@promptbook/cli 0.112.0-93 → 0.112.0-96

package/apps/agents-server/src/app/admin/environment/EnvironmentVariablesClient.tsx

@@ -0,0 +1,259 @@
+'use client';
+
+import { EyeOff, Loader2, Save, ServerCog } from 'lucide-react';
+import { useEffect, useMemo, useState } from 'react';
+import { Card } from '../../../components/Homepage/Card';
+
+/**
+ * One environment variable returned by the admin API.
+ */
+type EnvironmentVariableRecord = {
+    readonly key: string;
+    readonly value: string;
+    readonly isSensitive: boolean;
+    readonly isDefined: boolean;
+};
+
+/**
+ * Environment API response consumed by the client page.
+ */
+type EnvironmentVariablesResponse = {
+    readonly envFilePath: string;
+    readonly variables: ReadonlyArray<EnvironmentVariableRecord>;
+    readonly canEdit: boolean;
+    readonly error?: string;
+    readonly applyResult?: {
+        readonly isAvailable: boolean;
+        readonly output: string;
+    } | null;
+};
+
+/**
+ * Shared input styling for environment rows.
+ */
+const INPUT_CLASS_NAME =
+    'w-full rounded-md border border-gray-300 px-3 py-2 text-sm font-mono text-gray-900 shadow-sm focus:border-blue-500 focus:outline-none focus:ring-2 focus:ring-blue-200 disabled:bg-gray-50 disabled:text-gray-500';
+
+/**
+ * Placeholder shown instead of sensitive environment values.
+ */
+const HIDDEN_ENVIRONMENT_VALUE = '********';
+
+/**
+ * Browser UI for standalone VPS environment variables.
+ */
+export function EnvironmentVariablesClient() {
+    const [envFilePath, setEnvFilePath] = useState('');
+    const [variables, setVariables] = useState<EnvironmentVariableRecord[]>([]);
+    const [draftValues, setDraftValues] = useState<Record<string, string>>({});
+    const [canEdit, setCanEdit] = useState(false);
+    const [isLoading, setIsLoading] = useState(true);
+    const [isSaving, setIsSaving] = useState(false);
+    const [errorMessage, setErrorMessage] = useState<string | null>(null);
+    const [successMessage, setSuccessMessage] = useState<string | null>(null);
+    const [applyOutput, setApplyOutput] = useState<string | null>(null);
+
+    const hasChanges = useMemo(
+        () => variables.some((variable) => draftValues[variable.key] !== variable.value),
+        [draftValues, variables],
+    );
+
+    useEffect(() => {
+        void loadVariables();
+    }, []);
+
+    /**
+     * Loads environment variables from the admin API.
+     */
+    async function loadVariables(): Promise<void> {
+        try {
+            setIsLoading(true);
+            setErrorMessage(null);
+            const response = await fetch('/api/admin/environment', { cache: 'no-store' });
+            const payload = (await response.json()) as EnvironmentVariablesResponse;
+
+            if (!response.ok) {
+                throw new Error(payload.error || 'Failed to load environment variables.');
+            }
+
+            setEnvFilePath(payload.envFilePath);
+            setVariables([...payload.variables]);
+            setDraftValues(Object.fromEntries(payload.variables.map((variable) => [variable.key, variable.value])));
+            setCanEdit(payload.canEdit);
+        } catch (error) {
+            setErrorMessage(error instanceof Error ? error.message : 'Failed to load environment variables.');
+        } finally {
+            setIsLoading(false);
+        }
+    }
+
+    /**
+     * Persists current environment drafts.
+     *
+     * @param applyRuntimeConfiguration - Whether to run the VPS apply step after saving.
+     */
+    async function saveVariables(applyRuntimeConfiguration: boolean): Promise<void> {
+        try {
+            setIsSaving(true);
+            setErrorMessage(null);
+            setSuccessMessage(null);
+            setApplyOutput(null);
+
+            const response = await fetch('/api/admin/environment', {
+                method: 'PATCH',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    variables: draftValues,
+                    applyRuntimeConfiguration,
+                }),
+            });
+            const payload = (await response.json()) as EnvironmentVariablesResponse;
+
+            if (!response.ok) {
+                throw new Error(payload.error || 'Failed to save environment variables.');
+            }
+
+            setEnvFilePath(payload.envFilePath);
+            setVariables([...payload.variables]);
+            setDraftValues(Object.fromEntries(payload.variables.map((variable) => [variable.key, variable.value])));
+            setCanEdit(payload.canEdit);
+            setSuccessMessage('Environment variables were saved.');
+            setApplyOutput(payload.applyResult?.output || null);
+        } catch (error) {
+            setErrorMessage(error instanceof Error ? error.message : 'Failed to save environment variables.');
+        } finally {
+            setIsSaving(false);
+        }
+    }
+
+    return (
+        <div className="space-y-6">
+            <Card className="hover:border-gray-200 hover:shadow-md">
+                <div className="space-y-2 text-sm text-slate-600">
+                    <p>
+                        These values are stored in the VPS-wide <span className="font-mono">.env</span> file and affect
+                        the whole installed Agents Server process.
+                    </p>
+                    <p>
+                        Sensitive values are always masked. To change a secret, type a new value; leaving the stars in
+                        place keeps the current secret.
+                    </p>
+                    {envFilePath ? <p className="font-mono text-xs text-slate-500">{envFilePath}</p> : null}
+                </div>
+            </Card>
+
+            {!canEdit && (
+                <div className="rounded-xl border border-amber-200 bg-amber-50 px-4 py-3 text-sm text-amber-800">
+                    You can view environment variables as an administrator. Editing is restricted to the super admin
+                    authenticated with <span className="font-mono">ADMIN_PASSWORD</span>.
+                </div>
+            )}
+
+            {errorMessage && (
+                <div className="rounded-xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
+                    {errorMessage}
+                </div>
