@saluzi/saluzi-edu 0.2.13 → 0.2.14

package/packages/remote-control-server/src/__tests__/security-fixes.test.ts

@@ -275,17 +275,17 @@ describe('Security: consumed_at semantics for multi-use invitations', () => {
 
       // Verify 4 users exist: admin + 3 joined
       const db = getDb!()
-      const count = db
-        .query('SELECT COUNT(*) as count FROM users')
-        .get() as { count: number }
+      const count = db.query('SELECT COUNT(*) as count FROM users').get() as {
+        count: number
+      }
       expect(count.count).toBe(4)
 
       // Verify invitation uses count
-      const tokenHash = createHash('sha256')
-        .update(inviteToken)
-        .digest('hex')
+      const tokenHash = createHash('sha256').update(inviteToken).digest('hex')
       const inv = db
-        .query('SELECT uses, max_uses, consumed_at FROM invitations WHERE token_hash = $hash')
+        .query(
+          'SELECT uses, max_uses, consumed_at FROM invitations WHERE token_hash = $hash',
+        )
         .get({ $hash: tokenHash }) as {
         uses: number
         max_uses: number
@@ -493,15 +493,12 @@ describe('Security: CSRF middleware', () => {
     app.use('/web/*', csrfCheck)
     app.delete('/web/resource/:id', c => c.json({ ok: true }))
 
-    const res = await app.request(
-      'http://localhost:3000/web/resource/abc',
-      {
-        method: 'DELETE',
-        headers: {
-          Origin: 'http://localhost:3000',
-        },
+    const res = await app.request('http://localhost:3000/web/resource/abc', {
+      method: 'DELETE',
+      headers: {
+        Origin: 'http://localhost:3000',
       },
-    )
+    })
     expect(res.status).toBe(200)
   })
 
@@ -511,16 +508,13 @@ describe('Security: CSRF middleware', () => {
     app.use('/web/*', csrfCheck)
     app.put('/web/resource/:id', c => c.json({ ok: true }))
 
-    const res = await app.request(
-      'http://localhost:3000/web/resource/abc',
-      {
-        method: 'PUT',
-        headers: {
-          Origin: 'https://evil.example',
-          'Content-Type': 'application/json',
-        },
+    const res = await app.request('http://localhost:3000/web/resource/abc', {
+      method: 'PUT',
+      headers: {
+        Origin: 'https://evil.example',
+        'Content-Type': 'application/json',
       },
-    )
+    })
     expect(res.status).toBe(403)
   })
 })

package/packages/remote-control-server/src/__tests__/security-round3.test.ts

@@ -58,7 +58,11 @@ let issueSessionToken:
     ) => { accessToken: string; refreshToken: string })
   | undefined
 let resolveSessionToken:
-  | ((token: string, db: Database, kind?: string) => string | null)
+  | ((
+      token: string,
+      db: Database,
+      kind?: 'access' | 'refresh',
+    ) => string | null)
   | undefined
 
 try {

package/packages/remote-control-server/src/__tests__/teams.test.ts

@@ -1479,6 +1479,13 @@ describe('POST /web/environments/:id/transfer', () => {
   })
 
   test('team admin → 200', async () => {
+    // teamAdmin must also be admin/owner in the target team (security fix)
+    addTeamMember(db, {
+      teamId: targetTeam.id,
+      userId: teamAdmin.id,
+      role: 'admin',
+      addedBy: owner.id,
+    })
     const res = await app.request(`/web/environments/${envId}/transfer`, {
       method: 'POST',
       headers: {

package/packages/remote-control-server/src/auth/csrf.ts

@@ -40,9 +40,7 @@ export async function csrfCheck(c: Context, next: Next) {
   // Support ALLOWED_ORIGINS env variable (comma-separated)
   const envOrigins =
     (c.env?.ALLOWED_ORIGINS as string | undefined) ??
-    (typeof process !== 'undefined'
-      ? process.env.ALLOWED_ORIGINS
-      : undefined)
+    (typeof process !== 'undefined' ? process.env.ALLOWED_ORIGINS : undefined)
   if (envOrigins) {
     for (const o of envOrigins.split(',')) {
       const trimmed = o.trim()

package/packages/remote-control-server/src/auth/middleware.ts

@@ -62,8 +62,8 @@ export function extractWebSocketAuthToken(c: Context): string | undefined {
 /**
  * Unified authentication middleware — supports two modes:
  *
- * 1. **Token mode** (Web UI): Bearer token resolved via server-side lookup → username injected
- * 2. **API Key mode** (CLI bridge): Valid API key + X-Username header → username injected
+ * 1. **Token mode** (Web UI): Bearer token resolved via server-side lookup → userId injected
+ * 2. **API Key mode** (CLI bridge): Valid API key + X-Username header → userId injected
  */
 export async function apiKeyAuth(c: Context, next: Next) {
   const token = extractBearerToken(c)
@@ -71,7 +71,7 @@ export async function apiKeyAuth(c: Context, next: Next) {
   // Try token authentication (Web UI)
   const tokenUsername = resolveToken(token)
   if (tokenUsername) {
-    c.set('username', tokenUsername)
+    c.set('userId', tokenUsername)
     await next()
     return
   }
@@ -81,7 +81,7 @@ export async function apiKeyAuth(c: Context, next: Next) {
     // Extract username from X-Username header or ?username= query param
     const username = c.req.header('X-Username') || c.req.query('username')
     if (username) {
-      c.set('username', username)
+      c.set('userId', username)
     }
     await next()
     return
@@ -223,6 +223,15 @@ export async function sessionAuth(c: Context, next: Next) {
       }
     } catch (err) {
       console.warn('[sessionAuth] DB resolution failed:', err)
+      return c.json(
+        {
+          error: {
+            type: 'service_unavailable',
+            message: 'Database unavailable — cannot resolve session token',
+          },
+        },
+        503,
+      )
     }
   }
 

package/packages/remote-control-server/src/index.ts

@@ -66,14 +66,17 @@ try {
   console.warn('[RCS] Failed to reap expired sessions:', err)
 }
 
