@w6w/embed 0.1.1 → 0.2.1

package/dist/endpoints-B2ynbZo-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoints-B2ynbZo-.js","sources":["../src/lib/new-id.ts","../src/lib/callable-descriptors.ts","../src/repos/functions.ts","../src/repos/endpoints.ts"],"sourcesContent":["/**\n * Platform id minter (studio copy). Algorithm is byte-identical to the server's\n * `packages/ids/ids.ts`: alphabet base62, drop byte b >= 248 (largest multiple of 62\n * that fits a byte), keep ALPHABET[b % 62]. No modulo bias.\n */\n\nexport const ID_ALPHABET = \"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz\";\n\n/** Largest multiple of 62 <= 256; bytes at or above it are rejected. */\nconst REJECT_AT = 248;\n\n/** Byte source seam; defaults to `crypto.getRandomValues`. */\nexport type ByteSource = (n: number) => Uint8Array;\n\nconst defaultBytes: ByteSource = (n) => crypto.getRandomValues(new Uint8Array(n));\n\n/** `<prefix>_<len chars of base62>`. */\nexport function newId(prefix: string, len = 16, bytes: ByteSource = defaultBytes): string {\n  let out = \"\";\n  while (out.length < len) {\n    for (const b of bytes(Math.max(len - out.length, 8))) {\n      if (b >= REJECT_AT) continue;\n      out += ID_ALPHABET[b % 62];\n      if (out.length === len) break;\n    }\n  }\n  return `${prefix}_${out}`;\n}\n","/**\n * `CALLABLE_DESCRIPTORS` — the ONE place the three resource kinds' chrome copy,\n * their Settings-modal behaviour and their id minting are named (T4.2.1,\n * `building-blocks.F3.md` §F-3).\n *\n * Before this file, every \"is this a workflow?\" branch lived inline at its call\n * site: `CallableSettingsModal.tsx` carried seven `kind ===` conditionals for\n * three different questions (may the key be edited? does this kind have tags?\n * which placeholder does the name field use?), and each list page repeated the\n * same title/description/empty-state/`data-testid` literals. A fourth kind — or\n * a rename — meant finding them all by hand.\n *\n * **Data only, never JSX.** A `Descriptor` holds strings, booleans and the one\n * id prefix; the kind-specific *editor body* stays React code in its own page\n * (`src/pages/FunctionsPage.tsx`), because this file is `.ts` and is loaded by\n * `node --test` (`.tsx` cannot be — `package.json`'s `test:unit` glob), exactly\n * the constraint `src/lib/save-invalidation.ts` and `src/lib/alias-rail.ts`\n * document for themselves. So `kind ===` moves OUT of the modal and the pages\n * and INTO a total `Record`, never into a render function.\n *\n * The wire plumbing these descriptors describe — collection segment, query keys,\n * the SDK call per kind — lives one layer down, in `src/repos/callables.ts`,\n * which owns its own total `Record` per kind (mirroring `src/repos/versions.ts`'s\n * `COLLECTION_PATH`). `callable-descriptors.test.ts` asserts the two tables name\n * the same three kinds and the same three collections, so they cannot drift.\n */\nimport type { CallableKind } from \"./callable-kind.ts\";\nimport { newId } from \"./new-id.ts\";\n\nexport type { CallableKind };\n\n/** The Settings modal's own per-kind behaviour (T4.2.1's formalization of the\n *  seven `kind ===` conditionals `CallableSettingsModal.tsx` used to carry). */\nexport interface CallableSettingsDescriptor {\n  /** May the `key` be typed here at all? Function/Workflow yes, Endpoint no\n   *  (`rfcs/endpoint.md` — an Endpoint's address is its identity). */\n  canEditKey: boolean;\n  /** Does this kind store tags? Workflow only. */\n  hasTags: boolean;\n  /** Placeholder for the Name field. */\n  namePlaceholder: string;\n  /** Placeholder for the Key field (read only when {@link canEditKey}). */\n  keyPlaceholder: string;\n  /** Appended to the shared \"Lowercase, kebab-case, 3–39 characters.\" hint —\n   *  `\"\"` for a kind that cannot unset its key, the \"Leave empty to unset.\"\n   *  sentence for the one that can. */\n  keyHintSuffix: string;\n}\n\n/** The editor chrome's own per-kind copy. */\nexport interface CallableEditorDescriptor {\n  /** The back control's label, e.g. `\"← Functions\"`. */\n  backLabel: string;\n  /** Heading fallback while the definition is still hydrating. */\n  newTitle: string;\n  /** Rendered in place of the form when the hydration GET 404s. */\n  notFoundTitle: string;\n  /** The Save button's idle label. */\n  saveLabel: string;\n}\n\nexport interface CallableDescriptor {\n  kind: CallableKind;\n  /** The list page's `<h2>`, and the editor document title's second segment. */\n  listTitle: string;\n  /** The list page's explanatory paragraph. */\n  listDescription: string;\n  /** The empty-state paragraph (verbatim, including its typographic quotes). */\n  emptyCopy: string;\n  /** The create button's label, e.g. `\"+ New function\"`. */\n  newLabel: string;\n  /** The synthetic id's own prefix — `fn_…`/`ep_…`/`wf_…`, never user-edited. */\n  newIdPrefix: string;\n  /** `data-testid` of the list's Import affordance. */\n  importOpenTestId: string;\n  /** `data-testid` of the list's \"Show archived\" checkbox. */\n  showArchivedTestId: string;\n  /** `data-testid` of a row's \"archived\" badge. */\n  archivedBadgeTestId: string;\n  /** The row button's `title` tooltip (T4.2.3 — replaces the shared template literal\n   *  `` `Open this ${kind} in the editor.` ``, since Workflow's own row opens the visual editor,\n   *  not \"the editor\"). */\n  openRowTitle: string;\n  editor: CallableEditorDescriptor;\n  settings: CallableSettingsDescriptor;\n}\n\n/**\n * The three kinds, every arm named explicitly — a total `Record<CallableKind,\n * …>`, so a fourth kind fails to compile here rather than silently rendering\n * another kind's copy (the same reasoning `COLLECTION_PATH` gives in\n * `src/repos/versions.ts`).\n *\n * Only the `function` arm is consumed today: Endpoints and Workflows keep their\n * own pages until T4.2.2/T4.2.3. Their arms are filled from those pages'\n * current literals so the later nodes are a deletion, not a re-derivation.\n */\nexport const CALLABLE_DESCRIPTORS: Record<CallableKind, CallableDescriptor> = {\n  function: {\n    kind: \"function\",\n    listTitle: \"Functions\",\n    listDescription:\n      'A Function is a reusable, vendor-abstracted operation — \"Send Email\", \"Create Contact\" — ' +\n      \"with a stable interface bound to one swappable app action. Switch provider by \" +\n      \"re-binding; callers never change.\",\n    emptyCopy:\n      \"None yet — click “New function” to create one, or “Import” to bring in a spec document.\",\n    newLabel: \"+ New function\",\n    newIdPrefix: \"fn\",\n    importOpenTestId: \"functions-import-open\",\n    showArchivedTestId: \"functions-show-archived\",\n    archivedBadgeTestId: \"function-archived\",\n    openRowTitle: \"Open this function in the editor.