@jini-ai/ui 0.1.2 → 0.3.0

package/dist/features/media-providers/rules.d.ts

@@ -0,0 +1,139 @@
+import type { MediaProviderCredentials, MediaProviderMap } from './types.js';
+/**
+ * Whether the entry carries real, re-sendable credential data.
+ *
+ * Markers (`apiKeyConfigured`/`apiKeyTail`) deliberately do NOT count — they
+ * prove a key exists somewhere without carrying anything that could be sent
+ * back. This is the predicate that decides whether a local edit is worth
+ * preserving over the server's copy.
+ */
+export declare function hasRecoverableFields(entry: MediaProviderCredentials | null | undefined): boolean;
+/**
+ * Whether the entry is configured AT ALL — real data OR a server marker.
+ *
+ * Broader than `hasRecoverableFields` on purpose: for "is this provider set
+ * up?" a server-held key the UI cannot see still counts as set up.
+ */
+export declare function isEntryPresent(entry: MediaProviderCredentials | null | undefined): boolean;
+/** Inverse of `isEntryPresent`, kept as its own name because call sites read
+ *  far better as "is empty" than as a negation. */
+export declare function isEntryEmpty(entry: MediaProviderCredentials | null | undefined): boolean;
+/**
+ * An entry that is configured but holds nothing usable — markers only.
+ *
+ * These are echoes of a server state that no longer exists. When the server
+ * reports no managed providers at all, every marker-only local entry is stale
+ * and must be dropped, or the UI keeps claiming a provider is configured after
+ * the server has forgotten it.
+ */
+export declare function isMarkerOnlyEntry(entry: MediaProviderCredentials | null | undefined): boolean;
+/** Whether any provider in the map is configured. */
+export declare function hasAnyConfiguredProvider(providers: MediaProviderMap | null | undefined): boolean;
+/**
+ * Merges the server's providers over the local ones.
+ *
+ * Three cases, in order:
+ *
+ * 1. **`daemonProviders == null`** — the server was never reached (as opposed
+ *    to reached and empty). Local state is returned untouched. Treating an
+ *    unreachable server as "the server has nothing" would wipe local edits on
+ *    a network blip, which is why `null` and `{}` must stay distinguishable.
+ * 2. **Server reached, manages nothing** — every marker-only local entry is a
+ *    stale echo and is dropped. Entries with real local data are KEPT: the
+ *    operator typed those and no server has claimed them yet.
+ * 3. **Server reached with providers** — each present server entry wins,
+ *    EXCEPT where the caller named that provider in `preserveLocalProviderIds`
+ *    AND the local entry has recoverable fields. That exception is what stops
+ *    a background refresh from overwriting a field being typed. The local
+ *    values are layered ON TOP of the server entry (`{...daemon, ...local}`)
+ *    rather than replacing it, so server-only markers survive alongside the
+ *    edit.
+ *
+ * Server entries that are not present are skipped entirely — an empty server
+ * record must not blank a configured local one.
+ *
+ * ## `dropProviderIds` — why a preserve list was not enough
+ *
+ * `preserveLocalProviderIds` can only preserve something that EXISTS locally:
+ * case 3 requires `hasRecoverableFields(localEntry)`, and a cleared provider
+ * has no local entry at all. So a provider the operator cleared, whose removal
+ * has not yet reached the server, was re-created here from the server's own
+ * still-present copy — a reload silently put a deleted credential back on
+ * screen. A deletion is not a weaker edit; it is an edit the preserve
+ * mechanism structurally cannot express, so it needs its own channel.
+ * `dropProviderIds` names ids whose local absence is INTENTIONAL and
+ * authoritative for this merge, and they are dropped whichever case runs.
+ */
+export declare function mergeDaemonProviders(localProviders: MediaProviderMap | null | undefined, daemonProviders: MediaProviderMap | null | undefined, options?: {
+    preserveLocalProviderIds?: ReadonlySet<string>;
+    dropProviderIds?: ReadonlySet<string>;
+}): MediaProviderMap;
+/**
