bullpane 0.5.1 → 0.5.2

package/dist/server.mjs

@@ -4,11 +4,11 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// ../redis-inspector/src/inspector.ts
+// packages/redis-inspector/src/inspector.ts
 import { Cluster as Cluster2 } from "ioredis";
 import { Job, Queue, UnrecoverableError } from "bullmq";
 
-// ../shared/src/index.ts
+// packages/shared/src/index.ts
 import { z } from "zod";
 var PRO_FEATURES = ["alerts", "users", "folders", "flows", "audit", "sso", "mcp"];
 var PRO_PRICING = { monthlyUsd: 39, yearlyUsd: 390 };
@@ -456,7 +456,7 @@ var mcpConsentDecisionSchema = z.object({
   access: z.enum(["read", "write"]).default("read")
 });
 
-// ../redis-inspector/src/connection.ts
+// packages/redis-inspector/src/connection.ts
 import Redis, { Cluster } from "ioredis";
 function parseRedisUrl(url) {
   const u = new URL(url);
@@ -530,7 +530,7 @@ function createBullmqConnection(config, connectTimeoutMs) {
   };
 }
 
-// ../redis-inspector/src/keys.ts
+// packages/redis-inspector/src/keys.ts
 function queueKey(prefix, queue) {
   return `${prefix}:${queue}`;
 }
@@ -663,7 +663,7 @@ function queueNameFromQueueKey(prefix, qualified) {
   return qualified.startsWith(head) ? qualified.slice(head.length) : qualified;
 }
 
-// ../redis-inspector/src/util.ts
+// packages/redis-inspector/src/util.ts
 function globToRegExp(glob) {
   const escaped = glob.split("").map((ch) => {
     if (ch === "*") return ".*";
@@ -726,7 +726,7 @@ function errorMessage(err) {
   return String(err);
 }
 
-// ../redis-inspector/src/parse.ts
+// packages/redis-inspector/src/parse.ts
 function rowToHash(row) {
   const id3 = String(row[0] ?? "");
   const hash = {};
@@ -931,7 +931,7 @@ function optsParent(raw) {
   return null;
 }
 
-// ../redis-inspector/src/scripts.ts
+// packages/redis-inspector/src/scripts.ts
 import { readFileSync } from "node:fs";
 var SCRIPTS = {
   /** 8 state keys + meta + groups + metrics (4) + repeat + stalled */
@@ -981,7 +981,7 @@ function pipelineScript(pipeline, name, args) {
   fn.call(pipeline, ...args);
 }
 
-// ../redis-inspector/src/inspector.ts
+// packages/redis-inspector/src/inspector.ts
 var DEFAULTS = {
   discoveryTtlMs: 3e4,
   previewBytes: 2048,
@@ -2170,7 +2170,7 @@ function optsPrunesCompleted(optsJson) {
   }
 }
 
-// ../redis-inspector/src/pool.ts
+// packages/redis-inspector/src/pool.ts
 var RedisInspectorPool = class {
   constructor(options = {}) {
     this.options = options;
@@ -2209,14 +2209,14 @@ function createInspectorPool(options = {}) {
   return new RedisInspectorPool(options);
 }
 
-// ../../apps/server/src/app.ts
+// apps/server/src/app.ts
 import { existsSync, readFileSync as readFileSync2 } from "node:fs";
 import path2 from "node:path";
 import fastifyCookie from "@fastify/cookie";
 import fastifyStatic from "@fastify/static";
 import Fastify, { LogController } from "fastify";
 
-// ../../apps/server/src/ee/alerts/deliver.ts
+// apps/server/src/ee/alerts/deliver.ts
 var DELIVERY_TIMEOUT_MS = 5e3;
 function channelLabel(channel) {
   const raw = channel.type === "slack" ? channel.webhookUrl : channel.url;
@@ -2305,7 +2305,7 @@ async function deliverToAll(channels, notification, fetchImpl) {
   return Promise.all(channels.map((c) => deliverToChannel(c, notification, fetchImpl)));
 }
 