+            )}
+            {successMessage && (
+                <div className="rounded-xl border border-emerald-200 bg-emerald-50 px-4 py-3 text-sm text-emerald-700">
+                    {successMessage}
+                </div>
+            )}
+            {applyOutput && (
+                <pre className="max-h-72 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100">
+                    {applyOutput}
+                </pre>
+            )}
+
+            <Card className="hover:border-gray-200 hover:shadow-md">
+                {isLoading ? (
+                    <div className="py-10 text-center text-sm text-gray-500">Loading environment variables...</div>
+                ) : (
+                    <div className="overflow-x-auto rounded-xl border border-gray-200">
+                        <table className="min-w-full table-fixed divide-y divide-gray-200 text-sm">
+                            <colgroup>
+                                <col className="w-[18rem]" />
+                                <col />
+                                <col className="w-[10rem]" />
+                            </colgroup>
+                            <thead className="bg-gray-50 text-xs uppercase tracking-wide text-gray-500">
+                                <tr>
+                                    <th className="px-4 py-3 text-left font-semibold">Variable</th>
+                                    <th className="px-4 py-3 text-left font-semibold">Value</th>
+                                    <th className="px-4 py-3 text-left font-semibold">Status</th>
+                                </tr>
+                            </thead>
+                            <tbody className="divide-y divide-gray-200 bg-white">
+                                {variables.map((variable) => (
+                                    <tr key={variable.key}>
+                                        <td className="px-4 py-3 align-top font-mono text-sm font-semibold text-slate-800">
+                                            {variable.key}
+                                        </td>
+                                        <td className="px-4 py-3 align-top">
+                                            <div className="relative">
+                                                <input
+                                                    type={variable.isSensitive ? 'password' : 'text'}
+                                                    value={draftValues[variable.key] ?? ''}
+                                                    onChange={(event) =>
+                                                        setDraftValues((currentDraftValues) => ({
+                                                            ...currentDraftValues,
+                                                            [variable.key]: event.target.value,
+                                                        }))
+                                                    }
+                                                    disabled={!canEdit || isSaving}
+                                                    className={`${INPUT_CLASS_NAME} ${
+                                                        variable.isSensitive ? 'pr-10 tracking-wider' : ''
+                                                    }`}
+                                                    placeholder={variable.isSensitive ? HIDDEN_ENVIRONMENT_VALUE : ''}
+                                                />
+                                                {variable.isSensitive && (
+                                                    <EyeOff className="pointer-events-none absolute right-3 top-2.5 h-4 w-4 text-slate-400" />
+                                                )}
+                                            </div>
+                                        </td>
+                                        <td className="px-4 py-3 align-top">
+                                            <span
+                                                className={`rounded-full border px-2.5 py-1 text-xs font-semibold ${
+                                                    variable.isDefined
+                                                        ? 'border-emerald-200 bg-emerald-50 text-emerald-700'
+                                                        : 'border-slate-200 bg-slate-50 text-slate-500'
+                                                }`}
+                                            >
+                                                {variable.isDefined ? 'Configured' : 'Empty'}
+                                            </span>
+                                        </td>
+                                    </tr>
+                                ))}
+                            </tbody>
+                        </table>
+                    </div>
+                )}
+            </Card>
+
+            {canEdit && (
+                <div className="flex flex-wrap items-center gap-3">
+                    <button
+                        type="button"
+                        onClick={() => void saveVariables(false)}
+                        disabled={isSaving || !hasChanges}
+                        className="inline-flex items-center gap-2 rounded-md bg-blue-600 px-4 py-2 text-sm font-semibold text-white hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-60"
+                    >
+                        {isSaving ? <Loader2 className="h-4 w-4 animate-spin" /> : <Save className="h-4 w-4" />}
+                        Save .env
+                    </button>
+                    <button
+                        type="button"
+                        onClick={() => void saveVariables(true)}
+                        disabled={isSaving}
+                        className="inline-flex items-center gap-2 rounded-md border border-slate-300 bg-white px-4 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-50 disabled:cursor-not-allowed disabled:opacity-60"
+                    >
+                        {isSaving ? <Loader2 className="h-4 w-4 animate-spin" /> : <ServerCog className="h-4 w-4" />}
+                        Save and apply VPS configuration
+                    </button>
+                </div>
+            )}
+        </div>
+    );
+}

