@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/ui/hub-client.js

@@ -1,329 +0,0 @@
-// AgEnD Hub P1, slice 3 (fleet decision 7e5b8a8f; docs/design/hub.md; docs/design/hub-ui-client.md): the one seam
-// between the Hub's web UI and its data. Every Hub page and card (the Hub shell's panels, the member's switcher and
-// "Connect to a Hub") reads and writes through this client — nothing else. Its objects are UI PROJECTIONS
-// (HubPairingView, HubExposureView), never the signed protocol/model records of hub.md.
-//
-// Until slice 1 lands it is a STUB held in this page's memory, shaped as the real answers will be. Re-pointing it at the
-// authenticated member/Hub APIs replaces `createStubClient` (and drops its `control`); the pages do not change. The
-// browser never holds the machine credential or sees wire frames: the real client reads local projections only.
-//
-// Off is the default: the server marks the page (data-hub) only when a switch is on, and nothing here is ever loaded
-// otherwise (app-shell.js and panel-settings.js import the Hub modules only when the mark is present).
-import { appStore } from "/assets/app-store.js";
-
-/** The page's Hub marks (presentation only — a mark confers no authority): { hub, member }. */
-export function hubMarks(doc = typeof document !== "undefined" ? document : null) {
-  const tokens = String((doc && doc.body && doc.body.dataset && doc.body.dataset.hub) || "").split(/\s+/);
-  return { hub: tokens.includes("hub"), member: tokens.includes("member") };
-}
-/** The Hub's operator-chosen name (Hub shell only), from the server's mark; "" when none. */
-export function hubName(doc = typeof document !== "undefined" ? document : null) {
-  const v = doc && doc.body && doc.body.dataset ? doc.body.dataset.hubName : "";
-  return typeof v === "string" ? v.trim().slice(0, 60) : "";
-}
-
-/**
- * A fingerprint as the page shows it: `digest` is the full SHA-256 (64 hex); people compare at least its first 128 bits
- * (32 hex, 8 groups of 4) and can open the whole. `kind` says what it binds — never compare one kind with another:
- * - "pairing": the whole pairing transcript of this attempt (hub.md §2 step 4), shown while it is pending;
- * - "hub-key": the Hub identity/key this fleet approved (paired), or the one the Hub now offers (key_changed).
- * @typedef {{ kind: "pairing" | "hub-key", digest: string }} HubFingerprintView
- */
-/**
- * Pairing, as the member's page sees it (a projection of S1's local status):
- * - { state: "unpaired" }
- * - { state: "pending", memberOrigin, fingerprint (pairing), expiresAt, localConfirmed, ownerConfirmed, adminApproved }
- *     localConfirmed: this fleet's owner compared and confirmed the fingerprint here (confirmFingerprint);
- *     both Hub confirmations are needed: the owner's from a current Hub directory session, the Hub administrator's
- *     approval of this exact fingerprint — possession of the code proves neither. On a member they are null (unknown:
- *     S1 keeps neither; never derived from the local approval or a claim answer); true/false only from a trusted Hub
- *     status projection
- * - { state: "paired", hub: { hubId, name, memberOrigin, webOrigin, fingerprint (hub-key) }, link: "online" | "offline" }
- *     memberOrigin: the pinned transport origin; webOrigin: the separately approved browser origin (they may differ)
- * - { state: "key_changed", hub: {…approved, fingerprint (hub-key)}, offered (hub-key) }
- *     nothing connects; the offered value is never accepted automatically — re-pair or disconnect
- * - { state: "held", hold, memberOrigin? }
- *     a safety hold, visible: hold ∈ "unknown_outcome" | "expired" | "unsaved" | "refused" | "revoked" | "disconnected"
- *     — never shown as paired, never as a successful unpair ("unavailable": an older host, shown as one line, not a hold)
- * @typedef {object} HubPairingView
- */
-/**
- * One of THIS fleet's agents (the local owner's own inventory — never the Hub's), as the exposure list shows it.
- * `agent` is the stable local agent name, never its label. `state` is the local consent; `revision` the exposure policy
- * revision the page shows (enabling refers to it: a stale tab gets "conflict", never a silent widening). `policy`
- * summarises what is shared: P1 shares the agent itself (`{ dataView: "agent", tools: [] }`,
- * docs/design/hub-representative-agent.md). `enforceable` false is never publishable; `reason: "republish_required"`
- * marks a mapping from the older restricted mode that answers nothing until the owner shares the agent again.
- * @typedef {{ agent: string, display: string, exposureId: string | null, revision: number,
- *   state: "published" | "withdrawn" | "frozen", policy: { dataView: string, tools: string[] } | null,
- *   enforceable: boolean, reason?: string }} HubExposureView
- */
-/**
- * Results (docs/design/hub-ui-client.md "Results"). A withdrawal or disconnect fences locally at once (even offline) but
- * answers ok only once the local restrictive state is saved; `remote` is "pending" in P1 (S1 has no acknowledgement or
- * remote revoke), shown as a warning — "confirmed" is reserved.
