bunqueue-dashboard 0.0.16 → 0.0.17

package/agent/index.ts

@@ -13,14 +13,19 @@
  */
 import { logger } from './logger';
 import { ProcessManager } from './manager';
-import { createFetchHandler, resolveAllowedOrigins } from './server';
+import { createFetchHandler, resolveAllowedHosts, resolveAllowedOrigins } from './server';
 
 const mgr = new ProcessManager();
 const PORT = Number(process.env.AGENT_PORT) || 6800;
 const allowedOrigins = resolveAllowedOrigins();
+// The agent binds loopback only, so a legitimate Host is always a loopback
+// hostname (localhost / 127.0.0.1). Enforcing the allowlist blocks a page whose
+// DNS was rebound to 127.0.0.1 from reading /control or /db over same-origin
+// GETs. Extend via AGENT_ALLOWED_HOSTS when fronted by a proxy on another host.
+const allowedHosts = resolveAllowedHosts();
 const token = process.env.AGENT_TOKEN || undefined;
 
-const handle = createFetchHandler(mgr, { allowedOrigins, token });
+const handle = createFetchHandler(mgr, { allowedOrigins, allowedHosts, token });
 
 Bun.serve({
   port: PORT,
@@ -42,6 +47,6 @@ process.on('SIGINT', () => shutdown('SIGINT'));
 process.on('SIGTERM', () => shutdown('SIGTERM'));
 
 logger.info(
-  { url: `http://127.0.0.1:${PORT}/control`, allowedOrigins, tokenAuth: Boolean(token) },
+  { url: `http://127.0.0.1:${PORT}/control`, allowedOrigins, allowedHosts, tokenAuth: Boolean(token) },
   'bunqueue dashboard control agent ready'
 );

package/agent/manager.ts

@@ -192,8 +192,10 @@ export class ProcessManager {
     this.status = 'running';
     this.runningConfig = { ...this.config, extraEnv: { ...this.config.extraEnv } };
     this.push('sys', `started: ${this.config.command} (pid ${this.proc.pid})`);
-    void this.pipe(this.proc.stdout as ReadableStream<Uint8Array>, 'stdout');
-    void this.pipe(this.proc.stderr as ReadableStream<Uint8Array>, 'stderr');
+    // stdout/stderr are spawned as pipes, so they are ReadableStreams at
+    // runtime; Bun types them as a union that also includes a numeric fd.
+    void this.pipe(this.proc.stdout as unknown as ReadableStream<Uint8Array>, 'stdout');
+    void this.pipe(this.proc.stderr as unknown as ReadableStream<Uint8Array>, 'stderr');
     return this.getStatus();
   }
 

package/agent/server.ts

@@ -14,7 +14,15 @@
  *     always sends `Origin`, so a drive-by page cannot start/stop/reconfigure
  *     the server. Non-browser callers (curl, same-process) send no Origin and
  *     still work for local use.
- *  3. Optional bearer token (AGENT_TOKEN): when set, state-changing requests
+ *  3. Host-header allowlist (DNS-rebinding defense). The Origin gate does NOT
+ *     cover a *same-origin* request: a page whose DNS name is rebound to
+ *     127.0.0.1 issues same-origin GETs that carry no `Origin` header, so it
+ *     could otherwise read /control/status, /control/logs and the /db/*
+ *     inspector (job payloads) even with a token set (the token exempts reads).
+ *     When `allowedHosts` is configured, a request whose `Host` header names a
+ *     hostname outside the allowlist is rejected (403) — the rebinding page's
+ *     `Host` is the attacker's domain, never a loopback/allowlisted host.
+ *  4. Optional bearer token (AGENT_TOKEN): when set, state-changing requests
  *     must present it (`Authorization: Bearer <t>` or `x-agent-token: <t>`).
  */
 import { type DbFilter, dbCell, dbInfo, dbRows, dbSchema, dbTables, MissingDbError, queryWithTimeout } from './db';
@@ -22,12 +30,23 @@ import type { ProcessManager, ServerConfig } from './manager';
 
 export interface AgentOptions {
   allowedOrigins: string[];
+  /**
+   * DNS-rebinding defense: when set (non-empty), a request whose `Host` header
+   * resolves to a hostname outside this list is rejected. Compared by hostname
+   * only (port stripped). Leave undefined to disable the check — e.g. when the
+   * agent is fronted by a proxy that already validates Host, or bound to a
+   * non-loopback interface where the user opted into network exposure.
+   */
+  allowedHosts?: string[];
   /** When set, POST/PUT requests must present this token. */
   token?: string;
 }
 
 const DEFAULT_ORIGINS = ['http://localhost:5273', 'http://127.0.0.1:5273'];
 
