micro-models-agent 2.16.1 → 2.17.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (428) hide show
  1. package/CHANGELOG.md +34 -0
  2. package/README.md +8 -3
  3. package/dist/assets/app.js +1 -314
  4. package/dist/assets/hljs.js +5 -1244
  5. package/dist/assets/index.html +11 -0
  6. package/dist/assets/js/api.js +1 -28
  7. package/dist/assets/js/core/menus.js +1 -0
  8. package/dist/assets/js/core/store/feed.js +1 -0
  9. package/dist/assets/js/core/store/index.js +1 -0
  10. package/dist/assets/js/core/store/session.js +1 -0
  11. package/dist/assets/js/core/store/settings.js +1 -0
  12. package/dist/assets/js/core/store/tabs.js +1 -0
  13. package/dist/assets/js/dialog.js +1 -105
  14. package/dist/assets/js/dom.js +1 -178
  15. package/dist/assets/js/feed/core.js +1 -0
  16. package/dist/assets/js/feed/history.js +1 -0
  17. package/dist/assets/js/feed/plan.js +1 -0
  18. package/dist/assets/js/feed/question.js +3 -0
  19. package/dist/assets/js/feed/sidebar.js +1 -0
  20. package/dist/assets/js/feed/stream.js +1 -0
  21. package/dist/assets/js/feed/turn.js +5 -0
  22. package/dist/assets/js/feed.js +1 -1250
  23. package/dist/assets/js/format.js +2 -122
  24. package/dist/assets/js/i18n.js +1 -46
  25. package/dist/assets/js/rail.js +1 -114
  26. package/dist/assets/js/session/cmdk.js +1 -0
  27. package/dist/assets/js/session/composer.js +1 -0
  28. package/dist/assets/js/session/sessions-menu.js +1 -0
  29. package/dist/assets/js/session/tabs.js +1 -0
  30. package/dist/assets/js/settings/controls.js +1 -0
  31. package/dist/assets/js/settings/editors.js +1 -0
  32. package/dist/assets/js/settings/form.js +1 -0
  33. package/dist/assets/js/settings/modal.js +1 -0
  34. package/dist/assets/js/settings/panels.js +1 -0
  35. package/dist/assets/js/settings/providers.js +1 -0
  36. package/dist/assets/js/settings/search.js +1 -0
  37. package/dist/assets/js/settings/subdialog.js +1 -0
  38. package/dist/assets/js/settings/write.js +1 -0
  39. package/dist/assets/js/settings.js +1 -1914
  40. package/dist/assets/js/sidebar/core.js +1 -0
  41. package/dist/assets/js/sidebar/lsp.js +2 -0
  42. package/dist/assets/js/sidebar/map.js +1 -0
  43. package/dist/assets/js/sidebar/state.js +1 -0
  44. package/dist/assets/js/sidebar/trace.js +5 -0
  45. package/dist/assets/js/sidebar.js +1 -705
  46. package/dist/assets/js/store.js +1 -82
  47. package/dist/assets/js/subdialog.js +1 -0
  48. package/dist/assets/md.js +1 -291
  49. package/dist/assets/setup.js +3 -816
  50. package/dist/assets/smd.js +29 -1665
  51. package/dist/assets/styles.css +1 -1598
  52. package/dist/certification/certifications.json +1 -494
  53. package/dist/i18n/en.json +1 -1851
  54. package/dist/i18n/ru.json +1 -1854
  55. package/dist/main.js +815 -55797
  56. package/dist/modules/browser/bridge-server.mjs +2 -252
  57. package/package.json +10 -5
  58. package/dist/assets/js/settings-controls.js +0 -452
  59. package/dist/assets/js/tabs.js +0 -867
  60. package/dist/cli/cache-line.js +0 -31
  61. package/dist/cli/command-suggest.js +0 -39
  62. package/dist/cli/commands.js +0 -781
  63. package/dist/cli/completer.js +0 -268
  64. package/dist/cli/index.js +0 -3
  65. package/dist/cli/json-payload.js +0 -32
  66. package/dist/cli/main.js +0 -346
  67. package/dist/cli/onboarding-commands.js +0 -126
  68. package/dist/cli/plugin-commands.js +0 -38
  69. package/dist/cli/relaunch.js +0 -40
  70. package/dist/cli/repl-commands-lsp.js +0 -75
  71. package/dist/cli/repl-commands-skills.js +0 -105
  72. package/dist/cli/repl-commands.js +0 -1218
  73. package/dist/cli/repl.js +0 -1238
  74. package/dist/cli/run-result.js +0 -38
  75. package/dist/cli/security-commands.js +0 -177
  76. package/dist/cli/setup-order.js +0 -6
  77. package/dist/cli/setup-prompt.js +0 -50
  78. package/dist/cli/setup.js +0 -161
  79. package/dist/cli/web-command.js +0 -98
  80. package/dist/config/budget.js +0 -48
  81. package/dist/config/config.js +0 -345
  82. package/dist/config/defaults.js +0 -197
  83. package/dist/config/domains.js +0 -135
  84. package/dist/config/env.js +0 -46
  85. package/dist/config/experts.js +0 -17
  86. package/dist/config/index.js +0 -5
  87. package/dist/config/paths.js +0 -56
  88. package/dist/config/redact.js +0 -44
  89. package/dist/config/registry-extra.js +0 -334
  90. package/dist/config/registry.js +0 -584
  91. package/dist/config/security.js +0 -212
  92. package/dist/config/timeouts.js +0 -74
  93. package/dist/config/types.js +0 -1
  94. package/dist/config/utils.js +0 -57
  95. package/dist/core/agent/artifact-progress.js +0 -59
  96. package/dist/core/agent/artifact-resolve.js +0 -79
  97. package/dist/core/agent/audit-gate.js +0 -53
  98. package/dist/core/agent/compaction.js +0 -89
  99. package/dist/core/agent/constants.js +0 -90
  100. package/dist/core/agent/context-log.js +0 -454
  101. package/dist/core/agent/context-renderer.js +0 -45
  102. package/dist/core/agent/critic-gate.js +0 -132
  103. package/dist/core/agent/hallucination-gate.js +0 -197
  104. package/dist/core/agent/loop-state.js +0 -68
  105. package/dist/core/agent/prefix-monitor.js +0 -101
  106. package/dist/core/agent/reasoning-resolver.js +0 -65
  107. package/dist/core/agent/token-tracker.js +0 -99
  108. package/dist/core/agent/tool-batch.js +0 -312
  109. package/dist/core/agent/tool-images.js +0 -18
  110. package/dist/core/agent/tool-output.js +0 -116
  111. package/dist/core/agent/tool-pairing.js +0 -60
  112. package/dist/core/agent-moe.js +0 -248
  113. package/dist/core/agent.js +0 -1299
  114. package/dist/core/bootstrap/agent-phase.js +0 -66
  115. package/dist/core/bootstrap/config-phase.js +0 -86
  116. package/dist/core/bootstrap/modules-phase.js +0 -269
  117. package/dist/core/bootstrap/provider-phase.js +0 -183
  118. package/dist/core/bootstrap/session-phase.js +0 -204
  119. package/dist/core/bootstrap/state.js +0 -94
  120. package/dist/core/bootstrap/workspace-phase.js +0 -115
  121. package/dist/core/bootstrap.js +0 -112
  122. package/dist/core/crash-handler.js +0 -62
  123. package/dist/core/environment.js +0 -224
  124. package/dist/core/host-plan.js +0 -43
  125. package/dist/core/host.js +0 -23
  126. package/dist/core/index.js +0 -3
  127. package/dist/core/prompt-builder.js +0 -95
  128. package/dist/core/prompt-overflow.js +0 -306
  129. package/dist/core/session-logger.js +0 -375
  130. package/dist/core/system-prompt.js +0 -117
  131. package/dist/core/types.js +0 -1
  132. package/dist/core/version.js +0 -28
  133. package/dist/core/web-host.js +0 -34
  134. package/dist/core/workspace.js +0 -80
  135. package/dist/i18n/index.js +0 -80
  136. package/dist/index.js +0 -30
  137. package/dist/llm/cache-usage.js +0 -76
  138. package/dist/llm/image-utils.js +0 -138
  139. package/dist/llm/index.js +0 -4
  140. package/dist/llm/llm-errors.js +0 -50
  141. package/dist/llm/model-loader.js +0 -86
  142. package/dist/llm/models-dev.js +0 -121
  143. package/dist/llm/openai-compat.js +0 -756
  144. package/dist/llm/orchestrator.js +0 -294
  145. package/dist/llm/provider-budget.js +0 -68
  146. package/dist/llm/provider-context.js +0 -233
  147. package/dist/llm/provider.js +0 -9
  148. package/dist/llm/response.js +0 -44
  149. package/dist/llm/stream-state.js +0 -26
  150. package/dist/llm/token-counter.js +0 -83
  151. package/dist/llm/types.js +0 -1
  152. package/dist/logger/app-logger.js +0 -212
  153. package/dist/logger/file-log.js +0 -160
  154. package/dist/logger/index.js +0 -2
  155. package/dist/migration/backup.js +0 -56
  156. package/dist/migration/detect.js +0 -61
  157. package/dist/migration/index.js +0 -3
  158. package/dist/modules/artifacts/store.js +0 -62
  159. package/dist/modules/browser/actions.js +0 -79
  160. package/dist/modules/browser/bridge-client.js +0 -203
  161. package/dist/modules/browser/bridge-path.js +0 -10
  162. package/dist/modules/browser/console-buffer.js +0 -37
  163. package/dist/modules/browser/cookie-store.js +0 -29
  164. package/dist/modules/browser/driver-types.js +0 -1
  165. package/dist/modules/browser/driver.js +0 -186
  166. package/dist/modules/browser/index.js +0 -9
  167. package/dist/modules/browser/module.js +0 -30
  168. package/dist/modules/browser/session.js +0 -322
  169. package/dist/modules/browser/snapshot.js +0 -154
  170. package/dist/modules/browser/types.js +0 -13
  171. package/dist/modules/certification/cli.js +0 -264
  172. package/dist/modules/certification/fact-checker.js +0 -90
  173. package/dist/modules/certification/loader.js +0 -127
  174. package/dist/modules/certification/manifest.js +0 -231
  175. package/dist/modules/certification/runner.js +0 -233
