@saluzi/saluzi-edu 0.2.12 → 0.2.13

package/packages/remote-control-server/src/routes/web/shares.ts

@@ -11,6 +11,18 @@ interface SessionOwnerRow {
   owner_id: string
 }
 
+/**
+ * Check if a user is a member of a given team.
+ */
+function isTeamMember(userId: string, teamId: string, db: ReturnType<typeof getDb>): boolean {
+  const row = db
+    .query(
+      'SELECT user_id FROM team_members WHERE team_id = $teamId AND user_id = $userId',
+    )
+    .get({ $teamId: teamId, $userId: userId })
+  return !!row
+}
+
 interface ShareRow {
   id: string
   session_id: string
@@ -323,12 +335,14 @@ app.get(
     // Look up the share
     const share = db
       .query(
-        `SELECT id, session_id, expires_at
+        `SELECT id, session_id, granted_to_user, granted_to_team, expires_at
          FROM session_shares WHERE id = $id`,
       )
       .get({ $id: shareToken }) as {
       id: string
       session_id: string
+      granted_to_user: string | null
+      granted_to_team: string | null
       expires_at: string | null
     } | null
 
@@ -347,6 +361,29 @@ app.get(
       )
     }
 
+    // Grantee check: caller must be the granted_to_user or a member of granted_to_team
+    const callerUserId = c.get('userId') as string | undefined
+    if (!callerUserId) {
+      return c.json(
+        { error: { type: 'unauthorized', message: 'Not authenticated' } },
+        401,
+      )
+    }
+
+    const isAdmin = c.get('isAdmin') as boolean | undefined
+    const isGrantee =
+      isAdmin ||
+      share.granted_to_user === callerUserId ||
+      (share.granted_to_team !== null &&
+        isTeamMember(callerUserId, share.granted_to_team, db))
+
+    if (!isGrantee) {
+      return c.json(
+        { error: { type: 'forbidden', message: 'Not authorized for this share' } },
+        403,
+      )
+    }
+
     // Check session still exists — return only public-safe fields
     const session = db
       .query(

package/packages/remote-control-server/src/routes/web/teams.ts

@@ -144,13 +144,22 @@ app.post('/teams', withAuth, async c => {
   const teamId = `team_${randomUUID().replace(/-/g, '')}`
   const now = new Date().toISOString()
 
-  // For system admin, use the first admin user as created_by
+  // For system admin (API key), use the first admin user as created_by.
+  // For a logged-in admin user, use their own userId.
   let createdBy = user.userId
-  if (user.isAdmin) {
+  if (user.userId === SYSTEM_USER_ID) {
     const adminUser = db
-      .query("SELECT id FROM users WHERE role = 'admin' LIMIT 1")
+      .query(
+        "SELECT id FROM users WHERE role = 'admin' ORDER BY created_at ASC LIMIT 1",
+      )
       .get() as { id: string } | null
-    createdBy = adminUser?.id || user.userId
+    if (!adminUser) {
+      return c.json(
+        { error: 'No admin user available to create team' },
+        400,
+      )
+    }
+    createdBy = adminUser.id
   }
 
   db.query(
@@ -815,6 +824,15 @@ app.post('/environments/:id/transfer', withAuth, async c => {
     return c.json({ error: 'Environment not found in any team' }, 404)
   }
 
+  // Check caller is owner/admin of the target team
+  const targetRole = getTeamRole(toTeamId, user)
+  if (!user.isAdmin && (!targetRole || (targetRole !== 'owner' && targetRole !== 'admin'))) {
+    return c.json(
+      { error: 'Not authorized in target team' },
+      403,
+    )
+  }
+
   // Remove from source team
   db.query('DELETE FROM team_environments WHERE environment_id = $envId').run({
     $envId: envId,

package/packages/remote-control-server/src/services/session.ts

@@ -10,6 +10,8 @@ import {
   storeListSessionsByOwnerUuid,
 } from '../store'
 import { randomUUID } from 'node:crypto'
+import { getDb } from '../db/sqlite'
+import type { Database } from 'bun:sqlite'
 import { getAllEventBuses, removeEventBus } from '../transport/event-bus'
 import type {
   CreateSessionRequest,
@@ -123,20 +125,152 @@ export function resolveExistingWebSessionId(sessionId: string): string | null {
   return resolveExistingSessionId(sessionId)
 }
 
