@zackbart/connecta 0.34.1 → 0.36.0

package/dist/operator-ui/view.js

@@ -1,705 +0,0 @@
-/**
- * Everything the operator app knows, and every rule for changing it, with no
- * DOM in sight. The components render this and nothing else, so the questions
- * that matter — what a page shows while it loads, what an identity change
- * erases, whether a value may become an href — are answered by functions a test
- * can call directly rather than by reading rendered markup back out of a
- * browser.
- */
-const REGISTRATION_LABELS = {
-    cimd: "Client metadata document (CIMD)",
-    dcr: "Dynamic registration (DCR)",
-    static: "Pre-registered client",
-};
-export function registrationPathLabel(path) {
-    return REGISTRATION_LABELS[path];
-}
-/** Pages the nav lists, in dashboard order. */
-export const OPERATOR_PAGES = [
-    "overview",
-    "endpoints",
-    "connections",
-    "activity",
-    "tokens",
-    "settings",
-];
-export const PAGE_META = {
-    overview: { path: "/", label: "Overview" },
-    endpoints: { path: "/endpoints", label: "Endpoints" },
-    connector: { path: "/connectors", label: "Connector" },
-    settings: { path: "/settings", label: "Settings" },
-    tokens: { path: "/tokens", label: "Tokens" },
-    connections: { path: "/connectors", label: "Connectors" },
-    activity: { path: "/activity", label: "Activity" },
-};
-/** Legacy links remain valid, with the browser replacing their URL. */
-export function canonicalOperatorPath(path) {
-    return ({ "/access": "/endpoints", "/tools": "/connectors", "/config": "/settings" }[path] ??
-        path);
-}
-/**
- * What each page is for, in one line under its heading — on the gate as well
- * as once signed in, so the page an operator lands on reads the same before
- * and after the session is checked.
- */
-export function pageDescription(page, productDescription) {
-    if (page === "activity") {
-        return "Tool calls by caller and result. Arguments and results are not stored.";
-    }
-    return productDescription;
-}
-/**
- * Signed in, but neither a maintainer nor a member of any endpoint: who to
- * ask, and that this is not an error to retry.
- */
-export function noAccessCopy(kind, productName) {
-    const who = kind === "clerk" ? "This account" : kind === "cloudflare-access" ? "This Cloudflare Access identity" : "This token";
-    return `${who} has no access to ${productName}. Ask a maintainer to add you to an endpoint, then reload.`;
-}
-/** What the gate says while the session is checked, page by page. */
-export function checkingCopy() {
-    return "Checking your session…";
-}
-export function pageForPath(path) {
-    if (/^\/connectors\/[a-z0-9_-]+$/.test(path))
-        return "connector";
-    if (path === "/tokens")
-        return "tokens";
-    const match = OPERATOR_PAGES.find((page) => PAGE_META[page].path === canonicalOperatorPath(path));
-    return match ?? "connections";
-}
-export function info(message) {
-    return { message, tone: "info" };
-}
-export function failure(message, fix) {
-    return fix ? { message, tone: "error", fix } : { message, tone: "error" };
-}
-const REFUSED_COPY = {
-    oauth_disconnect: "Disconnect failed. The deployment log has the reason.",
-    oauth_reconnect: "Authorization couldn't start. The deployment log has the reason.",
-    credential_test: "The credential test couldn't run.",
-};
-/**
- * The route's answer to a finished OAuth action. Its state picks the sentence;
- * `opened` says whether the authorization page is already in a new tab.
- */
-export function oauthDoneNotice(action, answer, opened = true) {
-    if (action === "oauth_disconnect") {
-        if (answer?.code === "oauth_revocation_failed")
-            return info("Disconnected here. Revoke the grant in the provider's console too.");
-        return info("Disconnected.");
-    }
-    if (answer?.state === "ok")
-        return info("Connected.");
-    return info(opened ? "Finish in the new tab." : "The new tab was blocked. Open the link here.");
-}
-/** A credential Test's result. `ok` is the only part of the answer it reads. */
-export function credentialTestNotice(connectorId, answer) {
-    return answer?.ok === true
-        ? info("Credential is valid.")
