@cloud-cli/on 1.58.0 → 1.59.1

package/dist/api-key-repository.d.ts

@@ -1,4 +1,4 @@
-export declare const API_KEY_SCOPES: readonly ["workflows:read", "workflows:write", "logs:read", "artifacts:read", "runs:control", "runs:dispatch"];
+export declare const API_KEY_SCOPES: readonly ["workflows:read", "workflows:write", "logs:read", "artifacts:read", "runs:control", "runs:dispatch", "workers:read"];
 export type ApiKeyScope = (typeof API_KEY_SCOPES)[number];
 export declare class ApiKeyRepository {
     init(): Promise<void>;
@@ -6,7 +6,7 @@ export declare class ApiKeyRepository {
     issue(name: string, scopes: string[]): Promise<{
         id: `${string}-${string}-${string}-${string}-${string}`;
         name: string;
-        scopes: ("workflows:read" | "workflows:write" | "logs:read" | "artifacts:read" | "runs:control" | "runs:dispatch")[];
+        scopes: ("workflows:read" | "workflows:write" | "logs:read" | "artifacts:read" | "runs:control" | "runs:dispatch" | "workers:read")[];
         token: string;
     }>;
     scopesForToken(token: string): Promise<string[] | null>;

package/dist/api-key-repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-repository.d.ts","sourceRoot":"","sources":["../src/api-key-repository.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,gHAAiH,CAAC;AAC7I,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,qBAAa,gBAAgB;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,IAAI;IAKJ,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;;;;;;IAUpC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAQvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI3C"}
+{"version":3,"file":"api-key-repository.d.ts","sourceRoot":"","sources":["../src/api-key-repository.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,gIAAiI,CAAC;AAC7J,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,qBAAa,gBAAgB;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrB,IAAI;IAKJ,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;;;;;;IAUpC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAQvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAI3C"}

package/dist/on.js

@@ -280,7 +280,7 @@ var ye = class extends l {
 		return await C.run("UPDATE jobs SET status = 'pending', worker_id = NULL WHERE status = 'running' AND started_at < datetime('now', '-1 hour');");
 	}
 	async createTables() {
-		await C.exec("\n      CREATE TABLE IF NOT EXISTS jobs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        parentId INTEGER,\n        workflow_id TEXT NOT NULL,\n        workflow_revision INTEGER NOT NULL,\n        required_tags TEXT NOT NULL DEFAULT '[]',\n        payload TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'pending',\n        concurrency_key TEXT,\n        worker_id TEXT,\n        report TEXT,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        started_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        finished_at DATETIME DEFAULT CURRENT_TIMESTAMP\n      );\n\n      CREATE TABLE IF NOT EXISTS step_logs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        job_id INTEGER NOT NULL,\n        step_id TEXT NOT NULL,\n        log_content TEXT NOT NULL,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        FOREIGN KEY(job_id) REFERENCES jobs(id) ON DELETE CASCADE\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_step_logs_job ON step_logs(job_id);\n\n      DELETE FROM step_logs\n      WHERE id NOT IN (\n        SELECT MAX(id) FROM step_logs GROUP BY job_id, step_id\n      );\n      CREATE UNIQUE INDEX IF NOT EXISTS idx_step_logs_job_step ON step_logs(job_id, step_id);\n\n      CREATE TABLE IF NOT EXISTS stored_files (\n        kind TEXT NOT NULL,\n        owner_key TEXT NOT NULL,\n        file_path TEXT NOT NULL,\n        content TEXT NOT NULL,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        PRIMARY KEY (kind, owner_key, file_path)\n      );\n      CREATE INDEX IF NOT EXISTS idx_stored_files_owner ON stored_files(kind, owner_key);\n    ");
+		await C.exec("\n      CREATE TABLE IF NOT EXISTS jobs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        parentId INTEGER,\n        workflow_id TEXT NOT NULL,\n        workflow_revision INTEGER NOT NULL,\n        required_tags TEXT NOT NULL DEFAULT '[]',\n        payload TEXT NOT NULL,\n        status TEXT NOT NULL DEFAULT 'pending',\n        concurrency_key TEXT,\n        worker_id TEXT,\n        report TEXT,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        started_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        finished_at DATETIME DEFAULT CURRENT_TIMESTAMP\n      );\n\n      CREATE TABLE IF NOT EXISTS step_logs (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        job_id INTEGER NOT NULL,\n        step_id TEXT NOT NULL,\n        log_content TEXT NOT NULL,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        FOREIGN KEY(job_id) REFERENCES jobs(id) ON DELETE CASCADE\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_step_logs_job ON step_logs(job_id);\n\n      DELETE FROM step_logs\n      WHERE id NOT IN (\n        SELECT MAX(id) FROM step_logs GROUP BY job_id, step_id\n      );\n      CREATE UNIQUE INDEX IF NOT EXISTS idx_step_logs_job_step ON step_logs(job_id, step_id);\n\n      CREATE TABLE IF NOT EXISTS stored_files (\n        kind TEXT NOT NULL,\n        owner_key TEXT NOT NULL,\n        file_path TEXT NOT NULL,\n        content TEXT NOT NULL,\n        created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n        PRIMARY KEY (kind, owner_key, file_path)\n      );\n      CREATE INDEX IF NOT EXISTS idx_stored_files_owner ON stored_files(kind, owner_key);\n\n      CREATE TABLE IF NOT EXISTS worker_presence (\n        worker_id TEXT PRIMARY KEY,\n        version TEXT NOT NULL,\n        tags TEXT NOT NULL DEFAULT '[]',\n        concurrency INTEGER NOT NULL DEFAULT 0,\n        active_jobs INTEGER NOT NULL DEFAULT 0,\n        last_seen DATETIME DEFAULT CURRENT_TIMESTAMP\n      );\n    ");
 	}
 	async getJob(e) {
 		return C.get("SELECT * FROM jobs WHERE id = ?", [e]);
@@ -326,6 +326,26 @@ var ye = class extends l {
 	async getStoredFiles(e, t) {
 		return this.fileStorage.enabled ? this.fileStorage.load(`${e}/${t}`) : C.all("SELECT file_path AS path, content FROM stored_files WHERE kind = ? AND owner_key = ?", [e, t]);
 	}
+	async updateWorkerPresence(e) {
+		await C.run("INSERT INTO worker_presence (worker_id, version, tags, concurrency, active_jobs, last_seen)\n       VALUES (?, ?, ?, ?, ?, CURRENT_TIMESTAMP)\n       ON CONFLICT(worker_id) DO UPDATE SET version = excluded.version, tags = excluded.tags,\n       concurrency = excluded.concurrency, active_jobs = excluded.active_jobs, last_seen = CURRENT_TIMESTAMP", [
+			e.id,
+			e.version,
+			JSON.stringify(e.tags),
+			e.concurrency,
+			e.activeJobs
+		]);
+	}
+	async listWorkerPresence() {
+		return (await C.all("SELECT worker_id, version, tags, concurrency, active_jobs, last_seen FROM worker_presence ORDER BY worker_id")).map((e) => ({
+			workerId: e.worker_id,
+			version: e.version,
+			tags: JSON.parse(e.tags || "[]"),
+			concurrency: e.concurrency,
+			activeJobs: e.active_jobs,
+			lastSeen: e.last_seen,
+			online: Date.now() - Date.parse(`${e.last_seen}Z`) < 45e3
+		}));
+	}
 	async saveAiRequest(e, t, n) {
 		await C.run("INSERT INTO ai_requests (job_id, workflow_url, request_json) VALUES (?, ?, ?)", [
 			e,
@@ -6340,7 +6360,8 @@ var oa = {
 	"logs:read",
 	"artifacts:read",
 	"runs:control",
-	"runs:dispatch"
+	"runs:dispatch",
+	"workers:read"
 ], ca = class {
 	async init() {
 		await C.exec("CREATE TABLE IF NOT EXISTS api_keys (\n      id TEXT PRIMARY KEY,\n      name TEXT NOT NULL,\n      key_hash TEXT NOT NULL UNIQUE,\n      scopes TEXT NOT NULL,\n      created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n      last_used_at DATETIME,\n      revoked_at DATETIME\n    )");
@@ -6375,7 +6396,7 @@ var oa = {
 		let t = await C.run("UPDATE api_keys SET revoked_at = CURRENT_TIMESTAMP WHERE id = ? AND revoked_at IS NULL", [e]);
 		return Number(t?.changes || 0) > 0;
 	}
-}, la = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>Runner settings</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n  </head>\n  <body data-page=\"__SETTINGS_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <app-header title=\"Settings\" subtitle=\"Human-admin controls and automation credentials\" back=\"/runs\" back-label=\"Back to jobs\"></app-header>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Secrets</a>\n          <a href=\"/settings/tokens\" bind-class=\"page === 'tokens' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" bind-class=\"page === 'notifications' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"page === 'tokens'\">\n        </template>\n        <template if=\"page === 'notifications'\">\n          <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"notifications-title\">\n            <h2 id=\"notifications-title\" class=\"text-lg font-semibold text-white\">Notifications</h2>\n            <p class=\"mt-1 text-sm text-gray-400\">Receive job completion notifications on this device.</p>\n            <button type=\"button\" on-click=\"toggleNotifications()\" class=\"mt-5 inline-flex items-center gap-2 rounded-lg border border-indigo-500/60 px-4 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <lucide-icon bind-icon=\"notificationsEnabled ? 'bell-off' : 'bell-ring'\" size=\"16\"></lucide-icon>\n              {{ notificationsEnabled ? 'Disable notifications' : 'Enable notifications' }}\n            </button>\n            <p class=\"mt-3 text-sm text-gray-400\" role=\"status\">{{ notificationMessage }}</p>\n          </section>\n        </template>\n\n        <template if=\"page === 'tokens'\">\n        <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"keys-title\">\n          <div class=\"flex items-start justify-between gap-3\">\n            <div>\n              <h2 id=\"keys-title\" class=\"text-lg font-semibold text-white\">API keys</h2>\n              <p class=\"mt-1 text-sm text-gray-400\">Issue narrowly scoped credentials for automation tools. Keys are shown only once.</p>\n            </div>\n          </div>\n          <div class=\"mt-5 grid gap-3 rounded-xl border border-gray-800 bg-gray-950/50 p-4 md:grid-cols-[1fr_auto]\">\n            <label class=\"sr-only\" for=\"key-name\">Key name</label>\n            <input id=\"key-name\" bind-value=\"keyName\" on-input=\"setKeyName($event)\" placeholder=\"Documentation bot\" class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 text-sm outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n            <button type=\"button\" on-click=\"issueKey()\" class=\"inline-flex items-center justify-center gap-2 rounded-lg bg-indigo-500 px-4 py-2.5 text-sm font-semibold text-white outline-none hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"><lucide-icon icon=\"key-round\" size=\"16\"></lucide-icon>Issue key</button>\n            <fieldset class=\"md:col-span-2\">\n              <legend class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Scopes</legend>\n              <div class=\"space-y-2\">\n                <template for=\"scope of scopeOptions\">\n                  <label class=\"group flex cursor-pointer items-center gap-3 text-sm text-gray-300\">\n                    <input type=\"checkbox\" bind-checked=\"scope.selected\" on-change=\"toggleScope(scope)\" class=\"peer sr-only\" />\n                    <span aria-hidden=\"true\" class=\"flex h-5 w-5 shrink-0 items-center justify-center rounded-md border border-gray-600 bg-gray-900 text-transparent transition peer-checked:border-indigo-400 peer-checked:bg-indigo-500 peer-checked:text-white peer-focus-visible:ring-2 peer-focus-visible:ring-indigo-400/70 peer-disabled:opacity-50\">\n                      <svg viewBox=\"0 0 16 16\" width=\"13\" height=\"13\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m3 8 3 3 7-7\"></path></svg>\n                    </span>\n                    <span class=\"group-hover:text-white\">{{ scope.label }}</span>\n                  </label>\n                </template>\n              </div>\n            </fieldset>\n          </div>\n          <template if=\"newToken\">\n            <div class=\"mt-4 rounded-xl border border-amber-500/40 bg-amber-500/10 p-4\" role=\"alert\">\n              <p class=\"text-sm font-semibold text-amber-200\">Copy this key now. It cannot be shown again.</p>\n              <code class=\"mt-2 block select-all break-all rounded bg-gray-950 p-3 font-mono text-xs text-amber-100\">{{ newToken }}</code>\n            </div>\n          </template>\n          <h3 class=\"mt-5 text-xs font-semibold uppercase tracking-wider text-gray-500\">Active tokens</h3>\n          <ul class=\"mt-2 space-y-2\" aria-label=\"Active API keys\">\n            <template for=\"key of keys\">\n              <li class=\"flex items-center justify-between gap-3 rounded-xl border border-gray-800 bg-gray-950/60 px-4 py-3\">\n                <div class=\"min-w-0\"><p class=\"truncate text-sm font-medium text-gray-200\">{{ key.name }}</p><p class=\"text-xs text-gray-500\">{{ key.scopes.join(', ') }} · created {{ key.created_at }}</p></div>\n                <button type=\"button\" on-click=\"revokeKey(key)\" class=\"shrink-0 rounded-lg p-2 text-rose-300 outline-none hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\" aria-label=\"Revoke {{ key.name }}\" title=\"Revoke key\"><lucide-icon icon=\"trash\" size=\"16\"></lucide-icon></button>\n              </li>\n            </template>\n          </ul>\n        </section>\n        </template>\n        <p class=\"text-sm text-rose-300\" role=\"alert\" class-hidden=\"!error\">{{ error }}</p>\n      </main>\n      <script setup>\n        import { onInit, ref } from '@li3/web';\n        export default function () {\n          const page = document.body.dataset.page;\n          const keys = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n            { name: 'runs:dispatch', label: 'Dispatch runs', selected: false },\n          ]);\n          const api = async (url, options = {}) => { const response = await fetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n          const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n          const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      <\/script>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