-// ../../apps/server/src/ee/alerts/evaluate.ts
+// apps/server/src/ee/alerts/evaluate.ts
 function measure(condition, m) {
   if (condition.kind !== m.kind) {
     throw new Error(`measurement kind ${m.kind} does not match condition ${condition.kind}`);
@@ -2394,11 +2394,11 @@ function formatMessage(input) {
   return input.status === "fired" ? `${scope}: ${describeCondition(input.condition)} \u2014 current ${value}${threshold}.` : `${scope}: back below threshold \u2014 current ${value}${threshold}.`;
 }
 
-// ../../apps/server/src/ee/services/alerts.ts
+// apps/server/src/ee/services/alerts.ts
 import { and, desc, eq, lt } from "drizzle-orm";
 import { nanoid } from "nanoid";
 
-// ../../apps/server/src/db/schema.mysql.ts
+// apps/server/src/db/schema.mysql.ts
 var schema_mysql_exports = {};
 __export(schema_mysql_exports, {
   alertEvents: () => alertEvents,
@@ -2647,7 +2647,7 @@ var settings = mysqlTable("settings", {
   value: text("value").notNull()
 });
 
-// ../../apps/server/src/db/schema.sqlite.ts
+// apps/server/src/db/schema.sqlite.ts
 var schema_sqlite_exports = {};
 __export(schema_sqlite_exports, {
   alertEvents: () => alertEvents2,
@@ -2870,7 +2870,7 @@ var settings2 = sqliteTable("settings", {
   value: text2("value").notNull()
 });
 
-// ../../apps/server/src/db/schema.ts
+// apps/server/src/db/schema.ts
 var users3 = users;
 var sessions3 = sessions;
 var ssoProviders3 = ssoProviders;
@@ -2910,7 +2910,7 @@ function useSchema(dialect) {
   current = dialect;
 }
 
-// ../../apps/server/src/plugins/errors.ts
+// apps/server/src/plugins/errors.ts
 import { ZodError } from "zod";
 var HttpError = class extends Error {
   status;
@@ -2992,7 +2992,7 @@ function registerErrorHandling(app) {
   });
 }
 
-// ../../apps/server/src/ee/services/alerts.ts
+// apps/server/src/ee/services/alerts.ts
 function scopeOf(row) {
   switch (row.scopeType) {
     case "folder":
@@ -3132,7 +3132,7 @@ var AlertsService = class {
   }
 };
 
-// ../../apps/server/src/ee/alerts/engine.ts
+// apps/server/src/ee/alerts/engine.ts
 var EVENT_RETENTION_DAYS = 30;
 var NOTICE_MAX_NAMES = 10;
 var AlertsEngine = class {
@@ -3685,11 +3685,11 @@ function errorText(err) {
   return err instanceof Error ? err.message : String(err);
 }
 
-// ../../apps/server/src/auth/sessions.ts
+// apps/server/src/auth/sessions.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
 import { and as and2, eq as eq2, gt, isNull, lt as lt2 } from "drizzle-orm";
 
-// ../../apps/server/src/config.ts
+// apps/server/src/config.ts
 import { randomBytes } from "node:crypto";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -3814,7 +3814,7 @@ function isHttps(publicUrl) {
   return /^https:\/\//i.test(publicUrl);
 }
 
-// ../../apps/server/src/auth/sessions.ts
+// apps/server/src/auth/sessions.ts
 var SESSION_COOKIE = "bullpane_session";
 var SESSION_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
 function toUserDto(row) {
@@ -3874,7 +3874,7 @@ var SessionService = class {
   }
 };
 
-// ../../apps/server/src/ee/mcp/internal.ts
+// apps/server/src/ee/mcp/internal.ts
 import { randomBytes as randomBytes3, timingSafeEqual } from "node:crypto";
 var MCP_CALL_HEADER = "x-bullpane-mcp-call";
 function cappedRole(role, access) {
@@ -3903,7 +3903,7 @@ var McpCallBridge = class {
   }
 };
 
