@fungi.computer/tourtois 0.1.0 → 0.2.0

package/dist/Keys.js

@@ -1,177 +1,227 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { SectionHeading } from "@fungi.computer/caps/blocks/section-heading";
-import { ActionRow } from "@fungi.computer/caps/components/action-row";
-import { Badge } from "@fungi.computer/caps/components/badge";
 import { Button } from "@fungi.computer/caps/components/button";
 import { Checkbox } from "@fungi.computer/caps/components/checkbox";
 import { DataList, DataRow } from "@fungi.computer/caps/components/data-list";
 import { Field, FormFooter } from "@fungi.computer/caps/components/field";
-import { Select } from "@fungi.computer/caps/components/select";
+import { Input } from "@fungi.computer/caps/components/input";
 import { FormFields, SchemaForm, field, useSchemaForm, useSchemaFormStatus, } from "@fungi.computer/caps/form";
 import { defineIdFamily } from "@fungi.computer/cairn/id";
-import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
 import { useState } from "react";
 import * as z from "zod";
-/** One App's level a key may hold: read-only, or read and change. */
-const keyAppAccessLevelSchema = z.enum(["read", "write"]);
-/** What a grant reaches: every installed App (including future installs), or named ones. */
-export const keyGrantTargetSchema = z.discriminatedUnion("kind", [
-    z.strictObject({ kind: z.literal("all") }),
-    z.strictObject({
-        kind: z.literal("selected"),
-        installationIds: z.array(z.string().min(1)),
-    }),
-]);
-/** One App-scoped grant a key holds. */
-export const keyGrantSchema = z.strictObject({
-    level: keyAppAccessLevelSchema,
-    target: keyGrantTargetSchema,
-});
-/** One key as the host lists it; its secret never comes back after issuing. */
-export const keyRecordSchema = z.strictObject({
-    keyId: z.string().min(1),
-    name: z.string().min(1),
-    grants: z.array(keyGrantSchema),
-    /** The computer.use grant: off unless the owner turns it on for this key. */
-    computerAccess: z.boolean(),
-    expiresAt: z.number().int().nonnegative().nullable(),
-    createdAt: z.number().int().nonnegative(),
-    lastUsedAt: z.number().int().nonnegative().nullable(),
-    revokedAt: z.number().int().nonnegative().nullable(),
-});
-/** Every key this owner has issued. */
-export const keysViewSchema = z.strictObject({
-    keys: z.array(keyRecordSchema),
-});
-/** The plaintext secret, shown exactly once, plus the issued record. */
-export const keyIssueResultSchema = z.strictObject({
-    plaintext: z.string().min(1),
-    key: keyRecordSchema,
-});
-const revokeIds = defineIdFamily({
-    family: "tourtois-keys-revoke-request",
+const mutationIds = defineIdFamily({
+    family: "tourtois-keys-mutation",
     version: 1,
     kinds: { request: { prefix: "request" } },
 });
-const queryKey = ["tourtois", "keys"];
-const accessLevelLabel = {
-    read: "Read",
-    write: "Read and change",
+const keyQueryKeys = {
+    list: (scope) => ["tourtois", "keys", scope],
+    options: (scope, apps) => [...keyQueryKeys.list(scope), "options", apps],
 };
-function grantSummary(grants, apps) {
-    const all = grants.find((grant) => grant.target.kind === "all");
-    if (all)
-        return `All Apps, including future installs (${accessLevelLabel[all.level]})`;
-    if (grants.length === 0)
-        return "No App access";
-    const names = new Map(apps.map((app) => [app.installationId, app.displayName]));
-    return grants
-        .flatMap((grant) => grant.target.kind === "selected"
-        ? grant.target.installationIds.map((id) => `${names.get(id) ?? id} (${accessLevelLabel[grant.level]})`)
-        : [])
-        .join(", ");
-}
-function expirySummary(key) {
-    if (key.expiresAt === null)
-        return "Never expires";
-    const date = new Date(key.expiresAt).toLocaleDateString();
-    return key.expiresAt <= Date.now() ? `Expired ${date}` : `Expires ${date}`;
+/** Scope changes remount the secret-once state as well as separating query caches. */
+export function Keys(props) {
+    return _jsx(KeysContent, { ...props }, props.port.scope);
 }
-function lastUsedSummary(key) {
-    return key.lastUsedAt === null
-        ? "Never used"
-        : `Last used ${new Date(key.lastUsedAt).toLocaleDateString()}`;
-}
-/**
- * The Keys settings on a standalone host: issue, list and revoke keys that
- * act with the owner's own access, limited to the Apps, level and expiry
- * chosen here. A key never gets its own identity; it narrows the owner's.
