@edspencer/paddock 0.61.0 → 0.61.1

package/packages/server/dist/cli/claude-home-choice.js

@@ -0,0 +1,108 @@
+/**
+ * Which Claude home the INTERACTIVE CLI runs against (#683).
+ *
+ * ## The problem this exists for
+ *
+ * Since #620 paddock owns `<dataDir>/claude-home`, and herdctl therefore hands
+ * Claude Code a `CLAUDE_CONFIG_DIR`. Claude Code derives its **secure-storage
+ * service name** from whether that variable is SET AT ALL — unset gets the plain
+ * name, set gets a path-hash suffix — so a macOS login held in the Keychain under
+ * the plain name becomes invisible the moment paddock points at its own home.
+ *
+ * #620 anticipated this and bridges credentials by symlinking
+ * `~/.claude/.credentials.json` in. That is the FILE-based store: it covers Linux
+ * and the Docker image and is structurally incapable of covering macOS, because a
+ * Keychain entry cannot be symlinked. Net effect on a Mac: `npx paddock --here`
+ * boots, the UI loads, and every turn fails with `Not logged in`, two directories
+ * away from a perfectly good login.
+ *
+ * ## Why the fix is a home choice and not a credential copy
+ *
+ * There is exactly one lever. herdctl injects `CLAUDE_CONFIG_DIR` only when the
+ * configured home differs from `~/.claude` — it documents that same service-name
+ * branch as its reason for staying quiet otherwise. So the only way to get the
+ * plain service name, and with it the user's Keychain login, is to run against
+ * `~/.claude` itself.
+ *
+ * The alternative — reading the Keychain secret and writing it to disk as
+ * `.credentials.json` — is deliberately NOT done anywhere in this codebase. It
+ * downgrades OS-protected storage to a plaintext file, and it would diverge the
+ * moment Claude Code refreshed the token.
+ *
+ * ## Why the interactive CLI, and only the interactive CLI
+ *
+ * `--here` means *my* directory, *my* sessions, *my* login; isolation is a server
+ * concern. A daemon, the container image and `node dist/index.js` all keep the
+ * owned home — nothing here runs for them, and `resolveClaudeHome`'s precedence
+ * is untouched. This module only decides what the CLI puts in `CLAUDE_HOME`
+ * before it hands over, which is the same mechanism a user has always had.
+ *
+ * ## What continuity costs
+ *
+ * Running against the user's home means paddock plants no transcript symlink
+ * there (#682, and the reason this was blocked on it), so transcripts stay in
+ * `~/.claude/projects/<encoded-cwd>/` rather than being relocated into the
+ * workspace's `.chats/`. Chats still list, open, resume and rename — paddock and
+ * the engine read the one home — but the workspace directory is no longer
+ * self-contained. The CLI says so out loud when it makes this choice; see
+ * `paddock.ts`.
+ *
+ * What it does NOT change, contrary to the obvious guess: **import consent**.
+ * Reading the home a user's sessions live in does not make them paddock's chats.
+ * Session discovery is attribution-based, so a transcript paddock never ran is
+ * offered by `adoptable-chats` and absent from `chats` — exactly as under an
+ * owned home — and #663's confirmation still gates every import. Checked against
+ * a running instance rather than reasoned about, because the reasoning went the
+ * other way.
+ */
+import path from "node:path";
+/** Env vars that authenticate Claude Code without any on-disk credential. */
+const TOKEN_ENV_VARS = ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN"];
+/** Variables that are an explicit choice of home, and are never overridden. */
+const HOME_ENV_VARS = ["CLAUDE_HOME", "CLAUDE_CONFIG_DIR"];
+/**
+ * Decide whether the interactive CLI should run against the user's own Claude
+ * home for credential continuity.
+ *
+ * Pure, so the whole decision table is testable on a platform that has no
+ * Keychain. Continuity is chosen only when all four hold:
+ *
+ *  1. **No explicit home in the environment.** `CLAUDE_HOME` or
+ *     `CLAUDE_CONFIG_DIR` is somebody deciding this already; deferring to them is
+ *     the same rule herdctl#423 follows.
+ *  2. **No token in the environment.** A token authenticates regardless of home,
+ *     so the isolated home works and is strictly better — this is the shape every
+ *     CI, container and server run has.
+ *  3. **`--isolated-claude-home` not passed.** The explicit opt-out.
+ *  4. **`~/.claude` actually exists.** With no user home there is no login to be
+ *     continuous with, and the owned home self-initializes cleanly.
+ *
+ * Note what is NOT a condition: the platform. The isolation/continuity trade is
+ * the same argument on Linux, where it additionally makes the `.credentials.json`
+ * bridge unnecessary rather than merely insufficient. Branching on `darwin` would
+ * mean two behaviours to reason about and one of them untested on most machines.
+ */
+export function chooseClaudeHome(input) {
+    const setHomeVar = HOME_ENV_VARS.find((v) => (input.env[v] ?? "").trim().length > 0);
+    if (setHomeVar !== undefined) {
+        return { reason: `${setHomeVar} is set — honouring it` };
+    }
+    if (input.forceIsolated) {
+        return { reason: "--isolated-claude-home was passed" };
+    }
+    const tokenVar = TOKEN_ENV_VARS.find((v) => (input.env[v] ?? "").trim().length > 0);
+    if (tokenVar !== undefined) {
+        return { reason: `${tokenVar} is set — the isolated home can authenticate on its own` };
+    }
+    if (!input.userHomeExists) {
+        return { reason: `no ${input.userClaudeHome} — nothing to inherit` };
+    }
+    return {
+        claudeHome: input.userClaudeHome,
+        reason: `using your existing Claude Code login and history in ${input.userClaudeHome}`,
+    };
+}
+/** `~/.claude`, given a home directory. Kept here so callers do not re-spell it. */
+export function userClaudeHomePath(homedir) {
+    return path.join(homedir, ".claude");
+}

