@burdenoff/microfe-vibecontrols 2026.613.1 → 2026.618.1

package/dist/components/agents/AgentConnectionRecovery.js

@@ -1,179 +1,185 @@
 import { useSetAgentApiKeyMutation as e, useUpdateAgentTunnelUrlMutation as t } from "../../generated/wspace-operations.js";
 import { useTr as n } from "../../shared/hooks/useTr.js";
 import { useField as r } from "../../shared/hooks/useField.js";
-import { useState as i } from "react";
-import { AlertTriangle as a, Eye as o, EyeOff as s, KeyRound as c, Link2 as l, Loader2 as u, ShieldCheck as d } from "lucide-react";
-import { jsx as f, jsxs as p } from "react/jsx-runtime";
+import { VIBE_PERMISSIONS as i } from "../../constants/permissions.js";
+import { useState as a } from "react";
+import { AlertTriangle as o, Eye as s, EyeOff as c, KeyRound as l, Link2 as u, Loader2 as d, ShieldCheck as f } from "lucide-react";
+import { usePermissions as p } from "@burdenoff/fe-libs/shared/providers/shell";
+import { jsx as m, jsxs as h } from "react/jsx-runtime";
 //#region src/components/agents/AgentConnectionRecovery.tsx
-var m = "rounded-card border border-border-default bg-bg-surface p-4", h = "inline-flex items-center gap-2 px-3 py-2 text-sm font-medium rounded-button bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bgHover transition-colors disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus", g = "w-full px-3 py-2 text-base md:text-sm rounded-input bg-bg-sunken border border-border-default text-text-primary focus:outline-none focus:ring-2 focus:ring-border-focus font-mono", _ = "mb-1 block text-xs font-medium text-text-muted";
-function v(e) {
+var g = "rounded-card border border-border-default bg-bg-surface p-4", _ = "inline-flex items-center gap-2 px-3 py-2 text-sm font-medium rounded-button bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bgHover transition-colors disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus", v = "w-full px-3 py-2 text-base md:text-sm rounded-input bg-bg-sunken border border-border-default text-text-primary focus:outline-none focus:ring-2 focus:ring-border-focus font-mono", y = "mb-1 block text-xs font-medium text-text-muted";
+function b(e) {
 	return e instanceof Error ? e.message : String(e);
 }
-function y({ agentId: y, currentTunnelUrl: b, onUpdated: x }) {
-	let S = n(), [C, w] = i(""), [T, E] = i(!1), [D, { loading: O }] = e(), [k, A] = i(null), j = r(), M = async () => {
-		A(null);
-		let e = C.trim();
+function x({ agentId: x, currentTunnelUrl: S, onUpdated: C }) {
+	let w = n(), { hasPermission: T } = p(), E = T(i.AGENT_ADMIN), [D, O] = a(""), [k, A] = a(!1), [j, { loading: M }] = e(), [N, P] = a(null), F = r(), I = async () => {
+		if (!E) return;
+		P(null);
+		let e = D.trim();
 		if (e) try {
-			await D({ variables: {
-				agentId: y,
+			await j({ variables: {
+				agentId: x,
 				apiKey: e
-			} }), A({
+			} }), P({
 				ok: !0,
-				msg: S("agentDetails.recovery.keySaved", "API key validated and saved. The agent is reachable again.")
-			}), w(""), x?.();
+				msg: w("agentDetails.recovery.keySaved", "API key validated and saved. The agent is reachable again.")
+			}), O(""), C?.();
 		} catch (e) {
-			A({
+			P({
 				ok: !1,
-				msg: v(e)
+				msg: b(e)
 			});
 		}
-	}, [N, P] = i(b ?? ""), [F, { loading: I }] = t(), [L, R] = i(null), z = r(), B = async () => {
-		R(null);
-		let e = N.trim();
+	}, [L, R] = a(S ?? ""), [z, { loading: B }] = t(), [V, H] = a(null), U = r(), W = async () => {
+		if (!E) return;
+		H(null);
+		let e = L.trim();
 		if (e) try {
-			await F({ variables: {
-				agentId: y,
+			await z({ variables: {
+				agentId: x,
 				tunnelUrl: e
-			} }), R({
+			} }), H({
 				ok: !0,
-				msg: S("agentDetails.recovery.urlSaved", "Tunnel URL verified and updated. The agent is back online.")
-			}), x?.();
+				msg: w("agentDetails.recovery.urlSaved", "Tunnel URL verified and updated. The agent is back online.")
+			}), C?.();
 		} catch (e) {
-			R({
+			H({
 				ok: !1,
-				msg: v(e)
+				msg: b(e)
 			});
 		}
-	}, V = (e) => e ? /* @__PURE__ */ p("p", {
+	}, G = (e) => e ? /* @__PURE__ */ h("p", {
 		role: "status",
 		className: `mt-2 flex items-start gap-2 text-xs ${e.ok ? "text-status-success-text" : "text-status-error-text"}`,
-		children: [e.ok ? /* @__PURE__ */ f(d, {
+		children: [e.ok ? /* @__PURE__ */ m(f, {
 			className: "size-4 flex-shrink-0 mt-0.5",
 			"aria-hidden": "true"
-		}) : /* @__PURE__ */ f(a, {
+		}) : /* @__PURE__ */ m(o, {
 			className: "size-4 flex-shrink-0 mt-0.5",
 			"aria-hidden": "true"
-		}), /* @__PURE__ */ f("span", { children: e.msg })]
+		}), /* @__PURE__ */ m("span", { children: e.msg })]
 	}) : null;
-	return /* @__PURE__ */ p("div", {
+	return /* @__PURE__ */ h("div", {
 		className: "space-y-4",
-		children: [/* @__PURE__ */ p("section", {
-			className: m,
+		children: [/* @__PURE__ */ h("section", {
+			className: g,
 			children: [
-				/* @__PURE__ */ p("div", {
+				/* @__PURE__ */ h("div", {
 					className: "flex items-center gap-2 mb-1",
-					children: [/* @__PURE__ */ f(c, {
+					children: [/* @__PURE__ */ m(l, {
 						className: "size-5 text-text-secondary",
 						"aria-hidden": "true"
-					}), /* @__PURE__ */ f("h3", {
+					}), /* @__PURE__ */ m("h3", {
 						className: "text-base font-semibold text-text-primary",
-						children: S("agentDetails.recovery.keyTitle", "Update API key (no re-add)")
+						children: w("agentDetails.recovery.keyTitle", "Update API key (no re-add)")
 					})]
 				}),
-				/* @__PURE__ */ f("p", {
+				/* @__PURE__ */ m("p", {
 					className: "text-xs text-text-muted mb-3",
-					children: S("agentDetails.recovery.keyHint", "If the agent’s API key changed and it can’t auto-report (gateway auth down), paste the value from `vibe key` on the host. It’s validated against the agent before saving — your sessions and data stay intact.")
