@flanksource/clicky-ui 0.3.35 → 0.3.37

package/dist/data/ai/SpecRuntimeEditor/summaries.js.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAuHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}
+{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { UNSPECIFIED_LABEL } from \"../../runtime/unspecified\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : UNSPECIFIED_LABEL;\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAwHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}

package/dist/data/ai/SpecRuntimeEditor/types.cjs

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const UiRobotAi = require("../../../icons/components/UiRobotAi.cjs");
 const UiFileText = require("../../../icons/components/UiFileText.cjs");
-const UiGitBranch = require("../../../icons/components/UiGitBranch.cjs");
-const UiBox = require("../../../icons/components/UiBox.cjs");
-const UiShield = require("../../../icons/components/UiShield.cjs");
 const UiBraces = require("../../../icons/components/UiBraces.cjs");
+const UiShield = require("../../../icons/components/UiShield.cjs");
+const UiRobotAi = require("../../../icons/components/UiRobotAi.cjs");
 const UiSealCheck = require("../../../icons/components/UiSealCheck.cjs");
+const UiGitBranch = require("../../../icons/components/UiGitBranch.cjs");
+const UiBox = require("../../../icons/components/UiBox.cjs");
 const UiGitCommit = require("../../../icons/components/UiGitCommit.cjs");
 const UiTerminal = require("../../../icons/components/UiTerminal.cjs");
 const SPEC_RUNTIME_SECTIONS = [
@@ -76,5 +76,18 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal.UiTerminal
   }
 ];
+const SPEC_RUNTIME_TABS = [
+  { id: "system", label: "System Prompt", icon: UiFileText.UiFileText, sections: ["prompt"] },
+  {
+    id: "environment",
+    label: "Environment",
+    icon: UiBraces.UiBraces,
+    sections: ["workspace", "sandbox", "environment"]
+  },
+  { id: "permissions", label: "Permissions", icon: UiShield.UiShield, sections: ["permissions"] },
+  { id: "model", label: "Model", icon: UiRobotAi.UiRobotAi, sections: ["model", "cli"] },
+  { id: "workflow", label: "Workflow", icon: UiSealCheck.UiSealCheck, sections: ["verify", "commit"] }
+];
 exports.SPEC_RUNTIME_SECTIONS = SPEC_RUNTIME_SECTIONS;
+exports.SPEC_RUNTIME_TABS = SPEC_RUNTIME_TABS;
 //# sourceMappingURL=types.cjs.map

package/dist/data/ai/SpecRuntimeEditor/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;;"}
+{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n\n/** Model-section fields a host renders beside the editor, so the section omits them. */\nexport type SpecRuntimeHostField = \"runtime\" | \"budget.timeout\" | \"budget.cost\";\n\n/**\n * A tab in the editor's tabbed layout. It either groups spec sections (hidden\n * when the selected runtime filters all of them out) or carries a host-owned\n * panel such as a prompt composer or a request preview.\n */\nexport type SpecRuntimeTab = {\n  id: string;\n  label: string;\n  icon?: StaticIconComponent | undefined;\n  sections?: readonly SpecSectionId[] | undefined;\n  content?: ReactNode | undefined;\n};\n\nexport const SPEC_RUNTIME_TABS: SpecRuntimeTab[] = [\n  { id: \"system\", label: \"System Prompt\", icon: UiFileText, sections: [\"prompt\"] },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    icon: UiBraces,\n    sections: [\"workspace\", \"sandbox\", \"environment\"],\n  },\n  { id: \"permissions\", label: \"Permissions\", icon: UiShield, sections: [\"permissions\"] },\n  { id: \"model\", label: \"Model\", icon: UiRobotAi, sections: [\"model\", \"cli\"] },\n  { id: \"workflow\", label: \"Workflow\", icon: UiSealCheck, sections: [\"verify\", \"commit\"] },\n];\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAuGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;AAkBO,MAAM,oBAAsC;AAAA,EACjD,EAAE,IAAI,UAAU,OAAO,iBAAiB,MAAMP,uBAAY,UAAU,CAAC,QAAQ,EAAA;AAAA,EAC7E;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAMI,SAAAA;AAAAA,IACN,UAAU,CAAC,aAAa,WAAW,aAAa;AAAA,EAAA;AAAA,EAElD,EAAE,IAAI,eAAe,OAAO,eAAe,MAAMD,mBAAU,UAAU,CAAC,aAAa,EAAA;AAAA,EACnF,EAAE,IAAI,SAAS,OAAO,SAAS,MAAMJ,UAAAA,WAAW,UAAU,CAAC,SAAS,KAAK,EAAA;AAAA,EACzE,EAAE,IAAI,YAAY,OAAO,YAAY,MAAMM,YAAAA,aAAa,UAAU,CAAC,UAAU,QAAQ,EAAA;AACvF;;;"}

