@flanksource/clicky-ui 0.3.9 → 0.3.11

package/dist/data/ai/SpecRuntimeEditor/index.js

@@ -0,0 +1,213 @@
+import { jsxs, jsx } from "react/jsx-runtime";
+import { useId, useMemo } from "react";
+import { cn } from "../../../lib/utils.js";
+import { CLIArgsSection } from "./CLIArgsSection.js";
+import { CommitSection } from "./CommitSection.js";
+import { EnvironmentSection, EnvironmentAdvanced } from "./EnvironmentSection.js";
+import { Footer } from "./Footer.js";
+import { ModelSection, ModelAdvanced } from "./ModelSection.js";
+import { PermissionsSection, PermissionsAdvanced } from "./PermissionsSection.js";
+import { PromptSection, PromptAdvanced } from "./PromptSection.js";
+import { Rail } from "./Rail.js";
+import { SectionCard } from "./SectionCard.js";
+import { VerifySection } from "./VerifySection.js";
+import { WorkspaceSection } from "./WorkspaceSection.js";
+import { buildPermissionCatalog, specPermissionEntries, withAddedPermission, withPermissionEntries } from "./permissions-model.js";
+import { summarizeTarget } from "./summaries.js";
+import { SPEC_RUNTIME_SECTIONS, sectionNumber } from "./types.js";
+import { useScrollSpy } from "./use-scrollspy.js";
+const ADVANCED_HINTS = {
+  model: "fallbacks, session, caching",
+  prompt: "schema",
+  permissions: "full permission tree",
+  environment: "dotenv files"
+};
+function SpecRuntimeEditor({
+  value,
+  onChange,
+  models = [],
+  families,
+  tools = [],
+  permissionCatalog,
+  secretSelector,
+  cliOptions,
+  sections: sectionFilter,
+  className,
+  title = "Runtime Spec",
+  eyebrow = "Agent configuration",
+  showHeader = true,
+  beforeSections,
+  defaultCollapsedSections,
+  onSave,
+  onCancel,
+  saveLabel = "Save & run",
+  footerStatus = "Ready to run"
+}) {
+  const idPrefix = useId();
+  const catalog = useMemo(
+    () => buildPermissionCatalog(permissionCatalog, tools),
+    [permissionCatalog, tools]
+  );
+  const entries = useMemo(
+    () => specPermissionEntries(value, catalog),
+    [value, catalog]
+  );
+  const allowedSections = useMemo(
+    () => sectionFilter ? new Set(sectionFilter) : void 0,
+    [sectionFilter]
+  );
+  const sections = SPEC_RUNTIME_SECTIONS.filter(
+    (section) => (section.id !== "cli" || cliOptions) && (allowedSections == null || allowedSections.has(section.id))
+  );
+  const collapsedSections = useMemo(
+    () => new Set(defaultCollapsedSections ?? []),
+    [defaultCollapsedSections]
+  );
+  const domId = (id) => `${idPrefix}-${id}`;
+  const { sectionRef } = useScrollSpy(
+    sections.map((section) => domId(section.id))
+  );
+  const applyEntries = (applied, mode) => onChange(withPermissionEntries(value, applied, mode));
+  const addEntry = (domain, id) => {
+    const next = withAddedPermission(value, domain, id);
+    if (next) onChange(next);
+  };
+  const sectionBody = (id) => {
+    switch (id) {
+      case "model":
+        return /* @__PURE__ */ jsx(
+          ModelSection,
+          {
+            value,
+            onChange,
+            models,
+            ...families ? { families } : {}
+          }
+        );
+      case "prompt":
+        return /* @__PURE__ */ jsx(PromptSection, { value, onChange });
+      case "workspace":
+        return /* @__PURE__ */ jsx(
+          WorkspaceSection,
+          {
+            value,
+            onChange,
+            secretSelector
+          }
+        );
+      case "permissions":
+        return /* @__PURE__ */ jsx(
+          PermissionsSection,
+          {
+            value,
+            onChange,
+            entries,
+            onApplyEntries: applyEntries,
+            onAddEntry: addEntry
+          }
+        );
+      case "environment":
+        return /* @__PURE__ */ jsx(
+          EnvironmentSection,
+          {
+            value,
+            onChange,
+            secretSelector
+          }
+        );
+      case "verify":
+        return /* @__PURE__ */ jsx(
+          VerifySection,
+          {
+            value,
+            onChange,
+            models,
+            ...families ? { families } : {},
+            ...secretSelector ? { secretSelector } : {}
+          }
+        );
+      case "commit":
+        return /* @__PURE__ */ jsx(CommitSection, { value, onChange });
+      case "cli":
+        return cliOptions ? /* @__PURE__ */ jsx(
+          CLIArgsSection,
+          {
+            value,
+            onChange,
+            cliOptions
+          }
+        ) : null;
+    }
+  };
+  const sectionAdvanced = (id) => {
+    switch (id) {
+      case "model":
+        return /* @__PURE__ */ jsx(
+          ModelAdvanced,
+          {
+            value,
+            onChange,
+            models,
+            ...families ? { families } : {}
+          }
+        );
+      case "prompt":
+        return /* @__PURE__ */ jsx(PromptAdvanced, { value, onChange });
+      case "permissions":
+        return /* @__PURE__ */ jsx(
+          PermissionsAdvanced,
+          {
+            value,
+            onChange,
+            entries,
+            onApplyEntries: applyEntries,
+            onAddEntry: addEntry
+          }
+        );
+      case "environment":
+        return /* @__PURE__ */ jsx(EnvironmentAdvanced, { value, onChange });
+      default:
+        return void 0;
+    }
+  };
+  return /* @__PURE__ */ jsxs("div", { className: cn("@container", className), children: [
+    /* @__PURE__ */ jsxs("div", { className: "mx-auto max-w-[820px] px-density-4 py-density-4", children: [
+      showHeader && /* @__PURE__ */ jsx(
+        Rail,
+        {
+          eyebrow,
+          title,
+          target: summarizeTarget(value)
+        }
+      ),
+      beforeSections,
+      sections.map((section) => /* @__PURE__ */ jsx(
+        SectionCard,
+        {
+          meta: section,
+          number: sectionNumber(section.id),
+          domId: domId(section.id),
+          sectionRef: sectionRef(domId(section.id)),
+          advanced: sectionAdvanced(section.id),
+          advancedHint: ADVANCED_HINTS[section.id],
+          defaultCollapsed: collapsedSections.has(section.id),
+          children: sectionBody(section.id)
+        },
+        section.id
+      ))
+    ] }),
+    (onSave || onCancel) && /* @__PURE__ */ jsx(
+      Footer,
+      {
+        status: footerStatus,
+        saveLabel,
+        onSave,
