@cloud-cli/on 1.63.1 → 1.63.3

package/dist/oidc.d.ts

@@ -12,7 +12,6 @@ export interface OidcUser {
 }
 export declare class OidcClient {
     private providerClientPromise?;
-    private readonly states;
     private readonly sessions;
     constructor(config: OidcConfig);
     private readonly config;
@@ -37,5 +36,7 @@ export declare class OidcClient {
     private cookieToken;
     private providerClient;
     private prune;
+    private signState;
+    private parseState;
 }
 //# sourceMappingURL=oidc.d.ts.map

package/dist/oidc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAoBD,qBAAa,UAAU;IACrB,OAAO,CAAC,qBAAqB,CAAC,CAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;gBAE3C,MAAM,EAAE,UAAU;IAI9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC,IAAI,OAAO,YAEV;IAED,IAAI,QAAQ,WAEX;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYhE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAgCpH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS;IAKtE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAMpD,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IAI/C,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;;;;IAMhD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAUvD,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,EAAE,WAAW,CAAC,EAAE,MAAM;IAUlH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IAM5C,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;YAOL,cAAc;IAa5B,OAAO,CAAC,KAAK;CAKd"}
+{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../src/oidc.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAoBD,qBAAa,UAAU;IACrB,OAAO,CAAC,qBAAqB,CAAC,CAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;gBAE3C,MAAM,EAAE,UAAU;IAI9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC,IAAI,OAAO,YAEV;IAED,IAAI,QAAQ,WAEX;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUhE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IA+BpH,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS;IAKtE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAMpD,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IAI/C,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;;;;IAMhD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAUvD,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,EAAE,WAAW,CAAC,EAAE,MAAM;IAUlH,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS;IAM5C,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,WAAW;YAOL,cAAc;IAa5B,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;CAUnB"}

package/dist/on.js

@@ -104,7 +104,7 @@ async function m() {
 	let [{ QueueManager: r }, { SecretStore: i }, { WebhookServer: a }, { startWorkers: o }, { WorkflowRepository: s }, { WorkflowScheduler: c }, { OidcUserRepository: l }] = await Promise.all([
 		import("./queue-DhXXzxm3.js"),
 		import("./secrets-DhkqmawU.js"),
-		import("./server-DwdQsiqw.js"),
+		import("./server-DRZC99_t.js"),
 		import("./worker-BwNyfSpp.js"),
 		import("./workflows-DQQIVH7c.js"),
 		import("./scheduler-2d1UPcxM.js"),

package/dist/{server-DwdQsiqw.js → server-DRZC99_t.js}

@@ -12095,7 +12095,6 @@ function qh(e, t = "", n) {
 //#region src/oidc.ts
 var Jh = 6e5, Yh = 288e5, Xh = "runner_oidc_session", Zh = class {
 	providerClientPromise;
-	states = /* @__PURE__ */ new Map();
 	sessions = /* @__PURE__ */ new Map();
 	constructor(e) {
 		this.config = {
@@ -12111,18 +12110,16 @@ var Jh = 6e5, Yh = 288e5, Xh = "runner_oidc_session", Zh = class {
 		return this.config.clientId;
 	}
 	async loginUrl(e, t) {
-		let n = await this.providerClient(), r = Qh(32), i = n.createAuthorizationRequest({ redirectUri: e }), a = i.codeVerifier;
-		this.states.set(r, {
-			verifier: a,
+		let n = (await this.providerClient()).createAuthorizationRequest({ redirectUri: e }), r = n.codeVerifier, i = this.signState({
+			verifier: r,
 			returnTo: t,
 			expiresAt: Date.now() + Jh
-		}), this.prune();
-		let o = new URL(i.url);
-		return o.searchParams.set("state", r), o.toString();
+		}), a = new URL(n.url);
+		return a.searchParams.set("state", i), a.toString();
 	}
 	async completeLogin(e, t, n) {
-		let r = this.states.get(t);
-		if (this.states.delete(t), !r || r.expiresAt <= Date.now()) throw Error("OIDC login state is invalid or expired");
+		let r = this.parseState(t);
+		if (!r || r.expiresAt <= Date.now()) throw Error("OIDC login state is invalid or expired");
 		let i = await this.providerClient(), a = await i.exchangeCode({
 			code: e,
 			codeVerifier: r.verifier,
@@ -12210,9 +12207,24 @@ var Jh = 6e5, Yh = 288e5, Xh = "runner_oidc_session", Zh = class {
 	}
 	prune() {
 		let e = Date.now();
-		for (let [t, n] of this.states) n.expiresAt <= e && this.states.delete(t);
 		for (let [t, n] of this.sessions) n.expiresAt <= e && this.sessions.delete(t);
 	}
+	signState(e) {
+		let t = Buffer.from(JSON.stringify({
+			...e,
+			nonce: Qh(16)
+		})).toString("base64url");
+		return `${t}.${p.createHmac("sha256", this.config.clientSecret).update(t).digest("base64url")}`;
+	}
+	parseState(e) {
+		let [t, n] = e.split(".");
+		if (!t || !n) throw Error("OIDC login state is invalid or expired");
+		let r = p.createHmac("sha256", this.config.clientSecret).update(t).digest("base64url");
+		if (!(n.length === r.length && p.timingSafeEqual(Buffer.from(n), Buffer.from(r)))) throw Error("OIDC login state is invalid or expired");
+		let i = JSON.parse(Buffer.from(t, "base64url").toString("utf8"));
+		if (!i.verifier || !i.returnTo || i.expiresAt <= Date.now()) throw Error("OIDC login state is invalid or expired");
+		return i;
+	}
 };
 function Qh(e) {
 	return p.randomBytes(e).toString("base64url");
@@ -12222,7 +12234,7 @@ function $h(e) {
 }
 //#endregion
 //#region src/api-client.mjs?raw
-var eg = "let token = sessionStorage.getItem('runner-api-token') || '';\nlet expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;\n\nconst rawFetch = window.fetch.bind(window);\n\nasync function loadToken() {\n  if (token && expiresAt > Date.now() + 30_000) return token;\n  const response = await rawFetch('/api/auth/token', { headers: { accept: 'application/json' } });\n  if (!response.ok) return '';\n  const data = await response.json();\n  token = data.access_token || '';\n  expiresAt = Number(data.expires_at || 0);\n  return token;\n}\n\nexport async function apiFetch(input, init = {}) {\n  const target = new URL(input, window.location.href);\n  if (target.origin !== window.location.origin || (!target.pathname.startsWith('/api/') && !target.pathname.startsWith('/restart/'))) {\n    return rawFetch(input, init);\n  }\n  const headers = new Headers(init.headers);\n  const accessToken = await loadToken();\n  if (accessToken) headers.set('authorization', `Bearer ${accessToken}`);\n  return rawFetch(input, { ...init, headers });\n}\n\nexport function setApiToken(value) {\n  token = value || '';\n  expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;\n  if (token) sessionStorage.setItem('runner-api-token', token);\n  else sessionStorage.removeItem('runner-api-token');\n}\n", tg = "import { defineProp, onInit, ref } from '@li3/web';\n\nexport default function () {\n  const authConfigured = ref(false);\n  const authenticated = ref(false);\n  const userName = ref('');\n  const userPhoto = ref('');\n  onInit(async () => {\n    try {\n      const response = await fetch('/api/auth/session');\n      if (!response.ok) return;\n      const session = await response.json();\n      authConfigured.value = session.configured;\n      authenticated.value = session.authenticated;\n      userName.value = session.user?.name || session.user?.email || '';\n      userPhoto.value = session.user?.photo || '';\n    } catch {}\n  });\n  return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label'), authConfigured, authenticated, userName, userPhoto };\n}\n", ng = "import { getElement, load, onDestroy, onInit, templateRef } from '@li3/web';\n\nexport default function () {\n  const outlet = templateRef('outlet');\n  let navigating = false;\n  const route = () => {\n    const url = new URL(window.location.href);\n    const path = url.pathname;\n    if (path === '/' || path === '/runs') return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n    if (path.match(/^\\/runs\\/\\d+$/)) return { component: 'page-run', url: `/pages/run.html?jobId=${path.split('/').pop()}`, page: 'run' };\n    if (path === '/help') return { component: 'page-help', url: '/pages/help.html', page: 'help' };\n    if (path === '/settings/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n    if (path === '/settings/secrets') return { component: 'page-secrets', url: '/pages/workflows.html?page=secrets', page: 'secrets' };\n    if (path === '/settings/tokens') return { component: 'page-settings', url: '/pages/settings.html?page=tokens', page: 'tokens' };\n    if (path === '/settings/notifications') return { component: 'page-settings', url: '/pages/settings.html?page=notifications', page: 'notifications' };\n    if (path === '/settings/workers') return { component: 'page-settings', url: '/pages/settings.html?page=workers', page: 'workers' };\n    if (path === '/settings' || path === '/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n    const editor = path.match(/^\\/settings\\/workflows\\/(new|[a-z0-9-]+)$/);\n    if (editor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${editor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n    const legacyEditor = path.match(/^\\/workflows\\/(new|[a-z0-9-]+)$/);\n    if (legacyEditor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${legacyEditor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n    return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n  };\n  const navigate = async (replace = false) => {\n    if (navigating) return;\n    navigating = true;\n    try {\n      const current = route();\n      document.body.dataset.page = current.page;\n      await load(current.url);\n      outlet.value.replaceChildren(document.createElement(current.component));\n      if (replace) history.replaceState(null, '', window.location.href);\n    } catch (error) {\n      outlet.value.innerHTML = `<main class=\"mx-auto max-w-4xl p-8\"><h1 class=\"text-xl font-semibold text-white\">Unable to load page</h1><p class=\"mt-2 text-sm text-rose-300\">${String(error.message || error)}</p></main>`;\n    } finally {\n      navigating = false;\n    }\n  };\n  const handleClick = (event) => {\n    const anchor = event.target.closest?.('a');\n    if (!anchor || anchor.target || anchor.hasAttribute('download')) return;\n    const target = new URL(anchor.href, window.location.href);\n    if (target.origin !== window.location.origin || !target.pathname.startsWith('/') || target.pathname.startsWith('/auth/')) return;\n    if (target.pathname === '/settings' || target.pathname.startsWith('/settings/') || target.pathname === '/workflows' || target.pathname.startsWith('/workflows/')) return;\n    if (target.pathname.startsWith('/api/') || target.pathname.startsWith('/webhooks/')) return;\n    if (target.pathname === window.location.pathname && target.hash) return;\n    event.preventDefault();\n    history.pushState(null, '', `${target.pathname}${target.search}${target.hash}`);\n    void navigate();\n  };\n  const element = getElement();\n  onInit(() => {\n    element.addEventListener('click', handleClick);\n    window.addEventListener('popstate', navigate);\n    void navigate(true);\n  });\n  onDestroy(() => {\n    element.removeEventListener('click', handleClick);\n    window.removeEventListener('popstate', navigate);\n  });\n  return {};\n}\n", rg = "import { onDestroy, onInit, ref } from '@li3/web';\nimport { apiFetch } from '@app/api-client.mjs';\n\nexport default function setup() {\n  const jobs = ref([]), refreshError = ref(false), hasMore = ref(false), loadingMore = ref(false);\n  const filter = ref(''), activeFilter = ref(''), pushConfigured = ref(false);\n  const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n  const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n  const notificationNotice = ref('');\n  let refreshTimer, eventSource, refreshing = false, refreshPending = false, searchInProgress = false, refreshGeneration = 0;\n  const upper = (value) => String(value || '').toUpperCase();\n  const terminalStatuses = new Set(['success', 'failed', 'cancelled']);\n  const notifyCompletedJob = async (job) => {\n    if (!notificationsEnabled.value || pushConfigured.value || !['success', 'failed'].includes(job.status)) return;\n    try {\n      const registration = await navigator.serviceWorker.ready;\n      await registration.showNotification(job.status === 'success' ? `Job #${job.id} succeeded` : `Job #${job.id} failed`, { body: `${job.workflowId} finished with status ${job.status}.