-        : failure("Credential test failed. The deployment log has the reason.", {
-            kind: "credential_test_failed",
-            connectorId,
-        });
-}
-/**
- * A route that refused one of these actions. A credential Test that found
- * nothing usable to test names the problem, which picks the same copy and fix
- * prompt the Connections page uses for it; every other refusal gets the
- * action's one sentence. `problem` is whatever the response carried, so it is
- * checked, not trusted.
- */
-export function refusedNotice(action, connectorId, problem) {
-    if (action === "credential_test" && (problem === "credential_required" || problem === "credential_mismatch")) {
-        return failure(PROBLEM_COPY[problem], { kind: problem, connectorId });
-    }
-    return failure(REFUSED_COPY[action], {
-        kind: action === "credential_test" ? "credential_test_failed" : "oauth_action_failed",
-        connectorId,
-    });
-}
-/**
- * A credential save or removal the route refused, by status. The route's
- * `error` can name a vault failure or echo validation detail, so none of it
- * is shown; the status is enough to say what to do next.
- */
-function credentialRefusedCopy(action, status, problem) {
-    if (problem === "credential_mismatch")
-        return PROBLEM_COPY.credential_mismatch;
-    const verb = action === "credential_save" ? "saved" : "removed";
-    if (status === 400 || status === 413 || status === 415) {
-        return action === "credential_save"
-            ? "Not saved. A value is empty or in the wrong format."
-            : "Not removed. Refresh and try again.";
-    }
-    if (status === 404) {
-        return "This connector no longer has a credential slot. Refresh the page.";
-    }
-    if (status === 503) {
-        return `No credential storage is configured, so nothing was ${verb}.`;
-    }
-    return `Not ${verb}. Try again, or check the deployment log.`;
-}
-/** An action whose permission or target changed before it was sent. */
-export const STALE_COPY = "This changed before sending, so nothing was sent. Try again.";
-/**
- * Every row action's failure, in one voice. The page's own failures — a
- * lapsed session, a denied identity, a dropped connection — read the same for
- * every action; a route's refusal picks the action's fixed sentence.
- */
-export function actionFailedNotice(action, connectorId, facts, productName) {
-    if (facts.kind === "session") {
-        return failure("Session ended. Sign in again.");
-    }
-    if (facts.kind === "forbidden") {
-        return failure("You can't change this connection's authentication.");
-    }
-    if (facts.kind === "network") {
-        return failure(`Couldn't reach ${productName}. Try again.`);
-    }
-    if (facts.kind === "stale")
-        return failure(STALE_COPY);
-    if (action === "credential_save" || action === "credential_remove") {
-        return failure(credentialRefusedCopy(action, facts.status, facts.problem));
-    }
-    return refusedNotice(action, connectorId, facts.problem);
-}
-export function connectorLoadFailureCopy(failure, productName) {
-    if (failure === "unavailable")
-        return "Session identity is unavailable. Retry.";
-    return failure === "session"
-        ? "Session not accepted. Retry, or sign in again."
-        : `Couldn't reach ${productName}. Refresh to retry.`;
-}
-/** The signed-in page's answer when `/ui/data` could not be read. */
-export function loadFailureCopy(failure, productName) {
-    return {
-        title: `Couldn't reach ${productName}`,
-        body: failure === "network"
-            ? "Your browser couldn't connect. Retry."