- */
-export function Keys({ port, apps, }) {
+function KeysContent({ port, apps, }) {
     const client = useQueryClient();
-    const view = useQuery({ queryKey, queryFn: () => port.list() });
-    const refresh = () => client.invalidateQueries({ queryKey });
-    const revoke = useMutation({
-        mutationFn: (keyId) => port.revoke(keyId, revokeIds.request.generate()),
-        onSuccess: refresh,
+    const queryKey = keyQueryKeys.list(port.scope);
+    const view = useQuery({ queryKey, queryFn: () => port.list(), retry: false });
+    const options = useQuery({
+        queryKey: keyQueryKeys.options(port.scope, apps),
+        queryFn: ({ signal }) => port.options(apps, signal),
+        retry: false,
     });
-    const keys = view.data?.keys ?? [];
-    const [formKey, setFormKey] = useState(0);
     const [issued, setIssued] = useState(null);
-    return (_jsxs("section", { className: "tourtois-settings-content tourtois-keys", "aria-label": "Keys", children: [_jsx(SectionHeading, { children: "Keys" }), _jsx("p", { className: "tourtois-settings-lede", children: "Anyone holding this key can read the Apps you pick. Where you choose \u201CRead and change,\u201D it can change data without asking you first. If it can change Workflows, it can also run Workflows with your access, but only on the Apps it can reach." }), view.isPending ? _jsx("p", { children: "Loading keys\u2026" }) : null, view.isError ? (_jsxs("div", { role: "status", children: [_jsx("p", { children: "Keys could not be loaded." }), _jsx(Button, { size: "sm", onClick: () => void view.refetch(), children: "Retry" })] })) : null, view.isSuccess && keys.length === 0 ? _jsx("p", { children: "No keys yet." }) : null, keys.length > 0 ? (_jsx(DataList, { "aria-label": "Keys", children: keys.map((key) => {
-                    const revoked = key.revokedAt !== null;
-                    return (_jsx(DataRow, { className: "p-0", children: _jsx(ActionRow, { label: _jsxs(_Fragment, { children: [key.name, " ", revoked ? (_jsx(Badge, { size: "sm", variant: "quiet", children: "Revoked" })) : null, key.computerAccess ? (_jsx(Badge, { size: "sm", variant: "quiet", children: "Computer" })) : null] }), description: `${grantSummary(key.grants, apps)} · ${expirySummary(key)} · ${lastUsedSummary(key)}`, trailing: revoked ? null : (_jsx(Button, { size: "sm", variant: "ghost", "aria-label": `Revoke ${key.name}`, disabled: revoke.isPending, onClick: () => {
-                                    revoke.mutate(key.keyId);
-                                }, children: "Revoke" })) }) }, key.keyId));
-                }) })) : null, revoke.isError ? (_jsx("p", { role: "alert", children: "The key could not be revoked." })) : null, _jsx(SectionHeading, { children: "New key" }), issued === null ? (_jsx(IssueKey, { apps: apps, onIssue: async (draft) => {
+    const [editing, setEditing] = useState(null);
+    const [command, setCommand] = useState(null);
+    const [busy, setBusy] = useState(false);
+    const [notice, setNotice] = useState(null);
+    const [error, setError] = useState(null);
+    const refresh = () => client.invalidateQueries({ queryKey });
+    const mutate = async (pending) => {
+        setCommand(pending);
+        setBusy(true);
+        setError(null);
+        setNotice(null);
+        try {
+            const change = pending.kind === "revoke"
+                ? await port.revoke(pending.keyId, pending.requestId)
+                : await (() => {
+                    if (port.updateGrants === undefined)
+                        throw new Error("Grant editing is not offered by this host");
+                    return port.updateGrants(pending.input);
+                })();
+            setNotice(change.notice);
+            setEditing(null);
+            if (!change.retry)
+                setCommand(null);
+            await refresh();
+        }
+        catch (cause) {
+            setError(cause instanceof Error
+                ? cause.message
+                : "The key change could not be confirmed.");
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const labels = new Map(options.data?.map((option) => [option.capability, option.label]));
+    return (_jsxs("section", { className: "tourtois-settings-content tourtois-keys", "aria-label": "Keys", children: [_jsx(SectionHeading, { children: "Keys" }), _jsx("p", { className: "tourtois-settings-lede", children: "Anyone holding a key can act with your current access, limited to its grants and expiry, without asking again. Read grants cannot make changes. Grants which run Workflows can also run them with your access, within the key's targets." }), view.isPending ? _jsx("p", { children: "Loading keys\u2026" }) : null, view.isError ? (_jsxs("p", { role: "alert", children: ["Keys could not be loaded.", " ", _jsx(Button, { onClick: () => void view.refetch(), children: "Retry" })] })) : null, options.isError ? (_jsxs("p", { role: "alert", children: ["Capability targets could not be loaded.", " ", _jsx(Button, { onClick: () => void options.refetch(), children: "Retry targets" })] })) : null, view.isSuccess && view.data.keys.length === 0 ? (_jsx("p", { children: "No keys yet." })) : null, _jsx(DataList, { "aria-label": "Keys", children: (view.data?.keys ?? []).map((key) => (_jsx(DataRow, { style: { gridTemplateColumns: "minmax(0, 1fr)" }, children: _jsxs("div", { className: "grid min-w-0 gap-sm", children: [_jsxs("div", { className: "grid min-w-0 gap-xs break-words", children: [_jsxs("strong", { children: [key.name, key.revokedAt !== null ? " · Revoked" : ""] }), _jsx("p", { children: key.grants.length === 0
+                                            ? "Authority unavailable; revoke and issue a new key."
