@saluzi/saluzi-edu 0.2.20 → 0.2.21

package/packages/remote-control-server/src/routes/web/teams.ts

@@ -3,6 +3,10 @@ import { randomUUID, createHash } from 'node:crypto'
 import { getDb } from '../../db/sqlite'
 import { sessionAuth } from '../../auth/middleware'
 import { SYSTEM_USER_ID } from '../../auth/constants'
+import {
+  storeClaimEnvironment,
+  storeGetEnvironmentOwnership,
+} from '../../store'
 
 const app = new Hono()
 
@@ -31,10 +35,20 @@ function getUserInfo(c: import('hono').Context): UserInfo {
   const userId = c.get('userId') as string
   const isAdminCtx = c.get('isAdmin') as boolean
 
-  if (userId === SYSTEM_USER_ID || isAdminCtx) {
+  // API key bypass — system admin identity (no real user row).
+  if (userId === SYSTEM_USER_ID) {
     return { userId: SYSTEM_USER_ID, isAdmin: true, role: 'admin' }
   }
 
+  // Cookie-authenticated admin — preserve real userId so team ownership
+  // and membership queries resolve correctly. Previously this branch
+  // overwrote userId with SYSTEM_USER_ID, causing admin-created teams
+  // to be attributed to the first admin row in the DB rather than the
+  // actual creator, and breaking GET /teams for the logged-in admin.
+  if (isAdminCtx) {
+    return { userId, isAdmin: true, role: 'admin' }
+  }
+
   // Look up user role from DB
   const db = getDb()
   const row = db
@@ -228,6 +242,26 @@ app.get('/teams', withAuth, async c => {
 // GET /teams/:id — Get team details
 // ---------------------------------------------------------------------------
 
+app.get('/teams/by-slug/:slug', withAuth, async c => {
+  const slug = c.req.param('slug')!
+  const user = getUserInfo(c)
+
+  const db = getDb()
+  const team = db
+    .query('SELECT * FROM teams WHERE slug = $slug AND deleted_at IS NULL')
+    .get({ $slug: slug }) as Record<string, unknown> | null
+  if (!team) {
+    return c.json({ error: 'Team not found' }, 404)
+  }
+
+  const teamRole = getTeamRole(team.id as string, user)
+  if (!teamRole) {
+    return c.json({ error: 'Not a team member' }, 403)
+  }
+
+  return c.json(team, 200)
+})
+
 app.get('/teams/:id', withAuth, async c => {
   const teamId = c.req.param('id')!
   const user = getUserInfo(c)
@@ -816,10 +850,10 @@ app.post('/environments/:id/transfer', withAuth, async c => {
         403,
       )
     }
-  } else if (!user.isAdmin) {
-    // Environment not in any team — only admin can transfer
-    return c.json({ error: 'Environment not found in any team' }, 404)
   }
+  // Personal environment (no source team): any user who is admin/owner of
+  // the target team can claim it. This lets the Web UI "link personal env
+  // to this team" flow work without requiring admin role.
 
   // Check caller is owner/admin of the target team
   const targetRole = getTeamRole(toTeamId, user)
@@ -862,4 +896,207 @@ app.post('/environments/:id/transfer', withAuth, async c => {
   return c.json({ ok: true }, 200)
 })
 