package/apps/agents-server/src/app/admin/environment/page.tsx

@@ -0,0 +1,21 @@
+import { ForbiddenPage } from '../../../components/ForbiddenPage/ForbiddenPage';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
+import { AdminConfigurationShell } from '../_components/AdminConfigurationShell';
+import { EnvironmentVariablesClient } from './EnvironmentVariablesClient';
+
+/**
+ * Page for viewing and editing standalone VPS `.env` variables.
+ */
+export default async function EnvironmentVariablesPage() {
+    const isAdmin = await isUserAdmin();
+
+    if (!isAdmin) {
+        return <ForbiddenPage />;
+    }
+
+    return (
+        <AdminConfigurationShell activePage="environment">
+            <EnvironmentVariablesClient />
+        </AdminConfigurationShell>
+    );
+}

package/apps/agents-server/src/app/admin/logs/LogsClient.tsx

@@ -0,0 +1,78 @@
+'use client';
+
+import { Loader2, RefreshCcw } from 'lucide-react';
+import { useEffect, useState } from 'react';
+
+/**
+ * API payload returned by the pm2 logs endpoint.
+ */
+type LogsResponse = {
+    readonly isAvailable?: boolean;
+    readonly output?: string;
+    readonly error?: string;
+};
+
+/**
+ * Client UI for recent pm2 log output.
+ */
+export function LogsClient() {
+    const [logs, setLogs] = useState('');
+    const [isLoading, setIsLoading] = useState(true);
+    const [errorMessage, setErrorMessage] = useState<string | null>(null);
+
+    useEffect(() => {
+        void loadLogs();
+    }, []);
+
+    /**
+     * Refreshes log output from the API.
+     */
+    async function loadLogs(): Promise<void> {
+        try {
+            setIsLoading(true);
+            setErrorMessage(null);
+            const response = await fetch('/api/admin/logs?lines=300', { cache: 'no-store' });
+            const payload = (await response.json()) as LogsResponse;
+
+            if (!response.ok) {
+                throw new Error(payload.error || 'Failed to load logs.');
+            }
+
+            setLogs(payload.output || 'No log output returned.');
+        } catch (error) {
+            setErrorMessage(error instanceof Error ? error.message : 'Failed to load logs.');
+        } finally {
+            setIsLoading(false);
+        }
+    }
+
+    return (
+        <div className="container mx-auto space-y-6 px-4 py-8">
+            <div className="mt-20 flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between">
+                <div>
+                    <h1 className="text-3xl font-light text-gray-900">Logs</h1>
+                    <p className="mt-1 text-sm text-gray-500">Recent pm2 output for the standalone Agents Server.</p>
+                </div>
+                <button
+                    type="button"
+                    onClick={() => void loadLogs()}
+                    disabled={isLoading}
+                    className="inline-flex items-center gap-2 rounded-md border border-slate-300 bg-white px-4 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-50 disabled:cursor-not-allowed disabled:opacity-60"
+                >
+                    {isLoading ? <Loader2 className="h-4 w-4 animate-spin" /> : <RefreshCcw className="h-4 w-4" />}
+                    Refresh
+                </button>
+            </div>
+
+            {errorMessage && (
+                <div className="rounded-xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
+                    {errorMessage}
+                </div>
+            )}
+
+            <pre className="min-h-[28rem] overflow-auto rounded-xl border border-slate-800 bg-slate-950 p-4 text-xs leading-5 text-slate-100 shadow-sm">
+                {isLoading && !logs ? 'Loading logs...' : logs}
+            </pre>
+        </div>
+    );
+}

