@samyx/preview-stacks-ui 0.34.0 → 0.36.0

package/dist/assets/{ActionButton.vue_vue_type_script_setup_true_lang-DBfqkgMV.js → ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js}

@@ -1,2 +1,2 @@
-import{d as c,Q as m,c as i,aF as f,E as v,t as y,a4 as b,g,j as B,o}from"./index-IvJmpI3b.js";const h=["disabled","title","aria-busy"],k={key:0},p={key:2,class:"progress","aria-hidden":"true"},E=c({__name:"ActionButton",props:{pending:{type:Boolean},disabled:{type:Boolean},variant:{},title:{},confirm:{}},emits:["run"],setup(e,{emit:s}){const l=e,r=s,t=B(!1);let a=null;function n(){t.value=!1,a&&clearTimeout(a),a=null}function d(){if(l.confirm){if(t.value){n(),r("run");return}t.value=!0,a=setTimeout(n,5e3)}}return m(n),(u,C)=>(o(),i("button",{class:v([e.variant,t.value&&"armed"]),disabled:e.pending||e.disabled,title:e.title,"aria-busy":e.pending?"true":void 0,onClick:d,onBlur:n,onKeydown:f(n,["esc"])},[t.value?(o(),i("span",k,y(e.confirm),1)):b(u.$slots,"default",{},void 0,void 0,1),e.pending?(o(),i("span",p)):g("",!0)],42,h))}});export{E as _};
-//# sourceMappingURL=ActionButton.vue_vue_type_script_setup_true_lang-DBfqkgMV.js.map
+import{d as c,Q as m,c as i,a3 as f,E as v,t as y,a6 as b,g,j as B,o}from"./index-BzdU0RNE.js";const h=["disabled","title","aria-busy"],k={key:0},p={key:2,class:"progress","aria-hidden":"true"},E=c({__name:"ActionButton",props:{pending:{type:Boolean},disabled:{type:Boolean},variant:{},title:{},confirm:{}},emits:["run"],setup(e,{emit:s}){const l=e,r=s,t=B(!1);let a=null;function n(){t.value=!1,a&&clearTimeout(a),a=null}function d(){if(l.confirm){if(t.value){n(),r("run");return}t.value=!0,a=setTimeout(n,5e3)}}return m(n),(u,C)=>(o(),i("button",{class:v([e.variant,t.value&&"armed"]),disabled:e.pending||e.disabled,title:e.title,"aria-busy":e.pending?"true":void 0,onClick:d,onBlur:n,onKeydown:f(n,["esc"])},[t.value?(o(),i("span",k,y(e.confirm),1)):b(u.$slots,"default",{},void 0,void 0,1),e.pending?(o(),i("span",p)):g("",!0)],42,h))}});export{E as _};
+//# sourceMappingURL=ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js.map

package/dist/assets/{ActionButton.vue_vue_type_script_setup_true_lang-DBfqkgMV.js.map → ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ActionButton.vue_vue_type_script_setup_true_lang-DBfqkgMV.js","sources":["../../src/components/ActionButton.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A button that disables itself the moment it is pressed and shows inline progress until the\n * request settles.\n *\n * Optimistic only about the DISABLED state, never about the outcome: every action here starts a\n * job that destroys or creates infrastructure, so the button says \"in flight\", not \"done\". The\n * result is reported by the caller once the server has actually answered.\n *\n * The progress bar sits inside the button rather than replacing the label, so the button keeps its\n * width and the page does not reflow under the pointer mid-click.\n *\n * ── `confirm` ────────────────────────────────────────────────────────────────────────────────────\n *\n * Pass `confirm=\"…\"` and the first click ARMS the button instead of acting: the label becomes the\n * confirmation question, and only a second click within a few seconds emits `run`. Anything else —\n * moving away, pressing Escape, waiting — disarms it.\n *\n * Two clicks in place rather than a modal, because a dialog for \"delete this row\" blocks the page\n * for a decision that is already visible; and rather than `window.confirm`, which is a native OS\n * panel this app deliberately avoids everywhere else.\n *\n * THIS PROP USED TO NOT EXIST. Four call sites (Delete on each Variables/Secrets row, Delete and\n * Revoke in Users) already passed `:confirm` and `@run` — so `confirm` fell through as a stray DOM\n * attribute and `run` was emitted by nothing. Those buttons rendered, took the click, and did\n * nothing at all. Implementing the contract they were written against is the fix.\n */\nimport { onBeforeUnmount, ref } from 'vue';\n\nconst props = defineProps<{\n  pending?: boolean;\n  disabled?: boolean;\n  variant?: 'primary' | 'danger' | 'ghost';\n  /** Shown as a native tooltip; use it to say WHY a disabled control is disabled. */\n  title?: string;\n  /** When set, the click is two-stage and this is the question asked in between. */\n  confirm?: string;\n}>();\n\nconst emit = defineEmits<{ (e: 'run'): void }>();\n\nconst armed = ref(false);\nlet timer: ReturnType<typeof setTimeout> | null = null;\n\nfunction disarm(): void {\n  armed.value = false;\n  if (timer) clearTimeout(timer);\n  timer = null;\n}\n\nfunction onClick(): void {\n  if (!props.confirm) return; // plain button: the parent's own @click handles it\n  if (armed.value) {\n    disarm();\n    emit('run');\n    return;\n  }\n  armed.value = true;\n  // Auto-disarm: an armed destructive button left on screen is a trap for the next click, and the\n  // next click is often someone scrolling back to a row they had already decided against.\n  timer = setTimeout(disarm, 5_000);\n}\n\nonBeforeUnmount(disarm);\n</script>\n\n<template>\n  <button\n    :class=\"[variant, armed && 'armed']\"\n    :disabled=\"pending || disabled\"\n    :title=\"title\"\n    :aria-busy=\"pending ? 'true' : undefined\"\n    @click=\"onClick\"\n    @blur=\"disarm\"\n    @keydown.esc=\"disarm\"\n  >\n    <span v-if=\"armed\">{{ confirm }}</span>\n    <slot v-else />\n    <span v-if=\"pending\" class=\"progress\" aria-hidden=\"true\" />\n  </button>\n</template>\n"],"names":["props","__props","emit","__emit","armed","ref","timer","disarm","onClick","onBeforeUnmount","_createElementBlock","_normalizeClass","_openBlock","_renderSlot","_ctx","_hoisted_3"],"mappings":"mVA6BA,MAAMA,EAAQC,EAURC,EAAOC,EAEPC,EAAQC,EAAI,EAAK,EACvB,IAAIC,EAA8C,KAElD,SAASC,GAAe,CACtBH,EAAM,MAAQ,GACVE,gBAAoBA,CAAK,EAC7BA,EAAQ,IACV,CAEA,SAASE,GAAgB,CACvB,GAAKR,EAAM,QACX,IAAII,EAAM,MAAO,CACfG,EAAA,EACAL,EAAK,KAAK,EACV,MACF,CACAE,EAAM,MAAQ,GAGdE,EAAQ,WAAWC,EAAQ,GAAK,EAClC,CAEA,OAAAE,EAAgBF,CAAM,cAIpBG,EAYS,SAAA,CAXN,MAAKC,EAAA,CAAGV,EAAA,QAASG,EAAA,OAAK,OAAA,CAAA,EACtB,SAAUH,EAAA,SAAWA,EAAA,SACrB,MAAOA,EAAA,MACP,YAAWA,EAAA,QAAO,OAAY,OAC9B,QAAAO,EACA,OAAMD,EACN,YAAaA,EAAM,CAAA,KAAA,CAAA,CAAA,GAERH,EAAA,OAAZQ,IAAAF,EAAuC,WAAjBT,EAAA,OAAO,EAAA,CAAA,GAC7BY,EAAeC,EAAA,OAAA,UAAA,GAAA,OAAA,OAAA,CAAA,EACHb,EAAA,SAAZW,EAAA,EAAAF,EAA2D,OAA3DK,CAA2D"}
+{"version":3,"file":"ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js","sources":["../../src/components/ActionButton.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A button that disables itself the moment it is pressed and shows inline progress until the\n * request settles.\n *\n * Optimistic only about the DISABLED state, never about the outcome: every action here starts a\n * job that destroys or creates infrastructure, so the button says \"in flight\", not \"done\". The\n * result is reported by the caller once the server has actually answered.\n *\n * The progress bar sits inside the button rather than replacing the label, so the button keeps its\n * width and the page does not reflow under the pointer mid-click.\n *\n * ── `confirm` ────────────────────────────────────────────────────────────────────────────────────\n *\n * Pass `confirm=\"…\"` and the first click ARMS the button instead of acting: the label becomes the\n * confirmation question, and only a second click within a few seconds emits `run`. Anything else —\n * moving away, pressing Escape, waiting — disarms it.\n *\n * Two clicks in place rather than a modal, because a dialog for \"delete this row\" blocks the page\n * for a decision that is already visible; and rather than `window.confirm`, which is a native OS\n * panel this app deliberately avoids everywhere else.\n *\n * THIS PROP USED TO NOT EXIST. Four call sites (Delete on each Variables/Secrets row, Delete and\n * Revoke in Users) already passed `:confirm` and `@run` — so `confirm` fell through as a stray DOM\n * attribute and `run` was emitted by nothing. Those buttons rendered, took the click, and did\n * nothing at all. Implementing the contract they were written against is the fix.\n */\nimport { onBeforeUnmount, ref } from 'vue';\n\nconst props = defineProps<{\n  pending?: boolean;\n  disabled?: boolean;\n  variant?: 'primary' | 'danger' | 'ghost';\n  /** Shown as a native tooltip; use it to say WHY a disabled control is disabled. */\n  title?: string;\n  /** When set, the click is two-stage and this is the question asked in between. */\n  confirm?: string;\n}>();\n\nconst emit = defineEmits<{ (e: 'run'): void }>();\n\nconst armed = ref(false);\nlet timer: ReturnType<typeof setTimeout> | null = null;\n\nfunction disarm(): void {\n  armed.value = false;\n  if (timer) clearTimeout(timer);\n  timer = null;\n}\n\nfunction onClick(): void {\n  if (!props.confirm) return; // plain button: the parent's own @click handles it\n  if (armed.value) {\n    disarm();\n    emit('run');\n    return;\n  }\n  armed.value = true;\n  // Auto-disarm: an armed destructive button left on screen is a trap for the next click, and the\n  // next click is often someone scrolling back to a row they had already decided against.\n  timer = setTimeout(disarm, 5_000);\n}\n\nonBeforeUnmount(disarm);\n</script>\n\n<template>\n  <button\n    :class=\"[variant, armed && 'armed']\"\n    :disabled=\"pending || disabled\"\n    :title=\"title\"\n    :aria-busy=\"pending ? 'true' : undefined\"\n    @click=\"onClick\"\n    @blur=\"disarm\"\n    @keydown.esc=\"disarm\"\n  >\n    <span v-if=\"armed\">{{ confirm }}</span>\n    <slot v-else />\n    <span v-if=\"pending\" class=\"progress\" aria-hidden=\"true\" />\n  </button>\n</template>\n"],"names":["props","__props","emit","__emit","armed","ref","timer","disarm","onClick","onBeforeUnmount","_createElementBlock","_normalizeClass","_openBlock","_renderSlot","_ctx","_hoisted_3"],"mappings":"mVA6BA,MAAMA,EAAQC,EAURC,EAAOC,EAEPC,EAAQC,EAAI,EAAK,EACvB,IAAIC,EAA8C,KAElD,SAASC,GAAe,CACtBH,EAAM,MAAQ,GACVE,gBAAoBA,CAAK,EAC7BA,EAAQ,IACV,CAEA,SAASE,GAAgB,CACvB,GAAKR,EAAM,QACX,IAAII,EAAM,MAAO,CACfG,EAAA,EACAL,EAAK,KAAK,EACV,MACF,CACAE,EAAM,MAAQ,GAGdE,EAAQ,WAAWC,EAAQ,GAAK,EAClC,CAEA,OAAAE,EAAgBF,CAAM,cAIpBG,EAYS,SAAA,CAXN,MAAKC,EAAA,CAAGV,EAAA,QAASG,EAAA,OAAK,OAAA,CAAA,EACtB,SAAUH,EAAA,SAAWA,EAAA,SACrB,MAAOA,EAAA,MACP,YAAWA,EAAA,QAAO,OAAY,OAC9B,QAAAO,EACA,OAAMD,EACN,YAAaA,EAAM,CAAA,KAAA,CAAA,CAAA,GAERH,EAAA,OAAZQ,IAAAF,EAAuC,WAAjBT,EAAA,OAAO,EAAA,CAAA,GAC7BY,EAAeC,EAAA,OAAA,UAAA,GAAA,OAAA,OAAA,CAAA,EACHb,EAAA,SAAZW,EAAA,EAAAF,EAA2D,OAA3DK,CAA2D"}

package/dist/assets/{AxesTab-Bzm6UBFL.js → AxesTab-C0OeAG-v.js}

@@ -1,2 +1,2 @@
-import{d as u,i as x,u as i}from"./useDeployment-rA-pgUHZ.js";import{d as h,c as o,a as s,f as t,u as l,F as p,e as b,w as m,_ as f,r as k,g,t as r,o as n,D as w,E as _}from"./index-IvJmpI3b.js";import"./useVars-VN9gYdR6.js";const A={class:"panel"},C={key:0,class:"mute"},N={class:"cards"},S={class:"stagger"},T={class:"name","data-label":"axis"},V={"data-label":"hooks"},B={"data-label":"provable"},z={key:0,class:"badge ok"},D={key:1,class:"badge warn",title:"verify cannot prove this axis was cleaned up — this is not a pass"},E={key:0},F={colspan:"3",class:"mute"},H={key:0},I={key:0,class:"banner warn"},U=h({__name:"AxesTab",setup(L){const v=["up","assert_live","down","assert_gone"];return(O,e)=>(n(),o("section",A,[e[18]||(e[18]=s("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[t(" Axes "),s("span",{class:"mute"},"(provisioned in order, destroyed in reverse)")],-1)),l(u).detail?(n(),o(p,{key:1},[s("table",N,[s("thead",null,[s("tr",null,[e[2]||(e[2]=s("th",null,"Axis",-1)),s("th",null,[e[1]||(e[1]=t(" hooks ",-1)),b(f,{label:"what the four hooks do"},{default:m(()=>[...e[0]||(e[0]=[s("code",null,"up",-1),t(" provisions · ",-1),s("code",null,"assert_live",-1),t(" checks it exists · ",-1),s("code",null,"down",-1),t(" destroys · ",-1),s("code",null,"assert_gone",-1),t(" proves it is gone. Hook ",-1),s("em",null,"bodies",-1),t(" are never sent to this page — a hook is a shell string that routinely carries a token inline. ",-1)])]),_:1})]),e[3]||(e[3]=s("th",null,"Teardown provable?",-1))])]),s("tbody",S,[(n(!0),o(p,null,k(l(u).detail.axes,(a,y)=>(n(),o("tr",{key:a.name,style:w({"--i":y})},[s("td",T,r(a.name),1),s("td",V,[(n(),o(p,null,k(v,d=>s("span",{key:d,class:_(["badge",{off:!a.hooks.includes(d)}]),style:{"margin-right":"4px"}},r(d),3)),64))]),s("td",B,[a.verifiable?(n(),o("span",z,"assert_gone")):(n(),o("span",D,"unverifiable"))])],4))),128)),l(u).detail.axes.length?g("",!0):(n(),o("tr",E,[s("td",F,[e[4]||(e[4]=t(" No axes",-1)),l(x)?(n(),o("span",H," — a shared singleton has nothing to isolate and nothing to prove gone")):g("",!0),e[5]||(e[5]=t(". ",-1))])]))])]),l(i).length?(n(),o("div",I,[s("b",null,r(l(i).length===1?"1 axis cannot":`${l(i).length} axes cannot`)+" be verified: "+r(l(i).join(", "))+". ",1),s("p",null,[e[7]||(e[7]=t(" They define no ",-1)),e[8]||(e[8]=s("code",null,"assert_gone",-1)),e[9]||(e[9]=t(", so a green ",-1)),e[10]||(e[10]=s("code",null,"verify",-1)),e[11]||(e[11]=t(" is ",-1)),e[12]||(e[12]=s("em",null,"silence",-1)),e[13]||(e[13]=t(" about them, not proof they are gone. Add an ",-1)),e[14]||(e[14]=s("code",null,"assert_gone",-1)),e[15]||(e[15]=t(" that ",-1)),e[16]||(e[16]=s("b",null,"fails closed",-1)),e[17]||(e[17]=t(". ",-1)),b(f,{label:"how to write an assert_gone that fails closed"},{default:m(()=>[...e[6]||(e[6]=[t(" Check the probe can work, ",-1),s("em",null,"then",-1),t(" assert absence: ",-1),s("code",null,"<probe-is-usable> || exit 1",-1),t(", then ",-1),s("code",null,"! <probe-for-this-resource>",-1),t(". A bare ",-1),s("code",null,"! <probe>",-1),t(" exits 0 whenever the probe itself fails — a missing CLI, an expired token — turning “I could not tell” into “it is gone”. ",-1)])]),_:1})])])):g("",!0)],64)):(n(),o("p",C,"Unavailable until the spec resolves."))]))}});export{U as default};
-//# sourceMappingURL=AxesTab-Bzm6UBFL.js.map
+import{d as u,i as x,u as i}from"./useDeployment-D3f7oVQg.js";import{d as h,c as o,a as s,f as t,u as l,F as p,e as b,w as m,_ as f,r as k,g,t as r,o as n,D as w,E as _}from"./index-BzdU0RNE.js";import"./useVars-VN9gYdR6.js";const A={class:"panel"},C={key:0,class:"mute"},N={class:"cards"},S={class:"stagger"},T={class:"name","data-label":"axis"},V={"data-label":"hooks"},B={"data-label":"provable"},z={key:0,class:"badge ok"},D={key:1,class:"badge warn",title:"verify cannot prove this axis was cleaned up — this is not a pass"},E={key:0},F={colspan:"3",class:"mute"},H={key:0},I={key:0,class:"banner warn"},U=h({__name:"AxesTab",setup(L){const v=["up","assert_live","down","assert_gone"];return(O,e)=>(n(),o("section",A,[e[18]||(e[18]=s("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[t(" Axes "),s("span",{class:"mute"},"(provisioned in order, destroyed in reverse)")],-1)),l(u).detail?(n(),o(p,{key:1},[s("table",N,[s("thead",null,[s("tr",null,[e[2]||(e[2]=s("th",null,"Axis",-1)),s("th",null,[e[1]||(e[1]=t(" hooks ",-1)),b(f,{label:"what the four hooks do"},{default:m(()=>[...e[0]||(e[0]=[s("code",null,"up",-1),t(" provisions · ",-1),s("code",null,"assert_live",-1),t(" checks it exists · ",-1),s("code",null,"down",-1),t(" destroys · ",-1),s("code",null,"assert_gone",-1),t(" proves it is gone. Hook ",-1),s("em",null,"bodies",-1),t(" are never sent to this page — a hook is a shell string that routinely carries a token inline. ",-1)])]),_:1})]),e[3]||(e[3]=s("th",null,"Teardown provable?",-1))])]),s("tbody",S,[(n(!0),o(p,null,k(l(u).detail.axes,(a,y)=>(n(),o("tr",{key:a.name,style:w({"--i":y})},[s("td",T,r(a.name),1),s("td",V,[(n(),o(p,null,k(v,d=>s("span",{key:d,class:_(["badge",{off:!a.hooks.includes(d)}]),style:{"margin-right":"4px"}},r(d),3)),64))]),s("td",B,[a.verifiable?(n(),o("span",z,"assert_gone")):(n(),o("span",D,"unverifiable"))])],4))),128)),l(u).detail.axes.length?g("",!0):(n(),o("tr",E,[s("td",F,[e[4]||(e[4]=t(" No axes",-1)),l(x)?(n(),o("span",H," — a shared singleton has nothing to isolate and nothing to prove gone")):g("",!0),e[5]||(e[5]=t(". ",-1))])]))])]),l(i).length?(n(),o("div",I,[s("b",null,r(l(i).length===1?"1 axis cannot":`${l(i).length} axes cannot`)+" be verified: "+r(l(i).join(", "))+". ",1),s("p",null,[e[7]||(e[7]=t(" They define no ",-1)),e[8]||(e[8]=s("code",null,"assert_gone",-1)),e[9]||(e[9]=t(", so a green ",-1)),e[10]||(e[10]=s("code",null,"verify",-1)),e[11]||(e[11]=t(" is ",-1)),e[12]||(e[12]=s("em",null,"silence",-1)),e[13]||(e[13]=t(" about them, not proof they are gone. Add an ",-1)),e[14]||(e[14]=s("code",null,"assert_gone",-1)),e[15]||(e[15]=t(" that ",-1)),e[16]||(e[16]=s("b",null,"fails closed",-1)),e[17]||(e[17]=t(". ",-1)),b(f,{label:"how to write an assert_gone that fails closed"},{default:m(()=>[...e[6]||(e[6]=[t(" Check the probe can work, ",-1),s("em",null,"then",-1),t(" assert absence: ",-1),s("code",null,"<probe-is-usable> || exit 1",-1),t(", then ",-1),s("code",null,"! <probe-for-this-resource>",-1),t(". A bare ",-1),s("code",null,"! <probe>",-1),t(" exits 0 whenever the probe itself fails — a missing CLI, an expired token — turning “I could not tell” into “it is gone”. ",-1)])]),_:1})])])):g("",!0)],64)):(n(),o("p",C,"Unavailable until the spec resolves."))]))}});export{U as default};
+//# sourceMappingURL=AxesTab-C0OeAG-v.js.map

