@samyx/preview-stacks-ui 0.19.0 → 0.20.0

package/dist/assets/NotifiersView-BQhuTkf8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NotifiersView-BQhuTkf8.js","sources":["../../src/views/NotifiersView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Notifiers — where events on this host get sent.\n *\n * THE FORM IS SERVER-DRIVEN. The event list and the per-type fields come from `/api/notifiers/meta`,\n * so adding a Slack or Discord type on the server puts it in this picker with its own form and no\n * change here. That is the composability seam reaching the UI; hard-coding the fields would have\n * quietly made the seam a lie.\n *\n * THE SIGNING SECRET IS SHOWN ONCE. Same discipline as a personal token and a registry credential:\n * there is no read path on the server, so this page cannot offer a reveal — it can only show the\n * value at the moment of creation and say plainly that this is the only time.\n */\nimport { computed, ref, watch } from 'vue';\nimport { api, problem } from '../api/client';\nimport type { DeliveryRow, NotifierMeta, NotifierRow } from '../api/types';\nimport { stamp } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SelectMenu from '../components/SelectMenu.vue';\n\nconst notifiers = ref<NotifierRow[]>([]);\nconst meta = ref<NotifierMeta | null>(null);\nconst loaded = ref(false);\nconst listError = ref('');\nconst unsupported = ref(false);\n\n/** The freshly-minted secret, held only until the operator dismisses it. */\nconst revealed = ref<{ name: string; secret: string } | null>(null);\n\nconst form = ref({ name: '', type: 'webhook', events: [] as string[], config: {} as Record<string, string> });\nconst saving = ref(false);\nconst formError = ref('');\n\nconst openDeliveries = ref<number | null>(null);\nconst deliveries = ref<DeliveryRow[]>([]);\n\n/** Server-driven, so a new notifier type appears here with no change to this file. */\nconst typeOptions = computed(() => (meta.value?.types ?? []).map((x) => ({ value: x.kind, label: x.label })));\n\nconst chosenType = computed(() => meta.value?.types.find((t) => t.kind === form.value.type) ?? null);\n\n/**\n * `config` is one bag shared by every type, so switching the picker leaves the previous type's\n * fields behind — fill a webhook URL, switch to Slack, and the POST carries a stray `url` alongside\n * `webhookUrl`. Nothing downstream rejects it: `config` is stored whole and each type validates only\n * its OWN fields, so the dead value is persisted forever and shows up in the detail view. Clearing on\n * change costs one line; unknown-key rejection on the server would cost a migration path for every\n * future type.\n */\nwatch(\n  () => form.value.type,\n  () => {\n    form.value.config = {};\n  },\n);\nconst canSave = computed(\n  () =>\n    !saving.value &&\n    !!form.value.name.trim() &&\n    form.value.events.length > 0 &&\n    (chosenType.value?.fields ?? []).every((f) => !f.required || !!form.value.config[f.key]?.trim()),\n);\n\nasync function load(): Promise<void> {\n  const [list, m] = await Promise.all([\n    api.get<{ notifiers: NotifierRow[] }>('/api/notifiers'),\n    api.get<NotifierMeta>('/api/notifiers/meta'),\n  ]);\n  loaded.value = true;\n  // A server built before this feature answers 404 — a capability difference, not an error.\n  if (list.status === 404 || m.status === 404) {\n    unsupported.value = true;\n    return;\n  }\n  if (!list.ok) {\n    listError.value = problem(list, 'load the notifiers');\n    return;\n  }\n  listError.value = '';\n  notifiers.value = list.body.notifiers ?? [];\n  if (m.ok) meta.value = m.body;\n}\n\nvoid load();\n\nfunction toggleEvent(name: string): void {\n  const at = form.value.events.indexOf(name);\n  if (at === -1) form.value.events.push(name);\n  else form.value.events.splice(at, 1);\n}\n\nasync function create(): Promise<void> {\n  saving.value = true;\n  formError.value = '';\n  const r = await api.post<{ notifier: NotifierRow; secret: string | null }>('/api/notifiers', {\n    name: form.value.name.trim(),\n    type: form.value.type,\n    events: form.value.events,\n    config: form.value.config,\n  });\n  saving.value = false;\n  if (!r.ok) {\n    formError.value = problem(r, 'register this notifier');\n    return;\n  }\n  // `null` for a type whose config already carries its credential — a Slack notifier must not be\n  // handed 48 hex characters and told its receiver needs them.\n  revealed.value = r.body.secret ? { name: r.body.notifier.name, secret: r.body.secret } : null;\n  form.value = { name: '', type: form.value.type, events: [], config: {} };\n  void load();\n}\n\nasync function setEnabled(n: NotifierRow, enabled: boolean): Promise<void> {\n  const r = await api.patch<{ notifier: NotifierRow }>(`/api/notifiers/${n.id}`, { enabled });\n  if (!r.ok) listError.value = problem(r, 'update this notifier');\n  void load();\n}\n\nasync function remove(n: NotifierRow): Promise<void> {\n  const r = await api.del(`/api/notifiers/${n.id}`);\n  if (!r.ok) {\n    listError.value = problem(r, 'delete this notifier');\n    return;\n  }\n  if (openDeliveries.value === n.id) openDeliveries.value = null;\n  toast('ok', `Removed ${n.name}.`);\n  void load();\n}\n\nasync function test(n: NotifierRow): Promise<void> {\n  const r = await api.post<{ result: { ok: boolean; status?: number; error?: string } }>(\n    `/api/notifiers/${n.id}/test`,\n    {},\n  );\n  if (!r.ok) {\n    listError.value = problem(r, 'send a test delivery');\n    return;\n  }\n  const res = r.body.result;\n  // The endpoint's own answer, verbatim — \"it failed\" without the reason is the thing this page\n  // exists to avoid.\n  if (res.ok) toast('ok', `${n.name} accepted the test delivery.`);\n  else toast('error', `${n.name}: ${res.error ?? `HTTP ${res.status}`}`);\n  void load();\n}\n\nasync function showDeliveries(n: NotifierRow): Promise<void> {\n  if (openDeliveries.value === n.id) {\n    openDeliveries.value = null;\n    return;\n  }\n  const r = await api.get<{ deliveries: DeliveryRow[] }>(`/api/notifiers/${n.id}/deliveries`);\n  if (!r.ok) {\n    listError.value = problem(r, 'load the delivery log');\n    return;\n  }\n  deliveries.value = r.body.deliveries ?? [];\n  openDeliveries.value = n.id;\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Notifiers</h1>\n        <div class=\"sub\">\n          Where events on this host get sent\n          <InfoHint label=\"what a notifier is\">\n            A registration that receives events — a teardown that leaked, a deployment created, a job\n            that failed. Webhooks today; the server decides what other kinds exist, and this page\n            renders whatever it offers.\n          </InfoHint>\n        </div>\n      </div>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not load the notifiers.\" />\n\n    <section v-if=\"unsupported\" class=\"panel\">\n      <div class=\"banner plain\">\n        <b>This server has no notifiers.</b>\n        <p>It is an older build of pstack. Upgrade the host to register webhooks.</p>\n      </div>\n    </section>\n\n    <template v-else>\n      <!--\n        Shown once, and the page says so. There is no read path on the server, so this is not a\n        design choice that could be softened later — the value genuinely does not exist anywhere\n        retrievable after this moment.\n      -->\n      <!-- Only a signing type ever produces one; see `signs` in notify.ts. -->\n      <div v-if=\"revealed\" class=\"banner ok\">\n        <b>Signing secret for “{{ revealed.name }}” — copy it now.</b>\n        <p>\n          This is the only time it is shown — the server keeps no way to show it again. Your\n          receiver uses it to check that a delivery really came from here.\n          <InfoHint label=\"how a receiver checks it\">\n            Each delivery carries a signature header computed from this secret and the exact body\n            sent. Recompute it on your side and compare; a mismatch means the delivery was not sent\n            by this host, or was altered on the way.\n          </InfoHint>\n        </p>\n        <pre class=\"code\">{{ revealed.secret }}</pre>\n        <div class=\"row\">\n          <button class=\"btn\" @click=\"revealed = null\">I have stored it</button>\n        </div>\n      </div>\n\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Registered</h2>\n        </div>\n\n        <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n        <table v-else-if=\"notifiers.length\" class=\"cards\">\n          <thead>\n            <tr>\n              <th>name</th>\n              <th>events</th>\n              <th>last delivery</th>\n              <th></th>\n            </tr>\n          </thead>\n          <tbody class=\"stagger\">\n            <template v-for=\"(n, i) in notifiers\" :key=\"n.id\">\n              <tr :style=\"{ '--i': i }\">\n                <td class=\"name\" data-label=\"name\">\n                  {{ n.name }}\n                  <div class=\"mute\" style=\"font-size: var(--t-sm)\">\n                    <!-- Chat types keep the URL under `webhookUrl`, and the server masks it (it is\n                         the credential) — so this shows dots for those rows, which is correct. -->\n                    {{ n.type }} · {{ String(n.config.url ?? n.config.webhookUrl ?? '') }}\n                  </div>\n                </td>\n                <td data-label=\"events\">\n                  <span v-if=\"n.events.includes('*')\" class=\"badge\">all events</span>\n                  <span v-else>{{ n.events.join(', ') }}</span>\n                </td>\n                <td data-label=\"last delivery\">\n                  <span v-if=\"!n.lastStatus\" class=\"mute\">never</span>\n                  <span v-else :class=\"n.lastStatus === 'ok' ? 's-ok' : 's-failed'\">\n                    {{ n.lastStatus }}\n                  </span>\n                  <div v-if=\"n.lastAt\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n                    <RelativeTime :at=\"n.lastAt\" />\n                  </div>\n                </td>\n                <td data-label=\"\">\n                  <div class=\"row\" style=\"justify-content: flex-end\">\n                    <span v-if=\"!n.enabled\" class=\"badge off\">disabled</span>\n                    <button class=\"ghost sm\" @click=\"showDeliveries(n)\">\n                      {{ openDeliveries === n.id ? 'Hide' : 'Deliveries' }}\n                    </button>\n                    <button class=\"ghost sm\" @click=\"test(n)\">Test</button>\n                    <button class=\"ghost sm\" @click=\"setEnabled(n, !n.enabled)\">\n                      {{ n.enabled ? 'Disable' : 'Enable' }}\n                    </button>\n                    <ActionButton variant=\"danger\" @click=\"remove(n)\">Remove</ActionButton>\n                  </div>\n                </td>\n              </tr>\n              <tr v-if=\"openDeliveries === n.id\" :key=\"`d${n.id}`\">\n                <td colspan=\"4\">\n                  <ul v-if=\"deliveries.length\" class=\"kvlist\">\n                    <li v-for=\"d in deliveries\" :key=\"d.id\">\n                      <span class=\"k\">\n                        <span :class=\"d.status === 'ok' ? 's-ok' : 's-failed'\">{{ d.status }}</span>\n                      </span>\n                      <span class=\"v\">\n                        {{ d.event }}\n                        <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n                          · {{ stamp(d.createdAt) }} · {{ d.attempts }} attempt(s)<template\n                            v-if=\"d.responseCode\"\n                          >\n                            · HTTP {{ d.responseCode }}</template\n                          >\n                        </span>\n                        <div v-if=\"d.error\" class=\"s-failed\" style=\"font-size: var(--t-sm)\">\n                          {{ d.error }}\n                        </div>\n                      </span>\n                    </li>\n                  </ul>\n                  <p v-else class=\"mute\">Nothing delivered yet.</p>\n                </td>\n              </tr>\n            </template>\n          </tbody>\n        </table>\n        <p v-else class=\"mute\">\n          Nothing registered. Events still happen — nobody is being told about them.\n        </p>\n      </section>\n\n      <section class=\"panel\">\n        <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Add a notifier</h2>\n\n        <div v-if=\"meta && meta.types.length > 1\" class=\"field\" style=\"max-width: 320px\">\n          <label for=\"ty\">Type</label>\n          <SelectMenu v-model=\"form.type\" id=\"ty\" label=\"Notifier type\" :options=\"typeOptions\" />\n        </div>\n\n        <div class=\"field\" style=\"max-width: 380px\">\n          <label for=\"nn\">Name</label>\n          <input id=\"nn\" v-model.trim=\"form.name\" type=\"text\" placeholder=\"ops-slack-bridge\" spellcheck=\"false\" />\n        </div>\n\n        <!-- Rendered from the server's field list — see the header. -->\n        <div v-for=\"f in chosenType?.fields ?? []\" :key=\"f.key\" class=\"field\" style=\"max-width: 380px\">\n          <label :for=\"`cfg-${f.key}`\">{{ f.label }}</label>\n          <input\n            :id=\"`cfg-${f.key}`\"\n            v-model.trim=\"form.config[f.key]\"\n            type=\"text\"\n            :placeholder=\"f.placeholder\"\n            spellcheck=\"false\"\n          />\n        </div>\n\n        <h2 class=\"section\" style=\"margin: var(--s5) 0 var(--s3)\">\n          Events\n          <InfoHint label=\"which events to pick\">\n            <b>All events</b> also covers events added in later versions — a specific list does not,\n            and the failure mode of that is silence nobody can explain. <code>job.leaked</code> is the\n            one worth alerting on: a teardown ran and something survived it.\n          </InfoHint>\n        </h2>\n        <div class=\"row\">\n          <label class=\"check\">\n            <input\n              type=\"checkbox\"\n              :checked=\"form.events.includes('*')\"\n              @change=\"toggleEvent('*')\"\n            />\n            All events\n          </label>\n        </div>\n        <!-- A grid, not a wrapping row: eleven items of differing width wrapped into ragged lines\n             with one stranded on its own, which reads as a layout accident. -->\n        <div v-if=\"!form.events.includes('*')\" class=\"check-grid\">\n          <label v-for=\"e in meta?.events ?? []\" :key=\"e\" class=\"check\">\n            <input type=\"checkbox\" :checked=\"form.events.includes(e)\" @change=\"toggleEvent(e)\" />\n            {{ e }}\n          </label>\n        </div>\n\n        <ErrorNote v-if=\"formError\" :text=\"formError\" title=\"Could not register this notifier.\" />\n\n        <div class=\"row\" style=\"margin-top: var(--s4)\">\n          <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"!canSave\" @click=\"create\">\n            {{ saving ? 'Registering…' : 'Register' }}\n          </ActionButton>\n        </div>\n\n        <p v-if=\"chosenType?.signs !== false\" class=\"hint\">\n          Deliveries are signed with a secret shown once at registration, retried twice on failure,\n          and logged here.\n          <InfoHint label=\"how a receiver verifies a delivery\">\n            Recompute <code>HMAC-SHA256(secret, `${timestamp}.${rawBody}`)</code> and compare against\n            <code>X-Pstack-Signature</code>, using the <em>raw</em> body — re-serialising it changes\n            the bytes. Reject anything whose <code>X-Pstack-Timestamp</code> is more than five minutes\n            old, and dedupe on <code>X-Pstack-Delivery</code>: delivery is at-least-once, and that id\n            is stable across retries.\n          </InfoHint>\n        </p>\n        <p v-else class=\"hint\">\n          The webhook URL is the credential — it is stored write-only and scrubbed from logs, and no\n          signing secret is involved. Deliveries are retried twice on failure and logged here.\n        </p>\n      </section>\n    </template>\n  </div>\n</template>\n"],"names":["notifiers","ref","meta","loaded","listError","unsupported","revealed","form","saving","formError","openDeliveries","deliveries","typeOptions","computed","_a","x","chosenType","t","watch","canSave","f","load","list","m","api","problem","toggleEvent","name","at","create","r","setEnabled","n","enabled","remove","toast","test","res","showDeliveries","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","_createBlock","ErrorNote","_openBlock","_hoisted_3","_Fragment","_hoisted_4","_toDisplayString","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_renderList","i","_hoisted_10","_hoisted_11","_hoisted_12","_hoisted_13","_hoisted_14","_hoisted_15","_normalizeClass","_hoisted_16","_hoisted_17","RelativeTime","_hoisted_18","_hoisted_19","_hoisted_20","$event","_hoisted_21","_hoisted_22","_hoisted_23","ActionButton","_hoisted_24","_hoisted_25","_hoisted_26","_hoisted_27","_hoisted_28","_createTextVNode","_unref","stamp","_hoisted_29","_hoisted_30","_hoisted_31","SkeletonList","_hoisted_32","_hoisted_33","SelectMenu","_hoisted_34","_hoisted_35","_hoisted_37","_hoisted_38","_hoisted_39","_hoisted_41","_b","e","_hoisted_43","_c","_hoisted_44","_hoisted_45"],"mappings":"w+DAyBA,MAAMA,EAAYC,EAAmB,EAAE,EACjCC,EAAOD,EAAyB,IAAI,EACpCE,EAASF,EAAI,EAAK,EAClBG,EAAYH,EAAI,EAAE,EAClBI,EAAcJ,EAAI,EAAK,EAGvBK,EAAWL,EAA6C,IAAI,EAE5DM,EAAON,EAAI,CAAE,KAAM,GAAI,KAAM,UAAW,OAAQ,CAAA,EAAgB,OAAQ,CAAA,EAA8B,EACtGO,EAASP,EAAI,EAAK,EAClBQ,EAAYR,EAAI,EAAE,EAElBS,EAAiBT,EAAmB,IAAI,EACxCU,EAAaV,EAAmB,EAAE,EAGlCW,EAAcC,EAAS,IAAA,OAAO,SAAAC,EAAAZ,EAAK,QAAL,YAAAY,EAAY,QAAS,CAAA,GAAI,IAAKC,IAAO,CAAE,MAAOA,EAAE,KAAM,MAAOA,EAAE,KAAA,EAAQ,EAAC,EAEtGC,EAAaH,EAAS,IAAA,OAAM,QAAAC,EAAAZ,EAAK,QAAL,YAAAY,EAAY,MAAM,KAAMG,GAAMA,EAAE,OAASV,EAAK,MAAM,QAAS,KAAI,EAUnGW,EACE,IAAMX,EAAK,MAAM,KACjB,IAAM,CACJA,EAAK,MAAM,OAAS,CAAA,CACtB,CAAA,EAEF,MAAMY,EAAUN,EACd,IAAA,OACE,OAACL,EAAO,OACR,CAAC,CAACD,EAAK,MAAM,KAAK,KAAA,GAClBA,EAAK,MAAM,OAAO,OAAS,MAC1BO,EAAAE,EAAW,QAAX,YAAAF,EAAkB,SAAU,CAAA,GAAI,MAAOM,GAAA,OAAM,OAACA,EAAE,UAAY,CAAC,GAACN,EAAAP,EAAK,MAAM,OAAOa,EAAE,GAAG,IAAvB,MAAAN,EAA0B,QAAM,EAAA,EAGnG,eAAeO,GAAsB,CACnC,KAAM,CAACC,EAAMC,CAAC,EAAI,MAAM,QAAQ,IAAI,CAClCC,EAAI,IAAkC,gBAAgB,EACtDA,EAAI,IAAkB,qBAAqB,CAAA,CAC5C,EAGD,GAFArB,EAAO,MAAQ,GAEXmB,EAAK,SAAW,KAAOC,EAAE,SAAW,IAAK,CAC3ClB,EAAY,MAAQ,GACpB,MACF,CACA,GAAI,CAACiB,EAAK,GAAI,CACZlB,EAAU,MAAQqB,EAAQH,EAAM,oBAAoB,EACpD,MACF,CACAlB,EAAU,MAAQ,GAClBJ,EAAU,MAAQsB,EAAK,KAAK,WAAa,CAAA,EACrCC,EAAE,KAAIrB,EAAK,MAAQqB,EAAE,KAC3B,CAEKF,EAAA,EAEL,SAASK,EAAYC,EAAoB,CACvC,MAAMC,EAAKrB,EAAK,MAAM,OAAO,QAAQoB,CAAI,EACrCC,IAAO,GAAIrB,EAAK,MAAM,OAAO,KAAKoB,CAAI,EACrCpB,EAAK,MAAM,OAAO,OAAOqB,EAAI,CAAC,CACrC,CAEA,eAAeC,GAAwB,CACrCrB,EAAO,MAAQ,GACfC,EAAU,MAAQ,GAClB,MAAMqB,EAAI,MAAMN,EAAI,KAAuD,iBAAkB,CAC3F,KAAMjB,EAAK,MAAM,KAAK,KAAA,EACtB,KAAMA,EAAK,MAAM,KACjB,OAAQA,EAAK,MAAM,OACnB,OAAQA,EAAK,MAAM,MAAA,CACpB,EAED,GADAC,EAAO,MAAQ,GACX,CAACsB,EAAE,GAAI,CACTrB,EAAU,MAAQgB,EAAQK,EAAG,wBAAwB,EACrD,MACF,CAGAxB,EAAS,MAAQwB,EAAE,KAAK,OAAS,CAAE,KAAMA,EAAE,KAAK,SAAS,KAAM,OAAQA,EAAE,KAAK,QAAW,KACzFvB,EAAK,MAAQ,CAAE,KAAM,GAAI,KAAMA,EAAK,MAAM,KAAM,OAAQ,GAAI,OAAQ,CAAA,CAAC,EAChEc,EAAA,CACP,CAEA,eAAeU,EAAWC,EAAgBC,EAAiC,CACzE,MAAMH,EAAI,MAAMN,EAAI,MAAiC,kBAAkBQ,EAAE,EAAE,GAAI,CAAE,QAAAC,EAAS,EACrFH,EAAE,OAAc,MAAQL,EAAQK,EAAG,sBAAsB,GACzDT,EAAA,CACP,CAEA,eAAea,EAAOF,EAA+B,CACnD,MAAMF,EAAI,MAAMN,EAAI,IAAI,kBAAkBQ,EAAE,EAAE,EAAE,EAChD,GAAI,CAACF,EAAE,GAAI,CACT1B,EAAU,MAAQqB,EAAQK,EAAG,sBAAsB,EACnD,MACF,CACIpB,EAAe,QAAUsB,EAAE,OAAmB,MAAQ,MAC1DG,EAAM,KAAM,WAAWH,EAAE,IAAI,GAAG,EAC3BX,EAAA,CACP,CAEA,eAAee,EAAKJ,EAA+B,CACjD,MAAMF,EAAI,MAAMN,EAAI,KAClB,kBAAkBQ,EAAE,EAAE,QACtB,CAAA,CAAC,EAEH,GAAI,CAACF,EAAE,GAAI,CACT1B,EAAU,MAAQqB,EAAQK,EAAG,sBAAsB,EACnD,MACF,CACA,MAAMO,EAAMP,EAAE,KAAK,OAGfO,EAAI,GAAIF,EAAM,KAAM,GAAGH,EAAE,IAAI,8BAA8B,EAC1DG,EAAM,QAAS,GAAGH,EAAE,IAAI,KAAKK,EAAI,OAAS,QAAQA,EAAI,MAAM,EAAE,EAAE,EAChEhB,EAAA,CACP,CAEA,eAAeiB,EAAeN,EAA+B,CAC3D,GAAItB,EAAe,QAAUsB,EAAE,GAAI,CACjCtB,EAAe,MAAQ,KACvB,MACF,CACA,MAAMoB,EAAI,MAAMN,EAAI,IAAmC,kBAAkBQ,EAAE,EAAE,aAAa,EAC1F,GAAI,CAACF,EAAE,GAAI,CACT1B,EAAU,MAAQqB,EAAQK,EAAG,uBAAuB,EACpD,MACF,CACAnB,EAAW,MAAQmB,EAAE,KAAK,YAAc,CAAA,EACxCpB,EAAe,MAAQsB,EAAE,EAC3B,oCAIEO,EAmNM,MAAA,KAAA,CAlNJC,EAYM,MAZNC,GAYM,CAXJD,EAUM,MAAA,KAAA,CATJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAkB,UAAd,YAAS,EAAA,GACbA,EAOM,MAPNG,GAOM,eAPW,uCAEf,EAAA,GAAAC,EAIWC,EAAA,CAJD,MAAM,sBAAoB,WAAC,IAIrC,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJqC,gNAIrC,EAAA,CAAA,iBAKWtC,EAAA,WAAjB0C,EAAsFC,EAAA,OAAzD,KAAM3C,EAAA,MAAW,MAAM,+BAAA,6BAErCC,EAAA,OAAf2C,IAAAT,EAKU,UALVU,GAKU,CAAA,GAAAP,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJRF,EAGM,MAAA,CAHD,MAAM,gBAAc,CACvBA,EAAoC,SAAjC,+BAA6B,EAChCA,EAA6E,SAA1E,wEAAsE,CAAA,gBAI7ED,EA0LWW,EAAA,CAAA,IAAA,GAAA,CAnLE5C,EAAA,OAAX0C,EAAA,EAAAT,EAeM,MAfNY,GAeM,CAdJX,EAA8D,SAA3D,uBAAoBY,EAAG9C,QAAS,IAAI,EAAG,mBAAgB,CAAA,EAC1DkC,EAQI,IAAA,KAAA,eARD,wJAGD,EAAA,GAAAI,EAIWC,EAAA,CAJD,MAAM,4BAA0B,WAAC,IAI3C,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJ2C,2NAI3C,EAAA,CAAA,aAEFF,EAA6C,MAA7Ca,GAA6CD,EAAxB9C,EAAA,MAAS,MAAM,EAAA,CAAA,EACpCkC,EAEM,MAFNc,GAEM,CADJd,EAAsE,SAAA,CAA9D,MAAM,MAAO,uBAAOlC,EAAA,MAAQ,KAAA,EAAS,kBAAgB,CAAA,eAIjEkC,EAoFU,UApFVe,GAoFU,eAnFRf,EAEM,MAAA,CAFD,MAAM,SAAO,CAChBA,EAAmC,KAAA,CAA/B,MAAM,SAAA,EAAU,YAAU,CAAA,OAGXrC,EAAA,MACHH,EAAA,MAAU,QAA5BgD,EAAA,EAAAT,EA0EQ,QA1ERiB,GA0EQ,eAzENhB,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAa,UAAT,MAAI,EACRA,EAAe,UAAX,QAAM,EACVA,EAAsB,UAAlB,eAAa,EACjBA,EAAS,IAAA,CAAA,SAGbA,EAgEQ,QAhERiB,GAgEQ,EA/DNT,EAAA,EAAA,EAAAT,EA8DWW,EAAA,KAAAQ,EA9DgB1D,EAAA,MAAS,CAAlBgC,EAAG2B,cAAuB,IAAA3B,EAAE,EAAA,GAC5CQ,EAmCK,KAAA,CAnCA,eAAgBmB,EAAC,CAAA,GACpBnB,EAOK,KAPLoB,GAOK,KANA5B,EAAE,IAAI,EAAG,IACZ,CAAA,EAAAQ,EAIM,MAJNqB,GAIMT,EADDpB,EAAE,IAAI,EAAG,MAAGoB,EAAG,OAAOpB,EAAE,OAAO,KAAOA,EAAE,OAAO,YAAU,EAAA,CAAA,EAAA,CAAA,CAAA,GAGhEQ,EAGK,KAHLsB,GAGK,CAFS9B,EAAE,OAAO,SAAQ,GAAA,OAA7BO,EAAmE,OAAnEwB,GAAkD,YAAU,IAC5Df,IAAAT,EAA6C,OAAAyB,GAAAZ,EAA7BpB,EAAE,OAAO,KAAI,IAAA,CAAA,EAAA,CAAA,EAAA,GAE/BQ,EAQK,KARLyB,GAQK,CAPUjC,EAAE,gBACfO,EAEO,OAAA,OAFO,MAAK2B,EAAElC,EAAE,aAAU,KAAA,OAAA,UAAA,CAAA,EAC5BoB,EAAApB,EAAE,UAAU,EAAA,CAAA,QAFjBO,EAAoD,OAApD4B,GAAwC,OAAK,GAIlCnC,EAAE,QAAbgB,EAAA,EAAAT,EAEM,MAFN6B,GAEM,CADJxB,EAA+ByB,GAAA,CAAhB,GAAIrC,EAAE,MAAA,+BAGzBQ,EAYK,KAZL8B,GAYK,CAXH9B,EAUM,MAVN+B,GAUM,CATSvC,EAAE,sBAAfO,EAAyD,OAAzDiC,GAA0C,UAAQ,GAClDhC,EAES,SAAA,CAFD,MAAM,WAAY,QAAKiC,GAAEnC,EAAeN,CAAC,CAAA,IAC5CtB,EAAA,QAAmBsB,EAAE,GAAE,OAAA,YAAA,EAAA,EAAA0C,EAAA,EAE5BlC,EAAuD,SAAA,CAA/C,MAAM,WAAY,QAAKiC,GAAErC,EAAKJ,CAAC,CAAA,EAAG,OAAI,EAAA2C,EAAA,EAC9CnC,EAES,SAAA,CAFD,MAAM,WAAY,WAAOT,EAAWC,EAAC,CAAGA,EAAE,OAAO,CAAA,EACpDoB,EAAApB,EAAE,QAAO,UAAA,QAAA,EAAA,EAAA4C,EAAA,EAEdhC,EAAuEiC,EAAA,CAAzD,QAAQ,SAAU,QAAKJ,GAAEvC,EAAOF,CAAC,CAAA,aAAG,IAAM,CAAA,GAAAU,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAN,SAAM,EAAA,CAAA,iCAIpDhC,EAAA,QAAmBsB,EAAE,QAA/BO,EAwBK,KAAA,CAxB+B,IAAG,IAAMP,EAAE,EAAE,EAAA,GAC/CQ,EAsBK,KAtBLsC,GAsBK,CArBOnE,EAAA,MAAW,QAArBqC,IAAAT,EAmBK,KAnBLwC,GAmBK,QAlBHxC,EAiBKW,EAAA,KAAAQ,EAjBW/C,EAAA,MAAL,QAAX4B,EAiBK,KAAA,CAjBwB,IAAK,EAAE,EAAA,GAClCC,EAEO,OAFPwC,GAEO,CADLxC,EAA4E,OAAA,CAArE,MAAK0B,EAAE,EAAE,SAAM,KAAA,OAAA,UAAA,CAAA,EAAoCd,EAAA,EAAE,MAAM,EAAA,CAAA,CAAA,GAEpEZ,EAYO,OAZPyC,GAYO,KAXF,EAAE,KAAK,EAAG,IACb,CAAA,EAAAzC,EAMO,OANP0C,GAMO,CAN2CC,EAAA,MAC9C/B,EAAGgC,GAAAC,EAAA,EAAM,EAAE,SAAS,CAAA,EAAI,MAAGjC,EAAG,EAAE,QAAQ,EAAG,cAAW,CAAA,EAChD,EAAE,kBAD8Cb,EAIvDW,EAAA,CAAA,IAAA,GAAA,GAFA,WACQE,EAAG,EAAE,YAAY,EAAA,CAAA,CAAA,kBAGjB,EAAE,OAAbJ,EAAA,EAAAT,EAEM,MAFN+C,GAEMlC,EADD,EAAE,KAAK,EAAA,CAAA,gCAKlBb,EAAiD,IAAjDgD,GAAuB,wBAAsB,EAAA,sCAMvDhD,EAEI,IAFJiD,GAAuB,8EAEvB,QA9EA1C,EAAyC2C,GAAA,OAAX,KAAM,CAAA,GA8EpC,GAGFjD,EA2EU,UA3EVkD,GA2EU,eA1ERlD,EAAwE,KAAA,CAApE,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,iBAAc,EAAA,GAExDtC,EAAA,OAAQA,EAAA,MAAK,MAAM,OAAM,GAApC8C,EAAA,EAAAT,EAGM,MAHNoD,GAGM,CAFJjD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA4B,QAAA,CAArB,IAAI,IAAA,EAAK,OAAI,EAAA,GACpBI,EAAuFgD,GAAA,CAAlE,WAAArF,EAAA,MAAK,KAAL,sBAAAmC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA+B,GAAAlE,EAAA,MAAK,KAAIkE,GAAE,GAAG,KAAK,MAAM,gBAAiB,QAAS7D,EAAA,KAAA,+CAG1E4B,EAGM,MAHNqD,GAGM,CAFJnD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA4B,QAAA,CAArB,IAAI,IAAA,EAAK,OAAI,EAAA,KACpBA,EAAwG,QAAA,CAAjG,GAAG,KAAmB,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA+B,GAAAlE,EAAA,MAAK,KAAIkE,GAAE,KAAK,OAAO,YAAY,mBAAmB,WAAW,OAAA,gBAAjElE,EAAA,MAAK,YAAX,CAAA,KAAR,EAAA,CAAwB,OAIzCyC,EAAA,EAAA,EAAAT,EASMW,EAAA,KAAAQ,IATW5C,EAAAE,EAAA,QAAA,YAAAF,EAAY,YAAjBM,QAAZmB,EASM,MAAA,CATsC,IAAKnB,EAAE,IAAK,MAAM,QAAQ,MAAA,CAAA,YAAA,OAAA,CAAA,GACpEoB,EAAkD,QAAA,CAA1C,IAAG,OAASpB,EAAE,GAAG,EAAA,EAAOgC,EAAAhC,EAAE,KAAK,EAAA,EAAA0E,EAAA,IACvCtD,EAME,QAAA,CALC,GAAE,OAASpB,EAAE,GAAG,GACH,sBAAAqD,GAAAlE,EAAA,MAAK,OAAOa,EAAE,GAAG,EAAAqD,EAC/B,KAAK,OACJ,YAAarD,EAAE,YAChB,WAAW,OAAA,iBAHGb,EAAA,MAAK,OAAOa,EAAE,GAAG,SAAvB,CAAA,KAAR,EAAA,CAAiC,cAOrCoB,EAOK,KAPLuD,GAOK,iBAPqD,WAExD,EAAA,GAAAnD,EAIWC,EAAA,CAJD,MAAM,wBAAsB,WACpC,IAAiB,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CAAjBF,EAAiB,SAAd,aAAU,EAAA,IAAI,uIAC2C,EAAA,EAAAA,EAAuB,YAAjB,aAAU,EAAA,IAAO,4EAErF,EAAA,CAAA,aAEFA,EASM,MATNwD,GASM,CARJxD,EAOQ,QAPRyD,GAOQ,CANNzD,EAIE,QAAA,CAHA,KAAK,WACJ,QAASjC,EAAA,MAAK,OAAO,SAAQ,GAAA,EAC7B,wBAAQmB,EAAW,GAAA,EAAA,8BACpB,eAEJ,EAAA,EAAA,KAIUnB,EAAA,MAAK,OAAO,SAAQ,GAAA,YAAhCyC,IAAAT,EAKM,MALN2D,GAKM,EAJJlD,EAAA,EAAA,EAAAT,EAGQW,EAAA,KAAAQ,IAHWyC,EAAAjG,EAAA,QAAA,YAAAiG,EAAM,YAAXC,QAAd7D,EAGQ,QAAA,CAHgC,IAAK6D,EAAG,MAAM,OAAA,GACpD5D,EAAqF,QAAA,CAA9E,KAAK,WAAY,QAASjC,EAAA,MAAK,OAAO,SAAS6F,CAAC,EAAI,SAAM3B,GAAE/C,EAAY0E,CAAC,CAAA,cAAKjB,EAAA,MAClFiB,CAAC,EAAA,CAAA,CAAA,cAIS3F,EAAA,WAAjBqC,EAA0FC,EAAA,OAA7D,KAAMtC,EAAA,MAAW,MAAM,mCAAA,6BAEpD+B,EAIM,MAJN6D,GAIM,CAHJzD,EAEeiC,EAAA,CAFD,QAAQ,UAAW,QAASrE,EAAA,MAAS,UAAWW,EAAA,MAAU,QAAOU,CAAA,aAC7E,IAA0C,KAAvCrB,EAAA,MAAM,eAAA,UAAA,EAAA,CAAA,CAAA,sCAIJ8F,EAAAtF,EAAA,QAAA,YAAAsF,EAAY,SAAK,IAA1BtD,IAAAT,EAUI,IAVJgE,GAUI,iBAV+C,+GAGjD,EAAA,GAAA3D,EAMWC,EAAA,CAND,MAAM,sCAAoC,WAAC,IACzC,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GADyC,cACzC,EAAA,EAAAF,EAA2D,YAArD,iDAA8C,EAAA,IAAO,wBACrE,EAAA,EAAAA,EAA+B,YAAzB,qBAAkB,EAAA,IAAO,eAAY,EAAA,EAAAA,EAAY,UAAR,MAAG,EAAA,IAAK,sEACtB,EAAA,EAAAA,EAA+B,YAAzB,qBAAkB,EAAA,IAAO,iDAC7C,EAAA,EAAAA,EAA8B,YAAxB,oBAAiB,EAAA,IAAO,sEAEnD,EAAA,CAAA,mBAEFD,EAGI,IAHJiE,GAAuB,mLAGvB,EAAA"}