+ * Whether local credentials should be pushed to the server.
+ *
+ * True only when the server is reachable, the operator has real local data,
+ * and the server manages nothing yet — i.e. a first upload. Once the server
+ * holds anything, it is authoritative and pushing would let a stale local copy
+ * clobber it; that path belongs to an explicit save, not an automatic sync.
+ */
+export declare function shouldSyncLocalProvidersToDaemon(localProviders: MediaProviderMap | null | undefined, daemonProviders: MediaProviderMap | null | undefined): boolean;
+/**
+ * The base URL to use for a provider: whatever the operator typed, else the
+ * catalog's default, else empty.
+ *
+ * Deliberately still returns whatever was typed, valid or not — callers render
+ * this value back into the field, and silently substituting the default under
+ * an operator mid-edit would look like their input was eaten. Acceptability is
+ * {@link isProviderBaseUrlInvalid}'s question, asked separately.
+ */
+export declare function resolveProviderBaseUrl(entry: MediaProviderCredentials | null | undefined, defaultBaseUrl: string | undefined): string;
+/**
+ * True when the operator typed a base URL this tab will not send credentials
+ * to — distinct from "hasn't typed anything yet", which is not an error state
+ * (the catalog default takes over). Mirrors the execution tab's
+ * `isBaseUrlInvalid` exactly, against the same shared policy.
+ *
+ * This tab had NO url validation at all, which made it strictly worse than the
+ * execution tab's old scheme-only check on a field of the same kind: operator
+ * supplied, persisted, and paired with a real API key that is then sent to
+ * whatever it names. See `utils/endpoint-policy.ts`.
+ */
+export declare function isProviderBaseUrlInvalid(entry: MediaProviderCredentials | null | undefined): boolean;
+/** Every provider id in the map whose typed base URL is unacceptable — the save gate's input. */
+export declare function invalidBaseUrlProviderIds(providers: MediaProviderMap | null | undefined): readonly string[];
+/**
+ * Orders a provider catalog for display: configured providers first (real
+ * data or a server marker — see `isEntryPresent`), then alphabetically by
+ * label within each group. Mirrors `sortDetectedAgents`'s convention in the
+ * execution tab's rules — configured-first is what the origin's inline sort
+ * did too (`MediaProvidersSection`'s `availableProviders` sort in
+ * `SettingsDialog.tsx`), extracted here as a testable pure function instead
+ * of living inline in JSX. Generic over `{ id, label }` so callers can pass
+ * `MediaProviderOption[]` directly without this module importing that type.
+ *
+ * `pinnedIds` (optional, default none — every pre-existing caller keeps its
+ * exact prior order): ids that must render first, in the order given, ahead
+ * of the configured/alphabetical grouping entirely — a pinned provider stays
+ * first whether or not it is configured. A pinned id absent from `catalog`
+ * is silently skipped rather than fabricating an entry.
+ */
+export declare function sortProvidersByConfigured<T extends {
+    id: string;
+    label: string;
+}>(catalog: readonly T[], providers: MediaProviderMap | null | undefined, pinnedIds?: readonly string[]): readonly T[];
+/**
+ * How a configured key should be displayed.
+ *
+ * Never returns the key itself. A locally-typed key is masked down to its own
+ * tail so it reads the same as a server-reported one, which keeps the UI from
+ * looking different depending on where the value happens to live.
+ *
+ * **`apiKeyTail` is clamped rather than trusted.** It arrives from the daemon,
+ * and `types.ts` describes it as "the last few characters" in prose only — there
+ * was nothing enforcing that. A daemon bug (or a compromised one) returning the
+ * WHOLE key in that field would have rendered the whole key behind a `••••`
+ * prefix that makes it look masked. Clamping here means the display cannot leak
+ * more than it promises no matter what the server sends.
+ */
+export declare function maskedKeyLabel(entry: MediaProviderCredentials | null | undefined): string | null;
+//# sourceMappingURL=rules.d.ts.map