-            : "The deployment returned an error. Retry, or check its log.",
-    };
-}
-/** A collection page's load failure: fixed words, whatever the route said. */
-export function collectionFailureCopy(_collection, facts, productName) {
-    if (facts.kind === "network") {
-        return `Couldn't reach ${productName}. Retry.`;
-    }
-    if (facts.kind === "session")
-        return "Session ended. Sign in again.";
-    if (facts.kind === "forbidden" || facts.status === 404) {
-        return "Activity isn't available to you.";
-    }
-    return "The deployment returned an error. Retry, or check its log.";
-}
-/** The confirm's question, naming the connector by its title. */
-export function confirmCopy(action, name) {
-    if (action === "oauth_disconnect") {
-        return {
-            question: `Disconnect ${name}? Its tools stop working until you connect again.`,
-            confirm: "Disconnect",
-        };
-    }
-    if (action === "oauth_restart") {
-        return {
-            question: `Reconnect ${name}? It stops working until you finish in the new tab.`,
-            confirm: "Reconnect",
-        };
-    }
-    return {
-        question: `Remove ${name}'s credential? Its tools stop working until you add a new one.`,
-        confirm: "Remove",
-    };
-}
-export function accessTokenUnavailableCopy(capability) {
-    return capability === undefined
-        ? "Agent tokens aren't configured."
-        : "Managing tokens needs an interactive sign-in with permission.";
-}
-/** Who the contract says this viewer is, or null before it loads. */
-export function operatorRole(state) {
-    return state.contract?.role ?? null;
-}
-/**
- * The role pages and navigation render for. The contract's, or, while a
- * refresh that failed has left no contract on screen, maintainer when the
- * last good contract confirmed one and that maintainer's data is still here:
- * their page stays mounted on its own retry state instead of being torn down
- * mid-recovery. Never a request's permission; the store sends maintainer
- * reads only while the contract itself says maintainer.
- */
-export function displayRole(state) {
-    if (state.contract)
-        return state.contract.role;
-    return state.role === "maintainer" && state.data ? "maintainer" : null;
-}
-/**
- * A confirmed maintainer's page is mounted without a contract behind it: a
- * refresh failed, or its read ran past the deadline. The shell shows one
- * recovery banner with Retry above whichever page is open, and that page is
- * stale until a contract confirms the role again.
- */
-export function contractRecovering(state) {
-    return !state.contract && displayRole(state) === "maintainer";
-}
-/**
- * Whether Activity is open to this viewer: maintainers only, on a deployment
- * that records history. Members always read "forbidden".
- */
-export function activityReadable(state) {
-    return Boolean(state.data?.activityEnabled) && activityAllowed(state);
-}
-/** The contract's half of `activityReadable`: a maintainer, on a deployment that records. */
-export function activityAllowed(state) {
-    const contract = state.contract;
-    return (contract?.role === "maintainer" &&
-        contract.live.activity !== "forbidden" &&
-        contract.live.activity !== "unconfigured");
-}
-export function initialState(page) {
-    return {
-        page,
-        generation: 0,
-        session: "loading",
-        gate: null,
-        refreshing: false,
-        loadFailure: null,
-        pendingFocus: null,
-        focusIfLost: null,
-        ...identityScopedState(),
-    };
-}
-/**
- * Every field that belongs to one operator identity. Split out because the only
- * safe way to change identity is to replace all of them at once: a field left
- * behind here is one identity's data on another identity's screen.
- */
-function identityScopedState() {
-    return {
-        recoveryPending: false,
-        data: null,
-        contract: null,
-        role: null,
-        contractPhase: "idle",
-        health: "loading",
-        connectorFilter: "",
-        oauthNotice: null,
-        oauthNoticeFor: null,
-        oauthBusy: null,
-        oauthBlocked: null,
-        oauthBlockedUrl: null,
-        confirming: null,
-        connectorFailures: {},
-        credentialNotice: null,
-        credentialNoticeFor: null,
-        credentialEditing: null,
-        credentialBusy: null,
-        tokenPhase: "idle",
-        tokenNotice: null,
-        tokens: [],
-        createdToken: null,
-        createdTokenFor: null,
-        tokenConfirm: null,
-        unresolvedSlots: [],
-        tokenBusy: false,
-        activityPhase: "idle",
-        activityNotice: null,
-        activityEvents: [],
-        activityCursor: null,
-        activitySearch: "",
-    };
-}
-/**
- * Drop to the gate and forget the previous operator. Bumping the generation is
- * what makes the drop stick: work already in flight for the old identity
- * resolves into a state that no longer accepts it.
