@cloud-cli/on 1.55.2 → 1.56.0

package/dist/api-key-repository.d.ts

@@ -1,4 +1,4 @@
-export declare const API_KEY_SCOPES: readonly ["workflows:read", "workflows:write", "logs:read", "artifacts:read", "runs:control"];
+export declare const API_KEY_SCOPES: readonly ["workflows:read", "workflows:write", "logs:read", "artifacts:read", "runs:control", "runs:dispatch"];
 export type ApiKeyScope = (typeof API_KEY_SCOPES)[number];
 export declare class ApiKeyRepository {
     init(): Promise<void>;
@@ -6,7 +6,7 @@ export declare class ApiKeyRepository {
     issue(name: string, scopes: string[]): Promise<{
         id: `${string}-${string}-${string}-${string}-${string}`;
         name: string;
-        scopes: ("workflows:read" | "workflows:write" | "logs:read" | "artifacts:read" | "runs:control")[];
+        scopes: ("workflows:read" | "workflows:write" | "logs:read" | "artifacts:read" | "runs:control" | "runs:dispatch")[];
         token: string;
     }>;
     scopesForToken(token: string): Promise<string[] | null>;

package/dist/api-key-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-repository.d.ts","sourceRoot":"","sources":["../src/api-key-repository.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,+FAAgG,CAAC;AAC5H,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,qBAAa,gBAAgB;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,IAAI;IAKJ,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;;;;;;IAUpC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAQvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI3C"}
+{"version":3,"file":"api-key-repository.d.ts","sourceRoot":"","sources":["../src/api-key-repository.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,gHAAiH,CAAC;AAC7I,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,qBAAa,gBAAgB;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,IAAI;IAKJ,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;;;;;;IAUpC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAQvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI3C"}

package/dist/on.js

@@ -227,13 +227,15 @@ var ye = class extends l {
 		await this.createTables(), await this.clearStaleJobs();
 	}
 	async enqueue(e, t, n, r = [], i) {
-		return i && await C.run("UPDATE jobs SET status = 'cancelled' WHERE concurrency_key = ? AND status IN ('pending', 'running');", [i]), await C.run("INSERT INTO jobs (workflow_id, workflow_revision, required_tags, concurrency_key, payload) VALUES (?, ?, ?, ?, ?);", [
+		i && await C.run("UPDATE jobs SET status = 'cancelled' WHERE concurrency_key = ? AND status IN ('pending', 'running');", [i]);
+		let a = await C.run("INSERT INTO jobs (workflow_id, workflow_revision, required_tags, concurrency_key, payload) VALUES (?, ?, ?, ?, ?);", [
 			e,
 			t,
 			JSON.stringify(r),
 			i || "",
 			JSON.stringify(n)
 		]);
+		return Number(a?.lastInsertRowid ?? a?.id ?? 0);
 	}
 	async claimNextJob(e = []) {
 		return await C.get("\n      UPDATE jobs\n      SET\n        status = 'running',\n        worker_id = ?,\n        started_at = CURRENT_TIMESTAMP\n      WHERE id = (\n        SELECT id FROM jobs\n        WHERE status = 'pending'\n          AND NOT EXISTS (\n            SELECT 1\n            FROM json_each(COALESCE(jobs.required_tags, '[]')) AS required_tag\n            WHERE required_tag.value NOT IN (SELECT value FROM json_each(?))\n          )\n        ORDER BY created_at ASC\n        LIMIT 1\n      )\n      RETURNING *;\n    ", [this.workerId, JSON.stringify(e)]) || null;
@@ -5739,6 +5741,49 @@ var oa = {
 				content: { "application/json": { schema: { $ref: "#/components/schemas/JobList" } } }
 			} }
 		} },
+		"/api/dispatch/{trigger}": { post: {
+			tags: ["jobs"],
+			summary: "Dispatch a workflow trigger with manual inputs",
+			security: [{ bearerAuth: [] }, { basicAuth: [] }],
+			parameters: [{
+				name: "trigger",
+				in: "path",
+				required: !0,
+				schema: { type: "string" }
+			}],
+			requestBody: {
+				required: !0,
+				content: { "application/json": { schema: { type: "object" } } }
+			},
+			responses: {
+				202: {
+					description: "Jobs queued",
+					content: { "application/json": { schema: { type: "object" } } }
