@wular/coder 0.4.9 → 0.4.11

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/settings/[tab]/{credentials-list.dbaa8f3d82445b90.js → credentials-list.683476f62a9ecde7.js}

@@ -1,169 +1,100 @@
 "use client";
-import "./credentials-list.98e0b34932a6ee4c.css.pnext-asset.js";
+import "./credentials-list.f7c27f170ec1e868.css.pnext-asset.js";
 import { useEffect, useRef, useState } from "../../../../../../../../../../node_modules/preact/hooks/dist/hooks.mjs";
-import { client, usePoll } from "../../../../../utils/client.d25e6dcc6704eb60.js";
-import { toastFailure, useAction } from "../../../../../utils/action.1a6356d5b722cafb.js";
-import { iCheck, iDots, iPlus } from "../../../../../comps/ui/icons.a34176f37808cd66.js";
+import { client, usePoll } from "../../../../../utils/client.a3928fa2dcd27b75.js";
+import { toastFailure, useAction } from "../../../../../utils/action.b9a5c37272250e82.js";
+import { iCheck } from "../../../../../comps/ui/icons.e36c72f54750663a.js";
 import { useRouter } from "../../../../../../../../../../node_modules/@wular/pnext/src/api/client-navigation.ts";
-import { Card, Loading } from "../../../../../comps/ui/card.c08471eaa0bc1cec.js";
-import { Modal } from "../../../../../comps/ui/modal.b5f74ebf59590fa6.js";
-import { reasonText } from "../../../../../utils/format.6a7d1beaf4d09d9c.js";
-import { Badge } from "../../../../../comps/ui/badge.0851f234f300c694.js";
-import { Button, IconButton } from "../../../../../comps/ui/button.983daea9e687fc5d.js";
-import { CopyButton } from "../../../../../comps/ui/copy.0b23d7dc05757df5.js";
+import { Card, Loading } from "../../../../../comps/ui/card.9f0d45b73bc78b4f.js";
+import { Modal } from "../../../../../comps/ui/modal.25d53e5b41b9c4e5.js";
+import { reasonText } from "../../../../../utils/format.ceeaafa10a0563f3.js";
+import { Badge } from "../../../../../comps/ui/badge.c0bc352791a95fd6.js";
+import { Button } from "../../../../../comps/ui/button.ce9e6cdb08ca86db.js";
+import { CopyButton } from "../../../../../comps/ui/copy.bd6fc1577a393965.js";
 import { Icon } from "../../../../../comps/ui/icon.0874ca2f58f7db14.js";
-import { Menu } from "../../../../../comps/ui/menu.a41edd5cde1c90cf.js";
-import { MenuItem } from "../../../../../comps/ui/menu-items.a8e580a0c90631ff.js";
-import { Segmented } from "../../../../../comps/ui/segmented.a08dc08338d080e9.js";
-import { Select } from "../../../../../comps/ui/select.36c6f21ce6aa720f.js";
-import { Combo } from "../../../../../comps/ui/combo.efb84f0cca771948.js";
-import { useRemove } from "./list.df5ee5d74bec0f5b.js";
-import { useOrg } from "../../../../../comps/nav/org.4d84ad0ac340fbe2.js";
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
-const ENGINES = [
-	{
-		id: "claude",
-		name: "Claude",
-		key: "ANTHROPIC_API_KEY",
-		hint: "Anthropic API key",
-		signIn: "Claude"
-	},
-	{
-		id: "codex",
-		name: "Codex",
-		key: "OPENAI_API_KEY",
-		hint: "OpenAI API key",
-		signIn: "ChatGPT"
-	},
-	{
-		id: "custom",
-		name: "Custom",
-		key: "OPENAI_API_KEY",
-		hint: "API key"
-	}
-];
-const CUSTOM_KEYS = [
-	"OPENAI_API_KEY",
-	"OPENROUTER_API_KEY",
-	"AI_GATEWAY_API_KEY",
-	"GROQ_API_KEY",
-	"TOGETHER_API_KEY",
-	"ANTHROPIC_API_KEY"
-];
-const SCOPES = [["personal", "Just me"], ["workspace", "Workspace"]];
-const METHODS = {
-	signin: "Sign in",
-	key: "API key",
-	token: "Setup token"
-};
-const ADMIN_ROLES = new Set(["owner", "admin"]);
-function Row({ row, busy, onAct, onSignIn, canManage }) {
-	const subscription = row.label.endsWith("-subscription");