+/** Hostnames always trusted as loopback for the Host-header allowlist. */
+const LOOPBACK_HOSTS = ['localhost', '127.0.0.1', '::1', '0.0.0.0'];
+
 /** Parse AGENT_ALLOWED_ORIGINS (comma-separated) merged with sane dev defaults. */
 export function resolveAllowedOrigins(env = process.env): string[] {
   const extra = (env.AGENT_ALLOWED_ORIGINS ?? '')
@@ -37,11 +56,49 @@ export function resolveAllowedOrigins(env = process.env): string[] {
   return Array.from(new Set([...DEFAULT_ORIGINS, ...extra]));
 }
 
+/**
+ * Extract the bare hostname from a `Host` header or an origin/URL (strips a
+ * leading scheme and any port, unwraps IPv6 brackets, lowercases).
+ */
+export function hostnameOf(host: string): string {
+  const s = host.trim().replace(/^[a-z][a-z0-9+.-]*:\/\//i, ''); // drop scheme:// if present
+  const v6 = s.match(/^\[([^\]]+)\]/); // [::1]:6800 → ::1
+  if (v6) return v6[1].toLowerCase();
+  const i = s.indexOf(':');
+  return (i === -1 ? s : s.slice(0, i)).toLowerCase();
+}
+
+/**
+ * Loopback hostnames plus any from AGENT_ALLOWED_HOSTS (comma-separated) and
+ * `extra` (hostnames or full origins of the served/allowlisted origins).
+ * Reduced to bare hostnames, deduped.
+ */
+export function resolveAllowedHosts(env = process.env, extra: string[] = []): string[] {
+  const fromEnv = (env.AGENT_ALLOWED_HOSTS ?? '')
+    .split(',')
+    .map((s) => hostnameOf(s.trim()))
+    .filter(Boolean);
+  const extraHosts = extra.map((s) => hostnameOf(s)).filter(Boolean);
+  return Array.from(new Set([...LOOPBACK_HOSTS, ...extraHosts, ...fromEnv]));
+}
+
 export function isOriginAllowed(origin: string | null, allowed: string[]): boolean {
   if (!origin) return true; // non-browser caller (curl / same process) — no Origin header
   return allowed.includes(origin.replace(/\/$/, ''));
 }
 
+/**
+ * Host-header allowlist. Disabled (always true) when `allowed` is undefined. A
+ * missing Host header is a non-browser/loopback caller and is allowed; a
+ * present Host must match by hostname. A DNS-rebinding page always sends its
+ * own domain as Host, so it fails this check.
+ */
+export function isHostAllowed(host: string | null, allowed?: string[]): boolean {
+  if (!allowed) return true;
+  if (!host) return true; // non-browser caller — no Host header
+  return allowed.includes(hostnameOf(host));
+}
+
 /** CORS headers. ACAO is reflected only for an allowed origin (never `*`). */
 export function corsHeaders(origin: string | null, allowed: string[]): Record<string, string> {
   const h: Record<string, string> = {
@@ -67,7 +124,7 @@ function tokenOk(req: Request, token?: string): boolean {
  * ProcessManager and policy, returns an async (req) => Response.
  */
 export function createFetchHandler(mgr: ProcessManager, opts: AgentOptions) {
-  const { allowedOrigins, token } = opts;
+  const { allowedOrigins, allowedHosts, token } = opts;
 
   const json = (data: unknown, status: number, origin: string | null): Response =>
     new Response(JSON.stringify(data), {
@@ -107,6 +164,13 @@ export function createFetchHandler(mgr: ProcessManager, opts: AgentOptions) {
       return new Response(null, { status: 204, headers: corsHeaders(origin, allowedOrigins) });
     }
 
+    // DNS-rebinding defense: reject a same-origin request whose Host header is
+    // an attacker domain rebound to loopback (no Origin header would be sent,
+    // so the Origin gate below can't see it). No-op when allowedHosts is unset.
+    if (!isHostAllowed(req.headers.get('host'), allowedHosts)) {
+      return json({ ok: false, error: 'Host not allowed' }, 403, origin);
+    }
+
     // Block any request from a disallowed browser origin before it can act.
     if (!isOriginAllowed(origin, allowedOrigins)) {
       return json({ ok: false, error: 'Origin not allowed' }, 403, origin);

