@samyx/preview-stacks-ui 0.25.2 → 0.27.0

package/dist/assets/TerminalTab-BRumgZMI.js

@@ -0,0 +1,3 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/xterm-D6Mng-DB.js","assets/_commonjsHelpers-CqkleIqs.js","assets/addon-fit-CevVMrUA.js","assets/xterm-DYP7pi_n.css"])))=>i.map(i=>d[i]);
+import{d as F,J as O,M as H,c as m,a as t,f as a,e as E,w as M,_ as W,z as j,g as _,t as P,r as c,j as V,n as J,C as Q,Q as S,m as Y,R,o as p}from"./index-9Ra4jfL4.js";import{_ as G}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DNaY6OBe.js";import{_ as U}from"./SelectMenu.vue_vue_type_script_setup_true_lang-BLfPhhAj.js";import{_ as K}from"./_plugin-vue_export-helper-DlAUqK2U.js";import"./Teleport-BUn4ayOo.js";const X={class:"stack"},Z={class:"banner warn"},ee={class:"row wrap",style:{gap:"var(--s3)","align-items":"end"}},ne={class:"field"},oe={class:"field"},te=["disabled"],le={key:2,class:"badge ok"},se={key:1,class:"hint"},ae={key:2,class:"hint"},ie=["data-state"],re=F({__name:"TerminalTab",setup(ue){const k=Y(),C=V(()=>String(k.params.id)),B=["sh","bash","ash","zsh","fish"],$=c(null),f=c(""),u=c(""),y=c("sh"),n=c("idle"),h=c(""),v=c(null),w=R(null),I=R(null),b=R(null);let i=null;const D=V(()=>g.value.map(o=>({value:o.name,label:o.name,hint:o.service??void 0}))),g=V(()=>{var o;return((o=$.value)==null?void 0:o.containers.filter(e=>e.state==="running"))??[]});async function x(){var d;const o=await J.get(`/api/deployments/${encodeURIComponent(C.value)}/runtime`);if(!o.ok){f.value=Q(o,"list this deployment's containers");return}if(f.value="",$.value=o.body,u.value)return;const e=typeof k.query.container=="string"?k.query.container:"",l=g.value.find(T=>T.name===e);u.value=(l==null?void 0:l.name)??((d=g.value[0])==null?void 0:d.name)??""}x();async function q(){var N;if(n.value==="connecting"||n.value==="open")return;h.value="",n.value="connecting";const[{Terminal:o},{FitAddon:e}]=await Promise.all([S(()=>import("./xterm-D6Mng-DB.js").then(s=>s.x),__vite__mapDeps([0,1])),S(()=>import("./addon-fit-CevVMrUA.js").then(s=>s.a),__vite__mapDeps([2,1]))]);await S(()=>Promise.resolve({}),__vite__mapDeps([3])),(N=w.value)==null||N.dispose();const l=new o({convertEol:!0,fontSize:13,fontFamily:"var(--font-mono, ui-monospace, monospace)",cursorBlink:!0,theme:{background:"#0b0e14"}}),d=new e;l.loadAddon(d),v.value&&(v.value.innerHTML="",l.open(v.value),d.fit()),w.value=l,I.value=d,i==null||i.disconnect(),i=new ResizeObserver(()=>{try{d.fit()}catch{}}),v.value&&i.observe(v.value);const T=location.protocol==="https:"?"wss":"ws",z=new URLSearchParams({container:u.value,shell:y.value}),r=new WebSocket(`${T}://${location.host}/api/deployments/${encodeURIComponent(C.value)}/terminal?${z}`);r.binaryType="arraybuffer",b.value=r,r.onopen=()=>{n.value="open",l.focus()},r.onmessage=s=>l.write(typeof s.data=="string"?s.data:new Uint8Array(s.data)),r.onclose=s=>{n.value="closed",h.value=s.reason||(s.code===1006?"the connection dropped (the upgrade may have been refused)":`code ${s.code}`)},r.onerror=()=>{n.value==="connecting"&&(h.value="could not open the connection")},l.onData(s=>{r.readyState===WebSocket.OPEN&&r.send(s)})}function A(){var o;(o=b.value)==null||o.close(1e3,"closed by the operator")}function L(){var o,e;i==null||i.disconnect(),i=null,(o=b.value)==null||o.close(),b.value=null,(e=w.value)==null||e.dispose(),w.value=null}return O([u,y],()=>{(n.value==="open"||n.value==="connecting")&&A()}),O(C,()=>{L(),n.value="idle",x()}),H(L),(o,e)=>(p(),m("section",X,[t("div",Z,[e[3]||(e[3]=t("b",null,"No TTY.",-1)),e[4]||(e[4]=a(" The shell runs without a terminal device, so there is no prompt, no ",-1)),e[5]||(e[5]=t("code",null,"Ctrl-C",-1)),e[6]||(e[6]=a(", and no full-screen programs (",-1)),e[7]||(e[7]=t("code",null,"top",-1)),e[8]||(e[8]=a(", ",-1)),e[9]||(e[9]=t("code",null,"vim",-1)),e[10]||(e[10]=a("). Type a command and press Enter. ",-1)),E(W,{label:"why"},{default:M(()=>[...e[2]||(e[2]=[a(" A pseudo-terminal needs a wrapper (",-1),t("code",null,"script",-1),a(") whose flags differ across distributions, and it was never verified on a real host — so pstack ships the half it can stand behind. Everything an operator usually opens a shell for (",-1),t("code",null,"ls",-1),a(", ",-1),t("code",null,"cat",-1),a(", ",-1),t("code",null,"env",-1),a(", ",-1),t("code",null,"psql",-1),a(", a migration) works. ",-1)])]),_:1})]),f.value?(p(),j(G,{key:0,text:f.value,title:"Could not list this deployment's containers."},null,8,["text"])):_("",!0),t("div",ee,[t("label",ne,[e[11]||(e[11]=t("span",null,"Container",-1)),E(U,{modelValue:u.value,"onUpdate:modelValue":e[0]||(e[0]=l=>u.value=l),label:"Container",disabled:n.value==="open"||n.value==="connecting",options:D.value},null,8,["modelValue","disabled","options"])]),t("label",oe,[e[12]||(e[12]=t("span",null,"Shell",-1)),E(U,{modelValue:y.value,"onUpdate:modelValue":e[1]||(e[1]=l=>y.value=l),label:"Shell",disabled:n.value==="open"||n.value==="connecting",options:B.map(l=>({value:l,label:l}))},null,8,["modelValue","disabled","options"])]),n.value!=="open"?(p(),m("button",{key:0,class:"primary",disabled:!u.value||n.value==="connecting",onClick:q},P(n.value==="connecting"?"Connecting…":"Open shell"),9,te)):(p(),m("button",{key:1,onClick:A},"Close shell")),e[14]||(e[14]=t("span",{class:"grow"},null,-1)),n.value==="open"?(p(),m("span",le,[...e[13]||(e[13]=[t("span",{class:"dot pulse"},null,-1),a("connected",-1)])])):_("",!0)]),!g.value.length&&!f.value?(p(),m("p",se," Nothing is running for this deployment, so there is nothing to open a shell in. ")):_("",!0),n.value==="closed"&&h.value?(p(),m("p",ae,"Session ended — "+P(h.value)+".",1)):_("",!0),t("div",{ref_key:"host",ref:v,class:"terminal-host","data-state":n.value},null,8,ie),e[15]||(e[15]=t("p",{class:"hint"}," Every session is recorded — who, which container, when — and the record is written when the shell opens, so a session that dies with the process still leaves one. ",-1))]))}}),fe=K(re,[["__scopeId","data-v-2d8bfa2e"]]);export{fe as default};
+//# sourceMappingURL=TerminalTab-BRumgZMI.js.map