  176. package/dist/modules/certification/scenarios.js +0 -586
  177. package/dist/modules/certification/syntax-scenarios.js +0 -50
  178. package/dist/modules/certification/types.js +0 -1
  179. package/dist/modules/context/chunk-query.js +0 -122
  180. package/dist/modules/context/fact-extractor.js +0 -170
  181. package/dist/modules/context/history.js +0 -15
  182. package/dist/modules/context/index.js +0 -2
  183. package/dist/modules/context/manager.js +0 -482
  184. package/dist/modules/critic/client.js +0 -176
  185. package/dist/modules/critic/evidence.js +0 -81
  186. package/dist/modules/critic/provider.js +0 -45
  187. package/dist/modules/critic/tools.js +0 -78
  188. package/dist/modules/critic/types.js +0 -1
  189. package/dist/modules/execution/audit-runners.js +0 -206
  190. package/dist/modules/execution/auditor.js +0 -222
  191. package/dist/modules/execution/execution-plugin.js +0 -478
  192. package/dist/modules/execution/index.js +0 -8
  193. package/dist/modules/execution/input-from.js +0 -70
  194. package/dist/modules/execution/module.js +0 -891
  195. package/dist/modules/execution/moe-executor.js +0 -443
  196. package/dist/modules/execution/plan-actions.js +0 -642
  197. package/dist/modules/execution/plan-checks.js +0 -35
  198. package/dist/modules/execution/plan-coverage.js +0 -71
  199. package/dist/modules/execution/plan-persister.js +0 -46
  200. package/dist/modules/execution/plan-steps.js +0 -31
  201. package/dist/modules/execution/plan-store.js +0 -274
  202. package/dist/modules/execution/plan-tool.js +0 -249
  203. package/dist/modules/execution/plan-validator.js +0 -197
  204. package/dist/modules/execution/planner.js +0 -103
  205. package/dist/modules/execution/stuck-detector.js +0 -834
  206. package/dist/modules/execution/tracker.js +0 -92
  207. package/dist/modules/execution/transient-error.js +0 -30
  208. package/dist/modules/execution/types.js +0 -1
  209. package/dist/modules/execution/verifier.js +0 -343
  210. package/dist/modules/execution/windows-commands.js +0 -52
  211. package/dist/modules/hallucination/artifact-claim.js +0 -93
  212. package/dist/modules/hallucination/confidence.js +0 -81
  213. package/dist/modules/hallucination/consistency.js +0 -37
  214. package/dist/modules/hallucination/detector.js +0 -57
  215. package/dist/modules/hallucination/factual.js +0 -205
  216. package/dist/modules/hallucination/index.js +0 -6
  217. package/dist/modules/hallucination/js-identifiers.js +0 -261
  218. package/dist/modules/hallucination/llm-judge.js +0 -116
  219. package/dist/modules/hallucination/success-claim.js +0 -59
  220. package/dist/modules/index.js +0 -5
  221. package/dist/modules/indexer/cache.js +0 -88
  222. package/dist/modules/indexer/index.js +0 -4
  223. package/dist/modules/indexer/map-command.js +0 -33
  224. package/dist/modules/indexer/map-select.js +0 -87
  225. package/dist/modules/indexer/module.js +0 -293
  226. package/dist/modules/indexer/project-profile.js +0 -184
  227. package/dist/modules/indexer/symbols.js +0 -189
  228. package/dist/modules/indexer/walker.js +0 -285
  229. package/dist/modules/lsp/check-tool.js +0 -61
  230. package/dist/modules/lsp/client.js +0 -406
  231. package/dist/modules/lsp/command.js +0 -53
  232. package/dist/modules/lsp/config.js +0 -189
  233. package/dist/modules/lsp/index.js +0 -4
  234. package/dist/modules/lsp/module.js +0 -295
  235. package/dist/modules/lsp/probe.js +0 -86
  236. package/dist/modules/lsp/project-root.js +0 -69
  237. package/dist/modules/lsp/startup-check.js +0 -154
  238. package/dist/modules/lsp/types.js +0 -1
  239. package/dist/modules/mcp/client.js +0 -445
  240. package/dist/modules/mcp/index.js +0 -4
  241. package/dist/modules/mcp/module.js +0 -295
  242. package/dist/modules/mcp/registry.js +0 -20
  243. package/dist/modules/memory/index.js +0 -2
  244. package/dist/modules/memory/module.js +0 -101
  245. package/dist/modules/memory/search.js +0 -45
  246. package/dist/modules/memory/store.js +0 -107
  247. package/dist/modules/onboarding/init.js +0 -47
  248. package/dist/modules/onboarding/meet.js +0 -30
  249. package/dist/modules/onboarding/mode.js +0 -30
  250. package/dist/modules/onboarding/prompts.js +0 -43
  251. package/dist/modules/pipelines/engine.js +0 -70
  252. package/dist/modules/pipelines/index.js +0 -4
  253. package/dist/modules/pipelines/parser.js +0 -59
  254. package/dist/modules/pipelines/template.js +0 -18
  255. package/dist/modules/plugins/builtin/lint-on-write.js +0 -377
  256. package/dist/modules/plugins/builtin/notify.js +0 -11
  257. package/dist/modules/plugins/index.js +0 -2
  258. package/dist/modules/plugins/loader.js +0 -85
  259. package/dist/modules/plugins/manager.js +0 -244
  260. package/dist/modules/plugins/types.js +0 -1
  261. package/dist/modules/pricing/index.js +0 -70
  262. package/dist/modules/pricing/prices.js +0 -147
  263. package/dist/modules/processes/detect.js +0 -34
  264. package/dist/modules/processes/index.js +0 -4
  265. package/dist/modules/processes/kill-tree.js +0 -52
  266. package/dist/modules/processes/registry.js +0 -294
  267. package/dist/modules/processes/runner.js +0 -23
  268. package/dist/modules/providers/cache.js +0 -23
  269. package/dist/modules/providers/capabilities.js +0 -28
  270. package/dist/modules/providers/create.js +0 -21
  271. package/dist/modules/providers/factory.js +0 -28
  272. package/dist/modules/providers/fallback.js +0 -81
  273. package/dist/modules/providers/health.js +0 -47
  274. package/dist/modules/providers/index.js +0 -6
  275. package/dist/modules/providers/manager.js +0 -207
  276. package/dist/modules/providers/naming.js +0 -15
  277. package/dist/modules/providers/preflight.js +0 -71
  278. package/dist/modules/providers/presets.js +0 -232
  279. package/dist/modules/providers/registry.js +0 -27
  280. package/dist/modules/providers/types.js +0 -1
  281. package/dist/modules/reasoning/policy.js +0 -42
  282. package/dist/modules/reasoning/probe.js +0 -116
  283. package/dist/modules/registry.js +0 -48
  284. package/dist/modules/security/audit-log.js +0 -119
  285. package/dist/modules/security/audit-notifier.js +0 -267
  286. package/dist/modules/security/command-validator.js +0 -272
  287. package/dist/modules/security/content-scanner.js +0 -53
  288. package/dist/modules/security/data-sanitizer.js +0 -82
  289. package/dist/modules/security/encryption.js +0 -216
  290. package/dist/modules/security/index.js +0 -15
  291. package/dist/modules/security/network-validator.js +0 -236
  292. package/dist/modules/security/path-validator.js +0 -261
  293. package/dist/modules/security/protected-paths.js +0 -73
  294. package/dist/modules/security/rate-limiter.js +0 -98
  295. package/dist/modules/security/security-policies.js +0 -499
  296. package/dist/modules/security/session-encryption.js +0 -182
  297. package/dist/modules/security/session-isolation.js +0 -75
  298. package/dist/modules/session/auto-name.js +0 -63
  299. package/dist/modules/session/export.js +0 -98
  300. package/dist/modules/session/index.js +0 -4
  301. package/dist/modules/session/manager.js +0 -234
  302. package/dist/modules/session/module.js +0 -33
  303. package/dist/modules/session/store.js +0 -295
  304. package/dist/modules/session/types.js +0 -1
  305. package/dist/modules/setup/answers.js +0 -35
  306. package/dist/modules/setup/apply.js +0 -79
  307. package/dist/modules/setup/discovery.js +0 -72
  308. package/dist/modules/skills/index.js +0 -3
  309. package/dist/modules/skills/loader.js +0 -86
  310. package/dist/modules/skills/matcher.js +0 -27
  311. package/dist/modules/skills/module.js +0 -141
  312. package/dist/modules/types.js +0 -1
  313. package/dist/modules/updater/changelog-reader.js +0 -93
  314. package/dist/modules/updater/checker.js +0 -101
  315. package/dist/modules/updater/dev-detect.js +0 -18
  316. package/dist/modules/updater/index.js +0 -4
  317. package/dist/modules/updater/module.js +0 -129
  318. package/dist/modules/user-profile/compressor.js +0 -18
  319. package/dist/modules/user-profile/index.js +0 -2
  320. package/dist/modules/user-profile/profile.js +0 -77
  321. package/dist/modules/webui/answer-api.js +0 -29
  322. package/dist/modules/webui/assets.js +0 -50
  323. package/dist/modules/webui/body.js +0 -21
  324. package/dist/modules/webui/commands-settings.js +0 -209
  325. package/dist/modules/webui/commands-shared.js +0 -60
  326. package/dist/modules/webui/commands.js +0 -174
  327. package/dist/modules/webui/config-api.js +0 -134
  328. package/dist/modules/webui/file-api.js +0 -202
  329. package/dist/modules/webui/forward.js +0 -159
  330. package/dist/modules/webui/history-api.js +0 -112