package/dist/.vite/manifest.json

@@ -7,8 +7,8 @@
       "_react-vendor-CHIHtdAC.js"
     ]
   },
-  "_CopyButton-XT7ykzf5.js": {
-    "file": "assets/CopyButton-XT7ykzf5.js",
+  "_CopyButton-BC6QECSJ.js": {
+    "file": "assets/CopyButton-BC6QECSJ.js",
     "name": "CopyButton",
     "imports": [
       "_cn-CMFYpumL.js",
@@ -16,8 +16,8 @@
       "index.html"
     ]
   },
-  "_Pagination-Cd6lHj2E.js": {
-    "file": "assets/Pagination-Cd6lHj2E.js",
+  "_Pagination-Bj1z6OlD.js": {
+    "file": "assets/Pagination-Bj1z6OlD.js",
     "name": "Pagination",
     "imports": [
       "_cn-CMFYpumL.js",
@@ -29,8 +29,8 @@
     "file": "assets/cn-CMFYpumL.js",
     "name": "cn"
   },
-  "_connectionStore-DI-LYcct.js": {
-    "file": "assets/connectionStore-DI-LYcct.js",
+  "_connectionStore-CCopJeU7.js": {
+    "file": "assets/connectionStore-CCopJeU7.js",
     "name": "connectionStore",
     "imports": [
       "_cn-CMFYpumL.js",
@@ -57,14 +57,14 @@
     ]
   },
   "index.html": {
-    "file": "assets/index-C9fPU4bV.js",
+    "file": "assets/index-BFjeS9FG.js",
     "name": "index",
     "src": "index.html",
     "isEntry": true,
     "imports": [
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
-      "_connectionStore-DI-LYcct.js"
+      "_connectionStore-CCopJeU7.js"
     ],
     "dynamicImports": [
       "src/components/copilot/CopilotPanel.tsx",
@@ -129,7 +129,7 @@
     "src": "node_modules/@fontsource-variable/jetbrains-mono/files/jetbrains-mono-latin-wght-normal.woff2"
   },
   "src/components/copilot/CopilotPanel.tsx": {
-    "file": "assets/CopilotPanel-BDZzDmVy.js",
+    "file": "assets/CopilotPanel-C9ojQ_8d.js",
     "name": "CopilotPanel",
     "src": "src/components/copilot/CopilotPanel.tsx",
     "isDynamicEntry": true,
@@ -141,13 +141,13 @@
     ]
   },
   "src/lib/demo/install.ts": {
-    "file": "assets/install-BvB40Zk0.js",
+    "file": "assets/install-C019EM5j.js",
     "name": "install",
     "src": "src/lib/demo/install.ts",
     "isDynamicEntry": true
   },
   "src/pages/Cron.tsx": {
-    "file": "assets/Cron-9hndZ-Z5.js",
+    "file": "assets/Cron-Bbf7mRaK.js",
     "name": "Cron",
     "src": "src/pages/Cron.tsx",
     "isDynamicEntry": true,
@@ -155,11 +155,11 @@
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/Dlq.tsx": {
-    "file": "assets/Dlq-BCUVh_NO.js",
+    "file": "assets/Dlq-Bs1pupY2.js",
     "name": "Dlq",
     "src": "src/pages/Dlq.tsx",
     "isDynamicEntry": true,
@@ -168,11 +168,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/Jobs.tsx": {
-    "file": "assets/Jobs-ovYRwmwi.js",
+    "file": "assets/Jobs-C2HYkZXi.js",
     "name": "Jobs",
     "src": "src/pages/Jobs.tsx",
     "isDynamicEntry": true,
@@ -184,7 +184,7 @@
     ]
   },
   "src/pages/Logs.tsx": {
-    "file": "assets/Logs-CjM7MNYN.js",
+    "file": "assets/Logs-yn92V_T8.js",
     "name": "Logs",
     "src": "src/pages/Logs.tsx",
     "isDynamicEntry": true,
@@ -193,11 +193,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/Metrics.tsx": {
-    "file": "assets/Metrics-BodjiKpf.js",
+    "file": "assets/Metrics-CbscCpvx.js",
     "name": "Metrics",
     "src": "src/pages/Metrics.tsx",
     "isDynamicEntry": true,
@@ -207,7 +207,7 @@
     ]
   },
   "src/pages/Overview.tsx": {
-    "file": "assets/Overview-AwCA3XI2.js",
+    "file": "assets/Overview-BOuOPWsb.js",
     "name": "Overview",
     "src": "src/pages/Overview.tsx",
     "isDynamicEntry": true,
@@ -217,7 +217,7 @@
     ]
   },
   "src/pages/QueueDetail.tsx": {
-    "file": "assets/QueueDetail-BtiN0s3b.js",
+    "file": "assets/QueueDetail-BSUH0Nl6.js",
     "name": "QueueDetail",
     "src": "src/pages/QueueDetail.tsx",
     "isDynamicEntry": true,
@@ -229,7 +229,7 @@
     ]
   },
   "src/pages/Queues.tsx": {
-    "file": "assets/Queues-LrodynCj.js",
+    "file": "assets/Queues-BEQlaWVc.js",
     "name": "Queues",
     "src": "src/pages/Queues.tsx",
     "isDynamicEntry": true,
@@ -237,11 +237,11 @@
