@lovelybunch/api 1.0.78-alpha.2 → 1.0.78-alpha.4

package/dist/routes/api/v1/jobs/[id]/route.d.ts

@@ -12,6 +12,16 @@ export declare function GET(c: Context): Promise<(Response & import("hono").Type
         id: string;
         name: string;
         status: ScheduledJobStatus;
+        tags?: string[];
+        description?: string;
+        model: string;
+        metadata: {
+            createdAt: string;
+            updatedAt: string;
+            lastRunAt?: string;
+            nextRunAt?: string;
+        };
+        prompt: string;
         schedule: {
             type: "cron";
             expression: string;
@@ -24,16 +34,6 @@ export declare function GET(c: Context): Promise<(Response & import("hono").Type
             timezone?: string;
             anchorHour?: number;
         };
-        description?: string;
-        prompt: string;
-        model: string;
-        metadata: {
-            createdAt: string;
-            updatedAt: string;
-            lastRunAt?: string;
-            nextRunAt?: string;
-        };
-        tags?: string[];
         contextPaths?: string[];
         agentId?: string;
         agentIds?: string[];
@@ -73,6 +73,16 @@ export declare function PATCH(c: Context): Promise<(Response & import("hono").Ty
         id: string;
         name: string;
         status: ScheduledJobStatus;
+        tags?: string[];
+        description?: string;
+        model: string;
+        metadata: {
+            createdAt: string;
+            updatedAt: string;
+            lastRunAt?: string;
+            nextRunAt?: string;
+        };
+        prompt: string;
         schedule: {
             type: "cron";
             expression: string;
@@ -85,16 +95,6 @@ export declare function PATCH(c: Context): Promise<(Response & import("hono").Ty
             timezone?: string;
             anchorHour?: number;
         };
-        description?: string;
-        prompt: string;
-        model: string;
-        metadata: {
-            createdAt: string;
-            updatedAt: string;
-            lastRunAt?: string;
-            nextRunAt?: string;
-        };
-        tags?: string[];
         contextPaths?: string[];
         agentId?: string;
         agentIds?: string[];

package/dist/routes/api/v1/jobs/route.d.ts

@@ -14,6 +14,16 @@ export declare function GET(c: Context): Promise<(Response & import("hono").Type
         id: string;
         name: string;
         status: ScheduledJobStatus;
+        tags?: string[];
+        description?: string;
+        model: string;
+        metadata: {
+            createdAt: string;
+            updatedAt: string;
+            lastRunAt?: string;
+            nextRunAt?: string;
+        };
+        prompt: string;
         schedule: {
             type: "cron";
             expression: string;
@@ -26,16 +36,6 @@ export declare function GET(c: Context): Promise<(Response & import("hono").Type
             timezone?: string;
             anchorHour?: number;
         };
-        description?: string;
-        prompt: string;
-        model: string;
-        metadata: {
-            createdAt: string;
-            updatedAt: string;
-            lastRunAt?: string;
-            nextRunAt?: string;
-        };
-        tags?: string[];
         contextPaths?: string[];
         agentId?: string;
         agentIds?: string[];
@@ -69,6 +69,16 @@ export declare function POST(c: Context): Promise<(Response & import("hono").Typ
         id: string;
         name: string;
         status: ScheduledJobStatus;
+        tags?: string[];
+        description?: string;
+        model: string;
+        metadata: {
+            createdAt: string;
+            updatedAt: string;
+            lastRunAt?: string;
+            nextRunAt?: string;
+        };
+        prompt: string;
         schedule: {
             type: "cron";
             expression: string;
@@ -81,16 +91,6 @@ export declare function POST(c: Context): Promise<(Response & import("hono").Typ
             timezone?: string;
             anchorHour?: number;
         };
-        description?: string;
-        prompt: string;
-        model: string;
-        metadata: {
-            createdAt: string;
-            updatedAt: string;
-            lastRunAt?: string;
-            nextRunAt?: string;
-        };
-        tags?: string[];
         contextPaths?: string[];
         agentId?: string;
         agentIds?: string[];

package/dist/routes/api/v1/knowledge/[filename]/route.js

@@ -47,6 +47,22 @@ function generateFilename(title) {
         .replace(/^-|-$/g, '') // Remove leading/trailing hyphens
         + '.md';
 }
+function resolveKnowledgeFile(knowledgePath, filename) {
+    const actualFilename = filename.endsWith('.md') ? filename : `${filename}.md`;
+    if (!actualFilename ||
+        actualFilename.includes('/') ||
+        actualFilename.includes('\\') ||
+        actualFilename.split(/[\\/]/).some(part => part === '..')) {
+        throw new Error('Invalid knowledge filename');
+    }
+    const resolvedBase = path.resolve(knowledgePath);
+    const filePath = path.resolve(resolvedBase, actualFilename);
+    const relative = path.relative(resolvedBase, filePath);
+    if (relative === '' || relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error('Invalid knowledge filename');
+    }
+    return { actualFilename, filePath };
+}
 /**
  * GET /api/v1/knowledge/:filename
  * Load a specific knowledge document
@@ -55,8 +71,7 @@ app.get('/:filename', async (c) => {
     try {
         const filename = c.req.param('filename');
         const knowledgePath = getKnowledgePath();
-        const actualFilename = filename.endsWith('.md') ? filename : `${filename}.md`;
-        const filePath = path.join(knowledgePath, actualFilename);
+        const { actualFilename, filePath } = resolveKnowledgeFile(knowledgePath, filename);
         const [fileContent, stats] = await Promise.all([
             fs.readFile(filePath, 'utf-8'),
             fs.stat(filePath)
@@ -84,6 +99,9 @@ app.get('/:filename', async (c) => {
         });
     }
     catch (error) {
+        if (error.message === 'Invalid knowledge filename') {
+            return c.json({ success: false, error: 'Invalid knowledge filename' }, 400);
+        }
         if (error.code === 'ENOENT') {
             return c.json({ success: false, error: 'Knowledge document not found' }, 404);
         }
@@ -100,8 +118,7 @@ app.put('/:filename', async (c) => {
         const filename = c.req.param('filename');
         const body = await c.req.json();
         const knowledgePath = getKnowledgePath();
-        const actualFilename = filename.endsWith('.md') ? filename : `${filename}.md`;
-        const filePath = path.join(knowledgePath, actualFilename);
+        const { actualFilename, filePath } = resolveKnowledgeFile(knowledgePath, filename);
         // Check if file exists
         try {
             await fs.access(filePath);
@@ -136,7 +153,7 @@ app.put('/:filename', async (c) => {
         // Only rename file if title explicitly changed
         if (titleChanged) {
             newFilename = generateFilename(newTitle);
-            newFilePath = path.join(knowledgePath, newFilename);
+            newFilePath = resolveKnowledgeFile(knowledgePath, newFilename).filePath;
             // Check if new filename conflicts with existing file (unless it's the same file)
             if (newFilename !== actualFilename) {
                 try {
@@ -189,6 +206,9 @@ app.put('/:filename', async (c) => {
         });
     }
     catch (error) {
+        if (error.message === 'Invalid knowledge filename') {
+            return c.json({ success: false, error: 'Invalid knowledge filename' }, 400);
+        }
         console.error('Error updating knowledge document:', error);
         return c.json({ success: false, error: 'Failed to update knowledge document' }, 500);
     }
@@ -201,8 +221,7 @@ app.delete('/:filename', async (c) => {
     try {
         const filename = c.req.param('filename');
         const knowledgePath = getKnowledgePath();
-        const actualFilename = filename.endsWith('.md') ? filename : `${filename}.md`;
-        const filePath = path.join(knowledgePath, actualFilename);
+        const { actualFilename, filePath } = resolveKnowledgeFile(knowledgePath, filename);
         // Check if file exists
         try {
             await fs.access(filePath);
@@ -247,6 +266,9 @@ app.delete('/:filename', async (c) => {
         });
     }
     catch (error) {
+        if (error.message === 'Invalid knowledge filename') {
+            return c.json({ success: false, error: 'Invalid knowledge filename' }, 400);
+        }
         console.error('Error deleting knowledge document:', error);
         return c.json({ success: false, error: 'Failed to delete knowledge document' }, 500);
     }

