@marinoscar/platform-web 0.1.0-next.3 → 0.1.0-next.4

package/dist/ai/ui/OrgAiKeysPage.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Admin → Settings → Organization AI keys (`/admin/settings/ai/organization-keys`).
+ *
+ * Issue #739 (PP-8.6). The active organization's OWN AI provider keys: one
+ * row per registered provider with its masked status and set / remove
+ * actions, plus the organization's effective AI policy (read-only). A
+ * registry card of its own, appended last in the AI section
+ * (`permission: 'org_ai_config:read'`, `feature: 'ai'`), never a tab on the
+ * deployment's AI page: "which key does MY organization pay with" is a
+ * different question from "how is AI configured for the deployment".
+ *
+ * Writes are gated inside the page (`org_ai_config:write`), as every
+ * settings page does. The key is WRITE-ONLY: typed, sent once, verified by
+ * the provider before it is stored, and never shown again (only its last
+ * characters).
+ */
+import type { ReactElement } from 'react';
+import type { PageSlotsBase } from '../../core/index.js';
+/**
+ * The card's description, mirrored as the page's subtitle.
+ *
+ * @stability experimental
+ */
+export declare const ORG_AI_KEYS_DESCRIPTION = "Set your organization's own AI provider keys and see its effective AI policy.";
+/**
+ * The slots of {@link OrgAiKeysPage}: the page-slot contract. `Header` receives
+ * `readOnly`; the default header appends " (read-only)" to the title.
+ *
+ * @example
+ * ```tsx
+ * <OrgAiKeysPage slots={{ BeforeContent: () => <Alert severity="info">Keys rotate every quarter.</Alert> }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type OrgAiKeysPageSlots = PageSlotsBase;
+/**
+ * The props of {@link OrgAiKeysPage}.
+ *
+ * @stability experimental
+ */
+export interface OrgAiKeysPageProps {
+    /** Optional extension slots; omitted, the page renders exactly as it always did. */
+    slots?: OrgAiKeysPageSlots;
+}
+/**
+ * The Organization AI keys page.
+ *
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export default function OrgAiKeysPage(props?: OrgAiKeysPageProps): ReactElement;
+//# sourceMappingURL=OrgAiKeysPage.d.ts.map

package/dist/ai/ui/OrgAiKeysPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgAiKeysPage.d.ts","sourceRoot":"","sources":["../../../src/ai/ui/OrgAiKeysPage.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAiB1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,kFAAkF,CAAC;AAoEvH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAE/C;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,KAAK,GAAE,kBAAuB,GAAG,YAAY,CA8FlF"}

package/dist/ai/ui/OrgAiKeysPage.js

@@ -0,0 +1,59 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Admin → Settings → Organization AI keys (`/admin/settings/ai/organization-keys`).
+ *
+ * Issue #739 (PP-8.6). The active organization's OWN AI provider keys: one
+ * row per registered provider with its masked status and set / remove
+ * actions, plus the organization's effective AI policy (read-only). A
+ * registry card of its own, appended last in the AI section
+ * (`permission: 'org_ai_config:read'`, `feature: 'ai'`), never a tab on the
+ * deployment's AI page: "which key does MY organization pay with" is a
+ * different question from "how is AI configured for the deployment".
+ *
+ * Writes are gated inside the page (`org_ai_config:write`), as every
+ * settings page does. The key is WRITE-ONLY: typed, sent once, verified by
+ * the provider before it is stored, and never shown again (only its last
+ * characters).
+ */
+import { useState } from 'react';
+import { Alert, Box, Button, Chip, CircularProgress, Container, Divider, Paper, Stack, TextField, Typography, } from '@mui/material';
+import { PageSlotsFrame, usePlatformViewer } from '../../core/index.js';
+import { useOrgAiKeys, useOrgAiPolicy } from '../headless/index.js';
+/** The page title (the card's title). */
+const ORG_AI_KEYS_TITLE = 'Organization AI keys';
+/**
+ * The card's description, mirrored as the page's subtitle.
+ *
+ * @stability experimental
+ */
+export const ORG_AI_KEYS_DESCRIPTION = "Set your organization's own AI provider keys and see its effective AI policy.";
+function ProviderRow(props) {
+    const { entry, canWrite, pending } = props;
+    const [draft, setDraft] = useState('');
+    const fieldId = `org-ai-key-${entry.provider}`;
+    return (_jsx(Box, { "data-testid": `org-ai-key-${entry.provider}`, sx: { py: 2 }, children: _jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 2, sx: { alignItems: { sm: 'center' } }, children: [_jsxs(Box, { sx: { flex: 1, minWidth: 0 }, children: [_jsx(Typography, { variant: "subtitle1", children: entry.displayName }), entry.configured ? (_jsxs(Stack, { direction: "row", spacing: 1, sx: { alignItems: 'center' }, children: [_jsx(Chip, { size: "small", color: "success", label: "Key set" }), _jsxs(Typography, { variant: "body2", color: "text.secondary", children: [entry.hint ?? '', entry.verifiedAt ? ` · verified ${new Date(entry.verifiedAt).toLocaleDateString()}` : ''] })] })) : (_jsx(Typography, { variant: "body2", color: "text.secondary", children: "No organization key" }))] }), _jsx(TextField, { id: fieldId, size: "small", type: "password", autoComplete: "off", label: entry.configured ? 'Replace key' : 'API key', value: draft, disabled: !canWrite || pending, onChange: (event) => setDraft(event.target.value), sx: { minWidth: { sm: 260 } } }), _jsxs(Stack, { direction: "row", spacing: 1, children: [_jsx(Button, { variant: "contained", disabled: !canWrite || pending || draft.trim().length === 0, onClick: () => {
+                                void props.onSet(entry.provider, draft).then((ok) => {
+                                    if (ok)
+                                        setDraft('');
+                                });
+                            }, children: pending ? _jsx(CircularProgress, { size: 18 }) : 'Save' }), _jsx(Button, { color: "error", disabled: !canWrite || pending || !entry.configured, onClick: () => void props.onRemove(entry.provider), children: "Remove" })] })] }) }));
+}
+/**
+ * The Organization AI keys page.
+ *
+ * @returns the page.
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export default function OrgAiKeysPage(props = {}) {
+    const { slots } = props;
+    const viewer = usePlatformViewer();
+    const canWrite = viewer.hasPermission('org_ai_config:write');
+    const { keys, error, isLoading, pendingProvider, set, remove } = useOrgAiKeys();
+    const { policy, isLoading: policyLoading, unavailable } = useOrgAiPolicy();
+    return (_jsx(Container, { maxWidth: "md", sx: { py: 3 }, children: _jsxs(PageSlotsFrame, { slots: slots, headerProps: { title: ORG_AI_KEYS_TITLE, description: ORG_AI_KEYS_DESCRIPTION, readOnly: !canWrite, actions: null }, header: _jsxs(_Fragment, { children: [_jsxs(Typography, { variant: "h4", component: "h1", gutterBottom: true, children: [ORG_AI_KEYS_TITLE, canWrite ? '' : ' (read-only)'] }), _jsx(Typography, { variant: "body1", color: "text.secondary", sx: { mb: 2 }, children: ORG_AI_KEYS_DESCRIPTION })] }), children: [_jsx(Alert, { severity: "info", sx: { mb: 2 }, children: "A key set here pays for your organization's AI calls (a member's own key still comes first). In a single-organization deployment, the deployment key on the AI settings page (/admin/settings/ai) applies unless an organization key is set here." }), error && (_jsx(Alert, { severity: "error", sx: { mb: 2 }, role: "alert", "data-testid": "org-ai-keys-error", children: error })), _jsx(Paper, { variant: "outlined", sx: { px: 2, mb: 3 }, children: isLoading ? (_jsx(Box, { sx: { py: 3, display: 'flex', justifyContent: 'center' }, children: _jsx(CircularProgress, { "aria-label": "Loading organization keys" }) })) : (keys ?? []).length === 0 ? (_jsx(Typography, { sx: { py: 3 }, color: "text.secondary", children: "No AI provider is available in this deployment." })) : ((keys ?? []).map((entry, index) => (_jsxs(Box, { children: [index > 0 && _jsx(Divider, {}), _jsx(ProviderRow, { entry: entry, canWrite: canWrite, pending: pendingProvider === entry.provider, onSet: set, onRemove: remove })] }, entry.provider)))) }), _jsx(Typography, { variant: "h6", component: "h2", gutterBottom: true, children: "Effective AI policy" }), _jsx(Paper, { variant: "outlined", sx: { p: 2 }, "data-testid": "org-ai-policy", children: policyLoading ? (_jsx(CircularProgress, { size: 20, "aria-label": "Loading the AI policy" })) : unavailable || !policy ? (_jsx(Typography, { color: "text.secondary", children: "The organization's AI policy is not available." })) : (_jsxs(Stack, { spacing: 0.5, children: [_jsxs(Typography, { children: ["AI: ", policy.enabled ? 'on' : 'off'] }), _jsxs(Typography, { children: ["Key policy:", ' ', policy.keyPolicy === 'byok'
+                                        ? "members' own keys only (administrators may use the organization key)"
+                                        : "members' own keys, then the organization's key"] }), _jsxs(Typography, { children: ["Requests per day for the organization: ", policy.limits.perOrg?.requestsPerDay ?? 'unlimited'] }), _jsxs(Typography, { children: ["Output tokens per day for the organization: ", policy.limits.perOrg?.outputTokensPerDay ?? 'unlimited'] }), _jsx(Typography, { color: "text.secondary", variant: "body2", children: "Change these in Organization settings; an organization can only tighten the deployment's policy." })] })) })] }) }));
+}
+//# sourceMappingURL=OrgAiKeysPage.js.map

