@rightkit/agent-ui-settings 0.0.0-stage → 0.1.1

package/dist/components/settings/tabs/ProvidersTab.js

@@ -0,0 +1,214 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useCallback, useEffect, useState } from "react";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+import { buildProviderCardSnapshots, getProviderDisplay, readyOnlyChildPolicy, shortLabelForProvider, } from "@rightkit/agent-ui-core/lib/cliProviders";
+import { getCliDelegationPolicy, listCliProviders, mutateCliProvider, setCliDelegationPolicy, } from "@rightkit/agent-ui-core/lib/daemon/cli-providers";
+import ChildProviderPolicy from "./ChildProviderPolicy.js";
+import ApiKeyAccounts from "./ApiKeyAccounts.js";
+import { createDirectConnection, deleteDirectConnection, getInferenceLoad, listInferenceCatalog, listInferenceConnections, probeInferenceConnection, } from "@rightkit/agent-ui-core/lib/daemon/inference";
+import { hostAppName } from "../../../appName.js";
+function Disclosure({ label, children }) {
+    const [open, setOpen] = useState(false);
+    return (_jsxs("div", { className: "rounded-xl border border-line", children: [_jsxs("button", { type: "button", "aria-expanded": open, onClick: () => setOpen((v) => !v), className: "flex w-full items-center justify-between gap-2 px-4 py-2.5 text-[13px] font-semibold text-text-2 cursor-pointer border-0 bg-transparent hover:text-text focus-visible:outline focus-visible:outline-2 focus-visible:outline-accent", children: [_jsx("span", { children: label }), _jsx("span", { "aria-hidden": "true", className: `transition-transform duration-150 ${open ? "rotate-180" : ""}`, children: _jsx(Icon, { name: "chevron", size: 12 }) })] }), open ? _jsx("div", { className: "flex flex-col gap-2 border-t border-line p-4", children: children }) : null] }));
+}
+function eligibilityBadgeFor(snapshot) {
+    switch (snapshot.eligibility.kind) {
+        case "ready":
+            return { label: "Ready", tone: "border-success/40 text-success" };
+        case "compatibility_read_only":
+            return { label: "Compatibility", tone: "border-warning/40 text-warning" };
+        case "login_required":
+            return { label: "Login required", tone: "border-warning/40 text-warning" };
+        case "harness_verification_required":
+            return { label: "Harness verification", tone: "border-warning/40 text-warning" };
+        case "version_unsupported":
+            return { label: "Version unsupported", tone: "border-danger/40 text-danger" };
+        case "unqualified":
+            return { label: "Unqualified", tone: "border-danger/40 text-danger" };
+        default:
+            return { label: "Unknown", tone: "border-line-2 text-text-3" };
+    }
+}
+function isolationLabelFor(mode) {
+    if (mode === "exclusive_coderight_gateway")
+        return `${hostAppName()} gateway`;
+    if (mode === "native_read_only_compatibility")
+        return "Read-only compatibility";
+    return mode;
+}
+function eligibilityReason(snapshot) {
+    if (snapshot.eligibility.kind === "unqualified") {
+        return snapshot.eligibility.reasons.join("; ");
+    }
+    if (snapshot.eligibility.kind === "compatibility_read_only") {
+        return `Native vendor is read-only; ${hostAppName()} owns every stateful effect.`;
+    }
+    if (snapshot.eligibility.kind === "login_required") {
+        return "Sign in via the vendor CLI to attach this provider.";
+    }
+    if (snapshot.eligibility.kind === "harness_verification_required") {
+        return "Harness attestation pending — re-qualify once the binary is installed.";
+    }
+    return null;
+}
+export default function ProvidersTab({ settings, config, sessionId, onLoginCliProvider, }) {
+    const [providers, setProviders] = useState([]);
+    const [attestationError, setAttestationError] = useState(null);
+    const [pendingProvider, setPendingProvider] = useState(null);
+    const [delegationPolicy, setDelegationPolicyState] = useState(null);
+    const [connections, setConnections] = useState([]);
+    const [catalogGroups, setCatalogGroups] = useState([]);
+    const [load, setLoad] = useState(null);
+    useEffect(() => {
+        let cancelled = false;
+        const load = async () => {
+            if (!config)
+                return;
+            try {
+                const snapshot = await listCliProviders(config);
+                if (!cancelled) {
+                    setProviders(snapshot.providers);
+                    setAttestationError(null);
+                }
+                if (!sessionId) {
+                    if (!cancelled)
+                        setDelegationPolicyState(null);
+                    return;
+                }
+                try {
+                    const policy = await getCliDelegationPolicy(config, sessionId);
+                    if (!cancelled)
+                        setDelegationPolicyState(policy);
+                }
+                catch (error) {
+                    if (!cancelled) {
+                        setDelegationPolicyState(null);
+                        setAttestationError(error instanceof Error ? error.message : "Delegation policy unavailable");
+                    }
+                }
+            }
+            catch (err) {
+                if (!cancelled) {
+                    setAttestationError(err instanceof Error ? err.message : "unavailable");
+                }
+            }
+        };
+        void load();
+        return () => {
+            cancelled = true;
+        };
+    }, [config, sessionId]);
+    const refreshInference = useCallback(async () => {
+        if (!config)
+            return;
+        const [nextConnections, nextCatalog, nextLoad] = await Promise.all([
+            listInferenceConnections(config),
+            listInferenceCatalog(config),
+            getInferenceLoad(config),
+        ]);
+        setConnections(nextConnections);
+        setCatalogGroups(nextCatalog);
+        setLoad(nextLoad);
+    }, [config]);
+    useEffect(() => {
+        void refreshInference().catch((error) => setAttestationError(error instanceof Error ? error.message : "Inference authority unavailable"));
+    }, [refreshInference]);
+    const addConnection = async () => {
+        if (!config)
+            return;
+        try {
+            await createDirectConnection(config, {
+                name: "New Direct connection",
+                protocol: "openai_compatible",
+                normalizedBaseUrl: "http://127.0.0.1:11434",
+                authKind: "none",
+                authHeaderName: null,
+                publicHeaders: {},
+                manualModelIds: [],
+                trustPrivateNetwork: false,
+            });
+            await refreshInference();
+        }
+        catch (error) {
+            setAttestationError(error instanceof Error ? error.message : "Could not add Direct connection");
+        }
+    };
+    const updateDelegationPolicy = async (policy) => {
+        if (!config || !sessionId)
+            return;
+        policy = readyOnlyChildPolicy(policy, providers);
+        const previous = delegationPolicy;
+        setDelegationPolicyState(policy);
+        try {
+            setDelegationPolicyState(await setCliDelegationPolicy(config, sessionId, policy));
+            setAttestationError(null);
+        }
+        catch (error) {
+            setDelegationPolicyState(previous);
+            setAttestationError(error instanceof Error ? error.message : "Delegation policy update failed");
+        }
+    };
+    const runProviderAction = async (provider, action) => {
+        if (!config)
+            return;
+        setPendingProvider(provider);
+        setAttestationError(null);
+        try {
+            const snapshot = await mutateCliProvider(config, provider, action);
+            setProviders(snapshot.providers);
+            if (action === "login")
+                onLoginCliProvider?.(provider);
+        }
+        catch (error) {
+            setAttestationError(error instanceof Error ? error.message : "Provider action failed");
+        }
+        finally {
+            setPendingProvider(null);
+        }
+    };
+    const snapshots = buildProviderCardSnapshots({ providers });
+    const configuredCount = snapshots.filter((s) => s.auth.launchReady).length;
+    const detectedCount = snapshots.filter((s) => s.auth.detectedSignedIn).length;
+    const summaryParts = [`${configuredCount} of ${snapshots.length} launch-ready`];
+    if (detectedCount > 0)