\",\n    editor: {\n      backLabel: \"← Functions\",\n      newTitle: \"New function\",\n      notFoundTitle: \"Function not found\",\n      saveLabel: \"Save\",\n    },\n    settings: {\n      canEditKey: true,\n      hasTags: false,\n      namePlaceholder: \"Send Email\",\n      keyPlaceholder: \"send-email\",\n      keyHintSuffix: \"\",\n    },\n  },\n  endpoint: {\n    kind: \"endpoint\",\n    listTitle: \"Endpoints\",\n    listDescription:\n      \"An Endpoint is a named, stable entry point that dispatches to one app action, Function, \" +\n      \"or Workflow. Callers bind to the Endpoint; the target behind it can change — promote an \" +\n      \"action to a Function or a Workflow, or re-bind it — without breaking a single caller.\",\n    emptyCopy: \"None yet — click “New endpoint” to create one.\",\n    newLabel: \"+ New endpoint\",\n    newIdPrefix: \"ep\",\n    importOpenTestId: \"endpoints-import-open\",\n    showArchivedTestId: \"endpoints-show-archived\",\n    archivedBadgeTestId: \"endpoint-archived\",\n    openRowTitle: \"Open this endpoint in the editor.\",\n    editor: {\n      backLabel: \"← Endpoints\",\n      newTitle: \"New endpoint\",\n      notFoundTitle: \"Endpoint not found\",\n      saveLabel: \"Save\",\n    },\n    settings: {\n      canEditKey: false,\n      hasTags: false,\n      namePlaceholder: \"My endpoint\",\n      keyPlaceholder: \"send-email\",\n      keyHintSuffix: \"\",\n    },\n  },\n  workflow: {\n    kind: \"workflow\",\n    listTitle: \"Workflows\",\n    listDescription:\n      \"A Workflow is a durable, multi-step run: each step calls an app action, a Function, or \" +\n      \"another Workflow, and a run keeps its own state, history and error handling.\",\n    emptyCopy: \"None yet — click “New workflow” to create one.\",\n    newLabel: \"+ New workflow\",\n    newIdPrefix: \"wf\",\n    importOpenTestId: \"workflows-import-open\",\n    showArchivedTestId: \"workflows-show-archived\",\n    archivedBadgeTestId: \"workflow-archived\",\n    openRowTitle: \"Open this workflow in the visual editor.\",\n    editor: {\n      backLabel: \"← Workflows\",\n      newTitle: \"New workflow\",\n      notFoundTitle: \"Workflow not found\",\n      saveLabel: \"Save\",\n    },\n    settings: {\n      canEditKey: true,\n      hasTags: true,\n      namePlaceholder: \"My workflow\",\n      keyPlaceholder: \"unset\",\n      keyHintSuffix: \" Leave empty to unset.\",\n    },\n  },\n};\n\n/** Look a descriptor up by kind. A plain index, never a `switch`: the `Record`\n *  above already made every arm total. */\nexport function descriptorFor(kind: CallableKind): CallableDescriptor {\n  return CALLABLE_DESCRIPTORS[kind];\n}\n\n/**\n * A fresh synthetic id for a create-modal's first POST — `fn_<uuid>` for a\n * Function (verbatim the `newFunctionId` `FunctionsPage.tsx` used to hold),\n * `ep_`/`wf_` for the other two, whose pages mint the same shapes today. The\n * prefix comes from the descriptor, so \"which kind is this?\" is answered by the\n * same table that answers every other kind question.\n */\nexport function newCallableId(kind: CallableKind): string {\n  return newId(descriptorFor(kind).newIdPrefix);\n}\n","import { useMutation, useQueryClient } from \"@tanstack/react-query\";\nimport { type W6WClient, isFunctionRun } from \"@w6w/sdk\";\nimport type { FunctionSummary as SdkFunctionSummary } from \"@w6w/sdk/console\";\nimport { useEmbedClient } from \"../draft/client-context.ts\";\n/**\n * The Function-bound facade over the kind-parametrised repo (`src/repos/callables.ts`, T4.2.1).\n *\n * Everything here that is not Function-specific is one line delegating to `callables.ts` with\n * `\"function\"` bound in — the list/get queries, the save mutation, archive and delete — so the\n * Function arm of every kind-wide behaviour has exactly ONE implementation to fix. What stays is\n * what only a Function has: the `manifestVersion: \"2\"` literal, the SDK's Function type re-exports,\n * the `valid`-carrying summary widening, and the run-plane invoke (`client.run`, `isFunctionRun`)\n * that no other kind's page uses.\n *\n * The delegations keep their original names and call shapes on purpose: `ui/rail/SettingsTool.tsx`,\n * `ui/rail/AliasesTool.tsx`, `ui/rail/ErrorHandlingTool.tsx`, `components/TargetSelector.tsx`,\n * `components/FunctionIdentityModal.tsx` and `api/w6wApiFacade.tsx` all import from here, and this\n * node moves no behaviour — only where the code lives.\n */\nimport { callableKey } from \"../lib/callable-kind.ts\";\nimport { invalidateSavedCallable } from \"../lib/save-invalidation.ts\";\nimport {\n  callableListKey,\n  useArchiveCallableMutation,\n  useCallableListQuery,\n  useCallableQuery,\n  useDeleteCallableMutation,\n  useSaveCallableMutation,\n} from \"./callables.ts\";\n\nexport type {\n  FunctionDef,\n  FunctionImpl,\n  FunctionInput,\n  FunctionOutputField,\n} from \"@w6w/sdk/console\";\n\n/** A Function list row — the SDK's own summary (it carries `archivedAt` since W-12). */\nexport type FunctionSummary = SdkFunctionSummary;\n\n/** The list key {@link useFunctionsQuery} reads — `callables.ts`'s own\n *  `callableListKey(\"function\")`, kept as a named export because\n *  `lib/spec-import-invalidation.ts` invalidates it by value. */\nexport const functionsKey = callableListKey(\"function\");\n\n/** Function definitions carry `manifestVersion: \"2\"` - the one literal, shared\n *  by the editor's blank draft and the create modal's first POST. */\nexport const FUNCTION_MANIFEST_VERSION = \"2\";\n\nexport function listFunctions(client: W6WClient) {\n  return client.console.functions.list();\n}\n\nexport function useFunctionsQuery(enabled = true) {\n  return useCallableListQuery<FunctionSummary>(\"function\", enabled);\n}\n\nexport const functionKey = (id: string) => callableKey(\"function\", id);\n\n/** The Function arm's own reader: the SDK's typed `get`, whose `{...function, valid}` splice is\n *  what `FunctionEditor` hydrates its draft from (pin 5 — the server computes `valid`; studio\n *  never reimplements the check). */\nexport function getFunction(client: W6WClient, id: string) {\n  return client.console.functions.get(id);\n}\n\nexport function useFunctionQuery(id: string, enabled = true) {\n  return useCallableQuery<Awaited<ReturnType<typeof getFunction>>>(\"function\", id, enabled);\n}\n\nexport function useSaveFunctionMutation() {\n  return useSaveCallableMutation(\"function\");\n}\n\n/**\n * The GUARDED Function save: `console.functions.upsert(definition, {ifUnmodifiedSince})`, so a\n * save made from a stale copy answers `409 function_stale` instead of overwriting the newer one.