Compare commits

..
9 changed files with 671 additions and 1119 deletions

No files matched your search

+134
View File
@@ -433,3 +433,137 @@ Tickets DC-046 through DC-049 implement pluggable auth + email magic link. Sami
- **prerequisite:** None. `caddy-upstream-watcher.js` already provides equivalent monitoring.
- **result:** Shipped GLM-pending (Codex quota dead). Before/after on DNS2 (`journalctl -u caddy --since "5 minutes ago" | grep health_checker.active | wc -l`): **before = ~30 entries / 5min** (active probe every 10s, all failing); **after = 0 entries / 5min**. Live-verified: `caddy validate` succeeded (after removing `.bak` file that caused `ambiguous site definition`), Caddy reloaded via `caddy-apply`, route `arch.sami → 100.120.159.34:5000` still active in admin API (verified via `curl http://localhost:2019/config/apps/http/servers/srv0/routes` — `health_uri: None, health_interval: None` confirms the block is gone). Container `dashcaddy-api Up About an hour (healthy)` (no restart needed — only Caddyfile changed, not container). Live HTTP smoke all green: `https://status.sami=200`, `https://dashcaddy.net=200`, `https://ca.sami=200`, `https://status.sami/api/health=401` (auth-gated, expected). Watcher state for `100.120.159.34:5000`: `consecutiveFailures: 1905`, `lastError: "probe timeout"`, `status: down`, `dead: true` — correctly tracked in `/opt/dashcaddy/dashcaddy-api/data/caddy-upstreams.json`. Backup deleted (would have caused site-definition ambiguity on next Caddy reload). Git: change lives only in DNS2's `/etc/caddy/sites/arch.sami` (the `/etc/caddy` git repo `.gitignore` excludes `sites/` per design — only the main `Caddyfile` is tracked). The dashcaddy source repo (`/root/dashcaddy`) carries only this BACKLOG.md documentation update on branch `dc/DC-084-arch-sami-caddy-healthcheck-removal`.
- **Tests:** No source code change; existing `__tests__/caddy-upstream-watcher.test.js` 26/26 pass (baseline preserved). 2465/2465 repo tests pass (4 pre-existing billing test suites fail with `Cannot find module pdfkit` — unrelated to this change).
# P7 — Private Network lane (DC-140 … DC-152)
> Spec: `specs/PRIVATE-NETWORK-SPEC.md`. Parent feature: DashCaddy Private Network
> (Tailscale mode v1 + WireGuard self-hosted mode). Ordered by dependency, not by
> value. All commits judge-gated (min B).
### DC-140: Network provider abstraction (`src/network/`)
- **status:** todo
- **owner:** (fleet)
- **details:** `provider.js` (contract + JSDoc), `registry.js` (active provider +
capabilities), `errors.js` (ProviderError with code/retryable). No feature code
may import a provider directly — registry only. Provider contract methods:
getStatus, listDevices, listPeople, createInvite, revokeInvite, blockPerson,
unblockPerson, removePerson, revokeDevice, syncAccess, whois, configureDns.
Tailscale provider wraps existing tailscale-coord.js + tailscale-manager.js.
Registry defaults to inactive until the wizard connects one. Tests: registry
resolution, capability flags, error mapping. Files: `src/network/*.js`,
`__tests__/network-registry.test.js`, `__tests__/network-provider-tailscale.test.js`.
### DC-141: People store + routes (`routes/network-people.js`)
- **status:** todo
- **details:** people.json atomic store (invite-store pattern), CRUD routes under
`/api/v1/network/people`, admin-protection (`protectedAt`), last-admin guard
`assertNotLastAdmin()` exported for reuse. Sync endpoint merging provider users
into people. Tests: store CRUD, route contract, guard (cannot block/remove
last admin), sync merge idempotency.
### DC-142: Tailscale invites (link-first) via provider
- **status:** todo
- **details:** POST/GET/DELETE `/api/v1/network/invites` calling provider
createInvite/revokeInvite. Tailscale: user-invites API, email optional —
inviteUrl is the artifact (share-text pre-formed sentence, copy button,
navigator.share, opt-in email checkbox; never log raw invite URLs to console).
Reuse DC-085 share pattern. Tests: route contract with mocked provider,
no-raw-token-in-logs assertion.
### DC-143: Block / unblock / remove person + revoke device
- **status:** todo
- **details:** POST `/network/people/:id/block|unblock|remove`,
`/network/devices/:id/revoke`. Orchestrates: provider calls, session kill
(existing auth store), access-map purge/restore, audit log entries. Block
snapshots pre-block grants; unblock restores the AUTHORIZATION state (grants,
status, sessions) — Tailscale device keys, once expired, are irreversible and
require re-authentication (reauthRequired=true + user note); WireGuard peers
restore immediately. Remove deletes devices + person record. Tests: orchestration order (mocked provider), honest unblock
semantics (Tailscale: reauthRequired true + note; WireGuard: immediate
restore), last-admin guard integration, audit entries written.
**Note (not a ticket):** the access map module itself is DC-145.
### DC-144: Groups (DashCaddy-side) + resources
- **status:** todo
- **details:** groups in people-store (array on person), group CRUD routes,
resource model (services registry projection + manual entries), per-resource
`sensitive` flag. No Tailscale-group mapping — ever (free plan caps 3; compiled
rules are per-user). Tests: group CRUD, resource projection, sensitive flag
validation.
### DC-145: Access map store + grid API
- **status:** todo
- **details:** `network-access.json` grants store, bulk GET/PUT
`/network/access` (whole-grid save, atomic), effective-access computation
(group grants + person overrides), change events for compiler subscription.
This file is the single source of truth. Tests: store, effective access
resolution (group + override precedence), atomic whole-grid save.
### DC-146: Technitium integration
- **status:** todo
- **details:** Technitium HTTP API client (credential via credential-manager),
per-resource/per-device record upserts (idempotent), split-DNS configure when
provider capability present, verify-by-resolve after write, wizard check step.
Tests: API client with mocked HTTP, idempotent upsert, failure paths.
### DC-147: CA naming + name constraint + install page hardening
- **status:** todo
- issued from existing DashCA (routes/ca.js): operator-named root (setup-time,
rename = guided re-trust), critical nameConstraints (permitted DNS subtree =
private TLD), leaf regression tests (SAN + serverAuth EKU + ≤398d), branded
install page with per-OS steps incl. iOS enable-trust second step + fingerprint
+ Android native-app caveat, encrypted root-key backup step (passphrase +
checksum). Tests: parse issued cert and assert constraint/SAN/EKU/validity;
install-page content checks.
### DC-148: Tailscale ACL compiler + lockout guard
- **status:** todo
- **details:** access map → per-user HuJSON policy compiler. Hard rules:
last-active-admin must keep access to the DashCaddy host resource; host device
keeps egress; dry-run (ACL preview/test) before every push; last-known-good
policy retained for rollback; post-push hash stored, pre-push hash compare →
drift banner on mismatch. Provider.syncAccess(tailscale) uses this. Tests:
golden-policy cases, lockout adversarial cases (each rule), drift detection,
preview-failure refusal to push.