package/dist/assets/{TerminalTab-D5ncE4Cv.js.map → TerminalTab-BRumgZMI.js.map}

@@ -1 +1 @@
-{"version":3,"mappings":";otBA0BA,MAAMA,EAAQC,EAAA,EACRC,EAAKC,EAAS,IAAM,OAAOH,EAAM,OAAO,EAAE,CAAC,EAE3CI,EAAS,CAAC,KAAM,OAAQ,MAAO,MAAO,MAAM,EAE5CC,EAAKC,EAA4B,IAAI,EACrCC,EAAYD,EAAI,EAAE,EAClBE,EAAYF,EAAI,EAAE,EAClBG,EAAQH,EAAI,IAAI,EAChBI,EAAQJ,EAA+C,MAAM,EAC7DK,EAAcL,EAAI,EAAE,EAEpBM,EAAON,EAA2B,IAAI,EAEtCO,EAAOC,EAAmD,IAAI,EAC9DC,EAAMD,EAAuD,IAAI,EACjEE,EAASF,EAA6B,IAAI,EAChD,IAAIG,EAAkC,KAEtC,MAAMC,EAAmBf,EAAS,IAChCgB,EAAQ,MAAM,IAAKC,IAAO,CAAE,MAAOA,EAAE,KAAM,MAAOA,EAAE,KAAM,KAAMA,EAAE,SAAW,QAAY,GAGrFD,EAAUhB,EAAS,WAAM,QAAAkB,EAAAhB,EAAG,QAAH,YAAAgB,EAAU,WAAW,OAAQD,GAAMA,EAAE,QAAU,aAAc,GAAE,EAE9F,eAAeE,GAAiB,OAC9B,MAAMC,EAAI,MAAMC,EAAI,IAClB,oBAAoB,mBAAmBtB,EAAG,KAAK,CAAC,YAElD,GAAI,CAACqB,EAAE,GAAI,CACThB,EAAU,MAAQkB,EAAQF,EAAG,mCAAmC,EAChE,MACF,CAGA,GAFAhB,EAAU,MAAQ,GAClBF,EAAG,MAAQkB,EAAE,KACTf,EAAU,MAAO,OAOrB,MAAMkB,EAAS,OAAO1B,EAAM,MAAM,WAAc,SAAWA,EAAM,MAAM,UAAY,GAC7E2B,EAAQR,EAAQ,MAAM,KAAMC,GAAMA,EAAE,OAASM,CAAM,EACzDlB,EAAU,OAAQmB,GAAA,YAAAA,EAAO,SAAQN,EAAAF,EAAQ,MAAM,CAAC,IAAf,YAAAE,EAAkB,OAAQ,EAC7D,CACKC,EAAA,EAEL,eAAeM,GAAU,OACvB,GAAIlB,EAAM,QAAU,cAAgBA,EAAM,QAAU,OAAQ,OAC5DC,EAAY,MAAQ,GACpBD,EAAM,MAAQ,aAGd,KAAM,CAAC,CAAE,SAAAmB,GAAY,CAAE,SAAAC,EAAU,EAAI,MAAM,QAAQ,IAAI,CAAAC,EAAA,IACrD,OAAO,qBAAc,OAAAC,KAAA,2BAAAD,EAAA,IACrB,OAAO,yBAAkB,OAAAC,KAAA,2BAC1B,EACD,MAAAD,EAAA,IAAM,mBAAmC,wBAEzCV,EAAAR,EAAK,QAAL,MAAAQ,EAAY,UACZ,MAAMY,EAAI,IAAIJ,EAAS,CAKrB,WAAY,GACZ,SAAU,GACV,WAAY,4CACZ,YAAa,GACb,MAAO,CAAE,WAAY,UAAU,CAChC,EACKK,EAAI,IAAIJ,EACdG,EAAE,UAAUC,CAAC,EACTtB,EAAK,QACPA,EAAK,MAAM,UAAY,GACvBqB,EAAE,KAAKrB,EAAK,KAAK,EACjBsB,EAAE,OAEJrB,EAAK,MAAQoB,EACblB,EAAI,MAAQmB,EAEZjB,GAAA,MAAAA,EAAU,aACVA,EAAW,IAAI,eAAe,IAAM,CAClC,GAAI,CACFiB,EAAE,KACJ,MAAQ,CAER,CACF,CAAC,EACGtB,EAAK,OAAOK,EAAS,QAAQL,EAAK,KAAK,EAE3C,MAAMuB,EAAQ,SAAS,WAAa,SAAW,MAAQ,KACjDC,EAAK,IAAI,gBAAgB,CAAE,UAAW5B,EAAU,MAAO,MAAOC,EAAM,MAAO,EAC3E4B,EAAK,IAAI,UACb,GAAGF,CAAK,MAAM,SAAS,IAAI,oBAAoB,mBAAmBjC,EAAG,KAAK,CAAC,aAAakC,CAAE,IAE5FC,EAAG,WAAa,cAChBrB,EAAO,MAAQqB,EAEfA,EAAG,OAAS,IAAM,CAChB3B,EAAM,MAAQ,OACduB,EAAE,OACJ,EAGAI,EAAG,UAAaC,GACdL,EAAE,MAAM,OAAOK,EAAE,MAAS,SAAWA,EAAE,KAAO,IAAI,WAAWA,EAAE,IAAmB,CAAC,EACrFD,EAAG,QAAWC,GAAM,CAClB5B,EAAM,MAAQ,SAGdC,EAAY,MACV2B,EAAE,SAAWA,EAAE,OAAS,KAAO,6DAA+D,QAAQA,EAAE,IAAI,GAChH,EACAD,EAAG,QAAU,IAAM,CACb3B,EAAM,QAAU,eAAcC,EAAY,MAAQ,gCACxD,EACAsB,EAAE,OAAQM,GAAM,CACVF,EAAG,aAAe,UAAU,MAAMA,EAAG,KAAKE,CAAC,CACjD,CAAC,CACH,CAEA,SAASC,GAAa,QACpBnB,EAAAL,EAAO,QAAP,MAAAK,EAAc,MAAM,IAAM,yBAC5B,CAEA,SAASoB,GAAW,SAClBxB,GAAA,MAAAA,EAAU,aACVA,EAAW,MACXI,EAAAL,EAAO,QAAP,MAAAK,EAAc,QACdL,EAAO,MAAQ,MACf0B,EAAA7B,EAAK,QAAL,MAAA6B,EAAY,UACZ7B,EAAK,MAAQ,IACf,CAGA,OAAA8B,EAAM,CAACnC,EAAWC,CAAK,EAAG,IAAM,EAC1BC,EAAM,QAAU,QAAUA,EAAM,QAAU,eAAc8B,EAAA,CAC9D,CAAC,EACDG,EAAMzC,EAAI,IAAM,CACduC,EAAA,EACA/B,EAAM,MAAQ,OACTY,EAAA,CACP,CAAC,EACDsB,EAAgBH,CAAQ,UAItBI,EAAA,EAAAC,EAiDU,UAjDVC,EAiDU,CAhDRC,EAUM,MAVNC,EAUM,CATJC,EAAA,KAAAA,EAAA,GAAAF,EAAc,SAAX,UAAO,mBAAI,wEACd,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAmB,YAAb,SAAM,mBAAO,kCAA+B,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAgB,YAAV,MAAG,mBAAO,KAAE,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAgB,YAAV,MAAG,qBAAO,sCAEpF,KAAAG,EAKWC,EAAA,CALD,MAAM,OAAK,WAAC,IACe,IAAAF,EAAA,KAAAA,EAAA,MADf,uCACe,IAAAF,EAAmB,YAAb,SAAM,MAAO,yLAEU,IAAAA,EAAe,YAAT,KAAE,MAAO,KAC/E,IAAAA,EAAgB,YAAV,MAAG,MAAO,KAAE,IAAAA,EAAgB,YAAV,MAAG,MAAO,KAAE,IAAAA,EAAiB,YAAX,OAAI,MAAO,yBACvD,gBAGezC,EAAA,WAAjB8C,EAAqGC,EAAA,OAAxE,KAAM/C,EAAA,MAAW,MAAM,2EAEpDyC,EAoBM,MApBNO,GAoBM,CAnBJP,EAGQ,QAHRQ,GAGQ,CAFNN,EAAA,MAAAA,EAAA,IAAAF,EAAsB,YAAhB,YAAS,KACfG,EAAuIM,EAAA,YAAlHjD,EAAA,2CAAAA,EAAS,MAAAkD,GAAE,MAAM,YAAa,SAAUhD,EAAA,QAAK,QAAeA,EAAA,QAAK,aAAoB,QAASQ,EAAA,qDAErH8B,EAGQ,QAHRW,GAGQ,CAFNT,EAAA,MAAAA,EAAA,IAAAF,EAAkB,YAAZ,QAAK,KACXG,EAA0JM,EAAA,YAArIhD,EAAA,2CAAAA,EAAK,MAAAiD,GAAE,MAAM,QAAS,SAAUhD,EAAA,QAAK,QAAeA,EAAA,QAAK,aAAoB,QAASN,EAAO,IAAKwD,IAAC,OAAeA,EAAC,MAASA,GAAC,iDAG5IlD,EAAA,QAAK,YADboC,EAOS,gBALP,MAAM,UACL,SAAQ,CAAGtC,EAAA,OAAaE,EAAA,QAAK,aAC7B,QAAOkB,CAAA,IAELlB,EAAA,QAAK,2CAAAmD,EAAA,QAEVf,EAAuD,gBAAvC,QAAON,CAAA,EAAY,aAAW,iBAC9CQ,EAAqB,QAAf,MAAM,QAAM,UACNtC,EAAA,QAAK,QAAjBmC,EAAA,EAAAC,EAAyF,OAAzFgB,GAAyF,IAAAZ,EAAA,MAAAA,EAAA,KAA1CF,EAA0B,QAApB,MAAM,aAAW,WAAG,YAAS,qBAG1E7B,EAAA,MAAQ,QAAM,CAAKZ,EAAA,WAA7BuC,EAEI,IAFJiB,GAAqD,mFAErD,YAESrD,EAAA,kBAAsBC,EAAA,OAA/BkC,EAAA,EAAAC,EAA+F,IAA/FkB,GAAyD,mBAAgBC,EAAGtD,EAAA,KAAW,EAAG,IAAC,aAE3FqC,EAA4D,eAAnD,OAAJ,IAAIpC,EAAO,MAAM,gBAAiB,aAAYF,EAAA,kBAEnDwC,EAAA,MAAAA,EAAA,IAAAF,EAGI,KAHD,MAAM,QAAO,uKAGhB","names":["route","useRoute","id","computed","SHELLS","rt","ref","loadError","container","shell","state","closeReason","host","term","shallowRef","fit","socket","observer","containerOptions","running","c","_a","loadContainers","r","api","problem","wanted","match","connect","Terminal","FitAddon","__vitePreload","n","t","f","proto","qs","ws","e","d","disconnect","teardown","_b","watch","onBeforeUnmount","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_cache","_createVNode","InfoHint","_createBlock","ErrorNote","_hoisted_3","_hoisted_4","SelectMenu","$event","_hoisted_5","s","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_toDisplayString"],"ignoreList":[],"sources":["../../src/views/tabs/TerminalTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A shell inside one of this deployment's containers.\n *\n * THE SERVER DECIDES WHICH CONTAINER. This picker is filled from `/runtime`, i.e. the containers the\n * deployment actually owns, and the server checks the name again on upgrade — a hand-typed\n * `?container=pstack-control` is a 404 there, not here. The picker is a convenience, never the\n * boundary.\n *\n * THE COOKIE IS THE CREDENTIAL. A browser cannot set an `Authorization` header on a WebSocket, which\n * is exactly why sessions are cookies (0.10.0) — the handshake is a same-origin GET and carries the\n * session automatically. There is no token in this URL and there must never be one: a URL lands in\n * proxy logs and browser history.\n *\n * NO PTY. The server runs `docker exec -i`, not `-it`, so there is no prompt, no ^C and no `top`.\n * That is stated on the page rather than left for the operator to discover as \"the terminal is\n * broken\" — see the banner below and the comment at the head of `terminal.ts`.\n */\nimport { computed, onBeforeUnmount, ref, shallowRef, watch } from 'vue';\nimport { useRoute } from 'vue-router';\nimport { api, problem } from '../../api/client';\nimport type { RuntimeResponse } from '../../api/types';\nimport ErrorNote from '../../components/ErrorNote.vue';\nimport InfoHint from '../../components/InfoHint.vue';\nimport SelectMenu from '../../components/SelectMenu.vue';\n\nconst route = useRoute();\nconst id = computed(() => String(route.params.id));\n\nconst SHELLS = ['sh', 'bash', 'ash', 'zsh', 'fish'];\n\nconst rt = ref<RuntimeResponse | null>(null);\nconst loadError = ref('');\nconst container = ref('');\nconst shell = ref('sh');\nconst state = ref<'idle' | 'connecting' | 'open' | 'closed'>('idle');\nconst closeReason = ref('');\n\nconst host = ref<HTMLDivElement | null>(null);\n/** shallowRef: xterm's Terminal is a large mutable object and must not be made reactive. */\nconst term = shallowRef<import('@xterm/xterm').Terminal | null>(null);\nconst fit = shallowRef<import('@xterm/addon-fit').FitAddon | null>(null);\nconst socket = shallowRef<WebSocket | null>(null);\nlet observer: ResizeObserver | null = null;\n\nconst containerOptions = computed(() =>\n  running.value.map((c) => ({ value: c.name, label: c.name, hint: c.service ?? undefined })),\n);\n\nconst running = computed(() => rt.value?.containers.filter((c) => c.state === 'running') ?? []);\n\nasync function loadContainers() {\n  const r = await api.get<RuntimeResponse>(\n    `/api/deployments/${encodeURIComponent(id.value)}/runtime`,\n  );\n  if (!r.ok) {\n    loadError.value = problem(r, \"list this deployment's containers\");\n    return;\n  }\n  loadError.value = '';\n  rt.value = r.body;\n  if (container.value) return;\n  /*\n   * `?container=` is how the Containers table jumps straight to a shell here. Honoured only when it\n   * names a container this deployment actually owns and is running — an unknown name falls back to\n   * the first, because the alternative is a picker sitting on a container that does not exist and a\n   * Connect button that 404s. (The server checks the name again on upgrade; this is convenience.)\n   */\n  const wanted = typeof route.query.container === 'string' ? route.query.container : '';\n  const match = running.value.find((c) => c.name === wanted);\n  container.value = match?.name ?? running.value[0]?.name ?? '';\n}\nvoid loadContainers();\n\nasync function connect() {\n  if (state.value === 'connecting' || state.value === 'open') return;\n  closeReason.value = '';\n  state.value = 'connecting';\n\n  // Loaded on demand, not in the app shell: xterm is ~250KB and only this tab needs it.\n  const [{ Terminal }, { FitAddon }] = await Promise.all([\n    import('@xterm/xterm'),\n    import('@xterm/addon-fit'),\n  ]);\n  await import('@xterm/xterm/css/xterm.css');\n\n  term.value?.dispose();\n  const t = new Terminal({\n    // The OUTPUT half of the line discipline the missing pty would have provided. A real terminal\n    // converts NL to CR-NL on the way out (ONLCR); without it every `\\n` moves DOWN a row without\n    // returning the carriage, and `ls` renders as a staircase marching off the right edge. The input\n    // half — CR to NL — is done server-side; see `crToNl` in api.ts.\n    convertEol: true,\n    fontSize: 13,\n    fontFamily: 'var(--font-mono, ui-monospace, monospace)',\n    cursorBlink: true,\n    theme: { background: '#0b0e14' },\n  });\n  const f = new FitAddon();\n  t.loadAddon(f);\n  if (host.value) {\n    host.value.innerHTML = '';\n    t.open(host.value);\n    f.fit();\n  }\n  term.value = t;\n  fit.value = f;\n\n  observer?.disconnect();\n  observer = new ResizeObserver(() => {\n    try {\n      f.fit();\n    } catch {\n      /* the element is detached mid-transition */\n    }\n  });\n  if (host.value) observer.observe(host.value);\n\n  const proto = location.protocol === 'https:' ? 'wss' : 'ws';\n  const qs = new URLSearchParams({ container: container.value, shell: shell.value });\n  const ws = new WebSocket(\n    `${proto}://${location.host}/api/deployments/${encodeURIComponent(id.value)}/terminal?${qs}`,\n  );\n  ws.binaryType = 'arraybuffer';\n  socket.value = ws;\n\n  ws.onopen = () => {\n    state.value = 'open';\n    t.focus();\n  };\n  // Bytes, not text: decoding per frame would corrupt a multi-byte character split across two\n  // reads. xterm takes a Uint8Array and handles the boundary itself.\n  ws.onmessage = (e) =>\n    t.write(typeof e.data === 'string' ? e.data : new Uint8Array(e.data as ArrayBuffer));\n  ws.onclose = (e) => {\n    state.value = 'closed';\n    // A close CODE alone tells an operator nothing. 1006 in particular is the browser's \"it just\n    // went away\", which here almost always means the upgrade was refused.\n    closeReason.value =\n      e.reason || (e.code === 1006 ? 'the connection dropped (the upgrade may have been refused)' : `code ${e.code}`);\n  };\n  ws.onerror = () => {\n    if (state.value === 'connecting') closeReason.value = 'could not open the connection';\n  };\n  t.onData((d) => {\n    if (ws.readyState === WebSocket.OPEN) ws.send(d);\n  });\n}\n\nfunction disconnect() {\n  socket.value?.close(1000, 'closed by the operator');\n}\n\nfunction teardown() {\n  observer?.disconnect();\n  observer = null;\n  socket.value?.close();\n  socket.value = null;\n  term.value?.dispose();\n  term.value = null;\n}\n\n// Switching container or shell must not leave the old shell running against a dead view.\nwatch([container, shell], () => {\n  if (state.value === 'open' || state.value === 'connecting') disconnect();\n});\nwatch(id, () => {\n  teardown();\n  state.value = 'idle';\n  void loadContainers();\n});\nonBeforeUnmount(teardown);\n</script>\n\n<template>\n  <section class=\"stack\">\n    <div class=\"banner warn\">\n      <b>No TTY.</b> The shell runs without a terminal device, so there is no prompt, no\n      <code>Ctrl-C</code>, and no full-screen programs (<code>top</code>, <code>vim</code>). Type a\n      command and press Enter.\n      <InfoHint label=\"why\">\n        A pseudo-terminal needs a wrapper (<code>script</code>) whose flags differ across\n        distributions, and it was never verified on a real host — so pstack ships the half it can\n        stand behind. Everything an operator usually opens a shell for (<code>ls</code>,\n        <code>cat</code>, <code>env</code>, <code>psql</code>, a migration) works.\n      </InfoHint>\n    </div>\n\n    <ErrorNote v-if=\"loadError\" :text=\"loadError\" title=\"Could not list this deployment's containers.\" />\n\n    <div class=\"row wrap\" style=\"gap: var(--s3); align-items: end\">\n      <label class=\"field\">\n        <span>Container</span>\n        <SelectMenu v-model=\"container\" label=\"Container\" :disabled=\"state === 'open' || state === 'connecting'\" :options=\"containerOptions\" />\n      </label>\n      <label class=\"field\">\n        <span>Shell</span>\n        <SelectMenu v-model=\"shell\" label=\"Shell\" :disabled=\"state === 'open' || state === 'connecting'\" :options=\"SHELLS.map((s) => ({ value: s, label: s }))\" />\n      </label>\n      <button\n        v-if=\"state !== 'open'\"\n        class=\"primary\"\n        :disabled=\"!container || state === 'connecting'\"\n        @click=\"connect\"\n      >\n        {{ state === 'connecting' ? 'Connecting…' : 'Open shell' }}\n      </button>\n      <button v-else @click=\"disconnect\">Close shell</button>\n      <span class=\"grow\" />\n      <span v-if=\"state === 'open'\" class=\"badge ok\"><span class=\"dot pulse\" />connected</span>\n    </div>\n\n    <p v-if=\"!running.length && !loadError\" class=\"hint\">\n      Nothing is running for this deployment, so there is nothing to open a shell in.\n    </p>\n\n    <p v-if=\"state === 'closed' && closeReason\" class=\"hint\">Session ended — {{ closeReason }}.</p>\n\n    <div ref=\"host\" class=\"terminal-host\" :data-state=\"state\" />\n\n    <p class=\"hint\">\n      Every session is recorded — who, which container, when — and the record is written when the\n      shell opens, so a session that dies with the process still leaves one.\n    </p>\n  </section>\n</template>\n\n<style scoped>\n.terminal-host {\n  min-height: 26rem;\n  border: 1px solid var(--line);\n  border-radius: var(--r3);\n  background: #0b0e14;\n  padding: var(--s2);\n  overflow: hidden;\n}\n.terminal-host[data-state='idle'] {\n  display: none;\n}\n</style>\n"],"file":"assets/TerminalTab-D5ncE4Cv.js"}
+{"version":3,"mappings":";+sBA0BA,MAAMA,EAAQC,EAAA,EACRC,EAAKC,EAAS,IAAM,OAAOH,EAAM,OAAO,EAAE,CAAC,EAE3CI,EAAS,CAAC,KAAM,OAAQ,MAAO,MAAO,MAAM,EAE5CC,EAAKC,EAA4B,IAAI,EACrCC,EAAYD,EAAI,EAAE,EAClBE,EAAYF,EAAI,EAAE,EAClBG,EAAQH,EAAI,IAAI,EAChBI,EAAQJ,EAA+C,MAAM,EAC7DK,EAAcL,EAAI,EAAE,EAEpBM,EAAON,EAA2B,IAAI,EAEtCO,EAAOC,EAAmD,IAAI,EAC9DC,EAAMD,EAAuD,IAAI,EACjEE,EAASF,EAA6B,IAAI,EAChD,IAAIG,EAAkC,KAEtC,MAAMC,EAAmBf,EAAS,IAChCgB,EAAQ,MAAM,IAAKC,IAAO,CAAE,MAAOA,EAAE,KAAM,MAAOA,EAAE,KAAM,KAAMA,EAAE,SAAW,QAAY,GAGrFD,EAAUhB,EAAS,WAAM,QAAAkB,EAAAhB,EAAG,QAAH,YAAAgB,EAAU,WAAW,OAAQD,GAAMA,EAAE,QAAU,aAAc,GAAE,EAE9F,eAAeE,GAAiB,OAC9B,MAAMC,EAAI,MAAMC,EAAI,IAClB,oBAAoB,mBAAmBtB,EAAG,KAAK,CAAC,YAElD,GAAI,CAACqB,EAAE,GAAI,CACThB,EAAU,MAAQkB,EAAQF,EAAG,mCAAmC,EAChE,MACF,CAGA,GAFAhB,EAAU,MAAQ,GAClBF,EAAG,MAAQkB,EAAE,KACTf,EAAU,MAAO,OAOrB,MAAMkB,EAAS,OAAO1B,EAAM,MAAM,WAAc,SAAWA,EAAM,MAAM,UAAY,GAC7E2B,EAAQR,EAAQ,MAAM,KAAMC,GAAMA,EAAE,OAASM,CAAM,EACzDlB,EAAU,OAAQmB,GAAA,YAAAA,EAAO,SAAQN,EAAAF,EAAQ,MAAM,CAAC,IAAf,YAAAE,EAAkB,OAAQ,EAC7D,CACKC,EAAA,EAEL,eAAeM,GAAU,OACvB,GAAIlB,EAAM,QAAU,cAAgBA,EAAM,QAAU,OAAQ,OAC5DC,EAAY,MAAQ,GACpBD,EAAM,MAAQ,aAGd,KAAM,CAAC,CAAE,SAAAmB,GAAY,CAAE,SAAAC,EAAU,EAAI,MAAM,QAAQ,IAAI,CAAAC,EAAA,IACrD,OAAO,qBAAc,OAAAC,KAAA,2BAAAD,EAAA,IACrB,OAAO,yBAAkB,OAAAC,KAAA,2BAC1B,EACD,MAAAD,EAAA,IAAM,mBAAmC,wBAEzCV,EAAAR,EAAK,QAAL,MAAAQ,EAAY,UACZ,MAAMY,EAAI,IAAIJ,EAAS,CAKrB,WAAY,GACZ,SAAU,GACV,WAAY,4CACZ,YAAa,GACb,MAAO,CAAE,WAAY,UAAU,CAChC,EACKK,EAAI,IAAIJ,EACdG,EAAE,UAAUC,CAAC,EACTtB,EAAK,QACPA,EAAK,MAAM,UAAY,GACvBqB,EAAE,KAAKrB,EAAK,KAAK,EACjBsB,EAAE,OAEJrB,EAAK,MAAQoB,EACblB,EAAI,MAAQmB,EAEZjB,GAAA,MAAAA,EAAU,aACVA,EAAW,IAAI,eAAe,IAAM,CAClC,GAAI,CACFiB,EAAE,KACJ,MAAQ,CAER,CACF,CAAC,EACGtB,EAAK,OAAOK,EAAS,QAAQL,EAAK,KAAK,EAE3C,MAAMuB,EAAQ,SAAS,WAAa,SAAW,MAAQ,KACjDC,EAAK,IAAI,gBAAgB,CAAE,UAAW5B,EAAU,MAAO,MAAOC,EAAM,MAAO,EAC3E4B,EAAK,IAAI,UACb,GAAGF,CAAK,MAAM,SAAS,IAAI,oBAAoB,mBAAmBjC,EAAG,KAAK,CAAC,aAAakC,CAAE,IAE5FC,EAAG,WAAa,cAChBrB,EAAO,MAAQqB,EAEfA,EAAG,OAAS,IAAM,CAChB3B,EAAM,MAAQ,OACduB,EAAE,OACJ,EAGAI,EAAG,UAAaC,GACdL,EAAE,MAAM,OAAOK,EAAE,MAAS,SAAWA,EAAE,KAAO,IAAI,WAAWA,EAAE,IAAmB,CAAC,EACrFD,EAAG,QAAWC,GAAM,CAClB5B,EAAM,MAAQ,SAGdC,EAAY,MACV2B,EAAE,SAAWA,EAAE,OAAS,KAAO,6DAA+D,QAAQA,EAAE,IAAI,GAChH,EACAD,EAAG,QAAU,IAAM,CACb3B,EAAM,QAAU,eAAcC,EAAY,MAAQ,gCACxD,EACAsB,EAAE,OAAQM,GAAM,CACVF,EAAG,aAAe,UAAU,MAAMA,EAAG,KAAKE,CAAC,CACjD,CAAC,CACH,CAEA,SAASC,GAAa,QACpBnB,EAAAL,EAAO,QAAP,MAAAK,EAAc,MAAM,IAAM,yBAC5B,CAEA,SAASoB,GAAW,SAClBxB,GAAA,MAAAA,EAAU,aACVA,EAAW,MACXI,EAAAL,EAAO,QAAP,MAAAK,EAAc,QACdL,EAAO,MAAQ,MACf0B,EAAA7B,EAAK,QAAL,MAAA6B,EAAY,UACZ7B,EAAK,MAAQ,IACf,CAGA,OAAA8B,EAAM,CAACnC,EAAWC,CAAK,EAAG,IAAM,EAC1BC,EAAM,QAAU,QAAUA,EAAM,QAAU,eAAc8B,EAAA,CAC9D,CAAC,EACDG,EAAMzC,EAAI,IAAM,CACduC,EAAA,EACA/B,EAAM,MAAQ,OACTY,EAAA,CACP,CAAC,EACDsB,EAAgBH,CAAQ,UAItBI,EAAA,EAAAC,EAiDU,UAjDVC,EAiDU,CAhDRC,EAUM,MAVNC,EAUM,CATJC,EAAA,KAAAA,EAAA,GAAAF,EAAc,SAAX,UAAO,mBAAI,wEACd,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAmB,YAAb,SAAM,mBAAO,kCAA+B,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAgB,YAAV,MAAG,mBAAO,KAAE,KAAAE,EAAA,KAAAA,EAAA,GAAAF,EAAgB,YAAV,MAAG,qBAAO,sCAEpF,KAAAG,EAKWC,EAAA,CALD,MAAM,OAAK,WAAC,IACe,IAAAF,EAAA,KAAAA,EAAA,MADf,uCACe,IAAAF,EAAmB,YAAb,SAAM,MAAO,yLAEU,IAAAA,EAAe,YAAT,KAAE,MAAO,KAC/E,IAAAA,EAAgB,YAAV,MAAG,MAAO,KAAE,IAAAA,EAAgB,YAAV,MAAG,MAAO,KAAE,IAAAA,EAAiB,YAAX,OAAI,MAAO,yBACvD,gBAGezC,EAAA,WAAjB8C,EAAqGC,EAAA,OAAxE,KAAM/C,EAAA,MAAW,MAAM,2EAEpDyC,EAoBM,MApBNO,GAoBM,CAnBJP,EAGQ,QAHRQ,GAGQ,CAFNN,EAAA,MAAAA,EAAA,IAAAF,EAAsB,YAAhB,YAAS,KACfG,EAAuIM,EAAA,YAAlHjD,EAAA,2CAAAA,EAAS,MAAAkD,GAAE,MAAM,YAAa,SAAUhD,EAAA,QAAK,QAAeA,EAAA,QAAK,aAAoB,QAASQ,EAAA,qDAErH8B,EAGQ,QAHRW,GAGQ,CAFNT,EAAA,MAAAA,EAAA,IAAAF,EAAkB,YAAZ,QAAK,KACXG,EAA0JM,EAAA,YAArIhD,EAAA,2CAAAA,EAAK,MAAAiD,GAAE,MAAM,QAAS,SAAUhD,EAAA,QAAK,QAAeA,EAAA,QAAK,aAAoB,QAASN,EAAO,IAAKwD,IAAC,OAAeA,EAAC,MAASA,GAAC,iDAG5IlD,EAAA,QAAK,YADboC,EAOS,gBALP,MAAM,UACL,SAAQ,CAAGtC,EAAA,OAAaE,EAAA,QAAK,aAC7B,QAAOkB,CAAA,IAELlB,EAAA,QAAK,2CAAAmD,EAAA,QAEVf,EAAuD,gBAAvC,QAAON,CAAA,EAAY,aAAW,iBAC9CQ,EAAqB,QAAf,MAAM,QAAM,UACNtC,EAAA,QAAK,QAAjBmC,EAAA,EAAAC,EAAyF,OAAzFgB,GAAyF,IAAAZ,EAAA,MAAAA,EAAA,KAA1CF,EAA0B,QAApB,MAAM,aAAW,WAAG,YAAS,qBAG1E7B,EAAA,MAAQ,QAAM,CAAKZ,EAAA,WAA7BuC,EAEI,IAFJiB,GAAqD,mFAErD,YAESrD,EAAA,kBAAsBC,EAAA,OAA/BkC,EAAA,EAAAC,EAA+F,IAA/FkB,GAAyD,mBAAgBC,EAAGtD,EAAA,KAAW,EAAG,IAAC,aAE3FqC,EAA4D,eAAnD,OAAJ,IAAIpC,EAAO,MAAM,gBAAiB,aAAYF,EAAA,kBAEnDwC,EAAA,MAAAA,EAAA,IAAAF,EAGI,KAHD,MAAM,QAAO,uKAGhB","names":["route","useRoute","id","computed","SHELLS","rt","ref","loadError","container","shell","state","closeReason","host","term","shallowRef","fit","socket","observer","containerOptions","running","c","_a","loadContainers","r","api","problem","wanted","match","connect","Terminal","FitAddon","__vitePreload","n","t","f","proto","qs","ws","e","d","disconnect","teardown","_b","watch","onBeforeUnmount","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_cache","_createVNode","InfoHint","_createBlock","ErrorNote","_hoisted_3","_hoisted_4","SelectMenu","$event","_hoisted_5","s","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_toDisplayString"],"ignoreList":[],"sources":["../../src/views/tabs/TerminalTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A shell inside one of this deployment's containers.\n *\n * THE SERVER DECIDES WHICH CONTAINER. This picker is filled from `/runtime`, i.e. the containers the\n * deployment actually owns, and the server checks the name again on upgrade — a hand-typed\n * `?container=pstack-control` is a 404 there, not here. The picker is a convenience, never the\n * boundary.\n *\n * THE COOKIE IS THE CREDENTIAL. A browser cannot set an `Authorization` header on a WebSocket, which\n * is exactly why sessions are cookies (0.10.0) — the handshake is a same-origin GET and carries the\n * session automatically. There is no token in this URL and there must never be one: a URL lands in\n * proxy logs and browser history.\n *\n * NO PTY. The server runs `docker exec -i`, not `-it`, so there is no prompt, no ^C and no `top`.\n * That is stated on the page rather than left for the operator to discover as \"the terminal is\n * broken\" — see the banner below and the comment at the head of `terminal.ts`.\n */\nimport { computed, onBeforeUnmount, ref, shallowRef, watch } from 'vue';\nimport { useRoute } from 'vue-router';\nimport { api, problem } from '../../api/client';\nimport type { RuntimeResponse } from '../../api/types';\nimport ErrorNote from '../../components/ErrorNote.vue';\nimport InfoHint from '../../components/InfoHint.vue';\nimport SelectMenu from '../../components/SelectMenu.vue';\n\nconst route = useRoute();\nconst id = computed(() => String(route.params.id));\n\nconst SHELLS = ['sh', 'bash', 'ash', 'zsh', 'fish'];\n\nconst rt = ref<RuntimeResponse | null>(null);\nconst loadError = ref('');\nconst container = ref('');\nconst shell = ref('sh');\nconst state = ref<'idle' | 'connecting' | 'open' | 'closed'>('idle');\nconst closeReason = ref('');\n\nconst host = ref<HTMLDivElement | null>(null);\n/** shallowRef: xterm's Terminal is a large mutable object and must not be made reactive. */\nconst term = shallowRef<import('@xterm/xterm').Terminal | null>(null);\nconst fit = shallowRef<import('@xterm/addon-fit').FitAddon | null>(null);\nconst socket = shallowRef<WebSocket | null>(null);\nlet observer: ResizeObserver | null = null;\n\nconst containerOptions = computed(() =>\n  running.value.map((c) => ({ value: c.name, label: c.name, hint: c.service ?? undefined })),\n);\n\nconst running = computed(() => rt.value?.containers.filter((c) => c.state === 'running') ?? []);\n\nasync function loadContainers() {\n  const r = await api.get<RuntimeResponse>(\n    `/api/deployments/${encodeURIComponent(id.value)}/runtime`,\n  );\n  if (!r.ok) {\n    loadError.value = problem(r, \"list this deployment's containers\");\n    return;\n  }\n  loadError.value = '';\n  rt.value = r.body;\n  if (container.value) return;\n  /*\n   * `?container=` is how the Containers table jumps straight to a shell here. Honoured only when it\n   * names a container this deployment actually owns and is running — an unknown name falls back to\n   * the first, because the alternative is a picker sitting on a container that does not exist and a\n   * Connect button that 404s. (The server checks the name again on upgrade; this is convenience.)\n   */\n  const wanted = typeof route.query.container === 'string' ? route.query.container : '';\n  const match = running.value.find((c) => c.name === wanted);\n  container.value = match?.name ?? running.value[0]?.name ?? '';\n}\nvoid loadContainers();\n\nasync function connect() {\n  if (state.value === 'connecting' || state.value === 'open') return;\n  closeReason.value = '';\n  state.value = 'connecting';\n\n  // Loaded on demand, not in the app shell: xterm is ~250KB and only this tab needs it.\n  const [{ Terminal }, { FitAddon }] = await Promise.all([\n    import('@xterm/xterm'),\n    import('@xterm/addon-fit'),\n  ]);\n  await import('@xterm/xterm/css/xterm.css');\n\n  term.value?.dispose();\n  const t = new Terminal({\n    // The OUTPUT half of the line discipline the missing pty would have provided. A real terminal\n    // converts NL to CR-NL on the way out (ONLCR); without it every `\\n` moves DOWN a row without\n    // returning the carriage, and `ls` renders as a staircase marching off the right edge. The input\n    // half — CR to NL — is done server-side; see `crToNl` in api.ts.\n    convertEol: true,\n    fontSize: 13,\n    fontFamily: 'var(--font-mono, ui-monospace, monospace)',\n    cursorBlink: true,\n    theme: { background: '#0b0e14' },\n  });\n  const f = new FitAddon();\n  t.loadAddon(f);\n  if (host.value) {\n    host.value.innerHTML = '';\n    t.open(host.value);\n    f.fit();\n  }\n  term.value = t;\n  fit.value = f;\n\n  observer?.disconnect();\n  observer = new ResizeObserver(() => {\n    try {\n      f.fit();\n    } catch {\n      /* the element is detached mid-transition */\n    }\n  });\n  if (host.value) observer.observe(host.value);\n\n  const proto = location.protocol === 'https:' ? 'wss' : 'ws';\n  const qs = new URLSearchParams({ container: container.value, shell: shell.value });\n  const ws = new WebSocket(\n    `${proto}://${location.host}/api/deployments/${encodeURIComponent(id.value)}/terminal?${qs}`,\n  );\n  ws.binaryType = 'arraybuffer';\n  socket.value = ws;\n\n  ws.onopen = () => {\n    state.value = 'open';\n    t.focus();\n  };\n  // Bytes, not text: decoding per frame would corrupt a multi-byte character split across two\n  // reads. xterm takes a Uint8Array and handles the boundary itself.\n  ws.onmessage = (e) =>\n    t.write(typeof e.data === 'string' ? e.data : new Uint8Array(e.data as ArrayBuffer));\n  ws.onclose = (e) => {\n    state.value = 'closed';\n    // A close CODE alone tells an operator nothing. 1006 in particular is the browser's \"it just\n    // went away\", which here almost always means the upgrade was refused.\n    closeReason.value =\n      e.reason || (e.code === 1006 ? 'the connection dropped (the upgrade may have been refused)' : `code ${e.code}`);\n  };\n  ws.onerror = () => {\n    if (state.value === 'connecting') closeReason.value = 'could not open the connection';\n  };\n  t.onData((d) => {\n    if (ws.readyState === WebSocket.OPEN) ws.send(d);\n  });\n}\n\nfunction disconnect() {\n  socket.value?.close(1000, 'closed by the operator');\n}\n\nfunction teardown() {\n  observer?.disconnect();\n  observer = null;\n  socket.value?.close();\n  socket.value = null;\n  term.value?.dispose();\n  term.value = null;\n}\n\n// Switching container or shell must not leave the old shell running against a dead view.\nwatch([container, shell], () => {\n  if (state.value === 'open' || state.value === 'connecting') disconnect();\n});\nwatch(id, () => {\n  teardown();\n  state.value = 'idle';\n  void loadContainers();\n});\nonBeforeUnmount(teardown);\n</script>\n\n<template>\n  <section class=\"stack\">\n    <div class=\"banner warn\">\n      <b>No TTY.</b> The shell runs without a terminal device, so there is no prompt, no\n      <code>Ctrl-C</code>, and no full-screen programs (<code>top</code>, <code>vim</code>). Type a\n      command and press Enter.\n      <InfoHint label=\"why\">\n        A pseudo-terminal needs a wrapper (<code>script</code>) whose flags differ across\n        distributions, and it was never verified on a real host — so pstack ships the half it can\n        stand behind. Everything an operator usually opens a shell for (<code>ls</code>,\n        <code>cat</code>, <code>env</code>, <code>psql</code>, a migration) works.\n      </InfoHint>\n    </div>\n\n    <ErrorNote v-if=\"loadError\" :text=\"loadError\" title=\"Could not list this deployment's containers.\" />\n\n    <div class=\"row wrap\" style=\"gap: var(--s3); align-items: end\">\n      <label class=\"field\">\n        <span>Container</span>\n        <SelectMenu v-model=\"container\" label=\"Container\" :disabled=\"state === 'open' || state === 'connecting'\" :options=\"containerOptions\" />\n      </label>\n      <label class=\"field\">\n        <span>Shell</span>\n        <SelectMenu v-model=\"shell\" label=\"Shell\" :disabled=\"state === 'open' || state === 'connecting'\" :options=\"SHELLS.map((s) => ({ value: s, label: s }))\" />\n      </label>\n      <button\n        v-if=\"state !== 'open'\"\n        class=\"primary\"\n        :disabled=\"!container || state === 'connecting'\"\n        @click=\"connect\"\n      >\n        {{ state === 'connecting' ? 'Connecting…' : 'Open shell' }}\n      </button>\n      <button v-else @click=\"disconnect\">Close shell</button>\n      <span class=\"grow\" />\n      <span v-if=\"state === 'open'\" class=\"badge ok\"><span class=\"dot pulse\" />connected</span>\n    </div>\n\n    <p v-if=\"!running.length && !loadError\" class=\"hint\">\n      Nothing is running for this deployment, so there is nothing to open a shell in.\n    </p>\n\n    <p v-if=\"state === 'closed' && closeReason\" class=\"hint\">Session ended — {{ closeReason }}.</p>\n\n    <div ref=\"host\" class=\"terminal-host\" :data-state=\"state\" />\n\n    <p class=\"hint\">\n      Every session is recorded — who, which container, when — and the record is written when the\n      shell opens, so a session that dies with the process still leaves one.\n    </p>\n  </section>\n</template>\n\n<style scoped>\n.terminal-host {\n  min-height: 26rem;\n  border: 1px solid var(--line);\n  border-radius: var(--r3);\n  background: #0b0e14;\n  padding: var(--s2);\n  overflow: hidden;\n}\n.terminal-host[data-state='idle'] {\n  display: none;\n}\n</style>\n"],"file":"assets/TerminalTab-BRumgZMI.js"}