package/dist/routes/api/v1/knowledge/route.js

@@ -3,7 +3,7 @@ import { promises as fs } from 'fs';
 import path from 'path';
 import matter from 'gray-matter';
 import filenameRoute from './[filename]/index.js';
-import { listKnowledge } from '@lovelybunch/core';
+import { listKnowledge, sanitizeProvidedFilename } from '@lovelybunch/core';
 import { getLogger, KnowledgeKinds } from '@lovelybunch/core/logging';
 import { requireAuth } from '../../../../middleware/auth.js';
 // Helper function to generate a simple summary from content
@@ -104,12 +104,22 @@ app.post('/', async (c) => {
         }
         const knowledgePath = getKnowledgePath();
         await fs.mkdir(knowledgePath, { recursive: true });
-        const filename = generateFilename(body.title);
+        let filename;
+        if (typeof body.filename === 'string' && body.filename.trim().length > 0) {
+            const sanitized = sanitizeProvidedFilename(body.filename);
+            if (!sanitized) {
+                return c.json({ success: false, error: 'Invalid filename' }, 400);
+            }
+            filename = sanitized;
+        }
+        else {
+            filename = generateFilename(body.title);
+        }
         const filePath = path.join(knowledgePath, filename);
         // Check if file already exists
         try {
             await fs.access(filePath);
-            return c.json({ success: false, error: 'A document with this title already exists' }, 409);
+            return c.json({ success: false, error: 'A document with this filename already exists' }, 409);
         }
         catch {
             // File doesn't exist, which is what we want

package/dist/routes/api/v1/terminal/[taskId]/create/route.js

@@ -1,5 +1,6 @@
 import { getGlobalTerminalManager } from '../../../../../../lib/terminal/global-manager.js';
 import { loadUserSettings } from '../../../../../../lib/user-preferences.js';
+import { getAuthPrincipalKey } from '../../../../../../middleware/auth.js';
 export async function POST(c) {
     try {
         const taskId = c.req.param('taskId');
@@ -13,7 +14,7 @@ export async function POST(c) {
         const shellPreference = (userSettings.preferences.terminalShell || 'bash');
         // Create a new terminal session for this task
         const terminalManager = getGlobalTerminalManager();
-        const session = await terminalManager.createSession(taskId, shellPreference, startupCommand);
+        const session = await terminalManager.createSession(taskId, shellPreference, startupCommand, getAuthPrincipalKey(c));
         return c.json({
             sessionId: session.id,
             taskId: session.taskId,

package/dist/routes/api/v1/terminal/[taskId]/destroy/route.js

@@ -1,4 +1,5 @@
 import { getGlobalTerminalManager } from '../../../../../../lib/terminal/global-manager.js';
+import { getAuthPrincipalKey } from '../../../../../../middleware/auth.js';
 export async function POST(c) {
     try {
         const taskId = c.req.param('taskId');
@@ -8,7 +9,7 @@ export async function POST(c) {
             return c.json({ error: 'Session ID is required' }, 400);
         }
         const terminalManager = getGlobalTerminalManager();
-        const success = terminalManager.destroySession(sessionId);
+        const success = terminalManager.destroySession(sessionId, getAuthPrincipalKey(c));
         if (!success) {
             return c.json({ error: 'Session not found' }, 404);
         }

package/dist/routes/api/v1/terminal/[taskId]/resize/route.js

@@ -1,4 +1,5 @@
 import { getGlobalTerminalManager } from '../../../../../../lib/terminal/global-manager.js';
+import { getAuthPrincipalKey } from '../../../../../../middleware/auth.js';
 export async function POST(c) {
     try {
         const taskId = c.req.param('taskId');
@@ -8,7 +9,7 @@ export async function POST(c) {
             return c.json({ error: 'Session ID, cols, and rows are required' }, 400);
         }
         const terminalManager = getGlobalTerminalManager();
-        const success = terminalManager.resizeSession(sessionId, cols, rows);
+        const success = terminalManager.resizeSession(sessionId, cols, rows, getAuthPrincipalKey(c));
         if (!success) {
             return c.json({ error: 'Session not found or resize failed' }, 404);
         }

package/dist/routes/api/v1/terminal/code/route.js

@@ -5,6 +5,7 @@ import matter from 'gray-matter';
 import { getGlobalTerminalManager } from '../../../../../lib/terminal/global-manager.js';
 import { loadUserSettings } from '../../../../../lib/user-preferences.js';
 import { FileStorageAdapter } from '../../../../../lib/storage/file-storage.js';
+import { getAuthPrincipalKey } from '../../../../../middleware/auth.js';
 import { buildPipelineScript, buildPipelineBanner } from '@lovelybunch/core';
 const storage = new FileStorageAdapter();
 const VALID_AGENTS = ['claude', 'gemini', 'codex', 'droid', 'kiro'];
@@ -143,7 +144,7 @@ export async function POST(c) {
             ? `cd '${worktreePath.replace(/'/g, "'\\''")}' && ${command}`
             : command;
         const terminalManager = getGlobalTerminalManager();
-        const session = await terminalManager.createSession(taskId, shellPreference, startupCommand);
+        const session = await terminalManager.createSession(taskId, shellPreference, startupCommand, getAuthPrincipalKey(c));
         return c.json({
             sessionId: session.id,
             taskId: session.taskId,

package/dist/routes/api/v1/terminal/sessions/route.js

@@ -1,4 +1,5 @@
 import { getGlobalTerminalManager } from '../../../../../lib/terminal/global-manager.js';
+import { getAuthPrincipalKey } from '../../../../../middleware/auth.js';
 // Lightweight ANSI escape sequence stripper to keep preview readable
 // This avoids adding a dependency just for previews
 const ANSI_REGEX = /[\u001B\u009B][[\]()#;?]*(?:\d{1,4}(?:;\d{0,4})*)?[0-9A-ORZcf-nqry=><]/g;
@@ -40,16 +41,17 @@ export async function GET(c) {
         const previewBytes = Number.isFinite(maxBytesParam) && maxBytesParam > 0 ? Math.min(maxBytesParam, 8192) : 4096; // cap at 8KB
         const colorize = ['1', 'true', 'yes'].includes((searchParams.get('colorize') || '').toLowerCase());
         const terminalManager = getGlobalTerminalManager();
+        const ownerId = getAuthPrincipalKey(c);
         let sessions;
         if (sessionId) {
             const s = terminalManager.getSession(sessionId);
-            sessions = s ? [s] : [];
+            sessions = terminalManager.canAccessSession(s, ownerId) && s ? [s] : [];
         }
         else if (taskId) {
-            sessions = terminalManager.getSessionsByTask(taskId);
+            sessions = terminalManager.getSessionsByTask(taskId).filter(session => terminalManager.canAccessSession(session, ownerId));
         }
         else {
-            sessions = terminalManager.getAllSessions();
+            sessions = terminalManager.getSessionsForOwner(ownerId);
         }
         // Return session info without the PTY instance
         const sessionInfo = sessions.map(session => ({

package/dist/server-with-static.js

@@ -105,7 +105,7 @@ app.use('/api/*', cors({
 // Handle trailing slashes consistently for API routes
 app.use('/api/*', trimTrailingSlash());
 // Import and apply authentication middleware
-import { authMiddleware } from './middleware/auth.js';
+import { authMiddleware, getAuthPrincipalKey } from './middleware/auth.js';
 app.use('/api/*', authMiddleware);
 app.use('/ws/*', authMiddleware);
 // Create WebSocket support
@@ -123,7 +123,7 @@ app.get('/ws/terminal/:sessionId', upgradeWebSocket((c) => ({
             ws.close(1000, 'WebSocket error');
             return;
         }
-        const success = terminalManager.attachWebSocket(sessionId, rawWs);
+        const success = terminalManager.attachWebSocket(sessionId, rawWs, getAuthPrincipalKey(c));
         if (!success) {
             console.error(`Failed to attach WebSocket to session: ${sessionId}`);
             ws.close(1000, 'Session not found');
@@ -152,7 +152,7 @@ app.get('/ws/terminal-preview/:sessionId', upgradeWebSocket((c) => ({
             catch { }
             return;
         }
-        const success = terminalManager.attachPreviewWebSocket(sessionId, rawWs);
+        const success = terminalManager.attachPreviewWebSocket(sessionId, rawWs, getAuthPrincipalKey(c));
         if (!success) {
             try {
                 ws.close(1000, 'Session not found');