package/dist/ai/ui/OrgAiKeysPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrgAiKeysPage.js","sourceRoot":"","sources":["../../../src/ai/ui/OrgAiKeysPage.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EACL,KAAK,EACL,GAAG,EACH,MAAM,EACN,IAAI,EACJ,gBAAgB,EAChB,SAAS,EACT,OAAO,EACP,KAAK,EACL,KAAK,EACL,SAAS,EACT,UAAU,GACX,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEpE,yCAAyC;AACzC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,+EAA+E,CAAC;AAEvH,SAAS,WAAW,CAAC,KAMpB;IACC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC3C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,cAAc,KAAK,CAAC,QAAQ,EAAE,CAAC;IAE/C,OAAO,CACL,KAAC,GAAG,mBAAc,cAAc,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAC7D,MAAC,KAAK,IAAC,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,aAC7F,MAAC,GAAG,IAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAC/B,KAAC,UAAU,IAAC,OAAO,EAAC,WAAW,YAAE,KAAK,CAAC,WAAW,GAAc,EAC/D,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAClB,MAAC,KAAK,IAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,aAC7D,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,SAAS,GAAG,EACrD,MAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,aAC/C,KAAK,CAAC,IAAI,IAAI,EAAE,EAChB,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAC9E,IACP,CACT,CAAC,CAAC,CAAC,CACF,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,oCAErC,CACd,IACG,EACN,KAAC,SAAS,IACR,EAAE,EAAE,OAAO,EACX,IAAI,EAAC,OAAO,EACZ,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,KAAK,EAClB,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EACnD,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,EAC9B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EACjD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAC7B,EACF,MAAC,KAAK,IAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAE,CAAC,aAC/B,KAAC,MAAM,IACL,OAAO,EAAC,WAAW,EACnB,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAC3D,OAAO,EAAE,GAAG,EAAE;gCACZ,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;oCAClD,IAAI,EAAE;wCAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;gCACvB,CAAC,CAAC,CAAC;4BACL,CAAC,YAEA,OAAO,CAAC,CAAC,CAAC,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,GAAI,CAAC,CAAC,CAAC,MAAM,GAC3C,EACT,KAAC,MAAM,IACL,KAAK,EAAC,OAAO,EACb,QAAQ,EAAE,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EACnD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,uBAG3C,IACH,IACF,GACJ,CACP,CAAC;AACJ,CAAC;AA0BD;;;;;;;GAOG;AACH,MAAM,CAAC,OAAO,UAAU,aAAa,CAAC,QAA4B,EAAE;IAClE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC7D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAChF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAAC;IAE3E,OAAO,CACL,KAAC,SAAS,IAAC,QAAQ,EAAC,IAAI,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YACpC,MAAC,cAAc,IACb,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EACnH,MAAM,EACJ,8BACE,MAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,YAAY,mBACjD,iBAAiB,EACjB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,IACpB,EACb,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAC7D,uBAAuB,GACb,IACZ,aAIP,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,kQAI5B,EAEP,KAAK,IAAI,CACR,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAC,OAAO,iBAAa,mBAAmB,YAChF,KAAK,GACA,CACT,EAED,KAAC,KAAK,IAAC,OAAO,EAAC,UAAU,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,YAC3C,SAAS,CAAC,CAAC,CAAC,CACX,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,YAC3D,KAAC,gBAAgB,kBAAY,2BAA2B,GAAG,GACvD,CACP,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAC9B,KAAC,UAAU,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAC,gBAAgB,gEAEpC,CACd,CAAC,CAAC,CAAC,CACF,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CACjC,MAAC,GAAG,eACD,KAAK,GAAG,CAAC,IAAI,KAAC,OAAO,KAAG,EACzB,KAAC,WAAW,IACV,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,eAAe,KAAK,KAAK,CAAC,QAAQ,EAC3C,KAAK,EAAE,GAAG,EACV,QAAQ,EAAE,MAAM,GAChB,KARM,KAAK,CAAC,QAAQ,CASlB,CACP,CAAC,CACH,GACK,EAER,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,YAAY,0CAEvC,EACb,KAAC,KAAK,IAAC,OAAO,EAAC,UAAU,EAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,iBAAc,eAAe,YAChE,aAAa,CAAC,CAAC,CAAC,CACf,KAAC,gBAAgB,IAAC,IAAI,EAAE,EAAE,gBAAa,uBAAuB,GAAG,CAClE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAC3B,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,+DAA4D,CAC/F,CAAC,CAAC,CAAC,CACF,MAAC,KAAK,IAAC,OAAO,EAAE,GAAG,aACjB,MAAC,UAAU,uBAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAc,EAC5D,MAAC,UAAU,8BACG,GAAG,EACd,MAAM,CAAC,SAAS,KAAK,MAAM;wCAC1B,CAAC,CAAC,sEAAsE;wCACxE,CAAC,CAAC,gDAAgD,IACzC,EACb,MAAC,UAAU,0DAC+B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,IAAI,WAAW,IAChF,EACb,MAAC,UAAU,+DACoC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,IAAI,WAAW,IACzF,EACb,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,EAAC,OAAO,EAAC,OAAO,iHAErC,IACP,CACT,GACK,IACS,GACP,CACb,CAAC;AACJ,CAAC"}