package/dist/assets/{UsersView-BxU2ho4N.js → UsersView-B7C2Bc3R.js}

@@ -1,2 +1,2 @@
-import{d as z,c as n,a as e,f as y,e as i,w as b,_ as S,x as C,g as _,t as d,F as R,s as I,h as P,i as A,v as U,u as T,b as g,T as G,r as u,C as H,A as h,B as f,o,L as x}from"./index-DVMQBHXF.js";import{_ as B}from"./ActionButton.vue_vue_type_script_setup_true_lang-D5wrEmB2.js";import{E as D}from"./EquivalentCommand-C45BzkNz.js";import{_ as J}from"./ErrorNote.vue_vue_type_script_setup_true_lang-B3hfwyPR.js";import{_ as E}from"./RelativeTime.vue_vue_type_script_setup_true_lang-BGissyps.js";import{_ as F}from"./SkeletonList.vue_vue_type_script_setup_true_lang-qMyLRAMp.js";import{_ as K}from"./RefreshButton.vue_vue_type_script_setup_true_lang-CXCY3Vlc.js";import{_ as Q}from"./_plugin-vue_export-helper-DlAUqK2U.js";import"./useFormat-DVXTfIS-.js";const X={class:"page-head"},Z={class:"sub"},ee={key:1,class:"banner ok"},se={class:"code"},te={class:"row"},ae={class:"grid-2"},oe={class:"panel"},ne={class:"phead"},le={class:"mute",style:{"font-size":"var(--t-xs)"}},re={key:1,class:"cards"},ie={class:"name","data-label":"user"},de={key:0,class:"badge info"},ue={class:"dim nowrap","data-label":"added"},pe={class:"right nowrap","data-label":""},ce=["onClick"],ve={key:2,class:"hint"},me={class:"row wrap two-up"},he={class:"field grow"},we={class:"field grow"},ke={class:"row"},fe=["disabled"],ye={class:"panel"},be={class:"phead"},_e={key:1,class:"cards"},ge={class:"name","data-label":"name"},$e={class:"dim nowrap","data-label":"last used"},Ce={key:1,class:"mute"},Ae={class:"right nowrap","data-label":""},Ue={key:2,class:"hint"},Te={class:"field"},xe={class:"row"},Ve=["disabled"],Ne={class:"sheet",role:"dialog","aria-modal":"true","aria-label":"Change password"},Pe={class:"hint"},Se={class:"field"},Re={class:"row"},Ie=["disabled"],Be=z({__name:"UsersView",setup(De){const $=u([]),V=u([]),N=u(!1),r=u(""),l=u({username:"",password:""}),c=u(""),p=u(null),w=u(""),k=u(null),L=H(()=>l.value.username.trim().length>0&&l.value.password.length>=8);async function v(){const[a,s]=await Promise.all([h.get("/api/users"),h.get("/api/tokens")]);if(N.value=!0,!a.ok){r.value=f(a,"load the accounts");return}r.value="",$.value=a.body.users??[],V.value=s.ok?s.body.tokens??[]:[]}v();async function M(){const a=await h.post("/api/users",{username:l.value.username.trim(),password:l.value.password});if(!a.ok){r.value=f(a,"create this account");return}x("ok",`Created ${a.body.user.username}.`),l.value={username:"",password:""},v()}async function O(a){const s=await h.del(`/api/users/${a.id}`);if(!s.ok){r.value=f(s,`delete ${a.username}`);return}x("ok",`Deleted ${a.username}.`),v()}async function W(){var t;const a=p.value;if(!a)return;const s=await h.put(`/api/users/${a.id}/password`,{password:w.value});if(!s.ok){r.value=f(s,`change the password for ${a.username}`);return}p.value=null,w.value="",x("ok",a.id===((t=g.user)==null?void 0:t.id)?"Password changed. You have been signed out everywhere — sign in again.":`Password changed. ${a.username} has been signed out everywhere.`),v()}async function Y(){const a=await h.post("/api/tokens",{name:c.value.trim()});if(!a.ok){r.value=f(a,"create this token");return}k.value={what:`Personal token “${c.value.trim()}”`,value:a.body.token,note:"Send it as a bearer token. The server stores only a hash, so this is the only time it is shown."},c.value="",v()}async function j(a){const s=await h.del(`/api/tokens/${a.id}`);if(!s.ok){r.value=f(s,`revoke ${a.name}`);return}x("ok",`Revoked ${a.name}.`),v()}return(a,s)=>(o(),n("div",null,[e("div",X,[e("div",null,[s[9]||(s[9]=e("h1",null,"Users & access",-1)),e("div",Z,[s[8]||(s[8]=y(" Who can sign in, and the tokens they use from scripts ",-1)),i(S,{label:"how access works here"},{default:b(()=>[...s[7]||(s[7]=[y(" Three kinds of caller. The host token from the environment is the root credential CI holds. An account signs in with a password and gets a browser session. A personal token belongs to one account and is what a script uses — it can do anything that account can. ",-1)])]),_:1})])]),s[10]||(s[10]=e("span",{class:"grow"},null,-1)),i(K,{run:v})]),r.value?(o(),C(J,{key:0,text:r.value,title:"Something went wrong."},null,8,["text"])):_("",!0),k.value?(o(),n("div",ee,[e("b",null,d(k.value.what)+" — copy it now.",1),e("p",null,d(k.value.note),1),e("pre",se,d(k.value.value),1),e("div",te,[e("button",{onClick:s[0]||(s[0]=t=>k.value=null)},"I have stored it")])])):_("",!0),e("div",ae,[e("section",oe,[e("div",ne,[s[11]||(s[11]=e("h2",{class:"section"},"Accounts",-1)),s[12]||(s[12]=e("span",{class:"grow"},null,-1)),e("span",le,d($.value.length),1)]),N.value?$.value.length?(o(),n("table",re,[s[14]||(s[14]=e("thead",null,[e("tr",null,[e("th",null,"User"),e("th",null,"Added"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(o(!0),n(R,null,I($.value,t=>{var m;return o(),n("tr",{key:t.id},[e("td",ie,[e("b",null,d(t.username),1),t.id===((m=T(g).user)==null?void 0:m.id)?(o(),n("span",de,"you")):_("",!0)]),e("td",ue,[i(E,{at:t.createdAt},null,8,["at"])]),e("td",pe,[e("button",{class:"ghost sm",onClick:q=>{p.value=t,w.value=""}},"Change password",8,ce),i(B,{class:"danger sm",confirm:`Delete ${t.username}?`,onRun:q=>O(t)},{default:b(()=>[...s[13]||(s[13]=[y("Delete",-1)])]),_:1},8,["confirm","onRun"])])])}),128))])])):(o(),n("p",ve,"No accounts yet.")):(o(),C(F,{key:0,rows:3})),e("form",{class:"stack-form",onSubmit:P(M,["prevent"])},[s[18]||(s[18]=e("h3",null,"Add an account",-1)),e("div",me,[e("label",he,[s[15]||(s[15]=e("span",null,"Username",-1)),A(e("input",{"onUpdate:modelValue":s[1]||(s[1]=t=>l.value.username=t),type:"text",autocomplete:"off"},null,512),[[U,l.value.username]])]),e("label",we,[s[16]||(s[16]=e("span",null,"Password",-1)),A(e("input",{"onUpdate:modelValue":s[2]||(s[2]=t=>l.value.password=t),type:"password",autocomplete:"new-password"},null,512),[[U,l.value.password]])])]),s[19]||(s[19]=e("p",{class:"hint"},"At least 8 characters.",-1)),e("div",ke,[e("button",{class:"primary",type:"submit",disabled:!L.value},"Add account",8,fe),s[17]||(s[17]=e("span",{class:"grow"},null,-1))]),i(D,{what:"this account creation",method:"POST",path:"/api/users",body:{username:l.value.username||"alice",password:"…"}},null,8,["body"])],32)]),e("section",ye,[e("div",be,[s[21]||(s[21]=e("h2",{class:"section"},"Your API tokens",-1)),i(S,{label:"when to use one"},{default:b(()=>[...s[20]||(s[20]=[y(" A script or a CI job signing in as you. It carries whatever you can do, so give each one a name you will recognise later and revoke the ones you stop using. ",-1)])]),_:1})]),N.value?V.value.length?(o(),n("table",_e,[s[23]||(s[23]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Last used"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(o(!0),n(R,null,I(V.value,t=>(o(),n("tr",{key:t.id},[e("td",ge,[e("b",null,d(t.name),1)]),e("td",$e,[t.lastUsedAt?(o(),C(E,{key:0,at:t.lastUsedAt},null,8,["at"])):(o(),n("span",Ce,"never"))]),e("td",Ae,[i(B,{class:"danger sm",confirm:`Revoke ${t.name}?`,onRun:m=>j(t)},{default:b(()=>[...s[22]||(s[22]=[y("Revoke",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(o(),n("p",Ue,d(T(g).root?"The host token is not an account, so it has no personal tokens.":"No tokens yet."),1)):(o(),C(F,{key:0,rows:2})),T(g).root?_("",!0):(o(),n("form",{key:3,class:"stack-form",onSubmit:P(Y,["prevent"])},[s[25]||(s[25]=e("h3",null,"New token",-1)),e("label",Te,[s[24]||(s[24]=e("span",null,"What is it for",-1)),A(e("input",{"onUpdate:modelValue":s[3]||(s[3]=t=>c.value=t),type:"text",placeholder:"ci-deploy",autocomplete:"off"},null,512),[[U,c.value]])]),e("div",xe,[e("button",{class:"primary",type:"submit",disabled:!c.value.trim()},"Create token",8,Ve)]),i(D,{what:"this token creation",method:"POST",path:"/api/tokens",body:{name:c.value||"ci-deploy"}},null,8,["body"])],32))])]),i(G,{name:"fade"},{default:b(()=>{var t;return[p.value?(o(),n("div",{key:0,class:"scrim",onClick:s[6]||(s[6]=P(m=>p.value=null,["self"]))},[e("div",Ne,[e("h3",null,"Change password for "+d(p.value.username),1),e("p",Pe," This signs "+d(p.value.id===((t=T(g).user)==null?void 0:t.id)?"you":"them")+" out everywhere — every session and personal token is revoked. ",1),e("label",Se,[s[26]||(s[26]=e("span",null,"New password",-1)),A(e("input",{"onUpdate:modelValue":s[4]||(s[4]=m=>w.value=m),type:"password",autocomplete:"new-password"},null,512),[[U,w.value]])]),e("div",Re,[e("button",{class:"primary",disabled:w.value.length<8,onClick:W}," Change password ",8,Ie),e("button",{class:"ghost",onClick:s[5]||(s[5]=m=>p.value=null)},"Cancel")])])])):_("",!0)]}),_:1})]))}}),ze=Q(Be,[["__scopeId","data-v-46dca32b"]]);export{ze as default};
-//# sourceMappingURL=UsersView-BxU2ho4N.js.map
+import{d as q,c as n,a as e,f as y,e as i,w as b,_ as S,z as C,g as _,t as d,F as R,y as I,h as P,i as U,v as A,u as T,b as g,T as G,r as u,j as H,n as h,C as f,o,O as x}from"./index-9Ra4jfL4.js";import{_ as D}from"./ActionButton.vue_vue_type_script_setup_true_lang-B0qf7_XI.js";import{E as B}from"./EquivalentCommand-GFG6rkn5.js";import{_ as J}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DNaY6OBe.js";import{_ as E}from"./RelativeTime.vue_vue_type_script_setup_true_lang-Dm9XnXF7.js";import{_ as F}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DjfNq2KM.js";import{_ as K}from"./RefreshButton.vue_vue_type_script_setup_true_lang-DpeOKN8U.js";import{_ as Q}from"./_plugin-vue_export-helper-DlAUqK2U.js";import"./useFormat-DIlTY5Dl.js";const X={class:"page-head"},Z={class:"sub"},ee={key:1,class:"banner ok"},se={class:"code"},te={class:"row"},ae={class:"grid-2"},oe={class:"panel"},ne={class:"phead"},le={class:"mute",style:{"font-size":"var(--t-xs)"}},re={key:1,class:"cards"},ie={class:"name","data-label":"user"},de={key:0,class:"badge info"},ue={class:"dim nowrap","data-label":"added"},pe={class:"right nowrap","data-label":""},ce=["onClick"],ve={key:2,class:"hint"},me={class:"row wrap two-up"},he={class:"field grow"},we={class:"field grow"},ke={class:"row"},fe=["disabled"],ye={class:"panel"},be={class:"phead"},_e={key:1,class:"cards"},ge={class:"name","data-label":"name"},$e={class:"dim nowrap","data-label":"last used"},Ce={key:1,class:"mute"},Ue={class:"right nowrap","data-label":""},Ae={key:2,class:"hint"},Te={class:"field"},xe={class:"row"},Ve=["disabled"],Ne={class:"sheet",role:"dialog","aria-modal":"true","aria-label":"Change password"},Pe={class:"hint"},Se={class:"field"},Re={class:"row"},Ie=["disabled"],De=q({__name:"UsersView",setup(Be){const $=u([]),V=u([]),N=u(!1),r=u(""),l=u({username:"",password:""}),c=u(""),p=u(null),w=u(""),k=u(null),O=H(()=>l.value.username.trim().length>0&&l.value.password.length>=8);async function v(){const[a,s]=await Promise.all([h.get("/api/users"),h.get("/api/tokens")]);if(N.value=!0,!a.ok){r.value=f(a,"load the accounts");return}r.value="",$.value=a.body.users??[],V.value=s.ok?s.body.tokens??[]:[]}v();async function j(){const a=await h.post("/api/users",{username:l.value.username.trim(),password:l.value.password});if(!a.ok){r.value=f(a,"create this account");return}x("ok",`Created ${a.body.user.username}.`),l.value={username:"",password:""},v()}async function z(a){const s=await h.del(`/api/users/${a.id}`);if(!s.ok){r.value=f(s,`delete ${a.username}`);return}x("ok",`Deleted ${a.username}.`),v()}async function L(){var t;const a=p.value;if(!a)return;const s=await h.put(`/api/users/${a.id}/password`,{password:w.value});if(!s.ok){r.value=f(s,`change the password for ${a.username}`);return}p.value=null,w.value="",x("ok",a.id===((t=g.user)==null?void 0:t.id)?"Password changed. You have been signed out everywhere — sign in again.":`Password changed. ${a.username} has been signed out everywhere.`),v()}async function M(){const a=await h.post("/api/tokens",{name:c.value.trim()});if(!a.ok){r.value=f(a,"create this token");return}k.value={what:`Personal token “${c.value.trim()}”`,value:a.body.token,note:"Send it as a bearer token. The server stores only a hash, so this is the only time it is shown."},c.value="",v()}async function W(a){const s=await h.del(`/api/tokens/${a.id}`);if(!s.ok){r.value=f(s,`revoke ${a.name}`);return}x("ok",`Revoked ${a.name}.`),v()}return(a,s)=>(o(),n("div",null,[e("div",X,[e("div",null,[s[9]||(s[9]=e("h1",null,"Users & access",-1)),e("div",Z,[s[8]||(s[8]=y(" Who can sign in, and the tokens they use from scripts ",-1)),i(S,{label:"how access works here"},{default:b(()=>[...s[7]||(s[7]=[y(" Three kinds of caller. The host token from the environment is the root credential CI holds. An account signs in with a password and gets a browser session. A personal token belongs to one account and is what a script uses — it can do anything that account can. ",-1)])]),_:1})])]),s[10]||(s[10]=e("span",{class:"grow"},null,-1)),i(K,{run:v})]),r.value?(o(),C(J,{key:0,text:r.value,title:"Something went wrong."},null,8,["text"])):_("",!0),k.value?(o(),n("div",ee,[e("b",null,d(k.value.what)+" — copy it now.",1),e("p",null,d(k.value.note),1),e("pre",se,d(k.value.value),1),e("div",te,[e("button",{onClick:s[0]||(s[0]=t=>k.value=null)},"I have stored it")])])):_("",!0),e("div",ae,[e("section",oe,[e("div",ne,[s[11]||(s[11]=e("h2",{class:"section"},"Accounts",-1)),s[12]||(s[12]=e("span",{class:"grow"},null,-1)),e("span",le,d($.value.length),1)]),N.value?$.value.length?(o(),n("table",re,[s[14]||(s[14]=e("thead",null,[e("tr",null,[e("th",null,"User"),e("th",null,"Added"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(o(!0),n(R,null,I($.value,t=>{var m;return o(),n("tr",{key:t.id},[e("td",ie,[e("b",null,d(t.username),1),t.id===((m=T(g).user)==null?void 0:m.id)?(o(),n("span",de,"you")):_("",!0)]),e("td",ue,[i(E,{at:t.createdAt},null,8,["at"])]),e("td",pe,[e("button",{class:"ghost sm",onClick:Y=>{p.value=t,w.value=""}},"Change password",8,ce),i(D,{class:"danger sm",confirm:`Delete ${t.username}?`,onRun:Y=>z(t)},{default:b(()=>[...s[13]||(s[13]=[y("Delete",-1)])]),_:1},8,["confirm","onRun"])])])}),128))])])):(o(),n("p",ve,"No accounts yet.")):(o(),C(F,{key:0,rows:3})),e("form",{class:"stack-form",onSubmit:P(j,["prevent"])},[s[18]||(s[18]=e("h3",null,"Add an account",-1)),e("div",me,[e("label",he,[s[15]||(s[15]=e("span",null,"Username",-1)),U(e("input",{"onUpdate:modelValue":s[1]||(s[1]=t=>l.value.username=t),type:"text",autocomplete:"off"},null,512),[[A,l.value.username]])]),e("label",we,[s[16]||(s[16]=e("span",null,"Password",-1)),U(e("input",{"onUpdate:modelValue":s[2]||(s[2]=t=>l.value.password=t),type:"password",autocomplete:"new-password"},null,512),[[A,l.value.password]])])]),s[19]||(s[19]=e("p",{class:"hint"},"At least 8 characters.",-1)),e("div",ke,[e("button",{class:"primary",type:"submit",disabled:!O.value},"Add account",8,fe),s[17]||(s[17]=e("span",{class:"grow"},null,-1))]),i(B,{what:"this account creation",method:"POST",path:"/api/users",body:{username:l.value.username||"alice",password:"…"}},null,8,["body"])],32)]),e("section",ye,[e("div",be,[s[21]||(s[21]=e("h2",{class:"section"},"Your API tokens",-1)),i(S,{label:"when to use one"},{default:b(()=>[...s[20]||(s[20]=[y(" A script or a CI job signing in as you. It carries whatever you can do, so give each one a name you will recognise later and revoke the ones you stop using. ",-1)])]),_:1})]),N.value?V.value.length?(o(),n("table",_e,[s[23]||(s[23]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Last used"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(o(!0),n(R,null,I(V.value,t=>(o(),n("tr",{key:t.id},[e("td",ge,[e("b",null,d(t.name),1)]),e("td",$e,[t.lastUsedAt?(o(),C(E,{key:0,at:t.lastUsedAt},null,8,["at"])):(o(),n("span",Ce,"never"))]),e("td",Ue,[i(D,{class:"danger sm",confirm:`Revoke ${t.name}?`,onRun:m=>W(t)},{default:b(()=>[...s[22]||(s[22]=[y("Revoke",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(o(),n("p",Ae,d(T(g).root?"The host token is not an account, so it has no personal tokens.":"No tokens yet."),1)):(o(),C(F,{key:0,rows:2})),T(g).root?_("",!0):(o(),n("form",{key:3,class:"stack-form",onSubmit:P(M,["prevent"])},[s[25]||(s[25]=e("h3",null,"New token",-1)),e("label",Te,[s[24]||(s[24]=e("span",null,"What is it for",-1)),U(e("input",{"onUpdate:modelValue":s[3]||(s[3]=t=>c.value=t),type:"text",placeholder:"ci-deploy",autocomplete:"off"},null,512),[[A,c.value]])]),e("div",xe,[e("button",{class:"primary",type:"submit",disabled:!c.value.trim()},"Create token",8,Ve)]),i(B,{what:"this token creation",method:"POST",path:"/api/tokens",body:{name:c.value||"ci-deploy"}},null,8,["body"])],32))])]),i(G,{name:"fade"},{default:b(()=>{var t;return[p.value?(o(),n("div",{key:0,class:"scrim",onClick:s[6]||(s[6]=P(m=>p.value=null,["self"]))},[e("div",Ne,[e("h3",null,"Change password for "+d(p.value.username),1),e("p",Pe," This signs "+d(p.value.id===((t=T(g).user)==null?void 0:t.id)?"you":"them")+" out everywhere — every session and personal token is revoked. ",1),e("label",Se,[s[26]||(s[26]=e("span",null,"New password",-1)),U(e("input",{"onUpdate:modelValue":s[4]||(s[4]=m=>w.value=m),type:"password",autocomplete:"new-password"},null,512),[[A,w.value]])]),e("div",Re,[e("button",{class:"primary",disabled:w.value.length<8,onClick:L}," Change password ",8,Ie),e("button",{class:"ghost",onClick:s[5]||(s[5]=m=>p.value=null)},"Cancel")])])])):_("",!0)]}),_:1})]))}}),qe=Q(De,[["__scopeId","data-v-46dca32b"]]);export{qe as default};
+//# sourceMappingURL=UsersView-B7C2Bc3R.js.map

