@saluzi/saluzi-edu 0.2.85 → 0.3.1

package/packages/remote-control-server/src/nodeServer.ts

@@ -6,6 +6,8 @@
  * npm package needs zero additional dependencies.
  *
  * Usage:
+ *   slz rcs                       (zero-config: API key defaults to sk-slz)
+ *   slz rcs one                   (single-user mode: admin/admin123, workers auto-owned)
  *   RCS_API_KEYS=sk-1234 slz rcs
  */
 import { serve } from '@hono/node-server'
@@ -22,18 +24,66 @@ import { closeAllConnections } from './transport/ws-handler.js'
 import { closeAllAcpConnections } from './transport/acp-ws-handler.js'
 import { closeAllRelayConnections } from './transport/acp-relay-handler.js'
 import { startDisconnectMonitor } from './services/disconnect-monitor.js'
+import {
+  ensureSingleUserAdmin,
+  SINGLE_USER_DEFAULT_PASSWORD,
+  SINGLE_USER_USERNAME,
+} from './services/single-user.js'
 
 export interface RcsServerOptions {
   apiKeys: string[]
   port?: number
   host?: string
+  /** Single-user mode (`slz rcs one`): auto-init admin account, workers
+   *  auto-owned, registration disabled, host defaults to 127.0.0.1. */
+  singleUser?: boolean
 }
 
 export async function startRcsServer(opts: RcsServerOptions): Promise<void> {
   // Set env vars so config module picks them up
   process.env.RCS_API_KEYS = opts.apiKeys.join(',')
-  if (opts.port) process.env.RCS_PORT = String(opts.port)
-  if (opts.host) process.env.RCS_HOST = opts.host
+  // The config module may already be evaluated (static import above) — its
+  // env-derived values are frozen, so apiKeys/host/port must also be applied
+  // to the live object or they would silently no-op.
+  config.apiKeys = opts.apiKeys
+  if (opts.port) {
+    process.env.RCS_PORT = String(opts.port)
+    config.port = opts.port
+  }
+  if (opts.host) {
+    process.env.RCS_HOST = opts.host
+    config.host = opts.host
+  }
+  if (opts.singleUser) process.env.RCS_SINGLE_USER = 'true'
+  // The config module may already be evaluated (static import above) — its
+  // env-derived values are frozen, so opts.host/opts.port must also be
+  // applied to the live object or they would silently no-op.
+  if (opts.port) {
+    process.env.RCS_PORT = String(opts.port)
+    config.port = opts.port
+  }
+  if (opts.host) {
+    process.env.RCS_HOST = opts.host
+    config.host = opts.host
+  }
+  if (opts.singleUser) process.env.RCS_SINGLE_USER = 'true'
+
+  // Effective single-user mode: the `one` argument OR RCS_SINGLE_USER=true
+  // set before process start (config.singleUser already reflects the env).
+  const singleUser = opts.singleUser || config.singleUser
+
+  // The config module may already be evaluated (static import above), so
+  // reflect single-user mode on the live object too — request-time reads
+  // (allowRegistration, route gates) must see it regardless of import order.
+  if (singleUser) {
+    config.singleUser = true
+    config.allowRegistration = false
+    // Local convenience mode: bind loopback unless the operator explicitly
+    // chose a host (RCS_HOST at process start or opts.host above).
+    if (!process.env.RCS_HOST) {
+      config.host = '127.0.0.1'
+    }
+  }
 
   const port = config.port
   const host = config.host
@@ -65,6 +115,26 @@ export async function startRcsServer(opts: RcsServerOptions): Promise<void> {
   // Register all routes with Node.js serveStatic and upgradeWebSocket
   registerRoutes(app, serveStatic as any, upgradeWebSocket)
 