-const reapInterval = setInterval(() => {
-  try {
-    const db = getDb()
-    reapExpiredSessions(db)
-  } catch {
-    // ignore — DB may not be available
-  }
-}, 60 * 60 * 1000) // every hour
+const reapInterval = setInterval(
+  () => {
+    try {
+      const db = getDb()
+      reapExpiredSessions(db)
+    } catch {
+      // ignore — DB may not be available
+    }
+  },
+  60 * 60 * 1000,
+) // every hour
 
 if (reapInterval.unref) {
   reapInterval.unref()

package/packages/remote-control-server/src/routes/v1/environments.ts

@@ -27,14 +27,14 @@ async function bridgeAuth(c: Context, next: Next) {
   if (bearer) {
     // Admin API key
     if (validateApiKey(bearer)) {
-      c.set('username', c.req.header('X-Username') || c.req.query('username'))
+      c.set('userId', c.req.header('X-Username') || c.req.query('username'))
       await next()
       return
     }
     // In-memory token
     const username = resolveToken(bearer)
     if (username) {
-      c.set('username', username)
+      c.set('userId', username)
       await next()
       return
     }
@@ -47,8 +47,9 @@ async function bridgeAuth(c: Context, next: Next) {
         await next()
         return
       }
-    } catch {
-      // DB not available
+    } catch (err) {
+      console.error('[bridge] DB error during session token resolution:', err)
+      return c.json({ error: 'Database unavailable' }, 503)
     }
   }
   // Fall back to apiKeyAuth (handles X-Username + API key from body/header)
@@ -59,7 +60,7 @@ async function bridgeAuth(c: Context, next: Next) {
 app.post('/bridge', acceptCliHeaders, bridgeAuth, async c => {
   const body = await c.req.json()
   const userId = c.get('userId') as string | undefined
-  const username = (c.get('username') as string | undefined) || userId
+  const username = userId
   const teamId = c.req.header('X-Team-Id')
 
   // Validate team if X-Team-Id is provided
@@ -102,8 +103,9 @@ app.post('/bridge', acceptCliHeaders, bridgeAuth, async c => {
           )
         }
       }
-    } catch {
-      // DB not available — skip team validation
+    } catch (err) {
+      console.error('[bridge] DB error during team validation:', err)
+      return c.json({ error: 'Database unavailable' }, 503)
     }
   }
 
@@ -116,8 +118,9 @@ app.post('/bridge', acceptCliHeaders, bridgeAuth, async c => {
       db.query(
         'INSERT OR IGNORE INTO team_environments (team_id, environment_id) VALUES ($teamId, $envId)',
       ).run({ $teamId: teamId, $envId: result.environment_id })
-    } catch {
-      // DB not available
+    } catch (err) {
+      console.error('[bridge] DB error during team-environment link:', err)
+      return c.json({ error: 'Database unavailable' }, 503)
     }
   }
 

package/packages/remote-control-server/src/routes/v1/sessions.ts

@@ -16,7 +16,7 @@ const app = new Hono()
 /** POST /v1/sessions — Create session */
 app.post('/', acceptCliHeaders, apiKeyAuth, async c => {
   const body = await c.req.json()
-  const username = c.get('username')
+  const username = c.get('userId')
   const session = createSession({ ...body, username })
 
   // Create work item if environment is specified

package/packages/remote-control-server/src/routes/web/auth-routes.ts

@@ -452,7 +452,9 @@ app.post('/join', async c => {
       // Re-check invitation state inside the transaction (may have changed).
       // Only check uses >= max_uses — consumed_at is set conditionally below.
       const currentInv = db
-        .query('SELECT uses, max_uses FROM invitations WHERE token_hash = $hash')
+        .query(
+          'SELECT uses, max_uses FROM invitations WHERE token_hash = $hash',
+        )
         .get({ $hash: tokenHash }) as { uses: number; max_uses: number } | null
 
       if (!currentInv || currentInv.uses >= currentInv.max_uses) {

package/packages/remote-control-server/src/routes/web/auth.ts

@@ -13,7 +13,8 @@ app.all('/bind', c => {
     {
       error: {
         type: 'gone',
-        message: '/web/bind has been removed. Use authenticated session creation instead.',
+        message:
+          '/web/bind has been removed. Use authenticated session creation instead.',
       },
     },
     410,

package/packages/remote-control-server/src/routes/web/sessions.ts

@@ -32,18 +32,22 @@ const app = new Hono()
  * X-User-Id header for a real user identity. If no valid identity is
  * found, returns null — the session will be orphaned (admin-visible).
  */
-function resolveBindUserId(
-  c: import('hono').Context,
-): string | null {
-  const uuid = c.get('userId')!
-  if (uuid !== SYSTEM_USER_ID) return uuid
-
-  // API key auth — check X-User-Id header for real user identity
-  const headerUserId = c.req.header('X-User-Id')
-  if (headerUserId && headerUserId !== SYSTEM_USER_ID) {
-    return headerUserId
+function resolveBindUserId(c: import('hono').Context): string | null {
+  const userId = c.get('userId')
+  if (!userId || userId === SYSTEM_USER_ID) {
+    // API key auth — only admin can use X-User-Id to bind on behalf of a user
+    const isAdmin = c.get('isAdmin')
+    if (!isAdmin) {
+      return null // non-admin API key cannot create sessions as another user
+    }
+    const headerUserId = c.req.header('X-User-Id')
+    if (headerUserId && headerUserId !== SYSTEM_USER_ID) {
+      console.log(`[audit] API key created session as user ${headerUserId}`)
+      return headerUserId
+    }
+    return null // API key without X-User-Id → orphan session (admin-visible)
   }
-  return null
+  return userId
 }
 
 /** POST /web/sessions — Create a session from web UI */

package/packages/remote-control-server/src/routes/web/shares.ts

@@ -14,7 +14,11 @@ interface SessionOwnerRow {
 /**
  * Check if a user is a member of a given team.
  */
-function isTeamMember(userId: string, teamId: string, db: ReturnType<typeof getDb>): boolean {
+function isTeamMember(
+  userId: string,
+  teamId: string,
+  db: ReturnType<typeof getDb>,
+): boolean {
   const row = db
     .query(
       'SELECT user_id FROM team_members WHERE team_id = $teamId AND user_id = $userId',
@@ -379,7 +383,12 @@ app.get(
 
     if (!isGrantee) {
       return c.json(
-        { error: { type: 'forbidden', message: 'Not authorized for this share' } },
+        {
+          error: {
+            type: 'forbidden',
+            message: 'Not authorized for this share',
+          },
+        },
         403,
       )
     }

package/packages/remote-control-server/src/routes/web/teams.ts

@@ -154,10 +154,7 @@ app.post('/teams', withAuth, async c => {
       )
       .get() as { id: string } | null
     if (!adminUser) {
-      return c.json(
-        { error: 'No admin user available to create team' },
-        400,
-      )
+      return c.json({ error: 'No admin user available to create team' }, 400)
     }
     createdBy = adminUser.id
   }
@@ -826,11 +823,11 @@ app.post('/environments/:id/transfer', withAuth, async c => {
 
