\",\n    label: \"Read-only\",\n    description: \"No writes, shell, network, or resources.\",\n    mode: \"default\",\n    policies: {\n      Read: \"ask\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"deny\",\n      WebFetch: \"deny\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"deny\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"disabled\" },\n  },\n];\n\n// Applies a built-in preset as a complete permission-tree snapshot for the\n// current catalog. Manual resource/tool edits are intentionally replaced.\nexport function applySpecPreset(\n  value: AISpecRuntimeValue,\n  presetId: SpecRuntimePresetId,\n  entries: PermissionListEntry[],\n): AISpecRuntimeValue {\n  const preset = SPEC_RUNTIME_PRESETS.find((item) => item.id === presetId);\n  if (!preset) {\n    throw new Error(`unknown spec runtime preset ${JSON.stringify(presetId)}`);\n  }\n  return applyPermissionPresetSnapshot(\n    value,\n    buildBuiltinPermissionSnapshot(preset, entries),\n  );\n}\n\nexport function applyPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  snapshot: SpecRuntimePermissionSnapshot,\n): AISpecRuntimeValue {\n  const { permissions: _permissions, memory: _memory, ...rest } = value;\n  const next: AISpecRuntimeValue = {\n    ...rest,\n    permissions: clonePermissions(snapshot.permissions),\n  };\n  const memory = cloneMemory(snapshot.memory);\n  return memory ? { ...next, memory } : next;\n}\n\nexport function buildPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {\n    mode: value.permissions?.mode || \"default\",\n  };\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = entry.mode as SpecToolPolicy;\n    } else if (entry.domain === \"mcp\") {\n      const mode = entry.mode as SpecResourceMode;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = entry.mode as SpecResourceMode;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = entry.mode as SpecResourceMode;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n\n  const memory = presetMemory(value.memory);\n  return memory ? { permissions, memory } : { permissions };\n}\n\n// A preset is active when the normalized current permission tree exactly\n// matches the normalized built-in snapshot for the current catalog.\nexport function activeSpecPreset(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePresetId | undefined {\n  const current = canonicalSnapshot(\n    buildPermissionPresetSnapshot(value, entries),\n  );\n  return SPEC_RUNTIME_PRESETS.find(\n    (preset) =>\n      canonicalSnapshot(buildBuiltinPermissionSnapshot(preset, entries)) ===\n      current,\n  )?.id;\n}\n\nexport function savedPresetMatches(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  preset: SavedPermissionPreset,\n) {\n  return (\n    canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) ===\n    canonicalSnapshot(preset.snapshot)\n  );\n}\n\nfunction buildBuiltinPermissionSnapshot(\n  preset: SpecRuntimePreset,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = { mode: preset.mode };\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = presetPolicyFor(preset, entry);\n    } else if (entry.domain === \"mcp\") {\n      const mode = preset.resources.mcp;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = preset.resources.plugins;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = preset.resources.skills;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n  return { permissions };\n}\n\nfunction presetPolicyFor(\n  preset: SpecRuntimePreset,\n  entry: PermissionListEntry,\n): SpecToolPolicy {\n  return (\n    preset.policies[entry.id] ??\n    preset.groupPolicies[entry.group] ??\n    preset.defaultToolPolicy\n  );\n}\n\nfunction presetMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  if (!value) return undefined;\n  const memory: AISpecRuntimeMemory = {};\n  if (value.skipProject) memory.skipProject = true;\n  if (value.skipUser) memory.skipUser = true;\n  if (value.skipHooks) memory.skipHooks = true;\n  if (value.skipMemory) memory.skipMemory = true;\n  if (value.bare) memory.bare = true;\n  return Object.keys(memory).length > 0 ? memory : undefined;\n}\n\nfunction clonePermissions(\n  value: AISpecRuntimePermissions,\n): AISpecRuntimePermissions {\n  const permissions: AISpecRuntimePermissions = {};\n  if (value.mode) permissions.mode = value.mode;\n  if (value.tools)\n    permissions.tools = { ...(value.tools as AISpecRuntimeToolPolicies) };\n  if (value.mcp) {\n    const mcp: AISpecRuntimeMCPPermissions = {};\n    for (const [key, mode] of Object.entries(value.mcp)) {\n      if (Array.isArray(mode)) mcp[key] = [...mode];\n      else mcp[key] = mode;\n    }\n    permissions.mcp = mcp;\n  }\n  if (value.plugins && !Array.isArray(value.plugins)) {\n    permissions.plugins = { ...value.plugins };\n  } else if (Array.isArray(value.plugins)) {\n    permissions.plugins = [...value.plugins];\n  }\n  if (value.skills && !Array.isArray(value.skills)) {\n    permissions.skills = { ...value.skills };\n  } else if (Array.isArray(value.skills)) {\n    permissions.skills = [...value.skills];\n  }\n  return permissions;\n}\n\nfunction cloneMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  const memory = presetMemory(value);\n  return memory ? { ...memory } : undefined;\n}\n\nfunction canonicalSnapshot(snapshot: SpecRuntimePermissionSnapshot) {\n  return JSON.stringify(sortValue(snapshot));\n}\n\nfunction sortValue(value: unknown): unknown {\n  if (Array.isArray(value)) return [...value].sort();\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) {\n      const item = (value as Record<string, unknown>)[key];\n      if (item !== undefined) out[key] = sortValue(item);\n    }\n    return out;\n  }\n  return value;\n}\n"],"names":[],"mappings":";;AA6CO,MAAM,qCACX;AAEK,MAAM,uBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,OAAO,KAAK,MAAA;AAAA,IACnD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,WAAW,SAAS,WAAW,QAAQ,UAAA;AAAA,EAAU;AAAA,EAErE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,MAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,UAAA;AAAA,EAAU;AAAA,EAEvE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,OAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,WAAA;AAAA,EAAW;AAE1E;AAIO,SAAS,gBACd,OACA,UACA,SACoB;AACpB,QAAM,SAAS,qBAAqB,KAAK,CAAC,SAAS,KAAK,OAAO,QAAQ;AACvE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,+BAA+B,KAAK,UAAU,QAAQ,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO;AAAA,IACL;AAAA,IACA,+BAA+B,QAAQ,OAAO;AAAA,EAAA;AAElD;AAEO,SAAS,8BACd,OACA,UACoB;AACpB,QAAM,EAAE,aAAa,cAAc,QAAQ,SAAS,GAAG,SAAS;AAChE,QAAM,OAA2B;AAAA,IAC/B,GAAG;AAAA,IACH,aAAa,iBAAiB,SAAS,WAAW;AAAA,EAAA;AAEpD,QAAM,SAAS,YAAY,SAAS,MAAM;AAC1C,SAAO,SAAS,EAAE,GAAG,MAAM,WAAW;AACxC;AAEO,SAAS,8BACd,OACA,SAC+B;;AAC/B,QAAM,cAAwC;AAAA,IAC5C,QAAM,WAAM,gBAAN,mBAAmB,SAAQ;AAAA,EAAA;AAEnC,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,MAAM;AAAA,IAC1B,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,MAAM;AACnB,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,MAAM;AAAA,IAC5B,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