- */
-export function resetIdentity(state, gate = null) {
-    return {
-        ...state,
-        generation: state.generation + 1,
-        session: "gated",
-        gate,
-        refreshing: false,
-        loadFailure: null,
-        pendingFocus: null,
-        focusIfLost: null,
-        ...identityScopedState(),
-    };
-}
-/**
- * Leaving a page closes what should not survive it: a one-time secret, a half
- * typed credential, and the notices that answered the page just left.
- */
-export function withPage(state, page) {
-    return {
-        ...state,
-        page,
-        createdToken: null,
-        createdTokenFor: null,
-        tokenConfirm: null,
-        tokenNotice: null,
-        credentialEditing: null,
-        credentialNotice: null,
-        credentialNoticeFor: null,
-        confirming: null,
-    };
-}
-export function credentialUnavailableCopy(capability) {
-    if (capability === "no_slots") {
-        return "No connector declares a credential slot. Credentials stay in code.";
-    }
-    if (capability === "vault_not_configured") {
-        return "No credential vault is configured.";
-    }
-    return "Managing credentials needs an interactive sign-in. A bearer token can only view them.";
-}
-/**
- * The status badge. An auth-needed connector is named by what it needs, so a
- * row whose fix is "Add credential" does not say "Authorization needed".
- */
-export function connectorStatusLabel(status, problem) {
-    if (status === "loading")
-        return "Loading details";
-    if (status === "ok")
-        return "Connected";
-    if (status === "credential_required")
-        return "Credential needed";
-    if (status === "auth_required") {
-        return problem === "credential_required" ? "Credential needed" : "Authorization needed";
-    }
-    return "Unavailable";
-}
-export function connectorStatusTone(status) {
-    if (status === "ok")
-        return "ok";
-    if (status === "auth_required" || status === "credential_required")
-        return "warn";
-    if (status === "loading")
-        return "neutral";
-    return "danger";
-}
-/**
- * What the page says about a connector that is not usable, one fixed sentence
- * per problem kind the server classified. This is the only account of a
- * failure the Connections page renders: a connector's status message can quote
- * a downstream error body, and a downstream error body can quote the secret
- * that was just rejected, so the raw text stays in the deployment's log and
- * never reaches the payload or the DOM. The fix prompt beside it is keyed off
- * the same kind.
- */
-const PROBLEM_COPY = {
-    connector_unavailable: "Unavailable. Its status check or catalog load failed or timed out. The deployment log has the error.",
-    oauth_required: "Needs OAuth authorization. No grant is stored, or it expired or was revoked.",
-    credential_required: "Needs a credential. Nothing usable is stored.",
-    auth_required: "Needs authorization. Its secret is set in deployment config, not here.",
-    credential_mismatch: "The stored credential doesn't match this connector's fields.",
-    catalog_failed: "Connected, but its catalog failed to load, so no tools are served.",
-};
-export function problemCopy(problem) {
-    return problem ? (PROBLEM_COPY[problem] ?? null) : null;
-}
-/**
- * A problem someone can fix by authorizing is a warning, matching the amber
- * "Authorization needed" badge above it; one where something broke is an
- * error. The two used to share the red box, so the row contradicted itself.
- */
-export function problemTone(problem) {
-    return problem === "oauth_required" || problem === "credential_required" || problem === "auth_required"
-        ? "warn"
-        : "danger";
-}
-const PROBLEM_LABEL = {
-    connector_unavailable: "Unavailable",
-    oauth_required: "Authorization needed",
-    credential_required: "Credential needed",
-    auth_required: "Authorization needed",
-    credential_mismatch: "Credential mismatch",
-    catalog_failed: "Catalog failed",
-};
-function problemAction(problem) {
-    if (problem === "credential_mismatch")
-        return "Replace key";
-    return problemTone(problem) === "warn" ? "Connect" : "Inspect";
-}
-/**
- * The verdict the Connectors list, the Overview, Endpoints and a connector's
- * page all show. The server's problem code comes first, then a failed detail
- * read on this page, then a non-ok status. Catalog drift is informational. A problem
- * outranks the status, so a connector whose catalog failed is never
- * "Connected". A failed read marks its connector `connector_unavailable` in
- * the store, so that one code beside a failed read is the page's own and
- * reads "Couldn't load" instead of blaming the downstream.