+}, la = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <title>Runner settings</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\" } }\n    <\/script>\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n  </head>\n  <body data-page=\"__SETTINGS_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <template app>\n      <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <app-header title=\"Settings\" subtitle=\"Human-admin controls and automation credentials\" back=\"/runs\" back-label=\"Back to jobs\"></app-header>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Secrets</a>\n          <a href=\"/settings/tokens\" bind-class=\"page === 'tokens' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" bind-class=\"page === 'notifications' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n          <a href=\"/settings/workers\" bind-class=\"page === 'workers' ? 'bg-gray-800.text-white' : ''\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Workers</a>\n        </nav>\n\n        <template if=\"page === 'tokens'\">\n        </template>\n        <template if=\"page === 'notifications'\">\n          <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"notifications-title\">\n            <h2 id=\"notifications-title\" class=\"text-lg font-semibold text-white\">Notifications</h2>\n            <p class=\"mt-1 text-sm text-gray-400\">Receive job completion notifications on this device.</p>\n            <button type=\"button\" on-click=\"toggleNotifications()\" class=\"mt-5 inline-flex items-center gap-2 rounded-lg border border-indigo-500/60 px-4 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <lucide-icon bind-icon=\"notificationsEnabled ? 'bell-off' : 'bell-ring'\" size=\"16\"></lucide-icon>\n              {{ notificationsEnabled ? 'Disable notifications' : 'Enable notifications' }}\n            </button>\n            <p class=\"mt-3 text-sm text-gray-400\" role=\"status\">{{ notificationMessage }}</p>\n          </section>\n        </template>\n\n        <template if=\"page === 'workers'\">\n          <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"workers-title\">\n            <h2 id=\"workers-title\" class=\"text-lg font-semibold text-white\">Workers</h2>\n            <p class=\"mt-1 text-sm text-gray-400\">Connected runner status, versions, tags, and load.</p>\n            <div class=\"mt-5 overflow-hidden rounded-xl border border-gray-800\"><table class=\"w-full text-left text-sm\"><thead class=\"bg-gray-950 text-xs uppercase text-gray-500\"><tr><th class=\"px-4 py-3\">Worker</th><th class=\"px-4 py-3\">Version</th><th class=\"px-4 py-3\">Tags</th><th class=\"px-4 py-3\">Load</th><th class=\"px-4 py-3\">Last seen</th></tr></thead><tbody><template for=\"worker of workers\"><tr class=\"border-t border-gray-800\"><td class=\"px-4 py-3 font-mono text-gray-200\">{{ worker.workerId }} <span class=\"ml-2 rounded-full px-2 py-0.5 text-xs\" bind-class=\"worker.online ? 'bg-emerald-500/10.text-emerald-300' : 'bg-gray-800.text-gray-500'\">{{ worker.online ? 'online' : 'offline' }}</span></td><td class=\"px-4 py-3 font-mono text-gray-400\">{{ worker.version }}</td><td class=\"px-4 py-3 text-gray-400\">{{ worker.tags.join(', ') }}</td><td class=\"px-4 py-3 text-gray-400\">{{ worker.activeJobs }} / {{ worker.concurrency }}</td><td class=\"px-4 py-3 text-gray-500\">{{ worker.lastSeen }}</td></tr></template></tbody></table><p class=\"p-5 text-sm text-gray-500\" class-hidden=\"workers.length > 0\">No worker heartbeats received yet.</p></div>\n          </section>\n        </template>\n\n        <template if=\"page === 'tokens'\">\n        <section class=\"rounded-2xl border border-gray-800 bg-gray-900/80 p-5\" aria-labelledby=\"keys-title\">\n          <div class=\"flex items-start justify-between gap-3\">\n            <div>\n              <h2 id=\"keys-title\" class=\"text-lg font-semibold text-white\">API keys</h2>\n              <p class=\"mt-1 text-sm text-gray-400\">Issue narrowly scoped credentials for automation tools. Keys are shown only once.</p>\n            </div>\n          </div>\n          <div class=\"mt-5 grid gap-3 rounded-xl border border-gray-800 bg-gray-950/50 p-4 md:grid-cols-[1fr_auto]\">\n            <label class=\"sr-only\" for=\"key-name\">Key name</label>\n            <input id=\"key-name\" bind-value=\"keyName\" on-input=\"setKeyName($event)\" placeholder=\"Documentation bot\" class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 text-sm outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n            <button type=\"button\" on-click=\"issueKey()\" class=\"inline-flex items-center justify-center gap-2 rounded-lg bg-indigo-500 px-4 py-2.5 text-sm font-semibold text-white outline-none hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"><lucide-icon icon=\"key-round\" size=\"16\"></lucide-icon>Issue key</button>\n            <fieldset class=\"md:col-span-2\">\n              <legend class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Scopes</legend>\n              <div class=\"space-y-2\">\n                <template for=\"scope of scopeOptions\">\n                  <label class=\"group flex cursor-pointer items-center gap-3 text-sm text-gray-300\">\n                    <input type=\"checkbox\" bind-checked=\"scope.selected\" on-change=\"toggleScope(scope)\" class=\"peer sr-only\" />\n                    <span aria-hidden=\"true\" class=\"flex h-5 w-5 shrink-0 items-center justify-center rounded-md border border-gray-600 bg-gray-900 text-transparent transition peer-checked:border-indigo-400 peer-checked:bg-indigo-500 peer-checked:text-white peer-focus-visible:ring-2 peer-focus-visible:ring-indigo-400/70 peer-disabled:opacity-50\">\n                      <svg viewBox=\"0 0 16 16\" width=\"13\" height=\"13\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m3 8 3 3 7-7\"></path></svg>\n                    </span>\n                    <span class=\"group-hover:text-white\">{{ scope.label }}</span>\n                  </label>\n                </template>\n              </div>\n            </fieldset>\n          </div>\n          <template if=\"newToken\">\n            <div class=\"mt-4 rounded-xl border border-amber-500/40 bg-amber-500/10 p-4\" role=\"alert\">\n              <p class=\"text-sm font-semibold text-amber-200\">Copy this key now. It cannot be shown again.</p>\n              <code class=\"mt-2 block select-all break-all rounded bg-gray-950 p-3 font-mono text-xs text-amber-100\">{{ newToken }}</code>\n            </div>\n          </template>\n          <h3 class=\"mt-5 text-xs font-semibold uppercase tracking-wider text-gray-500\">Active tokens</h3>\n          <ul class=\"mt-2 space-y-2\" aria-label=\"Active API keys\">\n            <template for=\"key of keys\">\n              <li class=\"flex items-center justify-between gap-3 rounded-xl border border-gray-800 bg-gray-950/60 px-4 py-3\">\n                <div class=\"min-w-0\"><p class=\"truncate text-sm font-medium text-gray-200\">{{ key.name }}</p><p class=\"text-xs text-gray-500\">{{ key.scopes.join(', ') }} · created {{ key.created_at }}</p></div>\n                <button type=\"button\" on-click=\"revokeKey(key)\" class=\"shrink-0 rounded-lg p-2 text-rose-300 outline-none hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\" aria-label=\"Revoke {{ key.name }}\" title=\"Revoke key\"><lucide-icon icon=\"trash\" size=\"16\"></lucide-icon></button>\n              </li>\n            </template>\n          </ul>\n        </section>\n        </template>\n        <p class=\"text-sm text-rose-300\" role=\"alert\" class-hidden=\"!error\">{{ error }}</p>\n      </main>\n      <script setup>\n        import { onInit, ref } from '@li3/web';\n        export default function () {\n          const page = document.body.dataset.page;\n           const keys = ref([]);\n           const workers = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n            { name: 'runs:dispatch', label: 'Dispatch runs', selected: false },\n          ]);\n          const api = async (url, options = {}) => { const response = await fetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n           const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n           const loadWorkers = async () => { workers.value = (await api('/api/workers')).workers; };\n          const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); if (page === 'workers') loadWorkers().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, workers, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      <\/script>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
 //#endregion
 //#region src/settings-ui.ts
 function ua(e = "tokens") {
@@ -16323,7 +16344,7 @@ async function oy(e, t, n, r) {
 }
 //#endregion
 //#region src/app-header.html?raw
-var sy = "<template component=\"app-header\">\n  <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n  <header class=\"mx-auto flex w-full max-w-[78rem] items-center justify-between gap-4 border-b border-gray-800 pb-5\">\n    <div class=\"flex min-w-0 items-start gap-3\">\n      <template if=\"back\">\n        <a class=\"mt-0.5 inline-flex h-9 w-9 items-center justify-center rounded-lg border border-gray-800 text-gray-400 no-underline outline-none hover:border-indigo-500 hover:text-indigo-200 focus-visible:ring-2 focus-visible:ring-indigo-400/60\" attr-href=\"back\" attr-aria-label=\"backLabel || 'Back'\" attr-title=\"backLabel || 'Back'\">\n          <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"17\" height=\"17\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m15 18-6-6 6-6\"></path></svg>\n        </a>\n      </template>\n      <div>\n        <div class=\"text-[.7rem] font-bold uppercase tracking-[.16em] text-indigo-400\">Runner engine</div>\n        <h1 class=\"mt-1 text-2xl font-bold tracking-tight text-white\">{{ title }}</h1>\n        <template if=\"subtitle\"><p class=\"mt-1 text-xs text-gray-400\">{{ subtitle }}</p></template>\n      </div>\n    </div>\n    <div class=\"flex items-center gap-2\">\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/help\" aria-label=\"Help\" title=\"Help\">\n        <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"16\" height=\"16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"9\"></circle><path d=\"M9.6 9a2.5 2.5 0 1 1 4.2 1.8c-1.2 1-1.8 1.4-1.8 2.7\"></path><path d=\"M12 17h.01\"></path></svg>\n      </a>\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/settings\" aria-label=\"Settings\" title=\"Settings\">\n        <lucide-icon icon=\"settings\" size=\"16\"></lucide-icon>\n      </a>\n    </div>\n  </header>\n  <script setup>\n    import { defineProp } from '@li3/web';\n    export default function () {\n      return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label') };\n    }\n  <\/script>\n</template>\n", cy = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\", \"ansi_up\": \"https://esm.sh/ansi_up@6.0.6\", \"diff\": \"https://unpkg.com/diff@9.0.0/libesm/index.js\", \"marked\": \"https://cdn.jsdelivr.net/npm/marked@18.0.12/lib/marked.esm.js\" } }\n    <\/script>\n    <link rel=\"component\" href=\"/app-router.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <title>On Workflow Runner</title>\n  </head>\n  <body class=\"min-h-screen bg-gray-950 text-gray-100 font-sans\">\n    <template app>\n      <app-router></app-router>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n", ly = "<template component=\"app-router\">\n  <div ref=\"outlet\" aria-live=\"polite\"></div>\n  <script setup>\n    import { getElement, onDestroy, onInit, templateRef } from '@li3/web';\n    import { load } from '@li3/web';\n\n    export default function () {\n      const outlet = templateRef('outlet');\n      let navigating = false;\n\n      const route = () => {\n        const url = new URL(window.location.href);\n        const path = url.pathname;\n        if (path === '/' || path === '/runs') return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n        if (path.match(/^\\/runs\\/\\d+$/)) return { component: 'page-run', url: `/pages/run.html?jobId=${path.split('/').pop()}`, page: 'run' };\n        if (path === '/help') return { component: 'page-help', url: '/pages/help.html', page: 'help' };\n        if (path === '/settings/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n        if (path === '/settings/secrets') return { component: 'page-secrets', url: '/pages/workflows.html?page=secrets', page: 'secrets' };\n        if (path === '/settings/tokens') return { component: 'page-settings', url: '/pages/settings.html?page=tokens', page: 'tokens' };\n        if (path === '/settings/notifications') return { component: 'page-settings', url: '/pages/settings.html?page=notifications', page: 'notifications' };\n        if (path === '/settings' || path === '/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n        const editor = path.match(/^\\/settings\\/workflows\\/(new|[a-z0-9-]+)$/);\n        if (editor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${editor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n        const legacyEditor = path.match(/^\\/workflows\\/(new|[a-z0-9-]+)$/);\n        if (legacyEditor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${legacyEditor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n        return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n      };\n\n      const navigate = async (replace = false) => {\n        if (navigating) return;\n        navigating = true;\n        try {\n          const current = route();\n          document.body.dataset.page = current.page;\n          await load(current.url);\n          outlet.value.replaceChildren(document.createElement(current.component));\n          if (replace) history.replaceState(null, '', window.location.href);\n        } catch (error) {\n          outlet.value.innerHTML = `<main class=\"mx-auto max-w-4xl p-8\"><h1 class=\"text-xl font-semibold text-white\">Unable to load page</h1><p class=\"mt-2 text-sm text-rose-300\">${String(error.message || error)}</p></main>`;\n        } finally {\n          navigating = false;\n        }\n      };\n      const handleClick = (event) => {\n        const anchor = event.target.closest?.('a');\n        if (!anchor || anchor.target || anchor.hasAttribute('download')) return;\n        const target = new URL(anchor.href, window.location.href);\n        if (target.origin !== window.location.origin || !target.pathname.startsWith('/')) return;\n        if (target.pathname.startsWith('/api/') || target.pathname.startsWith('/webhooks/')) return;\n        if (target.pathname === window.location.pathname && target.hash) return;\n        event.preventDefault();\n        history.pushState(null, '', `${target.pathname}${target.search}${target.hash}`);\n        void navigate();\n      };\n      const element = getElement();\n      onInit(() => {\n        element.addEventListener('click', handleClick);\n        window.addEventListener('popstate', navigate);\n        void navigate(true);\n      });\n      onDestroy(() => {\n        element.removeEventListener('click', handleClick);\n        window.removeEventListener('popstate', navigate);\n      });\n      return {};\n    }\n  <\/script>\n</template>\n", uy = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <title>Runner Workflow Management</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\", \"diff\": \"https://unpkg.com/diff@9.0.0/libesm/index.js\" } }\n    <\/script>\n    <style>\n      body[data-page='list'] .editor-panel {\n        display: none;\n      }\n      body[data-page='workflows'] .editor-panel,\n      body[data-page='workflows'] .secrets-panel,\n      body[data-page='secrets'] .workflow-list,\n      body[data-page='secrets'] .editor-panel {\n        display: none;\n      }\n      body[data-page='editor'] .workflow-list,\n      body[data-page='editor'] .secrets-panel {\n        display: none;\n      }\n    </style>\n  </head>\n  <body data-page=\"__WORKFLOW_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n\n    <template app>\n        <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <template if=\"page === 'secrets'\"><app-header title=\"Secrets\" subtitle=\"Write-only credentials available to workflows\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <template if=\"page !== 'secrets'\"><app-header title=\"Workflow control room\" subtitle=\"Draft, validate, and publish revisioned YAML definitions\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'workflows' || page === 'editor' ? 'bg-gray-800.text-white' : ''\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'secrets' ? 'bg-gray-800.text-white' : ''\">Secrets</a>\n          <a href=\"/settings/tokens\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"notice\">\n          <div\n            role=\"status\"\n            class=\"flex items-center gap-2 rounded-lg border px-3 py-2.5 text-sm\"\n            bind-class=\"noticeError ? 'border-rose-500/40 bg-rose-500/10 text-rose-100' : 'border-emerald-500/40 bg-emerald-500/10 text-emerald-100'\"\n          >\n            <lucide-icon bind-icon=\"noticeError ? 