@flanksource/clicky-ui 0.3.36 → 0.3.38

package/dist/data/ai/SpecRuntimeEditor/permissions-model.js

@@ -1,4 +1,23 @@
+import { runtimeSchemaPropertyAtPath } from "../../runtime/runtime-field-support.js";
 import { normalizeResourcePolicies, normalizeMCPPermissions, normalizeToolPolicies } from "../SpecRuntimeEditor.model.js";
+import { SPEC_PERMISSION_MODES } from "../SpecRuntimeEditor.sandbox-model.js";
+function publishedPermissionModes(schema) {
+  var _a;
+  if (!schema) return [...SPEC_PERMISSION_MODES];
+  const values = (_a = runtimeSchemaPropertyAtPath(schema, "permissions.mode")) == null ? void 0 : _a.enum;
+  if (values == null) return [];
+  if (!Array.isArray(values)) {
+    throw new Error("permissions.mode must publish an enum");
+  }
+  return values.map((value) => {
+    if (typeof value !== "string" || !SPEC_PERMISSION_MODES.includes(value)) {
+      throw new Error(
+        `permissions.mode published unsupported value ${JSON.stringify(value)}`
+      );
+    }
+    return value;
+  });
+}
 const TOOL_POLICY_MODES = [
   "auto",
   "ask",
@@ -243,6 +262,7 @@ export {
   mcpPermissionModes,
   permissionAddPlaceholder,
   permissionDomainGroup,
+  publishedPermissionModes,
   specPermissionEntries,
   toolDefaultPolicy,
   withAddedPermission,