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/S3Backup.tsx": {
-    "file": "assets/S3Backup-et1PcCC0.js",
+    "file": "assets/S3Backup-BmRt-Z8V.js",
     "name": "S3Backup",
     "src": "src/pages/S3Backup.tsx",
     "isDynamicEntry": true,
@@ -251,20 +251,20 @@
     ]
   },
   "src/pages/Settings.tsx": {
-    "file": "assets/Settings-CeRZgZU6.js",
+    "file": "assets/Settings-46jsrfhd.js",
     "name": "Settings",
     "src": "src/pages/Settings.tsx",
     "isDynamicEntry": true,
     "imports": [
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
-      "_connectionStore-DI-LYcct.js",
+      "_connectionStore-CCopJeU7.js",
       "index.html",
       "_form-PtDLk33Z.js"
     ]
   },
   "src/pages/Usage.tsx": {
-    "file": "assets/Usage-CHCg6VNy.js",
+    "file": "assets/Usage-BFLZC7pV.js",
     "name": "Usage",
     "src": "src/pages/Usage.tsx",
     "isDynamicEntry": true,
@@ -274,7 +274,7 @@
     ]
   },
   "src/pages/Workers.tsx": {
-    "file": "assets/Workers-CVfx3TK-.js",
+    "file": "assets/Workers-DBXrLvfS.js",
     "name": "Workers",
     "src": "src/pages/Workers.tsx",
     "isDynamicEntry": true,
@@ -282,11 +282,11 @@
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/AddJob.tsx": {
-    "file": "assets/AddJob-CMIT6e17.js",
+    "file": "assets/AddJob-vk3jh1Zk.js",
     "name": "AddJob",
     "src": "src/pages/control/AddJob.tsx",
     "isDynamicEntry": true,
@@ -298,7 +298,7 @@
     ]
   },
   "src/pages/control/Benchmark.tsx": {
-    "file": "assets/Benchmark-Dq1-vJ2k.js",
+    "file": "assets/Benchmark-CpViF2ZC.js",
     "name": "Benchmark",
     "src": "src/pages/control/Benchmark.tsx",
     "isDynamicEntry": true,
@@ -308,11 +308,11 @@
       "index.html",
       "_form-PtDLk33Z.js",
       "_AreaChart-DzUXW8u3.js",
-      "_CopyButton-XT7ykzf5.js"
+      "_CopyButton-BC6QECSJ.js"
     ]
   },
   "src/pages/control/CronManager.tsx": {
-    "file": "assets/CronManager-BQupx6wZ.js",
+    "file": "assets/CronManager-CeNUeoOc.js",
     "name": "CronManager",
     "src": "src/pages/control/CronManager.tsx",
     "isDynamicEntry": true,
@@ -321,11 +321,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/Database.tsx": {
-    "file": "assets/Database-Difs7xYV.js",
+    "file": "assets/Database--bK9pYZF.js",
     "name": "Database",
     "src": "src/pages/control/Database.tsx",
     "isDynamicEntry": true,
@@ -334,12 +334,12 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js",
-      "_CopyButton-XT7ykzf5.js"
+      "_Pagination-Bj1z6OlD.js",
+      "_CopyButton-BC6QECSJ.js"
     ]
   },
   "src/pages/control/Diagnostics.tsx": {
-    "file": "assets/Diagnostics-BzVDq9CH.js",
+    "file": "assets/Diagnostics-CGJPsWZQ.js",
     "name": "Diagnostics",
     "src": "src/pages/control/Diagnostics.tsx",
     "isDynamicEntry": true,
@@ -350,7 +350,7 @@
     ]
   },
   "src/pages/control/DlqControl.tsx": {
-    "file": "assets/DlqControl-Cu2i1oq5.js",
+    "file": "assets/DlqControl-BLKVzYQC.js",
     "name": "DlqControl",
     "src": "src/pages/control/DlqControl.tsx",
     "isDynamicEntry": true,
@@ -359,11 +359,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/DlqPro.tsx": {
-    "file": "assets/DlqPro-HBrCftLD.js",
+    "file": "assets/DlqPro-D8SmIQUs.js",
     "name": "DlqPro",
     "src": "src/pages/control/DlqPro.tsx",
     "isDynamicEntry": true,
@@ -372,11 +372,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/Flows.tsx": {
-    "file": "assets/Flows-D3Bvkmd6.js",
+    "file": "assets/Flows-BOogljnP.js",
     "name": "Flows",
     "src": "src/pages/control/Flows.tsx",
     "isDynamicEntry": true,
@@ -387,7 +387,7 @@
     ]
   },
   "src/pages/control/JobInspector.tsx": {
-    "file": "assets/JobInspector-B7zEuFhM.js",
+    "file": "assets/JobInspector-Cp4ZuQGI.js",
     "name": "JobInspector",
     "src": "src/pages/control/JobInspector.tsx",
     "isDynamicEntry": true,
@@ -396,12 +396,12 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_CopyButton-XT7ykzf5.js",
