labtasker-webui 0.1.1__py3-none-any.whl

labtasker_webui/operations.py

@@ -0,0 +1,197 @@
+from __future__ import annotations
+
+import asyncio
+import hashlib
+import hmac
+import secrets
+import time
+from dataclasses import asdict, dataclass, field
+from typing import Any
+from urllib.parse import quote
+
+from .sessions import Connection
+from .upstream import Upstream, UpstreamError
+
+
+@dataclass(frozen=True, slots=True)
+class Outcome:
+    task_id: str
+    status: str
+    code: str | None = None
+    message: str | None = None
+
+
+@dataclass(slots=True)
+class Operation:
+    id: str
+    queue: str
+    task_ids: tuple[str, ...]
+    connection: Connection | None
+    owner_digest: bytes
+    created_at: float = field(default_factory=time.monotonic)
+    updated_at: float = field(default_factory=time.monotonic)
+    outcomes: list[Outcome] = field(default_factory=list)
+    stopped: bool = False
+    done: bool = False
+
+    def public(self) -> dict[str, Any]:
+        counts = {"deleted": 0, "absent": 0, "failed": 0, "stopped": 0}
+        for item in self.outcomes:
+            counts[item.status] = counts.get(item.status, 0) + 1
+        return {
+            "id": self.id,
+            "queue": self.queue,
+            "total": len(self.task_ids),
+            "completed": len(self.outcomes),
+            "stopped": self.stopped,
+            "done": self.done,
+            "counts": counts,
+            "outcomes": [asdict(item) for item in self.outcomes],
+        }
+
+
+class OperationStore:
+    def __init__(
+        self,
+        upstream: Upstream,
+        *,
+        concurrency: int = 5,
+        ttl_seconds: int = 60 * 60,
+        maximum: int = 256,
+    ) -> None:
+        self.upstream = upstream
+        self.concurrency = concurrency
+        self.ttl_seconds = ttl_seconds
+        self.maximum = maximum
+        self.items: dict[str, Operation] = {}
+        self._tasks: set[asyncio.Task[None]] = set()
+
+    def start(self, connection: Connection, queue: str, task_ids: list[str]) -> Operation:
+        self.cleanup()
+        unique_ids = tuple(dict.fromkeys(task_ids))
+        if not unique_ids or len(unique_ids) > 1000:
+            raise ValueError("A batch must contain between 1 and 1,000 unique Task IDs.")
+        while len(self.items) >= self.maximum:
+            completed = [key for key, item in self.items.items() if item.done]
+            if not completed:
+                raise UpstreamError(
+                    503,
+                    "operation_capacity",
+                    "Too many active delete operations. Wait for one to finish and try again.",
+                )
+            oldest = min(completed, key=lambda key: self.items[key].updated_at)
+            self.items.pop(oldest, None)
+        operation = Operation(
+            secrets.token_urlsafe(18),
+            queue,
+            unique_ids,
+            connection,
+            self._connection_digest(connection),
+        )
+        self.items[operation.id] = operation
+        task = asyncio.create_task(self._run(operation))
+        self._tasks.add(task)
+        task.add_done_callback(self._tasks.discard)
+        return operation
+
+    def get(
+        self,
+        operation_id: str,
+        connection: Connection | None = None,
+    ) -> Operation | None:
+        self.cleanup()
+        operation = self.items.get(operation_id)
+        if operation is None or (
+            connection is not None
+            and not hmac.compare_digest(
+                operation.owner_digest,
+                self._connection_digest(connection),
+            )
+        ):
+            return None
+        return operation
+
+    def retry_failed(
+        self,
+        operation_id: str,
+        connection: Connection | None = None,
+    ) -> Operation | None:
+        previous = self.get(operation_id, connection)
+        if previous is None or not previous.done:
+            return None
+        failed = [item.task_id for item in previous.outcomes if item.status == "failed"]
+        if not failed:
+            return None
+        retry_connection = connection or previous.connection
+        if retry_connection is None:
+            return None
+        return self.start(retry_connection, previous.queue, failed)
+
+    def stop(
+        self,
+        operation_id: str,
+        connection: Connection | None = None,
+    ) -> Operation | None:
+        operation = self.get(operation_id, connection)
+        if operation is not None and not operation.done:
+            operation.stopped = True
+            operation.updated_at = time.monotonic()
+        return operation
+
+    def cleanup(self) -> None:
+        now = time.monotonic()
+        expired = [
+            key
+            for key, value in self.items.items()
+            if value.done and now - value.updated_at > self.ttl_seconds
+        ]
+        for key in expired:
+            self.items.pop(key, None)
+
+    @staticmethod
+    def _connection_digest(connection: Connection) -> bytes:
+        value = f"{connection.server_url}\0{connection.token or ''}".encode()
+        return hashlib.sha256(value).digest()
+
+    async def _run(self, operation: Operation) -> None:
+        active_connection = operation.connection
+        if active_connection is None:
+            operation.done = True
+            return
+        pending = asyncio.Queue[str]()
+        for task_id in operation.task_ids:
+            pending.put_nowait(task_id)
+
+        async def worker() -> None:
+            while not operation.stopped:
+                try:
+                    task_id = pending.get_nowait()
+                except asyncio.QueueEmpty:
+                    return
+                try:
+                    await self.upstream.request(
+                        active_connection,
+                        "DELETE",
+                        f"/api/v2/queues/{quote(operation.queue, safe='')}/tasks/"
+                        f"{quote(task_id, safe='')}",
+                    )
+                    operation.outcomes.append(Outcome(task_id, "deleted"))
+                except UpstreamError as exc:
+                    if exc.status == 404:
+                        operation.outcomes.append(Outcome(task_id, "absent", exc.code, exc.message))
+                    else:
+                        operation.outcomes.append(Outcome(task_id, "failed", exc.code, exc.message))
+                finally:
+                    operation.updated_at = time.monotonic()
+                    pending.task_done()
+
+        await asyncio.gather(*(worker() for _ in range(self.concurrency)))
+        while not pending.empty():
+            task_id = pending.get_nowait()
+            operation.outcomes.append(
+                Outcome(task_id, "stopped", "not_dispatched", "Deletion was not started.")
