@samyx/preview-stacks-ui 0.38.1 → 0.39.1

package/dist/assets/SettingsView-Dxbl6HZA.js

@@ -0,0 +1,2 @@
+import{d as ee,K as te,ak as M,M as se,c as u,a as s,g as D,v as O,u as a,ac as o,al as le,t as n,f as m,z as F,h as _,n as d,F as z,A as v,e as w,_ as ae,D as oe,i as b,j as p,an as ne,a6 as H,p as P,C as W,af as ie,o as i}from"./index-D_Ks6aQi.js";import{c as re}from"./useJobQueue-JaWoydCt.js";import{A as E}from"./ActionButton-OewKsFrK.js";import{_ as ue}from"./ErrorNote.vue_vue_type_script_setup_true_lang-FEOV8vdM.js";import{_ as $}from"./SelectMenu.vue_vue_type_script_setup_true_lang-CMLYr7A7.js";import"./_plugin-vue_export-helper-DlAUqK2U.js";const de={class:"panel settings-form"},ve={class:"field"},me={class:"field"},pe=["type"],fe={class:"row",style:{"margin-top":"var(--s2)"}},be={key:2,class:"mute",style:{"font-size":"var(--t-xs)"}},he={class:"mute hint"},ce={class:"row",style:{gap:"8px","margin-top":"4px"}},ye=["disabled"],ge={key:0,class:"mute"},ke={key:1,class:"bad"},we={class:"panel settings-form"},xe={class:"field"},Se={class:"row"},Ce=["disabled","title"],Ve={class:"mute",style:{"font-size":"var(--t-xs)"}},_e={key:0,class:"mute hint"},Re={class:"field"},De={class:"row"},Ee={key:0,class:"mute hint"},$e={key:2,class:"mute hint"},Ne={class:"panel"},Be={class:"field"},Ae={class:"field"},Fe=ee({__name:"SettingsView",setup(Te){const C=b(!1),V=b(!1),K=p(()=>{const t=o.token;return t.startsWith("pstack_pat_")?"Personal token.":/^[0-9a-f]{40,}$/i.test(t)?"Machine token.":`${t.length} characters — not a pstack token.`}),q=p(()=>{var t;return((t=v.health)==null?void 0:t.authEnforced)??null});async function I(){C.value=!0;try{await ne(),H(v.healthError?"error":"ok",v.healthError||"Control plane reachable")}finally{C.value=!1}}const h=b(null),c=b(""),N=b(!1),y=b(""),x=b("viewer"),g=b(null),B=t=>{var e;return((e=h.value)==null?void 0:e.settings.find(l=>l.key===t))??null},r=p(()=>B("max_jobs")),f=p(()=>B("default_role"));function A(){var t,e;y.value=String(((t=r.value)==null?void 0:t.value)??""),x.value=String(((e=f.value)==null?void 0:e.value)??"viewer")}async function G(){const t=await P.get("/api/settings");if(N.value=!0,!t.ok){c.value=W(t,"read the host settings");return}c.value="",h.value=t.body,A()}G(),te();async function T(t,e){g.value=t;const l=await P.put(`/api/settings/${t}`,{value:e});if(g.value=null,!l.ok){c.value=W(l,`save ${t}`);return}c.value="",h.value&&(h.value.settings=h.value.settings.map(R=>R.key===t?{key:R.key,value:l.body.value,source:l.body.source,minRole:l.body.minRole}:R)),A(),H("ok","Saved.")}function k(t){return t?ie(M.includes(t.minRole)?t.minRole:"admin"):!1}function S(t){return!t||k(t)?"":`Needs the ${t.minRole} role.`}const j={db:"Set here",env:"From the environment",default:"The shipped default"},Q=p(()=>v.jobs.filter(t=>t.state==="running").length),X=p(()=>v.jobs.filter(t=>t.state==="queued").length),L=p(()=>re(y.value)),U=p(()=>{var t;return Number(y.value)!==Number((t=r.value)==null?void 0:t.value)}),J=p(()=>{var t;return x.value!==String(((t=f.value)==null?void 0:t.value)??"")}),Y={viewer:"reads everything",developer:"deploys and tears down",maintainer:"host configuration",admin:"accounts and sign-on"},Z=M.map(t=>({value:t,label:se(t),hint:Y[t]}));return(t,e)=>(i(),u("div",null,[e[30]||(e[30]=s("div",{class:"page-head"},[s("div",null,[s("h1",null,"Settings")])],-1)),s("section",de,[e[16]||(e[16]=s("h2",{class:"phead-title"},"Connection",-1)),e[17]||(e[17]=s("p",{class:"mute hint"},"Stored in this browser. Nothing here is sent anywhere.",-1)),s("div",ve,[e[10]||(e[10]=s("label",{for:"apiBase"},"API base URL",-1)),D(s("input",{id:"apiBase","onUpdate:modelValue":e[0]||(e[0]=l=>a(o).apiBase=l),type:"url",spellcheck:"false",placeholder:"(same origin)"},null,512),[[O,a(o).apiBase,void 0,{trim:!0}]]),e[11]||(e[11]=s("div",{class:"mute hint"},"Empty means same origin.",-1))]),s("div",me,[e[14]||(e[14]=s("label",{for:"token"},"Access token",-1)),D(s("input",{id:"token","onUpdate:modelValue":e[1]||(e[1]=l=>a(o).token=l),type:V.value||!a(o).token?"text":"password",name:"pstack-access-token",autocomplete:"off","data-1p-ignore":"","data-lpignore":"true","data-bwignore":"","data-form-type":"other",spellcheck:"false",placeholder:"paste the token from pstack init"},null,8,pe),[[le,a(o).token,void 0,{trim:!0}]]),s("div",fe,[a(o).token?(i(),u("button",{key:0,class:"ghost sm",onClick:e[2]||(e[2]=l=>V.value=!V.value)},n(V.value?"Hide":"Show"),1)):m("",!0),a(o).token?(i(),F(E,{key:1,variant:"ghost",class:"sm",confirm:"Clear it?",onRun:e[3]||(e[3]=l=>a(o).token="")},{default:_(()=>[...e[12]||(e[12]=[d(" Clear ",-1)])]),_:1})):m("",!0),a(o).token?(i(),u("span",be,n(K.value),1)):m("",!0)]),s("div",he,[e[13]||(e[13]=d(" Only needed for token-based access; signing in does the same job. ",-1)),q.value===!1?(i(),u(z,{key:0},[d("This server is not asking for one.")],64)):m("",!0)])]),s("div",ce,[s("button",{class:"btn",disabled:C.value,onClick:I},n(C.value?"Checking…":"Test connection"),9,ye),a(v).health?(i(),u("span",ge,[d(" Connected to pstack "+n(a(v).health.version)+" ",1),w(ae,{label:"where data is stored"},{default:_(()=>[e[15]||(e[15]=d(" Data directory: ",-1)),s("code",null,n(a(v).health.dataDir),1)]),_:1})])):a(v).healthError?(i(),u("span",ke,n(a(v).healthError),1)):m("",!0)])]),s("section",we,[e[24]||(e[24]=s("h2",{class:"phead-title"},"This host",-1)),e[25]||(e[25]=s("p",{class:"mute hint"},"Stored on the server, in force for everybody.",-1)),c.value?(i(),F(ue,{key:0,text:c.value,title:"Could not read the host settings."},null,8,["text"])):m("",!0),h.value?(i(),u(z,{key:1},[s("div",xe,[e[19]||(e[19]=s("label",{for:"maxJobs"},"Concurrency limit",-1)),s("div",Se,[D(s("input",{id:"maxJobs","onUpdate:modelValue":e[4]||(e[4]=l=>y.value=l),type:"number",min:"1",step:"1",inputmode:"numeric",disabled:!k(r.value),title:S(r.value)||void 0,style:oe(`width: 8rem${k(r.value)?"":"; opacity: 0.45; cursor: not-allowed"}`)},null,12,Ce),[[O,y.value]]),w(E,{variant:"primary",pending:g.value==="max_jobs",disabled:!k(r.value)||!U.value||!!L.value||g.value!==null,title:S(r.value)||L.value||(U.value?void 0:"this is already the stored value"),onClick:e[5]||(e[5]=l=>T("max_jobs",Number(y.value)))},{default:_(()=>[...e[18]||(e[18]=[d(" Save ",-1)])]),_:1},8,["pending","disabled","title"]),s("span",Ve,n(Q.value)+" running · "+n(X.value)+" waiting ",1)]),e[20]||(e[20]=s("div",{class:"mute hint"},[d(" Most jobs at once, across every stack. "),s("b",null,"Lowering it cancels nothing.")],-1)),r.value?(i(),u("div",_e,[s("b",null,n(j[r.value.source])+".",1),d(" "+n(S(r.value)),1)])):m("",!0)]),s("div",Re,[e[22]||(e[22]=s("label",{for:"defaultRole"},"Default role for new accounts",-1)),s("div",De,[w($,{id:"defaultRole",modelValue:x.value,"onUpdate:modelValue":e[6]||(e[6]=l=>x.value=l),label:"Default role for new accounts",options:a(Z),disabled:!k(f.value)},null,8,["modelValue","options","disabled"]),w(E,{variant:"primary",pending:g.value==="default_role",disabled:!k(f.value)||!J.value||g.value!==null,title:S(f.value)||(J.value?void 0:"this is already the stored value"),onClick:e[7]||(e[7]=l=>T("default_role",x.value))},{default:_(()=>[...e[21]||(e[21]=[d(" Save ",-1)])]),_:1},8,["pending","disabled","title"])]),e[23]||(e[23]=s("div",{class:"mute hint"},"New accounts only; existing ones keep their role.",-1)),f.value?(i(),u("div",Ee,[s("b",null,n(j[f.value.source])+".",1),d(" "+n(S(f.value)),1)])):m("",!0)])],64)):N.value?m("",!0):(i(),u("p",$e,"Reading…"))]),s("section",Ne,[e[28]||(e[28]=s("h2",{class:"phead-title"},"Appearance",-1)),e[29]||(e[29]=s("p",{class:"mute hint"},"Stored in this browser.",-1)),s("div",Be,[e[26]||(e[26]=s("label",{for:"theme"},"Theme",-1)),w($,{modelValue:a(o).theme,"onUpdate:modelValue":e[8]||(e[8]=l=>a(o).theme=l),id:"theme",label:"Theme",options:[{value:"system",label:"Follow the system"},{value:"dark",label:"Dark"},{value:"light",label:"Light"}]},null,8,["modelValue"])]),s("div",Ae,[e[27]||(e[27]=s("label",{for:"motion"},"Motion",-1)),w($,{modelValue:a(o).motion,"onUpdate:modelValue":e[9]||(e[9]=l=>a(o).motion=l),id:"motion",label:"Motion",options:[{value:"system",label:"Follow the system"},{value:"full",label:"Always animate"},{value:"none",label:"No animation"}]},null,8,["modelValue"])])])]))}});export{Fe as default};
+//# sourceMappingURL=SettingsView-Dxbl6HZA.js.map

package/dist/assets/SettingsView-Dxbl6HZA.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SettingsView-Dxbl6HZA.js","sources":["../../src/views/SettingsView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Settings: where the API is, how to authenticate to it, how the app looks — and the two settings\n * that live on the HOST.\n *\n * ── TWO KINDS OF CONTROL ON ONE PAGE ─────────────────────────────────────────────────────────────\n *\n * Nobody should have to guess which is which, so each panel says so in its own subtitle rather than\n * the page making one claim at the top: \"nothing here is sent to the server\" was true of this page\n * for eight versions, and a sentence like that outlives its truth in people's memory.\n *\n *   - THIS BROWSER — Connection and Appearance. `useSettings` writes them straight to localStorage;\n *     nothing is sent anywhere, nobody else sees them, and there is nothing to save because the\n *     bindings write through immediately. That is why those panels have no Save button.\n *   - THIS HOST — the concurrency limit and the default role for new accounts. Stored in the\n *     server's database, in force for everybody, and saved EXPLICITLY: a number box that wrote\n *     through on every keystroke would set the cap to 1 on the way to typing 12.\n *\n * ── WHERE THE VALUE CAME FROM, ALWAYS ────────────────────────────────────────────────────────────\n *\n * Both host settings render their `source`, because \"I changed it and it did not stick\" is\n * otherwise unanswerable: a box saying 4 cannot tell a refused write from a stale page from an\n * environment variable overriding it. Precedence is database > environment > built-in default — so\n * `PSTACK_MAX_JOBS` is now the DEFAULT rather than the authority, and a value set here is not\n * silently reverted by the next restart. A save flips the row's source to \"db\", so the write's own\n * response is what the page re-renders from; keeping the old row and patching just the number would\n * leave the line still crediting the environment.\n *\n * ── LOWERING THE CAP CANCELS NOTHING ─────────────────────────────────────────────────────────────\n *\n * Said beside the field, where it stays true; the toast only says it saved. Jobs already running\n * the cap applies to the next dispatch. Someone typing 1 while four jobs run must not read the\n * confirmation as \"three were just killed\" — which is also why the running and waiting counts sit\n * next to the input rather than a page away in Jobs.\n *\n * ── A VIEWER READS BOTH AND WRITES NEITHER ───────────────────────────────────────────────────────\n *\n * Disabled, not hidden, with the reason in text under the control: a page that hides what your tier\n * cannot reach looks broken rather than restricted, and the reason cannot live only in a `title`\n * because a disabled `SelectMenu` has no element of its own to hang one on. The threshold comes\n * from the server's own permission table (`minRole`, per key — maintainer for the cap, admin for\n * the role) and is never re-derived here. An unrecognised name is read as ADMIN: `rank()` scores a\n * role it has never heard of as 0, so passing one through unguarded would enable the control for\n * everyone. Hiding is courtesy either way — the server's 403 is the enforcement, and it lands in\n * `hostError`.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { ROLES, type HostSettings, type Role, type SettingKey, type SettingRow, type SettingWritten } from '../api/types';\nimport { can } from '../composables/useAuth';\nimport { capProblem } from '../composables/useJobQueue';\nimport { settings } from '../composables/useSettings';\nimport { state, loadHealth, loadJobs } from '../composables/useControlPlane';\nimport { sentence } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport SelectMenu from '../components/SelectMenu.vue';\n\nconst checking = ref(false);\nconst reveal = ref(false);\n\n/**\n * What is in the token box, described without printing it.\n *\n * The point is to make a WRONG value visible at a glance. A password autofilled into this field is\n * short and matches neither shape, and \"12 characters, not a pstack token\" is the sentence that\n * ends the mystery — before this, the only symptom was every page 401ing.\n */\nconst tokenShape = computed(() => {\n  const t = settings.token;\n  if (t.startsWith('pstack_pat_')) return 'Personal token.';\n  if (/^[0-9a-f]{40,}$/i.test(t)) return 'Machine token.';\n  return `${t.length} characters — not a pstack token.`;\n});\n\n/**\n * The server tells us whether it enforces auth. When it does not, it is bound to loopback and a\n * token would be pointless — worth saying, so nobody hunts for one that was never issued.\n */\nconst authEnforced = computed(() => state.health?.authEnforced ?? null);\n\nasync function recheck(): Promise<void> {\n  checking.value = true;\n  try {\n    await loadHealth();\n    toast(state.healthError ? 'error' : 'ok', state.healthError || 'Control plane reachable');\n  } finally {\n    checking.value = false;\n  }\n}\n\n// ── the host's settings ──────────────────────────────────────────────────────────────────────────\n\nconst host = ref<HostSettings | null>(null);\nconst hostError = ref('');\nconst hostLoaded = ref(false);\n/**\n * What the boxes hold, kept apart from the server's copy so \"changed\" is a comparison, not a flag.\n *\n * `string | number` is not laziness about the type: `v-model` on `<input type=\"number\">` REPLACES\n * the string with a number as soon as the value parses, so this ref genuinely holds both — a string\n * when it is empty or freshly reset from the server, a number after a keystroke.\n */\nconst maxJobsDraft = ref<string | number>('');\nconst roleDraft = ref('viewer');\n/** Which key is in flight — one at a time, so a save cannot be racing its own re-read. */\nconst savingKey = ref<SettingKey | null>(null);\n\nconst row = (key: SettingKey): SettingRow | null => host.value?.settings.find((s) => s.key === key) ?? null;\nconst maxJobs = computed(() => row('max_jobs'));\nconst defaultRole = computed(() => row('default_role'));\n\n/** Both drafts back to what the server just said. Called after every read and every write. */\nfunction resetDrafts(): void {\n  maxJobsDraft.value = String(maxJobs.value?.value ?? '');\n  roleDraft.value = String(defaultRole.value?.value ?? 'viewer');\n}\n\nasync function loadHost(): Promise<void> {\n  const r = await api.get<HostSettings>('/api/settings');\n  hostLoaded.value = true;\n  if (!r.ok) {\n    // Includes the honest 404: a server older than these settings has no such route, and `problem`\n    // says exactly that rather than inventing a reason.\n    hostError.value = problem(r, 'read the host settings');\n    return;\n  }\n  hostError.value = '';\n  host.value = r.body;\n  resetDrafts();\n}\nvoid loadHost();\n// The shell polls the job list every seven seconds once signed in; this is only so the counts\n// beside the cap are right on arrival rather than up to a poll later.\nvoid loadJobs();\n\nasync function save(key: SettingKey, value: number | string): Promise<void> {\n  savingKey.value = key;\n  const r = await api.put<SettingWritten>(`/api/settings/${key}`, { value });\n  savingKey.value = null;\n  if (!r.ok) {\n    hostError.value = problem(r, `save ${key}`);\n    return;\n  }\n  hostError.value = '';\n  // The WHOLE row from the response, not just the number: a stored value's source is now \"db\", and\n  // a line still saying \"from the environment\" is the precise lie this display exists to prevent.\n  if (host.value) {\n    host.value.settings = host.value.settings.map((s) =>\n      s.key === key ? { key: s.key, value: r.body.value, source: r.body.source, minRole: r.body.minRole } : s,\n    );\n  }\n  resetDrafts();\n  // The server's `note` says what a cap change did and did not do; that fact is on the page beside\n  // the field, so the toast stays a toast.\n  toast('ok', 'Saved.');\n}\n\n/**\n * May this account write this key — for rendering only.\n *\n * FAILS CLOSED on a `minRole` this build does not know: `rank()` scores an unfamiliar role 0, so\n * handing one to `can()` unchecked would answer true for every signed-in account, and the least\n * privileged person on the host would be shown a control the server refuses.\n */\nfunction mayWrite(r: SettingRow | null): boolean {\n  if (!r) return false;\n  return can((ROLES as readonly string[]).includes(r.minRole) ? (r.minRole as Role) : 'admin');\n}\n\n/** Empty when they may write it; otherwise the sentence rendered under the disabled control. */\nfunction whyReadOnly(r: SettingRow | null): string {\n  if (!r || mayWrite(r)) return '';\n  return `Needs the ${r.minRole} role.`;\n}\n\n// Where the value came from — a fact about the host, never an instruction: a viewer reads this line\n// too, and whoever set it may not be the person looking. Precedence itself lives in docs/usage.md.\nconst SOURCE_LABEL: Record<SettingRow['source'], string> = {\n  db: 'Set here',\n  env: 'From the environment',\n  default: 'The shipped default',\n};\n\nconst running = computed(() => state.jobs.filter((j) => j.state === 'running').length);\nconst waiting = computed(() => state.jobs.filter((j) => j.state === 'queued').length);\n\n/**\n * Why the cap cannot be saved as typed — shown as the button's title, per the disabled rule.\n *\n * The rule itself lives in `useJobQueue` because this app has no component harness: logic that\n * would sit inline in a `.vue` is untestable there, and this one shipped broken.\n */\nconst maxJobsProblem = computed(() => capProblem(maxJobsDraft.value));\n/** `Number` on both sides: the input hands back a string, so `'4' !== 4` would leave Save lit forever. */\nconst maxJobsDirty = computed(() => Number(maxJobsDraft.value) !== Number(maxJobs.value?.value));\nconst roleDirty = computed(() => roleDraft.value !== String(defaultRole.value?.value ?? ''));\n\n/** One line each, in the picker itself — a role name alone does not say what it costs to grant. */\nconst ROLE_WHAT: Record<Role, string> = {\n  viewer: 'reads everything',\n  developer: 'deploys and tears down',\n  maintainer: 'host configuration',\n  admin: 'accounts and sign-on',\n};\nconst roleOptions = ROLES.map((r) => ({ value: r, label: sentence(r), hint: ROLE_WHAT[r] }));\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Settings</h1>\n        <!-- No page-level subtitle: two panels are this browser's and one is the host's, so each\n             says which in its own line — a claim at the top would be a lie about one of them. -->\n      </div>\n    </div>\n\n    <!-- `settings-form` caps the field widths: a URL input stretched to the panel's full 1500px\n         reads as a text editor, not a form — see the rule in app.css. -->\n    <section class=\"panel settings-form\">\n      <h2 class=\"phead-title\">Connection</h2>\n      <p class=\"mute hint\">Stored in this browser. Nothing here is sent anywhere.</p>\n\n      <div class=\"field\">\n        <label for=\"apiBase\">API base URL</label>\n        <input\n          id=\"apiBase\"\n          v-model.trim=\"settings.apiBase\"\n          type=\"url\"\n          spellcheck=\"false\"\n          placeholder=\"(same origin)\"\n        />\n        <div class=\"mute hint\">Empty means same origin.</div>\n      </div>\n\n      <div class=\"field\">\n        <label for=\"token\">Access token</label>\n        <!--\n          NOT `type=\"password\"`, and none of these attributes are decorative.\n\n          This field is why \"opening Settings signs me out\" was a real bug. A password input is an\n          autofill magnet: Chrome and every password manager fill one on sight and ignore\n          `autocomplete=\"off\"` while doing it. The filled value went straight through `v-model` into\n          localStorage and onto every request as `Authorization: Bearer <someone's password>` — and\n          the server used to treat a bad bearer as a hard refusal rather than falling back to the\n          session cookie, so a perfectly good login 401'd on every route until site data was cleared.\n\n          The server now falls through (that is the real fix), and this field stops inviting the\n          fill: a text input that masks itself only while it holds a value, named nothing like a\n          password, with the ignore hints the managers respect.\n        -->\n        <input\n          id=\"token\"\n          v-model.trim=\"settings.token\"\n          :type=\"reveal || !settings.token ? 'text' : 'password'\"\n          name=\"pstack-access-token\"\n          autocomplete=\"off\"\n          data-1p-ignore\n          data-lpignore=\"true\"\n          data-bwignore\n          data-form-type=\"other\"\n          spellcheck=\"false\"\n          placeholder=\"paste the token from pstack init\"\n        />\n        <div class=\"row\" style=\"margin-top: var(--s2)\">\n          <button v-if=\"settings.token\" class=\"ghost sm\" @click=\"reveal = !reveal\">\n            {{ reveal ? 'Hide' : 'Show' }}\n          </button>\n          <ActionButton\n            v-if=\"settings.token\"\n            variant=\"ghost\"\n            class=\"sm\"\n            confirm=\"Clear it?\"\n            @run=\"settings.token = ''\"\n          >\n            Clear\n          </ActionButton>\n          <span v-if=\"settings.token\" class=\"mute\" style=\"font-size: var(--t-xs)\">\n            {{ tokenShape }}\n          </span>\n        </div>\n        <div class=\"mute hint\">\n          Only needed for token-based access; signing in does the same job.\n          <template v-if=\"authEnforced === false\">This server is not asking for one.</template>\n        </div>\n      </div>\n\n      <div class=\"row\" style=\"gap: 8px; margin-top: 4px\">\n        <button class=\"btn\" :disabled=\"checking\" @click=\"recheck\">\n          {{ checking ? 'Checking…' : 'Test connection' }}\n        </button>\n        <span v-if=\"state.health\" class=\"mute\">\n          Connected to pstack {{ state.health.version }}\n          <InfoHint label=\"where data is stored\">\n            Data directory: <code>{{ state.health.dataDir }}</code>\n          </InfoHint>\n        </span>\n        <span v-else-if=\"state.healthError\" class=\"bad\">{{ state.healthError }}</span>\n      </div>\n    </section>\n\n    <!-- ===================== the host's own settings — everyone sees these ===================== -->\n    <section class=\"panel settings-form\">\n      <h2 class=\"phead-title\">This host</h2>\n      <p class=\"mute hint\">Stored on the server, in force for everybody.</p>\n\n      <ErrorNote v-if=\"hostError\" :text=\"hostError\" title=\"Could not read the host settings.\" />\n\n      <template v-if=\"host\">\n        <div class=\"field\">\n          <!-- The dimming is inline because app.css has no `input:disabled` rule — `button:disabled`\n               exists (which is what fades the role picker, a real <button> under the hood) and\n               checkboxes have one, but this is the app's first disabled TEXT-shaped input, and\n               without it a viewer gets a box that looks live, takes no focus and explains nothing.\n               It matches the button rule's 0.45; the honest home for it is app.css, which is not\n               this agent's to edit. -->\n          <label for=\"maxJobs\">Concurrency limit</label>\n          <div class=\"row\">\n            <input\n              id=\"maxJobs\"\n              v-model=\"maxJobsDraft\"\n              type=\"number\"\n              min=\"1\"\n              step=\"1\"\n              inputmode=\"numeric\"\n              :disabled=\"!mayWrite(maxJobs)\"\n              :title=\"whyReadOnly(maxJobs) || undefined\"\n              :style=\"`width: 8rem${mayWrite(maxJobs) ? '' : '; opacity: 0.45; cursor: not-allowed'}`\"\n            />\n            <ActionButton\n              variant=\"primary\"\n              :pending=\"savingKey === 'max_jobs'\"\n              :disabled=\"!mayWrite(maxJobs) || !maxJobsDirty || !!maxJobsProblem || savingKey !== null\"\n              :title=\"whyReadOnly(maxJobs) || maxJobsProblem || (maxJobsDirty ? undefined : 'this is already the stored value')\"\n              @click=\"save('max_jobs', Number(maxJobsDraft))\"\n            >\n              Save\n            </ActionButton>\n            <span class=\"mute\" style=\"font-size: var(--t-xs)\">\n              {{ running }} running · {{ waiting }} waiting\n            </span>\n          </div>\n          <div class=\"mute hint\">\n            Most jobs at once, across every stack. <b>Lowering it cancels nothing.</b>\n          </div>\n          <div v-if=\"maxJobs\" class=\"mute hint\">\n            <b>{{ SOURCE_LABEL[maxJobs.source] }}.</b> {{ whyReadOnly(maxJobs) }}\n          </div>\n        </div>\n\n        <div class=\"field\">\n          <label for=\"defaultRole\">Default role for new accounts</label>\n          <div class=\"row\">\n            <SelectMenu\n              id=\"defaultRole\"\n              v-model=\"roleDraft\"\n              label=\"Default role for new accounts\"\n              :options=\"roleOptions\"\n              :disabled=\"!mayWrite(defaultRole)\"\n            />\n            <ActionButton\n              variant=\"primary\"\n              :pending=\"savingKey === 'default_role'\"\n              :disabled=\"!mayWrite(defaultRole) || !roleDirty || savingKey !== null\"\n              :title=\"whyReadOnly(defaultRole) || (roleDirty ? undefined : 'this is already the stored value')\"\n              @click=\"save('default_role', roleDraft)\"\n            >\n              Save\n            </ActionButton>\n          </div>\n          <div class=\"mute hint\">New accounts only; existing ones keep their role.</div>\n          <div v-if=\"defaultRole\" class=\"mute hint\">\n            <b>{{ SOURCE_LABEL[defaultRole.source] }}.</b> {{ whyReadOnly(defaultRole) }}\n          </div>\n        </div>\n      </template>\n      <p v-else-if=\"!hostLoaded\" class=\"mute hint\">Reading…</p>\n    </section>\n\n    <section class=\"panel\">\n      <h2 class=\"phead-title\">Appearance</h2>\n      <p class=\"mute hint\">Stored in this browser.</p>\n\n      <div class=\"field\">\n        <label for=\"theme\">Theme</label>\n        <SelectMenu\n            v-model=\"settings.theme\" id=\"theme\"\n            label=\"Theme\"\n            :options=\"[\n              { value: 'system', label: 'Follow the system' },\n              { value: 'dark', label: 'Dark' },\n              { value: 'light', label: 'Light' },\n            ]\"\n          />\n      </div>\n\n      <div class=\"field\">\n        <label for=\"motion\">Motion</label>\n        <SelectMenu\n            v-model=\"settings.motion\" id=\"motion\"\n            label=\"Motion\"\n            :options=\"[\n              { value: 'system', label: 'Follow the system' },\n              { value: 'full', label: 'Always animate' },\n              { value: 'none', label: 'No animation' },\n            ]\"\n          />\n      </div>\n    </section>\n  </div>\n</template>\n"],"names":["checking","ref","reveal","tokenShape","computed","settings","authEnforced","_a","state","recheck","loadHealth","toast","host","hostError","hostLoaded","maxJobsDraft","roleDraft","savingKey","row","key","s","maxJobs","defaultRole","resetDrafts","_b","loadHost","r","api","problem","loadJobs","save","value","mayWrite","can","ROLES","whyReadOnly","SOURCE_LABEL","running","j","waiting","maxJobsProblem","capProblem","maxJobsDirty","roleDirty","ROLE_WHAT","roleOptions","sentence","_createElementBlock","_createElementVNode","_hoisted_1","_cache","_hoisted_2","$event","_unref","_hoisted_3","_hoisted_5","_createBlock","ActionButton","_hoisted_6","_toDisplayString","_hoisted_7","_Fragment","_hoisted_8","_hoisted_9","_openBlock","_hoisted_10","_createTextVNode","_createVNode","InfoHint","_hoisted_11","_hoisted_12","ErrorNote","_hoisted_13","_hoisted_14","_normalizeStyle","_hoisted_16","_hoisted_17","_hoisted_18","_hoisted_19","SelectMenu","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24"],"mappings":"uuCA4DA,MAAMA,EAAWC,EAAI,EAAK,EACpBC,EAASD,EAAI,EAAK,EASlBE,EAAaC,EAAS,IAAM,CAChC,MAAM,EAAIC,EAAS,MACnB,OAAI,EAAE,WAAW,aAAa,EAAU,kBACpC,mBAAmB,KAAK,CAAC,EAAU,iBAChC,GAAG,EAAE,MAAM,mCACpB,CAAC,EAMKC,EAAeF,EAAS,IAAA,OAAM,QAAAG,EAAAC,EAAM,SAAN,YAAAD,EAAc,eAAgB,KAAI,EAEtE,eAAeE,GAAyB,CACtCT,EAAS,MAAQ,GACjB,GAAI,CACF,MAAMU,GAAA,EACNC,EAAMH,EAAM,YAAc,QAAU,KAAMA,EAAM,aAAe,yBAAyB,CAC1F,QAAA,CACER,EAAS,MAAQ,EACnB,CACF,CAIA,MAAMY,EAAOX,EAAyB,IAAI,EACpCY,EAAYZ,EAAI,EAAE,EAClBa,EAAab,EAAI,EAAK,EAQtBc,EAAed,EAAqB,EAAE,EACtCe,EAAYf,EAAI,QAAQ,EAExBgB,EAAYhB,EAAuB,IAAI,EAEvCiB,EAAOC,UAAuC,QAAAZ,EAAAK,EAAK,QAAL,YAAAL,EAAY,SAAS,KAAMa,GAAMA,EAAE,MAAQD,KAAQ,MACjGE,EAAUjB,EAAS,IAAMc,EAAI,UAAU,CAAC,EACxCI,EAAclB,EAAS,IAAMc,EAAI,cAAc,CAAC,EAGtD,SAASK,GAAoB,SAC3BR,EAAa,MAAQ,SAAOR,EAAAc,EAAQ,QAAR,YAAAd,EAAe,QAAS,EAAE,EACtDS,EAAU,MAAQ,SAAOQ,EAAAF,EAAY,QAAZ,YAAAE,EAAmB,QAAS,QAAQ,CAC/D,CAEA,eAAeC,GAA0B,CACvC,MAAMC,EAAI,MAAMC,EAAI,IAAkB,eAAe,EAErD,GADAb,EAAW,MAAQ,GACf,CAACY,EAAE,GAAI,CAGTb,EAAU,MAAQe,EAAQF,EAAG,wBAAwB,EACrD,MACF,CACAb,EAAU,MAAQ,GAClBD,EAAK,MAAQc,EAAE,KACfH,EAAA,CACF,CACKE,EAAA,EAGAI,GAAA,EAEL,eAAeC,EAAKX,EAAiBY,EAAuC,CAC1Ed,EAAU,MAAQE,EAClB,MAAMO,EAAI,MAAMC,EAAI,IAAoB,iBAAiBR,CAAG,GAAI,CAAE,MAAAY,EAAO,EAEzE,GADAd,EAAU,MAAQ,KACd,CAACS,EAAE,GAAI,CACTb,EAAU,MAAQe,EAAQF,EAAG,QAAQP,CAAG,EAAE,EAC1C,MACF,CACAN,EAAU,MAAQ,GAGdD,EAAK,QACPA,EAAK,MAAM,SAAWA,EAAK,MAAM,SAAS,IAAKQ,GAC7CA,EAAE,MAAQD,EAAM,CAAE,IAAKC,EAAE,IAAK,MAAOM,EAAE,KAAK,MAAO,OAAQA,EAAE,KAAK,OAAQ,QAASA,EAAE,KAAK,SAAYN,CAAA,GAG1GG,EAAA,EAGAZ,EAAM,KAAM,QAAQ,CACtB,CASA,SAASqB,EAASN,EAA+B,CAC/C,OAAKA,EACEO,GAAKC,EAA4B,SAASR,EAAE,OAAO,EAAKA,EAAE,QAAmB,OAAO,EAD5E,EAEjB,CAGA,SAASS,EAAYT,EAA8B,CACjD,MAAI,CAACA,GAAKM,EAASN,CAAC,EAAU,GACvB,aAAaA,EAAE,OAAO,QAC/B,CAIA,MAAMU,EAAqD,CACzD,GAAI,WACJ,IAAK,uBACL,QAAS,qBAAA,EAGLC,EAAUjC,EAAS,IAAMI,EAAM,KAAK,OAAQ8B,GAAMA,EAAE,QAAU,SAAS,EAAE,MAAM,EAC/EC,EAAUnC,EAAS,IAAMI,EAAM,KAAK,OAAQ8B,GAAMA,EAAE,QAAU,QAAQ,EAAE,MAAM,EAQ9EE,EAAiBpC,EAAS,IAAMqC,GAAW1B,EAAa,KAAK,CAAC,EAE9D2B,EAAetC,EAAS,IAAA,OAAM,cAAOW,EAAa,KAAK,IAAM,QAAOR,EAAAc,EAAQ,QAAR,YAAAd,EAAe,KAAK,EAAC,EACzFoC,EAAYvC,EAAS,IAAA,OAAM,OAAAY,EAAU,QAAU,SAAOT,EAAAe,EAAY,QAAZ,YAAAf,EAAmB,QAAS,EAAE,EAAC,EAGrFqC,EAAkC,CACtC,OAAQ,mBACR,UAAW,yBACX,WAAY,qBACZ,MAAO,sBAAA,EAEHC,EAAcX,EAAM,IAAKR,IAAO,CAAE,MAAOA,EAAG,MAAOoB,GAASpB,CAAC,EAAG,KAAMkB,EAAUlB,CAAC,GAAI,oBAIzFqB,EAyMM,MAAA,KAAA,eAxMJC,EAMM,MAAA,CAND,MAAM,aAAW,CACpBA,EAIM,MAAA,KAAA,CAHJA,EAAiB,UAAb,UAAQ,CAAA,SAQhBA,EAgFU,UAhFVC,GAgFU,CA/ERC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAuC,KAAA,CAAnC,MAAM,aAAA,EAAc,aAAU,EAAA,GAClCE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA+E,IAAA,CAA5E,MAAM,WAAA,EAAY,yDAAsD,EAAA,GAE3EA,EAUM,MAVNG,GAUM,CATJD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAyC,QAAA,CAAlC,IAAI,SAAA,EAAU,eAAY,EAAA,KACjCA,EAME,QAAA,CALA,GAAG,UACW,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAAC,EAAAhD,CAAA,EAAS,QAAO+C,GAC9B,KAAK,MACL,WAAW,QACX,YAAY,eAAA,gBAHEC,EAAAhD,CAAA,EAAS,eAAf,CAAA,KAAR,EAAA,CAA+B,IAKjC6C,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAqD,MAAA,CAAhD,MAAM,aAAY,2BAAwB,EAAA,EAAA,GAGjDA,EAkDM,MAlDNM,GAkDM,CAjDJJ,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAuC,QAAA,CAAhC,IAAI,OAAA,EAAQ,eAAY,EAAA,KAe/BA,EAYE,QAAA,CAXA,GAAG,QACW,sBAAAE,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAAC,EAAAhD,CAAA,EAAS,MAAK+C,GAC3B,KAAMlD,EAAA,OAAM,CAAKmD,EAAAhD,CAAA,EAAS,MAAK,OAAA,WAChC,KAAK,sBACL,aAAa,MACb,iBAAA,GACA,gBAAc,OACd,gBAAA,GACA,iBAAe,QACf,WAAW,QACX,YAAY,kCAAA,kBATEgD,EAAAhD,CAAA,EAAS,aAAf,CAAA,KAAR,EAAA,CAA6B,IAW/B2C,EAgBM,MAhBNO,GAgBM,CAfUF,EAAAhD,CAAA,EAAS,WAAvB0C,EAES,SAAA,OAFqB,MAAM,WAAY,QAAKG,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAElD,EAAA,MAAM,CAAIA,EAAA,MAAA,IAC5DA,EAAA,MAAM,OAAA,MAAA,EAAA,CAAA,YAGHmD,EAAAhD,CAAA,EAAS,WADjBmD,EAQeC,EAAA,OANb,QAAQ,QACR,MAAM,KACN,QAAQ,YACP,MAAGP,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAEC,EAAAhD,CAAA,EAAS,MAAK,GAAA,aACrB,IAED,CAAA,GAAA6C,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,UAED,EAAA,CAAA,qBACYG,EAAAhD,CAAA,EAAS,WAArB0C,EAEO,OAFPW,GAEOC,EADFxD,EAAA,KAAU,EAAA,CAAA,cAGjB6C,EAGM,MAHNY,GAGM,iBAHiB,sEAErB,EAAA,GAAgBtD,EAAA,QAAY,QAA5ByC,EAAqFc,EAAA,CAAA,IAAA,GAAA,GAA7C,oCAAkC,CAAA,oBAI9Eb,EAWM,MAXNc,GAWM,CAVJd,EAES,SAAA,CAFD,MAAM,MAAO,SAAUhD,EAAA,MAAW,QAAOS,CAAA,IAC5CT,EAAA,MAAQ,YAAA,iBAAA,EAAA,EAAA+D,EAAA,EAEDV,EAAA7C,CAAA,EAAM,QAAlBwD,IAAAjB,EAKO,OALPkB,GAKO,CALgCC,EAAA,0BACdb,EAAA7C,CAAA,EAAM,OAAO,OAAO,EAAG,IAC9C,CAAA,EAAA2D,EAEWC,GAAA,CAFD,MAAM,wBAAsB,WAAC,IACrB,iBADqB,oBACrB,EAAA,GAAApB,EAAuC,OAAA,KAAAW,EAA9BN,EAAA7C,CAAA,EAAM,OAAO,OAAO,EAAA,CAAA,CAAA,YAGhC6C,EAAA7C,CAAA,EAAM,aAAvBwD,EAAA,EAAAjB,EAA8E,OAA9EsB,GAA8EV,EAA3BN,EAAA7C,CAAA,EAAM,WAAW,EAAA,CAAA,gBAKxEwC,EA2EU,UA3EVsB,GA2EU,CA1ERpB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAsC,KAAA,CAAlC,MAAM,aAAA,EAAc,YAAS,EAAA,GACjCE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAsE,IAAA,CAAnE,MAAM,WAAA,EAAY,gDAA6C,EAAA,GAEjDnC,EAAA,WAAjB2C,EAA0Fe,GAAA,OAA7D,KAAM1D,EAAA,MAAW,MAAM,mCAAA,6BAEpCD,EAAA,WAAhBmC,EAmEWc,EAAA,CAAA,IAAA,GAAA,CAlETb,EAuCM,MAvCNwB,GAuCM,CAhCJtB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8C,QAAA,CAAvC,IAAI,SAAA,EAAU,oBAAiB,EAAA,GACtCA,EAwBM,MAxBNyB,GAwBM,GAvBJzB,EAUE,QAAA,CATA,GAAG,+CACMjC,EAAY,MAAAqC,GACrB,KAAK,SACL,IAAI,IACJ,KAAK,IACL,UAAU,UACT,SAAQ,CAAGpB,EAASX,EAAA,KAAO,EAC3B,MAAOc,EAAYd,EAAA,KAAO,GAAK,OAC/B,MAAKqD,GAAA,cAAgB1C,EAASX,EAAA,KAAO,EAAA,GAAA,sCAAA,EAAA,CAAA,kBAP7BN,EAAA,KAAY,CAAA,GASvBoD,EAQeV,EAAA,CAPb,QAAQ,UACP,QAASxC,EAAA,QAAS,WAClB,SAAQ,CAAGe,EAASX,EAAA,KAAO,IAAMqB,EAAA,OAAY,CAAA,CAAMF,EAAA,OAAkBvB,EAAA,QAAS,KAC9E,MAAOkB,EAAYd,EAAA,KAAO,GAAKmB,EAAA,QAAmBE,EAAA,MAAe,OAAS,oCAC1E,QAAKQ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAEtB,EAAI,WAAa,OAAOf,EAAA,KAAY,CAAA,EAAA,aAC7C,IAED,CAAA,GAAAmC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,SAED,EAAA,CAAA,4CACAF,EAEO,OAFP2B,GAEOhB,EADFtB,EAAA,KAAO,EAAG,cAAWsB,EAAGpB,EAAA,KAAO,EAAG,YACvC,CAAA,CAAA,iBAEFS,EAEM,MAAA,CAFD,MAAM,aAAW,GAAC,0CACkB,EAAAA,EAAmC,SAAhC,8BAA4B,CAAA,OAE7D3B,EAAA,OAAX2C,EAAA,EAAAjB,EAEM,MAFN6B,GAEM,CADJ5B,EAA0C,WAApCZ,EAAaf,QAAQ,MAAM,GAAI,IAAC,CAAA,IAAI,IAACsC,EAAGxB,EAAYd,EAAA,KAAO,CAAA,EAAA,CAAA,CAAA,eAIrE2B,EAwBM,MAxBN6B,GAwBM,CAvBJ3B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8D,QAAA,CAAvD,IAAI,aAAA,EAAc,gCAA6B,EAAA,GACtDA,EAiBM,MAjBN8B,GAiBM,CAhBJX,EAMEY,EAAA,CALA,GAAG,yBACM/D,EAAA,2CAAAA,EAAS,MAAAoC,GAClB,MAAM,gCACL,QAASC,EAAAR,CAAA,EACT,SAAQ,CAAGb,EAASV,EAAA,KAAW,CAAA,8CAElC6C,EAQeV,EAAA,CAPb,QAAQ,UACP,QAASxC,EAAA,QAAS,eAClB,UAAWe,EAASV,OAAW,GAAA,CAAMqB,EAAA,OAAa1B,EAAA,QAAS,KAC3D,MAAOkB,EAAYb,OAAW,IAAMqB,EAAA,MAAY,OAAS,oCACzD,QAAKO,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAEtB,EAAI,eAAiBd,EAAA,KAAS,EAAA,aACvC,IAED,CAAA,GAAAkC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFC,SAED,EAAA,CAAA,8CAEFA,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAA8E,MAAA,CAAzE,MAAM,WAAA,EAAY,oDAAiD,EAAA,GAC7D1B,EAAA,OAAX0C,EAAA,EAAAjB,EAEM,MAFNiC,GAEM,CADJhC,EAA8C,WAAxCZ,EAAad,QAAY,MAAM,GAAI,IAAC,CAAA,IAAI,IAACqC,EAAGxB,EAAYb,EAAA,KAAW,CAAA,EAAA,CAAA,CAAA,qBAIhER,EAAA,oBAAfiC,EAAyD,IAAzDkC,GAA6C,UAAQ,KAGvDjC,EA6BU,UA7BVkC,GA6BU,CA5BRhC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAuC,KAAA,CAAnC,MAAM,aAAA,EAAc,aAAU,EAAA,GAClCE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgD,IAAA,CAA7C,MAAM,WAAA,EAAY,0BAAuB,EAAA,GAE5CA,EAWM,MAXNmC,GAWM,CAVJjC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAgC,QAAA,CAAzB,IAAI,OAAA,EAAQ,QAAK,EAAA,GACxBmB,EAQIY,EAAA,CAPS,WAAA1B,EAAAhD,CAAA,EAAS,MAAT,sBAAA6C,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAAC,EAAAhD,CAAA,EAAS,MAAK+C,GAAE,GAAG,QAC5B,MAAM,QACL,QAAS,sGAIT,2BAIPJ,EAWM,MAXNoC,GAWM,CAVJlC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAF,EAAkC,QAAA,CAA3B,IAAI,QAAA,EAAS,SAAM,EAAA,GAC1BmB,EAQIY,EAAA,CAPS,WAAA1B,EAAAhD,CAAA,EAAS,OAAT,sBAAA6C,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAE,GAAAC,EAAAhD,CAAA,EAAS,OAAM+C,GAAE,GAAG,SAC7B,MAAM,SACL,QAAS,sHAIT"}

