@jini-ai/admin 0.6.15-rc.1 → 0.6.15

package/dist/media/react/hooks/LibraryTab.hooks.js

@@ -7,6 +7,7 @@ import { settleFromCache, useSharedMediaLibrary } from './MediaPage.hooks.js';
 import { useMediaPorts } from './MediaPorts.hooks.js';
 import { mediaMessagesEn } from '../../messages.en.js';
 import { canRestoreMedia } from '../../rules.js';
+import { omitKeys } from '../../../core/omit-keys.js';
 const EMPTY_LABELS = {
     images: 'No images yet. Upload an image to see it here.',
     videos: 'No videos yet. Upload a video to see it here.',
@@ -52,7 +53,7 @@ function purgeDialogView({ snapshot }, _optional = {}) {
 function queryHandlers({ controller }, _optional = {}) {
     return {
         onStatus: ({ value }) => {
-            const { status: _status, ...query } = controller?.getSnapshot().query ?? {};
+            const query = omitKeys(controller?.getSnapshot().query ?? {}, ['status']);
             void controller?.setQuery({ query: { ...query, ...(value === 'active' || value === 'trashed' ? { status: value } : {}) } });
         },
         onSearch: ({ value: search }) => {
@@ -183,7 +184,7 @@ export function useLibraryTab({ params, permissions = [] }, _optional = {}) {
             const item = controller?.getSnapshot().pendingPurge;
             // The controller refuses to purge without a pending item, so there is nothing to announce.
             if (!can.canPurge || !controller || !item)
-                return;
+                return undefined;
             const index = items.findIndex(row => row.id === item.id);
             return controller.confirmPurge({ confirmed: true }).then(saved => {
                 if (saved) {

package/dist/media/react/hooks/ProvidersTab.hooks.js

@@ -34,8 +34,10 @@ async function saveProviderSettings({ port, item, entry, signal }, _optional = {
     await port.saveSettings({ id: item.id, ...next }, { signal });
 }
 async function saveProvider({ port, item, signal }, { entry } = {}) {
-    if (!entry)
-        return removeIfStored({ port, item, signal });
+    if (!entry) {
+        await removeIfStored({ port, item, signal });
+        return;
+    }
     await saveProviderSettings({ port, item, entry, signal });
     if (entry.apiKey?.trim())
         await port.saveCredential({ id: item.id, credential: entry.apiKey }, { signal });
@@ -57,17 +59,21 @@ async function saveSequentially({ port, providers, lastRead, signal }, _optional
 function rowStatus({ entry, pending }, _optional = {}) {
     const saved = isMarkerOnlyEntry(entry);
     const mask = saved ? maskedKeyLabel(entry) : null;
+    const unsavedLabel = pending ? 'Unsaved' : null;
     return {
         mask,
-        statusLabel: saved ? `Saved (${mask})` : pending ? 'Unsaved' : null,
+        statusLabel: saved ? `Saved (${mask})` : unsavedLabel,
         statusClassName: saved ? 'jini-field-status-badge jini-field-status-badge-success' : 'jini-field-status-badge',
     };
 }
+/** Names the provider default an empty endpoint falls back to, when it has one. */
+function defaultBaseUrlHint({ entry, item }) {
+    return !entry.baseUrl?.trim() && item.defaultBaseUrl ? `Uses ${item.defaultBaseUrl} by default.` : null;
+}
 function baseUrlHint({ entry, item }, _optional = {}) {
     const invalid = isProviderBaseUrlInvalid(entry);
     return {
-        invalid, hint: invalid ? 'Enter an absolute http:// or https:// URL that is not a private or internal address.'
-            : !entry.baseUrl?.trim() && item.defaultBaseUrl ? `Uses ${item.defaultBaseUrl} by default.` : null,
+        invalid, hint: invalid ? 'Enter an absolute http:// or https:// URL that is not a private or internal address.' : defaultBaseUrlHint({ entry, item }),
         hintClassName: invalid ? 'jini-field-hint jini-hint-error' : 'jini-field-hint',
         hintRole: invalid ? 'alert' : undefined,
         ariaInvalid: invalid || undefined,
@@ -177,10 +183,14 @@ export function useProvidersTab(_required = {}, _optional = {}) {
     const catalog = mediaProviders?.catalog ?? discoveredCatalog;
     const pinnedIds = mediaProviders?.pinnedProviderIds ?? [];
     const ordered = sortProvidersByConfigured(catalog, editor.providers, pinnedIds);
-    const toggleKey = (id) => setVisibleKeys(current => { const next = new Set(current); if (next.has(id))
-        next.delete(id);
-    else
-        next.add(id); return next; });
+    const toggleKey = (id) => setVisibleKeys(current => {
+        const next = new Set(current);
+        if (next.has(id))
+            next.delete(id);
+        else
+            next.add(id);
+        return next;
+    });
     const rows = ordered.map((item, index) => providerRow({ item, entry: editor.providers[item.id] ?? {}, editor, visible: visibleKeys.has(item.id), toggle: () => toggleKey(item.id) }, { divider: index > 0 && !pinnedIds.includes(item.id) && pinnedIds.includes(ordered[index - 1].id), disabled: !mediaProviders }));
     return { rows, ...editorView({ editor, port: mediaProviders }) };
 }

