@saluzi/saluzi-edu 0.2.9 → 0.2.11

package/packages/remote-control-server/src/services/environment.ts

@@ -27,19 +27,17 @@ function toResponse(row: EnvironmentRecord): EnvironmentResponse {
     worker_type: row.workerType,
     channel_group_id: row.bridgeId,
     capabilities: row.capabilities,
-    has_worker_token: row.workerTokenHash !== null,
   }
 }
 
 export function registerEnvironment(
   req: RegisterEnvironmentRequest & {
-    metadata?: { worker_type?: string; worker_token_hash?: string }
+    metadata?: { worker_type?: string }
     username?: string
   },
 ) {
   const secret = config.apiKeys[0] || ''
   const workerType = req.worker_type || req.metadata?.worker_type
-  const workerTokenHash = req.metadata?.worker_token_hash ?? null
 
   // ACP agents with a bridge_id (channel group): reuse the most recent
   // offline env in the same group instead of creating a new one on every
@@ -92,7 +90,6 @@ export function registerEnvironment(
     gitRepoUrl: req.git_repo_url,
     maxSessions: req.max_sessions,
     workerType,
-    workerTokenHash,
     bridgeId: req.bridge_id,
     username: req.username,
     capabilities: req.capabilities,

package/packages/remote-control-server/src/services/session-visibility.ts

@@ -0,0 +1,79 @@
+import type { Database } from 'bun:sqlite'
+
+/**
+ * List all sessions visible to a given user.
+ *
+ * Visibility rules:
+ * 1. System admin (users.role = 'admin') → sees everything including orphans
+ * 2. Sessions owned by the user (owner_type='user', owner_id=userId)
+ * 3. Sessions owned by a team the user belongs to, with visibility='team' or 'public'
+ * 4. Sessions explicitly shared with the user via session_shares
+ * 5. Sessions explicitly shared with a team the user belongs to via session_shares
+ * 6. Sessions with visibility='public' (anyone can see)
+ * 7. Orphan sessions (no owner) → only admin visible
+ */
+export function storeListSessionsVisibleToUser(
+  userId: string,
+  db: Database,
+): Array<Record<string, unknown>> {
+  // Check if user is a system admin
+  const userRow = db
+    .query('SELECT role FROM users WHERE id = $userId')
+    .get({ $userId: userId }) as { role: string } | null
+
+  const isSystemAdmin = userRow?.role === 'admin'
+
+  if (isSystemAdmin) {
+    // Admin sees all sessions
+    return db.query('SELECT * FROM sessions').all() as Array<
+      Record<string, unknown>
+    >
+  }
+
+  // Build a query that unions all visibility rules
+  // Note: expires_at is stored as ISO 8601 (e.g. "2026-07-21T12:00:00.000Z"),
+  // so we use strftime to produce a comparable ISO string for "now".
+  const sql = `
+    SELECT DISTINCT s.* FROM sessions s
+    WHERE
+      -- Rule 2: owned by user
+      EXISTS (
+        SELECT 1 FROM session_owners so
+        WHERE so.session_id = s.id
+          AND so.owner_type = 'user'
+          AND so.owner_id = $userId
+      )
+      -- Rule 3: owned by user's team + visibility team/public
+      OR (
+        s.visibility IN ('team', 'public')
+        AND EXISTS (
+          SELECT 1 FROM session_owners so
+          JOIN team_members tm ON tm.team_id = so.owner_id
+          WHERE so.session_id = s.id
+            AND so.owner_type = 'team'
+            AND tm.user_id = $userId
+        )
+      )
+      -- Rule 4: explicitly shared with user (non-expired)
+      OR EXISTS (
+        SELECT 1 FROM session_shares ss
+        WHERE ss.session_id = s.id
+          AND ss.granted_to_user = $userId
+          AND (ss.expires_at IS NULL OR ss.expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+      )
+      -- Rule 5: shared with a team the user belongs to (non-expired)
+      OR EXISTS (
+        SELECT 1 FROM session_shares ss
+        JOIN team_members tm ON tm.team_id = ss.granted_to_team
+        WHERE ss.session_id = s.id
+          AND tm.user_id = $userId
+          AND (ss.expires_at IS NULL OR ss.expires_at > strftime('%Y-%m-%dT%H:%M:%S.000Z', 'now'))
+      )
+      -- Rule 6: public visibility
+      OR s.visibility = 'public'
+  `
+
+  return db.query(sql).all({ $userId: userId }) as Array<
+    Record<string, unknown>
+  >
+}

