bazilion 0.12.2 → 0.14.0

package/dist/web/server/assets/tokens-DDwtO15P.js

@@ -0,0 +1,359 @@
+import { t as Route } from "./tokens-_2hptHP6.js";
+import { t as Button } from "./Button-Dsnw22OF.js";
+import { t as ConfirmDialog } from "./ConfirmDialog-C-MPYYSU.js";
+import { t as ConfigPage } from "./ConfigPage-CiQ-gxmJ.js";
+import { useState } from "react";
+import { useRouter } from "@tanstack/react-router";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+//#region src/routes/config/tokens.tsx?tsr-split=component
+function fmtTs(ts) {
+	return new Date(ts).toISOString().slice(0, 16).replace("T", " ");
+}
+function TokensPage() {
+	const { tokens, sessions } = Route.useLoaderData();
+	const { all } = Route.useSearch();
+	const includeRevoked = all === "1";
+	const router = useRouter();
+	const [label, setLabel] = useState("");
+	const [created, setCreated] = useState(null);
+	const [expiresDays, setExpiresDays] = useState("90");
+	const [err, setErr] = useState(null);
+	const [busy, setBusy] = useState(false);
+	const [revokeTokenTarget, setRevokeTokenTarget] = useState(null);
+	const [revokeSessionTarget, setRevokeSessionTarget] = useState(null);
+	async function mint(e) {
+		e.preventDefault();
+		setErr(null);
+		setBusy(true);
+		try {
+			const res = await fetch("/api/tokens", {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					label,
+					expiresInDays: Number(expiresDays)
+				})
+			});
+			if (!res.ok) {
+				const j = await res.json().catch(() => ({}));
+				throw new Error(j.error ?? `${res.status} ${res.statusText}`);
+			}
+			setCreated((await res.json()).token);
+			setLabel("");
+			await router.invalidate();
+		} catch (e) {
+			setErr(e.message);
+		} finally {
+			setBusy(false);
+		}
+	}
+	async function revoke(id, revokesCurrentSession) {
+		const response = await fetch(`/api/tokens/${encodeURIComponent(id)}`, { method: "DELETE" });
+		if (!response.ok && response.status !== 204) {
+			const body = await response.json().catch(() => ({}));
+			throw new Error(body.error ?? "Could not revoke API token");
+		}
+		if (revokesCurrentSession) window.location.assign("/login");
+		else await router.invalidate();
+	}
+	async function revokeSession(id, current) {
+		const response = await fetch(`/api/sessions/${encodeURIComponent(id)}`, { method: "DELETE" });
+		if (!response.ok) {
+			const body = await response.json().catch(() => ({}));
+			throw new Error(body.error ?? "Could not revoke browser session");
+		}
+		if (current) window.location.assign("/login");
+		else await router.invalidate();
+	}
+	return /* @__PURE__ */ jsxs(ConfigPage, {
+		active: "tokens",
+		title: "API tokens",
+		description: /* @__PURE__ */ jsxs(Fragment, { children: [
+			"Manage per-client credentials for the HTTP API and CLI. The",
+			" ",
+			/* @__PURE__ */ jsx("code", {
+				className: "font-mono",
+				children: "bootstrap"
+			}),
+			" token from",
+			" ",
+			/* @__PURE__ */ jsx("code", {
+				className: "font-mono",
+				children: "~/.bazilion/auth.json"
+			}),
+			" remains protected; mint separate credentials for mobile, LAN, and remote clients."
+		] }),
+		children: [
+			/* @__PURE__ */ jsxs("section", {
+				className: "rounded-lg border bg-card p-5",
+				children: [
+					/* @__PURE__ */ jsx("h3", {
+						className: "font-serif text-xl mb-3",
+						children: "Mint a new token"
+					}),
+					/* @__PURE__ */ jsxs("form", {
+						onSubmit: mint,
+						className: "mb-3 flex flex-col items-stretch gap-2 sm:flex-row sm:items-end",
+						children: [
+							/* @__PURE__ */ jsxs("label", {
+								className: "w-full text-sm sm:w-auto",
+								children: ["Label", /* @__PURE__ */ jsx("input", {
+									type: "text",
+									value: label,
+									onChange: (e) => setLabel(e.target.value),
+									required: true,
+									placeholder: "e.g. laptop-tailscale",
+									autoComplete: "off",
+									className: "mt-1 block w-full rounded-md border bg-background px-3 py-2 text-sm sm:w-72"
+								})]
+							}),
+							/* @__PURE__ */ jsxs("label", {
+								className: "w-full text-sm sm:w-auto",
+								children: ["Expires in days", /* @__PURE__ */ jsx("input", {
+									type: "number",
+									min: 1,
+									max: 365,
+									value: expiresDays,
+									onChange: (e) => setExpiresDays(e.target.value),
+									required: true,
+									className: "mt-1 block w-full rounded-md border bg-background px-3 py-2 text-sm sm:w-36"
+								})]
+							}),
+							/* @__PURE__ */ jsx(Button, {
+								variant: "primary",
+								type: "submit",