package/packages/server/dist/cli/paddock.js

@@ -24,6 +24,7 @@ import path from "node:path";
 import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { HERE_MARKER, isHereWorkspace, countClaudeSessions, ensureGitignored } from "./here.js";
+import { chooseClaudeHome, userClaudeHomePath } from "./claude-home-choice.js";
 import { CliError, USAGE, parseArgs, nodeVersionProblem, explainListenError, } from "./args.js";
 /** This module's own directory: `<…>/packages/server/dist/cli`. */
 const moduleDir = path.dirname(fileURLToPath(import.meta.url));
@@ -114,12 +115,26 @@ function noteFirstRun(dataDir) {
  * effects are announced rather than asked about. Printed only on the first
  * `--here` in a directory; resuming an already-opened one says nothing.
  */
-function announceHereConsent(dir, dataDir) {
+function announceHereConsent(dir, dataDir, inheritedHome) {
     console.log([
         "",
         `  Opening ${dir} as a Paddock workspace.`,
         `    · ${path.relative(dir, dataDir) || HERE_MARKER}/ and .chats/ created here, and added to .gitignore`,
-        "    · ~/.claude sessions for this directory are offered for import (nothing is moved)",
+        // Import consent is UNCHANGED by continuity, which is worth stating
+        // because it is not what you would predict: reading the user's home does
+        // not turn their sessions into paddock's chats. Verified against a running
+        // instance — a pre-existing transcript for the directory comes back from
+        // `adoptable-chats` (offered) and NOT from `chats` (listed), because
+        // session discovery is attribution-based, not "whatever is in the folder".
+        // So #663's confirmation still gates every import.
+        //
+        // What continuity DOES change is where transcripts live: with no symlink
+        // planted in a home paddock does not own (#682), Claude Code keeps writing
+        // to `~/.claude/projects/<encoded-cwd>/` and `.chats/` stays empty.
+        inheritedHome === undefined
+            ? "    · ~/.claude sessions for this directory are offered for import (nothing is moved)"
+            : `    · running against your ${inheritedHome}: sessions there are offered for import ` +
+                `(nothing is moved), and new transcripts stay there rather than in .chats/`,
         "  Later runs here resume it — no flag needed.",
         "",
     ].join("\n"));
@@ -204,6 +219,20 @@ async function main() {
     // is `.git`. A flagless run anywhere else touches nothing.
     const resuming = !opts.here && isHereWorkspace(cwd);
     const hereMode = opts.here || resuming;
+    // Credential continuity (#683). Decided HERE, in the interactive CLI, and
+    // nowhere else: `resolveClaudeHome`'s precedence is untouched, so a server, a
+    // container and `node dist/index.js` all keep the owned home. All this does is
+    // set the same `CLAUDE_HOME` a user could set by hand — the difference is that
+    // on macOS they currently have no way to know they need to.
+    const userHome = userClaudeHomePath(os.homedir());
+    const homeChoice = chooseClaudeHome({
+        env: process.env,
+        userClaudeHome: userHome,
+        userHomeExists: fs.existsSync(userHome),
+        forceIsolated: opts.isolatedClaudeHome,
+    });
+    if (homeChoice.claudeHome !== undefined)
+        process.env.CLAUDE_HOME = homeChoice.claudeHome;
     // Apply CLI defaults as env vars. This is the whole integration surface: the
     // server resolves config inside `buildApp()`, so anything set before the