+            )
+            pending.task_done()
+        operation.done = True
+        operation.connection = None
+        operation.updated_at = time.monotonic()

labtasker_webui/profile.py

@@ -0,0 +1,89 @@
+"""Project-local WebUI profile; credentials never enter profile API responses."""
+
+from __future__ import annotations
+
+import json
+import os
+import tempfile
+from pathlib import Path
+from typing import Any
+
+UI_KEYS = {
+    "labtasker:queueLayouts:v1",
+    "labtasker:views:v1",
+    "labtasker:column-widths",
+    "labtasker:columns:v3",
+    "labtasker:customColumns:v1",
+    "labtasker:columnOrder:v1",
+    "labtasker:drawerWidth",
+    "labtasker:lastQueue",
+    "labtasker:filterPresets:v1",
+    "labtasker:filters:v1",
+}
+
+
+class Profile:
+    def __init__(self, path: Path | None) -> None:
+        self.path = path
+        self.token_path = path.with_name("webui-token") if path else None
+        self.data: dict[str, Any] = {"version": 1, "connection": None, "ui": {}}
+        if path and path.exists():
+            if path.is_symlink():
+                raise ValueError("WebUI profile must not be a symbolic link.")
+            data = json.loads(path.read_text())
+            if not isinstance(data, dict) or data.get("version") != 1:
+                raise ValueError("Unsupported WebUI profile format.")
+            self.data.update(data)
+            os.chmod(path, 0o600)
+            connection = self.data.get("connection")
+            if isinstance(connection, dict):
+                if "token" in connection:
+                    # Migrate the earlier combined profile without exposing the token.
+                    self.set_connection(connection["server_url"], connection.get("token"))
+                elif self.token_path and self.token_path.exists():
+                    if self.token_path.is_symlink():
+                        raise ValueError("WebUI token must not be a symbolic link.")
+                    os.chmod(self.token_path, 0o600)
+                    connection["token"] = self.token_path.read_text().strip() or None
+
+    @staticmethod
+    def _write(path: Path, text: str) -> None:
+        path.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+        fd, temporary = tempfile.mkstemp(prefix=".webui-profile-", dir=path.parent)
+        try:
+            with os.fdopen(fd, "w") as stream:
+                stream.write(text)
+                stream.flush()
+                os.fsync(stream.fileno())
+            os.replace(temporary, path)
+        finally:
+            if os.path.exists(temporary):
+                os.unlink(temporary)
+
+    def save(self) -> None:
+        if not self.path:
+            return
+        data = dict(self.data)
+        if isinstance(data.get("connection"), dict):
+            data["connection"] = {"server_url": data["connection"]["server_url"]}
+        self._write(self.path, json.dumps(data, ensure_ascii=False, indent=2))
+
+    def set_connection(self, url: str | None, token: str | None = None) -> None:
+        if self.token_path:
+            if url and token:
+                self._write(self.token_path, token)
+            else:
+                self.token_path.unlink(missing_ok=True)
+        self.data["connection"] = {"server_url": url, "token": token} if url else None
+        self.save()
+
+    def update_ui(self, values: dict[str, str]) -> None:
+        if any(key not in UI_KEYS or len(value) > 100_000 for key, value in values.items()):
+            raise ValueError("Unsupported or oversized UI setting.")
+        previous = self.data["ui"]
+        self.data["ui"] = {**previous, **values}
+        try:
+            self.save()
+        except OSError:
+            self.data["ui"] = previous
+            raise

labtasker_webui/schemas.py

@@ -0,0 +1,80 @@
+from datetime import datetime
+from typing import Any, Literal
+
+from pydantic import BaseModel, ConfigDict, Field
+
+TaskStatus = Literal["pending", "running", "succeeded", "failed", "cancelled"]
+TaskOrderField = Literal[
+    "id",
+    "name",
+    "status",
+    "priority",
+    "attempt",
+    "max_attempts",
+    "last_route",
+    "created_at",
+    "updated_at",
+    "started_at",
+    "finished_at",
+]
+
+
+class ConnectRequest(BaseModel):
+    server_url: str = ""
+    mode: Literal["http", "local"] = "http"
+    directory: str = "."