  331. package/dist/modules/webui/host-state.js +0 -60
  332. package/dist/modules/webui/i18n-api.js +0 -9
  333. package/dist/modules/webui/limits.js +0 -6
  334. package/dist/modules/webui/log-forward.js +0 -20
  335. package/dist/modules/webui/memory-commands.js +0 -64
  336. package/dist/modules/webui/model-cache.js +0 -18
  337. package/dist/modules/webui/module.js +0 -148
  338. package/dist/modules/webui/persist.js +0 -24
  339. package/dist/modules/webui/prompt-io.js +0 -97
  340. package/dist/modules/webui/providers-api.js +0 -337
  341. package/dist/modules/webui/providers-view.js +0 -56
  342. package/dist/modules/webui/reasoning-view.js +0 -15
  343. package/dist/modules/webui/run-agent.js +0 -81
  344. package/dist/modules/webui/server.js +0 -284
  345. package/dist/modules/webui/sessions-api.js +0 -178
  346. package/dist/modules/webui/settings-api.js +0 -561
  347. package/dist/modules/webui/setup-api.js +0 -201
  348. package/dist/modules/webui/state.js +0 -74
  349. package/dist/modules/webui/util.js +0 -261
  350. package/dist/output/bus.js +0 -37
  351. package/dist/output/channel.js +0 -285
  352. package/dist/output/format.js +0 -15
  353. package/dist/output/index.js +0 -8
  354. package/dist/output/json-sink.js +0 -24
  355. package/dist/output/machine.js +0 -9
  356. package/dist/output/session-sink.js +0 -27
  357. package/dist/output/types.js +0 -1
  358. package/dist/tools/approve.js +0 -41
  359. package/dist/tools/attach-image.js +0 -102
  360. package/dist/tools/auto-fixer.js +0 -180
  361. package/dist/tools/auto-tags.js +0 -83
  362. package/dist/tools/bash.js +0 -649
  363. package/dist/tools/browser.js +0 -160
  364. package/dist/tools/chunk-query.js +0 -112
  365. package/dist/tools/create-dir.js +0 -60
  366. package/dist/tools/delete-file.js +0 -67
  367. package/dist/tools/download-file.js +0 -142
  368. package/dist/tools/edit-file.js +0 -136
  369. package/dist/tools/enable-tools.js +0 -59
  370. package/dist/tools/executor.js +0 -304
  371. package/dist/tools/file-info.js +0 -49
  372. package/dist/tools/filter-tools.js +0 -17
  373. package/dist/tools/glob-tool.js +0 -37
  374. package/dist/tools/grep-tool.js +0 -142
  375. package/dist/tools/hidden-tools-block.js +0 -37
  376. package/dist/tools/index.js +0 -88
  377. package/dist/tools/list-dir.js +0 -53
  378. package/dist/tools/load-skill.js +0 -51
  379. package/dist/tools/mcp-call.js +0 -80
  380. package/dist/tools/meet-done.js +0 -14
  381. package/dist/tools/move-file.js +0 -94
  382. package/dist/tools/path-utils.js +0 -108
  383. package/dist/tools/pipeline-run.js +0 -167
  384. package/dist/tools/preview.js +0 -2
  385. package/dist/tools/process-ids.js +0 -31
  386. package/dist/tools/process-kill.js +0 -33
  387. package/dist/tools/process-list.js +0 -38
  388. package/dist/tools/process-log.js +0 -49
  389. package/dist/tools/process-wait.js +0 -63
  390. package/dist/tools/prompt-io.js +0 -29
  391. package/dist/tools/question.js +0 -288
  392. package/dist/tools/read-file.js +0 -200
  393. package/dist/tools/recall.js +0 -124
  394. package/dist/tools/registry.js +0 -48
  395. package/dist/tools/remember.js +0 -72
  396. package/dist/tools/scope-check.js +0 -32
  397. package/dist/tools/scope-request.js +0 -96
  398. package/dist/tools/search-history.js +0 -88
  399. package/dist/tools/session-info.js +0 -46
  400. package/dist/tools/set-thinking.js +0 -75
  401. package/dist/tools/subagent.js +0 -257
  402. package/dist/tools/syntax-validator.js +0 -379
  403. package/dist/tools/types.js +0 -1
  404. package/dist/tools/user-input.js +0 -134
  405. package/dist/tools/web-browse.js +0 -93
  406. package/dist/tools/web-fetch.js +0 -108
  407. package/dist/tools/web-search.js +0 -107
  408. package/dist/tools/write-file.js +0 -128
  409. package/dist/ui/action-log.js +0 -13
  410. package/dist/ui/box.js +0 -78
  411. package/dist/ui/colors.js +0 -6
  412. package/dist/ui/diff.js +0 -189
  413. package/dist/ui/index.js +0 -7
  414. package/dist/ui/line-editor.js +0 -1083
  415. package/dist/ui/line-math.js +0 -98
  416. package/dist/ui/md-formatter.js +0 -322
  417. package/dist/ui/output.js +0 -19
  418. package/dist/ui/plan-view.js +0 -109
  419. package/dist/ui/renderer.js +0 -589
  420. package/dist/ui/spinner.js +0 -91
  421. package/dist/ui/table.js +0 -142
  422. package/dist/ui/theme.js +0 -143
  423. package/dist/utils/child-run.js +0 -20
  424. package/dist/utils/error.js +0 -4
  425. package/dist/utils/index.js +0 -6
  426. package/dist/utils/retry.js +0 -17
  427. package/dist/utils/sleep.js +0 -23
  428. package/dist/utils/truncate.js +0 -9
@@ -1,816 +1,3 @@
1
- /**
2
- * First-run setup wizard for `mma web` (browser).
3
- *
4
- * Self-contained: loaded before `app.js`, exposes `window.MmaSetup.maybeOpen()`.
5
- * `maybeOpen()` returns a Promise<boolean> that resolves `true` when the server
6
- * reports `setupRequired` and the wizard has taken over the screen (it hides the
7
- * chat chrome via `body.setup-active` and reloads the page on success). On any
8
- * other case it resolves `false` and `app.js` boots the chat as usual.
9
- *
10
- * Lives outside `app.js` so the chat bundle stays focused; talks to the
11
- * `/api/setup*` endpoints from `setup-api.ts`. Style follows
12
- * docs/design/ui/STYLE.md (rows, glyphs, no boxed panels).
13
- */
14
- (() => {
15
- "use strict";
16
-
17
- const token = new URLSearchParams(location.search).get("token") || "";
18
- const gate = document.getElementById("setupGate");
19
-
20
- const STEPS = ["language", "provider", "key", "model", "context", "security", "review"];
21
-
22
- const I18N = { locale: "en", dicts: {} };
23
-
24
- function tr(key, params) {
25
- const dict = I18N.dicts[I18N.locale] || I18N.dicts.en || {};
26
- const en = I18N.dicts.en || {};
27
- let template = dict[key];
28
- if (template === undefined) template = en[key];
29
- if (template === undefined) return key;
30
- if (params) {
31
- Object.keys(params).forEach((k) => {
32
- template = template.split("{" + k + "}").join(String(params[k]));
33
- });
34
- }
35
- return template;
36
- }
37
-
38
- function pluralCount(baseKey, n) {
39
- let form;
40
- if (I18N.locale === "ru") {
41
- const m10 = n % 10;
42
- const m100 = n % 100;
43
- if (m10 === 1 && m100 !== 11) form = "one";
44
- else if (m10 >= 2 && m10 <= 4 && (m100 < 10 || m100 >= 20)) form = "few";
45
- else form = "many";
46
- } else {
47
- form = n === 1 ? "one" : "many";
48
- }
49
- const key = baseKey + "_" + form;
50
- const s = tr(key, { count: n });
51
- return s === key ? tr(baseKey, { count: n }) : s;
52
- }
53
-
54
- async function api(path, opts = {}) {
55
- const headers = Object.assign({}, opts.headers || {});
56
- if (opts.body !== undefined) headers["content-type"] = "application/json";
57
- if (token) headers["x-mma-token"] = token;
58
- let res;
59
- try {
60
- res = await fetch(path, {
61
- method: opts.method || "GET",
62
- headers,
63
- body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,
64
- });
65
- } catch (err) {
66
- return { ok: false, status: 0, data: null };
67
- }
68
- let data = null;
69
- try {
70
- data = await res.json();
71
- } catch (err) {
72
- data = null;
73
- }
74
- return { ok: res.ok, status: res.status, data };
75
- }
76
-
77
- function h(tag, cls, text) {
78
- const node = document.createElement(tag);
79
- if (cls) node.className = cls;
80
- if (text != null) node.textContent = text;
81
- return node;
82
- }
83
-
84
- async function loadI18n() {
85
- const r = await api("/api/i18n");
86
- if (r.ok && r.data) {
87
- I18N.locale = r.data.locale || "en";
88
- I18N.dicts = r.data.dicts || {};
89
- }
90
- }
91
-
92
- const state = {
93
- display: null,
94
- step: 0,
95
- answers: {
96
- provider: "",
97
- apiBase: "",
98
- apiKey: "",
99
- model: "",
100
- contextWindow: 32768,
101
- maxToolIterations: 1000,
102
- locale: "en",
103
- securityBashBlock: false,
104
- securityFlagsBlock: false,
105
- securityPathsRestrict: true,
106
- securityDetail: { bash: {}, paths: {}, flags: {}, network: {}, advanced: {} },
107
- },
108
- };
109
-
110
- let opened = false;
111
-
112
- async function maybeOpen() {
113
- if (!gate || opened) return opened;
114
- const r = await api("/api/setup");
115
- if (!r.ok || !r.data || !r.data.required) return false;
116
-
117
- state.display = r.data;
118
- if (r.data.defaults) {
119
- state.answers.contextWindow = r.data.defaults.contextWindow || state.answers.contextWindow;
120
- state.answers.maxToolIterations =
121
- r.data.defaults.maxToolIterations || state.answers.maxToolIterations;
122
- if (r.data.defaults.security) {
123
- state.answers.securityDetail = Object.assign(
124
- state.answers.securityDetail,
