@maudecode/talaria-web 1.17.2 → 1.19.0

package/dist/projects.js

@@ -1,15 +1,15 @@
-/** `projects.json` (Python `load_projects`/`save_projects` with the one-time profile backfill). */
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { updateDocument } from './sessions/storage/document.js';
 import { randomUUID } from 'node:crypto';
 /** Python `CRON_PROJECT_NAME` / `WEBHOOK_PROJECT_NAME`: system projects that group background sessions per profile. */
 export const SYSTEM_PROJECTS = { cron: { name: 'Cron Jobs', color: '#6366f1' }, webhook: { name: 'Webhooks', color: '#0ea5e9' } };
 export class ProjectStore {
-    file;
+    documents;
     readIndexRows;
     isRootProfile;
     migrated = false;
-    constructor(file, readIndexRows, isRootProfile = (name) => name === 'default') {
-        this.file = file;
+    operations = Promise.resolve();
+    constructor(documents, readIndexRows, isRootProfile = (name) => name === 'default') {
+        this.documents = documents;
         this.readIndexRows = readIndexRows;
         this.isRootProfile = isRootProfile;
     }
@@ -18,74 +18,82 @@ export class ProjectStore {
         return r === active || (this.isRootProfile(r) && this.isRootProfile(active));
     }
     /** Python `_profile_has_user_projects`: at least one non-system project belongs to the profile (or its root alias). */
-    hasUserProjects(profile) {
+    async hasUserProjects(profile) {
         const reserved = new Set(Object.values(SYSTEM_PROJECTS).map((p) => p.name));
-        return this.load().some((p) => !reserved.has(p.name) && this.sameProfile(p.profile, profile));
+        return (await this.load()).some((p) => !reserved.has(p.name) && this.sameProfile(p.profile, profile));
     }
     /**
      * Python `ensure_cron_project` / `ensure_webhook_project`: the profile's system project by (name, profile),
      * a renamed-root alias match, or a legacy untagged row back-tagged to the caller; minted only when `create`.
      */
-    ensureSystemProject(kind, profile, opts = {}) {
+    async ensureSystemProject(kind, profile, opts = {}) {
         const spec = SYSTEM_PROJECTS[kind];
         const active = profile || 'default';
         // Raw rows: a legacy untagged system project is back-tagged to the caller here, not by the generic backfill.
-        const projects = this.load({ migrate: false });
-        for (const p of projects)
-            if (p.name === spec.name && this.sameProfile(p.profile, active) && (p.profile === active || this.isRootProfile(active)))
-                return p.project_id;
-        for (const p of projects)
-            if (p.name === spec.name && !p.profile) {
-                p.profile = active;
-                this.save(projects);
-                return p.project_id;
-            }
-        if (opts.create === false)
-            return null;
-        const project = { project_id: randomUUID().replace(/-/g, '').slice(0, 12), name: spec.name, color: spec.color, profile: active, created_at: Date.now() / 1000 };
-        projects.push(project);
-        this.save(projects);
-        return project.project_id;
+        return this.mutate((projects) => {
+            for (const p of projects)
+                if (p.name === spec.name && this.sameProfile(p.profile, active) && (p.profile === active || this.isRootProfile(active)))
+                    return p.project_id;
+            for (const p of projects)
+                if (p.name === spec.name && !p.profile) {
+                    p.profile = active;
+                    return p.project_id;
+                }
+            if (opts.create === false)
+                return null;
+            const project = { project_id: randomUUID().replace(/-/g, '').slice(0, 12), name: spec.name, color: spec.color, profile: active, created_at: Date.now() / 1000 };
+            projects.push(project);
+            return project.project_id;
+        }, { migrate: false });
     }
-    load(opts = {}) {
-        if (!existsSync(this.file))
-            return [];
-        let projects;
+    serialize(operation) {
+        const result = this.operations.then(operation);
+        this.operations = result.then(() => { }, () => { });
+        return result;
+    }
+    load(opts = {}) { return this.serialize(() => this.loadNow(opts)); }