     // dynamic import below is picked up with no special-casing in config.ts.
@@ -213,7 +242,7 @@ async function main() {
         (hereMode ? path.join(cwd, HERE_MARKER) : path.join(os.homedir(), ".paddock")));
     if (hereMode) {
         if (!resuming)
-            announceHereConsent(cwd, dataDir);
+            announceHereConsent(cwd, dataDir, homeChoice.claudeHome);
         // The root workspace IS `projectsRoot` (its key is ""), so pointing this at
         // the user's directory makes that directory the workspace. No schema change,
         // no new project type — see cli/here.ts.
@@ -239,19 +268,27 @@ async function main() {
     //                      `[fleet-manager] …` lines via console.info — pino's
     //                      level cannot reach those.
     // An explicit value for either is left alone, and `--verbose` skips both.
+    // A LEVEL is not enough, which is what #684 was about. Background job failures
+    // are logged at `error` — level 50, above every threshold either variable can
+    // set — and one of them is a bare `console.error` inside the engine. So quiet
+    // mode is also stated as a fact the server can act on: `agent-errors.ts` reads
+    // this to collapse a recognised, non-fatal failure to its cause instead of
+    // printing a stack trace with 2 KB of system prompt in it. Internal to the
+    // CLI; `--verbose` leaves it unset and nothing is suppressed.
     if (!opts.verbose) {
         if (process.env.LOG_LEVEL === undefined)
             process.env.LOG_LEVEL = "warn";
         if (process.env.HERDCTL_LOG_LEVEL === undefined)
             process.env.HERDCTL_LOG_LEVEL = "warn";
+        process.env.PADDOCK_QUIET = "1";
     }
     // No credential preflight here: `ensureClaudeHome` (claude-home.ts) already
     // warns at boot, and it is the only check that can be right. It tests the home
-    // paddock will ACTUALLY use — `<dataDir>/claude-home` since #620 — after the
-    // bridge has symlinked in any `~/.claude/.credentials.json`, and its remedy
-    // names the `CLAUDE_CONFIG_DIR` keychain scoping that is the real reason a
-    // logged-in user can still land with no credentials. It logs at `warn`, which
-    // survives the quiet default set just above.
+    // paddock will ACTUALLY use — after the bridge has symlinked in any
+    // `~/.claude/.credentials.json`, and, on darwin, after probing the Keychain for
+    // the login `CLAUDE_CONFIG_DIR` scoping hides (#683). It logs at `warn`, which
+    // survives the quiet default set just above. Continuity (chosen above) usually
+    // means it has nothing to say, because there is nothing left to bridge.
     const port = process.env.PORT ?? "4000";
     const host = process.env.HOST ?? "127.0.0.1";
     // Imported dynamically, AFTER the env above is set: a static import would
@@ -271,6 +308,12 @@ async function main() {
         "",
         `  Paddock is running at ${url}`,
         `  Workspace: ${hereMode ? cwd : dataDir}${resuming ? "  (resumed)" : ""}`,
+        // Same rule as the workspace line: running against somebody's own Claude
+        // home is a real difference in what this instance reads and writes, so it
+        // is stated every run rather than only on the one that decided it.
+        ...(homeChoice.claudeHome !== undefined
+            ? [`  Claude home: ${homeChoice.claudeHome}  (yours — sessions and login shared)`]
+            : []),
         "  Press Ctrl-C to stop.",
         "",
     ].join("\n"));