+        onCancel
+      }
+    )
+  ] });
+}
+export {
+  SpecRuntimeEditor
+};
+//# sourceMappingURL=index.js.map

package/dist/data/ai/SpecRuntimeEditor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../src/data/ai/SpecRuntimeEditor/index.tsx"],"sourcesContent":["import { useId, useMemo, type ReactNode } from \"react\";\nimport { cn } from \"../../../lib/utils\";\nimport type { ChatModel, ToolMeta } from \"../../chat/types\";\nimport type {\n  AISpecRuntimePermissionCatalog,\n  AISpecRuntimeValue,\n} from \"../SpecRuntimeEditor.model\";\nimport { CLIArgsSection, type SpecRuntimeCLIOptions } from \"./CLIArgsSection\";\nimport { CommitSection } from \"./CommitSection\";\nimport { EnvironmentAdvanced, EnvironmentSection } from \"./EnvironmentSection\";\nimport { Footer } from \"./Footer\";\nimport { ModelAdvanced, ModelSection } from \"./ModelSection\";\nimport { PermissionsAdvanced, PermissionsSection } from \"./PermissionsSection\";\nimport { PromptAdvanced, PromptSection } from \"./PromptSection\";\nimport { Rail } from \"./Rail\";\nimport { SectionCard } from \"./SectionCard\";\nimport { VerifySection } from \"./VerifySection\";\nimport { WorkspaceSection } from \"./WorkspaceSection\";\nimport {\n  buildPermissionCatalog,\n  specPermissionEntries,\n  withAddedPermission,\n  withPermissionEntries,\n} from \"./permissions-model\";\nimport { summarizeTarget } from \"./summaries\";\nimport {\n  SPEC_RUNTIME_SECTIONS,\n  sectionNumber,\n  type SpecRuntimeSecretSelectorConfig,\n  type SpecSectionId,\n} from \"./types\";\nimport type { SpecRuntimeFamily } from \"../runtime-mode\";\nimport { useScrollSpy } from \"./use-scrollspy\";\n\nexport type { AISpecRuntimeValue } from \"../SpecRuntimeEditor.model\";\nexport type { SpecRuntimeSecretSelectorConfig } from \"./types\";\nexport type { SpecRuntimeCLIOptions } from \"./CLIArgsSection\";\nexport {\n  SPEC_RUNTIME_FAMILIES,\n  type SpecRuntimeFamily,\n  type SpecRuntimeModeOption,\n} from \"../runtime-mode\";\n\nexport type SpecRuntimeEditorProps = {\n  value: AISpecRuntimeValue;\n  onChange: (value: AISpecRuntimeValue) => void;\n  models?: ChatModel[] | undefined;\n  /** Provider families for the two-axis Family → Mode picker in the model section. */\n  families?: SpecRuntimeFamily[] | undefined;\n  tools?: ToolMeta[] | undefined;\n  permissionCatalog?: AISpecRuntimePermissionCatalog | undefined;\n  secretSelector?: SpecRuntimeSecretSelectorConfig | undefined;\n  /** Schema for the backend's extra CLI args; enables the CLI flags section. */\n  cliOptions?: SpecRuntimeCLIOptions | undefined;\n  /** Optional section allow-list for embedded editors that only need part of the runtime spec. */\n  sections?: readonly SpecSectionId[] | undefined;\n  className?: string | undefined;\n  title?: ReactNode | undefined;\n  eyebrow?: ReactNode | undefined;\n  /** Hide the editor rail when a host modal already supplies the context. */\n  showHeader?: boolean | undefined;\n  /** Content rendered before the first section inside the editor column. */\n  beforeSections?: ReactNode | undefined;\n  /** Sections that should start collapsed in embedded contexts. */\n  defaultCollapsedSections?: readonly SpecSectionId[] | undefined;\n  /** Renders the sticky footer's save action when set. */\n  onSave?: (() => void) | undefined;\n  /** Renders the sticky footer's cancel action when set. */\n  onCancel?: (() => void) | undefined;\n  saveLabel?: string | undefined;\n  footerStatus?: ReactNode | undefined;\n};\n\nconst ADVANCED_HINTS: Partial<Record<SpecSectionId, string>> = {\n  model: \"fallbacks, session, caching\",\n  prompt: \"schema\",\n  permissions: \"full permission tree\",\n  environment: \"dotenv files\",\n};\n\n// Full-page runtime spec editor (design \"Runtime Spec Editor v2\"): a live\n// summary rail with scrollspy nav, preset quick-starts, and stacked numbered\n// sections. Container-responsive so it works embedded in a modal or standalone.\nexport function SpecRuntimeEditor({\n  value,\n  onChange,\n  models = [],\n  families,\n  tools = [],\n  permissionCatalog,\n  secretSelector,\n  cliOptions,\n  sections: sectionFilter,\n  className,\n  title = \"Runtime Spec\",\n  eyebrow = \"Agent configuration\",\n  showHeader = true,\n  beforeSections,\n  defaultCollapsedSections,\n  onSave,\n  onCancel,\n  saveLabel = \"Save & run\",\n  footerStatus = \"Ready to run\",\n}: SpecRuntimeEditorProps) {\n  const idPrefix = useId();\n  const catalog = useMemo(\n    () => buildPermissionCatalog(permissionCatalog, tools),\n    [permissionCatalog, tools],\n  );\n  const entries = useMemo(\n    () => specPermissionEntries(value, catalog),\n    [value, catalog],\n  );\n\n  const allowedSections = useMemo(\n    () => (sectionFilter ? new Set(sectionFilter) : undefined),\n    [sectionFilter],\n  );\n  const sections = SPEC_RUNTIME_SECTIONS.filter(\n    (section) =>\n      (section.id !== \"cli\" || cliOptions) &&\n      (allowedSections == null || allowedSections.has(section.id)),\n  );\n  const collapsedSections = useMemo(\n    () => new Set(defaultCollapsedSections ?? []),\n    [defaultCollapsedSections],\n  );\n  const domId = (id: SpecSectionId) => `${idPrefix}-${id}`;\n  const { sectionRef } = useScrollSpy(\n    sections.map((section) => domId(section.id)),\n  );\n\n  const applyEntries = (\n    applied: Parameters<typeof withPermissionEntries>[1],\n    mode: Parameters<typeof withPermissionEntries>[2],\n  ) => onChange(withPermissionEntries(value, applied, mode));\n  const addEntry = (\n    domain: Parameters<typeof withAddedPermission>[1],\n    id: string,\n  ) => {\n    const next = withAddedPermission(value, domain, id);\n    if (next) onChange(next);\n  };\n\n  const sectionBody = (id: SpecSectionId): ReactNode => {\n    switch (id) {\n      case \"model\":\n        return (\n          <ModelSection\n            value={value}\n            onChange={onChange}\n            models={models}\n            {...