@cartanova/qgrid-cli 2.6.6 → 2.6.8

package/bundle/web-dist/server/assets/settings-CMJKayff.js

@@ -0,0 +1,332 @@
+import { Y as __toESM, g as require_react, h as require_jsx_runtime, m as useQueryClient } from "./sd.generated-LO-h1_16.js";
+import { a as SettingService } from "./services.generated-DADr9OGH.js";
+import { t as lucidePlus } from "./plus-BISXNqRU.js";
+//#region ~icons/lucide/eye.jsx
+var import_react = /* @__PURE__ */ __toESM(require_react());
+var import_jsx_runtime = require_jsx_runtime();
+var lucideEye = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+	viewBox: "0 0 24 24",
+	width: "1.2em",
+	height: "1.2em",
+	...props,
+	children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("g", {
+		fill: "none",
+		stroke: "currentColor",
+		strokeLinecap: "round",
+		strokeLinejoin: "round",
+		strokeWidth: 2,
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M2.062 12.348a1 1 0 0 1 0-.696a10.75 10.75 0 0 1 19.876 0a1 1 0 0 1 0 .696a10.75 10.75 0 0 1-19.876 0" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("circle", {
+			cx: 12,
+			cy: 12,
+			r: 3
+		})]
+	})
+});
+//#endregion
+//#region ~icons/lucide/eye-off.jsx
+var lucideEyeOff = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+	viewBox: "0 0 24 24",
+	width: "1.2em",
+	height: "1.2em",
+	...props,
+	children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("g", {
+		fill: "none",
+		stroke: "currentColor",
+		strokeLinecap: "round",
+		strokeLinejoin: "round",
+		strokeWidth: 2,
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M10.733 5.076a10.744 10.744 0 0 1 11.205 6.575a1 1 0 0 1 0 .696a10.8 10.8 0 0 1-1.444 2.49m-6.41-.679a3 3 0 0 1-4.242-4.242" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M17.479 17.499a10.75 10.75 0 0 1-15.417-5.151a1 1 0 0 1 0-.696a10.75 10.75 0 0 1 4.446-5.143M2 2l20 20" })]
+	})
+});
+//#endregion
+//#region ~icons/lucide/minus.jsx
+var lucideMinus = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+	viewBox: "0 0 24 24",
+	width: "1.2em",
+	height: "1.2em",
+	...props,
+	children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", {
+		fill: "none",
+		stroke: "currentColor",
+		strokeLinecap: "round",
+		strokeLinejoin: "round",
+		strokeWidth: 2,
+		d: "M5 12h14"
+	})
+});
+//#endregion
+//#region ~icons/lucide/rotate-ccw.jsx
+var lucideRotateCcw = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+	viewBox: "0 0 24 24",
+	width: "1.2em",
+	height: "1.2em",
+	...props,
+	children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("g", {
+		fill: "none",
+		stroke: "currentColor",
+		strokeLinecap: "round",
+		strokeLinejoin: "round",
+		strokeWidth: 2,
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M3 12a9 9 0 1 0 9-9a9.75 9.75 0 0 0-6.74 2.74L3 8" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M3 3v5h5" })]
+	})
+});
+//#endregion
+//#region src/components/qgrid/SettingsPanel.tsx
+var GROUP_LABELS = {
+	openai: "OpenAI 워커",
+	slack: "Slack 알림"
+};
+function maskValue(value) {
+	if (!value) return "";
+	if (value.length <= 12) return "•".repeat(value.length);
+	return `${value.slice(0, 8)}${"•".repeat(12)}${value.slice(-4)}`;
+}
+/** 정수·실수는 타이핑보다 증감이 빠르다. 범위도 버튼이 알아서 지킨다. */
+function Stepper({ value, min, max, step, disabled, onChange }) {
+	const current = Number(value);
+	const valid = Number.isFinite(current);
+	const lower = min ?? Number.NEGATIVE_INFINITY;
+	const upper = max ?? Number.POSITIVE_INFINITY;
+	const adjust = (delta) => {
+		const next = Math.min(Math.max((valid ? current : min ?? 0) + delta, lower), upper);
+		onChange(String(Number(next.toFixed(2))));
+	};
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "inline-flex items-center rounded-lg border border-sand-200/80 bg-white overflow-hidden",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+				type: "button",
+				"aria-label": "감소",
+				onClick: () => adjust(-step),
+				disabled: disabled || valid && current <= lower,
+				className: "size-7 grid place-items-center text-sand-500 hover:bg-sand-100 disabled:opacity-30 disabled:hover:bg-transparent transition-colors duration-150",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(lucideMinus, { className: "size-3" })
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("input", {
+				value,
+				onChange: (e) => onChange(e.target.value),
+				disabled,
+				inputMode: "decimal",
+				className: "w-12 text-center text-[12px] tabular-nums text-sand-800 bg-transparent border-x border-sand-200/80 py-1 focus:outline-none focus:bg-sand-50"
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+				type: "button",
+				"aria-label": "증가",
+				onClick: () => adjust(step),
+				disabled: disabled || valid && current >= upper,