package/dist/ai/ui/RequireAiEnabled.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Route guard: render `children` only while AI is switched on in this
+ * deployment (issue #899, moved from the reference app, issues #425 and #419).
+ *
+ * The FEATURE half of an AI route's gate; `RequirePermission` is the
+ * permission half, and the app nests this inside it so a user without the
+ * permission is redirected without the feature question mattering. Every AI
+ * route uses it except `/admin/settings/ai`, which is where AI is switched on
+ * and so must stay reachable while it is off.
+ *
+ * WHILE THE FIRST ANSWER IS IN FLIGHT this renders a spinner, not the
+ * fallback: `useAiConfig` fails closed (`enabled: false`) until it knows, and
+ * redirecting on that provisional answer would bounce every deep link to `/ai`
+ * back home before the real answer arrived. Once the answer is in, a refresh
+ * never flips `isLoading` again, so the guarded page is not unmounted by its
+ * own re-read.
+ */
+import type { ReactElement, ReactNode } from 'react';
+/**
+ * What {@link RequireAiEnabled} takes.
+ *
+ * @stability experimental
+ */
+export interface RequireAiEnabledProps {
+    /** The guarded route element. */
+    children: ReactNode;
+    /** Rendered when AI is off. Defaults to a replace-redirect to `/`, like every settings route. */
+    fallback?: ReactNode;
+}
+/**
+ * Renders `children` only while AI is on; a spinner while the first answer of
+ * `GET /ai/config` is in flight; the fallback once it says off.
+ *
+ * @param props - see {@link RequireAiEnabledProps}.
+ * @returns the children, the spinner or the fallback.
+ *
+ * @example
+ * ```tsx
+ * <RequirePermission permission="ai:use">
+ *   <RequireAiEnabled><AiPlaygroundPage /></RequireAiEnabled>
+ * </RequirePermission>
+ * ```
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export declare function RequireAiEnabled({ children, fallback, }: RequireAiEnabledProps): ReactElement;
+//# sourceMappingURL=RequireAiEnabled.d.ts.map

package/dist/ai/ui/RequireAiEnabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequireAiEnabled.d.ts","sourceRoot":"","sources":["../../../src/ai/ui/RequireAiEnabled.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAMrD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,iCAAiC;IACjC,QAAQ,EAAE,SAAS,CAAC;IACpB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,QAAQ,EACR,QAAsC,GACvC,EAAE,qBAAqB,GAAG,YAAY,CAMtC"}

package/dist/ai/ui/RequireAiEnabled.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, Fragment as _Fragment } from "react/jsx-runtime";
+import { Navigate } from 'react-router-dom';
+import { useAiConfig } from '../headless/use-ai-config.js';
+import { AiSpinner } from './internal/AiSpinner.js';
+/**
+ * Renders `children` only while AI is on; a spinner while the first answer of
+ * `GET /ai/config` is in flight; the fallback once it says off.
+ *
+ * @param props - see {@link RequireAiEnabledProps}.
+ * @returns the children, the spinner or the fallback.
+ *
+ * @example
+ * ```tsx
+ * <RequirePermission permission="ai:use">
+ *   <RequireAiEnabled><AiPlaygroundPage /></RequireAiEnabled>
+ * </RequirePermission>
+ * ```
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export function RequireAiEnabled({ children, fallback = _jsx(Navigate, { to: "/", replace: true }), }) {
+    const { config, isLoading } = useAiConfig();
+    if (isLoading)
+        return _jsx(AiSpinner, {});
+    if (!config.enabled)
+        return _jsx(_Fragment, { children: fallback });
+    return _jsx(_Fragment, { children: children });
+}
+//# sourceMappingURL=RequireAiEnabled.js.map

package/dist/ai/ui/RequireAiEnabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequireAiEnabled.js","sourceRoot":"","sources":["../../../src/ai/ui/RequireAiEnabled.tsx"],"names":[],"mappings":";AAmBA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAcpD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,QAAQ,EACR,QAAQ,GAAG,KAAC,QAAQ,IAAC,EAAE,EAAC,GAAG,EAAC,OAAO,SAAG,GAChB;IACtB,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,EAAE,CAAC;IAE5C,IAAI,SAAS;QAAE,OAAO,KAAC,SAAS,KAAG,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,4BAAG,QAAQ,GAAI,CAAC;IAC5C,OAAO,4BAAG,QAAQ,GAAI,CAAC;AACzB,CAAC"}