+    /** The session-index backfill can yield; keep the whole project edit under the same lock. */
+    mutate(edit, opts = {}) {
+        return this.serialize(async () => (await updateDocument(this.documents, 'projects', 'projects', async (raw) => {
+            const projects = Array.isArray(raw) ? raw : [];
+            if ((opts.migrate ?? true) && !this.migrated)
+                await this.backfillProfiles(projects);
+            const result = edit(projects);
+            return { value: projects, result };
+        }, { replaceInvalid: true })));
+    }
+    async loadNow(opts) {
+        let raw;
         try {
-            const parsed = JSON.parse(readFileSync(this.file, 'utf8'));
-            projects = Array.isArray(parsed) ? parsed : [];
+            raw = (await this.documents.get('projects', 'projects'))?.value;
         }
         catch {
             return [];
         }
-        if ((opts.migrate ?? true) && !this.migrated) {
-            if (this.backfillProfiles(projects)) {
-                try {
-                    this.save(projects);
-                    this.migrated = true;
-                }
-                catch {
-                    /* retry on a later call */
-                }
-            }
-            else {
-                this.migrated = true;
-            }
+        const projects = Array.isArray(raw) ? raw : [];
+        if ((opts.migrate ?? true) && !this.migrated && Array.isArray(raw)) {
+            const result = await updateDocument(this.documents, 'projects', 'projects', async (value) => {
+                const current = Array.isArray(value) ? value : [];
+                await this.backfillProfiles(current);
+                return { value: current, result: current };
+            }, { replaceInvalid: true });
+            this.migrated = true;
+            return result;
         }
         return projects;
     }
-    save(projects) {
-        writeFileSync(this.file, JSON.stringify(projects, null, 2), 'utf8');
+    async save(projects) {
+        await updateDocument(this.documents, 'projects', 'projects', () => ({ value: projects, result: undefined }), { replaceInvalid: true });
     }
     /** Tag legacy untagged projects with the profile of an assigned session, else `default`. */
-    backfillProfiles(projects) {
+    async backfillProfiles(projects) {
         const untagged = projects.filter((p) => !p.profile);
         if (!untagged.length)
             return false;
         const byProject = new Map();
         try {
             const ids = new Set(untagged.map((p) => p.project_id).filter(Boolean));
-            for (const row of this.readIndexRows()) {
+            for (const row of await this.readIndexRows()) {
                 const pid = row.project_id;
                 if (typeof pid === 'string' && ids.has(pid) && typeof row.profile === 'string' && row.profile && !byProject.has(pid))
                     byProject.set(pid, row.profile);

package/dist/projects.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.js","sourceRoot":"","sources":["../src/projects.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,uHAAuH;AACvH,MAAM,CAAC,MAAM,eAAe,GAAgE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAA;AAE9L,MAAM,OAAO,YAAY;IAGF;IAA+B;IAAiE;IAF7G,QAAQ,GAAG,KAAK,CAAA;IAExB,YAAqB,IAAY,EAAmB,aAA8C,EAAmB,gBAA2C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS;QAAvK,SAAI,GAAJ,IAAI,CAAQ;QAAmB,kBAAa,GAAb,aAAa,CAAiC;QAAmB,kBAAa,GAAb,aAAa,CAA0D;IAAG,CAAC;IAExL,WAAW,CAAC,GAA8B,EAAE,MAAc;QAChE,MAAM,CAAC,GAAG,GAAG,IAAI,SAAS,CAAA;QAC1B,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,uHAAuH;IACvH,eAAe,CAAC,OAAe;QAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/F,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,IAAkC,EAAE,OAAe,EAAE,OAA6B,EAAE;QACtG,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,OAAO,IAAI,SAAS,CAAA;QACnC,6GAA6G;QAC7G,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,UAAU,CAAA;QACtK,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC,UAAU,CAAA;YAAC,CAAC;QAClI,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAA;QAC/J,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnB,OAAO,OAAO,CAAC,UAAU,CAAA;IAC3B,CAAC;IAED,IAAI,CAAC,OAA8B,EAAE;QACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACrC,IAAI,QAAmB,CAAA;