   // Check caller is owner/admin of the target team
   const targetRole = getTeamRole(toTeamId, user)
-  if (!user.isAdmin && (!targetRole || (targetRole !== 'owner' && targetRole !== 'admin'))) {
-    return c.json(
-      { error: 'Not authorized in target team' },
-      403,
-    )
+  if (
+    !user.isAdmin &&
+    (!targetRole || (targetRole !== 'owner' && targetRole !== 'admin'))
+  ) {
+    return c.json({ error: 'Not authorized in target team' }, 403)
   }
 
   // Remove from source team

package/packages/remote-control-server/src/services/session.ts

@@ -2,7 +2,6 @@ import {
   storeCreateSession,
   storeGetSession,
   storeGetEnvironment,
-  storeIsSessionOwner,
   storeUpdateSession,
   storeListSessions,
   storeListSessionsByUsername,
@@ -260,17 +259,7 @@ export function resolveOwnedWebSessionId(
       }
     }
   } catch {
-    // Fallback to legacy ownership check if DB is unavailable
-    if (storeIsSessionOwner(sessionId, uuid)) {
-      return sessionId
-    }
-    const compatibleCodeSessionId = toCompatibleCodeSessionId(sessionId)
-    if (
-      compatibleCodeSessionId &&
-      storeIsSessionOwner(compatibleCodeSessionId, uuid)
-    ) {
-      return compatibleCodeSessionId
-    }
+    // DB unavailable — return null rather than falling back to redundant check
   }
 
   return null

package/packages/remote-control-server/src/store.ts

@@ -202,9 +202,9 @@ export function storeUpdateEnvironment(
     // the environments table has no corresponding columns.
 
     if (sets.length > 0) {
-      db.query(
-        `UPDATE environments SET ${sets.join(', ')} WHERE id = $id`,
-      ).run(params)
+      db.query(`UPDATE environments SET ${sets.join(', ')} WHERE id = $id`).run(
+        params,
+      )
     }
   } catch (err) {
     console.error('[store] DB write failed in storeUpdateEnvironment:', err)
@@ -421,7 +421,7 @@ export function storeIsSessionOwner(sessionId: string, uuid: string): boolean {
     return !!row
   } catch (err) {
     console.error('[store] DB read failed in storeIsSessionOwner:', err)
-    return false
+    throw err
   }
 }
 
@@ -439,7 +439,7 @@ export function storeGetSessionOwners(
     return new Set(rows.map(r => r.owner_id))
   } catch (err) {
     console.error('[store] DB read failed in storeGetSessionOwners:', err)
-    return undefined
+    throw err
   }
 }
 
@@ -478,6 +478,7 @@ export function storeListSessionsByOwnerUuid(uuid: string): SessionRecord[] {
       '[store] DB read failed in storeListSessionsByOwnerUuid:',
       err,
     )
+    throw err
   }
 
   return result

package/packages/remote-control-server/src/types/api.ts

@@ -3,7 +3,6 @@
 // Hono context variable types
 declare module 'hono' {
   interface ContextVariableMap {
-    username?: string
     userId?: string
     isAdmin?: boolean
     jwtPayload?: { session_id: string; role: string; iat: number; exp: number }

package/packages/remote-control-server/web/dist/assets/{Dashboard-YYwDrKTN.js → Dashboard-BaViKnN5.js}