package/dist/ai/ui/UserAiKeysPage.d.ts

@@ -0,0 +1,32 @@
+import type { PageSlotsBase } from '../../core/index.js';
+/**
+ * The slots of {@link UserAiKeysPage}: the page-slot contract. `Sections` is
+ * where an app adds a key of its own that is not an AI provider's (a
+ * transcription vendor, a search API) beside the AI keys.
+ *
+ * @example
+ * ```tsx
+ * <UserAiKeysPage slots={{ Sections: ({ position }) => (position === 'bottom' ? <SearchApiKeyCard /> : null) }} />
+ * ```
+ *
+ * @extensionPoint slot
+ * @stability experimental
+ */
+export type UserAiKeysPageSlots = PageSlotsBase;
+/**
+ * The props of {@link UserAiKeysPage}.
+ *
+ * @stability experimental
+ */
+export interface UserAiKeysPageProps {
+    /** Optional extension slots; omitted, the page renders exactly as it always did. */
+    slots?: UserAiKeysPageSlots;
+}
+/**
+ * The user's AI keys page (`/settings/ai`): their own provider keys, the
+ * models they can use, their default model and their usage. Needs `ai:use`.
+ *
+ * @stability experimental
+ */
+export default function UserAiKeysPage(props?: UserAiKeysPageProps): import("react").JSX.Element;
+//# sourceMappingURL=UserAiKeysPage.d.ts.map

package/dist/ai/ui/UserAiKeysPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAiKeysPage.d.ts","sourceRoot":"","sources":["../../../src/ai/ui/UserAiKeysPage.tsx"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAkBzD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,KAAK,CAAC,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,KAAK,GAAE,mBAAwB,+BAkHrE"}

package/dist/ai/ui/UserAiKeysPage.js

@@ -0,0 +1,74 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * Settings → AI Keys (`/settings/ai`) — issue #430, epic #419.
+ *
+ * Bring your own key: one card per provider the administrator has enabled,
+ * where the user saves (server-verified), tests and removes their own key;
+ * then the models that key (or the organisation's) can reach, and the user's
+ * default model — the one part stored in the user settings document
+ * (`ai.defaultModel`, PATCH `/api/user-settings`) — and, last, the user's own
+ * usage over the last 30 days (#444), a section of this page rather than a tab.
+ *
+ * A THIN PAGE WRAPPER, NOT `UserSettingsSection` — the same call as
+ * `UserTokensPage`. Keys are their own resource behind `/api/ai/keys`, not part
+ * of the user settings document, and each card owns its own inline errors.
+ *
+ * Reachability is gated outside this file: the route wraps it in
+ * `RequirePermission('ai:use')` and `RequireAiEnabled`, and the registry card
+ * is feature-gated on AI being enabled (#425). The `ai:use` re-check below is
+ * defence in depth for a render reached some other way.
+ */
+import { Alert, Box, CircularProgress, Container, Stack, Typography } from '@mui/material';
+import { Navigate } from 'react-router-dom';
+import { PageSlotsFrame, usePlatformViewer } from '../../core/index.js';
+import { useAiConfig } from '../headless/use-ai-config.js';
+import { useUserAiKeys } from '../headless/use-user-ai-keys.js';
+import { useUsableAiModels } from '../headless/use-usable-ai-models.js';
+import { useAiUserSettings } from '../headless/use-ai-user-settings.js';
+import { UserAiKeyCard } from './user/UserAiKeyCard.js';
+import { KeylessProviderCard } from './user/KeylessProviderCard.js';
+import { UsableAiModelsList } from './user/UsableAiModelsList.js';
+import { DefaultAiModelPicker } from './user/DefaultAiModelPicker.js';
+import { MyAiUsageSection } from './user/MyAiUsageSection.js';
+/** The page title (mirrors the `AI Keys` card in `config/userSettingsSections.tsx`). */
+const USER_AI_KEYS_TITLE = 'AI Keys';
+/** The page subtitle. */
+const USER_AI_KEYS_DESCRIPTION = 'Your key is encrypted, never shown again, and only used for requests you make. You are billed by the provider.';
+/**
+ * The user's AI keys page (`/settings/ai`): their own provider keys, the
+ * models they can use, their default model and their usage. Needs `ai:use`.
+ *
+ * @stability experimental
+ */
+export default function UserAiKeysPage(props = {}) {
+    const { slots } = props;
+    const { hasPermission } = usePlatformViewer();
+    const { config, isLoading: configLoading } = useAiConfig();
+    const { keys, isLoading: keysLoading, error: keysError, setKey, deleteKey, testKey } = useUserAiKeys();
+    const usable = useUsableAiModels();
+    // `syncTheme: false` — this page never edits the theme, so loading the
+    // settings document must not push the stored theme into the shell.
+    const { settings, isLoading: settingsLoading, updateSettings } = useAiUserSettings();
+    const refreshModels = usable.refresh;
+    if (!hasPermission('ai:use')) {
+        return _jsx(Navigate, { to: "/", replace: true });
+    }
+    const providers = config.providers.filter((provider) => provider.enabled);
+    // Whose calls the organisation's key covers when they have no key of their
+    // own. Everyone under `byok_with_org_fallback`; and an AI administrator
+    // (`ai_config:write`, the string `/api/admin/ai/*` enforces) under ANY
+    // policy — the API's key resolver serves them from the org key they
+    // configured (#593), and `/api/ai/models` reports those models with
+    // `keySource: 'org'`. This only shapes the copy; the API decides.
+    const isAiAdmin = hasPermission('ai_config:write');
+    const orgCoversCaller = config.keyPolicy === 'byok_with_org_fallback' || isAiAdmin;
+    const showAdminOrgKeyNotice = isAiAdmin && providers.some((provider) => provider.requiresKey !== false && provider.hasOrgKey);
+    const providerNames = Object.fromEntries(config.providers.map((provider) => [provider.id, provider.displayName]));
+    const saveDefaultModel = async (defaultModel) => {
+        await updateSettings({ ai: { defaultModel } });
+    };
+    return (_jsx(Container, { maxWidth: "md", children: _jsx(Box, { sx: { py: { xs: 2, md: 4 } }, children: _jsx(PageSlotsFrame, { slots: slots, headerProps: { title: USER_AI_KEYS_TITLE, description: USER_AI_KEYS_DESCRIPTION, actions: null }, header: _jsxs(_Fragment, { children: [_jsx(Typography, { variant: "h4", component: "h1", gutterBottom: true, children: USER_AI_KEYS_TITLE }), _jsx(Typography, { color: "text.secondary", sx: { mb: 3 }, children: USER_AI_KEYS_DESCRIPTION })] }), children: configLoading || keysLoading ? (_jsx(Box, { sx: { display: 'flex', justifyContent: 'center', py: 4 }, children: _jsx(CircularProgress, { "aria-label": "Loading AI keys" }) })) : providers.length === 0 ? (_jsx(Alert, { severity: "info", children: "Your administrator hasn't enabled any AI provider yet." })) : (_jsxs(Stack, { spacing: 3, children: [showAdminOrgKeyNotice && (_jsx(Alert, { severity: "info", children: "As an administrator, your AI calls use the organization key configured in Admin \u2192 AI. Add a personal key below only if you want to use your own account instead." })), keysError && _jsx(Alert, { severity: "error", children: keysError }), providers.map((provider) => 
+                        // A keyless server (#448) has no key to add — say so instead.
+                        provider.requiresKey === false ? (_jsx(KeylessProviderCard, { provider: provider }, provider.id)) : (_jsx(UserAiKeyCard, { provider: provider, keyView: keys.find((entry) => entry.provider === provider.id), orgFallback: orgCoversCaller && provider.hasOrgKey, onSave: setKey, onTest: testKey, onRemove: deleteKey, onChanged: () => void refreshModels() }, provider.id))), _jsx(UsableAiModelsList, { models: usable.models, isLoading: usable.isLoading, error: usable.error, providerNames: providerNames }), config.perUserDefaultModel !== false && (_jsx(DefaultAiModelPicker, { models: usable.models, value: settings?.ai?.defaultModel, onChange: saveDefaultModel, disabled: settingsLoading || usable.isLoading || !settings, providerNames: providerNames })), _jsx(MyAiUsageSection, {})] })) }) }) }));
+}
+//# sourceMappingURL=UserAiKeysPage.js.map

