@cloud-cli/on 1.47.2 → 1.48.0

package/dist/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAmCA,wBAAgB,cAAc,CAAC,KAAK,UAAQ,GAAG,MAAM,CAoDpD"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":"AAmCA,wBAAgB,cAAc,CAAC,KAAK,UAAQ,GAAG,MAAM,CAqDpD"}

package/dist/on.js

@@ -417,6 +417,7 @@ function Se(e, t) {
 }
 var Ce = class {
 	name = "github";
+	apiUrl = "https://api.github.com";
 	parse(e, t, n) {
 		let r = !1, i = null, a = e["x-hub-signature-256"];
 		if (n && a) {
@@ -457,6 +458,23 @@ var Ce = class {
 			inputs: e
 		};
 	}
+	conditionContext(e) {
+		return { github: { fileExists: async (t) => {
+			if (typeof t != "string" || !t || t.startsWith("/") || t.split("/").includes("..")) return !1;
+			let n = encodeURIComponent(String(e.owner || "")), r = encodeURIComponent(String(e.repo || "")), i = encodeURIComponent(String(e.ref || e.commit_sha || ""));
+			if (!n || !r || !i) return !1;
+			let a = t.split("/").map((e) => encodeURIComponent(e)).join("/"), o = {
+				Accept: "application/vnd.github+json",
+				"User-Agent": "@cloud-cli/on",
+				"X-GitHub-Api-Version": "2022-11-28"
+			}, s = process.env.GITHUB_TOKEN || process.env.GITHUB_API_TOKEN;
+			return s && (o.Authorization = `Bearer ${s}`), (await fetch(`${this.apiUrl}/repos/${n}/${r}/contents/${a}?ref=${i}`, {
+				method: "HEAD",
+				headers: o,
+				signal: AbortSignal.timeout(1e4)
+			})).ok;
+		} } };
+	}
 }, we = JSON.stringify({
 	id: "/runs",
 	name: "Runner Engine",
@@ -5571,7 +5589,7 @@ U.use = Ri, U.walkTokens = function(e, t) {
 }, U.parseInline = Li.parseInline, U.Parser = Fi, U.parser = Fi.parse, U.Renderer = Ni, U.TextRenderer = Pi, U.Lexer = Mi, U.lexer = Mi.lex, U.Tokenizer = ji, U.Hooks = Ii, U.parse = U, U.options, U.setOptions, U.walkTokens, U.parseInline, Fi.parse, Mi.lex;
 //#endregion
 //#region docs/workflow-syntax.md?raw
-var zi = "# Workflow Documentation\n\nThis is the living documentation for workflow authors. It is organized using the four Diataxis modes:\n\n- **Tutorials** teach the shortest path to a working workflow.\n- **How-to guides** solve focused tasks.\n- **Reference** documents the accepted syntax.\n- **Explanation** describes execution and security decisions.\n\n## Tutorials\n\n### Your First Workflow\n\nCreate a draft in the authenticated workflow editor, or send the YAML to the API:\n\n```yaml\nname: Hello\n\non:\n  generic: {}\n\nsteps:\n  - id: greet\n    name: Greet\n    run: echo \"Hello ${inputs.name}\"\n```\n\nSave it, validate it, and publish it. Only published and enabled workflows receive webhook or scheduled events.\n\nThe `generic` provider accepts a JSON request body as `inputs`. For example:\n\n```bash\ncurl -X POST http://localhost:11235/webhooks/generic \\\n  -H 'content-type: application/json' \\\n  --data '{\"name\":\"Ada\"}'\n```\n\n### Build a GitHub Workflow\n\n```yaml\nname: Build\n\non:\n  github:\n    events: [push]\n    owner: cloud-cli\n    repo: on\n    branches: [main]\n\nsteps:\n  - id: checkout\n    name: Checkout\n    env:\n      clone_url: ${inputs.clone_url}\n      commit_sha: ${inputs.commit_sha}\n    run: |\n      git clone --depth 1 \"$clone_url\" .\n      git checkout \"$commit_sha\"\n\n  - id: test\n    name: Test\n    run: pnpm install && pnpm test\n```\n\nGitHub webhooks must be signed with the configured `GITHUB_WEBHOOK_SECRET`. The preprocessor exposes normalized inputs including `event`, `owner`, `repo`, `branch`, `tag`, `ref`, `full_name`, `clone_url`, `commit_sha`, `author`, `action`, `changes`, and the original `raw` body.\n\n## How-To Guides\n\n### Reference Another Environment Value\n\nEnvironment entries are evaluated from top to bottom. Earlier values are available through `env` to later values:\n\n```yaml\nenv:\n  image: ${inputs.repo}\n  image_tag: ${env.image}:latest\n  artifact_name: ${env.image_tag}-${inputs.commit_sha}\n```\n\nWorkflow-level values are available to every step. Step-level `env` values are evaluated after workflow-level values and can override them for that step.\n\nUse `${inputs.name}`, `${env.NAME}`, `${secrets.NAME}`, and `${steps.step_id.outputs.value}` where the value is available. A value without `${...}` remains literal text.\n\n### Run a Container with a Host Volume\n\nUse `image` with `volumes`. A volume is passed directly to `docker run` as a `-v` mapping:\n\n```yaml\nsteps:\n  - id: sign\n    name: Sign release\n    image: alpine:latest\n    volumes:\n      - /var/lib/runner/secrets-store:/secrets:ro\n    run: |\n      ./sign.sh /secrets/signing.key dist/release.tar.gz\n```\n\nThe source path is on the worker host. The destination path is inside the container. Use absolute host paths when a specific host directory is required. The workflow must be trusted because volume mappings can expose host data to a container.\n\nA single string is also accepted:\n\n```yaml\nvolumes: /var/lib/runner/secrets-store:/secrets:ro\n```\n\n### Pass Additional Docker Arguments\n\nUse `dockerArgs` for additional arguments to `docker run`, before the image name:\n\n```yaml\nsteps:\n  - id: build\n    image: docker:cli\n    dockerArgs:\n      - --network=host\n      - --user=1000:1000\n    run: docker build -t example:latest .\n```\n\nArguments are not interpreted or shell-expanded by the runner. They are passed as individual Docker CLI arguments.\n\n### Use a Matrix\n\nKeep the matrix in the workflow definition:\n\n```yaml\nname: Package\n\nmatrix:\n  node: [18, 20]\n  os: [ubuntu, alpine]\n\ntags:\n  - '${matrix.os}'\n\non:\n  generic: {}\n\nenv:\n  node_version: ${env.MATRIX_NODE}\n\nsteps:\n  - id: package\n    image: node:${env.MATRIX_NODE}\n    run: npm pack\n```\n\nThe runner creates one job for every Cartesian combination. The example creates four jobs. Each variant receives `MATRIX_NODE` and `MATRIX_OS` environment variables. Matrix expressions in `tags` are resolved before enqueueing, so each job can target a different runner. Tags remain an AND requirement within each job.\n\nIf a matching runner is offline before claiming its matrix job, the job remains pending and is claimed when that runner reconnects. A job already claimed by a worker is recovered as stale after one hour if the worker process does not complete it.\n\n### Add a Scheduled Trigger\n\n```yaml\non:\n  schedule:\n    - id: nightly\n      cron: '0 2 * * *'\n      timezone: Europe/Berlin\n```\n\nCron expressions have five fields: minute, hour, day of month, month, and day of week. The scheduler uses the declared IANA timezone.\n\nSolar triggers use `sunrise` or `sunset` and geographic coordinates:\n\n```yaml\non:\n  solar:\n    - id: morning\n      event: sunrise\n      latitude: 52.52\n      longitude: 13.405\n      offset: +15m\n```\n\n### Use Secrets\n\nCreate a secret in the management UI or with the API, then reference it in environment values:\n\n```yaml\nsteps:\n  - id: publish\n    env:\n      npm_token: ${secrets.NPM_TOKEN}\n    run: npm publish\n```\n\nSecret values are delivered to a worker after it claims the job. Do not write them into reports or artifacts.\n\nManaged secrets can be text or binary. Use the management UI's file picker for binary values, or send base64 through the API:\n\n```json\n{\n  \"value\": \"<base64 file bytes>\",\n  \"encoding\": \"base64\",\n  \"originalName\": \"release.keystore\"\n}\n```\n\nBinary values are encrypted at rest and are decoded only when written through a file secret mapping. They should not be injected into environment variables.\n\n### Persist Artifacts and Caches\n\nArtifacts are captured from the workspace after a successful run:\n\n```yaml\nartifacts:\n  paths:\n    - dist\n    - reports/**/*.json\n```\n\nCaches are restored before steps start and saved after a successful run:\n\n```yaml\ncache:\n  key: npm-${inputs.repo}-${inputs.branch}\n  paths:\n    - node_modules\n```\n\nConfigure a shared FileBin backend on the server and workers with `RUNNER_FILE_API_URL`, `RUNNER_FILE_BIN`, and optionally `RUNNER_FILE_PASSWORD`. Create a bin with `POST /bin`, then configure its ID. Without FileBin configuration, the runner uses the central database fallback. Cache keys are scoped by workflow; artifacts are scoped by job. Stored collections are limited to 50 MiB per capture.\n\nAdministrators can download a captured artifact with `GET /api/runs/:jobId/artifacts/:path`.\n\nPopulate workspace files from managed secrets before steps run:\n\n```yaml\nsecretFiles:\n  .config/signing.key: SIGNING_KEY\n```\n\nSecret files are created with owner-only permissions in the worker workspace. They must be handled according to the worker storage lifecycle and should not be included in artifacts or caches.\n\n### Configure Workflow Plugins\n\nEnable status updates for an individual GitHub workflow by declaring a plugin and mapping its secret inputs through the existing server-managed secrets:\n\n```yaml\nplugins:\n  - name: github-status\n    secrets:\n      GITHUB_TOKEN: ${secrets.GITHUB_TOKEN}\n    context: ci/build\n```\n\nThe worker uses that secret for `pending`, `success`, `failure`, or `error` commit statuses. The token is never stored in workflow YAML or job reports. The workflow must have GitHub `owner`, `repo`, and `commit_sha` inputs; otherwise no status request is made.\n\nPlugin names are resolved through the server's workflow plugin registry. `github-status` is built in. External integrations can register a factory during runner configuration with `registerWorkflowPlugin(name, factory)` before workers start.\n\n## Reference\n\n### Top-Level Workflow Fields\n\n| Field | Type | Description |\n| --- | --- | --- |\n| `name` | string | Required human-readable workflow name shown in the UI and reports. |\n| `id` | string | Optional identifier used when deriving an ID outside the management API. The management API ID is authoritative after creation. |\n| `on` | object | Required trigger configuration. |\n| `env` | object | Workflow environment values, evaluated in declaration order. |\n| `matrix` | object | Matrix dimensions. Each value is an array of strings, numbers, or booleans. |\n| `concurrency` | object | Optional concurrency group and cancellation policy. |\n| `tags` | string[] | Worker capability tags required by the job. |\n| `artifacts` | object | Workspace paths captured after successful runs. |\n| `cache` | object | Keyed workspace paths restored before and saved after successful runs. |\n| `secretFiles` | object | Workspace-relative file paths mapped to secret names. |\n| `plugins` | object[] | Optional per-workflow plugin declarations and secret mappings. |\n| `steps` | object[] | Required non-empty ordered list of steps. |\n| `retries` | integer | Additional attempts for a failed step. Must be zero or greater. |\n\n`includes` and workflow-to-workflow imports are not supported. Workflow definitions are stored as complete database revisions. Reusable behavior should be implemented through the planned step reuse mechanism rather than filesystem imports.\n\n### Triggers\n\nThe first non-`schedule`/`solar` key in `on` is the provider trigger. Supported providers include `generic` and `github`.