+                                            : key.grants
+                                                .map((grant) => `${labels.get(grant.capability) ?? grant.capability}: ${grant.targets.kind === "all" ? "all current and future targets" : grant.targets.ids.join(", ")}`)
+                                                .join(" · ") }), _jsxs("p", { children: [key.expiresAt === null
+                                                ? "Never expires"
+                                                : `${key.expiresAt <= Date.now() ? "Expired" : "Expires"} ${new Date(key.expiresAt).toLocaleString()}`, " ", "\u00B7", " ", key.lastUsedAt === null
+                                                ? "Use not recorded"
+                                                : `Last used ${new Date(key.lastUsedAt).toLocaleString()}`] })] }), key.revokedAt === null ? (_jsxs("div", { className: "flex flex-wrap gap-sm", children: [port.updateGrants !== undefined && key.grants.length > 0 ? (_jsx(Button, { "aria-label": `Edit ${key.name}`, disabled: busy || command !== null, onClick: () => {
+                                            setEditing(key);
+                                        }, children: "Edit" })) : null, _jsx(Button, { "aria-label": `Revoke ${key.name}`, disabled: busy || command !== null, onClick: () => void mutate({
+                                            kind: "revoke",
+                                            keyId: key.keyId,
+                                            requestId: mutationIds.request.generate(),
+                                        }), children: "Revoke" })] })) : null] }) }, key.keyId))) }), notice ? _jsx("p", { role: "status", children: notice }) : null, error ? _jsx("p", { role: "alert", children: error }) : null, command !== null ? (_jsxs("div", { className: "flex gap-sm", children: [_jsx(Button, { disabled: busy, onClick: () => void mutate(command), children: "Retry key change" }), _jsx(Button, { disabled: busy, onClick: () => {
+                            setCommand(null);
+                            setEditing(null);
+                            void refresh();
+                        }, children: "Reload keys" })] })) : null, editing !== null && options.data !== undefined ? (_jsx(EditKey, { record: editing, port: port, options: options.data, disabled: busy || command !== null, onCancel: () => {
+                    setEditing(null);
+                }, onSave: (grants) => mutate({
+                    kind: "grants",
+                    input: {
+                        requestId: mutationIds.request.generate(),
+                        keyId: editing.keyId,
+                        expectedGrantVersion: editing.grantVersion,
+                        grants,
+                    },
+                }) }, editing.keyId + ":" + String(editing.grantVersion))) : null, _jsx(SectionHeading, { children: "New key" }), issued === null ? (options.data === undefined ? (_jsx("p", { children: "Loading capability targets\u2026" })) : (_jsx(IssueKey, { port: port, options: options.data, onIssue: async (draft) => {
                     const result = await port.issue(draft);
                     setIssued(result);
                     await refresh();
-                } }, formKey)) : (_jsxs("div", { className: "grid gap-sm", role: "status", children: [_jsx("p", { children: "Copy this key now. It is shown once and cannot be retrieved later." }), _jsx("code", { className: "break-all", children: issued.plaintext }), _jsx(Button, { type: "button", variant: "outline", onClick: () => {
+                } }))) : (_jsxs("div", { className: "grid gap-sm", role: "status", children: [_jsx("p", { children: "Copy this key now. It is shown once and cannot be retrieved later." }), _jsx("code", { className: "break-all", children: issued.plaintext }), _jsx(Button, { onClick: () => {
                             setIssued(null);
-                            setFormKey((current) => current + 1);
                         }, children: "I copied the key" })] }))] }));
 }
-const expiryChoiceSchema = z.enum(["never", "30", "90", "365"]);
-const issueFormFields = z.object({
-    name: z
-        .string()
-        .trim()
-        .min(1, "Give this key a name.")