125
- r.data.defaults.security,
126
- );
127
- }
128
- }
129
- const first = (r.data.providers || [])[0];
130
- if (first) {
131
- state.answers.provider = first.type;
132
- if (first.baseUrl) state.answers.apiBase = first.baseUrl;
133
- }
134
- await loadI18n();
135
- state.answers.locale = I18N.locale || "en";
136
-
137
- document.body.classList.add("setup-active");
138
- gate.hidden = false;
139
- opened = true;
140
- render();
141
- return true;
142
- }
143
-
144
- // --- rendering -------------------------------------------------------------
145
-
146
- function render() {
147
- closePopup();
148
- const wrap = h("div", "setup-wrap");
149
- const title = h("h1", "setup-h");
150
- title.appendChild(h("span", "glyph", "◇"));
151
- title.appendChild(document.createTextNode(tr("web.setup.title")));
152
- wrap.appendChild(title);
153
- wrap.appendChild(h("p", "setup-sub", tr("web.setup.subtitle")));
154
- wrap.appendChild(renderSteps());
155
- wrap.appendChild(renderBody());
156
- wrap.appendChild(renderActions());
157
- gate.innerHTML = "";
158
- gate.appendChild(wrap);
159
- }
160
-
161
- function renderSteps() {
162
- const box = h("div", "setup-steps");
163
- STEPS.forEach((name, i) => {
164
- if (i) box.appendChild(h("span", "sep", "·"));
165
- const cls = i === state.step ? "s on" : i < state.step ? "s done" : "s";
166
- box.appendChild(h("span", cls, (i < state.step ? "✓ " : "") + tr("web.setup.step." + name)));
167
- });
168
- return box;
169
- }
170
-
171
- function stepBody(name) {
172
- const box = h("div", "setup-step");
173
- box.appendChild(h("h2", "setup-step-title", tr("web.setup." + name + ".title")));
174
- const hint = tr("web.setup." + name + ".hint");
175
- if (hint !== "web.setup." + name + ".hint") box.appendChild(h("p", "setup-hint", hint));
176
- return box;
177
- }
178
-
179
- function field(label, input) {
180
- const box = h("div", "setup-field");
181
- box.appendChild(h("label", "setup-label", label));
182
- box.appendChild(input);
183
- return box;
184
- }
185
-
186
- function inputEl(value, type, placeholder) {
187
- const input = h("input", "setup-input");
188
- input.type = type || "text";
189
- input.value = value || "";
190
- if (placeholder) input.placeholder = placeholder;
191
- input.addEventListener("input", () => {
192
- msg = null;
193
- });
194
- return input;
195
- }
196
-
197
- let msg = null;
198
- function messageEl() {
199
- const el = h("div", "setup-msg");
200
- if (msg) {
201
- el.className = "setup-msg " + msg.kind;
202
- el.textContent = msg.text;
203
- }
204
- return el;
205
- }
206
- function setMsg(box, kind, text) {
207
- msg = { kind, text };
208
- const el = box.querySelector(".setup-msg");
209
- if (el) {
210
- el.className = "setup-msg " + kind;
211
- el.textContent = text;
212
- }
213
- }
214
-
215
- function renderBody() {
216
- const name = STEPS[state.step];
217
- if (name === "language") return renderLanguage();
218
- if (name === "provider") return renderProvider();
219
- if (name === "key") return renderKey();
220
- if (name === "model") return renderModel();
221
- if (name === "context") return renderContext();
222
- if (name === "security") return renderSecurity();
223
- return renderReview();
224
- }
225
-
226
- function renderLanguage() {
227
- const box = stepBody("language");
228
- (state.display.languages || []).forEach((l) => {
229
- const btn = h("button", "setup-opt" + (state.answers.locale === l.value ? " on" : ""));
230
- btn.type = "button";
231
- btn.appendChild(h("span", "g", state.answers.locale === l.value ? "✓" : "◇"));
232
- btn.appendChild(h("span", "t", l.label));
233
- btn.addEventListener("click", async () => {
234
- state.answers.locale = l.value;
235
- const r = await api("/api/setup/locale", { method: "POST", body: { locale: l.value } });
236
- if (r.ok && r.data && r.data.dicts) {
237
- I18N.dicts = r.data.dicts;
238
- I18N.locale = l.value;
239
- }
240
- render();
241
- });
242
- box.appendChild(btn);
243
- });
244
- return box;
245
- }
246
-
247
- function renderProvider() {
248
- const box = stepBody("provider");
249
- (state.display.providers || []).forEach((p) => {
250
- const on = state.answers.provider === p.type;
251
- const btn = h("button", "setup-opt" + (on ? " on" : ""));
252
- btn.type = "button";
253
- btn.appendChild(h("span", "g", on ? "✓" : "◇"));
254
- btn.appendChild(h("span", "t", p.label));
255
- btn.addEventListener("click", () => {
256
- state.answers.provider = p.type;
257
- state.answers.apiBase = p.baseUrl || "";
258
- render();
259
- });
260
- box.appendChild(btn);
261
- });
262
-
263
- const input = inputEl(state.answers.apiBase, "text", "http://localhost:1234/v1");
264
- input.addEventListener("input", () => {
265
- state.answers.apiBase = input.value.trim();
266
- });
267
- box.appendChild(field(tr("web.setup.provider.base_url"), input));
268
-
269
- const actions = h("div", "setup-row-inline");
270
- const test = h("button", "setup-btn", tr("web.setup.provider.test"));
271
- test.type = "button";
272
- test.addEventListener("click", async () => {
273
- if (!state.answers.apiBase) {
274
- setMsg(box, "err", tr("web.setup.provider.required"));
275
- return;
276
- }
277
- test.disabled = true;
278
- setMsg(box, "", tr("web.setup.provider.testing"));
279
- const r = await api("/api/setup/models", {
280
- method: "POST",
281
- body: { baseUrl: state.answers.apiBase, apiKey: state.answers.apiKey },
282
- });
283
- test.disabled = false;
284
- const models = (r.ok && r.data && r.data.models) || [];
285
- if (r.ok && models.length) setMsg(box, "ok", tr("web.setup.provider.test_ok"));
286
- else setMsg(box, "warn", tr("web.setup.provider.test_fail"));
287
- });
288
- actions.appendChild(test);
289
-
290
- if (state.answers.provider === "openai-compat" || state.answers.provider === "lmstudio") {
291
- const scan = h("button", "setup-btn", tr("web.setup.provider.scan"));
292
- scan.type = "button";
293
- const results = h("div");
294
- scan.addEventListener("click", async () => {
295
- scan.disabled = true;
296
- setMsg(box, "", "");
297
- const r = await api("/api/setup/scan", { method: "POST" });
298
- scan.disabled = false;
299
- const servers = (r.ok && r.data && r.data.servers) || [];
300
- if (!r.ok) {
301
- setMsg(box, "err", tr("web.setup.provider.scan_failed"));
302
- return;
303
- }
304
- if (!servers.length) {
305
- setMsg(box, "warn", tr("web.setup.provider.scan_none"));
306
- return;
307
- }
308
- setMsg(box, "ok", pluralCount("web.setup.provider.scan_found", servers.length));
309
- results.innerHTML = "";
310
- servers.forEach((srv) => {
311
- const b = h("button", "setup-opt");
312
- b.type = "button";
313
- b.appendChild(h("span", "g", "↳"));
314
- b.appendChild(h("span", "t", srv.label));
315
- b.appendChild(h("span", "d", srv.url));
316
- b.addEventListener("click", () => {
317
- state.answers.apiBase = srv.url;
318
- render();
319
- });
320
- results.appendChild(b);
321
- });
322
- });
323
- actions.appendChild(scan);
324
- box.appendChild(actions);
325
- box.appendChild(results);
326
- } else {
327
- box.appendChild(actions);
328
- }
329
- box.appendChild(messageEl());
330
- return box;
331
- }
332
-
333
- function renderKey() {
334
- const box = stepBody("key");
335
- const input = inputEl(state.answers.apiKey, "password", tr("web.setup.key.placeholder"));
336
- input.addEventListener("input", () => {
337
- state.answers.apiKey = input.value;
338
- });
339
- box.appendChild(field(tr("web.setup.key.label"), input));
340
- box.appendChild(messageEl());
341
- return box;
342
- }
343
-
344
- function renderModel() {
345
- const box = stepBody("model");
346
- const input = inputEl(state.answers.model, "text", "qwen/qwen3.5-9b");
347
- input.addEventListener("input", () => {
348
- state.answers.model = input.value.trim();
349
- });
350
- box.appendChild(field(tr("web.setup.model.name"), input));
351
-
352
- const results = h("div");
353
- const row = h("div", "setup-row-inline");
354
- const load = h("button", "setup-btn", tr("web.setup.model.load"));
355
- load.type = "button";
356
- const test = h("button", "setup-btn", tr("web.setup.model.test"));
357
- test.type = "button";
358
-
359
- load.addEventListener("click", async () => {
360
- load.disabled = true;
361
- setMsg(box, "", "");
362
- const r = await api("/api/setup/models", {
363
- method: "POST",
364
- body: { baseUrl: state.answers.apiBase, apiKey: state.answers.apiKey },
365
- });
366
- load.disabled = false;
367
- const models = (r.ok && r.data && r.data.models) || [];
368
- if (!models.length) {
369
- setMsg(box, "warn", tr("web.setup.model.load_none"));
370
- return;
371
- }
372
- setMsg(box, "ok", pluralCount("web.setup.model.load_found", models.length));
373