package/dist/assets/{UsersView-BxU2ho4N.js.map → UsersView-B7C2Bc3R.js.map}

@@ -1 +1 @@
-{"version":3,"file":"UsersView-BxU2ho4N.js","sources":["../../src/views/UsersView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Accounts and personal API tokens.\n *\n * Accounts landed in 0.10.0 with no UI at all, so the only way to add a second operator was a curl\n * call — which is exactly the thing a control plane exists to spare people.\n *\n * TWO AUDIENCES, TWO SECTIONS, and the split is deliberate. **Accounts** are about other people and\n * are shared state; **tokens** are yours alone (the API scopes them to the caller and cannot show\n * anyone else's). Mixing them into one table would imply an admin can manage another person's\n * tokens, which is not true and would be a bad idea if it were.\n *\n * SECRETS ARE SHOWN ONCE, and the page says so in the same breath as showing them. Same discipline\n * as a notifier signing secret and a registry credential: there is no read path on the server, so\n * this is not a policy that could be relaxed later — the value genuinely stops existing.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { authState } from '../composables/useAuth';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport EquivalentCommand from '../components/EquivalentCommand.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\n\ntype User = { id: number; username: string; role: string; createdAt: number };\ntype Token = { id: number; name: string; createdAt: number; lastUsedAt: number | null };\n\nconst users = ref<User[]>([]);\nconst tokens = ref<Token[]>([]);\nconst loaded = ref(false);\nconst listError = ref('');\n\nconst newUser = ref({ username: '', password: '' });\nconst newToken = ref('');\nconst pwFor = ref<User | null>(null);\nconst pwValue = ref('');\n\n/** Held only until dismissed — there is no way to show either of these again. */\nconst revealed = ref<{ what: string; value: string; note: string } | null>(null);\n\nconst canCreateUser = computed(\n  () => newUser.value.username.trim().length > 0 && newUser.value.password.length >= 8,\n);\n\nasync function load(): Promise<void> {\n  const [u, t] = await Promise.all([\n    api.get<{ users: User[] }>('/api/users'),\n    api.get<{ tokens: Token[] }>('/api/tokens'),\n  ]);\n  loaded.value = true;\n  if (!u.ok) {\n    listError.value = problem(u, 'load the accounts');\n    return;\n  }\n  listError.value = '';\n  users.value = u.body.users ?? [];\n  // Root (PSTACK_TOKEN) is not a user, so it has no personal tokens — an error here is expected.\n  tokens.value = t.ok ? (t.body.tokens ?? []) : [];\n}\nvoid load();\n\nasync function createUser(): Promise<void> {\n  const r = await api.post<{ user: User }>('/api/users', {\n    username: newUser.value.username.trim(),\n    password: newUser.value.password,\n  });\n  if (!r.ok) {\n    listError.value = problem(r, 'create this account');\n    return;\n  }\n  toast('ok', `Created ${r.body.user.username}.`);\n  newUser.value = { username: '', password: '' };\n  void load();\n}\n\nasync function removeUser(u: User): Promise<void> {\n  const r = await api.del(`/api/users/${u.id}`);\n  // The server refuses to delete the last account. That is a rule worth surfacing verbatim rather\n  // than as \"could not delete\" — it tells the operator what to do instead.\n  if (!r.ok) {\n    listError.value = problem(r, `delete ${u.username}`);\n    return;\n  }\n  toast('ok', `Deleted ${u.username}.`);\n  void load();\n}\n\nasync function changePassword(): Promise<void> {\n  const u = pwFor.value;\n  if (!u) return;\n  const r = await api.put(`/api/users/${u.id}/password`, { password: pwValue.value });\n  if (!r.ok) {\n    listError.value = problem(r, `change the password for ${u.username}`);\n    return;\n  }\n  pwFor.value = null;\n  pwValue.value = '';\n  // Not a footnote: the change signs that user out everywhere, and if it was YOU, the next request\n  // is a 401. Saying so here is the difference between an expected step and an apparent bug.\n  toast(\n    'ok',\n    u.id === authState.user?.id\n      ? `Password changed. You have been signed out everywhere — sign in again.`\n      : `Password changed. ${u.username} has been signed out everywhere.`,\n  );\n  void load();\n}\n\nasync function createToken(): Promise<void> {\n  const r = await api.post<{ token: string; id: number }>('/api/tokens', {\n    name: newToken.value.trim(),\n  });\n  if (!r.ok) {\n    listError.value = problem(r, 'create this token');\n    return;\n  }\n  revealed.value = {\n    what: `Personal token “${newToken.value.trim()}”`,\n    value: r.body.token,\n    note: 'Send it as a bearer token. The server stores only a hash, so this is the only time it is shown.',\n  };\n  newToken.value = '';\n  void load();\n}\n\nasync function removeToken(t: Token): Promise<void> {\n  const r = await api.del(`/api/tokens/${t.id}`);\n  if (!r.ok) {\n    listError.value = problem(r, `revoke ${t.name}`);\n    return;\n  }\n  toast('ok', `Revoked ${t.name}.`);\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Users &amp; access</h1>\n        <div class=\"sub\">\n          Who can sign in, and the tokens they use from scripts\n          <InfoHint label=\"how access works here\">\n            Three kinds of caller. The host token from the environment is the root credential CI\n            holds. An account signs in with a password and gets a browser session. A personal token\n            belongs to one account and is what a script uses — it can do anything that account can.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Something went wrong.\" />\n\n    <div v-if=\"revealed\" class=\"banner ok\">\n      <b>{{ revealed.what }} — copy it now.</b>\n      <p>{{ revealed.note }}</p>\n      <pre class=\"code\">{{ revealed.value }}</pre>\n      <div class=\"row\">\n        <button @click=\"revealed = null\">I have stored it</button>\n      </div>\n    </div>\n\n    <div class=\"grid-2\">\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Accounts</h2>\n          <span class=\"grow\" />\n          <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ users.length }}</span>\n        </div>\n\n        <SkeletonList v-if=\"!loaded\" :rows=\"3\" />\n        <!-- `cards` + `data-label` per cell: below 640px the same markup renders as cards. Without\n             it the row's two buttons pushed the table past the viewport and got clipped. -->\n        <table v-else-if=\"users.length\" class=\"cards\">\n          <thead>\n            <tr>\n              <th>User</th>\n              <th>Added</th>\n              <th aria-label=\"Actions\" />\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"u in users\" :key=\"u.id\">\n              <td class=\"name\" data-label=\"user\">\n                <b>{{ u.username }}</b>\n                <span v-if=\"u.id === authState.user?.id\" class=\"badge info\">you</span>\n              </td>\n              <td class=\"dim nowrap\" data-label=\"added\"><RelativeTime :at=\"u.createdAt\" /></td>\n              <td class=\"right nowrap\" data-label=\"\">\n                <button class=\"ghost sm\" @click=\"pwFor = u; pwValue = ''\">Change password</button>\n                <ActionButton\n                  class=\"danger sm\"\n                  :confirm=\"`Delete ${u.username}?`\"\n                  @run=\"removeUser(u)\"\n                  >Delete</ActionButton\n                >\n              </td>\n            </tr>\n          </tbody>\n        </table>\n        <p v-else class=\"hint\">No accounts yet.</p>\n\n        <form class=\"stack-form\" @submit.prevent=\"createUser\">\n          <h3>Add an account</h3>\n          <div class=\"row wrap two-up\">\n            <label class=\"field grow\">\n              <span>Username</span>\n              <input v-model=\"newUser.username\" type=\"text\" autocomplete=\"off\" />\n            </label>\n            <label class=\"field grow\">\n              <span>Password</span>\n              <input v-model=\"newUser.password\" type=\"password\" autocomplete=\"new-password\" />\n            </label>\n          </div>\n          <p class=\"hint\">At least 8 characters.</p>\n          <div class=\"row\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!canCreateUser\">Add account</button>\n            <span class=\"grow\" />\n          </div>\n          <EquivalentCommand\n            what=\"this account creation\"\n            method=\"POST\"\n            path=\"/api/users\"\n            :body=\"{ username: newUser.username || 'alice', password: '…' }\"\n          />\n        </form>\n      </section>\n\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Your API tokens</h2>\n          <InfoHint label=\"when to use one\">\n            A script or a CI job signing in as you. It carries whatever you can do, so give each one\n            a name you will recognise later and revoke the ones you stop using.\n          </InfoHint>\n        </div>\n\n        <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n        <table v-else-if=\"tokens.length\" class=\"cards\">\n          <thead>\n            <tr>\n              <th>Name</th>\n              <th>Last used</th>\n              <th aria-label=\"Actions\" />\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"t in tokens\" :key=\"t.id\">\n              <td class=\"name\" data-label=\"name\"><b>{{ t.name }}</b></td>\n              <td class=\"dim nowrap\" data-label=\"last used\">\n                <RelativeTime v-if=\"t.lastUsedAt\" :at=\"t.lastUsedAt\" />\n                <span v-else class=\"mute\">never</span>\n              </td>\n              <td class=\"right nowrap\" data-label=\"\">\n                <ActionButton\n                  class=\"danger sm\"\n                  :confirm=\"`Revoke ${t.name}?`\"\n                  @run=\"removeToken(t)\"\n                  >Revoke</ActionButton\n                >\n              </td>\n            </tr>\n          </tbody>\n        </table>\n        <p v-else class=\"hint\">\n          {{ authState.root ? 'The host token is not an account, so it has no personal tokens.' : 'No tokens yet.' }}\n        </p>\n\n        <form v-if=\"!authState.root\" class=\"stack-form\" @submit.prevent=\"createToken\">\n          <h3>New token</h3>\n          <label class=\"field\">\n            <span>What is it for</span>\n            <input v-model=\"newToken\" type=\"text\" placeholder=\"ci-deploy\" autocomplete=\"off\" />\n          </label>\n          <div class=\"row\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!newToken.trim()\">Create token</button>\n          </div>\n          <EquivalentCommand\n            what=\"this token creation\"\n            method=\"POST\"\n            path=\"/api/tokens\"\n            :body=\"{ name: newToken || 'ci-deploy' }\"\n          />\n        </form>\n      </section>\n    </div>\n\n    <!-- Password change: a dialog, because it is a distinct decision about one row. -->\n    <Transition name=\"fade\">\n      <div v-if=\"pwFor\" class=\"scrim\" @click.self=\"pwFor = null\">\n        <div class=\"sheet\" role=\"dialog\" aria-modal=\"true\" aria-label=\"Change password\">\n          <h3>Change password for {{ pwFor.username }}</h3>\n          <p class=\"hint\">\n            This signs {{ pwFor.id === authState.user?.id ? 'you' : 'them' }} out everywhere —\n            every session and personal token is revoked.\n          </p>\n          <label class=\"field\">\n            <span>New password</span>\n            <input v-model=\"pwValue\" type=\"password\" autocomplete=\"new-password\" />\n          </label>\n          <div class=\"row\">\n            <button class=\"primary\" :disabled=\"pwValue.length < 8\" @click=\"changePassword\">\n              Change password\n            </button>\n            <button class=\"ghost\" @click=\"pwFor = null\">Cancel</button>\n          </div>\n        </div>\n      </div>\n    </Transition>\n  </div>\n</template>\n\n<style scoped>\n.stack-form {\n  margin-top: var(--s5);\n  padding-top: var(--s4);\n  border-top: 1px solid var(--line-soft);\n  display: flex;\n  flex-direction: column;\n  gap: var(--s3);\n}\n.stack-form h3 {\n  font-size: var(--t-sm);\n  color: var(--fg-dim);\n}\ntd.right {\n  text-align: end;\n}\n/* Two fields share a line where there is room and stack where there is not — at 390px a pair of\n * half-width inputs is two inputs nobody can type into. */\n.two-up > .field {\n  flex: 1 1 200px;\n}\ntd.right button {\n  margin-inline-start: var(--s2);\n}\n</style>\n"],"names":["users","ref","tokens","loaded","listError","newUser","newToken","pwFor","pwValue","revealed","canCreateUser","computed","load","u","t","api","problem","createUser","r","toast","removeUser","changePassword","_a","authState","createToken","removeToken","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","RefreshButton","_createBlock","ErrorNote","_openBlock","_hoisted_3","_toDisplayString","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_Fragment","_renderList","_hoisted_11","_unref","_hoisted_12","_hoisted_13","RelativeTime","_hoisted_14","$event","_hoisted_15","ActionButton","_hoisted_16","SkeletonList","_hoisted_17","_hoisted_18","_vModelText","_hoisted_19","_hoisted_20","_hoisted_21","EquivalentCommand","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_hoisted_26","_hoisted_27","_hoisted_28","_hoisted_29","_hoisted_30","_hoisted_31","_hoisted_32","_Transition","_hoisted_33","_hoisted_34","_hoisted_35","_hoisted_36","_hoisted_37"],"mappings":"qvDA+BA,MAAMA,EAAQC,EAAY,EAAE,EACtBC,EAASD,EAAa,EAAE,EACxBE,EAASF,EAAI,EAAK,EAClBG,EAAYH,EAAI,EAAE,EAElBI,EAAUJ,EAAI,CAAE,SAAU,GAAI,SAAU,GAAI,EAC5CK,EAAWL,EAAI,EAAE,EACjBM,EAAQN,EAAiB,IAAI,EAC7BO,EAAUP,EAAI,EAAE,EAGhBQ,EAAWR,EAA0D,IAAI,EAEzES,EAAgBC,EACpB,IAAMN,EAAQ,MAAM,SAAS,KAAA,EAAO,OAAS,GAAKA,EAAQ,MAAM,SAAS,QAAU,CAAA,EAGrF,eAAeO,GAAsB,CACnC,KAAM,CAACC,EAAGC,CAAC,EAAI,MAAM,QAAQ,IAAI,CAC/BC,EAAI,IAAuB,YAAY,EACvCA,EAAI,IAAyB,aAAa,CAAA,CAC3C,EAED,GADAZ,EAAO,MAAQ,GACX,CAACU,EAAE,GAAI,CACTT,EAAU,MAAQY,EAAQH,EAAG,mBAAmB,EAChD,MACF,CACAT,EAAU,MAAQ,GAClBJ,EAAM,MAAQa,EAAE,KAAK,OAAS,CAAA,EAE9BX,EAAO,MAAQY,EAAE,GAAMA,EAAE,KAAK,QAAU,CAAA,EAAM,CAAA,CAChD,CACKF,EAAA,EAEL,eAAeK,GAA4B,CACzC,MAAMC,EAAI,MAAMH,EAAI,KAAqB,aAAc,CACrD,SAAUV,EAAQ,MAAM,SAAS,KAAA,EACjC,SAAUA,EAAQ,MAAM,QAAA,CACzB,EACD,GAAI,CAACa,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,qBAAqB,EAClD,MACF,CACAC,EAAM,KAAM,WAAWD,EAAE,KAAK,KAAK,QAAQ,GAAG,EAC9Cb,EAAQ,MAAQ,CAAE,SAAU,GAAI,SAAU,EAAA,EACrCO,EAAA,CACP,CAEA,eAAeQ,EAAWP,EAAwB,CAChD,MAAMK,EAAI,MAAMH,EAAI,IAAI,cAAcF,EAAE,EAAE,EAAE,EAG5C,GAAI,CAACK,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,UAAUL,EAAE,QAAQ,EAAE,EACnD,MACF,CACAM,EAAM,KAAM,WAAWN,EAAE,QAAQ,GAAG,EAC/BD,EAAA,CACP,CAEA,eAAeS,GAAgC,OAC7C,MAAMR,EAAIN,EAAM,MAChB,GAAI,CAACM,EAAG,OACR,MAAMK,EAAI,MAAMH,EAAI,IAAI,cAAcF,EAAE,EAAE,YAAa,CAAE,SAAUL,EAAQ,KAAA,CAAO,EAClF,GAAI,CAACU,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,2BAA2BL,EAAE,QAAQ,EAAE,EACpE,MACF,CACAN,EAAM,MAAQ,KACdC,EAAQ,MAAQ,GAGhBW,EACE,KACAN,EAAE,OAAOS,EAAAC,EAAU,OAAV,YAAAD,EAAgB,IACrB,yEACA,qBAAqBT,EAAE,QAAQ,kCAAA,EAEhCD,EAAA,CACP,CAEA,eAAeY,GAA6B,CAC1C,MAAMN,EAAI,MAAMH,EAAI,KAAoC,cAAe,CACrE,KAAMT,EAAS,MAAM,KAAA,CAAK,CAC3B,EACD,GAAI,CAACY,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,mBAAmB,EAChD,MACF,CACAT,EAAS,MAAQ,CACf,KAAM,mBAAmBH,EAAS,MAAM,MAAM,IAC9C,MAAOY,EAAE,KAAK,MACd,KAAM,iGAAA,EAERZ,EAAS,MAAQ,GACZM,EAAA,CACP,CAEA,eAAea,EAAYX,EAAyB,CAClD,MAAMI,EAAI,MAAMH,EAAI,IAAI,eAAeD,EAAE,EAAE,EAAE,EAC7C,GAAI,CAACI,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,UAAUJ,EAAE,IAAI,EAAE,EAC/C,MACF,CACAK,EAAM,KAAM,WAAWL,EAAE,IAAI,GAAG,EAC3BF,EAAA,CACP,mBAIEc,EA+KM,MAAA,KAAA,CA9KJC,EAcM,MAdNC,EAcM,CAbJD,EAUM,MAAA,KAAA,CATJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,UAAvB,iBAAkB,EAAA,GACtBA,EAOM,MAPNG,EAOM,eAPW,0DAEf,EAAA,GAAAC,EAIWC,EAAA,CAJD,MAAM,yBAAuB,WAAC,IAIxC,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJwC,yQAIxC,EAAA,CAAA,6BAGJF,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAA6BE,EAAA,CAAb,IAAKrB,EAAI,CAAA,GAGVR,EAAA,WAAjB8B,EAA8EC,EAAA,OAAjD,KAAM/B,EAAA,MAAW,MAAM,uBAAA,6BAEzCK,EAAA,OAAX2B,EAAA,EAAAV,EAOM,MAPNW,GAOM,CANJV,EAAyC,IAAA,KAAAW,EAAnC7B,EAAA,MAAS,IAAI,EAAG,kBAAe,CAAA,EACrCkB,EAA0B,IAAA,KAAAW,EAApB7B,EAAA,MAAS,IAAI,EAAA,CAAA,EACnBkB,EAA4C,MAA5CY,GAA4CD,EAAvB7B,EAAA,MAAS,KAAK,EAAA,CAAA,EACnCkB,EAEM,MAFNa,GAEM,CADJb,EAA0D,SAAA,CAAjD,uBAAOlB,EAAA,MAAQ,KAAA,EAAS,kBAAgB,CAAA,eAIrDkB,EA2HM,MA3HNc,GA2HM,CA1HJd,EA+DU,UA/DVe,GA+DU,CA9DRf,EAIM,MAJNgB,GAIM,CAHJd,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAiC,KAAA,CAA7B,MAAM,SAAA,EAAU,WAAQ,EAAA,iBAC5BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA2E,OAA3EiB,GAA2EN,EAAtBtC,EAAA,MAAM,MAAM,EAAA,CAAA,CAAA,GAG9CG,EAAA,MAGHH,EAAA,MAAM,QAAxBoC,EAAA,EAAAV,EA0BQ,QA1BRmB,GA0BQ,eAzBNlB,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAc,UAAV,OAAK,EACTA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAiBQ,QAAA,KAAA,QAhBND,EAeKoB,EAAA,KAAAC,EAfW/C,EAAA,MAALa,GAAC,kBAAZa,EAeK,KAAA,CAfmB,IAAKb,EAAE,EAAA,GAC7Bc,EAGK,KAHLqB,GAGK,CAFHrB,EAAuB,IAAA,KAAAW,EAAjBzB,EAAE,QAAQ,EAAA,CAAA,EACJA,EAAE,OAAOoC,EAAAA,KAAU,OAAVA,YAAAA,EAAgB,SAArCvB,EAAsE,OAAtEwB,GAA4D,KAAG,cAEjEvB,EAAiF,KAAjFwB,GAAiF,CAAvCpB,EAAkCqB,EAAA,CAAnB,GAAIvC,EAAE,SAAA,mBAC/Dc,EAQK,KARL0B,GAQK,CAPH1B,EAAkF,SAAA,CAA1E,MAAM,WAAY,QAAK2B,GAAA,CAAE/C,EAAA,MAAQM,EAAGL,EAAA,MAAO,EAAA,CAAA,EAAO,kBAAe,EAAA+C,EAAA,EACzExB,EAKCyB,EAAA,CAJC,MAAM,YACL,QAAO,UAAY3C,EAAE,QAAQ,IAC7B,MAAGyC,GAAElC,EAAWP,CAAC,CAAA,aACjB,IAAM,CAAA,GAAAgB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAN,SAAM,EAAA,CAAA,uDAMjBH,EAA2C,IAA3C+B,GAAuB,kBAAgB,QA9BvCvB,EAAyCwB,EAAA,OAAX,KAAM,CAAA,IAgCpC/B,EAuBO,OAAA,CAvBD,MAAM,aAAc,WAAgBV,EAAU,CAAA,SAAA,CAAA,CAAA,GAClDY,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAuB,UAAnB,iBAAc,EAAA,GAClBA,EASM,MATNgC,GASM,CARJhC,EAGQ,QAHRiC,GAGQ,CAFN/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAqB,YAAf,WAAQ,EAAA,KACdA,EAAmE,QAAA,CAAnD,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAyB,GAAAjD,EAAA,MAAQ,SAAQiD,GAAE,KAAK,OAAO,aAAa,KAAA,aAA3C,CAAAO,EAAAxD,EAAA,MAAQ,QAAQ,CAAA,KAElCsB,EAGQ,QAHRmC,GAGQ,CAFNjC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAqB,YAAf,WAAQ,EAAA,KACdA,EAAgF,QAAA,CAAhE,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAyB,GAAAjD,EAAA,MAAQ,SAAQiD,GAAE,KAAK,WAAW,aAAa,cAAA,aAA/C,CAAAO,EAAAxD,EAAA,MAAQ,QAAQ,CAAA,OAGpCwB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA0C,IAAA,CAAvC,MAAM,MAAA,EAAO,yBAAsB,EAAA,GACtCA,EAGM,MAHNoC,GAGM,CAFJpC,EAAqF,SAAA,CAA7E,MAAM,UAAU,KAAK,SAAU,UAAWjB,EAAA,KAAA,EAAe,cAAW,EAAAsD,EAAA,gBAC5ErC,EAAqB,OAAA,CAAf,MAAM,QAAM,KAAA,EAAA,EAAA,GAEpBI,EAKEkC,EAAA,CAJA,KAAK,wBACL,OAAO,OACP,KAAK,aACJ,KAAI,CAAA,SAAc5D,EAAA,MAAQ,UAAQ,QAAA,SAAA,GAAA,CAAA,0BAKzCsB,EAwDU,UAxDVuC,GAwDU,CAvDRvC,EAMM,MANNwC,GAMM,CALJtC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAwC,KAAA,CAApC,MAAM,SAAA,EAAU,kBAAe,EAAA,GACnCI,EAGWC,EAAA,CAHD,MAAM,mBAAiB,WAAC,IAGlC,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAHkC,iKAGlC,EAAA,CAAA,aAGmB1B,EAAA,MACHD,EAAA,MAAO,QAAzBkC,EAAA,EAAAV,EAyBQ,QAzBR0C,GAyBQ,eAxBNzC,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAkB,UAAd,WAAS,EACbA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAgBQ,QAAA,KAAA,QAfND,EAcKoB,EAAA,KAAAC,EAdW7C,EAAA,MAAL,QAAXwB,EAcK,KAAA,CAdoB,IAAK,EAAE,EAAA,GAC9BC,EAA2D,KAA3D0C,GAA2D,CAAxB1C,EAAmB,IAAA,KAAAW,EAAb,EAAE,IAAI,EAAA,CAAA,CAAA,GAC/CX,EAGK,KAHL2C,GAGK,CAFiB,EAAE,gBAAtBpC,EAAuDkB,EAAA,OAApB,GAAI,EAAE,UAAA,uBACzC1B,EAAsC,OAAtC6C,GAA0B,OAAK,EAAA,GAEjC5C,EAOK,KAPL6C,GAOK,CANHzC,EAKCyB,EAAA,CAJC,MAAM,YACL,QAAO,UAAY,EAAE,IAAI,IACzB,MAAGF,GAAE7B,EAAY,CAAC,CAAA,aAClB,IAAM,CAAA,GAAAI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAN,SAAM,EAAA,CAAA,mDAMjBO,EAAA,EAAAV,EAEI,IAFJ+C,GAEInC,EADCW,EAAA1B,CAAA,EAAU,KAAI,kEAAA,gBAAA,EAAA,CAAA,QA5BnBW,EAAyCwB,EAAA,OAAX,KAAM,CAAA,IA+BvBT,EAAA1B,CAAA,EAAU,mBAAvBG,EAeO,OAAA,OAfsB,MAAM,aAAc,WAAgBF,EAAW,CAAA,SAAA,CAAA,CAAA,GAC1EK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkB,UAAd,YAAS,EAAA,GACbA,EAGQ,QAHR+C,GAGQ,CAFN7C,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2B,YAArB,iBAAc,EAAA,KACpBA,EAAmF,QAAA,sCAAnErB,EAAQ,MAAAgD,GAAE,KAAK,OAAO,YAAY,YAAY,aAAa,KAAA,gBAA3DhD,EAAA,KAAQ,CAAA,KAE1BqB,EAEM,MAFNgD,GAEM,CADJhD,EAAwF,SAAA,CAAhF,MAAM,UAAU,KAAK,SAAU,SAAQ,CAAGrB,EAAA,MAAS,KAAA,CAAI,EAAI,eAAY,EAAAsE,EAAA,CAAA,GAEjF7C,EAKEkC,EAAA,CAJA,KAAK,sBACL,OAAO,OACP,KAAK,cACJ,WAAc3D,EAAA,OAAQ,WAAA,CAAA,6BAO/ByB,EAoBa8C,EAAA,CApBD,KAAK,QAAM,WACrB,IAAA,OAkBM,OAlBKtE,EAAA,WAAXmB,EAkBM,MAAA,OAlBY,MAAM,QAAS,yBAAYnB,EAAA,MAAK,KAAA,CAAA,MAAA,CAAA,EAAA,GAChDoB,EAgBM,MAhBNmD,GAgBM,CAfJnD,EAAiD,KAAA,KAA7C,uBAAoBW,EAAG/B,EAAA,MAAM,QAAQ,EAAA,CAAA,EACzCoB,EAGI,IAHJoD,GAAgB,iBACAxE,EAAA,MAAM,OAAO0C,EAAAA,KAAU,OAAVA,YAAAA,EAAgB,kBAAsB,kEAEnE,CAAA,EACAtB,EAGQ,QAHRqD,GAGQ,CAFNnD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,KAClBA,EAAuE,QAAA,sCAAvDnB,EAAO,MAAA8C,GAAE,KAAK,WAAW,aAAa,cAAA,gBAAtC9C,EAAA,KAAO,CAAA,KAEzBmB,EAKM,MALNsD,GAKM,CAJJtD,EAES,SAAA,CAFD,MAAM,UAAW,SAAUnB,EAAA,MAAQ,OAAM,EAAO,QAAOa,CAAA,EAAgB,oBAE/E,EAAA6D,EAAA,EACAvD,EAA2D,SAAA,CAAnD,MAAM,QAAS,uBAAOpB,EAAA,MAAK,KAAA,EAAS,QAAM,CAAA"}