+								disabled: busy,
+								children: busy ? "creating…" : "create"
+							})
+						]
+					}),
+					created && /* @__PURE__ */ jsxs("div", {
+						className: "rounded-md border border-warning/25 bg-warning/10 p-3",
+						children: [/* @__PURE__ */ jsx("p", {
+							className: "text-xs text-warning mb-1",
+							children: "copy this token now — it is not recoverable later."
+						}), /* @__PURE__ */ jsx("pre", {
+							className: "font-mono text-xs whitespace-pre-wrap break-all",
+							children: created
+						})]
+					}),
+					err && /* @__PURE__ */ jsx("p", {
+						role: "alert",
+						className: "text-sm text-danger",
+						children: err
+					})
+				]
+			}),
+			/* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsxs("label", {
+				className: "text-sm flex items-center gap-2",
+				children: [/* @__PURE__ */ jsx("input", {
+					type: "checkbox",
+					checked: includeRevoked,
+					onChange: (e) => {
+						window.location.assign(e.target.checked ? "/config/tokens?all=1" : "/config/tokens");
+					}
+				}), "show revoked"]
+			}) }),
+			/* @__PURE__ */ jsx("div", {
+				className: "overflow-x-auto",
+				children: /* @__PURE__ */ jsxs("table", {
+					className: "w-full min-w-[720px] text-sm",
+					children: [/* @__PURE__ */ jsx("thead", {
+						className: "text-left text-muted-foreground border-b",
+						children: /* @__PURE__ */ jsxs("tr", { children: [
+							/* @__PURE__ */ jsx("th", {
+								className: "py-2",
+								children: "label"
+							}),
+							/* @__PURE__ */ jsx("th", { children: "kind" }),
+							/* @__PURE__ */ jsx("th", { children: "id" }),
+							/* @__PURE__ */ jsx("th", { children: "state" }),
+							/* @__PURE__ */ jsx("th", { children: "created" }),
+							/* @__PURE__ */ jsx("th", { children: "last used" }),
+							/* @__PURE__ */ jsx("th", { children: "expires" }),
+							/* @__PURE__ */ jsx("th", {})
+						] })
+					}), /* @__PURE__ */ jsxs("tbody", { children: [tokens.length === 0 && /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
+						colSpan: 8,
+						className: "py-6 text-center text-muted-foreground italic",
+						children: "no tokens yet — mint one above"
+					}) }), tokens.map((t) => {
+						const isBootstrap = t.kind === "bootstrap";
+						return /* @__PURE__ */ jsxs("tr", {
+							className: "border-b last:border-0 hover:bg-accent/30",
+							children: [
+								/* @__PURE__ */ jsxs("td", {
+									className: "py-2",
+									children: [t.label, isBootstrap && /* @__PURE__ */ jsx("span", {
+										className: "ml-2 text-[0.7em] uppercase tracking-wide text-muted-foreground",
+										children: "auth.json"
+									})]
+								}),
+								/* @__PURE__ */ jsx("td", { children: t.kind }),
+								/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx("code", {
+									className: "font-mono text-xs",
+									children: t.id
+								}) }),
+								/* @__PURE__ */ jsx("td", { children: t.revokedAt ? /* @__PURE__ */ jsx("span", {
+									className: "text-muted-foreground",
+									children: "revoked"
+								}) : /* @__PURE__ */ jsx("span", {
+									className: "text-success",
+									children: "active"
+								}) }),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-muted-foreground text-xs",
+									children: fmtTs(t.createdAt)
+								}),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-muted-foreground text-xs",
+									children: t.lastUsedAt ? fmtTs(t.lastUsedAt) : "(never)"
+								}),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-muted-foreground text-xs",
+									children: t.expiresAt ? fmtTs(t.expiresAt) : "(never)"
+								}),
+								/* @__PURE__ */ jsx("td", { children: !t.revokedAt && !isBootstrap && /* @__PURE__ */ jsx(Button, {
+									variant: "danger",
+									className: "text-xs",
+									onClick: () => {
+										setErr(null);
+										setRevokeTokenTarget(t);
+									},
+									children: "revoke"
+								}) })
+							]
+						}, t.id);
+					})] })]
+				})
+			}),
+			/* @__PURE__ */ jsxs("section", {
+				className: "space-y-3",
+				children: [/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h3", {
+					className: "font-serif text-xl",
+					children: "Browser sessions"
+				}), /* @__PURE__ */ jsx("p", {
+					className: "text-sm text-muted-foreground",
+					children: "Sessions expire after 12 idle hours or seven days absolute. Revoking a device also revokes every session created from it."
+				})] }), /* @__PURE__ */ jsx("div", {
+					className: "overflow-x-auto",
+					children: /* @__PURE__ */ jsxs("table", {
