codebase-onboarder 0.5.0 → 0.7.0

package/public/js/serverSettings.js

@@ -6,184 +6,173 @@
 // app.js is the drawer choreography — one scrim at a time, Escape to close —
 // which is why it returns open/close/isOpen instead of wiring the topbar
 // button itself.
-
 import { fetchServerSettings, updateServerSettings, rotateServerAccessKey, logoutRemoteSession } from '/js/api.js';
-
 // A function declaration, not a const arrow: the import-time DOM check in
 // tests/frontend.test.js blanks top-level function bodies but reads const
 // bodies, and this module must stay importable from Node.
 function $(id) {
-  return document.getElementById(id);
+    return document.getElementById(id);
 }
-
 const MODE_NOTES = {
-  local: 'Local mode answers only this machine. No key, no network — the safe default.',
-  'self-hosted': 'Self-hosted answers whoever can reach the port, so every API call needs the access key below.',
+    local: 'Local mode answers only this machine. No key, no network — the safe default.',
+    'self-hosted': 'Self-hosted answers whoever can reach the port, so every API call needs the access key below.',
 };
-
 export function createServerDrawer(options = {}) {
-  // Pulled out of the parameter list on purpose: the front-end static check
-  // in tests/frontend.test.js only understands plain params, and `toast` must
-  // show up as a declaration, not a dangling call.
-  const toast = typeof options.toast === 'function' ? options.toast : () => {};
-  const dom = {};
-  [
-    'serverDrawer', 'serverScrim', 'serverClose', 'serverModeNote', 'srvMode', 'srvHost', 'srvPort',
-    'srvDomain', 'srvDomainField', 'srvHttps', 'srvHttpsField', 'srvHttpsStatus', 'srvAutoOpen', 'srvKeySection', 'srvKeyMasked', 'srvRotate', 'srvLogout',
-    'srvFreshKeyRow', 'srvFreshKey', 'srvCopyKey', 'srvKeyHint', 'srvName', 'srvEmail',
-    'srvTunnelCloudflare', 'srvTunnelCloudflareStatus', 'srvTunnelTailscale', 'srvTunnelTailscaleStatus',
-    'srvSave', 'srvStatus', 'srvConfigPath',
-  ].forEach((id) => (dom[id] = $(id)));
-
-  let current = null; // the last settings body the server sent
-
-  function status(text, cls = '') {
-    dom.srvStatus.className = 'drawer-status' + (cls ? ' ' + cls : '');
-    dom.srvStatus.textContent = text;
-  }
-
-  function tunnelLine(el, t) {
-    if (!t) { el.textContent = ''; return; }
-    if (!t.enabled) {
-      el.textContent = t.installed ? 'Off.' : `Off — and ${t.install || 'the binary is not installed'}.`;
-      return;
+    // Pulled out of the parameter list on purpose: the front-end static check
+    // in tests/frontend.test.js only understands plain params, and `toast` must
+    // show up as a declaration, not a dangling call.
