@skaile/forge-settings 1.3.2 → 1.4.0

package/src/runtime/vue/providers-panel-model.ts

@@ -6,10 +6,18 @@
  */
 
 import type { EnvLayerId } from "../shared/env-vars";
+import type {
+  CredentialExpiry,
+  ProviderDeploymentRow,
+  ProviderSignInId,
+} from "../shared/provider-accounts";
 import type {
   AIProviderCredentialKind,
   AIProviderKind,
   AIProviderSurface,
+  AIProviderTransport,
+  DataZone,
+  DataZoneRule,
 } from "../shared/provider-registry";
 import type { ProvidersPanelClient } from "./providers-client";
 
@@ -50,6 +58,17 @@ export interface ProvidersPanelProps {
    * `layer`; a string replaces it; `false` hides it (Add provider stays).
    */
   note?: string | false;
+  /**
+   * Expert mode: the sign-in step also offers the raw reference form
+   * (`env:` / `keyring:` / `cmd:` / `platform:`) and expert-only parameters
+   * (`api_version`) become editable. Default `false`.
+   */
+  expert?: boolean;
+  /**
+   * The host's data-zone rule ("Where may AI process data?"). Rows outside it
+   * show a muted note naming the rule. Absent or `any`: no row is marked.
+   */
+  dataZoneRule?: DataZoneRule;
 }
 
 /** Emits both variants declare. */
@@ -72,12 +91,29 @@ export interface ProvidersPanelEntry {
   baseUrl?: string;
   preset?: string;
   surface?: AIProviderSurface;
+  /** How requests reach the surface, when not `direct`. */
+  transport?: AIProviderTransport;
+  /** Routing parameters (`resource`, `deployment`, `api_version`, …) of an `llm`/`embed` entry. */
+  transportParams?: Record<string, string>;
+  /**
+   * When the credential expires (ISO timestamp), for a credential that
+   * reports one. The row then shows "Expires in N days · Renew".
+   */
+  credentialExpiresAt?: string | null;
   enabled: boolean;
   locked: boolean;
   /** Registry documents holding the id, lowest first: `["instance"]`, `["workspace"]` or both. */
   layers: ProvidersPanelLayer[];
   /** The scope's own document's values for the editable fields the dialog does not show. */
   layerFields?: Record<string, unknown>;
+  /** Where the entry processes data. Absent (an older host): the preset's zone, else `transfer`. */
+  dataZone?: DataZone;
+  /** The entry's `eu_processing` switch. */
+  euProcessing?: boolean;
+  /** The entry's `allowed_models`; absent = every model, `[]` = none. */
+  allowedModels?: string[];
+  /** Logical model ids the entry declares (`model_map`); absent: its models come from discovery. */
+  modelIds?: string[];
 }
 
 /** One catalog preset, as `GET /api/providers/presets` and `.../detected` list it. */
@@ -86,9 +122,15 @@ export interface ProvidersPanelPreset {
   label: string;
   kind: AIProviderKind;
   surface?: AIProviderSurface;
+  /** How requests reach the surface; Azure transports offer Entra ID sign-in. */
+  transport?: AIProviderTransport;
   base_url?: string;
   base_url_env?: string;
   credential: { kind: AIProviderCredentialKind; env?: string };
+  /** Default parameters. */
+  params?: Record<string, string>;
+  /** `params` keys an entry naming this preset must supply. */
+  required_params?: string[];
 }
 
 /** Where a row's entry lives relative to the scope's own document. */
@@ -131,8 +173,25 @@ export interface ProvidersPanelRow extends ProvidersPanelEntry {
   origin: string;
   /** `configured · <source>`, `missing <VAR>`, the resolver's reason, or `No credential needed.`. */
   status: string;
-  /** Which other layer defines or overrides the credential; see the panel contract. */
   overrideNotices: string[];
+  /** "Microsoft Azure · Entra ID · contoso-ai": family · sign-in kind · resource. */
+  accountLine: string;
+  /** The credential's expiry, when it reports one. */
+  expiry: CredentialExpiry | null;
+  /** "Renew" is offered next to the expiry: the credential can be changed here. */
+  canRenew: boolean;
+  /** The entry's effective data zone. */
+  zone: DataZone;
+  /** The zone chip: EU / EU option / Transfer / Local. */
+  zoneLabel: string;
+  /** "EU processing is on for this account" is offered: an `eu_option` entry the panel may write. */
+  canSetEuProcessing: boolean;
+  /** Why the host's data-zone rule keeps the entry out, naming the rule; `null` when it does not. */
+  blockedNote: string | null;
+  /** The model chip: "All models" | "N models". `null` for a voice entry. */
+  modelsChip: string | null;
+  /** "Models allowed here" can be changed: an `llm`/`embed` entry the panel may write. */
+  canFilterModels: boolean;
 }
 