+      "_CopyButton-BC6QECSJ.js",
       "_jobActions-CuOdMglt.js"
     ]
   },
   "src/pages/control/JobsPro.tsx": {
-    "file": "assets/JobsPro-DNZivuzq.js",
+    "file": "assets/JobsPro-D0uclU0B.js",
     "name": "JobsPro",
     "src": "src/pages/control/JobsPro.tsx",
     "isDynamicEntry": true,
@@ -410,12 +410,12 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js",
+      "_Pagination-Bj1z6OlD.js",
       "_jobActions-CuOdMglt.js"
     ]
   },
   "src/pages/control/LogsPro.tsx": {
-    "file": "assets/LogsPro-P73LCkap.js",
+    "file": "assets/LogsPro-DSiV8Ajj.js",
     "name": "LogsPro",
     "src": "src/pages/control/LogsPro.tsx",
     "isDynamicEntry": true,
@@ -424,22 +424,22 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/McpServer.tsx": {
-    "file": "assets/McpServer-CUK20-uN.js",
+    "file": "assets/McpServer-CNt7kssG.js",
     "name": "McpServer",
     "src": "src/pages/control/McpServer.tsx",
     "isDynamicEntry": true,
     "imports": [
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_CopyButton-XT7ykzf5.js"
+      "_CopyButton-BC6QECSJ.js"
     ]
   },
   "src/pages/control/MetricsPro.tsx": {
-    "file": "assets/MetricsPro-CqcH6gJp.js",
+    "file": "assets/MetricsPro-CBiFDVne.js",
     "name": "MetricsPro",
     "src": "src/pages/control/MetricsPro.tsx",
     "isDynamicEntry": true,
@@ -447,12 +447,12 @@
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_Pagination-Cd6lHj2E.js",
+      "_Pagination-Bj1z6OlD.js",
       "_AreaChart-DzUXW8u3.js"
     ]
   },
   "src/pages/control/QueueControl.tsx": {
-    "file": "assets/QueueControl-D7J1JObu.js",
+    "file": "assets/QueueControl-Bl4l9dT6.js",
     "name": "QueueControl",
     "src": "src/pages/control/QueueControl.tsx",
     "isDynamicEntry": true,
@@ -464,7 +464,7 @@
     ]
   },
   "src/pages/control/QueuesOverview.tsx": {
-    "file": "assets/QueuesOverview-DrYjyped.js",
+    "file": "assets/QueuesOverview-BBjcyzz2.js",
     "name": "QueuesOverview",
     "src": "src/pages/control/QueuesOverview.tsx",
     "isDynamicEntry": true,
@@ -472,24 +472,24 @@
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
       "index.html",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/S3BackupPro.tsx": {
-    "file": "assets/S3BackupPro-BEo_EVAO.js",
+    "file": "assets/S3BackupPro-Dsq0erDm.js",
     "name": "S3BackupPro",
     "src": "src/pages/control/S3BackupPro.tsx",
     "isDynamicEntry": true,
     "imports": [
       "_cn-CMFYpumL.js",
       "_react-vendor-CHIHtdAC.js",
-      "_connectionStore-DI-LYcct.js",
+      "_connectionStore-CCopJeU7.js",
       "index.html",
       "_form-PtDLk33Z.js"
     ]
   },
   "src/pages/control/ServerControl.tsx": {
-    "file": "assets/ServerControl-BRLFRj7k.js",
+    "file": "assets/ServerControl-Bhr9FEXF.js",
     "name": "ServerControl",
     "src": "src/pages/control/ServerControl.tsx",
     "isDynamicEntry": true,
@@ -498,11 +498,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_CopyButton-XT7ykzf5.js"
+      "_CopyButton-BC6QECSJ.js"
     ]
   },
   "src/pages/control/UsagePro.tsx": {
-    "file": "assets/UsagePro-Cto9k5OI.js",
+    "file": "assets/UsagePro-D0k-82eG.js",
     "name": "UsagePro",
     "src": "src/pages/control/UsagePro.tsx",
     "isDynamicEntry": true,
@@ -512,7 +512,7 @@
     ]
   },
   "src/pages/control/Webhooks.tsx": {
-    "file": "assets/Webhooks-Cm3vZEp7.js",
+    "file": "assets/Webhooks-DChTcBSv.js",
     "name": "Webhooks",
     "src": "src/pages/control/Webhooks.tsx",
     "isDynamicEntry": true,
@@ -521,11 +521,11 @@
       "_react-vendor-CHIHtdAC.js",
       "index.html",
       "_form-PtDLk33Z.js",
-      "_Pagination-Cd6lHj2E.js"
+      "_Pagination-Bj1z6OlD.js"
     ]
   },
   "src/pages/control/WorkersPro.tsx": {
-    "file": "assets/WorkersPro-BidtV_Bp.js",
+    "file": "assets/WorkersPro-B6I9Ilbq.js",
     "name": "WorkersPro",
     "src": "src/pages/control/WorkersPro.tsx",
     "isDynamicEntry": true,