-// ../../apps/server/src/auth/plugin.ts
+// apps/server/src/auth/plugin.ts
 async function authPlugin(app) {
   app.decorateRequest("user", null);
   app.decorateRequest("sessionId", null);
@@ -3932,7 +3932,7 @@ async function authPlugin(app) {
 }
 authPlugin[Symbol.for("skip-override")] = true;
 
-// ../../apps/server/src/ee/plugins/audit.ts
+// apps/server/src/ee/plugins/audit.ts
 var ROUTE_ACTIONS = {
   // jobs
   "POST /api/connections/:id/queues/:queue/jobs": "job.add",
@@ -4058,7 +4058,7 @@ function registerAuditHook(app) {
   });
 }
 
-// ../../apps/server/src/plugins/gates.ts
+// apps/server/src/plugins/gates.ts
 function assertFeature(edition, feature) {
   if (!edition.features[feature]) throw proRequired(feature);
 }
@@ -4086,10 +4086,10 @@ async function blockWrites(request, _reply) {
   throw readOnlyLocked();
 }
 
-// ../../apps/server/src/ee/routes/alerts.ts
+// apps/server/src/ee/routes/alerts.ts
 import { z as z2 } from "zod";
 
-// ../../apps/server/src/auth/guards.ts
+// apps/server/src/auth/guards.ts
 async function requireAuth(request, _reply) {
   if (!request.user) throw unauthenticated();
 }
@@ -4100,7 +4100,7 @@ function requireRole(role) {
   };
 }
 
-// ../../apps/server/src/ee/routes/alerts.ts
+// apps/server/src/ee/routes/alerts.ts
 var eventsQuerySchema = z2.object({
   limit: z2.coerce.number().int().min(1).max(1e3).default(100),
   alertId: z2.string().optional()
@@ -4152,7 +4152,7 @@ async function alertRoutes(app) {
   );
 }
 
-// ../../apps/server/src/ee/routes/audit.ts
+// apps/server/src/ee/routes/audit.ts
 var EXPORT_MAX_ROWS = 5e4;
 var EXPORT_PAGE = 500;
 async function auditRoutes(app) {
@@ -4221,7 +4221,7 @@ function csvRow(e) {
   ].map(csvCell).join(",") + "\n";
 }
 
-// ../../apps/server/src/auth/password.ts
+// apps/server/src/auth/password.ts
 import bcrypt from "bcryptjs";
 var BCRYPT_ROUNDS = 10;
 function hashPassword(password) {
@@ -4232,7 +4232,7 @@ function verifyPassword(password, hash) {
   return bcrypt.compare(password, hash);
 }
 
-// ../../apps/server/src/routes/auth.ts
+// apps/server/src/routes/auth.ts
 async function authRoutes(app) {
   app.post("/auth/login", async (request, reply) => {
     const input = loginSchema.parse(request.body);
@@ -4275,7 +4275,7 @@ async function authRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/sso/crypto.ts
+// apps/server/src/ee/sso/crypto.ts
 import { createCipheriv, createDecipheriv, hkdfSync, randomBytes as randomBytes4, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 var VERSION = "v1";
 var ALGO = "aes-256-gcm";
@@ -4326,7 +4326,7 @@ function safeEqual(a, b) {
   return timingSafeEqual2(ba, bb);
 }
 
-// ../../apps/server/src/ee/sso/oidc.ts
+// apps/server/src/ee/sso/oidc.ts
 import { createHash, createPublicKey, createVerify, randomBytes as randomBytes5 } from "node:crypto";
 var CLOCK_SKEW_SECONDS = 120;
 var FETCH_TIMEOUT_MS = 8e3;
@@ -4517,7 +4517,7 @@ async function fetchJwks(jwksUri) {
   return { keys: doc.keys };
 }
 
-// ../../apps/server/src/ee/sso/saml.ts
+// apps/server/src/ee/sso/saml.ts
 import { SAML, ValidateInResponseTo } from "@node-saml/node-saml";
 var SamlError = class extends Error {
   constructor(message, publicMessage = message) {
@@ -4624,7 +4624,7 @@ function nameFromProfile(profile) {
   return null;
 }
 