'circle-alert' : 'circle-check'\" size=\"17\"></lucide-icon>\n            <span>{{ notice }}</span>\n          </div>\n        </template>\n\n        <section id=\"workflow-layout\" class=\"space-y-5\">\n          <nav\n            class=\"workflow-list rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10\"\n            aria-labelledby=\"workflow-list-title\"\n          >\n            <div class=\"mb-4 flex items-end justify-between gap-3 border-b border-gray-800 pb-4\">\n              <div>\n                <p class=\"text-[11px] font-semibold uppercase tracking-[0.18em] text-indigo-400\">Definitions</p>\n                <h2 id=\"workflow-list-title\" class=\"mt-1 text-lg font-semibold text-white\">Workflows</h2>\n              </div>\n              <a\n                href=\"/workflows/new\"\n                class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white outline-none transition hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"plus\" size=\"16\"></lucide-icon>\n                New workflow\n              </a>\n            </div>\n            <ul class=\"grid gap-2\" aria-label=\"Workflow definitions\">\n              <template for=\"workflow of workflows\">\n                <li>\n                  <a\n                    attr-href=\"'/workflows/' + workflow.id\"\n                    class=\"group flex min-h-16 items-center gap-3 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3 text-left text-sm text-gray-300 outline-none transition hover:border-indigo-500/50 hover:bg-indigo-500/10 focus-visible:border-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                  >\n                    <span\n                      class=\"flex h-9 w-9 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-400 transition group-hover:bg-indigo-500/15 group-hover:text-indigo-300\"\n                    >\n                      <lucide-icon icon=\"workflow\" size=\"17\"></lucide-icon>\n                    </span>\n                    <span class=\"min-w-0 flex-1\">\n                      <span class=\"block truncate text-base font-semibold text-gray-100\">{{ workflow.name }}</span>\n                      <span class=\"mt-0.5 block truncate font-mono text-[11px] text-gray-500\">{{ workflow.id }}</span>\n                    </span>\n                    <span\n                      class=\"rounded-full border px-2 py-1 text-[10px] font-semibold uppercase tracking-wide\"\n                      bind-class=\"workflow.status === 'published' ? 'border-emerald-500/30 bg-emerald-500/10 text-emerald-300' : workflow.status === 'archived' ? 'border-gray-700 bg-gray-800 text-gray-500' : 'border-amber-500/30 bg-amber-500/10 text-amber-300'\"\n                      >{{ workflow.status }}</span\n                    >\n                    <lucide-icon\n                      icon=\"arrow-up-right\"\n                      size=\"16\"\n                      class=\"shrink-0 text-gray-600 transition group-hover:text-indigo-300\"\n                    ></lucide-icon>\n                  </a>\n                </li>\n              </template>\n            </ul>\n            <div\n              class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n              class-hidden=\"workflows.length > 0\"\n            >\n              <lucide-icon icon=\"workflow\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n              <p class=\"mt-2 text-sm font-medium text-gray-300\">No workflows yet</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Create a definition to start automating jobs.</p>\n            </div>\n          </nav>\n\n          <section\n            class=\"editor-panel overflow-hidden rounded-xl border border-gray-800 bg-gray-900/80 shadow-xl shadow-black/10\"\n          >\n            <div class=\"border-b border-gray-800 px-4 pt-3 sm:px-5\">\n              <a\n                href=\"/workflows\"\n                class=\"inline-flex items-center gap-1.5 rounded-md px-2 py-1.5 text-xs font-medium text-gray-400 outline-none transition hover:bg-gray-800 hover:text-gray-100 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"arrow-left\" size=\"14\"></lucide-icon>\n                Back to workflows\n              </a>\n            </div>\n            <div class=\"border-b border-gray-800 bg-gray-900 px-4 py-4 sm:px-5\">\n              <div class=\"flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between\">\n                <label class=\"block max-w-xl flex-1 text-xs font-semibold uppercase tracking-wider text-gray-400\"\n                  >Workflow ID\n                  <input\n                    bind-value=\"workflowId\"\n                    on-input=\"setWorkflowId($event)\"\n                    bind-disabled=\"selectedId\"\n                    aria-describedby=\"workflow-id-help\"\n                    class=\"mt-2 w-full rounded-lg border border-gray-700 bg-gray-950 px-3 py-2.5 font-mono text-sm normal-case tracking-normal text-white outline-none transition focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/20\"\n                    placeholder=\"derived-from-workflow-name\"\n                  />\n                  <span\n                    id=\"workflow-id-help\"\n                    class=\"mt-1 block text-[11px] font-normal normal-case tracking-normal text-gray-500\"\n                    >The ID becomes permanent after the first save.</span\n                  >\n                </label>\n                <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                  <input\n                    type=\"checkbox\"\n                    bind-checked=\"enabled\"\n                    on-change=\"setEnabled($event)\"\n                    class=\"h-4 w-4 rounded border-gray-700 bg-gray-950 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  />\n                  Enabled\n                </label>\n                 <div class=\"flex flex-wrap gap-2\" class-hidden=\"readOnly\">\n                   <button type=\"button\" aria-label=\"Get AI workflow help\" title=\"Get AI workflow help\" on-click=\"openAiHelp()\" class=\"inline-flex items-center gap-2 rounded-lg border border-indigo-500/50 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                     <lucide-icon icon=\"sparkles\" size=\"16\"></lucide-icon><span class=\"hidden sm:inline\">AI help</span>\n                   </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Save workflow draft\"\n                    title=\"Save workflow draft\"\n                    on-click=\"save()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2.5 text-sm font-semibold text-white transition hover:bg-indigo-400 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"save\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Save draft</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Publish workflow\"\n                    title=\"Publish workflow\"\n                     on-click=\"publish()\"\n                     bind-disabled=\"busy || !selectedId || source !== savedSource || enabled !== savedEnabled\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-emerald-500/50 px-3 py-2.5 text-sm font-medium text-emerald-300 transition hover:bg-emerald-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"rocket\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Publish</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Delete workflow\"\n                    title=\"Delete workflow\"\n                    on-click=\"remove()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-rose-500/50 px-3 py-2.5 text-sm font-medium text-rose-300 transition hover:bg-rose-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Delete</span>\n                  </button>\n                </div>\n              </div>\n            </div>\n            <div class=\"p-3 sm:p-5\">\n              <div class=\"mb-2 flex items-center justify-between px-1 text-xs text-gray-500\">\n                <div class=\"flex items-center gap-2\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Validate workflow\"\n                    title=\"Validate workflow\"\n                    on-click=\"validate(1)\"\n                    bind-disabled=\"validation.running\"\n                    bind-class=\"{ 'hidden': readOnly, 'text-emerald-400': validation.valid, 'text-rose-400': !validation.valid }\"\n                    class=\"disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon\n                      class=\"inline-block\"\n                      bind-icon=\"validation.running ? 'loader-circle' : (validation.valid ? 'circle-check' : 'circle-alert')\"\n                      bind-class=\"validation.running ? 'animate-spin' : ''\"\n                      size=\"16\"\n                    ></lucide-icon>\n                  </button>\n                  <span class=\"font-medium\" bind-class=\"validation.error ? 'bg-rose-500/10 text-rose-100' : ''\"\n                    >{{ validation.error || '' }}</span\n                  >\n                </div>\n                 <template if=\"revision\">\n                   <button\n                     type=\"button\"\n                     on-click=\"openRevisionDialog()\"\n                     class=\"font-mono text-indigo-300 outline-none hover:underline focus-visible:rounded focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                   >Revision {{ revision }}</button>\n                 </template>\n                 <template if=\"!revision\"><span class=\"font-mono\">Unsaved draft</span></template>\n              </div>\n              <template if=\"readOnly\">\n                <code-block\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"\n                  bind-source=\"source\"\n                ></code-block>\n              </template>\n              <template if=\"!readOnly\">\n                <code-editor\n                  id=\"source-yaml\"\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  nostatus=\"true\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-hidden rounded-lg border border-gray-700 bg-gray-950\"\n                  bind-value=\"source\"\n                  on-change=\"setSource($event.detail)\"\n                ></code-editor>\n              </template>\n              <details\n                class=\"mt-4 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\"\n                on-toggle=\"loadHelp($event)\"\n              >\n                <summary\n                  class=\"flex cursor-pointer list-none items-center gap-2 px-4 py-3 text-sm font-medium text-gray-300 outline-none transition hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                >\n                  <span class=\"inline-flex items-center gap-2\"\n                    ><lucide-icon icon=\"circle-question-mark\" size=\"16\"></lucide-icon>Syntax</span\n                  >\n                  <span class=\"ml-2 text-xs font-normal text-gray-500\">Reference, tutorials, and examples</span>\n                </summary>\n                <div\n                  ref=\"helpContent\"\n                  class=\"max-h-[38rem] overflow-y-auto border-t border-gray-800 bg-gray-950 px-4 py-5\"\n                  role=\"region\"\n                  aria-label=\"Workflow syntax help\"\n                  aria-live=\"polite\"\n                >\n                  <p class=\"text-sm text-gray-500\">Expand to load the workflow syntax reference.</p>\n                </div>\n              </details>\n            </div>\n          </section>\n        </section>\n\n        <template if=\"aiDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div class=\"flex max-h-[90vh] w-full max-w-5xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\" role=\"dialog\" aria-modal=\"true\" aria-labelledby=\"workflow-ai-title\">\n              <div class=\"flex items-start justify-between gap-3 border-b border-gray-800 px-5 py-4\"><div><h2 id=\"workflow-ai-title\" class=\"text-lg font-semibold text-white\">AI workflow help</h2><p class=\"mt-1 text-sm text-gray-400\">Describe the change you want. The suggestion will not modify the editor until you accept it.</p></div><button type=\"button\" on-click=\"closeAiHelp()\" aria-label=\"Close AI help\" class=\"rounded-lg p-2 text-gray-400 hover:bg-gray-800\"><lucide-icon icon=\"x\" size=\"17\"></lucide-icon></button></div>\n              <div class=\"min-h-0 overflow-auto p-5\">\n                <label class=\"sr-only\" for=\"workflow-ai-request\">Requested workflow change</label>\n                <textarea id=\"workflow-ai-request\" bind-value=\"aiRequest\" placeholder=\"Example: Add a Docker cache volume to the build step.\" class=\"min-h-24 w-full rounded-xl border border-gray-700 bg-gray-950 p-3 text-sm text-gray-200 outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"></textarea>\n                <p class=\"mt-2 text-xs text-rose-300\" class-hidden=\"!aiError\">{{ aiError }}</p>\n                <template if=\"aiDiffHtml\">\n                  <div class=\"mt-4\"><p class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Suggested changes</p><pre class=\"max-h-[36rem] overflow-auto rounded-xl border border-gray-700 bg-gray-950 p-4 font-mono text-xs leading-6\" bind-innerhtml=\"aiDiffHtml\"></pre></div>\n                </template>\n              </div>\n              <div class=\"flex items-center justify-end gap-2 border-t border-gray-800 px-5 py-3\"><button type=\"button\" on-click=\"closeAiHelp()\" class=\"rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Cancel</button><template if=\"aiDiffHtml\"><button type=\"button\" on-click=\"rejectAiSuggestion()\" class=\"rounded-lg border border-rose-500/50 px-3 py-2 text-sm text-rose-300 hover:bg-rose-500/10\">Reject</button><button type=\"button\" on-click=\"acceptAiSuggestion()\" class=\"rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white hover:bg-indigo-400\">Accept suggestion</button></template><button type=\"button\" on-click=\"requestAiHelp()\" bind-disabled=\"aiLoading || !aiRequest.trim()\" class=\"rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white hover:bg-indigo-400 disabled:opacity-50\">{{ aiLoading ? 'Thinking...' : 'Suggest' }}</button></div>\n            </div>\n          </div>\n        </template>\n\n        <template if=\"revisionDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div\n              class=\"flex max-h-[90vh] w-full max-w-4xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\"\n              role=\"dialog\"\n              aria-modal=\"true\"\n              aria-labelledby=\"revision-dialog-title\"\n            >\n              <div class=\"flex items-center justify-between border-b border-gray-800 px-4 py-3\">\n                <div>\n                  <h2 id=\"revision-dialog-title\" class=\"font-semibold text-white\">Workflow revision {{ revisionNumber }}</h2>\n                  <p class=\"text-xs text-gray-500\">Read-only source snapshot</p>\n                </div>\n                <button type=\"button\" on-click=\"closeRevisionDialog()\" aria-label=\"Close revision dialog\" class=\"rounded-lg p-2 text-gray-400 outline-none hover:bg-gray-800 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                  <lucide-icon icon=\"x\" size=\"17\"></lucide-icon>\n                </button>\n              </div>\n               <div class=\"min-h-0 flex-1 overflow-auto p-4\">\n                 <p class=\"mb-3 text-sm text-rose-300\" class-hidden=\"!revisionError\">{{ revisionError }}</p>\n                 <pre class=\"min-h-[20rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4 font-mono text-xs leading-6\" bind-innerhtml=\"revisionDiffHtml\"></pre>\n              </div>\n               <div class=\"flex items-center justify-between border-t border-gray-800 px-4 py-3\">\n                <button type=\"button\" on-click=\"navigateRevision(-1)\" bind-disabled=\"revisionLoading || revisionNumber <= 1\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  <lucide-icon icon=\"chevron-left\" size=\"16\"></lucide-icon>Previous\n                </button>\n                 <button type=\"button\" on-click=\"navigateRevision(1)\" bind-disabled=\"revisionLoading || revisionNumber >= revision\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  Next<lucide-icon icon=\"chevron-right\" size=\"16\"></lucide-icon>\n                </button>\n              </div>\n            </div>\n          </div>\n        </template>\n\n        <section\n          class=\"secrets-panel rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10 sm:p-5\"\n          aria-labelledby=\"secrets-title\"\n        >\n          <div class=\"mb-5 flex items-start justify-between gap-3\">\n            <div class=\"flex items-start gap-3\">\n              <span class=\"rounded-lg bg-indigo-500/10 p-2 text-indigo-300\"\n                ><lucide-icon icon=\"key-round\" size=\"18\"></lucide-icon\n              ></span>\n              <div>\n                <h2 id=\"secrets-title\" class=\"text-lg font-semibold text-white\">Secrets</h2>\n                <p class=\"mt-0.5 text-sm text-gray-400\">Write-only credentials available to workflows.</p>\n              </div>\n            </div>\n            <span\n              class=\"rounded-full border border-gray-700 bg-gray-950 px-2.5 py-1 text-xs font-mono text-gray-400\"\n              aria-label=\"Secret count\"\n              >{{ secrets.length }}</span\n            >\n          </div>\n          <details ref=\"secretForm\" class=\"mb-5 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\">\n            <summary class=\"flex cursor-pointer list-none items-center justify-between px-4 py-3 text-sm font-medium text-gray-300 outline-none hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <span>Add a secret</span>\n              <lucide-icon icon=\"plus\" size=\"17\"></lucide-icon>\n            </summary>\n            <div class=\"space-y-3 border-t border-gray-800 p-4\">\n              <p class=\"text-xs text-gray-500\">Saving an existing name replaces its encrypted value.