+    const toast = typeof options.toast === 'function' ? options.toast : (..._args) => { };
+    const dom = {};
+    [
+        'serverDrawer', 'serverScrim', 'serverClose', 'serverModeNote', 'srvMode', 'srvHost', 'srvPort',
+        'srvDomain', 'srvDomainField', 'srvHttps', 'srvHttpsField', 'srvHttpsStatus', 'srvAutoOpen', 'srvKeySection', 'srvKeyMasked', 'srvRotate', 'srvLogout',
+        'srvFreshKeyRow', 'srvFreshKey', 'srvCopyKey', 'srvKeyHint', 'srvName', 'srvEmail',
+        'srvTunnelCloudflare', 'srvTunnelCloudflareStatus', 'srvTunnelTailscale', 'srvTunnelTailscaleStatus',
+        'srvSave', 'srvStatus', 'srvConfigPath',
+    ].forEach((id) => (dom[id] = $(id)));
+    let current = null; // the last settings body the server sent
+    function status(text, cls = '') {
+        dom.srvStatus.className = 'drawer-status' + (cls ? ' ' + cls : '');
+        dom.srvStatus.textContent = text;
     }
-    el.textContent = t.installed
-      ? `On. Start it with: ${t.command}`
-      : `On, but the binary is missing — ${t.install || 'install it first'}.`;
-  }
-
-  function render(data) {
-    current = data;
-    const s = data.settings;
-    dom.srvMode.value = s.mode;
-    dom.serverModeNote.textContent = MODE_NOTES[s.mode] || '';
-    dom.srvHost.value = s.host;
-    dom.srvPort.value = s.port;
-    dom.srvDomain.value = s.domain || '';
-    dom.srvHttps.checked = Boolean(s.https);
-    dom.srvHttpsStatus.textContent = data.https?.caddyInstalled
-      ? `Caddy ${data.https.caddyVersion || 'installed'}. ${s.https ? 'Run `onboarder https setup` after saving.' : 'Enable HTTPS above, save, then run the command.'}`
-      : 'Caddy is not installed. Ubuntu: sudo apt install caddy; macOS: brew install caddy.';
-    dom.srvAutoOpen.checked = Boolean(s.autoOpen);
-    dom.srvName.value = s.account?.name || '';
-    dom.srvEmail.value = s.account?.email || '';
-    dom.srvTunnelCloudflare.checked = Boolean(s.tunnel?.cloudflare);
-    dom.srvTunnelTailscale.checked = Boolean(s.tunnel?.tailscale);
-    tunnelLine(dom.srvTunnelCloudflareStatus, data.tunnels?.cloudflare);
-    tunnelLine(dom.srvTunnelTailscaleStatus, data.tunnels?.tailscale);
-    dom.srvConfigPath.textContent = `Config file: ${data.configFile}`;
-    dom.srvKeyMasked.value = s.accessKeyMasked || (s.hasAccessKey ? '' : '(none set — the API refuses every call)');
-    dom.srvKeyHint.textContent = s.hasAccessKey
-      ? 'Remote browsers sign in once; the key is exchanged for a secure HTTP-only session.'
-      : 'No key is set. Generate one before remote access is possible.';
-    applyModeVisibility();
-  }
-
-  // Mode drives which rows even make sense: local wipes the network/security
-  // fields in the schema, so asking for them here would be collecting lies.
-  function applyModeVisibility() {
-    const remote = dom.srvMode.value === 'self-hosted';
-    dom.srvKeySection.hidden = !remote;
-    dom.srvDomainField.hidden = !remote;
-    dom.srvHttpsField.hidden = !remote || !dom.srvDomain.value.trim();
-    dom.serverModeNote.textContent = MODE_NOTES[dom.srvMode.value] || '';
-  }
-
-  async function open() {
-    dom.serverDrawer.hidden = false;
-    dom.serverScrim.hidden = false;
-    dom.srvFreshKeyRow.hidden = true;
-    status('Reading the server…');
-    try {
-      render(await fetchServerSettings());
-      status('');
-    } catch (err) {
-      status(err.message, 'err');
+    function tunnelLine(el, t) {
+        if (!t) {
+            el.textContent = '';
+            return;
+        }
+        if (!t.enabled) {
+            el.textContent = t.installed ? 'Off.' : `Off — and ${t.install || 'the binary is not installed'}.`;
+            return;
+        }
+        el.textContent = t.installed
+            ? `On. Start it with: ${t.command}`
+            : `On, but the binary is missing — ${t.install || 'install it first'}.`;
     }
-  }
-
-  function close() {
-    dom.serverDrawer.hidden = true;
-    dom.serverScrim.hidden = true;
-  }
-
-
-  async function save() {
-    const patch = {