- * @typedef {{ ok: true, pairing: HubPairingView } | { ok: false, error: "address" | "code" | "busy" | "unreachable" | "refused" }} HubConnectResult
- * @typedef {{ ok: true, view: HubExposureView } | { ok: true, pending: { expiresAt: number }, view: HubExposureView, settled: Promise<unknown> }
- *   | { ok: false, error: "not_paired" | "unknown_agent" | "unknown_view" | "not_enforceable" | "limit" | "conflict" | "unsaved" | "unavailable" }} HubPublishResult
- * @typedef {{ ok: true, remote: "confirmed" | "pending" } | { ok: false, error: "unsaved" | "conflict" | "unavailable" }} HubWithdrawResult
- */
-
-/**
- * The client every Hub page uses (one per page): on a Hub's own workspace the Hub's /hub/v1/* API at this page's own
- * origin, with the Hub's session; on a member fleet's Settings card this fleet's /api/hub/member/*; in tests the stub.
- */
-let client = null;
-/**
- * The Settings confirmation (settings-confirm.js), loaded only when a member fleet's card first needs it — never
- * statically: a Hub's own listener serves only the Hub's three modules (src/hub/http/compose.ts HUB_UI_MODULES), so a
- * static import of a fleet Settings module left the Hub workspace unable to load at all.
- */
-let confirmModule = null, confirmLoaded = null;
-const loadConfirm = () => (confirmModule ??= import("./settings-confirm.js").then((m) => { confirmLoaded = m; return m; }, (e) => { confirmModule = null; throw e; }));
-const lazyConfirm = {
-  async api(path, opts) { return (await loadConfirm()).api(path, opts); },
-  // Called before the first request goes out: the same key settings-confirm.js would make.
-  newKey(prefix = "k") {
-    if (confirmLoaded) return confirmLoaded.newKey(prefix);
-    return typeof crypto !== "undefined" && crypto.randomUUID ? crypto.randomUUID() : `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-  },
-  // Only ever asked of a response api() returned, so the module is loaded by then.
-  isPendingResponse(r) { return confirmLoaded ? confirmLoaded.isPendingResponse(r) : false; },
-  track(view, label) { return loadConfirm().then((m) => m.track(view, label)); },
-};
-export function hubClient() {
-  // S3c: a member fleet's card uses this fleet's own endpoints (createMemberClient); the Hub workspace its own; tests the stub.
-  return client ??= hubMarks().hub ? createHubWebClient() : hubMarks().member ? createMemberClient({ confirm: lazyConfirm })
-    : createStubClient({ agents: () => (appStore.get().instances || []).filter((i) => i && i.name) });
-}
-/** For tests and the switch-over to slice 1: put another client in place (null: the stub again, fresh). */
-export function setHubClient(next) { client = next; }
-
-/** UX checks only (the server parses and canonicalizes): an https:// origin, and a code of the shape people type. */
-export const ADDRESS_HINT = /^https:\/\/[^\s/?#@]+\/?$/i;
-export const CODE_HINT = /^[A-Za-z0-9][A-Za-z0-9 -]{4,62}[A-Za-z0-9]$/;
-/** The part of a fingerprint people compare: its first 32 hex digits (128 bits) in 8 groups of 4. */
-export function compareGroups(digest) { return String(digest || "").replace(/[^0-9a-f]/gi, "").toLowerCase().slice(0, 32).replace(/(.{4})(?=.)/g, "$1 "); }
-/** An origin the switcher may open: the approved webOrigin of a paired Hub, https only, nothing after the host. */
-export function safeWebOrigin(pairing) {
-  if (!pairing || pairing.state !== "paired" || !pairing.hub) return null;
-  try {
-    const u = new URL(String(pairing.hub.webOrigin || ""));
-    return u.protocol === "https:" && !u.username && !u.password ? u.origin : null;
-  } catch { return null; }
-}
-
-/**
- * The stub: deterministic answers in this page's memory (no request leaves the page). Its fingerprints are placeholders
- * — a real one binds the pairing transcript (S1) and is never derived from the address and code.
- */
-export function createStubClient({ now = () => Date.now(), agents = () => [] } = {}) {
-  let pairing = { state: "unpaired" };
-  const consent = new Map();                // agent → { state, revision }
-  let enforceable = new Set();
-  const listeners = new Set();
-  const emit = () => { for (const fn of listeners) { try { fn(pairing); } catch { /* a listener's own failure */ } } };
-  let seq = 0;
-  const placeholder = () => { seq++; let s = ""; for (let i = 0; i < 64; i++) s += ((i * 7 + seq * 13) % 16).toString(16); return s; };
-  const view = (a) => {
-    const c = consent.get(a.name) || { state: "withdrawn", revision: 0 };
-    const ok = enforceable.has(a.name);
-    return { agent: a.name, display: a.display_name || a.name, exposureId: c.revision ? `stub-${a.name}` : null, revision: c.revision,
-      state: c.state, policy: ok && c.state === "published" ? { dataView: c.dataView || "agent", tools: c.tools ? [...c.tools] : [] } : null, enforceable: ok, ...(ok ? {} : { reason: "restricted_execution_pending" }),
-      // P1 representative agent: the one choice is the agent itself, with no Hub tools; no pending confirmation.