-// ../../apps/server/src/ee/routes/auth-sso.ts
+// apps/server/src/ee/routes/auth-sso.ts
 var FLOW_COOKIE_PREFIX = "bullpane_sso_";
 var FLOW_TTL_MS = 10 * 60 * 1e3;
 function flowCookieName(providerId) {
@@ -4867,10 +4867,10 @@ async function testProvider(row, callbackUrl, entityId) {
   };
 }
 
-// ../../apps/server/src/routes/connections.ts
+// apps/server/src/routes/connections.ts
 import { z as z3 } from "zod";
 
-// ../../apps/server/src/services/inspector-errors.ts
+// apps/server/src/services/inspector-errors.ts
 var CONNECTION_ERROR_PATTERNS = [
   /ECONNREFUSED/i,
   /ECONNRESET/i,
@@ -4918,7 +4918,7 @@ async function withRedis(fn) {
   }
 }
 
-// ../../apps/server/src/routes/connections.ts
+// apps/server/src/routes/connections.ts
 var queuesQuerySchema = z3.object({ refresh: z3.string().optional(), includeHidden: z3.string().optional() });
 var isTrue = (v) => v === "1" || v === "true";
 async function connectionRoutes(app) {
@@ -5022,7 +5022,7 @@ async function connectionRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/routes/flows.ts
+// apps/server/src/ee/routes/flows.ts
 import { z as z4 } from "zod";
 var flowsQuerySchema = z4.object({ sample: z4.coerce.number().int().min(10).max(2e3).default(200) });
 async function flowRoutes(app) {
@@ -5045,7 +5045,7 @@ async function flowRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/routes/folders.ts
+// apps/server/src/ee/routes/folders.ts
 async function folderRoutes(app) {
   const gate = requireFeature("folders");
   const viewer = [requireAuth, gate, requireRole("viewer")];
@@ -5071,10 +5071,10 @@ async function folderRoutes(app) {
   });
 }
 
-// ../../apps/server/src/routes/groups.ts
+// apps/server/src/routes/groups.ts
 import { z as z6 } from "zod";
 
-// ../../apps/server/src/routes/jobs.ts
+// apps/server/src/routes/jobs.ts
 import { z as z5 } from "zod";
 var logsQuerySchema = z5.object({
   start: z5.coerce.number().int().min(0).default(0),
@@ -5193,7 +5193,7 @@ async function jobRoutes(app) {
   }
 }
 
-// ../../apps/server/src/routes/groups.ts
+// apps/server/src/routes/groups.ts
 var pagingSchema = z6.object({
   page: z6.coerce.number().int().min(1).default(1),
   pageSize: z6.coerce.number().int().min(1).max(200).default(25)
@@ -5215,7 +5215,7 @@ async function groupRoutes(app) {
   });
 }
 
-// ../../apps/server/src/routes/health.ts
+// apps/server/src/routes/health.ts
 async function healthRoutes(app) {
   app.get("/health", async () => ({
     ok: true,
@@ -5232,7 +5232,7 @@ async function healthRoutes(app) {
   );
 }
 
-// ../../apps/server/src/routes/license.ts
+// apps/server/src/routes/license.ts
 import { z as z7 } from "zod";
 var putLicenseSchema = z7.object({ key: z7.string().min(1).max(8192) });
 async function licenseRoutes(app) {
@@ -5255,7 +5255,7 @@ async function licenseRoutes(app) {
   });
 }
 
-// ../../apps/server/src/routes/queues.ts
+// apps/server/src/routes/queues.ts
 import { z as z8 } from "zod";
 var retryAllSchema = z8.object({ state: z8.enum(["failed", "completed"]) });
 var drainSchema = z8.object({ includeDelayed: z8.boolean().optional() }).default({});
@@ -5355,7 +5355,7 @@ async function queueRoutes(app) {
   });
 }
 
-// ../../apps/server/src/routes/settings.ts
+// apps/server/src/routes/settings.ts
 async function settingsRoutes(app) {
   app.get("/settings/attention", { preHandler: [requireAuth] }, async () => app.ctx.attention.get());
   app.put(
@@ -5375,7 +5375,7 @@ async function settingsRoutes(app) {
   );
 }
 