-      mode: dom.srvMode.value,
-      host: dom.srvHost.value.trim() || '127.0.0.1',
-      port: Number(dom.srvPort.value),
-      autoOpen: dom.srvAutoOpen.checked,
-      account: { name: dom.srvName.value.trim(), email: dom.srvEmail.value.trim() },
-      tunnel: { cloudflare: dom.srvTunnelCloudflare.checked, tailscale: dom.srvTunnelTailscale.checked },
-    };
-    if (patch.mode === 'self-hosted') {
-      patch.domain = dom.srvDomain.value.trim();
-      patch.https = dom.srvHttps.checked;
+    function render(data) {
+        current = data;
+        const s = data.settings;
+        dom.srvMode.value = s.mode;
+        dom.serverModeNote.textContent = MODE_NOTES[s.mode] || '';
+        dom.srvHost.value = s.host;
+        dom.srvPort.value = s.port;
+        dom.srvDomain.value = s.domain || '';
+        dom.srvHttps.checked = Boolean(s.https);
+        dom.srvHttpsStatus.textContent = data.https?.caddyInstalled
+            ? `Caddy ${data.https.caddyVersion || 'installed'}. ${s.https ? 'Run `onboarder https setup` after saving.' : 'Enable HTTPS above, save, then run the command.'}`
+            : 'Caddy is not installed. Ubuntu: sudo apt install caddy; macOS: brew install caddy.';
+        dom.srvAutoOpen.checked = Boolean(s.autoOpen);
+        dom.srvName.value = s.account?.name || '';
+        dom.srvEmail.value = s.account?.email || '';
+        dom.srvTunnelCloudflare.checked = Boolean(s.tunnel?.cloudflare);
+        dom.srvTunnelTailscale.checked = Boolean(s.tunnel?.tailscale);
+        tunnelLine(dom.srvTunnelCloudflareStatus, data.tunnels?.cloudflare);
+        tunnelLine(dom.srvTunnelTailscaleStatus, data.tunnels?.tailscale);
+        dom.srvConfigPath.textContent = `Config file: ${data.configFile}`;
+        dom.srvKeyMasked.value = s.accessKeyMasked || (s.hasAccessKey ? '' : '(none set — the API refuses every call)');
+        dom.srvKeyHint.textContent = s.hasAccessKey
+            ? 'Remote browsers sign in once; the key is exchanged for a secure HTTP-only session.'
+            : 'No key is set. Generate one before remote access is possible.';
+        applyModeVisibility();
+    }
+    // Mode drives which rows even make sense: local wipes the network/security
+    // fields in the schema, so asking for them here would be collecting lies.
+    function applyModeVisibility() {
+        const remote = dom.srvMode.value === 'self-hosted';
+        dom.srvKeySection.hidden = !remote;
+        dom.srvDomainField.hidden = !remote;
+        dom.srvHttpsField.hidden = !remote || !dom.srvDomain.value.trim();
+        dom.serverModeNote.textContent = MODE_NOTES[dom.srvMode.value] || '';
     }
-    status('Saving…');
-    try {
-      const data = await updateServerSettings(patch);
-      render({ ...current, settings: data.settings });
-      const restart = (data.restartRequired || []).join(' and ');
-      const httpsChanged = (data.restartRequired || []).some((key) => key === 'domain' || key === 'https');
-      status(
-        httpsChanged
-          ? 'Saved. Run `onboarder https setup` to validate the Caddyfile and reload TLS.'
-          : restart
-            ? `Saved. The ${restart} change takes effect after a restart — the running socket cannot move.`
-            : 'Saved — live already.',
-        'ok',
-      );
-    } catch (err) {
-      status(err.message, 'err');
+    async function open() {
+        dom.serverDrawer.hidden = false;
+        dom.serverScrim.hidden = false;
+        dom.srvFreshKeyRow.hidden = true;
+        status('Reading the server…');
+        try {
+            render(await fetchServerSettings());
+            status('');
+        }
+        catch (err) {
+            status(err.message, 'err');
+        }
     }
-  }
-
-  async function rotate() {
-    status('Rotating…');
-    try {
-      const data = await rotateServerAccessKey();
-      // The server refreshes this browser's signed session as part of rotation.
-      // The raw key is shown once for copying elsewhere, never stored locally.