+					children: w("agentDetails.recovery.keyHint", "If the agent’s API key changed and it can’t auto-report (gateway auth down), paste the value from `vibe key` on the host. It’s validated against the agent before saving — your sessions and data stay intact.")
 				}),
-				/* @__PURE__ */ p("div", {
+				/* @__PURE__ */ h("div", {
 					className: "flex flex-col sm:flex-row sm:items-end gap-2",
-					children: [/* @__PURE__ */ p("div", {
+					children: [/* @__PURE__ */ h("div", {
 						className: "flex-1 min-w-0",
-						children: [/* @__PURE__ */ f("label", {
-							htmlFor: j.id,
-							className: _,
-							children: S("agentDetails.recovery.keyLabel", "Agent API key")
-						}), /* @__PURE__ */ p("div", {
+						children: [/* @__PURE__ */ m("label", {
+							htmlFor: F.id,
+							className: y,
+							children: w("agentDetails.recovery.keyLabel", "Agent API key")
+						}), /* @__PURE__ */ h("div", {
 							className: "relative",
-							children: [/* @__PURE__ */ f("input", {
-								...j.inputProps,
-								type: T ? "text" : "password",
+							children: [/* @__PURE__ */ m("input", {
+								...F.inputProps,
+								type: k ? "text" : "password",
 								autoComplete: "off",
-								value: C,
-								onChange: (e) => w(e.target.value),
+								value: D,
+								onChange: (e) => O(e.target.value),
 								placeholder: "vcak_…",
-								className: `${g} pr-10`
-							}), /* @__PURE__ */ f("button", {
+								className: `${v} pr-10`
+							}), /* @__PURE__ */ m("button", {
 								type: "button",
-								onClick: () => E((e) => !e),
-								"aria-label": T ? S("agentDetails.recovery.hideKey", "Hide API key") : S("agentDetails.recovery.showKey", "Show API key"),
+								onClick: () => A((e) => !e),
+								"aria-label": k ? w("agentDetails.recovery.hideKey", "Hide API key") : w("agentDetails.recovery.showKey", "Show API key"),
 								className: "absolute right-1 top-1/2 -translate-y-1/2 inline-flex size-8 items-center justify-center rounded-button text-text-muted transition-colors hover:text-text-primary focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus",
-								children: f(T ? s : o, {
+								children: m(k ? c : s, {
 									className: "size-4",
 									"aria-hidden": "true"
 								})
 							})]
 						})]
-					}), /* @__PURE__ */ p("button", {
+					}), /* @__PURE__ */ h("button", {
 						type: "button",
-						onClick: M,
-						disabled: O || C.trim().length === 0,
-						"aria-busy": O,
-						className: `${h} shrink-0`,
-						children: [O ? /* @__PURE__ */ f(u, {
+						onClick: I,
+						disabled: M || D.trim().length === 0 || !E,
+						title: E ? void 0 : w("common.noPermission", "You do not have permission"),
+						"aria-busy": M,
+						className: `${_} shrink-0`,
+						children: [M ? /* @__PURE__ */ m(d, {
 							className: "size-4 animate-spin",
 							"aria-hidden": "true"
-						}) : /* @__PURE__ */ f(d, {
+						}) : /* @__PURE__ */ m(f, {
 							className: "size-4",
 							"aria-hidden": "true"
-						}), S("agentDetails.recovery.validateSave", "Validate & save")]
+						}), w("agentDetails.recovery.validateSave", "Validate & save")]
 					})]
 				}),
-				V(k)
+				G(N)
 			]
-		}), /* @__PURE__ */ p("section", {
-			className: m,
+		}), /* @__PURE__ */ h("section", {
+			className: g,
 			children: [
-				/* @__PURE__ */ p("div", {
+				/* @__PURE__ */ h("div", {
 					className: "flex items-center gap-2 mb-1",
-					children: [/* @__PURE__ */ f(l, {
+					children: [/* @__PURE__ */ m(u, {
 						className: "size-5 text-text-secondary",
 						"aria-hidden": "true"
-					}), /* @__PURE__ */ f("h3", {
+					}), /* @__PURE__ */ m("h3", {
 						className: "text-base font-semibold text-text-primary",
-						children: S("agentDetails.recovery.urlTitle", "Update tunnel URL (re-pair)")
+						children: w("agentDetails.recovery.urlTitle", "Update tunnel URL (re-pair)")
 					})]
 				}),
-				/* @__PURE__ */ f("p", {
+				/* @__PURE__ */ m("p", {
 					className: "text-xs text-text-muted mb-3",
-					children: S("agentDetails.recovery.urlHint", "After a quick-tunnel rotation, paste the new URL here. The backend verifies it points at the same machine before saving — no re-registration, no data loss.")
