@wular/coder 0.4.7 → 0.4.9

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/settings/[tab]/credentials-list.dbaa8f3d82445b90.js

@@ -0,0 +1,522 @@
+"use client";
+import "./credentials-list.98e0b34932a6ee4c.css.pnext-asset.js";
+import { useEffect, useRef, useState } from "../../../../../../../../../../node_modules/preact/hooks/dist/hooks.mjs";
+import { client, usePoll } from "../../../../../utils/client.d25e6dcc6704eb60.js";
+import { toastFailure, useAction } from "../../../../../utils/action.1a6356d5b722cafb.js";
+import { iCheck, iDots, iPlus } from "../../../../../comps/ui/icons.a34176f37808cd66.js";
+import { useRouter } from "../../../../../../../../../../node_modules/@wular/pnext/src/api/client-navigation.ts";
+import { Card, Loading } from "../../../../../comps/ui/card.c08471eaa0bc1cec.js";
+import { Modal } from "../../../../../comps/ui/modal.b5f74ebf59590fa6.js";
+import { reasonText } from "../../../../../utils/format.6a7d1beaf4d09d9c.js";
+import { Badge } from "../../../../../comps/ui/badge.0851f234f300c694.js";
+import { Button, IconButton } from "../../../../../comps/ui/button.983daea9e687fc5d.js";
+import { CopyButton } from "../../../../../comps/ui/copy.0b23d7dc05757df5.js";
+import { Icon } from "../../../../../comps/ui/icon.0874ca2f58f7db14.js";
+import { Menu } from "../../../../../comps/ui/menu.a41edd5cde1c90cf.js";
+import { MenuItem } from "../../../../../comps/ui/menu-items.a8e580a0c90631ff.js";
+import { Segmented } from "../../../../../comps/ui/segmented.a08dc08338d080e9.js";
+import { Select } from "../../../../../comps/ui/select.36c6f21ce6aa720f.js";
+import { Combo } from "../../../../../comps/ui/combo.efb84f0cca771948.js";
+import { useRemove } from "./list.df5ee5d74bec0f5b.js";
+import { useOrg } from "../../../../../comps/nav/org.4d84ad0ac340fbe2.js";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
+const ENGINES = [
+	{
+		id: "claude",
+		name: "Claude",
+		key: "ANTHROPIC_API_KEY",
+		hint: "Anthropic API key",
+		signIn: "Claude"
+	},
+	{
+		id: "codex",
+		name: "Codex",
+		key: "OPENAI_API_KEY",
+		hint: "OpenAI API key",
+		signIn: "ChatGPT"
+	},
+	{
+		id: "custom",
+		name: "Custom",
+		key: "OPENAI_API_KEY",
+		hint: "API key"
+	}
+];
+const CUSTOM_KEYS = [
+	"OPENAI_API_KEY",
+	"OPENROUTER_API_KEY",
+	"AI_GATEWAY_API_KEY",
+	"GROQ_API_KEY",
+	"TOGETHER_API_KEY",
+	"ANTHROPIC_API_KEY"
+];
+const SCOPES = [["personal", "Just me"], ["workspace", "Workspace"]];
+const METHODS = {
+	signin: "Sign in",
+	key: "API key",
+	token: "Setup token"
+};
+const ADMIN_ROLES = new Set(["owner", "admin"]);
+function Row({ row, busy, onAct, onSignIn, canManage }) {
+	const subscription = row.label.endsWith("-subscription");
+	const account = [row.account?.email, row.account?.plan].filter(Boolean).join(" · ");
+	const signIn = subscription && onSignIn;
+	const removing = useRemove(canManage ? {
+		label: subscription ? "Sign out" : "Remove",
+		title: subscription ? `Sign out of ${row.label}?` : `Remove ${row.label}?`,
+		body: "Tasks that use it stop running.",
+		onRemove: () => onAct("remove")
+	} : undefined);
+	return /* @__PURE__ */ _jsxs("tr", { children: [/* @__PURE__ */ _jsxs("td", { children: [/* @__PURE__ */ _jsxs("span", {
+		class: "row-title",
+		children: [
+			/* @__PURE__ */ _jsx("b", { children: row.label }),
+			/* @__PURE__ */ _jsx(Badge, { children: row.scope }),