package/dist/server.js

@@ -99,7 +99,7 @@ app.use('*', cors({
 // Handle trailing slashes consistently for API routes
 app.use('/api/*', trimTrailingSlash());
 // Import and apply authentication middleware
-import { authMiddleware } from './middleware/auth.js';
+import { authMiddleware, getAuthPrincipalKey } from './middleware/auth.js';
 app.use('/api/*', authMiddleware);
 app.use('/ws/*', authMiddleware);
 // Create WebSocket support
@@ -117,7 +117,7 @@ app.get('/ws/terminal/:sessionId', upgradeWebSocket((c) => ({
             ws.close(1000, 'WebSocket error');
             return;
         }
-        const success = terminalManager.attachWebSocket(sessionId, rawWs);
+        const success = terminalManager.attachWebSocket(sessionId, rawWs, getAuthPrincipalKey(c));
         if (!success) {
             console.error(`Failed to attach WebSocket to session: ${sessionId}`);
             ws.close(1000, 'Session not found');
@@ -146,7 +146,7 @@ app.get('/ws/terminal-preview/:sessionId', upgradeWebSocket((c) => ({
             catch { }
             return;
         }
-        const success = terminalManager.attachPreviewWebSocket(sessionId, rawWs);
+        const success = terminalManager.attachPreviewWebSocket(sessionId, rawWs, getAuthPrincipalKey(c));
         if (!success) {
             try {
                 ws.close(1000, 'Session not found');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovelybunch/api",
-  "version": "1.0.78-alpha.2",
+  "version": "1.0.78-alpha.4",
   "type": "module",
   "main": "dist/server-with-static.js",
   "exports": {
@@ -40,9 +40,9 @@
     "sharp": "^0.33.5",
     "ws": "^8.18.0",
     "zod": "^3.23.0",
-    "@lovelybunch/core": "1.0.78-alpha.2",
-    "@lovelybunch/types": "1.0.78-alpha.2",
-    "@lovelybunch/mcp": "1.0.78-alpha.2"
+    "@lovelybunch/types": "1.0.78-alpha.4",
+    "@lovelybunch/core": "1.0.78-alpha.4",
+    "@lovelybunch/mcp": "1.0.78-alpha.4"
   },
   "devDependencies": {
     "@types/adm-zip": "^0.5.7",

package/static/assets/{ActivityPage-B83wvBeD.js → ActivityPage-CtFAFqlg.js}

@@ -1 +1 @@
-import{r as a,A as p,j as e,v,bN as y,B as N,n as w,C as b}from"./index-Bx26Q2JC.js";import{C as c,a as d,b as k,c as C}from"./card-D2eA49nP.js";import{B as m}from"./badge-D1sVaZJG.js";import{R as E}from"./refresh-cw-CLSROYiq.js";const A=5e3;function $(){const[n,o]=a.useState([]),[i,x]=a.useState(!0),[h,u]=a.useState(new Set),l=a.useCallback(async()=>{x(!0);try{const s=await fetch(`${p}/api/v1/events?limit=${A}`);if(!s.ok)throw new Error("Failed to load events");const t=await s.json();o(Array.isArray(t.items)?[...t.items].reverse():[])}catch(s){console.error("Failed to load events:",s),o([])}finally{x(!1)}},[]),g=a.useCallback(s=>{u(t=>{const r=new Set(t);return r.has(s)?r.delete(s):r.add(s),r})},[]);a.useEffect(()=>{l()},[l]);const f=s=>{if(!s)return"Unknown time";try{return new Date(s).toLocaleString()}catch{return s}},j=s=>{switch(s?.toLowerCase()){case"error":return"bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200";case"warn":case"warning":return"bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200";case"info":return"bg-blue-100 text-blue-800 dark:bg-blue-900 dark:text-blue-200";case"debug":return"bg-gray-100 text-gray-800 dark:bg-gray-800 dark:text-gray-200";default:return"bg-gray-100 text-gray-800 dark:bg-gray-800 dark:text-gray-200"}};return i?e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsx("p",{className:"text-muted-foreground",children:"View system activity and events"})]}),e.jsx(c,{children:e.jsx(d,{className:"pt-6",children:e.jsxs("div",{className:"flex items-center justify-center",children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground"}),e.jsx("span",{className:"ml-2 text-muted-foreground",children:"Loading events..."})]})})})]}):n.length===0?e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsx("p",{className:"text-muted-foreground",children:"View system activity and events"})]}),e.jsx(c,{children:e.jsx(d,{className:"pt-6",children:e.jsxs("div",{className:"text-center",children:[e.jsx(y,{className:"mx-auto h-12 w-12 text-muted-foreground"}),e.jsx("h3",{className:"mt-4 text-lg font-semibold",children:"No Events Found"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:"Activity events will appear here as they occur."})]})})})]}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsxs("p",{className:"text-muted-foreground",children:["View system activity and events (",n.length," events)"]})]}),e.jsxs(N,{variant:"outline",size:"sm",onClick:()=>void l(),disabled:i,children:[e.jsx(E,{className:`h-4 w-4 mr-2 ${i?"animate-spin":""}`}),"Refresh"]})]}),e.jsx("div",{className:"space-y-3",children:n.map(s=>{const t=h.has(s.seq);return e.jsxs(c,{className:"transition-colors",children:[e.jsx(k,{className:"py-3 cursor-pointer hover:bg-muted/30",onClick:()=>g(s.seq),children:e.jsxs("div",{className:"flex items-start justify-between gap-4",children:[e.jsxs("div",{className:"flex items-start gap-2 flex-1 min-w-0",children:[t?e.jsx(w,{className:"h-4 w-4 mt-0.5 text-muted-foreground shrink-0"}):e.jsx(b,{className:"h-4 w-4 mt-0.5 text-muted-foreground shrink-0"}),e.jsxs("div",{className:"space-y-1 flex-1 min-w-0",children:[e.jsxs("div",{className:"flex items-center gap-2 flex-wrap",children:[e.jsxs(C,{className:"text-sm font-medium",children:["#",s.seq]}),s.kind&&e.jsx(m,{variant:"outline",className:"text-xs",children:s.kind}),s.level&&e.jsx(m,{className:`text-xs ${j(s.level)}`,children:s.level})]}),s.message&&e.jsx("p",{className:`text-sm text-muted-foreground ${t?"":"truncate"}`,children:s.message})]})]}),e.jsx("span",{className:"text-xs text-muted-foreground whitespace-nowrap",children:f(s.ts)})]})}),t&&e.jsx(d,{className:"pt-0 pb-4",children:e.jsx("pre",{className:"text-xs bg-muted p-3 rounded-md overflow-x-auto",children:JSON.stringify(s,null,2)})})]},s.seq)})})]})}export{$ as default};
+import{r as a,A as p,j as e,v,bN as y,B as N,n as w,C as b}from"./index-SUQrIHd7.js";import{C as c,a as d,b as k,c as C}from"./card-CiLixwCG.js";import{B as m}from"./badge-TeAh_Zh0.js";import{R as E}from"./refresh-cw-DvQ0rmk7.js";const A=5e3;function $(){const[n,o]=a.useState([]),[i,x]=a.useState(!0),[h,u]=a.useState(new Set),l=a.useCallback(async()=>{x(!0);try{const s=await fetch(`${p}/api/v1/events?limit=${A}`);if(!s.ok)throw new Error("Failed to load events");const t=await s.json();o(Array.isArray(t.items)?[...t.items].reverse():[])}catch(s){console.error("Failed to load events:",s),o([])}finally{x(!1)}},[]),g=a.useCallback(s=>{u(t=>{const r=new Set(t);return r.has(s)?r.delete(s):r.add(s),r})},[]);a.useEffect(()=>{l()},[l]);const f=s=>{if(!s)return"Unknown time";try{return new Date(s).toLocaleString()}catch{return s}},j=s=>{switch(s?.toLowerCase()){case"error":return"bg-red-100 text-red-800 dark:bg-red-900 dark:text-red-200";case"warn":case"warning":return"bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200";case"info":return"bg-blue-100 text-blue-800 dark:bg-blue-900 dark:text-blue-200";case"debug":return"bg-gray-100 text-gray-800 dark:bg-gray-800 dark:text-gray-200";default:return"bg-gray-100 text-gray-800 dark:bg-gray-800 dark:text-gray-200"}};return i?e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsx("p",{className:"text-muted-foreground",children:"View system activity and events"})]}),e.jsx(c,{children:e.jsx(d,{className:"pt-6",children:e.jsxs("div",{className:"flex items-center justify-center",children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground"}),e.jsx("span",{className:"ml-2 text-muted-foreground",children:"Loading events..."})]})})})]}):n.length===0?e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsx("p",{className:"text-muted-foreground",children:"View system activity and events"})]}),e.jsx(c,{children:e.jsx(d,{className:"pt-6",children:e.jsxs("div",{className:"text-center",children:[e.jsx(y,{className:"mx-auto h-12 w-12 text-muted-foreground"}),e.jsx("h3",{className:"mt-4 text-lg font-semibold",children:"No Events Found"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:"Activity events will appear here as they occur."})]})})})]}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"text-2xl font-bold tracking-tight",children:"Activity"}),e.jsxs("p",{className:"text-muted-foreground",children:["View system activity and events (",n.length," events)"]})]}),e.jsxs(N,{variant:"outline",size:"sm",onClick:()=>void l(),disabled:i,children:[e.jsx(E,{className:`h-4 w-4 mr-2 ${i?"animate-spin":""}`}),"Refresh"]})]}),e.jsx("div",{className:"space-y-3",children:n.map(s=>{const t=h.has(s.seq);return e.jsxs(c,{className:"transition-colors",children:[e.jsx(k,{className:"py-3 cursor-pointer hover:bg-muted/30",onClick:()=>g(s.seq),children:e.jsxs("div",{className:"flex items-start justify-between gap-4",children:[e.jsxs("div",{className:"flex items-start gap-2 flex-1 min-w-0",children:[t?e.jsx(w,{className:"h-4 w-4 mt-0.5 text-muted-foreground shrink-0"}):e.jsx(b,{className:"h-4 w-4 mt-0.5 text-muted-foreground shrink-0"}),e.jsxs("div",{className:"space-y-1 flex-1 min-w-0",children:[e.jsxs("div",{className:"flex items-center gap-2 flex-wrap",children:[e.jsxs(C,{className:"text-sm font-medium",children:["#",s.seq]}),s.kind&&e.jsx(m,{variant:"outline",className:"text-xs",children:s.kind}),s.level&&e.jsx(m,{className:`text-xs ${j(s.level)}`,children:s.level})]}),s.message&&e.jsx("p",{className:`text-sm text-muted-foreground ${t?"":"truncate"}`,children:s.message})]})]}),e.jsx("span",{className:"text-xs text-muted-foreground whitespace-nowrap",children:f(s.ts)})]})}),t&&e.jsx(d,{className:"pt-0 pb-4",children:e.jsx("pre",{className:"text-xs bg-muted p-3 rounded-md overflow-x-auto",children:JSON.stringify(s,null,2)})})]},s.seq)})})]})}export{$ as default};