package/dist/media/rules.js

@@ -1,3 +1,4 @@
+import { trimChars } from '@jini-ai/core/text';
 /** Falls back to "all" for an absent or unrecognized ?tab= value — don't trust a raw
  * query value: a stale link or a typo must not blank the panel. */
 export function resolveActiveTab({ tabId }, _optional = {}) {
@@ -138,11 +139,13 @@ export function mediaEmbedSnippet({ slug }, _optional = {}) {
 export function mediaRowHandles({ media }, _optional = {}) {
     const used = new Set();
     return media.map((item, index) => {
-        const slug = item.id.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
+        const slug = trimChars({ text: item.id.toLowerCase().replace(/[^a-z0-9]+/g, '-'), chars: '-' });
         const preferred = `media-item-${slug || index + 1}`;
         let handle = preferred, suffix = 2;
-        while (used.has(handle))
-            handle = `${preferred}-${suffix++}`;
+        while (used.has(handle)) {
+            handle = `${preferred}-${suffix}`;
+            suffix += 1;
+        }
         used.add(handle);
         return handle;
     });

package/dist/playground/adapters/memory.js

@@ -18,13 +18,32 @@ export function createMemoryPlaygroundTargets(_required, { onListenerError } = {
     }
     return {
         getSnapshot: (_required = {}, _optional = {}) => snapshot,
-        subscribe({ listener }, _optional = {}) { if (!disposed)
-            listeners.add(listener); return () => listeners.delete(listener); },
-        register({ target }, _optional = {}) { if (disposed)
-            throw new Error('Playground target scope disposed'); const ticket = {}; owner = ticket; publish(target); return { release(_required = {}, _optional = {}) { if (owner !== ticket)
-                return; owner = null; publish(null); } }; },
-        dispose(_required = {}, _optional = {}) { if (disposed)
-            return; disposed = true; owner = null; publish(null); listeners.clear(); },
+        subscribe({ listener }, _optional = {}) {
+            if (!disposed)
+                listeners.add(listener);
+            return () => listeners.delete(listener);
+        },
+        register({ target }, _optional = {}) {
+            if (disposed)
+                throw new Error('Playground target scope disposed');
+            const ticket = {};
+            owner = ticket;
+            publish(target);
+            return { release(_required = {}, _optional = {}) {
+                    if (owner !== ticket)
+                        return;
+                    owner = null;
+                    publish(null);
+                } };
+        },
+        dispose(_required = {}, _optional = {}) {
+            if (disposed)
+                return;
+            disposed = true;
+            owner = null;
+            publish(null);
+            listeners.clear();
+        },
     };
 }
 //# sourceMappingURL=memory.js.map

package/dist/playground/conformance/playground-api.conformance.js

@@ -1,11 +1,14 @@
 /** Run with an isolated bus; this temporarily registers and releases test targets. */
 export function runPlaygroundApiConformance({ targets }, _optional = {}) {
     const checks = [];
-    const assert = (ok, name) => { if (!ok)
-        throw new Error(`Playground conformance: ${name}`); checks.push(name); };
+    const assert = (ok, name) => {
+        if (!ok)
+            throw new Error(`Playground conformance: ${name}`);
+        checks.push(name);
+    };
     const a = {}, b = {};
     let count = 0;
-    const stop = targets.subscribe({ listener: () => count++ });
+    const stop = targets.subscribe({ listener: () => { count += 1; } });
     const first = targets.register({ target: a });
     let second;
     try {