package/packages/remote-control-server/src/services/session.ts

@@ -3,8 +3,6 @@ import {
   storeGetSession,
   storeGetEnvironment,
   storeIsSessionOwner,
-  storeGetSessionOwners,
-  storeBindSession,
   storeUpdateSession,
   storeListSessions,
   storeListSessionsByUsername,
@@ -141,16 +139,6 @@ export function resolveOwnedWebSessionId(
     return compatibleCodeSessionId
   }
 
-  // Auto-bind: if the session exists but has no owner, claim it for the requesting user
-  const existingId = resolveExistingSessionId(sessionId)
-  if (existingId) {
-    const owners = storeGetSessionOwners(existingId)
-    if (!owners || owners.size === 0) {
-      storeBindSession(existingId, uuid)
-      return existingId
-    }
-  }
-
   return null
 }
 
@@ -245,7 +233,6 @@ function toSummaryResponse(row: {
       environment = {
         id: env.id,
         machine_name: env.machineName,
-        has_worker_token: env.workerTokenHash !== null,
         worker_type: env.workerType,
       }
     }

package/packages/remote-control-server/src/store.ts

@@ -1,4 +1,5 @@
-import { randomUUID } from 'node:crypto'
+import { randomUUID, createHash } from 'node:crypto'
+import { getDb } from './db/sqlite'
 
 // ---------- Types ----------
 
@@ -16,11 +17,6 @@ export interface EnvironmentRecord {
   gitRepoUrl: string | null
   maxSessions: number
   workerType: string
-  // SHA256 hash of the per-environment worker access token (RCS_WORKER_TOKENS).
-  // Web UI users must enter the matching plaintext token to connect to this
-  // environment's sessions. Null when the worker didn't register a token
-  // (legacy/claude.ai path) — in that case sessions are open access.
-  workerTokenHash: string | null
   bridgeId: string | null
   capabilities: Record<string, unknown> | null
   status: string
@@ -76,8 +72,7 @@ const sessions = new Map<string, SessionRecord>()
 const workItems = new Map<string, WorkItemRecord>()
 const sessionWorkers = new Map<string, SessionWorkerRecord>()
 
-// UUID → session ownership: sessionId → Set of UUIDs
-const sessionOwners = new Map<string, Set<string>>()
+// Session ownership tracked in SQLite session_owners table
 
 // ---------- User ----------
 
@@ -117,7 +112,6 @@ export function storeCreateEnvironment(req: {
   gitRepoUrl?: string
   maxSessions?: number
   workerType?: string
-  workerTokenHash?: string | null
   bridgeId?: string
   username?: string
   capabilities?: Record<string, unknown>
@@ -133,7 +127,6 @@ export function storeCreateEnvironment(req: {
     gitRepoUrl: req.gitRepoUrl ?? null,
     maxSessions: req.maxSessions ?? 1,
     workerType: req.workerType ?? 'claude_code',
-    workerTokenHash: req.workerTokenHash ?? null,
     bridgeId: req.bridgeId ?? null,
     capabilities: req.capabilities ?? null,
     status: 'active',
@@ -143,6 +136,25 @@ export function storeCreateEnvironment(req: {
     updatedAt: now,
   }
   environments.set(id, record)
+  try {
+    const db = getDb()
+    const secretHash = createHash('sha256').update(record.secret).digest('hex')
+    db.query(
+      `INSERT OR REPLACE INTO environments (id, secret_hash, machine_name, worker_type, status, last_poll_at, created_at)
+       VALUES ($id, $sh, $mn, $wt, $st, $lp, $ca)`,
+    ).run({
+      $id: id,
+      $sh: secretHash,
+      $mn: record.machineName,
+      $wt: record.workerType,
+      $st: record.status,
+      $lp: record.lastPollAt?.toISOString() ?? null,
+      $ca: record.createdAt.toISOString(),
+    })
+  } catch (err) {
+    console.error('[store] DB write failed in storeCreateEnvironment:', err)
+    throw err
+  }
   return record
 }
 