+        summaryParts.push(`${detectedCount} ambient sign-in${detectedCount === 1 ? "" : "s"} detected`);
+    if (snapshots.length - configuredCount > 0) {
+        summaryParts.push(`${snapshots.length - configuredCount} need${snapshots.length - configuredCount === 1 ? "s" : ""} routing or verification`);
+    }
+    const providerCounts = new Map();
+    if (settings) {
+        for (const model of settings.models) {
+            providerCounts.set(model.provider, (providerCounts.get(model.provider) ?? 0) + 1);
+        }
+    }
+    return (_jsxs("section", { className: "flex flex-col gap-5 p-6", children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h3", { className: "text-[16px] font-bold text-text", children: "Providers" }), _jsx("p", { className: "text-[13px] font-semibold text-text", children: summaryParts.join(" · ") }), _jsxs("p", { className: "text-[12px] text-text-3", children: ["Keep each CLI's authentication inside its own vendor login. ", hostAppName(), " stores only non-secret profile metadata. API keys go straight to the system credential store."] }), attestationError ? (_jsxs("p", { className: "text-[11px] text-text-3", children: ["Harness attestations unavailable: ", attestationError] })) : null] }), _jsxs("section", { className: "rounded-xl border border-line bg-panel p-4", "aria-label": "Inference authorities", children: [_jsxs("div", { className: "mb-3 flex items-center justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h4", { className: "text-[13px] font-semibold text-text", children: "Direct Connections" }), _jsx("p", { className: "text-[12px] text-text-3", children: "OpenAI- & Anthropic-compatible endpoints. Keys remain in system keychain." })] }), _jsx("button", { type: "button", onClick: () => void addConnection(), className: "rounded-lg border border-line px-3 py-2 text-[12px] text-text hover:bg-panel-2", children: "Add connection" })] }), _jsx("div", { className: "flex flex-col gap-2", children: connections.map((connection) => (_jsxs("article", { className: "flex items-center gap-3 rounded-lg border border-line/70 px-3 py-2", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("strong", { className: "block truncate text-[12px] text-text", children: connection.name }), _jsxs("span", { className: "block truncate text-[11px] text-text-3", children: [connection.protocol.replace("_", " "), " \u00B7 ", connection.normalizedBaseUrl, " \u00B7", " ", connection.credentialConfigured ? "key configured" : "no key"] })] }), _jsx("button", { type: "button", className: "rounded border border-line px-2 py-1 text-[11px] text-text-2", onClick: () => config &&
+                                        void probeInferenceConnection(config, "direct", connection.id)
+                                            .then(refreshInference)
+                                            .catch((error) => setAttestationError(error instanceof Error ? error.message : "Probe failed")), children: "Probe" }), _jsx("button", { type: "button", className: "rounded border border-danger/40 px-2 py-1 text-[11px] text-danger", onClick: () => config &&
+                                        void deleteDirectConnection(config, connection.id)
+                                            .then(refreshInference)
+                                            .catch((error) => setAttestationError(error instanceof Error ? error.message : "Delete failed")), children: "Delete" })] }, connection.id))) }), load ? (_jsxs("p", { className: "mt-3 text-[12px] text-text-3", "aria-live": "polite", children: [load.activeAgents, "/", load.activeLimit, " active \u00B7 ", load.queuedAgents, " queued"] })) : null] }), _jsx(ApiKeyAccounts, { config: config }), _jsx("div", { className: "grid gap-3", children: snapshots.map((snapshot) => (_jsx(ProviderCard, { snapshot: snapshot, pending: pendingProvider === snapshot.providerId, onAction: runProviderAction }, snapshot.providerId))) }), _jsx(Disclosure, { label: "Advanced: model \u2192 provider mapping", children: providerCounts.size > 0 ? ([...providerCounts.entries()].map(([name, count]) => (_jsxs("article", { className: "grid grid-cols-[minmax(0,1fr)_240px] items-center gap-3 px-1 h-9 border-b border-line/60 last:border-b-0", children: [_jsx("div", { className: "flex flex-col min-w-0", children: _jsx("strong", { className: "text-[13px] font-semibold text-text truncate", children: shortLabelForProvider(name) }) }), _jsxs("div", { className: "flex items-center gap-2 text-[12px] text-text-3", children: [_jsxs("span", { className: "truncate", children: [count, " model", count !== 1 ? "s" : "", " configured"] }), _jsx("code", { className: "text-[11px] font-mono text-accent-2", children: "configured" })] })] }, name)))) : (_jsx("p", { className: "text-[13px] text-text-3", children: "No providers configured." })) }), delegationPolicy ? (_jsx(Disclosure, { label: "Child provider policy", children: _jsx(ChildProviderPolicy, { policy: delegationPolicy, onChange: (policy) => void updateDelegationPolicy(policy) }) })) : null] }));
+}
+function ProviderCard({ snapshot, pending, onAction, }) {
+    const display = getProviderDisplay(snapshot.providerId);
+    const badge = eligibilityBadgeFor(snapshot);
+    const reason = eligibilityReason(snapshot);
+    const status = snapshot.auth.launchReady
+        ? "Launch-ready"
+        : snapshot.auth.detectedSignedIn
+            ? `Signed in outside ${hostAppName()}`
+            : "No vendor sign-in detected";
+    const versionLabel = snapshot.attestation?.attestation.binaryVersion ?? "—";
+    const isolatedMode = snapshot.attestation?.attestation.isolationMode ?? display.isolationMode;
+    return (_jsxs("article", { className: `rounded-xl border p-4 ${snapshot.eligibility.kind === "ready" ? "border-accent/50 bg-panel" : "border-line/70 bg-panel/70"}`, "data-testid": `provider-card-${snapshot.providerId}`, children: [_jsxs("div", { className: "mb-3 flex items-start justify-between gap-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("strong", { className: "text-[13px] font-semibold text-text", children: display.displayName }), _jsx("p", { className: "mt-0.5 truncate text-[12px] text-text-3", children: status }), snapshot.profile?.accountFingerprint ? (_jsxs("p", { className: "mt-0.5 text-[11px] font-mono text-text-3", children: ["fingerprint \u00B7 ", snapshot.profile.accountFingerprint] })) : null] }), _jsxs("div", { className: "flex flex-col items-end gap-1", children: [_jsx("span", { className: `rounded-full border px-2 py-0.5 text-[10px] font-semibold uppercase tracking-wide ${badge.tone}`, "data-testid": `provider-card-${snapshot.providerId}-eligibility`, children: badge.label }), _jsx("span", { className: "rounded-full border border-line-2 px-2 py-0.5 text-[10px] font-mono text-text-3", children: isolationLabelFor(isolatedMode) })] })] }), _jsxs("dl", { className: "mb-3 grid grid-cols-2 gap-x-4 gap-y-1 text-[12px]", children: [_jsx("dt", { className: "text-text-3", children: "Binary version" }), _jsx("dd", { className: "truncate font-mono text-text-2", children: versionLabel }), _jsx("dt", { className: "text-text-3", children: "Harness status" }), _jsx("dd", { className: "truncate text-text-2", children: snapshot.attestation
+                            ? snapshot.attestation.qualified
+                                ? `Verified ${snapshot.attestation.ageLabel ?? "recently"}`
+                                : `Failed probes (${snapshot.attestation.attestation.failedProbes.length})`
+                            : "Awaiting first attestation" })] }), reason ? (_jsx("p", { className: "mb-3 rounded-md border border-line-2 bg-bg/40 p-2 text-[12px] text-text-2", children: reason })) : null, _jsx("button", { className: snapshot.eligibility.kind === "ready"
+                    ? "rounded-lg bg-accent px-3 py-2 text-[12px] font-semibold text-on-accent disabled:opacity-40"
+                    : "rounded-lg border border-line px-3 py-2 text-[12px] font-semibold text-text-2 hover:bg-panel hover:text-text disabled:opacity-40", disabled: pending || !snapshot.binaryInstalled, onClick: () => onAction(snapshot.providerId, snapshot.auth.state === "unqualified" ? "verify-harness" : "login"), type: "button", "data-testid": `provider-card-${snapshot.providerId}-sign-in`, children: pending
+                    ? "Working…"
+                    : snapshot.auth.state === "unqualified"
+                        ? "Verify harness"
+                        : `Sign in with ${display.shortLabel}` })] }, snapshot.providerId));
+}