@@ -1 +1 @@
-import{j as e,e as d}from"./vendor-DE_-CLIE.js";import{h as N,B as w,Q as v,I as s,l as k,n as C,o as S,m as _}from"./main-CkqtCllF.js";import{g as y,D,a as L,c as E,d as B,b as M}from"./workerType-DOQ0AHrq.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function T({environments:l,onSelectEnvironment:x}){return!l||l.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No active environments"}):e.jsx("div",{className:"space-y-2",children:l.map(a=>{const i=a.worker_type==="acp",c=y(a.worker_type),u=c.fullLabel,t=c.colorClass;return e.jsxs("button",{type:"button",onClick:()=>x==null?void 0:x(a),disabled:i,className:`flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors ${i?"cursor-default opacity-80":"hover:border-border-light cursor-pointer"}`,children:[e.jsx("div",{className:"flex items-center gap-3",children:e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"font-medium text-text-primary",children:a.machine_name||a.id}),e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${t}`,children:u})]}),e.jsx("div",{className:"text-sm text-text-muted",children:a.directory||""})]})}),e.jsxs("div",{className:"text-right",children:[e.jsx(N,{status:a.status}),e.jsx("div",{className:"mt-1 text-xs text-text-muted",children:a.branch||""})]})]},a.id)})})}function F({sessions:l,environments:x,onSelect:a,onDelete:i}){if(!l||l.length===0)return e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No sessions"});const c=new Map;for(const t of x??[])t!=null&&t.id&&t.worker_type&&c.set(t.id,t.worker_type);const u=[...l].sort((t,n)=>(n.updated_at||0)-(t.updated_at||0));return e.jsx("div",{className:"space-y-2",children:u.map(t=>e.jsxs("div",{className:"group flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("button",{type:"button",onClick:()=>a(t.id),className:"min-w-0 flex-1 text-left",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),(()=>{var h;let n=t.source==="acp"?"acp":(h=t.environment)==null?void 0:h.worker_type;!n&&t.environment_id&&(n=c.get(t.environment_id));const p=y(n);return e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${p.colorClass}`,children:p.fullLabel})})()]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx(N,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:w(t.created_at||t.updated_at)}),i&&e.jsx("button",{type:"button",onClick:n=>{n.stopPropagation(),i(t.id)},className:"rounded p-1 text-text-muted opacity-0 transition-all hover:text-status-error group-hover:opacity-100",title:"Delete session",children:e.jsx("svg",{className:"h-4 w-4",fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M6 18L18 6M6 6l12 12"})})})]})]},t.id))})}function I({open:l,environments:x,onClose:a,onCreated:i}){v();const[c,u]=d.useState(""),[t,n]=d.useState(""),[p,h]=d.useState("same-dir"),[f,b]=d.useState(""),[o,m]=d.useState(!1);d.useEffect(()=>{l&&(u(""),n(""),h("same-dir"),b(""))},[l]);const g=async()=>{m(!0),b("");try{const r={};c.trim()&&(r.title=c.trim()),t&&(r.environment_id=t),r.spawn_mode=p;const j=await k(r);i(j)}catch(r){b(r instanceof Error?r.message:s("dialog.createFailed"))}finally{m(!1)}};return e.jsx(D,{open:l,onOpenChange:r=>{r||a()},children:e.jsxs(L,{className:"max-w-md rounded-2xl border-border bg-surface-1 p-6 shadow-2xl",children:[e.jsx(E,{children:e.jsx(B,{className:"font-display text-lg font-semibold text-text-primary",children:s("dialog.newSession")})}),e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.titleOptional")}),e.jsx("input",{type:"text",value:c,onChange:r=>u(r.target.value),placeholder:s("dialog.titlePlaceholder"),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.environment")}),e.jsxs("select",{value:t,onChange:r=>n(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"",children:s("dialog.none")}),x.map(r=>{const j=y(r.worker_type).shortLabel;return e.jsxs("option",{value:r.id,children:[r.machine_name||r.id," (",r.branch||s("dialog.noBranch"),") · ",j]},r.id)})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.workspaceMode")}),e.jsxs("select",{value:p,onChange:r=>h(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"same-dir",children:s("dialog.sameDir")}),e.jsx("option",{value:"worktree",children:s("dialog.worktree")})]})]}),f&&e.jsx("div",{className:"text-sm text-status-error",children:f})]}),e.jsxs(M,{children:[e.jsx("button",{onClick:a,className:"rounded-lg border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2 transition-colors",children:s("common.cancel")}),e.jsx("button",{onClick:g,disabled:o,className:"rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white hover:bg-brand-light disabled:opacity-50 transition-colors",children:o?s("common.creating"):s("common.create")})]})]})})}function H({onNavigateSession:l}){v();const[x,a]=d.useState([]),[i,c]=d.useState([]),[u,t]=d.useState(!1),n=d.useCallback(async()=>{try{const[o,m]=await Promise.all([C(),S()]);a(o||[]),c(m||[])}catch(o){console.error("Dashboard render error:",o)}},[]);d.useEffect(()=>{n();const o=setInterval(n,1e4);return()=>clearInterval(o)},[n]);const p=o=>{t(!1),l(o.id)},h=d.useCallback(o=>{},[]),f=d.useCallback(o=>{l(o)},[l]),b=d.useCallback(async o=>{if(window.confirm(s("dashboard.confirmDelete").replace("{id}",o)))try{await _(o),a(m=>m.filter(g=>g.id!==o))}catch(m){alert(m instanceof Error?m.message:s("dashboard.deleteFailed"))}},[]);return e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"sr-only",children:s("dashboard.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsx("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:s("dashboard.environments")}),e.jsx(T,{environments:i,onSelectEnvironment:h})]}),e.jsxs("section",{children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsx("h2",{className:"font-display text-lg font-semibold text-text-primary",children:s("dashboard.sessions")}),e.jsx("button",{onClick:()=>t(!0),className:"rounded-lg bg-brand px-3 py-1.5 text-sm font-medium text-white hover:bg-brand-light transition-colors",children:s("dashboard.newSession")})]}),e.jsx(F,{sessions:x,environments:i,onSelect:f,onDelete:b})]}),e.jsx(I,{open:u,environments:i,onClose:()=>t(!1),onCreated:p})]})}export{H as Dashboard};
+import{j as e,e as d}from"./vendor-DE_-CLIE.js";import{h as N,B as w,Q as v,I as s,l as k,n as C,o as S,m as _}from"./main-yBKWfzqS.js";import{g as y,D,a as L,c as E,d as B,b as M}from"./workerType-C-GKof-G.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function T({environments:l,onSelectEnvironment:x}){return!l||l.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No active environments"}):e.jsx("div",{className:"space-y-2",children:l.map(a=>{const i=a.worker_type==="acp",c=y(a.worker_type),u=c.fullLabel,t=c.colorClass;return e.jsxs("button",{type:"button",onClick:()=>x==null?void 0:x(a),disabled:i,className:`flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors ${i?"cursor-default opacity-80":"hover:border-border-light cursor-pointer"}`,children:[e.jsx("div",{className:"flex items-center gap-3",children:e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"font-medium text-text-primary",children:a.machine_name||a.id}),e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${t}`,children:u})]}),e.jsx("div",{className:"text-sm text-text-muted",children:a.directory||""})]})}),e.jsxs("div",{className:"text-right",children:[e.jsx(N,{status:a.status}),e.jsx("div",{className:"mt-1 text-xs text-text-muted",children:a.branch||""})]})]},a.id)})})}function F({sessions:l,environments:x,onSelect:a,onDelete:i}){if(!l||l.length===0)return e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No sessions"});const c=new Map;for(const t of x??[])t!=null&&t.id&&t.worker_type&&c.set(t.id,t.worker_type);const u=[...l].sort((t,n)=>(n.updated_at||0)-(t.updated_at||0));return e.jsx("div",{className:"space-y-2",children:u.map(t=>e.jsxs("div",{className:"group flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("button",{type:"button",onClick:()=>a(t.id),className:"min-w-0 flex-1 text-left",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),(()=>{var h;let n=t.source==="acp"?"acp":(h=t.environment)==null?void 0:h.worker_type;!n&&t.environment_id&&(n=c.get(t.environment_id));const p=y(n);return e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${p.colorClass}`,children:p.fullLabel})})()]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx(N,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:w(t.created_at||t.updated_at)}),i&&e.jsx("button",{type:"button",onClick:n=>{n.stopPropagation(),i(t.id)},className:"rounded p-1 text-text-muted opacity-0 transition-all hover:text-status-error group-hover:opacity-100",title:"Delete session",children:e.jsx("svg",{className:"h-4 w-4",fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M6 18L18 6M6 6l12 12"})})})]})]},t.id))})}function I({open:l,environments:x,onClose:a,onCreated:i}){v();const[c,u]=d.useState(""),[t,n]=d.useState(""),[p,h]=d.useState("same-dir"),[f,b]=d.useState(""),[o,m]=d.useState(!1);d.useEffect(()=>{l&&(u(""),n(""),h("same-dir"),b(""))},[l]);const g=async()=>{m(!0),b("");try{const r={};c.trim()&&(r.title=c.trim()),t&&(r.environment_id=t),r.spawn_mode=p;const j=await k(r);i(j)}catch(r){b(r instanceof Error?r.message:s("dialog.createFailed"))}finally{m(!1)}};return e.jsx(D,{open:l,onOpenChange:r=>{r||a()},children:e.jsxs(L,{className:"max-w-md rounded-2xl border-border bg-surface-1 p-6 shadow-2xl",children:[e.jsx(E,{children:e.jsx(B,{className:"font-display text-lg font-semibold text-text-primary",children:s("dialog.newSession")})}),e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.titleOptional")}),e.jsx("input",{type:"text",value:c,onChange:r=>u(r.target.value),placeholder:s("dialog.titlePlaceholder"),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.environment")}),e.jsxs("select",{value:t,onChange:r=>n(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"",children:s("dialog.none")}),x.map(r=>{const j=y(r.worker_type).shortLabel;return e.jsxs("option",{value:r.id,children:[r.machine_name||r.id," (",r.branch||s("dialog.noBranch"),") · ",j]},r.id)})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:s("dialog.workspaceMode")}),e.jsxs("select",{value:p,onChange:r=>h(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"same-dir",children:s("dialog.sameDir")}),e.jsx("option",{value:"worktree",children:s("dialog.worktree")})]})]}),f&&e.jsx("div",{className:"text-sm text-status-error",children:f})]}),e.jsxs(M,{children:[e.jsx("button",{onClick:a,className:"rounded-lg border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2 transition-colors",children:s("common.cancel")}),e.jsx("button",{onClick:g,disabled:o,className:"rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white hover:bg-brand-light disabled:opacity-50 transition-colors",children:o?s("common.creating"):s("common.create")})]})]})})}function H({onNavigateSession:l}){v();const[x,a]=d.useState([]),[i,c]=d.useState([]),[u,t]=d.useState(!1),n=d.useCallback(async()=>{try{const[o,m]=await Promise.all([C(),S()]);a(o||[]),c(m||[])}catch(o){console.error("Dashboard render error:",o)}},[]);d.useEffect(()=>{n();const o=setInterval(n,1e4);return()=>clearInterval(o)},[n]);const p=o=>{t(!1),l(o.id)},h=d.useCallback(o=>{},[]),f=d.useCallback(o=>{l(o)},[l]),b=d.useCallback(async o=>{if(window.confirm(s("dashboard.confirmDelete").replace("{id}",o)))try{await _(o),a(m=>m.filter(g=>g.id!==o))}catch(m){alert(m instanceof Error?m.message:s("dashboard.deleteFailed"))}},[]);return e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"sr-only",children:s("dashboard.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsx("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:s("dashboard.environments")}),e.jsx(T,{environments:i,onSelectEnvironment:h})]}),e.jsxs("section",{children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsx("h2",{className:"font-display text-lg font-semibold text-text-primary",children:s("dashboard.sessions")}),e.jsx("button",{onClick:()=>t(!0),className:"rounded-lg bg-brand px-3 py-1.5 text-sm font-medium text-white hover:bg-brand-light transition-colors",children:s("dashboard.newSession")})]}),e.jsx(F,{sessions:x,environments:i,onSelect:f,onDelete:b})]}),e.jsx(I,{open:u,environments:i,onClose:()=>t(!1),onCreated:p})]})}export{H as Dashboard};