+    token: str | None = None
+
+
+class SelectRequest(BaseModel):
+    status: TaskStatus | None = None
+    name: str | None = None
+    filter: str | None = None
+
+
+class BatchRequest(BaseModel):
+    task_ids: list[str] = Field(min_length=1, max_length=1000)
+
+
+class QueueResponse(BaseModel):
+    name: str
+
+
+class LastErrorResponse(BaseModel):
+    type: str
+    message: str
+    traceback: str | None
+    occurred_at: datetime
+    attempt: int
+    run_id: str
+
+
+class TaskResponse(BaseModel):
+    model_config = ConfigDict(extra="allow")
+
+    id: str
+    queue: str
+    status: TaskStatus
+    name: str | None
+    args: dict[str, Any]
+    metadata: dict[str, Any]
+    priority: int
+    attempt: int
+    max_attempts: int
+    routes: list[str]
+    result: dict[str, Any]
+    last_error: LastErrorResponse | None
+    last_route: str | None
+    created_at: datetime
+    updated_at: datetime
+    started_at: datetime | None
+    finished_at: datetime | None
+
+
+class TaskPageResponse(BaseModel):
+    items: list[TaskResponse]
+    next_cursor: str | None
+
+
+class CountResponse(BaseModel):
+    count: int = Field(ge=0)

labtasker_webui/security.py

@@ -0,0 +1,53 @@
+from __future__ import annotations
+
+import ipaddress
+import socket
+from urllib.parse import urlsplit, urlunsplit
+
+from .config import normalize_origin
+
+
+class DestinationBlocked(ValueError):
+    pass
+
+
+def validate_server_url(value: str, allowed_origins: tuple[str, ...], strict: bool) -> str:
+    parsed = urlsplit(value.strip())
+    if parsed.scheme not in {"http", "https"} or not parsed.hostname:
+        raise DestinationBlocked("Server URL must start with http:// or https://.")
+    if parsed.username or parsed.password:
+        raise DestinationBlocked("Embedded URL credentials are not allowed.")
+    try:
+        origin = normalize_origin(value)
+    except ValueError as exc:
+        raise DestinationBlocked(str(exc)) from exc
+    if strict and origin not in allowed_origins:
+        raise DestinationBlocked("This Server origin is not in the WebUI upstream allowlist.")
+    path = parsed.path.rstrip("/")
+    return urlunsplit((parsed.scheme, parsed.netloc, path, "", ""))
+
+
+def resolve_addresses(
+    hostname: str, port: int
+) -> set[ipaddress.IPv4Address | ipaddress.IPv6Address]:
+    try:
+        addresses = {
+            ipaddress.ip_address(item[4][0]) for item in socket.getaddrinfo(hostname, port)
+        }
+        if not addresses:
+            raise DestinationBlocked(f"The Server host resolved to no addresses: {hostname}")
+        return addresses
+    except socket.gaierror as exc:
+        raise DestinationBlocked(f"The Server host could not be resolved: {hostname}") from exc
+
+
+def validate_resolved_destination(url: str, allowed_origins: tuple[str, ...], strict: bool) -> None:
+    parsed = urlsplit(url)
+    if strict and normalize_origin(url) not in allowed_origins:
+        raise DestinationBlocked(
+            "The resolved Server origin is not in the WebUI upstream allowlist."
+        )
+    # Resolution is performed on every request so DNS changes cannot silently bypass validation.
+    resolve_addresses(
+        parsed.hostname or "", parsed.port or (443 if parsed.scheme == "https" else 80)
+    )

labtasker_webui/sessions.py

@@ -0,0 +1,51 @@
+from __future__ import annotations
+
+import secrets
+import time
+from dataclasses import dataclass
+
+
+@dataclass(slots=True)
+class Connection:
+    server_url: str
+    token: str | None
+    touched_at: float
+    socket_path: str | None = None
+
+
+class SessionStore:
+    def __init__(self, ttl_seconds: int = 12 * 60 * 60, maximum: int = 2048) -> None:
+        self.ttl_seconds = ttl_seconds
+        self.maximum = maximum
+        self._items: dict[str, Connection] = {}
+
+    def create(self, server_url: str, token: str | None, socket_path: str | None = None) -> str:
+        self.cleanup()
+        if len(self._items) >= self.maximum:
+            oldest = min(self._items, key=lambda key: self._items[key].touched_at)
+            self._items.pop(oldest, None)
+        session_id = secrets.token_urlsafe(32)
+        self._items[session_id] = Connection(server_url, token, time.monotonic(), socket_path)
+        return session_id
+
+    def get(self, session_id: str | None) -> Connection | None:
+        if not session_id:
+            return None
+        item = self._items.get(session_id)
+        if not item or time.monotonic() - item.touched_at > self.ttl_seconds:
+            self._items.pop(session_id, None)
+            return None
+        item.touched_at = time.monotonic()
+        return item
+
+    def delete(self, session_id: str | None) -> None:
+        if session_id:
+            self._items.pop(session_id, None)
+
+    def cleanup(self) -> None:
+        now = time.monotonic()
+        expired = [
+            key for key, value in self._items.items() if now - value.touched_at > self.ttl_seconds
+        ]
+        for key in expired:
+            self._items.pop(key, None)

labtasker_webui/static/assets/index-CscGvBx9.css