@@ -208,6 +220,26 @@ export function storeCreateSession(req: {
     updatedAt: now,
   }
   sessions.set(id, record)
+  try {
+    const db = getDb()
+    db.query(
+      `INSERT OR REPLACE INTO sessions (id, environment_id, title, status, source, visibility, permission_mode, created_at, updated_at)
+       VALUES ($id, $eid, $title, $status, $source, $vis, $pm, $ca, $ua)`,
+    ).run({
+      $id: id,
+      $eid: record.environmentId,
+      $title: record.title,
+      $status: record.status,
+      $source: record.source,
+      $vis: 'private',
+      $pm: record.permissionMode,
+      $ca: record.createdAt.toISOString(),
+      $ua: record.updatedAt.toISOString(),
+    })
+  } catch (err) {
+    console.error('[store] DB write failed in storeCreateSession:', err)
+    throw err
+  }
   return record
 }
 
@@ -224,6 +256,19 @@ export function storeUpdateSession(
   const rec = sessions.get(id)
   if (!rec) return false
   Object.assign(rec, patch, { updatedAt: new Date() })
+  try {
+    const db = getDb()
+    db.query(
+      `UPDATE sessions SET title = COALESCE($title, title), status = COALESCE($status, status), updated_at = $ua WHERE id = $id`,
+    ).run({
+      $id: id,
+      $title: patch.title ?? null,
+      $status: patch.status ?? null,
+      $ua: rec.updatedAt.toISOString(),
+    })
+  } catch (err) {
+    console.error('[store] DB write failed in storeUpdateSession:', err)
+  }
   return true
 }
 
@@ -241,7 +286,14 @@ export function storeListSessionsByEnvironment(envId: string): SessionRecord[] {
 
 export function storeDeleteSession(id: string): boolean {
   sessionWorkers.delete(id)
-  return sessions.delete(id)
+  const deleted = sessions.delete(id)
+  try {
+    const db = getDb()
+    db.query('DELETE FROM sessions WHERE id = $id').run({ $id: id })
+  } catch (err) {
+    console.error('[store] DB write failed in storeDeleteSession:', err)
+  }
+  return deleted
 }
 
 // ---------- Session Worker ----------
@@ -300,72 +352,99 @@ export function storeUpsertSessionWorker(
 
 // ---------- Work Items ----------
 
-// ---------- Session Ownership (UUID-based) ----------
+// ---------- Session Ownership (SQLite-backed) ----------
 
-export function storeBindSession(sessionId: string, uuid: string): void {
-  let owners = sessionOwners.get(sessionId)
-  if (!owners) {
-    owners = new Set()
-    sessionOwners.set(sessionId, owners)
+export function storeBindSession(
+  sessionId: string,
+  ownerId: string,
+  ownerType: 'user' | 'team' = 'user',
+): void {
+  try {
+    const db = getDb()
+    db.query(
+      `INSERT OR IGNORE INTO session_owners (session_id, owner_type, owner_id)
+       VALUES ($sessionId, $ownerType, $ownerId)`,
+    ).run({
+      $sessionId: sessionId,
+      $ownerType: ownerType,
+      $ownerId: ownerId,
+    })
+  } catch (err) {
+    console.error('[store] DB write failed in storeBindSession:', err)
+    throw err
   }
-  owners.add(uuid)
 }
 
 export function storeIsSessionOwner(sessionId: string, uuid: string): boolean {
-  const owners = sessionOwners.get(sessionId)
-  return owners ? owners.has(uuid) : false
+  try {
+    const db = getDb()
+    const row = db
+      .query(
+        `SELECT 1 FROM session_owners
+         WHERE session_id = $sessionId AND owner_id = $ownerId
+         LIMIT 1`,
+      )
+      .get({ $sessionId: sessionId, $ownerId: uuid })
+    return !!row
+  } catch (err) {
+    console.error('[store] DB read failed in storeIsSessionOwner:', err)
+    return false
+  }
 }
 
 export function storeGetSessionOwners(
   sessionId: string,
 ): Set<string> | undefined {
-  return sessionOwners.get(sessionId)
+  try {
+    const db = getDb()
+    const rows = db
+      .query(
+        `SELECT owner_id FROM session_owners WHERE session_id = $sessionId`,
+      )
+      .all({ $sessionId: sessionId }) as Array<{ owner_id: string }>
+    if (rows.length === 0) return undefined
+    return new Set(rows.map(r => r.owner_id))
+  } catch (err) {
+    console.error('[store] DB read failed in storeGetSessionOwners:', err)
+    return undefined
+  }
 }
 
 export function storeListSessionsByOwnerUuid(uuid: string): SessionRecord[] {
   const result: SessionRecord[] = []
   const resultIds = new Set<string>()
 