-        .max(128)
-        .meta(field({ label: "Name", required: true, maxLength: 128 })),
-    expiry: expiryChoiceSchema.meta(field({
-        label: "Expires after",
-        options: {
-            never: "Never",
-            "30": "30 days",
-            "90": "90 days",
-            "365": "1 year",
-        },
-    })),
-});
-const issueFormDefaults = { name: "", expiry: "never" };
-const perAppChoiceSchema = z.enum(["none", "read", "write"]);
-function IssueKey({ apps, onIssue, }) {
-    const [allApps, setAllApps] = useState(false);
-    const [allAppsLevel, setAllAppsLevel] = useState("read");
-    const [perApp, setPerApp] = useState(() => Object.fromEntries(apps.map((app) => [app.installationId, "none"])));
-    const [computerAccess, setComputerAccess] = useState(false);
-    const selectedCount = Object.values(perApp).filter((choice) => choice !== "none").length;
-    const hasAccess = allApps || selectedCount > 0;
+function GrantEditor({ grants, onChange, options, disabled, }) {
+    return (_jsxs("fieldset", { className: "grid gap-sm", disabled: disabled, children: [_jsx("legend", { children: "Capability grants" }), options.map((option) => {
+                const grant = grants.find((current) => current.capability === option.capability);
+                const replace = (targets) => {
+                    onChange(grants.map((current) => current.capability === option.capability
+                        ? { ...current, targets }
+                        : current));
+                };
+                return (_jsxs("div", { className: "grid gap-xs", children: [_jsx(Field, { label: option.label, orientation: "inline", children: _jsx(Checkbox, { name: "cap:" + option.capability, checked: grant !== undefined, onChange: (event) => {
+                                    onChange(event.currentTarget.checked
+                                        ? [
+                                            ...grants,
+                                            {
+                                                capability: option.capability,
+                                                targets: { kind: "all" },
+                                            },
+                                        ]
+                                        : grants.filter((current) => current.capability !== option.capability));
+                                } }) }), grant !== undefined && option.targets !== undefined ? (_jsxs("div", { className: "grid gap-xs pl-md", children: [_jsx(Field, { label: "All current and future targets", orientation: "inline", children: _jsx(Checkbox, { name: "all:" + option.capability, checked: grant.targets.kind === "all", onChange: (event) => {
+                                            replace(event.currentTarget.checked
+                                                ? { kind: "all" }
+                                                : { kind: "selected", ids: [] });
+                                        } }) }), grant.targets.kind === "selected" ? (_jsxs(_Fragment, { children: [option.targets.length === 0 ? (_jsx("p", { children: "No targets available." })) : null, option.targets.map((target) => (_jsx(Field, { label: target.name, orientation: "inline", children: _jsx(Checkbox, { name: option.capability + ":" + target.id, checked: grant.targets.kind === "selected" &&
+                                                    grant.targets.ids.includes(target.id), onChange: (event) => {
+                                                    const ids = grant.targets.kind === "selected"
+                                                        ? grant.targets.ids
+                                                        : [];
+                                                    replace({
+                                                        kind: "selected",
+                                                        ids: event.currentTarget.checked
+                                                            ? [...ids, target.id]
+                                                            : ids.filter((id) => id !== target.id),
+                                                    });
+                                                } }) }, target.id))), grant.targets.ids
+                                            .filter((id) => !option.targets?.some((target) => target.id === id))
+                                            .map((id) => (_jsxs("p", { children: ["Unavailable target: ", id] }, id)))] })) : null] })) : null] }, option.capability));
+            }), grants
+                .filter((grant) => !options.some((option) => option.capability === grant.capability))
+                .map((grant) => (_jsxs("div", { children: [_jsxs("p", { children: [grant.capability, " is no longer offered by this host."] }), _jsxs(Button, { type: "button", onClick: () => {
+                            onChange(grants.filter((current) => current !== grant));
+                        }, children: ["Remove ", grant.capability] })] }, grant.capability)))] }));
+}
+function GrantDraft({ port, options, initial, disabled = false, children, }) {
+    const [grants, setGrants] = useState(initial);
+    const [review, setReview] = useState(null);
+    const Preview = port.Preview;
+    const valid = grants.length > 0 &&
+        grants.every((grant) => options.some((option) => option.capability === grant.capability)) &&
+        !grants.some((grant) => grant.targets.kind === "selected" && grant.targets.ids.length === 0);
+    const ready = valid &&
+        (Preview === undefined || (review?.grants === grants && review.ready));
+    return (_jsxs(_Fragment, { children: [_jsx(GrantEditor, { grants: grants, onChange: setGrants, options: options, disabled: disabled }), Preview ? (_jsx(Preview, { grants: grants, onReady: (ready) => {
+                    setReview((current) => current?.grants === grants && current.ready === ready
+                        ? current
+                        : { grants, ready });
+                } })) : null, children(grants, ready)] }));
+}
+function IssueKey({ port, options, onIssue, }) {
+    const [busy, setBusy] = useState(false);
+    return (_jsx(GrantDraft, { port: port, options: options, initial: [], disabled: busy, children: (grants, ready) => (_jsx(IssueForm, { port: port, grants: grants, ready: ready, onIssue: async (draft) => {
+                setBusy(true);
+                try {
+                    await onIssue(draft);
+                }
+                finally {
+                    setBusy(false);
+                }
+            } })) }));
+}
+function IssueForm({ port, grants, ready, onIssue, }) {
+    const [custom, setCustom] = useState("");
+    const expiryValues = port.expiry === "required"
+        ? ["30", "90", "365", "custom"]
+        : ["30", "90", "365", "custom", "never"];
+    const expiry = z.enum(expiryValues);
+    const finiteExpiryOptions = {
+        "30": "30 days",
+        "90": "90 days",
+        "365": "1 year",
+        custom: "Custom date",
+    };
+    const schema = z.object({
+        name: z
+            .string()
+            .trim()
+            .min(1, "Give this key a name.")