package/packages/remote-control-server/web/dist/assets/{Join-DKCP5X6X.js → Join-CDMmk1do.js}

@@ -1 +1 @@
-import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N,I as t}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function E({onSuccess:b,onInvalidInvite:l}){const{join:h}=N(),[u,f]=r.useState(""),[d,j]=r.useState(""),[o,w]=r.useState(""),[c,g]=r.useState(""),[m,n]=r.useState(""),[x,p]=r.useState(!1);r.useEffect(()=>{const a=new URLSearchParams(window.location.search).get("invite");a?f(a):l()},[l]);const y=async s=>{if(s.preventDefault(),n(""),o.length<8){n(t("auth.setup.passwordTooShort"));return}if(o!==c){n(t("auth.setup.passwordMismatch"));return}p(!0);try{await h(u,d,o),b()}catch(a){const i=a instanceof Error?a.message:"Join failed";if(i.includes("Invalid invitation")||i.includes("expired")||i.includes("already used")){l();return}n(i)}finally{p(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.join.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.join.welcome")}),e.jsx("p",{className:"mt-1 text-sm text-text-muted",children:t("auth.join.description")})]}),e.jsxs("form",{onSubmit:y,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.username")}),e.jsx("input",{type:"text",value:d,onChange:s=>j(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:c,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),m&&e.jsx("p",{className:"text-sm text-status-error",children:m}),e.jsx("button",{type:"submit",disabled:x||!u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:x?t("common.loading"):t("auth.join.submit")})]})]})})}export{E as Join};
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N,I as t}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function E({onSuccess:b,onInvalidInvite:l}){const{join:h}=N(),[u,f]=r.useState(""),[d,j]=r.useState(""),[o,w]=r.useState(""),[c,g]=r.useState(""),[m,n]=r.useState(""),[x,p]=r.useState(!1);r.useEffect(()=>{const a=new URLSearchParams(window.location.search).get("invite");a?f(a):l()},[l]);const y=async s=>{if(s.preventDefault(),n(""),o.length<8){n(t("auth.setup.passwordTooShort"));return}if(o!==c){n(t("auth.setup.passwordMismatch"));return}p(!0);try{await h(u,d,o),b()}catch(a){const i=a instanceof Error?a.message:"Join failed";if(i.includes("Invalid invitation")||i.includes("expired")||i.includes("already used")){l();return}n(i)}finally{p(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.join.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.join.welcome")}),e.jsx("p",{className:"mt-1 text-sm text-text-muted",children:t("auth.join.description")})]}),e.jsxs("form",{onSubmit:y,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.username")}),e.jsx("input",{type:"text",value:d,onChange:s=>j(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:c,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),m&&e.jsx("p",{className:"text-sm text-status-error",children:m}),e.jsx("button",{type:"submit",disabled:x||!u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:x?t("common.loading"):t("auth.join.submit")})]})]})})}export{E as Join};

package/{dist/rcs-web/assets/Login-0VGZs85I.js → packages/remote-control-server/web/dist/assets/Login-Ch1UCRmx.js}

@@ -1 +1 @@
-import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N as b,I as t}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j({onSuccess:d}){const{login:c}=b(),[a,m]=r.useState(""),[o,x]=r.useState(""),[l,n]=r.useState(""),[i,u]=r.useState(!1),p=async s=>{s.preventDefault(),n(""),u(!0);try{await c(a,o),d()}catch{n(t("auth.login.failed"))}finally{u(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.login.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.login.description")})]}),e.jsxs("form",{onSubmit:p,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:a,onChange:s=>m(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>x(s.target.value),required:!0,autoComplete:"current-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),l&&e.jsx("p",{className:"text-sm text-status-error",children:l}),e.jsx("button",{type:"submit",disabled:i,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:i?t("common.loading"):t("auth.login.submit")})]})]})})}export{j as Login};
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N as b,I as t}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j({onSuccess:d}){const{login:c}=b(),[a,m]=r.useState(""),[o,x]=r.useState(""),[l,n]=r.useState(""),[i,u]=r.useState(!1),p=async s=>{s.preventDefault(),n(""),u(!0);try{await c(a,o),d()}catch{n(t("auth.login.failed"))}finally{u(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.login.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.login.description")})]}),e.jsxs("form",{onSubmit:p,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:a,onChange:s=>m(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>x(s.target.value),required:!0,autoComplete:"current-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),l&&e.jsx("p",{className:"text-sm text-status-error",children:l}),e.jsx("button",{type:"submit",disabled:i,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:i?t("common.loading"):t("auth.login.submit")})]})]})})}export{j as Login};

package/{dist/rcs-web/assets/SessionDetail-DmK-DfBQ.js → packages/remote-control-server/web/dist/assets/SessionDetail-CgQsIF4E.js}