</p>\n              <label class=\"sr-only\" for=\"secret-name\">Secret name</label>\n              <input\n                id=\"secret-name\"\n                bind-value=\"secretName\"\n                on-input=\"setSecretName($event)\"\n                class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm uppercase outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                placeholder=\"NPM_TOKEN\"\n              />\n              <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                <input type=\"checkbox\" bind-checked=\"fileMode\" on-change=\"setFileMode($event)\" class=\"h-4 w-4 rounded border-gray-700 bg-gray-900 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n                Binary file secret\n              </label>\n              <template if=\"!fileMode\">\n                <label class=\"sr-only\" for=\"secret-value\">Text secret value</label>\n                <input\n                  id=\"secret-value\"\n                  ref=\"secretValueInput\"\n                  bind-value=\"secretValue\"\n                  on-input=\"setSecretValue($event)\"\n                  type=\"password\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  placeholder=\"New secret value\"\n                />\n              </template>\n              <template if=\"fileMode\">\n                <label class=\"sr-only\" for=\"secret-file\">Binary secret file</label>\n                <input\n                  id=\"secret-file\"\n                  ref=\"secretFileInput\"\n                  on-change=\"setSecretFile($event)\"\n                  type=\"file\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2 text-xs text-gray-400 file:mr-3 file:rounded file:border-0 file:bg-gray-700 file:px-2 file:py-1 file:text-xs file:text-gray-200 focus:border-indigo-500 focus:outline-none focus:ring-2 focus:ring-indigo-500/30\"\n                />\n              </template>\n              <div>\n                <button\n                  type=\"button\"\n                  aria-label=\"Save secret value\"\n                  title=\"Save secret value\"\n                  on-click=\"saveSecret()\"\n                  bind-disabled=\"busy\"\n                  class=\"inline-flex items-center justify-center gap-2 rounded-lg border border-indigo-500/60 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none transition hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-50\"\n                >\n                  <lucide-icon icon=\"lock-keyhole\" size=\"16\"></lucide-icon>Save secret\n                </button>\n              </div>\n            </div>\n            </div>\n          </details>\n          <ul class=\"grid gap-2\" aria-label=\"Saved secrets\">\n            <template for=\"name of secrets\">\n              <li>\n                <div class=\"flex min-h-14 items-center gap-2 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3\">\n                  <button\n                    type=\"button\"\n                    on-click=\"selectSecret(name)\"\n                    class=\"group flex min-w-0 flex-1 items-center gap-3 text-left outline-none focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                    aria-label=\"Edit secret {{ name }}\"\n                  >\n                  <span\n                    class=\"flex h-8 w-8 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-500 group-hover:text-indigo-300\"\n                    ><lucide-icon icon=\"key-round\" size=\"15\"></lucide-icon\n                  ></span>\n                  <span class=\"min-w-0 flex-1 truncate font-mono text-sm text-gray-200\">{{ name }}</span>\n                    <span class=\"text-xs text-gray-500\">Select</span>\n                    <lucide-icon icon=\"chevron-right\" size=\"16\" class=\"text-gray-600 transition group-hover:text-indigo-300\"></lucide-icon>\n                  </button>\n                  <button\n                    type=\"button\"\n                    on-click=\"removeSecret(name)\"\n                    aria-label=\"Delete secret {{ name }}\"\n                    title=\"Delete secret\"\n                    class=\"inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-lg text-rose-300 outline-none transition hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"15\"></lucide-icon>\n                  </button>\n                </div>\n              </li>\n            </template>\n          </ul>\n          <div\n            class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n            class-hidden=\"secrets.length > 0\"\n          >\n            <lucide-icon icon=\"key-round\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n            <p class=\"mt-2 text-sm font-medium text-gray-300\">No secrets configured</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Add one above to make it available to a workflow.</p>\n          </div>\n        </section>\n      </main>\n\n      <script setup>\n         import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n         import { diffLines } from 'diff';\n\n        export default function () {\n          const page = document.body.dataset.page;\n          const initialId = __WORKFLOW_ID__;\n          const initialRevision = __WORKFLOW_REVISION__;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionDiffHtml = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n           const aiDialogOpen = ref(false);\n           const aiRequest = ref('');\n           const aiLoading = ref(false);\n           const aiError = ref('');\n           const aiSuggestion = ref('');\n           const aiDiffHtml = ref('');\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n            const response = await fetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n          const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n            });\n          const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const escapeRevisionHtml = (value) => value.replace(/[&<>\"']/g, (character) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' })[character] || '');\n           const renderRevisionDiff = (previousSource, currentSource) => {\n             if (previousSource === null) return `<span class=\"text-emerald-300\">+ ${escapeRevisionHtml(currentSource)}</span>\\n`;\n             return diffLines(previousSource, currentSource).map((part) => {\n               const className = part.added ? 'text-emerald-300 bg-emerald-500/10' : part.removed ? 'text-rose-300 bg-rose-500/10' : 'text-gray-300';\n               const prefix = part.added ? '+ ' : part.removed ? '- ' : '  ';\n               return part.value.split('\\n').filter((line, index, lines) => index < lines.length - 1 || line).map((line) => `<span class=\"block ${className}\">${prefix}${escapeRevisionHtml(line)}</span>`).join('');\n             }).join('');\n           };\n           const openRevisionDialog = async () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionDiffHtml.value = '';\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n             await loadRevisionDiff(revision.value);\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const loadRevisionDiff = async (number) => {\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const current = await api(`/api/workflows/${selectedId.value}?revision=${number}`);\n               const previous = number > 1 ? await api(`/api/workflows/${selectedId.value}?revision=${number - 1}`) : null;\n               revisionDiffHtml.value = renderRevisionDiff(previous?.sourceYaml ?? null, current.sourceYaml);\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1 || target > revision.value) return;\n             revisionNumber.value = target;\n             await loadRevisionDiff(target);\n           };\n           const openAiHelp = () => {\n             aiRequest.value = '';\n             aiError.value = '';\n             aiSuggestion.value = '';\n             aiDiffHtml.value = '';\n             aiDialogOpen.value = true;\n           };\n           const closeAiHelp = () => { if (!aiLoading.value) aiDialogOpen.value = false; };\n           const requestAiHelp = async () => {\n             if (!aiRequest.value.trim() || aiLoading.value) return;\n             aiLoading.value = true;\n             aiError.value = '';\n             aiDiffHtml.value = '';\n             try {\n               const response = await fetch('/api/ai/workflow-help', {\n                 method: 'POST',\n                 headers: { accept: 'text/event-stream', 'content-type': 'application/json' },\n                 body: JSON.stringify({ sourceYaml: source.value, request: aiRequest.value }),\n               });\n               if (!response.ok) { const error = await response.json().catch(() => ({})); throw new Error(error.error || `AI help failed: ${response.status}`); }\n               const reader = response.body.getReader();\n               const decoder = new TextDecoder();\n               let buffer = '';\n               let suggestion = '';\n               while (true) {\n                 const chunk = await reader.read();\n                 if (chunk.done) break;\n                 buffer += decoder.decode(chunk.value, { stream: true });\n                 const events = buffer.split('\\n\\n');\n                 buffer = events.pop() || '';\n                 for (const event of events) {\n                   const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                   if (!line) continue;\n                   const data = JSON.parse(line.slice(6));\n                   if (data.error) throw new Error(data.error);\n                   if (data.delta) suggestion += data.delta;\n                 }\n               }\n               suggestion = suggestion.replace(/^```(?:yaml|yml)?\\s*/i, '').replace(/\\s*```$/i, '').trim();\n               if (!source.value.trim()) {\n                 source.value = suggestion;\n                 aiDialogOpen.value = false;\n                 validate();\n               } else {\n                 aiSuggestion.value = suggestion;\n                 aiDiffHtml.value = renderRevisionDiff(source.value, suggestion);\n               }\n             } catch (error) {\n               aiError.value = error.message;\n             } finally {\n               aiLoading.value = false;\n             }\n           };\n           const acceptAiSuggestion = () => { source.value = aiSuggestion.value; aiDialogOpen.value = false; validate(); };\n           const rejectAiSuggestion = () => { aiSuggestion.value = ''; aiDiffHtml.value = ''; };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionDiffHtml,\n             revisionError,\n             revisionLoading,\n             aiDialogOpen,\n             aiRequest,\n             aiLoading,\n             aiError,\n             aiDiffHtml,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n            publish,\n            remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n             openAiHelp,\n             closeAiHelp,\n             requestAiHelp,\n             acceptAiSuggestion,\n             rejectAiSuggestion,\n          };\n        }\n      <\/script>\n    </template>\n\n    <script type=\"module\">\n      import '@li3/web';\n    <\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
+var sy = "<template component=\"app-header\">\n  <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n  <header class=\"mx-auto flex w-full max-w-[78rem] items-center justify-between gap-4 border-b border-gray-800 pb-5\">\n    <div class=\"flex min-w-0 items-start gap-3\">\n      <template if=\"back\">\n        <a class=\"mt-0.5 inline-flex h-9 w-9 items-center justify-center rounded-lg border border-gray-800 text-gray-400 no-underline outline-none hover:border-indigo-500 hover:text-indigo-200 focus-visible:ring-2 focus-visible:ring-indigo-400/60\" attr-href=\"back\" attr-aria-label=\"backLabel || 'Back'\" attr-title=\"backLabel || 'Back'\">\n          <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"17\" height=\"17\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"m15 18-6-6 6-6\"></path></svg>\n        </a>\n      </template>\n      <div>\n        <div class=\"text-[.7rem] font-bold uppercase tracking-[.16em] text-indigo-400\">Runner engine</div>\n        <h1 class=\"mt-1 text-2xl font-bold tracking-tight text-white\">{{ title }}</h1>\n        <template if=\"subtitle\"><p class=\"mt-1 text-xs text-gray-400\">{{ subtitle }}</p></template>\n      </div>\n    </div>\n    <div class=\"flex items-center gap-2\">\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/help\" aria-label=\"Help\" title=\"Help\">\n        <svg aria-hidden=\"true\" viewBox=\"0 0 24 24\" width=\"16\" height=\"16\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"9\"></circle><path d=\"M9.6 9a2.5 2.5 0 1 1 4.2 1.8c-1.2 1-1.8 1.4-1.8 2.7\"></path><path d=\"M12 17h.01\"></path></svg>\n      </a>\n      <a class=\"inline-flex h-9 w-9 items-center justify-center rounded-full border border-gray-700 text-indigo-200 no-underline outline-none hover:border-indigo-500 hover:bg-gray-900 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\" href=\"/settings\" aria-label=\"Settings\" title=\"Settings\">\n        <lucide-icon icon=\"settings\" size=\"16\"></lucide-icon>\n      </a>\n    </div>\n  </header>\n  <script setup>\n    import { defineProp } from '@li3/web';\n    export default function () {\n      return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label') };\n    }\n  <\/script>\n</template>\n", cy = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\", \"ansi_up\": \"https://esm.sh/ansi_up@6.0.6\", \"diff\": \"https://unpkg.com/diff@9.0.0/libesm/index.js\", \"marked\": \"https://cdn.jsdelivr.net/npm/marked@18.0.12/lib/marked.esm.js\" } }\n    <\/script>\n    <link rel=\"component\" href=\"/app-router.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <title>On Workflow Runner</title>\n  </head>\n  <body class=\"min-h-screen bg-gray-950 text-gray-100 font-sans\">\n    <template app>\n      <app-router></app-router>\n    </template>\n    <script type=\"module\">import '@li3/web';<\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n", ly = "<template component=\"app-router\">\n  <div ref=\"outlet\" aria-live=\"polite\"></div>\n  <script setup>\n    import { getElement, onDestroy, onInit, templateRef } from '@li3/web';\n    import { load } from '@li3/web';\n\n    export default function () {\n      const outlet = templateRef('outlet');\n      let navigating = false;\n\n      const route = () => {\n        const url = new URL(window.location.href);\n        const path = url.pathname;\n        if (path === '/' || path === '/runs') return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n        if (path.match(/^\\/runs\\/\\d+$/)) return { component: 'page-run', url: `/pages/run.html?jobId=${path.split('/').pop()}`, page: 'run' };\n        if (path === '/help') return { component: 'page-help', url: '/pages/help.html', page: 'help' };\n        if (path === '/settings/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n        if (path === '/settings/secrets') return { component: 'page-secrets', url: '/pages/workflows.html?page=secrets', page: 'secrets' };\n        if (path === '/settings/tokens') return { component: 'page-settings', url: '/pages/settings.html?page=tokens', page: 'tokens' };\n        if (path === '/settings/notifications') return { component: 'page-settings', url: '/pages/settings.html?page=notifications', page: 'notifications' };\n        if (path === '/settings/workers') return { component: 'page-settings', url: '/pages/settings.html?page=workers', page: 'workers' };\n        if (path === '/settings' || path === '/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n        const editor = path.match(/^\\/settings\\/workflows\\/(new|[a-z0-9-]+)$/);\n        if (editor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${editor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n        const legacyEditor = path.match(/^\\/workflows\\/(new|[a-z0-9-]+)$/);\n        if (legacyEditor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${legacyEditor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n        return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n      };\n\n      const navigate = async (replace = false) => {\n        if (navigating) return;\n        navigating = true;\n        try {\n          const current = route();\n          document.body.dataset.page = current.page;\n          await load(current.url);\n          outlet.value.replaceChildren(document.createElement(current.component));\n          if (replace) history.replaceState(null, '', window.location.href);\n        } catch (error) {\n          outlet.value.innerHTML = `<main class=\"mx-auto max-w-4xl p-8\"><h1 class=\"text-xl font-semibold text-white\">Unable to load page</h1><p class=\"mt-2 text-sm text-rose-300\">${String(error.message || error)}</p></main>`;\n        } finally {\n          navigating = false;\n        }\n      };\n      const handleClick = (event) => {\n        const anchor = event.target.closest?.