,MAAM;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AAEzD,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,SAAO,SAAS,EAAE,aAAa,OAAA,IAAW,EAAE,YAAA;AAC9C;AAIO,SAAS,iBACd,OACA,SACiC;;AACjC,QAAM,UAAU;AAAA,IACd,8BAA8B,OAAO,OAAO;AAAA,EAAA;AAE9C,UAAO,0BAAqB;AAAA,IAC1B,CAAC,WACC,kBAAkB,+BAA+B,QAAQ,OAAO,CAAC,MACjE;AAAA,EAAA,MAHG,mBAIJ;AACL;AAEO,SAAS,mBACd,OACA,SACA,QACA;AACA,SACE,kBAAkB,8BAA8B,OAAO,OAAO,CAAC,MAC/D,kBAAkB,OAAO,QAAQ;AAErC;AAEA,SAAS,+BACP,QACA,SAC+B;AAC/B,QAAM,cAAwC,EAAE,MAAM,OAAO,KAAA;AAC7D,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,gBAAgB,QAAQ,KAAK;AAAA,IACjD,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,OAAO,UAAU;AAC9B,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACvC,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AACzD,SAAO,EAAE,YAAA;AACX;AAEA,SAAS,gBACP,QACA,OACgB;AAChB,SACE,OAAO,SAAS,MAAM,EAAE,KACxB,OAAO,cAAc,MAAM,KAAK,KAChC,OAAO;AAEX;AAEA,SAAS,aACP,OACiC;AACjC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAA8B,CAAA;AACpC,MAAI,MAAM,YAAa,QAAO,cAAc;AAC5C,MAAI,MAAM,SAAU,QAAO,WAAW;AACtC,MAAI,MAAM,UAAW,QAAO,YAAY;AACxC,MAAI,MAAM,WAAY,QAAO,aAAa;AAC1C,MAAI,MAAM,KAAM,QAAO,OAAO;AAC9B,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,SAAS,iBACP,OAC0B;AAC1B,QAAM,cAAwC,CAAA;AAC9C,MAAI,MAAM,KAAM,aAAY,OAAO,MAAM;AACzC,MAAI,MAAM;AACR,gBAAY,QAAQ,EAAE,GAAI,MAAM,MAAA;AAClC,MAAI,MAAM,KAAK;AACb,UAAM,MAAmC,CAAA;AACzC,eAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG,GAAG;AACnD,UAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI;AAAA,UACvC,KAAI,GAAG,IAAI;AAAA,IAClB;AACA,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,MAAM,WAAW,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG;AAClD,gBAAY,UAAU,EAAE,GAAG,MAAM,QAAA;AAAA,EACnC,WAAW,MAAM,QAAQ,MAAM,OAAO,GAAG;AACvC,gBAAY,UAAU,CAAC,GAAG,MAAM,OAAO;AAAA,EACzC;AACA,MAAI,MAAM,UAAU,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAChD,gBAAY,SAAS,EAAE,GAAG,MAAM,OAAA;AAAA,EAClC,WAAW,MAAM,QAAQ,MAAM,MAAM,GAAG;AACtC,gBAAY,SAAS,CAAC,GAAG,MAAM,MAAM;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,YACP,OACiC;AACjC,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,SAAS,EAAE,GAAG,OAAA,IAAW;AAClC;AAEA,SAAS,kBAAkB,UAAyC;AAClE,SAAO,KAAK,UAAU,UAAU,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,MAAM,QAAQ,KAAK,UAAU,CAAC,GAAG,KAAK,EAAE,KAAA;AAC5C,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAA;AACrC,eAAW,OAAO,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC3C,YAAM,OAAQ,MAAkC,GAAG;AACnD,UAAI,SAAS,OAAW,KAAI,GAAG,IAAI,UAAU,IAAI;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;;;;;;"}
+{"version":3,"file":"presets.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"sourcesContent":["import type {\n  AISpecRuntimeMCPPermissions,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimeResourcePolicies,\n  AISpecRuntimeToolPolicies,\n  AISpecRuntimeValue,\n  SpecResourceMode,\n  SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\nimport type {\n  PermissionDomain,\n  PermissionListEntry,\n} from \"./permissions-model\";\n\nexport type SpecRuntimePresetId = \"edit\" | \"plan\" | \"readonly\";\n\nexport type SpecRuntimePermissionSnapshot = {\n  permissions: AISpecRuntimePermissions;\n  memory?: AISpecRuntimeMemory | undefined;\n};\n\nexport type SavedPermissionPreset = {\n  id: string;\n  label: string;\n  snapshot: SpecRuntimePermissionSnapshot;\n  updatedAt: string;\n};\n\nexport type SpecRuntimePreset = {\n  id: SpecRuntimePresetId;\n  label: string;\n  description: string;\n  /** Per-tool policies applied by id. */\n  policies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools by group, when not named in policies. */\n  groupPolicies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools without an explicit or group policy. */\n  defaultToolPolicy: SpecToolPolicy;\n  /** Resource policies applied to MCP servers, plugins, and skills. */\n  resources: Record<Exclude<PermissionDomain, \"tools\">, SpecResourceMode>;\n};\n\nexport const SPEC_PERMISSION_PRESET_STORAGE_KEY =\n  \"clicky-ui:spec-runtime-editor:permission-presets:v1\";\n\nexport const SPEC_RUNTIME_PRESETS: SpecRuntimePreset[] = [\n  {\n    id: \"edit\",\n    label: \"Edit\",\n    description: \"Edits auto, shell and web ask.\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"auto\",\n      Write: \"auto\",\n      Bash: \"ask\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"auto\", Shell: \"ask\", Web: \"ask\" },\n    defaultToolPolicy: \"ask\",\n    resources: { mcp: \"enabled\", plugins: \"enabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"plan\",\n    label: \"Plan\",\n    description: \"Read and web ask, writes off.\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"ask\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"readonly\",\n    label: \"Read-only\",\n    description: \"No writes, shell, network, or resources.\",\n    policies: {\n      Read: \"ask\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"deny\",\n      WebFetch: \"deny\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"deny\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"disabled\" },\n  },\n];\n\n// Applies a built-in preset as a complete permission-tree snapshot for the\n// current catalog. Manual resource/tool edits are intentionally replaced.\nexport function applySpecPreset(\n  value: AISpecRuntimeValue,\n  presetId: SpecRuntimePresetId,\n  entries: PermissionListEntry[],\n): AISpecRuntimeValue {\n  const preset = SPEC_RUNTIME_PRESETS.find((item) => item.id === presetId);\n  if (!preset) {\n    throw new Error(`unknown spec runtime preset ${JSON.stringify(presetId)}`);\n  }\n  return applyPermissionPresetSnapshot(\n    value,\n    buildBuiltinPermissionSnapshot(preset, entries),\n  );\n}\n\nexport function applyPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  snapshot: SpecRuntimePermissionSnapshot,\n): AISpecRuntimeValue {\n  const { permissions: _permissions, memory: _memory, ...rest } = value;\n  const next: AISpecRuntimeValue = {\n    ...rest,\n    permissions: clonePermissions(snapshot.permissions),\n  };\n  const memory = cloneMemory(snapshot.memory);\n  return memory ? { ...next, memory } : next;\n}\n\nexport function buildPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {};\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = entry.mode as SpecToolPolicy;\n    } else if (entry.domain === \"mcp\") {\n      const mode = entry.mode as SpecResourceMode;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = entry.mode as SpecResourceMode;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = entry.mode as SpecResourceMode;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n\n  const memory = presetMemory(value.memory);\n  return memory ? { permissions, memory } : { permissions };\n}\n\n// A preset is active when the normalized current permission tree exactly\n// matches the normalized built-in snapshot for the current catalog.