\n\n#### GitHub Trigger Filters\n\n| Field | Type | Behavior |\n| --- | --- | --- |\n| `events` | string[] | Exact event names such as `push` or `pull_request`. |\n| `owner` | string or string[] | Exact repository owner. |\n| `repo` | string or string[] | Exact repository name. |\n| `name` | string or string[] | Exact `owner/repo` name. |\n| `branches` | string or string[] | Glob patterns matching normalized branches or tags. |\n| `refs` | string or string[] | Alias for branch/ref matching. |\n| `tag` | boolean | Requires a tag push when true, a non-tag event when false. |\n| `tags` | string[] | Regular expressions matched against the tag value. |\n| `paths` | string[] | Glob patterns matched against changed files. |\n| `if` | string or string[] | Safe JavaScript condition evaluated after provider filters. |\n\nConfigured fields are combined with AND. Multiple values within a field are combined with OR. Negated `!value` entries are supported by exact-value filters.\n\n#### Schedule Trigger\n\n```yaml\nschedule:\n  - id: hourly\n    cron: '0 * * * *'\n    timezone: UTC\n```\n\n#### Solar Trigger\n\n```yaml\nsolar:\n  - id: sunrise-build\n    event: sunrise\n    latitude: 52.52\n    longitude: 13.405\n    timezone: Europe/Berlin\n    offset: -15m\n```\n\n### Environment and Expressions\n\nInterpolated strings use standard JavaScript template expressions inside `${...}`. The safe evaluator supports literals, property access, arithmetic, comparisons, boolean operators, ternaries, arrays, objects, and these helpers:\n\n```text\nString(value)\nNumber(value)\nBoolean(value)\nJSON.parse(value)\nJSON.stringify(value)\n```\n\nAvailable context objects are:\n\n| Object | Available data |\n| --- | --- |\n| `inputs` | Trigger payload and normalized provider inputs. |\n| `env` | Runner environment plus earlier workflow or step environment entries. |\n| `secrets` | Decrypted job-scoped secrets. |\n| `steps` | Earlier step statuses, exit codes, and outputs. |\n| `files` | Workspace-scoped `exists`, `readFile`, and `join` helpers for `eval:` steps. |\n\nExpressions cannot access JavaScript constructors or prototypes. Shell commands are not expression-evaluated; only declared interpolation fields are evaluated.\n\n### Steps\n\n| Field | Type | Description |\n| --- | --- | --- |\n| `id` | string | Stable identifier used by `steps.<id>`. |\n| `name` | string | Display name. Defaults to `id`. |\n| `run` | string | Shell command or script. Mutually exclusive with `eval`. |\n| `eval` | string | In-process safe expression. Mutually exclusive with `run`. |\n| `env` | object | Step environment, evaluated after workflow environment. |\n| `image` | string | Docker image. Selects container execution for the step. |\n| `volumes` | string or string[] | Docker `-v` mappings. |\n| `dockerArgs` | string[] | Additional raw arguments for `docker run`. |\n| `timeoutMs` | positive integer | Maximum step runtime. Defaults to 30 seconds. |\n| `if` | string | Safe condition. False conditions produce a skipped step. |\n\n`run` steps execute through the selected worker driver. With `image`, the command runs as `sh -c` inside Docker. Without `image`, it runs through the worker shell. `eval` steps run inside the worker process and can produce structured outputs for later steps.\n\n### Management and API\n\nWorkflow definitions are drafted, validated, published, enabled, and deleted through the authenticated management UI or these endpoints:\n\n```text\nPOST /api/workflows/validate\nGET  /api/workflows\nGET  /api/workflows/:id\nPUT  /api/workflows/:id\nPOST /api/workflows/:id/publish\nDELETE /api/workflows/:id\n```\n\nOnly published workflows with `enabled: true` are matched for incoming triggers. Saving a workflow creates a new immutable revision. Existing jobs continue to use the revision recorded when they were created.\n\n## Explanation\n\n### Why Workflow YAML Lives in the Database\n\nThe server stores source YAML and normalized revisions in the database. Workers are stateless: they fetch the referenced revision when claiming a job and do not read workflow files from their local filesystem. This keeps every worker on the same definition and makes published revisions reproducible.\n\n### Why Matrix Expansion Happens at Trigger Time\n\nThe stored revision remains one canonical workflow. When a trigger matches, the server creates one queue job per matrix combination. The payload records the matrix context, and the worker resolves that same variant before execution. This avoids storing duplicate workflow revisions while keeping each job independently observable.\n\n### Docker Volumes and Trust\n\n`volumes` and `dockerArgs` are intentionally powerful options. A host volume can expose credentials or signing material, and Docker arguments can change networking, users, capabilities, or isolation. Only trusted administrators should publish workflows using these fields. The runner does not copy, inspect, or redact files mounted into containers.\n\n### Reuse and Imports\n\nFilesystem imports were removed because workers no longer load workflow files. Future step reuse should operate on database-owned definitions or explicit reusable step mechanisms, keeping revisioning and authorization visible to the control plane.\n", Bi = "\n  :root { color-scheme: dark; }\n  * { box-sizing: border-box; }\n  body { margin: 0; background: #030712; color: #e5e7eb; font-family: ui-sans-serif, system-ui, sans-serif; }\n  main { max-width: 78rem; margin: 0 auto; padding: 2rem 1rem 5rem; }\n  article { max-width: 54rem; margin: 0 auto; line-height: 1.7; }\n  h1, h2, h3 { color: #f9fafb; line-height: 1.2; letter-spacing: -0.02em; }\n  h1 { font-size: 2.25rem; margin: 0 0 1rem; }\n  h2 { border-top: 1px solid #1f2937; margin-top: 3rem; padding-top: 1.5rem; font-size: 1.6rem; }\n  h3 { margin-top: 2rem; font-size: 1.15rem; }\n  p, li { color: #cbd5e1; }\n  a { color: #93c5fd; }\n  code { border-radius: .35rem; background: #111827; color: #bfdbfe; padding: .12rem .35rem; font-size: .9em; }\n  pre { overflow-x: auto; border: 1px solid #1f2937; border-radius: .75rem; background: #0b1120; padding: 1rem; }\n  pre code { background: transparent; padding: 0; color: #d1d5db; }\n  table { width: 100%; border-collapse: collapse; display: block; overflow-x: auto; margin: 1rem 0; }\n  th, td { border-bottom: 1px solid #1f2937; padding: .65rem .75rem; text-align: left; vertical-align: top; }\n  th { color: #f9fafb; background: #111827; }\n  blockquote { border-left: 3px solid #6366f1; margin-left: 0; padding-left: 1rem; color: #94a3b8; }\n  .help-layout { display: grid; grid-template-columns: minmax(0, 54rem); gap: 3rem; justify-content: center; }\n  .toc { display: none; }\n  .toc nav { position: sticky; top: 1.25rem; max-height: calc(100vh - 2.5rem); overflow-y: auto; border-left: 1px solid #1f2937; padding-left: 1rem; }\n  .toc-title { margin: 0 0 .65rem; color: #f9fafb; font-size: .75rem; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; }\n  .toc ul { display: grid; gap: .15rem; list-style: none; margin: 0; padding: 0; }\n  .toc a { display: block; border-radius: .35rem; color: #94a3b8; font-size: .8rem; line-height: 1.35; padding: .3rem .45rem; text-decoration: none; }\n  .toc a:hover, .toc a:focus-visible { background: #111827; color: #dbeafe; outline: none; }\n  .toc-depth-2 { padding-left: .9rem !important; }\n  .toc-depth-3 { padding-left: 1.8rem !important; font-size: .75rem !important; }\n  @media (min-width: 1024px) { .help-layout { grid-template-columns: minmax(0, 54rem) 16rem; justify-content: center; } .toc { display: block; } }\n  @media (min-width: 640px) { main { padding: 3rem 1.5rem 6rem; } }\n";
+var zi = "# Workflow Documentation\n\nThis is the living documentation for workflow authors. It is organized using the four Diataxis modes:\n\n- **Tutorials** teach the shortest path to a working workflow.\n- **How-to guides** solve focused tasks.\n- **Reference** documents the accepted syntax.\n- **Explanation** describes execution and security decisions.\n\n## Tutorials\n\n### Your First Workflow\n\nCreate a draft in the authenticated workflow editor, or send the YAML to the API:\n\n```yaml\nname: Hello\n\non:\n  generic: {}\n\nsteps:\n  - id: greet\n    name: Greet\n    run: echo \"Hello ${inputs.name}\"\n```\n\nSave it, validate it, and publish it. Only published and enabled workflows receive webhook or scheduled events.\n\nThe `generic` provider accepts a JSON request body as `inputs`. For example:\n\n```bash\ncurl -X POST http://localhost:11235/webhooks/generic \\\n  -H 'content-type: application/json' \\\n  --data '{\"name\":\"Ada\"}'\n```\n\n### Build a GitHub Workflow\n\n```yaml\nname: Build\n\non:\n  github:\n    events: [push]\n    owner: cloud-cli\n    repo: on\n    branches: [main]\n\nsteps:\n  - id: checkout\n    name: Checkout\n    env:\n      clone_url: ${inputs.clone_url}\n      commit_sha: ${inputs.commit_sha}\n    run: |\n      git clone --depth 1 \"$clone_url\" .\n      git checkout \"$commit_sha\"\n\n  - id: test\n    name: Test\n    run: pnpm install && pnpm test\n```\n\nGitHub webhooks must be signed with the configured `GITHUB_WEBHOOK_SECRET`. The preprocessor exposes normalized inputs including `event`, `owner`, `repo`, `branch`, `tag`, `ref`, `full_name`, `clone_url`, `commit_sha`, `author`, `action`, `changes`, and the original `raw` body.\n\nGitHub workflow `if:` conditions also receive an async `github.fileExists(path)` helper. It checks the repository contents API using the webhook's owner, repository, and ref:\n\n```yaml\non:\n  github:\n    if: github.fileExists('Dockerfile')\n```\n\nThe helper is only available to GitHub workflows. A missing file returns `false`; unsafe paths and failed lookups do not trigger the workflow.\n\n## How-To Guides\n\n### Reference Another Environment Value\n\nEnvironment entries are evaluated from top to bottom. Earlier values are available through `env` to later values:\n\n```yaml\nenv:\n  image: ${inputs.repo}\n  image_tag: ${env.image}:latest\n  artifact_name: ${env.image_tag}-${inputs.commit_sha}\n```\n\nWorkflow-level values are available to every step. Step-level `env` values are evaluated after workflow-level values and can override them for that step.\n\nUse `${inputs.name}`, `${env.NAME}`, `${secrets.NAME}`, and `${steps.step_id.outputs.value}` where the value is available. A value without `${...}` remains literal text.\n\n### Run a Container with a Host Volume\n\nUse `image` with `volumes`. A volume is passed directly to `docker run` as a `-v` mapping:\n\n```yaml\nsteps:\n  - id: sign\n    name: Sign release\n    image: alpine:latest\n    volumes:\n      - /var/lib/runner/secrets-store:/secrets:ro\n    run: |\n      ./sign.sh /secrets/signing.key dist/release.tar.gz\n```\n\nThe source path is on the worker host. The destination path is inside the container. Use absolute host paths when a specific host directory is required. The workflow must be trusted because volume mappings can expose host data to a container.\n\nA single string is also accepted:\n\n```yaml\nvolumes: /var/lib/runner/secrets-store:/secrets:ro\n```\n\n### Pass Additional Docker Arguments\n\nUse `dockerArgs` for additional arguments to `docker run`, before the image name:\n\n```yaml\nsteps:\n  - id: build\n    image: docker:cli\n    dockerArgs:\n      - --network=host\n      - --user=1000:1000\n    run: docker build -t example:latest .\n```\n\nArguments are not interpreted or shell-expanded by the runner. They are passed as individual Docker CLI arguments.\n\n### Use a Matrix\n\nKeep the matrix in the workflow definition:\n\n```yaml\nname: Package\n\nmatrix:\n  node: [18, 20]\n  os: [ubuntu, alpine]\n\ntags:\n  - '${matrix.os}'\n\non:\n  generic: {}\n\nenv:\n  node_version: ${env.MATRIX_NODE}\n\nsteps:\n  - id: package\n    image: node:${env.MATRIX_NODE}\n    run: npm pack\n```\n\nThe runner creates one job for every Cartesian combination. The example creates four jobs. Each variant receives `MATRIX_NODE` and `MATRIX_OS` environment variables. Matrix expressions in `tags` are resolved before enqueueing, so each job can target a different runner. Tags remain an AND requirement within each job.