package/dist/data/ai/SpecRuntimeEditor/types.d.ts

@@ -1,3 +1,4 @@
+import { ReactNode } from 'react';
 import { KeyPreview, SecretKind, SecretResource } from '../../../components/SecretKeySelector';
 import { StaticIconComponent } from '../../Icon';
 import { JsonSchemaObject } from '../../../components/json-schema-form-types';
@@ -67,4 +68,19 @@ export type SpecSectionMeta = {
     iconClassName?: string | undefined;
 };
 export declare const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[];
+/** Model-section fields a host renders beside the editor, so the section omits them. */
+export type SpecRuntimeHostField = "runtime" | "budget.timeout" | "budget.cost";
+/**
+ * A tab in the editor's tabbed layout. It either groups spec sections (hidden
+ * when the selected runtime filters all of them out) or carries a host-owned
+ * panel such as a prompt composer or a request preview.
+ */
+export type SpecRuntimeTab = {
+    id: string;
+    label: string;
+    icon?: StaticIconComponent | undefined;
+    sections?: readonly SpecSectionId[] | undefined;
+    content?: ReactNode | undefined;
+};
+export declare const SPEC_RUNTIME_TABS: SpecRuntimeTab[];
 //# sourceMappingURL=types.d.ts.map

package/dist/data/ai/SpecRuntimeEditor/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEhF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IAChD,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAW7C,CAAC"}

package/dist/data/ai/SpecRuntimeEditor/types.js

@@ -1,10 +1,10 @@
-import { UiRobotAi } from "../../../icons/components/UiRobotAi.js";
 import { UiFileText } from "../../../icons/components/UiFileText.js";
-import { UiGitBranch } from "../../../icons/components/UiGitBranch.js";
-import { UiBox } from "../../../icons/components/UiBox.js";
-import { UiShield } from "../../../icons/components/UiShield.js";
 import { UiBraces } from "../../../icons/components/UiBraces.js";
+import { UiShield } from "../../../icons/components/UiShield.js";
+import { UiRobotAi } from "../../../icons/components/UiRobotAi.js";
 import { UiSealCheck } from "../../../icons/components/UiSealCheck.js";
+import { UiGitBranch } from "../../../icons/components/UiGitBranch.js";
+import { UiBox } from "../../../icons/components/UiBox.js";
 import { UiGitCommit } from "../../../icons/components/UiGitCommit.js";
 import { UiTerminal } from "../../../icons/components/UiTerminal.js";
 const SPEC_RUNTIME_SECTIONS = [
@@ -74,7 +74,20 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal
   }
 ];
+const SPEC_RUNTIME_TABS = [
+  { id: "system", label: "System Prompt", icon: UiFileText, sections: ["prompt"] },
+  {
+    id: "environment",
+    label: "Environment",
+    icon: UiBraces,
+    sections: ["workspace", "sandbox", "environment"]
+  },
+  { id: "permissions", label: "Permissions", icon: UiShield, sections: ["permissions"] },
+  { id: "model", label: "Model", icon: UiRobotAi, sections: ["model", "cli"] },
+  { id: "workflow", label: "Workflow", icon: UiSealCheck, sections: ["verify", "commit"] }
+];
 export {
-  SPEC_RUNTIME_SECTIONS
+  SPEC_RUNTIME_SECTIONS,
+  SPEC_RUNTIME_TABS
 };
 //# sourceMappingURL=types.js.map