-  // Collect sessions already owned by this UUID
-  for (const [sessionId, owners] of sessionOwners) {
-    if (owners.has(uuid)) {
-      const session = sessions.get(sessionId)
+  // Collect sessions owned by this user from SQLite
+  try {
+    const db = getDb()
+    const ownedRows = db
+      .query(`SELECT session_id FROM session_owners WHERE owner_id = $ownerId`)
+      .all({ $ownerId: uuid }) as Array<{ session_id: string }>
+    for (const row of ownedRows) {
+      const session = sessions.get(row.session_id)
       if (session) {
         result.push(session)
-        resultIds.add(sessionId)
+        resultIds.add(row.session_id)
       }
     }
-  }
 
-  // ACP sessions are shared across all users — the agent is a shared
-  // resource, not a per-user worker. Auto-created via REST registration
-  // (registerEnvironment ACP path), they must be visible to every web UI
-  // user regardless of UUID. The previous auto-bind-orphaned logic
-  // claimed the session for the FIRST user who listed, hiding it from
-  // every subsequent user (e.g. different browser, cleared localStorage,
-  // or a second teammate). This made the "session invisible" symptom
-  // appear to recur randomly depending on who accessed first.
-  for (const [sessionId, session] of sessions) {
-    if (resultIds.has(sessionId)) continue
-    if (session.source === 'acp') {
-      result.push(session)
-      resultIds.add(sessionId)
-    }
-  }
-
-  // Auto-bind orphaned non-ACP sessions (no owner — typically native RCS
-  // worker sessions created via REST without a user context)
-  for (const [sessionId, session] of sessions) {
-    if (resultIds.has(sessionId)) continue
-    if (session.source === 'acp') continue // already handled above
-    const owners = sessionOwners.get(sessionId)
-    // No owners map entry at all, or empty owners set
-    const isOrphaned = !owners || owners.size === 0
-    if (isOrphaned) {
-      storeBindSession(sessionId, uuid)
-      result.push(session)
-      resultIds.add(sessionId)
+    // Include public sessions
+    const publicRows = db
+      .query(`SELECT id FROM sessions WHERE visibility = 'public'`)
+      .all() as Array<{ id: string }>
+    for (const row of publicRows) {
+      if (resultIds.has(row.id)) continue
+      const session = sessions.get(row.id)
+      if (session) {
+        result.push(session)
+        resultIds.add(row.id)
+      }
     }
+  } catch (err) {
+    console.error(
+      '[store] DB read failed in storeListSessionsByOwnerUuid:',
+      err,
+    )
   }
 
   return result
@@ -488,5 +567,20 @@ export function storeReset() {
   sessions.clear()
   workItems.clear()
   sessionWorkers.clear()
-  sessionOwners.clear()
+  try {
+    const db = getDb()
+    // Delete in FK-safe order: child tables before parent tables
+    db.query('DELETE FROM session_tokens').run()
+    db.query('DELETE FROM session_owners').run()
+    db.query('DELETE FROM session_shares').run()
+    db.query('DELETE FROM team_members').run()
+    db.query('DELETE FROM team_environments').run()
+    db.query('DELETE FROM invitations').run()
+    db.query('DELETE FROM sessions').run()
+    db.query('DELETE FROM environments').run()
+    db.query('DELETE FROM teams').run()
+    db.query('DELETE FROM users').run()
+  } catch (err) {
+    console.error('[store] DB cleanup failed in storeReset:', err)
+  }
 }

package/packages/remote-control-server/src/types/api.ts

@@ -5,6 +5,8 @@ declare module 'hono' {
   interface ContextVariableMap {
     username?: string
     uuid?: string
+    userId?: string
+    isAdmin?: boolean
     jwtPayload?: { session_id: string; role: string; iat: number; exp: number }
   }
 }
@@ -95,7 +97,6 @@ export interface SessionWorkItemInfo {
 export interface SessionEnvironmentInfo {
   id: string
   machine_name: string | null
-  has_worker_token: boolean
   worker_type: string
 }
 