+				className: "size-7 grid place-items-center text-sand-500 hover:bg-sand-100 disabled:opacity-30 disabled:hover:bg-transparent transition-colors duration-150",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(lucidePlus, { className: "size-3" })
+			})
+		]
+	});
+}
+function Toggle({ on, disabled, onChange }) {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+		type: "button",
+		role: "switch",
+		"aria-checked": on,
+		disabled,
+		onClick: () => onChange(!on),
+		className: `relative inline-flex h-5 w-9 shrink-0 items-center rounded-full transition-colors duration-200 disabled:opacity-50 ${on ? "bg-sage-400" : "bg-sand-300"}`,
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { className: `inline-block h-3.5 w-3.5 rounded-full bg-white transition-transform duration-200 ${on ? "translate-x-4.5" : "translate-x-0.5"}` })
+	});
+}
+function SettingRow({ item }) {
+	const [draft, setDraft] = (0, import_react.useState)(null);
+	const [revealed, setRevealed] = (0, import_react.useState)(false);
+	const [error, setError] = (0, import_react.useState)(null);
+	const queryClient = useQueryClient();
+	const updateMutation = SettingService.useUpdateSettingMutation();
+	const resetMutation = SettingService.useResetSettingMutation();
+	const pending = updateMutation.isPending || resetMutation.isPending;
+	const value = draft ?? item.value;
+	const dirty = draft !== null && draft !== item.value;
+	const invalidate = () => queryClient.invalidateQueries({ queryKey: ["Setting", "getSettingList"] });
+	const commit = async (next) => {
+		setError(null);
+		try {
+			await updateMutation.mutateAsync({
+				key: item.key,
+				value: next
+			});
+			await invalidate();
+			setDraft(null);
+		} catch (e) {
+			setError(e.message);
+		}
+	};
+	const reset = async () => {
+		setError(null);
+		try {
+			await resetMutation.mutateAsync({ key: item.key });
+			await invalidate();
+			setDraft(null);
+		} catch (e) {
+			setError(e.message);
+		}
+	};
+	const isToggle = item.kind === "boolean";
+	const isNumeric = item.kind === "integer" || item.kind === "number";
+	const isSecret = item.kind === "secret";
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "px-4 py-3 sm:px-5",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			className: "flex items-start gap-4",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "min-w-0 flex-1",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+					className: "flex items-center gap-2",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+						className: "text-[13px] text-sand-800",
+						children: item.label
+					}), item.applies === "restart" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+						className: "text-[10px] text-caution-500",
+						title: "저장해도 다음 재시작부터 반영됩니다",
+						children: "재시작 필요"
+					})]
+				}), item.help && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "mt-0.5 text-[11px] text-sand-500",
+					children: item.help
+				})]
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex items-center gap-1.5 shrink-0",
+				children: [
+					isToggle && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Toggle, {
+						on: value === "true",
+						disabled: pending,
+						onChange: (next) => void commit(String(next))
+					}),
+					isNumeric && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Stepper, {
+						value,
+						min: item.min,
+						max: item.max,
+						step: item.kind === "integer" ? 1 : .5,
+						disabled: pending,
+						onChange: setDraft
+					}),
+					(item.kind === "string" || isSecret) && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+						className: "relative",
+						children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("input", {
+							value: isSecret && !revealed ? maskValue(value) : value,
+							onChange: (e) => setDraft(e.target.value),
+							onFocus: () => isSecret && setRevealed(true),
+							disabled: pending,
+							className: `w-48 sm:w-64 rounded-lg border border-sand-200/80 bg-white py-1.5 pl-2.5 text-[12px] text-sand-800 focus:outline-none focus:border-sienna-300 ${isSecret ? "pr-8 font-mono" : "pr-2.5"}`
+						}), isSecret && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+							type: "button",
+							"aria-label": revealed ? "값 숨기기" : "값 보기",
+							onClick: () => setRevealed((r) => !r),
+							className: "absolute right-1.5 top-1/2 -translate-y-1/2 size-6 grid place-items-center text-sand-400 hover:text-sand-600 transition-colors duration-150",
+							children: revealed ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(lucideEyeOff, { className: "size-3.5" }) : /* @__PURE__ */ (0, import_jsx_runtime.jsx)(lucideEye, { className: "size-3.5" })
+						})]
+					}),
+					dirty && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+						type: "button",
+						onClick: () => void commit(value),
+						disabled: pending,
