agent-nuvira 2.7.0 → 2.7.2

package/dist/web-dashboard/src/components/PlatformsPage.js

@@ -0,0 +1,250 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = PlatformsPage;
+const react_1 = require("react");
+const api_1 = require("../api");
+const GUIDES = {
+    telegram: { icon: '✈️', category: 'Chat', steps: ['Open Telegram and search for @BotFather', 'Send /newbot and follow the prompts', 'Give your bot a name (e.g. "My Agent Bot")', 'Give your bot a username ending in "bot"', 'BotFather gives you a token — paste it in Step 2', 'Open your bot in Telegram and send /start'], testTarget: 'telegram:' },
+    discord: { icon: '🎮', category: 'Chat', steps: ['Go to discord.com/developers/applications', 'Click "New Application" and give it a name', 'Go to Bot tab and click "Add Bot"', 'Copy the bot token', 'Enable "Message Content Intent"', 'Invite bot to your server (OAuth2 URL generator)'], testTarget: 'discord:' },
+    slack: { icon: '💬', category: 'Chat', steps: ['Go to api.slack.com/apps', 'Create New App from scratch', 'Add Bot Token Scopes: chat:write, im:read, im:write', 'Install to workspace', 'Copy the Bot User OAuth Token (xoxb-...)'], testTarget: 'slack:' },
+    whatsapp: { icon: '📱', category: 'Chat', steps: ['Run: buff whatsapp pair (or from Gateway tab)', 'Scan the QR code with WhatsApp', 'Pairing completes automatically'], testTarget: '' },
+    whatsapp_cloud: { icon: '☁️', category: 'Chat', steps: ['Go to developers.facebook.com', 'Set up WhatsApp Cloud API', 'Copy token + Phone ID'], testTarget: 'whatsapp_cloud:' },
+    email: { icon: '📧', category: 'Chat', steps: ['Get SMTP credentials (Gmail, SendGrid, etc.)', 'For Gmail: use App Password at smtp.gmail.com:587', 'Paste SMTP host + user below'], testTarget: '' },
+    signal: { icon: '🔒', category: 'Chat', steps: ['Run signal-cli-rest-api Docker container', 'Register a Signal account', 'Paste account number below'], testTarget: '' },
+    dingtalk: { icon: '🔔', category: 'Webhooks', steps: ['Open DingTalk and create a group', 'Add custom robot and copy webhook URL', 'Paste URL below'], testTarget: '' },
+    feishu: { icon: '🐦', category: 'Webhooks', steps: ['Open Feishu and create a bot', 'Copy webhook URL and paste below'], testTarget: '' },
+    wecom: { icon: '🏢', category: 'Webhooks', steps: ['Open WeCom and create a group bot', 'Copy webhook URL and paste below'], testTarget: '' },
+    mattermost: { icon: '📋', category: 'Webhooks', steps: ['Open Mattermost, go to Integrations', 'Create incoming webhook and copy URL'], testTarget: '' },
+    matrix: { icon: '🔗', category: 'Chat', steps: ['Get your Matrix homeserver URL', 'Create a bot user and get access token', 'Paste URL + token below'], testTarget: '' },
+    webhook: { icon: '🪝', category: 'Webhooks', steps: ['Enter your webhook URL', 'The agent sends outbound webhooks to this URL'], testTarget: '' },
+    bluebubbles: { icon: '💙', category: 'Chat', steps: ['Set up BlueBubbles server', 'Copy server URL + password'], testTarget: '' },
+    ntfy: { icon: '📢', category: 'Notifications', steps: ['Choose an ntfy topic (or use ntfy.sh)', 'Paste the topic below'], testTarget: '' },
+    teams: { icon: '👥', category: 'Webhooks', steps: ['Open Microsoft Teams, go to channel', 'Connectors, Incoming Webhook, create', 'Copy webhook URL'], testTarget: '' },
+    google_chat: { icon: '💬', category: 'Webhooks', steps: ['Open Google Chat, space settings', 'Create webhook and copy URL'], testTarget: '' },
+    weixin: { icon: '🔴', category: 'Chat', steps: ['Get Weixin iLink bot token', 'Paste token below'], testTarget: '' },
+    sms: { icon: '📲', category: 'Chat', steps: ['Get Twilio account SID + auth token', 'Register a phone number', 'Paste credentials below'], testTarget: '' },
+    irc: { icon: '💻', category: 'Chat', steps: ['Choose an IRC server (e.g. irc.libera.chat)', 'Set nickname + channel and paste below'], testTarget: '' },
+    simplex: { icon: '📨', category: 'Chat', steps: ['Run local simplex-chat daemon', 'Paste WebSocket URL (ws://127.0.0.1:5225)'], testTarget: '' },
+    homeassistant: { icon: '🏠', category: 'IoT', steps: ['Open Home Assistant Profile', 'Create long-lived access token and paste below'], testTarget: '' },
+};
+function PlatformsPage() {