- results.innerHTML = "";
374
- models.slice(0, 20).forEach((m) => {
375
- const b = h("button", "setup-opt" + (state.answers.model === m ? " on" : ""));
376
- b.type = "button";
377
- b.appendChild(h("span", "g", state.answers.model === m ? "✓" : "◇"));
378
- b.appendChild(h("span", "t", m));
379
- b.addEventListener("click", () => {
380
- state.answers.model = m;
381
- input.value = m;
382
- render();
383
- });
384
- results.appendChild(b);
385
- });
386
- });
387
-
388
- test.addEventListener("click", async () => {
389
- if (!state.answers.model) {
390
- setMsg(box, "err", tr("web.setup.model.required"));
391
- return;
392
- }
393
- test.disabled = true;
394
- setMsg(box, "", tr("web.setup.model.testing"));
395
- const r = await api("/api/setup/test", {
396
- method: "POST",
397
- body: {
398
- baseUrl: state.answers.apiBase,
399
- apiKey: state.answers.apiKey,
400
- model: state.answers.model,
401
- },
402
- });
403
- test.disabled = false;
404
- if (r.ok && r.data && r.data.ok) setMsg(box, "ok", tr("web.setup.model.test_ok"));
405
- else setMsg(box, "warn", tr("web.setup.model.test_fail"));
406
- });
407
-
408
- row.appendChild(load);
409
- row.appendChild(test);
410
- box.appendChild(row);
411
- box.appendChild(results);
412
- box.appendChild(messageEl());
413
- return box;
414
- }
415
-
416
- function renderContext() {
417
- const box = stepBody("context");
418
- const cw = h("input", "setup-input");
419
- cw.type = "number";
420
- cw.min = "1024";
421
- cw.step = "1024";
422
- cw.value = String(state.answers.contextWindow);
423
- cw.addEventListener("input", () => {
424
- state.answers.contextWindow = parseInt(cw.value, 10) || 0;
425
- });
426
- box.appendChild(field(tr("web.setup.context.contextWindow"), cw));
427
-
428
- const detect = h("button", "setup-btn", tr("web.setup.context.detect"));
429
- detect.type = "button";
430
- detect.addEventListener("click", async () => {
431
- if (!state.answers.apiBase || !state.answers.model) {
432
- setMsg(box, "err", tr("web.setup.context.detect_fail"));
433
- return;
434
- }
435
- detect.disabled = true;
436
- setMsg(box, "", tr("web.setup.context.detecting"));
437
- const r = await api("/api/setup/context", {
438
- method: "POST",
439
- body: {
440
- baseUrl: state.answers.apiBase,
441
- apiKey: state.answers.apiKey,
442
- model: state.answers.model,
443
- providerType: state.answers.provider,
444
- },
445
- });
446
- detect.disabled = false;
447
- const n = r.ok && r.data && r.data.contextWindow;
448
- if (r.ok && r.data && r.data.ok && typeof n === "number" && n > 0) {
449
- state.answers.contextWindow = n;
450
- cw.value = String(n);
451
- setMsg(box, "ok", tr("web.setup.context.detect_ok", { count: n }));
452
- } else {
453
- setMsg(box, "warn", tr("web.setup.context.detect_fail"));
454
- }
455
- });
456
- const row = h("div", "setup-row-inline");
457
- row.appendChild(detect);
458
- box.appendChild(row);
459
-
460
- const it = h("input", "setup-input");
461
- it.type = "number";
462
- it.min = "1";
463
- it.value = String(state.answers.maxToolIterations);
464
- it.addEventListener("input", () => {
465
- state.answers.maxToolIterations = parseInt(it.value, 10) || 0;
466
- });
467
- box.appendChild(field(tr("web.setup.context.maxToolIterations"), it));
468
- box.appendChild(messageEl());
469
- return box;
470
- }
471
-
472
- function renderSecurity() {
473
- const box = stepBody("security");
474
- const toggles = [
475
- ["securityPathsRestrict", "web.setup.security.paths", "web.setup.security.paths_desc", "paths"],
476
- ["securityBashBlock", "web.setup.security.bash", "web.setup.security.bash_desc", "bash"],
477
- ["securityFlagsBlock", "web.setup.security.flags", "web.setup.security.flags_desc", "flags"],
478
- ];
479
- toggles.forEach(([key, labelKey, descKey, group]) => {
480
- const row = h("div", "setup-sec-row");
481
- const label = h("label", "setup-toggle");
482
- const cb = h("input");
483
- cb.type = "checkbox";
484
- cb.checked = Boolean(state.answers[key]);
485
- cb.addEventListener("change", () => {
486
- state.answers[key] = cb.checked;
487
- });
488
- label.appendChild(cb);
489
- const texts = h("span", "setup-toggle-texts");
490
- texts.appendChild(h("span", "t", tr(labelKey)));
491
- const desc = tr(descKey);
492
- if (desc !== descKey) texts.appendChild(h("span", "d", desc));
493
- label.appendChild(texts);
494
- row.appendChild(label);
495
- row.appendChild(detailButton(group, tr(labelKey)));
496
- box.appendChild(row);
497
- });
498
-
499
- const advRow = h("div", "setup-sec-row");
500
- const advTexts = h("span", "setup-toggle setup-adv-label");
501
- advTexts.appendChild(h("span", "t", tr("web.setup.security.advanced")));
502
- advRow.appendChild(advTexts);
503
- advRow.appendChild(detailButton("advanced", tr("web.setup.security.advanced")));
504
- box.appendChild(advRow);
505
- return box;
506
- }
507
-
508
- // Описание поп-апов тонкой настройки: путь в securityDetail + тип поля.
509
- const SECURITY_POPUPS = {
510
- paths: [
511
- ["paths.denied", "list", "web.setup.security.denied"],
512
- ["paths.allowed", "list", "web.setup.security.allowed"],
513
- ],
514
- bash: [
515
- ["bash.blacklist", "list", "web.setup.security.blacklist"],
516
- ["bash.whitelist", "list", "web.setup.security.whitelist"],
517
- ["bash.logCommands", "bool", "web.setup.security.log_commands"],
518
- ],
519
- flags: [
520
- ["flags.dangerousFlags", "list", "web.setup.security.dangerous_flags"],
521
- ["flags.dangerousOperators", "list", "web.setup.security.dangerous_operators"],
522
- ],
523
- advanced: [
524
- ["network.enabled", "bool", "web.setup.security.network_enabled"],
525
- ["network.deniedDomains", "list", "web.setup.security.denied_domains"],
526
- ["network.allowedDomains", "list", "web.setup.security.allowed_domains"],
527
- ["network.requestTimeout", "int", "web.setup.security.request_timeout"],
528
- ["network.maxResponseSize", "int", "web.setup.security.max_response_size"],
529
- ["advanced.maxRecursionDepth", "int", "web.setup.security.max_recursion"],
530
- ["advanced.maxFileOperations", "int", "web.setup.security.max_file_ops"],
531
- ["advanced.maxRequestsPerMinute", "int", "web.setup.security.rate_rpm"],
532
- ["advanced.maxParallelTasks", "int", "web.setup.security.rate_parallel"],
533
- ["advanced.contentScanEnabled", "bool", "web.setup.security.content_scan"],
534
- ["advanced.sessionEncryptionEnabled", "bool", "web.setup.security.session_encryption"],
535
- ["advanced.auditNotifierEnabled", "bool", "web.setup.security.audit_enabled"],
536
- ["advanced.auditNotifierMinSeverity", "enum", "web.setup.security.audit_severity"],
537
- ["advanced.auditNotifierEventTypes", "list", "web.setup.security.audit_events"],
538
- ["advanced.auditNotifierMaxRetries", "int", "web.setup.security.audit_retries"],
539
- ["advanced.auditNotifierWebhookTimeout", "int", "web.setup.security.audit_timeout"],
540
- ],
541
- };
542
- const SEVERITIES = ["low", "medium", "high", "critical"];
543
- const GROUP_KEYS = {
544
- paths: ["paths"],
545
- bash: ["bash"],
546
- flags: ["flags"],
547
- advanced: ["network", "advanced"],
548
- };
549
-
550
- function getPath(obj, path) {
551
- return path.split(".").reduce((o, k) => (o == null ? undefined : o[k]), obj);
552
- }
553
- function setPath(obj, path, value) {
554
- const keys = path.split(".");
555
- let cur = obj;
556
- for (let i = 0; i < keys.length - 1; i++) {
557
- if (typeof cur[keys[i]] !== "object" || cur[keys[i]] === null) cur[keys[i]] = {};
558
- cur = cur[keys[i]];
559
- }
560
- cur[keys[keys.length - 1]] = value;
561
- }
562
-
563
- function detailButton(group, title) {
564
- const btn = h("button", "setup-detail-btn");
565
- btn.type = "button";
566
- btn.appendChild(h("span", "g", "⚙"));
567
- btn.appendChild(h("span", "t", tr("web.setup.security.configure")));
568
- btn.title = title;
569
- btn.addEventListener("click", (e) => {
570
- e.preventDefault();
571
- openSecurityPopup(group, title);
572
- });
573
- return btn;
574
- }
575
-
576
- let popup = null;
577
-
578
- function openSecurityPopup(group, title) {
579
- const overlay = h("div", "setup-overlay");
580
- const modal = h("div", "setup-modal");
581
- modal.setAttribute("role", "dialog");
582
- modal.setAttribute("aria-modal", "true");
583
-
584
- const head = h("div", "setup-modal-head");
585
- const hIcon = h("span", "glyph", "⚙");
586
- head.appendChild(hIcon);
587
- head.appendChild(h("span", "setup-modal-title", title));
588
- const close = h("button", "setup-modal-x", "✕");
589
- close.type = "button";
590
- close.addEventListener("click", closePopup);
591
- head.appendChild(close);
592
- modal.appendChild(head);
593
-
594
- const body = h("div", "setup-modal-body");
595