package/dist/assets/{AxesTab-Bzm6UBFL.js.map → AxesTab-C0OeAG-v.js.map}

@@ -1 +1 @@
-{"version":3,"file":"AxesTab-Bzm6UBFL.js","sources":["../../src/views/tabs/AxesTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Axes: the hooks each declares, and whether teardown can be PROVEN.\n *\n * `verifiable: false` means the axis defines no `assert_gone`, so `verify` cannot prove it was\n * cleaned up. That is a THIRD state — neither pass nor fail — and it must never be coloured green:\n * a green verify on an unverifiable axis is exactly the false confidence this tool exists to\n * remove.\n */\nimport { dep, isShared, unverifiableAxes } from '../../composables/useDeployment';\nimport type { HookName } from '../../api/types';\nimport InfoHint from '../../components/InfoHint.vue';\n\n/** In the order `up` and `verify` actually use them. */\nconst HOOKS: HookName[] = ['up', 'assert_live', 'down', 'assert_gone'];\n</script>\n\n<template>\n  <section class=\"panel\">\n    <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n      Axes <span class=\"mute\">(provisioned in order, destroyed in reverse)</span>\n    </h2>\n\n    <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n    <template v-else>\n      <table class=\"cards\">\n        <thead>\n          <tr>\n            <th>Axis</th>\n            <th>\n              hooks\n              <InfoHint label=\"what the four hooks do\">\n                <code>up</code> provisions · <code>assert_live</code> checks it exists ·\n                <code>down</code> destroys · <code>assert_gone</code> proves it is gone. Hook\n                <em>bodies</em> are never sent to this page — a hook is a shell string that routinely\n                carries a token inline.\n              </InfoHint>\n            </th>\n            <th>Teardown provable?</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(a, i) in dep.detail.axes\" :key=\"a.name\" :style=\"{ '--i': i }\">\n            <td class=\"name\" data-label=\"axis\">{{ a.name }}</td>\n            <td data-label=\"hooks\">\n              <span\n                v-for=\"h in HOOKS\"\n                :key=\"h\"\n                class=\"badge\"\n                :class=\"{ off: !a.hooks.includes(h) }\"\n                style=\"margin-right: 4px\"\n                >{{ h }}</span\n              >\n            </td>\n            <td data-label=\"provable\">\n              <span v-if=\"a.verifiable\" class=\"badge ok\">assert_gone</span>\n              <span\n                v-else\n                class=\"badge warn\"\n                title=\"verify cannot prove this axis was cleaned up — this is not a pass\"\n                >unverifiable</span\n              >\n            </td>\n          </tr>\n          <tr v-if=\"!dep.detail.axes.length\">\n            <td colspan=\"3\" class=\"mute\">\n              No axes<span v-if=\"isShared\">\n                — a shared singleton has nothing to isolate and nothing to prove gone</span\n              >.\n            </td>\n          </tr>\n        </tbody>\n      </table>\n\n      <div v-if=\"unverifiableAxes.length\" class=\"banner warn\">\n        <b>\n          {{ unverifiableAxes.length === 1 ? '1 axis cannot' : `${unverifiableAxes.length} axes cannot` }}\n          be verified: {{ unverifiableAxes.join(', ') }}.\n        </b>\n        <p>\n          They define no <code>assert_gone</code>, so a green <code>verify</code> is\n          <em>silence</em> about them, not proof they are gone. Add an <code>assert_gone</code> that\n          <b>fails closed</b>.\n          <InfoHint label=\"how to write an assert_gone that fails closed\">\n            Check the probe can work, <em>then</em> assert absence:\n            <code>&lt;probe-is-usable&gt; || exit 1</code>, then\n            <code>! &lt;probe-for-this-resource&gt;</code>. A bare <code>! &lt;probe&gt;</code> exits\n            0 whenever the probe itself fails — a missing CLI, an expired token — turning “I could not\n            tell” into “it is gone”.\n          </InfoHint>\n        </p>\n      </div>\n    </template>\n  </section>\n</template>\n"],"names":["HOOKS","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_unref","dep","_Fragment","_hoisted_3","_cache","_createVNode","InfoHint","_hoisted_4","_renderList","i","_hoisted_5","_toDisplayString","_hoisted_6","h","_normalizeClass","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_hoisted_11","isShared","unverifiableAxes","_hoisted_13","_hoisted_2"],"mappings":"goBAcA,MAAMA,EAAoB,CAAC,KAAM,cAAe,OAAQ,aAAa,gBAInEC,EAAA,EAAAC,EA2EU,UA3EVC,EA2EU,eA1ERC,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,QAC9C,EAAAA,EAAsE,OAAA,CAAhE,MAAM,MAAA,EAAO,8CAA4C,CAAA,OAG5DC,EAAAC,CAAA,EAAI,YACdJ,EAoEWK,EAAA,CAAA,IAAA,GAAA,CAnETH,EA+CQ,QA/CRI,EA+CQ,CA9CNJ,EAcQ,QAAA,KAAA,CAbNA,EAYK,KAAA,KAAA,CAXHK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAAa,UAAT,OAAI,EAAA,GACRA,EAQK,KAAA,KAAA,eARD,UAEF,EAAA,GAAAM,EAKWC,EAAA,CALD,MAAM,0BAAwB,WACtC,IAAe,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAAfL,EAAe,YAAT,KAAE,EAAA,IAAO,iBAAc,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,uBACrD,EAAA,EAAAA,EAAiB,YAAX,OAAI,EAAA,IAAO,eAAY,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,4BACrD,EAAA,EAAAA,EAAe,UAAX,SAAM,EAAA,IAAK,kGAEjB,EAAA,CAAA,aAEFK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA2B,UAAvB,qBAAkB,EAAA,EAAA,KAG1BA,EA8BQ,QA9BRQ,EA8BQ,QA7BNV,EAqBKK,EAAA,KAAAM,EArBgBR,KAAI,OAAO,KAAI,CAAxB,EAAGS,SAAfZ,EAqBK,KAAA,CArBkC,IAAK,EAAE,KAAO,eAAgBY,EAAC,CAAA,GACpEV,EAAoD,KAApDW,EAAoDC,EAAd,EAAE,IAAI,EAAA,CAAA,EAC5CZ,EASK,KATLa,EASK,MARHf,EAOCK,EAAA,KAAAM,EANab,EAALkB,GADTd,EAOC,OAAA,CALE,IAAKc,EACN,MAAKC,EAAA,CAAC,QAAO,CAAA,IAAA,CACG,EAAE,MAAM,SAASD,CAAC,CAAA,CAAA,CAAA,EAClC,MAAA,CAAA,eAAA,KAAA,CAAA,IACIA,CAAC,EAAA,CAAA,UAGTd,EAQK,KARLgB,EAQK,CAPS,EAAE,gBAAdlB,EAA6D,OAA7DmB,EAA2C,aAAW,QACtDnB,EAKC,OALDoB,EAIG,cAAY,EAAA,eAIRjB,EAAAC,CAAA,EAAI,OAAO,KAAK,qBAA3BJ,EAMK,KAAAqB,EAAA,CALHnB,EAIK,KAJLoB,EAIK,eAJwB,WACpB,EAAA,GAAYnB,EAAAoB,CAAA,GAAZxB,EAAA,EAAAC,EAEN,SAF4B,wEAC0C,0BACtE,KACH,EAAA,EAAA,UAKKG,EAAAqB,CAAA,EAAiB,QAA5BzB,IAAAC,EAiBM,MAjBNyB,EAiBM,CAhBJvB,EAGI,IAAA,KAAAY,EAFCX,EAAAqB,CAAA,EAAiB,8BAAoCrB,EAAAqB,CAAA,EAAiB,MAAM,cAAA,EAAiB,iBACnFV,EAAGX,EAAAqB,CAAA,EAAiB,YAAa,KAChD,CAAA,EACAtB,EAWI,IAAA,KAAA,eAXD,mBACc,EAAA,GAAAK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAAwB,YAAlB,cAAW,EAAA,iBAAO,gBAAa,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAmB,YAAb,SAAM,EAAA,mBAAO,OACvE,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAgB,UAAZ,UAAO,EAAA,mBAAK,gDAA6C,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAwB,YAAlB,cAAW,EAAA,mBAAO,SACrF,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAmB,SAAhB,eAAY,EAAA,mBAAI,KACnB,EAAA,GAAAM,EAMWC,EAAA,CAND,MAAM,iDAA+C,WAAC,IACpC,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADoC,8BACpC,EAAA,EAAAL,EAAa,UAAT,OAAI,EAAA,IAAK,oBACvC,EAAA,EAAAA,EAA8C,YAAxC,8BAAiC,EAAA,IAAO,UAC9C,EAAA,EAAAA,EAA8C,YAAxC,8BAAiC,EAAA,IAAO,YAAS,EAAA,EAAAA,EAA4B,YAAtB,YAAe,EAAA,IAAO,8HAGrF,EAAA,CAAA,oCAlENF,EAA2E,IAA3E0B,EAAmC,sCAAoC"}
+{"version":3,"file":"AxesTab-C0OeAG-v.js","sources":["../../src/views/tabs/AxesTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Axes: the hooks each declares, and whether teardown can be PROVEN.\n *\n * `verifiable: false` means the axis defines no `assert_gone`, so `verify` cannot prove it was\n * cleaned up. That is a THIRD state — neither pass nor fail — and it must never be coloured green:\n * a green verify on an unverifiable axis is exactly the false confidence this tool exists to\n * remove.\n */\nimport { dep, isShared, unverifiableAxes } from '../../composables/useDeployment';\nimport type { HookName } from '../../api/types';\nimport InfoHint from '../../components/InfoHint.vue';\n\n/** In the order `up` and `verify` actually use them. */\nconst HOOKS: HookName[] = ['up', 'assert_live', 'down', 'assert_gone'];\n</script>\n\n<template>\n  <section class=\"panel\">\n    <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n      Axes <span class=\"mute\">(provisioned in order, destroyed in reverse)</span>\n    </h2>\n\n    <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n    <template v-else>\n      <table class=\"cards\">\n        <thead>\n          <tr>\n            <th>Axis</th>\n            <th>\n              hooks\n              <InfoHint label=\"what the four hooks do\">\n                <code>up</code> provisions · <code>assert_live</code> checks it exists ·\n                <code>down</code> destroys · <code>assert_gone</code> proves it is gone. Hook\n                <em>bodies</em> are never sent to this page — a hook is a shell string that routinely\n                carries a token inline.\n              </InfoHint>\n            </th>\n            <th>Teardown provable?</th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(a, i) in dep.detail.axes\" :key=\"a.name\" :style=\"{ '--i': i }\">\n            <td class=\"name\" data-label=\"axis\">{{ a.name }}</td>\n            <td data-label=\"hooks\">\n              <span\n                v-for=\"h in HOOKS\"\n                :key=\"h\"\n                class=\"badge\"\n                :class=\"{ off: !a.hooks.includes(h) }\"\n                style=\"margin-right: 4px\"\n                >{{ h }}</span\n              >\n            </td>\n            <td data-label=\"provable\">\n              <span v-if=\"a.verifiable\" class=\"badge ok\">assert_gone</span>\n              <span\n                v-else\n                class=\"badge warn\"\n                title=\"verify cannot prove this axis was cleaned up — this is not a pass\"\n                >unverifiable</span\n              >\n            </td>\n          </tr>\n          <tr v-if=\"!dep.detail.axes.length\">\n            <td colspan=\"3\" class=\"mute\">\n              No axes<span v-if=\"isShared\">\n                — a shared singleton has nothing to isolate and nothing to prove gone</span\n              >.\n            </td>\n          </tr>\n        </tbody>\n      </table>\n\n      <div v-if=\"unverifiableAxes.length\" class=\"banner warn\">\n        <b>\n          {{ unverifiableAxes.length === 1 ? '1 axis cannot' : `${unverifiableAxes.length} axes cannot` }}\n          be verified: {{ unverifiableAxes.join(', ') }}.\n        </b>\n        <p>\n          They define no <code>assert_gone</code>, so a green <code>verify</code> is\n          <em>silence</em> about them, not proof they are gone. Add an <code>assert_gone</code> that\n          <b>fails closed</b>.\n          <InfoHint label=\"how to write an assert_gone that fails closed\">\n            Check the probe can work, <em>then</em> assert absence:\n            <code>&lt;probe-is-usable&gt; || exit 1</code>, then\n            <code>! &lt;probe-for-this-resource&gt;</code>. A bare <code>! &lt;probe&gt;</code> exits\n            0 whenever the probe itself fails — a missing CLI, an expired token — turning “I could not\n            tell” into “it is gone”.\n          </InfoHint>\n        </p>\n      </div>\n    </template>\n  </section>\n</template>\n"],"names":["HOOKS","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_unref","dep","_Fragment","_hoisted_3","_cache","_createVNode","InfoHint","_hoisted_4","_renderList","i","_hoisted_5","_toDisplayString","_hoisted_6","h","_normalizeClass","_hoisted_7","_hoisted_8","_hoisted_9","_hoisted_10","_hoisted_11","isShared","unverifiableAxes","_hoisted_13","_hoisted_2"],"mappings":"goBAcA,MAAMA,EAAoB,CAAC,KAAM,cAAe,OAAQ,aAAa,gBAInEC,EAAA,EAAAC,EA2EU,UA3EVC,EA2EU,eA1ERC,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,QAC9C,EAAAA,EAAsE,OAAA,CAAhE,MAAM,MAAA,EAAO,8CAA4C,CAAA,OAG5DC,EAAAC,CAAA,EAAI,YACdJ,EAoEWK,EAAA,CAAA,IAAA,GAAA,CAnETH,EA+CQ,QA/CRI,EA+CQ,CA9CNJ,EAcQ,QAAA,KAAA,CAbNA,EAYK,KAAA,KAAA,CAXHK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAAa,UAAT,OAAI,EAAA,GACRA,EAQK,KAAA,KAAA,eARD,UAEF,EAAA,GAAAM,EAKWC,EAAA,CALD,MAAM,0BAAwB,WACtC,IAAe,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAAfL,EAAe,YAAT,KAAE,EAAA,IAAO,iBAAc,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,uBACrD,EAAA,EAAAA,EAAiB,YAAX,OAAI,EAAA,IAAO,eAAY,EAAA,EAAAA,EAAwB,YAAlB,cAAW,EAAA,IAAO,4BACrD,EAAA,EAAAA,EAAe,UAAX,SAAM,EAAA,IAAK,kGAEjB,EAAA,CAAA,aAEFK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA2B,UAAvB,qBAAkB,EAAA,EAAA,KAG1BA,EA8BQ,QA9BRQ,EA8BQ,QA7BNV,EAqBKK,EAAA,KAAAM,EArBgBR,KAAI,OAAO,KAAI,CAAxB,EAAGS,SAAfZ,EAqBK,KAAA,CArBkC,IAAK,EAAE,KAAO,eAAgBY,EAAC,CAAA,GACpEV,EAAoD,KAApDW,EAAoDC,EAAd,EAAE,IAAI,EAAA,CAAA,EAC5CZ,EASK,KATLa,EASK,MARHf,EAOCK,EAAA,KAAAM,EANab,EAALkB,GADTd,EAOC,OAAA,CALE,IAAKc,EACN,MAAKC,EAAA,CAAC,QAAO,CAAA,IAAA,CACG,EAAE,MAAM,SAASD,CAAC,CAAA,CAAA,CAAA,EAClC,MAAA,CAAA,eAAA,KAAA,CAAA,IACIA,CAAC,EAAA,CAAA,UAGTd,EAQK,KARLgB,EAQK,CAPS,EAAE,gBAAdlB,EAA6D,OAA7DmB,EAA2C,aAAW,QACtDnB,EAKC,OALDoB,EAIG,cAAY,EAAA,eAIRjB,EAAAC,CAAA,EAAI,OAAO,KAAK,qBAA3BJ,EAMK,KAAAqB,EAAA,CALHnB,EAIK,KAJLoB,EAIK,eAJwB,WACpB,EAAA,GAAYnB,EAAAoB,CAAA,GAAZxB,EAAA,EAAAC,EAEN,SAF4B,wEAC0C,0BACtE,KACH,EAAA,EAAA,UAKKG,EAAAqB,CAAA,EAAiB,QAA5BzB,IAAAC,EAiBM,MAjBNyB,EAiBM,CAhBJvB,EAGI,IAAA,KAAAY,EAFCX,EAAAqB,CAAA,EAAiB,8BAAoCrB,EAAAqB,CAAA,EAAiB,MAAM,cAAA,EAAiB,iBACnFV,EAAGX,EAAAqB,CAAA,EAAiB,YAAa,KAChD,CAAA,EACAtB,EAWI,IAAA,KAAA,eAXD,mBACc,EAAA,GAAAK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAAwB,YAAlB,cAAW,EAAA,iBAAO,gBAAa,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAmB,YAAb,SAAM,EAAA,mBAAO,OACvE,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAgB,UAAZ,UAAO,EAAA,mBAAK,gDAA6C,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAwB,YAAlB,cAAW,EAAA,mBAAO,SACrF,EAAA,GAAAK,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,EAAmB,SAAhB,eAAY,EAAA,mBAAI,KACnB,EAAA,GAAAM,EAMWC,EAAA,CAND,MAAM,iDAA+C,WAAC,IACpC,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GADoC,8BACpC,EAAA,EAAAL,EAAa,UAAT,OAAI,EAAA,IAAK,oBACvC,EAAA,EAAAA,EAA8C,YAAxC,8BAAiC,EAAA,IAAO,UAC9C,EAAA,EAAAA,EAA8C,YAAxC,8BAAiC,EAAA,IAAO,YAAS,EAAA,EAAAA,EAA4B,YAAtB,YAAe,EAAA,IAAO,8HAGrF,EAAA,CAAA,oCAlENF,EAA2E,IAA3E0B,EAAmC,sCAAoC"}

package/dist/assets/{ConfigTab-B5Mkn_Xr.js → ConfigTab-CqQK7vQl.js}

@@ -1,2 +1,2 @@
-import{d as C,c as n,a as e,f as s,e as p,w as c,u as l,t as i,_ as V,F as v,r as w,g as d,k as u,o,E as f,M as x}from"./index-IvJmpI3b.js";import{p as T,d as r,a as k,r as A}from"./useDeployment-rA-pgUHZ.js";import{c as N}from"./useVars-VN9gYdR6.js";import{_ as $}from"./VarEditor.vue_vue_type_script_setup_true_lang-Be64GoXx.js";import{_ as j}from"./HelpModal.vue_vue_type_script_setup_true_lang-Cj0ZWsrz.js";import"./VarIO-BcNlaWXO.js";import"./SelectMenu.vue_vue_type_script_setup_true_lang-C7bhFOYU.js";import"./Teleport-bdITH--T.js";import"./_plugin-vue_export-helper-DlAUqK2U.js";import"./DialogTrigger-K-5IAbpM.js";const B={class:"panel"},I={class:"hint"},L={class:"row",style:{"margin-top":"var(--s3)"}},z={class:"mute",style:{"font-size":"var(--t-xs)"}},D={class:"hint"},R={key:0,class:"panel"},q={class:"kvlist",style:{"margin-top":"var(--s3)"}},E={class:"k"},F={class:"v mono"},K={key:0,class:"banner warn"},O={class:"panel"},S={key:0,class:"mute"},U={class:"cards"},M={class:"name","data-label":"key"},W={"data-label":"visibility"},Y={class:"dim","data-label":"length"},G={key:0,class:"badge warn",style:{"margin-left":"6px"}},H={key:0},le=C({__name:"ConfigTab",setup(J){const h=u(()=>Object.keys(r.vars??{}).length),y=u(()=>{var m;return(m=A.value)==null?void 0:m.vars}),b=u(()=>Object.entries(y.value??{})),g=u(()=>N(r.vars,y.value));return(m,t)=>(o(),n("div",null,[e("section",B,[t[6]||(t[6]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Request variables",-1)),e("p",I,[t[3]||(t[3]=s(" Remembered in this browser. Another browser, a CI job or the command line supplies its own. ",-1)),p(j,{title:"Why the same variables have to be used for both"},{default:c(()=>[...t[2]||(t[2]=[e("p",null,[s(" These variables are part of how this deployment's name is worked out. Deploy with one value and tear down with another and the two commands are pointing at "),e("b",null,"different things"),s(" — the teardown finishes successfully having removed nothing, and the original is still running. ")],-1),e("p",null,[s(" They are kept per deployment in this browser only, which is what keeps them matched "),e("em",null,"here"),s(". Nothing carries them to anywhere else. ")],-1)])]),_:1})]),p($,{modelValue:l(r).vars,"onUpdate:modelValue":t[0]||(t[0]=a=>l(r).vars=a),onChange:l(T)},null,8,["modelValue","onChange"]),e("div",L,[e("button",{class:"primary",onClick:t[1]||(t[1]=(...a)=>l(k)&&l(k)(...a))},"Apply & reload"),e("span",z,i(h.value?`${h.value} variable${h.value===1?"":"s"}`:"no variables"),1)]),e("p",D,[t[5]||(t[5]=s(" Add any variable you need — the list below is what the spec declares, not everything it uses. ",-1)),p(V,{label:"why the two differ"},{default:c(()=>[...t[4]||(t[4]=[s(" A spec can consume a variable without declaring it, for instance by building its stack name out of one. If a variable is missing, the error you get when the spec fails to resolve names it exactly — that message is the authoritative list. ",-1)])]),_:1})])]),b.value.length?(o(),n("section",R,[t[10]||(t[10]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Stored on the server",-1)),t[11]||(t[11]=e("p",{class:"dim",style:{"font-size":"var(--t-sm)"}}," Kept with the deployment on the server, so deploying and tearing down agree without anyone passing anything. Anything set above overrides these. ",-1)),e("ul",q,[(o(!0),n(v,null,w(b.value,([a,_])=>(o(),n("li",{key:a},[e("span",E,[e("b",null,i(a),1)]),e("span",F,i(_),1)]))),128))]),g.value.length?(o(),n("div",K,[t[7]||(t[7]=e("b",null,"Your request variables disagree with the stored ones:",-1)),e("b",null,i(g.value.join(", ")),1),t[8]||(t[8]=s(". ",-1)),t[9]||(t[9]=e("p",null,[s(" Both resolve, so nothing will error — they simply resolve to "),e("em",null,"different stacks"),s(". That is the dangerous shape: an action sent from this page would target one stack while the CLI, CI, or another browser targets the other. Clear the override above unless you mean it. ")],-1))])):d("",!0)])):d("",!0),e("section",O,[t[15]||(t[15]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[s(" Declared env "),e("span",{class:"mute"},"(after interpolation)")],-1)),l(r).detail?(o(),n(v,{key:1},[e("table",U,[t[13]||(t[13]=e("thead",null,[e("tr",null,[e("th",null,"Key"),e("th",null,"Value"),e("th",null,"Visibility"),e("th",null,"Length")])],-1)),e("tbody",null,[(o(!0),n(v,null,w(l(r).detail.env,a=>(o(),n("tr",{key:a.key},[e("td",M,i(a.key),1),e("td",{class:f(["name",{masked:a.visibility==="masked"}]),"data-label":"value"},i(a.value),3),e("td",W,[e("span",{class:f(["badge",a.visibility==="masked"?"warn":""])},i(l(x)(a.visibility)),3)]),e("td",Y,[s(i(a.length)+" chars ",1),a.length===0?(o(),n("span",G,"never set")):d("",!0)])]))),128)),l(r).detail.env.length?d("",!0):(o(),n("tr",H,[...t[12]||(t[12]=[e("td",{colspan:"4",class:"mute"},[s("This spec declares no "),e("code",null,"env:"),s(" block.")],-1)])]))])]),t[14]||(t[14]=e("p",{class:"hint"},[s(" A "),e("b",null,"masked"),s(" value was redacted on the host because its name reads as a secret. The real value was never sent to this page, so there is "),e("b",null,"nothing to reveal"),s(" — only its length is shown. Read it on the host if you need it. ")],-1))],64)):(o(),n("p",S,"Unavailable until the spec resolves."))])]))}});export{le as default};
-//# sourceMappingURL=ConfigTab-B5Mkn_Xr.js.map
+import{d as C,c as n,a as e,f as s,e as p,w as c,u as l,t as i,_ as V,F as v,r as w,g as d,k as u,o,E as f,M as x}from"./index-BzdU0RNE.js";import{p as T,d as r,a as k,r as A}from"./useDeployment-D3f7oVQg.js";import{c as N}from"./useVars-VN9gYdR6.js";import{_ as $}from"./VarEditor.vue_vue_type_script_setup_true_lang-uS04X_Kj.js";import{_ as j}from"./HelpModal.vue_vue_type_script_setup_true_lang-CjoiZrMf.js";import"./VarIO-DkbGdmrU.js";import"./SelectMenu.vue_vue_type_script_setup_true_lang-JY8m6tfk.js";import"./Teleport-DwPgOPS3.js";import"./_plugin-vue_export-helper-DlAUqK2U.js";import"./DialogTrigger-BlkbgxBa.js";const B={class:"panel"},I={class:"hint"},L={class:"row",style:{"margin-top":"var(--s3)"}},z={class:"mute",style:{"font-size":"var(--t-xs)"}},D={class:"hint"},R={key:0,class:"panel"},q={class:"kvlist",style:{"margin-top":"var(--s3)"}},E={class:"k"},F={class:"v mono"},K={key:0,class:"banner warn"},O={class:"panel"},S={key:0,class:"mute"},U={class:"cards"},M={class:"name","data-label":"key"},W={"data-label":"visibility"},Y={class:"dim","data-label":"length"},G={key:0,class:"badge warn",style:{"margin-left":"6px"}},H={key:0},le=C({__name:"ConfigTab",setup(J){const h=u(()=>Object.keys(r.vars??{}).length),y=u(()=>{var m;return(m=A.value)==null?void 0:m.vars}),b=u(()=>Object.entries(y.value??{})),g=u(()=>N(r.vars,y.value));return(m,t)=>(o(),n("div",null,[e("section",B,[t[6]||(t[6]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Request variables",-1)),e("p",I,[t[3]||(t[3]=s(" Remembered in this browser. Another browser, a CI job or the command line supplies its own. ",-1)),p(j,{title:"Why the same variables have to be used for both"},{default:c(()=>[...t[2]||(t[2]=[e("p",null,[s(" These variables are part of how this deployment's name is worked out. Deploy with one value and tear down with another and the two commands are pointing at "),e("b",null,"different things"),s(" — the teardown finishes successfully having removed nothing, and the original is still running. ")],-1),e("p",null,[s(" They are kept per deployment in this browser only, which is what keeps them matched "),e("em",null,"here"),s(". Nothing carries them to anywhere else. ")],-1)])]),_:1})]),p($,{modelValue:l(r).vars,"onUpdate:modelValue":t[0]||(t[0]=a=>l(r).vars=a),onChange:l(T)},null,8,["modelValue","onChange"]),e("div",L,[e("button",{class:"primary",onClick:t[1]||(t[1]=(...a)=>l(k)&&l(k)(...a))},"Apply & reload"),e("span",z,i(h.value?`${h.value} variable${h.value===1?"":"s"}`:"no variables"),1)]),e("p",D,[t[5]||(t[5]=s(" Add any variable you need — the list below is what the spec declares, not everything it uses. ",-1)),p(V,{label:"why the two differ"},{default:c(()=>[...t[4]||(t[4]=[s(" A spec can consume a variable without declaring it, for instance by building its stack name out of one. If a variable is missing, the error you get when the spec fails to resolve names it exactly — that message is the authoritative list. ",-1)])]),_:1})])]),b.value.length?(o(),n("section",R,[t[10]||(t[10]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},"Stored on the server",-1)),t[11]||(t[11]=e("p",{class:"dim",style:{"font-size":"var(--t-sm)"}}," Kept with the deployment on the server, so deploying and tearing down agree without anyone passing anything. Anything set above overrides these. ",-1)),e("ul",q,[(o(!0),n(v,null,w(b.value,([a,_])=>(o(),n("li",{key:a},[e("span",E,[e("b",null,i(a),1)]),e("span",F,i(_),1)]))),128))]),g.value.length?(o(),n("div",K,[t[7]||(t[7]=e("b",null,"Your request variables disagree with the stored ones:",-1)),e("b",null,i(g.value.join(", ")),1),t[8]||(t[8]=s(". ",-1)),t[9]||(t[9]=e("p",null,[s(" Both resolve, so nothing will error — they simply resolve to "),e("em",null,"different stacks"),s(". That is the dangerous shape: an action sent from this page would target one stack while the CLI, CI, or another browser targets the other. Clear the override above unless you mean it. ")],-1))])):d("",!0)])):d("",!0),e("section",O,[t[15]||(t[15]=e("h2",{class:"section",style:{"margin-bottom":"var(--s3)"}},[s(" Declared env "),e("span",{class:"mute"},"(after interpolation)")],-1)),l(r).detail?(o(),n(v,{key:1},[e("table",U,[t[13]||(t[13]=e("thead",null,[e("tr",null,[e("th",null,"Key"),e("th",null,"Value"),e("th",null,"Visibility"),e("th",null,"Length")])],-1)),e("tbody",null,[(o(!0),n(v,null,w(l(r).detail.env,a=>(o(),n("tr",{key:a.key},[e("td",M,i(a.key),1),e("td",{class:f(["name",{masked:a.visibility==="masked"}]),"data-label":"value"},i(a.value),3),e("td",W,[e("span",{class:f(["badge",a.visibility==="masked"?"warn":""])},i(l(x)(a.visibility)),3)]),e("td",Y,[s(i(a.length)+" chars ",1),a.length===0?(o(),n("span",G,"never set")):d("",!0)])]))),128)),l(r).detail.env.length?d("",!0):(o(),n("tr",H,[...t[12]||(t[12]=[e("td",{colspan:"4",class:"mute"},[s("This spec declares no "),e("code",null,"env:"),s(" block.")],-1)])]))])]),t[14]||(t[14]=e("p",{class:"hint"},[s(" A "),e("b",null,"masked"),s(" value was redacted on the host because its name reads as a secret. The real value was never sent to this page, so there is "),e("b",null,"nothing to reveal"),s(" — only its length is shown. Read it on the host if you need it. ")],-1))],64)):(o(),n("p",S,"Unavailable until the spec resolves."))])]))}});export{le as default};
+//# sourceMappingURL=ConfigTab-CqQK7vQl.js.map

