@edspencer/paddock 0.62.0 → 0.63.0

package/packages/server/dist/mcp-servers.d.ts

@@ -48,33 +48,46 @@
  * Unlike a management token, an MCP `env` entry is not necessarily secret
  * (`NOTION_VERSION: "2022-06-28"` is not), so an inline value is a WARNING and
  * not an error — but the warning is emitted for any key that looks like a
- * credential, and nothing in this module ever prints a value. Every diagnostic
- * names keys, variable names and server names only; a `url` is reported with its
- * query string and userinfo stripped, because that is where an API key rides.
- * {@link describeServer} is the single place a server is rendered for a human,
- * so there is one function to audit rather than a scattering of template strings.
+ * credential, and nothing in this module ever prints a value. `headers` follows
+ * the same rule and for a stronger reason: `Authorization` is the usual reason a
+ * header is declared at all. Every diagnostic names keys, variable names and
+ * server names only; a `url` is reported with its query string and userinfo
+ * stripped, because that is where an API key rides. {@link describeServer} is the
+ * single place a server is rendered for a human, so there is one function to
+ * audit rather than a scattering of template strings.
  *
  * The resolved values do land in the frozen `PaddockConfig` (as management tokens
  * already do). They must never reach an API response: `instance-config.ts`
  * publishes only the fields in its own `FIELDS` table, and this block is
  * deliberately absent from it.
  *
+ * One exposure the `env:` indirection does NOT close: under `driveMode: batch`
+ * the resolved value reaches a COMMAND LINE. See {@link argvExposure} — and note
+ * that carrying `headers` (#700) widens it, because an `Authorization` bearer is
+ * a likelier long-lived credential than an `env` entry.
+ *
  * ## Validation is strict, and drops rather than degrades
  *
  * Step 5 passes a host server it cannot carry faithfully, with a warning, on the
  * grounds that a user who declared a server elsewhere should get it plus a
  * warning rather than nothing plus a warning. That reasoning inverts here,
  * because the user typed this file: an unusable declaration is a mistake they can
- * fix, and a `headers:` block that is silently dropped is an authentication
- * failure that looks like a broken server. So anything that cannot be carried is
- * an ERROR and that server is not attached — including an unknown key, which is
- * how a typo (`arg:` for `args:`) otherwise becomes a server that starts wrong.
+ * fix. So anything that cannot be carried is an ERROR and that server is not
+ * attached — including an unknown key, which is how a typo (`arg:` for `args:`)
+ * otherwise becomes a server that starts wrong.
+ *
+ * `headers:` and `type: sse` USED to be in that category, because herdctl's
+ * schema had no field for either. herdctl 5.32.0 (#446) carries both verbatim,
+ * so refusing them would now reject a declaration that works — they are accepted,
+ * and `headers` is a first-class secret-bearing field with the same `env:VAR`
+ * resolution and the same never-print rule as `env`.
  *
  * Never a boot failure, though: one bad server drops itself and the rest attach,
  * matching `resolveManagementApiConfig`. A typo in a capability must not take an
  * instance down.
  */
 import type { McpServerDefs, McpServerDef } from "./claude-mcp.js";
+import type { DriveMode } from "./models.js";
 /** On-disk shape of one entry of the `mcpServers:` block. Every field optional. */
 export interface McpServerConfigFile {
     /** Executable for a stdio server. Mutually exclusive with {@link url}. */
@@ -83,11 +96,11 @@ export interface McpServerConfigFile {
     args?: string[];
     /** Environment for the server process. Values may be `env:VAR_NAME`. */
     env?: Record<string, string>;
-    /** Endpoint for a streamable-HTTP server. Mutually exclusive with {@link command}. */
+    /** Endpoint for a remote server. Mutually exclusive with {@link command}. */
     url?: string;
-    /** Accepted only as `stdio`/`http`, and only when it agrees with the above. */
+    /** `stdio` for a {@link command}; `http` or `sse` for a {@link url}. */
     type?: string;
-    /** Present only in a MISCONFIGURED file: the engine cannot carry headers. */
+    /** Headers for a remote server. Values may be `env:VAR_NAME`. */
     headers?: Record<string, string>;
 }
 /** On-disk shape of the whole block: a map of server name → declaration. */
@@ -165,4 +178,10 @@ export declare function declaredMcpNotices(opts: {
     hostNames?: readonly string[];
     /** Whether paddock's own browser server is attached (it wins a name clash). */
     browserMcp?: boolean;
+    /**
+     * The instance's drive mode, which decides whether a declared `env` value ends
+     * up on a command line. Omitted ⇒ say nothing (the several callers that only
+     * want the inventory line).
+     */
+    driveMode?: DriveMode;
 }): DeclaredMcpNotice[];