+			row.isDefault ? /* @__PURE__ */ _jsx(Badge, {
+				tone: "acc",
+				children: "default"
+			}) : null
+		]
+	}), /* @__PURE__ */ _jsx("span", {
+		class: "sub mono",
+		children: account ? `${account} · ${row.masked}` : row.masked
+	})] }), /* @__PURE__ */ _jsxs("td", {
+		class: "acts",
+		children: [
+			row.isDefault || !canManage ? null : /* @__PURE__ */ _jsx(Button, {
+				variant: "ghost",
+				size: "sm",
+				loading: busy === "default",
+				onClick: () => void onAct("default"),
+				children: "Make default"
+			}),
+			signIn || removing.item ? /* @__PURE__ */ _jsxs(Menu, {
+				button: "icon",
+				label: "Actions",
+				summary: /* @__PURE__ */ _jsx(Icon, { d: iDots }),
+				children: [signIn ? /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(MenuItem, {
+					title: "Sign in again",
+					onClick: signIn
+				}), /* @__PURE__ */ _jsx(MenuItem, {
+					title: "Switch account",
+					onClick: signIn
+				})] }) : null, removing.item]
+			}) : null,
+			removing.dialog
+		]
+	})] });
+}
+/** One key field for an engine; Enter saves it. A custom key also names its variable. */
+function KeyField({ engine, token, admin, autoFocus, onSaved }) {
+	const [value, setValue] = useState("");
+	const input = useRef(null);
+	const [name, setName] = useState(engine.key);
+	const [scope, setScope] = useState("personal");
+	const action = useAction({ leaves: true });
+	const busy = Boolean(action.pending);
+	useEffect(() => {
+		if (autoFocus) input.current?.focus();
+	}, []);
+	const save = () => {
+		if (busy || !value.trim() || !name.trim()) return;
+		void action.run("save", async () => {
+			await client.credentials.add({
+				engine: engine.id,
+				env: { [token ? "CLAUDE_CODE_OAUTH_TOKEN" : name.trim()]: value.trim() },
+				...scope === "workspace" && !token ? { workspace: true } : {}
+			});
+			onSaved();
+		});
+	};
+	return /* @__PURE__ */ _jsxs("form", {
+		class: "cred-add",
+		method: "post",
+		onSubmit: (event) => {
+			event.preventDefault();
+			save();
+		},
+		children: [
+			engine.id === "custom" ? /* @__PURE__ */ _jsx(_Fragment, { children: /* @__PURE__ */ _jsx(Combo, {
+				label: "Environment variable",
+				name: "custom-var",
+				class: "mono cred-var",
+				options: CUSTOM_KEYS,
+				placeholder: "OPENAI_API_KEY",
+				value: name,
+				onChange: setName
+			}) }) : null,
+			/* @__PURE__ */ _jsx("input", {
+				type: "password",
+				autocomplete: "off",
+				name: `${engine.id}-${token ? "token" : "key"}`,
+				"aria-label": token ? "Your claude setup-token" : engine.hint,
+				placeholder: token ? "Paste a claude setup-token, then Enter" : `${engine.hint}, then Enter`,
+				ref: input,
+				"aria-busy": busy,
+				value,
+				onInput: (event) => setValue(event.currentTarget.value)
+			}),
+			admin ? /* @__PURE__ */ _jsx(Select, {
+				label: "Who can use this key",
+				options: SCOPES,
+				value: token ? "personal" : scope,
+				onChange: setScope,
+				disabled: token
+			}) : null,
+			/* @__PURE__ */ _jsx("button", { hidden: true })
+		]
+	});
+}
+/** A subscription sign-in, step by step in a dialog: the official login runs on a private machine and the engine's page approves it. */
+function SignIn({ login, engine, onChange, onDone, onError, onCancel }) {
+	const [openedUrl, setOpenedUrl] = useState();
+	// The link a code was pasted for; claude offers a new link when it rejects the code.
