@camstack/addon-training 0.1.5 → 0.1.7

package/dist/providers/modal/training-modal.addon.mjs

@@ -1,11 +1,11 @@
-import { d as boolean, f as number, h as string, l as trainingProviderCapability, m as record, p as object, u as BaseAddon } from "../../dist-B_79m03G.mjs";
+import { c as trainingProviderCapability, d as number, f as object, l as BaseAddon, m as string, p as record, u as boolean } from "../../dist-Phot2UwD.mjs";
 import { createRequire } from "node:module";
 import path, { dirname, posix } from "node:path";
-import { createHash, createPrivateKey, createPublicKey, createSign, randomBytes } from "node:crypto";
+import { createHash, createPrivateKey, createPublicKey, createSign, randomBytes, randomUUID } from "node:crypto";
 import { createWriteStream, readFileSync } from "node:fs";
 import { mkdir, open, rename, rm, unlink } from "node:fs/promises";
 import { createRequire as createRequire$1 } from "module";
-import { randomFillSync, randomUUID } from "crypto";
+import { randomFillSync, randomUUID as randomUUID$1 } from "crypto";
 import { setTimeout as setTimeout$1 } from "timers/promises";
 import { warn } from "node:console";
 import { homedir } from "node:os";
@@ -39,6 +39,124 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
+//#region src/providers/modal/modal-entries.ts
+/**
+* Modal provider entries — one credentials + defaults row per operator
+* account. Pure helpers so the store is unit-tested without BaseAddon.
+*
+* A pre-multi-entry config (flat tokenId/tokenSecret on the addon) migrates
+* to a single entry named {@link DEFAULT_MODAL_ENTRY_NAME}.
+*/
+var MODAL_TYPE_ID = "modal";
+var DEFAULT_MODAL_ENTRY_NAME = "Default";
+var MODAL_ICON_ASSET = "assets/training-modal/icon.svg";
+var DEFAULT_GPU = "L4";
+var DEFAULT_COST = 5;
+var DEFAULT_HOURS = 4;
+var DEFAULT_GRACE = 24;
+function legacyConfigured(config) {
+	return (config.tokenId ?? "").trim() !== "" || (config.tokenSecret ?? "").trim() !== "";
+}
+/** Entries the operator sees — synthesises Default from legacy flat fields. */
+function effectiveModalEntries(config) {
+	if (config.entries.length > 0) return config.entries;
+	if (!legacyConfigured(config)) return [];
+	return [{
+		id: "legacy-default",
+		name: DEFAULT_MODAL_ENTRY_NAME,
+		tokenId: config.tokenId ?? "",
+		tokenSecret: config.tokenSecret ?? "",
+		environment: config.environment ?? "",
+		gpuType: config.gpuType ?? DEFAULT_GPU,
+		region: config.region ?? "",
+		costCapUsd: config.costCapUsd ?? DEFAULT_COST,
+		maxRuntimeHours: config.maxRuntimeHours ?? DEFAULT_HOURS,
+		failedDatasetGraceHours: config.failedDatasetGraceHours ?? DEFAULT_GRACE
+	}];
+}
+function findModalEntry(config, entryId) {
+	return effectiveModalEntries(config).find((e) => e.id === entryId) ?? null;
+}
+/** Persist a Default entry from legacy flat fields; clear the flat secrets. */
+function migrateLegacyModalConfig(config, newId) {
+	if (config.entries.length > 0) return config;
+	if (!legacyConfigured(config)) return config;
+	const entry = {
+		id: newId(),
+		name: DEFAULT_MODAL_ENTRY_NAME,
+		tokenId: config.tokenId ?? "",
+		tokenSecret: config.tokenSecret ?? "",
+		environment: config.environment ?? "",
+		gpuType: config.gpuType ?? DEFAULT_GPU,
+		region: config.region ?? "",
+		costCapUsd: config.costCapUsd ?? DEFAULT_COST,
+		maxRuntimeHours: config.maxRuntimeHours ?? DEFAULT_HOURS,
+		failedDatasetGraceHours: config.failedDatasetGraceHours ?? DEFAULT_GRACE
+	};
+	return {
+		entries: [entry],
+		tokenId: "",
+		tokenSecret: "",
+		environment: "",
+		gpuType: entry.gpuType,
+		region: entry.region,