@@ -1,4 +1,4 @@
-var oe=Object.defineProperty;var ie=(s,t,n)=>t in s?oe(s,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):s[t]=n;var C=(s,t,n)=>ie(s,typeof t!="symbol"?t+"":t,n);import{e as g,j as e}from"./vendor-DE_-CLIE.js";import{x as A,q as le,u as ce,E as de,t as P,r as ue,h as J,B as Y,L as G,j as me,S as xe,z as $,w as D,d as pe,J as he,A as fe,F as ye,Q as ge,K as be,y as je,I as _,m as we,i as X,c as Ne,C as ke,p as ve,G as _e,D as Se,a as Ce}from"./main-CkqtCllF.js";import{D as Me,a as Ee,c as $e,d as Ae,g as Te}from"./workerType-DOQ0AHrq.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";/**
+var oe=Object.defineProperty;var ie=(s,t,n)=>t in s?oe(s,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):s[t]=n;var C=(s,t,n)=>ie(s,typeof t!="symbol"?t+"":t,n);import{e as g,j as e}from"./vendor-DE_-CLIE.js";import{x as A,q as le,u as ce,E as de,t as P,r as ue,h as J,B as Y,L as G,j as me,S as xe,z as $,w as D,d as pe,J as he,A as fe,F as ye,Q as ge,K as be,y as je,I as _,m as we,i as X,c as Ne,C as ke,p as ve,G as _e,D as Se,a as Ce}from"./main-yBKWfzqS.js";import{D as Me,a as Ee,c as $e,d as Ae,g as Te}from"./workerType-C-GKof-G.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/packages/remote-control-server/web/dist/assets/{Setup-C0cjxXMt.js → Setup-pGFlgcpn.js}

@@ -1 +1 @@
-import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N as v,I as t}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function q({onSuccess:p,onAlreadyDone:b}){const{setup:f}=v(),[n,h]=r.useState(""),[l,y]=r.useState(""),[a,g]=r.useState(""),[d,w]=r.useState(""),[i,o]=r.useState(""),[c,m]=r.useState(!1),j=async s=>{if(s.preventDefault(),o(""),a.length<8){o(t("auth.setup.passwordTooShort"));return}if(a!==d){o(t("auth.setup.passwordMismatch"));return}m(!0);try{await f(n,l,a),p()}catch(x){const u=x instanceof Error?x.message:"Setup failed";if(u.includes("already")||u.includes("409")){b();return}o(u)}finally{m(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.setup.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.setup.description")})]}),e.jsxs("form",{onSubmit:j,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.apiKey")}),e.jsx("input",{type:"password",value:n,onChange:s=>h(s.target.value),required:!0,autoComplete:"off",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.username")}),e.jsx("input",{type:"text",value:l,onChange:s=>y(s.target.value),required:!0,autoComplete:"username",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.password")}),e.jsx("input",{type:"password",value:a,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.confirmPassword")}),e.jsx("input",{type:"password",value:d,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),i&&e.jsx("p",{className:"text-sm text-status-error",children:i}),e.jsx("button",{type:"submit",disabled:c,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:c?t("common.loading"):t("auth.setup.submit")})]})]})})}export{q as Setup};
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{N as v,I as t}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function q({onSuccess:p,onAlreadyDone:b}){const{setup:f}=v(),[n,h]=r.useState(""),[l,y]=r.useState(""),[a,g]=r.useState(""),[d,w]=r.useState(""),[i,o]=r.useState(""),[c,m]=r.useState(!1),j=async s=>{if(s.preventDefault(),o(""),a.length<8){o(t("auth.setup.passwordTooShort"));return}if(a!==d){o(t("auth.setup.passwordMismatch"));return}m(!0);try{await f(n,l,a),p()}catch(x){const u=x instanceof Error?x.message:"Setup failed";if(u.includes("already")||u.includes("409")){b();return}o(u)}finally{m(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.setup.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.setup.description")})]}),e.jsxs("form",{onSubmit:j,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.apiKey")}),e.jsx("input",{type:"password",value:n,onChange:s=>h(s.target.value),required:!0,autoComplete:"off",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.username")}),e.jsx("input",{type:"text",value:l,onChange:s=>y(s.target.value),required:!0,autoComplete:"username",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.password")}),e.jsx("input",{type:"password",value:a,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.setup.confirmPassword")}),e.jsx("input",{type:"password",value:d,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),i&&e.jsx("p",{className:"text-sm text-status-error",children:i}),e.jsx("button",{type:"submit",disabled:c,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:c?t("common.loading"):t("auth.setup.submit")})]})]})})}export{q as Setup};

package/packages/remote-control-server/web/dist/assets/{ShareLanding-DUZrreJ7.js → ShareLanding-BLDP5vrM.js}