@@ -134,7 +135,6 @@ export interface EnvironmentResponse {
   worker_type?: string
   channel_group_id?: string | null
   capabilities?: Record<string, unknown> | null
-  has_worker_token?: boolean
 }
 
 export interface ServerInfoResponse {
@@ -146,11 +146,6 @@ export interface ServerInfoResponse {
   sessions_active: number
 }
 
-export interface TestWorkerTokenResponse {
-  valid: boolean
-  env_id: string
-}
-
 export interface SessionSummaryResponse {
   id: string
   title: string | null
@@ -161,7 +156,6 @@ export interface SessionSummaryResponse {
   environment: {
     id: string
     machine_name: string | null
-    has_worker_token: boolean
     worker_type: string
   } | null
   updated_at: number

package/packages/remote-control-server/web/dist/assets/Dashboard-BwotBWlJ.js

@@ -0,0 +1 @@
+import{j as e,e as l}from"./vendor-DE_-CLIE.js";import{h as y,E as N,m as v,o as w,p as k,n as C}from"./main-30YqUvTd.js";import{g as j,D as S,a as _,c as D,d as E,b as L}from"./workerType-OM09y7Lk.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function M({environments:o,onSelectEnvironment:c}){return!o||o.length===0?e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No active environments"}):e.jsx("div",{className:"space-y-2",children:o.map(r=>{const i=r.worker_type==="acp",d=j(r.worker_type),m=d.fullLabel,t=d.colorClass;return e.jsxs("button",{type:"button",onClick:()=>c==null?void 0:c(r),disabled:i,className:`flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors ${i?"cursor-default opacity-80":"hover:border-border-light cursor-pointer"}`,children:[e.jsx("div",{className:"flex items-center gap-3",children:e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"font-medium text-text-primary",children:r.machine_name||r.id}),e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${t}`,children:m})]}),e.jsx("div",{className:"text-sm text-text-muted",children:r.directory||""})]})}),e.jsxs("div",{className:"text-right",children:[e.jsx(y,{status:r.status}),e.jsx("div",{className:"mt-1 text-xs text-text-muted",children:r.branch||""})]})]},r.id)})})}function T({sessions:o,environments:c,onSelect:r,onDelete:i}){if(!o||o.length===0)return e.jsx("div",{className:"rounded-xl border border-border bg-surface-1 p-8 text-center text-text-muted",children:"No sessions"});const d=new Map;for(const t of c??[])t!=null&&t.id&&t.worker_type&&d.set(t.id,t.worker_type);const m=[...o].sort((t,n)=>(n.updated_at||0)-(t.updated_at||0));return e.jsx("div",{className:"space-y-2",children:m.map(t=>e.jsxs("div",{className:"group flex w-full items-center justify-between rounded-xl border border-border bg-surface-1 px-4 py-3 text-left transition-colors hover:border-border-light hover:bg-surface-2",children:[e.jsxs("button",{type:"button",onClick:()=>r(t.id),className:"min-w-0 flex-1 text-left",children:[e.jsxs("div",{className:"flex items-center gap-2",children:[e.jsx("span",{className:"truncate font-medium text-text-primary",children:t.title||t.id}),(()=>{var p;let n=t.source==="acp"?"acp":(p=t.environment)==null?void 0:p.worker_type;!n&&t.environment_id&&(n=d.get(t.environment_id));const u=j(n);return e.jsx("span",{className:`rounded-full px-2 py-0.5 text-xs font-medium ${u.colorClass}`,children:u.fullLabel})})()]}),e.jsx("div",{className:"truncate text-xs text-text-muted",children:t.id})]}),e.jsxs("div",{className:"flex items-center gap-3",children:[e.jsx(y,{status:t.status}),e.jsx("span",{className:"text-xs text-text-muted",children:N(t.created_at||t.updated_at)}),i&&e.jsx("button",{type:"button",onClick:n=>{n.stopPropagation(),i(t.id)},className:"rounded p-1 text-text-muted opacity-0 transition-all hover:text-status-error group-hover:opacity-100",title:"Delete session",children:e.jsx("svg",{className:"h-4 w-4",fill:"none",stroke:"currentColor",viewBox:"0 