+		costCapUsd: entry.costCapUsd,
+		maxRuntimeHours: entry.maxRuntimeHours,
+		failedDatasetGraceHours: entry.failedDatasetGraceHours
+	};
+}
+function createModalEntry(config, input, newId) {
+	if (input.typeId !== "modal") return {
+		ok: false,
+		reason: "unknown-type"
+	};
+	const base = migrateLegacyModalConfig(config, newId);
+	const entry = {
+		id: newId(),
+		name: input.name.trim() === "" ? DEFAULT_MODAL_ENTRY_NAME : input.name.trim(),
+		tokenId: "",
+		tokenSecret: "",
+		environment: "",
+		gpuType: base.gpuType ?? DEFAULT_GPU,
+		region: base.region ?? "",
+		costCapUsd: base.costCapUsd ?? DEFAULT_COST,
+		maxRuntimeHours: base.maxRuntimeHours ?? DEFAULT_HOURS,
+		failedDatasetGraceHours: base.failedDatasetGraceHours ?? DEFAULT_GRACE
+	};
+	return {
+		ok: true,
+		entryId: entry.id,
+		config: {
+			...base,
+			entries: [...base.entries, entry],
+			tokenId: "",
+			tokenSecret: ""
+		}
+	};
+}
+function deleteModalEntry(config, entryId) {
+	const current = effectiveModalEntries(config);
+	if (!current.some((e) => e.id === entryId)) return {
+		ok: false,
+		reason: "unknown-entry"
+	};
+	return {
+		ok: true,
+		entryId,
+		config: {
+			entries: current.filter((e) => e.id !== entryId),
+			tokenId: "",
+			tokenSecret: "",
+			environment: config.environment ?? "",
+			gpuType: config.gpuType ?? DEFAULT_GPU,
+			region: config.region ?? "",
+			costCapUsd: config.costCapUsd ?? DEFAULT_COST,
+			maxRuntimeHours: config.maxRuntimeHours ?? DEFAULT_HOURS,
+			failedDatasetGraceHours: config.failedDatasetGraceHours ?? DEFAULT_GRACE
+		}
+	};
+}
+//#endregion
 //#region src/providers/modal/dockerfile.ts
 var ALLOWED = new Set([
 	"ARG",
@@ -234,30 +352,32 @@ var ModalTrainingProvider = class {
 	constructor(deps) {
 		this.deps = deps;
 	}
-	describe = async () => {
-		const s = this.deps.settings();
-		return [{
-			addonId: this.deps.addonId,
-			kind: "modal",
-			label: "Modal",
-			gpuTypes: MODAL_GPUS,
-			regions: MODAL_REGIONS,
-			maxDatasetBytes: MODAL_MAX_DATASET_BYTES,
-			maxRuntimeSec: MODAL_MAX_RUNTIME_SEC,
-			freeTierNote: "The Starter plan includes $30 of credit every month; Modal bills per second.",
-			dataResidencyNote: "Modal keeps the frames on a Volume of your workspace for the length of the job; the training container sees them only while it runs.",
-			configured: this.configured(),
-			defaults: {
-				gpuType: s.gpuType,
-				region: s.region,
-				costCapUsd: s.costCapUsd,
-				maxRuntimeSec: Math.round(s.maxRuntimeHours * 3600),
-				failedDatasetGraceHours: s.failedDatasetGraceHours
-			}
-		}];
+	describe = async () => this.deps.listEntries().map((entry) => this.descriptorOf(entry));
+	describeTypes = async () => [{
+		typeId: MODAL_TYPE_ID,
+		label: "Modal",
+		iconAsset: MODAL_ICON_ASSET,
+		addonId: this.deps.addonId
+	}];
+	listEntries = async () => this.deps.listEntries().map((entry) => ({
+		entryId: entry.id,
+		typeId: MODAL_TYPE_ID,
+		name: entry.name,
+		addonId: this.deps.addonId,
+		configured: this.entryConfigured(entry)
+	}));
+	createEntry = async (input) => this.deps.createEntry(input);
+	deleteEntry = async (input) => {
+		await this.deps.deleteEntry(input.entryId);
+		return { ok: true };
 	};
-	validateCredentials = async () => {
-		const gateway = this.deps.gateway();
+	validateCredentials = async (input) => {
+		if (this.deps.entry(input.entryId) === null) return {
+			ok: false,
+			reason: "missing",
+			detail: "unknown entry"
+		};
+		const gateway = this.deps.gateway(input.entryId);
 		if (gateway === null) return {
 			ok: false,
 			reason: "missing",