-      choices: ok ? { dataViews: [{ id: "agent", label: a.display_name || a.name }], tools: [] } : { dataViews: [], tools: [] },
-      pending: null };
-  };
-  const api = {
-    stub: true,
-    /** @returns {Promise<HubPairingView>} */
-    async pairing() { return pairing; },
-    /** @returns {Promise<HubConnectResult>} */
-    async connect({ address, code }) {
-      const a = String(address || "").trim(), c = String(code || "").trim();
-      if (!ADDRESS_HINT.test(a)) return { ok: false, error: "address" };
-      if (!CODE_HINT.test(c)) return { ok: false, error: "code" };
-      if (pairing.state === "pending" || pairing.state === "paired") return { ok: false, error: "busy" };
-      pairing = { state: "pending", memberOrigin: a.replace(/\/$/, ""), fingerprint: { kind: "pairing", digest: placeholder() },
-        expiresAt: now() + 10 * 60_000, ownerConfirmed: false, adminApproved: false };
-      emit();
-      return { ok: true, pairing };
-    },
-    /** Withdraw a pending request (or clear a hold). */
-    async cancel() { if (pairing.state === "pending" || pairing.state === "held") { pairing = { state: "unpaired" }; emit(); } return pairing; },
-    /** Leave the Hub: every exposure is withdrawn with it. @returns {Promise<HubWithdrawResult>} */
-    async disconnect() {
-      const online = pairing.state === "paired" && pairing.link === "online";
-      pairing = { state: "unpaired" };
-      for (const [k, c] of consent) consent.set(k, { state: "withdrawn", revision: c.revision + 1 });
-      emit();
-      return { ok: true, remote: online ? "confirmed" : "pending" };
-    },
-    /** @returns {Promise<HubExposureView[]>} */
-    async exposures() { return agents().map(view); },
-    /**
-     * Publish (on) or withdraw (off) one agent, against the revision the page showed.
-     * @returns {Promise<HubPublishResult | HubWithdrawResult>}
-     */
-    async setExposed(agent, on, expectedRevision, choice = null) {
-      const a = agents().find((x) => x.name === agent);
-      if (!a) return { ok: false, error: "unknown_agent" };
-      const c = consent.get(agent) || { state: "withdrawn", revision: 0 };
-      if (expectedRevision !== c.revision) return { ok: false, error: "conflict" };
-      if (!on) {
-        consent.set(agent, { state: "withdrawn", revision: c.revision + 1 });
-        return { ok: true, remote: pairing.state === "paired" && pairing.link === "online" ? "confirmed" : "pending" };
-      }
-      if (pairing.state !== "paired") return { ok: false, error: "not_paired" };
-      if (!enforceable.has(agent)) return { ok: false, error: "not_enforceable" };
-      consent.set(agent, { state: "published", revision: c.revision + 1, dataView: choice && choice.dataViewId, tools: choice && choice.tools });
-      return { ok: true, view: view(a) };
-    },
-    /** Hear pairing changes (slice 1: the member's local status projections). @returns {() => void} */
-    subscribe(fn) { listeners.add(fn); return () => listeners.delete(fn); },
-    /** The stub's own controls (tests, smokes, a demo) — what the Hub, its administrator and the owner would do. */
-    control: {
-      ownerConfirmed() { if (pairing.state === "pending") { pairing = { ...pairing, ownerConfirmed: true }; emit(); } },
-      approve({ name = "Team Hub", webOrigin } = {}) {
-        if (pairing.state !== "pending") return;
-        pairing = { state: "paired", hub: { hubId: "00000000-0000-4000-8000-000000000001", name, memberOrigin: pairing.memberOrigin,
-          webOrigin: webOrigin || pairing.memberOrigin, fingerprint: { kind: "hub-key", digest: placeholder() } }, link: "online" };
-        emit();
-      },
-      link(state) { if (pairing.state === "paired") { pairing = { ...pairing, link: state }; emit(); } },
-      keyChanged() { if (pairing.state === "paired") { pairing = { state: "key_changed", hub: pairing.hub, offered: { kind: "hub-key", digest: placeholder() } }; emit(); } },
-      hold(hold) { pairing = { state: "held", hold, ...(pairing.memberOrigin || pairing.hub ? { memberOrigin: pairing.memberOrigin || pairing.hub.memberOrigin } : {}) }; emit(); },
-      enforceable(names) { enforceable = new Set(names); },
-    },
-  };
-  return api;
-}
-
-/**
- * AgEnD Hub P1, slice 3b: the Hub workspace's client — /hub/v1/* on this page's own origin (the Hub's), with its own
- * session cookie (HttpOnly; this page never sees it) and the CSRF token /hub/v1/session gives a same-origin read.