package/dist/data/ai/SpecRuntimeEditor/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n"],"names":[],"mappings":";;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EAAA;AAEV;"}
+{"version":3,"file":"types.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n\n/** Model-section fields a host renders beside the editor, so the section omits them. */\nexport type SpecRuntimeHostField = \"runtime\" | \"budget.timeout\" | \"budget.cost\";\n\n/**\n * A tab in the editor's tabbed layout. It either groups spec sections (hidden\n * when the selected runtime filters all of them out) or carries a host-owned\n * panel such as a prompt composer or a request preview.\n */\nexport type SpecRuntimeTab = {\n  id: string;\n  label: string;\n  icon?: StaticIconComponent | undefined;\n  sections?: readonly SpecSectionId[] | undefined;\n  content?: ReactNode | undefined;\n};\n\nexport const SPEC_RUNTIME_TABS: SpecRuntimeTab[] = [\n  { id: \"system\", label: \"System Prompt\", icon: UiFileText, sections: [\"prompt\"] },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    icon: UiBraces,\n    sections: [\"workspace\", \"sandbox\", \"environment\"],\n  },\n  { id: \"permissions\", label: \"Permissions\", icon: UiShield, sections: [\"permissions\"] },\n  { id: \"model\", label: \"Model\", icon: UiRobotAi, sections: [\"model\", \"cli\"] },\n  { id: \"workflow\", label: \"Workflow\", icon: UiSealCheck, sections: [\"verify\", \"commit\"] },\n];\n"],"names":[],"mappings":";;;;;;;;;AAuGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EAAA;AAEV;AAkBO,MAAM,oBAAsC;AAAA,EACjD,EAAE,IAAI,UAAU,OAAO,iBAAiB,MAAM,YAAY,UAAU,CAAC,QAAQ,EAAA;AAAA,EAC7E;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,UAAU,CAAC,aAAa,WAAW,aAAa;AAAA,EAAA;AAAA,EAElD,EAAE,IAAI,eAAe,OAAO,eAAe,MAAM,UAAU,UAAU,CAAC,aAAa,EAAA;AAAA,EACnF,EAAE,IAAI,SAAS,OAAO,SAAS,MAAM,WAAW,UAAU,CAAC,SAAS,KAAK,EAAA;AAAA,EACzE,EAAE,IAAI,YAAY,OAAO,YAAY,MAAM,aAAa,UAAU,CAAC,UAAU,QAAQ,EAAA;AACvF;"}