+// ---------------------------------------------------------------------------
+// DELETE /teams/:id/environments/:envId — Unlink environment from team
+// Makes the environment personal again (no team association). Only team
+// owner/admin (or system admin) can unlink. Sessions created under the
+// team scope for this env lose their team ownership.
+// ---------------------------------------------------------------------------
+
+app.delete('/teams/:id/environments/:envId', withAuth, async c => {
+  const teamId = c.req.param('id')!
+  const envId = c.req.param('envId')!
+  const user = getUserInfo(c)
+
+  const result = getTeamOr404(c, teamId)
+  if ('error' in result) return result.error
+
+  const teamRole = getTeamRole(teamId, user)
+  if (!user.isAdmin && teamRole !== 'owner' && teamRole !== 'admin') {
+    return c.json(
+      { error: 'Only team owner/admin can unlink environments' },
+      403,
+    )
+  }
+
+  const db = getDb()
+  db.query(
+    'DELETE FROM team_environments WHERE team_id = $teamId AND environment_id = $envId',
+  ).run({ $teamId: teamId, $envId: envId })
+
+  // Drop team ownership for sessions in this env so they revert to personal.
+  db.query(
+    `DELETE FROM session_owners
+     WHERE owner_type = 'team' AND owner_id = $teamId
+     AND session_id IN (
+       SELECT id FROM sessions WHERE environment_id = $envId
+     )`,
+  ).run({ $teamId: teamId, $envId: envId })
+
+  return c.json({ ok: true }, 200)
+})
+
+// ---------------------------------------------------------------------------
+// POST /web/environments/claim — Claim an unowned environment.
+// Worker registers env without --user-id and without --team-id → env gets a
+// claim_token, worker prints /code/claim/<token>. First logged-in user to
+// POST here with the matching token becomes the env's owner.
+// ---------------------------------------------------------------------------
+
+app.post('/environments/claim', withAuth, async c => {
+  const user = getUserInfo(c)
+  let body: Record<string, unknown>
+  try {
+    body = await c.req.json()
+  } catch {
+    return c.json({ error: 'Invalid JSON' }, 400)
+  }
+  const claimToken = body.claim_token
+  if (typeof claimToken !== 'string' || !claimToken.startsWith('clm_')) {
+    return c.json({ error: 'Invalid claim_token' }, 400)
+  }
+
+  const db = getDb()
+  const row = db
+    .query(
+      'SELECT id, owner_user_id, claim_expires_at FROM environments WHERE claim_token = $ct',
+    )
+    .get({ $ct: claimToken }) as {
+    id: string
+    owner_user_id: string | null
+    claim_expires_at: string | null
+  } | null
+  if (!row) {
+    return c.json({ error: 'Claim token not found' }, 404)
+  }
+  if (row.owner_user_id !== null) {
+    return c.json({ error: 'Environment already claimed' }, 409)
+  }
+  if (
+    row.claim_expires_at &&
+    new Date(row.claim_expires_at).getTime() < Date.now()
+  ) {
+    return c.json({ error: 'Claim token expired' }, 410)
+  }
+
+  const ok = storeClaimEnvironment(row.id, user.userId)
+  if (!ok) {
+    return c.json({ error: 'Environment not found or already claimed' }, 409)
+  }
+  return c.json({ ok: true, environment_id: row.id }, 200)
+})
+
+// ---------------------------------------------------------------------------
+// POST /web/sessions/:id/transfer — Transfer session between team/personal.
+// Body: { toTeamId: string | null }. toTeamId = null strips team owner
+// (revert to personal); toTeamId = <team> sets team owner (team members gain
+// visibility). Caller must be the session's user owner or admin.
+// ---------------------------------------------------------------------------
+
+app.post('/sessions/:id/transfer', withAuth, async c => {
+  const sessionId = c.req.param('id')!
+  const user = getUserInfo(c)
+
+  let body: Record<string, unknown>
+  try {
+    body = await c.req.json()
+  } catch {
+    return c.json({ error: 'Invalid JSON' }, 400)
+  }
+  const toTeamId = body.toTeamId
+  if (toTeamId !== null && typeof toTeamId !== 'string') {
+    return c.json({ error: 'toTeamId must be string or null' }, 400)
+  }
+
+  const db = getDb()
+  // Caller must be the session's user owner, or team admin of the session's
+  // current team owner, or system admin.
+  const ownerRow = db
+    .query(
+      `SELECT owner_id FROM session_owners
+       WHERE session_id = $sid AND owner_type = 'user'`,
+    )
+    .get({ $sid: sessionId }) as { owner_id: string } | null
+  const teamOwnerRow = db
+    .query(
+      `SELECT owner_id FROM session_owners
+       WHERE session_id = $sid AND owner_type = 'team'`,
+    )
+    .get({ $sid: sessionId }) as { owner_id: string } | null
+
+  const isUserOwner = ownerRow?.owner_id === user.userId
+  let isTeamAdmin = false
+  if (teamOwnerRow) {
+    const role = getTeamRole(teamOwnerRow.owner_id, user)
+    isTeamAdmin = role === 'owner' || role === 'admin'
+  }
+  if (!user.isAdmin && !isUserOwner && !isTeamAdmin) {
+    return c.json({ error: 'Not authorized to transfer this session' }, 403)
+  }
+
+  // Validate target team if set.
+  if (toTeamId !== null) {
+    const targetTeam = db
+      .query('SELECT id FROM teams WHERE id = $id AND deleted_at IS NULL')
+      .get({ $id: toTeamId })
+    if (!targetTeam) {
+      return c.json({ error: 'Target team not found' }, 404)
+    }
+    // Caller must be admin/owner of target team too (prevent dumping sessions
+    // into teams you can't manage).
+    const targetRole = getTeamRole(toTeamId, user)
+    if (
+      !user.isAdmin &&
+      (!targetRole || (targetRole !== 'owner' && targetRole !== 'admin'))
+    ) {
+      return c.json({ error: 'Not authorized in target team' }, 403)
+    }
+  }
+
+  // Strip existing team owner, then set new one (if any).
+  db.query(
+    `DELETE FROM session_owners WHERE session_id = $sid AND owner_type = 'team'`,
+  ).run({ $sid: sessionId })
+  if (toTeamId !== null) {
+    db.query(
+      `INSERT OR IGNORE INTO session_owners (session_id, owner_type, owner_id) VALUES ($sid, 'team', $tid)`,
+    ).run({ $sid: sessionId, $tid: toTeamId })
+  }
+  // Update sessions.visibility to match.
+  db.query('UPDATE sessions SET visibility = $v WHERE id = $sid').run({
+    $sid: sessionId,
+    $v: toTeamId !== null ? 'team' : 'private',
+  })
+  return c.json({ ok: true }, 200)
+})
+
+// ---------------------------------------------------------------------------
+// GET /users/search — Search users by username or user_id (for inviting existing users)
+// Returns up to 20 matches. Only authenticated users can call this.
+// ---------------------------------------------------------------------------
+
+app.get('/users/search', withAuth, async c => {
+  const q = (c.req.query('q') || '').trim()
+  if (!q || q.length < 2) {
+    return c.json([], 200)
+  }
+
+  const db = getDb()
+  const pattern = `%${q}%`
+  const rows = db
+    .query(
+      `SELECT id, username, role FROM users
+       WHERE username LIKE $pattern OR id LIKE $pattern
+       ORDER BY username ASC
+       LIMIT 20`,
+    )
+    .all({ $pattern: pattern }) as Array<{
+    id: string
+    username: string
+    role: string
+  }>
+
+  return c.json(rows, 200)
+})
+
 export default app