+    const [configs, setConfigs] = (0, react_1.useState)(null);
+    const [filter, setFilter] = (0, react_1.useState)('all');
+    const [wizardPlatform, setWizardPlatform] = (0, react_1.useState)(null);
+    const [wizardStep, setWizardStep] = (0, react_1.useState)(0);
+    const [wizardValues, setWizardValues] = (0, react_1.useState)({});
+    const [wizardSaving, setWizardSaving] = (0, react_1.useState)(false);
+    const [wizardResult, setWizardResult] = (0, react_1.useState)(null);
+    const [wizardVerify, setWizardVerify] = (0, react_1.useState)({ status: 'idle' });
+    const [wizardTestTarget, setWizardTestTarget] = (0, react_1.useState)('');
+    const [wizardTestMsg, setWizardTestMsg] = (0, react_1.useState)('Hello from agent-nuvira!');
+    const [wizardTestSending, setWizardTestSending] = (0, react_1.useState)(false);
+    const [wizardTestResult, setWizardTestResult] = (0, react_1.useState)(null);
+    const mounted = (0, react_1.useRef)(true);
+    const refresh = (0, react_1.useCallback)(async () => {
+        const list = await api_1.dashboardAPI.getPlatformConfigs();
+        if (!mounted.current)
+            return;
+        setConfigs(list);
+    }, []);
+    (0, react_1.useEffect)(() => {
+        void refresh();
+        return () => { mounted.current = false; };
+    }, [refresh]);
+    const startWizard = (entry) => {
+        setWizardPlatform(entry);
+        setWizardStep(0);
+        setWizardValues(Object.fromEntries(entry.envVars.map((v) => [v.varName, v.value])));
+        setWizardResult(null);
+        setWizardVerify({ status: 'idle' });
+        const g = GUIDES[entry.platform];
+        setWizardTestTarget(g?.testTarget ?? '');
+        setWizardTestMsg('Hello from agent-nuvira!');
+        setWizardTestResult(null);
+    };
+    const verifyWizard = async () => {
+        if (!wizardPlatform)
+            return;
+        setWizardVerify({ status: 'checking' });
+        const result = await api_1.dashboardAPI.verifyPlatformConfig(wizardPlatform.platform, wizardValues);
+        if (result.ok) {
+            setWizardVerify({ status: 'ok', info: result.info });
+            setWizardResult({ kind: 'ok', text: 'Verified! ' + (result.info ? 'Connected as ' + result.info + '.' : 'Token is valid.') });
+        }
+        else {
+            setWizardVerify({ status: 'err', error: result.error });
+            setWizardResult({ kind: 'err', text: result.error || 'Verification failed.' });
+        }
+    };
+    const saveWizard = async () => {
+        if (!wizardPlatform)
+            return;
+        setWizardSaving(true);
+        setWizardResult(null);
+        const result = await api_1.dashboardAPI.setPlatformConfig(wizardPlatform.platform, wizardValues);
+        setWizardSaving(false);
+        if (result.ok) {
+            setWizardResult({ kind: 'ok', text: 'Token saved! Verifying...' });
+            void refresh();
+            setWizardStep(2);
+            void verifyWizard();
+        }
+        else {
+            setWizardResult({ kind: 'err', text: result.error || 'Save failed.' });
+        }
+    };
+    const sendTestMessage = async () => {
+        if (!wizardPlatform || !wizardTestTarget)
+            return;
+        setWizardTestSending(true);
+        setWizardTestResult(null);
+        const result = await api_1.dashboardAPI.sendChannelMessage(wizardTestTarget, wizardTestMsg);
+        setWizardTestSending(false);
+        if (result.ok) {
+            setWizardTestResult({ kind: 'ok', text: 'Message sent via ' + result.platform + '! Check your ' + wizardPlatform.label + ' app.' });
+        }
+        else {
+            setWizardTestResult({ kind: 'err', text: result.error || 'Send failed. Make sure the gateway is running (Gateway tab).' });
+        }
+    };
+    if (configs === null) {
+        return <div className="empty-state">Loading platforms...</div>;
+    }
+    const configuredCount = configs.filter((c) => c.configured).length;
+    const filtered = configs.filter((c) => {
+        if (filter === 'configured')
+            return c.configured;
+        if (filter === 'unconfigured')
+            return !c.configured;
+        return true;
+    });
+    const guide = wizardPlatform ? GUIDES[wizardPlatform.platform] : null;
