seisin 0.5.0 → 0.6.0

package/ui/index.html

@@ -1,4 +1,5 @@
 <!doctype html>
+<!-- Built from ui/src/ by ui/build.js. Edit there, then run: npm run build:ui -->
 <html lang="en">
 <head>
 <meta charset="utf-8">
@@ -304,6 +305,8 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
   .req .who b{font-weight:600}
   .req .path{font-family:var(--mono);font-size:12.5px;color:var(--fg)}
   .req .sub{font-size:12px;color:var(--dim);margin-top:3px}
+  .req .handoff{font-size:12px;color:var(--dim);margin-top:3px}
+  .req .handoff.person{color:var(--amber)}
   .req .act{display:flex;gap:8px;align-items:center;flex-shrink:0;flex-wrap:wrap;justify-content:flex-end}
   .req input{font:inherit;font-size:12.5px;padding:6px 9px;border:1px solid var(--line);border-radius:6px;
              background:var(--bg);color:var(--fg);width:min(30vw,220px)}
@@ -371,6 +374,11 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
   .req .scope{font-size:12.5px;margin-top:4px;color:var(--fg)}
   .req .scope.wide>b{color:var(--amber)}
   .req .scope .own{display:block;color:var(--mid);font-size:12px;margin-top:2px}
+  .req .pick{display:flex;gap:14px;flex-wrap:wrap;font-size:12.5px;margin-top:4px;color:var(--mid)}
+  .req .pick label{display:inline-flex;gap:5px;align-items:center;cursor:pointer}
+  .req .pick input{padding:0;margin:0;width:auto;border:0}
+  .req .fnote{font-size:12px;color:var(--amber);margin-top:3px}
+  .req .fnote[hidden]{display:none}
   .req .err{font-size:12px;color:var(--amber);margin-top:4px}
   .req .err[hidden]{display:none}
   .req input[aria-invalid="true"]{border-color:var(--amber)}
@@ -807,7 +815,7 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
     groups.forEach(function(g){
       about[g.about].paths++; about[g.about].denials += g.times;
       g.share = g.times / total;
-      g.stillRefused = g.roles.filter(function(r){ return still(r, g); }).length;
+      g.stillDenied = g.roles.filter(function(r){ return still(r, g); }).length;
       if (g.about !== "file") { g.standing = "outside"; return; }
       if (g.owners.length) { g.standing = "owned"; return; }
       g.standing = "unowned"; unowned++;
@@ -853,7 +861,9 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
                  blocks: denied.filter(function(e){ return e.role === r.name; }).length };
       }),
       requests: DEMO.requests.map(function(q){
-        return Object.assign({ key: q.role + ":" + q.action + ":" + q.target, owners: ownersIn(roles, q.target),
+        var owners = ownersIn(roles, q.target);
+        return Object.assign({ key: q.role + ":" + q.action + ":" + q.target, owners: owners,
+                               handoffNote: demoHandoff(q, owners),
                                last: new Date(now - q.first * 6e4).toISOString() }, q);
       }),
       causes: { total: total, distinct: groups.length, unowned: unowned, about: about,
@@ -864,6 +874,15 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
     };
   }
 
+  /** Where an example request goes. Live, the server says it (handoff.js); the example has no
+   *  server, so it says the three cases its requests can reach, in the same words. */
+  function demoHandoff(q, owners){
+    if (owners.length === 1) return owners[0] === q.role
+      ? "no handoff needed — the policy moved and " + q.role + " has it now" : "handed to " + owners[0];
+    return owners.length ? "a person decides: more than one role owns this (" + owners.join(", ") + ")"
+                         : "a person decides: no role owns this";
+  }
+
   /** The example's state again, after a change made in it. */
   function demoRefresh(){ if (!LIVE) applyState(demoState()); }
 
