@jheavenknows/bluerouter 5.2.34 → 5.2.35

package/app/.next-cli-build/static/chunks/app/(dashboard)/dashboard/profile/{page-dddfb0666164ec2d.js → page-d835e66683d8d489.js}

@@ -1 +1 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{7973:(e,a,s)=>{Promise.resolve().then(s.bind(s,38658))},38658:(e,a,s)=>{"use strict";s.r(a),s.d(a,{default:()=>v});var t=s(95155),r=s(12115),l=s(44656),o=s(35497);let d={enabled:!1,fileLoggingEnabled:!1,type:"mysql",host:"",port:"",database:"",username:"",password:"",ssl:!1,createDatabase:!1,logClientRequest:!0,logSourceRequest:!0,logTargetRequest:!0,logProviderResponse:!1,logErrors:!0,retentionDays:30,payloadRotationEnabled:!1,payloadRetentionDays:60,payloadRotationIntervalHours:24,payloadRotationBatchSize:500,payloadRotationMaxBatches:20};function n({label:e,value:a,onChange:s,type:r="text",placeholder:l="",disabled:o=!1,min:d,max:i,step:c}){return(0,t.jsxs)("label",{className:"flex flex-col gap-1 text-xs",children:[(0,t.jsx)("span",{className:"text-text-muted",children:e}),(0,t.jsx)("input",{type:r,value:a||"",placeholder:l,disabled:o,min:d,max:i,step:c,onChange:e=>s(e.target.value),className:"w-full rounded border border-border bg-surface px-2 py-1.5 text-xs text-text-main focus:outline-none focus:ring-1 focus:ring-primary/50 disabled:opacity-50"})]})}function i({label:e,checked:a,onChange:s,disabled:r=!1}){return(0,t.jsxs)("label",{className:"flex items-center gap-2 text-xs text-text-main",children:[(0,t.jsx)("input",{type:"checkbox",checked:!!a,disabled:r,onChange:e=>s(e.target.checked)}),e]})}function c(){let[e,a]=(0,r.useState)(d),[s,l]=(0,r.useState)(!1),[c,p]=(0,r.useState)(null),[u,m]=(0,r.useState)(null),[x,b]=(0,r.useState)(null),g=e=>a(a=>({...a,...e})),h=async()=>{l(!0),m(null);try{let e=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db"),s=await e.json();if(!e.ok)throw Error(s.error||"Failed to load config");a({...d,...s.config||{}})}catch(e){m(e.message||"Failed to load config")}finally{l(!1)}};(0,r.useEffect)(()=>{h()},[]);let y=async()=>{l(!0),m(null),p(null);try{let s=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({config:e})}),t=await s.json();if(!s.ok)throw Error(t.error||"Failed to save config");a({...d,...t.config||{}}),p("Saved")}catch(e){m(e.message||"Failed to save config")}finally{l(!1)}},f=async(a,s={})=>{if(!s.confirm||window.confirm("Delete expired full request/response payloads now? Prompt log rows, previews, token/model/provider metadata, and analytics are kept. This action cannot restore deleted payload JSON.")){l(!0),m(null),p(null),a.includes("payload-rotation")&&b(null);try{let t=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:a,config:e,confirm:!0===s.confirm})}),r=await t.json();if(!t.ok)throw Error(r.error||"Action failed");a.includes("payload-rotation")&&b(r),p(r.message||r.init?.message||"OK")}catch(e){m(e.message||"Action failed")}finally{l(!1)}}},v="postgres"===e.type||"mysql"===e.type;return(0,t.jsx)(o.Zp,{title:"Request Logging",subtitle:"Control local request files and database-backed prompt logs",icon:"receipt_long",children:(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,t.jsxs)(o.Ex,{variant:e.fileLoggingEnabled?"success":"default",children:["Local files: ",e.fileLoggingEnabled?"Enabled":"Disabled"]}),(0,t.jsxs)(o.Ex,{variant:e.enabled?"success":"default",children:["Database: ",e.enabled?"Enabled":"Disabled"]})]}),(0,t.jsx)("div",{className:"rounded-lg border border-yellow-500/30 bg-yellow-500/10 p-3 text-xs text-yellow-700 dark:text-yellow-300",children:'Prompt logs may contain source code, selected code, internal URLs, user prompts, and provider responses. Checked stages store full raw JSON; prompt/response text columns keep only short previews. Per-combo "hide content" still redacts raw JSON.'}),(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-2",children:(0,t.jsxs)("label",{className:"flex flex-col gap-1 text-xs",children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Database type"}),(0,t.jsxs)("select",{value:e.type,disabled:s,onChange:a=>{let s=a.target.value;g({type:s,port:"postgres"===s?e.port||"5432":"mysql"===s?e.port||"3306":e.port})},className:"w-full rounded border border-border bg-surface px-2 py-1.5 text-xs text-text-main focus:outline-none focus:ring-1 focus:ring-primary/50",children:[(0,t.jsx)("option",{value:"mysql",children:"MySQL / MariaDB"}),(0,t.jsx)("option",{value:"postgres",children:"PostgreSQL"})]})]})}),v&&(0,t.jsxs)("div",{className:"grid gap-3 md:grid-cols-2",children:[(0,t.jsx)(n,{label:"Host",value:e.host,placeholder:"127.0.0.1",onChange:e=>g({host:e}),disabled:s}),(0,t.jsx)(n,{label:"Port",value:e.port,placeholder:"postgres"===e.type?"5432":"3306",onChange:e=>g({port:e}),disabled:s}),(0,t.jsx)(n,{label:"Database",value:e.database,placeholder:"bluerouter_logs",onChange:e=>g({database:e}),disabled:s}),(0,t.jsx)(n,{label:"Username",value:e.username,placeholder:"bluerouter",onChange:e=>g({username:e}),disabled:s}),(0,t.jsx)(n,{label:"Password",type:"password",value:e.password,placeholder:"Leave as ******** to keep existing password",onChange:e=>g({password:e}),disabled:s}),(0,t.jsxs)("div",{className:"flex flex-col justify-end gap-2",children:[(0,t.jsx)(i,{label:"Use SSL",checked:e.ssl,onChange:e=>g({ssl:e}),disabled:s}),(0,t.jsx)(i,{label:"Create database if missing",checked:e.createDatabase,onChange:e=>g({createDatabase:e}),disabled:s})]})]}),(0,t.jsxs)("div",{className:"grid gap-2 rounded-lg border border-border bg-surface/40 p-3 md:grid-cols-2",children:[(0,t.jsx)(i,{label:"Save request/response to local files",checked:e.fileLoggingEnabled,onChange:e=>g({fileLoggingEnabled:e}),disabled:s}),(0,t.jsx)(i,{label:"Save request/response to Prompt Log Database",checked:e.enabled,onChange:e=>g({enabled:e}),disabled:s}),(0,t.jsx)(i,{label:"Log client request JSON",checked:e.logClientRequest,onChange:e=>g({logClientRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log normalized/source request JSON",checked:e.logSourceRequest,onChange:e=>g({logSourceRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log target/provider request JSON",checked:e.logTargetRequest,onChange:e=>g({logTargetRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log provider response JSON",checked:e.logProviderResponse,onChange:e=>g({logProviderResponse:e}),disabled:s}),(0,t.jsx)(i,{label:"Log errors",checked:e.logErrors,onChange:e=>g({logErrors:e}),disabled:s})]}),(0,t.jsxs)("div",{className:"rounded-lg border border-border bg-background p-3 text-xs text-text-muted",children:["Local files are written under ",(0,t.jsx)("code",{children:"DATA_DIR/logs/requests"}),". Disabling local files stops new request/response dump files; existing files are kept."]}),(0,t.jsxs)("div",{className:"space-y-3 rounded-xl border border-border bg-surface/40 p-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:"Full payload rotation"}),(0,t.jsxs)("div",{className:"mt-1 text-xs text-text-muted",children:["Deletes expired full request/response JSON only. Rows in ",(0,t.jsx)("code",{children:"prompt_logs"}),", short previews, model/provider/token metadata, and dashboard analytics remain available."]})]}),(0,t.jsx)(i,{label:"Enable automatic payload rotation",checked:e.payloadRotationEnabled,onChange:e=>g({payloadRotationEnabled:e}),disabled:s}),(0,t.jsxs)("div",{className:"grid gap-3 md:grid-cols-2 lg:grid-cols-4",children:[(0,t.jsx)(n,{label:"Keep full payload for (days)",type:"number",min:1,max:3650,step:1,value:String(e.payloadRetentionDays||60),onChange:e=>g({payloadRetentionDays:Number(e)||60}),disabled:s}),(0,t.jsx)(n,{label:"Automatic run interval (hours)",type:"number",min:1,max:168,step:1,value:String(e.payloadRotationIntervalHours||24),onChange:e=>g({payloadRotationIntervalHours:Number(e)||24}),disabled:s}),(0,t.jsx)(n,{label:"Prompt-log rows per transaction",type:"number",min:50,max:5e3,step:50,value:String(e.payloadRotationBatchSize||500),onChange:e=>g({payloadRotationBatchSize:Number(e)||500}),disabled:s}),(0,t.jsx)(n,{label:"Max transactions per run",type:"number",min:1,max:200,step:1,value:String(e.payloadRotationMaxBatches||20),onChange:e=>g({payloadRotationMaxBatches:Number(e)||20}),disabled:s})]}),(0,t.jsxs)("div",{className:"rounded-lg border border-blue-500/30 bg-blue-500/10 p-3 text-xs text-blue-700 dark:text-blue-300",children:["MySQL: payload hashes are detached from expired ",(0,t.jsx)("code",{children:"prompt_logs"})," rows, then rows in ",(0,t.jsx)("code",{children:"prompt_log_payloads"})," are deleted only when no prompt log still references them. Each batch uses a transaction and a database advisory lock to prevent overlapping rotation jobs."]}),(0,t.jsxs)("div",{className:"rounded-lg border border-amber-500/30 bg-amber-500/10 p-3 text-xs text-amber-700 dark:text-amber-300",children:["Deleting rows frees reusable space inside InnoDB, but ",(0,t.jsx)("code",{children:"prompt_log_payloads.ibd"})," normally does not shrink immediately. Do not run ",(0,t.jsx)("code",{children:"OPTIMIZE TABLE"})," on a very large table without checking temporary disk space and a maintenance window."]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("preview-payload-rotation"),loading:s,children:"Preview expired payloads"}),(0,t.jsx)(o.$n,{size:"sm",variant:"danger",onClick:()=>f("run-payload-rotation",{confirm:!0}),loading:s,children:"Delete expired payloads now"})]}),x&&(0,t.jsxs)("div",{className:"grid gap-2 rounded-lg border border-border bg-background p-3 text-xs md:grid-cols-2 lg:grid-cols-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Cutoff:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:x.cutoff?new Date(x.cutoff).toLocaleString():"-"})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Prompt-log rows:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:Number(x.promptLogRows??x.promptLogRowsUpdated??0).toLocaleString()})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:void 0===x.payloadRowsDeleted?"Payload rows past retention:":"Payload rows deleted:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:Number(x.payloadRowsDeleted??x.payloadRowsPastRetention??0).toLocaleString()})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:void 0===x.payloadBytesDeleted?"Estimated payload size:":"Payload size deleted:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:function(e){let a=Number(e||0);if(!Number.isFinite(a)||a<=0)return"0 B";let s=["B","KB","MB","GB","TB"],t=Math.min(s.length-1,Math.floor(Math.log(a)/Math.log(1024))),r=a/1024**t;return`${r.toFixed(r>=10||0===t?1:2)} ${s[t]}`}(x.payloadBytesDeleted??x.payloadBytesPastRetention??x.referencedPayloadBytes)})]}),x.hasMore?