+	const [sentUrl, setSentUrl] = useState();
+	usePoll(login.id && login.state !== "done" && login.state !== "failed" ? (signal) => client.credentials.loginStatus(login.id).then((next) => {
+		// A status that lands after Cancel or close belongs to a sign-in already gone.
+		if (signal.aborted) return;
+		if (next.state === "done") return onDone();
+		if (next.state === "failed") return onError(next.error ?? "Sign-in failed. Try again.");
+		// Read before the pasted code landed.
+		if (login.state === "verifying" && next.state === "open" && next.url === sentUrl) return;
+		onChange(next);
+	}).catch((reason) => {
+		if (signal.aborted) return;
+		// A restarting server or a dropped connection only delays the next check.
+		const status = reason.status;
+		if (status === undefined || status >= 500) return console.error("coder dashboard: sign-in status", reason);
+		onError(reasonText(reason));
+	}) : undefined, 800, [login.id]);
+	const onCode = (code) => {
+		setSentUrl(login.url);
+		onChange({
+			...login,
+			state: "verifying"
+		});
+		void client.credentials.loginCode(login.id, code).catch((reason) => onError(reasonText(reason)));
+	};
+	const ready = Boolean(login.url);
+	const verifying = login.state === "verifying";
+	const opened = Boolean(login.url) && openedUrl === login.url;
+	const rejected = Boolean(sentUrl) && login.state === "open" && login.url !== sentUrl;
+	const open = `Open ${engine.signIn} sign-in`;
+	return /* @__PURE__ */ _jsxs(Modal, {
+		class: "sign-in",
+		title: `Sign in with ${engine.signIn}`,
+		cancelDanger: true,
+		focus: "actions",
+		onClose: onCancel,
+		actions: /* @__PURE__ */ _jsx(Button, {
+			href: login.url,
+			external: true,
+			variant: opened ? "outline" : "primary",
+			loading: !ready,
+			autoFocus: true,
+			onClick: () => setOpenedUrl(login.url),
+			children: opened ? "Open again" : open
+		}),
+		children: [/* @__PURE__ */ _jsx("p", {
+			class: "muted",
+			children: "Coder signs in on a private machine and keeps the sign-in for your tasks."
+		}), /* @__PURE__ */ _jsxs("ol", {
+			class: "steps-list sign-steps",
+			role: "status",
+			children: [/* @__PURE__ */ _jsx("li", { children: ready ? "The sign-in machine is ready." : /* @__PURE__ */ _jsx(Loading, {
+				label: "Starting the sign-in machine…",
+				inline: true
+			}) }), login.engine === "codex" ? /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsxs("li", { children: ["Open the sign-in page and enter this code.", login.code ? /* @__PURE__ */ _jsxs("span", {
+				class: "code-box",
+				children: [login.code, /* @__PURE__ */ _jsx(CopyButton, {
+					value: login.code,
+					label: "Copy code"
+				})]
+			}) : null] }), /* @__PURE__ */ _jsx("li", { children: ready ? /* @__PURE__ */ _jsx(Loading, {
+				label: "Waiting for your approval on the sign-in page…",
+				inline: true
+			}) : "Approve it there." })] }) : /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsxs("li", { children: [
+				"Open the ",
+				engine.signIn,
+				" sign-in and approve it."
+			] }), /* @__PURE__ */ _jsxs("li", { children: [
+				rejected ? /* @__PURE__ */ _jsx("span", {
+					class: "rejected",
+					role: "alert",
+					children: "That code did not work. Open the sign-in again and paste the new code."
+				}) : "Paste the code it shows.",
+				/* @__PURE__ */ _jsx("input", {
+					class: "mono",
+					autocomplete: "off",
+					"aria-label": `Code from the ${engine.signIn} sign-in page`,
+					placeholder: "Paste the code from the sign-in page",
+					disabled: login.state !== "open",
+					onPaste: (event) => {
+						const code = event.clipboardData?.getData("text").trim();
+						if (code) {
+							event.preventDefault();
+							event.currentTarget.value = code;
+							onCode(code);
+						}
+					},
+					onKeyDown: (event) => {
+						const code = event.currentTarget.value.trim();
+						if (event.key === "Enter" && code) onCode(code);
+					}
+				}, login.url),
+				verifying ? /* @__PURE__ */ _jsx(Loading, {
+					label: "Checking the code…",
+					inline: true
+				}) : null
+			] })] })]
+		})]
+	});
+}
+/** A server on this machine: tasks use its own claude and codex logins, so nothing is stored here. */
+export function EngineLogins({ status: initial }) {
+	const [status, setStatus] = useState(initial);
+	const action = useAction();
+	// A sign-in finishes in the browser the engine opened; the status says when.