(families ? { families } : {})}\n          />\n        );\n      case \"prompt\":\n        return <PromptSection value={value} onChange={onChange} />;\n      case \"workspace\":\n        return (\n          <WorkspaceSection\n            value={value}\n            onChange={onChange}\n            secretSelector={secretSelector}\n          />\n        );\n      case \"permissions\":\n        return (\n          <PermissionsSection\n            value={value}\n            onChange={onChange}\n            entries={entries}\n            onApplyEntries={applyEntries}\n            onAddEntry={addEntry}\n          />\n        );\n      case \"environment\":\n        return (\n          <EnvironmentSection\n            value={value}\n            onChange={onChange}\n            secretSelector={secretSelector}\n          />\n        );\n      case \"verify\":\n        return (\n          <VerifySection\n            value={value}\n            onChange={onChange}\n            models={models}\n            {...(families ? { families } : {})}\n            {...(secretSelector ? { secretSelector } : {})}\n          />\n        );\n      case \"commit\":\n        return <CommitSection value={value} onChange={onChange} />;\n      case \"cli\":\n        return cliOptions ? (\n          <CLIArgsSection\n            value={value}\n            onChange={onChange}\n            cliOptions={cliOptions}\n          />\n        ) : null;\n    }\n  };\n\n  const sectionAdvanced = (id: SpecSectionId): ReactNode => {\n    switch (id) {\n      case \"model\":\n        return (\n          <ModelAdvanced\n            value={value}\n            onChange={onChange}\n            models={models}\n            {...(families ? { families } : {})}\n          />\n        );\n      case \"prompt\":\n        return <PromptAdvanced value={value} onChange={onChange} />;\n      case \"permissions\":\n        return (\n          <PermissionsAdvanced\n            value={value}\n            onChange={onChange}\n            entries={entries}\n            onApplyEntries={applyEntries}\n            onAddEntry={addEntry}\n          />\n        );\n      case \"environment\":\n        return <EnvironmentAdvanced value={value} onChange={onChange} />;\n      default:\n        return undefined;\n    }\n  };\n\n  return (\n    <div className={cn(\"@container\", className)}>\n      <div className=\"mx-auto max-w-[820px] px-density-4 py-density-4\">\n        {showHeader && (\n          <Rail\n            eyebrow={eyebrow}\n            title={title}\n            target={summarizeTarget(value)}\n          />\n        )}\n        {beforeSections}\n        {sections.map((section) => (\n          <SectionCard\n            key={section.id}\n            meta={section}\n            number={sectionNumber(section.id)}\n            domId={domId(section.id)}\n            sectionRef={sectionRef(domId(section.id))}\n            advanced={sectionAdvanced(section.id)}\n            advancedHint={ADVANCED_HINTS[section.id]}\n            defaultCollapsed={collapsedSections.has(section.id)}\n          >\n            {sectionBody(section.id)}\n          </SectionCard>\n        ))}\n      </div>\n      {(onSave || onCancel) && (\n        <Footer\n          status={footerStatus}\n          saveLabel={saveLabel}\n          onSave={onSave}\n          onCancel={onCancel}\n        />\n      )}\n    </div>\n  );\n}\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAyEA,MAAM,iBAAyD;AAAA,EAC7D,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AACf;AAKO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA,SAAS,CAAA;AAAA,EACT;AAAA,EACA,QAAQ,CAAA;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV;AAAA,EACA,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,EACZ,eAAe;AACjB,GAA2B;AACzB,QAAM,WAAW,MAAA;AACjB,QAAM,UAAU;AAAA,IACd,MAAM,uBAAuB,mBAAmB,KAAK;AAAA,IACrD,CAAC,mBAAmB,KAAK;AAAA,EAAA;AAE3B,QAAM,UAAU;AAAA,IACd,MAAM,sBAAsB,OAAO,OAAO;AAAA,IAC1C,CAAC,OAAO,OAAO;AAAA,EAAA;AAGjB,QAAM,kBAAkB;AAAA,IACtB,MAAO,gBAAgB,IAAI,IAAI,aAAa,IAAI;AAAA,IAChD,CAAC,aAAa;AAAA,EAAA;AAEhB,QAAM,WAAW,sBAAsB;AAAA,IACrC,CAAC,aACE,QAAQ,OAAO,SAAS,gBACxB,mBAAmB,QAAQ,gBAAgB,IAAI,QAAQ,EAAE;AAAA,EAAA;AAE9D,QAAM,oBAAoB;AAAA,IACxB,MAAM,IAAI,IAAI,4BAA4B,EAAE;AAAA,IAC5C,CAAC,wBAAwB;AAAA,EAAA;AAE3B,QAAM,QAAQ,CAAC,OAAsB,GAAG,QAAQ,IAAI,EAAE;AACtD,QAAM,EAAE,eAAe;AAAA,IACrB,SAAS,IAAI,CAAC,YAAY,MAAM,QAAQ,EAAE,CAAC;AAAA,EAAA;AAG7C,QAAM,eAAe,CACnB,SACA,SACG,SAAS,sBAAsB,OAAO,SAAS,IAAI,CAAC;AACzD,QAAM,WAAW,CACf,QACA,OACG;AACH,UAAM,OAAO,oBAAoB,OAAO,QAAQ,EAAE;AAClD,QAAI,eAAe,IAAI;AAAA,EACzB;AAEA,QAAM,cAAc,CAAC,OAAiC;AACpD,YAAQ,IAAA;AAAA,MACN,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,YACC,GAAI,WAAW,EAAE,aAAa,CAAA;AAAA,UAAC;AAAA,QAAA;AAAA,MAGtC,KAAK;AACH,eAAO,oBAAC,eAAA,EAAc,OAAc,SAAA,CAAoB;AAAA,MAC1D,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAAA,QAAA;AAAA,MAGN,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,YACA,gBAAgB;AAAA,YAChB,YAAY;AAAA,UAAA;AAAA,QAAA;AAAA,MAGlB,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAAA,QAAA;AAAA,MAGN,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,YACC,GAAI,WAAW,EAAE,SAAA,IAAa,CAAA;AAAA,YAC9B,GAAI,iBAAiB,EAAE,mBAAmB,CAAA;AAAA,UAAC;AAAA,QAAA;AAAA,MAGlD,KAAK;AACH,eAAO,oBAAC,eAAA,EAAc,OAAc,SAAA,CAAoB;AAAA,MAC1D,KAAK;AACH,eAAO,aACL;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAAA,QAAA,IAEA;AAAA,IAAA;AAAA,EAEV;AAEA,QAAM,kBAAkB,CAAC,OAAiC;AACxD,YAAQ,IAAA;AAAA,MACN,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,YACC,GAAI,WAAW,EAAE,aAAa,CAAA;AAAA,UAAC;AAAA,QAAA;AAAA,MAGtC,KAAK;AACH,eAAO,oBAAC,gBAAA,EAAe,OAAc,SAAA,CAAoB;AAAA,MAC3D,KAAK;AACH,eACE;AAAA,UAAC;AAAA,UAAA;AAAA,YACC;AAAA,YACA;AAAA,YACA;AAAA,YACA,gBAAgB;AAAA,YAChB,YAAY;AAAA,UAAA;AAAA,QAAA;AAAA,MAGlB,KAAK;AACH,eAAO,oBAAC,qBAAA,EAAoB,OAAc,SAAA,CAAoB;AAAA,MAChE;AACE,eAAO;AAAA,IAAA;AAAA,EAEb;AAEA,8BACG,OAAA,EAAI,WAAW,GAAG,cAAc,SAAS,GACxC,UAAA;AAAA,IAAA,qBAAC,OAAA,EAAI,WAAU,mDACZ,UAAA;AAAA,MAAA,cACC;AAAA,QAAC;AAAA,QAAA;AAAA,UACC;AAAA,UACA;AAAA,UACA,QAAQ,gBAAgB,KAAK;AAAA,QAAA;AAAA,MAAA;AAAA,MAGhC;AAAA,MACA,SAAS,IAAI,CAAC,YACb;AAAA,QAAC;AAAA,QAAA;AAAA,UAEC,MAAM;AAAA,UACN,QAAQ,cAAc,QAAQ,EAAE;AAAA,UAChC,OAAO,MAAM,QAAQ,EAAE;AAAA,UACvB,YAAY,WAAW,MAAM,QAAQ,EAAE,CAAC;AAAA,UACxC,UAAU,gBAAgB,QAAQ,EAAE;AAAA,UACpC,cAAc,eAAe,QAAQ,EAAE;AAAA,UACvC,kBAAkB,kBAAkB,IAAI,QAAQ,EAAE;AAAA,UAEjD,UAAA,YAAY,QAAQ,EAAE;AAAA,QAAA;AAAA,QATlB,QAAQ;AAAA,MAAA,CAWhB;AAAA,IAAA,GACH;AAAA,KACE,UAAU,aACV;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAAA,IAAA;AAAA,EACF,GAEJ;AAEJ;"}

package/dist/data/ai/SpecRuntimeEditor/permissions-model.cjs

@@ -0,0 +1,252 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const SpecRuntimeEditor_model = require("../SpecRuntimeEditor.model.cjs");
+const TOOL_POLICY_MODES = [
+  "auto",
+  "ask",
+  "allow",
+  "deny"
+];
+const RESOURCE_MODES = ["enabled", "disabled"];