`, icon: '/app-icon.svg', badge: '/app-icon.svg', tag: `runner-job-${job.id}`, renotify: true, data: { url: `/runs/${job.id}` } });\n    } catch (error) { console.error('Unable to show job notification', error); }\n  };\n  const urlBase64ToUint8Array = (value) => { const padding = '='.repeat((4 - (value.length % 4)) % 4); const raw = atob((value + padding).replace(/-/g, '+').replace(/_/g, '/')); return Uint8Array.from([...raw].map((character) => character.charCodeAt(0))); };\n  const enablePushNotifications = async () => {\n    try {\n      if (!notificationsSupported.value) return;\n      const response = await apiFetch('/api/push/public-key', { headers: { accept: 'application/json' } });\n      if (!response.ok) return;\n      const { publicKey } = await response.json(); pushConfigured.value = true;\n      const registration = await navigator.serviceWorker.ready;\n      const subscription = (await registration.pushManager.getSubscription()) || await registration.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: urlBase64ToUint8Array(publicKey) });\n      const saved = await apiFetch('/api/push/subscriptions', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(subscription) });\n      if (!saved.ok) throw new Error(`Push subscription failed: ${saved.status}`);\n    } catch (error) { console.error('Unable to enable background notifications', error); }\n  };\n  const disablePushNotifications = async () => {\n    try { const subscription = await (await navigator.serviceWorker.ready).pushManager.getSubscription(); if (!subscription) return; await apiFetch('/api/push/subscriptions', { method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ endpoint: subscription.endpoint }) }); await subscription.unsubscribe(); }\n    catch (error) { console.error('Unable to disable background notifications', error); }\n  };\n  const toggleNotifications = async () => {\n    if (notificationsEnabled.value) { notificationsEnabled.value = false; localStorage.removeItem('runner-notifications'); await disablePushNotifications(); notificationNotice.value = 'Job notifications are paused on this device.'; return; }\n    if (Notification.permission === 'denied') { notificationNotice.value = 'Notifications are blocked. Allow them in this site’s Android browser settings.'; return; }\n    notificationsEnabled.value = (await Notification.requestPermission()) === 'granted';\n    if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); await enablePushNotifications(); notificationNotice.value = 'Notifications enabled. Background delivery is available when server push is configured.'; } else notificationNotice.value = 'Notification permission was not granted.';\n  };\n  const refreshJobs = async (isSearch = false) => {\n    if (searchInProgress && !isSearch) return; if (refreshing && !isSearch) { refreshPending = true; return; }\n    refreshing = true; const generation = refreshGeneration;\n    try {\n      const activeIds = jobs.value.filter((job) => !terminalStatuses.has(job.status)).map((job) => Number(job.id));\n      const knownIds = jobs.value.map((job) => Number(job.id));\n      const afterId = activeIds.length ? Math.max(0, Math.min(...activeIds) - 1) : knownIds.length ? Math.max(...knownIds) : null;\n      const filterQuery = activeFilter.value ? `&filter=${encodeURIComponent(activeFilter.value)}` : '';\n      const url = afterId === null ? `/api/jobs?limit=100${filterQuery}` : `/api/jobs?afterId=${afterId}&limit=100${filterQuery}`;\n      const response = await apiFetch(url, { headers: { accept: 'application/json' } }); if (!response.ok) throw new Error(`Dashboard refresh failed: ${response.status}`);\n      const data = await response.json(); if (generation !== refreshGeneration) return; hasMore.value = data.hasMore;\n      const previousStatuses = new Map(jobs.value.map((job) => [job.id, job.status])); const merged = new Map(jobs.value.map((job) => [job.id, job]));\n      for (const job of data.jobs) { const previousStatus = previousStatuses.get(job.id); merged.set(job.id, job); if (previousStatus && !terminalStatuses.has(previousStatus) && terminalStatuses.has(job.status)) void notifyCompletedJob(job); }\n      jobs.value = Array.from(merged.values()).sort((a, b) => Number(b.id) - Number(a.id)); refreshError.value = false;\n    } catch (error) { console.error(error); refreshError.value = true; } finally { refreshing = false; if (refreshPending && !searchInProgress) { refreshPending = false; void refreshJobs(); } }\n  };\n  const loadMore = async () => { if (loadingMore.value || !hasMore.value || !jobs.value.length) return; loadingMore.value = true; try { const beforeId = Math.min(...jobs.value.map((job) => Number(job.id))); const filterQuery = activeFilter.value ? `&filter=${encodeURIComponent(activeFilter.value)}` : ''; const response = await apiFetch(`/api/jobs?beforeId=${beforeId}${filterQuery}`, { headers: { accept: 'application/json' } }); if (!response.ok) throw new Error(`Loading older jobs failed: ${response.status}`); const data = await response.json(); const merged = new Map(jobs.value.map((job) => [job.id, job])); for (const job of data.jobs) merged.set(job.id, job); jobs.value = Array.from(merged.values()).sort((a, b) => Number(b.id) - Number(a.id)); hasMore.value = data.hasMore; } catch (error) { console.error(error); refreshError.value = true; } finally { loadingMore.value = false; } };\n  const updateSearchUrl = (value) => { const params = new URLSearchParams(window.location.search); if (value) params.set('search', value); else params.delete('search'); const query = params.toString(); history.pushState(null, '', `${window.location.pathname}${query ? `?${query}` : ''}`); };\n  const applyFilter = async () => { searchInProgress = true; refreshGeneration++; activeFilter.value = filter.value.trim(); updateSearchUrl(activeFilter.value); jobs.value = []; hasMore.value = false; try { await refreshJobs(true); } finally { searchInProgress = false; refreshPending = false; } };\n  const clearFilter = async () => { searchInProgress = true; refreshGeneration++; filter.value = ''; activeFilter.value = ''; updateSearchUrl(''); jobs.value = []; hasMore.value = false; try { await refreshJobs(true); } finally { searchInProgress = false; refreshPending = false; } };\n  const setFilter = (event) => { filter.value = event.target.value; };\n  onInit(() => { const initialSearch = new URLSearchParams(window.location.search).get('search')?.trim() || ''; filter.value = initialSearch; activeFilter.value = initialSearch; if (notificationsSupported.value) navigator.serviceWorker.register('/service-worker.js').then(() => { if (notificationsEnabled.value) void enablePushNotifications(); }).catch((error) => console.error('Service worker registration failed', error)); eventSource = new EventSource('/api/events'); eventSource.addEventListener('jobs.available', refreshJobs); eventSource.addEventListener('jobs.changed', refreshJobs); eventSource.onerror = () => { refreshError.value = true; }; void refreshJobs(); refreshTimer = setInterval(refreshJobs, 60000); });\n  onDestroy(() => { eventSource?.close(); clearInterval(refreshTimer); });\n  return { jobs, refreshError, hasMore, loadingMore, filter, activeFilter, pushConfigured, setFilter, loadMore, applyFilter, clearFilter, upper, notificationsSupported, notificationsEnabled, notificationNotice, toggleNotifications };\n}\n", ig = "\n         import { computed, onDestroy, onInit, ref } from '@li3/web';\n          import { AnsiUp } from 'ansi_up';\n          import { marked } from 'marked';\n           import { apiFetch } from '@app/api-client.mjs';\n\n        export default function setup() {\n          const jobId = window.location.pathname.split('/').filter(Boolean).pop() || '';\n          const report = ref({ jobId });\n          const previousRuns = ref([]);\n          const aiMessages = ref([]);\n          const aiStepId = ref('');\n          const aiQuestion = ref('');\n          const aiError = ref('');\n          const aiLoading = ref(false);\n          const manualRestartOpen = ref(false);\n          const manualRestartLoading = ref(false);\n          const manualInputs = ref([]);\n          let previousRunsLoaded = false;\n          const now = ref(Date.now());\n          const ansiUp = new AnsiUp();\n          ansiUp.use_classes = false;\n          let eventSource;\n          let refreshTimer;\n          let clockTimer;\n          let refreshing = false;\n          let refreshPending = false;\n          const cancelling = ref(false);\n\n          const active = computed(() => ['pending', 'running'].includes(report.value.status));\n          const inputsJson = computed(() => JSON.stringify(report.value.inputs || {}, null, 2));\n          const originalInputsJson = computed(() => JSON.stringify(report.value.inputs || {}, null, 2));\n          const timing = computed(() => {\n            if (report.value.status === 'pending') return 'Waiting for a worker';\n            if (report.value.status === 'running') {\n              return `Running for ${Math.max(0, now.value - Date.parse(report.value.startedAt))}ms`;\n            }\n            return `Finished in ${report.value.durationMs}ms`;\n          });\n\n          const upper = (value) => String(value || '').toUpperCase();\n           const artifactUrl = (path) => `/api/runs/${report.value.jobId}/artifacts/${encodeURIComponent(path)}`;\n           const downloadArtifact = async (event, path) => {\n             event.preventDefault();\n              const response = await apiFetch(artifactUrl(path));\n             if (!response.ok) return;\n             const link = document.createElement('a');\n             link.href = URL.createObjectURL(await response.blob());\n             link.download = path.split('/').pop() || 'artifact';\n             link.click();\n             URL.revokeObjectURL(link.href);\n           };\n          const loadPreviousRuns = async () => {\n            if (previousRunsLoaded || !report.value.parentId) return;\n            const lineage = [];\n            const visited = new Set();\n            let parentId = report.value.parentId;\n            while (parentId && !visited.has(String(parentId)) && lineage.length < 50) {\n              visited.add(String(parentId));\n               const response = await apiFetch(`/api/runs/${parentId}`, { headers: { accept: 'application/json' } });\n              if (!response.ok) throw new Error(`Previous run request failed: ${response.status}`);\n              const parent = await response.json();\n              lineage.push({ id: parent.jobId, status: parent.status, startedAt: parent.startedAt });\n              parentId = parent.parentId;\n            }\n            previousRuns.value = lineage;\n            previousRunsLoaded = true;\n          };\n          const stepLog = (step) => {\n            if (step.status === 'skipped') return '';\n            if (step.status === 'running')\n              return '<span class=\"text-indigo-400\">Step is running. Logs will appear after it finishes.</span>';\n            if (step.status === 'pending') return '<span class=\"text-gray-500\">Waiting to run.