+						className: "w-full min-w-[720px] text-sm",
+						children: [/* @__PURE__ */ jsx("thead", {
+							className: "border-b text-left text-muted-foreground",
+							children: /* @__PURE__ */ jsxs("tr", { children: [
+								/* @__PURE__ */ jsx("th", {
+									className: "py-2",
+									children: "device"
+								}),
+								/* @__PURE__ */ jsx("th", { children: "session" }),
+								/* @__PURE__ */ jsx("th", { children: "last seen" }),
+								/* @__PURE__ */ jsx("th", { children: "idle expiry" }),
+								/* @__PURE__ */ jsx("th", { children: "absolute expiry" }),
+								/* @__PURE__ */ jsx("th", {})
+							] })
+						}), /* @__PURE__ */ jsxs("tbody", { children: [sessions.length === 0 && /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
+							colSpan: 6,
+							className: "py-6 text-center italic text-muted-foreground",
+							children: "no active browser sessions"
+						}) }), sessions.map((session) => /* @__PURE__ */ jsxs("tr", {
+							className: "border-b last:border-0 hover:bg-accent/30",
+							children: [
+								/* @__PURE__ */ jsxs("td", {
+									className: "py-2",
+									children: [
+										session.deviceLabel,
+										" ",
+										session.current && /* @__PURE__ */ jsx("span", {
+											className: "text-xs text-success",
+											children: "current"
+										})
+									]
+								}),
+								/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx("code", {
+									className: "font-mono text-xs",
+									children: session.id
+								}) }),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-xs text-muted-foreground",
+									children: fmtTs(session.lastSeenAt)
+								}),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-xs text-muted-foreground",
+									children: fmtTs(session.idleExpiresAt)
+								}),
+								/* @__PURE__ */ jsx("td", {
+									className: "text-xs text-muted-foreground",
+									children: fmtTs(session.absoluteExpiresAt)
+								}),
+								/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(Button, {
+									variant: "danger",
+									className: "text-xs",
+									onClick: () => {
+										setErr(null);
+										setRevokeSessionTarget(session);
+									},
+									children: "revoke"
+								}) })
+							]
+						}, session.id))] })]
+					})
+				})]
+			}),
+			/* @__PURE__ */ jsx(ConfirmDialog, {
+				open: revokeTokenTarget !== null,
+				title: `Revoke ${revokeTokenTarget?.label ?? ""}?`,
+				description: /* @__PURE__ */ jsxs("p", { children: [
+					"This permanently revokes device token",
+					" ",
+					/* @__PURE__ */ jsx("code", {
+						className: "font-mono",
+						children: revokeTokenTarget?.id
+					}),
+					" and every browser session created from it. Clients using it will be signed out and cannot reconnect with this credential.",
+					sessions.some((session) => session.current && session.deviceTokenId === revokeTokenTarget?.id) && " This includes the browser session you are using now."
+				] }),
+				confirmLabel: "revoke token and sessions",
+				onConfirm: async () => {
+					if (!revokeTokenTarget) return;
+					try {
+						await revoke(revokeTokenTarget.id, sessions.some((session) => session.current && session.deviceTokenId === revokeTokenTarget.id));
+					} catch (error) {
+						setErr(error instanceof Error ? error.message : String(error));
+						throw error;
+					}
+				},
+				onOpenChange: (open) => {
+					if (!open) setRevokeTokenTarget(null);
+				}
+			}),
+			/* @__PURE__ */ jsx(ConfirmDialog, {
+				open: revokeSessionTarget !== null,
+				title: `Revoke ${revokeSessionTarget?.deviceLabel ?? ""} browser session?`,
+				description: /* @__PURE__ */ jsxs("p", { children: [
+					"This ends browser session ",
+					/* @__PURE__ */ jsx("code", {
+						className: "font-mono",
+						children: revokeSessionTarget?.id
+					}),
+					revokeSessionTarget?.current ? " and signs this browser out immediately." : ". The device token remains active for future logins."
+				] }),
+				confirmLabel: revokeSessionTarget?.current ? "sign out this browser" : "revoke session",
+				onConfirm: async () => {
+					if (!revokeSessionTarget) return;
+					try {
+						await revokeSession(revokeSessionTarget.id, revokeSessionTarget.current);
+					} catch (error) {
+						setErr(error instanceof Error ? error.message : String(error));
+						throw error;
+					}
+				},
+				onOpenChange: (open) => {
+					if (!open) setRevokeSessionTarget(null);
+				}
+			})
+		]
+	});
+}
+//#endregion
+export { TokensPage as component };