+/**
+ * Determine the access level a user has to a session.
+ *
+ * Returns:
+ * - `'owner'` — user owns the session directly or via team ownership
+ * - `'write'` — user has a non-expired write share
+ * - `'read'`  — user has a non-expired read share (direct or via team)
+ * - `null`    — no access
+ */
+export function isSessionVisibleToUser(
+  sessionId: string,
+  userId: string,
+  db: Database,
+): 'owner' | 'write' | 'read' | null {
+  // Rule 1: direct user ownership
+  const directOwner = db
+    .query(
+      `SELECT 1 FROM session_owners
+       WHERE session_id = $sessionId AND owner_type = 'user' AND owner_id = $userId
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (directOwner) return 'owner'
+
+  // Rule 2: team ownership — session owned by a team the user belongs to
+  const teamOwner = db
+    .query(
+      `SELECT 1 FROM session_owners so
+       JOIN team_members tm ON tm.team_id = so.owner_id
+       WHERE so.session_id = $sessionId
+         AND so.owner_type = 'team'
+         AND tm.user_id = $userId
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (teamOwner) return 'owner'
+
+  // Rule 3: direct write share (non-expired)
+  const writeShare = db
+    .query(
+      `SELECT 1 FROM session_shares
+       WHERE session_id = $sessionId
+         AND granted_to_user = $userId
+         AND permission = 'write'
+         AND (expires_at IS NULL OR expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (writeShare) return 'write'
+
+  // Rule 4: direct read share (non-expired)
+  const readShare = db
+    .query(
+      `SELECT 1 FROM session_shares
+       WHERE session_id = $sessionId
+         AND granted_to_user = $userId
+         AND permission = 'read'
+         AND (expires_at IS NULL OR expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (readShare) return 'read'
+
+  // Rule 5: team write share (non-expired)
+  const teamWriteShare = db
+    .query(
+      `SELECT 1 FROM session_shares ss
+       JOIN team_members tm ON tm.team_id = ss.granted_to_team
+       WHERE ss.session_id = $sessionId
+         AND tm.user_id = $userId
+         AND ss.permission = 'write'
+         AND (ss.expires_at IS NULL OR ss.expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (teamWriteShare) return 'write'
+
+  // Rule 6: team read share (non-expired)
+  const teamReadShare = db
+    .query(
+      `SELECT 1 FROM session_shares ss
+       JOIN team_members tm ON tm.team_id = ss.granted_to_team
+       WHERE ss.session_id = $sessionId
+         AND tm.user_id = $userId
+         AND ss.permission = 'read'
+         AND (ss.expires_at IS NULL OR ss.expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+       LIMIT 1`,
+    )
+    .get({ $sessionId: sessionId, $userId: userId })
+  if (teamReadShare) return 'read'
+
+  return null
+}
+
+/**
+ * Resolve a session ID for a user, checking ownership, shares, and team access.
+ *
+ * @param sessionId — the session ID to resolve (web or code prefix)
+ * @param uuid — the user ID
+ * @param requireWrite — if true, only return the ID when the user has write access
+ *                       (owner or write share); if false, read access suffices
+ */
 export function resolveOwnedWebSessionId(
   sessionId: string,
   uuid: string,
+  requireWrite = false,
 ): string | null {
-  if (storeIsSessionOwner(sessionId, uuid)) {
-    return sessionId
-  }
+  try {
+    const db = getDb()
+    const visibility = isSessionVisibleToUser(sessionId, uuid, db)
+    if (visibility) {
+      if (!requireWrite || visibility === 'owner' || visibility === 'write') {
+        return sessionId
+      }
+    }
 