</span>';\n            if (step.logContent) return ansiUp.ansi_to_html(step.logContent);\n            return '<span class=\"text-gray-500\">(No terminal log output recorded for this step)</span>';\n          };\n          const sanitizeAiHtml = (html) => {\n            const parsed = new DOMParser().parseFromString(html, 'text/html');\n            parsed.querySelectorAll('script,style,iframe,object,embed,form').forEach((node) => node.remove());\n            parsed.querySelectorAll('*').forEach((element) => {\n              [...element.attributes].forEach((attribute) => {\n                if (attribute.name.toLowerCase().startsWith('on')) element.removeAttribute(attribute.name);\n                if (['href', 'src'].includes(attribute.name.toLowerCase()) && /^(javascript|data):/i.test(attribute.value)) element.removeAttribute(attribute.name);\n              });\n            });\n            return parsed.body.innerHTML;\n          };\n          const renderAiMarkdown = (content) => sanitizeAiHtml(marked.parse(content));\n          const askAi = async (step, event) => {\n            event.stopPropagation();\n            aiStepId.value = step.id;\n            aiMessages.value = [];\n            aiQuestion.value = '';\n            await requestAiHelp(step.id, 'Please explain why this step failed and what I should do next.');\n          };\n          const requestAiHelp = async (stepId, question) => {\n            aiLoading.value = true;\n            aiError.value = '';\n            try {\n               const response = await apiFetch(`/api/runs/${report.value.jobId}/ai-help`, {\n                method: 'POST',\n                headers: { accept: 'application/json', 'content-type': 'application/json' },\n                body: JSON.stringify({ stepId, question, conversation: aiMessages.value }),\n              });\n              if (!response.ok) {\n                const data = await response.json().catch(() => ({}));\n                throw new Error(data.error || `AI help failed: ${response.status}`);\n              }\n              aiMessages.value = [...aiMessages.value, { role: 'user', content: question }, { role: 'assistant', content: '' }];\n              const reader = response.body.getReader();\n              const decoder = new TextDecoder();\n              let buffer = '';\n              while (true) {\n                const chunk = await reader.read();\n                if (chunk.done) break;\n                buffer += decoder.decode(chunk.value, { stream: true });\n                const events = buffer.split('\\n\\n');\n                buffer = events.pop() || '';\n                for (const event of events) {\n                  const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                  if (!line) continue;\n                  const data = JSON.parse(line.slice(6));\n                  if (data.delta) {\n                    const messages = [...aiMessages.value];\n                    messages[messages.length - 1] = { ...messages[messages.length - 1], content: messages[messages.length - 1].content + data.delta };\n                    aiMessages.value = messages;\n                  }\n                  if (data.error) throw new Error(data.error);\n                }\n              }\n              const messages = [...aiMessages.value];\n              const answer = messages.at(-1);\n              if (answer) messages[messages.length - 1] = { ...answer, html: renderAiMarkdown(answer.content) };\n              aiMessages.value = messages;\n            } catch (error) {\n              aiError.value = error.message;\n            } finally {\n              aiLoading.value = false;\n            }\n          };\n          const askFollowup = async () => {\n            const question = aiQuestion.value.trim();\n            if (!question || !aiStepId.value) return;\n            aiQuestion.value = '';\n            await requestAiHelp(aiStepId.value, question);\n          };\n          const restartJob = async () => {\n              const response = await apiFetch(`/restart/${report.value.jobId}`, {\n               method: 'POST',\n               headers: { 'content-type': 'application/json' },\n               body: JSON.stringify({ inputs: report.value.inputs || {} }),\n             });\n            if (response.ok) {\n              const { id } = await response.json();\n              location.href = `/runs/${id}`;\n            }\n          };\n          const openManualRestart = (event) => {\n            event.preventDefault();\n            event.stopPropagation();\n            manualInputs.value = [{ key: '', value: '' }];\n            manualRestartOpen.value = true;\n          };\n          const closeManualRestart = () => { manualRestartOpen.value = false; };\n          const addManualInput = () => { manualInputs.value = [...manualInputs.value, { key: '', value: '' }]; };\n          const removeManualInput = (entry) => { manualInputs.value = manualInputs.value.filter((item) => item !== entry); };\n          const setManualKey = (entry, event) => { entry.key = event.target.value; manualInputs.value = [...manualInputs.value]; };\n          const setManualValue = (entry, event) => { entry.value = event.target.value; manualInputs.value = [...manualInputs.value]; };\n          const restartWithInputs = async () => {\n            const inputs = Object.fromEntries(manualInputs.value.filter((entry) => entry.key.trim()).map((entry) => [entry.key.trim(), entry.value]));\n            manualRestartLoading.value = true;\n            try {\n               const response = await apiFetch(`/restart/${report.value.jobId}`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ inputs }) });\n              if (!response.ok) throw new Error(`Restart failed: ${response.status}`);\n              const { id } = await response.json();\n              location.href = `/runs/${id}`;\n            } catch (error) {\n              aiError.value = error.message;\n            } finally {\n              manualRestartLoading.value = false;\n            }\n          };\n          const cancelJob = async () => {\n            if (cancelling.value || report.value.status !== 'running') return;\n            cancelling.value = true;\n            try {\n               const response = await apiFetch(`/api/jobs/${report.value.jobId}/cancel`, { method: 'POST' });\n              if (!response.ok) throw new Error(`Cancel failed: ${response.status}`);\n              await refreshRun();\n            } catch (error) {\n              console.error(error);\n            } finally {\n              cancelling.value = false;\n            }\n          };\n          const refreshRun = async () => {\n            if (refreshing) {\n              refreshPending = true;\n              return;\n            }\n            refreshing = true;\n\n            try {\n               const response = await apiFetch(`/api/runs/${jobId}`, {\n                headers: { accept: 'application/json' },\n              });\n              if (!response.ok) throw new Error(`Run refresh failed: ${response.status}`);\n              const previousStatus = report.value.status;\n              const nextReport = await response.json();\n              report.value = nextReport;\n              document.title = `Run #${nextReport.jobId} - ${nextReport.workflowName}`;\n              void loadPreviousRuns();\n              if (\n                ['pending', 'running'].includes(previousStatus) &&\n                ['success', 'failed'].includes(nextReport.status) &&\n                'Notification' in window &&\n                'serviceWorker' in navigator &&\n                Notification.permission === 'granted' &&\n                localStorage.getItem('runner-notifications') === 'enabled'\n              ) {\n                const registration = await navigator.serviceWorker.ready;\n                await registration.showNotification(\n                  nextReport.status === 'success'\n                    ? `Job #${nextReport.jobId} succeeded`\n                    : `Job #${nextReport.jobId} failed`,\n                  {\n                    body: `${nextReport.workflowName} finished with status ${nextReport.status}.`,\n                    icon: '/app-icon.svg',\n                    badge: '/app-icon.svg',\n                    tag: `runner-job-${nextReport.jobId}`,\n                    renotify: true,\n                    data: { url: `/runs/${nextReport.jobId}` },\n                  },\n                );\n              }\n            } catch (error) {\n              console.error(error);\n            } finally {\n              refreshing = false;\n              if (refreshPending) {\n                refreshPending = false;\n                void refreshRun();\n              }\n            }\n          };\n          const handleJobChange = (event) => {\n            const data = JSON.parse(event.data || '{}');\n            if (!data.jobId || String(data.jobId) === String(report.value.jobId)) void refreshRun();\n          };\n\n          onInit(() => {\n            void refreshRun();\n            if ('serviceWorker' in navigator) {\n              navigator.serviceWorker.register('/service-worker.js').catch((error) => {\n                console.error('Service worker registration failed', error);\n              });\n            }\n            eventSource = new EventSource('/api/events');\n            eventSource.addEventListener('jobs.changed', handleJobChange);\n            refreshTimer = setInterval(() => {\n              if (active.value) void refreshRun();\n            }, 60000);\n            clockTimer = setInterval(() => {\n              now.value = Date.now();\n            }, 1000);\n          });\n          onDestroy(() => {\n            eventSource?.close();\n            clearInterval(refreshTimer);\n            clearInterval(clockTimer);\n          });\n\n           return { report, previousRuns, manualRestartOpen, manualRestartLoading, manualInputs, aiMessages, aiStepId, aiQuestion, aiError, aiLoading, inputsJson, originalInputsJson, timing, upper, artifactUrl, downloadArtifact, stepLog, askAi, askFollowup, restartJob, openManualRestart, closeManualRestart, addManualInput, removeManualInput, setManualKey, setManualValue, restartWithInputs, cancelJob, cancelling };\n        }\n      \n", ag = "\n         import { onInit, ref } from '@li3/web';\n         import { apiFetch, setApiToken } from '@app/api-client.mjs';\n        export default function () {\n          const page = document.body.dataset.page;\n           const keys = ref([]);\n           const workers = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n             { name: 'runs:dispatch', label: 'Dispatch runs', selected: false },\n             { name: 'workers:read', label: 'Read workers', selected: false },\n             { name: 'secrets:read', label: 'Read secret names', selected: false },\n             { name: 'secrets:write', label: 'Manage secrets', selected: false },\n          ]);\n           const api = async (url, options = {}) => { const response = await apiFetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n           const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n           const loadWorkers = async () => { workers.value = (await api('/api/workers')).workers; };\n           const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; setApiToken(result.token); keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); if (page === 'workers') loadWorkers().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, workers, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      \n", og = "\n         import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n         import { apiFetch } from '@app/api-client.mjs';\n         import { diffLines } from 'diff';\n\n        export default function () {\n          const page = document.body.dataset.page;\n           const params = new URLSearchParams(window.location.search);\n           const initialId = params.get('id') || '';\n           const initialRevision = params.get('revision') ? Number(params.get('revision')) : null;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionDiffHtml = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n           const aiDialogOpen = ref(false);\n           const aiRequest = ref('');\n           const aiLoading = ref(false);\n           const aiError = ref('');\n           const aiSuggestion = ref('');\n           const aiDiffHtml = ref('');\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n             const response = await apiFetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n           const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n             });\n           const runNow = () =>\n             run(async () => {\n               const id = workflowId.value.trim() || selectedId.value;\n               if (!id) throw new Error('Save the workflow before running it.');\n               if (source.value !== savedSource.value) throw new Error('Save the latest draft before running it.');\n               const result = await api(`/api/workflows/${id}/run`, {\n                 method: 'POST',\n                 body: JSON.stringify({}),\n               });\n               showNotice(`Queued ${result.jobs.length} job${result.jobs.length === 1 ? '' : 's'} from revision ${result.revision}.`);\n             });\n           const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const escapeRevisionHtml = (value) => value.replace(/[&<>\"']/g, (character) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' })[character] || '');\n           const renderRevisionDiff = (previousSource, currentSource) => {\n             if (previousSource === null) return `<span class=\"text-emerald-300\">+ ${escapeRevisionHtml(currentSource)}</span>\\n`;\n             return diffLines(previousSource, currentSource).map((part) => {\n               const className = part.added ? 'text-emerald-300 bg-emerald-500/10' : part.removed ? 