+						className: "px-2.5 py-1.5 text-[11px] font-medium rounded-lg bg-sienna-400 text-white hover:bg-sienna-500 disabled:opacity-50 transition-colors duration-150",
+						children: updateMutation.isPending ? "저장 중" : "저장"
+					}),
+					!dirty && item.source === "db" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
+						type: "button",
+						title: "저장값을 지우고 env 또는 기본값으로 되돌립니다",
+						onClick: () => void reset(),
+						disabled: pending,
+						className: "size-7 grid place-items-center rounded-lg text-sand-400 hover:text-sand-600 hover:bg-sand-100 disabled:opacity-50 transition-colors duration-150",
+						children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(lucideRotateCcw, { className: "size-3.5" })
+					})
+				]
+			})]
+		}), error && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+			className: "mt-1.5 text-[11px] text-red-500",
+			children: error
+		})]
+	});
+}
+function SourceLegend({ items }) {
+	const stored = items.filter((i) => i.source === "db").length;
+	if (stored === 0) return null;
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("span", {
+		className: "text-[11px] text-sand-400",
+		children: [stored, "개 항목이 저장값을 사용 중"]
+	});
+}
+function SettingsPanel() {
+	const { data, isLoading } = SettingService.useSettingList();
+	if (isLoading) return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+		className: "space-y-4",
+		children: [0, 1].map((i) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			className: "panel overflow-hidden",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+				className: "panel-header px-4 py-2.5 sm:px-5",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "h-3 w-24 rounded bg-sand-200 animate-pulse" })
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+				className: "divide-y divide-sand-100/80",
+				children: [
+					0,
+					1,
+					2
+				].map((j) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+					className: "px-4 py-3 sm:px-5 flex items-center justify-between gap-4",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "h-3 w-40 rounded bg-sand-100 animate-pulse" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { className: "h-7 w-24 rounded-lg bg-sand-100 animate-pulse" })]
+				}, j))
+			})]
+		}, i))
+	});
+	const settings = data?.settings ?? [];
+	const runtime = data?.runtime ?? [];
+	const groups = [...new Set(settings.map((s) => s.group))];
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+		className: "space-y-4",
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+			className: "panel overflow-hidden",
+			children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "panel-header flex items-center justify-between px-4 py-2.5 sm:px-5",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+					className: "text-[13px] font-medium text-sand-700",
+					children: "환경"
+				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+					className: "text-[11px] text-sand-400",
+					children: "기동 시점 값"
+				})]
+			}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dl", {
+				className: "px-4 py-3 sm:px-5 grid grid-cols-1 sm:grid-cols-2 gap-x-8 gap-y-1.5",
+				children: runtime.map((info) => /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+					className: "flex items-baseline justify-between gap-3 min-w-0",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("dt", {
+						className: "text-[11px] text-sand-500 shrink-0",
+						children: info.label
+					}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("dd", {
+						className: "text-[12px] font-mono text-sand-700 truncate",
+						children: info.value
+					})]
+				}, info.label))
+			})]
+		}), groups.map((group) => {
+			const items = settings.filter((s) => s.group === group);
+			return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "panel overflow-hidden",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+					className: "panel-header flex items-center justify-between px-4 py-2.5 sm:px-5",
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", {
+						className: "text-[13px] font-medium text-sand-700",
+						children: GROUP_LABELS[group] ?? group
+					}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SourceLegend, { items })]
+				}), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+					className: "divide-y divide-sand-100/80",
+					children: items.map((item) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SettingRow, { item }, item.key))
+				})]
+			}, group);
+		})]
+	});
+}
+//#endregion
+//#region src/routes/settings.tsx?tsr-split=component
+function SettingsPage() {
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", {
+		className: "max-w-4xl mx-auto",
+		children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(SettingsPanel, {})
+	});
+}
+//#endregion
+export { SettingsPage as component };