package/dist/assets/{AddJob-CMIT6e17.js → AddJob-vk3jh1Zk.js}

@@ -1,3 +1,3 @@
-import{r as e}from"./cn-CMFYpumL.js";import{m as t,t as n}from"./react-vendor-CHIHtdAC.js";import{D as r,E as i,T as a,g as o,j as s,v as c}from"./index-C9fPU4bV.js";import{n as l,o as u,t as d}from"./form-PtDLk33Z.js";var f=e(t(),1),p=n();function m(){let{data:e}=s(()=>o.queues(),[],{intervalMs:3e4}),[t,n]=(0,f.useState)(``),[u,m]=(0,f.useState)(`{
+import{r as e}from"./cn-CMFYpumL.js";import{m as t,t as n}from"./react-vendor-CHIHtdAC.js";import{C as r,O as i,S as a,Z as o,h as s,w as c}from"./index-BFjeS9FG.js";import{n as l,o as u,t as d}from"./form-PtDLk33Z.js";var f=e(t(),1),p=n();function m(){let{data:e}=i(()=>o.queues(),[],{intervalMs:3e4}),[t,n]=(0,f.useState)(``),[u,m]=(0,f.useState)(`{
   "hello": "world"
-}`),[g,_]=(0,f.useState)(`1`),[v,y]=(0,f.useState)(``),[b,x]=(0,f.useState)(``),[S,C]=(0,f.useState)(``),[w,T]=(0,f.useState)(``),[E,D]=(0,f.useState)(``),[O,k]=(0,f.useState)(``),[A,j]=(0,f.useState)(!1),[M,N]=(0,f.useState)(!1),[P,F]=(0,f.useState)(!1),[I,L]=(0,f.useState)(!1),[R,z]=(0,f.useState)(!1),[B,V]=(0,f.useState)(null),[H,U]=(0,f.useState)(null),W=e=>{let t=Number(e);return e.trim()!==``&&Number.isFinite(t)?t:void 0},G=async()=>{if(V(null),U(null),!t.trim()){V({ok:!1,msg:`Choose a queue`});return}let e;try{e=JSON.parse(u)}catch(e){U(`Invalid JSON: ${e.message}`);return}let n={data:e,priority:W(v),delay:W(b),maxAttempts:W(S),backoff:W(w),timeout:W(E),jobId:O.trim()||void 0,removeOnComplete:A||void 0,removeOnFail:M||void 0,durable:P||void 0,lifo:I||void 0},r=W(g)??1;if(!Number.isInteger(r)||r<1){V({ok:!1,msg:`Count must be an integer of at least 1`});return}if(r>1e4){V({ok:!1,msg:`Count must be 10000 or fewer`});return}z(!0);try{if(r===1)V({ok:!0,msg:`Created job ${(await o.addJob(t,n)).id}`});else{let e=await o.addJobsBulk(t,Array.from({length:r},()=>n)),i=new Set(e.ids).size;V({ok:!0,msg:`Created ${i} job${i===1?``:`s`}`})}}catch(e){V({ok:!1,msg:e.message})}finally{z(!1)}};return(0,p.jsxs)(`div`,{children:[(0,p.jsx)(c,{title:`Add Job`,description:`Enqueue a job with full options.`}),(0,p.jsxs)(`form`,{className:`grid grid-cols-1 gap-6 lg:grid-cols-2`,onSubmit:e=>{e.preventDefault(),G()},children:[(0,p.jsxs)(a,{children:[(0,p.jsx)(i,{title:`Job`}),(0,p.jsxs)(`div`,{className:`flex flex-col gap-4`,children:[(0,p.jsxs)(d,{label:`Queue`,children:[(0,p.jsx)(l,{list:`queue-options`,value:t,onChange:e=>n(e.target.value),placeholder:`queue name (existing or new)`}),(0,p.jsx)(`datalist`,{id:`queue-options`,children:(e?.queues??