+				},
+				401: { $ref: "#/components/responses/Unauthorized" }
+			}
+		} },
+		"/api/jobs/{jobId}/wait": { get: {
+			tags: ["jobs"],
+			summary: "Wait for a job to reach a terminal state",
+			parameters: [{ $ref: "#/components/parameters/JobId" }, {
+				name: "timeout",
+				in: "query",
+				schema: {
+					type: "integer",
+					minimum: 0,
+					maximum: 12e4,
+					default: 3e4
+				}
+			}],
+			responses: {
+				200: {
+					description: "Latest job state",
+					content: { "application/json": { schema: { type: "object" } } }
+				},
+				404: { $ref: "#/components/responses/NotFound" }
+			}
+		} },
 		"/api/jobs/{jobId}/cancel": { post: {
 			tags: ["jobs"],
 			summary: "Cancel an active job",
@@ -6262,7 +6307,8 @@ var oa = {
 								"workflows:write",
 								"logs:read",
 								"artifacts:read",
-								"runs:control"
+								"runs:control",
+								"runs:dispatch"
 							]
 						}
 					}
@@ -6293,7 +6339,8 @@ var oa = {
 	"workflows:write",
 	"logs:read",
 	"artifacts:read",
-	"runs:control"
+	"runs:control",
+	"runs:dispatch"
 ], ca = class {
 	async init() {
 		await C.exec("CREATE TABLE IF NOT EXISTS api_keys (\n      id TEXT PRIMARY KEY,\n      name TEXT NOT NULL,\n      key_hash TEXT NOT NULL UNIQUE,\n      scopes TEXT NOT NULL,\n      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n      last_used_at DATETIME,\n      revoked_at DATETIME\n    )");
@@ -6328,7 +6375,7 @@ var oa = {
 		let t = await C.run("UPDATE api_keys SET revoked_at = CURRENT_TIMESTAMP WHERE id = ? AND revoked_at IS NULL", [e]);
 		return Number(t?.changes || 0) > 0;
 	}
-}, la = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>Runner settings</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n  </head>\n  <body data-page=\"__SETTINGS_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <app-header title=\"Settings\" subtitle=\"Human-admin controls and automation credentials\" back=\"/runs\" back-label=\"Back to jobs\"></app-header>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Secrets</a>\n          <a href=\"/settings/tokens\" bind-class=\"page === 'tokens' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" bind-class=\"page === 'notifications' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"page === 'tokens'\">\n        </template>\n        <template if=\"page === 'notifications'\">\n          <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"notifications-title\">\n            <h2 id=\"notifications-title\" class=\"text-lg font-semibold text-white\">Notifications</h2>\n            <p class=\"mt-1 text-sm text-gray-400\">Receive job completion notifications on this device.</p>\n            <button type=\"button\" on-click=\"toggleNotifications()\" class=\"mt-5 inline-flex items-center gap-2 rounded-lg border border-indigo-500/60 px-4 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <lucide-icon bind-icon=\"notificationsEnabled ? 'bell-off' : 'bell-ring'\" size=\"16\"></lucide-icon>\n              {{ notificationsEnabled ? 'Disable notifications' : 'Enable notifications' }}\n            </button>\n            <p class=\"mt-3 text-sm text-gray-400\" role=\"status\">{{ notificationMessage }}</p>\n          </section>\n        </template>\n\n        <template if=\"page === 'tokens'\">\n        <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"keys-title\">\n          <div class=\"flex items-start justify-between gap-3\">\n            <div>\n              <h2 id=\"keys-title\" class=\"text-lg font-semibold text-white\">API keys</h2>\n              <p class=\"mt-1 text-sm text-gray-400\">Issue narrowly scoped credentials for automation tools. Keys are shown only once.