package/bundle/web-dist/server/assets/{show-C-oSdzHX.js → show-BGAiCPGq.js}

@@ -1,8 +1,8 @@
-import { J as __commonJSMin, Y as __exportAll, Z as __toESM, _ as require_jsx_runtime, v as require_react } from "./sd.generated-B0xqnHEo.js";
-import { i as RequestLogStepService, r as RequestLogService } from "./services.generated-DqAKskAS.js";
-import { a as Link } from "./lazyRouteComponent-BaZaveNc.js";
+import { K as __commonJSMin, Y as __toESM, g as require_react, h as require_jsx_runtime, q as __exportAll } from "./sd.generated-LO-h1_16.js";
+import { i as RequestLogStepService, r as RequestLogService } from "./services.generated-DADr9OGH.js";
+import { a as Link } from "./lazyRouteComponent-Ws7I6fL-.js";
 import { t as Route } from "../entry-server.generated.js";
-import { n as formatMicroUsd, t as cacheHitRate } from "./cost-CSH_t17I.js";
+import { n as formatMicroUsd, t as cacheHitRate } from "./cost-DzjfVtUr.js";
 import minpath from "node:path";
 import minproc from "node:process";
 import { fileURLToPath as urlToPath } from "node:url";

package/bundle/web-dist/server/assets/{tokens-Dkd_uXEk.js → tokens-DmhIfVct.js}

@@ -1,26 +1,11 @@
-import { Z as __toESM, _ as require_jsx_runtime, g as useQueryClient, v as require_react } from "./sd.generated-B0xqnHEo.js";
-import { a as TokenService, n as QgridService } from "./services.generated-DqAKskAS.js";
+import { Y as __toESM, g as require_react, h as require_jsx_runtime, m as useQueryClient } from "./sd.generated-LO-h1_16.js";
+import { n as QgridService, o as TokenService } from "./services.generated-DADr9OGH.js";
 import { i as Q, o as lucideKeyRound } from "../entry-server.generated.js";
-import { n as OAuthCodeEntry, r as useUpdateTokenMutation, t as useOAuthLoginFlow } from "./use-oauth-login-flow-YM1nsd-H.js";
-//#region ~icons/lucide/plus.jsx
-var import_react = /* @__PURE__ */ __toESM(require_react());
-var import_jsx_runtime = require_jsx_runtime();
-var lucidePlus = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
-	viewBox: "0 0 24 24",
-	width: "1.2em",
-	height: "1.2em",
-	...props,
-	children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", {
-		fill: "none",
-		stroke: "currentColor",
-		strokeLinecap: "round",
-		strokeLinejoin: "round",
-		strokeWidth: 2,
-		d: "M5 12h14m-7-7v14"
-	})
-});
-//#endregion
+import { n as OAuthCodeEntry, r as useUpdateTokenMutation, t as useOAuthLoginFlow } from "./use-oauth-login-flow-B6MY65IN.js";
+import { t as lucidePlus } from "./plus-BISXNqRU.js";
 //#region src/components/qgrid/AddTokenModal.tsx
+var import_react = /* @__PURE__ */ __toESM(require_react(), 1);
+var import_jsx_runtime = require_jsx_runtime();
 function AddTokenModal() {
 	const [open, setOpen] = (0, import_react.useState)(false);
 	const [name, setName] = (0, import_react.useState)("");

package/bundle/web-dist/server/assets/{use-oauth-login-flow-YM1nsd-H.js → use-oauth-login-flow-B6MY65IN.js}

@@ -1,5 +1,5 @@
-import { Z as __toESM, _ as require_jsx_runtime, g as useQueryClient, v as require_react } from "./sd.generated-B0xqnHEo.js";
-import { n as QgridService, o as useMutation } from "./services.generated-DqAKskAS.js";
+import { Y as __toESM, g as require_react, h as require_jsx_runtime, m as useQueryClient } from "./sd.generated-LO-h1_16.js";
+import { n as QgridService, s as useMutation } from "./services.generated-DADr9OGH.js";
 import { i as Q } from "../entry-server.generated.js";
 //#region src/services/token/use-update-token-mutation.ts
 function useUpdateTokenMutation() {