0 24 24",children:e.jsx("path",{strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M6 18L18 6M6 6l12 12"})})})]})]},t.id))})}function F({open:o,environments:c,onClose:r,onCreated:i}){const[d,m]=l.useState(""),[t,n]=l.useState(""),[u,p]=l.useState("same-dir"),[b,h]=l.useState(""),[a,x]=l.useState(!1);l.useEffect(()=>{o&&(m(""),n(""),p("same-dir"),h(""))},[o]);const f=async()=>{x(!0),h("");try{const s={};d.trim()&&(s.title=d.trim()),t&&(s.environment_id=t),s.spawn_mode=u;const g=await v(s);i(g)}catch(s){h(s instanceof Error?s.message:"Failed to create session")}finally{x(!1)}};return e.jsx(S,{open:o,onOpenChange:s=>{s||r()},children:e.jsxs(_,{className:"max-w-md rounded-2xl border-border bg-surface-1 p-6 shadow-2xl",children:[e.jsx(D,{children:e.jsx(E,{className:"font-display text-lg font-semibold text-text-primary",children:"New Session"})}),e.jsxs("div",{className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:"Title (optional)"}),e.jsx("input",{type:"text",value:d,onChange:s=>m(s.target.value),placeholder:"My session",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:"Environment"}),e.jsxs("select",{value:t,onChange:s=>n(s.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"",children:"-- None --"}),c.map(s=>{const g=j(s.worker_type).shortLabel;return e.jsxs("option",{value:s.id,children:[s.machine_name||s.id," (",s.branch||"no branch",") · ",g]},s.id)})]})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm text-text-secondary",children:"Workspace Mode"}),e.jsxs("select",{value:u,onChange:s=>p(s.target.value),className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary focus:border-brand focus:outline-none",children:[e.jsx("option",{value:"same-dir",children:"工作区 (same-dir) — sessions share the directory"}),e.jsx("option",{value:"worktree",children:"工作树 (worktree) — each session gets an isolated git worktree"})]})]}),b&&e.jsx("div",{className:"text-sm text-status-error",children:b})]}),e.jsxs(L,{children:[e.jsx("button",{onClick:r,className:"rounded-lg border border-border px-4 py-2 text-sm text-text-secondary hover:bg-surface-2 transition-colors",children:"Cancel"}),e.jsx("button",{onClick:f,disabled:a,className:"rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white hover:bg-brand-light disabled:opacity-50 transition-colors",children:a?"Creating...":"Create"})]})]})})}function A({onNavigateSession:o}){const[c,r]=l.useState([]),[i,d]=l.useState([]),[m,t]=l.useState(!1),n=l.useCallback(async()=>{try{const[a,x]=await Promise.all([w(),k()]);r(a||[]),d(x||[])}catch(a){console.error("Dashboard render error:",a)}},[]);l.useEffect(()=>{n();const a=setInterval(n,1e4);return()=>clearInterval(a)},[n]);const u=a=>{t(!1),o(a.id)},p=l.useCallback(a=>{},[]),b=l.useCallback(a=>{o(a)},[o]),h=l.useCallback(async a=>{if(window.confirm(`删除会话 ${a}？此操作不可恢复。`))try{await C(a),r(x=>x.filter(f=>f.id!==a))}catch(x){alert(x instanceof Error?x.message:"Failed to delete session")}},[]);return e.jsxs("div",{className:"mx-auto max-w-5xl px-4 py-8",children:[e.jsx("h1",{className:"sr-only",children:"Dashboard"}),e.jsxs("section",{className:"mb-10",children:[e.jsx("h2",{className:"mb-4 font-display text-lg font-semibold text-text-primary",children:"Environments"}),e.jsx(M,{environments:i,onSelectEnvironment:p})]}),e.jsxs("section",{children:[e.jsxs("div",{className:"mb-4 flex items-center justify-between",children:[e.jsx("h2",{className:"font-display text-lg font-semibold text-text-primary",children:"Sessions"}),e.jsx("button",{onClick:()=>t(!0),className:"rounded-lg bg-brand px-3 py-1.5 text-sm font-medium text-white hover:bg-brand-light transition-colors",children:"+ New Session"})]}),e.jsx(T,{sessions:c,environments:i,onSelect:b,onDelete:h})]}),e.jsx(F,{open:m,environments:i,onClose:()=>t(!1),onCreated:u})]})}export{A as Dashboard};

