@piwitests/server 0.16.0 → 0.18.0

package/.output/server/chunks/build/{mcp-CXwa3xU3.mjs → mcp-_o6cMS6m.mjs}

@@ -1,17 +1,19 @@
 import { _ as _sfc_main$1, a as _sfc_main$4 } from './DashboardNavbar-Bdp-OwTN.mjs';
 import { _ as _sfc_main$2 } from './Alert-Bp1Wz_sq.mjs';
 import { _ as __nuxt_component_11 } from './SectionCard-COd9TuDq.mjs';
-import { l as useHead, o as _sfc_main$p, m as _sfc_main$k, r as useRuntimeConfig, L as useRequestEvent } from './server.mjs';
+import { l as useHead, m as _sfc_main$k, o as _sfc_main$p, r as useRuntimeConfig, L as useRequestEvent } from './server.mjs';
 import { _ as _sfc_main$3 } from './Tabs-BV9XqjoO.mjs';
 import { _ as __nuxt_component_5 } from './CodeBlock-BGwNmJ8J.mjs';
-import { defineComponent, computed, withCtx, unref, createVNode, openBlock, createBlock, Fragment, renderList, toDisplayString, createTextVNode, createCommentVNode, useSSRContext } from 'vue';
-import { ssrRenderComponent, ssrRenderList, ssrInterpolate } from 'vue/server-renderer';
+import { defineComponent, withAsyncContext, computed, withCtx, unref, createVNode, createTextVNode, openBlock, createBlock, toDisplayString, createCommentVNode, Fragment, renderList, useSSRContext } from 'vue';
+import { ssrRenderComponent, ssrInterpolate, ssrRenderList } from 'vue/server-renderer';
 import { df as MCP_TOOL_DEFS, dg as getRequestURL } from '../nitro/nitro.mjs';
+import { u as useIsDesktop } from './useIsDesktop-BS13spVj.mjs';
+import { u as useCopy } from './useCopy-BQQKcwlq.mjs';
+import { u as useFetch } from './fetch-8kznMtBM.mjs';
 import './DashboardSidebarToggle-Ji6ADuqF.mjs';
 import './Card-BQP_oZkQ.mjs';
 import './HelpHint-YEMWtKu1.mjs';
 import './help-content-DmFnuhNu.mjs';
-import './useCopy-BQQKcwlq.mjs';
 import 'vue-router';
 import '@iconify/vue';
 import 'tailwindcss/colors';
@@ -64,21 +66,36 @@ import 'highlight.js/lib/languages/javascript';
 import 'highlight.js/lib/languages/bash';
 import 'highlight.js/lib/languages/json';
 import 'highlight.js/lib/languages/diff';
+import '@vue/shared';
 
 function useRequestURL(opts) {
   {
     return getRequestURL(useRequestEvent(), opts);
   }
 }
+const apiKeyPlaceholder = "pd_YOUR_API_KEY";
 const _sfc_main = /* @__PURE__ */ defineComponent({
   __name: "mcp",
   __ssrInlineRender: true,
-  setup(__props) {
+  async setup(__props) {
+    let __temp, __restore;
     const config = useRuntimeConfig();
     const isDemo = config.public.demoMode;
+    const isDesktop = useIsDesktop();
+    const { copy } = useCopy();
+    const { data: reporterConfig } = ([__temp, __restore] = withAsyncContext(() => useFetch(
+      "/api/desktop/reporter-config",
+      {
+        immediate: isDesktop,
+        default: () => null
+      },
+      "$fdl6kilREP"
+      /* nuxt-injected */
+    )), __temp = await __temp, __restore(), __temp);
+    const bearerToken = computed(() => reporterConfig.value?.token ?? apiKeyPlaceholder);
     const requestUrl = useRequestURL();
     const mcpUrl = computed(() => {
-      const base = config.public.siteUrl || requestUrl.origin;
+      const base = reporterConfig.value?.url ?? config.public.siteUrl ?? requestUrl.origin;
       return `${base}/mcp`;
     });
     useHead({ title: "MCP server — Piwi Dashboard" });
@@ -93,7 +110,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
     ];
     const claudeCodeSnippet = computed(
       () => `claude mcp add --transport http piwi ${mcpUrl.value} \\
-  --header "Authorization: Bearer pd_YOUR_API_KEY"`
+  --header "Authorization: Bearer ${bearerToken.value}"`
     );
     const cursorSnippet = computed(
       () => JSON.stringify(
@@ -101,7 +118,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
           mcpServers: {
             piwi: {
               url: mcpUrl.value,
-              headers: { Authorization: "Bearer pd_YOUR_API_KEY" }
+              headers: { Authorization: `Bearer ${bearerToken.value}` }
             }
           }
         },
@@ -116,7 +133,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
             piwi: {
               type: "http",
               url: mcpUrl.value,
-              headers: { Authorization: "Bearer pd_YOUR_API_KEY" }
+              headers: { Authorization: `Bearer ${bearerToken.value}` }
             }
           }
         },
@@ -131,7 +148,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
             piwi: {
               type: "http",
               url: mcpUrl.value,