\n\nIf a matching runner is offline before claiming its matrix job, the job remains pending and is claimed when that runner reconnects. A job already claimed by a worker is recovered as stale after one hour if the worker process does not complete it.\n\n### Add a Scheduled Trigger\n\n```yaml\non:\n  schedule:\n    - id: nightly\n      cron: '0 2 * * *'\n      timezone: Europe/Berlin\n```\n\nCron expressions have five fields: minute, hour, day of month, month, and day of week. The scheduler uses the declared IANA timezone.\n\nSolar triggers use `sunrise` or `sunset` and geographic coordinates:\n\n```yaml\non:\n  solar:\n    - id: morning\n      event: sunrise\n      latitude: 52.52\n      longitude: 13.405\n      offset: +15m\n```\n\n### Use Secrets\n\nCreate a secret in the management UI or with the API, then reference it in environment values:\n\n```yaml\nsteps:\n  - id: publish\n    env:\n      npm_token: ${secrets.NPM_TOKEN}\n    run: npm publish\n```\n\nSecret values are delivered to a worker after it claims the job. Do not write them into reports or artifacts.\n\nManaged secrets can be text or binary. Use the management UI's file picker for binary values, or send base64 through the API:\n\n```json\n{\n  \"value\": \"<base64 file bytes>\",\n  \"encoding\": \"base64\",\n  \"originalName\": \"release.keystore\"\n}\n```\n\nBinary values are encrypted at rest and are decoded only when written through a file secret mapping. They should not be injected into environment variables.\n\n### Persist Artifacts and Caches\n\nArtifacts are captured from the workspace after a successful run:\n\n```yaml\nartifacts:\n  paths:\n    - dist\n    - reports/**/*.json\n```\n\nCaches are restored before steps start and saved after a successful run:\n\n```yaml\ncache:\n  key: npm-${inputs.repo}-${inputs.branch}\n  paths:\n    - node_modules\n```\n\nConfigure a shared FileBin backend on the server and workers with `RUNNER_FILE_API_URL`, `RUNNER_FILE_BIN`, and optionally `RUNNER_FILE_PASSWORD`. Create a bin with `POST /bin`, then configure its ID. Without FileBin configuration, the runner uses the central database fallback. Cache keys are scoped by workflow; artifacts are scoped by job. Stored collections are limited to 50 MiB per capture.\n\nAdministrators can download a captured artifact with `GET /api/runs/:jobId/artifacts/:path`.\n\nPopulate workspace files from managed secrets before steps run:\n\n```yaml\nsecretFiles:\n  .config/signing.key: SIGNING_KEY\n```\n\nSecret files are created with owner-only permissions in the worker workspace. They must be handled according to the worker storage lifecycle and should not be included in artifacts or caches.\n\n### Configure Workflow Plugins\n\nEnable status updates for an individual GitHub workflow by declaring a plugin and mapping its secret inputs through the existing server-managed secrets:\n\n```yaml\nplugins:\n  - name: github-status\n    secrets:\n      GITHUB_TOKEN: ${secrets.GITHUB_TOKEN}\n    context: ci/build\n```\n\nThe worker uses that secret for `pending`, `success`, `failure`, or `error` commit statuses. The token is never stored in workflow YAML or job reports. The workflow must have GitHub `owner`, `repo`, and `commit_sha` inputs; otherwise no status request is made.\n\nPlugin names are resolved through the server's workflow plugin registry. `github-status` is built in. External integrations can register a factory during runner configuration with `registerWorkflowPlugin(name, factory)` before workers start.\n\n## Reference\n\n### Top-Level Workflow Fields\n\n| Field | Type | Description |\n| --- | --- | --- |\n| `name` | string | Required human-readable workflow name shown in the UI and reports. |\n| `id` | string | Optional identifier used when deriving an ID outside the management API. The management API ID is authoritative after creation. |\n| `on` | object | Required trigger configuration. |\n| `env` | object | Workflow environment values, evaluated in declaration order. |\n| `matrix` | object | Matrix dimensions. Each value is an array of strings, numbers, or booleans. |\n| `concurrency` | object | Optional concurrency group and cancellation policy. |\n| `tags` | string[] | Worker capability tags required by the job. |\n| `artifacts` | object | Workspace paths captured after successful runs. |\n| `cache` | object | Keyed workspace paths restored before and saved after successful runs. |\n| `secretFiles` | object | Workspace-relative file paths mapped to secret names. |\n| `plugins` | object[] | Optional per-workflow plugin declarations and secret mappings. |\n| `steps` | object[] | Required non-empty ordered list of steps. |\n| `retries` | integer | Additional attempts for a failed step. Must be zero or greater. |\n\n`includes` and workflow-to-workflow imports are not supported. Workflow definitions are stored as complete database revisions. Reusable behavior should be implemented through the planned step reuse mechanism rather than filesystem imports.\n\n### Triggers\n\nThe first non-`schedule`/`solar` key in `on` is the provider trigger. Supported providers include `generic` and `github`.\n\n#### GitHub Trigger Filters\n\n| Field | Type | Behavior |\n| --- | --- | --- |\n| `events` | string[] | Exact event names such as `push` or `pull_request`. |\n| `owner` | string or string[] | Exact repository owner. |\n| `repo` | string or string[] | Exact repository name. |\n| `name` | string or string[] | Exact `owner/repo` name. |\n| `branches` | string or string[] | Glob patterns matching normalized branches or tags. |\n| `refs` | string or string[] | Alias for branch/ref matching. |\n| `tag` | boolean | Requires a tag push when true, a non-tag event when false. |\n| `tags` | string[] | Regular expressions matched against the tag value. |\n| `paths` | string[] | Glob patterns matched against changed files. |\n| `if` | string or string[] | Safe JavaScript condition evaluated after provider filters. |\n\nConfigured fields are combined with AND. Multiple values within a field are combined with OR. Negated `!value` entries are supported by exact-value filters.\n\n#### Schedule Trigger\n\n```yaml\nschedule:\n  - id: hourly\n    cron: '0 * * * *'\n    timezone: UTC\n```\n\n#### Solar Trigger\n\n```yaml\nsolar:\n  - id: sunrise-build\n    event: sunrise\n    latitude: 52.52\n    longitude: 13.405\n    timezone: Europe/Berlin\n    offset: -15m\n```\n\n### Environment and Expressions\n\nInterpolated strings use standard JavaScript template expressions inside `${...}`. The safe evaluator supports literals, property access, arithmetic, comparisons, boolean operators, ternaries, arrays, objects, and these helpers:\n\n```text\nString(value)\nNumber(value)\nBoolean(value)\nJSON.parse(value)\nJSON.stringify(value)\n```\n\nAvailable context objects are:\n\n| Object | Available data |\n| --- | --- |\n| `inputs` | Trigger payload and normalized provider inputs. |\n| `env` | Runner environment plus earlier workflow or step environment entries. |\n| `secrets` | Decrypted job-scoped secrets. |\n| `steps` | Earlier step statuses, exit codes, and outputs. |\n| `files` | Workspace-scoped `exists`, `readFile`, and `join` helpers for `eval:` steps. |\n\nExpressions cannot access JavaScript constructors or prototypes. Shell commands are not expression-evaluated; only declared interpolation fields are evaluated.\n\n### Steps\n\n| Field | Type | Description |\n| --- | --- | --- |\n| `id` | string | Stable identifier used by `steps.<id>`. |\n| `name` | string | Display name. Defaults to `id`. |\n| `run` | string | Shell command or script. Mutually exclusive with `eval`. |\n| `eval` | string | In-process safe expression. Mutually exclusive with `run`. |\n| `env` | object | Step environment, evaluated after workflow environment. |\n| `image` | string | Docker image. Selects container execution for the step. |\n| `volumes` | string or string[] | Docker `-v` mappings. |\n| `dockerArgs` | string[] | Additional raw arguments for `docker run`. |\n| `timeoutMs` | positive integer | Maximum step runtime. Defaults to 30 seconds. |\n| `if` | string | Safe condition. False conditions produce a skipped step. |\n\n`run` steps execute through the selected worker driver. With `image`, the command runs as `sh -c` inside Docker. Without `image`, it runs through the worker shell. `eval` steps run inside the worker process and can produce structured outputs for later steps.\n\n### Management and API\n\nWorkflow definitions are drafted, validated, published, enabled, and deleted through the authenticated management UI or these endpoints:\n\n```text\nPOST /api/workflows/validate\nGET  /api/workflows\nGET  /api/workflows/:id\nPUT  /api/workflows/:id\nPOST /api/workflows/:id/publish\nDELETE /api/workflows/:id\n```\n\nOnly published workflows with `enabled: true` are matched for incoming triggers. Saving a workflow creates a new immutable revision. Existing jobs continue to use the revision recorded when they were created.\n\n## Explanation\n\n### Why Workflow YAML Lives in the Database\n\nThe server stores source YAML and normalized revisions in the database. Workers are stateless: they fetch the referenced revision when claiming a job and do not read workflow files from their local filesystem. This keeps every worker on the same definition and makes published revisions reproducible.\n\n### Why Matrix Expansion Happens at Trigger Time\n\nThe stored revision remains one canonical workflow. When a trigger matches, the server creates one queue job per matrix combination. The payload records the matrix context, and the worker resolves that same variant before execution. This avoids storing duplicate workflow revisions while keeping each job independently observable.\n\n### Docker Volumes and Trust\n\n`volumes` and `dockerArgs` are intentionally powerful options. A host volume can expose credentials or signing material, and Docker arguments can change networking, users, capabilities, or isolation. Only trusted administrators should publish workflows using these fields. The runner does not copy, inspect, or redact files mounted into containers.\n\n### Reuse and Imports\n\nFilesystem imports were removed because workers no longer load workflow files. Future step reuse should operate on database-owned definitions or explicit reusable step mechanisms, keeping revisioning and authorization visible to the control plane.\n", Bi = "\n  :root { color-scheme: dark; }\n  * { box-sizing: border-box; }\n  body { margin: 0; background: #030712; color: #e5e7eb; font-family: ui-sans-serif, system-ui, sans-serif; }\n  main { max-width: 78rem; margin: 0 auto; padding: 2rem 1rem 5rem; }\n  article { max-width: 54rem; margin: 0 auto; line-height: 1.7; }\n  h1, h2, h3 { color: #f9fafb; line-height: 1.2; letter-spacing: -0.02em; }\n  h1 { font-size: 2.25rem; margin: 0 0 1rem; }\n  h2 { border-top: 1px solid #1f2937; margin-top: 3rem; padding-top: 1.5rem; font-size: 1.6rem; }\n  h3 { margin-top: 2rem; font-size: 1.15rem; }\n  p, li { color: #cbd5e1; }\n  a { color: #93c5fd; }\n  code { border-radius: .35rem; background: #111827; color: #bfdbfe; padding: .12rem .35rem; font-size: .9em; }\n  pre { overflow-x: auto; border: 1px solid #1f2937; border-radius: .75rem; background: #0b1120; padding: 1rem; }\n  pre code { background: transparent; padding: 0; color: #d1d5db; }\n  table { width: 100%; border-collapse: collapse; display: block; overflow-x: auto; margin: 1rem 0; }\n  th, td { border-bottom: 1px solid #1f2937; padding: .65rem .75rem; text-align: left; vertical-align: top; }\n  th { color: #f9fafb; background: #111827; }\n  blockquote { border-left: 3px solid #6366f1; margin-left: 0; padding-left: 1rem; color: #94a3b8; }\n  .help-layout { display: grid; grid-template-columns: minmax(0, 54rem); gap: 3rem; justify-content: center; }\n  .toc { display: none; }\n  .toc nav { position: sticky; top: 1.25rem; max-height: calc(100vh - 2.5rem); overflow-y: auto; border-left: 1px solid #1f2937; padding-left: 1rem; }\n  .toc-title { margin: 0 0 .65rem; color: #f9fafb; font-size: .75rem; font-weight: 700; letter-spacing: .12em; text-transform: uppercase; }\n  .toc ul { display: grid; gap: .15rem; list-style: none; margin: 0; padding: 0; }\n  .toc a { display: block; border-radius: .35rem; color: #94a3b8; font-size: .8rem; line-height: 1.35; padding: .3rem .45rem; text-decoration: none; }\n  .toc a:hover, .toc a:focus-visible { background: #111827; color: #dbeafe; outline: none; }\n  .toc-depth-2 { padding-left: .9rem !important; }\n  .toc-depth-3 { padding-left: 1.8rem !important; font-size: .75rem !important; }\n  @media (min-width: 1024px) { .help-layout { grid-template-columns: minmax(0, 54rem) 16rem; justify-content: center; } .toc { display: block; } }\n  @media (min-width: 640px) { main { padding: 3rem 1.5rem 6rem; } }\n";