-      render({ ...current, settings: data.settings });
-      dom.srvFreshKey.value = data.accessKey;
-      dom.srvFreshKeyRow.hidden = false; // render() does not know about the reveal
-      status('Rotated. The old key is dead; update every other device.', 'ok');
-    } catch (err) {
-      status(err.message, 'err');
+    function close() {
+        dom.serverDrawer.hidden = true;
+        dom.serverScrim.hidden = true;
     }
-  }
-
-  async function signOut() {
-    try {
-      await logoutRemoteSession();
-      location.replace('/');
-    } catch (err) {
-      status(err.message, 'err');
+    async function save() {
+        const patch = {
+            mode: dom.srvMode.value,
+            host: dom.srvHost.value.trim() || '127.0.0.1',
+            port: Number(dom.srvPort.value),
+            autoOpen: dom.srvAutoOpen.checked,
+            account: { name: dom.srvName.value.trim(), email: dom.srvEmail.value.trim() },
+            tunnel: { cloudflare: dom.srvTunnelCloudflare.checked, tailscale: dom.srvTunnelTailscale.checked },
+        };
+        if (patch.mode === 'self-hosted') {
+            patch.domain = dom.srvDomain.value.trim();
+            patch.https = dom.srvHttps.checked;
+        }
+        status('Saving…');
+        try {
+            const data = await updateServerSettings(patch);
+            render({ ...current, settings: data.settings });
+            const restart = (data.restartRequired || []).join(' and ');
+            const httpsChanged = (data.restartRequired || []).some((key) => key === 'domain' || key === 'https');
+            status(httpsChanged
+                ? 'Saved. Run `onboarder https setup` to validate the Caddyfile and reload TLS.'
+                : restart
+                    ? `Saved. The ${restart} change takes effect after a restart — the running socket cannot move.`
+                    : 'Saved — live already.', 'ok');
+        }
+        catch (err) {
+            status(err.message, 'err');
+        }
     }
-  }
-
-  dom.srvMode.addEventListener('change', applyModeVisibility);
-  dom.srvDomain.addEventListener('input', applyModeVisibility);
-  dom.srvSave.addEventListener('click', save);
-  dom.srvRotate.addEventListener('click', rotate);
-  dom.srvLogout.addEventListener('click', signOut);
-  dom.serverClose.addEventListener('click', close);
-  dom.serverScrim.addEventListener('click', close);
-  dom.srvCopyKey.addEventListener('click', async () => {
-    try {
-      await navigator.clipboard.writeText(dom.srvFreshKey.value);
-      toast('Key copied');
-    } catch {
-      dom.srvFreshKey.select(); // clipboard refused — select so a Ctrl+C works
+    async function rotate() {
+        status('Rotating…');
+        try {
+            const data = await rotateServerAccessKey();
+            // The server refreshes this browser's signed session as part of rotation.
+            // The raw key is shown once for copying elsewhere, never stored locally.
+            render({ ...current, settings: data.settings });
+            dom.srvFreshKey.value = data.accessKey;
+            dom.srvFreshKeyRow.hidden = false; // render() does not know about the reveal
+            status('Rotated. The old key is dead; update every other device.', 'ok');
+        }
+        catch (err) {
+            status(err.message, 'err');
+        }
     }
-  });
-
-  return {
-    open,
-    close,
-    isOpen: () => !dom.serverDrawer.hidden,
-  };
+    async function signOut() {
+        try {
+            await logoutRemoteSession();
+            location.replace('/');
+        }
+        catch (err) {
+            status(err.message, 'err');
+        }
+    }
+    dom.srvMode.addEventListener('change', applyModeVisibility);
+    dom.srvDomain.addEventListener('input', applyModeVisibility);
+    dom.srvSave.addEventListener('click', save);
+    dom.srvRotate.addEventListener('click', rotate);
+    dom.srvLogout.addEventListener('click', signOut);
+    dom.serverClose.addEventListener('click', close);
+    dom.serverScrim.addEventListener('click', close);
+    dom.srvCopyKey.addEventListener('click', async () => {
+        try {
+            await navigator.clipboard.writeText(dom.srvFreshKey.value);
+            toast('Key copied');
+        }
+        catch {
+            dom.srvFreshKey.select(); // clipboard refused — select so a Ctrl+C works
+        }
+    });
+    return {