-              headers: { Authorization: "Bearer pd_YOUR_API_KEY" }
+              headers: { Authorization: `Bearer ${bearerToken.value}` }
             }
           }
         },
@@ -141,7 +158,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
     );
     const geminiSnippet = computed(
       () => `gemini mcp add --transport http piwi ${mcpUrl.value} \\
-  --header "Authorization: Bearer pd_YOUR_API_KEY"`
+  --header "Authorization: Bearer ${bearerToken.value}"`
     );
     const windsurfSnippet = computed(
       () => JSON.stringify(
@@ -149,7 +166,7 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
           mcpServers: {
             piwi: {
               serverUrl: mcpUrl.value,
-              headers: { Authorization: "Bearer pd_YOUR_API_KEY" }
+              headers: { Authorization: `Bearer ${bearerToken.value}` }
             }
           }
         },
@@ -162,10 +179,10 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
       const _component_UDashboardNavbar = _sfc_main$4;
       const _component_UAlert = _sfc_main$2;
       const _component_SectionCard = __nuxt_component_11;
-      const _component_UIcon = _sfc_main$p;
+      const _component_UButton = _sfc_main$k;
       const _component_UTabs = _sfc_main$3;
       const _component_CodeBlock = __nuxt_component_5;
-      const _component_UButton = _sfc_main$k;
+      const _component_UIcon = _sfc_main$p;
       _push(ssrRenderComponent(_component_UDashboardPanel, _attrs, {
         header: withCtx((_, _push2, _parent2, _scopeId) => {
           if (_push2) {
@@ -189,81 +206,6 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
             } else {
               _push2(`<!---->`);
             }
-            _push2(ssrRenderComponent(_component_SectionCard, {
-              icon: "i-lucide-bot",
-              title: "What it provides",
-              help: "mcp.tools"
-            }, {
-              default: withCtx((_2, _push3, _parent3, _scopeId2) => {
-                if (_push3) {
-                  _push3(`<div class="flex flex-col gap-1.5"${_scopeId2}><!--[-->`);
-                  ssrRenderList(unref(tools), (t) => {
-                    _push3(`<div class="flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"${_scopeId2}>`);
-                    _push3(ssrRenderComponent(_component_UIcon, {
-                      name: "i-lucide-wrench",
-                      class: "size-4 mt-0.5 shrink-0 text-primary"
-                    }, null, _parent3, _scopeId2));
-                    _push3(`<div class="min-w-0"${_scopeId2}><p class="text-sm font-mono font-semibold text-foreground"${_scopeId2}>${ssrInterpolate(t.name)}</p><p class="text-xs text-gray-500 dark:text-gray-400 mt-0.5"${_scopeId2}>${ssrInterpolate(t.description)}</p></div></div>`);
-                  });
-                  _push3(`<!--]--></div>`);
-                } else {
-                  return [
-                    createVNode("div", { class: "flex flex-col gap-1.5" }, [
-                      (openBlock(true), createBlock(Fragment, null, renderList(unref(tools), (t) => {
-                        return openBlock(), createBlock("div", {
-                          key: t.name,
-                          class: "flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"
-                        }, [
-                          createVNode(_component_UIcon, {
-                            name: "i-lucide-wrench",
-                            class: "size-4 mt-0.5 shrink-0 text-primary"
-                          }),
-                          createVNode("div", { class: "min-w-0" }, [
-                            createVNode("p", { class: "text-sm font-mono font-semibold text-foreground" }, toDisplayString(t.name), 1),
-                            createVNode("p", { class: "text-xs text-gray-500 dark:text-gray-400 mt-0.5" }, toDisplayString(t.description), 1)
-                          ])
-                        ]);
-                      }), 128))
-                    ])
-                  ];
-                }
-              }),
-              _: 1
-            }, _parent2, _scopeId));
-            _push2(ssrRenderComponent(_component_SectionCard, {
-              icon: "i-lucide-key",
-              title: "Authentication",
-              help: "mcp.auth"
-            }, {
-              default: withCtx((_2, _push3, _parent3, _scopeId2) => {
-                if (_push3) {