(0,t.jsx)("div",{className:"md:col-span-2 lg:col-span-4 text-amber-600",children:"More expired rows remain because the per-run batch limit was reached."}):null]}),(0,t.jsx)("div",{className:"text-[11px] text-text-muted",children:"Save the settings after enabling automatic rotation. Preview and manual deletion use the values currently shown in this form."})]}),v&&(0,t.jsxs)("div",{className:"rounded-lg border border-blue-500/30 bg-blue-500/10 p-3 text-xs text-blue-700 dark:text-blue-300",children:["Prompt logs now support MySQL/MariaDB and PostgreSQL only. MySQL/MariaDB requires ",(0,t.jsx)("code",{children:"mysql2"}),"; PostgreSQL requires ",(0,t.jsx)("code",{children:"pg"}),"."]}),c&&(0,t.jsx)("div",{className:"rounded-lg border border-green-500/30 bg-green-500/10 p-2 text-xs text-green-600",children:c}),u&&(0,t.jsx)("div",{className:"rounded-lg border border-red-500/30 bg-red-500/10 p-2 text-xs text-red-500",children:u}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:h,loading:s,children:"Reload"}),(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("test"),loading:s,children:"Test connection"}),(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("init"),loading:s,children:"Initialize schema"}),(0,t.jsx)(o.$n,{size:"sm",onClick:y,loading:s,children:"Save"}),(0,t.jsx)(o.$n,{size:"sm",variant:"success",onClick:()=>f("save-and-init"),loading:s,children:"Save & initialize"})]})]})})}let p="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))",u="image/svg+xml,image/png,image/webp,image/jpeg,image/gif",m=`${u},image/x-icon,image/vnd.microsoft.icon,.ico`;function x({status:e}){if(!e?.message)return null;let a="error"===e.type?"text-red-600 bg-red-50 border-red-200":"text-green-700 bg-green-50 border-green-200";return(0,t.jsx)("div",{className:`mt-3 rounded-xl border px-4 py-3 text-sm ${a}`,children:e.message})}function b({icon:e,title:a,desc:s,children:r}){return(0,t.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-6 shadow-sm",children:[(0,t.jsxs)("div",{className:"mb-5 flex items-start gap-3",children:[e&&(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:e}),(0,t.jsxs)("div",{children:[(0,t.jsx)("h2",{className:"text-xl font-bold text-text-main",children:a}),s&&(0,t.jsx)("p",{className:"mt-1 text-sm text-text-muted",children:s})]})]}),r]})}function g({label:e,hint:a,children:s}){return(0,t.jsxs)("label",{className:"block",children:[(0,t.jsx)("span",{className:"mb-1 block text-sm font-semibold text-text-main",children:e}),s,a&&(0,t.jsx)("span",{className:"mt-1 block text-xs text-text-muted",children:a})]})}function h(e){return(0,t.jsx)("input",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function y(e){return(0,t.jsx)("textarea",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function f({title:e,desc:a,checked:s,onChange:r,disabled:l}){return(0,t.jsxs)("div",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background px-4 py-3",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:e}),a&&(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:a})]}),(0,t.jsx)("button",{type:"button",disabled:l,onClick:()=>r(!s),className:`relative mt-0.5 h-6 w-11 rounded-full transition disabled:opacity-50 ${s?"bg-primary":"bg-border"}`,children:(0,t.jsx)("span",{className:`absolute top-0.5 h-5 w-5 rounded-full bg-white transition ${s?"left-5":"left-0.5"}`})})]})}function v(){let[e,a]=(0,r.useState)({}),[s,o]=(0,r.useState)(!0),[d,n]=(0,r.useState)({current:"",new:"",confirm:""}),[i,v]=(0,r.useState)({type:"",message:""}),[j,w]=(0,r.useState)(!1),[N,D]=(0,r.useState)(!1),[C,S]=(0,r.useState)({type:"",message:""}),A=(0,r.useRef)(null),[k,L]=(0,r.useState)("admin"),[U,P]=(0,r.useState)({type:"",message:""}),[M,R]=(0,r.useState)({ldapEnabled:!1,ldapUrl:"",ldapBindDn:"",ldapBindPassword:"",ldapUserBaseDn:"",ldapUserSearchFilter:p,ldapUserNameAttribute:"sAMAccountName",ldapUserDisplayAttribute:"displayName",ldapUserEmailAttribute:"mail",ldapLoginAllowedGroupDn:"",ldapAdminGroupDn:"",ldapMonitorAdminGroupDn:"",ldapAiGatewaysMonitorsGroupDn:"",ldapNestedGroups:!0,ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!0,ldapConnectTimeoutMs:8e3}),[B,G]=(0,r.useState)({type:"",message:""}),[E,I]=(0,r.useState)(!1),[O,T]=(0,r.useState)(!1),[F,q]=(0,r.useState)(""),[$,_]=(0,r.useState)([]),[z,J]=(0,r.useState)(!1),[V,H]=(0,r.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[Q,K]=(0,r.useState)(""),[W,Z]=(0,r.useState)({type:"",message:""}),[X,Y]=(0,r.useState)(!1),[ee,ea]=(0,r.useState)(!1),[es,et]=(0,r.useState)({type:"",message:""}),er=(0,l.useBranding)(),[el,eo]=(0,r.useState)(""),[ed,en]=(0,r.useState)(""),[ei,ec]=(0,r.useState)(""),[ep,eu]=(0,r.useState)({type:"",message:""}),[em,ex]=(0,r.useState)(!1),[eb,eg]=(0,r.useState)(!1),[eh,ey]=(0,r.useState)(!1),[ef,ev]=(0,r.useState)(!1),ej=(0,r.useRef)(null),ew=(0,r.useRef)(null),eN=async()=>{o(!0);try{let e=await fetch("/api/settings",{cache:"no-store"}),s=await e.json();a(s),L(s.localLoginUsername||"admin"),R({ldapEnabled:!0===s.ldapEnabled,ldapUrl:s.ldapUrl||"",ldapBindDn:s.ldapBindDn||"",ldapBindPassword:"",ldapUserBaseDn:s.ldapUserBaseDn||s.ldapBaseDn||"",ldapUserSearchFilter:s.ldapUserSearchFilter||p,ldapUserNameAttribute:s.ldapUserNameAttribute||"sAMAccountName",ldapUserDisplayAttribute:s.ldapUserDisplayAttribute||"displayName",ldapUserEmailAttribute:s.ldapUserEmailAttribute||"mail",ldapLoginAllowedGroupDn:s.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:s.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:s.ldapMonitorAdminGroupDn||"",ldapAiGatewaysMonitorsGroupDn:s.ldapAiGatewaysMonitorsGroupDn||"",ldapNestedGroups:!1!==s.ldapNestedGroups,ldapAllowedUsers:Array.isArray(s.ldapAllowedUsers)?s.ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!1!==s.ldapTlsRejectUnauthorized,ldapConnectTimeoutMs:s.ldapConnectTimeoutMs||8e3}),H({authMode:s.authMode||"password",oidcIssuerUrl:s.oidcIssuerUrl||"",oidcClientId:s.oidcClientId||"",oidcScopes:s.oidcScopes||"openid profile email",oidcLoginLabel:s.oidcLoginLabel||"Sign in with OIDC"}),eo(s.siteTitle||""),en(s.siteShortName||""),ec(s.siteDescription||""),("oidc"===s.authMode||"both"===s.authMode)&&ea(!0)}catch(e){console.log("Failed to fetch settings:",e)}finally{o(!1)}};(0,r.useEffect)(()=>{eN()},[]);let eD=async e=>{let s=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)}),t=await s.json().catch(()=>({}));if(!s.ok)throw Error(t.error||"Failed to save settings");return a(e=>({...e,...t})),t},eC=async s=>{et({type:"",message:""});let t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:s}));try{let e=await eD({sidebarAdvancedToolsVisible:s}),t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),et({type:"success",message:t?"Advanced tools are visible in the sidebar.":"Advanced tools are hidden from the sidebar."})}catch(e){a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),et({type:"error",message:e.message||"Failed to save sidebar setting."})}},eS=async e=>{e.preventDefault(),P({type:"",message:""});try{let e=await eD({localLoginUsername:k});L(e.localLoginUsername||k||"admin"),P({type:"success",message:"Local account name saved."})}catch(e){P({type:"error",message:e.message})}},eA=async e=>{if(e.preventDefault(),d.new!==d.confirm)return void v({type:"error",message:"Passwords do not match"});w(!0),v({type:"",message:""});try{await eD({currentPassword:d.current,newPassword:d.new}),v({type:"success",message:"Password updated successfully"}),n({current:"",new:"",confirm:""})}catch(e){v({type:"error",message:e.message||"Failed to update password"})}finally{w(!1)}},ek=async()=>{D(!0),S({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to export database")}let a=await e.json(),s=JSON.stringify(a,null,2),t=new Blob([s],{type:"application/json"}),r=URL.createObjectURL(t),l=document.createElement("a"),o=new Date().toISOString().replace(/[.:]/g,"-");l.href=r,l.download=`bluerouter-backup-${o}.json`,document.body.appendChild(l),l.click(),document.body.removeChild(l),URL.revokeObjectURL(r),S({type:"success",message:"Database backup downloaded."})}catch(e){S({type:"error",message:e.message||"Failed to export database."})}finally{D(!1)}},eL=async e=>{let a=e.target.files?.[0];if(a){D(!0),S({type:"",message:""});try{let e=await a.text(),s=JSON.parse(e),t=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),r=await t.json().catch(()=>({}));if(!t.ok)throw Error(r.error||"Failed to import database");await eN();let l=r.resourceMonitorImported?`Restored ${r.resourceMonitorServerCount||0} Resource Monitor server(s) and ${r.resourceMonitorHistoryCount||0} history sample(s).`:"Legacy backup: current Resource Monitor data was kept.",o=r.brandingImported?`Restored ${r.brandingAssetCount||0} branding asset(s).`:"Current logo and favicon were kept.";S({type:"success",message:`Database imported successfully. ${l} ${o}`})}catch(e){S({type:"error",message:e.message||"Invalid backup file."})}finally{A.current&&(A.current.value=""),D(!1)}}},eU=(e,a)=>R(s=>({...s,[e]:a})),eP=async e=>{e?.preventDefault?.(),I(!0),G({type:"",message:""});try{let e={...M,ldapBaseDn:M.ldapUserBaseDn,ldapAllowedUsers:M.ldapAllowedUsers};e.ldapBindPassword||delete e.ldapBindPassword;let a=await eD(e);R(e=>({...e,ldapBindPassword:"",ldapEnabled:!0===a.ldapEnabled,ldapUserBaseDn:a.ldapUserBaseDn||a.ldapBaseDn||e.ldapUserBaseDn,ldapLoginAllowedGroupDn:a.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:a.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:a.ldapMonitorAdminGroupDn||"",ldapAiGatewaysMonitorsGroupDn:a.ldapAiGatewaysMonitorsGroupDn||"",ldapNestedGroups:!1!