package/dist/assets/{SkeletonList.vue_vue_type_script_setup_true_lang-DMvuIcZF.js → SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js}

@@ -1,2 +1,2 @@
-import{d as s,o as e,c as a,F as o,r,D as n,E as i}from"./index-BzdU0RNE.js";const c={role:"status","aria-live":"polite","aria-label":"loading"},p=s({__name:"SkeletonList",props:{rows:{default:3},tall:{type:Boolean,default:!1}},setup(l){return(d,u)=>(e(),a("div",c,[(e(!0),a(o,null,r(l.rows,t=>(e(),a("div",{key:t,class:i(["skel",{tall:l.tall}]),style:n({width:`${100-t*7}%`})},null,6))),128))]))}});export{p as _};
-//# sourceMappingURL=SkeletonList.vue_vue_type_script_setup_true_lang-DMvuIcZF.js.map
+import{d as s,o as e,c as a,F as o,r,D as n,E as i}from"./index-D_Ks6aQi.js";const c={role:"status","aria-live":"polite","aria-label":"loading"},p=s({__name:"SkeletonList",props:{rows:{default:3},tall:{type:Boolean,default:!1}},setup(l){return(d,u)=>(e(),a("div",c,[(e(!0),a(o,null,r(l.rows,t=>(e(),a("div",{key:t,class:i(["skel",{tall:l.tall}]),style:n({width:`${100-t*7}%`})},null,6))),128))]))}});export{p as _};
+//# sourceMappingURL=SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js.map

package/dist/assets/{SkeletonList.vue_vue_type_script_setup_true_lang-DMvuIcZF.js.map → SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js.map}

@@ -1 +1 @@
-{"version":3,"file":"SkeletonList.vue_vue_type_script_setup_true_lang-DMvuIcZF.js","sources":["../../src/components/SkeletonList.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A loading placeholder shaped like the thing that is coming.\n *\n * Deliberately not a spinner on an empty page: a spinner says \"wait\" and nothing else, while a\n * skeleton says what will be there and stops the layout jumping when it arrives. It also makes an\n * empty result visibly different from a slow one, which on this page is the difference between\n * \"nothing is deployed\" and \"the API is not answering\".\n */\nwithDefaults(defineProps<{ rows?: number; tall?: boolean }>(), { rows: 3, tall: false });\n</script>\n\n<template>\n  <div role=\"status\" aria-live=\"polite\" aria-label=\"loading\">\n    <div v-for=\"n in rows\" :key=\"n\" class=\"skel\" :class=\"{ tall }\" :style=\"{ width: `${100 - n * 7}%` }\" />\n  </div>\n</template>\n"],"names":["_openBlock","_createElementBlock","_hoisted_1","_Fragment","_renderList","__props","n","_normalizeClass"],"mappings":"2PAaEA,EAAA,EAAAC,EAEM,MAFNC,EAEM,QADJD,EAAuGE,EAAA,KAAAC,EAAtFC,EAAA,KAALC,QAAZL,EAAuG,MAAA,CAA/E,IAAKK,EAAG,MAAKC,EAAA,CAAC,OAAM,CAAA,KAAWF,EAAA,IAAA,CAAI,CAAA,EAAK,sBAAyBC,EAAC,CAAA,GAAA,CAAA,CAAA"}
+{"version":3,"file":"SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js","sources":["../../src/components/SkeletonList.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * A loading placeholder shaped like the thing that is coming.\n *\n * Deliberately not a spinner on an empty page: a spinner says \"wait\" and nothing else, while a\n * skeleton says what will be there and stops the layout jumping when it arrives. It also makes an\n * empty result visibly different from a slow one, which on this page is the difference between\n * \"nothing is deployed\" and \"the API is not answering\".\n */\nwithDefaults(defineProps<{ rows?: number; tall?: boolean }>(), { rows: 3, tall: false });\n</script>\n\n<template>\n  <div role=\"status\" aria-live=\"polite\" aria-label=\"loading\">\n    <div v-for=\"n in rows\" :key=\"n\" class=\"skel\" :class=\"{ tall }\" :style=\"{ width: `${100 - n * 7}%` }\" />\n  </div>\n</template>\n"],"names":["_openBlock","_createElementBlock","_hoisted_1","_Fragment","_renderList","__props","n","_normalizeClass"],"mappings":"2PAaEA,EAAA,EAAAC,EAEM,MAFNC,EAEM,QADJD,EAAuGE,EAAA,KAAAC,EAAtFC,EAAA,KAALC,QAAZL,EAAuG,MAAA,CAA/E,IAAKK,EAAG,MAAKC,EAAA,CAAC,OAAM,CAAA,KAAWF,EAAA,IAAA,CAAI,CAAA,EAAK,sBAAyBC,EAAC,CAAA,GAAA,CAAA,CAAA"}

package/dist/assets/SpecDetailView-DyFAAMfr.js

@@ -0,0 +1,2 @@
+import{d as R,N,A as V,J as $,c as a,a as e,e as f,h as c,t as o,E as z,u as h,M as B,f as p,z as g,F as x,n as i,_ as L,r as U,R as A,i as m,j as D,k as S,o as t,ac as j,p as q,C as E}from"./index-D_Ks6aQi.js";import{_ as F}from"./SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js";import{_ as I}from"./ErrorNote.vue_vue_type_script_setup_true_lang-FEOV8vdM.js";const H={class:"page-head"},J={class:"mute",style:{"font-size":"var(--t-sm)"}},M={style:{"font-size":"var(--t-xl)"}},T={class:"sub"},W={key:0},G={key:1},K={key:2},O={key:3,class:"mute"},P={key:1,class:"panel"},Q={class:"banner failed"},X={class:"panel"},Y={key:1,class:"kvlist"},Z={class:"k"},ee={class:"v"},se={key:0},te={key:1,class:"mute"},ae={class:"v row"},ne={key:1,class:"mute"},oe={class:"v"},le={class:"v"},ie={key:0,class:"panel"},de={key:0,class:"banner plain"},ue={key:1,class:"code"},re={key:2,class:"mute"},ve=R({__name:"SpecDetailView",props:{name:{}},setup(v){const _=v,n=m(null),d=m(!0),u=m(""),r=m(!1);async function b(){d.value=!0,r.value=!1;const l=await q.getAuthed(`/api/specs/${encodeURIComponent(_.name)}`);if(d.value=!1,l.status===404){r.value=!0;return}if(!l.ok){u.value=E(l,"load this spec");return}u.value="",n.value=l.body}N(()=>_.name,b,{immediate:!0}),N(()=>j.token,b),V.deploymentsLoaded||$();const C=D(()=>V.deployments.filter(l=>l.specName===_.name));return(l,s)=>{var w;const k=S("RouterLink");return t(),a("div",null,[e("div",H,[e("div",null,[e("div",J,[f(k,{to:"/specs"},{default:c(()=>[...s[0]||(s[0]=[i("← specs",-1)])]),_:1})]),e("h1",M,o(v.name),1),e("div",T,[(w=n.value)!=null&&w.description?(t(),a("span",W,o(n.value.description),1)):r.value?(t(),a("span",G,"not found")):d.value?(t(),a("span",K,"loading…")):(t(),a("span",O,"no description"))])]),s[1]||(s[1]=e("span",{class:"grow"},null,-1)),n.value?(t(),a("span",{key:0,class:z(["badge",n.value.kind])},o(h(B)(n.value.kind)),3)):p("",!0)]),u.value?(t(),g(I,{key:0,text:u.value,title:"Could not load this spec."},null,8,["text"])):p("",!0),r.value?(t(),a("section",P,[e("div",Q,[e("b",null,"No spec named “"+o(v.name)+"”.",1)])])):(t(),a(x,{key:2},[e("section",X,[d.value?(t(),g(F,{key:0,rows:4})):n.value?(t(),a("ul",Y,[e("li",null,[e("span",Z,[s[3]||(s[3]=i(" Needs ",-1)),f(L,{label:"what needs means"},{default:c(()=>[...s[2]||(s[2]=[i(" Variables the spec uses but does not set. ",-1)])]),_:1})]),e("span",ee,[n.value.requiredVars.length?(t(),a("b",se,o(n.value.requiredVars.join(", ")),1)):(t(),a("span",te,"nothing"))])]),e("li",null,[s[4]||(s[4]=e("span",{class:"k"},"Used by",-1)),e("span",ae,[C.value.length?(t(!0),a(x,{key:0},U(C.value,y=>(t(),g(k,{key:y.id,to:`/deployments/${encodeURIComponent(y.id)}`},{default:c(()=>[i(o(y.id),1)]),_:2},1032,["to"]))),128)):(t(),a("span",ne,"none"))])]),e("li",null,[s[5]||(s[5]=e("span",{class:"k"},"Created",-1)),e("span",oe,o(h(A)(n.value.createdAt)),1)]),e("li",null,[s[6]||(s[6]=e("span",{class:"k"},"Updated",-1)),e("span",le,o(h(A)(n.value.updatedAt)),1)])])):p("",!0)]),n.value?(t(),a("section",ie,[s[10]||(s[10]=e("div",{class:"phead"},[e("h2",{class:"section"},"Source")],-1)),n.value.sourceWithheld?(t(),a("div",de,[s[9]||(s[9]=e("b",null,"Hidden without an access token.",-1)),e("p",null,[f(k,{to:"/settings"},{default:c(()=>[...s[7]||(s[7]=[i("Add your token",-1)])]),_:1}),s[8]||(s[8]=i(" to see it.",-1))])])):n.value.source?(t(),a("pre",ue,o(n.value.source),1)):(t(),a("p",re,"No source."))])):p("",!0)],64))])}}});export{ve as default};
+//# sourceMappingURL=SpecDetailView-DyFAAMfr.js.map