package/apps/agents-server/src/app/admin/logs/page.tsx

@@ -0,0 +1,14 @@
+import { ForbiddenPage } from '../../../components/ForbiddenPage/ForbiddenPage';
+import { isUserGlobalAdmin } from '../../../utils/isUserGlobalAdmin';
+import { LogsClient } from './LogsClient';
+
+/**
+ * Super-admin page for viewing standalone VPS pm2 logs.
+ */
+export default async function LogsPage() {
+    if (!(await isUserGlobalAdmin())) {
+        return <ForbiddenPage />;
+    }
+
+    return <LogsClient />;
+}

package/apps/agents-server/src/app/admin/servers/ServersClient.tsx

@@ -1,7 +1,8 @@
 'use client';
 
 import { Plus } from 'lucide-react';
-import { useCallback } from 'react';
+import { useSearchParams } from 'next/navigation';
+import { useCallback, useEffect } from 'react';
 import { Card } from '../../../components/Homepage/Card';
 import { Section } from '../../../components/Homepage/Section';
 import { useUnsavedChangesGuard } from '../../../components/utils/useUnsavedChangesGuard';
@@ -25,7 +26,9 @@ const PRIMARY_BUTTON_CLASS_NAME =
  * @private route component of AdminServersPage
  */
 export function ServersClient() {
+    const searchParams = useSearchParams();
     const {
+        canEdit,
         currentServer,
         currentServerId,
         deleteCurrentServer,
@@ -75,16 +78,39 @@ export function ServersClient() {
         });
     }, [allowNextNavigation, deleteCurrentServer]);
 
+    useEffect(() => {
+        if (
+            canEdit &&
+            !loading &&
+            servers.length === 0 &&
+            searchParams?.get('setup') === '1' &&
+            !createServerWizard.isDialogOpen
+        ) {
+            createServerWizard.openDialog();
+        }
+    }, [canEdit, createServerWizard, loading, searchParams, servers.length]);
+
     return (
         <div className="container mx-auto space-y-8 px-4 py-8">
             <div className="mt-20 flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between">
                 <h1 className="text-3xl font-light text-gray-900">Servers</h1>
-                <button type="button" onClick={createServerWizard.openDialog} className={PRIMARY_BUTTON_CLASS_NAME}>
-                    <Plus className="h-4 w-4" />
-                    Create new server
-                </button>
+                {canEdit ? (
+                    <button type="button" onClick={createServerWizard.openDialog} className={PRIMARY_BUTTON_CLASS_NAME}>
+                        <Plus className="h-4 w-4" />
+                        Create new server
+                    </button>
+                ) : null}
             </div>
 
+            {!canEdit ? (
+                <Card className="border-amber-200 bg-amber-50 hover:border-amber-200 hover:shadow-md">
+                    <p className="text-sm text-amber-800">
+                        You can view servers as an administrator. Editing domains, migrations, and deletion is restricted
+                        to the super admin authenticated with <span className="font-mono">ADMIN_PASSWORD</span>.
+                    </p>
+                </Card>
+            ) : null}
+
             {error ? (
                 <Card className="border-red-200 bg-red-50 hover:border-red-200 hover:shadow-md">
                     <p className="text-sm text-red-700">{error}</p>
@@ -95,6 +121,7 @@ export function ServersClient() {
                 <Card className="hover:border-gray-200 hover:shadow-md">
                     <ServersRegistryTable
                         currentServerId={currentServerId}
+                        canEdit={canEdit}
                         loading={loading}
                         migratingServerId={migratingServerId}
                         navigatingServerId={navigatingServerId}
@@ -110,35 +137,39 @@ export function ServersClient() {
                 </Card>
             </Section>
 