-	const account = [row.account?.email, row.account?.plan].filter(Boolean).join(" · ");
-	const signIn = subscription && onSignIn;
-	const removing = useRemove(canManage ? {
-		label: subscription ? "Sign out" : "Remove",
-		title: subscription ? `Sign out of ${row.label}?` : `Remove ${row.label}?`,
-		body: "Tasks that use it stop running.",
-		onRemove: () => onAct("remove")
-	} : undefined);
-	return /* @__PURE__ */ _jsxs("tr", { children: [/* @__PURE__ */ _jsxs("td", { children: [/* @__PURE__ */ _jsxs("span", {
-		class: "row-title",
-		children: [
-			/* @__PURE__ */ _jsx("b", { children: row.label }),
-			/* @__PURE__ */ _jsx(Badge, { children: row.scope }),
-			row.isDefault ? /* @__PURE__ */ _jsx(Badge, {
-				tone: "acc",
-				children: "default"
-			}) : null
-		]
-	}), /* @__PURE__ */ _jsx("span", {
-		class: "sub mono",
-		children: account ? `${account} · ${row.masked}` : row.masked
-	})] }), /* @__PURE__ */ _jsxs("td", {
-		class: "acts",
-		children: [
-			row.isDefault || !canManage ? null : /* @__PURE__ */ _jsx(Button, {
-				variant: "ghost",
-				size: "sm",
-				loading: busy === "default",
-				onClick: () => void onAct("default"),
-				children: "Make default"
-			}),
-			signIn || removing.item ? /* @__PURE__ */ _jsxs(Menu, {
-				button: "icon",
-				label: "Actions",
-				summary: /* @__PURE__ */ _jsx(Icon, { d: iDots }),
-				children: [signIn ? /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(MenuItem, {
-					title: "Sign in again",
-					onClick: signIn
-				}), /* @__PURE__ */ _jsx(MenuItem, {
-					title: "Switch account",
-					onClick: signIn
-				})] }) : null, removing.item]
-			}) : null,
-			removing.dialog
-		]
-	})] });
-}
-/** One key field for an engine; Enter saves it. A custom key also names its variable. */
-function KeyField({ engine, token, admin, autoFocus, onSaved }) {
-	const [value, setValue] = useState("");
+import { MenuItem } from "../../../../../comps/ui/menu-items.1d082ac4dae8f3d4.js";
+import { Select } from "../../../../../comps/ui/select.2eb33e5bea28d804.js";
+import { Combo } from "../../../../../comps/ui/combo.54270c0251466fda.js";
+import { Row, replaceTitle, useReplace } from "./list.083f5c665df04b1b.js";
+import { useOrg } from "../../../../../comps/nav/org.572ad93c7707ab27.js";
+import { isAdmin } from "../../../../../api/types.79f9092cdb5a00d1.js";
+import { CUSTOM_PROVIDERS, SCOPES } from "../model-options.a96c11d11674f598.js";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
+const ENGINES = [{
+	id: "claude",
+	name: "Claude",
+	key: "ANTHROPIC_API_KEY",
+	signIn: "Claude"
+}, {
+	id: "codex",
+	name: "Codex",
+	key: "OPENAI_API_KEY",
+	signIn: "ChatGPT"
+}];
+const KEYS = [...ENGINES.map((engine) => engine.key), ...CUSTOM_PROVIDERS.flatMap((provider) => provider.envKey || [])];
+/** One API key by its variable; a variable already saved in that scope asks before it is replaced. */
+function KeyForm({ keys, admin, focus, ask }) {
+	const [name, setName] = useState(ENGINES.find((engine) => engine.id === focus)?.key ?? "OPENAI_API_KEY");
+	const [scope, setScope] = useState(admin ? "workspace" : "personal");
 	const input = useRef(null);
-	const [name, setName] = useState(engine.key);
-	const [scope, setScope] = useState("personal");
-	const action = useAction({ leaves: true });
-	const busy = Boolean(action.pending);
+	const action = useAction({
+		toast: "Not saved",
+		refresh: true
+	});
 	useEffect(() => {
-		if (autoFocus) input.current?.focus();
+		if (focus) input.current?.focus();
 	}, []);