- */
-export function connectorVerdict(live, signals = {}) {
-    if (live.problem && !(signals.failed && live.problem === "connector_unavailable")) {
-        return { tone: problemTone(live.problem), label: PROBLEM_LABEL[live.problem], action: problemAction(live.problem) };
-    }
-    if (signals.failed)
-        return { tone: "warn", label: "Couldn't load", action: "Inspect" };
-    if (live.status === "loading")
-        return { tone: "neutral", label: connectorStatusLabel(live.status), action: null };
-    if (live.status !== "ok") {
-        const tone = connectorStatusTone(live.status) === "warn" ? "warn" : "danger";
-        return { tone, label: connectorStatusLabel(live.status), action: tone === "warn" ? "Connect" : "Inspect" };
-    }
-    return { tone: "ok", label: "Connected", action: null };
-}
-/**
- * The categories, in the order an operator should read them: what the
- * deployment refuses to call, what it can no longer call, what contradicts a
- * vetted verdict, and what changed shape underneath a reviewed schema. Counts
- * only — a name or a schema on this path would be the payload leak the whole
- * drift model exists to avoid.
- */
-const DRIFT_CATEGORIES = [
-    { key: "unclassifiedTools", label: "Unclassified" },
-    { key: "unservedTools", label: "Unserved" },
-    { key: "annotationConflicts", label: "Annotation conflicts" },
-    { key: "schemaChanges", label: "Schema changes" },
-    { key: "droppedTools", label: "Dropped tool names" },
-];
-function driftTotal(drift) {
-    if (!drift)
-        return 0;
-    return DRIFT_CATEGORIES.reduce((sum, { key }) => sum + (drift[key] || 0), 0);
-}
-export function driftState(drift) {
-    if (!drift)
-        return "unavailable";
-    if (driftTotal(drift) > 0)
-        return "warning";
-    if (drift.reviewedBaseline !== true ||
-        drift.verification !== "complete" ||
-        !drift.schemaCoverage ||
-        drift.schemaCoverage.unpinned > 0 ||
-        drift.schemaCoverage.pinned === 0)
-        return "unavailable";
-    return "clean";
-}
-/** Every category with its count, so a clean report still shows its zeros. */
-export function driftCounts(drift) {
-    if (!drift)
-        return [];
-    return DRIFT_CATEGORIES.filter(({ key }) => key !== "droppedTools" || drift.droppedTools !== undefined).map(({ key, label }) => ({
-        key,
-        label,
-        count: drift[key] || 0,
-    }));
-}
-/** One line naming the state and when it was observed. Never what drifted. */
-export function driftSummary(drift) {
-    if (!drift)
-        return "No catalog refresh yet.";
-    const observed = formatDate(drift.observedAt);
-    const when = observed ? ` · observed ${observed}` : "";
-    const total = driftTotal(drift);
-    const difference = total
-        ? `${total} difference${total === 1 ? "" : "s"}${drift.reviewedBaseline === false ? "" : " from the reviewed manifest"} · `
-        : "";
-    if (drift.reviewedBaseline === false)
-        return `${difference}No reviewed baseline${when}`;
-    if (drift.verification === "unavailable")
-        return `${difference}Schema verification unavailable${when}`;
-    const coverage = drift.schemaCoverage;
-    if (!coverage || coverage.pinned === 0)
-        return `${difference}Schemas not pinned${when}`;
-    if (coverage.unpinned > 0)
-        return `${difference}Partial schema coverage (${coverage.pinned} pinned, ${coverage.unpinned} not pinned)${when}`;
-    if (driftState(drift) === "clean")
-        return `Matches the reviewed manifest${when}`;
-    if (!total)
-        return `Schema verification unavailable${when}`;
-    return `${difference.replace(/ · $/, "")}${when}`;
-}
-/**
- * Only http/https may become a clickable href — the browser half of the gate
- * `src/ui.ts` applies before an authorizationUrl is ever serialized. A hostile
- * downstream that gets a `javascript:` URL past one of them still meets the
- * other, and the caller renders inert text instead of a link.