+    function stepDotClass(step) {
+        return wizardStep === step ? 'wizard-step-dot active' : 'wizard-step-dot';
+    }
+    return (<div className="panel">
+      <div className="panel-header">
+        <h2>Platforms — Messaging Gateway Onboarding</h2>
+      </div>
+
+      <div className="platforms-summary">
+        <div className="platforms-summary-stat">
+          <span className="platforms-summary-number">{configuredCount}</span>
+          <span className="platforms-summary-label">configured</span>
+        </div>
+        <div className="platforms-summary-stat">
+          <span className="platforms-summary-number">{configs.length - configuredCount}</span>
+          <span className="platforms-summary-label">available</span>
+        </div>
+        <div className="platforms-summary-filters">
+          {['all', 'configured', 'unconfigured'].map((f) => (<button key={f} type="button" className={filter === f ? 'platforms-filter-btn active' : 'platforms-filter-btn'} onClick={() => setFilter(f)}>
+              {f === 'all' ? 'All' : f === 'configured' ? 'Configured' : 'Not set up'}
+            </button>))}
+        </div>
+      </div>
+
+      <div className="platforms-grid">
+        {filtered.map((p) => {
+            const g = GUIDES[p.platform];
+            return (<div key={p.platform} className={p.configured ? 'platform-card configured' : 'platform-card'}>
+              <div className="platform-card-head">
+                <span className="platform-card-icon">{g?.icon ?? '🔌'}</span>
+                <div className="platform-card-info">
+                  <span className="platform-card-name">{p.label}</span>
+                  <span className="platform-card-category">{g?.category ?? 'Platform'}</span>
+                </div>
+                <span className={p.configured ? 'status-dot connected' : 'status-dot reconnecting'}/>
+              </div>
+              <div className="platform-card-vars">
+                {p.envVars.map((v) => (<span key={v.varName} className={v.set ? 'platform-var-chip set' : 'platform-var-chip'}>
+                    {v.varName} {v.set ? 'done' : '--'}
+                  </span>))}
+              </div>
+              <div className="platform-card-actions">
+                {!p.configured ? (<button type="button" className="wizard-start-btn" onClick={() => startWizard(p)}>Setup</button>) : (<span className="platform-card-badge">Active</span>)}
+                {p.setupUrl ? (<a href={p.setupUrl} target="_blank" rel="noopener noreferrer" className="admin-mini-btn platform-docs-link">Docs</a>) : null}
+              </div>
+              {!p.configured && p.setupHint ? (<div className="platform-card-hint">{p.setupHint}</div>) : null}
+            </div>);
+        })}
+      </div>
+
+      <div className="platforms-cli-hint">
+        <span className="admin-hint">Prefer the terminal? </span>
+        <code>buff gateway setup telegram</code>
+        <span className="admin-hint"> — same wizard from your CLI</span>
+      </div>
+
+      {wizardPlatform && guide ? (<div className="wizard-overlay" onClick={() => setWizardPlatform(null)}>
+          <div className="wizard-modal" onClick={(e) => e.stopPropagation()}>
+            <div className="wizard-header">
+              <span className="wizard-icon">{guide.icon}</span>
+              <span className="wizard-title">Getting Started: {wizardPlatform.label}</span>
+              <div className="wizard-steps-indicator">
+                <span className={stepDotClass(0)}>1</span>
+                <span className={stepDotClass(1)}>2</span>
+                <span className={stepDotClass(2)}>3</span>
+              </div>
+              <button type="button" className="admin-mini-btn" onClick={() => setWizardPlatform(null)}>X</button>
+            </div>
+            <div className="wizard-body">
+              {wizardStep === 0 && (<>
+                  <p className="wizard-section-title">Step 1: Create your bot on {wizardPlatform.label}</p>
+                  <ol className="wizard-steps">
+                    {guide.steps.map((s, i) => <li key={i}>{s}</li>)}
+                  </ol>
+                  <div className="wizard-nav">