package/packages/remote-control-server/src/services/environment.ts

@@ -17,7 +17,11 @@ import type {
 import type { EnvironmentRecord } from '../store'
 
 function toResponse(
-  row: EnvironmentRecord & { teamId?: string | null; teamName?: string | null },
+  row: EnvironmentRecord & {
+    teamId?: string | null
+    teamName?: string | null
+    ownerUserId?: string | null
+  },
 ): EnvironmentResponse {
   return {
     id: row.id,
@@ -32,6 +36,7 @@ function toResponse(
     capabilities: row.capabilities,
     team_id: row.teamId ?? null,
     team_name: row.teamName ?? null,
+    owner_user_id: row.ownerUserId ?? null,
   }
 }
 
@@ -39,6 +44,9 @@ export function registerEnvironment(
   req: RegisterEnvironmentRequest & {
     metadata?: { worker_type?: string }
     username?: string
+    ownerUserId?: string | null
+    claimToken?: string | null
+    claimExpiresAt?: Date | null
   },
 ) {
   const secret = config.apiKeys[0] || ''
@@ -98,6 +106,9 @@ export function registerEnvironment(
     bridgeId: req.bridge_id,
     username: req.username,
     capabilities: req.capabilities,
+    ownerUserId: req.ownerUserId,
+    claimToken: req.claimToken,
+    claimExpiresAt: req.claimExpiresAt,
   })
 