+function buildPermissionCatalog(catalog, tools) {
+  return {
+    tools: (catalog == null ? void 0 : catalog.tools) ?? tools.map((tool) => {
+      const item = {
+        id: tool.name,
+        label: tool.label || tool.name,
+        defaultMode: toolDefaultPolicy(tool.defaultPermission)
+      };
+      if (tool.group) item.group = tool.group;
+      if (tool.description) item.description = tool.description;
+      return item;
+    }),
+    mcp: (catalog == null ? void 0 : catalog.mcp) ?? [],
+    plugins: (catalog == null ? void 0 : catalog.plugins) ?? [],
+    skills: (catalog == null ? void 0 : catalog.skills) ?? []
+  };
+}
+function buildPermissionEntries(catalog, toolPolicies, mcp, pluginModes, skillModes) {
+  return [
+    ...buildToolPermissionEntries(catalog.tools, toolPolicies),
+    ...buildResourcePermissionEntries(
+      "mcp",
+      catalog.mcp,
+      mcpPermissionModes(mcp),
+      mcp.servers,
+      mcp.disabled ? "disabled" : "enabled"
+    ),
+    ...buildResourcePermissionEntries("plugins", catalog.plugins, pluginModes),
+    ...buildResourcePermissionEntries("skills", catalog.skills, skillModes)
+  ];
+}
+function specPermissionEntries(value, catalog) {
+  var _a, _b, _c, _d, _e, _f;
+  const skillModes = SpecRuntimeEditor_model.normalizeResourcePolicies(
+    (_a = value.permissions) == null ? void 0 : _a.skills,
+    (_b = value.memory) == null ? void 0 : _b.skills
+  );
+  if ((_c = value.memory) == null ? void 0 : _c.skipSkills) {
+    for (const item of catalog.skills) {
+      skillModes[item.id] = "disabled";
+    }
+    for (const id of value.memory.skills ?? []) {
+      skillModes[id] = "disabled";
+    }
+  }
+  return buildPermissionEntries(
+    catalog,
+    SpecRuntimeEditor_model.normalizeToolPolicies((_d = value.permissions) == null ? void 0 : _d.tools),
+    SpecRuntimeEditor_model.normalizeMCPPermissions((_e = value.permissions) == null ? void 0 : _e.mcp),
+    SpecRuntimeEditor_model.normalizeResourcePolicies((_f = value.permissions) == null ? void 0 : _f.plugins),
+    skillModes
+  );
+}
+function withPermissionEntries(value, entries, mode) {
+  var _a, _b, _c, _d, _e;
+  const nextTools = {
+    ...SpecRuntimeEditor_model.normalizeToolPolicies((_a = value.permissions) == null ? void 0 : _a.tools)
+  };
+  let nextMCP = { ...SpecRuntimeEditor_model.normalizeMCPPermissions((_b = value.permissions) == null ? void 0 : _b.mcp) };
+  const nextPlugins = {
+    ...SpecRuntimeEditor_model.normalizeResourcePolicies((_c = value.permissions) == null ? void 0 : _c.plugins)
+  };
+  const nextSkills = {
+    ...SpecRuntimeEditor_model.normalizeResourcePolicies(
+      (_d = value.permissions) == null ? void 0 : _d.skills,
+      (_e = value.memory) == null ? void 0 : _e.skills
+    )
+  };
+  let touchedSkills = false;
+  for (const entry of entries) {
+    if (entry.domain === "tools" && isSpecToolPolicy(mode)) {
+      nextTools[entry.id] = mode;
+    } else if (entry.domain === "mcp" && isSpecResourceMode(mode)) {
+      nextMCP = withMCPMode(nextMCP, entry.id, mode);
+    } else if (entry.domain === "plugins" && isSpecResourceMode(mode)) {
+      nextPlugins[entry.id] = mode;
+    } else if (entry.domain === "skills" && isSpecResourceMode(mode)) {
+      nextSkills[entry.id] = mode;
+      touchedSkills = true;
+    }
+  }
+  const memoryWithoutSkipSkills = { ...value.memory };
+  delete memoryWithoutSkipSkills.skipSkills;
+  return {
+    ...value,
+    permissions: {
+      ...value.permissions,
+      tools: nextTools,
+      mcp: nextMCP,
+      plugins: nextPlugins,
+      skills: nextSkills
+    },
+    ...touchedSkills ? { memory: { ...memoryWithoutSkipSkills, skills: [] } } : void 0
+  };
+}
+function withAddedPermission(value, domain, id) {
+  const trimmed = id.trim();
+  if (!trimmed) return void 0;
+  const mode = domain === "tools" ? "auto" : "enabled";
+  return withPermissionEntries(
+    value,
+    [
+      {
+        id: trimmed,
+        label: trimmed,
+        group: permissionDomainGroup(domain),
+        domain,
+        mode
+      }
+    ],
+    mode
+  );
+}
+function buildToolPermissionEntries(items, policies) {
+  const entries = [];
+  const seen = /* @__PURE__ */ new Set();
+  const add = (id, item) => {
+    const key = id.trim();
+    if (!key || seen.has(key)) return;
+    seen.add(key);
+    entries.push({
+      id: key,
+      label: (item == null ? void 0 : item.label) || key,
+      group: (item == null ? void 0 : item.group) || "Tools",
+      domain: "tools",
+      mode: policies[key] ?? toolDefaultPolicy(item == null ? void 0 : item.defaultMode),
+      description: item == null ? void 0 : item.description,
+      source: item == null ? void 0 : item.source,
+      sourcePath: item == null ? void 0 : item.sourcePath
+    });
+  };
+  for (const item of items) add(item.id, item);
+  for (const id of Object.keys(policies)) add(id, void 0);
+  return entries;
+}
+function buildResourcePermissionEntries(domain, items, modes, extraIDs = void 0, defaultMode = "enabled") {
+  const entries = [];
+  const seen = /* @__PURE__ */ new Set();
+  const add = (id, item) => {
+    const key = id.trim();
+    if (!key || seen.has(key)) return;
+    seen.add(key);
+    entries.push({
+      id: key,
+      label: (item == null ? void 0 : item.label) || key,
+      group: (item == null ? void 0 : item.group) || permissionDomainGroup(domain),
+      domain,
+      mode: modes[key] ?? resourceDefaultMode(item == null ? void 0 : item.defaultMode, defaultMode),
+      description: item == null ? void 0 : item.description,
+      source: item == null ? void 0 : item.source,
+      sourcePath: item == null ? void 0 : item.sourcePath
+    });
+  };
+  for (const item of items) add(item.id, item);
+  for (const id of extraIDs ?? []) add(id, void 0);
+  for (const id of Object.keys(modes)) add(id, void 0);
+  return entries;
+}
+function entryModeOptions(entry) {
+  return entry.domain === "tools" ? TOOL_POLICY_MODES : RESOURCE_MODES;
+}
+function withMCPMode(value, id, mode) {
+  const next = {
+    ...SpecRuntimeEditor_model.normalizeMCPPermissions(value)
+  };
+  const servers = new Set(next.servers ?? []);
+  if (mode === "enabled") servers.add(id);
+  if (servers.size > 0) {
+    next.servers = Array.from(servers);
+  } else {
+    delete next.servers;
+  }
+  next[id] = mode;
+  return next;
+}