package/dist/assets/{OverviewTab-B2aCu4e0.js → OverviewTab-DY2wspdv.js}

@@ -1,2 +1,2 @@
-import{d as o,r as _,i as x}from"./useDeployment-Bgo0U4-I.js";import{s as h}from"./useFormat-CKJxQp_i.js";import{_ as C}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DiCGtn2a.js";import{d as T,c as a,a as e,u as t,x as m,w as p,g as r,f as l,e as b,_ as g,t as i,E as A,F as u,s as k,C as N,j as R,o as n}from"./index-jLPJ82ve.js";import"./useVars-VN9gYdR6.js";const $={class:"panel"},B={class:"phead"},z={key:1,class:"mute"},L={key:1,class:"mute"},S={key:2,class:"kvlist"},U={class:"k"},V={class:"v mono"},E={class:"v"},I={class:"mute",style:{"margin-left":"8px","font-size":"var(--t-sm)"}},j={key:0},q={class:"v"},D={class:"v mono"},F={key:1},H={class:"v"},P={key:0,class:"mute"},K={key:2},O={class:"k"},G={class:"v"},J={class:"mono"},M={class:"mute",style:{"font-size":"var(--t-sm)"}},Q={key:3},W={class:"v"},X={key:0,class:"mute"},Y={class:"v"},Z={class:"v"},ss={class:"v"},es={class:"v"},rs=T({__name:"OverviewTab",setup(ts){const w=N(()=>x.value?"a host singleton previews borrow — no axes, and down is guarded":"one tenant, created and destroyed constantly, expected to leave nothing behind");return(os,s)=>{var y,v,f;const c=R("RouterLink");return n(),a("section",$,[e("div",B,[s[2]||(s[2]=e("h2",{class:"section"},"Resolved spec",-1)),s[3]||(s[3]=e("span",{class:"grow"},null,-1)),t(o).detail?(n(),m(c,{key:0,to:`/submit?from=${encodeURIComponent(t(o).id)}`},{default:p(()=>[...s[0]||(s[0]=[l(" Duplicate ",-1)])]),_:1},8,["to"])):r("",!0),t(o).detail?(n(),a("span",z,"·")):r("",!0),t(o).detail?(n(),m(c,{key:2,to:`/submit/${encodeURIComponent(t(o).id)}`},{default:p(()=>[...s[1]||(s[1]=[l(" Edit spec & compose → ",-1)])]),_:1},8,["to"])):r("",!0)]),!t(o).detail&&!t(o).error?(n(),m(C,{key:0,rows:5})):t(o).detail?(n(),a("ul",S,[e("li",null,[e("span",U,[s[5]||(s[5]=l(" stack ",-1)),b(g,{label:"the difference between id and stack"},{default:p(()=>[...s[4]||(s[4]=[l(" The ",-1),e("b",null,"id",-1),l(" is what you named this deployment. The ",-1),e("b",null,"stack",-1),l(" is what its spec resolved to once the variables were filled in — the compose project name, the hostname label, and ",-1),e("code",null,"$STACK",-1),l(" inside every hook. ",-1)])]),_:1})]),e("span",V,i(t(o).detail.stack||"—"),1)]),e("li",null,[s[6]||(s[6]=e("span",{class:"k"},"kind",-1)),e("span",E,[e("span",{class:A(["badge",t(o).detail.kind])},i(t(o).detail.kind),3),e("span",I,i(w.value),1)])]),(y=t(_))!=null&&y.specName?(n(),a("li",j,[s[8]||(s[8]=e("span",{class:"k"},"spec",-1)),e("span",q,[e("b",null,i(t(_).specName),1),s[7]||(s[7]=e("span",{class:"mute",style:{"font-size":"var(--t-sm)"}}," — stored, and shared with any other deployment using it ",-1))])])):r("",!0),e("li",null,[s[9]||(s[9]=e("span",{class:"k"},"compose file",-1)),e("span",D,i(t(o).detail.compose?t(o).detail.compose.file:"none"),1)]),t(o).detail.compose?(n(),a("li",F,[s[10]||(s[10]=e("span",{class:"k"},"profiles",-1)),e("span",H,[(n(!0),a(u,null,k(t(o).detail.compose.profiles,d=>(n(),a("span",{key:d,class:"badge",style:{"margin-right":"4px"}},i(d),1))),128)),t(o).detail.compose.profiles.length?r("",!0):(n(),a("span",P," none — a bare up starts every service "))])])):r("",!0),(f=(v=t(o).detail.compose)==null?void 0:v.subdomains)!=null&&f.length?(n(),a("li",K,[e("span",O,[s[15]||(s[15]=l(" subdomains ",-1)),b(g,{label:"how wildcard subdomains work"},{default:p(()=>[s[14]||(s[14]=l(" Anything one label under these hosts reaches the same service the bare host does. An exact hostname you route yourself always wins over the wildcard. ",-1)),t(o).detail.compose.subdomains.some(d=>d.depth==="any")?(n(),a(u,{key:0},[s[11]||(s[11]=l(" A route marked ",-1)),s[12]||(s[12]=e("b",null,"any depth",-1)),s[13]||(s[13]=l(" works over HTTP only — no TLS certificate can cover more than one label. ",-1))],64)):r("",!0)]),_:1})]),e("span",G,[(n(!0),a(u,null,k(t(o).detail.compose.subdomains,d=>(n(),a("div",{key:d.profile},[e("span",J,"*."+i(d.host),1),e("span",M,[l(" → "+i(d.profile),1),d.depth==="any"?(n(),a(u,{key:0},[l(" · any depth, HTTP only")],64)):r("",!0)])]))),128))])])):r("",!0),t(o).detail.compose?(n(),a("li",Q,[s[16]||(s[16]=e("span",{class:"k"},"overlays",-1)),e("span",W,[(n(!0),a(u,null,k(t(o).detail.compose.overlays,d=>(n(),a("span",{key:d,class:"mono",style:{"margin-right":"8px"}},i(d),1))),128)),t(o).detail.compose.overlays.length?r("",!0):(n(),a("span",X,"none"))])])):r("",!0),e("li",null,[s[18]||(s[18]=e("span",{class:"k"},"axes",-1)),e("span",Y,[l(i(t(o).detail.axes.length)+" ",1),t(o).detail.axes.length?(n(),m(c,{key:0,to:`/deployments/${encodeURIComponent(t(o).id)}/axes`},{default:p(()=>[...s[17]||(s[17]=[l(" view → ",-1)])]),_:1},8,["to"])):r("",!0)])]),e("li",null,[s[19]||(s[19]=e("span",{class:"k"},"requires",-1)),e("span",Z,i(t(o).detail.requires.length),1)]),e("li",null,[s[20]||(s[20]=e("span",{class:"k"},"created",-1)),e("span",ss,i(t(h)(t(o).detail.createdAt)),1)]),e("li",null,[s[21]||(s[21]=e("span",{class:"k"},"updated",-1)),e("span",es,i(t(h)(t(o).detail.updatedAt)),1)])])):(n(),a("p",L,"Unavailable until the spec resolves."))])}}});export{rs as default};
-//# sourceMappingURL=OverviewTab-B2aCu4e0.js.map
+import{d as o,r as _,i as x}from"./useDeployment-_b3SOnq-.js";import{s as h}from"./useFormat-CKJxQp_i.js";import{_ as C}from"./SkeletonList.vue_vue_type_script_setup_true_lang-ChGnSMn4.js";import{d as T,c as a,a as e,u as t,x as m,w as p,g as r,f as l,e as b,_ as g,t as i,E as A,F as u,s as k,C as N,j as R,o as n}from"./index-CSRA6my_.js";import"./useVars-VN9gYdR6.js";const $={class:"panel"},B={class:"phead"},z={key:1,class:"mute"},L={key:1,class:"mute"},S={key:2,class:"kvlist"},U={class:"k"},V={class:"v mono"},E={class:"v"},I={class:"mute",style:{"margin-left":"8px","font-size":"var(--t-sm)"}},j={key:0},q={class:"v"},D={class:"v mono"},F={key:1},H={class:"v"},P={key:0,class:"mute"},K={key:2},O={class:"k"},G={class:"v"},J={class:"mono"},M={class:"mute",style:{"font-size":"var(--t-sm)"}},Q={key:3},W={class:"v"},X={key:0,class:"mute"},Y={class:"v"},Z={class:"v"},ss={class:"v"},es={class:"v"},rs=T({__name:"OverviewTab",setup(ts){const w=N(()=>x.value?"a host singleton previews borrow — no axes, and down is guarded":"one tenant, created and destroyed constantly, expected to leave nothing behind");return(os,s)=>{var y,v,f;const c=R("RouterLink");return n(),a("section",$,[e("div",B,[s[2]||(s[2]=e("h2",{class:"section"},"Resolved spec",-1)),s[3]||(s[3]=e("span",{class:"grow"},null,-1)),t(o).detail?(n(),m(c,{key:0,to:`/submit?from=${encodeURIComponent(t(o).id)}`},{default:p(()=>[...s[0]||(s[0]=[l(" Duplicate ",-1)])]),_:1},8,["to"])):r("",!0),t(o).detail?(n(),a("span",z,"·")):r("",!0),t(o).detail?(n(),m(c,{key:2,to:`/submit/${encodeURIComponent(t(o).id)}`},{default:p(()=>[...s[1]||(s[1]=[l(" Edit spec & compose → ",-1)])]),_:1},8,["to"])):r("",!0)]),!t(o).detail&&!t(o).error?(n(),m(C,{key:0,rows:5})):t(o).detail?(n(),a("ul",S,[e("li",null,[e("span",U,[s[5]||(s[5]=l(" stack ",-1)),b(g,{label:"the difference between id and stack"},{default:p(()=>[...s[4]||(s[4]=[l(" The ",-1),e("b",null,"id",-1),l(" is what you named this deployment. The ",-1),e("b",null,"stack",-1),l(" is what its spec resolved to once the variables were filled in — the compose project name, the hostname label, and ",-1),e("code",null,"$STACK",-1),l(" inside every hook. ",-1)])]),_:1})]),e("span",V,i(t(o).detail.stack||"—"),1)]),e("li",null,[s[6]||(s[6]=e("span",{class:"k"},"kind",-1)),e("span",E,[e("span",{class:A(["badge",t(o).detail.kind])},i(t(o).detail.kind),3),e("span",I,i(w.value),1)])]),(y=t(_))!=null&&y.specName?(n(),a("li",j,[s[8]||(s[8]=e("span",{class:"k"},"spec",-1)),e("span",q,[e("b",null,i(t(_).specName),1),s[7]||(s[7]=e("span",{class:"mute",style:{"font-size":"var(--t-sm)"}}," — stored, and shared with any other deployment using it ",-1))])])):r("",!0),e("li",null,[s[9]||(s[9]=e("span",{class:"k"},"compose file",-1)),e("span",D,i(t(o).detail.compose?t(o).detail.compose.file:"none"),1)]),t(o).detail.compose?(n(),a("li",F,[s[10]||(s[10]=e("span",{class:"k"},"profiles",-1)),e("span",H,[(n(!0),a(u,null,k(t(o).detail.compose.profiles,d=>(n(),a("span",{key:d,class:"badge",style:{"margin-right":"4px"}},i(d),1))),128)),t(o).detail.compose.profiles.length?r("",!0):(n(),a("span",P," none — a bare up starts every service "))])])):r("",!0),(f=(v=t(o).detail.compose)==null?void 0:v.subdomains)!=null&&f.length?(n(),a("li",K,[e("span",O,[s[15]||(s[15]=l(" subdomains ",-1)),b(g,{label:"how wildcard subdomains work"},{default:p(()=>[s[14]||(s[14]=l(" Anything one label under these hosts reaches the same service the bare host does. An exact hostname you route yourself always wins over the wildcard. ",-1)),t(o).detail.compose.subdomains.some(d=>d.depth==="any")?(n(),a(u,{key:0},[s[11]||(s[11]=l(" A route marked ",-1)),s[12]||(s[12]=e("b",null,"any depth",-1)),s[13]||(s[13]=l(" works over HTTP only — no TLS certificate can cover more than one label. ",-1))],64)):r("",!0)]),_:1})]),e("span",G,[(n(!0),a(u,null,k(t(o).detail.compose.subdomains,d=>(n(),a("div",{key:d.profile},[e("span",J,"*."+i(d.host),1),e("span",M,[l(" → "+i(d.profile),1),d.depth==="any"?(n(),a(u,{key:0},[l(" · any depth, HTTP only")],64)):r("",!0)])]))),128))])])):r("",!0),t(o).detail.compose?(n(),a("li",Q,[s[16]||(s[16]=e("span",{class:"k"},"overlays",-1)),e("span",W,[(n(!0),a(u,null,k(t(o).detail.compose.overlays,d=>(n(),a("span",{key:d,class:"mono",style:{"margin-right":"8px"}},i(d),1))),128)),t(o).detail.compose.overlays.length?r("",!0):(n(),a("span",X,"none"))])])):r("",!0),e("li",null,[s[18]||(s[18]=e("span",{class:"k"},"axes",-1)),e("span",Y,[l(i(t(o).detail.axes.length)+" ",1),t(o).detail.axes.length?(n(),m(c,{key:0,to:`/deployments/${encodeURIComponent(t(o).id)}/axes`},{default:p(()=>[...s[17]||(s[17]=[l(" view → ",-1)])]),_:1},8,["to"])):r("",!0)])]),e("li",null,[s[19]||(s[19]=e("span",{class:"k"},"requires",-1)),e("span",Z,i(t(o).detail.requires.length),1)]),e("li",null,[s[20]||(s[20]=e("span",{class:"k"},"created",-1)),e("span",ss,i(t(h)(t(o).detail.createdAt)),1)]),e("li",null,[s[21]||(s[21]=e("span",{class:"k"},"updated",-1)),e("span",es,i(t(h)(t(o).detail.updatedAt)),1)])])):(n(),a("p",L,"Unavailable until the spec resolves."))])}}});export{rs as default};
+//# sourceMappingURL=OverviewTab-DY2wspdv.js.map