package/dist/ai/ui/UserAiKeysPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAiKeysPage.js","sourceRoot":"","sources":["../../../src/ai/ui/UserAiKeysPage.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D,wFAAwF;AACxF,MAAM,kBAAkB,GAAG,SAAS,CAAC;AACrC,yBAAyB;AACzB,MAAM,wBAAwB,GAC5B,gHAAgH,CAAC;AA2BnH;;;;;GAKG;AACH,MAAM,CAAC,OAAO,UAAU,cAAc,CAAC,QAA6B,EAAE;IACpE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,EAAE,aAAa,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,CAAC;IAC3D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAClF,aAAa,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,uEAAuE;IACvE,mEAAmE;IACnE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACrF,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;IAErC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAC,QAAQ,IAAC,EAAE,EAAC,GAAG,EAAC,OAAO,SAAG,CAAC;IACrC,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,kEAAkE;IAClE,MAAM,SAAS,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,KAAK,wBAAwB,IAAI,SAAS,CAAC;IACnF,MAAM,qBAAqB,GACzB,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClG,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CACtC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CACxE,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,YAAmC,EAAE,EAAE;QACrE,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,OAAO,CACL,KAAC,SAAS,IAAC,QAAQ,EAAC,IAAI,YACtB,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,YAC/B,KAAC,cAAc,IACb,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,EAChG,MAAM,EACJ,8BACE,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,YAAY,kBACjD,kBAAkB,GACR,EACb,KAAC,UAAU,IAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAC7C,wBAAwB,GACd,IACZ,YAIN,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,CAC9B,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,YAC3D,KAAC,gBAAgB,kBAAY,iBAAiB,GAAG,GAC7C,CACP,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAC3B,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,uEAAoE,CAC3F,CAAC,CAAC,CAAC,CACF,MAAC,KAAK,IAAC,OAAO,EAAE,CAAC,aACd,qBAAqB,IAAI,CACxB,KAAC,KAAK,IAAC,QAAQ,EAAC,MAAM,sLAGd,CACT,EACA,SAAS,IAAI,KAAC,KAAK,IAAC,QAAQ,EAAC,OAAO,YAAE,SAAS,GAAS,EAExD,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;wBAC1B,8DAA8D;wBAC9D,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAC/B,KAAC,mBAAmB,IAAmB,QAAQ,EAAE,QAAQ,IAA/B,QAAQ,CAAC,EAAE,CAAwB,CAC9D,CAAC,CAAC,CAAC,CACF,KAAC,aAAa,IAEZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC,EAC7D,WAAW,EAAE,eAAe,IAAI,QAAQ,CAAC,SAAS,EAClD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,SAAS,EACnB,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,aAAa,EAAE,IAPhC,QAAQ,CAAC,EAAE,CAQhB,CACH,CACF,EAED,KAAC,kBAAkB,IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,SAAS,EAAE,MAAM,CAAC,SAAS,EAC3B,KAAK,EAAE,MAAM,CAAC,KAAK,EACnB,aAAa,EAAE,aAAa,GAC5B,EAKD,MAAM,CAAC,mBAAmB,KAAK,KAAK,IAAI,CACvC,KAAC,oBAAoB,IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EACjC,QAAQ,EAAE,gBAAgB,EAC1B,QAAQ,EAAE,eAAe,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,QAAQ,EAC1D,aAAa,EAAE,aAAa,GAC5B,CACH,EAED,KAAC,gBAAgB,KAAG,IACd,CACT,GACgB,GACb,GACI,CACb,CAAC;AACJ,CAAC"}

package/dist/ai/ui/admin/AiGenericProviderCard.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The generic AI provider card (PP-14.6, issue #924, epic #918).
+ *
+ * Draws any provider no bespoke card is registered for — in practice a
+ * provider an app or package added with `registerAiProvider`
+ * (`@marinoscar/platform-api/ai`). Nothing about the provider is known here:
+ * the card is generated from the descriptor the API serves in
+ * `GET /admin/ai/config` (`descriptors`): a switch for `enabled`, a control per
+ * settings field (a select for an enum, a text input for a string, ...) through
+ * the settings slice's `PluggableConfigForm`, and, when the provider needs one,
+ * the write-only key field.
+ *
+ * It saves exactly as the bespoke cards do (see `AiProviderCard`'s header):
+ *
+ *   - `enabled` and the provider's settings are part of the page's FORM, held
+ *     as an `AiProviderFormValue` and saved with "Save changes" in the one
+ *     `PUT /admin/ai/config`, as `{ enabled, ...settings }`;
+ *   - the deployment KEY is not: "Save key", "Test" and "Remove key" act at
+ *     once through `PUT`/`DELETE /admin/ai/providers/:provider/key`, and the
+ *     key is typed into a write-only field that lives in this card's own state
+ *     and is cleared the moment the server answers.
+ *
+ * The API validates every save; this card checks only what it can cheaply.
+ */
+import type { AiProviderCardProps } from './AiProviderCard.js';
+/**
+ * The card the admin AI page draws for a provider that has no registered card:
+ * a switch, the provider's own settings and a write-only key, all generated
+ * from the descriptor in `props.descriptor`. Also usable inside a bespoke card
+ * that only wants to add to it.
+ *
+ * @param props - see {@link AiProviderCardProps}.
+ * @returns the card.
+ *
+ * @example
+ * ```tsx
+ * registerAiProviderCard('example-transcribe', (props) => (
+ *   <>
+ *     <Alert severity="info">Transcription bills per minute.</Alert>
+ *     <AiGenericProviderCard {...props} />
+ *   </>
+ * ));
+ * ```
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export declare function AiGenericProviderCard({ provider, value, onChange, canWrite, errors, aiEnabled, keyAction, busy, keyError, onClearKeyError, onSaveKey, onRemoveKey, isProbing, probeError, onClearProbeError, testResult, onClearTestResult, onTest, descriptor, }: AiProviderCardProps): import("react").JSX.Element;
+//# sourceMappingURL=AiGenericProviderCard.d.ts.map