\n * `ifUnmodifiedSince` is REQUIRED in the variables (pass `null` to opt out explicitly) so a call\n * site cannot forget the token; it is the `updatedAt` of the copy the definition was edited from\n * (`callableRecord(\"function\", …).updatedAt`). Same invalidation as {@link useSaveFunctionMutation}\n * (list + the saved resource's key); resolves `{id, key, updatedAt}`. Additive: the unguarded\n * hook's `mutate(definition)` shape is unchanged.\n */\nexport function useGuardedSaveFunctionMutation() {\n  const apiClient = useEmbedClient();\n  const qc = useQueryClient();\n  return useMutation({\n    mutationFn: (vars: { definition: unknown; ifUnmodifiedSince: string | null }) =>\n      apiClient.console.functions.upsert(vars.definition as never, {\n        ifUnmodifiedSince: vars.ifUnmodifiedSince,\n      }),\n    onSuccess: (saved) => invalidateSavedCallable(qc, functionsKey, functionKey(saved.id)),\n  });\n}\n\n/**\n * One test invoke's result: the Function's own output, plus the platform's\n * record of the attempt.\n *\n * The two are kept apart rather than merged because they answer different\n * questions, and merging them is what the invocation envelope exists to stop:\n * a vendor payload reading `{\"statusCode\": 202}` is SendGrid describing its own\n * request, while `status` here is whether w6w considered the call a success.\n * The frame fields are optional — an older server sends only the output.\n */\nexport interface FunctionInvokeResult {\n  output: unknown;\n  invocationId?: string;\n  status?: string;\n  durationMs?: number;\n}\n\n/**\n * `fn_…` ids are already URN-shaped, so the base dispatcher resolves them\n * directly — no id translation. `isFunctionRun` narrows the open\n * `RunEnvelope`; a `fn_…` URN can only ever resolve to the `function` arm\n * server-side, so the `else` branch is defensive, not a real code path.\n */\nexport function invokeFunction(\n  client: W6WClient,\n  id: string,\n  inputs: Record<string, unknown>,\n): Promise<FunctionInvokeResult> {\n  return client.run({ urn: id, payload: inputs }).then((env) => {\n    if (!isFunctionRun(env)) {\n      throw new Error(`expected a function-kind run envelope for \"${id}\", got \"${env.kind}\"`);\n    }\n    return {\n      output: env.output,\n      invocationId: env.invocationId,\n      status: env.status,\n      durationMs: env.durationMs,\n    };\n  });\n}\n\nexport function useInvokeFunctionMutation() {\n  const apiClient = useEmbedClient();\n  return useMutation({\n    mutationFn: (vars: { id: string; inputs: Record<string, unknown> }) =>\n      invokeFunction(apiClient, vars.id, vars.inputs),\n  });\n}\n\n/**\n * T4.1.1/A7/D-I0-7: `POST /functions/:id/archive`, `DELETE /functions/:id` — the Function arm of\n * `callables.ts`'s generic pair (the plain `apiClient.request()` escape hatch, NOT a typed\n * `@w6w/sdk` method, which would drag `packages/wrappers` into this task's scope for two internal\n * routes). Both invalidate `functionsKey`, so the list's `archivedAt` refreshes and the rail's\n * Delete control appears in Archive's place.\n */\nexport function useArchiveFunctionMutation() {\n  return useArchiveCallableMutation(\"function\");\n}\n\nexport function useDeleteFunctionMutation() {\n  return useDeleteCallableMutation(\"function\");\n}\n","import { useMutation, useQueryClient } from \"@tanstack/react-query\";\nimport type { W6WClient } from \"@w6w/sdk\";\nimport type {\n  EndpointDef as SdkEndpointDef,\n  EndpointSummary as SdkEndpointSummary,\n  EndpointTarget as SdkEndpointTarget,\n} from \"@w6w/sdk/console\";\n/**\n * The Endpoint-bound facade over the kind-parametrised repo (`src/repos/callables.ts`, T4.2.2).\n *\n * Everything here that is not Endpoint-specific is one line delegating to `callables.ts` with\n * `\"endpoint\"` bound in — the list/get queries, archive and delete — so the Endpoint arm of every\n * kind-wide behaviour has exactly ONE implementation to fix (the shape `repos/functions.ts` took in\n * T4.2.1, and the \"keep the facade's exports\" rule that module documents). What stays is what only\n * an Endpoint has: the `manifestVersion: \"2\"` literal, the SDK's Endpoint type re-exports, the\n * `status`/`incomplete`/`archivedAt`-carrying summary widening with its one reader\n * {@link isEndpointDraft}, the server-rendered `invokeUrls[]` widening, the synchronous invoke\n * (`client.console.endpoints.invoke`), and the SAVE — whose 201 carries those `invokeUrls[]` back to\n * the editor's URL card, which is why its `mutationFn` is the one arm the generic `saveCallable`\n * cannot serve.\n *\n * The delegations keep their original names and call shapes on purpose: `ui/rail/SettingsTool.tsx`,\n * `ui/rail/AliasesTool.tsx`, `ui/rail/ErrorHandlingTool.tsx`, `components/TargetSelector.tsx`,\n * `components/EndpointIdentityModal.tsx`, `repos/versions.ts` (the revert arm's `endpointKey`) and\n * `repos/spec-import.ts` (`endpointsKey`) all import from here, and this node moves no behaviour —\n * only where the code lives. The two key exports stay byte-identical because both are the builders\n * `callables.ts` already documents as frozen (`[\"endpoints\"]`, `[\"endpoint\", id]`).\n */\nimport { callableKey } from \"../lib/callable-kind.ts\";\nimport { invalidateSavedCallable } from \"../lib/save-invalidation.ts\";\n\nexport type {\n  ActionTarget,\n  CallableRef,\n  CallableOnError,\n  ErrorHandlerTarget,\n  EndpointAuthMode,\n  EndpointInput,\n  EndpointInvokeResult,\n  EndpointSecurity,\n  EndpointTarget,\n  ErrorReroute,\n  Exposure,\n  RetryPolicy,\n} from \"@w6w/sdk/console\";\nexport { SECRET_MASK } from \"@w6w/sdk/console\";\nimport { useEmbedClient } from \"../draft/client-context.ts\";\nimport {\n  callableListKey,\n  useArchiveCallableMutation,\n  useCallableListQuery,\n  useCallableQuery,\n  useDeleteCallableMutation,\n} from \"./callables.ts\";\n\n/** An Endpoint's OWN target: the alias-only `endpoint` arm excluded, mirroring the\n *  server fence in admin/endpoints.ts's validateDefinition. Aliases use the full union\n *  (`EndpointTarget`, re-exported above verbatim). */\nexport type EndpointOwnTarget = Exclude<SdkEndpointTarget, { kind: \"endpoint\" }>;\nexport type EndpointDef = Omit<SdkEndpointDef, \"target\"> & { target: EndpointOwnTarget };\n\n/**\n * One entry of the `invokeUrls[]` array the server renders on `GET\n * /endpoints/:id` and the `POST /endpoints` 201 (T3.4.1, `admin/endpoints.ts`'s\n * `InvokeUrlEntry` — the shapes are kept in sync by hand, not shared, because\n * `@w6w/sdk` does not type this field yet: it is server-fresh and\n * `packages/wrappers` publishes in lockstep at one `VERSION` across four\n * languages, outside this project's boundary (HITL-10). `entries[0]` is always\n * the platform entry; every entry after it is one of the tenant's domains.