package/dist/assets/{OverviewTab-B2aCu4e0.js.map → OverviewTab-DY2wspdv.js.map}

@@ -1 +1 @@
-{"version":3,"file":"OverviewTab-B2aCu4e0.js","sources":["../../src/views/tabs/OverviewTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/** The resolved spec, summarised. Read-only — everything that acts lives on Danger. */\nimport { computed } from 'vue';\nimport { dep, isShared, row } from '../../composables/useDeployment';\nimport { stamp } from '../../composables/useFormat';\nimport SkeletonList from '../../components/SkeletonList.vue';\nimport InfoHint from '../../components/InfoHint.vue';\n\nconst kindBlurb = computed(() =>\n  isShared.value\n    ? 'a host singleton previews borrow — no axes, and down is guarded'\n    : 'one tenant, created and destroyed constantly, expected to leave nothing behind',\n);\n</script>\n\n<template>\n  <section class=\"panel\">\n    <div class=\"phead\">\n      <h2 class=\"section\">Resolved spec</h2>\n      <span class=\"grow\" />\n      <RouterLink v-if=\"dep.detail\" :to=\"`/submit?from=${encodeURIComponent(dep.id)}`\">\n        Duplicate\n      </RouterLink>\n      <span v-if=\"dep.detail\" class=\"mute\">·</span>\n      <RouterLink v-if=\"dep.detail\" :to=\"`/submit/${encodeURIComponent(dep.id)}`\">\n        Edit spec &amp; compose →\n      </RouterLink>\n    </div>\n\n    <SkeletonList v-if=\"!dep.detail && !dep.error\" :rows=\"5\" />\n    <p v-else-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n\n    <template v-else>\n      <ul class=\"kvlist\">\n        <li>\n          <span class=\"k\">\n            stack\n            <InfoHint label=\"the difference between id and stack\">\n              The <b>id</b> is what you named this deployment. The <b>stack</b> is what its spec\n              resolved to once the variables were filled in — the compose project name, the hostname\n              label, and <code>$STACK</code> inside every hook.\n            </InfoHint>\n          </span>\n          <span class=\"v mono\">{{ dep.detail.stack || '—' }}</span>\n        </li>\n        <li>\n          <span class=\"k\">kind</span>\n          <span class=\"v\">\n            <span class=\"badge\" :class=\"dep.detail.kind\">{{ dep.detail.kind }}</span>\n            <span class=\"mute\" style=\"margin-left: 8px; font-size: var(--t-sm)\">{{ kindBlurb }}</span>\n          </span>\n        </li>\n        <li v-if=\"row?.specName\">\n          <span class=\"k\">spec</span>\n          <span class=\"v\">\n            <b>{{ row.specName }}</b>\n            <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n              — stored, and shared with any other deployment using it\n            </span>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">compose file</span>\n          <span class=\"v mono\">\n            {{ dep.detail.compose ? dep.detail.compose.file : 'none' }}\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose\">\n          <span class=\"k\">profiles</span>\n          <span class=\"v\">\n            <span v-for=\"p in dep.detail.compose.profiles\" :key=\"p\" class=\"badge\" style=\"margin-right: 4px\">\n              {{ p }}\n            </span>\n            <span v-if=\"!dep.detail.compose.profiles.length\" class=\"mute\">\n              none — a bare up starts every service\n            </span>\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose?.subdomains?.length\">\n          <span class=\"k\">\n            subdomains\n            <InfoHint label=\"how wildcard subdomains work\">\n              Anything one label under these hosts reaches the same service the bare host does.\n              An exact hostname you route yourself always wins over the wildcard.\n              <template v-if=\"dep.detail.compose.subdomains.some((s) => s.depth === 'any')\">\n                A route marked <b>any depth</b> works over HTTP only — no TLS certificate can cover\n                more than one label.\n              </template>\n            </InfoHint>\n          </span>\n          <span class=\"v\">\n            <div v-for=\"s in dep.detail.compose.subdomains\" :key=\"s.profile\">\n              <span class=\"mono\">*.{{ s.host }}</span>\n              <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n                → {{ s.profile }}<template v-if=\"s.depth === 'any'\"> · any depth, HTTP only</template>\n              </span>\n            </div>\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose\">\n          <span class=\"k\">overlays</span>\n          <span class=\"v\">\n            <span v-for=\"o in dep.detail.compose.overlays\" :key=\"o\" class=\"mono\" style=\"margin-right: 8px\">{{ o }}</span>\n            <span v-if=\"!dep.detail.compose.overlays.length\" class=\"mute\">none</span>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">axes</span>\n          <span class=\"v\">\n            {{ dep.detail.axes.length }}\n            <RouterLink v-if=\"dep.detail.axes.length\" :to=\"`/deployments/${encodeURIComponent(dep.id)}/axes`\">\n              view →\n            </RouterLink>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">requires</span>\n          <span class=\"v\">{{ dep.detail.requires.length }}</span>\n        </li>\n        <li><span class=\"k\">created</span><span class=\"v\">{{ stamp(dep.detail.createdAt) }}</span></li>\n        <li><span class=\"k\">updated</span><span class=\"v\">{{ stamp(dep.detail.updatedAt) }}</span></li>\n      </ul>\n    </template>\n  </section>\n</template>\n"],"names":["kindBlurb","computed","isShared","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_cache","_unref","dep","_createBlock","_component_RouterLink","_hoisted_3","SkeletonList","_hoisted_5","_hoisted_6","_createVNode","InfoHint","_hoisted_7","_toDisplayString","_hoisted_8","_hoisted_9","row","_hoisted_10","_hoisted_11","_hoisted_12","_hoisted_13","_hoisted_14","_Fragment","_renderList","p","_hoisted_15","_hoisted_16","_hoisted_17","s","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","o","_hoisted_23","_hoisted_24","_createTextVNode","_hoisted_25","_hoisted_26","stamp","_hoisted_27","_hoisted_4"],"mappings":"46BAQA,MAAMA,EAAYC,EAAS,IACzBC,EAAS,MACL,kEACA,gFAAA,mDAKJ,OAAAC,EAAA,EAAAC,EA2GU,UA3GVC,EA2GU,CA1GRC,EAUM,MAVNC,EAUM,CATJC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAsC,KAAA,CAAlC,MAAM,SAAA,EAAU,gBAAa,EAAA,eACjCA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACAG,EAAAC,CAAA,EAAI,YAAtBC,EAEaC,EAAA,OAFkB,GAAE,gBAAkB,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,EAAA,aAAK,IAEjF,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFiF,cAEjF,EAAA,CAAA,8BACYC,EAAAC,CAAA,EAAI,YAAhBN,EAA6C,OAA7CS,EAAqC,GAAC,YACpBJ,EAAAC,CAAA,EAAI,YAAtBC,EAEaC,EAAA,OAFkB,GAAE,WAAa,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,EAAA,aAAK,IAE5E,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAF4E,0BAE5E,EAAA,CAAA,gCAGmB,CAAAC,EAAAC,CAAA,EAAI,QAAM,CAAKD,EAAAC,CAAA,EAAI,WAAxCC,EAA2DG,EAAA,OAAX,KAAM,CAAA,IACvCL,EAAAC,CAAA,EAAI,QAGjBP,IAAAC,EAwFK,KAxFLW,EAwFK,CAvFHT,EAUK,KAAA,KAAA,CATHA,EAOO,OAPPU,EAOO,eAPS,UAEd,EAAA,GAAAC,EAIWC,EAAA,CAJD,MAAM,uCAAqC,WAAC,IAChD,CAAA,GAAAV,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADgD,QAChD,EAAA,EAAAF,EAAS,SAAN,KAAE,EAAA,IAAI,2CAAwC,EAAA,EAAAA,EAAY,SAAT,QAAK,EAAA,IAAI,uHAEtD,EAAA,EAAAA,EAAmB,YAAb,SAAM,EAAA,IAAO,uBAChC,EAAA,CAAA,aAEFA,EAAyD,OAAzDa,EAAyDC,EAAjCX,KAAI,OAAO,OAAK,GAAA,EAAA,CAAA,CAAA,GAE1CH,EAMK,KAAA,KAAA,CALHE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAGO,OAHPe,EAGO,CAFLf,EAAyE,OAAA,CAAnE,SAAM,QAAgBG,KAAI,OAAO,IAAI,CAAA,CAAA,IAAKA,EAAAC,CAAA,EAAI,OAAO,IAAI,EAAA,CAAA,EAC/DJ,EAA0F,OAA1FgB,EAA0FF,EAAnBpB,EAAA,KAAS,EAAA,CAAA,CAAA,MAG1ES,EAAAA,EAAAc,CAAA,IAAAd,MAAAA,EAAK,cAAfL,EAQK,KAAAoB,EAAA,CAPHhB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAKO,OALPmB,EAKO,CAJLnB,EAAyB,IAAA,KAAAc,EAAnBX,EAAAc,CAAA,EAAI,QAAQ,EAAA,CAAA,cAClBjB,EAEO,OAAA,CAFD,MAAM,OAAO,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,4DAElD,EAAA,EAAA,eAGJA,EAKK,KAAA,KAAA,CAJHE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAmC,OAAA,CAA7B,MAAM,GAAA,EAAI,eAAY,EAAA,GAC5BA,EAEO,OAFPoB,EAEON,EADFX,EAAAC,CAAA,EAAI,OAAO,QAAUD,KAAI,OAAO,QAAQ,KAAI,MAAA,EAAA,CAAA,CAAA,GAGzCA,EAAAC,CAAA,EAAI,OAAO,aAArBN,EAUK,KAAAuB,EAAA,CATHnB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAOO,OAPPsB,EAOO,QANLxB,EAEOyB,EAAA,KAAAC,EAFWrB,KAAI,OAAO,QAAQ,SAAxBsB,QAAb3B,EAEO,OAAA,CAFyC,IAAK2B,EAAG,MAAM,QAAQ,MAAA,CAAA,eAAA,KAAA,CAAA,IACjEA,CAAC,EAAA,CAAA,UAEOtB,EAAAC,CAAA,EAAI,OAAO,QAAQ,SAAS,qBAAzCN,EAEO,OAFP4B,EAA8D,yCAE9D,kBAGMvB,GAAAA,EAAAA,EAAAC,CAAA,EAAI,OAAO,UAAXD,YAAAA,EAAoB,aAApBA,MAAAA,EAAgC,YAA1CL,EAoBK,KAAA6B,EAAA,CAnBH3B,EAUO,OAVP4B,EAUO,iBAVS,eAEd,EAAA,GAAAjB,EAOWC,EAAA,CAPD,MAAM,gCAA8B,WAAC,IAG7C,iBAH6C,0JAG7C,EAAA,GAAgBT,EAAAC,CAAA,EAAI,OAAO,QAAQ,WAAW,KAAMyB,GAAMA,EAAE,QAAK,KAAA,OAAjE/B,EAGWyB,EAAA,CAAA,IAAA,GAAA,iBAHmE,mBAC7D,EAAA,GAAArB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgB,SAAb,YAAS,EAAA,mBAAI,6EAEjC,EAAA,EAAA,0BAGJA,EAOO,OAPP8B,EAOO,QANLhC,EAKMyB,EAAA,KAAAC,EALWrB,KAAI,OAAO,QAAQ,WAAxB0B,QAAZ/B,EAKM,MAAA,CAL2C,IAAK+B,EAAE,OAAA,GACtD7B,EAAwC,OAAxC+B,EAAmB,KAAEjB,EAAGe,EAAE,IAAI,EAAA,CAAA,EAC9B7B,EAEO,OAFPgC,EAEO,GAF2C,MAC9ClB,EAAGe,EAAE,OAAO,EAAA,CAAA,EAAmBA,EAAE,QAAK,WAAvB/B,EAAqEyB,EAAA,CAAA,IAAA,GAAA,GAAlC,yBAAuB,CAAA,0CAKzEpB,EAAAC,CAAA,EAAI,OAAO,aAArBN,EAMK,KAAAmC,EAAA,CALH/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAGO,OAHPkC,EAGO,QAFLpC,EAA6GyB,EAAA,KAAAC,EAA3FrB,KAAI,OAAO,QAAQ,SAAxBgC,QAAbrC,EAA6G,OAAA,CAA7D,IAAKqC,EAAG,MAAM,OAAO,MAAA,CAAA,eAAA,KAAA,CAAA,IAA6BA,CAAC,EAAA,CAAA,UACtFhC,EAAAC,CAAA,EAAI,OAAO,QAAQ,SAAS,qBAAzCN,EAAyE,OAAzEsC,EAA8D,MAAI,iBAGtEpC,EAQK,KAAA,KAAA,CAPHE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAKO,OALPqC,EAKO,CAJFC,EAAAxB,EAAAX,EAAAC,CAAA,EAAI,OAAO,KAAK,MAAM,EAAG,IAC5B,CAAA,EAAkBD,EAAAC,CAAA,EAAI,OAAO,KAAK,YAAlCC,EAEaC,EAAA,OAF8B,GAAE,gBAAkB,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,OAAA,aAAU,IAElG,CAAA,GAAAF,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFkG,WAElG,EAAA,CAAA,kCAGJF,EAGK,KAAA,KAAA,CAFHE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAAuD,OAAvDuC,EAAuDzB,EAApCX,EAAAC,CAAA,EAAI,OAAO,SAAS,MAAM,EAAA,CAAA,CAAA,GAE/CJ,EAA+F,KAAA,KAAA,CAA3FE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAwD,OAAxDwC,GAAwD1B,EAArCX,EAAAsC,CAAA,EAAMtC,EAAAC,CAAA,EAAI,OAAO,SAAS,CAAA,EAAA,CAAA,CAAA,GAC/EJ,EAA+F,KAAA,KAAA,CAA3FE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAwD,OAAxD0C,GAAwD5B,EAArCX,EAAAsC,CAAA,EAAMtC,EAAAC,CAAA,EAAI,OAAO,SAAS,CAAA,EAAA,CAAA,CAAA,WA1FnFN,EAAgF,IAAhF6C,EAAwC,sCAAoC"}
+{"version":3,"file":"OverviewTab-DY2wspdv.js","sources":["../../src/views/tabs/OverviewTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/** The resolved spec, summarised. Read-only — everything that acts lives on Danger. */\nimport { computed } from 'vue';\nimport { dep, isShared, row } from '../../composables/useDeployment';\nimport { stamp } from '../../composables/useFormat';\nimport SkeletonList from '../../components/SkeletonList.vue';\nimport InfoHint from '../../components/InfoHint.vue';\n\nconst kindBlurb = computed(() =>\n  isShared.value\n    ? 'a host singleton previews borrow — no axes, and down is guarded'\n    : 'one tenant, created and destroyed constantly, expected to leave nothing behind',\n);\n</script>\n\n<template>\n  <section class=\"panel\">\n    <div class=\"phead\">\n      <h2 class=\"section\">Resolved spec</h2>\n      <span class=\"grow\" />\n      <RouterLink v-if=\"dep.detail\" :to=\"`/submit?from=${encodeURIComponent(dep.id)}`\">\n        Duplicate\n      </RouterLink>\n      <span v-if=\"dep.detail\" class=\"mute\">·</span>\n      <RouterLink v-if=\"dep.detail\" :to=\"`/submit/${encodeURIComponent(dep.id)}`\">\n        Edit spec &amp; compose →\n      </RouterLink>\n    </div>\n\n    <SkeletonList v-if=\"!dep.detail && !dep.error\" :rows=\"5\" />\n    <p v-else-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n\n    <template v-else>\n      <ul class=\"kvlist\">\n        <li>\n          <span class=\"k\">\n            stack\n            <InfoHint label=\"the difference between id and stack\">\n              The <b>id</b> is what you named this deployment. The <b>stack</b> is what its spec\n              resolved to once the variables were filled in — the compose project name, the hostname\n              label, and <code>$STACK</code> inside every hook.\n            </InfoHint>\n          </span>\n          <span class=\"v mono\">{{ dep.detail.stack || '—' }}</span>\n        </li>\n        <li>\n          <span class=\"k\">kind</span>\n          <span class=\"v\">\n            <span class=\"badge\" :class=\"dep.detail.kind\">{{ dep.detail.kind }}</span>\n            <span class=\"mute\" style=\"margin-left: 8px; font-size: var(--t-sm)\">{{ kindBlurb }}</span>\n          </span>\n        </li>\n        <li v-if=\"row?.specName\">\n          <span class=\"k\">spec</span>\n          <span class=\"v\">\n            <b>{{ row.specName }}</b>\n            <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n              — stored, and shared with any other deployment using it\n            </span>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">compose file</span>\n          <span class=\"v mono\">\n            {{ dep.detail.compose ? dep.detail.compose.file : 'none' }}\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose\">\n          <span class=\"k\">profiles</span>\n          <span class=\"v\">\n            <span v-for=\"p in dep.detail.compose.profiles\" :key=\"p\" class=\"badge\" style=\"margin-right: 4px\">\n              {{ p }}\n            </span>\n            <span v-if=\"!dep.detail.compose.profiles.length\" class=\"mute\">\n              none — a bare up starts every service\n            </span>\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose?.subdomains?.length\">\n          <span class=\"k\">\n            subdomains\n            <InfoHint label=\"how wildcard subdomains work\">\n              Anything one label under these hosts reaches the same service the bare host does.\n              An exact hostname you route yourself always wins over the wildcard.\n              <template v-if=\"dep.detail.compose.subdomains.some((s) => s.depth === 'any')\">\n                A route marked <b>any depth</b> works over HTTP only — no TLS certificate can cover\n                more than one label.\n              </template>\n            </InfoHint>\n          </span>\n          <span class=\"v\">\n            <div v-for=\"s in dep.detail.compose.subdomains\" :key=\"s.profile\">\n              <span class=\"mono\">*.{{ s.host }}</span>\n              <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n                → {{ s.profile }}<template v-if=\"s.depth === 'any'\"> · any depth, HTTP only</template>\n              </span>\n            </div>\n          </span>\n        </li>\n        <li v-if=\"dep.detail.compose\">\n          <span class=\"k\">overlays</span>\n          <span class=\"v\">\n            <span v-for=\"o in dep.detail.compose.overlays\" :key=\"o\" class=\"mono\" style=\"margin-right: 8px\">{{ o }}</span>\n            <span v-if=\"!dep.detail.compose.overlays.length\" class=\"mute\">none</span>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">axes</span>\n          <span class=\"v\">\n            {{ dep.detail.axes.length }}\n            <RouterLink v-if=\"dep.detail.axes.length\" :to=\"`/deployments/${encodeURIComponent(dep.id)}/axes`\">\n              view →\n            </RouterLink>\n          </span>\n        </li>\n        <li>\n          <span class=\"k\">requires</span>\n          <span class=\"v\">{{ dep.detail.requires.length }}</span>\n        </li>\n        <li><span class=\"k\">created</span><span class=\"v\">{{ stamp(dep.detail.createdAt) }}</span></li>\n        <li><span class=\"k\">updated</span><span class=\"v\">{{ stamp(dep.detail.updatedAt) }}</span></li>\n      </ul>\n    </template>\n  </section>\n</template>\n"],"names":["kindBlurb","computed","isShared","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_cache","_unref","dep","_createBlock","_component_RouterLink","_hoisted_3","SkeletonList","_hoisted_5","_hoisted_6","_createVNode","InfoHint","_hoisted_7","_toDisplayString","_hoisted_8","_hoisted_9","row","_hoisted_10","_hoisted_11","_hoisted_12","_hoisted_13","_hoisted_14","_Fragment","_renderList","p","_hoisted_15","_hoisted_16","_hoisted_17","s","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","o","_hoisted_23","_hoisted_24","_createTextVNode","_hoisted_25","_hoisted_26","stamp","_hoisted_27","_hoisted_4"],"mappings":"46BAQA,MAAMA,EAAYC,EAAS,IACzBC,EAAS,MACL,kEACA,gFAAA,mDAKJ,OAAAC,EAAA,EAAAC,EA2GU,UA3GVC,EA2GU,CA1GRC,EAUM,MAVNC,EAUM,CATJC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAsC,KAAA,CAAlC,MAAM,SAAA,EAAU,gBAAa,EAAA,eACjCA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACAG,EAAAC,CAAA,EAAI,YAAtBC,EAEaC,EAAA,OAFkB,GAAE,gBAAkB,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,EAAA,aAAK,IAEjF,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFiF,cAEjF,EAAA,CAAA,8BACYC,EAAAC,CAAA,EAAI,YAAhBN,EAA6C,OAA7CS,EAAqC,GAAC,YACpBJ,EAAAC,CAAA,EAAI,YAAtBC,EAEaC,EAAA,OAFkB,GAAE,WAAa,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,EAAA,aAAK,IAE5E,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAF4E,0BAE5E,EAAA,CAAA,gCAGmB,CAAAC,EAAAC,CAAA,EAAI,QAAM,CAAKD,EAAAC,CAAA,EAAI,WAAxCC,EAA2DG,EAAA,OAAX,KAAM,CAAA,IACvCL,EAAAC,CAAA,EAAI,QAGjBP,IAAAC,EAwFK,KAxFLW,EAwFK,CAvFHT,EAUK,KAAA,KAAA,CATHA,EAOO,OAPPU,EAOO,eAPS,UAEd,EAAA,GAAAC,EAIWC,EAAA,CAJD,MAAM,uCAAqC,WAAC,IAChD,CAAA,GAAAV,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADgD,QAChD,EAAA,EAAAF,EAAS,SAAN,KAAE,EAAA,IAAI,2CAAwC,EAAA,EAAAA,EAAY,SAAT,QAAK,EAAA,IAAI,uHAEtD,EAAA,EAAAA,EAAmB,YAAb,SAAM,EAAA,IAAO,uBAChC,EAAA,CAAA,aAEFA,EAAyD,OAAzDa,EAAyDC,EAAjCX,KAAI,OAAO,OAAK,GAAA,EAAA,CAAA,CAAA,GAE1CH,EAMK,KAAA,KAAA,CALHE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAGO,OAHPe,EAGO,CAFLf,EAAyE,OAAA,CAAnE,SAAM,QAAgBG,KAAI,OAAO,IAAI,CAAA,CAAA,IAAKA,EAAAC,CAAA,EAAI,OAAO,IAAI,EAAA,CAAA,EAC/DJ,EAA0F,OAA1FgB,EAA0FF,EAAnBpB,EAAA,KAAS,EAAA,CAAA,CAAA,MAG1ES,EAAAA,EAAAc,CAAA,IAAAd,MAAAA,EAAK,cAAfL,EAQK,KAAAoB,EAAA,CAPHhB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAKO,OALPmB,EAKO,CAJLnB,EAAyB,IAAA,KAAAc,EAAnBX,EAAAc,CAAA,EAAI,QAAQ,EAAA,CAAA,cAClBjB,EAEO,OAAA,CAFD,MAAM,OAAO,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,4DAElD,EAAA,EAAA,eAGJA,EAKK,KAAA,KAAA,CAJHE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAmC,OAAA,CAA7B,MAAM,GAAA,EAAI,eAAY,EAAA,GAC5BA,EAEO,OAFPoB,EAEON,EADFX,EAAAC,CAAA,EAAI,OAAO,QAAUD,KAAI,OAAO,QAAQ,KAAI,MAAA,EAAA,CAAA,CAAA,GAGzCA,EAAAC,CAAA,EAAI,OAAO,aAArBN,EAUK,KAAAuB,EAAA,CATHnB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAOO,OAPPsB,EAOO,QANLxB,EAEOyB,EAAA,KAAAC,EAFWrB,KAAI,OAAO,QAAQ,SAAxBsB,QAAb3B,EAEO,OAAA,CAFyC,IAAK2B,EAAG,MAAM,QAAQ,MAAA,CAAA,eAAA,KAAA,CAAA,IACjEA,CAAC,EAAA,CAAA,UAEOtB,EAAAC,CAAA,EAAI,OAAO,QAAQ,SAAS,qBAAzCN,EAEO,OAFP4B,EAA8D,yCAE9D,kBAGMvB,GAAAA,EAAAA,EAAAC,CAAA,EAAI,OAAO,UAAXD,YAAAA,EAAoB,aAApBA,MAAAA,EAAgC,YAA1CL,EAoBK,KAAA6B,EAAA,CAnBH3B,EAUO,OAVP4B,EAUO,iBAVS,eAEd,EAAA,GAAAjB,EAOWC,EAAA,CAPD,MAAM,gCAA8B,WAAC,IAG7C,iBAH6C,0JAG7C,EAAA,GAAgBT,EAAAC,CAAA,EAAI,OAAO,QAAQ,WAAW,KAAMyB,GAAMA,EAAE,QAAK,KAAA,OAAjE/B,EAGWyB,EAAA,CAAA,IAAA,GAAA,iBAHmE,mBAC7D,EAAA,GAAArB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgB,SAAb,YAAS,EAAA,mBAAI,6EAEjC,EAAA,EAAA,0BAGJA,EAOO,OAPP8B,EAOO,QANLhC,EAKMyB,EAAA,KAAAC,EALWrB,KAAI,OAAO,QAAQ,WAAxB0B,QAAZ/B,EAKM,MAAA,CAL2C,IAAK+B,EAAE,OAAA,GACtD7B,EAAwC,OAAxC+B,EAAmB,KAAEjB,EAAGe,EAAE,IAAI,EAAA,CAAA,EAC9B7B,EAEO,OAFPgC,EAEO,GAF2C,MAC9ClB,EAAGe,EAAE,OAAO,EAAA,CAAA,EAAmBA,EAAE,QAAK,WAAvB/B,EAAqEyB,EAAA,CAAA,IAAA,GAAA,GAAlC,yBAAuB,CAAA,0CAKzEpB,EAAAC,CAAA,EAAI,OAAO,aAArBN,EAMK,KAAAmC,EAAA,CALH/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAGO,OAHPkC,EAGO,QAFLpC,EAA6GyB,EAAA,KAAAC,EAA3FrB,KAAI,OAAO,QAAQ,SAAxBgC,QAAbrC,EAA6G,OAAA,CAA7D,IAAKqC,EAAG,MAAM,OAAO,MAAA,CAAA,eAAA,KAAA,CAAA,IAA6BA,CAAC,EAAA,CAAA,UACtFhC,EAAAC,CAAA,EAAI,OAAO,QAAQ,SAAS,qBAAzCN,EAAyE,OAAzEsC,EAA8D,MAAI,iBAGtEpC,EAQK,KAAA,KAAA,CAPHE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2B,OAAA,CAArB,MAAM,GAAA,EAAI,OAAI,EAAA,GACpBA,EAKO,OALPqC,EAKO,CAJFC,EAAAxB,EAAAX,EAAAC,CAAA,EAAI,OAAO,KAAK,MAAM,EAAG,IAC5B,CAAA,EAAkBD,EAAAC,CAAA,EAAI,OAAO,KAAK,YAAlCC,EAEaC,EAAA,OAF8B,GAAE,gBAAkB,mBAAmBH,EAAAC,CAAA,EAAI,EAAE,CAAA,OAAA,aAAU,IAElG,CAAA,GAAAF,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFkG,WAElG,EAAA,CAAA,kCAGJF,EAGK,KAAA,KAAA,CAFHE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,OAAA,CAAzB,MAAM,GAAA,EAAI,WAAQ,EAAA,GACxBA,EAAuD,OAAvDuC,EAAuDzB,EAApCX,EAAAC,CAAA,EAAI,OAAO,SAAS,MAAM,EAAA,CAAA,CAAA,GAE/CJ,EAA+F,KAAA,KAAA,CAA3FE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAwD,OAAxDwC,GAAwD1B,EAArCX,EAAAsC,CAAA,EAAMtC,EAAAC,CAAA,EAAI,OAAO,SAAS,CAAA,EAAA,CAAA,CAAA,GAC/EJ,EAA+F,KAAA,KAAA,CAA3FE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAwD,OAAxD0C,GAAwD5B,EAArCX,EAAAsC,CAAA,EAAMtC,EAAAC,CAAA,EAAI,OAAO,SAAS,CAAA,EAAA,CAAA,CAAA,WA1FnFN,EAAgF,IAAhF6C,EAAwC,sCAAoC"}

package/dist/assets/{RegistriesView-CfblUxVo.js → RegistriesView-629Zecpw.js}

@@ -1,2 +1,2 @@
-import{d as E,c as i,a as t,f as s,e as h,w as m,_ as D,x,g as d,t as u,F as H,s as P,i as _,v as C,u as U,R as S,r as a,C as O,A as $,B as A,o as n,N as R}from"./index-jLPJ82ve.js";import{_ as B}from"./ActionButton.vue_vue_type_script_setup_true_lang-C0iLjBml.js";import{_ as F}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DjEWoD0O.js";import{_ as z}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DiCGtn2a.js";import{_ as L}from"./HelpModal.vue_vue_type_script_setup_true_lang-CACw-lfW.js";import"./Teleport-SesEhfqH.js";const M={class:"page-head"},W={class:"sub"},q={key:1,class:"banner failed"},G={key:2,class:"banner warn"},J={class:"mono"},K={class:"panel"},Q={class:"phead"},X={key:0,class:"mute break",style:{"font-size":"var(--t-sm)"}},Y={class:"mute"},Z={key:1,class:"kvlist"},ee={class:"k break",style:{width:"220px"}},te={class:"v row"},se={key:0,class:"badge warn"},oe={key:2,class:"mute"},ne={class:"panel"},le={class:"dim"},ae={class:"field",style:{"max-width":"380px"}},ie={class:"field",style:{"max-width":"380px"}},re={class:"field",style:{"max-width":"380px"}},de={class:"row",style:{"margin-top":"var(--s4)"}},ue={key:0,class:"mute"},pe={class:"hint"},ve={class:"mono"},we=E({__name:"RegistriesView",setup(ce){const k=a([]),b=a([]),g=a(""),V=a(null),N=a(!1),p=a(""),r=a(""),v=a(""),c=a(""),f=a(!1),y=a(""),T=O(()=>!!S.token&&!f.value&&!!r.value&&!!v.value&&!!c.value);async function w(){const o=await $.get("/api/registries");if(N.value=!0,!o.ok){p.value=A(o,"load the registry credentials");return}p.value="",k.value=o.body.entries??[],b.value=o.body.helpers??[],g.value=o.body.dir??"",V.value=o.body.writable??!1}w();async function I(){f.value=!0,y.value="";const o=await $.put(`/api/registries/${encodeURIComponent(r.value)}`,{username:v.value,password:c.value});if(f.value=!1,!o.ok){y.value=A(o,"store this credential");return}c.value="";const e=o.body.registry;e&&e!==r.value?R("ok",`Stored for ${e} — Docker Hub's canonical key.`):R("ok",`Stored for ${e||r.value}. It applies to the next pull.`),r.value="",v.value="",w()}async function j(o){const e=await $.del(`/api/registries/${encodeURIComponent(o)}`);if(!e.ok){p.value=A(e,"forget this credential");return}R("ok",`Forgot ${o}.`),w()}return(o,e)=>(n(),i("div",null,[t("div",M,[t("div",null,[e[5]||(e[5]=t("h1",null,"Registries",-1)),t("div",W,[e[4]||(e[4]=s(" Credentials for pulling private images ",-1)),h(D,{label:"why a host login is not enough"},{default:m(()=>[...e[3]||(e[3]=[s(" A pull is authenticated by the docker ",-1),t("em",null,"client",-1),s(", not the daemon: it reads its own ",-1),t("code",null,"config.json",-1),s(" and hands the credential over. pstack's client runs inside the control container, so a ",-1),t("code",null,"docker login",-1),s(" on the host writes a file it cannot see — and the pull fails on a host that is logged in. ",-1)])]),_:1})])])]),p.value?(n(),x(F,{key:0,text:p.value,title:"Could not load the registry credentials."},null,8,["text"])):d("",!0),V.value===!1?(n(),i("div",q,[e[8]||(e[8]=t("b",null,"Credentials cannot be saved here yet.",-1)),t("p",null,[e[7]||(e[7]=s(" Re-run setup on the host — it is safe to repeat. ",-1)),h(L,{title:"Why this happens"},{default:m(()=>[...e[6]||(e[6]=[t("p",null," Saving a credential needs a writable directory that the control stack only started providing in version 0.7.0. A host set up before then does not have it, so this page can list credentials but not add one. ",-1),t("p",null," Re-running setup is safe to repeat and recreates the control containers with the directory in place. Nothing already stored is lost. ",-1)])]),_:1})])])):d("",!0),b.value.length?(n(),i("div",G,[e[11]||(e[11]=t("b",null,"This file uses a credential helper, which will not work here.",-1)),t("p",null,[e[9]||(e[9]=s(" Found: ",-1)),t("span",J,u(b.value.join(", ")),1),e[10]||(e[10]=s(". A helper keeps the secret outside the file — in an OS keychain, usually — and the helper binary does not exist in this container, so pulls from private registries will fail. Add the credential below instead, which stores it in the file. ",-1))])])):d("",!0),t("section",K,[t("div",Q,[e[12]||(e[12]=t("h2",{class:"section"},"Stored",-1)),e[13]||(e[13]=t("span",{class:"grow"},null,-1)),g.value?(n(),i("span",X,[t("span",Y,u(g.value),1)])):d("",!0)]),N.value?k.value.length?(n(),i("ul",Z,[(n(!0),i(H,null,P(k.value,l=>(n(),i("li",{key:l.registry},[t("span",ee,[t("b",null,u(l.registry),1)]),t("span",te,[t("span",null,u(l.username??"unknown user"),1),l.viaHelper?(n(),i("span",se,"via helper")):d("",!0),e[15]||(e[15]=t("span",{class:"grow"},null,-1)),h(B,{disabled:!U(S).token,variant:"danger",onClick:fe=>j(l.registry)},{default:m(()=>[...e[14]||(e[14]=[s(" Forget ",-1)])]),_:1},8,["disabled","onClick"])])]))),128))])):(n(),i("p",oe," Nothing stored. Public images need no credential — this is only for a private registry. ")):(n(),x(z,{key:0,rows:2}))]),t("section",ne,[e[26]||(e[26]=t("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Add a credential",-1)),t("p",le,[e[17]||(e[17]=s(" Applies to the ",-1)),e[18]||(e[18]=t("b",null,"next pull",-1)),e[19]||(e[19]=s(" — nothing needs restarting. ",-1)),h(D,{label:"why no restart is needed"},{default:m(()=>[...e[16]||(e[16]=[s(" The docker client re-reads ",-1),t("code",null,"config.json",-1),s(" on every invocation, so there is no cache to bust. Storing one now is enough for a deploy started a second later. ",-1)])]),_:1})]),t("div",ae,[e[20]||(e[20]=t("label",{for:"host"},"Registry",-1)),_(t("input",{id:"host","onUpdate:modelValue":e[0]||(e[0]=l=>r.value=l),type:"text",placeholder:"ghcr.io",spellcheck:"false",autocomplete:"off"},null,512),[[C,r.value,void 0,{trim:!0}]]),e[21]||(e[21]=t("div",{class:"mute hint"}," Docker Hub is stored under its canonical key. ",-1))]),t("div",ie,[e[22]||(e[22]=t("label",{for:"user"},"Username",-1)),_(t("input",{id:"user","onUpdate:modelValue":e[1]||(e[1]=l=>v.value=l),type:"text",spellcheck:"false",autocomplete:"off"},null,512),[[C,v.value,void 0,{trim:!0}]])]),t("div",re,[e[23]||(e[23]=t("label",{for:"pass"},"Password or token",-1)),_(t("input",{id:"pass","onUpdate:modelValue":e[2]||(e[2]=l=>c.value=l),type:"password",autocomplete:"off",spellcheck:"false"},null,512),[[C,c.value]]),e[24]||(e[24]=t("div",{class:"mute hint"}," Prefer a token scoped to reading packages. Stored on the host as reversible base64, exactly as Stored the same way a terminal login stores it — never sent back to this page. ",-1))]),y.value?(n(),x(F,{key:0,text:y.value,title:"Could not store this credential."},null,8,["text"])):d("",!0),t("div",de,[h(B,{variant:"primary",pending:f.value,disabled:!T.value,onClick:I},{default:m(()=>[s(u(f.value?"Storing…":"Store"),1)]),_:1},8,["pending","disabled"]),U(S).token?d("",!0):(n(),i("span",ue,"Storing needs an access token."))]),t("p",pe,[e[25]||(e[25]=s(" Or from the host, which writes the same file: ",-1)),t("span",ve,"docker login --config "+u(g.value||"<DATA_DIR>/control/docker")+" <registry>",1)])])]))}});export{we as default};
-//# sourceMappingURL=RegistriesView-CfblUxVo.js.map
+import{d as E,c as i,a as t,f as s,e as h,w as m,_ as D,x,g as d,t as u,F as H,s as P,i as _,v as C,u as U,R as S,r as a,C as O,A as $,B as A,o as n,N as R}from"./index-CSRA6my_.js";import{_ as B}from"./ActionButton.vue_vue_type_script_setup_true_lang-Dxrs5ae4.js";import{_ as F}from"./ErrorNote.vue_vue_type_script_setup_true_lang-BDF65M8c.js";import{_ as z}from"./SkeletonList.vue_vue_type_script_setup_true_lang-ChGnSMn4.js";import{_ as L}from"./HelpModal.vue_vue_type_script_setup_true_lang-Ct07tZdh.js";import"./Teleport-BANiI1QS.js";const M={class:"page-head"},W={class:"sub"},q={key:1,class:"banner failed"},G={key:2,class:"banner warn"},J={class:"mono"},K={class:"panel"},Q={class:"phead"},X={key:0,class:"mute break",style:{"font-size":"var(--t-sm)"}},Y={class:"mute"},Z={key:1,class:"kvlist"},ee={class:"k break",style:{width:"220px"}},te={class:"v row"},se={key:0,class:"badge warn"},oe={key:2,class:"mute"},ne={class:"panel"},le={class:"dim"},ae={class:"field",style:{"max-width":"380px"}},ie={class:"field",style:{"max-width":"380px"}},re={class:"field",style:{"max-width":"380px"}},de={class:"row",style:{"margin-top":"var(--s4)"}},ue={key:0,class:"mute"},pe={class:"hint"},ve={class:"mono"},we=E({__name:"RegistriesView",setup(ce){const k=a([]),b=a([]),g=a(""),V=a(null),N=a(!1),p=a(""),r=a(""),v=a(""),c=a(""),f=a(!1),y=a(""),T=O(()=>!!S.token&&!f.value&&!!r.value&&!!v.value&&!!c.value);async function w(){const o=await $.get("/api/registries");if(N.value=!0,!o.ok){p.value=A(o,"load the registry credentials");return}p.value="",k.value=o.body.entries??[],b.value=o.body.helpers??[],g.value=o.body.dir??"",V.value=o.body.writable??!1}w();async function I(){f.value=!0,y.value="";const o=await $.put(`/api/registries/${encodeURIComponent(r.value)}`,{username:v.value,password:c.value});if(f.value=!1,!o.ok){y.value=A(o,"store this credential");return}c.value="";const e=o.body.registry;e&&e!==r.value?R("ok",`Stored for ${e} — Docker Hub's canonical key.`):R("ok",`Stored for ${e||r.value}. It applies to the next pull.`),r.value="",v.value="",w()}async function j(o){const e=await $.del(`/api/registries/${encodeURIComponent(o)}`);if(!e.ok){p.value=A(e,"forget this credential");return}R("ok",`Forgot ${o}.`),w()}return(o,e)=>(n(),i("div",null,[t("div",M,[t("div",null,[e[5]||(e[5]=t("h1",null,"Registries",-1)),t("div",W,[e[4]||(e[4]=s(" Credentials for pulling private images ",-1)),h(D,{label:"why a host login is not enough"},{default:m(()=>[...e[3]||(e[3]=[s(" A pull is authenticated by the docker ",-1),t("em",null,"client",-1),s(", not the daemon: it reads its own ",-1),t("code",null,"config.json",-1),s(" and hands the credential over. pstack's client runs inside the control container, so a ",-1),t("code",null,"docker login",-1),s(" on the host writes a file it cannot see — and the pull fails on a host that is logged in. ",-1)])]),_:1})])])]),p.value?(n(),x(F,{key:0,text:p.value,title:"Could not load the registry credentials."},null,8,["text"])):d("",!0),V.value===!1?(n(),i("div",q,[e[8]||(e[8]=t("b",null,"Credentials cannot be saved here yet.",-1)),t("p",null,[e[7]||(e[7]=s(" Re-run setup on the host — it is safe to repeat. ",-1)),h(L,{title:"Why this happens"},{default:m(()=>[...e[6]||(e[6]=[t("p",null," Saving a credential needs a writable directory that the control stack only started providing in version 0.7.0. A host set up before then does not have it, so this page can list credentials but not add one. ",-1),t("p",null," Re-running setup is safe to repeat and recreates the control containers with the directory in place. Nothing already stored is lost. ",-1)])]),_:1})])])):d("",!0),b.value.length?(n(),i("div",G,[e[11]||(e[11]=t("b",null,"This file uses a credential helper, which will not work here.",-1)),t("p",null,[e[9]||(e[9]=s(" Found: ",-1)),t("span",J,u(b.value.join(", ")),1),e[10]||(e[10]=s(". A helper keeps the secret outside the file — in an OS keychain, usually — and the helper binary does not exist in this container, so pulls from private registries will fail. Add the credential below instead, which stores it in the file. ",-1))])])):d("",!0),t("section",K,[t("div",Q,[e[12]||(e[12]=t("h2",{class:"section"},"Stored",-1)),e[13]||(e[13]=t("span",{class:"grow"},null,-1)),g.value?(n(),i("span",X,[t("span",Y,u(g.value),1)])):d("",!0)]),N.value?k.value.length?(n(),i("ul",Z,[(n(!0),i(H,null,P(k.value,l=>(n(),i("li",{key:l.registry},[t("span",ee,[t("b",null,u(l.registry),1)]),t("span",te,[t("span",null,u(l.username??"unknown user"),1),l.viaHelper?(n(),i("span",se,"via helper")):d("",!0),e[15]||(e[15]=t("span",{class:"grow"},null,-1)),h(B,{disabled:!U(S).token,variant:"danger",onClick:fe=>j(l.registry)},{default:m(()=>[...e[14]||(e[14]=[s(" Forget ",-1)])]),_:1},8,["disabled","onClick"])])]))),128))])):(n(),i("p",oe," Nothing stored. Public images need no credential — this is only for a private registry. ")):(n(),x(z,{key:0,rows:2}))]),t("section",ne,[e[26]||(e[26]=t("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Add a credential",-1)),t("p",le,[e[17]||(e[17]=s(" Applies to the ",-1)),e[18]||(e[18]=t("b",null,"next pull",-1)),e[19]||(e[19]=s(" — nothing needs restarting. ",-1)),h(D,{label:"why no restart is needed"},{default:m(()=>[...e[16]||(e[16]=[s(" The docker client re-reads ",-1),t("code",null,"config.json",-1),s(" on every invocation, so there is no cache to bust. Storing one now is enough for a deploy started a second later. ",-1)])]),_:1})]),t("div",ae,[e[20]||(e[20]=t("label",{for:"host"},"Registry",-1)),_(t("input",{id:"host","onUpdate:modelValue":e[0]||(e[0]=l=>r.value=l),type:"text",placeholder:"ghcr.io",spellcheck:"false",autocomplete:"off"},null,512),[[C,r.value,void 0,{trim:!0}]]),e[21]||(e[21]=t("div",{class:"mute hint"}," Docker Hub is stored under its canonical key. ",-1))]),t("div",ie,[e[22]||(e[22]=t("label",{for:"user"},"Username",-1)),_(t("input",{id:"user","onUpdate:modelValue":e[1]||(e[1]=l=>v.value=l),type:"text",spellcheck:"false",autocomplete:"off"},null,512),[[C,v.value,void 0,{trim:!0}]])]),t("div",re,[e[23]||(e[23]=t("label",{for:"pass"},"Password or token",-1)),_(t("input",{id:"pass","onUpdate:modelValue":e[2]||(e[2]=l=>c.value=l),type:"password",autocomplete:"off",spellcheck:"false"},null,512),[[C,c.value]]),e[24]||(e[24]=t("div",{class:"mute hint"}," Prefer a token scoped to reading packages. Stored on the host as reversible base64, exactly as Stored the same way a terminal login stores it — never sent back to this page. ",-1))]),y.value?(n(),x(F,{key:0,text:y.value,title:"Could not store this credential."},null,8,["text"])):d("",!0),t("div",de,[h(B,{variant:"primary",pending:f.value,disabled:!T.value,onClick:I},{default:m(()=>[s(u(f.value?"Storing…":"Store"),1)]),_:1},8,["pending","disabled"]),U(S).token?d("",!0):(n(),i("span",ue,"Storing needs an access token."))]),t("p",pe,[e[25]||(e[25]=s(" Or from the host, which writes the same file: ",-1)),t("span",ve,"docker login --config "+u(g.value||"<DATA_DIR>/control/docker")+" <registry>",1)])])]))}});export{we as default};
+//# sourceMappingURL=RegistriesView-629Zecpw.js.map