+  // Single-user mode: bootstrap the sole admin account (admin/admin123 on
+  // first deployment) BEFORE the server accepts requests, so every worker
+  // registration can resolve an owner and no request ever races the setup.
+  let singleUserAdmin: Awaited<ReturnType<typeof ensureSingleUserAdmin>> = null
+  if (singleUser) {
+    try {
+      singleUserAdmin = await ensureSingleUserAdmin()
+    } catch (err) {
+      console.error('[RCS] Single-user admin bootstrap failed:', err)
+      throw err
+    }
+    if (!singleUserAdmin) {
+      throw new Error(
+        '[RCS] Single-user mode requires an empty or admin-bearing users ' +
+          'table, but the existing DB has neither. Run `slz rcs` (full mode) ' +
+          'or point RCS_DB_PATH at a fresh database.',
+      )
+    }
+  }
+
   // Start HTTP server
   const server = serve({
     fetch: app.fetch,
@@ -88,11 +158,39 @@ export async function startRcsServer(opts: RcsServerOptions): Promise<void> {
   const webUiHost = host === '0.0.0.0' || host === '::' ? 'localhost' : host
   console.log(`[RCS] Web UI: http://${webUiHost}:${port}/code/`)
 
+  if (singleUser) {
+    console.log('[RCS] Single-user mode (slz rcs one):')
+    if (singleUserAdmin?.created) {
+      console.log(
+        `[RCS]   admin account initialized — username: ${SINGLE_USER_USERNAME} password: ${SINGLE_USER_DEFAULT_PASSWORD}`,
+      )
+      console.log(
+        '[RCS]   (local convenience default — change it after first login)',
+      )
+    } else {
+      console.log(
+        `[RCS]   using existing account: ${singleUserAdmin?.username ?? SINGLE_USER_USERNAME}`,
+      )
+    }
+    console.log('[RCS]   registration disabled — this is the only account')
+    console.log(
+      '[RCS]   workers bind zero-config and are owned by this account (no claim)',
+    )
+  }
+
   const workerBaseUrl = config.baseUrl || `http://${webUiHost}:${port}`
   console.log('[RCS] Worker connect:')
-  console.log(`[RCS]   export SALUZI_BRIDGE_BASE_URL=${workerBaseUrl}`)
-  console.log('[RCS]   export SALUZI_BRIDGE_OAUTH_TOKEN=<your-api-key>')
-  console.log('[RCS]   slz')
+  console.log(
+    '[RCS]   same host: zero config — workers default to http://localhost:3000 + sk-slz',
+  )
+  if (!singleUser) {
+    console.log(
+      `[RCS]   remote host: export SALUZI_BRIDGE_BASE_URL=${workerBaseUrl}`,
+    )
+    console.log(
+      '[RCS]                export SALUZI_BRIDGE_OAUTH_TOKEN=<your-api-key>',
+    )
+  }
 
   // Graceful shutdown
   function gracefulShutdown(signal: string) {

package/packages/remote-control-server/src/routes/v1/environments.ts

@@ -1,5 +1,6 @@
 import { Hono } from 'hono'
 import { randomUUID } from 'node:crypto'
+import { config } from '../../config'
 import {
   registerEnvironment,
   deregisterEnvironment,
@@ -14,6 +15,7 @@ import {
 } from '../../auth/bridge-auth'
 import { getDb } from '../../db/sqlite'
 import { isSessionClosedStatus } from '../../services/session'
+import { getSingleUserAdminUuid } from '../../services/single-user'
 import {
   storeBindEnvSessionsToTeam,
   storeGetEnvironment,
@@ -216,6 +218,15 @@ app.post('/bridge', acceptCliHeaders, bridgeAuth, async c => {
     }
   }
 