package/dist/data/ai/SpecRuntimeEditor/permissions-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-model.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/permissions-model.ts"],"sourcesContent":["import type { ToolMeta } from \"../../chat/types\";\nimport {\n  normalizeMCPPermissions,\n  normalizeResourcePolicies,\n  normalizeToolPolicies,\n  type AISpecRuntimeMCPPermissions,\n  type AISpecRuntimePermissionCatalog,\n  type AISpecRuntimePermissionCatalogItem,\n  type AISpecRuntimeResourcePolicies,\n  type AISpecRuntimeToolPolicies,\n  type AISpecRuntimeValue,\n  type SpecResourceMode,\n  type SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\n\nexport type PermissionDomain = \"tools\" | \"mcp\" | \"plugins\" | \"skills\";\nexport type PermissionListMode = SpecToolPolicy | SpecResourceMode;\n\nexport type PermissionListEntry = {\n  id: string;\n  label: string;\n  group: string;\n  domain: PermissionDomain;\n  mode: PermissionListMode;\n  description?: string | undefined;\n  source?: string | undefined;\n  sourcePath?: string | undefined;\n};\n\nexport const TOOL_POLICY_MODES: SpecToolPolicy[] = [\n  \"auto\",\n  \"ask\",\n  \"allow\",\n  \"deny\",\n];\nexport const RESOURCE_MODES: SpecResourceMode[] = [\"enabled\", \"disabled\"];\n\nconst TOOL_POLICY_LABEL: Record<SpecToolPolicy, string> = {\n  auto: \"Auto\",\n  ask: \"Ask\",\n  allow: \"Allow\",\n  deny: \"Deny\",\n};\nconst RESOURCE_MODE_LABEL: Record<SpecResourceMode, string> = {\n  enabled: \"Enabled\",\n  disabled: \"Disabled\",\n};\n\nexport function buildPermissionCatalog(\n  catalog: AISpecRuntimePermissionCatalog | undefined,\n  tools: ToolMeta[],\n): Required<AISpecRuntimePermissionCatalog> {\n  return {\n    tools:\n      catalog?.tools ??\n      tools.map((tool) => {\n        const item: AISpecRuntimePermissionCatalogItem = {\n          id: tool.name,\n          label: tool.label || tool.name,\n          defaultMode: toolDefaultPolicy(tool.defaultPermission),\n        };\n        if (tool.group) item.group = tool.group;\n        if (tool.description) item.description = tool.description;\n        return item;\n      }),\n    mcp: catalog?.mcp ?? [],\n    plugins: catalog?.plugins ?? [],\n    skills: catalog?.skills ?? [],\n  };\n}\n\nexport function buildPermissionEntries(\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n  toolPolicies: AISpecRuntimeToolPolicies,\n  mcp: AISpecRuntimeMCPPermissions,\n  pluginModes: AISpecRuntimeResourcePolicies,\n  skillModes: AISpecRuntimeResourcePolicies,\n): PermissionListEntry[] {\n  return [\n    ...buildToolPermissionEntries(catalog.tools, toolPolicies),\n    ...buildResourcePermissionEntries(\n      \"mcp\",\n      catalog.mcp,\n      mcpPermissionModes(mcp),\n      mcp.servers,\n      mcp.disabled ? \"disabled\" : \"enabled\",\n    ),\n    ...buildResourcePermissionEntries(\"plugins\", catalog.plugins, pluginModes),\n    ...buildResourcePermissionEntries(\"skills\", catalog.skills, skillModes),\n  ];\n}\n\n// Builds the entry list straight from a spec value: normalize the four policy\n// maps, then merge them with the catalog.\nexport function specPermissionEntries(\n  value: AISpecRuntimeValue,\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n): PermissionListEntry[] {\n  const skillModes = normalizeResourcePolicies(\n    value.permissions?.skills,\n    value.memory?.skills,\n  );\n  if (value.memory?.skipSkills) {\n    for (const item of catalog.skills) {\n      skillModes[item.id] = \"disabled\";\n    }\n    for (const id of value.memory.skills ?? []) {\n      skillModes[id] = \"disabled\";\n    }\n  }\n  return buildPermissionEntries(\n    catalog,\n    normalizeToolPolicies(value.permissions?.tools),\n    normalizeMCPPermissions(value.permissions?.mcp),\n    normalizeResourcePolicies(value.permissions?.plugins),\n    skillModes,\n  );\n}\n\n// Applies a mode to the given entries, returning the next spec value. Writing\n// any skill entry migrates legacy memory.skills into permissions.skills.\nexport function withPermissionEntries(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  mode: PermissionListMode,\n): AISpecRuntimeValue {\n  const nextTools: AISpecRuntimeToolPolicies = {\n    ...normalizeToolPolicies(value.permissions?.tools),\n  };\n  let nextMCP = { ...normalizeMCPPermissions(value.permissions?.mcp) };\n  const nextPlugins: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(value.permissions?.plugins),\n  };\n  const nextSkills: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(\n      value.permissions?.skills,\n      value.memory?.skills,\n    ),\n  };\n  let touchedSkills = false;\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\" && isSpecToolPolicy(mode)) {\n      nextTools[entry.id] = mode;\n    } else if (entry.domain === \"mcp\" && isSpecResourceMode(mode)) {\n      nextMCP = withMCPMode(nextMCP, entry.id, mode);\n    } else if (entry.domain === \"plugins\" && isSpecResourceMode(mode)) {\n      nextPlugins[entry.id] = mode;\n    } else if (entry.domain === \"skills\" && isSpecResourceMode(mode)) {\n      nextSkills[entry.id] = mode;\n      touchedSkills = true;\n    }\n  }\n\n  const memoryWithoutSkipSkills = { ...value.memory };\n  delete memoryWithoutSkipSkills.skipSkills;\n  return {\n    ...value,\n    permissions: {\n      ...value.permissions,\n      tools: nextTools,\n      mcp: nextMCP,\n      plugins: nextPlugins,\n      skills: nextSkills,\n    },\n    ...(touchedSkills\n      ? { memory: { ...memoryWithoutSkipSkills, skills: [] } }\n      : undefined),\n  };\n}\n\nexport function withAddedPermission(\n  value: AISpecRuntimeValue,\n  domain: PermissionDomain,\n  id: string,\n): AISpecRuntimeValue | undefined {\n  const trimmed = id.trim();\n  if (!trimmed) return undefined;\n  const mode: PermissionListMode = domain === \"tools\" ? \"auto\" : \"enabled\";\n  return withPermissionEntries(\n    value,\n    [\n      {\n        id: trimmed,\n        label: trimmed,\n        group: permissionDomainGroup(domain),\n        domain,\n        mode,\n      },\n    ],\n    mode,\n  );\n}\n\nfunction buildToolPermissionEntries(\n  items: AISpecRuntimePermissionCatalogItem[],\n  policies: AISpecRuntimeToolPolicies,\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || \"Tools\",\n      domain: \"tools\",\n      mode: policies[key] ?? toolDefaultPolicy(item?.defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of Object.keys(policies)) add(id, undefined);\n  return entries;\n}\n\nfunction buildResourcePermissionEntries(\n  domain: Exclude<PermissionDomain, \"tools\">,\n  items: AISpecRuntimePermissionCatalogItem[],\n  modes: AISpecRuntimeResourcePolicies,\n  extraIDs: string[] | undefined = undefined,\n  defaultMode: SpecResourceMode = \"enabled\",\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || permissionDomainGroup(domain),\n      domain,\n      mode: modes[key] ?? resourceDefaultMode(item?.defaultMode, defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of extraIDs ?? []) add(id, undefined);\n  for (const id of Object.keys(modes)) add(id, undefined);\n  return entries;\n}\n\nexport function groupPermissionEntries(entries: PermissionListEntry[]) {\n  const groups = new Map<string, PermissionListEntry[]>();\n  for (const entry of entries) {\n    const group = entry.group || permissionDomainGroup(entry.domain);\n    groups.set(group, [...(groups.get(group) ?? []), entry]);\n  }\n  return Array.from(groups.entries());\n}\n\nexport function permissionGroupMode(\n  entries: PermissionListEntry[],\n): PermissionListMode | \"mixed\" {\n  const first = entries[0]?.mode;\n  if (!first) return \"mixed\";\n  return entries.every((entry) => entry.mode === first) ? first : \"mixed\";\n}\n\n// Group-level bulk controls only make sense when the group is homogeneous:\n// tool groups get the 4-state cycle, resource groups the 2-state one.\nexport function permissionGroupModeOptions(\n  entries: PermissionListEntry[],\n): readonly PermissionListMode[] {\n  if (entries.length === 0) return [];\n  const hasTools = entries.some((entry) => entry.domain === \"tools\");\n  const hasResources = entries.some((entry) => entry.domain !== \"tools\");\n  if (hasTools && hasResources) return [];\n  return hasTools ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function entryModeOptions(\n  entry: PermissionListEntry,\n): readonly PermissionListMode[] {\n  return entry.domain === \"tools\" ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function withMCPMode(\n  value: AISpecRuntimeMCPPermissions,\n  id: string,\n  mode: SpecResourceMode,\n): AISpecRuntimeMCPPermissions {\n  const next: AISpecRuntimeMCPPermissions = {\n    ...normalizeMCPPermissions(value),\n  };\n  const servers = new Set(next.servers ?? []);\n  if (mode === \"enabled\") servers.add(id);\n  if (servers.size > 0) {\n    next.servers = Array.from(servers);\n  } else {\n    delete next.servers;\n  }\n  next[id] = mode;\n  return next;\n}\n\nexport function mcpPermissionModes(\n  value: AISpecRuntimeMCPPermissions,\n): AISpecRuntimeResourcePolicies {\n  const out: AISpecRuntimeResourcePolicies = {};\n  for (const [rawKey, rawValue] of Object.entries(value)) {\n    const key = rawKey.trim();\n    if (!key || key === \"servers\" || key === \"disabled\") continue;\n    if (isSpecResourceMode(rawValue)) out[key] = rawValue;\n  }\n  return out;\n}\n\nexport function toolDefaultPolicy(value: unknown): SpecToolPolicy {\n  if (isSpecToolPolicy(value)) return value;\n  if (value === \"on\") return \"allow\";\n  if (value === \"enabled\") return \"auto\";\n  if (value === \"off\") return \"deny\";\n  if (value === \"disabled\") return \"deny\";\n  if (value === \"ask\") return \"ask\";\n  return \"auto\";\n}\n\nfunction resourceDefaultMode(\n  value: unknown,\n  fallback: SpecResourceMode,\n): SpecResourceMode {\n  return isSpecResourceMode(value) ? value : fallback;\n}\n\nexport function permissionDomainGroup(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tools\";\n    case \"mcp\":\n      return \"MCP\";\n    case \"plugins\":\n      return \"Plugins\";\n    case \"skills\":\n      return \"Skills\";\n  }\n}\n\nexport function permissionAddPlaceholder(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tool name\";\n    case \"mcp\":\n      return \"server name\";\n    case \"plugins\":\n      return \"/path/to/plugin\";\n    case \"skills\":\n      return \"$CWD/.skills\";\n  }\n}\n\nexport function isDenyMode(mode: PermissionListMode) {\n  return mode === \"deny\" || mode === \"disabled\";\n}\n\nexport function permissionModeLabel(mode: PermissionListMode | \"mixed\") {\n  if (mode === \"mixed\") return \"Mixed\";\n  return isSpecToolPolicy(mode)\n    ? TOOL_POLICY_LABEL[mode]\n    : RESOURCE_MODE_LABEL[mode];\n}\n\n// Active-state colors per the v2 design: auto=success, ask=warning,\n// allow=info, deny=error; resources keep enabled=success / disabled=muted.