### DC-149: WireGuard provider — hub management
- **status:** todo
- **details:** `providers/wireguard.js`: wg-quick iface `dcnet0` at 10.53.0.1/16
(client pool 10.53.0.0/16, one /32 per device, stable assignment), HUB keypair
generated host-side, peer store (pubkeys only), systemd unit if missing,
net.ipv4.ip_forward=1 for hub-and-spoke, no NAT on dcnet0. All execFile-mocked
in tests. Tests: pool assignment stability, peer add/remove, unit generation,
error paths (missing wg binary).
### DC-150: WireGuard invites (QR) + client config
- **status:** todo
- **details:** one-time token (7d TTL, single-use) → redemption page. Client
keypair generated IN THE BROWSER via WebCrypto X25519 ONLY — NO fallback
algorithm; browsers lacking X25519 get an explicit unsupported-browser
failure. Server receives the public key only, registers the peer /32,
returns config
(Address, DNS=10.53.0.1, hub PublicKey, AllowedIPs=10.53.0.0/16 — a CIDR,
never a DNS zone). Config + QR rendered client-side; private key never
transits or rests on the server. Tests: token lifecycle, single-use
enforcement, expiry, server-rejects-private-key-posts, config template
correctness.
### DC-151: WireGuard firewall matrix (nftables)
- **status:** todo
- **details:** per-resource nft sets (net_dc_res_<name>), peer IPs per grant,
transactional apply (build temp ruleset → `nft -c` → `nft -f` → verify →
rollback file), three-zone baseline: external-interface UDP listen-port accept
(NOT on dcnet0); dcnet0 local input = ICMP + admin ports from admin set only +
resource ports; dcnet0 forwarding = per-resource sets, peer-to-peer default
drop. Tests: ruleset
golden text, transactional failure injection (nft -c fails → no apply),
verify-step failure, admin-port isolation.
### DC-152: Setup wizard + status page
- **status:** todo
- **details:** mode pick → credentials/endpoint → private domain pick
(.internal default, home.arpa, custom+warning) → provider connect + sync →
Technitium check → CA naming (locked-in warning) → first admin person.
Status page: who's online, recent connections (provider status + DashCaddy
connection log). Reuse monitoring widget patterns. Tests: wizard step
contracts, status aggregation with mocked providers.
@@ -1,325 +0,0 @@
/**
* DC-131/133 additions to the deploys routes tests: install-from-any-host.
*
* Covers the judge round-1 blocking issues:
* - POST /install accepts any https host/owner/repo (not just github.com)
* and forwards the optional per-request token to the bridge.
* - POST /gitea-repos carries {gitea_url, token} in the JSON body.
* - Token validation rejects non-string / oversized tokens before the
* proxy call.
*/
const FIXTURE_INSTALL = {
ok: true,
service: {
id: 'demo-hi', name: 'demo-hi', repo_url: 'https://git.example/owner/demo-hi',
subdomain: 'demo-hi', url: 'https://demo-hi.sami', logo: '',
mode: 'go-build', port: 8951, dir: '/root/repos/demo-hi',
installed_at: '2026-09-14T18:00:00Z', deploy_seconds: 28.0,
},
output: '== build ==\n== deploy ==',
};
const FIXTURE_GITEA_LIST = {
ok: true,
repos: [{ id: 'demo-hi', name: 'demo-hi', full_name: 'owner/demo-hi', url: 'https://git.example/owner/demo-hi', description: 'demo' }],
};
// ---- self-contained harness (same pattern as deploys.routes.test.js) ----
const express = require('express');
function buildApp(fetchT, env = {}) {
process.env.SHIPDECK_BRIDGE_URL = env.url !== undefined ? env.url : 'http://172.17.0.1:8977';
process.env.SHIPDECK_BRIDGE_TOKEN_FILE = env.tokenFile !== undefined ? env.tokenFile : '';
jest.resetModules();
const mod = require('../../routes/deploys');
const router = mod({
asyncHandler: (fn) => async (req, res, next) => {
try { await fn(req, res, next); } catch (e) { next(e); }
},
log: { info: jest.fn(), warn: jest.fn(), error: jest.fn() },
auditLogger: { log: jest.fn(async () => {}) },
fetchT,
});
const app = express();
app.use(express.json());
app.use('/api/v1/deploys', router);
app.use((err, req, res, next) => {
res.status(500).json({ success: false, error: err.message });
});
return app;
}
function jsonFetcher(responses) {
const calls = [];
const fetchT = jest.fn(async (url, opts) => {
const key = `${(opts && opts.method) || 'GET'} ${url.replace(/^https?:\/\/[^/]+/, '')}`;
calls.push({ key, opts });
const r = responses[key] || { status: 404, body: { ok: false, error: 'no fixture' } };
return { status: r.status, json: async () => r.body };
});
return { calls, fetchT };
}
describe('routes/deploys — DC-131/133 install from any host', () => {
test('POST /install accepts any https host URL and forwards token to the bridge', async () => {
const f = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
repo_url: 'https://git.example/owner/demo-hi',
service: 'demo-hi',
token: 'per-request-secret',
}),
});
const body = await r.json();
server.close();
expect(r.status).toBe(200);
expect(body.success).toBe(true);
expect(body.service.id).toBe('demo-hi');
// bridge call carries the forwarded token
const sent = JSON.parse(f.calls[0].opts.body);
expect(f.calls[0].key).toBe('POST /api/install');
expect(sent.token).toBe('per-request-secret');
expect(sent.repo_url).toBe('https://git.example/owner/demo-hi');
});
test('POST /install accepts host:port URLs and .git suffixes', async () => {
const f = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example:3443/owner/demo.hi.git', service: 'demo-hi' }),
});
server.close();
expect(r.status).toBe(200);
expect(JSON.parse(f.calls[0].opts.body).repo_url).toBe('https://git.example:3443/owner/demo.hi.git');
});
test('POST /install rejects non-URL garbage with 400 and never calls the bridge', async () => {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'not a url', service: 'demo-hi' }),
});
server.close();
expect(r.status).toBe(400);
expect(f.calls).toHaveLength(0);
});
test('POST /install rejects non-string and oversized tokens (400, no proxy call)', async () => {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r1 = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', token: 12345 }),
});
const r2 = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', token: 'x'.repeat(513) }),
});
server.close();
expect(r1.status).toBe(400);
expect(r2.status).toBe(400);
expect(f.calls).toHaveLength(0);
});
test('POST /gitea-repos proxies {gitea_url, token} in the body', async () => {
const f = jsonFetcher({ 'POST /api/gitea/repos': { status: 200, body: FIXTURE_GITEA_LIST } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/gitea-repos`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ gitea_url: 'https://git.example', token: 'per-request-secret' }),
});
const body = await r.json();
server.close();
expect(r.status).toBe(200);
expect(body.success).toBe(true);
expect(body.repos[0].full_name).toBe('owner/demo-hi');
const sent = JSON.parse(f.calls[0].opts.body);
expect(f.calls[0].key).toBe('POST /api/gitea/repos');
expect(sent.gitea_url).toBe('https://git.example');
expect(sent.token).toBe('per-request-secret');
});
test('POST /gitea-repos works with no host/token (fleet defaults)', async () => {
const f = jsonFetcher({ 'POST /api/gitea/repos': { status: 200, body: FIXTURE_GITEA_LIST } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/gitea-repos`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: '{}',
});
server.close();
expect(r.status).toBe(200);
const sent = JSON.parse(f.calls[0].opts.body);
expect(sent).toEqual({});
});
test('install success persists no token in the service metadata returned to the panel', async () => {
const f = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/demo-hi', service: 'demo-hi', token: 'per-request-secret' }),
});
const body = await r.json();
server.close();
expect(JSON.stringify(body)).not.toContain('per-request-secret');
});
test('POST /install accepts tokens of 201-512 chars (bridge contract matches proxy)', async () => {
// Round-2 judge: proxy allowed <=512 but the bridge capped at 200, so
// values accepted by the panel could fail downstream. The bridge now
// matches: <=512 is forwarded and must pass proxy validation.