==a.ldapNestedGroups,ldapAllowedUsers:Array.isArray(a.ldapAllowedUsers)?a.ldapAllowedUsers:e.ldapAllowedUsers})),G({type:"success",message:"LDAP settings saved."})}catch(e){G({type:"error",message:e.message||"Failed to save LDAP settings"})}finally{I(!1)}},eM=async()=>{T(!0),G({type:"",message:""});try{await eP();let e=await fetch("/api/auth/ldap/test",{method:"POST"}),a=await e.json().catch(()=>({}));e.ok&&a.ok?G({type:"success",message:a.message||"LDAP connection OK."}):G({type:"error",message:a.error||"LDAP test failed."})}catch(e){G({type:"error",message:e.message||"LDAP test failed."})}finally{T(!1)}},eR=async()=>{J(!0),G({type:"",message:""});try{await eP();let e=await fetch(`/api/auth/ldap/users?q=${encodeURIComponent(F)}`,{cache:"no-store"}),a=await e.json().catch(()=>({}));e.ok?(_(a.users||[]),G({type:"success",message:`Loaded ${(a.users||[]).length} LDAP user(s).`})):G({type:"error",message:a.error||"Failed to load LDAP users."})}catch(e){G({type:"error",message:e.message||"Failed to load LDAP users."})}finally{J(!1)}},eB=e=>{let a=String(e||"").trim();a&&R(e=>{let s=new Set(e.ldapAllowedUsers||[]);return s.has(a)?s.delete(a):s.add(a),{...e,ldapAllowedUsers:[...s]}})},eG=async(a=V.authMode||"password")=>{let s=V.oidcIssuerUrl.trim(),t=V.oidcClientId.trim(),r=V.oidcScopes.trim(),l=V.oidcLoginLabel.trim(),o=Q.trim();if("password"!==a&&(!s||!t||!o)&&!e.oidcConfigured)return void Z({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});Y(!0),Z({type:"",message:""});try{let e={authMode:a,oidcIssuerUrl:s,oidcClientId:t,oidcScopes:r||"openid profile email",oidcLoginLabel:l||"Sign in with OIDC"};o&&(e.oidcClientSecret=o);let d=await eD(e);H({authMode:d.authMode||a,oidcIssuerUrl:d.oidcIssuerUrl||s,oidcClientId:d.oidcClientId||t,oidcScopes:d.oidcScopes||r||"openid profile email",oidcLoginLabel:d.oidcLoginLabel||l||"Sign in with OIDC"}),K(""),Z({type:"success",message:"OIDC settings saved."})}catch(e){Z({type:"error",message:e.message||"Failed to save OIDC settings"})}finally{Y(!1)}},eE=async(e,a)=>{if(!a)return;if(a.size>1048576)return void eu({type:"error",message:"File exceeds 1 MB limit."});let s="logo"===e?eg:ey;s(!0),eu({type:"",message:""});try{let s=new FormData;s.append("asset",e),s.append("file",a);let t=await fetch("/api/branding/upload",{method:"POST",body:s}),r=await t.json().catch(()=>({}));if(!t.ok)throw Error(r.error||"Upload failed");(0,l.notifyBrandingChanged)(),eu({type:"success",message:`${"logo"===e?"Logo":"Favicon"} uploaded.`})}catch(e){eu({type:"error",message:e.message||"Upload failed."})}finally{s(!1)}},eI=async e=>{let a=e.target.files?.[0];await eE("logo",a),ej.current&&(ej.current.value="")},eO=async e=>{let a=e.target.files?.[0];await eE("favicon",a),ew.current&&(ew.current.value="")},eT=async e=>{e.preventDefault(),ex(!0),eu({type:"",message:""});try{await eD({siteTitle:el.trim(),siteShortName:ed.trim(),siteDescription:ei.trim()}),(0,l.notifyBrandingChanged)(),eu({type:"success",message:"Branding text saved."})}catch(e){eu({type:"error",message:e.message||"Failed to save branding."})}finally{ex(!1)}},eF=async e=>{eu({type:"",message:""});try{let a=await fetch(`/api/branding?asset=${e}`,{method:"DELETE"}),s=await a.json().catch(()=>({}));if(!a.ok)throw Error(s.error||"Failed to remove asset");(0,l.notifyBrandingChanged)(),eu({type:"success",message:`${"logo"===e?"Logo":"Favicon"} removed.`})}catch(e){eu({type:"error",message:e.message||"Failed to remove asset."})}},eq=async()=>{ev(!0),eu({type:"",message:""});try{let e=await fetch("/api/branding",{method:"DELETE"});if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to reset branding")}await eD({siteTitle:"",siteShortName:"",siteDescription:""}),eo(""),en(""),ec(""),(0,l.notifyBrandingChanged)(),eu({type:"success",message:"Branding reset to defaults."})}catch(e){eu({type:"error",message:e.message||"Failed to reset branding."})}finally{ev(!1)}};return s?(0,t.jsx)("div",{className:"p-8 text-text-muted",children:"Loading settings..."}):(0,t.jsxs)("div",{className:"mx-auto max-w-6xl space-y-6 p-6",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("h1",{className:"text-3xl font-bold text-text-main",children:"Settings"}),(0,t.jsx)("p",{className:"mt-1 text-text-muted",children:"Configure dashboard preferences, request logging, database backup, and authentication."})]}),(0,t.jsxs)(b,{icon:"view_sidebar",title:"Sidebar tools",desc:"Show or hide advanced dashboard tools to keep the sidebar clean.",children:[(0,t.jsx)(f,{title:"Show Advanced tools",desc:"When disabled, Media / Web, AI Traffic Gateway, CLI Tools, Proxy Pools, Skills, Console Log and Translator are hidden from the sidebar. Core admin pages remain visible.",checked:!1!==e.sidebarAdvancedToolsVisible,onChange:eC}),(0,t.jsx)(x,{status:es})]}),(0,t.jsxs)(b,{icon:"palette",title:"Branding",desc:"Customize site title, logo and favicon shown in the dashboard, browser tab and login page. Max 1 MB per file.",children:[(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:"Logo"}),(0,t.jsxs)("div",{className:"flex items-center gap-4 rounded-xl border border-border bg-background p-4",children:[(0,t.jsx)("div",{className:"flex h-16 w-16 shrink-0 items-center justify-center overflow-hidden rounded-lg border border-border bg-surface",children:er?.logoUrl?(0,t.jsx)("img",{src:er.logoUrl,alt:"Current logo",className:"max-h-full max-w-full object-contain"}):(0,t.jsx)("span",{className:"material-symbols-outlined text-text-muted",children:"hub"})}),(0,t.jsxs)("div",{className:"flex-1 space-y-2",children:[(0,t.jsx)("div",{className:"text-xs text-text-muted",children:"Shown in the dashboard sidebar and login page. SVG, PNG, WebP, JPEG, GIF."}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"button",disabled:eb,onClick:()=>ej.current?.click(),className:"rounded-xl bg-primary px-3 py-1.5 text-xs font-semibold text-white disabled:opacity-50",children:eb?"Uploading...":er?.logoUrl?"Replace logo":"Upload logo"}),er?.logoUrl?(0,t.jsx)("button",{type:"button",onClick:()=>eF("logo"),className:"rounded-xl border border-border px-3 py-1.5 text-xs font-semibold text-text-main hover:border-red-300 hover:text-red-600",children:"Remove"}):null]})]}),(0,t.jsx)("input",{ref:ej,type:"file",accept:u,className:"hidden",onChange:eI})]})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:"Favicon"}),(0,t.jsxs)("div",{className:"flex items-center gap-4 rounded-xl border border-border bg-background p-4",children:[(0,t.jsx)("div",{className:"flex h-16 w-16 shrink-0 items-center justify-center overflow-hidden rounded-lg border border-border bg-surface",children:er?.faviconUrl?(0,t.jsx)("img",{src:er.faviconUrl,alt:"Current favicon",className:"max-h-10 max-w-10 object-contain"}):(0,t.jsx)("span",{className:"material-symbols-outlined text-text-muted",children:"public"})}),(0,t.jsxs)("div",{className:"flex-1 space-y-2",children:[(0,t.jsx)("div",{className:"text-xs text-text-muted",children:"Shown in the browser tab. ICO, SVG, PNG, WebP, JPEG, GIF."}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"button",disabled:eh,onClick:()=>ew.current?.click(),className:"rounded-xl bg-primary px-3 py-1.5 text-xs font-semibold text-white disabled:opacity-50",children:eh?"Uploading...":er?.faviconUrl?"Replace favicon":"Upload favicon"}),er?.faviconUrl?(0,t.jsx)("button",{type:"button",onClick:()=>eF("favicon"),className:"rounded-xl border border-border px-3 py-1.5 text-xs font-semibold text-text-main hover:border-red-300 hover:text-red-600",children:"Remove"}):null]})]}),(0,t.jsx)("input",{ref:ew,type:"file",accept:m,className:"hidden",onChange:eO})]})]})]}),(0,t.jsxs)("form",{onSubmit:eT,className:"space-y-3",children:[(0,t.jsx)(g,{label:"Site title",hint:"Shown in browser tab and login page. Leave blank for default.",children:(0,t.jsx)(h,{value:el,onChange:e=>eo(e.target.value),placeholder:"AI Router Gateway"})}),(0,t.jsx)(g,{label:"Company short name",hint:"Shown in dashboard sidebar and login hero text. Defaults to site title/sidebar default or 'Fujinet' on login.",children:(0,t.jsx)(h,{value:ed,onChange:e=>en(e.target.value),placeholder:"Fujinet"})}),(0,t.jsx)(g,{label:"Description",hint:"Used for browser metadata.",children:(0,t.jsx)(y,{rows:3,value:ei,onChange:e=>ec(e.target.value),placeholder:"AI Infrastructure Management"})}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"submit",disabled:em,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:em?"Saving...":"Save branding text"}),(0,t.jsx)("button",{type:"button",disabled:ef,onClick:eq,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-red-300 hover:text-red-600 disabled:opacity-50",children:ef?"Resetting...":"Reset to defaults"})]})]})]}),(0,t.jsx)(x,{status:ep})]}),(0,t.jsx)(b,{icon:"shield",title:"Dashboard Login",desc:"Local account remains available even when LDAP is enabled.",children:(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("form",{onSubmit:eS,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local account"}),(0,t.jsx)(g,{label:"Local username",children:(0,t.jsx)(h,{value:k,onChange:e=>L(e.target.value)})}),(0,t.jsx)("button",{className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white",children:"Save account"}),(0,t.jsx)(x,{status:U})]}),(0,t.jsxs)("form",{onSubmit:eA,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local password"}),e.hasPassword&&(0,t.jsx)(g,{label:"Current password",children:(0,t.jsx)(h,{type:"password",value:d.current,onChange:e=>n({...d,current:e.target.value}),required:!0})}),(0,t.jsx)(g,{label:"New password",children:(0,t.jsx)(h,{type:"password",value:d.new,onChange:e=>n({...d,new:e.target.value}),required:!0})}),(0,t.jsx)(g,{label:"Confirm password",children:(0,t.jsx)(h,{type:"password",value:d.confirm,onChange:e=>n({...d,confirm:e.target.value}),required:!0})}),(0,t.jsx)("button",{disabled:j,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:e.hasPassword?"Update Password":"Set Password"}),(0,t.jsx)(x,{status:i})]})]})}),(0,t.jsx)("div",{id:"request-logging",className:"scroll-mt-6",children:(0,t.jsx)(c,{})}),(0,t.jsxs)(b,{icon:"database",title:"Database Backup",desc:"Export or restore configuration, Linux Resource Monitor data, logo and favicon.",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-3",children:[(0,t.jsx)("button",{onClick:ek,disabled:N,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"Download Backup"}),(0,t.jsx)("button",{onClick:()=>A.current?.click(),disabled:N,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-primary/50 disabled:opacity-50",children:"Import Backup"}),(0,t.jsx)("input",{ref:A,type:"file",accept:"application/json",className:"hidden",onChange:eL})]}),(0,t.jsx)("p",{className:"text-xs text-text-muted",children:"Backup files contain API credentials, Resource Monitor agent tokens and embedded branding images. Store them securely. Legacy backups keep current Resource Monitor and branding files."