\nexport function permissionModeBadgeClass(mode: PermissionListMode | \"mixed\") {\n  switch (mode) {\n    case \"auto\":\n    case \"enabled\":\n      return \"bg-emerald-100 text-emerald-700 dark:bg-emerald-900 dark:text-emerald-300\";\n    case \"ask\":\n      return \"bg-amber-100 text-amber-700 dark:bg-amber-900 dark:text-amber-300\";\n    case \"allow\":\n      return \"bg-sky-100 text-sky-700 dark:bg-sky-900 dark:text-sky-300\";\n    case \"deny\":\n      return \"bg-red-100 text-red-700 dark:bg-red-900 dark:text-red-300\";\n    default:\n      return \"bg-muted text-muted-foreground\";\n  }\n}\n\nexport function isSpecToolPolicy(value: unknown): value is SpecToolPolicy {\n  return (\n    value === \"auto\" || value === \"ask\" || value === \"allow\" || value === \"deny\"\n  );\n}\n\nexport function isSpecResourceMode(value: unknown): value is SpecResourceMode {\n  return value === \"enabled\" || value === \"disabled\";\n}\n"],"names":[],"mappings":";AA6BO,MAAM,oBAAsC;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iBAAqC,CAAC,WAAW,UAAU;AAajE,SAAS,uBACd,SACA,OAC0C;AAC1C,SAAO;AAAA,IACL,QACE,mCAAS,UACT,MAAM,IAAI,CAAC,SAAS;AAClB,YAAM,OAA2C;AAAA,QAC/C,IAAI,KAAK;AAAA,QACT,OAAO,KAAK,SAAS,KAAK;AAAA,QAC1B,aAAa,kBAAkB,KAAK,iBAAiB;AAAA,MAAA;AAEvD,UAAI,KAAK,MAAO,MAAK,QAAQ,KAAK;AAClC,UAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAC9C,aAAO;AAAA,IACT,CAAC;AAAA,IACH,MAAK,mCAAS,QAAO,CAAA;AAAA,IACrB,UAAS,mCAAS,YAAW,CAAA;AAAA,IAC7B,SAAQ,mCAAS,WAAU,CAAA;AAAA,EAAC;AAEhC;AAEO,SAAS,uBACd,SACA,cACA,KACA,aACA,YACuB;AACvB,SAAO;AAAA,IACL,GAAG,2BAA2B,QAAQ,OAAO,YAAY;AAAA,IACzD,GAAG;AAAA,MACD;AAAA,MACA,QAAQ;AAAA,MACR,mBAAmB,GAAG;AAAA,MACtB,IAAI;AAAA,MACJ,IAAI,WAAW,aAAa;AAAA,IAAA;AAAA,IAE9B,GAAG,+BAA+B,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzE,GAAG,+BAA+B,UAAU,QAAQ,QAAQ,UAAU;AAAA,EAAA;AAE1E;AAIO,SAAS,sBACd,OACA,SACuB;;AACvB,QAAM,aAAa;AAAA,KACjB,WAAM,gBAAN,mBAAmB;AAAA,KACnB,WAAM,WAAN,mBAAc;AAAA,EAAA;AAEhB,OAAI,WAAM,WAAN,mBAAc,YAAY;AAC5B,eAAW,QAAQ,QAAQ,QAAQ;AACjC,iBAAW,KAAK,EAAE,IAAI;AAAA,IACxB;AACA,eAAW,MAAM,MAAM,OAAO,UAAU,CAAA,GAAI;AAC1C,iBAAW,EAAE,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,uBAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,IAC9C,yBAAwB,WAAM,gBAAN,mBAAmB,GAAG;AAAA,IAC9C,2BAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,IACpD;AAAA,EAAA;AAEJ;AAIO,SAAS,sBACd,OACA,SACA,MACoB;;AACpB,QAAM,YAAuC;AAAA,IAC3C,GAAG,uBAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,EAAA;AAEnD,MAAI,UAAU,EAAE,GAAG,yBAAwB,WAAM,gBAAN,mBAAmB,GAAG,EAAA;AACjE,QAAM,cAA6C;AAAA,IACjD,GAAG,2BAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,EAAA;AAEzD,QAAM,aAA4C;AAAA,IAChD,GAAG;AAAA,OACD,WAAM,gBAAN,mBAAmB;AAAA,OACnB,WAAM,WAAN,mBAAc;AAAA,IAAA;AAAA,EAChB;AAEF,MAAI,gBAAgB;AAEpB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,WAAW,iBAAiB,IAAI,GAAG;AACtD,gBAAU,MAAM,EAAE,IAAI;AAAA,IACxB,WAAW,MAAM,WAAW,SAAS,mBAAmB,IAAI,GAAG;AAC7D,gBAAU,YAAY,SAAS,MAAM,IAAI,IAAI;AAAA,IAC/C,WAAW,MAAM,WAAW,aAAa,mBAAmB,IAAI,GAAG;AACjE,kBAAY,MAAM,EAAE,IAAI;AAAA,IAC1B,WAAW,MAAM,WAAW,YAAY,mBAAmB,IAAI,GAAG;AAChE,iBAAW,MAAM,EAAE,IAAI;AACvB,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,0BAA0B,EAAE,GAAG,MAAM,OAAA;AAC3C,SAAO,wBAAwB;AAC/B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa;AAAA,MACX,GAAG,MAAM;AAAA,MACT,OAAO;AAAA,MACP,KAAK;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,IAAA;AAAA,IAEV,GAAI,gBACA,EAAE,QAAQ,EAAE,GAAG,yBAAyB,QAAQ,CAAA,EAAC,MACjD;AAAA,EAAA;AAER;AAEO,SAAS,oBACd,OACA,QACA,IACgC;AAChC,QAAM,UAAU,GAAG,KAAA;AACnB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAA2B,WAAW,UAAU,SAAS;AAC/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,OAAO,sBAAsB,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MAAA;AAAA,IACF;AAAA,IAEF;AAAA,EAAA;AAEJ;AAEA,SAAS,2BACP,OACA,UACA;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAQ;AAAA,MACR,MAAM,SAAS,GAAG,KAAK,kBAAkB,6BAAM,WAAW;AAAA,MAC1D,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,OAAO,KAAK,QAAQ,EAAG,KAAI,IAAI,MAAS;AACzD,SAAO;AACT;AAEA,SAAS,+BACP,QACA,OACA,OACA,WAAiC,QACjC,cAAgC,WAChC;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS,sBAAsB,MAAM;AAAA,MAClD;AAAA,MACA,MAAM,MAAM,GAAG,KAAK,oBAAoB,6BAAM,aAAa,WAAW;AAAA,MACtE,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,YAAY,CAAA,EAAI,KAAI,IAAI,MAAS;AAClD,aAAW,MAAM,OAAO,KAAK,KAAK,EAAG,KAAI,IAAI,MAAS;AACtD,SAAO;AACT;AA+BO,SAAS,iBACd,OAC+B;AAC/B,SAAO,MAAM,WAAW,UAAU,oBAAoB;AACxD;AAEO,SAAS,YACd,OACA,IACA,MAC6B;AAC7B,QAAM,OAAoC;AAAA,IACxC,GAAG,wBAAwB,KAAK;AAAA,EAAA;AAElC,QAAM,UAAU,IAAI,IAAI,KAAK,WAAW,CAAA,CAAE;AAC1C,MAAI,SAAS,UAAW,SAAQ,IAAI,EAAE;AACtC,MAAI,QAAQ,OAAO,GAAG;AACpB,SAAK,UAAU,MAAM,KAAK,OAAO;AAAA,EACnC,OAAO;AACL,WAAO,KAAK;AAAA,EACd;AACA,OAAK,EAAE,IAAI;AACX,SAAO;AACT;AAEO,SAAS,mBACd,OAC+B;AAC/B,QAAM,MAAqC,CAAA;AAC3C,aAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACtD,UAAM,MAAM,OAAO,KAAA;AACnB,QAAI,CAAC,OAAO,QAAQ,aAAa,QAAQ,WAAY;AACrD,QAAI,mBAAmB,QAAQ,EAAG,KAAI,GAAG,IAAI;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAgC;AAChE,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,UAAW,QAAO;AAChC,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,UAAU,WAAY,QAAO;AACjC,MAAI,UAAU,MAAO,QAAO;AAC5B,SAAO;AACT;AAEA,SAAS,oBACP,OACA,UACkB;AAClB,SAAO,mBAAmB,KAAK,IAAI,QAAQ;AAC7C;AAEO,SAAS,sBAAsB,QAA0B;AAC9D,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AAEO,SAAS,yBAAyB,QAA0B;AACjE,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AA+BO,SAAS,iBAAiB,OAAyC;AACxE,SACE,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU;AAE1E;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SAAO,UAAU,aAAa,UAAU;AAC1C;"}
+{"version":3,"file":"permissions-model.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/permissions-model.ts"],"sourcesContent":["import type { ToolMeta } from \"../../chat/types\";\nimport { runtimeSchemaPropertyAtPath } from \"../../runtime/runtime-field-support\";\nimport type { RuntimeSpecSchema } from \"../../runtime/runtime-mode\";\nimport {\n  SPEC_PERMISSION_MODES,\n  type SpecPermissionMode,\n  normalizeMCPPermissions,\n  normalizeResourcePolicies,\n  normalizeToolPolicies,\n  type AISpecRuntimeMCPPermissions,\n  type AISpecRuntimePermissionCatalog,\n  type AISpecRuntimePermissionCatalogItem,\n  type AISpecRuntimeResourcePolicies,\n  type AISpecRuntimeToolPolicies,\n  type AISpecRuntimeValue,\n  type SpecResourceMode,\n  type SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\n\n// Mirrors the schema-driven validation `sandbox.approval` used to publish:\n// an unsupported value is a schema authoring bug, not a user input to shrug\n// off. With no runtime resolved yet there is no schema to consult, so every\n// mode is offered; once a runtime is known, a schema that simply doesn't\n// publish `permissions.mode` means that runtime has no postures to offer.\nexport function publishedPermissionModes(\n  schema: RuntimeSpecSchema | undefined,\n): SpecPermissionMode[] {\n  if (!schema) return [...SPEC_PERMISSION_MODES];\n  const values = runtimeSchemaPropertyAtPath(schema, \"permissions.mode\")?.enum;\n  if (values == null) return [];\n  if (!Array.isArray(values)) {\n    throw new Error(\"permissions.mode must publish an enum\");\n  }\n  return values.map((value) => {\n    if (\n      typeof value !== \"string\" ||\n      !SPEC_PERMISSION_MODES.includes(value as SpecPermissionMode)\n    ) {\n      throw new Error(\n        `permissions.mode published unsupported value ${JSON.stringify(value)}`,\n      );\n    }\n    return value as SpecPermissionMode;\n  });\n}\n\nexport type PermissionDomain = \"tools\" | \"mcp\" | \"plugins\" | \"skills\";\nexport type PermissionListMode = SpecToolPolicy | SpecResourceMode;\n\nexport type PermissionListEntry = {\n  id: string;\n  label: string;\n  group: string;\n  domain: PermissionDomain;\n  mode: PermissionListMode;\n  description?: string | undefined;\n  source?: string | undefined;\n  sourcePath?: string | undefined;\n};\n\nexport const TOOL_POLICY_MODES: SpecToolPolicy[] = [\n  \"auto\",\n  \"ask\",\n  \"allow\",\n  \"deny\",\n];\nexport const RESOURCE_MODES: SpecResourceMode[] = [\"enabled\", \"disabled\"];\n\nconst TOOL_POLICY_LABEL: Record<SpecToolPolicy, string> = {\n  auto: \"Auto\",\n  ask: \"Ask\",\n  allow: \"Allow\",\n  deny: \"Deny\",\n};\nconst RESOURCE_MODE_LABEL: Record<SpecResourceMode, string> = {\n  enabled: \"Enabled\",\n  disabled: \"Disabled\",\n};\n\nexport function buildPermissionCatalog(\n  catalog: AISpecRuntimePermissionCatalog | undefined,\n  tools: ToolMeta[],\n): Required<AISpecRuntimePermissionCatalog> {\n  return {\n    tools:\n      catalog?.tools ??\n      tools.map((tool) => {\n        const item: AISpecRuntimePermissionCatalogItem = {\n          id: tool.name,\n          label: tool.label || tool.name,\n          defaultMode: toolDefaultPolicy(tool.defaultPermission),\n        };\n        if (tool.group) item.group = tool.group;\n        if (tool.description) item.description = tool.description;\n        return item;\n      }),\n    mcp: catalog?.mcp ?? [],\n    plugins: catalog?.plugins ?? [],\n    skills: catalog?.skills ?? [],\n  };\n}\n\nexport function buildPermissionEntries(\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n  toolPolicies: AISpecRuntimeToolPolicies,\n  mcp: AISpecRuntimeMCPPermissions,\n  pluginModes: AISpecRuntimeResourcePolicies,\n  skillModes: AISpecRuntimeResourcePolicies,\n): PermissionListEntry[] {\n  return [\n    ...buildToolPermissionEntries(catalog.tools, toolPolicies),\n    ...buildResourcePermissionEntries(\n      \"mcp\",\n      catalog.mcp,\n      mcpPermissionModes(mcp),\n      mcp.servers,\n      mcp.disabled ? \"disabled\" : \"enabled\",\n    ),\n    ...buildResourcePermissionEntries(\"plugins\", catalog.plugins, pluginModes),\n    ...buildResourcePermissionEntries(\"skills\", catalog.skills, skillModes),\n  ];\n}\n\n// Builds the entry list straight from a spec value: normalize the four policy\n// maps, then merge them with the catalog.\nexport function specPermissionEntries(\n  value: AISpecRuntimeValue,\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n): PermissionListEntry[] {\n  const skillModes = normalizeResourcePolicies(\n    value.permissions?.skills,\n    value.memory?.skills,\n  );\n  if (value.memory?.skipSkills) {\n    for (const item of catalog.skills) {\n      skillModes[item.id] = \"disabled\";\n    }\n    for (const id of value.memory.skills ?? []) {\n      skillModes[id] = \"disabled\";\n    }\n  }\n  return buildPermissionEntries(\n    catalog,\n    normalizeToolPolicies(value.permissions?.tools),\n    normalizeMCPPermissions(value.permissions?.mcp),\n    normalizeResourcePolicies(value.permissions?.plugins),\n    skillModes,\n  );\n}\n\n// Applies a mode to the given entries, returning the next spec value. Writing\n// any skill entry migrates legacy memory.skills into permissions.skills.\nexport function withPermissionEntries(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  mode: PermissionListMode,\n): AISpecRuntimeValue {\n  const nextTools: AISpecRuntimeToolPolicies = {\n    ...normalizeToolPolicies(value.permissions?.tools),\n  };\n  let nextMCP = { ...normalizeMCPPermissions(value.permissions?.mcp) };\n  const nextPlugins: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(value.permissions?.plugins),\n  };\n  const nextSkills: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(\n      value.permissions?.skills,\n      value.memory?.skills,\n    ),\n  };\n  let touchedSkills = false;\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\" && isSpecToolPolicy(mode)) {\n      nextTools[entry.id] = mode;\n    } else if (entry.domain === \"mcp\" && isSpecResourceMode(mode)) {\n      nextMCP = withMCPMode(nextMCP, entry.id, mode);\n    } else if (entry.domain === \"plugins\" && isSpecResourceMode(mode)) {\n      nextPlugins[entry.id] = mode;\n    } else if (entry.domain === \"skills\" && isSpecResourceMode(mode)) {\n      nextSkills[entry.id] = mode;\n      touchedSkills = true;\n    }\n  }\n\n  const memoryWithoutSkipSkills = { ...value.memory };\n  delete memoryWithoutSkipSkills.skipSkills;\n  return {\n    ...value,\n    permissions: {\n      ...value.permissions,\n      tools: nextTools,\n      mcp: nextMCP,\n      plugins: nextPlugins,\n      skills: nextSkills,\n    },\n    ...