\nexport function activeSpecPreset(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePresetId | undefined {\n  const current = canonicalSnapshot(\n    buildPermissionPresetSnapshot(value, entries),\n  );\n  return SPEC_RUNTIME_PRESETS.find(\n    (preset) =>\n      canonicalSnapshot(buildBuiltinPermissionSnapshot(preset, entries)) ===\n      current,\n  )?.id;\n}\n\nexport function savedPresetMatches(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  preset: SavedPermissionPreset,\n) {\n  return (\n    canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) ===\n    canonicalSnapshot(preset.snapshot)\n  );\n}\n\nfunction buildBuiltinPermissionSnapshot(\n  preset: SpecRuntimePreset,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {};\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = presetPolicyFor(preset, entry);\n    } else if (entry.domain === \"mcp\") {\n      const mode = preset.resources.mcp;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = preset.resources.plugins;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = preset.resources.skills;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n  return { permissions };\n}\n\nfunction presetPolicyFor(\n  preset: SpecRuntimePreset,\n  entry: PermissionListEntry,\n): SpecToolPolicy {\n  return (\n    preset.policies[entry.id] ??\n    preset.groupPolicies[entry.group] ??\n    preset.defaultToolPolicy\n  );\n}\n\nfunction presetMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  if (!value) return undefined;\n  const memory: AISpecRuntimeMemory = {};\n  if (value.skipProject) memory.skipProject = true;\n  if (value.skipUser) memory.skipUser = true;\n  if (value.skipHooks) memory.skipHooks = true;\n  if (value.skipMemory) memory.skipMemory = true;\n  if (value.bare) memory.bare = true;\n  return Object.keys(memory).length > 0 ? memory : undefined;\n}\n\nfunction clonePermissions(\n  value: AISpecRuntimePermissions,\n): AISpecRuntimePermissions {\n  const permissions: AISpecRuntimePermissions = {};\n  if (value.tools)\n    permissions.tools = { ...(value.tools as AISpecRuntimeToolPolicies) };\n  if (value.mcp) {\n    const mcp: AISpecRuntimeMCPPermissions = {};\n    for (const [key, mode] of Object.entries(value.mcp)) {\n      if (Array.isArray(mode)) mcp[key] = [...mode];\n      else mcp[key] = mode;\n    }\n    permissions.mcp = mcp;\n  }\n  if (value.plugins && !Array.isArray(value.plugins)) {\n    permissions.plugins = { ...value.plugins };\n  } else if (Array.isArray(value.plugins)) {\n    permissions.plugins = [...value.plugins];\n  }\n  if (value.skills && !Array.isArray(value.skills)) {\n    permissions.skills = { ...value.skills };\n  } else if (Array.isArray(value.skills)) {\n    permissions.skills = [...value.skills];\n  }\n  return permissions;\n}\n\nfunction cloneMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  const memory = presetMemory(value);\n  return memory ? { ...memory } : undefined;\n}\n\nfunction canonicalSnapshot(snapshot: SpecRuntimePermissionSnapshot) {\n  return JSON.stringify(sortValue(snapshot));\n}\n\nfunction sortValue(value: unknown): unknown {\n  if (Array.isArray(value)) return [...value].sort();\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) {\n      const item = (value as Record<string, unknown>)[key];\n      if (item !== undefined) out[key] = sortValue(item);\n    }\n    return out;\n  }\n  return value;\n}\n"],"names":[],"mappings":";;AA2CO,MAAM,qCACX;AAEK,MAAM,uBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,OAAO,KAAK,MAAA;AAAA,IACnD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,WAAW,SAAS,WAAW,QAAQ,UAAA;AAAA,EAAU;AAAA,EAErE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,MAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,UAAA;AAAA,EAAU;AAAA,EAEvE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,OAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,WAAA;AAAA,EAAW;AAE1E;AAIO,SAAS,gBACd,OACA,UACA,SACoB;AACpB,QAAM,SAAS,qBAAqB,KAAK,CAAC,SAAS,KAAK,OAAO,QAAQ;AACvE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,+BAA+B,KAAK,UAAU,QAAQ,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO;AAAA,IACL;AAAA,IACA,+BAA+B,QAAQ,OAAO;AAAA,EAAA;AAElD;AAEO,SAAS,8BACd,OACA,UACoB;AACpB,QAAM,EAAE,aAAa,cAAc,QAAQ,SAAS,GAAG,SAAS;AAChE,QAAM,OAA2B;AAAA,IAC/B,GAAG;AAAA,IACH,aAAa,iBAAiB,SAAS,WAAW;AAAA,EAAA;AAEpD,QAAM,SAAS,YAAY,SAAS,MAAM;AAC1C,SAAO,SAAS,EAAE,GAAG,MAAM,WAAW;AACxC;AAEO,SAAS,8BACd,OACA,SAC+B;AAC/B,QAAM,cAAwC,CAAA;AAC9C,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,MAAM;AAAA,IAC1B,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,MAAM;AACnB,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,MAAM;AAAA,IAC5B,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,MAAM;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AAEzD,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,SAAO,SAAS,EAAE,aAAa,OAAA,IAAW,EAAE,YAAA;AAC9C;AAIO,SAAS,iBACd,OACA,SACiC;;AACjC,QAAM,UAAU;AAAA,IACd,8BAA8B,OAAO,OAAO;AAAA,EAAA;AAE9C,UAAO,0BAAqB;AAAA,IAC1B,CAAC,WACC,kBAAkB,+BAA+B,QAAQ,OAAO,CAAC,MACjE;AAAA,EAAA,MAHG,mBAIJ;AACL;AAEO,SAAS,mBACd,OACA,SACA,QACA;AACA,SACE,kBAAkB,8BAA8B,OAAO,OAAO,CAAC,MAC/D,kBAAkB,OAAO,QAAQ;AAErC;AAEA,SAAS,+BACP,QACA,SAC+B;AAC/B,QAAM,cAAwC,CAAA;AAC9C,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,gBAAgB,QAAQ,KAAK;AAAA,IACjD,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,OAAO,UAAU;AAC9B,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACvC,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AACzD,SAAO,EAAE,YAAA;AACX;AAEA,SAAS,gBACP,QACA,OACgB;AAChB,SACE,OAAO,SAAS,MAAM,EAAE,KACxB,OAAO,cAAc,MAAM,KAAK,KAChC,OAAO;AAEX;AAEA,SAAS,aACP,OACiC;AACjC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAA8B,CAAA;AACpC,MAAI,MAAM,YAAa,QAAO,cAAc;AAC5C,MAAI,MAAM,SAAU,QAAO,WAAW;AACtC,MAAI,MAAM,UAAW,QAAO,YAAY;AACxC,MAAI,MAAM,WAAY,QAAO,aAAa;AAC1C,MAAI,MAAM,KAAM,QAAO,OAAO;AAC9B,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,SAAS,iBACP,OAC0B;AAC1B,QAAM,cAAwC,CAAA;AAC9C,MAAI,MAAM;AACR,gBAAY,QAAQ,EAAE,GAAI,MAAM,MAAA;AAClC,MAAI,MAAM,KAAK;AACb,UAAM,MAAmC,CAAA;AACzC,eAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG,GAAG;AACnD,UAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI;AAAA,UACvC,KAAI,GAAG,IAAI;AAAA,IAClB;AACA,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,MAAM,WAAW,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG;AAClD,gBAAY,UAAU,EAAE,GAAG,MAAM,QAAA;AAAA,EACnC,WAAW,MAAM,QAAQ,MAAM,OAAO,GAAG;AACvC,gBAAY,UAAU,CAAC,GAAG,MAAM,OAAO;AAAA,EACzC;AACA,MAAI,MAAM,UAAU,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAChD,gBAAY,SAAS,EAAE,GAAG,MAAM,OAAA;AAAA,EAClC,WAAW,MAAM,QAAQ,MAAM,MAAM,GAAG;AACtC,gBAAY,SAAS,CAAC,GAAG,MAAM,MAAM;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,YACP,OACiC;AACjC,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,SAAS,EAAE,GAAG,OAAA,IAAW;AAClC;AAEA,SAAS,kBAAkB,UAAyC;AAClE,SAAO,KAAK,UAAU,UAAU,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,MAAM,QAAQ,KAAK,UAAU,CAAC,GAAG,KAAK,EAAE,KAAA;AAC5C,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAA;AACrC,eAAW,OAAO,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC3C,YAAM,OAAQ,MAAkC,GAAG;AACnD,UAAI,SAAS,OAAW,KAAI,GAAG,IAAI,UAAU,IAAI;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;;;;;;"}