package/dist/components/settings/tabs/RepairTab.d.ts

@@ -0,0 +1,6 @@
+import { type CliProviderId } from "@rightkit/agent-ui-core/lib/cliProviders";
+export interface RepairTabProps {
+    providerId?: CliProviderId | null;
+    onCompleted?: (action: string) => void;
+}
+export default function RepairTab({ providerId, onCompleted }: RepairTabProps): import("react").JSX.Element;

package/dist/components/settings/tabs/RepairTab.js

@@ -0,0 +1,44 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from "react";
+import { invoke } from "@rightkit/agent-ui-core/host/tauriHost";
+import { CLI_PROVIDER_IDS, getProviderDisplay, } from "@rightkit/agent-ui-core/lib/cliProviders";
+const ACTIONS = [
+    {
+        id: "recover_binding",
+        label: "Recover binding",
+        description: "Restore the active provider binding without changing credentials.",
+    },
+    {
+        id: "re_qualify_harness",
+        label: "Re-qualify harness",
+        description: "Run the provider harness qualification probes again.",
+    },
+    {
+        id: "clear_active_binding",
+        label: "Clear active binding",
+        description: "Stop using the current provider binding for new work.",
+    },
+];
+export default function RepairTab({ providerId, onCompleted }) {
+    const [pending, setPending] = useState(null);
+    const [message, setMessage] = useState(null);
+    const [error, setError] = useState(null);
+    const target = providerId ?? null;
+    const run = async (action) => {
+        setPending(action);
+        setMessage(null);
+        setError(null);
+        try {
+            await invoke(action, target ? { providerId: target } : undefined);
+            setMessage(`${ACTIONS.find((item) => item.id === action)?.label} completed.`);
+            onCompleted?.(action);
+        }
+        catch (reason) {
+            setError(reason instanceof Error ? reason.message : "The repair action is unavailable.");
+        }
+        finally {
+            setPending(null);
+        }
+    };
+    return (_jsxs("section", { className: "flex max-w-[720px] flex-col gap-4 p-6", "data-testid": "repair-tab", children: [_jsxs("header", { children: [_jsx("h3", { className: "text-[16px] font-bold text-text", children: "Continuity and repair" }), _jsxs("p", { className: "mt-1 text-[12px] text-text-3", children: ["Repair provider continuity without exposing or replacing vendor CLI credentials.", target ? ` Current provider: ${getProviderDisplay(target).displayName}.` : ""] })] }), message ? (_jsx("p", { className: "rounded-md border border-success/40 bg-success/10 p-2 text-[12px] text-success", children: message })) : null, error ? (_jsx("p", { className: "rounded-md border border-danger/40 bg-danger/10 p-2 text-[12px] text-danger", children: error })) : null, _jsx("div", { className: "flex flex-col gap-2", children: ACTIONS.map((item) => (_jsxs("article", { className: "flex items-center justify-between gap-4 rounded-xl border border-line bg-panel p-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("strong", { className: "block text-[13px] text-text", children: item.label }), _jsx("p", { className: "text-[11px] text-text-3", children: item.description })] }), _jsx("button", { type: "button", onClick: () => void run(item.id), disabled: pending !== null, className: "shrink-0 rounded-md border border-line px-3 py-1.5 text-[12px] font-semibold text-text-2 hover:border-accent hover:text-text disabled:opacity-50", children: pending === item.id ? "Working…" : item.label })] }, item.id))) }), _jsxs("p", { className: "text-[11px] text-text-3", children: ["Supported providers:", " ", CLI_PROVIDER_IDS.map((id) => getProviderDisplay(id).shortLabel).join(", "), "."] })] }));
+}

package/dist/components/settings/tabs/RootModelPicker.d.ts

@@ -0,0 +1,10 @@
+import type { CatalogGroup, InferenceSelection } from "@rightkit/agent-ui-core/lib/types/inference";
+export interface RootModelPickerProps {
+    catalogGroups: CatalogGroup[];
+    value?: InferenceSelection | null;
+    onSelect: (selection: InferenceSelection) => void;
+    error?: string | null;
+    compact?: boolean;
+}
+/** Authority-first selector shared by Settings & composer. */
+export default function RootModelPicker({ catalogGroups: allCatalogGroups, value, onSelect, error, compact, }: RootModelPickerProps): import("react").JSX.Element;

