@sigrun/sigrun 0.1.6 → 0.2.0

package/node_modules/@sigrun/shared/dist/views.d.ts

@@ -37,8 +37,8 @@
 import type { JsonObject } from "./json.js";
 import type { Sharing } from "./access.js";
 import type { JobWire } from "./jobs.js";
-import type { InteractionAnswer, InteractionBody, InteractionDiff, InteractionField, InteractionOption, InteractionRecord, InteractionStatus } from "./interactions.js";
-import type { AmbientBody, AmbientGauge, AmbientLedgerEntry, AmbientLine, AmbientMetrics, AmbientRecord, AmbientRow } from "./ambient.js";
+import type { InteractionAnswer, InteractionRecord, InteractionStatus } from "./interactions.js";
+import type { AmbientRecord } from "./ambient.js";
 import type { EffectiveServerSetting, SettingsFile } from "./settings.js";
 /** A model reference as served on the wire (pi-durable `ModelRef`). */
 export interface ModelRefWire {
@@ -345,8 +345,7 @@ export type AmbientWire = AmbientRecord;
 export interface AmbientList {
     readonly ambient: readonly AmbientWire[];
 }
-export type { InteractionAnswer, InteractionBody, InteractionDiff, InteractionField, InteractionOption, InteractionStatus, };
-export type { AmbientBody, AmbientGauge, AmbientLedgerEntry, AmbientLine, AmbientMetrics, AmbientRow, };
+export type { InteractionAnswer, InteractionStatus, };
 /**
  * The `GET/PATCH /v1/settings` payload (Task 8b): the settings file's
  * effective contents — the `HarnessSettings` pass-throughs plus the
@@ -362,6 +361,23 @@ export type { AmbientBody, AmbientGauge, AmbientLedgerEntry, AmbientLine, Ambien
 export interface SettingsResponse extends SettingsFile {
     /** The live registry snapshot's composed tool names, deduplicated. */
     readonly toolRoster: readonly string[];
+    /**
+     * The restart keys whose stored value differs from the boot snapshot
+     * (UI-blocks U4, spec §13.2): the pending-restart callout's key list.
+     * Computed per request over the fresh file read; `[]` when nothing
+     * waits for a restart. NOT a settable key: the store's validation
+     * rejects it on PATCH (400 `invalid_field`), and the wire patch type
+     * Omits it.
+     */
+    readonly pendingRestart: readonly string[];
+    /**
+     * The write's own classification (§13.1) — present ONLY on a PATCH
+     * response: which touched keys applied live vs. which are pending a
+     * restart. NOT a settable key; absent on GET.
+     */
+    readonly applied?: readonly string[];
+    /** The restart-pending companion of {@link applied}. PATCH responses only. */
+    readonly pending?: readonly string[];
     /**
      * The resolved server section per flattened dotted key
      * (`"server.port"`, `"server.compaction.reserveTokens"`, …), each
@@ -472,6 +488,25 @@ export interface MetaResponse {
      * U4 — a boot constant, like the rest of meta.
      */
     readonly dev: boolean;
+    /** The boot-time execution-jail decision (multi-user M1). */
+    readonly isolation: {
+        readonly mode: "auto" | "always" | "off";
+        /** Whether enforcement is active; filled by the later enforcement task. */
+        readonly active: boolean;
+        readonly available: boolean;
+        readonly abi: number;
+        readonly reason?: string;
+        readonly osUsers: "available" | "off" | string;
+    };
+    /**
+     * The supervised flag (UI-blocks U4 Task 2, spec §13.3): `true` when
+     * the deployment guarantees the process is restarted after an
+     * intentional `exit 0` (the Helm chart and docker compose set
+     * `SIGRUN_SUPERVISED=1`; a bare `docker run` does not). The §13.2
+     * pendingRestart callout renders its Restart button only for a
+     * supervised admin; otherwise it says "Restart sigrun to apply".
+     */
+    readonly supervised: boolean;
     /**
      * The seam inventory (docs/approval-ux-seams.md): per extension, the
      * interaction kinds / ambient surface keys its factory declared.
@@ -584,6 +619,13 @@ export interface AuthCheckResponse {
  * every served entry, empty when the extension declared none). The
  * webui's Extensions settings section renders this list.