package/dist/ai/ui/admin/AiGenericProviderCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiGenericProviderCard.d.ts","sourceRoot":"","sources":["../../../../src/ai/ui/admin/AiGenericProviderCard.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAWH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AA2B/D;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,SAAS,EACT,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,eAAe,EACf,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,MAAM,EACN,UAAU,GACX,EAAE,mBAAmB,+BAsLrB"}

package/dist/ai/ui/admin/AiGenericProviderCard.js

@@ -0,0 +1,123 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The generic AI provider card (PP-14.6, issue #924, epic #918).
+ *
+ * Draws any provider no bespoke card is registered for — in practice a
+ * provider an app or package added with `registerAiProvider`
+ * (`@marinoscar/platform-api/ai`). Nothing about the provider is known here:
+ * the card is generated from the descriptor the API serves in
+ * `GET /admin/ai/config` (`descriptors`): a switch for `enabled`, a control per
+ * settings field (a select for an enum, a text input for a string, ...) through
+ * the settings slice's `PluggableConfigForm`, and, when the provider needs one,
+ * the write-only key field.
+ *
+ * It saves exactly as the bespoke cards do (see `AiProviderCard`'s header):
+ *
+ *   - `enabled` and the provider's settings are part of the page's FORM, held
+ *     as an `AiProviderFormValue` and saved with "Save changes" in the one
+ *     `PUT /admin/ai/config`, as `{ enabled, ...settings }`;
+ *   - the deployment KEY is not: "Save key", "Test" and "Remove key" act at
+ *     once through `PUT`/`DELETE /admin/ai/providers/:provider/key`, and the
+ *     key is typed into a write-only field that lives in this card's own state
+ *     and is cleared the moment the server answers.
+ *
+ * The API validates every save; this card checks only what it can cheaply.
+ */
+import { useEffect, useMemo, useState } from 'react';
+import { Accordion, AccordionDetails, AccordionSummary, Box, Chip, Divider, FormControlLabel, Paper, Stack, Switch, Typography } from '@mui/material';
+import ExpandMoreIcon from '@mui/icons-material/ExpandMore';
+import { PluggableConfigForm } from '../../../settings/index.js';
+import { aiProviderSettingsFields } from '../../headless/types.js';
+import { AiCapabilityChips } from '../shared/AiCapabilityChips.js';
+import { providerSettingValue, withProviderSetting } from './aiProviderForm.js';
+import { AiProviderKeyActions, keyHelperText, MIN_KEY_LENGTH } from './AiProviderKeyActions.js';
+/** The descriptor's name for the deployment key field. */
+const KEY_FIELD = 'apiKey';
+/**
+ * A descriptor for a provider the API sent none for (an API older than #924):
+ * its settings fields as text inputs and a key field.
+ */
+function fallbackDescriptor(provider) {
+    return {
+        kind: 'ai-provider',
+        id: provider.id,
+        label: provider.displayName,
+        fields: [
+            ...aiProviderSettingsFields(provider).map((name) => ({ kind: 'string', name, label: name })),
+            { kind: 'secret', name: KEY_FIELD, label: 'API key', hasValue: provider.keyStatus.configured, required: false },
+        ],
+    };
+}
+/** The key field's help when nothing is stored: the provider's own line, else a plain one. */
+function emptyKeyHelp(provider) {
+    return provider.help?.key ?? 'No organization key is stored yet.';
+}
+/**
+ * The card the admin AI page draws for a provider that has no registered card:
+ * a switch, the provider's own settings and a write-only key, all generated
+ * from the descriptor in `props.descriptor`. Also usable inside a bespoke card
+ * that only wants to add to it.
+ *
+ * @param props - see {@link AiProviderCardProps}.
+ * @returns the card.
+ *
+ * @example
+ * ```tsx
+ * registerAiProviderCard('example-transcribe', (props) => (
+ *   <>
+ *     <Alert severity="info">Transcription bills per minute.</Alert>
+ *     <AiGenericProviderCard {...props} />
+ *   </>
+ * ));
+ * ```
+ *
+ * @extensionPoint component
+ * @stability experimental
+ */
+export function AiGenericProviderCard({ provider, value, onChange, canWrite, errors, aiEnabled, keyAction, busy, keyError, onClearKeyError, onSaveKey, onRemoveKey, isProbing, probeError, onClearProbeError, testResult, onClearTestResult, onTest, descriptor, }) {
+    const switchId = `ai-provider-${provider.id}-enabled`;
+    /** WRITE-ONLY: never part of the page form; cleared once the server answers. */
+    const [apiKey, setApiKey] = useState('');
+    useEffect(() => {
+        setApiKey('');
+    }, [provider.keyStatus]);
+    const status = provider.keyStatus;
+    const typedKey = apiKey.trim();
+    const keyTooShort = typedKey.length > 0 && typedKey.length < MIN_KEY_LENGTH;
+    const unregistered = !provider.registered;
+    const full = descriptor ?? fallbackDescriptor(provider);
+    // `enabled` is the header's switch; the endpoint's help is the provider's own when it declares one.
+    const settingFields = useMemo(() => full.fields
+        .filter((field) => field.kind !== 'secret' && field.name !== 'enabled')
+        .map((field) => field.name === 'baseUrl' && field.kind === 'string' && provider.help?.baseUrl
+        ? { ...field, help: provider.help.baseUrl }
+        : field), [full, provider.help?.baseUrl]);
+    const keyFields = useMemo(() => full.fields.filter((field) => field.kind === 'secret'), [full]);
+    const settingsDescriptor = useMemo(() => ({ ...full, fields: settingFields }), [full, settingFields]);
+    const keyDescriptor = useMemo(() => ({ ...full, label: `${full.label} key`, fields: keyFields }), [full, keyFields]);
+    const formValue = useMemo(() => Object.fromEntries(settingFields.map((field) => [field.name, providerSettingValue(value, field.name)])), [settingFields, value]);
+    const handleSaveKey = async () => {
+        if (!typedKey || keyTooShort)
+            return;
+        // Cleared once the server has answered, WHATEVER it answered (see AiProviderCard).
+        await onSaveKey(typedKey);
+        setApiKey('');
+    };
+    return (_jsxs(Paper, { variant: "outlined", sx: { p: { xs: 2, sm: 3 } }, "data-testid": `ai-provider-${provider.id}`, children: [_jsxs(Stack, { direction: { xs: 'column', sm: 'row' }, spacing: 1, sx: { alignItems: { sm: 'center' }, justifyContent: 'space-between' }, children: [_jsxs(Box, { children: [_jsx(Typography, { variant: "h6", component: "h3", children: provider.displayName }), _jsxs(Stack, { direction: "row", spacing: 1, sx: { alignItems: 'center' }, children: [_jsx(Typography, { variant: "body2", color: "text.secondary", children: provider.id }), unregistered && _jsx(Chip, { size: "small", color: "warning", label: "Not available in this build" })] })] }), _jsx(FormControlLabel, { control: _jsx(Switch, { id: switchId, checked: value.enabled, onChange: (e) => onChange({ ...value, enabled: e.target.checked }), 
+                            // Off is always allowed; on only for a provider this build has.
+                            disabled: !canWrite || (unregistered && !value.enabled), slotProps: { input: { 'aria-label': `Enable ${provider.displayName}` } } }), label: value.enabled ? 'Enabled' : 'Disabled' })] }), full.description && (_jsx(Typography, { variant: "body2", color: "text.secondary", sx: { mt: 1 }, children: full.description })), provider.supportedCapabilities.length > 0 && (_jsx(Box, { sx: { mt: 1 }, children: _jsx(AiCapabilityChips, { capabilities: provider.supportedCapabilities }) })), settingFields.length > 0 && (_jsxs(Accordion, { disableGutters: true, elevation: 0, defaultExpanded: true, sx: { mt: 2, '&::before': { display: 'none' }, backgroundColor: 'transparent' }, children: [_jsx(AccordionSummary, { expandIcon: _jsx(ExpandMoreIcon, {}), "aria-controls": `ai-provider-${provider.id}-settings`, sx: { px: 0 }, children: _jsx(Typography, { variant: "subtitle2", children: "Settings" }) }), _jsxs(AccordionDetails, { sx: { px: 0 }, id: `ai-provider-${provider.id}-settings`, children: [_jsx(PluggableConfigForm, { descriptor: settingsDescriptor, value: formValue, onChange: (name, next) => onChange(withProviderSetting(value, name, next)), secrets: {}, onSecretChange: () => undefined, disabled: !canWrite }), (errors?.baseUrl || errors?.apiVersion) && (_jsx(Typography, { variant: "body2", color: "error", sx: { mt: 1 }, role: "alert", children: errors.baseUrl ?? errors.apiVersion }))] })] })), _jsx(Divider, { sx: { my: 2 } }), _jsx(Typography, { variant: "subtitle1", component: "h4", gutterBottom: true, children: "Organization key" }), keyFields.length > 0 ? (_jsx(PluggableConfigForm, { descriptor: keyDescriptor, value: {}, onChange: () => undefined, secrets: { [KEY_FIELD]: apiKey }, onSecretChange: (_name, next) => setApiKey(next), disabled: !canWrite, slots: {
+                    secretField: {
+                        textField: {
+                            label: `${provider.displayName} API key`,
+                            placeholder: status.configured ? (status.hint ?? '••••••••') : '',
+                            error: keyTooShort,
+                            helperText: keyTooShort
+                                ? `An API key is at least ${MIN_KEY_LENGTH} characters.`
+                                : status.configured
+                                    ? keyHelperText(status)
+                                    : emptyKeyHelp(provider),
+                        },
+                    },
+                } })) : (_jsx(Typography, { variant: "body2", color: "text.secondary", children: "No key needed \u2014 this provider does not use one." })), _jsx(AiProviderKeyActions, { providerName: provider.displayName, canWrite: canWrite, unregistered: unregistered, status: status, typedKey: typedKey, keyTooShort: keyTooShort, savedKeyless: keyFields.length === 0, busy: busy, keyAction: keyAction, isProbing: isProbing, aiEnabled: aiEnabled, keyError: keyError, onClearKeyError: onClearKeyError, probeError: probeError, onClearProbeError: onClearProbeError, testResult: testResult, onClearTestResult: onClearTestResult, onSave: () => void handleSaveKey(), onRemove: onRemoveKey, onTest: () => onTest(typedKey) })] }));
+}
+//# sourceMappingURL=AiGenericProviderCard.js.map