package/packages/server/dist/mcp-servers.js

@@ -65,12 +65,15 @@ export function describeServer(name, def) {
     if (def.command)
         parts.push(`stdio: ${def.command.split(/[\\/]/).pop()}`);
     if (def.url)
-        parts.push(`http: ${redactUrl(def.url)}`);
+        parts.push(`${def.type ?? "http"}: ${redactUrl(def.url)}`);
     if (def.args?.length)
         parts.push(`${def.args.length} args`);
     const envCount = Object.keys(def.env ?? {}).length;
     if (envCount > 0)
         parts.push(`${envCount} env ${envCount === 1 ? "entry" : "entries"}`);
+    const headerCount = Object.keys(def.headers ?? {}).length;
+    if (headerCount > 0)
+        parts.push(`${headerCount} ${headerCount === 1 ? "header" : "headers"}`);
     return `${name} (${parts.join(", ")})`;
 }
 /**
@@ -102,18 +105,18 @@ function resolveLeaf(raw, env, where) {
  * Validate + resolve one declaration into the shape herdctl's `McpServerSchema`
  * carries, or explain why it cannot be.
  *
- * The rejections are the interesting part, and each is a thing step 5 discovered
- * the engine strips silently:
+ * The one rejection left that is about the engine rather than about the file is
+ * **an unknown key** — the only defence against `arg:`/`envs:`/`commands:`, which
+ * would otherwise yield a server that starts with the wrong argv.
  *
- * - **`headers`** — there is no field for them, so a bearer-authenticated server
- *   would arrive unauthenticated AND miss its stored OAuth token, which is keyed
- *   on a hash that includes the headers. Step 5 passes such a host server with a
- *   warning; a hand-written declaration gets an error instead, because the user
- *   typed the header and can act on being told it does nothing.
- * - **`type: sse`** — every `url` is mapped to `type: "http"` downstream, so an
- *   sse server is silently downgraded, with the same OAuth-key consequence.
- * - **an unknown key** — the only defence against `arg:`/`envs:`/`commands:`,
- *   which would otherwise yield a server that starts with the wrong argv.
+ * `headers` and `type: sse` were rejections too until herdctl 5.32.0, because
+ * the schema had no field for either: a bearer-authenticated server arrived
+ * unauthenticated and missed its stored OAuth token (keyed on a hash that
+ * includes the headers and the type), and an `sse` url was silently connected to
+ * as HTTP. Both are now carried verbatim, so both are accepted — `headers`
+ * through the same `env:VAR` resolution as `env`, and `type` checked only for
+ * agreeing with the declaration (`stdio` for a `command`, `http`/`sse` for a
+ * `url`).
  */
 function narrowDeclaration(name, raw, env) {
     const where = `mcpServers.${name}`;
@@ -135,16 +138,10 @@ function narrowDeclaration(name, raw, env) {
         return fail(`${where}: is not a mapping`);
     const unknown = Object.keys(raw).filter((k) => !KNOWN_KEYS.has(k));
     if (unknown.length > 0) {
-        return fail(`${where}: unrecognised key(s) ${unknown.join(", ")} (supported: command, args, env, url) ` +
+        return fail(`${where}: unrecognised key(s) ${unknown.join(", ")} ` +
+            `(supported: command, args, env, url, type, headers) ` +
             `— a mistyped key would otherwise be dropped without a trace`);
     }
-    if (raw.headers !== undefined) {
-        const keys = isRecord(raw.headers) ? Object.keys(raw.headers) : [];
-        return fail(`${where}: \`headers\`${keys.length > 0 ? ` (${keys.join(", ")})` : ""} cannot be ` +
-            `carried — the engine's MCP schema has no field for them, so the server would arrive ` +
-            `unauthenticated and its stored OAuth token (keyed on a hash that includes the headers) ` +
-            `would not be found either`);
-    }
     const hasCommand = typeof raw.command === "string" && raw.command.trim().length > 0;
     const hasUrl = typeof raw.url === "string" && raw.url.trim().length > 0;
     if (hasCommand && hasUrl) {
@@ -153,20 +150,21 @@ function narrowDeclaration(name, raw, env) {
     if (!hasCommand && !hasUrl) {
         return fail(`${where}: declares neither a \`command\` nor a \`url\`, so there is nothing to start`);
     }
+    const server = {};
     if (raw.type !== undefined) {
         const type = String(raw.type).trim().toLowerCase();
-        if (type === "sse") {
-            return fail(`${where}: \`type: sse\` cannot be carried — every \`url\` server is connected to as ` +