-  const compatibleCodeSessionId = toCompatibleCodeSessionId(sessionId)
-  if (
-    compatibleCodeSessionId &&
-    storeIsSessionOwner(compatibleCodeSessionId, uuid)
-  ) {
-    return compatibleCodeSessionId
+    // Try compatible code session ID
+    const compatibleCodeSessionId = toCompatibleCodeSessionId(sessionId)
+    if (compatibleCodeSessionId) {
+      const compatVisibility = isSessionVisibleToUser(
+        compatibleCodeSessionId,
+        uuid,
+        db,
+      )
+      if (compatVisibility) {
+        if (
+          !requireWrite ||
+          compatVisibility === 'owner' ||
+          compatVisibility === 'write'
+        ) {
+          return compatibleCodeSessionId
+        }
+      }
+    }
+  } catch {
+    // Fallback to legacy ownership check if DB is unavailable
+    if (storeIsSessionOwner(sessionId, uuid)) {
+      return sessionId
+    }
+    const compatibleCodeSessionId = toCompatibleCodeSessionId(sessionId)
+    if (
+      compatibleCodeSessionId &&
+      storeIsSessionOwner(compatibleCodeSessionId, uuid)
+    ) {
+      return compatibleCodeSessionId
+    }
   }
 
   return null

package/packages/remote-control-server/src/store.ts

@@ -180,6 +180,36 @@ export function storeUpdateEnvironment(
   const rec = environments.get(id)
   if (!rec) return false
   Object.assign(rec, patch, { updatedAt: new Date() })
+  try {
+    const db = getDb()
+    const sets: string[] = []
+    const params: Record<string, string | number | null> = { $id: id }
+
+    if (patch.status !== undefined) {
+      sets.push('status = $status')
+      params.$status = patch.status
+    }
+    if (patch.lastPollAt !== undefined) {
+      sets.push('last_poll_at = $lastPollAt')
+      params.$lastPollAt = patch.lastPollAt?.toISOString() ?? null
+    }
+    if (patch.machineName !== undefined) {
+      sets.push('machine_name = $machineName')
+      params.$machineName = patch.machineName
+    }
+
+    // bridgeId, maxSessions, capabilities, updatedAt are in-memory only —
+    // the environments table has no corresponding columns.
+
+    if (sets.length > 0) {
+      db.query(
+        `UPDATE environments SET ${sets.join(', ')} WHERE id = $id`,
+      ).run(params)
+    }
+  } catch (err) {
+    console.error('[store] DB write failed in storeUpdateEnvironment:', err)
+    throw err
+  }
   return true
 }
 
@@ -204,6 +234,7 @@ export function storeCreateSession(req: {
   permissionMode?: string | null
   idPrefix?: string
   username?: string | null
+  visibility?: string
 }): SessionRecord {
   const id = `${req.idPrefix || 'session_'}${randomUUID().replace(/-/g, '')}`
   const now = new Date()
@@ -231,7 +262,7 @@ export function storeCreateSession(req: {
       $title: record.title,
       $status: record.status,
       $source: record.source,
-      $vis: 'private',
+      $vis: req.visibility ?? 'private',
       $pm: record.permissionMode,
       $ca: record.createdAt.toISOString(),
       $ua: record.updatedAt.toISOString(),
@@ -268,6 +299,7 @@ export function storeUpdateSession(
     })
   } catch (err) {
     console.error('[store] DB write failed in storeUpdateSession:', err)
+    throw err
   }
   return true
 }
@@ -292,6 +324,7 @@ export function storeDeleteSession(id: string): boolean {
     db.query('DELETE FROM sessions WHERE id = $id').run({ $id: id })
   } catch (err) {
     console.error('[store] DB write failed in storeDeleteSession:', err)
+    throw err
   }
   return deleted
 }

package/packages/remote-control-server/src/types/api.ts

@@ -4,7 +4,6 @@
 declare module 'hono' {
   interface ContextVariableMap {
     username?: string
-    uuid?: string
     userId?: string
     isAdmin?: boolean
     jwtPayload?: { session_id: string; role: string; iat: number; exp: number }