package/dist/assets/SpecDetailView-DyFAAMfr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpecDetailView-DyFAAMfr.js","sources":["../../src/views/SpecDetailView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * One stored spec: what it needs, who uses it, and its source.\n *\n * THE SOURCE IS A RESTRICTED READ. Everything else on this API can be read without a token, but a\n * spec's hook bodies are shell strings that routinely carry a credential inline, so the server sends\n * `source` only to an authenticated request and sets `sourceWithheld` otherwise. That is why this\n * one view uses `getAuthed`, and why \"no token\" renders a named banner rather than an empty editor —\n * a blank box would read as an empty spec, which is a different and much more alarming fact.\n */\nimport { computed, ref, watch } from 'vue';\nimport { api, problem } from '../api/client';\nimport type { SpecDetail } from '../api/types';\nimport { state, loadDeployments } from '../composables/useControlPlane';\nimport { settings } from '../composables/useSettings';\nimport { sentence, stamp } from '../composables/useFormat';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\n\nconst props = defineProps<{ name: string }>();\n\nconst spec = ref<SpecDetail | null>(null);\nconst loading = ref(true);\nconst error = ref('');\nconst missing = ref(false);\n\nasync function load(): Promise<void> {\n  loading.value = true;\n  missing.value = false;\n  const r = await api.getAuthed<SpecDetail>(`/api/specs/${encodeURIComponent(props.name)}`);\n  loading.value = false;\n  if (r.status === 404) {\n    missing.value = true;\n    return;\n  }\n  if (!r.ok) {\n    error.value = problem(r, 'load this spec');\n    return;\n  }\n  error.value = '';\n  spec.value = r.body;\n}\n\nwatch(() => props.name, load, { immediate: true });\n// Re-fetch when a token is pasted: the same URL returns strictly more with one.\nwatch(() => settings.token, load);\n\nif (!state.deploymentsLoaded) void loadDeployments();\n\n/** Deployments that would become unresolvable if this spec were deleted. */\nconst users = computed(() => state.deployments.filter((d) => d.specName === props.name));\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <div class=\"mute\" style=\"font-size: var(--t-sm)\">\n          <RouterLink to=\"/specs\">← specs</RouterLink>\n        </div>\n        <h1 style=\"font-size: var(--t-xl)\">{{ name }}</h1>\n        <div class=\"sub\">\n          <span v-if=\"spec?.description\">{{ spec.description }}</span>\n          <span v-else-if=\"missing\">not found</span>\n          <span v-else-if=\"loading\">loading…</span>\n          <span v-else class=\"mute\">no description</span>\n        </div>\n      </div>\n      <span class=\"grow\" />\n      <span v-if=\"spec\" class=\"badge\" :class=\"spec.kind\">{{ sentence(spec.kind) }}</span>\n    </div>\n\n    <ErrorNote v-if=\"error\" :text=\"error\" title=\"Could not load this spec.\" />\n\n    <section v-if=\"missing\" class=\"panel\">\n      <div class=\"banner failed\">\n        <b>No spec named “{{ name }}”.</b>\n      </div>\n    </section>\n\n    <template v-else>\n      <section class=\"panel\">\n        <SkeletonList v-if=\"loading\" :rows=\"4\" />\n        <ul v-else-if=\"spec\" class=\"kvlist\">\n          <li>\n            <span class=\"k\">\n              Needs\n              <InfoHint label=\"what needs means\">\n                Variables the spec uses but does not set.\n              </InfoHint>\n            </span>\n            <span class=\"v\">\n              <b v-if=\"spec.requiredVars.length\">{{ spec.requiredVars.join(', ') }}</b>\n              <span v-else class=\"mute\">nothing</span>\n            </span>\n          </li>\n          <li>\n            <span class=\"k\">Used by</span>\n            <span class=\"v row\">\n              <template v-if=\"users.length\">\n                <RouterLink\n                  v-for=\"d in users\"\n                  :key=\"d.id\"\n                  :to=\"`/deployments/${encodeURIComponent(d.id)}`\"\n                  >{{ d.id }}</RouterLink\n                >\n              </template>\n              <span v-else class=\"mute\">none</span>\n            </span>\n          </li>\n          <li><span class=\"k\">Created</span><span class=\"v\">{{ stamp(spec.createdAt) }}</span></li>\n          <li><span class=\"k\">Updated</span><span class=\"v\">{{ stamp(spec.updatedAt) }}</span></li>\n        </ul>\n      </section>\n\n      <section v-if=\"spec\" class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">Source</h2>\n        </div>\n\n        <!--\n          Withheld, not empty. The server never sent the source, so there is nothing here to reveal —\n          the same reasoning as the masked variables: an affordance that promises plaintext the page\n          does not have would be a lie.\n        -->\n        <div v-if=\"spec.sourceWithheld\" class=\"banner plain\">\n          <b>Hidden without an access token.</b>\n          <p><RouterLink to=\"/settings\">Add your token</RouterLink> to see it.</p>\n        </div>\n        <pre v-else-if=\"spec.source\" class=\"code\">{{ spec.source }}</pre>\n        <!-- Withheld above, genuinely empty here — the two must not read the same. -->\n        <p v-else class=\"mute\">No source.</p>\n      </section>\n    </template>\n  </div>\n</template>\n"],"names":["props","__props","spec","ref","loading","error","missing","load","r","api","problem","watch","settings","state","loadDeployments","users","computed","d","_createElementBlock","_createElementVNode","_hoisted_1","_hoisted_2","_createVNode","_component_RouterLink","_cache","_hoisted_3","_toDisplayString","_hoisted_4","_a","_hoisted_5","_openBlock","_hoisted_8","_normalizeClass","_unref","sentence","_createBlock","ErrorNote","_hoisted_9","_hoisted_10","_Fragment","_hoisted_11","SkeletonList","_hoisted_12","_hoisted_13","InfoHint","_hoisted_14","_hoisted_15","_hoisted_16","_hoisted_17","_renderList","_createTextVNode","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24"],"mappings":"s7BAoBA,MAAMA,EAAQC,EAERC,EAAOC,EAAuB,IAAI,EAClCC,EAAUD,EAAI,EAAI,EAClBE,EAAQF,EAAI,EAAE,EACdG,EAAUH,EAAI,EAAK,EAEzB,eAAeI,GAAsB,CACnCH,EAAQ,MAAQ,GAChBE,EAAQ,MAAQ,GAChB,MAAME,EAAI,MAAMC,EAAI,UAAsB,cAAc,mBAAmBT,EAAM,IAAI,CAAC,EAAE,EAExF,GADAI,EAAQ,MAAQ,GACZI,EAAE,SAAW,IAAK,CACpBF,EAAQ,MAAQ,GAChB,MACF,CACA,GAAI,CAACE,EAAE,GAAI,CACTH,EAAM,MAAQK,EAAQF,EAAG,gBAAgB,EACzC,MACF,CACAH,EAAM,MAAQ,GACdH,EAAK,MAAQM,EAAE,IACjB,CAEAG,EAAM,IAAMX,EAAM,KAAMO,EAAM,CAAE,UAAW,GAAM,EAEjDI,EAAM,IAAMC,EAAS,MAAOL,CAAI,EAE3BM,EAAM,mBAAwBC,EAAA,EAGnC,MAAMC,EAAQC,EAAS,IAAMH,EAAM,YAAY,OAAQI,GAAMA,EAAE,WAAajB,EAAM,IAAI,CAAC,yDAIrFkB,EAgFM,MAAA,KAAA,CA/EJC,EAeM,MAfNC,EAeM,CAdJD,EAWM,MAAA,KAAA,CAVJA,EAEM,MAFNE,EAEM,CADJC,EAA4CC,EAAA,CAAhC,GAAG,UAAQ,WAAC,IAAO,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAAP,UAAO,EAAA,CAAA,aAEjCL,EAAkD,KAAlDM,EAAkDC,EAAZzB,EAAA,IAAI,EAAA,CAAA,EAC1CkB,EAKM,MALNQ,EAKM,EAJQC,EAAA1B,EAAA,QAAA,MAAA0B,EAAM,iBAAlBV,EAA4D,OAAAW,EAAAH,EAA1BxB,EAAA,MAAK,WAAW,EAAA,CAAA,GACjCI,EAAA,OAAjBwB,EAAA,EAAAZ,EAA0C,SAAhB,WAAS,GAClBd,EAAA,OAAjB0B,IAAAZ,EAAyC,SAAf,UAAQ,QAClCA,EAA+C,OAA/Ca,EAA0B,gBAAc,EAAA,iBAG5CZ,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACNjB,EAAA,WAAZgB,EAAmF,OAAA,OAAjE,MAAKc,EAAA,CAAC,QAAgB9B,EAAA,MAAK,IAAI,CAAA,CAAA,IAAK+B,EAAAC,CAAA,EAAShC,EAAA,MAAK,IAAI,CAAA,EAAA,CAAA,cAGzDG,EAAA,WAAjB8B,EAA0EC,EAAA,OAAjD,KAAM/B,EAAA,MAAO,MAAM,2BAAA,6BAE7BC,EAAA,OAAfwB,EAAA,EAAAZ,EAIU,UAJVmB,EAIU,CAHRlB,EAEM,MAFNmB,EAEM,CADJnB,EAAkC,IAAA,KAA/B,kBAAeO,EAAGzB,EAAA,IAAI,EAAG,KAAE,CAAA,CAAA,WAIlCiB,EAqDWqB,EAAA,CAAA,IAAA,GAAA,CApDTpB,EAgCU,UAhCVqB,EAgCU,CA/BYpC,EAAA,WAApB+B,EAAyCM,EAAA,OAAX,KAAM,CAAA,IACrBvC,EAAA,OAAf4B,IAAAZ,EA6BK,KA7BLwB,EA6BK,CA5BHvB,EAWK,KAAA,KAAA,CAVHA,EAKO,OALPwB,EAKO,eALS,UAEd,EAAA,GAAArB,EAEWsB,EAAA,CAFD,MAAM,oBAAkB,WAAC,IAEnC,CAAA,GAAApB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFmC,8CAEnC,EAAA,CAAA,aAEFL,EAGO,OAHP0B,GAGO,CAFI3C,EAAA,MAAK,aAAa,QAA3B4B,EAAA,EAAAZ,EAAyE,IAAA4B,GAAApB,EAAnCxB,EAAA,MAAK,aAAa,KAAI,IAAA,CAAA,EAAA,CAAA,QAC5DgB,EAAwC,OAAxC6B,GAA0B,SAAO,EAAA,KAGrC5B,EAaK,KAAA,KAAA,CAZHK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GACvBA,EAUO,OAVP6B,GAUO,CATWjC,EAAA,MAAM,cACpBG,EAKCqB,EAAA,CAAA,IAAA,GAAAU,EAJalC,EAAA,MAALE,QADTkB,EAKCZ,EAAA,CAHE,IAAKN,EAAE,GACP,GAAE,gBAAkB,mBAAmBA,EAAE,EAAE,CAAA,EAAA,aAC3C,IAAU,CAAPiC,EAAAxB,EAAAT,EAAE,EAAE,EAAA,CAAA,CAAA,kCAGZC,EAAqC,OAArCiC,GAA0B,MAAI,EAAA,KAGlChC,EAAyF,KAAA,KAAA,CAArFK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAkD,OAAlDiC,GAAkD1B,EAA/BO,KAAM/B,EAAA,MAAK,SAAS,CAAA,EAAA,CAAA,CAAA,GACzEiB,EAAyF,KAAA,KAAA,CAArFK,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAA8B,OAAA,CAAxB,MAAM,GAAA,EAAI,UAAO,EAAA,GAAOA,EAAkD,OAAlDkC,GAAkD3B,EAA/BO,KAAM/B,EAAA,MAAK,SAAS,CAAA,EAAA,CAAA,CAAA,iBAI9DA,EAAA,OAAf4B,EAAA,EAAAZ,EAiBU,UAjBVoC,GAiBU,eAhBRnC,EAEM,MAAA,CAFD,MAAM,SAAO,CAChBA,EAA+B,KAAA,CAA3B,MAAM,SAAA,EAAU,QAAM,CAAA,OAQjBjB,EAAA,MAAK,gBAAhB4B,IAAAZ,EAGM,MAHNqC,GAGM,CAFJ/B,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,EAAsC,SAAnC,kCAA+B,EAAA,GAClCA,EAAwE,IAAA,KAAA,CAArEG,EAAsDC,EAAA,CAA1C,GAAG,aAAW,WAAC,IAAc,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAAd,iBAAc,EAAA,CAAA,yBAAa,cAAW,EAAA,EAAA,MAEtDtB,EAAA,MAAK,QAArB4B,EAAA,EAAAZ,EAAiE,MAAjEsC,GAAiE9B,EAApBxB,EAAA,MAAK,MAAM,EAAA,CAAA,QAExDgB,EAAqC,IAArCuC,GAAuB,YAAU,EAAA"}

package/dist/assets/SpecsView-CfV1_GDx.js

@@ -0,0 +1,2 @@
+import{d as L,A as w,J as $,c as l,a as t,e as d,z as g,f as _,F as C,g as q,v as S,n as m,h as N,_ as U,r as T,t as n,i,p as z,C as B,j as x,o,D,E,u as M,M as R,k as j}from"./index-D_Ks6aQi.js";import{_ as A}from"./SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js";import{_ as F}from"./ErrorNote.vue_vue_type_script_setup_true_lang-FEOV8vdM.js";import{_ as P}from"./RelativeTime.vue_vue_type_script_setup_true_lang-BxIqRu_b.js";import{E as I}from"./EquivalentCommand-D-mkbReY.js";import{_ as J}from"./RefreshButton.vue_vue_type_script_setup_true_lang-CQvD4Out.js";import"./_plugin-vue_export-helper-DlAUqK2U.js";const K={class:"page-head"},G={key:1,class:"panel"},H={key:2,class:"panel"},O={class:"field",style:{"max-width":"320px","margin-bottom":"var(--s4)"}},Q={role:"table",class:"cards","data-testid":"specs.list"},W={role:"rowgroup"},X={role:"row"},Y={role:"columnheader"},Z={role:"rowgroup",class:"stagger"},ee={role:"cell",class:"name","data-label":"name"},te={key:0,class:"mute",style:{"font-size":"var(--t-sm)"}},se={role:"cell","data-label":"kind"},oe={role:"cell","data-label":"needs"},ae={key:0},le={key:1,class:"mute"},ne={role:"cell","data-label":"used by"},re={key:0},de={key:1,class:"mute"},ie={role:"cell",class:"dim nowrap","data-label":"updated"},ue={key:0,role:"row"},pe={role:"cell",colspan:"5",class:"mute"},ce={key:2,class:"banner plain"},we=L({__name:"SpecsView",setup(me){const u=i([]),v=i(!1),p=i(""),h=i(!1),r=i("");async function f(){const a=await z.get("/api/specs");if(v.value=!0,a.status===404){h.value=!0;return}if(!a.ok){p.value=B(a,"load specs");return}p.value="",u.value=a.body.specs??[]}f(),w.deploymentsLoaded||$();const y=x(()=>{const a=new Map;for(const e of w.deployments){if(!e.specName)continue;const c=a.get(e.specName)??[];c.push(e.id),a.set(e.specName,c)}return a}),b=x(()=>{const a=r.value.trim().toLowerCase();return a?u.value.filter(e=>e.name.toLowerCase().includes(a)||(e.description??"").toLowerCase().includes(a)):u.value});return(a,e)=>{const c=j("RouterLink");return o(),l("div",null,[t("div",K,[e[2]||(e[2]=t("div",null,[t("h1",null,"Specs"),t("div",{class:"sub"},"Stored once, used by any number of deployments")],-1)),e[3]||(e[3]=t("span",{class:"grow"},null,-1)),d(J,{run:f})]),p.value?(o(),g(F,{key:0,text:p.value,title:"Could not load the specs."},null,8,["text"])):_("",!0),h.value?(o(),l("section",G,[...e[4]||(e[4]=[t("div",{class:"banner plain"},[t("b",null,"This host is too old to store specs.")],-1)])])):(o(),l("section",H,[v.value?u.value.length?(o(),l(C,{key:1},[t("div",O,[e[5]||(e[5]=t("label",{for:"q"},"Search",-1)),q(t("input",{id:"q","onUpdate:modelValue":e[0]||(e[0]=s=>r.value=s),type:"search",placeholder:"name or description"},null,512),[[S,r.value]])]),t("table",Q,[t("thead",W,[t("tr",X,[e[8]||(e[8]=t("th",{role:"columnheader"},"Name",-1)),e[9]||(e[9]=t("th",{role:"columnheader"},"Kind",-1)),t("th",Y,[e[7]||(e[7]=m(" needs ",-1)),d(U,{label:"what needs means"},{default:N(()=>[...e[6]||(e[6]=[m(" Variables the spec uses but does not set. ",-1)])]),_:1})]),e[10]||(e[10]=t("th",{role:"columnheader"},"Used by",-1)),e[11]||(e[11]=t("th",{role:"columnheader"},"Updated",-1))])]),t("tbody",Z,[(o(!0),l(C,null,T(b.value,(s,V)=>{var k;return o(),l("tr",{key:s.name,role:"row",style:D({"--i":V})},[t("td",ee,[d(c,{to:`/specs/${encodeURIComponent(s.name)}`},{default:N(()=>[m(n(s.name),1)]),_:2},1032,["to"]),s.description?(o(),l("div",te,n(s.description),1)):_("",!0)]),t("td",se,[t("span",{class:E(["badge",s.kind])},n(M(R)(s.kind)),3)]),t("td",oe,[s.requiredVars.length?(o(),l("span",ae,n(s.requiredVars.join(", ")),1)):(o(),l("span",le,"none"))]),t("td",ne,[(k=y.value.get(s.name))!=null&&k.length?(o(),l("span",re,n(y.value.get(s.name).length),1)):(o(),l("span",de,"none"))]),t("td",ie,[d(P,{at:s.updatedAt},null,8,["at"])])],4)}),128)),b.value.length?_("",!0):(o(),l("tr",ue,[t("td",pe,[m(" No spec matches “"+n(r.value)+"”. ",1),t("button",{class:"ghost sm",onClick:e[1]||(e[1]=s=>r.value="")},"Clear search")])]))])])],64)):(o(),l("div",ce,[e[12]||(e[12]=t("b",null,"No specs yet — store one below.",-1)),d(I,{what:"storing a spec",method:"PUT",path:"/api/specs/my-spec",body:{spec:"…the contents of your preview.yml…"},cli:"pstack validate -f preview.yml   # then PUT it with the curl above"})])):(o(),g(A,{key:0,rows:3,tall:""}))]))])}}});export{we as default};
+//# sourceMappingURL=SpecsView-CfV1_GDx.js.map

package/dist/assets/SpecsView-CfV1_GDx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpecsView-CfV1_GDx.js","sources":["../../src/views/SpecsView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Stored specs: what is on this host, and who is using each one.\n *\n * The \"used by\" count is computed from the deployments already in shared state rather than asked\n * for: every row carries `specName`, so the join is free. It matters because deleting a spec that\n * deployments still reference is refused — a deployment that cannot resolve its spec can never be\n * torn down — so knowing the count before you try is the difference between a plan and a 409.\n *\n * A server built before named specs answers 404 here. That is a capability difference, not an\n * error, so it gets its own plain banner instead of a red one.\n */\nimport { computed, ref } from 'vue';\nimport { sentence } from '../composables/useFormat';\nimport { api, problem } from '../api/client';\nimport type { SpecMeta, SpecsResponse } from '../api/types';\nimport { state, loadDeployments } from '../composables/useControlPlane';\n\nimport SkeletonList from '../components/SkeletonList.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport InfoHint from '../components/InfoHint.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport EquivalentCommand from '../components/EquivalentCommand.vue';\nimport RefreshButton from '../components/RefreshButton.vue';\n\nconst specs = ref<SpecMeta[]>([]);\nconst loaded = ref(false);\nconst error = ref('');\nconst unsupported = ref(false);\nconst needle = ref('');\n\nasync function load(): Promise<void> {\n  const r = await api.get<SpecsResponse>('/api/specs');\n  loaded.value = true;\n  if (r.status === 404) {\n    unsupported.value = true;\n    return;\n  }\n  if (!r.ok) {\n    error.value = problem(r, 'load specs');\n    return;\n  }\n  error.value = '';\n  specs.value = r.body.specs ?? [];\n}\n\nvoid load();\n// The deployment list is what the \"used by\" column joins against; a deep link straight here may\n// arrive before the shell's poll has filled it.\nif (!state.deploymentsLoaded) void loadDeployments();\n\n/** Deployment ids referencing each spec, by spec name. */\nconst users = computed(() => {\n  const m = new Map<string, string[]>();\n  for (const d of state.deployments) {\n    if (!d.specName) continue;\n    const list = m.get(d.specName) ?? [];\n    list.push(d.id);\n    m.set(d.specName, list);\n  }\n  return m;\n});\n\nconst shown = computed(() => {\n  const q = needle.value.trim().toLowerCase();\n  if (!q) return specs.value;\n  return specs.value.filter(\n    (s) => s.name.toLowerCase().includes(q) || (s.description ?? '').toLowerCase().includes(q),\n  );\n});\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Specs</h1>\n        <div class=\"sub\">Stored once, used by any number of deployments</div>\n      </div>\n      <span class=\"grow\" />\n      <RefreshButton :run=\"load\" />\n    </div>\n\n    <ErrorNote v-if=\"error\" :text=\"error\" title=\"Could not load the specs.\" />\n\n    <!-- Not an empty list: this host cannot store specs at all (404, an older build). The two\n         states have to stay tellable apart, so this banner is not the empty state below. -->\n    <section v-if=\"unsupported\" class=\"panel\">\n      <div class=\"banner plain\">\n        <b>This host is too old to store specs.</b>\n      </div>\n    </section>\n\n    <section v-else class=\"panel\">\n      <SkeletonList v-if=\"!loaded\" :rows=\"3\" tall />\n\n      <template v-else-if=\"specs.length\">\n        <div class=\"field\" style=\"max-width: 320px; margin-bottom: var(--s4)\">\n          <label for=\"q\">Search</label>\n          <input id=\"q\" v-model=\"needle\" type=\"search\" placeholder=\"name or description\" />\n        </div>\n\n        <table role=\"table\" class=\"cards\" data-testid=\"specs.list\">\n          <thead role=\"rowgroup\">\n            <tr role=\"row\">\n              <th role=\"columnheader\">Name</th>\n              <th role=\"columnheader\">Kind</th>\n              <th role=\"columnheader\">\n                needs\n                <InfoHint label=\"what needs means\">\n                  Variables the spec uses but does not set.\n                </InfoHint>\n              </th>\n              <th role=\"columnheader\">Used by</th>\n              <th role=\"columnheader\">Updated</th>\n            </tr>\n          </thead>\n          <tbody role=\"rowgroup\" class=\"stagger\">\n            <tr v-for=\"(s, i) in shown\" :key=\"s.name\" role=\"row\" :style=\"{ '--i': i }\">\n              <td role=\"cell\" class=\"name\" data-label=\"name\">\n                <RouterLink :to=\"`/specs/${encodeURIComponent(s.name)}`\">{{ s.name }}</RouterLink>\n                <div v-if=\"s.description\" class=\"mute\" style=\"font-size: var(--t-sm)\">\n                  {{ s.description }}\n                </div>\n              </td>\n              <td role=\"cell\" data-label=\"kind\">\n                <span class=\"badge\" :class=\"s.kind\">{{ sentence(s.kind) }}</span>\n              </td>\n              <td role=\"cell\" data-label=\"needs\">\n                <span v-if=\"s.requiredVars.length\">{{ s.requiredVars.join(', ') }}</span>\n                <span v-else class=\"mute\">none</span>\n              </td>\n              <td role=\"cell\" data-label=\"used by\">\n                <span v-if=\"users.get(s.name)?.length\">{{ users.get(s.name)!.length }}</span>\n                <span v-else class=\"mute\">none</span>\n              </td>\n              <td role=\"cell\" class=\"dim nowrap\" data-label=\"updated\"><RelativeTime :at=\"s.updatedAt\" /></td>\n            </tr>\n            <tr v-if=\"!shown.length\" role=\"row\">\n              <td role=\"cell\" colspan=\"5\" class=\"mute\">\n                No spec matches “{{ needle }}”.\n                <button class=\"ghost sm\" @click=\"needle = ''\">Clear search</button>\n              </td>\n            </tr>\n          </tbody>\n        </table>\n      </template>\n\n      <!--\n        Honest empty state. This page cannot create a spec yet, so pointing at \"New spec\" would be a\n        dead end — the generated command below is the way that does work.\n      -->\n      <div v-else class=\"banner plain\">\n        <b>No specs yet — store one below.</b>\n        <EquivalentCommand\n          what=\"storing a spec\"\n          method=\"PUT\"\n          path=\"/api/specs/my-spec\"\n          :body=\"{ spec: '…the contents of your preview.yml…' }\"\n          cli=\"pstack validate -f preview.yml   # then PUT it with the curl above\"\n        />\n      </div>\n    </section>\n  </div>\n</template>\n"],"names":["specs","ref","loaded","error","unsupported","needle","load","r","api","problem","state","loadDeployments","users","computed","m","d","list","shown","q","s","_createElementBlock","_createElementVNode","_hoisted_1","_createVNode","RefreshButton","_createBlock","ErrorNote","_openBlock","_hoisted_2","_cache","_hoisted_3","_Fragment","_hoisted_4","$event","_hoisted_5","_hoisted_6","_hoisted_7","_hoisted_8","InfoHint","_hoisted_9","_renderList","i","_hoisted_10","_component_RouterLink","_createTextVNode","_toDisplayString","_hoisted_11","_hoisted_12","_normalizeClass","_unref","sentence","_hoisted_13","_hoisted_14","_hoisted_15","_hoisted_16","_a","_hoisted_17","_hoisted_18","_hoisted_19","RelativeTime","_hoisted_20","_hoisted_21","_hoisted_22","EquivalentCommand","SkeletonList"],"mappings":"m4CAyBA,MAAMA,EAAQC,EAAgB,EAAE,EAC1BC,EAASD,EAAI,EAAK,EAClBE,EAAQF,EAAI,EAAE,EACdG,EAAcH,EAAI,EAAK,EACvBI,EAASJ,EAAI,EAAE,EAErB,eAAeK,GAAsB,CACnC,MAAMC,EAAI,MAAMC,EAAI,IAAmB,YAAY,EAEnD,GADAN,EAAO,MAAQ,GACXK,EAAE,SAAW,IAAK,CACpBH,EAAY,MAAQ,GACpB,MACF,CACA,GAAI,CAACG,EAAE,GAAI,CACTJ,EAAM,MAAQM,EAAQF,EAAG,YAAY,EACrC,MACF,CACAJ,EAAM,MAAQ,GACdH,EAAM,MAAQO,EAAE,KAAK,OAAS,CAAA,CAChC,CAEKD,EAAA,EAGAI,EAAM,mBAAwBC,EAAA,EAGnC,MAAMC,EAAQC,EAAS,IAAM,CAC3B,MAAMC,MAAQ,IACd,UAAWC,KAAKL,EAAM,YAAa,CACjC,GAAI,CAACK,EAAE,SAAU,SACjB,MAAMC,EAAOF,EAAE,IAAIC,EAAE,QAAQ,GAAK,CAAA,EAClCC,EAAK,KAAKD,EAAE,EAAE,EACdD,EAAE,IAAIC,EAAE,SAAUC,CAAI,CACxB,CACA,OAAOF,CACT,CAAC,EAEKG,EAAQJ,EAAS,IAAM,CAC3B,MAAMK,EAAIb,EAAO,MAAM,KAAA,EAAO,YAAA,EAC9B,OAAKa,EACElB,EAAM,MAAM,OAChBmB,GAAMA,EAAE,KAAK,cAAc,SAASD,CAAC,IAAMC,EAAE,aAAe,IAAI,YAAA,EAAc,SAASD,CAAC,CAAA,EAF5ElB,EAAM,KAIvB,CAAC,mDAICoB,EA0FM,MAAA,KAAA,CAzFJC,EAOM,MAPNC,EAOM,aANJD,EAGM,MAAA,KAAA,CAFJA,EAAc,UAAV,OAAK,EACTA,EAAqE,MAAA,CAAhE,MAAM,KAAA,EAAM,gDAA8C,CAAA,mBAEjEA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBE,EAA6BC,EAAA,CAAb,IAAKlB,EAAI,CAAA,GAGVH,EAAA,WAAjBsB,EAA0EC,EAAA,OAAjD,KAAMvB,EAAA,MAAO,MAAM,2BAAA,6BAI7BC,EAAA,OAAfuB,IAAAP,EAIU,UAJVQ,EAIU,CAAA,GAAAC,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,CAHRR,EAEM,MAAA,CAFD,MAAM,gBAAc,CACvBA,EAA2C,SAAxC,sCAAoC,CAAA,YAI3CM,IAAAP,EAqEU,UArEVU,EAqEU,CApEa5B,EAAA,MAEAF,EAAA,MAAM,YAA3BoB,EAkDWW,EAAA,CAAA,IAAA,GAAA,CAjDTV,EAGM,MAHNW,EAGM,CAFJH,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAR,EAA6B,QAAA,CAAtB,IAAI,GAAA,EAAI,SAAM,EAAA,KACrBA,EAAiF,QAAA,CAA1E,GAAG,yCAAahB,EAAM,MAAA4B,GAAE,KAAK,SAAS,YAAY,qBAAA,gBAAlC5B,EAAA,KAAM,CAAA,KAG/BgB,EA2CQ,QA3CRa,EA2CQ,CA1CNb,EAaQ,QAbRc,EAaQ,CAZNd,EAWK,KAXLe,EAWK,CAVHP,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAR,EAAiC,KAAA,CAA7B,KAAK,cAAA,EAAe,OAAI,EAAA,GAC5BQ,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAR,EAAiC,KAAA,CAA7B,KAAK,cAAA,EAAe,OAAI,EAAA,GAC5BA,EAKK,KALLgB,EAKK,eALmB,UAEtB,EAAA,GAAAd,EAEWe,EAAA,CAFD,MAAM,oBAAkB,WAAC,IAEnC,CAAA,GAAAT,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAA,GAFmC,8CAEnC,EAAA,CAAA,aAEFA,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAR,EAAoC,KAAA,CAAhC,KAAK,cAAA,EAAe,UAAO,EAAA,GAC/BQ,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAR,EAAoC,KAAA,CAAhC,KAAK,gBAAe,UAAO,EAAA,EAAA,KAGnCA,EA2BQ,QA3BRkB,EA2BQ,EA1BNZ,EAAA,EAAA,EAAAP,EAmBKW,EAAA,KAAAS,EAnBgBvB,EAAA,MAAK,CAAd,EAAGwB,IAAC,kBAAhBrB,EAmBK,KAAA,CAnBwB,IAAK,EAAE,KAAM,KAAK,MAAO,eAAgBqB,EAAC,CAAA,GACrEpB,EAKK,KALLqB,GAKK,CAJHnB,EAAkFoB,EAAA,CAArE,GAAE,UAAY,mBAAmB,EAAE,IAAI,CAAA,EAAA,aAAK,IAAY,CAATC,EAAAC,EAAA,EAAE,IAAI,EAAA,CAAA,CAAA,qBACvD,EAAE,aAAblB,EAAA,EAAAP,EAEM,MAFN0B,GAEMD,EADD,EAAE,WAAW,EAAA,CAAA,cAGpBxB,EAEK,KAFL0B,GAEK,CADH1B,EAAiE,OAAA,CAA3D,MAAK2B,EAAA,CAAC,QAAgB,EAAE,IAAI,CAAA,CAAA,IAAKC,EAAAC,CAAA,EAAS,EAAE,IAAI,CAAA,EAAA,CAAA,CAAA,GAExD7B,EAGK,KAHL8B,GAGK,CAFS,EAAE,aAAa,QAA3BxB,EAAA,EAAAP,EAAyE,OAAAgC,GAAAP,EAAnC,EAAE,aAAa,KAAI,IAAA,CAAA,EAAA,CAAA,QACzDzB,EAAqC,OAArCiC,GAA0B,MAAI,EAAA,GAEhChC,EAGK,KAHLiC,GAGK,EAFSC,EAAA3C,EAAA,MAAM,IAAI,EAAE,IAAI,IAAhB,MAAA2C,EAAmB,YAA/BnC,EAA6E,OAAAoC,GAAAX,EAAnCjC,QAAM,IAAI,EAAE,IAAI,EAAG,MAAM,EAAA,CAAA,QACnEQ,EAAqC,OAArCqC,GAA0B,MAAI,EAAA,GAEhCpC,EAA+F,KAA/FqC,GAA+F,CAAvCnC,EAAkCoC,EAAA,CAAnB,GAAI,EAAE,SAAA,+BAEpE1C,EAAA,MAAM,iBAAjBU,IAAAP,EAKK,KALLwC,GAKK,CAJHvC,EAGK,KAHLwC,GAGK,GAHoC,qBACtBhB,EAAGxC,EAAA,KAAM,EAAG,MAC7B,CAAA,EAAAgB,EAAmE,SAAA,CAA3D,MAAM,WAAY,uBAAOhB,EAAA,MAAM,GAAA,EAAO,cAAY,CAAA,iBAWpEsB,IAAAP,EASM,MATN0C,GASM,CARJjC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAR,EAAsC,SAAnC,kCAA+B,EAAA,GAClCE,EAMEwC,EAAA,CALA,KAAK,iBACL,OAAO,MACP,KAAK,qBACJ,KAAM,CAAA,KAAA,oCAAA,EACP,IAAI,oEAAA,WAjERtC,EAA8CuC,EAAA,OAAhB,KAAM,EAAG,KAAA,EAAA"}

package/dist/assets/{SsoMark.vue_vue_type_script_setup_true_lang-BXhQGdjJ.js → SsoMark.vue_vue_type_script_setup_true_lang-BU6ThRhq.js}