- body.appendChild(h("p", "setup-hint", tr("web.setup.security.popup_hint")));
596
- SECURITY_POPUPS[group].forEach(([path, type, labelKey]) => {
597
- body.appendChild(popupField(path, type, tr(labelKey)));
598
- });
599
- modal.appendChild(body);
600
-
601
- const foot = h("div", "setup-modal-foot");
602
- const reset = h("button", "setup-btn link", tr("web.setup.security.reset"));
603
- reset.type = "button";
604
- reset.addEventListener("click", () => {
605
- const defaults = (state.display && state.display.defaults && state.display.defaults.security) || {};
606
- (GROUP_KEYS[group] || [group]).forEach((src) => {
607
- const fresh = defaults[src] || {};
608
- Object.keys(fresh).forEach((k) => setPath(state.answers.securityDetail, src + "." + k, fresh[k]));
609
- });
610
- closePopup();
611
- openSecurityPopup(group, title);
612
- });
613
- foot.appendChild(reset);
614
- foot.appendChild(h("span", "spacer"));
615
- const done = h("button", "setup-btn primary", tr("web.setup.security.popup_done"));
616
- done.type = "button";
617
- done.addEventListener("click", closePopup);
618
- foot.appendChild(done);
619
- modal.appendChild(foot);
620
-
621
- overlay.appendChild(modal);
622
- overlay.addEventListener("click", (e) => {
623
- if (e.target === overlay) closePopup();
624
- });
625
- popup = overlay;
626
- gate.appendChild(overlay);
627
- }
628
-
629
- function popupField(path, type, label) {
630
- const wrap = h("div", "setup-field");
631
- if (type === "list") {
632
- wrap.appendChild(h("label", "setup-label", label));
633
- const ta = h("textarea", "setup-input setup-textarea");
634
- const cur = getPath(state.answers.securityDetail, path);
635
- ta.value = Array.isArray(cur) ? cur.join("\n") : "";
636
- ta.rows = 5;
637
- ta.spellcheck = false;
638
- ta.addEventListener("input", () => {
639
- const items = ta.value
640
- .split("\n")
641
- .map((s) => s.trim())
642
- .filter(Boolean);
643
- setPath(state.answers.securityDetail, path, items);
644
- });
645
- wrap.appendChild(ta);
646
- } else if (type === "bool") {
647
- const row = h("label", "setup-toggle");
648
- const cb = h("input");
649
- cb.type = "checkbox";
650
- cb.checked = Boolean(getPath(state.answers.securityDetail, path));
651
- cb.addEventListener("change", () => setPath(state.answers.securityDetail, path, cb.checked));
652
- row.appendChild(cb);
653
- row.appendChild(h("span", "t", label));
654
- wrap.appendChild(row);
655
- } else if (type === "int") {
656
- wrap.appendChild(h("label", "setup-label", label));
657
- const inp = h("input", "setup-input");
658
- inp.type = "number";
659
- inp.min = "1";
660
- const cur = getPath(state.answers.securityDetail, path);
661
- inp.value = typeof cur === "number" ? String(cur) : "";
662
- inp.addEventListener("input", () => {
663
- const n = parseInt(inp.value, 10);
664
- setPath(state.answers.securityDetail, path, Number.isFinite(n) && n > 0 ? n : undefined);
665
- });
666
- wrap.appendChild(inp);
667
- } else if (type === "enum") {
668
- wrap.appendChild(h("label", "setup-label", label));
669
- const sel = h("select", "setup-input");
670
- const cur = getPath(state.answers.securityDetail, path);
671
- SEVERITIES.forEach((sev) => {
672
- const opt = h("option", null, tr("web.setup.security.severity." + sev));
673
- opt.value = sev;
674
- if (cur === sev) opt.selected = true;
675
- sel.appendChild(opt);
676
- });
677
- sel.addEventListener("change", () => setPath(state.answers.securityDetail, path, sel.value));
678
- wrap.appendChild(sel);
679
- }
680
- return wrap;
681
- }
682
-
683
- function closePopup() {
684
- if (popup && popup.parentNode) popup.parentNode.removeChild(popup);
685
- popup = null;
686
- }
687
-
688
- function securitySummary() {
689
- const on = [];
690
- if (state.answers.securityPathsRestrict) on.push(tr("web.setup.security.paths"));
691
- if (state.answers.securityBashBlock) on.push(tr("web.setup.security.bash"));
692
- if (state.answers.securityFlagsBlock) on.push(tr("web.setup.security.flags"));
693
- return on.length ? on.join(", ") : tr("web.setup.review.security_off");
694
- }
695
-
696
- function maskedKey() {
697
- const k = state.answers.apiKey;
698
- if (!k) return tr("web.setup.review.not_needed");
699
- return k.length <= 4 ? "••••" : "••••" + k.slice(-4);
700
- }
701
-
702
- function renderReview() {
703
- const box = stepBody("review");
704
- const rows = [
705
- [tr("web.setup.review.provider"), state.answers.provider],
706
- [tr("web.setup.review.baseUrl"), state.answers.apiBase],
707
- [tr("web.setup.review.apiKey"), maskedKey()],
708
- [tr("web.setup.review.model"), state.answers.model],
709
- [tr("web.setup.review.context"), String(state.answers.contextWindow)],
710
- [tr("web.setup.review.iterations"), String(state.answers.maxToolIterations)],
711
- [tr("web.setup.review.locale"), state.answers.locale],
712
- [tr("web.setup.review.security"), securitySummary()],
713
- ];
714
- const summary = h("div", "setup-summary");
715
- rows.forEach(([k, v]) => {
716
- const r = h("div", "r");
717
- r.appendChild(h("span", "k", k));
718
- r.appendChild(h("span", "v", v));
719
- summary.appendChild(r);
720
- });
721
- box.appendChild(summary);
722
- box.appendChild(messageEl());
723
- return box;
724
- }
725
-
726
- function validate() {
727
- const name = STEPS[state.step];
728
- if (name === "provider" && !state.answers.apiBase) return tr("web.setup.provider.required");
729
- if (name === "model" && !state.answers.model) return tr("web.setup.model.required");
730
- if (name === "context") {
731
- if (!(state.answers.contextWindow > 0)) return tr("web.setup.context.required");
732
- if (!(state.answers.maxToolIterations > 0)) return tr("web.setup.context.required");
733
- }
734
- return null;
735
- }
736
-
737
- function renderActions() {
738
- const box = h("div", "setup-actions");
739
- const back = h("button", "setup-btn", tr("web.setup.back"));
740
- back.type = "button";
741
- back.disabled = state.step === 0;
742
- back.addEventListener("click", () => {
743
- if (state.step === 0) return;
744
- msg = null;
745
- state.step -= 1;
746
- render();
747
- });
748
- box.appendChild(back);
749
- box.appendChild(h("span", "spacer"));
750
-
751
- if (state.step < STEPS.length - 1) {
752
- const next = h("button", "setup-btn primary", tr("web.setup.next"));
753
- next.type = "button";
754
- next.addEventListener("click", () => {
755
- const err = validate();
756
- if (err) {
757
- setMsg(gate.querySelector(".setup-step"), "err", err);
758
- return;
759
- }
760
- msg = null;
761
- state.step += 1;
762
- render();
763
- });
764
- box.appendChild(next);
765
- } else {
766
- const finish = h("button", "setup-btn primary", tr("web.setup.finish"));
767
- finish.type = "button";
768
- finish.addEventListener("click", () => finishSetup(finish));
769
- box.appendChild(finish);
770
- }
771
- return box;
772
- }
773
-
774
- async function finishSetup(btn) {
775
- const err = validate();
776
- if (err) {
777
- setMsg(gate.querySelector(".setup-step"), "err", err);
778
- return;
779
- }
780
- btn.disabled = true;
781
- setMsg(gate.querySelector(".setup-step"), "", tr("web.setup.saving"));
782
- const r = await api("/api/setup", {
783
- method: "POST",
784
- body: {
785
- provider: state.answers.provider,
786
- apiBase: state.answers.apiBase,
787
- apiKey: state.answers.apiKey,
788
- model: state.answers.model,
789
- contextWindow: state.answers.contextWindow,
790
- maxToolIterations: state.answers.maxToolIterations,
791
- locale: state.answers.locale,
792
- securityBashBlock: state.answers.securityBashBlock,
793
- securityFlagsBlock: state.answers.securityFlagsBlock,
794
- securityPathsRestrict: state.answers.securityPathsRestrict,
795
- securityDetail: state.answers.securityDetail,
796
- },
797
- });
798
- if (!r.ok) {
799
- btn.disabled = false;
800
- setMsg(gate.querySelector(".setup-step"), "err", tr("web.setup.failed"));
801
- return;
802
- }
803
- if (r.data && r.data.warning) {
804
- setMsg(
805
- gate.querySelector(".setup-step"),
806
- "warn",
807
- tr("web.setup.saved_warning", { warning: r.data.warning }),
808
- );
809
- setTimeout(() => location.reload(), 1500);
810
- return;
811
- }
812
- location.reload();
813
- }
814
-
815
- window.MmaSetup = { maybeOpen };
816
- })();
1