package/bundle/web-dist/server/entry-server.generated.js

@@ -1,5 +1,6 @@
-import { A as functionalUpdate, B as resolveStaleTime, C as infiniteQueryBehavior, D as notifyManager, E as onlineManager, F as matchQuery, I as noop$1, J as __commonJSMin, K as focusManager, L as partialMatchKey, M as hashQueryKeyByOptions, P as matchMutation, U as skipToken, X as __require, Z as __toESM, _ as require_jsx_runtime, c as _enum, d as string, h as QueryClientProvider, j as hashKey, l as number, m as require_shim, n as SUPPORTED_LOCALES, p as require_react_dom, q as Subscribable, r as setLocale, t as SD, u as object, v as require_react, w as Query, y as Mutation } from "./assets/sd.generated-B0xqnHEo.js";
-import { A as decodePath, C as findRouteMatch, D as createLRUCache, E as processRouteTree, F as last, I as replaceEqualDeep, M as findLast, N as functionalUpdate$1, O as invariant, P as isPromise, S as findFlatMatch, T as processRouteMasks, _ as interpolatePath, a as Link$1, b as trimPath, c as usePrevious$1, d as useRouter, f as getRouterContext, g as cleanPath, h as isNotFound, i as createRootRouteWithContext, j as deepEqual$2, k as createControlledPromise, l as matchContext, m as rootRouteId, n as createFileRoute, p as warning, r as createLazyFileRoute, s as useLayoutEffect$3, t as lazyRouteComponent, u as useRouterState, v as joinPaths, w as findSingleMatch, x as trimPathRight, y as resolvePath } from "./assets/lazyRouteComponent-BaZaveNc.js";
+import { A as hashQueryKeyByOptions, F as partialMatchKey, G as Subscribable, J as __require, K as __commonJSMin, M as matchMutation, N as matchQuery, O as functionalUpdate, P as noop$1, R as resolveStaleTime, S as Query, T as notifyManager, V as skipToken, W as focusManager, Y as __toESM, _ as Mutation, c as _enum, d as string, g as require_react, h as require_jsx_runtime, k as hashKey, l as number, n as SUPPORTED_LOCALES, p as QueryClientProvider, r as setLocale, t as SD, u as object, w as onlineManager, x as infiniteQueryBehavior } from "./assets/sd.generated-LO-h1_16.js";
+import { A as decodePath, C as findRouteMatch, D as createLRUCache, E as processRouteTree, F as last, I as replaceEqualDeep, M as findLast, N as functionalUpdate$1, O as invariant, P as isPromise, S as findFlatMatch, T as processRouteMasks, _ as interpolatePath, a as Link$1, b as trimPath, c as usePrevious$1, d as useRouter, f as getRouterContext, g as cleanPath, h as isNotFound, i as createRootRouteWithContext, j as deepEqual$2, k as createControlledPromise, l as matchContext, m as rootRouteId, n as createFileRoute, p as warning, r as createLazyFileRoute, s as useLayoutEffect$3, t as lazyRouteComponent, u as useRouterState, v as joinPaths, w as findSingleMatch, x as trimPathRight, y as resolvePath } from "./assets/lazyRouteComponent-Ws7I6fL-.js";
+import { n as require_shim, t as require_react_dom } from "./assets/react-dom-D7duWOwf.js";
 //#region ../../node_modules/.pnpm/@tanstack+query-core@5.95.2/node_modules/@tanstack/query-core/build/modern/hydration.js
 function defaultTransformerFn(data) {
 	return data;
@@ -22659,6 +22660,26 @@ var lucideKeyRound = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg
 	})
 });
 //#endregion
+//#region ~icons/lucide/settings.jsx
+var lucideSettings = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
+	viewBox: "0 0 24 24",
+	width: "1.2em",
+	height: "1.2em",
+	...props,
+	children: /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("g", {
+		fill: "none",
+		stroke: "currentColor",
+		strokeLinecap: "round",
+		strokeLinejoin: "round",
+		strokeWidth: 2,
+		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("path", { d: "M9.671 4.136a2.34 2.34 0 0 1 4.659 0a2.34 2.34 0 0 0 3.319 1.915a2.34 2.34 0 0 1 2.33 4.033a2.34 2.34 0 0 0 0 3.831a2.34 2.34 0 0 1-2.33 4.033a2.34 2.34 0 0 0-3.319 1.915a2.34 2.34 0 0 1-4.659 0a2.34 2.34 0 0 0-3.32-1.915a2.34 2.34 0 0 1-2.33-4.033a2.34 2.34 0 0 0 0-3.831A2.34 2.34 0 0 1 6.35 6.051a2.34 2.34 0 0 0 3.319-1.915" }), /* @__PURE__ */ (0, import_jsx_runtime.jsx)("circle", {
+			cx: 12,
+			cy: 12,
+			r: 3
+		})]
+	})
+});
+//#endregion
 //#region ~icons/lucide/terminal.jsx
 var lucideTerminal = (props) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("svg", {
 	viewBox: "0 0 24 24",
@@ -22703,6 +22724,11 @@ var NAV_SECTIONS = [{
 			shortTitle: "Server",
 			path: "/monit",
 			icon: lucideTerminal
+		},
+		{
+			title: "Settings",
+			path: "/settings",
+			icon: lucideSettings
 		}
 	]
 }];
@@ -22742,7 +22768,7 @@ function BottomNav() {
 }
 //#endregion