+					children: w("agentDetails.recovery.urlHint", "After a quick-tunnel rotation, paste the new URL here. The backend verifies it points at the same machine before saving — no re-registration, no data loss.")
 				}),
-				/* @__PURE__ */ p("div", {
+				/* @__PURE__ */ h("div", {
 					className: "flex flex-col sm:flex-row sm:items-end gap-2",
-					children: [/* @__PURE__ */ p("div", {
+					children: [/* @__PURE__ */ h("div", {
 						className: "flex-1 min-w-0",
-						children: [/* @__PURE__ */ f("label", {
-							htmlFor: z.id,
-							className: _,
-							children: S("agentDetails.recovery.urlLabel", "Tunnel URL")
-						}), /* @__PURE__ */ f("input", {
-							...z.inputProps,
+						children: [/* @__PURE__ */ m("label", {
+							htmlFor: U.id,
+							className: y,
+							children: w("agentDetails.recovery.urlLabel", "Tunnel URL")
+						}), /* @__PURE__ */ m("input", {
+							...U.inputProps,
 							type: "url",
-							value: N,
-							onChange: (e) => P(e.target.value),
+							value: L,
+							onChange: (e) => R(e.target.value),
 							placeholder: "https://….trycloudflare.com",
-							className: g
+							className: v
 						})]
-					}), /* @__PURE__ */ p("button", {
+					}), /* @__PURE__ */ h("button", {
 						type: "button",
-						onClick: B,
-						disabled: I || N.trim().length === 0,
-						"aria-busy": I,
-						className: `${h} shrink-0`,
-						children: [I ? /* @__PURE__ */ f(u, {
+						onClick: W,
+						disabled: B || L.trim().length === 0 || !E,
+						title: E ? void 0 : w("common.noPermission", "You do not have permission"),
+						"aria-busy": B,
+						className: `${_} shrink-0`,
+						children: [B ? /* @__PURE__ */ m(d, {
 							className: "size-4 animate-spin",
 							"aria-hidden": "true"
-						}) : /* @__PURE__ */ f(l, {
+						}) : /* @__PURE__ */ m(u, {
 							className: "size-4",
 							"aria-hidden": "true"
-						}), S("agentDetails.recovery.verifyUpdate", "Verify & update")]
+						}), w("agentDetails.recovery.verifyUpdate", "Verify & update")]
 					})]
 				}),
-				V(L)
+				G(V)
 			]
 		})]
 	});
 }
 //#endregion
-export { y as AgentConnectionRecovery };
+export { x as AgentConnectionRecovery };
 
 //# sourceMappingURL=AgentConnectionRecovery.js.map

package/dist/components/agents/AgentConnectionRecovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"AgentConnectionRecovery.js","names":[],"sources":["../../../src/components/agents/AgentConnectionRecovery.tsx"],"sourcesContent":["import { useState } from 'react';\nimport { Eye, EyeOff, KeyRound, Link2, Loader2, ShieldCheck, AlertTriangle } from 'lucide-react';\n\nimport {\n  useSetAgentApiKeyMutation,\n  useUpdateAgentTunnelUrlMutation,\n} from '@/generated/wspace-operations';\nimport { useTr } from '../../shared/hooks/useTr';\nimport { useField } from '../../shared/hooks/useField';\n\ninterface AgentConnectionRecoveryProps {\n  agentId: string;\n  currentTunnelUrl?: string | null;\n  /** Refetch the agent after a successful in-place update. */\n  onUpdated?: () => void;\n}\n\nconst CARD = 'rounded-card border border-border-default bg-bg-surface p-4';\nconst BTN =\n  'inline-flex items-center gap-2 px-3 py-2 text-sm font-medium rounded-button bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bgHover transition-colors disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus';\nconst INPUT =\n  'w-full px-3 py-2 text-base md:text-sm rounded-input bg-bg-sunken border border-border-default text-text-primary focus:outline-none focus:ring-2 focus:ring-border-focus font-mono';\nconst LABEL = 'mb-1 block text-xs font-medium text-text-muted';\n\nfunction errMsg(e: unknown): string {\n  return e instanceof Error ? e.message : String(e);\n}\n\n/**\n * Emergency connection recovery for an existing agent — used when gateway\n * auto-report is broken (so the agent can't refresh its own key/tunnel) and\n * the operator must fix it in place WITHOUT delete + re-add (which loses\n * sessions / notes / bookmarks).\n *  - \"Update API key\": paste the value from `vibe key`; the backend probes the\n *    agent with it and only saves if the agent accepts it.\n *  - \"Update tunnel URL\": paste the new quick-tunnel URL; the backend verifies\n *    it's the same machine (hostname) before saving.