- */
-export function safeHttpHref(url) {
-    if (!url)
-        return null;
-    try {
-        const protocol = new URL(url).protocol;
-        return protocol === "http:" || protocol === "https:" ? url : null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Locale timestamp, or "" for anything that is not a readable date. */
-export function formatDate(value) {
-    if (!value)
-        return "";
-    const date = new Date(value);
-    // Minutes, not seconds: nothing on these pages is read to the second, and
-    // the seconds were most of the noise in every row that carried a date.
-    return Number.isNaN(date.valueOf())
-        ? ""
-        : date.toLocaleString(undefined, { dateStyle: "medium", timeStyle: "short" });
-}
-const ACTOR_KINDS = {
-    clerk: "Clerk",
-    bearer: "Bearer token",
-    "cloudflare-access": "Cloudflare Access",
-    anonymous: "Anonymous",
-    access_token: "Agent token",
-};
-/** How a caller signed in, as a person reads it. An unknown kind is shown as sent. */
-function actorKindLabel(kind) {
-    if (!kind)
-        return "Unknown caller";
-    return ACTOR_KINDS[kind] ?? kind;
-}
-/** Who made a call: their name when there is one, and how they signed in. */
-export function actorLabel(actor) {
-    if (!actor?.kind)
-        return "Unknown caller";
-    const who = actor.label || actor.id;
-    const kind = actorKindLabel(actor.kind);
-    return who ? `${who} (${kind})` : kind;
-}
-/**
- * The stable id behind a friendly label, shown only when a label or namespace
- * could otherwise make two different people look like one.
- */
-export function actorStableId(actor) {
-    if (!actor?.id)
-        return null;
-    if (!actor.label && !actor.namespace)
-        return null;
-    return actor.namespace ? `${actor.namespace} · ${actor.id}` : actor.id;
-}
-function activityMatches(event, query) {
-    const q = query.trim().toLowerCase();
-    if (!q)
-        return true;
-    return [
-        event.address,
-        event.connectorId,
-        event.toolName,
-        event.source,
-        event.outcome,
-        event.errorCode,
-        event.friction,
-        event.actor?.kind,
-        event.actor?.id,
-        event.actor?.namespace,
-        event.actor?.label,
-        activityOutcomeBadge(event.outcome).label,
-        activityDetail(event),
-        actorKindLabel(event.actor?.kind),
-    ].some((value) => String(value ?? "")
-        .toLowerCase()
-        .includes(q));
-}
-export function filterActivity(events, query) {
-    return events.filter((event) => activityMatches(event, query));
-}
-/** Counts only. What the deployment ran, never what it sent or received. */
-export function activitySummary(events) {
-    if (events.length === 0)
-        return "";
-    const calls = events.filter((event) => event.kind !== "catalog_drift");
-    const failed = calls.filter((event) => ["error", "timeout"].includes(activityOutcomeClass(event.outcome))).length;
-    const changes = events.length - calls.length;
-    const tools = new Set(calls.map((event) => event.address)).size;
-    return `${calls.length} loaded call${calls.length === 1 ? "" : "s"} · ${failed} failed · ${tools} tool${tools === 1 ? "" : "s"}${changes ? ` · ${changes} catalog change${changes === 1 ? "" : "s"}` : ""}`;
-}
-// A pause and an approval are neither success nor failure: each gets its own
-// class, and the stylesheet paints neither as an error. Nothing has emitted
-// either since issue #672 removed program pauses, but older rows carry them.