package/static/assets/{AgentsContextEditPage-CgHVDbMV.js → AgentsContextEditPage-CsRJvzE6.js}

@@ -1,4 +1,4 @@
-import{u as p,a as j,r as n,A as l,j as e,B as h,L as v,a5 as N}from"./index-Bx26Q2JC.js";import{C as m,a as x,b as C,c as S}from"./card-D2eA49nP.js";import{M as w}from"./markdown-editor-Dmq8d9Xs.js";import{A as y}from"./arrow-left-CY9PaWRG.js";import{C as A}from"./circle-check-big-HtBmMXFt.js";import"./index-5M1EX2JZ.js";function F(){const f=p(),{toast:t}=j(),[a,i]=n.useState(""),[g,r]=n.useState(!0),[o,c]=n.useState(!1);n.useEffect(()=>{fetch(`${l}/api/v1/context/agents`).then(s=>s.json()).then(s=>{s.success&&i(s.document.content.trim()),r(!1)}).catch(s=>{console.error("Failed to load context:",s),t({title:"Error",description:"Failed to load agents definition",variant:"destructive"}),r(!1)})},[t]);const u=async()=>{c(!0);try{const d=await(await fetch(`${l}/api/v1/context/agents`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({content:a,metadata:{}})})).json();if(d.success)t({title:"Success",description:"Agents definition saved successfully",action:e.jsx(A,{className:"h-4 w-4"})}),f("/context/agents");else throw new Error(d.error||"Failed to save")}catch(s){console.error("Save error:",s),t({title:"Error",description:"Failed to save agents definition",variant:"destructive"})}finally{c(!1)}};return g?e.jsx("div",{className:"space-y-6",children:e.jsx(m,{children:e.jsx(x,{className:"pt-6",children:e.jsx("div",{className:"text-center",children:e.jsx("p",{children:"Loading..."})})})})}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-start justify-between gap-4",children:[e.jsxs("div",{className:"min-w-0",children:[e.jsx("h1",{className:"text-xl sm:text-2xl font-bold tracking-tight",children:"Edit Agents Definition"}),e.jsx("p",{className:"text-muted-foreground text-sm hidden sm:block",children:"Define agents, their capabilities, and configurations"})]}),e.jsxs("div",{className:"flex items-center gap-2 flex-shrink-0",children:[e.jsx(h,{variant:"ghost",size:"sm",asChild:!0,children:e.jsx(v,{to:"/context/agents",className:"text-muted-foreground hover:text-foreground transition-colors",children:e.jsx(y,{className:"w-4 h-4"})})}),e.jsxs(h,{onClick:u,disabled:o,size:"sm",children:[e.jsx(N,{className:"w-4 h-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:o?"Saving...":"Save"})]})]})]}),e.jsxs(m,{children:[e.jsx(C,{children:e.jsx(S,{children:"Agents Documentation"})}),e.jsx(x,{children:e.jsx(w,{value:a,onChange:s=>i(s||""),placeholder:`Write your agents definition in markdown...
+import{u as p,a as j,r as n,A as l,j as e,B as h,L as v,a5 as N}from"./index-SUQrIHd7.js";import{C as m,a as x,b as C,c as S}from"./card-CiLixwCG.js";import{M as w}from"./markdown-editor-Cvh5pZzJ.js";import{A as y}from"./arrow-left-_lXkdm9Q.js";import{C as A}from"./circle-check-big-CxxxVvOw.js";import"./index-BlOxV6pf.js";function F(){const f=p(),{toast:t}=j(),[a,i]=n.useState(""),[g,r]=n.useState(!0),[o,c]=n.useState(!1);n.useEffect(()=>{fetch(`${l}/api/v1/context/agents`).then(s=>s.json()).then(s=>{s.success&&i(s.document.content.trim()),r(!1)}).catch(s=>{console.error("Failed to load context:",s),t({title:"Error",description:"Failed to load agents definition",variant:"destructive"}),r(!1)})},[t]);const u=async()=>{c(!0);try{const d=await(await fetch(`${l}/api/v1/context/agents`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({content:a,metadata:{}})})).json();if(d.success)t({title:"Success",description:"Agents definition saved successfully",action:e.jsx(A,{className:"h-4 w-4"})}),f("/context/agents");else throw new Error(d.error||"Failed to save")}catch(s){console.error("Save error:",s),t({title:"Error",description:"Failed to save agents definition",variant:"destructive"})}finally{c(!1)}};return g?e.jsx("div",{className:"space-y-6",children:e.jsx(m,{children:e.jsx(x,{className:"pt-6",children:e.jsx("div",{className:"text-center",children:e.jsx("p",{children:"Loading..."})})})})}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-start justify-between gap-4",children:[e.jsxs("div",{className:"min-w-0",children:[e.jsx("h1",{className:"text-xl sm:text-2xl font-bold tracking-tight",children:"Edit Agents Definition"}),e.jsx("p",{className:"text-muted-foreground text-sm hidden sm:block",children:"Define agents, their capabilities, and configurations"})]}),e.jsxs("div",{className:"flex items-center gap-2 flex-shrink-0",children:[e.jsx(h,{variant:"ghost",size:"sm",asChild:!0,children:e.jsx(v,{to:"/context/agents",className:"text-muted-foreground hover:text-foreground transition-colors",children:e.jsx(y,{className:"w-4 h-4"})})}),e.jsxs(h,{onClick:u,disabled:o,size:"sm",children:[e.jsx(N,{className:"w-4 h-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:o?"Saving...":"Save"})]})]})]}),e.jsxs(m,{children:[e.jsx(C,{children:e.jsx(S,{children:"Agents Documentation"})}),e.jsx(x,{children:e.jsx(w,{value:a,onChange:s=>i(s||""),placeholder:`Write your agents definition in markdown...
 