@@ -1,2 +1,2 @@
-import{d,c as l,a as t,o as h}from"./index-BzdU0RNE.js";const n=["width","height"],s=["width","height"],a=["width","height"],o=["width","height"],u=["width","height"],r=["width","height"],g=["width","height"],w=["width","height"],z=["width","height"],f=d({__name:"SsoMark",props:{preset:{},size:{default:18}},setup(e){return(k,i)=>e.preset==="github"?(h(),l("svg",{key:0,width:e.size,height:e.size,viewBox:"0 0 16 16","aria-hidden":"true"},[...i[0]||(i[0]=[t("path",{fill:"currentColor",d:"M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8z"},null,-1)])],8,n)):e.preset==="google"?(h(),l("svg",{key:1,width:e.size,height:e.size,viewBox:"0 0 18 18","aria-hidden":"true"},[...i[1]||(i[1]=[t("path",{fill:"#4285F4",d:"M17.64 9.2c0-.64-.06-1.25-.16-1.84H9v3.48h4.84c-.21 1.13-.84 2.08-1.8 2.72v2.26h2.92c1.7-1.57 2.68-3.88 2.68-6.62z"},null,-1),t("path",{fill:"#34A853",d:"M9 18c2.43 0 4.47-.8 5.96-2.18l-2.92-2.26c-.8.54-1.84.86-3.04.86-2.34 0-4.32-1.58-5.03-3.71H.96v2.33A8.997 8.997 0 0 0 9 18z"},null,-1),t("path",{fill:"#FBBC05",d:"M3.97 10.71A5.41 5.41 0 0 1 3.68 9c0-.59.1-1.17.28-1.71V4.96H.96A8.996 8.996 0 0 0 0 9c0 1.45.35 2.82.96 4.04l3.01-2.33z"},null,-1),t("path",{fill:"#EA4335",d:"M9 3.58c1.32 0 2.5.45 3.44 1.35l2.58-2.58C13.46.89 11.43 0 9 0A8.997 8.997 0 0 0 .96 4.96l3.01 2.33C4.68 5.16 6.66 3.58 9 3.58z"},null,-1)])],8,s)):e.preset==="gitlab"?(h(),l("svg",{key:2,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[2]||(i[2]=[t("path",{fill:"#FC6D26",d:"m23.6 9.593-.033-.086L20.3.98a.851.851 0 0 0-.336-.405.875.875 0 0 0-1 .054.875.875 0 0 0-.29.44l-2.207 6.748H7.537L5.33 1.07a.858.858 0 0 0-.29-.441.875.875 0 0 0-1-.054.86.86 0 0 0-.336.405L.437 9.502l-.032.086a6.066 6.066 0 0 0 2.012 7.01l.01.009.03.021 4.977 3.727 2.462 1.863 1.5 1.132a1.009 1.009 0 0 0 1.22 0l1.499-1.132 2.461-1.863 5.006-3.75.013-.01a6.068 6.068 0 0 0 2.005-7.002Z"},null,-1)])],8,a)):e.preset==="bitbucket"?(h(),l("svg",{key:3,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[3]||(i[3]=[t("path",{fill:"#2684FF",d:"M.778 1.213a.768.768 0 0 0-.768.892l3.263 19.81c.084.5.515.868 1.022.873H19.95a.772.772 0 0 0 .77-.646l3.27-20.03a.768.768 0 0 0-.768-.891zM14.52 15.53H9.522L8.17 8.466h7.561z"},null,-1)])],8,o)):e.preset==="microsoft"?(h(),l("svg",{key:4,width:e.size,height:e.size,viewBox:"0 0 21 21","aria-hidden":"true"},[...i[4]||(i[4]=[t("rect",{x:"1",y:"1",width:"9",height:"9",fill:"#F25022"},null,-1),t("rect",{x:"11",y:"1",width:"9",height:"9",fill:"#7FBA00"},null,-1),t("rect",{x:"1",y:"11",width:"9",height:"9",fill:"#00A4EF"},null,-1),t("rect",{x:"11",y:"11",width:"9",height:"9",fill:"#FFB900"},null,-1)])],8,u)):e.preset==="okta"?(h(),l("svg",{key:5,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[5]||(i[5]=[t("path",{fill:"#007DC1",d:"M12 0C5.389 0 0 5.35 0 12s5.35 12 12 12 12-5.35 12-12S18.611 0 12 0zm0 18c-3.325 0-6-2.675-6-6s2.675-6 6-6 6 2.675 6 6-2.675 6-6 6z"},null,-1)])],8,r)):e.preset==="auth0"?(h(),l("svg",{key:6,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[6]||(i[6]=[t("path",{fill:"#EB5424",d:"M21.98 7.448 19.62 0H4.347L2.02 7.448c-1.352 4.312.03 9.206 3.815 12.015L12.007 24l6.157-4.552c3.755-2.81 5.182-7.688 3.815-12.015l-6.16 4.58 2.343 7.45-6.157-4.597-6.158 4.58 2.358-7.433-6.188-4.55 7.63-.045L12.008 0l2.356 7.404 7.615.044z"},null,-1)])],8,g)):e.preset==="keycloak"?(h(),l("svg",{key:7,width:e.size,height:e.size,viewBox:"0 0 24 24",fill:"none",stroke:"#00B8E3","stroke-width":"1.8","stroke-linejoin":"round","aria-hidden":"true"},[...i[7]||(i[7]=[t("path",{d:"M7 3.2h10l5 8.8-5 8.8H7L2 12z"},null,-1),t("path",{d:"M10.6 8 8.2 12l2.4 4M15 8l-2.4 4L15 16","stroke-linecap":"square"},null,-1)])],8,w)):(h(),l("svg",{key:8,width:e.size,height:e.size,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},[...i[8]||(i[8]=[t("path",{d:"m21 2-9.6 9.6"},null,-1),t("circle",{cx:"7.5",cy:"15.5",r:"5.5"},null,-1),t("path",{d:"m15.5 7.5 3 3L22 7l-3-3"},null,-1)])],8,z))}});export{f as _};
-//# sourceMappingURL=SsoMark.vue_vue_type_script_setup_true_lang-BXhQGdjJ.js.map
+import{d,c as l,a as t,o as h}from"./index-D_Ks6aQi.js";const n=["width","height"],s=["width","height"],a=["width","height"],o=["width","height"],u=["width","height"],r=["width","height"],g=["width","height"],w=["width","height"],z=["width","height"],f=d({__name:"SsoMark",props:{preset:{},size:{default:18}},setup(e){return(k,i)=>e.preset==="github"?(h(),l("svg",{key:0,width:e.size,height:e.size,viewBox:"0 0 16 16","aria-hidden":"true"},[...i[0]||(i[0]=[t("path",{fill:"currentColor",d:"M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8z"},null,-1)])],8,n)):e.preset==="google"?(h(),l("svg",{key:1,width:e.size,height:e.size,viewBox:"0 0 18 18","aria-hidden":"true"},[...i[1]||(i[1]=[t("path",{fill:"#4285F4",d:"M17.64 9.2c0-.64-.06-1.25-.16-1.84H9v3.48h4.84c-.21 1.13-.84 2.08-1.8 2.72v2.26h2.92c1.7-1.57 2.68-3.88 2.68-6.62z"},null,-1),t("path",{fill:"#34A853",d:"M9 18c2.43 0 4.47-.8 5.96-2.18l-2.92-2.26c-.8.54-1.84.86-3.04.86-2.34 0-4.32-1.58-5.03-3.71H.96v2.33A8.997 8.997 0 0 0 9 18z"},null,-1),t("path",{fill:"#FBBC05",d:"M3.97 10.71A5.41 5.41 0 0 1 3.68 9c0-.59.1-1.17.28-1.71V4.96H.96A8.996 8.996 0 0 0 0 9c0 1.45.35 2.82.96 4.04l3.01-2.33z"},null,-1),t("path",{fill:"#EA4335",d:"M9 3.58c1.32 0 2.5.45 3.44 1.35l2.58-2.58C13.46.89 11.43 0 9 0A8.997 8.997 0 0 0 .96 4.96l3.01 2.33C4.68 5.16 6.66 3.58 9 3.58z"},null,-1)])],8,s)):e.preset==="gitlab"?(h(),l("svg",{key:2,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[2]||(i[2]=[t("path",{fill:"#FC6D26",d:"m23.6 9.593-.033-.086L20.3.98a.851.851 0 0 0-.336-.405.875.875 0 0 0-1 .054.875.875 0 0 0-.29.44l-2.207 6.748H7.537L5.33 1.07a.858.858 0 0 0-.29-.441.875.875 0 0 0-1-.054.86.86 0 0 0-.336.405L.437 9.502l-.032.086a6.066 6.066 0 0 0 2.012 7.01l.01.009.03.021 4.977 3.727 2.462 1.863 1.5 1.132a1.009 1.009 0 0 0 1.22 0l1.499-1.132 2.461-1.863 5.006-3.75.013-.01a6.068 6.068 0 0 0 2.005-7.002Z"},null,-1)])],8,a)):e.preset==="bitbucket"?(h(),l("svg",{key:3,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[3]||(i[3]=[t("path",{fill:"#2684FF",d:"M.778 1.213a.768.768 0 0 0-.768.892l3.263 19.81c.084.5.515.868 1.022.873H19.95a.772.772 0 0 0 .77-.646l3.27-20.03a.768.768 0 0 0-.768-.891zM14.52 15.53H9.522L8.17 8.466h7.561z"},null,-1)])],8,o)):e.preset==="microsoft"?(h(),l("svg",{key:4,width:e.size,height:e.size,viewBox:"0 0 21 21","aria-hidden":"true"},[...i[4]||(i[4]=[t("rect",{x:"1",y:"1",width:"9",height:"9",fill:"#F25022"},null,-1),t("rect",{x:"11",y:"1",width:"9",height:"9",fill:"#7FBA00"},null,-1),t("rect",{x:"1",y:"11",width:"9",height:"9",fill:"#00A4EF"},null,-1),t("rect",{x:"11",y:"11",width:"9",height:"9",fill:"#FFB900"},null,-1)])],8,u)):e.preset==="okta"?(h(),l("svg",{key:5,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[5]||(i[5]=[t("path",{fill:"#007DC1",d:"M12 0C5.389 0 0 5.35 0 12s5.35 12 12 12 12-5.35 12-12S18.611 0 12 0zm0 18c-3.325 0-6-2.675-6-6s2.675-6 6-6 6 2.675 6 6-2.675 6-6 6z"},null,-1)])],8,r)):e.preset==="auth0"?(h(),l("svg",{key:6,width:e.size,height:e.size,viewBox:"0 0 24 24","aria-hidden":"true"},[...i[6]||(i[6]=[t("path",{fill:"#EB5424",d:"M21.98 7.448 19.62 0H4.347L2.02 7.448c-1.352 4.312.03 9.206 3.815 12.015L12.007 24l6.157-4.552c3.755-2.81 5.182-7.688 3.815-12.015l-6.16 4.58 2.343 7.45-6.157-4.597-6.158 4.58 2.358-7.433-6.188-4.55 7.63-.045L12.008 0l2.356 7.404 7.615.044z"},null,-1)])],8,g)):e.preset==="keycloak"?(h(),l("svg",{key:7,width:e.size,height:e.size,viewBox:"0 0 24 24",fill:"none",stroke:"#00B8E3","stroke-width":"1.8","stroke-linejoin":"round","aria-hidden":"true"},[...i[7]||(i[7]=[t("path",{d:"M7 3.2h10l5 8.8-5 8.8H7L2 12z"},null,-1),t("path",{d:"M10.6 8 8.2 12l2.4 4M15 8l-2.4 4L15 16","stroke-linecap":"square"},null,-1)])],8,w)):(h(),l("svg",{key:8,width:e.size,height:e.size,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor","stroke-width":"2","stroke-linecap":"round","stroke-linejoin":"round","aria-hidden":"true"},[...i[8]||(i[8]=[t("path",{d:"m21 2-9.6 9.6"},null,-1),t("circle",{cx:"7.5",cy:"15.5",r:"5.5"},null,-1),t("path",{d:"m15.5 7.5 3 3L22 7l-3-3"},null,-1)])],8,z))}});export{f as _};
+//# sourceMappingURL=SsoMark.vue_vue_type_script_setup_true_lang-BU6ThRhq.js.map

package/dist/assets/{SsoMark.vue_vue_type_script_setup_true_lang-BXhQGdjJ.js.map → SsoMark.vue_vue_type_script_setup_true_lang-BU6ThRhq.js.map}

@@ -1 +1 @@
-{"version":3,"file":"SsoMark.vue_vue_type_script_setup_true_lang-BXhQGdjJ.js","sources":["../../src/components/SsoMark.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The identity-provider brand marks, drawn inline.\n *\n * Inline and bundled ON PURPOSE: the login page is the first thing a browser loads on a fresh\n * host, and fetching marks from a brand CDN would make signing in depend on a third party (and\n * tell that third party about every visit). So each mark is an SVG in this file, in its brand\n * colour — except GitHub and the generic key, whose marks are drawn in black-or-white and\n * therefore use `currentColor` to follow the theme.\n *\n * `preset` is the preset key the API reports (`config.provider`, or `preset` in the health\n * summary). Anything unrecognised — `custom`, a bare OIDC issuer's `''` — gets the generic key,\n * so a provider nobody drew a mark for still renders as *a* provider rather than as a gap.\n *\n * The Keycloak mark is a simplification (their hexagon-and-chevrons icon rebuilt from basic\n * shapes), not traced brand art; the rest follow the providers' published marks.\n */\nwithDefaults(defineProps<{ preset: string; size?: number }>(), { size: 18 });\n</script>\n\n<template>\n  <!-- GitHub: the octocat mark ships in black or white only, so it follows the text colour. -->\n  <svg v-if=\"preset === 'github'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 16 16\" aria-hidden=\"true\">\n    <path\n      fill=\"currentColor\"\n      d=\"M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8z\"\n    />\n  </svg>\n\n  <!-- Google: the 'G', four colours, per the sign-in branding assets. -->\n  <svg v-else-if=\"preset === 'google'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 18 18\" aria-hidden=\"true\">\n    <path fill=\"#4285F4\" d=\"M17.64 9.2c0-.64-.06-1.25-.16-1.84H9v3.48h4.84c-.21 1.13-.84 2.08-1.8 2.72v2.26h2.92c1.7-1.57 2.68-3.88 2.68-6.62z\" />\n    <path fill=\"#34A853\" d=\"M9 18c2.43 0 4.47-.8 5.96-2.18l-2.92-2.26c-.8.54-1.84.86-3.04.86-2.34 0-4.32-1.58-5.03-3.71H.96v2.33A8.997 8.997 0 0 0 9 18z\" />\n    <path fill=\"#FBBC05\" d=\"M3.97 10.71A5.41 5.41 0 0 1 3.68 9c0-.59.1-1.17.28-1.71V4.96H.96A8.996 8.996 0 0 0 0 9c0 1.45.35 2.82.96 4.04l3.01-2.33z\" />\n    <path fill=\"#EA4335\" d=\"M9 3.58c1.32 0 2.5.45 3.44 1.35l2.58-2.58C13.46.89 11.43 0 9 0A8.997 8.997 0 0 0 .96 4.96l3.01 2.33C4.68 5.16 6.66 3.58 9 3.58z\" />\n  </svg>\n\n  <!-- GitLab: the single-colour tanuki. -->\n  <svg v-else-if=\"preset === 'gitlab'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#FC6D26\"\n      d=\"m23.6 9.593-.033-.086L20.3.98a.851.851 0 0 0-.336-.405.875.875 0 0 0-1 .054.875.875 0 0 0-.29.44l-2.207 6.748H7.537L5.33 1.07a.858.858 0 0 0-.29-.441.875.875 0 0 0-1-.054.86.86 0 0 0-.336.405L.437 9.502l-.032.086a6.066 6.066 0 0 0 2.012 7.01l.01.009.03.021 4.977 3.727 2.462 1.863 1.5 1.132a1.009 1.009 0 0 0 1.22 0l1.499-1.132 2.461-1.863 5.006-3.75.013-.01a6.068 6.068 0 0 0 2.005-7.002Z\"\n    />\n  </svg>\n\n  <!-- Bitbucket. -->\n  <svg v-else-if=\"preset === 'bitbucket'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#2684FF\"\n      d=\"M.778 1.213a.768.768 0 0 0-.768.892l3.263 19.81c.084.5.515.868 1.022.873H19.95a.772.772 0 0 0 .77-.646l3.27-20.03a.768.768 0 0 0-.768-.891zM14.52 15.53H9.522L8.17 8.466h7.561z\"\n    />\n  </svg>\n\n  <!-- Microsoft: the four squares. -->\n  <svg v-else-if=\"preset === 'microsoft'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 21 21\" aria-hidden=\"true\">\n    <rect x=\"1\" y=\"1\" width=\"9\" height=\"9\" fill=\"#F25022\" />\n    <rect x=\"11\" y=\"1\" width=\"9\" height=\"9\" fill=\"#7FBA00\" />\n    <rect x=\"1\" y=\"11\" width=\"9\" height=\"9\" fill=\"#00A4EF\" />\n    <rect x=\"11\" y=\"11\" width=\"9\" height=\"9\" fill=\"#FFB900\" />\n  </svg>\n\n  <!-- Okta: the circle mark. -->\n  <svg v-else-if=\"preset === 'okta'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#007DC1\"\n      d=\"M12 0C5.389 0 0 5.35 0 12s5.35 12 12 12 12-5.35 12-12S18.611 0 12 0zm0 18c-3.325 0-6-2.675-6-6s2.675-6 6-6 6 2.675 6 6-2.675 6-6 6z\"\n    />\n  </svg>\n\n  <!-- Auth0: the shield. -->\n  <svg v-else-if=\"preset === 'auth0'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#EB5424\"\n      d=\"M21.98 7.448 19.62 0H4.347L2.02 7.448c-1.352 4.312.03 9.206 3.815 12.015L12.007 24l6.157-4.552c3.755-2.81 5.182-7.688 3.815-12.015l-6.16 4.58 2.343 7.45-6.157-4.597-6.158 4.58 2.358-7.433-6.188-4.55 7.63-.045L12.008 0l2.356 7.404 7.615.044z\"\n    />\n  </svg>\n\n  <!-- Keycloak: hexagon and double chevron, simplified — see the header. -->\n  <svg\n    v-else-if=\"preset === 'keycloak'\"\n    :width=\"size\"\n    :height=\"size\"\n    viewBox=\"0 0 24 24\"\n    fill=\"none\"\n    stroke=\"#00B8E3\"\n    stroke-width=\"1.8\"\n    stroke-linejoin=\"round\"\n    aria-hidden=\"true\"\n  >\n    <path d=\"M7 3.2h10l5 8.8-5 8.8H7L2 12z\" />\n    <path d=\"M10.6 8 8.2 12l2.4 4M15 8l-2.4 4L15 16\" stroke-linecap=\"square\" />\n  </svg>\n\n  <!-- Everything else — custom OAuth2, a bare OIDC issuer, a preset this build has no mark for. -->\n  <svg\n    v-else\n    :width=\"size\"\n    :height=\"size\"\n    viewBox=\"0 0 24 24\"\n    fill=\"none\"\n    stroke=\"currentColor\"\n    stroke-width=\"2\"\n    stroke-linecap=\"round\"\n    stroke-linejoin=\"round\"\n    aria-hidden=\"true\"\n  >\n    <path d=\"m21 2-9.6 9.6\" />\n    <circle cx=\"7.5\" cy=\"15.5\" r=\"5.5\" />\n    <path d=\"m15.5 7.5 3 3L22 7l-3-3\" />\n  </svg>\n</template>\n"],"names":["__props","_createElementBlock","_createElementVNode"],"mappings":"2UAsBaA,EAAA,SAAM,cAAjBC,EAKM,MAAA,OAL2B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC3FE,EAGE,OAAA,CAFA,KAAK,eACL,EAAE,0jBAAA,oBAKUF,EAAA,SAAM,cAAtBC,EAKM,MAAA,OALgC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAChGE,EAA8I,OAAA,CAAxI,KAAK,UAAU,EAAE,oHAAA,WACvBA,EAAwJ,OAAA,CAAlJ,KAAK,UAAU,EAAE,8HAAA,WACvBA,EAAoJ,OAAA,CAA9I,KAAK,UAAU,EAAE,0HAAA,WACvBA,EAA2J,OAAA,CAArJ,KAAK,UAAU,EAAE,iIAAA,oBAITF,EAAA,SAAM,cAAtBC,EAKM,MAAA,OALgC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAChGE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,uYAAA,oBAKUF,EAAA,SAAM,iBAAtBC,EAKM,MAAA,OALmC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBACnGE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,iLAAA,oBAKUF,EAAA,SAAM,iBAAtBC,EAKM,MAAA,OALmC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBACnGE,EAAwD,OAAA,CAAlD,EAAE,IAAI,EAAE,IAAI,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC5CA,EAAyD,OAAA,CAAnD,EAAE,KAAK,EAAE,IAAI,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC7CA,EAAyD,OAAA,CAAnD,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC7CA,EAA0D,OAAA,CAApD,EAAE,KAAK,EAAE,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,oBAIhCF,EAAA,SAAM,YAAtBC,EAKM,MAAA,OAL8B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC9FE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,qIAAA,oBAKUF,EAAA,SAAM,aAAtBC,EAKM,MAAA,OAL+B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC/FE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,kPAAA,oBAMOF,EAAA,SAAM,gBADnBC,EAaM,MAAA,OAXH,MAAOD,EAAA,KACP,OAAQA,EAAA,KACT,QAAQ,YACR,KAAK,OACL,OAAO,UACP,eAAa,MACb,kBAAgB,QAChB,cAAY,MAAA,mBAEZE,EAA0C,OAAA,CAApC,EAAE,+BAAA,EAA+B,KAAA,EAAA,EACvCA,EAA2E,OAAA,CAArE,EAAE,yCAAyC,iBAAe,QAAA,yBAIlED,EAeM,MAAA,OAbH,MAAOD,EAAA,KACP,OAAQA,EAAA,KACT,QAAQ,YACR,KAAK,OACL,OAAO,eACP,eAAa,IACb,iBAAe,QACf,kBAAgB,QAChB,cAAY,MAAA,mBAEZE,EAA0B,OAAA,CAApB,EAAE,eAAA,EAAe,KAAA,EAAA,EACvBA,EAAqC,SAAA,CAA7B,GAAG,MAAM,GAAG,OAAO,EAAE,KAAA,WAC7BA,EAAoC,OAAA,CAA9B,EAAE,yBAAA,EAAyB,KAAA,EAAA,CAAA"}
+{"version":3,"file":"SsoMark.vue_vue_type_script_setup_true_lang-BU6ThRhq.js","sources":["../../src/components/SsoMark.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The identity-provider brand marks, drawn inline.\n *\n * Inline and bundled ON PURPOSE: the login page is the first thing a browser loads on a fresh\n * host, and fetching marks from a brand CDN would make signing in depend on a third party (and\n * tell that third party about every visit). So each mark is an SVG in this file, in its brand\n * colour — except GitHub and the generic key, whose marks are drawn in black-or-white and\n * therefore use `currentColor` to follow the theme.\n *\n * `preset` is the preset key the API reports (`config.provider`, or `preset` in the health\n * summary). Anything unrecognised — `custom`, a bare OIDC issuer's `''` — gets the generic key,\n * so a provider nobody drew a mark for still renders as *a* provider rather than as a gap.\n *\n * The Keycloak mark is a simplification (their hexagon-and-chevrons icon rebuilt from basic\n * shapes), not traced brand art; the rest follow the providers' published marks.\n */\nwithDefaults(defineProps<{ preset: string; size?: number }>(), { size: 18 });\n</script>\n\n<template>\n  <!-- GitHub: the octocat mark ships in black or white only, so it follows the text colour. -->\n  <svg v-if=\"preset === 'github'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 16 16\" aria-hidden=\"true\">\n    <path\n      fill=\"currentColor\"\n      d=\"M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.01 8.01 0 0 0 16 8c0-4.42-3.58-8-8-8z\"\n    />\n  </svg>\n\n  <!-- Google: the 'G', four colours, per the sign-in branding assets. -->\n  <svg v-else-if=\"preset === 'google'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 18 18\" aria-hidden=\"true\">\n    <path fill=\"#4285F4\" d=\"M17.64 9.2c0-.64-.06-1.25-.16-1.84H9v3.48h4.84c-.21 1.13-.84 2.08-1.8 2.72v2.26h2.92c1.7-1.57 2.68-3.88 2.68-6.62z\" />\n    <path fill=\"#34A853\" d=\"M9 18c2.43 0 4.47-.8 5.96-2.18l-2.92-2.26c-.8.54-1.84.86-3.04.86-2.34 0-4.32-1.58-5.03-3.71H.96v2.33A8.997 8.997 0 0 0 9 18z\" />\n    <path fill=\"#FBBC05\" d=\"M3.97 10.71A5.41 5.41 0 0 1 3.68 9c0-.59.1-1.17.28-1.71V4.96H.96A8.996 8.996 0 0 0 0 9c0 1.45.35 2.82.96 4.04l3.01-2.33z\" />\n    <path fill=\"#EA4335\" d=\"M9 3.58c1.32 0 2.5.45 3.44 1.35l2.58-2.58C13.46.89 11.43 0 9 0A8.997 8.997 0 0 0 .96 4.96l3.01 2.33C4.68 5.16 6.66 3.58 9 3.58z\" />\n  </svg>\n\n  <!-- GitLab: the single-colour tanuki. -->\n  <svg v-else-if=\"preset === 'gitlab'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#FC6D26\"\n      d=\"m23.6 9.593-.033-.086L20.3.98a.851.851 0 0 0-.336-.405.875.875 0 0 0-1 .054.875.875 0 0 0-.29.44l-2.207 6.748H7.537L5.33 1.07a.858.858 0 0 0-.29-.441.875.875 0 0 0-1-.054.86.86 0 0 0-.336.405L.437 9.502l-.032.086a6.066 6.066 0 0 0 2.012 7.01l.01.009.03.021 4.977 3.727 2.462 1.863 1.5 1.132a1.009 1.009 0 0 0 1.22 0l1.499-1.132 2.461-1.863 5.006-3.75.013-.01a6.068 6.068 0 0 0 2.005-7.002Z\"\n    />\n  </svg>\n\n  <!-- Bitbucket. -->\n  <svg v-else-if=\"preset === 'bitbucket'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#2684FF\"\n      d=\"M.778 1.213a.768.768 0 0 0-.768.892l3.263 19.81c.084.5.515.868 1.022.873H19.95a.772.772 0 0 0 .77-.646l3.27-20.03a.768.768 0 0 0-.768-.891zM14.52 15.53H9.522L8.17 8.466h7.561z\"\n    />\n  </svg>\n\n  <!-- Microsoft: the four squares. -->\n  <svg v-else-if=\"preset === 'microsoft'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 21 21\" aria-hidden=\"true\">\n    <rect x=\"1\" y=\"1\" width=\"9\" height=\"9\" fill=\"#F25022\" />\n    <rect x=\"11\" y=\"1\" width=\"9\" height=\"9\" fill=\"#7FBA00\" />\n    <rect x=\"1\" y=\"11\" width=\"9\" height=\"9\" fill=\"#00A4EF\" />\n    <rect x=\"11\" y=\"11\" width=\"9\" height=\"9\" fill=\"#FFB900\" />\n  </svg>\n\n  <!-- Okta: the circle mark. -->\n  <svg v-else-if=\"preset === 'okta'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#007DC1\"\n      d=\"M12 0C5.389 0 0 5.35 0 12s5.35 12 12 12 12-5.35 12-12S18.611 0 12 0zm0 18c-3.325 0-6-2.675-6-6s2.675-6 6-6 6 2.675 6 6-2.675 6-6 6z\"\n    />\n  </svg>\n\n  <!-- Auth0: the shield. -->\n  <svg v-else-if=\"preset === 'auth0'\" :width=\"size\" :height=\"size\" viewBox=\"0 0 24 24\" aria-hidden=\"true\">\n    <path\n      fill=\"#EB5424\"\n      d=\"M21.98 7.448 19.62 0H4.347L2.02 7.448c-1.352 4.312.03 9.206 3.815 12.015L12.007 24l6.157-4.552c3.755-2.81 5.182-7.688 3.815-12.015l-6.16 4.58 2.343 7.45-6.157-4.597-6.158 4.58 2.358-7.433-6.188-4.55 7.63-.045L12.008 0l2.356 7.404 7.615.044z\"\n    />\n  </svg>\n\n  <!-- Keycloak: hexagon and double chevron, simplified — see the header. -->\n  <svg\n    v-else-if=\"preset === 'keycloak'\"\n    :width=\"size\"\n    :height=\"size\"\n    viewBox=\"0 0 24 24\"\n    fill=\"none\"\n    stroke=\"#00B8E3\"\n    stroke-width=\"1.8\"\n    stroke-linejoin=\"round\"\n    aria-hidden=\"true\"\n  >\n    <path d=\"M7 3.2h10l5 8.8-5 8.8H7L2 12z\" />\n    <path d=\"M10.6 8 8.2 12l2.4 4M15 8l-2.4 4L15 16\" stroke-linecap=\"square\" />\n  </svg>\n\n  <!-- Everything else — custom OAuth2, a bare OIDC issuer, a preset this build has no mark for. -->\n  <svg\n    v-else\n    :width=\"size\"\n    :height=\"size\"\n    viewBox=\"0 0 24 24\"\n    fill=\"none\"\n    stroke=\"currentColor\"\n    stroke-width=\"2\"\n    stroke-linecap=\"round\"\n    stroke-linejoin=\"round\"\n    aria-hidden=\"true\"\n  >\n    <path d=\"m21 2-9.6 9.6\" />\n    <circle cx=\"7.5\" cy=\"15.5\" r=\"5.5\" />\n    <path d=\"m15.5 7.5 3 3L22 7l-3-3\" />\n  </svg>\n</template>\n"],"names":["__props","_createElementBlock","_createElementVNode"],"mappings":"2UAsBaA,EAAA,SAAM,cAAjBC,EAKM,MAAA,OAL2B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC3FE,EAGE,OAAA,CAFA,KAAK,eACL,EAAE,0jBAAA,oBAKUF,EAAA,SAAM,cAAtBC,EAKM,MAAA,OALgC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAChGE,EAA8I,OAAA,CAAxI,KAAK,UAAU,EAAE,oHAAA,WACvBA,EAAwJ,OAAA,CAAlJ,KAAK,UAAU,EAAE,8HAAA,WACvBA,EAAoJ,OAAA,CAA9I,KAAK,UAAU,EAAE,0HAAA,WACvBA,EAA2J,OAAA,CAArJ,KAAK,UAAU,EAAE,iIAAA,oBAITF,EAAA,SAAM,cAAtBC,EAKM,MAAA,OALgC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAChGE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,uYAAA,oBAKUF,EAAA,SAAM,iBAAtBC,EAKM,MAAA,OALmC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBACnGE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,iLAAA,oBAKUF,EAAA,SAAM,iBAAtBC,EAKM,MAAA,OALmC,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBACnGE,EAAwD,OAAA,CAAlD,EAAE,IAAI,EAAE,IAAI,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC5CA,EAAyD,OAAA,CAAnD,EAAE,KAAK,EAAE,IAAI,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC7CA,EAAyD,OAAA,CAAnD,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,WAC7CA,EAA0D,OAAA,CAApD,EAAE,KAAK,EAAE,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,SAAA,oBAIhCF,EAAA,SAAM,YAAtBC,EAKM,MAAA,OAL8B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC9FE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,qIAAA,oBAKUF,EAAA,SAAM,aAAtBC,EAKM,MAAA,OAL+B,MAAOD,EAAA,KAAO,OAAQA,EAAA,KAAM,QAAQ,YAAY,cAAY,MAAA,mBAC/FE,EAGE,OAAA,CAFA,KAAK,UACL,EAAE,kPAAA,oBAMOF,EAAA,SAAM,gBADnBC,EAaM,MAAA,OAXH,MAAOD,EAAA,KACP,OAAQA,EAAA,KACT,QAAQ,YACR,KAAK,OACL,OAAO,UACP,eAAa,MACb,kBAAgB,QAChB,cAAY,MAAA,mBAEZE,EAA0C,OAAA,CAApC,EAAE,+BAAA,EAA+B,KAAA,EAAA,EACvCA,EAA2E,OAAA,CAArE,EAAE,yCAAyC,iBAAe,QAAA,yBAIlED,EAeM,MAAA,OAbH,MAAOD,EAAA,KACP,OAAQA,EAAA,KACT,QAAQ,YACR,KAAK,OACL,OAAO,eACP,eAAa,IACb,iBAAe,QACf,kBAAgB,QAChB,cAAY,MAAA,mBAEZE,EAA0B,OAAA,CAApB,EAAE,eAAA,EAAe,KAAA,EAAA,EACvBA,EAAqC,SAAA,CAA7B,GAAG,MAAM,GAAG,OAAO,EAAE,KAAA,WAC7BA,EAAoC,OAAA,CAA9B,EAAE,yBAAA,EAAyB,KAAA,EAAA,CAAA"}