+function mcpPermissionModes(value) {
+  const out = {};
+  for (const [rawKey, rawValue] of Object.entries(value)) {
+    const key = rawKey.trim();
+    if (!key || key === "servers" || key === "disabled") continue;
+    if (isSpecResourceMode(rawValue)) out[key] = rawValue;
+  }
+  return out;
+}
+function toolDefaultPolicy(value) {
+  if (isSpecToolPolicy(value)) return value;
+  if (value === "on") return "allow";
+  if (value === "enabled") return "auto";
+  if (value === "off") return "deny";
+  if (value === "disabled") return "deny";
+  if (value === "ask") return "ask";
+  return "auto";
+}
+function resourceDefaultMode(value, fallback) {
+  return isSpecResourceMode(value) ? value : fallback;
+}
+function permissionDomainGroup(domain) {
+  switch (domain) {
+    case "tools":
+      return "Tools";
+    case "mcp":
+      return "MCP";
+    case "plugins":
+      return "Plugins";
+    case "skills":
+      return "Skills";
+  }
+}
+function permissionAddPlaceholder(domain) {
+  switch (domain) {
+    case "tools":
+      return "Tool name";
+    case "mcp":
+      return "server name";
+    case "plugins":
+      return "/path/to/plugin";
+    case "skills":
+      return "$CWD/.skills";
+  }
+}
+function isSpecToolPolicy(value) {
+  return value === "auto" || value === "ask" || value === "allow" || value === "deny";
+}
+function isSpecResourceMode(value) {
+  return value === "enabled" || value === "disabled";
+}
+exports.RESOURCE_MODES = RESOURCE_MODES;
+exports.TOOL_POLICY_MODES = TOOL_POLICY_MODES;
+exports.buildPermissionCatalog = buildPermissionCatalog;
+exports.buildPermissionEntries = buildPermissionEntries;
+exports.entryModeOptions = entryModeOptions;
+exports.isSpecResourceMode = isSpecResourceMode;
+exports.isSpecToolPolicy = isSpecToolPolicy;
+exports.mcpPermissionModes = mcpPermissionModes;
+exports.permissionAddPlaceholder = permissionAddPlaceholder;
+exports.permissionDomainGroup = permissionDomainGroup;
+exports.specPermissionEntries = specPermissionEntries;
+exports.toolDefaultPolicy = toolDefaultPolicy;
+exports.withAddedPermission = withAddedPermission;
+exports.withMCPMode = withMCPMode;
+exports.withPermissionEntries = withPermissionEntries;
+//# sourceMappingURL=permissions-model.cjs.map

package/dist/data/ai/SpecRuntimeEditor/permissions-model.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-model.cjs","sources":["../../../../src/data/ai/SpecRuntimeEditor/permissions-model.ts"],"sourcesContent":["import type { ToolMeta } from \"../../chat/types\";\nimport {\n  normalizeMCPPermissions,\n  normalizeResourcePolicies,\n  normalizeToolPolicies,\n  type AISpecRuntimeMCPPermissions,\n  type AISpecRuntimePermissionCatalog,\n  type AISpecRuntimePermissionCatalogItem,\n  type AISpecRuntimeResourcePolicies,\n  type AISpecRuntimeToolPolicies,\n  type AISpecRuntimeValue,\n  type SpecResourceMode,\n  type SpecToolPolicy,\n} from \"../SpecRuntimeEditor.model\";\n\nexport type PermissionDomain = \"tools\" | \"mcp\" | \"plugins\" | \"skills\";\nexport type PermissionListMode = SpecToolPolicy | SpecResourceMode;\n\nexport type PermissionListEntry = {\n  id: string;\n  label: string;\n  group: string;\n  domain: PermissionDomain;\n  mode: PermissionListMode;\n  description?: string | undefined;\n  source?: string | undefined;\n  sourcePath?: string | undefined;\n};\n\nexport const TOOL_POLICY_MODES: SpecToolPolicy[] = [\n  \"auto\",\n  \"ask\",\n  \"allow\",\n  \"deny\",\n];\nexport const RESOURCE_MODES: SpecResourceMode[] = [\"enabled\", \"disabled\"];\n\nconst TOOL_POLICY_LABEL: Record<SpecToolPolicy, string> = {\n  auto: \"Auto\",\n  ask: \"Ask\",\n  allow: \"Allow\",\n  deny: \"Deny\",\n};\nconst RESOURCE_MODE_LABEL: Record<SpecResourceMode, string> = {\n  enabled: \"Enabled\",\n  disabled: \"Disabled\",\n};\n\nexport function buildPermissionCatalog(\n  catalog: AISpecRuntimePermissionCatalog | undefined,\n  tools: ToolMeta[],\n): Required<AISpecRuntimePermissionCatalog> {\n  return {\n    tools:\n      catalog?.tools ??\n      tools.map((tool) => {\n        const item: AISpecRuntimePermissionCatalogItem = {\n          id: tool.name,\n          label: tool.label || tool.name,\n          defaultMode: toolDefaultPolicy(tool.defaultPermission),\n        };\n        if (tool.group) item.group = tool.group;\n        if (tool.description) item.description = tool.description;\n        return item;\n      }),\n    mcp: catalog?.mcp ?? [],\n    plugins: catalog?.plugins ?? [],\n    skills: catalog?.skills ?? [],\n  };\n}\n\nexport function buildPermissionEntries(\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n  toolPolicies: AISpecRuntimeToolPolicies,\n  mcp: AISpecRuntimeMCPPermissions,\n  pluginModes: AISpecRuntimeResourcePolicies,\n  skillModes: AISpecRuntimeResourcePolicies,\n): PermissionListEntry[] {\n  return [\n    ...buildToolPermissionEntries(catalog.tools, toolPolicies),\n    ...buildResourcePermissionEntries(\n      \"mcp\",\n      catalog.mcp,\n      mcpPermissionModes(mcp),\n      mcp.servers,\n      mcp.disabled ? \"disabled\" : \"enabled\",\n    ),\n    ...buildResourcePermissionEntries(\"plugins\", catalog.plugins, pluginModes),\n    ...buildResourcePermissionEntries(\"skills\", catalog.skills, skillModes),\n  ];\n}\n\n// Builds the entry list straight from a spec value: normalize the four policy\n// maps, then merge them with the catalog.\nexport function specPermissionEntries(\n  value: AISpecRuntimeValue,\n  catalog: Required<AISpecRuntimePermissionCatalog>,\n): PermissionListEntry[] {\n  const skillModes = normalizeResourcePolicies(\n    value.permissions?.skills,\n    value.memory?.skills,\n  );\n  if (value.memory?.skipSkills) {\n    for (const item of catalog.skills) {\n      skillModes[item.id] = \"disabled\";\n    }\n    for (const id of value.memory.skills ?? []) {\n      skillModes[id] = \"disabled\";\n    }\n  }\n  return buildPermissionEntries(\n    catalog,\n    normalizeToolPolicies(value.permissions?.tools),\n    normalizeMCPPermissions(value.permissions?.mcp),\n    normalizeResourcePolicies(value.permissions?.plugins),\n    skillModes,\n  );\n}\n\n// Applies a mode to the given entries, returning the next spec value. Writing\n// any skill entry migrates legacy memory.skills into permissions.skills.