- * Every answer is { ok: true, ...body } or { ok: false, status, code }; a 401 also tells the page the session ended.
- */
-export function createHubWebClient({ fetchImpl = (...a) => fetch(...a) } = {}) {
-  let csrf = null;
-  const ended = new Set();
-  async function call(method, path, body) {
-    const headers = { Accept: "application/json" };
-    if (body !== undefined) headers["Content-Type"] = "application/json";
-    if (method !== "GET" && csrf) headers["X-AgEnD-Hub-CSRF"] = csrf;
-    let r;
-    try { r = await fetchImpl(path, { method, headers, credentials: "same-origin", cache: "no-store", body: body === undefined ? undefined : JSON.stringify(body) }); }
-    catch { return { ok: false, status: 0, code: "unreachable" }; }
-    let json = null;
-    try { json = await r.json(); } catch { json = null; }
-    if (r.status === 401) { csrf = null; for (const fn of ended) { try { fn(); } catch { /* a listener's own failure */ } } }
-    if (!r.ok) return { ok: false, status: r.status, code: (json && typeof json.code === "string" && json.code) || "failed", retryAfter: Number(r.headers.get("Retry-After")) || 0 };
-    return { ok: true, ...(json && typeof json === "object" ? json : {}) };
-  }
-  const id = (v) => encodeURIComponent(String(v));
-  return {
-    stub: false, web: true,
-    /** Hear the session end (a 401 anywhere). @returns {() => void} */
-    onSignedOut(fn) { ended.add(fn); return () => ended.delete(fn); },
-    async session() { const r = await call("GET", "/hub/v1/session"); if (r.ok) csrf = r.signedIn ? r.csrf || null : null; return r; },
-    async signIn(login, password) { const r = await call("POST", "/hub/v1/session", { login, password }); if (r.ok) csrf = r.csrf || null; return r; },
-    async signOut() { const r = await call("DELETE", "/hub/v1/session"); csrf = null; return r; },
-    catalog() { return call("GET", "/hub/v1/exposures"); },
-    grant(input) { return call("POST", "/hub/v1/grants", input); },
-    revokeGrant(grantId, revision) { return call("DELETE", `/hub/v1/grants/${id(grantId)}?revision=${id(revision)}`); },
-    activity(exposureId) { return call("GET", `/hub/v1/exposures/${id(exposureId)}/activity`); },
-    freeze(exposureId, revision, admin = false) { return call("POST", `/hub/v1/${admin ? "admin/" : ""}exposures/${id(exposureId)}/freeze`, { revision }); },
-    quotaVisibility(exposureId, revision, visible) { return call("POST", `/hub/v1/exposures/${id(exposureId)}/quota`, { revision, visible }); },
-    rooms() { return call("GET", "/hub/v1/rooms"); },
-    openRoom(exposureId, grantId) { return call("POST", "/hub/v1/rooms", { exposureId, grantId }); },
-    ask(roomId, idempotencyKey, text) { return call("POST", `/hub/v1/rooms/${id(roomId)}/messages`, { idempotencyKey, text }); },
-    read(roomId, after = 0) { return call("GET", `/hub/v1/rooms/${id(roomId)}/messages?after=${id(after)}`); },
-    chooseButtons(roomId, input) { return call("POST", `/hub/v1/rooms/${id(roomId)}/buttons`, input); },
-    pairings() { return call("GET", "/hub/v1/pairings"); },
-    confirmPairing(pairingId, fingerprint) { return call("POST", `/hub/v1/pairings/${id(pairingId)}/confirm`, { fingerprint }); },
-    adminOverview() { return call("GET", "/hub/v1/admin/overview"); },
-    createPairing(login) { return call("POST", "/hub/v1/admin/pairings", { login }); },
-    approvePairing(pairingId, fingerprint) { return call("POST", `/hub/v1/admin/pairings/${id(pairingId)}/approve`, { fingerprint }); },
-    revokeFleet(fleetId) { return call("POST", `/hub/v1/admin/fleets/${id(fleetId)}/revoke`); },
-  };
-}
-
-/**
- * S3c (S-55): the member fleet's client — this fleet's own endpoints (/api/hub/member/*, local admin only, never the
- * public link). Exposures: the list; publish/revise through the Settings confirmation (a 202 is "waiting for your
- * confirmation": `pending` and `settled`, a promise of the decision); withdraw at once (ok once saved; remote
- * "pending": the Hub learns it with the next snapshot). An older host (404): { ok: false, error: "unavailable" }.
- * `confirm` is settings-confirm.js (loaded with the card): { api, isPendingResponse, track, newKey }.
- */
-export function createMemberClient({ confirm, pollMs = 5000, doc = typeof document !== "undefined" ? document : null, timers = globalThis }) {
-  const listed = async () => {
-    const r = await confirm.api("/api/hub/member/exposures");
-    return r.ok && r.body && Array.isArray(r.body.exposures) ? r.body.exposures : r.status === 404 ? null : [];
-  };
-  const fail = (r) => ({ ok: false, error: r.status === 404 ? "unavailable" : (r.body && typeof r.body.error === "string" ? r.body.error : "unsaved") });
-  // Pairing (S3c PR B): GET the projection; connect / confirm / disconnect go through the Settings confirmation (a 202:
-  // "sent for confirmation", followed in the background; the poll shows the result); cancel at once.