package/dist/components/settings/tabs/RootModelPicker.js

@@ -0,0 +1,42 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { inferenceSelectionKey, selectionForCatalogModel } from "@rightkit/agent-ui-core/lib/types/inference";
+function modelSubtitle(group, model) {
+    if (group.authority === "direct") {
+        try {
+            return `${group.protocol.replace("_", " ")} · ${new URL(group.name).host}`;
+        }
+        catch {
+            return group.protocol.replace("_", " ");
+        }
+    }
+    const identity = [model.ownedBy, model.root, model.parent].filter(Boolean).join(" · ");
+    const limits = [
+        model.contextLength && `${model.contextLength.toLocaleString()} ctx`,
+        model.maxInputTokens && `${model.maxInputTokens.toLocaleString()} in`,
+        model.maxOutputTokens && `${model.maxOutputTokens.toLocaleString()} out`,
+    ]
+        .filter(Boolean)
+        .join(" · ");
+    return ([identity, model.capabilities.join(", "), limits]
+        .filter(Boolean)
+        .join(" · ") || "Direct catalog");
+}
+/** Authority-first selector shared by Settings & composer. */
+export default function RootModelPicker({ catalogGroups: allCatalogGroups, value, onSelect, error, compact = false, }) {
+    // Settings saves an inference selection, which names an in-app connection; a config-route
+    // group (authority "config") is chosen on the session instead.
+    const catalogGroups = allCatalogGroups.filter((group) => group.authority !== "config");
+    const current = inferenceSelectionKey(value);
+    const valid = catalogGroups.some((group) => group.models.some((model) => inferenceSelectionKey(selectionForCatalogModel(group, model.id)) === current));
+    return (_jsxs("div", { className: "flex flex-col gap-3", "data-testid": "inference-picker", children: [error ? (_jsx("p", { className: "rounded-md border border-danger/40 bg-danger/10 p-2 text-[12px] text-danger", children: error })) : null, value && !valid ? (_jsx("p", { className: "rounded-md border border-warning/40 bg-warning/10 p-2 text-[12px] text-warning", "aria-live": "polite", children: "Saved selection is unavailable. Probe or repair its connection before choosing a replacement." })) : null, catalogGroups.map((group) => {
+                const models = group.models.filter((model) => !model.id.startsWith("auto/"));
+                if (models.length === 0)
+                    return null;
+                return (_jsxs("section", { className: "rounded-lg border border-line bg-panel", "aria-label": `Direct Connections: ${group.name}`, children: [_jsxs("header", { className: "border-b border-line px-3 py-2", children: [_jsx("strong", { className: "block text-[12px] text-text", children: "Direct Connections" }), _jsxs("span", { className: "text-[11px] text-text-3", children: [group.name, " \u00B7 ", group.state.replaceAll("_", " ")] })] }), _jsx("ul", { className: compact ? "grid grid-cols-2 gap-1 p-1" : "flex flex-col gap-1 p-1", children: models.map((model) => {
+                                const selection = selectionForCatalogModel(group, model.id);
+                                const active = current === inferenceSelectionKey(selection);
+                                const disabled = !model.selectable || group.state !== "ready";
+                                return (_jsx("li", { children: _jsxs("button", { type: "button", "aria-pressed": active, disabled: disabled, onClick: () => onSelect(selection), className: `flex w-full items-center gap-2 rounded-md border px-2.5 py-2 text-left text-[12px] disabled:opacity-50 ${active ? "border-accent bg-panel-2" : "border-transparent hover:border-line hover:bg-panel-2"}`, children: [_jsxs("span", { className: "min-w-0 flex-1", children: [_jsx("strong", { className: "block truncate text-text", children: model.id }), _jsx("span", { className: "block truncate text-[11px] text-text-3", children: model.unavailableReason ?? modelSubtitle(group, model) })] }), active ? (_jsx("span", { "aria-hidden": "true", className: "text-accent", children: "\u2713" })) : null] }) }, model.id));
+                            }) })] }, `${group.authority}:${group.connectionId}`));
+            }), catalogGroups.length === 0 ? (_jsx("p", { className: "text-[12px] text-text-3", children: "No Direct connections are ready. Add a connection to continue." })) : null] }));
+}

package/dist/components/settings/tabs/RuntimeMiddlewareTab.d.ts

@@ -0,0 +1,8 @@
+import type { MiddlewareRegistrySnapshot } from "@rightkit/agent-ui-core/lib/types";
+export default function RuntimeMiddlewareTab({ middlewareSnapshot, pendingId, error, onRefresh, onToggle, }: {
+    middlewareSnapshot: MiddlewareRegistrySnapshot;
+    pendingId: string | null;
+    error: string | null;
+    onRefresh: () => void;
+    onToggle: (id: string, enabled: boolean) => void;
+}): import("react").JSX.Element;

package/dist/components/settings/tabs/RuntimeMiddlewareTab.js

@@ -0,0 +1,12 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+import { OfflinePanel } from "./shared.js";
+function formatMiddlewarePhase(phase) {
+    return phase.replace(/([A-Z])/g, " $1").replace(/^./, (value) => value.toUpperCase());
+}
+function RuntimeMiddlewareStat({ label, value }) {
+    return (_jsxs("div", { className: "rounded-xl border border-line bg-panel p-3", children: [_jsx("span", { className: "block text-[11px] uppercase text-text-3", children: label }), _jsx("strong", { className: "mt-1 block text-[18px] text-text", children: value })] }));
+}
+export default function RuntimeMiddlewareTab({ middlewareSnapshot, pendingId, error, onRefresh, onToggle, }) {
+    return (_jsxs("section", { className: "flex flex-col gap-5 p-6", children: [_jsxs("div", { className: "flex items-start gap-3", children: [_jsxs("div", { className: "flex flex-col gap-1 flex-1 min-w-0", children: [_jsx("h3", { className: "text-[16px] font-bold text-text", children: "Runtime middleware" }), _jsx("p", { className: "text-[13px] text-text-2 truncate", children: "Inspect and enable local middleware that observes or gates runtime execution." })] }), _jsxs("button", { type: "button", className: "inline-flex items-center gap-2 h-9 px-4 rounded-lg border border-line bg-transparent text-text-2 text-[13px] cursor-pointer hover:bg-panel hover:text-text disabled:opacity-40", disabled: pendingId === "refresh", onClick: onRefresh, children: [_jsx(Icon, { name: "refresh" }), " ", pendingId === "refresh" ? "Refreshing" : "Refresh"] })] }), error ? _jsx(OfflinePanel, { title: "Runtime middleware unavailable.", action: error }) : null, _jsxs("div", { className: "grid grid-cols-3 gap-3", children: [_jsx(RuntimeMiddlewareStat, { label: "Middleware", value: middlewareSnapshot.middleware.length }), _jsx(RuntimeMiddlewareStat, { label: "Spans", value: middlewareSnapshot.spans.length }), _jsx(RuntimeMiddlewareStat, { label: "Observations", value: middlewareSnapshot.observations.length })] }), _jsx("div", { className: "flex flex-col divide-y divide-line rounded-xl border border-line overflow-hidden", children: middlewareSnapshot.middleware.length ? (middlewareSnapshot.middleware.map((definition) => (_jsxs("article", { className: "grid grid-cols-[minmax(0,1fr)_auto] gap-4 bg-panel px-4 py-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("strong", { className: "min-w-0 truncate text-[13px] font-semibold text-text", title: definition.title, children: definition.title }), _jsx("span", { className: "shrink-0 rounded border border-line bg-bg px-1.5 py-0.5 text-[10px] text-text-3", children: definition.enabled ? "enabled" : "disabled" })] }), _jsx("p", { className: "mt-1 line-clamp-2 text-[12px] leading-snug text-text-2", title: definition.description, children: definition.description }), _jsxs("div", { className: "mt-2 flex flex-wrap gap-2 text-[11px] text-text-3", children: [_jsxs("code", { className: "rounded border border-line bg-bg px-1.5 py-0.5", children: ["phase ", formatMiddlewarePhase(definition.phase)] }), _jsxs("code", { className: "rounded border border-line bg-bg px-1.5 py-0.5", children: ["effect ", definition.effect] }), _jsxs("code", { className: "rounded border border-line bg-bg px-1.5 py-0.5", children: ["source ", definition.source] }), definition.tool ? (_jsxs("code", { className: "min-w-0 max-w-full truncate rounded border border-line bg-bg px-1.5 py-0.5", title: `tool ${definition.tool}`, children: ["tool ", definition.tool] })) : null, definition.requiresToolset ? (_jsxs("code", { className: "min-w-0 max-w-full truncate rounded border border-line bg-bg px-1.5 py-0.5", title: `toolset ${definition.requiresToolset}`, children: ["toolset ", definition.requiresToolset] })) : null] })] }), _jsx("button", { type: "button", className: "inline-flex items-center justify-center h-8 min-w-[86px] px-3 rounded-lg border border-line bg-transparent text-text-2 text-[12px] cursor-pointer hover:bg-bg hover:text-text disabled:opacity-40", disabled: pendingId === definition.id || pendingId === "refresh", onClick: () => onToggle(definition.id, !definition.enabled), children: pendingId === definition.id ? "Saving" : definition.enabled ? "Disable" : "Enable" })] }, definition.id)))) : (_jsx(OfflinePanel, { title: "No middleware registered.", action: "Refresh after the runtime starts to inspect built-in and plugin middleware." })) })] }));
+}