+{"version":3,"file":"UsersView-B7C2Bc3R.js","sources":["../../src/views/UsersView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Accounts and personal API tokens.\n *\n * Accounts landed in 0.10.0 with no UI at all, so the only way to add a second operator was a curl\n * call — which is exactly the thing a control plane exists to spare people.\n *\n * TWO AUDIENCES, TWO SECTIONS, and the split is deliberate. **Accounts** are about other people and\n * are shared state; **tokens** are yours alone (the API scopes them to the caller and cannot show\n * anyone else's). Mixing them into one table would imply an admin can manage another person's\n * tokens, which is not true and would be a bad idea if it were.\n *\n * SECRETS ARE SHOWN ONCE, and the page says so in the same breath as showing them. Same discipline\n * as a notifier signing secret and a registry credential: there is no read path on the server, so\n * this is not a policy that could be relaxed later — the value genuinely stops existing.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { authState } from '../composables/useAuth';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport EquivalentCommand from '../components/EquivalentCommand.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\n\ntype User = { id: number; username: string; role: string; createdAt: number };\ntype Token = { id: number; name: string; createdAt: number; lastUsedAt: number | null };\n\nconst users = ref<User[]>([]);\nconst tokens = ref<Token[]>([]);\nconst loaded = ref(false);\nconst listError = ref('');\n\nconst newUser = ref({ username: '', password: '' });\nconst newToken = ref('');\nconst pwFor = ref<User | null>(null);\nconst pwValue = ref('');\n\n/** Held only until dismissed — there is no way to show either of these again. */\nconst revealed = ref<{ what: string; value: string; note: string } | null>(null);\n\nconst canCreateUser = computed(\n  () => newUser.value.username.trim().length > 0 && newUser.value.password.length >= 8,\n);\n\nasync function load(): Promise<void> {\n  const [u, t] = await Promise.all([\n    api.get<{ users: User[] }>('/api/users'),\n    api.get<{ tokens: Token[] }>('/api/tokens'),\n  ]);\n  loaded.value = true;\n  if (!u.ok) {\n    listError.value = problem(u, 'load the accounts');\n    return;\n  }\n  listError.value = '';\n  users.value = u.body.users ?? [];\n  // Root (PSTACK_TOKEN) is not a user, so it has no personal tokens — an error here is expected.\n  tokens.value = t.ok ? (t.body.tokens ?? []) : [];\n}\nvoid load();\n\nasync function createUser(): Promise<void> {\n  const r = await api.post<{ user: User }>('/api/users', {\n    username: newUser.value.username.trim(),\n    password: newUser.value.password,\n  });\n  if (!r.ok) {\n    listError.value = problem(r, 'create this account');\n    return;\n  }\n  toast('ok', `Created ${r.body.user.username}.`);\n  newUser.value = { username: '', password: '' };\n  void load();\n}\n\nasync function removeUser(u: User): Promise<void> {\n  const r = await api.del(`/api/users/${u.id}`);\n  // The server refuses to delete the last account. That is a rule worth surfacing verbatim rather\n  // than as \"could not delete\" — it tells the operator what to do instead.\n  if (!r.ok) {\n    listError.value = problem(r, `delete ${u.username}`);\n    return;\n  }\n  toast('ok', `Deleted ${u.username}.`);\n  void load();\n}\n\nasync function changePassword(): Promise<void> {\n  const u = pwFor.value;\n  if (!u) return;\n  const r = await api.put(`/api/users/${u.id}/password`, { password: pwValue.value });\n  if (!r.ok) {\n    listError.value = problem(r, `change the password for ${u.username}`);\n    return;\n  }\n  pwFor.value = null;\n  pwValue.value = '';\n  // Not a footnote: the change signs that user out everywhere, and if it was YOU, the next request\n  // is a 401. Saying so here is the difference between an expected step and an apparent bug.\n  toast(\n    'ok',\n    u.id === authState.user?.id\n      ? `Password changed. You have been signed out everywhere — sign in again.`\n      : `Password changed. ${u.username} has been signed out everywhere.`,\n  );\n  void load();\n}\n\nasync function createToken(): Promise<void> {\n  const r = await api.post<{ token: string; id: number }>('/api/tokens', {\n    name: newToken.value.trim(),\n  });\n  if (!r.ok) {\n    listError.value = problem(r, 'create this token');\n    return;\n  }\n  revealed.value = {\n    what: `Personal token “${newToken.value.trim()}”`,\n    value: r.body.token,\n    note: 'Send it as a bearer token. The server stores only a hash, so this is the only time it is shown.',\n  };\n  newToken.value = '';\n  void load();\n}\n\nasync function removeToken(t: Token): Promise<void> {\n  const r = await api.del(`/api/tokens/${t.id}`);\n  if (!r.ok) {\n    listError.value = problem(r, `revoke ${t.name}`);\n    return;\n  }\n  toast('ok', `Revoked ${t.name}.`);\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Users &amp; access</h1>\n        <div class=\"sub\">\n          Who can sign in, and the tokens they use from scripts\n          <InfoHint label=\"how access works here\">\n            Three kinds of caller. The host token from the environment is the root credential CI\n            holds. An account signs in with a password and gets a browser session. A personal token\n            belongs to one account and is what a script uses — it can do anything that account can.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Something went wrong.\" />\n\n    <div v-if=\"revealed\" class=\"banner ok\">\n      <b>{{ revealed.what }} — copy it now.</b>\n      <p>{{ revealed.note }}</p>\n      <pre class=\"code\">{{ revealed.value }}</pre>\n      <div class=\"row\">\n        <button @click=\"revealed = null\">I have stored it</button>\n      </div>\n    </div>\n\n    <div class=\"grid-2\">\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Accounts</h2>\n          <span class=\"grow\" />\n          <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ users.length }}</span>\n        </div>\n\n        <SkeletonList v-if=\"!loaded\" :rows=\"3\" />\n        <!-- `cards` + `data-label` per cell: below 640px the same markup renders as cards. Without\n             it the row's two buttons pushed the table past the viewport and got clipped. -->\n        <table v-else-if=\"users.length\" class=\"cards\">\n          <thead>\n            <tr>\n              <th>User</th>\n              <th>Added</th>\n              <th aria-label=\"Actions\" />\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"u in users\" :key=\"u.id\">\n              <td class=\"name\" data-label=\"user\">\n                <b>{{ u.username }}</b>\n                <span v-if=\"u.id === authState.user?.id\" class=\"badge info\">you</span>\n              </td>\n              <td class=\"dim nowrap\" data-label=\"added\"><RelativeTime :at=\"u.createdAt\" /></td>\n              <td class=\"right nowrap\" data-label=\"\">\n                <button class=\"ghost sm\" @click=\"pwFor = u; pwValue = ''\">Change password</button>\n                <ActionButton\n                  class=\"danger sm\"\n                  :confirm=\"`Delete ${u.username}?`\"\n                  @run=\"removeUser(u)\"\n                  >Delete</ActionButton\n                >\n              </td>\n            </tr>\n          </tbody>\n        </table>\n        <p v-else class=\"hint\">No accounts yet.</p>\n\n        <form class=\"stack-form\" @submit.prevent=\"createUser\">\n          <h3>Add an account</h3>\n          <div class=\"row wrap two-up\">\n            <label class=\"field grow\">\n              <span>Username</span>\n              <input v-model=\"newUser.username\" type=\"text\" autocomplete=\"off\" />\n            </label>\n            <label class=\"field grow\">\n              <span>Password</span>\n              <input v-model=\"newUser.password\" type=\"password\" autocomplete=\"new-password\" />\n            </label>\n          </div>\n          <p class=\"hint\">At least 8 characters.</p>\n          <div class=\"row\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!canCreateUser\">Add account</button>\n            <span class=\"grow\" />\n          </div>\n          <EquivalentCommand\n            what=\"this account creation\"\n            method=\"POST\"\n            path=\"/api/users\"\n            :body=\"{ username: newUser.username || 'alice', password: '…' }\"\n          />\n        </form>\n      </section>\n\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Your API tokens</h2>\n          <InfoHint label=\"when to use one\">\n            A script or a CI job signing in as you. It carries whatever you can do, so give each one\n            a name you will recognise later and revoke the ones you stop using.\n          </InfoHint>\n        </div>\n\n        <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n        <table v-else-if=\"tokens.length\" class=\"cards\">\n          <thead>\n            <tr>\n              <th>Name</th>\n              <th>Last used</th>\n              <th aria-label=\"Actions\" />\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"t in tokens\" :key=\"t.id\">\n              <td class=\"name\" data-label=\"name\"><b>{{ t.name }}</b></td>\n              <td class=\"dim nowrap\" data-label=\"last used\">\n                <RelativeTime v-if=\"t.lastUsedAt\" :at=\"t.lastUsedAt\" />\n                <span v-else class=\"mute\">never</span>\n              </td>\n              <td class=\"right nowrap\" data-label=\"\">\n                <ActionButton\n                  class=\"danger sm\"\n                  :confirm=\"`Revoke ${t.name}?`\"\n                  @run=\"removeToken(t)\"\n                  >Revoke</ActionButton\n                >\n              </td>\n            </tr>\n          </tbody>\n        </table>\n        <p v-else class=\"hint\">\n          {{ authState.root ? 'The host token is not an account, so it has no personal tokens.' : 'No tokens yet.' }}\n        </p>\n\n        <form v-if=\"!authState.root\" class=\"stack-form\" @submit.prevent=\"createToken\">\n          <h3>New token</h3>\n          <label class=\"field\">\n            <span>What is it for</span>\n            <input v-model=\"newToken\" type=\"text\" placeholder=\"ci-deploy\" autocomplete=\"off\" />\n          </label>\n          <div class=\"row\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!newToken.trim()\">Create token</button>\n          </div>\n          <EquivalentCommand\n            what=\"this token creation\"\n            method=\"POST\"\n            path=\"/api/tokens\"\n            :body=\"{ name: newToken || 'ci-deploy' }\"\n          />\n        </form>\n      </section>\n    </div>\n\n    <!-- Password change: a dialog, because it is a distinct decision about one row. -->\n    <Transition name=\"fade\">\n      <div v-if=\"pwFor\" class=\"scrim\" @click.self=\"pwFor = null\">\n        <div class=\"sheet\" role=\"dialog\" aria-modal=\"true\" aria-label=\"Change password\">\n          <h3>Change password for {{ pwFor.username }}</h3>\n          <p class=\"hint\">\n            This signs {{ pwFor.id === authState.user?.id ? 'you' : 'them' }} out everywhere —\n            every session and personal token is revoked.\n          </p>\n          <label class=\"field\">\n            <span>New password</span>\n            <input v-model=\"pwValue\" type=\"password\" autocomplete=\"new-password\" />\n          </label>\n          <div class=\"row\">\n            <button class=\"primary\" :disabled=\"pwValue.length < 8\" @click=\"changePassword\">\n              Change password\n            </button>\n            <button class=\"ghost\" @click=\"pwFor = null\">Cancel</button>\n          </div>\n        </div>\n      </div>\n    </Transition>\n  </div>\n</template>\n\n<style scoped>\n.stack-form {\n  margin-top: var(--s5);\n  padding-top: var(--s4);\n  border-top: 1px solid var(--line-soft);\n  display: flex;\n  flex-direction: column;\n  gap: var(--s3);\n}\n.stack-form h3 {\n  font-size: var(--t-sm);\n  color: var(--fg-dim);\n}\ntd.right {\n  text-align: end;\n}\n/* Two fields share a line where there is room and stack where there is not — at 390px a pair of\n * half-width inputs is two inputs nobody can type into. */\n.two-up > .field {\n  flex: 1 1 200px;\n}\ntd.right button {\n  margin-inline-start: var(--s2);\n}\n</style>\n"],"names":["users","ref","tokens","loaded","listError","newUser","newToken","pwFor","pwValue","revealed","canCreateUser","computed","load","u","t","api","problem","createUser","r","toast","removeUser","changePassword","_a","authState","createToken","removeToken","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","RefreshButton","_createBlock","ErrorNote","_openBlock","_hoisted_3","_toDisplayString","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_Fragment","_renderList","_hoisted_11","_unref","_hoisted_12","_hoisted_13","RelativeTime","_hoisted_14","$event","_hoisted_15","ActionButton","_hoisted_16","SkeletonList","_hoisted_17","_hoisted_18","_vModelText","_hoisted_19","_hoisted_20","_hoisted_21","EquivalentCommand","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_hoisted_26","_hoisted_27","_hoisted_28","_hoisted_29","_hoisted_30","_hoisted_31","_hoisted_32","_Transition","_hoisted_33","_hoisted_34","_hoisted_35","_hoisted_36","_hoisted_37"],"mappings":"qvDA+BA,MAAMA,EAAQC,EAAY,EAAE,EACtBC,EAASD,EAAa,EAAE,EACxBE,EAASF,EAAI,EAAK,EAClBG,EAAYH,EAAI,EAAE,EAElBI,EAAUJ,EAAI,CAAE,SAAU,GAAI,SAAU,GAAI,EAC5CK,EAAWL,EAAI,EAAE,EACjBM,EAAQN,EAAiB,IAAI,EAC7BO,EAAUP,EAAI,EAAE,EAGhBQ,EAAWR,EAA0D,IAAI,EAEzES,EAAgBC,EACpB,IAAMN,EAAQ,MAAM,SAAS,KAAA,EAAO,OAAS,GAAKA,EAAQ,MAAM,SAAS,QAAU,CAAA,EAGrF,eAAeO,GAAsB,CACnC,KAAM,CAACC,EAAGC,CAAC,EAAI,MAAM,QAAQ,IAAI,CAC/BC,EAAI,IAAuB,YAAY,EACvCA,EAAI,IAAyB,aAAa,CAAA,CAC3C,EAED,GADAZ,EAAO,MAAQ,GACX,CAACU,EAAE,GAAI,CACTT,EAAU,MAAQY,EAAQH,EAAG,mBAAmB,EAChD,MACF,CACAT,EAAU,MAAQ,GAClBJ,EAAM,MAAQa,EAAE,KAAK,OAAS,CAAA,EAE9BX,EAAO,MAAQY,EAAE,GAAMA,EAAE,KAAK,QAAU,CAAA,EAAM,CAAA,CAChD,CACKF,EAAA,EAEL,eAAeK,GAA4B,CACzC,MAAMC,EAAI,MAAMH,EAAI,KAAqB,aAAc,CACrD,SAAUV,EAAQ,MAAM,SAAS,KAAA,EACjC,SAAUA,EAAQ,MAAM,QAAA,CACzB,EACD,GAAI,CAACa,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,qBAAqB,EAClD,MACF,CACAC,EAAM,KAAM,WAAWD,EAAE,KAAK,KAAK,QAAQ,GAAG,EAC9Cb,EAAQ,MAAQ,CAAE,SAAU,GAAI,SAAU,EAAA,EACrCO,EAAA,CACP,CAEA,eAAeQ,EAAWP,EAAwB,CAChD,MAAMK,EAAI,MAAMH,EAAI,IAAI,cAAcF,EAAE,EAAE,EAAE,EAG5C,GAAI,CAACK,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,UAAUL,EAAE,QAAQ,EAAE,EACnD,MACF,CACAM,EAAM,KAAM,WAAWN,EAAE,QAAQ,GAAG,EAC/BD,EAAA,CACP,CAEA,eAAeS,GAAgC,OAC7C,MAAMR,EAAIN,EAAM,MAChB,GAAI,CAACM,EAAG,OACR,MAAMK,EAAI,MAAMH,EAAI,IAAI,cAAcF,EAAE,EAAE,YAAa,CAAE,SAAUL,EAAQ,KAAA,CAAO,EAClF,GAAI,CAACU,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,2BAA2BL,EAAE,QAAQ,EAAE,EACpE,MACF,CACAN,EAAM,MAAQ,KACdC,EAAQ,MAAQ,GAGhBW,EACE,KACAN,EAAE,OAAOS,EAAAC,EAAU,OAAV,YAAAD,EAAgB,IACrB,yEACA,qBAAqBT,EAAE,QAAQ,kCAAA,EAEhCD,EAAA,CACP,CAEA,eAAeY,GAA6B,CAC1C,MAAMN,EAAI,MAAMH,EAAI,KAAoC,cAAe,CACrE,KAAMT,EAAS,MAAM,KAAA,CAAK,CAC3B,EACD,GAAI,CAACY,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,mBAAmB,EAChD,MACF,CACAT,EAAS,MAAQ,CACf,KAAM,mBAAmBH,EAAS,MAAM,MAAM,IAC9C,MAAOY,EAAE,KAAK,MACd,KAAM,iGAAA,EAERZ,EAAS,MAAQ,GACZM,EAAA,CACP,CAEA,eAAea,EAAYX,EAAyB,CAClD,MAAMI,EAAI,MAAMH,EAAI,IAAI,eAAeD,EAAE,EAAE,EAAE,EAC7C,GAAI,CAACI,EAAE,GAAI,CACTd,EAAU,MAAQY,EAAQE,EAAG,UAAUJ,EAAE,IAAI,EAAE,EAC/C,MACF,CACAK,EAAM,KAAM,WAAWL,EAAE,IAAI,GAAG,EAC3BF,EAAA,CACP,mBAIEc,EA+KM,MAAA,KAAA,CA9KJC,EAcM,MAdNC,EAcM,CAbJD,EAUM,MAAA,KAAA,CATJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAA2B,UAAvB,iBAAkB,EAAA,GACtBA,EAOM,MAPNG,EAOM,eAPW,0DAEf,EAAA,GAAAC,EAIWC,EAAA,CAJD,MAAM,yBAAuB,WAAC,IAIxC,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJwC,yQAIxC,EAAA,CAAA,6BAGJF,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAA6BE,EAAA,CAAb,IAAKrB,EAAI,CAAA,GAGVR,EAAA,WAAjB8B,EAA8EC,EAAA,OAAjD,KAAM/B,EAAA,MAAW,MAAM,uBAAA,6BAEzCK,EAAA,OAAX2B,EAAA,EAAAV,EAOM,MAPNW,GAOM,CANJV,EAAyC,IAAA,KAAAW,EAAnC7B,EAAA,MAAS,IAAI,EAAG,kBAAe,CAAA,EACrCkB,EAA0B,IAAA,KAAAW,EAApB7B,EAAA,MAAS,IAAI,EAAA,CAAA,EACnBkB,EAA4C,MAA5CY,GAA4CD,EAAvB7B,EAAA,MAAS,KAAK,EAAA,CAAA,EACnCkB,EAEM,MAFNa,GAEM,CADJb,EAA0D,SAAA,CAAjD,uBAAOlB,EAAA,MAAQ,KAAA,EAAS,kBAAgB,CAAA,eAIrDkB,EA2HM,MA3HNc,GA2HM,CA1HJd,EA+DU,UA/DVe,GA+DU,CA9DRf,EAIM,MAJNgB,GAIM,CAHJd,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAiC,KAAA,CAA7B,MAAM,SAAA,EAAU,WAAQ,EAAA,iBAC5BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA2E,OAA3EiB,GAA2EN,EAAtBtC,EAAA,MAAM,MAAM,EAAA,CAAA,CAAA,GAG9CG,EAAA,MAGHH,EAAA,MAAM,QAAxBoC,EAAA,EAAAV,EA0BQ,QA1BRmB,GA0BQ,eAzBNlB,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAc,UAAV,OAAK,EACTA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAiBQ,QAAA,KAAA,QAhBND,EAeKoB,EAAA,KAAAC,EAfW/C,EAAA,MAALa,GAAC,kBAAZa,EAeK,KAAA,CAfmB,IAAKb,EAAE,EAAA,GAC7Bc,EAGK,KAHLqB,GAGK,CAFHrB,EAAuB,IAAA,KAAAW,EAAjBzB,EAAE,QAAQ,EAAA,CAAA,EACJA,EAAE,OAAOoC,EAAAA,KAAU,OAAVA,YAAAA,EAAgB,SAArCvB,EAAsE,OAAtEwB,GAA4D,KAAG,cAEjEvB,EAAiF,KAAjFwB,GAAiF,CAAvCpB,EAAkCqB,EAAA,CAAnB,GAAIvC,EAAE,SAAA,mBAC/Dc,EAQK,KARL0B,GAQK,CAPH1B,EAAkF,SAAA,CAA1E,MAAM,WAAY,QAAK2B,GAAA,CAAE/C,EAAA,MAAQM,EAAGL,EAAA,MAAO,EAAA,CAAA,EAAO,kBAAe,EAAA+C,EAAA,EACzExB,EAKCyB,EAAA,CAJC,MAAM,YACL,QAAO,UAAY3C,EAAE,QAAQ,IAC7B,MAAGyC,GAAElC,EAAWP,CAAC,CAAA,aACjB,IAAM,CAAA,GAAAgB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAN,SAAM,EAAA,CAAA,uDAMjBH,EAA2C,IAA3C+B,GAAuB,kBAAgB,QA9BvCvB,EAAyCwB,EAAA,OAAX,KAAM,CAAA,IAgCpC/B,EAuBO,OAAA,CAvBD,MAAM,aAAc,WAAgBV,EAAU,CAAA,SAAA,CAAA,CAAA,GAClDY,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAuB,UAAnB,iBAAc,EAAA,GAClBA,EASM,MATNgC,GASM,CARJhC,EAGQ,QAHRiC,GAGQ,CAFN/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAqB,YAAf,WAAQ,EAAA,KACdA,EAAmE,QAAA,CAAnD,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAyB,GAAAjD,EAAA,MAAQ,SAAQiD,GAAE,KAAK,OAAO,aAAa,KAAA,aAA3C,CAAAO,EAAAxD,EAAA,MAAQ,QAAQ,CAAA,KAElCsB,EAGQ,QAHRmC,GAGQ,CAFNjC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAqB,YAAf,WAAQ,EAAA,KACdA,EAAgF,QAAA,CAAhE,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAyB,GAAAjD,EAAA,MAAQ,SAAQiD,GAAE,KAAK,WAAW,aAAa,cAAA,aAA/C,CAAAO,EAAAxD,EAAA,MAAQ,QAAQ,CAAA,OAGpCwB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA0C,IAAA,CAAvC,MAAM,MAAA,EAAO,yBAAsB,EAAA,GACtCA,EAGM,MAHNoC,GAGM,CAFJpC,EAAqF,SAAA,CAA7E,MAAM,UAAU,KAAK,SAAU,UAAWjB,EAAA,KAAA,EAAe,cAAW,EAAAsD,EAAA,gBAC5ErC,EAAqB,OAAA,CAAf,MAAM,QAAM,KAAA,EAAA,EAAA,GAEpBI,EAKEkC,EAAA,CAJA,KAAK,wBACL,OAAO,OACP,KAAK,aACJ,KAAI,CAAA,SAAc5D,EAAA,MAAQ,UAAQ,QAAA,SAAA,GAAA,CAAA,0BAKzCsB,EAwDU,UAxDVuC,GAwDU,CAvDRvC,EAMM,MANNwC,GAMM,CALJtC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAwC,KAAA,CAApC,MAAM,SAAA,EAAU,kBAAe,EAAA,GACnCI,EAGWC,EAAA,CAHD,MAAM,mBAAiB,WAAC,IAGlC,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAHkC,iKAGlC,EAAA,CAAA,aAGmB1B,EAAA,MACHD,EAAA,MAAO,QAAzBkC,EAAA,EAAAV,EAyBQ,QAzBR0C,GAyBQ,eAxBNzC,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAkB,UAAd,WAAS,EACbA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAgBQ,QAAA,KAAA,QAfND,EAcKoB,EAAA,KAAAC,EAdW7C,EAAA,MAAL,QAAXwB,EAcK,KAAA,CAdoB,IAAK,EAAE,EAAA,GAC9BC,EAA2D,KAA3D0C,GAA2D,CAAxB1C,EAAmB,IAAA,KAAAW,EAAb,EAAE,IAAI,EAAA,CAAA,CAAA,GAC/CX,EAGK,KAHL2C,GAGK,CAFiB,EAAE,gBAAtBpC,EAAuDkB,EAAA,OAApB,GAAI,EAAE,UAAA,uBACzC1B,EAAsC,OAAtC6C,GAA0B,OAAK,EAAA,GAEjC5C,EAOK,KAPL6C,GAOK,CANHzC,EAKCyB,EAAA,CAJC,MAAM,YACL,QAAO,UAAY,EAAE,IAAI,IACzB,MAAGF,GAAE7B,EAAY,CAAC,CAAA,aAClB,IAAM,CAAA,GAAAI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAN,SAAM,EAAA,CAAA,mDAMjBO,EAAA,EAAAV,EAEI,IAFJ+C,GAEInC,EADCW,EAAA1B,CAAA,EAAU,KAAI,kEAAA,gBAAA,EAAA,CAAA,QA5BnBW,EAAyCwB,EAAA,OAAX,KAAM,CAAA,IA+BvBT,EAAA1B,CAAA,EAAU,mBAAvBG,EAeO,OAAA,OAfsB,MAAM,aAAc,WAAgBF,EAAW,CAAA,SAAA,CAAA,CAAA,GAC1EK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkB,UAAd,YAAS,EAAA,GACbA,EAGQ,QAHR+C,GAGQ,CAFN7C,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA2B,YAArB,iBAAc,EAAA,KACpBA,EAAmF,QAAA,sCAAnErB,EAAQ,MAAAgD,GAAE,KAAK,OAAO,YAAY,YAAY,aAAa,KAAA,gBAA3DhD,EAAA,KAAQ,CAAA,KAE1BqB,EAEM,MAFNgD,GAEM,CADJhD,EAAwF,SAAA,CAAhF,MAAM,UAAU,KAAK,SAAU,SAAQ,CAAGrB,EAAA,MAAS,KAAA,CAAI,EAAI,eAAY,EAAAsE,EAAA,CAAA,GAEjF7C,EAKEkC,EAAA,CAJA,KAAK,sBACL,OAAO,OACP,KAAK,cACJ,WAAc3D,EAAA,OAAQ,WAAA,CAAA,6BAO/ByB,EAoBa8C,EAAA,CApBD,KAAK,QAAM,WACrB,IAAA,OAkBM,OAlBKtE,EAAA,WAAXmB,EAkBM,MAAA,OAlBY,MAAM,QAAS,yBAAYnB,EAAA,MAAK,KAAA,CAAA,MAAA,CAAA,EAAA,GAChDoB,EAgBM,MAhBNmD,GAgBM,CAfJnD,EAAiD,KAAA,KAA7C,uBAAoBW,EAAG/B,EAAA,MAAM,QAAQ,EAAA,CAAA,EACzCoB,EAGI,IAHJoD,GAAgB,iBACAxE,EAAA,MAAM,OAAO0C,EAAAA,KAAU,OAAVA,YAAAA,EAAgB,kBAAsB,kEAEnE,CAAA,EACAtB,EAGQ,QAHRqD,GAGQ,CAFNnD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,KAClBA,EAAuE,QAAA,sCAAvDnB,EAAO,MAAA8C,GAAE,KAAK,WAAW,aAAa,cAAA,gBAAtC9C,EAAA,KAAO,CAAA,KAEzBmB,EAKM,MALNsD,GAKM,CAJJtD,EAES,SAAA,CAFD,MAAM,UAAW,SAAUnB,EAAA,MAAQ,OAAM,EAAO,QAAOa,CAAA,EAAgB,oBAE/E,EAAA6D,EAAA,EACAvD,EAA2D,SAAA,CAAnD,MAAM,QAAS,uBAAOpB,EAAA,MAAK,KAAA,EAAS,QAAM,CAAA"}