-	const save = () => {
-		if (busy || !value.trim() || !name.trim()) return;
-		void action.run("save", async () => {
-			await client.credentials.add({
-				engine: engine.id,
-				env: { [token ? "CLAUDE_CODE_OAUTH_TOKEN" : name.trim()]: value.trim() },
-				...scope === "workspace" && !token ? { workspace: true } : {}
-			});
-			onSaved();
-		});
-	};
 	return /* @__PURE__ */ _jsxs("form", {
 		class: "cred-add",
 		method: "post",
 		onSubmit: (event) => {
 			event.preventDefault();
-			save();
+			const form = event.currentTarget;
+			const variable = name.trim();
+			const value = String(new FormData(form).get("key") ?? "").trim();
+			if (!variable || !value) return;
+			const save = () => void action.run("add", async () => {
+				await client.credentials.add({
+					env: { [variable]: value },
+					...scope === "workspace" ? { workspace: true } : {}
+				});
+				form.reset();
+				setName("OPENAI_API_KEY");
+			});
+			if (keys.some((row) => row.name === variable && row.scope === scope)) ask(replaceTitle(variable, scope), save);
+			else save();
 		},
 		children: [
-			engine.id === "custom" ? /* @__PURE__ */ _jsx(_Fragment, { children: /* @__PURE__ */ _jsx(Combo, {
-				label: "Environment variable",
-				name: "custom-var",
+			/* @__PURE__ */ _jsx(Combo, {
+				label: "Variable",
+				name: "name",
 				class: "mono cred-var",
-				options: CUSTOM_KEYS,
+				options: KEYS,
 				placeholder: "OPENAI_API_KEY",
 				value: name,
 				onChange: setName
-			}) }) : null,
+			}),
 			/* @__PURE__ */ _jsx("input", {
 				type: "password",
+				name: "key",
 				autocomplete: "off",
-				name: `${engine.id}-${token ? "token" : "key"}`,
-				"aria-label": token ? "Your claude setup-token" : engine.hint,
-				placeholder: token ? "Paste a claude setup-token, then Enter" : `${engine.hint}, then Enter`,
+				"aria-label": "API key",
+				placeholder: "API key",
 				ref: input,
-				"aria-busy": busy,
-				value,
-				onInput: (event) => setValue(event.currentTarget.value)
+				"aria-busy": Boolean(action.pending),
+				required: true
 			}),
 			admin ? /* @__PURE__ */ _jsx(Select, {
 				label: "Who can use this key",
 				options: SCOPES,
-				value: token ? "personal" : scope,
-				onChange: setScope,
-				disabled: token
+				value: scope,
+				onChange: setScope
 			}) : null,
-			/* @__PURE__ */ _jsx("button", { hidden: true })
+			/* @__PURE__ */ _jsx(Button, {
+				type: "submit",
+				loading: Boolean(action.pending),
+				children: "Add"
+			})
 		]
 	});
 }
@@ -291,7 +222,7 @@ export function EngineLogins({ status: initial }) {
 			until: Date.now() + 5 * 6e4
 		});
 	});
-	return /* @__PURE__ */ _jsxs(_Fragment, { children: [ENGINES.filter((engine) => engine.id !== "custom").map((engine) => {
+	return /* @__PURE__ */ _jsxs(_Fragment, { children: [ENGINES.map((engine) => {
 		const own = status[engine.id];
 		const signingIn = busy === `${engine.id}:login`;
 		return /* @__PURE__ */ _jsx(Card, {
@@ -349,19 +280,13 @@ export function EngineLogins({ status: initial }) {
 export function CredentialsList({ rows, me, focus }) {
 	const nav = useRouter();
 	const org = useOrg();
-	const [adding, setAdding] = useState("");
 	const [logins, setLogins] = useState({});
-	const [chosen, setChosen] = useState({});
-	const token = !me.user;
-	const admin = token || ADMIN_ROLES.has(me.organization?.role ?? "");
-	const subscriptions = me.server?.subscriptions;
-	const action = useAction({
-		refresh: true,
-		leaves: true
-	});
-	// A row's action stays busy until the refreshed rows arrive.