 ## Agent Definitions
 

package/static/assets/{AgentsContextPage-DMf6khxC.js → AgentsContextPage-CWCs8CgG.js}

@@ -1 +1 @@
-import{a as g,r as t,A as N,j as e,v,az as C,B as a,L as d,a2 as l,M as w,ay as y,au as E}from"./index-Bx26Q2JC.js";import{C as i,a as c,b}from"./card-D2eA49nP.js";import{c as A}from"./clipboard-B9ndUJKl.js";function D(){const{toast:r}=g(),[o,m]=t.useState(null),[x,h]=t.useState(!0),[u,n]=t.useState(!1);t.useEffect(()=>{fetch(`${N}/api/v1/context/agents`).then(s=>{if(s.ok)return s.json();throw new Error("Not found")}).then(s=>{s.success?(m(s.document),n(!0)):n(!1)}).catch(()=>{n(!1)}).finally(()=>{h(!1)})},[]);const p=async()=>{const s=".nut/context/agents.md";try{await A(s),r({title:"Copied!",description:`Path ${s} copied to clipboard`})}catch(f){console.error("Failed to copy path:",f),r({title:"Error",description:"Failed to copy path to clipboard",variant:"destructive"})}},j=()=>{const s=new CustomEvent("discuss-in-chat",{detail:{type:"context",id:"agents-md",filename:"agents.md",name:"agents.md",path:".nut/context/agents.md"}});window.dispatchEvent(s)};return x?e.jsx("div",{className:"space-y-6",children:e.jsx(i,{children:e.jsx(c,{className:"pt-6",children:e.jsxs("div",{className:"flex items-center justify-center",children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground"}),e.jsx("span",{className:"ml-2 text-muted-foreground",children:"Loading agents definition..."})]})})})}):!u||!o?e.jsx("div",{className:"space-y-6",children:e.jsx(i,{children:e.jsx(c,{className:"pt-6",children:e.jsxs("div",{className:"text-center",children:[e.jsx(C,{className:"mx-auto h-12 w-12 text-muted-foreground"}),e.jsx("h3",{className:"mt-4 text-lg font-semibold",children:"No Agents Definition Found"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:"Agents definition will appear here once created."}),e.jsx(a,{className:"mt-4",asChild:!0,children:e.jsxs(d,{to:"/context/agents/edit",children:[e.jsx(l,{className:"h-4 w-4 mr-2"}),"Create Agents Definition"]})})]})})})}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-center justify-between gap-4",children:[e.jsxs("div",{children:[e.jsx("h1",{className:"text-2xl font-bold tracking-tight",children:"Agents"}),e.jsx("p",{className:"text-muted-foreground",children:"Agent definitions and configurations"})]}),e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsxs(a,{variant:"outline",size:"sm",onClick:j,children:[e.jsx(w,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Discuss"})]}),e.jsxs(a,{variant:"outline",size:"sm",onClick:p,children:[e.jsx(y,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Copy Path"})]}),e.jsx(a,{size:"sm",asChild:!0,children:e.jsxs(d,{to:"/context/agents/edit",children:[e.jsx(l,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Edit"})]})})]})]}),e.jsxs(i,{children:[e.jsx(b,{className:"pb-0"}),e.jsx(c,{children:e.jsx("div",{className:"prose prose-sm max-w-none dark:prose-invert",children:e.jsx(E,{children:o.content||"No content available"})})})]})]})}export{D as default};
+import{a as g,r as t,A as N,j as e,v,az as C,B as a,L as d,a2 as l,M as w,ay as y,au as E}from"./index-SUQrIHd7.js";import{C as i,a as c,b}from"./card-CiLixwCG.js";import{c as A}from"./clipboard-B9ndUJKl.js";function D(){const{toast:r}=g(),[o,m]=t.useState(null),[x,h]=t.useState(!0),[u,n]=t.useState(!1);t.useEffect(()=>{fetch(`${N}/api/v1/context/agents`).then(s=>{if(s.ok)return s.json();throw new Error("Not found")}).then(s=>{s.success?(m(s.document),n(!0)):n(!1)}).catch(()=>{n(!1)}).finally(()=>{h(!1)})},[]);const p=async()=>{const s=".nut/context/agents.md";try{await A(s),r({title:"Copied!",description:`Path ${s} copied to clipboard`})}catch(f){console.error("Failed to copy path:",f),r({title:"Error",description:"Failed to copy path to clipboard",variant:"destructive"})}},j=()=>{const s=new CustomEvent("discuss-in-chat",{detail:{type:"context",id:"agents-md",filename:"agents.md",name:"agents.md",path:".nut/context/agents.md"}});window.dispatchEvent(s)};return x?e.jsx("div",{className:"space-y-6",children:e.jsx(i,{children:e.jsx(c,{className:"pt-6",children:e.jsxs("div",{className:"flex items-center justify-center",children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground"}),e.jsx("span",{className:"ml-2 text-muted-foreground",children:"Loading agents definition..."})]})})})}):!u||!o?e.jsx("div",{className:"space-y-6",children:e.jsx(i,{children:e.jsx(c,{className:"pt-6",children:e.jsxs("div",{className:"text-center",children:[e.jsx(C,{className:"mx-auto h-12 w-12 text-muted-foreground"}),e.jsx("h3",{className:"mt-4 text-lg font-semibold",children:"No Agents Definition Found"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:"Agents definition will appear here once created."}),e.jsx(a,{className:"mt-4",asChild:!0,children:e.jsxs(d,{to:"/context/agents/edit",children:[e.jsx(l,{className:"h-4 w-4 mr-2"}),"Create Agents Definition"]})})]})})})}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{className:"flex items-center justify-between gap-4",children:[e.jsxs("div",{children:[e.jsx("h1",{className:"text-2xl font-bold tracking-tight",children:"Agents"}),e.jsx("p",{className:"text-muted-foreground",children:"Agent definitions and configurations"})]}),e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsxs(a,{variant:"outline",size:"sm",onClick:j,children:[e.jsx(w,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Discuss"})]}),e.jsxs(a,{variant:"outline",size:"sm",onClick:p,children:[e.jsx(y,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Copy Path"})]}),e.jsx(a,{size:"sm",asChild:!0,children:e.jsxs(d,{to:"/context/agents/edit",children:[e.jsx(l,{className:"h-4 w-4 sm:mr-2"}),e.jsx("span",{className:"hidden sm:inline",children:"Edit"})]})})]})]}),e.jsxs(i,{children:[e.jsx(b,{className:"pb-0"}),e.jsx(c,{children:e.jsx("div",{className:"prose prose-sm max-w-none dark:prose-invert",children:e.jsx(E,{children:o.content||"No content available"})})})]})]})}export{D as default};

package/static/assets/{ApiKeysSettingsPage-DzwmYsom.js → ApiKeysSettingsPage-B4b_fmJg.js}