'text-rose-300 bg-rose-500/10' : 'text-gray-300';\n               const prefix = part.added ? '+ ' : part.removed ? '- ' : '  ';\n               return part.value.split('\\n').filter((line, index, lines) => index < lines.length - 1 || line).map((line) => `<span class=\"block ${className}\">${prefix}${escapeRevisionHtml(line)}</span>`).join('');\n             }).join('');\n           };\n           const openRevisionDialog = async () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionDiffHtml.value = '';\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n             await loadRevisionDiff(revision.value);\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const loadRevisionDiff = async (number) => {\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const current = await api(`/api/workflows/${selectedId.value}?revision=${number}`);\n               const previous = number > 1 ? await api(`/api/workflows/${selectedId.value}?revision=${number - 1}`) : null;\n               revisionDiffHtml.value = renderRevisionDiff(previous?.sourceYaml ?? null, current.sourceYaml);\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1 || target > revision.value) return;\n             revisionNumber.value = target;\n             await loadRevisionDiff(target);\n           };\n           const openAiHelp = () => {\n             aiRequest.value = '';\n             aiError.value = '';\n             aiSuggestion.value = '';\n             aiDiffHtml.value = '';\n             aiDialogOpen.value = true;\n           };\n           const closeAiHelp = () => { if (!aiLoading.value) aiDialogOpen.value = false; };\n           const requestAiHelp = async () => {\n             if (!aiRequest.value.trim() || aiLoading.value) return;\n             aiLoading.value = true;\n             aiError.value = '';\n             aiDiffHtml.value = '';\n             try {\n              const response = await apiFetch('/api/ai/workflow-help', {\n                 method: 'POST',\n                 headers: { accept: 'text/event-stream', 'content-type': 'application/json' },\n                 body: JSON.stringify({ sourceYaml: source.value, request: aiRequest.value }),\n               });\n               if (!response.ok) { const error = await response.json().catch(() => ({})); throw new Error(error.error || `AI help failed: ${response.status}`); }\n               const reader = response.body.getReader();\n               const decoder = new TextDecoder();\n               let buffer = '';\n               let suggestion = '';\n               while (true) {\n                 const chunk = await reader.read();\n                 if (chunk.done) break;\n                 buffer += decoder.decode(chunk.value, { stream: true });\n                 const events = buffer.split('\\n\\n');\n                 buffer = events.pop() || '';\n                 for (const event of events) {\n                   const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                   if (!line) continue;\n                   const data = JSON.parse(line.slice(6));\n                   if (data.error) throw new Error(data.error);\n                   if (data.delta) suggestion += data.delta;\n                 }\n               }\n               suggestion = suggestion.replace(/^```(?:yaml|yml)?\\s*/i, '').replace(/\\s*```$/i, '').trim();\n               if (!source.value.trim()) {\n                 source.value = suggestion;\n                 aiDialogOpen.value = false;\n                 validate();\n               } else {\n                 aiSuggestion.value = suggestion;\n                 aiDiffHtml.value = renderRevisionDiff(source.value, suggestion);\n               }\n             } catch (error) {\n               aiError.value = error.message;\n             } finally {\n               aiLoading.value = false;\n             }\n           };\n           const acceptAiSuggestion = () => { source.value = aiSuggestion.value; aiDialogOpen.value = false; validate(); };\n           const rejectAiSuggestion = () => { aiSuggestion.value = ''; aiDiffHtml.value = ''; };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionDiffHtml,\n             revisionError,\n             revisionLoading,\n             aiDialogOpen,\n             aiRequest,\n             aiLoading,\n             aiError,\n             aiDiffHtml,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n             publish,\n             runNow,\n             remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n             openAiHelp,\n             closeAiHelp,\n             requestAiHelp,\n             acceptAiSuggestion,\n             rejectAiSuggestion,\n          };\n        }\n      \n", sg = 50, cg = 500, lg = class e {
+var eg = "let token = sessionStorage.getItem('runner-api-token') || '';\nlet expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;\n\nconst rawFetch = window.fetch.bind(window);\n\nasync function loadToken() {\n  if (token && expiresAt > Date.now() + 30_000) return token;\n  const hadToken = Boolean(token);\n  const response = await rawFetch('/api/auth/token', { headers: { accept: 'application/json' } });\n  if (!response.ok) {\n    if (hadToken) {\n      token = '';\n      expiresAt = 0;\n      sessionStorage.removeItem('runner-api-token');\n      const returnTo = `${window.location.pathname}${window.location.search}${window.location.hash}`;\n      window.location.assign(`/auth/login?url=${encodeURIComponent(returnTo)}`);\n    }\n    return '';\n  }\n  const data = await response.json();\n  token = data.access_token || '';\n  expiresAt = Number(data.expires_at || 0);\n  return token;\n}\n\nexport async function apiFetch(input, init = {}) {\n  const target = new URL(input, window.location.href);\n  if (target.origin !== window.location.origin || (!target.pathname.startsWith('/api/') && !target.pathname.startsWith('/restart/'))) {\n    return rawFetch(input, init);\n  }\n  const headers = new Headers(init.headers);\n  const accessToken = await loadToken();\n  if (accessToken) headers.set('authorization', `Bearer ${accessToken}`);\n  return rawFetch(input, { ...init, headers });\n}\n\nexport function setApiToken(value) {\n  token = value || '';\n  expiresAt = token ? Number.MAX_SAFE_INTEGER : 0;\n  if (token) sessionStorage.setItem('runner-api-token', token);\n  else sessionStorage.removeItem('runner-api-token');\n}\n", tg = "import { defineProp, onInit, ref } from '@li3/web';\n\nexport default function () {\n  const authConfigured = ref(false);\n  const authenticated = ref(false);\n  const userName = ref('');\n  const userPhoto = ref('');\n  onInit(async () => {\n    try {\n      const response = await fetch('/api/auth/session');\n      if (!response.ok) return;\n      const session = await response.json();\n      authConfigured.value = session.configured;\n      authenticated.value = session.authenticated;\n      userName.value = session.user?.name || session.user?.email || '';\n      userPhoto.value = session.user?.photo || '';\n    } catch {}\n  });\n  return { title: defineProp('title'), subtitle: defineProp('subtitle'), back: defineProp('back'), backLabel: defineProp('back-label'), authConfigured, authenticated, userName, userPhoto };\n}\n", ng = "import { getElement, load, onDestroy, onInit, templateRef } from '@li3/web';\n\nexport default function () {\n  const outlet = templateRef('outlet');\n  let navigating = false;\n  const route = () => {\n    const url = new URL(window.location.href);\n    const path = url.pathname;\n    if (path === '/' || path === '/runs') return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n    if (path.match(/^\\/runs\\/\\d+$/)) return { component: 'page-run', url: `/pages/run.html?jobId=${path.split('/').pop()}`, page: 'run' };\n    if (path === '/help') return { component: 'page-help', url: '/pages/help.html', page: 'help' };\n    if (path === '/settings/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n    if (path === '/settings/secrets') return { component: 'page-secrets', url: '/pages/workflows.html?page=secrets', page: 'secrets' };\n    if (path === '/settings/tokens') return { component: 'page-settings', url: '/pages/settings.html?page=tokens', page: 'tokens' };\n    if (path === '/settings/notifications') return { component: 'page-settings', url: '/pages/settings.html?page=notifications', page: 'notifications' };\n    if (path === '/settings/workers') return { component: 'page-settings', url: '/pages/settings.html?page=workers', page: 'workers' };\n    if (path === '/settings' || path === '/workflows') return { component: 'page-workflows', url: '/pages/workflows.html?page=workflows', page: 'workflows' };\n    const editor = path.match(/^\\/settings\\/workflows\\/(new|[a-z0-9-]+)$/);\n    if (editor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${editor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n    const legacyEditor = path.match(/^\\/workflows\\/(new|[a-z0-9-]+)$/);\n    if (legacyEditor) return { component: 'page-workflow-editor', url: `/pages/workflows.html?page=editor&id=${legacyEditor[1]}${url.searchParams.get('revision') ? `&revision=${url.searchParams.get('revision')}` : ''}`, page: 'editor' };\n    return { component: 'page-dashboard', url: '/pages/dashboard.html', page: 'dashboard' };\n  };\n  const navigate = async (replace = false) => {\n    if (navigating) return;\n    navigating = true;\n    try {\n      const current = route();\n      document.body.dataset.page = current.page;\n      await load(current.url);\n      outlet.value.replaceChildren(document.createElement(current.component));\n      if (replace) history.replaceState(null, '', window.location.href);\n    } catch (error) {\n      outlet.value.innerHTML = `<main class=\"mx-auto max-w-4xl p-8\"><h1 class=\"text-xl font-semibold text-white\">Unable to load page</h1><p class=\"mt-2 text-sm text-rose-300\">${String(error.message || error)}</p></main>`;\n    } finally {\n      navigating = false;\n    }\n  };\n  const handleClick = (event) => {\n    const anchor = event.target.closest?.('a');\n    if (!anchor || anchor.target || anchor.hasAttribute('download')) return;\n    const target = new URL(anchor.href, window.location.href);\n    if (target.origin !== window.location.origin || !target.pathname.startsWith('/') || target.pathname.startsWith('/auth/')) return;\n    if (target.pathname === '/settings' || target.pathname.startsWith('/settings/') || target.pathname === '/workflows' || target.pathname.startsWith('/workflows/')) return;\n    if (target.pathname.startsWith('/api/') || target.pathname.startsWith('/webhooks/')) return;\n    if (target.pathname === window.location.pathname && target.hash) return;\n    event.preventDefault();\n    history.pushState(null, '', `${target.pathname}${target.search}${target.hash}`);\n    void navigate();\n  };\n  const element = getElement();\n  onInit(() => {\n    element.addEventListener('click', handleClick);\n    window.addEventListener('popstate', navigate);\n    void navigate(true);\n  });\n  onDestroy(() => {\n    element.removeEventListener('click', handleClick);\n    window.removeEventListener('popstate', navigate);\n  });\n  return {};\n}\n", rg = "import { onDestroy, onInit, ref } from '@li3/web';\nimport { apiFetch } from '@app/api-client.mjs';\n\nexport default function setup() {\n  const jobs = ref([]), refreshError = ref(false), hasMore = ref(false), loadingMore = ref(false);\n  const filter = ref(''), activeFilter = ref(''), pushConfigured = ref(false);\n  const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n  const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n  const notificationNotice = ref('');\n  let refreshTimer, eventSource, refreshing = false, refreshPending = false, searchInProgress = false, refreshGeneration = 0;\n  const upper = (value) => String(value || '').toUpperCase();\n  const terminalStatuses = new Set(['success', 'failed', 'cancelled']);\n  const notifyCompletedJob = async (job) => {\n    if (!notificationsEnabled.value || pushConfigured.value || !['success', 'failed'].includes(job.status)) return;\n    try {\n      const registration = await navigator.serviceWorker.ready;\n      await registration.showNotification(job.status === 'success' ? `Job #${job.id} succeeded` : `Job #${job.id} failed`, { body: `${job.workflowId} finished with status ${job.status}.