const f = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
for (const len of [201, 300, 512]) {
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', token: 'a'.repeat(len) }),
});
expect(r.status).toBe(200);
}
server.close();
expect(f.calls).toHaveLength(3);
});
test('POST /gitea-repos rejects tokens over 512 chars (400, no proxy call)', async () => {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/gitea-repos`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ gitea_url: 'https://git.example', token: 'x'.repeat(513) }),
});
server.close();
expect(r.status).toBe(400);
expect(f.calls).toHaveLength(0);
});
test('POST /gitea-repos rejects non-string tokens (400, no proxy call)', async () => {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
for (const bad of [12345, {}, ['x']]) {
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/gitea-repos`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ gitea_url: 'https://git.example', token: bad }),
});
expect(r.status).toBe(400);
}
server.close();
expect(f.calls).toHaveLength(0);
});
test('empty-string token means explicitly anonymous: preserved on wire', async () => {
const f = jsonFetcher({ 'POST /api/gitea/repos': { status: 200, body: FIXTURE_GITEA_LIST } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/gitea-repos`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ gitea_url: 'https://git.example', token: '' }),
});
server.close();
expect(r.status).toBe(200);
const sent = JSON.parse(f.calls[0].opts.body);
expect(sent.token).toBe('');
// same explicit-anonymous wire representation on /install
const f2 = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app2 = buildApp(f2.fetchT);
const server2 = app2.listen(0);
const port2 = server2.address().port;
const r2 = await fetch(`http://127.0.0.1:${port2}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', token: '' }),
});
server2.close();
expect(r2.status).toBe(200);
const sent2 = JSON.parse(f2.calls[0].opts.body);
expect(sent2.token).toBe('');
});
test('POST /install rejects non-string tokens (400, no proxy call)', async () => {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', token: { evil: true } }),
});
server.close();
expect(r.status).toBe(400);
expect(f.calls).toHaveLength(0);
});
test('POST /install forwards valid env unchanged', async () => {
const f = jsonFetcher({ 'POST /api/install': { status: 200, body: FIXTURE_INSTALL } });
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const env = { GREETING: 'hello world', PORT_HINT: '8950' };
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST', headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', env }),
});
server.close();
expect(r.status).toBe(200);
expect(JSON.parse(f.calls[0].opts.body).env).toEqual(env);
});
test('POST /install rejects invalid env before bridge call', async () => {
const bad = [
'not-an-object', [], { COUNT: 123 }, { lowercase: 'x' },
{ TOO_LONG: 'x'.repeat(301) }, { QUOTE: 'a"b' }, { SLASH: 'a\\b' },
{ NEWLINE: 'a\nb' }, { NUL: 'a\u0000b' }, { DEL: 'a\u007fb' },
];
for (const env of bad) {
const f = jsonFetcher({});
const app = buildApp(f.fetchT);
const server = app.listen(0);
const port = server.address().port;
const r = await fetch(`http://127.0.0.1:${port}/api/v1/deploys/install`, {
method: 'POST', headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: 'https://git.example/owner/repo', service: 'demo-hi', env }),
});
server.close();
expect(r.status).toBe(400);
expect(f.calls).toHaveLength(0);
}
});
});
+115 -139
View File
@@ -1,141 +1,117 @@
[
{
"id": "router",
"name": "Router UI",
"logo": "/assets/router.png",
"url": "https://router.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "chat",
"name": "Chat",
"logo": "/assets/chat.png",
"url": "https://chat.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "sync",
"name": "Syncthing",
"logo": "/assets/syncthing.png",
"url": "https://sync.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "torrent",
"name": "qBittorrent",
"logo": "/assets/qBittorrent.png",
"url": "https://torrent.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T06:04:55.246Z"
},
{
"id": "sonarr",
"name": "Sonarr",
"logo": "/assets/sonarr.png",
"url": "https://sonarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T06:04:56.612Z"
},
{
"id": "radarr",
"name": "Radarr",
"logo": "/assets/radarr.png",
"url": "https://radarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T08:28:12.359Z"
},
{
"id": "prowlarr",
"name": "Prowlarr",
"logo": "/assets/prowlarr.png",
"url": "https://prowlarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T08:28:13.739Z"
},
{
"id": "ca",
"name": "DashCA",
"logo": "/assets/certificate-icon.png",
"containerId": null,
"appTemplate": "dashca",
"tailscaleOnly": false,
"deployedAt": "2026-02-11T11:47:08.383Z",
"url": "https://ca.sami"
},
{
"id": "plex",
"name": "Plex",
"logo": "/assets/plex.png",
"containerId": null,
"appTemplate": "plex",
"tailscaleOnly": false,
"deployedAt": "2026-02-12T02:18:36.067Z",
"url": "https://plex.sami"
},
{
"id": "requests",
"name": "Seerr",
"logo": "/assets/seerr.png",
"url": "https://requests.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "git",
"name": "Gitea",
"logo": "/assets/gitea.png",
"url": "https://git.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "files",
"name": "Sami Files",
"logo": "/assets/sami-files.png",
"url": "https://files.sami",
"ip": "localhost",
"tailscaleOnly": false,
"containerId": null,
"appTemplate": "sami-files",
"deployedAt": "2026-06-19T00:00:00.000Z"
},
{
"id": "sec",
"name": "Security",
"logo": "/assets/chat.png",
"url": "https://sec.sami",
"ip": "localhost",
"tailscaleOnly": true
},
{
"id": "http-echo",
"name": "http-echo",
"url": "https://echo.sami",
"logo": "https://avatars.githubusercontent.com/u/761456?v=4",
"tailscaleOnly": true,
"isCustom": true
},
{
"id": "demo-hello",
"name": "demo-hello",
"url": "https://demo.sami",
"logo": "https://git.dashcaddy.net/avatars/f19511496aee4ceb8e11150676298d17",
"tailscaleOnly": true,
"isCustom": true
},
{
"id": "demo-hi",
"name": "demo-hi",
"url": "https://hi.sami",
"logo": "",
"tailscaleOnly": true,
"isCustom": true
}
{
"id": "router",
"name": "Router UI",
"logo": "/assets/router.png",
"url": "https://router.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "chat",
"name": "Chat",
"logo": "/assets/chat.png",
"url": "https://chat.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "sync",
"name": "Syncthing",
"logo": "/assets/syncthing.png",
"url": "https://sync.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "torrent",
"name": "qBittorrent",
"logo": "/assets/qBittorrent.png",
"url": "https://torrent.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T06:04:55.246Z"
},
{
"id": "sonarr",
"name": "Sonarr",
"logo": "/assets/sonarr.png",
"url": "https://sonarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T06:04:56.612Z"
},
{
"id": "radarr",
"name": "Radarr",
"logo": "/assets/radarr.png",
"url": "https://radarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T08:28:12.359Z"
},
{
"id": "prowlarr",
"name": "Prowlarr",
"logo": "/assets/prowlarr.png",
"url": "https://prowlarr.sami",
"ip": "localhost",
"tailscaleOnly": false,
"deployedAt": "2026-01-18T08:28:13.739Z"
},
{
"id": "ca",
"name": "DashCA",
"logo": "/assets/certificate-icon.png",
"containerId": null,
"appTemplate": "dashca",
"tailscaleOnly": false,
"deployedAt": "2026-02-11T11:47:08.383Z",
"url": "https://ca.sami"
},
{
"id": "plex",
"name": "Plex",
"logo": "/assets/plex.png",
"containerId": null,
"appTemplate": "plex",
"tailscaleOnly": false,
"deployedAt": "2026-02-12T02:18:36.067Z",
"url": "https://plex.sami"
},
{
"id": "requests",
"name": "Seerr",
"logo": "/assets/seerr.png",
"url": "https://requests.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "git",
"name": "Gitea",
"logo": "/assets/gitea.png",
"url": "https://git.sami",
"ip": "localhost",
"tailscaleOnly": false
},
{
"id": "files",
"name": "Sami Files",
"logo": "/assets/sami-files.png",
"url": "https://files.sami",
"ip": "localhost",
"tailscaleOnly": false,
"containerId": null,
"appTemplate": "sami-files",
"deployedAt": "2026-06-19T00:00:00.000Z"
},
{
"id": "sec",
"name": "Security",
"logo": "/assets/chat.png",
"url": "https://sec.sami",
"ip": "localhost",
"tailscaleOnly": true
}
]
-90
View File
@@ -197,95 +197,5 @@ module.exports = function ({ asyncHandler, log, auditLogger, fetchT }) {
}
}));
// DC-131/133: install from ANY git host — clone+detect+deploy on the bridge
// host, then the client registers the card via POST /api/v1/services.