@@ -1,2 +1,2 @@
-import{t as R,r as t,E as y,j as e,B as a,P as X,bH as Y,Q as J,D as j,b as g,d as v,f,g as A,I as F,a1 as N,ai as Q,w as i}from"./index-Bx26Q2JC.js";import{C as W,b as G,c as V,d as Z,a as _}from"./card-D2eA49nP.js";import{L as w}from"./label-fHWG59jZ.js";import{B as ee}from"./badge-D1sVaZJG.js";import{A as I,a as C}from"./alert-0GENnoy_.js";import{I as L}from"./info-_JNAJSs5.js";import{C as se}from"./circle-alert-DsESVtwL.js";function oe(){const{authEnabled:n}=R(),[P,k]=t.useState([]),[b,K]=t.useState(!0),[O,l]=t.useState(!1),[M,d]=t.useState(!1),[x,D]=t.useState(""),[h,E]=t.useState("never"),[c,S]=t.useState(null),[m,o]=t.useState(null);t.useEffect(()=>{p()},[]);const p=async()=>{K(!0);try{const s=await y("/api/v1/api-keys");s.success&&k(s.data?.apiKeys||[])}catch(s){console.error("Failed to load API keys:",s),k([])}finally{K(!1)}},U=async()=>{if(!x.trim()){i({title:"Error",description:"Please provide a name for the API key",variant:"destructive"});return}try{const s={name:x,scopes:["*"]};h!=="never"&&(s.expiresIn=h);const r=await y("/api/v1/api-keys",{method:"POST",body:JSON.stringify(s)});r.success&&(S(r.data),l(!1),d(!0),D(""),E("never"),await p(),i({title:"API Key Created",description:"Make sure to copy your API key now. You won't be able to see it again!"}))}catch(s){console.error("Failed to create API key:",s),i({title:"Error",description:"Failed to create API key",variant:"destructive"})}},B=async s=>{try{(await y(`/api/v1/api-keys/${s}`,{method:"DELETE"})).success&&(await p(),o(null),i({title:"API Key Deleted",description:"The API key has been permanently deleted"}))}catch(r){console.error("Failed to delete API key:",r),i({title:"Error",description:"Failed to delete API key",variant:"destructive"})}},H=async s=>{try{await navigator.clipboard.writeText(s),i({title:"Copied",description:"API key copied to clipboard"})}catch{i({title:"Error",description:"Failed to copy to clipboard",variant:"destructive"})}},u=s=>new Date(s).toLocaleDateString("en-US",{year:"numeric",month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"}),$=s=>s?new Date(s)<new Date:!1,q=typeof window<"u"?window.location.origin:"http://localhost:3000",z=c?`curl -H "X-API-Key: ${c.key}" \\
+import{t as R,r as t,E as y,j as e,B as a,P as X,bH as Y,Q as J,D as j,b as g,d as v,f,g as A,I as F,a1 as N,ai as Q,w as i}from"./index-SUQrIHd7.js";import{C as W,b as G,c as V,d as Z,a as _}from"./card-CiLixwCG.js";import{L as w}from"./label-n5pqaObd.js";import{B as ee}from"./badge-TeAh_Zh0.js";import{A as I,a as C}from"./alert-DBhIskRX.js";import{I as L}from"./info-CVmPHERQ.js";import{C as se}from"./circle-alert-nI75emvr.js";function oe(){const{authEnabled:n}=R(),[P,k]=t.useState([]),[b,K]=t.useState(!0),[O,l]=t.useState(!1),[M,d]=t.useState(!1),[x,D]=t.useState(""),[h,E]=t.useState("never"),[c,S]=t.useState(null),[m,o]=t.useState(null);t.useEffect(()=>{p()},[]);const p=async()=>{K(!0);try{const s=await y("/api/v1/api-keys");s.success&&k(s.data?.apiKeys||[])}catch(s){console.error("Failed to load API keys:",s),k([])}finally{K(!1)}},U=async()=>{if(!x.trim()){i({title:"Error",description:"Please provide a name for the API key",variant:"destructive"});return}try{const s={name:x,scopes:["*"]};h!=="never"&&(s.expiresIn=h);const r=await y("/api/v1/api-keys",{method:"POST",body:JSON.stringify(s)});r.success&&(S(r.data),l(!1),d(!0),D(""),E("never"),await p(),i({title:"API Key Created",description:"Make sure to copy your API key now. You won't be able to see it again!"}))}catch(s){console.error("Failed to create API key:",s),i({title:"Error",description:"Failed to create API key",variant:"destructive"})}},B=async s=>{try{(await y(`/api/v1/api-keys/${s}`,{method:"DELETE"})).success&&(await p(),o(null),i({title:"API Key Deleted",description:"The API key has been permanently deleted"}))}catch(r){console.error("Failed to delete API key:",r),i({title:"Error",description:"Failed to delete API key",variant:"destructive"})}},H=async s=>{try{await navigator.clipboard.writeText(s),i({title:"Copied",description:"API key copied to clipboard"})}catch{i({title:"Error",description:"Failed to copy to clipboard",variant:"destructive"})}},u=s=>new Date(s).toLocaleDateString("en-US",{year:"numeric",month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"}),$=s=>s?new Date(s)<new Date:!1,q=typeof window<"u"?window.location.origin:"http://localhost:3000",z=c?`curl -H "X-API-Key: ${c.key}" \\
 +  ${q}/api/v1/tasks`:"",T=n?null:e.jsxs(I,{children:[e.jsx(L,{className:"h-4 w-4"}),e.jsxs(C,{children:["Authentication is currently disabled. API keys will only be required once you enable authentication in the ",e.jsx("a",{href:"/settings/authentication",className:"underline",children:"Authentication settings"}),"."]})]});return!n&&b?e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h3",{className:"text-lg font-medium",children:"API Keys"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Manage API keys for programmatic access"})]}),T]}):b?e.jsx("div",{className:"space-y-6",children:e.jsxs("div",{children:[e.jsx("h3",{className:"text-lg font-medium",children:"API Keys"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Loading..."})]})}):e.jsxs("div",{className:"space-y-6",children:[e.jsxs("div",{children:[e.jsx("h3",{className:"text-lg font-medium",children:"API Keys"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Manage API keys for programmatic access to your Coconut instance"})]}),T,n&&e.jsxs(I,{children:[e.jsx(L,{className:"h-4 w-4"}),e.jsxs(C,{children:["API keys provide programmatic access to your Coconut instance. Use them in CI/CD pipelines or automation scripts by including the key in the ",e.jsx("code",{className:"bg-muted px-1 py-0.5 rounded",children:"X-API-Key"})," header."]})]}),e.jsxs(W,{children:[e.jsx(G,{children:e.jsxs("div",{className:"flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx(V,{children:"Active API Keys"}),e.jsx(Z,{children:"API keys you've created for programmatic access"})]}),e.jsxs(a,{onClick:()=>l(!0),disabled:!n,children:[e.jsx(X,{className:"mr-2 h-4 w-4"}),"Create API Key"]})]})}),e.jsx(_,{children:P.length===0?e.jsxs("div",{className:"text-center py-8 text-muted-foreground",children:[e.jsx(Y,{className:"h-12 w-12 mx-auto mb-4 opacity-20"}),e.jsx("p",{children:"No API keys yet"}),e.jsx("p",{className:"text-sm",children:"Create an API key to get started with programmatic access"})]}):e.jsx("div",{className:"space-y-4",children:P.map(s=>e.jsxs("div",{className:"flex items-center justify-between p-4 border rounded-lg",children:[e.jsxs("div",{className:"flex-1 min-w-0",children:[e.jsxs("div",{className:"flex items-center gap-2 mb-1",children:[e.jsx("p",{className:"font-medium",children:s.name}),$(s.expiresAt)&&e.jsx(ee,{variant:"destructive",children:"Expired"})]}),e.jsx("p",{className:"text-sm text-muted-foreground font-mono",children:s.keyPreview}),e.jsxs("div",{className:"flex items-center gap-4 mt-2 text-xs text-muted-foreground",children:[e.jsxs("span",{children:["Created: ",u(s.createdAt)]}),s.expiresAt&&e.jsxs("span",{children:["Expires: ",u(s.expiresAt)]}),s.lastUsedAt&&e.jsxs("span",{children:["Last used: ",u(s.lastUsedAt)]})]})]}),e.jsx(a,{variant:"ghost",size:"icon",onClick:()=>o(s.id),children:e.jsx(J,{className:"h-4 w-4 text-destructive"})})]},s.id))})})]}),e.jsx(j,{open:O,onOpenChange:l,children:e.jsxs(g,{children:[e.jsxs(v,{children:[e.jsx(f,{children:"Create API Key"}),e.jsx(A,{children:"Create a new API key for programmatic access. The key will only be shown once."})]}),e.jsxs("div",{className:"space-y-4 py-4",children:[e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"keyName",children:"Name"}),e.jsx(F,{id:"keyName",placeholder:"CI/CD Pipeline",value:x,onChange:s=>D(s.target.value)}),e.jsx("p",{className:"text-xs text-muted-foreground",children:"A descriptive name to identify this API key"})]}),e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{htmlFor:"keyExpiry",children:"Expiration"}),e.jsxs("select",{id:"keyExpiry",className:"w-full rounded-md border border-input bg-background px-3 py-2 text-sm",value:h,onChange:s=>E(s.target.value),children:[e.jsx("option",{value:"never",children:"Never"}),e.jsx("option",{value:"30d",children:"30 days"}),e.jsx("option",{value:"90d",children:"90 days"}),e.jsx("option",{value:"1y",children:"1 year"})]})]})]}),e.jsxs(N,{children:[e.jsx(a,{variant:"outline",onClick:()=>l(!1),children:"Cancel"}),e.jsx(a,{onClick:U,disabled:!n,children:"Create API Key"})]})]})}),e.jsx(j,{open:M,onOpenChange:d,children:e.jsxs(g,{className:"sm:max-w-[600px]",children:[e.jsxs(v,{children:[e.jsx(f,{children:"API Key Created"}),e.jsx(A,{children:"Make sure to copy your API key now. You won't be able to see it again!"})]}),e.jsxs(I,{variant:"destructive",className:"my-4",children:[e.jsx(se,{className:"h-4 w-4"}),e.jsx(C,{children:"This is the only time you will see this key. Store it securely."})]}),c&&e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{className:"space-y-2",children:[e.jsx(w,{children:"API Key"}),e.jsxs("div",{className:"flex gap-2",children:[e.jsx(F,{readOnly:!0,value:c.key,className:"font-mono text-sm"}),e.jsx(a,{variant:"outline",size:"icon",onClick:()=>H(c.key),children:e.jsx(Q,{className:"h-4 w-4"})})]})]}),e.jsxs("div",{className:"text-sm text-muted-foreground",children:[e.jsx("p",{className:"mb-2",children:"Usage example:"}),e.jsx("pre",{className:"bg-muted p-3 rounded-md whitespace-pre-wrap break-words",children:e.jsx("code",{className:"font-mono text-xs",children:z})})]})]}),e.jsx(N,{children:e.jsx(a,{onClick:()=>{d(!1),S(null)},children:"I've Saved My Key"})})]})}),e.jsx(j,{open:!!m,onOpenChange:s=>!s&&o(null),children:e.jsxs(g,{children:[e.jsxs(v,{children:[e.jsx(f,{children:"Delete API Key"}),e.jsx(A,{children:"Are you sure you want to delete this API key? This action cannot be undone and any scripts using this key will stop working."})]}),e.jsxs(N,{children:[e.jsx(a,{variant:"outline",onClick:()=>o(null),children:"Cancel"}),e.jsx(a,{variant:"destructive",onClick:()=>m&&B(m),children:"Delete API Key"})]})]})})]})}export{oe as default};