</p>\n            </div>\n          </div>\n          <div class=\"mt-5 grid gap-3 rounded-xl border border-gray-800 bg-gray-950/50 p-4 md:grid-cols-[1fr_auto]\">\n            <label class=\"sr-only\" for=\"key-name\">Key name</label>\n            <input id=\"key-name\" bind-value=\"keyName\" on-input=\"setKeyName($event)\" placeholder=\"Documentation bot\" class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 text-sm outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n            <button type=\"button\" on-click=\"issueKey()\" class=\"inline-flex items-center justify-center gap-2 rounded-lg bg-indigo-500 px-4 py-2.5 text-sm font-semibold text-white outline-none hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"><lucide-icon icon=\"key-round\" size=\"16\"></lucide-icon>Issue key</button>\n            <fieldset class=\"md:col-span-2\">\n              <legend class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Scopes</legend>\n              <div class=\"space-y-2\">\n                <template for=\"scope of scopeOptions\">\n                  <label class=\"group flex cursor-pointer items-center gap-3 text-sm text-gray-300\">\n                    <input type=\"checkbox\" bind-checked=\"scope.selected\" on-change=\"toggleScope(scope)\" class=\"peer sr-only\" />\n                    <span aria-hidden=\"true\" class=\"flex h-5 w-5 shrink-0 items-center justify-center rounded-md border border-gray-600 bg-gray-900 text-transparent transition peer-checked:border-indigo-400 peer-checked:bg-indigo-500 peer-checked:text-white peer-focus-visible:ring-2 peer-focus-visible:ring-indigo-400/70 peer-disabled:opacity-50\">\n                      <svg viewBox=\"0 0 16 16\" width=\"13\" height=\"13\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m3 8 3 3 7-7\"></path></svg>\n                    </span>\n                    <span class=\"group-hover:text-white\">{{ scope.label }}</span>\n                  </label>\n                </template>\n              </div>\n            </fieldset>\n          </div>\n          <template if=\"newToken\">\n            <div class=\"mt-4 rounded-xl border border-amber-500/40 bg-amber-500/10 p-4\" role=\"alert\">\n              <p class=\"text-sm font-semibold text-amber-200\">Copy this key now. It cannot be shown again.</p>\n              <code class=\"mt-2 block select-all break-all rounded bg-gray-950 p-3 font-mono text-xs text-amber-100\">{{ newToken }}</code>\n            </div>\n          </template>\n          <h3 class=\"mt-5 text-xs font-semibold uppercase tracking-wider text-gray-500\">Active tokens</h3>\n          <ul class=\"mt-2 space-y-2\" aria-label=\"Active API keys\">\n            <template for=\"key of keys\">\n              <li class=\"flex items-center justify-between gap-3 rounded-xl border border-gray-800 bg-gray-950/60 px-4 py-3\">\n                <div class=\"min-w-0\"><p class=\"truncate text-sm font-medium text-gray-200\">{{ key.name }}</p><p class=\"text-xs text-gray-500\">{{ key.scopes.join(', ') }} · created {{ key.created_at }}</p></div>\n                <button type=\"button\" on-click=\"revokeKey(key)\" class=\"shrink-0 rounded-lg p-2 text-rose-300 outline-none hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\" aria-label=\"Revoke {{ key.name }}\" title=\"Revoke key\"><lucide-icon icon=\"trash\" size=\"16\"></lucide-icon></button>\n              </li>\n            </template>\n          </ul>\n        </section>\n        </template>\n        <p class=\"text-sm text-rose-300\" role=\"alert\" class-hidden=\"!error\">{{ error }}</p>\n      </main>\n      <script setup>\n        import { onInit, ref } from '@li3/web';\n        export default function () {\n          const page = document.body.dataset.page;\n          const keys = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n          ]);\n          const api = async (url, options = {}) => { const response = await fetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n          const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n          const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      <\/script>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