@@ -291,7 +411,7 @@ var ModalTrainingProvider = class {
 		};
 	};
 	uploadDataset = async (input) => {
-		const gateway = this.requireGateway();
+		const gateway = this.requireGateway(input.entryId);
 		const opened = await this.deps.peer.open(input.ticket);
 		if (opened.kind === "refused") throw new Error(`dataset offer refused: ${opened.code} — ${opened.detail}`);
 		const staging = await gateway.createSandbox({
@@ -342,7 +462,7 @@ var ModalTrainingProvider = class {
 	submitJob = async (input) => {
 		const existing = await this.deps.ledger.get(input.jobKey);
 		if (existing?.sandboxId != null) return this.statusOf(existing);
-		const gateway = this.requireGateway();
+		const gateway = this.requireGateway(input.entryId);
 		const parsed = parseTrainerDockerfile(await this.deps.fetchText(trainerDockerfileUrl(input.trainer.repo, input.trainer.revision)), input.trainer.revision);
 		if (parsed.kind === "refused") throw new Error(`trainer Dockerfile unusable on Modal: ${parsed.detail}`);
 		const sandbox = await gateway.createSandbox({
@@ -368,12 +488,14 @@ var ModalTrainingProvider = class {
 			},
 			tags: {
 				...tagsFor(input.jobKey),
-				role: "trainer"
+				role: "trainer",
+				entryId: input.entryId
 			},
 			name: `cst-${input.jobKey}`
 		});
 		const record = {
 			jobKey: input.jobKey,
+			entryId: input.entryId,
 			sandboxId: sandbox.sandboxId,
 			gpuType: input.gpuType,
 			region: input.region,
@@ -393,10 +515,10 @@ var ModalTrainingProvider = class {
 	};
 	getJob = async (input) => {
 		const record = await this.deps.ledger.get(input.jobKey);
-		if (record === null) return this.lost(input.jobKey);
+		if (record === null) return this.lost(input.jobKey, input.entryId);
 		if (record.sandboxId === null || record.endedAt !== null) return this.statusOf(record);
-		const sandbox = await this.requireGateway().sandboxFromId(record.sandboxId);
-		if (sandbox === null) return this.lost(input.jobKey);
+		const sandbox = await this.requireGateway(record.entryId).sandboxFromId(record.sandboxId);
+		if (sandbox === null) return this.lost(input.jobKey, record.entryId);
 		const code = await sandbox.poll();
 		if (code === null) return this.statusOf(record);
 		const ended = {
@@ -414,7 +536,7 @@ var ModalTrainingProvider = class {
 			lines: [],
 			cursor: `${String(cursor.ts)}:${String(cursor.seen)}`
 		};
-		const sandbox = await this.requireGateway().sandboxFromId(record.sandboxId);
+		const sandbox = await this.requireGateway(record.entryId).sandboxFromId(record.sandboxId);
 		if (sandbox === null) return {
 			lines: [],
 			cursor: `${String(cursor.ts)}:${String(cursor.seen)}`
@@ -444,7 +566,7 @@ var ModalTrainingProvider = class {
 	cancelJob = async (input) => {
 		const record = await this.deps.ledger.get(input.jobKey);
 		if (record?.sandboxId == null || record.endedAt !== null) return { ok: true };
-		await (await this.requireGateway().sandboxFromId(record.sandboxId))?.terminate();
+		await (await this.requireGateway(record.entryId).sandboxFromId(record.sandboxId))?.terminate();
 		await this.deps.ledger.put({
 			...record,
 			endedAt: this.deps.now(),
@@ -453,7 +575,7 @@ var ModalTrainingProvider = class {
 		return { ok: true };
 	};
 	readResult = async (input) => {
-		const collector = await this.collector(input.jobKey);
+		const collector = await this.collector(input.entryId, input.jobKey);
 		try {
 			const { stdout } = await collector.execText([
 				"sh",
@@ -473,7 +595,7 @@ var ModalTrainingProvider = class {
 		const offered = await this.deps.peer.offer({
 			label: "training-bundle",
 			handler: async (_req, res) => {