package/dist/features/media-providers/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/features/media-providers/rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAe7E;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEhG;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE1F;AAED;mDACmD;AACnD,wBAAgB,YAAY,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAExF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE7F;AAED,qDAAqD;AACrD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGhG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EACnD,eAAe,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EACpD,OAAO,CAAC,EAAE;IAAE,wBAAwB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAAC,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAAE,GAClG,gBAAgB,CAyBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,cAAc,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EACnD,eAAe,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GACnD,OAAO,CAIT;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,EAClD,cAAc,EAAE,MAAM,GAAG,SAAS,GACjC,MAAM,CAIR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAIpG;AAED,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,CAG3G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC/E,OAAO,EAAE,SAAS,CAAC,EAAE,EACrB,SAAS,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,EAC9C,SAAS,GAAE,SAAS,MAAM,EAAO,GAChC,SAAS,CAAC,EAAE,CAcd;AAOD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAOhG"}

package/dist/features/media-providers/rules.js

@@ -0,0 +1,227 @@
+import { isAllowedEndpointUrl } from '../../utils/endpoint-policy.js';
+/**
+ * Reconciliation rules for credentials that exist in two places at once: a
+ * server ("daemon") that holds the authoritative copy, and a local editor
+ * where the operator may have unsaved changes.
+ *
+ * See `types.ts` for the recoverable-vs-marker distinction these all turn on.
+ */
+/** Trimmed-non-empty, treating `undefined`/`null` as absent. */
+function filled(value) {
+    return Boolean(value && value.trim());
+}
+/**
+ * Whether the entry carries real, re-sendable credential data.
+ *
+ * Markers (`apiKeyConfigured`/`apiKeyTail`) deliberately do NOT count — they
+ * prove a key exists somewhere without carrying anything that could be sent
+ * back. This is the predicate that decides whether a local edit is worth
+ * preserving over the server's copy.
+ */
+export function hasRecoverableFields(entry) {
+    return filled(entry?.apiKey) || filled(entry?.baseUrl) || filled(entry?.model);
+}
+/**
+ * Whether the entry is configured AT ALL — real data OR a server marker.
+ *
+ * Broader than `hasRecoverableFields` on purpose: for "is this provider set
+ * up?" a server-held key the UI cannot see still counts as set up.
+ */
+export function isEntryPresent(entry) {
+    return hasRecoverableFields(entry) || Boolean(entry?.apiKeyConfigured) || filled(entry?.apiKeyTail);
+}
+/** Inverse of `isEntryPresent`, kept as its own name because call sites read
+ *  far better as "is empty" than as a negation. */
+export function isEntryEmpty(entry) {
+    return !isEntryPresent(entry);
+}
+/**
+ * An entry that is configured but holds nothing usable — markers only.
+ *
+ * These are echoes of a server state that no longer exists. When the server
+ * reports no managed providers at all, every marker-only local entry is stale
+ * and must be dropped, or the UI keeps claiming a provider is configured after
+ * the server has forgotten it.
+ */
+export function isMarkerOnlyEntry(entry) {
+    return isEntryPresent(entry) && !hasRecoverableFields(entry);
+}
+/** Whether any provider in the map is configured. */
+export function hasAnyConfiguredProvider(providers) {
+    if (!providers)
+        return false;
+    return Object.values(providers).some((entry) => isEntryPresent(entry));
+}
+/**
+ * Merges the server's providers over the local ones.
+ *
+ * Three cases, in order:
+ *
+ * 1. **`daemonProviders == null`** — the server was never reached (as opposed
+ *    to reached and empty). Local state is returned untouched. Treating an
+ *    unreachable server as "the server has nothing" would wipe local edits on
+ *    a network blip, which is why `null` and `{}` must stay distinguishable.
+ * 2. **Server reached, manages nothing** — every marker-only local entry is a
+ *    stale echo and is dropped. Entries with real local data are KEPT: the
+ *    operator typed those and no server has claimed them yet.
+ * 3. **Server reached with providers** — each present server entry wins,
+ *    EXCEPT where the caller named that provider in `preserveLocalProviderIds`
+ *    AND the local entry has recoverable fields. That exception is what stops
+ *    a background refresh from overwriting a field being typed. The local
+ *    values are layered ON TOP of the server entry (`{...daemon, ...local}`)
+ *    rather than replacing it, so server-only markers survive alongside the
+ *    edit.
+ *
+ * Server entries that are not present are skipped entirely — an empty server
+ * record must not blank a configured local one.
+ *
+ * ## `dropProviderIds` — why a preserve list was not enough
+ *
+ * `preserveLocalProviderIds` can only preserve something that EXISTS locally:
+ * case 3 requires `hasRecoverableFields(localEntry)`, and a cleared provider
+ * has no local entry at all. So a provider the operator cleared, whose removal
+ * has not yet reached the server, was re-created here from the server's own
+ * still-present copy — a reload silently put a deleted credential back on
+ * screen. A deletion is not a weaker edit; it is an edit the preserve
+ * mechanism structurally cannot express, so it needs its own channel.
+ * `dropProviderIds` names ids whose local absence is INTENTIONAL and
+ * authoritative for this merge, and they are dropped whichever case runs.
+ */
+export function mergeDaemonProviders(localProviders, daemonProviders, options) {
+    const dropped = options?.dropProviderIds;
+    const withoutDropped = (map) => dropped === undefined || dropped.size === 0
+        ? map
+        : Object.fromEntries(Object.entries(map).filter(([providerId]) => !dropped.has(providerId)));
+    const local = withoutDropped({ ...(localProviders ?? {}) });
+    if (daemonProviders == null)