package/dist/assets/SsoView-BlYFW0pX.css

@@ -0,0 +1 @@
+.sso-tiles[data-v-b02d5dfc]{display:grid;grid-template-columns:repeat(auto-fill,minmax(150px,1fr));gap:var(--s3)}.sso-tile[data-v-b02d5dfc]{flex-direction:column;justify-content:center;gap:var(--s2);padding:var(--s4) var(--s3);border-radius:var(--r2)}.sso-tile-mode[data-v-b02d5dfc]{font-size:var(--t-xs);font-weight:400;color:var(--fg-mute)}.sso-cards[data-v-b02d5dfc]{display:flex;flex-direction:column;gap:var(--s3)}.sso-card[data-v-b02d5dfc]{display:flex;align-items:center;flex-wrap:wrap;gap:var(--s3);border:1px solid var(--line);border-radius:var(--r2);padding:var(--s3) var(--s4)}.sso-card>svg[data-v-b02d5dfc]{flex:none}.sso-card-main[data-v-b02d5dfc]{flex:1;min-width:0;display:flex;flex-direction:column;gap:var(--s1)}.sso-card-head[data-v-b02d5dfc]{display:flex;align-items:center;gap:var(--s2)}.sso-card-sub[data-v-b02d5dfc]{font-size:var(--t-sm);color:var(--fg-dim);overflow-wrap:anywhere}.sso-remove[data-v-b02d5dfc]{color:var(--fail)}.sso-copy[data-v-b02d5dfc]{align-items:center;gap:var(--s3)}.sso-url[data-v-b02d5dfc]{flex:1;min-width:0;overflow-x:auto;white-space:nowrap}.field>.sso-url[data-v-b02d5dfc]{display:block;flex:none}.sso-url[data-incomplete][data-v-b02d5dfc]{color:var(--fg-mute)}.sso-key[data-v-b02d5dfc]{max-width:260px}.sso-adv>summary[data-v-b02d5dfc]{cursor:pointer;font-size:var(--t-sm);color:var(--fg-dim);margin:var(--s4) 0 var(--s2)}

package/dist/assets/SsoView-CxFylJ9d.js

@@ -0,0 +1,2 @@
+import{d as pe,p as E,c as i,a as s,f as c,z as q,F as h,e as b,t as r,g as d,L as me,n as p,v as u,r as D,h as K,i as y,j as U,C as N,a6 as O,k as ve,o as n,u as ce,M as R,D as fe,ak as ye}from"./index-D_Ks6aQi.js";import{A as Q}from"./ActionButton-OewKsFrK.js";import{_ as X}from"./ErrorNote.vue_vue_type_script_setup_true_lang-FEOV8vdM.js";import{_ as ke}from"./RelativeTime.vue_vue_type_script_setup_true_lang-BxIqRu_b.js";import{_ as ge}from"./SelectMenu.vue_vue_type_script_setup_true_lang-CMLYr7A7.js";import{_ as he}from"./SkeletonList.vue_vue_type_script_setup_true_lang-D4pkKZAr.js";import{_ as T}from"./SsoMark.vue_vue_type_script_setup_true_lang-BU6ThRhq.js";import{_ as be}from"./_plugin-vue_export-helper-DlAUqK2U.js";const Ue={class:"page-head"},we={class:"panel"},Ce={class:"phead"},xe={class:"section"},$e={class:"mute"},_e={class:"check"},Re={key:0,class:"banner plain"},Ve=["href"],Se={class:"field"},Ie={class:"row sso-copy"},Ae={class:"sso-url"},Le={key:1,class:"field"},Ee={class:"field"},De=["placeholder"],Oe={class:"hint"},ze=["for"],Me=["id","onUpdate:modelValue"],je={class:"field"},qe=["data-incomplete"],Ke={key:1,class:"field"},Ne={class:"field"},Te={class:"field"},Be={class:"hint"},Ge={class:"field"},Pe=["placeholder"],We=["open"],Fe={class:"field"},He={class:"field"},Je={class:"field"},Qe={class:"field"},Xe={class:"field"},Ye={class:"row",style:{"flex-wrap":"wrap",gap:"var(--s3)"}},Ze=["for"],es=["id","onUpdate:modelValue"],ss={class:"panel"},ls={class:"field"},os={class:"field"},ts={key:0,class:"field"},as={class:"field"},ns={class:"hint"},is={class:"row",style:{gap:"var(--s3)"}},rs={key:3,class:"panel"},ds={class:"phead"},us={class:"section"},ps={class:"sso-tiles"},ms=["onClick"],vs={class:"sso-tile-mode"},cs={class:"panel"},fs={class:"sso-cards stagger"},ys={class:"sso-card-main"},ks={class:"sso-card-head"},gs={class:"mute"},hs={key:0,class:"badge off"},bs={class:"sso-card-sub"},Us={class:"row-actions"},ws=["onClick"],Cs={class:"panel"},xs={class:"row sso-copy"},$s={class:"sso-url"},B="inherit",_s=pe({__name:"SsoView",setup(Rs){const z={subject:"sub",username:"preferred_username",email:"email",name:"name",avatar:"picture"},G=()=>({mode:"oidc",enabled:!0,label:"",clientId:"",discoveryUrl:"",provider:"",authorizeUrl:"",tokenUrl:"",userInfoUrl:"",emailsUrl:"",groupsUrl:"",scopes:"",claimMap:{...z},allowedEmailDomains:[],allowedUsernames:[],requiredGroups:[],defaultRole:""}),Y={viewer:"reads everything",developer:"deploys and tears down",maintainer:"host configuration",admin:"accounts and sign-on"},x=y("");E.get("/api/settings").then(l=>{var e;l.ok&&(x.value=String(((e=l.body.settings.find(a=>a.key==="default_role"))==null?void 0:e.value)??""))});const Z=U(()=>[{value:B,label:"The host default",hint:x.value?`${R(x.value)} today — follows Settings`:"set in Settings"},...ye.map(l=>({value:l,label:R(l),hint:Y[l]}))]),w=y([]),V=y([]),S=y(""),I=y(!1),k=y(""),o=y(null),P=U({get:()=>{var l;return((l=o.value)==null?void 0:l.form.defaultRole)||B},set:l=>{o.value&&(o.value.form.defaultRole=l===B?"":l)}}),$=y(!1),A=y(!1),C=y("");async function M(){const l=await E.get("/api/sso/config");if(I.value=!0,!l.ok){k.value=N(l,"read the sign-on settings");return}k.value="",w.value=l.body.providers??[],V.value=l.body.presets??[],S.value=l.body.callbackUrl}M();const W=U(()=>!o.value&&($.value||I.value&&!k.value&&w.value.length===0)),ee=U(()=>[...V.value.map(l=>({preset:l,id:l.key,label:l.label,mode:l.mode})),{preset:null,id:"custom-oauth2",label:"Custom OAuth 2.0",mode:"oauth2"},{preset:null,id:"custom-oidc",label:"Custom OpenID Connect",mode:"oidc"}]);function se(l){const e=new Set(w.value.map(a=>a.key));if(!e.has(l))return l;for(let a=2;;a++)if(!e.has(`${l}-${a}`))return`${l}-${a}`}function le(l){const e=l.preset,a=G();a.mode=l.mode,a.provider=e?e.key:l.mode==="oauth2"?"custom":"",e&&(a.label=e.label,a.scopes=e.scopes,a.claimMap={...z,...e.claimMap},e.mode==="oauth2"?(a.authorizeUrl=e.authorizeUrl,a.tokenUrl=e.tokenUrl,a.userInfoUrl=e.userInfoUrl):e.discoveryUrl.includes("<")||(a.discoveryUrl=e.discoveryUrl)),o.value={originalKey:null,key:se(e?e.key:l.mode==="oauth2"?"custom":"oidc"),preset:e,form:a,secret:"",secretSet:!1,domains:"",usernames:"",groups:"",placeholders:{}},C.value="",$.value=!1}function oe(l){o.value={originalKey:l.key,key:l.key,preset:V.value.find(e=>e.key===l.config.provider)??null,form:{...G(),...l.config,claimMap:{...z,...l.config.claimMap}},secret:"",secretSet:l.secretSet,domains:(l.config.allowedEmailDomains??[]).join(", "),usernames:(l.config.allowedUsernames??[]).join(", "),groups:(l.config.requiredGroups??[]).join(", "),placeholders:{}},C.value="",$.value=!1}const _=U(()=>{const l=o.value;if(!l||l.originalKey!==null||!l.preset||l.form.mode!=="oidc")return null;const e=l.preset.discoveryUrl;if(!e.includes("<"))return null;const a=[],m=/<([^>]+)>/g;let v=0;for(let f=m.exec(e);f;f=m.exec(e))f.index>v&&a.push(e.slice(v,f.index)),a.push({ph:f[1]??""}),v=f.index+f[0].length;return v<e.length&&a.push(e.slice(v)),a}),te=U(()=>(_.value??[]).flatMap(l=>typeof l=="string"?[]:[l.ph])),L=U(()=>{const l=_.value,e=o.value;return!l||!e?"":l.map(a=>{var m;return typeof a=="string"?a:((m=e.placeholders[a.ph])==null?void 0:m.trim())||`<${a.ph}>`}).join("")}),ae=/^[a-z0-9][a-z0-9-]{0,31}$/,F=U(()=>{const l=o.value;if(!l)return"nothing is being edited";const e=l.key.trim();if(!ae.test(e))return"the key must be a lowercase slug of letters, digits and dashes (32 at most)";if(l.originalKey===null&&w.value.some(a=>a.key===e))return`a provider is already stored under "${e}" — edit that one instead, or pick another key`;if(!l.form.clientId.trim())return"the client id is required";if(!l.secretSet&&!l.secret.trim())return"the client secret is required";if(l.form.mode==="oidc"){const a=_.value?L.value:l.form.discoveryUrl.trim();if(!a)return"the issuer is required";if(a.includes("<"))return"fill in the issuer placeholder first"}else if(!l.form.authorizeUrl.trim()||!l.form.tokenUrl.trim())return"the authorize and token URLs are required";return""}),j=l=>l.split(",").map(e=>e.trim()).filter(Boolean);async function ne(){const l=o.value;if(!l)return;A.value=!0;const e={...l.form,key:l.key.trim(),clientSecret:l.secret.trim(),discoveryUrl:_.value?L.value:l.form.discoveryUrl,allowedEmailDomains:j(l.domains),allowedUsernames:j(l.usernames),requiredGroups:l.form.mode==="oidc"?[]:j(l.groups)},a=await E.put("/api/sso/config",e);if(A.value=!1,!a.ok){C.value=N(a,"save the provider");return}C.value="",O("ok",l.originalKey?"Saved.":`Added ${e.key}.`),o.value=null,M()}async function ie(l){const e=await E.del(`/api/sso/config/${l.key}`);if(!e.ok){k.value=N(e,"remove the provider");return}O("ok",`Removed ${l.key}. Its accounts keep working.`),M()}async function H(){try{await navigator.clipboard.writeText(S.value),O("ok","Copied.")}catch{O("error","Copy failed — select it and copy by hand.")}}function re(l){if(l.mode==="oidc")try{return`OpenID Connect · ${new URL(l.discoveryUrl).hostname}`}catch{return"OpenID Connect"}const e=V.value.find(a=>a.key===l.provider);return e?`OAuth 2.0 · ${e.label}`:"OAuth 2.0 · custom endpoints"}function de(l){return l.defaultRole?`new accounts: ${R(l.defaultRole)}`:`new accounts: the host default${x.value?` (${R(x.value)})`:""}`}function ue(l){var a,m,v;const e=[];return(a=l.allowedEmailDomains)!=null&&a.length&&e.push(`domains ${l.allowedEmailDomains.join(", ")}`),(m=l.allowedUsernames)!=null&&m.length&&e.push(`usernames ${l.allowedUsernames.join(", ")}`),(v=l.requiredGroups)!=null&&v.length&&e.push(`groups ${l.requiredGroups.join(", ")}`),e.length?`lets in ${e.join("; ")}`:"lets in anyone the provider allows"}return(l,e)=>{var m,v,f;const a=ve("RouterLink");return n(),i("div",null,[s("div",Ue,[e[19]||(e[19]=s("div",null,[s("h1",null,"Single sign-on"),s("div",{class:"sub"},"Sign in with the identity providers you already run")],-1)),e[20]||(e[20]=s("span",{class:"grow"},null,-1)),I.value&&!k.value&&!o.value&&!W.value?(n(),i("button",{key:0,class:"primary",onClick:e[0]||(e[0]=t=>$.value=!0)},"Add provider")):c("",!0)]),k.value?(n(),q(X,{key:0,text:k.value,title:"Could not read the sign-on settings."},null,8,["text"])):c("",!0),I.value?o.value?(n(),i(h,{key:2},[s("section",we,[s("div",Ce,[b(T,{preset:o.value.form.provider,size:20},null,8,["preset"]),s("h2",xe,r(o.value.originalKey?`Edit ${o.value.originalKey}`:`Add ${((m=o.value.preset)==null?void 0:m.label)??(o.value.form.mode==="oidc"?"an OpenID Connect issuer":"a custom OAuth 2.0 provider")}`),1),s("span",$e,r(o.value.form.mode==="oidc"?"OpenID Connect":"OAuth 2.0"),1),e[22]||(e[22]=s("span",{class:"grow"},null,-1)),s("label",_e,[d(s("input",{"onUpdate:modelValue":e[1]||(e[1]=t=>o.value.form.enabled=t),type:"checkbox"},null,512),[[me,o.value.form.enabled]]),e[21]||(e[21]=p(" Enabled",-1))])]),o.value.preset?(n(),i("div",Re,[s("p",null,[s("a",{href:o.value.preset.setupUrl,target:"_blank",rel:"noopener"}," Create the app in "+r(o.value.preset.label)+" → ",9,Ve)])])):c("",!0),s("div",Se,[e[23]||(e[23]=s("label",null,"Redirect URI",-1)),s("div",Ie,[s("code",Ae,r(S.value),1),s("button",{type:"button",onClick:H},"Copy")]),e[24]||(e[24]=s("p",{class:"hint"},"Must match the provider's registered callback exactly.",-1))]),o.value.originalKey?c("",!0):(n(),i("div",Le,[e[25]||(e[25]=s("label",{for:"sso-key"},"Key",-1)),d(s("input",{id:"sso-key","onUpdate:modelValue":e[2]||(e[2]=t=>o.value.key=t),type:"text",spellcheck:"false",class:"sso-key"},null,512),[[u,o.value.key]]),e[26]||(e[26]=s("p",{class:"hint"},"Lowercase letters, digits, dashes.",-1))])),s("div",Ee,[e[27]||(e[27]=s("label",{for:"sso-label"},"Button text",-1)),d(s("input",{id:"sso-label","onUpdate:modelValue":e[3]||(e[3]=t=>o.value.form.label=t),type:"text",placeholder:((v=o.value.preset)==null?void 0:v.label)||"Acme SSO"},null,8,De),[[u,o.value.form.label]]),s("p",Oe,"“Continue with "+r(o.value.form.label||((f=o.value.preset)==null?void 0:f.label)||"…")+"”",1)]),o.value.form.mode==="oidc"?(n(),i(h,{key:2},[_.value?(n(),i(h,{key:0},[(n(!0),i(h,null,D(te.value,t=>(n(),i("div",{key:t,class:"field"},[s("label",{for:`ph-${t}`},r(ce(R)(t)),9,ze),d(s("input",{id:`ph-${t}`,"onUpdate:modelValue":g=>o.value.placeholders[t]=g,type:"text",spellcheck:"false",class:"sso-key"},null,8,Me),[[u,o.value.placeholders[t]]])]))),128)),s("div",je,[e[28]||(e[28]=s("label",null,"Issuer",-1)),s("code",{class:"sso-url","data-incomplete":L.value.includes("<")||void 0},r(L.value),9,qe),e[29]||(e[29]=s("p",{class:"hint"},"Fetched when you save.",-1))])],64)):(n(),i("div",Ke,[e[30]||(e[30]=s("label",{for:"sso-issuer"},"Issuer",-1)),d(s("input",{id:"sso-issuer","onUpdate:modelValue":e[4]||(e[4]=t=>o.value.form.discoveryUrl=t),type:"text",spellcheck:"false",placeholder:"https://accounts.google.com"},null,512),[[u,o.value.form.discoveryUrl]]),e[31]||(e[31]=s("p",{class:"hint"},"Fetched when you save.",-1))]))],64)):c("",!0),s("div",Ne,[e[32]||(e[32]=s("label",{for:"sso-client"},"Client id",-1)),d(s("input",{id:"sso-client","onUpdate:modelValue":e[5]||(e[5]=t=>o.value.form.clientId=t),type:"text",spellcheck:"false",autocomplete:"off"},null,512),[[u,o.value.form.clientId]])]),s("div",Te,[e[33]||(e[33]=s("label",{for:"sso-secret"},"Client secret",-1)),d(s("input",{id:"sso-secret","onUpdate:modelValue":e[6]||(e[6]=t=>o.value.secret=t),type:"password",spellcheck:"false",autocomplete:"new-password"},null,512),[[u,o.value.secret]]),s("p",Be," Write-only. "+r(o.value.secretSet?"Leave empty to keep the stored secret.":"Never returned once saved."),1)]),s("div",Ge,[e[34]||(e[34]=s("label",{for:"sso-scopes"},"Scopes",-1)),d(s("input",{id:"sso-scopes","onUpdate:modelValue":e[7]||(e[7]=t=>o.value.form.scopes=t),type:"text",spellcheck:"false",placeholder:o.value.form.mode==="oidc"?"openid profile email":""},null,8,Pe),[[u,o.value.form.scopes]])]),o.value.form.mode==="oauth2"?(n(),i("details",{key:3,class:"sso-adv",open:!o.value.preset},[e[40]||(e[40]=s("summary",null,"Endpoints and claim mapping",-1)),s("div",Fe,[e[35]||(e[35]=s("label",{for:"sso-auth"},"Authorize URL",-1)),d(s("input",{id:"sso-auth","onUpdate:modelValue":e[8]||(e[8]=t=>o.value.form.authorizeUrl=t),type:"text",spellcheck:"false"},null,512),[[u,o.value.form.authorizeUrl]])]),s("div",He,[e[36]||(e[36]=s("label",{for:"sso-token"},"Token URL",-1)),d(s("input",{id:"sso-token","onUpdate:modelValue":e[9]||(e[9]=t=>o.value.form.tokenUrl=t),type:"text",spellcheck:"false"},null,512),[[u,o.value.form.tokenUrl]])]),s("div",Je,[e[37]||(e[37]=s("label",{for:"sso-userinfo"},"User info URL",-1)),d(s("input",{id:"sso-userinfo","onUpdate:modelValue":e[10]||(e[10]=t=>o.value.form.userInfoUrl=t),type:"text",spellcheck:"false"},null,512),[[u,o.value.form.userInfoUrl]])]),s("div",Qe,[e[38]||(e[38]=s("label",{for:"sso-emails"},[p("Emails URL "),s("span",{class:"mute"},"(optional)")],-1)),d(s("input",{id:"sso-emails","onUpdate:modelValue":e[11]||(e[11]=t=>o.value.form.emailsUrl=t),type:"text",spellcheck:"false"},null,512),[[u,o.value.form.emailsUrl]])]),s("div",Xe,[e[39]||(e[39]=s("label",{for:"sso-groups-url"},[p("Groups URL "),s("span",{class:"mute"},"(optional)")],-1)),d(s("input",{id:"sso-groups-url","onUpdate:modelValue":e[12]||(e[12]=t=>o.value.form.groupsUrl=t),type:"text",spellcheck:"false"},null,512),[[u,o.value.form.groupsUrl]])]),e[41]||(e[41]=s("h3",{class:"section",style:{"margin-top":"var(--s4)"}},"Claim mapping",-1)),s("div",Ye,[(n(),i(h,null,D(["subject","username","email","name","avatar"],t=>s("div",{key:t,class:"field inline"},[s("label",{for:`cm-${t}`},r(t),9,Ze),d(s("input",{id:`cm-${t}`,"onUpdate:modelValue":g=>o.value.form.claimMap[t]=g,type:"text",spellcheck:"false",style:{width:"11rem"}},null,8,es),[[u,o.value.form.claimMap[t]]])])),64))])],8,We)):c("",!0)]),s("section",ss,[e[52]||(e[52]=s("div",{class:"phead"},[s("h2",{class:"section"},"Who gets in")],-1)),e[53]||(e[53]=s("p",{class:"dim"}," Every filled list must match; empty lists restrict nobody. ",-1)),s("div",ls,[e[42]||(e[42]=s("label",{for:"sso-domains"},"Allowed email domains",-1)),d(s("input",{id:"sso-domains","onUpdate:modelValue":e[13]||(e[13]=t=>o.value.domains=t),type:"text",spellcheck:"false",placeholder:"example.com, corp.example"},null,512),[[u,o.value.domains]]),e[43]||(e[43]=s("p",{class:"hint"},[p(" Comma-separated; subdomains count. "),s("b",null,"When set, a login with no address is refused.")],-1))]),s("div",os,[e[44]||(e[44]=s("label",{for:"sso-usernames"},"Allowed usernames",-1)),d(s("input",{id:"sso-usernames","onUpdate:modelValue":e[14]||(e[14]=t=>o.value.usernames=t),type:"text",spellcheck:"false",placeholder:"octocat, qa-[0-9]*"},null,512),[[u,o.value.usernames]]),e[45]||(e[45]=s("p",{class:"hint"},[p(" Comma-separated patterns: "),s("code",null,"*"),p(", "),s("code",null,"?"),p(", "),s("code",null,"[0-9]"),p(". "),s("b",null,"When set, a login with no username is refused.")],-1))]),o.value.form.mode==="oauth2"?(n(),i("div",ts,[e[46]||(e[46]=s("label",{for:"sso-groups"},"Required groups",-1)),d(s("input",{id:"sso-groups","onUpdate:modelValue":e[15]||(e[15]=t=>o.value.groups=t),type:"text",spellcheck:"false",placeholder:"acme, acme/backend"},null,512),[[u,o.value.groups]]),e[47]||(e[47]=s("p",{class:"hint"},[s("b",null,"Exact names, not patterns"),p(", comma-separated. Needs the matching scope above, or the save is refused. ")],-1))])):c("",!0),s("div",as,[e[51]||(e[51]=s("label",{for:"sso-role"},"New account role",-1)),b(ge,{id:"sso-role",modelValue:P.value,"onUpdate:modelValue":e[16]||(e[16]=t=>P.value=t),label:"Role for the accounts this provider creates",options:Z.value},null,8,["modelValue","options"]),s("p",ns,[e[49]||(e[49]=p(" Set at first sign-in. Host default follows ",-1)),b(a,{to:"/settings"},{default:K(()=>[...e[48]||(e[48]=[p("Settings",-1)])]),_:1}),e[50]||(e[50]=p(". ",-1))])])]),C.value?(n(),q(X,{key:0,text:C.value,title:"Not saved."},null,8,["text"])):c("",!0),s("div",is,[b(Q,{variant:"primary",pending:A.value,disabled:A.value||!!F.value,title:F.value||void 0,onClick:ne},{default:K(()=>[p(r(o.value.originalKey?"Save changes":"Add provider"),1)]),_:1},8,["pending","disabled","title"]),s("button",{class:"ghost",onClick:e[17]||(e[17]=t=>o.value=null)},"Cancel")])],64)):W.value?(n(),i("section",rs,[s("div",ds,[s("h2",us,r(w.value.length?"Add a provider":"Pick a provider"),1),e[54]||(e[54]=s("span",{class:"grow"},null,-1)),w.value.length?(n(),i("button",{key:0,class:"ghost",onClick:e[18]||(e[18]=t=>$.value=!1)},"Cancel")):c("",!0)]),e[55]||(e[55]=s("p",{class:"dim"},"Pick where your team already signs in.",-1)),s("div",ps,[(n(!0),i(h,null,D(ee.value,t=>{var g;return n(),i("button",{key:t.id,class:"sso-tile",onClick:J=>le(t)},[b(T,{preset:((g=t.preset)==null?void 0:g.key)??"custom",size:22},null,8,["preset"]),s("span",null,r(t.label),1),s("span",vs,r(t.mode==="oidc"?"OpenID Connect":"OAuth 2.0"),1)],8,ms)}),128))])])):k.value?c("",!0):(n(),i(h,{key:4},[s("section",cs,[e[57]||(e[57]=s("div",{class:"phead"},[s("h2",{class:"section"},"Providers")],-1)),s("div",fs,[(n(!0),i(h,null,D(w.value,(t,g)=>(n(),i("div",{key:t.key,class:"sso-card",style:fe({"--i":g})},[b(T,{preset:t.config.provider,size:22},null,8,["preset"]),s("div",ys,[s("div",ks,[s("b",null,r(t.config.label),1),s("code",gs,r(t.key),1),t.config.enabled?c("",!0):(n(),i("span",hs,"disabled"))]),s("div",bs,[p(r(re(t.config))+" · "+r(ue(t.config))+" · "+r(de(t.config))+" · updated ",1),b(ke,{at:t.updatedAt},null,8,["at"])])]),s("div",Us,[s("button",{class:"ghost sm",onClick:J=>oe(t)},"Edit",8,ws),b(Q,{variant:"ghost",class:"sm sso-remove",confirm:`Remove ${t.key}?`,onRun:J=>ie(t)},{default:K(()=>[...e[56]||(e[56]=[p(" Remove ",-1)])]),_:1},8,["confirm","onRun"])])],4))),128))])]),s("section",Cs,[e[58]||(e[58]=s("div",{class:"phead"},[s("h2",{class:"section"},"Callback URL")],-1)),e[59]||(e[59]=s("p",{class:"dim"},"Register this with every provider.",-1)),s("div",xs,[s("code",$s,r(S.value),1),s("button",{type:"button",onClick:H},"Copy")])])],64)):(n(),q(he,{key:1,rows:4}))])}}}),zs=be(_s,[["__scopeId","data-v-b02d5dfc"]]);export{zs as default};
+//# sourceMappingURL=SsoView-CxFylJ9d.js.map