('a');\n        if (!anchor || anchor.target || anchor.hasAttribute('download')) return;\n        const target = new URL(anchor.href, window.location.href);\n        if (target.origin !== window.location.origin || !target.pathname.startsWith('/')) return;\n        if (target.pathname.startsWith('/api/') || target.pathname.startsWith('/webhooks/')) return;\n        if (target.pathname === window.location.pathname && target.hash) return;\n        event.preventDefault();\n        history.pushState(null, '', `${target.pathname}${target.search}${target.hash}`);\n        void navigate();\n      };\n      const element = getElement();\n      onInit(() => {\n        element.addEventListener('click', handleClick);\n        window.addEventListener('popstate', navigate);\n        void navigate(true);\n      });\n      onDestroy(() => {\n        element.removeEventListener('click', handleClick);\n        window.removeEventListener('popstate', navigate);\n      });\n      return {};\n    }\n  <\/script>\n</template>\n", uy = "<!doctype html>\n<html lang=\"en\" class=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <meta name=\"theme-color\" content=\"#030712\" />\n    <meta name=\"mobile-web-app-capable\" content=\"yes\" />\n    <link rel=\"manifest\" href=\"/manifest.webmanifest\" />\n    <link rel=\"icon\" href=\"/app-icon.svg\" type=\"image/svg+xml\" />\n    <title>Runner Workflow Management</title>\n    <script type=\"importmap\">\n      { \"imports\": { \"@li3/\": \"https://cdn.li3.dev/@li3/\", \"diff\": \"https://unpkg.com/diff@9.0.0/libesm/index.js\" } }\n    <\/script>\n    <style>\n      body[data-page='list'] .editor-panel {\n        display: none;\n      }\n      body[data-page='workflows'] .editor-panel,\n      body[data-page='workflows'] .secrets-panel,\n      body[data-page='secrets'] .workflow-list,\n      body[data-page='secrets'] .editor-panel {\n        display: none;\n      }\n      body[data-page='editor'] .workflow-list,\n      body[data-page='editor'] .secrets-panel {\n        display: none;\n      }\n    </style>\n  </head>\n  <body data-page=\"__WORKFLOW_PAGE__\" class=\"min-h-screen bg-gray-950 p-4 font-sans text-gray-100 md:p-6\">\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-editor.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/code-block.html\" />\n    <link rel=\"component\" href=\"https://sodium.static.apphor.de/lucide-icon.html\" />\n    <link rel=\"component\" href=\"/app-header.html\" />\n\n    <template app>\n        <main class=\"mx-auto max-w-6xl space-y-5 py-6\">\n        <template if=\"page === 'secrets'\"><app-header title=\"Secrets\" subtitle=\"Write-only credentials available to workflows\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <template if=\"page !== 'secrets'\"><app-header title=\"Workflow control room\" subtitle=\"Draft, validate, and publish revisioned YAML definitions\" back=\"/runs\" back-label=\"Back to dashboard\"></app-header></template>\n        <nav class=\"flex flex-wrap gap-1 rounded-xl border border-gray-800 bg-gray-900/70 p-1\" aria-label=\"Settings navigation\">\n          <a href=\"/settings/workflows\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'workflows' || page === 'editor' ? 'bg-gray-800.text-white' : ''\">Workflows</a>\n          <a href=\"/settings/secrets\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\" bind-class=\"page === 'secrets' ? 'bg-gray-800.text-white' : ''\">Secrets</a>\n          <a href=\"/settings/tokens\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">API tokens</a>\n          <a href=\"/settings/notifications\" class=\"rounded-lg px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Notifications</a>\n        </nav>\n\n        <template if=\"notice\">\n          <div\n            role=\"status\"\n            class=\"flex items-center gap-2 rounded-lg border px-3 py-2.5 text-sm\"\n            bind-class=\"noticeError ? 'border-rose-500/40 bg-rose-500/10 text-rose-100' : 'border-emerald-500/40 bg-emerald-500/10 text-emerald-100'\"\n          >\n            <lucide-icon bind-icon=\"noticeError ? 'circle-alert' : 'circle-check'\" size=\"17\"></lucide-icon>\n            <span>{{ notice }}</span>\n          </div>\n        </template>\n\n        <section id=\"workflow-layout\" class=\"space-y-5\">\n          <nav\n            class=\"workflow-list rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10\"\n            aria-labelledby=\"workflow-list-title\"\n          >\n            <div class=\"mb-4 flex items-end justify-between gap-3 border-b border-gray-800 pb-4\">\n              <div>\n                <p class=\"text-[11px] font-semibold uppercase tracking-[0.18em] text-indigo-400\">Definitions</p>\n                <h2 id=\"workflow-list-title\" class=\"mt-1 text-lg font-semibold text-white\">Workflows</h2>\n              </div>\n              <a\n                href=\"/workflows/new\"\n                class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white outline-none transition hover:bg-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"plus\" size=\"16\"></lucide-icon>\n                New workflow\n              </a>\n            </div>\n            <ul class=\"grid gap-2\" aria-label=\"Workflow definitions\">\n              <template for=\"workflow of workflows\">\n                <li>\n                  <a\n                    attr-href=\"'/workflows/' + workflow.id\"\n                    class=\"group flex min-h-16 items-center gap-3 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3 text-left text-sm text-gray-300 outline-none transition hover:border-indigo-500/50 hover:bg-indigo-500/10 focus-visible:border-indigo-400 focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                  >\n                    <span\n                      class=\"flex h-9 w-9 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-400 transition group-hover:bg-indigo-500/15 group-hover:text-indigo-300\"\n                    >\n                      <lucide-icon icon=\"workflow\" size=\"17\"></lucide-icon>\n                    </span>\n                    <span class=\"min-w-0 flex-1\">\n                      <span class=\"block truncate text-base font-semibold text-gray-100\">{{ workflow.name }}</span>\n                      <span class=\"mt-0.5 block truncate font-mono text-[11px] text-gray-500\">{{ workflow.id }}</span>\n                    </span>\n                    <span\n                      class=\"rounded-full border px-2 py-1 text-[10px] font-semibold uppercase tracking-wide\"\n                      bind-class=\"workflow.status === 'published' ? 'border-emerald-500/30 bg-emerald-500/10 text-emerald-300' : workflow.status === 'archived' ? 'border-gray-700 bg-gray-800 text-gray-500' : 'border-amber-500/30 bg-amber-500/10 text-amber-300'\"\n                      >{{ workflow.status }}</span\n                    >\n                    <lucide-icon\n                      icon=\"arrow-up-right\"\n                      size=\"16\"\n                      class=\"shrink-0 text-gray-600 transition group-hover:text-indigo-300\"\n                    ></lucide-icon>\n                  </a>\n                </li>\n              </template>\n            </ul>\n            <div\n              class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n              class-hidden=\"workflows.length > 0\"\n            >\n              <lucide-icon icon=\"workflow\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n              <p class=\"mt-2 text-sm font-medium text-gray-300\">No workflows yet</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Create a definition to start automating jobs.</p>\n            </div>\n          </nav>\n\n          <section\n            class=\"editor-panel overflow-hidden rounded-xl border border-gray-800 bg-gray-900/80 shadow-xl shadow-black/10\"\n          >\n            <div class=\"border-b border-gray-800 px-4 pt-3 sm:px-5\">\n              <a\n                href=\"/workflows\"\n                class=\"inline-flex items-center gap-1.5 rounded-md px-2 py-1.5 text-xs font-medium text-gray-400 outline-none transition hover:bg-gray-800 hover:text-gray-100 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n              >\n                <lucide-icon icon=\"arrow-left\" size=\"14\"></lucide-icon>\n                Back to workflows\n              </a>\n            </div>\n            <div class=\"border-b border-gray-800 bg-gray-900 px-4 py-4 sm:px-5\">\n              <div class=\"flex flex-col gap-4 lg:flex-row lg:items-end lg:justify-between\">\n                <label class=\"block max-w-xl flex-1 text-xs font-semibold uppercase tracking-wider text-gray-400\"\n                  >Workflow ID\n                  <input\n                    bind-value=\"workflowId\"\n                    on-input=\"setWorkflowId($event)\"\n                    bind-disabled=\"selectedId\"\n                    aria-describedby=\"workflow-id-help\"\n                    class=\"mt-2 w-full rounded-lg border border-gray-700 bg-gray-950 px-3 py-2.5 font-mono text-sm normal-case tracking-normal text-white outline-none transition focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/20\"\n                    placeholder=\"derived-from-workflow-name\"\n                  />\n                  <span\n                    id=\"workflow-id-help\"\n                    class=\"mt-1 block text-[11px] font-normal normal-case tracking-normal text-gray-500\"\n                    >The ID becomes permanent after the first save.</span\n                  >\n                </label>\n                <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                  <input\n                    type=\"checkbox\"\n                    bind-checked=\"enabled\"\n                    on-change=\"setEnabled($event)\"\n                    class=\"h-4 w-4 rounded border-gray-700 bg-gray-950 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  />\n                  Enabled\n                </label>\n                 <div class=\"flex flex-wrap gap-2\" class-hidden=\"readOnly\">\n                   <button type=\"button\" aria-label=\"Get AI workflow help\" title=\"Get AI workflow help\" on-click=\"openAiHelp()\" class=\"inline-flex items-center gap-2 rounded-lg border border-indigo-500/50 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                     <lucide-icon icon=\"sparkles\" size=\"16\"></lucide-icon><span class=\"hidden sm:inline\">AI help</span>\n                   </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Save workflow draft\"\n                    title=\"Save workflow draft\"\n                    on-click=\"save()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg bg-indigo-500 px-3 py-2.5 text-sm font-semibold text-white transition hover:bg-indigo-400 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"save\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Save draft</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Publish workflow\"\n                    title=\"Publish workflow\"\n                     on-click=\"publish()\"\n                     bind-disabled=\"busy || !selectedId || source !== savedSource || enabled !== savedEnabled\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-emerald-500/50 px-3 py-2.5 text-sm font-medium text-emerald-300 transition hover:bg-emerald-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"rocket\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Publish</span>\n                  </button>\n                  <button\n                    type=\"button\"\n                    aria-label=\"Delete workflow\"\n                    title=\"Delete workflow\"\n                    on-click=\"remove()\"\n                    bind-disabled=\"busy\"\n                    class=\"inline-flex items-center gap-2 rounded-lg border border-rose-500/50 px-3 py-2.5 text-sm font-medium text-rose-300 transition hover:bg-rose-500/10 disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"16\"></lucide-icon>\n                    <span class=\"hidden sm:inline\">Delete</span>\n                  </button>\n                </div>\n              </div>\n            </div>\n            <div class=\"p-3 sm:p-5\">\n              <div class=\"mb-2 flex items-center justify-between px-1 text-xs text-gray-500\">\n                <div class=\"flex items-center gap-2\">\n                  <button\n                    type=\"button\"\n                    aria-label=\"Validate workflow\"\n                    title=\"Validate workflow\"\n                    on-click=\"validate(1)\"\n                    bind-disabled=\"validation.running\"\n                    bind-class=\"{ 'hidden': readOnly, 'text-emerald-400': validation.valid, 'text-rose-400': !validation.valid }\"\n                    class=\"disabled:cursor-not-allowed disabled:opacity-50\"\n                  >\n                    <lucide-icon\n                      class=\"inline-block\"\n                      bind-icon=\"validation.running ? 'loader-circle' : (validation.valid ? 'circle-check' : 'circle-alert')\"\n                      bind-class=\"validation.running ? 'animate-spin' : ''\"\n                      size=\"16\"\n                    ></lucide-icon>\n                  </button>\n                  <span class=\"font-medium\" bind-class=\"validation.error ? 'bg-rose-500/10 text-rose-100' : ''\"\n                    >{{ validation.error || '' }}</span\n                  >\n                </div>\n                 <template if=\"revision\">\n                   <button\n                     type=\"button\"\n                     on-click=\"openRevisionDialog()\"\n                     class=\"font-mono text-indigo-300 outline-none hover:underline focus-visible:rounded focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                   >Revision {{ revision }}</button>\n                 </template>\n                 <template if=\"!revision\"><span class=\"font-mono\">Unsaved draft</span></template>\n              </div>\n              <template if=\"readOnly\">\n                <code-block\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4\"\n                  bind-source=\"source\"\n                ></code-block>\n              </template>\n              <template if=\"!readOnly\">\n                <code-editor\n                  id=\"source-yaml\"\n                  language=\"yaml\"\n                  theme=\"atom-one-dark\"\n                  nostatus=\"true\"\n                  class=\"block h-[calc(100vh-23rem)] min-h-[28rem] overflow-hidden rounded-lg border border-gray-700 bg-gray-950\"\n                  bind-value=\"source\"\n                  on-change=\"setSource($event.detail)\"\n                ></code-editor>\n              </template>\n              <details\n                class=\"mt-4 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\"\n                on-toggle=\"loadHelp($event)\"\n              >\n                <summary\n                  class=\"flex cursor-pointer list-none items-center gap-2 px-4 py-3 text-sm font-medium text-gray-300 outline-none transition hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\"\n                >\n                  <span class=\"inline-flex items-center gap-2\"\n                    ><lucide-icon icon=\"circle-question-mark\" size=\"16\"></lucide-icon>Syntax</span\n                  >\n                  <span class=\"ml-2 text-xs font-normal text-gray-500\">Reference, tutorials, and examples</span>\n                </summary>\n                <div\n                  ref=\"helpContent\"\n                  class=\"max-h-[38rem] overflow-y-auto border-t border-gray-800 bg-gray-950 px-4 py-5\"\n                  role=\"region\"\n                  aria-label=\"Workflow syntax help\"\n                  aria-live=\"polite\"\n                >\n                  <p class=\"text-sm text-gray-500\">Expand to load the workflow syntax reference.