(touchedSkills\n      ? { memory: { ...memoryWithoutSkipSkills, skills: [] } }\n      : undefined),\n  };\n}\n\nexport function withAddedPermission(\n  value: AISpecRuntimeValue,\n  domain: PermissionDomain,\n  id: string,\n): AISpecRuntimeValue | undefined {\n  const trimmed = id.trim();\n  if (!trimmed) return undefined;\n  const mode: PermissionListMode = domain === \"tools\" ? \"auto\" : \"enabled\";\n  return withPermissionEntries(\n    value,\n    [\n      {\n        id: trimmed,\n        label: trimmed,\n        group: permissionDomainGroup(domain),\n        domain,\n        mode,\n      },\n    ],\n    mode,\n  );\n}\n\nfunction buildToolPermissionEntries(\n  items: AISpecRuntimePermissionCatalogItem[],\n  policies: AISpecRuntimeToolPolicies,\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || \"Tools\",\n      domain: \"tools\",\n      mode: policies[key] ?? toolDefaultPolicy(item?.defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of Object.keys(policies)) add(id, undefined);\n  return entries;\n}\n\nfunction buildResourcePermissionEntries(\n  domain: Exclude<PermissionDomain, \"tools\">,\n  items: AISpecRuntimePermissionCatalogItem[],\n  modes: AISpecRuntimeResourcePolicies,\n  extraIDs: string[] | undefined = undefined,\n  defaultMode: SpecResourceMode = \"enabled\",\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || permissionDomainGroup(domain),\n      domain,\n      mode: modes[key] ?? resourceDefaultMode(item?.defaultMode, defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of extraIDs ?? []) add(id, undefined);\n  for (const id of Object.keys(modes)) add(id, undefined);\n  return entries;\n}\n\nexport function groupPermissionEntries(entries: PermissionListEntry[]) {\n  const groups = new Map<string, PermissionListEntry[]>();\n  for (const entry of entries) {\n    const group = entry.group || permissionDomainGroup(entry.domain);\n    groups.set(group, [...(groups.get(group) ?? []), entry]);\n  }\n  return Array.from(groups.entries());\n}\n\nexport function permissionGroupMode(\n  entries: PermissionListEntry[],\n): PermissionListMode | \"mixed\" {\n  const first = entries[0]?.mode;\n  if (!first) return \"mixed\";\n  return entries.every((entry) => entry.mode === first) ? first : \"mixed\";\n}\n\n// Group-level bulk controls only make sense when the group is homogeneous:\n// tool groups get the 4-state cycle, resource groups the 2-state one.\nexport function permissionGroupModeOptions(\n  entries: PermissionListEntry[],\n): readonly PermissionListMode[] {\n  if (entries.length === 0) return [];\n  const hasTools = entries.some((entry) => entry.domain === \"tools\");\n  const hasResources = entries.some((entry) => entry.domain !== \"tools\");\n  if (hasTools && hasResources) return [];\n  return hasTools ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function entryModeOptions(\n  entry: PermissionListEntry,\n): readonly PermissionListMode[] {\n  return entry.domain === \"tools\" ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function withMCPMode(\n  value: AISpecRuntimeMCPPermissions,\n  id: string,\n  mode: SpecResourceMode,\n): AISpecRuntimeMCPPermissions {\n  const next: AISpecRuntimeMCPPermissions = {\n    ...normalizeMCPPermissions(value),\n  };\n  const servers = new Set(next.servers ?? []);\n  if (mode === \"enabled\") servers.add(id);\n  if (servers.size > 0) {\n    next.servers = Array.from(servers);\n  } else {\n    delete next.servers;\n  }\n  next[id] = mode;\n  return next;\n}\n\nexport function mcpPermissionModes(\n  value: AISpecRuntimeMCPPermissions,\n): AISpecRuntimeResourcePolicies {\n  const out: AISpecRuntimeResourcePolicies = {};\n  for (const [rawKey, rawValue] of Object.entries(value)) {\n    const key = rawKey.trim();\n    if (!key || key === \"servers\" || key === \"disabled\") continue;\n    if (isSpecResourceMode(rawValue)) out[key] = rawValue;\n  }\n  return out;\n}\n\nexport function toolDefaultPolicy(value: unknown): SpecToolPolicy {\n  if (isSpecToolPolicy(value)) return value;\n  if (value === \"on\") return \"allow\";\n  if (value === \"enabled\") return \"auto\";\n  if (value === \"off\") return \"deny\";\n  if (value === \"disabled\") return \"deny\";\n  if (value === \"ask\") return \"ask\";\n  return \"auto\";\n}\n\nfunction resourceDefaultMode(\n  value: unknown,\n  fallback: SpecResourceMode,\n): SpecResourceMode {\n  return isSpecResourceMode(value) ? value : fallback;\n}\n\nexport function permissionDomainGroup(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tools\";\n    case \"mcp\":\n      return \"MCP\";\n    case \"plugins\":\n      return \"Plugins\";\n    case \"skills\":\n      return \"Skills\";\n  }\n}\n\nexport function permissionAddPlaceholder(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tool name\";\n    case \"mcp\":\n      return \"server name\";\n    case \"plugins\":\n      return \"/path/to/plugin\";\n    case \"skills\":\n      return \"$CWD/.skills\";\n  }\n}\n\nexport function isDenyMode(mode: PermissionListMode) {\n  return mode === \"deny\" || mode === \"disabled\";\n}\n\nexport function permissionModeLabel(mode: PermissionListMode | \"mixed\") {\n  if (mode === \"mixed\") return \"Mixed\";\n  return isSpecToolPolicy(mode)\n    ? TOOL_POLICY_LABEL[mode]\n    : RESOURCE_MODE_LABEL[mode];\n}\n\n// Active-state colors per the v2 design: auto=success, ask=warning,\n// allow=info, deny=error; resources keep enabled=success / disabled=muted.\nexport function permissionModeBadgeClass(mode: PermissionListMode | \"mixed\") {\n  switch (mode) {\n    case \"auto\":\n    case \"enabled\":\n      return \"bg-emerald-100 text-emerald-700 dark:bg-emerald-900 dark:text-emerald-300\";\n    case \"ask\":\n      return \"bg-amber-100 text-amber-700 dark:bg-amber-900 dark:text-amber-300\";\n    case \"allow\":\n      return \"bg-sky-100 text-sky-700 dark:bg-sky-900 dark:text-sky-300\";\n    case \"deny\":\n      return \"bg-red-100 text-red-700 dark:bg-red-900 dark:text-red-300\";\n    default:\n      return \"bg-muted text-muted-foreground\";\n  }\n}\n\nexport function isSpecToolPolicy(value: unknown): value is SpecToolPolicy {\n  return (\n    value === \"auto\" || value === \"ask\" || value === \"allow\" || value === \"deny\"\n  );\n}\n\nexport function isSpecResourceMode(value: unknown): value is SpecResourceMode {\n  return value === \"enabled\" || value === \"disabled\";\n}\n"],"names":[],"mappings":";;;AAwBO,SAAS,yBACd,QACsB;;AACtB,MAAI,CAAC,OAAQ,QAAO,CAAC,GAAG,qBAAqB;AAC7C,QAAM,UAAS,iCAA4B,QAAQ,kBAAkB,MAAtD,mBAAyD;AACxE,MAAI,UAAU,KAAM,QAAO,CAAA;AAC3B,MAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;AAC1B,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AACA,SAAO,OAAO,IAAI,CAAC,UAAU;AAC3B,QACE,OAAO,UAAU,YACjB,CAAC,sBAAsB,SAAS,KAA2B,GAC3D;AACA,YAAM,IAAI;AAAA,QACR,gDAAgD,KAAK,UAAU,KAAK,CAAC;AAAA,MAAA;AAAA,IAEzE;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAgBO,MAAM,oBAAsC;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iBAAqC,CAAC,WAAW,UAAU;AAajE,SAAS,uBACd,SACA,OAC0C;AAC1C,SAAO;AAAA,IACL,QACE,mCAAS,UACT,MAAM,IAAI,CAAC,SAAS;AAClB,YAAM,OAA2C;AAAA,QAC/C,IAAI,KAAK;AAAA,QACT,OAAO,KAAK,SAAS,KAAK;AAAA,QAC1B,aAAa,kBAAkB,KAAK,iBAAiB;AAAA,MAAA;AAEvD,UAAI,KAAK,MAAO,MAAK,QAAQ,KAAK;AAClC,UAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAC9C,aAAO;AAAA,IACT,CAAC;AAAA,IACH,MAAK,mCAAS,QAAO,CAAA;AAAA,IACrB,UAAS,mCAAS,YAAW,CAAA;AAAA,IAC7B,SAAQ,mCAAS,WAAU,CAAA;AAAA,EAAC;AAEhC;AAEO,SAAS,uBACd,SACA,cACA,KACA,aACA,YACuB;AACvB,SAAO;AAAA,IACL,GAAG,2BAA2B,QAAQ,OAAO,YAAY;AAAA,IACzD,GAAG;AAAA,MACD;AAAA,MACA,QAAQ;AAAA,MACR,mBAAmB,GAAG;AAAA,MACtB,IAAI;AAAA,MACJ,IAAI,WAAW,aAAa;AAAA,IAAA;AAAA,IAE9B,GAAG,+BAA+B,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzE,GAAG,+BAA+B,UAAU,QAAQ,QAAQ,UAAU;AAAA,EAAA;AAE1E;AAIO,SAAS,sBACd,OACA,SACuB;;AACvB,QAAM,aAAa;AAAA,KACjB,WAAM,gBAAN,mBAAmB;AAAA,KACnB,WAAM,WAAN,mBAAc;AAAA,EAAA;AAEhB,OAAI,WAAM,WAAN,mBAAc,YAAY;AAC5B,eAAW,QAAQ,QAAQ,QAAQ;AACjC,iBAAW,KAAK,EAAE,IAAI;AAAA,IACxB;AACA,eAAW,MAAM,MAAM,OAAO,UAAU,CAAA,GAAI;AAC1C,iBAAW,EAAE,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACA,uBAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,IAC9C,yBAAwB,WAAM,gBAAN,mBAAmB,GAAG;AAAA,IAC9C,2BAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,IACpD;AAAA,EAAA;AAEJ;AAIO,SAAS,sBACd,OACA,SACA,MACoB;;AACpB,QAAM,YAAuC;AAAA,IAC3C,GAAG,uBAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,EAAA;AAEnD,MAAI,UAAU,EAAE,GAAG,yBAAwB,WAAM,gBAAN,mBAAmB,GAAG,EAAA;AACjE,QAAM,cAA6C;AAAA,IACjD,GAAG,2BAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,EAAA;AAEzD,QAAM,aAA4C;AAAA,IAChD,GAAG;AAAA,OACD,WAAM,gBAAN,mBAAmB;AAAA,OACnB,WAAM,WAAN,mBAAc;AAAA,IAAA;AAAA,EAChB;AAEF,MAAI,gBAAgB;AAEpB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,WAAW,iBAAiB,IAAI,GAAG;AACtD,gBAAU,MAAM,EAAE,IAAI;AAAA,IACxB,WAAW,MAAM,WAAW,SAAS,mBAAmB,IAAI,GAAG;AAC7D,gBAAU,YAAY,SAAS,MAAM,IAAI,IAAI;AAAA,IAC/C,WAAW,MAAM,WAAW,aAAa,mBAAmB,IAAI,GAAG;AACjE,kBAAY,MAAM,EAAE,IAAI;AAAA,IAC1B,WAAW,MAAM,WAAW,YAAY,mBAAmB,IAAI,GAAG;AAChE,iBAAW,MAAM,EAAE,IAAI;AACvB,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,0BAA0B,EAAE,GAAG,MAAM,OAAA;AAC3C,SAAO,wBAAwB;AAC/B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa;AAAA,MACX,GAAG,MAAM;AAAA,MACT,OAAO;AAAA,MACP,KAAK;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,IAAA;AAAA,IAEV,GAAI,gBACA,EAAE,QAAQ,EAAE,GAAG,yBAAyB,QAAQ,CAAA,EAAC,MACjD;AAAA,EAAA;AAER;AAEO,SAAS,oBACd,OACA,QACA,IACgC;AAChC,QAAM,UAAU,GAAG,KAAA;AACnB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAA2B,WAAW,UAAU,SAAS;AAC/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,OAAO,sBAAsB,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MAAA;AAAA,IACF;AAAA,IAEF;AAAA,EAAA;AAEJ;AAEA,SAAS,2BACP,OACA,UACA;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAQ;AAAA,MACR,MAAM,SAAS,GAAG,KAAK,kBAAkB,6BAAM,WAAW;AAAA,MAC1D,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,OAAO,KAAK,QAAQ,EAAG,KAAI,IAAI,MAAS;AACzD,SAAO;AACT;AAEA,SAAS,+BACP,QACA,OACA,OACA,WAAiC,QACjC,cAAgC,WAChC;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS,sBAAsB,MAAM;AAAA,MAClD;AAAA,MACA,MAAM,MAAM,GAAG,KAAK,oBAAoB,6BAAM,aAAa,WAAW;AAAA,MACtE,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,YAAY,CAAA,EAAI,KAAI,IAAI,MAAS;AAClD,aAAW,MAAM,OAAO,KAAK,KAAK,EAAG,KAAI,IAAI,MAAS;AACtD,SAAO;AACT;AA+BO,SAAS,iBACd,OAC+B;AAC/B,SAAO,MAAM,WAAW,UAAU,oBAAoB;AACxD;AAEO,SAAS,YACd,OACA,IACA,MAC6B;AAC7B,QAAM,OAAoC;AAAA,IACxC,GAAG,wBAAwB,KAAK;AAAA,EAAA;AAElC,QAAM,UAAU,IAAI,IAAI,KAAK,WAAW,CAAA,CAAE;AAC1C,MAAI,SAAS,UAAW,SAAQ,IAAI,EAAE;AACtC,MAAI,QAAQ,OAAO,GAAG;AACpB,SAAK,UAAU,MAAM,KAAK,OAAO;AAAA,EACnC,OAAO;AACL,WAAO,KAAK;AAAA,EACd;AACA,OAAK,EAAE,IAAI;AACX,SAAO;AACT;AAEO,SAAS,mBACd,OAC+B;AAC/B,QAAM,MAAqC,CAAA;AAC3C,aAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACtD,UAAM,MAAM,OAAO,KAAA;AACnB,QAAI,CAAC,OAAO,QAAQ,aAAa,QAAQ,WAAY;AACrD,QAAI,mBAAmB,QAAQ,EAAG,KAAI,GAAG,IAAI;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAgC;AAChE,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,UAAW,QAAO;AAChC,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,UAAU,WAAY,QAAO;AACjC,MAAI,UAAU,MAAO,QAAO;AAC5B,SAAO;AACT;AAEA,SAAS,oBACP,OACA,UACkB;AAClB,SAAO,mBAAmB,KAAK,IAAI,QAAQ;AAC7C;AAEO,SAAS,sBAAsB,QAA0B;AAC9D,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AAEO,SAAS,yBAAyB,QAA0B;AACjE,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AA+BO,SAAS,iBAAiB,OAAyC;AACxE,SACE,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU;AAE1E;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SAAO,UAAU,aAAa,UAAU;AAC1C;"}