package/dist/assets/SsoView-CxFylJ9d.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsoView-CxFylJ9d.js","sources":["../../src/views/SsoView.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * Single sign-on: the identity providers this host lets people sign in with.\n *\n * THE POINT OF THE PAGE is that nobody has to create accounts here any more. Whoever can\n * authenticate against the operator's directory can sign in, and the account appears on first\n * login. The provider keeps owning who is allowed — Google Workspace restricts to internal users,\n * a GitHub OAuth app can be org-approved — and this page deliberately does not rebuild that policy.\n *\n * The page is a LIST now, not one form: a host stores several providers, each under an\n * operator-chosen key. Three states, exclusive by construction —\n *   - the list        the stored providers as cards, plus the callback URL;\n *   - the picker      \"Add provider\": a grid of preset tiles. A preset knows everything about a\n *                     provider except the two values only the operator has (client id + secret),\n *                     so picking one leaves a form that is mostly already filled in;\n *   - the form        one provider being added or edited.\n *\n * FOUR THINGS THE FORM MUST NOT GET WRONG:\n *\n *   1. The callback URL is READ-ONLY and comes from the server. It has to match what is registered\n *      on the provider's side byte for byte, and a value typed here (or derived from\n *      `location.origin`) would drift from the one the flow actually sends the moment the UI is\n *      reached by a second hostname. It is ONE URL for every provider.\n *   2. The client secret is write-only. A read answers `secretSet` and nothing else; on an\n *      existing provider an EMPTY field means \"keep what is stored\" (the server's rule), so an\n *      operator editing the label cannot silently wipe it.\n *   3. A template preset's issuer (`https://<your-domain>.okta.com/…`) is not a value — the\n *      placeholder renders as its own required field and the URL is assembled in view, because the\n *      server refuses the template saved verbatim and the operator should never meet that refusal.\n *   4. The role its accounts are created at is ON SCREEN, and its resting state is INHERIT. This\n *      field existed on the wire from the start and was never drawn, so the form sent whatever\n *      `blank()` happened to hold — which was `admin`, explicitly, for every provider anyone added\n *      here. Inherit is the empty string, resolved against the host's `default_role` when an\n *      account is provisioned rather than frozen at save time; it can only ever resolve to viewer\n *      on a host that set nothing, never to admin by omission.\n */\nimport { computed, ref } from 'vue';\nimport { api, problem } from '../api/client';\nimport { ROLES, type ClaimMap, type HostSettings, type Role, type SsoConfig, type SsoConfigResponse, type SsoPreset, type SsoProviderEntry } from '../api/types';\nimport { sentence } from '../composables/useFormat';\nimport { toast } from '../composables/useToasts';\nimport ActionButton from '../components/ActionButton.vue';\nimport ErrorNote from '../components/ErrorNote.vue';\nimport RelativeTime from '../components/RelativeTime.vue';\nimport SelectMenu from '../components/SelectMenu.vue';\nimport SkeletonList from '../components/SkeletonList.vue';\nimport SsoMark from '../components/SsoMark.vue';\n\nconst OIDC_CLAIMS: ClaimMap = { subject: 'sub', username: 'preferred_username', email: 'email', name: 'name', avatar: 'picture' };\n\nconst blank = (): SsoConfig => ({\n  mode: 'oidc',\n  enabled: true,\n  label: '',\n  clientId: '',\n  discoveryUrl: '',\n  provider: '',\n  authorizeUrl: '',\n  tokenUrl: '',\n  userInfoUrl: '',\n  emailsUrl: '',\n  groupsUrl: '',\n  scopes: '',\n  claimMap: { ...OIDC_CLAIMS },\n  allowedEmailDomains: [],\n  allowedUsernames: [],\n  requiredGroups: [],\n  // EMPTY = INHERIT the host's default role, resolved when the account is provisioned rather than\n  // frozen into the provider now — so raising or lowering the host default moves every inheriting\n  // provider with it. It resolves to viewer on a host where nobody set one, and never to admin.\n  //\n  // THE HISTORY, because losing it is how this comes back: this line said 'admin', and since the\n  // form never rendered the field, every provider added here sent `defaultRole: \"admin\"`\n  // EXPLICITLY — which the server honours. Anyone who completed the OAuth flow against such a\n  // provider became a full administrator, and the viewer default the server grew in 0.32.0 was\n  // defeated through the most common path there is. It then said 'viewer', which was safe but still\n  // a value chosen by a form nobody could see.\n  //\n  // Now the field is on screen with this as its resting state, so granting the most privilege this\n  // product has is something a person picked, in words.\n  defaultRole: '',\n});\n\n/**\n * The select's stand-in for \"inherit\". It cannot be `''`: reka's `SelectItem` throws on an\n * empty-string value (that is how it clears a selection and shows the placeholder), so the empty\n * string the API wants is mapped at the binding rather than stored in the form.\n */\nconst INHERIT = 'inherit';\n\n/** One line each, in the picker itself — a role name alone does not say what it costs to grant. */\nconst ROLE_WHAT: Record<Role, string> = {\n  viewer: 'reads everything',\n  developer: 'deploys and tears down',\n  maintainer: 'host configuration',\n  admin: 'accounts and sign-on',\n};\n\n/**\n * The host's own default, read only so \"inherit\" can say what it currently resolves to. Best\n * effort: an older server has no such route, and the option still reads correctly without it.\n */\nconst hostDefaultRole = ref('');\nvoid api.get<HostSettings>('/api/settings').then((r) => {\n  if (r.ok) hostDefaultRole.value = String(r.body.settings.find((s) => s.key === 'default_role')?.value ?? '');\n});\n\nconst roleOptions = computed(() => [\n  {\n    value: INHERIT,\n    label: 'The host default',\n    hint: hostDefaultRole.value ? `${sentence(hostDefaultRole.value)} today — follows Settings` : 'set in Settings',\n  },\n  ...ROLES.map((r) => ({ value: r, label: sentence(r), hint: ROLE_WHAT[r] })),\n]);\n\nconst providers = ref<SsoProviderEntry[]>([]);\nconst presets = ref<SsoPreset[]>([]);\nconst callbackUrl = ref('');\nconst loaded = ref(false);\nconst listError = ref('');\n\ntype Editing = {\n  /** null while adding; otherwise the stored key being edited. The key is the row's identity. */\n  originalKey: string | null;\n  key: string;\n  /** The preset the config came from, for the setup link and the template flow. */\n  preset: SsoPreset | null;\n  form: SsoConfig;\n  secret: string;\n  secretSet: boolean;\n  // The three rule lists are edited as comma-separated text, split on save. A `string[]` bound to\n  // an input cannot hold \"acme,\" while someone is still typing the second entry.\n  domains: string;\n  usernames: string;\n  groups: string;\n  /** One value per `<placeholder>` in a template preset's issuer, keyed by placeholder name. */\n  placeholders: Record<string, string>;\n};\nconst editing = ref<Editing | null>(null);\n\n/** `''` on the wire, the sentinel in the control. Nothing else in the form needs translating. */\nconst roleChoice = computed<string>({\n  get: () => editing.value?.form.defaultRole || INHERIT,\n  set: (v) => {\n    if (editing.value) editing.value.form.defaultRole = v === INHERIT ? '' : v;\n  },\n});\n\nconst picking = ref(false);\nconst saving = ref(false);\nconst formError = ref('');\n\nasync function load(): Promise<void> {\n  const r = await api.get<SsoConfigResponse>('/api/sso/config');\n  loaded.value = true;\n  if (!r.ok) {\n    listError.value = problem(r, 'read the sign-on settings');\n    return;\n  }\n  listError.value = '';\n  providers.value = r.body.providers ?? [];\n  presets.value = r.body.presets ?? [];\n  callbackUrl.value = r.body.callbackUrl;\n}\nvoid load();\n\n/** With nothing configured the picker IS the page — an empty list with a button would be a detour. */\nconst showPicker = computed(() => !editing.value && (picking.value || (loaded.value && !listError.value && providers.value.length === 0)));\n\nconst pickerTiles = computed(() => [\n  ...presets.value.map((p) => ({ preset: p as SsoPreset | null, id: p.key, label: p.label, mode: p.mode })),\n  { preset: null, id: 'custom-oauth2', label: 'Custom OAuth 2.0', mode: 'oauth2' as const },\n  { preset: null, id: 'custom-oidc', label: 'Custom OpenID Connect', mode: 'oidc' as const },\n]);\n\n/** A free slug for a second provider on the same preset: github, github-2, github-3… */\nfunction suggestKey(base: string): string {\n  const taken = new Set(providers.value.map((p) => p.key));\n  if (!taken.has(base)) return base;\n  for (let n = 2; ; n++) if (!taken.has(`${base}-${n}`)) return `${base}-${n}`;\n}\n\nfunction startAdd(tile: { preset: SsoPreset | null; mode: 'oidc' | 'oauth2' }): void {\n  const p = tile.preset;\n  const f = blank();\n  f.mode = tile.mode;\n  f.provider = p ? p.key : tile.mode === 'oauth2' ? 'custom' : '';\n  if (p) {\n    f.label = p.label;\n    f.scopes = p.scopes;\n    f.claimMap = { ...OIDC_CLAIMS, ...p.claimMap };\n    if (p.mode === 'oauth2') {\n      f.authorizeUrl = p.authorizeUrl;\n      f.tokenUrl = p.tokenUrl;\n      f.userInfoUrl = p.userInfoUrl;\n      // emailsUrl/groupsUrl left blank on purpose: the server fills the preset's own back in, and\n      // only while userInfoUrl is still the preset's — a self-hosted host's token must not be sent\n      // to the public endpoints.\n    } else if (!p.discoveryUrl.includes('<')) {\n      f.discoveryUrl = p.discoveryUrl;\n    }\n  }\n  editing.value = {\n    originalKey: null,\n    key: suggestKey(p ? p.key : tile.mode === 'oauth2' ? 'custom' : 'oidc'),\n    preset: p,\n    form: f,\n    secret: '',\n    secretSet: false,\n    domains: '',\n    usernames: '',\n    groups: '',\n    placeholders: {},\n  };\n  formError.value = '';\n  picking.value = false;\n}\n\nfunction startEdit(entry: SsoProviderEntry): void {\n  editing.value = {\n    originalKey: entry.key,\n    key: entry.key,\n    preset: presets.value.find((x) => x.key === entry.config.provider) ?? null,\n    form: { ...blank(), ...entry.config, claimMap: { ...OIDC_CLAIMS, ...entry.config.claimMap } },\n    secret: '',\n    secretSet: entry.secretSet,\n    domains: (entry.config.allowedEmailDomains ?? []).join(', '),\n    usernames: (entry.config.allowedUsernames ?? []).join(', '),\n    groups: (entry.config.requiredGroups ?? []).join(', '),\n    placeholders: {},\n  };\n  formError.value = '';\n  picking.value = false;\n}\n\n/**\n * The template flow, add-mode only: an existing row's issuer is already concrete, whatever preset\n * it came from. Splits `https://<your-domain>.okta.com/…` into literals and placeholder names.\n */\nconst templateParts = computed<Array<string | { ph: string }> | null>(() => {\n  const e = editing.value;\n  if (!e || e.originalKey !== null || !e.preset || e.form.mode !== 'oidc') return null;\n  const t = e.preset.discoveryUrl;\n  if (!t.includes('<')) return null;\n  const parts: Array<string | { ph: string }> = [];\n  const re = /<([^>]+)>/g;\n  let last = 0;\n  for (let m = re.exec(t); m; m = re.exec(t)) {\n    if (m.index > last) parts.push(t.slice(last, m.index));\n    parts.push({ ph: m[1] ?? '' });\n    last = m.index + m[0].length;\n  }\n  if (last < t.length) parts.push(t.slice(last));\n  return parts;\n});\n\nconst placeholderNames = computed(() =>\n  (templateParts.value ?? []).flatMap((p) => (typeof p === 'string' ? [] : [p.ph])),\n);\n\n/** The issuer as assembled so far. An unfilled placeholder stays visible as `<name>`. */\nconst assembledDiscovery = computed(() => {\n  const parts = templateParts.value;\n  const e = editing.value;\n  if (!parts || !e) return '';\n  return parts.map((p) => (typeof p === 'string' ? p : e.placeholders[p.ph]?.trim() || `<${p.ph}>`)).join('');\n});\n\nconst keyRe = /^[a-z0-9][a-z0-9-]{0,31}$/;\n\n/** Why the save button is disabled — shown as its title, per the disabled-controls rule. */\nconst cannotSave = computed<string>(() => {\n  const e = editing.value;\n  if (!e) return 'nothing is being edited';\n  const key = e.key.trim();\n  if (!keyRe.test(key)) return 'the key must be a lowercase slug of letters, digits and dashes (32 at most)';\n  if (e.originalKey === null && providers.value.some((p) => p.key === key))\n    return `a provider is already stored under \"${key}\" — edit that one instead, or pick another key`;\n  if (!e.form.clientId.trim()) return 'the client id is required';\n  if (!e.secretSet && !e.secret.trim()) return 'the client secret is required';\n  if (e.form.mode === 'oidc') {\n    const url = templateParts.value ? assembledDiscovery.value : e.form.discoveryUrl.trim();\n    if (!url) return 'the issuer is required';\n    if (url.includes('<')) return 'fill in the issuer placeholder first';\n  } else if (!e.form.authorizeUrl.trim() || !e.form.tokenUrl.trim()) {\n    return 'the authorize and token URLs are required';\n  }\n  return '';\n});\n\nconst list = (s: string): string[] => s.split(',').map((v) => v.trim()).filter(Boolean);\n\nasync function save(): Promise<void> {\n  const e = editing.value;\n  if (!e) return;\n  saving.value = true;\n  // Annotated, not inline: `api.put` takes `unknown`, so without a type here a mistyped field\n  // (`allowedUsernams`) would compile, the server would see no such field, the rule would silently\n  // restrict nobody, and the form would say \"Saved\".\n  const body: SsoConfig & { key: string; clientSecret: string } = {\n    ...e.form,\n    key: e.key.trim(),\n    clientSecret: e.secret.trim(),\n    discoveryUrl: templateParts.value ? assembledDiscovery.value : e.form.discoveryUrl,\n    allowedEmailDomains: list(e.domains),\n    allowedUsernames: list(e.usernames),\n    requiredGroups: e.form.mode === 'oidc' ? [] : list(e.groups),\n  };\n  const r = await api.put<{ ok: boolean; key: string }>('/api/sso/config', body);\n  saving.value = false;\n  if (!r.ok) {\n    // Verbatim, right above the button that was pressed — the refusals are written to be read\n    // (the scope refusal names the scope; the template refusal names the placeholder).\n    formError.value = problem(r, 'save the provider');\n    return;\n  }\n  formError.value = '';\n  toast('ok', e.originalKey ? 'Saved.' : `Added ${body.key}.`);\n  editing.value = null;\n  void load();\n}\n\nasync function remove(entry: SsoProviderEntry): Promise<void> {\n  const r = await api.del(`/api/sso/config/${entry.key}`);\n  if (!r.ok) {\n    listError.value = problem(r, 'remove the provider');\n    return;\n  }\n  toast('ok', `Removed ${entry.key}. Its accounts keep working.`);\n  void load();\n}\n\nasync function copyCallback(): Promise<void> {\n  try {\n    await navigator.clipboard.writeText(callbackUrl.value);\n    toast('ok', 'Copied.');\n  } catch {\n    toast('error', 'Copy failed — select it and copy by hand.');\n  }\n}\n\n/** The card's second line, first half: what kind of provider this row talks to. */\nfunction whereLine(c: SsoConfig): string {\n  if (c.mode === 'oidc') {\n    try {\n      return `OpenID Connect · ${new URL(c.discoveryUrl).hostname}`;\n    } catch {\n      return 'OpenID Connect';\n    }\n  }\n  const p = presets.value.find((x) => x.key === c.provider);\n  return p ? `OAuth 2.0 · ${p.label}` : 'OAuth 2.0 · custom endpoints';\n}\n\n/**\n * The card's third fact: what an account this provider mints is created as — visible in the list\n * because a provider that hands out admin should not need opening to find that out.\n */\nfunction roleLine(c: SsoConfig): string {\n  if (c.defaultRole) return `new accounts: ${sentence(c.defaultRole)}`;\n  return `new accounts: the host default${hostDefaultRole.value ? ` (${sentence(hostDefaultRole.value)})` : ''}`;\n}\n\n/** The card's second line, second half: the sign-in rules, or the honest default. */\nfunction rulesLine(c: SsoConfig): string {\n  const parts: string[] = [];\n  if (c.allowedEmailDomains?.length) parts.push(`domains ${c.allowedEmailDomains.join(', ')}`);\n  if (c.allowedUsernames?.length) parts.push(`usernames ${c.allowedUsernames.join(', ')}`);\n  if (c.requiredGroups?.length) parts.push(`groups ${c.requiredGroups.join(', ')}`);\n  return parts.length ? `lets in ${parts.join('; ')}` : 'lets in anyone the provider allows';\n}\n</script>\n\n<template>\n  <div>\n    <div class=\"page-head\">\n      <div>\n        <h1>Single sign-on</h1>\n        <div class=\"sub\">Sign in with the identity providers you already run</div>\n      </div>\n      <span class=\"grow\" />\n      <button v-if=\"loaded && !listError && !editing && !showPicker\" class=\"primary\" @click=\"picking = true\">Add provider</button>\n    </div>\n\n    <ErrorNote v-if=\"listError\" :text=\"listError\" title=\"Could not read the sign-on settings.\" />\n    <SkeletonList v-if=\"!loaded\" :rows=\"4\" />\n\n    <!-- ============================ the form: one provider ============================ -->\n    <template v-else-if=\"editing\">\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <SsoMark :preset=\"editing.form.provider\" :size=\"20\" />\n          <h2 class=\"section\">\n            {{\n              editing.originalKey\n                ? `Edit ${editing.originalKey}`\n                : `Add ${editing.preset?.label ?? (editing.form.mode === 'oidc' ? 'an OpenID Connect issuer' : 'a custom OAuth 2.0 provider')}`\n            }}\n          </h2>\n          <span class=\"mute\">{{ editing.form.mode === 'oidc' ? 'OpenID Connect' : 'OAuth 2.0' }}</span>\n          <span class=\"grow\" />\n          <label class=\"check\"><input v-model=\"editing.form.enabled\" type=\"checkbox\" /> Enabled</label>\n        </div>\n\n        <!-- Where to create the app. The preset's own `setupHint` prose is deliberately not drawn. -->\n        <div v-if=\"editing.preset\" class=\"banner plain\">\n          <p>\n            <a :href=\"editing.preset.setupUrl\" target=\"_blank\" rel=\"noopener\">\n              Create the app in {{ editing.preset.label }} →\n            </a>\n          </p>\n        </div>\n\n        <!-- THE thing every operator hunts for, so it lives inside the form, first. -->\n        <div class=\"field\">\n          <label>Redirect URI</label>\n          <div class=\"row sso-copy\">\n            <code class=\"sso-url\">{{ callbackUrl }}</code>\n            <button type=\"button\" @click=\"copyCallback\">Copy</button>\n          </div>\n          <p class=\"hint\">Must match the provider's registered callback exactly.</p>\n        </div>\n\n        <div v-if=\"!editing.originalKey\" class=\"field\">\n          <label for=\"sso-key\">Key</label>\n          <input id=\"sso-key\" v-model=\"editing.key\" type=\"text\" spellcheck=\"false\" class=\"sso-key\" />\n          <p class=\"hint\">Lowercase letters, digits, dashes.</p>\n        </div>\n\n        <div class=\"field\">\n          <label for=\"sso-label\">Button text</label>\n          <input id=\"sso-label\" v-model=\"editing.form.label\" type=\"text\" :placeholder=\"editing.preset?.label || 'Acme SSO'\" />\n          <p class=\"hint\">“Continue with {{ editing.form.label || editing.preset?.label || '…' }}”</p>\n        </div>\n\n        <!-- ── OIDC: the issuer. A template preset assembles it from the placeholder(s). -->\n        <template v-if=\"editing.form.mode === 'oidc'\">\n          <template v-if=\"templateParts\">\n            <div v-for=\"ph in placeholderNames\" :key=\"ph\" class=\"field\">\n              <label :for=\"`ph-${ph}`\">{{ sentence(ph) }}</label>\n              <input :id=\"`ph-${ph}`\" v-model=\"editing.placeholders[ph]\" type=\"text\" spellcheck=\"false\" class=\"sso-key\" />\n            </div>\n            <div class=\"field\">\n              <label>Issuer</label>\n              <code class=\"sso-url\" :data-incomplete=\"assembledDiscovery.includes('<') || undefined\">{{ assembledDiscovery }}</code>\n              <p class=\"hint\">Fetched when you save.</p>\n            </div>\n          </template>\n          <div v-else class=\"field\">\n            <label for=\"sso-issuer\">Issuer</label>\n            <input id=\"sso-issuer\" v-model=\"editing.form.discoveryUrl\" type=\"text\" spellcheck=\"false\" placeholder=\"https://accounts.google.com\" />\n            <p class=\"hint\">Fetched when you save.</p>\n          </div>\n        </template>\n\n        <div class=\"field\">\n          <label for=\"sso-client\">Client id</label>\n          <input id=\"sso-client\" v-model=\"editing.form.clientId\" type=\"text\" spellcheck=\"false\" autocomplete=\"off\" />\n        </div>\n        <div class=\"field\">\n          <label for=\"sso-secret\">Client secret</label>\n          <input id=\"sso-secret\" v-model=\"editing.secret\" type=\"password\" spellcheck=\"false\" autocomplete=\"new-password\" />\n          <p class=\"hint\">\n            Write-only.\n            {{ editing.secretSet ? 'Leave empty to keep the stored secret.' : 'Never returned once saved.' }}\n          </p>\n        </div>\n\n        <div class=\"field\">\n          <label for=\"sso-scopes\">Scopes</label>\n          <input id=\"sso-scopes\" v-model=\"editing.form.scopes\" type=\"text\" spellcheck=\"false\" :placeholder=\"editing.form.mode === 'oidc' ? 'openid profile email' : ''\" />\n        </div>\n\n        <!-- ── OAuth 2.0: the endpoints and the claim mapping. Filled in by the preset, needed\n             open only for a custom provider or a self-hosted host — which is exactly the gitlab\n             preset with its URLs replaced, so everything stays editable. -->\n        <details v-if=\"editing.form.mode === 'oauth2'\" class=\"sso-adv\" :open=\"!editing.preset\">\n          <summary>Endpoints and claim mapping</summary>\n\n          <div class=\"field\">\n            <label for=\"sso-auth\">Authorize URL</label>\n            <input id=\"sso-auth\" v-model=\"editing.form.authorizeUrl\" type=\"text\" spellcheck=\"false\" />\n          </div>\n          <div class=\"field\">\n            <label for=\"sso-token\">Token URL</label>\n            <input id=\"sso-token\" v-model=\"editing.form.tokenUrl\" type=\"text\" spellcheck=\"false\" />\n          </div>\n          <div class=\"field\">\n            <label for=\"sso-userinfo\">User info URL</label>\n            <input id=\"sso-userinfo\" v-model=\"editing.form.userInfoUrl\" type=\"text\" spellcheck=\"false\" />\n          </div>\n          <div class=\"field\">\n            <label for=\"sso-emails\">Emails URL <span class=\"mute\">(optional)</span></label>\n            <input id=\"sso-emails\" v-model=\"editing.form.emailsUrl\" type=\"text\" spellcheck=\"false\" />\n          </div>\n          <div class=\"field\">\n            <label for=\"sso-groups-url\">Groups URL <span class=\"mute\">(optional)</span></label>\n            <input id=\"sso-groups-url\" v-model=\"editing.form.groupsUrl\" type=\"text\" spellcheck=\"false\" />\n          </div>\n\n          <!-- Which key of the provider's user response holds each field; a preset fills these in. -->\n          <h3 class=\"section\" style=\"margin-top: var(--s4)\">Claim mapping</h3>\n          <div class=\"row\" style=\"flex-wrap: wrap; gap: var(--s3)\">\n            <div v-for=\"k in (['subject', 'username', 'email', 'name', 'avatar'] as const)\" :key=\"k\" class=\"field inline\">\n              <label :for=\"`cm-${k}`\">{{ k }}</label>\n              <input :id=\"`cm-${k}`\" v-model=\"editing.form.claimMap[k]\" type=\"text\" spellcheck=\"false\" style=\"width: 11rem\" />\n            </div>\n          </div>\n        </details>\n      </section>\n\n      <!-- ============================ who gets in ============================ -->\n      <section class=\"panel\">\n        <div class=\"phead\"><h2 class=\"section\">Who gets in</h2></div>\n        <p class=\"dim\">\n          Every filled list must match; empty lists restrict nobody.\n        </p>\n        <div class=\"field\">\n          <label for=\"sso-domains\">Allowed email domains</label>\n          <input id=\"sso-domains\" v-model=\"editing.domains\" type=\"text\" spellcheck=\"false\" placeholder=\"example.com, corp.example\" />\n          <p class=\"hint\">\n            Comma-separated; subdomains count. <b>When set, a login with no address is refused.</b>\n          </p>\n        </div>\n\n        <div class=\"field\">\n          <label for=\"sso-usernames\">Allowed usernames</label>\n          <input id=\"sso-usernames\" v-model=\"editing.usernames\" type=\"text\" spellcheck=\"false\" placeholder=\"octocat, qa-[0-9]*\" />\n          <p class=\"hint\">\n            Comma-separated patterns: <code>*</code>, <code>?</code>, <code>[0-9]</code>.\n            <b>When set, a login with no username is refused.