+            .max(128)
+            .meta(field({ label: "Name", required: true, maxLength: 128 })),
+        expiry: expiry.meta(field({
+            label: "Expires after",
+            options: port.expiry === "optional"
+                ? { ...finiteExpiryOptions, never: "Never" }
+                : finiteExpiryOptions,
+        })),
+    });
     const model = useSchemaForm({
-        schema: issueFormFields,
-        defaultValues: issueFormDefaults,
+        schema,
+        defaultValues: {
+            name: "",
+            expiry: port.expiry === "required" ? "30" : "never",
+        },
         onSubmit: async (value) => {
-            if (!hasAccess)
+            if (!ready)
                 return {
                     kind: "refused",
-                    error: "Choose at least one App before issuing a key.",
+                    error: "Choose grants and finish their review before issuing.",
                 };
-            const grants = allApps
-                ? [{ level: allAppsLevel, target: { kind: "all" } }]
-                : ["write", "read"].flatMap((level) => {
-                    const installationIds = Object.entries(perApp)
-                        .filter(([, choice]) => choice === level)
-                        .map(([installationId]) => installationId);
-                    return installationIds.length === 0
-                        ? []
-                        : [
-                            {
-                                level,
-                                target: { kind: "selected", installationIds },
-                            },
-                        ];
-                });
+            const expiresAt = value.expiry === "never"
+                ? undefined
+                : value.expiry === "custom"
+                    ? new Date(custom).getTime()
+                    : Date.now() + Number(value.expiry) * 86_400_000;
+            if (expiresAt !== undefined &&
+                (!Number.isSafeInteger(expiresAt) || expiresAt <= Date.now()))
+                return { kind: "refused", error: "Choose a finite future expiry." };
             try {
-                await onIssue({
-                    name: value.name,
-                    grants,
-                    computerAccess,
-                    expiresAt: value.expiry === "never"
-                        ? null
-                        : Date.now() + Number(value.expiry) * 24 * 60 * 60 * 1000,
-                });
+                const draft = { name: value.name, grants };
+                await onIssue(expiresAt === undefined ? draft : { ...draft, expiresAt });
                 return { kind: "saved" };
             }
             catch (cause) {
@@ -184,18 +234,11 @@ function IssueKey({ apps, onIssue, }) {
             }
         },
     });
-    const { submitting: issuing } = useSchemaFormStatus(model);
-    return (_jsxs(SchemaForm, { model: model, "aria-label": "Issue a key", disabled: issuing, footer: _jsx(FormFooter, { error: model.error, children: _jsx(Button, { type: "submit", disabled: !hasAccess || issuing, children: issuing ? "Issuing…" : "Issue key" }) }), children: [_jsx(FormFields, { model: model, disabled: issuing }), _jsx(Field, { label: "All Apps, including future installs", orientation: "inline", children: _jsx(Checkbox, { name: "allApps", checked: allApps, disabled: issuing, onChange: (event) => {
-                        setAllApps(event.currentTarget.checked);
-                    } }) }), allApps ? (_jsx(Field, { label: "Access level for all Apps", orientation: "horizontal", children: _jsxs(Select, { name: "allAppsLevel", disabled: issuing, value: allAppsLevel, onChange: (event) => {
-                        setAllAppsLevel(keyAppAccessLevelSchema.parse(event.currentTarget.value));
-                    }, children: [_jsx("option", { value: "read", children: "Read" }), _jsx("option", { value: "write", children: "Read and change" })] }) })) : apps.length === 0 ? (_jsx("p", { children: "No Apps installed yet." })) : (apps.map((app) => (_jsx(Field, { label: app.displayName, orientation: "horizontal", children: _jsxs(Select, { name: `app:${app.installationId}`, disabled: issuing, value: perApp[app.installationId] ?? "none", onChange: (event) => {
-                        const choice = perAppChoiceSchema.parse(event.currentTarget.value);
-                        setPerApp((current) => ({
-                            ...current,
-                            [app.installationId]: choice,
-                        }));
-                    }, children: [_jsx("option", { value: "none", children: "No access" }), _jsx("option", { value: "read", children: "Read" }), _jsx("option", { value: "write", children: "Read and change" })] }) }, app.installationId)))), _jsx(Field, { label: "Computer access", description: "Off by default. On lets this key run commands on this Oyster\u2019s Computer.", orientation: "inline", children: _jsx(Checkbox, { name: "computerAccess", checked: computerAccess, disabled: issuing, onChange: (event) => {
-                        setComputerAccess(event.currentTarget.checked);
+    const { submitting } = useSchemaFormStatus(model);