\n */\nexport function AgentConnectionRecovery({\n  agentId,\n  currentTunnelUrl,\n  onUpdated,\n}: AgentConnectionRecoveryProps) {\n  const tr = useTr();\n\n  // ── API key ─────────────────────────────────────────────────────────────\n  const [keyInput, setKeyInput] = useState('');\n  const [showKey, setShowKey] = useState(false);\n  const [setKey, { loading: settingKey }] = useSetAgentApiKeyMutation();\n  const [keyResult, setKeyResult] = useState<{ ok: boolean; msg: string } | null>(null);\n  const keyField = useField();\n\n  const handleSetKey = async () => {\n    setKeyResult(null);\n    const key = keyInput.trim();\n    if (!key) return;\n    try {\n      await setKey({ variables: { agentId, apiKey: key } });\n      setKeyResult({\n        ok: true,\n        msg: tr(\n          'agentDetails.recovery.keySaved',\n          'API key validated and saved. The agent is reachable again.'\n        ),\n      });\n      setKeyInput('');\n      onUpdated?.();\n    } catch (e) {\n      setKeyResult({ ok: false, msg: errMsg(e) });\n    }\n  };\n\n  // ── Tunnel URL ──────────────────────────────────────────────────────────\n  const [urlInput, setUrlInput] = useState(currentTunnelUrl ?? '');\n  const [updateUrl, { loading: updatingUrl }] = useUpdateAgentTunnelUrlMutation();\n  const [urlResult, setUrlResult] = useState<{ ok: boolean; msg: string } | null>(null);\n  const urlField = useField();\n\n  const handleUpdateUrl = async () => {\n    setUrlResult(null);\n    const url = urlInput.trim();\n    if (!url) return;\n    try {\n      await updateUrl({ variables: { agentId, tunnelUrl: url } });\n      setUrlResult({\n        ok: true,\n        msg: tr(\n          'agentDetails.recovery.urlSaved',\n          'Tunnel URL verified and updated. The agent is back online.'\n        ),\n      });\n      onUpdated?.();\n    } catch (e) {\n      setUrlResult({ ok: false, msg: errMsg(e) });\n    }\n  };\n\n  const result = (r: { ok: boolean; msg: string } | null) =>\n    r ? (\n      <p\n        role=\"status\"\n        className={`mt-2 flex items-start gap-2 text-xs ${\n          r.ok ? 'text-status-success-text' : 'text-status-error-text'\n        }`}\n      >\n        {r.ok ? (\n          <ShieldCheck className=\"size-4 flex-shrink-0 mt-0.5\" aria-hidden=\"true\" />\n        ) : (\n          <AlertTriangle className=\"size-4 flex-shrink-0 mt-0.5\" aria-hidden=\"true\" />\n        )}\n        <span>{r.msg}</span>\n      </p>\n    ) : null;\n\n  return (\n    <div className=\"space-y-4\">\n      <section className={CARD}>\n        <div className=\"flex items-center gap-2 mb-1\">\n          <KeyRound className=\"size-5 text-text-secondary\" aria-hidden=\"true\" />\n          <h3 className=\"text-base font-semibold text-text-primary\">\n            {tr('agentDetails.recovery.keyTitle', 'Update API key (no re-add)')}\n          </h3>\n        </div>\n        <p className=\"text-xs text-text-muted mb-3\">\n          {tr(\n            'agentDetails.recovery.keyHint',\n            'If the agent’s API key changed and it can’t auto-report (gateway auth down), paste the value from `vibe key` on the host. It’s validated against the agent before saving — your sessions and data stay intact.'\n          )}\n        </p>\n        <div className=\"flex flex-col sm:flex-row sm:items-end gap-2\">\n          <div className=\"flex-1 min-w-0\">\n            <label htmlFor={keyField.id} className={LABEL}>\n              {tr('agentDetails.recovery.keyLabel', 'Agent API key')}\n            </label>\n            <div className=\"relative\">\n              <input\n                {...keyField.inputProps}\n                type={showKey ? 'text' : 'password'}\n                autoComplete=\"off\"\n                value={keyInput}\n                onChange={(e) => setKeyInput(e.target.value)}\n                placeholder=\"vcak_…\"\n                className={`${INPUT} pr-10`}\n              />\n              <button\n                type=\"button\"\n                onClick={() => setShowKey((v) => !v)}\n                aria-label={\n                  showKey\n                    ? tr('agentDetails.recovery.hideKey', 'Hide API key')\n                    : tr('agentDetails.recovery.showKey', 'Show API key')\n                }\n                className=\"absolute right-1 top-1/2 -translate-y-1/2 inline-flex size-8 items-center justify-center rounded-button text-text-muted transition-colors hover:text-text-primary focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n              >\n                {showKey ? (\n                  <EyeOff className=\"size-4\" aria-hidden=\"true\" />\n                ) : (\n                  <Eye className=\"size-4\" aria-hidden=\"true\" />\n                )}\n              </button>\n            </div>\n          </div>\n          <button\n            type=\"button\"\n            onClick={handleSetKey}\n            disabled={settingKey || keyInput.trim().length === 0}\n            aria-busy={settingKey}\n            className={`${BTN} shrink-0`}\n          >\n            {settingKey ? (\n              <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n            ) : (\n              <ShieldCheck className=\"size-4\" aria-hidden=\"true\" />\n            )}\n            {tr('agentDetails.recovery.validateSave', 'Validate & save')}\n          </button>\n        </div>\n        {result(keyResult)}\n      </section>\n\n      <section className={CARD}>\n        <div className=\"flex items-center gap-2 mb-1\">\n          <Link2 className=\"size-5 text-text-secondary\" aria-hidden=\"true\" />\n          <h3 className=\"text-base font-semibold text-text-primary\">\n            {tr('agentDetails.recovery.urlTitle', 'Update tunnel URL (re-pair)')}\n          </h3>\n        </div>\n        <p className=\"text-xs text-text-muted mb-3\">\n          {tr(\n            'agentDetails.recovery.urlHint',\n            'After a quick-tunnel rotation, paste the new URL here. The backend verifies it points at the same machine before saving — no re-registration, no data loss.'\n          )}\n        </p>\n        <div className=\"flex flex-col sm:flex-row sm:items-end gap-2\">\n          <div className=\"flex-1 min-w-0\">\n            <label htmlFor={urlField.id} className={LABEL}>\n              {tr('agentDetails.recovery.urlLabel', 'Tunnel URL')}\n            </label>\n            <input\n              {...urlField.inputProps}\n              type=\"url\"\n              value={urlInput}\n              onChange={(e) => setUrlInput(e.target.value)}\n              placeholder=\"https://….trycloudflare.com\"\n              className={INPUT}\n            />\n          </div>\n          <button\n            type=\"button\"\n            onClick={handleUpdateUrl}\n            disabled={updatingUrl || urlInput.trim().length === 0}\n            aria-busy={updatingUrl}\n            className={`${BTN} shrink-0`}\n          >\n            {updatingUrl ? (\n              <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n            ) : (\n              <Link2 className=\"size-4\" aria-hidden=\"true\" />\n            )}\n            {tr('agentDetails.recovery.verifyUpdate', 'Verify & update')}\n          </button>\n        </div>\n        {result(urlResult)}\n      </section>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;AAiBA,IAAM,IAAO,+DACP,IACJ,mRACI,IACJ,qLACI,IAAQ;AAEd,SAAS,EAAO,GAAoB;AAClC,QAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;;AAanD,SAAgB,EAAwB,EACtC,YACA,qBACA,gBAC+B;CAC/B,IAAM,IAAK,GAAO,EAGZ,CAAC,GAAU,KAAe,EAAS,GAAG,EACtC,CAAC,GAAS,KAAc,EAAS,GAAM,EACvC,CAAC,GAAQ,EAAE,SAAS,OAAgB,GAA2B,EAC/D,CAAC,GAAW,KAAgB,EAA8C,KAAK,EAC/E,IAAW,GAAU,EAErB,IAAe,YAAY;AAC/B,IAAa,KAAK;EAClB,IAAM,IAAM,EAAS,MAAM;AACtB,QACL,KAAI;AAUF,GATA,MAAM,EAAO,EAAE,WAAW;IAAE;IAAS,QAAQ;IAAK,EAAE,CAAC,EACrD,EAAa;IACX,IAAI;IACJ,KAAK,EACH,kCACA,6DACD;IACF,CAAC,EACF,EAAY,GAAG,EACf,KAAa;WACN,GAAG;AACV,KAAa;IAAE,IAAI;IAAO,KAAK,EAAO,EAAE;IAAE,CAAC;;IAKzC,CAAC,GAAU,KAAe,EAAS,KAAoB,GAAG,EAC1D,CAAC,GAAW,EAAE,SAAS,OAAiB,GAAiC,EACzE,CAAC,GAAW,KAAgB,EAA8C,KAAK,EAC/E,IAAW,GAAU,EAErB,IAAkB,YAAY;AAClC,IAAa,KAAK;EAClB,IAAM,IAAM,EAAS,MAAM;AACtB,QACL,KAAI;AASF,GARA,MAAM,EAAU,EAAE,WAAW;IAAE;IAAS,WAAW;IAAK,EAAE,CAAC,EAC3D,EAAa;IACX,IAAI;IACJ,KAAK,EACH,kCACA,6DACD;IACF,CAAC,EACF,KAAa;WACN,GAAG;AACV,KAAa;IAAE,IAAI;IAAO,KAAK,EAAO,EAAE;IAAE,CAAC;;IAIzC,KAAU,MACd,IACE,kBAAC,KAAD;EACE,MAAK;EACL,WAAW,uCACT,EAAE,KAAK,6BAA6B;YAHxC,CAMG,EAAE,KACD,kBAAC,GAAD;GAAa,WAAU;GAA8B,eAAY;GAAS,CAAA,GAE1E,kBAAC,GAAD;GAAe,WAAU;GAA8B,eAAY;GAAS,CAAA,EAE9E,kBAAC,QAAD,EAAA,UAAO,EAAE,KAAW,CAAA,CAClB;MACF;AAEN,QACE,kBAAC,OAAD;EAAK,WAAU;YAAf,CACE,kBAAC,WAAD;GAAS,WAAW;aAApB;IACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAU,WAAU;MAA6B,eAAY;MAAS,CAAA,EACtE,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAG,kCAAkC,6BAA6B;MAChE,CAAA,CACD;;IACN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,iCACA,iNACD;KACC,CAAA;IACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OAAO,SAAS,EAAS;OAAI,WAAW;iBACrC,EAAG,kCAAkC,gBAAgB;OAChD,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,GAAI,EAAS;QACb,MAAM,IAAU,SAAS;QACzB,cAAa;QACb,OAAO;QACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;QAC5C,aAAY;QACZ,WAAW,GAAG,EAAM;QACpB,CAAA,EACF,kBAAC,UAAD;QACE,MAAK;QACL,eAAe,GAAY,MAAM,CAAC,EAAE;QACpC,cACE,IACI,EAAG,iCAAiC,eAAe,GACnD,EAAG,iCAAiC,eAAe;QAEzD,WAAU;kBAGR,EADD,IACE,IAEA,GAFD;SAAQ,WAAU;SAAS,eAAY;SAAS,CAEH;QAExC,CAAA,CACL;SACF;SACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU,KAAc,EAAS,MAAM,CAAC,WAAW;MACnD,aAAW;MACX,WAAW,GAAG,EAAI;gBALpB,CAOG,IACC,kBAAC,GAAD;OAAS,WAAU;OAAsB,eAAY;OAAS,CAAA,GAE9D,kBAAC,GAAD;OAAa,WAAU;OAAS,eAAY;OAAS,CAAA,EAEtD,EAAG,sCAAsC,kBAAkB,CACrD;QACL;;IACL,EAAO,EAAU;IACV;MAEV,kBAAC,WAAD;GAAS,WAAW;aAApB;IACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAO,WAAU;MAA6B,eAAY;MAAS,CAAA,EACnE,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAG,kCAAkC,8BAA8B;MACjE,CAAA,CACD;;IACN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,iCACA,8JACD;KACC,CAAA;IACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OAAO,SAAS,EAAS;OAAI,WAAW;iBACrC,EAAG,kCAAkC,aAAa;OAC7C,CAAA,EACR,kBAAC,SAAD;OACE,GAAI,EAAS;OACb,MAAK;OACL,OAAO;OACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;OAC5C,aAAY;OACZ,WAAW;OACX,CAAA,CACE;SACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU,KAAe,EAAS,MAAM,CAAC,WAAW;MACpD,aAAW;MACX,WAAW,GAAG,EAAI;gBALpB,CAOG,IACC,kBAAC,GAAD;OAAS,WAAU;OAAsB,eAAY;OAAS,CAAA,GAE9D,kBAAC,GAAD;OAAO,WAAU;OAAS,eAAY;OAAS,CAAA,EAEhD,EAAG,sCAAsC,kBAAkB,CACrD;QACL;;IACL,EAAO,EAAU;IACV;KACN"}
+{"version":3,"file":"AgentConnectionRecovery.js","names":[],"sources":["../../../src/components/agents/AgentConnectionRecovery.tsx"],"sourcesContent":["import { useState } from 'react';\nimport { Eye, EyeOff, KeyRound, Link2, Loader2, ShieldCheck, AlertTriangle } from 'lucide-react';\n\nimport {\n  useSetAgentApiKeyMutation,\n  useUpdateAgentTunnelUrlMutation,\n} from '@/generated/wspace-operations';\nimport { usePermissions } from '@burdenoff/fe-libs/shared/providers/shell';\nimport { VIBE_PERMISSIONS } from '@/constants/permissions';\nimport { useTr } from '../../shared/hooks/useTr';\nimport { useField } from '../../shared/hooks/useField';\n\ninterface AgentConnectionRecoveryProps {\n  agentId: string;\n  currentTunnelUrl?: string | null;\n  /** Refetch the agent after a successful in-place update. */\n  onUpdated?: () => void;\n}\n\nconst CARD = 'rounded-card border border-border-default bg-bg-surface p-4';\nconst BTN =\n  'inline-flex items-center gap-2 px-3 py-2 text-sm font-medium rounded-button bg-action-primary-bg text-action-primary-text hover:bg-action-primary-bgHover transition-colors disabled:opacity-50 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus';\nconst INPUT =\n  'w-full px-3 py-2 text-base md:text-sm rounded-input bg-bg-sunken border border-border-default text-text-primary focus:outline-none focus:ring-2 focus:ring-border-focus font-mono';\nconst LABEL = 'mb-1 block text-xs font-medium text-text-muted';\n\nfunction errMsg(e: unknown): string {\n  return e instanceof Error ? e.message : String(e);\n}\n\n/**\n * Emergency connection recovery for an existing agent — used when gateway\n * auto-report is broken (so the agent can't refresh its own key/tunnel) and\n * the operator must fix it in place WITHOUT delete + re-add (which loses\n * sessions / notes / bookmarks).\n *  - \"Update API key\": paste the value from `vibe key`; the backend probes the\n *    agent with it and only saves if the agent accepts it.\n *  - \"Update tunnel URL\": paste the new quick-tunnel URL; the backend verifies\n *    it's the same machine (hostname) before saving.\n */\nexport function AgentConnectionRecovery({\n  agentId,\n  currentTunnelUrl,\n  onUpdated,\n}: AgentConnectionRecoveryProps) {\n  const tr = useTr();\n  // API-key recovery and tunnel-URL recovery are both enforced as `agent:admin`\n  // at the gateway.\n  const { hasPermission } = usePermissions();\n  const canAdmin = hasPermission(VIBE_PERMISSIONS.AGENT_ADMIN);\n\n  // ── API key ─────────────────────────────────────────────────────────────\n  const [keyInput, setKeyInput] = useState('');\n  const [showKey, setShowKey] = useState(false);\n  const [setKey, { loading: settingKey }] = useSetAgentApiKeyMutation();\n  const [keyResult, setKeyResult] = useState<{ ok: boolean; msg: string } | null>(null);\n  const keyField = useField();\n\n  const handleSetKey = async () => {\n    if (!canAdmin) return;\n    setKeyResult(null);\n    const key = keyInput.trim();\n    if (!key) return;\n    try {\n      await setKey({ variables: { agentId, apiKey: key } });\n      setKeyResult({\n        ok: true,\n        msg: tr(\n          'agentDetails.recovery.keySaved',\n          'API key validated and saved. The agent is reachable again.'\n        ),\n      });\n      setKeyInput('');\n      onUpdated?.();\n    } catch (e) {\n      setKeyResult({ ok: false, msg: errMsg(e) });\n    }\n  };\n\n  // ── Tunnel URL ──────────────────────────────────────────────────────────\n  const [urlInput, setUrlInput] = useState(currentTunnelUrl ?? '');\n  const [updateUrl, { loading: updatingUrl }] = useUpdateAgentTunnelUrlMutation();\n  const [urlResult, setUrlResult] = useState<{ ok: boolean; msg: string } | null>(null);\n  const urlField = useField();\n\n  const handleUpdateUrl = async () => {\n    if (!canAdmin) return;\n    setUrlResult(null);\n    const url = urlInput.trim();\n    if (!url) return;\n    try {\n      await updateUrl({ variables: { agentId, tunnelUrl: url } });\n      setUrlResult({\n        ok: true,\n        msg: tr(\n          'agentDetails.recovery.urlSaved',\n          'Tunnel URL verified and updated. The agent is back online.'