+ (()=>{const D=new URLSearchParams(location.search).get("token")||"",b=document.getElementById("setupGate"),L=["language","provider","key","model","context","security","review"],h={locale:"en",dicts:{}};function d(e,n){const s=h.dicts[h.locale]||h.dicts.en||{},r=h.dicts.en||{};let i=s[e];return i===void 0&&(i=r[e]),i===void 0?e:(n&&Object.keys(n).forEach(o=>{i=i.split("{"+o+"}").join(String(n[o]))}),i)}function O(e,n){let s;if(h.locale==="ru"){const o=n%10,p=n%100;o===1&&p!==11?s="one":o>=2&&o<=4&&(p<10||p>=20)?s="few":s="many"}else s=n===1?"one":"many";const r=e+"_"+s,i=d(r,{count:n});return i===r?d(e,{count:n}):i}async function y(e,n={}){const s=Object.assign({},n.headers||{});n.body!==void 0&&(s["content-type"]="application/json"),D&&(s["x-mma-token"]=D);let r;try{r=await fetch(e,{method:n.method||"GET",headers:s,body:n.body!==void 0?JSON.stringify(n.body):void 0})}catch{return{ok:!1,status:0,data:null}}let i=null;try{i=await r.json()}catch{i=null}return{ok:r.ok,status:r.status,data:i}}function a(e,n,s){const r=document.createElement(e);return n&&(r.className=n),s!=null&&(r.textContent=String(s)),r}async function U(){const e=await y("/api/i18n");e.ok&&e.data&&(h.locale=e.data.locale||"en",h.dicts=e.data.dicts||{})}const t={display:null,step:0,answers:{provider:"",apiBase:"",apiKey:"",model:"",contextWindow:32768,maxToolIterations:1e3,locale:"en",securityBashBlock:!1,securityFlagsBlock:!1,securityPathsRestrict:!0,securityDetail:{bash:{},paths:{},flags:{},network:{},advanced:{}}}};let I=!1;async function j(){if(!b||I)return I;const e=await y("/api/setup");if(!e.ok||!e.data||!e.data.required)return!1;t.display=e.data,e.data.defaults&&(t.answers.contextWindow=e.data.defaults.contextWindow||t.answers.contextWindow,t.answers.maxToolIterations=e.data.defaults.maxToolIterations||t.answers.maxToolIterations,e.data.defaults.security&&(t.answers.securityDetail=Object.assign(t.answers.securityDetail,e.data.defaults.security)));const n=(e.data.providers||[])[0];return n&&(t.answers.provider=n.type,n.baseUrl&&(t.answers.apiBase=n.baseUrl)),await U(),t.answers.locale=h.locale||"en",document.body.classList.add("setup-active"),b.hidden=!1,I=!0,m(),!0}function m(){B();const e=a("div","setup-wrap"),n=a("h1","setup-h");n.appendChild(a("span","glyph","◇")),n.appendChild(document.createTextNode(d("web.setup.title"))),e.appendChild(n),e.appendChild(a("p","setup-sub",d("web.setup.subtitle"))),e.appendChild(F()),e.appendChild(M()),e.appendChild(se()),b.innerHTML="",b.appendChild(e)}function F(){const e=a("div","setup-steps");return L.forEach((n,s)=>{s&&e.appendChild(a("span","sep","·"));const r=s===t.step?"s on":s<t.step?"s done":"s";e.appendChild(a("span",r,(s<t.step?"✓ ":"")+d("web.setup.step."+n)))}),e}function C(e){const n=a("div","setup-step");n.appendChild(a("h2","setup-step-title",d("web.setup."+e+".title")));const s=d("web.setup."+e+".hint");return s!=="web.setup."+e+".hint"&&n.appendChild(a("p","setup-hint",s)),n}function E(e,n){const s=a("div","setup-field");return s.appendChild(a("label","setup-label",e)),s.appendChild(n),s}function q(e,n,s){const r=a("input","setup-input");return r.type=n||"text",r.value=String(e||""),s&&(r.placeholder=s),r.addEventListener("input",()=>{g=null}),r}let g=null;function _(){const e=a("div","setup-msg");return g&&(e.className="setup-msg "+g.kind,e.textContent=g.text),e}function u(e,n,s){g={kind:n,text:s};const r=e?e.querySelector(".setup-msg"):null;r&&(r.className="setup-msg "+n,r.textContent=s)}function M(){const e=L[t.step];return e==="language"?A():e==="provider"?G():e==="key"?H():e==="model"?z():e==="context"?Y():e==="security"?J():te()}function A(){const e=C("language");return(t.display?.languages||[]).forEach(n=>{const s=a("button","setup-opt"+(t.answers.locale===n.value?" on":""));s.type="button",s.appendChild(a("span","g",t.answers.locale===n.value?"✓":"◇")),s.appendChild(a("span","t",n.label)),s.addEventListener("click",async()=>{t.answers.locale=n.value;const r=await y("/api/setup/locale",{method:"POST",body:{locale:n.value}});r.ok&&r.data&&r.data.dicts&&(h.dicts=r.data.dicts,h.locale=n.value),m()}),e.appendChild(s)}),e}function G(){const e=C("provider");(t.display?.providers||[]).forEach(i=>{const o=t.answers.provider===i.type,p=a("button","setup-opt"+(o?" on":""));p.type="button",p.appendChild(a("span","g",o?"✓":"◇")),p.appendChild(a("span","t",i.label)),p.addEventListener("click",()=>{t.answers.provider=i.type,t.answers.apiBase=i.baseUrl||"",m()}),e.appendChild(p)});const n=q(t.answers.apiBase,"text","http://localhost:1234/v1");n.addEventListener("input",()=>{t.answers.apiBase=n.value.trim()}),e.appendChild(E(d("web.setup.provider.base_url"),n));const s=a("div","setup-row-inline"),r=a("button","setup-btn",d("web.setup.provider.test"));if(r.type="button",r.addEventListener("click",async()=>{if(!t.answers.apiBase){u(e,"err",d("web.setup.provider.required"));return}r.disabled=!0,u(e,"",d("web.setup.provider.testing"));const i=await y("/api/setup/models",{method:"POST",body:{baseUrl:t.answers.apiBase,apiKey:t.answers.apiKey}});r.disabled=!1;const o=i.ok&&i.data&&i.data.models||[];i.ok&&o.length?u(e,"ok",d("web.setup.provider.test_ok")):u(e,"warn",d("web.setup.provider.test_fail"))}),s.appendChild(r),t.answers.provider==="openai-compat"||t.answers.provider==="lmstudio"){const i=a("button","setup-btn",d("web.setup.provider.scan"));i.type="button";const o=a("div");i.addEventListener("click",async()=>{i.disabled=!0,u(e,"","");const p=await y("/api/setup/scan",{method:"POST"});i.disabled=!1;const c=p.ok&&p.data&&p.data.servers||[];if(!p.ok){u(e,"err",d("web.setup.provider.scan_failed"));return}if(!c.length){u(e,"warn",d("web.setup.provider.scan_none"));return}u(e,"ok",O("web.setup.provider.scan_found",c.length)),o.innerHTML="",c.forEach(w=>{const l=a("button","setup-opt");l.type="button",l.appendChild(a("span","g","↳")),l.appendChild(a("span","t",w.label)),l.appendChild(a("span","d",w.url)),l.addEventListener("click",()=>{t.answers.apiBase=w.url,m()}),o.appendChild(l)})}),s.appendChild(i),e.appendChild(s),e.appendChild(o)}else e.appendChild(s);return e.appendChild(_()),e}function H(){const e=C("key"),n=q(t.answers.apiKey,"password",d("web.setup.key.placeholder"));return n.addEventListener("input",()=>{t.answers.apiKey=n.value}),e.appendChild(E(d("web.setup.key.label"),n)),e.appendChild(_()),e}function z(){const e=C("model"),n=q(t.answers.model,"text","qwen/qwen3.5-9b");n.addEventListener("input",()=>{t.answers.model=n.value.trim()}),e.appendChild(E(d("web.setup.model.name"),n));const s=a("div"),r=a("div","setup-row-inline"),i=a("button","setup-btn",d("web.setup.model.load"));i.type="button";const o=a("button","setup-btn",d("web.setup.model.test"));return o.type="button",i.addEventListener("click",async()=>{i.disabled=!0,u(e,"","");const p=await y("/api/setup/models",{method:"POST",body:{baseUrl:t.answers.apiBase,apiKey:t.answers.apiKey}});i.disabled=!1;const c=p.ok&&p.data&&p.data.models||[];if(!c.length){u(e,"warn",d("web.setup.model.load_none"));return}u(e,"ok",O("web.setup.model.load_found",c.length)),s.innerHTML="",c.slice(0,20).forEach(w=>{const l=a("button","setup-opt"+(t.answers.model===w?" on":""));l.type="button",l.appendChild(a("span","g",t.answers.model===w?"✓":"◇")),l.appendChild(a("span","t",w)),l.addEventListener("click",()=>{t.answers.model=w,n.value=w,m()}),s.appendChild(l)})}),o.addEventListener("click",async()=>{if(!t.answers.model){u(e,"err",d("web.setup.model.required"));return}o.disabled=!0,u(e,"",d("web.setup.model.testing"));const p=await y("/api/setup/test",{method:"POST",body:{baseUrl:t.answers.apiBase,apiKey:t.answers.apiKey,model:t.answers.model}});o.disabled=!1,p.ok&&p.data&&p.data.ok?u(e,"ok",d("web.setup.model.test_ok")):u(e,"warn",d("web.setup.model.test_fail"))}),r.appendChild(i),r.appendChild(o),e.appendChild(r),e.appendChild(s),e.appendChild(_()),e}function Y(){const e=C("context"),n=a("input","setup-input");n.type="number",n.min="1024",n.step="1024",n.value=String(t.answers.contextWindow),n.addEventListener("input",()=>{t.answers.contextWindow=parseInt(n.value,10)||0}),e.appendChild(E(d("web.setup.context.contextWindow"),n));const s=a("button","setup-btn",d("web.setup.context.detect"));s.type="button",s.addEventListener("click",async()=>{if(!t.answers.apiBase||!t.answers.model){u(e,"err",d("web.setup.context.detect_fail"));return}s.disabled=!0,u(e,"",d("web.setup.context.detecting"));const o=await y("/api/setup/context",{method:"POST",body:{baseUrl:t.answers.apiBase,apiKey:t.answers.apiKey,model:t.answers.model,providerType:t.answers.provider}});s.disabled=!1;const p=o.ok&&o.data&&o.data.contextWindow;o.ok&&o.data&&o.data.ok&&typeof p=="number"&&p>0?