+        return local;
+    if (!hasAnyConfiguredProvider(daemonProviders)) {
+        return Object.fromEntries(Object.entries(local).filter(([, entry]) => !isMarkerOnlyEntry(entry)));
+    }
+    const merged = { ...local };
+    for (const [providerId, daemonEntry] of Object.entries(daemonProviders)) {
+        if (!isEntryPresent(daemonEntry))
+            continue;
+        if (dropped?.has(providerId))
+            continue;
+        const localEntry = merged[providerId];
+        const preserveLocalEdit = Boolean(options?.preserveLocalProviderIds?.has(providerId)) && hasRecoverableFields(localEntry);
+        merged[providerId] = preserveLocalEdit ? { ...daemonEntry, ...localEntry } : { ...daemonEntry };
+    }
+    return merged;
+}
+/**
+ * Whether local credentials should be pushed to the server.
+ *
+ * True only when the server is reachable, the operator has real local data,
+ * and the server manages nothing yet — i.e. a first upload. Once the server
+ * holds anything, it is authoritative and pushing would let a stale local copy
+ * clobber it; that path belongs to an explicit save, not an automatic sync.
+ */
+export function shouldSyncLocalProvidersToDaemon(localProviders, daemonProviders) {
+    if (daemonProviders == null)
+        return false;
+    if (hasAnyConfiguredProvider(daemonProviders))
+        return false;
+    return Object.values(localProviders ?? {}).some((entry) => hasRecoverableFields(entry));
+}
+/**
+ * The base URL to use for a provider: whatever the operator typed, else the
+ * catalog's default, else empty.
+ *
+ * Deliberately still returns whatever was typed, valid or not — callers render
+ * this value back into the field, and silently substituting the default under
+ * an operator mid-edit would look like their input was eaten. Acceptability is
+ * {@link isProviderBaseUrlInvalid}'s question, asked separately.
+ */
+export function resolveProviderBaseUrl(entry, defaultBaseUrl) {
+    const typed = entry?.baseUrl?.trim();
+    if (typed)
+        return typed;
+    return defaultBaseUrl?.trim() ?? '';
+}
+/**
+ * True when the operator typed a base URL this tab will not send credentials
+ * to — distinct from "hasn't typed anything yet", which is not an error state
+ * (the catalog default takes over). Mirrors the execution tab's
+ * `isBaseUrlInvalid` exactly, against the same shared policy.
+ *
+ * This tab had NO url validation at all, which made it strictly worse than the
+ * execution tab's old scheme-only check on a field of the same kind: operator
+ * supplied, persisted, and paired with a real API key that is then sent to
+ * whatever it names. See `utils/endpoint-policy.ts`.
+ */
+export function isProviderBaseUrlInvalid(entry) {
+    const typed = entry?.baseUrl?.trim();
+    if (!typed)
+        return false;
+    return !isAllowedEndpointUrl(typed);
+}
+/** Every provider id in the map whose typed base URL is unacceptable — the save gate's input. */
+export function invalidBaseUrlProviderIds(providers) {
+    if (!providers)
+        return [];
+    return Object.keys(providers).filter((id) => isProviderBaseUrlInvalid(providers[id]));
+}
+/**
+ * Orders a provider catalog for display: configured providers first (real
+ * data or a server marker — see `isEntryPresent`), then alphabetically by
+ * label within each group. Mirrors `sortDetectedAgents`'s convention in the
+ * execution tab's rules — configured-first is what the origin's inline sort
+ * did too (`MediaProvidersSection`'s `availableProviders` sort in
+ * `SettingsDialog.tsx`), extracted here as a testable pure function instead
+ * of living inline in JSX. Generic over `{ id, label }` so callers can pass
+ * `MediaProviderOption[]` directly without this module importing that type.
+ *
+ * `pinnedIds` (optional, default none — every pre-existing caller keeps its
+ * exact prior order): ids that must render first, in the order given, ahead
+ * of the configured/alphabetical grouping entirely — a pinned provider stays
+ * first whether or not it is configured. A pinned id absent from `catalog`
+ * is silently skipped rather than fabricating an entry.
+ */
+export function sortProvidersByConfigured(catalog, providers, pinnedIds = []) {
+    const pinnedSet = new Set(pinnedIds);
+    const pinned = pinnedIds
+        .map((id) => catalog.find((item) => item.id === id))
+        .filter((item) => item !== undefined);
+    const rest = catalog
+        .filter((item) => !pinnedSet.has(item.id))
+        .sort((a, b) => {
+        const aConfigured = isEntryPresent(providers?.[a.id]);
+        const bConfigured = isEntryPresent(providers?.[b.id]);
+        if (aConfigured !== bConfigured)
+            return aConfigured ? -1 : 1;
+        return a.label.localeCompare(b.label);
+    });
+    return [...pinned, ...rest];
+}
+/** How many trailing characters of a key may ever be shown. Matches
+ *  `source-config-list`'s `MASKED_VALUE_VISIBLE_SUFFIX_LENGTH` — the two mask
+ *  the same class of secret and must not disagree about how much of it leaks. */
+const KEY_TAIL_MAX_LENGTH = 4;
+/**
+ * How a configured key should be displayed.
+ *
+ * Never returns the key itself. A locally-typed key is masked down to its own
+ * tail so it reads the same as a server-reported one, which keeps the UI from
+ * looking different depending on where the value happens to live.
+ *
+ * **`apiKeyTail` is clamped rather than trusted.** It arrives from the daemon,
+ * and `types.ts` describes it as "the last few characters" in prose only — there
+ * was nothing enforcing that. A daemon bug (or a compromised one) returning the
+ * WHOLE key in that field would have rendered the whole key behind a `••••`
+ * prefix that makes it look masked. Clamping here means the display cannot leak
+ * more than it promises no matter what the server sends.
+ */
+export function maskedKeyLabel(entry) {
+    const tail = entry?.apiKeyTail?.trim();
+    if (tail)
+        return `••••${tail.slice(-KEY_TAIL_MAX_LENGTH)}`;
+    const local = entry?.apiKey?.trim();
+    if (local)
+        return `••••${local.slice(-KEY_TAIL_MAX_LENGTH)}`;
+    if (entry?.apiKeyConfigured)
+        return '••••';
+    return null;
+}
+//# sourceMappingURL=rules.js.map