+  // Single-user mode (`slz rcs one`): every worker belongs to the sole
+  // admin account. Workers register with just the API key (no X-User-Id,
+  // no X-Username) — instead of falling into the claim flow below, the
+  // env is owned by the single admin immediately. Local convenience:
+  // the server binds 127.0.0.1, so the API key is the only credential.
+  if (config.singleUser && !ownerUserId && !teamId) {
+    ownerUserId = getSingleUserAdminUuid(db)
+  }
+
   // If neither X-User-Id nor the resolved userId yields an owner (or the
   // value is unresolvable), and X-Team-Id is also absent, the env is
   // "unowned" — a claim_token is generated and returned so the worker can

package/packages/remote-control-server/src/routes/web/auth-routes.ts

@@ -379,12 +379,18 @@ app.post('/logout', async c => {
 
 // GET /register-status — Whether self-registration is open
 app.get('/register-status', c => {
-  return c.json({ allowed: config.allowRegistration })
+  return c.json({ allowed: config.allowRegistration && !config.singleUser })
 })
 
 // POST /register — Self-register a new member account (no team association).
 // Only available when RCS_ALLOW_REGISTRATION !== 'false'.
 app.post('/register', async c => {
+  if (config.singleUser) {
+    return c.json(
+      { error: 'Registration is disabled in single-user mode' },
+      403,
+    )
+  }
   if (!config.allowRegistration) {
     return c.json({ error: 'Registration is disabled' }, 403)
   }
@@ -443,6 +449,15 @@ app.post('/register', async c => {
 
 // POST /join — Join via invitation token
 app.post('/join', async c => {
+  // Single-user mode: exactly one account exists, by design. New accounts
+  // would need an owner model the mode doesn't have — run full mode instead.
+  if (config.singleUser) {
+    return c.json(
+      { error: 'Invitations are disabled in single-user mode' },
+      403,
+    )
+  }
+
   let body: Record<string, unknown>
   try {
     body = await c.req.json()
@@ -605,10 +620,13 @@ app.get('/setup-status', c => {
     const count = db.query('SELECT COUNT(*) as count FROM users').get() as {
       count: number
     }
-    return c.json({ needsSetup: count.count === 0 })
+    return c.json({
+      needsSetup: count.count === 0,
+      singleUser: config.singleUser,
+    })
   } catch (err) {
     console.warn('[/setup-status] DB check failed:', err)
-    return c.json({ needsSetup: true })
+    return c.json({ needsSetup: true, singleUser: config.singleUser })
   }
 })
 