package/dist/components/settings/tabs/WorkspaceTab.d.ts

@@ -0,0 +1,6 @@
+import type { SettingsConfigStatus } from "@rightkit/agent-ui-core/lib/types";
+export default function WorkspaceTab({ workspaceRoot, settingsConfigStatus, onOpenWorkspace, }: {
+    workspaceRoot: string;
+    settingsConfigStatus: SettingsConfigStatus | null;
+    onOpenWorkspace: () => void;
+}): import("react").JSX.Element;

package/dist/components/settings/tabs/WorkspaceTab.js

@@ -0,0 +1,9 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+import { hostAppName } from "../../../appName.js";
+export default function WorkspaceTab({ workspaceRoot, settingsConfigStatus, onOpenWorkspace, }) {
+    const hasWorkspace = workspaceRoot.trim().length > 0;
+    return (_jsxs("section", { className: "flex flex-col gap-5 p-6", children: [_jsxs("div", { className: "flex flex-col gap-1", children: [_jsx("h3", { className: "text-[16px] font-bold text-text", children: "Workspace" }), _jsxs("p", { className: "text-[13px] text-text-2", children: [hostAppName(), " should always make the active folder, repo mode, and state storage obvious."] })] }), !hasWorkspace ? (_jsx("div", { className: "cr-panel-reveal max-w-[720px] rounded-xl border border-[color-mix(in_srgb,var(--color-accent)_28%,var(--color-line))] bg-panel px-4 py-4", children: _jsxs("div", { className: "flex items-start gap-3", children: [_jsx("span", { className: "grid h-9 w-9 flex-shrink-0 place-items-center rounded-lg border border-[color-mix(in_srgb,var(--color-accent)_35%,var(--color-line))] bg-[color-mix(in_srgb,var(--color-accent)_8%,transparent)] text-accent", children: _jsx(Icon, { name: "folder", size: 15 }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("strong", { className: "block text-[14px] font-semibold text-text", children: ["Open a workspace to activate ", hostAppName()] }), _jsxs("p", { className: "mt-1 max-w-[560px] text-[13px] leading-[1.5] text-text-2", children: ["Settings, model roles, skills, permissions, and transcript state attach to the active repo. Start by choosing the local folder ", hostAppName(), " should work in."] }), _jsxs("button", { type: "button", className: "cr-control-pill mt-3 inline-flex h-9 items-center gap-2 rounded-lg border-0 bg-accent px-4 text-[13px] font-semibold text-on-accent hover:opacity-90", onClick: onOpenWorkspace, children: [_jsx(Icon, { name: "folder", size: 14 }), " Open local folder"] })] })] }) })) : null, _jsxs("div", { className: "flex flex-col gap-3 max-w-[560px]", children: [_jsxs("div", { className: "flex items-center gap-4 px-4 py-3 rounded-xl border border-line bg-panel", children: [_jsx("span", { className: "text-[12px] text-text-3 w-24 flex-shrink-0", children: "Active folder" }), _jsx("strong", { className: "text-[13px] font-medium text-text truncate", children: workspaceRoot || "None selected" })] }), _jsxs("div", { className: "flex items-center gap-4 px-4 py-3 rounded-xl border border-line bg-panel", children: [_jsx("span", { className: "text-[12px] text-text-3 w-24 flex-shrink-0", children: "State file" }), _jsx("strong", { className: "text-[13px] font-medium text-text truncate", children: workspaceRoot ? `${workspaceRoot}/.coderight/config.toml` : "Select a workspace first" })] }), hasWorkspace ? (_jsxs("button", { type: "button", className: "cr-control-pill inline-flex h-9 items-center gap-2 rounded-lg border border-line bg-transparent px-4 text-[13px] text-text-2 cursor-pointer hover:bg-panel hover:text-text self-start", onClick: onOpenWorkspace, children: [_jsx(Icon, { name: "folder" }), " Change workspace"] })) : null] }), _jsxs("div", { className: "flex flex-col gap-3 max-w-[720px]", children: [_jsxs("div", { className: "flex items-center justify-between gap-3", children: [_jsx("h4", { className: "text-[13px] font-semibold text-text", children: "Config files" }), settingsConfigStatus ? (_jsx("span", { className: "text-[11px] text-text-3 truncate", children: settingsConfigStatus.fingerprint.slice(0, 19) })) : null] }), _jsxs("div", { className: "rounded-xl border border-line bg-panel overflow-hidden", children: [(settingsConfigStatus?.files ?? []).map((file) => (_jsxs("div", { className: "grid grid-cols-[88px_72px_1fr] gap-3 px-4 py-3 border-b border-line last:border-b-0 items-center", children: [_jsx("span", { className: "text-[12px] text-text-3 capitalize", children: file.scope }), _jsx("span", { className: `justify-self-start px-2 py-0.5 rounded-full text-[11px] border ${file.exists
+                                            ? "text-accent-2 border-accent-2/40 bg-accent-2/10"
+                                            : "text-text-3 border-line bg-panel-2"}`, children: file.exists ? "Loaded" : "Missing" }), _jsx("span", { className: "text-[12px] text-text-2 truncate", children: file.path })] }, `${file.scope}:${file.path}`))), !settingsConfigStatus ? (_jsx("div", { className: "px-4 py-3 text-[12px] text-text-3", children: "Config metadata loads with settings." })) : null] })] })] }));
+}