}),(0,t.jsx)(x,{status:C})]}),(0,t.jsx)(b,{icon:"corporate_fare",title:"LDAP / Active Directory Login",desc:"Search users from a User Base DN, restrict login by group DN, and grant admin by group DN. The old Selected LDAP users list is kept as a manual admin list.",children:(0,t.jsxs)("form",{onSubmit:eP,className:"space-y-5",children:[(0,t.jsx)("div",{className:"flex flex-wrap gap-3",children:(0,t.jsx)("button",{type:"button",onClick:()=>eU("ldapEnabled",!M.ldapEnabled),className:`rounded-xl px-3 py-2 text-sm font-semibold ${M.ldapEnabled?"bg-primary text-white":"border border-border text-text-muted"}`,children:M.ldapEnabled?"Enabled":"Disabled"})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"LDAP URL",children:(0,t.jsx)(h,{value:M.ldapUrl,onChange:e=>eU("ldapUrl",e.target.value),placeholder:"ldap://dc01.company.local:389"})}),(0,t.jsx)(g,{label:"LDAP User Base DN",hint:"OU/container/domain where user objects are searched. Do not use a group DN here.",children:(0,t.jsx)(h,{value:M.ldapUserBaseDn,onChange:e=>eU("ldapUserBaseDn",e.target.value),placeholder:"OU=Users,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Bind DN",children:(0,t.jsx)(h,{value:M.ldapBindDn,onChange:e=>eU("ldapBindDn",e.target.value),placeholder:"CN=svc-bluerouter,OU=Service Accounts,DC=company,DC=local"})}),(0,t.jsx)(g,{label:"LDAP Bind Password",children:(0,t.jsx)(h,{type:"password",value:M.ldapBindPassword,onChange:e=>eU("ldapBindPassword",e.target.value),placeholder:e.ldapHasBindPassword?"Saved — leave blank to keep":"Service account password"})}),(0,t.jsx)(g,{label:"LDAP Login Allowed Group DN",hint:"Only members of this group can log in. Leave blank to allow any valid LDAP user.",children:(0,t.jsx)(h,{value:M.ldapLoginAllowedGroupDn,onChange:e=>eU("ldapLoginAllowedGroupDn",e.target.value),placeholder:"CN=Apikeys_Groups,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Admin Group DN",hint:"Members of this group get full admin dashboard access.",children:(0,t.jsx)(h,{value:M.ldapAdminGroupDn,onChange:e=>eU("ldapAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Monitor Admin Group DN",hint:"Members can use only Endpoint, API Keys, Usage, Analytics, Quota Tracker and Prompt Logs with admin-like permissions inside those tabs.",children:(0,t.jsx)(h,{value:M.ldapMonitorAdminGroupDn,onChange:e=>eU("ldapMonitorAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Monitor_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP AI Gateways Monitors Group DN",hint:"Members log in as regular users but the Analytics page aggregates statistics for every API key that has an owner, instead of only their own keys.",children:(0,t.jsx)(h,{value:M.ldapAiGatewaysMonitorsGroupDn,onChange:e=>eU("ldapAiGatewaysMonitorsGroupDn",e.target.value),placeholder:"CN=BlueRouter_AI_Gateways_Monitors,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})})]}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"User search filter",hint:"Use {{username}} placeholder.",children:(0,t.jsx)(h,{value:M.ldapUserSearchFilter,onChange:e=>eU("ldapUserSearchFilter",e.target.value)})}),(0,t.jsx)(g,{label:"Login group mode",hint:"Nested groups uses AD matching rule 1.2.840.113556.1.4.1941.",children:(0,t.jsx)(f,{title:"Nested group membership",desc:"Recommended for Active Directory nested groups.",checked:M.ldapNestedGroups,onChange:e=>eU("ldapNestedGroups",e)})}),(0,t.jsx)(g,{label:"Username attribute",children:(0,t.jsx)(h,{value:M.ldapUserNameAttribute,onChange:e=>eU("ldapUserNameAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Display attribute",children:(0,t.jsx)(h,{value:M.ldapUserDisplayAttribute,onChange:e=>eU("ldapUserDisplayAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Email attribute",children:(0,t.jsx)(h,{value:M.ldapUserEmailAttribute,onChange:e=>eU("ldapUserEmailAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Connect timeout ms",children:(0,t.jsx)(h,{type:"number",value:M.ldapConnectTimeoutMs,onChange:e=>eU("ldapConnectTimeoutMs",e.target.value)})})]}),(0,t.jsx)(f,{title:"Reject invalid TLS certificates",desc:"Disable only for test/self-signed LDAP TLS.",checked:M.ldapTlsRejectUnauthorized,onChange:e=>eU("ldapTlsRejectUnauthorized",e)}),(0,t.jsxs)("div",{className:"rounded-2xl border border-border bg-background p-4",children:[(0,t.jsxs)("div",{className:"mb-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Manual admin users / LDAP owner list"}),(0,t.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Users loaded here come from Login Allowed Group DN when set. Selected users are also treated as manual admins for backward compatibility."})]}),(0,t.jsxs)("div",{className:"mb-3 flex gap-2",children:[(0,t.jsx)(h,{value:F,onChange:e=>q(e.target.value),placeholder:"Search users..."}),(0,t.jsx)("button",{type:"button",onClick:eR,disabled:z,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:z?"Loading...":"Load users"})]}),$.length>0&&(0,t.jsx)("div",{className:"max-h-72 overflow-auto rounded-xl border border-border",children:$.map(e=>{let a=M.ldapAllowedUsers.includes(e.username);return(0,t.jsxs)("button",{type:"button",onClick:()=>eB(e.username),className:`flex w-full items-center justify-between gap-3 border-b border-border px-3 py-2 text-left text-sm last:border-b-0 ${a?"bg-primary/10":"bg-background hover:bg-surface"}`,children:[(0,t.jsxs)("span",{children:[(0,t.jsx)("span",{className:"font-semibold text-text-main",children:e.displayName||e.username}),(0,t.jsxs)("span",{className:"ml-2 text-text-muted",children:[e.username,e.email?` \xb7 ${e.email}`:""]})]}),(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:a?"check_circle":"radio_button_unchecked"})]},e.dn||e.username)})}),(0,t.jsxs)("div",{className:"mt-3",children:[(0,t.jsxs)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:["Selected manual admin users (",M.ldapAllowedUsers.length,")"]}),0===M.ldapAllowedUsers.length?(0,t.jsx)("div",{className:"text-sm text-text-muted",children:"No users selected."}):(0,t.jsx)("div",{className:"flex flex-wrap gap-2",children:M.ldapAllowedUsers.map(e=>(0,t.jsxs)("button",{type:"button",onClick:()=>eB(e),className:"rounded-full border border-primary/30 bg-primary/10 px-3 py-1 text-xs text-primary",children:[e," \xd7"]},e))})]})]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-3",children:[(0,t.jsx)("button",{type:"button",onClick:eM,disabled:O,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:O?"Testing...":"Save & test LDAP"}),(0,t.jsx)("button",{type:"submit",disabled:E,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:E?"Saving...":"Save LDAP settings"})]}),(0,t.jsx)(x,{status:B})]})}),(0,t.jsxs)(b,{icon:"lock_open",title:"OIDC Dashboard Login",desc:"oidc"===e.authMode?"OIDC active":"both"===e.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google",children:[(0,t.jsx)("button",{type:"button",onClick:()=>ea(e=>!e),className:"mb-4 rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main",children:ee?"Hide OIDC settings":"Show OIDC settings"}),ee&&(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-3",children:[{value:"password",title:"Password/LDAP",desc:"Keep local and LDAP login."},{value:"oidc",title:"OIDC only",desc:"Disable local/LDAP login when configured."},{value:"both",title:"Both",desc:"Allow either OIDC or local/LDAP."}].map(e=>{let a=V.authMode===e.value;return(0,t.jsxs)("button",{type:"button",onClick:()=>H(a=>({...a,authMode:e.value})),className:`rounded-xl border p-3 text-left ${a?"border-primary bg-primary/10":"border-border bg-background hover:border-primary/40"}`,children:[(0,t.jsx)("div",{className:"font-semibold text-text-main",children:e.title}),(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:e.desc})]},e.value)})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"Issuer URL",children:(0,t.jsx)(h,{value:V.oidcIssuerUrl,onChange:e=>H({...V,oidcIssuerUrl:e.target.value})})}),(0,t.jsx)(g,{label:"Client ID",children:(0,t.jsx)(h,{value:V.oidcClientId,onChange:e=>H({...V,oidcClientId:e.target.value})})}),(0,t.jsx)(g,{label:"Client Secret",children:(0,t.jsx)(h,{type:"password",value:Q,onChange:e=>K(e.target.value),placeholder:e.oidcConfigured?"Saved — leave blank to keep":"Client secret"})}),(0,t.jsx)(g,{label:"Scopes",children:(0,t.jsx)(h,{value:V.oidcScopes,onChange:e=>H({...V,oidcScopes:e.target.value})})}),(0,t.jsx)(g,{label:"Login label",children:(0,t.jsx)(h,{value:V.oidcLoginLabel,onChange:e=>H({...V,oidcLoginLabel:e.target.value})})})]}),(0,t.jsx)("button",{type:"button",onClick:()=>eG(),disabled:X,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:X?"Saving...":"Save OIDC settings"}),(0,t.jsx)(x,{status:W})]})]})]})}}},e=>{e.O(0,[2574,3862,506,9959,1997,5564,5263,5497,8441,3794,7358],()=>e(e.s=7973)),_N_E=e.O()}]);