package/packages/server/dist/sweep.js

@@ -38,6 +38,7 @@
 import { promises as fs } from "node:fs";
 import path from "node:path";
 import { keeperAgentName } from "./herdctl.js";
+import { classifyAgentError } from "./agent-errors.js";
 import { DEFAULT_CURATION, resolveCurationConfig, } from "./curation-config.js";
 import { curatorTriggerOf, triggerPromptFileAbsPath, } from "./trigger-config.js";
 const STATE_FILE = "sweep-state.json";
@@ -204,7 +205,18 @@ export class SweepService {
                 lastSweptSessionMtime: wm.lastSweptSessionMtime,
                 lastSweptAt: Date.now(),
             });
-            this.log.error({ err, slug }, "sweep: sweeper run errored (non-fatal)");
+            // #684: this is a best-effort background task whose failure is already
+            // labelled non-fatal, so a recognised cause gets ONE line at warn — no
+            // `err`, because pino serialising it is what put four copies of the
+            // curator system prompt on a first-time user's terminal. An unrecognised
+            // failure keeps the full object: that is the case somebody needs it.
+            const cause = classifyAgentError(err);
+            if (cause === undefined) {
+                this.log.error({ err, slug }, "sweep: sweeper run errored (non-fatal)");
+            }
+            else {
+                this.log.warn({ slug }, `sweep: skipped, ${cause} (non-fatal — chat is unaffected)`);
+            }
         }
         finally {
             this.running.delete(slug);

package/packages/server/dist/transcripts.d.ts

@@ -31,14 +31,21 @@ export declare function projectChatsDir(projectDir: string): string;
  * Making the parameter required is what stops that class of bug at the type
  * level.
  *
- * `home.owned` gates the one destructive branch (#620): migrating an existing
- * real transcript directory into `.chats/` copies the files and then REMOVES the
- * originals. That is correct self-healing inside a home paddock owns, where such
- * a directory can only be paddock's own doing. Inside the user's `~/.claude` it
- * is somebody else's data — a `claude` CLI session run in a directory paddock
- * happens to also manage — so we leave it strictly alone and let the SDK keep
- * writing there. Those transcripts stay importable through adoption (#588),
- * which is the deliberate, user-driven version of the same move.
+ * `home.owned` gates EVERY write into the home (#620, #682). Two of them:
+ *
+ *  - Migrating an existing real transcript directory into `.chats/` copies the
+ *    files and then REMOVES the originals. That is correct self-healing inside a
+ *    home paddock owns, where such a directory can only be paddock's own doing.
+ *    Inside the user's `~/.claude` it is somebody else's data — a `claude` CLI
+ *    session run in a directory paddock happens to also manage — so we leave it
+ *    strictly alone and let the SDK keep writing there.
+ *  - Planting the redirect symlink at a path that does not exist yet. Not
+ *    destructive on the day it happens, which is why it was missed, but it
+ *    silently claims where the user's FUTURE sessions for that directory get
+ *    written (#682). See the branch itself for the full argument.
+ *
+ * Either way those transcripts stay importable through adoption (#588), which is
+ * the deliberate, user-driven version of the same move.
  */
 export interface ClaudeHomeTarget {
     /** Absolute path to the Claude home to plant the redirect symlink in. */

package/packages/server/dist/transcripts.js

@@ -76,6 +76,24 @@ export async function ensureProjectChats(workingDir, chatsHostDir, home) {
             await fs.symlink(chatsDir, encoded);
             return;
         }
+        // Nothing there yet. In a home paddock does NOT own, planting here is the
+        // data-loss branch (#682): the encoded path is where the USER's future
+        // `claude` sessions for this directory land, so a link redirects every one of
+        // them into paddock's `.chats/` — from that moment "their history" and "our
+        // store" are the same files, and an ordinary `rm -rf .chats` destroys
+        // transcripts paddock never owned. It also breaks unrelated tooling that
+        // expects `~/.claude/projects/<enc>` to be a directory. Creating a name the
+        // user has not used yet is not "overwriting", so it slipped past the letter
+        // of claude-home.ts's invariant while breaking its intent.
+        //
+        // The cost of bailing is that transcripts stay in the user's home instead of
+        // being self-contained in `.chats/`, which is exactly the pre-#620 trade for
+        // the `CLAUDE_HOME=~/.claude` escape hatch. Chat still works end to end:
+        // paddock and the engine both resolve THIS home, so discovery, resume and
+        // rename all read the real directory. Adoption (#588) remains the deliberate,
+        // user-driven way to pull those transcripts into a project.
+        if (!home.owned)
+            return;
         // Nothing there yet — just create the symlink so future turns land in .chats.
         await fs.symlink(chatsDir, encoded);
     }

package/packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paddock/server",
-  "version": "0.61.0",
+  "version": "0.61.1",
   "private": true,
   "type": "module"
 }

package/packages/web/dist/assets/{InstanceConfigPage-CzMqTdUU.js → InstanceConfigPage-BgNXqAox.js}

@@ -1,2 +1,2 @@
-import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-wBXQMkGI.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};
+import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-DGCs1YIO.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};