@opengeni/react 6.5.2-canary.41607687019001 → 6.7.0

package/dist/chunk-SQJIKMN3.js

@@ -0,0 +1,366 @@
+"use client";
+import {
+  useAppContext
+} from "./chunk-JDFDPMKX.js";
+import {
+  Collapsible,
+  CollapsibleContent,
+  CollapsibleTrigger
+} from "./chunk-NKFTYEON.js";
+import {
+  isPermissionDenied,
+  userErrorText
+} from "./chunk-O4OOG3D6.js";
+import {
+  SelectMenu
+} from "./chunk-3CPWWGNK.js";
+import {
+  Notice
+} from "./chunk-FSOQDUCG.js";
+import {
+  Button
+} from "./chunk-7QQN3KNP.js";
+
+// src/app/components/capabilities/connector-tool-permissions.tsx
+import { useEffect, useLayoutEffect, useMemo, useRef, useState } from "react";
+import { ChevronRightIcon } from "lucide-react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+var groups = [
+  ["read", "Read-only tools"],
+  ["write", "Tools that make changes"],
+  ["other", "Other tools"]
+];
+function hasConnectorToolPermissionTarget(item, health) {
+  if (!item.enabled || item.kind !== "mcp" || item.source === "built_in" || item.surfaceType === "codex_apps" || item.connectionRef?.authoritySource === "host")
+    return false;
+  if (item.connectionRef || item.authKind === "oauth2" || item.authKind === "api_key") {
+    return (health.state === "connected" || health.state === "attention") && health.connection !== null && health.connection.status === "active";
+  }
+  return true;
+}
+var sentenceCase = (text) => text.charAt(0).toUpperCase() + text.slice(1);
+function permissionSourceText(tool) {
+  if (tool.resetReason) return "Action changed \xB7 reset to Ask first";
+  if (tool.source === "conflict") return "Two settings conflict, so it's blocked";
+  if (tool.conditional) return "Different choices for individual actions";
+  if (tool.source === "recommended") return "Recommended";
+  if (tool.source === "connector_default" || tool.inherited) return "Uses default choice";
+  return "Your choice";
+}
+function PermissionSelect({
+  label,
+  value,
+  disabled,
+  onChange,
+  resetLabel = "Use default"
+}) {
+  return /* @__PURE__ */ jsx(
+    SelectMenu,
+    {
+      "aria-label": label,
+      name: label,
+      value,
+      disabled,
+      size: "sm",
+      className: "w-40 shrink-0",
+      align: "end",
+      onValueChange: (next) => {
+        if (next !== "mixed") onChange(next === "default" ? null : next);
+      },
+      options: [
+        ...value === "mixed" ? [{ value: "mixed", label: "Mixed", disabled: true }] : [],
+        { value: "allow", label: "Allow", description: "Run without asking." },
+        { value: "ask", label: "Ask first", description: "Review each action before it runs." },
+        { value: "block", label: "Block", description: "Do not run this action." },
+        { value: "default", label: resetLabel }
+      ]
+    }
+  );
+}
+function ConnectorToolPermissions({
+  workspaceId,
+  capabilityId,
+  bare = false,
+  connectionId
+}) {
+  const { client } = useAppContext();
+  const [data, setData] = useState(null);
+  const [error, setError] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [generation, setGeneration] = useState(0);
+  const [saved, setSaved] = useState(false);
+  const [expandedGroups, setExpandedGroups] = useState([]);
+  const basePath = `${workspaceId}:${capabilityId}`;
+  const [account, setAccount] = useState(null);
+  const selectedAccount = useMemo(
+    () => connectionId ? { path: basePath, connectionId } : account?.path === basePath ? account : null,
+    [connectionId, basePath, account]
+  );
+  const path = `${basePath}:${selectedAccount?.connectionId ?? ""}:${selectedAccount?.instanceKey ?? ""}`;
+  const scope = useRef({ path, epoch: 0 });
+  const mutationController = useRef(null);
+  useLayoutEffect(() => {
+    scope.current = { path, epoch: scope.current.epoch + 1 };
+    setBusy(false);
+    setSaved(false);
+    setData(null);
+    setError(null);
+    return () => {
+      scope.current.epoch += 1;
+      mutationController.current?.abort();
+      mutationController.current = null;
+    };
+  }, [path, client]);
+  useEffect(() => {
+    const controller = new AbortController();
+    setData(null);
+    setError(null);
+    void client.getConnectorToolPermissions(workspaceId, capabilityId, {
+      signal: controller.signal,
+      ...selectedAccount ? { connectionId: selectedAccount.connectionId, instanceKey: selectedAccount.instanceKey } : {}
+    }).then((result) => {
+      if (!controller.signal.aborted) setData(result);