package/dist/assets/{ConfigTab-B5Mkn_Xr.js.map → ConfigTab-CqQK7vQl.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ConfigTab-B5Mkn_Xr.js","sources":["../../src/views/tabs/ConfigTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Variables (what we SEND) and declared env (what the spec DECLARES). Two different things, on\n * purpose, and the tab explains the difference rather than merging them into one table.\n */\nimport { computed } from 'vue';\nimport { sentence } from '../../composables/useFormat';\nimport { applyVars, dep, persistVars, row } from '../../composables/useDeployment';\nimport InfoHint from '../../components/InfoHint.vue';\n\nimport { conflictingVars } from '../../composables/useVars';\nimport VarEditor from '../../components/VarEditor.vue';\nimport HelpModal from '../../components/HelpModal.vue';\n\n/** A count, not the raw query string — `?PR=7&REGION=eu` beside a button is machine talk. */\nconst varCount = computed(() => Object.keys(dep.vars ?? {}).length);\n\nconst storedVars = computed(() => row.value?.vars);\nconst storedList = computed(() => Object.entries(storedVars.value ?? {}));\nconst clashes = computed(() => conflictingVars(dep.vars, storedVars.value));\n</script>\n\n<template>\n  <div>\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Request variables</h2>\n\n      <!--\n        THE safety rule on this page. A spec interpolates `${VAR}` exactly once, at resolve time,\n        and every route that resolves a deployment layers the request's query parameters over the\n        server's environment. So `up` sent with PR=7 and a later `down` sent without it resolve to\n        two DIFFERENT stacks, and the teardown quietly misses everything the deploy created.\n\n        Keeping the pairs in this browser is what holds them matched here. It is a convenience, not\n        a guarantee — a different browser, a CI job or the CLI must pass the same ones itself —\n        which is why this warning stays visible rather than being dismissible.\n      -->\n      <p class=\"hint\">\n        Remembered in this browser. Another browser, a CI job or the command line supplies its own.\n        <HelpModal title=\"Why the same variables have to be used for both\">\n          <p>\n            These variables are part of how this deployment's name is worked out. Deploy with one\n            value and tear down with another and the two commands are pointing at\n            <b>different things</b> — the teardown finishes successfully having removed nothing, and\n            the original is still running.\n          </p>\n          <p>\n            They are kept per deployment in this browser only, which is what keeps them matched\n            <em>here</em>. Nothing carries them to anywhere else.\n          </p>\n        </HelpModal>\n      </p>\n\n      <VarEditor v-model=\"dep.vars\" @change=\"persistVars\" />\n\n      <div class=\"row\" style=\"margin-top: var(--s3)\">\n        <button class=\"primary\" @click=\"applyVars\">Apply &amp; reload</button>\n        <span class=\"mute\" style=\"font-size: var(--t-xs)\">\n          {{ varCount ? `${varCount} variable${varCount === 1 ? '' : 's'}` : 'no variables' }}\n        </span>\n      </div>\n\n      <p class=\"hint\">\n        Add any variable you need — the list below is what the spec declares, not everything it\n        uses.\n        <InfoHint label=\"why the two differ\">\n          A spec can consume a variable without declaring it, for instance by building its stack\n          name out of one. If a variable is missing, the error you get when the spec fails to\n          resolve names it exactly — that message is the authoritative list.\n        </InfoHint>\n      </p>\n    </section>\n\n    <!--\n      Newer servers store variables WITH the deployment, which makes `down` self-describing — the\n      strictly better arrangement. It does not make the warning above obsolete: a request variable\n      still OVERRIDES a stored one, so a different value typed here retargets the stack.\n    -->\n    <section v-if=\"storedList.length\" class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Stored on the server</h2>\n      <p class=\"dim\" style=\"font-size: var(--t-sm)\">\n        Kept with the deployment on the server, so deploying and tearing down agree without anyone\n        passing anything. Anything set above overrides these.\n      </p>\n      <ul class=\"kvlist\" style=\"margin-top: var(--s3)\">\n        <li v-for=\"[k, v] in storedList\" :key=\"k\">\n          <span class=\"k\"><b>{{ k }}</b></span>\n          <span class=\"v mono\">{{ v }}</span>\n        </li>\n      </ul>\n\n      <div v-if=\"clashes.length\" class=\"banner warn\">\n        <b>Your request variables disagree with the stored ones:</b>\n        <b>{{ clashes.join(', ') }}</b\n        >.\n        <p>\n          Both resolve, so nothing will error — they simply resolve to <em>different stacks</em>.\n          That is the dangerous shape: an action sent from this page would target one stack while\n          the CLI, CI, or another browser targets the other. Clear the override above unless you\n          mean it.\n        </p>\n      </div>\n    </section>\n\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n        Declared env <span class=\"mute\">(after interpolation)</span>\n      </h2>\n\n      <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n      <template v-else>\n        <table class=\"cards\">\n          <thead>\n            <tr>\n              <th>Key</th>\n              <th>Value</th>\n              <th>Visibility</th>\n              <th>Length</th>\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"e in dep.detail.env\" :key=\"e.key\">\n              <td class=\"name\" data-label=\"key\">{{ e.key }}</td>\n              <td class=\"name\" :class=\"{ masked: e.visibility === 'masked' }\" data-label=\"value\">\n                {{ e.value }}\n              </td>\n              <td data-label=\"visibility\">\n                <span class=\"badge\" :class=\"e.visibility === 'masked' ? 'warn' : ''\">\n                  {{ sentence(e.visibility) }}\n                </span>\n              </td>\n              <!--\n                `length` answers \"did it get set at all?\" without the value. length 0 on a masked\n                var is the interesting case: declared, never set — usually a hook about to fail on\n                an empty credential.\n              -->\n              <td class=\"dim\" data-label=\"length\">\n                {{ e.length }} chars\n                <span v-if=\"e.length === 0\" class=\"badge warn\" style=\"margin-left: 6px\">never set</span>\n              </td>\n            </tr>\n            <tr v-if=\"!dep.detail.env.length\">\n              <td colspan=\"4\" class=\"mute\">This spec declares no <code>env:</code> block.</td>\n            </tr>\n          </tbody>\n        </table>\n\n        <!--\n          Masked is NOT \"hidden pending a click\". The plaintext was never in the response, so there\n          is nothing here to reveal — a reveal control would be a lie, and building one would mean\n          sending secrets into a browser tab, and from there into screenshots and support tickets.\n          Deny-by-default by name, decided on the host.\n        -->\n        <p class=\"hint\">\n          A <b>masked</b> value was redacted on the host because its name reads as a secret. The\n          real value was never sent to this page, so there is <b>nothing to reveal</b> — only its\n          length is shown. Read it on the host if you need it.\n        </p>\n      </template>\n    </section>\n  </div>\n</template>\n"],"names":["varCount","computed","dep","storedVars","_a","row","storedList","clashes","conflictingVars","_createElementBlock","_createElementVNode","_hoisted_1","_hoisted_2","_createVNode","HelpModal","_cache","VarEditor","_unref","$event","persistVars","_hoisted_3","applyVars","args","_hoisted_4","_toDisplayString","_hoisted_5","InfoHint","_openBlock","_hoisted_6","_hoisted_7","_Fragment","_renderList","k","v","_hoisted_8","_hoisted_9","_hoisted_10","_hoisted_11","_hoisted_13","e","_hoisted_14","_normalizeClass","_hoisted_15","sentence","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_12"],"mappings":"gqCAeA,MAAMA,EAAWC,EAAS,IAAM,OAAO,KAAKC,EAAI,MAAQ,EAAE,EAAE,MAAM,EAE5DC,EAAaF,EAAS,IAAA,OAAM,OAAAG,EAAAC,EAAI,QAAJ,YAAAD,EAAW,KAAI,EAC3CE,EAAaL,EAAS,IAAM,OAAO,QAAQE,EAAW,OAAS,CAAA,CAAE,CAAC,EAClEI,EAAUN,EAAS,IAAMO,EAAgBN,EAAI,KAAMC,EAAW,KAAK,CAAC,oBAIxEM,EAyIM,MAAA,KAAA,CAxIJC,EA+CU,UA/CVC,EA+CU,aA9CRD,EAA2E,KAAA,CAAvE,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,oBAAiB,EAAA,GAYtEA,EAcI,IAdJE,EAcI,eAdY,gGAEd,EAAA,GAAAC,EAWYC,EAAA,CAXD,MAAM,mDAAiD,WAChE,IAKI,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CALJL,EAKI,IAAA,KAAA,GALD,+JAGD,EAAAA,EAAuB,SAApB,kBAAgB,IAAI,mGAEzB,CAAA,MACAA,EAGI,IAAA,KAAA,GAHD,uFAED,EAAAA,EAAa,UAAT,MAAI,IAAK,2CACf,CAAA,kBAIJG,EAAsDG,EAAA,CAAlC,WAAAC,EAAAf,CAAA,EAAI,KAAJ,sBAAAa,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAG,GAAAD,EAAAf,CAAA,EAAI,KAAIgB,GAAG,SAAQD,EAAAE,CAAA,CAAA,oCAEvCT,EAKM,MALNU,EAKM,CAJJV,EAAsE,SAAA,CAA9D,MAAM,UAAW,QAAKK,EAAA,CAAA,IAAAA,EAAA,CAAA,UAAEE,EAAAI,CAAA,GAAAJ,EAAAI,CAAA,EAAA,GAAAC,CAAA,EAAA,EAAW,gBAAkB,EAC7DZ,EAEO,OAFPa,EAEOC,EADFxB,QAAQ,GAAMA,EAAA,KAAQ,YAAYA,EAAA,QAAQ,EAAA,GAAA,GAAA,GAAA,cAAA,EAAA,CAAA,CAAA,GAIjDU,EAQI,IARJe,EAQI,eARY,kGAGd,EAAA,GAAAZ,EAIWa,EAAA,CAJD,MAAM,sBAAoB,WAAC,IAIrC,CAAA,GAAAX,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJqC,kPAIrC,EAAA,CAAA,eASWT,EAAA,MAAW,QAA1BqB,IAAAlB,EAwBU,UAxBVmB,EAwBU,eAvBRlB,EAA8E,KAAA,CAA1E,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,uBAAoB,EAAA,iBACzEA,EAGI,IAAA,CAHD,MAAM,MAAM,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,qJAG9C,EAAA,GACAA,EAKK,KALLmB,EAKK,EAJHF,EAAA,EAAA,EAAAlB,EAGKqB,EAAA,KAAAC,EAHgBzB,EAAA,MAAU,CAAA,CAAnB0B,EAAGC,CAAC,SAAhBxB,EAGK,KAAA,CAH6B,IAAKuB,GAAC,CACtCtB,EAAqC,OAArCwB,EAAqC,CAArBxB,EAAc,WAARsB,CAAC,EAAA,CAAA,CAAA,GACvBtB,EAAmC,OAAnCyB,EAAmCX,EAAXS,CAAC,EAAA,CAAA,CAAA,aAIlB1B,EAAA,MAAQ,QAAnBoB,IAAAlB,EAUM,MAVN2B,EAUM,CATJrB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA4D,SAAzD,wDAAqD,EAAA,GACxDA,EACC,IAAA,KAAAc,EADKjB,EAAA,MAAQ,KAAI,IAAA,CAAA,EAAA,CAAA,gBACjB,KACD,EAAA,eAAAG,EAKI,IAAA,KAAA,GALD,gEAC4D,EAAAA,EAAyB,UAArB,kBAAgB,IAAK,4LAIxF,CAAA,+BAIJA,EAuDU,UAvDV2B,EAuDU,eAtDR3B,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,gBACtC,EAAAA,EAA+C,OAAA,CAAzC,MAAM,MAAA,EAAO,uBAAqB,CAAA,OAG7CO,EAAAf,CAAA,EAAI,YACdO,EAgDWqB,EAAA,CAAA,IAAA,GAAA,CA/CTpB,EAkCQ,QAlCR4B,EAkCQ,eAjCN5B,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAY,UAAR,KAAG,EACPA,EAAc,UAAV,OAAK,EACTA,EAAmB,UAAf,YAAU,EACdA,EAAe,UAAX,QAAM,CAAA,SAGdA,EAwBQ,QAAA,KAAA,EAvBNiB,EAAA,EAAA,EAAAlB,EAmBKqB,SAnBWb,EAAAf,CAAA,EAAI,OAAO,IAAhBqC,QAAX9B,EAmBK,KAAA,CAnB4B,IAAK8B,EAAE,GAAA,GACtC7B,EAAkD,KAAlD8B,EAAkDhB,EAAbe,EAAE,GAAG,EAAA,CAAA,EAC1C7B,EAEK,KAAA,CAFD,MAAK+B,EAAA,CAAC,OAAM,CAAA,OAAmBF,EAAE,aAAU,QAAA,CAAA,CAAA,EAAiB,aAAW,OAAA,EACtEf,EAAAe,EAAE,KAAK,EAAA,CAAA,EAEZ7B,EAIK,KAJLgC,EAIK,CAHHhC,EAEO,OAAA,CAFD,MAAK+B,EAAA,CAAC,QAAgBF,EAAE,aAAU,SAAA,OAAA,EAAA,CAAA,CAAA,IACnCtB,EAAA0B,CAAA,EAASJ,EAAE,UAAU,CAAA,EAAA,CAAA,CAAA,GAQ5B7B,EAGK,KAHLkC,EAGK,KAFAL,EAAE,MAAM,EAAG,UACd,CAAA,EAAYA,EAAE,SAAM,OAApB9B,EAAwF,OAAxFoC,EAAwE,WAAS,wBAG1E5B,EAAAf,CAAA,EAAI,OAAO,IAAI,qBAA1BO,EAEK,KAAAqC,EAAA,CAAA,GAAA/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CADHL,EAAgF,KAAA,CAA5E,QAAQ,IAAI,MAAM,MAAA,KAAO,wBAAsB,EAAAA,EAAiB,YAAX,MAAI,IAAO,SAAO,CAAA,6BAWjFA,EAII,IAAA,CAJD,MAAM,QAAM,GAAC,KACZ,EAAAA,EAAa,SAAV,QAAM,IAAI,8HACqC,EAAAA,EAAwB,SAArB,mBAAiB,IAAI,mEAE9E,CAAA,kBAhDFD,EAA2E,IAA3EsC,EAAmC,sCAAoC"}
+{"version":3,"file":"ConfigTab-CqQK7vQl.js","sources":["../../src/views/tabs/ConfigTab.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Variables (what we SEND) and declared env (what the spec DECLARES). Two different things, on\n * purpose, and the tab explains the difference rather than merging them into one table.\n */\nimport { computed } from 'vue';\nimport { sentence } from '../../composables/useFormat';\nimport { applyVars, dep, persistVars, row } from '../../composables/useDeployment';\nimport InfoHint from '../../components/InfoHint.vue';\n\nimport { conflictingVars } from '../../composables/useVars';\nimport VarEditor from '../../components/VarEditor.vue';\nimport HelpModal from '../../components/HelpModal.vue';\n\n/** A count, not the raw query string — `?PR=7&REGION=eu` beside a button is machine talk. */\nconst varCount = computed(() => Object.keys(dep.vars ?? {}).length);\n\nconst storedVars = computed(() => row.value?.vars);\nconst storedList = computed(() => Object.entries(storedVars.value ?? {}));\nconst clashes = computed(() => conflictingVars(dep.vars, storedVars.value));\n</script>\n\n<template>\n  <div>\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Request variables</h2>\n\n      <!--\n        THE safety rule on this page. A spec interpolates `${VAR}` exactly once, at resolve time,\n        and every route that resolves a deployment layers the request's query parameters over the\n        server's environment. So `up` sent with PR=7 and a later `down` sent without it resolve to\n        two DIFFERENT stacks, and the teardown quietly misses everything the deploy created.\n\n        Keeping the pairs in this browser is what holds them matched here. It is a convenience, not\n        a guarantee — a different browser, a CI job or the CLI must pass the same ones itself —\n        which is why this warning stays visible rather than being dismissible.\n      -->\n      <p class=\"hint\">\n        Remembered in this browser. Another browser, a CI job or the command line supplies its own.\n        <HelpModal title=\"Why the same variables have to be used for both\">\n          <p>\n            These variables are part of how this deployment's name is worked out. Deploy with one\n            value and tear down with another and the two commands are pointing at\n            <b>different things</b> — the teardown finishes successfully having removed nothing, and\n            the original is still running.\n          </p>\n          <p>\n            They are kept per deployment in this browser only, which is what keeps them matched\n            <em>here</em>. Nothing carries them to anywhere else.\n          </p>\n        </HelpModal>\n      </p>\n\n      <VarEditor v-model=\"dep.vars\" @change=\"persistVars\" />\n\n      <div class=\"row\" style=\"margin-top: var(--s3)\">\n        <button class=\"primary\" @click=\"applyVars\">Apply &amp; reload</button>\n        <span class=\"mute\" style=\"font-size: var(--t-xs)\">\n          {{ varCount ? `${varCount} variable${varCount === 1 ? '' : 's'}` : 'no variables' }}\n        </span>\n      </div>\n\n      <p class=\"hint\">\n        Add any variable you need — the list below is what the spec declares, not everything it\n        uses.\n        <InfoHint label=\"why the two differ\">\n          A spec can consume a variable without declaring it, for instance by building its stack\n          name out of one. If a variable is missing, the error you get when the spec fails to\n          resolve names it exactly — that message is the authoritative list.\n        </InfoHint>\n      </p>\n    </section>\n\n    <!--\n      Newer servers store variables WITH the deployment, which makes `down` self-describing — the\n      strictly better arrangement. It does not make the warning above obsolete: a request variable\n      still OVERRIDES a stored one, so a different value typed here retargets the stack.\n    -->\n    <section v-if=\"storedList.length\" class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">Stored on the server</h2>\n      <p class=\"dim\" style=\"font-size: var(--t-sm)\">\n        Kept with the deployment on the server, so deploying and tearing down agree without anyone\n        passing anything. Anything set above overrides these.\n      </p>\n      <ul class=\"kvlist\" style=\"margin-top: var(--s3)\">\n        <li v-for=\"[k, v] in storedList\" :key=\"k\">\n          <span class=\"k\"><b>{{ k }}</b></span>\n          <span class=\"v mono\">{{ v }}</span>\n        </li>\n      </ul>\n\n      <div v-if=\"clashes.length\" class=\"banner warn\">\n        <b>Your request variables disagree with the stored ones:</b>\n        <b>{{ clashes.join(', ') }}</b\n        >.\n        <p>\n          Both resolve, so nothing will error — they simply resolve to <em>different stacks</em>.\n          That is the dangerous shape: an action sent from this page would target one stack while\n          the CLI, CI, or another browser targets the other. Clear the override above unless you\n          mean it.\n        </p>\n      </div>\n    </section>\n\n    <section class=\"panel\">\n      <h2 class=\"section\" style=\"margin-bottom: var(--s3)\">\n        Declared env <span class=\"mute\">(after interpolation)</span>\n      </h2>\n\n      <p v-if=\"!dep.detail\" class=\"mute\">Unavailable until the spec resolves.</p>\n      <template v-else>\n        <table class=\"cards\">\n          <thead>\n            <tr>\n              <th>Key</th>\n              <th>Value</th>\n              <th>Visibility</th>\n              <th>Length</th>\n            </tr>\n          </thead>\n          <tbody>\n            <tr v-for=\"e in dep.detail.env\" :key=\"e.key\">\n              <td class=\"name\" data-label=\"key\">{{ e.key }}</td>\n              <td class=\"name\" :class=\"{ masked: e.visibility === 'masked' }\" data-label=\"value\">\n                {{ e.value }}\n              </td>\n              <td data-label=\"visibility\">\n                <span class=\"badge\" :class=\"e.visibility === 'masked' ? 'warn' : ''\">\n                  {{ sentence(e.visibility) }}\n                </span>\n              </td>\n              <!--\n                `length` answers \"did it get set at all?\" without the value. length 0 on a masked\n                var is the interesting case: declared, never set — usually a hook about to fail on\n                an empty credential.\n              -->\n              <td class=\"dim\" data-label=\"length\">\n                {{ e.length }} chars\n                <span v-if=\"e.length === 0\" class=\"badge warn\" style=\"margin-left: 6px\">never set</span>\n              </td>\n            </tr>\n            <tr v-if=\"!dep.detail.env.length\">\n              <td colspan=\"4\" class=\"mute\">This spec declares no <code>env:</code> block.</td>\n            </tr>\n          </tbody>\n        </table>\n\n        <!--\n          Masked is NOT \"hidden pending a click\". The plaintext was never in the response, so there\n          is nothing here to reveal — a reveal control would be a lie, and building one would mean\n          sending secrets into a browser tab, and from there into screenshots and support tickets.\n          Deny-by-default by name, decided on the host.\n        -->\n        <p class=\"hint\">\n          A <b>masked</b> value was redacted on the host because its name reads as a secret. The\n          real value was never sent to this page, so there is <b>nothing to reveal</b> — only its\n          length is shown. Read it on the host if you need it.\n        </p>\n      </template>\n    </section>\n  </div>\n</template>\n"],"names":["varCount","computed","dep","storedVars","_a","row","storedList","clashes","conflictingVars","_createElementBlock","_createElementVNode","_hoisted_1","_hoisted_2","_createVNode","HelpModal","_cache","VarEditor","_unref","$event","persistVars","_hoisted_3","applyVars","args","_hoisted_4","_toDisplayString","_hoisted_5","InfoHint","_openBlock","_hoisted_6","_hoisted_7","_Fragment","_renderList","k","v","_hoisted_8","_hoisted_9","_hoisted_10","_hoisted_11","_hoisted_13","e","_hoisted_14","_normalizeClass","_hoisted_15","sentence","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_12"],"mappings":"gqCAeA,MAAMA,EAAWC,EAAS,IAAM,OAAO,KAAKC,EAAI,MAAQ,EAAE,EAAE,MAAM,EAE5DC,EAAaF,EAAS,IAAA,OAAM,OAAAG,EAAAC,EAAI,QAAJ,YAAAD,EAAW,KAAI,EAC3CE,EAAaL,EAAS,IAAM,OAAO,QAAQE,EAAW,OAAS,CAAA,CAAE,CAAC,EAClEI,EAAUN,EAAS,IAAMO,EAAgBN,EAAI,KAAMC,EAAW,KAAK,CAAC,oBAIxEM,EAyIM,MAAA,KAAA,CAxIJC,EA+CU,UA/CVC,EA+CU,aA9CRD,EAA2E,KAAA,CAAvE,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,oBAAiB,EAAA,GAYtEA,EAcI,IAdJE,EAcI,eAdY,gGAEd,EAAA,GAAAC,EAWYC,EAAA,CAXD,MAAM,mDAAiD,WAChE,IAKI,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CALJL,EAKI,IAAA,KAAA,GALD,+JAGD,EAAAA,EAAuB,SAApB,kBAAgB,IAAI,mGAEzB,CAAA,MACAA,EAGI,IAAA,KAAA,GAHD,uFAED,EAAAA,EAAa,UAAT,MAAI,IAAK,2CACf,CAAA,kBAIJG,EAAsDG,EAAA,CAAlC,WAAAC,EAAAf,CAAA,EAAI,KAAJ,sBAAAa,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAG,GAAAD,EAAAf,CAAA,EAAI,KAAIgB,GAAG,SAAQD,EAAAE,CAAA,CAAA,oCAEvCT,EAKM,MALNU,EAKM,CAJJV,EAAsE,SAAA,CAA9D,MAAM,UAAW,QAAKK,EAAA,CAAA,IAAAA,EAAA,CAAA,UAAEE,EAAAI,CAAA,GAAAJ,EAAAI,CAAA,EAAA,GAAAC,CAAA,EAAA,EAAW,gBAAkB,EAC7DZ,EAEO,OAFPa,EAEOC,EADFxB,QAAQ,GAAMA,EAAA,KAAQ,YAAYA,EAAA,QAAQ,EAAA,GAAA,GAAA,GAAA,cAAA,EAAA,CAAA,CAAA,GAIjDU,EAQI,IARJe,EAQI,eARY,kGAGd,EAAA,GAAAZ,EAIWa,EAAA,CAJD,MAAM,sBAAoB,WAAC,IAIrC,CAAA,GAAAX,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJqC,kPAIrC,EAAA,CAAA,eASWT,EAAA,MAAW,QAA1BqB,IAAAlB,EAwBU,UAxBVmB,EAwBU,eAvBRlB,EAA8E,KAAA,CAA1E,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,EAAiC,uBAAoB,EAAA,iBACzEA,EAGI,IAAA,CAHD,MAAM,MAAM,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,qJAG9C,EAAA,GACAA,EAKK,KALLmB,EAKK,EAJHF,EAAA,EAAA,EAAAlB,EAGKqB,EAAA,KAAAC,EAHgBzB,EAAA,MAAU,CAAA,CAAnB0B,EAAGC,CAAC,SAAhBxB,EAGK,KAAA,CAH6B,IAAKuB,GAAC,CACtCtB,EAAqC,OAArCwB,EAAqC,CAArBxB,EAAc,WAARsB,CAAC,EAAA,CAAA,CAAA,GACvBtB,EAAmC,OAAnCyB,EAAmCX,EAAXS,CAAC,EAAA,CAAA,CAAA,aAIlB1B,EAAA,MAAQ,QAAnBoB,IAAAlB,EAUM,MAVN2B,EAUM,CATJrB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA4D,SAAzD,wDAAqD,EAAA,GACxDA,EACC,IAAA,KAAAc,EADKjB,EAAA,MAAQ,KAAI,IAAA,CAAA,EAAA,CAAA,gBACjB,KACD,EAAA,eAAAG,EAKI,IAAA,KAAA,GALD,gEAC4D,EAAAA,EAAyB,UAArB,kBAAgB,IAAK,4LAIxF,CAAA,+BAIJA,EAuDU,UAvDV2B,EAuDU,eAtDR3B,EAEK,KAAA,CAFD,MAAM,UAAU,MAAA,CAAA,gBAAA,WAAA,CAAA,KAAiC,gBACtC,EAAAA,EAA+C,OAAA,CAAzC,MAAM,MAAA,EAAO,uBAAqB,CAAA,OAG7CO,EAAAf,CAAA,EAAI,YACdO,EAgDWqB,EAAA,CAAA,IAAA,GAAA,CA/CTpB,EAkCQ,QAlCR4B,EAkCQ,eAjCN5B,EAOQ,QAAA,KAAA,CANNA,EAKK,KAAA,KAAA,CAJHA,EAAY,UAAR,KAAG,EACPA,EAAc,UAAV,OAAK,EACTA,EAAmB,UAAf,YAAU,EACdA,EAAe,UAAX,QAAM,CAAA,SAGdA,EAwBQ,QAAA,KAAA,EAvBNiB,EAAA,EAAA,EAAAlB,EAmBKqB,SAnBWb,EAAAf,CAAA,EAAI,OAAO,IAAhBqC,QAAX9B,EAmBK,KAAA,CAnB4B,IAAK8B,EAAE,GAAA,GACtC7B,EAAkD,KAAlD8B,EAAkDhB,EAAbe,EAAE,GAAG,EAAA,CAAA,EAC1C7B,EAEK,KAAA,CAFD,MAAK+B,EAAA,CAAC,OAAM,CAAA,OAAmBF,EAAE,aAAU,QAAA,CAAA,CAAA,EAAiB,aAAW,OAAA,EACtEf,EAAAe,EAAE,KAAK,EAAA,CAAA,EAEZ7B,EAIK,KAJLgC,EAIK,CAHHhC,EAEO,OAAA,CAFD,MAAK+B,EAAA,CAAC,QAAgBF,EAAE,aAAU,SAAA,OAAA,EAAA,CAAA,CAAA,IACnCtB,EAAA0B,CAAA,EAASJ,EAAE,UAAU,CAAA,EAAA,CAAA,CAAA,GAQ5B7B,EAGK,KAHLkC,EAGK,KAFAL,EAAE,MAAM,EAAG,UACd,CAAA,EAAYA,EAAE,SAAM,OAApB9B,EAAwF,OAAxFoC,EAAwE,WAAS,wBAG1E5B,EAAAf,CAAA,EAAI,OAAO,IAAI,qBAA1BO,EAEK,KAAAqC,EAAA,CAAA,GAAA/B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,CADHL,EAAgF,KAAA,CAA5E,QAAQ,IAAI,MAAM,MAAA,KAAO,wBAAsB,EAAAA,EAAiB,YAAX,MAAI,IAAO,SAAO,CAAA,6BAWjFA,EAII,IAAA,CAJD,MAAM,QAAM,GAAC,KACZ,EAAAA,EAAa,SAAV,QAAM,IAAI,8HACqC,EAAAA,EAAwB,SAArB,mBAAiB,IAAI,mEAE9E,CAAA,kBAhDFD,EAA2E,IAA3EsC,EAAmC,sCAAoC"}