-const ACTIVITY_OUTCOMES = ["success", "error", "timeout", "cancelled", "paused", "approved"];
-export function activityOutcomeClass(outcome) {
-    return ACTIVITY_OUTCOMES.includes(outcome) ? outcome : "error";
-}
-/** Each outcome as a badge: a word a person reads, and a tone that is never alone. */
-const OUTCOME_BADGE = {
-    success: { label: "Succeeded", tone: "ok" },
-    error: { label: "Failed", tone: "danger" },
-    timeout: { label: "Timed out", tone: "danger" },
-    cancelled: { label: "Cancelled", tone: "neutral" },
-    paused: { label: "Paused for approval", tone: "warn" },
-    approved: { label: "Approved", tone: "ok" },
-};
-export function activityOutcomeBadge(outcome) {
-    return OUTCOME_BADGE[outcome] ?? { label: "Failed", tone: "danger" };
-}
-const SOURCE_LABELS = {
-    execute_code: "In a program",
-    call_tool: "Direct call",
-    call_destructive_tool: "Direct call, approved by the host",
-    // History only: resume_execution left with program pauses (#672).
-    resume_execution: "Resumed program",
-    batch_call: "Batch call",
-};
-/**
- * Friction classes and the error codes an operator meets most, in words. An
- * unknown code falls back to itself with the underscores taken out, which is
- * still more readable than the wire form and never a guess at its meaning.
- */
-const REASON_LABELS = {
-    tool_not_found: "tool not found",
-    unknown_address: "tool not found",
-    unknown_tool: "tool not found",
-    ambiguous_tool_alias: "ambiguous tool name",
-    schema_retry: "arguments didn't match the schema",
-    invalid_args: "arguments didn't match the schema",
-    destructive_reroute: "needed host approval",
-    destructive_tool_requires_approval: "needed host approval",
-    read_only_endpoint: "endpoint is read-only",
-    approval_required: "needed approval",
-    auth_required: "needed authorization",
-    result_too_large: "result too large",
-    timeout: "timed out",
-};
-function reasonLabel(code) {
-    return REASON_LABELS[code] ?? code.replaceAll("_", " ");
-}
-/** Why a call stalled or failed, in words; "" when nothing was recorded. */
-export function activityReason(event) {
-    const reasons = [event.friction, event.errorCode].filter((code) => Boolean(code)).map(reasonLabel);
-    return [...new Set(reasons)].join(" · ");
-}
-/** The one-line detail under an address: where it ran, retries, and why it stalled. */
-export function activityDetail(event) {
-    if (event.kind === "catalog_drift")
-        return "Catalog changed";
-    const parts = [SOURCE_LABELS[event.source] ?? event.source];
-    if (event.approval === "tool")
-        parts.push("approved for the rest of the run");
-    if (event.approval === "call")
-        parts.push("approved for this call");
-    if (event.attempts > 1)
-        parts.push(`${event.attempts} attempts`);
-    const reasons = [event.friction, event.errorCode].filter((code) => Boolean(code)).map(reasonLabel);
-    // The friction class and the code often say the same thing in two
-    // vocabularies ("auth_required" twice); once is enough.
-    for (const reason of new Set(reasons))
-        parts.push(reason);
-    return parts.join(" · ");
-}
-/**
- * A stored credential that cannot be used, by cause. The payload's `error`
- * beside it is not shown: it can carry a vault's own words.
- */
-export function credentialProblemCopy(problem) {
-    if (problem === "credential_mismatch")
-        return PROBLEM_COPY.credential_mismatch;
-    if (problem === "credential_unreadable") {
-        return "Credential status is unavailable. Retry before replacing or removing it.";
-    }
-    return "The stored credential can't be used. Replace it.";
-}
-/** Gate copy for each browser-auth shape, so the sign-in state is never a blank page. */
-export function gateCopy(kind, signedIn) {
-    if (kind === "cloudflare-access") {
-        return "Couldn't check your Cloudflare Access identity. Retry.";
-    }
-    if (kind !== "clerk") {
-        return "Paste an operator token.";
-    }
-    return signedIn ? "This Clerk account can't open operator pages." : "Sign in with Clerk.";
-}