-            <CreateServerDialog
-                addAdditionalUser={createServerWizard.addAdditionalUser}
-                derivedWizardTablePrefix={createServerWizard.derivedWizardTablePrefix}
-                handleCreateServer={createServerWizard.handleCreateServer}
-                handleIconUpload={createServerWizard.handleIconUpload}
-                handleWizardBack={createServerWizard.handleWizardBack}
-                handleWizardNext={createServerWizard.handleWizardNext}
-                handleWizardStepSelection={createServerWizard.handleWizardStepSelection}
-                iconInputRef={createServerWizard.iconInputRef}
-                isCreatingServer={createServerWizard.isCreatingServer}
-                isOpen={createServerWizard.isDialogOpen}
-                isUploadingIcon={createServerWizard.isUploadingIcon}
-                removeAdditionalUser={createServerWizard.removeAdditionalUser}
-                requestClose={createServerWizard.requestClose}
-                resetWizard={createServerWizard.resetWizard}
-                updateAdditionalUser={createServerWizard.updateAdditionalUser}
-                updateAdminUser={createServerWizard.updateAdminUser}
-                updateInitialSetting={createServerWizard.updateInitialSetting}
-                updateWizardField={createServerWizard.updateWizardField}
-                wizardError={createServerWizard.wizardError}
-                wizardState={createServerWizard.wizardState}
-                wizardStep={createServerWizard.wizardStep}
-            />
+            {canEdit ? (
+                <CreateServerDialog
+                    addAdditionalUser={createServerWizard.addAdditionalUser}
+                    derivedWizardTablePrefix={createServerWizard.derivedWizardTablePrefix}
+                    handleCreateServer={createServerWizard.handleCreateServer}
+                    handleIconUpload={createServerWizard.handleIconUpload}
+                    handleWizardBack={createServerWizard.handleWizardBack}
+                    handleWizardNext={createServerWizard.handleWizardNext}
+                    handleWizardStepSelection={createServerWizard.handleWizardStepSelection}
+                    iconInputRef={createServerWizard.iconInputRef}
+                    isCreatingServer={createServerWizard.isCreatingServer}
+                    isOpen={createServerWizard.isDialogOpen}
+                    isUploadingIcon={createServerWizard.isUploadingIcon}
+                    removeAdditionalUser={createServerWizard.removeAdditionalUser}
+                    requestClose={createServerWizard.requestClose}
+                    resetWizard={createServerWizard.resetWizard}
+                    updateAdditionalUser={createServerWizard.updateAdditionalUser}
+                    updateAdminUser={createServerWizard.updateAdminUser}
+                    updateInitialSetting={createServerWizard.updateInitialSetting}
+                    updateWizardField={createServerWizard.updateWizardField}
+                    wizardError={createServerWizard.wizardError}
+                    wizardState={createServerWizard.wizardState}
+                    wizardStep={createServerWizard.wizardStep}
+                />
+            ) : null}
 
-            <DeleteCurrentServerSection
-                currentServer={currentServer}
-                deletingServerId={deletingServerId}
-                onDeleteCurrentServer={handleDeleteCurrentServer}
-            />
+            {canEdit ? (
+                <DeleteCurrentServerSection
+                    currentServer={currentServer}
+                    deletingServerId={deletingServerId}
+                    onDeleteCurrentServer={handleDeleteCurrentServer}
+                />
+            ) : null}
         </div>
     );
 }

package/apps/agents-server/src/app/admin/servers/ServersRegistryApi.ts

@@ -17,6 +17,11 @@ type ManagedServersReadResponse = {
      */
     readonly currentServerId: number | null;
 