-	const [acted, setActed] = useState(rows);
-	const pending = acted === rows ? action.pending ?? "" : "";
+	const [pasting, setPasting] = useState(false);
+	const admin = isAdmin(me);
+	const signIns = ENGINES.filter((engine) => me.user && me.server?.subscriptions?.[engine.id]);
+	const keys = rows.filter((row) => !row.subscription);
+	const action = useAction({ refresh: true });
+	const replace = useReplace();
 	// The tab remembers its sign-ins in progress, so a reload picks them back up.
 	const saved = `coder-logins:${org}`;
 	const remembered = () => {
@@ -402,8 +327,7 @@ export function CredentialsList({ rows, me, focus }) {
 		}
 	}, []);
 	const done = (engine) => {
-		if (engine) setLogin(engine);
-		setAdding("");
+		setLogin(engine);
 		nav.refresh();
 	};
 	const signIn = (engine) => {
@@ -418,105 +342,145 @@ export function CredentialsList({ rows, me, focus }) {
 			toastFailure(reason);
 		});
 	};
-	const act = (row, kind) => {
-		if (pending) return Promise.resolve();
-		setActed(rows);
-		return action.run(`${row.scope}/${row.label}/${kind}`, () => client.credentials[kind === "default" ? "setDefault" : "remove"](row.label, { workspace: row.scope === "workspace" }));
-	};
-	return /* @__PURE__ */ _jsx(_Fragment, { children: ENGINES.map((engine) => {
-		const own = rows.filter((row) => row.engine === engine.id);
-		const canSignIn = engine.id !== "custom" && !token && Boolean(subscriptions?.[engine.id]);
-		const methods = [
-			...canSignIn ? ["signin"] : [],
-			"key",
-			...engine.id === "claude" && !canSignIn ? ["token"] : []
-		];
-		const how = chosen[engine.id] ?? methods[0];
-		const open = !own.length || adding === engine.id;
-		const active = engine.id === "custom" ? undefined : logins[engine.id];
-		const ready = own.length > 0 && engine.id !== "custom";
-		const add = !active && own.length > 0 && adding !== engine.id;
-		return /* @__PURE__ */ _jsx(Card, {
-			title: engine.name,
-			count: own.length || undefined,
-			actions: ready || add ? /* @__PURE__ */ _jsxs(_Fragment, { children: [ready ? /* @__PURE__ */ _jsx(Badge, {
-				tone: "ok",
-				children: "ready"
-			}) : null, add ? /* @__PURE__ */ _jsx(IconButton, {
-				icon: iPlus,
-				label: `Add a ${engine.name} credential`,
-				onClick: () => setAdding(engine.id)
-			}) : null] }) : null,
+	const subscription = (engine) => rows.find((row) => row.subscription && row.name === engine);
+	// One subscription per engine: a new one asks before it replaces the saved one.
+	const replacing = (engine, run) => subscription(engine.id) ? replace.ask(`Replace your ${engine.name} subscription?`, run) : run();
+	const remove = (row) => action.run(`remove:${row.scope}/${row.name}`, () => client.credentials.remove(row.name, { workspace: row.scope === "workspace" }));
+	return /* @__PURE__ */ _jsxs(_Fragment, { children: [
+		signIns.length ? /* @__PURE__ */ _jsx(Card, {
+			title: "Subscriptions",
 			children: /* @__PURE__ */ _jsxs("div", {
-				id: `engine-${engine.id}`,
 				class: "cred-engine",
 				children: [
-					engine.id === "custom" ? /* @__PURE__ */ _jsxs("p", {
+					/* @__PURE__ */ _jsx("p", {
+						class: "muted cred-note",
+						children: "Personal only: a subscription runs your own tasks and your 1:1 DMs with agents, never the workspace's shared threads."