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3471],{7973:(e,a,s)=>{Promise.resolve().then(s.bind(s,38658))},38658:(e,a,s)=>{"use strict";s.r(a),s.d(a,{default:()=>v});var t=s(95155),r=s(12115),l=s(44656),o=s(35497);let d={enabled:!1,fileLoggingEnabled:!1,type:"mysql",host:"",port:"",database:"",username:"",password:"",ssl:!1,createDatabase:!1,logClientRequest:!0,logSourceRequest:!0,logTargetRequest:!0,logProviderResponse:!1,logErrors:!0,retentionDays:30,payloadRotationEnabled:!1,payloadRetentionDays:60,payloadRotationIntervalHours:24,payloadRotationBatchSize:500,payloadRotationMaxBatches:20};function n({label:e,value:a,onChange:s,type:r="text",placeholder:l="",disabled:o=!1,min:d,max:i,step:c}){return(0,t.jsxs)("label",{className:"flex flex-col gap-1 text-xs",children:[(0,t.jsx)("span",{className:"text-text-muted",children:e}),(0,t.jsx)("input",{type:r,value:a||"",placeholder:l,disabled:o,min:d,max:i,step:c,onChange:e=>s(e.target.value),className:"w-full rounded border border-border bg-surface px-2 py-1.5 text-xs text-text-main focus:outline-none focus:ring-1 focus:ring-primary/50 disabled:opacity-50"})]})}function i({label:e,checked:a,onChange:s,disabled:r=!1}){return(0,t.jsxs)("label",{className:"flex items-center gap-2 text-xs text-text-main",children:[(0,t.jsx)("input",{type:"checkbox",checked:!!a,disabled:r,onChange:e=>s(e.target.checked)}),e]})}function c(){let[e,a]=(0,r.useState)(d),[s,l]=(0,r.useState)(!1),[c,p]=(0,r.useState)(null),[u,m]=(0,r.useState)(null),[x,b]=(0,r.useState)(null),g=e=>a(a=>({...a,...e})),h=async()=>{l(!0),m(null);try{let e=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db"),s=await e.json();if(!e.ok)throw Error(s.error||"Failed to load config");a({...d,...s.config||{}})}catch(e){m(e.message||"Failed to load config")}finally{l(!1)}};(0,r.useEffect)(()=>{h()},[]);let y=async()=>{l(!0),m(null),p(null);try{let s=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({config:e})}),t=await s.json();if(!s.ok)throw Error(t.error||"Failed to save config");a({...d,...t.config||{}}),p("Saved")}catch(e){m(e.message||"Failed to save config")}finally{l(!1)}},f=async(a,s={})=>{if(!s.confirm||window.confirm("Delete expired full request/response payloads now? Prompt log rows, previews, token/model/provider metadata, and analytics are kept. This action cannot restore deleted payload JSON.")){l(!0),m(null),p(null),a.includes("payload-rotation")&&b(null);try{let t=await fetch("/api/cli-tools/antigravity-mitm/prompt-log-db",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({action:a,config:e,confirm:!0===s.confirm})}),r=await t.json();if(!t.ok)throw Error(r.error||"Action failed");a.includes("payload-rotation")&&b(r),p(r.message||r.init?.message||"OK")}catch(e){m(e.message||"Action failed")}finally{l(!1)}}},v="postgres"===e.type||"mysql"===e.type;return(0,t.jsx)(o.Zp,{title:"Request Logging",subtitle:"Control local request files and database-backed prompt logs",icon:"receipt_long",children:(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,t.jsxs)(o.Ex,{variant:e.fileLoggingEnabled?"success":"default",children:["Local files: ",e.fileLoggingEnabled?"Enabled":"Disabled"]}),(0,t.jsxs)(o.Ex,{variant:e.enabled?"success":"default",children:["Database: ",e.enabled?"Enabled":"Disabled"]})]}),(0,t.jsx)("div",{className:"rounded-lg border border-yellow-500/30 bg-yellow-500/10 p-3 text-xs text-yellow-700 dark:text-yellow-300",children:'Prompt logs may contain source code, selected code, internal URLs, user prompts, and provider responses. Checked stages store full raw JSON; prompt/response text columns keep only short previews. Per-combo "hide content" still redacts raw JSON.'}),(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-2",children:(0,t.jsxs)("label",{className:"flex flex-col gap-1 text-xs",children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Database type"}),(0,t.jsxs)("select",{value:e.type,disabled:s,onChange:a=>{let s=a.target.value;g({type:s,port:"postgres"===s?e.port||"5432":"mysql"===s?e.port||"3306":e.port})},className:"w-full rounded border border-border bg-surface px-2 py-1.5 text-xs text-text-main focus:outline-none focus:ring-1 focus:ring-primary/50",children:[(0,t.jsx)("option",{value:"mysql",children:"MySQL / MariaDB"}),(0,t.jsx)("option",{value:"postgres",children:"PostgreSQL"})]})]})}),v&&(0,t.jsxs)("div",{className:"grid gap-3 md:grid-cols-2",children:[(0,t.jsx)(n,{label:"Host",value:e.host,placeholder:"127.0.0.1",onChange:e=>g({host:e}),disabled:s}),(0,t.jsx)(n,{label:"Port",value:e.port,placeholder:"postgres"===e.type?"5432":"3306",onChange:e=>g({port:e}),disabled:s}),(0,t.jsx)(n,{label:"Database",value:e.database,placeholder:"bluerouter_logs",onChange:e=>g({database:e}),disabled:s}),(0,t.jsx)(n,{label:"Username",value:e.username,placeholder:"bluerouter",onChange:e=>g({username:e}),disabled:s}),(0,t.jsx)(n,{label:"Password",type:"password",value:e.password,placeholder:"Leave as ******** to keep existing password",onChange:e=>g({password:e}),disabled:s}),(0,t.jsxs)("div",{className:"flex flex-col justify-end gap-2",children:[(0,t.jsx)(i,{label:"Use SSL",checked:e.ssl,onChange:e=>g({ssl:e}),disabled:s}),(0,t.jsx)(i,{label:"Create database if missing",checked:e.createDatabase,onChange:e=>g({createDatabase:e}),disabled:s})]})]}),(0,t.jsxs)("div",{className:"grid gap-2 rounded-lg border border-border bg-surface/40 p-3 md:grid-cols-2",children:[(0,t.jsx)(i,{label:"Save request/response to local files",checked:e.fileLoggingEnabled,onChange:e=>g({fileLoggingEnabled:e}),disabled:s}),(0,t.jsx)(i,{label:"Save request/response to Prompt Log Database",checked:e.enabled,onChange:e=>g({enabled:e}),disabled:s}),(0,t.jsx)(i,{label:"Log client request JSON",checked:e.logClientRequest,onChange:e=>g({logClientRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log normalized/source request JSON",checked:e.logSourceRequest,onChange:e=>g({logSourceRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log target/provider request JSON",checked:e.logTargetRequest,onChange:e=>g({logTargetRequest:e}),disabled:s}),(0,t.jsx)(i,{label:"Log provider response JSON",checked:e.logProviderResponse,onChange:e=>g({logProviderResponse:e}),disabled:s}),(0,t.jsx)(i,{label:"Log errors",checked:e.logErrors,onChange:e=>g({logErrors:e}),disabled:s})]}),(0,t.jsxs)("div",{className:"rounded-lg border border-border bg-background p-3 text-xs text-text-muted",children:["Local files are written under ",(0,t.jsx)("code",{children:"DATA_DIR/logs/requests"}),". Disabling local files stops new request/response dump files; existing files are kept."]}),(0,t.jsxs)("div",{className:"space-y-3 rounded-xl border border-border bg-surface/40 p-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:"Full payload rotation"}),(0,t.jsxs)("div",{className:"mt-1 text-xs text-text-muted",children:["Deletes expired full request/response JSON only. Rows in ",(0,t.jsx)("code",{children:"prompt_logs"}),", short previews, model/provider/token metadata, and dashboard analytics remain available."]})]}),(0,t.jsx)(i,{label:"Enable automatic payload rotation",checked:e.payloadRotationEnabled,onChange:e=>g({payloadRotationEnabled:e}),disabled:s}),(0,t.jsxs)("div",{className:"grid gap-3 md:grid-cols-2 lg:grid-cols-4",children:[(0,t.jsx)(n,{label:"Keep full payload for (days)",type:"number",min:1,max:3650,step:1,value:String(e.payloadRetentionDays||60),onChange:e=>g({payloadRetentionDays:Number(e)||60}),disabled:s}),(0,t.jsx)(n,{label:"Automatic run interval (hours)",type:"number",min:1,max:168,step:1,value:String(e.payloadRotationIntervalHours||24),onChange:e=>g({payloadRotationIntervalHours:Number(e)||24}),disabled:s}),(0,t.jsx)(n,{label:"Prompt-log rows per transaction",type:"number",min:50,max:5e3,step:50,value:String(e.payloadRotationBatchSize||500),onChange:e=>g({payloadRotationBatchSize:Number(e)||500}),disabled:s}),(0,t.jsx)(n,{label:"Max transactions per run",type:"number",min:1,max:200,step:1,value:String(e.payloadRotationMaxBatches||20),onChange:e=>g({payloadRotationMaxBatches:Number(e)||20}),disabled:s})]}),(0,t.jsxs)("div",{className:"rounded-lg border border-blue-500/30 bg-blue-500/10 p-3 text-xs text-blue-700 dark:text-blue-300",children:["MySQL: payload hashes are detached from expired ",(0,t.jsx)("code",{children:"prompt_logs"})," rows, then rows in ",(0,t.jsx)("code",{children:"prompt_log_payloads"})," are deleted only when no prompt log still references them. Each batch uses a transaction and a database advisory lock to prevent overlapping rotation jobs."]}),(0,t.jsxs)("div",{className:"rounded-lg border border-amber-500/30 bg-amber-500/10 p-3 text-xs text-amber-700 dark:text-amber-300",children:["Deleting rows frees reusable space inside InnoDB, but ",(0,t.jsx)("code",{children:"prompt_log_payloads.ibd"})," normally does not shrink immediately. Do not run ",(0,t.jsx)("code",{children:"OPTIMIZE TABLE"})," on a very large table without checking temporary disk space and a maintenance window."]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("preview-payload-rotation"),loading:s,children:"Preview expired payloads"}),(0,t.jsx)(o.$n,{size:"sm",variant:"danger",onClick:()=>f("run-payload-rotation",{confirm:!0}),loading:s,children:"Delete expired payloads now"})]}),x&&(0,t.jsxs)("div",{className:"grid gap-2 rounded-lg border border-border bg-background p-3 text-xs md:grid-cols-2 lg:grid-cols-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Cutoff:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:x.cutoff?new Date(x.cutoff).toLocaleString():"-"})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:"Prompt-log rows:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:Number(x.promptLogRows??x.promptLogRowsUpdated??0).toLocaleString()})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:void 0===x.payloadRowsDeleted?"Payload rows past retention:":"Payload rows deleted:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:Number(x.payloadRowsDeleted??x.payloadRowsPastRetention??0).toLocaleString()})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("span",{className:"text-text-muted",children:void 0===x.payloadBytesDeleted?"Estimated payload size:":"Payload size deleted:"})," ",(0,t.jsx)("span",{className:"text-text-main",children:function(e){let a=Number(e||0);if(!Number.isFinite(a)||a<=0)return"0 B";let s=["B","KB","MB","GB","TB"],t=Math.min(s.length-1,Math.floor(Math.log(a)/Math.log(1024))),r=a/1024**t;return`${r.toFixed(r>=10||0===t?1:2)} ${s[t]}`}(x.payloadBytesDeleted??x.payloadBytesPastRetention??x.referencedPayloadBytes)})]}),x.hasMore?