\nexport function withPermissionEntries(\n  value: AISpecRuntimeValue,\n  entries: PermissionListEntry[],\n  mode: PermissionListMode,\n): AISpecRuntimeValue {\n  const nextTools: AISpecRuntimeToolPolicies = {\n    ...normalizeToolPolicies(value.permissions?.tools),\n  };\n  let nextMCP = { ...normalizeMCPPermissions(value.permissions?.mcp) };\n  const nextPlugins: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(value.permissions?.plugins),\n  };\n  const nextSkills: AISpecRuntimeResourcePolicies = {\n    ...normalizeResourcePolicies(\n      value.permissions?.skills,\n      value.memory?.skills,\n    ),\n  };\n  let touchedSkills = false;\n\n  for (const entry of entries) {\n    if (entry.domain === \"tools\" && isSpecToolPolicy(mode)) {\n      nextTools[entry.id] = mode;\n    } else if (entry.domain === \"mcp\" && isSpecResourceMode(mode)) {\n      nextMCP = withMCPMode(nextMCP, entry.id, mode);\n    } else if (entry.domain === \"plugins\" && isSpecResourceMode(mode)) {\n      nextPlugins[entry.id] = mode;\n    } else if (entry.domain === \"skills\" && isSpecResourceMode(mode)) {\n      nextSkills[entry.id] = mode;\n      touchedSkills = true;\n    }\n  }\n\n  const memoryWithoutSkipSkills = { ...value.memory };\n  delete memoryWithoutSkipSkills.skipSkills;\n  return {\n    ...value,\n    permissions: {\n      ...value.permissions,\n      tools: nextTools,\n      mcp: nextMCP,\n      plugins: nextPlugins,\n      skills: nextSkills,\n    },\n    ...(touchedSkills\n      ? { memory: { ...memoryWithoutSkipSkills, skills: [] } }\n      : undefined),\n  };\n}\n\nexport function withAddedPermission(\n  value: AISpecRuntimeValue,\n  domain: PermissionDomain,\n  id: string,\n): AISpecRuntimeValue | undefined {\n  const trimmed = id.trim();\n  if (!trimmed) return undefined;\n  const mode: PermissionListMode = domain === \"tools\" ? \"auto\" : \"enabled\";\n  return withPermissionEntries(\n    value,\n    [\n      {\n        id: trimmed,\n        label: trimmed,\n        group: permissionDomainGroup(domain),\n        domain,\n        mode,\n      },\n    ],\n    mode,\n  );\n}\n\nfunction buildToolPermissionEntries(\n  items: AISpecRuntimePermissionCatalogItem[],\n  policies: AISpecRuntimeToolPolicies,\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || \"Tools\",\n      domain: \"tools\",\n      mode: policies[key] ?? toolDefaultPolicy(item?.defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of Object.keys(policies)) add(id, undefined);\n  return entries;\n}\n\nfunction buildResourcePermissionEntries(\n  domain: Exclude<PermissionDomain, \"tools\">,\n  items: AISpecRuntimePermissionCatalogItem[],\n  modes: AISpecRuntimeResourcePolicies,\n  extraIDs: string[] | undefined = undefined,\n  defaultMode: SpecResourceMode = \"enabled\",\n) {\n  const entries: PermissionListEntry[] = [];\n  const seen = new Set<string>();\n  const add = (\n    id: string,\n    item: AISpecRuntimePermissionCatalogItem | undefined,\n  ) => {\n    const key = id.trim();\n    if (!key || seen.has(key)) return;\n    seen.add(key);\n    entries.push({\n      id: key,\n      label: item?.label || key,\n      group: item?.group || permissionDomainGroup(domain),\n      domain,\n      mode: modes[key] ?? resourceDefaultMode(item?.defaultMode, defaultMode),\n      description: item?.description,\n      source: item?.source,\n      sourcePath: item?.sourcePath,\n    });\n  };\n  for (const item of items) add(item.id, item);\n  for (const id of extraIDs ?? []) add(id, undefined);\n  for (const id of Object.keys(modes)) add(id, undefined);\n  return entries;\n}\n\nexport function groupPermissionEntries(entries: PermissionListEntry[]) {\n  const groups = new Map<string, PermissionListEntry[]>();\n  for (const entry of entries) {\n    const group = entry.group || permissionDomainGroup(entry.domain);\n    groups.set(group, [...(groups.get(group) ?? []), entry]);\n  }\n  return Array.from(groups.entries());\n}\n\nexport function permissionGroupMode(\n  entries: PermissionListEntry[],\n): PermissionListMode | \"mixed\" {\n  const first = entries[0]?.mode;\n  if (!first) return \"mixed\";\n  return entries.every((entry) => entry.mode === first) ? first : \"mixed\";\n}\n\n// Group-level bulk controls only make sense when the group is homogeneous:\n// tool groups get the 4-state cycle, resource groups the 2-state one.\nexport function permissionGroupModeOptions(\n  entries: PermissionListEntry[],\n): readonly PermissionListMode[] {\n  if (entries.length === 0) return [];\n  const hasTools = entries.some((entry) => entry.domain === \"tools\");\n  const hasResources = entries.some((entry) => entry.domain !== \"tools\");\n  if (hasTools && hasResources) return [];\n  return hasTools ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function entryModeOptions(\n  entry: PermissionListEntry,\n): readonly PermissionListMode[] {\n  return entry.domain === \"tools\" ? TOOL_POLICY_MODES : RESOURCE_MODES;\n}\n\nexport function withMCPMode(\n  value: AISpecRuntimeMCPPermissions,\n  id: string,\n  mode: SpecResourceMode,\n): AISpecRuntimeMCPPermissions {\n  const next: AISpecRuntimeMCPPermissions = {\n    ...normalizeMCPPermissions(value),\n  };\n  const servers = new Set(next.servers ?? []);\n  if (mode === \"enabled\") servers.add(id);\n  if (servers.size > 0) {\n    next.servers = Array.from(servers);\n  } else {\n    delete next.servers;\n  }\n  next[id] = mode;\n  return next;\n}\n\nexport function mcpPermissionModes(\n  value: AISpecRuntimeMCPPermissions,\n): AISpecRuntimeResourcePolicies {\n  const out: AISpecRuntimeResourcePolicies = {};\n  for (const [rawKey, rawValue] of Object.entries(value)) {\n    const key = rawKey.trim();\n    if (!key || key === \"servers\" || key === \"disabled\") continue;\n    if (isSpecResourceMode(rawValue)) out[key] = rawValue;\n  }\n  return out;\n}\n\nexport function toolDefaultPolicy(value: unknown): SpecToolPolicy {\n  if (isSpecToolPolicy(value)) return value;\n  if (value === \"on\") return \"allow\";\n  if (value === \"enabled\") return \"auto\";\n  if (value === \"off\") return \"deny\";\n  if (value === \"disabled\") return \"deny\";\n  if (value === \"ask\") return \"ask\";\n  return \"auto\";\n}\n\nfunction resourceDefaultMode(\n  value: unknown,\n  fallback: SpecResourceMode,\n): SpecResourceMode {\n  return isSpecResourceMode(value) ? value : fallback;\n}\n\nexport function permissionDomainGroup(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tools\";\n    