+    }).catch((failure) => {
+      if (controller.signal.aborted) return;
+      const connectionRequired = failure && typeof failure === "object" && "details" in failure && failure.details?.code === "connector_connection_required";
+      setError(
+        connectionRequired ? {
+          text: "Connect or reconnect an account above to manage its approvals.",
+          denied: true
+        } : isPermissionDenied(failure) ? {
+          text: "You can't see this connector's tool permissions. Ask a workspace admin for access.",
+          denied: true
+        } : {
+          text: `Couldn't load tool permissions. ${userErrorText(failure)}`,
+          denied: false
+        }
+      );
+    });
+    return () => controller.abort();
+  }, [path, generation, client, workspaceId, capabilityId, selectedAccount]);
+  async function update(selection, permission) {
+    if (!data || busy || mutationController.current) return;
+    const currentScope = { ...scope.current };
+    if (currentScope.path !== path) return;
+    const isCurrent = () => scope.current.path === currentScope.path && scope.current.epoch === currentScope.epoch;
+    const controller = new AbortController();
+    mutationController.current = controller;
+    setBusy(true);
+    setError(null);
+    setSaved(false);
+    try {
+      await client.updateConnectorToolPermissions(
+        workspaceId,
+        capabilityId,
+        {
+          connectionId: data.connectionId,
+          ...data.revision ? { expectedRevision: data.revision } : {},
+          ...data.instanceKey ? { instanceKey: data.instanceKey } : {},
+          ...selection,
+          permission
+        },
+        { signal: controller.signal }
+      );
+      if (!isCurrent()) return;
+      const refreshed = await client.getConnectorToolPermissions(workspaceId, capabilityId, {
+        signal: controller.signal,
+        connectionId: data.connectionId,
+        ...data.instanceKey ? { instanceKey: data.instanceKey } : {}
+      });
+      if (!isCurrent()) return;
+      setData(refreshed);
+      setSaved(true);
+    } catch (failure) {
+      if (isCurrent() && !controller.signal.aborted)
+        setError({
+          text: `Couldn't save tool permissions. ${userErrorText(failure)}`,
+          denied: false
+        });
+    } finally {
+      if (isCurrent()) {
+        setBusy(false);
+        mutationController.current = null;
+      }
+    }
+  }
+  return /* @__PURE__ */ jsxs(
+    "section",
+    {
+      className: bare ? "space-y-3" : "space-y-3 border-t border-border pt-5",
+      "aria-label": "Tool permissions",
+      children: [
+        bare ? null : /* @__PURE__ */ jsxs("div", { children: [
+          /* @__PURE__ */ jsx("h3", { className: "text-sm font-medium", children: "Tool permissions" }),
+          /* @__PURE__ */ jsx("p", { className: "mt-1 text-xs leading-5 text-fg-subtle", children: "Choose which actions run automatically and which need your review." })
+        ] }),
+        error ? /* @__PURE__ */ jsx(Notice, { tone: error.denied ? "muted" : "failed", children: error.text }) : null,
+        !data && !error ? /* @__PURE__ */ jsx("p", { role: "status", className: "text-xs text-fg-subtle", children: "Loading tools\u2026" }) : null,
+        data ? /* @__PURE__ */ jsxs(Fragment, { children: [
+          !connectionId && (data.accounts?.length ?? 0) > 1 ? /* @__PURE__ */ jsxs("div", { className: "space-y-2", children: [
+            /* @__PURE__ */ jsx("p", { className: "text-sm font-medium text-fg", children: "Account" }),
+            /* @__PURE__ */ jsx(
+              SelectMenu,
+              {
+                "aria-label": "Account for tool permissions",
+                className: "w-full",
+                size: "sm",
+                value: JSON.stringify([data.connectionId, data.instanceKey ?? ""]),
+                disabled: busy,
+                options: data.accounts.map((item) => ({
+                  value: JSON.stringify([item.connectionId, item.instanceKey ?? ""]),
+                  label: item.label
+                })),
+                onValueChange: (value) => {
+                  const chosen = data.accounts.find(
+                    (item) => JSON.stringify([item.connectionId, item.instanceKey ?? ""]) === value
+                  );
+                  if (chosen)
+                    setAccount({
+                      path: basePath,