+}, la = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>Runner settings</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n  </head>\n  <body data-page=\"__SETTINGS_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <app-header title=\"Settings\" subtitle=\"Human-admin controls and automation credentials\" back=\"/runs\" back-label=\"Back to jobs\"></app-header>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Secrets</a>\n          <a href=\"/settings/tokens\" bind-class=\"page === 'tokens' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" bind-class=\"page === 'notifications' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"page === 'tokens'\">\n        </template>\n        <template if=\"page === 'notifications'\">\n          <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"notifications-title\">\n            <h2 id=\"notifications-title\" class=\"text-lg font-semibold text-white\">Notifications</h2>\n            <p class=\"mt-1 text-sm text-gray-400\">Receive job completion notifications on this device.</p>\n            <button type=\"button\" on-click=\"toggleNotifications()\" class=\"mt-5 inline-flex items-center gap-2 rounded-lg border border-indigo-500/60 px-4 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <lucide-icon bind-icon=\"notificationsEnabled ? 'bell-off' : 'bell-ring'\" size=\"16\"></lucide-icon>\n              {{ notificationsEnabled ? 'Disable notifications' : 'Enable notifications' }}\n            </button>\n            <p class=\"mt-3 text-sm text-gray-400\" role=\"status\">{{ notificationMessage }}</p>\n          </section>\n        </template>\n\n        <template if=\"page === 'tokens'\">\n        <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"keys-title\">\n          <div class=\"flex items-start justify-between gap-3\">\n            <div>\n              <h2 id=\"keys-title\" class=\"text-lg font-semibold text-white\">API keys</h2>\n              <p class=\"mt-1 text-sm text-gray-400\">Issue narrowly scoped credentials for automation tools. Keys are shown only once.</p>\n            </div>\n          </div>\n          <div class=\"mt-5 grid gap-3 rounded-xl border border-gray-800 bg-gray-950/50 p-4 md:grid-cols-[1fr_auto]\">\n            <label class=\"sr-only\" for=\"key-name\">Key name</label>\n            <input id=\"key-name\" bind-value=\"keyName\" on-input=\"setKeyName($event)\" placeholder=\"Documentation bot\" class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 text-sm outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n            <button type=\"button\" on-click=\"issueKey()\" class=\"inline-flex items-center justify-center gap-2 rounded-lg bg-indigo-500 px-4 py-2.5 text-sm font-semibold text-white outline-none hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"><lucide-icon icon=\"key-round\" size=\"16\"></lucide-icon>Issue key</button>\n            <fieldset class=\"md:col-span-2\">\n              <legend class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Scopes</legend>\n              <div class=\"space-y-2\">\n                <template for=\"scope of scopeOptions\">\n                  <label class=\"group flex cursor-pointer items-center gap-3 text-sm text-gray-300\">\n                    <input type=\"checkbox\" bind-checked=\"scope.selected\" on-change=\"toggleScope(scope)\" class=\"peer sr-only\" />\n                    <span aria-hidden=\"true\" class=\"flex h-5 w-5 shrink-0 items-center justify-center rounded-md border border-gray-600 bg-gray-900 text-transparent transition peer-checked:border-indigo-400 peer-checked:bg-indigo-500 peer-checked:text-white peer-focus-visible:ring-2 peer-focus-visible:ring-indigo-400/70 peer-disabled:opacity-50\">\n                      <svg viewBox=\"0 0 16 16\" width=\"13\" height=\"13\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m3 8 3 3 7-7\"></path></svg>\n                    </span>\n                    <span class=\"group-hover:text-white\">{{ scope.label }}</span>\n                  </label>\n                </template>\n              </div>\n            </fieldset>\n          </div>\n          <template if=\"newToken\">\n            <div class=\"mt-4 rounded-xl border border-amber-500/40 bg-amber-500/10 p-4\" role=\"alert\">\n              <p class=\"text-sm font-semibold text-amber-200\">Copy this key now. It cannot be shown again.