+    /**
+     * Whether the current viewer can mutate server rows.
+     */
+    readonly canEdit: boolean;
+
     /**
      * Optional failure message returned by the API.
      */

package/apps/agents-server/src/app/admin/servers/ServersRegistryTable.tsx

@@ -40,6 +40,11 @@ const PRIMARY_BUTTON_CLASS_NAME =
  * @private function of <ServersClient/>
  */
 type ServersRegistryTableProps = {
+    /**
+     * Whether the viewer can edit server rows.
+     */
+    readonly canEdit: boolean;
+
     /**
      * Identifier of the server resolved from the current request domain.
      */
@@ -107,6 +112,7 @@ type ServersRegistryTableProps = {
  * @private function of <ServersClient/>
  */
 type ServersRegistryTableRowProps = {
+    readonly canEdit: boolean;
     readonly currentServerId: number | null;
     readonly draft: ServerDraft | undefined;
     readonly isDirty: boolean;
@@ -163,6 +169,7 @@ function ServerStatusBadge(props: { readonly label: string; readonly tone: 'blue
 function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
     const {
         currentServerId,
+        canEdit,
         draft,
         isDirty,
         isMigrating,
@@ -184,6 +191,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                     value={draft?.name || ''}
                     onChange={(event) => onUpdateServerDraft(server.id, 'name', event.target.value)}
                     className={INPUT_CLASS_NAME}
+                    disabled={!canEdit}
                     aria-label={`Server name for ${server.name}`}
                 />
             </td>
@@ -194,6 +202,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                         onUpdateServerDraft(server.id, 'environment', event.target.value as ManagedServerEnvironment)
                     }
                     className={INPUT_CLASS_NAME}
+                    disabled={!canEdit}
                     aria-label={`Environment for ${server.name}`}
                 >
                     {MANAGED_SERVER_ENVIRONMENT_OPTIONS.map((environment) => (
@@ -209,6 +218,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                     value={draft?.domain || ''}
                     onChange={(event) => onUpdateServerDraft(server.id, 'domain', event.target.value)}
                     className={INPUT_CLASS_NAME}
+                    disabled={!canEdit}
                     aria-label={`Domain for ${server.name}`}
                 />
             </td>
@@ -218,6 +228,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                     value={draft?.tablePrefix || ''}
                     onChange={(event) => onUpdateServerDraft(server.id, 'tablePrefix', event.target.value)}
                     className={`${INPUT_CLASS_NAME} font-mono`}
+                    disabled={!canEdit}
                     aria-label={`Table prefix for ${server.name}`}
                 />
             </td>
@@ -239,7 +250,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                     <button
                         type="button"
                         onClick={() => void onSaveServer(server.id)}
-                        disabled={!isDirty || isSaving}
+                        disabled={!canEdit || !isDirty || isSaving}
                         className={`${PRIMARY_BUTTON_CLASS_NAME} px-2 py-1 text-xs`}
                     >
                         {isSaving ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <Save className="h-3.5 w-3.5" />}
@@ -248,7 +259,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
                     <button
                         type="button"
                         onClick={() => void onMigrateServer(server.id)}
-                        disabled={isMigrating}
+                        disabled={!canEdit || isMigrating}
                         className={`${SECONDARY_BUTTON_CLASS_NAME} px-2 py-1 text-xs`}
                     >
                         {isMigrating ? (
@@ -288,6 +299,7 @@ function ServersRegistryTableRow(props: ServersRegistryTableRowProps) {
 export function ServersRegistryTable(props: ServersRegistryTableProps) {
     const {
         currentServerId,
+        canEdit,
         isServerDraftDirty,
         loading,
         migratingServerId,
@@ -344,6 +356,7 @@ export function ServersRegistryTable(props: ServersRegistryTableProps) {
                                 <ServersRegistryTableRow
                                     key={server.id}
                                     currentServerId={currentServerId}
+                                    canEdit={canEdit}
                                     draft={serverDrafts[server.id]}
                                     isDirty={isServerDraftDirty(server)}
                                     isMigrating={migratingServerId === server.id}

package/apps/agents-server/src/app/admin/servers/page.tsx

@@ -1,12 +1,12 @@
 import { ForbiddenPage } from '../../../components/ForbiddenPage/ForbiddenPage';
-import { isUserGlobalAdmin } from '../../../utils/isUserGlobalAdmin';
+import { isUserAdmin } from '../../../utils/isUserAdmin';
 import { ServersClient } from './ServersClient';
 
 /**
- * Global-admin page for managing same-instance registered servers.
+ * Admin page for viewing same-instance registered servers.
  */
 export default async function AdminServersPage() {
-    if (!(await isUserGlobalAdmin())) {
+    if (!(await isUserAdmin())) {
         return <ForbiddenPage />;
     }