package/dist/assets/{RegistriesView-CfblUxVo.js.map → RegistriesView-629Zecpw.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RegistriesView-CfblUxVo.js","sources":["../../src/views/RegistriesView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Private registry credentials.\n *\n * WHY THIS PAGE EXISTS. An image pull is authenticated by the **client**, not the daemon: `docker pull`\n * reads its own `config.json` and hands the credential to the daemon. pstack shells out to compose from\n * inside the control container, so a `docker login` on the host writes a file that client cannot see —\n * and a private image fails with `pull access denied` on a host that is demonstrably logged in.\n *\n * WRITE-ONLY, DELIBERATELY. A `config.json` entry is `base64(\"user:password\")` — reversible, not\n * encrypted. So there is no read path for it anywhere in the API, and this page shows hostnames and\n * usernames only. No reveal control, because the plaintext was never sent here; the same reasoning as\n * the masked variables. Re-entering a credential replaces it.\n *\n * The credential applies to the **next pull** — the CLI re-reads the file on every invocation, so\n * nothing needs restarting and there is no cache to bust. That is the property that makes \"add creds on\n * demand\" work at all, and it is stated on the page because otherwise the natural assumption is that a\n * redeploy is needed.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport type { RegistriesResponse, RegistryEntry } from '../api/types';\nimport { settings } from '../composables/useSettings';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport HelpModal from '../components/HelpModal.vue';\n\nconst entries = ref<RegistryEntry[]>([]);\nconst helpers = ref<string[]>([]);\nconst dir = ref('');\nconst writable = ref<boolean | null>(null);\nconst loaded = ref(false);\nconst listError = ref('');\n\nconst host = ref('');\nconst username = ref('');\nconst password = ref('');\nconst saving = ref(false);\nconst formError = ref('');\n\nconst canSave = computed(\n  () => !!settings.token && !saving.value && !!host.value && !!username.value && !!password.value,\n);\n\nasync function load(): Promise<void> {\n  const r = await api.get<RegistriesResponse>('/api/registries');\n  loaded.value = true;\n  if (!r.ok) {\n    listError.value = problem(r, 'load the registry credentials');\n    return;\n  }\n  listError.value = '';\n  entries.value = r.body.entries ?? [];\n  helpers.value = r.body.helpers ?? [];\n  dir.value = r.body.dir ?? '';\n  writable.value = r.body.writable ?? false;\n}\n\nvoid load();\n\nasync function save(): Promise<void> {\n  saving.value = true;\n  formError.value = '';\n  const r = await api.put<{ registry: string }>(\n    `/api/registries/${encodeURIComponent(host.value)}`,\n    { username: username.value, password: password.value },\n  );\n  saving.value = false;\n  if (!r.ok) {\n    formError.value = problem(r, 'store this credential');\n    return;\n  }\n  // Cleared immediately: there is no reason for a password to stay in a form field after it is stored,\n  // and the page cannot read it back to re-populate one.\n  password.value = '';\n  const stored = r.body.registry;\n  if (stored && stored !== host.value) {\n    // Docker Hub's canonical key differs from what anyone types; saying so avoids \"I stored it and it\n    // still is not used\".\n    toast('ok', `Stored for ${stored} — Docker Hub's canonical key.`);\n  } else {\n    toast('ok', `Stored for ${stored || host.value}. It applies to the next pull.`);\n  }\n  host.value = '';\n  username.value = '';\n  void load();\n}\n\nasync function forget(registry: string): Promise<void> {\n  const r = await api.del(`/api/registries/${encodeURIComponent(registry)}`);\n  if (!r.ok) {\n    listError.value = problem(r, 'forget this credential');\n    return;\n  }\n  toast('ok', `Forgot ${registry}.`);\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Registries</h1>\n        <div class=\"sub\">\n          Credentials for pulling private images\n          <InfoHint label=\"why a host login is not enough\">\n            A pull is authenticated by the docker <em>client</em>, not the daemon: it reads its own\n            <code>config.json</code> and hands the credential over. pstack's client runs inside the\n            control container, so a <code>docker login</code> on the host writes a file it cannot see —\n            and the pull fails on a host that is logged in.\n          </InfoHint>\n        </div>\n      </div>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not load the registry credentials.\" />\n\n    <div v-if=\"writable === false\" class=\"banner failed\">\n      <b>Credentials cannot be saved here yet.</b>\n      <p>\n        Re-run setup on the host — it is safe to repeat.\n        <HelpModal title=\"Why this happens\">\n          <p>\n            Saving a credential needs a writable directory that the control stack only started\n            providing in version 0.7.0. A host set up before then does not have it, so this page can\n            list credentials but not add one.\n          </p>\n          <p>\n            Re-running setup is safe to repeat and recreates the control containers with the\n            directory in place. Nothing already stored is lost.\n          </p>\n        </HelpModal>\n      </p>\n    </div>\n\n    <!--\n      The trap worth naming: a config.json copied from a laptop usually has credsStore and NO auths,\n      because the secrets are in the OS keychain. Inside the container that helper does not exist, so\n      every pull fails and an empty list looks like the reason.\n    -->\n    <div v-if=\"helpers.length\" class=\"banner warn\">\n      <b>This file uses a credential helper, which will not work here.</b>\n      <p>\n        Found: <span class=\"mono\">{{ helpers.join(', ') }}</span>. A helper keeps the secret outside the\n        file — in an OS keychain, usually — and the helper binary does not exist in this container, so\n        pulls from private registries will fail. Add the credential below instead, which\n        stores it in the file.\n      </p>\n    </div>\n\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Stored</h2>\n        <span class=\"grow\" />\n        <span v-if=\"dir\" class=\"mute break\" style=\"font-size: var(--t-sm)\"><span class=\"mute\">{{ dir }}</span></span>\n      </div>\n\n      <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n      <ul v-else-if=\"entries.length\" class=\"kvlist\">\n        <li v-for=\"e in entries\" :key=\"e.registry\">\n          <span class=\"k break\" style=\"width: 220px\"><b>{{ e.registry }}</b></span>\n          <span class=\"v row\">\n            <span>{{ e.username ?? 'unknown user' }}</span>\n            <span v-if=\"e.viaHelper\" class=\"badge warn\">via helper</span>\n            <span class=\"grow\" />\n            <ActionButton :disabled=\"!settings.token\" variant=\"danger\" @click=\"forget(e.registry)\">\n              Forget\n            </ActionButton>\n          </span>\n        </li>\n      </ul>\n      <p v-else class=\"mute\">\n        Nothing stored. Public images need no credential — this is only for a private registry.\n      </p>\n    </section>\n\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Add a credential</h2>\n\n      <p class=\"dim\">\n        Applies to the <b>next pull</b> — nothing needs restarting.\n        <InfoHint label=\"why no restart is needed\">\n          The docker client re-reads <code>config.json</code> on every invocation, so there is no cache\n          to bust. Storing one now is enough for a deploy started a second later.\n        </InfoHint>\n      </p>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"host\">Registry</label>\n        <input\n          id=\"host\"\n          v-model.trim=\"host\"\n          type=\"text\"\n          placeholder=\"ghcr.io\"\n          spellcheck=\"false\"\n          autocomplete=\"off\"\n        />\n        <div class=\"mute hint\">\n          Docker Hub is stored under its canonical key.\n        </div>\n      </div>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"user\">Username</label>\n        <input id=\"user\" v-model.trim=\"username\" type=\"text\" spellcheck=\"false\" autocomplete=\"off\" />\n      </div>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"pass\">Password or token</label>\n        <input id=\"pass\" v-model=\"password\" type=\"password\" autocomplete=\"off\" spellcheck=\"false\" />\n        <div class=\"mute hint\">\n          Prefer a token scoped to reading packages. Stored on the host as reversible base64, exactly as\n          Stored the same way a terminal login stores it — never sent back to this page.\n        </div>\n      </div>\n\n      <ErrorNote v-if=\"formError\" :text=\"formError\" title=\"Could not store this credential.\" />\n\n      <div class=\"row\" style=\"margin-top: var(--s4)\">\n        <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"!canSave\" @click=\"save\">\n          {{ saving ? 'Storing…' : 'Store' }}\n        </ActionButton>\n        <span v-if=\"!settings.token\" class=\"mute\">Storing needs an access token.</span>\n      </div>\n\n      <p class=\"hint\">\n        Or from the host, which writes the same file:\n        <span class=\"mono\">docker login --config {{ dir || '<DATA_DIR>/control/docker' }} &lt;registry&gt;</span>\n      </p>\n    </section>\n  </div>\n</template>\n"],"names":["entries","ref","helpers","dir","writable","loaded","listError","host","username","password","saving","formError","canSave","computed","settings","load","r","api","problem","save","stored","toast","forget","registry","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","_createBlock","ErrorNote","_openBlock","_hoisted_3","HelpModal","_hoisted_4","_hoisted_5","_toDisplayString","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_Fragment","_renderList","e","_hoisted_11","_hoisted_12","_hoisted_13","ActionButton","_unref","$event","_hoisted_14","SkeletonList","_hoisted_15","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23"],"mappings":"8tCA8BA,MAAMA,EAAUC,EAAqB,EAAE,EACjCC,EAAUD,EAAc,EAAE,EAC1BE,EAAMF,EAAI,EAAE,EACZG,EAAWH,EAAoB,IAAI,EACnCI,EAASJ,EAAI,EAAK,EAClBK,EAAYL,EAAI,EAAE,EAElBM,EAAON,EAAI,EAAE,EACbO,EAAWP,EAAI,EAAE,EACjBQ,EAAWR,EAAI,EAAE,EACjBS,EAAST,EAAI,EAAK,EAClBU,EAAYV,EAAI,EAAE,EAElBW,EAAUC,EACd,IAAM,CAAC,CAACC,EAAS,OAAS,CAACJ,EAAO,OAAS,CAAC,CAACH,EAAK,OAAS,CAAC,CAACC,EAAS,OAAS,CAAC,CAACC,EAAS,KAAA,EAG5F,eAAeM,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAAwB,iBAAiB,EAE7D,GADAZ,EAAO,MAAQ,GACX,CAACW,EAAE,GAAI,CACTV,EAAU,MAAQY,EAAQF,EAAG,+BAA+B,EAC5D,MACF,CACAV,EAAU,MAAQ,GAClBN,EAAQ,MAAQgB,EAAE,KAAK,SAAW,CAAA,EAClCd,EAAQ,MAAQc,EAAE,KAAK,SAAW,CAAA,EAClCb,EAAI,MAAQa,EAAE,KAAK,KAAO,GAC1BZ,EAAS,MAAQY,EAAE,KAAK,UAAY,EACtC,CAEKD,EAAA,EAEL,eAAeI,GAAsB,CACnCT,EAAO,MAAQ,GACfC,EAAU,MAAQ,GAClB,MAAMK,EAAI,MAAMC,EAAI,IAClB,mBAAmB,mBAAmBV,EAAK,KAAK,CAAC,GACjD,CAAE,SAAUC,EAAS,MAAO,SAAUC,EAAS,KAAA,CAAM,EAGvD,GADAC,EAAO,MAAQ,GACX,CAACM,EAAE,GAAI,CACTL,EAAU,MAAQO,EAAQF,EAAG,uBAAuB,EACpD,MACF,CAGAP,EAAS,MAAQ,GACjB,MAAMW,EAASJ,EAAE,KAAK,SAClBI,GAAUA,IAAWb,EAAK,MAG5Bc,EAAM,KAAM,cAAcD,CAAM,gCAAgC,EAEhEC,EAAM,KAAM,cAAcD,GAAUb,EAAK,KAAK,gCAAgC,EAEhFA,EAAK,MAAQ,GACbC,EAAS,MAAQ,GACZO,EAAA,CACP,CAEA,eAAeO,EAAOC,EAAiC,CACrD,MAAMP,EAAI,MAAMC,EAAI,IAAI,mBAAmB,mBAAmBM,CAAQ,CAAC,EAAE,EACzE,GAAI,CAACP,EAAE,GAAI,CACTV,EAAU,MAAQY,EAAQF,EAAG,wBAAwB,EACrD,MACF,CACAK,EAAM,KAAM,UAAUE,CAAQ,GAAG,EAC5BR,EAAA,CACP,mBAIES,EAmIM,MAAA,KAAA,CAlIJC,EAaM,MAbNC,EAaM,CAZJD,EAWM,MAAA,KAAA,CAVJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAmB,UAAf,aAAU,EAAA,GACdA,EAQM,MARNG,EAQM,eARW,2CAEf,EAAA,GAAAC,EAKWC,EAAA,CALD,MAAM,kCAAgC,WAAC,IACT,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADS,0CACT,EAAA,EAAAF,EAAe,UAAX,SAAM,EAAA,IAAK,sCACrD,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,2FACA,EAAA,EAAAA,EAAyB,YAAnB,eAAY,EAAA,IAAO,8FAEnD,EAAA,CAAA,iBAKWnB,EAAA,WAAjByB,EAAiGC,EAAA,OAApE,KAAM1B,EAAA,MAAW,MAAM,0CAAA,6BAEzCF,EAAA,QAAQ,IAAnB6B,IAAAT,EAgBM,MAhBNU,EAgBM,CAfJP,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA4C,SAAzC,wCAAqC,EAAA,GACxCA,EAaI,IAAA,KAAA,eAbD,qDAED,EAAA,GAAAI,EAUYM,EAAA,CAVD,MAAM,oBAAkB,WACjC,IAII,CAAA,GAAAR,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJJF,EAII,SAJD,kNAIH,EAAA,EACAA,EAGI,SAHD,yIAGH,EAAA,CAAA,yBAUKvB,EAAA,MAAQ,QAAnB+B,IAAAT,EAQM,MARNY,EAQM,CAPJT,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAoE,SAAjE,gEAA6D,EAAA,GAChEA,EAKI,IAAA,KAAA,eALD,WACM,EAAA,GAAAA,EAAkD,OAAlDY,EAAkDC,EAA5BpC,EAAA,MAAQ,KAAI,IAAA,CAAA,EAAA,CAAA,kBAAgB,kPAI3D,EAAA,EAAA,eAGFuB,EAwBU,UAxBVc,EAwBU,CAvBRd,EAIM,MAJNe,EAIM,CAHJb,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,KAAA,CAA3B,MAAM,SAAA,EAAU,SAAM,EAAA,iBAC1BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACNtB,EAAA,OAAZ8B,EAAA,EAAAT,EAA6G,OAA7GiB,EAA6G,CAA1ChB,EAAmC,OAAnCiB,EAAmCJ,EAAbnC,EAAA,KAAG,EAAA,CAAA,CAAA,eAGzEE,EAAA,MACNL,EAAA,MAAQ,QAAvBiC,EAAA,EAAAT,EAYK,KAZLmB,EAYK,QAXHnB,EAUKoB,EAAA,KAAAC,EAVW7C,EAAA,MAAL8C,QAAXtB,EAUK,KAAA,CAVqB,IAAKsB,EAAE,QAAA,GAC/BrB,EAAyE,OAAzEsB,GAAyE,CAA9BtB,EAAuB,IAAA,KAAAa,EAAjBQ,EAAE,QAAQ,EAAA,CAAA,CAAA,GAC3DrB,EAOO,OAPPuB,GAOO,CANLvB,EAA+C,OAAA,KAAAa,EAAtCQ,EAAE,UAAQ,cAAA,EAAA,CAAA,EACPA,EAAE,eAAdtB,EAA6D,OAA7DyB,GAA4C,YAAU,0BACtDxB,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAEeqB,EAAA,CAFA,SAAQ,CAAGC,EAAArC,CAAA,EAAS,MAAO,QAAQ,SAAU,QAAKsC,IAAE9B,EAAOwB,EAAE,QAAQ,CAAA,aAAG,IAEvF,CAAA,GAAAnB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFuF,WAEvF,EAAA,CAAA,wDAINH,EAEI,IAFJ6B,GAAuB,2FAEvB,QAhBAtB,EAAyCuB,EAAA,OAAX,KAAM,CAAA,GAgBpC,GAGF7B,EAqDU,UArDV8B,GAqDU,eApDR9B,EAA0E,KAAA,CAAtE,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,mBAAgB,EAAA,GAErEA,EAMI,IANJ+B,GAMI,iBANW,mBACE,EAAA,GAAA7B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgB,SAAb,YAAS,EAAA,mBAAI,gCAC/B,EAAA,GAAAI,EAGWC,EAAA,CAHD,MAAM,4BAA0B,WAAC,IACd,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GADc,+BACd,EAAA,EAAAF,EAAwB,YAAlB,cAAW,EAAA,IAAO,sHAErD,EAAA,CAAA,aAGFA,EAaM,MAbNgC,GAaM,CAZJ9B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkC,QAAA,CAA3B,IAAI,MAAA,EAAO,WAAQ,EAAA,KAC1BA,EAOE,QAAA,CANA,GAAG,4CACWlB,EAAI,MAAA6C,GAClB,KAAK,OACL,YAAY,UACZ,WAAW,QACX,aAAa,KAAA,gBAJC7C,EAAA,aAAN,CAAA,KAAR,EAAA,CAAmB,IAMrBoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAEM,MAAA,CAFD,MAAM,aAAY,kDAEvB,EAAA,EAAA,GAGFA,EAGM,MAHNiC,GAGM,CAFJ/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkC,QAAA,CAA3B,IAAI,MAAA,EAAO,WAAQ,EAAA,KAC1BA,EAA6F,QAAA,CAAtF,GAAG,4CAAqBjB,EAAQ,MAAA4C,GAAE,KAAK,OAAO,WAAW,QAAQ,aAAa,KAAA,gBAAtD5C,EAAA,aAAN,CAAA,KAAR,EAAA,CAAuB,MAG1CiB,EAOM,MAPNkC,GAOM,CANJhC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2C,QAAA,CAApC,IAAI,MAAA,EAAO,oBAAiB,EAAA,KACnCA,EAA4F,QAAA,CAArF,GAAG,4CAAgBhB,EAAQ,MAAA2C,GAAE,KAAK,WAAW,aAAa,MAAM,WAAW,OAAA,gBAAxD3C,EAAA,KAAQ,CAAA,GAClCkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAGM,MAAA,CAHD,MAAM,aAAY,kLAGvB,EAAA,EAAA,GAGed,EAAA,WAAjBoB,EAAyFC,EAAA,OAA5D,KAAMrB,EAAA,MAAW,MAAM,kCAAA,6BAEpDc,EAKM,MALNmC,GAKM,CAJJ/B,EAEeqB,EAAA,CAFD,QAAQ,UAAW,QAASxC,EAAA,MAAS,UAAWE,EAAA,MAAU,QAAOO,CAAA,aAC7E,IAAmC,KAAhCT,EAAA,MAAM,WAAA,OAAA,EAAA,CAAA,CAAA,kCAEEyC,EAAArC,CAAA,EAAS,oBAAtBU,EAA+E,OAA/EqC,GAA0C,gCAA8B,KAG1EpC,EAGI,IAHJqC,GAGI,iBAHY,kDAEd,EAAA,GAAArC,EAAyG,OAAzGsC,GAAmB,yBAAsBzB,EAAGnC,EAAA,oCAAqC,cAAiB,CAAA,CAAA"}
+{"version":3,"file":"RegistriesView-629Zecpw.js","sources":["../../src/views/RegistriesView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Private registry credentials.\n *\n * WHY THIS PAGE EXISTS. An image pull is authenticated by the **client**, not the daemon: `docker pull`\n * reads its own `config.json` and hands the credential to the daemon. pstack shells out to compose from\n * inside the control container, so a `docker login` on the host writes a file that client cannot see —\n * and a private image fails with `pull access denied` on a host that is demonstrably logged in.\n *\n * WRITE-ONLY, DELIBERATELY. A `config.json` entry is `base64(\"user:password\")` — reversible, not\n * encrypted. So there is no read path for it anywhere in the API, and this page shows hostnames and\n * usernames only. No reveal control, because the plaintext was never sent here; the same reasoning as\n * the masked variables. Re-entering a credential replaces it.\n *\n * The credential applies to the **next pull** — the CLI re-reads the file on every invocation, so\n * nothing needs restarting and there is no cache to bust. That is the property that makes \"add creds on\n * demand\" work at all, and it is stated on the page because otherwise the natural assumption is that a\n * redeploy is needed.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport type { RegistriesResponse, RegistryEntry } from '../api/types';\nimport { settings } from '../composables/useSettings';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport HelpModal from '../components/HelpModal.vue';\n\nconst entries = ref<RegistryEntry[]>([]);\nconst helpers = ref<string[]>([]);\nconst dir = ref('');\nconst writable = ref<boolean | null>(null);\nconst loaded = ref(false);\nconst listError = ref('');\n\nconst host = ref('');\nconst username = ref('');\nconst password = ref('');\nconst saving = ref(false);\nconst formError = ref('');\n\nconst canSave = computed(\n  () => !!settings.token && !saving.value && !!host.value && !!username.value && !!password.value,\n);\n\nasync function load(): Promise<void> {\n  const r = await api.get<RegistriesResponse>('/api/registries');\n  loaded.value = true;\n  if (!r.ok) {\n    listError.value = problem(r, 'load the registry credentials');\n    return;\n  }\n  listError.value = '';\n  entries.value = r.body.entries ?? [];\n  helpers.value = r.body.helpers ?? [];\n  dir.value = r.body.dir ?? '';\n  writable.value = r.body.writable ?? false;\n}\n\nvoid load();\n\nasync function save(): Promise<void> {\n  saving.value = true;\n  formError.value = '';\n  const r = await api.put<{ registry: string }>(\n    `/api/registries/${encodeURIComponent(host.value)}`,\n    { username: username.value, password: password.value },\n  );\n  saving.value = false;\n  if (!r.ok) {\n    formError.value = problem(r, 'store this credential');\n    return;\n  }\n  // Cleared immediately: there is no reason for a password to stay in a form field after it is stored,\n  // and the page cannot read it back to re-populate one.\n  password.value = '';\n  const stored = r.body.registry;\n  if (stored && stored !== host.value) {\n    // Docker Hub's canonical key differs from what anyone types; saying so avoids \"I stored it and it\n    // still is not used\".\n    toast('ok', `Stored for ${stored} — Docker Hub's canonical key.`);\n  } else {\n    toast('ok', `Stored for ${stored || host.value}. It applies to the next pull.`);\n  }\n  host.value = '';\n  username.value = '';\n  void load();\n}\n\nasync function forget(registry: string): Promise<void> {\n  const r = await api.del(`/api/registries/${encodeURIComponent(registry)}`);\n  if (!r.ok) {\n    listError.value = problem(r, 'forget this credential');\n    return;\n  }\n  toast('ok', `Forgot ${registry}.`);\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Registries</h1>\n        <div class=\"sub\">\n          Credentials for pulling private images\n          <InfoHint label=\"why a host login is not enough\">\n            A pull is authenticated by the docker <em>client</em>, not the daemon: it reads its own\n            <code>config.json</code> and hands the credential over. pstack's client runs inside the\n            control container, so a <code>docker login</code> on the host writes a file it cannot see —\n            and the pull fails on a host that is logged in.\n          </InfoHint>\n        </div>\n      </div>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not load the registry credentials.\" />\n\n    <div v-if=\"writable === false\" class=\"banner failed\">\n      <b>Credentials cannot be saved here yet.</b>\n      <p>\n        Re-run setup on the host — it is safe to repeat.\n        <HelpModal title=\"Why this happens\">\n          <p>\n            Saving a credential needs a writable directory that the control stack only started\n            providing in version 0.7.0. A host set up before then does not have it, so this page can\n            list credentials but not add one.\n          </p>\n          <p>\n            Re-running setup is safe to repeat and recreates the control containers with the\n            directory in place. Nothing already stored is lost.\n          </p>\n        </HelpModal>\n      </p>\n    </div>\n\n    <!--\n      The trap worth naming: a config.json copied from a laptop usually has credsStore and NO auths,\n      because the secrets are in the OS keychain. Inside the container that helper does not exist, so\n      every pull fails and an empty list looks like the reason.\n    -->\n    <div v-if=\"helpers.length\" class=\"banner warn\">\n      <b>This file uses a credential helper, which will not work here.</b>\n      <p>\n        Found: <span class=\"mono\">{{ helpers.join(', ') }}</span>. A helper keeps the secret outside the\n        file — in an OS keychain, usually — and the helper binary does not exist in this container, so\n        pulls from private registries will fail. Add the credential below instead, which\n        stores it in the file.\n      </p>\n    </div>\n\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Stored</h2>\n        <span class=\"grow\" />\n        <span v-if=\"dir\" class=\"mute break\" style=\"font-size: var(--t-sm)\"><span class=\"mute\">{{ dir }}</span></span>\n      </div>\n\n      <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n      <ul v-else-if=\"entries.length\" class=\"kvlist\">\n        <li v-for=\"e in entries\" :key=\"e.registry\">\n          <span class=\"k break\" style=\"width: 220px\"><b>{{ e.registry }}</b></span>\n          <span class=\"v row\">\n            <span>{{ e.username ?? 'unknown user' }}</span>\n            <span v-if=\"e.viaHelper\" class=\"badge warn\">via helper</span>\n            <span class=\"grow\" />\n            <ActionButton :disabled=\"!settings.token\" variant=\"danger\" @click=\"forget(e.registry)\">\n              Forget\n            </ActionButton>\n          </span>\n        </li>\n      </ul>\n      <p v-else class=\"mute\">\n        Nothing stored. Public images need no credential — this is only for a private registry.\n      </p>\n    </section>\n\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Add a credential</h2>\n\n      <p class=\"dim\">\n        Applies to the <b>next pull</b> — nothing needs restarting.\n        <InfoHint label=\"why no restart is needed\">\n          The docker client re-reads <code>config.json</code> on every invocation, so there is no cache\n          to bust. Storing one now is enough for a deploy started a second later.\n        </InfoHint>\n      </p>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"host\">Registry</label>\n        <input\n          id=\"host\"\n          v-model.trim=\"host\"\n          type=\"text\"\n          placeholder=\"ghcr.io\"\n          spellcheck=\"false\"\n          autocomplete=\"off\"\n        />\n        <div class=\"mute hint\">\n          Docker Hub is stored under its canonical key.\n        </div>\n      </div>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"user\">Username</label>\n        <input id=\"user\" v-model.trim=\"username\" type=\"text\" spellcheck=\"false\" autocomplete=\"off\" />\n      </div>\n\n      <div class=\"field\" style=\"max-width: 380px\">\n        <label for=\"pass\">Password or token</label>\n        <input id=\"pass\" v-model=\"password\" type=\"password\" autocomplete=\"off\" spellcheck=\"false\" />\n        <div class=\"mute hint\">\n          Prefer a token scoped to reading packages. Stored on the host as reversible base64, exactly as\n          Stored the same way a terminal login stores it — never sent back to this page.\n        </div>\n      </div>\n\n      <ErrorNote v-if=\"formError\" :text=\"formError\" title=\"Could not store this credential.\" />\n\n      <div class=\"row\" style=\"margin-top: var(--s4)\">\n        <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"!canSave\" @click=\"save\">\n          {{ saving ? 'Storing…' : 'Store' }}\n        </ActionButton>\n        <span v-if=\"!settings.token\" class=\"mute\">Storing needs an access token.</span>\n      </div>\n\n      <p class=\"hint\">\n        Or from the host, which writes the same file:\n        <span class=\"mono\">docker login --config {{ dir || '<DATA_DIR>/control/docker' }} &lt;registry&gt;</span>\n      </p>\n    </section>\n  </div>\n</template>\n"],"names":["entries","ref","helpers","dir","writable","loaded","listError","host","username","password","saving","formError","canSave","computed","settings","load","r","api","problem","save","stored","toast","forget","registry","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","_createBlock","ErrorNote","_openBlock","_hoisted_3","HelpModal","_hoisted_4","_hoisted_5","_toDisplayString","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_Fragment","_renderList","e","_hoisted_11","_hoisted_12","_hoisted_13","ActionButton","_unref","$event","_hoisted_14","SkeletonList","_hoisted_15","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23"],"mappings":"8tCA8BA,MAAMA,EAAUC,EAAqB,EAAE,EACjCC,EAAUD,EAAc,EAAE,EAC1BE,EAAMF,EAAI,EAAE,EACZG,EAAWH,EAAoB,IAAI,EACnCI,EAASJ,EAAI,EAAK,EAClBK,EAAYL,EAAI,EAAE,EAElBM,EAAON,EAAI,EAAE,EACbO,EAAWP,EAAI,EAAE,EACjBQ,EAAWR,EAAI,EAAE,EACjBS,EAAST,EAAI,EAAK,EAClBU,EAAYV,EAAI,EAAE,EAElBW,EAAUC,EACd,IAAM,CAAC,CAACC,EAAS,OAAS,CAACJ,EAAO,OAAS,CAAC,CAACH,EAAK,OAAS,CAAC,CAACC,EAAS,OAAS,CAAC,CAACC,EAAS,KAAA,EAG5F,eAAeM,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAAwB,iBAAiB,EAE7D,GADAZ,EAAO,MAAQ,GACX,CAACW,EAAE,GAAI,CACTV,EAAU,MAAQY,EAAQF,EAAG,+BAA+B,EAC5D,MACF,CACAV,EAAU,MAAQ,GAClBN,EAAQ,MAAQgB,EAAE,KAAK,SAAW,CAAA,EAClCd,EAAQ,MAAQc,EAAE,KAAK,SAAW,CAAA,EAClCb,EAAI,MAAQa,EAAE,KAAK,KAAO,GAC1BZ,EAAS,MAAQY,EAAE,KAAK,UAAY,EACtC,CAEKD,EAAA,EAEL,eAAeI,GAAsB,CACnCT,EAAO,MAAQ,GACfC,EAAU,MAAQ,GAClB,MAAMK,EAAI,MAAMC,EAAI,IAClB,mBAAmB,mBAAmBV,EAAK,KAAK,CAAC,GACjD,CAAE,SAAUC,EAAS,MAAO,SAAUC,EAAS,KAAA,CAAM,EAGvD,GADAC,EAAO,MAAQ,GACX,CAACM,EAAE,GAAI,CACTL,EAAU,MAAQO,EAAQF,EAAG,uBAAuB,EACpD,MACF,CAGAP,EAAS,MAAQ,GACjB,MAAMW,EAASJ,EAAE,KAAK,SAClBI,GAAUA,IAAWb,EAAK,MAG5Bc,EAAM,KAAM,cAAcD,CAAM,gCAAgC,EAEhEC,EAAM,KAAM,cAAcD,GAAUb,EAAK,KAAK,gCAAgC,EAEhFA,EAAK,MAAQ,GACbC,EAAS,MAAQ,GACZO,EAAA,CACP,CAEA,eAAeO,EAAOC,EAAiC,CACrD,MAAMP,EAAI,MAAMC,EAAI,IAAI,mBAAmB,mBAAmBM,CAAQ,CAAC,EAAE,EACzE,GAAI,CAACP,EAAE,GAAI,CACTV,EAAU,MAAQY,EAAQF,EAAG,wBAAwB,EACrD,MACF,CACAK,EAAM,KAAM,UAAUE,CAAQ,GAAG,EAC5BR,EAAA,CACP,mBAIES,EAmIM,MAAA,KAAA,CAlIJC,EAaM,MAbNC,EAaM,CAZJD,EAWM,MAAA,KAAA,CAVJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAmB,UAAf,aAAU,EAAA,GACdA,EAQM,MARNG,EAQM,eARW,2CAEf,EAAA,GAAAC,EAKWC,EAAA,CALD,MAAM,kCAAgC,WAAC,IACT,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADS,0CACT,EAAA,EAAAF,EAAe,UAAX,SAAM,EAAA,IAAK,sCACrD,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,2FACA,EAAA,EAAAA,EAAyB,YAAnB,eAAY,EAAA,IAAO,8FAEnD,EAAA,CAAA,iBAKWnB,EAAA,WAAjByB,EAAiGC,EAAA,OAApE,KAAM1B,EAAA,MAAW,MAAM,0CAAA,6BAEzCF,EAAA,QAAQ,IAAnB6B,IAAAT,EAgBM,MAhBNU,EAgBM,CAfJP,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA4C,SAAzC,wCAAqC,EAAA,GACxCA,EAaI,IAAA,KAAA,eAbD,qDAED,EAAA,GAAAI,EAUYM,EAAA,CAVD,MAAM,oBAAkB,WACjC,IAII,CAAA,GAAAR,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJJF,EAII,SAJD,kNAIH,EAAA,EACAA,EAGI,SAHD,yIAGH,EAAA,CAAA,yBAUKvB,EAAA,MAAQ,QAAnB+B,IAAAT,EAQM,MARNY,EAQM,CAPJT,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAoE,SAAjE,gEAA6D,EAAA,GAChEA,EAKI,IAAA,KAAA,eALD,WACM,EAAA,GAAAA,EAAkD,OAAlDY,EAAkDC,EAA5BpC,EAAA,MAAQ,KAAI,IAAA,CAAA,EAAA,CAAA,kBAAgB,kPAI3D,EAAA,EAAA,eAGFuB,EAwBU,UAxBVc,EAwBU,CAvBRd,EAIM,MAJNe,EAIM,CAHJb,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+B,KAAA,CAA3B,MAAM,SAAA,EAAU,SAAM,EAAA,iBAC1BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACNtB,EAAA,OAAZ8B,EAAA,EAAAT,EAA6G,OAA7GiB,EAA6G,CAA1ChB,EAAmC,OAAnCiB,EAAmCJ,EAAbnC,EAAA,KAAG,EAAA,CAAA,CAAA,eAGzEE,EAAA,MACNL,EAAA,MAAQ,QAAvBiC,EAAA,EAAAT,EAYK,KAZLmB,EAYK,QAXHnB,EAUKoB,EAAA,KAAAC,EAVW7C,EAAA,MAAL8C,QAAXtB,EAUK,KAAA,CAVqB,IAAKsB,EAAE,QAAA,GAC/BrB,EAAyE,OAAzEsB,GAAyE,CAA9BtB,EAAuB,IAAA,KAAAa,EAAjBQ,EAAE,QAAQ,EAAA,CAAA,CAAA,GAC3DrB,EAOO,OAPPuB,GAOO,CANLvB,EAA+C,OAAA,KAAAa,EAAtCQ,EAAE,UAAQ,cAAA,EAAA,CAAA,EACPA,EAAE,eAAdtB,EAA6D,OAA7DyB,GAA4C,YAAU,0BACtDxB,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAEeqB,EAAA,CAFA,SAAQ,CAAGC,EAAArC,CAAA,EAAS,MAAO,QAAQ,SAAU,QAAKsC,IAAE9B,EAAOwB,EAAE,QAAQ,CAAA,aAAG,IAEvF,CAAA,GAAAnB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFuF,WAEvF,EAAA,CAAA,wDAINH,EAEI,IAFJ6B,GAAuB,2FAEvB,QAhBAtB,EAAyCuB,EAAA,OAAX,KAAM,CAAA,GAgBpC,GAGF7B,EAqDU,UArDV8B,GAqDU,eApDR9B,EAA0E,KAAA,CAAtE,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,mBAAgB,EAAA,GAErEA,EAMI,IANJ+B,GAMI,iBANW,mBACE,EAAA,GAAA7B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgB,SAAb,YAAS,EAAA,mBAAI,gCAC/B,EAAA,GAAAI,EAGWC,EAAA,CAHD,MAAM,4BAA0B,WAAC,IACd,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GADc,+BACd,EAAA,EAAAF,EAAwB,YAAlB,cAAW,EAAA,IAAO,sHAErD,EAAA,CAAA,aAGFA,EAaM,MAbNgC,GAaM,CAZJ9B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkC,QAAA,CAA3B,IAAI,MAAA,EAAO,WAAQ,EAAA,KAC1BA,EAOE,QAAA,CANA,GAAG,4CACWlB,EAAI,MAAA6C,GAClB,KAAK,OACL,YAAY,UACZ,WAAW,QACX,aAAa,KAAA,gBAJC7C,EAAA,aAAN,CAAA,KAAR,EAAA,CAAmB,IAMrBoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAEM,MAAA,CAFD,MAAM,aAAY,kDAEvB,EAAA,EAAA,GAGFA,EAGM,MAHNiC,GAGM,CAFJ/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkC,QAAA,CAA3B,IAAI,MAAA,EAAO,WAAQ,EAAA,KAC1BA,EAA6F,QAAA,CAAtF,GAAG,4CAAqBjB,EAAQ,MAAA4C,GAAE,KAAK,OAAO,WAAW,QAAQ,aAAa,KAAA,gBAAtD5C,EAAA,aAAN,CAAA,KAAR,EAAA,CAAuB,MAG1CiB,EAOM,MAPNkC,GAOM,CANJhC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2C,QAAA,CAApC,IAAI,MAAA,EAAO,oBAAiB,EAAA,KACnCA,EAA4F,QAAA,CAArF,GAAG,4CAAgBhB,EAAQ,MAAA2C,GAAE,KAAK,WAAW,aAAa,MAAM,WAAW,OAAA,gBAAxD3C,EAAA,KAAQ,CAAA,GAClCkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAGM,MAAA,CAHD,MAAM,aAAY,kLAGvB,EAAA,EAAA,GAGed,EAAA,WAAjBoB,EAAyFC,EAAA,OAA5D,KAAMrB,EAAA,MAAW,MAAM,kCAAA,6BAEpDc,EAKM,MALNmC,GAKM,CAJJ/B,EAEeqB,EAAA,CAFD,QAAQ,UAAW,QAASxC,EAAA,MAAS,UAAWE,EAAA,MAAU,QAAOO,CAAA,aAC7E,IAAmC,KAAhCT,EAAA,MAAM,WAAA,OAAA,EAAA,CAAA,CAAA,kCAEEyC,EAAArC,CAAA,EAAS,oBAAtBU,EAA+E,OAA/EqC,GAA0C,gCAA8B,KAG1EpC,EAGI,IAHJqC,GAGI,iBAHY,kDAEd,EAAA,GAAArC,EAAyG,OAAzGsC,GAAmB,yBAAsBzB,EAAGnC,EAAA,oCAAqC,cAAiB,CAAA,CAAA"}