</p>\n              <code class=\"mt-2 block select-all break-all rounded bg-gray-950 p-3 font-mono text-xs text-amber-100\">{{ newToken }}</code>\n            </div>\n          </template>\n          <h3 class=\"mt-5 text-xs font-semibold uppercase tracking-wider text-gray-500\">Active tokens</h3>\n          <ul class=\"mt-2 space-y-2\" aria-label=\"Active API keys\">\n            <template for=\"key of keys\">\n              <li class=\"flex items-center justify-between gap-3 rounded-xl border border-gray-800 bg-gray-950/60 px-4 py-3\">\n                <div class=\"min-w-0\"><p class=\"truncate text-sm font-medium text-gray-200\">{{ key.name }}</p><p class=\"text-xs text-gray-500\">{{ key.scopes.join(', ') }} · created {{ key.created_at }}</p></div>\n                <button type=\"button\" on-click=\"revokeKey(key)\" class=\"shrink-0 rounded-lg p-2 text-rose-300 outline-none hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\" aria-label=\"Revoke {{ key.name }}\" title=\"Revoke key\"><lucide-icon icon=\"trash\" size=\"16\"></lucide-icon></button>\n              </li>\n            </template>\n          </ul>\n        </section>\n        </template>\n        <p class=\"text-sm text-rose-300\" role=\"alert\" class-hidden=\"!error\">{{ error }}</p>\n      </main>\n      <script setup>\n        import { onInit, ref } from '@li3/web';\n        export default function () {\n          const page = document.body.dataset.page;\n          const keys = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n            { name: 'runs:dispatch', label: 'Dispatch runs', selected: false },\n          ]);\n          const api = async (url, options = {}) => { const response = await fetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n          const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n          const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      <\/script>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
 //#endregion
 //#region src/settings-ui.ts
 function ua(e = "tokens") {
@@ -20859,23 +20906,27 @@ var SC = class {
 			let e = n.searchParams.get("afterId"), r = n.searchParams.get("beforeId"), i = n.searchParams.get("limit"), a = n.searchParams.get("filter")?.trim() || void 0, o = n.searchParams.get("workflowId")?.trim() || void 0, s = e === null ? void 0 : Number(e), c = r === null ? void 0 : Number(r), l = i === null ? CC : Number(i);
 			return s !== void 0 && (!Number.isSafeInteger(s) || s < 0) ? (t.writeHead(400, { "Content-Type": "application/json; charset=utf-8" }), t.end(JSON.stringify({ error: "afterId must be a non-negative integer" }))) : c !== void 0 && (!Number.isSafeInteger(c) || c < 1) ? (t.writeHead(400, { "Content-Type": "application/json; charset=utf-8" }), t.end(JSON.stringify({ error: "beforeId must be a positive integer" }))) : !Number.isSafeInteger(l) || l < 1 || l > wC ? (t.writeHead(400, { "Content-Type": "application/json; charset=utf-8" }), t.end(JSON.stringify({ error: `limit must be an integer from 1 to ${wC}` }))) : a && a.length > 200 ? (t.writeHead(400, { "Content-Type": "application/json; charset=utf-8" }), t.end(JSON.stringify({ error: "filter must be at most 200 characters" }))) : this.renderDashboardJobs(t, l, s, c, a, o);
 		}
+		let s = n.pathname.match(/^\/api\/dispatch\/([a-z0-9-]+)$/);
+		if (e.method === "POST" && s) return this.handleDispatch(e, t, s[1]);
+		let c = n.pathname.match(/^\/api\/jobs\/(\d+)\/wait$/);
+		if (e.method === "GET" && c) return this.handleJobWait(c[1], n.searchParams.get("timeout"), t);
 		if (e.method === "GET" && n.pathname === "/api/events") return this.events.subscribe(e, t);
 		if (e.method === "GET" && n.pathname === "/api/push/public-key") return this.handlePushPublicKey(t);
 		if (e.method === "POST" && n.pathname === "/api/push/subscriptions") return this.handlePushSubscribe(e, t);
 		if (e.method === "DELETE" && n.pathname === "/api/push/subscriptions") return this.handlePushUnsubscribe(e, t);
 		if (n.pathname === "/api/workflows/validate" && e.method === "POST") return this.handleWorkflowValidation(e, t);
 		if (n.pathname === "/api/secrets" && e.method === "GET") return this.handleSecretList(e, t);
-		let s = n.pathname.match(/^\/api\/secrets\/([A-Z][A-Z0-9_]*)$/);
-		if (s && e.method === "PUT") return this.handleSecretSave(e, t, s[1]);
-		if (s && e.method === "DELETE") return this.handleSecretDelete(e, t, s[1]);
-		let c = n.pathname.match(/^\/api\/jobs\/(\d+)\/secrets$/);
-		if (c && e.method === "GET") return this.handleJobSecrets(e, t, c[1]);