-                  _push3(`<div class="space-y-3 text-sm text-gray-600 dark:text-gray-400"${_scopeId2}><p${_scopeId2}> MCP requests are authenticated with the same API keys used by the REST API. API keys start with <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_</code>. </p><p${_scopeId2}> Generate a key in <strong${_scopeId2}>Settings → Users → [your account] → API keys</strong>, then replace <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_YOUR_API_KEY</code> in the snippets below. </p><p class="text-xs text-gray-400"${_scopeId2}> When authentication is disabled (<code class="font-mono"${_scopeId2}>PIWI_AUTH_ENABLED</code> not set), any request is accepted without a key. </p></div>`);
-                } else {
-                  return [
-                    createVNode("div", { class: "space-y-3 text-sm text-gray-600 dark:text-gray-400" }, [
-                      createVNode("p", null, [
-                        createTextVNode(" MCP requests are authenticated with the same API keys used by the REST API. API keys start with "),
-                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_"),
-                        createTextVNode(". ")
-                      ]),
-                      createVNode("p", null, [
-                        createTextVNode(" Generate a key in "),
-                        createVNode("strong", null, "Settings → Users → [your account] → API keys"),
-                        createTextVNode(", then replace "),
-                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
-                        createTextVNode(" in the snippets below. ")
-                      ]),
-                      createVNode("p", { class: "text-xs text-gray-400" }, [
-                        createTextVNode(" When authentication is disabled ("),
-                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
-                        createTextVNode(" not set), any request is accepted without a key. ")
-                      ])
-                    ])
-                  ];
-                }
-              }),
-              _: 1
-            }, _parent2, _scopeId));
             _push2(ssrRenderComponent(_component_SectionCard, {
               icon: "i-lucide-settings-2",
               title: "Client setup",
@@ -271,7 +213,36 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
             }, {
               default: withCtx((_2, _push3, _parent3, _scopeId2) => {
                 if (_push3) {
-                  _push3(`<p class="text-sm text-gray-500 dark:text-gray-400 mb-4"${_scopeId2}> Replace <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_YOUR_API_KEY</code> with your actual API key. The MCP URL shown below is auto-detected from your current browser origin. </p>`);
+                  if (unref(reporterConfig)) {
+                    _push3(`<div class="mb-4 space-y-3 rounded-md border border-default bg-elevated/50 p-3"${_scopeId2}><div class="space-y-1"${_scopeId2}><div class="text-xs text-muted"${_scopeId2}>MCP URL</div><div class="flex items-start gap-2"${_scopeId2}><code class="text-xs break-all flex-1"${_scopeId2}>${ssrInterpolate(unref(mcpUrl))}</code>`);
+                    _push3(ssrRenderComponent(_component_UButton, {
+                      icon: "i-lucide-copy",
+                      color: "neutral",
+                      variant: "ghost",
+                      size: "xs",
+                      "aria-label": "Copy MCP URL",
+                      onClick: ($event) => unref(copy)(unref(mcpUrl), { toast: true })
+                    }, null, _parent3, _scopeId2));
+                    _push3(`</div></div><div class="space-y-1"${_scopeId2}><div class="text-xs text-muted"${_scopeId2}>Access token</div><div class="flex items-start gap-2"${_scopeId2}><code class="text-xs break-all flex-1"${_scopeId2}>${ssrInterpolate(unref(bearerToken))}</code>`);
+                    _push3(ssrRenderComponent(_component_UButton, {
+                      icon: "i-lucide-copy",
+                      color: "neutral",
+                      variant: "ghost",
+                      size: "xs",
+                      "aria-label": "Copy access token",
+                      onClick: ($event) => unref(copy)(unref(bearerToken), { toast: true })
+                    }, null, _parent3, _scopeId2));
+                    _push3(`</div></div><p class="text-xs text-muted"${_scopeId2}> This app authenticates with a local access token even though sign-in is off — it is the <code class="font-mono"${_scopeId2}>Bearer</code> value, already filled into the snippets below. </p></div>`);