 /** The add/edit dialog's fields. */
@@ -144,13 +203,46 @@ export interface ProvidersPanelForm {
   surface: string;
   /** Empty: the preset's endpoint. */
   baseUrl: string;
-  /** Adding only: the `env:` variable the credential references. */
+  /** Key sign-in: the `env:` variable the credential references. */
   envName: string;
-  /** Adding only, "Set value now": written to the scope's `.env`, never to the provider route. */
+  /** Key sign-in, "Set value now": written to the scope's `.env`, never to the provider route. */
   secret: string;
+  /** The chosen "How do you sign in?" option. */
+  signIn: ProviderSignInId | "";
+  /** `reference` sign-in: the typed reference. */
+  credentialRef: string;
+  /** Routing parameters by key (`resource`, `deployment`, `api_version`, …). */
+  params: Record<string, string>;
 }
 
-// ── Constants ─────────────────────────────────────────────────────────────────
+/** The Microsoft Azure card's fields. */
+export interface ProvidersPanelAzureForm {
+  /** Azure resource name, shared by both entries. */
+  resource: string;
+  /** Write an Azure OpenAI entry. */
+  useOpenAI: boolean;
+  /** Write a Claude on Foundry entry. */
+  useFoundry: boolean;
+  /** Azure OpenAI deployments: deployment name → logical model id (`model_map`). */
+  deployments: ProviderDeploymentRow[];
+  /** Azure OpenAI `api_version`; prefilled, editable in expert mode. */
+  apiVersion: string;
+}
+
+/** The add dialog's step: preset library, then the account fields, then the test of what was created. */
+export type ProvidersPanelDialogStep = "library" | "account" | "done";
+
+/** "Models allowed here": every model, or only the listed ones. */
+export type ProvidersPanelModelsMode = "all" | "only";
+
+/** The "Models allowed here" editor's fields. */
+export interface ProvidersPanelModelsForm {
+  mode: ProvidersPanelModelsMode;
+  /** The ticked model ids. */
+  selected: string[];
+  /** The checklist's search text. */
+  query: string;
+}
 
 /** The preset select's value for an entry that names no preset. */
 export const CUSTOM_PRESET = "__custom__";
@@ -158,6 +250,9 @@ export const CUSTOM_PRESET = "__custom__";
 /** Credential select value: open the inline key editor. */
 export const CREDENTIAL_ENTER_KEY = "__enter_key__";
 
+/** The preset select's value for the Microsoft Azure account (Azure OpenAI and/or Claude on Foundry). */
+export const AZURE_ACCOUNT = "__azure__";
+
 /** Credential select value: open the inline reference editor. */
 export const CREDENTIAL_OTHER_REF = "__other_ref__";
 
@@ -198,6 +293,27 @@ export const ENV_REF_PATTERN = /^env:(.+)$/;
 /** The credential kind a written reference gets when the row states none. */
 export const FALLBACK_CREDENTIAL_KIND: AIProviderCredentialKind = "api_key_header";
 
+/** A row's model chip: "All models" without an allow-list, else its size. */
+export function providerModelsChip(allowedModels: readonly string[] | undefined): string {
+  if (allowedModels === undefined) return "All models";
+  return allowedModels.length === 1 ? "1 model" : `${allowedModels.length} models`;
+}
+
+/**
+ * The checklist's ids: the known models (declared or discovered) in their
+ * order, then any allowed id neither lists (so it can still be unticked),
+ * narrowed by a case-insensitive `query`.
+ */
+export function providerModelChoices(
+  known: readonly string[],
+  allowed: readonly string[],
+  query = "",
+): string[] {
+  const ids = [...new Set([...known, ...allowed])];
+  const needle = query.trim().toLowerCase();
+  return needle ? ids.filter((id) => id.toLowerCase().includes(needle)) : ids;
+}
+
 export const ENV_SOURCE_LABEL: Record<EnvLayerId, string> = {
   instance: "instance .env",
   workspace: "workspace .env",
@@ -237,11 +353,13 @@ export function nonEnvSourceLabel(ref: string): string | undefined {
   return undefined;
 }
 
-export const EMPTY_FORM: Readonly<ProvidersPanelForm> = {
+export const EMPTY_FORM: Readonly<Omit<ProvidersPanelForm, "params">> = {
   preset: "",
   id: "",
   surface: "",
   baseUrl: "",
   envName: "",
   secret: "",
+  signIn: "",
+  credentialRef: "",
 };