// Same URL grammar the bridge enforces: any https host/owner/repo. The
// optional per-request token is forwarded to the bridge (validated, never
// stored by either layer).
router.post('/install', asyncHandler(async (req, res) => {
const { repo_url: repoUrl, service, subdomain, args, token, env } = req.body || {};
if (typeof repoUrl !== 'string' || !/^https:\/\/[A-Za-z0-9.-]+(?::\d+)?\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(\.git)?\/?$/.test(repoUrl)) {
return errorResponse(res, 400, 'repo_url must be a https://host/owner/repo URL');
}
if (typeof service !== 'string' || !SERVICE_RE.test(service)) {
return errorResponse(res, 400, 'invalid service name');
}
// Uniform token contract (same as /gitea-repos): supplied token must be
// a string <=512 chars. Empty string is deliberately PRESERVED on the
// wire: the bridge distinguishes "explicit anonymous" from omitted
// (omitted may use the fleet fallback credential).
let cleanToken;
if (token !== undefined) {
if (typeof token !== 'string' || token.length > 512) {
return errorResponse(res, 400, 'invalid token');
}
cleanToken = token;
}
// Mirror the bridge's fail-closed environment contract so invalid
// values never cross the proxy boundary. Valid values are forwarded
// unchanged; omitted env stays omitted.
let cleanEnv;
if (env !== undefined) {
const validEnv = env && typeof env === 'object' && !Array.isArray(env) &&
Object.entries(env).every(([k, v]) =>
/^[A-Z_][A-Z0-9_]*$/.test(k) && typeof v === 'string' &&
v.length <= 300 && !/["\\\x00-\x1f\x7f]/.test(v));
if (!validEnv) {
return errorResponse(res, 400, 'env must map valid uppercase names to strings <=300 chars without quotes, backslashes, or control characters');
}
cleanEnv = env;
}
try {
const { status, body } = await bridge('POST', '/api/install', { repo_url: repoUrl, service, subdomain, args, token: cleanToken, env: cleanEnv }, SHIPDECK_DEPLOY_TIMEOUT);
if (auditLogger) {
auditLogger.log({
action: 'deploy.install',
resource: service,
details: { repo_url: repoUrl, subdomain: subdomain || service },
outcome: body.ok ? 'success' : 'failure',
}).catch(() => {});
}
if (status !== 200 || !body.ok) {
return errorResponse(res, status === 401 ? 502 : status === 500 ? 502 : status, body.error || 'install failed', { output: (body.output || '').slice(-4000) });
}
log.info('deploys', 'Install completed from ' + (repoUrl.split('/')[2] || 'git host'), { service });
return ok(res, { service: body.service, output: body.output });
} catch (e) {
log.error('deploys', 'bridge unreachable during install', { error: e.message });
return errorResponse(res, 502, 'shipdeck bridge unreachable: ' + e.message);
}
}));
// DC-132/133: list Gitea repos installable via the bridge — from any
// instance. POST with a JSON body so host/token ride in the body (a GET
// has no body; the earlier GET handler read req.body and always saw
// undefined). The bridge never persists the token.
router.post('/gitea-repos', asyncHandler(async (req, res) => {
const payload = {};
if (req.body && typeof req.body.gitea_url === 'string' && req.body.gitea_url.trim()) {
payload.gitea_url = req.body.gitea_url.trim();
}
if (req.body && req.body.token !== undefined) {
// Uniform token contract. Empty string is DELIBERATELY preserved on
// the wire: the bridge distinguishes explicit-anonymous from omitted
// (omitted may use the fleet credential).
const t = req.body.token;
if (typeof t !== 'string' || t.length > 512) {
return errorResponse(res, 400, 'invalid token');
}
payload.token = t;
}
try {
const { status, body } = await bridge('POST', '/api/gitea/repos', payload, 20000);
if (status !== 200 || !body.ok) {
return errorResponse(res, status === 502 ? 502 : status, body.error || 'gitea listing failed');
}
return ok(res, { repos: body.repos });
} catch (e) {
return errorResponse(res, 502, 'shipdeck bridge unreachable: ' + e.message);
}
}));
return router;
};
+257
View File
@@ -0,0 +1,257 @@
# DashCaddy Private Network — Product Spec (v1)
> Source: feature brief draft v4 (Sami, 2026-10-03) + technical review (same thread).
> Status: **approved for build** — "Do it and then build the non-tailscale version as well."
> Tickets: DC-140 … DC-152 (see BACKLOG.md "P7 — Private Network lane").
> Judge gate: every commit in this lane is graded via codex-as-judge, min B.
## 1. What we're building
DashCaddy turns a tailnet (or a self-hosted WireGuard hub) into a **managed private
network**: people, devices, per-app access, private DNS names, and a personal
certificate authority — all from one panel.
Two network modes, one product:
| | Tailscale mode (v1 default) | WireGuard mode (self-hosted) |
|---|---|---|
| Data plane | Tailscale (direct, NAT traversal) | WireGuard hub run by DashCaddy on the host |
| Control plane | api.tailscale.com (OAuth client preferred; API key fallback) | DashCaddy itself (host wg-quick + key store) |
| Invites | Tailscale user-invites API, link-first (no email required) | DashCaddy invite link + QR config |
| Block/remove | API device expire/delete + ACL deny | Remove peer from hub + firewall rule |
| Unblock | Re-allow at ACL level; expired device keys must re-authenticate (see §5) | Re-add peer from stored record (immediate) |
| Rules | Tailnet policy ACLs compiled by DashCaddy | Hub firewall (nftables set-based) compiled by DashCaddy |
| Outside dependency | Yes | None |
**Everything above the provider is shared**: people, groups, resources, the access
map, forward_auth enforcement, Technitium names, the CA, the UI. This is enforced
by the provider abstraction (DC-140) — no feature module may call a provider
directly.