+                  } else {
+                    _push3(`<!---->`);
+                  }
+                  _push3(`<p class="text-sm text-gray-500 dark:text-gray-400 mb-4"${_scopeId2}>`);
+                  if (unref(reporterConfig)) {
+                    _push3(`<!--[-->Pick your client below — the URL and access token above are already baked into each snippet.<!--]-->`);
+                  } else {
+                    _push3(`<!--[-->Replace <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_YOUR_API_KEY</code> with your actual API key. The MCP URL shown in the snippets is auto-detected from your current browser origin.<!--]-->`);
+                  }
+                  _push3(`</p>`);
                   _push3(ssrRenderComponent(_component_UTabs, {
                     items: clientItems,
                     ui: { list: "mb-4" }
@@ -439,10 +410,52 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                   }, _parent3, _scopeId2));
                 } else {
                   return [
+                    unref(reporterConfig) ? (openBlock(), createBlock("div", {
+                      key: 0,
+                      class: "mb-4 space-y-3 rounded-md border border-default bg-elevated/50 p-3"
+                    }, [
+                      createVNode("div", { class: "space-y-1" }, [
+                        createVNode("div", { class: "text-xs text-muted" }, "MCP URL"),
+                        createVNode("div", { class: "flex items-start gap-2" }, [
+                          createVNode("code", { class: "text-xs break-all flex-1" }, toDisplayString(unref(mcpUrl)), 1),
+                          createVNode(_component_UButton, {
+                            icon: "i-lucide-copy",
+                            color: "neutral",
+                            variant: "ghost",
+                            size: "xs",
+                            "aria-label": "Copy MCP URL",
+                            onClick: ($event) => unref(copy)(unref(mcpUrl), { toast: true })
+                          }, null, 8, ["onClick"])
+                        ])
+                      ]),
+                      createVNode("div", { class: "space-y-1" }, [
+                        createVNode("div", { class: "text-xs text-muted" }, "Access token"),
+                        createVNode("div", { class: "flex items-start gap-2" }, [
+                          createVNode("code", { class: "text-xs break-all flex-1" }, toDisplayString(unref(bearerToken)), 1),
+                          createVNode(_component_UButton, {
+                            icon: "i-lucide-copy",
+                            color: "neutral",
+                            variant: "ghost",
+                            size: "xs",
+                            "aria-label": "Copy access token",
+                            onClick: ($event) => unref(copy)(unref(bearerToken), { toast: true })
+                          }, null, 8, ["onClick"])
+                        ])
+                      ]),
+                      createVNode("p", { class: "text-xs text-muted" }, [
+                        createTextVNode(" This app authenticates with a local access token even though sign-in is off — it is the "),
+                        createVNode("code", { class: "font-mono" }, "Bearer"),
+                        createTextVNode(" value, already filled into the snippets below. ")
+                      ])
+                    ])) : createCommentVNode("", true),
                     createVNode("p", { class: "text-sm text-gray-500 dark:text-gray-400 mb-4" }, [
-                      createTextVNode(" Replace "),
-                      createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
-                      createTextVNode(" with your actual API key. The MCP URL shown below is auto-detected from your current browser origin. ")
+                      unref(reporterConfig) ? (openBlock(), createBlock(Fragment, { key: 0 }, [
+                        createTextVNode("Pick your client below — the URL and access token above are already baked into each snippet.")
+                      ], 64)) : (openBlock(), createBlock(Fragment, { key: 1 }, [
+                        createTextVNode("Replace "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
+                        createTextVNode(" with your actual API key. The MCP URL shown in the snippets is auto-detected from your current browser origin.")
