@schlessera/brain-ui-server 0.33.1 → 0.34.0

package/src/app.ts

@@ -170,7 +170,8 @@ export function createApp(options: CreateAppOptions = {}): BrainUiApp {
   assertPasskeyConfig(config.webauthn);
   // A missing (or unrecognized) agent backend refuses to boot HERE, not on the
   // first turn — otherwise /api/health reports healthy while every turn is
-  // guaranteed to fail. Resolution only; the module still loads lazily.
+  // guaranteed to fail. Descriptor loading and profile validation happen here;
+  // backend construction and model discovery remain lazy.
   // Skipped when the embedder injects its own registry.
   if (!options.registry) assertBackendResolvable(config.agent);
 

package/src/config/env.ts

@@ -447,12 +447,12 @@ export interface AgentConfig {
   confirmBashPatterns: string[] | null;
   claudeCodePath: string;
   defaultModel: string;
-  /** Raw BRAIN_UI_CLAUDE_PROFILES JSON, parsed lazily by the registry. */
+  /** Raw BRAIN_UI_CLAUDE_PROFILES JSON, parsed at boot and again by the registry. */
   profilesJson: string | null;
   /**
-   * Raw BRAIN_UI_PI_PROFILES JSON, parsed by the registry. When set, the pi
-   * backend runs alongside the Claude backend and these profiles join the
-   * picker.
+   * Raw BRAIN_UI_PI_PROFILES JSON, parsed at boot and again by the registry.
+   * When set, the pi backend runs alongside the Claude backend and these
+   * profiles join the picker.
    */
   piProfilesJson: string | null;
   modelDiscovery: boolean;

package/src/routes/pi-auth.ts

@@ -16,7 +16,7 @@
 
 import { Hono } from "hono";
 import type { AgentConfig } from "../config/env.js";
-import { loadBackendModule, parsePiProfiles } from "../agent/backend.js";
+import { loadBackendDescriptor, loadBackendModule } from "../agent/backend.js";
 import { readJsonBody } from "../middleware/body-limit.js";
 import { requireJson } from "../middleware/origin.js";
 
@@ -64,10 +64,15 @@ export function createPiAuthRoutes(deps: PiAuthRoutesDeps): Hono {
    * Vendors the deployment actually configured — the only providers this
    * surface may touch. Empty when pi is not in play at all.
    */
-  function allowedProviders(): string[] {
-    const fromProfiles = parsePiProfiles(agent.piProfilesJson, agent.profilesJson).map(
-      (profile) => profile.vendor
-    );
+  async function allowedProviders(): Promise<string[]> {
+    const descriptor = await loadBackendDescriptor("pi", deps.importer);
+    const parsed = descriptor.profileSchema.parse(agent.piProfilesJson, {
+      occupiedProfiles: [],
+    });
+    if (!parsed.ok) throw new Error(parsed.errors[0]?.message ?? "Invalid pi profiles.");
+    const fromProfiles = parsed.profiles
+      .map((profile) => profile.vendor)
+      .filter((vendor): vendor is string => typeof vendor === "string");
     return [...new Set(fromProfiles)];
   }
 
@@ -101,7 +106,7 @@ export function createPiAuthRoutes(deps: PiAuthRoutesDeps): Hono {
       // Not-configured is a normal state, not an error: the client hides the
       // whole card on an empty list.
       if (!piConfigured()) return c.json({ providers: [] });
-      const providers = allowedProviders();
+      const providers = await allowedProviders();
       if (providers.length === 0) return c.json({ providers: [] });
       const auth = await getAuth();
       return c.json({ providers: await auth.status(providers) });
@@ -116,7 +121,7 @@ export function createPiAuthRoutes(deps: PiAuthRoutesDeps): Hono {
       if (!piConfigured()) {
         return c.json({ error: "The pi backend is not configured." }, 409);
       }
-      if (!providerId || !allowedProviders().includes(providerId)) {
+      if (!providerId || !(await allowedProviders()).includes(providerId)) {
         return c.json({ error: "Unknown provider." }, 400);
       }
       const auth = await getAuth();
@@ -149,7 +154,7 @@ export function createPiAuthRoutes(deps: PiAuthRoutesDeps): Hono {
         providerId?: unknown;
       } | null;
       const providerId = typeof body?.providerId === "string" ? body.providerId : "";
-      if (!providerId || !allowedProviders().includes(providerId)) {
+      if (!providerId || !(await allowedProviders()).includes(providerId)) {
         return c.json({ error: "Unknown provider." }, 400);
       }
       const auth = await getAuth();

package/src/routes/web-search.ts

@@ -44,7 +44,7 @@ import {
 } from "@schlessera/brain-ui-sdk/server";
 import type { AgentConfig } from "../config/env.js";
 import { resolveWebSearchEnv } from "../config/env.js";
-import { loadBackendModule, parsePiProfiles } from "../agent/backend.js";
+import { loadBackendDescriptor, loadBackendModule } from "../agent/backend.js";
 
 /** One toggleable provider, as the Settings UI renders it. */
 export interface WebSearchProviderView {
@@ -142,17 +142,19 @@ export function createWebSearchRoutes(deps: WebSearchRoutesDeps): Hono {
    * createApp refuses to boot on it — but a throw would take the whole
    * settings card down over a label, so it degrades to an empty list.
    */
-  const appliesTo = (): string[] => {
+  const appliesTo = async (): Promise<string[]> => {
     try {
-      return parsePiProfiles(agent.piProfilesJson ?? null, agent.profilesJson ?? null).map(
-        (p) => p.label
-      );
+      const descriptor = await loadBackendDescriptor("pi", deps.importer);
+      const parsed = descriptor.profileSchema.parse(agent.piProfilesJson ?? null, {
+        occupiedProfiles: [],
+      });
+      return parsed.ok ? parsed.profiles.map((profile) => profile.label) : [];
     } catch {
       return [];
     }
   };
 
-  function view(): WebSearchConfigView {
+  async function view(): Promise<WebSearchConfigView> {
     const config = readConfig(configPath());
     const override = readWebSearchOverride(config);
     const order = orderByCost(readWebSearchRouting(config));
@@ -161,7 +163,7 @@ export function createWebSearchRoutes(deps: WebSearchRoutesDeps): Hono {
       configured: true,
       order,
       overriddenBy: override,
-      appliesTo: appliesTo(),
+      appliesTo: await appliesTo(),
       providers: WEB_SEARCH_PROVIDERS.map((p) => ({
         id: p.id,
         label: p.label,
@@ -180,13 +182,13 @@ export function createWebSearchRoutes(deps: WebSearchRoutesDeps): Hono {
   }
 
   return new Hono()
-    .get("/web-search", (c) => {
+    .get("/web-search", async (c) => {
       // Not-configured is a normal state, not an error: the client hides the
       // whole card (same convention as /pi-auth/providers).
       if (!piConfigured()) {
         return c.json({ configured: false, order: [], overriddenBy: null, appliesTo: [], providers: [] });
       }
-      return c.json(view());
+      return c.json(await view());
     })
     .put("/web-search", requireJson(), async (c) => {
       if (!piConfigured()) {
@@ -317,6 +319,6 @@ export function createWebSearchRoutes(deps: WebSearchRoutesDeps): Hono {
         /* config written; cache clearing is an optimization */
       }
 
-      return c.json(view());
+      return c.json(await view());
     });
 }