-  const pairingNow = async () => {
-    const r = await confirm.api("/api/hub/member/pairing");
-    if (r.ok && r.body && r.body.pairing) return r.body.pairing;
-    return { state: "held", hold: r.status === 404 ? "unavailable" : "unsaved" };
-  };
-  const step = async (name, body) => {
-    const r = await confirm.api(`/api/hub/member/pairing/${name}`, { method: "POST", headers: { "Idempotency-Key": confirm.newKey("hub") }, body: JSON.stringify(body || {}) });
-    if (confirm.isPendingResponse(r)) { void Promise.resolve(confirm.track(r.body.pending_change, "hub")).catch(() => {}); return { ok: true, pendingConfirmation: true, pairing: await pairingNow() }; }
-    if (r.status === 404) return { ok: false, error: "unavailable" };
-    return r.body && typeof r.body === "object" ? r.body : { ok: false, error: "unsaved" };
-  };
-  const listeners = new Set();
-  let timer = null, inFlight = false;
-  const tick = async () => {
-    timer = null;
-    if (!listeners.size) return;
-    if (!(doc && doc.hidden) && !inFlight) {
-      inFlight = true;
-      try { const p = await pairingNow(); for (const fn of listeners) { try { fn(p); } catch { /* a listener's own failure */ } } } catch { /* the next tick */ }
-      finally { inFlight = false; }
-    }
-    if (listeners.size) timer = timers.setTimeout(tick, pollMs);
-  };
-  return {
-    stub: false, member: true,
-    pairing: pairingNow,
-    async connect({ address, code }) {
-      const a = String(address || "").trim(), c = String(code || "").trim();
-      if (!ADDRESS_HINT.test(a)) return { ok: false, error: "address" };
-      if (!CODE_HINT.test(c)) return { ok: false, error: "code" };
-      return step("connect", { address: a, code: c });
-    },
-    confirmFingerprint(digest) { return step("confirm", { digest }); },
-    /** `shown`: the pairing the page showed when the person chose Disconnect (never re-read after their dialog). */
-    async disconnect(shown) {
-      // #3115 r2: exactly the pairing shown — its hub and bindingId; the server refuses any other (a replacement, a re-pair).
-      const hubId = shown && (shown.hub ? shown.hub.hubId : shown.hubId), binding = shown && shown.binding;
-      if (!hubId || !binding) return { ok: false, error: "conflict" };
-      const r = await step("disconnect", { hubId, binding }); return r.ok ? { ok: true, remote: "pending", ...(r.pendingConfirmation ? { pendingConfirmation: true } : {}) } : { ok: false, error: r.error === "unsaved" ? "unsaved" : "conflict" }; },
-    async cancel() { const r = await confirm.api("/api/hub/member/pairing/cancel", { method: "POST", body: "{}" }); return r.ok && r.body && r.body.pairing ? r.body.pairing : pairingNow(); },
-    /** The local status, every pollMs while visible (one request at a time; none while hidden); stops with the last listener. */
-    subscribe(fn) { listeners.add(fn); if (!timer) timer = timers.setTimeout(tick, pollMs); return () => { listeners.delete(fn); if (!listeners.size && timer) { timers.clearTimeout(timer); timer = null; } }; },
-    async exposures() { const rows = await listed(); return rows || []; },
-    async setExposed(agent, on, expectedRevision, choice = null) {
-      const rows = await listed();
-      if (rows === null) return { ok: false, error: "unavailable" };
-      const row = rows.find((x) => x.agent === agent);
-      if (!row) return { ok: false, error: "unknown_agent" };
-      if (!on) {
-        if (!row.exposureId) return { ok: false, error: "conflict" };
-        const r = await confirm.api(`/api/hub/member/exposures/${encodeURIComponent(row.exposureId)}/withdraw`, { method: "POST", body: JSON.stringify({ expectedRevision }) });
-        return r.ok && r.body && r.body.ok ? { ok: true, remote: r.body.remote === "confirmed" ? "confirmed" : "pending" } : fail(r);
-      }
-      if (!choice || typeof choice.dataViewId !== "string" || !Array.isArray(choice.tools)) return { ok: false, error: "not_enforceable" };
-      const r = await confirm.api("/api/hub/member/exposures", { method: "POST", headers: { "Idempotency-Key": confirm.newKey("hub") },
-        body: JSON.stringify({ agent, dataViewId: choice.dataViewId, tools: choice.tools, expectedRevision }) });
-      if (confirm.isPendingResponse(r)) {
-        const p = r.body.pending_change;
-        return { ok: true, pending: { expiresAt: p.expires_at }, view: { ...row, pending: { expiresAt: p.expires_at } }, settled: confirm.track(p, "hub") };
-      }
-      return r.ok && r.body && r.body.ok ? { ok: true, view: r.body.view } : fail(r);
-    },
-  };
-}

package/dist/ui/hub-owner-strings.js

@@ -1,51 +0,0 @@
-// #3226 C: the words of the Hub's My shared agents and Administration pages, en and zh-TW, and their stylesheet. A module
-// of its own (#3261 review): a tab that loaded B's hub-chat-strings.js / hub-chat.css before C keeps them, so C's words
-// and rules come only from here.