@@ -0,0 +1 @@
+:root{--font-ui:-apple-system, BlinkMacSystemFont, "Segoe UI", "PingFang SC", "Microsoft YaHei", sans-serif;--font-code:ui-monospace, "SFMono-Regular", Menlo, Consolas, monospace;--text-small:11px;--text-body:12px;--text-title:22px;--header-height:40px;--control-height:32px;font-family:var(--font-ui);font-size:var(--text-body);color:#202631;font-synthesis:none;--blue:#1769d2;--line:#dfe3e8;--muted:#687385;--panel:#fff;--red:#c93636;background:#f8f9fb;font-weight:400;line-height:1.5}*{box-sizing:border-box}#toast{z-index:40;color:#344054;max-width:420px;font-size:var(--text-body);opacity:0;pointer-events:none;background:#fff;border:1px solid #cbd8e8;border-radius:7px;padding:11px 14px;transition:all .16s;position:fixed;bottom:20px;right:20px;transform:translateY(8px);box-shadow:0 10px 30px #20395624}#toast.visible{opacity:1;transform:none}body{min-width:320px;margin:0}button,input,select{font:inherit;letter-spacing:inherit}input,select{font-weight:400}h1,h2,h3,strong,b{font-weight:600}button{cursor:pointer;white-space:nowrap}:where(button,input,select,summary,a,[tabindex]):focus-visible{outline:2px solid var(--blue);outline-offset:3px}.top{height:var(--header-height);border-bottom:1px solid var(--line);z-index:8;background:#fff;justify-content:space-between;align-items:center;padding:0 20px;display:flex;position:sticky;top:0}.brand{align-items:center;gap:8px;font-size:17px;line-height:24px;display:flex}.logo{object-fit:contain;flex-shrink:0;width:24px;height:24px;display:block}.server{font-size:var(--text-body);color:var(--muted);align-items:center;gap:8px;display:flex}.live{background:#2c9a67;border-radius:50%;width:8px;height:8px}.page,.workspace{max-width:none;margin:auto;padding:14px 20px 16px}.page-head,.workspace-head{justify-content:space-between;align-items:flex-start;gap:16px;margin-bottom:18px;display:flex}.eyebrow{letter-spacing:.13em;color:#6d788a;font-size:11px;font-weight:600}.page h1,.workspace h1{font-size:var(--text-title);letter-spacing:-.025em;margin:5px 0 4px;font-weight:600;line-height:1.25}.page-head p,.workspace-head p{color:var(--muted);font-size:var(--text-body);margin:0}.primary,.secondary,.toolbar button,.pager button,.actions button,.modal-actions button{color:#303846;min-height:var(--control-height);font-weight:500;font-size:var(--text-body);background:#fff;border:1px solid #cdd3da;border-radius:6px;padding:0 14px;line-height:1.25}.primary,.toolbar button.primary{background:var(--blue);border-color:var(--blue);color:#fff}.toolbar button.danger-link:not(:disabled){color:var(--red)}.secondary{flex-shrink:0;align-items:center;gap:8px;display:flex}.compact{min-height:var(--control-height)}.link,.danger-link{color:var(--blue);font-size:var(--text-body);background:0 0;border:0;padding:3px}.danger-link{color:var(--red)}button:disabled{opacity:.45;cursor:default}.spinner{border:2px solid;border-right-color:#0000;border-radius:50%;width:14px;height:14px;animation:.8s linear infinite spin;display:inline-block}@keyframes spin{to{transform:rotate(360deg)}}.loading{text-align:center;color:var(--muted);justify-content:center;gap:10px;padding:50px;display:flex}.queue-grid{grid-template-columns:repeat(auto-fill,minmax(min(100%,430px),1fr));gap:18px;display:grid}.queue-card{border:1px solid var(--line);cursor:pointer;background:#fff;border-radius:8px;padding:16px;transition:all .15s}.queue-card:hover,.queue-card:focus{border-color:#94b9e8;box-shadow:0 4px 18px #182a4410}.queue-title{justify-content:space-between;align-items:flex-start;margin-bottom:14px;display:flex}.queue-title h2{letter-spacing:-.015em;margin:0 0 3px;font-size:18px;line-height:1.35}.queue-title span{color:var(--muted);font-size:var(--text-small)}.queue-title .arrow{color:#1769d2;font-size:19px}.status-row{border:1px solid #e4e7eb;border-radius:6px;grid-template-columns:repeat(5,1fr);display:grid;overflow:hidden}.status-row button{text-align:left;background:#fbfcfd;border:0;border-right:1px solid #e4e7eb;padding:9px 8px}.status-row button:last-child{border:0}.status-row i{border-radius:50%;width:6px;height:6px;margin-right:5px;display:inline-block}.status-row b{font-size:var(--text-body)}.status-row span{color:var(--muted);margin:3px 0 0 11px;font-size:11px;display:block}.pending{--state:#c18a18}.running{--state:#1776df}.succeeded{--state:#23855b}.failed{--state:#d04545}.cancelled{--state:#87919f}.status-row i,.badge i{background:var(--state)}.progress{background:#edf0f3;border-radius:5px;height:5px;margin:18px 0 12px;overflow:hidden}.progress span{background:#4b98e9;height:100%;display:block}.queue-foot{font-size:var(--text-small);color:var(--muted);flex-direction:column;align-items:stretch;gap:12px;min-height:25px;display:flex}.queue-metrics{font-variant-numeric:tabular-nums;justify-content:space-between;gap:14px;display:flex}.recent-task{text-overflow:ellipsis;white-space:nowrap;max-width:100%;overflow:hidden}.badge{color:#3e4755;text-transform:capitalize;white-space:nowrap;background:#f2f4f6;border-radius:12px;align-items:center;gap:6px;padding:3px 8px;font-size:11px;display:inline-flex}.badge