-				const collector = await this.collector(input.jobKey);
+				const collector = await this.collector(input.entryId, input.jobKey);
 				try {
 					const proc = await collector.execStream(["cat", `/data/out/${input.path}`]);
 					res.writeHead(200, { "content-type": "application/x-tar" });
@@ -496,37 +618,66 @@ var ModalTrainingProvider = class {
 		return { ticket: offered.ticket };
 	};
 	cleanupJob = async (input) => {
-		const gateway = this.requireGateway();
+		const gateway = this.requireGateway(input.entryId);
 		const deleted = [];
 		for (const sb of await gateway.listSandboxes(tagsFor(input.jobKey))) await (await gateway.sandboxFromId(sb.sandboxId))?.terminate();
 		if (await gateway.deleteVolume(jobVolumeName(input.jobKey))) deleted.push(jobVolumeName(input.jobKey));
 		await this.deps.ledger.remove(input.jobKey);
 		return { deleted };
 	};
-	listJobs = async () => {
-		const records = await this.deps.ledger.list();
+	listJobs = async (input) => {
+		const records = (await this.deps.ledger.list()).filter((r) => input.entryId === void 0 || r.entryId === input.entryId);
 		const known = new Set(records.map((r) => r.jobKey));
-		const statuses = await Promise.all(records.map((r) => this.getJob({ jobKey: r.jobKey })));
-		const gateway = this.deps.gateway();
+		const statuses = await Promise.all(records.map((r) => this.getJob({
+			entryId: r.entryId,
+			jobKey: r.jobKey
+		})));
+		const probeEntryId = input.entryId ?? this.deps.listEntries().find((e) => this.entryConfigured(e))?.id;
+		if (probeEntryId === void 0) return statuses;
+		const gateway = this.deps.gateway(probeEntryId);
 		if (gateway === null) return statuses;
 		const strays = (await gateway.listSandboxes({ camstack: "training" })).map((s) => s.tags["jobKey"]).filter((k) => k !== void 0 && !known.has(k));
 		const unique = [...new Set(strays)];
 		return [...statuses, ...unique.map((jobKey) => ({
-			...this.lost(jobKey),
+			...this.lost(jobKey, probeEntryId),
 			state: "running"
 		}))];
 	};
-	configured() {
-		const s = this.deps.settings();
-		return s.tokenId.trim() !== "" && s.tokenSecret.trim() !== "";
+	entryConfigured(entry) {
+		return entry.tokenId.trim() !== "" && entry.tokenSecret.trim() !== "";
 	}
-	requireGateway() {
-		const gateway = this.deps.gateway();
+	descriptorOf(entry) {
+		return {
+			addonId: this.deps.addonId,
+			entryId: entry.id,
+			typeId: MODAL_TYPE_ID,
+			name: entry.name,
+			iconAsset: MODAL_ICON_ASSET,
+			kind: MODAL_TYPE_ID,
+			label: "Modal",
+			gpuTypes: MODAL_GPUS,
+			regions: MODAL_REGIONS,
+			maxDatasetBytes: MODAL_MAX_DATASET_BYTES,
+			maxRuntimeSec: MODAL_MAX_RUNTIME_SEC,
+			freeTierNote: "The Starter plan includes $30 of credit every month; Modal bills per second.",
+			dataResidencyNote: "Modal keeps the frames on a Volume of your workspace for the length of the job; the training container sees them only while it runs.",
+			configured: this.entryConfigured(entry),
+			defaults: {
+				gpuType: entry.gpuType,
+				region: entry.region,
+				costCapUsd: entry.costCapUsd,
+				maxRuntimeSec: Math.round(entry.maxRuntimeHours * 3600),
+				failedDatasetGraceHours: entry.failedDatasetGraceHours
+			}
+		};
+	}
+	requireGateway(entryId) {
+		const gateway = this.deps.gateway(entryId);
 		if (gateway === null) throw new Error("Modal is not configured: enter a token id and secret");
 		return gateway;
 	}
-	collector(jobKey) {
-		return this.requireGateway().createSandbox({
+	collector(entryId, jobKey) {
+		return this.requireGateway(entryId).createSandbox({
 			image: {
 				kind: "registry",
 				tag: MODAL_TOOLS_IMAGE