\n * `default` mirrors the tenant's stored default domain and, since D-S1\n * (intake T-0.2), it is what CHOOSES the open-on entry: absent an\n * in-session pick, the URL card opens on whichever entry carries it,\n * falling back to `entries[0]` only when no entry does. `resolves` is a\n * static host comparison the server already made; the client never\n * re-derives it.\n */\nexport interface InvokeUrlOption {\n  domain: string;\n  default: boolean;\n  url: string;\n  urlByKey?: string;\n  resolves: boolean;\n}\n\n/** The two SDK-typed URL fields, widened with the untyped `invokeUrls[]`\n *  array — the ONE seam `getEndpoint`, the save mutation and the editor's own\n *  201 read all widen through, so `EndpointsPage.tsx` never casts. */\ntype WithInvokeUrls = {\n  invokeUrl: string;\n  invokeUrlByKey?: string;\n  invokeUrls?: InvokeUrlOption[];\n};\n\n/** An Endpoint list row — the SDK's own summary (`status`, `incomplete` and `archivedAt` are\n *  on it since W-12), read for draft-ness only through {@link isEndpointDraft}. */\nexport type EndpointSummary = SdkEndpointSummary;\n\n/** Is this row a draft — not authorised to dispatch (HITL-7/HITL-8,\n *  `rfcs/endpoint.md` § Amendment — 2026-08-14b)? Prefers the server's `status`\n *  field (`!== \"ready\"`), falling back to the older `incomplete` boolean only\n *  when `status` is absent (a server that has not shipped it yet). The sole\n *  reader of both fields in studio; every \"unfinished\" UI decision (the\n *  list's tag, and any future one) calls this rather than reading either\n *  field inline. */\nexport function isEndpointDraft(ep: Pick<EndpointSummary, \"status\" | \"incomplete\">): boolean {\n  return ep.status !== undefined ? ep.status !== \"ready\" : ep.incomplete === true;\n}\n\n/** Endpoint definitions carry `manifestVersion: \"2\"` — the one literal, shared\n *  by the editor's blank draft and the create modal's first POST. */\nexport const ENDPOINT_MANIFEST_VERSION = \"2\";\n\n/** The list key {@link useEndpointsQuery} reads — `callables.ts`'s own\n *  `callableListKey(\"endpoint\")` (byte-identical `[\"endpoints\"]`), kept as a named export because\n *  `repos/spec-import.ts` invalidates it by value. */\nexport const endpointsKey = callableListKey(\"endpoint\");\n\nexport function useEndpointsQuery(enabled = true) {\n  return useCallableListQuery<EndpointSummary>(\"endpoint\", enabled);\n}\n\n/** Fetch one Endpoint. Widens the SDK's return once — the server sends\n *  `invokeUrls[]` (T3.4.1) that `@w6w/sdk`'s typed `get()` does not know about\n *  yet; see {@link WithInvokeUrls}. */\nexport function getEndpoint(\n  client: W6WClient,\n  id: string,\n): Promise<{ endpoint: EndpointDef } & WithInvokeUrls> {\n  return client.console.endpoints.get(id) as Promise<{ endpoint: EndpointDef } & WithInvokeUrls>;\n}\n\n/** The single-resource key — `callables.ts`'s own `callableKey(\"endpoint\", id)` (byte-identical\n *  `[\"endpoint\", id]`), kept as a named export because `repos/versions.ts`'s revert arm invalidates\n *  it by value. */\nexport const endpointKey = (id: string) => callableKey(\"endpoint\", id);\n\n/** `TargetSelector`'s `endpoint` arm needs one Endpoint's own `input` contract\n *  to project into fields — mirrors `useFunctionQuery`/`useWorkflowQuery`\n *  (`repos/functions.ts`/`repos/workflows.ts`) exactly. */\nexport function useEndpointQuery(id: string, enabled = true) {\n  return useCallableQuery<Awaited<ReturnType<typeof getEndpoint>>>(\"endpoint\", id, enabled);\n}\n\n/**\n * The Endpoint arm's SAVE — the one delegated name whose `mutationFn` is NOT `callables.ts`'s\n * `saveCallable`: that helper normalises every kind's success envelope down to `{id, key}` for the\n * invalidation below, while this kind's 201 also carries the fresh server-rendered `invokeUrl`/\n * `invokeUrlByKey`/`invokeUrls[]` the editor's URL card renders from (`onSaveSuccess` in\n * `EndpointsPage.tsx`). Its KEYS and its invalidation, though, are the generic pair's — so the\n * \"which keys does an Endpoint save refresh\" answer still has one home.\n */\nexport function useSaveEndpointMutation() {\n  const apiClient = useEmbedClient();\n  const qc = useQueryClient();\n  return useMutation({\n    // Same widening as `getEndpoint` — the save's 201 carries `invokeUrls[]` too.\n    mutationFn: (definition: unknown) =>\n      apiClient.console.endpoints.upsert(definition as never) as Promise<\n        { endpoint: { id: string; key: string } } & WithInvokeUrls\n      >,\n    onSuccess: (saved) => invalidateSavedCallable(qc, endpointsKey, endpointKey(saved.endpoint.id)),\n  });\n}\n\n/**\n * The GUARDED Endpoint save: `console.endpoints.upsert(definition, {ifUnmodifiedSince})`, so a\n * save from a stale copy answers `409 endpoint_stale`. Variables and invalidation as\n * {@link useSaveEndpointMutation}'s, plus the required token (`null` opts out explicitly; it is\n * `callableRecord(\"endpoint\", …).updatedAt`, the envelope's TOP-LEVEL `updatedAt`). Resolves the\n * verbatim upsert body (`{endpoint:{id,key}, invokeUrl, …, updatedAt}`). Additive: the unguarded\n * hook's `mutate(definition)` shape is unchanged.\n */\nexport function useGuardedSaveEndpointMutation() {\n  const apiClient = useEmbedClient();\n  const qc = useQueryClient();\n  return useMutation({\n    mutationFn: (vars: { definition: unknown; ifUnmodifiedSince: string | null }) =>\n      apiClient.console.endpoints.upsert(vars.definition as never, {\n        ifUnmodifiedSince: vars.ifUnmodifiedSince,\n      }) as Promise<{ endpoint: { id: string; key: string }; updatedAt: string } & WithInvokeUrls>,\n    onSuccess: (saved) => invalidateSavedCallable(qc, endpointsKey, endpointKey(saved.endpoint.id)),\n  });\n}\n\nexport function invokeEndpoint(client: W6WClient, id: string, input: Record<string, unknown>) {\n  return client.console.endpoints.invoke(id, input);\n}\n\nexport function useInvokeEndpointMutation() {\n  const apiClient = useEmbedClient();\n  return useMutation({\n    mutationFn: (vars: { id: string; input: Record<string, unknown> }) =>\n      invokeEndpoint(apiClient, vars.id, vars.input),\n  });\n}\n\n/**\n * T4.1.1/A7/D-I0-7: `POST /endpoints/:id/archive` — the Endpoint arm of `callables.ts`'s generic\n * pair (the plain `apiClient.request()` escape hatch, NOT a typed `@w6w/sdk` method, which would\n * drag `packages/wrappers` into this task's scope for one internal route). Invalidates\n * `endpointsKey`, so the list's `archivedAt` refreshes and the rail's Delete control appears in\n * Archive's place.