package/dist/data/ai/SpecRuntimeEditor/presets.d.ts

@@ -1,4 +1,4 @@
-import { AISpecRuntimeMemory, AISpecRuntimePermissions, AISpecRuntimeValue, SpecPermissionMode, SpecResourceMode, SpecToolPolicy } from '../SpecRuntimeEditor.model';
+import { AISpecRuntimeMemory, AISpecRuntimePermissions, AISpecRuntimeValue, SpecResourceMode, SpecToolPolicy } from '../SpecRuntimeEditor.model';
 import { PermissionDomain, PermissionListEntry } from './permissions-model';
 export type SpecRuntimePresetId = "edit" | "plan" | "readonly";
 export type SpecRuntimePermissionSnapshot = {
@@ -15,7 +15,6 @@ export type SpecRuntimePreset = {
     id: SpecRuntimePresetId;
     label: string;
     description: string;
-    mode: SpecPermissionMode;
     /** Per-tool policies applied by id. */
     policies: Record<string, SpecToolPolicy>;
     /** Fallback policy for catalog tools by group, when not named in policies. */

package/dist/data/ai/SpecRuntimeEditor/presets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,wBAAwB,EAGxB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,6BAA6B,GAAG;IAC1C,WAAW,EAAE,wBAAwB,CAAC;IACtC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,6BAA6B,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,iBAAiB,EAAE,cAAc,CAAC;IAClC,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;CACzE,CAAC;AAEF,eAAO,MAAM,kCAAkC,wDACQ,CAAC;AAExD,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAoDnD,CAAC;AAIF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,CASpB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,6BAA6B,GACtC,kBAAkB,CAQpB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,GAC7B,6BAA6B,CAkC/B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,GAC7B,mBAAmB,GAAG,SAAS,CASjC;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,EAC9B,MAAM,EAAE,qBAAqB,WAM9B"}
+{"version":3,"file":"presets.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,wBAAwB,EAGxB,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,6BAA6B,GAAG;IAC1C,WAAW,EAAE,wBAAwB,CAAC;IACtC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,6BAA6B,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,mBAAmB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC9C,6EAA6E;IAC7E,iBAAiB,EAAE,cAAc,CAAC;IAClC,qEAAqE;IACrE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;CACzE,CAAC;AAEF,eAAO,MAAM,kCAAkC,wDACQ,CAAC;AAExD,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EAiDnD,CAAC;AAIF,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,CASpB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,6BAA6B,GACtC,kBAAkB,CAQpB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,GAC7B,6BAA6B,CAgC/B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,GAC7B,mBAAmB,GAAG,SAAS,CASjC;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,EAC9B,MAAM,EAAE,qBAAqB,WAM9B"}

package/dist/data/ai/SpecRuntimeEditor/presets.js

@@ -4,7 +4,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "edit",
     label: "Edit",
     description: "Edits auto, shell and web ask.",
-    mode: "acceptEdits",
     policies: {
       Read: "allow",
       Edit: "auto",
@@ -21,7 +20,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "plan",
     label: "Plan",
     description: "Read and web ask, writes off.",
-    mode: "plan",
     policies: {
       Read: "allow",
       Edit: "deny",
@@ -38,7 +36,6 @@ const SPEC_RUNTIME_PRESETS = [
     id: "readonly",
     label: "Read-only",
     description: "No writes, shell, network, or resources.",
-    mode: "default",
     policies: {
       Read: "ask",
       Edit: "deny",
@@ -72,10 +69,7 @@ function applyPermissionPresetSnapshot(value, snapshot) {
   return memory ? { ...next, memory } : next;
 }
 function buildPermissionPresetSnapshot(value, entries) {
-  var _a;
-  const permissions = {
-    mode: ((_a = value.permissions) == null ? void 0 : _a.mode) || "default"
-  };
+  const permissions = {};
   const tools = {};
   const mcp = {};
   const plugins = {};
@@ -117,7 +111,7 @@ function savedPresetMatches(value, entries, preset) {
   return canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) === canonicalSnapshot(preset.snapshot);
 }
 function buildBuiltinPermissionSnapshot(preset, entries) {
-  const permissions = { mode: preset.mode };
+  const permissions = {};
   const tools = {};
   const mcp = {};
   const plugins = {};
@@ -160,7 +154,6 @@ function presetMemory(value) {
 }
 function clonePermissions(value) {
   const permissions = {};
-  if (value.mode) permissions.mode = value.mode;
   if (value.tools)
     permissions.tools = { ...value.tools };
   if (value.mcp) {