 function Vi(e = !1) {
 	let t = /* @__PURE__ */ new Map(), n = (e) => {
 		let n = e.replace(/[`*_~]/g, "").replace(/\[([^\]]+)\]\([^)]*\)/g, "$1").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "section", r = t.get(n) || 0;
@@ -5610,6 +5628,7 @@ function Vi(e = !1) {
     ${e ? "" : "<app-header title=\"Workflow Documentation\" subtitle=\"\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header>"}
     <main><div class="help-layout"><article>${o}</article>${e ? "" : c}</div></main>
     <script type="module">import '@li3/web';<\/script>
+    <script src="https://cdn.tailwindcss.com"><\/script>
   </body>
 </html>`;
 }
@@ -6268,7 +6287,7 @@ function Ki(e = "tokens") {
 }
 //#endregion
 //#region src/app-header.html?raw
-var qi = "<template shadow-dom=\"open\" component=\"app-header\">\n  <link rel=\"stylesheet\" href=\"https://cdn.tailwindcss.com\" />\n  <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n  <header class=\"mx-auto flex w-full max-w-[78rem] items-center justify-between gap-4 border-b border-gray-800 pb-5\">\n    <div class=\"flex min-w-0 items-start gap-3\">\n      <template if=\"back\">\n        <a class=\"mt-0.5 inline-flex h-9 w-9 items-center justify-center rounded-lg border border-gray-800 text-gray-400 no-underline outline-none hover:border-indigo-500 hover:text-indigo-200 focus-visible:ring-2 focus-visible:ring-indigo-400/60\" attr-href=\"back\" attr-aria-label=\"backLabel || 'Back'\" attr-title=\"backLabel || 'Back'\">\n          <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"17\" height=\"17\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m15 18-6-6 6-6\"></path></svg>\n        </a>\n      </template>\n      <div>\n        <div class=\"text-[.7rem] font-bold uppercase tracking-[.16em] text-indigo-400\">Runner engine</div>\n        <h1 class=\"mt-1 text-2xl font-bold tracking-tight text-white\">{{ title }}</h1>\n        <p class=\"mt-1 text-xs text-gray-400\">{{ subtitle }}</p>\n      </div>\n    </div>\n    <div class=\"flex items-center gap-2\">\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/help\" aria-label=\"Help\" title=\"Help\">\n        <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"16\" height=\"16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"9\"></circle><path d=\"M9.6 9a2.5 2.5 0 1 1 4.2 1.8c-1.2 1-1.8 1.4-1.8 2.7\"></path><path d=\"M12 17h.01\"></path></svg>\n      </a>\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/settings\" aria-label=\"Settings\" title=\"Settings\">\n        <lucide-icon icon=\"settings\" size=\"16\"></lucide-icon>\n      </a>\n    </div>\n  </header>\n  <script setup>\n    import { defineProp } from '@li3/web';\n    export default function () {\n      return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label') };\n    }\n  <\/script>\n</template>\n", Ji = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <title>Runner Workflow Management</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <style>\n      body[data-page='list'] .editor-panel {\n        display: none;\n      }\n      body[data-page='workflows'] .editor-panel,\n      body[data-page='workflows'] .secrets-panel,\n      body[data-page='secrets'] .workflow-list,\n      body[data-page='secrets'] .editor-panel {\n        display: none;\n      }\n      body[data-page='editor'] .workflow-list,\n      body[data-page='editor'] .secrets-panel {\n        display: none;\n      }\n    </style>\n  </head>\n  <body data-page=\"__WORKFLOW_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5\">\n        <template if=\"page === 'secrets'\"><app-header title=\"Secrets\" subtitle=\"Write-only credentials available to workflows\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <template if=\"page !== 'secrets'\"><app-header title=\"Workflow control room\" subtitle=\"Draft, validate, and publish revisioned YAML definitions\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'workflows' || page === 'editor' ? 'bg-gray-800.text-white' : ''\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'secrets' ? 'bg-gray-800.text-white' : ''\">Secrets</a>\n          <a href=\"/settings/tokens\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"notice\">\n          <div\n            role=\"status\"\n            class=\"flex items-center gap-2 rounded-lg border px-3 py-2.5 text-sm\"\n            bind-class=\"noticeError ? 'border-rose-500/40 bg-rose-500/10 text-rose-100' : 'border-emerald-500/40 bg-emerald-500/10 text-emerald-100'\"\n          >\n            <lucide-icon bind-icon=\"noticeError ? 'circle-alert' : 'circle-check'\" size=\"17\"></lucide-icon>\n            <span>{{ notice }}</span>\n          </div>\n        </template>\n\n        <section id=\"workflow-layout\" class=\"space-y-5\">\n          <nav\n            class=\"workflow-list rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10\"\n            aria-labelledby=\"workflow-list-title\"\n          >\n            <div class=\"mb-4 flex items-end justify-between gap-3 border-b border-gray-800 pb-4\">\n              <div>\n                <p class=\"text-[11px] font-semibold uppercase tracking-[0.18em] text-indigo-400\">Definitions</p>\n                <h2 id=\"workflow-list-title\" class=\"mt-1 text-lg font-semibold text-white\">Workflows</h2>\n              </div>\n              <a\n                href=\"/workflows/new\"\n                class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white outline-none transition hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"plus\" size=\"16\"></lucide-icon>\n                New workflow\n              </a>\n            </div>\n            <ul class=\"grid gap-2\" aria-label=\"Workflow definitions\">\n              <template for=\"workflow of workflows\">\n                <li>\n                  <a\n                    attr-href=\"'/workflows/' + workflow.id\"\n                    class=\"group flex min-h-16 items-center gap-3 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3 text-left text-sm text-gray-300 outline-none transition hover:border-indigo-500/50 hover:bg-indigo-500/10 focus-visible:border-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                  >\n                    <span\n                      class=\"flex h-9 w-9 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-400 transition group-hover:bg-indigo-500/15 group-hover:text-indigo-300\"\n                    >\n                      <lucide-icon icon=\"workflow\" size=\"17\"></lucide-icon>\n                    </span>\n                    <span class=\"min-w-0 flex-1\">\n                      <span class=\"block truncate text-base font-semibold text-gray-100\">{{ workflow.name }}</span>\n                      <span class=\"mt-0.5 block truncate font-mono text-[11px] text-gray-500\">{{ workflow.id }}</span>\n                    </span>\n                    <span\n                      class=\"rounded-full border px-2 py-1 text-[10px] font-semibold uppercase tracking-wide\"\n                      bind-class=\"workflow.status === 'published' ? 'border-emerald-500/30 bg-emerald-500/10 text-emerald-300' : workflow.status === 'archived' ? 'border-gray-700 bg-gray-800 text-gray-500' : 'border-amber-500/30 bg-amber-500/10 text-amber-300'\"\n                      >{{ workflow.status }}</span\n                    >\n                    <lucide-icon\n                      icon=\"arrow-up-right\"\n                      size=\"16\"\n                      class=\"shrink-0 text-gray-600 transition group-hover:text-indigo-300\"\n                    ></lucide-icon>\n                  </a>\n                </li>\n              </template>\n            </ul>\n            <div\n              class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n              class-hidden=\"workflows.length > 0\"\n            >\n              <lucide-icon icon=\"workflow\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n              <p class=\"mt-2 text-sm font-medium text-gray-300\">No workflows yet</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Create a definition to start automating jobs.</p>\n            </div>\n          </nav>\n\n          <section\n            class=\"editor-panel overflow-hidden rounded-xl border border-gray-800 bg-gray-900/80 shadow-xl shadow-black/10\"\n          >\n            <div class=\"border-b border-gray-800 px-4 pt-3 sm:px-5\">\n              <a\n                href=\"/workflows\"\n                class=\"inline-flex items-center gap-1.5 rounded-md px-2 py-1.5 text-xs font-medium text-gray-400 outline-none transition hover:bg-gray-800 hover:text-gray-100 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"arrow-left\" size=\"14\"></lucide-icon>\n                Back to workflows\n              </a>\n            </div>\n            <div class=\"border-b border-gray-800 bg-gray-900 px-4 py-4 sm:px-5\">\n              <div class=\"flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between\">\n                <label class=\"block max-w-xl flex-1 text-xs font-semibold uppercase tracking-wider text-gray-400\"\n                  >Workflow ID\n                  <input\n                    bind-value=\"workflowId\"\n                    on-input=\"setWorkflowId($event)\"\n                    bind-disabled=\"selectedId\"\n                    aria-describedby=\"workflow-id-help\"\n                    class=\"mt-2 w-full rounded-lg border border-gray-700 bg-gray-950 px-3 py-2.5 font-mono text-sm normal-case tracking-normal text-white outline-none transition focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/20\"\n                    placeholder=\"derived-from-workflow-name\"\n                  />\n                  <span\n                    id=\"workflow-id-help\"\n                    class=\"mt-1 block text-[11px] font-normal normal-case tracking-normal text-gray-500\"\n                    >The ID becomes permanent after the first save.