@@ -1 +1 @@
-import{e as d,j as e}from"./vendor-DE_-CLIE.js";import{s as m,b as h}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j(){const[t,r]=d.useState("loading"),[i,a]=d.useState(""),l=(typeof window<"u"?window.location.pathname:"").match(/\/code\/s\/([^/?]+)/),o=l?l[1]:null;return d.useEffect(()=>{if(!o){r("invalid"),a("Share link is invalid — no token found.");return}if(!o.startsWith("shr_")){r("invalid"),a("Invalid share token format.");return}let n=!1;async function c(){try{const s=await m(o);if(n)return;window.location.href=`/code/${s.id}`}catch(s){if(n)return;s instanceof h?s.status===401&&s.message.toLowerCase().includes("expired")?(r("expired"),a("This share has expired.")):s.status===404?s.message.toLowerCase().includes("session")?(r("not_found"),a("Session not found.")):(r("invalid"),a("Share not found or has been revoked.")):s.status===403?(r("invalid"),a("You do not have permission to access this share.")):(r("error"),a(s.message||"Failed to resolve share.")):(r("error"),a(s instanceof Error?s.message:"Failed to resolve share."))}}return c(),()=>{n=!0}},[o]),d.useEffect(()=>{if(t!=="loading"&&t!=="error"){const n=setTimeout(()=>{window.location.href="/code"},3e3);return()=>clearTimeout(n)}},[t]),t==="loading"?e.jsx("div",{className:"flex h-screen items-center justify-center bg-surface-0 text-text-muted",children:e.jsxs("div",{className:"text-center",children:[e.jsx("div",{className:"animate-spin h-8 w-8 border-2 border-brand border-t-transparent rounded-full mx-auto mb-3"}),e.jsx("p",{children:"Resolving share link..."})]})}):e.jsx("div",{className:"flex h-screen items-center justify-center bg-surface-0 text-text-primary",children:e.jsxs("div",{className:"text-center max-w-md px-4",children:[t==="expired"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Share Expired"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"This share has expired."})]}),t==="invalid"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Invalid Share"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"This share link is invalid or has been revoked."})]}),t==="not_found"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Not Found"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"The session could not be found."})]}),t==="error"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Error"}),e.jsx("p",{className:"text-status-error mb-4",children:i})]}),e.jsx("a",{href:"/code",className:"text-brand hover:underline",children:"← Back to Dashboard"})]})})}export{j as ShareLanding};
+import{e as d,j as e}from"./vendor-DE_-CLIE.js";import{s as m,b as h}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j(){const[t,r]=d.useState("loading"),[i,a]=d.useState(""),l=(typeof window<"u"?window.location.pathname:"").match(/\/code\/s\/([^/?]+)/),o=l?l[1]:null;return d.useEffect(()=>{if(!o){r("invalid"),a("Share link is invalid — no token found.");return}if(!o.startsWith("shr_")){r("invalid"),a("Invalid share token format.");return}let n=!1;async function c(){try{const s=await m(o);if(n)return;window.location.href=`/code/${s.id}`}catch(s){if(n)return;s instanceof h?s.status===401&&s.message.toLowerCase().includes("expired")?(r("expired"),a("This share has expired.")):s.status===404?s.message.toLowerCase().includes("session")?(r("not_found"),a("Session not found.")):(r("invalid"),a("Share not found or has been revoked.")):s.status===403?(r("invalid"),a("You do not have permission to access this share.")):(r("error"),a(s.message||"Failed to resolve share.")):(r("error"),a(s instanceof Error?s.message:"Failed to resolve share."))}}return c(),()=>{n=!0}},[o]),d.useEffect(()=>{if(t!=="loading"&&t!=="error"){const n=setTimeout(()=>{window.location.href="/code"},3e3);return()=>clearTimeout(n)}},[t]),t==="loading"?e.jsx("div",{className:"flex h-screen items-center justify-center bg-surface-0 text-text-muted",children:e.jsxs("div",{className:"text-center",children:[e.jsx("div",{className:"animate-spin h-8 w-8 border-2 border-brand border-t-transparent rounded-full mx-auto mb-3"}),e.jsx("p",{children:"Resolving share link..."})]})}):e.jsx("div",{className:"flex h-screen items-center justify-center bg-surface-0 text-text-primary",children:e.jsxs("div",{className:"text-center max-w-md px-4",children:[t==="expired"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Share Expired"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"This share has expired."})]}),t==="invalid"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Invalid Share"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"This share link is invalid or has been revoked."})]}),t==="not_found"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Not Found"}),e.jsx("p",{className:"text-text-muted mb-4",children:i||"The session could not be found."})]}),t==="error"&&e.jsxs(e.Fragment,{children:[e.jsx("h2",{className:"font-display text-xl font-semibold mb-2",children:"Error"}),e.jsx("p",{className:"text-status-error mb-4",children:i})]}),e.jsx("a",{href:"/code",className:"text-brand hover:underline",children:"← Back to Dashboard"})]})})}export{j as ShareLanding};

package/packages/remote-control-server/web/dist/assets/{TeamCreate-B8ZV6EdY.js → TeamCreate-Dn4BSF1C.js}

@@ -1 +1 @@
-import{e as a,j as e}from"./vendor-DE_-CLIE.js";import{u as f}from"./useTeams-CqJOqEy1.js";import{Q as y,I as r}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function C(){y();const{createTeam:u}=f(),[o,p]=a.useState(""),[s,m]=a.useState(""),[n,b]=a.useState(""),[l,c]=a.useState(null),[d,x]=a.useState(!1),h=t=>{p(t),s||m(t.toLowerCase().replace(/[^a-z0-9-]/g,"-").replace(/-+/g,"-"))},g=async t=>{t.preventDefault(),c(null),x(!0);try{const i=await u({name:o,slug:s,description:n||void 0});window.location.href=`/teams/${i.id}`}catch(i){c(i instanceof Error?i.message:"Failed to create team")}finally{x(!1)}};return e.jsxs("div",{className:"mx-auto max-w-lg px-4 py-8",children:[e.jsx("h1",{className:"text-xl font-semibold text-text-primary mb-6",children:r("team.create.title")}),e.jsxs("form",{onSubmit:g,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{htmlFor:"name",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.name")}),e.jsx("input",{id:"name",type:"text",required:!0,value:o,onChange:t=>h(t.target.value),className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",placeholder:"Engineering"})]}),e.jsxs("div",{children:[e.jsx("label",{htmlFor:"slug",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.slug")}),e.jsx("input",{id:"slug",type:"text",required:!0,value:s,onChange:t=>m(t.target.value),pattern:"^[a-z0-9-]{3,32}$",className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",placeholder:"engineering"}),e.jsx("p",{className:"mt-1 text-xs text-text-muted",children:r("team.create.slugHint")})]}),e.jsxs("div",{children:[e.jsx("label",{htmlFor:"description",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.description")}),e.jsx("textarea",{id:"description",value:n,onChange:t=>b(t.target.value),className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",rows:3})]}),l&&e.jsx("p",{className:"text-sm text-destructive",children:l}),e.jsxs("div",{className:"flex gap-3",children:[e.jsx("button",{type:"button",onClick:()=>window.history.back(),className:"rounded border border-border px-4 py-2 text-sm text-text-primary hover:bg-surface-2",children:r("common.cancel")}),e.jsx("button",{type:"submit",disabled:d||!o||!s,className:"rounded bg-accent px-4 py-2 text-sm text-white hover:bg-accent/90 disabled:opacity-50",children:d?r("common.creating"):r("team.create.submit")})]})]})]})}export{C as TeamCreate};
+import{e as a,j as e}from"./vendor-DE_-CLIE.js";import{u as f}from"./useTeams-cnFAMG8m.js";import{Q as y,I as r}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function C(){y();const{createTeam:u}=f(),[o,p]=a.useState(""),[s,m]=a.useState(""),[n,b]=a.useState(""),[l,c]=a.useState(null),[d,x]=a.useState(!1),h=t=>{p(t),s||m(t.toLowerCase().replace(/[^a-z0-9-]/g,"-").replace(/-+/g,"-"))},g=async t=>{t.preventDefault(),c(null),x(!0);try{const i=await u({name:o,slug:s,description:n||void 0});window.location.href=`/teams/${i.id}`}catch(i){c(i instanceof Error?i.message:"Failed to create team")}finally{x(!1)}};return e.jsxs("div",{className:"mx-auto max-w-lg px-4 py-8",children:[e.jsx("h1",{className:"text-xl font-semibold text-text-primary mb-6",children:r("team.create.title")}),e.jsxs("form",{onSubmit:g,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{htmlFor:"name",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.name")}),e.jsx("input",{id:"name",type:"text",required:!0,value:o,onChange:t=>h(t.target.value),className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",placeholder:"Engineering"})]}),e.jsxs("div",{children:[e.jsx("label",{htmlFor:"slug",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.slug")}),e.jsx("input",{id:"slug",type:"text",required:!0,value:s,onChange:t=>m(t.target.value),pattern:"^[a-z0-9-]{3,32}$",className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",placeholder:"engineering"}),e.jsx("p",{className:"mt-1 text-xs text-text-muted",children:r("team.create.slugHint")})]}),e.jsxs("div",{children:[e.jsx("label",{htmlFor:"description",className:"block text-sm font-medium text-text-primary mb-1",children:r("team.create.description")}),e.jsx("textarea",{id:"description",value:n,onChange:t=>b(t.target.value),className:"w-full rounded border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary",rows:3})]}),l&&e.jsx("p",{className:"text-sm text-destructive",children:l}),e.jsxs("div",{className:"flex gap-3",children:[e.jsx("button",{type:"button",onClick:()=>window.history.back(),className:"rounded border border-border px-4 py-2 text-sm text-text-primary hover:bg-surface-2",children:r("common.cancel")}),e.jsx("button",{type:"submit",disabled:d||!o||!s,className:"rounded bg-accent px-4 py-2 text-sm text-white hover:bg-accent/90 disabled:opacity-50",children:d?r("common.creating"):r("team.create.submit")})]})]})]})}export{C as TeamCreate};