package/dist/data/ai/SpecRuntimeEditor/update.cjs

@@ -43,10 +43,7 @@ function withSandbox(value, patch) {
 function withSandboxMode(value, mode) {
   const current = sandboxRef(value);
   if (current.mode === mode) return value;
-  if (mode === "off") return withRoot(value, { sandbox: { mode } });
-  return withRoot(value, {
-    sandbox: { mode, ...current.approval ? { approval: current.approval } : {} }
-  });
+  return withRoot(value, { sandbox: { mode } });
 }
 function withSandboxBackend(value, backend) {
   const next = { ...sandboxRef(value) };
@@ -62,11 +59,15 @@ function withSandboxAgent(value, agent) {
   else delete next.agent;
   return withRoot(value, { sandbox: next });
 }
-function withSandboxApproval(value, approval) {
-  if (sandboxRef(value).mode === "off") {
-    throw new Error("sandbox mode off does not accept approval");
+function withPermissionMode(value, mode) {
+  const next = { ...value.permissions };
+  if (mode) next.mode = mode;
+  else delete next.mode;
+  if (Object.keys(next).length === 0) {
+    const { permissions: _permissions, ...rest } = value;
+    return rest;
   }
-  return withSandbox(value, { approval });
+  return withRoot(value, { permissions: next });
 }
 function withSandboxDispatch(value, patch) {
   if (sandboxRef(value).mode !== "git-agent") {
@@ -174,11 +175,11 @@ exports.withCommit = withCommit;
 exports.withCommitPhase = withCommitPhase;
 exports.withMemory = withMemory;
 exports.withOptionalRoot = withOptionalRoot;
+exports.withPermissionMode = withPermissionMode;
 exports.withPrompt = withPrompt;
 exports.withRoot = withRoot;
 exports.withSandbox = withSandbox;
 exports.withSandboxAgent = withSandboxAgent;
-exports.withSandboxApproval = withSandboxApproval;
 exports.withSandboxBackend = withSandboxBackend;
 exports.withSandboxDispatch = withSandboxDispatch;
 exports.withSandboxMode = withSandboxMode;

package/dist/data/ai/SpecRuntimeEditor/update.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"update.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  if (mode === \"off\") return withRoot(value, { sandbox: { mode } });\n  return withRoot(value, {\n    sandbox: { mode, ...(current.approval ? { approval: current.approval } : {}) },\n  });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxApproval(\n  value: AISpecRuntimeValue,\n  approval: SpecPermissionMode,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode === \"off\") {\n    throw new Error(\"sandbox mode off does not accept approval\");\n  }\n  return withSandbox(value, { approval });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":";;AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,MAAI,SAAS,MAAO,QAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAChE,SAAO,SAAS,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAA,IAAa,CAAA,EAAC;AAAA,EAAG,CAC9E;AACH;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,oBACd,OACA,UACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,OAAO;AACpC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO,YAAY,OAAO,EAAE,UAAU;AACxC;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;;AACpB,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;;AACpB,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;;AAC1B,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;;AACxE,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;;AACxE,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"update.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  return withRoot(value, { sandbox: { mode } });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\n// The base posture is independent of the sandbox (see AISpecRuntimePermissions\n// doc comment), so unlike sandbox settings it deletes cleanly to Unspecified\n// without needing a mode to be configured first.\nexport function withPermissionMode(\n  value: AISpecRuntimeValue,\n  mode: SpecPermissionMode | undefined,\n): AISpecRuntimeValue {\n  const next = { ...value.permissions } as AISpecRuntimePermissions;\n  if (mode) next.mode = mode;\n  else delete next.mode;\n  if (Object.keys(next).length === 0) {\n    const { permissions: _permissions, ...rest } = value;\n    return rest as AISpecRuntimeValue;\n  }\n  return withRoot(value, { permissions: next });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":";;AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,SAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAC9C;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAKO,SAAS,mBACd,OACA,MACoB;AACpB,QAAM,OAAO,EAAE,GAAG,MAAM,YAAA;AACxB,MAAI,WAAW,OAAO;AAAA,cACV,KAAK;AACjB,MAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AAClC,UAAM,EAAE,aAAa,cAAc,GAAG,SAAS;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,OAAO,EAAE,aAAa,MAAM;AAC9C;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;;AACpB,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;;AACpB,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;;AAC1B,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;;AACxE,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;;AACxE,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/data/ai/SpecRuntimeEditor/update.d.ts