+	const [watching, setWatching] = useState();
+	const busy = action.pending ?? (watching ? `${watching.engine}:login` : "");
+	usePoll(watching ? async (signal) => {
+		const next = await client.engines.status();
+		// A status read from a sign-in already stopped never stops the next one.
+		if (signal.aborted) return;
+		setStatus(next);
+		if (next[watching.engine]?.signedIn || Date.now() > watching.until) setWatching(undefined);
+	} : undefined, 2e3, [watching]);
+	const act = (engine, kind) => void action.run(`${engine}:${kind}`, async () => {
+		setStatus(await client.engines[kind](engine));
+		if (kind === "login") setWatching({
+			engine,
+			until: Date.now() + 5 * 6e4
+		});
+	});
+	return /* @__PURE__ */ _jsxs(_Fragment, { children: [ENGINES.filter((engine) => engine.id !== "custom").map((engine) => {
+		const own = status[engine.id];
+		const signingIn = busy === `${engine.id}:login`;
+		return /* @__PURE__ */ _jsx(Card, {
+			title: engine.name,
+			children: /* @__PURE__ */ _jsxs("div", {
+				class: "cred-new",
+				children: [
+					own?.signedIn ? /* @__PURE__ */ _jsxs("span", {
+						class: "signed grow",
+						children: [
+							/* @__PURE__ */ _jsx(Icon, { d: iCheck }),
+							"Signed in to ",
+							engine.name
+						]
+					}) : signingIn ? /* @__PURE__ */ _jsxs("span", {
+						class: "grow muted",
+						children: [
+							"Finish signing in in the window ",
+							engine.name,
+							" opened."
+						]
+					}) : /* @__PURE__ */ _jsx("span", {
+						class: "grow muted",
+						children: "Not signed in on this machine."
+					}),
+					own?.signedIn ? /* @__PURE__ */ _jsx(Button, {
+						variant: "secondary",
+						danger: true,
+						size: "sm",
+						loading: busy === `${engine.id}:logout`,
+						onClick: () => act(engine.id, "logout"),
+						children: "Sign out"
+					}) : /* @__PURE__ */ _jsx(Button, {
+						variant: "secondary",
+						size: "sm",
+						loading: signingIn,
+						disabled: Boolean(busy),
+						onClick: () => act(engine.id, "login"),
+						children: "Sign in"
+					}),
+					signingIn ? /* @__PURE__ */ _jsx(Button, {
+						variant: "ghost",
+						size: "sm",
+						onClick: () => setWatching(undefined),
+						children: "Cancel"
+					}) : null
+				]
+			})
+		}, engine.id);
+	}), /* @__PURE__ */ _jsx("p", {
+		class: "muted",
+		children: "On the local server, custom models read their key variable from this machine's environment."
+	})] });
+}
+export function CredentialsList({ rows, me, focus }) {
+	const nav = useRouter();
+	const org = useOrg();
+	const [adding, setAdding] = useState("");
+	const [logins, setLogins] = useState({});
+	const [chosen, setChosen] = useState({});
+	const token = !me.user;
+	const admin = token || ADMIN_ROLES.has(me.organization?.role ?? "");
+	const subscriptions = me.server?.subscriptions;
+	const action = useAction({
+		refresh: true,
+		leaves: true
+	});
+	// A row's action stays busy until the refreshed rows arrive.
+	const [acted, setActed] = useState(rows);
+	const pending = acted === rows ? action.pending ?? "" : "";
+	// The tab remembers its sign-ins in progress, so a reload picks them back up.