## 2. Core concepts and stores
- **Person** — a human. `people.json` (atomic JSON store, same pattern as
invite-store/user-store). Fields: `id`, `displayName`, `providerUserId`
(Tailscale user id or WG pubkey identity), `groups[]`, `status:
active|blocked|removed`, `devices[]`, `createdAt`, `protectedAt` (admin guard).
- **Device** — one machine. Belongs to a person. `keyId` (TS device id / WG peer
pubkey), `name`, `ip` (tailnet IP), `online`, `lastSeen`, `os`.
- **Group** — named bundle of people, DashCaddy-side only (UI concept). Free
Tailscale plans cap ACL groups at 3 — therefore **DashCaddy groups never map
to Tailscale groups**; compiled ACLs reference users directly.
- **Resource** — an app or device reachable by name. `plex.internal`, `nas.internal`.
Derived from the existing services registry + manual entries.
- **Access map** — groups/people × resources grid. Single source of truth.
`network-access.json`: `{ grants: [{ principal: {type:'person'|'group', id}, resource: 'plex', allowed: bool }] }`.
This file, not Tailscale state, is authoritative.
## 3. Provider abstraction (DC-140)
`src/network/` package:
```
src/network/provider.js — NetworkProvider interface (documented contract)
src/network/registry.js — active provider resolution + capability flags
src/network/errors.js — ProviderError { code, retryable }
src/network/providers/tailscale.js
src/network/providers/wireguard.js
```
Contract (all async, all return plain JSON, all validated):
| Method | Tailscale impl | WireGuard impl |
|---|---|---|
| `id()`, `capabilities()` | `'tailscale'` | `'wireguard'` |
| `getStatus()` | tailscale status --json (cached, existing manager) | wg show dump + iface up/down |
| `listDevices()` | API + local status merge | peer store read |
| `listPeople()` | API users → people projection | people.json (self-owned) |
| `createInvite({role, email?})` | POST user-invites (email optional → returns inviteUrl) | mint one-time invite token in store |
| `revokeInvite(id)` | DELETE user-invite | delete token |
| `blockPerson(userId)` | expire all device keys + ACL deny | drop peer + firewall deny set |
| `unblockPerson(userId)` | re-allow at ACL level; expired device keys stay expired (re-auth required, §5) | re-add stored peer (immediate) |
| `removePerson(userId)` | DELETE devices, revoke invites | remove peer + person record |
| `revokeDevice(deviceId)` | expire/delete device key | remove single peer |
| `syncAccess(map, resources)` | compile ACLs → dry-run → push (hash-guarded) | compile nftables → apply → verify |
| `whois(ip)` | local tailscale whois | peer table lookup |
| `configureDns({zone, server})` | split-DNS API | not supported (Technitium direct) |
Capabilities: `{ invites, splitDnsApi, perPeerFirewall, selfHosted }`. Feature
modules check capabilities and degrade cleanly (e.g. WireGuard mode skips the
split-DNS API step and writes Technitium directly).
**Existing routes untouched.** `routes/tailscale.js` / `tailscale-admin.js` keep
working as-is; the new `routes/network.js` + `src/network/` are additive.
## 4. Enforcement — two layers
**Layer 1: network.** The access map compiles to provider rules.
- Tailscale: HuJSON policy with per-user src entries (never groups), `dst` as
`host:port` per resource. DashCaddy host always keeps an explicit allow for
the admin. **Lockout guard** (hard rule, tested): refuse to push any policy
where (a) the last active admin person would lose access to the DashCaddy
host resource, or (b) the DashCaddy host device would lose egress. Use the
ACL preview/dry-run endpoint before every push; keep the last-known-good
policy body for one-click rollback. Store the policy hash after each push and
compare before the next — outside edits ⇒ drift banner, not silent overwrite.
- WireGuard: hub-and-spoke means everyone can reach the hub; per-resource
enforcement is a hub nftables matrix. One nft set per resource
(`net_dc_res_plex`), peer IPs added per grant. **Apply is transactional**:
build the full ruleset to a temp file, `nft -c` (check), swap atomically via
`nft -f`, verify with `nft list set`, roll back file kept.
**Layer 2: app (forward_auth).** Shared across providers.
- Whois path: forward_auth asks DashCaddy which person owns the connecting
device (provider.whois), then checks the access map. Tailnet users get in
without a separate login. **Identity follows the device** — a shared device
grants the owner's access; documented in the UI.
- Step-up: resources flagged `sensitive` additionally require the existing
DashCaddy login + TOTP (reuse sso-gate).
## 5. People lifecycle (DC-141, DC-144)
- Invite = link-first (DC-085 pattern): inviteUrl is the artifact, email is an
opt-in checkbox, never logged raw to console.
- Block: network-layer deny (ACL / firewall) + expire Tailscale device keys + kill
DashCaddy sessions + mark person blocked. **Unblock honestly:** the deny, the
status, and the session policy reverse — but expired Tailscale device keys are
NOT un-expired; those devices must re-authenticate with Tailscale on next
connect. The UI says "blocked devices will need to sign in again" rather than
pretending instant reversal. WireGuard peers restore immediately on re-add
(peer config is re-generated server-side from the stored pubkey).
- Remove: block semantics + delete provider devices + delete person record +
purge from access map. The last active admin can never be blocked/removed
(same guard as the ACL compiler — one shared `assertNotLastAdmin()`).
## 6. Names — Technitium (DC-146)
- Per-resource + per-device A/AAAA records → tailnet IPs, written via
Technitium HTTP API (credential in credential-manager, existing pattern).
- Split DNS: Tailscale mode uses the API when available; check + repair wizard
step. WireGuard mode: devices get Technitium's hub IP as their DNS entry in
the generated client config.
- Record writes are idempotent (upsert by name+type) and verified by resolve.
## 7. Certificate authority (DC-147)
Builds on the existing DashCA pipeline (routes/ca.js, DC-076). Changes:
- Root CN = operator-chosen name ("Ahmed Family Certificate Authority"),
captured at first setup, baked in; rename ⇒ guided re-trust flow (warn at
naming time, not after).
- Root gets a **critical nameConstraints extension** (permittedSubtrees
DNS:<private-tld>). Mark critical so non-understanding clients fail closed.
- Leaves ≤ 398 days, SANs always set, serverAuth EKU (iOS 13+ requirements) —
the existing openssl leaf path already complies; add regression tests that
parse the issued cert and assert all three.
- Branded install page at ca.<tld>: per-OS steps including **iOS's second
step** (enable trust in Settings → General → About → Certificate Trust
Settings), SHA-256 fingerprint for verification, and an Android note that
native apps ignore user CAs (browsers fine).
- Root key never leaves the host except through an explicit wizard step:
encrypted backup download ( passphrase-wrapped ) + checksum.
## 8. WireGuard provider (DC-149–151)
### 8.1 Addressing and routing (exact prefixes)
- Hub interface `dcnet0`: 10.53.0.1/16, listen port chosen at setup (default 51820,
UDP). Endpoint = host's reachable address (setup captures it; wizard warns if
it's behind NAT without a forwarded port).
- Client address pool: 10.53.0.0/16, one /32 per device (10.53.x.y/32 assigned
on device add, stable, stored in people.json devices[]).