</span\n                  >\n                </label>\n                <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                  <input\n                    type=\"checkbox\"\n                    bind-checked=\"enabled\"\n                    on-change=\"setEnabled($event)\"\n                    class=\"h-4 w-4 rounded border-gray-700 bg-gray-950 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  />\n                  Enabled\n                </label>\n                <div class=\"flex flex-wrap gap-2\" class-hidden=\"readOnly\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Save workflow draft\"\n                    title=\"Save workflow draft\"\n                    on-click=\"save()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2.5 text-sm font-semibold text-white transition hover:bg-indigo-400 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"save\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Save draft</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Publish workflow\"\n                    title=\"Publish workflow\"\n                     on-click=\"publish()\"\n                     bind-disabled=\"busy || !selectedId || source !== savedSource || enabled !== savedEnabled\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-emerald-500/50 px-3 py-2.5 text-sm font-medium text-emerald-300 transition hover:bg-emerald-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"rocket\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Publish</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Delete workflow\"\n                    title=\"Delete workflow\"\n                    on-click=\"remove()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-rose-500/50 px-3 py-2.5 text-sm font-medium text-rose-300 transition hover:bg-rose-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Delete</span>\n                  </button>\n                </div>\n              </div>\n            </div>\n            <div class=\"p-3 sm:p-5\">\n              <div class=\"mb-2 flex items-center justify-between px-1 text-xs text-gray-500\">\n                <div class=\"flex items-center gap-2\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Validate workflow\"\n                    title=\"Validate workflow\"\n                    on-click=\"validate(1)\"\n                    bind-disabled=\"validation.running\"\n                    bind-class=\"{ 'hidden': readOnly, 'text-emerald-400': validation.valid, 'text-rose-400': !validation.valid }\"\n                    class=\"disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon\n                      class=\"inline-block\"\n                      bind-icon=\"validation.running ? 'loader-circle' : (validation.valid ? 'circle-check' : 'circle-alert')\"\n                      bind-class=\"validation.running ? 'animate-spin' : ''\"\n                      size=\"16\"\n                    ></lucide-icon>\n                  </button>\n                  <span class=\"font-medium\" bind-class=\"validation.error ? 'bg-rose-500/10 text-rose-100' : ''\"\n                    >{{ validation.error || '' }}</span\n                  >\n                </div>\n                 <template if=\"revision\">\n                   <button\n                     type=\"button\"\n                     on-click=\"openRevisionDialog()\"\n                     class=\"font-mono text-indigo-300 outline-none hover:underline focus-visible:rounded focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                   >Revision {{ revision }}</button>\n                 </template>\n                 <template if=\"!revision\"><span class=\"font-mono\">Unsaved draft</span></template>\n              </div>\n              <template if=\"readOnly\">\n                <code-block\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"\n                  bind-source=\"source\"\n                ></code-block>\n              </template>\n              <template if=\"!readOnly\">\n                <code-editor\n                  id=\"source-yaml\"\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  nostatus=\"true\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-hidden rounded-lg border border-gray-700 bg-gray-950\"\n                  bind-value=\"source\"\n                  on-change=\"setSource($event.detail)\"\n                ></code-editor>\n              </template>\n              <details\n                class=\"mt-4 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\"\n                on-toggle=\"loadHelp($event)\"\n              >\n                <summary\n                  class=\"flex cursor-pointer list-none items-center gap-2 px-4 py-3 text-sm font-medium text-gray-300 outline-none transition hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                >\n                  <span class=\"inline-flex items-center gap-2\"\n                    ><lucide-icon icon=\"circle-question-mark\" size=\"16\"></lucide-icon>Syntax</span\n                  >\n                  <span class=\"ml-2 text-xs font-normal text-gray-500\">Reference, tutorials, and examples</span>\n                </summary>\n                <div\n                  ref=\"helpContent\"\n                  class=\"max-h-[38rem] overflow-y-auto border-t border-gray-800 bg-gray-950 px-4 py-5\"\n                  role=\"region\"\n                  aria-label=\"Workflow syntax help\"\n                  aria-live=\"polite\"\n                >\n                  <p class=\"text-sm text-gray-500\">Expand to load the workflow syntax reference.</p>\n                </div>\n              </details>\n            </div>\n          </section>\n        </section>\n\n        <template if=\"revisionDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div\n              class=\"flex max-h-[90vh] w-full max-w-4xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\"\n              role=\"dialog\"\n              aria-modal=\"true\"\n              aria-labelledby=\"revision-dialog-title\"\n            >\n              <div class=\"flex items-center justify-between border-b border-gray-800 px-4 py-3\">\n                <div>\n                  <h2 id=\"revision-dialog-title\" class=\"font-semibold text-white\">Workflow revision {{ revisionNumber }}</h2>\n                  <p class=\"text-xs text-gray-500\">Read-only source snapshot</p>\n                </div>\n                <button type=\"button\" on-click=\"closeRevisionDialog()\" aria-label=\"Close revision dialog\" class=\"rounded-lg p-2 text-gray-400 outline-none hover:bg-gray-800 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                  <lucide-icon icon=\"x\" size=\"17\"></lucide-icon>\n                </button>\n              </div>\n              <div class=\"min-h-0 flex-1 overflow-auto p-4\">\n                <p class=\"mb-3 text-sm text-rose-300\" class-hidden=\"!revisionError\">{{ revisionError }}</p>\n                <code-block language=\"yaml\" theme=\"atom-one-dark\" bind-source=\"revisionSource\" class=\"block min-h-[20rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"></code-block>\n              </div>\n              <div class=\"flex items-center justify-between border-t border-gray-800 px-4 py-3\">\n                <button type=\"button\" on-click=\"navigateRevision(-1)\" bind-disabled=\"revisionLoading || revisionNumber <= 1\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  <lucide-icon icon=\"chevron-left\" size=\"16\"></lucide-icon>Previous\n                </button>\n                <button type=\"button\" on-click=\"navigateRevision(1)\" bind-disabled=\"revisionLoading\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  Next<lucide-icon icon=\"chevron-right\" size=\"16\"></lucide-icon>\n                </button>\n              </div>\n            </div>\n          </div>\n        </template>\n\n        <section\n          class=\"secrets-panel rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10 sm:p-5\"\n          aria-labelledby=\"secrets-title\"\n        >\n          <div class=\"mb-5 flex items-start justify-between gap-3\">\n            <div class=\"flex items-start gap-3\">\n              <span class=\"rounded-lg bg-indigo-500/10 p-2 text-indigo-300\"\n                ><lucide-icon icon=\"key-round\" size=\"18\"></lucide-icon\n              ></span>\n              <div>\n                <h2 id=\"secrets-title\" class=\"text-lg font-semibold text-white\">Secrets</h2>\n                <p class=\"mt-0.5 text-sm text-gray-400\">Write-only credentials available to workflows.</p>\n              </div>\n            </div>\n            <span\n              class=\"rounded-full border border-gray-700 bg-gray-950 px-2.5 py-1 text-xs font-mono text-gray-400\"\n              aria-label=\"Secret count\"\n              >{{ secrets.length }}</span\n            >\n          </div>\n          <details ref=\"secretForm\" class=\"mb-5 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\">\n            <summary class=\"flex cursor-pointer list-none items-center justify-between px-4 py-3 text-sm font-medium text-gray-300 outline-none hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <span>Add a secret</span>\n              <lucide-icon icon=\"plus\" size=\"17\"></lucide-icon>\n            </summary>\n            <div class=\"space-y-3 border-t border-gray-800 p-4\">\n              <p class=\"text-xs text-gray-500\">Saving an existing name replaces its encrypted value.</p>\n              <label class=\"sr-only\" for=\"secret-name\">Secret name</label>\n              <input\n                id=\"secret-name\"\n                bind-value=\"secretName\"\n                on-input=\"setSecretName($event)\"\n                class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm uppercase outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                placeholder=\"NPM_TOKEN\"\n              />\n              <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                <input type=\"checkbox\" bind-checked=\"fileMode\" on-change=\"setFileMode($event)\" class=\"h-4 w-4 rounded border-gray-700 bg-gray-900 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n                Binary file secret\n              </label>\n              <template if=\"!fileMode\">\n                <label class=\"sr-only\" for=\"secret-value\">Text secret value</label>\n                <input\n                  id=\"secret-value\"\n                  ref=\"secretValueInput\"\n                  bind-value=\"secretValue\"\n                  on-input=\"setSecretValue($event)\"\n                  type=\"password\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  placeholder=\"New secret value\"\n                />\n              </template>\n              <template if=\"fileMode\">\n                <label class=\"sr-only\" for=\"secret-file\">Binary secret file</label>\n                <input\n                  id=\"secret-file\"\n                  ref=\"secretFileInput\"\n                  on-change=\"setSecretFile($event)\"\n                  type=\"file\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2 text-xs text-gray-400 file:mr-3 file:rounded file:border-0 file:bg-gray-700 file:px-2 file:py-1 file:text-xs file:text-gray-200 focus:border-indigo-500 focus:outline-none focus:ring-2 focus:ring-indigo-500/30\"\n                />\n              </template>\n              <div>\n                <button\n                  type=\"button\"\n                  aria-label=\"Save secret value\"\n                  title=\"Save secret value\"\n                  on-click=\"saveSecret()\"\n                  bind-disabled=\"busy\"\n                  class=\"inline-flex items-center justify-center gap-2 rounded-lg border border-indigo-500/60 