package/dist/playground/react/hooks/PlaygroundPorts.hooks.js

@@ -1,6 +1,10 @@
 import { createContext, useContext } from 'react';
 import { AdminConfigError } from '../../../core/module/index.js';
 export const PlaygroundPortsContext = createContext(null);
-export function usePlaygroundPorts(_required = {}, _optional = {}) { const ports = useContext(PlaygroundPortsContext); if (!ports)
-    throw new AdminConfigError({ issues: ['React scope unavailable: playground'] }); return ports; }
+export function usePlaygroundPorts(_required = {}, _optional = {}) {
+    const ports = useContext(PlaygroundPortsContext);
+    if (!ports)
+        throw new AdminConfigError({ issues: ['React scope unavailable: playground'] });
+    return ports;
+}
 //# sourceMappingURL=PlaygroundPorts.hooks.js.map

package/dist/react/components/ConfirmButton/ConfirmButton.hooks.js

@@ -22,7 +22,7 @@ export function useConfirmButton({ onConfirm, document }, { pending, disabled }
     // standing per-row document listener.
     useEffect(() => {
         if (!confirming)
-            return;
+            return undefined;
         function disarm() {
             setConfirming(false);
         }

package/dist/react/components/ConfirmButton/ConfirmButton.js

@@ -29,11 +29,8 @@ const DEFAULT_PENDING_LABEL = '…';
  */
 export function ConfirmButton({ useConfirmButton: useConfirmButtonState = useConfirmButton, ...props }) {
     const { confirming, buttonRef, handleClick, handleBlur } = useConfirmButtonState({ onConfirm: props.onConfirm, document }, { pending: props.pending, disabled: props.disabled });
-    const label = props.pending
-        ? (props.pendingLabel ?? DEFAULT_PENDING_LABEL)
-        : confirming
-            ? props.confirmLabel
-            : props.label;
+    const idleLabel = confirming ? props.confirmLabel : props.label;
+    const label = props.pending ? (props.pendingLabel ?? DEFAULT_PENDING_LABEL) : idleLabel;
     const className = [props.className, props.destructive ? 'btn-danger' : null].filter(Boolean).join(' ') || undefined;
     return (_jsxs(_Fragment, { children: [_jsx("button", { ref: buttonRef, type: "button", className: className, "data-armed": confirming ? 'true' : undefined, disabled: props.disabled || props.pending, onClick: handleClick, onBlur: handleBlur, "aria-label": props.ariaLabel, children: label }), _jsx("span", { className: "visually-hidden", role: "status", "aria-live": "polite", children: confirming ? `Press "${props.confirmLabel}" to confirm, or press Escape to cancel.` : '' })] }));
 }

package/dist/react/components/ConfirmDialog/confirm-dialog-attrs.js

@@ -1,4 +1,5 @@
 import { agentHandle } from '@jini-ai/agentic';
+import { omitKeys } from '../../../core/omit-keys.js';
 /**
  * The agent-attribute port `ConfirmDialog` hands UI-kit's confirm controller. UI-kit names selects
  * separately; agentic publishes them as fields and still owns handle validation. Absent role/label
@@ -18,7 +19,6 @@ export const confirmDialogAgentAttrs = (required, optional = {}) => agentHandle(
  * @complexity O(k) in the number of attributes.
  */
 export function withoutAccessibleName({ attrs }, _optional = {}) {
-    const { 'aria-label': _accessibleName, ...rest } = attrs ?? {};
-    return rest;
+    return omitKeys(attrs ?? {}, ['aria-label']);
 }
 //# sourceMappingURL=confirm-dialog-attrs.js.map

package/dist/react/components/InteractiveHtmlEditor/InteractiveHtmlEditor.js

@@ -154,7 +154,9 @@ function parseEmbedConfig(raw) {
 }
 function galleryIdentityLabel(config) {
     const count = Array.isArray(config.images) ? config.images.length : 0;
-    return count === 0 ? 'no images set' : `${count} ${count === 1 ? 'image' : 'images'}`;
+    if (count === 0)
+        return 'no images set';
+    return count === 1 ? '1 image' : `${count} images`;
 }
 export function InteractiveHtmlEditor(props) {
     return (_jsx(HtmlEditor, { ...props, isProtectedElement: (el) => isProtectedEmbedElement({ el }), describeEmbedPlaceholder: (el) => describeEmbedPlaceholder({ el }) }));