+					}),
+					/* @__PURE__ */ _jsx("table", {
+						class: "rows creds",
+						children: /* @__PURE__ */ _jsx("tbody", { children: signIns.map((engine) => {
+							const row = subscription(engine.id);
+							const active = logins[engine.id];
+							const account = [
+								row?.account?.email,
+								row?.account?.plan,
+								row?.masked
+							];
+							return /* @__PURE__ */ _jsx(Row, {
+								title: engine.name,
+								sub: row ? account.filter(Boolean).join(" · ") : undefined,
+								actions: /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(Button, {
+									...row ? {
+										variant: "ghost",
+										size: "sm"
+									} : {},
+									autoFocus: focus === engine.id && !row,
+									disabled: Boolean(active),
+									onClick: () => replacing(engine, () => signIn(engine.id)),
+									children: row ? "Sign in again" : `Sign in with ${engine.signIn}`
+								}), active ? /* @__PURE__ */ _jsx(SignIn, {
+									login: active,
+									engine,
+									onChange: (next) => setLogin(active.engine, next),
+									onDone: () => done(active.engine),
+									onError: (reason) => {
+										setLogin(active.engine);
+										toastFailure(reason);
+									},
+									onCancel: () => {
+										setLogin(active.engine);
+										if (active.id) void client.credentials.cancelLogin(active.id).catch(toastFailure);
+									}
+								}) : null] }),
+								alignMenu: true,
+								menu: engine.id === "claude" ? /* @__PURE__ */ _jsx(MenuItem, {
+									title: "Paste a setup token",
+									onClick: () => setPasting(true)
+								}) : undefined,
+								remove: row ? {
+									label: "Sign out",
+									title: `Sign out of ${engine.name}?`,
+									body: "Tasks that use it stop running.",
+									onRemove: () => remove(row)
+								} : undefined
+							}, engine.id);
+						}) })
+					}),
+					pasting ? /* @__PURE__ */ _jsx("div", {
+						class: "cred-new",
+						children: /* @__PURE__ */ _jsxs("form", {
+							class: "cred-add",
+							method: "post",
+							onSubmit: (event) => {
+								event.preventDefault();
+								const token = String(new FormData(event.currentTarget).get("token") ?? "");
+								if (!token.trim()) return;
+								replacing(ENGINES[0], () => void action.run("token", async () => {
+									await client.credentials.add({ env: { CLAUDE_CODE_OAUTH_TOKEN: token.trim() } });
+									setPasting(false);
+								}));
+							},
+							children: [/* @__PURE__ */ _jsx("input", {
+								type: "password",
+								name: "token",
+								autocomplete: "off",
+								"aria-label": "Your claude setup-token",
+								placeholder: "Paste a claude setup-token",
+								ref: (input) => input?.focus(),
+								required: true
+							}), /* @__PURE__ */ _jsx(Button, {
+								type: "submit",
+								loading: action.pending === "token",
+								children: "Add"
+							})]
+						})
+					}) : null
+				]
+			})
+		}) : null,
+		/* @__PURE__ */ _jsx(Card, {
+			title: "API keys",
+			count: keys.length || undefined,
+			children: /* @__PURE__ */ _jsxs("div", {
+				class: "cred-engine",
+				children: [
+					/* @__PURE__ */ _jsxs("p", {
 						class: "muted cred-note",
 						children: [
-							"Custom keys back ",
+							"Tasks read each key as its variable. Claude uses ANTHROPIC_API_KEY, Codex uses OPENAI_API_KEY, and a ",
 							/* @__PURE__ */ _jsx("a", {
+								class: "link",
 								href: `/dash/${org}/settings/models`,
-								children: "custom models"
+								children: "custom model"
 							}),
-							". A model uses OPENAI_API_KEY unless it names another variable."
+							" uses the one it names."