package/dist/assets/{ConfigView-BMINdC1p.js → ConfigView-D6Ourc5o.js}

@@ -1,2 +1,2 @@
-import{d as A,c as n,a as s,f as r,t as i,g as u,i as C,v as T,e as k,F as y,r as m,z as N,j as p,p as P,C as V,U as $,o as a}from"./index-IvJmpI3b.js";import{_ as b}from"./ActionButton.vue_vue_type_script_setup_true_lang-DBfqkgMV.js";import{_ as I}from"./ErrorNote.vue_vue_type_script_setup_true_lang-DrinGQ_J.js";const B={class:"page"},S={class:"card"},j={class:"field"},D={key:0,class:"dim"},E={class:"field"},F={class:"row"},K={key:0,class:"dim"},U={key:0,class:"card banner warn"},z={key:0,class:"dim"},L={class:"dim"},M={key:1,class:"card"},O={key:0,class:"dim"},q={key:1,class:"dim"},R=A({__name:"ConfigView",setup(G){const c=p(""),h=p(""),g=p(""),v=p(""),f=p(""),l=p(null),o=p(null);async function _(d){var t;const e=(t=d.target.files)==null?void 0:t[0];if(l.value=null,o.value=null,f.value="",!e){c.value="",h.value="";return}h.value=e.name,c.value=await e.text()}function x(){l.value=null,o.value=null}async function w(d){f.value="",v.value=d;const e=await P.post("/api/config/sealed",{sealed:c.value,passphrase:g.value,preview:d==="preview"});if(v.value="",!e.ok){f.value=V(e,d==="preview"?"preview this config":"apply this config");return}if(d==="preview"){l.value=e.body;return}const t=e.body;o.value=t,l.value=null,$("ok",`Applied: ${t.created.length} created, ${t.skipped.length} already here.`)}return(d,e)=>(a(),n("div",B,[e[9]||(e[9]=s("header",{class:"page-head"},[s("h1",null,"Apply a configuration"),s("p",{class:"dim"},[r(" A sealed "),s("code",null,"pstack pull config"),r(" export from another host: accounts, API tokens, variables and secrets, notifiers, sign-on, registry logins, routing files and named specs. It "),s("b",null,"creates what is missing and never overwrites"),r(", so applying one twice changes nothing the second time. ")])],-1)),s("section",S,[s("label",j,[e[3]||(e[3]=s("span",null,"Sealed export",-1)),s("input",{type:"file",accept:".sealed,.yaml,.yml,.json,application/json",onChange:_},null,32),h.value?(a(),n("small",D,i(h.value)+" — "+i(c.value.length)+" bytes",1)):u("",!0)]),s("label",E,[e[4]||(e[4]=s("span",null,"Passphrase",-1)),C(s("input",{"onUpdate:modelValue":e[0]||(e[0]=t=>g.value=t),type:"password",autocomplete:"off",placeholder:"the passphrase this file was sealed with",onInput:x},null,544),[[T,g.value]]),e[5]||(e[5]=s("small",{class:"dim"}," Sent to this host so it can open the file. That is safe in a way exporting would not be: everything inside is about to be stored here in plain text regardless. ",-1))]),s("div",F,[k(b,{label:"Preview",pending:v.value==="preview",disabled:!c.value||!g.value||!!v.value,onClick:e[1]||(e[1]=t=>w("preview"))},null,8,["pending","disabled"]),k(b,{label:"Apply",variant:"danger",pending:v.value==="apply",disabled:!l.value||!!v.value,onClick:e[2]||(e[2]=t=>w("apply"))},null,8,["pending","disabled"]),!l.value&&!o.value?(a(),n("small",K,"Preview first — Apply stays disabled until you have seen what this file does.")):u("",!0)])]),l.value?(a(),n("section",U,[e[6]||(e[6]=s("b",null,"This file will make this host trust:",-1)),s("ul",null,[(a(!0),n(y,null,m(l.value.trusts,t=>(a(),n("li",{key:t},i(t),1))),128)),l.value.trusts.length?u("",!0):(a(),n("li",z,"nothing it does not already trust."))]),s("p",L,[r(i(l.value.users)+" accounts · "+i(l.value.tokens)+" API tokens · "+i(l.value.vars)+" variables · "+i(l.value.notifiers)+" notifiers · "+i(l.value.registries)+" registries · "+i(l.value.routing)+" routing files · "+i(l.value.specs)+" specs",1),l.value.sso?(a(),n(y,{key:0},[r(" · sign-on ("+i(typeof l.value.sso=="number"?l.value.sso:1)+" provider"+i(typeof l.value.sso=="number"&&l.value.sso>1?"s":"")+")",1)],64)):u("",!0)]),e[7]||(e[7]=s("p",null,"Nothing has been written yet.",-1))])):u("",!0),o.value?(a(),n("section",M,[e[8]||(e[8]=s("b",null,"Applied.",-1)),o.value.created.length?(a(),n("p",O,"Created:")):u("",!0),s("ul",null,[(a(!0),n(y,null,m(o.value.created,t=>(a(),n("li",{key:t},i(t),1))),128))]),o.value.skipped.length?(a(),n("p",q,"Already here, left alone:")):u("",!0),s("ul",null,[(a(!0),n(y,null,m(o.value.skipped,t=>(a(),n("li",{key:t,class:"dim"},i(t),1))),128))])])):u("",!0),f.value?(a(),N(I,{key:2,text:f.value,title:"This configuration was not applied."},null,8,["text"])):u("",!0),e[10]||(e[10]=s("p",{class:"dim"},[r(" To "),s("em",null,"take"),r(" an export, run "),s("code",null,"pstack pull config -o host.sealed"),r(" on a machine that holds this host's "),s("code",null,"PSTACK_TOKEN"),r(". It is deliberately not possible from a browser session: one click would otherwise hand over every credential on the host. ")],-1))]))}});export{R as default};
-//# sourceMappingURL=ConfigView-BMINdC1p.js.map
+import{d as A,c as n,a as s,f as r,t as i,g as u,i as C,v as T,e as k,F as y,r as m,z as N,j as p,p as P,C as V,U as $,o as a}from"./index-BzdU0RNE.js";import{_ as b}from"./ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js";import{_ as I}from"./ErrorNote.vue_vue_type_script_setup_true_lang-Imao12aK.js";const B={class:"page"},S={class:"card"},j={class:"field"},D={key:0,class:"dim"},E={class:"field"},F={class:"row"},K={key:0,class:"dim"},U={key:0,class:"card banner warn"},z={key:0,class:"dim"},L={class:"dim"},M={key:1,class:"card"},O={key:0,class:"dim"},q={key:1,class:"dim"},R=A({__name:"ConfigView",setup(G){const c=p(""),h=p(""),g=p(""),v=p(""),f=p(""),l=p(null),o=p(null);async function _(d){var t;const e=(t=d.target.files)==null?void 0:t[0];if(l.value=null,o.value=null,f.value="",!e){c.value="",h.value="";return}h.value=e.name,c.value=await e.text()}function x(){l.value=null,o.value=null}async function w(d){f.value="",v.value=d;const e=await P.post("/api/config/sealed",{sealed:c.value,passphrase:g.value,preview:d==="preview"});if(v.value="",!e.ok){f.value=V(e,d==="preview"?"preview this config":"apply this config");return}if(d==="preview"){l.value=e.body;return}const t=e.body;o.value=t,l.value=null,$("ok",`Applied: ${t.created.length} created, ${t.skipped.length} already here.`)}return(d,e)=>(a(),n("div",B,[e[9]||(e[9]=s("header",{class:"page-head"},[s("h1",null,"Apply a configuration"),s("p",{class:"dim"},[r(" A sealed "),s("code",null,"pstack pull config"),r(" export from another host: accounts, API tokens, variables and secrets, notifiers, sign-on, registry logins, routing files and named specs. It "),s("b",null,"creates what is missing and never overwrites"),r(", so applying one twice changes nothing the second time. ")])],-1)),s("section",S,[s("label",j,[e[3]||(e[3]=s("span",null,"Sealed export",-1)),s("input",{type:"file",accept:".sealed,.yaml,.yml,.json,application/json",onChange:_},null,32),h.value?(a(),n("small",D,i(h.value)+" — "+i(c.value.length)+" bytes",1)):u("",!0)]),s("label",E,[e[4]||(e[4]=s("span",null,"Passphrase",-1)),C(s("input",{"onUpdate:modelValue":e[0]||(e[0]=t=>g.value=t),type:"password",autocomplete:"off",placeholder:"the passphrase this file was sealed with",onInput:x},null,544),[[T,g.value]]),e[5]||(e[5]=s("small",{class:"dim"}," Sent to this host so it can open the file. That is safe in a way exporting would not be: everything inside is about to be stored here in plain text regardless. ",-1))]),s("div",F,[k(b,{label:"Preview",pending:v.value==="preview",disabled:!c.value||!g.value||!!v.value,onClick:e[1]||(e[1]=t=>w("preview"))},null,8,["pending","disabled"]),k(b,{label:"Apply",variant:"danger",pending:v.value==="apply",disabled:!l.value||!!v.value,onClick:e[2]||(e[2]=t=>w("apply"))},null,8,["pending","disabled"]),!l.value&&!o.value?(a(),n("small",K,"Preview first — Apply stays disabled until you have seen what this file does.")):u("",!0)])]),l.value?(a(),n("section",U,[e[6]||(e[6]=s("b",null,"This file will make this host trust:",-1)),s("ul",null,[(a(!0),n(y,null,m(l.value.trusts,t=>(a(),n("li",{key:t},i(t),1))),128)),l.value.trusts.length?u("",!0):(a(),n("li",z,"nothing it does not already trust."))]),s("p",L,[r(i(l.value.users)+" accounts · "+i(l.value.tokens)+" API tokens · "+i(l.value.vars)+" variables · "+i(l.value.notifiers)+" notifiers · "+i(l.value.registries)+" registries · "+i(l.value.routing)+" routing files · "+i(l.value.specs)+" specs",1),l.value.sso?(a(),n(y,{key:0},[r(" · sign-on ("+i(typeof l.value.sso=="number"?l.value.sso:1)+" provider"+i(typeof l.value.sso=="number"&&l.value.sso>1?"s":"")+")",1)],64)):u("",!0)]),e[7]||(e[7]=s("p",null,"Nothing has been written yet.",-1))])):u("",!0),o.value?(a(),n("section",M,[e[8]||(e[8]=s("b",null,"Applied.",-1)),o.value.created.length?(a(),n("p",O,"Created:")):u("",!0),s("ul",null,[(a(!0),n(y,null,m(o.value.created,t=>(a(),n("li",{key:t},i(t),1))),128))]),o.value.skipped.length?(a(),n("p",q,"Already here, left alone:")):u("",!0),s("ul",null,[(a(!0),n(y,null,m(o.value.skipped,t=>(a(),n("li",{key:t,class:"dim"},i(t),1))),128))])])):u("",!0),f.value?(a(),N(I,{key:2,text:f.value,title:"This configuration was not applied."},null,8,["text"])):u("",!0),e[10]||(e[10]=s("p",{class:"dim"},[r(" To "),s("em",null,"take"),r(" an export, run "),s("code",null,"pstack pull config -o host.sealed"),r(" on a machine that holds this host's "),s("code",null,"PSTACK_TOKEN"),r(". It is deliberately not possible from a browser session: one click would otherwise hand over every credential on the host. ")],-1))]))}});export{R as default};
+//# sourceMappingURL=ConfigView-D6Ourc5o.js.map

package/dist/assets/{ConfigView-BMINdC1p.js.map → ConfigView-D6Ourc5o.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ConfigView-BMINdC1p.js","sources":["../../src/views/ConfigView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Apply a host configuration: a `pstack pull config` export, sealed, from another host.\n *\n * ── WHY THERE IS NO DOWNLOAD BUTTON ──────────────────────────────────────────────────────────────\n *\n * This page applies a config and cannot produce one. That is deliberate and it is not an oversight\n * to be tidied up later.\n *\n * Export is exfiltration: one request and every credential on the host — account hashes, API\n * tokens, host secrets, registry logins, notifier URLs — is in the caller's hands. If a browser\n * session could do that, then an XSS, a borrowed laptop or a stolen cookie could do it too, in one\n * click. So `GET /api/config` refuses a session and answers only to the PSTACK_TOKEN bearer, and\n * the way to take an export is `pstack pull config` on a machine that already holds that token.\n *\n * Import runs the other way. The caller must ALREADY possess the sealed file and its passphrase —\n * so this page reveals nothing its user could not read for themselves — and every secret in it is\n * about to be plaintext on this host anyway. That is also why the passphrase is sent to the server\n * here while `pull` keeps it local: there is nothing left for it to protect from this host.\n *\n * It is still the widest-reaching write in the API. It can create an administrator and choose where\n * this host pulls its images from. Hence Preview: nothing is written until the operator has seen,\n * in words, what the file will make this host trust.\n */\nimport { ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\n\ntype Preview = {\n  preview: true;\n  trusts: string[];\n  users: number;\n  tokens: number;\n  vars: number;\n  notifiers: number;\n  registries: number;\n  routing: number;\n  specs: number;\n  /** Count since multi-provider SSO; older servers sent a boolean, and truthiness reads both. */\n  sso: number | boolean;\n};\ntype Applied = { trusts: string[]; created: string[]; skipped: string[] };\n\nconst sealed = ref('');\nconst fileName = ref('');\nconst passphrase = ref('');\nconst busy = ref('');\nconst error = ref('');\nconst preview = ref<Preview | null>(null);\nconst applied = ref<Applied | null>(null);\n\n/**\n * Reading the file in the BROWSER, never uploading it as a form part.\n *\n * It is one small JSON envelope, and this keeps the whole thing on one request whose body we can\n * describe exactly. Picking a different file clears any preview: a preview that outlived the file\n * it described would be the one way this page could lie about what is being applied.\n */\nasync function pick(e: Event): Promise<void> {\n  const f = (e.target as HTMLInputElement).files?.[0];\n  preview.value = null;\n  applied.value = null;\n  error.value = '';\n  if (!f) {\n    sealed.value = '';\n    fileName.value = '';\n    return;\n  }\n  fileName.value = f.name;\n  sealed.value = await f.text();\n}\n\nfunction clearPreview(): void {\n  preview.value = null;\n  applied.value = null;\n}\n\nasync function run(mode: 'preview' | 'apply'): Promise<void> {\n  error.value = '';\n  busy.value = mode;\n  const r = await api.post<Preview | Applied>('/api/config/sealed', {\n    sealed: sealed.value,\n    passphrase: passphrase.value,\n    preview: mode === 'preview',\n  });\n  busy.value = '';\n  if (!r.ok) {\n    error.value = problem(r, mode === 'preview' ? 'preview this config' : 'apply this config');\n    return;\n  }\n  if (mode === 'preview') {\n    preview.value = r.body as Preview;\n    return;\n  }\n  const done = r.body as Applied;\n  applied.value = done;\n  preview.value = null;\n  toast('ok', `Applied: ${done.created.length} created, ${done.skipped.length} already here.`);\n}\n</script>\n\n<template>\n  <div class=\"page\">\n    <header class=\"page-head\">\n      <h1>Apply a configuration</h1>\n      <p class=\"dim\">\n        A sealed <code>pstack pull config</code> export from another host: accounts, API tokens,\n        variables and secrets, notifiers, sign-on, registry logins, routing files and named specs.\n        It <b>creates what is missing and never overwrites</b>, so applying one twice changes\n        nothing the second time.\n      </p>\n    </header>\n\n    <section class=\"card\">\n      <label class=\"field\">\n        <span>Sealed export</span>\n        <input type=\"file\" accept=\".sealed,.yaml,.yml,.json,application/json\" @change=\"pick\" />\n        <small class=\"dim\" v-if=\"fileName\">{{ fileName }} — {{ sealed.length }} bytes</small>\n      </label>\n\n      <label class=\"field\">\n        <span>Passphrase</span>\n        <input\n          v-model=\"passphrase\"\n          type=\"password\"\n          autocomplete=\"off\"\n          placeholder=\"the passphrase this file was sealed with\"\n          @input=\"clearPreview\"\n        />\n        <small class=\"dim\">\n          Sent to this host so it can open the file. That is safe in a way exporting would not be:\n          everything inside is about to be stored here in plain text regardless.\n        </small>\n      </label>\n\n      <div class=\"row\">\n        <ActionButton\n          label=\"Preview\"\n          :pending=\"busy === 'preview'\"\n          :disabled=\"!sealed || !passphrase || !!busy\"\n          @click=\"run('preview')\"\n        />\n        <ActionButton\n          label=\"Apply\"\n          variant=\"danger\"\n          :pending=\"busy === 'apply'\"\n          :disabled=\"!preview || !!busy\"\n          @click=\"run('apply')\"\n        />\n        <small class=\"dim\" v-if=\"!preview && !applied\">Preview first — Apply stays disabled until you have seen what this file does.</small>\n      </div>\n    </section>\n\n    <!--\n      The grant, in words, before anything is written. `trusts` names accounts and their roles, API\n      tokens, the sign-on provider and every registry and notifier URL — the things a file from\n      somewhere else could use to take this host over.\n    -->\n    <section v-if=\"preview\" class=\"card banner warn\">\n      <b>This file will make this host trust:</b>\n      <ul>\n        <li v-for=\"t in preview.trusts\" :key=\"t\">{{ t }}</li>\n        <li v-if=\"!preview.trusts.length\" class=\"dim\">nothing it does not already trust.</li>\n      </ul>\n      <p class=\"dim\">\n        {{ preview.users }} accounts · {{ preview.tokens }} API tokens · {{ preview.vars }} variables ·\n        {{ preview.notifiers }} notifiers · {{ preview.registries }} registries ·\n        {{ preview.routing }} routing files · {{ preview.specs }} specs<template v-if=\"preview.sso\"> · sign-on ({{ typeof preview.sso === 'number' ? preview.sso : 1 }} provider{{ typeof preview.sso === 'number' && preview.sso > 1 ? 's' : '' }})</template>\n      </p>\n      <p>Nothing has been written yet.</p>\n    </section>\n\n    <section v-if=\"applied\" class=\"card\">\n      <b>Applied.</b>\n      <p class=\"dim\" v-if=\"applied.created.length\">Created:</p>\n      <ul>\n        <li v-for=\"c in applied.created\" :key=\"c\">{{ c }}</li>\n      </ul>\n      <p class=\"dim\" v-if=\"applied.skipped.length\">Already here, left alone:</p>\n      <ul>\n        <li v-for=\"k in applied.skipped\" :key=\"k\" class=\"dim\">{{ k }}</li>\n      </ul>\n    </section>\n\n    <ErrorNote v-if=\"error\" :text=\"error\" title=\"This configuration was not applied.\" />\n\n    <p class=\"dim\">\n      To <em>take</em> an export, run <code>pstack pull config -o host.sealed</code> on a machine\n      that holds this host's <code>PSTACK_TOKEN</code>. It is deliberately not possible from a\n      browser session: one click would otherwise hand over every credential on the host.\n    </p>\n  </div>\n</template>\n"],"names":["sealed","ref","fileName","passphrase","busy","error","preview","applied","pick","e","f","_a","clearPreview","run","mode","r","api","problem","done","toast","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_hoisted_3","_cache","_hoisted_4","_toDisplayString","_hoisted_5","$event","_hoisted_6","_createVNode","ActionButton","_hoisted_7","_hoisted_8","_Fragment","_renderList","_hoisted_9","_hoisted_10","_createTextVNode","_hoisted_11","_hoisted_12","c","_hoisted_13","k","_createBlock","ErrorNote"],"mappings":"inBA6CA,MAAMA,EAASC,EAAI,EAAE,EACfC,EAAWD,EAAI,EAAE,EACjBE,EAAaF,EAAI,EAAE,EACnBG,EAAOH,EAAI,EAAE,EACbI,EAAQJ,EAAI,EAAE,EACdK,EAAUL,EAAoB,IAAI,EAClCM,EAAUN,EAAoB,IAAI,EASxC,eAAeO,EAAKC,EAAyB,OAC3C,MAAMC,GAAKC,EAAAF,EAAE,OAA4B,QAA9B,YAAAE,EAAsC,GAIjD,GAHAL,EAAQ,MAAQ,KAChBC,EAAQ,MAAQ,KAChBF,EAAM,MAAQ,GACV,CAACK,EAAG,CACNV,EAAO,MAAQ,GACfE,EAAS,MAAQ,GACjB,MACF,CACAA,EAAS,MAAQQ,EAAE,KACnBV,EAAO,MAAQ,MAAMU,EAAE,KAAA,CACzB,CAEA,SAASE,GAAqB,CAC5BN,EAAQ,MAAQ,KAChBC,EAAQ,MAAQ,IAClB,CAEA,eAAeM,EAAIC,EAA0C,CAC3DT,EAAM,MAAQ,GACdD,EAAK,MAAQU,EACb,MAAMC,EAAI,MAAMC,EAAI,KAAwB,qBAAsB,CAChE,OAAQhB,EAAO,MACf,WAAYG,EAAW,MACvB,QAASW,IAAS,SAAA,CACnB,EAED,GADAV,EAAK,MAAQ,GACT,CAACW,EAAE,GAAI,CACTV,EAAM,MAAQY,EAAQF,EAAGD,IAAS,UAAY,sBAAwB,mBAAmB,EACzF,MACF,CACA,GAAIA,IAAS,UAAW,CACtBR,EAAQ,MAAQS,EAAE,KAClB,MACF,CACA,MAAMG,EAAOH,EAAE,KACfR,EAAQ,MAAQW,EAChBZ,EAAQ,MAAQ,KAChBa,EAAM,KAAM,YAAYD,EAAK,QAAQ,MAAM,aAAaA,EAAK,QAAQ,MAAM,gBAAgB,CAC7F,eAIEE,EAAA,EAAAC,EAyFM,MAzFNC,EAyFM,aAxFJC,EAQS,SAAA,CARD,MAAM,aAAW,CACvBA,EAA8B,UAA1B,uBAAqB,EACzBA,EAKI,IAAA,CALD,MAAM,OAAK,GAAC,YACJ,EAAAA,EAA+B,YAAzB,oBAAkB,IAAO,iJAErC,EAAAA,EAAmD,SAAhD,8CAA4C,IAAI,2DAExD,CAAA,SAGFA,EAsCU,UAtCVC,EAsCU,CArCRD,EAIQ,QAJRE,EAIQ,CAHNC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAA0B,YAApB,gBAAa,EAAA,GACnBA,EAAuF,QAAA,CAAhF,KAAK,OAAO,OAAO,4CAA6C,SAAQf,CAAA,WACtDN,EAAA,WAAzBmB,EAAqF,QAArFM,EAAqFC,EAA/C1B,EAAA,KAAQ,EAAG,MAAG0B,EAAG5B,EAAA,MAAO,MAAM,EAAG,SAAM,CAAA,cAG/EuB,EAaQ,QAbRM,EAaQ,CAZNH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAuB,YAAjB,aAAU,EAAA,KAChBA,EAME,QAAA,sCALSpB,EAAU,MAAA2B,GACnB,KAAK,WACL,aAAa,MACb,YAAY,2CACX,QAAOlB,CAAA,gBAJCT,EAAA,KAAU,CAAA,GAMrBuB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAGQ,QAAA,CAHD,MAAM,OAAM,oKAGnB,EAAA,EAAA,GAGFA,EAeM,MAfNQ,EAeM,CAdJC,EAKEC,EAAA,CAJA,MAAM,UACL,QAAS7B,EAAA,QAAI,UACb,SAAQ,CAAGJ,EAAA,OAAM,CAAKG,EAAA,SAAgBC,EAAA,MACtC,uBAAOS,EAAG,SAAA,EAAA,iCAEbmB,EAMEC,EAAA,CALA,MAAM,QACN,QAAQ,SACP,QAAS7B,EAAA,QAAI,QACb,SAAQ,CAAGE,EAAA,OAAO,CAAA,CAAMF,EAAA,MACxB,uBAAOS,EAAG,OAAA,EAAA,iCAEa,CAAAP,EAAA,QAAYC,EAAA,WAAtCc,EAAoI,QAApIa,EAA+C,+EAA6E,gBASjH5B,EAAA,OAAfc,EAAA,EAAAC,EAYU,UAZVc,EAYU,CAXRT,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAA2C,SAAxC,uCAAoC,EAAA,GACvCA,EAGK,KAAA,KAAA,EAFHH,EAAA,EAAA,EAAAC,EAAqDe,EAAA,KAAAC,EAArC/B,EAAA,MAAQ,OAAb,IAAXc,EAAA,EAAAC,EAAqD,KAAA,CAApB,IAAK,CAAA,IAAM,CAAC,EAAA,CAAA,UAClCf,EAAA,MAAQ,OAAO,qBAA1Be,EAAqF,KAArFiB,EAA8C,oCAAkC,KAElFf,EAII,IAJJgB,EAII,CAHCC,EAAAZ,EAAAtB,EAAA,MAAQ,KAAK,EAAG,eAAYsB,EAAGtB,QAAQ,MAAM,EAAG,mBAAiBA,EAAA,MAAQ,IAAI,EAAG,kBAChFA,EAAA,MAAQ,SAAS,EAAG,gBAAasB,EAAGtB,EAAA,MAAQ,UAAU,EAAG,iBAC5DsB,EAAGtB,EAAA,MAAQ,OAAO,EAAG,oBAAiBsB,EAAGtB,QAAQ,KAAK,EAAG,SAAM,CAAA,EAAgBA,EAAA,MAAQ,SAAxBe,EAAwLe,EAAA,CAAA,IAAA,GAAA,CAA3JI,EAAA,wBAAsBlC,EAAA,MAAQ,KAAG,SAAgBA,EAAA,MAAQ,IAAG,CAAA,EAAO,YAASsB,EAAA,OAAUtB,EAAA,MAAQ,KAAG,UAAiBA,QAAQ,cAAqB,IAAC,CAAA,CAAA,kBAE9OoB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAoC,SAAjC,gCAA6B,EAAA,EAAA,aAGnBhB,EAAA,OAAfa,EAAA,EAAAC,EAUU,UAVVoB,EAUU,CATRf,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAe,SAAZ,WAAQ,EAAA,GACUhB,EAAA,MAAQ,QAAQ,YAArCc,EAAyD,IAAzDqB,EAA6C,UAAQ,YACrDnB,EAEK,KAAA,KAAA,EADHH,EAAA,EAAA,EAAAC,EAAsDe,EAAA,KAAAC,EAAtC9B,EAAA,MAAQ,QAAboC,IAAXvB,EAAA,EAAAC,EAAsD,KAAA,CAApB,IAAKsB,CAAA,IAAMA,CAAC,EAAA,CAAA,YAE3BpC,EAAA,MAAQ,QAAQ,YAArCc,EAA0E,IAA1EuB,EAA6C,2BAAyB,YACtErB,EAEK,KAAA,KAAA,EADHH,EAAA,EAAA,EAAAC,EAAkEe,EAAA,KAAAC,EAAlD9B,EAAA,MAAQ,QAAbsC,QAAXxB,EAAkE,KAAA,CAAhC,IAAKwB,EAAG,MAAM,KAAA,IAASA,CAAC,EAAA,CAAA,wBAI7CxC,EAAA,WAAjByC,EAAoFC,EAAA,OAA3D,KAAM1C,EAAA,MAAO,MAAM,qCAAA,2CAE5CkB,EAII,IAAA,CAJD,MAAM,OAAK,GAAC,MACV,EAAAA,EAAa,UAAT,MAAI,IAAK,kBAAgB,EAAAA,EAA8C,YAAxC,mCAAiC,IAAO,uCACvD,EAAAA,EAAyB,YAAnB,cAAY,IAAO,8HAElD,CAAA"}
+{"version":3,"file":"ConfigView-D6Ourc5o.js","sources":["../../src/views/ConfigView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Apply a host configuration: a `pstack pull config` export, sealed, from another host.\n *\n * ── WHY THERE IS NO DOWNLOAD BUTTON ──────────────────────────────────────────────────────────────\n *\n * This page applies a config and cannot produce one. That is deliberate and it is not an oversight\n * to be tidied up later.\n *\n * Export is exfiltration: one request and every credential on the host — account hashes, API\n * tokens, host secrets, registry logins, notifier URLs — is in the caller's hands. If a browser\n * session could do that, then an XSS, a borrowed laptop or a stolen cookie could do it too, in one\n * click. So `GET /api/config` refuses a session and answers only to the PSTACK_TOKEN bearer, and\n * the way to take an export is `pstack pull config` on a machine that already holds that token.\n *\n * Import runs the other way. The caller must ALREADY possess the sealed file and its passphrase —\n * so this page reveals nothing its user could not read for themselves — and every secret in it is\n * about to be plaintext on this host anyway. That is also why the passphrase is sent to the server\n * here while `pull` keeps it local: there is nothing left for it to protect from this host.\n *\n * It is still the widest-reaching write in the API. It can create an administrator and choose where\n * this host pulls its images from. Hence Preview: nothing is written until the operator has seen,\n * in words, what the file will make this host trust.\n */\nimport { ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\n\ntype Preview = {\n  preview: true;\n  trusts: string[];\n  users: number;\n  tokens: number;\n  vars: number;\n  notifiers: number;\n  registries: number;\n  routing: number;\n  specs: number;\n  /** Count since multi-provider SSO; older servers sent a boolean, and truthiness reads both. */\n  sso: number | boolean;\n};\ntype Applied = { trusts: string[]; created: string[]; skipped: string[] };\n\nconst sealed = ref('');\nconst fileName = ref('');\nconst passphrase = ref('');\nconst busy = ref('');\nconst error = ref('');\nconst preview = ref<Preview | null>(null);\nconst applied = ref<Applied | null>(null);\n\n/**\n * Reading the file in the BROWSER, never uploading it as a form part.\n *\n * It is one small JSON envelope, and this keeps the whole thing on one request whose body we can\n * describe exactly. Picking a different file clears any preview: a preview that outlived the file\n * it described would be the one way this page could lie about what is being applied.\n */\nasync function pick(e: Event): Promise<void> {\n  const f = (e.target as HTMLInputElement).files?.[0];\n  preview.value = null;\n  applied.value = null;\n  error.value = '';\n  if (!f) {\n    sealed.value = '';\n    fileName.value = '';\n    return;\n  }\n  fileName.value = f.name;\n  sealed.value = await f.text();\n}\n\nfunction clearPreview(): void {\n  preview.value = null;\n  applied.value = null;\n}\n\nasync function run(mode: 'preview' | 'apply'): Promise<void> {\n  error.value = '';\n  busy.value = mode;\n  const r = await api.post<Preview | Applied>('/api/config/sealed', {\n    sealed: sealed.value,\n    passphrase: passphrase.value,\n    preview: mode === 'preview',\n  });\n  busy.value = '';\n  if (!r.ok) {\n    error.value = problem(r, mode === 'preview' ? 'preview this config' : 'apply this config');\n    return;\n  }\n  if (mode === 'preview') {\n    preview.value = r.body as Preview;\n    return;\n  }\n  const done = r.body as Applied;\n  applied.value = done;\n  preview.value = null;\n  toast('ok', `Applied: ${done.created.length} created, ${done.skipped.length} already here.`);\n}\n</script>\n\n<template>\n  <div class=\"page\">\n    <header class=\"page-head\">\n      <h1>Apply a configuration</h1>\n      <p class=\"dim\">\n        A sealed <code>pstack pull config</code> export from another host: accounts, API tokens,\n        variables and secrets, notifiers, sign-on, registry logins, routing files and named specs.\n        It <b>creates what is missing and never overwrites</b>, so applying one twice changes\n        nothing the second time.\n      </p>\n    </header>\n\n    <section class=\"card\">\n      <label class=\"field\">\n        <span>Sealed export</span>\n        <input type=\"file\" accept=\".sealed,.yaml,.yml,.json,application/json\" @change=\"pick\" />\n        <small class=\"dim\" v-if=\"fileName\">{{ fileName }} — {{ sealed.length }} bytes</small>\n      </label>\n\n      <label class=\"field\">\n        <span>Passphrase</span>\n        <input\n          v-model=\"passphrase\"\n          type=\"password\"\n          autocomplete=\"off\"\n          placeholder=\"the passphrase this file was sealed with\"\n          @input=\"clearPreview\"\n        />\n        <small class=\"dim\">\n          Sent to this host so it can open the file. That is safe in a way exporting would not be:\n          everything inside is about to be stored here in plain text regardless.\n        </small>\n      </label>\n\n      <div class=\"row\">\n        <ActionButton\n          label=\"Preview\"\n          :pending=\"busy === 'preview'\"\n          :disabled=\"!sealed || !passphrase || !!busy\"\n          @click=\"run('preview')\"\n        />\n        <ActionButton\n          label=\"Apply\"\n          variant=\"danger\"\n          :pending=\"busy === 'apply'\"\n          :disabled=\"!preview || !!busy\"\n          @click=\"run('apply')\"\n        />\n        <small class=\"dim\" v-if=\"!preview && !applied\">Preview first — Apply stays disabled until you have seen what this file does.</small>\n      </div>\n    </section>\n\n    <!--\n      The grant, in words, before anything is written. `trusts` names accounts and their roles, API\n      tokens, the sign-on provider and every registry and notifier URL — the things a file from\n      somewhere else could use to take this host over.\n    -->\n    <section v-if=\"preview\" class=\"card banner warn\">\n      <b>This file will make this host trust:</b>\n      <ul>\n        <li v-for=\"t in preview.trusts\" :key=\"t\">{{ t }}</li>\n        <li v-if=\"!preview.trusts.length\" class=\"dim\">nothing it does not already trust.</li>\n      </ul>\n      <p class=\"dim\">\n        {{ preview.users }} accounts · {{ preview.tokens }} API tokens · {{ preview.vars }} variables ·\n        {{ preview.notifiers }} notifiers · {{ preview.registries }} registries ·\n        {{ preview.routing }} routing files · {{ preview.specs }} specs<template v-if=\"preview.sso\"> · sign-on ({{ typeof preview.sso === 'number' ? preview.sso : 1 }} provider{{ typeof preview.sso === 'number' && preview.sso > 1 ? 's' : '' }})</template>\n      </p>\n      <p>Nothing has been written yet.</p>\n    </section>\n\n    <section v-if=\"applied\" class=\"card\">\n      <b>Applied.</b>\n      <p class=\"dim\" v-if=\"applied.created.length\">Created:</p>\n      <ul>\n        <li v-for=\"c in applied.created\" :key=\"c\">{{ c }}</li>\n      </ul>\n      <p class=\"dim\" v-if=\"applied.skipped.length\">Already here, left alone:</p>\n      <ul>\n        <li v-for=\"k in applied.skipped\" :key=\"k\" class=\"dim\">{{ k }}</li>\n      </ul>\n    </section>\n\n    <ErrorNote v-if=\"error\" :text=\"error\" title=\"This configuration was not applied.\" />\n\n    <p class=\"dim\">\n      To <em>take</em> an export, run <code>pstack pull config -o host.sealed</code> on a machine\n      that holds this host's <code>PSTACK_TOKEN</code>. It is deliberately not possible from a\n      browser session: one click would otherwise hand over every credential on the host.\n    </p>\n  </div>\n</template>\n"],"names":["sealed","ref","fileName","passphrase","busy","error","preview","applied","pick","e","f","_a","clearPreview","run","mode","r","api","problem","done","toast","_openBlock","_createElementBlock","_hoisted_1","_createElementVNode","_hoisted_2","_hoisted_3","_cache","_hoisted_4","_toDisplayString","_hoisted_5","$event","_hoisted_6","_createVNode","ActionButton","_hoisted_7","_hoisted_8","_Fragment","_renderList","_hoisted_9","_hoisted_10","_createTextVNode","_hoisted_11","_hoisted_12","c","_hoisted_13","k","_createBlock","ErrorNote"],"mappings":"inBA6CA,MAAMA,EAASC,EAAI,EAAE,EACfC,EAAWD,EAAI,EAAE,EACjBE,EAAaF,EAAI,EAAE,EACnBG,EAAOH,EAAI,EAAE,EACbI,EAAQJ,EAAI,EAAE,EACdK,EAAUL,EAAoB,IAAI,EAClCM,EAAUN,EAAoB,IAAI,EASxC,eAAeO,EAAKC,EAAyB,OAC3C,MAAMC,GAAKC,EAAAF,EAAE,OAA4B,QAA9B,YAAAE,EAAsC,GAIjD,GAHAL,EAAQ,MAAQ,KAChBC,EAAQ,MAAQ,KAChBF,EAAM,MAAQ,GACV,CAACK,EAAG,CACNV,EAAO,MAAQ,GACfE,EAAS,MAAQ,GACjB,MACF,CACAA,EAAS,MAAQQ,EAAE,KACnBV,EAAO,MAAQ,MAAMU,EAAE,KAAA,CACzB,CAEA,SAASE,GAAqB,CAC5BN,EAAQ,MAAQ,KAChBC,EAAQ,MAAQ,IAClB,CAEA,eAAeM,EAAIC,EAA0C,CAC3DT,EAAM,MAAQ,GACdD,EAAK,MAAQU,EACb,MAAMC,EAAI,MAAMC,EAAI,KAAwB,qBAAsB,CAChE,OAAQhB,EAAO,MACf,WAAYG,EAAW,MACvB,QAASW,IAAS,SAAA,CACnB,EAED,GADAV,EAAK,MAAQ,GACT,CAACW,EAAE,GAAI,CACTV,EAAM,MAAQY,EAAQF,EAAGD,IAAS,UAAY,sBAAwB,mBAAmB,EACzF,MACF,CACA,GAAIA,IAAS,UAAW,CACtBR,EAAQ,MAAQS,EAAE,KAClB,MACF,CACA,MAAMG,EAAOH,EAAE,KACfR,EAAQ,MAAQW,EAChBZ,EAAQ,MAAQ,KAChBa,EAAM,KAAM,YAAYD,EAAK,QAAQ,MAAM,aAAaA,EAAK,QAAQ,MAAM,gBAAgB,CAC7F,eAIEE,EAAA,EAAAC,EAyFM,MAzFNC,EAyFM,aAxFJC,EAQS,SAAA,CARD,MAAM,aAAW,CACvBA,EAA8B,UAA1B,uBAAqB,EACzBA,EAKI,IAAA,CALD,MAAM,OAAK,GAAC,YACJ,EAAAA,EAA+B,YAAzB,oBAAkB,IAAO,iJAErC,EAAAA,EAAmD,SAAhD,8CAA4C,IAAI,2DAExD,CAAA,SAGFA,EAsCU,UAtCVC,EAsCU,CArCRD,EAIQ,QAJRE,EAIQ,CAHNC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAA0B,YAApB,gBAAa,EAAA,GACnBA,EAAuF,QAAA,CAAhF,KAAK,OAAO,OAAO,4CAA6C,SAAQf,CAAA,WACtDN,EAAA,WAAzBmB,EAAqF,QAArFM,EAAqFC,EAA/C1B,EAAA,KAAQ,EAAG,MAAG0B,EAAG5B,EAAA,MAAO,MAAM,EAAG,SAAM,CAAA,cAG/EuB,EAaQ,QAbRM,EAaQ,CAZNH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAuB,YAAjB,aAAU,EAAA,KAChBA,EAME,QAAA,sCALSpB,EAAU,MAAA2B,GACnB,KAAK,WACL,aAAa,MACb,YAAY,2CACX,QAAOlB,CAAA,gBAJCT,EAAA,KAAU,CAAA,GAMrBuB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAGQ,QAAA,CAHD,MAAM,OAAM,oKAGnB,EAAA,EAAA,GAGFA,EAeM,MAfNQ,EAeM,CAdJC,EAKEC,EAAA,CAJA,MAAM,UACL,QAAS7B,EAAA,QAAI,UACb,SAAQ,CAAGJ,EAAA,OAAM,CAAKG,EAAA,SAAgBC,EAAA,MACtC,uBAAOS,EAAG,SAAA,EAAA,iCAEbmB,EAMEC,EAAA,CALA,MAAM,QACN,QAAQ,SACP,QAAS7B,EAAA,QAAI,QACb,SAAQ,CAAGE,EAAA,OAAO,CAAA,CAAMF,EAAA,MACxB,uBAAOS,EAAG,OAAA,EAAA,iCAEa,CAAAP,EAAA,QAAYC,EAAA,WAAtCc,EAAoI,QAApIa,EAA+C,+EAA6E,gBASjH5B,EAAA,OAAfc,EAAA,EAAAC,EAYU,UAZVc,EAYU,CAXRT,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAA2C,SAAxC,uCAAoC,EAAA,GACvCA,EAGK,KAAA,KAAA,EAFHH,EAAA,EAAA,EAAAC,EAAqDe,EAAA,KAAAC,EAArC/B,EAAA,MAAQ,OAAb,IAAXc,EAAA,EAAAC,EAAqD,KAAA,CAApB,IAAK,CAAA,IAAM,CAAC,EAAA,CAAA,UAClCf,EAAA,MAAQ,OAAO,qBAA1Be,EAAqF,KAArFiB,EAA8C,oCAAkC,KAElFf,EAII,IAJJgB,EAII,CAHCC,EAAAZ,EAAAtB,EAAA,MAAQ,KAAK,EAAG,eAAYsB,EAAGtB,QAAQ,MAAM,EAAG,mBAAiBA,EAAA,MAAQ,IAAI,EAAG,kBAChFA,EAAA,MAAQ,SAAS,EAAG,gBAAasB,EAAGtB,EAAA,MAAQ,UAAU,EAAG,iBAC5DsB,EAAGtB,EAAA,MAAQ,OAAO,EAAG,oBAAiBsB,EAAGtB,QAAQ,KAAK,EAAG,SAAM,CAAA,EAAgBA,EAAA,MAAQ,SAAxBe,EAAwLe,EAAA,CAAA,IAAA,GAAA,CAA3JI,EAAA,wBAAsBlC,EAAA,MAAQ,KAAG,SAAgBA,EAAA,MAAQ,IAAG,CAAA,EAAO,YAASsB,EAAA,OAAUtB,EAAA,MAAQ,KAAG,UAAiBA,QAAQ,cAAqB,IAAC,CAAA,CAAA,kBAE9OoB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAoC,SAAjC,gCAA6B,EAAA,EAAA,aAGnBhB,EAAA,OAAfa,EAAA,EAAAC,EAUU,UAVVoB,EAUU,CATRf,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAH,EAAe,SAAZ,WAAQ,EAAA,GACUhB,EAAA,MAAQ,QAAQ,YAArCc,EAAyD,IAAzDqB,EAA6C,UAAQ,YACrDnB,EAEK,KAAA,KAAA,EADHH,EAAA,EAAA,EAAAC,EAAsDe,EAAA,KAAAC,EAAtC9B,EAAA,MAAQ,QAAboC,IAAXvB,EAAA,EAAAC,EAAsD,KAAA,CAApB,IAAKsB,CAAA,IAAMA,CAAC,EAAA,CAAA,YAE3BpC,EAAA,MAAQ,QAAQ,YAArCc,EAA0E,IAA1EuB,EAA6C,2BAAyB,YACtErB,EAEK,KAAA,KAAA,EADHH,EAAA,EAAA,EAAAC,EAAkEe,EAAA,KAAAC,EAAlD9B,EAAA,MAAQ,QAAbsC,QAAXxB,EAAkE,KAAA,CAAhC,IAAKwB,EAAG,MAAM,KAAA,IAASA,CAAC,EAAA,CAAA,wBAI7CxC,EAAA,WAAjByC,EAAoFC,EAAA,OAA3D,KAAM1C,EAAA,MAAO,MAAM,qCAAA,2CAE5CkB,EAII,IAAA,CAJD,MAAM,OAAK,GAAC,MACV,EAAAA,EAAa,UAAT,MAAI,IAAK,kBAAgB,EAAAA,EAA8C,YAAxC,mCAAiC,IAAO,uCACvD,EAAAA,EAAyB,YAAnB,cAAY,IAAO,8HAElD,CAAA"}