+                    <button type="button" className="admin-refresh-btn" onClick={() => setWizardStep(1)}>I have my token — Step 2</button>
+                    {wizardPlatform.setupUrl ? (<a href={wizardPlatform.setupUrl} target="_blank" rel="noopener noreferrer" className="admin-mini-btn platform-docs-link">Open docs</a>) : null}
+                  </div>
+                </>)}
+
+              {wizardStep === 1 && (<>
+                  <p className="wizard-section-title">Step 2: Paste your token</p>
+                  {wizardPlatform.envVars.map((v) => (<label className="hub-send-target" key={v.varName}>
+                      <span className="admin-hint">{v.prompt}</span>
+                      <input type={v.secret ? 'password' : 'text'} value={wizardValues[v.varName] ?? ''} onChange={(e) => setWizardValues((prev) => ({ ...prev, [v.varName]: e.target.value }))} placeholder={v.secret ? 'paste your token here' : 'value'} autoComplete="off" spellCheck={false} autoFocus/>
+                    </label>))}
+                  {wizardResult ? (<div className={wizardResult.kind === 'ok' ? 'admin-row-msg' : 'admin-row-msg admin-row-msg-err'}>{wizardResult.text}</div>) : null}
+                  <div className="wizard-nav">
+                    <button type="button" className="admin-mini-btn" onClick={() => setWizardStep(0)}>Back</button>
+                    <button type="button" className="admin-refresh-btn" onClick={() => void saveWizard()} disabled={wizardSaving}>
+                      {wizardSaving ? 'Saving...' : 'Save & Verify'}
+                    </button>
+                  </div>
+                </>)}
+
+              {wizardStep === 2 && (<>
+                  <p className="wizard-section-title">Step 3: Verify and test</p>
+
+                  {wizardVerify.status === 'checking' && (<div className="wizard-verify-status">Verifying token...</div>)}
+                  {wizardVerify.status === 'ok' && (<div className="wizard-verify-status ok">Connected as {wizardVerify.info}</div>)}
+                  {wizardVerify.status === 'err' && (<div className="wizard-verify-status err">{wizardVerify.error}</div>)}
+                  {wizardVerify.status === 'idle' && wizardResult?.kind === 'ok' && (<div className="wizard-verify-status ok">{wizardResult.text}</div>)}
+
+                  {wizardTestTarget && (<div className="wizard-test-section">
+                      <p className="wizard-section-title">Send a test message:</p>
+                      <div className="wizard-test-row">
+                        <input className="wizard-test-input" value={wizardTestTarget} onChange={(e) => setWizardTestTarget(e.target.value)} placeholder="telegram:YOUR_CHAT_ID"/>
+                      </div>
+                      <div className="wizard-test-row">
+                        <input className="wizard-test-input" value={wizardTestMsg} onChange={(e) => setWizardTestMsg(e.target.value)} placeholder="Hello from agent-nuvira!"/>
+                        <button type="button" className="admin-refresh-btn" onClick={() => void sendTestMessage()} disabled={wizardTestSending || !wizardTestTarget}>
+                          {wizardTestSending ? 'Sending...' : 'Send test'}
+                        </button>
+                      </div>
+                      {wizardTestResult ? (<div className={wizardTestResult.kind === 'ok' ? 'admin-row-msg' : 'admin-row-msg admin-row-msg-err'}>{wizardTestResult.text}</div>) : null}
+                    </div>)}
+
+                  <div className="wizard-nav">
+                    <button type="button" className="admin-mini-btn" onClick={() => setWizardStep(1)}>Edit token</button>
+                    <button type="button" className="admin-refresh-btn" onClick={() => setWizardPlatform(null)}>Done</button>
+                  </div>
+
+                  {!wizardTestTarget && (<p className="wizard-hint">Token saved! Start the gateway from the Gateway tab, then send a message from your {wizardPlatform.label} app.</p>)}
+                </>)}
+            </div>
+          </div>
+        </div>) : null}
+    </div>);
+}

package/dist/web-dashboard/src/components/QuotaPanel.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = QuotaPanel;
+/**
+ * QuotaPanel — Session 36: the user-declared daily budget editor.
