@cartanova/qgrid-cli 2.6.1 → 2.6.4

package/bundle/web-dist/server/entry-server.generated.js

@@ -1,5 +1,5 @@
-import { A as functionalUpdate, B as resolveStaleTime, C as infiniteQueryBehavior, D as notifyManager, E as onlineManager, F as matchQuery, I as noop$1, J as __commonJSMin, K as focusManager, L as partialMatchKey, M as hashQueryKeyByOptions, P as matchMutation, U as skipToken, X as __require, Z as __toESM, _ as require_jsx_runtime, c as _enum, d as string, h as QueryClientProvider, j as hashKey, l as number, m as require_shim, n as SUPPORTED_LOCALES, p as require_react_dom, q as Subscribable, r as setLocale, t as SD, u as object, v as require_react, w as Query, y as Mutation } from "./assets/sd.generated-ek-tz-7H.js";
-import { A as decodePath, C as findRouteMatch, D as createLRUCache, E as processRouteTree, F as last, I as replaceEqualDeep, M as findLast, N as functionalUpdate$1, O as invariant, P as isPromise, S as findFlatMatch, T as processRouteMasks, _ as interpolatePath, a as Link$1, b as trimPath, c as usePrevious$1, d as useRouter, f as getRouterContext, g as cleanPath, h as isNotFound, i as createRootRouteWithContext, j as deepEqual$2, k as createControlledPromise, l as matchContext, m as rootRouteId, n as createFileRoute, p as warning, r as createLazyFileRoute, s as useLayoutEffect$3, t as lazyRouteComponent, u as useRouterState, v as joinPaths, w as findSingleMatch, x as trimPathRight, y as resolvePath } from "./assets/lazyRouteComponent-PRxXWW3t.js";
+import { A as functionalUpdate, B as resolveStaleTime, C as infiniteQueryBehavior, D as notifyManager, E as onlineManager, F as matchQuery, I as noop$1, J as __commonJSMin, K as focusManager, L as partialMatchKey, M as hashQueryKeyByOptions, P as matchMutation, U as skipToken, X as __require, Z as __toESM, _ as require_jsx_runtime, c as _enum, d as string, h as QueryClientProvider, j as hashKey, l as number, m as require_shim, n as SUPPORTED_LOCALES, p as require_react_dom, q as Subscribable, r as setLocale, t as SD, u as object, v as require_react, w as Query, y as Mutation } from "./assets/sd.generated-B0xqnHEo.js";
+import { A as decodePath, C as findRouteMatch, D as createLRUCache, E as processRouteTree, F as last, I as replaceEqualDeep, M as findLast, N as functionalUpdate$1, O as invariant, P as isPromise, S as findFlatMatch, T as processRouteMasks, _ as interpolatePath, a as Link$1, b as trimPath, c as usePrevious$1, d as useRouter, f as getRouterContext, g as cleanPath, h as isNotFound, i as createRootRouteWithContext, j as deepEqual$2, k as createControlledPromise, l as matchContext, m as rootRouteId, n as createFileRoute, p as warning, r as createLazyFileRoute, s as useLayoutEffect$3, t as lazyRouteComponent, u as useRouterState, v as joinPaths, w as findSingleMatch, x as trimPathRight, y as resolvePath } from "./assets/lazyRouteComponent-BaZaveNc.js";
 //#region ../../node_modules/.pnpm/@tanstack+query-core@5.95.2/node_modules/@tanstack/query-core/build/modern/hydration.js
 function defaultTransformerFn(data) {
 	return data;
@@ -22675,8 +22675,9 @@ var lucideTerminal = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg
 	})
 });
 //#endregion
-//#region src/components/Sidebar.tsx
-var sections = [{
+//#region src/components/nav-items.ts
+/** 사이드바(데스크톱)와 하단 탭 바(모바일)가 공유하는 단일 정의. */
+var NAV_SECTIONS = [{
 	label: "Overview",
 	items: [{
 		title: "Dashboard",
@@ -22693,23 +22694,57 @@ var sections = [{
 		},
 		{
 			title: "Request Logs",
+			shortTitle: "Logs",
 			path: "/logs",
 			icon: lucideFileText
 		},
 		{
 			title: "Server Logs",
+			shortTitle: "Server",
 			path: "/monit",
 			icon: lucideTerminal
 		}
 	]
 }];
-var qgridVersion = "2.6.1";
+var NAV_ITEMS = NAV_SECTIONS.flatMap((section) => section.items);
+function isNavItemActive(path, pathname) {
+	if (path === "/") return pathname === "/" || pathname === "";
+	return pathname.startsWith(path);
+}
+//#endregion
+//#region src/components/BottomNav.tsx
+/**
+* 좁은 화면 전용 하단 탭 바.
+*
+* 사이드바는 `md` 미만에서 숨겨지는데, 그러면 URL 을 직접 치지 않는 한 페이지 이동이
+* 불가능해진다. 항목이 4개뿐이라 햄버거 메뉴보다 탭 바가 맞다 — 한 번의 탭으로 이동하고
+* 현재 위치도 항상 보인다.
+*/
+function BottomNav() {
+	const pathname = useRouterState({ select: (s) => s.location.pathname });
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("nav", {
+		className: "md:hidden shrink-0 border-t border-sand-200/60 bg-sand-50/95 backdrop-blur-sm pb-[env(safe-area-inset-bottom)]",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+			className: "flex",
+			children: NAV_ITEMS.map((item) => {
+				const active = isNavItemActive(item.path, pathname);
+				return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link$1, {
+					to: item.path,
+					className: `flex-1 flex flex-col items-center gap-0.5 py-2 no-underline transition-colors duration-150 ${active ? "text-sienna-600" : "text-sand-500"}`,
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(item.icon, { className: `size-5 ${active ? "text-sienna-500" : "text-sand-400"}` }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+						className: `text-[10px] ${active ? "font-medium" : ""}`,
+						children: item.shortTitle ?? item.title
+					})]
+				}, item.path);
+			})
+		})
+	});
+}
+//#endregion
+//#region src/components/Sidebar.tsx
+var qgridVersion = "2.6.4";
 function Sidebar({ className }) {
 	const pathname = useRouterState({ select: (s) => s.location.pathname });