</p>\n                </div>\n              </details>\n            </div>\n          </section>\n        </section>\n\n        <template if=\"aiDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div class=\"flex max-h-[90vh] w-full max-w-5xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\" role=\"dialog\" aria-modal=\"true\" aria-labelledby=\"workflow-ai-title\">\n              <div class=\"flex items-start justify-between gap-3 border-b border-gray-800 px-5 py-4\"><div><h2 id=\"workflow-ai-title\" class=\"text-lg font-semibold text-white\">AI workflow help</h2><p class=\"mt-1 text-sm text-gray-400\">Describe the change you want. The suggestion will not modify the editor until you accept it.</p></div><button type=\"button\" on-click=\"closeAiHelp()\" aria-label=\"Close AI help\" class=\"rounded-lg p-2 text-gray-400 hover:bg-gray-800\"><lucide-icon icon=\"x\" size=\"17\"></lucide-icon></button></div>\n              <div class=\"min-h-0 overflow-auto p-5\">\n                <label class=\"sr-only\" for=\"workflow-ai-request\">Requested workflow change</label>\n                <textarea id=\"workflow-ai-request\" bind-value=\"aiRequest\" placeholder=\"Example: Add a Docker cache volume to the build step.\" class=\"min-h-24 w-full rounded-xl border border-gray-700 bg-gray-950 p-3 text-sm text-gray-200 outline-none focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"></textarea>\n                <p class=\"mt-2 text-xs text-rose-300\" class-hidden=\"!aiError\">{{ aiError }}</p>\n                <template if=\"aiDiffHtml\">\n                  <div class=\"mt-4\"><p class=\"mb-2 text-xs font-semibold uppercase tracking-wider text-gray-500\">Suggested changes</p><pre class=\"max-h-[36rem] overflow-auto rounded-xl border border-gray-700 bg-gray-950 p-4 font-mono text-xs leading-6\" bind-innerhtml=\"aiDiffHtml\"></pre></div>\n                </template>\n              </div>\n              <div class=\"flex items-center justify-end gap-2 border-t border-gray-800 px-5 py-3\"><button type=\"button\" on-click=\"closeAiHelp()\" class=\"rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-300 hover:bg-gray-800\">Cancel</button><template if=\"aiDiffHtml\"><button type=\"button\" on-click=\"rejectAiSuggestion()\" class=\"rounded-lg border border-rose-500/50 px-3 py-2 text-sm text-rose-300 hover:bg-rose-500/10\">Reject</button><button type=\"button\" on-click=\"acceptAiSuggestion()\" class=\"rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white hover:bg-indigo-400\">Accept suggestion</button></template><button type=\"button\" on-click=\"requestAiHelp()\" bind-disabled=\"aiLoading || !aiRequest.trim()\" class=\"rounded-lg bg-indigo-500 px-3 py-2 text-sm font-semibold text-white hover:bg-indigo-400 disabled:opacity-50\">{{ aiLoading ? 'Thinking...' : 'Suggest' }}</button></div>\n            </div>\n          </div>\n        </template>\n\n        <template if=\"revisionDialogOpen\">\n          <div class=\"fixed inset-0 z-50 flex items-center justify-center bg-gray-950/80 p-4\" role=\"presentation\">\n            <div\n              class=\"flex max-h-[90vh] w-full max-w-4xl flex-col overflow-hidden rounded-2xl border border-gray-700 bg-gray-900 shadow-2xl\"\n              role=\"dialog\"\n              aria-modal=\"true\"\n              aria-labelledby=\"revision-dialog-title\"\n            >\n              <div class=\"flex items-center justify-between border-b border-gray-800 px-4 py-3\">\n                <div>\n                  <h2 id=\"revision-dialog-title\" class=\"font-semibold text-white\">Workflow revision {{ revisionNumber }}</h2>\n                  <p class=\"text-xs text-gray-500\">Read-only source snapshot</p>\n                </div>\n                <button type=\"button\" on-click=\"closeRevisionDialog()\" aria-label=\"Close revision dialog\" class=\"rounded-lg p-2 text-gray-400 outline-none hover:bg-gray-800 hover:text-white focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n                  <lucide-icon icon=\"x\" size=\"17\"></lucide-icon>\n                </button>\n              </div>\n               <div class=\"min-h-0 flex-1 overflow-auto p-4\">\n                 <p class=\"mb-3 text-sm text-rose-300\" class-hidden=\"!revisionError\">{{ revisionError }}</p>\n                 <pre class=\"min-h-[20rem] overflow-auto rounded-lg border border-gray-700 bg-gray-950 p-4 font-mono text-xs leading-6\" bind-innerhtml=\"revisionDiffHtml\"></pre>\n              </div>\n               <div class=\"flex items-center justify-between border-t border-gray-800 px-4 py-3\">\n                <button type=\"button\" on-click=\"navigateRevision(-1)\" bind-disabled=\"revisionLoading || revisionNumber <= 1\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  <lucide-icon icon=\"chevron-left\" size=\"16\"></lucide-icon>Previous\n                </button>\n                 <button type=\"button\" on-click=\"navigateRevision(1)\" bind-disabled=\"revisionLoading || revisionNumber >= revision\" class=\"inline-flex items-center gap-2 rounded-lg border border-gray-700 px-3 py-2 text-sm text-gray-200 outline-none hover:bg-gray-800 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-40\">\n                  Next<lucide-icon icon=\"chevron-right\" size=\"16\"></lucide-icon>\n                </button>\n              </div>\n            </div>\n          </div>\n        </template>\n\n        <section\n          class=\"secrets-panel rounded-2xl border border-gray-800 bg-gray-900/80 p-4 shadow-xl shadow-black/10 sm:p-5\"\n          aria-labelledby=\"secrets-title\"\n        >\n          <div class=\"mb-5 flex items-start justify-between gap-3\">\n            <div class=\"flex items-start gap-3\">\n              <span class=\"rounded-lg bg-indigo-500/10 p-2 text-indigo-300\"\n                ><lucide-icon icon=\"key-round\" size=\"18\"></lucide-icon\n              ></span>\n              <div>\n                <h2 id=\"secrets-title\" class=\"text-lg font-semibold text-white\">Secrets</h2>\n                <p class=\"mt-0.5 text-sm text-gray-400\">Write-only credentials available to workflows.</p>\n              </div>\n            </div>\n            <span\n              class=\"rounded-full border border-gray-700 bg-gray-950 px-2.5 py-1 text-xs font-mono text-gray-400\"\n              aria-label=\"Secret count\"\n              >{{ secrets.length }}</span\n            >\n          </div>\n          <details ref=\"secretForm\" class=\"mb-5 overflow-hidden rounded-xl border border-gray-800 bg-gray-950/50\">\n            <summary class=\"flex cursor-pointer list-none items-center justify-between px-4 py-3 text-sm font-medium text-gray-300 outline-none hover:bg-gray-900 focus-visible:ring-2 focus-visible:ring-indigo-400/60\">\n              <span>Add a secret</span>\n              <lucide-icon icon=\"plus\" size=\"17\"></lucide-icon>\n            </summary>\n            <div class=\"space-y-3 border-t border-gray-800 p-4\">\n              <p class=\"text-xs text-gray-500\">Saving an existing name replaces its encrypted value.</p>\n              <label class=\"sr-only\" for=\"secret-name\">Secret name</label>\n              <input\n                id=\"secret-name\"\n                bind-value=\"secretName\"\n                on-input=\"setSecretName($event)\"\n                class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm uppercase outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                placeholder=\"NPM_TOKEN\"\n              />\n              <label class=\"inline-flex items-center gap-2 text-sm text-gray-300\">\n                <input type=\"checkbox\" bind-checked=\"fileMode\" on-change=\"setFileMode($event)\" class=\"h-4 w-4 rounded border-gray-700 bg-gray-900 text-indigo-500 focus:ring-2 focus:ring-indigo-500/30\" />\n                Binary file secret\n              </label>\n              <template if=\"!fileMode\">\n                <label class=\"sr-only\" for=\"secret-value\">Text secret value</label>\n                <input\n                  id=\"secret-value\"\n                  ref=\"secretValueInput\"\n                  bind-value=\"secretValue\"\n                  on-input=\"setSecretValue($event)\"\n                  type=\"password\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2.5 font-mono text-sm outline-none transition placeholder:text-gray-600 focus:border-indigo-500 focus:ring-2 focus:ring-indigo-500/30\"\n                  placeholder=\"New secret value\"\n                />\n              </template>\n              <template if=\"fileMode\">\n                <label class=\"sr-only\" for=\"secret-file\">Binary secret file</label>\n                <input\n                  id=\"secret-file\"\n                  ref=\"secretFileInput\"\n                  on-change=\"setSecretFile($event)\"\n                  type=\"file\"\n                  class=\"rounded-lg border border-gray-700 bg-gray-900 px-3 py-2 text-xs text-gray-400 file:mr-3 file:rounded file:border-0 file:bg-gray-700 file:px-2 file:py-1 file:text-xs file:text-gray-200 focus:border-indigo-500 focus:outline-none focus:ring-2 focus:ring-indigo-500/30\"\n                />\n              </template>\n              <div>\n                <button\n                  type=\"button\"\n                  aria-label=\"Save secret value\"\n                  title=\"Save secret value\"\n                  on-click=\"saveSecret()\"\n                  bind-disabled=\"busy\"\n                  class=\"inline-flex items-center justify-center gap-2 rounded-lg border border-indigo-500/60 px-3 py-2.5 text-sm font-medium text-indigo-200 outline-none transition hover:bg-indigo-500/10 focus-visible:ring-2 focus-visible:ring-indigo-400/60 disabled:opacity-50\"\n                >\n                  <lucide-icon icon=\"lock-keyhole\" size=\"16\"></lucide-icon>Save secret\n                </button>\n              </div>\n            </div>\n            </div>\n          </details>\n          <ul class=\"grid gap-2\" aria-label=\"Saved secrets\">\n            <template for=\"name of secrets\">\n              <li>\n                <div class=\"flex min-h-14 items-center gap-2 rounded-xl border border-gray-800 bg-gray-950/50 px-3.5 py-3\">\n                  <button\n                    type=\"button\"\n                    on-click=\"selectSecret(name)\"\n                    class=\"group flex min-w-0 flex-1 items-center gap-3 text-left outline-none focus-visible:ring-2 focus-visible:ring-indigo-400/50\"\n                    aria-label=\"Edit secret {{ name }}\"\n                  >\n                  <span\n                    class=\"flex h-8 w-8 shrink-0 items-center justify-center rounded-lg bg-gray-800 text-gray-500 group-hover:text-indigo-300\"\n                    ><lucide-icon icon=\"key-round\" size=\"15\"></lucide-icon\n                  ></span>\n                  <span class=\"min-w-0 flex-1 truncate font-mono text-sm text-gray-200\">{{ name }}</span>\n                    <span class=\"text-xs text-gray-500\">Select</span>\n                    <lucide-icon icon=\"chevron-right\" size=\"16\" class=\"text-gray-600 transition group-hover:text-indigo-300\"></lucide-icon>\n                  </button>\n                  <button\n                    type=\"button\"\n                    on-click=\"removeSecret(name)\"\n                    aria-label=\"Delete secret {{ name }}\"\n                    title=\"Delete secret\"\n                    class=\"inline-flex h-8 w-8 shrink-0 items-center justify-center rounded-lg text-rose-300 outline-none transition hover:bg-rose-500/10 focus-visible:ring-2 focus-visible:ring-rose-400/60\"\n                  >\n                    <lucide-icon icon=\"trash\" size=\"15\"></lucide-icon>\n                  </button>\n                </div>\n              </li>\n            </template>\n          </ul>\n          <div\n            class=\"rounded-xl border border-dashed border-gray-700 px-4 py-8 text-center\"\n            class-hidden=\"secrets.length > 0\"\n          >\n            <lucide-icon icon=\"key-round\" size=\"22\" class=\"mx-auto text-gray-600\"></lucide-icon>\n            <p class=\"mt-2 text-sm font-medium text-gray-300\">No secrets configured</p>\n              <p class=\"mt-1 text-xs text-gray-500\">Add one above to make it available to a workflow.</p>\n          </div>\n        </section>\n      </main>\n\n      <script setup>\n         import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n         import { diffLines } from 'diff';\n\n        export default function () {\n          const page = document.body.dataset.page;\n          const initialId = __WORKFLOW_ID__;\n          const initialRevision = __WORKFLOW_REVISION__;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionDiffHtml = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n           const aiDialogOpen = ref(false);\n           const aiRequest = ref('');\n           const aiLoading = ref(false);\n           const aiError = ref('');\n           const aiSuggestion = ref('');\n           const aiDiffHtml = ref('');\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n            const response = await fetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n          const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n            });\n          const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const escapeRevisionHtml = (value) => value.replace(/[&<>\"']/g, (character) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' })[character] || '');\n           const renderRevisionDiff = (previousSource, currentSource) => {\n             if (previousSource === null) return `<span class=\"text-emerald-300\">+ ${escapeRevisionHtml(currentSource)}</span>\\n`;\n             return diffLines(previousSource, currentSource).map((part) => {\n               const className = part.added ? 'text-emerald-300 bg-emerald-500/10' : part.removed ? 'text-rose-300 bg-rose-500/10' : 'text-gray-300';\n               const prefix = part.added ? '+ ' : part.removed ? '- ' : '  ';\n               return part.value.split('\\n').filter((line, index, lines) => index < lines.length - 1 || line).map((line) => `<span class=\"block ${className}\">${prefix}${escapeRevisionHtml(line)}</span>`).join('');\n             }).join('');\n           };\n           const openRevisionDialog = async () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionDiffHtml.value = '';\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n             await loadRevisionDiff(revision.value);\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const loadRevisionDiff = async (number) => {\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const current = await api(`/api/workflows/${selectedId.value}?revision=${number}`);\n               const previous = number > 1 ? await api(`/api/workflows/${selectedId.value}?revision=${number - 1}`) : null;\n               revisionDiffHtml.value = renderRevisionDiff(previous?.sourceYaml ?? null, current.sourceYaml);\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1 || target > revision.value) return;\n             revisionNumber.value = target;\n             await loadRevisionDiff(target);\n           };\n           const openAiHelp = () => {\n             aiRequest.value = '';\n             aiError.value = '';\n             aiSuggestion.value = '';\n             aiDiffHtml.value = '';\n             aiDialogOpen.value = true;\n           };\n           const closeAiHelp = () => { if (!aiLoading.value) aiDialogOpen.value = false; };\n           const requestAiHelp = async () => {\n             if (!aiRequest.value.trim() || aiLoading.value) return;\n             aiLoading.value = true;\n             aiError.value = '';\n             aiDiffHtml.value = '';\n             try {\n               const response = await fetch('/api/ai/workflow-help', {\n                 method: 'POST',\n                 headers: { accept: 'text/event-stream', 'content-type': 'application/json' },\n                 body: JSON.stringify({ sourceYaml: source.value, request: aiRequest.value }),\n               });\n               if (!response.ok) { const error = await response.json().catch(() => ({})); throw new Error(error.error || `AI help failed: ${response.status}`); }\n               const reader = response.body.getReader();\n               const decoder = new TextDecoder();\n               let buffer = '';\n               let suggestion = '';\n               while (true) {\n                 const chunk = await reader.read();\n                 if (chunk.done) break;\n                 buffer += decoder.decode(chunk.value, { stream: true });\n                 const events = buffer.split('\\n\\n');\n                 buffer = events.pop() || '';\n                 for (const event of events) {\n                   const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                   if (!line) continue;\n                   const data = JSON.parse(line.slice(6));\n                   if (data.error) throw new Error(data.error);\n                   if (data.delta) suggestion += data.delta;\n                 }\n               }\n               suggestion = suggestion.replace(/^```(?:yaml|yml)?