+ *
+ * The provider's TPD (tokens-per-day) allowance is invisible to us — only the
+ * user knows their plan. This panel lets them declare it (tokens / requests
+ * per reset window + the admin cost cap) in the SAME config the CLI writes
+ * (`buff model quota set` → `routing.quota.*` + `routing.governance.maxCostUsd`),
+ * so the quota ledger + auto-router pace around it BEFORE requests go out.
+ *
+ * Semantics (Design Decision 21): advisory + pacing, never a product hard cap.
+ * Unset = current behavior; set = the ledger parks the provider at the cap and
+ * auto-re-enables on window rollover. Clearing a field (blank) returns to
+ * unset. Role gates: budget fields → routing.operate (admin + operator); cost
+ * cap → policy.write (admin); viewer sees a read-only table.
+ */
+const react_1 = require("react");
+const api_1 = require("../api");
+function toField(value) {
+    if (value.trim() === '')
+        return null;
+    const n = Number(value);
+    return Number.isFinite(n) && n >= 0 ? n : null;
+}
+function QuotaPanel({ authed, role }) {
+    const [data, setData] = (0, react_1.useState)(null);
+    const [drafts, setDrafts] = (0, react_1.useState)({});
+    const [costDraft, setCostDraft] = (0, react_1.useState)('');
+    const [busy, setBusy] = (0, react_1.useState)(false);
+    const [msg, setMsg] = (0, react_1.useState)(null);
+    const [error, setError] = (0, react_1.useState)(null);
+    const canEditBudget = authed && (role === 'admin' || role === 'operator');
+    const canEditCost = authed && role === 'admin';
+    const load = (0, react_1.useCallback)(async () => {
+        const d = await api_1.dashboardAPI.fetchAdminQuota();
+        if (!d) {
+            setError('Could not load budget config.');
+            return;
+        }
+        setError(null);
+        setData(d);
+        const rows = {};
+        for (const p of d.providers) {
+            const limit = d.quota[p] || {};
+            rows[p] = {
+                provider: p,
+                tokens: limit.tokensPerWindow?.toString() ?? '',
+                requests: limit.requestsPerWindow?.toString() ?? '',
+                windowMs: limit.windowMs?.toString() ?? '',
+            };
+        }
+        setDrafts(rows);
+        setCostDraft(d.costUsd === null ? '' : String(d.costUsd));
+    }, []);
+    (0, react_1.useEffect)(() => {
+        void load();
+    }, [load]);
+    const setDraft = (provider, field, value) => {
+        setDrafts((d) => ({ ...d, [provider]: { ...(d[provider] || { provider }), [field]: value } }));
+    };
+    const save = async () => {
+        setBusy(true);
+        setMsg(null);
+        const quota = {};
+        for (const row of Object.values(drafts)) {
+            const limit = {};
+            const t = toField(row.tokens);
+            const r = toField(row.requests);
+            const w = toField(row.windowMs);
+            if (t !== null)
+                limit.tokensPerWindow = t;
+            if (r !== null)
+                limit.requestsPerWindow = r;
+            if (w !== null)
+                limit.windowMs = w;
+            quota[row.provider] = Object.keys(limit).length > 0 ? limit : null;
+        }
+        const payload = { quota };
+        // The cost cap is gated on policy.write (admin) SERVER-side — an operator
+        // must never send costUsd or every save would 403. Omit it entirely unless
+        // this session can edit the cap.
+        if (canEditCost) {
+            if (costDraft.trim() !== '') {
+                const n = Number(costDraft);
+                if (!Number.isFinite(n) || n < 0) {
+                    setMsg({ ok: false, text: 'Cost cap must be a non-negative number.' });
+                    setBusy(false);
+                    return;
+                }
+                payload.costUsd = n;
+            }
+            else {
+                payload.costUsd = null; // clears the cap
+            }
+        }
+        const res = await api_1.dashboardAPI.saveAdminQuota(payload);
+        setBusy(false);
+        if (res.ok) {
+            setMsg({ ok: true, text: 'Budget saved — the quota ledger + auto-router will enforce it.' });
+            void load();
+        }
+        else {
+            setMsg({ ok: false, text: res.error || 'Save failed.' });
+        }
+    };
+    const configured = (p) => {
+        const limit = data?.quota[p];
+        return !!limit && (limit.tokensPerWindow !== undefined || limit.requestsPerWindow !== undefined || limit.windowMs !== undefined);
+    };
+    const input = (disabled) => disabled ? 'admin-input' : 'admin-input';
+    return (<div className="admin-quota-panel">
+      <h3 className="section-subtitle">💰 Daily Budget (routing.quota — your plan, your say)</h3>
+      <p className="admin-quota-note">
+        Free-tier providers enforce tokens-per-day caps the API doesn't advertise — only you
+        know your plan's allowance. Declare it here and the agent paces around it (parks the provider
+        at the cap, auto-resumes at window rollover) instead of exhausting your budget mid-task.