   let sessionId: string | undefined

package/packages/remote-control-server/src/store.ts

@@ -116,6 +116,9 @@ export function storeCreateEnvironment(req: {
   bridgeId?: string
   username?: string
   capabilities?: Record<string, unknown>
+  ownerUserId?: string | null
+  claimToken?: string | null
+  claimExpiresAt?: Date | null
 }): EnvironmentRecord {
   const id = `env_${randomUUID().replace(/-/g, '')}`
   const now = new Date()
@@ -141,8 +144,8 @@ export function storeCreateEnvironment(req: {
     const db = getDb()
     const secretHash = createHash('sha256').update(record.secret).digest('hex')
     db.query(
-      `INSERT OR REPLACE INTO environments (id, secret_hash, machine_name, worker_type, status, last_poll_at, created_at)
-       VALUES ($id, $sh, $mn, $wt, $st, $lp, $ca)`,
+      `INSERT OR REPLACE INTO environments (id, secret_hash, machine_name, worker_type, status, last_poll_at, created_at, owner_user_id, claim_token, claim_expires_at)
+       VALUES ($id, $sh, $mn, $wt, $st, $lp, $ca, $ou, $ct, $ce)`,
     ).run({
       $id: id,
       $sh: secretHash,
@@ -151,6 +154,9 @@ export function storeCreateEnvironment(req: {
       $st: record.status,
       $lp: record.lastPollAt?.toISOString() ?? null,
       $ca: record.createdAt.toISOString(),
+      $ou: req.ownerUserId ?? null,
+      $ct: req.claimToken ?? null,
+      $ce: req.claimExpiresAt?.toISOString() ?? null,
     })
   } catch (err) {
     console.error('[store] DB write failed in storeCreateEnvironment:', err)
@@ -223,13 +229,19 @@ export function storeListActiveEnvironments(): EnvironmentRecord[] {
  * LEFT JOINs team_environments + teams (excluding soft-deleted teams).
  */
 export function storeListActiveEnvironmentsWithTeam(): Array<
-  EnvironmentRecord & { teamId: string | null; teamName: string | null }
+  EnvironmentRecord & {
+    teamId: string | null
+    teamName: string | null
+    ownerUserId: string | null
+  }
 > {
   const active = [...environments.values()].filter(e => e.status === 'active')
   if (active.length === 0) return []
 
   // Build a map of env_id → { teamId, teamName } from SQLite
   const teamMap = new Map<string, { teamId: string; teamName: string }>()
+  // Build a map of env_id → ownerUserId from SQLite
+  const ownerMap = new Map<string, string | null>()
   try {
     const db = getDb()
     const rows = db
@@ -249,12 +261,20 @@ export function storeListActiveEnvironmentsWithTeam(): Array<
         teamName: row.team_name,
       })
     }
+    const ownerRows = db
+      .query(
+        `SELECT id, owner_user_id FROM environments WHERE owner_user_id IS NOT NULL`,
+      )
+      .all() as Array<{ id: string; owner_user_id: string }>
+    for (const row of ownerRows) {
+      ownerMap.set(row.id, row.owner_user_id)
+    }
   } catch (err) {
     console.error(
       '[store] DB read failed in storeListActiveEnvironmentsWithTeam:',
       err,
     )
-    // Fall through: return envs without team info
+    // Fall through: return envs without team/owner info
   }
 
   return active.map(env => {
@@ -263,10 +283,73 @@ export function storeListActiveEnvironmentsWithTeam(): Array<
       ...env,
       teamId: team?.teamId ?? null,
       teamName: team?.teamName ?? null,
+      ownerUserId: ownerMap.get(env.id) ?? null,
     }
   })
 }
 
+/**
+ * Look up environment ownership fields from SQLite.
+ * Returns null if the environment row doesn't exist.
+ */
+export function storeGetEnvironmentOwnership(envId: string): {
+  ownerUserId: string | null
+  teamId: string | null
+  claimToken: string | null
+  claimExpiresAt: string | null
+} | null {
+  try {
+    const db = getDb()
+    const row = db
+      .query(
+        `SELECT e.owner_user_id, e.claim_token, e.claim_expires_at,
+                (SELECT te.team_id FROM team_environments te WHERE te.environment_id = e.id) AS team_id
+         FROM environments e WHERE e.id = $id`,
+      )
+      .get({ $id: envId }) as {
+      owner_user_id: string | null
+      claim_token: string | null
+      claim_expires_at: string | null
+      team_id: string | null
+    } | null
+    if (!row) return null
+    return {
+      ownerUserId: row.owner_user_id,
+      teamId: row.team_id,
+      claimToken: row.claim_token,
+      claimExpiresAt: row.claim_expires_at,
+    }
+  } catch (err) {
+    console.error(
+      '[store] DB read failed in storeGetEnvironmentOwnership:',
+      err,
+    )
+    throw err
+  }
+}
+
+/**
+ * Claim an unowned environment: write owner_user_id and clear claim_token.
+ * Returns true if the row was updated, false if env not found or already
+ * owned (idempotent — caller checks ownership state first).
+ */
+export function storeClaimEnvironment(envId: string, userId: string): boolean {
+  try {
+    const db = getDb()
+    const result = db
+      .query(
+        `UPDATE environments
+         SET owner_user_id = $userId, claim_token = NULL, claim_expires_at = NULL
+         WHERE id = $envId AND owner_user_id IS NULL`,
+      )
+      .run({ $envId: envId, $userId: userId })
+    return result.changes > 0
+  } catch (err) {
+    console.error('[store] DB write failed in storeClaimEnvironment:', err)
+    throw err
+  }
+}
+
 export function storeListActiveEnvironmentsByUsername(
   username: string,
 ): EnvironmentRecord[] {