-// ../../apps/server/src/routes/setup.ts
+// apps/server/src/routes/setup.ts
 async function setupRoutes(app) {
   app.get("/setup/status", async () => {
     const authRequired = app.ctx.edition.getEdition().features.users;
@@ -5401,7 +5401,7 @@ async function setupRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/routes/sso.ts
+// apps/server/src/ee/routes/sso.ts
 async function ssoRoutes(app) {
   const admin = [requireAuth, requireFeature("sso"), requireRole("admin")];
   const adminMutating = [...admin, blockInDemo];
@@ -5471,7 +5471,7 @@ async function ssoRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/mcp/service.ts
+// apps/server/src/ee/mcp/service.ts
 import { createHash as createHash2, createHmac, hkdfSync as hkdfSync2, randomBytes as randomBytes6, timingSafeEqual as timingSafeEqual3 } from "node:crypto";
 import { nanoid as nanoid2 } from "nanoid";
 var MCP_SETTINGS_KEY = "mcp.max_access";
@@ -5877,7 +5877,7 @@ function toGrantDto(r) {
   };
 }
 
-// ../../apps/server/src/ee/routes/mcp.ts
+// apps/server/src/ee/routes/mcp.ts
 async function asApiError(fn) {
   try {
     return await fn();
@@ -5920,7 +5920,7 @@ async function mcpRoutes(app) {
   });
 }
 
-// ../../apps/server/src/ee/routes/users.ts
+// apps/server/src/ee/routes/users.ts
 async function userRoutes(app) {
   const gate = requireFeature("users");
   const admin = [requireAuth, gate, requireRole("admin")];
@@ -5960,7 +5960,7 @@ async function userRoutes(app) {
   });
 }
 
-// ../../apps/server/src/routes/index.ts
+// apps/server/src/routes/index.ts
 async function apiPlugin(app) {
   await app.register(authPlugin);
   app.addHook("onRequest", blockWrites);
@@ -5987,7 +5987,7 @@ async function apiPlugin(app) {
   await app.register(mcpRoutes);
 }
 
-// ../../apps/server/src/ee/services/audit.ts
+// apps/server/src/ee/services/audit.ts
 import { and as and3, asc, desc as desc2, eq as eq3, gte, lt as lt3, lte, or, sql } from "drizzle-orm";
 import { nanoid as nanoid3 } from "nanoid";
 var MAX_ERROR = 500;
@@ -6184,7 +6184,7 @@ var AuditService = class {
   }
 };
 
-// ../../apps/server/src/services/connections.ts
+// apps/server/src/services/connections.ts
 import { and as and4, eq as eq4, inArray } from "drizzle-orm";
 import { nanoid as nanoid4 } from "nanoid";
 var STATUS_TTL_MS = 1e4;
@@ -6533,10 +6533,10 @@ function emptyCounts() {
   };
 }
 
-// ../../apps/server/src/services/edition.ts
+// apps/server/src/services/edition.ts
 import os from "node:os";
 
-// ../../apps/server/src/license.ts
+// apps/server/src/license.ts
 import { createPrivateKey, sign as cryptoSign, verify as cryptoVerify } from "node:crypto";
 import { z as z9 } from "zod";
 var LICENSE_PUBLIC_KEY_B64 = "MCowBQYDK2VwAyEAiOdWgp41hqTFeVlG0WO0qH3T4bPZpoUeUHUlxk5Lwis=";
@@ -6590,7 +6590,7 @@ function verifyLicenseKey(key, opts = {}) {
   return { valid: true, payload, reason: null };
 }
 
-// ../../apps/server/src/services/license-client.ts
+// apps/server/src/services/license-client.ts
 var LicenseApiFailure = class extends Error {
   constructor(code, message, status = null) {
     super(message);
@@ -6663,7 +6663,7 @@ function errorText2(err) {
   return String(err);
 }
 