-	const isActive = (path) => {
-		if (path === "/") return pathname === "/" || pathname === "";
-		return pathname.startsWith(path);
-	};
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("aside", {
 		className: `hidden md:flex w-[200px] bg-sand-50 flex-col shrink-0 border-r border-sand-200/40 ${className ?? ""}`,
 		children: [
@@ -22722,7 +22757,7 @@ function Sidebar({ className }) {
 			}),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("nav", {
 				className: "flex-1 px-2.5 py-3 space-y-4 overflow-y-auto",
-				children: sections.map((section) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+				children: NAV_SECTIONS.map((section) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 					className: "px-2 pb-1.5",
 					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
 						className: "text-[10px] uppercase tracking-[0.08em] text-sand-400 font-medium",
@@ -22731,7 +22766,7 @@ function Sidebar({ className }) {
 				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
 					className: "space-y-0.5",
 					children: section.items.map((item) => {
-						const active = isActive(item.path);
+						const active = isNavItemActive(item.path, pathname);
 						return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Link$1, {
 							to: item.path,
 							className: `flex items-center gap-2 px-2 py-[6px] rounded-[7px] text-[13px] no-underline transition-all duration-150 ${active ? "bg-sand-200/60 text-sand-900 font-medium" : "text-sand-500 hover:bg-sand-100 hover:text-sand-700"}`,
@@ -22803,20 +22838,24 @@ function App({ children }) {
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
 		className: "flex h-screen w-full bg-sand-100 overflow-hidden font-sans",
 		children: [showSidebar && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Sidebar, {}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
-			className: "flex-1 flex flex-col overflow-hidden",
-			children: [showSidebar && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Toolbar, {}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
-				className: "flex-1 overflow-y-auto main-scroll content-inset",
-				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-					className: "px-6 py-5 md:px-8",
-					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_react.Suspense, {
-						fallback: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
-							className: "text-sand-400 text-center py-8 text-sm",
-							children: "로딩 중..."
-						}),
-						children
+			className: "flex-1 flex flex-col overflow-hidden min-w-0",
+			children: [
+				showSidebar && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Toolbar, {}),
+				/* @__PURE__ */ (0, import_jsx_runtime.jsx)("main", {
+					className: "flex-1 overflow-y-auto main-scroll content-inset",
+					children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+						className: "px-3 py-4 sm:px-6 sm:py-5 md:px-8",
+						children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_react.Suspense, {
+							fallback: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+								className: "text-sand-400 text-center py-8 text-sm",
+								children: "로딩 중..."
+							}),
+							children
+						})
 					})
-				})
-			})]
+				}),
+				showSidebar && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(BottomNav, {})
+			]
 		})]
 	});
 }
@@ -44584,11 +44623,11 @@ function RootComponent() {
 }
 //#endregion
 //#region src/routes/tokens.tsx
-var $$splitComponentImporter$4 = () => import("./assets/tokens-CvytQ9Xy.js");
+var $$splitComponentImporter$4 = () => import("./assets/tokens-h-2A3wfD.js");
 var Route$4 = createFileRoute("/tokens")({ component: lazyRouteComponent($$splitComponentImporter$4, "component") });
 //#endregion
 //#region src/routes/monit.tsx
-var $$splitComponentImporter$3 = () => import("./assets/monit-dBXxnAyI.js");
+var $$splitComponentImporter$3 = () => import("./assets/monit-UmcqHroX.js");
 var monitSearchSchema = object({ level: _enum([
 	"all",
 	"scaling",
@@ -44601,10 +44640,12 @@ var Route$3 = createFileRoute("/monit")({
 });
 //#endregion
 //#region src/routes/logs.tsx
-var $$splitComponentImporter$2 = () => import("./assets/logs-D0z1Ghj1.js");
+var $$splitComponentImporter$2 = () => import("./assets/logs-DMOw3SjD.js");
 var logsSearchSchema = object({
 	token: string().optional(),
 	project: string().optional(),
+	model: string().optional(),
+	sort: string().optional(),
 	page: number().optional().default(1)
 });
 var Route$2 = createFileRoute("/logs")({
@@ -44613,11 +44654,11 @@ var Route$2 = createFileRoute("/logs")({
 });
 //#endregion
 //#region src/routes/index.tsx
-var $$splitComponentImporter$1 = () => import("./assets/routes-B3p7fuwk.js");
+var $$splitComponentImporter$1 = () => import("./assets/routes-Sv_4FjtH.js");
 var Route$1 = createFileRoute("/")({ component: lazyRouteComponent($$splitComponentImporter$1, "component") });
 //#endregion
 //#region src/routes/requests/show.tsx
-var $$splitComponentImporter = () => import("./assets/show-0iNioJ2I.js");
+var $$splitComponentImporter = () => import("./assets/show-C-oSdzHX.js");
 var showSearchSchema = object({ id: number() });
 var Route = createFileRoute("/requests/show")({
 	validateSearch: showSearchSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cartanova/qgrid-cli",
-  "version": "2.6.1",
+  "version": "2.6.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/cartanova-ai/qgrid"