package/dist/assets/{ConflictNote.vue_vue_type_script_setup_true_lang-DcogOjwN.js → ConflictNote.vue_vue_type_script_setup_true_lang-BtSm_ZhU.js}

@@ -1,2 +1,2 @@
-import{p as j,U as k,G as h,J as $,Y as C,C as x,j as f,k as m,Z as I,A as R,$ as T,b as U,d as A,c as r,E as D,a as d,t as b,f as i,e as L,w as N,l as S,o as l}from"./index-IvJmpI3b.js";import{d as s,v as E,i as g}from"./useDeployment-rA-pgUHZ.js";const p=f(""),u=f(""),w=f(null),v=f(""),B=m(()=>{var e;return((e=s.detail)==null?void 0:e.busy)===!0}),Y=m(()=>{var e;return((e=R.health)==null?void 0:e.authEnforced)===!0&&!T.token&&!U.authed}),Z=m(()=>{const e=s.vars.filter(o=>o.k).map(o=>o.k);return e.length?`Sending ${e.join(", ")} with every action.`:"Using the variables saved with this deployment."});function H(e,o=!1){if(!s.detail)return"The spec has not resolved — the server cannot compute the stack name.";if(B.value&&e!=="down")return`A job is already running or waiting on ${s.detail.stack}. Wait for it, or stop everything on the stack from the Danger tab.`;if(e==="down"&&g.value&&!o)return`Type the stack name "${s.detail.stack}" below to confirm a shared teardown.`;if(e==="sleep"&&g.value)return"A shared deployment cannot sleep — every preview that depends on it would go with it.";if(e==="sleep"&&!s.detail.compose)return"This spec has no compose section — there is nothing to put to sleep.";if(e==="sleep"&&s.detail.asleep)return"Already asleep."}async function K(e,o={}){if(!s.detail)return;p.value=e,u.value="",w.value=null;const t=e==="down"?{verify:o.verify??!0,force:o.force??!1}:{},a=await j.post(`/api/deployments/${encodeURIComponent(s.id)}/${e}${E.value}`,t);if(p.value="",a.status===202){const n=a.body.job;if(n!=null&&n.id){const c=n.state==="queued"?"queued":"started";k("info",`${h(e)} ${c} on ${n.stack}`,{to:`/jobs/${encodeURIComponent(n.id)}`,toLabel:"Follow"}),$(),C.push(`/jobs/${encodeURIComponent(n.id)}`);return}u.value="The action was accepted, but the response carried nothing to follow.";return}if(a.status===409)return F(a.body);u.value=x(a,h(e).toLowerCase()),k("error",`${h(e)} was refused.`)}async function F(e){var c;const o=I(e);w.value=o,v.value="";const t=o.stack||((c=s.detail)==null?void 0:c.stack);if(o.kind!=="other"||!t)return;const n=((await j.get("/api/jobs")).body.jobs??[]).find(y=>y.state==="running"&&y.stack===t);n&&(v.value=n.id)}function O(){p.value="",u.value="",w.value=null,v.value=""}const V={class:"raw",style:{color:"var(--fg-dim)","max-height":"200px"}},q={key:0},J={key:1},W={key:2},z={key:3},G={key:4},P=A({__name:"ConflictNote",props:{conflict:{},jobId:{}},setup(e){return(o,t)=>{const a=S("RouterLink");return l(),r("div",{class:D(["banner",e.conflict.kind==="shared"?"leaked":"info"]),role:"alert"},[t[5]||(t[5]=d("b",null,"Refused — nothing was started.",-1)),d("pre",V,b(e.conflict.text),1),e.conflict.kind==="shared"?(l(),r("p",q,[...t[0]||(t[0]=[i(" Type the stack name in the confirmation field above and press ",-1),d("code",null,"down",-1),i(" again. ",-1)])])):e.conflict.kind==="containers"?(l(),r("p",J,[...t[1]||(t[1]=[i(" Run ",-1),d("code",null,"down",-1),i(" first. Forgetting the record now would orphan those containers beyond the control plane's view: nothing left would know their stack name, their axes, or how to tear them down. ",-1)])])):e.conflict.kind==="referenced"?(l(),r("p",W,[t[2]||(t[2]=i(" These deployments still use this spec: ",-1)),d("strong",null,b(e.conflict.deployments.join(", ")),1),t[3]||(t[3]=i(". Deleting it would leave them with no way to be torn down. ",-1))])):e.jobId?(l(),r("p",z,[L(a,{to:`/jobs/${encodeURIComponent(e.jobId)}`},{default:N(()=>[...t[4]||(t[4]=[i("Follow the running job →",-1)])]),_:1},8,["to"])])):(l(),r("p",G,"Nothing was retried. Wait for the current work to finish, then try again."))],2)}}});export{P as _,K as a,B as b,u as c,w as d,v as e,F as o,p,O as r,Y as t,Z as v,H as w};
-//# sourceMappingURL=ConflictNote.vue_vue_type_script_setup_true_lang-DcogOjwN.js.map
+import{p as j,U as k,G as h,J as $,Y as C,C as x,j as f,k as m,Z as I,A as R,$ as T,b as U,d as A,c as r,E as D,a as d,t as b,f as i,e as L,w as N,l as S,o as l}from"./index-BzdU0RNE.js";import{d as s,v as E,i as g}from"./useDeployment-D3f7oVQg.js";const p=f(""),u=f(""),w=f(null),v=f(""),B=m(()=>{var e;return((e=s.detail)==null?void 0:e.busy)===!0}),Y=m(()=>{var e;return((e=R.health)==null?void 0:e.authEnforced)===!0&&!T.token&&!U.authed}),Z=m(()=>{const e=s.vars.filter(o=>o.k).map(o=>o.k);return e.length?`Sending ${e.join(", ")} with every action.`:"Using the variables saved with this deployment."});function H(e,o=!1){if(!s.detail)return"The spec has not resolved — the server cannot compute the stack name.";if(B.value&&e!=="down")return`A job is already running or waiting on ${s.detail.stack}. Wait for it, or stop everything on the stack from the Danger tab.`;if(e==="down"&&g.value&&!o)return`Type the stack name "${s.detail.stack}" below to confirm a shared teardown.`;if(e==="sleep"&&g.value)return"A shared deployment cannot sleep — every preview that depends on it would go with it.";if(e==="sleep"&&!s.detail.compose)return"This spec has no compose section — there is nothing to put to sleep.";if(e==="sleep"&&s.detail.asleep)return"Already asleep."}async function K(e,o={}){if(!s.detail)return;p.value=e,u.value="",w.value=null;const t=e==="down"?{verify:o.verify??!0,force:o.force??!1}:{},a=await j.post(`/api/deployments/${encodeURIComponent(s.id)}/${e}${E.value}`,t);if(p.value="",a.status===202){const n=a.body.job;if(n!=null&&n.id){const c=n.state==="queued"?"queued":"started";k("info",`${h(e)} ${c} on ${n.stack}`,{to:`/jobs/${encodeURIComponent(n.id)}`,toLabel:"Follow"}),$(),C.push(`/jobs/${encodeURIComponent(n.id)}`);return}u.value="The action was accepted, but the response carried nothing to follow.";return}if(a.status===409)return F(a.body);u.value=x(a,h(e).toLowerCase()),k("error",`${h(e)} was refused.`)}async function F(e){var c;const o=I(e);w.value=o,v.value="";const t=o.stack||((c=s.detail)==null?void 0:c.stack);if(o.kind!=="other"||!t)return;const n=((await j.get("/api/jobs")).body.jobs??[]).find(y=>y.state==="running"&&y.stack===t);n&&(v.value=n.id)}function O(){p.value="",u.value="",w.value=null,v.value=""}const V={class:"raw",style:{color:"var(--fg-dim)","max-height":"200px"}},q={key:0},J={key:1},W={key:2},z={key:3},G={key:4},P=A({__name:"ConflictNote",props:{conflict:{},jobId:{}},setup(e){return(o,t)=>{const a=S("RouterLink");return l(),r("div",{class:D(["banner",e.conflict.kind==="shared"?"leaked":"info"]),role:"alert"},[t[5]||(t[5]=d("b",null,"Refused — nothing was started.",-1)),d("pre",V,b(e.conflict.text),1),e.conflict.kind==="shared"?(l(),r("p",q,[...t[0]||(t[0]=[i(" Type the stack name in the confirmation field above and press ",-1),d("code",null,"down",-1),i(" again. ",-1)])])):e.conflict.kind==="containers"?(l(),r("p",J,[...t[1]||(t[1]=[i(" Run ",-1),d("code",null,"down",-1),i(" first. Forgetting the record now would orphan those containers beyond the control plane's view: nothing left would know their stack name, their axes, or how to tear them down. ",-1)])])):e.conflict.kind==="referenced"?(l(),r("p",W,[t[2]||(t[2]=i(" These deployments still use this spec: ",-1)),d("strong",null,b(e.conflict.deployments.join(", ")),1),t[3]||(t[3]=i(". Deleting it would leave them with no way to be torn down. ",-1))])):e.jobId?(l(),r("p",z,[L(a,{to:`/jobs/${encodeURIComponent(e.jobId)}`},{default:N(()=>[...t[4]||(t[4]=[i("Follow the running job →",-1)])]),_:1},8,["to"])])):(l(),r("p",G,"Nothing was retried. Wait for the current work to finish, then try again."))],2)}}});export{P as _,K as a,B as b,u as c,w as d,v as e,F as o,p,O as r,Y as t,Z as v,H as w};
+//# sourceMappingURL=ConflictNote.vue_vue_type_script_setup_true_lang-BtSm_ZhU.js.map