+        open,
+        close,
+        isOpen: () => !dom.serverDrawer.hidden,
+    };
 }
+//# sourceMappingURL=serverSettings.js.map

package/public/js/serverSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverSettings.js","sourceRoot":"","sources":["../../src/public/js/serverSettings.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,2EAA2E;AAC3E,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,iBAAiB;AAEjB,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEnH,0EAA0E;AAC1E,0EAA0E;AAC1E,0DAA0D;AAC1D,SAAS,CAAC,CAAC,EAAE;IACX,OAAO,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,8EAA8E;IACrF,aAAa,EAAE,+FAA+F;CAC/G,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAO,GAAwB,EAAE;IAClE,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,CAAC;IAChG,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC;QACE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;QAC/F,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW;QACtJ,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU;QAClF,qBAAqB,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,0BAA0B;QACpG,SAAS,EAAE,WAAW,EAAE,eAAe;KACxC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC,yCAAyC;IAE7D,SAAS,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE;QAC5B,GAAG,CAAC,SAAS,CAAC,SAAS,GAAG,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC;IACnC,CAAC;IAED,SAAS,UAAU,CAAC,EAAE,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,IAAI,6BAA6B,GAAG,CAAC;YACnG,OAAO;QACT,CAAC;QACD,EAAE,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS;YAC1B,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE;YACnC,CAAC,CAAC,mCAAmC,CAAC,CAAC,OAAO,IAAI,kBAAkB,GAAG,CAAC;IAC5E,CAAC;IAED,SAAS,MAAM,CAAC,IAAI;QAClB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QACxB,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,cAAc,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,GAAG,CAAC,cAAc,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc;YACzD,CAAC,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,WAAW,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,iDAAiD,EAAE;YACjK,CAAC,CAAC,oFAAoF,CAAC;QACzF,GAAG,CAAC,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9C,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,mBAAmB,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAChE,GAAG,CAAC,kBAAkB,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9D,UAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACpE,UAAU,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClE,GAAG,CAAC,aAAa,CAAC,WAAW,GAAG,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClE,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC;QAChH,GAAG,CAAC,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY;YACzC,CAAC,CAAC,oFAAoF;YACtF,CAAC,CAAC,+DAA+D,CAAC;QACpE,mBAAmB,EAAE,CAAC;IACxB,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,SAAS,mBAAmB;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACnC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC;QACpC,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClE,GAAG,CAAC,cAAc,CAAC,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,UAAU,IAAI;QACjB,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC;QAChC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC;QAC/B,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,IAAI,CAAC;QACjC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;YACpC,MAAM,CAAC,EAAE,CAAC,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACZ,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC;QAC/B,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC;IAChC,CAAC;IAGD,KAAK,UAAU,IAAI;QACjB,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK;YACvB,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,WAAW;YAC7C,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAC/B,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO;YACjC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;YAC7E,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,kBAAkB,CAAC,OAAO,EAAE;SACnG,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC1C,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QACrC,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;YACrG,MAAM,CACJ,YAAY;gBACV,CAAC,CAAC,8EAA8E;gBAChF,CAAC,CAAC,OAAO;oBACP,CAAC,CAAC,cAAc,OAAO,wEAAwE;oBAC/F,CAAC,CAAC,uBAAuB,EAC7B,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,UAAU,MAAM;QACnB,MAAM,CAAC,WAAW,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC3C,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChD,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YACvC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,0CAA0C;YAC7E,MAAM,CAAC,0DAA0D,EAAE,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,mBAAmB,EAAE,CAAC;YAC5B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC5D,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC7D,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3D,KAAK,CAAC,YAAY,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,+CAA+C;QAC3E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,KAAK;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM;KACvC,CAAC;AACJ,CAAC","sourcesContent":["import type { SettingsInput } from '../../shared/contracts.js';\nimport type { AppElements } from '/js/dom.js';\n// The Server drawer: the web face of the same config file the CLI wizard\n// writes. Reads come back with the key masked; saves send only the changed\n// keys; rotation reveals the new key once and signs this browser in.\n//\n// The module owns its own DOM and its own round-trips. What it borrows from\n// app.js is the drawer choreography — one scrim at a time, Escape to close —\n// which is why it returns open/close/isOpen instead of wiring the topbar\n// button itself.\n\nimport { fetchServerSettings, updateServerSettings, rotateServerAccessKey, logoutRemoteSession } from '/js/api.js';\n\n// A function declaration, not a const arrow: the import-time DOM check in\n// tests/frontend.test.js blanks top-level function bodies but reads const\n// bodies, and this module must stay importable from Node.\nfunction $(id) {\n  return document.getElementById(id);\n}\n\nconst MODE_NOTES = {\n  local: 'Local mode answers only this machine. No key, no network — the safe default.',\n  'self-hosted': 'Self-hosted answers whoever can reach the port, so every API call needs the access key below.',\n};\n\nexport function createServerDrawer(options: Record<string, any> = {}) {\n  // Pulled out of the parameter list on purpose: the front-end static check\n  // in tests/frontend.test.js only understands plain params, and `toast` must\n  // show up as a declaration, not a dangling call.\n  const toast = typeof options.toast === 'function' ? options.toast : (..._args: unknown[]) => {};\n  const dom: Partial<AppElements> = {};\n  [\n    'serverDrawer', 'serverScrim', 'serverClose', 'serverModeNote', 'srvMode', 'srvHost', 'srvPort',\n    'srvDomain', 'srvDomainField', 'srvHttps', 'srvHttpsField', 'srvHttpsStatus', 'srvAutoOpen', 'srvKeySection', 'srvKeyMasked', 'srvRotate', 'srvLogout',\n    'srvFreshKeyRow', 'srvFreshKey', 'srvCopyKey', 'srvKeyHint', 'srvName', 'srvEmail',\n    'srvTunnelCloudflare', 'srvTunnelCloudflareStatus', 'srvTunnelTailscale', 'srvTunnelTailscaleStatus',\n    'srvSave', 'srvStatus', 'srvConfigPath',\n  ].forEach((id) => (dom[id] = $(id)));\n\n  let current = null; // the last settings body the server sent\n\n  function status(text, cls = '') {\n    dom.srvStatus.className = 'drawer-status' + (cls ? ' ' + cls : '');\n    dom.srvStatus.textContent = text;\n  }\n\n  function tunnelLine(el, t) {\n    if (!t) { el.textContent = ''; return; }\n    if (!t.enabled) {\n      el.textContent = t.installed ? 'Off.' : `Off — and ${t.install || 'the binary is not installed'}.`;\n      return;\n    }\n    el.textContent = t.installed\n      ? `On. Start it with: ${t.command}`\n      : `On, but the binary is missing — ${t.install || 'install it first'}.`;\n  }\n\n  function render(data) {\n    current = data;\n    const s = data.settings;\n    dom.srvMode.value = s.mode;\n    dom.serverModeNote.textContent = MODE_NOTES[s.mode] || '';\n    dom.srvHost.value = s.host;\n    dom.srvPort.value = s.port;\n    dom.srvDomain.value = s.domain || '';\n    dom.srvHttps.checked = Boolean(s.https);\n    dom.srvHttpsStatus.textContent = data.https?.caddyInstalled\n      ? `Caddy ${data.https.caddyVersion || 'installed'}. ${s.https ? 'Run `onboarder https setup` after saving.' : 'Enable HTTPS above, save, then run the command.'