@@ -24,7 +24,7 @@ export declare function withSandbox(value: AISpecRuntimeValue, patch: Partial<AI
 export declare function withSandboxMode(value: AISpecRuntimeValue, mode: SpecSandboxMode): AISpecRuntimeValue;
 export declare function withSandboxBackend(value: AISpecRuntimeValue, backend: string): AISpecRuntimeValue;
 export declare function withSandboxAgent(value: AISpecRuntimeValue, agent: string): AISpecRuntimeValue;
-export declare function withSandboxApproval(value: AISpecRuntimeValue, approval: SpecPermissionMode): AISpecRuntimeValue;
+export declare function withPermissionMode(value: AISpecRuntimeValue, mode: SpecPermissionMode | undefined): AISpecRuntimeValue;
 export declare function withSandboxPolicy(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSandboxPolicy>): AISpecRuntimeValue;
 export declare function withSandboxDispatch(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSandboxDispatch>): AISpecRuntimeValue;
 export declare function withSetup(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSetup>): AISpecRuntimeValue;

package/dist/data/ai/SpecRuntimeEditor/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,KAAK,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE5D,wBAAgB,QAAQ,CACtB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,kBAAkB,EAC7B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,UAAU,GACjB,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,UAAU,EACrB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAChC,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAEpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,oBAAoB,CAK1E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACnC,kBAAkB,CAMpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,eAAe,GACpB,kBAAkB,CAOpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,MAAM,GACd,kBAAkB,CAMpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAMpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAKpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,0BAA0B,CAAC,GACzC,kBAAkB,CAOpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,GAC3C,kBAAkB,CAOpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,SAAS,GACf,kBAAkB,CAIpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GACzC,kBAAkB,CAOpB;AAKD,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GACzB,kBAAkB,CAKpB;AAKD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,eAAe,GAAG,MAAM,GAC9B,kBAAkB,CAKpB;AAID,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,GACxB,eAAe,GAAG,MAAM,CAK1B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,aAAa,GACnB,kBAAkB,CAEpB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAWlE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,GAAG,SAAS,CAKpB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,KAAK,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE5D,wBAAgB,QAAQ,CACtB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,kBAAkB,EAC7B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,UAAU,GACjB,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,UAAU,EACrB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAChC,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAEpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,oBAAoB,CAK1E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACnC,kBAAkB,CAMpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,eAAe,GACpB,kBAAkB,CAIpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,MAAM,GACd,kBAAkB,CAMpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAMpB;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,kBAAkB,CASpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,0BAA0B,CAAC,GACzC,kBAAkB,CAOpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,GAC3C,kBAAkB,CAOpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,SAAS,GACf,kBAAkB,CAIpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GACzC,kBAAkB,CAOpB;AAKD,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GACzB,kBAAkB,CAKpB;AAKD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,eAAe,GAAG,MAAM,GAC9B,kBAAkB,CAKpB;AAID,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,GACxB,eAAe,GAAG,MAAM,CAK1B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,aAAa,GACnB,kBAAkB,CAEpB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAWlE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,GAAG,SAAS,CAKpB"}

package/dist/data/ai/SpecRuntimeEditor/update.js

@@ -41,10 +41,7 @@ function withSandbox(value, patch) {
 function withSandboxMode(value, mode) {
   const current = sandboxRef(value);
   if (current.mode === mode) return value;
-  if (mode === "off") return withRoot(value, { sandbox: { mode } });
-  return withRoot(value, {
-    sandbox: { mode, ...current.approval ? { approval: current.approval } : {} }
-  });
+  return withRoot(value, { sandbox: { mode } });
 }
 function withSandboxBackend(value, backend) {
   const next = { ...sandboxRef(value) };
@@ -60,11 +57,15 @@ function withSandboxAgent(value, agent) {
   else delete next.agent;
   return withRoot(value, { sandbox: next });
 }
-function withSandboxApproval(value, approval) {
-  if (sandboxRef(value).mode === "off") {
-    throw new Error("sandbox mode off does not accept approval");
+function withPermissionMode(value, mode) {
+  const next = { ...value.permissions };
+  if (mode) next.mode = mode;
+  else delete next.mode;
+  if (Object.keys(next).length === 0) {
+    const { permissions: _permissions, ...rest } = value;
+    return rest;
   }
-  return withSandbox(value, { approval });
+  return withRoot(value, { permissions: next });
 }
 function withSandboxDispatch(value, patch) {
   if (sandboxRef(value).mode !== "git-agent") {
@@ -173,11 +174,11 @@ export {
   withCommitPhase,
   withMemory,
   withOptionalRoot,
+  withPermissionMode,
   withPrompt,
   withRoot,
   withSandbox,
   withSandboxAgent,
-  withSandboxApproval,
   withSandboxBackend,
   withSandboxDispatch,
   withSandboxMode,