package/dist/assets/{VarEditor.vue_vue_type_script_setup_true_lang-SKwJUsNC.js → VarEditor.vue_vue_type_script_setup_true_lang-CyOlKVt5.js}

@@ -1,2 +1,2 @@
-import{d as k,c as r,a,F as f,s as h,o as c}from"./index-DVMQBHXF.js";const b=["value","aria-label","onInput"],V=["value","aria-label","onInput"],_=["aria-label","onClick"],x=k({__name:"VarEditor",props:{modelValue:{}},emits:["update:modelValue","change"],setup(d,{emit:p}){const s=d,t=p;function m(u,l){const o=s.modelValue.map((e,n)=>n===u?{...e,...l}:e);t("update:modelValue",o),t("change")}function i(){t("update:modelValue",[...s.modelValue,{k:"",v:""}]),t("change")}function v(u){const l=s.modelValue.filter((o,e)=>e!==u);t("update:modelValue",l.length?l:[{k:"",v:""}]),t("change")}return(u,l)=>(c(),r("div",null,[l[0]||(l[0]=a("div",{class:"kv head"},[a("span",null,"name"),a("span",null,"value"),a("span")],-1)),(c(!0),r(f,null,h(d.modelValue,(o,e)=>(c(),r("div",{key:e,class:"kv"},[a("input",{type:"text",value:o.k,"aria-label":`variable name ${e+1}`,placeholder:"PR",spellcheck:"false",autocomplete:"off",onInput:n=>m(e,{k:n.target.value.trim()})},null,40,b),a("input",{type:"text",value:o.v,"aria-label":`variable value ${e+1}`,placeholder:"7",spellcheck:"false",autocomplete:"off",onInput:n=>m(e,{v:n.target.value})},null,40,V),a("button",{class:"sm ghost","aria-label":`remove variable ${e+1}`,onClick:n=>v(e)},"−",8,_)]))),128)),a("button",{class:"sm",onClick:i},"+ variable")]))}});export{x as _};
-//# sourceMappingURL=VarEditor.vue_vue_type_script_setup_true_lang-SKwJUsNC.js.map
+import{d as k,c as r,a,F as f,y as h,o as c}from"./index-9Ra4jfL4.js";const b=["value","aria-label","onInput"],V=["value","aria-label","onInput"],_=["aria-label","onClick"],x=k({__name:"VarEditor",props:{modelValue:{}},emits:["update:modelValue","change"],setup(d,{emit:p}){const s=d,t=p;function m(u,l){const o=s.modelValue.map((e,n)=>n===u?{...e,...l}:e);t("update:modelValue",o),t("change")}function i(){t("update:modelValue",[...s.modelValue,{k:"",v:""}]),t("change")}function v(u){const l=s.modelValue.filter((o,e)=>e!==u);t("update:modelValue",l.length?l:[{k:"",v:""}]),t("change")}return(u,l)=>(c(),r("div",null,[l[0]||(l[0]=a("div",{class:"kv head"},[a("span",null,"name"),a("span",null,"value"),a("span")],-1)),(c(!0),r(f,null,h(d.modelValue,(o,e)=>(c(),r("div",{key:e,class:"kv"},[a("input",{type:"text",value:o.k,"aria-label":`variable name ${e+1}`,placeholder:"PR",spellcheck:"false",autocomplete:"off",onInput:n=>m(e,{k:n.target.value.trim()})},null,40,b),a("input",{type:"text",value:o.v,"aria-label":`variable value ${e+1}`,placeholder:"7",spellcheck:"false",autocomplete:"off",onInput:n=>m(e,{v:n.target.value})},null,40,V),a("button",{class:"sm ghost","aria-label":`remove variable ${e+1}`,onClick:n=>v(e)},"−",8,_)]))),128)),a("button",{class:"sm",onClick:i},"+ variable")]))}});export{x as _};
+//# sourceMappingURL=VarEditor.vue_vue_type_script_setup_true_lang-CyOlKVt5.js.map

package/dist/assets/{VarEditor.vue_vue_type_script_setup_true_lang-SKwJUsNC.js.map → VarEditor.vue_vue_type_script_setup_true_lang-CyOlKVt5.js.map}