-		let l = n.pathname.match(/^\/api\/jobs\/(\d+)\/cancel$/);
-		if (l && e.method === "POST") return this.handleCancelJob(e, t, l[1]);
+		let l = n.pathname.match(/^\/api\/secrets\/([A-Z][A-Z0-9_]*)$/);
+		if (l && e.method === "PUT") return this.handleSecretSave(e, t, l[1]);
+		if (l && e.method === "DELETE") return this.handleSecretDelete(e, t, l[1]);
+		let u = n.pathname.match(/^\/api\/jobs\/(\d+)\/secrets$/);
+		if (u && e.method === "GET") return this.handleJobSecrets(e, t, u[1]);
+		let d = n.pathname.match(/^\/api\/jobs\/(\d+)\/cancel$/);
+		if (d && e.method === "POST") return this.handleCancelJob(e, t, d[1]);
 		if (n.pathname === "/api/workflows" && e.method === "GET") return this.handleWorkflowList(e, t);
-		let u = n.pathname.match(/^\/api\/workflows\/([a-z0-9-]+)(\/publish)?$/);
-		if (u) {
-			let [, r, i] = u;
+		let p = n.pathname.match(/^\/api\/workflows\/([a-z0-9-]+)(\/publish)?$/);
+		if (p) {
+			let [, r, i] = p;
 			if (e.method === "GET" && !i) return this.handleWorkflowGet(e, t, r, n.searchParams.get("revision"));
 			if (e.method === "PUT" && !i) return this.handleWorkflowSave(e, t, r);
 			if (e.method === "DELETE" && !i) return this.handleWorkflowDelete(e, t, r);
@@ -20886,13 +20937,15 @@ var SC = class {
 			let r = n.pathname.replace("/runs/", "");
 			return this.renderRunDetails(r, t, "html", await this.hasScope(e, "logs:read"));
 		}
-		let d = n.pathname.match(/^\/api\/runs\/(\d+)\/ai-help$/);
-		if (e.method === "POST" && d) return this.handleAiHelp(e, t, d[1]);
+		let m = n.pathname.match(/^\/api\/runs\/(\d+)\/ai-help$/);
+		if (e.method === "POST" && m) return this.handleAiHelp(e, t, m[1]);
 		if (e.method === "GET" && n.pathname.startsWith("/api/runs/")) {
-			let r = n.pathname.match(/^\/api\/runs\/(\d+)\/artifacts\/(.+)$/);
-			if (r) return this.handleArtifactDownload(e, t, r[1], decodeURIComponent(r[2]));
-			let i = n.pathname.replace("/api/runs/", "");
-			return this.renderRunDetails(i, t, "json", await this.hasScope(e, "logs:read"));
+			let r = n.pathname.match(/^\/api\/runs\/(\d+)\/diagnostics$/);
+			if (r) return this.handleDiagnostics(e, t, r[1]);
+			let i = n.pathname.match(/^\/api\/runs\/(\d+)\/artifacts\/(.+)$/);
+			if (i) return this.handleArtifactDownload(e, t, i[1], decodeURIComponent(i[2]));
+			let a = n.pathname.replace("/api/runs/", "");
+			return this.renderRunDetails(a, t, "json", await this.hasScope(e, "logs:read"));
 		}
 		if (e.method === "POST" && n.pathname.startsWith("/restart/")) {
 			let r = n.pathname.replace("/restart/", "");
@@ -20922,6 +20975,62 @@ var SC = class {
 			}));
 		}
 	}
+	async handleDispatch(e, t, n) {
+		if (!await this.requireScope(e, t, "runs:dispatch")) return;
+		let r = await this.readJson(e, t);
+		if (!r || typeof r != "object" || Array.isArray(r)) return;
+		let i = await this.matchWorkflows(n, r, await this.workflows.published(), await this.currentSecrets());
+		t.writeHead(202, { "Content-Type": "application/json; charset=utf-8" }), t.end(JSON.stringify({ jobs: i.map((e) => ({
+			id: e,
+			provider: n
+		})) }));
+	}
+	async handleJobWait(e, t, n) {
+		let r = Math.min(12e4, Math.max(0, Number(t || 3e4))), i = Date.now(), a;
+		do {
+			if (a = await this.queue.getJob(e), !a || [
+				"success",
+				"failed",
+				"cancelled"
+			].includes(a.status) || Date.now() - i >= r) break;
+			await new Promise((e) => setTimeout(e, 500));
+		} while (1);
+		return a ? (n.writeHead(200, {
+			"Cache-Control": "no-store",
+			"Content-Type": "application/json; charset=utf-8"
+		}), n.end(JSON.stringify({
+			job: we([a])[0],
+			terminal: [
+				"success",
+				"failed",
+				"cancelled"
+			].includes(a.status)
+		}))) : (n.writeHead(404, { "Content-Type": "application/json" }), n.end(JSON.stringify({ error: "Job not found" })));
+	}
+	async handleDiagnostics(e, t, n) {
+		if (!await this.hasScope(e, "logs:read")) return this.requireScope(e, t, "logs:read");
+		let r = await this.queue.getJob(n);
+		if (!r) return t.writeHead(404, { "Content-Type": "application/json" }), t.end(JSON.stringify({ error: "Run not found" }));