package/dist/assets/{RelativeTime.vue_vue_type_script_setup_true_lang-Dx90hw4F.js → RelativeTime.vue_vue_type_script_setup_true_lang-BSyBq6iR.js}

@@ -1,2 +1,2 @@
-import{s as i,b as l}from"./useFormat-CKJxQp_i.js";import{d as r,Y as m,a4 as c,o as u,c as d,u as f,t as p,r as v,C as w}from"./index-jLPJ82ve.js";const D=["datetime","title"],I=15e3,C=r({__name:"RelativeTime",props:{at:{}},setup(e){const o=e,n=v(Date.now());let t=null,a=0;m(()=>{a++,t||(t=setInterval(()=>n.value=Date.now(),I))}),c(()=>{a--,a===0&&t&&(clearInterval(t),t=null)});const s=w(()=>(n.value,l(o.at)));return(S,_)=>(u(),d("time",{datetime:e.at?new Date(e.at).toISOString():void 0,title:f(i)(e.at)},p(s.value),9,D))}});export{C as _};
-//# sourceMappingURL=RelativeTime.vue_vue_type_script_setup_true_lang-Dx90hw4F.js.map
+import{s as i,b as l}from"./useFormat-CKJxQp_i.js";import{d as r,Y as m,a4 as c,o as u,c as d,u as f,t as p,r as v,C as w}from"./index-CSRA6my_.js";const D=["datetime","title"],I=15e3,C=r({__name:"RelativeTime",props:{at:{}},setup(e){const o=e,n=v(Date.now());let t=null,a=0;m(()=>{a++,t||(t=setInterval(()=>n.value=Date.now(),I))}),c(()=>{a--,a===0&&t&&(clearInterval(t),t=null)});const s=w(()=>(n.value,l(o.at)));return(S,_)=>(u(),d("time",{datetime:e.at?new Date(e.at).toISOString():void 0,title:f(i)(e.at)},p(s.value),9,D))}});export{C as _};
+//# sourceMappingURL=RelativeTime.vue_vue_type_script_setup_true_lang-BSyBq6iR.js.map

package/dist/assets/{RelativeTime.vue_vue_type_script_setup_true_lang-Dx90hw4F.js.map → RelativeTime.vue_vue_type_script_setup_true_lang-BSyBq6iR.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RelativeTime.vue_vue_type_script_setup_true_lang-Dx90hw4F.js","sources":["../../src/components/RelativeTime.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A timestamp that stays true — `2m ago` becomes `3m ago` without a reload.\n *\n * WHY NOT JUST CALL `ago()`. It is already correct at first render and wrong a minute later, and a\n * control plane is a page people leave open while watching a deploy. A relative time that silently\n * stops advancing is worse than an absolute one: it looks live and is not.\n *\n * ONE TICKER FOR THE WHOLE PAGE. A per-instance `setInterval` on a hundred-row job list is a\n * hundred timers waking the tab independently. This is a single module-level interval that bumps\n * one shared ref; every instance recomputes from it, and the interval only exists while at least\n * one instance is mounted.\n *\n * THE EXACT TIME IS NEVER LOST — it moves into `title`. \"3m ago\" is what you scan; the ISO stamp is\n * what you need the moment you are correlating with a log somewhere else, and throwing it away to\n * gain readability would be a bad trade.\n */\nimport { computed, onMounted, onUnmounted, ref } from 'vue';\nimport { ago, stamp } from '../composables/useFormat';\n\nconst props = defineProps<{ at: number | undefined }>();\n\nconst now = ref(Date.now());\nlet timer: ReturnType<typeof setInterval> | null = null;\nlet mounted = 0;\n\n/**\n * 15s, not 1s. The coarsest unit this renders is a minute, so ticking every second would repaint\n * sixty times to change a label once; 15s bounds the staleness to a quarter of the smallest unit,\n * which nobody can perceive.\n */\nconst TICK_MS = 15_000;\n\nonMounted(() => {\n  mounted++;\n  if (!timer) timer = setInterval(() => (now.value = Date.now()), TICK_MS);\n});\nonUnmounted(() => {\n  mounted--;\n  if (mounted === 0 && timer) {\n    clearInterval(timer);\n    timer = null;\n  }\n});\n\n// Reading `now` is what subscribes this instance to the ticker; `ago` itself calls Date.now().\nconst text = computed(() => (now.value, ago(props.at)));\n</script>\n\n<template>\n  <time :datetime=\"at ? new Date(at).toISOString() : undefined\" :title=\"stamp(at)\">{{ text }}</time>\n</template>\n"],"names":["TICK_MS","props","__props","now","ref","timer","mounted","onMounted","onUnmounted","text","computed","ago","_createElementBlock","_unref","stamp","_hoisted_1"],"mappings":"iLA+BMA,EAAU,uDAXhB,MAAMC,EAAQC,EAERC,EAAMC,EAAI,KAAK,IAAA,CAAK,EAC1B,IAAIC,EAA+C,KAC/CC,EAAU,EASdC,EAAU,IAAM,CACdD,IACKD,IAAOA,EAAQ,YAAY,IAAOF,EAAI,MAAQ,KAAK,IAAA,EAAQH,CAAO,EACzE,CAAC,EACDQ,EAAY,IAAM,CAChBF,IACIA,IAAY,GAAKD,IACnB,cAAcA,CAAK,EACnBA,EAAQ,KAEZ,CAAC,EAGD,MAAMI,EAAOC,EAAS,KAAOP,EAAI,MAAOQ,EAAIV,EAAM,EAAE,EAAE,oBAIpDW,EAAkG,OAAA,CAA3F,SAAUV,KAAE,IAAO,KAAKA,EAAA,EAAE,EAAE,YAAA,EAAgB,OAAY,MAAOW,EAAAC,CAAA,EAAMZ,EAAA,EAAE,CAAA,IAAMO,EAAA,KAAI,EAAA,EAAAM,CAAA"}
+{"version":3,"file":"RelativeTime.vue_vue_type_script_setup_true_lang-BSyBq6iR.js","sources":["../../src/components/RelativeTime.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A timestamp that stays true — `2m ago` becomes `3m ago` without a reload.\n *\n * WHY NOT JUST CALL `ago()`. It is already correct at first render and wrong a minute later, and a\n * control plane is a page people leave open while watching a deploy. A relative time that silently\n * stops advancing is worse than an absolute one: it looks live and is not.\n *\n * ONE TICKER FOR THE WHOLE PAGE. A per-instance `setInterval` on a hundred-row job list is a\n * hundred timers waking the tab independently. This is a single module-level interval that bumps\n * one shared ref; every instance recomputes from it, and the interval only exists while at least\n * one instance is mounted.\n *\n * THE EXACT TIME IS NEVER LOST — it moves into `title`. \"3m ago\" is what you scan; the ISO stamp is\n * what you need the moment you are correlating with a log somewhere else, and throwing it away to\n * gain readability would be a bad trade.\n */\nimport { computed, onMounted, onUnmounted, ref } from 'vue';\nimport { ago, stamp } from '../composables/useFormat';\n\nconst props = defineProps<{ at: number | undefined }>();\n\nconst now = ref(Date.now());\nlet timer: ReturnType<typeof setInterval> | null = null;\nlet mounted = 0;\n\n/**\n * 15s, not 1s. The coarsest unit this renders is a minute, so ticking every second would repaint\n * sixty times to change a label once; 15s bounds the staleness to a quarter of the smallest unit,\n * which nobody can perceive.\n */\nconst TICK_MS = 15_000;\n\nonMounted(() => {\n  mounted++;\n  if (!timer) timer = setInterval(() => (now.value = Date.now()), TICK_MS);\n});\nonUnmounted(() => {\n  mounted--;\n  if (mounted === 0 && timer) {\n    clearInterval(timer);\n    timer = null;\n  }\n});\n\n// Reading `now` is what subscribes this instance to the ticker; `ago` itself calls Date.now().\nconst text = computed(() => (now.value, ago(props.at)));\n</script>\n\n<template>\n  <time :datetime=\"at ? new Date(at).toISOString() : undefined\" :title=\"stamp(at)\">{{ text }}</time>\n</template>\n"],"names":["TICK_MS","props","__props","now","ref","timer","mounted","onMounted","onUnmounted","text","computed","ago","_createElementBlock","_unref","stamp","_hoisted_1"],"mappings":"iLA+BMA,EAAU,uDAXhB,MAAMC,EAAQC,EAERC,EAAMC,EAAI,KAAK,IAAA,CAAK,EAC1B,IAAIC,EAA+C,KAC/CC,EAAU,EASdC,EAAU,IAAM,CACdD,IACKD,IAAOA,EAAQ,YAAY,IAAOF,EAAI,MAAQ,KAAK,IAAA,EAAQH,CAAO,EACzE,CAAC,EACDQ,EAAY,IAAM,CAChBF,IACIA,IAAY,GAAKD,IACnB,cAAcA,CAAK,EACnBA,EAAQ,KAEZ,CAAC,EAGD,MAAMI,EAAOC,EAAS,KAAOP,EAAI,MAAOQ,EAAIV,EAAM,EAAE,EAAE,oBAIpDW,EAAkG,OAAA,CAA3F,SAAUV,KAAE,IAAO,KAAKA,EAAA,EAAE,EAAE,YAAA,EAAgB,OAAY,MAAOW,EAAAC,CAAA,EAAMZ,EAAA,EAAE,CAAA,IAAMO,EAAA,KAAI,EAAA,EAAAM,CAAA"}

package/dist/assets/{RequiresTab-DKFeob92.js → RequiresTab-yCkkTv9T.js}

@@ -1,2 +1,2 @@
-import{d as o}from"./useDeployment-Bgo0U4-I.js";import{d as m,c as s,a as e,f as n,u as l,F as i,s as c,g as h,o as a,D as p,t as d}from"./index-jLPJ82ve.js";import"./useVars-VN9gYdR6.js";const y={class:"panel"},f={key:0,class:"mute"},_={class:"cards"},b={class:"stagger"},g={class:"name","data-label":"requirement"},k={class:"dim","data-label":"hint"},q={key:0},T=m({__name:"RequiresTab",setup(v){return(x,t)=>(a(),s("section",y,[t[3]||(t[3]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[n(" Requires "),e("span",{class:"mute"},"(checked before anything is created)")],-1)),l(o).detail?(a(),s(i,{key:1},[t[2]||(t[2]=e("p",{class:"hint",style:{margin:"0 0 var(--s3)"}},[n(" Preconditions run first, in order, and "),e("code",null,"up"),n(" stops at the first one that fails — by name, before a single resource exists. The "),e("code",null,"assert"),n(" command itself stays on the host; only the name and its authored hint are sent here. ")],-1)),e("table",_,[t[1]||(t[1]=e("thead",null,[e("tr",null,[e("th",null,"requirement"),e("th",null,"hint shown on failure")])],-1)),e("tbody",b,[(a(!0),s(i,null,c(l(o).detail.requires,(r,u)=>(a(),s("tr",{key:r.name,style:p({"--i":u})},[e("td",g,d(r.name),1),e("td",k,d(r.hint||"— (no hint authored)"),1)],4))),128)),l(o).detail.requires.length?h("",!0):(a(),s("tr",q,[...t[0]||(t[0]=[e("td",{colspan:"2",class:"mute"}," None declared — an isolated deployment that borrows shared infrastructure usually wants at least one. ",-1)])]))])])],64)):(a(),s("p",f,"Unavailable until the spec resolves."))]))}});export{T as default};
-//# sourceMappingURL=RequiresTab-DKFeob92.js.map
+import{d as o}from"./useDeployment-_b3SOnq-.js";import{d as m,c as s,a as e,f as n,u as l,F as i,s as c,g as h,o as a,D as p,t as d}from"./index-CSRA6my_.js";import"./useVars-VN9gYdR6.js";const y={class:"panel"},f={key:0,class:"mute"},_={class:"cards"},b={class:"stagger"},g={class:"name","data-label":"requirement"},k={class:"dim","data-label":"hint"},q={key:0},T=m({__name:"RequiresTab",setup(v){return(x,t)=>(a(),s("section",y,[t[3]||(t[3]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[n(" Requires "),e("span",{class:"mute"},"(checked before anything is created)")],-1)),l(o).detail?(a(),s(i,{key:1},[t[2]||(t[2]=e("p",{class:"hint",style:{margin:"0 0 var(--s3)"}},[n(" Preconditions run first, in order, and "),e("code",null,"up"),n(" stops at the first one that fails — by name, before a single resource exists. The "),e("code",null,"assert"),n(" command itself stays on the host; only the name and its authored hint are sent here. ")],-1)),e("table",_,[t[1]||(t[1]=e("thead",null,[e("tr",null,[e("th",null,"requirement"),e("th",null,"hint shown on failure")])],-1)),e("tbody",b,[(a(!0),s(i,null,c(l(o).detail.requires,(r,u)=>(a(),s("tr",{key:r.name,style:p({"--i":u})},[e("td",g,d(r.name),1),e("td",k,d(r.hint||"— (no hint authored)"),1)],4))),128)),l(o).detail.requires.length?h("",!0):(a(),s("tr",q,[...t[0]||(t[0]=[e("td",{colspan:"2",class:"mute"}," None declared — an isolated deployment that borrows shared infrastructure usually wants at least one. ",-1)])]))])])],64)):(a(),s("p",f,"Unavailable until the spec resolves."))]))}});export{T as default};
+//# sourceMappingURL=RequiresTab-yCkkTv9T.js.map

package/dist/assets/{RequiresTab-DKFeob92.js.map → RequiresTab-yCkkTv9T.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RequiresTab-DKFeob92.js","sources":["../../src/views/tabs/RequiresTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/** Preconditions: checked before anything is created, so a failure names a thing, not a stack trace. */\nimport { dep } from '../../composables/useDeployment';\n</script>\n\n<template>\n  <section class=\"panel\">\n    <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n      Requires <span class=\"mute\">(checked before anything is created)</span>\n    </h2>\n\n    <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n    <template v-else>\n      <p class=\"hint\" style=\"margin: 0 0 var(--s3)\">\n        Preconditions run first, in order, and <code>up</code> stops at the first one that fails —\n        by name, before a single resource exists. The <code>assert</code> command itself stays on\n        the host; only the name and its authored hint are sent here.\n      </p>\n\n      <table class=\"cards\">\n        <thead>\n          <tr>\n            <th>requirement</th>\n            <th>hint shown on failure</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(r, i) in dep.detail.requires\" :key=\"r.name\" :style=\"{ '--i': i }\">\n            <td class=\"name\" data-label=\"requirement\">{{ r.name }}</td>\n            <td class=\"dim\" data-label=\"hint\">{{ r.hint || '— (no hint authored)' }}</td>\n          </tr>\n          <tr v-if=\"!dep.detail.requires.length\">\n            <td colspan=\"2\" class=\"mute\">\n              None declared — an isolated deployment that borrows shared infrastructure usually\n              wants at least one.\n            </td>\n          </tr>\n        </tbody>\n      </table>\n    </template>\n  </section>\n</template>\n"],"names":["_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_unref","dep","_Fragment","_hoisted_3","_hoisted_4","_renderList","i","_hoisted_5","_toDisplayString","_hoisted_6","_hoisted_7","_cache","_hoisted_2"],"mappings":"4ZAMEA,EAAA,EAAAC,EAkCU,UAlCVC,EAkCU,aAjCRC,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,YAC1C,EAAAA,EAA8D,OAAA,CAAxD,MAAM,MAAA,EAAO,sCAAoC,CAAA,OAGxDC,EAAAC,CAAA,EAAI,YACdJ,EA2BWK,EAAA,CAAA,IAAA,GAAA,aA1BTH,EAII,IAAA,CAJD,MAAM,OAAO,MAAA,CAAA,OAAA,eAAA,CAAA,KAA8B,0CACL,EAAAA,EAAe,YAAT,IAAE,IAAO,qFACR,EAAAA,EAAmB,YAAb,QAAM,IAAO,wFAEnE,CAAA,OAEAA,EAmBQ,QAnBRI,EAmBQ,aAlBNJ,EAKQ,QAAA,KAAA,CAJNA,EAGK,KAAA,KAAA,CAFHA,EAAoB,UAAhB,aAAW,EACfA,EAA8B,UAA1B,uBAAqB,CAAA,SAG7BA,EAWQ,QAXRK,EAWQ,QAVNP,EAGKK,EAAA,KAAAG,EAHgBL,KAAI,OAAO,SAAQ,CAA5B,EAAGM,SAAfT,EAGK,KAAA,CAHsC,IAAK,EAAE,KAAO,eAAgBS,EAAC,CAAA,GACxEP,EAA2D,KAA3DQ,EAA2DC,EAAd,EAAE,IAAI,EAAA,CAAA,EACnDT,EAA6E,KAA7EU,EAA6ED,EAAxC,EAAE,MAAI,sBAAA,EAAA,CAAA,CAAA,aAElCR,EAAAC,CAAA,EAAI,OAAO,SAAS,qBAA/BJ,EAKK,KAAAa,EAAA,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJHZ,EAGK,KAAA,CAHD,QAAQ,IAAI,MAAM,MAAA,EAAO,0GAG7B,EAAA,CAAA,qBAxBRF,EAA2E,IAA3Ee,EAAmC,sCAAoC"}
+{"version":3,"file":"RequiresTab-yCkkTv9T.js","sources":["../../src/views/tabs/RequiresTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/** Preconditions: checked before anything is created, so a failure names a thing, not a stack trace. */\nimport { dep } from '../../composables/useDeployment';\n</script>\n\n<template>\n  <section class=\"panel\">\n    <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n      Requires <span class=\"mute\">(checked before anything is created)</span>\n    </h2>\n\n    <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n    <template v-else>\n      <p class=\"hint\" style=\"margin: 0 0 var(--s3)\">\n        Preconditions run first, in order, and <code>up</code> stops at the first one that fails —\n        by name, before a single resource exists. The <code>assert</code> command itself stays on\n        the host; only the name and its authored hint are sent here.\n      </p>\n\n      <table class=\"cards\">\n        <thead>\n          <tr>\n            <th>requirement</th>\n            <th>hint shown on failure</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(r, i) in dep.detail.requires\" :key=\"r.name\" :style=\"{ '--i': i }\">\n            <td class=\"name\" data-label=\"requirement\">{{ r.name }}</td>\n            <td class=\"dim\" data-label=\"hint\">{{ r.hint || '— (no hint authored)' }}</td>\n          </tr>\n          <tr v-if=\"!dep.detail.requires.length\">\n            <td colspan=\"2\" class=\"mute\">\n              None declared — an isolated deployment that borrows shared infrastructure usually\n              wants at least one.\n            </td>\n          </tr>\n        </tbody>\n      </table>\n    </template>\n  </section>\n</template>\n"],"names":["_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_unref","dep","_Fragment","_hoisted_3","_hoisted_4","_renderList","i","_hoisted_5","_toDisplayString","_hoisted_6","_hoisted_7","_cache","_hoisted_2"],"mappings":"4ZAMEA,EAAA,EAAAC,EAkCU,UAlCVC,EAkCU,aAjCRC,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,YAC1C,EAAAA,EAA8D,OAAA,CAAxD,MAAM,MAAA,EAAO,sCAAoC,CAAA,OAGxDC,EAAAC,CAAA,EAAI,YACdJ,EA2BWK,EAAA,CAAA,IAAA,GAAA,aA1BTH,EAII,IAAA,CAJD,MAAM,OAAO,MAAA,CAAA,OAAA,eAAA,CAAA,KAA8B,0CACL,EAAAA,EAAe,YAAT,IAAE,IAAO,qFACR,EAAAA,EAAmB,YAAb,QAAM,IAAO,wFAEnE,CAAA,OAEAA,EAmBQ,QAnBRI,EAmBQ,aAlBNJ,EAKQ,QAAA,KAAA,CAJNA,EAGK,KAAA,KAAA,CAFHA,EAAoB,UAAhB,aAAW,EACfA,EAA8B,UAA1B,uBAAqB,CAAA,SAG7BA,EAWQ,QAXRK,EAWQ,QAVNP,EAGKK,EAAA,KAAAG,EAHgBL,KAAI,OAAO,SAAQ,CAA5B,EAAGM,SAAfT,EAGK,KAAA,CAHsC,IAAK,EAAE,KAAO,eAAgBS,EAAC,CAAA,GACxEP,EAA2D,KAA3DQ,EAA2DC,EAAd,EAAE,IAAI,EAAA,CAAA,EACnDT,EAA6E,KAA7EU,EAA6ED,EAAxC,EAAE,MAAI,sBAAA,EAAA,CAAA,CAAA,aAElCR,EAAAC,CAAA,EAAI,OAAO,SAAS,qBAA/BJ,EAKK,KAAAa,EAAA,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJHZ,EAGK,KAAA,CAHD,QAAQ,IAAI,MAAM,MAAA,EAAO,0GAG7B,EAAA,CAAA,qBAxBRF,EAA2E,IAA3Ee,EAAmC,sCAAoC"}