package/dist/react/components/RowMenu/RowMenu.hooks.js

@@ -121,14 +121,10 @@ export function useRowMenu({ itemCount, window, document }) {
             openAt(0);
     }
     function onTriggerKeyDown(e) {
-        if (e.key === 'ArrowDown') {
-            e.preventDefault();
-            openAt(0);
-        }
-        else if (e.key === 'ArrowUp') {
-            e.preventDefault();
-            openAt(itemCount - 1);
-        }
+        if (e.key !== 'ArrowDown' && e.key !== 'ArrowUp')
+            return;
+        e.preventDefault();
+        openAt(e.key === 'ArrowDown' ? 0 : itemCount - 1);
     }
     function onMenuKeyDown(e) {
         switch (e.key) {

package/dist/react/components/Sidebar.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { Fragment, createContext, createElement, useContext, useEffect, useMemo, useRef, useState, } from 'react';
+import { createContext, createElement, useContext, useEffect, useMemo, useRef, useState, } from 'react';
 import { createPortal } from 'react-dom';
 import { DEFAULT_ADMIN_BASE, adminHref } from '../../core/routing/rules.js';
 import { useNavSections } from '../hooks/use-nav-sections.js';

package/dist/react/entities/EntityField.js

@@ -43,6 +43,7 @@ export function EntityField(props) {
         case 'integer':
         case 'real': return _jsx(NumberInput, { ...props });
         case 'text': return _jsx("input", { ...commonProps(props), value: typeof value === 'string' ? value : '', onChange: (e) => onChange({ value: blankToUndefined(e.target.value) }) });
+        default: return null;
     }
 }
 //# sourceMappingURL=EntityField.js.map

package/dist/react/entities/contribution.js

@@ -1,4 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
+import { trimCharsEnd } from '@jini-ai/core/text';
 import { EntityIndex } from './EntityIndex.js';
 import { EntityList } from './EntityList.js';
 import { EntityDetail } from './EntityDetail.js';
@@ -18,7 +19,7 @@ export function createEntityRoutes({ adminBase, panelId, navigate }) {
         throw new Error('Entity panelId must be one URL segment');
     if (!adminBase.startsWith('/') || adminBase.startsWith('//') || /[?#]/.test(adminBase))
         throw new Error('Entity adminBase must be an absolute pathname');
-    const base = adminBase.replace(/\/+$/, '');
+    const base = trimCharsEnd({ text: adminBase, chars: '/' });
     function routePath({ entity, id, view }) {
         const root = `/${panelId}`;
         if (entity === undefined)

package/dist/react/entities/types.js

@@ -1,6 +1,6 @@
 /** Stable source templates let host dictionaries translate copy before values are inserted. */
 export function entityText({ translate, key, values }) {
-    return translate({ key: key }).replace(/\{([\w]+)\}/g, (match, name) => Object.hasOwn(values, name) ? String(values[name]) : match);
+    return translate({ key: key }).replace(/\{(\w+)\}/g, (match, name) => Object.hasOwn(values, name) ? String(values[name]) : match);
 }
 /**
  * Adapts the host's object-arg {@link EntityTranslate} to the positional `(key) => string` form the

package/dist/react/overlays.js

@@ -4,6 +4,7 @@ import { createControllerStore } from '../core/module/controller-store.js';
 export function createOverlayController(_required = {}, _optional = {}) {
     const store = createControllerStore({ initial: { entries: [] } });
     let sequence = 0, cancelActive = null;
+    const nextSequence = () => { sequence += 1; return sequence; };
     return {
         getSnapshot: store.getSnapshot,
         subscribe: store.subscribe,
@@ -28,7 +29,7 @@ export function createOverlayController(_required = {}, _optional = {}) {
                 signal?.addEventListener('abort', cancel, { once: true });
                 store.set({
                     patch: {
-                        entries: [{ id: ++sequence, render: () => render({ resolve: finish, cancel }) }],
+                        entries: [{ id: nextSequence(), render: () => render({ resolve: finish, cancel }) }],
                     },
                 });
             });

package/dist/react/shell/AdminShell.hooks.js

@@ -14,7 +14,7 @@ export function useShellDrawer(args) {
     useEffect(() => setOpen(false), [args.routePath]);
     useEffect(() => {
         if (!open)
-            return;
+            return undefined;
         const onKeyDown = (event) => {
             if (event.key === 'Escape')
                 setOpen(false);

package/dist/react/shell/use-admin-shell-session.js

@@ -39,7 +39,8 @@ export function useAdminShellSession(args) {
             return;
         if (operation === 'logout')
             loggingOut.current = owner;
-        const request = ++generation.current;
+        generation.current += 1;
+        const request = generation.current;
         const isCurrent = () => active.current === owner && generation.current === request;
         setOwned({ context, port, state: { status: 'checking' } });
         // settleOperation never rejects, so the logout latch below always clears.