package/packages/remote-control-server/src/types/api.ts

@@ -138,6 +138,7 @@ export interface EnvironmentResponse {
   capabilities?: Record<string, unknown> | null
   team_id: string | null
   team_name: string | null
+  owner_user_id: string | null
 }
 
 export interface ServerInfoResponse {

package/packages/remote-control-server/web/dist/assets/AdminPanel-B0hhIa7W.js

@@ -0,0 +1 @@
+import{e as d,j as e}from"./vendor-DE_-CLIE.js";import{a1 as x,a2 as o,q as m,Y as s,K as l,i as u}from"./main-CEsvX5rj.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j(){x();const[a,i]=d.useState([]),{myTeams:r,isLoading:c}=o(),n=d.useCallback(async()=>{try{const t=await m();i(t||[])}catch(t){console.error("Admin: failed to load sessions",t)}},[]);return d.useEffect(()=>{n()},[n]),e.jsx("div",{className:"flex-1 overflow-y-auto",children:e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"mb-6 font-display text-2xl font-semibold text-text-primary",children:s("admin.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.teams")," (",r.length,")"]}),c?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("common.loading")}):r.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noTeams")}):e.jsx("div",{className:"space-y-2",children:r.map(t=>e.jsxs("a",{href:`/teams/${t.slug}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0",children:[e.jsx("span",{className:"font-medium text-text-primary",children:t.name}),e.jsx("span",{className:"ml-2 text-xs text-text-muted",children:t.slug})]}),e.jsx("span",{className:"text-xs text-text-muted",children:l(new Date(t.created_at).getTime()/1e3)})]},t.id))})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.sessions")," (",a.length,")"]}),a.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noSessions")}):e.jsx("div",{className:"space-y-2",children:a.map(t=>e.jsxs("a",{href:`/code/${t.id}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0 flex-1",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),e.jsx("span",{className:"rounded-full bg-surface-2 px-2 py-0.5 text-xs text-text-muted",children:t.source||"unknown"})]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"ml-4 flex items-center gap-3",children:[e.jsx(u,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:l(t.updated_at||t.created_at)})]})]},t.id))})]})]})})}export{j as AdminPanel};

package/packages/remote-control-server/web/dist/assets/Claim-BTx12YJw.js

@@ -0,0 +1 @@
+import{e as a,j as e}from"./vendor-DE_-CLIE.js";import{m as d}from"./main-CEsvX5rj.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function f(){const r=window.location.pathname.split("/"),t=r[r.length-1]||"",[i,s]=a.useState("idle"),[o,c]=a.useState(null),[m,l]=a.useState(null);return a.useEffect(()=>{if(!t||!t.startsWith("clm_")){c("Invalid claim token"),s("error");return}s("claiming"),d(t).then(n=>{l(n.environment_id),s("success")}).catch(n=>{c(n instanceof Error?n.message:"Claim failed"),s("error")})},[t]),i==="claiming"?e.jsx("div",{className:"px-6 py-16 sm:px-10 sm:py-20",children:e.jsx("p",{className:"text-sm text-text-muted",children:"Claiming environment..."})}):i==="error"?e.jsxs("div",{className:"px-6 py-16 sm:px-10 sm:py-20",children:[e.jsx("p",{className:"text-sm text-destructive",children:o}),e.jsx("a",{href:"/code",className:"mt-4 inline-block text-accent hover:underline",children:"Back to dashboard"})]}):e.jsxs("div",{className:"px-6 py-16 sm:px-10 sm:py-20",children:[e.jsxs("header",{className:"mb-10",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold tracking-tight text-text-primary",children:"Environment claimed"}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:"You are now the owner of this environment."})]}),e.jsxs("div",{className:"space-y-4",children:[m&&e.jsx("p",{className:"font-mono text-xs text-text-muted",children:m}),e.jsx("a",{href:"/code",className:"inline-block rounded-md bg-accent px-4 py-2 text-sm font-medium text-white hover:bg-accent/90 transition-colors",children:"Go to dashboard"})]})]})}export{f as Claim};