@@ -538,7 +689,8 @@ var ModalTrainingProvider = class {
 			volumes: { "/data": jobVolumeName(jobKey) },
 			tags: {
 				...tagsFor(jobKey),
-				role: "collector"
+				role: "collector",
+				entryId
 			}
 		});
 	}
@@ -562,11 +714,11 @@ var ModalTrainingProvider = class {
 			lastFetchedAt: now
 		};
 	}
-	lost(jobKey) {
+	lost(jobKey, entryId) {
 		return {
 			jobKey,
 			state: "lost",
-			gpuType: this.deps.settings().gpuType,
+			gpuType: this.deps.entry(entryId)?.gpuType ?? "L4",
 			billedSeconds: 0,
 			costUsd: 0,
 			costIsEstimate: true,
@@ -29750,7 +29902,7 @@ function rng() {
 }
 //#endregion
 //#region ../../node_modules/modal/node_modules/uuid/dist/esm/native.js
-var native_default = { randomUUID };
+var native_default = { randomUUID: randomUUID$1 };
 //#endregion
 //#region ../../node_modules/modal/node_modules/uuid/dist/esm/v4.js
 function v4(options, buf, offset) {
@@ -88336,17 +88488,21 @@ var ModalSdkGateway = class {
 /**
 * `training-modal` — the Modal `training-provider` (D807).
 *
-* Inert until the operator enters a Modal token (the `loki-logging`
-* posture): the provider registers anyway so the Training page can list it as
-* "not configured" and link here. Region, GPU, cost cap, maximum runtime and
-* the failed-job grace period are THIS addon's settings (operator decision
+* Inert until the operator enters a Modal token on an **entry** (the
+* `loki-logging` posture): the provider registers anyway so the Training page
+* can list types and create entries. Region, GPU, cost cap, maximum runtime and
+* the failed-job grace period are per-entry settings (operator decision
 * 2026-10-08: they depend on the user's account). The token secret is a
-* `password` field, so BaseAddon keeps it in the keychain (D787) — it is
-* read from `this.config` and handed to the SDK client constructor only.
+* `password` field on each entry row, so BaseAddon keeps it in the keychain
+* (D787) — it is read from `this.config` and handed to the SDK client
+* constructor only.
+*
+* A pre-multi-entry flat config migrates to one entry named "Default" on boot.
 */
 var LEDGER_KEY = "modalJobs";
 var ModalJobRecordSchema = object({
 	jobKey: string(),
+	entryId: string().default(""),
 	sandboxId: string().nullable(),
 	gpuType: string(),
 	region: string(),
@@ -88364,10 +88520,10 @@ async function fetchText(url) {
 }
 var TrainingModalAddon = class extends BaseAddon {
 	ledgerState = null;
-	gateway = null;
-	gatewayKey = "";
+	gateways = /* @__PURE__ */ new Map();
 	constructor() {
 		super({
+			entries: [],
 			tokenId: "",
 			tokenSecret: "",
 			environment: "",
@@ -88379,48 +88535,77 @@ var TrainingModalAddon = class extends BaseAddon {
 		});
 	}
 	async onInitialize() {
+		if (this.config.entries.length === 0) {
+			const migrated = migrateLegacyModalConfig(this.config, () => randomUUID());
+			if (migrated.entries.length > 0) await this.updateGlobalSettings(migrated);
+		}
 		this.ledgerState = this.state(LEDGER_KEY, LedgerSchema, {});
 		const peer = this.ctx.peerBytes;
 		if (peer === void 0) throw new Error("training-modal needs the peer-bytes facility");
 		const provider = new ModalTrainingProvider({
 			addonId: this.ctx.id,
-			settings: () => this.config,
-			gateway: () => this.currentGateway(),
+			listEntries: () => effectiveModalEntries(this.config),
+			entry: (entryId) => findModalEntry(this.config, entryId),
+			gateway: (entryId) => this.gatewayFor(entryId),
+			createEntry: async (input) => {
+				const result = createModalEntry(this.config, input, () => randomUUID());