\n */\nexport function useArchiveEndpointMutation() {\n  return useArchiveCallableMutation(\"endpoint\");\n}\n\n/** `DELETE /endpoints/:id` — the Endpoint arm of the same generic pair. */\nexport function useDeleteEndpointMutation() {\n  return useDeleteCallableMutation(\"endpoint\");\n}\n"],"names":["ID_ALPHABET","REJECT_AT","defaultBytes","newId","prefix","len","bytes","out","b","CALLABLE_DESCRIPTORS","descriptorFor","kind","newCallableId","functionsKey","callableListKey","FUNCTION_MANIFEST_VERSION","listFunctions","client","useFunctionsQuery","enabled","useCallableListQuery","functionKey","id","callableKey","getFunction","useFunctionQuery","useCallableQuery","useSaveFunctionMutation","useSaveCallableMutation","useGuardedSaveFunctionMutation","apiClient","useEmbedClient","qc","useQueryClient","useMutation","vars","saved","invalidateSavedCallable","invokeFunction","inputs","env","isFunctionRun","useInvokeFunctionMutation","useArchiveFunctionMutation","useArchiveCallableMutation","useDeleteFunctionMutation","useDeleteCallableMutation","isEndpointDraft","ep","ENDPOINT_MANIFEST_VERSION","endpointsKey","useEndpointsQuery","getEndpoint","endpointKey","useEndpointQuery","useSaveEndpointMutation","definition","useGuardedSaveEndpointMutation","invokeEndpoint","input","useInvokeEndpointMutation","useArchiveEndpointMutation","useDeleteEndpointMutation"],"mappings":";;;;;AAMO,MAAMA,IAAc,kEAGrBC,IAAY,KAKZC,IAA2B,CAAC,MAAM,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC;AAGzE,SAASC,EAAMC,GAAgBC,IAAM,IAAIC,IAAoBJ,GAAsB;AACxF,MAAIK,IAAM;AACV,SAAOA,EAAI,SAASF;AAClB,eAAWG,KAAKF,EAAM,KAAK,IAAID,IAAME,EAAI,QAAQ,CAAC,CAAC;AACjD,UAAI,EAAAC,KAAKP,OACTM,KAAOP,EAAYQ,IAAI,EAAE,GACrBD,EAAI,WAAWF;AAAK;AAG5B,SAAO,GAAGD,CAAM,IAAIG,CAAG;AACzB;ACsEO,MAAME,IAAiE;AAAA,EAC5E,UAAU;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,IACX,iBACE;AAAA,IAGF,WACE;AAAA,IACF,UAAU;AAAA,IACV,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,MACV,eAAe;AAAA,MACf,WAAW;AAAA,IAAA;AAAA,IAEb,UAAU;AAAA,MACR,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,MAChB,eAAe;AAAA,IAAA;AAAA,EACjB;AAAA,EAEF,UAAU;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,IACX,iBACE;AAAA,IAGF,WAAW;AAAA,IACX,UAAU;AAAA,IACV,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,MACV,eAAe;AAAA,MACf,WAAW;AAAA,IAAA;AAAA,IAEb,UAAU;AAAA,MACR,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,MAChB,eAAe;AAAA,IAAA;AAAA,EACjB;AAAA,EAEF,UAAU;AAAA,IACR,MAAM;AAAA,IACN,WAAW;AAAA,IACX,iBACE;AAAA,IAEF,WAAW;AAAA,IACX,UAAU;AAAA,IACV,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB,oBAAoB;AAAA,IACpB,qBAAqB;AAAA,IACrB,cAAc;AAAA,IACd,QAAQ;AAAA,MACN,WAAW;AAAA,MACX,UAAU;AAAA,MACV,eAAe;AAAA,MACf,WAAW;AAAA,IAAA;AAAA,IAEb,UAAU;AAAA,MACR,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,iBAAiB;AAAA,MACjB,gBAAgB;AAAA,MAChB,eAAe;AAAA,IAAA;AAAA,EACjB;AAEJ;AAIO,SAASC,EAAcC,GAAwC;AACpE,SAAOF,EAAqBE,CAAI;AAClC;AASO,SAASC,EAAcD,GAA4B;AACxD,SAAOR,EAAMO,EAAcC,CAAI,EAAE,WAAW;AAC9C;AC5JO,MAAME,IAAeC,EAAgB,UAAU,GAIzCC,IAA4B;AAElC,SAASC,EAAcC,GAAmB;AAC/C,SAAOA,EAAO,QAAQ,UAAU,KAAA;AAClC;AAEO,SAASC,EAAkBC,IAAU,IAAM;AAChD,SAAOC,EAAsC,YAAYD,CAAO;AAClE;AAEO,MAAME,IAAc,CAACC,MAAeC,EAAY,YAAYD,CAAE;AAK9D,SAASE,EAAYP,GAAmBK,GAAY;AACzD,SAAOL,EAAO,QAAQ,UAAU,IAAIK,CAAE;AACxC;AAEO,SAASG,EAAiBH,GAAYH,IAAU,IAAM;AAC3D,SAAOO,EAA0D,YAAYJ,GAAIH,CAAO;AAC1F;AAEO,SAASQ,IAA0B;AACxC,SAAOC,EAAwB,UAAU;AAC3C;AAWO,SAASC,IAAiC;AAC/C,QAAMC,IAAYC,EAAA,GACZC,IAAKC,EAAA;AACX,SAAOC,EAAY;AAAA,IACjB,YAAY,CAACC,MACXL,EAAU,QAAQ,UAAU,OAAOK,EAAK,YAAqB;AAAA,MAC3D,mBAAmBA,EAAK;AAAA,IAAA,CACzB;AAAA,IACH,WAAW,CAACC,MAAUC,EAAwBL,GAAInB,GAAcQ,EAAYe,EAAM,EAAE,CAAC;AAAA,EAAA,CACtF;AACH;AAyBO,SAASE,EACdrB,GACAK,GACAiB,GAC+B;AAC/B,SAAOtB,EAAO,IAAI,EAAE,KAAKK,GAAI,SAASiB,GAAQ,EAAE,KAAK,CAACC,MAAQ;AAC5D,QAAI,CAACC,EAAcD,CAAG;AACpB,YAAM,IAAI,MAAM,8CAA8ClB,CAAE,WAAWkB,EAAI,IAAI,GAAG;AAExF,WAAO;AAAA,MACL,QAAQA,EAAI;AAAA,MACZ,cAAcA,EAAI;AAAA,MAClB,QAAQA,EAAI;AAAA,MACZ,YAAYA,EAAI;AAAA,IAAA;AAAA,EAEpB,CAAC;AACH;AAEO,SAASE,IAA4B;AAC1C,QAAMZ,IAAYC,EAAA;AAClB,SAAOG,EAAY;AAAA,IACjB,YAAY,CAACC,MACXG,EAAeR,GAAWK,EAAK,IAAIA,EAAK,MAAM;AAAA,EAAA,CACjD;AACH;AASO,SAASQ,IAA6B;AAC3C,SAAOC,EAA2B,UAAU;AAC9C;AAEO,SAASC,IAA4B;AAC1C,SAAOC,EAA0B,UAAU;AAC7C;ACrDO,SAASC,EAAgBC,GAA6D;AAC3F,SAAOA,EAAG,WAAW,SAAYA,EAAG,WAAW,UAAUA,EAAG,eAAe;AAC7E;AAIO,MAAMC,IAA4B,KAK5BC,IAAepC,EAAgB,UAAU;AAE/C,SAASqC,EAAkBhC,IAAU,IAAM;AAChD,SAAOC,EAAsC,YAAYD,CAAO;AAClE;AAKO,SAASiC,EACdnC,GACAK,GACqD;AACrD,SAAOL,EAAO,QAAQ,UAAU,IAAIK,CAAE;AACxC;AAKO,MAAM+B,IAAc,CAAC/B,MAAeC,EAAY,YAAYD,CAAE;AAK9D,SAASgC,EAAiBhC,GAAYH,IAAU,IAAM;AAC3D,SAAOO,EAA0D,YAAYJ,GAAIH,CAAO;AAC1F;AAUO,SAASoC,IAA0B;AACxC,QAAMzB,IAAYC,EAAA,GACZC,IAAKC,EAAA;AACX,SAAOC,EAAY;AAAA;AAAA,IAEjB,YAAY,CAACsB,MACX1B,EAAU,QAAQ,UAAU,OAAO0B,CAAmB;AAAA,IAGxD,WAAW,CAACpB,MAAUC,EAAwBL,GAAIkB,GAAcG,EAAYjB,EAAM,SAAS,EAAE,CAAC;AAAA,EAAA,CAC/F;AACH;AAUO,SAASqB,IAAiC;AAC/C,QAAM3B,IAAYC,EAAA,GACZC,IAAKC,EAAA;AACX,SAAOC,EAAY;AAAA,IACjB,YAAY,CAACC,MACXL,EAAU,QAAQ,UAAU,OAAOK,EAAK,YAAqB;AAAA,MAC3D,mBAAmBA,EAAK;AAAA,IAAA,CACzB;AAAA,IACH,WAAW,CAACC,MAAUC,EAAwBL,GAAIkB,GAAcG,EAAYjB,EAAM,SAAS,EAAE,CAAC;AAAA,EAAA,CAC/F;AACH;AAEO,SAASsB,EAAezC,GAAmBK,GAAYqC,GAAgC;AAC5F,SAAO1C,EAAO,QAAQ,UAAU,OAAOK,GAAIqC,CAAK;AAClD;AAEO,SAASC,IAA4B;AAC1C,QAAM9B,IAAYC,EAAA;AAClB,SAAOG,EAAY;AAAA,IACjB,YAAY,CAACC,MACXuB,EAAe5B,GAAWK,EAAK,IAAIA,EAAK,KAAK;AAAA,EAAA,CAChD;AACH;AASO,SAAS0B,IAA6B;AAC3C,SAAOjB,EAA2B,UAAU;AAC9C;AAGO,SAASkB,KAA4B;AAC1C,SAAOhB,EAA0B,UAAU;AAC7C;"}

package/dist/forms/CreateEndpointModal.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Identity modal shared by the Endpoints list ("+ New endpoint" — create
+ * mode) and the editor's read-only info block ("edit" icon-button — edit
+ * mode). `isEdit = !!props.initial`, mirroring `VarModal` and `FunctionIdentityModal`.
+ *
+ * **Create mode POSTs for real, right here — before any editor exists.**
+ * That is this node's whole point: the row is created against the server
+ * before the operator can put target/input work into a plain `useState` that
+ * used to die on a missing var, a lost tab, or anything else short of a
+ * completed Save. Submit is disabled unless the key clears
+ * {@link isEndpointKey}; `takenKeys` (from the list's own `GET /endpoints`)
+ * is an ADVISORY pre-check only — the account-scoped unique index is the
+ * arbiter, and any refusal (409 `endpoint_key_conflict`, 409
+ * `key_immutable`, 400 `invalid_endpoint`) renders `ApiError.message`
+ * verbatim and leaves the modal open with what was typed intact.
+ *
+ * **Edit mode writes NOTHING.** `POST /endpoints` is a whole-definition
+ * upsert, so an identity-only PATCH here would silently wipe the target and
+ * input the editor already has saved — precisely the data loss this whole
+ * node exists to stop. The patched fields go back through `onSaved`; the
+ * editor's own `onSave()` stays the one path that ever persists them.