package/dist/data/ai/SpecRuntimeEditor/summaries.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":";;AAuHO,SAAS,gBAAgB,OAA+C;;AAC7E,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;;"}
+{"version":3,"file":"summaries.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { UNSPECIFIED_LABEL } from \"../../runtime/unspecified\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : UNSPECIFIED_LABEL;\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":";;AAwHO,SAAS,gBAAgB,OAA+C;;AAC7E,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;;"}

package/dist/data/ai/SpecRuntimeEditor/summaries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAc,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,SAAS,EAAO,GACvB,MAAM,CAQR;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAQjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CASpE;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB,EAAE,GAC7B,MAAM,CAWR;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CActE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAkBjE;AASD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAMjE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAUlE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAY7E"}
+{"version":3,"file":"summaries.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGrE,OAAO,EAAc,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,wBAAgB,cAAc,CAC5B,KAAK,EAAE,kBAAkB,EACzB,MAAM,GAAE,SAAS,EAAO,GACvB,MAAM,CAQR;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAQjE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CASpE;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB,EAAE,GAC7B,MAAM,CAWR;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CActE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAkBjE;AASD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAMjE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAUlE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,SAAS,CAY7E"}

package/dist/data/ai/SpecRuntimeEditor/summaries.js.map

@@ -1 +1 @@
-{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : \"Default model\";\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAuHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}
+{"version":3,"file":"summaries.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/summaries.ts"],"sourcesContent":["import type { ChatModel } from \"../../chat/types\";\nimport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nimport { UNSPECIFIED_LABEL } from \"../../runtime/unspecified\";\nimport { checkoutMode, commitPhase, worktreeMode } from \"./update\";\nimport { isDenyMode, type PermissionListEntry } from \"./permissions-model\";\n\nexport function summarizeModel(\n  value: AISpecRuntimeValue,\n  models: ChatModel[] = [],\n): string {\n  const parts: string[] = [];\n  const model = value.model?.trim();\n  if (model) {\n    parts.push(models.find((m) => m.id === model)?.label ?? model);\n  }\n  if (value.effort) parts.push(value.effort);\n  return parts.length > 0 ? parts.join(\" · \") : UNSPECIFIED_LABEL;\n}\n\nexport function summarizePrompt(value: AISpecRuntimeValue): string {\n  const overrides = [\n    value.prompt?.user,\n    value.prompt?.system,\n    value.prompt?.appendSystem,\n  ].filter((text) => Boolean(text?.trim())).length;\n  if (overrides === 0) return \"Base prompt only\";\n  return `${overrides} override${overrides > 1 ? \"s\" : \"\"} set`;\n}\n\nexport function summarizeWorkspace(value: AISpecRuntimeValue): string {\n  const mode = checkoutMode(value);\n  if (mode === \"none\") return \"No checkout\";\n  const parts: string[] = [mode];\n  const ref = value.setup?.checkout?.ref?.trim();\n  if (ref) parts.push(ref);\n  const worktree = worktreeMode(value);\n  parts.push(worktree === \"none\" ? \"in-place\" : `${worktree} worktree`);\n  return parts.join(\" · \");\n}\n\nexport function summarizePermissions(\n  _value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n): string {\n  const parts: string[] = [];\n  const denied = entries.filter(\n    (entry) => entry.domain === \"tools\" && entry.mode === \"deny\",\n  ).length;\n  const off = entries.filter(\n    (entry) => entry.domain !== \"tools\" && isDenyMode(entry.mode),\n  ).length;\n  if (denied > 0) parts.push(`${denied} denied`);\n  if (off > 0) parts.push(`${off} off`);\n  return parts.length > 0 ? parts.join(\" · \") : \"No overrides\";\n}\n\nexport function summarizeEnvironment(value: AISpecRuntimeValue): string {\n  const vars = (value.setup?.envVars ?? []).filter((item) =>\n    Boolean(item.name?.trim()),\n  );\n  if (vars.length === 0) return \"No variables\";\n  const secrets = vars.filter((item) => {\n    if (typeof item.valueFrom === \"string\") {\n      return item.valueFrom.trim().startsWith(\"secret://\");\n    }\n    return Boolean(item.valueFrom?.secretKeyRef);\n  }).length;\n  const parts = [`${vars.length} var${vars.length !== 1 ? \"s\" : \"\"}`];\n  if (secrets > 0) parts.push(`${secrets} secret`);\n  return parts.join(\" · \");\n}\n\nexport function summarizeVerify(value: AISpecRuntimeValue): string {\n  const verify = value.workflow?.verify;\n  if (!verify) return \"No fixture\";\n  const parts: string[] = [];\n  if (verify.fixture?.trim()) parts.push(\"Fixture\");\n  if (verify.scope === \"changed\") parts.push(\"changed files\");\n  if (verify.maxIterations != null && verify.maxIterations > 0) {\n    parts.push(\n      `${verify.maxIterations} iteration${verify.maxIterations !== 1 ? \"s\" : \"\"}`,\n    );\n  }\n  if (verify.commands?.length) {\n    parts.push(`${verify.commands.length} command${verify.commands.length !== 1 ? \"s\" : \"\"}`);\n  }\n  if (verify.prompts?.length) {\n    parts.push(`${verify.prompts.length} prompt${verify.prompts.length !== 1 ? \"s\" : \"\"}`);\n  }\n  return parts.length > 0 ? parts.join(\" · \") : \"No fixture\";\n}\n\nconst COMMIT_PHASE_SUMMARIES = {\n  none: \"Leave uncommitted\",\n  turn: \"Commit every turn\",\n  agent: \"Commit after the loop\",\n  run: \"Commit changes\",\n} as const;\n\nexport function summarizeCommit(value: AISpecRuntimeValue): string {\n  const phase = commitPhase(value);\n  const summary = COMMIT_PHASE_SUMMARIES[phase];\n  return value.workflow?.commits?.[0]?.dryRun\n    ? `${summary} · dry run`\n    : summary;\n}\n\nexport function summarizeCLIArgs(value: AISpecRuntimeValue): string {\n  const flags = Object.entries(value.cliArgs ?? {}).filter(\n    ([, item]) =>\n      item !== undefined &&\n      item !== \"\" &&\n      item !== false &&\n      (!Array.isArray(item) || item.length > 0),\n  ).length;\n  if (flags === 0) return \"Defaults\";\n  return `${flags} flag${flags !== 1 ? \"s\" : \"\"} set`;\n}\n\n// The rail target chip: repo (from checkout URL or local path) plus ref.\nexport function summarizeTarget(value: AISpecRuntimeValue): string | undefined {\n  const checkout = value.setup?.checkout;\n  const source = checkout?.url?.trim() || checkout?.path?.trim();\n  if (!source) return undefined;\n  // Split-and-filter instead of `.replace(/\\/+$/, \"\")`: the trailing-slash\n  // strip was a polynomial (ReDoS) match on many-`/` inputs. Empty segments\n  // from trailing/duplicate slashes are dropped, so the last one is the repo.\n  const segments = source.split(\"/\").filter(Boolean);\n  const repo = segments[segments.length - 1]?.replace(/\\.git$/, \"\");\n  if (!repo) return undefined;\n  const ref = checkout?.ref?.trim();\n  return ref ? `${repo} · ${ref}` : repo;\n}\n"],"names":[],"mappings":"AAwHO,SAAS,gBAAgB,OAA+C;AAAxE;AACL,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,QAAM,WAAS,0CAAU,QAAV,mBAAe,aAAU,0CAAU,SAAV,mBAAgB;AACxD,MAAI,CAAC,OAAQ,QAAO;AAIpB,QAAM,WAAW,OAAO,MAAM,GAAG,EAAE,OAAO,OAAO;AACjD,QAAM,QAAO,cAAS,SAAS,SAAS,CAAC,MAA5B,mBAA+B,QAAQ,UAAU;AAC9D,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAM,0CAAU,QAAV,mBAAe;AAC3B,SAAO,MAAM,GAAG,IAAI,MAAM,GAAG,KAAK;AACpC;"}

package/dist/data/ai/SpecRuntimeEditor/types.cjs

@@ -1,12 +1,12 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const UiRobotAi = require("../../../icons/components/UiRobotAi.cjs");
 const UiFileText = require("../../../icons/components/UiFileText.cjs");
-const UiGitBranch = require("../../../icons/components/UiGitBranch.cjs");
-const UiBox = require("../../../icons/components/UiBox.cjs");
-const UiShield = require("../../../icons/components/UiShield.cjs");
 const UiBraces = require("../../../icons/components/UiBraces.cjs");
+const UiShield = require("../../../icons/components/UiShield.cjs");
+const UiRobotAi = require("../../../icons/components/UiRobotAi.cjs");
 const UiSealCheck = require("../../../icons/components/UiSealCheck.cjs");
+const UiGitBranch = require("../../../icons/components/UiGitBranch.cjs");
+const UiBox = require("../../../icons/components/UiBox.cjs");
 const UiGitCommit = require("../../../icons/components/UiGitCommit.cjs");
 const UiTerminal = require("../../../icons/components/UiTerminal.cjs");
 const SPEC_RUNTIME_SECTIONS = [
@@ -76,5 +76,18 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal.UiTerminal
   }
 ];
+const SPEC_RUNTIME_TABS = [
+  { id: "system", label: "System Prompt", icon: UiFileText.UiFileText, sections: ["prompt"] },
+  {
+    id: "environment",
+    label: "Environment",
+    icon: UiBraces.UiBraces,
+    sections: ["workspace", "sandbox", "environment"]
+  },
+  { id: "permissions", label: "Permissions", icon: UiShield.UiShield, sections: ["permissions"] },
+  { id: "model", label: "Model", icon: UiRobotAi.UiRobotAi, sections: ["model", "cli"] },
+  { id: "workflow", label: "Workflow", icon: UiSealCheck.UiSealCheck, sections: ["verify", "commit"] }
+];
 exports.SPEC_RUNTIME_SECTIONS = SPEC_RUNTIME_SECTIONS;
+exports.SPEC_RUNTIME_TABS = SPEC_RUNTIME_TABS;
 //# sourceMappingURL=types.cjs.map

package/dist/data/ai/SpecRuntimeEditor/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;;"}
+{"version":3,"file":"types.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n\n/** Model-section fields a host renders beside the editor, so the section omits them. */\nexport type SpecRuntimeHostField = \"runtime\" | \"budget.timeout\" | \"budget.cost\";\n\n/**\n * A tab in the editor's tabbed layout. It either groups spec sections (hidden\n * when the selected runtime filters all of them out) or carries a host-owned\n * panel such as a prompt composer or a request preview.\n */\nexport type SpecRuntimeTab = {\n  id: string;\n  label: string;\n  icon?: StaticIconComponent | undefined;\n  sections?: readonly SpecSectionId[] | undefined;\n  content?: ReactNode | undefined;\n};\n\nexport const SPEC_RUNTIME_TABS: SpecRuntimeTab[] = [\n  { id: \"system\", label: \"System Prompt\", icon: UiFileText, sections: [\"prompt\"] },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    icon: UiBraces,\n    sections: [\"workspace\", \"sandbox\", \"environment\"],\n  },\n  { id: \"permissions\", label: \"Permissions\", icon: UiShield, sections: [\"permissions\"] },\n  { id: \"model\", label: \"Model\", icon: UiRobotAi, sections: [\"model\", \"cli\"] },\n  { id: \"workflow\", label: \"Workflow\", icon: UiSealCheck, sections: [\"verify\", \"commit\"] },\n];\n"],"names":["UiRobotAi","UiFileText","UiGitBranch","UiBox","UiShield","UiBraces","UiSealCheck","UiGitCommit","UiTerminal"],"mappings":";;;;;;;;;;;AAuGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMA,UAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,MAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,SAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,YAAAA;AAAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAMC,WAAAA;AAAAA,EAAA;AAEV;AAkBO,MAAM,oBAAsC;AAAA,EACjD,EAAE,IAAI,UAAU,OAAO,iBAAiB,MAAMP,uBAAY,UAAU,CAAC,QAAQ,EAAA;AAAA,EAC7E;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAMI,SAAAA;AAAAA,IACN,UAAU,CAAC,aAAa,WAAW,aAAa;AAAA,EAAA;AAAA,EAElD,EAAE,IAAI,eAAe,OAAO,eAAe,MAAMD,mBAAU,UAAU,CAAC,aAAa,EAAA;AAAA,EACnF,EAAE,IAAI,SAAS,OAAO,SAAS,MAAMJ,UAAAA,WAAW,UAAU,CAAC,SAAS,KAAK,EAAA;AAAA,EACzE,EAAE,IAAI,YAAY,OAAO,YAAY,MAAMM,YAAAA,aAAa,UAAU,CAAC,UAAU,QAAQ,EAAA;AACvF;;;"}

package/dist/data/ai/SpecRuntimeEditor/types.d.ts

@@ -1,3 +1,4 @@
+import { ReactNode } from 'react';
 import { KeyPreview, SecretKind, SecretResource } from '../../../components/SecretKeySelector';
 import { StaticIconComponent } from '../../Icon';
 import { JsonSchemaObject } from '../../../components/json-schema-form-types';
@@ -67,4 +68,19 @@ export type SpecSectionMeta = {
     iconClassName?: string | undefined;
 };
 export declare const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[];
+/** Model-section fields a host renders beside the editor, so the section omits them. */
+export type SpecRuntimeHostField = "runtime" | "budget.timeout" | "budget.cost";
+/**
+ * A tab in the editor's tabbed layout. It either groups spec sections (hidden
+ * when the selected runtime filters all of them out) or carries a host-owned
+ * panel such as a prompt composer or a request preview.
+ */
+export type SpecRuntimeTab = {
+    id: string;
+    label: string;
+    icon?: StaticIconComponent | undefined;
+    sections?: readonly SpecSectionId[] | undefined;
+    content?: ReactNode | undefined;
+};
+export declare const SPEC_RUNTIME_TABS: SpecRuntimeTab[];
 //# sourceMappingURL=types.d.ts.map

package/dist/data/ai/SpecRuntimeEditor/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EACV,UAAU,EACV,UAAU,EACV,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAaxE;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,CAAC,EAAE,sBAAsB,EAAE,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,OAAO,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,YAAY,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC5C,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,YAAY,CAAC,EAAE,qBAAqB,EAAE,GAAG,SAAS,CAAC;IACnD,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,uBAAuB,EAAE,GAAG,SAAS,CAAC;IAC/C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,YAAY,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/D,cAAc,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,QAAQ,GACR,WAAW,GACX,SAAS,GACT,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,GACR,KAAK,CAAC;AAEV,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,aAAa,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,mBAAmB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,eAAe,EAkElD,CAAC;AAEF,wFAAwF;AACxF,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEhF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,CAAC;IAChD,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAW7C,CAAC"}

package/dist/data/ai/SpecRuntimeEditor/types.js

@@ -1,10 +1,10 @@
-import { UiRobotAi } from "../../../icons/components/UiRobotAi.js";
 import { UiFileText } from "../../../icons/components/UiFileText.js";
-import { UiGitBranch } from "../../../icons/components/UiGitBranch.js";
-import { UiBox } from "../../../icons/components/UiBox.js";
-import { UiShield } from "../../../icons/components/UiShield.js";
 import { UiBraces } from "../../../icons/components/UiBraces.js";
+import { UiShield } from "../../../icons/components/UiShield.js";
+import { UiRobotAi } from "../../../icons/components/UiRobotAi.js";
 import { UiSealCheck } from "../../../icons/components/UiSealCheck.js";
+import { UiGitBranch } from "../../../icons/components/UiGitBranch.js";
+import { UiBox } from "../../../icons/components/UiBox.js";
 import { UiGitCommit } from "../../../icons/components/UiGitCommit.js";
 import { UiTerminal } from "../../../icons/components/UiTerminal.js";
 const SPEC_RUNTIME_SECTIONS = [
@@ -74,7 +74,20 @@ const SPEC_RUNTIME_SECTIONS = [
     icon: UiTerminal
   }
 ];
+const SPEC_RUNTIME_TABS = [
+  { id: "system", label: "System Prompt", icon: UiFileText, sections: ["prompt"] },
+  {
+    id: "environment",
+    label: "Environment",
+    icon: UiBraces,
+    sections: ["workspace", "sandbox", "environment"]
+  },
+  { id: "permissions", label: "Permissions", icon: UiShield, sections: ["permissions"] },
+  { id: "model", label: "Model", icon: UiRobotAi, sections: ["model", "cli"] },
+  { id: "workflow", label: "Workflow", icon: UiSealCheck, sections: ["verify", "commit"] }
+];
 export {
-  SPEC_RUNTIME_SECTIONS
+  SPEC_RUNTIME_SECTIONS,
+  SPEC_RUNTIME_TABS
 };
 //# sourceMappingURL=types.js.map