package/packages/remote-control-server/web/dist/assets/{TeamDetail-DBAsJ__i.js → TeamDetail-B4og5bFH.js}

@@ -1,4 +1,4 @@
-import{e as i,j as e}from"./vendor-DE_-CLIE.js";import{x as f,k as b,Q as y,I as p,X as v,N as w}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";/**
+import{e as i,j as e}from"./vendor-DE_-CLIE.js";import{x as f,k as b,Q as y,I as p,X as v,N as w}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";/**
  * @license lucide-react v0.555.0 - ISC
  *
  * This source code is licensed under the ISC license.

package/packages/remote-control-server/web/dist/assets/{TeamList-C-Hte4nV.js → TeamList-BgDk6TT_.js}

@@ -1 +1 @@
-import{j as e}from"./vendor-DE_-CLIE.js";import{u as a}from"./useTeams-CqJOqEy1.js";import{P as i}from"./main-CkqtCllF.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function l(){const{myTeams:t,isLoading:r}=a();return r?e.jsx("div",{className:"flex items-center justify-center py-12 text-text-muted",children:"Loading teams..."}):e.jsxs("div",{className:"mx-auto max-w-3xl px-4 py-8",children:[e.jsxs("div",{className:"flex items-center justify-between mb-6",children:[e.jsx("h1",{className:"text-xl font-semibold text-text-primary",children:"Teams"}),e.jsxs("a",{href:"/teams/new",className:"inline-flex items-center gap-1.5 rounded bg-accent px-3 py-1.5 text-sm text-white hover:bg-accent/90",children:[e.jsx(i,{className:"h-4 w-4"}),"Create Team"]})]}),t.length===0?e.jsx("div",{className:"rounded border border-border/60 bg-surface-2 p-8 text-center",children:e.jsx("p",{className:"text-text-muted",children:"You are not a member of any teams yet."})}):e.jsx("ul",{className:"space-y-3",children:t.map(s=>e.jsx("li",{children:e.jsx("a",{href:`/teams/${s.id}`,className:"block rounded border border-border/60 bg-surface-2 p-4 hover:bg-surface-3 transition-colors",children:e.jsxs("div",{className:"flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"font-medium text-text-primary",children:s.name}),e.jsxs("p",{className:"text-sm text-text-muted",children:["/",s.slug]})]}),s.description&&e.jsx("p",{className:"text-sm text-text-muted max-w-xs truncate",children:s.description})]})})},s.id))})]})}export{l as TeamList};
+import{j as e}from"./vendor-DE_-CLIE.js";import{u as a}from"./useTeams-cnFAMG8m.js";import{P as i}from"./main-yBKWfzqS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function l(){const{myTeams:t,isLoading:r}=a();return r?e.jsx("div",{className:"flex items-center justify-center py-12 text-text-muted",children:"Loading teams..."}):e.jsxs("div",{className:"mx-auto max-w-3xl px-4 py-8",children:[e.jsxs("div",{className:"flex items-center justify-between mb-6",children:[e.jsx("h1",{className:"text-xl font-semibold text-text-primary",children:"Teams"}),e.jsxs("a",{href:"/teams/new",className:"inline-flex items-center gap-1.5 rounded bg-accent px-3 py-1.5 text-sm text-white hover:bg-accent/90",children:[e.jsx(i,{className:"h-4 w-4"}),"Create Team"]})]}),t.length===0?e.jsx("div",{className:"rounded border border-border/60 bg-surface-2 p-8 text-center",children:e.jsx("p",{className:"text-text-muted",children:"You are not a member of any teams yet."})}):e.jsx("ul",{className:"space-y-3",children:t.map(s=>e.jsx("li",{children:e.jsx("a",{href:`/teams/${s.id}`,className:"block rounded border border-border/60 bg-surface-2 p-4 hover:bg-surface-3 transition-colors",children:e.jsxs("div",{className:"flex items-center justify-between",children:[e.jsxs("div",{children:[e.jsx("h2",{className:"font-medium text-text-primary",children:s.name}),e.jsxs("p",{className:"text-sm text-text-muted",children:["/",s.slug]})]}),s.description&&e.jsx("p",{className:"text-sm text-text-muted max-w-xs truncate",children:s.description})]})})},s.id))})]})}export{l as TeamList};