+				if (!result.ok) throw new Error(`cannot create entry: ${result.reason}`);
+				await this.updateGlobalSettings(result.config);
+				return { entryId: result.entryId };
+			},
+			deleteEntry: async (entryId) => {
+				const result = deleteModalEntry(this.config, entryId);
+				if (!result.ok) throw new Error(`cannot delete entry: ${result.reason}`);
+				await this.updateGlobalSettings(result.config);
+				this.closeGateway(entryId);
+			},
 			ledger: this.ledger(),
 			peer,
 			fetchText,
 			now: () => Date.now(),
 			logger: this.ctx.logger
 		});
-		this.ctx.logger.info("Modal training provider ready", { meta: { configured: this.config.tokenId.trim() !== "" && this.config.tokenSecret.trim() !== "" } });
+		this.ctx.logger.info("Modal training provider ready", { meta: {
+			entries: effectiveModalEntries(this.config).length,
+			configured: effectiveModalEntries(this.config).some((e) => e.tokenId.trim() !== "" && e.tokenSecret.trim() !== "")
+		} });
 		return { providers: [{
 			capability: trainingProviderCapability,
 			provider
 		}] };
 	}
 	async onShutdown() {
-		this.gateway?.close();
-		this.gateway = null;
+		for (const { gateway } of this.gateways.values()) gateway.close();
+		this.gateways.clear();
 	}
 	async onConfigChanged() {
-		this.gateway?.close();
-		this.gateway = null;
-		this.gatewayKey = "";
-	}
-	currentGateway() {
-		const { tokenId, tokenSecret, environment } = this.config;
-		if (tokenId.trim() === "" || tokenSecret.trim() === "") return null;
-		const key = `${tokenId}\u0000${environment}`;
-		if (this.gateway === null || this.gatewayKey !== key) {
-			this.gateway?.close();
-			this.gateway = new ModalSdkGateway({
-				tokenId: tokenId.trim(),
-				tokenSecret: tokenSecret.trim(),
-				environment: environment.trim()
-			});
-			this.gatewayKey = key;
-		}
-		return this.gateway;
+		for (const { gateway } of this.gateways.values()) gateway.close();
+		this.gateways.clear();
+	}
+	gatewayFor(entryId) {
+		const entry = findModalEntry(this.config, entryId);
+		if (entry === null) return null;
+		if (entry.tokenId.trim() === "" || entry.tokenSecret.trim() === "") return null;
+		const key = `${entry.tokenId}\u0000${entry.environment}`;
+		const cached = this.gateways.get(entryId);
+		if (cached !== void 0 && cached.key === key) return cached.gateway;
+		cached?.gateway.close();
+		const gateway = new ModalSdkGateway({
+			tokenId: entry.tokenId.trim(),
+			tokenSecret: entry.tokenSecret.trim(),
+			environment: entry.environment.trim()
+		});
+		this.gateways.set(entryId, {
+			key,
+			gateway
+		});
+		return gateway;
+	}
+	closeGateway(entryId) {
+		const cached = this.gateways.get(entryId);
+		if (cached === void 0) return;
+		cached.gateway.close();
+		this.gateways.delete(entryId);
 	}
 	ledger() {
 		const state = () => {
@@ -88446,80 +88631,101 @@ var TrainingModalAddon = class extends BaseAddon {
 	}
 	globalSettingsSchema() {
 		return this.schema({ sections: [{
-			id: "account",
-			title: "Modal account",
-			description: "Create a token at modal.com → Settings → API tokens. The Starter plan is free and includes $30 of credit a month. The secret is kept in the CamStack keychain and only ever sent to Modal.",
-			fields: [
-				this.field({
-					type: "text",
-					key: "tokenId",
-					label: "Token id",
-					placeholder: "ak-…"
-				}),
-				this.field({
-					type: "password",
-					key: "tokenSecret",
-					label: "Token secret",
-					showToggle: true
-				}),
-				this.field({
-					type: "text",
-					key: "environment",
-					label: "Environment",
-					description: "Leave empty for the workspace default."