package/dist/data/ai/SpecRuntimeEditor/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n"],"names":[],"mappings":";;;;;;;;;AAsGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EAAA;AAEV;"}
+{"version":3,"file":"types.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/types.ts"],"sourcesContent":["import type { ReactNode } from \"react\";\nimport type {\n  KeyPreview,\n  SecretKind,\n  SecretResource,\n} from \"../../../components/SecretKeySelector\";\nimport type { StaticIconComponent } from \"../../Icon\";\nimport type { JsonSchemaObject } from \"../../../components/json-schema-form-types\";\nimport type { SpecSandboxCapability } from \"../SpecRuntimeEditor.model\";\nimport {\n  UiBox,\n  UiBraces,\n  UiFileText,\n  UiGitCommit,\n  UiGitBranch,\n  UiRobotAi,\n  UiSealCheck,\n  UiShield,\n  UiTerminal,\n} from \"../../../icons\";\n\n/**\n * The sandbox surface a host serves alongside the spec schema (captain:\n * `GET /api/captain/ai/prompt/schema` → `sandboxes`, also\n * `GET /api/captain/sandboxes`). It is a projection of the adapter descriptor\n * table, so the editor can explain each choice and refuse invalid pairings\n * instead of failing at dispatch.\n */\nexport type SpecRuntimeSandboxCatalog = {\n  /** The configured `sandbox.default` selector, when one is set. */\n  default?: string | undefined;\n  kinds?: SpecRuntimeSandboxKind[] | undefined;\n  /**\n   * Configured backends whose declared kind does not resolve to an adapter.\n   * Reported rather than dropped, so a misconfigured backend reads as wrong\n   * instead of missing — but never offered as a selectable choice.\n   */\n  invalid?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxKind = {\n  kind: string;\n  description?: string | undefined;\n  /** Host-owned schema for a named backend's adapter-specific options. */\n  configSchema?: JsonSchemaObject | undefined;\n  /** True when `sandbox.default` names this bare kind. */\n  default?: boolean | undefined;\n  capabilities?: SpecSandboxCapability[] | undefined;\n  /** Runtime modes this adapter can serve; a pairing outside it is an error. */\n  modes?: string[] | undefined;\n  backends?: SpecRuntimeSandboxBackend[] | undefined;\n};\n\nexport type SpecRuntimeSandboxBackend = {\n  name: string;\n  kind?: string | undefined;\n  /** True when `sandbox.default` names this backend. */\n  default?: boolean | undefined;\n  /** The endpoint a git-agent backend dispatches through. */\n  url?: string | undefined;\n  agents?: SpecRuntimeSandboxAgent[] | undefined;\n  /** Why this backend cannot be selected; set only on `invalid` entries. */\n  error?: string | undefined;\n};\n\nexport type SpecRuntimeSandboxAgent = {\n  name: string;\n  /** \"enrolled\", or \"pending until <expiry>\" for an unclaimed join token. */\n  status?: string | undefined;\n  /** The host has every transport-specific credential needed to run here. */\n  dispatchable: boolean;\n  /** Safe diagnostic for a non-dispatchable agent; never a credential path. */\n  dispatchIssue?: string | undefined;\n};\n\nexport type SpecRuntimeSecretSelectorConfig = {\n  loadResources: (kind: SecretKind) => Promise<SecretResource[]>;\n  loadKeyPreview: (kind: SecretKind, name: string) => Promise<KeyPreview[]>;\n  strict?: boolean | undefined;\n  allowLiteral?: boolean | undefined;\n};\n\nexport type SpecSectionId =\n  | \"model\"\n  | \"prompt\"\n  | \"workspace\"\n  | \"sandbox\"\n  | \"permissions\"\n  | \"environment\"\n  | \"verify\"\n  | \"commit\"\n  | \"cli\";\n\nexport type SpecSectionMeta = {\n  id: SpecSectionId;\n  label: string;\n  hint: string;\n  icon: StaticIconComponent;\n  iconClassName?: string | undefined;\n};\n\n// Rail/nav order; section numbers (\"01\"…) derive from the index. The \"cli\"\n// section only renders when the host supplies a cliOptions schema.\nexport const SPEC_RUNTIME_SECTIONS: SpecSectionMeta[] = [\n  {\n    id: \"model\",\n    label: \"Model\",\n    hint: \"Which model runs, how it reasons, what it loads, and its budget ceiling.\",\n    icon: UiRobotAi,\n    iconClassName: \"text-indigo-500\",\n  },\n  {\n    id: \"prompt\",\n    label: \"Prompt\",\n    hint: \"Overrides layered on top of the base agent prompt.\",\n    icon: UiFileText,\n    iconClassName: \"text-primary\",\n  },\n  {\n    id: \"workspace\",\n    label: \"Workspace\",\n    hint: \"Where the agent checks out code and runs.\",\n    icon: UiGitBranch,\n    iconClassName: \"text-sky-500\",\n  },\n  // Adjacent to Workspace on purpose: a sandbox declaring `isolate-workspace`\n  // materializes its own tree, so it conflicts with a worktree or checkout set\n  // in the section directly above.\n  {\n    id: \"sandbox\",\n    label: \"Sandbox\",\n    hint: \"What confines the run, and where it executes.\",\n    icon: UiBox,\n    iconClassName: \"text-amber-500\",\n  },\n  {\n    id: \"permissions\",\n    label: \"Permissions\",\n    hint: \"Tool, MCP, and plugin access layered over the selected posture.\",\n    icon: UiShield,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    hint: \"Variables and secrets injected before the run.\",\n    icon: UiBraces,\n    iconClassName: \"text-amber-600 dark:text-amber-400\",\n  },\n  {\n    id: \"verify\",\n    label: \"Verify\",\n    hint: \"How the work is checked before finalization.\",\n    icon: UiSealCheck,\n    iconClassName: \"text-emerald-600 dark:text-emerald-400\",\n  },\n  {\n    id: \"commit\",\n    label: \"Commit\",\n    hint: \"Whether passing work is committed, previewed, or left as changes.\",\n    icon: UiGitCommit,\n    iconClassName: \"text-violet-600 dark:text-violet-400\",\n  },\n  {\n    id: \"cli\",\n    label: \"CLI flags\",\n    hint: \"Extra interactive CLI flags passed straight to the agent binary.\",\n    icon: UiTerminal,\n  },\n];\n\n/** Model-section fields a host renders beside the editor, so the section omits them. */\nexport type SpecRuntimeHostField = \"runtime\" | \"budget.timeout\" | \"budget.cost\";\n\n/**\n * A tab in the editor's tabbed layout. It either groups spec sections (hidden\n * when the selected runtime filters all of them out) or carries a host-owned\n * panel such as a prompt composer or a request preview.\n */\nexport type SpecRuntimeTab = {\n  id: string;\n  label: string;\n  icon?: StaticIconComponent | undefined;\n  sections?: readonly SpecSectionId[] | undefined;\n  content?: ReactNode | undefined;\n};\n\nexport const SPEC_RUNTIME_TABS: SpecRuntimeTab[] = [\n  { id: \"system\", label: \"System Prompt\", icon: UiFileText, sections: [\"prompt\"] },\n  {\n    id: \"environment\",\n    label: \"Environment\",\n    icon: UiBraces,\n    sections: [\"workspace\", \"sandbox\", \"environment\"],\n  },\n  { id: \"permissions\", label: \"Permissions\", icon: UiShield, sections: [\"permissions\"] },\n  { id: \"model\", label: \"Model\", icon: UiRobotAi, sections: [\"model\", \"cli\"] },\n  { id: \"workflow\", label: \"Workflow\", icon: UiSealCheck, sections: [\"verify\", \"commit\"] },\n];\n"],"names":[],"mappings":";;;;;;;;;AAuGO,MAAM,wBAA2C;AAAA,EACtD;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,IACN,eAAe;AAAA,EAAA;AAAA,EAEjB;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM;AAAA,EAAA;AAEV;AAkBO,MAAM,oBAAsC;AAAA,EACjD,EAAE,IAAI,UAAU,OAAO,iBAAiB,MAAM,YAAY,UAAU,CAAC,QAAQ,EAAA;AAAA,EAC7E;AAAA,IACE,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM;AAAA,IACN,UAAU,CAAC,aAAa,WAAW,aAAa;AAAA,EAAA;AAAA,EAElD,EAAE,IAAI,eAAe,OAAO,eAAe,MAAM,UAAU,UAAU,CAAC,aAAa,EAAA;AAAA,EACnF,EAAE,IAAI,SAAS,OAAO,SAAS,MAAM,WAAW,UAAU,CAAC,SAAS,KAAK,EAAA;AAAA,EACzE,EAAE,IAAI,YAAY,OAAO,YAAY,MAAM,aAAa,UAAU,CAAC,UAAU,QAAQ,EAAA;AACvF;"}

package/dist/data/ai/SpecRuntimeEditor/update.cjs

@@ -43,10 +43,7 @@ function withSandbox(value, patch) {
 function withSandboxMode(value, mode) {
   const current = sandboxRef(value);
   if (current.mode === mode) return value;
-  if (mode === "off") return withRoot(value, { sandbox: { mode } });
-  return withRoot(value, {
-    sandbox: { mode, ...current.approval ? { approval: current.approval } : {} }
-  });
+  return withRoot(value, { sandbox: { mode } });
 }
 function withSandboxBackend(value, backend) {
   const next = { ...sandboxRef(value) };
@@ -62,11 +59,15 @@ function withSandboxAgent(value, agent) {
   else delete next.agent;
   return withRoot(value, { sandbox: next });
 }
-function withSandboxApproval(value, approval) {
-  if (sandboxRef(value).mode === "off") {
-    throw new Error("sandbox mode off does not accept approval");
+function withPermissionMode(value, mode) {
+  const next = { ...value.permissions };
+  if (mode) next.mode = mode;
+  else delete next.mode;
+  if (Object.keys(next).length === 0) {
+    const { permissions: _permissions, ...rest } = value;
+    return rest;
   }
-  return withSandbox(value, { approval });
+  return withRoot(value, { permissions: next });
 }
 function withSandboxDispatch(value, patch) {
   if (sandboxRef(value).mode !== "git-agent") {
@@ -174,11 +175,11 @@ exports.withCommit = withCommit;
 exports.withCommitPhase = withCommitPhase;
 exports.withMemory = withMemory;
 exports.withOptionalRoot = withOptionalRoot;
+exports.withPermissionMode = withPermissionMode;
 exports.withPrompt = withPrompt;
 exports.withRoot = withRoot;
 exports.withSandbox = withSandbox;
 exports.withSandboxAgent = withSandboxAgent;
-exports.withSandboxApproval = withSandboxApproval;
 exports.withSandboxBackend = withSandboxBackend;
 exports.withSandboxDispatch = withSandboxDispatch;
 exports.withSandboxMode = withSandboxMode;