+ */
+export declare function EndpointIdentityModal(props: {
+    /** Edit mode when present; create mode when absent. Mirrors VarModal's `isEdit = !!props.initial`. */
+    initial?: {
+        key: string;
+        displayName: string;
+        description: string;
+    };
+    /** Create mode only: the caller-minted `ep_…` id the POST carries. */
+    newId?: string;
+    /** Create mode only: keys already taken in this account — advisory pre-check. */
+    takenKeys?: readonly string[];
+    onClose: () => void;
+    /** Create mode: the id the SERVER returned (`saved.endpoint.id`). */
+    onCreated?: (id: string) => void;
+    /** Edit mode: the patched identity fields. The modal itself writes NOTHING. */
+    onSaved?: (next: {
+        displayName: string;
+        description: string;
+    }) => void;
+}): import("react").JSX.Element;
+/**
+ * Creates an Endpoint: the identity modal in create mode, in its own `.w6w-embed-root`. The id is
+ * minted once per mount. Without `takenKeys` the modal reads the account's keys itself
+ * (`GET /endpoints`) for the advisory "already in use" hint; the server stays the arbiter.
+ */
+export declare function CreateEndpointModal(props: {
+    onClose: () => void;
+    /** The id the SERVER returned for the new Endpoint. */
+    onCreated: (id: string) => void;
+    /** Keys already taken in this account. Omitted: read from the Endpoints list. */
+    takenKeys?: readonly string[];
+}): import("react").JSX.Element;

package/dist/forms/CreateFunctionModal.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Identity modal shared by the Functions list ("+ New function" — create
+ * mode) and the editor's read-only info block ("edit" icon-button — edit
+ * mode). `isEdit = !!props.initial`, mirroring `VarModal` and
+ * `EndpointIdentityModal`.
+ *
+ * **Create mode POSTs for real, right here — before any editor exists.**
+ * That is this node's whole point: the row is created against the server
+ * before the operator can put impl/input work into a plain `useState` that
+ * used to die on a missing var, a lost tab, or anything else short of a
+ * completed Save. Submit is disabled unless the key clears
+ * {@link isEndpointKey} (reused — pin 2: the grammar is identical, so no
+ * `isFunctionKey`); `takenKeys` (from the list's own `GET /functions`) is an
+ * ADVISORY pre-check only — the account-scoped unique index is the arbiter,
+ * and any refusal renders `ApiError.message` verbatim and leaves the modal
+ * open with what was typed intact.
+ *
+ * **Edit mode writes NOTHING.** `POST /functions` is a whole-definition
+ * upsert, so an identity-only PATCH here would silently wipe the impl and
+ * inputs the editor already has saved — precisely the data loss this whole
+ * node exists to stop. The patched fields go back through `onSaved`; the
+ * editor's own `onSave()` stays the one path that ever persists them.
+ */
+export declare function FunctionIdentityModal(props: {
+    /** Edit mode when present; create mode when absent. Mirrors VarModal's `isEdit = !!props.initial`. */
+    initial?: {
+        key: string;
+        displayName: string;
+        description: string;
+    };
+    /** Create mode only: the caller-minted `fn_…` id the POST carries. */
+    newId?: string;
+    /** Create mode only: keys already taken in this account — advisory pre-check. */
+    takenKeys?: readonly string[];
+    onClose: () => void;
+    /** Create mode: the id the SERVER returned (`saved.function.id`). */
+    onCreated?: (id: string) => void;
+    /** Edit mode: the patched identity fields. The modal itself writes NOTHING. */
+    onSaved?: (next: {
+        displayName: string;
+        description: string;
+    }) => void;
+}): import("react").JSX.Element;
+/**
+ * Creates a Function: the identity modal in create mode, in its own `.w6w-embed-root`. The id is
+ * minted once per mount. Without `takenKeys` the modal reads the account's keys itself
+ * (`GET /functions`) for the advisory "already in use" hint; the server stays the arbiter.
+ */
+export declare function CreateFunctionModal(props: {
+    onClose: () => void;
+    /** The id the SERVER returned for the new Function. */
+    onCreated: (id: string) => void;
+    /** Keys already taken in this account. Omitted: read from the Functions list. */
+    takenKeys?: readonly string[];
+}): import("react").JSX.Element;

package/dist/forms/DocumentFormModal.d.ts

@@ -0,0 +1,8 @@
+import { Doc } from '@w6w/sdk';
+export declare function DocumentFormModal(props: {
+    initial?: Doc;
+    /** The resolved project, or `null` (none yet): a save is refused, never sent project-less. */
+    project: string | null;
+    onClose: () => void;
+    onSaved: () => void;
+}): import("react").JSX.Element;

package/dist/forms/SecretsManager.d.ts

@@ -0,0 +1,12 @@
+import { ReactNode } from 'react';
+import { ConfigManagerActionsApi } from './VarsManager.tsx';
+/** Same contract as `VarsManagerSlots`: omitted ⇒ default, `null` ⇒ nothing, a node replaces. */
+export interface SecretsManagerSlots {
+    header?: ReactNode;
+    actions?: ReactNode | ((api: ConfigManagerActionsApi) => ReactNode);
+    empty?: ReactNode;
+}
+export interface SecretsManagerProps {
+    slots?: SecretsManagerSlots;
+}
+export declare function SecretsManager(props: SecretsManagerProps): ReactNode;

package/dist/forms/VarsManager.d.ts

@@ -0,0 +1,29 @@
+import { ReactNode } from 'react';
+/** What a function-form `actions` slot receives. */
+export interface ConfigManagerActionsApi {
+    /** Open the create form (a no-op while the manager is refusing, e.g. no project). */
+    openCreate: () => void;
+    /** `false` when the create control must be disabled (no project). */
+    canCreate: boolean;
+}
+/**
+ * Each slot: omitted ⇒ the built-in default; `null` ⇒ nothing; a node replaces it. `actions` also
+ * accepts a function so a host that replaces the default "+ Add" button can still open the form.
+ */
+export interface VarsManagerSlots {
+    /** The section heading + description. */
+    header?: ReactNode;
+    /** The trailing control(s) of the head row (the "+ Add variable" button). */
+    actions?: ReactNode | ((api: ConfigManagerActionsApi) => ReactNode);
+    /** Shown instead of the list when there are no variables. */
+    empty?: ReactNode;
+}
+export interface VarsManagerProps {
+    /**
+     * The project whose variables are managed. Omitted: the `<W6WEmbedProvider project>`. `null` or
+     * `""`: no project — nothing is requested and nothing can be written.
+     */
+    project?: string | null;
+    slots?: VarsManagerSlots;
+}
+export declare function VarsManager(props: VarsManagerProps): ReactNode;

package/dist/forms.d.ts

@@ -0,0 +1,6 @@
+export { CreateFunctionModal } from './forms/CreateFunctionModal.tsx';
+export { CreateEndpointModal } from './forms/CreateEndpointModal.tsx';
+export { VarsManager } from './forms/VarsManager.tsx';
+export type { ConfigManagerActionsApi, VarsManagerProps, VarsManagerSlots, } from './forms/VarsManager.tsx';
+export { SecretsManager } from './forms/SecretsManager.tsx';
+export type { SecretsManagerProps, SecretsManagerSlots } from './forms/SecretsManager.tsx';

package/dist/forms.mjs

@@ -0,0 +1,407 @@
+"use client";
+import { C as re, a as se } from "./CreateFunctionModal-DRsFx-FB.js";
+import { jsxs as n, jsx as e, Fragment as V } from "react/jsx-runtime";
+import { ApiError as x } from "@w6w/sdk";
+import { Copyable as A, EditButton as L, DeleteButton as j, useEnterSubmit as P } from "@w6w/ui";
+import { useState as h } from "react";
+import { C as F, a as $, M as O } from "./ConfirmModal-RLbZT5_k.js";
+import { u as T } from "./project-context-BiCjv_E3.js";
+import { i as J, d as Q, b as U, h as _, f as B, c as R, u as I, g as W } from "./vault-BSEWhMYC.js";
+const q = ["string", "number", "boolean", "json"];
+function M(t) {
+  if (t.type === "boolean" || t.type === "number" || t.type === "string") return String(t.value);
+  const a = JSON.stringify(t.value);
+  return a.length > 80 ? `${a.slice(0, 80)}…` : a;
+}
+function ae(t) {
+  var d, S;
+  const a = t.slots, s = T(t.project), [v, i] = h(null), [f, o] = h(null), u = J(s ?? void 0, s != null), g = Q(), p = s != null, m = () => {
+    s != null && i({ mode: "create" });
+  }, b = (a == null ? void 0 : a.header) === void 0 ? /* @__PURE__ */ n("div", { children: [
+    /* @__PURE__ */ e("h3", { children: "Variables" }),
+    /* @__PURE__ */ n("p", { className: "muted small", children: [
+      "User-defined typed values addressable by name. Plaintext — use ",
+      /* @__PURE__ */ e("strong", { children: "Secrets" }),
+      " ",
+      "for sensitive values."