package/dist/assets/{ConflictNote.vue_vue_type_script_setup_true_lang-DcogOjwN.js.map → ConflictNote.vue_vue_type_script_setup_true_lang-BtSm_ZhU.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ConflictNote.vue_vue_type_script_setup_true_lang-DcogOjwN.js","sources":["../../src/composables/useDeploymentActions.ts","../../src/components/ConflictNote.vue"],"sourcesContent":["/**\n * Lifecycle actions for the open deployment — shared by the detail HEADER (Deploy, Verify) and the\n * Danger tab (Tear down, Forget).\n *\n * WHY THIS MOVED OUT OF THE DANGER TAB. Deploy is the primary action of the entire product, and it\n * lived behind a tab named \"Danger\" — three clicks deep, labelled as something to be afraid of.\n * Deploying and verifying a preview are routine and reversible; they belong in the header, visible\n * from every tab. What stays in Danger is what the name promises: teardown and forgetting.\n *\n * Module-level state, same pattern as `useDeployment`: exactly one deployment detail is open at a\n * time, and the header and the tab must see the SAME pending/conflict state — two components each\n * holding their own copy is how a button stays enabled while the other copy knows a job is running.\n */\nimport { computed, ref } from 'vue';\nimport { api, classifyConflict, problem, type Conflict } from '../api/client';\nimport type { ActionResponse, ConflictBody, JobsResponse } from '../api/types';\nimport { dep, isShared, varsQuery } from './useDeployment';\nimport { loadDeployments, state } from './useControlPlane';\nimport { settings } from './useSettings';\nimport { authState } from './useAuth';\nimport { toast } from './useToasts';\nimport { actionLabel } from './useFormat';\nimport { router } from '../router';\n\nexport type LifecycleAction = 'up' | 'verify' | 'down' | 'sleep' | 'wake';\n\nexport const pending = ref<'' | LifecycleAction | 'forget'>('');\nexport const actionError = ref('');\nexport const conflict = ref<Conflict | null>(null);\nexport const conflictJobId = ref('');\n\nexport const busy = computed(() => dep.detail?.busy === true);\n/**\n * True only when NOTHING can authenticate the caller. This predates accounts and used to check the\n * token alone — so a signed-in operator with no token pasted was told \"every action below will be\n * refused\" while their actions were succeeding. A session is a credential; the warning must know so.\n */\nexport const tokenMissing = computed(\n  () => state.health?.authEnforced === true && !settings.token && !authState.authed,\n);\n\n/**\n * The variables an action will send, as prose. Which variables are set decides which stack is\n * touched, so the NAMES are worth stating — the URL-encoded query string they become is not.\n */\nexport const varsSummary = computed(() => {\n  const names = dep.vars.filter((v) => v.k).map((v) => v.k);\n  // NOT \"no variables\": with none set here the server resolves the ones stored with the deployment,\n  // and claiming otherwise would have an operator hunting for variables that are already in place.\n  return names.length\n    ? `Sending ${names.join(', ')} with every action.`\n    : 'Using the variables saved with this deployment.';\n});\n\n/** A disabled control must say why. This is the text that answers it. */\nexport function whyDisabled(action: LifecycleAction, forceArmed = false): string | undefined {\n  if (!dep.detail) return 'The spec has not resolved — the server cannot compute the stack name.';\n  // A teardown is NEVER blocked by a busy stack. `down` PREEMPTS on the server — it cancels the\n  // running job, drops the one queued behind it, and then runs — so disabling the button here\n  // would be this app refusing the one action the server promises will not wait.\n  if (busy.value && action !== 'down') {\n    // Why DISABLED rather than \"it would queue\": the server WOULD accept it (a second job queues,\n    // a third replaces the second), but a person clicking Deploy twice on one screen means the\n    // first click, not a burst of pushes. The queue exists for CI; offering it here would just be\n    // a way to schedule a duplicate of what is already running. The escape hatch is named.\n    return (\n      `A job is already running or waiting on ${dep.detail.stack}. ` +\n      'Wait for it, or stop everything on the stack from the Danger tab.'\n    );\n  }\n  if (action === 'down' && isShared.value && !forceArmed) {\n    return `Type the stack name \"${dep.detail.stack}\" below to confirm a shared teardown.`;\n  }\n  if (action === 'sleep' && isShared.value) {\n    return 'A shared deployment cannot sleep — every preview that depends on it would go with it.';\n  }\n  if (action === 'sleep' && !dep.detail.compose) return 'This spec has no compose section — there is nothing to put to sleep.';\n  if (action === 'sleep' && dep.detail.asleep) return 'Already asleep.';\n  return undefined;\n}\n\nexport async function act(\n  action: LifecycleAction,\n  opts: { verify?: boolean; force?: boolean } = {},\n): Promise<void> {\n  if (!dep.detail) return;\n  pending.value = action;\n  actionError.value = '';\n  conflict.value = null;\n\n  const body =\n    action === 'down'\n      ? // `force` is only ever true for a shared deployment whose stack name was typed out in full.\n        { verify: opts.verify ?? true, force: opts.force ?? false }\n      : {};\n\n  const r = await api.post<ActionResponse & ConflictBody>(\n    `/api/deployments/${encodeURIComponent(dep.id)}/${action}${varsQuery.value}`,\n    body,\n  );\n  pending.value = '';\n\n  if (r.status === 202) {\n    const job = r.body.job;\n    if (job?.id) {\n      // The 202 says which it is. \"Started\" on a job that is only queued is the toast telling an\n      // operator their deploy is running when it has not begun — the exact confusion the queued\n      // state exists to remove.\n      const verb = job.state === 'queued' ? 'queued' : 'started';\n      toast('info', `${actionLabel(action)} ${verb} on ${job.stack}`, {\n        to: `/jobs/${encodeURIComponent(job.id)}`,\n        toLabel: 'Follow',\n      });\n      void loadDeployments();\n      void router.push(`/jobs/${encodeURIComponent(job.id)}`);\n      return;\n    }\n    actionError.value = 'The action was accepted, but the response carried nothing to follow.';\n    return;\n  }\n  if (r.status === 409) return onConflict(r.body);\n\n  actionError.value = problem(r, actionLabel(action).toLowerCase());\n  toast('error', `${actionLabel(action)} was refused.`);\n}\n\n/**\n * Classify on payload SHAPE (in `client.ts`), never on message text — then look for a running job\n * ONLY to offer a link. A busy stack is no longer a 409 (a second job queues); what is left in this\n * branch is a HOLD — a spec edit or a delete in progress — and \"docker did not answer\", which are\n * shape-identical, so neither is claimed. The server's message is printed verbatim. Never retry.\n */\nexport async function onConflict(body: ConflictBody): Promise<void> {\n  const c = classifyConflict(body);\n  conflict.value = c;\n  conflictJobId.value = '';\n\n  const stack = c.stack || dep.detail?.stack;\n  if (c.kind !== 'other' || !stack) return;\n  const jl = await api.get<JobsResponse>('/api/jobs');\n  const live = (jl.body.jobs ?? []).find((j) => j.state === 'running' && j.stack === stack);\n  if (live) conflictJobId.value = live.id;\n}\n\n/** Leaving the deployment must not carry a stale error onto the next one. */\nexport function resetActions(): void {\n  pending.value = '';\n  actionError.value = '';\n  conflict.value = null;\n  conflictJobId.value = '';\n}\n","<script setup lang=\"ts\">\n/**\n * A 409, explained.\n *\n * \"409\" on this API always means the same thing about consequences — **refused, and nothing was\n * started** — but four different things about the cause, and guessing wrong sends the operator\n * down the wrong path. The classification is done on payload SHAPE in `client.ts`, never on the\n * message text, and the server's own message is always printed verbatim underneath.\n *\n * Note what is deliberately NOT distinguished: \"a job is in flight\" and \"docker did not answer\"\n * are shape-identical, so this renders neither claim — it prints the message and offers a link to\n * a running job only when one demonstrably exists.\n */\nimport type { Conflict } from '../api/client';\n\ndefineProps<{ conflict: Conflict; jobId?: string }>();\n</script>\n\n<template>\n  <div class=\"banner\" :class=\"conflict.kind === 'shared' ? 'leaked' : 'info'\" role=\"alert\">\n    <b>Refused — nothing was started.</b>\n    <pre class=\"raw\" style=\"color: var(--fg-dim); max-height: 200px\">{{ conflict.text }}</pre>\n\n    <p v-if=\"conflict.kind === 'shared'\">\n      Type the stack name in the confirmation field above and press <code>down</code> again.\n    </p>\n    <p v-else-if=\"conflict.kind === 'containers'\">\n      Run <code>down</code> first. Forgetting the record now would orphan those containers beyond\n      the control plane's view: nothing left would know their stack name, their axes, or how to\n      tear them down.\n    </p>\n    <p v-else-if=\"conflict.kind === 'referenced'\">\n      These deployments still use this spec: <strong>{{ conflict.deployments.join(', ') }}</strong>.\n      Deleting it would leave them with no way to be torn down.\n    </p>\n    <p v-else-if=\"jobId\">\n      <RouterLink :to=\"`/jobs/${encodeURIComponent(jobId)}`\">Follow the running job →</RouterLink>\n    </p>\n    <p v-else>Nothing was retried. Wait for the current work to finish, then try again.</p>\n  </div>\n</template>\n"],"names":["pending","ref","actionError","conflict","conflictJobId","busy","computed","_a","dep","tokenMissing","state","settings","authState","varsSummary","names","v","whyDisabled","action","forceArmed","isShared","act","opts","body","r","api","varsQuery","job","verb","toast","actionLabel","loadDeployments","router","onConflict","problem","c","classifyConflict","stack","live","j","resetActions","_createElementBlock","_normalizeClass","__props","_cache","_createElementVNode","_hoisted_1","_toDisplayString","_hoisted_2","_hoisted_3","_hoisted_4","_hoisted_5","_createVNode","_component_RouterLink","_openBlock"],"mappings":"yPA0BO,MAAMA,EAAUC,EAAqC,EAAE,EACjDC,EAAcD,EAAI,EAAE,EACpBE,EAAWF,EAAqB,IAAI,EACpCG,EAAgBH,EAAI,EAAE,EAEtBI,EAAOC,EAAS,IAAA,OAAM,QAAAC,EAAAC,EAAI,SAAJ,YAAAD,EAAY,QAAS,GAAI,EAM/CE,EAAeH,EAC1B,WAAM,QAAAC,EAAAG,EAAM,SAAN,YAAAH,EAAc,gBAAiB,IAAQ,CAACI,EAAS,OAAS,CAACC,EAAU,OAC7E,EAMaC,EAAcP,EAAS,IAAM,CACxC,MAAMQ,EAAQN,EAAI,KAAK,OAAQO,GAAMA,EAAE,CAAC,EAAE,IAAKA,GAAMA,EAAE,CAAC,EAGxD,OAAOD,EAAM,OACT,WAAWA,EAAM,KAAK,IAAI,CAAC,sBAC3B,iDACN,CAAC,EAGM,SAASE,EAAYC,EAAyBC,EAAa,GAA2B,CAC3F,GAAI,CAACV,EAAI,OAAQ,MAAO,wEAIxB,GAAIH,EAAK,OAASY,IAAW,OAK3B,MACE,0CAA0CT,EAAI,OAAO,KAAK,sEAI9D,GAAIS,IAAW,QAAUE,EAAS,OAAS,CAACD,EAC1C,MAAO,wBAAwBV,EAAI,OAAO,KAAK,wCAEjD,GAAIS,IAAW,SAAWE,EAAS,MACjC,MAAO,wFAET,GAAIF,IAAW,SAAW,CAACT,EAAI,OAAO,QAAS,MAAO,uEACtD,GAAIS,IAAW,SAAWT,EAAI,OAAO,OAAQ,MAAO,iBAEtD,CAEA,eAAsBY,EACpBH,EACAI,EAA8C,GAC/B,CACf,GAAI,CAACb,EAAI,OAAQ,OACjBR,EAAQ,MAAQiB,EAChBf,EAAY,MAAQ,GACpBC,EAAS,MAAQ,KAEjB,MAAMmB,EACJL,IAAW,OAEP,CAAE,OAAQI,EAAK,QAAU,GAAM,MAAOA,EAAK,OAAS,EAAA,EACpD,CAAA,EAEAE,EAAI,MAAMC,EAAI,KAClB,oBAAoB,mBAAmBhB,EAAI,EAAE,CAAC,IAAIS,CAAM,GAAGQ,EAAU,KAAK,GAC1EH,CAAA,EAIF,GAFAtB,EAAQ,MAAQ,GAEZuB,EAAE,SAAW,IAAK,CACpB,MAAMG,EAAMH,EAAE,KAAK,IACnB,GAAIG,GAAA,MAAAA,EAAK,GAAI,CAIX,MAAMC,EAAOD,EAAI,QAAU,SAAW,SAAW,UACjDE,EAAM,OAAQ,GAAGC,EAAYZ,CAAM,CAAC,IAAIU,CAAI,OAAOD,EAAI,KAAK,GAAI,CAC9D,GAAI,SAAS,mBAAmBA,EAAI,EAAE,CAAC,GACvC,QAAS,QAAA,CACV,EACII,EAAA,EACAC,EAAO,KAAK,SAAS,mBAAmBL,EAAI,EAAE,CAAC,EAAE,EACtD,MACF,CACAxB,EAAY,MAAQ,uEACpB,MACF,CACA,GAAIqB,EAAE,SAAW,IAAK,OAAOS,EAAWT,EAAE,IAAI,EAE9CrB,EAAY,MAAQ+B,EAAQV,EAAGM,EAAYZ,CAAM,EAAE,aAAa,EAChEW,EAAM,QAAS,GAAGC,EAAYZ,CAAM,CAAC,eAAe,CACtD,CAQA,eAAsBe,EAAWV,EAAmC,OAClE,MAAMY,EAAIC,EAAiBb,CAAI,EAC/BnB,EAAS,MAAQ+B,EACjB9B,EAAc,MAAQ,GAEtB,MAAMgC,EAAQF,EAAE,SAAS3B,EAAAC,EAAI,SAAJ,YAAAD,EAAY,OACrC,GAAI2B,EAAE,OAAS,SAAW,CAACE,EAAO,OAElC,MAAMC,IADK,MAAMb,EAAI,IAAkB,WAAW,GACjC,KAAK,MAAQ,CAAA,GAAI,KAAMc,GAAMA,EAAE,QAAU,WAAaA,EAAE,QAAUF,CAAK,EACpFC,IAAMjC,EAAc,MAAQiC,EAAK,GACvC,CAGO,SAASE,GAAqB,CACnCvC,EAAQ,MAAQ,GAChBE,EAAY,MAAQ,GACpBC,EAAS,MAAQ,KACjBC,EAAc,MAAQ,EACxB,8OCnIEoC,EAoBM,MAAA,CApBD,MAAKC,EAAA,CAAC,SAAiBC,EAAA,SAAS,OAAI,SAAA,SAAA,MAAA,CAAA,EAAmC,KAAK,OAAA,GAC/EC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAC,EAAqC,SAAlC,iCAA8B,EAAA,GACjCA,EAA0F,MAA1FC,EAA0FC,EAAtBJ,EAAA,SAAS,IAAI,EAAA,CAAA,EAExEA,EAAA,SAAS,OAAI,cAAtBF,EAEI,IAAAO,EAAA,CAAA,GAAAJ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFiC,kEAC2B,EAAA,EAAAC,EAAiB,YAAX,OAAI,EAAA,IAAO,WACjF,EAAA,CAAA,MACcF,EAAA,SAAS,OAAI,kBAA3BF,EAII,IAAAQ,EAAA,CAAA,GAAAL,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJ0C,QACxC,EAAA,EAAAC,EAAiB,YAAX,OAAI,EAAA,IAAO,oLAGvB,EAAA,CAAA,MACcF,EAAA,SAAS,OAAI,kBAA3BF,EAGI,IAAAS,EAAA,eAH0C,2CACL,EAAA,GAAAL,EAAsD,SAAA,KAAAE,EAA3CJ,EAAA,SAAS,YAAY,KAAI,IAAA,CAAA,EAAA,CAAA,gBAAkB,+DAE/F,EAAA,EAAA,IACcA,EAAA,WAAdF,EAEI,IAAAU,EAAA,CADFC,EAA4FC,EAAA,CAA/E,GAAE,SAAW,mBAAmBV,EAAA,KAAK,CAAA,EAAA,aAAK,IAAwB,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAAxB,2BAAwB,EAAA,CAAA,wBAEjFU,EAAA,EAAAb,EAAuF,MAA7E,2EAAyE,EAAA"}
+{"version":3,"file":"ConflictNote.vue_vue_type_script_setup_true_lang-BtSm_ZhU.js","sources":["../../src/composables/useDeploymentActions.ts","../../src/components/ConflictNote.vue"],"sourcesContent":["/**\n * Lifecycle actions for the open deployment — shared by the detail HEADER (Deploy, Verify) and the\n * Danger tab (Tear down, Forget).\n *\n * WHY THIS MOVED OUT OF THE DANGER TAB. Deploy is the primary action of the entire product, and it\n * lived behind a tab named \"Danger\" — three clicks deep, labelled as something to be afraid of.\n * Deploying and verifying a preview are routine and reversible; they belong in the header, visible\n * from every tab. What stays in Danger is what the name promises: teardown and forgetting.\n *\n * Module-level state, same pattern as `useDeployment`: exactly one deployment detail is open at a\n * time, and the header and the tab must see the SAME pending/conflict state — two components each\n * holding their own copy is how a button stays enabled while the other copy knows a job is running.\n */\nimport { computed, ref } from 'vue';\nimport { api, classifyConflict, problem, type Conflict } from '../api/client';\nimport type { ActionResponse, ConflictBody, JobsResponse } from '../api/types';\nimport { dep, isShared, varsQuery } from './useDeployment';\nimport { loadDeployments, state } from './useControlPlane';\nimport { settings } from './useSettings';\nimport { authState } from './useAuth';\nimport { toast } from './useToasts';\nimport { actionLabel } from './useFormat';\nimport { router } from '../router';\n\nexport type LifecycleAction = 'up' | 'verify' | 'down' | 'sleep' | 'wake';\n\nexport const pending = ref<'' | LifecycleAction | 'forget'>('');\nexport const actionError = ref('');\nexport const conflict = ref<Conflict | null>(null);\nexport const conflictJobId = ref('');\n\nexport const busy = computed(() => dep.detail?.busy === true);\n/**\n * True only when NOTHING can authenticate the caller. This predates accounts and used to check the\n * token alone — so a signed-in operator with no token pasted was told \"every action below will be\n * refused\" while their actions were succeeding. A session is a credential; the warning must know so.\n */\nexport const tokenMissing = computed(\n  () => state.health?.authEnforced === true && !settings.token && !authState.authed,\n);\n\n/**\n * The variables an action will send, as prose. Which variables are set decides which stack is\n * touched, so the NAMES are worth stating — the URL-encoded query string they become is not.\n */\nexport const varsSummary = computed(() => {\n  const names = dep.vars.filter((v) => v.k).map((v) => v.k);\n  // NOT \"no variables\": with none set here the server resolves the ones stored with the deployment,\n  // and claiming otherwise would have an operator hunting for variables that are already in place.\n  return names.length\n    ? `Sending ${names.join(', ')} with every action.`\n    : 'Using the variables saved with this deployment.';\n});\n\n/** A disabled control must say why. This is the text that answers it. */\nexport function whyDisabled(action: LifecycleAction, forceArmed = false): string | undefined {\n  if (!dep.detail) return 'The spec has not resolved — the server cannot compute the stack name.';\n  // A teardown is NEVER blocked by a busy stack. `down` PREEMPTS on the server — it cancels the\n  // running job, drops the one queued behind it, and then runs — so disabling the button here\n  // would be this app refusing the one action the server promises will not wait.\n  if (busy.value && action !== 'down') {\n    // Why DISABLED rather than \"it would queue\": the server WOULD accept it (a second job queues,\n    // a third replaces the second), but a person clicking Deploy twice on one screen means the\n    // first click, not a burst of pushes. The queue exists for CI; offering it here would just be\n    // a way to schedule a duplicate of what is already running. The escape hatch is named.\n    return (\n      `A job is already running or waiting on ${dep.detail.stack}. ` +\n      'Wait for it, or stop everything on the stack from the Danger tab.'\n    );\n  }\n  if (action === 'down' && isShared.value && !forceArmed) {\n    return `Type the stack name \"${dep.detail.stack}\" below to confirm a shared teardown.`;\n  }\n  if (action === 'sleep' && isShared.value) {\n    return 'A shared deployment cannot sleep — every preview that depends on it would go with it.';\n  }\n  if (action === 'sleep' && !dep.detail.compose) return 'This spec has no compose section — there is nothing to put to sleep.';\n  if (action === 'sleep' && dep.detail.asleep) return 'Already asleep.';\n  return undefined;\n}\n\nexport async function act(\n  action: LifecycleAction,\n  opts: { verify?: boolean; force?: boolean } = {},\n): Promise<void> {\n  if (!dep.detail) return;\n  pending.value = action;\n  actionError.value = '';\n  conflict.value = null;\n\n  const body =\n    action === 'down'\n      ? // `force` is only ever true for a shared deployment whose stack name was typed out in full.\n        { verify: opts.verify ?? true, force: opts.force ?? false }\n      : {};\n\n  const r = await api.post<ActionResponse & ConflictBody>(\n    `/api/deployments/${encodeURIComponent(dep.id)}/${action}${varsQuery.value}`,\n    body,\n  );\n  pending.value = '';\n\n  if (r.status === 202) {\n    const job = r.body.job;\n    if (job?.id) {\n      // The 202 says which it is. \"Started\" on a job that is only queued is the toast telling an\n      // operator their deploy is running when it has not begun — the exact confusion the queued\n      // state exists to remove.\n      const verb = job.state === 'queued' ? 'queued' : 'started';\n      toast('info', `${actionLabel(action)} ${verb} on ${job.stack}`, {\n        to: `/jobs/${encodeURIComponent(job.id)}`,\n        toLabel: 'Follow',\n      });\n      void loadDeployments();\n      void router.push(`/jobs/${encodeURIComponent(job.id)}`);\n      return;\n    }\n    actionError.value = 'The action was accepted, but the response carried nothing to follow.';\n    return;\n  }\n  if (r.status === 409) return onConflict(r.body);\n\n  actionError.value = problem(r, actionLabel(action).toLowerCase());\n  toast('error', `${actionLabel(action)} was refused.`);\n}\n\n/**\n * Classify on payload SHAPE (in `client.ts`), never on message text — then look for a running job\n * ONLY to offer a link. A busy stack is no longer a 409 (a second job queues); what is left in this\n * branch is a HOLD — a spec edit or a delete in progress — and \"docker did not answer\", which are\n * shape-identical, so neither is claimed. The server's message is printed verbatim. Never retry.\n */\nexport async function onConflict(body: ConflictBody): Promise<void> {\n  const c = classifyConflict(body);\n  conflict.value = c;\n  conflictJobId.value = '';\n\n  const stack = c.stack || dep.detail?.stack;\n  if (c.kind !== 'other' || !stack) return;\n  const jl = await api.get<JobsResponse>('/api/jobs');\n  const live = (jl.body.jobs ?? []).find((j) => j.state === 'running' && j.stack === stack);\n  if (live) conflictJobId.value = live.id;\n}\n\n/** Leaving the deployment must not carry a stale error onto the next one. */\nexport function resetActions(): void {\n  pending.value = '';\n  actionError.value = '';\n  conflict.value = null;\n  conflictJobId.value = '';\n}\n","<script setup lang=\"ts\">\n/**\n * A 409, explained.\n *\n * \"409\" on this API always means the same thing about consequences — **refused, and nothing was\n * started** — but four different things about the cause, and guessing wrong sends the operator\n * down the wrong path. The classification is done on payload SHAPE in `client.ts`, never on the\n * message text, and the server's own message is always printed verbatim underneath.\n *\n * Note what is deliberately NOT distinguished: \"a job is in flight\" and \"docker did not answer\"\n * are shape-identical, so this renders neither claim — it prints the message and offers a link to\n * a running job only when one demonstrably exists.\n */\nimport type { Conflict } from '../api/client';\n\ndefineProps<{ conflict: Conflict; jobId?: string }>();\n</script>\n\n<template>\n  <div class=\"banner\" :class=\"conflict.kind === 'shared' ? 'leaked' : 'info'\" role=\"alert\">\n    <b>Refused — nothing was started.</b>\n    <pre class=\"raw\" style=\"color: var(--fg-dim); max-height: 200px\">{{ conflict.text }}</pre>\n\n    <p v-if=\"conflict.kind === 'shared'\">\n      Type the stack name in the confirmation field above and press <code>down</code> again.\n    </p>\n    <p v-else-if=\"conflict.kind === 'containers'\">\n      Run <code>down</code> first. Forgetting the record now would orphan those containers beyond\n      the control plane's view: nothing left would know their stack name, their axes, or how to\n      tear them down.\n    </p>\n    <p v-else-if=\"conflict.kind === 'referenced'\">\n      These deployments still use this spec: <strong>{{ conflict.deployments.join(', ') }}</strong>.\n      Deleting it would leave them with no way to be torn down.\n    </p>\n    <p v-else-if=\"jobId\">\n      <RouterLink :to=\"`/jobs/${encodeURIComponent(jobId)}`\">Follow the running job →</RouterLink>\n    </p>\n    <p v-else>Nothing was retried. Wait for the current work to finish, then try again.</p>\n  </div>\n</template>\n"],"names":["pending","ref","actionError","conflict","conflictJobId","busy","computed","_a","dep","tokenMissing","state","settings","authState","varsSummary","names","v","whyDisabled","action","forceArmed","isShared","act","opts","body","r","api","varsQuery","job","verb","toast","actionLabel","loadDeployments","router","onConflict","problem","c","classifyConflict","stack","live","j","resetActions","_createElementBlock","_normalizeClass","__props","_cache","_createElementVNode","_hoisted_1","_toDisplayString","_hoisted_2","_hoisted_3","_hoisted_4","_hoisted_5","_createVNode","_component_RouterLink","_openBlock"],"mappings":"yPA0BO,MAAMA,EAAUC,EAAqC,EAAE,EACjDC,EAAcD,EAAI,EAAE,EACpBE,EAAWF,EAAqB,IAAI,EACpCG,EAAgBH,EAAI,EAAE,EAEtBI,EAAOC,EAAS,IAAA,OAAM,QAAAC,EAAAC,EAAI,SAAJ,YAAAD,EAAY,QAAS,GAAI,EAM/CE,EAAeH,EAC1B,WAAM,QAAAC,EAAAG,EAAM,SAAN,YAAAH,EAAc,gBAAiB,IAAQ,CAACI,EAAS,OAAS,CAACC,EAAU,OAC7E,EAMaC,EAAcP,EAAS,IAAM,CACxC,MAAMQ,EAAQN,EAAI,KAAK,OAAQO,GAAMA,EAAE,CAAC,EAAE,IAAKA,GAAMA,EAAE,CAAC,EAGxD,OAAOD,EAAM,OACT,WAAWA,EAAM,KAAK,IAAI,CAAC,sBAC3B,iDACN,CAAC,EAGM,SAASE,EAAYC,EAAyBC,EAAa,GAA2B,CAC3F,GAAI,CAACV,EAAI,OAAQ,MAAO,wEAIxB,GAAIH,EAAK,OAASY,IAAW,OAK3B,MACE,0CAA0CT,EAAI,OAAO,KAAK,sEAI9D,GAAIS,IAAW,QAAUE,EAAS,OAAS,CAACD,EAC1C,MAAO,wBAAwBV,EAAI,OAAO,KAAK,wCAEjD,GAAIS,IAAW,SAAWE,EAAS,MACjC,MAAO,wFAET,GAAIF,IAAW,SAAW,CAACT,EAAI,OAAO,QAAS,MAAO,uEACtD,GAAIS,IAAW,SAAWT,EAAI,OAAO,OAAQ,MAAO,iBAEtD,CAEA,eAAsBY,EACpBH,EACAI,EAA8C,GAC/B,CACf,GAAI,CAACb,EAAI,OAAQ,OACjBR,EAAQ,MAAQiB,EAChBf,EAAY,MAAQ,GACpBC,EAAS,MAAQ,KAEjB,MAAMmB,EACJL,IAAW,OAEP,CAAE,OAAQI,EAAK,QAAU,GAAM,MAAOA,EAAK,OAAS,EAAA,EACpD,CAAA,EAEAE,EAAI,MAAMC,EAAI,KAClB,oBAAoB,mBAAmBhB,EAAI,EAAE,CAAC,IAAIS,CAAM,GAAGQ,EAAU,KAAK,GAC1EH,CAAA,EAIF,GAFAtB,EAAQ,MAAQ,GAEZuB,EAAE,SAAW,IAAK,CACpB,MAAMG,EAAMH,EAAE,KAAK,IACnB,GAAIG,GAAA,MAAAA,EAAK,GAAI,CAIX,MAAMC,EAAOD,EAAI,QAAU,SAAW,SAAW,UACjDE,EAAM,OAAQ,GAAGC,EAAYZ,CAAM,CAAC,IAAIU,CAAI,OAAOD,EAAI,KAAK,GAAI,CAC9D,GAAI,SAAS,mBAAmBA,EAAI,EAAE,CAAC,GACvC,QAAS,QAAA,CACV,EACII,EAAA,EACAC,EAAO,KAAK,SAAS,mBAAmBL,EAAI,EAAE,CAAC,EAAE,EACtD,MACF,CACAxB,EAAY,MAAQ,uEACpB,MACF,CACA,GAAIqB,EAAE,SAAW,IAAK,OAAOS,EAAWT,EAAE,IAAI,EAE9CrB,EAAY,MAAQ+B,EAAQV,EAAGM,EAAYZ,CAAM,EAAE,aAAa,EAChEW,EAAM,QAAS,GAAGC,EAAYZ,CAAM,CAAC,eAAe,CACtD,CAQA,eAAsBe,EAAWV,EAAmC,OAClE,MAAMY,EAAIC,EAAiBb,CAAI,EAC/BnB,EAAS,MAAQ+B,EACjB9B,EAAc,MAAQ,GAEtB,MAAMgC,EAAQF,EAAE,SAAS3B,EAAAC,EAAI,SAAJ,YAAAD,EAAY,OACrC,GAAI2B,EAAE,OAAS,SAAW,CAACE,EAAO,OAElC,MAAMC,IADK,MAAMb,EAAI,IAAkB,WAAW,GACjC,KAAK,MAAQ,CAAA,GAAI,KAAMc,GAAMA,EAAE,QAAU,WAAaA,EAAE,QAAUF,CAAK,EACpFC,IAAMjC,EAAc,MAAQiC,EAAK,GACvC,CAGO,SAASE,GAAqB,CACnCvC,EAAQ,MAAQ,GAChBE,EAAY,MAAQ,GACpBC,EAAS,MAAQ,KACjBC,EAAc,MAAQ,EACxB,8OCnIEoC,EAoBM,MAAA,CApBD,MAAKC,EAAA,CAAC,SAAiBC,EAAA,SAAS,OAAI,SAAA,SAAA,MAAA,CAAA,EAAmC,KAAK,OAAA,GAC/EC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAC,EAAqC,SAAlC,iCAA8B,EAAA,GACjCA,EAA0F,MAA1FC,EAA0FC,EAAtBJ,EAAA,SAAS,IAAI,EAAA,CAAA,EAExEA,EAAA,SAAS,OAAI,cAAtBF,EAEI,IAAAO,EAAA,CAAA,GAAAJ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFiC,kEAC2B,EAAA,EAAAC,EAAiB,YAAX,OAAI,EAAA,IAAO,WACjF,EAAA,CAAA,MACcF,EAAA,SAAS,OAAI,kBAA3BF,EAII,IAAAQ,EAAA,CAAA,GAAAL,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAJ0C,QACxC,EAAA,EAAAC,EAAiB,YAAX,OAAI,EAAA,IAAO,oLAGvB,EAAA,CAAA,MACcF,EAAA,SAAS,OAAI,kBAA3BF,EAGI,IAAAS,EAAA,eAH0C,2CACL,EAAA,GAAAL,EAAsD,SAAA,KAAAE,EAA3CJ,EAAA,SAAS,YAAY,KAAI,IAAA,CAAA,EAAA,CAAA,gBAAkB,+DAE/F,EAAA,EAAA,IACcA,EAAA,WAAdF,EAEI,IAAAU,EAAA,CADFC,EAA4FC,EAAA,CAA/E,GAAE,SAAW,mBAAmBV,EAAA,KAAK,CAAA,EAAA,aAAK,IAAwB,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAAxB,2BAAwB,EAAA,CAAA,wBAEjFU,EAAA,EAAAb,EAAuF,MAA7E,2EAAyE,EAAA"}