-// ../../apps/server/src/services/edition.ts
+// apps/server/src/services/edition.ts
 var LICENSE_SETTING_KEY = "license_key";
 var LICENSE_ONLINE_SETTING_KEY = "license_online";
 function features(enabled) {
@@ -7023,7 +7023,7 @@ function toHttpError(err) {
   return licenseServerUnavailable(errorMessage2(err));
 }
 
-// ../../apps/server/src/services/attention.ts
+// apps/server/src/services/attention.ts
 var KEY = "attention.thresholds";
 var AttentionService = class {
   constructor(settings4) {
@@ -7050,7 +7050,7 @@ var AttentionService = class {
   }
 };
 
-// ../../apps/server/src/services/settings-store.ts
+// apps/server/src/services/settings-store.ts
 import { eq as eq5 } from "drizzle-orm";
 var DrizzleSettingsStore = class {
   constructor(db) {
@@ -7079,7 +7079,7 @@ var DrizzleSettingsStore = class {
   }
 };
 
-// ../../apps/server/src/ee/services/flows.ts
+// apps/server/src/ee/services/flows.ts
 import { and as and5, eq as eq6 } from "drizzle-orm";
 import { nanoid as nanoid5 } from "nanoid";
 var FLOW_CACHE_TTL_MS = 3e4;
@@ -7214,7 +7214,7 @@ var FlowsService = class {
   }
 };
 
-// ../../apps/server/src/ee/services/folders.ts
+// apps/server/src/ee/services/folders.ts
 import { eq as eq7, inArray as inArray2 } from "drizzle-orm";
 import { nanoid as nanoid6 } from "nanoid";
 var FoldersService = class {
@@ -7308,7 +7308,7 @@ function toFolderDto(row, queues) {
   };
 }
 
-// ../../apps/server/src/services/health.ts
+// apps/server/src/services/health.ts
 var MIN_SAMPLE_INTERVAL_MS = 2e3;
 var HISTORY_POINTS = 200;
 var HealthService = class {
@@ -7464,7 +7464,7 @@ function buildWarnings(info, error, memoryUsedPct) {
   return out;
 }
 
-// ../../apps/server/src/ee/services/sso.ts
+// apps/server/src/ee/services/sso.ts
 import { asc as asc2, eq as eq8 } from "drizzle-orm";
 import { nanoid as nanoid7 } from "nanoid";
 var REQUIRE_SSO_KEY = "sso.require_sso";
@@ -7685,7 +7685,7 @@ var SsoService = class {
   }
 };
 
-// ../../apps/server/src/ee/mcp/tools.ts
+// apps/server/src/ee/mcp/tools.ts
 import { z as z10 } from "zod";
 var MAX_TEXT = 1e5;
 var seg = encodeURIComponent;
@@ -7979,7 +7979,7 @@ function toolsFor(access) {
   return access === "write" ? MCP_TOOLS : MCP_TOOLS.filter((t) => t.access === "read");
 }
 
-// ../../apps/server/src/ee/mcp/routes.ts
+// apps/server/src/ee/mcp/routes.ts
 var MCP_PROTOCOL_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26"];
 var SERVER_INSTRUCTIONS = "Bullpane is a dashboard for BullMQ queues stored in Redis. Start with list_connections, then list_queues. Every action runs as the Bullpane user who connected this client and is recorded in Bullpane's audit log. Draining, cleaning or obliterating a queue is never done from here: request_destructive_action returns a dashboard link for the user to confirm.";
 function sendOAuthError(reply, err) {
@@ -8163,7 +8163,7 @@ This connection has ${caller.access} access as ${caller.user.email}.`
   app.delete("/mcp", notAllowed);
 }
 
-// ../../apps/server/src/ee/mcp/store.ts
+// apps/server/src/ee/mcp/store.ts
 import { and as and6, desc as desc3, eq as eq9, lt as lt4, notInArray } from "drizzle-orm";
 function affectedRows(result) {
   const header = Array.isArray(result) ? result[0] : result;
@@ -8238,7 +8238,7 @@ var DrizzleMcpStore = class {
   }
 };
 