case \"mcp\":\n      return \"MCP\";\n    case \"plugins\":\n      return \"Plugins\";\n    case \"skills\":\n      return \"Skills\";\n  }\n}\n\nexport function permissionAddPlaceholder(domain: PermissionDomain) {\n  switch (domain) {\n    case \"tools\":\n      return \"Tool name\";\n    case \"mcp\":\n      return \"server name\";\n    case \"plugins\":\n      return \"/path/to/plugin\";\n    case \"skills\":\n      return \"$CWD/.skills\";\n  }\n}\n\nexport function isDenyMode(mode: PermissionListMode) {\n  return mode === \"deny\" || mode === \"disabled\";\n}\n\nexport function permissionModeLabel(mode: PermissionListMode | \"mixed\") {\n  if (mode === \"mixed\") return \"Mixed\";\n  return isSpecToolPolicy(mode)\n    ? TOOL_POLICY_LABEL[mode]\n    : RESOURCE_MODE_LABEL[mode];\n}\n\n// Active-state colors per the v2 design: auto=success, ask=warning,\n// allow=info, deny=error; resources keep enabled=success / disabled=muted.\nexport function permissionModeBadgeClass(mode: PermissionListMode | \"mixed\") {\n  switch (mode) {\n    case \"auto\":\n    case \"enabled\":\n      return \"bg-emerald-100 text-emerald-700 dark:bg-emerald-900 dark:text-emerald-300\";\n    case \"ask\":\n      return \"bg-amber-100 text-amber-700 dark:bg-amber-900 dark:text-amber-300\";\n    case \"allow\":\n      return \"bg-sky-100 text-sky-700 dark:bg-sky-900 dark:text-sky-300\";\n    case \"deny\":\n      return \"bg-red-100 text-red-700 dark:bg-red-900 dark:text-red-300\";\n    default:\n      return \"bg-muted text-muted-foreground\";\n  }\n}\n\nexport function isSpecToolPolicy(value: unknown): value is SpecToolPolicy {\n  return (\n    value === \"auto\" || value === \"ask\" || value === \"allow\" || value === \"deny\"\n  );\n}\n\nexport function isSpecResourceMode(value: unknown): value is SpecResourceMode {\n  return value === \"enabled\" || value === \"disabled\";\n}\n"],"names":["normalizeResourcePolicies","normalizeToolPolicies","normalizeMCPPermissions"],"mappings":";;;AA6BO,MAAM,oBAAsC;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,iBAAqC,CAAC,WAAW,UAAU;AAajE,SAAS,uBACd,SACA,OAC0C;AAC1C,SAAO;AAAA,IACL,QACE,mCAAS,UACT,MAAM,IAAI,CAAC,SAAS;AAClB,YAAM,OAA2C;AAAA,QAC/C,IAAI,KAAK;AAAA,QACT,OAAO,KAAK,SAAS,KAAK;AAAA,QAC1B,aAAa,kBAAkB,KAAK,iBAAiB;AAAA,MAAA;AAEvD,UAAI,KAAK,MAAO,MAAK,QAAQ,KAAK;AAClC,UAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAC9C,aAAO;AAAA,IACT,CAAC;AAAA,IACH,MAAK,mCAAS,QAAO,CAAA;AAAA,IACrB,UAAS,mCAAS,YAAW,CAAA;AAAA,IAC7B,SAAQ,mCAAS,WAAU,CAAA;AAAA,EAAC;AAEhC;AAEO,SAAS,uBACd,SACA,cACA,KACA,aACA,YACuB;AACvB,SAAO;AAAA,IACL,GAAG,2BAA2B,QAAQ,OAAO,YAAY;AAAA,IACzD,GAAG;AAAA,MACD;AAAA,MACA,QAAQ;AAAA,MACR,mBAAmB,GAAG;AAAA,MACtB,IAAI;AAAA,MACJ,IAAI,WAAW,aAAa;AAAA,IAAA;AAAA,IAE9B,GAAG,+BAA+B,WAAW,QAAQ,SAAS,WAAW;AAAA,IACzE,GAAG,+BAA+B,UAAU,QAAQ,QAAQ,UAAU;AAAA,EAAA;AAE1E;AAIO,SAAS,sBACd,OACA,SACuB;;AACvB,QAAM,aAAaA,wBAAAA;AAAAA,KACjB,WAAM,gBAAN,mBAAmB;AAAA,KACnB,WAAM,WAAN,mBAAc;AAAA,EAAA;AAEhB,OAAI,WAAM,WAAN,mBAAc,YAAY;AAC5B,eAAW,QAAQ,QAAQ,QAAQ;AACjC,iBAAW,KAAK,EAAE,IAAI;AAAA,IACxB;AACA,eAAW,MAAM,MAAM,OAAO,UAAU,CAAA,GAAI;AAC1C,iBAAW,EAAE,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA,IACAC,+CAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,IAC9CC,iDAAwB,WAAM,gBAAN,mBAAmB,GAAG;AAAA,IAC9CF,mDAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,IACpD;AAAA,EAAA;AAEJ;AAIO,SAAS,sBACd,OACA,SACA,MACoB;;AACpB,QAAM,YAAuC;AAAA,IAC3C,GAAGC,wBAAAA,uBAAsB,WAAM,gBAAN,mBAAmB,KAAK;AAAA,EAAA;AAEnD,MAAI,UAAU,EAAE,GAAGC,wBAAAA,yBAAwB,WAAM,gBAAN,mBAAmB,GAAG,EAAA;AACjE,QAAM,cAA6C;AAAA,IACjD,GAAGF,wBAAAA,2BAA0B,WAAM,gBAAN,mBAAmB,OAAO;AAAA,EAAA;AAEzD,QAAM,aAA4C;AAAA,IAChD,GAAGA,wBAAAA;AAAAA,OACD,WAAM,gBAAN,mBAAmB;AAAA,OACnB,WAAM,WAAN,mBAAc;AAAA,IAAA;AAAA,EAChB;AAEF,MAAI,gBAAgB;AAEpB,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,WAAW,WAAW,iBAAiB,IAAI,GAAG;AACtD,gBAAU,MAAM,EAAE,IAAI;AAAA,IACxB,WAAW,MAAM,WAAW,SAAS,mBAAmB,IAAI,GAAG;AAC7D,gBAAU,YAAY,SAAS,MAAM,IAAI,IAAI;AAAA,IAC/C,WAAW,MAAM,WAAW,aAAa,mBAAmB,IAAI,GAAG;AACjE,kBAAY,MAAM,EAAE,IAAI;AAAA,IAC1B,WAAW,MAAM,WAAW,YAAY,mBAAmB,IAAI,GAAG;AAChE,iBAAW,MAAM,EAAE,IAAI;AACvB,sBAAgB;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,0BAA0B,EAAE,GAAG,MAAM,OAAA;AAC3C,SAAO,wBAAwB;AAC/B,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa;AAAA,MACX,GAAG,MAAM;AAAA,MACT,OAAO;AAAA,MACP,KAAK;AAAA,MACL,SAAS;AAAA,MACT,QAAQ;AAAA,IAAA;AAAA,IAEV,GAAI,gBACA,EAAE,QAAQ,EAAE,GAAG,yBAAyB,QAAQ,CAAA,EAAC,MACjD;AAAA,EAAA;AAER;AAEO,SAAS,oBACd,OACA,QACA,IACgC;AAChC,QAAM,UAAU,GAAG,KAAA;AACnB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAA2B,WAAW,UAAU,SAAS;AAC/D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE;AAAA,QACE,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,OAAO,sBAAsB,MAAM;AAAA,QACnC;AAAA,QACA;AAAA,MAAA;AAAA,IACF;AAAA,IAEF;AAAA,EAAA;AAEJ;AAEA,SAAS,2BACP,OACA,UACA;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAQ;AAAA,MACR,MAAM,SAAS,GAAG,KAAK,kBAAkB,6BAAM,WAAW;AAAA,MAC1D,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,OAAO,KAAK,QAAQ,EAAG,KAAI,IAAI,MAAS;AACzD,SAAO;AACT;AAEA,SAAS,+BACP,QACA,OACA,OACA,WAAiC,QACjC,cAAgC,WAChC;AACA,QAAM,UAAiC,CAAA;AACvC,QAAM,2BAAW,IAAA;AACjB,QAAM,MAAM,CACV,IACA,SACG;AACH,UAAM,MAAM,GAAG,KAAA;AACf,QAAI,CAAC,OAAO,KAAK,IAAI,GAAG,EAAG;AAC3B,SAAK,IAAI,GAAG;AACZ,YAAQ,KAAK;AAAA,MACX,IAAI;AAAA,MACJ,QAAO,6BAAM,UAAS;AAAA,MACtB,QAAO,6BAAM,UAAS,sBAAsB,MAAM;AAAA,MAClD;AAAA,MACA,MAAM,MAAM,GAAG,KAAK,oBAAoB,6BAAM,aAAa,WAAW;AAAA,MACtE,aAAa,6BAAM;AAAA,MACnB,QAAQ,6BAAM;AAAA,MACd,YAAY,6BAAM;AAAA,IAAA,CACnB;AAAA,EACH;AACA,aAAW,QAAQ,MAAO,KAAI,KAAK,IAAI,IAAI;AAC3C,aAAW,MAAM,YAAY,CAAA,EAAI,KAAI,IAAI,MAAS;AAClD,aAAW,MAAM,OAAO,KAAK,KAAK,EAAG,KAAI,IAAI,MAAS;AACtD,SAAO;AACT;AA+BO,SAAS,iBACd,OAC+B;AAC/B,SAAO,MAAM,WAAW,UAAU,oBAAoB;AACxD;AAEO,SAAS,YACd,OACA,IACA,MAC6B;AAC7B,QAAM,OAAoC;AAAA,IACxC,GAAGE,wBAAAA,wBAAwB,KAAK;AAAA,EAAA;AAElC,QAAM,UAAU,IAAI,IAAI,KAAK,WAAW,CAAA,CAAE;AAC1C,MAAI,SAAS,UAAW,SAAQ,IAAI,EAAE;AACtC,MAAI,QAAQ,OAAO,GAAG;AACpB,SAAK,UAAU,MAAM,KAAK,OAAO;AAAA,EACnC,OAAO;AACL,WAAO,KAAK;AAAA,EACd;AACA,OAAK,EAAE,IAAI;AACX,SAAO;AACT;AAEO,SAAS,mBACd,OAC+B;AAC/B,QAAM,MAAqC,CAAA;AAC3C,aAAW,CAAC,QAAQ,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACtD,UAAM,MAAM,OAAO,KAAA;AACnB,QAAI,CAAC,OAAO,QAAQ,aAAa,QAAQ,WAAY;AACrD,QAAI,mBAAmB,QAAQ,EAAG,KAAI,GAAG,IAAI;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,kBAAkB,OAAgC;AAChE,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,UAAU,UAAW,QAAO;AAChC,MAAI,UAAU,MAAO,QAAO;AAC5B,MAAI,UAAU,WAAY,QAAO;AACjC,MAAI,UAAU,MAAO,QAAO;AAC5B,SAAO;AACT;AAEA,SAAS,oBACP,OACA,UACkB;AAClB,SAAO,mBAAmB,KAAK,IAAI,QAAQ;AAC7C;AAEO,SAAS,sBAAsB,QAA0B;AAC9D,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AAEO,SAAS,yBAAyB,QAA0B;AACjE,UAAQ,QAAA;AAAA,IACN,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EAAA;AAEb;AA+BO,SAAS,iBAAiB,OAAyC;AACxE,SACE,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU;AAE1E;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SAAO,UAAU,aAAa,UAAU;AAC1C;;;;;;;;;;;;;;;;"}