package/packages/remote-control-server/src/services/single-user.ts

@@ -0,0 +1,123 @@
+import { randomUUID } from 'node:crypto'
+import type { Database } from 'bun:sqlite'
+import { getDb } from '../db/sqlite'
+import { hashPasswordAsync } from '../auth/password'
+
+/**
+ * Single-user mode (`slz rcs one`) — the server runs with exactly one
+ * admin account, auto-created on first deployment. Every worker that
+ * binds is owned by this account (no X-User-Id, no claim flow), and
+ * self-registration / invitation joins are disabled (see auth-routes).
+ * Intended for local deployments (host binds 127.0.0.1) where multi-user
+ * auth is ceremony, not protection.
+ */
+export const SINGLE_USER_USERNAME = 'admin'
+export const SINGLE_USER_DEFAULT_PASSWORD = 'admin123'
+
+interface UserRow {
+  id: string
+  username: string
+  role: string
+}
+
+export interface SingleUserAdmin {
+  userId: string
+  username: string
+  /** True when this call created the account (first deployment). */
+  created: boolean
+}
+
+/**
+ * Idempotent bootstrap of the single-user admin account.
+ *
+ * Resolution order:
+ * 1. An existing user named `admin` — reuse it (previously initialized
+ *    single-user DB, or a full-mode DB where someone already chose that
+ *    name).
+ * 2. Any existing admin — reuse the first one (full-mode DB set up via
+ *    /setup: that admin IS the single user; never mint a second account).
+ * 3. Empty users table — create `admin` / `admin123` with role=admin.
+ *
+ * Returns null only when the users table has rows but none is an admin
+ * and none is named `admin` (a corrupted/mixed DB) — the caller decides
+ * whether that is fatal.
+ */
+export async function ensureSingleUserAdmin(
+  db?: Database,
+): Promise<SingleUserAdmin | null> {
+  const database = db ?? getDb()
+
+  const byName = database
+    .query('SELECT id, username, role FROM users WHERE username = $u LIMIT 1')
+    .get({ $u: SINGLE_USER_USERNAME }) as UserRow | null
+  if (byName) {
+    return { userId: byName.id, username: byName.username, created: false }
+  }
+
+  const anyAdmin = database
+    .query(
+      'SELECT id, username, role FROM users WHERE role = $r ORDER BY created_at LIMIT 1',
+    )
+    .get({ $r: 'admin' }) as UserRow | null
+  if (anyAdmin) {
+    return { userId: anyAdmin.id, username: anyAdmin.username, created: false }
+  }
+
+  const count = database.query('SELECT COUNT(*) as count FROM users').get() as {
+    count: number
+  }
+  if (count.count > 0) {
+    // Users exist but no admin and no `admin` — cannot pick a single user
+    // without silently granting it admin rights. Let the caller surface it.
+    return null
+  }
+
+  const userId = `usr_${randomUUID().replace(/-/g, '')}`
+  const passwordHash = await hashPasswordAsync(SINGLE_USER_DEFAULT_PASSWORD)
+  const now = new Date().toISOString()
+  database
+    .query(
+      `INSERT OR IGNORE INTO users (id, username, password_hash, role, created_at)
+       VALUES ($id, $username, $passwordHash, 'admin', $now)`,
+    )
+    .run({
+      $id: userId,
+      $username: SINGLE_USER_USERNAME,
+      $passwordHash: passwordHash,
+      $now: now,
+    })
+
+  const inserted = database
+    .query('SELECT id, username, role FROM users WHERE username = $u LIMIT 1')
+    .get({ $u: SINGLE_USER_USERNAME }) as UserRow | null
+  if (!inserted) {
+    // INSERT OR IGNORE lost a race (concurrent bootstrap) — resolve the winner.
+    return ensureSingleUserAdmin(database)
+  }
+  return { userId: inserted.id, username: inserted.username, created: true }
+}
+
+/**
+ * Resolve the single-user admin's users.id for worker auto-ownership.
+ *
+ * Sync and cheap — called on every unowned worker registration in
+ * single-user mode. Returns null when no admin exists yet (bootstrap not
+ * run / DB error) — the caller falls back to the regular claim flow.
+ */
+export function getSingleUserAdminUuid(db?: Database): string | null {
+  try {
+    const database = db ?? getDb()
+    const row = database
+      .query(
+        `SELECT id FROM users
+         WHERE username = $u OR role = $r
+         ORDER BY CASE WHEN username = $u THEN 0 ELSE 1 END, created_at
+         LIMIT 1`,
+      )
+      .get({ $u: SINGLE_USER_USERNAME, $r: 'admin' }) as { id: string } | null
+    return row?.id ?? null
+  } catch (err) {
+    console.error('[single-user] admin lookup failed:', err)
+    return null
+  }
+}

package/packages/remote-control-server/src/services/transport.ts

@@ -65,6 +65,10 @@ export function normalizePayload(
 
   if (typeof p.uuid === 'string' && p.uuid) normalized.uuid = p.uuid
   if (typeof p.isSynthetic === 'boolean') normalized.isSynthetic = p.isSynthetic
+  // SA-mode artifact escape hatch: the web gallery's AI dispatch tags its
+  // user event so the worker can grant itself the artifact tool before the
+  // turn starts. Purely a hint — ACP/legacy consumers may ignore it.
+  if (p.artifact_dispatch === true) normalized.artifact_dispatch = true
   if (typeof p.status === 'string') normalized.status = p.status
   if (typeof p.subtype === 'string') normalized.subtype = p.subtype
 