  */
+export interface ServiceStatusWire {
+    readonly slug: string;
+    readonly name: string;
+    readonly user: string;
+    readonly state: "running" | "idle" | "failed";
+    readonly lastError?: string;
+}
 export interface ExtensionInfo {
     readonly name: string;
     readonly status: string;
@@ -597,6 +639,8 @@ export interface ExtensionInfo {
     readonly workers: readonly WorkerStatus[];
     /** The declared HTTP routes, one `{method, path, auth}` each (W5 Task 2). */
     routes?: readonly ExtensionRouteInfo[];
+    /** Per-user service states; admin-only inventory. */
+    readonly services: readonly ServiceStatusWire[];
     /** The declared surfaces, one `{id, title, icon, placement}` each (U3 Task 1); absent when none. */
     surfaces?: readonly ExtensionSurfaceInfo[];
     /**
@@ -616,7 +660,7 @@ export interface ExtensionInfo {
     readonly inert?: "no gateway";
     /**
      * Built-in extensions (Task 2, pi parity): `true` marks a core-shipped
-     * built-in (codemode / MCP / tool search); ABSENT on configured
+     * built-in (codemode / MCP / tool search / OAuth); ABSENT on configured
      * extensions. A replaced built-in reports its row with `builtin: true`
      * and `replacedBy` (its status is the skip, never `"ok"`); a disabled
      * built-in is absent from the list entirely.
@@ -656,6 +700,52 @@ export interface ExtensionSurfaceInfo {
 export interface ExtensionsResponse {
     readonly extensions: readonly ExtensionInfo[];
 }
+/**
+ * The `GET /v1/settings/sections` payload (UI-blocks U4 Task 4, spec
+ * §13.4): the settings panel's nav list + the search index. Core's
+ * sections come first (slug `core`), then the loaded extensions'
+ * sections ordered by slug. The index covers every searchable row —
+ * a section title, a core settings key, an extension section's field —
+ * with the section id a hit jumps to.
+ */
+export interface SettingsSectionsResponse {
+    readonly sections: readonly SettingsSectionEntry[];
+    readonly index: readonly SettingsSectionIndexEntry[];
+}
+/** One nav entry: the section's mount (slug + id) and its display. */
+export interface SettingsSectionEntry {
+    readonly slug: string;
+    readonly id: string;
+    readonly title: string;
+    readonly icon: string;
+    /** Personal sections group under My settings and store caller-owned data. */
+    readonly scope?: "user";
+    /** Explicit admin gate (user sections are otherwise non-admin by default). */
+    readonly admin?: boolean;
+}
+/** One search-index row (the label search's hit shape, spec §13.4). */
+export interface SettingsSectionIndexEntry {
+    /** The section the hit belongs to (the nav target). */
+    readonly slug: string;
+    readonly sectionId: string;
+    /** The row kind: a core settings key, an extension form field, or a section title. */
+    readonly kind: "core-key" | "field" | "section";
+    /** The searchable text (the field/section label). */
+    readonly label: string;
+    /** The field's help string, when it declares one. */
+    readonly help?: string;
+    /** The core key path / the field's form name, when the row has one. */
+    readonly key?: string;
+}
+/**
+ * The settings search's filter (UI-blocks U4 Task 4 round-2): the ONE
+ * implementation both channels run — the webui panel and the TUI view
+ * previously carried byte-identical copies, which drifted apart once
+ * (the TUI's lacked the key match). Case-insensitive over label + help
+ * + key; an empty query filters to nothing (the picker carries the
+ * full list).
+ */
+export declare function filterSettingsIndex(index: readonly SettingsSectionIndexEntry[], query: string): readonly SettingsSectionIndexEntry[];
 /**
  * A `GET /v1/extensions/:slug/secrets` entry: the key and its winning
  * source — NEVER the value (the API lists and writes secrets; it never
@@ -669,6 +759,18 @@ export interface ExtensionSecret {
 export interface ExtensionSecretsResponse {
     readonly secrets: readonly ExtensionSecret[];
 }
+/**
+ * The `GET`/`PUT /v1/extensions/:slug/settings` payload (UI-blocks U4,
+ * spec §13.2): the stored object verbatim under `settings`, plus the
+ * pending-restart slot. Extension-declared fields default to LIVE
+ * (§13.1), so `pendingRestart` is `[]` today; the field exists so the
+ * §13.4 callout renders from one shape across core and extension
+ * settings.