package/dist/assets/{RoutingView-7SWVlOx8.js → RoutingView-DAkoZ5Kr.js}

@@ -1,4 +1,4 @@
-import{d as oe,c as o,a as t,f as n,e as c,w as f,_ as G,g as v,x as g,t as u,F as w,s as E,u as x,R as $,i as j,v as z,r,C as O,A as _,B as A,j as le,N as q,o as s,D as ne}from"./index-jLPJ82ve.js";import{s as ae}from"./useFormat-CKJxQp_i.js";import{_ as J}from"./ActionButton.vue_vue_type_script_setup_true_lang-C0iLjBml.js";import{_ as K}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DjEWoD0O.js";import{_ as Q}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DiCGtn2a.js";import{_ as ie}from"./HelpModal.vue_vue_type_script_setup_true_lang-CACw-lfW.js";import"./Teleport-SesEhfqH.js";const re={class:"page-head"},ue={class:"sub"},de={key:1,class:"banner info"},ve={class:"panel"},pe={class:"phead"},fe={class:"mute",style:{"font-size":"var(--t-sm)"}},ce={key:0,class:"banner warn"},me={key:1,class:"cards"},he={class:"stagger"},ye={"data-label":"url"},ke=["href"],be={key:1,class:"mono mute"},ge={key:0,class:"mute"},we={"data-label":"forwards to"},_e={key:0,class:"mono"},Te={key:1,class:"s-failed"},Ce={"data-label":"deployment"},Re={key:1,class:"mute"},xe={class:"dim","data-label":"router"},$e={key:2,class:"mute"},Ae={class:"panel"},Ne={class:"phead"},Le={key:0,class:"mute",style:{"font-size":"var(--t-sm)"}},Se={class:"mute"},Ie={key:0,class:"banner failed"},De={key:1,class:"banner info"},Pe={key:3,class:"kvlist"},Ue={class:"k"},Ve=["onClick"],Ee={class:"v mute",style:{"font-size":"var(--t-sm)"}},je={key:4,class:"mute"},ze={key:2,class:"panel"},Be={class:"phead"},Fe={class:"section"},We={key:0,class:"badge warn"},Me={key:0,class:"field",style:{"max-width":"340px"}},He={key:2,class:"banner plain"},Ge={class:"field"},Oe={class:"row",style:{"margin-top":"var(--s4)"}},qe={key:0,class:"mute"},Je={class:"field",style:{"max-width":"340px"}},Ke=["for"],Qe=["id","placeholder"],Xe={class:"row"},Ye=`http:
+import{d as oe,c as o,a as t,f as n,e as c,w as f,_ as G,g as v,x as g,t as u,F as w,s as E,u as x,R as $,i as j,v as z,r,C as O,A as _,B as A,j as le,N as q,o as s,D as ne}from"./index-CSRA6my_.js";import{s as ae}from"./useFormat-CKJxQp_i.js";import{_ as J}from"./ActionButton.vue_vue_type_script_setup_true_lang-Dxrs5ae4.js";import{_ as K}from"./ErrorNote.vue_vue_type_script_setup_true_lang-BDF65M8c.js";import{_ as Q}from"./SkeletonList.vue_vue_type_script_setup_true_lang-ChGnSMn4.js";import{_ as ie}from"./HelpModal.vue_vue_type_script_setup_true_lang-Ct07tZdh.js";import"./Teleport-BANiI1QS.js";const re={class:"page-head"},ue={class:"sub"},de={key:1,class:"banner info"},ve={class:"panel"},pe={class:"phead"},fe={class:"mute",style:{"font-size":"var(--t-sm)"}},ce={key:0,class:"banner warn"},me={key:1,class:"cards"},he={class:"stagger"},ye={"data-label":"url"},ke=["href"],be={key:1,class:"mono mute"},ge={key:0,class:"mute"},we={"data-label":"forwards to"},_e={key:0,class:"mono"},Te={key:1,class:"s-failed"},Ce={"data-label":"deployment"},Re={key:1,class:"mute"},xe={class:"dim","data-label":"router"},$e={key:2,class:"mute"},Ae={class:"panel"},Ne={class:"phead"},Le={key:0,class:"mute",style:{"font-size":"var(--t-sm)"}},Se={class:"mute"},Ie={key:0,class:"banner failed"},De={key:1,class:"banner info"},Pe={key:3,class:"kvlist"},Ue={class:"k"},Ve=["onClick"],Ee={class:"v mute",style:{"font-size":"var(--t-sm)"}},je={key:4,class:"mute"},ze={key:2,class:"panel"},Be={class:"phead"},Fe={class:"section"},We={key:0,class:"badge warn"},Me={key:0,class:"field",style:{"max-width":"340px"}},He={key:2,class:"banner plain"},Ge={class:"field"},Oe={class:"row",style:{"margin-top":"var(--s4)"}},qe={key:0,class:"mute"},Je={class:"field",style:{"max-width":"340px"}},Ke=["for"],Qe=["id","placeholder"],Xe={class:"row"},Ye=`http:
   middlewares:
     # An example — replace it. Middlewares go UNDER http; at the top level Traefik ignores them.
     ip-allow:
@@ -6,4 +6,4 @@ import{d as oe,c as o,a as t,f as n,e as c,w as f,_ as G,g as v,x as g,t as u,F
         sourceRange:
           - 203.0.113.0/24
 `,it=oe({__name:"RoutingView",setup(Ze){const N=r([]),L=r(null),S=r([]),I=r(""),D=r(null),B=r(!1),T=r(""),i=r(null),d=r(""),m=r(""),C=r(!1),P=r(!1),k=r(!1),p=r(""),R=r(""),h=r(null),y=r(""),F=O(()=>i.value!==null&&d.value!==m.value),X=O(()=>!!$.token&&!k.value&&d.value.trim().length>0&&(F.value||i.value===""));async function U(){const l=await _.get("/api/routing");if(B.value=!0,!l.ok){T.value=A(l,"load the routing files");return}T.value="",S.value=l.body.files??[],I.value=l.body.dir??"",D.value=l.body.writable??!1}async function Y(){const l=await _.get("/api/routing/live");if(!l.ok){L.value=!1;return}L.value=l.body.reachable,N.value=l.body.routes??[]}U(),Y();async function Z(l){i.value=l,P.value=!0,p.value="",C.value=!1,y.value="";const e=await _.getAuthed(`/api/routing/${encodeURIComponent(l)}`);if(P.value=!1,!e.ok){p.value=A(e,"open this file");return}if(e.body.sourceWithheld){C.value=!0,d.value="",m.value="";return}d.value=e.body.content??"",m.value=d.value}function ee(){i.value="",R.value="",d.value=Ye,m.value="",C.value=!1,p.value=""}function W(){i.value=null,d.value="",m.value="",p.value=""}async function M(){const l=i.value===""?R.value.trim():i.value;if(!l){p.value="Give the file a name, ending in .yml";return}k.value=!0,p.value="";const e=await _.put(`/api/routing/${encodeURIComponent(l)}`,{content:d.value});if(k.value=!1,!e.ok){p.value=A(e,"save this file");return}e.body.previous&&(h.value={name:l,content:e.body.previous}),m.value=d.value,i.value=l,q("ok",`Saved ${l}. Traefik reloads within a second or two.`),U()}async function te(){const l=h.value;l&&(d.value=l.content,i.value=l.name,await M(),h.value=null)}async function se(){const l=i.value;if(!l||y.value!==l)return;const e=await _.del(`/api/routing/${encodeURIComponent(l)}`);if(!e.ok){p.value=A(e,"delete this file");return}e.body.previous&&(h.value={name:l,content:e.body.previous}),q("ok",`Deleted ${l}.`),W(),U()}return(l,e)=>{const V=le("RouterLink");return s(),o("div",null,[t("div",re,[t("div",null,[t("h1",null,[e[4]||(e[4]=n(" Routing ",-1)),c(ie,{title:"How routing files work, and what can go wrong"},{default:f(()=>[...e[3]||(e[3]=[t("p",null,[t("b",null,"Traefik reads this directory as a whole."),n(" One file it cannot parse and it reports a problem for the "),t("em",null,"directory"),n(" — so the symptom is other, unrelated routes disappearing rather than an error about the file you just saved. ")],-1),t("p",null," Saves here are checked before they are written and replace the old file in one step, so a file that would break the directory never reaches Traefik in the first place. ",-1),t("p",null,[t("b",null,"This page cannot lock you out."),n(" It and the API are routed by their containers' own settings, not by these files — no save here can take away the page you would use to undo it. ")],-1),t("p",null," What belongs here: shared middleware (sign-in prompts, rate limits, address allow-lists), TLS options, the catch-all fallback, and routes to things running outside this host's previews. A single preview's own routes are not here — those travel with the deployment. ",-1)])]),_:1})]),t("div",ue,[e[6]||(e[6]=n(" Every route on this host, and the config files behind them ",-1)),c(G,{label:"what belongs in these files"},{default:f(()=>[...e[5]||(e[5]=[n(" Middleware (basic auth, rate limits, IP allow-lists), TLS options, the catch-all fallback router, and routes to anything running outside compose. Per-PR routers are not here — those are labels in each deployment's own compose file. ",-1)])]),_:1})])]),e[7]||(e[7]=t("span",{class:"grow"},null,-1)),D.value?(s(),o("button",{key:0,class:"btn primary",onClick:ee},"New file")):v("",!0)]),T.value?(s(),g(K,{key:0,text:T.value,title:"Could not load the routing files."},null,8,["text"])):v("",!0),h.value?(s(),o("div",de,[t("b",null,"Replaced "+u(h.value.name)+".",1),t("p",null,[e[8]||(e[8]=n(" The previous contents are still here for this session. ",-1)),t("button",{class:"btn sm",onClick:te},"Put it back")])])):v("",!0),t("section",ve,[t("div",pe,[e[11]||(e[11]=t("h2",{class:"section"},"Live routes",-1)),e[12]||(e[12]=t("span",{class:"grow"},null,-1)),t("span",fe,[e[10]||(e[10]=n(" from container labels ",-1)),c(G,{label:"why routes are not in the files below",align:"end"},{default:f(()=>[...e[9]||(e[9]=[n(" Traefik reads two providers. Per-PR routers are ",-1),t("b",null,"labels on containers",-1),n(", written by each deployment's own compose file — so deploying a stack changes this list and never the files. The files are the other provider: middleware, TLS options, the fallback router. ",-1)])]),_:1})])]),L.value===!1?(s(),o("div",ce,[...e[13]||(e[13]=[t("b",null,"Docker did not answer.",-1),t("p",null,"Routes could not be listed — which is not the same as there being none.",-1)])])):N.value.length?(s(),o("table",me,[e[14]||(e[14]=t("thead",null,[t("tr",null,[t("th",null,"url"),t("th",null,"forwards to"),t("th",null,"deployment"),t("th",null,"router")])],-1)),t("tbody",he,[(s(!0),o(w,null,E(N.value,(a,H)=>(s(),o("tr",{key:`${a.container}-${a.router}`,style:ne({"--i":H})},[t("td",ye,[(s(!0),o(w,null,E(a.hosts,b=>(s(),o("div",{key:b},[b.startsWith("(pattern)")?(s(),o("span",be,u(b),1)):(s(),o("a",{key:0,href:`https://${b}`,target:"_blank",rel:"noreferrer"},u(b),9,ke))]))),128)),a.hosts.length?v("",!0):(s(),o("span",ge,"no host in the rule"))]),t("td",we,[a.target?(s(),o("span",_e,u(a.target),1)):(s(),o("span",Te,u(a.port===null?"no port declared":"not on the ingress network"),1))]),t("td",Ce,[a.project?(s(),g(V,{key:0,to:`/deployments/${encodeURIComponent(a.project)}/runtime`},{default:f(()=>[n(u(a.project),1)]),_:2},1032,["to"])):(s(),o("span",Re,"—"))]),t("td",xe,u(a.router),1)],4))),128))])])):(s(),o("p",$e,[...e[15]||(e[15]=[n(" No container on this host declares a Traefik router. A deployment's routes come from labels in its own compose file — open a deployment's ",-1),t("b",null,"Containers & routes",-1),n(" tab to see what is missing. ",-1)])]))]),t("section",Ae,[t("div",Ne,[e[16]||(e[16]=t("h2",{class:"section"},"Config files",-1)),e[17]||(e[17]=t("span",{class:"grow"},null,-1)),I.value?(s(),o("span",Le,[t("span",Se,u(I.value),1)])):v("",!0)]),D.value===!1?(s(),o("div",Ie,[...e[18]||(e[18]=[t("b",null,"Read-only: the API cannot write to this directory.",-1),t("p",null," The control stack mounts it into the API from 0.4.0 onward. Re-run setup again on the host to pick up the mount — it is safe to repeat, and it recreates the control containers. ",-1)])])):x($).token?v("",!0):(s(),o("div",De,[e[22]||(e[22]=t("b",null,"Viewing needs a token too.",-1)),t("p",null,[e[20]||(e[20]=n(" These files hold basic-auth hashes and forward-auth URLs, so their contents are not served unauthenticated. ",-1)),c(V,{to:"/settings"},{default:f(()=>[...e[19]||(e[19]=[n("Add your token",-1)])]),_:1}),e[21]||(e[21]=n(". ",-1))])])),B.value?S.value.length?(s(),o("ul",Pe,[(s(!0),o(w,null,E(S.value,a=>(s(),o("li",{key:a.name},[t("span",Ue,[t("button",{class:"ghost sm",onClick:H=>Z(a.name)},u(a.name),9,Ve)]),t("span",Ee,u(a.size)+" bytes · "+u(x(ae)(a.updatedAt)),1)]))),128))])):(s(),o("p",je," No files yet. Everything is routed by container labels, which is a perfectly good place to be. ")):(s(),g(Q,{key:2,rows:3}))]),i.value!==null?(s(),o("section",ze,[t("div",Be,[t("h2",Fe,u(i.value===""?"New file":i.value),1),F.value?(s(),o("span",We,"unsaved")):v("",!0),e[23]||(e[23]=t("span",{class:"grow"},null,-1)),t("button",{class:"ghost sm",onClick:W},"Close")]),i.value===""?(s(),o("div",Me,[e[24]||(e[24]=t("label",{for:"fname"},"File name",-1)),j(t("input",{id:"fname","onUpdate:modelValue":e[0]||(e[0]=a=>R.value=a),type:"text",placeholder:"middleware.yml",spellcheck:"false",autocomplete:"off"},null,512),[[z,R.value,void 0,{trim:!0}]]),e[25]||(e[25]=t("div",{class:"mute hint"},[n("Lower case, ending in "),t("code",null,".yml"),n(".")],-1))])):v("",!0),P.value?(s(),g(Q,{key:1,rows:4})):C.value?(s(),o("div",He,[e[28]||(e[28]=t("b",null,"Hidden without an access token.",-1)),t("p",null,[c(V,{to:"/settings"},{default:f(()=>[...e[26]||(e[26]=[n("Add your token",-1)])]),_:1}),e[27]||(e[27]=n(" to read and edit this file. ",-1))])])):(s(),o(w,{key:3},[t("div",Ge,[e[29]||(e[29]=t("label",{for:"content"},"Contents",-1)),j(t("textarea",{id:"content","onUpdate:modelValue":e[1]||(e[1]=a=>d.value=a),rows:"18",spellcheck:"false"},null,512),[[z,d.value]])]),p.value?(s(),g(K,{key:0,text:p.value,title:"Traefik would not accept this."},null,8,["text"])):v("",!0),t("div",Oe,[c(J,{variant:"primary",pending:k.value,disabled:!X.value,onClick:M},{default:f(()=>[n(u(k.value?"Saving…":"Save"),1)]),_:1},8,["pending","disabled"]),x($).token?v("",!0):(s(),o("span",qe,"Saving needs a token."))]),i.value?(s(),o(w,{key:1},[e[33]||(e[33]=t("h2",{class:"section",style:{margin:"var(--s5) 0 var(--s3)"}},"Delete this file",-1)),e[34]||(e[34]=t("p",{class:"dim"}," Whatever it configures stops applying as soon as Traefik reloads. If it holds a router, those hostnames stop resolving to anything. ",-1)),t("div",Je,[t("label",{for:`confirm-${i.value}`},[e[30]||(e[30]=n(" Type ",-1)),t("b",null,u(i.value),1),e[31]||(e[31]=n(" to confirm ",-1))],8,Ke),j(t("input",{id:`confirm-${i.value}`,"onUpdate:modelValue":e[2]||(e[2]=a=>y.value=a),type:"text",placeholder:i.value,spellcheck:"false",autocomplete:"off"},null,8,Qe),[[z,y.value,void 0,{trim:!0}]])]),t("div",Xe,[c(J,{variant:"danger",disabled:y.value!==i.value||!x($).token,title:y.value!==i.value?"Type the file name to confirm.":void 0,onClick:se},{default:f(()=>[...e[32]||(e[32]=[n(" Delete ",-1)])]),_:1},8,["disabled","title"])])],64)):v("",!0)],64))])):v("",!0)])}}});export{it as default};
-//# sourceMappingURL=RoutingView-7SWVlOx8.js.map
+//# sourceMappingURL=RoutingView-DAkoZ5Kr.js.map