package/packages/remote-control-server/src/transport/client-payload.ts

@@ -26,6 +26,11 @@ export function toClientPayload(event: SessionEvent): Record<string, unknown> {
       uuid: messageUuid,
       session_id: event.sessionId,
       ...(payload?.isSynthetic === true ? { isSynthetic: true } : {}),
+      // SA-mode artifact escape hatch marker (web gallery AI dispatch) —
+      // read by bridge workers to grant the artifact tool pre-turn.
+      ...(payload?.artifact_dispatch === true
+        ? { artifact_dispatch: true }
+        : {}),
       message: {
         role: 'user',
         content,

package/packages/remote-control-server/web/dist/assets/{AdminPanel-BkmXNunm.js → AdminPanel-Dw_WcoUm.js}

@@ -1 +1 @@
-import{e as d,j as e}from"./vendor-DE_-CLIE.js";import{at as c,au as o,Q as m,ao as s,ag as l,x as u}from"./main-DfNbuMTS.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j(){c();const[a,i]=d.useState([]),{myTeams:r,isLoading:x}=o(),n=d.useCallback(async()=>{try{const t=await m();i(t||[])}catch(t){console.error("Admin: failed to load sessions",t)}},[]);return d.useEffect(()=>{n()},[n]),e.jsx("div",{className:"flex-1 overflow-y-auto",children:e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"mb-6 font-display text-2xl font-semibold text-text-primary",children:s("admin.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.teams")," (",r.length,")"]}),x?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("common.loading")}):r.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noTeams")}):e.jsx("div",{className:"space-y-2",children:r.map(t=>e.jsxs("a",{href:`/teams/${t.slug}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0",children:[e.jsx("span",{className:"font-medium text-text-primary",children:t.name}),e.jsx("span",{className:"ml-2 text-xs text-text-muted",children:t.slug})]}),e.jsx("span",{className:"text-xs text-text-muted",children:l(new Date(t.created_at).getTime()/1e3)})]},t.id))})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.sessions")," (",a.length,")"]}),a.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noSessions")}):e.jsx("div",{className:"space-y-2",children:a.map(t=>e.jsxs("a",{href:`/code/${t.id}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0 flex-1",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),e.jsx("span",{className:"rounded-full bg-surface-2 px-2 py-0.5 text-xs text-text-muted",children:t.source||"unknown"})]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"ml-4 flex items-center gap-3",children:[e.jsx(u,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:l(t.updated_at||t.created_at)})]})]},t.id))})]})]})})}export{j as AdminPanel};
+import{e as d,j as e}from"./vendor-DE_-CLIE.js";import{at as c,au as o,Q as m,ao as s,ag as l,x as u}from"./main-5C_gChTh.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function j(){c();const[a,i]=d.useState([]),{myTeams:r,isLoading:x}=o(),n=d.useCallback(async()=>{try{const t=await m();i(t||[])}catch(t){console.error("Admin: failed to load sessions",t)}},[]);return d.useEffect(()=>{n()},[n]),e.jsx("div",{className:"flex-1 overflow-y-auto",children:e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"mb-6 font-display text-2xl font-semibold text-text-primary",children:s("admin.title")}),e.jsxs("section",{className:"mb-10",children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.teams")," (",r.length,")"]}),x?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("common.loading")}):r.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noTeams")}):e.jsx("div",{className:"space-y-2",children:r.map(t=>e.jsxs("a",{href:`/teams/${t.slug}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0",children:[e.jsx("span",{className:"font-medium text-text-primary",children:t.name}),e.jsx("span",{className:"ml-2 text-xs text-text-muted",children:t.slug})]}),e.jsx("span",{className:"text-xs text-text-muted",children:l(new Date(t.created_at).getTime()/1e3)})]},t.id))})]}),e.jsxs("section",{children:[e.jsxs("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:[s("admin.sessions")," (",a.length,")"]}),a.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-4 text-center text-text-muted",children:s("admin.noSessions")}):e.jsx("div",{className:"space-y-2",children:a.map(t=>e.jsxs("a",{href:`/code/${t.id}`,className:"flex items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 no-underline transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("div",{className:"min-w-0 flex-1",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),e.jsx("span",{className:"rounded-full bg-surface-2 px-2 py-0.5 text-xs text-text-muted",children:t.source||"unknown"})]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"ml-4 flex items-center gap-3",children:[e.jsx(u,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:l(t.updated_at||t.created_at)})]})]},t.id))})]})]})})}export{j as AdminPanel};