package/dist/react/shell/use-admin-theme.js

@@ -4,7 +4,9 @@ import { applyAdminTheme, resolveColorScheme } from '@jini-ai/ui/theme';
 export function useAdminTheme({ userId, workspace }, { theme, colorScheme, environment, preferenceStore, onColorSchemeChange } = {}) {
     const scope = JSON.stringify([userId, Object.entries(workspace).sort(([a], [b]) => a.localeCompare(b))]);
     const [saved, setSaved] = useState(null);
-    const [mediaRevision, setMediaRevision] = useState(0);
+    // Only the setter is used: bumping the revision re-renders, which re-reads the live media
+    // snapshot below; explicit choices never query the OS.
+    const [, setMediaRevision] = useState(0);
     const preference = colorScheme ?? (saved?.scope === scope ? saved.preference : 'system');
     useEffect(() => {
         if (!userId || !preferenceStore) {
@@ -16,25 +18,23 @@ export function useAdminTheme({ userId, workspace }, { theme, colorScheme, envir
     }, [userId, workspace, scope, preferenceStore]);
     useEffect(() => {
         if (!theme)
-            return;
+            return undefined;
         if (!environment)
             throw new TypeError('AdminShell theme requires a themeEnvironment port');
         return applyAdminTheme({ theme }, environment);
     }, [theme, environment]);
     useEffect(() => {
         if (!environment || preference !== 'system')
-            return;
+            return undefined;
         const media = environment.matchMedia('(prefers-color-scheme: dark)');
         const changed = () => setMediaRevision((revision) => revision + 1);
         media.addEventListener?.('change', changed);
         return () => media.removeEventListener?.('change', changed);
     }, [environment, preference]);
-    // A revision refreshes the live media snapshot; explicit choices never query the OS.
-    void mediaRevision;
     const resolved = environment ? resolveColorScheme({ preference }, { matchMedia: environment.matchMedia }) : 'light';
     useEffect(() => {
         if (!environment)
-            return;
+            return undefined;
         const previous = environment.target.getAttribute('data-color-scheme');
         environment.target.setAttribute('data-color-scheme', resolved);
         return () => {

package/dist/redirects/adapters/memory.js

@@ -15,15 +15,22 @@ export function createMemoryRedirectsApi({ redirects = [], hits = {} }, { valida
             throw new AdminApiError({ message: `redirect '${id}' was not found`, status: 404 }, { code: 'REDIRECT_NOT_FOUND' });
         return row;
     }
-    function create(input, source) {
-        // The core port documents reference-host rejection. A supplied validator owns alternate hosts.
-        if (validate)
-            validate(input);
-        else if (input.matchType === 'regex')
+    /** The core port documents reference-host rejection of a regex `matchType`. A supplied
+     *  validator owns alternate hosts and sees the whole candidate instead. */
+    function validateOrRejectRegex(candidate, matchType) {
+        if (validate) {
+            validate(candidate);
+            return;
+        }
+        if (matchType === 'regex')
             throw new AdminApiError({ message: 'regex match type is not supported', status: 400 }, { code: 'REDIRECT_VALIDATION_ERROR' });
+    }
+    function create(input, source) {
+        validateOrRejectRegex(input, input.matchType);
         let id;
         do {
-            id = `memory-redirect-${nextId++}`;
+            id = `memory-redirect-${nextId}`;
+            nextId += 1;
         } while (rows.has(id));
         const row = Object.freeze({ ...input, id, status: 'active', override: input.override ?? false,
             priority: input.priority ?? 0, source, sourceEntryId: null, fromPathAtCapture: null, toPathAtCapture: null,
@@ -34,20 +41,16 @@ export function createMemoryRedirectsApi({ redirects = [], hits = {} }, { valida
     }
     return {
         async listRedirects(_required, filter = {}) {
+            const matches = (wanted, actual) => wanted === undefined || actual === wanted;
             return Object.freeze([...rows.values()].filter(row => !trashed.has(row.id) &&
-                (filter.status === undefined || row.status === filter.status) &&
-                (filter.source === undefined || row.source === filter.source) &&
-                (filter.matchType === undefined || row.matchType === filter.matchType)));
+                matches(filter.status, row.status) && matches(filter.source, row.source) && matches(filter.matchType, row.matchType)));
         },
         async getRedirect({ id }) { return get(id); },
         async createRedirect(input, options = {}) { return create({ ...input, ...options }, 'manual'); },
         async updateRedirect({ id }, patch = {}) {
             const before = get(id);
             const next = { ...before, ...patch };
-            if (validate)
-                validate(next);
-            else if (patch.matchType === 'regex')
-                throw new AdminApiError({ message: 'regex match type is not supported', status: 400 }, { code: 'REDIRECT_VALIDATION_ERROR' });
+            validateOrRejectRegex(next, patch.matchType);
             const row = Object.freeze({ ...next, version: before.version + 1 });
             rows.set(id, row);
             if (patch.status === 'active')