package/static/assets/{AuthSettingsPage-B5auAs_s.js → AuthSettingsPage-O3UdLrHC.js}

@@ -1,4 +1,4 @@
-import{c as te,t as me,r as n,E as l,j as e,bB as _,i as H,D as q,a0 as z,B as d,b as B,d as Y,f as K,g as Q,I as x,a1 as G,J as ge,N as je,Q as pe,R as ve,U as fe,V as we,W as ye,Y as Ce,_ as Ne,$ as Se,w as r}from"./index-Bx26Q2JC.js";import{C as m,b as g,c as j,d as p,a as v}from"./card-D2eA49nP.js";import{L as c}from"./label-fHWG59jZ.js";import{S as X,a as Z,b as ee,c as se,d as a}from"./select-ChtjmmOf.js";import{S as N}from"./switch-BMBFkcUU.js";import{B as F}from"./badge-D1sVaZJG.js";import{C as be}from"./circle-alert-DsESVtwL.js";import"./index-5M1EX2JZ.js";import"./chevron-up-DD_GdI6e.js";/**
+import{c as te,t as me,r as n,E as l,j as e,bB as _,i as H,D as q,a0 as z,B as d,b as B,d as Y,f as K,g as Q,I as x,a1 as G,J as ge,N as je,Q as pe,R as ve,U as fe,V as we,W as ye,Y as Ce,_ as Ne,$ as Se,w as r}from"./index-SUQrIHd7.js";import{C as m,b as g,c as j,d as p,a as v}from"./card-CiLixwCG.js";import{L as c}from"./label-n5pqaObd.js";import{S as X,a as Z,b as ee,c as se,d as a}from"./select-CIOYQA7a.js";import{S as N}from"./switch-DczkR77Y.js";import{B as F}from"./badge-TeAh_Zh0.js";import{C as be}from"./circle-alert-nI75emvr.js";import"./index-BlOxV6pf.js";import"./chevron-up-B4J4D5aE.js";/**
  * @license lucide-react v0.542.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/static/assets/{CallbackPage-Cxc5lXE4.js → CallbackPage-WTwVSxdx.js}