@@ -994,8 +1013,13 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
 
       var c4=document.createElement("td"); c4.className="st"; c4.setAttribute("data-label","confined");
       if (LIVE) {
-        // `seisin run` always sandboxes; there is nothing to switch here.
-        c4.innerHTML='<span class="state"><i></i>confined</span>';
+        // The last canary is evidence from a run, not a promise inferred from the policy.
+        if (r.canary) {
+          var passed=r.canary.confined===true;
+          c4.innerHTML='<span class="state" title="'+(passed?'Last canary passed':'Last canary failed')+'"><i></i>'+
+            (passed?'canary passed':'canary failed')+'</span>';
+          if(!passed)c4.querySelector(".state").classList.add("warn");
+        } else c4.innerHTML='<span class="state" title="No run has recorded a canary yet"><i></i>not run</span>';
       } else {
         var sw=document.createElement("button"); sw.type="button"; sw.className="sw";
         var txt=r.sandbox?"confined":"unconfined";
@@ -1454,6 +1478,8 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
   /** One cause's line under its path: whose it is, or what kind of thing it is. */
   function causeSays(c){
     if (c.about && c.about !== "file") return unownedSays(c.about);
+    // Refused correctly and nothing to grant: said as expected, before "protected".
+    if (c.expected) return "expected · " + c.expected.hint;
     if (c.standing === "protected") return "protected: " + (c.why || "");
     if (c.standing === "outside") return c.why || "outside the map";
     if (c.owners && c.owners.length) return "owned by " + c.owners.join(", ");
@@ -1463,7 +1489,7 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
   function bar(c, max){
     var w = Math.max(2, Math.round((c.times / max) * 100));
     // A cause the policy no longer denies is history, not live: shown greyed, not dropped.
-    var cold = c.stillRefused === 0;
+    var cold = c.stillDenied === 0;
     var who = c.roles.length === 1 ? c.roles[0] : c.roles.length + " roles";
     return '<div class="bar' + (cold ? ' cold' : '') + '">' +
       '<div class="lbl"><div class="p">' + esc(c.action) + ' ' + esc(c.target) + '</div>' +
@@ -1518,6 +1544,10 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
               ["git", "temporary", "build", "credential"].filter(function(k){ return kinds[k] && kinds[k].paths; })
                 .map(function(k){ return kinds[k].paths.toLocaleString() + " " + k; }).join(", ") +
               ", each with its own fix and none of them an owner.";
+    var ex = f.expected;
+    if (ex && ex.denials)
+      h += " <b>" + plural(ex.denials, "denial") + "</b> " + (ex.denials === 1 ? "is" : "are") +
+              " expected: Claude Code updating its plugins from inside the sandbox. They run and update outside it — nothing to grant.";
     var closed = (st.protected ? st.protected.paths : 0);
     if (closed)
       h += " <b>" + closed.toLocaleString() + "</b> " + (closed === 1 ? "is" : "are") +
@@ -1582,7 +1612,7 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
   }
 
   /** Retries on a list of walls: every call after the first denial of each. */
-  function retriesOf(list){ return list.reduce(function(n, w){ return n + (w.retried !== undefined ? w.retried : w.times - 1); }, 0); }
+  function retriesOf(list){ return list.reduce(function(n, w){ return n + (w.expected ? 0 : w.retried !== undefined ? w.retried : w.times - 1); }, 0); }
 
   /**
    * What a wall says under its path: the sentence Denied gives the same path, from the same
@@ -1694,6 +1724,41 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
       esc(r.grant) + "</code></b>, not only that file." + own + "</div>";
   }
 