+                      connectionId: chosen.connectionId,
+                      ...chosen.instanceKey ? { instanceKey: chosen.instanceKey } : {}
+                    });
+                }
+              }
+            )
+          ] }) : data.accountLabel ? /* @__PURE__ */ jsx("p", { className: "break-words text-sm text-fg-muted", children: data.accountLabel }) : null,
+          /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-3", children: [
+            /* @__PURE__ */ jsx("span", { className: "text-sm text-fg", children: "Default choice" }),
+            /* @__PURE__ */ jsx(
+              PermissionSelect,
+              {
+                label: "Default tool permission",
+                value: data.defaultPermission ?? "default",
+                resetLabel: "Recommended",
+                disabled: busy || !data.canManage,
+                onChange: (value) => void update({ target: "default" }, value)
+              }
+            )
+          ] }),
+          /* @__PURE__ */ jsx("p", { className: "text-xs text-fg-subtle", children: "Applies to tools without an individual choice, including newly added tools." }),
+          data.tools.some((tool) => tool.resetReason) ? /* @__PURE__ */ jsx(Notice, { tone: "waiting", children: "Some actions changed since you allowed them. Those actions now ask first; review their choices below." }) : null,
+          data.discoveryError ? /* @__PURE__ */ jsx(Notice, { tone: "waiting", children: data.discoveryError }) : null,
+          groups.map(([key, title]) => {
+            const tools = data.tools.filter((tool) => tool.group === key);
+            if (!tools.length) return null;
+            const first = tools[0].permission;
+            const groupValue = tools.every((tool) => tool.permission === first && !tool.conditional) ? first : "mixed";
+            return /* @__PURE__ */ jsxs(
+              Collapsible,
+              {
+                className: "group border-t border-border pt-3",
+                open: expandedGroups.includes(key),
+                onOpenChange: (open) => setExpandedGroups(
+                  (current) => open ? [...current, key] : current.filter((value) => value !== key)
+                ),
+                children: [
+                  /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between gap-3", children: [
+                    /* @__PURE__ */ jsx(CollapsibleTrigger, { asChild: true, children: /* @__PURE__ */ jsxs(
+                      Button,
+                      {
+                        variant: "ghost",
+                        size: "sm",
+                        className: "min-w-0 flex-1 shrink justify-start px-0 text-fg",
+                        children: [
+                          /* @__PURE__ */ jsx(
+                            ChevronRightIcon,
+                            {
+                              "aria-hidden": true,
+                              className: "size-4 shrink-0 text-fg-muted transition-transform group-data-[state=open]:rotate-90"
+                            }
+                          ),
+                          /* @__PURE__ */ jsx("span", { className: "text-left whitespace-normal", children: title }),
+                          " ",
+                          /* @__PURE__ */ jsx("span", { className: "text-fg-muted", children: tools.length })
+                        ]
+                      }
+                    ) }),
+                    /* @__PURE__ */ jsx(
+                      PermissionSelect,
+                      {
+                        label: `${title} permission`,
+                        value: groupValue,
+                        disabled: busy || !data.canManage,
+                        onChange: (value) => void update(
+                          { target: "tools", toolNames: tools.map((tool) => tool.name) },
+                          value
+                        )
+                      }
+                    )
+                  ] }),
+                  /* @__PURE__ */ jsx(CollapsibleContent, { className: "divide-y divide-border", children: tools.map((tool) => /* @__PURE__ */ jsxs("div", { className: "space-y-3 py-3", children: [
+                    /* @__PURE__ */ jsxs("div", { className: "flex items-start justify-between gap-3", children: [
+                      /* @__PURE__ */ jsxs("div", { className: "min-w-0", children: [
+                        /* @__PURE__ */ jsx("div", { className: "break-words text-sm", title: tool.description, children: tool.title ?? sentenceCase(tool.name.replaceAll("_", " ")) }),