-// ../../apps/server/src/services/users.ts
+// apps/server/src/services/users.ts
 import { and as and7, eq as eq10, isNull as isNull2 } from "drizzle-orm";
 import { nanoid as nanoid8 } from "nanoid";
 var UsersService = class {
@@ -8313,7 +8313,7 @@ var UsersService = class {
   }
 };
 
-// ../../apps/server/src/app.ts
+// apps/server/src/app.ts
 function readVersion() {
   try {
     const pkg = JSON.parse(readFileSync2(path2.join(SERVER_ROOT, "package.json"), "utf8"));
@@ -8400,7 +8400,13 @@ async function buildApp(opts) {
       index: ["index.html"],
       cacheControl: true,
       maxAge: "1h",
-      immutable: false
+      immutable: false,
+      // index.html names the hashed bundles of the running version. Cached for
+      // an hour, it survives an upgrade and asks for bundles that are gone: a
+      // blank page until the cache expires. Everything else keeps the 1 h.
+      setHeaders(reply, filePath) {
+        if (path2.basename(filePath) === "index.html") reply.header("cache-control", "no-cache");
+      }
     });
   }
   app.setNotFoundHandler(async (request, reply) => {
@@ -8408,14 +8414,14 @@ async function buildApp(opts) {
       return reply.status(404).send({ error: "not_found", message: `Route ${request.method} ${request.url} not found` });
     }
     if (serveWeb && (request.method === "GET" || request.method === "HEAD")) {
-      return reply.header("cache-control", "no-cache").sendFile("index.html");
+      return reply.header("cache-control", "no-cache").sendFile("index.html", { cacheControl: false });
     }
     return reply.status(404).send({ error: "not_found", message: "Not found" });
   });
   return app;
 }
 
-// ../../apps/server/src/db/index.ts
+// apps/server/src/db/index.ts
 import { mkdirSync } from "node:fs";
 import path3 from "node:path";
 import { createClient } from "@libsql/client";
@@ -8497,7 +8503,7 @@ function errorMessage3(err) {
   return err instanceof Error ? err.message : String(err);
 }
 
-// ../../apps/server/src/db/migrate.ts
+// apps/server/src/db/migrate.ts
 import { readdir, readFile } from "node:fs/promises";
 import path4 from "node:path";
 var MIGRATIONS_DIR = path4.resolve(SERVER_ROOT, "migrations");
@@ -8533,7 +8539,7 @@ async function runMigrations(database2, log, dir = path4.join(MIGRATIONS_DIR, da
   return { applied };
 }
 
-// ../../apps/server/src/demo/seed.ts
+// apps/server/src/demo/seed.ts
 var DEMO_CONNECTION_NAME = "Demo Redis";
 var DEMO_QUEUES = [
   "payments.charge",
@@ -8615,7 +8621,7 @@ async function seedDemo(ctx, log) {
   }
 }
 
-// ../../apps/server/src/seedConnections.ts
+// apps/server/src/seedConnections.ts
 async function seedConnections(connections5, wanted, log) {
   let created = 0;
   for (const input of wanted) {
@@ -8627,7 +8633,7 @@ async function seedConnections(connections5, wanted, log) {
   return created;
 }
 
-// ../../apps/server/src/index.ts
+// apps/server/src/index.ts
 async function main() {
   const config = loadConfig(process.env, { warn: (m) => console.warn(`[config] ${m}`) });
   const database2 = createDatabase(config.database);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bullpane",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Self-hosted dashboard for BullMQ and BullMQ Pro: queues, jobs, failures, metrics, Redis health, flows and Pro groups. A bull-board alternative you can run with npx.",
   "keywords": [
     "bullmq",
@@ -41,7 +41,7 @@
   },
   "dependencies": {
     "@fastify/cookie": "^11.0.1",
-    "@fastify/static": "^8.0.3",
+    "@fastify/static": "^10.1.5",
     "@libsql/client": "^0.18.0",
     "@node-saml/node-saml": "^5.1.0",
     "bcryptjs": "^2.4.3",