i{border-radius:50%;width:6px;height:6px}.duration{white-space:nowrap;font-variant-numeric:tabular-nums;align-items:center;gap:5px;display:inline-flex}.duration i{background:#2c9a67;border-radius:50%;width:6px;height:6px}.empty{text-align:center;color:var(--muted);padding:70px 20px}.empty h2{color:#333b47;margin:10px 0 4px;font-size:18px}.empty p{font-size:var(--text-body);margin:0}.empty-icon{color:#9aa3af;font-size:28px}.connect{background:linear-gradient(115deg,#f6f9fd,#fff);place-items:center;min-height:100vh;display:grid}.connect-card{border:1px solid var(--line);background:#fff;border-radius:10px;width:min(450px,100vw - 32px);padding:32px;box-shadow:0 18px 50px #1d365318}.connect-copy{margin:40px 0 25px}.connect-copy h1{font-size:var(--text-title);letter-spacing:-.025em;margin:7px 0;line-height:1.25}.connect-copy p,.privacy{color:var(--muted);font-size:var(--text-body);line-height:1.55}.connect form label{font-size:var(--text-body);margin:16px 0;font-weight:500;display:block}.connect label span{float:right;color:#8b94a2;font-weight:400}.connect input{font-size:var(--text-body);border:1px solid #ccd3dc;border-radius:6px;width:100%;height:40px;margin-top:7px;padding:0 11px;font-weight:400;display:block}.connect form .primary{width:100%;margin-top:8px}.privacy{text-align:center;margin:20px 20px 0}.error,.stale{color:#9b3030;font-size:var(--text-small);background:#fff1f1;border:1px solid #f0cccc;border-radius:5px;margin:10px 0;padding:10px 12px}.field-error{color:#a23838;font-size:var(--text-small);margin:-6px 10px 12px}.stale{flex-wrap:wrap;align-items:center;gap:8px;display:flex}.stale>div{overflow-wrap:anywhere;flex:280px;min-width:0}.stale button{color:inherit;background:0 0;border:1px solid;border-radius:5px;flex:none;padding:5px 9px}.stale{color:#7f651a;background:#fff8e5;border-color:#eadca7}.splash{place-content:center;justify-items:center;gap:25px;height:100vh;display:grid}.crumb{font-size:var(--text-body);color:var(--muted);align-items:center;gap:10px;margin-bottom:8px;display:flex}.crumb button{color:var(--blue);background:0 0;border:0;padding:0}.workspace-head{margin-bottom:12px}.stats{border:1px solid var(--line);background:#fff;border-radius:7px;grid-template-columns:repeat(5,1fr);margin-bottom:14px;display:grid}.stats button{border:0;border-right:1px solid var(--line);text-align:left;background:0 0;padding:8px 12px}.stats button:last-child{border:0}.stats span{color:var(--muted);text-transform:capitalize;font-size:11px}.stats strong{font-variant-numeric:tabular-nums;margin-top:2px;font-size:18px;line-height:1.3;display:block}.toolbar{border:1px solid var(--line);background:#fff;border-radius:7px;flex-wrap:wrap;align-items:center;gap:8px;margin-bottom:12px;padding:10px;display:flex}.toolbar input:not([type=checkbox]),.toolbar select{height:var(--control-height);font-size:var(--text-body);background:#fff;border:1px solid #ccd3dc;border-radius:5px;padding:0 10px}.toolbar .filter{flex:180px;min-width:0}.column-menu{flex:none;position:relative}.column-menu summary{height:var(--control-height);color:#303846;font-size:var(--text-body);cursor:pointer;border:1px solid #ccd3dc;border-radius:5px;align-items:center;padding:0 10px;list-style:none;display:flex}.column-menu>div{z-index:6;border:1px solid var(--line);background:#fff;border-radius:6px;width:176px;max-height:min(280px,40dvh);padding:4px;position:fixed;top:calc(100% + 6px);left:0;overflow-y:auto;box-shadow:0 8px 22px #1d36531c}.column-menu summary{gap:12px}.column-menu summary::-webkit-details-marker{display:none}.column-menu summary:after{content:"";border-bottom:1.5px solid;border-right:1.5px solid;width:6px;height:6px;transform:translateY(-2px)rotate(45deg)}.column-menu[open] summary{background:#eceef1}.column-menu input[type=checkbox]{width:14px;height:14px;accent-color:var(--blue);flex:0 0 14px;margin:0;padding:0}.column-menu label:hover,.column-menu label:focus-within{background:#f3f5f7}.column-menu label{cursor:pointer;color:#303846;min-height:32px;font-size:var(--text-body);border-radius:3px;align-items:center;gap:10px;padding:6px 10px;display:flex}.selection{height:45px;font-size:var(--text-body);background:#f0f7ff;border:1px solid #a9caef;border-radius:6px;align-items:center;gap:10px;margin-bottom:10px;padding:0 14px;display:flex}.selection .danger-link{margin-left:auto}.table-wrap{border:1px solid var(--line);background:#fff;border-radius:7px;min-height:260px;overflow:auto}table{border-collapse:collapse;width:100%;line-height:1.35;font-size:var(--text-body)}th{text-align:left;color:#657083;border-bottom:1px solid var(--line);white-space:nowrap;background:#f7f8fa;padding:8px 10px;font-weight:500}td{color:#4c5665;white-space:nowrap;border-bottom:1px solid #edf0f2;padding:5px 10px}tbody tr{cursor:pointer}tbody tr:hover,tbody tr.chosen{background:#f4f8fd}td b{color:#2b3440;font-size:var(--text-body);margin-bottom:1px;display:block}td code{display:block}td code,.drawer code{color:var(--muted);font-family:var(--font-code);font-size:11px;font-weight:400;line-height:1.5}.chips{gap:3px;display:flex}.chips span{background:#f8f9fa;border:1px solid #dce1e7;border-radius:4px;padding:2px 