\n        ),\n      });\n      onUpdated?.();\n    } catch (e) {\n      setUrlResult({ ok: false, msg: errMsg(e) });\n    }\n  };\n\n  const result = (r: { ok: boolean; msg: string } | null) =>\n    r ? (\n      <p\n        role=\"status\"\n        className={`mt-2 flex items-start gap-2 text-xs ${\n          r.ok ? 'text-status-success-text' : 'text-status-error-text'\n        }`}\n      >\n        {r.ok ? (\n          <ShieldCheck className=\"size-4 flex-shrink-0 mt-0.5\" aria-hidden=\"true\" />\n        ) : (\n          <AlertTriangle className=\"size-4 flex-shrink-0 mt-0.5\" aria-hidden=\"true\" />\n        )}\n        <span>{r.msg}</span>\n      </p>\n    ) : null;\n\n  return (\n    <div className=\"space-y-4\">\n      <section className={CARD}>\n        <div className=\"flex items-center gap-2 mb-1\">\n          <KeyRound className=\"size-5 text-text-secondary\" aria-hidden=\"true\" />\n          <h3 className=\"text-base font-semibold text-text-primary\">\n            {tr('agentDetails.recovery.keyTitle', 'Update API key (no re-add)')}\n          </h3>\n        </div>\n        <p className=\"text-xs text-text-muted mb-3\">\n          {tr(\n            'agentDetails.recovery.keyHint',\n            'If the agent’s API key changed and it can’t auto-report (gateway auth down), paste the value from `vibe key` on the host. It’s validated against the agent before saving — your sessions and data stay intact.'\n          )}\n        </p>\n        <div className=\"flex flex-col sm:flex-row sm:items-end gap-2\">\n          <div className=\"flex-1 min-w-0\">\n            <label htmlFor={keyField.id} className={LABEL}>\n              {tr('agentDetails.recovery.keyLabel', 'Agent API key')}\n            </label>\n            <div className=\"relative\">\n              <input\n                {...keyField.inputProps}\n                type={showKey ? 'text' : 'password'}\n                autoComplete=\"off\"\n                value={keyInput}\n                onChange={(e) => setKeyInput(e.target.value)}\n                placeholder=\"vcak_…\"\n                className={`${INPUT} pr-10`}\n              />\n              <button\n                type=\"button\"\n                onClick={() => setShowKey((v) => !v)}\n                aria-label={\n                  showKey\n                    ? tr('agentDetails.recovery.hideKey', 'Hide API key')\n                    : tr('agentDetails.recovery.showKey', 'Show API key')\n                }\n                className=\"absolute right-1 top-1/2 -translate-y-1/2 inline-flex size-8 items-center justify-center rounded-button text-text-muted transition-colors hover:text-text-primary focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-border-focus\"\n              >\n                {showKey ? (\n                  <EyeOff className=\"size-4\" aria-hidden=\"true\" />\n                ) : (\n                  <Eye className=\"size-4\" aria-hidden=\"true\" />\n                )}\n              </button>\n            </div>\n          </div>\n          <button\n            type=\"button\"\n            onClick={handleSetKey}\n            disabled={settingKey || keyInput.trim().length === 0 || !canAdmin}\n            title={canAdmin ? undefined : tr('common.noPermission', 'You do not have permission')}\n            aria-busy={settingKey}\n            className={`${BTN} shrink-0`}\n          >\n            {settingKey ? (\n              <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n            ) : (\n              <ShieldCheck className=\"size-4\" aria-hidden=\"true\" />\n            )}\n            {tr('agentDetails.recovery.validateSave', 'Validate & save')}\n          </button>\n        </div>\n        {result(keyResult)}\n      </section>\n\n      <section className={CARD}>\n        <div className=\"flex items-center gap-2 mb-1\">\n          <Link2 className=\"size-5 text-text-secondary\" aria-hidden=\"true\" />\n          <h3 className=\"text-base font-semibold text-text-primary\">\n            {tr('agentDetails.recovery.urlTitle', 'Update tunnel URL (re-pair)')}\n          </h3>\n        </div>\n        <p className=\"text-xs text-text-muted mb-3\">\n          {tr(\n            'agentDetails.recovery.urlHint',\n            'After a quick-tunnel rotation, paste the new URL here. The backend verifies it points at the same machine before saving — no re-registration, no data loss.'