-import { register, t } from "/assets/app-i18n.js";
-
-register("hubOwner", {
-  en: {
-    active: "Active", adminLead: "Pair a fleet with this Hub and see the fleets that are paired. You can't read anyone's chats here.",
-    allow: "Allow…", allowDays: "For", allowGo: "Allow", allowLogin: "Their sign-in name",
-    allowLoginHint: "The account they sign in to this Hub with.", allowTitle: "Allow someone to ask {0}", approveGo: "Approve…",
-    approvedTag: "Approved", backToMine: "My shared agents", codeFor: "Code for {0}", codeUnusedYet: "Not used yet", fleetOf: "{0}'s fleet",
-    makeCode: "Make code", mayAsk: "{0} may ask", mayAskNone: "No one may ask yet", mayAskOne: "1 may ask",
-    mineLead: "The agents that answer for you on this Hub: who may ask them, until when, and who asked lately. To share or stop sharing one, use your fleet's Settings → Access & security.",
-    noFleets: "No fleet is paired yet.", ownerChecked: "The owner confirmed", ownerLogin: "Owner's sign-in name", pairSteps: "Pair a fleet",
-    pairedFleets: "Paired fleets · {0}", pauseGo: "Pause…", pauseLead: "No one can ask it until it is shared again. What was asked stays readable.",
-    pauseTitle: "Pause questions", pendingLead: "Check that this fingerprint matches the one your fleet shows, then confirm.",
-    pendingPairings: "Pairings waiting for you", recent: "Recent questions",
-    recentLead: "Who asked and when, and whether it was answered. What they asked stays in your fleet's chat.", recentNone: "No one has asked yet.",
-    refresh: "Refresh", revokeItem: "Revoke…", revokedTag: "Revoked", rowMenu: "More for {0}", scopeHub: "This Hub", scopeYou: "Yours",
-    sharedCount: "Shared · {0}", stageAnswered: "Answered", stageNot: "Not answered", stageWaiting: "Waiting", statePaused: "Paused",
-    stateShared: "Shared", stateWithdrawn: "Withdrawn", stepApprove: "You approve", stepApproveHint: "Check the same fingerprint, then approve.",
-    stepCode: "Make a pairing code", stepCodeHint: "For the fleet's owner: they type it in their fleet within 10 minutes; it works once.",
-    stepOwner: "The owner checks the fingerprint", stepOwnerHint: "In their fleet, then on this Hub under My shared agents.",
-    untilLeft: "until {0} ({1})", waitingOwner: "Waiting for the owner", whoMayAsk: "Who may ask",
-  },
-  "zh-TW": {
-    active: "使用中", adminLead: "把 fleet 配對到這個 Hub，並查看已配對的 fleet。這裡看不到任何人的對話。", allow: "允許提問…", allowDays: "期限", allowGo: "允許", allowLogin: "對方的登入名稱",
-    allowLoginHint: "對方登入這個 Hub 用的帳號。", allowTitle: "允許提問 {0}", approveGo: "核准…", approvedTag: "已核准", backToMine: "我分享的 Agent",
-    codeFor: "給 {0} 的配對碼", codeUnusedYet: "還沒使用", fleetOf: "{0} 的 fleet", makeCode: "產生配對碼", mayAsk: "{0} 人可以提問", mayAskNone: "還沒有人可以提問",
-    mayAskOne: "1 人可以提問", mineLead: "在這個 Hub 上代表你回答的 Agent：誰可以提問、到什麼時候、最近誰問過。要開始或停止分享，請到你 fleet 的 設定 → 存取與安全。", noFleets: "還沒有配對的 fleet。",
-    ownerChecked: "擁有者已確認", ownerLogin: "擁有者的登入名稱", pairSteps: "配對一個 fleet", pairedFleets: "已配對的 fleet · {0}", pauseGo: "暫停…",
-    pauseLead: "重新分享之前，沒有人能再提問。已經問過的內容仍然看得到。", pauseTitle: "暫停提問", pendingLead: "確認這個指紋和你 fleet 上顯示的一致，再按確認。", pendingPairings: "等你核對的配對",
-    recent: "最近的提問", recentLead: "誰問的、什麼時候，有沒有回答。問了什麼留在你 fleet 的聊天裡。", recentNone: "還沒有人問過。", refresh: "重新整理", revokeItem: "撤銷…", revokedTag: "已撤銷",
-    rowMenu: "{0} 的更多動作", scopeHub: "這個 Hub", scopeYou: "你的", sharedCount: "分享中 · {0}", stageAnswered: "已回答", stageNot: "未回答", stageWaiting: "等待中",
-    statePaused: "已暫停", stateShared: "分享中", stateWithdrawn: "已停止分享", stepApprove: "你核准", stepApproveHint: "核對同一個指紋後核准。", stepCode: "產生配對碼",