(0,t.jsx)("div",{className:"md:col-span-2 lg:col-span-4 text-amber-600",children:"More expired rows remain because the per-run batch limit was reached."}):null]}),(0,t.jsx)("div",{className:"text-[11px] text-text-muted",children:"Save the settings after enabling automatic rotation. Preview and manual deletion use the values currently shown in this form."})]}),v&&(0,t.jsxs)("div",{className:"rounded-lg border border-blue-500/30 bg-blue-500/10 p-3 text-xs text-blue-700 dark:text-blue-300",children:["Prompt logs now support MySQL/MariaDB and PostgreSQL only. MySQL/MariaDB requires ",(0,t.jsx)("code",{children:"mysql2"}),"; PostgreSQL requires ",(0,t.jsx)("code",{children:"pg"}),"."]}),c&&(0,t.jsx)("div",{className:"rounded-lg border border-green-500/30 bg-green-500/10 p-2 text-xs text-green-600",children:c}),u&&(0,t.jsx)("div",{className:"rounded-lg border border-red-500/30 bg-red-500/10 p-2 text-xs text-red-500",children:u}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:h,loading:s,children:"Reload"}),(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("test"),loading:s,children:"Test connection"}),(0,t.jsx)(o.$n,{size:"sm",variant:"secondary",onClick:()=>f("init"),loading:s,children:"Initialize schema"}),(0,t.jsx)(o.$n,{size:"sm",onClick:y,loading:s,children:"Save"}),(0,t.jsx)(o.$n,{size:"sm",variant:"success",onClick:()=>f("save-and-init"),loading:s,children:"Save & initialize"})]})]})})}let p="(|(sAMAccountName={{username}})(userPrincipalName={{username}})(mail={{username}}))",u="image/svg+xml,image/png,image/webp,image/jpeg,image/gif",m=`${u},image/x-icon,image/vnd.microsoft.icon,.ico`;function x({status:e}){if(!e?.message)return null;let a="error"===e.type?"text-red-600 bg-red-50 border-red-200":"text-green-700 bg-green-50 border-green-200";return(0,t.jsx)("div",{className:`mt-3 rounded-xl border px-4 py-3 text-sm ${a}`,children:e.message})}function b({icon:e,title:a,desc:s,children:r}){return(0,t.jsxs)("section",{className:"rounded-2xl border border-border bg-surface p-6 shadow-sm",children:[(0,t.jsxs)("div",{className:"mb-5 flex items-start gap-3",children:[e&&(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:e}),(0,t.jsxs)("div",{children:[(0,t.jsx)("h2",{className:"text-xl font-bold text-text-main",children:a}),s&&(0,t.jsx)("p",{className:"mt-1 text-sm text-text-muted",children:s})]})]}),r]})}function g({label:e,hint:a,children:s}){return(0,t.jsxs)("label",{className:"block",children:[(0,t.jsx)("span",{className:"mb-1 block text-sm font-semibold text-text-main",children:e}),s,a&&(0,t.jsx)("span",{className:"mt-1 block text-xs text-text-muted",children:a})]})}function h(e){return(0,t.jsx)("input",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function y(e){return(0,t.jsx)("textarea",{...e,className:`w-full rounded-xl border border-border bg-background px-3 py-2 text-sm outline-none focus:border-primary ${e.className||""}`})}function f({title:e,desc:a,checked:s,onChange:r,disabled:l}){return(0,t.jsxs)("div",{className:"flex items-start justify-between gap-4 rounded-xl border border-border bg-background px-4 py-3",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"text-sm font-semibold text-text-main",children:e}),a&&(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:a})]}),(0,t.jsx)("button",{type:"button",disabled:l,onClick:()=>r(!s),className:`relative mt-0.5 h-6 w-11 rounded-full transition disabled:opacity-50 ${s?"bg-primary":"bg-border"}`,children:(0,t.jsx)("span",{className:`absolute top-0.5 h-5 w-5 rounded-full bg-white transition ${s?"left-5":"left-0.5"}`})})]})}function v(){let[e,a]=(0,r.useState)({}),[s,o]=(0,r.useState)(!0),[d,n]=(0,r.useState)({current:"",new:"",confirm:""}),[i,v]=(0,r.useState)({type:"",message:""}),[j,w]=(0,r.useState)(!1),[N,D]=(0,r.useState)(!1),[C,S]=(0,r.useState)({type:"",message:""}),A=(0,r.useRef)(null),[k,L]=(0,r.useState)("admin"),[U,P]=(0,r.useState)({type:"",message:""}),[M,R]=(0,r.useState)({ldapEnabled:!1,ldapUrl:"",ldapBindDn:"",ldapBindPassword:"",ldapUserBaseDn:"",ldapUserSearchFilter:p,ldapUserNameAttribute:"sAMAccountName",ldapUserDisplayAttribute:"displayName",ldapUserEmailAttribute:"mail",ldapLoginAllowedGroupDn:"",ldapAdminGroupDn:"",ldapMonitorAdminGroupDn:"",ldapAiGatewaysMonitorsGroupDn:"",ldapNestedGroups:!0,ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!0,ldapConnectTimeoutMs:8e3}),[B,G]=(0,r.useState)({type:"",message:""}),[E,I]=(0,r.useState)(!1),[O,T]=(0,r.useState)(!1),[F,q]=(0,r.useState)(""),[$,_]=(0,r.useState)([]),[z,J]=(0,r.useState)(!1),[V,H]=(0,r.useState)({authMode:"password",oidcIssuerUrl:"",oidcClientId:"",oidcScopes:"openid profile email",oidcLoginLabel:"Sign in with OIDC"}),[Q,K]=(0,r.useState)(""),[W,Z]=(0,r.useState)({type:"",message:""}),[X,Y]=(0,r.useState)(!1),[ee,ea]=(0,r.useState)(!1),[es,et]=(0,r.useState)({type:"",message:""}),er=(0,l.useBranding)(),[el,eo]=(0,r.useState)(""),[ed,en]=(0,r.useState)(""),[ei,ec]=(0,r.useState)(""),[ep,eu]=(0,r.useState)({type:"",message:""}),[em,ex]=(0,r.useState)(!1),[eb,eg]=(0,r.useState)(!1),[eh,ey]=(0,r.useState)(!1),[ef,ev]=(0,r.useState)(!1),ej=(0,r.useRef)(null),ew=(0,r.useRef)(null),eN=async()=>{o(!0);try{let e=await fetch("/api/settings",{cache:"no-store"}),s=await e.json();a(s),L(s.localLoginUsername||"admin"),R({ldapEnabled:!0===s.ldapEnabled,ldapUrl:s.ldapUrl||"",ldapBindDn:s.ldapBindDn||"",ldapBindPassword:"",ldapUserBaseDn:s.ldapUserBaseDn||s.ldapBaseDn||"",ldapUserSearchFilter:s.ldapUserSearchFilter||p,ldapUserNameAttribute:s.ldapUserNameAttribute||"sAMAccountName",ldapUserDisplayAttribute:s.ldapUserDisplayAttribute||"displayName",ldapUserEmailAttribute:s.ldapUserEmailAttribute||"mail",ldapLoginAllowedGroupDn:s.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:s.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:s.ldapMonitorAdminGroupDn||"",ldapAiGatewaysMonitorsGroupDn:s.ldapAiGatewaysMonitorsGroupDn||"",ldapNestedGroups:!1!==s.ldapNestedGroups,ldapAllowedUsers:Array.isArray(s.ldapAllowedUsers)?s.ldapAllowedUsers:[],ldapTlsRejectUnauthorized:!1!==s.ldapTlsRejectUnauthorized,ldapConnectTimeoutMs:s.ldapConnectTimeoutMs||8e3}),H({authMode:s.authMode||"password",oidcIssuerUrl:s.oidcIssuerUrl||"",oidcClientId:s.oidcClientId||"",oidcScopes:s.oidcScopes||"openid profile email",oidcLoginLabel:s.oidcLoginLabel||"Sign in with OIDC"}),eo(s.siteTitle||""),en(s.siteShortName||""),ec(s.siteDescription||""),("oidc"===s.authMode||"both"===s.authMode)&&ea(!0)}catch(e){console.log("Failed to fetch settings:",e)}finally{o(!1)}};(0,r.useEffect)(()=>{eN()},[]);let eD=async e=>{let s=await fetch("/api/settings",{method:"PATCH",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)}),t=await s.json().catch(()=>({}));if(!s.ok)throw Error(t.error||"Failed to save settings");return a(e=>({...e,...t})),t},eC=async s=>{et({type:"",message:""});let t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:s}));try{let e=await eD({sidebarAdvancedToolsVisible:s}),t=!1!==e.sidebarAdvancedToolsVisible;a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),et({type:"success",message:t?"Advanced tools are visible in the sidebar.":"Advanced tools are hidden from the sidebar."})}catch(e){a(e=>({...e,sidebarAdvancedToolsVisible:t})),window.dispatchEvent(new CustomEvent("bluerouter:sidebar-advanced-tools",{detail:{visible:t}})),et({type:"error",message:e.message||"Failed to save sidebar setting."})}},eS=async e=>{e.preventDefault(),P({type:"",message:""});try{let e=await eD({localLoginUsername:k});L(e.localLoginUsername||k||"admin"),P({type:"success",message:"Local account name saved."})}catch(e){P({type:"error",message:e.message})}},eA=async e=>{if(e.preventDefault(),d.new!==d.confirm)return void v({type:"error",message:"Passwords do not match"});w(!0),v({type:"",message:""});try{await eD({currentPassword:d.current,newPassword:d.new}),v({type:"success",message:"Password updated successfully"}),n({current:"",new:"",confirm:""})}catch(e){v({type:"error",message:e.message||"Failed to update password"})}finally{w(!1)}},ek=async()=>{D(!0),S({type:"",message:""});try{let e=await fetch("/api/settings/database");if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to export database")}let a=await e.json(),s=JSON.stringify(a,null,2),t=new Blob([s],{type:"application/json"}),r=URL.createObjectURL(t),l=document.createElement("a"),o=new Date().toISOString().replace(/[.:]/g,"-");l.href=r,l.download=`bluerouter-backup-${o}.json`,document.body.appendChild(l),l.click(),document.body.removeChild(l),URL.revokeObjectURL(r),S({type:"success",message:"Database backup downloaded."})}catch(e){S({type:"error",message:e.message||"Failed to export database."})}finally{D(!1)}},eL=async e=>{let a=e.target.files?.[0];if(a){D(!0),S({type:"",message:""});try{let e=await a.text(),s=JSON.parse(e),t=await fetch("/api/settings/database",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(s)}),r=await t.json().catch(()=>({}));if(!t.ok)throw Error(r.error||"Failed to import database");await eN();let l=r.resourceMonitorImported?`Restored ${r.resourceMonitorServerCount||0} Resource Monitor server(s) and ${r.resourceMonitorHistoryCount||0} history sample(s).`:"Legacy backup: current Resource Monitor data was kept.",o=r.brandingImported?`Restored ${r.brandingAssetCount||0} branding asset(s).`:"Current logo and favicon were kept.";S({type:"success",message:`Database imported successfully. ${l} ${o}`})}catch(e){S({type:"error",message:e.message||"Invalid backup file."})}finally{A.current&&(A.current.value=""),D(!1)}}},eU=(e,a)=>R(s=>({...s,[e]:a})),eP=async e=>{e?.preventDefault?.(),I(!0),G({type:"",message:""});try{let e={...M,ldapBaseDn:M.ldapUserBaseDn,ldapAllowedUsers:M.ldapAllowedUsers};e.ldapBindPassword||delete e.ldapBindPassword;let a=await eD(e);R(e=>({...e,ldapBindPassword:"",ldapEnabled:!0===a.ldapEnabled,ldapUserBaseDn:a.ldapUserBaseDn||a.ldapBaseDn||e.ldapUserBaseDn,ldapLoginAllowedGroupDn:a.ldapLoginAllowedGroupDn||"",ldapAdminGroupDn:a.ldapAdminGroupDn||"",ldapMonitorAdminGroupDn:a.ldapMonitorAdminGroupDn||"",ldapAiGatewaysMonitorsGroupDn:a.ldapAiGatewaysMonitorsGroupDn||"",ldapNestedGroups:!1!