package/dist/ai/ui/admin/AiGenericProviderCard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiGenericProviderCard.js","sourceRoot":"","sources":["../../../../src/ai/ui/admin/AiGenericProviderCard.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACtJ,OAAO,cAAc,MAAM,gCAAgC,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEhF,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhG,0DAA0D;AAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B;;;GAGG;AACH,SAAS,kBAAkB,CAAC,QAAyB;IACnD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,KAAK,EAAE,QAAQ,CAAC,WAAW;QAC3B,MAAM,EAAE;YACN,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;SAChH;KACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,oCAAoC,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,SAAS,EACT,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,eAAe,EACf,SAAS,EACT,WAAW,EACX,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,MAAM,EACN,UAAU,GACU;IACpB,MAAM,QAAQ,GAAG,eAAe,QAAQ,CAAC,EAAE,UAAU,CAAC;IACtD,gFAAgF;IAChF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEzC,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,cAAc,CAAC;IAC5E,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;IAE1C,MAAM,IAAI,GAAG,UAAU,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACxD,oGAAoG;IACpG,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CACH,IAAI,CAAC,MAAM;SACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;SACtE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO;QAC3E,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE;QAC3C,CAAC,CAAC,KAAK,CACV,EACL,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAC/B,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhG,MAAM,kBAAkB,GAAG,OAAO,CAAsB,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3H,MAAM,aAAa,GAAG,OAAO,CAC3B,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAClE,CAAC,IAAI,EAAE,SAAS,CAAC,CAClB,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CACvB,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC7G,CAAC,aAAa,EAAE,KAAK,CAAC,CACvB,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,IAAI,CAAC,QAAQ,IAAI,WAAW;YAAE,OAAO;QACrC,mFAAmF;QACnF,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1B,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,KAAK,IAAC,OAAO,EAAC,UAAU,EAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,iBAAe,eAAe,QAAQ,CAAC,EAAE,EAAE,aAC9F,MAAC,KAAK,IACJ,SAAS,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EACtC,OAAO,EAAE,CAAC,EACV,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE,aAErE,MAAC,GAAG,eACF,KAAC,UAAU,IAAC,OAAO,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,YACpC,QAAQ,CAAC,WAAW,GACV,EACb,MAAC,KAAK,IAAC,SAAS,EAAC,KAAK,EAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,aAC7D,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,YAC/C,QAAQ,CAAC,EAAE,GACD,EACZ,YAAY,IAAI,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,SAAS,EAAC,KAAK,EAAC,6BAA6B,GAAG,IACpF,IACJ,EACN,KAAC,gBAAgB,IACf,OAAO,EACL,KAAC,MAAM,IACL,EAAE,EAAE,QAAQ,EACZ,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;4BAClE,gEAAgE;4BAChE,QAAQ,EAAE,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EACvD,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,UAAU,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,GACxE,EAEJ,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAC7C,IACI,EAEP,IAAI,CAAC,WAAW,IAAI,CACnB,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAC7D,IAAI,CAAC,WAAW,GACN,CACd,EAEA,QAAQ,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,CAC5C,KAAC,GAAG,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAChB,KAAC,iBAAiB,IAAC,YAAY,EAAE,QAAQ,CAAC,qBAAqB,GAAI,GAC/D,CACP,EAEA,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAC3B,MAAC,SAAS,IACR,cAAc,QACd,SAAS,EAAE,CAAC,EACZ,eAAe,QACf,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,aAE/E,KAAC,gBAAgB,IACf,UAAU,EAAE,KAAC,cAAc,KAAG,mBACf,eAAe,QAAQ,CAAC,EAAE,WAAW,EACpD,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,YAEb,KAAC,UAAU,IAAC,OAAO,EAAC,WAAW,yBAAsB,GACpC,EACnB,MAAC,gBAAgB,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,eAAe,QAAQ,CAAC,EAAE,WAAW,aACxE,KAAC,mBAAmB,IAClB,UAAU,EAAE,kBAAkB,EAC9B,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAC1E,OAAO,EAAE,EAAE,EACX,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS,EAC/B,QAAQ,EAAE,CAAC,QAAQ,GACnB,EACD,CAAC,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,UAAU,CAAC,IAAI,CAC1C,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,OAAO,EAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAC,OAAO,YAClE,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,GACzB,CACd,IACgB,IACT,CACb,EAED,KAAC,OAAO,IAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,GAAI,EAE1B,KAAC,UAAU,IAAC,OAAO,EAAC,WAAW,EAAC,SAAS,EAAC,IAAI,EAAC,YAAY,uCAE9C,EACZ,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACtB,KAAC,mBAAmB,IAClB,UAAU,EAAE,aAAa,EACzB,KAAK,EAAE,EAAE,EACT,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,EACzB,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAChC,cAAc,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAChD,QAAQ,EAAE,CAAC,QAAQ,EACnB,KAAK,EAAE;oBACL,WAAW,EAAE;wBACX,SAAS,EAAE;4BACT,KAAK,EAAE,GAAG,QAAQ,CAAC,WAAW,UAAU;4BACxC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;4BACjE,KAAK,EAAE,WAAW;4BAClB,UAAU,EAAE,WAAW;gCACrB,CAAC,CAAC,0BAA0B,cAAc,cAAc;gCACxD,CAAC,CAAC,MAAM,CAAC,UAAU;oCACjB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;oCACvB,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;yBAC7B;qBACF;iBACF,GACD,CACH,CAAC,CAAC,CAAC,CACF,KAAC,UAAU,IAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,qEAErC,CACd,EAED,KAAC,oBAAoB,IACnB,YAAY,EAAE,QAAQ,CAAC,WAAW,EAClC,QAAQ,EAAE,QAAQ,EAClB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,EACpC,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,QAAQ,EAClB,eAAe,EAAE,eAAe,EAChC,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,aAAa,EAAE,EAClC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAC9B,IACI,CACT,CAAC;AACJ,CAAC"}