package/packages/remote-control-server/web/dist/assets/Dashboard-C_qeuXGp.js

@@ -0,0 +1 @@
+import{j as e,e as i}from"./vendor-DE_-CLIE.js";import{G as S,a2 as y,i as N,K as D,a1 as w,Y as n,Q as T,n as E,q as L,r as M,p as B}from"./main-CEsvX5rj.js";import{g as v}from"./workerType-Bd-zteMi.js";import{S as I,D as F,a as O,c as A,d as P,b as $}from"./SessionVisibilityBadge-CN3bz2gb.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function W({teamName:o,className:d}){return o?e.jsx("span",{className:S("inline-flex items-center rounded-full border border-border/60 bg-surface-2 px-2 py-0.5 text-xs text-text-muted",d),children:o}):null}function q({environments:o,onSelectEnvironment:d}){const{activeTeam:u}=y(),m=i.useMemo(()=>u?o.filter(s=>s.team_id===u.id):o.filter(s=>!s.team_id),[o,u]);return!m||m.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No active environments"}):e.jsx("div",{className:"space-y-2",children:m.map(s=>{const p=s.worker_type==="acp",b=v(s.worker_type),c=b.fullLabel,h=b.colorClass;return e.jsxs("button",{type:"button",onClick:()=>d==null?void 0:d(s),disabled:p,className:`flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors ${p?"cursor-default opacity-80":"hover:border-border-light cursor-pointer"}`,children:[e.jsx("div",{className:"flex items-center gap-3",children:e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"font-medium text-text-primary",children:s.machine_name||s.id}),e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${h}`,children:c}),e.jsx(W,{teamName:s.team_name??null})]}),e.jsx("div",{className:"text-sm text-text-muted",children:s.directory||""})]})}),e.jsxs("div",{className:"text-right",children:[e.jsx(N,{status:s.status}),e.jsx("div",{className:"mt-1 text-xs text-text-muted",children:s.branch||""})]})]},s.id)})})}function G({sessions:o,environments:d,onSelect:u,onDelete:m}){const{activeTeam:s,myTeams:p}=y(),b=i.useMemo(()=>{const t=new Map;for(const l of p)t.set(l.id,l.name);return t},[p]),c=i.useMemo(()=>s?o.filter(t=>t.owner_type==="team"&&t.owner_id===s.id):o.filter(t=>t.owner_type==="user"||!t.owner_type),[o,s]);if(!c||c.length===0)return e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No sessions"});const h=new Map;for(const t of d??[])t!=null&&t.id&&t.worker_type&&h.set(t.id,t.worker_type);const f=[...c].sort((t,l)=>(l.updated_at||0)-(t.updated_at||0));return e.jsx("div",{className:"space-y-2",children:f.map(t=>e.jsxs("div",{className:"group flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("button",{type:"button",onClick:()=>u(t.id),className:"min-w-0 flex-1 text-left",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),t.visibility&&e.jsx(I,{visibility:t.visibility||"private"}),(()=>{var x;let l=t.source==="acp"?"acp":(x=t.environment)==null?void 0:x.worker_type;!l&&t.environment_id&&(l=h.get(t.environment_id));const a=v(l);return e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${a.colorClass}`,children:a.fullLabel})})()]}),e.jsxs("div",{className:"flex items-center gap-2 truncate text-xs text-text-muted",children:[e.jsx("span",{className:"truncate font-mono",children:t.id}),t.owner_type==="team"&&t.owner_id&&e.jsxs("span",{className:"inline-flex items-center gap-2 truncate",children:[e.jsx("span",{className:"text-text-muted/40",children:"|"}),e.jsx("span",{className:"truncate",children:b.get(t.owner_id)||t.owner_id})]})]})]}),e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx(N,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:D(t.created_at||t.updated_at)}),m&&e.jsx("button",{type:"button",onClick:l=>{l.stopPropagation(),m(t.id)},className:"rounded p-1 text-text-muted opacity-0 transition-all hover:text-status-error group-hover:opacity-100",title:"Delete session",children:e.jsx("svg",{className:"h-4 w-4",fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M6 