-                `streamable HTTP downstream, so an sse server would be silently downgraded (and its ` +
-                `stored OAuth token, keyed on a hash that includes the type, not found). Declare it ` +
-                `as \`http\` if the server supports it`);
-        }
-        const expected = hasUrl ? "http" : "stdio";
-        if (type !== expected) {
-            return fail(`${where}: \`type: ${type}\` disagrees with the declaration (expected ${expected})`);
+        // `sse` joined `http` here in herdctl 5.32.0; an explicit type now wins over
+        // the bare-`url` ⇒ `http` inference rather than being stripped on the way
+        // down. It still has to agree with the rest of the declaration, because a
+        // `type` that disagrees is a typo and starting the wrong transport is a
+        // confusing failure rather than a loud one.
+        const expected = hasUrl ? ["http", "sse"] : ["stdio"];
+        if (!expected.includes(type)) {
+            return fail(`${where}: \`type: ${type}\` disagrees with the declaration ` +
+                `(expected ${expected.join(" or ")})`);
         }
+        server.type = type;
     }
-    const server = {};
     if (hasCommand) {
         const res = resolveLeaf(raw.command.trim(), env, `${where}.command`);
         if (!res.ok)
@@ -178,9 +176,9 @@ function narrowDeclaration(name, raw, env) {
         if (!res.ok)
             return { errors, warnings: [...warnings, `${res.error} — server not attached`] };
         server.url = res.value;
-        // A key in the query string is the usual way a remote MCP endpoint is
-        // authenticated now that `headers` cannot be carried, and this file is
-        // git-tracked. Say so once; never echo the query itself.
+        // A key in the query string is one of the two ways a remote MCP endpoint is
+        // authenticated (the other, `headers`, is carryable again since #700), and
+        // this file is git-tracked. Say so once; never echo the query itself.
         if (!raw.url.startsWith(ENV_REF_PREFIX)) {
             let parsed;
             try {
@@ -231,6 +229,34 @@ function narrowDeclaration(name, raw, env) {
         if (Object.keys(resolved).length > 0)
             server.env = resolved;
     }
+    if (raw.headers !== undefined) {
+        if (!hasUrl) {
+            return fail(`${where}.headers: only a \`url\` server can carry headers`);
+        }
+        if (!isRecord(raw.headers)) {
+            return fail(`${where}.headers: must be a mapping of header name to value`);
+        }
+        const resolved = {};
+        for (const [key, value] of Object.entries(raw.headers)) {
+            if (typeof value !== "string") {
+                return fail(`${where}.headers.${key}: must be a string`);
+            }
+            const res = resolveLeaf(value, env, `${where}.headers.${key}`);
+            if (!res.ok)
+                return { errors, warnings: [...warnings, `${res.error} — server not attached`] };
+            resolved[key] = res.value;
+            // Same heuristic as `env`, one rule to learn — and `Authorization` is the
+            // usual reason a header is declared at all, so this fires on the common
+            // case rather than the exotic one.
+            if (!value.startsWith(ENV_REF_PREFIX) && SECRET_ISH_KEY_RE.test(key)) {
+                warnings.push(`${where}.headers.${key}: looks like a credential and is written into the config file ` +
+                    `itself, which is git-tracked — prefer \`${key}: ${ENV_REF_PREFIX}VAR_NAME\` and set ` +
+                    `the value in the environment`);
+            }
+        }
+        if (Object.keys(resolved).length > 0)
+            server.headers = resolved;
+    }
     return { server, errors, warnings };
 }
 /**
@@ -265,6 +291,62 @@ export function resolveDeclaredMcpServers(file, env) {
     }
     return { servers, errors, warnings };
 }
+/**
+ * The one way a declared credential leaves paddock, said out loud.
+ *
+ * Everything else in this module is about keeping a resolved value out of the
+ * places paddock controls — the log, an error, the Settings API. It does that
+ * completely, and it is still not the whole story, because of what herdctl does
+ * with the record afterwards:
+ *
+ * ```js
+ * // @herdctl/core, runner/runtime/cli-runtime.js
+ * const mcpServers = transformMcpServers(options.agent.mcp_servers);
+ * const mcpConfig = JSON.stringify({ mcpServers });