+  /** Where the request goes, as the server decided it: handed to its owner, or a person decides.
+   *  Not worked out here — the page shows the decision seisin requests and the MCP show. */
+  function handoffOf(r){
+    if (typeof r.handoffNote !== "string" || !r.handoffNote) return "";
+    var routed = /^handed to /.test(r.handoffNote);
+    return '<div class="handoff' + (routed ? "" : " person") + '">' + esc(r.handoffNote) + "</div>";
+  }
+
+  /** A write keyed by a folder can be granted as the one file instead. */
+  function narrowable(r){ return r.action === "write" && r.grant !== r.target; }
+
+  /** The line a one-file grant carries. Live, the server says it from the role's last run;
+   *  the example has no runs, so it says it conditionally. */
+  function fileNoteOf(r){
+    if (typeof r.fileNote === "string") return r.fileNote;
+    return "If " + r.role + " runs Claude Code, a one-file grant will not let it edit: Claude Code's Write and Edit " +
+      "save to a temporary beside the file and rename it over, and the temporary is outside a one-file grant (EPERM).";
+  }
+
+  /** Folder (as before) or only the file: the choice, and what the file choice costs. */
+  function scopeChoice(r, i){
+    if (!narrowable(r)) return "";
+    return '<div class="pick" role="radiogroup" aria-label="What to grant">' +
+      '<label><input type="radio" name="scope-' + i + '" value="folder" checked> the folder <code>' + esc(r.grant) + "</code></label>" +
+      '<label><input type="radio" name="scope-' + i + '" value="file"> only the file <code>' + esc(r.target) + "</code></label>" +
+      "</div>" +
+      '<div class="fnote" id="fnote-' + i + '" hidden>' + esc(fileNoteOf(r)) + "</div>";
+  }
+
+  /** What the row's Grant button would write: the folder, or the one file chosen instead. */
+  function chosen(r, i){
+    var f = document.querySelector('input[name="scope-' + i + '"][value="file"]');
+    return narrowable(r) && f && f.checked ? { scope: "file", grant: r.target } : { scope: "folder", grant: r.grant };
+  }
+
   function drawReqs(){
     var host = document.getElementById("reqs");
     pill("req-pin", REQS.length, REQS.length === 1 ? "request" : "requests");
@@ -1711,7 +1776,7 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
       return '<div class="req' + (r.stale ? ' stale' : '') + '">' +
         '<div class="who">' +
           "<div><b>" + esc(r.role) + "</b> wants to " + esc(r.action) + ' <span class="path">' + esc(r.target) + "</span></div>" +
-          scopeOf(r) +
+          scopeOf(r) + handoffOf(r) + scopeChoice(r, i) +
           '<div class="sub"><span class="asked">' + times + "</span>" +
             (w.text ? ' · last <span title="' + escA(w.title) + '">' + esc(w.text) + "</span>" : "") + stale + "</div>" +
           '<div class="err" id="err-' + i + '" role="alert" hidden></div>' +
@@ -1728,6 +1793,12 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
     host.querySelectorAll("button[data-n]").forEach(function(b){
       b.addEventListener("click", function(){ act(b); });
     });
+    host.querySelectorAll('input[type="radio"][name^="scope-"]').forEach(function(x){
+      x.addEventListener("change", function(){
+        var n = x.name.slice(6), note = document.getElementById("fnote-" + n);
+        if (note) note.hidden = !(x.value === "file" && x.checked && note.textContent);
+      });
+    });
     drawBulk();
     lockWrites();
   }
@@ -1837,9 +1908,10 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
       input.value = "declined from the console";
       filled = true;
     }
+    var pick = chosen(req, i);
     var needsArm = granting ? (req.owners || []).length > 0 : filled;
     if (needsArm && !btn.dataset.armed) {
-      arm(btn, granting ? "Click again to share " + req.grant + " with " + req.role
+      arm(btn, granting ? "Click again to share " + pick.grant + " with " + req.role
                         : "Click again to decline with this reason", rest);
       return;
     }
@@ -1849,15 +1921,15 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
     if (!LIVE) {
       if (granting) {
         var r0 = ROLES.filter(function(x){ return x.name === req.role; })[0];
-        if (r0 && r0.writes.indexOf(req.grant) === -1) r0.writes.push(req.grant);
+        if (r0 && r0.writes.indexOf(pick.grant) === -1) r0.writes.push(pick.grant);
       }
       DEMO.requests = DEMO.requests.filter(function(q){ return q.role + ":" + q.action + ":" + q.target !== key; });
       decided(granting
-        ? "Granted <code>" + esc(req.grant) + "</code> to <b>" + esc(req.role) + "</b> in the example. Live, this line is written to seisin.toml:" +
-          '<span class="ln">"' + esc(req.grant) + '"   # granted … · «' + esc(why) + "»</span>Nothing was saved. " +
+        ? "Granted <code>" + esc(pick.grant) + "</code> to <b>" + esc(req.role) + "</b> in the example. Live, this line is written to seisin.toml:" +
+          '<span class="ln">"' + esc(pick.grant) + '"   # granted … · «' + esc(why) + "»</span>Nothing was saved. " +
           '<a href="#configfile">see the example seisin.toml</a>'
         : "Declined <b>" + esc(req.role) + "</b>’s request for <code>" + esc(req.grant) + "</code> in the example · reason «" + esc(why) + "».");
-      note(granting ? "granted" : "declined", req.role + " · " + req.grant);
+      note(granting ? "granted" : "declined", req.role + " · " + (granting ? pick.grant : req.grant));
       return;
     }
 
@@ -1866,7 +1938,7 @@ button.btn:active,button.tag:active,button.add:active,button.sw:active{transform
       var r = await fetch("/api/decide", {
         method: "POST",
         headers: { "content-type": "application/json", "x-seisin-token": TOKEN },
-        body: JSON.stringify({ key: key, decision: btn.dataset.d, reason: why })
+        body: JSON.stringify({ key: key, decision: btn.dataset.d, reason: why, scope: granting ? pick.scope : "folder" })
       });
       var out = await r.json();
       if (!r.ok) { var e2 = new Error(out.error || "the console did not accept that"); e2.status = r.status; throw e2; }

package/ui/favicon.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32"><rect width="32" height="32" rx="7" fill="#1f2328"/><path d="M16 5.5C8 5.5 8 16 16 16S24 26.5 16 26.5H26.5V5.5Z" fill="#2da44e"/><path d="M16 5.5C8 5.5 8 16 16 16S24 26.5 16 26.5" fill="none" stroke="#fff" stroke-width="2.8" stroke-linecap="round"/></svg>