package/dist/data/ai/SpecRuntimeEditor/update.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"update.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  if (mode === \"off\") return withRoot(value, { sandbox: { mode } });\n  return withRoot(value, {\n    sandbox: { mode, ...(current.approval ? { approval: current.approval } : {}) },\n  });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxApproval(\n  value: AISpecRuntimeValue,\n  approval: SpecPermissionMode,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode === \"off\") {\n    throw new Error(\"sandbox mode off does not accept approval\");\n  }\n  return withSandbox(value, { approval });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":";;AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,MAAI,SAAS,MAAO,QAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAChE,SAAO,SAAS,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAA,IAAa,CAAA,EAAC;AAAA,EAAG,CAC9E;AACH;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,oBACd,OACA,UACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,OAAO;AACpC,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AACA,SAAO,YAAY,OAAO,EAAE,UAAU;AACxC;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;;AACpB,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;;AACpB,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;;AAC1B,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;;AACxE,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;;AACxE,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"update.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"sourcesContent":["import type {\n  AISpecRuntimeConnections,\n  AISpecRuntimeMemory,\n  AISpecRuntimePermissions,\n  AISpecRuntimePrompt,\n  AISpecRuntimeSandbox,\n  AISpecRuntimeSandboxDispatch,\n  AISpecRuntimeSandboxPolicy,\n  AISpecRuntimeSetup,\n  AISpecRuntimeValue,\n  SpecCheckoutMode,\n  SpecCommitPhase,\n  SpecPermissionMode,\n  SpecSandboxMode,\n  SpecStashMode,\n  SpecWorktreeMode,\n} from \"../SpecRuntimeEditor.model\";\n\ntype SpecCheckout = NonNullable<AISpecRuntimeSetup[\"checkout\"]>;\ntype SpecWorktree = NonNullable<SpecCheckout[\"worktree\"]>;\ntype SpecDirty = NonNullable<SpecCheckout[\"dirty\"]>;\ntype SpecWorkflow = NonNullable<AISpecRuntimeValue[\"workflow\"]>;\ntype SpecCommit = NonNullable<SpecWorkflow[\"commits\"]>[number];\ntype SpecBudget = NonNullable<AISpecRuntimeValue[\"budget\"]>;\n\nexport function withRoot(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeValue>,\n): AISpecRuntimeValue {\n  return { ...value, ...patch };\n}\n\n// Sets a top-level scalar, deleting the key entirely when cleared so the\n// compacted payload omits it instead of carrying an empty string/undefined.\nexport function withOptionalRoot(\n  value: AISpecRuntimeValue,\n  key: keyof AISpecRuntimeValue,\n  next: unknown,\n): AISpecRuntimeValue {\n  const updated = { ...value } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete updated[key];\n  } else {\n    updated[key] = next;\n  }\n  return updated as AISpecRuntimeValue;\n}\n\nexport function withPrompt(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePrompt>,\n): AISpecRuntimeValue {\n  return withRoot(value, { prompt: { ...value.prompt, ...patch } });\n}\n\nexport function withBudget(\n  value: AISpecRuntimeValue,\n  budget: SpecBudget,\n): AISpecRuntimeValue {\n  return withRoot(value, { budget });\n}\n\nexport function withBudgetValue(\n  value: AISpecRuntimeValue,\n  key: keyof SpecBudget,\n  next: number | string | undefined,\n): AISpecRuntimeValue {\n  const budget = { ...value.budget } as Record<string, unknown>;\n  if (next === undefined || next === \"\") {\n    delete budget[key];\n  } else {\n    budget[key] = next;\n  }\n  return withRoot(value, { budget: budget as SpecBudget });\n}\n\nexport function withMemory(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeMemory>,\n): AISpecRuntimeValue {\n  return withRoot(value, { memory: { ...value.memory, ...patch } });\n}\n\nexport function withPermissions(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimePermissions>,\n): AISpecRuntimeValue {\n  return withRoot(value, { permissions: { ...value.permissions, ...patch } });\n}\n\n/**\n * Reads the sandbox ref in object form regardless of which form it is stored\n * in, so the section's controls do not each have to re-narrow the union.\n */\nexport function sandboxRef(value: AISpecRuntimeValue): AISpecRuntimeSandbox {\n  if (typeof value.sandbox === \"string\") {\n    return { mode: value.sandbox.trim() as SpecSandboxMode };\n  }\n  return value.sandbox ?? {};\n}\n\n/**\n * Patches the unified ref while keeping its object form during editing.\n */\nexport function withSandbox(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandbox>,\n): AISpecRuntimeValue {\n  const next: AISpecRuntimeSandbox = { ...sandboxRef(value), ...patch };\n  if (!next.mode) {\n    throw new Error(\"sandbox.mode is required before configuring sandbox settings\");\n  }\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxMode(\n  value: AISpecRuntimeValue,\n  mode: SpecSandboxMode,\n): AISpecRuntimeValue {\n  const current = sandboxRef(value);\n  if (current.mode === mode) return value;\n  return withRoot(value, { sandbox: { mode } });\n}\n\nexport function withSandboxBackend(\n  value: AISpecRuntimeValue,\n  backend: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = backend.trim();\n  if (selected) next.backend = selected;\n  else delete next.backend;\n  return withRoot(value, { sandbox: next });\n}\n\nexport function withSandboxAgent(\n  value: AISpecRuntimeValue,\n  agent: string,\n): AISpecRuntimeValue {\n  const next = { ...sandboxRef(value) };\n  const selected = agent.trim();\n  if (selected) next.agent = selected;\n  else delete next.agent;\n  return withRoot(value, { sandbox: next });\n}\n\n// The base posture is independent of the sandbox (see AISpecRuntimePermissions\n// doc comment), so unlike sandbox settings it deletes cleanly to Unspecified\n// without needing a mode to be configured first.\nexport function withPermissionMode(\n  value: AISpecRuntimeValue,\n  mode: SpecPermissionMode | undefined,\n): AISpecRuntimeValue {\n  const next = { ...value.permissions } as AISpecRuntimePermissions;\n  if (mode) next.mode = mode;\n  else delete next.mode;\n  if (Object.keys(next).length === 0) {\n    const { permissions: _permissions, ...rest } = value;\n    return rest as AISpecRuntimeValue;\n  }\n  return withRoot(value, { permissions: next });\n}\n\nexport function withSandboxPolicy(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxPolicy>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"native\") {\n    throw new Error(\"native sandbox policy requires sandbox.mode native\");\n  }\n  return withSandbox(value, {\n    policy: { ...sandboxRef(value).policy, ...patch },\n  });\n}\n\nexport function withSandboxDispatch(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSandboxDispatch>,\n): AISpecRuntimeValue {\n  if (sandboxRef(value).mode !== \"git-agent\") {\n    throw new Error(\"sandbox dispatch policy requires sandbox.mode git-agent\");\n  }\n  return withSandbox(value, {\n    dispatch: { ...sandboxRef(value).dispatch, ...patch },\n  });\n}\n\nexport function withSetup(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeSetup>,\n): AISpecRuntimeValue {\n  return withRoot(value, { setup: { ...value.setup, ...patch } });\n}\n\nexport function withConnections(\n  value: AISpecRuntimeValue,\n  patch: Partial<AISpecRuntimeConnections>,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    connections: { ...value.setup?.connections, ...patch },\n  });\n}\n\nexport function withCheckout(\n  value: AISpecRuntimeValue,\n  patch: SpecCheckout,\n): AISpecRuntimeValue {\n  return withSetup(value, {\n    checkout: { ...value.setup?.checkout, ...patch },\n  });\n}\n\nexport function withWorktree(\n  value: AISpecRuntimeValue,\n  patch: SpecWorktree,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    worktree: { ...value.setup?.checkout?.worktree, ...patch },\n  });\n}\n\nexport function withDirty(\n  value: AISpecRuntimeValue,\n  patch: SpecDirty,\n): AISpecRuntimeValue {\n  return withCheckout(value, {\n    dirty: { ...value.setup?.checkout?.dirty, ...patch },\n  });\n}\n\nexport function withVerify(\n  value: AISpecRuntimeValue,\n  patch: NonNullable<SpecWorkflow[\"verify\"]>,\n): AISpecRuntimeValue {\n  return withRoot(value, {\n    workflow: {\n      ...value.workflow,\n      verify: { ...value.workflow?.verify, ...patch },\n    },\n  });\n}\n\n// The editor drives a single commit policy. A spec authored by hand may declare\n// several stanzas; the ones past the first are carried through untouched rather\n// than collapsed away by an edit to a field the editor does surface.\nexport function withCommit(\n  value: AISpecRuntimeValue,\n  patch: Partial<SpecCommit>,\n): AISpecRuntimeValue {\n  const [first, ...rest] = value.workflow?.commits ?? [];\n  return withRoot(value, {\n    workflow: { ...value.workflow, commits: [{ ...first, ...patch }, ...rest] },\n  });\n}\n\n// \"Never\" drops every stanza rather than flagging one off: an absent list is how\n// the spec says \"commit nothing\", and a surviving {dryRun: true} would leave the\n// section reading as configured.\nexport function withCommitPhase(\n  value: AISpecRuntimeValue,\n  phase: SpecCommitPhase | \"none\",\n): AISpecRuntimeValue {\n  if (phase === \"none\") {\n    return withRoot(value, { workflow: { ...value.workflow, commits: [] } });\n  }\n  return withCommit(value, { on: phase });\n}\n\n// A stanza with no explicit phase commits at the end of the run, matching\n// api.Commit.Phase()'s default.\nexport function commitPhase(\n  value: AISpecRuntimeValue,\n): SpecCommitPhase | \"none\" {\n  const commits = value.workflow?.commits;\n  if (!commits?.length) return \"none\";\n  const on = commits[0]?.on;\n  return on === \"turn\" || on === \"agent\" ? on : \"run\";\n}\n\n// Mode switches clear the fields that no longer apply, so stale values from a\n// previous mode never leak into the compacted payload.\nexport function withCheckoutMode(\n  value: AISpecRuntimeValue,\n  mode: SpecCheckoutMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withCheckout(value, {\n      mode,\n      url: \"\",\n      path: \"\",\n      connection: \"\",\n      ref: \"\",\n      depth: 0,\n    });\n  }\n  if (mode === \"local\")\n    return withCheckout(value, { mode, url: \"\", connection: \"\" });\n  return withCheckout(value, { mode, path: \"\" });\n}\n\nexport function withWorktreeMode(\n  value: AISpecRuntimeValue,\n  mode: SpecWorktreeMode,\n): AISpecRuntimeValue {\n  if (mode === \"none\") {\n    return withWorktree(value, {\n      mode,\n      prefix: \"\",\n      base: \"\",\n      path: \"\",\n      keep: false,\n    });\n  }\n  if (mode === \"existing\") {\n    return withWorktree(value, { mode, prefix: \"\", base: \"\", keep: false });\n  }\n  return withWorktree(value, { mode });\n}\n\nexport function withStashMode(\n  value: AISpecRuntimeValue,\n  stash: SpecStashMode,\n): AISpecRuntimeValue {\n  return withDirty(value, stash === \"none\" ? { stash, since: \"\" } : { stash });\n}\n\nexport function checkoutMode(value: AISpecRuntimeValue): SpecCheckoutMode {\n  const checkout = value.setup?.checkout;\n  if (checkout?.mode === \"remote\") return \"remote\";\n  if (checkout?.mode === \"local\" || checkout?.path) return \"local\";\n  return \"none\";\n}\n\nexport function worktreeMode(value: AISpecRuntimeValue): SpecWorktreeMode {\n  const mode = value.setup?.checkout?.worktree?.mode;\n  if (mode === \"existing\") return \"existing\";\n  if (mode === \"new\") return \"new\";\n  return \"none\";\n}\n\nexport function stashMode(value: AISpecRuntimeValue): SpecStashMode {\n  const stash = value.setup?.checkout?.dirty?.stash;\n  if (\n    stash === \"untracked\" ||\n    stash === \"unstaged\" ||\n    stash === \"staged\" ||\n    stash === \"all\"\n  ) {\n    return stash;\n  }\n  return \"none\";\n}\n\nexport function parseOptionalNumber(\n  value: string,\n  integer = false,\n): number | undefined {\n  if (value.trim() === \"\") return undefined;\n  const parsed = Number(value);\n  if (!Number.isFinite(parsed)) return undefined;\n  return integer ? Math.max(0, Math.trunc(parsed)) : parsed;\n}\n"],"names":[],"mappings":";;AAyBO,SAAS,SACd,OACA,OACoB;AACpB,SAAO,EAAE,GAAG,OAAO,GAAG,MAAA;AACxB;AAIO,SAAS,iBACd,OACA,KACA,MACoB;AACpB,QAAM,UAAU,EAAE,GAAG,MAAA;AACrB,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,QAAQ,GAAG;AAAA,EACpB,OAAO;AACL,YAAQ,GAAG,IAAI;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AASO,SAAS,gBACd,OACA,KACA,MACoB;AACpB,QAAM,SAAS,EAAE,GAAG,MAAM,OAAA;AAC1B,MAAI,SAAS,UAAa,SAAS,IAAI;AACrC,WAAO,OAAO,GAAG;AAAA,EACnB,OAAO;AACL,WAAO,GAAG,IAAI;AAAA,EAChB;AACA,SAAO,SAAS,OAAO,EAAE,QAA8B;AACzD;AAEO,SAAS,WACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,GAAG,MAAA,GAAS;AAClE;AAaO,SAAS,WAAW,OAAiD;AAC1E,MAAI,OAAO,MAAM,YAAY,UAAU;AACrC,WAAO,EAAE,MAAM,MAAM,QAAQ,OAAK;AAAA,EACpC;AACA,SAAO,MAAM,WAAW,CAAA;AAC1B;AAKO,SAAS,YACd,OACA,OACoB;AACpB,QAAM,OAA6B,EAAE,GAAG,WAAW,KAAK,GAAG,GAAG,MAAA;AAC9D,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,8DAA8D;AAAA,EAChF;AACA,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,gBACd,OACA,MACoB;AACpB,QAAM,UAAU,WAAW,KAAK;AAChC,MAAI,QAAQ,SAAS,KAAM,QAAO;AAClC,SAAO,SAAS,OAAO,EAAE,SAAS,EAAE,KAAA,GAAQ;AAC9C;AAEO,SAAS,mBACd,OACA,SACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,QAAQ,KAAA;AACzB,MAAI,eAAe,UAAU;AAAA,cACjB,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAEO,SAAS,iBACd,OACA,OACoB;AACpB,QAAM,OAAO,EAAE,GAAG,WAAW,KAAK,EAAA;AAClC,QAAM,WAAW,MAAM,KAAA;AACvB,MAAI,eAAe,QAAQ;AAAA,cACf,KAAK;AACjB,SAAO,SAAS,OAAO,EAAE,SAAS,MAAM;AAC1C;AAKO,SAAS,mBACd,OACA,MACoB;AACpB,QAAM,OAAO,EAAE,GAAG,MAAM,YAAA;AACxB,MAAI,WAAW,OAAO;AAAA,cACV,KAAK;AACjB,MAAI,OAAO,KAAK,IAAI,EAAE,WAAW,GAAG;AAClC,UAAM,EAAE,aAAa,cAAc,GAAG,SAAS;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,OAAO,EAAE,aAAa,MAAM;AAC9C;AAcO,SAAS,oBACd,OACA,OACoB;AACpB,MAAI,WAAW,KAAK,EAAE,SAAS,aAAa;AAC1C,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AACA,SAAO,YAAY,OAAO;AAAA,IACxB,UAAU,EAAE,GAAG,WAAW,KAAK,EAAE,UAAU,GAAG,MAAA;AAAA,EAAM,CACrD;AACH;AAEO,SAAS,UACd,OACA,OACoB;AACpB,SAAO,SAAS,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,GAAG,MAAA,GAAS;AAChE;AAWO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,EAAE,IAAG,WAAM,UAAN,mBAAa,UAAU,GAAG,MAAA;AAAA,EAAM,CAChD;AACH;AAEO,SAAS,aACd,OACA,OACoB;;AACpB,SAAO,aAAa,OAAO;AAAA,IACzB,UAAU,EAAE,IAAG,iBAAM,UAAN,mBAAa,aAAb,mBAAuB,UAAU,GAAG,MAAA;AAAA,EAAM,CAC1D;AACH;AAWO,SAAS,WACd,OACA,OACoB;;AACpB,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU;AAAA,MACR,GAAG,MAAM;AAAA,MACT,QAAQ,EAAE,IAAG,WAAM,aAAN,mBAAgB,QAAQ,GAAG,MAAA;AAAA,IAAM;AAAA,EAChD,CACD;AACH;AAKO,SAAS,WACd,OACA,OACoB;;AACpB,QAAM,CAAC,OAAO,GAAG,IAAI,MAAI,WAAM,aAAN,mBAAgB,YAAW,CAAA;AACpD,SAAO,SAAS,OAAO;AAAA,IACrB,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAC,EAAE,GAAG,OAAO,GAAG,MAAA,GAAS,GAAG,IAAI,EAAA;AAAA,EAAE,CAC3E;AACH;AAKO,SAAS,gBACd,OACA,OACoB;AACpB,MAAI,UAAU,QAAQ;AACpB,WAAO,SAAS,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,SAAS,CAAA,EAAC,GAAK;AAAA,EACzE;AACA,SAAO,WAAW,OAAO,EAAE,IAAI,OAAO;AACxC;AAIO,SAAS,YACd,OAC0B;;AAC1B,QAAM,WAAU,WAAM,aAAN,mBAAgB;AAChC,MAAI,EAAC,mCAAS,QAAQ,QAAO;AAC7B,QAAM,MAAK,aAAQ,CAAC,MAAT,mBAAY;AACvB,SAAO,OAAO,UAAU,OAAO,UAAU,KAAK;AAChD;AAIO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,YAAY;AAAA,MACZ,KAAK;AAAA,MACL,OAAO;AAAA,IAAA,CACR;AAAA,EACH;AACA,MAAI,SAAS;AACX,WAAO,aAAa,OAAO,EAAE,MAAM,KAAK,IAAI,YAAY,IAAI;AAC9D,SAAO,aAAa,OAAO,EAAE,MAAM,MAAM,IAAI;AAC/C;AAEO,SAAS,iBACd,OACA,MACoB;AACpB,MAAI,SAAS,QAAQ;AACnB,WAAO,aAAa,OAAO;AAAA,MACzB;AAAA,MACA,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,MAAM;AAAA,MACN,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AACA,MAAI,SAAS,YAAY;AACvB,WAAO,aAAa,OAAO,EAAE,MAAM,QAAQ,IAAI,MAAM,IAAI,MAAM,OAAO;AAAA,EACxE;AACA,SAAO,aAAa,OAAO,EAAE,MAAM;AACrC;AASO,SAAS,aAAa,OAA6C;;AACxE,QAAM,YAAW,WAAM,UAAN,mBAAa;AAC9B,OAAI,qCAAU,UAAS,SAAU,QAAO;AACxC,OAAI,qCAAU,UAAS,YAAW,qCAAU,MAAM,QAAO;AACzD,SAAO;AACT;AAEO,SAAS,aAAa,OAA6C;;AACxE,QAAM,QAAO,uBAAM,UAAN,mBAAa,aAAb,mBAAuB,aAAvB,mBAAiC;AAC9C,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,SAAS,MAAO,QAAO;AAC3B,SAAO;AACT;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/data/ai/SpecRuntimeEditor/update.d.ts