package/dist/features/media-providers/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../src/features/media-providers/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAGtE;;;;;;GAMG;AAEH,gEAAgE;AAChE,SAAS,MAAM,CAAC,KAAyB;IACvC,OAAO,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAkD;IACrF,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkD;IAC/E,OAAO,oBAAoB,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACtG,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,YAAY,CAAC,KAAkD;IAC7E,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAkD;IAClF,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,wBAAwB,CAAC,SAA8C;IACrF,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,oBAAoB,CAClC,cAAmD,EACnD,eAAoD,EACpD,OAAmG;IAEnG,MAAM,OAAO,GAAG,OAAO,EAAE,eAAe,CAAC;IACzC,MAAM,cAAc,GAAG,CAAC,GAAqB,EAAoB,EAAE,CACjE,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QACzC,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAEjG,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAE5D,IAAI,eAAe,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAE1C,IAAI,CAAC,wBAAwB,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,MAAM,GAAqB,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;YAAE,SAAS;QAC3C,IAAI,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC;YAAE,SAAS;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,iBAAiB,GACrB,OAAO,CAAC,OAAO,EAAE,wBAAwB,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;QAClG,MAAM,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,cAAmD,EACnD,eAAoD;IAEpD,IAAI,eAAe,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,wBAAwB,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAkD,EAClD,cAAkC;IAElC,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAkD;IACzF,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,SAA8C;IACtF,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAqB,EACrB,SAA8C,EAC9C,YAA+B,EAAE;IAEjC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS;SACrB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;SACnD,MAAM,CAAC,CAAC,IAAI,EAAa,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO;SACjB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,WAAW,KAAK,WAAW;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;iFAEiF;AACjF,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,KAAkD;IAC/E,MAAM,IAAI,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI;QAAE,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC;IAC7D,IAAI,KAAK,EAAE,gBAAgB;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/features/media-providers/types.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Origin: `MediaProvidersSection` (`SettingsDialog.tsx:7028`) plus the media
+ * provider half of `state/config.ts` (`isStoredMediaProviderEntry*`,
+ * `mergeDaemonMediaProviders`, `hasAnyConfiguredProvider`,
+ * `shouldSyncLocalMediaProvidersToDaemon` and their private helpers).
+ *
+ * What is generic and ported: a per-provider credential record, and the rules
+ * for reconciling a SERVER-HELD credential store against LOCAL unsaved edits.
+ * None of that is product-bound — it is the same problem any host has once
+ * credentials can live in two places at once.
+ *
+ * What is NOT ported verbatim: the origin's full `MEDIA_PROVIDERS` catalog
+ * (`media/models.ts`, 761 lines of concrete image/video vendors with their
+ * endpoints and model lists). Instead this feature ships a small, curated
+ * `DEFAULT_MEDIA_PROVIDER_CATALOG` (see `constants.ts`) as a starting point,
+ * not a fixed list — same convention as `execution/constants.ts`'s
+ * `DEFAULT_PROVIDER_PRESETS`. A host with its own provider roster (or a
+ * larger/different one) passes its own `catalog` to `MediaProvidersTab` to
+ * replace this wholesale.
+ *
+ * Also not ported: the origin's functions take and return its whole
+ * `AppConfig`. Here they take and return the providers RECORD alone. Threading
+ * an entire host config object through a credential-merge rule is what made
+ * the origin's version untestable in isolation.
+ */
+/**
+ * One provider's stored credentials.
+ *
+ * TWO KINDS OF "PRESENT" live in this shape, and conflating them is the bug
+ * this whole module exists to avoid:
+ *
+ * - **Recoverable fields** (`apiKey`, `baseUrl`, `model`) are real values the
+ *   operator typed and that can be re-sent.
+ * - **Markers** (`apiKeyConfigured`, `apiKeyTail`) are the server saying "a key
+ *   exists here, but you don't get to see it". They prove configuration
+ *   without carrying anything usable.
+ *
+ * An entry holding ONLY markers is configured but carries no data — see
+ * `isMarkerOnlyEntry`.
+ */
+export interface MediaProviderCredentials {
+    apiKey?: string;
+    baseUrl?: string;
+    model?: string;
+    /** Server-side marker: a key is stored, not disclosed. */
+    apiKeyConfigured?: boolean;
+    /** Server-side marker: last few characters, for display only. */
+    apiKeyTail?: string;
+    /** Free-form provenance tag, host-defined. */
+    source?: string;
+}
+/** Credentials keyed by provider id. */
+export type MediaProviderMap = Record<string, MediaProviderCredentials>;
+/**
+ * One selectable provider in the catalog. A host supplies its own catalog —
+ * this package ships `DEFAULT_MEDIA_PROVIDER_CATALOG` as a starting point,
+ * not as a fixed list (same convention as `ProviderPreset`).
+ */
+export interface MediaProviderOption {
+    id: string;
+    label: string;
+    /** Prefilled when the operator picks this provider and typed nothing. */
+    defaultBaseUrl?: string;
+    /** Model ids this provider advertises. A host that discovers models at
+     *  runtime can leave this empty. */
+    models?: readonly string[];
+}
+/**
+ * Result of the tab's daemon read, surfaced while the initial fetch or a
+ * manual reload is in flight. `'unreachable'` mirrors
+ * `MediaProvidersPort.fetchMediaProviders`'s `null` result as a renderable
+ * state — the daemon was never reached, distinct from `'ok'` (reached; local
+ * state is now reconciled against whatever it reported, including managing
+ * nothing at all). There is no `'error'` member: the port's `fetchMediaProviders`
+ * never rejects — see its own doc comment for why unreachable is a value,
+ * not a failure, in this contract.
+ */
+export type MediaProvidersLoadState = {
+    status: 'loading';
+} | {
+    status: 'ok';
+} | {
+    status: 'unreachable';
+};
+/**
+ * Result of `MediaProvidersPort.saveMediaProviders`, surfaced near whichever
+ * action triggered it (an explicit Save, or Clear's implicit save-on-clear).
+ * Same "async edge result" idiom as `ConnectionTestState`/`AgentScanState` in
+ * the execution tab's types — one shared shape for "what happened the last
+ * time this async edge ran" across this package.
+ */
+export type MediaProvidersSaveState = {
+    status: 'idle';
+} | {
+    status: 'saving';
+} | {
+    status: 'saved';
+} | {
+    status: 'save-error';
+    message: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/features/media-providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/features/media-providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wCAAwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;wCACoC;IACpC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3G;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/features/media-providers/types.js