[]).map(e=>(0,p.jsx)(`option`,{value:e.name},e.name))})]}),(0,p.jsxs)(`div`,{children:[(0,p.jsx)(d,{label:`Data (JSON)`,children:(0,p.jsx)(`textarea`,{value:u,onChange:e=>m(e.target.value),spellCheck:!1,rows:7,className:`w-full rounded-lg border border-line bg-surface-2 p-3 font-mono text-sm text-fg focus:border-accent/60 focus:outline-none focus:ring-2 focus:ring-accent/30`})}),H&&(0,p.jsx)(`p`,{className:`mt-2 text-xs text-danger`,children:H})]})]})]}),(0,p.jsxs)(a,{children:[(0,p.jsx)(i,{title:`Options`}),(0,p.jsxs)(`div`,{className:`grid grid-cols-2 gap-4 md:grid-cols-3`,children:[(0,p.jsx)(d,{label:`Priority`,children:(0,p.jsx)(l,{type:`number`,value:v,onChange:e=>y(e.target.value),placeholder:`0`})}),(0,p.jsx)(d,{label:`Delay (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:b,onChange:e=>x(e.target.value),placeholder:`0`})}),(0,p.jsx)(d,{label:`Max attempts`,children:(0,p.jsx)(l,{type:`number`,min:1,value:S,onChange:e=>C(e.target.value),placeholder:`3`})}),(0,p.jsx)(d,{label:`Backoff (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:w,onChange:e=>T(e.target.value),placeholder:`1000`})}),(0,p.jsx)(d,{label:`Timeout (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:E,onChange:e=>D(e.target.value),placeholder:`—`})}),(0,p.jsx)(d,{label:`Custom job ID`,children:(0,p.jsx)(l,{value:O,onChange:e=>k(e.target.value),placeholder:`idempotency key`})})]}),(0,p.jsxs)(`div`,{className:`mt-4 flex flex-wrap gap-6`,children:[(0,p.jsx)(h,{label:`removeOnComplete`,checked:A,onChange:j}),(0,p.jsx)(h,{label:`removeOnFail`,checked:M,onChange:N}),(0,p.jsx)(h,{label:`durable`,checked:P,onChange:F}),(0,p.jsx)(h,{label:`lifo`,checked:I,onChange:L})]})]}),(0,p.jsxs)(`div`,{className:`flex flex-wrap items-end gap-3 lg:col-span-2`,children:[(0,p.jsx)(`div`,{className:`w-28`,children:(0,p.jsx)(d,{label:`Count`,children:(0,p.jsx)(l,{type:`number`,min:1,value:g,onChange:e=>_(e.target.value)})})}),(0,p.jsx)(r,{type:`submit`,variant:`accent`,disabled:R,children:R?`Adding…`:`Add job`}),B&&(0,p.jsx)(`span`,{className:B.ok?`text-sm text-success`:`text-sm text-danger`,children:B.msg})]})]})]})}function h({label:e,checked:t,onChange:n}){return(0,p.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,p.jsx)(u,{checked:t,onChange:n,label:e}),(0,p.jsx)(`span`,{className:`font-mono text-xs text-muted`,children:e})]})}export{m as AddJob};
+}`),[g,_]=(0,f.useState)(`1`),[v,y]=(0,f.useState)(``),[b,x]=(0,f.useState)(``),[S,C]=(0,f.useState)(``),[w,T]=(0,f.useState)(``),[E,D]=(0,f.useState)(``),[O,k]=(0,f.useState)(``),[A,j]=(0,f.useState)(!1),[M,N]=(0,f.useState)(!1),[P,F]=(0,f.useState)(!1),[I,L]=(0,f.useState)(!1),[R,z]=(0,f.useState)(!1),[B,V]=(0,f.useState)(null),[H,U]=(0,f.useState)(null),W=e=>{let t=Number(e);return e.trim()!==``&&Number.isFinite(t)?t:void 0},G=async()=>{if(V(null),U(null),!t.trim()){V({ok:!1,msg:`Choose a queue`});return}let e;try{e=JSON.parse(u)}catch(e){U(`Invalid JSON: ${e.message}`);return}let n={data:e,priority:W(v),delay:W(b),maxAttempts:W(S),backoff:W(w),timeout:W(E),jobId:O.trim()||void 0,removeOnComplete:A||void 0,removeOnFail:M||void 0,durable:P||void 0,lifo:I||void 0},r=W(g)??1;if(!Number.isInteger(r)||r<1){V({ok:!1,msg:`Count must be an integer of at least 1`});return}if(r>1e4){V({ok:!1,msg:`Count must be 10000 or fewer`});return}z(!0);try{if(r===1)V({ok:!0,msg:`Created job ${(await o.addJob(t,n)).id}`});else{let e=await o.addJobsBulk(t,Array.from({length:r},()=>n)),i=new Set(e.ids).size;V({ok:!0,msg:`Created ${i} job${i===1?