+		let i = r.report ? JSON.parse(r.report) : null, a = await this.workflows.getRevision(r.workflow_id, r.workflow_revision), o = await this.workflows.getRevisionSnapshot(r.workflow_id, r.workflow_revision), s = await this.queue.getJobLogs(n), c = i?.steps?.findIndex((e) => e.status === "failed") ?? -1;
+		return t.writeHead(200, {
+			"Cache-Control": "no-store",
+			"Content-Type": "application/json; charset=utf-8"
+		}), t.end(JSON.stringify({
+			jobId: String(r.id),
+			workflow: {
+				id: r.workflow_id,
+				revision: r.workflow_revision,
+				sourceYaml: o?.sourceYaml
+			},
+			status: r.status,
+			inputs: i?.inputs || {},
+			failedStep: c >= 0 ? i.steps[c] : null,
+			steps: c >= 0 ? i.steps.slice(0, c + 1) : i?.steps || [],
+			logs: s,
+			artifacts: i?.artifacts || [],
+			workflowFound: !!a
+		}));
+	}
 	async readRequest(e, t) {
 		let n = [], r = 0;
 		for await (let i of e) {
@@ -20967,36 +21076,38 @@ var SC = class {
 		}
 	}
 	async matchWorkflows(e, t, n, r = {}) {
-		for (let { definition: i, revision: a } of n) {
-			if (i.on.provider !== e) continue;
+		let i = [];
+		for (let { definition: a, revision: o } of n) {
+			if (a.on.provider !== e) continue;
 			let n = this.preprocessors.get(e);
-			if (n?.filter && !n.filter(t, i.on).isValid) {
-				dr(`⏩ Skipped ${i.id} based on ${e} webhook filters`, { inputs: t });
+			if (n?.filter && !n.filter(t, a.on).isValid) {
+				dr(`⏩ Skipped ${a.id} based on ${e} webhook filters`, { inputs: t });
 				continue;
 			}
-			if (i.on.if) try {
+			if (a.on.if) try {
 				let e = n?.conditionContext?.(t, r) || {};
-				if (!await mr.evaluateConditions(i.on.if, {
+				if (!await mr.evaluateConditions(a.on.if, {
 					inputs: t,
 					...e
 				})) {
-					dr(`⏩ Skipped ${i.id} based on conditions: ${i.on.if}`, { inputs: t });
+					dr(`⏩ Skipped ${a.id} based on conditions: ${a.on.if}`, { inputs: t });
 					continue;
 				}
 			} catch (e) {
-				console.error(`⚠️ Condition evaluation error in workflow [${i.id}]:`, e.message);
+				console.error(`⚠️ Condition evaluation error in workflow [${a.id}]:`, e.message);
 				continue;
 			}
-			for (let e of hr(i)) {
+			for (let e of hr(a)) {
 				let n = await gr(e.tags, e.matrixContext, t), r = "";
 				e.concurrency?.group && (r = await mr.evaluateValue(e.concurrency.group, { inputs: t }));
-				let o = {
+				let s = {
 					inputs: t,
 					matrix: e.matrixContext
-				};
-				await this.queue.enqueue(i.id, a, o, n, r), this.events.publish("jobs.available", { tags: n });
+				}, c = await this.queue.enqueue(a.id, o, s, n, r);
+				c && i.push(c), this.events.publish("jobs.available", { tags: n });
 			}
 		}
+		return i;
 	}
 	isAdmin(e) {
 		return this.matchesToken(e, this.adminToken, !0);

package/dist/queue.d.ts

@@ -8,7 +8,7 @@ export declare class QueueManager {
      * Enqueues a new job into the database.
      * Includes simple GitHub-style concurrency cancellation.
      */
-    enqueue(workflowId: string, workflowRevision: number, payload: JobPayload, requiredTags?: string[], concurrencyKey?: string): Promise<any>;
+    enqueue(workflowId: string, workflowRevision: number, payload: JobPayload, requiredTags?: string[], concurrencyKey?: string): Promise<number>;
     /**
      * Atomically claims the oldest pending job compatible with this worker.
      * Requires SQLite >= 3.35 for the RETURNING clause.

package/dist/server.d.ts

@@ -22,6 +22,9 @@ export declare class WebhookServer {
      * Processes incoming HTTP webhooks
      */
     private handleWebhook;
+    private handleDispatch;
+    private handleJobWait;
+    private handleDiagnostics;
     private readRequest;
     private preprocess;
     private matchWorkflows;

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IAyO3B;;OAEG;YACW,aAAa;YA0Bb,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA2C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IAgP3B;;OAEG;YACW,aAAa;YA0Bb,cAAc;YASd,aAAa;YAiBb,iBAAiB;YA0BjB,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA8C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-cli/on",
-  "version": "1.55.2",
+  "version": "1.56.0",
   "description": "CLI entry point for the on plugin ecosystem.",
   "type": "module",
   "packageManager": "pnpm@12.3.4",