==a.ldapNestedGroups,ldapAllowedUsers:Array.isArray(a.ldapAllowedUsers)?a.ldapAllowedUsers:e.ldapAllowedUsers})),G({type:"success",message:"LDAP settings saved."})}catch(e){G({type:"error",message:e.message||"Failed to save LDAP settings"})}finally{I(!1)}},eM=async()=>{T(!0),G({type:"",message:""});try{await eP();let e=await fetch("/api/auth/ldap/test",{method:"POST"}),a=await e.json().catch(()=>({}));e.ok&&a.ok?G({type:"success",message:a.message||"LDAP connection OK."}):G({type:"error",message:a.error||"LDAP test failed."})}catch(e){G({type:"error",message:e.message||"LDAP test failed."})}finally{T(!1)}},eR=async()=>{J(!0),G({type:"",message:""});try{await eP();let e=await fetch(`/api/auth/ldap/users?q=${encodeURIComponent(F)}`,{cache:"no-store"}),a=await e.json().catch(()=>({}));e.ok?(_(a.users||[]),G({type:"success",message:`Loaded ${(a.users||[]).length} LDAP user(s).`})):G({type:"error",message:a.error||"Failed to load LDAP users."})}catch(e){G({type:"error",message:e.message||"Failed to load LDAP users."})}finally{J(!1)}},eB=e=>{let a=String(e||"").trim();a&&R(e=>{let s=new Set(e.ldapAllowedUsers||[]);return s.has(a)?s.delete(a):s.add(a),{...e,ldapAllowedUsers:[...s]}})},eG=async(a=V.authMode||"password")=>{let s=V.oidcIssuerUrl.trim(),t=V.oidcClientId.trim(),r=V.oidcScopes.trim(),l=V.oidcLoginLabel.trim(),o=Q.trim();if("password"!==a&&(!s||!t||!o)&&!e.oidcConfigured)return void Z({type:"error",message:"Issuer URL, client ID, and client secret are required to enable OIDC."});Y(!0),Z({type:"",message:""});try{let e={authMode:a,oidcIssuerUrl:s,oidcClientId:t,oidcScopes:r||"openid profile email",oidcLoginLabel:l||"Sign in with OIDC"};o&&(e.oidcClientSecret=o);let d=await eD(e);H({authMode:d.authMode||a,oidcIssuerUrl:d.oidcIssuerUrl||s,oidcClientId:d.oidcClientId||t,oidcScopes:d.oidcScopes||r||"openid profile email",oidcLoginLabel:d.oidcLoginLabel||l||"Sign in with OIDC"}),K(""),Z({type:"success",message:"OIDC settings saved."})}catch(e){Z({type:"error",message:e.message||"Failed to save OIDC settings"})}finally{Y(!1)}},eE=async(e,a)=>{if(!a)return;if(a.size>1048576)return void eu({type:"error",message:"File exceeds 1 MB limit."});let s="logo"===e?eg:ey;s(!0),eu({type:"",message:""});try{let s=new FormData;s.append("asset",e),s.append("file",a);let t=await fetch("/api/branding/upload",{method:"POST",body:s}),r=await t.json().catch(()=>({}));if(!t.ok)throw Error(r.error||"Upload failed");(0,l.notifyBrandingChanged)(),eu({type:"success",message:`${"logo"===e?"Logo":"Favicon"} uploaded.`})}catch(e){eu({type:"error",message:e.message||"Upload failed."})}finally{s(!1)}},eI=async e=>{let a=e.target.files?.[0];await eE("logo",a),ej.current&&(ej.current.value="")},eO=async e=>{let a=e.target.files?.[0];await eE("favicon",a),ew.current&&(ew.current.value="")},eT=async e=>{e.preventDefault(),ex(!0),eu({type:"",message:""});try{await eD({siteTitle:el.trim(),siteShortName:ed.trim(),siteDescription:ei.trim()}),(0,l.notifyBrandingChanged)(),eu({type:"success",message:"Branding text saved."})}catch(e){eu({type:"error",message:e.message||"Failed to save branding."})}finally{ex(!1)}},eF=async e=>{eu({type:"",message:""});try{let a=await fetch(`/api/branding?asset=${e}`,{method:"DELETE"}),s=await a.json().catch(()=>({}));if(!a.ok)throw Error(s.error||"Failed to remove asset");(0,l.notifyBrandingChanged)(),eu({type:"success",message:`${"logo"===e?"Logo":"Favicon"} removed.`})}catch(e){eu({type:"error",message:e.message||"Failed to remove asset."})}},eq=async()=>{ev(!0),eu({type:"",message:""});try{let e=await fetch("/api/branding",{method:"DELETE"});if(!e.ok){let a=await e.json().catch(()=>({}));throw Error(a.error||"Failed to reset branding")}await eD({siteTitle:"",siteShortName:"",siteDescription:""}),eo(""),en(""),ec(""),(0,l.notifyBrandingChanged)(),eu({type:"success",message:"Branding reset to defaults."})}catch(e){eu({type:"error",message:e.message||"Failed to reset branding."})}finally{ev(!1)}};return s?(0,t.jsx)("div",{className:"p-8 text-text-muted",children:"Loading settings..."}):(0,t.jsxs)("div",{className:"mx-auto max-w-6xl space-y-6 p-6",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("h1",{className:"text-3xl font-bold text-text-main",children:"Settings"}),(0,t.jsx)("p",{className:"mt-1 text-text-muted",children:"Configure dashboard preferences, request logging, database backup, and authentication."})]}),(0,t.jsxs)(b,{icon:"view_sidebar",title:"Sidebar tools",desc:"Show or hide advanced dashboard tools to keep the sidebar clean.",children:[(0,t.jsx)(f,{title:"Show Advanced tools",desc:"When disabled, Media / Web, AI Traffic Gateway, CLI Tools, Proxy Pools, Skills, Console Log and Translator are hidden from the sidebar. Core admin pages remain visible.",checked:!1!==e.sidebarAdvancedToolsVisible,onChange:eC}),(0,t.jsx)(x,{status:es})]}),(0,t.jsxs)(b,{icon:"palette",title:"Branding",desc:"Customize site title, logo and favicon shown in the dashboard, browser tab and login page. Max 1 MB per file.",children:[(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:"Logo"}),(0,t.jsxs)("div",{className:"flex items-center gap-4 rounded-xl border border-border bg-background p-4",children:[(0,t.jsx)("div",{className:"flex h-16 w-16 shrink-0 items-center justify-center overflow-hidden rounded-lg border border-border bg-surface",children:er?.logoUrl?(0,t.jsx)("img",{src:er.logoUrl,alt:"Current logo",className:"max-h-full max-w-full object-contain"}):(0,t.jsx)("span",{className:"material-symbols-outlined text-text-muted",children:"hub"})}),(0,t.jsxs)("div",{className:"flex-1 space-y-2",children:[(0,t.jsx)("div",{className:"text-xs text-text-muted",children:"Shown in the dashboard sidebar and login page. SVG, PNG, WebP, JPEG, GIF."}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"button",disabled:eb,onClick:()=>ej.current?.click(),className:"rounded-xl bg-primary px-3 py-1.5 text-xs font-semibold text-white disabled:opacity-50",children:eb?"Uploading...":er?.logoUrl?"Replace logo":"Upload logo"}),er?.logoUrl?(0,t.jsx)("button",{type:"button",onClick:()=>eF("logo"),className:"rounded-xl border border-border px-3 py-1.5 text-xs font-semibold text-text-main hover:border-red-300 hover:text-red-600",children:"Remove"}):null]})]}),(0,t.jsx)("input",{ref:ej,type:"file",accept:u,className:"hidden",onChange:eI})]})]}),(0,t.jsxs)("div",{children:[(0,t.jsx)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:"Favicon"}),(0,t.jsxs)("div",{className:"flex items-center gap-4 rounded-xl border border-border bg-background p-4",children:[(0,t.jsx)("div",{className:"flex h-16 w-16 shrink-0 items-center justify-center overflow-hidden rounded-lg border border-border bg-surface",children:er?.faviconUrl?(0,t.jsx)("img",{src:er.faviconUrl,alt:"Current favicon",className:"max-h-10 max-w-10 object-contain"}):(0,t.jsx)("span",{className:"material-symbols-outlined text-text-muted",children:"public"})}),(0,t.jsxs)("div",{className:"flex-1 space-y-2",children:[(0,t.jsx)("div",{className:"text-xs text-text-muted",children:"Shown in the browser tab. ICO, SVG, PNG, WebP, JPEG, GIF."}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"button",disabled:eh,onClick:()=>ew.current?.click(),className:"rounded-xl bg-primary px-3 py-1.5 text-xs font-semibold text-white disabled:opacity-50",children:eh?"Uploading...":er?.faviconUrl?"Replace favicon":"Upload favicon"}),er?.faviconUrl?(0,t.jsx)("button",{type:"button",onClick:()=>eF("favicon"),className:"rounded-xl border border-border px-3 py-1.5 text-xs font-semibold text-text-main hover:border-red-300 hover:text-red-600",children:"Remove"}):null]})]}),(0,t.jsx)("input",{ref:ew,type:"file",accept:m,className:"hidden",onChange:eO})]})]})]}),(0,t.jsxs)("form",{onSubmit:eT,className:"space-y-3",children:[(0,t.jsx)(g,{label:"Site title",hint:"Shown in browser tab and login page. Leave blank for default.",children:(0,t.jsx)(h,{value:el,onChange:e=>eo(e.target.value),placeholder:"AI Router Gateway"})}),(0,t.jsx)(g,{label:"Company short name",hint:"Shown in dashboard sidebar and login hero text. Defaults to site title/sidebar default or 'Fujinet' on login.",children:(0,t.jsx)(h,{value:ed,onChange:e=>en(e.target.value),placeholder:"Fujinet"})}),(0,t.jsx)(g,{label:"Description",hint:"Used for browser metadata.",children:(0,t.jsx)(y,{rows:3,value:ei,onChange:e=>ec(e.target.value),placeholder:"AI Infrastructure Management"})}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-2",children:[(0,t.jsx)("button",{type:"submit",disabled:em,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:em?"Saving...":"Save branding text"}),(0,t.jsx)("button",{type:"button",disabled:ef,onClick:eq,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-red-300 hover:text-red-600 disabled:opacity-50",children:ef?"Resetting...":"Reset to defaults"})]})]})]}),(0,t.jsx)(x,{status:ep})]}),(0,t.jsx)(b,{icon:"shield",title:"Dashboard Login",desc:"Local account remains available even when LDAP is enabled.",children:(0,t.jsxs)("div",{className:"grid gap-6 lg:grid-cols-2",children:[(0,t.jsxs)("form",{onSubmit:eS,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local account"}),(0,t.jsx)(g,{label:"Local username",children:(0,t.jsx)(h,{value:k,onChange:e=>L(e.target.value)})}),(0,t.jsx)("button",{className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white",children:"Save account"}),(0,t.jsx)(x,{status:U})]}),(0,t.jsxs)("form",{onSubmit:eA,className:"space-y-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Local password"}),e.hasPassword&&(0,t.jsx)(g,{label:"Current password",children:(0,t.jsx)(h,{type:"password",value:d.current,onChange:e=>n({...d,current:e.target.value}),required:!0})}),(0,t.jsx)(g,{label:"New password",children:(0,t.jsx)(h,{type:"password",value:d.new,onChange:e=>n({...d,new:e.target.value}),required:!0})}),(0,t.jsx)(g,{label:"Confirm password",children:(0,t.jsx)(h,{type:"password",value:d.confirm,onChange:e=>n({...d,confirm:e.target.value}),required:!0})}),(0,t.jsx)("button",{disabled:j,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:e.hasPassword?"Update Password":"Set Password"}),(0,t.jsx)(x,{status:i})]})]})}),(0,t.jsx)("div",{id:"request-logging",className:"scroll-mt-6",children:(0,t.jsx)(c,{})}),(0,t.jsxs)(b,{icon:"database",title:"Database Backup",desc:"Export or restore configuration, Linux Resource Monitor data, logo and favicon.",children:[(0,t.jsxs)("div",{className:"flex flex-wrap items-center gap-3",children:[(0,t.jsx)("button",{onClick:ek,disabled:N,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:"Download Backup"}),(0,t.jsx)("button",{onClick:()=>A.current?.click(),disabled:N,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main hover:border-primary/50 disabled:opacity-50",children:"Import Backup"}),(0,t.jsx)("input",{ref:A,type:"file",accept:"application/json",className:"hidden",onChange:eL})]}),(0,t.jsx)("p",{className:"text-xs text-text-muted",children:"Backup files contain API credentials, Resource Monitor agent tokens and embedded branding images. Store them securely. Legacy backups keep current Resource Monitor and branding files."