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAA;YACrE,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,MAAoB,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;oBACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,2BAA2B;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACtB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,CAAC,QAAmB;QACtB,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACrE,CAAC;IAED,4FAA4F;IACpF,gBAAgB,CAAC,QAAmB;QAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YACtE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAA;gBAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YACvJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../src/projects.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAIxC,uHAAuH;AACvH,MAAM,CAAC,MAAM,eAAe,GAAgE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAA;AAE9L,MAAM,OAAO,YAAY;IAIM;IAA6C;IAAsG;IAHxK,QAAQ,GAAG,KAAK,CAAA;IAChB,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAErD,YAA6B,SAA0B,EAAmB,aAAmF,EAAmB,gBAA2C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS;QAA1N,cAAS,GAAT,SAAS,CAAiB;QAAmB,kBAAa,GAAb,aAAa,CAAsE;QAAmB,kBAAa,GAAb,aAAa,CAA0D;IAAG,CAAC;IAEnP,WAAW,CAAC,GAA8B,EAAE,MAAc;QAChE,MAAM,CAAC,GAAG,GAAG,IAAI,SAAS,CAAA;QAC1B,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,uHAAuH;IACvH,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3E,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;IACvG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,IAAkC,EAAE,OAAe,EAAE,OAA6B,EAAE;QAC5G,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,MAAM,GAAG,OAAO,IAAI,SAAS,CAAA;QACnC,6GAA6G;QAC7G,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,UAAU,CAAA;YACtK,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;oBAAC,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC;oBAAC,OAAO,CAAC,CAAC,UAAU,CAAA;gBAAC,CAAC;YAC7G,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAA;YACtC,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAA;YAC/J,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACtB,OAAO,OAAO,CAAC,UAAU,CAAA;QAC3B,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACxB,CAAC;IAEO,SAAS,CAAI,SAA2B;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC9C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAyB,CAAC,EAAE,GAAG,EAAE,GAAgC,CAAC,CAAC,CAAA;QACtG,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,CAAC,OAA8B,EAAE,IAAwB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,CAAC,CAAC;IAE9G,6FAA6F;IAC7F,MAAM,CAAI,IAAgC,EAAE,OAA8B,EAAE;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5G,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;YAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;YACnF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACpC,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAA2B;QAC/C,IAAI,GAAY,CAAA;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,KAAK,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAA;QAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,EAAE,CAAA;gBAC9D,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAA;gBACpC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;YAC5C,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;YAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;YACpB,OAAO,MAAM,CAAA;QACf,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAmB;QAC5B,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;IACxI,CAAC;IAED,4FAA4F;IACpF,KAAK,CAAC,gBAAgB,CAAC,QAAmB;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;QAC3C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;YACtE,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAA;gBAC1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;YACvJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,SAAS,CAAA;QAC9E,OAAO,IAAI,CAAA;IACb,CAAC;CACF"}

package/dist/providers/catalog.d.ts

@@ -1,19 +1,44 @@
+/**
+ * Provider cards, the model picker catalog, live model lists, quotas and cost
+ * history (Python `api/providers.py`, the `/api/models` parts of
+ * `api/config.py`, `_handle_live_models`).
+ *
+ * The Agent's own primitives (registry, auth status, live model ids, account
+ * usage) come through the sidecar; the static tables and key detection live
+ * here. ponytail: one live-id cache with a 24h TTL replaces the Python
+ * publisher/provenance machinery; `refresh()` evicts it.