@@ -24,7 +24,7 @@ export declare function withSandbox(value: AISpecRuntimeValue, patch: Partial<AI
 export declare function withSandboxMode(value: AISpecRuntimeValue, mode: SpecSandboxMode): AISpecRuntimeValue;
 export declare function withSandboxBackend(value: AISpecRuntimeValue, backend: string): AISpecRuntimeValue;
 export declare function withSandboxAgent(value: AISpecRuntimeValue, agent: string): AISpecRuntimeValue;
-export declare function withSandboxApproval(value: AISpecRuntimeValue, approval: SpecPermissionMode): AISpecRuntimeValue;
+export declare function withPermissionMode(value: AISpecRuntimeValue, mode: SpecPermissionMode | undefined): AISpecRuntimeValue;
 export declare function withSandboxPolicy(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSandboxPolicy>): AISpecRuntimeValue;
 export declare function withSandboxDispatch(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSandboxDispatch>): AISpecRuntimeValue;
 export declare function withSetup(value: AISpecRuntimeValue, patch: Partial<AISpecRuntimeSetup>): AISpecRuntimeValue;

package/dist/data/ai/SpecRuntimeEditor/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,KAAK,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE5D,wBAAgB,QAAQ,CACtB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,kBAAkB,EAC7B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,UAAU,GACjB,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,UAAU,EACrB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAChC,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAEpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,oBAAoB,CAK1E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACnC,kBAAkB,CAMpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,eAAe,GACpB,kBAAkB,CAOpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,MAAM,GACd,kBAAkB,CAMpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAMpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,QAAQ,EAAE,kBAAkB,GAC3B,kBAAkB,CAKpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,0BAA0B,CAAC,GACzC,kBAAkB,CAOpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,GAC3C,kBAAkB,CAOpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,SAAS,GACf,kBAAkB,CAIpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GACzC,kBAAkB,CAOpB;AAKD,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GACzB,kBAAkB,CAKpB;AAKD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,eAAe,GAAG,MAAM,GAC9B,kBAAkB,CAKpB;AAID,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,GACxB,eAAe,GAAG,MAAM,CAK1B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,aAAa,GACnB,kBAAkB,CAEpB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAWlE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,GAAG,SAAS,CAKpB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,gBAAgB,EACjB,MAAM,4BAA4B,CAAC;AAEpC,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1D,KAAK,SAAS,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;AAChE,KAAK,UAAU,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/D,KAAK,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE5D,wBAAgB,QAAQ,CACtB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,kBAAkB,EAC7B,IAAI,EAAE,OAAO,GACZ,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,UAAU,GACjB,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,GAAG,EAAE,MAAM,UAAU,EACrB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAChC,kBAAkB,CAQpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,mBAAmB,CAAC,GAClC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAEpB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,oBAAoB,CAK1E;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,GACnC,kBAAkB,CAMpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,eAAe,GACpB,kBAAkB,CAIpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,MAAM,GACd,kBAAkB,CAMpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,GACZ,kBAAkB,CAMpB;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,kBAAkB,CASpB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,0BAA0B,CAAC,GACzC,kBAAkB,CAOpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,4BAA4B,CAAC,GAC3C,kBAAkB,CAOpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,GACjC,kBAAkB,CAEpB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,wBAAwB,CAAC,GACvC,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,YAAY,GAClB,kBAAkB,CAIpB;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,SAAS,GACf,kBAAkB,CAIpB;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GACzC,kBAAkB,CAOpB;AAKD,wBAAgB,UAAU,CACxB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,GACzB,kBAAkB,CAKpB;AAKD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,eAAe,GAAG,MAAM,GAC9B,kBAAkB,CAKpB;AAID,wBAAgB,WAAW,CACzB,KAAK,EAAE,kBAAkB,GACxB,eAAe,GAAG,MAAM,CAK1B;AAID,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,kBAAkB,EACzB,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,CAcpB;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,aAAa,GACnB,kBAAkB,CAEpB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,kBAAkB,GAAG,gBAAgB,CAKxE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAWlE;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,GACd,MAAM,GAAG,SAAS,CAKpB"}

package/dist/data/ai/SpecRuntimeEditor/update.js

@@ -41,10 +41,7 @@ function withSandbox(value, patch) {
 function withSandboxMode(value, mode) {
   const current = sandboxRef(value);
   if (current.mode === mode) return value;
-  if (mode === "off") return withRoot(value, { sandbox: { mode } });
-  return withRoot(value, {
-    sandbox: { mode, ...current.approval ? { approval: current.approval } : {} }
-  });
+  return withRoot(value, { sandbox: { mode } });
 }
 function withSandboxBackend(value, backend) {
   const next = { ...sandboxRef(value) };
@@ -60,11 +57,15 @@ function withSandboxAgent(value, agent) {
   else delete next.agent;
   return withRoot(value, { sandbox: next });
 }
-function withSandboxApproval(value, approval) {
-  if (sandboxRef(value).mode === "off") {
-    throw new Error("sandbox mode off does not accept approval");
+function withPermissionMode(value, mode) {
+  const next = { ...value.permissions };
+  if (mode) next.mode = mode;
+  else delete next.mode;
+  if (Object.keys(next).length === 0) {
+    const { permissions: _permissions, ...rest } = value;
+    return rest;
   }
-  return withSandbox(value, { approval });
+  return withRoot(value, { permissions: next });
 }
 function withSandboxDispatch(value, patch) {
   if (sandboxRef(value).mode !== "git-agent") {
@@ -173,11 +174,11 @@ export {
   withCommitPhase,
   withMemory,
   withOptionalRoot,
+  withPermissionMode,
   withPrompt,
   withRoot,
   withSandbox,
   withSandboxAgent,
-  withSandboxApproval,
   withSandboxBackend,
   withSandboxDispatch,
   withSandboxMode,