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none transition hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-50\"\n                >\n                  <lucide-icon icon=\"lock-keyhole\" size=\"16\"></lucide-icon>Save secret\n                </button>\n              </div>\n            </div>\n            </div>\n          </details>\n          <ul class=\"grid gap-2\" aria-label=\"Saved secrets\">\n            <template for=\"name of secrets\">\n              <li>\n                <div class=\"flex min-h-14 items-center gap-2 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3\">\n                  <button\n                    type=\"button\"\n                    on-click=\"selectSecret(name)\"\n                    class=\"group flex min-w-0 flex-1 items-center gap-3 text-left outline-none focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                    aria-label=\"Edit secret {{ name }}\"\n                  >\n                  <span\n                    class=\"flex h-8 w-8 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-500 group-hover:text-indigo-300\"\n                    ><lucide-icon icon=\"key-round\" size=\"15\"></lucide-icon\n                  ></span>\n                  <span class=\"min-w-0 flex-1 truncate font-mono text-sm text-gray-200\">{{ name }}</span>\n                    <span class=\"text-xs text-gray-500\">Select</span>\n                    <lucide-icon icon=\"chevron-right\" size=\"16\" class=\"text-gray-600 transition group-hover:text-indigo-300\"></lucide-icon>\n                  </button>\n                  <button\n                    type=\"button\"\n                    on-click=\"removeSecret(name)\"\n                    aria-label=\"Delete secret {{ name }}\"\n                    title=\"Delete secret\"\n                    class=\"inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-lg text-rose-300 outline-none transition hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"15\"></lucide-icon>\n                  </button>\n                </div>\n              </li>\n            </template>\n          </ul>\n          <div\n            class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n            class-hidden=\"secrets.length > 0\"\n          >\n            <lucide-icon icon=\"key-round\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n            <p class=\"mt-2 text-sm font-medium text-gray-300\">No secrets configured</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Add one above to make it available to a workflow.</p>\n          </div>\n        </section>\n      </main>\n\n      <script setup>\n        import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n\n        export default function () {\n          const page = document.body.dataset.page;\n          const initialId = __WORKFLOW_ID__;\n          const initialRevision = __WORKFLOW_REVISION__;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionSource = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n            const response = await fetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n          const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n            });\n          const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const openRevisionDialog = () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionSource.value = source.value;\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1) return;\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const workflow = await api(`/api/workflows/${selectedId.value}?revision=${target}`);\n               revisionNumber.value = workflow.revision;\n               revisionSource.value = workflow.sourceYaml;\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionSource,\n             revisionError,\n             revisionLoading,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n            publish,\n            remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n          };\n        }\n      <\/script>\n    </template>\n\n    <script type=\"module\">\n      import '@li3/web';\n    <\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
+var qi = "<template component=\"app-header\">\n  <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n  <header class=\"mx-auto flex w-full max-w-[78rem] items-center justify-between gap-4 border-b border-gray-800 pb-5\">\n    <div class=\"flex min-w-0 items-start gap-3\">\n      <template if=\"back\">\n        <a class=\"mt-0.5 inline-flex h-9 w-9 items-center justify-center rounded-lg border border-gray-800 text-gray-400 no-underline outline-none hover:border-indigo-500 hover:text-indigo-200 focus-visible:ring-2 focus-visible:ring-indigo-400/60\" attr-href=\"back\" attr-aria-label=\"backLabel || 'Back'\" attr-title=\"backLabel || 'Back'\">\n          <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"17\" height=\"17\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m15 18-6-6 6-6\"></path></svg>\n        </a>\n      </template>\n      <div>\n        <div class=\"text-[.7rem] font-bold uppercase tracking-[.16em] text-indigo-400\">Runner engine</div>\n        <h1 class=\"mt-1 text-2xl font-bold tracking-tight text-white\">{{ title }}</h1>\n        <p class=\"mt-1 text-xs text-gray-400\">{{ subtitle }}</p>\n      </div>\n    </div>\n    <div class=\"flex items-center gap-2\">\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/help\" aria-label=\"Help\" title=\"Help\">\n        <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"16\" height=\"16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"9\"></circle><path d=\"M9.6 9a2.5 2.5 0 1 1 4.2 1.8c-1.2 1-1.8 1.4-1.8 2.7\"></path><path d=\"M12 17h.01\"></path></svg>\n      </a>\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/settings\" aria-label=\"Settings\" title=\"Settings\">\n        <lucide-icon icon=\"settings\" size=\"16\"></lucide-icon>\n      </a>\n    </div>\n  </header>\n  <script setup>\n    import { defineProp } from '@li3/web';\n    export default function () {\n      return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label') };\n    }\n  <\/script>\n</template>\n", Ji = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <title>Runner Workflow Management</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <style>\n      body[data-page='list'] .editor-panel {\n        display: none;\n      }\n      body[data-page='workflows'] .editor-panel,\n      body[data-page='workflows'] .secrets-panel,\n      body[data-page='secrets'] .workflow-list,\n      body[data-page='secrets'] .editor-panel {\n        display: none;\n      }\n      body[data-page='editor'] .workflow-list,\n      body[data-page='editor'] .secrets-panel {\n        display: none;\n      }\n    </style>\n  </head>\n  <body data-page=\"__WORKFLOW_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5\">\n        <template if=\"page === 'secrets'\"><app-header title=\"Secrets\" subtitle=\"Write-only credentials available to workflows\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <template if=\"page !== 'secrets'\"><app-header title=\"Workflow control room\" subtitle=\"Draft, validate, and publish revisioned YAML definitions\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'workflows' || page === 'editor' ? 'bg-gray-800.text-white' : ''\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'secrets' ? 'bg-gray-800.text-white' : ''\">Secrets</a>\n          <a href=\"/settings/tokens\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"notice\">\n          <div\n            role=\"status\"\n            class=\"flex items-center gap-2 rounded-lg border px-3 py-2.5 text-sm\"\n            bind-class=\"noticeError ? 'border-rose-500/40 bg-rose-500/10 text-rose-100' : 'border-emerald-500/40 bg-emerald-500/10 text-emerald-100'\"\n          >\n            <lucide-icon bind-icon=\"noticeError ? 'circle-alert' : 'circle-check'\" size=\"17\"></lucide-icon>\n            <span>{{ notice }}</span>\n          </div>\n        </template>\n\n        <section id=\"workflow-layout\" class=\"space-y-5\">\n          <nav\n            class=\"workflow-list rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10\"\n            aria-labelledby=\"workflow-list-title\"\n          >\n            <div class=\"mb-4 flex items-end justify-between gap-3 border-b border-gray-800 pb-4\">\n              <div>\n                <p class=\"text-[11px] font-semibold uppercase tracking-[0.18em] text-indigo-400\">Definitions</p>\n                <h2 id=\"workflow-list-title\" class=\"mt-1 text-lg font-semibold text-white\">Workflows</h2>\n              </div>\n              <a\n                href=\"/workflows/new\"\n                class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white outline-none transition hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"plus\" size=\"16\"></lucide-icon>\n                New workflow\n              </a>\n            </div>\n            <ul class=\"grid gap-2\" aria-label=\"Workflow definitions\">\n              <template for=\"workflow of workflows\">\n                <li>\n                  <a\n                    attr-href=\"'/workflows/' + workflow.id\"\n                    class=\"group flex min-h-16 items-center gap-3 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3 text-left text-sm text-gray-300 outline-none transition hover:border-indigo-500/50 hover:bg-indigo-500/10 focus-visible:border-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                  >\n                    <span\n                      class=\"flex h-9 w-9 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-400 transition group-hover:bg-indigo-500/15 group-hover:text-indigo-300\"\n                    >\n                      <lucide-icon icon=\"workflow\" size=\"17\"></lucide-icon>\n                    </span>\n                    <span class=\"min-w-0 flex-1\">\n                      <span class=\"block truncate text-base font-semibold text-gray-100\">{{ workflow.name }}</span>\n                      <span class=\"mt-0.5 block truncate font-mono text-[11px] text-gray-500\">{{ workflow.id }}</span>\n                    </span>\n                    <span\n                      class=\"rounded-full border px-2 py-1 text-[10px] font-semibold uppercase tracking-wide\"\n                      bind-class=\"workflow.status === 'published' ? 'border-emerald-500/30 bg-emerald-500/10 text-emerald-300' : workflow.status === 'archived' ? 'border-gray-700 bg-gray-800 text-gray-500' : 'border-amber-500/30 bg-amber-500/10 text-amber-300'\"\n                      >{{ workflow.status }}</span\n                    >\n                    <lucide-icon\n                      icon=\"arrow-up-right\"\n                      size=\"16\"\n                      class=\"shrink-0 text-gray-600 transition group-hover:text-indigo-300\"\n                    ></lucide-icon>\n                  </a>\n                </li>\n              </template>\n            </ul>\n            <div\n              class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n              class-hidden=\"workflows.length > 0\"\n            >\n              <lucide-icon icon=\"workflow\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n              <p class=\"mt-2 text-sm font-medium text-gray-300\">No workflows yet</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Create a definition to start automating jobs.