+                      ], 64))
                     ]),
                     createVNode(_component_UTabs, {
                       items: clientItems,
@@ -548,6 +561,106 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
               }),
               _: 1
             }, _parent2, _scopeId));
+            _push2(ssrRenderComponent(_component_SectionCard, {
+              icon: "i-lucide-bot",
+              title: "What it provides",
+              help: "mcp.tools"
+            }, {
+              default: withCtx((_2, _push3, _parent3, _scopeId2) => {
+                if (_push3) {
+                  _push3(`<div class="flex flex-col gap-1.5"${_scopeId2}><!--[-->`);
+                  ssrRenderList(unref(tools), (t) => {
+                    _push3(`<div class="flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"${_scopeId2}>`);
+                    _push3(ssrRenderComponent(_component_UIcon, {
+                      name: "i-lucide-wrench",
+                      class: "size-4 mt-0.5 shrink-0 text-primary"
+                    }, null, _parent3, _scopeId2));
+                    _push3(`<div class="min-w-0"${_scopeId2}><p class="text-sm font-mono font-semibold text-foreground"${_scopeId2}>${ssrInterpolate(t.name)}</p><p class="text-xs text-gray-500 dark:text-gray-400 mt-0.5"${_scopeId2}>${ssrInterpolate(t.description)}</p></div></div>`);
+                  });
+                  _push3(`<!--]--></div>`);
+                } else {
+                  return [
+                    createVNode("div", { class: "flex flex-col gap-1.5" }, [
+                      (openBlock(true), createBlock(Fragment, null, renderList(unref(tools), (t) => {
+                        return openBlock(), createBlock("div", {
+                          key: t.name,
+                          class: "flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"
+                        }, [
+                          createVNode(_component_UIcon, {
+                            name: "i-lucide-wrench",
+                            class: "size-4 mt-0.5 shrink-0 text-primary"
+                          }),
+                          createVNode("div", { class: "min-w-0" }, [
+                            createVNode("p", { class: "text-sm font-mono font-semibold text-foreground" }, toDisplayString(t.name), 1),
+                            createVNode("p", { class: "text-xs text-gray-500 dark:text-gray-400 mt-0.5" }, toDisplayString(t.description), 1)
+                          ])
+                        ]);
+                      }), 128))
+                    ])
+                  ];
+                }
+              }),
+              _: 1
+            }, _parent2, _scopeId));
+            _push2(ssrRenderComponent(_component_SectionCard, {
+              icon: "i-lucide-key",
+              title: "Authentication",
+              help: "mcp.auth"
+            }, {
+              default: withCtx((_2, _push3, _parent3, _scopeId2) => {
+                if (_push3) {
+                  _push3(`<div class="space-y-3 text-sm text-gray-600 dark:text-gray-400"${_scopeId2}><p${_scopeId2}> MCP requests are authenticated with the same API keys used by the REST API. API keys start with <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_</code>. </p>`);
+                  if (!unref(isDesktop)) {
+                    _push3(`<p${_scopeId2}> Generate a key in <strong${_scopeId2}>Settings → Users → [your account] → API keys</strong>, then replace <code class="px-1 py-0.5 bg-muted rounded text-xs font-mono"${_scopeId2}>pd_YOUR_API_KEY</code> in the snippets above. </p>`);
+                  } else {
+                    _push3(`<p${_scopeId2}> This app provides a local access token automatically — shown in <strong${_scopeId2}>Client setup</strong> above and already filled into every snippet, so there is nothing to replace. </p>`);
+                  }
+                  if (!unref(isDesktop)) {
+                    _push3(`<p class="text-xs text-gray-400"${_scopeId2}> When authentication is disabled (<code class="font-mono"${_scopeId2}>PIWI_AUTH_ENABLED</code> not set), any request is accepted without a key. </p>`);
+                  } else {
+                    _push3(`<p class="text-xs text-gray-400"${_scopeId2}> This desktop app keeps sign-in off but still requires its own local access token on every request — it is the <code class="font-mono"${_scopeId2}>Bearer</code> value. The endpoint is not open. </p>`);
+                  }
+                  _push3(`</div>`);
+                } else {
+                  return [
+                    createVNode("div", { class: "space-y-3 text-sm text-gray-600 dark:text-gray-400" }, [
+                      createVNode("p", null, [
+                        createTextVNode(" MCP requests are authenticated with the same API keys used by the REST API. API keys start with "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_"),
+                        createTextVNode(". ")
+                      ]),
+                      !unref(isDesktop) ? (openBlock(), createBlock("p", { key: 0 }, [
+                        createTextVNode(" Generate a key in "),
+                        createVNode("strong", null, "Settings → Users → [your account] → API keys"),
+                        createTextVNode(", then replace "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
+                        createTextVNode(" in the snippets above. ")
+                      ])) : (openBlock(), createBlock("p", { key: 1 }, [
+                        createTextVNode(" This app provides a local access token automatically — shown in "),