package/dist/assets/{RoutingView-7SWVlOx8.js.map → RoutingView-DAkoZ5Kr.js.map}

@@ -1 +1 @@
-{"version":3,"file":"RoutingView-7SWVlOx8.js","sources":["../../src/views/RoutingView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Traefik's dynamic configuration — the file list, and an editor.\n *\n * WHAT LIVES HERE. Traefik reads config from two providers: labels on containers (every per-PR router)\n * and a watched *directory* of files. This page is the directory: middleware (basic auth, rate limits,\n * IP allow-lists), TLS options, the catch-all fallback router, routes to something running outside\n * compose. Several files rather than one is the point of a watched directory — one file per concern.\n *\n * THE WARNING IS NOT DECORATION. Traefik's documented behaviour is that an unparseable file produces\n * a parse error for the whole DIRECTORY, and the rest can be discarded with it — so a careless save\n * here breaks *other people's* routes, not the file being edited. The server validates before writing\n * and renames into place so the watcher never sees a partial file, and every rejection is rendered\n * verbatim because it names the actual problem.\n *\n * What it cannot break: `control.<domain>` and `api.<domain>` are docker labels on the pstack\n * container, not file config. This page cannot lock you out of the page you would use to undo a bad\n * save. That is stated in the UI, because an operator hesitating over a save deserves to know it.\n *\n * `previous` from a save is an in-session undo. There is deliberately no history on disk: the obvious\n * place to keep it is the one directory that must contain nothing but dynamic config.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport type {\n  LiveRoutesResponse,\n  RoutingFile,\n  RoutingListResponse,\n  RoutingReadResponse,\n  RoutingWriteResponse,\n  RuntimeRoute,\n} from '../api/types';\nimport { settings } from '../composables/useSettings';\nimport { stamp } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport HelpModal from '../components/HelpModal.vue';\n\n/**\n * The live routes, from container labels.\n *\n * This page used to show only the file provider, and the reported confusion was exactly right: a\n * deployment goes up, its hostname appears, and nothing here changes — because per-PR routers are\n * DOCKER labels and the files below are Traefik's *other* provider. Showing both is what makes the\n * page match what \"routing\" means to whoever opened it.\n */\nconst live = ref<RuntimeRoute[]>([]);\nconst liveReachable = ref<boolean | null>(null);\n\nconst files = ref<RoutingFile[]>([]);\nconst dir = ref('');\nconst writable = ref<boolean | null>(null);\nconst loaded = ref(false);\nconst listError = ref('');\n\n/** The open file. `null` name means a new one. */\nconst openName = ref<string | null>(null);\nconst draft = ref('');\nconst original = ref('');\nconst withheld = ref(false);\nconst loadingFile = ref(false);\nconst saving = ref(false);\nconst fileError = ref('');\nconst newName = ref('');\n/** Last replaced content, offered as an undo for the rest of the session. */\nconst undo = ref<{ name: string; content: string } | null>(null);\nconst confirmDelete = ref('');\n\nconst dirty = computed(() => openName.value !== null && draft.value !== original.value);\nconst canSave = computed(\n  () => !!settings.token && !saving.value && draft.value.trim().length > 0 && (dirty.value || openName.value === ''),\n);\n\nconst STARTER = `http:\n  middlewares:\n    # An example — replace it. Middlewares go UNDER http; at the top level Traefik ignores them.\n    ip-allow:\n      ipAllowList:\n        sourceRange:\n          - 203.0.113.0/24\n`;\n\nasync function loadList(): Promise<void> {\n  const r = await api.get<RoutingListResponse>('/api/routing');\n  loaded.value = true;\n  if (!r.ok) {\n    listError.value = problem(r, 'load the routing files');\n    return;\n  }\n  listError.value = '';\n  files.value = r.body.files ?? [];\n  dir.value = r.body.dir ?? '';\n  writable.value = r.body.writable ?? false;\n}\n\nasync function loadLive(): Promise<void> {\n  const r = await api.get<LiveRoutesResponse>('/api/routing/live');\n  if (!r.ok) {\n    liveReachable.value = false;\n    return;\n  }\n  liveReachable.value = r.body.reachable;\n  live.value = r.body.routes ?? [];\n}\n\nvoid loadList();\nvoid loadLive();\n\nasync function open(name: string): Promise<void> {\n  openName.value = name;\n  loadingFile.value = true;\n  fileError.value = '';\n  withheld.value = false;\n  confirmDelete.value = '';\n  // Authenticated: dynamic config holds basic-auth hashes and forward-auth URLs.\n  const r = await api.getAuthed<RoutingReadResponse>(`/api/routing/${encodeURIComponent(name)}`);\n  loadingFile.value = false;\n  if (!r.ok) {\n    fileError.value = problem(r, 'open this file');\n    return;\n  }\n  if (r.body.sourceWithheld) {\n    withheld.value = true;\n    draft.value = '';\n    original.value = '';\n    return;\n  }\n  draft.value = r.body.content ?? '';\n  original.value = draft.value;\n}\n\nfunction startNew(): void {\n  openName.value = '';\n  newName.value = '';\n  draft.value = STARTER;\n  original.value = '';\n  withheld.value = false;\n  fileError.value = '';\n}\n\nfunction close(): void {\n  openName.value = null;\n  draft.value = '';\n  original.value = '';\n  fileError.value = '';\n}\n\nasync function save(): Promise<void> {\n  const name = openName.value === '' ? newName.value.trim() : openName.value;\n  if (!name) {\n    fileError.value = 'Give the file a name, ending in .yml';\n    return;\n  }\n  saving.value = true;\n  fileError.value = '';\n  const r = await api.put<RoutingWriteResponse>(`/api/routing/${encodeURIComponent(name)}`, {\n    content: draft.value,\n  });\n  saving.value = false;\n  if (!r.ok) {\n    // Rendered verbatim: the server's message names the unknown section or the YAML error, which is\n    // the whole diagnosis.\n    fileError.value = problem(r, 'save this file');\n    return;\n  }\n  if (r.body.previous) undo.value = { name, content: r.body.previous };\n  original.value = draft.value;\n  openName.value = name;\n  toast('ok', `Saved ${name}. Traefik reloads within a second or two.`);\n  void loadList();\n}\n\nasync function revert(): Promise<void> {\n  const u = undo.value;\n  if (!u) return;\n  draft.value = u.content;\n  openName.value = u.name;\n  await save();\n  undo.value = null;\n}\n\nasync function remove(): Promise<void> {\n  const name = openName.value;\n  if (!name || confirmDelete.value !== name) return;\n  const r = await api.del<RoutingWriteResponse>(`/api/routing/${encodeURIComponent(name)}`);\n  if (!r.ok) {\n    fileError.value = problem(r, 'delete this file');\n    return;\n  }\n  if (r.body.previous) undo.value = { name, content: r.body.previous };\n  toast('ok', `Deleted ${name}.`);\n  close();\n  void loadList();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>\n          Routing\n          <HelpModal title=\"How routing files work, and what can go wrong\">\n            <p>\n              <b>Traefik reads this directory as a whole.</b> One file it cannot parse and it reports a\n              problem for the <em>directory</em> — so the symptom is other, unrelated routes\n              disappearing rather than an error about the file you just saved.\n            </p>\n            <p>\n              Saves here are checked before they are written and replace the old file in one step, so a\n              file that would break the directory never reaches Traefik in the first place.\n            </p>\n            <p>\n              <b>This page cannot lock you out.</b> It and the API are routed by their containers'\n              own settings, not by these files — no save here can take away the page you would use to\n              undo it.\n            </p>\n            <p>\n              What belongs here: shared middleware (sign-in prompts, rate limits, address\n              allow-lists), TLS options, the catch-all fallback, and routes to things running outside\n              this host's previews. A single preview's own routes are not here — those travel with the\n              deployment.\n            </p>\n          </HelpModal>\n        </h1>\n        <div class=\"sub\">\n          Every route on this host, and the config files behind them\n          <InfoHint label=\"what belongs in these files\">\n            Middleware (basic auth, rate limits, IP allow-lists), TLS options, the catch-all fallback\n            router, and routes to anything running outside compose. Per-PR routers are not here —\n            those are labels in each deployment's own compose file.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <button v-if=\"writable\" class=\"btn primary\" @click=\"startNew\">New file</button>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not load the routing files.\" />\n\n    <div v-if=\"undo\" class=\"banner info\">\n      <b>Replaced {{ undo.name }}.</b>\n      <p>\n        The previous contents are still here for this session.\n        <button class=\"btn sm\" @click=\"revert\">Put it back</button>\n      </p>\n    </div>\n\n    <!-- ============================ live routes ============================ -->\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Live routes</h2>\n        <span class=\"grow\" />\n        <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n          from container labels\n          <InfoHint label=\"why routes are not in the files below\" align=\"end\">\n            Traefik reads two providers. Per-PR routers are <b>labels on containers</b>, written by each\n            deployment's own compose file — so deploying a stack changes this list and never the files.\n            The files are the other provider: middleware, TLS options, the fallback router.\n          </InfoHint>\n        </span>\n      </div>\n\n      <div v-if=\"liveReachable === false\" class=\"banner warn\">\n        <b>Docker did not answer.</b>\n        <p>Routes could not be listed — which is not the same as there being none.</p>\n      </div>\n\n      <table v-else-if=\"live.length\" class=\"cards\">\n        <thead>\n          <tr>\n            <th>url</th>\n            <th>forwards to</th>\n            <th>deployment</th>\n            <th>router</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(r, i) in live\" :key=\"`${r.container}-${r.router}`\" :style=\"{ '--i': i }\">\n            <td data-label=\"url\">\n              <div v-for=\"h in r.hosts\" :key=\"h\">\n                <a v-if=\"!h.startsWith('(pattern)')\" :href=\"`https://${h}`\" target=\"_blank\" rel=\"noreferrer\">\n                  {{ h }}\n                </a>\n                <span v-else class=\"mono mute\">{{ h }}</span>\n              </div>\n              <span v-if=\"!r.hosts.length\" class=\"mute\">no host in the rule</span>\n            </td>\n            <td data-label=\"forwards to\">\n              <span v-if=\"r.target\" class=\"mono\">{{ r.target }}</span>\n              <span v-else class=\"s-failed\">\n                {{ r.port === null ? 'no port declared' : 'not on the ingress network' }}\n              </span>\n            </td>\n            <td data-label=\"deployment\">\n              <RouterLink v-if=\"r.project\" :to=\"`/deployments/${encodeURIComponent(r.project)}/runtime`\">\n                {{ r.project }}\n              </RouterLink>\n              <span v-else class=\"mute\">—</span>\n            </td>\n            <td class=\"dim\" data-label=\"router\">{{ r.router }}</td>\n          </tr>\n        </tbody>\n      </table>\n\n      <p v-else class=\"mute\">\n        No container on this host declares a Traefik router. A deployment's routes come from labels in\n        its own compose file — open a deployment's <b>Containers &amp; routes</b> tab to see what is\n        missing.\n      </p>\n    </section>\n\n    <!-- ============================ config files ============================ -->\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Config files</h2>\n        <span class=\"grow\" />\n        <span v-if=\"dir\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n          <span class=\"mute\">{{ dir }}</span>\n        </span>\n      </div>\n\n    <!--\n        The blast radius, stated once and up front — and the reassurance alongside it, because \"this can\n        break everything\" without \"you will still be able to fix it\" just makes people avoid the page.\n      -->\n\n      <div v-if=\"writable === false\" class=\"banner failed\">\n        <b>Read-only: the API cannot write to this directory.</b>\n        <p>\n          The control stack mounts it into the API from 0.4.0 onward. Re-run\n          setup again on the host to pick up the mount — it is safe to repeat, and it recreates\n          the control containers.\n        </p>\n      </div>\n\n      <div v-else-if=\"!settings.token\" class=\"banner info\">\n        <b>Viewing needs a token too.</b>\n        <p>\n          These files hold basic-auth hashes and forward-auth URLs, so their contents are not served\n          unauthenticated. <RouterLink to=\"/settings\">Add your token</RouterLink>.\n        </p>\n      </div>\n\n      <SkeletonList v-if=\"!loaded\" :rows=\"3\" />\n      <ul v-else-if=\"files.length\" class=\"kvlist\">\n        <li v-for=\"f in files\" :key=\"f.name\">\n          <span class=\"k\">\n            <button class=\"ghost sm\" @click=\"open(f.name)\">{{ f.name }}</button>\n          </span>\n          <span class=\"v mute\" style=\"font-size: var(--t-sm)\">\n            {{ f.size }} bytes · {{ stamp(f.updatedAt) }}\n          </span>\n        </li>\n      </ul>\n      <p v-else class=\"mute\">\n        No files yet. Everything is routed by container labels, which is a perfectly good place to be.\n      </p>\n    </section>\n\n    <section v-if=\"openName !== null\" class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">{{ openName === '' ? 'New file' : openName }}</h2>\n        <span v-if=\"dirty\" class=\"badge warn\">unsaved</span>\n        <span class=\"grow\" />\n        <button class=\"ghost sm\" @click=\"close\">Close</button>\n      </div>\n\n      <div v-if=\"openName === ''\" class=\"field\" style=\"max-width: 340px\">\n        <label for=\"fname\">File name</label>\n        <input\n          id=\"fname\"\n          v-model.trim=\"newName\"\n          type=\"text\"\n          placeholder=\"middleware.yml\"\n          spellcheck=\"false\"\n          autocomplete=\"off\"\n        />\n        <div class=\"mute hint\">Lower case, ending in <code>.yml</code>.</div>\n      </div>\n\n      <SkeletonList v-if=\"loadingFile\" :rows=\"4\" />\n\n      <div v-else-if=\"withheld\" class=\"banner plain\">\n        <b>Hidden without an access token.</b>\n        <p>\n          <RouterLink to=\"/settings\">Add your token</RouterLink> to read and edit this file.\n        </p>\n      </div>\n\n      <template v-else>\n        <div class=\"field\">\n          <label for=\"content\">Contents</label>\n          <textarea id=\"content\" v-model=\"draft\" rows=\"18\" spellcheck=\"false\" />\n        </div>\n\n        <ErrorNote v-if=\"fileError\" :text=\"fileError\" title=\"Traefik would not accept this.\" />\n\n        <div class=\"row\" style=\"margin-top: var(--s4)\">\n          <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"!canSave\" @click=\"save\">\n            {{ saving ? 'Saving…' : 'Save' }}\n          </ActionButton>\n          <span v-if=\"!settings.token\" class=\"mute\">Saving needs a token.</span>\n        </div>\n\n        <template v-if=\"openName\">\n          <h2 class=\"section\" style=\"margin: var(--s5) 0 var(--s3)\">Delete this file</h2>\n          <p class=\"dim\">\n            Whatever it configures stops applying as soon as Traefik reloads. If it holds a router,\n            those hostnames stop resolving to anything.\n          </p>\n          <div class=\"field\" style=\"max-width: 340px\">\n            <label :for=\"`confirm-${openName}`\">\n              Type <b>{{ openName }}</b> to confirm\n            </label>\n            <input\n              :id=\"`confirm-${openName}`\"\n              v-model.trim=\"confirmDelete\"\n              type=\"text\"\n              :placeholder=\"openName\"\n              spellcheck=\"false\"\n              autocomplete=\"off\"\n            />\n          </div>\n          <div class=\"row\">\n            <ActionButton\n              variant=\"danger\"\n              :disabled=\"confirmDelete !== openName || !settings.token\"\n              :title=\"confirmDelete !== openName ? 'Type the file name to confirm.' : undefined\"\n              @click=\"remove\"\n            >\n              Delete\n            </ActionButton>\n          </div>\n        </template>\n      </template>\n    </section>\n  </div>\n</template>\n"],"names":["STARTER","live","ref","liveReachable","files","dir","writable","loaded","listError","openName","draft","original","withheld","loadingFile","saving","fileError","newName","undo","confirmDelete","dirty","computed","canSave","settings","loadList","r","api","problem","loadLive","open","name","startNew","close","save","toast","revert","u","remove","_createElementBlock","_createElementVNode","_hoisted_1","_createVNode","HelpModal","_cache","_hoisted_2","InfoHint","_createBlock","ErrorNote","_openBlock","_hoisted_3","_toDisplayString","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_Fragment","_renderList","i","_hoisted_10","h","_hoisted_12","_hoisted_11","_hoisted_13","_hoisted_14","_hoisted_15","_hoisted_16","_hoisted_17","_component_RouterLink","_createTextVNode","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_unref","_hoisted_26","_hoisted_27","f","_hoisted_28","$event","_hoisted_29","_hoisted_30","stamp","_hoisted_31","SkeletonList","_hoisted_32","_hoisted_33","_hoisted_34","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","_hoisted_39","ActionButton","_hoisted_40","_hoisted_41","_hoisted_44"],"mappings":"6xDA4EMA,GAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wCA3BhB,MAAMC,EAAOC,EAAoB,EAAE,EAC7BC,EAAgBD,EAAoB,IAAI,EAExCE,EAAQF,EAAmB,EAAE,EAC7BG,EAAMH,EAAI,EAAE,EACZI,EAAWJ,EAAoB,IAAI,EACnCK,EAASL,EAAI,EAAK,EAClBM,EAAYN,EAAI,EAAE,EAGlBO,EAAWP,EAAmB,IAAI,EAClCQ,EAAQR,EAAI,EAAE,EACdS,EAAWT,EAAI,EAAE,EACjBU,EAAWV,EAAI,EAAK,EACpBW,EAAcX,EAAI,EAAK,EACvBY,EAASZ,EAAI,EAAK,EAClBa,EAAYb,EAAI,EAAE,EAClBc,EAAUd,EAAI,EAAE,EAEhBe,EAAOf,EAA8C,IAAI,EACzDgB,EAAgBhB,EAAI,EAAE,EAEtBiB,EAAQC,EAAS,IAAMX,EAAS,QAAU,MAAQC,EAAM,QAAUC,EAAS,KAAK,EAChFU,EAAUD,EACd,IAAM,CAAC,CAACE,EAAS,OAAS,CAACR,EAAO,OAASJ,EAAM,MAAM,OAAO,OAAS,IAAMS,EAAM,OAASV,EAAS,QAAU,GAAA,EAYjH,eAAec,GAA0B,CACvC,MAAMC,EAAI,MAAMC,EAAI,IAAyB,cAAc,EAE3D,GADAlB,EAAO,MAAQ,GACX,CAACiB,EAAE,GAAI,CACThB,EAAU,MAAQkB,EAAQF,EAAG,wBAAwB,EACrD,MACF,CACAhB,EAAU,MAAQ,GAClBJ,EAAM,MAAQoB,EAAE,KAAK,OAAS,CAAA,EAC9BnB,EAAI,MAAQmB,EAAE,KAAK,KAAO,GAC1BlB,EAAS,MAAQkB,EAAE,KAAK,UAAY,EACtC,CAEA,eAAeG,GAA0B,CACvC,MAAMH,EAAI,MAAMC,EAAI,IAAwB,mBAAmB,EAC/D,GAAI,CAACD,EAAE,GAAI,CACTrB,EAAc,MAAQ,GACtB,MACF,CACAA,EAAc,MAAQqB,EAAE,KAAK,UAC7BvB,EAAK,MAAQuB,EAAE,KAAK,QAAU,CAAA,CAChC,CAEKD,EAAA,EACAI,EAAA,EAEL,eAAeC,EAAKC,EAA6B,CAC/CpB,EAAS,MAAQoB,EACjBhB,EAAY,MAAQ,GACpBE,EAAU,MAAQ,GAClBH,EAAS,MAAQ,GACjBM,EAAc,MAAQ,GAEtB,MAAMM,EAAI,MAAMC,EAAI,UAA+B,gBAAgB,mBAAmBI,CAAI,CAAC,EAAE,EAE7F,GADAhB,EAAY,MAAQ,GAChB,CAACW,EAAE,GAAI,CACTT,EAAU,MAAQW,EAAQF,EAAG,gBAAgB,EAC7C,MACF,CACA,GAAIA,EAAE,KAAK,eAAgB,CACzBZ,EAAS,MAAQ,GACjBF,EAAM,MAAQ,GACdC,EAAS,MAAQ,GACjB,MACF,CACAD,EAAM,MAAQc,EAAE,KAAK,SAAW,GAChCb,EAAS,MAAQD,EAAM,KACzB,CAEA,SAASoB,IAAiB,CACxBrB,EAAS,MAAQ,GACjBO,EAAQ,MAAQ,GAChBN,EAAM,MAAQV,GACdW,EAAS,MAAQ,GACjBC,EAAS,MAAQ,GACjBG,EAAU,MAAQ,EACpB,CAEA,SAASgB,GAAc,CACrBtB,EAAS,MAAQ,KACjBC,EAAM,MAAQ,GACdC,EAAS,MAAQ,GACjBI,EAAU,MAAQ,EACpB,CAEA,eAAeiB,GAAsB,CACnC,MAAMH,EAAOpB,EAAS,QAAU,GAAKO,EAAQ,MAAM,OAASP,EAAS,MACrE,GAAI,CAACoB,EAAM,CACTd,EAAU,MAAQ,uCAClB,MACF,CACAD,EAAO,MAAQ,GACfC,EAAU,MAAQ,GAClB,MAAMS,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,mBAAmBI,CAAI,CAAC,GAAI,CACxF,QAASnB,EAAM,KAAA,CAChB,EAED,GADAI,EAAO,MAAQ,GACX,CAACU,EAAE,GAAI,CAGTT,EAAU,MAAQW,EAAQF,EAAG,gBAAgB,EAC7C,MACF,CACIA,EAAE,KAAK,WAAUP,EAAK,MAAQ,CAAE,KAAAY,EAAM,QAASL,EAAE,KAAK,QAAA,GAC1Db,EAAS,MAAQD,EAAM,MACvBD,EAAS,MAAQoB,EACjBI,EAAM,KAAM,SAASJ,CAAI,2CAA2C,EAC/DN,EAAA,CACP,CAEA,eAAeW,IAAwB,CACrC,MAAMC,EAAIlB,EAAK,MACVkB,IACLzB,EAAM,MAAQyB,EAAE,QAChB1B,EAAS,MAAQ0B,EAAE,KACnB,MAAMH,EAAA,EACNf,EAAK,MAAQ,KACf,CAEA,eAAemB,IAAwB,CACrC,MAAMP,EAAOpB,EAAS,MACtB,GAAI,CAACoB,GAAQX,EAAc,QAAUW,EAAM,OAC3C,MAAML,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,mBAAmBI,CAAI,CAAC,EAAE,EACxF,GAAI,CAACL,EAAE,GAAI,CACTT,EAAU,MAAQW,EAAQF,EAAG,kBAAkB,EAC/C,MACF,CACIA,EAAE,KAAK,WAAUP,EAAK,MAAQ,CAAE,KAAAY,EAAM,QAASL,EAAE,KAAK,QAAA,GAC1DS,EAAM,KAAM,WAAWJ,CAAI,GAAG,EAC9BE,EAAA,EACKR,EAAA,CACP,mDAIEc,EAgPM,MAAA,KAAA,CA/OJC,EAsCM,MAtCNC,GAsCM,CArCJD,EAkCM,MAAA,KAAA,CAjCJA,EAwBK,KAAA,KAAA,eAxBD,YAEF,EAAA,GAAAE,EAqBYC,GAAA,CArBD,MAAM,iDAA+C,WAC9D,IAII,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJJJ,EAII,IAAA,KAAA,CAHFA,EAA+C,SAA5C,0CAAwC,IAAI,6DAC/B,EAAAA,EAAkB,UAAd,WAAS,IAAK,gHAEpC,CAAA,MACAA,EAGI,SAHD,4KAGH,EAAA,EACAA,EAII,IAAA,KAAA,CAHFA,EAAqC,SAAlC,gCAA8B,IAAI,mJAGvC,CAAA,MACAA,EAKI,SALD,6QAKH,EAAA,CAAA,aAGJA,EAOM,MAPNK,GAOM,eAPW,+DAEf,EAAA,GAAAH,EAIWI,EAAA,CAJD,MAAM,+BAA6B,WAAC,IAI9C,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJ8C,4OAI9C,EAAA,CAAA,2BAGJJ,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACJhC,EAAA,WAAd+B,EAA+E,SAAA,OAAvD,MAAM,cAAe,QAAOP,EAAA,EAAU,UAAQ,cAGvDtB,EAAA,WAAjBqC,EAA0FC,EAAA,OAA7D,KAAMtC,EAAA,MAAW,MAAM,mCAAA,6BAEzCS,EAAA,OAAX8B,EAAA,EAAAV,EAMM,MANNW,GAMM,CALJV,EAAgC,SAA7B,YAASW,EAAGhC,QAAK,IAAI,EAAG,IAAC,CAAA,EAC5BqB,EAGI,IAAA,KAAA,eAHD,2DAED,EAAA,GAAAA,EAA2D,SAAA,CAAnD,MAAM,SAAU,QAAOJ,EAAA,EAAQ,aAAW,CAAA,eAKtDI,EA6DU,UA7DVY,GA6DU,CA5DRZ,EAWM,MAXNa,GAWM,CAVJT,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAoC,KAAA,CAAhC,MAAM,SAAA,EAAU,cAAW,EAAA,iBAC/BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAOO,OAPPc,GAOO,iBAP2C,0BAEhD,EAAA,GAAAZ,EAIWI,EAAA,CAJD,MAAM,wCAAwC,MAAM,KAAA,aAAM,IAClB,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADkB,oDAClB,EAAA,EAAAJ,EAA2B,SAAxB,uBAAoB,EAAA,IAAI,iMAG7E,EAAA,CAAA,eAIOnC,EAAA,QAAa,IAAxB4C,EAAA,EAAAV,EAGM,MAHNgB,GAGM,CAAA,GAAAX,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CAFJJ,EAA6B,SAA1B,yBAAsB,EAAA,EACzBA,EAA8E,SAA3E,0EAAuE,EAAA,CAAA,MAG1DrC,EAAA,MAAK,QAAvB8C,IAAAV,EAmCQ,QAnCRiB,GAmCQ,eAlCNhB,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAY,UAAR,KAAG,EACPA,EAAoB,UAAhB,aAAW,EACfA,EAAmB,UAAf,YAAU,EACdA,EAAe,UAAX,QAAM,CAAA,SAGdA,EAyBQ,QAzBRiB,GAyBQ,EAxBNR,EAAA,EAAA,EAAAV,EAuBKmB,EAAA,KAAAC,EAvBgBxD,EAAA,MAAI,CAAbuB,EAAGkC,SAAfrB,EAuBK,KAAA,CAvBuB,OAAQb,EAAE,SAAS,IAAIA,EAAE,MAAM,GAAK,gBAAgBkC,EAAC,CAAA,GAC/EpB,EAQK,KARLqB,GAQK,EAPHZ,EAAA,EAAA,EAAAV,EAKMmB,EAAA,KAAAC,EALWjC,EAAE,MAAPoC,QAAZvB,EAKM,MAAA,CALqB,IAAKuB,GAAC,CACrBA,EAAE,WAAU,WAAA,OAGtBvB,EAA6C,OAA7CwB,GAA6CZ,EAAXW,CAAC,EAAA,CAAA,QAHnCvB,EAEI,IAAA,OAFkC,gBAAiBuB,CAAC,GAAI,OAAO,SAAS,IAAI,YAAA,IAC3EA,CAAC,EAAA,EAAAE,EAAA,EAE6B,WAExBtC,EAAE,MAAM,qBAArBa,EAAoE,OAApE0B,GAA0C,qBAAmB,KAE/DzB,EAKK,KALL0B,GAKK,CAJSxC,EAAE,QAAduB,EAAA,EAAAV,EAAwD,OAAxD4B,GAAwDhB,EAAlBzB,EAAE,MAAM,EAAA,CAAA,IAC9CuB,EAAA,EAAAV,EAEO,OAFP6B,GAEOjB,EADFzB,EAAE,OAAI,KAAA,mBAAA,4BAAA,EAAA,CAAA,EAAA,GAGbc,EAKK,KALL6B,GAKK,CAJe3C,EAAE,aAApBqB,EAEauB,EAAA,OAFiB,GAAE,gBAAkB,mBAAmB5C,EAAE,OAAO,CAAA,UAAA,aAC5E,IAAe,CAAZ6C,EAAApB,EAAAzB,EAAE,OAAO,EAAA,CAAA,CAAA,2BAEda,EAAkC,OAAlCiC,GAA0B,GAAC,EAAA,GAE7BhC,EAAuD,KAAvDiC,GAAuDtB,EAAhBzB,EAAE,MAAM,EAAA,CAAA,CAAA,mBAKrDuB,EAAA,EAAAV,EAII,IAJJmC,GAII,CAAA,GAAA9B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAJmB,8IAEsB,EAAA,EAAAJ,EAA8B,SAA3B,sBAAuB,EAAA,IAAI,gCAE3E,EAAA,CAAA,QAIFA,EA6CU,UA7CVmC,GA6CU,CA5CRnC,EAMM,MANNoC,GAMM,CALJhC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAqC,KAAA,CAAjC,MAAM,SAAA,EAAU,eAAY,EAAA,iBAChCA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACNjC,EAAA,OAAZ0C,EAAA,EAAAV,EAEO,OAFPsC,GAEO,CADLrC,EAAmC,OAAnCsC,GAAmC3B,EAAb5C,EAAA,KAAG,EAAA,CAAA,CAAA,eASlBC,EAAA,QAAQ,IAAnByC,EAAA,EAAAV,EAOM,MAPNwC,GAOM,CAAA,GAAAnC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CANJJ,EAAyD,SAAtD,qDAAkD,EAAA,EACrDA,EAII,SAJD,qLAIH,EAAA,CAAA,MAGewC,EAAAxD,CAAA,EAAS,gBAA1ByB,IAAAV,EAMM,MANN0C,GAMM,CALJrC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAiC,SAA9B,6BAA0B,EAAA,GAC7BA,EAGI,IAAA,KAAA,iBAHD,gHAEgB,EAAA,GAAAE,EAAsD4B,EAAA,CAA1C,GAAG,aAAW,WAAC,IAAc,CAAA,GAAA1B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAd,iBAAc,EAAA,CAAA,2BAAa,KACzE,EAAA,EAAA,MAGmBnC,EAAA,MACNH,EAAA,MAAM,QAArB2C,EAAA,EAAAV,EASK,KATL2C,GASK,QARH3C,EAOKmB,EAAA,KAAAC,EAPWrD,EAAA,MAAL6E,QAAX5C,EAOK,KAAA,CAPmB,IAAK4C,EAAE,IAAA,GAC7B3C,EAEO,OAFP4C,GAEO,CADL5C,EAAoE,SAAA,CAA5D,MAAM,WAAY,QAAK6C,GAAEvD,EAAKqD,EAAE,IAAI,CAAA,EAAMhC,EAAAgC,EAAE,IAAI,EAAA,EAAAG,EAAA,CAAA,GAE1D9C,EAEO,OAFP+C,GAEOpC,EADFgC,EAAE,IAAI,EAAG,YAAShC,EAAG6B,EAAAQ,EAAA,EAAML,EAAE,SAAS,CAAA,EAAA,CAAA,CAAA,mBAI/C5C,EAEI,IAFJkD,GAAuB,kGAEvB,QAbA1C,EAAyC2C,EAAA,OAAX,KAAM,CAAA,GAapC,GAGa/E,EAAA,QAAQ,MAAvBsC,IAAAV,EA4EU,UA5EVoD,GA4EU,CA3ERnD,EAKM,MALNoD,GAKM,CAJJpD,EAAsE,KAAtEqD,GAAsE1C,EAA/CxC,EAAA,sBAA+BA,EAAA,KAAQ,EAAA,CAAA,EAClDU,EAAA,WAAZkB,EAAoD,OAApDuD,GAAsC,SAAO,0BAC7CtD,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAAsD,SAAA,CAA9C,MAAM,WAAY,QAAOP,CAAA,EAAO,OAAK,CAAA,GAGpCtB,EAAA,QAAQ,IAAnBsC,IAAAV,EAWM,MAXNwD,GAWM,CAVJnD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAoC,QAAA,CAA7B,IAAI,OAAA,EAAQ,YAAS,EAAA,KAC5BA,EAOE,QAAA,CANA,GAAG,6CACWtB,EAAO,MAAAmE,GACrB,KAAK,OACL,YAAY,iBACZ,WAAW,QACX,aAAa,KAAA,gBAJCnE,EAAA,aAAN,CAAA,KAAR,EAAA,CAAsB,kBAMxBsB,EAAqE,MAAA,CAAhE,MAAM,aAAW,GAAC,wBAAsB,EAAAA,EAAiB,YAAX,MAAI,IAAO,GAAC,CAAA,mBAG7CzB,EAAA,WAApBgC,EAA6C2C,EAAA,OAAX,KAAM,CAAA,IAExB5E,EAAA,OAAhBmC,IAAAV,EAKM,MALNyD,GAKM,CAJJpD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAsC,SAAnC,kCAA+B,EAAA,GAClCA,EAEI,IAAA,KAAA,CADFE,EAAsD4B,EAAA,CAA1C,GAAG,aAAW,WAAC,IAAc,CAAA,GAAA1B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAd,iBAAc,EAAA,CAAA,2BAAa,gCACxD,EAAA,EAAA,WAGFL,EA6CWmB,EAAA,CAAA,IAAA,GAAA,CA5CTlB,EAGM,MAHNyD,GAGM,CAFJrD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAqC,QAAA,CAA9B,IAAI,SAAA,EAAU,WAAQ,EAAA,KAC7BA,EAAsE,WAAA,CAA5D,GAAG,+CAAmB5B,EAAK,MAAAyE,GAAE,KAAK,KAAK,WAAW,OAAA,gBAA5BzE,EAAA,KAAK,CAAA,KAGtBK,EAAA,WAAjB8B,EAAuFC,EAAA,OAA1D,KAAM/B,EAAA,MAAW,MAAM,gCAAA,6BAEpDuB,EAKM,MALN0D,GAKM,CAJJxD,EAEeyD,EAAA,CAFD,QAAQ,UAAW,QAASnF,EAAA,MAAS,UAAWO,EAAA,MAAU,QAAOW,CAAA,aAC7E,IAAiC,KAA9BlB,EAAA,MAAM,UAAA,MAAA,EAAA,CAAA,CAAA,kCAEEgE,EAAAxD,CAAA,EAAS,oBAAtBe,EAAsE,OAAtE6D,GAA0C,uBAAqB,KAGjDzF,EAAA,WAAhB4B,EA6BWmB,EAAA,CAAA,IAAA,GAAA,eA5BTlB,EAA+E,KAAA,CAA3E,MAAM,UAAU,MAAA,CAAA,OAAA,uBAAA,CAAA,EAAsC,mBAAgB,EAAA,GAC1EI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAGI,IAAA,CAHD,MAAM,KAAA,EAAM,wIAGf,EAAA,GACAA,EAYM,MAZN6D,GAYM,CAXJ7D,EAEQ,QAAA,CAFA,eAAgB7B,EAAA,KAAQ,EAAA,mBAAI,SAC7B,EAAA,GAAA6B,EAAqB,WAAf7B,EAAA,KAAQ,EAAA,CAAA,kBAAO,eAC5B,EAAA,EAAA,UACA6B,EAOE,QAAA,CANC,cAAe7B,EAAA,KAAQ,wCACVS,EAAa,MAAAiE,GAC3B,KAAK,OACJ,YAAa1E,EAAA,MACd,WAAW,QACX,aAAa,KAAA,iBAJCS,EAAA,aAAN,CAAA,KAAR,EAAA,CAA4B,MAOhCoB,EASM,MATN8D,GASM,CARJ5D,EAOeyD,EAAA,CANb,QAAQ,SACP,SAAU/E,EAAA,QAAkBT,SAAQ,CAAKqE,EAAAxD,CAAA,EAAS,MAClD,MAAOJ,EAAA,QAAkBT,EAAA,uCAA8C,OACvE,QAAO2B,EAAA,aACT,IAED,CAAA,GAAAM,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,WAED,EAAA,CAAA"}