-				})
-			]
-		}, {
-			id: "jobs",
-			title: "Jobs on this account",
-			description: "Defaults the Training page proposes for a job; each one can be changed before you confirm.",
-			fields: [
-				this.field({
-					type: "select",
-					key: "gpuType",
-					label: "GPU",
-					options: MODAL_GPUS.map((g) => ({
-						value: g.id,
-						label: `${g.label} — $${g.usdPerHour.toFixed(2)}/h`
-					}))
-				}),
-				this.field({
-					type: "select",
-					key: "region",
-					label: "Region",
-					description: "A pinned region costs more; the frames stay in your workspace either way.",
-					options: MODAL_REGIONS.map((r) => ({
-						value: r.id,
-						label: r.label
-					}))
-				}),
-				this.field({
-					type: "number",
-					key: "costCapUsd",
-					label: "Cost cap per job (USD)",
-					description: "A job is stopped when its estimated cost reaches this.",
-					min: .5,
-					step: .5
-				}),
-				this.field({
-					type: "number",
-					key: "maxRuntimeHours",
-					label: "Maximum runtime (hours)",
-					description: "Modal stops the container after this, whatever happens.",
-					min: .5,
-					max: 24,
-					step: .5
-				}),
-				this.field({
-					type: "number",
-					key: "failedDatasetGraceHours",
-					label: "Keep a failed job’s dataset (hours)",
-					description: "The frames are deleted from Modal as soon as a result is fetched. After a failure they are kept this long so the run can be inspected; 0 deletes them at once.",
-					min: 0,
-					max: 168,
-					step: 1
-				})
-			]
+			id: "entries",
+			title: "Modal accounts",
+			description: "Each entry is one Modal workspace token. Create entries from the Training → Providers tab; edit credentials here. Secrets stay in the CamStack keychain.",
+			fields: [{
+				type: "editable-array",
+				key: "entries",
+				label: "Entries",
+				itemIdKey: "id",
+				emptyMessage: "No Modal entries yet — add one from Training → Providers.",
+				addLabel: "Add entry",
+				rowTitleTemplate: "{name}",
+				defaultItem: {
+					id: "",
+					name: "Default",
+					tokenId: "",
+					tokenSecret: "",
+					environment: "",
+					gpuType: "L4",
+					region: "",
+					costCapUsd: 5,
+					maxRuntimeHours: 4,
+					failedDatasetGraceHours: 24
+				},
+				itemFields: [
+					{
+						type: "text",
+						key: "id",
+						label: "Entry id"
+					},
+					{
+						type: "text",
+						key: "name",
+						label: "Name"
+					},
+					{
+						type: "text",
+						key: "tokenId",
+						label: "Token id",
+						placeholder: "ak-…"
+					},
+					{
+						type: "password",
+						key: "tokenSecret",
+						label: "Token secret",
+						showToggle: true
+					},
+					{
+						type: "text",
+						key: "environment",
+						label: "Environment",
+						description: "Leave empty for the workspace default."
+					},
+					{
+						type: "select",
+						key: "gpuType",
+						label: "GPU",
+						options: MODAL_GPUS.map((g) => ({
+							value: g.id,
+							label: `${g.label} — $${g.usdPerHour.toFixed(2)}/h`
+						}))
+					},
+					{
+						type: "select",
+						key: "region",
+						label: "Region",
+						options: MODAL_REGIONS.map((r) => ({
+							value: r.id,
+							label: r.label
+						}))
+					},
+					{
+						type: "number",
+						key: "costCapUsd",
+						label: "Cost cap per job (USD)",
+						min: .5,
+						step: .5
+					},
+					{
+						type: "number",
+						key: "maxRuntimeHours",
+						label: "Maximum runtime (hours)",
+						min: .5,
+						max: 24,
+						step: .5
+					},
+					{
+						type: "number",
+						key: "failedDatasetGraceHours",
+						label: "Keep a failed job’s dataset (hours)",
+						min: 0,
+						max: 168,
+						step: 1
+					}
+				]
+			}]
 		}] });
 	}
 };