</b>\n          </p>\n        </div>\n\n        <div v-if=\"editing.form.mode === 'oauth2'\" class=\"field\">\n          <label for=\"sso-groups\">Required groups</label>\n          <input id=\"sso-groups\" v-model=\"editing.groups\" type=\"text\" spellcheck=\"false\" placeholder=\"acme, acme/backend\" />\n          <p class=\"hint\">\n            <b>Exact names, not patterns</b>, comma-separated. Needs the matching scope above, or\n            the save is refused.\n          </p>\n        </div>\n\n        <!-- Never rendered before today, while the form quietly sent `admin`. Every account this\n             provider mints is created at this role, so it is the one field on the page that decides\n             what a stranger who completes the OAuth flow can do. -->\n        <div class=\"field\">\n          <label for=\"sso-role\">New account role</label>\n          <SelectMenu\n            id=\"sso-role\"\n            v-model=\"roleChoice\"\n            label=\"Role for the accounts this provider creates\"\n            :options=\"roleOptions\"\n          />\n          <p class=\"hint\">\n            Set at first sign-in. Host default follows\n            <RouterLink to=\"/settings\">Settings</RouterLink>.\n          </p>\n        </div>\n      </section>\n\n      <ErrorNote v-if=\"formError\" :text=\"formError\" title=\"Not saved.\" />\n\n      <div class=\"row\" style=\"gap: var(--s3)\">\n        <ActionButton variant=\"primary\" :pending=\"saving\" :disabled=\"saving || !!cannotSave\" :title=\"cannotSave || undefined\" @click=\"save\">\n          {{ editing.originalKey ? 'Save changes' : 'Add provider' }}\n        </ActionButton>\n        <button class=\"ghost\" @click=\"editing = null\">Cancel</button>\n      </div>\n    </template>\n\n    <!-- ============================ the picker ============================ -->\n    <template v-else-if=\"showPicker\">\n      <section class=\"panel\">\n        <div class=\"phead\">\n          <h2 class=\"section\">{{ providers.length ? 'Add a provider' : 'Pick a provider' }}</h2>\n          <span class=\"grow\" />\n          <button v-if=\"providers.length\" class=\"ghost\" @click=\"picking = false\">Cancel</button>\n        </div>\n        <p class=\"dim\">Pick where your team already signs in.</p>\n        <div class=\"sso-tiles\">\n          <button v-for=\"t in pickerTiles\" :key=\"t.id\" class=\"sso-tile\" @click=\"startAdd(t)\">\n            <SsoMark :preset=\"t.preset?.key ?? 'custom'\" :size=\"22\" />\n            <span>{{ t.label }}</span>\n            <span class=\"sso-tile-mode\">{{ t.mode === 'oidc' ? 'OpenID Connect' : 'OAuth 2.0' }}</span>\n          </button>\n        </div>\n      </section>\n    </template>\n\n    <!-- ============================ the list ============================ -->\n    <template v-else-if=\"!listError\">\n      <section class=\"panel\">\n        <div class=\"phead\"><h2 class=\"section\">Providers</h2></div>\n        <div class=\"sso-cards stagger\">\n          <div v-for=\"(p, i) in providers\" :key=\"p.key\" class=\"sso-card\" :style=\"{ '--i': i }\">\n            <SsoMark :preset=\"p.config.provider\" :size=\"22\" />\n            <div class=\"sso-card-main\">\n              <div class=\"sso-card-head\">\n                <b>{{ p.config.label }}</b>\n                <code class=\"mute\">{{ p.key }}</code>\n                <span v-if=\"!p.config.enabled\" class=\"badge off\">disabled</span>\n              </div>\n              <div class=\"sso-card-sub\">\n                {{ whereLine(p.config) }} · {{ rulesLine(p.config) }} · {{ roleLine(p.config) }} ·\n                updated <RelativeTime :at=\"p.updatedAt\" />\n              </div>\n            </div>\n            <div class=\"row-actions\">\n              <button class=\"ghost sm\" @click=\"startEdit(p)\">Edit</button>\n              <ActionButton variant=\"ghost\" class=\"sm sso-remove\" :confirm=\"`Remove ${p.key}?`\" @run=\"remove(p)\">\n                Remove\n              </ActionButton>\n            </div>\n          </div>\n        </div>\n      </section>\n\n      <section class=\"panel\">\n        <div class=\"phead\"><h2 class=\"section\">Callback URL</h2></div>\n        <p class=\"dim\">Register this with every provider.</p>\n        <div class=\"row sso-copy\">\n          <code class=\"sso-url\">{{ callbackUrl }}</code>\n          <button type=\"button\" @click=\"copyCallback\">Copy</button>\n        </div>\n      </section>\n    </template>\n  </div>\n</template>\n\n<style scoped>\n/* ── the picker tiles: brand mark, name, protocol. Grouped boxes inside a panel → r2. */\n.sso-tiles {\n  display: grid;\n  grid-template-columns: repeat(auto-fill, minmax(150px, 1fr));\n  gap: var(--s3);\n}\n.sso-tile {\n  flex-direction: column;\n  justify-content: center;\n  gap: var(--s2);\n  padding: var(--s4) var(--s3);\n  border-radius: var(--r2);\n}\n.sso-tile-mode {\n  font-size: var(--t-xs);\n  font-weight: 400;\n  color: var(--fg-mute);\n}\n\n/* ── the provider cards. */\n.sso-cards {\n  display: flex;\n  flex-direction: column;\n  gap: var(--s3);\n}\n.sso-card {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: var(--s3);\n  border: 1px solid var(--line);\n  border-radius: var(--r2);\n  padding: var(--s3) var(--s4);\n}\n.sso-card > svg {\n  flex: none;\n}\n.sso-card-main {\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  flex-direction: column;\n  gap: var(--s1);\n}\n.sso-card-head {\n  display: flex;\n  align-items: center;\n  gap: var(--s2);\n}\n.sso-card-sub {\n  font-size: var(--t-sm);\n  color: var(--fg-dim);\n  overflow-wrap: anywhere;\n}\n/* Ghost so the row stays quiet, red so nobody mistakes what it does. */\n.sso-remove {\n  color: var(--fail);\n}\n\n/* ── the callback URL: the one element here allowed to scroll sideways, never to wrap. */\n.sso-copy {\n  align-items: center;\n  gap: var(--s3);\n}\n.sso-url {\n  flex: 1;\n  min-width: 0;\n  overflow-x: auto;\n  white-space: nowrap;\n}\n/* Block display when it sits alone in a field (the assembled issuer). */\n.field > .sso-url {\n  display: block;\n  flex: none;\n}\n.sso-url[data-incomplete] {\n  color: var(--fg-mute);\n}\n\n/* Slugs and placeholders are short — a 560px input for \"acme\" reads as a text editor. */\n.sso-key {\n  max-width: 260px;\n}\n\n/* ── the collapsed endpoint block for a preset. */\n.sso-adv > summary {\n  cursor: pointer;\n  font-size: var(--t-sm);\n  color: var(--fg-dim);\n  margin: var(--s4) 0 var(--s2);\n}\n</style>\n"],"names":["INHERIT","OIDC_CLAIMS","blank","ROLE_WHAT","hostDefaultRole","ref","api","r","_a","s","roleOptions","computed","sentence","ROLES","providers","presets","callbackUrl","loaded","listError","editing","roleChoice","v","picking","saving","formError","load","problem","showPicker","pickerTiles","p","suggestKey","base","taken","n","startAdd","tile","f","startEdit","entry","x","templateParts","e","t","parts","re","last","m","placeholderNames","assembledDiscovery","keyRe","cannotSave","key","url","list","save","body","toast","remove","copyCallback","whereLine","c","roleLine","rulesLine","_b","_c","_createElementBlock","_createElementVNode","_hoisted_1","_createBlock","ErrorNote","_Fragment","_hoisted_2","_hoisted_3","_createVNode","SsoMark","_hoisted_4","_toDisplayString","_hoisted_5","_hoisted_6","$event","_openBlock","_hoisted_7","_hoisted_8","_hoisted_9","_cache","_hoisted_10","_hoisted_11","_hoisted_12","_vModelText","_hoisted_13","_hoisted_15","_renderList","ph","_unref","_hoisted_16","_hoisted_18","_hoisted_19","_hoisted_20","_hoisted_21","_hoisted_22","_hoisted_23","_hoisted_24","_hoisted_27","_hoisted_28","_hoisted_29","_hoisted_30","_hoisted_31","_hoisted_32","k","_hoisted_33","_hoisted_35","_hoisted_36","_hoisted_37","_hoisted_38","_hoisted_39","SelectMenu","_hoisted_40","_component_RouterLink","_hoisted_41","ActionButton","_createTextVNode","_hoisted_42","_hoisted_43","_hoisted_44","_hoisted_45","_hoisted_47","_hoisted_48","_hoisted_49","i","_hoisted_50","_hoisted_51","_hoisted_52","_hoisted_53","_hoisted_54","RelativeTime","_hoisted_55","_hoisted_56","_hoisted_57","_hoisted_58","_hoisted_59","SkeletonList"],"mappings":"m/DAwFMA,EAAU,4CAxChB,MAAMC,EAAwB,CAAE,QAAS,MAAO,SAAU,qBAAsB,MAAO,QAAS,KAAM,OAAQ,OAAQ,SAAA,EAEhHC,EAAQ,KAAkB,CAC9B,KAAM,OACN,QAAS,GACT,MAAO,GACP,SAAU,GACV,aAAc,GACd,SAAU,GACV,aAAc,GACd,SAAU,GACV,YAAa,GACb,UAAW,GACX,UAAW,GACX,OAAQ,GACR,SAAU,CAAE,GAAGD,CAAA,EACf,oBAAqB,CAAA,EACrB,iBAAkB,CAAA,EAClB,eAAgB,CAAA,EAchB,YAAa,EAAA,GAWTE,EAAkC,CACtC,OAAQ,mBACR,UAAW,yBACX,WAAY,qBACZ,MAAO,sBAAA,EAOHC,EAAkBC,EAAI,EAAE,EACzBC,EAAI,IAAkB,eAAe,EAAE,KAAMC,GAAM,OAClDA,EAAE,KAAIH,EAAgB,MAAQ,SAAOI,EAAAD,EAAE,KAAK,SAAS,KAAME,GAAMA,EAAE,MAAQ,cAAc,IAApD,YAAAD,EAAuD,QAAS,EAAE,EAC7G,CAAC,EAED,MAAME,EAAcC,EAAS,IAAM,CACjC,CACE,MAAOX,EACP,MAAO,mBACP,KAAMI,EAAgB,MAAQ,GAAGQ,EAASR,EAAgB,KAAK,CAAC,4BAA8B,iBAAA,EAEhG,GAAGS,GAAM,IAAKN,IAAO,CAAE,MAAOA,EAAG,MAAOK,EAASL,CAAC,EAAG,KAAMJ,EAAUI,CAAC,GAAI,CAAA,CAC3E,EAEKO,EAAYT,EAAwB,EAAE,EACtCU,EAAUV,EAAiB,EAAE,EAC7BW,EAAcX,EAAI,EAAE,EACpBY,EAASZ,EAAI,EAAK,EAClBa,EAAYb,EAAI,EAAE,EAmBlBc,EAAUd,EAAoB,IAAI,EAGlCe,EAAaT,EAAiB,CAClC,IAAK,IAAA,OAAM,QAAAH,EAAAW,EAAQ,QAAR,YAAAX,EAAe,KAAK,cAAeR,GAC9C,IAAMqB,GAAM,CACNF,EAAQ,QAAOA,EAAQ,MAAM,KAAK,YAAcE,IAAMrB,EAAU,GAAKqB,EAC3E,CAAA,CACD,EAEKC,EAAUjB,EAAI,EAAK,EACnBkB,EAASlB,EAAI,EAAK,EAClBmB,EAAYnB,EAAI,EAAE,EAExB,eAAeoB,GAAsB,CACnC,MAAMlB,EAAI,MAAMD,EAAI,IAAuB,iBAAiB,EAE5D,GADAW,EAAO,MAAQ,GACX,CAACV,EAAE,GAAI,CACTW,EAAU,MAAQQ,EAAQnB,EAAG,2BAA2B,EACxD,MACF,CACAW,EAAU,MAAQ,GAClBJ,EAAU,MAAQP,EAAE,KAAK,WAAa,CAAA,EACtCQ,EAAQ,MAAQR,EAAE,KAAK,SAAW,CAAA,EAClCS,EAAY,MAAQT,EAAE,KAAK,WAC7B,CACKkB,EAAA,EAGL,MAAME,EAAahB,EAAS,IAAM,CAACQ,EAAQ,QAAUG,EAAQ,OAAUL,EAAO,OAAS,CAACC,EAAU,OAASJ,EAAU,MAAM,SAAW,EAAG,EAEnIc,GAAcjB,EAAS,IAAM,CACjC,GAAGI,EAAQ,MAAM,IAAKc,IAAO,CAAE,OAAQA,EAAuB,GAAIA,EAAE,IAAK,MAAOA,EAAE,MAAO,KAAMA,EAAE,MAAO,EACxG,CAAE,OAAQ,KAAM,GAAI,gBAAiB,MAAO,mBAAoB,KAAM,QAAA,EACtE,CAAE,OAAQ,KAAM,GAAI,cAAe,MAAO,wBAAyB,KAAM,MAAA,CAAgB,CAC1F,EAGD,SAASC,GAAWC,EAAsB,CACxC,MAAMC,EAAQ,IAAI,IAAIlB,EAAU,MAAM,IAAKe,GAAMA,EAAE,GAAG,CAAC,EACvD,GAAI,CAACG,EAAM,IAAID,CAAI,EAAG,OAAOA,EAC7B,QAASE,EAAI,GAAKA,IAAK,GAAI,CAACD,EAAM,IAAI,GAAGD,CAAI,IAAIE,CAAC,EAAE,QAAU,GAAGF,CAAI,IAAIE,CAAC,EAC5E,CAEA,SAASC,GAASC,EAAmE,CACnF,MAAMN,EAAIM,EAAK,OACTC,EAAIlC,EAAA,EACVkC,EAAE,KAAOD,EAAK,KACdC,EAAE,SAAWP,EAAIA,EAAE,IAAMM,EAAK,OAAS,SAAW,SAAW,GACzDN,IACFO,EAAE,MAAQP,EAAE,MACZO,EAAE,OAASP,EAAE,OACbO,EAAE,SAAW,CAAE,GAAGnC,EAAa,GAAG4B,EAAE,QAAA,EAChCA,EAAE,OAAS,UACbO,EAAE,aAAeP,EAAE,aACnBO,EAAE,SAAWP,EAAE,SACfO,EAAE,YAAcP,EAAE,aAIRA,EAAE,aAAa,SAAS,GAAG,IACrCO,EAAE,aAAeP,EAAE,eAGvBV,EAAQ,MAAQ,CACd,YAAa,KACb,IAAKW,GAAWD,EAAIA,EAAE,IAAMM,EAAK,OAAS,SAAW,SAAW,MAAM,EACtE,OAAQN,EACR,KAAMO,EACN,OAAQ,GACR,UAAW,GACX,QAAS,GACT,UAAW,GACX,OAAQ,GACR,aAAc,CAAA,CAAC,EAEjBZ,EAAU,MAAQ,GAClBF,EAAQ,MAAQ,EAClB,CAEA,SAASe,GAAUC,EAA+B,CAChDnB,EAAQ,MAAQ,CACd,YAAamB,EAAM,IACnB,IAAKA,EAAM,IACX,OAAQvB,EAAQ,MAAM,KAAMwB,GAAMA,EAAE,MAAQD,EAAM,OAAO,QAAQ,GAAK,KACtE,KAAM,CAAE,GAAGpC,IAAS,GAAGoC,EAAM,OAAQ,SAAU,CAAE,GAAGrC,EAAa,GAAGqC,EAAM,OAAO,SAAS,EAC1F,OAAQ,GACR,UAAWA,EAAM,UACjB,SAAUA,EAAM,OAAO,qBAAuB,CAAA,GAAI,KAAK,IAAI,EAC3D,WAAYA,EAAM,OAAO,kBAAoB,CAAA,GAAI,KAAK,IAAI,EAC1D,QAASA,EAAM,OAAO,gBAAkB,CAAA,GAAI,KAAK,IAAI,EACrD,aAAc,CAAA,CAAC,EAEjBd,EAAU,MAAQ,GAClBF,EAAQ,MAAQ,EAClB,CAMA,MAAMkB,EAAgB7B,EAAgD,IAAM,CAC1E,MAAM8B,EAAItB,EAAQ,MAClB,GAAI,CAACsB,GAAKA,EAAE,cAAgB,MAAQ,CAACA,EAAE,QAAUA,EAAE,KAAK,OAAS,OAAQ,OAAO,KAChF,MAAMC,EAAID,EAAE,OAAO,aACnB,GAAI,CAACC,EAAE,SAAS,GAAG,EAAG,OAAO,KAC7B,MAAMC,EAAwC,CAAA,EACxCC,EAAK,aACX,IAAIC,EAAO,EACX,QAASC,EAAIF,EAAG,KAAKF,CAAC,EAAGI,EAAGA,EAAIF,EAAG,KAAKF,CAAC,EACnCI,EAAE,MAAQD,GAAMF,EAAM,KAAKD,EAAE,MAAMG,EAAMC,EAAE,KAAK,CAAC,EACrDH,EAAM,KAAK,CAAE,GAAIG,EAAE,CAAC,GAAK,GAAI,EAC7BD,EAAOC,EAAE,MAAQA,EAAE,CAAC,EAAE,OAExB,OAAID,EAAOH,EAAE,QAAQC,EAAM,KAAKD,EAAE,MAAMG,CAAI,CAAC,EACtCF,CACT,CAAC,EAEKI,GAAmBpC,EAAS,KAC/B6B,EAAc,OAAS,CAAA,GAAI,QAASX,GAAO,OAAOA,GAAM,SAAW,CAAA,EAAK,CAACA,EAAE,EAAE,CAAE,CAAA,EAI5EmB,EAAqBrC,EAAS,IAAM,CACxC,MAAMgC,EAAQH,EAAc,MACtB,EAAIrB,EAAQ,MAClB,MAAI,CAACwB,GAAS,CAAC,EAAU,GAClBA,EAAM,IAAKd,GAAA,OAAO,cAAOA,GAAM,SAAWA,IAAIrB,EAAA,EAAE,aAAaqB,EAAE,EAAE,IAAnB,YAAArB,EAAsB,SAAU,IAAIqB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAC5G,CAAC,EAEKoB,GAAQ,4BAGRC,EAAavC,EAAiB,IAAM,CACxC,MAAM8B,EAAItB,EAAQ,MAClB,GAAI,CAACsB,EAAG,MAAO,0BACf,MAAMU,EAAMV,EAAE,IAAI,KAAA,EAClB,GAAI,CAACQ,GAAM,KAAKE,CAAG,EAAG,MAAO,8EAC7B,GAAIV,EAAE,cAAgB,MAAQ3B,EAAU,MAAM,KAAMe,GAAMA,EAAE,MAAQsB,CAAG,EACrE,MAAO,uCAAuCA,CAAG,iDACnD,GAAI,CAACV,EAAE,KAAK,SAAS,KAAA,EAAQ,MAAO,4BACpC,GAAI,CAACA,EAAE,WAAa,CAACA,EAAE,OAAO,KAAA,EAAQ,MAAO,gCAC7C,GAAIA,EAAE,KAAK,OAAS,OAAQ,CAC1B,MAAMW,EAAMZ,EAAc,MAAQQ,EAAmB,MAAQP,EAAE,KAAK,aAAa,KAAA,EACjF,GAAI,CAACW,EAAK,MAAO,yBACjB,GAAIA,EAAI,SAAS,GAAG,EAAG,MAAO,sCAChC,SAAW,CAACX,EAAE,KAAK,aAAa,QAAU,CAACA,EAAE,KAAK,SAAS,KAAA,EACzD,MAAO,4CAET,MAAO,EACT,CAAC,EAEKY,EAAQ5C,GAAwBA,EAAE,MAAM,GAAG,EAAE,IAAKY,GAAMA,EAAE,KAAA,CAAM,EAAE,OAAO,OAAO,EAEtF,eAAeiC,IAAsB,CACnC,MAAMb,EAAItB,EAAQ,MAClB,GAAI,CAACsB,EAAG,OACRlB,EAAO,MAAQ,GAIf,MAAMgC,EAA0D,CAC9D,GAAGd,EAAE,KACL,IAAKA,EAAE,IAAI,KAAA,EACX,aAAcA,EAAE,OAAO,KAAA,EACvB,aAAcD,EAAc,MAAQQ,EAAmB,MAAQP,EAAE,KAAK,aACtE,oBAAqBY,EAAKZ,EAAE,OAAO,EACnC,iBAAkBY,EAAKZ,EAAE,SAAS,EAClC,eAAgBA,EAAE,KAAK,OAAS,OAAS,GAAKY,EAAKZ,EAAE,MAAM,CAAA,EAEvDlC,EAAI,MAAMD,EAAI,IAAkC,kBAAmBiD,CAAI,EAE7E,GADAhC,EAAO,MAAQ,GACX,CAAChB,EAAE,GAAI,CAGTiB,EAAU,MAAQE,EAAQnB,EAAG,mBAAmB,EAChD,MACF,CACAiB,EAAU,MAAQ,GAClBgC,EAAM,KAAMf,EAAE,YAAc,SAAW,SAASc,EAAK,GAAG,GAAG,EAC3DpC,EAAQ,MAAQ,KACXM,EAAA,CACP,CAEA,eAAegC,GAAOnB,EAAwC,CAC5D,MAAM/B,EAAI,MAAMD,EAAI,IAAI,mBAAmBgC,EAAM,GAAG,EAAE,EACtD,GAAI,CAAC/B,EAAE,GAAI,CACTW,EAAU,MAAQQ,EAAQnB,EAAG,qBAAqB,EAClD,MACF,CACAiD,EAAM,KAAM,WAAWlB,EAAM,GAAG,8BAA8B,EACzDb,EAAA,CACP,CAEA,eAAeiC,GAA8B,CAC3C,GAAI,CACF,MAAM,UAAU,UAAU,UAAU1C,EAAY,KAAK,EACrDwC,EAAM,KAAM,SAAS,CACvB,MAAQ,CACNA,EAAM,QAAS,2CAA2C,CAC5D,CACF,CAGA,SAASG,GAAUC,EAAsB,CACvC,GAAIA,EAAE,OAAS,OACb,GAAI,CACF,MAAO,oBAAoB,IAAI,IAAIA,EAAE,YAAY,EAAE,QAAQ,EAC7D,MAAQ,CACN,MAAO,gBACT,CAEF,MAAM/B,EAAId,EAAQ,MAAM,KAAMwB,GAAMA,EAAE,MAAQqB,EAAE,QAAQ,EACxD,OAAO/B,EAAI,eAAeA,EAAE,KAAK,GAAK,8BACxC,CAMA,SAASgC,GAASD,EAAsB,CACtC,OAAIA,EAAE,YAAoB,iBAAiBhD,EAASgD,EAAE,WAAW,CAAC,GAC3D,iCAAiCxD,EAAgB,MAAQ,KAAKQ,EAASR,EAAgB,KAAK,CAAC,IAAM,EAAE,EAC9G,CAGA,SAAS0D,GAAUF,EAAsB,WACvC,MAAMjB,EAAkB,CAAA,EACxB,OAAInC,EAAAoD,EAAE,sBAAF,MAAApD,EAAuB,QAAQmC,EAAM,KAAK,WAAWiB,EAAE,oBAAoB,KAAK,IAAI,CAAC,EAAE,GACvFG,EAAAH,EAAE,mBAAF,MAAAG,EAAoB,QAAQpB,EAAM,KAAK,aAAaiB,EAAE,iBAAiB,KAAK,IAAI,CAAC,EAAE,GACnFI,EAAAJ,EAAE,iBAAF,MAAAI,EAAkB,QAAQrB,EAAM,KAAK,UAAUiB,EAAE,eAAe,KAAK,IAAI,CAAC,EAAE,EACzEjB,EAAM,OAAS,WAAWA,EAAM,KAAK,IAAI,CAAC,GAAK,oCACxD,6DAIEsB,EA6PM,MAAA,KAAA,CA5PJC,EAOM,MAPNC,GAOM,eANJD,EAGM,MAAA,KAAA,CAFJA,EAAuB,UAAnB,gBAAc,EAClBA,EAA0E,MAAA,CAArE,MAAM,KAAA,EAAM,qDAAmD,CAAA,qBAEtEA,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACJjD,EAAA,OAAM,CAAKC,EAAA,OAAS,CAAKC,EAAA,QAAYQ,EAAA,WAAnDsC,EAA4H,SAAA,OAA7D,MAAM,UAAW,uBAAO3C,EAAA,MAAO,GAAA,EAAS,cAAY,cAGpGJ,EAAA,WAAjBkD,EAA6FC,EAAA,OAAhE,KAAMnD,EAAA,MAAW,MAAM,sCAAA,6BAC/BD,EAAA,MAGAE,EAAA,WAArB8C,EAqLWK,EAAA,CAAA,IAAA,GAAA,CApLTJ,EAwHU,UAxHVK,GAwHU,CAvHRL,EAYM,MAZNM,GAYM,CAXJC,EAAsDC,EAAA,CAA5C,OAAQvD,EAAA,MAAQ,KAAK,SAAW,KAAM,EAAA,qBAChD+C,EAMK,KANLS,GAMKC,EAJDzD,EAAA,MAAQ,YAAsC,QAAAA,EAAA,MAAQ,WAAW,YAA4BX,EAAAW,EAAA,MAAQ,SAAR,YAAAX,EAAgB,SAAUW,EAAA,MAAQ,KAAK,OAAI,OAAA,2BAAA,8BAAA,EAAA,EAAA,CAAA,EAK5I+C,EAA6F,OAA7FW,GAA6FD,EAAvEzD,QAAQ,KAAK,OAAI,OAAA,iBAAA,WAAA,EAAA,CAAA,gBACvC+C,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GAClBA,EAA6F,QAA7FY,GAA6F,GAAxEZ,EAAwD,QAAA,sCAAxC/C,EAAA,MAAQ,KAAK,QAAO4D,GAAE,KAAK,UAAA,iBAA3B5D,EAAA,MAAQ,KAAK,OAAO,CAAA,mBAAoB,WAAQ,EAAA,EAAA,KAI5EA,EAAA,MAAQ,QAAnB6D,IAAAf,EAMM,MANNgB,GAMM,CALJf,EAII,IAAA,KAAA,CAHFA,EAEI,IAAA,CAFA,KAAM/C,EAAA,MAAQ,OAAO,SAAU,OAAO,SAAS,IAAI,UAAA,EAAW,wBAC3CA,EAAA,MAAQ,OAAO,KAAK,EAAG,MAC9C,EAAA+D,EAAA,CAAA,eAKJhB,EAOM,MAPNiB,GAOM,CANJC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA2B,aAApB,eAAY,EAAA,GACnBA,EAGM,MAHNmB,GAGM,CAFJnB,EAA8C,OAA9CoB,GAA8CV,EAArB5D,EAAA,KAAW,EAAA,CAAA,EACpCkD,EAAyD,SAAA,CAAjD,KAAK,SAAU,QAAOR,CAAA,EAAc,MAAI,CAAA,GAElD0B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA0E,IAAA,CAAvE,MAAM,QAAO,yDAAsD,EAAA,EAAA,GAG5D/C,EAAA,MAAQ,sBAApB6D,IAAAf,EAIM,MAJNsB,GAIM,CAHJH,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAgC,QAAA,CAAzB,IAAI,SAAA,EAAU,MAAG,EAAA,KACxBA,EAA2F,QAAA,CAApF,GAAG,UAAmB,sBAAAkB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,GAAA5D,EAAA,MAAQ,IAAG4D,GAAE,KAAK,OAAO,WAAW,QAAQ,MAAM,SAAA,aAAlD,CAAAS,EAAArE,EAAA,MAAQ,GAAG,CAAA,GACxCiE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAsD,IAAA,CAAnD,MAAM,QAAO,qCAAkC,EAAA,EAAA,IAGpDA,EAIM,MAJNuB,GAIM,CAHJL,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA0C,QAAA,CAAnC,IAAI,WAAA,EAAY,cAAW,EAAA,KAClCA,EAAoH,QAAA,CAA7G,GAAG,iDAAqB/C,EAAA,MAAQ,KAAK,MAAK4D,GAAE,KAAK,OAAQ,cAAahB,EAAA5C,EAAA,MAAQ,SAAR,YAAA4C,EAAgB,QAAK,UAAA,iBAAnE5C,EAAA,MAAQ,KAAK,KAAK,CAAA,GACjD+C,EAA4F,IAA5FwB,GAAgB,kBAAed,EAAGzD,QAAQ,KAAK,SAAS6C,EAAA7C,EAAA,MAAQ,SAAR,YAAA6C,EAAgB,aAAe,IAAC,CAAA,CAAA,GAI1E7C,EAAA,MAAQ,KAAK,OAAI,YAAjC8C,EAiBWK,EAAA,CAAA,IAAA,CAAA,EAAA,CAhBO9B,EAAA,WAAhByB,EAUWK,EAAA,CAAA,IAAA,GAAA,QATTL,EAGMK,EAAA,KAAAqB,EAHY5C,GAAA,MAAN6C,QAAZ3B,EAGM,MAAA,CAH+B,IAAK2B,EAAI,MAAM,OAAA,GAClD1B,EAAmD,QAAA,CAA3C,UAAW0B,CAAE,EAAA,EAAOhB,EAAAiB,GAAAjF,CAAA,EAASgF,CAAE,CAAA,EAAA,EAAAE,EAAA,IACvC5B,EAA4G,QAAA,CAApG,SAAU0B,CAAE,4BAAazE,EAAA,MAAQ,aAAayE,CAAE,EAAAb,EAAG,KAAK,OAAO,WAAW,QAAQ,MAAM,SAAA,iBAA/D5D,EAAA,MAAQ,aAAayE,CAAE,CAAA,CAAA,aAE1D1B,EAIM,MAJN6B,GAIM,CAHJX,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAqB,aAAd,SAAM,EAAA,GACbA,EAAsH,OAAA,CAAhH,MAAM,UAAW,kBAAiBlB,EAAA,MAAmB,eAAiB,MAAA,IAAcA,EAAA,KAAkB,EAAA,EAAAgD,EAAA,EAC5GZ,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA0C,IAAA,CAAvC,MAAM,QAAO,yBAAsB,EAAA,EAAA,UAG1Cc,IAAAf,EAIM,MAJNgC,GAIM,CAHJb,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAsC,QAAA,CAA/B,IAAI,YAAA,EAAa,SAAM,EAAA,KAC9BA,EAAsI,QAAA,CAA/H,GAAG,kDAAsB/C,EAAA,MAAQ,KAAK,aAAY4D,GAAE,KAAK,OAAO,WAAW,QAAQ,YAAY,6BAAA,gBAAtE5D,EAAA,MAAQ,KAAK,YAAY,CAAA,GACzDiE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA0C,IAAA,CAAvC,MAAM,QAAO,yBAAsB,EAAA,EAAA,mBAI1CA,EAGM,MAHNgC,GAGM,CAFJd,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAyC,QAAA,CAAlC,IAAI,YAAA,EAAa,YAAS,EAAA,KACjCA,EAA2G,QAAA,CAApG,GAAG,kDAAsB/C,EAAA,MAAQ,KAAK,SAAQ4D,GAAE,KAAK,OAAO,WAAW,QAAQ,aAAa,KAAA,gBAAnE5D,EAAA,MAAQ,KAAK,QAAQ,CAAA,KAEvD+C,EAOM,MAPNiC,GAOM,CANJf,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA6C,QAAA,CAAtC,IAAI,YAAA,EAAa,gBAAa,EAAA,KACrCA,EAAiH,QAAA,CAA1G,GAAG,aAAsB,sBAAAkB,EAAA,CAAA,IAAAA,EAAA,CAAA,EAAAL,GAAA5D,EAAA,MAAQ,OAAM4D,GAAE,KAAK,WAAW,WAAW,QAAQ,aAAa,cAAA,aAAhE,CAAAS,EAAArE,EAAA,MAAQ,MAAM,CAAA,GAC9C+C,EAGI,IAHJkC,GAAgB,gBAEdxB,EAAGzD,EAAA,MAAQ,UAAS,yCAAA,4BAAA,EAAA,CAAA,CAAA,GAIxB+C,EAGM,MAHNmC,GAGM,CAFJjB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAsC,QAAA,CAA/B,IAAI,YAAA,EAAa,SAAM,EAAA,KAC9BA,EAAgK,QAAA,CAAzJ,GAAG,kDAAsB/C,EAAA,MAAQ,KAAK,OAAM4D,GAAE,KAAK,OAAO,WAAW,QAAS,YAAa5D,EAAA,MAAQ,KAAK,OAAI,OAAA,uBAAA,EAAA,iBAAnFA,EAAA,MAAQ,KAAK,MAAM,CAAA,KAMtCA,EAAA,MAAQ,KAAK,OAAI,cAAhC8C,EAgCU,UAAA,OAhCqC,MAAM,UAAW,KAAI,CAAG9C,EAAA,MAAQ,MAAA,GAC7EiE,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA8C,eAArC,8BAA2B,EAAA,GAEpCA,EAGM,MAHNoC,GAGM,CAFJlB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA2C,QAAA,CAApC,IAAI,UAAA,EAAW,gBAAa,EAAA,KACnCA,EAA0F,QAAA,CAAnF,GAAG,gDAAoB/C,EAAA,MAAQ,KAAK,aAAY4D,GAAE,KAAK,OAAO,WAAW,OAAA,gBAAlD5D,EAAA,MAAQ,KAAK,YAAY,CAAA,KAEzD+C,EAGM,MAHNqC,GAGM,CAFJnB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAwC,QAAA,CAAjC,IAAI,WAAA,EAAY,YAAS,EAAA,KAChCA,EAAuF,QAAA,CAAhF,GAAG,iDAAqB/C,EAAA,MAAQ,KAAK,SAAQ4D,GAAE,KAAK,OAAO,WAAW,OAAA,gBAA9C5D,EAAA,MAAQ,KAAK,QAAQ,CAAA,KAEtD+C,EAGM,MAHNsC,GAGM,CAFJpB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA+C,QAAA,CAAxC,IAAI,cAAA,EAAe,gBAAa,EAAA,KACvCA,EAA6F,QAAA,CAAtF,GAAG,sDAAwB/C,EAAA,MAAQ,KAAK,YAAW4D,GAAE,KAAK,OAAO,WAAW,OAAA,gBAAjD5D,EAAA,MAAQ,KAAK,WAAW,CAAA,KAE5D+C,EAGM,MAHNuC,GAGM,eAFJvC,EAA+E,QAAA,CAAxE,IAAI,cAAY,GAAC,aAAW,EAAAA,EAAoC,OAAA,CAA9B,MAAM,MAAA,EAAO,YAAU,CAAA,SAChEA,EAAyF,QAAA,CAAlF,GAAG,oDAAsB/C,EAAA,MAAQ,KAAK,UAAS4D,GAAE,KAAK,OAAO,WAAW,OAAA,gBAA/C5D,EAAA,MAAQ,KAAK,SAAS,CAAA,KAExD+C,EAGM,MAHNwC,GAGM,eAFJxC,EAAmF,QAAA,CAA5E,IAAI,kBAAgB,GAAC,aAAW,EAAAA,EAAoC,OAAA,CAA9B,MAAM,MAAA,EAAO,YAAU,CAAA,SACpEA,EAA6F,QAAA,CAAtF,GAAG,wDAA0B/C,EAAA,MAAQ,KAAK,UAAS4D,GAAE,KAAK,OAAO,WAAW,OAAA,gBAA/C5D,EAAA,MAAQ,KAAK,SAAS,CAAA,mBAI5D+C,EAAoE,KAAA,CAAhE,MAAM,UAAU,MAAA,CAAA,aAAA,WAAA,CAAA,EAA8B,gBAAa,EAAA,GAC/DA,EAKM,MALNyC,GAKM,MAJJ1C,EAGMK,EAAA,KAAAqB,EAHW,CAAA,UAAA,WAAA,QAAA,OAAA,QAAA,EAALiB,GAAZ1C,EAGM,MAAA,CAH2E,IAAK0C,EAAG,MAAM,cAAA,GAC7F1C,EAAuC,QAAA,CAA/B,UAAW0C,CAAC,EAAA,IAAOA,CAAC,EAAA,EAAAC,EAAA,IAC5B3C,EAAgH,QAAA,CAAxG,SAAU0C,CAAC,GAAa,sBAAA7B,GAAA5D,EAAA,MAAQ,KAAK,SAASyF,CAAC,EAAA7B,EAAG,KAAK,OAAO,WAAW,QAAQ,MAAA,CAAA,MAAA,OAAA,CAAA,cAAzD,CAAAS,EAAArE,EAAA,MAAQ,KAAK,SAASyF,CAAC,CAAA,CAAA,gCAO/D1C,EA+CU,UA/CV4C,GA+CU,eA9CR5C,EAA6D,MAAA,CAAxD,MAAM,SAAO,CAACA,EAAoC,KAAA,CAAhC,MAAM,SAAA,EAAU,aAAW,CAAA,OAClDkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAEI,IAAA,CAFD,MAAM,KAAA,EAAM,+DAEf,EAAA,GACAA,EAMM,MANN6C,GAMM,CALJ3B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAsD,QAAA,CAA/C,IAAI,aAAA,EAAc,wBAAqB,EAAA,KAC9CA,EAA2H,QAAA,CAApH,GAAG,cAAuB,sBAAAkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,GAAA5D,EAAA,MAAQ,QAAO4D,GAAE,KAAK,OAAO,WAAW,QAAQ,YAAY,2BAAA,aAA5D,CAAAS,EAAArE,EAAA,MAAQ,OAAO,CAAA,iBAChD+C,EAEI,IAAA,CAFD,MAAM,QAAM,GAAC,sCACqB,EAAAA,EAAoD,SAAjD,+CAA6C,CAAA,SAIvFA,EAOM,MAPN8C,GAOM,CANJ5B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAoD,QAAA,CAA7C,IAAI,eAAA,EAAgB,oBAAiB,EAAA,KAC5CA,EAAwH,QAAA,CAAjH,GAAG,gBAAyB,sBAAAkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,GAAA5D,EAAA,MAAQ,UAAS4D,GAAE,KAAK,OAAO,WAAW,QAAQ,YAAY,oBAAA,aAA9D,CAAAS,EAAArE,EAAA,MAAQ,SAAS,CAAA,iBACpD+C,EAGI,IAAA,CAHD,MAAM,QAAM,GAAC,6BACY,EAAAA,EAAc,YAAR,GAAC,IAAO,IAAE,EAAAA,EAAc,YAAR,GAAC,IAAO,IAAE,EAAAA,EAAkB,YAAZ,OAAK,IAAO,IAC5E,EAAAA,EAAqD,SAAlD,gDAA8C,CAAA,SAI1C/C,EAAA,MAAQ,KAAK,OAAI,UAA5B6D,IAAAf,EAOM,MAPNgD,GAOM,CANJ7B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA+C,QAAA,CAAxC,IAAI,YAAA,EAAa,kBAAe,EAAA,KACvCA,EAAkH,QAAA,CAA3G,GAAG,aAAsB,sBAAAkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAL,GAAA5D,EAAA,MAAQ,OAAM4D,GAAE,KAAK,OAAO,WAAW,QAAQ,YAAY,oBAAA,aAA3D,CAAAS,EAAArE,EAAA,MAAQ,MAAM,CAAA,iBAC9C+C,EAGI,IAAA,CAHD,MAAM,QAAM,CACbA,EAAgC,SAA7B,2BAAyB,IAAI,6EAElC,CAAA,mBAMFA,EAYM,MAZNgD,GAYM,CAXJ9B,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAA8C,QAAA,CAAvC,IAAI,UAAA,EAAW,mBAAgB,EAAA,GACtCO,EAKE0C,GAAA,CAJA,GAAG,sBACM/F,EAAA,6CAAAA,EAAU,MAAA2D,GACnB,MAAM,8CACL,QAASrE,EAAA,KAAA,mCAEZwD,EAGI,IAHJkD,GAGI,iBAHY,+CAEd,EAAA,GAAA3C,EAAgD4C,EAAA,CAApC,GAAG,aAAW,WAAC,IAAQ,CAAA,GAAAjC,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAAR,WAAQ,EAAA,CAAA,2BAAa,KAClD,EAAA,EAAA,OAIa5D,EAAA,WAAjB4C,EAAmEC,EAAA,OAAtC,KAAM7C,EAAA,MAAW,MAAM,YAAA,6BAEpD0C,EAKM,MALNoD,GAKM,CAJJ7C,EAEe8C,EAAA,CAFD,QAAQ,UAAW,QAAShG,EAAA,MAAS,SAAUA,EAAA,OAAM,CAAA,CAAM2B,EAAA,MAAa,MAAOA,EAAA,OAAc,OAAY,QAAOI,EAAA,aAC5H,IAA2D,CAAxDkE,EAAA5C,EAAAzD,EAAA,MAAQ,YAAW,eAAA,cAAA,EAAA,CAAA,CAAA,0CAExB+C,EAA6D,SAAA,CAArD,MAAM,QAAS,yBAAO/C,EAAA,MAAO,KAAA,EAAS,QAAM,CAAA,SAKnCQ,EAAA,OACnBqD,EAAA,EAAAf,EAcU,UAdVwD,GAcU,CAbRvD,EAIM,MAJNwD,GAIM,CAHJxD,EAAsF,KAAtFyD,GAAsF/C,EAA/D9D,EAAA,MAAU,OAAM,iBAAA,iBAAA,EAAA,CAAA,gBACvCoD,EAAqB,OAAA,CAAf,MAAM,MAAA,EAAM,KAAA,EAAA,GACJpD,EAAA,MAAU,YAAxBmD,EAAsF,SAAA,OAAtD,MAAM,QAAS,yBAAO3C,EAAA,MAAO,GAAA,EAAU,QAAM,cAE/E8D,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAyD,IAAA,CAAtD,MAAM,KAAA,EAAM,yCAAsC,EAAA,GACrDA,EAMM,MANN0D,GAMM,QALJ3D,EAISK,EAAA,KAAAqB,EAJW/D,GAAA,MAAL,GAAC,kBAAhBqC,EAIS,SAAA,CAJyB,IAAK,EAAE,GAAI,MAAM,WAAY,QAAKc,GAAE7C,GAAS,CAAC,CAAA,GAC9EuC,EAA0DC,EAAA,CAAhD,SAAQlE,EAAA,EAAE,SAAF,YAAAA,EAAU,MAAG,SAAe,KAAM,EAAA,qBACpD0D,EAA0B,OAAA,KAAAU,EAAjB,EAAE,KAAK,EAAA,CAAA,EAChBV,EAA2F,OAA3F2D,GAA2FjD,EAA5D,EAAE,OAAI,OAAA,iBAAA,WAAA,EAAA,CAAA,CAAA,qBAOvB1D,EAAA,oBAAtB+C,EAmCWK,EAAA,CAAA,IAAA,GAAA,CAlCTJ,EAwBU,UAxBV4D,GAwBU,eAvBR5D,EAA2D,MAAA,CAAtD,MAAM,SAAO,CAACA,EAAkC,KAAA,CAA9B,MAAM,SAAA,EAAU,WAAS,CAAA,OAChDA,EAqBM,MArBN6D,GAqBM,EApBJ/C,EAAA,EAAA,EAAAf,EAmBMK,EAAA,KAAAqB,EAnBgB7E,EAAA,MAAS,CAAlBe,EAAGmG,SAAhB/D,EAmBM,MAAA,CAnB4B,IAAKpC,EAAE,IAAK,MAAM,WAAY,gBAAgBmG,EAAC,CAAA,GAC/EvD,EAAkDC,EAAA,CAAxC,OAAQ7C,EAAE,OAAO,SAAW,KAAM,EAAA,qBAC5CqC,EAUM,MAVN+D,GAUM,CATJ/D,EAIM,MAJNgE,GAIM,CAHJhE,EAA2B,IAAA,KAAAU,EAArB/C,EAAE,OAAO,KAAK,EAAA,CAAA,EACpBqC,EAAqC,OAArCiE,GAAqCvD,EAAf/C,EAAE,GAAG,EAAA,CAAA,EACdA,EAAE,OAAO,sBAAtBoC,EAAgE,OAAhEmE,GAAiD,UAAQ,KAE3DlE,EAGM,MAHNmE,GAGM,KAFD1E,GAAU9B,EAAE,MAAM,GAAI,MAAG+C,EAAGd,GAAUjC,EAAE,MAAM,CAAA,EAAI,MAAG+C,EAAGf,GAAShC,EAAE,MAAM,CAAA,EAAI,cACxE,CAAA,EAAA4C,EAAkC6D,GAAA,CAAnB,GAAIzG,EAAE,SAAA,qBAGjCqC,EAKM,MALNqE,GAKM,CAJJrE,EAA4D,SAAA,CAApD,MAAM,WAAY,QAAKa,GAAE1C,GAAUR,CAAC,CAAA,EAAG,OAAI,EAAA2G,EAAA,EACnD/D,EAEe8C,EAAA,CAFD,QAAQ,QAAQ,MAAM,gBAAiB,QAAO,UAAY1F,EAAE,GAAG,IAAM,MAAGkD,GAAEtB,GAAO5B,CAAC,CAAA,aAAG,IAEnG,CAAA,GAAAuD,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAA,GAFmG,WAEnG,EAAA,CAAA,mDAMRlB,EAOU,UAPVuE,GAOU,eANRvE,EAA8D,MAAA,CAAzD,MAAM,SAAO,CAACA,EAAqC,KAAA,CAAjC,MAAM,SAAA,EAAU,cAAY,CAAA,OACnDkB,EAAA,EAAA,IAAAA,EAAA,EAAA,EAAAlB,EAAqD,IAAA,CAAlD,MAAM,KAAA,EAAM,qCAAkC,EAAA,GACjDA,EAGM,MAHNwE,GAGM,CAFJxE,EAA8C,OAA9CyE,GAA8C/D,EAArB5D,EAAA,KAAW,EAAA,CAAA,EACpCkD,EAAyD,SAAA,CAAjD,KAAK,SAAU,QAAOR,CAAA,EAAc,MAAI,CAAA,gBA9OtDU,EAAyCwE,GAAA,OAAX,KAAM,CAAA"}