package/dist/security/adapters/http.js

@@ -40,15 +40,14 @@ export function createHttpSecurityApi({ transport, workspacePath }, _optional =
 function mediaEntry({ entry }, { apiKey } = {}) {
     return { ...(entry.baseUrl !== undefined ? { baseUrl: entry.baseUrl } : {}), ...(entry.model !== undefined ? { model: entry.model } : {}), ...(apiKey !== undefined ? { apiKey } : {}) };
 }
+const MEDIA_PROVIDERS_PATH = '/media/providers';
 /** Replacing the ENTIRE map requires sibling settings unchanged. Blank apiKey preserves their stored keys. */
 function rebuildMedia(current, id, token) {
     const next = {};
-    for (const [key, entry] of Object.entries(current)) {
-        if (key !== id)
-            next[key] = mediaEntry({ entry });
-        else if (token !== undefined)
-            next[key] = mediaEntry({ entry }, { apiKey: token });
-    }
+    // The replaced entry is dropped when no token is given; every sibling is echoed unchanged.
+    const kept = Object.entries(current).filter(([key]) => key !== id || token !== undefined);
+    for (const [key, entry] of kept)
+        next[key] = mediaEntry({ entry }, key === id && token !== undefined ? { apiKey: token } : {});
     return next;
 }
 export function createHttpOtherCredentials({ transport, workspacePath }, { mediaLabels = {} } = {}) {
@@ -62,7 +61,7 @@ export function createHttpOtherCredentials({ transport, workspacePath }, { media
                 return r.data.isSet ? [{ store, id: store, label: singles[store].label, category: 'ai', configured: true, supportsReplace: true, updatedAt: r.data.updatedAt }] : [];
             }
             if (store === 'media-provider') {
-                const map = await request('/media/providers', 'GET', options);
+                const map = await request(MEDIA_PROVIDERS_PATH, 'GET', options);
                 return Object.entries(map).filter(([, entry]) => entry.apiKeyConfigured).map(([id]) => ({ store, id, label: mediaLabels[id] ?? id, category: 'media', configured: true, supportsReplace: true }));
             }
             const { servers } = await request('/mcp-servers', 'GET', options);
@@ -74,16 +73,16 @@ export function createHttpOtherCredentials({ transport, workspacePath }, { media
             if (store === 'external-mcp')
                 throw new Error('Edit the full server configuration on its own screen');
             if (store === 'media-provider') {
-                const current = await request('/media/providers', 'GET', options);
-                await request('/media/providers', 'PUT', options, rebuildMedia(current, id, token));
+                const current = await request(MEDIA_PROVIDERS_PATH, 'GET', options);
+                await request(MEDIA_PROVIDERS_PATH, 'PUT', options, rebuildMedia(current, id, token));
             }
             else
                 await request(singles[store].path, 'PUT', options, { apiKey: token });
         },
         async remove({ store, id }, options = {}) {
             if (store === 'media-provider') {
-                const current = await request('/media/providers', 'GET', options);
-                await request('/media/providers', 'PUT', options, rebuildMedia(current, id));
+                const current = await request(MEDIA_PROVIDERS_PATH, 'GET', options);
+                await request(MEDIA_PROVIDERS_PATH, 'PUT', options, rebuildMedia(current, id));
             }
             else if (store === 'external-mcp')
                 await request(`/mcp-servers/${encodeURIComponent(id)}`, 'DELETE', options);