}`\n      : 'Caddy is not installed. Ubuntu: sudo apt install caddy; macOS: brew install caddy.';\n    dom.srvAutoOpen.checked = Boolean(s.autoOpen);\n    dom.srvName.value = s.account?.name || '';\n    dom.srvEmail.value = s.account?.email || '';\n    dom.srvTunnelCloudflare.checked = Boolean(s.tunnel?.cloudflare);\n    dom.srvTunnelTailscale.checked = Boolean(s.tunnel?.tailscale);\n    tunnelLine(dom.srvTunnelCloudflareStatus, data.tunnels?.cloudflare);\n    tunnelLine(dom.srvTunnelTailscaleStatus, data.tunnels?.tailscale);\n    dom.srvConfigPath.textContent = `Config file: ${data.configFile}`;\n    dom.srvKeyMasked.value = s.accessKeyMasked || (s.hasAccessKey ? '' : '(none set — the API refuses every call)');\n    dom.srvKeyHint.textContent = s.hasAccessKey\n      ? 'Remote browsers sign in once; the key is exchanged for a secure HTTP-only session.'\n      : 'No key is set. Generate one before remote access is possible.';\n    applyModeVisibility();\n  }\n\n  // Mode drives which rows even make sense: local wipes the network/security\n  // fields in the schema, so asking for them here would be collecting lies.\n  function applyModeVisibility() {\n    const remote = dom.srvMode.value === 'self-hosted';\n    dom.srvKeySection.hidden = !remote;\n    dom.srvDomainField.hidden = !remote;\n    dom.srvHttpsField.hidden = !remote || !dom.srvDomain.value.trim();\n    dom.serverModeNote.textContent = MODE_NOTES[dom.srvMode.value] || '';\n  }\n\n  async function open() {\n    dom.serverDrawer.hidden = false;\n    dom.serverScrim.hidden = false;\n    dom.srvFreshKeyRow.hidden = true;\n    status('Reading the server…');\n    try {\n      render(await fetchServerSettings());\n      status('');\n    } catch (err) {\n      status(err.message, 'err');\n    }\n  }\n\n  function close() {\n    dom.serverDrawer.hidden = true;\n    dom.serverScrim.hidden = true;\n  }\n\n\n  async function save() {\n    const patch: SettingsInput = {\n      mode: dom.srvMode.value,\n      host: dom.srvHost.value.trim() || '127.0.0.1',\n      port: Number(dom.srvPort.value),\n      autoOpen: dom.srvAutoOpen.checked,\n      account: { name: dom.srvName.value.trim(), email: dom.srvEmail.value.trim() },\n      tunnel: { cloudflare: dom.srvTunnelCloudflare.checked, tailscale: dom.srvTunnelTailscale.checked },\n    };\n    if (patch.mode === 'self-hosted') {\n      patch.domain = dom.srvDomain.value.trim();\n      patch.https = dom.srvHttps.checked;\n    }\n    status('Saving…');\n    try {\n      const data = await updateServerSettings(patch);\n      render({ ...current, settings: data.settings });\n      const restart = (data.restartRequired || []).join(' and ');\n      const httpsChanged = (data.restartRequired || []).some((key) => key === 'domain' || key === 'https');\n      status(\n        httpsChanged\n          ? 'Saved. Run `onboarder https setup` to validate the Caddyfile and reload TLS.'\n          : restart\n            ? `Saved. The ${restart} change takes effect after a restart — the running socket cannot move.`\n            : 'Saved — live already.',\n        'ok',\n      );\n    } catch (err) {\n      status(err.message, 'err');\n    }\n  }\n\n  async function rotate() {\n    status('Rotating…');\n    try {\n      const data = await rotateServerAccessKey();\n      // The server refreshes this browser's signed session as part of rotation.\n      // The raw key is shown once for copying elsewhere, never stored locally.\n      render({ ...current, settings: data.settings });\n      dom.srvFreshKey.value = data.accessKey;\n      dom.srvFreshKeyRow.hidden = false; // render() does not know about the reveal\n      status('Rotated. The old key is dead; update every other device.', 'ok');\n    } catch (err) {\n      status(err.message, 'err');\n    }\n  }\n\n  async function signOut() {\n    try {\n      await logoutRemoteSession();\n      location.replace('/');\n    } catch (err) {\n      status(err.message, 'err');\n    }\n  }\n\n  dom.srvMode.addEventListener('change', applyModeVisibility);\n  dom.srvDomain.addEventListener('input', applyModeVisibility);\n  dom.srvSave.addEventListener('click', save);\n  dom.srvRotate.addEventListener('click', rotate);\n  dom.srvLogout.addEventListener('click', signOut);\n  dom.serverClose.addEventListener('click', close);\n  dom.serverScrim.addEventListener('click', close);\n  dom.srvCopyKey.addEventListener('click', async () => {\n    try {\n      await navigator.clipboard.writeText(dom.srvFreshKey.value);\n      toast('Key copied');\n    } catch {\n      dom.srvFreshKey.select(); // clipboard refused — select so a Ctrl+C works\n    }\n  });\n\n  return {\n    open,\n    close,\n    isOpen: () => !dom.serverDrawer.hidden,\n  };\n}\n"]}