package/dist/assets/ControlView-G6A_-Og_.js

@@ -0,0 +1,2 @@
+import{d as X,x as z,c as o,a as t,f as l,e as k,w as h,_ as Z,z as B,g as d,F as f,r as U,t as i,u as y,a2 as M,i as N,v as O,a3 as ee,E as S,R as te,j as u,k as se,o as n,D as ae,M as ne,H as le,p as v,C as w,U as p}from"./index-BzdU0RNE.js";import{_ as $}from"./ActionButton.vue_vue_type_script_setup_true_lang-CB94t3xm.js";import{_ as oe}from"./ErrorNote.vue_vue_type_script_setup_true_lang-Imao12aK.js";import{_ as ie}from"./HelpModal.vue_vue_type_script_setup_true_lang-CjoiZrMf.js";import{_ as re}from"./RefreshButton.vue_vue_type_script_setup_true_lang-C5aXqJdu.js";import{_ as de}from"./SkeletonList.vue_vue_type_script_setup_true_lang-DMvuIcZF.js";import"./DialogTrigger-BlkbgxBa.js";import"./Teleport-DwPgOPS3.js";const ue={class:"page-head"},pe={class:"sub"},me={key:2,class:"panel"},ce={key:0,class:"banner warn"},ve={key:1,class:"cards"},ke={class:"stagger"},he={class:"name","data-label":"service"},fe={key:0,class:"badge info",title:"the container answering this page"},ye={"data-label":"image",class:"mono mute"},ge={"data-label":"state"},we={key:0,class:"mute",style:{"font-size":"var(--t-sm)"}},be={"data-label":"restarts"},_e={key:0,class:"badge failed",title:"The kernel killed it for exceeding its memory limit. Its last restart was not a crash — it was this."},Ce={"data-label":"memory",class:"mono mute"},Re={"data-label":"started",class:"mute"},Te={"data-label":""},$e={key:1,class:"mute",style:{"font-size":"var(--t-sm)"},title:"The server refuses to restart the container answering this request. Restart it from the host."},Ae={key:2,class:"mute",style:{"font-size":"var(--t-sm)"},title:"No compose service label, so the restart API cannot address it."},De={key:2,class:"mute"},xe={key:3,class:"panel"},Ie={class:"phead"},Ee={class:"mute",style:{"font-size":"var(--t-sm)"}},Me={class:"mono"},Se={class:"dim"},Pe={class:"kvlist",style:{margin:"var(--s3) 0"}},Ve={class:"k mono"},ze={class:"k mono"},Be={class:"v"},Ne={class:"mute"},Oe=["disabled","onClick"],je={key:0,class:"row",style:{"align-items":"flex-end",gap:"var(--s3)","flex-wrap":"wrap"}},Fe={class:"field inline",style:{flex:"1 1 18rem"}},Le={key:4,class:"panel"},We={class:"phead"},Ke={class:"dim"},Ue={class:"kvlist",style:{margin:"var(--s3) 0"}},qe={class:"v mono"},Ge={class:"v"},He={class:"v"},Je={key:0,class:"badge warn"},Ye={key:0,class:"row"},Qe={class:"dim",style:{"margin-top":"var(--s3)"}},Xe={class:"field"},Ze={class:"field"},et={key:2,class:"mute"},tt={class:"row",style:{"margin-top":"var(--s4)","align-items":"center"}},st={key:3,class:"mute",style:{"margin-top":"var(--s2)"}},ct=X({__name:"ControlView",setup(at){const b=u(null),_=u(""),j=u(!1);async function P(){const s=await v.get("/api/control/runtime");if(j.value=!0,!s.ok){_.value=w(s,"read the control stack");return}_.value="",b.value={...s.body,containers:s.body.containers??[]}}z(P,1e4);const A=u("");async function q(s){A.value=s;const e=await v.post("/api/control/restart",{service:s});if(A.value="",!e.ok){p("error",w(e,`restart ${s}`));return}p("ok",`Restarting ${e.body.container} — back in a few seconds.`),await P()}function G(s){return s===null?"unlimited":s>=1024*1024*1024?`${(s/(1024*1024*1024)).toFixed(1)} GiB`:`${Math.round(s/(1024*1024))} MiB`}const m=u(null),g=u(""),C=u(!1);async function F(){const s=await v.get("/api/domains");s.ok&&(m.value={...s.body,domains:s.body.domains??[]})}z(F,3e4);async function L(s){C.value=!0;const e=await v.put("/api/domains",{domains:s});if(C.value=!1,!e.ok){p("error",w(e,"save the domains"));return}g.value="",p("ok","Saved — Traefik picks these up within a couple of seconds."),await Promise.all([F(),D()])}const W=()=>{var s;return L([...((s=m.value)==null?void 0:s.domains)??[],g.value.trim()])},H=s=>{var e;return L((((e=m.value)==null?void 0:e.domains)??[]).filter(a=>a!==s))},r=u(null);async function D(){const s=await v.get("/api/tls");s.ok&&(r.value=s.body)}z(D,3e4);const V=se(()=>{var s;return(s=r.value)!=null&&s.wildcard?Math.floor((r.value.wildcard.notAfter-Date.now())/864e5):null}),R=u(""),T=u(""),x=u(!1);async function J(){x.value=!0;const s=await v.put("/api/tls/wildcard",{cert:R.value,key:T.value});if(x.value=!1,!s.ok){p("error",w(s,"store the wildcard"));return}R.value="",T.value="",p("ok","Wildcard stored — new deploys inherit it now. Redeploy the rest below."),c.value=null,await D()}const I=u(!1);async function Y(){I.value=!0;const s=await v.del("/api/tls/wildcard");if(I.value=!1,!s.ok){p("error",w(s,"remove the wildcard"));return}p("ok","Removed — back to Traefik-native resolution. Redeploy the stacks below."),c.value=null,await D()}const E=u(!1),c=u(null);async function Q(){E.value=!0;const s=await v.post("/api/tls/redeploy",{});if(E.value=!1,!s.ok){p("error",w(s,"redeploy the stacks"));return}c.value=s.body,p("ok",`Redeploying ${s.body.started.length} stack${s.body.started.length===1?"":"s"}; ${s.body.skipped.length} skipped.`)}return(s,e)=>(n(),o("div",null,[t("div",ue,[t("div",null,[t("h1",null,[e[5]||(e[5]=l(" Control stack ",-1)),k(ie,{title:"Why restarts are the headline here"},{default:h(()=>[...e[4]||(e[4]=[t("p",null,[t("b",null,"A restarting Traefik quietly breaks TLS issuance."),l(" Its certificate challenges live in process memory, so every restart abandons whatever was mid-flight — the failed attempts still count against Let's Encrypt's weekly limits, and every container on this page keeps reporting "),t("code",null,"running"),l(". A climbing restart count with an "),t("b",null,"OOM"),l(" badge is that story told in two cells. ")],-1),t("p",null,[t("b",null,"Restart is the only action, and never for pstack."),l(" The server refuses to restart its own container — it is the process answering the request, and if its image were broken, the thing that could repair this host would die with it. From the host: "),t("code",null,"docker compose -p pstack-control restart pstack"),l(". ")],-1),t("p",null,[t("b",null,"Restarting traefik drops every connection for a few seconds"),l(" — every preview, this page included. The containers themselves keep running; only routing blinks. ")],-1)])]),_:1})]),t("div",pe,[e[7]||(e[7]=l(" The machinery previews run behind, with the counters that catch it misbehaving ",-1)),k(Z,{label:"where this comes from"},{default:h(()=>[...e[6]||(e[6]=[t("code",null,"docker inspect",-1),l(" over the control project's containers, every ten seconds. Restart counts and OOM flags are docker's own, since this process last recreated nothing. ",-1)])]),_:1})])]),e[8]||(e[8]=t("span",{class:"grow"},null,-1)),k(re,{run:P})]),_.value?(n(),B(oe,{key:0,text:_.value,title:"Could not read the control stack."},null,8,["text"])):d("",!0),!j.value&&!_.value?(n(),B(de,{key:1,rows:3})):b.value?(n(),o("section",me,[e[12]||(e[12]=t("div",{class:"phead"},[t("h2",{class:"section"},"Containers")],-1)),b.value.reachable?b.value.containers.length?(n(),o("table",ve,[e[11]||(e[11]=t("thead",null,[t("tr",null,[t("th",null,"Service"),t("th",null,"Image"),t("th",null,"State"),t("th",null,"Restarts"),t("th",null,"Memory limit"),t("th",null,"Started"),t("th")])],-1)),t("tbody",ke,[(n(!0),o(f,null,U(b.value.containers,(a,K)=>(n(),o("tr",{key:a.id,style:ae({"--i":K})},[t("td",he,[l(i(a.service||a.name)+" ",1),a.service==="pstack"?(n(),o("span",fe,"this API")):d("",!0)]),t("td",ye,i(a.image),1),t("td",ge,[t("span",{class:S(a.state==="running"?"s-ok":"s-failed")},i(y(ne)(a.state)),3),a.health?(n(),o("span",we," · "+i(a.health),1)):d("",!0)]),t("td",be,[t("span",{class:S(a.restartCount>0?"badge warn":"mute")},i(a.restartCount),3),a.oomKilled?(n(),o("span",_e,"OOM")):d("",!0)]),t("td",Ce,i(G(a.memLimitBytes)),1),t("td",Re,i(a.startedAt?y(le)(a.startedAt):"—"),1),t("td",Te,[a.service&&a.service!=="pstack"?(n(),B($,{key:0,variant:"ghost",pending:A.value===a.service,disabled:A.value!=="",onClick:nt=>q(a.service)},{default:h(()=>[...e[10]||(e[10]=[l(" Restart ",-1)])]),_:1},8,["pending","disabled","onClick"])):a.service==="pstack"?(n(),o("span",$e," host-only ")):(n(),o("span",Ae," — "))])],4))),128))])])):(n(),o("p",De," Docker lists no control containers — on a host serving this page, that means the project label changed, not that nothing runs. ")):(n(),o("div",ce,[...e[9]||(e[9]=[t("b",null,"Docker did not answer.",-1),t("p",null,"Nothing about the control stack is known right now — which is not the same as it being down.",-1)])]))])):d("",!0),m.value?(n(),o("section",xe,[t("div",Ie,[e[14]||(e[14]=t("h2",{class:"section"},"Domains",-1)),e[15]||(e[15]=t("span",{class:"grow"},null,-1)),t("span",Ee,[e[13]||(e[13]=l("primary ",-1)),t("span",Me,i(m.value.primary||"—"),1)])]),t("p",Se,i(m.value.note),1),t("ul",Pe,[t("li",null,[t("span",Ve,i(m.value.primary||"not set"),1),e[16]||(e[16]=t("span",{class:"v mute"}," primary — its routers are labels on the pstack container, so it keeps working whatever else changes here. It cannot be removed from this page. ",-1))]),(n(!0),o(f,null,U(m.value.domains,a=>(n(),o("li",{key:a},[t("span",ze,i(a),1),t("span",Be,[t("span",Ne,"control."+i(a)+" · api."+i(a)+" · wakes sleeping previews",1),y(M)("maintainer")?(n(),o("button",{key:0,class:"sm ghost",disabled:C.value,onClick:K=>H(a)},"Remove",8,Oe)):d("",!0)])]))),128))]),y(M)("maintainer")?(n(),o("div",je,[t("div",Fe,[e[17]||(e[17]=t("label",{for:"new-domain"},"Add a domain",-1)),N(t("input",{id:"new-domain","onUpdate:modelValue":e[0]||(e[0]=a=>g.value=a),class:"mono",placeholder:"preview.new-company.com",spellcheck:"false",onKeyup:e[1]||(e[1]=ee(a=>g.value.trim()&&W(),["enter"]))},null,544),[[O,g.value]])]),k($,{variant:"primary",pending:C.value,disabled:C.value||!g.value.trim(),onClick:W},{default:h(()=>[...e[18]||(e[18]=[l(" Add ",-1)])]),_:1},8,["pending","disabled"])])):d("",!0),e[19]||(e[19]=t("p",{class:"mute",style:{"font-size":"var(--t-sm)","margin-top":"var(--s2)"}},[l(" Adding a domain only makes this host "),t("b",null,"serve and wake"),l(" names under it. To move a deployment, set "),t("code",null,"PREVIEW_DOMAIN"),l(" in its variables and redeploy it — one stack at a time, and rolling back is that same stack. ")],-1))])):d("",!0),r.value?(n(),o("section",Le,[t("div",We,[e[20]||(e[20]=t("h2",{class:"section"},"Certificates",-1)),e[21]||(e[21]=t("span",{class:"grow"},null,-1)),t("span",{class:S(["badge",r.value.mode==="dns-persist-01"?"ok":"info"])},i(r.value.mode),3)]),t("p",Ke,i(r.value.note),1),r.value.wildcard?(n(),o(f,{key:0},[t("ul",Ue,[t("li",null,[e[22]||(e[22]=t("span",{class:"k"},"Covers",-1)),t("span",qe,i(r.value.wildcard.domains.join(", ")),1)]),t("li",null,[e[23]||(e[23]=t("span",{class:"k"},"Valid until",-1)),t("span",Ge,[l(i(y(te)(r.value.wildcard.notAfter))+" ",1),t("span",{class:S(V.value!==null&&V.value<21?"badge failed":"mute")},i(V.value)+" days left",3)])]),t("li",null,[e[24]||(e[24]=t("span",{class:"k"},"Issuer",-1)),t("span",He,[l(i(r.value.wildcard.issuer||"unnamed")+" ",1),r.value.wildcard.selfSigned?(n(),o("span",Je,"self-signed — browsers will warn")):d("",!0)])])]),y(M)("admin")?(n(),o("div",Ye,[k($,{variant:"danger",pending:I.value,disabled:I.value,onClick:Y},{default:h(()=>[...e[25]||(e[25]=[l(" Remove wildcard ",-1)])]),_:1},8,["pending","disabled"]),e[26]||(e[26]=t("span",{class:"mute",style:{"font-size":"var(--t-sm)"}}," Stacks deployed under it then have no certificate until redeployed. ",-1))])):d("",!0)],64)):d("",!0),y(M)("admin")?(n(),o(f,{key:1},[t("p",Qe,[r.value.wildcard?(n(),o(f,{key:0},[e[27]||(e[27]=t("b",null,"Renew or replace it.",-1)),e[28]||(e[28]=l(" Paste the new pair — it overwrites both halves in place and Traefik picks it up immediately. Nothing needs redeploying for a renewal: the router labels do not change, only the certificate behind them. ",-1))],64)):(n(),o(f,{key:1},[e[29]||(e[29]=t("b",null,"Bring your own wildcard.",-1)),e[30]||(e[30]=l(" Paste a certificate for ",-1)),e[31]||(e[31]=t("span",{class:"mono"},"*.your-domain",-1)),e[32]||(e[32]=l(" and its key — previews stop ordering per-hostname certificates the moment it lands, with no re-init and no Traefik restart. ",-1))],64)),e[33]||(e[33]=l(" The key is stored 0600 and nothing ever returns it. ",-1))]),t("div",Xe,[e[34]||(e[34]=t("label",{for:"tls-cert"},"Certificate (PEM, leaf first, chain after)",-1)),N(t("textarea",{id:"tls-cert","onUpdate:modelValue":e[2]||(e[2]=a=>R.value=a),rows:"5",class:"mono",spellcheck:"false",placeholder:"-----BEGIN CERTIFICATE-----"},null,512),[[O,R.value]])]),t("div",Ze,[e[35]||(e[35]=t("label",{for:"tls-key"},"Private key (PEM)",-1)),N(t("textarea",{id:"tls-key","onUpdate:modelValue":e[3]||(e[3]=a=>T.value=a),rows:"4",class:"mono",spellcheck:"false",placeholder:"-----BEGIN PRIVATE KEY-----"},null,512),[[O,T.value]])]),k($,{variant:"primary",pending:x.value,disabled:x.value||!R.value||!T.value,onClick:J},{default:h(()=>[l(i(r.value.wildcard?"Replace wildcard":"Store wildcard"),1)]),_:1},8,["pending","disabled"])],64)):r.value.wildcard?d("",!0):(n(),o("p",et," Storing a wildcard is an admin's: it changes what every hostname on this host presents. ")),t("div",tt,[k($,{pending:E.value,disabled:E.value,onClick:Q},{default:h(()=>[...e[36]||(e[36]=[l(" Redeploy all stacks ",-1)])]),_:1},8,["pending","disabled"]),e[37]||(e[37]=t("span",{class:"mute",style:{"font-size":"var(--t-sm)"}}," Router labels are stamped at deploy time — run this once after changing the mode. Asleep stacks are skipped; they pick the new labels up when they wake. ",-1))]),c.value?(n(),o("p",st,[l(" Started "+i(c.value.started.length)+" · skipped "+i(c.value.skipped.length),1),c.value.skipped.length?(n(),o(f,{key:0},[l(" ("+i(c.value.skipped.map(a=>`${a.id}: ${a.reason}`).join("; "))+")",1)],64)):d("",!0),e[38]||(e[38]=l(" — watch them under Jobs. ",-1))])):d("",!0)])):d("",!0)]))}});export{ct as default};
+//# sourceMappingURL=ControlView-G6A_-Og_.js.map