package/dist/security/adapters/memory.js

@@ -11,6 +11,7 @@ function customProjection({ patch }, { initial } = {}) {
 export function createMemorySecurityApi({ providers = [], rows = [] }, _optional = {}) {
     let items = rows.map(r => Object.freeze({ ...r }));
     let sequence = 0;
+    const nextSequence = () => { sequence += 1; return sequence; };
     function store(kind) {
         function isDefaultFor({ patch, providerId }, { initial } = {}) {
             if (kind === 'custom')
@@ -24,8 +25,11 @@ export function createMemorySecurityApi({ providers = [], rows = [] }, _optional
                 ...(kind === 'custom' ? customProjection({ patch }, { initial }) : {}),
             });
         }
-        function check(label, providerId, id) { if (items.some(r => r.kind === kind && r.id !== id && (kind === 'custom' || r.providerId === providerId) && r.label.toLowerCase() === label.toLowerCase()))
-            throw new Error('Duplicate label'); }
+        function check(label, providerId, id) {
+            const sameScope = (r) => r.kind === kind && r.id !== id && (kind === 'custom' || r.providerId === providerId);
+            if (items.some(r => sameScope(r) && r.label.toLowerCase() === label.toLowerCase()))
+                throw new Error('Duplicate label');
+        }
         function insert(row) {
             if (row.isDefault)
                 items = items.map(r => r.kind === kind && r.providerId === row.providerId ? Object.freeze({ ...r, isDefault: false }) : r);
@@ -34,10 +38,23 @@ export function createMemorySecurityApi({ providers = [], rows = [] }, _optional
         }
         return {
             async list(_r, o = {}) { o.signal?.throwIfAborted(); return Object.freeze(items.filter(r => r.kind === kind)); },
-            async create(input, o = {}) { o.signal?.throwIfAborted(); if (!Object.values(input.connection).some(v => v.trim()) || !input.label.trim())
-                throw new Error('Incomplete credential'); const providerId = kind === 'custom' ? '' : input.connection.providerId ?? ''; check(input.label, providerId); return insert(project({ id: `credential-${++sequence}`, patch: input, providerId, label: input.label })); },
-            async update({ id, patch }, o = {}) { o.signal?.throwIfAborted(); const old = items.find(r => r.id === id && r.kind === kind); if (!old)
-                throw new Error('Credential not found'); const label = patch.label ?? old.label; check(label, old.providerId, id); return insert(project({ id, patch, providerId: old.providerId, label }, { initial: old })); },
+            async create(input, o = {}) {
+                o.signal?.throwIfAborted();
+                if (!Object.values(input.connection).some(v => v.trim()) || !input.label.trim())
+                    throw new Error('Incomplete credential');
+                const providerId = kind === 'custom' ? '' : input.connection.providerId ?? '';
+                check(input.label, providerId);
+                return insert(project({ id: `credential-${nextSequence()}`, patch: input, providerId, label: input.label }));
+            },
+            async update({ id, patch }, o = {}) {
+                o.signal?.throwIfAborted();
+                const old = items.find(r => r.id === id && r.kind === kind);
+                if (!old)
+                    throw new Error('Credential not found');
+                const label = patch.label ?? old.label;
+                check(label, old.providerId, id);
+                return insert(project({ id, patch, providerId: old.providerId, label }, { initial: old }));
+            },
             async remove({ id }, o = {}) { o.signal?.throwIfAborted(); const old = items.find(r => r.id === id && r.kind === kind); items = items.filter(r => !(r.id === id && r.kind === kind)); if (old?.isDefault) {
                 const next = items.filter(r => r.kind === kind && r.providerId === old.providerId).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt))[0];
                 if (next)
@@ -51,8 +68,13 @@ export function createMemoryOtherCredentials({ rows = [] }, _optional = {}) {
     let items = rows.map(row => Object.freeze({ ...row }));
     return {
         async list({ store }, o = {}) { o.signal?.throwIfAborted(); return items.filter(r => r.store === store); },
-        async replace({ store, id, token }, o = {}) { o.signal?.throwIfAborted(); const row = items.find(r => r.store === store && r.id === id); if (!row?.supportsReplace || !token.trim())
-            throw new Error('Replacement unavailable'); items = items.map(r => r === row ? Object.freeze({ ...r, configured: true, updatedAt: new Date().toISOString() }) : r); },
+        async replace({ store, id, token }, o = {}) {
+            o.signal?.throwIfAborted();
+            const row = items.find(r => r.store === store && r.id === id);
+            if (!row?.supportsReplace || !token.trim())
+                throw new Error('Replacement unavailable');
+            items = items.map(r => r === row ? Object.freeze({ ...r, configured: true, updatedAt: new Date().toISOString() }) : r);
+        },
         async remove({ store, id }, o = {}) { o.signal?.throwIfAborted(); items = items.filter(r => r.store !== store || r.id !== id); },
     };
 }
@@ -61,14 +83,27 @@ export function createMemoryRootKey({ status = { active: false, source: 'none',
     function activate(outcome) { current = Object.freeze({ ...current, active: true, state: 'active', source: 'file', fingerprint: 'memory-fingerprint' }); return { outcome, fingerprint: 'memory-fingerprint', keyFilePath: current.keyFilePath, runtimeMode: current.runtimeMode }; }
     return {
         async status(_r, o = {}) { o.signal?.throwIfAborted(); return current; },
-        async generate(_r, o = {}) { o.signal?.throwIfAborted(); if (current.active)
-            return { ...activate('already-active') }; if (current.state !== 'missing')
-            throw new Error('Key dependent data'); return activate('created'); },
-        async importToken({ token }, o = {}) { o.signal?.throwIfAborted(); if (!/^[0-9a-f]{64}$/i.test(token))
-            throw new Error('Invalid token'); return { ...activate('unlocked'), resealed: 0 }; },
+        async generate(_r, o = {}) {
+            o.signal?.throwIfAborted();
+            if (current.active)
+                return { ...activate('already-active') };
+            if (current.state !== 'missing')
+                throw new Error('Key dependent data');
+            return activate('created');
+        },
+        async importToken({ token }, o = {}) {
+            o.signal?.throwIfAborted();
+            if (!/^[0-9a-f]{64}$/i.test(token))
+                throw new Error('Invalid token');
+            return { ...activate('unlocked'), resealed: 0 };
+        },
         async previewStartFresh(_r, o = {}) { o.signal?.throwIfAborted(); return preview; },
-        async startFresh({ confirm }, o = {}) { o.signal?.throwIfAborted(); if (confirm !== START_FRESH_CONFIRMATION)
-            throw new Error('Confirmation required'); return { ...activate('started-fresh'), discarded: preview.removes, kept: 0, affectedWebhooks: preview.affectedWebhooks, restorePointId: 'memory-restore-point' }; },
+        async startFresh({ confirm }, o = {}) {
+            o.signal?.throwIfAborted();
+            if (confirm !== START_FRESH_CONFIRMATION)
+                throw new Error('Confirmation required');
+            return { ...activate('started-fresh'), discarded: preview.removes, kept: 0, affectedWebhooks: preview.affectedWebhooks, restorePointId: 'memory-restore-point' };
+        },
     };
 }
 //# sourceMappingURL=memory.js.map