@@ -1 +1 @@
-import{r as m,j as e,v as x,A as f}from"./index-Bx26Q2JC.js";import{C as w}from"./circle-check-BXiPFdlh.js";import{C as b}from"./circle-x-B_4fmWCG.js";const r="coconut/github-auth-state";function j(s){try{window.opener&&window.opener.postMessage({type:"github-auth",...s},window.location.origin)}catch{}}const y=()=>{const[s,d]=m.useState("pending"),[h,p]=m.useState("Authorizing GitHub…");return m.useEffect(()=>{const a=new URLSearchParams(window.location.search),u=a.get("error"),l=a.get("token"),n=a.get("expires_at")||a.get("expiresAt"),c=a.get("state"),o=t=>{j(t),d(t.success?"success":"error"),p(t.message),setTimeout(()=>{try{window.close()}catch{}},1200)};if(u){localStorage.removeItem(r),o({success:!1,message:decodeURIComponent(u)});return}if(!l||!n||!c){localStorage.removeItem(r),o({success:!1,message:"Missing authorization parameters. Please try again."});return}const g=localStorage.getItem(r);if(!g||g!==c){localStorage.removeItem(r),o({success:!1,message:"Authorization state mismatch. Please start again."});return}(async()=>{try{const t=await fetch(`${f}/api/v1/git/providers/github/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:l,expiresAt:n,state:c})}),i=await t.json();if(!t.ok||!i.success)throw new Error(i?.error?.message||"Failed to store GitHub token");localStorage.removeItem(r),o({success:!0,message:"GitHub connected successfully!",expiresAt:i.data?.expiresAt||n})}catch(t){localStorage.removeItem(r),o({success:!1,message:t?.message||"Failed to store GitHub token. Please try again."})}})()},[]),e.jsx("div",{className:"flex h-screen items-center justify-center bg-background px-6",children:e.jsxs("div",{className:"max-w-sm rounded-lg border bg-card p-6 text-center shadow-sm",children:[e.jsxs("div",{className:"mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted",children:[s==="pending"&&e.jsx(x,{className:"h-6 w-6 animate-spin text-muted-foreground"}),s==="success"&&e.jsx(w,{className:"h-6 w-6 text-green-600"}),s==="error"&&e.jsx(b,{className:"h-6 w-6 text-red-600"})]}),e.jsx("h1",{className:"text-lg font-semibold",children:"GitHub Authorization"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:h}),s!=="pending"&&e.jsx("p",{className:"mt-4 text-xs text-muted-foreground",children:"You can close this window and return to Coconut."})]})})};export{y as default};
+import{r as m,j as e,v as x,A as f}from"./index-SUQrIHd7.js";import{C as w}from"./circle-check-k6ER9afD.js";import{C as b}from"./circle-x-BzPgPb47.js";const r="coconut/github-auth-state";function j(s){try{window.opener&&window.opener.postMessage({type:"github-auth",...s},window.location.origin)}catch{}}const y=()=>{const[s,d]=m.useState("pending"),[h,p]=m.useState("Authorizing GitHub…");return m.useEffect(()=>{const a=new URLSearchParams(window.location.search),u=a.get("error"),l=a.get("token"),n=a.get("expires_at")||a.get("expiresAt"),c=a.get("state"),o=t=>{j(t),d(t.success?"success":"error"),p(t.message),setTimeout(()=>{try{window.close()}catch{}},1200)};if(u){localStorage.removeItem(r),o({success:!1,message:decodeURIComponent(u)});return}if(!l||!n||!c){localStorage.removeItem(r),o({success:!1,message:"Missing authorization parameters. Please try again."});return}const g=localStorage.getItem(r);if(!g||g!==c){localStorage.removeItem(r),o({success:!1,message:"Authorization state mismatch. Please start again."});return}(async()=>{try{const t=await fetch(`${f}/api/v1/git/providers/github/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({token:l,expiresAt:n,state:c})}),i=await t.json();if(!t.ok||!i.success)throw new Error(i?.error?.message||"Failed to store GitHub token");localStorage.removeItem(r),o({success:!0,message:"GitHub connected successfully!",expiresAt:i.data?.expiresAt||n})}catch(t){localStorage.removeItem(r),o({success:!1,message:t?.message||"Failed to store GitHub token. Please try again."})}})()},[]),e.jsx("div",{className:"flex h-screen items-center justify-center bg-background px-6",children:e.jsxs("div",{className:"max-w-sm rounded-lg border bg-card p-6 text-center shadow-sm",children:[e.jsxs("div",{className:"mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted",children:[s==="pending"&&e.jsx(x,{className:"h-6 w-6 animate-spin text-muted-foreground"}),s==="success"&&e.jsx(w,{className:"h-6 w-6 text-green-600"}),s==="error"&&e.jsx(b,{className:"h-6 w-6 text-red-600"})]}),e.jsx("h1",{className:"text-lg font-semibold",children:"GitHub Authorization"}),e.jsx("p",{className:"mt-2 text-sm text-muted-foreground",children:h}),s!=="pending"&&e.jsx("p",{className:"mt-4 text-xs text-muted-foreground",children:"You can close this window and return to Coconut."})]})})};export{y as default};

package/static/assets/{CoconutCallbackPage-D7Xkrh70.js → CoconutCallbackPage-LEWgUV8J.js}

@@ -1 +1 @@
-import{u as E,x as S,t as j,r as i,j as e,v,y as p,z as y,E as C,O as k,w as N}from"./index-Bx26Q2JC.js";function I(){const c=E(),[a]=S(),{oauth:t,refreshUser:u,isLoading:l}=j(),[w,r]=i.useState("working"),[b,s]=i.useState(null),d=i.useRef(!1);return i.useEffect(()=>{if(d.current||l)return;d.current=!0,(async()=>{const g=a.get("code"),h=a.get("error");if(h){r("error"),s(a.get("error_description")||h);return}if(!g){r("error"),s("Missing authorization code in callback URL");return}if(!t.enabled||!t.clientId||!t.issuer){r("error"),s("OAuth is not enabled on this coconut");return}let o=null;try{o=sessionStorage.getItem(p)}catch{o=null}if(!o){r("error"),s("Missing PKCE verifier - please start sign-in again");return}try{const n=await y({issuer:t.issuer,clientId:t.clientId,code:g,verifier:o});if(!n.id_token)throw new Error('Clerk did not return an id_token (is the "openid" scope registered for this client?)');const m=await C("/api/v1/auth/oauth/exchange",{method:"POST",body:JSON.stringify({idToken:n.id_token})});if(!m.success)throw new Error(m.error||"Server rejected OAuth token");try{sessionStorage.removeItem(p)}catch{}await u();let f="/";try{const x=sessionStorage.getItem(k);x&&(sessionStorage.removeItem(k),f=x)}catch{}N({title:"Welcome back",description:"Signed in with Coconut"}),c(f,{replace:!0})}catch(n){console.error("OAuth callback failed:",n),r("error"),s(n?.message||"OAuth callback failed")}})()},[l,c,t,u,a]),e.jsx("div",{className:"min-h-screen flex items-center justify-center bg-gradient-to-br from-background to-muted p-4",children:e.jsx("div",{className:"max-w-sm text-center space-y-4",children:w==="working"?e.jsxs(e.Fragment,{children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground mx-auto"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Finishing sign-in with Coconut..."})]}):e.jsxs(e.Fragment,{children:[e.jsx("h1",{className:"text-lg font-semibold",children:"Sign-in failed"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:b||"Something went wrong completing OAuth sign-in."}),e.jsx("button",{type:"button",className:"text-sm underline",onClick:()=>c("/login",{replace:!0}),children:"Back to login"})]})})})}export{I as default};
+import{u as E,x as S,t as j,r as i,j as e,v,y as p,z as y,E as C,O as k,w as N}from"./index-SUQrIHd7.js";function I(){const c=E(),[a]=S(),{oauth:t,refreshUser:u,isLoading:l}=j(),[w,r]=i.useState("working"),[b,s]=i.useState(null),d=i.useRef(!1);return i.useEffect(()=>{if(d.current||l)return;d.current=!0,(async()=>{const g=a.get("code"),h=a.get("error");if(h){r("error"),s(a.get("error_description")||h);return}if(!g){r("error"),s("Missing authorization code in callback URL");return}if(!t.enabled||!t.clientId||!t.issuer){r("error"),s("OAuth is not enabled on this coconut");return}let o=null;try{o=sessionStorage.getItem(p)}catch{o=null}if(!o){r("error"),s("Missing PKCE verifier - please start sign-in again");return}try{const n=await y({issuer:t.issuer,clientId:t.clientId,code:g,verifier:o});if(!n.id_token)throw new Error('Clerk did not return an id_token (is the "openid" scope registered for this client?)');const m=await C("/api/v1/auth/oauth/exchange",{method:"POST",body:JSON.stringify({idToken:n.id_token})});if(!m.success)throw new Error(m.error||"Server rejected OAuth token");try{sessionStorage.removeItem(p)}catch{}await u();let f="/";try{const x=sessionStorage.getItem(k);x&&(sessionStorage.removeItem(k),f=x)}catch{}N({title:"Welcome back",description:"Signed in with Coconut"}),c(f,{replace:!0})}catch(n){console.error("OAuth callback failed:",n),r("error"),s(n?.message||"OAuth callback failed")}})()},[l,c,t,u,a]),e.jsx("div",{className:"min-h-screen flex items-center justify-center bg-gradient-to-br from-background to-muted p-4",children:e.jsx("div",{className:"max-w-sm text-center space-y-4",children:w==="working"?e.jsxs(e.Fragment,{children:[e.jsx(v,{className:"h-8 w-8 animate-spin text-muted-foreground mx-auto"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:"Finishing sign-in with Coconut..."})]}):e.jsxs(e.Fragment,{children:[e.jsx("h1",{className:"text-lg font-semibold",children:"Sign-in failed"}),e.jsx("p",{className:"text-sm text-muted-foreground",children:b||"Something went wrong completing OAuth sign-in."}),e.jsx("button",{type:"button",className:"text-sm underline",onClick:()=>c("/login",{replace:!0}),children:"Back to login"})]})})})}export{I as default};