- **AllowedIPs = 10.53.0.0/16 only** (a CIDR, never a DNS zone). Split tunnel:
client's other traffic is untouched. Resource names resolve via Technitium
(8.3) to IPs inside 10.53.0.0/16, which routes through the tunnel.
- Hub forwarding: `net.ipv4.ip_forward=1` is required for hub-and-spoke
peer→peer traffic; peer→hub-resource traffic is local. No NAT/masquerade on
dcnet0 — all resource access is to hub-local services on 10.53.0.1 or to
other peers' /32s, so addresses stay routable and firewall rules match peers.
- Firewall baseline — three distinct zones, never conflated:
(a) **External input**: the WireGuard UDP listen port arrives on the EXTERNAL
interface (e.g. eth0), not dcnet0 — its accept rule is scoped to the external
interface name (captured at setup).
(b) **dcnet0 local input** (iifname dcnet0): ICMP from 10.53.0.0/16, admin
ports (API/SSH on 10.53.0.1) from admin peers only, per-resource ports to
10.53.0.1; drop other new inbound to 10.53.0.1.
(c) **dcnet0 forwarding** (ip_forward=1): peer→resource gated by per-resource
sets; peer→peer default DROP (both iifname and oifname dcnet0 tails) unless a
grant implies it.
### 8.2 Key lifecycle (no server-side private-key storage)
- **Client keypairs are generated in the invitee's browser** using WebCrypto
**X25519** — WireGuard requires Curve25519 key material; there is NO fallback
algorithm (a browser lacking X25519 support gets an explicit "browser not
supported" error, not a degraded key). Serialization (browser-export
reality): `exportKey('raw', publicKey)` yields the raw 32-byte public key →
base64. `exportKey('pkcs8', privateKey)` yields a PKCS#8 wrapper — the page
strips the fixed 16-byte PKCS#8 X25519 prefix (`302e020100300506032b656e0422
0420`) to extract the raw 32-byte private key → base64 (`wg genkey`-format;
the extraction is pure byte-slicing of a fixed-prefix wrapper, verified by
length/constant-prefix assertions before use). The server receives the base64
public key (44 chars) and validates length/charset before use.
- The redemption page posts ONLY the public key to the server; the server
registers it as a WireGuard peer (10.53.x.y/32) and returns the client
config (Address, DNS, PublicKey of hub, AllowedIPs = 10.53.0.0/16).
- The private key NEVER transits or rests on the server: it lives in the
browser page for the session, rendered into the config + QR client-side.
- Server stores: peer public keys, assigned /32s, names — nothing else.
- Revocation = remove peer (pubkey) from the hub + firewall-set update; the
client's private key becomes useless without hub acceptance.
### 8.3 DNS
- Technitium serves the private zone on the hub IP (10.53.0.1). Client config
DNS = 10.53.0.1. Per-resource/per-device records resolve to 10.53.x.y /32s
(per DC-146). In Tailscale mode, the same records hold tailnet IPs instead.
### 8.4 Hub management
- `wg-quick` interface `dcnet0` managed by DashCaddy (systemd unit
`dcnet-hub.service` if absent), keygen for the HUB keypair on the host
(hub key is host-local and backed up with it).
### 8.5 Invites
- Invite redemption: one-time token (7-day TTL, single-use) → redemption page
(browser keygen per 8.2) → config + QR rendered client-side, page
auto-expires after redemption.
- Firewall: nftables matrix (section 4). Server resources listen on the hub IP;
per-resource sets gate peer access. The host's own admin ports are NOT
exposed on dcnet0 except to admins.
WireGuard mode dependency note: "no third party" still depends on host
networking — a reachable UDP endpoint, wireguard-tools, nftables, and Technitium
on the DashCaddy host.
## 9. Setup wizard (DC-152)
Single flow, mode pick first:
1. Mode: Tailscale (paste OAuth client secret or API key — surface expiry
warnings for API keys, ≤90-day; recommend OAuth client `tskey-client-`) or
WireGuard (port, endpoint hostname/IP).
2. Private domain pick (default `.internal`, `home.arpa` offered, custom with
"could become real later" warning).
3. Provider connect + health check + first sync.
4. Technitium zone + split-DNS check.
5. CA naming (locked-in warning) + root generation + install page link.
6. First person (the admin — protected).
## 10. Non-goals (explicitly out of scope for this lane)
- Headscale support. Subnet routers / LAN access. Time-limited access.
- Multi-hub HA. Client auto-updaters. Migration between modes with data
carry-over (documented manual path only — switching re-runs the wizard).
## 11. Test strategy
- Every new module: Jest unit tests with the same mock rigor as
tailscale-manager.test.js (no live network in tests).
- ACL compiler: golden-policy tests (map JSON → expected HuJSON), lockout-guard
adversarial cases (last-admin removal, host egress cut, drift detection).
- WG provider: execFile-mocked `wg`/`nft` binaries; ruleset built to temp and
compared as text; transactional-apply failure injection.
- forward_auth: route tests against the running supertest app (existing
__tests__/routes pattern), including shared-device semantics.
- After merge + deploy to the dev rig: live-curl every new route (the DC-048
discipline — hermetic green is not production proof).
+163 -204
View File
@@ -90,44 +90,44 @@
<button id="logo-save" class="btn-accent">Save</button>
</div>
</div>
</div>`);const f=document.getElementById("logo-modal"),B=document.getElementById("logo-preview-dark"),j=document.getElementById("logo-preview-light"),b=document.getElementById("logo-status"),D=document.getElementById("logo-same-both"),A=document.getElementById("logo-dual-uploads"),P=document.getElementById("logo-single-upload"),R=document.getElementById("logo-upload-dark"),k=document.getElementById("logo-upload-light"),M=document.getElementById("logo-upload-single"),E=document.querySelector("#brand .brand-logo-dark"),z=document.querySelector("#brand .brand-logo-light"),C=document.querySelector(".top-row"),N=document.getElementById("dashboard-title"),x=DC.NAME;let I=null,H=null,m=null,L="left",T=x;D?.addEventListener("change",()=>{D.checked?(A.style.display="none",P.style.display="",I=null,H=null):(A.style.display="flex",P.style.display="none",m=null)});function O(t,e){if(!t||!t.type.startsWith("image/")){showNotification("Please select an image file","warning");return}const a=new FileReader;a.onload=o=>e(o.target.result),a.readAsDataURL(t)}R?.addEventListener("change",t=>{O(t.target.files[0],e=>{I=e,B.src=e,b.textContent="New dark logo ready to save"})}),k?.addEventListener("change",t=>{O(t.target.files[0],e=>{H=e,j.src=e,b.textContent="New light logo ready to save"})}),M?.addEventListener("change",t=>{O(t.target.files[0],e=>{m=e,B.src=e,j.src=e,b.textContent="New logo ready to save (both themes)"})});function u(t){C.setAttribute("data-logo-pos",t),document.querySelectorAll(".logo-pos-btn").forEach(e=>{e.style.background=e.dataset.pos===t?"var(--accent)":"var(--card-bg)",e.style.color=e.dataset.pos===t?"white":"var(--fg)"})}function g(t){T=t||x,document.title=T;const e=document.querySelector(".dashboard-title");e&&(e.textContent=T)}async function S(){try{const t=await fetch("/api/v1/logo");if(t.ok){const e=await t.json();e.customLogoDark&&(E.src=e.customLogoDark,B.src=e.customLogoDark),e.customLogoLight&&(z.src=e.customLogoLight,j.src=e.customLogoLight),!e.customLogoDark&&!e.customLogoLight&&e.customLogo&&(E.src=e.customLogo,z.src=e.customLogo,B.src=e.customLogo,j.src=e.customLogo),e.isDefault||(b.textContent="Using custom logo"),e.position&&(L=e.position,u(e.position)),e.dashboardTitle&&g(e.dashboardTitle)}}catch(t){console.warn("Could not load custom logo:",t.message)}}document.querySelectorAll(".logo-pos-btn").forEach(t=>{t.addEventListener("click",()=>{L=t.dataset.pos,u(L)})}),document.getElementById("brand")?.addEventListener("click",()=>{I=null,H=null,m=null,R&&(R.value=""),k&&(k.value=""),M&&(M.value=""),D&&(D.checked=!1),A.style.display="flex",P.style.display="none",B.src=E.src,j.src=z.src;const t=E.src.includes("custom-logo")||z.src.includes("custom-logo");b.textContent=t?"Using custom logo":"Using default logos",u(L),N.value=T,f.classList.add("show")}),document.getElementById("logo-save")?.addEventListener("click",async()=>{try{const t=N.value.trim()||x,e={position:L,dashboardTitle:t};D?.checked&&m?(e.dataDark=m,e.dataLight=m):(I&&(e.dataDark=I),H&&(e.dataLight=H));const a=await secureFetch("/api/v1/logo",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(a.ok){const o=await a.json(),i="?t="+Date.now();o.pathDark&&(E.src=o.pathDark+i,B.src=o.pathDark+i),o.pathLight&&(z.src=o.pathLight+i,j.src=o.pathLight+i),u(L),g(t),f.classList.remove("show")}else{const o=await a.json();showNotification("Failed to save: "+o.error,"error")}}catch(t){showNotification("Error saving: "+t.message,"error")}}),document.getElementById("logo-reset")?.addEventListener("click",async()=>{if(confirm(`Reset all branding to DashCaddy defaults?