package/dist/web/server/assets/tokens-DjM8GsgS.js

@@ -0,0 +1,19 @@
+import { n as createServerFn } from "../server.js";
+import { t as createServerRpc } from "./createServerRpc-B7Yr1K8i.js";
+import { n as daemonClient } from "./daemon-client-CI5NHwNC.js";
+//#region src/routes/config/tokens.tsx?tss-serverfn-split
+var fetchTokens_createServerFn_handler = createServerRpc({
+	id: "46e35c9f1afc79423cb49703b454ef684344db08ec19775efd70a8768c7837f1",
+	name: "fetchTokens",
+	filename: "src/routes/config/tokens.tsx"
+}, (opts) => fetchTokens.__executeServer(opts));
+var fetchTokens = createServerFn({ method: "POST" }).validator((d) => d).handler(fetchTokens_createServerFn_handler, async ({ data }) => {
+	const client = daemonClient();
+	const [tokenResult, sessionResult] = await Promise.all([client.get(`/api/tokens${data.all ? "?includeRevoked=1" : ""}`), client.get("/api/sessions")]);
+	return {
+		...tokenResult,
+		...sessionResult
+	};
+});
+//#endregion
+export { fetchTokens_createServerFn_handler };

package/dist/web/server/assets/{tokens-BnwFbV7T.js → tokens-_2hptHP6.js}

@@ -1,9 +1,9 @@
-import { t as createServerFn } from "../server.js";
-import { t as createSsrRpc } from "./createSsrRpc-DFsIAfFd.js";
+import { n as createServerFn } from "../server.js";
+import { t as createSsrRpc } from "./createSsrRpc-6LHNEsSK.js";
 import { createFileRoute, lazyRouteComponent } from "@tanstack/react-router";
 //#region src/routes/config/tokens.tsx
-var $$splitComponentImporter = () => import("./tokens-yyTSfBSN.js");
-var fetchTokens = createServerFn({ method: "POST" }).inputValidator((d) => d).handler(createSsrRpc("46e35c9f1afc79423cb49703b454ef684344db08ec19775efd70a8768c7837f1"));
+var $$splitComponentImporter = () => import("./tokens-DDwtO15P.js");
+var fetchTokens = createServerFn({ method: "POST" }).validator((d) => d).handler(createSsrRpc("46e35c9f1afc79423cb49703b454ef684344db08ec19775efd70a8768c7837f1"));
 var Route = createFileRoute("/config/tokens")({
 	validateSearch: (s) => ({ all: s.all === "1" ? "1" : void 0 }),
 	loaderDeps: ({ search }) => ({ all: search.all === "1" }),

package/dist/web/server/assets/{triggers-BZPl5CHs.js → triggers-BvjYNmmY.js}

@@ -1,9 +1,9 @@
-import { t as createServerFn } from "../server.js";
-import { t as createSsrRpc } from "./createSsrRpc-DFsIAfFd.js";
+import { n as createServerFn } from "../server.js";
+import { t as createSsrRpc } from "./createSsrRpc-6LHNEsSK.js";
 import { createFileRoute, lazyRouteComponent, redirect } from "@tanstack/react-router";
 //#region src/routes/agents/$id/triggers.tsx
-var $$splitComponentImporter = () => import("./triggers-CSNNzRIi.js");
-var fetchTriggers = createServerFn({ method: "POST" }).inputValidator((d) => d).handler(createSsrRpc("57ebf437fdb3fcfc63b176e796a55f04bdfec0b230059673196e98d413d15c4d"));
+var $$splitComponentImporter = () => import("./triggers-CHk9O3rU.js");
+var fetchTriggers = createServerFn({ method: "POST" }).validator((d) => d).handler(createSsrRpc("57ebf437fdb3fcfc63b176e796a55f04bdfec0b230059673196e98d413d15c4d"));
 var Route = createFileRoute("/agents/$id/triggers")({
 	loader: async ({ params }) => {
 		const data = await fetchTriggers({ data: { id: params.id } });