+                        /* @__PURE__ */ jsx("p", { className: "mt-1 text-xs text-fg-muted", children: permissionSourceText(tool) })
+                      ] }),
+                      /* @__PURE__ */ jsx(
+                        PermissionSelect,
+                        {
+                          label: `Permission for ${tool.title ?? tool.name}`,
+                          value: tool.conditional ? "mixed" : tool.permission,
+                          disabled: busy || !data.canManage,
+                          onChange: (value) => void update({ target: "tools", toolNames: [tool.name] }, value)
+                        }
+                      )
+                    ] }),
+                    tool.actionPermissions?.map((action) => /* @__PURE__ */ jsxs(
+                      "div",
+                      {
+                        className: "flex items-center justify-between gap-3 pl-4",
+                        children: [
+                          /* @__PURE__ */ jsx("span", { className: "min-w-0 break-words text-sm text-fg", children: sentenceCase(action.actionName.replaceAll("_", " ")) }),
+                          /* @__PURE__ */ jsx(
+                            PermissionSelect,
+                            {
+                              label: `Permission for ${tool.title ?? tool.name}: ${action.actionName}`,
+                              value: action.permission,
+                              disabled: busy || !data.canManage,
+                              onChange: (permission) => void update(
+                                {
+                                  target: "action",
+                                  toolName: tool.name,
+                                  actionName: action.actionName
+                                },
+                                permission
+                              )
+                            }
+                          )
+                        ]
+                      },
+                      action.actionName
+                    ))
+                  ] }, tool.name)) })
+                ]
+              },
+              key
+            );
+          }),
+          !data.discoveryError && data.tools.length === 0 ? /* @__PURE__ */ jsx("p", { className: "text-xs text-fg-subtle", children: "This connector currently exposes no tools." }) : null,
+          /* @__PURE__ */ jsx("p", { className: "text-xs text-fg-subtle", children: "Saved choices apply when work next starts or resumes. A review already waiting for you keeps its original choice." }),
+          !data.canManage ? /* @__PURE__ */ jsx("p", { className: "text-xs text-fg-muted", children: "You can view these choices. A workspace admin can change them." }) : null,
+          busy ? /* @__PURE__ */ jsx("p", { role: "status", className: "text-xs text-fg-muted", children: "Saving choices\u2026" }) : null,
+          saved ? /* @__PURE__ */ jsx("p", { role: "status", className: "text-xs text-fg-subtle", children: "Permissions saved." }) : null
+        ] }) : null,
+        error && !error.denied || data?.discoveryError ? /* @__PURE__ */ jsx(
+          Button,
+          {
+            variant: "outline",
+            size: "sm",
+            disabled: busy,
+            onClick: () => setGeneration((value) => value + 1),
+            children: "Retry loading tools"
+          }
+        ) : null
+      ]
+    }
+  );
+}
+
+export {
+  hasConnectorToolPermissionTarget,
+  permissionSourceText,
+  PermissionSelect,
+  ConnectorToolPermissions
+};
+//# sourceMappingURL=chunk-SQJIKMN3.js.map

package/dist/chunk-SVINDKVW.js

@@ -0,0 +1,26 @@
+"use client";
+import {
+  LoadingPanel
+} from "./chunk-VGYXW3VG.js";
+
+// src/app/components/workspace-tenant-boundary.tsx
+import { useLayoutEffect } from "react";
+import { jsx } from "react/jsx-runtime";
+function WorkspaceTenantBoundary(props) {
+  const { children, prepareTransition, stateOwnerWorkspaceId, workspaceId } = props;
+  const ready = stateOwnerWorkspaceId === workspaceId;
+  useLayoutEffect(() => {
+    if (!ready) {
+      prepareTransition(workspaceId);
+    }
+  }, [prepareTransition, ready, workspaceId]);
+  if (!ready) {
+    return /* @__PURE__ */ jsx(LoadingPanel, { label: "Switching workspace" });
+  }
+  return children;
+}
+
+export {
+  WorkspaceTenantBoundary
+};
+//# sourceMappingURL=chunk-SVINDKVW.js.map