</div>`);const b=document.getElementById("logo-modal"),C=document.getElementById("logo-preview-dark"),j=document.getElementById("logo-preview-light"),k=document.getElementById("logo-status"),z=document.getElementById("logo-same-both"),P=document.getElementById("logo-dual-uploads"),H=document.getElementById("logo-single-upload"),A=document.getElementById("logo-upload-dark"),x=document.getElementById("logo-upload-light"),B=document.getElementById("logo-upload-single"),w=document.querySelector("#brand .brand-logo-dark"),M=document.querySelector("#brand .brand-logo-light"),L=document.querySelector(".top-row"),$=document.getElementById("dashboard-title"),u=DC.NAME;let v=null,D=null,I=null,R="left",N=u;z?.addEventListener("change",()=>{z.checked?(P.style.display="none",H.style.display="",v=null,D=null):(P.style.display="flex",H.style.display="none",I=null)});function O(t,e){if(!t||!t.type.startsWith("image/")){showNotification("Please select an image file","warning");return}const a=new FileReader;a.onload=o=>e(o.target.result),a.readAsDataURL(t)}A?.addEventListener("change",t=>{O(t.target.files[0],e=>{v=e,C.src=e,k.textContent="New dark logo ready to save"})}),x?.addEventListener("change",t=>{O(t.target.files[0],e=>{D=e,j.src=e,k.textContent="New light logo ready to save"})}),B?.addEventListener("change",t=>{O(t.target.files[0],e=>{I=e,C.src=e,j.src=e,k.textContent="New logo ready to save (both themes)"})});function m(t){L.setAttribute("data-logo-pos",t),document.querySelectorAll(".logo-pos-btn").forEach(e=>{e.style.background=e.dataset.pos===t?"var(--accent)":"var(--card-bg)",e.style.color=e.dataset.pos===t?"white":"var(--fg)"})}function y(t){N=t||u,document.title=N;const e=document.querySelector(".dashboard-title");e&&(e.textContent=N)}async function S(){try{const t=await fetch("/api/v1/logo");if(t.ok){const e=await t.json();e.customLogoDark&&(w.src=e.customLogoDark,C.src=e.customLogoDark),e.customLogoLight&&(M.src=e.customLogoLight,j.src=e.customLogoLight),!e.customLogoDark&&!e.customLogoLight&&e.customLogo&&(w.src=e.customLogo,M.src=e.customLogo,C.src=e.customLogo,j.src=e.customLogo),e.isDefault||(k.textContent="Using custom logo"),e.position&&(R=e.position,m(e.position)),e.dashboardTitle&&y(e.dashboardTitle)}}catch(t){console.warn("Could not load custom logo:",t.message)}}document.querySelectorAll(".logo-pos-btn").forEach(t=>{t.addEventListener("click",()=>{R=t.dataset.pos,m(R)})}),document.getElementById("brand")?.addEventListener("click",()=>{v=null,D=null,I=null,A&&(A.value=""),x&&(x.value=""),B&&(B.value=""),z&&(z.checked=!1),P.style.display="flex",H.style.display="none",C.src=w.src,j.src=M.src;const t=w.src.includes("custom-logo")||M.src.includes("custom-logo");k.textContent=t?"Using custom logo":"Using default logos",m(R),$.value=N,b.classList.add("show")}),document.getElementById("logo-save")?.addEventListener("click",async()=>{try{const t=$.value.trim()||u,e={position:R,dashboardTitle:t};z?.checked&&I?(e.dataDark=I,e.dataLight=I):(v&&(e.dataDark=v),D&&(e.dataLight=D));const a=await secureFetch("/api/v1/logo",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(e)});if(a.ok){const o=await a.json(),i="?t="+Date.now();o.pathDark&&(w.src=o.pathDark+i,C.src=o.pathDark+i),o.pathLight&&(M.src=o.pathLight+i,j.src=o.pathLight+i),m(R),y(t),b.classList.remove("show")}else{const o=await a.json();showNotification("Failed to save: "+o.error,"error")}}catch(t){showNotification("Error saving: "+t.message,"error")}}),document.getElementById("logo-reset")?.addEventListener("click",async()=>{if(confirm(`Reset all branding to DashCaddy defaults?