package/skills/qgrid/references/cli-env-and-server-boot.md

@@ -88,6 +88,14 @@ When helping a user set up qgrid locally, check for `QGRID_PROJECT_NAME` or conf
 
 On shutdown, it stops provider dispatchers and the token subscriber.
 
+### Readiness during startup
+
+HTTP listening opens before the dispatchers finish starting, so requests can arrive while a provider is still unavailable. On dev0 that window is 1–2 minutes: 25 OpenAI workers spawn at `SPAWN_INTERVAL_MS` apart, plus codex process init.
+
+- `QgridDispatcher.startupState` tracks each provider as `starting` → `ready` or `failed`. A request for an unready provider throws `ServiceUnavailableException` (503, with a `Retry-After` header) while starting, and `InternalServerErrorException` (500) once initialization has failed — retrying helps in the first case and never in the second. Both used to be `QuotaError`, which told callers their tokens were exhausted and gave them nothing to act on.
+- `GET /api/qgrid/health` reports `ready` plus per-provider state. A 200 alone does not mean requests will succeed; read `providers` for that.
+- `handleServerError` trusts `statusCode` only on `instanceof SoException`. Sonamu's own `isSoException` is a `statusCode !== undefined` duck-type check, which would pass upstream fetch errors straight through and echo an upstream 401 as if the caller were unauthorized.
+
 ## OAuth callbacks
 
 - Anthropic OAuth: loopback dashboards use `/callback` on the qgrid server (base derived per request from `Origin`, falling back to `X-Forwarded-Host`/`Host`). Remote dashboards cannot use a public callback (client redirect-URI allowlist), so `oauthStart` returns `mode: "code"` with the console callback and the user pastes the shown `code#state` into the dashboard (`oauthComplete`). No env configuration either way; direct non-HTTP calls fall back to localhost and `PORT`.

package/skills/qgrid/references/token-auth-quota-lifecycle.md

@@ -201,6 +201,17 @@ OpenAI token changes can create, update, deactivate, or kill persistent Codex wo
 
 Anthropic token changes only affect the in-memory token pool because every request fresh-spawns Claude Code.
 
+## Auth-Dead Detection And Token Registration
+
+When a refresh fails in a way that only re-login can fix, qgrid removes the token from routing instead of letting every subsequent request 401.
+
+- Detection lives at the existing refresh failure points, not a background scanner. OpenAI classifies on the error code (`refresh_token_expired`, `refresh_token_reused`, `refresh_token_invalidated`) regardless of HTTP status; Anthropic treats refresh 400/401 as auth-dead.
+- Before deactivating, qgrid re-reads the token and confirms the refresh token used by the failed attempt still matches the stored one. Anthropic refresh tokens rotate, so a late retry carrying an already-rotated token is a normal race, not a death — those are logged and skipped. `QgridFrame.refreshToken` also dedups concurrent refreshes per token.
+- Deactivation is one conditional `active=true → false` update. The process whose update affects a row is the only one that sends the Slack death notification, so a shared database produces exactly one alert per event.
+- The provider's last active token is never auto-deactivated. A systemic failure (client_id revocation, OAuth contract change) would otherwise empty the pool; qgrid logs an error, keeps the token, and sends its own Slack alert. That path leaves no state change behind, so every following request would re-alert — a per-provider 30-minute cooldown holds it to one. The cooldown is in-process, so N instances can each emit once per window.
+- The other notification is registration: every completed login sends one alert, whether the account is new or replacing an existing row through the account dedup. Manually toggling a token back to active is not a registration and sends nothing.
+- Notifications are fail-open: unset `SLACK_BOT_TOKEN`/`SLACK_CHANNEL_ID` is a silent no-op, and send failures (including HTTP 200 with `ok:false`) only warn. Payloads carry an internal reason code such as `anthropic:400`, never the raw provider response body.
+
 ## Quota Threshold Semantics
 
 `quota_threshold` is a routing gate, not a hard external-provider guarantee.