package/packages/remote-control-server/web/dist/assets/ArtifactView-1QwTt1_U.js

@@ -0,0 +1,6 @@
+import{e as a,j as t}from"./vendor-DE_-CLIE.js";import{ad as q,at as A,V as j,ao as r,K as M,ac as U,P as F,z as O}from"./main-5C_gChTh.js";import{S as R,E as K,C as G}from"./ArtifactsGallery-BaqQmrpp.js";import{C as P}from"./copy-CIv8ifYN.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";import"./dialog-D__YHb1u.js";/**
+ * @license lucide-react v0.555.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */const V=[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]],z=q("refresh-cw",V);let m=null;function H(n,l,e=0){y();const o=`/web/sessions/${n}/events`,c=new EventSource(o,{withCredentials:!0});m=c;let u=e;c.addEventListener("message",p=>{try{const d=JSON.parse(p.data);if(d.seqNum!==void 0&&d.seqNum<=u)return;d.seqNum!==void 0&&(u=d.seqNum),l(d)}catch{}}),c.addEventListener("error",()=>{console.warn("[SSE] error, readyState:",c.readyState),c.readyState===EventSource.CLOSED&&(c.close(),y())})}function y(){m&&(m.close(),m=null)}function J(n,l){const e=a.useRef(l);e.current=l;const o=a.useCallback(c=>{e.current(c)},[]);a.useEffect(()=>{if(n)return H(n,o),()=>{y()}},[n,o])}function ee({artifactId:n,onBack:l}){A();const[e,o]=a.useState(null),[c,u]=a.useState(""),[p,d]=a.useState(!1),[S,f]=a.useState(0),[w,h]=a.useState(!1),[g,C]=a.useState(null),[k,E]=a.useState("template"),[x,b]=a.useState(!1);a.useEffect(()=>{let s=!1;return j(n).then(i=>{s||o(i)}).catch(i=>{s||u(i instanceof Error?i.message:r("artifacts.viewNotFound"))}),()=>{s=!0}},[n]);const v=a.useCallback(()=>{j(n).then(s=>o(s)).catch(()=>{})},[n]),_=a.useCallback(s=>{var i;s.type==="artifact_updated"&&((i=s.payload)!=null&&i.id&&s.payload.id!==n||(v(),f(D=>D+1),b(!0)))},[n,v]);J((e==null?void 0:e.session_id)??null,_),a.useEffect(()=>{if(!x)return;const s=setTimeout(()=>b(!1),2500);return()=>clearTimeout(s)},[x]);const N=a.useCallback(s=>{e&&(C(e),E(s),h(!0))},[e]),$=a.useCallback(s=>{h(!1),o(i=>i?{...i,...s}:s),f(i=>i+1)},[]),L=a.useCallback(async()=>{if(window.confirm(r("artifacts.delete")+" — "+n.slice(0,8)+"…?"))try{await M(n),l()}catch(s){alert(s instanceof Error?s.message:r("artifacts.deleteFailed"))}},[n,l]),T=a.useCallback(async()=>{if(!e)return;await U(`${window.location.origin}${e.url}`)&&(d(!0),setTimeout(()=>d(!1),1500))},[e]);return c?t.jsx("div",{className:"flex flex-1 items-center justify-center",children:t.jsxs("div",{className:"text-center",children:[t.jsx("p",{className:"text-status-error",children:r("artifacts.viewNotFound")}),t.jsx("p",{className:"mt-1 text-xs text-text-muted",children:c}),t.jsx("button",{type:"button",onClick:l,className:"mt-4 rounded-md border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2",children:r("artifacts.backToGallery")})]})}):e?t.