}),(0,t.jsx)(x,{status:C})]}),(0,t.jsx)(b,{icon:"corporate_fare",title:"LDAP / Active Directory Login",desc:"Search users from a User Base DN, restrict login by group DN, and grant admin by group DN. The old Selected LDAP users list is kept as a manual admin list.",children:(0,t.jsxs)("form",{onSubmit:eP,className:"space-y-5",children:[(0,t.jsx)("div",{className:"flex flex-wrap gap-3",children:(0,t.jsx)("button",{type:"button",onClick:()=>eU("ldapEnabled",!M.ldapEnabled),className:`rounded-xl px-3 py-2 text-sm font-semibold ${M.ldapEnabled?"bg-primary text-white":"border border-border text-text-muted"}`,children:M.ldapEnabled?"Enabled":"Disabled"})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"LDAP URL",children:(0,t.jsx)(h,{value:M.ldapUrl,onChange:e=>eU("ldapUrl",e.target.value),placeholder:"ldap://dc01.company.local:389"})}),(0,t.jsx)(g,{label:"LDAP User Base DN",hint:"OU/container/domain where user objects are searched. Do not use a group DN here.",children:(0,t.jsx)(h,{value:M.ldapUserBaseDn,onChange:e=>eU("ldapUserBaseDn",e.target.value),placeholder:"OU=Users,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Bind DN",children:(0,t.jsx)(h,{value:M.ldapBindDn,onChange:e=>eU("ldapBindDn",e.target.value),placeholder:"CN=svc-bluerouter,OU=Service Accounts,DC=company,DC=local"})}),(0,t.jsx)(g,{label:"LDAP Bind Password",children:(0,t.jsx)(h,{type:"password",value:M.ldapBindPassword,onChange:e=>eU("ldapBindPassword",e.target.value),placeholder:e.ldapHasBindPassword?"Saved — leave blank to keep":"Service account password"})}),(0,t.jsx)(g,{label:"LDAP Login Allowed Group DN",hint:"Only members of this group can log in. Leave blank to allow any valid LDAP user.",children:(0,t.jsx)(h,{value:M.ldapLoginAllowedGroupDn,onChange:e=>eU("ldapLoginAllowedGroupDn",e.target.value),placeholder:"CN=Apikeys_Groups,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Admin Group DN",hint:"Members of this group get full admin dashboard access.",children:(0,t.jsx)(h,{value:M.ldapAdminGroupDn,onChange:e=>eU("ldapAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP Monitor Admin Group DN",hint:"Members can use only Endpoint, API Keys, Usage, Analytics, Quota Tracker and Prompt Logs with admin-like permissions inside those tabs.",children:(0,t.jsx)(h,{value:M.ldapMonitorAdminGroupDn,onChange:e=>eU("ldapMonitorAdminGroupDn",e.target.value),placeholder:"CN=BlueRouter_Monitor_Admins,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})}),(0,t.jsx)(g,{label:"LDAP AI Gateways Monitors Group DN",hint:"Members log in as regular users but the Analytics page aggregates statistics for every API key that has an owner, instead of only their own keys.",children:(0,t.jsx)(h,{value:M.ldapAiGatewaysMonitorsGroupDn,onChange:e=>eU("ldapAiGatewaysMonitorsGroupDn",e.target.value),placeholder:"CN=BlueRouter_AI_Gateways_Monitors,OU=AppGroups,OU=xxx,DC=xx,DC=vn"})})]}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"User search filter",hint:"Use {{username}} placeholder.",children:(0,t.jsx)(h,{value:M.ldapUserSearchFilter,onChange:e=>eU("ldapUserSearchFilter",e.target.value)})}),(0,t.jsx)(g,{label:"Login group mode",hint:"Nested groups uses AD matching rule 1.2.840.113556.1.4.1941.",children:(0,t.jsx)(f,{title:"Nested group membership",desc:"Recommended for Active Directory nested groups.",checked:M.ldapNestedGroups,onChange:e=>eU("ldapNestedGroups",e)})}),(0,t.jsx)(g,{label:"Username attribute",children:(0,t.jsx)(h,{value:M.ldapUserNameAttribute,onChange:e=>eU("ldapUserNameAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Display attribute",children:(0,t.jsx)(h,{value:M.ldapUserDisplayAttribute,onChange:e=>eU("ldapUserDisplayAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Email attribute",children:(0,t.jsx)(h,{value:M.ldapUserEmailAttribute,onChange:e=>eU("ldapUserEmailAttribute",e.target.value)})}),(0,t.jsx)(g,{label:"Connect timeout ms",children:(0,t.jsx)(h,{type:"number",value:M.ldapConnectTimeoutMs,onChange:e=>eU("ldapConnectTimeoutMs",e.target.value)})})]}),(0,t.jsx)(f,{title:"Reject invalid TLS certificates",desc:"Disable only for test/self-signed LDAP TLS.",checked:M.ldapTlsRejectUnauthorized,onChange:e=>eU("ldapTlsRejectUnauthorized",e)}),(0,t.jsxs)("div",{className:"rounded-2xl border border-border bg-background p-4",children:[(0,t.jsxs)("div",{className:"mb-3",children:[(0,t.jsx)("h3",{className:"font-semibold text-text-main",children:"Manual admin users / LDAP owner list"}),(0,t.jsx)("p",{className:"mt-1 text-xs text-text-muted",children:"Users loaded here come from Login Allowed Group DN when set. Selected users are also treated as manual admins for backward compatibility."})]}),(0,t.jsxs)("div",{className:"mb-3 flex gap-2",children:[(0,t.jsx)(h,{value:F,onChange:e=>q(e.target.value),placeholder:"Search users..."}),(0,t.jsx)("button",{type:"button",onClick:eR,disabled:z,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:z?"Loading...":"Load users"})]}),$.length>0&&(0,t.jsx)("div",{className:"max-h-72 overflow-auto rounded-xl border border-border",children:$.map(e=>{let a=M.ldapAllowedUsers.includes(e.username);return(0,t.jsxs)("button",{type:"button",onClick:()=>eB(e.username),className:`flex w-full items-center justify-between gap-3 border-b border-border px-3 py-2 text-left text-sm last:border-b-0 ${a?"bg-primary/10":"bg-background hover:bg-surface"}`,children:[(0,t.jsxs)("span",{children:[(0,t.jsx)("span",{className:"font-semibold text-text-main",children:e.displayName||e.username}),(0,t.jsxs)("span",{className:"ml-2 text-text-muted",children:[e.username,e.email?` \xb7 ${e.email}`:""]})]}),(0,t.jsx)("span",{className:"material-symbols-outlined text-primary",children:a?"check_circle":"radio_button_unchecked"})]},e.dn||e.username)})}),(0,t.jsxs)("div",{className:"mt-3",children:[(0,t.jsxs)("div",{className:"mb-2 text-sm font-semibold text-text-main",children:["Selected manual admin users (",M.ldapAllowedUsers.length,")"]}),0===M.ldapAllowedUsers.length?(0,t.jsx)("div",{className:"text-sm text-text-muted",children:"No users selected."}):(0,t.jsx)("div",{className:"flex flex-wrap gap-2",children:M.ldapAllowedUsers.map(e=>(0,t.jsxs)("button",{type:"button",onClick:()=>eB(e),className:"rounded-full border border-primary/30 bg-primary/10 px-3 py-1 text-xs text-primary",children:[e," \xd7"]},e))})]})]}),(0,t.jsxs)("div",{className:"flex flex-wrap gap-3",children:[(0,t.jsx)("button",{type:"button",onClick:eM,disabled:O,className:"rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main disabled:opacity-50",children:O?"Testing...":"Save & test LDAP"}),(0,t.jsx)("button",{type:"submit",disabled:E,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:E?"Saving...":"Save LDAP settings"})]}),(0,t.jsx)(x,{status:B})]})}),(0,t.jsxs)(b,{icon:"lock_open",title:"OIDC Dashboard Login",desc:"oidc"===e.authMode?"OIDC active":"both"===e.authMode?"Password + OIDC active":"Optional SSO via Authentik/Keycloak/Google",children:[(0,t.jsx)("button",{type:"button",onClick:()=>ea(e=>!e),className:"mb-4 rounded-xl border border-border px-4 py-2 text-sm font-semibold text-text-main",children:ee?"Hide OIDC settings":"Show OIDC settings"}),ee&&(0,t.jsxs)("div",{className:"space-y-4",children:[(0,t.jsx)("div",{className:"grid gap-3 md:grid-cols-3",children:[{value:"password",title:"Password/LDAP",desc:"Keep local and LDAP login."},{value:"oidc",title:"OIDC only",desc:"Disable local/LDAP login when configured."},{value:"both",title:"Both",desc:"Allow either OIDC or local/LDAP."}].map(e=>{let a=V.authMode===e.value;return(0,t.jsxs)("button",{type:"button",onClick:()=>H(a=>({...a,authMode:e.value})),className:`rounded-xl border p-3 text-left ${a?"border-primary bg-primary/10":"border-border bg-background hover:border-primary/40"}`,children:[(0,t.jsx)("div",{className:"font-semibold text-text-main",children:e.title}),(0,t.jsx)("div",{className:"mt-1 text-xs text-text-muted",children:e.desc})]},e.value)})}),(0,t.jsxs)("div",{className:"grid gap-4 lg:grid-cols-2",children:[(0,t.jsx)(g,{label:"Issuer URL",children:(0,t.jsx)(h,{value:V.oidcIssuerUrl,onChange:e=>H({...V,oidcIssuerUrl:e.target.value})})}),(0,t.jsx)(g,{label:"Client ID",children:(0,t.jsx)(h,{value:V.oidcClientId,onChange:e=>H({...V,oidcClientId:e.target.value})})}),(0,t.jsx)(g,{label:"Client Secret",children:(0,t.jsx)(h,{type:"password",value:Q,onChange:e=>K(e.target.value),placeholder:e.oidcConfigured?"Saved — leave blank to keep":"Client secret"})}),(0,t.jsx)(g,{label:"Scopes",children:(0,t.jsx)(h,{value:V.oidcScopes,onChange:e=>H({...V,oidcScopes:e.target.value})})}),(0,t.jsx)(g,{label:"Login label",children:(0,t.jsx)(h,{value:V.oidcLoginLabel,onChange:e=>H({...V,oidcLoginLabel:e.target.value})})})]}),(0,t.jsx)("button",{type:"button",onClick:()=>eG(),disabled:X,className:"rounded-xl bg-primary px-4 py-2 text-sm font-semibold text-white disabled:opacity-50",children:X?"Saving...":"Save OIDC settings"}),(0,t.jsx)(x,{status:W})]})]})]})}}},e=>{e.O(0,[2574,3862,2691,9959,1997,5564,5263,5497,8441,3794,7358],()=>e(e.s=7973)),_N_E=e.O()}]);