+ */
+export interface ExtensionSettingsResponse {
+    readonly settings: Record<string, unknown>;
+    readonly pendingRestart: readonly string[];
+}
 export type { CommandsResponse, CommandRunResponse, SlashCommand } from "./commands.js";
 export type { SessionMeta, SessionMetaPatch } from "./session-meta.js";
 /**
@@ -685,9 +787,16 @@ export interface WhoamiResponse {
     readonly user?: string;
     readonly name?: string;
     readonly email?: string;
+    /** The caller's own workspace/grants; never another directory user's. */
+    readonly workspace?: string;
+    readonly grants?: readonly {
+        readonly path: string;
+        readonly access: "ro" | "rw";
+    }[];
     readonly admin: boolean;
     readonly service: boolean;
-    readonly method: "none" | "token" | "proxy" | "host";
+    readonly method: "none" | "token" | "session" | "proxy" | "host";
+    readonly provider?: string;
 }
 /**
  * The `GET /v1/onboarding` payload (core hardening W1 Task 4, spec
@@ -712,20 +821,29 @@ export interface OnboardingState {
  * admin-visible material and the routes that serve this type are
  * admin-gated. `createdAt` is epoch ms.
  *
- * `admin` is the STORED flag (the users-admin UI toggles it); the proxy
- * group grant rides separately as `groupAdmin` (gateway C8): effective
- * admin is `admin || groupAdmin === true`, and the last-admin guard
- * counts `admin` alone.
+ * `admin` is the STORED flag (the users-admin UI toggles it); `groups`
+ * is the deduplicated union of stored source memberships. `groupAdmin`
+ * is DERIVED from those groups and `server.auth.adminGroups`, retained
+ * for one release for the users UI; the last-admin guard counts `admin`
+ * alone.
  */
 export interface UserWire {
     readonly user: string;
     readonly name?: string;
     readonly email?: string;
     readonly admin: boolean;
-    /** The persisted proxy-group grant — present only under `adminGroups`. */
+    /** DERIVED from stored groups and configured adminGroups; never persisted. */
     readonly groupAdmin?: boolean;
+    /** The deduplicated union of groups stored by authenticating sources. */
+    readonly groups?: readonly string[];
+    readonly workspace?: string;
+    readonly grants?: readonly {
+        readonly path: string;
+        readonly access: "ro" | "rw";
+    }[];
+    readonly osUser?: string;
     readonly createdAt: number;
-    readonly source: "proxy" | "invite" | "cli";
+    readonly source: "proxy" | "invite" | "cli" | "login";
 }
 /** The `POST /v1/onboarding/claim` payload (Task 4): the user (plus the
  * minted token when `issueToken` was requested — shown once, never
@@ -751,6 +869,8 @@ export interface TokenWire {
     readonly name: string;
     readonly user: string;
     readonly createdAt: number;
+    readonly kind?: "api" | "session";
+    readonly expiresAt?: number;
 }
 /** The `POST /v1/auth/tokens` payload (Task 4): the secret once, the
  * digest-free record alongside it. */
@@ -758,6 +878,29 @@ export interface TokenCreateResponse {
     readonly token: string;
     readonly record: TokenWire;
 }
+/**
+ * One external identity linked to a directory user (multi-user §11.3):
+ * the `accounts.json` record verbatim. `provider` is `chat:<channel>` or
+ * `login:<slug>:<id>`; `subject` is the provider's stable subject
+ * (numeric id, `+E.164`, email-shaped — opaque to sigrun).
+ *
+ * Served to extensions as `host.accounts` and to users as
+ * `GET /v1/auth/accounts`.
+ */
+export interface AccountLinkWire {
+    readonly provider: string;
+    readonly subject: string;
+    readonly user: string;
+    readonly linkedAt: number;
+    readonly via: "login" | "self" | "pairing" | "admin";
+}
+/**
+ * The `GET /v1/auth/accounts` payload (multi-user §11.3): the caller's
+ * links, or one named user's for an admin.
+ */
+export interface AccountsResponse {
+    readonly accounts: readonly AccountLinkWire[];
+}
 /**
  * One host event on the `GET /v1/events` SSE wire: `event: <type>` plus
  * this object as the single-line `data:` JSON. Conversation-scoped
@@ -811,6 +954,20 @@ export type HostEventWire = {
     /** W4 Task 4 (§8.4): the changed job's summary, WITHOUT `access` — the events stream computes `accessOf` per principal and adds it before delivery (a hidden job's event is withheld entirely). */
     readonly type: "job.changed";
     readonly job: Omit<JobWire, "access">;
+} | {
+    /** UI-blocks U4 (spec §13.2): a settings write landed. `scope` is
+     *  `"server"` for `PATCH /v1/settings` or `{extension: slug}` for
+     *  an extension's settings PUT; `keys` are the flattened paths the
+     *  write touched (dotted, the §13.1 registry vocabulary — extension
+     *  writes name their own top-level object keys). Delivered to
+     *  ADMINS only (settings are operator surface; the events route's
+     *  exhaustive switch enforces it).