package/dist/data/ai/SpecRuntimeEditor/presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"presets.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"sourcesContent":["import type {\n  AISpecRuntimeMCPPermissions,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimeResourcePolicies,\n  AISpecRuntimeToolPolicies,\n  AISpecRuntimeValue,\n  SpecPermissionMode,\n  SpecResourceMode,\n  SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\nimport type {\n  PermissionDomain,\n  PermissionListEntry,\n} from \"./permissions-model\";\n\nexport type SpecRuntimePresetId = \"edit\" | \"plan\" | \"readonly\";\n\nexport type SpecRuntimePermissionSnapshot = {\n  permissions: AISpecRuntimePermissions;\n  memory?: AISpecRuntimeMemory | undefined;\n};\n\nexport type SavedPermissionPreset = {\n  id: string;\n  label: string;\n  snapshot: SpecRuntimePermissionSnapshot;\n  updatedAt: string;\n};\n\nexport type SpecRuntimePreset = {\n  id: SpecRuntimePresetId;\n  label: string;\n  description: string;\n  mode: SpecPermissionMode;\n  /** Per-tool policies applied by id. */\n  policies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools by group, when not named in policies. */\n  groupPolicies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools without an explicit or group policy. */\n  defaultToolPolicy: SpecToolPolicy;\n  /** Resource policies applied to MCP servers, plugins, and skills. */\n  resources: Record<Exclude<PermissionDomain, \"tools\">, SpecResourceMode>;\n};\n\nexport const SPEC_PERMISSION_PRESET_STORAGE_KEY =\n  \"clicky-ui:spec-runtime-editor:permission-presets:v1\";\n\nexport const SPEC_RUNTIME_PRESETS: SpecRuntimePreset[] = [\n  {\n    id: \"edit\",\n    label: \"Edit\",\n    description: \"Edits auto, shell and web ask.\",\n    mode: \"acceptEdits\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"auto\",\n      Write: \"auto\",\n      Bash: \"ask\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"auto\", Shell: \"ask\", Web: \"ask\" },\n    defaultToolPolicy: \"ask\",\n    resources: { mcp: \"enabled\", plugins: \"enabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"plan\",\n    label: \"Plan\",\n    description: \"Read and web ask, writes off.\",\n    mode: \"plan\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"ask\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"readonly\",\n    label: \"Read-only\",\n    description: \"No writes, shell, network, or resources.\",\n    mode: \"default\",\n    policies: {\n      Read: \"ask\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"deny\",\n      WebFetch: \"deny\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"deny\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"disabled\" },\n  },\n];\n\n// Applies a built-in preset as a complete permission-tree snapshot for the\n// current catalog. Manual resource/tool edits are intentionally replaced.\nexport function applySpecPreset(\n  value: AISpecRuntimeValue,\n  presetId: SpecRuntimePresetId,\n  entries: PermissionListEntry[],\n): AISpecRuntimeValue {\n  const preset = SPEC_RUNTIME_PRESETS.find((item) => item.id === presetId);\n  if (!preset) {\n    throw new Error(`unknown spec runtime preset ${JSON.stringify(presetId)}`);\n  }\n  return applyPermissionPresetSnapshot(\n    value,\n    buildBuiltinPermissionSnapshot(preset, entries),\n  );\n}\n\nexport function applyPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  snapshot: SpecRuntimePermissionSnapshot,\n): AISpecRuntimeValue {\n  const { permissions: _permissions, memory: _memory, ...rest } = value;\n  const next: AISpecRuntimeValue = {\n    ...rest,\n    permissions: clonePermissions(snapshot.permissions),\n  };\n  const memory = cloneMemory(snapshot.memory);\n  return memory ? { ...next, memory } : next;\n}\n\nexport function buildPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {\n    mode: value.permissions?.mode || \"default\",\n  };\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = entry.mode as SpecToolPolicy;\n    } else if (entry.domain === \"mcp\") {\n      const mode = entry.mode as SpecResourceMode;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = entry.mode as SpecResourceMode;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = entry.mode as SpecResourceMode;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n\n  const memory = presetMemory(value.memory);\n  return memory ? { permissions, memory } : { permissions };\n}\n\n// A preset is active when the normalized current permission tree exactly\n// matches the normalized built-in snapshot for the current catalog.\nexport function activeSpecPreset(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePresetId | undefined {\n  const current = canonicalSnapshot(\n    buildPermissionPresetSnapshot(value, entries),\n  );\n  return SPEC_RUNTIME_PRESETS.find(\n    (preset) =>\n      canonicalSnapshot(buildBuiltinPermissionSnapshot(preset, entries)) ===\n      current,\n  )?.id;\n}\n\nexport function savedPresetMatches(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  preset: SavedPermissionPreset,\n) {\n  return (\n    canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) ===\n    canonicalSnapshot(preset.snapshot)\n  );\n}\n\nfunction buildBuiltinPermissionSnapshot(\n  preset: SpecRuntimePreset,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = { mode: preset.mode };\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = presetPolicyFor(preset, entry);\n    } else if (entry.domain === \"mcp\") {\n      const mode = preset.resources.mcp;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = preset.resources.plugins;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = preset.resources.skills;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n  return { permissions };\n}\n\nfunction presetPolicyFor(\n  preset: SpecRuntimePreset,\n  entry: PermissionListEntry,\n): SpecToolPolicy {\n  return (\n    preset.policies[entry.id] ??\n    preset.groupPolicies[entry.group] ??\n    preset.defaultToolPolicy\n  );\n}\n\nfunction presetMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  if (!value) return undefined;\n  const memory: AISpecRuntimeMemory = {};\n  if (value.skipProject) memory.skipProject = true;\n  if (value.skipUser) memory.skipUser = true;\n  if (value.skipHooks) memory.skipHooks = true;\n  if (value.skipMemory) memory.skipMemory = true;\n  if (value.bare) memory.bare = true;\n  return Object.keys(memory).length > 0 ? memory : undefined;\n}\n\nfunction clonePermissions(\n  value: AISpecRuntimePermissions,\n): AISpecRuntimePermissions {\n  const permissions: AISpecRuntimePermissions = {};\n  if (value.mode) permissions.mode = value.mode;\n  if (value.tools)\n    permissions.tools = { ...(value.tools as AISpecRuntimeToolPolicies) };\n  if (value.mcp) {\n    const mcp: AISpecRuntimeMCPPermissions = {};\n    for (const [key, mode] of Object.entries(value.mcp)) {\n      if (Array.isArray(mode)) mcp[key] = [...mode];\n      else mcp[key] = mode;\n    }\n    permissions.mcp = mcp;\n  }\n  if (value.plugins && !Array.isArray(value.plugins)) {\n    permissions.plugins = { ...value.plugins };\n  } else if (Array.isArray(value.plugins)) {\n    permissions.plugins = [...value.plugins];\n  }\n  if (value.skills && !Array.isArray(value.skills)) {\n    permissions.skills = { ...value.skills };\n  } else if (Array.isArray(value.skills)) {\n    permissions.skills = [...value.skills];\n  }\n  return permissions;\n}\n\nfunction cloneMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  const memory = presetMemory(value);\n  return memory ? { ...memory } : undefined;\n}\n\nfunction canonicalSnapshot(snapshot: SpecRuntimePermissionSnapshot) {\n  return JSON.stringify(sortValue(snapshot));\n}\n\nfunction sortValue(value: unknown): unknown {\n  if (Array.isArray(value)) return [...value].sort();\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) {\n      const item = (value as Record<string, unknown>)[key];\n      if (item !