package/dist/components/settings/tabs/execution/CoreSandboxTierPanel.d.ts

@@ -0,0 +1,9 @@
+import type { CoreSandboxSettings, CoreSandboxTier, DiagnosticsReport } from "@rightkit/agent-ui-core/lib/types";
+interface CoreSandboxTierPanelProps {
+    report: DiagnosticsReport | null;
+    settings: CoreSandboxSettings | null;
+    pending: boolean;
+    onSaveTier: (tier: CoreSandboxTier) => void;
+}
+export declare function CoreSandboxTierPanel({ report, settings, pending, onSaveTier, }: CoreSandboxTierPanelProps): import("react").JSX.Element;
+export {};

package/dist/components/settings/tabs/execution/CoreSandboxTierPanel.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Select } from "@rightkit/react-shell/react";
+import { useEffect, useState } from "react";
+import { hostOption } from "../../../../appName.js";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+import { diagnosticsLabel, diagnosticsStatusClass } from "../shared.js";
+import { RemoteStatusCard } from "./RemoteStatusCard.js";
+const CORE_SANDBOX_TIERS = [
+    {
+        value: "landlock-seccomp",
+        label: "Landlock + seccomp",
+        detail: "Default local shell filesystem and syscall guard where Linux supports it.",
+    },
+    {
+        value: "landlock",
+        label: "Landlock",
+        detail: "Filesystem guard only; useful when syscall filtering needs to stay off.",
+    },
+    {
+        value: "none",
+        label: "Disabled",
+        detail: "Trusted workloads only; diagnostics will warn on this setting.",
+    },
+];
+export function CoreSandboxTierPanel({ report, settings, pending, onSaveTier, }) {
+    const sandboxCheck = report?.checks.find((check) => check.id === "core_sandbox");
+    const [draftTier, setDraftTier] = useState(settings?.workspaceTier ?? settings?.tier ?? "landlock-seccomp");
+    const persistedWorkspaceTier = settings?.workspaceTier ?? settings?.tier;
+    useEffect(() => {
+        if (persistedWorkspaceTier) {
+            setDraftTier(persistedWorkspaceTier);
+        }
+    }, [persistedWorkspaceTier]);
+    const selectedTier = CORE_SANDBOX_TIERS.find((option) => option.value === draftTier);
+    const savedWorkspaceTier = persistedWorkspaceTier;
+    const tierDirty = settings ? draftTier !== savedWorkspaceTier : draftTier !== "landlock-seccomp";
+    return (_jsxs("section", { className: "grid grid-cols-1 gap-3 rounded-xl border border-line bg-panel p-4 max-w-[980px]", children: [_jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "min-w-0", children: [_jsx("h4", { className: "text-[13px] font-semibold text-text", children: "Core tool sandbox" }), _jsxs("p", { className: "mt-1 text-[12px] text-text-3", children: [hostOption("sandboxTierEnv"), " is the operator minimum; a workspace may only tighten it."] })] }), sandboxCheck ? (_jsx("span", { className: `shrink-0 px-2 py-0.5 rounded-full border text-[11px] ${diagnosticsStatusClass(sandboxCheck.status)}`, children: diagnosticsLabel(sandboxCheck.status) })) : (_jsx("span", { className: "shrink-0 px-2 py-0.5 rounded-full border border-line text-[11px] text-text-3", children: "Not loaded" }))] }), _jsxs("div", { className: "grid gap-3 md:grid-cols-[minmax(0,1fr)_auto] items-end", children: [_jsxs("label", { className: "flex flex-col gap-1 min-w-0", children: [_jsx("span", { className: "text-[10px] uppercase tracking-[0.08em] text-text-3", children: "Sandbox tier" }), _jsx(Select, { value: draftTier, options: [...CORE_SANDBOX_TIERS.map((option) => ({ value: option.value, label: option.label }))], onChange: (value) => setDraftTier(value), label: "Sandbox tier", className: "h-9 min-w-0 rounded-lg border border-line bg-panel-2 px-2 text-[13px] text-text outline-none focus:border-accent/60" }), _jsx("span", { className: "text-[11px] text-text-3", children: selectedTier?.detail ?? "Choose how local shell commands request isolation." })] }), _jsxs("button", { type: "button", className: "inline-flex items-center justify-center gap-2 h-9 px-4 rounded-lg border border-line bg-transparent text-text-2 text-[13px] cursor-pointer hover:bg-panel-2 hover:text-text disabled:opacity-40 whitespace-nowrap", disabled: pending || !tierDirty, onClick: () => onSaveTier(draftTier), children: [_jsx(Icon, { name: "check" }), pending ? "Saving tier" : "Save tier"] })] }), _jsxs("div", { className: "grid gap-2 md:grid-cols-4", children: [_jsx(RemoteStatusCard, { title: "Saved tier", value: sandboxTierLabel(savedWorkspaceTier), status: sandboxCheck?.status ?? "warn", detail: settings
+                            ? `effective ${sandboxTierLabel(settings.tier)} · ${settings.source} · ${settings.storePath}`
+                            : "Load execution settings to inspect the saved workspace tier." }), _jsx(RemoteStatusCard, { title: "Mode", value: "Local OS", status: sandboxCheck?.status ?? "warn", detail: "Linux hosts use Landlock/seccomp where available; non-Linux hosts report an honest warning." }), _jsx(RemoteStatusCard, { title: "Current", value: sandboxCheck ? diagnosticsLabel(sandboxCheck.status) : "Not loaded", status: sandboxCheck?.status ?? "warn", detail: sandboxCheck?.detail ?? "Refresh diagnostics to inspect core sandbox posture." }), _jsx(RemoteStatusCard, { title: "Fix", value: sandboxCheck?.fix ? "Action available" : "No action", status: sandboxCheck?.status ?? "pass", detail: sandboxCheck?.fix || "Sandbox posture is explicit for this daemon." })] })] }));
+}
+function sandboxTierLabel(tier) {
+    return CORE_SANDBOX_TIERS.find((option) => option.value === tier)?.label ?? "Not saved";
+}