+                        createVNode("strong", null, "Client setup"),
+                        createTextVNode(" above and already filled into every snippet, so there is nothing to replace. ")
+                      ])),
+                      !unref(isDesktop) ? (openBlock(), createBlock("p", {
+                        key: 2,
+                        class: "text-xs text-gray-400"
+                      }, [
+                        createTextVNode(" When authentication is disabled ("),
+                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
+                        createTextVNode(" not set), any request is accepted without a key. ")
+                      ])) : (openBlock(), createBlock("p", {
+                        key: 3,
+                        class: "text-xs text-gray-400"
+                      }, [
+                        createTextVNode(" This desktop app keeps sign-in off but still requires its own local access token on every request — it is the "),
+                        createVNode("code", { class: "font-mono" }, "Bearer"),
+                        createTextVNode(" value. The endpoint is not open. ")
+                      ]))
+                    ])
+                  ];
+                }
+              }),
+              _: 1
+            }, _parent2, _scopeId));
             _push2(ssrRenderComponent(_component_SectionCard, {
               icon: "i-lucide-link",
               title: "Server URL"
@@ -575,7 +688,13 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                     }),
                     _: 1
                   }, _parent3, _scopeId2));
-                  _push3(`</div><p class="text-xs text-gray-400"${_scopeId2}> This is your Piwi instance&#39;s MCP endpoint. It is also the server URL to paste into client configs above. The server requires a valid Bearer token (or no auth if <code class="font-mono"${_scopeId2}>PIWI_AUTH_ENABLED</code> is not set). </p></div>`);
+                  _push3(`</div><p class="text-xs text-gray-400"${_scopeId2}> This is your Piwi instance&#39;s MCP endpoint. It is also the server URL to paste into client configs above. `);
+                  if (unref(isDesktop)) {
+                    _push3(`<!--[-->This desktop app requires its local access token as the <code class="font-mono"${_scopeId2}>Bearer</code> value on every request.<!--]-->`);
+                  } else {
+                    _push3(`<!--[-->The server requires a valid Bearer token (or no auth if <code class="font-mono"${_scopeId2}>PIWI_AUTH_ENABLED</code> is not set).<!--]-->`);
+                  }
+                  _push3(`</p></div>`);
                 } else {
                   return [
                     createVNode("div", { class: "space-y-2" }, [
@@ -597,9 +716,16 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                         }, 8, ["external"])
                       ]),
                       createVNode("p", { class: "text-xs text-gray-400" }, [
-                        createTextVNode(" This is your Piwi instance's MCP endpoint. It is also the server URL to paste into client configs above. The server requires a valid Bearer token (or no auth if "),
-                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
-                        createTextVNode(" is not set). ")
+                        createTextVNode(" This is your Piwi instance's MCP endpoint. It is also the server URL to paste into client configs above. "),
+                        unref(isDesktop) ? (openBlock(), createBlock(Fragment, { key: 0 }, [
+                          createTextVNode("This desktop app requires its local access token as the "),
+                          createVNode("code", { class: "font-mono" }, "Bearer"),
+                          createTextVNode(" value on every request.")
+                        ], 64)) : (openBlock(), createBlock(Fragment, { key: 1 }, [
+                          createTextVNode("The server requires a valid Bearer token (or no auth if "),
+                          createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
+                          createTextVNode(" is not set).")
+                        ], 64))
                       ])
                     ])
                   ];
@@ -618,70 +744,58 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                   title: "Feature preview",
                   description: "The MCP endpoint is not active in this demo — it requires a real Piwi backend. The tools and client setup shown below reflect what your own deployment exposes."
                 })) : createCommentVNode("", true),
-                createVNode(_component_SectionCard, {
-                  icon: "i-lucide-bot",
-                  title: "What it provides",
-                  help: "mcp.tools"
-                }, {
-                  default: withCtx(() => [
-                    createVNode("div", { class: "flex flex-col gap-1.5" }, [
-                      (openBlock(true), createBlock(Fragment, null, renderList(unref(tools), (t) => {
-                        return openBlock(), createBlock("div", {
-                          key: t.name,
-                          class: "flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"
-                        }, [
-                          createVNode(_component_UIcon, {
-                            name: "i-lucide-wrench",
-                            class: "size-4 mt-0.5 shrink-0 text-primary"
-                          }),
-                          createVNode("div", { class: "min-w-0" }, [
-                            createVNode("p", { class: "text-sm font-mono font-semibold text-foreground" }, toDisplayString(t.name), 1),