package/dist/assets/{StateBadge.vue_vue_type_script_setup_true_lang-jkd_ejVw.js → StateBadge.vue_vue_type_script_setup_true_lang-CfjzlWSc.js}

@@ -1,2 +1,2 @@
-import{d as s,c as t,E as n,a as o,f as r,t as c,u as l,M as p,o as d}from"./index-BzdU0RNE.js";const u=s({__name:"StateBadge",props:{state:{}},setup(e){return(m,a)=>(d(),t("span",{class:n(["badge",e.state])},[a[0]||(a[0]=o("span",{class:"dot"},null,-1)),r(" "+c(l(p)(e.state)),1)],2))}});export{u as _};
-//# sourceMappingURL=StateBadge.vue_vue_type_script_setup_true_lang-jkd_ejVw.js.map
+import{d as s,c as t,E as n,a as o,n as r,t as c,u as l,M as p,o as d}from"./index-D_Ks6aQi.js";const u=s({__name:"StateBadge",props:{state:{}},setup(e){return(m,a)=>(d(),t("span",{class:n(["badge",e.state])},[a[0]||(a[0]=o("span",{class:"dot"},null,-1)),r(" "+c(l(p)(e.state)),1)],2))}});export{u as _};
+//# sourceMappingURL=StateBadge.vue_vue_type_script_setup_true_lang-CfjzlWSc.js.map

package/dist/assets/{StateBadge.vue_vue_type_script_setup_true_lang-jkd_ejVw.js.map → StateBadge.vue_vue_type_script_setup_true_lang-CfjzlWSc.js.map}

@@ -1 +1 @@
-{"version":3,"file":"StateBadge.vue_vue_type_script_setup_true_lang-jkd_ejVw.js","sources":["../../src/components/StateBadge.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The job states, and only these. Kept in one component so the colour of `leaked` can never drift\n * from the colour of `failed` in one view and not another:\n *\n *   ok  green · failed  red · leaked  AMBER · running  blue, pulsing\n *   queued  grey · cancelled  grey · superseded  grey\n *\n * THE THREE GREYS ARE DELIBERATE, and they are grey because none of them is an alarm:\n *\n *   `cancelled` — someone meant to stop it. Not `ok` either: whatever the job had already done was\n *   left exactly as it was, which is why the job page puts a banner under this badge.\n *   `queued`    — it has not started. Waiting is the system working as designed (one job per stack,\n *   and a host-wide cap), so it must not borrow `running`'s blue, and it must not PULSE — the pulse\n *   is what says \"something is happening right now\", and nothing is.\n *   `superseded` — a newer job for the same stack replaced it while it waited. It never ran, so\n *   there is nothing out there from it; routine, and quieter than cancelled if anything.\n *\n * Only `running` pulses (`.badge.running .dot` in app.css). The three greys fall through to the\n * base `.badge` rule with no colour of their own — which is the correct severity, not an oversight,\n * so do not \"finish\" them with a hue.\n *\n * `leaked` must be unmistakably distinct from `failed`. They are different problems with different\n * owners — \"teardown errored\" versus \"teardown ran and something survived\" — which is why the CLI\n * gives leaked its own exit code, and why this app never renders them in the same colour.\n */\nimport type { JobState } from '../api/types';\nimport { sentence } from '../composables/useFormat';\n\ndefineProps<{ state: JobState }>();\n</script>\n\n<template>\n  <span class=\"badge\" :class=\"state\">\n    <span class=\"dot\" />\n    {{ sentence(state) }}\n  </span>\n</template>\n"],"names":["_createElementBlock","_normalizeClass","__props","_createElementVNode","_toDisplayString","_unref","sentence"],"mappings":"2KAiCEA,EAGO,OAAA,CAHD,MAAKC,EAAA,CAAC,QAAgBC,EAAA,KAAK,CAAA,CAAA,eAC/BC,EAAoB,OAAA,CAAd,MAAM,KAAA,EAAK,KAAA,EAAA,KAAG,IACpBC,EAAGC,EAAAC,CAAA,EAASJ,EAAA,KAAK,CAAA,EAAA,CAAA,CAAA"}
+{"version":3,"file":"StateBadge.vue_vue_type_script_setup_true_lang-CfjzlWSc.js","sources":["../../src/components/StateBadge.vue"],"sourcesContent":["<script setup lang=\"ts\">\n/**\n * The job states, and only these. Kept in one component so the colour of `leaked` can never drift\n * from the colour of `failed` in one view and not another:\n *\n *   ok  green · failed  red · leaked  AMBER · running  blue, pulsing\n *   queued  grey · cancelled  grey · superseded  grey\n *\n * THE THREE GREYS ARE DELIBERATE, and they are grey because none of them is an alarm:\n *\n *   `cancelled` — someone meant to stop it. Not `ok` either: whatever the job had already done was\n *   left exactly as it was, which is why the job page puts a banner under this badge.\n *   `queued`    — it has not started. Waiting is the system working as designed (one job per stack,\n *   and a host-wide cap), so it must not borrow `running`'s blue, and it must not PULSE — the pulse\n *   is what says \"something is happening right now\", and nothing is.\n *   `superseded` — a newer job for the same stack replaced it while it waited. It never ran, so\n *   there is nothing out there from it; routine, and quieter than cancelled if anything.\n *\n * Only `running` pulses (`.badge.running .dot` in app.css). The three greys fall through to the\n * base `.badge` rule with no colour of their own — which is the correct severity, not an oversight,\n * so do not \"finish\" them with a hue.\n *\n * `leaked` must be unmistakably distinct from `failed`. They are different problems with different\n * owners — \"teardown errored\" versus \"teardown ran and something survived\" — which is why the CLI\n * gives leaked its own exit code, and why this app never renders them in the same colour.\n */\nimport type { JobState } from '../api/types';\nimport { sentence } from '../composables/useFormat';\n\ndefineProps<{ state: JobState }>();\n</script>\n\n<template>\n  <span class=\"badge\" :class=\"state\">\n    <span class=\"dot\" />\n    {{ sentence(state) }}\n  </span>\n</template>\n"],"names":["_createElementBlock","_normalizeClass","__props","_createElementVNode","_toDisplayString","_unref","sentence"],"mappings":"2KAiCEA,EAGO,OAAA,CAHD,MAAKC,EAAA,CAAC,QAAgBC,EAAA,KAAK,CAAA,CAAA,eAC/BC,EAAoB,OAAA,CAAd,MAAM,KAAA,EAAK,KAAA,EAAA,KAAG,IACpBC,EAAGC,EAAAC,CAAA,EAASJ,EAAA,KAAK,CAAA,EAAA,CAAA,CAAA"}