package/packages/remote-control-server/web/dist/assets/Dashboard-YYwDrKTN.js

@@ -0,0 +1 @@
+import{j as e,e as d}from"./vendor-DE_-CLIE.js";import{h as N,B as w,Q as v,I as s,l as k,n as C,o as S,m as _}from"./main-CkqtCllF.js";import{g as y,D,a as L,c as E,d as B,b as M}from"./workerType-DOQ0AHrq.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function T({environments:l,onSelectEnvironment:x}){return!l||l.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No active environments"}):e.jsx("div",{className:"space-y-2",children:l.map(a=>{const i=a.worker_type==="acp",c=y(a.worker_type),u=c.fullLabel,t=c.colorClass;return e.jsxs("button",{type:"button",onClick:()=>x==null?void 0:x(a),disabled:i,className:`flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors ${i?"cursor-default opacity-80":"hover:border-border-light cursor-pointer"}`,children:[e.jsx("div",{className:"flex items-center gap-3",children:e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"font-medium text-text-primary",children:a.machine_name||a.id}),e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${t}`,children:u})]}),e.jsx("div",{className:"text-sm text-text-muted",children:a.directory||""})]})}),e.jsxs("div",{className:"text-right",children:[e.jsx(N,{status:a.status}),e.jsx("div",{className:"mt-1 text-xs text-text-muted",children:a.branch||""})]})]},a.id)})})}function F({sessions:l,environments:x,onSelect:a,onDelete:i}){if(!l||l.length===0)return e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No sessions"});const c=new Map;for(const t of x??[])t!=null&&t.id&&t.worker_type&&c.set(t.id,t.worker_type);const u=[...l].sort((t,n)=>(n.updated_at||0)-(t.updated_at||0));return e.jsx("div",{className:"space-y-2",children:u.map(t=>e.jsxs("div",{className:"group flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("button",{type:"button",onClick:()=>a(t.id),className:"min-w-0 flex-1 text-left",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),(()=>{var h;let n=t.source==="acp"?"acp":(h=t.environment)==null?void 0:h.worker_type;!n&&t.environment_id&&(n=c.get(t.environment_id));const p=y(n);return e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${p.colorClass}`,children:p.fullLabel})})()]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx(N,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:w(t.created_at||t.updated_at)}),i&&e.jsx("button",{type:"button",onClick:n=>{n.stopPropagation(),i(t.id)},className:"rounded p-1 text-text-muted opacity-0 transition-all hover:text-status-error group-hover:opacity-100",title:"Delete session",children:e.jsx("svg",{className:"h-4 w-4",fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M6 18L18 6M6 6l12 12"})})})]})]},t.id))})}function I({open:l,environments:x,onClose:a,onCreated:i}){v();const[c,u]=d.useState(""),[t,n]=d.useState(""),[p,h]=d.useState("same-dir"),[f,b]=d.useState(""),[o,m]=d.useState(!1);d.useEffect(()=>{l&&(u(""),n(""),h("same-dir"),b(""))},[l]);const g=async()=>{m(!0),b("");try{const r={};c.trim()&&(r.title=c.trim()),t&&(r.environment_id=t),r.spawn_mode=p;const j=await k(r);i(j)}catch(r){b(r instanceof Error?r.message:s("dialog.createFailed"))}finally{m(!1)}};return e.jsx(D,{open:l,onOpenChange:r=>{r||a()},children:e.jsxs(L,{className:"max-w-md rounded-2xl border-border bg-surface-1 p-6 shadow-2xl",children:[e.jsx(E,{children:e.jsx(B,{className:"font-display text-lg font-semibold text-text-primary",children:s("dialog.newSession")})}),e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.titleOptional")}),e.jsx("input",{type:"text",value:c,onChange:r=>u(r.target.value),placeholder:s("dialog.titlePlaceholder"),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.environment")}),e.jsxs("select",{value:t,onChange:r=>n(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"",children:s("dialog.none")}),x.map(r=>{const j=y(r.worker_type).shortLabel;return e.jsxs("option",{value:r.id,children:[r.machine_name||r.id," (",r.branch||s("dialog.noBranch"),") · ",j]},r.id)})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.workspaceMode")}),e.jsxs("select",{value:p,onChange:r=>h(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"same-dir",children:s("dialog.sameDir")}),e.jsx("option",{value:"worktree",children:s("dialog.worktree")})]})]}),f&&e.jsx("div",{className:"text-sm text-status-error",children:f})]}),e.jsxs(M,{children:[e.jsx("button",{onClick:a,className:"rounded-lg border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2 transition-colors",children:s("common.cancel")}),e.jsx("button",{onClick:g,disabled:o,className:"rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white hover:bg-brand-light disabled:opacity-50 transition-colors",children:o?s("common.creating"):s("common.create")})]})]})})}function H({onNavigateSession:l}){v();const[x,a]=d.useState([]),[i,c]=d.useState([]),[u,t]=d.useState(!1),n=d.useCallback(async()=>{try{const[o,m]=await Promise.all([C(),S()]);a(o||[]),c(m||[])}catch(o){console.error("Dashboard render error:",o)}},[]);d.useEffect(()=>{n();const o=setInterval(n,1e4);return()=>clearInterval(o)},[n]);const p=o=>{t(!1),l(o.id)},h=d.useCallback(o=>{},[]),f=d.useCallback(o=>{l(o)},[l]),b=d.useCallback(async o=>{if(window.confirm(s("dashboard.confirmDelete").replace("{id}",o)))try{await _(o),a(m=>m.filter(g=>g.id!==o))}catch(m){alert(m instanceof Error?m.message:s("dashboard.deleteFailed"))}},[]);return e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"sr-only",children:s("dashboard.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsx("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:s("dashboard.environments")}),e.jsx(T,{environments:i,onSelectEnvironment:h})]}),e.jsxs("section",{children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsx("h2",{className:"font-display text-lg font-semibold text-text-primary",children:s("dashboard.sessions")}),e.jsx("button",{onClick:()=>t(!0),className:"rounded-lg bg-brand px-3 py-1.5 text-sm font-medium text-white hover:bg-brand-light transition-colors",children:s("dashboard.newSession")})]}),e.jsx(F,{sessions:x,environments:i,onSelect:f,onDelete:b})]}),e.jsx(I,{open:u,environments:i,onClose:()=>t(!1),onCreated:p})]})}export{H as Dashboard};