package/dist/security/conformance/security-api.conformance.js

@@ -3,9 +3,12 @@ import { credentialStore } from '../rules.js';
 export async function runSecurityApiConformance({ createApi, provider }, _optional = {}) {
     const api = await createApi({}), target = credentialStore({ api, kind: provider.kind });
     let passed = 0;
-    function check(value, message) { if (!value)
-        throw new Error(`Security contract: ${message}`); passed++; }
-    const suffix = `${Date.now()}-${Math.random()}`;
+    function check(value, message) {
+        if (!value)
+            throw new Error(`Security contract: ${message}`);
+        passed++;
+    }
+    const suffix = `${Date.now()}-${globalThis.crypto.randomUUID()}`;
     const secret = `contract-secret-${suffix}`;
     const connection = { providerId: provider.id, [provider.tokenField]: secret, ...Object.fromEntries(provider.fields.filter(f => f.name !== provider.tokenField).map(f => [f.name, 'test-value'])) };
     const ids = [];

package/dist/security/controllers/access-tokens.controller.js

@@ -12,7 +12,8 @@ export function createAccessTokensController({ api, permissions = [] }, _optiona
     async function load(_required, _optional = {}) {
         if (store.signal.aborted || !grants.has('security.read'))
             return;
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         store.set({ patch: { loading: true } });
         // Independent stores retain their own successful results; one unavailable store cannot hide the rest.
         const kinds = ['publish', 'source-control', 'custom'];
@@ -105,8 +106,11 @@ export function createAccessTokensController({ api, permissions = [] }, _optiona
             store.set({ patch: { draft: null, error: null } }); },
         filter({ query, category }, _optional = {}) { store.set({ patch: { ...(query !== undefined ? { query } : {}), ...(category ? { category } : {}) } }); },
         remove({ row }, _optional = {}) { return write({ row, remove: true }); },
-        makeDefault({ row }, _optional = {}) { if (row.kind === 'custom')
-            return Promise.resolve(false); return write({ row, remove: false }); },
+        makeDefault({ row }, _optional = {}) {
+            if (row.kind === 'custom')
+                return Promise.resolve(false);
+            return write({ row, remove: false });
+        },
         dispose(_required = {}, _optional = {}) { generation++; store.dispose(); },
     };
 }