 //#region src/components/Sidebar.tsx
-var qgridVersion = "2.6.6";
+var qgridVersion = "2.6.8";
 function Sidebar({ className }) {
 	const pathname = useRouterState({ select: (s) => s.location.pathname });
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("aside", {
@@ -44577,7 +44603,7 @@ function SonamuProvider({ children }) {
 }
 //#endregion
 //#region src/routes/__root.tsx
-var Route$5 = createRootRouteWithContext()({
+var Route$6 = createRootRouteWithContext()({
 	head: () => ({ meta: [
 		{ charSet: "utf-8" },
 		{
@@ -44589,7 +44615,7 @@ var Route$5 = createRootRouteWithContext()({
 	component: RootComponent
 });
 function RootComponent() {
-	const { queryClient } = Route$5.useRouteContext();
+	const { queryClient } = Route$6.useRouteContext();
 	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("html", {
 		lang: "en",
 		children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("head", { children: [
@@ -44623,11 +44649,15 @@ function RootComponent() {
 }
 //#endregion
 //#region src/routes/tokens.tsx
-var $$splitComponentImporter$4 = () => import("./assets/tokens-Dkd_uXEk.js");
-var Route$4 = createFileRoute("/tokens")({ component: lazyRouteComponent($$splitComponentImporter$4, "component") });
+var $$splitComponentImporter$5 = () => import("./assets/tokens-DmhIfVct.js");
+var Route$5 = createFileRoute("/tokens")({ component: lazyRouteComponent($$splitComponentImporter$5, "component") });
+//#endregion
+//#region src/routes/settings.tsx
+var $$splitComponentImporter$4 = () => import("./assets/settings-CMJKayff.js");
+var Route$4 = createFileRoute("/settings")({ component: lazyRouteComponent($$splitComponentImporter$4, "component") });
 //#endregion
 //#region src/routes/monit.tsx
-var $$splitComponentImporter$3 = () => import("./assets/monit-UmcqHroX.js");
+var $$splitComponentImporter$3 = () => import("./assets/monit-DyKLJX4s.js");
 var monitSearchSchema = object({ level: _enum([
 	"all",
 	"scaling",
@@ -44640,7 +44670,7 @@ var Route$3 = createFileRoute("/monit")({
 });
 //#endregion
 //#region src/routes/logs.tsx
-var $$splitComponentImporter$2 = () => import("./assets/logs-DMOw3SjD.js");
+var $$splitComponentImporter$2 = () => import("./assets/logs-DmkzGxGU.js");
 var logsSearchSchema = object({
 	token: string().optional(),
 	project: string().optional(),
@@ -44654,11 +44684,11 @@ var Route$2 = createFileRoute("/logs")({
 });
 //#endregion
 //#region src/routes/index.tsx
-var $$splitComponentImporter$1 = () => import("./assets/routes-BfoQmYud.js");
+var $$splitComponentImporter$1 = () => import("./assets/routes-g62E9xmC.js");
 var Route$1 = createFileRoute("/")({ component: lazyRouteComponent($$splitComponentImporter$1, "component") });
 //#endregion
 //#region src/routes/requests/show.tsx
-var $$splitComponentImporter = () => import("./assets/show-C-oSdzHX.js");
+var $$splitComponentImporter = () => import("./assets/show-BGAiCPGq.js");
 var showSearchSchema = object({ id: number() });
 var Route = createFileRoute("/requests/show")({
 	validateSearch: showSearchSchema,
@@ -44666,37 +44696,43 @@ var Route = createFileRoute("/requests/show")({
 });
 //#endregion
 //#region src/routeTree.gen.ts
-var TokensRoute = Route$4.update({
+var TokensRoute = Route$5.update({
 	id: "/tokens",
 	path: "/tokens",
-	getParentRoute: () => Route$5
+	getParentRoute: () => Route$6
+});
+var SettingsRoute = Route$4.update({
+	id: "/settings",
+	path: "/settings",
+	getParentRoute: () => Route$6
 });
 var MonitRoute = Route$3.update({
 	id: "/monit",
 	path: "/monit",
-	getParentRoute: () => Route$5
+	getParentRoute: () => Route$6
 });
 var LogsRoute = Route$2.update({
 	id: "/logs",
 	path: "/logs",
-	getParentRoute: () => Route$5
+	getParentRoute: () => Route$6
 });
 var rootRouteChildren = {
 	IndexRoute: Route$1.update({
 		id: "/",
 		path: "/",
-		getParentRoute: () => Route$5
+		getParentRoute: () => Route$6
 	}),
 	LogsRoute,
 	MonitRoute,
+	SettingsRoute,
 	TokensRoute,
 	RequestsShowRoute: Route.update({
 		id: "/requests/show",
 		path: "/requests/show",
-		getParentRoute: () => Route$5
+		getParentRoute: () => Route$6
 	})
 };
-var routeTree = Route$5._addFileChildren(rootRouteChildren)._addFileTypes();
+var routeTree = Route$6._addFileChildren(rootRouteChildren)._addFileTypes();
 //#endregion
 //#region src/entry-server.generated.tsx
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cartanova/qgrid-cli",
-  "version": "2.6.6",
+  "version": "2.6.8",
   "repository": {
     "type": "git",
     "url": "https://github.com/cartanova-ai/qgrid"