+	const saved = `coder-logins:${org}`;
+	const remembered = () => {
+		try {
+			return JSON.parse(sessionStorage.getItem(saved) ?? "{}");
+		} catch {
+			return {};
+		}
+	};
+	const setLogin = (engine, login) => {
+		setLogins((all) => ({
+			...all,
+			[engine]: login
+		}));
+		try {
+			const ids = {
+				...remembered(),
+				[engine]: login?.id || undefined
+			};
+			sessionStorage.setItem(saved, JSON.stringify(ids));
+		} catch {}
+	};
+	// A sign-in started on this page wins over a restore still in flight.
+	const started = useRef(new Set());
+	useEffect(() => {
+		for (const [engine, id] of Object.entries(remembered())) {
+			void client.credentials.loginStatus(id).then((next) => {
+				if (started.current.has(engine)) return;
+				if (next.state === "done") return done(engine);
+				if (next.state === "failed") {
+					setLogin(engine);
+					return toastFailure(next.error ?? "Sign-in failed. Try again.");
+				}
+				setLogin(engine, next);
+			}).catch(() => {
+				if (!started.current.has(engine)) setLogin(engine);
+			});
+		}
+	}, []);
+	const done = (engine) => {
+		if (engine) setLogin(engine);
+		setAdding("");
+		nav.refresh();
+	};
+	const signIn = (engine) => {
+		started.current.add(engine);
+		setLogin(engine, {
+			id: "",
+			engine,
+			state: "starting"
+		});
+		void client.credentials.login(engine).then((next) => setLogin(engine, next)).catch((reason) => {
+			setLogin(engine);
+			toastFailure(reason);
+		});
+	};
+	const act = (row, kind) => {
+		if (pending) return Promise.resolve();
+		setActed(rows);
+		return action.run(`${row.scope}/${row.label}/${kind}`, () => client.credentials[kind === "default" ? "setDefault" : "remove"](row.label, { workspace: row.scope === "workspace" }));
+	};
+	return /* @__PURE__ */ _jsx(_Fragment, { children: ENGINES.map((engine) => {
+		const own = rows.filter((row) => row.engine === engine.id);
+		const canSignIn = engine.id !== "custom" && !token && Boolean(subscriptions?.[engine.id]);
+		const methods = [
+			...canSignIn ? ["signin"] : [],
+			"key",
+			...engine.id === "claude" && !canSignIn ? ["token"] : []
+		];
+		const how = chosen[engine.id] ?? methods[0];
+		const open = !own.length || adding === engine.id;
+		const active = engine.id === "custom" ? undefined : logins[engine.id];
+		const ready = own.length > 0 && engine.id !== "custom";
+		const add = !active && own.length > 0 && adding !== engine.id;
+		return /* @__PURE__ */ _jsx(Card, {
+			title: engine.name,
+			count: own.length || undefined,
+			actions: ready || add ? /* @__PURE__ */ _jsxs(_Fragment, { children: [ready ? /* @__PURE__ */ _jsx(Badge, {
+				tone: "ok",
+				children: "ready"
+			}) : null, add ? /* @__PURE__ */ _jsx(IconButton, {
+				icon: iPlus,
+				label: `Add a ${engine.name} credential`,
+				onClick: () => setAdding(engine.id)
+			}) : null] }) : null,
+			children: /* @__PURE__ */ _jsxs("div", {
+				id: `engine-${engine.id}`,
+				class: "cred-engine",
+				children: [
+					engine.id === "custom" ? /* @__PURE__ */ _jsxs("p", {
+						class: "muted cred-note",
+						children: [
+							"Custom keys back ",
+							/* @__PURE__ */ _jsx("a", {
+								href: `/dash/${org}/settings/models`,
+								children: "custom models"
+							}),
+							". A model uses OPENAI_API_KEY unless it names another variable."