+ */
+import type { DocumentBackend } from '../sessions/storage/backend.js';
 import type { SidecarLike } from '../sidecar/client.js';
-import type { SidecarResult } from '@maudecode/talaria-web-contracts';
+import type { CatalogAvailability, SidecarResult } from '@maudecode/talaria-web-contracts';
 import { type QuotaThresholds } from '../settings.js';
-import { type AgentConfig, type Config, type Dict } from '../config/agent-config.js';
+import { type AgentConfig, type Config, type Dict, type SpeedTier } from '../config/agent-config.js';
 export interface ModelEntry {
     id: string;
     label: string;
     supports_fast_tier?: boolean;
+    supported_speed_tiers?: SpeedTier[];
     provider_id?: string;
     bare_id?: string;
+    limit?: {
+        scope: 'model';
+        resets_at: string;
+    };
 }
 export interface ModelGroup {
+    availability?: CatalogAvailability;
     provider: string;
     provider_id: string;
     models: ModelEntry[];
     extra_models?: ModelEntry[];
+    limit?: {
+        scope: 'account';
+        resets_at: string;
+    } | {
+        scope: 'models';
+        models: Record<string, string>;
+    };
+    quota_level?: QuotaLevel;
 }
 /** TAL-301: the catalog entry a stored `(model, provider)` pair selects, so clients render the pairing instead of computing it. */
 export declare function catalogOptionId(catalog: ModelsCatalog, model: string | null, provider: string | null): string | null;
@@ -28,6 +53,7 @@ export declare function repairSessionModel(catalog: ModelsCatalog, model: string
 /** Python `_split_picker_overflow_models`: past 25 rows the picker shows 15, keeping the selected model visible. */
 export declare function splitPickerOverflow(models: ModelEntry[], selected: string, providerId: string): [ModelEntry[], ModelEntry[]];
 export interface ModelsCatalog {
+    availability?: CatalogAvailability;
     active_provider: string | null;
     default_model: string;
     default_provider_id?: string | null;
@@ -63,9 +89,9 @@ export interface CatalogDeps {
     /** Whether `profileHome` is the default profile's home (`$HERMES_HOME`). */
     isRootProfileHome: (profileHome: string) => boolean;
     /** WebUI state directory; holds `.quota_scope_id`, the stable public identity namespace for quota sources. */
-    stateDir?: string;
+    documents?: DocumentBackend;
     /** Settings `provider_quota_thresholds` for a profile; defaults when absent. */
-    quotaThresholds?: (profile: string) => QuotaThresholds;
+    quotaThresholds?: (profile: string) => Promise<QuotaThresholds>;
 }
 /** ISO-8601 UTC for epoch seconds, without a `.000` fraction. */
 export declare const isoAt: (seconds: number) => string;
@@ -134,6 +160,8 @@ export declare function classifyQuotaSource<T extends {
     windows: ClassifiedQuotaWindow[];
     urgency: QuotaUrgency;
 };
+/** A provider's name as the catalog lists it (a named custom endpoint's configured name, a plugin's display name), else its static display name. */
+export declare function providerLabel(catalog: ModelsCatalog | undefined, provider: string): string;
 export declare function displayName(pid: string): string;
 /** Python `_format_ollama_label`. */
 export declare function formatOllamaLabel(mid: string): string;
@@ -154,9 +182,12 @@ export declare function uniqueQuotaSources<T extends {
 }>(sources: T[]): T[];
 export declare class ProviderCatalog {
     private readonly deps;
+    private readonly scopedKeyRevisions;
+    private readonly scopedKeyAuthority;
+    private readonly credentialReads;
     /** Failed live lookups by home, provider, and the `sourceFingerprint` they ran under (TAL-542). */
     private readonly liveFailed;
-    /** `source`: the `sourceFingerprint` the ids were fetched under; another one makes them stale (TAL-542). */
+    /** `source`: the `sourceFingerprint` the ids were fetched under; another one makes them stale (TAL-542). `ttl`: seconds they stay fresh. */
     private readonly liveIds;
     private readonly liveInflight;
     /** `pooled`: the fill's `poolProviders` answer, null when unknown (TAL-638). */
@@ -172,13 +203,17 @@ export declare class ProviderCatalog {
         models: number;
         age_seconds: number | null;
     };
-    invalidate(profileHome?: string, provider?: string): void;
+    invalidate(profileHome?: string, provider?: string, opts?: {
+        preserveConfirmed?: boolean;
+    }): void;
     /** TAL-301: the entry id a stored `(model, provider)` pair selects in the last catalog built for this home; a cold home starts building one. */
     modelOptionFor(profileHome: string, model: string | null, provider: string | null): string | null;
+    /** TAL-821: `providerLabel` against the last catalog built for this home; a cold home starts building one. */
+    providerLabel(profileHome: string, provider: string): string;
     /**
      * TAL-542: the identity of the files a catalog and its live ids derive from: config.yaml, `.env`, the Agent's sign-in
      * store (`auth.json`, rewritten by an account switch), and the installed plugins directory, so a change outside Web
-     * makes both stale.