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[t.jsxs("div",{className:"flex flex-wrap items-center gap-2 border-b border-border bg-surface-1 px-4 py-2.5",children:[t.jsx("button",{type:"button",onClick:l,className:"text-sm text-text-muted hover:text-text-primary",children:r("artifacts.backToGallery")}),t.jsx("span",{className:"text-text-muted/40",children:"/"}),t.jsx("span",{className:"truncate font-medium text-text-primary",children:e.title||e.id.slice(0,12)}),t.jsx("span",{className:`rounded-full px-2 py-0.5 text-[11px] transition-colors ${x?"bg-status-active/15 text-status-active":"bg-surface-3 text-text-muted"}`,title:x?r("artifacts.view.liveUpdated"):void 0,children:x?`↻ v${e.version}`:`v${e.version}`}),e.session_id&&t.jsxs("a",{href:`/code/${e.session_id}`,className:"truncate font-mono text-[11px] text-text-muted hover:text-accent",title:e.session_id,children:[r("artifacts.session"),": ",e.session_id.slice(0,14),"…"]}),e.expires_at&&t.jsxs("span",{className:"text-[11px] text-text-muted",title:e.expires_at,children:[r("artifacts.expires"),": ",new Date(e.expires_at).toLocaleDateString()]}),t.jsxs("div",{className:"ml-auto flex items-center gap-1",children:[t.jsx("button",{type:"button",onClick:()=>f(s=>s+1),className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-surface-2 hover:text-text-primary",title:r("common.loading"),children:t.jsx(z,{className:"h-3.5 w-3.5"})}),t.jsx("button",{type:"button",onClick:()=>N("ai"),className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-surface-2 hover:text-text-primary",title:r("artifacts.aiUpdate"),children:t.jsx(R,{className:"h-3.5 w-3.5"})}),e.can_manage&&t.jsx("button",{type:"button",onClick:()=>N("template"),className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-surface-2 hover:text-text-primary",title:r("artifacts.edit"),children:t.jsx(F,{className:"h-3.5 w-3.5"})}),t.jsxs("button",{type:"button",onClick:T,className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-surface-2 hover:text-text-primary",title:`${r("artifacts.copyLink")} · ${r("artifacts.linkNotice")}`,children:[t.jsx(P,{className:"h-3.5 w-3.5"}),p&&t.jsx("span",{className:"text-status-active",children:r("artifacts.copied")})]}),t.jsx("a",{href:e.url,target:"_blank",rel:"noreferrer",className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-surface-2 hover:text-text-primary",title:r("artifacts.openInNewTab"),children:t.jsx(K,{className:"h-3.5 w-3.5"})}),t.jsx("button",{type:"button",onClick:L,className:"inline-flex items-center gap-1 rounded-md px-2 py-1 text-xs text-text-secondary hover:bg-status-error/10 hover:text-status-error",title:r("artifacts.delete"),children:t.jsx(O,{className:"h-3.5 w-3.5"})})]})]}),t.jsx("iframe",{src:`${e.url}${e.url.includes("?")?"&":"?"}_=${Date.now()}`,title:e.title||e.id,className:"min-h-0 w-full flex-1 border-0 bg-white",sandbox:"allow-scripts allow-popups allow-forms"},S),t.jsx(G,{open:w,onClose:()=>h(!1),onCreated:$,editArtifact:g,initialMode:k})]}):t.jsx("div",{className:"flex flex-1 items-center justify-center text-text-muted",children:r("common.loading")})}export{ee as ArtifactView};