+        Unset = current behavior. Same config as <code>buff model quota set</code>.
+      </p>
+      {error ? <div className="admin-error">{error}</div> : null}
+      {data ? (<>
+          <div className="admin-quota-table">
+            <div className="admin-quota-row admin-quota-head">
+              <span>Provider</span>
+              <span>Tokens / window</span>
+              <span>Requests / window</span>
+              <span>Window (ms)</span>
+              <span>Status</span>
+            </div>
+            {data.providers.map((p) => (<div className="admin-quota-row" key={p}>
+                <span className="admin-provider-type">{p}</span>
+                <input className={input(!canEditBudget)} type="number" min={0} placeholder="unset" disabled={!canEditBudget} value={drafts[p]?.tokens ?? ''} onChange={(e) => setDraft(p, 'tokens', e.target.value)}/>
+                <input className={input(!canEditBudget)} type="number" min={0} placeholder="unset" disabled={!canEditBudget} value={drafts[p]?.requests ?? ''} onChange={(e) => setDraft(p, 'requests', e.target.value)}/>
+                <input className={input(!canEditBudget)} type="number" min={0} placeholder="86400000 (24h)" disabled={!canEditBudget} value={drafts[p]?.windowMs ?? ''} onChange={(e) => setDraft(p, 'windowMs', e.target.value)}/>
+                <span className={`admin-role-badge ${configured(p) ? 'admin-role-admin' : 'admin-role-viewer'}`}>
+                  {configured(p) ? 'declared' : 'unset'}
+                </span>
+              </div>))}
+          </div>
+
+          <div className="admin-quota-row admin-quota-cost">
+            <span className="admin-provider-type">Max cost / call (USD, admin)</span>
+            <input className={input(!canEditCost)} type="number" min={0} step={0.01} placeholder="unset" disabled={!canEditCost} value={costDraft} onChange={(e) => setCostDraft(e.target.value)}/>
+            <span className="admin-quota-cost-hint">governance.maxCostUsd — hard admin cap</span>
+          </div>
+
+          {canEditBudget || canEditCost ? (<div className="admin-quota-actions">
+              <button className="admin-mini-btn" onClick={() => void save()} disabled={busy}>
+                {busy ? '⏳ Saving…' : '💾 Save budget'}
+              </button>
+              {msg ? (<span className={msg.ok ? 'admin-quota-ok' : 'admin-quota-err'}>{msg.text}</span>) : null}
+            </div>) : (<div className="admin-readonly-note">
+              🔒 Read-only for <code>{role}</code> — budget limits need <code>admin</code> or{' '}
+              <code>operator</code>; the cost cap needs <code>admin</code>.
+            </div>)}
+        </>) : (<div className="empty-state">Loading budget…</div>)}
+    </div>);
+}

package/dist/web-dashboard/src/components/QuotaPanel.test.js

@@ -0,0 +1,85 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * QuotaPanel tests (Session 36 — user-declared daily budget).
+ *
+ * Covers: provider rows + the TPD callout, pre-fill of declared limits,
+ * viewer read-only gating, admin save payload (routing.quota + cost cap),
+ * and the operator partial permission (budget editable, cost cap locked).