\n          )}\n        </p>\n        <div className=\"flex flex-col sm:flex-row sm:items-end gap-2\">\n          <div className=\"flex-1 min-w-0\">\n            <label htmlFor={urlField.id} className={LABEL}>\n              {tr('agentDetails.recovery.urlLabel', 'Tunnel URL')}\n            </label>\n            <input\n              {...urlField.inputProps}\n              type=\"url\"\n              value={urlInput}\n              onChange={(e) => setUrlInput(e.target.value)}\n              placeholder=\"https://….trycloudflare.com\"\n              className={INPUT}\n            />\n          </div>\n          <button\n            type=\"button\"\n            onClick={handleUpdateUrl}\n            disabled={updatingUrl || urlInput.trim().length === 0 || !canAdmin}\n            title={canAdmin ? undefined : tr('common.noPermission', 'You do not have permission')}\n            aria-busy={updatingUrl}\n            className={`${BTN} shrink-0`}\n          >\n            {updatingUrl ? (\n              <Loader2 className=\"size-4 animate-spin\" aria-hidden=\"true\" />\n            ) : (\n              <Link2 className=\"size-4\" aria-hidden=\"true\" />\n            )}\n            {tr('agentDetails.recovery.verifyUpdate', 'Verify & update')}\n          </button>\n        </div>\n        {result(urlResult)}\n      </section>\n    </div>\n  );\n}\n"],"mappings":";;;;;;;;;AAmBA,IAAM,IAAO,+DACP,IACJ,mRACI,IACJ,qLACI,IAAQ;AAEd,SAAS,EAAO,GAAoB;AAClC,QAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;;AAanD,SAAgB,EAAwB,EACtC,YACA,qBACA,gBAC+B;CAC/B,IAAM,IAAK,GAAO,EAGZ,EAAE,qBAAkB,GAAgB,EACpC,IAAW,EAAc,EAAiB,YAAY,EAGtD,CAAC,GAAU,KAAe,EAAS,GAAG,EACtC,CAAC,GAAS,KAAc,EAAS,GAAM,EACvC,CAAC,GAAQ,EAAE,SAAS,OAAgB,GAA2B,EAC/D,CAAC,GAAW,KAAgB,EAA8C,KAAK,EAC/E,IAAW,GAAU,EAErB,IAAe,YAAY;AAC/B,MAAI,CAAC,EAAU;AACf,IAAa,KAAK;EAClB,IAAM,IAAM,EAAS,MAAM;AACtB,QACL,KAAI;AAUF,GATA,MAAM,EAAO,EAAE,WAAW;IAAE;IAAS,QAAQ;IAAK,EAAE,CAAC,EACrD,EAAa;IACX,IAAI;IACJ,KAAK,EACH,kCACA,6DACD;IACF,CAAC,EACF,EAAY,GAAG,EACf,KAAa;WACN,GAAG;AACV,KAAa;IAAE,IAAI;IAAO,KAAK,EAAO,EAAE;IAAE,CAAC;;IAKzC,CAAC,GAAU,KAAe,EAAS,KAAoB,GAAG,EAC1D,CAAC,GAAW,EAAE,SAAS,OAAiB,GAAiC,EACzE,CAAC,GAAW,KAAgB,EAA8C,KAAK,EAC/E,IAAW,GAAU,EAErB,IAAkB,YAAY;AAClC,MAAI,CAAC,EAAU;AACf,IAAa,KAAK;EAClB,IAAM,IAAM,EAAS,MAAM;AACtB,QACL,KAAI;AASF,GARA,MAAM,EAAU,EAAE,WAAW;IAAE;IAAS,WAAW;IAAK,EAAE,CAAC,EAC3D,EAAa;IACX,IAAI;IACJ,KAAK,EACH,kCACA,6DACD;IACF,CAAC,EACF,KAAa;WACN,GAAG;AACV,KAAa;IAAE,IAAI;IAAO,KAAK,EAAO,EAAE;IAAE,CAAC;;IAIzC,KAAU,MACd,IACE,kBAAC,KAAD;EACE,MAAK;EACL,WAAW,uCACT,EAAE,KAAK,6BAA6B;YAHxC,CAMG,EAAE,KACD,kBAAC,GAAD;GAAa,WAAU;GAA8B,eAAY;GAAS,CAAA,GAE1E,kBAAC,GAAD;GAAe,WAAU;GAA8B,eAAY;GAAS,CAAA,EAE9E,kBAAC,QAAD,EAAA,UAAO,EAAE,KAAW,CAAA,CAClB;MACF;AAEN,QACE,kBAAC,OAAD;EAAK,WAAU;YAAf,CACE,kBAAC,WAAD;GAAS,WAAW;aAApB;IACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAU,WAAU;MAA6B,eAAY;MAAS,CAAA,EACtE,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAG,kCAAkC,6BAA6B;MAChE,CAAA,CACD;;IACN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,iCACA,iNACD;KACC,CAAA;IACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OAAO,SAAS,EAAS;OAAI,WAAW;iBACrC,EAAG,kCAAkC,gBAAgB;OAChD,CAAA,EACR,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,SAAD;QACE,GAAI,EAAS;QACb,MAAM,IAAU,SAAS;QACzB,cAAa;QACb,OAAO;QACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;QAC5C,aAAY;QACZ,WAAW,GAAG,EAAM;QACpB,CAAA,EACF,kBAAC,UAAD;QACE,MAAK;QACL,eAAe,GAAY,MAAM,CAAC,EAAE;QACpC,cACE,IACI,EAAG,iCAAiC,eAAe,GACnD,EAAG,iCAAiC,eAAe;QAEzD,WAAU;kBAGR,EADD,IACE,IAEA,GAFD;SAAQ,WAAU;SAAS,eAAY;SAAS,CAEH;QAExC,CAAA,CACL;SACF;SACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU,KAAc,EAAS,MAAM,CAAC,WAAW,KAAK,CAAC;MACzD,OAAO,IAAW,KAAA,IAAY,EAAG,uBAAuB,6BAA6B;MACrF,aAAW;MACX,WAAW,GAAG,EAAI;gBANpB,CAQG,IACC,kBAAC,GAAD;OAAS,WAAU;OAAsB,eAAY;OAAS,CAAA,GAE9D,kBAAC,GAAD;OAAa,WAAU;OAAS,eAAY;OAAS,CAAA,EAEtD,EAAG,sCAAsC,kBAAkB,CACrD;QACL;;IACL,EAAO,EAAU;IACV;MAEV,kBAAC,WAAD;GAAS,WAAW;aAApB;IACE,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,GAAD;MAAO,WAAU;MAA6B,eAAY;MAAS,CAAA,EACnE,kBAAC,MAAD;MAAI,WAAU;gBACX,EAAG,kCAAkC,8BAA8B;MACjE,CAAA,CACD;;IACN,kBAAC,KAAD;KAAG,WAAU;eACV,EACC,iCACA,8JACD;KACC,CAAA;IACJ,kBAAC,OAAD;KAAK,WAAU;eAAf,CACE,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,SAAD;OAAO,SAAS,EAAS;OAAI,WAAW;iBACrC,EAAG,kCAAkC,aAAa;OAC7C,CAAA,EACR,kBAAC,SAAD;OACE,GAAI,EAAS;OACb,MAAK;OACL,OAAO;OACP,WAAW,MAAM,EAAY,EAAE,OAAO,MAAM;OAC5C,aAAY;OACZ,WAAW;OACX,CAAA,CACE;SACN,kBAAC,UAAD;MACE,MAAK;MACL,SAAS;MACT,UAAU,KAAe,EAAS,MAAM,CAAC,WAAW,KAAK,CAAC;MAC1D,OAAO,IAAW,KAAA,IAAY,EAAG,uBAAuB,6BAA6B;MACrF,aAAW;MACX,WAAW,GAAG,EAAI;gBANpB,CAQG,IACC,kBAAC,GAAD;OAAS,WAAU;OAAsB,eAAY;OAAS,CAAA,GAE9D,kBAAC,GAAD;OAAO,WAAU;OAAS,eAAY;OAAS,CAAA,EAEhD,EAAG,sCAAsC,kBAAkB,CACrD;QACL;;IACL,EAAO,EAAU;IACV;KACN"}