+     * makes both stale. Opaque scoped-key revisions cover external secret sources without exposing their keys.
      */
     private sourceFingerprint;
     /** The last catalog built for this home, younger than `maxAgeS`, while its source files are unchanged since (TAL-542). */
@@ -200,36 +235,64 @@ export declare class ProviderCatalog {
      * The process-environment value of `name` as a named profile may see it: values `loadStartupEnv` copied from the
      * default profile's `.env` belong to that profile only, so they never count for another profile.
      */
+    /** `cleared`: the variable a key delete clears, which also retires its `.env`-owned startup copy (TAL-641). */
     private processEnv;
-    /** Python `_provider_has_key` minus the credential pool, which `probeKey` reads from the sidecar. */
-    providerHasKey(pid: string, config: Config, envValues: Record<string, string>, profileHome: string): boolean;
+    /**
+     * Python `_provider_has_key` minus the credential pool, which `probeKey` reads from the sidecar.
+     * `cleared` (TAL-641) answers for after `setProviderKey(…, null)`: that variable's `.env` entry and startup copy are gone.
+     */
+    providerHasKey(pid: string, config: Config, envValues: Record<string, string>, profileHome: string, cleared?: string): boolean;
     private authStatus;
     /** `pooled`: the providers whose persisted credential pool holds an added account (TAL-638). */
     private probeKey;
     /** Live model ids from the Agent for one provider, cached per profile home. */
     liveModelIds(profileHome: string, pid: string, opts?: {
         force?: boolean;
+        source?: string;
     }): Promise<string[]>;
+    /** Whether the last live lookup for this provider under `source` failed or answered with the Agent's placeholder list. */
+    private liveLookupFailed;
     /**
      * TAL-288: the model-provider plugins installed and enabled in this profile, as the sidecar reads them from the Agent.
      * A failed lookup lists none, so every other provider stays usable; an id that cannot be a provider routing hint is dropped.
      */
     private pluginProviders;
+    /**
+     * TAL-798: the GGUFs staged for the Agent's managed llama.cpp provider, selectable before its server runs (a turn boots
+     * it). Null when none are staged or the listing failed, so every other provider stays usable.
+     */
+    private localModels;
     /** Python `get_providers`. */
     providers(profileHome: string): Promise<{
         providers: Dict[];
         active_provider: string | null;
+        availability: CatalogAvailability;
     }>;
     /** The cached `providers` answer, shared with `quotas`; callers never mutate it. */
     private providerRows;
     /** Python `get_available_models` (static catalog + live ids for keyed providers). */
-    models(profileHome: string): Promise<ModelsCatalog>;
+    models(profileHome: string, attempt?: number): Promise<ModelsCatalog>;
+    /**
+     * TAL-807: the picker catalog (`/api/models`) with each group's live pool rate limit, read per request so an expired one
+     * is gone, and its quota level. The cached catalog holds neither; a failed read leaves them out.