@@ -0,0 +1,27 @@
+/**
+ * Origin: `MediaProvidersSection` (`SettingsDialog.tsx:7028`) plus the media
+ * provider half of `state/config.ts` (`isStoredMediaProviderEntry*`,
+ * `mergeDaemonMediaProviders`, `hasAnyConfiguredProvider`,
+ * `shouldSyncLocalMediaProvidersToDaemon` and their private helpers).
+ *
+ * What is generic and ported: a per-provider credential record, and the rules
+ * for reconciling a SERVER-HELD credential store against LOCAL unsaved edits.
+ * None of that is product-bound — it is the same problem any host has once
+ * credentials can live in two places at once.
+ *
+ * What is NOT ported verbatim: the origin's full `MEDIA_PROVIDERS` catalog
+ * (`media/models.ts`, 761 lines of concrete image/video vendors with their
+ * endpoints and model lists). Instead this feature ships a small, curated
+ * `DEFAULT_MEDIA_PROVIDER_CATALOG` (see `constants.ts`) as a starting point,
+ * not a fixed list — same convention as `execution/constants.ts`'s
+ * `DEFAULT_PROVIDER_PRESETS`. A host with its own provider roster (or a
+ * larger/different one) passes its own `catalog` to `MediaProvidersTab` to
+ * replace this wholesale.
+ *
+ * Also not ported: the origin's functions take and return its whole
+ * `AppConfig`. Here they take and return the providers RECORD alone. Threading
+ * an entire host config object through a credential-merge rule is what made
+ * the origin's version untestable in isolation.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/features/media-providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/features/media-providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG"}