package/dist/components/settings/tabs/execution/ExecutionBackendCard.d.ts

@@ -0,0 +1,20 @@
+import type { BackendDoctorReport, ExecutionBackendConfig, ExecutionNetworkProfile } from "@rightkit/agent-ui-core/lib/types";
+import type { NetworkProfileChange, ResourceLimitsChange } from "./types.js";
+interface ExecutionBackendCardProps {
+    backend: ExecutionBackendConfig;
+    isDefault: boolean;
+    doctorReport?: BackendDoctorReport;
+    doctorPending: boolean;
+    defaultPending: boolean;
+    enabledPending: boolean;
+    limitsPending: boolean;
+    networkPending: boolean;
+    networkProfiles: ExecutionNetworkProfile[];
+    onDoctor: () => void;
+    onSetDefault: () => void;
+    onSetEnabled: () => void;
+    onSaveResourceLimits: ResourceLimitsChange;
+    onSaveNetworkProfile: NetworkProfileChange;
+}
+export declare function ExecutionBackendCard({ backend, isDefault, doctorReport, doctorPending, defaultPending, enabledPending, limitsPending, networkPending, networkProfiles, onDoctor, onSetDefault, onSetEnabled, onSaveResourceLimits, onSaveNetworkProfile, }: ExecutionBackendCardProps): import("react").JSX.Element;
+export {};

package/dist/components/settings/tabs/execution/ExecutionBackendCard.js

@@ -0,0 +1,48 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Select } from "@rightkit/react-shell/react";
+import { useState } from "react";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+import { ExecutionBackendLimitsForm } from "./ExecutionBackendLimitsForm.js";
+export function ExecutionBackendCard({ backend, isDefault, doctorReport, doctorPending, defaultPending, enabledPending, limitsPending, networkPending, networkProfiles, onDoctor, onSetDefault, onSetEnabled, onSaveResourceLimits, onSaveNetworkProfile, }) {
+    const [resourceDraft, setResourceDraft] = useState(() => initialResourceDraft(backend));
+    const [networkDraft, setNetworkDraft] = useState(backend.networkProfile ?? "");
+    const verdict = doctorReport?.verdict ?? (backend.enabled ? "warn" : "block");
+    const networkDirty = networkDraft !== (backend.networkProfile ?? "");
+    return (_jsxs("article", { className: "grid grid-cols-[minmax(0,1.1fr)_minmax(0,1.4fr)_minmax(0,1.2fr)_auto] gap-4 px-4 py-4", children: [_jsxs("div", { className: "flex flex-col gap-2 min-w-0", children: [_jsx(BackendIdentity, { backend: backend, isDefault: isDefault }), _jsx("span", { className: "text-[12px] text-text-3 break-all", children: backend.workspaceLayout.root })] }), _jsx(ExecutionBackendLimitsForm, { backend: backend, draft: resourceDraft, pending: limitsPending, onDraftChange: (update) => setResourceDraft((current) => update(current)), onSave: onSaveResourceLimits }), _jsx(DoctorPanel, { backend: backend, doctorReport: doctorReport, verdict: verdict, networkDraft: networkDraft, networkProfiles: networkProfiles, networkDirty: networkDirty, networkPending: networkPending, onNetworkDraftChange: setNetworkDraft, onSaveNetworkProfile: onSaveNetworkProfile }), _jsx(BackendActions, { backend: backend, isDefault: isDefault, doctorPending: doctorPending, defaultPending: defaultPending, enabledPending: enabledPending, onDoctor: onDoctor, onSetDefault: onSetDefault, onSetEnabled: onSetEnabled })] }));
+}
+function BackendIdentity({ backend, isDefault, }) {
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [_jsx("strong", { className: "text-[13px] text-text truncate", children: backend.name }), isDefault ? (_jsx("span", { className: "px-2 py-0.5 rounded-full border border-accent-2/40 text-accent-2 text-[11px]", children: "default" })) : null, _jsx("span", { className: `px-2 py-0.5 rounded-full border text-[11px] ${backend.enabled ? "border-accent-2/40 text-accent-2" : "border-danger/40 text-danger"}`, children: backend.enabled ? "enabled" : "disabled" })] }), _jsxs("span", { className: "text-[12px] text-text-3 truncate", children: [backend.kind, " \u00B7 ", backend.id] })] }));
+}
+function DoctorPanel({ backend, doctorReport, verdict, networkDraft, networkProfiles, networkDirty, networkPending, onNetworkDraftChange, onSaveNetworkProfile, }) {
+    return (_jsxs("div", { className: "flex flex-col gap-2 min-w-0", children: [_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("span", { className: "text-[11px] uppercase tracking-[0.08em] text-text-3", children: "Doctor" }), _jsx("span", { className: `px-2 py-0.5 rounded-full border text-[11px] ${executionVerdictClass(verdict)}`, children: doctorReport ? verdictLabel(doctorReport.verdict) : "Not run" })] }), _jsxs("span", { className: "text-[12px] text-text-3 truncate", children: ["Network: ", backend.networkProfile || "none"] }), _jsxs("div", { className: "grid grid-cols-[minmax(0,1fr)_auto] gap-2", children: [_jsxs("label", { className: "flex flex-col gap-1 min-w-0", children: [_jsx("span", { className: "text-[10px] uppercase tracking-[0.08em] text-text-3", children: "Profile" }), _jsx(Select, { value: networkDraft, options: [{ value: "", label: "None" }, ...networkProfiles.map((profile) => ({ value: profile.id, label: profile.name }))], onChange: (value) => onNetworkDraftChange(value), label: "Profile", className: "h-8 min-w-0 rounded-lg border border-line bg-panel px-2 text-[12px] text-text outline-none focus:border-accent/60" })] }), _jsxs("button", { type: "button", className: "self-end inline-flex items-center justify-center gap-2 h-8 px-3 rounded-lg border border-line bg-transparent text-text-2 text-[13px] cursor-pointer hover:bg-panel hover:text-text disabled:opacity-40 whitespace-nowrap", disabled: !networkDirty || networkPending, onClick: () => onSaveNetworkProfile(networkDraft.trim() || null), children: [_jsx(Icon, { name: "check" }), networkPending ? "Saving" : "Apply"] })] }), doctorReport ? (_jsx("div", { className: "flex flex-col gap-1", children: doctorReport.checks.slice(0, 3).map((check) => (_jsxs("span", { className: "text-[12px] text-text-2 truncate", children: [verdictLabel(check.verdict), " \u00B7 ", check.label] }, check.id))) })) : (_jsx("span", { className: "text-[12px] text-text-3", children: "Run doctor before selecting this for real work." }))] }));
+}
+function BackendActions({ backend, isDefault, doctorPending, defaultPending, enabledPending, onDoctor, onSetDefault, onSetEnabled, }) {
+    return (_jsxs("div", { className: "flex flex-col items-stretch gap-2", children: [_jsx(ActionButton, { disabled: isDefault || enabledPending, onClick: onSetEnabled, icon: backend.enabled ? "pause" : "play", pending: enabledPending, savingLabel: "Saving", idleLabel: backend.enabled ? "Disable" : "Enable" }), _jsx(ActionButton, { disabled: isDefault || !backend.enabled || defaultPending, onClick: onSetDefault, icon: "check", pending: defaultPending, savingLabel: "Setting", idleLabel: "Set default" }), _jsx(ActionButton, { disabled: doctorPending, onClick: onDoctor, icon: "activity", pending: doctorPending, savingLabel: "Checking", idleLabel: "Run doctor" })] }));
+}
+function ActionButton({ disabled, onClick, icon, pending, savingLabel, idleLabel, }) {
+    return (_jsxs("button", { type: "button", className: "inline-flex items-center justify-center gap-2 h-8 px-3 rounded-lg border border-line bg-transparent text-text-2 text-[13px] cursor-pointer hover:bg-panel hover:text-text disabled:opacity-40 whitespace-nowrap", disabled: disabled, onClick: onClick, children: [_jsx(Icon, { name: icon }), pending ? savingLabel : idleLabel] }));
+}
+function initialResourceDraft(backend) {
+    return {
+        cpu: formatLimitInput(backend.resourceLimits.cpu),
+        memoryMb: formatLimitInput(backend.resourceLimits.memoryMb),
+        diskMb: formatLimitInput(backend.resourceLimits.diskMb),
+    };
+}
+function formatLimitInput(value) {
+    return value ? String(value) : "";
+}
+function executionVerdictClass(status) {
+    if (status === "pass")
+        return "border-accent-2/40 text-accent-2";
+    if (status === "warn")
+        return "border-accent/40 text-accent";
+    return "border-danger/40 text-danger";
+}
+function verdictLabel(verdict) {
+    if (verdict === "pass")
+        return "Pass";
+    if (verdict === "warn")
+        return "Warn";
+    return "Block";
+}