-                            createVNode("p", { class: "text-xs text-gray-500 dark:text-gray-400 mt-0.5" }, toDisplayString(t.description), 1)
-                          ])
-                        ]);
-                      }), 128))
-                    ])
-                  ]),
-                  _: 1
-                }),
-                createVNode(_component_SectionCard, {
-                  icon: "i-lucide-key",
-                  title: "Authentication",
-                  help: "mcp.auth"
-                }, {
-                  default: withCtx(() => [
-                    createVNode("div", { class: "space-y-3 text-sm text-gray-600 dark:text-gray-400" }, [
-                      createVNode("p", null, [
-                        createTextVNode(" MCP requests are authenticated with the same API keys used by the REST API. API keys start with "),
-                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_"),
-                        createTextVNode(". ")
-                      ]),
-                      createVNode("p", null, [
-                        createTextVNode(" Generate a key in "),
-                        createVNode("strong", null, "Settings → Users → [your account] → API keys"),
-                        createTextVNode(", then replace "),
-                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
-                        createTextVNode(" in the snippets below. ")
-                      ]),
-                      createVNode("p", { class: "text-xs text-gray-400" }, [
-                        createTextVNode(" When authentication is disabled ("),
-                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
-                        createTextVNode(" not set), any request is accepted without a key. ")
-                      ])
-                    ])
-                  ]),
-                  _: 1
-                }),
                 createVNode(_component_SectionCard, {
                   icon: "i-lucide-settings-2",
                   title: "Client setup",
                   help: "mcp.client-setup"
                 }, {
                   default: withCtx(() => [
+                    unref(reporterConfig) ? (openBlock(), createBlock("div", {
+                      key: 0,
+                      class: "mb-4 space-y-3 rounded-md border border-default bg-elevated/50 p-3"
+                    }, [
+                      createVNode("div", { class: "space-y-1" }, [
+                        createVNode("div", { class: "text-xs text-muted" }, "MCP URL"),
+                        createVNode("div", { class: "flex items-start gap-2" }, [
+                          createVNode("code", { class: "text-xs break-all flex-1" }, toDisplayString(unref(mcpUrl)), 1),
+                          createVNode(_component_UButton, {
+                            icon: "i-lucide-copy",
+                            color: "neutral",
+                            variant: "ghost",
+                            size: "xs",
+                            "aria-label": "Copy MCP URL",
+                            onClick: ($event) => unref(copy)(unref(mcpUrl), { toast: true })
+                          }, null, 8, ["onClick"])
+                        ])
+                      ]),
+                      createVNode("div", { class: "space-y-1" }, [
+                        createVNode("div", { class: "text-xs text-muted" }, "Access token"),
+                        createVNode("div", { class: "flex items-start gap-2" }, [
+                          createVNode("code", { class: "text-xs break-all flex-1" }, toDisplayString(unref(bearerToken)), 1),
+                          createVNode(_component_UButton, {
+                            icon: "i-lucide-copy",
+                            color: "neutral",
+                            variant: "ghost",
+                            size: "xs",
+                            "aria-label": "Copy access token",
+                            onClick: ($event) => unref(copy)(unref(bearerToken), { toast: true })
+                          }, null, 8, ["onClick"])
+                        ])
+                      ]),
+                      createVNode("p", { class: "text-xs text-muted" }, [
+                        createTextVNode(" This app authenticates with a local access token even though sign-in is off — it is the "),
+                        createVNode("code", { class: "font-mono" }, "Bearer"),
+                        createTextVNode(" value, already filled into the snippets below. ")
+                      ])
+                    ])) : createCommentVNode("", true),
                     createVNode("p", { class: "text-sm text-gray-500 dark:text-gray-400 mb-4" }, [
-                      createTextVNode(" Replace "),
-                      createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
-                      createTextVNode(" with your actual API key. The MCP URL shown below is auto-detected from your current browser origin. ")
+                      unref(reporterConfig) ? (openBlock(), createBlock(Fragment, { key: 0 }, [
+                        createTextVNode("Pick your client below — the URL and access token above are already baked into each snippet.")
+                      ], 64)) : (openBlock(), createBlock(Fragment, { key: 1 }, [
+                        createTextVNode("Replace "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
+                        createTextVNode(" with your actual API key. The MCP URL shown in the snippets is auto-detected from your current browser origin.")