package/dist/features/memory/constants.d.ts

@@ -1,8 +1,6 @@
-import type { CSSProperties } from 'react';
 import type { DraftEntry, MemoryType } from './types.js';
 export declare const TYPES: MemoryType[];
 export declare const EMPTY_DRAFT: DraftEntry;
-export declare const FIELD_LABEL_STYLE: CSSProperties;
 /**
  * Click-to-prefill examples shown above the editor when creating a new
  * memory. Three starters cover the most common reasons a person writes a

package/dist/features/memory/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/features/memory/constants.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAKzD,eAAO,MAAM,KAAK,EAAE,UAAU,EAAoE,CAAC;AAEnG,eAAO,MAAM,WAAW,EAAE,UAKzB,CAAC;AAMF,eAAO,MAAM,iBAAiB,EAAE,aAQ/B,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,QAAQ,EAAE,aAAa,CAAC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAmBA,CAAC;AAEF,eAAO,MAAM,wBAAwB,2EAA4E,CAAC;AAMlH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAOjG,CAAC;AAEF;;;;sCAIsC;AACtC,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAE1E,eAAO,MAAM,yCAAyC,uCAAuC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/features/memory/constants.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAKzD,eAAO,MAAM,KAAK,EAAE,UAAU,EAAoE,CAAC;AAEnG,eAAO,MAAM,WAAW,EAAE,UAKzB,CAAC;AAOF;;;;;;;;GAQG;AACH,eAAO,MAAM,QAAQ,EAAE,aAAa,CAAC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAmBA,CAAC;AAEF,eAAO,MAAM,wBAAwB,2EAA4E,CAAC;AAMlH,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAOjG,CAAC;AAEF;;;;sCAIsC;AACtC,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B,sBAAsB,CAAC;AAE9D,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAE1E,eAAO,MAAM,yCAAyC,uCAAuC,CAAC"}

package/dist/features/memory/constants.js

@@ -12,15 +12,6 @@ export const EMPTY_DRAFT = {
 // every field renders with the same color/letter-spacing/baseline; this
 // is what gives the editor a settings-form rhythm rather than a stack
 // of unlabelled inputs.
-export const FIELD_LABEL_STYLE = {
-    display: 'block',
-    fontSize: 10,
-    fontWeight: 600,
-    letterSpacing: 0.5,
-    textTransform: 'uppercase',
-    color: 'var(--text-muted, #888)',
-    marginBottom: 4,
-};
 /**
  * Click-to-prefill examples shown above the editor when creating a new
  * memory. Three starters cover the most common reasons a person writes a

package/dist/features/memory/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/features/memory/constants.ts"],"names":[],"mappings":"AAMA,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,KAAK,GAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAEnG,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;IACf,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,wBAAwB;AACxB,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,GAAG;IACf,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,WAAW;IAC1B,KAAK,EAAE,yBAAyB;IAChC,YAAY,EAAE,CAAC;CAChB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,QAAQ,GAKhB;IACH;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,8CAA8C;KACrD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,wCAAwC;KAC/C;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,wDAAwD;KAC/D;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAElH,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,2BAA2B,GAA8D;IACpG,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;sCAIsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAQ,2BAAkE,CAAC,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAE1E,MAAM,CAAC,MAAM,yCAAyC,GAAG,oCAAoC,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/features/memory/constants.ts"],"names":[],"mappings":"AAKA,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,KAAK,GAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAEnG,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,IAAI,EAAE,EAAE;IACR,WAAW,EAAE,EAAE;IACf,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,wBAAwB;AAExB;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,QAAQ,GAKhB;IACH;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,8CAA8C;KACrD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,wCAAwC;KAC/C;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,wDAAwD;KAC/D;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAElH,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,2BAA2B,GAA8D;IACpG,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;sCAIsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAQ,2BAAkE,CAAC,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAE9D,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CAAC;AAE1E,MAAM,CAAC,MAAM,yCAAyC,GAAG,oCAAoC,CAAC"}