== undefined) out[key] = sortValue(item);\n    }\n    return out;\n  }\n  return value;\n}\n"],"names":[],"mappings":"AA6CO,MAAM,qCACX;AAEK,MAAM,uBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,OAAO,KAAK,MAAA;AAAA,IACnD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,WAAW,SAAS,WAAW,QAAQ,UAAA;AAAA,EAAU;AAAA,EAErE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,MAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,UAAA;AAAA,EAAU;AAAA,EAEvE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,OAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,WAAA;AAAA,EAAW;AAE1E;AAIO,SAAS,gBACd,OACA,UACA,SACoB;AACpB,QAAM,SAAS,qBAAqB,KAAK,CAAC,SAAS,KAAK,OAAO,QAAQ;AACvE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,+BAA+B,KAAK,UAAU,QAAQ,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO;AAAA,IACL;AAAA,IACA,+BAA+B,QAAQ,OAAO;AAAA,EAAA;AAElD;AAEO,SAAS,8BACd,OACA,UACoB;AACpB,QAAM,EAAE,aAAa,cAAc,QAAQ,SAAS,GAAG,SAAS;AAChE,QAAM,OAA2B;AAAA,IAC/B,GAAG;AAAA,IACH,aAAa,iBAAiB,SAAS,WAAW;AAAA,EAAA;AAEpD,QAAM,SAAS,YAAY,SAAS,MAAM;AAC1C,SAAO,SAAS,EAAE,GAAG,MAAM,WAAW;AACxC;AAEO,SAAS,8BACd,OACA,SAC+B;AA1F1B;AA2FL,QAAM,cAAwC;AAAA,IAC5C,QAAM,WAAM,gBAAN,mBAAmB,SAAQ;AAAA,EAAA;AAEnC,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,MAAM;AAAA,IAC1B,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,MAAM;AACnB,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,MAAM;AAAA,IAC5B,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,MAAM;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AAEzD,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,SAAO,SAAS,EAAE,aAAa,OAAA,IAAW,EAAE,YAAA;AAC9C;AAIO,SAAS,iBACd,OACA,SACiC;AAnI5B;AAoIL,QAAM,UAAU;AAAA,IACd,8BAA8B,OAAO,OAAO;AAAA,EAAA;AAE9C,UAAO,0BAAqB;AAAA,IAC1B,CAAC,WACC,kBAAkB,+BAA+B,QAAQ,OAAO,CAAC,MACjE;AAAA,EAAA,MAHG,mBAIJ;AACL;AAEO,SAAS,mBACd,OACA,SACA,QACA;AACA,SACE,kBAAkB,8BAA8B,OAAO,OAAO,CAAC,MAC/D,kBAAkB,OAAO,QAAQ;AAErC;AAEA,SAAS,+BACP,QACA,SAC+B;AAC/B,QAAM,cAAwC,EAAE,MAAM,OAAO,KAAA;AAC7D,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,gBAAgB,QAAQ,KAAK;AAAA,IACjD,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,OAAO,UAAU;AAC9B,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACvC,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AACzD,SAAO,EAAE,YAAA;AACX;AAEA,SAAS,gBACP,QACA,OACgB;AAChB,SACE,OAAO,SAAS,MAAM,EAAE,KACxB,OAAO,cAAc,MAAM,KAAK,KAChC,OAAO;AAEX;AAEA,SAAS,aACP,OACiC;AACjC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAA8B,CAAA;AACpC,MAAI,MAAM,YAAa,QAAO,cAAc;AAC5C,MAAI,MAAM,SAAU,QAAO,WAAW;AACtC,MAAI,MAAM,UAAW,QAAO,YAAY;AACxC,MAAI,MAAM,WAAY,QAAO,aAAa;AAC1C,MAAI,MAAM,KAAM,QAAO,OAAO;AAC9B,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,SAAS,iBACP,OAC0B;AAC1B,QAAM,cAAwC,CAAA;AAC9C,MAAI,MAAM,KAAM,aAAY,OAAO,MAAM;AACzC,MAAI,MAAM;AACR,gBAAY,QAAQ,EAAE,GAAI,MAAM,MAAA;AAClC,MAAI,MAAM,KAAK;AACb,UAAM,MAAmC,CAAA;AACzC,eAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG,GAAG;AACnD,UAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI;AAAA,UACvC,KAAI,GAAG,IAAI;AAAA,IAClB;AACA,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,MAAM,WAAW,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG;AAClD,gBAAY,UAAU,EAAE,GAAG,MAAM,QAAA;AAAA,EACnC,WAAW,MAAM,QAAQ,MAAM,OAAO,GAAG;AACvC,gBAAY,UAAU,CAAC,GAAG,MAAM,OAAO;AAAA,EACzC;AACA,MAAI,MAAM,UAAU,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAChD,gBAAY,SAAS,EAAE,GAAG,MAAM,OAAA;AAAA,EAClC,WAAW,MAAM,QAAQ,MAAM,MAAM,GAAG;AACtC,gBAAY,SAAS,CAAC,GAAG,MAAM,MAAM;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,YACP,OACiC;AACjC,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,SAAS,EAAE,GAAG,OAAA,IAAW;AAClC;AAEA,SAAS,kBAAkB,UAAyC;AAClE,SAAO,KAAK,UAAU,UAAU,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,MAAM,QAAQ,KAAK,UAAU,CAAC,GAAG,KAAK,EAAE,KAAA;AAC5C,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAA;AACrC,eAAW,OAAO,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC3C,YAAM,OAAQ,MAAkC,GAAG;AACnD,UAAI,SAAS,OAAW,KAAI,GAAG,IAAI,UAAU,IAAI;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;"}
+{"version":3,"file":"presets.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/presets.ts"],"sourcesContent":["import type {\n  AISpecRuntimeMCPPermissions,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimeResourcePolicies,\n  AISpecRuntimeToolPolicies,\n  AISpecRuntimeValue,\n  SpecResourceMode,\n  SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\nimport type {\n  PermissionDomain,\n  PermissionListEntry,\n} from \"./permissions-model\";\n\nexport type SpecRuntimePresetId = \"edit\" | \"plan\" | \"readonly\";\n\nexport type SpecRuntimePermissionSnapshot = {\n  permissions: AISpecRuntimePermissions;\n  memory?: AISpecRuntimeMemory | undefined;\n};\n\nexport type SavedPermissionPreset = {\n  id: string;\n  label: string;\n  snapshot: SpecRuntimePermissionSnapshot;\n  updatedAt: string;\n};\n\nexport type SpecRuntimePreset = {\n  id: SpecRuntimePresetId;\n  label: string;\n  description: string;\n  /** Per-tool policies applied by id. */\n  policies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools by group, when not named in policies. */\n  groupPolicies: Record<string, SpecToolPolicy>;\n  /** Fallback policy for catalog tools without an explicit or group policy. */\n  defaultToolPolicy: SpecToolPolicy;\n  /** Resource policies applied to MCP servers, plugins, and skills. */\n  resources: Record<Exclude<PermissionDomain, \"tools\">, SpecResourceMode>;\n};\n\nexport const SPEC_PERMISSION_PRESET_STORAGE_KEY =\n  \"clicky-ui:spec-runtime-editor:permission-presets:v1\";\n\nexport const SPEC_RUNTIME_PRESETS: SpecRuntimePreset[] = [\n  {\n    id: \"edit\",\n    label: \"Edit\",\n    description: \"Edits auto, shell and web ask.\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"auto\",\n      Write: \"auto\",\n      Bash: \"ask\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"auto\", Shell: \"ask\", Web: \"ask\" },\n    defaultToolPolicy: \"ask\",\n    resources: { mcp: \"enabled\", plugins: \"enabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"plan\",\n    label: \"Plan\",\n    description: \"Read and web ask, writes off.\",\n    policies: {\n      Read: \"allow\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"ask\",\n      WebFetch: \"ask\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"ask\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"enabled\" },\n  },\n  {\n    id: \"readonly\",\n    label: \"Read-only\",\n    description: \"No writes, shell, network, or resources.\",\n    policies: {\n      Read: \"ask\",\n      Edit: \"deny\",\n      Write: \"deny\",\n      Bash: \"deny\",\n      WebSearch: \"deny\",\n      WebFetch: \"deny\",\n    },\n    groupPolicies: { Files: \"deny\", Shell: \"deny\", Web: \"deny\" },\n    defaultToolPolicy: \"deny\",\n    resources: { mcp: \"disabled\", plugins: \"disabled\", skills: \"disabled\" },\n  },\n];\n\n// Applies a built-in preset as a complete permission-tree snapshot for the\n// current catalog. Manual resource/tool edits are intentionally replaced.\nexport function applySpecPreset(\n  value: AISpecRuntimeValue,\n  presetId: SpecRuntimePresetId,\n  entries: PermissionListEntry[],\n): AISpecRuntimeValue {\n  const preset = SPEC_RUNTIME_PRESETS.find((item) => item.id === presetId);\n  if (!preset) {\n    throw new Error(`unknown spec runtime preset ${JSON.stringify(presetId)}`);\n  }\n  return applyPermissionPresetSnapshot(\n    value,\n    buildBuiltinPermissionSnapshot(preset, entries),\n  );\n}\n\nexport function applyPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  snapshot: SpecRuntimePermissionSnapshot,\n): AISpecRuntimeValue {\n  const { permissions: _permissions, memory: _memory, ...rest } = value;\n  const next: AISpecRuntimeValue = {\n    ...rest,\n    permissions: clonePermissions(snapshot.permissions),\n  };\n  const memory = cloneMemory(snapshot.memory);\n  return memory ? { ...next, memory } : next;\n}\n\nexport function buildPermissionPresetSnapshot(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {};\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = entry.mode as SpecToolPolicy;\n    } else if (entry.domain === \"mcp\") {\n      const mode = entry.mode as SpecResourceMode;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = entry.mode as SpecResourceMode;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = entry.mode as SpecResourceMode;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n\n  const memory = presetMemory(value.memory);\n  return memory ? { permissions, memory } : { permissions };\n}\n\n// A preset is active when the normalized current permission tree exactly\n// matches the normalized built-in snapshot for the current catalog.