 						]
-					}) : null,
-					own.length ? /* @__PURE__ */ _jsx("table", {
+					}),
+					keys.length ? /* @__PURE__ */ _jsx("table", {
 						class: "rows creds",
-						children: /* @__PURE__ */ _jsx("tbody", { children: own.map((row) => {
-							const key = `${row.scope}/${row.label}/`;
-							return /* @__PURE__ */ _jsx(Row, {
-								row,
-								busy: pending.startsWith(key) ? pending.slice(key.length) : "",
-								canManage: row.scope === "personal" || admin,
-								onAct: (kind) => act(row, kind),
-								...canSignIn && row.scope === "personal" ? { onSignIn: () => signIn(engine.id) } : {}
-							}, key);
-						}) })
+						children: /* @__PURE__ */ _jsx("tbody", { children: keys.map((row) => /* @__PURE__ */ _jsx(Row, {
+							title: row.name,
+							badges: /* @__PURE__ */ _jsx(Badge, { children: row.scope }),
+							sub: row.masked,
+							remove: row.scope === "personal" || admin ? {
+								title: `Remove ${row.name}?`,
+								body: "Tasks that use it stop running.",
+								onRemove: () => remove(row)
+							} : undefined
+						}, `${row.scope}/${row.name}`)) })
 					}) : null,
-					open || active ? /* @__PURE__ */ _jsxs("div", {
+					/* @__PURE__ */ _jsx("div", {
 						class: "cred-new",
-						children: [methods.length > 1 ? /* @__PURE__ */ _jsx(Segmented, {
-							label: `How to add ${engine.name}`,
-							disabled: Boolean(active),
-							options: methods.map((method) => [method, METHODS[method]]),
-							value: how,
-							onChange: (method) => setChosen({
-								...chosen,
-								[engine.id]: method
-							})
-						}) : null, active || how === "signin" ? /* @__PURE__ */ _jsxs("div", {
-							class: "cred-login grow end",
-							children: [/* @__PURE__ */ _jsxs(Button, {
-								autoFocus: focus === engine.id,
-								disabled: Boolean(active),
-								onClick: () => signIn(engine.id),
-								children: ["Sign in with ", engine.signIn]
-							}), active ? /* @__PURE__ */ _jsx(SignIn, {
-								login: active,
-								engine,
-								onChange: (next) => setLogin(active.engine, next),
-								onDone: () => done(active.engine),
-								onError: (reason) => {
-									setLogin(active.engine);
-									toastFailure(reason);
-								},
-								onCancel: () => {
-									setLogin(active.engine);
-									if (active.id) void client.credentials.cancelLogin(active.id).catch(toastFailure);
-								}
-							}) : null]
-						}) : /* @__PURE__ */ _jsx(KeyField, {
-							engine,
-							token: how === "token",
+						children: /* @__PURE__ */ _jsx(KeyForm, {
+							keys,
 							admin,
-							autoFocus: focus === engine.id || Boolean(chosen[engine.id]),
-							onSaved: () => done()
-						}, how)]
-					}) : null
+							focus: signIns.some((engine) => engine.id === focus) ? "" : focus,
+							ask: replace.ask
+						})
+					})
 				]
 			})
-		}, engine.id);
-	}) });
+		}),
+		replace.dialog
+	] });
 }

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/settings/[tab]/{credentials.c4b01484d183549d.js → credentials.b43dd3d97c536c2a.js}

@@ -1,25 +1,24 @@
 import { dynamic } from "../../../../../../../../../../node_modules/@wular/pnext/src/api/dynamic.tsx";
-import { load } from "../../../../../api/load.4f942c7f68b2e273.js";
-import { Settle } from "../../../../../comps/frame/stream.1cc355a530dcc5e3.js";
-import { localServer } from "../../../../../api/types.9f59e6c761d6aac4.js";
+import { load } from "../../../../../api/load.be791a5eaf328738.js";
+import { Settle } from "../../../../../comps/frame/stream.e2915852cf82c86b.js";
+import { isAdmin, localServer } from "../../../../../api/types.79f9092cdb5a00d1.js";
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
 // Hydrates as soon as the page does, so its sign-in buttons are live at once.