</p>\n            </div>\n          </nav>\n\n          <section\n            class=\"editor-panel overflow-hidden rounded-xl border border-gray-800 bg-gray-900/80 shadow-xl shadow-black/10\"\n          >\n            <div class=\"border-b border-gray-800 px-4 pt-3 sm:px-5\">\n              <a\n                href=\"/workflows\"\n                class=\"inline-flex items-center gap-1.5 rounded-md px-2 py-1.5 text-xs font-medium text-gray-400 outline-none transition hover:bg-gray-800 hover:text-gray-100 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"arrow-left\" size=\"14\"></lucide-icon>\n                Back to workflows\n              </a>\n            </div>\n            <div class=\"border-b border-gray-800 bg-gray-900 px-4 py-4 sm:px-5\">\n              <div class=\"flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between\">\n                <label class=\"block max-w-xl flex-1 text-xs font-semibold uppercase tracking-wider text-gray-400\"\n                  >Workflow ID\n                  <input\n                    bind-value=\"workflowId\"\n                    on-input=\"setWorkflowId($event)\"\n                    bind-disabled=\"selectedId\"\n                    aria-describedby=\"workflow-id-help\"\n                    class=\"mt-2 w-full rounded-lg border border-gray-700 bg-gray-950 px-3 py-2.5 font-mono text-sm normal-case tracking-normal text-white outline-none transition focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/20\"\n                    placeholder=\"derived-from-workflow-name\"\n                  />\n                  <span\n                    id=\"workflow-id-help\"\n                    class=\"mt-1 block text-[11px] font-normal normal-case tracking-normal text-gray-500\"\n                    >The ID becomes permanent after the first save.</span\n                  >\n                </label>\n                <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                  <input\n                    type=\"checkbox\"\n                    bind-checked=\"enabled\"\n                    on-change=\"setEnabled($event)\"\n                    class=\"h-4 w-4 rounded border-gray-700 bg-gray-950 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  />\n                  Enabled\n                </label>\n                <div class=\"flex flex-wrap gap-2\" class-hidden=\"readOnly\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Save workflow draft\"\n                    title=\"Save workflow draft\"\n                    on-click=\"save()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2.5 text-sm font-semibold text-white transition hover:bg-indigo-400 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"save\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Save draft</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Publish workflow\"\n                    title=\"Publish workflow\"\n                     on-click=\"publish()\"\n                     bind-disabled=\"busy || !selectedId || source !== savedSource || enabled !== savedEnabled\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-emerald-500/50 px-3 py-2.5 text-sm font-medium text-emerald-300 transition hover:bg-emerald-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"rocket\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Publish</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Delete workflow\"\n                    title=\"Delete workflow\"\n                    on-click=\"remove()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-rose-500/50 px-3 py-2.5 text-sm font-medium text-rose-300 transition hover:bg-rose-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Delete</span>\n                  </button>\n                </div>\n              </div>\n            </div>\n            <div class=\"p-3 sm:p-5\">\n              <div class=\"mb-2 flex items-center justify-between px-1 text-xs text-gray-500\">\n                <div class=\"flex items-center gap-2\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Validate workflow\"\n                    title=\"Validate workflow\"\n                    on-click=\"validate(1)\"\n                    bind-disabled=\"validation.running\"\n                    bind-class=\"{ 'hidden': readOnly, 'text-emerald-400': validation.valid, 'text-rose-400': !validation.valid }\"\n                    class=\"disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon\n                      class=\"inline-block\"\n                      bind-icon=\"validation.running ? 'loader-circle' : (validation.valid ? 'circle-check' : 'circle-alert')\"\n                      bind-class=\"validation.running ? 'animate-spin' : ''\"\n                      size=\"16\"\n                    ></lucide-icon>\n                  </button>\n                  <span class=\"font-medium\" bind-class=\"validation.error ? 'bg-rose-500/10 text-rose-100' : ''\"\n                    >{{ validation.error || '' }}</span\n                  >\n                </div>\n                 <template if=\"revision\">\n                   <button\n                     type=\"button\"\n                     on-click=\"openRevisionDialog()\"\n                     class=\"font-mono text-indigo-300 outline-none hover:underline focus-visible:rounded focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                   >Revision {{ revision }}</button>\n                 </template>\n                 <template if=\"!revision\"><span class=\"font-mono\">Unsaved draft</span></template>\n              </div>\n              <template if=\"readOnly\">\n                <code-block\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"\n                  bind-source=\"source\"\n                ></code-block>\n              </template>\n              <template if=\"!readOnly\">\n                <code-editor\n                  id=\"source-yaml\"\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  nostatus=\"true\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-hidden rounded-lg border border-gray-700 bg-gray-950\"\n                  bind-value=\"source\"\n                  on-change=\"setSource($event.detail)\"\n                ></code-editor>\n              </template>\n              <details\n                class=\"mt-4 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\"\n                on-toggle=\"loadHelp($event)\"\n              >\n                <summary\n                  class=\"flex cursor-pointer list-none items-center gap-2 px-4 py-3 text-sm font-medium text-gray-300 outline-none transition hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                >\n                  <span class=\"inline-flex items-center gap-2\"\n                    ><lucide-icon icon=\"circle-question-mark\" size=\"16\"></lucide-icon>Syntax</span\n                  >\n                  <span class=\"ml-2 text-xs font-normal text-gray-500\">Reference, tutorials, and examples</span>\n                </summary>\n                <div\n                  ref=\"helpContent\"\n                  class=\"max-h-[38rem] overflow-y-auto border-t border-gray-800 bg-gray-950 px-4 py-5\"\n                  role=\"region\"\n                  aria-label=\"Workflow syntax help\"\n                  aria-live=\"polite\"\n                >\n                  <p class=\"text-sm text-gray-500\">Expand to load the workflow syntax reference.</p>\n                </div>\n              </details>\n            </div>\n          </section>\n        </section>\n\n        <template if=\"revisionDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div\n              class=\"flex max-h-[90vh] w-full max-w-4xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\"\n              role=\"dialog\"\n              aria-modal=\"true\"\n              aria-labelledby=\"revision-dialog-title\"\n            >\n              <div class=\"flex items-center justify-between border-b border-gray-800 px-4 py-3\">\n                <div>\n                  <h2 id=\"revision-dialog-title\" class=\"font-semibold text-white\">Workflow revision {{ revisionNumber }}</h2>\n                  <p class=\"text-xs text-gray-500\">Read-only source snapshot</p>\n                </div>\n                <button type=\"button\" on-click=\"closeRevisionDialog()\" aria-label=\"Close revision dialog\" class=\"rounded-lg p-2 text-gray-400 outline-none hover:bg-gray-800 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                  <lucide-icon icon=\"x\" size=\"17\"></lucide-icon>\n                </button>\n              </div>\n              <div class=\"min-h-0 flex-1 overflow-auto p-4\">\n                <p class=\"mb-3 text-sm text-rose-300\" class-hidden=\"!revisionError\">{{ revisionError }}</p>\n                <code-block language=\"yaml\" theme=\"atom-one-dark\" bind-source=\"revisionSource\" class=\"block min-h-[20rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"></code-block>\n              </div>\n              <div class=\"flex items-center justify-between border-t border-gray-800 px-4 py-3\">\n                <button type=\"button\" on-click=\"navigateRevision(-1)\" bind-disabled=\"revisionLoading || revisionNumber <= 1\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  <lucide-icon icon=\"chevron-left\" size=\"16\"></lucide-icon>Previous\n                </button>\n                <button type=\"button\" on-click=\"navigateRevision(1)\" bind-disabled=\"revisionLoading\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  Next<lucide-icon icon=\"chevron-right\" size=\"16\"></lucide-icon>\n                </button>\n              </div>\n            </div>\n          </div>\n        </template>\n\n        <section\n          class=\"secrets-panel rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10 sm:p-5\"\n          aria-labelledby=\"secrets-title\"\n        >\n          <div class=\"mb-5 flex items-start justify-between gap-3\">\n            <div class=\"flex items-start gap-3\">\n              <span class=\"rounded-lg bg-indigo-500/10 p-2 text-indigo-300\"\n                ><lucide-icon icon=\"key-round\" size=\"18\"></lucide-icon\n              ></span>\n              <div>\n                <h2 id=\"secrets-title\" class=\"text-lg font-semibold text-white\">Secrets</h2>\n                <p class=\"mt-0.5 text-sm text-gray-400\">Write-only credentials available to workflows.</p>\n              </div>\n            </div>\n            <span\n              class=\"rounded-full border border-gray-700 bg-gray-950 px-2.5 py-1 text-xs font-mono text-gray-400\"\n              aria-label=\"Secret count\"\n              >{{ secrets.length }}</span\n            >\n          </div>\n          <details ref=\"secretForm\" class=\"mb-5 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\">\n            <summary class=\"flex cursor-pointer list-none items-center justify-between px-4 py-3 text-sm font-medium text-gray-300 outline-none hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <span>Add a secret</span>\n              <lucide-icon icon=\"plus\" size=\"17\"></lucide-icon>\n            </summary>\n            <div class=\"space-y-3 border-t border-gray-800 p-4\">\n              <p class=\"text-xs text-gray-500\">Saving an existing name replaces its encrypted value.