`, icon: '/app-icon.svg', badge: '/app-icon.svg', tag: `runner-job-${job.id}`, renotify: true, data: { url: `/runs/${job.id}` } });\n    } catch (error) { console.error('Unable to show job notification', error); }\n  };\n  const urlBase64ToUint8Array = (value) => { const padding = '='.repeat((4 - (value.length % 4)) % 4); const raw = atob((value + padding).replace(/-/g, '+').replace(/_/g, '/')); return Uint8Array.from([...raw].map((character) => character.charCodeAt(0))); };\n  const enablePushNotifications = async () => {\n    try {\n      if (!notificationsSupported.value) return;\n      const response = await apiFetch('/api/push/public-key', { headers: { accept: 'application/json' } });\n      if (!response.ok) return;\n      const { publicKey } = await response.json(); pushConfigured.value = true;\n      const registration = await navigator.serviceWorker.ready;\n      const subscription = (await registration.pushManager.getSubscription()) || await registration.pushManager.subscribe({ userVisibleOnly: true, applicationServerKey: urlBase64ToUint8Array(publicKey) });\n      const saved = await apiFetch('/api/push/subscriptions', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(subscription) });\n      if (!saved.ok) throw new Error(`Push subscription failed: ${saved.status}`);\n    } catch (error) { console.error('Unable to enable background notifications', error); }\n  };\n  const disablePushNotifications = async () => {\n    try { const subscription = await (await navigator.serviceWorker.ready).pushManager.getSubscription(); if (!subscription) return; await apiFetch('/api/push/subscriptions', { method: 'DELETE', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ endpoint: subscription.endpoint }) }); await subscription.unsubscribe(); }\n    catch (error) { console.error('Unable to disable background notifications', error); }\n  };\n  const toggleNotifications = async () => {\n    if (notificationsEnabled.value) { notificationsEnabled.value = false; localStorage.removeItem('runner-notifications'); await disablePushNotifications(); notificationNotice.value = 'Job notifications are paused on this device.'; return; }\n    if (Notification.permission === 'denied') { notificationNotice.value = 'Notifications are blocked. Allow them in this site’s Android browser settings.'; return; }\n    notificationsEnabled.value = (await Notification.requestPermission()) === 'granted';\n    if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); await enablePushNotifications(); notificationNotice.value = 'Notifications enabled. Background delivery is available when server push is configured.'; } else notificationNotice.value = 'Notification permission was not granted.';\n  };\n  const refreshJobs = async (isSearch = false) => {\n    if (searchInProgress && !isSearch) return; if (refreshing && !isSearch) { refreshPending = true; return; }\n    refreshing = true; const generation = refreshGeneration;\n    try {\n      const activeIds = jobs.value.filter((job) => !terminalStatuses.has(job.status)).map((job) => Number(job.id));\n      const knownIds = jobs.value.map((job) => Number(job.id));\n      const afterId = activeIds.length ? Math.max(0, Math.min(...activeIds) - 1) : knownIds.length ? Math.max(...knownIds) : null;\n      const filterQuery = activeFilter.value ? `&filter=${encodeURIComponent(activeFilter.value)}` : '';\n      const url = afterId === null ? `/api/jobs?limit=100${filterQuery}` : `/api/jobs?afterId=${afterId}&limit=100${filterQuery}`;\n      const response = await apiFetch(url, { headers: { accept: 'application/json' } }); if (!response.ok) throw new Error(`Dashboard refresh failed: ${response.status}`);\n      const data = await response.json(); if (generation !== refreshGeneration) return; hasMore.value = data.hasMore;\n      const previousStatuses = new Map(jobs.value.map((job) => [job.id, job.status])); const merged = new Map(jobs.value.map((job) => [job.id, job]));\n      for (const job of data.jobs) { const previousStatus = previousStatuses.get(job.id); merged.set(job.id, job); if (previousStatus && !terminalStatuses.has(previousStatus) && terminalStatuses.has(job.status)) void notifyCompletedJob(job); }\n      jobs.value = Array.from(merged.values()).sort((a, b) => Number(b.id) - Number(a.id)); refreshError.value = false;\n    } catch (error) { console.error(error); refreshError.value = true; } finally { refreshing = false; if (refreshPending && !searchInProgress) { refreshPending = false; void refreshJobs(); } }\n  };\n  const loadMore = async () => { if (loadingMore.value || !hasMore.value || !jobs.value.length) return; loadingMore.value = true; try { const beforeId = Math.min(...jobs.value.map((job) => Number(job.id))); const filterQuery = activeFilter.value ? `&filter=${encodeURIComponent(activeFilter.value)}` : ''; const response = await apiFetch(`/api/jobs?beforeId=${beforeId}${filterQuery}`, { headers: { accept: 'application/json' } }); if (!response.ok) throw new Error(`Loading older jobs failed: ${response.status}`); const data = await response.json(); const merged = new Map(jobs.value.map((job) => [job.id, job])); for (const job of data.jobs) merged.set(job.id, job); jobs.value = Array.from(merged.values()).sort((a, b) => Number(b.id) - Number(a.id)); hasMore.value = data.hasMore; } catch (error) { console.error(error); refreshError.value = true; } finally { loadingMore.value = false; } };\n  const updateSearchUrl = (value) => { const params = new URLSearchParams(window.location.search); if (value) params.set('search', value); else params.delete('search'); const query = params.toString(); history.pushState(null, '', `${window.location.pathname}${query ? `?${query}` : ''}`); };\n  const applyFilter = async () => { searchInProgress = true; refreshGeneration++; activeFilter.value = filter.value.trim(); updateSearchUrl(activeFilter.value); jobs.value = []; hasMore.value = false; try { await refreshJobs(true); } finally { searchInProgress = false; refreshPending = false; } };\n  const clearFilter = async () => { searchInProgress = true; refreshGeneration++; filter.value = ''; activeFilter.value = ''; updateSearchUrl(''); jobs.value = []; hasMore.value = false; try { await refreshJobs(true); } finally { searchInProgress = false; refreshPending = false; } };\n  const setFilter = (event) => { filter.value = event.target.value; };\n  onInit(() => { const initialSearch = new URLSearchParams(window.location.search).get('search')?.trim() || ''; filter.value = initialSearch; activeFilter.value = initialSearch; if (notificationsSupported.value) navigator.serviceWorker.register('/service-worker.js').then(() => { if (notificationsEnabled.value) void enablePushNotifications(); }).catch((error) => console.error('Service worker registration failed', error)); eventSource = new EventSource('/api/events'); eventSource.addEventListener('jobs.available', refreshJobs); eventSource.addEventListener('jobs.changed', refreshJobs); eventSource.onerror = () => { refreshError.value = true; }; void refreshJobs(); refreshTimer = setInterval(refreshJobs, 60000); });\n  onDestroy(() => { eventSource?.close(); clearInterval(refreshTimer); });\n  return { jobs, refreshError, hasMore, loadingMore, filter, activeFilter, pushConfigured, setFilter, loadMore, applyFilter, clearFilter, upper, notificationsSupported, notificationsEnabled, notificationNotice, toggleNotifications };\n}\n", ig = "\n         import { computed, onDestroy, onInit, ref } from '@li3/web';\n          import { AnsiUp } from 'ansi_up';\n          import { marked } from 'marked';\n           import { apiFetch } from '@app/api-client.mjs';\n\n        export default function setup() {\n          const jobId = window.location.pathname.split('/').filter(Boolean).pop() || '';\n          const report = ref({ jobId });\n          const previousRuns = ref([]);\n          const aiMessages = ref([]);\n          const aiStepId = ref('');\n          const aiQuestion = ref('');\n          const aiError = ref('');\n          const aiLoading = ref(false);\n          const manualRestartOpen = ref(false);\n          const manualRestartLoading = ref(false);\n          const manualInputs = ref([]);\n          let previousRunsLoaded = false;\n          const now = ref(Date.now());\n          const ansiUp = new AnsiUp();\n          ansiUp.use_classes = false;\n          let eventSource;\n          let refreshTimer;\n          let clockTimer;\n          let refreshing = false;\n          let refreshPending = false;\n          const cancelling = ref(false);\n\n          const active = computed(() => ['pending', 'running'].includes(report.value.status));\n          const inputsJson = computed(() => JSON.stringify(report.value.inputs || {}, null, 2));\n          const originalInputsJson = computed(() => JSON.stringify(report.value.inputs || {}, null, 2));\n          const timing = computed(() => {\n            if (report.value.status === 'pending') return 'Waiting for a worker';\n            if (report.value.status === 'running') {\n              return `Running for ${Math.max(0, now.value - Date.parse(report.value.startedAt))}ms`;\n            }\n            return `Finished in ${report.value.durationMs}ms`;\n          });\n\n          const upper = (value) => String(value || '').toUpperCase();\n           const artifactUrl = (path) => `/api/runs/${report.value.jobId}/artifacts/${encodeURIComponent(path)}`;\n           const downloadArtifact = async (event, path) => {\n             event.preventDefault();\n              const response = await apiFetch(artifactUrl(path));\n             if (!response.ok) return;\n             const link = document.createElement('a');\n             link.href = URL.createObjectURL(await response.blob());\n             link.download = path.split('/').pop() || 'artifact';\n             link.click();\n             URL.revokeObjectURL(link.href);\n           };\n          const loadPreviousRuns = async () => {\n            if (previousRunsLoaded || !report.value.parentId) return;\n            const lineage = [];\n            const visited = new Set();\n            let parentId = report.value.parentId;\n            while (parentId && !visited.has(String(parentId)) && lineage.length < 50) {\n              visited.add(String(parentId));\n               const response = await apiFetch(`/api/runs/${parentId}`, { headers: { accept: 'application/json' } });\n              if (!response.ok) throw new Error(`Previous run request failed: ${response.status}`);\n              const parent = await response.json();\n              lineage.push({ id: parent.jobId, status: parent.status, startedAt: parent.startedAt });\n              parentId = parent.parentId;\n            }\n            previousRuns.value = lineage;\n            previousRunsLoaded = true;\n          };\n          const stepLog = (step) => {\n            if (step.status === 'skipped') return '';\n            if (step.status === 'running')\n              return '<span class=\"text-indigo-400\">Step is running. Logs will appear after it finishes.</span>';\n            if (step.status === 'pending') return '<span class=\"text-gray-500\">Waiting to run.</span>';\n            if (step.logContent) return ansiUp.ansi_to_html(step.logContent);\n            return '<span class=\"text-gray-500\">(No terminal log output recorded for this step)</span>';\n          };\n          const sanitizeAiHtml = (html) => {\n            const parsed = new DOMParser().parseFromString(html, 'text/html');\n            parsed.querySelectorAll('script,style,iframe,object,embed,form').forEach((node) => node.remove());\n            parsed.querySelectorAll('*').forEach((element) => {\n              [...element.attributes].forEach((attribute) => {\n                if (attribute.name.toLowerCase().startsWith('on')) element.removeAttribute(attribute.name);\n                if (['href', 'src'].includes(attribute.name.toLowerCase()) && /^(javascript|data):/i.test(attribute.value)) element.removeAttribute(attribute.name);\n              });\n            });\n            return parsed.body.innerHTML;\n          };\n          const renderAiMarkdown = (content) => sanitizeAiHtml(marked.parse(content));\n          const askAi = async (step, event) => {\n            event.stopPropagation();\n            aiStepId.value = step.id;\n            aiMessages.value = [];\n            aiQuestion.value = '';\n            await requestAiHelp(step.id, 'Please explain why this step failed and what I should do next.');\n          };\n          const requestAiHelp = async (stepId, question) => {\n            aiLoading.value = true;\n            aiError.value = '';\n            try {\n               const response = await apiFetch(`/api/runs/${report.value.jobId}/ai-help`, {\n                method: 'POST',\n                headers: { accept: 'application/json', 'content-type': 'application/json' },\n                body: JSON.stringify({ stepId, question, conversation: aiMessages.value }),\n              });\n              if (!response.ok) {\n                const data = await response.json().catch(() => ({}));\n                throw new Error(data.error || `AI help failed: ${response.status}`);\n              }\n              aiMessages.value = [...aiMessages.value, { role: 'user', content: question }, { role: 'assistant', content: '' }];\n              const reader = response.body.getReader();\n              const decoder = new TextDecoder();\n              let buffer = '';\n              while (true) {\n                const chunk = await reader.read();\n                if (chunk.done) break;\n                buffer += decoder.decode(chunk.value, { stream: true });\n                const events = buffer.split('\\n\\n');\n                buffer = events.pop() || '';\n                for (const event of events) {\n                  const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                  if (!line) continue;\n                  const data = JSON.parse(line.slice(6));\n                  if (data.delta) {\n                    const messages = [...aiMessages.value];\n                    messages[messages.length - 1] = { ...messages[messages.length - 1], content: messages[messages.length - 1].content + data.delta };\n                    aiMessages.value = messages;\n                  }\n                  if (data.error) throw new Error(data.error);\n                }\n              }\n              const messages = [...aiMessages.value];\n              const answer = messages.at(-1);\n              if (answer) messages[messages.length - 1] = { ...answer, html: renderAiMarkdown(answer.content) };\n              aiMessages.value = messages;\n            } catch (error) {\n              aiError.value = error.message;\n            } finally {\n              aiLoading.value = false;\n            }\n          };\n          const askFollowup = async () => {\n            const question = aiQuestion.value.trim();\n            if (!question || !aiStepId.value) return;\n            aiQuestion.value = '';\n            await requestAiHelp(aiStepId.value, question);\n          };\n          const restartJob = async () => {\n              const response = await apiFetch(`/restart/${report.value.jobId}`, {\n               method: 'POST',\n               headers: { 'content-type': 'application/json' },\n               body: JSON.stringify({ inputs: report.value.inputs || {} }),\n             });\n            if (response.ok) {\n              const { id } = await response.json();\n              location.href = `/runs/${id}`;\n            }\n          };\n          const openManualRestart = (event) => {\n            event.preventDefault();\n            event.stopPropagation();\n            manualInputs.value = [{ key: '', value: '' }];\n            manualRestartOpen.value = true;\n          };\n          const closeManualRestart = () => { manualRestartOpen.value = false; };\n          const addManualInput = () => { manualInputs.value = [...manualInputs.value, { key: '', value: '' }]; };\n          const removeManualInput = (entry) => { manualInputs.value = manualInputs.value.filter((item) => item !== entry); };\n          const setManualKey = (entry, event) => { entry.key = event.target.value; manualInputs.value = [...manualInputs.value]; };\n          const setManualValue = (entry, event) => { entry.value = event.target.value; manualInputs.value = [...manualInputs.value]; };\n          const restartWithInputs = async () => {\n            const inputs = Object.fromEntries(manualInputs.value.filter((entry) => entry.key.trim()).map((entry) => [entry.key.trim(), entry.value]));\n            manualRestartLoading.value = true;\n            try {\n               const response = await apiFetch(`/restart/${report.value.jobId}`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ inputs }) });\n              if (!response.ok) throw new Error(`Restart failed: ${response.status}`);\n              const { id } = await response.json();\n              location.href = `/runs/${id}`;\n            } catch (error) {\n              aiError.value = error.message;\n            } finally {\n              manualRestartLoading.value = false;\n            }\n          };\n          const cancelJob = async () => {\n            if (cancelling.value || report.value.status !== 'running') return;\n            cancelling.value = true;\n            try {\n               const response = await apiFetch(`/api/jobs/${report.value.jobId}/cancel`, { method: 'POST' });\n              if (!response.ok) throw new Error(`Cancel failed: ${response.status}`);\n              await refreshRun();\n            } catch (error) {\n              console.error(error);\n            } finally {\n              cancelling.value = false;\n            }\n          };\n          const refreshRun = async () => {\n            if (refreshing) {\n              refreshPending = true;\n              return;\n            }\n            refreshing = true;\n\n            try {\n               const response = await apiFetch(`/api/runs/${jobId}`, {\n                headers: { accept: 'application/json' },\n              });\n              if (!response.ok) throw new Error(`Run refresh failed: ${response.status}`);\n              const previousStatus = report.value.status;\n              const nextReport = await response.json();\n              report.value = nextReport;\n              document.title = `Run #${nextReport.jobId} - ${nextReport.workflowName}`;\n              void loadPreviousRuns();\n              if (\n                ['pending', 'running'].includes(previousStatus) &&\n                ['success', 'failed'].includes(nextReport.status) &&\n                'Notification' in window &&\n                'serviceWorker' in navigator &&\n                Notification.permission === 'granted' &&\n                localStorage.getItem('runner-notifications') === 'enabled'\n              ) {\n                const registration = await navigator.serviceWorker.ready;\n                await registration.showNotification(\n                  nextReport.status === 'success'\n                    ? `Job #${nextReport.jobId} succeeded`\n                    : `Job #${nextReport.jobId} failed`,\n                  {\n                    body: `${nextReport.workflowName} finished with status ${nextReport.status}.`,\n                    icon: '/app-icon.svg',\n                    badge: '/app-icon.svg',\n                    tag: `runner-job-${nextReport.jobId}`,\n                    renotify: true,\n                    data: { url: `/runs/${nextReport.jobId}` },\n                  },\n                );\n              }\n            } catch (error) {\n              console.error(error);\n            } finally {\n              refreshing = false;\n              if (refreshPending) {\n                refreshPending = false;\n                void refreshRun();\n              }\n            }\n          };\n          const handleJobChange = (event) => {\n            const data = JSON.parse(event.data || '{}');\n            if (!data.jobId || String(data.jobId) === String(report.value.jobId)) void refreshRun();\n          };\n\n          onInit(() => {\n            void refreshRun();\n            if ('serviceWorker' in navigator) {\n              navigator.serviceWorker.register('/service-worker.js').catch((error) => {\n                console.error('Service worker registration failed', error);\n              });\n            }\n            eventSource = new EventSource('/api/events');\n            eventSource.addEventListener('jobs.changed', handleJobChange);\n            refreshTimer = setInterval(() => {\n              if (active.value) void refreshRun();\n            }, 60000);\n            clockTimer = setInterval(() => {\n              now.value = Date.now();\n            }, 1000);\n          });\n          onDestroy(() => {\n            eventSource?.close();\n            clearInterval(refreshTimer);\n            clearInterval(clockTimer);\n          });\n\n           return { report, previousRuns, manualRestartOpen, manualRestartLoading, manualInputs, aiMessages, aiStepId, aiQuestion, aiError, aiLoading, inputsJson, originalInputsJson, timing, upper, artifactUrl, downloadArtifact, stepLog, askAi, askFollowup, restartJob, openManualRestart, closeManualRestart, addManualInput, removeManualInput, setManualKey, setManualValue, restartWithInputs, cancelJob, cancelling };\n        }\n      \n", ag = "\n         import { onInit, ref } from '@li3/web';\n         import { apiFetch, setApiToken } from '@app/api-client.mjs';\n        export default function () {\n          const page = document.body.dataset.page;\n           const keys = ref([]);\n           const workers = ref([]);\n          const keyName = ref('');\n          const newToken = ref('');\n          const error = ref('');\n          const notificationsSupported = ref('Notification' in window && 'serviceWorker' in navigator);\n          const notificationsEnabled = ref(notificationsSupported.value && Notification.permission === 'granted' && localStorage.getItem('runner-notifications') === 'enabled');\n          const notificationMessage = ref('');\n          const scopeOptions = ref([\n            { name: 'workflows:read', label: 'Read workflows', selected: true },\n            { name: 'workflows:write', label: 'Modify workflows', selected: false },\n            { name: 'logs:read', label: 'Read logs', selected: false },\n            { name: 'artifacts:read', label: 'Read artifacts', selected: false },\n            { name: 'runs:control', label: 'Control runs', selected: false },\n             { name: 'runs:dispatch', label: 'Dispatch runs', selected: false },\n             { name: 'workers:read', label: 'Read workers', selected: false },\n             { name: 'secrets:read', label: 'Read secret names', selected: false },\n             { name: 'secrets:write', label: 'Manage secrets', selected: false },\n          ]);\n           const api = async (url, options = {}) => { const response = await apiFetch(url, { headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) }, ...options }); const body = await response.json().catch(() => ({})); if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`); return body; };\n           const load = async () => { keys.value = (await api('/api/api-keys')).keys; };\n           const loadWorkers = async () => { workers.value = (await api('/api/workers')).workers; };\n           const issueKey = async () => { try { error.value = ''; const result = await api('/api/api-keys', { method: 'POST', body: JSON.stringify({ name: keyName.value, scopes: scopeOptions.value.filter((scope) => scope.selected).map((scope) => scope.name) }) }); newToken.value = result.token; setApiToken(result.token); keyName.value = ''; await load(); } catch (reason) { error.value = reason.message; } };\n          const revokeKey = async (key) => { if (!confirm(`Revoke ${key.name}?`)) return; try { await api(`/api/api-keys/${key.id}`, { method: 'DELETE' }); await load(); } catch (reason) { error.value = reason.message; } };\n          const setKeyName = (event) => { keyName.value = event.target.value; };\n          const toggleScope = (scope) => { scope.selected = !scope.selected; };\n          const toggleNotifications = async () => {\n            if (notificationsEnabled.value) {\n              notificationsEnabled.value = false;\n              localStorage.removeItem('runner-notifications');\n              notificationMessage.value = 'Notifications disabled on this device.';\n              return;\n            }\n            if (!notificationsSupported.value) { notificationMessage.value = 'Notifications are not supported by this browser.'; return; }\n            const permission = await Notification.requestPermission();\n            notificationsEnabled.value = permission === 'granted';\n            if (notificationsEnabled.value) { localStorage.setItem('runner-notifications', 'enabled'); notificationMessage.value = 'Notifications enabled.'; }\n            else notificationMessage.value = 'Notification permission was not granted.';\n          };\n          onInit(() => { if (page === 'tokens') load().catch((reason) => { error.value = reason.message; }); if (page === 'workers') loadWorkers().catch((reason) => { error.value = reason.message; }); });\n          return { page, keys, workers, keyName, newToken, error, scopeOptions, issueKey, revokeKey, setKeyName, toggleScope, notificationsEnabled, notificationMessage, toggleNotifications };\n        }\n      \n", og = "\n         import { onDestroy, onInit, ref, templateRef } from '@li3/web';\n         import { apiFetch } from '@app/api-client.mjs';\n         import { diffLines } from 'diff';\n\n        export default function () {\n          const page = document.body.dataset.page;\n           const params = new URLSearchParams(window.location.search);\n           const initialId = params.get('id') || '';\n           const initialRevision = params.get('revision') ? Number(params.get('revision')) : null;\n          const readOnly = Boolean(initialRevision);\n          const workflows = ref([]);\n          const secrets = ref([]);\n          const source = ref('');\n          const validation = ref({ valid: true });\n           const savedSource = ref('');\n           const revision = ref(null);\n           const revisionDialogOpen = ref(false);\n           const revisionNumber = ref(0);\n           const revisionDiffHtml = ref('');\n           const revisionError = ref('');\n           const revisionLoading = ref(false);\n           const aiDialogOpen = ref(false);\n           const aiRequest = ref('');\n           const aiLoading = ref(false);\n           const aiError = ref('');\n           const aiSuggestion = ref('');\n           const aiDiffHtml = ref('');\n          const workflowId = ref('');\n          const enabled = ref(true);\n          const savedEnabled = ref(true);\n          const selectedId = ref('');\n           const secretName = ref('');\n           const secretValue = ref('');\n           const fileMode = ref(false);\n           const secretFileName = ref('');\n           const secretFileData = ref('');\n          const notice = ref('');\n          const noticeError = ref(false);\n          const busy = ref(false);\n           const secretValueInput = templateRef('secretValueInput');\n            const secretFileInput = templateRef('secretFileInput');\n           const secretForm = templateRef('secretForm');\n          const helpContent = templateRef('helpContent');\n          const helpLoaded = ref(false);\n          const helpLoading = ref(false);\n          let validationTimer;\n\n          const showNotice = (message, error = false) => {\n            notice.value = message;\n            noticeError.value = error;\n          };\n\n          const api = async (url, options = {}) => {\n             const response = await apiFetch(url, {\n              headers: { accept: 'application/json', ...