@@ -1 +1 @@
-{"version":3,"file":"VarEditor.vue_vue_type_script_setup_true_lang-SKwJUsNC.js","sources":["../../src/components/VarEditor.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The free-form variable editor, shared by the Config tab and Submit.\n *\n * Free-form on purpose: the spec's `env:` block lists what it DECLARES, which is not the same as\n * what it NEEDS — `stack: pr-${PR}` consumes `PR` without declaring it anywhere. The authoritative\n * list of what is missing is the server's 400 text, not this form.\n */\nimport type { VarPair } from '../api/types';\n\nconst props = defineProps<{ modelValue: VarPair[] }>();\nconst emit = defineEmits<{ 'update:modelValue': [VarPair[]]; change: [] }>();\n\nfunction set(i: number, patch: Partial<VarPair>): void {\n  const next = props.modelValue.map((e, n) => (n === i ? { ...e, ...patch } : e));\n  emit('update:modelValue', next);\n  emit('change');\n}\n\nfunction add(): void {\n  emit('update:modelValue', [...props.modelValue, { k: '', v: '' }]);\n  emit('change');\n}\n\nfunction remove(i: number): void {\n  const next = props.modelValue.filter((_, n) => n !== i);\n  // Never leave the editor with no rows: an empty list looks like a broken control.\n  emit('update:modelValue', next.length ? next : [{ k: '', v: '' }]);\n  emit('change');\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"kv head\"><span>name</span><span>value</span><span /></div>\n    <div v-for=\"(e, i) in modelValue\" :key=\"i\" class=\"kv\">\n      <input\n        type=\"text\"\n        :value=\"e.k\"\n        :aria-label=\"`variable name ${i + 1}`\"\n        placeholder=\"PR\"\n        spellcheck=\"false\"\n        autocomplete=\"off\"\n        @input=\"set(i, { k: ($event.target as HTMLInputElement).value.trim() })\"\n      />\n      <input\n        type=\"text\"\n        :value=\"e.v\"\n        :aria-label=\"`variable value ${i + 1}`\"\n        placeholder=\"7\"\n        spellcheck=\"false\"\n        autocomplete=\"off\"\n        @input=\"set(i, { v: ($event.target as HTMLInputElement).value })\"\n      />\n      <button class=\"sm ghost\" :aria-label=\"`remove variable ${i + 1}`\" @click=\"remove(i)\">−</button>\n    </div>\n    <button class=\"sm\" @click=\"add\">+ variable</button>\n  </div>\n</template>\n"],"names":["props","__props","emit","__emit","set","i","patch","next","add","remove","_","n","_createElementBlock","_createElementVNode","_openBlock","_Fragment","_renderList","e","$event","_hoisted_3"],"mappings":"kRAUA,MAAMA,EAAQC,EACRC,EAAOC,EAEb,SAASC,EAAIC,EAAWC,EAA+B,CACrD,MAAMC,EAAOP,EAAM,WAAW,IAAI,CAAC,EAAG,IAAO,IAAMK,EAAI,CAAE,GAAG,EAAG,GAAGC,CAAA,EAAU,CAAE,EAC9EJ,EAAK,oBAAqBK,CAAI,EAC9BL,EAAK,QAAQ,CACf,CAEA,SAASM,GAAY,CACnBN,EAAK,oBAAqB,CAAC,GAAGF,EAAM,WAAY,CAAE,EAAG,GAAI,EAAG,EAAA,CAAI,CAAC,EACjEE,EAAK,QAAQ,CACf,CAEA,SAASO,EAAOJ,EAAiB,CAC/B,MAAME,EAAOP,EAAM,WAAW,OAAO,CAACU,EAAGC,IAAMA,IAAMN,CAAC,EAEtDH,EAAK,oBAAqBK,EAAK,OAASA,EAAO,CAAC,CAAE,EAAG,GAAI,EAAG,EAAA,CAAI,CAAC,EACjEL,EAAK,QAAQ,CACf,mBAIEU,EAwBM,MAAA,KAAA,aAvBJC,EAAsE,MAAA,CAAjE,MAAM,WAAS,CAACA,EAAiB,YAAX,MAAI,EAAOA,EAAkB,YAAZ,OAAK,EAAOA,EAAQ,MAAA,CAAA,QAChEC,EAAA,EAAA,EAAAF,EAoBMG,EAAA,KAAAC,EApBgBf,EAAA,WAAU,CAAnBgB,EAAGZ,SAAhBO,EAoBM,MAAA,CApB6B,IAAKP,EAAG,MAAM,IAAA,GAC/CQ,EAQE,QAAA,CAPA,KAAK,OACJ,MAAOI,EAAE,EACT,8BAA6BZ,EAAC,CAAA,GAC/B,YAAY,KACZ,WAAW,QACX,aAAa,MACZ,QAAKa,GAAEd,EAAIC,EAAC,CAAA,EAAQa,EAAO,OAA4B,MAAM,MAAI,CAAA,CAAA,aAEpEL,EAQE,QAAA,CAPA,KAAK,OACJ,MAAOI,EAAE,EACT,+BAA8BZ,EAAC,CAAA,GAChC,YAAY,IACZ,WAAW,QACX,aAAa,MACZ,QAAKa,GAAEd,EAAIC,KAASa,EAAO,OAA4B,KAAA,CAAK,CAAA,aAE/DL,EAA+F,SAAA,CAAvF,MAAM,WAAY,gCAA+BR,EAAC,CAAA,GAAS,QAAKa,GAAET,EAAOJ,CAAC,CAAA,EAAG,IAAC,EAAAc,CAAA,CAAA,WAExFN,EAAmD,SAAA,CAA3C,MAAM,KAAM,QAAOL,CAAA,EAAK,YAAU,CAAA"}
+{"version":3,"file":"VarEditor.vue_vue_type_script_setup_true_lang-CyOlKVt5.js","sources":["../../src/components/VarEditor.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The free-form variable editor, shared by the Config tab and Submit.\n *\n * Free-form on purpose: the spec's `env:` block lists what it DECLARES, which is not the same as\n * what it NEEDS — `stack: pr-${PR}` consumes `PR` without declaring it anywhere. The authoritative\n * list of what is missing is the server's 400 text, not this form.\n */\nimport type { VarPair } from '../api/types';\n\nconst props = defineProps<{ modelValue: VarPair[] }>();\nconst emit = defineEmits<{ 'update:modelValue': [VarPair[]]; change: [] }>();\n\nfunction set(i: number, patch: Partial<VarPair>): void {\n  const next = props.modelValue.map((e, n) => (n === i ? { ...e, ...patch } : e));\n  emit('update:modelValue', next);\n  emit('change');\n}\n\nfunction add(): void {\n  emit('update:modelValue', [...props.modelValue, { k: '', v: '' }]);\n  emit('change');\n}\n\nfunction remove(i: number): void {\n  const next = props.modelValue.filter((_, n) => n !== i);\n  // Never leave the editor with no rows: an empty list looks like a broken control.\n  emit('update:modelValue', next.length ? next : [{ k: '', v: '' }]);\n  emit('change');\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"kv head\"><span>name</span><span>value</span><span /></div>\n    <div v-for=\"(e, i) in modelValue\" :key=\"i\" class=\"kv\">\n      <input\n        type=\"text\"\n        :value=\"e.k\"\n        :aria-label=\"`variable name ${i + 1}`\"\n        placeholder=\"PR\"\n        spellcheck=\"false\"\n        autocomplete=\"off\"\n        @input=\"set(i, { k: ($event.target as HTMLInputElement).value.trim() })\"\n      />\n      <input\n        type=\"text\"\n        :value=\"e.v\"\n        :aria-label=\"`variable value ${i + 1}`\"\n        placeholder=\"7\"\n        spellcheck=\"false\"\n        autocomplete=\"off\"\n        @input=\"set(i, { v: ($event.target as HTMLInputElement).value })\"\n      />\n      <button class=\"sm ghost\" :aria-label=\"`remove variable ${i + 1}`\" @click=\"remove(i)\">−</button>\n    </div>\n    <button class=\"sm\" @click=\"add\">+ variable</button>\n  </div>\n</template>\n"],"names":["props","__props","emit","__emit","set","i","patch","next","add","remove","_","n","_createElementBlock","_createElementVNode","_openBlock","_Fragment","_renderList","e","$event","_hoisted_3"],"mappings":"kRAUA,MAAMA,EAAQC,EACRC,EAAOC,EAEb,SAASC,EAAIC,EAAWC,EAA+B,CACrD,MAAMC,EAAOP,EAAM,WAAW,IAAI,CAAC,EAAG,IAAO,IAAMK,EAAI,CAAE,GAAG,EAAG,GAAGC,CAAA,EAAU,CAAE,EAC9EJ,EAAK,oBAAqBK,CAAI,EAC9BL,EAAK,QAAQ,CACf,CAEA,SAASM,GAAY,CACnBN,EAAK,oBAAqB,CAAC,GAAGF,EAAM,WAAY,CAAE,EAAG,GAAI,EAAG,EAAA,CAAI,CAAC,EACjEE,EAAK,QAAQ,CACf,CAEA,SAASO,EAAOJ,EAAiB,CAC/B,MAAME,EAAOP,EAAM,WAAW,OAAO,CAACU,EAAGC,IAAMA,IAAMN,CAAC,EAEtDH,EAAK,oBAAqBK,EAAK,OAASA,EAAO,CAAC,CAAE,EAAG,GAAI,EAAG,EAAA,CAAI,CAAC,EACjEL,EAAK,QAAQ,CACf,mBAIEU,EAwBM,MAAA,KAAA,aAvBJC,EAAsE,MAAA,CAAjE,MAAM,WAAS,CAACA,EAAiB,YAAX,MAAI,EAAOA,EAAkB,YAAZ,OAAK,EAAOA,EAAQ,MAAA,CAAA,QAChEC,EAAA,EAAA,EAAAF,EAoBMG,EAAA,KAAAC,EApBgBf,EAAA,WAAU,CAAnBgB,EAAGZ,SAAhBO,EAoBM,MAAA,CApB6B,IAAKP,EAAG,MAAM,IAAA,GAC/CQ,EAQE,QAAA,CAPA,KAAK,OACJ,MAAOI,EAAE,EACT,8BAA6BZ,EAAC,CAAA,GAC/B,YAAY,KACZ,WAAW,QACX,aAAa,MACZ,QAAKa,GAAEd,EAAIC,EAAC,CAAA,EAAQa,EAAO,OAA4B,MAAM,MAAI,CAAA,CAAA,aAEpEL,EAQE,QAAA,CAPA,KAAK,OACJ,MAAOI,EAAE,EACT,+BAA8BZ,EAAC,CAAA,GAChC,YAAY,IACZ,WAAW,QACX,aAAa,MACZ,QAAKa,GAAEd,EAAIC,KAASa,EAAO,OAA4B,KAAA,CAAK,CAAA,aAE/DL,EAA+F,SAAA,CAAvF,MAAM,WAAY,gCAA+BR,EAAC,CAAA,GAAS,QAAKa,GAAET,EAAOJ,CAAC,CAAA,EAAG,IAAC,EAAAc,CAAA,CAAA,WAExFN,EAAmD,SAAA,CAA3C,MAAM,KAAM,QAAOL,CAAA,EAAK,YAAU,CAAA"}

package/dist/assets/{VariablesView-BnW2I-92.js → VariablesView-UCBhNd_o.js}

@@ -1,2 +1,2 @@
-import{d as Z,c as r,a as e,f as o,e as d,w as p,_ as A,x as N,g as f,F as x,t as u,s as z,h as j,i as E,v as H,a4 as O,I as G,r as v,C as V,A as C,B as M,o as n,L as I}from"./index-DVMQBHXF.js";import{_ as L}from"./ActionButton.vue_vue_type_script_setup_true_lang-D5wrEmB2.js";import{E as J}from"./EquivalentCommand-C45BzkNz.js";import{_ as K}from"./ErrorNote.vue_vue_type_script_setup_true_lang-B3hfwyPR.js";import{_ as P}from"./RelativeTime.vue_vue_type_script_setup_true_lang-BGissyps.js";import{_ as q}from"./SkeletonList.vue_vue_type_script_setup_true_lang-qMyLRAMp.js";import{_ as Q}from"./RefreshButton.vue_vue_type_script_setup_true_lang-CXCY3Vlc.js";import{_ as X}from"./_plugin-vue_export-helper-DlAUqK2U.js";import"./useFormat-DVXTfIS-.js";const Y={class:"page-head"},ee={class:"sub"},te={key:1,class:"panel"},ae={class:"grid-2"},se={class:"panel"},le={class:"phead"},ne={class:"mute",style:{"font-size":"var(--t-xs)"}},oe={key:1,class:"cards"},re={class:"name","data-label":"name"},ie={class:"break","data-label":"value"},ue={class:"dim nowrap","data-label":"updated"},de={class:"right nowrap","data-label":""},ce=["onClick"],ve={key:2,class:"hint"},me={class:"panel"},pe={class:"phead"},fe={class:"mute",style:{"font-size":"var(--t-xs)"}},he={key:1,class:"cards"},be={class:"name","data-label":"name"},_e={class:"dim nowrap","data-label":"updated"},ge={class:"right nowrap","data-label":""},ye=["onClick"],ke={key:2,class:"hint"},we={class:"panel"},$e={class:"section",style:{"margin-bottom":"var(--s3)"}},Ae={class:"row wrap two-up"},Ne={class:"field grow"},xe=["disabled"],Ee={class:"field grow"},Ve=["type","placeholder"],Ce={key:0,class:"s-failed",style:{"margin-top":"var(--s2)"}},Me={class:"row",style:{"margin-top":"var(--s3)"}},De={class:"check"},Se=["disabled"],Re={key:1,class:"hint"},Ue={class:"row",style:{"margin-top":"var(--s4)"}},Be=["disabled"],Te={key:1,class:"mute",style:{"font-size":"var(--t-sm)"}},ze=Z({__name:"VariablesView",setup(Ie){const b=v([]),_=v(!1),c=v(""),D=v(!1),g=V(()=>b.value.filter(s=>!s.secret)),y=V(()=>b.value.filter(s=>s.secret)),a=v({name:"",value:"",secret:!1}),k=v(!1),i=v(null),S=/^[A-Za-z_][A-Za-z0-9_]*$/,F=V(()=>!k.value&&S.test(a.value.name)&&a.value.value.length>0);async function h(){const s=await C.get("/api/host-vars");if(_.value=!0,s.status===404){D.value=!0;return}if(!s.ok){c.value=M(s,"load the variables");return}c.value="",b.value=s.body.entries??[]}h();function R(s){i.value=s,a.value={name:s.name,value:s.value??"",secret:s.secret}}function w(){i.value=null,a.value={name:"",value:"",secret:!1}}async function W(){k.value=!0;const s=await C.put(`/api/host-vars/${a.value.name}`,{value:a.value.value,secret:a.value.secret});if(k.value=!1,!s.ok){c.value=M(s,`store ${a.value.name}`);return}c.value="",I("ok",`Stored ${a.value.name}.`),w(),h()}async function U(s){var m;const t=await C.del(`/api/host-vars/${s.name}`);if(!t.ok){c.value=M(t,`delete ${s.name}`);return}I("ok",`Deleted ${s.name}. Specs referencing it will fail to resolve until it exists again.`),((m=i.value)==null?void 0:m.name)===s.name&&w(),h()}return(s,t)=>{var m,B,T;return n(),r("div",null,[e("div",Y,[e("div",null,[t[5]||(t[5]=e("h1",null,"Variables & secrets",-1)),e("div",ee,[t[4]||(t[4]=o(" Host-level values every spec can reference ",-1)),d(A,{label:"how a spec uses these"},{default:p(()=>[...t[3]||(t[3]=[o(" Write ",-1),e("code",null,"${vars.NAME}",-1),o(" or ",-1),e("code",null,"${secrets.NAME}",-1),o(" anywhere a spec interpolates — the ",-1),e("code",null,"env:",-1),o(" block, hooks, compose settings. The spelling is deliberate: plain ",-1),e("code",null,"${NAME}",-1),o(' keeps meaning "whatever the request supplied", so the two can never collide. ',-1)])]),_:1})])]),t[6]||(t[6]=e("span",{class:"grow"},null,-1)),d(Q,{run:h})]),c.value?(n(),N(K,{key:0,text:c.value,title:"Something went wrong."},null,8,["text"])):f("",!0),D.value?(n(),r("section",te,[...t[7]||(t[7]=[e("div",{class:"banner plain"},[e("b",null,"This server has no variable store."),e("p",null,"It is an older build of pstack. Upgrade the host to use host-level variables.")],-1)])])):(n(),r(x,{key:2},[e("div",ae,[e("section",se,[e("div",le,[t[9]||(t[9]=e("h2",{class:"section"},"Variables",-1)),d(A,{label:"what belongs here"},{default:p(()=>[...t[8]||(t[8]=[o(" Configuration that is fine to read back: a region, an image tag, the log level a preview should run at. Referenced as ",-1),e("code",null,"${vars.NAME}",-1),o(". ",-1)])]),_:1}),t[10]||(t[10]=e("span",{class:"grow"},null,-1)),e("span",ne,u(g.value.length),1)]),_.value?g.value.length?(n(),r("table",oe,[t[12]||(t[12]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Value"),e("th",null,"Updated"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(n(!0),r(x,null,z(g.value,l=>(n(),r("tr",{key:l.name},[e("td",re,[e("code",null,u(l.name),1)]),e("td",ie,u(l.value),1),e("td",ue,[d(P,{at:l.updatedAt},null,8,["at"])]),e("td",de,[e("button",{class:"ghost sm",onClick:$=>R(l)},"Edit",8,ce),d(L,{class:"danger sm",confirm:`Delete ${l.name}?`,onRun:$=>U(l)},{default:p(()=>[...t[11]||(t[11]=[o(" Delete ",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(n(),r("p",ve,"No variables yet.")):(n(),N(q,{key:0,rows:2}))]),e("section",me,[e("div",pe,[t[14]||(t[14]=e("h2",{class:"section"},"Secrets",-1)),d(A,{label:"what makes a secret different"},{default:p(()=>[...t[13]||(t[13]=[o(" The value is write-only: no page and no API route ever returns it, and it is scrubbed from job and container logs by content. Referenced as ",-1),e("code",null,"${secrets.NAME}",-1),o(" — refused in ",-1),e("code",null,"stack:",-1),o(", because a stack name appears in container names and hostnames that cannot be redacted. ",-1)])]),_:1}),t[15]||(t[15]=e("span",{class:"grow"},null,-1)),e("span",fe,u(y.value.length),1)]),_.value?y.value.length?(n(),r("table",he,[t[17]||(t[17]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Updated"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(n(!0),r(x,null,z(y.value,l=>(n(),r("tr",{key:l.name},[e("td",be,[e("code",null,u(l.name),1)]),e("td",_e,[d(P,{at:l.updatedAt},null,8,["at"])]),e("td",ge,[e("button",{class:"ghost sm",onClick:$=>R(l)},"Replace",8,ye),d(L,{class:"danger sm",confirm:`Delete ${l.name}?`,onRun:$=>U(l)},{default:p(()=>[...t[16]||(t[16]=[o(" Delete ",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(n(),r("p",ke,"No secrets yet.")):(n(),N(q,{key:0,rows:2}))])]),e("section",we,[e("h2",$e,u(i.value?i.value.secret?`Replace the value of ${i.value.name}`:`Edit ${i.value.name}`:"Add a variable or secret"),1),e("form",{onSubmit:j(W,["prevent"])},[e("div",Ae,[e("label",Ne,[t[18]||(t[18]=e("span",null,"Name",-1)),E(e("input",{"onUpdate:modelValue":t[0]||(t[0]=l=>a.value.name=l),type:"text",placeholder:"DB_PASSWORD",spellcheck:"false",autocomplete:"off",disabled:!!i.value},null,8,xe),[[H,a.value.name,void 0,{trim:!0}]])]),e("label",Ee,[t[19]||(t[19]=e("span",null,"Value",-1)),E(e("input",{"onUpdate:modelValue":t[1]||(t[1]=l=>a.value.value=l),type:a.value.secret?"password":"text",placeholder:(m=i.value)!=null&&m.secret?"enter the new value":"eu-central",spellcheck:"false",autocomplete:"off"},null,8,Ve),[[O,a.value.value]])])]),a.value.name&&!S.test(a.value.name)?(n(),r("p",Ce," Letters, digits and _ only, not starting with a digit — it has to be referenceable in a spec. ")):f("",!0),e("div",Me,[e("label",De,[E(e("input",{"onUpdate:modelValue":t[2]||(t[2]=l=>a.value.secret=l),type:"checkbox",disabled:((B=i.value)==null?void 0:B.secret)===!0},null,8,Se),[[G,a.value.secret]]),t[20]||(t[20]=o(" Secret — the value can never be read back ",-1))])]),(T=i.value)!=null&&T.secret?(n(),r("p",Re," A secret cannot be turned back into a readable variable — that would reveal a value stored write-only. Delete it and create a variable instead, re-entering the value. ")):f("",!0),e("div",Ue,[e("button",{class:"primary",type:"submit",disabled:!F.value},u(i.value?"Save":"Add"),9,Be),i.value?(n(),r("button",{key:0,type:"button",class:"ghost",onClick:w},"Cancel")):f("",!0),i.value?f("",!0):(n(),r("span",Te,[t[21]||(t[21]=o(" Reference it as ",-1)),e("code",null,"$"+u("{")+u(a.value.secret?"secrets":"vars")+"."+u(a.value.name||"NAME")+u("}"),1),t[22]||(t[22]=o(" in any spec ",-1))]))]),d(J,{what:"storing this value",method:"PUT",path:`/api/host-vars/${a.value.name||"NAME"}`,body:{value:a.value.secret?"…":a.value.value||"…",secret:a.value.secret}},null,8,["path","body"])],32)])],64))])}}}),Ge=X(ze,[["__scopeId","data-v-70e9a5af"]]);export{Ge as default};
-//# sourceMappingURL=VariablesView-BnW2I-92.js.map
+import{d as O,c as r,a as e,f as o,e as d,w as p,_ as A,z as N,g as f,F as E,t as u,y as B,h as W,i as x,v as Z,a5 as H,I as G,r as v,j as V,n as C,C as M,o as n,O as I}from"./index-9Ra4jfL4.js";import{_ as P}from"./ActionButton.vue_vue_type_script_setup_true_lang-B0qf7_XI.js";import{E as J}from"./EquivalentCommand-GFG6rkn5.js";import{_ as K}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DNaY6OBe.js";import{_ as j}from"./RelativeTime.vue_vue_type_script_setup_true_lang-Dm9XnXF7.js";import{_ as q}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DjfNq2KM.js";import{_ as Q}from"./RefreshButton.vue_vue_type_script_setup_true_lang-DpeOKN8U.js";import{_ as X}from"./_plugin-vue_export-helper-DlAUqK2U.js";import"./useFormat-DIlTY5Dl.js";const Y={class:"page-head"},ee={class:"sub"},te={key:1,class:"panel"},ae={class:"grid-2"},se={class:"panel"},le={class:"phead"},ne={class:"mute",style:{"font-size":"var(--t-xs)"}},oe={key:1,class:"cards"},re={class:"name","data-label":"name"},ie={class:"break","data-label":"value"},ue={class:"dim nowrap","data-label":"updated"},de={class:"right nowrap","data-label":""},ce=["onClick"],ve={key:2,class:"hint"},me={class:"panel"},pe={class:"phead"},fe={class:"mute",style:{"font-size":"var(--t-xs)"}},he={key:1,class:"cards"},be={class:"name","data-label":"name"},_e={class:"dim nowrap","data-label":"updated"},ge={class:"right nowrap","data-label":""},ye=["onClick"],ke={key:2,class:"hint"},we={class:"panel"},$e={class:"section",style:{"margin-bottom":"var(--s3)"}},Ae={class:"row wrap two-up"},Ne={class:"field grow"},Ee=["disabled"],xe={class:"field grow"},Ve=["type","placeholder"],Ce={key:0,class:"s-failed",style:{"margin-top":"var(--s2)"}},Me={class:"row",style:{"margin-top":"var(--s3)"}},De={class:"check"},Se=["disabled"],Re={key:1,class:"hint"},Ue={class:"row",style:{"margin-top":"var(--s4)"}},ze=["disabled"],Te={key:1,class:"mute",style:{"font-size":"var(--t-sm)"}},Be=O({__name:"VariablesView",setup(Ie){const b=v([]),_=v(!1),c=v(""),D=v(!1),g=V(()=>b.value.filter(s=>!s.secret)),y=V(()=>b.value.filter(s=>s.secret)),a=v({name:"",value:"",secret:!1}),k=v(!1),i=v(null),S=/^[A-Za-z_][A-Za-z0-9_]*$/,F=V(()=>!k.value&&S.test(a.value.name)&&a.value.value.length>0);async function h(){const s=await C.get("/api/host-vars");if(_.value=!0,s.status===404){D.value=!0;return}if(!s.ok){c.value=M(s,"load the variables");return}c.value="",b.value=s.body.entries??[]}h();function R(s){i.value=s,a.value={name:s.name,value:s.value??"",secret:s.secret}}function w(){i.value=null,a.value={name:"",value:"",secret:!1}}async function L(){k.value=!0;const s=await C.put(`/api/host-vars/${a.value.name}`,{value:a.value.value,secret:a.value.secret});if(k.value=!1,!s.ok){c.value=M(s,`store ${a.value.name}`);return}c.value="",I("ok",`Stored ${a.value.name}.`),w(),h()}async function U(s){var m;const t=await C.del(`/api/host-vars/${s.name}`);if(!t.ok){c.value=M(t,`delete ${s.name}`);return}I("ok",`Deleted ${s.name}. Specs referencing it will fail to resolve until it exists again.`),((m=i.value)==null?void 0:m.name)===s.name&&w(),h()}return(s,t)=>{var m,z,T;return n(),r("div",null,[e("div",Y,[e("div",null,[t[5]||(t[5]=e("h1",null,"Variables & secrets",-1)),e("div",ee,[t[4]||(t[4]=o(" Host-level values every spec can reference ",-1)),d(A,{label:"how a spec uses these"},{default:p(()=>[...t[3]||(t[3]=[o(" Write ",-1),e("code",null,"${vars.NAME}",-1),o(" or ",-1),e("code",null,"${secrets.NAME}",-1),o(" anywhere a spec interpolates — the ",-1),e("code",null,"env:",-1),o(" block, hooks, compose settings. The spelling is deliberate: plain ",-1),e("code",null,"${NAME}",-1),o(' keeps meaning "whatever the request supplied", so the two can never collide. ',-1)])]),_:1})])]),t[6]||(t[6]=e("span",{class:"grow"},null,-1)),d(Q,{run:h})]),c.value?(n(),N(K,{key:0,text:c.value,title:"Something went wrong."},null,8,["text"])):f("",!0),D.value?(n(),r("section",te,[...t[7]||(t[7]=[e("div",{class:"banner plain"},[e("b",null,"This server has no variable store."),e("p",null,"It is an older build of pstack. Upgrade the host to use host-level variables.")],-1)])])):(n(),r(E,{key:2},[e("div",ae,[e("section",se,[e("div",le,[t[9]||(t[9]=e("h2",{class:"section"},"Variables",-1)),d(A,{label:"what belongs here"},{default:p(()=>[...t[8]||(t[8]=[o(" Configuration that is fine to read back: a region, an image tag, the log level a preview should run at. Referenced as ",-1),e("code",null,"${vars.NAME}",-1),o(". ",-1)])]),_:1}),t[10]||(t[10]=e("span",{class:"grow"},null,-1)),e("span",ne,u(g.value.length),1)]),_.value?g.value.length?(n(),r("table",oe,[t[12]||(t[12]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Value"),e("th",null,"Updated"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(n(!0),r(E,null,B(g.value,l=>(n(),r("tr",{key:l.name},[e("td",re,[e("code",null,u(l.name),1)]),e("td",ie,u(l.value),1),e("td",ue,[d(j,{at:l.updatedAt},null,8,["at"])]),e("td",de,[e("button",{class:"ghost sm",onClick:$=>R(l)},"Edit",8,ce),d(P,{class:"danger sm",confirm:`Delete ${l.name}?`,onRun:$=>U(l)},{default:p(()=>[...t[11]||(t[11]=[o(" Delete ",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(n(),r("p",ve,"No variables yet.")):(n(),N(q,{key:0,rows:2}))]),e("section",me,[e("div",pe,[t[14]||(t[14]=e("h2",{class:"section"},"Secrets",-1)),d(A,{label:"what makes a secret different"},{default:p(()=>[...t[13]||(t[13]=[o(" The value is write-only: no page and no API route ever returns it, and it is scrubbed from job and container logs by content. Referenced as ",-1),e("code",null,"${secrets.NAME}",-1),o(" — refused in ",-1),e("code",null,"stack:",-1),o(", because a stack name appears in container names and hostnames that cannot be redacted. ",-1)])]),_:1}),t[15]||(t[15]=e("span",{class:"grow"},null,-1)),e("span",fe,u(y.value.length),1)]),_.value?y.value.length?(n(),r("table",he,[t[17]||(t[17]=e("thead",null,[e("tr",null,[e("th",null,"Name"),e("th",null,"Updated"),e("th",{"aria-label":"Actions"})])],-1)),e("tbody",null,[(n(!0),r(E,null,B(y.value,l=>(n(),r("tr",{key:l.name},[e("td",be,[e("code",null,u(l.name),1)]),e("td",_e,[d(j,{at:l.updatedAt},null,8,["at"])]),e("td",ge,[e("button",{class:"ghost sm",onClick:$=>R(l)},"Replace",8,ye),d(P,{class:"danger sm",confirm:`Delete ${l.name}?`,onRun:$=>U(l)},{default:p(()=>[...t[16]||(t[16]=[o(" Delete ",-1)])]),_:1},8,["confirm","onRun"])])]))),128))])])):(n(),r("p",ke,"No secrets yet.")):(n(),N(q,{key:0,rows:2}))])]),e("section",we,[e("h2",$e,u(i.value?i.value.secret?`Replace the value of ${i.value.name}`:`Edit ${i.value.name}`:"Add a variable or secret"),1),e("form",{onSubmit:W(L,["prevent"])},[e("div",Ae,[e("label",Ne,[t[18]||(t[18]=e("span",null,"Name",-1)),x(e("input",{"onUpdate:modelValue":t[0]||(t[0]=l=>a.value.name=l),type:"text",placeholder:"DB_PASSWORD",spellcheck:"false",autocomplete:"off",disabled:!!i.value},null,8,Ee),[[Z,a.value.name,void 0,{trim:!0}]])]),e("label",xe,[t[19]||(t[19]=e("span",null,"Value",-1)),x(e("input",{"onUpdate:modelValue":t[1]||(t[1]=l=>a.value.value=l),type:a.value.secret?"password":"text",placeholder:(m=i.value)!=null&&m.secret?"enter the new value":"eu-central",spellcheck:"false",autocomplete:"off"},null,8,Ve),[[H,a.value.value]])])]),a.value.name&&!S.test(a.value.name)?(n(),r("p",Ce," Letters, digits and _ only, not starting with a digit — it has to be referenceable in a spec. ")):f("",!0),e("div",Me,[e("label",De,[x(e("input",{"onUpdate:modelValue":t[2]||(t[2]=l=>a.value.secret=l),type:"checkbox",disabled:((z=i.value)==null?void 0:z.secret)===!0},null,8,Se),[[G,a.value.secret]]),t[20]||(t[20]=o(" Secret — the value can never be read back ",-1))])]),(T=i.value)!=null&&T.secret?(n(),r("p",Re," A secret cannot be turned back into a readable variable — that would reveal a value stored write-only. Delete it and create a variable instead, re-entering the value. ")):f("",!0),e("div",Ue,[e("button",{class:"primary",type:"submit",disabled:!F.value},u(i.value?"Save":"Add"),9,ze),i.value?(n(),r("button",{key:0,type:"button",class:"ghost",onClick:w},"Cancel")):f("",!0),i.value?f("",!0):(n(),r("span",Te,[t[21]||(t[21]=o(" Reference it as ",-1)),e("code",null,"$"+u("{")+u(a.value.secret?"secrets":"vars")+"."+u(a.value.name||"NAME")+u("}"),1),t[22]||(t[22]=o(" in any spec ",-1))]))]),d(J,{what:"storing this value",method:"PUT",path:`/api/host-vars/${a.value.name||"NAME"}`,body:{value:a.value.secret?"…":a.value.value||"…",secret:a.value.secret}},null,8,["path","body"])],32)])],64))])}}}),Ge=X(Be,[["__scopeId","data-v-70e9a5af"]]);export{Ge as default};
+//# sourceMappingURL=VariablesView-UCBhNd_o.js.map

package/dist/assets/{VariablesView-BnW2I-92.js.map → VariablesView-UCBhNd_o.js.map}