</p>\n              <label class=\"sr-only\" for=\"secret-name\">Secret name</label>\n              <input\n                id=\"secret-name\"\n                bind-value=\"secretName\"\n                on-input=\"setSecretName($event)\"\n                class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm uppercase outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                placeholder=\"NPM_TOKEN\"\n              />\n              <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                <input type=\"checkbox\" bind-checked=\"fileMode\" on-change=\"setFileMode($event)\" class=\"h-4 w-4 rounded border-gray-700 bg-gray-900 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n                Binary file secret\n              </label>\n              <template if=\"!fileMode\">\n                <label class=\"sr-only\" for=\"secret-value\">Text secret value</label>\n                <input\n                  id=\"secret-value\"\n                  ref=\"secretValueInput\"\n                  bind-value=\"secretValue\"\n                  on-input=\"setSecretValue($event)\"\n                  type=\"password\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  placeholder=\"New secret value\"\n                />\n              </template>\n              <template if=\"fileMode\">\n                <label class=\"sr-only\" for=\"secret-file\">Binary secret file</label>\n                <input\n                  id=\"secret-file\"\n                  ref=\"secretFileInput\"\n                  on-change=\"setSecretFile($event)\"\n                  type=\"file\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2 text-xs text-gray-400 file:mr-3 file:rounded file:border-0 file:bg-gray-700 file:px-2 file:py-1 file:text-xs file:text-gray-200 focus:border-indigo-500 focus:outline-none focus:ring-2 focus:ring-indigo-500/30\"\n                />\n              </template>\n              <div>\n                <button\n                  type=\"button\"\n                  aria-label=\"Save secret value\"\n                  title=\"Save secret value\"\n                  on-click=\"saveSecret()\"\n                  bind-disabled=\"busy\"\n                  class=\"inline-flex items-center justify-center gap-2 rounded-lg border border-indigo-500/60 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none transition hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-50\"\n                >\n                  <lucide-icon icon=\"lock-keyhole\" size=\"16\"></lucide-icon>Save secret\n                </button>\n              </div>\n            </div>\n            </div>\n          </details>\n          <ul class=\"grid gap-2\" aria-label=\"Saved secrets\">\n            <template for=\"name of secrets\">\n              <li>\n                <div class=\"flex min-h-14 items-center gap-2 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3\">\n                  <button\n                    type=\"button\"\n                    on-click=\"selectSecret(name)\"\n                    class=\"group flex min-w-0 flex-1 items-center gap-3 text-left outline-none focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                    aria-label=\"Edit secret {{ name }}\"\n                  >\n                  <span\n                    class=\"flex h-8 w-8 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-500 group-hover:text-indigo-300\"\n                    ><lucide-icon icon=\"key-round\" size=\"15\"></lucide-icon\n                  ></span>\n                  <span class=\"min-w-0 flex-1 truncate font-mono text-sm text-gray-200\">{{ name }}</span>\n                    <span class=\"text-xs text-gray-500\">Select</span>\n                    <lucide-icon icon=\"chevron-right\" size=\"16\" class=\"text-gray-600 transition group-hover:text-indigo-300\"></lucide-icon>\n                  </button>\n                  <button\n                    type=\"button\"\n                    on-click=\"removeSecret(name)\"\n                    aria-label=\"Delete secret {{ name }}\"\n                    title=\"Delete secret\"\n                    class=\"inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-lg text-rose-300 outline-none transition hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"15\"></lucide-icon>\n                  </button>\n                </div>\n              </li>\n            </template>\n          </ul>\n          <div\n            class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n            class-hidden=\"secrets.length > 0\"\n          >\n            <lucide-icon icon=\"key-round\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n            <p class=\"mt-2 text-sm font-medium text-gray-300\">No secrets configured</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Add one above to make it available to a workflow.</p>\n          </div>\n        </section>\n      </main>\n\n      <script setup>\n        import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n\n        export default function () {\n          const page = document.body.dataset.page;\n          const initialId = __WORKFLOW_ID__;\n          const initialRevision = __WORKFLOW_REVISION__;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionSource = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n            const response = await fetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n          const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n            });\n          const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const openRevisionDialog = () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionSource.value = source.value;\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1) return;\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const workflow = await api(`/api/workflows/${selectedId.value}?revision=${target}`);\n               revisionNumber.value = workflow.revision;\n               revisionSource.value = workflow.sourceYaml;\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionSource,\n             revisionError,\n             revisionLoading,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n            publish,\n            remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n          };\n        }\n      <\/script>\n    </template>\n\n    <script type=\"module\">\n      import '@li3/web';\n    <\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
 //#endregion
 //#region src/workflows-ui.ts
 function Yi(e, t = "", n) {
@@ -10948,7 +10967,11 @@ var el = class {
 				continue;
 			}
 			if (r.on.if) try {
-				if (!await Qn.evaluateConditions(r.on.if, { inputs: t })) {
+				let e = n?.conditionContext?.(t) || {};
+				if (!await Qn.evaluateConditions(r.on.if, {
+					inputs: t,
+					...e
+				})) {
 					Yn(`⏩ Skipped ${r.id} based on conditions: ${r.on.if}`, { inputs: t });
 					continue;
 				}

package/dist/preprocessors/github.d.ts

@@ -11,8 +11,10 @@ interface GithubWorkflowTrigger extends WorkflowTrigger {
 }
 export declare class GitHubPreprocessor implements WebhookPreprocessor {
     name: string;
+    private readonly apiUrl;
     parse(headers: Record<string, string>, rawBodyBuffer: Buffer, secret?: string): PreprocessedWebhook;
     filter(inputs: Record<string, any>, trigger: GithubWorkflowTrigger): PreprocessedWebhook;
+    conditionContext(inputs: Record<string, any>): Record<string, any>;
 }
 export {};
 //# sourceMappingURL=github.d.ts.map

package/dist/preprocessors/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/preprocessors/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAmB7F,UAAU,qBAAsB,SAAQ,eAAe;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,kBAAmB,YAAW,mBAAmB;IAC5D,IAAI,SAAY;IAEhB,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAoDnG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,qBAAqB,GAAG,mBAAmB;CA+BzF"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/preprocessors/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAmB7F,UAAU,qBAAsB,SAAQ,eAAe;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACzB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,kBAAmB,YAAW,mBAAmB;IAC5D,IAAI,SAAY;IAChB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IAEnD,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAoDnG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,qBAAqB,GAAG,mBAAmB;IAgCxF,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;CA2BnE"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IA2M3B;;OAEG;YACW,aAAa;YA0Bb,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA0C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;YAKf,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAehB,sBAAsB;YAetB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IA2M3B;;OAEG;YACW,aAAa;YA0Bb,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA2C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;YAKf,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAehB,sBAAsB;YAetB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}

package/dist/types.d.ts

@@ -81,6 +81,7 @@ export interface WebhookPreprocessor {
     name: string;
     parse(headers: Record<string, string>, rawBodyBuffer: Buffer, secret?: string): PreprocessedWebhook;
     filter?(inputs: Record<string, any>, trigger: WorkflowTrigger): PreprocessedWebhook;
+    conditionContext?(inputs: Record<string, any>): Record<string, any>;
 }
 export interface WorkflowTrigger {
     provider: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAQ3C,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,sEAAsE;IACtE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,wEAAwE;IACxE,IAAI,CAAC,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhC;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAAC;IAE/C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAAC;IACpG,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,mBAAmB,CAAC;CACrF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,EAAE,EAAE,eAAe,CAAC;IACpB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACrC,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEjD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAA0B,SAAQ,WAAW;IAC5D,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,gBAAgB,EAAE,mBAAmB,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,GAAG,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;KAClC,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAQ3C,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,sEAAsE;IACtE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,wEAAwE;IACxE,IAAI,CAAC,EAAE;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAErD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1B;;OAEG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAExB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhC;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,mBAAmB,CAAC;IAE/C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAAC;IACpG,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,mBAAmB,CAAC;IACpF,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,EAAE,EAAE,eAAe,CAAC;IACpB,WAAW,CAAC,EAAE;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,CAAC,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACrC,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEnF,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEjD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAA0B,SAAQ,WAAW;IAC5D,OAAO,EAAE,UAAU,CAAC;IACpB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,gBAAgB,EAAE,mBAAmB,CAAC;CACvC;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,GAAG,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QACL,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAC/B,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;KAClC,CAAC;CACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-cli/on",
-  "version": "1.47.2",
+  "version": "1.48.0",
   "description": "CLI entry point for the on plugin ecosystem.",
   "type": "module",
   "packageManager": "pnpm@12.3.4",