``:`s`}`})}}catch(e){V({ok:!1,msg:e.message})}finally{z(!1)}};return(0,p.jsxs)(`div`,{children:[(0,p.jsx)(s,{title:`Add Job`,description:`Enqueue a job with full options.`}),(0,p.jsxs)(`form`,{className:`grid grid-cols-1 gap-6 lg:grid-cols-2`,onSubmit:e=>{e.preventDefault(),G()},children:[(0,p.jsxs)(a,{children:[(0,p.jsx)(r,{title:`Job`}),(0,p.jsxs)(`div`,{className:`flex flex-col gap-4`,children:[(0,p.jsxs)(d,{label:`Queue`,children:[(0,p.jsx)(l,{list:`queue-options`,value:t,onChange:e=>n(e.target.value),placeholder:`queue name (existing or new)`}),(0,p.jsx)(`datalist`,{id:`queue-options`,children:(e?.queues??[]).map(e=>(0,p.jsx)(`option`,{value:e.name},e.name))})]}),(0,p.jsxs)(`div`,{children:[(0,p.jsx)(d,{label:`Data (JSON)`,children:(0,p.jsx)(`textarea`,{value:u,onChange:e=>m(e.target.value),spellCheck:!1,rows:7,className:`w-full rounded-lg border border-line bg-surface-2 p-3 font-mono text-sm text-fg focus:border-accent/60 focus:outline-none focus:ring-2 focus:ring-accent/30`})}),H&&(0,p.jsx)(`p`,{className:`mt-2 text-xs text-danger`,children:H})]})]})]}),(0,p.jsxs)(a,{children:[(0,p.jsx)(r,{title:`Options`}),(0,p.jsxs)(`div`,{className:`grid grid-cols-2 gap-4 md:grid-cols-3`,children:[(0,p.jsx)(d,{label:`Priority`,children:(0,p.jsx)(l,{type:`number`,value:v,onChange:e=>y(e.target.value),placeholder:`0`})}),(0,p.jsx)(d,{label:`Delay (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:b,onChange:e=>x(e.target.value),placeholder:`0`})}),(0,p.jsx)(d,{label:`Max attempts`,children:(0,p.jsx)(l,{type:`number`,min:1,value:S,onChange:e=>C(e.target.value),placeholder:`3`})}),(0,p.jsx)(d,{label:`Backoff (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:w,onChange:e=>T(e.target.value),placeholder:`1000`})}),(0,p.jsx)(d,{label:`Timeout (ms)`,children:(0,p.jsx)(l,{type:`number`,min:0,value:E,onChange:e=>D(e.target.value),placeholder:`—`})}),(0,p.jsx)(d,{label:`Custom job ID`,children:(0,p.jsx)(l,{value:O,onChange:e=>k(e.target.value),placeholder:`idempotency key`})})]}),(0,p.jsxs)(`div`,{className:`mt-4 flex flex-wrap gap-6`,children:[(0,p.jsx)(h,{label:`removeOnComplete`,checked:A,onChange:j}),(0,p.jsx)(h,{label:`removeOnFail`,checked:M,onChange:N}),(0,p.jsx)(h,{label:`durable`,checked:P,onChange:F}),(0,p.jsx)(h,{label:`lifo`,checked:I,onChange:L})]})]}),(0,p.jsxs)(`div`,{className:`flex flex-wrap items-end gap-3 lg:col-span-2`,children:[(0,p.jsx)(`div`,{className:`w-28`,children:(0,p.jsx)(d,{label:`Count`,children:(0,p.jsx)(l,{type:`number`,min:1,value:g,onChange:e=>_(e.target.value)})})}),(0,p.jsx)(c,{type:`submit`,variant:`accent`,disabled:R,children:R?`Adding…`:`Add job`}),B&&(0,p.jsx)(`span`,{className:B.ok?`text-sm text-success`:`text-sm text-danger`,children:B.msg})]})]})]})}function h({label:e,checked:t,onChange:n}){return(0,p.jsxs)(`div`,{className:`flex items-center gap-2`,children:[(0,p.jsx)(u,{checked:t,onChange:n,label:e}),(0,p.jsx)(`span`,{className:`font-mono text-xs text-muted`,children:e})]})}export{m as AddJob};