+     */
+    pickerModels(profileHome: string, profile: string): Promise<ModelsCatalog>;
+    /** TAL-807: account-usage reads the picker started, by `accountUsageCache` key. */
+    private readonly pickerUsageReads;
+    /**
+     * TAL-807: the TAL-411 `remaining` level of the tightest account-scope window in the provider's cached account-usage
+     * read; a model-family window (Opus or Sonnet weekly) never counts. A read past the cache TTL starts a new one, which
+     * the picker waits for only when it has no read at all, and then for at most `PICKER_USAGE_WAIT_MS`; one past
+     * `PICKER_USAGE_MAX_AGE_S` shows nothing.
+     */
+    private pickerQuotaLevel;
     /** Stamps the default's entry id and keeps the catalog for `modelOptionFor`. */
     private remember;
     /** Python `_configured_model_badges_from_static_catalog`: which picker rows are the main/fallback selections. */
     private badges;
     /** Python `_handle_live_models`. */
-    liveModels(profileHome: string, providerRaw: string): Promise<Dict>;
+    liveModels(profileHome: string, providerRaw: string, attempt?: number): Promise<Dict>;
+    private stampSpeedTiers;
     /**
      * Python `_resolve_model_context_length` inputs: the effective base URL, key, and any configured window for this
      * model under this profile (`model.context_length`, `providers.<p>.models[].context_length`, custom providers).
@@ -240,8 +303,11 @@ export declare class ProviderCatalog {
         config_context_length?: number | null;
     }>;
     private apiKeyFor;
+    /** A raw key or the names the Agent resolves inside the profile's secret scope. */
+    private usageKey;
     /** Account-usage snapshots by profile home, provider, and pool account. */
     private readonly accountUsageCache;
+    private quotaReadSequence;
     /**
      * Python `get_provider_quota`. `credential` scopes the read to one credential-pool account (TAL-548): a benched account
      * answers with its local pool state, and every other read uses that account's key.
@@ -250,6 +316,7 @@ export declare class ProviderCatalog {
         refresh?: boolean;
         at?: number;
         credential?: PoolEntry | null;
+        sequence?: number;
     }): Promise<Dict>;
     /**
      * TAL-548: the provider's credential-pool accounts as the sidecar reads them locally. Each says whether it holds
@@ -263,7 +330,7 @@ export declare class ProviderCatalog {
      * lookup, else null: an unknown pool, never an empty one, so no pool account is ever reported as removed.
      */
     private poolLookup;
-    /** TAL-548: the providers whose persisted credential pool holds an added account; none when the sidecar cannot say. */
+    /** One shared read of pool membership and scoped key revisions before reusing catalog data. */
     private poolProviders;
     /** TAL-548: one key-based balance read through the sidecar, which resolves a pool account's key itself; null when it fails. */
     private balance;
@@ -271,7 +338,7 @@ export declare class ProviderCatalog {
     /** Python `_quota_server_scope_id`: a 32-hex id persisted at `<state>/.quota_scope_id` (created atomically once). */
     private quotaServerScopeId;
     /** Python `_quota_profile_scope_id`. */
-    quotaProfileScopeId(profile: string): string;
+    quotaProfileScopeId(profile: string): Promise<string>;
     /**
      * Python `get_provider_quotas`: the stable-identity envelope the iOS widget persists. A keyed provider is one source per
      * credential-pool account, else one for its own key (Python `_quota_source_descriptors`, TAL-548). Each source id appears
@@ -280,7 +347,10 @@ export declare class ProviderCatalog {
     quotas(profileHome: string, profile: string, opts?: {
         sourceId?: string | null;
         refresh?: boolean;
-    }): Promise<Dict>;
+    }, attempt?: number): Promise<Dict>;
+    private readonly lastQuotaSources;
+    private staleQuotaSource;
+    private availability;
     /** Python `get_provider_cost_history` (OpenRouter only; daily snapshots under `<home>/cost-snapshots`). */
     costHistory(profileHome: string, providerRaw: string | null, days: number): Promise<Dict>;
     private readCostSnapshots;