+                      ], 64))
                     ]),
                     createVNode(_component_UTabs, {
                       items: clientItems,
@@ -785,6 +899,74 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                   ]),
                   _: 1
                 }),
+                createVNode(_component_SectionCard, {
+                  icon: "i-lucide-bot",
+                  title: "What it provides",
+                  help: "mcp.tools"
+                }, {
+                  default: withCtx(() => [
+                    createVNode("div", { class: "flex flex-col gap-1.5" }, [
+                      (openBlock(true), createBlock(Fragment, null, renderList(unref(tools), (t) => {
+                        return openBlock(), createBlock("div", {
+                          key: t.name,
+                          class: "flex items-start gap-3 px-3 py-2.5 rounded-md bg-elevated/50 border border-default hover:bg-elevated transition-colors"
+                        }, [
+                          createVNode(_component_UIcon, {
+                            name: "i-lucide-wrench",
+                            class: "size-4 mt-0.5 shrink-0 text-primary"
+                          }),
+                          createVNode("div", { class: "min-w-0" }, [
+                            createVNode("p", { class: "text-sm font-mono font-semibold text-foreground" }, toDisplayString(t.name), 1),
+                            createVNode("p", { class: "text-xs text-gray-500 dark:text-gray-400 mt-0.5" }, toDisplayString(t.description), 1)
+                          ])
+                        ]);
+                      }), 128))
+                    ])
+                  ]),
+                  _: 1
+                }),
+                createVNode(_component_SectionCard, {
+                  icon: "i-lucide-key",
+                  title: "Authentication",
+                  help: "mcp.auth"
+                }, {
+                  default: withCtx(() => [
+                    createVNode("div", { class: "space-y-3 text-sm text-gray-600 dark:text-gray-400" }, [
+                      createVNode("p", null, [
+                        createTextVNode(" MCP requests are authenticated with the same API keys used by the REST API. API keys start with "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_"),
+                        createTextVNode(". ")
+                      ]),
+                      !unref(isDesktop) ? (openBlock(), createBlock("p", { key: 0 }, [
+                        createTextVNode(" Generate a key in "),
+                        createVNode("strong", null, "Settings → Users → [your account] → API keys"),
+                        createTextVNode(", then replace "),
+                        createVNode("code", { class: "px-1 py-0.5 bg-muted rounded text-xs font-mono" }, "pd_YOUR_API_KEY"),
+                        createTextVNode(" in the snippets above. ")
+                      ])) : (openBlock(), createBlock("p", { key: 1 }, [
+                        createTextVNode(" This app provides a local access token automatically — shown in "),
+                        createVNode("strong", null, "Client setup"),
+                        createTextVNode(" above and already filled into every snippet, so there is nothing to replace. ")
+                      ])),
+                      !unref(isDesktop) ? (openBlock(), createBlock("p", {
+                        key: 2,
+                        class: "text-xs text-gray-400"
+                      }, [
+                        createTextVNode(" When authentication is disabled ("),
+                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
+                        createTextVNode(" not set), any request is accepted without a key. ")
+                      ])) : (openBlock(), createBlock("p", {
+                        key: 3,
+                        class: "text-xs text-gray-400"
+                      }, [
+                        createTextVNode(" This desktop app keeps sign-in off but still requires its own local access token on every request — it is the "),
+                        createVNode("code", { class: "font-mono" }, "Bearer"),
+                        createTextVNode(" value. The endpoint is not open. ")
+                      ]))
+                    ])
+                  ]),
+                  _: 1
+                }),
                 createVNode(_component_SectionCard, {
                   icon: "i-lucide-link",
                   title: "Server URL"
@@ -809,9 +991,16 @@ const _sfc_main = /* @__PURE__ */ defineComponent({
                         }, 8, ["external"])
                       ]),
                       createVNode("p", { class: "text-xs text-gray-400" }, [
-                        createTextVNode(" This is your Piwi instance's MCP endpoint. It is also the server URL to paste into client configs above. The server requires a valid Bearer token (or no auth if "),
-                        createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
-                        createTextVNode(" is not set). ")
+                        createTextVNode(" This is your Piwi instance's MCP endpoint. It is also the server URL to paste into client configs above. "),
+                        unref(isDesktop) ? (openBlock(), createBlock(Fragment, { key: 0 }, [
+                          createTextVNode("This desktop app requires its local access token as the "),
+                          createVNode("code", { class: "font-mono" }, "Bearer"),
+                          createTextVNode(" value on every request.")
+                        ], 64)) : (openBlock(), createBlock(Fragment, { key: 1 }, [
+                          createTextVNode("The server requires a valid Bearer token (or no auth if "),
+                          createVNode("code", { class: "font-mono" }, "PIWI_AUTH_ENABLED"),
+                          createTextVNode(" is not set).")
+                        ], 64))
                       ])
                     ])
                   ]),
@@ -834,4 +1023,4 @@ _sfc_main.setup = (props, ctx) => {
 };
 
 export { _sfc_main as default };
-//# sourceMappingURL=mcp-CXwa3xU3.mjs.map
+//# sourceMappingURL=mcp-_o6cMS6m.mjs.map