+    return (_jsxs(SchemaForm, { model: model, "aria-label": "Issue a key", footer: _jsx(FormFooter, { error: model.error, children: _jsx(Button, { type: "submit", disabled: !ready || submitting, children: "Issue key" }) }), children: [_jsx(FormFields, { model: model }), _jsx(Field, { label: "Custom expiry", children: _jsx(Input, { type: "datetime-local", name: "customExpiry", value: custom, disabled: submitting, onChange: (event) => {
+                        setCustom(event.currentTarget.value);
                     } }) })] }));
 }
+function EditKey({ record, port, options, disabled, onSave, onCancel, }) {
+    return (_jsxs("section", { "aria-label": "Edit " + record.name, className: "grid gap-sm", children: [_jsxs(SectionHeading, { children: ["Edit ", record.name] }), _jsx(GrantDraft, { port: port, options: options, initial: record.grants, disabled: disabled, children: (grants, ready) => (_jsxs("div", { className: "flex gap-sm", children: [_jsx(Button, { disabled: disabled || !ready, onClick: () => void onSave(grants), children: "Save grants" }), _jsx(Button, { disabled: disabled, onClick: onCancel, children: "Cancel" })] })) })] }));
+}

package/dist/OysterComputers.d.ts

@@ -0,0 +1,22 @@
+import { teamComputerDirectorySchema, type TeamComputer } from "@fungi.computer/nacre/workbench";
+import * as z from "zod";
+/** One owner-fleet page returned by the public Computer controls port. */
+export type ComputerPage = z.output<typeof teamComputerDirectorySchema>;
+/** Owner controls over the existing standalone fleet, not a second inventory. */
+export type OysterComputersPort = Readonly<{
+    list(offset: number): Promise<ComputerPage>;
+    selected(): Promise<string | null>;
+    create(name: string | undefined, requestId: string): Promise<TeamComputer>;
+    start(computerId: string): Promise<void>;
+    select(computerId: string): Promise<TeamComputer>;
+    internetAccess(computerId: string): Promise<boolean>;
+    setInternetAccess(computerId: string, enabled: boolean): Promise<boolean>;
+}>;
+/** Bind owner-admitted fleet controls to this trusted shell's host origin. */
+export declare function createOysterComputersPort(origin: URL): OysterComputersPort;
+/** Owner Settings over the host's existing inventory and default selection. */
+export declare function OysterComputers({ teamId, port, onChanged, }: {
+    teamId: string;
+    port: OysterComputersPort;
+    onChanged: () => void;
+}): import("react/jsx-runtime").JSX.Element;

package/dist/OysterComputers.js

@@ -0,0 +1,177 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { AppError } from "@fungi.computer/agar";
+import { optimisticMutation } from "@fungi.computer/agar/query";
+import { SectionHeading } from "@fungi.computer/caps/blocks/section-heading";
+import { ActionRow } from "@fungi.computer/caps/components/action-row";
+import { Button } from "@fungi.computer/caps/components/button";
+import { DataList, DataRow } from "@fungi.computer/caps/components/data-list";
+import { Input } from "@fungi.computer/caps/components/input";
+import { Switch } from "@fungi.computer/caps/components/switch";
+import { teamComputerDirectorySchema, teamComputerSchema, } from "@fungi.computer/nacre/workbench";
+import { workbenchDirectorySchema } from "@fungi.computer/nacre/workbench-directory";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { useRef, useState } from "react";
+import * as z from "zod";
+import { requestIds } from "./team-directory.js";
+import { tourtoisQueryKeys } from "./queries.js";
+const internetAccessSchema = z.strictObject({ enabled: z.boolean() });
+async function request(url, init) {
+    const response = await fetch(url, {
+        ...init,
+        headers: { Accept: "application/json", "Content-Type": "application/json" },
+        credentials: "same-origin",
+        cache: "no-store",
+        redirect: "error",
+    });
+    if (!response.ok)
+        throw new AppError(`Computer request refused (${String(response.status)}).`, {
+            code: response.status === 401 || response.status === 403
+                ? "CAPABILITY_DENIED"
+                : "HOST_FAILURE",
+            retryable: response.status >= 500,
+        });
+    return response;
+}
+/** Bind owner-admitted fleet controls to this trusted shell's host origin. */
+export function createOysterComputersPort(origin) {
+    const read = (path, init) => request(new URL(path, origin), init);
+    return {
+        list: async (offset) => {
+            const response = await read(`/api/computers?${new URLSearchParams({ limit: "100", offset: String(offset) })}`);
+            return teamComputerDirectorySchema.parse(await response.json());
+        },
+        selected: async () => {
+            const response = await read("/api/workbench/directory");
+            return (workbenchDirectorySchema.parse(await response.json()).computer
+                ?.computerId ?? null);
+        },
+        create: async (name, requestId) => {
+            const response = await read("/api/computers", {
+                method: "POST",
+                body: JSON.stringify(name === undefined ? { requestId } : { requestId, name }),
+            });
+            return teamComputerSchema.parse(await response.json());
+        },
+        start: async (computerId) => {
+            // Success acknowledges this start, not a durable or polled health state.