+{"version":3,"file":"RoutingView-DAkoZ5Kr.js","sources":["../../src/views/RoutingView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Traefik's dynamic configuration — the file list, and an editor.\n *\n * WHAT LIVES HERE. Traefik reads config from two providers: labels on containers (every per-PR router)\n * and a watched *directory* of files. This page is the directory: middleware (basic auth, rate limits,\n * IP allow-lists), TLS options, the catch-all fallback router, routes to something running outside\n * compose. Several files rather than one is the point of a watched directory — one file per concern.\n *\n * THE WARNING IS NOT DECORATION. Traefik's documented behaviour is that an unparseable file produces\n * a parse error for the whole DIRECTORY, and the rest can be discarded with it — so a careless save\n * here breaks *other people's* routes, not the file being edited. The server validates before writing\n * and renames into place so the watcher never sees a partial file, and every rejection is rendered\n * verbatim because it names the actual problem.\n *\n * What it cannot break: `control.<domain>` and `api.<domain>` are docker labels on the pstack\n * container, not file config. This page cannot lock you out of the page you would use to undo a bad\n * save. That is stated in the UI, because an operator hesitating over a save deserves to know it.\n *\n * `previous` from a save is an in-session undo. There is deliberately no history on disk: the obvious\n * place to keep it is the one directory that must contain nothing but dynamic config.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport type {\n  LiveRoutesResponse,\n  RoutingFile,\n  RoutingListResponse,\n  RoutingReadResponse,\n  RoutingWriteResponse,\n  RuntimeRoute,\n} from '../api/types';\nimport { settings } from '../composables/useSettings';\nimport { stamp } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport HelpModal from '../components/HelpModal.vue';\n\n/**\n * The live routes, from container labels.\n *\n * This page used to show only the file provider, and the reported confusion was exactly right: a\n * deployment goes up, its hostname appears, and nothing here changes — because per-PR routers are\n * DOCKER labels and the files below are Traefik's *other* provider. Showing both is what makes the\n * page match what \"routing\" means to whoever opened it.\n */\nconst live = ref<RuntimeRoute[]>([]);\nconst liveReachable = ref<boolean | null>(null);\n\nconst files = ref<RoutingFile[]>([]);\nconst dir = ref('');\nconst writable = ref<boolean | null>(null);\nconst loaded = ref(false);\nconst listError = ref('');\n\n/** The open file. `null` name means a new one. */\nconst openName = ref<string | null>(null);\nconst draft = ref('');\nconst original = ref('');\nconst withheld = ref(false);\nconst loadingFile = ref(false);\nconst saving = ref(false);\nconst fileError = ref('');\nconst newName = ref('');\n/** Last replaced content, offered as an undo for the rest of the session. */\nconst undo = ref<{ name: string; content: string } | null>(null);\nconst confirmDelete = ref('');\n\nconst dirty = computed(() => openName.value !== null && draft.value !== original.value);\nconst canSave = computed(\n  () => !!settings.token && !saving.value && draft.value.trim().length > 0 && (dirty.value || openName.value === ''),\n);\n\nconst STARTER = `http:\n  middlewares:\n    # An example — replace it. Middlewares go UNDER http; at the top level Traefik ignores them.\n    ip-allow:\n      ipAllowList:\n        sourceRange:\n          - 203.0.113.0/24\n`;\n\nasync function loadList(): Promise<void> {\n  const r = await api.get<RoutingListResponse>('/api/routing');\n  loaded.value = true;\n  if (!r.ok) {\n    listError.value = problem(r, 'load the routing files');\n    return;\n  }\n  listError.value = '';\n  files.value = r.body.files ?? [];\n  dir.value = r.body.dir ?? '';\n  writable.value = r.body.writable ?? false;\n}\n\nasync function loadLive(): Promise<void> {\n  const r = await api.get<LiveRoutesResponse>('/api/routing/live');\n  if (!r.ok) {\n    liveReachable.value = false;\n    return;\n  }\n  liveReachable.value = r.body.reachable;\n  live.value = r.body.routes ?? [];\n}\n\nvoid loadList();\nvoid loadLive();\n\nasync function open(name: string): Promise<void> {\n  openName.value = name;\n  loadingFile.value = true;\n  fileError.value = '';\n  withheld.value = false;\n  confirmDelete.value = '';\n  // Authenticated: dynamic config holds basic-auth hashes and forward-auth URLs.\n  const r = await api.getAuthed<RoutingReadResponse>(`/api/routing/${encodeURIComponent(name)}`);\n  loadingFile.value = false;\n  if (!r.ok) {\n    fileError.value = problem(r, 'open this file');\n    return;\n  }\n  if (r.body.sourceWithheld) {\n    withheld.value = true;\n    draft.value = '';\n    original.value = '';\n    return;\n  }\n  draft.value = r.body.content ?? '';\n  original.value = draft.value;\n}\n\nfunction startNew(): void {\n  openName.value = '';\n  newName.value = '';\n  draft.value = STARTER;\n  original.value = '';\n  withheld.value = false;\n  fileError.value = '';\n}\n\nfunction close(): void {\n  openName.value = null;\n  draft.value = '';\n  original.value = '';\n  fileError.value = '';\n}\n\nasync function save(): Promise<void> {\n  const name = openName.value === '' ? newName.value.trim() : openName.value;\n  if (!name) {\n    fileError.value = 'Give the file a name, ending in .yml';\n    return;\n  }\n  saving.value = true;\n  fileError.value = '';\n  const r = await api.put<RoutingWriteResponse>(`/api/routing/${encodeURIComponent(name)}`, {\n    content: draft.value,\n  });\n  saving.value = false;\n  if (!r.ok) {\n    // Rendered verbatim: the server's message names the unknown section or the YAML error, which is\n    // the whole diagnosis.\n    fileError.value = problem(r, 'save this file');\n    return;\n  }\n  if (r.body.previous) undo.value = { name, content: r.body.previous };\n  original.value = draft.value;\n  openName.value = name;\n  toast('ok', `Saved ${name}. Traefik reloads within a second or two.`);\n  void loadList();\n}\n\nasync function revert(): Promise<void> {\n  const u = undo.value;\n  if (!u) return;\n  draft.value = u.content;\n  openName.value = u.name;\n  await save();\n  undo.value = null;\n}\n\nasync function remove(): Promise<void> {\n  const name = openName.value;\n  if (!name || confirmDelete.value !== name) return;\n  const r = await api.del<RoutingWriteResponse>(`/api/routing/${encodeURIComponent(name)}`);\n  if (!r.ok) {\n    fileError.value = problem(r, 'delete this file');\n    return;\n  }\n  if (r.body.previous) undo.value = { name, content: r.body.previous };\n  toast('ok', `Deleted ${name}.`);\n  close();\n  void loadList();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>\n          Routing\n          <HelpModal title=\"How routing files work, and what can go wrong\">\n            <p>\n              <b>Traefik reads this directory as a whole.</b> One file it cannot parse and it reports a\n              problem for the <em>directory</em> — so the symptom is other, unrelated routes\n              disappearing rather than an error about the file you just saved.\n            </p>\n            <p>\n              Saves here are checked before they are written and replace the old file in one step, so a\n              file that would break the directory never reaches Traefik in the first place.\n            </p>\n            <p>\n              <b>This page cannot lock you out.</b> It and the API are routed by their containers'\n              own settings, not by these files — no save here can take away the page you would use to\n              undo it.\n            </p>\n            <p>\n              What belongs here: shared middleware (sign-in prompts, rate limits, address\n              allow-lists), TLS options, the catch-all fallback, and routes to things running outside\n              this host's previews. A single preview's own routes are not here — those travel with the\n              deployment.\n            </p>\n          </HelpModal>\n        </h1>\n        <div class=\"sub\">\n          Every route on this host, and the config files behind them\n          <InfoHint label=\"what belongs in these files\">\n            Middleware (basic auth, rate limits, IP allow-lists), TLS options, the catch-all fallback\n            router, and routes to anything running outside compose. Per-PR routers are not here —\n            those are labels in each deployment's own compose file.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <button v-if=\"writable\" class=\"btn primary\" @click=\"startNew\">New file</button>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not load the routing files.\" />\n\n    <div v-if=\"undo\" class=\"banner info\">\n      <b>Replaced {{ undo.name }}.</b>\n      <p>\n        The previous contents are still here for this session.\n        <button class=\"btn sm\" @click=\"revert\">Put it back</button>\n      </p>\n    </div>\n\n    <!-- ============================ live routes ============================ -->\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Live routes</h2>\n        <span class=\"grow\" />\n        <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n          from container labels\n          <InfoHint label=\"why routes are not in the files below\" align=\"end\">\n            Traefik reads two providers. Per-PR routers are <b>labels on containers</b>, written by each\n            deployment's own compose file — so deploying a stack changes this list and never the files.\n            The files are the other provider: middleware, TLS options, the fallback router.\n          </InfoHint>\n        </span>\n      </div>\n\n      <div v-if=\"liveReachable === false\" class=\"banner warn\">\n        <b>Docker did not answer.</b>\n        <p>Routes could not be listed — which is not the same as there being none.</p>\n      </div>\n\n      <table v-else-if=\"live.length\" class=\"cards\">\n        <thead>\n          <tr>\n            <th>url</th>\n            <th>forwards to</th>\n            <th>deployment</th>\n            <th>router</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(r, i) in live\" :key=\"`${r.container}-${r.router}`\" :style=\"{ '--i': i }\">\n            <td data-label=\"url\">\n              <div v-for=\"h in r.hosts\" :key=\"h\">\n                <a v-if=\"!h.startsWith('(pattern)')\" :href=\"`https://${h}`\" target=\"_blank\" rel=\"noreferrer\">\n                  {{ h }}\n                </a>\n                <span v-else class=\"mono mute\">{{ h }}</span>\n              </div>\n              <span v-if=\"!r.hosts.length\" class=\"mute\">no host in the rule</span>\n            </td>\n            <td data-label=\"forwards to\">\n              <span v-if=\"r.target\" class=\"mono\">{{ r.target }}</span>\n              <span v-else class=\"s-failed\">\n                {{ r.port === null ? 'no port declared' : 'not on the ingress network' }}\n              </span>\n            </td>\n            <td data-label=\"deployment\">\n              <RouterLink v-if=\"r.project\" :to=\"`/deployments/${encodeURIComponent(r.project)}/runtime`\">\n                {{ r.project }}\n              </RouterLink>\n              <span v-else class=\"mute\">—</span>\n            </td>\n            <td class=\"dim\" data-label=\"router\">{{ r.router }}</td>\n          </tr>\n        </tbody>\n      </table>\n\n      <p v-else class=\"mute\">\n        No container on this host declares a Traefik router. A deployment's routes come from labels in\n        its own compose file — open a deployment's <b>Containers &amp; routes</b> tab to see what is\n        missing.\n      </p>\n    </section>\n\n    <!-- ============================ config files ============================ -->\n    <section class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Config files</h2>\n        <span class=\"grow\" />\n        <span v-if=\"dir\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n          <span class=\"mute\">{{ dir }}</span>\n        </span>\n      </div>\n\n    <!--\n        The blast radius, stated once and up front — and the reassurance alongside it, because \"this can\n        break everything\" without \"you will still be able to fix it\" just makes people avoid the page.\n      -->\n\n      <div v-if=\"writable === false\" class=\"banner failed\">\n        <b>Read-only: the API cannot write to this directory.</b>\n        <p>\n          The control stack mounts it into the API from 0.4.0 onward. Re-run\n          setup again on the host to pick up the mount — it is safe to repeat, and it recreates\n          the control containers.\n        </p>\n      </div>\n\n      <div v-else-if=\"!settings.token\" class=\"banner info\">\n        <b>Viewing needs a token too.</b>\n        <p>\n          These files hold basic-auth hashes and forward-auth URLs, so their contents are not served\n          unauthenticated. <RouterLink to=\"/settings\">Add your token</RouterLink>.\n        </p>\n      </div>\n\n      <SkeletonList v-if=\"!loaded\" :rows=\"3\" />\n      <ul v-else-if=\"files.length\" class=\"kvlist\">\n        <li v-for=\"f in files\" :key=\"f.name\">\n          <span class=\"k\">\n            <button class=\"ghost sm\" @click=\"open(f.name)\">{{ f.name }}</button>\n          </span>\n          <span class=\"v mute\" style=\"font-size: var(--t-sm)\">\n            {{ f.size }} bytes · {{ stamp(f.updatedAt) }}\n          </span>\n        </li>\n      </ul>\n      <p v-else class=\"mute\">\n        No files yet. Everything is routed by container labels, which is a perfectly good place to be.\n      </p>\n    </section>\n\n    <section v-if=\"openName !== null\" class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">{{ openName === '' ? 'New file' : openName }}</h2>\n        <span v-if=\"dirty\" class=\"badge warn\">unsaved</span>\n        <span class=\"grow\" />\n        <button class=\"ghost sm\" @click=\"close\">Close</button>\n      </div>\n\n      <div v-if=\"openName === ''\" class=\"field\" style=\"max-width: 340px\">\n        <label for=\"fname\">File name</label>\n        <input\n          id=\"fname\"\n          v-model.trim=\"newName\"\n          type=\"text\"\n          placeholder=\"middleware.yml\"\n          spellcheck=\"false\"\n          autocomplete=\"off\"\n        />\n        <div class=\"mute hint\">Lower case, ending in <code>.yml</code>.</div>\n      </div>\n\n      <SkeletonList v-if=\"loadingFile\" :rows=\"4\" />\n\n      <div v-else-if=\"withheld\" class=\"banner plain\">\n        <b>Hidden without an access token.</b>\n        <p>\n          <RouterLink to=\"/settings\">Add your token</RouterLink> to read and edit this file.\n        </p>\n      </div>\n\n      <template v-else>\n        <div class=\"field\">\n          <label for=\"content\">Contents</label>\n          <textarea id=\"content\" v-model=\"draft\" rows=\"18\" spellcheck=\"false\" />\n        </div>\n\n        <ErrorNote v-if=\"fileError\" :text=\"fileError\" title=\"Traefik would not accept this.\" />\n\n        <div class=\"row\" style=\"margin-top: var(--s4)\">\n          <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"!canSave\" @click=\"save\">\n            {{ saving ? 'Saving…' : 'Save' }}\n          </ActionButton>\n          <span v-if=\"!settings.token\" class=\"mute\">Saving needs a token.</span>\n        </div>\n\n        <template v-if=\"openName\">\n          <h2 class=\"section\" style=\"margin: var(--s5) 0 var(--s3)\">Delete this file</h2>\n          <p class=\"dim\">\n            Whatever it configures stops applying as soon as Traefik reloads. If it holds a router,\n            those hostnames stop resolving to anything.\n          </p>\n          <div class=\"field\" style=\"max-width: 340px\">\n            <label :for=\"`confirm-${openName}`\">\n              Type <b>{{ openName }}</b> to confirm\n            </label>\n            <input\n              :id=\"`confirm-${openName}`\"\n              v-model.trim=\"confirmDelete\"\n              type=\"text\"\n              :placeholder=\"openName\"\n              spellcheck=\"false\"\n              autocomplete=\"off\"\n            />\n          </div>\n          <div class=\"row\">\n            <ActionButton\n              variant=\"danger\"\n              :disabled=\"confirmDelete !== openName || !settings.token\"\n              :title=\"confirmDelete !== openName ? 'Type the file name to confirm.' : undefined\"\n              @click=\"remove\"\n            >\n              Delete\n            </ActionButton>\n          </div>\n        </template>\n      </template>\n    </section>\n  </div>\n</template>\n"],"names":["STARTER","live","ref","liveReachable","files","dir","writable","loaded","listError","openName","draft","original","withheld","loadingFile","saving","fileError","newName","undo","confirmDelete","dirty","computed","canSave","settings","loadList","r","api","problem","loadLive","open","name","startNew","close","save","toast","revert","u","remove","_createElementBlock","_createElementVNode","_hoisted_1","_createVNode","HelpModal","_cache","_hoisted_2","InfoHint","_createBlock","ErrorNote","_openBlock","_hoisted_3","_toDisplayString","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_Fragment","_renderList","i","_hoisted_10","h","_hoisted_12","_hoisted_11","_hoisted_13","_hoisted_14","_hoisted_15","_hoisted_16","_hoisted_17","_component_RouterLink","_createTextVNode","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_unref","_hoisted_26","_hoisted_27","f","_hoisted_28","$event","_hoisted_29","_hoisted_30","stamp","_hoisted_31","SkeletonList","_hoisted_32","_hoisted_33","_hoisted_34","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","_hoisted_39","ActionButton","_hoisted_40","_hoisted_41","_hoisted_44"],"mappings":"6xDA4EMA,GAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,wCA3BhB,MAAMC,EAAOC,EAAoB,EAAE,EAC7BC,EAAgBD,EAAoB,IAAI,EAExCE,EAAQF,EAAmB,EAAE,EAC7BG,EAAMH,EAAI,EAAE,EACZI,EAAWJ,EAAoB,IAAI,EACnCK,EAASL,EAAI,EAAK,EAClBM,EAAYN,EAAI,EAAE,EAGlBO,EAAWP,EAAmB,IAAI,EAClCQ,EAAQR,EAAI,EAAE,EACdS,EAAWT,EAAI,EAAE,EACjBU,EAAWV,EAAI,EAAK,EACpBW,EAAcX,EAAI,EAAK,EACvBY,EAASZ,EAAI,EAAK,EAClBa,EAAYb,EAAI,EAAE,EAClBc,EAAUd,EAAI,EAAE,EAEhBe,EAAOf,EAA8C,IAAI,EACzDgB,EAAgBhB,EAAI,EAAE,EAEtBiB,EAAQC,EAAS,IAAMX,EAAS,QAAU,MAAQC,EAAM,QAAUC,EAAS,KAAK,EAChFU,EAAUD,EACd,IAAM,CAAC,CAACE,EAAS,OAAS,CAACR,EAAO,OAASJ,EAAM,MAAM,OAAO,OAAS,IAAMS,EAAM,OAASV,EAAS,QAAU,GAAA,EAYjH,eAAec,GAA0B,CACvC,MAAMC,EAAI,MAAMC,EAAI,IAAyB,cAAc,EAE3D,GADAlB,EAAO,MAAQ,GACX,CAACiB,EAAE,GAAI,CACThB,EAAU,MAAQkB,EAAQF,EAAG,wBAAwB,EACrD,MACF,CACAhB,EAAU,MAAQ,GAClBJ,EAAM,MAAQoB,EAAE,KAAK,OAAS,CAAA,EAC9BnB,EAAI,MAAQmB,EAAE,KAAK,KAAO,GAC1BlB,EAAS,MAAQkB,EAAE,KAAK,UAAY,EACtC,CAEA,eAAeG,GAA0B,CACvC,MAAMH,EAAI,MAAMC,EAAI,IAAwB,mBAAmB,EAC/D,GAAI,CAACD,EAAE,GAAI,CACTrB,EAAc,MAAQ,GACtB,MACF,CACAA,EAAc,MAAQqB,EAAE,KAAK,UAC7BvB,EAAK,MAAQuB,EAAE,KAAK,QAAU,CAAA,CAChC,CAEKD,EAAA,EACAI,EAAA,EAEL,eAAeC,EAAKC,EAA6B,CAC/CpB,EAAS,MAAQoB,EACjBhB,EAAY,MAAQ,GACpBE,EAAU,MAAQ,GAClBH,EAAS,MAAQ,GACjBM,EAAc,MAAQ,GAEtB,MAAMM,EAAI,MAAMC,EAAI,UAA+B,gBAAgB,mBAAmBI,CAAI,CAAC,EAAE,EAE7F,GADAhB,EAAY,MAAQ,GAChB,CAACW,EAAE,GAAI,CACTT,EAAU,MAAQW,EAAQF,EAAG,gBAAgB,EAC7C,MACF,CACA,GAAIA,EAAE,KAAK,eAAgB,CACzBZ,EAAS,MAAQ,GACjBF,EAAM,MAAQ,GACdC,EAAS,MAAQ,GACjB,MACF,CACAD,EAAM,MAAQc,EAAE,KAAK,SAAW,GAChCb,EAAS,MAAQD,EAAM,KACzB,CAEA,SAASoB,IAAiB,CACxBrB,EAAS,MAAQ,GACjBO,EAAQ,MAAQ,GAChBN,EAAM,MAAQV,GACdW,EAAS,MAAQ,GACjBC,EAAS,MAAQ,GACjBG,EAAU,MAAQ,EACpB,CAEA,SAASgB,GAAc,CACrBtB,EAAS,MAAQ,KACjBC,EAAM,MAAQ,GACdC,EAAS,MAAQ,GACjBI,EAAU,MAAQ,EACpB,CAEA,eAAeiB,GAAsB,CACnC,MAAMH,EAAOpB,EAAS,QAAU,GAAKO,EAAQ,MAAM,OAASP,EAAS,MACrE,GAAI,CAACoB,EAAM,CACTd,EAAU,MAAQ,uCAClB,MACF,CACAD,EAAO,MAAQ,GACfC,EAAU,MAAQ,GAClB,MAAMS,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,mBAAmBI,CAAI,CAAC,GAAI,CACxF,QAASnB,EAAM,KAAA,CAChB,EAED,GADAI,EAAO,MAAQ,GACX,CAACU,EAAE,GAAI,CAGTT,EAAU,MAAQW,EAAQF,EAAG,gBAAgB,EAC7C,MACF,CACIA,EAAE,KAAK,WAAUP,EAAK,MAAQ,CAAE,KAAAY,EAAM,QAASL,EAAE,KAAK,QAAA,GAC1Db,EAAS,MAAQD,EAAM,MACvBD,EAAS,MAAQoB,EACjBI,EAAM,KAAM,SAASJ,CAAI,2CAA2C,EAC/DN,EAAA,CACP,CAEA,eAAeW,IAAwB,CACrC,MAAMC,EAAIlB,EAAK,MACVkB,IACLzB,EAAM,MAAQyB,EAAE,QAChB1B,EAAS,MAAQ0B,EAAE,KACnB,MAAMH,EAAA,EACNf,EAAK,MAAQ,KACf,CAEA,eAAemB,IAAwB,CACrC,MAAMP,EAAOpB,EAAS,MACtB,GAAI,CAACoB,GAAQX,EAAc,QAAUW,EAAM,OAC3C,MAAML,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,mBAAmBI,CAAI,CAAC,EAAE,EACxF,GAAI,CAACL,EAAE,GAAI,CACTT,EAAU,MAAQW,EAAQF,EAAG,kBAAkB,EAC/C,MACF,CACIA,EAAE,KAAK,WAAUP,EAAK,MAAQ,CAAE,KAAAY,EAAM,QAASL,EAAE,KAAK,QAAA,GAC1DS,EAAM,KAAM,WAAWJ,CAAI,GAAG,EAC9BE,EAAA,EACKR,EAAA,CACP,mDAIEc,EAgPM,MAAA,KAAA,CA/OJC,EAsCM,MAtCNC,GAsCM,CArCJD,EAkCM,MAAA,KAAA,CAjCJA,EAwBK,KAAA,KAAA,eAxBD,YAEF,EAAA,GAAAE,EAqBYC,GAAA,CArBD,MAAM,iDAA+C,WAC9D,IAII,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJJJ,EAII,IAAA,KAAA,CAHFA,EAA+C,SAA5C,0CAAwC,IAAI,6DAC/B,EAAAA,EAAkB,UAAd,WAAS,IAAK,gHAEpC,CAAA,MACAA,EAGI,SAHD,4KAGH,EAAA,EACAA,EAII,IAAA,KAAA,CAHFA,EAAqC,SAAlC,gCAA8B,IAAI,mJAGvC,CAAA,MACAA,EAKI,SALD,6QAKH,EAAA,CAAA,aAGJA,EAOM,MAPNK,GAOM,eAPW,+DAEf,EAAA,GAAAH,EAIWI,EAAA,CAJD,MAAM,+BAA6B,WAAC,IAI9C,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJ8C,4OAI9C,EAAA,CAAA,2BAGJJ,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACJhC,EAAA,WAAd+B,EAA+E,SAAA,OAAvD,MAAM,cAAe,QAAOP,EAAA,EAAU,UAAQ,cAGvDtB,EAAA,WAAjBqC,EAA0FC,EAAA,OAA7D,KAAMtC,EAAA,MAAW,MAAM,mCAAA,6BAEzCS,EAAA,OAAX8B,EAAA,EAAAV,EAMM,MANNW,GAMM,CALJV,EAAgC,SAA7B,YAASW,EAAGhC,QAAK,IAAI,EAAG,IAAC,CAAA,EAC5BqB,EAGI,IAAA,KAAA,eAHD,2DAED,EAAA,GAAAA,EAA2D,SAAA,CAAnD,MAAM,SAAU,QAAOJ,EAAA,EAAQ,aAAW,CAAA,eAKtDI,EA6DU,UA7DVY,GA6DU,CA5DRZ,EAWM,MAXNa,GAWM,CAVJT,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAoC,KAAA,CAAhC,MAAM,SAAA,EAAU,cAAW,EAAA,iBAC/BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAOO,OAPPc,GAOO,iBAP2C,0BAEhD,EAAA,GAAAZ,EAIWI,EAAA,CAJD,MAAM,wCAAwC,MAAM,KAAA,aAAM,IAClB,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADkB,oDAClB,EAAA,EAAAJ,EAA2B,SAAxB,uBAAoB,EAAA,IAAI,iMAG7E,EAAA,CAAA,eAIOnC,EAAA,QAAa,IAAxB4C,EAAA,EAAAV,EAGM,MAHNgB,GAGM,CAAA,GAAAX,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CAFJJ,EAA6B,SAA1B,yBAAsB,EAAA,EACzBA,EAA8E,SAA3E,0EAAuE,EAAA,CAAA,MAG1DrC,EAAA,MAAK,QAAvB8C,IAAAV,EAmCQ,QAnCRiB,GAmCQ,eAlCNhB,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAY,UAAR,KAAG,EACPA,EAAoB,UAAhB,aAAW,EACfA,EAAmB,UAAf,YAAU,EACdA,EAAe,UAAX,QAAM,CAAA,SAGdA,EAyBQ,QAzBRiB,GAyBQ,EAxBNR,EAAA,EAAA,EAAAV,EAuBKmB,EAAA,KAAAC,EAvBgBxD,EAAA,MAAI,CAAbuB,EAAGkC,SAAfrB,EAuBK,KAAA,CAvBuB,OAAQb,EAAE,SAAS,IAAIA,EAAE,MAAM,GAAK,gBAAgBkC,EAAC,CAAA,GAC/EpB,EAQK,KARLqB,GAQK,EAPHZ,EAAA,EAAA,EAAAV,EAKMmB,EAAA,KAAAC,EALWjC,EAAE,MAAPoC,QAAZvB,EAKM,MAAA,CALqB,IAAKuB,GAAC,CACrBA,EAAE,WAAU,WAAA,OAGtBvB,EAA6C,OAA7CwB,GAA6CZ,EAAXW,CAAC,EAAA,CAAA,QAHnCvB,EAEI,IAAA,OAFkC,gBAAiBuB,CAAC,GAAI,OAAO,SAAS,IAAI,YAAA,IAC3EA,CAAC,EAAA,EAAAE,EAAA,EAE6B,WAExBtC,EAAE,MAAM,qBAArBa,EAAoE,OAApE0B,GAA0C,qBAAmB,KAE/DzB,EAKK,KALL0B,GAKK,CAJSxC,EAAE,QAAduB,EAAA,EAAAV,EAAwD,OAAxD4B,GAAwDhB,EAAlBzB,EAAE,MAAM,EAAA,CAAA,IAC9CuB,EAAA,EAAAV,EAEO,OAFP6B,GAEOjB,EADFzB,EAAE,OAAI,KAAA,mBAAA,4BAAA,EAAA,CAAA,EAAA,GAGbc,EAKK,KALL6B,GAKK,CAJe3C,EAAE,aAApBqB,EAEauB,EAAA,OAFiB,GAAE,gBAAkB,mBAAmB5C,EAAE,OAAO,CAAA,UAAA,aAC5E,IAAe,CAAZ6C,EAAApB,EAAAzB,EAAE,OAAO,EAAA,CAAA,CAAA,2BAEda,EAAkC,OAAlCiC,GAA0B,GAAC,EAAA,GAE7BhC,EAAuD,KAAvDiC,GAAuDtB,EAAhBzB,EAAE,MAAM,EAAA,CAAA,CAAA,mBAKrDuB,EAAA,EAAAV,EAII,IAJJmC,GAII,CAAA,GAAA9B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAJmB,8IAEsB,EAAA,EAAAJ,EAA8B,SAA3B,sBAAuB,EAAA,IAAI,gCAE3E,EAAA,CAAA,QAIFA,EA6CU,UA7CVmC,GA6CU,CA5CRnC,EAMM,MANNoC,GAMM,CALJhC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAqC,KAAA,CAAjC,MAAM,SAAA,EAAU,eAAY,EAAA,iBAChCA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACNjC,EAAA,OAAZ0C,EAAA,EAAAV,EAEO,OAFPsC,GAEO,CADLrC,EAAmC,OAAnCsC,GAAmC3B,EAAb5C,EAAA,KAAG,EAAA,CAAA,CAAA,eASlBC,EAAA,QAAQ,IAAnByC,EAAA,EAAAV,EAOM,MAPNwC,GAOM,CAAA,GAAAnC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CANJJ,EAAyD,SAAtD,qDAAkD,EAAA,EACrDA,EAII,SAJD,qLAIH,EAAA,CAAA,MAGewC,EAAAxD,CAAA,EAAS,gBAA1ByB,IAAAV,EAMM,MANN0C,GAMM,CALJrC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAiC,SAA9B,6BAA0B,EAAA,GAC7BA,EAGI,IAAA,KAAA,iBAHD,gHAEgB,EAAA,GAAAE,EAAsD4B,EAAA,CAA1C,GAAG,aAAW,WAAC,IAAc,CAAA,GAAA1B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAd,iBAAc,EAAA,CAAA,2BAAa,KACzE,EAAA,EAAA,MAGmBnC,EAAA,MACNH,EAAA,MAAM,QAArB2C,EAAA,EAAAV,EASK,KATL2C,GASK,QARH3C,EAOKmB,EAAA,KAAAC,EAPWrD,EAAA,MAAL6E,QAAX5C,EAOK,KAAA,CAPmB,IAAK4C,EAAE,IAAA,GAC7B3C,EAEO,OAFP4C,GAEO,CADL5C,EAAoE,SAAA,CAA5D,MAAM,WAAY,QAAK6C,GAAEvD,EAAKqD,EAAE,IAAI,CAAA,EAAMhC,EAAAgC,EAAE,IAAI,EAAA,EAAAG,EAAA,CAAA,GAE1D9C,EAEO,OAFP+C,GAEOpC,EADFgC,EAAE,IAAI,EAAG,YAAShC,EAAG6B,EAAAQ,EAAA,EAAML,EAAE,SAAS,CAAA,EAAA,CAAA,CAAA,mBAI/C5C,EAEI,IAFJkD,GAAuB,kGAEvB,QAbA1C,EAAyC2C,EAAA,OAAX,KAAM,CAAA,GAapC,GAGa/E,EAAA,QAAQ,MAAvBsC,IAAAV,EA4EU,UA5EVoD,GA4EU,CA3ERnD,EAKM,MALNoD,GAKM,CAJJpD,EAAsE,KAAtEqD,GAAsE1C,EAA/CxC,EAAA,sBAA+BA,EAAA,KAAQ,EAAA,CAAA,EAClDU,EAAA,WAAZkB,EAAoD,OAApDuD,GAAsC,SAAO,0BAC7CtD,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAAsD,SAAA,CAA9C,MAAM,WAAY,QAAOP,CAAA,EAAO,OAAK,CAAA,GAGpCtB,EAAA,QAAQ,IAAnBsC,IAAAV,EAWM,MAXNwD,GAWM,CAVJnD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAoC,QAAA,CAA7B,IAAI,OAAA,EAAQ,YAAS,EAAA,KAC5BA,EAOE,QAAA,CANA,GAAG,6CACWtB,EAAO,MAAAmE,GACrB,KAAK,OACL,YAAY,iBACZ,WAAW,QACX,aAAa,KAAA,gBAJCnE,EAAA,aAAN,CAAA,KAAR,EAAA,CAAsB,kBAMxBsB,EAAqE,MAAA,CAAhE,MAAM,aAAW,GAAC,wBAAsB,EAAAA,EAAiB,YAAX,MAAI,IAAO,GAAC,CAAA,mBAG7CzB,EAAA,WAApBgC,EAA6C2C,EAAA,OAAX,KAAM,CAAA,IAExB5E,EAAA,OAAhBmC,IAAAV,EAKM,MALNyD,GAKM,CAJJpD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAsC,SAAnC,kCAA+B,EAAA,GAClCA,EAEI,IAAA,KAAA,CADFE,EAAsD4B,EAAA,CAA1C,GAAG,aAAW,WAAC,IAAc,CAAA,GAAA1B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAd,iBAAc,EAAA,CAAA,2BAAa,gCACxD,EAAA,EAAA,WAGFL,EA6CWmB,EAAA,CAAA,IAAA,GAAA,CA5CTlB,EAGM,MAHNyD,GAGM,CAFJrD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAqC,QAAA,CAA9B,IAAI,SAAA,EAAU,WAAQ,EAAA,KAC7BA,EAAsE,WAAA,CAA5D,GAAG,+CAAmB5B,EAAK,MAAAyE,GAAE,KAAK,KAAK,WAAW,OAAA,gBAA5BzE,EAAA,KAAK,CAAA,KAGtBK,EAAA,WAAjB8B,EAAuFC,EAAA,OAA1D,KAAM/B,EAAA,MAAW,MAAM,gCAAA,6BAEpDuB,EAKM,MALN0D,GAKM,CAJJxD,EAEeyD,EAAA,CAFD,QAAQ,UAAW,QAASnF,EAAA,MAAS,UAAWO,EAAA,MAAU,QAAOW,CAAA,aAC7E,IAAiC,KAA9BlB,EAAA,MAAM,UAAA,MAAA,EAAA,CAAA,CAAA,kCAEEgE,EAAAxD,CAAA,EAAS,oBAAtBe,EAAsE,OAAtE6D,GAA0C,uBAAqB,KAGjDzF,EAAA,WAAhB4B,EA6BWmB,EAAA,CAAA,IAAA,GAAA,eA5BTlB,EAA+E,KAAA,CAA3E,MAAM,UAAU,MAAA,CAAA,OAAA,uBAAA,CAAA,EAAsC,mBAAgB,EAAA,GAC1EI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAGI,IAAA,CAHD,MAAM,KAAA,EAAM,wIAGf,EAAA,GACAA,EAYM,MAZN6D,GAYM,CAXJ7D,EAEQ,QAAA,CAFA,eAAgB7B,EAAA,KAAQ,EAAA,mBAAI,SAC7B,EAAA,GAAA6B,EAAqB,WAAf7B,EAAA,KAAQ,EAAA,CAAA,kBAAO,eAC5B,EAAA,EAAA,UACA6B,EAOE,QAAA,CANC,cAAe7B,EAAA,KAAQ,wCACVS,EAAa,MAAAiE,GAC3B,KAAK,OACJ,YAAa1E,EAAA,MACd,WAAW,QACX,aAAa,KAAA,iBAJCS,EAAA,aAAN,CAAA,KAAR,EAAA,CAA4B,MAOhCoB,EASM,MATN8D,GASM,CARJ5D,EAOeyD,EAAA,CANb,QAAQ,SACP,SAAU/E,EAAA,QAAkBT,SAAQ,CAAKqE,EAAAxD,CAAA,EAAS,MAClD,MAAOJ,EAAA,QAAkBT,EAAA,uCAA8C,OACvE,QAAO2B,EAAA,aACT,IAED,CAAA,GAAAM,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,WAED,EAAA,CAAA"}