-const CredentialsList = dynamic(() => import("./credentials-list.dbaa8f3d82445b90.js").then((m) => m.CredentialsList), undefined, {
+const CredentialsList = dynamic(() => import("./credentials-list.683476f62a9ecde7.js").then((m) => m.CredentialsList), undefined, {
 	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/credentials-list.tsx", import.meta.url).pathname),
 	"exportName": "CredentialsList",
-	"id": "c-9e407065ce"
+	"id": "c-d22db79b78"
 });
-const EngineLogins = dynamic(() => import("./credentials-list.dbaa8f3d82445b90.js").then((m) => m.EngineLogins), undefined, {
+const EngineLogins = dynamic(() => import("./credentials-list.683476f62a9ecde7.js").then((m) => m.EngineLogins), undefined, {
 	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/credentials-list.tsx", import.meta.url).pathname),
 	"exportName": "EngineLogins",
-	"id": "c-52d89d4c42"
+	"id": "c-34706dc412"
 });
-const TaskSecrets = dynamic(() => import("./secrets-list.b0dedc1567efc09f.js").then((m) => m.TaskSecrets), undefined, {
+const TaskSecrets = dynamic(() => import("./secrets-list.0d175ee815b22cd7.js").then((m) => m.TaskSecrets), undefined, {
 	"file": decodeURIComponent(new URL("../../../../../../../../../../../../../src/server/dash/app/dash/[org]/settings/[tab]/secrets-list.tsx", import.meta.url).pathname),
 	"exportName": "TaskSecrets",
-	"id": "c-e1c3846201"
+	"id": "c-2a1887a0ac"
 });
-const ADMIN_ROLES = new Set(["owner", "admin"]);
 /** The credentials settings tab. */
 export function Credentials({ request }) {
 	const params = new URL(request.url).searchParams;
@@ -32,7 +31,7 @@ export function Credentials({ request }) {
 		const list = /* @__PURE__ */ _jsx(TaskSecrets, {
 			first: env,
 			local,
-			admin: !who.user || ADMIN_ROLES.has(who.organization?.role ?? "")
+			admin: isAdmin(who)
 		});
 		if (local) return /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(EngineLogins, { status: await load(request).engines.status() }), list] });
 		return rows.then((credentials) => /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(CredentialsList, {

package/dist/dash/standalone/server/modules-server-server-react-server/src/server/dash/app/dash/[org]/settings/[tab]/{engines-list.5c03e83663a6a9b7.js → engines-list.9e116751bd34e2cc.js}

@@ -1,12 +1,12 @@
 "use client";
 import "./engines-list.9927d602ebe9e7fc.css.pnext-asset.js";
 import { useState } from "../../../../../../../../../../node_modules/preact/hooks/dist/hooks.mjs";
-import { Badge } from "../../../../../comps/ui/badge.0851f234f300c694.js";
-import { Button } from "../../../../../comps/ui/button.983daea9e687fc5d.js";
-import { MenuItem } from "../../../../../comps/ui/menu-items.a8e580a0c90631ff.js";
-import { Select } from "../../../../../comps/ui/select.36c6f21ce6aa720f.js";
-import { ENGINES, ENGINE_NAMES, defaultLabel } from "../model-options.2eacf7f8ac0032df.js";
-import { useConfig, List, Row, EFFORTS, PERMISSIONS, AddRow } from "./list.df5ee5d74bec0f5b.js";
+import { Badge } from "../../../../../comps/ui/badge.c0bc352791a95fd6.js";
+import { Button } from "../../../../../comps/ui/button.ce9e6cdb08ca86db.js";
+import { MenuItem } from "../../../../../comps/ui/menu-items.1d082ac4dae8f3d4.js";
+import { Select } from "../../../../../comps/ui/select.2eb33e5bea28d804.js";
+import { EFFORTS, ENGINES, ENGINE_NAMES, PERMISSIONS, defaultLabel } from "../model-options.a96c11d11674f598.js";
+import { useConfig, List, Row, AddRow } from "./list.083f5c665df04b1b.js";
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "../../../../../../../../../../node_modules/preact/jsx-runtime/dist/jsxRuntime.mjs";
 /** Each engine's defaults, the order tasks try them, and the hosts tasks may reach. */
 export function EnginesList({ first, defaults }) {
@@ -20,7 +20,7 @@ export function EnginesList({ first, defaults }) {
 	const pick = (name, key, options) => /* @__PURE__ */ _jsxs("label", { children: [key, /* @__PURE__ */ _jsx(Select, {
 		label: `${ENGINE_NAMES[name]} ${key}`,
 		value: config.value.engines?.[name]?.[key] ?? "",
-		options: [["", defaultLabel(resolved(name, key) ?? (key === "permissions" ? "auto" : undefined))], ...options.map((option) => [option, option])],
+		options: [["", defaultLabel(resolved(name, key) ?? (key === "permissions" ? "auto" : undefined))], ...options],
 		onChange: (value) => void config.patch({ engines: { [name]: { [key]: value || null } } })
 	})] });
 	return /* @__PURE__ */ _jsxs(_Fragment, { children: [/* @__PURE__ */ _jsx(List, {