package/dist/data/ai/SpecRuntimeEditor/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  if (mode === \"off\") return withRoot(value, { sandbox: { mode } });\n  return withRoot(value, {\n    sandbox: { mode, ...(current.approval ? { approval: current.approval } : {}) },\n  });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxApproval(\n  value: AISpecRuntimeValue,\n  approval: SpecPermissionMode,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode === \"off\") {\n    throw new Error(\"sandbox mode off does not accept approval\");\n  }\n  return withSandbox(value, { approval });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":"AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,MAAI,SAAS,MAAO,QAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAChE,SAAO,SAAS,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAA,IAAa,CAAA,EAAC;AAAA,EAAG,CAC9E;AACH;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,oBACd,OACA,UACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,OAAO;AACpC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO,YAAY,OAAO,EAAE,UAAU;AACxC;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;AAjLf;AAkLL,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;AA1Lf;AA2LL,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;AA5Mf;AA6ML,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;AA3Nf;AA4NL,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;AAnPrB;AAoPL,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;AAzSnE;AA0SL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;AAhTnE;AAiTL,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;"}
+{"version":3,"file":"update.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  return withRoot(value, { sandbox: { mode } });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\n// The base posture is independent of the sandbox (see AISpecRuntimePermissions\n// doc comment), so unlike sandbox settings it deletes cleanly to Unspecified\n// without needing a mode to be configured first.\nexport function withPermissionMode(\n  value: AISpecRuntimeValue,\n  mode: SpecPermissionMode | undefined,\n): AISpecRuntimeValue {\n  const next = { ...value.permissions } as AISpecRuntimePermissions;\n  if (mode) next.mode = mode;\n  else delete next.mode;\n  if (Object.keys(next).length === 0) {\n    const { permissions: _permissions, ...rest } = value;\n    return rest as AISpecRuntimeValue;\n  }\n  return withRoot(value, { permissions: next });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":"AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,SAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAC9C;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAKO,SAAS,mBACd,OACA,MACoB;AACpB,QAAM,OAAO,EAAE,GAAG,MAAM,YAAA;AACxB,MAAI,WAAW,OAAO;AAAA,cACV,KAAK;AACjB,MAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AAClC,UAAM,EAAE,aAAa,cAAc,GAAG,SAAS;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,OAAO,EAAE,aAAa,MAAM;AAC9C;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;AArLf;AAsLL,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;AA9Lf;AA+LL,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;AAhNf;AAiNL,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;AA/Nf;AAgOL,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;AAvPrB;AAwPL,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;AA7SnE;AA8SL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;AApTnE;AAqTL,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;"}

package/dist/data/ai/SpecRuntimeEditor.model.cjs

@@ -211,7 +211,12 @@ function compactPermissions(value, legacySkills) {
   if (!value && !(legacySkills == null ? void 0 : legacySkills.length)) return void 0;
   const permissions = {};
   const mode = cleanString(value == null ? void 0 : value.mode);
-  if (mode) permissions.mode = mode;
+  if (mode) {
+    if (!SpecRuntimeEditor_sandboxModel.SPEC_PERMISSION_MODES.includes(mode)) {
+      throw new Error(`permissions.mode ${JSON.stringify(mode)} is invalid`);
+    }
+    permissions.mode = mode;
+  }
   const presets = compactList(value == null ? void 0 : value.presets);
   if (presets) permissions.presets = presets;
   const tools = compactToolPolicies(value == null ? void 0 : value.tools);