+            const response = await read(`/api/computers/${encodeURIComponent(computerId)}/start`, {
+                method: "POST",
+            });
+            await response.json();
+        },
+        select: async (computerId) => {
+            const response = await read("/api/computers/selected", {
+                method: "PUT",
+                body: JSON.stringify({ computerId }),
+            });
+            return teamComputerSchema.parse(await response.json());
+        },
+        internetAccess: async (computerId) => {
+            const response = await read(`/api/computers/${encodeURIComponent(computerId)}/internet-access`);
+            return internetAccessSchema.parse(await response.json()).enabled;
+        },
+        setInternetAccess: async (computerId, enabled) => {
+            const response = await read(`/api/computers/${encodeURIComponent(computerId)}/internet-access`, { method: "PUT", body: JSON.stringify({ enabled }) });
+            return internetAccessSchema.parse(await response.json()).enabled;
+        },
+    };
+}
+function InternetAccess({ teamId, computer, port, }) {
+    const queryKey = tourtoisQueryKeys.oysterInternetAccess(teamId, computer.computerId);
+    const current = useQuery({
+        queryKey,
+        queryFn: () => port.internetAccess(computer.computerId),
+    });
+    const update = useMutation(optimisticMutation({
+        queryKey,
+        apply: (_previous, enabled) => enabled,
+        mutationFn: (enabled) => port.setInternetAccess(computer.computerId, enabled),
+    }));
+    return (_jsxs("div", { className: "grid gap-sm", children: [_jsxs("label", { className: "flex gap-sm", children: ["Internet access", _jsx(Switch, { "aria-label": `Internet access for ${computer.name}`, checked: current.data ?? false, disabled: current.data === undefined || update.isPending, onCheckedChange: (enabled) => {
+                            update.mutate(enabled);
+                        } })] }), current.isPending ? (_jsx("p", { role: "status", children: "Checking Internet access\u2026" })) : null, current.isError ? (_jsxs("div", { role: "alert", children: [_jsxs("p", { children: ["Could not check Internet access for ", computer.name, "."] }), _jsx(Button, { onClick: () => {
+                            void current.refetch();
+                        }, children: "Retry Internet access" })] })) : null, update.isError ? (_jsxs("p", { role: "alert", children: ["Could not save Internet access for ", computer.name, "."] })) : null] }));
+}
+/** Owner Settings over the host's existing inventory and default selection. */
+export function OysterComputers({ teamId, port, onChanged, }) {
+    const client = useQueryClient();
+    const [offset, setOffset] = useState(0);
+    const [name, setName] = useState("");
+    const intent = useRef(null);
+    const inventoryKey = tourtoisQueryKeys.oysterComputers(teamId);
+    const selectionKey = tourtoisQueryKeys.oysterSelectedComputer(teamId);
+    const inventory = useQuery({
+        queryKey: tourtoisQueryKeys.oysterComputerPage(teamId, offset),
+        queryFn: () => port.list(offset),
+    });
+    const selected = useQuery({
+        queryKey: selectionKey,
+        queryFn: () => port.selected(),
+    });
+    const action = useMutation({
+        mutationFn: async (input) => {
+            switch (input.kind) {
+                case "create":
+                    await port.create(input.name, input.requestId);
+                    return;
+                case "start":
+                    await port.start(input.computerId);
+                    return;
+                case "select":
+                    await port.select(input.computerId);
+            }
+        },
+        onSuccess: async (_result, input) => {
+            if (input.kind === "create") {
+                intent.current = null;
+                setName("");
+                setOffset(0);
+            }
+            await Promise.all([
+                client.invalidateQueries({ queryKey: inventoryKey }),
+                client.invalidateQueries({ queryKey: selectionKey }),
+            ]);
+            onChanged();
+        },
+    });
+    const unavailable = inventory.isError ||
+        selected.isError ||
+        inventory.isFetching ||
+        selected.isFetching ||
+        action.isPending;
+    return (_jsxs("section", { className: "grid gap-sm", "aria-label": "Computers", children: [_jsx(SectionHeading, { children: "Computers" }), _jsx("p", { children: "Choose the default Computer used for new App configurations." }), inventory.isPending ? _jsx("p", { role: "status", children: "Loading Computers\u2026" }) : null, inventory.isError || selected.isError ? (_jsxs("div", { role: "alert", children: [_jsx("p", { children: "Computer inventory or selection could not be loaded." }), _jsx(Button, { onClick: () => {