package/skills/qgrid/references/cli-env-and-server-boot.md

@@ -69,8 +69,8 @@ When helping a user set up qgrid locally, check for `QGRID_PROJECT_NAME` or conf
 | `QGRID_OPENAI_MAX_WORKERS_PER_TOKEN` | `3` when autoscaling | Maximum workers per active OpenAI token. It cannot be lower than the resolved minimum and is hard-capped at 20. When autoscaling is disabled, the maximum equals the minimum. |
 | `QGRID_OPENAI_SCALE_INTERVAL_MS` | `5000` | OpenAI pool health, idle-thread cleanup, and demand autoscaling evaluation interval. Clamped to 250..300000 ms. |
 | `QGRID_OPENAI_SCALE_DOWN_IDLE_MS` | `600000` | Idle time before an excess worker becomes eligible for scale-down. Clamped to 1000 ms..24 hours. |
-| `QGRID_OPENAI_MAX_ESTIMATED_RSS_GIB` | `16` | Refuse scale-up when estimated qgrid worker RSS would exceed this value. Estimate: `0.71 + 0.157 * totalWorkerCount` GiB. |
-| `QGRID_OPENAI_MIN_HOST_AVAILABLE_GIB` | `20` | Refuse scale-up when current host available memory is below this value. |
+| `QGRID_OPENAI_MAX_ESTIMATED_RSS_GIB` | `16` | Refuse scale-up when estimated qgrid worker RSS would exceed this value. Estimate: `0.71 + 0.157 * totalWorkerCount` GiB. Clamped to 1..32 GiB; the upper bound is an operator-typo guard, not an OOM-safety guarantee. |
+| `QGRID_OPENAI_MIN_HOST_AVAILABLE_GIB` | `20` | Refuse scale-up when current host available memory is below this value. Clamped to 0..64 GiB. |
 | `QGRID_OPENAI_THREAD_REUSE` | enabled | Set to `"false"` to disable OpenAI thread reuse and force cold thread behavior. |
 | `MAX_STRUCTURED_OUTPUT_RETRIES` | `1` for structured Anthropic streaming calls | Claude Code structured-output retry count for streaming only, clamped to at least 1 by qgrid. Non-streaming `generate` leaves the variable unset and uses Claude Code's default retry budget. |
 
@@ -88,6 +88,18 @@ When helping a user set up qgrid locally, check for `QGRID_PROJECT_NAME` or conf
 
 On shutdown, it stops provider dispatchers and the token subscriber.
 
+### Runtime settings
+
+Some env values are editable at runtime through the dashboard's Settings page, backed by the `settings` table (key-value). Resolution order is DB → env → code default: env stays as a fallback so a deploy that has not written any setting yet keeps working exactly as before. `loadSettings()` runs in `onStart` before the dispatchers are constructed, since the OpenAI pool reads its worker counts in its constructor.
+
+- Editable: OpenAI autoscale and min/max workers per token, the worker memory guards, the Slack expiry-reminder interval, and the Slack channel/user-map/bot-token. `SETTING_DEFS` in `setting.schema.ts` is the single definition — key, env name, type, bounds, and whether the change applies immediately or needs a restart.
+- Not editable: anything needed before the server can read its own database (`QGRID_DB_*`, `HOST`, `PORT`, `NODE_ENV`). These are exposed read-only on the same page so an operator can confirm which environment they are looking at; the DB password is masked.
+- Worker settings are marked `restart` because `resolveOpenAIWorkerPoolConfig` is called once in the dispatcher constructor. Changing them writes to the DB but does not resize a running pool.
+- Slack channel, bot-token, and user-map changes are read on the next notification. Changing the expiry-reminder interval replaces the current timer immediately without sending a notification merely because the setting changed; process boot still performs the intended immediate reminder run.
+- `immediate` means the API process that handled the update. The in-memory settings cache is not propagated to sibling processes; multi-instance deployments need a separate settings-change transport before treating the label as cluster-wide.
+- The public settings API exposes the curated list/set/reset methods only. Keep generic Sonamu `save`/`del` methods internal so callers cannot bypass key validation, cache updates, or runtime change hooks.
+- The settings response returns the Slack bot token in full so the authenticated dashboard can support its reveal toggle. Treat that endpoint as an operator-only surface at the deployment boundary; dev0 relies on Caddy authentication for the dashboard. The database password remains masked and is never returned in full.
+
 ### Readiness during startup
 
 HTTP listening opens before the dispatchers finish starting, so requests can arrive while a provider is still unavailable. On dev0 that window is 1–2 minutes: 25 OpenAI workers spawn at `SPAWN_INTERVAL_MS` apart, plus codex process init.

package/skills/qgrid/references/openai-codex-runtime.md

@@ -34,7 +34,7 @@ Autoscaling is enabled unless `QGRID_OPENAI_AUTOSCALE` is `"false"` or `"0"`. It
 - estimated qgrid worker RSS: `0.71 + 0.157 * totalWorkerCount` GiB, limited to 16 GiB by default;
 - current host available memory at scale-up evaluation time, required to be at least 20 GiB by default.
 