18L18 6M6 6l12 12"})})})]})]},t.id))})}function H({open:o,environments:d,onClose:u,onCreated:m}){w();const{activeTeam:s}=y(),[p,b]=i.useState(""),[c,h]=i.useState(""),[f,t]=i.useState("same-dir"),[l,a]=i.useState(""),[x,g]=i.useState(!1),_=i.useMemo(()=>s?d.filter(r=>r.team_id===s.id):d.filter(r=>!r.team_id),[d,s]);i.useEffect(()=>{o&&(b(""),h(""),t("same-dir"),a(""))},[o]);const k=async()=>{g(!0),a("");try{const r={};p.trim()&&(r.title=p.trim()),c&&(r.environment_id=c),r.spawn_mode=f;const j=T();j&&(r.team_id=j);const C=await E(r);m(C)}catch(r){a(r instanceof Error?r.message:n("dialog.createFailed"))}finally{g(!1)}};return e.jsx(F,{open:o,onOpenChange:r=>{r||u()},children:e.jsxs(O,{className:"max-w-md rounded-2xl border-border bg-surface-1 p-6 shadow-2xl",children:[e.jsx(A,{children:e.jsx(P,{className:"font-display text-lg font-semibold text-text-primary",children:n("dialog.newSession")})}),e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:n("dialog.titleOptional")}),e.jsx("input",{type:"text",value:p,onChange:r=>b(r.target.value),placeholder:n("dialog.titlePlaceholder"),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:n("dialog.environment")}),e.jsxs("select",{value:c,onChange:r=>h(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"",children:n("dialog.none")}),_.map(r=>{const j=v(r.worker_type).shortLabel;return e.jsxs("option",{value:r.id,children:[r.machine_name||r.id," (",r.branch||n("dialog.noBranch"),") · ",j]},r.id)})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:n("dialog.workspaceMode")}),e.jsxs("select",{value:f,onChange:r=>t(r.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"same-dir",children:n("dialog.sameDir")}),e.jsx("option",{value:"worktree",children:n("dialog.worktree")})]})]}),l&&e.jsx("div",{className:"text-sm text-status-error",children:l})]}),e.jsxs($,{children:[e.jsx("button",{onClick:u,className:"rounded-lg border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2 transition-colors",children:n("common.cancel")}),e.jsx("button",{onClick:k,disabled:x,className:"rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white hover:bg-brand-light disabled:opacity-50 transition-colors",children:x?n("common.creating"):n("common.create")})]})]})})}function J({onNavigateSession:o}){w();const[d,u]=i.useState([]),[m,s]=i.useState([]),[p,b]=i.useState(!1),c=i.useCallback(async()=>{try{const[a,x]=await Promise.all([L(),M()]);u(a||[]),s(x||[])}catch(a){console.error("Dashboard render error:",a)}},[]);i.useEffect(()=>{c();const a=setInterval(c,1e4);return()=>clearInterval(a)},[c]);const h=a=>{b(!1),o(a.id)},f=i.useCallback(a=>{},[]),t=i.useCallback(a=>{o(a)},[o]),l=i.useCallback(async a=>{if(window.confirm(n("dashboard.confirmDelete").replace("{id}",a)))try{await B(a),u(x=>x.filter(g=>g.id!==a))}catch(x){alert(x instanceof Error?x.message:n("dashboard.deleteFailed"))}},[]);return e.jsx("div",{className:"px-6 py-12 sm:px-10 sm:py-16",children:e.jsxs("div",{children:[e.jsx("h1",{className:"sr-only",children:n("dashboard.title")}),e.jsxs("section",{className:"mb-16",children:[e.jsx("h2",{className:"mb-6 text-sm font-medium text-text-primary",children:n("dashboard.environments")}),e.jsx(q,{environments:m,onSelectEnvironment:f})]}),e.jsxs("section",{children:[e.jsxs("div",{className:"mb-6 flex items-center justify-between",children:[e.jsx("h2",{className:"text-sm font-medium text-text-primary",children:n("dashboard.sessions")}),e.jsx("button",{onClick:()=>b(!0),className:"rounded-md bg-accent px-3 py-1.5 text-sm font-medium text-white hover:bg-accent/90 transition-colors",children:n("dashboard.newSession")})]}),e.jsx(G,{sessions:d,environments:m,onSelect:t,onDelete:l})]}),e.jsx(H,{open:p,environments:m,onClose:()=>b(!1),onCreated:h})]})})}export{J as Dashboard};