+						]
+					}) : null,
+					own.length ? /* @__PURE__ */ _jsx("table", {
+						class: "rows creds",
+						children: /* @__PURE__ */ _jsx("tbody", { children: own.map((row) => {
+							const key = `${row.scope}/${row.label}/`;
+							return /* @__PURE__ */ _jsx(Row, {
+								row,
+								busy: pending.startsWith(key) ? pending.slice(key.length) : "",
+								canManage: row.scope === "personal" || admin,
+								onAct: (kind) => act(row, kind),
+								...canSignIn && row.scope === "personal" ? { onSignIn: () => signIn(engine.id) } : {}
+							}, key);
+						}) })
+					}) : null,
+					open || active ? /* @__PURE__ */ _jsxs("div", {
+						class: "cred-new",
+						children: [methods.length > 1 ? /* @__PURE__ */ _jsx(Segmented, {
+							label: `How to add ${engine.name}`,
+							disabled: Boolean(active),
+							options: methods.map((method) => [method, METHODS[method]]),
+							value: how,
+							onChange: (method) => setChosen({
+								...chosen,
+								[engine.id]: method
+							})
+						}) : null, active || how === "signin" ? /* @__PURE__ */ _jsxs("div", {
+							class: "cred-login grow end",
+							children: [/* @__PURE__ */ _jsxs(Button, {
+								autoFocus: focus === engine.id,
+								disabled: Boolean(active),
+								onClick: () => signIn(engine.id),
+								children: ["Sign in with ", engine.signIn]
+							}), active ? /* @__PURE__ */ _jsx(SignIn, {
+								login: active,
+								engine,
+								onChange: (next) => setLogin(active.engine, next),
+								onDone: () => done(active.engine),
+								onError: (reason) => {
+									setLogin(active.engine);
+									toastFailure(reason);
+								},
+								onCancel: () => {
+									setLogin(active.engine);
+									if (active.id) void client.credentials.cancelLogin(active.id).catch(toastFailure);
+								}
+							}) : null]
+						}) : /* @__PURE__ */ _jsx(KeyField, {
+							engine,
+							token: how === "token",
+							admin,
+							autoFocus: focus === engine.id || Boolean(chosen[engine.id]),
+							onSaved: () => done()
+						}, how)]
+					}) : null
+				]
+			})
+		}, engine.id);
+	}) });
+}

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/settings/[tab]/credentials.c4b01484d183549d.js

@@ -0,0 +1,44 @@
+import { dynamic } from "../../../../../../../../../../node_modules/@wular/pnext/src/api/dynamic.tsx";
+import { load } from "../../../../../api/load.4f942c7f68b2e273.js";
+import { Settle } from "../../../../../comps/frame/stream.1cc355a530dcc5e3.js";
+import { localServer } from "../../../../../api/types.9f59e6c761d6aac4.js";
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
+// Hydrates as soon as the page does, so its sign-in buttons are live at once.
+const CredentialsList = dynamic(() => import("./credentials-list.dbaa8f3d82445b90.js").then((m) => m.CredentialsList), undefined, {
+	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/credentials-list.tsx", import.meta.url).pathname),
+	"exportName": "CredentialsList",
+	"id": "c-9e407065ce"
+});
+const EngineLogins = dynamic(() => import("./credentials-list.dbaa8f3d82445b90.js").then((m) => m.EngineLogins), undefined, {
+	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/credentials-list.tsx", import.meta.url).pathname),
+	"exportName": "EngineLogins",
+	"id": "c-52d89d4c42"
+});
+const TaskSecrets = dynamic(() => import("./secrets-list.b0dedc1567efc09f.js").then((m) => m.TaskSecrets), undefined, {
+	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/secrets-list.tsx", import.meta.url).pathname),
+	"exportName": "TaskSecrets",
+	"id": "c-e1c3846201"
+});
+const ADMIN_ROLES = new Set(["owner", "admin"]);
+/** The credentials settings tab. */
+export function Credentials({ request }) {
+	const params = new URL(request.url).searchParams;
+	const me = load(request).me();
+	const rows = load(request).credentials.list();
+	const secrets = load(request).connections.list().then((list) => list.filter((row) => row.provider === "env"));