@@ -1 +1 @@
-{"version":3,"file":"VariablesView-BnW2I-92.js","sources":["../../src/views/VariablesView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Host variables & secrets — the GitHub model, scoped to this host.\n *\n * TWO SECTIONS BECAUSE THEY ARE TWO CONTRACTS. A variable's value is configuration anyone may read\n * back; a secret's value goes IN through this form and never comes back OUT — the list shows its\n * name and when it changed, nothing else, because the server keeps no route that returns it. The\n * form says so at the moment of storing, not in documentation nobody reads.\n *\n * Specs reference these as `${vars.NAME}` and `${secrets.NAME}` — spelled differently from plain\n * `${NAME}` on purpose, so a spec that reads host state says so on its face.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport EquivalentCommand from '../components/EquivalentCommand.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\n\ntype Entry = { name: string; value: string | null; secret: boolean; updatedAt: number };\n\nconst entries = ref<Entry[]>([]);\nconst loaded = ref(false);\nconst listError = ref('');\nconst unsupported = ref(false);\n\nconst vars = computed(() => entries.value.filter((e) => !e.secret));\nconst secrets = computed(() => entries.value.filter((e) => e.secret));\n\nconst form = ref({ name: '', value: '', secret: false });\nconst saving = ref(false);\n/** Editing state: the row being replaced. For a secret this means re-entering the value. */\nconst editing = ref<Entry | null>(null);\n\nconst NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;\nconst canSave = computed(\n  () => !saving.value && NAME.test(form.value.name) && form.value.value.length > 0,\n);\n\nasync function load(): Promise<void> {\n  const r = await api.get<{ entries: Entry[] }>('/api/host-vars');\n  loaded.value = true;\n  if (r.status === 404) {\n    unsupported.value = true;\n    return;\n  }\n  if (!r.ok) {\n    listError.value = problem(r, 'load the variables');\n    return;\n  }\n  listError.value = '';\n  entries.value = r.body.entries ?? [];\n}\nvoid load();\n\nfunction startEdit(e: Entry): void {\n  editing.value = e;\n  form.value = { name: e.name, value: e.value ?? '', secret: e.secret };\n}\n\nfunction cancelEdit(): void {\n  editing.value = null;\n  form.value = { name: '', value: '', secret: false };\n}\n\nasync function save(): Promise<void> {\n  saving.value = true;\n  const r = await api.put(`/api/host-vars/${form.value.name}`, {\n    value: form.value.value,\n    secret: form.value.secret,\n  });\n  saving.value = false;\n  if (!r.ok) {\n    listError.value = problem(r, `store ${form.value.name}`);\n    return;\n  }\n  listError.value = '';\n  toast('ok', `Stored ${form.value.name}.`);\n  cancelEdit();\n  void load();\n}\n\nasync function remove(e: Entry): Promise<void> {\n  const r = await api.del(`/api/host-vars/${e.name}`);\n  if (!r.ok) {\n    listError.value = problem(r, `delete ${e.name}`);\n    return;\n  }\n  toast('ok', `Deleted ${e.name}. Specs referencing it will fail to resolve until it exists again.`);\n  if (editing.value?.name === e.name) cancelEdit();\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Variables &amp; secrets</h1>\n        <div class=\"sub\">\n          Host-level values every spec can reference\n          <InfoHint label=\"how a spec uses these\">\n            Write <code>${vars.NAME}</code> or <code>${secrets.NAME}</code> anywhere a spec\n            interpolates — the <code>env:</code> block, hooks, compose settings. The spelling is\n            deliberate: plain <code>${NAME}</code> keeps meaning \"whatever the request supplied\", so\n            the two can never collide.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Something went wrong.\" />\n\n    <section v-if=\"unsupported\" class=\"panel\">\n      <div class=\"banner plain\">\n        <b>This server has no variable store.</b>\n        <p>It is an older build of pstack. Upgrade the host to use host-level variables.</p>\n      </div>\n    </section>\n\n    <template v-else>\n      <div class=\"grid-2\">\n        <section class=\"panel\">\n          <div class=\"phead\">\n            <h2 class=\"section\">Variables</h2>\n            <InfoHint label=\"what belongs here\">\n              Configuration that is fine to read back: a region, an image tag, the log level a\n              preview should run at. Referenced as <code>${vars.NAME}</code>.\n            </InfoHint>\n            <span class=\"grow\" />\n            <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ vars.length }}</span>\n          </div>\n\n          <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n          <table v-else-if=\"vars.length\" class=\"cards\">\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Value</th>\n                <th>Updated</th>\n                <th aria-label=\"Actions\" />\n              </tr>\n            </thead>\n            <tbody>\n              <tr v-for=\"e in vars\" :key=\"e.name\">\n                <td class=\"name\" data-label=\"name\"><code>{{ e.name }}</code></td>\n                <td class=\"break\" data-label=\"value\">{{ e.value }}</td>\n                <td class=\"dim nowrap\" data-label=\"updated\"><RelativeTime :at=\"e.updatedAt\" /></td>\n                <td class=\"right nowrap\" data-label=\"\">\n                  <button class=\"ghost sm\" @click=\"startEdit(e)\">Edit</button>\n                  <ActionButton class=\"danger sm\" :confirm=\"`Delete ${e.name}?`\" @run=\"remove(e)\">\n                    Delete\n                  </ActionButton>\n                </td>\n              </tr>\n            </tbody>\n          </table>\n          <p v-else class=\"hint\">No variables yet.</p>\n        </section>\n\n        <section class=\"panel\">\n          <div class=\"phead\">\n            <h2 class=\"section\">Secrets</h2>\n            <InfoHint label=\"what makes a secret different\">\n              The value is write-only: no page and no API route ever returns it, and it is scrubbed\n              from job and container logs by content. Referenced as <code>${secrets.NAME}</code> —\n              refused in <code>stack:</code>, because a stack name appears in container names and\n              hostnames that cannot be redacted.\n            </InfoHint>\n            <span class=\"grow\" />\n            <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ secrets.length }}</span>\n          </div>\n\n          <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n          <table v-else-if=\"secrets.length\" class=\"cards\">\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Updated</th>\n                <th aria-label=\"Actions\" />\n              </tr>\n            </thead>\n            <tbody>\n              <tr v-for=\"e in secrets\" :key=\"e.name\">\n                <td class=\"name\" data-label=\"name\"><code>{{ e.name }}</code></td>\n                <td class=\"dim nowrap\" data-label=\"updated\"><RelativeTime :at=\"e.updatedAt\" /></td>\n                <td class=\"right nowrap\" data-label=\"\">\n                  <button class=\"ghost sm\" @click=\"startEdit(e)\">Replace</button>\n                  <ActionButton class=\"danger sm\" :confirm=\"`Delete ${e.name}?`\" @run=\"remove(e)\">\n                    Delete\n                  </ActionButton>\n                </td>\n              </tr>\n            </tbody>\n          </table>\n          <p v-else class=\"hint\">No secrets yet.</p>\n        </section>\n      </div>\n\n      <section class=\"panel\">\n        <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n          {{ editing ? (editing.secret ? `Replace the value of ${editing.name}` : `Edit ${editing.name}`) : 'Add a variable or secret' }}\n        </h2>\n\n        <form @submit.prevent=\"save\">\n          <div class=\"row wrap two-up\">\n            <label class=\"field grow\">\n              <span>Name</span>\n              <input\n                v-model.trim=\"form.name\"\n                type=\"text\"\n                placeholder=\"DB_PASSWORD\"\n                spellcheck=\"false\"\n                autocomplete=\"off\"\n                :disabled=\"!!editing\"\n              />\n            </label>\n            <label class=\"field grow\">\n              <span>Value</span>\n              <input\n                v-model=\"form.value\"\n                :type=\"form.secret ? 'password' : 'text'\"\n                :placeholder=\"editing?.secret ? 'enter the new value' : 'eu-central'\"\n                spellcheck=\"false\"\n                autocomplete=\"off\"\n              />\n            </label>\n          </div>\n          <p v-if=\"form.name && !NAME.test(form.name)\" class=\"s-failed\" style=\"margin-top: var(--s2)\">\n            Letters, digits and _ only, not starting with a digit — it has to be referenceable in a spec.\n          </p>\n\n          <div class=\"row\" style=\"margin-top: var(--s3)\">\n            <label class=\"check\">\n              <input v-model=\"form.secret\" type=\"checkbox\" :disabled=\"editing?.secret === true\" />\n              Secret — the value can never be read back\n            </label>\n          </div>\n          <p v-if=\"editing?.secret\" class=\"hint\">\n            A secret cannot be turned back into a readable variable — that would reveal a value\n            stored write-only. Delete it and create a variable instead, re-entering the value.\n          </p>\n\n          <div class=\"row\" style=\"margin-top: var(--s4)\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!canSave\">\n              {{ editing ? 'Save' : 'Add' }}\n            </button>\n            <button v-if=\"editing\" type=\"button\" class=\"ghost\" @click=\"cancelEdit\">Cancel</button>\n            <span v-if=\"!editing\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n              Reference it as <code>${{ '{' }}{{ form.secret ? 'secrets' : 'vars' }}.{{ form.name || 'NAME' }}{{ '}' }}</code> in any spec\n            </span>\n          </div>\n          <EquivalentCommand\n            what=\"storing this value\"\n            method=\"PUT\"\n            :path=\"`/api/host-vars/${form.name || 'NAME'}`\"\n            :body=\"{ value: form.secret ? '…' : form.value || '…', secret: form.secret }\"\n          />\n        </form>\n      </section>\n    </template>\n  </div>\n</template>\n\n<style scoped>\ntd.right {\n  text-align: end;\n}\ntd.right button {\n  margin-inline-start: var(--s2);\n}\n.two-up > .field {\n  /* A form caps itself even though the page does not — a 1300px-wide text input reads as a text\n     editor, not a field. See docs/ui-rules.md. */\n  flex: 1 1 200px;\n  max-width: 420px;\n}\n</style>\n"],"names":["entries","ref","loaded","listError","unsupported","vars","computed","e","secrets","form","saving","editing","NAME","canSave","load","r","api","problem","startEdit","cancelEdit","save","toast","remove","_a","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","RefreshButton","_createBlock","ErrorNote","_openBlock","_hoisted_3","_Fragment","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_toDisplayString","_hoisted_8","_renderList","_hoisted_9","_hoisted_10","_hoisted_11","RelativeTime","_hoisted_12","$event","_hoisted_13","ActionButton","_hoisted_14","SkeletonList","_hoisted_15","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_hoisted_26","_hoisted_27","_hoisted_29","_vModelDynamic","_hoisted_31","_hoisted_32","_hoisted_33","_b","_vModelCheckbox","_c","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","EquivalentCommand"],"mappings":"o7DAyBA,MAAMA,EAAUC,EAAa,EAAE,EACzBC,EAASD,EAAI,EAAK,EAClBE,EAAYF,EAAI,EAAE,EAClBG,EAAcH,EAAI,EAAK,EAEvBI,EAAOC,EAAS,IAAMN,EAAQ,MAAM,OAAQO,GAAM,CAACA,EAAE,MAAM,CAAC,EAC5DC,EAAUF,EAAS,IAAMN,EAAQ,MAAM,OAAQO,GAAMA,EAAE,MAAM,CAAC,EAE9DE,EAAOR,EAAI,CAAE,KAAM,GAAI,MAAO,GAAI,OAAQ,GAAO,EACjDS,EAAST,EAAI,EAAK,EAElBU,EAAUV,EAAkB,IAAI,EAEhCW,EAAO,2BACPC,EAAUP,EACd,IAAM,CAACI,EAAO,OAASE,EAAK,KAAKH,EAAK,MAAM,IAAI,GAAKA,EAAK,MAAM,MAAM,OAAS,CAAA,EAGjF,eAAeK,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,EAE9D,GADAd,EAAO,MAAQ,GACXa,EAAE,SAAW,IAAK,CACpBX,EAAY,MAAQ,GACpB,MACF,CACA,GAAI,CAACW,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,oBAAoB,EACjD,MACF,CACAZ,EAAU,MAAQ,GAClBH,EAAQ,MAAQe,EAAE,KAAK,SAAW,CAAA,CACpC,CACKD,EAAA,EAEL,SAASI,EAAUX,EAAgB,CACjCI,EAAQ,MAAQJ,EAChBE,EAAK,MAAQ,CAAE,KAAMF,EAAE,KAAM,MAAOA,EAAE,OAAS,GAAI,OAAQA,EAAE,MAAA,CAC/D,CAEA,SAASY,GAAmB,CAC1BR,EAAQ,MAAQ,KAChBF,EAAK,MAAQ,CAAE,KAAM,GAAI,MAAO,GAAI,OAAQ,EAAA,CAC9C,CAEA,eAAeW,GAAsB,CACnCV,EAAO,MAAQ,GACf,MAAMK,EAAI,MAAMC,EAAI,IAAI,kBAAkBP,EAAK,MAAM,IAAI,GAAI,CAC3D,MAAOA,EAAK,MAAM,MAClB,OAAQA,EAAK,MAAM,MAAA,CACpB,EAED,GADAC,EAAO,MAAQ,GACX,CAACK,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,SAASN,EAAK,MAAM,IAAI,EAAE,EACvD,MACF,CACAN,EAAU,MAAQ,GAClBkB,EAAM,KAAM,UAAUZ,EAAK,MAAM,IAAI,GAAG,EACxCU,EAAA,EACKL,EAAA,CACP,CAEA,eAAeQ,EAAOf,EAAyB,OAC7C,MAAMQ,EAAI,MAAMC,EAAI,IAAI,kBAAkBT,EAAE,IAAI,EAAE,EAClD,GAAI,CAACQ,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,UAAUR,EAAE,IAAI,EAAE,EAC/C,MACF,CACAc,EAAM,KAAM,WAAWd,EAAE,IAAI,oEAAoE,IAC7FgB,EAAAZ,EAAQ,QAAR,YAAAY,EAAe,QAAShB,EAAE,MAAMY,EAAA,EAC/BL,EAAA,CACP,oCAIEU,EAwKM,MAAA,KAAA,CAvKJC,EAeM,MAfNC,EAeM,CAdJD,EAWM,MAAA,KAAA,CAVJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAgC,UAA5B,sBAAuB,EAAA,GAC3BA,EAQM,MARNG,GAQM,eARW,+CAEf,EAAA,GAAAC,EAKWC,EAAA,CALD,MAAM,yBAAuB,WAAC,IAChC,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADgC,UAChC,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,IAAO,OAAI,EAAA,EAAAA,EAA4B,YAAtB,kBAAe,EAAA,IAAO,uCAC5C,EAAA,EAAAA,EAAiB,YAAX,OAAI,EAAA,IAAO,sEAClB,EAAA,EAAAA,EAAoB,YAAd,UAAO,EAAA,IAAO,iFAExC,EAAA,CAAA,2BAGJA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAA6BE,EAAA,CAAb,IAAKjB,EAAI,CAAA,GAGVX,EAAA,WAAjB6B,EAA8EC,EAAA,OAAjD,KAAM9B,EAAA,MAAW,MAAM,uBAAA,6BAErCC,EAAA,OAAf8B,IAAAV,EAKU,UALVW,GAKU,CAAA,GAAAR,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJRF,EAGM,MAAA,CAHD,MAAM,gBAAc,CACvBA,EAAyC,SAAtC,oCAAkC,EACrCA,EAAoF,SAAjF,+EAA6E,CAAA,gBAIpFD,EA4IWY,EAAA,CAAA,IAAA,GAAA,CA3ITX,EA4EM,MA5ENY,GA4EM,CA3EJZ,EAoCU,UApCVa,GAoCU,CAnCRb,EAQM,MARNc,GAQM,CAPJZ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAkC,KAAA,CAA9B,MAAM,SAAA,EAAU,YAAS,EAAA,GAC7BI,EAGWC,EAAA,CAHD,MAAM,qBAAmB,WAAC,IAEG,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFH,0HAEG,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,IAAO,KAChE,EAAA,CAAA,yBACAA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA0E,OAA1Ee,GAA0EC,EAArBpC,EAAA,MAAK,MAAM,EAAA,CAAA,CAAA,GAG7CH,EAAA,MACHG,EAAA,MAAK,QAAvB6B,EAAA,EAAAV,EAsBQ,QAtBRkB,GAsBQ,eArBNjB,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAa,UAAT,MAAI,EACRA,EAAc,UAAV,OAAK,EACTA,EAAgB,UAAZ,SAAO,EACXA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAYQ,QAAA,KAAA,QAXND,EAUKY,EAAA,KAAAO,EAVWtC,EAAA,MAALE,QAAXiB,EAUK,KAAA,CAVkB,IAAKjB,EAAE,IAAA,GAC5BkB,EAAiE,KAAjEmB,GAAiE,CAA9BnB,EAAyB,OAAA,KAAAgB,EAAhBlC,EAAE,IAAI,EAAA,CAAA,CAAA,GAClDkB,EAAuD,KAAvDoB,GAAuDJ,EAAflC,EAAE,KAAK,EAAA,CAAA,EAC/CkB,EAAmF,KAAnFqB,GAAmF,CAAvCjB,EAAkCkB,EAAA,CAAnB,GAAIxC,EAAE,SAAA,mBACjEkB,EAKK,KALLuB,GAKK,CAJHvB,EAA4D,SAAA,CAApD,MAAM,WAAY,QAAKwB,GAAE/B,EAAUX,CAAC,CAAA,EAAG,OAAI,EAAA2C,EAAA,EACnDrB,EAEesB,EAAA,CAFD,MAAM,YAAa,QAAO,UAAY5C,EAAE,IAAI,IAAM,MAAG0C,GAAE3B,EAAOf,CAAC,CAAA,aAAG,IAEhF,CAAA,GAAAoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFgF,WAEhF,EAAA,CAAA,uDAKRH,EAA4C,IAA5C4B,GAAuB,mBAAiB,QAxBxCpB,EAAyCqB,EAAA,OAAX,KAAM,CAAA,GAwBI,GAG1C5B,EAoCU,UApCV6B,GAoCU,CAnCR7B,EAUM,MAVN8B,GAUM,CATJ5B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgC,KAAA,CAA5B,MAAM,SAAA,EAAU,UAAO,EAAA,GAC3BI,EAKWC,EAAA,CALD,MAAM,iCAA+B,WAAC,IAEQ,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFR,gJAEQ,EAAA,EAAAF,EAA4B,YAAtB,kBAAe,EAAA,IAAO,iBACvE,EAAA,EAAAA,EAAmB,YAAb,SAAM,EAAA,IAAO,4FAEhC,EAAA,CAAA,yBACAA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA6E,OAA7E+B,GAA6Ef,EAAxBjC,EAAA,MAAQ,MAAM,EAAA,CAAA,CAAA,GAGhDN,EAAA,MACHM,EAAA,MAAQ,QAA1B0B,EAAA,EAAAV,EAoBQ,QApBRiC,GAoBQ,eAnBNhC,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAgB,UAAZ,SAAO,EACXA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAWQ,QAAA,KAAA,QAVND,EASKY,EAAA,KAAAO,EATWnC,EAAA,MAALD,QAAXiB,EASK,KAAA,CATqB,IAAKjB,EAAE,IAAA,GAC/BkB,EAAiE,KAAjEiC,GAAiE,CAA9BjC,EAAyB,OAAA,KAAAgB,EAAhBlC,EAAE,IAAI,EAAA,CAAA,CAAA,GAClDkB,EAAmF,KAAnFkC,GAAmF,CAAvC9B,EAAkCkB,EAAA,CAAnB,GAAIxC,EAAE,SAAA,mBACjEkB,EAKK,KALLmC,GAKK,CAJHnC,EAA+D,SAAA,CAAvD,MAAM,WAAY,QAAKwB,GAAE/B,EAAUX,CAAC,CAAA,EAAG,UAAO,EAAAsD,EAAA,EACtDhC,EAEesB,EAAA,CAFD,MAAM,YAAa,QAAO,UAAY5C,EAAE,IAAI,IAAM,MAAG0C,GAAE3B,EAAOf,CAAC,CAAA,aAAG,IAEhF,CAAA,GAAAoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFgF,WAEhF,EAAA,CAAA,uDAKRH,EAA0C,IAA1CsC,GAAuB,iBAAe,QAtBtC9B,EAAyCqB,EAAA,OAAX,KAAM,CAAA,GAsBE,KAI1C5B,EA4DU,UA5DVsC,GA4DU,CA3DRtC,EAEK,KAFLuC,GAEKvB,EADA9B,EAAA,MAAWA,EAAA,MAAQ,OAAM,wBAA2BA,QAAQ,IAAI,GAAA,QAAaA,EAAA,MAAQ,IAAI,GAAA,0BAAA,EAAA,CAAA,EAG9Fc,EAsDO,OAAA,CAtDA,WAAgBL,EAAI,CAAA,SAAA,CAAA,CAAA,GACzBK,EAsBM,MAtBNwC,GAsBM,CArBJxC,EAUQ,QAVRyC,GAUQ,CATNvC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAiB,YAAX,OAAI,EAAA,KACVA,EAOE,QAAA,CANc,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,KAAIwC,GACvB,KAAK,OACL,YAAY,cACZ,WAAW,QACX,aAAa,MACZ,WAAYtC,EAAA,KAAA,iBALCF,EAAA,MAAK,YAAX,CAAA,KAAR,EAAA,CAAwB,MAQ5BgB,EASQ,QATR0C,GASQ,CARNxC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkB,YAAZ,QAAK,EAAA,KACXA,EAME,QAAA,CALS,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,MAAKwC,GAClB,KAAMxC,EAAA,MAAK,OAAM,WAAA,OACjB,aAAac,EAAAZ,EAAA,QAAA,MAAAY,EAAS,OAAM,sBAAA,aAC7B,WAAW,QACX,aAAa,KAAA,cAJJ,CAAA6C,EAAA3D,EAAA,MAAK,KAAK,CAAA,OAQhBA,EAAA,MAAK,MAAI,CAAKG,EAAK,KAAKH,EAAA,MAAK,IAAI,OAA1Ce,EAEI,IAFJ6C,GAA4F,iGAE5F,YAEA5C,EAKM,MALN6C,GAKM,CAJJ7C,EAGQ,QAHR8C,GAGQ,GAFN9C,EAAoF,QAAA,CAApE,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,OAAMwC,GAAE,KAAK,WAAY,WAAUuB,EAAA7D,EAAA,QAAA,YAAA6D,EAAS,UAAM,EAAA,cAAvD,CAAAC,EAAAhE,EAAA,MAAK,MAAM,CAAA,mBAAyD,8CAEtF,EAAA,EAAA,MAEOiE,EAAA/D,EAAA,QAAA,MAAA+D,EAAS,YAAlBlD,EAGI,IAHJmD,GAAuC,0KAGvC,YAEAlD,EAQM,MARNmD,GAQM,CAPJnD,EAES,SAAA,CAFD,MAAM,UAAU,KAAK,SAAU,UAAWZ,EAAA,KAAA,IAC7CF,EAAA,MAAO,OAAA,KAAA,EAAA,EAAAkE,EAAA,EAEElE,EAAA,WAAda,EAAsF,SAAA,OAA/D,KAAK,SAAS,MAAM,QAAS,QAAOL,CAAA,EAAY,QAAM,YAChER,EAAA,gBAAbuB,IAAAV,EAEO,OAFPsD,GAEO,iBAF2D,oBAChD,EAAA,GAAArD,EAAgG,OAAA,KAA1F,IAACgB,EAAG,GAAG,IAAMhC,EAAA,MAAK,OAAM,UAAA,MAAA,EAAwB,IAACgC,EAAGhC,EAAA,MAAK,gBAAoB,GAAG,EAAA,CAAA,kBAAU,gBAClH,EAAA,EAAA,MAEFoB,EAKEkD,EAAA,CAJA,KAAK,qBACL,OAAO,MACN,KAAI,kBAAoBtE,EAAA,MAAK,MAAI,MAAA,GACjC,KAAI,CAAA,MAAWA,EAAA,MAAK,OAAM,IAASA,EAAA,MAAK,OAAK,IAAA,OAAiBA,EAAA,MAAK,MAAA,CAAM"}
+{"version":3,"file":"VariablesView-UCBhNd_o.js","sources":["../../src/views/VariablesView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Host variables & secrets — the GitHub model, scoped to this host.\n *\n * TWO SECTIONS BECAUSE THEY ARE TWO CONTRACTS. A variable's value is configuration anyone may read\n * back; a secret's value goes IN through this form and never comes back OUT — the list shows its\n * name and when it changed, nothing else, because the server keeps no route that returns it. The\n * form says so at the moment of storing, not in documentation nobody reads.\n *\n * Specs reference these as `${vars.NAME}` and `${secrets.NAME}` — spelled differently from plain\n * `${NAME}` on purpose, so a spec that reads host state says so on its face.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport EquivalentCommand from '../components/EquivalentCommand.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\n\ntype Entry = { name: string; value: string | null; secret: boolean; updatedAt: number };\n\nconst entries = ref<Entry[]>([]);\nconst loaded = ref(false);\nconst listError = ref('');\nconst unsupported = ref(false);\n\nconst vars = computed(() => entries.value.filter((e) => !e.secret));\nconst secrets = computed(() => entries.value.filter((e) => e.secret));\n\nconst form = ref({ name: '', value: '', secret: false });\nconst saving = ref(false);\n/** Editing state: the row being replaced. For a secret this means re-entering the value. */\nconst editing = ref<Entry | null>(null);\n\nconst NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;\nconst canSave = computed(\n  () => !saving.value && NAME.test(form.value.name) && form.value.value.length > 0,\n);\n\nasync function load(): Promise<void> {\n  const r = await api.get<{ entries: Entry[] }>('/api/host-vars');\n  loaded.value = true;\n  if (r.status === 404) {\n    unsupported.value = true;\n    return;\n  }\n  if (!r.ok) {\n    listError.value = problem(r, 'load the variables');\n    return;\n  }\n  listError.value = '';\n  entries.value = r.body.entries ?? [];\n}\nvoid load();\n\nfunction startEdit(e: Entry): void {\n  editing.value = e;\n  form.value = { name: e.name, value: e.value ?? '', secret: e.secret };\n}\n\nfunction cancelEdit(): void {\n  editing.value = null;\n  form.value = { name: '', value: '', secret: false };\n}\n\nasync function save(): Promise<void> {\n  saving.value = true;\n  const r = await api.put(`/api/host-vars/${form.value.name}`, {\n    value: form.value.value,\n    secret: form.value.secret,\n  });\n  saving.value = false;\n  if (!r.ok) {\n    listError.value = problem(r, `store ${form.value.name}`);\n    return;\n  }\n  listError.value = '';\n  toast('ok', `Stored ${form.value.name}.`);\n  cancelEdit();\n  void load();\n}\n\nasync function remove(e: Entry): Promise<void> {\n  const r = await api.del(`/api/host-vars/${e.name}`);\n  if (!r.ok) {\n    listError.value = problem(r, `delete ${e.name}`);\n    return;\n  }\n  toast('ok', `Deleted ${e.name}. Specs referencing it will fail to resolve until it exists again.`);\n  if (editing.value?.name === e.name) cancelEdit();\n  void load();\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Variables &amp; secrets</h1>\n        <div class=\"sub\">\n          Host-level values every spec can reference\n          <InfoHint label=\"how a spec uses these\">\n            Write <code>${vars.NAME}</code> or <code>${secrets.NAME}</code> anywhere a spec\n            interpolates — the <code>env:</code> block, hooks, compose settings. The spelling is\n            deliberate: plain <code>${NAME}</code> keeps meaning \"whatever the request supplied\", so\n            the two can never collide.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Something went wrong.\" />\n\n    <section v-if=\"unsupported\" class=\"panel\">\n      <div class=\"banner plain\">\n        <b>This server has no variable store.</b>\n        <p>It is an older build of pstack. Upgrade the host to use host-level variables.</p>\n      </div>\n    </section>\n\n    <template v-else>\n      <div class=\"grid-2\">\n        <section class=\"panel\">\n          <div class=\"phead\">\n            <h2 class=\"section\">Variables</h2>\n            <InfoHint label=\"what belongs here\">\n              Configuration that is fine to read back: a region, an image tag, the log level a\n              preview should run at. Referenced as <code>${vars.NAME}</code>.\n            </InfoHint>\n            <span class=\"grow\" />\n            <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ vars.length }}</span>\n          </div>\n\n          <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n          <table v-else-if=\"vars.length\" class=\"cards\">\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Value</th>\n                <th>Updated</th>\n                <th aria-label=\"Actions\" />\n              </tr>\n            </thead>\n            <tbody>\n              <tr v-for=\"e in vars\" :key=\"e.name\">\n                <td class=\"name\" data-label=\"name\"><code>{{ e.name }}</code></td>\n                <td class=\"break\" data-label=\"value\">{{ e.value }}</td>\n                <td class=\"dim nowrap\" data-label=\"updated\"><RelativeTime :at=\"e.updatedAt\" /></td>\n                <td class=\"right nowrap\" data-label=\"\">\n                  <button class=\"ghost sm\" @click=\"startEdit(e)\">Edit</button>\n                  <ActionButton class=\"danger sm\" :confirm=\"`Delete ${e.name}?`\" @run=\"remove(e)\">\n                    Delete\n                  </ActionButton>\n                </td>\n              </tr>\n            </tbody>\n          </table>\n          <p v-else class=\"hint\">No variables yet.</p>\n        </section>\n\n        <section class=\"panel\">\n          <div class=\"phead\">\n            <h2 class=\"section\">Secrets</h2>\n            <InfoHint label=\"what makes a secret different\">\n              The value is write-only: no page and no API route ever returns it, and it is scrubbed\n              from job and container logs by content. Referenced as <code>${secrets.NAME}</code> —\n              refused in <code>stack:</code>, because a stack name appears in container names and\n              hostnames that cannot be redacted.\n            </InfoHint>\n            <span class=\"grow\" />\n            <span class=\"mute\" style=\"font-size: var(--t-xs)\">{{ secrets.length }}</span>\n          </div>\n\n          <SkeletonList v-if=\"!loaded\" :rows=\"2\" />\n          <table v-else-if=\"secrets.length\" class=\"cards\">\n            <thead>\n              <tr>\n                <th>Name</th>\n                <th>Updated</th>\n                <th aria-label=\"Actions\" />\n              </tr>\n            </thead>\n            <tbody>\n              <tr v-for=\"e in secrets\" :key=\"e.name\">\n                <td class=\"name\" data-label=\"name\"><code>{{ e.name }}</code></td>\n                <td class=\"dim nowrap\" data-label=\"updated\"><RelativeTime :at=\"e.updatedAt\" /></td>\n                <td class=\"right nowrap\" data-label=\"\">\n                  <button class=\"ghost sm\" @click=\"startEdit(e)\">Replace</button>\n                  <ActionButton class=\"danger sm\" :confirm=\"`Delete ${e.name}?`\" @run=\"remove(e)\">\n                    Delete\n                  </ActionButton>\n                </td>\n              </tr>\n            </tbody>\n          </table>\n          <p v-else class=\"hint\">No secrets yet.</p>\n        </section>\n      </div>\n\n      <section class=\"panel\">\n        <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n          {{ editing ? (editing.secret ? `Replace the value of ${editing.name}` : `Edit ${editing.name}`) : 'Add a variable or secret' }}\n        </h2>\n\n        <form @submit.prevent=\"save\">\n          <div class=\"row wrap two-up\">\n            <label class=\"field grow\">\n              <span>Name</span>\n              <input\n                v-model.trim=\"form.name\"\n                type=\"text\"\n                placeholder=\"DB_PASSWORD\"\n                spellcheck=\"false\"\n                autocomplete=\"off\"\n                :disabled=\"!!editing\"\n              />\n            </label>\n            <label class=\"field grow\">\n              <span>Value</span>\n              <input\n                v-model=\"form.value\"\n                :type=\"form.secret ? 'password' : 'text'\"\n                :placeholder=\"editing?.secret ? 'enter the new value' : 'eu-central'\"\n                spellcheck=\"false\"\n                autocomplete=\"off\"\n              />\n            </label>\n          </div>\n          <p v-if=\"form.name && !NAME.test(form.name)\" class=\"s-failed\" style=\"margin-top: var(--s2)\">\n            Letters, digits and _ only, not starting with a digit — it has to be referenceable in a spec.\n          </p>\n\n          <div class=\"row\" style=\"margin-top: var(--s3)\">\n            <label class=\"check\">\n              <input v-model=\"form.secret\" type=\"checkbox\" :disabled=\"editing?.secret === true\" />\n              Secret — the value can never be read back\n            </label>\n          </div>\n          <p v-if=\"editing?.secret\" class=\"hint\">\n            A secret cannot be turned back into a readable variable — that would reveal a value\n            stored write-only. Delete it and create a variable instead, re-entering the value.\n          </p>\n\n          <div class=\"row\" style=\"margin-top: var(--s4)\">\n            <button class=\"primary\" type=\"submit\" :disabled=\"!canSave\">\n              {{ editing ? 'Save' : 'Add' }}\n            </button>\n            <button v-if=\"editing\" type=\"button\" class=\"ghost\" @click=\"cancelEdit\">Cancel</button>\n            <span v-if=\"!editing\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n              Reference it as <code>${{ '{' }}{{ form.secret ? 'secrets' : 'vars' }}.{{ form.name || 'NAME' }}{{ '}' }}</code> in any spec\n            </span>\n          </div>\n          <EquivalentCommand\n            what=\"storing this value\"\n            method=\"PUT\"\n            :path=\"`/api/host-vars/${form.name || 'NAME'}`\"\n            :body=\"{ value: form.secret ? '…' : form.value || '…', secret: form.secret }\"\n          />\n        </form>\n      </section>\n    </template>\n  </div>\n</template>\n\n<style scoped>\ntd.right {\n  text-align: end;\n}\ntd.right button {\n  margin-inline-start: var(--s2);\n}\n.two-up > .field {\n  /* A form caps itself even though the page does not — a 1300px-wide text input reads as a text\n     editor, not a field. See docs/ui-rules.md. */\n  flex: 1 1 200px;\n  max-width: 420px;\n}\n</style>\n"],"names":["entries","ref","loaded","listError","unsupported","vars","computed","e","secrets","form","saving","editing","NAME","canSave","load","r","api","problem","startEdit","cancelEdit","save","toast","remove","_a","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","_createVNode","InfoHint","RefreshButton","_createBlock","ErrorNote","_openBlock","_hoisted_3","_Fragment","_hoisted_4","_hoisted_5","_hoisted_6","_hoisted_7","_toDisplayString","_hoisted_8","_renderList","_hoisted_9","_hoisted_10","_hoisted_11","RelativeTime","_hoisted_12","$event","_hoisted_13","ActionButton","_hoisted_14","SkeletonList","_hoisted_15","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_hoisted_26","_hoisted_27","_hoisted_29","_vModelDynamic","_hoisted_31","_hoisted_32","_hoisted_33","_b","_vModelCheckbox","_c","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","EquivalentCommand"],"mappings":"o7DAyBA,MAAMA,EAAUC,EAAa,EAAE,EACzBC,EAASD,EAAI,EAAK,EAClBE,EAAYF,EAAI,EAAE,EAClBG,EAAcH,EAAI,EAAK,EAEvBI,EAAOC,EAAS,IAAMN,EAAQ,MAAM,OAAQO,GAAM,CAACA,EAAE,MAAM,CAAC,EAC5DC,EAAUF,EAAS,IAAMN,EAAQ,MAAM,OAAQO,GAAMA,EAAE,MAAM,CAAC,EAE9DE,EAAOR,EAAI,CAAE,KAAM,GAAI,MAAO,GAAI,OAAQ,GAAO,EACjDS,EAAST,EAAI,EAAK,EAElBU,EAAUV,EAAkB,IAAI,EAEhCW,EAAO,2BACPC,EAAUP,EACd,IAAM,CAACI,EAAO,OAASE,EAAK,KAAKH,EAAK,MAAM,IAAI,GAAKA,EAAK,MAAM,MAAM,OAAS,CAAA,EAGjF,eAAeK,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAA0B,gBAAgB,EAE9D,GADAd,EAAO,MAAQ,GACXa,EAAE,SAAW,IAAK,CACpBX,EAAY,MAAQ,GACpB,MACF,CACA,GAAI,CAACW,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,oBAAoB,EACjD,MACF,CACAZ,EAAU,MAAQ,GAClBH,EAAQ,MAAQe,EAAE,KAAK,SAAW,CAAA,CACpC,CACKD,EAAA,EAEL,SAASI,EAAUX,EAAgB,CACjCI,EAAQ,MAAQJ,EAChBE,EAAK,MAAQ,CAAE,KAAMF,EAAE,KAAM,MAAOA,EAAE,OAAS,GAAI,OAAQA,EAAE,MAAA,CAC/D,CAEA,SAASY,GAAmB,CAC1BR,EAAQ,MAAQ,KAChBF,EAAK,MAAQ,CAAE,KAAM,GAAI,MAAO,GAAI,OAAQ,EAAA,CAC9C,CAEA,eAAeW,GAAsB,CACnCV,EAAO,MAAQ,GACf,MAAMK,EAAI,MAAMC,EAAI,IAAI,kBAAkBP,EAAK,MAAM,IAAI,GAAI,CAC3D,MAAOA,EAAK,MAAM,MAClB,OAAQA,EAAK,MAAM,MAAA,CACpB,EAED,GADAC,EAAO,MAAQ,GACX,CAACK,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,SAASN,EAAK,MAAM,IAAI,EAAE,EACvD,MACF,CACAN,EAAU,MAAQ,GAClBkB,EAAM,KAAM,UAAUZ,EAAK,MAAM,IAAI,GAAG,EACxCU,EAAA,EACKL,EAAA,CACP,CAEA,eAAeQ,EAAOf,EAAyB,OAC7C,MAAMQ,EAAI,MAAMC,EAAI,IAAI,kBAAkBT,EAAE,IAAI,EAAE,EAClD,GAAI,CAACQ,EAAE,GAAI,CACTZ,EAAU,MAAQc,EAAQF,EAAG,UAAUR,EAAE,IAAI,EAAE,EAC/C,MACF,CACAc,EAAM,KAAM,WAAWd,EAAE,IAAI,oEAAoE,IAC7FgB,EAAAZ,EAAQ,QAAR,YAAAY,EAAe,QAAShB,EAAE,MAAMY,EAAA,EAC/BL,EAAA,CACP,oCAIEU,EAwKM,MAAA,KAAA,CAvKJC,EAeM,MAfNC,EAeM,CAdJD,EAWM,MAAA,KAAA,CAVJE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAgC,UAA5B,sBAAuB,EAAA,GAC3BA,EAQM,MARNG,GAQM,eARW,+CAEf,EAAA,GAAAC,EAKWC,EAAA,CALD,MAAM,yBAAuB,WAAC,IAChC,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADgC,UAChC,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,IAAO,OAAI,EAAA,EAAAA,EAA4B,YAAtB,kBAAe,EAAA,IAAO,uCAC5C,EAAA,EAAAA,EAAiB,YAAX,OAAI,EAAA,IAAO,sEAClB,EAAA,EAAAA,EAAoB,YAAd,UAAO,EAAA,IAAO,iFAExC,EAAA,CAAA,2BAGJA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBI,EAA6BE,EAAA,CAAb,IAAKjB,EAAI,CAAA,GAGVX,EAAA,WAAjB6B,EAA8EC,EAAA,OAAjD,KAAM9B,EAAA,MAAW,MAAM,uBAAA,6BAErCC,EAAA,OAAf8B,IAAAV,EAKU,UALVW,GAKU,CAAA,GAAAR,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAJRF,EAGM,MAAA,CAHD,MAAM,gBAAc,CACvBA,EAAyC,SAAtC,oCAAkC,EACrCA,EAAoF,SAAjF,+EAA6E,CAAA,gBAIpFD,EA4IWY,EAAA,CAAA,IAAA,GAAA,CA3ITX,EA4EM,MA5ENY,GA4EM,CA3EJZ,EAoCU,UApCVa,GAoCU,CAnCRb,EAQM,MARNc,GAQM,CAPJZ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAF,EAAkC,KAAA,CAA9B,MAAM,SAAA,EAAU,YAAS,EAAA,GAC7BI,EAGWC,EAAA,CAHD,MAAM,qBAAmB,WAAC,IAEG,CAAA,GAAAH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFH,0HAEG,EAAA,EAAAF,EAAyB,YAAnB,eAAY,EAAA,IAAO,KAChE,EAAA,CAAA,yBACAA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA0E,OAA1Ee,GAA0EC,EAArBpC,EAAA,MAAK,MAAM,EAAA,CAAA,CAAA,GAG7CH,EAAA,MACHG,EAAA,MAAK,QAAvB6B,EAAA,EAAAV,EAsBQ,QAtBRkB,GAsBQ,eArBNjB,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAa,UAAT,MAAI,EACRA,EAAc,UAAV,OAAK,EACTA,EAAgB,UAAZ,SAAO,EACXA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAYQ,QAAA,KAAA,QAXND,EAUKY,EAAA,KAAAO,EAVWtC,EAAA,MAALE,QAAXiB,EAUK,KAAA,CAVkB,IAAKjB,EAAE,IAAA,GAC5BkB,EAAiE,KAAjEmB,GAAiE,CAA9BnB,EAAyB,OAAA,KAAAgB,EAAhBlC,EAAE,IAAI,EAAA,CAAA,CAAA,GAClDkB,EAAuD,KAAvDoB,GAAuDJ,EAAflC,EAAE,KAAK,EAAA,CAAA,EAC/CkB,EAAmF,KAAnFqB,GAAmF,CAAvCjB,EAAkCkB,EAAA,CAAnB,GAAIxC,EAAE,SAAA,mBACjEkB,EAKK,KALLuB,GAKK,CAJHvB,EAA4D,SAAA,CAApD,MAAM,WAAY,QAAKwB,GAAE/B,EAAUX,CAAC,CAAA,EAAG,OAAI,EAAA2C,EAAA,EACnDrB,EAEesB,EAAA,CAFD,MAAM,YAAa,QAAO,UAAY5C,EAAE,IAAI,IAAM,MAAG0C,GAAE3B,EAAOf,CAAC,CAAA,aAAG,IAEhF,CAAA,GAAAoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFgF,WAEhF,EAAA,CAAA,uDAKRH,EAA4C,IAA5C4B,GAAuB,mBAAiB,QAxBxCpB,EAAyCqB,EAAA,OAAX,KAAM,CAAA,GAwBI,GAG1C5B,EAoCU,UApCV6B,GAoCU,CAnCR7B,EAUM,MAVN8B,GAUM,CATJ5B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgC,KAAA,CAA5B,MAAM,SAAA,EAAU,UAAO,EAAA,GAC3BI,EAKWC,EAAA,CALD,MAAM,iCAA+B,WAAC,IAEQ,CAAA,GAAAH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFR,gJAEQ,EAAA,EAAAF,EAA4B,YAAtB,kBAAe,EAAA,IAAO,iBACvE,EAAA,EAAAA,EAAmB,YAAb,SAAM,EAAA,IAAO,4FAEhC,EAAA,CAAA,yBACAA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA6E,OAA7E+B,GAA6Ef,EAAxBjC,EAAA,MAAQ,MAAM,EAAA,CAAA,CAAA,GAGhDN,EAAA,MACHM,EAAA,MAAQ,QAA1B0B,EAAA,EAAAV,EAoBQ,QApBRiC,GAoBQ,eAnBNhC,EAMQ,QAAA,KAAA,CALNA,EAIK,KAAA,KAAA,CAHHA,EAAa,UAAT,MAAI,EACRA,EAAgB,UAAZ,SAAO,EACXA,EAA2B,KAAA,CAAvB,aAAW,UAAS,CAAA,SAG5BA,EAWQ,QAAA,KAAA,QAVND,EASKY,EAAA,KAAAO,EATWnC,EAAA,MAALD,QAAXiB,EASK,KAAA,CATqB,IAAKjB,EAAE,IAAA,GAC/BkB,EAAiE,KAAjEiC,GAAiE,CAA9BjC,EAAyB,OAAA,KAAAgB,EAAhBlC,EAAE,IAAI,EAAA,CAAA,CAAA,GAClDkB,EAAmF,KAAnFkC,GAAmF,CAAvC9B,EAAkCkB,EAAA,CAAnB,GAAIxC,EAAE,SAAA,mBACjEkB,EAKK,KALLmC,GAKK,CAJHnC,EAA+D,SAAA,CAAvD,MAAM,WAAY,QAAKwB,GAAE/B,EAAUX,CAAC,CAAA,EAAG,UAAO,EAAAsD,EAAA,EACtDhC,EAEesB,EAAA,CAFD,MAAM,YAAa,QAAO,UAAY5C,EAAE,IAAI,IAAM,MAAG0C,GAAE3B,EAAOf,CAAC,CAAA,aAAG,IAEhF,CAAA,GAAAoB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFgF,WAEhF,EAAA,CAAA,uDAKRH,EAA0C,IAA1CsC,GAAuB,iBAAe,QAtBtC9B,EAAyCqB,EAAA,OAAX,KAAM,CAAA,GAsBE,KAI1C5B,EA4DU,UA5DVsC,GA4DU,CA3DRtC,EAEK,KAFLuC,GAEKvB,EADA9B,EAAA,MAAWA,EAAA,MAAQ,OAAM,wBAA2BA,QAAQ,IAAI,GAAA,QAAaA,EAAA,MAAQ,IAAI,GAAA,0BAAA,EAAA,CAAA,EAG9Fc,EAsDO,OAAA,CAtDA,WAAgBL,EAAI,CAAA,SAAA,CAAA,CAAA,GACzBK,EAsBM,MAtBNwC,GAsBM,CArBJxC,EAUQ,QAVRyC,GAUQ,CATNvC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAiB,YAAX,OAAI,EAAA,KACVA,EAOE,QAAA,CANc,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,KAAIwC,GACvB,KAAK,OACL,YAAY,cACZ,WAAW,QACX,aAAa,MACZ,WAAYtC,EAAA,KAAA,iBALCF,EAAA,MAAK,YAAX,CAAA,KAAR,EAAA,CAAwB,MAQ5BgB,EASQ,QATR0C,GASQ,CARNxC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkB,YAAZ,QAAK,EAAA,KACXA,EAME,QAAA,CALS,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,MAAKwC,GAClB,KAAMxC,EAAA,MAAK,OAAM,WAAA,OACjB,aAAac,EAAAZ,EAAA,QAAA,MAAAY,EAAS,OAAM,sBAAA,aAC7B,WAAW,QACX,aAAa,KAAA,cAJJ,CAAA6C,EAAA3D,EAAA,MAAK,KAAK,CAAA,OAQhBA,EAAA,MAAK,MAAI,CAAKG,EAAK,KAAKH,EAAA,MAAK,IAAI,OAA1Ce,EAEI,IAFJ6C,GAA4F,iGAE5F,YAEA5C,EAKM,MALN6C,GAKM,CAJJ7C,EAGQ,QAHR8C,GAGQ,GAFN9C,EAAoF,QAAA,CAApE,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAsB,GAAAxC,EAAA,MAAK,OAAMwC,GAAE,KAAK,WAAY,WAAUuB,EAAA7D,EAAA,QAAA,YAAA6D,EAAS,UAAM,EAAA,cAAvD,CAAAC,EAAAhE,EAAA,MAAK,MAAM,CAAA,mBAAyD,8CAEtF,EAAA,EAAA,MAEOiE,EAAA/D,EAAA,QAAA,MAAA+D,EAAS,YAAlBlD,EAGI,IAHJmD,GAAuC,0KAGvC,YAEAlD,EAQM,MARNmD,GAQM,CAPJnD,EAES,SAAA,CAFD,MAAM,UAAU,KAAK,SAAU,UAAWZ,EAAA,KAAA,IAC7CF,EAAA,MAAO,OAAA,KAAA,EAAA,EAAAkE,EAAA,EAEElE,EAAA,WAAda,EAAsF,SAAA,OAA/D,KAAK,SAAS,MAAM,QAAS,QAAOL,CAAA,EAAY,QAAM,YAChER,EAAA,gBAAbuB,IAAAV,EAEO,OAFPsD,GAEO,iBAF2D,oBAChD,EAAA,GAAArD,EAAgG,OAAA,KAA1F,IAACgB,EAAG,GAAG,IAAMhC,EAAA,MAAK,OAAM,UAAA,MAAA,EAAwB,IAACgC,EAAGhC,EAAA,MAAK,gBAAoB,GAAG,EAAA,CAAA,kBAAU,gBAClH,EAAA,EAAA,MAEFoB,EAKEkD,EAAA,CAJA,KAAK,qBACL,OAAO,MACN,KAAI,kBAAoBtE,EAAA,MAAK,MAAI,MAAA,GACjC,KAAI,CAAA,MAAWA,EAAA,MAAK,OAAM,IAASA,EAAA,MAAK,OAAK,IAAA,OAAiBA,EAAA,MAAK,MAAA,CAAM"}