5px}.pager{color:var(--muted);font-size:var(--text-small);justify-content:space-between;align-items:center;margin-top:13px;display:flex}.pager button{margin-left:7px}.drawer{right:0;top:var(--header-height);z-index:7;background:#fff;border-left:1px solid #ccd3da;flex-direction:column;width:min(600px,100vw);display:flex;position:fixed;bottom:0;box-shadow:-12px 0 35px #253b581a}.drawer-resize{z-index:2;cursor:col-resize;outline:none;width:10px;position:absolute;inset:0 auto 0 -5px}.drawer-resize:hover,.drawer-resize:focus-visible{border-left:2px solid var(--blue)}.drawer-head{border-bottom:1px solid var(--line);justify-content:space-between;padding:20px 24px;display:flex}.drawer-head h2{letter-spacing:-.015em;margin:5px 0 3px;font-size:20px;line-height:1.3}.close{color:#536071;background:#f2f4f6;border:0;border-radius:5px;width:32px;height:32px;font-size:23px}.drawer-body{padding:20px 24px 60px;overflow:auto}.task-summary{justify-content:space-between;align-items:center;margin-bottom:15px;display:flex}.actions{gap:7px;display:flex}.detail-section{border-top:1px solid var(--line);padding:18px 0}.detail-section h3{font-size:var(--text-body);margin:0 0 13px}.detail-section dl{font-size:var(--text-body);grid-template-columns:110px 1fr;gap:9px;margin:0;display:grid}.detail-section dt{color:var(--muted)}.detail-section dd{margin:0}.section-title{align-items:center;display:flex}.section-title h3{margin-right:auto}.detail-section pre{max-height:300px;font:12px/1.6 var(--font-code);background:#f5f7f9;border:1px solid #e4e7eb;border-radius:6px;padding:13px;overflow:auto}.json-tree{max-height:420px;font:12px/1.6 var(--font-code);background:#f8fafc;border:1px solid #e4e7eb;border-radius:6px;padding:10px 12px;overflow:auto}.json-node summary{cursor:pointer;color:#4b5665;list-style-position:outside}.json-node>.json-copy,.json-leaf button{visibility:hidden;color:var(--blue);font:inherit;background:0 0;border:0;margin-left:8px;padding:0}.json-node:hover>.json-copy,.json-node:focus-within>.json-copy,.json-leaf:hover button,.json-leaf:focus-within button{visibility:visible}.json-node{position:relative}.json-node>.json-copy{position:absolute;top:0;right:0}.json-children{border-left:1px solid #dce2e9;margin-left:7px;padding-left:16px}.json-key{color:#7652a2}.json-key:after{content:":"}.json-kind,.json-empty,.json-null{color:#87919f}.json-string{color:#27704e;overflow-wrap:anywhere}.json-scalar{color:#1769d2}.json-leaf{min-height:20px}.json-leaf a{color:var(--blue);overflow-wrap:anywhere}.failure{color:#9f3333}.modal-back{z-index:20;background:#26314066;place-items:center;display:grid;position:fixed;inset:0}.modal{z-index:21;background:#fff;border-radius:9px;width:min(460px,100vw - 32px);max-height:calc(100dvh - 32px);padding:26px;position:fixed;top:50%;left:50%;overflow:auto;transform:translate(-50%,-50%);box-shadow:0 24px 70px #1119}.batch-modal{width:min(620px,100vw - 32px)}.delete-scope{border:1px solid var(--line);font-size:var(--text-small);background:#f8f9fb;border-radius:6px;grid-template-columns:78px 1fr;gap:7px 12px;margin:18px 0;padding:12px;display:grid}.delete-scope dt{color:var(--muted)}.delete-scope dd{overflow-wrap:anywhere;margin:0}.operation-counts{color:var(--muted);gap:18px;display:flex}.failure-list{max-height:180px;overflow:auto}.failure-list .error{grid-template-columns:150px 1fr;gap:8px;display:grid}.modal h2{margin:8px 0;font-size:20px}.modal p{font-size:var(--text-body);color:var(--muted);line-height:1.55}.danger-mark{width:34px;height:var(--control-height);color:var(--red);background:#fff0f0;border-radius:50%;place-items:center;font-weight:700;display:grid}.modal-actions{justify-content:flex-end;gap:8px;margin-top:22px;display:flex}.danger{color:#fff!important;background:#c93636!important;border-color:#c93636!important}.operation{margin-top:20px}.operation>div:first-child{font-size:var(--text-small);justify-content:space-between;display:flex}.operation .progress{margin-top:8px}@media (width<=900px){body{min-width:0}.page,.workspace{padding:16px 18px}.queue-grid{grid-template-columns:1fr}.drawer{z-index:10;top:0;width:100%!important}.drawer-resize{display:none}.top{padding:0 18px}.status-row,.stats{grid-template-columns:repeat(5,minmax(65px,1fr));overflow:auto}.toolbar{flex-wrap:wrap}.toolbar .filter{flex-basis:100%}.table-wrap{overflow:auto}}@media (width<=600px){.top{height:auto;min-height:var(--header-height);flex-wrap:wrap;gap:10px;padding:8px 18px}.server{overflow-wrap:anywhere;flex-wrap:wrap;min-width:0}.live{flex:0 0 8px}.queue-card{min-width:0;padding:16px}.status-row,.stats{grid-template-columns:repeat(5,minmax(0,1fr))}.status-row button,.stats button{text-align:center;min-width:0;padding:10px 4px}.status-row span{margin-left:0}.stats span{font-size:11px}.toolbar{grid-template-columns:repeat(2,minmax(0,1fr));display:grid}.toolbar>*{width:100%;min-width:0}.toolbar .filter{grid-column:1/-1}.column-menu summary{justify-content:center}.column-menu>div{left:auto;right:0}.pager,.selection,.task-summary{flex-wrap:wrap;gap:12px;height:auto}.selection{padding:12px}.pager>div{margin-left:auto}.drawer-head,.drawer-body{padding-left:18px;padding-right:18px}.drawer-head>div{overflow-wrap:anywhere;min-width:0}.close{flex-shrink:0}.detail-section