package/packages/remote-control-server/web/dist/assets/Join-4yrksbdX.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{M as v}from"./main-30YqUvTd.js";import{t}from"./i18n-Dbt-vEQ3.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function P({onSuccess:b,onInvalidInvite:l}){const{join:f}=v(),[u,h]=r.useState(""),[d,j]=r.useState(""),[o,w]=r.useState(""),[c,g]=r.useState(""),[m,n]=r.useState(""),[x,p]=r.useState(!1);r.useEffect(()=>{const a=new URLSearchParams(window.location.search).get("invite");a?h(a):l()},[l]);const y=async s=>{if(s.preventDefault(),n(""),o.length<8){n(t("auth.setup.passwordTooShort"));return}if(o!==c){n(t("auth.setup.passwordMismatch"));return}p(!0);try{await f(u,d,o),b()}catch(a){const i=a instanceof Error?a.message:"Join failed";if(i.includes("Invalid invitation")||i.includes("expired")||i.includes("already used")){l();return}n(i)}finally{p(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.join.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.join.welcome")}),e.jsx("p",{className:"mt-1 text-sm text-text-muted",children:t("auth.join.description")})]}),e.jsxs("form",{onSubmit:y,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.username")}),e.jsx("input",{type:"text",value:d,onChange:s=>j(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>w(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.join.confirmPassword")}),e.jsx("input",{type:"password",value:c,onChange:s=>g(s.target.value),required:!0,autoComplete:"new-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),m&&e.jsx("p",{className:"text-sm text-status-error",children:m}),e.jsx("button",{type:"submit",disabled:x||!u,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:x?t("common.loading"):t("auth.join.submit")})]})]})})}export{P as Join};

package/packages/remote-control-server/web/dist/assets/Login-Cxm_yEeE.js

@@ -0,0 +1 @@
+import{e as r,j as e}from"./vendor-DE_-CLIE.js";import{M as b}from"./main-30YqUvTd.js";import{t}from"./i18n-Dbt-vEQ3.js";import"./shiki-mEP5vQQu.js";import"./motion-BILbV7YQ.js";function w({onSuccess:d}){const{login:m}=b(),[a,c]=r.useState(""),[o,x]=r.useState(""),[l,n]=r.useState(""),[i,u]=r.useState(!1),p=async s=>{s.preventDefault(),n(""),u(!0);try{await m(a,o),d()}catch{n(t("auth.login.failed"))}finally{u(!1)}};return e.jsx("div",{className:"flex min-h-screen items-center justify-center bg-surface-0 px-4",children:e.jsxs("div",{className:"w-full max-w-sm space-y-6",children:[e.jsxs("div",{className:"text-center",children:[e.jsx("h1",{className:"font-display text-2xl font-semibold text-text-primary",children:t("auth.login.title")}),e.jsx("p",{className:"mt-2 text-sm text-text-muted",children:t("auth.login.description")})]}),e.jsxs("form",{onSubmit:p,className:"space-y-4",children:[e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.username")}),e.jsx("input",{type:"text",value:a,onChange:s=>c(s.target.value),required:!0,autoComplete:"username",autoFocus:!0,className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),e.jsxs("div",{children:[e.jsx("label",{className:"mb-1 block text-sm font-medium text-text-secondary",children:t("auth.login.password")}),e.jsx("input",{type:"password",value:o,onChange:s=>x(s.target.value),required:!0,autoComplete:"current-password",className:"w-full rounded-lg border border-border bg-surface-2 px-3 py-2 text-sm text-text-primary placeholder:text-text-muted focus:border-brand focus:outline-none"})]}),l&&e.jsx("p",{className:"text-sm text-status-error",children:l}),e.jsx("button",{type:"submit",disabled:i,className:"w-full rounded-lg bg-brand px-4 py-2 text-sm font-medium text-white transition-colors hover:bg-brand-light disabled:cursor-not-allowed disabled:opacity-50",children:i?t("common.loading"):t("auth.login.submit")})]})]})})}export{w as Login};