+ * args.push("--mcp-config", mcpConfig);      // ← env values and all
+ * ```
+ *
+ * A process ARGUMENT is not private on Linux: `/proc/<pid>/cmdline` is
+ * world-readable by default (no `hidepid`), and `ps` prints it. So on the CLI
+ * runtime every declared server's `env` — and, since #700 made the field
+ * carryable, its `headers` — is legible to any local user for the lifetime of
+ * each `claude` invocation. Observed, not
+ * inferred: `test/integration/declared-mcp-argv.test.ts` drives a real turn and
+ * reads the token back out of the spawned process's argv.
+ *
+ * The SDK runtime does NOT do this. It hands the same record to the SDK
+ * in-process, and the stdio server it spawns receives the value in its
+ * environment, where `/proc/<pid>/environ` is owner-only — which is exactly what
+ * Claude Code itself does, so it is not a regression to fix here.
+ *
+ * Which runtime runs is `driveMode`: `session` (the default) is the SDK,
+ * `batch` is the CLI. Hence a WARNING on an instance that is on `batch`, and an
+ * informational note otherwise — because a single project can pin `driveMode:
+ * batch` for itself and bring the exposure back with it.
+ *
+ * Paddock cannot close this from here: the fix is upstream (the Claude CLI's
+ * `--mcp-config` also accepts a file path, which is not readable from another
+ * process's argv). Refusing to attach the server instead would break the feature
+ * for the deployments most likely to need it, so what this does is refuse to be
+ * silent — the same posture step 5 takes towards the fields the engine's schema
+ * cannot carry.
+ */
+function argvExposure(names, driveMode) {
+    const batch = driveMode === "batch";
+    return {
+        level: batch ? "warn" : "info",
+        message: `${names.join(", ")} ${names.length === 1 ? "declares" : "declare"} \`env\` values or ` +
+            `\`headers\`, and ` +
+            `under \`driveMode: batch\` the engine passes the whole server definition to \`claude\` ` +
+            `as a \`--mcp-config\` COMMAND-LINE argument — where any local process can read it via ` +
+            `/proc/<pid>/cmdline. ` +
+            (batch
+                ? `This instance is on \`driveMode: batch\`, so that applies to every turn. Prefer ` +
+                    `\`driveMode: session\` (the default) for a server that holds a credential.`
+                : `This instance is on \`driveMode: session\`, which passes them in-process instead — ` +
+                    `but a project that pins \`driveMode: batch\` brings the exposure back.`),
+    };
+}
 /**
  * What to say at boot about the declared servers — the answer to "what does this
  * instance actually have?", which should be readable off the log rather than
@@ -294,6 +376,18 @@ export function declaredMcpNotices(opts) {
                 `~/.claude.json (\`claude.mcpServers: host\`); this instance's own declaration wins.`,
         });
     }
+    // `headers` joined `env` here in #700: herdctl 5.32.0 carries them, so an
+    // `Authorization` bearer now rides in the same `--mcp-config` argv element that
+    // #702 found an `env` token in — and a bearer is the likelier long-lived
+    // credential of the two. A server declared with headers and no env would
+    // otherwise be the one case this warning missed.
+    const exposed = names.filter((n) => Object.keys(opts.servers[n].env ?? {}).length > 0 ||
+        Object.keys(opts.servers[n].headers ?? {}).length > 0);
+    if (exposed.length > 0 && opts.driveMode !== undefined) {
+        // The one place a declared credential escapes paddock, and it escapes
+        // downstream of every rule this module enforces — see {@link argvExposure}.
+        notices.push(argvExposure(exposed, opts.driveMode));
+    }
     if (opts.browserMcp && names.includes("playwright")) {
         notices.push({
             level: "warn",

package/packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paddock/server",
-  "version": "0.62.0",
+  "version": "0.63.0",
   "private": true,
   "type": "module"
 }

package/packages/web/dist/assets/{InstanceConfigPage-Ca905oey.js → InstanceConfigPage-CCk2hVT9.js}

@@ -1,2 +1,2 @@
-import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-D_1ogxg1.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};
+import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-CUnFKMga.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};