\nexport function activeSpecPreset(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): SpecRuntimePresetId | undefined {\n  const current = canonicalSnapshot(\n    buildPermissionPresetSnapshot(value, entries),\n  );\n  return SPEC_RUNTIME_PRESETS.find(\n    (preset) =>\n      canonicalSnapshot(buildBuiltinPermissionSnapshot(preset, entries)) ===\n      current,\n  )?.id;\n}\n\nexport function savedPresetMatches(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  preset: SavedPermissionPreset,\n) {\n  return (\n    canonicalSnapshot(buildPermissionPresetSnapshot(value, entries)) ===\n    canonicalSnapshot(preset.snapshot)\n  );\n}\n\nfunction buildBuiltinPermissionSnapshot(\n  preset: SpecRuntimePreset,\n  entries: PermissionListEntry[],\n): SpecRuntimePermissionSnapshot {\n  const permissions: AISpecRuntimePermissions = {};\n  const tools: AISpecRuntimeToolPolicies = {};\n  const mcp: AISpecRuntimeMCPPermissions = {};\n  const plugins: AISpecRuntimeResourcePolicies = {};\n  const skills: AISpecRuntimeResourcePolicies = {};\n  const mcpServers: string[] = [];\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\") {\n      tools[entry.id] = presetPolicyFor(preset, entry);\n    } else if (entry.domain === \"mcp\") {\n      const mode = preset.resources.mcp;\n      mcp[entry.id] = mode;\n      if (mode === \"enabled\") mcpServers.push(entry.id);\n    } else if (entry.domain === \"plugins\") {\n      plugins[entry.id] = preset.resources.plugins;\n    } else if (entry.domain === \"skills\") {\n      skills[entry.id] = preset.resources.skills;\n    }\n  }\n\n  if (Object.keys(tools).length > 0) permissions.tools = tools;\n  if (Object.keys(mcp).length > 0 || mcpServers.length > 0) {\n    if (mcpServers.length > 0) mcp.servers = mcpServers;\n    permissions.mcp = mcp;\n  }\n  if (Object.keys(plugins).length > 0) permissions.plugins = plugins;\n  if (Object.keys(skills).length > 0) permissions.skills = skills;\n  return { permissions };\n}\n\nfunction presetPolicyFor(\n  preset: SpecRuntimePreset,\n  entry: PermissionListEntry,\n): SpecToolPolicy {\n  return (\n    preset.policies[entry.id] ??\n    preset.groupPolicies[entry.group] ??\n    preset.defaultToolPolicy\n  );\n}\n\nfunction presetMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  if (!value) return undefined;\n  const memory: AISpecRuntimeMemory = {};\n  if (value.skipProject) memory.skipProject = true;\n  if (value.skipUser) memory.skipUser = true;\n  if (value.skipHooks) memory.skipHooks = true;\n  if (value.skipMemory) memory.skipMemory = true;\n  if (value.bare) memory.bare = true;\n  return Object.keys(memory).length > 0 ? memory : undefined;\n}\n\nfunction clonePermissions(\n  value: AISpecRuntimePermissions,\n): AISpecRuntimePermissions {\n  const permissions: AISpecRuntimePermissions = {};\n  if (value.tools)\n    permissions.tools = { ...(value.tools as AISpecRuntimeToolPolicies) };\n  if (value.mcp) {\n    const mcp: AISpecRuntimeMCPPermissions = {};\n    for (const [key, mode] of Object.entries(value.mcp)) {\n      if (Array.isArray(mode)) mcp[key] = [...mode];\n      else mcp[key] = mode;\n    }\n    permissions.mcp = mcp;\n  }\n  if (value.plugins && !Array.isArray(value.plugins)) {\n    permissions.plugins = { ...value.plugins };\n  } else if (Array.isArray(value.plugins)) {\n    permissions.plugins = [...value.plugins];\n  }\n  if (value.skills && !Array.isArray(value.skills)) {\n    permissions.skills = { ...value.skills };\n  } else if (Array.isArray(value.skills)) {\n    permissions.skills = [...value.skills];\n  }\n  return permissions;\n}\n\nfunction cloneMemory(\n  value: AISpecRuntimeMemory | undefined,\n): AISpecRuntimeMemory | undefined {\n  const memory = presetMemory(value);\n  return memory ? { ...memory } : undefined;\n}\n\nfunction canonicalSnapshot(snapshot: SpecRuntimePermissionSnapshot) {\n  return JSON.stringify(sortValue(snapshot));\n}\n\nfunction sortValue(value: unknown): unknown {\n  if (Array.isArray(value)) return [...value].sort();\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value).sort()) {\n      const item = (value as Record<string, unknown>)[key];\n      if (item !== undefined) out[key] = sortValue(item);\n    }\n    return out;\n  }\n  return value;\n}\n"],"names":[],"mappings":"AA2CO,MAAM,qCACX;AAEK,MAAM,uBAA4C;AAAA,EACvD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,OAAO,KAAK,MAAA;AAAA,IACnD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,WAAW,SAAS,WAAW,QAAQ,UAAA;AAAA,EAAU;AAAA,EAErE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,MAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,UAAA;AAAA,EAAU;AAAA,EAEvE;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,aAAa;AAAA,IACb,UAAU;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,IAAA;AAAA,IAEZ,eAAe,EAAE,OAAO,QAAQ,OAAO,QAAQ,KAAK,OAAA;AAAA,IACpD,mBAAmB;AAAA,IACnB,WAAW,EAAE,KAAK,YAAY,SAAS,YAAY,QAAQ,WAAA;AAAA,EAAW;AAE1E;AAIO,SAAS,gBACd,OACA,UACA,SACoB;AACpB,QAAM,SAAS,qBAAqB,KAAK,CAAC,SAAS,KAAK,OAAO,QAAQ;AACvE,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,+BAA+B,KAAK,UAAU,QAAQ,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO;AAAA,IACL;AAAA,IACA,+BAA+B,QAAQ,OAAO;AAAA,EAAA;AAElD;AAEO,SAAS,8BACd,OACA,UACoB;AACpB,QAAM,EAAE,aAAa,cAAc,QAAQ,SAAS,GAAG,SAAS;AAChE,QAAM,OAA2B;AAAA,IAC/B,GAAG;AAAA,IACH,aAAa,iBAAiB,SAAS,WAAW;AAAA,EAAA;AAEpD,QAAM,SAAS,YAAY,SAAS,MAAM;AAC1C,SAAO,SAAS,EAAE,GAAG,MAAM,WAAW;AACxC;AAEO,SAAS,8BACd,OACA,SAC+B;AAC/B,QAAM,cAAwC,CAAA;AAC9C,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,MAAM;AAAA,IAC1B,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,MAAM;AACnB,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,MAAM;AAAA,IAC5B,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,MAAM;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AAEzD,QAAM,SAAS,aAAa,MAAM,MAAM;AACxC,SAAO,SAAS,EAAE,aAAa,OAAA,IAAW,EAAE,YAAA;AAC9C;AAIO,SAAS,iBACd,OACA,SACiC;AA9H5B;AA+HL,QAAM,UAAU;AAAA,IACd,8BAA8B,OAAO,OAAO;AAAA,EAAA;AAE9C,UAAO,0BAAqB;AAAA,IAC1B,CAAC,WACC,kBAAkB,+BAA+B,QAAQ,OAAO,CAAC,MACjE;AAAA,EAAA,MAHG,mBAIJ;AACL;AAEO,SAAS,mBACd,OACA,SACA,QACA;AACA,SACE,kBAAkB,8BAA8B,OAAO,OAAO,CAAC,MAC/D,kBAAkB,OAAO,QAAQ;AAErC;AAEA,SAAS,+BACP,QACA,SAC+B;AAC/B,QAAM,cAAwC,CAAA;AAC9C,QAAM,QAAmC,CAAA;AACzC,QAAM,MAAmC,CAAA;AACzC,QAAM,UAAyC,CAAA;AAC/C,QAAM,SAAwC,CAAA;AAC9C,QAAM,aAAuB,CAAA;AAE7B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,SAAS;AAC5B,YAAM,MAAM,EAAE,IAAI,gBAAgB,QAAQ,KAAK;AAAA,IACjD,WAAW,MAAM,WAAW,OAAO;AACjC,YAAM,OAAO,OAAO,UAAU;AAC9B,UAAI,MAAM,EAAE,IAAI;AAChB,UAAI,SAAS,UAAW,YAAW,KAAK,MAAM,EAAE;AAAA,IAClD,WAAW,MAAM,WAAW,WAAW;AACrC,cAAQ,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACvC,WAAW,MAAM,WAAW,UAAU;AACpC,aAAO,MAAM,EAAE,IAAI,OAAO,UAAU;AAAA,IACtC;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,KAAK,EAAE,SAAS,eAAe,QAAQ;AACvD,MAAI,OAAO,KAAK,GAAG,EAAE,SAAS,KAAK,WAAW,SAAS,GAAG;AACxD,QAAI,WAAW,SAAS,EAAG,KAAI,UAAU;AACzC,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,OAAO,KAAK,OAAO,EAAE,SAAS,eAAe,UAAU;AAC3D,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,eAAe,SAAS;AACzD,SAAO,EAAE,YAAA;AACX;AAEA,SAAS,gBACP,QACA,OACgB;AAChB,SACE,OAAO,SAAS,MAAM,EAAE,KACxB,OAAO,cAAc,MAAM,KAAK,KAChC,OAAO;AAEX;AAEA,SAAS,aACP,OACiC;AACjC,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAA8B,CAAA;AACpC,MAAI,MAAM,YAAa,QAAO,cAAc;AAC5C,MAAI,MAAM,SAAU,QAAO,WAAW;AACtC,MAAI,MAAM,UAAW,QAAO,YAAY;AACxC,MAAI,MAAM,WAAY,QAAO,aAAa;AAC1C,MAAI,MAAM,KAAM,QAAO,OAAO;AAC9B,SAAO,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACnD;AAEA,SAAS,iBACP,OAC0B;AAC1B,QAAM,cAAwC,CAAA;AAC9C,MAAI,MAAM;AACR,gBAAY,QAAQ,EAAE,GAAI,MAAM,MAAA;AAClC,MAAI,MAAM,KAAK;AACb,UAAM,MAAmC,CAAA;AACzC,eAAW,CAAC,KAAK,IAAI,KAAK,OAAO,QAAQ,MAAM,GAAG,GAAG;AACnD,UAAI,MAAM,QAAQ,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI;AAAA,UACvC,KAAI,GAAG,IAAI;AAAA,IAClB;AACA,gBAAY,MAAM;AAAA,EACpB;AACA,MAAI,MAAM,WAAW,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG;AAClD,gBAAY,UAAU,EAAE,GAAG,MAAM,QAAA;AAAA,EACnC,WAAW,MAAM,QAAQ,MAAM,OAAO,GAAG;AACvC,gBAAY,UAAU,CAAC,GAAG,MAAM,OAAO;AAAA,EACzC;AACA,MAAI,MAAM,UAAU,CAAC,MAAM,QAAQ,MAAM,MAAM,GAAG;AAChD,gBAAY,SAAS,EAAE,GAAG,MAAM,OAAA;AAAA,EAClC,WAAW,MAAM,QAAQ,MAAM,MAAM,GAAG;AACtC,gBAAY,SAAS,CAAC,GAAG,MAAM,MAAM;AAAA,EACvC;AACA,SAAO;AACT;AAEA,SAAS,YACP,OACiC;AACjC,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,SAAS,EAAE,GAAG,OAAA,IAAW;AAClC;AAEA,SAAS,kBAAkB,UAAyC;AAClE,SAAO,KAAK,UAAU,UAAU,QAAQ,CAAC;AAC3C;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,MAAM,QAAQ,KAAK,UAAU,CAAC,GAAG,KAAK,EAAE,KAAA;AAC5C,MAAI,SAAS,OAAO,UAAU,UAAU;AACtC,UAAM,MAA+B,CAAA;AACrC,eAAW,OAAO,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC3C,YAAM,OAAQ,MAAkC,GAAG;AACnD,UAAI,SAAS,OAAW,KAAI,GAAG,IAAI,UAAU,IAAI;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;"}