dd{overflow-wrap:anywhere;min-width:0}}@media (prefers-reduced-motion:reduce){*,:before,:after{transition-duration:.01ms!important;animation-duration:.01ms!important}}.workspace{height:calc(100dvh - var(--header-height));flex-direction:column;min-height:560px;display:flex}.workspace>*{flex-shrink:0}.workspace .table-wrap{flex:auto;min-height:180px}.table-wrap th{z-index:1;position:sticky;top:0}.task-name{text-overflow:ellipsis;max-width:clamp(240px,26vw,520px);overflow:hidden}@media (width<=900px){.workspace{height:auto;min-height:calc(100dvh - var(--header-height))}.workspace .table-wrap{flex:none;max-height:65dvh}}.list-summary{color:var(--muted);font-size:var(--text-small);margin-top:8px}.load-more{min-height:1px;color:var(--muted);font-size:var(--text-small);justify-content:center;align-items:center;gap:8px;display:flex}.load-more:not(:empty){padding:12px}.toolbar>input,.toolbar>select,.toolbar>button,.column-menu>summary{box-sizing:border-box;height:var(--control-height);min-height:var(--control-height);font-family:var(--font-ui);font-size:var(--text-body);vertical-align:middle;border:1px solid #ccd3dc;border-radius:5px;margin:0;padding:0 10px;line-height:18px}.toolbar>button,.column-menu>summary{justify-content:center;align-items:center;display:inline-flex}.toolbar>select{appearance:none;background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 12 12'%3E%3Cpath d='m3 4.5 3 3 3-3' fill='none' stroke='%23515c6c' stroke-width='1.5'/%3E%3C/svg%3E");background-position:right 9px center;background-repeat:no-repeat;padding-right:28px}.column-menu>summary:after{width:5px;height:5px}td{line-height:16px}td code{line-height:14px}@media (pointer:coarse){.toolbar{--control-height:36px}.column-menu label{min-height:36px}}.virtual-table{table-layout:fixed}.virtual-table tbody tr:not(.virtual-spacer){height:42px}.virtual-table td{text-overflow:ellipsis;overflow:hidden}.virtual-table .task-name{max-width:100%}.virtual-table .chips{overflow:hidden}.virtual-table td code{text-overflow:ellipsis;overflow:hidden}.virtual-spacer td{border:0;padding:0}.column-resizer{cursor:col-resize;touch-action:none;z-index:2;width:7px;position:absolute;inset:0 0 0 auto}.column-resizer:hover,.column-resizer:focus-visible{background:#1769d244}.instant-tooltip{z-index:10000;pointer-events:none;color:#263140;white-space:pre-wrap;overflow-wrap:anywhere;background:#fff;border:1px solid #d5dbe3;border-radius:5px;max-width:min(640px,100vw - 16px);max-height:calc(100vh - 16px);padding:7px 10px;font:12px/1.5 -apple-system,BlinkMacSystemFont,Segoe UI,sans-serif;position:fixed;overflow:hidden;box-shadow:0 3px 12px #18223026}.priority-value{white-space:nowrap;font-variant-numeric:tabular-nums;align-items:baseline;gap:4px;display:inline-flex}.priority-direction{color:#657083}.virtual-table .table-filler{border-left:0;border-right:0;padding:0}.ui-select{flex:none;position:relative}.toolbar .ui-select>button{width:100%;height:var(--control-height);min-height:var(--control-height);font:inherit;color:#202631;background:#fff;border:1px solid #ccd4df;border-radius:5px;justify-content:space-between;align-items:center;gap:14px;padding:0 10px;font-weight:400;display:flex}.ui-select-menu{z-index:100;border:1px solid var(--line);width:max-content;min-width:100%;font-size:var(--text-body);background:#fff;border-radius:5px;padding:4px;position:absolute;top:calc(100% + 4px);left:0;box-shadow:0 3px 12px #18223020}.ui-select-menu [role=option]{cursor:pointer;border-radius:3px;justify-content:space-between;align-items:center;gap:20px;min-height:28px;padding:4px 8px;display:flex}.ui-select-menu [role=option].highlighted{background:#edf3fb}.ui-select-menu [aria-selected=true]{color:#1769cc}.priority-direction.positive{color:#c93636}.priority-direction.negative{color:#2275c9}.filter-input{position:relative}.toolbar .filter-input>input{width:100%;padding-right:32px}.toolbar .filter-help-button{color:#687385;background:0 0;border:0;border-radius:4px;width:22px;height:22px;min-height:0;padding:0;font-size:12px;position:absolute;top:5px;right:5px}.toolbar .filter-help-button:hover,.toolbar .filter-help-button[aria-expanded=true]{color:#1769d2;background:#edf3fb}.filter-help{z-index:110;border:1px solid var(--line);background:#fff;border-radius:6px;width:min(460px,100vw - 48px);padding:14px;font-size:12px;line-height:1.5;position:absolute;top:calc(100% + 6px);left:0;box-shadow:0 4px 16px #18223020}.filter-help p{margin:8px 0 0}.filter-help code{font-size:11px}.filter-examples{gap:3px;margin:10px 0;display:grid}.toolbar .filter-examples button{text-align:left;background:#f8f9fb;border:0;border-radius:3px;flex-wrap:wrap;justify-content:space-between;gap:4px 12px;width:100%;height:auto;min-height:30px;padding:5px 7px;font-size:12px;font-weight:400;display:flex}.toolbar .filter-examples button:hover{background:#edf3fb}.column-menu>div{width:370px;max-width:calc(100vw - 24px);max-height:min(520px,65dvh)}.column-list{max-height:360px;overflow-y:auto}.column-choice{align-items:center;gap:3px;display:flex}.column-menu .column-choice label{flex:1;min-width:0;padding:5px 6px}.column-choice label span{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.toolbar .column-choice button{background:0 0;border:0;width:24px;height:26px;min-height:0;padding:0}.custom-column-form{border-top:1px solid var(--line);margin-top:6px;padding:10px 6px 4px}.column-menu .custom-column-form label{padding:0 0 6px}.custom-column-form>div{gap:6px;display:flex}.toolbar .custom-column-form input{width:100%;min-width:0}.custom-column-form small{color:var(--muted);margin-top:6px;display:block}.column-drag-handle{cursor:grab;color:var(--muted);touch-action:none}.column-drag-handle:active{cursor:grabbing}.column-choice.drop-target{box-shadow:inset 0 2px var(--blue);background:0 0}.column-menu .column-choice.drop-target label{background:0 0}.virtual-table th{-webkit-user-select:none;user-select:none}.filter-help{max-height:min(650px,70vh);overflow-y:auto}.save-filter,.saved-filter-row{gap:6px;display:flex}.toolbar .save-filter input{flex:1;width:0;min-width:0}.toolbar .saved-filter-row>button:last-child{flex:none;width:26px}.queue-navigation{justify-content:space-between;align-items:center;gap:12px;margin-bottom:12px;display:flex}.queue-navigation .crumb{min-width:0;margin:0}.queue-navigation .crumb b{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.connection-mode{border:1px solid var(--line);border-radius:4px;padding:0 6px;font-size:11px;line-height:20px}.connection-address{text-overflow:ellipsis;white-space:nowrap;max-width:min(50vw,650px);overflow:hidden}.queue-navigation-actions,.views{align-items:center;gap:6px;display:flex}.views{position:relative}.views .ui-select{width:180px}.views button,.views input{border:1px solid var(--line);color:#303846;background:#fff;border-radius:5px;min-height:32px;padding:0 10px}.views .ui-select>button{justify-content:space-between;align-items:center;gap:8px;width:100%;display:flex}.views .ui-select>button span{text-overflow:ellipsis;overflow:hidden}.views-menu{border:1px solid var(--line);z-index:40;background:#fff;border-radius:6px;width:180px;padding:12px;position:absolute;top:calc(100% + 6px);right:0;box-shadow:0 4px 16px #15223814}.views-menu p{color:var(--muted);margin:6px 0 10px;font-size:12px}.views-menu input{box-sizing:border-box;width:100%}.view-actions{grid-template-columns:1fr 1fr;gap:6px;margin-top:8px;display:grid}@media (width<=600px){.queue-navigation{flex-wrap:wrap}.views-menu{width:min(180px,80vw);left:0;right:auto}}.connect .ui-select>button{border:1px solid var(--line);background:#fff;border-radius:5px;justify-content:space-between;align-items:center;width:100%;min-height:32px;padding:0 10px;display:flex}.connect label small{color:var(--muted);margin-top:6px;font-weight:400;display:block}.view-selector{position:relative}.select-value{align-items:center;gap:6px;min-width:0;display:inline-flex}.select-value-text{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.ui-select>button>svg{flex-shrink:0}.view-dirty{background:var(--blue);border-radius:50%;flex:0 0 6px;width:6px;height:6px;display:inline-block}.views .view-save{color:var(--blue);border-color:#a6c6ed}.views .select-action{border:0;border-top:1px solid var(--line);text-align:left;width:100%;color:var(--blue);border-radius:0;margin-top:4px;padding:6px 8px;display:block}.views-menu{width:180px;padding:4px}.views-menu button{text-align:left;border:0;border-radius:3px;width:100%;font-weight:400;display:block}.views-menu button:not(:disabled):hover,.views-menu button:focus-visible{background:#edf3fb}.views-menu [role=separator]{border-top:1px solid var(--line);margin:4px}.views-menu .view-delete{color:var(--red)}.view-dialog{width:min(380px,100vw - 32px);padding:20px}.view-dialog h2{overflow-wrap:anywhere;font-size:17px}.view-dialog label{margin:16px 0 6px;display:block}.view-dialog input{border:1px solid var(--line);border-radius:5px;width:100%;height:34px;padding:0 10px}.view-dialog .view-name-error{color:var(--red);margin:6px 0}.stats .pending{--count-color:#956600}.stats .running{--count-color:#1768bd}.stats .succeeded{--count-color:#23855b}.stats .failed{--count-color:#c93636}.stats .cancelled{--count-color:#687385}.stats span:before{content:"";background:var(--state);vertical-align:1px;border-radius:50%;width:6px;height:6px;margin-right:6px;display:inline-block}.stats strong{color:var(--count-color)}.stats button:hover{background:color-mix(in srgb, var(--state) 5%, white)}.stats button.active{box-shadow:inset 0 -2px var(--state);background:color-mix(in srgb, var(--state) 9%, white)}.profile-save-error{z-index:10000;color:#624719;background:#fff9ed;border:1px solid #e3ba6c;border-radius:6px;align-items:center;gap:12px;max-width:calc(100vw - 32px);padding:10px 12px;font-size:13px;display:flex;position:fixed;bottom:16px;right:16px}.ui-select-menu,.filter-help,.views-menu{overscroll-behavior:contain;overflow-wrap:anywhere;position:fixed;overflow-y:auto}.ui-select-menu [role=option]>span:first-child{text-overflow:ellipsis;white-space:nowrap;min-width:0;overflow:hidden}.ui-select-menu [role=option]>span:last-child{flex-shrink:0}