package/dist/features/memory/dependencies.d.ts

@@ -1,31 +1,4 @@
-/**
- * The only file in this feature allowed to touch a concrete transport
- * adapter. Everything else in the slice depends on `ports.ts`.
- *
- * Split, deliberately, into two different defaults:
- *
- * - `memoryConfigPort`/`memoryEntriesPort`/`memoryExtractionsPort` bind REAL
- *   `fetch`-based adapters against a plain `/api/memory*` REST surface (list/
- *   tree/entry CRUD, config PATCH, extraction history CRUD). Unlike
- *   `features/connectors`' data port — which fakes its transport by design,
- *   because the real one is a specific third-party OAuth-catalog vendor's
- *   API shape — this is a generic JSON/REST contract with no vendor coupling,
- *   and the pinned source's one open bug (`fetchMemoryList()` trusting an
- *   under-validated response — see the fix below and
- *   `packages/ui/source-map.md`) only exists to fix in a real, testable
- *   adapter. A host is still free to supply its own binding; this default
- *   just isn't a fake.
- * - `memoryConnectorsPort` binds a fake/in-memory connector catalogue (same
- *   reasoning as `features/connectors`' own fake — the real catalogue is a
- *   vendor-specific OAuth discovery transport this package doesn't assume),
- *   plus REAL browser-only bridges for the two pieces that touch only
- *   generic browser APIs: pending-authorization persistence (sessionStorage)
- *   and the cross-tab "connectors changed" signal (a `CustomEvent`).
- *   `saveMemoryEntry` on this port is the same real HTTP adapter the entries
- *   cluster uses — saving a connector suggestion is an ordinary memory write,
- *   not a connector-transport concern.
- */
-import type { Connector } from '../connectors/index.js';
+import type { Connector } from '../connectors/types.js';
 import type { MemoryConfigPort, MemoryConnectorsPort, MemoryEntriesPort, MemoryExtractionsPort } from './ports.js';
 import type { ConnectorMemorySuggestionResponse, MemoryListResponse } from './types.js';
 export declare const memoryConfigPort: MemoryConfigPort;

package/dist/features/memory/dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../../src/features/memory/dependencies.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAA6C,MAAM,wBAAwB,CAAC;AAEnG,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,iCAAiC,EAKjC,kBAAkB,EAInB,MAAM,YAAY,CAAC;AA6CpB,eAAO,MAAM,gBAAgB,EAAE,gBAE9B,CAAC;AAIF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC,CASnE;AA+CD,eAAO,MAAM,iBAAiB,EAAE,iBAO/B,CAAC;AAqBF,eAAO,MAAM,qBAAqB,EAAE,qBAInC,CAAC;AAIF,MAAM,WAAW,+BAA+B;IAC9C,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,iCAAiC,GAAG,IAAI,CAAC;IAC9D,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,GAAE,+BAAoC,GAAG,oBAAoB,CA0ClH;AAsCD,eAAO,MAAM,oBAAoB,EAAE,oBAAuD,CAAC"}
+{"version":3,"file":"dependencies.d.ts","sourceRoot":"","sources":["../../../src/features/memory/dependencies.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,SAAS,EAA6C,MAAM,wBAAwB,CAAC;AAKnG,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,iCAAiC,EAKjC,kBAAkB,EAInB,MAAM,YAAY,CAAC;AA6CpB,eAAO,MAAM,gBAAgB,EAAE,gBAE9B,CAAC;AAIF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,kBAAkB,CAAC,CASnE;AAmDD,eAAO,MAAM,iBAAiB,EAAE,iBAO/B,CAAC;AA6BF,eAAO,MAAM,qBAAqB,EAAE,qBAInC,CAAC;AAIF,MAAM,WAAW,+BAA+B;IAC9C,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,iCAAiC,GAAG,IAAI,CAAC;IAC9D,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,GAAE,+BAAoC,GAAG,oBAAoB,CA0ClH;AAsCD,eAAO,MAAM,oBAAoB,EAAE,oBAAuD,CAAC"}