package/packages/remote-control-server/web/dist/assets/Join-DKCP5X6X.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N,I as t}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function E({onSuccess:b,onInvalidInvite:l}){const{join:h}=N(),[u,f]=r.useState(""),[d,j]=r.useState(""),[o,w]=r.useState(""),[c,g]=r.useState(""),[m,n]=r.useState(""),[x,p]=r.useState(!1);r.useEffect(()=>{const a=new URLSearchParams(window.location.search).get("invite");a?f(a):l()},[l]);const y=async s=>{if(s.preventDefault(),n(""),o.length<8){n(t("auth.setup.passwordTooShort"));return}if(o!==c){n(t("auth.setup.passwordMismatch"));return}p(!0);try{await h(u,d,o),b()}catch(a){const i=a instanceof Error?a.message:"Join failed";if(i.includes("Invalid invitation")||i.includes("expired")||i.includes("already used")){l();return}n(i)}finally{p(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.join.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.join.welcome")}),e.jsx("p",{className:"mt-1 text-sm text-text-muted",children:t("auth.join.description")})]}),e.jsxs("form",{onSubmit:y,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.username")}),e.jsx("input",{type:"text",value:d,onChange:s=>j(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:c,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),m&&e.jsx("p",{className:"text-sm text-status-error",children:m}),e.jsx("button",{type:"submit",disabled:x||!u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:x?t("common.loading"):t("auth.join.submit")})]})]})})}export{E as Join};

package/packages/remote-control-server/web/dist/assets/Login-0VGZs85I.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N as b,I as t}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j({onSuccess:d}){const{login:c}=b(),[a,m]=r.useState(""),[o,x]=r.useState(""),[l,n]=r.useState(""),[i,u]=r.useState(!1),p=async s=>{s.preventDefault(),n(""),u(!0);try{await c(a,o),d()}catch{n(t("auth.login.failed"))}finally{u(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.login.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.login.description")})]}),e.jsxs("form",{onSubmit:p,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:a,onChange:s=>m(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>x(s.target.value),required:!0,autoComplete:"current-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),l&&e.jsx("p",{className:"text-sm text-status-error",children:l}),e.jsx("button",{type:"submit",disabled:i,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:i?t("common.loading"):t("auth.login.submit")})]})]})})}export{j as Login};