(t.answers.contextWindow=p,n.value=String(p),u(e,"ok",d("web.setup.context.detect_ok",{count:p}))):u(e,"warn",d("web.setup.context.detect_fail"))});const r=a("div","setup-row-inline");r.appendChild(s),e.appendChild(r);const i=a("input","setup-input");return i.type="number",i.min="1",i.value=String(t.answers.maxToolIterations),i.addEventListener("input",()=>{t.answers.maxToolIterations=parseInt(i.value,10)||0}),e.appendChild(E(d("web.setup.context.maxToolIterations"),i)),e.appendChild(_()),e}function J(){const e=C("security");[["securityPathsRestrict","web.setup.security.paths","web.setup.security.paths_desc","paths"],["securityBashBlock","web.setup.security.bash","web.setup.security.bash_desc","bash"],["securityFlagsBlock","web.setup.security.flags","web.setup.security.flags_desc","flags"]].forEach(([i,o,p,c])=>{const w=a("div","setup-sec-row"),l=a("label","setup-toggle"),f=a("input");f.type="checkbox",f.checked=!!t.answers[i],f.addEventListener("change",()=>{t.answers[i]=f.checked}),l.appendChild(f);const v=a("span","setup-toggle-texts");v.appendChild(a("span","t",d(o)));const k=d(p);k!==p&&v.appendChild(a("span","d",k)),l.appendChild(v),w.appendChild(l),w.appendChild(K(c,d(o))),e.appendChild(w)});const s=a("div","setup-sec-row"),r=a("span","setup-toggle setup-adv-label");return r.appendChild(a("span","t",d("web.setup.security.advanced"))),s.appendChild(r),s.appendChild(K("advanced",d("web.setup.security.advanced"))),e.appendChild(s),e}const V={paths:[["paths.denied","list","web.setup.security.denied"],["paths.allowed","list","web.setup.security.allowed"]],bash:[["bash.blacklist","list","web.setup.security.blacklist"],["bash.whitelist","list","web.setup.security.whitelist"],["bash.logCommands","bool","web.setup.security.log_commands"]],flags:[["flags.dangerousFlags","list","web.setup.security.dangerous_flags"],["flags.dangerousOperators","list","web.setup.security.dangerous_operators"]],advanced:[["network.enabled","bool","web.setup.security.network_enabled"],["network.deniedDomains","list","web.setup.security.denied_domains"],["network.allowedDomains","list","web.setup.security.allowed_domains"],["network.requestTimeout","int","web.setup.security.request_timeout"],["network.maxResponseSize","int","web.setup.security.max_response_size"],["advanced.maxRecursionDepth","int","web.setup.security.max_recursion"],["advanced.maxFileOperations","int","web.setup.security.max_file_ops"],["advanced.maxRequestsPerMinute","int","web.setup.security.rate_rpm"],["advanced.maxParallelTasks","int","web.setup.security.rate_parallel"],["advanced.contentScanEnabled","bool","web.setup.security.content_scan"],["advanced.sessionEncryptionEnabled","bool","web.setup.security.session_encryption"],["advanced.auditNotifierEnabled","bool","web.setup.security.audit_enabled"],["advanced.auditNotifierMinSeverity","enum","web.setup.security.audit_severity"],["advanced.auditNotifierEventTypes","list","web.setup.security.audit_events"],["advanced.auditNotifierMaxRetries","int","web.setup.security.audit_retries"],["advanced.auditNotifierWebhookTimeout","int","web.setup.security.audit_timeout"]]},Q=["low","medium","high","critical"],X={paths:["paths"],bash:["bash"],flags:["flags"],advanced:["network","advanced"]};function T(e,n){return n.split(".").reduce((s,r)=>s?.[r],e)}function S(e,n,s){const r=n.split(".");let i=e;for(let o=0;o<r.length-1;o++)(typeof i[r[o]]!="object"||i[r[o]]===null)&&(i[r[o]]={}),i=i[r[o]];i[r[r.length-1]]=s}function K(e,n){const s=a("button","setup-detail-btn");return s.type="button",s.appendChild(a("span","g","⚙")),s.appendChild(a("span","t",d("web.setup.security.configure"))),s.title=n,s.addEventListener("click",r=>{r.preventDefault(),R(e,n)}),s}let x=null;function R(e,n){const s=a("div","setup-overlay"),r=a("div","setup-modal");r.setAttribute("role","dialog"),r.setAttribute("aria-modal","true");const i=a("div","setup-modal-head"),o=a("span","glyph","⚙");i.appendChild(o),i.appendChild(a("span","setup-modal-title",n));const p=a("button","setup-modal-x","✕");p.type="button",p.addEventListener("click",B),i.appendChild(p),r.appendChild(i);const c=a("div","setup-modal-body");c.appendChild(a("p","setup-hint",d("web.setup.security.popup_hint"))),V[e].forEach(([v,k,P])=>{c.appendChild(Z(v,k,d(P)))}),r.appendChild(c);const w=a("div","setup-modal-foot"),l=a("button","setup-btn link",d("web.setup.security.reset"));l.type="button",l.addEventListener("click",()=>{const v=t.display&&t.display.defaults&&t.display.defaults.security||{};(X[e]||[e]).forEach(k=>{const P=v[k]||{};Object.keys(P).forEach(W=>S(t.answers.securityDetail,k+"."+W,P[W]))}),B(),R(e,n)}),w.appendChild(l),w.appendChild(a("span","spacer"));const f=a("button","setup-btn primary",d("web.setup.security.popup_done"));f.type="button",f.addEventListener("click",B),w.appendChild(f),r.appendChild(w),s.appendChild(r),s.addEventListener("click",v=>{v.target===s&&B()}),x=s,b.appendChild(s)}function Z(e,n,s){const r=a("div","setup-field");if(n==="list"){r.appendChild(a("label","setup-label",s));const i=a("textarea","setup-input setup-textarea"),o=T(t.answers.securityDetail,e);i.value=Array.isArray(o)?o.join(`
2
+ `):"",i.rows=5,i.spellcheck=!1,i.addEventListener("input",()=>{const p=i.value.split(`
3
+ `).map(c=>c.trim()).filter(Boolean);S(t.answers.securityDetail,e,p)}),r.appendChild(i)}else if(n==="bool"){const i=a("label","setup-toggle"),o=a("input");o.type="checkbox",o.checked=!!T(t.answers.securityDetail,e),o.addEventListener("change",()=>S(t.answers.securityDetail,e,o.checked)),i.appendChild(o),i.appendChild(a("span","t",s)),r.appendChild(i)}else if(n==="int"){r.appendChild(a("label","setup-label",s));const i=a("input","setup-input");i.type="number",i.min="1";const o=T(t.answers.securityDetail,e);i.value=typeof o=="number"?String(o):"",i.addEventListener("input",()=>{const p=parseInt(i.value,10);S(t.answers.securityDetail,e,Number.isFinite(p)&&p>0?p:void 0)}),r.appendChild(i)}else if(n==="enum"){r.appendChild(a("label","setup-label",s));const i=a("select","setup-input"),o=T(t.answers.securityDetail,e);Q.forEach(p=>{const c=a("option",null,d("web.setup.security.severity."+p));c.value=p,o===p&&(c.selected=!0),i.appendChild(c)}),i.addEventListener("change",()=>S(t.answers.securityDetail,e,i.value)),r.appendChild(i)}return r}function B(){x&&x.parentNode&&x.parentNode.removeChild(x),x=null}function $(){const e=[];return t.answers.securityPathsRestrict&&e.push(d("web.setup.security.paths")),t.answers.securityBashBlock&&e.push(d("web.setup.security.bash")),t.answers.securityFlagsBlock&&e.push(d("web.setup.security.flags")),e.length?e.join(", "):d("web.setup.review.security_off")}function ee(){const e=t.answers.apiKey;return e?e.length<=4?"••••":"••••"+e.slice(-4):d("web.setup.review.not_needed")}function te(){const e=C("review"),n=[[d("web.setup.review.provider"),t.answers.provider],[d("web.setup.review.baseUrl"),t.answers.apiBase],[d("web.setup.review.apiKey"),ee()],[d("web.setup.review.model"),t.answers.model],[d("web.setup.review.context"),String(t.answers.contextWindow)],[d("web.setup.review.iterations"),String(t.answers.maxToolIterations)],[d("web.setup.review.locale"),t.answers.locale],[d("web.setup.review.security"),$()]],s=a("div","setup-summary");return n.forEach(([r,i])=>{const o=a("div","r");o.appendChild(a("span","k",r)),o.appendChild(a("span","v",i)),s.appendChild(o)}),e.appendChild(s),e.appendChild(_()),e}function N(){const e=L[t.step];return e==="provider"&&!t.answers.apiBase?d("web.setup.provider.required"):e==="model"&&!t.answers.model?d("web.setup.model.required"):e==="context"&&(!(t.answers.contextWindow>0)||!(t.answers.maxToolIterations>0))?d("web.setup.context.required"):null}function se(){const e=a("div","setup-actions"),n=a("button","setup-btn",d("web.setup.back"));if(n.type="button",n.disabled=t.step===0,n.addEventListener("click",()=>{t.step!==0&&(g=null,t.step-=1,m())}),e.appendChild(n),e.appendChild(a("span","spacer")),t.step<L.length-1){const s=a("button","setup-btn primary",d("web.setup.next"));s.type="button",s.addEventListener("click",()=>{const r=N();if(r){u(b.querySelector(".setup-step"),"err",r);return}g=null,t.step+=1,m()}),e.appendChild(s)}else{const s=a("button","setup-btn primary",d("web.setup.finish"));s.type="button",s.addEventListener("click",()=>{ne(s)}),e.appendChild(s)}return e}async function ne(e){const n=N();if(n){u(b.querySelector(".setup-step"),"err",n);return}e.disabled=!0,u(b.querySelector(".setup-step"),"",d("web.setup.saving"));const s=await y("/api/setup",{method:"POST",body:{provider:t.answers.provider,apiBase:t.answers.apiBase,apiKey:t.answers.apiKey,model:t.answers.model,contextWindow:t.answers.contextWindow,maxToolIterations:t.answers.maxToolIterations,locale:t.answers.locale,securityBashBlock:t.answers.securityBashBlock,securityFlagsBlock:t.answers.securityFlagsBlock,securityPathsRestrict:t.answers.securityPathsRestrict,securityDetail:t.answers.securityDetail}});if(!s.ok){e.disabled=!1,u(b.querySelector(".setup-step"),"err",d("web.setup.failed"));return}if(s.data&&s.data.warning){u(b.querySelector(".setup-step"),"warn",d("web.setup.saved_warning",{warning:s.data.warning})),setTimeout(()=>location.reload(),1500);return}location.reload()}window.MmaSetup={maybeOpen:j}})();