-    stepCodeHint: "給 fleet 的擁有者：10 分鐘內在他的 fleet 輸入，只能用一次。", stepOwner: "擁有者核對指紋", stepOwnerHint: "在他的 fleet 上，然後在這個 Hub 的「我分享的 Agent」確認。",
-    untilLeft: "到 {0}（{1}）", waitingOwner: "等待擁有者", whoMayAsk: "可以提問的人",
-  },
-});
-/** hubOwner.* words. */
-export const ho = (key, ...values) => t(`hubOwner.${key}`, ...values);
-
-/** The owner and admin pages' stylesheet, linked once (an older hub-chat.css lacks these rules). */
-export function linkHubOwnerCss(doc = typeof document !== "undefined" ? document : null) {
-  try {
-    if (!doc || !doc.head || doc.querySelector('link[data-hub-owner-css="1"]')) return;
-    const link = doc.createElement("link");
-    link.setAttribute("rel", "stylesheet"); link.setAttribute("href", "/assets/hub-owner.css"); link.setAttribute("data-hub-owner-css", "1");
-    doc.head.appendChild(link);
-  } catch { /* the pages still work without it */ }
-}

package/dist/ui/hub-provider-guidance.js

@@ -1,31 +0,0 @@
-// Lazy, fixed local-owner copy only. Wire reasons are never rendered as exception text or translation keys.
-// A member switcher may retain the old hub-strings module before Settings loads. Own these new words here.
-import { register } from "/assets/app-i18n.js";
-register("hub", {
-  en: {
-    "provider_engine-unavailable": "Docker is unavailable. Start the local Docker engine and check access to its configured Unix socket, then reload the member configuration.",
-    "provider_engine-unsupported": "This provider requires a Linux/amd64 Docker engine. Use a Linux/amd64 member environment, then reload its configuration.",
-    "provider_image-unconfigured": "No provider image is selected. Set imageId to a reviewed local image's immutable SHA-256 ID in the member provider configuration, then reload it.",
-    "provider_image-mismatch": "The selected image is missing or does not match this provider. Select the matching reviewed local image and reload the member configuration. Images are never pulled automatically.",
-    "provider_credential-unconfigured": "No usable model API key is configured. Set credentialRef to this member's private model API key file, then reload the member configuration.",
-    "provider_unavailable": "The isolated provider is unavailable. Review the local member provider configuration and the fleet log, then reload the configuration.",
-  },
-  "zh-TW": {
-    "provider_engine-unavailable": "無法連接 Docker。請啟動本機 Docker 引擎，確認能存取設定的 Unix socket，再重新載入成員設定。",
-    "provider_engine-unsupported": "此提供者需要 Linux/amd64 的 Docker 引擎。請改用 Linux/amd64 成員環境，再重新載入設定。",
-    "provider_image-unconfigured": "尚未選取提供者映像檔。請在成員提供者設定的 imageId 填入已審查本機映像檔的不可變 SHA-256 識別碼，再重新載入設定。",
-    "provider_image-mismatch": "選取的映像檔不存在或與此提供者不符。請選取相符且已審查的本機映像檔，再重新載入成員設定。系統不會自動下載映像檔。",
-    "provider_credential-unconfigured": "尚未設定可用的模型 API 金鑰。請將 credentialRef 設為此成員的私密模型 API 金鑰檔案，再重新載入成員設定。",
-    "provider_unavailable": "隔離提供者目前無法使用。請檢查本機成員提供者設定與 fleet 記錄，再重新載入設定。",
-  },
-});
-const keys = new Map([
-  ["engine-unavailable", "provider_engine-unavailable"],
-  ["engine-unsupported", "provider_engine-unsupported"],
-  ["image-unconfigured", "provider_image-unconfigured"],
-  ["image-mismatch", "provider_image-mismatch"],
-  ["credential-unconfigured", "provider_credential-unconfigured"],
-  ["unavailable", "provider_unavailable"],
-  ["provider-unavailable", "provider_unavailable"],
-]);
-export const guidanceFor = (reason) => keys.get(reason) ?? null;

package/dist/ui/hub-quota.js

@@ -1,85 +0,0 @@
-// Lazy B/C seam. New words stay here so a cached Hub dictionary can load this module after an upgrade.