\\s*/i, '').replace(/\\s*```$/i, '').trim();\n               if (!source.value.trim()) {\n                 source.value = suggestion;\n                 aiDialogOpen.value = false;\n                 validate();\n               } else {\n                 aiSuggestion.value = suggestion;\n                 aiDiffHtml.value = renderRevisionDiff(source.value, suggestion);\n               }\n             } catch (error) {\n               aiError.value = error.message;\n             } finally {\n               aiLoading.value = false;\n             }\n           };\n           const acceptAiSuggestion = () => { source.value = aiSuggestion.value; aiDialogOpen.value = false; validate(); };\n           const rejectAiSuggestion = () => { aiSuggestion.value = ''; aiDiffHtml.value = ''; };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionDiffHtml,\n             revisionError,\n             revisionLoading,\n             aiDialogOpen,\n             aiRequest,\n             aiLoading,\n             aiError,\n             aiDiffHtml,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n            publish,\n            remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n             openAiHelp,\n             closeAiHelp,\n             requestAiHelp,\n             acceptAiSuggestion,\n             rejectAiSuggestion,\n          };\n        }\n      <\/script>\n    </template>\n\n    <script type=\"module\">\n      import '@li3/web';\n    <\/script>\n    <script src=\"https://cdn.tailwindcss.com\"><\/script>\n  </body>\n</html>\n";
 //#endregion
 //#region src/workflows-ui.ts
 function dy(e, t = "", n) {
@@ -20852,6 +20873,26 @@ var SC = class {
 			"Cache-Control": "no-store",
 			"Content-Type": "application/json; charset=utf-8"
 		}), t.end(JSON.stringify(oa));
+		if (e.method === "POST" && n.pathname === "/api/workers/heartbeat") {
+			if (!this.isWorker(e)) {
+				t.writeHead(403, { "Content-Type": "application/json" }).end(JSON.stringify({ error: "Unauthorized" }));
+				return;
+			}
+			let n = await this.readJson(e, t);
+			if (!n || n.workerId !== e.headers["x-runner-worker-id"]) return;
+			await this.queue.updateWorkerPresence({
+				id: n.workerId,
+				version: String(n.version || "unknown"),
+				tags: Array.isArray(n.tags) ? n.tags : [],
+				concurrency: Number(n.concurrency || 0),
+				activeJobs: Number(n.activeJobs || 0)
+			}), t.writeHead(204).end();
+			return;
+		}
+		if (e.method === "GET" && n.pathname === "/api/workers") return await this.hasScope(e, "workers:read") ? (t.writeHead(200, {
+			"Cache-Control": "no-store",
+			"Content-Type": "application/json; charset=utf-8"
+		}), t.end(JSON.stringify({ workers: await this.queue.listWorkerPresence() }))) : this.requireScope(e, t, "workers:read");
 		if (e.method === "GET" && n.pathname === "/pages/dashboard.html") return this.renderPageComponent(t, "page-dashboard", Ce);
 		if (e.method === "GET" && n.pathname === "/pages/run.html") return this.renderPageComponent(t, "page-run", Fe);
 		if (e.method === "GET" && n.pathname === "/pages/help.html") return this.renderPageComponent(t, "page-help", aa(!1), !0);
@@ -20867,7 +20908,7 @@ var SC = class {
 		}
 		if (e.method === "GET" && n.pathname === "/workflows") return this.requireAdmin(e, t) ? (t.writeHead(302, { Location: "/settings/workflows" }), t.end()) : void 0;
 		if (e.method === "GET" && n.pathname === "/settings") return this.isAdmin(e) ? (t.writeHead(302, { Location: "/settings/workflows" }), t.end()) : this.requireAdmin(e, t);
-		let r = n.pathname.match(/^\/settings\/(workflows|secrets|tokens|notifications)$/);
+		let r = n.pathname.match(/^\/settings\/(workflows|secrets|tokens|notifications|workers)$/);
 		if (e.method === "GET" && r) return this.requireAdmin(e, t) ? (r[1], this.renderAppShell(t)) : void 0;
 		if (n.pathname === "/api/api-keys") {
 			if (!this.isAdmin(e)) return this.requireAdmin(e, t);
@@ -21712,7 +21753,7 @@ async function AC(e) {
 		if (!t) {
 			t = !0, console.log(`\n🛑 Received ${n}. Initiating graceful shutdown...`);
 			try {
-				BC(), e.length > 0 && (console.log("⚙️ Waiting for active worker jobs to drain..."), await Promise.allSettled(e)), console.log("✨ Engine stopped cleanly. Goodbye!"), process.exit(0);
+				VC(), e.length > 0 && (console.log("⚙️ Waiting for active worker jobs to drain..."), await Promise.allSettled(e)), console.log("✨ Engine stopped cleanly. Goodbye!"), process.exit(0);
 			} catch (e) {
 				console.error("❌ Error during graceful shutdown:", e.message), process.exit(1);
 			}
@@ -21803,59 +21844,102 @@ PC("github-status", (e) => {
 	});
 });
 //#endregion
-//#region src/worker.ts
-var IC = { isStopping: !1 }, LC = /* @__PURE__ */ new Set(), RC = null, zC = null;
-function BC() {
-	IC.isStopping = !0, RC?.abort(), zC?.();
-}
-function VC(e, t, n, r) {
-	IC.isStopping = !1;
-	let i = [HC(e, t, n, r)];
+//#region src/version.ts
+var IC = {
+	name: "@cloud-cli/on",
+	version: "0.0.0",
+	description: "CLI entry point for the on plugin ecosystem.",
+	type: "module",
+	packageManager: "pnpm@12.3.4",
+	license: "MIT",
+	exports: { ".": {
+		types: "./dist/index.d.ts",
+		default: "./dist/on.js"
+	} },
+	files: ["dist"],
+	main: "dist/on.js",
+	bin: { on: "dist/on.js" },
+	dependencies: {
+		acorn: "^8.18.0",
+		openai: "7.15.0",
+		"web-push": "^3.6.7",
+		yaml: "^2.9.0"
+	},
+	scripts: {
+		ci: "pnpm build && pnpm lint && pnpm test",
+		build: "vite build && tsc --emitDeclarationOnly --declaration",
+		lint: "eslint .",
+		test: "vitest run",
+		"test:e2e": "docker build --no-cache -t on:e2e . && node tests/docker-smoke.mjs",
+		release: "npx --yes semantic-release@24 -b main --no-ci"
+	},
+	devDependencies: {
+		"@changesets/cli": "^2.31.1",
+		"@eslint/js": "^10.0.1",
+		"@types/node": "^26.5.1",
+		"@types/web-push": "^3.6.4",
+		"@typescript-eslint/eslint-plugin": "^8.70.0",
+		"@typescript-eslint/parser": "^8.70.0",
+		eslint: "10.8.0",
+		marked: "^18.0.12",
+		tsx: "4.23.13",
+		typescript: "6.0.3",
+		"typescript-eslint": "8.70.0",
+		vite: "8.2.0",
+		vitest: "4.1.11"
+	}
+}.version, LC = { isStopping: !1 }, RC = /* @__PURE__ */ new Set(), zC = null, BC = null;
+function VC() {
+	LC.isStopping = !0, zC?.abort(), BC?.();
+}
+function HC(e, t, n, r) {
+	LC.isStopping = !1;
+	let i = [UC(e, t, n, r)];
 	return AC(i), i;
 }
-async function HC(e, t, n, r) {
+async function UC(e, t, n, r) {
 	let i = await kC(), a = new SC(), o = /* @__PURE__ */ new Set(), s = 0, c = null, l = () => {
 		s++, c?.();
-	};
-	zC = l, RC = new AbortController();
-	let u = UC(r, RC.signal, l);
-	for (console.log(`🚀 Worker scheduler started. Driver: ${i.name}. Concurrency: ${e}. Tags: ${r.tags.join(", ") || "(none)"}`); !IC.isStopping;) {
+	}, u = process.env.WORKER_NAME || "cli";
+	BC = l, zC = new AbortController();
+	let d = WC(r, zC.signal, l), f = setInterval(() => void JC(r, u, e, o.size), 15e3);
+	for (f.unref(), JC(r, u, e, o.size), console.log(`🚀 Worker scheduler started. Driver: ${i.name}. Concurrency: ${e}. Tags: ${r.tags.join(", ") || "(none)"}`); !LC.isStopping;) {
 		let n = s;
 		try {
-			for (; o.size < e && !IC.isStopping;) {
+			for (; o.size < e && !LC.isStopping;) {
 				let e = await t.claimNextJob(r.tags);
 				if (!e) break;
-				if (IC.isStopping) {
+				if (LC.isStopping) {
 					await t.releaseJob(e.id);
 					break;
 				}
-				let n = process.env.WORKER_NAME || "cli", s;
-				s = (async () => {
-					KC(r, e.id);
-					let o = await a.getRevision(e.workflow_id, e.workflow_revision);
-					if (!o) throw await t.finishJob(e.id, "failed"), Error(`Workflow ${e.workflow_id} revision ${e.workflow_revision} was not found`);
-					let s = new Se();
-					s.replace(await qC(r, n, e.id)), await JC({
-						workerId: n,
+				let n;
+				n = (async () => {
+					qC(r, e.id);
+					let n = await a.getRevision(e.workflow_id, e.workflow_revision);
+					if (!n) throw await t.finishJob(e.id, "failed"), Error(`Workflow ${e.workflow_id} revision ${e.workflow_revision} was not found`);
+					let o = new Se();
+					o.replace(await YC(r, u, e.id)), await XC({
+						workerId: u,
 						job: e,
 						queue: t,
-						secrets: s,
+						secrets: o,
 						config: r,
 						driver: i,
-						workflow: o
+						workflow: n
 					});
-				})().catch((e) => console.error(`[${n}] ⚠️ Worker execution error:`, e)).finally(() => {
-					o.delete(s), KC(r, e.id), l();
-				}), o.add(s);
+				})().catch((e) => console.error(`[${u}] ⚠️ Worker execution error:`, e)).finally(() => {
+					o.delete(n), qC(r, e.id), l();
+				}), o.add(n);
 			}
 		} catch (e) {
 			console.error("⚠️ Worker scheduler claim error:", e), setTimeout(l, 5e3).unref();
 		}
-		!IC.isStopping && s === n && (await WC(n, () => s, (e) => c = e), c = null);
+		!LC.isStopping && s === n && (await GC(n, () => s, (e) => c = e), c = null);
 	}
-	RC.abort(), await Promise.allSettled(o), await u, zC = null, console.log("🛑 Worker scheduler stopped cleanly.");
+	zC.abort(), clearInterval(f), await Promise.allSettled(o), await d, BC = null, console.log("🛑 Worker scheduler stopped cleanly.");
 }
-async function UC(e, t, n) {
+async function WC(e, t, n) {
 	let r = 1e3;
 	for (; !t.aborted;) {
 		try {
@@ -21866,10 +21950,10 @@ async function UC(e, t, n) {
 			if (t.aborted || e?.name === "AbortError") break;
 			console.error(`⚠️ Worker event stream disconnected: ${e.message}`);
 		}
-		await GC(r, t), r = Math.min(r * 2, 3e4);
+		await KC(r, t), r = Math.min(r * 2, 3e4);
 	}
 }
-function WC(e, t, n) {
+function GC(e, t, n) {
 	return new Promise((r) => {
 		if (t() !== e) return r();
 		let i = setTimeout(r, 6e4);
@@ -21878,7 +21962,7 @@ function WC(e, t, n) {
 		});
 	});
 }
-function GC(e, t) {
+function KC(e, t) {
 	return new Promise((n) => {
 		if (t.aborted) return n();
 		let r = () => {
@@ -21889,7 +21973,7 @@ function GC(e, t) {
 		t.addEventListener("abort", r, { once: !0 });
 	});
 }
-async function KC(e, t) {
+async function qC(e, t) {
 	if (e.workerToken) try {
 		let n = await fetch(new URL("/api/events", e.serverUrl), {
 			method: "POST",
@@ -21905,7 +21989,29 @@ async function KC(e, t) {
 		dr("Failed to publish job status event:", e);
 	}
 }
-async function qC(e, t, n) {
+async function JC(e, t, n, r) {
+	if (e.workerToken) try {
+		await fetch(new URL("/api/workers/heartbeat", e.serverUrl), {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${e.workerToken}`,
+				"Content-Type": "application/json",
+				"X-Runner-Worker-Id": t
+			},
+			body: JSON.stringify({
+				workerId: t,
+				version: IC,
+				tags: e.tags,
+				concurrency: n,
+				activeJobs: r
+			}),
+			signal: AbortSignal.timeout(5e3)
+		});
+	} catch (e) {
+		dr("Failed to publish worker heartbeat:", e);
+	}
+}
+async function YC(e, t, n) {
 	if (!e.workerToken) return {};
 	try {
 		let r = await fetch(new URL(`/api/jobs/${n}/secrets`, e.serverUrl), {
@@ -21921,7 +22027,7 @@ async function qC(e, t, n) {
 		throw console.error(`Unable to retrieve secrets for job ${n}:`, e), e;
 	}
 }
-async function JC(e) {
+async function XC(e) {
 	let { workerId: t, job: n, config: r, secrets: a, queue: o } = e;
 	console.log(`\n[${t}] 📦 Claimed Job #${n.id} (Workflow: ${n.workflow_id})`);
 	let s = typeof n.payload == "string" ? JSON.parse(n.payload) : n.payload;
@@ -21951,14 +22057,14 @@ async function JC(e) {
 		durationMs: 0,
 		outputs: {},
 		logContent: ""
-	})), b = cw(n, "running", p, f, _.env, y, s);
-	await o.saveReport(n.id, b), KC(r, n.id);
+	})), b = uw(n, "running", p, f, _.env, y, s);
+	await o.saveReport(n.id, b), qC(r, n.id);
 	try {
-		Object.assign(_.env, await QC(l.env, _)), Object.assign(_.env, {
+		Object.assign(_.env, await ew(l.env, _)), Object.assign(_.env, {
 			CI: "true",
 			CI_JOB_ID: String(n.id),
 			CI_JOB_NAME: l.name
-		}), aw(l.secretFiles, a, g), v = l.cache ? String(await mr.evaluateValue(l.cache.key, _)) : "", v && l.cache && await iw(o, "cache", `${n.workflow_id}:${v}`, l.cache.paths, g), await o.saveReport(n.id, b);
+		}), sw(l.secretFiles, a, g), v = l.cache ? String(await mr.evaluateValue(l.cache.key, _)) : "", v && l.cache && await ow(o, "cache", `${n.workflow_id}:${v}`, l.cache.paths, g), await o.saveReport(n.id, b);
 	} catch (e) {
 		b.status = "failed", b.finishedAt = (/* @__PURE__ */ new Date()).toISOString(), b.durationMs = Date.now() - p;
 		let r = {
@@ -21973,7 +22079,7 @@ async function JC(e) {
 	}
 	let x = [...r.plugins];
 	for (let e of l.plugins || []) try {
-		let t = await QC(e.secrets, _);
+		let t = await ew(e.secrets, _);
 		x.push(FC({
 			...e,
 			secrets: t
@@ -21988,24 +22094,24 @@ async function JC(e) {
 		runUrl: new URL(`/runs/${n.id}`, r.serverUrl).toString()
 	};
 	await S.triggerWorkflowStart(ee);
-	let { cancelled: te, failed: ne } = await YC({
+	let { cancelled: te, failed: ne } = await ZC({
 		payload: s,
 		steps: d,
 		executionContext: _,
 		...u
 	}, b), re = te ? "cancelled" : ne ? "failed" : "success";
 	if (re === "success") try {
-		let e = l.artifacts ? await rw(l.artifacts.paths, g) : [];
+		let e = l.artifacts ? await aw(l.artifacts.paths, g) : [];
 		if (e.length && (await o.saveStoredFiles("artifact", String(n.id), e), b.artifacts = e.map((e) => e.path)), v && l.cache) {
-			let e = await rw(l.cache.paths, g);
+			let e = await aw(l.cache.paths, g);
 			e.length && await o.saveStoredFiles("cache", `${n.workflow_id}:${v}`, e);
 		}
 	} catch (e) {
 		console.error(`[${t}] ⚠️ Failed to store workflow files:`, e), re = "failed";
 	}
-	b.status = re, b.durationMs = Date.now() - p, b.finishedAt = (/* @__PURE__ */ new Date()).toISOString(), await o.completeJob(n.id, re, b), KC(r, n.id), console.log(`[${t}] ✅ Job #${n.id} completed as: ${re}`), await S.triggerWorkflowFinish(ee, re);
+	b.status = re, b.durationMs = Date.now() - p, b.finishedAt = (/* @__PURE__ */ new Date()).toISOString(), await o.completeJob(n.id, re, b), qC(r, n.id), console.log(`[${t}] ✅ Job #${n.id} completed as: ${re}`), await S.triggerWorkflowFinish(ee, re);
 }
-async function YC(e, t) {
+async function ZC(e, t) {
 	let { driver: n, workerId: r, queue: i, config: a, job: o, payload: s, steps: c, executionContext: l } = e, u = t.steps, d = !1, f = !1, p = 0;
 	try {
 		for (let s = 0; s < c.length; s++) {
@@ -22020,14 +22126,14 @@ async function YC(e, t) {
 				logContent: "",
 				startedAt: h,
 				finishedAt: void 0
-			}, t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), KC(a, o.id);
+			}, t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), qC(a, o.id);
 			let g = {
 				failed: !0,
 				skipped: !1,
 				cancelled: !1,
 				report: null
 			}, _ = e.workflow?.retries ?? 0;
-			for (let e = 1; e <= _ + 1 && (g = await XC({
+			for (let e = 1; e <= _ + 1 && (g = await QC({
 				workerId: r,
 				jobId: o.id,
 				step: m,