package/dist/components/settings/tabs/execution/ExecutionBackendLimitsForm.d.ts

@@ -0,0 +1,10 @@
+import type { ResourceLimitsDraft, ResourceLimitsChange, ExecutionBackendConfig } from "./types.js";
+interface ExecutionBackendLimitsFormProps {
+    backend: ExecutionBackendConfig;
+    draft: ResourceLimitsDraft;
+    pending: boolean;
+    onDraftChange: (update: (draft: ResourceLimitsDraft) => ResourceLimitsDraft) => void;
+    onSave: ResourceLimitsChange;
+}
+export declare function ExecutionBackendLimitsForm({ backend, draft, pending, onDraftChange, onSave, }: ExecutionBackendLimitsFormProps): import("react").JSX.Element;
+export {};

package/dist/components/settings/tabs/execution/ExecutionBackendLimitsForm.js

@@ -0,0 +1,62 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { ResourceLimitInput } from "./TextSettingInput.js";
+import Icon from "@rightkit/agent-ui-core/components/Icon";
+export function ExecutionBackendLimitsForm({ backend, draft, pending, onDraftChange, onSave, }) {
+    const baseline = resourceLimitsDraft(backend);
+    const dirty = draft.cpu !== baseline.cpu ||
+        draft.memoryMb !== baseline.memoryMb ||
+        draft.diskMb !== baseline.diskMb;
+    const valid = resourceDraftValid(draft);
+    const formatted = formatResourceLimits(backend);
+    return (_jsxs("div", { className: "flex flex-col gap-2 min-w-0", children: [_jsx("span", { className: "text-[11px] uppercase tracking-[0.08em] text-text-3", children: "Capabilities" }), _jsx(CapabilitiesList, { backend: backend }), _jsxs("span", { className: "text-[12px] text-text-3", children: ["Resources: ", formatted] }), _jsxs("div", { className: "grid grid-cols-3 gap-2", children: [_jsx(ResourceLimitInput, { label: "CPU", value: draft.cpu, onChange: (cpu) => onDraftChange((current) => ({ ...current, cpu })) }), _jsx(ResourceLimitInput, { label: "RAM MB", value: draft.memoryMb, onChange: (memoryMb) => onDraftChange((current) => ({ ...current, memoryMb })) }), _jsx(ResourceLimitInput, { label: "Disk MB", value: draft.diskMb, onChange: (diskMb) => onDraftChange((current) => ({ ...current, diskMb })) })] }), _jsxs("button", { type: "button", className: "inline-flex items-center justify-center gap-2 h-8 px-3 rounded-lg border border-line bg-transparent text-text-2 text-[13px] cursor-pointer hover:bg-panel hover:text-text disabled:opacity-40 whitespace-nowrap", disabled: !dirty || pending || !valid, onClick: () => onSave(parseResourceLimitsDraft(draft)), children: [_jsx(Icon, { name: "check" }), pending ? "Saving caps" : "Apply caps"] })] }));
+}
+function CapabilitiesList({ backend }) {
+    const labels = Object.entries(backend.supports)
+        .filter(([, enabled]) => enabled)
+        .map(([name]) => capabilityLabel(name));
+    if (labels.length === 0) {
+        return _jsx("span", { className: "text-[12px] text-text-3", children: "No live controls advertised" });
+    }
+    return (_jsx("div", { className: "flex flex-wrap gap-1.5", children: labels.map((label) => (_jsx("span", { className: "px-2 py-0.5 rounded-full border border-line bg-panel text-[11px] text-text-2", children: label }, label))) }));
+}
+function capabilityLabel(value) {
+    return value.replace(/([A-Z])/g, " $1").replace(/^./, (match) => match.toUpperCase());
+}
+function resourceLimitsDraft(backend) {
+    return {
+        cpu: formatLimitInput(backend.resourceLimits.cpu),
+        memoryMb: formatLimitInput(backend.resourceLimits.memoryMb),
+        diskMb: formatLimitInput(backend.resourceLimits.diskMb),
+    };
+}
+function formatLimitInput(value) {
+    return value ? String(value) : "";
+}
+function resourceDraftValid(draft) {
+    return [draft.cpu, draft.memoryMb, draft.diskMb].every((value) => {
+        if (!value.trim())
+            return true;
+        const parsed = Number(value);
+        return Number.isInteger(parsed) && parsed > 0;
+    });
+}
+function parseResourceLimitsDraft(draft) {
+    return {
+        cpu: parseOptionalPositiveInt(draft.cpu),
+        memoryMb: parseOptionalPositiveInt(draft.memoryMb),
+        diskMb: parseOptionalPositiveInt(draft.diskMb),
+    };
+}
+function parseOptionalPositiveInt(value) {
+    const trimmed = value.trim();
+    return trimmed ? Number(trimmed) : null;
+}
+function formatResourceLimits(backend) {
+    const limits = backend.resourceLimits;
+    const parts = [
+        limits.cpu ? `${limits.cpu} CPU` : null,
+        limits.memoryMb ? `${limits.memoryMb} MB RAM` : null,
+        limits.diskMb ? `${limits.diskMb} MB disk` : null,
+    ].filter(Boolean);
+    return parts.length ? parts.join(" · ") : "not capped";
+}