package/packages/remote-control-server/web/dist/assets/Join-DDMaEXX-.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{a0 as v,Y as t}from"./main-CEsvX5rj.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function E({onSuccess:b,onInvalidInvite:l}){const{join:h}=v(),[u,f]=r.useState(""),[d,j]=r.useState(""),[o,w]=r.useState(""),[c,g]=r.useState(""),[m,n]=r.useState(""),[x,p]=r.useState(!1);r.useEffect(()=>{const a=new URLSearchParams(window.location.search).get("invite");a?f(a):l()},[l]);const y=async s=>{if(s.preventDefault(),n(""),o.length<8){n(t("auth.setup.passwordTooShort"));return}if(o!==c){n(t("auth.setup.passwordMismatch"));return}p(!0);try{await h(u,d,o),b()}catch(a){const i=a instanceof Error?a.message:"Join failed";if(i.includes("Invalid invitation")||i.includes("expired")||i.includes("already used")){l();return}n(i)}finally{p(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.join.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.join.welcome")}),e.jsx("p",{className:"mt-1 text-sm text-text-muted",children:t("auth.join.description")})]}),e.jsxs("form",{onSubmit:y,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.username")}),e.jsx("input",{type:"text",value:d,onChange:s=>j(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:c,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),m&&e.jsx("p",{className:"text-sm text-status-error",children:m}),e.jsx("button",{type:"submit",disabled:x||!u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:x?t("common.loading"):t("auth.join.submit")})]})]})})}export{E as Join};

package/packages/remote-control-server/web/dist/assets/Login-eCEGVdjw.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{a0 as f,Y as t}from"./main-CEsvX5rj.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function N({onSuccess:d,onNavigateRegister:c}){const{login:m,registrationAllowed:x}=f(),[a,p]=r.useState(""),[o,b]=r.useState(""),[l,n]=r.useState(""),[i,u]=r.useState(!1),h=async s=>{s.preventDefault(),n(""),u(!0);try{await m(a,o),d()}catch{n(t("auth.login.failed"))}finally{u(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.login.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.login.description")})]}),e.jsxs("form",{onSubmit:h,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:a,onChange:s=>p(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>b(s.target.value),required:!0,autoComplete:"current-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),l&&e.jsx("p",{className:"text-sm text-status-error",children:l}),e.jsx("button",{type:"submit",disabled:i,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:i?t("common.loading"):t("auth.login.submit")})]}),x&&e.jsx("button",{type:"button",onClick:c,className:"w-full text-center text-sm text-text-muted hover:text-text-primary transition-colors",children:t("auth.login.register")})]})})}export{N as Login};

package/packages/remote-control-server/web/dist/assets/Register-gqlt4O0J.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{a0 as y,Y as t}from"./main-CEsvX5rj.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function S({onSuccess:m,onBack:x}){const{register:p}=y(),[n,b]=r.useState(""),[a,h]=r.useState(""),[l,f]=r.useState(""),[i,o]=r.useState(""),[u,d]=r.useState(!1),g=async s=>{if(s.preventDefault(),o(""),a.length<8){o(t("auth.setup.passwordTooShort"));return}if(a!==l){o(t("auth.setup.passwordMismatch"));return}d(!0);try{await p(n,a),m()}catch(c){o(c instanceof Error?c.message:t("auth.register.failed"))}finally{d(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.register.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.register.description")})]}),e.jsxs("form",{onSubmit:g,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:n,onChange:s=>b(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:a,onChange:s=>h(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:l,onChange:s=>f(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),i&&e.jsx("p",{className:"text-sm text-status-error",children:i}),e.jsx("button",{type:"submit",disabled:u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:u?t("common.loading"):t("auth.register.submit")})]}),e.jsx("button",{type:"button",onClick:x,className:"w-full text-center text-sm text-text-muted hover:text-text-primary transition-colors",children:t("auth.register.backToLogin")})]})})}export{S as Register};