package/dist/data/ai/SpecRuntimeEditor/summaries.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [value.permissions?.mode || \"default\"];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":";;AAiHO,SAAS,gBAAgB,OAA+C;;AAC7E,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;;"}
+{"version":3,"file":"summaries.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":";;AAiHO,SAAS,gBAAgB,OAA+C;;AAC7E,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;;"}

package/dist/data/ai/SpecRuntimeEditor/summaries.d.ts

@@ -4,7 +4,7 @@ import { PermissionListEntry } from './permissions-model';
 export declare function summarizeModel(value: AISpecRuntimeValue, models?: ChatModel[]): string;
 export declare function summarizePrompt(value: AISpecRuntimeValue): string;
 export declare function summarizeWorkspace(value: AISpecRuntimeValue): string;
-export declare function summarizePermissions(value: AISpecRuntimeValue, entries: PermissionListEntry[]): string;
+export declare function summarizePermissions(_value: AISpecRuntimeValue, entries: PermissionListEntry[]): string;
 export declare function summarizeEnvironment(value: AISpecRuntimeValue): string;
 export declare function summarizeVerify(value: AISpecRuntimeValue): string;
 export declare function summarizeCommit(value: AISpecRuntimeValue): string;

package/dist/data/ai/SpecRuntimeEditor/summaries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAc,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,SAAS,EAAO,GACvB,MAAM,CAQR;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAQjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CASpE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,GAC7B,MAAM,CAWR;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CActE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAYjE;AASD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAMjE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAUlE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAY7E"}
+{"version":3,"file":"summaries.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAc,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,SAAS,EAAO,GACvB,MAAM,CAQR;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAQjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CASpE;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB,EAAE,GAC7B,MAAM,CAWR;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CActE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAYjE;AASD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAMjE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAUlE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAY7E"}

package/dist/data/ai/SpecRuntimeEditor/summaries.js.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [value.permissions?.mode || \"default\"];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAiHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}
+{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAiHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}

package/dist/data/ai/SpecRuntimeEditor/types.cjs

@@ -13,7 +13,7 @@ const SPEC_RUNTIME_SECTIONS = [
   {
     id: "model",
     label: "Model",
-    hint: "Which model runs, how hard it reasons, and its budget ceiling.",
+    hint: "Which model runs, how it reasons, what it loads, and its budget ceiling.",
     icon: UiRobotAi.UiRobotAi,
     iconClassName: "text-indigo-500"
   },
@@ -44,7 +44,7 @@ const SPEC_RUNTIME_SECTIONS = [
   {
     id: "permissions",
     label: "Permissions",
-    hint: "What the agent may do without asking. Overrides the preset above.",
+    hint: "Tool, MCP, and plugin access layered over the selected posture.",
     icon: UiShield.UiShield,
     iconClassName: "text-emerald-600 dark:text-emerald-400"
   },
@@ -76,10 +76,5 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal.UiTerminal
   }
 ];
-function sectionNumber(id) {
-  const index = SPEC_RUNTIME_SECTIONS.findIndex((section) => section.id === id);
-  return String(index + 1).padStart(2, "0");
-}
 exports.SPEC_RUNTIME_SECTIONS = SPEC_RUNTIME_SECTIONS;
-exports.sectionNumber = sectionNumber;
 //# sourceMappingURL=types.cjs.map

package/dist/data/ai/SpecRuntimeEditor/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how hard it reasons, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"What the agent may do without asking. Overrides the preset above.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n\nexport function sectionNumber(id: SpecSectionId): string {\n  const index = SPEC_RUNTIME_SECTIONS.findIndex((section) => section.id === id);\n  return String(index + 1).padStart(2, \"0\");\n}\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;AAEO,SAAS,cAAc,IAA2B;AACvD,QAAM,QAAQ,sBAAsB,UAAU,CAAC,YAAY,QAAQ,OAAO,EAAE;AAC5E,SAAO,OAAO,QAAQ,CAAC,EAAE,SAAS,GAAG,GAAG;AAC1C;;;"}
+{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;;"}

package/dist/data/ai/SpecRuntimeEditor/types.d.ts

@@ -67,5 +67,4 @@ export type SpecSectionMeta = {
     iconClassName?: string | undefined;
 };
 export declare const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[];
-export declare function sectionNumber(id: SpecSectionId): string;
 //# sourceMappingURL=types.d.ts.map

package/dist/data/ai/SpecRuntimeEditor/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC;AAEF,wBAAgB,aAAa,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CAGvD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC"}

package/dist/data/ai/SpecRuntimeEditor/types.js

@@ -11,7 +11,7 @@ const SPEC_RUNTIME_SECTIONS = [
   {
     id: "model",
     label: "Model",
-    hint: "Which model runs, how hard it reasons, and its budget ceiling.",
+    hint: "Which model runs, how it reasons, what it loads, and its budget ceiling.",
     icon: UiRobotAi,
     iconClassName: "text-indigo-500"
   },
@@ -42,7 +42,7 @@ const SPEC_RUNTIME_SECTIONS = [
   {
     id: "permissions",
     label: "Permissions",
-    hint: "What the agent may do without asking. Overrides the preset above.",
+    hint: "Tool, MCP, and plugin access layered over the selected posture.",
     icon: UiShield,
     iconClassName: "text-emerald-600 dark:text-emerald-400"
   },
@@ -74,12 +74,7 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal
   }
 ];
-function sectionNumber(id) {
-  const index = SPEC_RUNTIME_SECTIONS.findIndex((section) => section.id === id);
-  return String(index + 1).padStart(2, "0");
-}
 export {
-  SPEC_RUNTIME_SECTIONS,
-  sectionNumber
+  SPEC_RUNTIME_SECTIONS
 };
 //# sourceMappingURL=types.js.map