+    ] })
+  ] }) : a.header, N = a == null ? void 0 : a.actions, y = N === void 0 ? /* @__PURE__ */ e("button", { type: "button", className: "btn", disabled: !p, onClick: m, children: "+ Add variable" }) : typeof N == "function" ? N({ openCreate: m, canCreate: p }) : N, C = (a == null ? void 0 : a.empty) === void 0 ? /* @__PURE__ */ e("p", { className: "muted", children: "No variables yet." }) : a.empty;
+  return /* @__PURE__ */ e("div", { className: "w6w-embed-root", children: /* @__PURE__ */ n("section", { className: "section", children: [
+    (b != null || y != null) && /* @__PURE__ */ n("div", { className: "section-head", children: [
+      b,
+      y
+    ] }),
+    /* @__PURE__ */ n("div", { className: "card", children: [
+      u.isLoading && /* @__PURE__ */ e("p", { className: "muted", children: "Loading…" }),
+      ((d = u.data) == null ? void 0 : d.length) === 0 && C,
+      /* @__PURE__ */ e("ul", { className: "list", children: (S = u.data) == null ? void 0 : S.map((r) => /* @__PURE__ */ n("li", { children: [
+        /* @__PURE__ */ n("div", { className: "list-main", children: [
+          /* @__PURE__ */ e("strong", { className: "list-name", title: r.name, children: r.name }),
+          " ",
+          /* @__PURE__ */ e("span", { className: "tag", children: r.type }),
+          /* @__PURE__ */ n("div", { className: "muted small list-preview", title: M(r), children: [
+            /* @__PURE__ */ e(A, { value: M(r), readOnly: !0, children: /* @__PURE__ */ e(
+              "code",
+              {
+                style: {
+                  overflowWrap: "anywhere",
+                  display: "block",
+                  minWidth: 0,
+                  overflow: "hidden",
+                  textOverflow: "ellipsis",
+                  flex: 1
+                },
+                children: M(r)
+              }
+            ) }),
+            r.description && /* @__PURE__ */ n(V, { children: [
+              " · ",
+              r.description
+            ] })
+          ] })
+        ] }),
+        /* @__PURE__ */ n("div", { style: { display: "flex", gap: "var(--w6w-sp-1-5)" }, children: [
+          /* @__PURE__ */ e(F, { resource: { kind: "var", name: r.name } }),
+          /* @__PURE__ */ e(
+            L,
+            {
+              label: "Edit",
+              onClick: () => i({ mode: "edit", v: r }),
+              "data-testid": `var-edit-${r.id}`
+            }
+          ),
+          /* @__PURE__ */ e(
+            j,
+            {
+              label: "Delete",
+              onClick: () => o(r),
+              disabled: g.isPending,
+              "data-testid": `var-delete-${r.id}`
+            }
+          )
+        ] })
+      ] }, r.id)) })
+    ] }),
+    v && s != null && /* @__PURE__ */ e(
+      Y,
+      {
+        project: s,
+        initial: v.mode === "edit" ? v.v : void 0,
+        onClose: () => i(null),
+        onSaved: () => i(null)
+      }
+    ),
+    f && s != null && /* @__PURE__ */ e(
+      $,
+      {
+        title: "Delete variable",
+        message: `Delete the variable "${f.name}"? This cannot be undone.`,
+        confirmLabel: "Delete",
+        onConfirm: () => {
+          g.mutate({ id: f.id, project: s }), o(null);
+        },
+        onClose: () => o(null)
+      }
+    )
+  ] }) });
+}
+function Y(t) {
+  var k, c, D;
+  const a = !!t.initial, [s, v] = h(((k = t.initial) == null ? void 0 : k.name) ?? ""), [i, f] = h(((c = t.initial) == null ? void 0 : c.type) ?? "string"), [o, u] = h(() => t.initial ? t.initial.type === "string" ? String(t.initial.value ?? "") : JSON.stringify(t.initial.value, null, 2) : ""), [g, p] = h(((D = t.initial) == null ? void 0 : D.description) ?? ""), [m, b] = h(null);
+  function N() {
+    if (i === "string") return { ok: !0, value: o };
+    if (i === "boolean")
+      return o === "true" ? { ok: !0, value: !0 } : o === "false" ? { ok: !0, value: !1 } : { ok: !1, error: "Value must be `true` or `false`." };
+    if (i === "number") {
+      const l = Number(o);
+      return Number.isFinite(l) ? { ok: !0, value: l } : { ok: !1, error: "Value must be a finite number." };
+    }
+    try {
+      return { ok: !0, value: JSON.parse(o) };
+    } catch (l) {
+      return { ok: !1, error: `Invalid JSON: ${l.message}` };
+    }
+  }
+  const y = U(), C = _(), d = y.isPending || C.isPending;
+  function S() {
+    const l = N();
+    if (!l.ok) {
+      b(l.error);
+      return;
+    }
+    b(null);
+    const E = {
+      onSuccess: () => t.onSaved(),
+      onError: (w) => b((w instanceof x, w.message))
+    };
+    if (t.initial) {
+      C.mutate(
+        {
+          id: t.initial.id,
+          patch: { type: i, value: l.value, description: g },
+          project: t.project
+        },
+        E
+      );
+      return;
+    }
+    y.mutate(
+      { input: { name: s, type: i, value: l.value, description: g }, project: t.project },
+      E
+    );
+  }
+  const r = P(S, { enabled: !!s && !d });
+  return /* @__PURE__ */ n(
+    O,
+    {
+      title: t.initial ? `Edit ${t.initial.name}` : "Add variable",
+      onClose: t.onClose,
+      children: [
+        /* @__PURE__ */ n("div", { className: "modal-body", children: [
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: "Name" }),
+            /* @__PURE__ */ e(
+              "input",
+              {
+                type: "text",
+                value: s,
+                disabled: a,
+                onChange: (l) => v(l.target.value),
+                placeholder: "e.g. api_base_url",
+                maxLength: 64,
+                ...r
+              }
+            ),
+            !a && /* @__PURE__ */ e("span", { className: "hint", children: "Lowercase letters, digits, and underscores. Must start with a letter or underscore." })
+          ] }),
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: "Type" }),
+            /* @__PURE__ */ e("select", { value: i, onChange: (l) => f(l.target.value), children: q.map((l) => /* @__PURE__ */ e("option", { value: l, children: l }, l)) })
+          ] }),
+          /* @__PURE__ */ n("label", { className: "field", htmlFor: "var-value", children: [
+            /* @__PURE__ */ e("span", { children: "Value" }),
+            i === "boolean" ? /* @__PURE__ */ n("select", { id: "var-value", value: o || "true", onChange: (l) => u(l.target.value), children: [
+              /* @__PURE__ */ e("option", { value: "true", children: "true" }),
+              /* @__PURE__ */ e("option", { value: "false", children: "false" })
+            ] }) : i === "number" ? /* @__PURE__ */ e(
+              "input",
+              {
+                id: "var-value",
+                type: "number",
+                value: o,
+                onChange: (l) => u(l.target.value),
+                placeholder: "0",
+                ...r
+              }
+            ) : i === "json" ? /* @__PURE__ */ e(
+              "textarea",
+              {
+                id: "var-value",
+                className: "code",
+                rows: 6,
+                value: o,
+                onChange: (l) => u(l.target.value),
+                placeholder: '{"key": "value"}'
+              }
+            ) : /* @__PURE__ */ e(
+              "input",
+              {
+                id: "var-value",
+                type: "text",
+                value: o,
+                onChange: (l) => u(l.target.value),
+                placeholder: "",
+                ...r
+              }
+            )
+          ] }),
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: "Description" }),