package/dist/assets/ControlView-G6A_-Og_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlView-G6A_-Og_.js","sources":["../../src/views/ControlView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The control stack as an operator debugs it — traefik, pstack, the optional advanced UI.\n *\n * The dashboard's card answers \"is it up\"; this page answers \"why did it restart\". The two columns\n * that earn it are RESTARTS and OOM: a Traefik restart silently wipes its in-memory certificate\n * challenges, so TLS stops issuing while every state here still reads `running`. That incident was\n * once diagnosed from a default certificate's timestamp; now it is a red badge on this table.\n *\n * One action, one refusal: any control service can be restarted except `pstack` itself — the\n * server refuses its own container by name, whoever asks, and this page does not offer it.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport type { ControlRuntime, DomainsStatus, TlsRedeploy, TlsStatus } from '../api/types';\nimport { usePolling } from '../composables/usePolling';\nimport { can } from '../composables/useAuth';\nimport { ago, sentence, stamp } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport HelpModal from '../components/HelpModal.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\n\nconst view = ref<ControlRuntime | null>(null);\nconst error = ref('');\nconst loaded = ref(false);\n\nasync function load(): Promise<void> {\n  const r = await api.get<ControlRuntime>('/api/control/runtime');\n  loaded.value = true;\n  if (!r.ok) {\n    error.value = problem(r, 'read the control stack');\n    return;\n  }\n  error.value = '';\n  view.value = { ...r.body, containers: r.body.containers ?? [] };\n}\nusePolling(load, 10_000);\n\nconst restarting = ref('');\nasync function restart(service: string): Promise<void> {\n  restarting.value = service;\n  const r = await api.post<{ container: string }>('/api/control/restart', { service });\n  restarting.value = '';\n  if (!r.ok) {\n    toast('error', problem(r, `restart ${service}`));\n    return;\n  }\n  toast('ok', `Restarting ${r.body.container} — back in a few seconds.`);\n  await load();\n}\n\n/** 268435456 → \"256 MiB\"; null → \"unlimited\" (the server normalizes docker's 0 to null). */\nfunction mem(bytes: number | null): string {\n  if (bytes === null) return 'unlimited';\n  if (bytes >= 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024 * 1024)).toFixed(1)} GiB`;\n  return `${Math.round(bytes / (1024 * 1024))} MiB`;\n}\n\n// ── the hostnames this host answers on ────────────────────────────────────────────────────────────\nconst domains = ref<DomainsStatus | null>(null);\nconst newDomain = ref('');\nconst savingDomains = ref(false);\n\nasync function loadDomains(): Promise<void> {\n  const r = await api.get<DomainsStatus>('/api/domains');\n  if (r.ok) domains.value = { ...r.body, domains: r.body.domains ?? [] };\n}\nusePolling(loadDomains, 30_000);\n\n/** The list replaces what is stored, so add and remove are the same call. */\nasync function saveDomains(next: string[]): Promise<void> {\n  savingDomains.value = true;\n  const r = await api.put<DomainsStatus>('/api/domains', { domains: next });\n  savingDomains.value = false;\n  if (!r.ok) {\n    toast('error', problem(r, 'save the domains'));\n    return;\n  }\n  newDomain.value = '';\n  toast('ok', 'Saved — Traefik picks these up within a couple of seconds.');\n  await Promise.all([loadDomains(), loadTls()]);\n}\n\nconst addDomain = () => saveDomains([...(domains.value?.domains ?? []), newDomain.value.trim()]);\nconst removeDomain = (d: string) => saveDomains((domains.value?.domains ?? []).filter((x) => x !== d));\n\n// ── the certificate mode ──────────────────────────────────────────────────────────────────────────\nconst tls = ref<TlsStatus | null>(null);\nasync function loadTls(): Promise<void> {\n  const r = await api.get<TlsStatus>('/api/tls');\n  if (r.ok) tls.value = r.body;\n}\nusePolling(loadTls, 30_000);\n\nconst daysLeft = computed(() => {\n  if (!tls.value?.wildcard) return null;\n  return Math.floor((tls.value.wildcard.notAfter - Date.now()) / 86_400_000);\n});\n\nconst certDraft = ref('');\nconst keyDraft = ref('');\nconst storing = ref(false);\nasync function storeWildcard(): Promise<void> {\n  storing.value = true;\n  const r = await api.put<{ wildcard: TlsWildcardShape; note: string }>('/api/tls/wildcard', {\n    cert: certDraft.value,\n    key: keyDraft.value,\n  });\n  storing.value = false;\n  if (!r.ok) {\n    toast('error', problem(r, 'store the wildcard'));\n    return;\n  }\n  certDraft.value = '';\n  keyDraft.value = '';\n  toast('ok', 'Wildcard stored — new deploys inherit it now. Redeploy the rest below.');\n  redeployed.value = null; // that summary described a run under the previous mode\n  await loadTls();\n}\ntype TlsWildcardShape = NonNullable<TlsStatus['wildcard']>;\n\nconst removing = ref(false);\nasync function removeWildcard(): Promise<void> {\n  removing.value = true;\n  const r = await api.del<{ note: string }>('/api/tls/wildcard');\n  removing.value = false;\n  if (!r.ok) {\n    toast('error', problem(r, 'remove the wildcard'));\n    return;\n  }\n  toast('ok', 'Removed — back to Traefik-native resolution. Redeploy the stacks below.');\n  redeployed.value = null;\n  await loadTls();\n}\n\nconst redeploying = ref(false);\nconst redeployed = ref<TlsRedeploy | null>(null);\nasync function redeployAll(): Promise<void> {\n  redeploying.value = true;\n  const r = await api.post<TlsRedeploy>('/api/tls/redeploy', {});\n  redeploying.value = false;\n  if (!r.ok) {\n    toast('error', problem(r, 'redeploy the stacks'));\n    return;\n  }\n  redeployed.value = r.body;\n  toast('ok', `Redeploying ${r.body.started.length} stack${r.body.started.length === 1 ? '' : 's'}; ${r.body.skipped.length} skipped.`);\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>\n          Control stack\n          <HelpModal title=\"Why restarts are the headline here\">\n            <p>\n              <b>A restarting Traefik quietly breaks TLS issuance.</b> Its certificate challenges\n              live in process memory, so every restart abandons whatever was mid-flight — the failed\n              attempts still count against Let's Encrypt's weekly limits, and every container on\n              this page keeps reporting <code>running</code>. A climbing restart count with an\n              <b>OOM</b> badge is that story told in two cells.\n            </p>\n            <p>\n              <b>Restart is the only action, and never for pstack.</b> The server refuses to restart\n              its own container — it is the process answering the request, and if its image were\n              broken, the thing that could repair this host would die with it. From the host:\n              <code>docker compose -p pstack-control restart pstack</code>.\n            </p>\n            <p>\n              <b>Restarting traefik drops every connection for a few seconds</b> — every preview,\n              this page included. The containers themselves keep running; only routing blinks.\n            </p>\n          </HelpModal>\n        </h1>\n        <div class=\"sub\">\n          The machinery previews run behind, with the counters that catch it misbehaving\n          <InfoHint label=\"where this comes from\">\n            <code>docker inspect</code> over the control project's containers, every ten seconds.\n            Restart counts and OOM flags are docker's own, since this process last recreated nothing.\n          </InfoHint>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"error\" :text=\"error\" title=\"Could not read the control stack.\" />\n\n    <SkeletonList v-if=\"!loaded && !error\" :rows=\"3\" />\n\n    <section v-else-if=\"view\" class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Containers</h2>\n      </div>\n\n      <!-- Unknown is not \"empty\": a dead docker means NOTHING here is known. -->\n      <div v-if=\"!view.reachable\" class=\"banner warn\">\n        <b>Docker did not answer.</b>\n        <p>Nothing about the control stack is known right now — which is not the same as it being down.</p>\n      </div>\n      <table v-else-if=\"view.containers.length\" class=\"cards\">\n        <thead>\n          <tr>\n            <th>Service</th>\n            <th>Image</th>\n            <th>State</th>\n            <th>Restarts</th>\n            <th>Memory limit</th>\n            <th>Started</th>\n            <th></th>\n          </tr>\n        </thead>\n        <tbody class=\"stagger\">\n          <tr v-for=\"(c, i) in view.containers\" :key=\"c.id\" :style=\"{ '--i': i }\">\n            <td class=\"name\" data-label=\"service\">\n              {{ c.service || c.name }}\n              <span v-if=\"c.service === 'pstack'\" class=\"badge info\" title=\"the container answering this page\">this API</span>\n            </td>\n            <td data-label=\"image\" class=\"mono mute\">{{ c.image }}</td>\n            <td data-label=\"state\">\n              <span :class=\"c.state === 'running' ? 's-ok' : 's-failed'\">{{ sentence(c.state) }}</span>\n              <span v-if=\"c.health\" class=\"mute\" style=\"font-size: var(--t-sm)\"> · {{ c.health }}</span>\n            </td>\n            <td data-label=\"restarts\">\n              <span :class=\"c.restartCount > 0 ? 'badge warn' : 'mute'\">{{ c.restartCount }}</span>\n              <span\n                v-if=\"c.oomKilled\"\n                class=\"badge failed\"\n                title=\"The kernel killed it for exceeding its memory limit. Its last restart was not a crash — it was this.\"\n                >OOM</span\n              >\n            </td>\n            <td data-label=\"memory\" class=\"mono mute\">{{ mem(c.memLimitBytes) }}</td>\n            <td data-label=\"started\" class=\"mute\">{{ c.startedAt ? ago(c.startedAt) : '—' }}</td>\n            <td data-label=\"\">\n              <ActionButton\n                v-if=\"c.service && c.service !== 'pstack'\"\n                variant=\"ghost\"\n                :pending=\"restarting === c.service\"\n                :disabled=\"restarting !== ''\"\n                @click=\"restart(c.service)\"\n              >\n                Restart\n              </ActionButton>\n              <span\n                v-else-if=\"c.service === 'pstack'\"\n                class=\"mute\"\n                style=\"font-size: var(--t-sm)\"\n                title=\"The server refuses to restart the container answering this request. Restart it from the host.\"\n              >\n                host-only\n              </span>\n              <span\n                v-else\n                class=\"mute\"\n                style=\"font-size: var(--t-sm)\"\n                title=\"No compose service label, so the restart API cannot address it.\"\n              >\n                —\n              </span>\n            </td>\n          </tr>\n        </tbody>\n      </table>\n      <p v-else class=\"mute\">\n        Docker lists no control containers — on a host serving this page, that means the project\n        label changed, not that nothing runs.\n      </p>\n    </section>\n\n    <!-- ============================ the hostnames ============================ -->\n    <section v-if=\"domains\" class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Domains</h2>\n        <span class=\"grow\" />\n        <span class=\"mute\" style=\"font-size: var(--t-sm)\">primary <span class=\"mono\">{{ domains.primary || '—' }}</span></span>\n      </div>\n\n      <p class=\"dim\">{{ domains.note }}</p>\n\n      <ul class=\"kvlist\" style=\"margin: var(--s3) 0\">\n        <li>\n          <span class=\"k mono\">{{ domains.primary || 'not set' }}</span>\n          <span class=\"v mute\">\n            primary — its routers are labels on the pstack container, so it keeps working whatever\n            else changes here. It cannot be removed from this page.\n          </span>\n        </li>\n        <li v-for=\"d in domains.domains\" :key=\"d\">\n          <span class=\"k mono\">{{ d }}</span>\n          <span class=\"v\">\n            <span class=\"mute\">control.{{ d }} · api.{{ d }} · wakes sleeping previews</span>\n            <button v-if=\"can('maintainer')\" class=\"sm ghost\" :disabled=\"savingDomains\" @click=\"removeDomain(d)\">Remove</button>\n          </span>\n        </li>\n      </ul>\n\n      <div v-if=\"can('maintainer')\" class=\"row\" style=\"align-items: flex-end; gap: var(--s3); flex-wrap: wrap\">\n        <div class=\"field inline\" style=\"flex: 1 1 18rem\">\n          <label for=\"new-domain\">Add a domain</label>\n          <input\n            id=\"new-domain\"\n            v-model=\"newDomain\"\n            class=\"mono\"\n            placeholder=\"preview.new-company.com\"\n            spellcheck=\"false\"\n            @keyup.enter=\"newDomain.trim() && addDomain()\"\n          />\n        </div>\n        <ActionButton variant=\"primary\" :pending=\"savingDomains\" :disabled=\"savingDomains || !newDomain.trim()\" @click=\"addDomain\">\n          Add\n        </ActionButton>\n      </div>\n      <p class=\"mute\" style=\"font-size: var(--t-sm); margin-top: var(--s2)\">\n        Adding a domain only makes this host <b>serve and wake</b> names under it. To move a\n        deployment, set <code>PREVIEW_DOMAIN</code> in its variables and redeploy it — one stack at a\n        time, and rolling back is that same stack.\n      </p>\n    </section>\n\n    <!-- ============================ the certificate mode ============================ -->\n    <section v-if=\"tls\" class=\"panel\">\n      <div class=\"phead\">\n        <h2 class=\"section\">Certificates</h2>\n        <span class=\"grow\" />\n        <span class=\"badge\" :class=\"tls.mode === 'dns-persist-01' ? 'ok' : 'info'\">{{ tls.mode }}</span>\n      </div>\n\n      <p class=\"dim\">{{ tls.note }}</p>\n\n      <template v-if=\"tls.wildcard\">\n        <ul class=\"kvlist\" style=\"margin: var(--s3) 0\">\n          <li>\n            <span class=\"k\">Covers</span>\n            <span class=\"v mono\">{{ tls.wildcard.domains.join(', ') }}</span>\n          </li>\n          <li>\n            <span class=\"k\">Valid until</span>\n            <span class=\"v\">\n              {{ stamp(tls.wildcard.notAfter) }}\n              <span :class=\"daysLeft !== null && daysLeft < 21 ? 'badge failed' : 'mute'\"> {{ daysLeft }} days left</span>\n            </span>\n          </li>\n          <li>\n            <span class=\"k\">Issuer</span>\n            <span class=\"v\">\n              {{ tls.wildcard.issuer || 'unnamed' }}\n              <span v-if=\"tls.wildcard.selfSigned\" class=\"badge warn\">self-signed — browsers will warn</span>\n            </span>\n          </li>\n        </ul>\n        <div v-if=\"can('admin')\" class=\"row\">\n          <ActionButton variant=\"danger\" :pending=\"removing\" :disabled=\"removing\" @click=\"removeWildcard\">\n            Remove wildcard\n          </ActionButton>\n          <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n            Stacks deployed under it then have no certificate until redeployed.\n          </span>\n        </div>\n      </template>\n\n      <template v-if=\"can('admin')\">\n        <p class=\"dim\" style=\"margin-top: var(--s3)\">\n          <template v-if=\"tls.wildcard\">\n            <b>Renew or replace it.</b> Paste the new pair — it overwrites both halves in place and\n            Traefik picks it up immediately. Nothing needs redeploying for a renewal: the router\n            labels do not change, only the certificate behind them.\n          </template>\n          <template v-else>\n            <b>Bring your own wildcard.</b> Paste a certificate for <span class=\"mono\">*.your-domain</span>\n            and its key — previews stop ordering per-hostname certificates the moment it lands, with no\n            re-init and no Traefik restart.\n          </template>\n          The key is stored 0600 and nothing ever returns it.\n        </p>\n        <div class=\"field\">\n          <label for=\"tls-cert\">Certificate (PEM, leaf first, chain after)</label>\n          <textarea id=\"tls-cert\" v-model=\"certDraft\" rows=\"5\" class=\"mono\" spellcheck=\"false\" placeholder=\"-----BEGIN CERTIFICATE-----\"></textarea>\n        </div>\n        <div class=\"field\">\n          <label for=\"tls-key\">Private key (PEM)</label>\n          <textarea id=\"tls-key\" v-model=\"keyDraft\" rows=\"4\" class=\"mono\" spellcheck=\"false\" placeholder=\"-----BEGIN PRIVATE KEY-----\"></textarea>\n        </div>\n        <ActionButton variant=\"primary\" :pending=\"storing\" :disabled=\"storing || !certDraft || !keyDraft\" @click=\"storeWildcard\">\n          {{ tls.wildcard ? 'Replace wildcard' : 'Store wildcard' }}\n        </ActionButton>\n      </template>\n      <p v-else-if=\"!tls.wildcard\" class=\"mute\">\n        Storing a wildcard is an admin's: it changes what every hostname on this host presents.\n      </p>\n\n      <div class=\"row\" style=\"margin-top: var(--s4); align-items: center\">\n        <ActionButton :pending=\"redeploying\" :disabled=\"redeploying\" @click=\"redeployAll\">\n          Redeploy all stacks\n        </ActionButton>\n        <span class=\"mute\" style=\"font-size: var(--t-sm)\">\n          Router labels are stamped at deploy time — run this once after changing the mode. Asleep\n          stacks are skipped; they pick the new labels up when they wake.\n        </span>\n      </div>\n      <p v-if=\"redeployed\" class=\"mute\" style=\"margin-top: var(--s2)\">\n        Started {{ redeployed.started.length }} · skipped {{ redeployed.skipped.length\n        }}<template v-if=\"redeployed.skipped.length\"> ({{ redeployed.skipped.map((x) => `${x.id}: ${x.reason}`).join('; ') }})</template>\n        — watch them under Jobs.\n      </p>\n    </section>\n  </div>\n</template>\n"],"names":["view","ref","error","loaded","load","r","api","problem","usePolling","restarting","restart","service","toast","mem","bytes","domains","newDomain","savingDomains","loadDomains","saveDomains","next","loadTls","addDomain","_a","removeDomain","d","x","tls","daysLeft","computed","certDraft","keyDraft","storing","storeWildcard","redeployed","removing","removeWildcard","redeploying","redeployAll","_createElementBlock","_createElementVNode","_hoisted_1","_createVNode","HelpModal","_cache","_hoisted_2","InfoHint","RefreshButton","_createBlock","ErrorNote","SkeletonList","_openBlock","_hoisted_3","_hoisted_5","_hoisted_6","_Fragment","c","i","_hoisted_7","_createTextVNode","_toDisplayString","_hoisted_8","_hoisted_9","_hoisted_10","_normalizeClass","_unref","sentence","_hoisted_11","_hoisted_12","_hoisted_13","_hoisted_14","_hoisted_15","ago","_hoisted_16","ActionButton","$event","_hoisted_17","_hoisted_18","_hoisted_19","_hoisted_4","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_25","_hoisted_26","_renderList","_hoisted_27","_hoisted_28","_hoisted_29","can","_hoisted_30","_hoisted_31","_hoisted_32","_withKeys","_hoisted_33","_hoisted_34","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","stamp","_hoisted_39","_hoisted_40","_hoisted_41","_hoisted_42","_hoisted_43","_hoisted_44","_hoisted_45","_hoisted_46","_hoisted_47"],"mappings":"0jFA0BA,MAAMA,EAAOC,EAA2B,IAAI,EACtCC,EAAQD,EAAI,EAAE,EACdE,EAASF,EAAI,EAAK,EAExB,eAAeG,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAAoB,sBAAsB,EAE9D,GADAH,EAAO,MAAQ,GACX,CAACE,EAAE,GAAI,CACTH,EAAM,MAAQK,EAAQF,EAAG,wBAAwB,EACjD,MACF,CACAH,EAAM,MAAQ,GACdF,EAAK,MAAQ,CAAE,GAAGK,EAAE,KAAM,WAAYA,EAAE,KAAK,YAAc,EAAC,CAC9D,CACAG,EAAWJ,EAAM,GAAM,EAEvB,MAAMK,EAAaR,EAAI,EAAE,EACzB,eAAeS,EAAQC,EAAgC,CACrDF,EAAW,MAAQE,EACnB,MAAMN,EAAI,MAAMC,EAAI,KAA4B,uBAAwB,CAAE,QAAAK,EAAS,EAEnF,GADAF,EAAW,MAAQ,GACf,CAACJ,EAAE,GAAI,CACTO,EAAM,QAASL,EAAQF,EAAG,WAAWM,CAAO,EAAE,CAAC,EAC/C,MACF,CACAC,EAAM,KAAM,cAAcP,EAAE,KAAK,SAAS,2BAA2B,EACrE,MAAMD,EAAA,CACR,CAGA,SAASS,EAAIC,EAA8B,CACzC,OAAIA,IAAU,KAAa,YACvBA,GAAS,KAAO,KAAO,KAAa,IAAIA,GAAS,KAAO,KAAO,OAAO,QAAQ,CAAC,CAAC,OAC7E,GAAG,KAAK,MAAMA,GAAS,KAAO,KAAK,CAAC,MAC7C,CAGA,MAAMC,EAAUd,EAA0B,IAAI,EACxCe,EAAYf,EAAI,EAAE,EAClBgB,EAAgBhB,EAAI,EAAK,EAE/B,eAAeiB,GAA6B,CAC1C,MAAMb,EAAI,MAAMC,EAAI,IAAmB,cAAc,EACjDD,EAAE,KAAIU,EAAQ,MAAQ,CAAE,GAAGV,EAAE,KAAM,QAASA,EAAE,KAAK,SAAW,CAAA,CAAC,EACrE,CACAG,EAAWU,EAAa,GAAM,EAG9B,eAAeC,EAAYC,EAA+B,CACxDH,EAAc,MAAQ,GACtB,MAAMZ,EAAI,MAAMC,EAAI,IAAmB,eAAgB,CAAE,QAASc,EAAM,EAExE,GADAH,EAAc,MAAQ,GAClB,CAACZ,EAAE,GAAI,CACTO,EAAM,QAASL,EAAQF,EAAG,kBAAkB,CAAC,EAC7C,MACF,CACAW,EAAU,MAAQ,GAClBJ,EAAM,KAAM,4DAA4D,EACxE,MAAM,QAAQ,IAAI,CAACM,IAAeG,EAAA,CAAS,CAAC,CAC9C,CAEA,MAAMC,EAAY,IAAA,OAAM,OAAAH,EAAY,CAAC,KAAII,EAAAR,EAAQ,QAAR,YAAAQ,EAAe,UAAW,CAAA,EAAKP,EAAU,MAAM,KAAA,CAAM,CAAC,GACzFQ,EAAgBC,GAAA,OAAc,OAAAN,KAAaI,EAAAR,EAAQ,QAAR,YAAAQ,EAAe,UAAW,CAAA,GAAI,OAAQG,GAAMA,IAAMD,CAAC,CAAC,GAG/FE,EAAM1B,EAAsB,IAAI,EACtC,eAAeoB,GAAyB,CACtC,MAAMhB,EAAI,MAAMC,EAAI,IAAe,UAAU,EACzCD,EAAE,KAAIsB,EAAI,MAAQtB,EAAE,KAC1B,CACAG,EAAWa,EAAS,GAAM,EAE1B,MAAMO,EAAWC,GAAS,IAAM,OAC9B,OAAKN,EAAAI,EAAI,QAAJ,MAAAJ,EAAW,SACT,KAAK,OAAOI,EAAI,MAAM,SAAS,SAAW,KAAK,IAAA,GAAS,KAAU,EADxC,IAEnC,CAAC,EAEKG,EAAY7B,EAAI,EAAE,EAClB8B,EAAW9B,EAAI,EAAE,EACjB+B,EAAU/B,EAAI,EAAK,EACzB,eAAegC,GAA+B,CAC5CD,EAAQ,MAAQ,GAChB,MAAM3B,EAAI,MAAMC,EAAI,IAAkD,oBAAqB,CACzF,KAAMwB,EAAU,MAChB,IAAKC,EAAS,KAAA,CACf,EAED,GADAC,EAAQ,MAAQ,GACZ,CAAC3B,EAAE,GAAI,CACTO,EAAM,QAASL,EAAQF,EAAG,oBAAoB,CAAC,EAC/C,MACF,CACAyB,EAAU,MAAQ,GAClBC,EAAS,MAAQ,GACjBnB,EAAM,KAAM,wEAAwE,EACpFsB,EAAW,MAAQ,KACnB,MAAMb,EAAA,CACR,CAGA,MAAMc,EAAWlC,EAAI,EAAK,EAC1B,eAAemC,GAAgC,CAC7CD,EAAS,MAAQ,GACjB,MAAM9B,EAAI,MAAMC,EAAI,IAAsB,mBAAmB,EAE7D,GADA6B,EAAS,MAAQ,GACb,CAAC9B,EAAE,GAAI,CACTO,EAAM,QAASL,EAAQF,EAAG,qBAAqB,CAAC,EAChD,MACF,CACAO,EAAM,KAAM,yEAAyE,EACrFsB,EAAW,MAAQ,KACnB,MAAMb,EAAA,CACR,CAEA,MAAMgB,EAAcpC,EAAI,EAAK,EACvBiC,EAAajC,EAAwB,IAAI,EAC/C,eAAeqC,GAA6B,CAC1CD,EAAY,MAAQ,GACpB,MAAMhC,EAAI,MAAMC,EAAI,KAAkB,oBAAqB,CAAA,CAAE,EAE7D,GADA+B,EAAY,MAAQ,GAChB,CAAChC,EAAE,GAAI,CACTO,EAAM,QAASL,EAAQF,EAAG,qBAAqB,CAAC,EAChD,MACF,CACA6B,EAAW,MAAQ7B,EAAE,KACrBO,EAAM,KAAM,eAAeP,EAAE,KAAK,QAAQ,MAAM,SAASA,EAAE,KAAK,QAAQ,SAAW,EAAI,GAAK,GAAG,KAAKA,EAAE,KAAK,QAAQ,MAAM,WAAW,CACtI,mBAIEkC,EAiQM,MAAA,KAAA,CAhQJC,EAkCM,MAlCNC,GAkCM,CAjCJD,EA8BM,MAAA,KAAA,CA7BJA,EAqBK,KAAA,KAAA,eArBD,kBAEF,EAAA,GAAAE,EAkBYC,GAAA,CAlBD,MAAM,sCAAoC,WACnD,IAMI,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CANJJ,EAMI,IAAA,KAAA,CALFA,EAAwD,SAArD,mDAAiD,IAAI,kOAG9B,EAAAA,EAAoB,YAAd,SAAO,IAAO,qCAC9C,EAAAA,EAAU,SAAP,KAAG,IAAI,0CACZ,CAAA,MACAA,EAKI,IAAA,KAAA,CAJFA,EAAwD,SAArD,mDAAiD,IAAI,oMAGxD,EAAAA,EAA4D,YAAtD,iDAA+C,IAAO,IAC9D,CAAA,MACAA,EAGI,IAAA,KAAA,CAFFA,EAAkE,SAA/D,6DAA2D,IAAI,qGAEpE,CAAA,kBAGJA,EAMM,MANNK,GAMM,eANW,mFAEf,EAAA,GAAAH,EAGWI,EAAA,CAHD,MAAM,yBAAuB,WACrC,IAA2B,CAAA,GAAAF,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAA3BJ,EAA2B,YAArB,iBAAc,EAAA,IAAO,wJAE7B,EAAA,CAAA,2BAGJA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBE,EAA6BK,GAAA,CAAb,IAAK3C,EAAI,CAAA,GAGVF,EAAA,WAAjB8C,EAAkFC,GAAA,OAAzD,KAAM/C,EAAA,MAAO,MAAM,mCAAA,6BAEvB,CAAAC,EAAA,QAAWD,EAAA,WAAhC8C,EAAmDE,GAAA,OAAX,KAAM,CAAA,IAE1BlD,EAAA,OAApBmD,IAAAZ,EA8EU,UA9EVa,GA8EU,eA7ERZ,EAEM,MAAA,CAFD,MAAM,SAAO,CAChBA,EAAmC,KAAA,CAA/B,MAAM,SAAA,EAAU,YAAU,CAAA,OAIpBxC,EAAA,MAAK,UAICA,EAAA,MAAK,WAAW,QAAlCmD,IAAAZ,EA+DQ,QA/DRc,GA+DQ,eA9DNb,EAUQ,QAAA,KAAA,CATNA,EAQK,KAAA,KAAA,CAPHA,EAAgB,UAAZ,SAAO,EACXA,EAAc,UAAV,OAAK,EACTA,EAAc,UAAV,OAAK,EACTA,EAAiB,UAAb,UAAQ,EACZA,EAAqB,UAAjB,cAAY,EAChBA,EAAgB,UAAZ,SAAO,EACXA,EAAS,IAAA,CAAA,SAGbA,EAkDQ,QAlDRc,GAkDQ,EAjDNH,EAAA,EAAA,EAAAZ,EAgDKgB,SAhDgBvD,EAAA,MAAK,WAAU,CAAxBwD,EAAGC,SAAflB,EAgDK,KAAA,CAhDkC,IAAKiB,EAAE,GAAK,gBAAgBC,EAAC,CAAA,GAClEjB,EAGK,KAHLkB,GAGK,CAFAC,EAAAC,EAAAJ,EAAE,SAAWA,EAAE,IAAI,EAAG,IACzB,CAAA,EAAYA,EAAE,UAAO,cAArBjB,EAAgH,OAAhHsB,GAAiG,UAAQ,cAE3GrB,EAA2D,KAA3DsB,GAA2DF,EAAfJ,EAAE,KAAK,EAAA,CAAA,EACnDhB,EAGK,KAHLuB,GAGK,CAFHvB,EAAyF,OAAA,CAAlF,MAAKwB,EAAER,EAAE,QAAK,UAAA,OAAA,UAAA,CAAA,IAAyCS,EAAAC,EAAA,EAASV,EAAE,KAAK,CAAA,EAAA,CAAA,EAClEA,EAAE,QAAdL,EAAA,EAAAZ,EAA0F,OAA1F4B,GAAkE,MAAGP,EAAGJ,EAAE,MAAM,EAAA,CAAA,cAElFhB,EAQK,KARL4B,GAQK,CAPH5B,EAAqF,OAAA,CAA9E,MAAKwB,EAAER,EAAE,aAAY,EAAA,aAAA,MAAA,CAAA,EAAiCI,EAAAJ,EAAE,YAAY,EAAA,CAAA,EAEnEA,EAAE,eADVjB,EAKC,OALD8B,GAIG,KAAG,cAGR7B,EAAyE,KAAzE8B,GAAyEV,EAA5B/C,EAAI2C,EAAE,aAAa,CAAA,EAAA,CAAA,EAChEhB,EAAqF,KAArF+B,GAAqFX,EAA5CJ,EAAE,UAAYS,EAAAO,EAAA,EAAIhB,EAAE,SAAS,EAAA,GAAA,EAAA,CAAA,EACtEhB,EA0BK,KA1BLiC,GA0BK,CAxBKjB,EAAE,SAAWA,EAAE,UAAO,cAD9BR,EAQe0B,EAAA,OANb,QAAQ,QACP,QAASjE,EAAA,QAAe+C,EAAE,QAC1B,SAAU/C,EAAA,QAAU,GACpB,QAAKkE,IAAEjE,EAAQ8C,EAAE,OAAO,CAAA,aAC1B,IAED,CAAA,GAAAZ,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,YAED,EAAA,CAAA,+CAEaY,EAAE,UAAO,cADtBjB,EAOO,OAPPqC,GAKC,aAED,QACArC,EAOO,OAPPsC,GAKC,KAED,EAAA,yBAKRtC,EAGI,IAHJuC,GAAuB,kIAGvB,IAvEA3B,EAAA,EAAAZ,EAGM,MAHNwC,GAGM,CAAA,GAAAnC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAFJJ,EAA6B,SAA1B,yBAAsB,EAAA,EACzBA,EAAmG,SAAhG,+FAA4F,EAAA,CAAA,KAqEjG,aAIazB,EAAA,OAAfoC,EAAA,EAAAZ,EA+CU,UA/CVyC,GA+CU,CA9CRxC,EAIM,MAJNyC,GAIM,CAHJrC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAgC,KAAA,CAA5B,MAAM,SAAA,EAAU,UAAO,EAAA,iBAC3BA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAAuH,OAAvH0C,GAAuH,iBAArE,WAAQ,EAAA,GAAA1C,EAAsD,OAAtD2C,GAAsDvB,EAAhC7C,EAAA,MAAQ,SAAO,GAAA,EAAA,CAAA,CAAA,KAGjGyB,EAAqC,IAArC4C,GAAqCxB,EAAnB7C,EAAA,MAAQ,IAAI,EAAA,CAAA,EAE9ByB,EAeK,KAfL6C,GAeK,CAdH7C,EAMK,KAAA,KAAA,CALHA,EAA8D,OAA9D8C,GAA8D1B,EAAtC7C,EAAA,MAAQ,SAAO,SAAA,EAAA,CAAA,EACvC6B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAGO,OAAA,CAHD,MAAM,UAAS,mJAGrB,EAAA,EAAA,IAEFW,EAAA,EAAA,EAAAZ,EAMKgB,EAAA,KAAAgC,EANWxE,EAAA,MAAQ,QAAbU,QAAXc,EAMK,KAAA,CAN6B,IAAKd,GAAC,CACtCe,EAAmC,OAAnCgD,GAAmC5B,EAAXnC,CAAC,EAAA,CAAA,EACzBe,EAGO,OAHPiD,GAGO,CAFLjD,EAAiF,OAAjFkD,GAAmB,WAAQ9B,EAAGnC,CAAC,EAAG,UAAOmC,EAAGnC,CAAC,EAAG,6BAA0B,CAAA,EAC5DwC,EAAA0B,CAAA,EAAG,YAAA,OAAjBpD,EAAoH,SAAA,OAAnF,MAAM,WAAY,SAAUtB,EAAA,MAAgB,QAAK0D,GAAEnD,EAAaC,CAAC,CAAA,EAAG,SAAM,EAAAmE,EAAA,0BAKtG3B,EAAA0B,CAAA,EAAG,YAAA,GAAdxC,EAAA,EAAAZ,EAeM,MAfNsD,GAeM,CAdJrD,EAUM,MAVNsD,GAUM,CATJlD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA4C,QAAA,CAArC,IAAI,YAAA,EAAa,eAAY,EAAA,KACpCA,EAOE,QAAA,CANA,GAAG,kDACMxB,EAAS,MAAA2D,GAClB,MAAM,OACN,YAAY,0BACZ,WAAW,QACV,QAAK/B,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAmD,GAAApB,GAAQ3D,EAAA,MAAU,KAAA,GAAUM,IAAS,CAAA,OAAA,CAAA,EAAA,gBAJlCN,EAAA,KAAS,CAAA,KAOtB0B,EAEegC,EAAA,CAFD,QAAQ,UAAW,QAASzD,EAAA,MAAgB,SAAUA,EAAA,OAAa,CAAKD,EAAA,MAAU,KAAA,EAAS,QAAOM,CAAA,aAAW,IAE3H,CAAA,GAAAsB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAF2H,QAE3H,EAAA,CAAA,8DAEFJ,EAII,IAAA,CAJD,MAAM,OAAO,MAAA,CAAA,YAAA,cAAA,aAAA,WAAA,CAAA,KAAsD,wCAC/B,EAAAA,EAAqB,SAAlB,gBAAc,IAAI,6CAC1C,EAAAA,EAA2B,YAArB,gBAAc,IAAO,gGAE7C,CAAA,mBAIab,EAAA,OAAfwB,EAAA,EAAAZ,EAoFU,UApFVyD,GAoFU,CAnFRxD,EAIM,MAJNyD,GAIM,CAHJrD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAqC,KAAA,CAAjC,MAAM,SAAA,EAAU,eAAY,EAAA,iBAChCA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAAgG,OAAA,CAA1F,MAAKwB,EAAA,CAAC,QAAgBrC,EAAA,MAAI,OAAI,iBAAA,KAAA,MAAA,CAAA,CAAA,EAA0CiC,EAAAjC,EAAA,MAAI,IAAI,EAAA,CAAA,CAAA,GAGxFa,EAAiC,IAAjC0D,GAAiCtC,EAAfjC,EAAA,MAAI,IAAI,EAAA,CAAA,EAEVA,EAAA,MAAI,cAApBY,EA6BWgB,EAAA,CAAA,IAAA,GAAA,CA5BTf,EAmBK,KAnBL2D,GAmBK,CAlBH3D,EAGK,KAAA,KAAA,CAFHI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA6B,OAAA,CAAvB,MAAM,GAAA,EAAI,SAAM,EAAA,GACtBA,EAAiE,OAAjE4D,GAAiExC,EAAzCjC,EAAA,MAAI,SAAS,QAAQ,KAAI,IAAA,CAAA,EAAA,CAAA,CAAA,GAEnDa,EAMK,KAAA,KAAA,CALHI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAkC,OAAA,CAA5B,MAAM,GAAA,EAAI,cAAW,EAAA,GAC3BA,EAGO,OAHP6D,GAGO,CAFF1C,EAAAC,EAAAK,EAAAqC,EAAA,EAAM3E,EAAA,MAAI,SAAS,QAAQ,GAAI,IAClC,CAAA,EAAAa,EAA4G,OAAA,CAArG,MAAKwB,EAAEpC,EAAA,QAAQ,MAAaA,EAAA,MAAQ,GAAA,eAAA,MAAA,CAAA,EAAqCgC,EAAAhC,EAAA,KAAQ,EAAG,aAAU,CAAA,CAAA,KAGzGY,EAMK,KAAA,KAAA,CALHI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA6B,OAAA,CAAvB,MAAM,GAAA,EAAI,SAAM,EAAA,GACtBA,EAGO,OAHP+D,GAGO,CAFF5C,EAAAC,EAAAjC,EAAA,MAAI,SAAS,mBAAsB,IACtC,CAAA,EAAYA,EAAA,MAAI,SAAS,gBAAzBY,EAA+F,OAA/FiE,GAAwD,kCAAgC,kBAInFvC,EAAA0B,CAAA,EAAG,OAAA,GAAdxC,EAAA,EAAAZ,EAOM,MAPNkE,GAOM,CANJ/D,EAEegC,EAAA,CAFD,QAAQ,SAAU,QAASvC,EAAA,MAAW,SAAUA,EAAA,MAAW,QAAOC,CAAA,aAAgB,IAEhG,CAAA,GAAAQ,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFgG,oBAEhG,EAAA,CAAA,kDACAJ,EAEO,OAAA,CAFD,MAAM,OAAO,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,wEAElD,EAAA,EAAA,4BAIYyB,EAAA0B,CAAA,EAAG,OAAA,OAAnBpD,EAyBWgB,EAAA,CAAA,IAAA,GAAA,CAxBTf,EAYI,IAZJkE,GAYI,CAXc/E,EAAA,MAAI,cAApBY,EAIWgB,EAAA,CAAA,IAAA,GAAA,CAHTX,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA2B,SAAxB,uBAAoB,EAAA,mBAAI,6MAG7B,EAAA,EAAA,YACAD,EAIWgB,EAAA,CAAA,IAAA,GAAA,CAHTX,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA+B,SAA5B,2BAAwB,EAAA,mBAAI,4BAAyB,EAAA,GAAAI,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAuC,OAAA,CAAjC,MAAM,MAAA,EAAO,gBAAa,EAAA,mBAAO,gIAGjG,EAAA,EAAA,uBAAW,wDAEb,EAAA,EAAA,GACAA,EAGM,MAHNmE,GAGM,CAFJ/D,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAAwE,QAAA,CAAjE,IAAI,UAAA,EAAW,6CAA0C,EAAA,KAChEA,EAA0I,WAAA,CAAhI,GAAG,gDAAoBV,EAAS,MAAA6C,GAAE,KAAK,IAAI,MAAM,OAAO,WAAW,QAAQ,YAAY,6BAAA,gBAAhE7C,EAAA,KAAS,CAAA,KAE5CU,EAGM,MAHNoE,GAGM,CAFJhE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAJ,EAA8C,QAAA,CAAvC,IAAI,SAAA,EAAU,oBAAiB,EAAA,KACtCA,EAAwI,WAAA,CAA9H,GAAG,+CAAmBT,EAAQ,MAAA4C,GAAE,KAAK,IAAI,MAAM,OAAO,WAAW,QAAQ,YAAY,6BAAA,gBAA/D5C,EAAA,KAAQ,CAAA,KAE1CW,EAEegC,EAAA,CAFD,QAAQ,UAAW,QAAS1C,EAAA,MAAU,SAAUA,EAAA,OAAO,CAAKF,EAAA,QAAcC,EAAA,MAAW,QAAOE,CAAA,aACxG,IAA0D,CAAvD0B,EAAAC,EAAAjC,EAAA,MAAI,SAAQ,mBAAA,gBAAA,EAAA,CAAA,CAAA,wCAGJA,EAAA,MAAI,uBAAnBY,EAEI,IAFJsE,GAA0C,2FAE1C,GAEArE,EAQM,MARNsE,GAQM,CAPJpE,EAEegC,EAAA,CAFA,QAASrC,EAAA,MAAc,SAAUA,EAAA,MAAc,QAAOC,CAAA,aAAa,IAElF,CAAA,GAAAM,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFkF,wBAElF,EAAA,CAAA,kDACAJ,EAGO,OAAA,CAHD,MAAM,OAAO,MAAA,CAAA,YAAA,aAAA,CAAA,EAA+B,6JAGlD,EAAA,EAAA,GAEON,EAAA,OAATiB,EAAA,EAAAZ,EAII,IAJJwE,GAII,CAJ4DpD,EAAA,YACtDC,EAAG1B,EAAA,MAAW,QAAQ,MAAM,EAAG,cAAW0B,EAAG1B,EAAA,MAAW,QAAQ,MAAM,EAAA,CAAA,EAC5DA,EAAA,MAAW,QAAQ,YAAnCK,EAA+HgB,EAAA,CAAA,IAAA,GAAA,CAApFI,EAAA,OAAKzB,EAAA,MAAW,QAAQ,IAAKR,GAAC,GAAQA,EAAE,EAAE,KAAKA,EAAE,MAAM,EAAA,EAAI,YAAa,IAAC,CAAA,CAAA,gCAAW,6BAEnI,EAAA,EAAA"}