(options.body ? { 'content-type': 'application/json' } : {}) },\n              ...options,\n            });\n            const body = response.status === 204 ? null : await response.json().catch(() => ({}));\n            if (!response.ok) throw new Error(body.error || `Request failed: ${response.status}`);\n            return body;\n          };\n\n          const derivedId = () =>\n            source.value\n              .match(/^\\s*(?:id:\\s*([^\\n]+)|name:\\s*([^\\n]+))/m)\n              ?.slice(1)\n              .find(Boolean)\n              ?.trim()\n              .toLowerCase()\n              .replace(/[^a-z0-9]/g, '-')\n              .replace(/(^-|-$)/g, '') || '';\n\n          const run = async (action) => {\n            if (busy.value) return;\n\n            busy.value = true;\n\n            try {\n              await action();\n            } catch (error) {\n              showNotice(error.message, true);\n            } finally {\n              busy.value = false;\n            }\n          };\n\n          const loadWorkflows = async () => {\n            workflows.value = (await api('/api/workflows')).workflows;\n          };\n\n          const loadSecrets = async () => {\n            secrets.value = (await api('/api/secrets')).secrets;\n          };\n\n          const openWorkflow = async (id) => {\n            const workflowUrl = initialRevision\n              ? `/api/workflows/${id}?revision=${initialRevision}`\n              : `/api/workflows/${id}`;\n            const workflow = await api(workflowUrl);\n            selectedId.value = workflow.id;\n            workflowId.value = workflow.id;\n            source.value = workflow.sourceYaml;\n            savedSource.value = workflow.sourceYaml;\n            enabled.value = workflow.enabled;\n             savedEnabled.value = workflow.enabled;\n             revision.value = workflow.revision || null;\n          };\n\n           const validateSource = async () => {\n             return api('/api/workflows/validate', {\n               method: 'POST',\n               body: JSON.stringify({ sourceYaml: source.value }),\n             });\n           };\n\n           const validate = (ms = 1000) => {\n             if (page !== 'editor') return;\n\n             clearTimeout(validationTimer);\n             validationTimer = setTimeout(() => {\n               validation.value = { ...validation.value, running: true, error: '' };\n               void validateSource()\n                 .then((result) => {\n                   validation.value = { ...result, running: false };\n                 })\n                 .catch((error) => {\n                   validation.value = { valid: false, running: false, error: error.message };\n                   \n                 });\n             }, ms);\n           };\n\n          const save = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || derivedId();\n              if (!id) throw new Error('Set an ID or add a workflow name first.');\n              if (\n                initialId &&\n                id === selectedId.value &&\n                source.value === savedSource.value &&\n                enabled.value === savedEnabled.value\n              ) {\n                showNotice('No changes to save.');\n                return;\n              }\n              const workflow = await api(`/api/workflows/${id}`, {\n                method: 'PUT',\n                body: JSON.stringify({ sourceYaml: source.value, enabled: enabled.value }),\n              });\n              selectedId.value = workflow.id;\n              workflowId.value = workflow.id;\n              savedSource.value = source.value;\n               savedEnabled.value = enabled.value;\n               revision.value = workflow.revision;\n              showNotice(`Saved ${workflow.id} as draft revision ${workflow.revision}.`);\n              if (!initialId) history.replaceState(null, '', `/workflows/${workflow.id}`);\n            });\n           const publish = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id) throw new Error('Save a workflow before publishing it.');\n              const workflow = await api(`/api/workflows/${id}/publish`, { method: 'POST' });\n               selectedId.value = workflow.id;\n               revision.value = workflow.revision;\n               showNotice(`Published ${workflow.id} revision ${workflow.revision}.`);\n             });\n           const runNow = () =>\n             run(async () => {\n               const id = workflowId.value.trim() || selectedId.value;\n               if (!id) throw new Error('Save the workflow before running it.');\n               if (source.value !== savedSource.value) throw new Error('Save the latest draft before running it.');\n               const result = await api(`/api/workflows/${id}/run`, {\n                 method: 'POST',\n                 body: JSON.stringify({}),\n               });\n               showNotice(`Queued ${result.jobs.length} job${result.jobs.length === 1 ? '' : 's'} from revision ${result.revision}.`);\n             });\n           const remove = () =>\n            run(async () => {\n              const id = workflowId.value.trim() || selectedId.value;\n              if (!id || !confirm(`Delete ${id} and all of its revisions?`)) return;\n              await api(`/api/workflows/${id}`, { method: 'DELETE' });\n              window.location.href = '/workflows';\n            });\n           const saveSecret = () =>\n             run(async () => {\n               const name = secretName.value.trim();\n               if (!name || (fileMode.value ? !secretFileData.value : !secretValue.value)) throw new Error(fileMode.value ? 'Choose a file first.' : 'Set a secret value first.');\n               await api(`/api/secrets/${name}`, {\n                 method: 'PUT',\n                 body: JSON.stringify(fileMode.value ? { value: secretFileData.value, encoding: 'base64', originalName: secretFileName.value } : { value: secretValue.value, encoding: 'utf8' }),\n               });\n               secretValue.value = '';\n               secretFileName.value = '';\n               secretFileData.value = '';\n               fileMode.value = false;\n               if (secretFileInput.value) secretFileInput.value.value = '';\n               if (secretForm.value) secretForm.value.open = false;\n              await loadSecrets();\n              showNotice(`Saved ${name}.`);\n            });\n           const removeSecret = (requestedName = '') =>\n             run(async () => {\n               const name = requestedName || secretName.value.trim();\n               if (!name || !confirm(`Delete ${name}?`)) return;\n               await api(`/api/secrets/${name}`, { method: 'DELETE' });\n               if (secretName.value.trim() === name) {\n                 secretName.value = '';\n                 secretValue.value = '';\n                 secretFileName.value = '';\n                 secretFileData.value = '';\n                 fileMode.value = false;\n                 if (secretFileInput.value) secretFileInput.value.value = '';\n               }\n              await loadSecrets();\n              showNotice(`Deleted ${name}.`);\n            });\n          const setSource = (value) => {\n            source.value = value;\n            validate();\n          };\n          const setWorkflowId = (event) => {\n            workflowId.value = event.target.value;\n          };\n          const setEnabled = (event) => {\n            enabled.value = event.target.checked;\n          };\n          const setSecretName = (event) => {\n            secretName.value = event.target.value;\n          };\n           const setSecretValue = (event) => {\n             secretValue.value = event.target.value;\n             fileMode.value = false;\n             if (secretValue.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             }\n           };\n           const setFileMode = (event) => {\n             fileMode.value = event.target.checked;\n             if (!fileMode.value) {\n               secretFileName.value = '';\n               secretFileData.value = '';\n               if (secretFileInput.value) secretFileInput.value.value = '';\n             } else {\n               secretValue.value = '';\n             }\n           };\n           const setSecretFile = async (event) => {\n             const file = event.target.files?.[0];\n             if (!file) return;\n             const bytes = new Uint8Array(await file.arrayBuffer());\n             let binary = '';\n             for (let index = 0; index < bytes.length; index += 0x8000) {\n               binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));\n             }\n             secretFileName.value = file.name;\n             secretFileData.value = btoa(binary);\n             secretValue.value = '';\n          };\n          const selectSecret = (name) => {\n            secretName.value = name;\n            secretValueInput.value?.focus();\n          };\n          const visitWorkflow = (id) => {\n            window.location.href = `/workflows/${id}`;\n          };\n           const loadHelp = async (event) => {\n            if (!event.target.open || helpLoaded.value || helpLoading.value || !helpContent.value) return;\n            helpLoading.value = true;\n            helpContent.value.textContent = 'Loading workflow syntax help...';\n            try {\n              const response = await fetch('/help?embed=1', { headers: { accept: 'text/html' } });\n              if (!response.ok) throw new Error(`Help request failed: ${response.status}`);\n              const html = await response.text();\n              const parsed = new DOMParser().parseFromString(html, 'text/html');\n              const sourceNodes = [\n                ...Array.from(parsed.head.querySelectorAll('style')),\n                ...Array.from(parsed.body.childNodes),\n              ];\n              const nodes = sourceNodes.map((node) => document.importNode(node, true));\n              helpContent.value.replaceChildren(...nodes);\n              helpLoaded.value = true;\n            } catch (error) {\n              helpContent.value.textContent = 'Unable to load workflow syntax help.';\n              console.error(error);\n            } finally {\n              helpLoading.value = false;\n            }\n           };\n\n           const escapeRevisionHtml = (value) => value.replace(/[&<>\"']/g, (character) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;', \"'\": '&#39;' })[character] || '');\n           const renderRevisionDiff = (previousSource, currentSource) => {\n             if (previousSource === null) return `<span class=\"text-emerald-300\">+ ${escapeRevisionHtml(currentSource)}</span>\\n`;\n             return diffLines(previousSource, currentSource).map((part) => {\n               const className = part.added ? 'text-emerald-300 bg-emerald-500/10' : part.removed ? 