+            /* @__PURE__ */ e(
+              "input",
+              {
+                type: "text",
+                value: g,
+                onChange: (l) => p(l.target.value),
+                placeholder: "Optional",
+                ...r
+              }
+            )
+          ] }),
+          m && /* @__PURE__ */ e("div", { className: "result error", children: m })
+        ] }),
+        /* @__PURE__ */ n("div", { className: "modal-actions", children: [
+          /* @__PURE__ */ e("button", { type: "button", className: "btn ghost", onClick: t.onClose, children: "Cancel" }),
+          /* @__PURE__ */ e("button", { type: "button", className: "btn", disabled: !s || d, onClick: S, children: d ? "Saving…" : a ? "Save changes" : "Save variable" })
+        ] })
+      ]
+    }
+  );
+}
+function ne(t) {
+  var y, C;
+  const a = t.slots, [s, v] = h(null), [i, f] = h(null), o = B(), u = R(), g = () => v({ mode: "create" }), p = (a == null ? void 0 : a.header) === void 0 ? /* @__PURE__ */ n("div", { children: [
+    /* @__PURE__ */ e("h3", { children: "Secrets" }),
+    /* @__PURE__ */ e("p", { className: "muted small", children: "Secrets addressable by name. Stored encrypted at rest and never returned from the server — to change a secret, overwrite it." })
+  ] }) : a.header, m = a == null ? void 0 : a.actions, b = m === void 0 ? /* @__PURE__ */ e("button", { type: "button", className: "btn", onClick: g, children: "+ Add secret" }) : typeof m == "function" ? m({ openCreate: g, canCreate: !0 }) : m, N = (a == null ? void 0 : a.empty) === void 0 ? /* @__PURE__ */ e("p", { className: "muted", children: "No secrets yet." }) : a.empty;
+  return /* @__PURE__ */ e("div", { className: "w6w-embed-root", children: /* @__PURE__ */ n("section", { className: "section", children: [
+    (p != null || b != null) && /* @__PURE__ */ n("div", { className: "section-head", children: [
+      p,
+      b
+    ] }),
+    /* @__PURE__ */ n("div", { className: "card", children: [
+      o.isLoading && /* @__PURE__ */ e("p", { className: "muted", children: "Loading…" }),
+      ((y = o.data) == null ? void 0 : y.length) === 0 && N,
+      /* @__PURE__ */ e("ul", { className: "list", children: (C = o.data) == null ? void 0 : C.map((d) => /* @__PURE__ */ n("li", { children: [
+        /* @__PURE__ */ n("div", { className: "list-main", children: [
+          /* @__PURE__ */ e("strong", { className: "list-name", title: d.name, children: d.name }),
+          " ",
+          /* @__PURE__ */ e("code", { className: "muted small", children: "••••••••" }),
+          /* @__PURE__ */ n("div", { className: "muted small list-preview", children: [
+            d.description && /* @__PURE__ */ n(V, { children: [
+              d.description,
+              " · "
+            ] }),
+            "updated ",
+            new Date(d.updatedAt).toLocaleString()
+          ] })
+        ] }),
+        /* @__PURE__ */ n("div", { style: { display: "flex", gap: "var(--w6w-sp-1-5)" }, children: [
+          /* @__PURE__ */ e(
+            L,
+            {
+              label: "Rotate",
+              onClick: () => v({ mode: "edit", s: d }),
+              "data-testid": `secret-rotate-${d.id}`
+            }
+          ),
+          /* @__PURE__ */ e(
+            j,
+            {
+              label: "Delete",
+              onClick: () => f(d),
+              disabled: u.isPending,
+              "data-testid": `secret-delete-${d.id}`
+            }
+          )
+        ] })
+      ] }, d.id)) })
+    ] }),
+    s && /* @__PURE__ */ e(
+      z,
+      {
+        initial: s.mode === "edit" ? s.s : void 0,
+        onClose: () => v(null),
+        onSaved: () => v(null)
+      }
+    ),
+    i && /* @__PURE__ */ e(
+      $,
+      {
+        title: "Delete secret",
+        message: `Delete the secret "${i.name}"? This cannot be undone.`,
+        confirmLabel: "Delete",
+        onConfirm: () => {
+          u.mutate(i.id), f(null);
+        },
+        onClose: () => f(null)
+      }
+    )
+  ] }) });
+}
+function z(t) {
+  var S, r, k;
+  const a = !!t.initial, [s, v] = h(((S = t.initial) == null ? void 0 : S.name) ?? ""), [i, f] = h(""), [o, u] = h(((r = t.initial) == null ? void 0 : r.description) ?? ""), [g, p] = h(null), m = I(), b = W(((k = t.initial) == null ? void 0 : k.id) ?? ""), N = a ? b : m, y = !!s && (a || !!i) && !N.isPending;
+  function C() {
+    if (p(null), a) {
+      b.mutate(
+        { value: i === "" ? void 0 : i, description: o },
+        {
+          onSuccess: () => t.onSaved(),
+          onError: (c) => p((c instanceof x, c.message))
+        }
+      );
+      return;
+    }
+    if (i === "") {
+      p("A secret value is required.");
+      return;
+    }
+    m.mutate(
+      { name: s, value: i, description: o },
+      {
+        onSuccess: () => t.onSaved(),
+        onError: (c) => p((c instanceof x, c.message))
+      }
+    );
+  }
+  const d = P(C, { enabled: y });
+  return /* @__PURE__ */ n(
+    O,
+    {
+      title: t.initial ? `Rotate ${t.initial.name}` : "Add secret",
+      onClose: t.onClose,
+      children: [
+        /* @__PURE__ */ n("div", { className: "modal-body", children: [
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: "Name" }),
+            /* @__PURE__ */ e(
+              "input",
+              {
+                type: "text",
+                value: s,
+                disabled: a,
+                onChange: (c) => v(c.target.value),
+                placeholder: "e.g. openai_api_key",
+                maxLength: 64,
+                ...d
+              }
+            ),
+            !a && /* @__PURE__ */ e("span", { className: "hint", children: "Lowercase letters, digits, and underscores. Must start with a letter or underscore." })
+          ] }),
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: a ? "New value" : "Value" }),
+            /* @__PURE__ */ e(
+              "textarea",
+              {
+                className: "code",
+                rows: 3,
+                value: i,
+                onChange: (c) => f(c.target.value),
+                placeholder: a ? "Leave blank to keep the current value" : "sk-…",
+                autoComplete: "off",
+                spellCheck: !1
+              }
+            ),
+            /* @__PURE__ */ e("span", { className: "hint", children: "Stored encrypted at rest. Once saved, it is not readable through the UI." })
+          ] }),
+          /* @__PURE__ */ n("label", { className: "field", children: [
+            /* @__PURE__ */ e("span", { children: "Description" }),
+            /* @__PURE__ */ e(
+              "input",
+              {
+                type: "text",
+                value: o,
+                onChange: (c) => u(c.target.value),
+                placeholder: "Optional",
+                ...d
+              }
+            )
+          ] }),
+          g && /* @__PURE__ */ e("div", { className: "result error", children: g })
+        ] }),
+        /* @__PURE__ */ n("div", { className: "modal-actions", children: [
+          /* @__PURE__ */ e("button", { type: "button", className: "btn ghost", onClick: t.onClose, children: "Cancel" }),
+          /* @__PURE__ */ e("button", { type: "button", className: "btn", disabled: !y, onClick: C, children: N.isPending ? "Saving…" : a ? "Save changes" : "Save secret" })
+        ] })
+      ]
+    }
+  );
+}
+export {
+  re as CreateEndpointModal,
+  se as CreateFunctionModal,
+  ne as SecretsManager,
+  ae as VarsManager
+};
+//# sourceMappingURL=forms.mjs.map