+	return /* @__PURE__ */ _jsx(Settle, { load: async () => {
+		const [who, env] = await Promise.all([me, secrets]);
+		const local = localServer(who);
+		const list = /* @__PURE__ */ _jsx(TaskSecrets, {
+			first: env,
+			local,
+			admin: !who.user || ADMIN_ROLES.has(who.organization?.role ?? "")
+		});
+		if (local) return /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(EngineLogins, { status: await load(request).engines.status() }), list] });
+		return rows.then((credentials) => /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(CredentialsList, {
+			rows: credentials,
+			me: who,
+			focus: params.get("engine") ?? ""
+		}), list] }));
+	} });
+}

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/{settings/[tab]/engines-list.6c02a7e6d3c965cc.js → [org]/settings/[tab]/engines-list.5c03e83663a6a9b7.js}

@@ -1,12 +1,13 @@
 "use client";
-import "./engines-list.c04c712adfc0ca48.css.pnext-asset.js";
-import { useState } from "../../../../../../../../../node_modules/preact/hooks/dist/hooks.mjs";
-import { Badge } from "../../../../comps/ui/badge.5abdef72e9189fdc.js";
-import { MenuItem } from "../../../../comps/ui/menu.a4dd9fb9f566689a.js";
-import { Select } from "../../../../comps/ui/select.f036fdc3fce02b92.js";
-import { ENGINES, ENGINE_NAMES, defaultLabel } from "../model-options.bccfaced52fc0c00.js";
-import { useConfig, List, Row, EFFORTS, PERMISSIONS, AddRow } from "./list.db2e212e3c8b5d32.js";
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
+import "./engines-list.9927d602ebe9e7fc.css.pnext-asset.js";
+import { useState } from "../../../../../../../../../../node_modules/preact/hooks/dist/hooks.mjs";
+import { Badge } from "../../../../../comps/ui/badge.0851f234f300c694.js";
+import { Button } from "../../../../../comps/ui/button.983daea9e687fc5d.js";
+import { MenuItem } from "../../../../../comps/ui/menu-items.a8e580a0c90631ff.js";
+import { Select } from "../../../../../comps/ui/select.36c6f21ce6aa720f.js";
+import { ENGINES, ENGINE_NAMES, defaultLabel } from "../model-options.2eacf7f8ac0032df.js";
+import { useConfig, List, Row, EFFORTS, PERMISSIONS, AddRow } from "./list.df5ee5d74bec0f5b.js";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
 /** Each engine's defaults, the order tasks try them, and the hosts tasks may reach. */
 export function EnginesList({ first, defaults }) {
 	const [making, setMaking] = useState("");
@@ -25,7 +26,6 @@ export function EnginesList({ first, defaults }) {
 	return /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(List, {
 		title: "Engines",
 		count: chain.length,
-		error: config.error,
 		children: rows.map((name) => /* @__PURE__ */ _jsx(Row, {
 			title: ENGINE_NAMES[name],
 			badges: /* @__PURE__ */ _jsxs(_Fragment, { children: [chain[0] === name ? /* @__PURE__ */ _jsx(Badge, {
@@ -36,11 +36,10 @@ export function EnginesList({ first, defaults }) {
 				class: "inline-picks",
 				children: [pick(name, "effort", EFFORTS), pick(name, "permissions", PERMISSIONS)]
 			}),
-			actions: chain[0] === name ? null : /* @__PURE__ */ _jsx("button", {
-				type: "button",
-				class: "btn secondary sm",
-				disabled: making === name,
-				"aria-busy": making === name,
+			actions: chain[0] === name ? null : /* @__PURE__ */ _jsx(Button, {
+				variant: "secondary",
+				size: "sm",
+				loading: making === name,
 				onClick: () => {
 					setMaking(name);
 					void config.patch({ chain: [name, ...chain.filter((each) => each !== name)] }).finally(() => setMaking(""));
@@ -58,7 +57,6 @@ export function EnginesList({ first, defaults }) {
 	}), /* @__PURE__ */ _jsx(List, {
 		title: "Allowed network hosts",
 		count: hosts.length,
-		error: "",
 		add: /* @__PURE__ */ _jsx(AddRow, {
 			fields: [["host", "Host, like registry.npmjs.org"]],
 			onAdd: ({ host }) => config.patch({ approvals: { allowedNetworkHosts: [...new Set([...hosts, host])] } })