'text-rose-300 bg-rose-500/10' : 'text-gray-300';\n               const prefix = part.added ? '+ ' : part.removed ? '- ' : '  ';\n               return part.value.split('\\n').filter((line, index, lines) => index < lines.length - 1 || line).map((line) => `<span class=\"block ${className}\">${prefix}${escapeRevisionHtml(line)}</span>`).join('');\n             }).join('');\n           };\n           const openRevisionDialog = async () => {\n             if (!revision.value) return;\n             revisionNumber.value = revision.value;\n             revisionDiffHtml.value = '';\n             revisionError.value = '';\n             revisionDialogOpen.value = true;\n             await loadRevisionDiff(revision.value);\n           };\n           const closeRevisionDialog = () => {\n             revisionDialogOpen.value = false;\n           };\n           const loadRevisionDiff = async (number) => {\n             revisionLoading.value = true;\n             revisionError.value = '';\n             try {\n               const current = await api(`/api/workflows/${selectedId.value}?revision=${number}`);\n               const previous = number > 1 ? await api(`/api/workflows/${selectedId.value}?revision=${number - 1}`) : null;\n               revisionDiffHtml.value = renderRevisionDiff(previous?.sourceYaml ?? null, current.sourceYaml);\n             } catch (error) {\n               revisionError.value = error.message;\n             } finally {\n               revisionLoading.value = false;\n             }\n           };\n           const navigateRevision = async (offset) => {\n             if (!selectedId.value || revisionLoading.value) return;\n             const target = revisionNumber.value + offset;\n             if (target < 1 || target > revision.value) return;\n             revisionNumber.value = target;\n             await loadRevisionDiff(target);\n           };\n           const openAiHelp = () => {\n             aiRequest.value = '';\n             aiError.value = '';\n             aiSuggestion.value = '';\n             aiDiffHtml.value = '';\n             aiDialogOpen.value = true;\n           };\n           const closeAiHelp = () => { if (!aiLoading.value) aiDialogOpen.value = false; };\n           const requestAiHelp = async () => {\n             if (!aiRequest.value.trim() || aiLoading.value) return;\n             aiLoading.value = true;\n             aiError.value = '';\n             aiDiffHtml.value = '';\n             try {\n              const response = await apiFetch('/api/ai/workflow-help', {\n                 method: 'POST',\n                 headers: { accept: 'text/event-stream', 'content-type': 'application/json' },\n                 body: JSON.stringify({ sourceYaml: source.value, request: aiRequest.value }),\n               });\n               if (!response.ok) { const error = await response.json().catch(() => ({})); throw new Error(error.error || `AI help failed: ${response.status}`); }\n               const reader = response.body.getReader();\n               const decoder = new TextDecoder();\n               let buffer = '';\n               let suggestion = '';\n               while (true) {\n                 const chunk = await reader.read();\n                 if (chunk.done) break;\n                 buffer += decoder.decode(chunk.value, { stream: true });\n                 const events = buffer.split('\\n\\n');\n                 buffer = events.pop() || '';\n                 for (const event of events) {\n                   const line = event.split('\\n').find((value) => value.startsWith('data: '));\n                   if (!line) continue;\n                   const data = JSON.parse(line.slice(6));\n                   if (data.error) throw new Error(data.error);\n                   if (data.delta) suggestion += data.delta;\n                 }\n               }\n               suggestion = suggestion.replace(/^```(?:yaml|yml)?\\s*/i, '').replace(/\\s*```$/i, '').trim();\n               if (!source.value.trim()) {\n                 source.value = suggestion;\n                 aiDialogOpen.value = false;\n                 validate();\n               } else {\n                 aiSuggestion.value = suggestion;\n                 aiDiffHtml.value = renderRevisionDiff(source.value, suggestion);\n               }\n             } catch (error) {\n               aiError.value = error.message;\n             } finally {\n               aiLoading.value = false;\n             }\n           };\n           const acceptAiSuggestion = () => { source.value = aiSuggestion.value; aiDialogOpen.value = false; validate(); };\n           const rejectAiSuggestion = () => { aiSuggestion.value = ''; aiDiffHtml.value = ''; };\n\n          onDestroy(() => clearTimeout(validationTimer));\n\n          onInit(() => {\n             const loadPage = page === 'editor'\n               ? initialId ? openWorkflow(initialId) : Promise.resolve()\n               : page === 'secrets' ? loadSecrets() : loadWorkflows();\n            loadPage.catch((error) => showNotice(error.message, true));\n          });\n\n           return {\n             page,\n             workflows,\n            secrets,\n             source,\n             validation,\n             revision,\n             revisionDialogOpen,\n             revisionNumber,\n             revisionDiffHtml,\n             revisionError,\n             revisionLoading,\n             aiDialogOpen,\n             aiRequest,\n             aiLoading,\n             aiError,\n             aiDiffHtml,\n            workflowId,\n            enabled,\n            readOnly,\n            selectedId,\n             secretName,\n             secretValue,\n             fileMode,\n             secretFileName,\n             secretFileData,\n            notice,\n            noticeError,\n            busy,\n            validate,\n            save,\n             publish,\n             runNow,\n             remove,\n            saveSecret,\n            removeSecret,\n            setSource,\n            setWorkflowId,\n            setEnabled,\n            setSecretName,\n             setSecretValue,\n             setFileMode,\n             setSecretFile,\n            selectSecret,\n            visitWorkflow,\n             loadHelp,\n             openRevisionDialog,\n             closeRevisionDialog,\n             navigateRevision,\n             openAiHelp,\n             closeAiHelp,\n             requestAiHelp,\n             acceptAiSuggestion,\n             rejectAiSuggestion,\n          };\n        }\n      \n", sg = 50, cg = 500, lg = class e {
 	server;
 	preprocessors = /* @__PURE__ */ new Map();
 	workflows = new d();
@@ -12340,7 +12352,10 @@ var eg = "let token = sessionStorage.getItem('runner-api-token') || '';\nlet exp
 		if (e.method === "GET" && n.pathname === "/pages/run.html") return this.renderPageComponent(t, "page-run", ae);
 		if (e.method === "GET" && n.pathname === "/pages/help.html") return this.renderPageComponent(t, "page-help", $t(!1), !0);
 		if (e.method === "GET" && n.pathname === "/pages/workflows.html") {
-			if (!this.requireAdmin(e, t)) return;
+			if (!this.isAdmin(e)) {
+				if (this.oidc?.userFromCookie(e.headers.cookie)) return t.writeHead(302, { Location: "/settings/tokens" }), t.end();
+				if (!this.requireAdmin(e, t)) return;
+			}
 			let r = n.searchParams.get("page") === "secrets" ? "secrets" : n.searchParams.get("page") === "editor" ? "editor" : "workflows", i = n.searchParams.get("id") || "", a = Number(n.searchParams.get("revision"));
 			return this.renderPageComponent(t, r === "editor" ? "page-workflow-editor" : r === "secrets" ? "page-secrets" : "page-workflows", qh(r, i, Number.isSafeInteger(a) && a > 0 ? a : void 0));
 		}
@@ -12348,18 +12363,30 @@ var eg = "let token = sessionStorage.getItem('runner-api-token') || '';\nlet exp
 			let r = n.searchParams.get("page") === "notifications" ? "notifications" : "tokens";
 			return r !== "tokens" && !this.requireAdmin(e, t) ? void 0 : r === "tokens" && !this.isAdmin(e) && !this.oidc?.userFromCookie(e.headers.cookie) ? this.requireAdmin(e, t) : this.renderPageComponent(t, "page-settings", an(r));
 		}
-		if (e.method === "GET" && n.pathname === "/workflows") return this.requireAdmin(e, t) ? (t.writeHead(302, { Location: "/settings/workflows" }), t.end()) : void 0;
+		if (e.method === "GET" && n.pathname === "/workflows") {
+			if (!this.isAdmin(e)) {
+				if (this.oidc?.userFromCookie(e.headers.cookie)) return t.writeHead(302, { Location: "/settings/tokens" }), t.end();
+				if (!this.requireAdmin(e, t)) return;
+			}
+			return t.writeHead(302, { Location: "/settings/workflows" }), t.end();
+		}
 		if (e.method === "GET" && n.pathname === "/settings") {
 			let n = this.oidc?.userFromCookie(e.headers.cookie) && !this.isAdmin(e) ? "/settings/tokens" : "/settings/workflows";
 			return n === "/settings/workflows" && !this.isAdmin(e) ? this.requireAdmin(e, t) : (t.writeHead(302, { Location: n }), t.end());
 		}
 		let r = n.pathname.match(/^\/settings\/(workflows|secrets|tokens|notifications|workers)$/);
-		if (e.method === "GET" && r) return (r[1] !== "tokens" || !this.oidc?.userFromCookie(e.headers.cookie)) && !this.requireAdmin(e, t) ? void 0 : this.renderAppShell(t);
+		if (e.method === "GET" && r) {
+			if ((r[1] !== "tokens" || !this.oidc?.userFromCookie(e.headers.cookie)) && !this.isAdmin(e)) {
+				if (this.oidc?.userFromCookie(e.headers.cookie)) return t.writeHead(302, { Location: "/settings/tokens" }), t.end();
+				if (!this.requireAdmin(e, t)) return;
+			}
+			return this.renderAppShell(t);
+		}
 		if (n.pathname === "/api/api-keys") {
 			if (!this.isAdmin(e) && !this.oidc?.userFromCookie(e.headers.cookie) && !this.oidcBearer(e)) return this.requireAdmin(e, t);
 			if (e.method === "GET") {
 				let n = await this.listOidcTokens(e);
-				return n ? t.end(JSON.stringify({ keys: n })) : this.oidc?.userFromCookie(e.headers.cookie) || this.oidcBearer(e) ? (t.writeHead(502, { "Content-Type": "application/json" }), t.end(JSON.stringify({ error: "OIDC token service unavailable" }))) : t.end(JSON.stringify({ keys: await this.apiKeys.list() }));
+				return n ? t.end(JSON.stringify({ keys: n })) : t.end(JSON.stringify({ keys: await this.apiKeys.list() }));
 			}
 			if (e.method === "POST") {
 				if (this.oidc?.userFromCookie(e.headers.cookie) || this.oidcBearer(e)) {

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAgBxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAa;IAC1B,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAczC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IA2T3B;;OAEG;YACW,aAAa;YA0Bb,cAAc;YASd,iBAAiB;YAwCjB,aAAa;YAiBb,iBAAiB;YA0BjB,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA8C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAaR,eAAe;YAaf,kBAAkB;IAqBhC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,OAAO;YAID,cAAc;YAYd,cAAc;YAmBd,eAAe;IAM7B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,UAAU;YAKJ,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAgBN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAWlB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,oBAAoB;YA4BpB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAc,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAgBxF,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,aAAa,CAA0C;IAC/D,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,IAAI,CAAC,CAAa;IAC1B,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,eAAe,CAAgB;WAE1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;gBAK1D,OAAO,EAAE,oBAAoB;IAczC,oBAAoB,CAAC,YAAY,EAAE,mBAAmB;YAIxC,aAAa;IAyU3B;;OAEG;YACW,aAAa;YA0Bb,cAAc;YASd,iBAAiB;YAwCjB,aAAa;YAiBb,iBAAiB;YA0BjB,WAAW;YAwBX,UAAU;YAyBV,cAAc;IA8C5B,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,QAAQ;YAIF,QAAQ;YAaR,eAAe;YAaf,kBAAkB;IAqBhC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,OAAO;YAID,cAAc;YAYd,cAAc;YAmBd,eAAe;IAM7B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,UAAU;YAKJ,YAAY;IAO1B,OAAO,CAAC,YAAY;IAmBpB,OAAO,CAAC,YAAY;YAgBN,QAAQ;YAYR,wBAAwB;YAcxB,kBAAkB;YAOlB,iBAAiB;YAcjB,kBAAkB;YAoBlB,oBAAoB;YASpB,qBAAqB;YAWrB,gBAAgB;YAMhB,gBAAgB;YAiBhB,kBAAkB;YASlB,gBAAgB;IAc9B;;OAEG;YACW,kBAAkB;YAWlB,iBAAiB;IA2B/B,OAAO,CAAC,mBAAmB;YASb,mBAAmB;YAWnB,qBAAqB;IAWnC;;OAEG;YACW,eAAe;IAK7B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,mBAAmB;YAcb,mBAAmB;IAwBjC;;OAEG;YACW,gBAAgB;YA+BhB,gBAAgB;YAiBhB,sBAAsB;YAetB,YAAY;YAsDZ,oBAAoB;YA4BpB,eAAe;YAkBf,cAAc;IAS5B,OAAO,CAAC,MAAM;YAMA,UAAU;IAIlB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAU5C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAS5B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloud-cli/on",
-  "version": "1.63.1",
+  "version": "1.63.3",
   "description": "CLI entry point for the on plugin ecosystem.",
   "type": "module",
   "packageManager": "pnpm@12.3.4",