+                            void inventory.refetch();
+                            void selected.refetch();
+                        }, children: "Retry" })] })) : null, inventory.isSuccess && inventory.data.computers.length === 0 ? (_jsx("p", { children: "No Computers on this page." })) : null, inventory.data !== undefined ? (_jsx(DataList, { "aria-label": "Computer inventory", children: inventory.data.computers.map((computer) => (_jsxs(DataRow, { className: "p-0", children: [_jsx(ActionRow, { label: computer.name, description: selected.isSuccess && selected.data === computer.computerId
+                                ? "Default for new Apps"
+                                : computer.computerId, trailing: _jsxs("div", { className: "flex gap-sm", children: [_jsx(Button, { "aria-label": `Start ${computer.name}`, disabled: unavailable, onClick: () => {
+                                            action.mutate({
+                                                kind: "start",
+                                                computerId: computer.computerId,
+                                            });
+                                        }, children: "Start" }), _jsx(Button, { "aria-label": `Use ${computer.name} for new Apps`, disabled: unavailable || selected.data === computer.computerId, onClick: () => {
+                                            action.mutate({
+                                                kind: "select",
+                                                computerId: computer.computerId,
+                                            });
+                                        }, children: "Use for new Apps" })] }) }), _jsx(InternetAccess, { teamId: teamId, computer: computer, port: port })] }, computer.computerId))) })) : null, _jsxs("div", { className: "flex gap-sm", "aria-label": "Computer pages", children: [_jsx(Button, { disabled: unavailable || offset === 0, onClick: () => {
+                            setOffset(Math.max(0, offset - 100));
+                        }, children: "Previous" }), _jsx(Button, { disabled: unavailable || inventory.data?.nextOffset == null, onClick: () => {
+                            const next = inventory.data?.nextOffset;
+                            if (next != null)
+                                setOffset(next);
+                        }, children: "Next" })] }), _jsxs("form", { className: "grid gap-sm", "aria-label": "Create Computer", onSubmit: (event) => {
+                    event.preventDefault();
+                    const requestedName = name === "" ? undefined : name;
+                    if (intent.current === null || intent.current.name !== requestedName)
+                        intent.current = {
+                            kind: "create",
+                            name: requestedName,
+                            requestId: requestIds.request.generate(),
+                        };
+                    action.mutate(intent.current);
+                }, children: [_jsxs("label", { children: ["Computer name (optional)", _jsx(Input, { name: "computerName", maxLength: 256, value: name, disabled: unavailable, placeholder: "Leave blank for a generated name", onChange: (event) => {
+                                    setName(event.currentTarget.value);
+                                } })] }), _jsx(Button, { type: "submit", disabled: unavailable, children: "Create Computer" })] }), action.isError ? _jsx("p", { role: "alert", children: action.error.message }) : null, action.isSuccess ? (_jsx("p", { role: "status", children: "Computer request completed." })) : null] }));
+}

package/dist/SettingsNavigation.d.ts

@@ -1,4 +1,4 @@
-import { type AppAddress } from "@fungi.computer/oyster/shell/app-directory";
+import { type AppAddress } from "@fungi.computer/nacre/app-directory";
 import type { SettingsLocation } from "./settings-routes.js";
 export type NavigationApp = Readonly<{
     address: AppAddress;

package/dist/SettingsNavigation.js

@@ -2,7 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { Button } from "@fungi.computer/caps/components/button";
 import { Select } from "@fungi.computer/caps/components/select";
 import { AppIcon } from "./app-icon.js";
-import { addressKey, } from "@fungi.computer/oyster/shell/app-directory";
+import { addressKey, } from "@fungi.computer/nacre/app-directory";
 import { OwnSprite } from "./member-avatar.js";
 export function SettingsNavigation({ location, apps, sections, desktopOnly = false, onNavigate, }) {
     const groups = navigationGroups(apps, sections, desktopOnly);