@@ -22055,7 +22161,7 @@ async function YC(e, t) {
 				exitCode: 1,
 				error: "Step failed before execution started",
 				finishedAt: (/* @__PURE__ */ new Date()).toISOString()
-			}, p = s + 1, t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), KC(a, o.id), g.skipped) break;
+			}, p = s + 1, t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), qC(a, o.id), g.skipped) break;
 			if (g.cancelled) {
 				f = !0, d = !0;
 				break;
@@ -22068,13 +22174,13 @@ async function YC(e, t) {
 	} catch (e) {
 		console.log("🛑 Step failed", e), d = !0;
 	}
-	return p < c.length && (sw(c, p, u), t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), KC(a, o.id)), {
+	return p < c.length && (lw(c, p, u), t.durationMs = Date.now() - Date.parse(t.startedAt), await i.saveReport(o.id, t), qC(a, o.id)), {
 		failed: d,
 		cancelled: f,
 		stepReports: u
 	};
 }
-async function XC(e) {
+async function QC(e) {
 	let { step: t, stepIndex: n, executionContext: r } = e;
 	if (t.id ||= `step-${n}`, t.name ||= t.id, t.if && !await mr.evaluateConditions(t.if, r)) return dr(`⏩ Skipped step ${t.id} based on condition: ${t.if}`, r), {
 		failed: !1,
@@ -22083,7 +22189,7 @@ async function XC(e) {
 		report: null
 	};
 	try {
-		let i = await QC(t.env, r), a = {
+		let i = await ew(t.env, r), a = {
 			jobId: String(e.jobId),
 			step: t,
 			command: t.run,
@@ -22103,10 +22209,10 @@ async function XC(e) {
 				CI_JOB_NAME: r.env.CI_JOB_NAME || t.name || t.id || `step-${n}`
 			}
 		};
-		return t.eval ? ZC({
+		return t.eval ? $C({
 			...e,
 			stepContext: a
-		}) : ow({
+		}) : cw({
 			...e,
 			stepContext: a
 		});
@@ -22129,7 +22235,7 @@ async function XC(e) {
 		};
 	}
 }
-async function ZC(e) {
+async function $C(e) {
 	let { queue: t, stepContext: n, executionContext: r } = e, { jobId: i, step: a } = n, o = Date.now(), s = a.id, c = a.name, l;
 	try {
 		let e = new Promise((e, t) => {
@@ -22179,7 +22285,7 @@ async function ZC(e) {
 		l && clearTimeout(l);
 	}
 }
-async function QC(e, t) {
+async function ew(e, t) {
 	let n = {};
 	if (e) for (let [r, i] of Object.entries(e)) n[r] = String(await mr.evaluateValue(i, {
 		...t,
@@ -22190,18 +22296,18 @@ async function QC(e, t) {
 	}));
 	return n;
 }
-var $C = 52428800;
-function ew(e, t) {
+var tw = 52428800;
+function nw(e, t) {
 	let n = i.resolve(e), r = i.resolve(n, t);
 	if (r !== n && !r.startsWith(`${n}${i.sep}`)) throw Error(`Stored file path escapes workspace: ${t}`);
 	return r;
 }
-function tw(e, t) {
+function rw(e, t) {
 	let n = "^";
 	for (let e = 0; e < t.length; e++) t[e] === "*" && t[e + 1] === "*" ? (n += ".*", e++) : t[e] === "*" ? n += "[^/]*" : n += t[e].replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
 	return RegExp(`${n}$`).test(e);
 }
-function nw(t, n) {
+function iw(t, n) {
 	let r = i.resolve(n), a = [], o = (t) => {
 		for (let n of e.readdirSync(t, { withFileTypes: !0 })) {
 			let e = i.join(t, n.name);
@@ -22209,42 +22315,42 @@ function nw(t, n) {
 		}
 	};
 	return o(r), a.filter((r) => t.some((t) => {
-		let i = ew(n, t);
+		let i = nw(n, t);
 		if (e.existsSync(i)) {
 			let n = e.statSync(i);
 			if (n.isFile()) return r === t;
 			if (n.isDirectory()) return r === t || r.startsWith(`${t.replace(/\/$/, "")}/`);
 		}
-		return tw(r, t);
+		return rw(r, t);
 	}));
 }
-async function rw(t, n) {
-	let r = nw(t, n), i = 0;
+async function aw(t, n) {
+	let r = iw(t, n), i = 0;
 	return r.map((t) => {
-		let r = e.readFileSync(ew(n, t));
-		if (r.byteLength > $C || (i += r.byteLength) > $C) throw Error(`Stored files exceed ${$C} bytes`);
+		let r = e.readFileSync(nw(n, t));
+		if (r.byteLength > tw || (i += r.byteLength) > tw) throw Error(`Stored files exceed ${tw} bytes`);
 		return {
 			path: t,
 			content: r.toString("base64")
 		};
 	});
 }
-async function iw(t, n, r, a, o) {
+async function ow(t, n, r, a, o) {
 	for (let s of await t.getStoredFiles(n, r)) {
-		if (!a.some((e) => s.path === e || s.path.startsWith(`${e.replace(/\/$/, "")}/`) || tw(s.path, e))) continue;
-		let t = ew(o, s.path);
+		if (!a.some((e) => s.path === e || s.path.startsWith(`${e.replace(/\/$/, "")}/`) || rw(s.path, e))) continue;
+		let t = nw(o, s.path);
 		e.mkdirSync(i.dirname(t), { recursive: !0 }), e.writeFileSync(t, Buffer.from(s.content, "base64"));
 	}
 }
-function aw(t, n, r) {
+function sw(t, n, r) {
 	for (let [a, o] of Object.entries(t || {})) {
 		let t = n.getValue(o);
 		if (!t) throw Error(`Secret '${o}' is not available for file '${a}'`);
-		let s = ew(r, a);
+		let s = nw(r, a);
 		e.mkdirSync(i.dirname(s), { recursive: !0 }), e.writeFileSync(s, t.encoding === "base64" ? Buffer.from(t.value, "base64") : t.value, { mode: 384 }), e.chmodSync(s, 384);
 	}
 }
-async function ow(t) {
+async function cw(t) {
 	let { workerId: n, jobId: r, stepContext: i, executionContext: a, driver: o, queue: s } = t, { step: c } = i, l = c.id, u = c.name, d;
 	try {
 		d = o.execute(i);
@@ -22259,11 +22365,11 @@ async function ow(t) {
 			logFilePath: ""
 		};
 	}
-	LC.add(d);
+	RC.add(d);
 	let f = !1, p = setInterval(async () => {
 		await s.isCancelled(r) && (console.log(`[${n}] 🛑 Job #${r} was cancelled! Halting execution.`), f = !0, clearInterval(p), await d.cancel());
 	}, 3e3), m = await d.done;
-	if (clearInterval(p), LC.delete(d), d.logFilePath && e.existsSync(d.logFilePath)) try {
+	if (clearInterval(p), RC.delete(d), d.logFilePath && e.existsSync(d.logFilePath)) try {
 		let e = await o.readLog(d.logFilePath);
 		await s.saveStepLog(r, l, e);
 	} catch (e) {
@@ -22290,7 +22396,7 @@ async function ow(t) {
 		}
 	};
 }
-function sw(e, t, n) {
+function lw(e, t, n) {
 	for (let r = t; r < e.length; r++) {
 		let t = e[r], i = t.id || `step-${r}`;
 		n[r] = {
@@ -22304,7 +22410,7 @@ function sw(e, t, n) {
 		};
 	}
 }
-function cw(e, t, n, r, i, a, o) {
+function uw(e, t, n, r, i, a, o) {
 	return {
 		jobId: String(e.id),
 		parentId: String(e.parentId || ""),
@@ -22325,7 +22431,7 @@ function cw(e, t, n, r, i, a, o) {
 }
 //#endregion
 //#region src/scheduler.ts
-function lw(e, t, n, r) {
+function dw(e, t, n, r) {
 	return e.split(",").some((e) => {
 		let [i, a] = e.split("/"), o = a ? Number(a) : 1;
 		if (!Number.isInteger(o) || o < 1) return !1;
@@ -22333,7 +22439,7 @@ function lw(e, t, n, r) {
 		return Number.isInteger(l) && Number.isInteger(u) && t >= l && t <= u && (t - l) % o === 0;
 	});
 }
-function uw(e, t, n = "UTC") {
+function fw(e, t, n = "UTC") {
 	let r = e.trim().split(/\s+/);
 	if (r.length !== 5) return !1;
 	let i = new Intl.DateTimeFormat("en-US", {
@@ -22355,16 +22461,16 @@ function uw(e, t, n = "UTC") {
 		"Thu",
 		"Fri",
 		"Sat"
-	].indexOf(i.weekday), o = lw(r[2], Number(i.day), 1, 31), s = lw(r[4].replace(/7/g, "0"), a, 0, 6);
-	return lw(r[0], Number(i.minute), 0, 59) && lw(r[1], Number(i.hour), 0, 23) && lw(r[3], Number(i.month), 1, 12) && (r[2] === "*" || r[4] === "*" ? o && s : o || s);
+	].indexOf(i.weekday), o = dw(r[2], Number(i.day), 1, 31), s = dw(r[4].replace(/7/g, "0"), a, 0, 6);
+	return dw(r[0], Number(i.minute), 0, 59) && dw(r[1], Number(i.hour), 0, 23) && dw(r[3], Number(i.month), 1, 12) && (r[2] === "*" || r[4] === "*" ? o && s : o || s);
 }
-function dw(e) {
+function pw(e) {
 	if (!e) return 0;
 	let t = e.match(/^([+-]?)(\d+)(m|h)$/);
 	if (!t) throw Error(`Invalid solar offset: ${e}`);
 	return (t[1] === "-" ? -1 : 1) * Number(t[2]) * (t[3] === "h" ? 36e5 : 6e4);
 }
-function fw(e, t) {
+function mw(e, t) {
 	let n = t.latitude, r = t.longitude, i = Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), e.getUTCDate()), a = Math.floor((i - Date.UTC(e.getUTCFullYear(), 0, 0)) / 864e5), o = r / 15, s = a + ((t.event === "sunrise" ? 6 : 18) - o) / 24, c = .9856 * s - 3.289, l = c + 1.916 * Math.sin(c * Math.PI / 180) + .02 * Math.sin(2 * c * Math.PI / 180) + 282.634;
 	l = (l + 360) % 360;
 	let u = Math.atan(.91764 * Math.tan(l * Math.PI / 180)) * 180 / Math.PI;
@@ -22372,9 +22478,9 @@ function fw(e, t) {
 	let d = .39782 * Math.sin(l * Math.PI / 180), f = Math.cos(Math.asin(d)), p = (Math.cos(90.833 * Math.PI / 180) - d * Math.sin(n * Math.PI / 180)) / (f * Math.cos(n * Math.PI / 180));
 	if (p > 1 || p < -1) return null;
 	let m = (t.event === "sunrise" ? 360 - Math.acos(p) * 180 / Math.PI : Math.acos(p) * 180 / Math.PI) / 15;
-	return m = (m + u - .06571 * s - 6.622 - o + 24) % 24, new Date(i + m * 36e5 + dw(t.offset));
+	return m = (m + u - .06571 * s - 6.622 - o + 24) % 24, new Date(i + m * 36e5 + pw(t.offset));
 }
-var pw = class {
+var hw = class {
 	queue;
 	workflows;
 	config;
@@ -22391,9 +22497,9 @@ var pw = class {
 	async tick(e = /* @__PURE__ */ new Date()) {
 		let t = /* @__PURE__ */ new Date(Math.floor(e.getTime() / 6e4) * 6e4);
 		for (let { definition: e, revision: n } of await this.workflows.published()) {
-			for (let [r, i] of (e.schedule || []).entries()) uw(i.cron, t, i.timezone || "UTC") && await this.enqueue(e, n, i, `cron-${r}`, t);
+			for (let [r, i] of (e.schedule || []).entries()) fw(i.cron, t, i.timezone || "UTC") && await this.enqueue(e, n, i, `cron-${r}`, t);
 			for (let [r, i] of (e.solar || []).entries()) {
-				let a = fw(t, i);
+				let a = mw(t, i);
 				a && Math.floor(a.getTime() / 6e4) === t.getTime() / 6e4 && await this.enqueue(e, n, i, `solar-${r}`, t);
 			}
 		}
@@ -22419,7 +22525,7 @@ var pw = class {
 };
 //#endregion
 //#region src/logger.ts
-function mw() {
+function gw() {
 	for (let e of [
 		"log",
 		"info",
@@ -22434,8 +22540,8 @@ function mw() {
 }
 //#endregion
 //#region src/index.ts
-async function hw() {
-	mw();
+async function _w() {
+	gw();
 	let { config: e, command: t } = await ge();
 	e || process.exit(1);
 	let n = new Se(), r = new xe(process.env.WORKER_NAME || "cli");
@@ -22450,13 +22556,13 @@ async function hw() {
 			});
 			break;
 		case "start-workers":
-			console.log(`⚙️ Starting worker scheduler with ${e.workers} concurrent slot(s)...`), await r.init(), VC(e.workers, r, n, e);
+			console.log(`⚙️ Starting worker scheduler with ${e.workers} concurrent slot(s)...`), await r.init(), HC(e.workers, r, n, e);
 			break;
 		case "start-scheduler": {
 			console.log("Starting workflow scheduler..."), await r.init();
 			let t = new SC();
 			await t.init();
-			let n = new pw(r, t, e);
+			let n = new hw(r, t, e);
 			n.start();
 			let i = () => {
 				n.stop(), process.exit(0);
@@ -22467,6 +22573,6 @@ async function hw() {
 		default: console.error(`❌ Unknown command: '${t}'`), he(), process.exit(1);
 	}
 }
-hw().catch(console.error);
+_w().catch(console.error);
 //#endregion
 export { MC as GitHubStatusPlugin, FC as createWorkflowPlugin, PC as registerWorkflowPlugin };

package/dist/queue.d.ts

@@ -54,6 +54,14 @@ export declare class QueueManager {
         path: string;
         content: string;
     }>>;
+    updateWorkerPresence(worker: {
+        id: string;
+        version: string;
+        tags: string[];
+        concurrency: number;
+        activeJobs: number;
+    }): Promise<void>;
+    listWorkerPresence(): Promise<any[]>;
     saveAiRequest(jobId: string | number, workflowUrl: string, request: unknown): Promise<void>;
 }
 //# sourceMappingURL=queue.d.ts.map

package/dist/queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../src/queue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvF,qBAAa,YAAY;IAGX,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;gBAE7B,QAAQ,EAAE,MAAM;IAE9B,IAAI;IAKV;;;OAGG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,GAAE,MAAM,EAAO,EAAE,cAAc,CAAC,EAAE,MAAM;IAoBrI;;;OAGG;IACG,YAAY,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IA6BlE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS;IAInD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;IAapF,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAiCnF;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrD,cAAc;IAMd,YAAY;IAgDlB;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlD;;OAEG;IACG,QAAQ,CAAC,KAAK,SAAK,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAkCrH;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxF,2DAA2D;IACrD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAUnE,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7H,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAK/G,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlG"}
+{"version":3,"file":"queue.d.ts","sourceRoot":"","sources":["../src/queue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAIvF,qBAAa,YAAY;IAGX,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;gBAE7B,QAAQ,EAAE,MAAM;IAE9B,IAAI;IAKV;;;OAGG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,GAAE,MAAM,EAAO,EAAE,cAAc,CAAC,EAAE,MAAM;IAoBrI;;;OAGG;IACG,YAAY,CAAC,UAAU,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IA6BlE,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS;IAInD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;IAapF,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAiCnF;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrD,cAAc;IAMd,YAAY;IAyDlB;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlD;;OAEG;IACG,QAAQ,CAAC,KAAK,SAAK,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAkCrH;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxF,2DAA2D;IACrD,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5F;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAUnE,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7H,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAK/G,oBAAoB,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrI,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAapC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlG"}

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IAoP3B;;OAEG;YACW,aAAa;YA0Bb,cAAc;YASd,aAAa;YAiBb,iBAAiB;YA0BjB,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA8C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,oBAAoB;YA4BpB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAOxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAazC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IAkQ3B;;OAEG;YACW,aAAa;YA0Bb,cAAc;YASd,aAAa;YAiBb,iBAAiB;YA0BjB,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA8C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAQR,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAUN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAclB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,oBAAoB;YA4BpB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}

package/dist/settings-ui.d.ts

@@ -1,2 +1,2 @@
-export declare function generateSettingsHtml(page?: 'tokens' | 'notifications'): string;
+export declare function generateSettingsHtml(page?: 'tokens' | 'notifications' | 'workers'): string;
 //# sourceMappingURL=settings-ui.d.ts.map

package/dist/settings-ui.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings-ui.d.ts","sourceRoot":"","sources":["../src/settings-ui.ts"],"names":[],"mappings":"AAEA,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,QAAQ,GAAG,eAA0B,GAAG,MAAM,CAExF"}
+{"version":3,"file":"settings-ui.d.ts","sourceRoot":"","sources":["../src/settings-ui.ts"],"names":[],"mappings":"AAEA,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,QAAQ,GAAG,eAAe,GAAG,SAAoB,GAAG,MAAM,CAEpG"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const RUNNER_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,cAAc,QAAsB,CAAC"}

package/dist/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAGL,YAAY,EAOZ,WAAW,EAKZ,MAAM,YAAY,CAAC;AASpB,eAAO,MAAM,aAAa;;CAEzB,CAAC;AAMF;;GAEG;AACH,wBAAsB,qBAAqB,kBAK1C;AAED,wBAAgB,qBAAqB,SAIpC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,mBAK1G;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,YAAY,iBA0ErB;AAmGD;;GAEG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,WAAW,iBAmI9C"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAGL,YAAY,EAOZ,WAAW,EAKZ,MAAM,YAAY,CAAC;AAUpB,eAAO,MAAM,aAAa;;CAEzB,CAAC;AAMF;;GAEG;AACH,wBAAsB,qBAAqB,kBAK1C;AAED,wBAAgB,qBAAqB,SAIpC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,mBAK1G;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,YAAY,iBA8ErB;AAqHD;;GAEG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,WAAW,iBAmI9C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-cli/on",
-  "version": "1.58.0",
+  "version": "1.59.1",
   "description": "CLI entry point for the on plugin ecosystem.",
   "type": "module",
   "packageManager": "pnpm@12.3.4",