+     */
+    readonly type: "settings.changed";
+    readonly scope: "server" | {
+        readonly extension: string;
+    };
+    readonly keys: readonly string[];
 } | {
     /** UI-blocks U3 Task 4 (spec §7.3): one surface instance changed. `k` is the hashed instance key (sha256(slug + "\0" + id + "\0" + key) hex) — the event NEVER carries params or data (render/data are principal-specific; the watcher refetches as itself). Delivered only to streams in the watcher registry whose stored access is not `"none"`. */
     readonly type: "surface.changed";
@@ -819,4 +976,10 @@ export type HostEventWire = {
     readonly k: string;
     readonly rev: number;
     readonly treeRev: number;
+} | {
+    /** UI-blocks U5 Task 2 (spec §8.2): one CHAT block surface changed. The chat address is `(conversationId, entryId)` — no secret to watchers of that conversation (unlike params) — so the event names them directly instead of the hashed `k`. Delivered through the conversation-scoped path: the events route re-snapshots the SessionMeta and checks `accessOf` per event (hidden conversations see nothing). */
+    readonly type: "surface.changed";
+    readonly conversationId: number;
+    readonly entryId: string;
+    readonly rev: number;
 };

package/node_modules/@sigrun/shared/dist/views.js

@@ -36,3 +36,19 @@
  */
 /** The `Content-Type` of the JSONL export/import wire (Task 5b/5c). */
 export const JSONL_CONTENT_TYPE = "application/x-ndjson";
+/**
+ * The settings search's filter (UI-blocks U4 Task 4 round-2): the ONE
+ * implementation both channels run — the webui panel and the TUI view
+ * previously carried byte-identical copies, which drifted apart once
+ * (the TUI's lacked the key match). Case-insensitive over label + help
+ * + key; an empty query filters to nothing (the picker carries the
+ * full list).
+ */
+export function filterSettingsIndex(index, query) {
+    const q = query.trim().toLowerCase();
+    if (q === "")
+        return [];
+    return index.filter((entry) => entry.label.toLowerCase().includes(q) ||
+        (entry.help ?? "").toLowerCase().includes(q) ||
+        (entry.key ?? "").toLowerCase().includes(q));
+}

package/node_modules/@sigrun/shared/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/shared",
-	"version": "0.1.2",
+	"version": "0.2.0",
 	"description": "sigrun shared leaf package \u2014 theme tokens, turn/conversation shaping, and the channel wire types (pure leaf, zero dependencies)",
 	"type": "module",
 	"exports": {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/sigrun",
-	"version": "0.1.6",
+	"version": "0.2.0",
 	"description": "Durable personal assistant on pi-durable",
 	"type": "module",
 	"exports": {
@@ -44,19 +44,24 @@
 		"@earendil-works/pi-durable": "1.3.0",
 		"@earendil-works/pi-tui": "^1.3.0",
 		"@fastify/static": "^10.1.7",
-		"@sigrun/ext-codemode": "0.1.0",
-		"@sigrun/ext-mcp": "0.2.0",
-		"@sigrun/ext-tool-search": "0.1.0",
-		"@sigrun/shared": "0.1.2",
+		"@sigrun/ext-codemode": "0.1.1",
+		"@sigrun/ext-gateway": "0.1.1",
+		"@sigrun/ext-mcp": "0.2.1",
+		"@sigrun/ext-tool-search": "0.1.1",
+		"@sigrun/oauth": "0.1.1",
+		"@sigrun/shared": "0.2.0",
 		"croner": "^10.0.1",
 		"fastify": "^5.12.7",
+		"sharp": "^0.35.5",
 		"typebox": "1.3.27"
 	},
 	"bundleDependencies": [
 		"@sigrun/shared"
 	],
 	"optionalDependencies": {
-		"@sigrun/tui": "0.1.1"
+		"@sigrun/sandbox-linux-arm64": "0.2.0",
+		"@sigrun/sandbox-linux-x64": "0.2.0",
+		"@sigrun/tui": "0.2.0"
 	},
 	"devDependencies": {
 		"@types/node": "^26.6.4",