-All sizing and memory limits can be overridden with the environment variables listed in `cli-env-and-server-boot.md`.
+All sizing and memory limits can be configured within the bounds listed in `cli-env-and-server-boot.md`.
 
 Pool health maintenance is separate from demand autoscaling:
 

package/skills/qgrid/references/sonamu-api-web-flow.md

@@ -20,6 +20,8 @@ qgrid dashboard work is usually a Sonamu API/model/generated-client/web change,
 - i18n generated files may change when entity labels or static data change.
 - Web components under `packages/web/src/components/qgrid` consume generated API shapes.
 - The main dashboard sidebar version should stay synced to `packages/cli/package.json`. `packages/web/vite.config.ts` reads that package version and exposes it as `__QGRID_CLI_VERSION__`; `Sidebar.tsx` displays it.
+- Runtime settings use the curated `listSettings`, `setSetting`, and `resetSetting` API methods. Do not expose the model's generic `save` or `del` methods: they bypass the settings schema validation, process-local cache update, and runtime change handler.
+- The Slack bot token is returned to the authenticated settings dashboard for its reveal toggle. Preserve the deployment authentication boundary when changing this response; do not describe the value as masked unless the API contract is changed to match.
 
 ## Migration workflow
 

package/skills/qgrid/references/token-auth-quota-lifecycle.md

@@ -210,8 +210,9 @@ When a refresh fails in a way that only re-login can fix, qgrid removes the toke
 - Deactivation is one conditional `active=true → false` update. The process whose update affects a row is the only one that sends the Slack death notification, so a shared database produces exactly one alert per event.
 - The provider's last active token is never auto-deactivated. A systemic failure (client_id revocation, OAuth contract change) would otherwise empty the pool; qgrid logs an error, keeps the token, and sends its own Slack alert. That path leaves no state change behind, so every following request would re-alert — a per-provider 30-minute cooldown holds it to one. The cooldown is in-process, so N instances can each emit once per window.
 - The other notification is registration: every completed login sends one alert, whether the account is new or replacing an existing row through the account dedup. Manually toggling a token back to active is not a registration and sends nothing.
+- Quiet hours suppress non-urgent Slack notifications: weekends, plus 20:00–08:00 on weekdays, in `Asia/Seoul`. The hour is computed through `Intl` with an explicit timezone rather than `getHours()` — dev0 runs in UTC, where "20:00" would land at 05:00 Korean time. Expiry alerts repeat, so one dropped in quiet hours returns on the first cycle of the next working window. The last-active-token death alert sets `urgent: true` and ignores quiet hours: it means the provider pool is empty, which cannot wait for the next working day.
 - Notifications are fail-open: unset `SLACK_BOT_TOKEN`/`SLACK_CHANNEL_ID` is a silent no-op, and send failures (including HTTP 200 with `ok:false`) only warn. Payloads carry an internal reason code such as `anthropic:400`, never the raw provider response body.
-- `expired-token-reminder.ts` repeats the session-expiry alert for tokens that are still inactive, because the one-shot alert is lost on anyone not watching the channel at that moment and re-login only happens when a person does it. It reuses the same `세션 만료` title rather than inventing a second name — there is one event, so a differently-named alert would read as a separate problem. It runs every `SLACK_EXPIRY_REMINDER_INTERVAL_MINUTES` (unset or 0 disables), batches every inactive token into one message, and sends nothing when none are inactive — a periodic "all clear" trains people to ignore the channel.
+- `expired-token-reminder.ts` repeats the session-expiry alert for tokens that are still inactive, because the one-shot alert is lost on anyone not watching the channel at that moment and re-login only happens when a person does it. It reuses the same `세션 만료` title rather than inventing a second name — there is one event, so a differently-named alert would read as a separate problem. It runs once at startup and then every `SLACK_EXPIRY_REMINDER_INTERVAL_MINUTES` (unset or 0 disables), batches every inactive token into one message, and sends nothing when none are inactive. The startup run matters because a restart is exactly when someone is watching, and waiting a full interval to learn a token is already dead is backwards; the cost is one extra alert per restart — a periodic "all clear" trains people to ignore the channel.
 - Owners are mentioned through `SLACK_USER_MAP` (`tokenName:SlackUserId`) on every token notification, not just the reminder. The map is explicit rather than resolved through `users.list`: Slack handles diverge from token names often enough (`haze`→`haze.lee`, `byeongjun`→`potados`) that auto-matching drops the mention silently, and an alert nobody is tagged in has no one to act on it. Shared accounts are left out of the map on purpose and appear by name only. Each instance sends its own reminder — unlike deactivation there is no state change to gate on, and a few duplicates a day cost less than a locking scheme.
 
 ## Quota Threshold Semantics