package/dist/ai/ui/admin/AiModelOverrideDialog.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Edit a model's capabilities — an administrator override (issue #429).
+ *
+ * `PATCH /admin/ai/models/:id` with `{ capabilities }` sets
+ * `capabilitySource: 'admin_override'`, and a later catalogue refresh never touches an
+ * overridden row (`docs/specs/ai-platform.md` §2.17). This is how an
+ * `unclassified` model — one the provider's classifier did not recognise —
+ * becomes enable-able, and how a wrong classification is corrected.
+ *
+ * Only the API's own vocabulary is offered (`AI_CAPABILITY_VALUES` and the
+ * modality lists), so every save is schema-valid; a string the current row
+ * carries that is not in that vocabulary is dropped rather than re-sent.
+ *
+ * The dialog also edits the model's LIMITS (#450) — an output-token cap and a
+ * per-user requests-per-minute limit. They are not model fields: they live in
+ * the AI configuration's `limits.perModel['<provider>:<modelId>']`, so the
+ * page saves them with a `PUT /admin/ai/config` beside the capability PATCH.
+ * This component only reports the entry as typed; blank means unlimited.
+ */
+import type { AiCapabilityDescriptor, AiModel, AiModelCapabilities, AiModelLimits } from '../../headless/types.js';
+export interface AiModelOverrideDialogProps {
+    /** `null` closes the dialog. */
+    model: AiModel | null;
+    isSaving: boolean;
+    error: string | null;
+    /** The model's current `limits.perModel` entry, if any — prefills the limit fields. */
+    limits?: AiModelLimits;
+    /**
+     * `true` when the AI configuration (where limits live) is not loaded, so
+     * the limit fields cannot be read or saved; they are shown disabled.
+     */
+    limitsUnavailable?: boolean;
+    /**
+     * The capabilities an app registered (`GET /admin/ai/capabilities`, PP-14.17),
+     * offered after the built-in groups. Without it only the built-ins are offered,
+     * and a capability the model declares that is not listed is dropped on save.
+     */
+    appCapabilities?: readonly AiCapabilityDescriptor[];
+    /** `limits` is the entry as typed; `{}` when both fields are blank. */
+    onSave: (capabilities: AiModelCapabilities, limits: AiModelLimits) => void;
+    onClose: () => void;
+}
+export declare function AiModelOverrideDialog({ model, isSaving, error, limits, limitsUnavailable, appCapabilities, onSave, onClose, }: AiModelOverrideDialogProps): import("react").JSX.Element | null;
+//# sourceMappingURL=AiModelOverrideDialog.d.ts.map

package/dist/ai/ui/admin/AiModelOverrideDialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiModelOverrideDialog.d.ts","sourceRoot":"","sources":["../../../../src/ai/ui/admin/AiModelOverrideDialog.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAqBH,OAAO,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAmInH,MAAM,WAAW,0BAA0B;IACzC,gCAAgC;IAChC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,uFAAuF;IACvF,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,uEAAuE;IACvE,MAAM,EAAE,CAAC,YAAY,EAAE,mBAAmB,EAAE,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,wBAAgB,qBAAqB,CAAC,EACpC,KAAK,EACL,QAAQ,EACR,KAAK,EACL,MAAM,EACN,iBAAyB,EACzB,eAAoB,EACpB,MAAM,EACN,OAAO,GACR,EAAE,0BAA0B,sCAiM5B"}