package/dist/data/ai/SpecRuntimeEditor/permissions-model.d.ts

@@ -0,0 +1,36 @@
+import { ToolMeta } from '../../chat/types';
+import { AISpecRuntimeMCPPermissions, AISpecRuntimePermissionCatalog, AISpecRuntimeResourcePolicies, AISpecRuntimeToolPolicies, AISpecRuntimeValue, SpecResourceMode, SpecToolPolicy } from '../SpecRuntimeEditor.model';
+export type PermissionDomain = "tools" | "mcp" | "plugins" | "skills";
+export type PermissionListMode = SpecToolPolicy | SpecResourceMode;
+export type PermissionListEntry = {
+    id: string;
+    label: string;
+    group: string;
+    domain: PermissionDomain;
+    mode: PermissionListMode;
+    description?: string | undefined;
+    source?: string | undefined;
+    sourcePath?: string | undefined;
+};
+export declare const TOOL_POLICY_MODES: SpecToolPolicy[];
+export declare const RESOURCE_MODES: SpecResourceMode[];
+export declare function buildPermissionCatalog(catalog: AISpecRuntimePermissionCatalog | undefined, tools: ToolMeta[]): Required<AISpecRuntimePermissionCatalog>;
+export declare function buildPermissionEntries(catalog: Required<AISpecRuntimePermissionCatalog>, toolPolicies: AISpecRuntimeToolPolicies, mcp: AISpecRuntimeMCPPermissions, pluginModes: AISpecRuntimeResourcePolicies, skillModes: AISpecRuntimeResourcePolicies): PermissionListEntry[];
+export declare function specPermissionEntries(value: AISpecRuntimeValue, catalog: Required<AISpecRuntimePermissionCatalog>): PermissionListEntry[];
+export declare function withPermissionEntries(value: AISpecRuntimeValue, entries: PermissionListEntry[], mode: PermissionListMode): AISpecRuntimeValue;
+export declare function withAddedPermission(value: AISpecRuntimeValue, domain: PermissionDomain, id: string): AISpecRuntimeValue | undefined;
+export declare function groupPermissionEntries(entries: PermissionListEntry[]): [string, PermissionListEntry[]][];
+export declare function permissionGroupMode(entries: PermissionListEntry[]): PermissionListMode | "mixed";
+export declare function permissionGroupModeOptions(entries: PermissionListEntry[]): readonly PermissionListMode[];
+export declare function entryModeOptions(entry: PermissionListEntry): readonly PermissionListMode[];
+export declare function withMCPMode(value: AISpecRuntimeMCPPermissions, id: string, mode: SpecResourceMode): AISpecRuntimeMCPPermissions;
+export declare function mcpPermissionModes(value: AISpecRuntimeMCPPermissions): AISpecRuntimeResourcePolicies;
+export declare function toolDefaultPolicy(value: unknown): SpecToolPolicy;
+export declare function permissionDomainGroup(domain: PermissionDomain): "Tools" | "MCP" | "Plugins" | "Skills";
+export declare function permissionAddPlaceholder(domain: PermissionDomain): "Tool name" | "server name" | "/path/to/plugin" | "$CWD/.skills";
+export declare function isDenyMode(mode: PermissionListMode): mode is "disabled" | "deny";
+export declare function permissionModeLabel(mode: PermissionListMode | "mixed"): string;
+export declare function permissionModeBadgeClass(mode: PermissionListMode | "mixed"): "bg-muted text-muted-foreground" | "bg-emerald-100 text-emerald-700 dark:bg-emerald-900 dark:text-emerald-300" | "bg-amber-100 text-amber-700 dark:bg-amber-900 dark:text-amber-300" | "bg-sky-100 text-sky-700 dark:bg-sky-900 dark:text-sky-300" | "bg-red-100 text-red-700 dark:bg-red-900 dark:text-red-300";
+export declare function isSpecToolPolicy(value: unknown): value is SpecToolPolicy;
+export declare function isSpecResourceMode(value: unknown): value is SpecResourceMode;
+//# sourceMappingURL=permissions-model.d.ts.map

package/dist/data/ai/SpecRuntimeEditor/permissions-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-model.d.ts","sourceRoot":"","sources":["../../../../src/data/ai/SpecRuntimeEditor/permissions-model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAIL,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EAEnC,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAEnE,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAK7C,CAAC;AACF,eAAO,MAAM,cAAc,EAAE,gBAAgB,EAA4B,CAAC;AAa1E,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,8BAA8B,GAAG,SAAS,EACnD,KAAK,EAAE,QAAQ,EAAE,GAChB,QAAQ,CAAC,8BAA8B,CAAC,CAkB1C;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,QAAQ,CAAC,8BAA8B,CAAC,EACjD,YAAY,EAAE,yBAAyB,EACvC,GAAG,EAAE,2BAA2B,EAChC,WAAW,EAAE,6BAA6B,EAC1C,UAAU,EAAE,6BAA6B,GACxC,mBAAmB,EAAE,CAavB;AAID,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,QAAQ,CAAC,8BAA8B,CAAC,GAChD,mBAAmB,EAAE,CAoBvB;AAID,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,kBAAkB,EACzB,OAAO,EAAE,mBAAmB,EAAE,EAC9B,IAAI,EAAE,kBAAkB,GACvB,kBAAkB,CA4CpB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,EACzB,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,MAAM,GACT,kBAAkB,GAAG,SAAS,CAiBhC;AAgED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,qCAOpE;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,mBAAmB,EAAE,GAC7B,kBAAkB,GAAG,OAAO,CAI9B;AAID,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAAE,GAC7B,SAAS,kBAAkB,EAAE,CAM/B;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,mBAAmB,GACzB,SAAS,kBAAkB,EAAE,CAE/B;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,2BAA2B,EAClC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,gBAAgB,GACrB,2BAA2B,CAa7B;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,2BAA2B,GACjC,6BAA6B,CAQ/B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAQhE;AASD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,0CAW7D;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,oEAWhE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,kBAAkB,+BAElD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,UAKrE;AAID,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,oTAc1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAE5E"}