+ */
+const vitest_1 = require("vitest");
+const react_1 = require("@testing-library/react");
+const QuotaPanel_1 = __importDefault(require("./QuotaPanel"));
+const api_1 = require("../api");
+const QUOTA = {
+    ok: true,
+    quota: { groq: { tokensPerWindow: 12000 } },
+    costUsd: 0.1,
+    providers: ['groq', 'gemini', 'local'],
+};
+function mockFetch(config = QUOTA) {
+    return vitest_1.vi.spyOn(api_1.dashboardAPI, 'fetchAdminQuota').mockResolvedValue(config);
+}
+(0, vitest_1.describe)('QuotaPanel', () => {
+    (0, vitest_1.afterEach)(() => {
+        (0, react_1.cleanup)();
+        vitest_1.vi.restoreAllMocks();
+    });
+    (0, vitest_1.it)('renders every provider row + the TPD callout', async () => {
+        mockFetch();
+        (0, react_1.render)(<QuotaPanel_1.default authed={false} role="viewer"/>);
+        (0, vitest_1.expect)(await react_1.screen.findByText(/Daily Budget/)).toBeTruthy();
+        (0, vitest_1.expect)(react_1.screen.getByText('groq')).toBeTruthy();
+        (0, vitest_1.expect)(react_1.screen.getByText('gemini')).toBeTruthy();
+        (0, vitest_1.expect)(react_1.screen.getByText('local')).toBeTruthy();
+        (0, vitest_1.expect)(react_1.screen.getByText(/tokens-per.*day/)).toBeTruthy();
+    });
+    (0, vitest_1.it)('pre-fills declared limits and the cost cap', async () => {
+        mockFetch();
+        (0, react_1.render)(<QuotaPanel_1.default authed={false} role="viewer"/>);
+        (0, vitest_1.expect)((await react_1.screen.findAllByDisplayValue('12000')).length).toBeGreaterThan(0);
+        (0, vitest_1.expect)(react_1.screen.getByDisplayValue('0.1')).toBeTruthy();
+    });
+    (0, vitest_1.it)('viewer sees read-only inputs and the read-only note', async () => {
+        mockFetch();
+        (0, react_1.render)(<QuotaPanel_1.default authed={true} role="viewer"/>);
+        const firstInput = (await react_1.screen.findAllByPlaceholderText('unset'))[0];
+        (0, vitest_1.expect)(firstInput.disabled).toBe(true);
+        (0, vitest_1.expect)(react_1.screen.getByText(/Read-only for/)).toBeTruthy();
+        (0, vitest_1.expect)(react_1.screen.queryByText('💾 Save budget')).toBeNull();
+    });
+    (0, vitest_1.it)('admin can save — saveAdminQuota receives the declared budget', async () => {
+        mockFetch();
+        const save = vitest_1.vi.spyOn(api_1.dashboardAPI, 'saveAdminQuota').mockResolvedValue({ ok: true });
+        (0, react_1.render)(<QuotaPanel_1.default authed={true} role="admin"/>);
+        react_1.fireEvent.change(await react_1.screen.findByDisplayValue('12000'), { target: { value: '20000' } });
+        react_1.fireEvent.click(react_1.screen.getByText('💾 Save budget'));
+        await (0, react_1.waitFor)(() => (0, vitest_1.expect)(save).toHaveBeenCalled());
+        const payload = save.mock.calls[0][0];
+        (0, vitest_1.expect)(payload.quota.groq.tokensPerWindow).toBe(20000);
+        (0, vitest_1.expect)(payload.costUsd).toBe(0.1);
+    });
+    (0, vitest_1.it)('operator can edit budget fields but the cost cap input stays locked', async () => {
+        mockFetch();
+        (0, react_1.render)(<QuotaPanel_1.default authed={true} role="operator"/>);
+        await react_1.screen.findByDisplayValue('12000');
+        (0, vitest_1.expect)(react_1.screen.getByText('💾 Save budget')).toBeTruthy();
+        const costInput = react_1.screen.getByDisplayValue('0.1');
+        (0, vitest_1.expect)(costInput.disabled).toBe(true);
+    });
+    (0, vitest_1.it)('operator save payload OMITS costUsd — the server gates it on policy.write (admin)', async () => {
+        mockFetch();
+        const save = vitest_1.vi.spyOn(api_1.dashboardAPI, 'saveAdminQuota').mockResolvedValue({ ok: true });
+        (0, react_1.render)(<QuotaPanel_1.default authed={true} role="operator"/>);
+        react_1.fireEvent.change(await react_1.screen.findByDisplayValue('12000'), { target: { value: '9000' } });
+        react_1.fireEvent.click(react_1.screen.getByText('💾 Save budget'));
+        await (0, react_1.waitFor)(() => (0, vitest_1.expect)(save).toHaveBeenCalled());
+        const payload = save.mock.calls[0][0];
+        (0, vitest_1.expect)(payload.costUsd).toBeUndefined(); // operator must never send the cap
+        const quota = payload.quota;
+        (0, vitest_1.expect)(quota.groq.tokensPerWindow).toBe(9000);
+    });
+});