-import { html, useEffect, useState } from "/assets/app-html.js";
-import { register, t } from "/assets/app-i18n.js";
-import { hubClient } from "./hub-client.js";
-
-if (typeof document !== "undefined" && !document.querySelector('link[data-hub-quota]')) {
-  const css = document.createElement("link"); css.rel = "stylesheet"; css.href = "/assets/hub-quota.css";
-  css.setAttribute("data-hub-quota", ""); document.head.appendChild(css);
-}
-
-register("hubQuota", {
-  en: {
-    title: "Subscription quota", status: "Availability", available: "Available", near_limit: "Near limit", exhausted: "Exhausted", unknown: "Unknown",
-    back: "Exhausted, back about {0}", queue: "Questions will queue until the agent can answer again.",
-    coarse: "Only a broad availability band is shared.", visibility: "Show quota to people asking", visibilityHint: "Share this agent's availability band. Exact usage stays in your fleet.",
-    failed: "Could not save. Try again.", conflict: "This agent changed. Reload before saving.",
-  },
-  "zh-TW": {
-    title: "訂閱額度", status: "可用狀態", available: "充足", near_limit: "快用完", exhausted: "用完", unknown: "未知",
-    back: "用完，約 {0} 恢復", queue: "問題會排隊等候，待 Agent 可以回答時再處理。",
-    coarse: "只分享概略的可用狀態。", visibility: "向提問者顯示額度", visibilityHint: "分享這個 Agent 的可用狀態。確切用量留在你的 Fleet。",
-    failed: "未能儲存，請再試一次。", conflict: "Agent 已變更，請重新載入後再儲存。",
-  },
-});
-const word = (key, ...args) => t(`hubQuota.${key}`, ...args);
-const bands = new Set(["available", "near_limit", "exhausted", "unknown"]);
-function quotaOf(room) { return room && room.quota && bands.has(room.quota.band) ? room.quota : null; }
-const statusClass = band => band === "available" ? "ok" : band === "near_limit" ? "warn" : band === "exhausted" ? "crit" : "";
-export function quotaLabel(quota) {
-  if (!quota || !bands.has(quota.band)) return word("unknown");
-  const at = quota.resetsAt;
-  if (quota.band === "exhausted" && Number.isSafeInteger(at) && at > 0 && at <= 8.64e15 && at % 300_000 === 0) {
-    const date = new Date(at);
-    const clock = `${String(date.getHours()).padStart(2, "0")}:${String(date.getMinutes()).padStart(2, "0")}`;
-    return word("back", clock);
-  }
-  return word(quota.band);
-}
-export function QuotaCard({ room }) {
-  const quota = quotaOf(room);
-  if (!quota) return null;
-  return html`<section class="u-provider hub-quota-card" aria-label=${word("title")}>
-    <div class="u-head"><strong>${word("title")}</strong></div>
-    <div class="u-metric"><div class="u-row"><span class="u-label">${word("status")}</span>
-      <span class=${`u-status ${statusClass(quota.band)}`} role="status">${quotaLabel(quota)}</span></div>
-      <div class="u-sub">${word("coarse")}</div></div>
-  </section>`;
-}
-export function QuotaChip({ room, fallback = null }) {
-  const quota = quotaOf(room);
-  if (!quota || quota.band === "available") return fallback;
-  return html`<span class=${`tag u-status hub-quota-chip ${statusClass(quota.band)}`} role="status">${quotaLabel(quota)}</span>`;
-}
-export function QuotaBanner({ room }) {
-  const quota = quotaOf(room);
-  if (!quota || quota.band !== "exhausted") return null;
-  return html`<div class="msg status-line hub-quota-banner" role="status"><div class="body"><div class="st-text">
-    ${quotaLabel(quota)} · ${word("queue")}
-  </div></div></div>`;
-}
-export function QuotaVisibilityRow({ exposure, onSaved }) {
-  const [visible, setVisible] = useState(exposure.quotaVisible !== false);
-  const [busy, setBusy] = useState(false), [error, setError] = useState(null);
-  useEffect(() => { setVisible(exposure.quotaVisible !== false); setError(null); }, [exposure.id, exposure.revision, exposure.quotaVisible]);
-  const save = async e => {
-    if (busy) return;
-    const next = e.target.checked;
-    const previous = visible;
-    setVisible(next); setBusy(true); setError(null);
-    let result;
-    try {
-      const client = hubClient();
-      result = typeof client.quotaVisibility === "function" ? await client.quotaVisibility(exposure.id, exposure.revision, next) : { ok: false };
-    } catch { result = { ok: false }; }
-    setBusy(false);
-    if (!result.ok) { setVisible(previous); setError(word(result.code === "conflict" ? "conflict" : "failed")); return; }
-    setVisible(result.quotaVisible);
-    if (onSaved) onSaved(result);
-  };
-  return html`<section class="s-sec hub-quota-visibility"><h3>${word("title")}</h3>
-    <label class="hub-quota-setting"><span><strong>${word("visibility")}</strong><span class="note">${word("visibilityHint")}</span></span>
-      <input class="s-ui-toggle" type="checkbox" role="switch" aria-label=${word("visibility")} checked=${visible} disabled=${busy} onChange=${save} /></label>
-    ${error ? html`<p class="err" role="alert">${error}</p>` : null}
-  </section>`;
-}