This will reset the logo, favicon, title, and position.`))try{if((await secureFetch("/api/v1/logo",{method:"DELETE"})).ok&&(E.src="/assets/dashcaddy-logo-dark.png",z.src="/assets/dashcaddy-logo-light.png",B.src="/assets/dashcaddy-logo-dark.png",j.src="/assets/dashcaddy-logo-light.png",b.textContent="Using default logos",I=null,H=null,m=null,N.value=x,g(x),L="left",u("left")),(await secureFetch("/api/v1/favicon",{method:"DELETE"})).ok){const a=document.querySelector('link[rel="icon"]'),o=document.getElementById("favicon-preview"),i=document.getElementById("favicon-status");a&&(a.href="/assets/dashcaddy-favicon.ico?t="+Date.now()),o&&(o.src="/assets/dashcaddy-favicon.ico?t="+Date.now()),i&&(i.textContent="Using DashCaddy favicon"),l=null}}catch(t){showNotification("Error resetting branding: "+t.message,"error")}}),wireModal(f,document.getElementById("logo-cancel"));const y=document.getElementById("favicon-preview"),w=document.getElementById("favicon-status"),s=document.getElementById("favicon-upload"),p=document.querySelector('link[rel="icon"]')||document.createElement("link");let l=null;document.querySelector('link[rel="icon"]')||(p.rel="icon",p.href="/assets/dashcaddy-favicon.ico",document.head.appendChild(p));async function v(){try{const t=await fetch("/api/v1/favicon");if(t.ok){const e=await t.json();e.customFavicon&&(p.href=e.customFavicon+"?t="+Date.now(),y.src=e.customFavicon+"?t="+Date.now(),w.textContent="Using custom favicon")}}catch(t){console.warn("Could not load custom favicon:",t.message)}}s?.addEventListener("change",t=>{const e=t.target.files[0];if(!e)return;if(!e.type.match(/^image\/(png|svg\+xml)$/)){showNotification("Please select a PNG or SVG file","warning"),s.value="";return}const a=new FileReader;a.onload=o=>{l=o.target.result,y.src=l,w.textContent="New favicon ready to save"},a.readAsDataURL(e)}),document.getElementById("logo-save")?.addEventListener("click",async()=>{if(l)try{const t=await secureFetch("/api/v1/favicon",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({data:l})});if(t.ok){const e=await t.json();p.href=e.path+"?t="+Date.now(),y.src=e.path+"?t="+Date.now(),w.textContent="Using custom favicon",l=null}else{const e=await t.json();showNotification("Failed to save favicon: "+e.error,"error")}}catch(t){showNotification("Error saving favicon: "+t.message,"error")}}),v(),S();const c=document.getElementById("settings-timezone");c&&(new MutationObserver(()=>{f.classList.contains("show")&&c.options.length===0&&(async()=>{let e;try{const a=await fetch("/api/v1/config");a.ok&&(e=(await a.json()).timezone)}catch{}window.populateTimezoneSelect(c,e)})()}).observe(f,{attributes:!0,attributeFilter:["class"]}),document.getElementById("logo-save")?.addEventListener("click",async()=>{const e=c.value;if(e)try{const a=await fetch("/api/v1/config");if(!a.ok)return;const o=await a.json();o.timezone=e,o.updatedAt=new Date().toISOString(),await secureFetch("/api/v1/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)})}catch(a){console.warn("Failed to save timezone:",a.message)}}))})(),window.populateTimezoneSelect=function(f,B){const j=Intl.supportedValuesOf("timeZone"),b=B||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC";f.innerHTML="";for(const D of j){const A=document.createElement("option");A.value=D,A.textContent=D.replace(/_/g," "),D===b&&(A.selected=!0),f.appendChild(A)}},(function(){let f="homelab",B=null;async function j(){try{const g=await fetch("/api/v1/config");if(g.ok&&(B=await g.json(),B&&B.setupComplete))return document.getElementById("setup-wizard").style.display="none",!0}catch(g){console.warn("Could not fetch server config, checking localStorage fallback:",g.message)}return safeGet("dashcaddy-setup")?(document.getElementById("setup-wizard").style.display="none",!0):(document.getElementById("setup-wizard").style.display="flex",!1)}j();const b=document.getElementById("setup-timezone");b&&window.populateTimezoneSelect(b);function D(u){document.querySelectorAll(".setup-step").forEach(S=>{S.style.display="none"});const g=document.getElementById(u);g&&(g.style.display="block")}function A(){const u=document.getElementById("setup-summary-content");if(!u)return;let g='<div style="display: grid; gap: 20px;">';if(f==="homelab"){const y=document.getElementById("setup-tld")?.value?.trim()||".home",w=document.getElementById("setup-ca-name")?.value?.trim()||"",s=document.getElementById("setup-dns-ip")?.value?.trim()||"",p=document.getElementById("setup-dns-port")?.value?.trim()||DC.DEFAULTS.DNS_PORT;g+=`
This will reset the logo, favicon, title, and position.`))try{if((await secureFetch("/api/v1/logo",{method:"DELETE"})).ok&&(w.src="/assets/dashcaddy-logo-dark.png",M.src="/assets/dashcaddy-logo-light.png",C.src="/assets/dashcaddy-logo-dark.png",j.src="/assets/dashcaddy-logo-light.png",k.textContent="Using default logos",v=null,D=null,I=null,$.value=u,y(u),R="left",m("left")),(await secureFetch("/api/v1/favicon",{method:"DELETE"})).ok){const a=document.querySelector('link[rel="icon"]'),o=document.getElementById("favicon-preview"),i=document.getElementById("favicon-status");a&&(a.href="/assets/dashcaddy-favicon.ico?t="+Date.now()),o&&(o.src="/assets/dashcaddy-favicon.ico?t="+Date.now()),i&&(i.textContent="Using DashCaddy favicon"),l=null}}catch(t){showNotification("Error resetting branding: "+t.message,"error")}}),wireModal(b,document.getElementById("logo-cancel"));const f=document.getElementById("favicon-preview"),E=document.getElementById("favicon-status"),s=document.getElementById("favicon-upload"),p=document.querySelector('link[rel="icon"]')||document.createElement("link");let l=null;document.querySelector('link[rel="icon"]')||(p.rel="icon",p.href="/assets/dashcaddy-favicon.ico",document.head.appendChild(p));async function g(){try{const t=await fetch("/api/v1/favicon");if(t.ok){const e=await t.json();e.customFavicon&&(p.href=e.customFavicon+"?t="+Date.now(),f.src=e.customFavicon+"?t="+Date.now(),E.textContent="Using custom favicon")}}catch(t){console.warn("Could not load custom favicon:",t.message)}}s?.addEventListener("change",t=>{const e=t.target.files[0];if(!e)return;if(!e.type.match(/^image\/(png|svg\+xml)$/)){showNotification("Please select a PNG or SVG file","warning"),s.value="";return}const a=new FileReader;a.onload=o=>{l=o.target.result,f.src=l,E.textContent="New favicon ready to save"},a.readAsDataURL(e)}),document.getElementById("logo-save")?.addEventListener("click",async()=>{if(l)try{const t=await secureFetch("/api/v1/favicon",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({data:l})});if(t.ok){const e=await t.json();p.href=e.path+"?t="+Date.now(),f.src=e.path+"?t="+Date.now(),E.textContent="Using custom favicon",l=null}else{const e=await t.json();showNotification("Failed to save favicon: "+e.error,"error")}}catch(t){showNotification("Error saving favicon: "+t.message,"error")}}),g(),S();const c=document.getElementById("settings-timezone");c&&(new MutationObserver(()=>{b.classList.contains("show")&&c.options.length===0&&(async()=>{let e;try{const a=await fetch("/api/v1/config");a.ok&&(e=(await a.json()).timezone)}catch{}window.populateTimezoneSelect(c,e)})()}).observe(b,{attributes:!0,attributeFilter:["class"]}),document.getElementById("logo-save")?.addEventListener("click",async()=>{const e=c.value;if(e)try{const a=await fetch("/api/v1/config");if(!a.ok)return;const o=await a.json();o.timezone=e,o.updatedAt=new Date().toISOString(),await secureFetch("/api/v1/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(o)})}catch(a){console.warn("Failed to save timezone:",a.message)}}))})(),window.populateTimezoneSelect=function(b,C){const j=Intl.supportedValuesOf("timeZone"),k=C||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC";b.innerHTML="";for(const z of j){const P=document.createElement("option");P.value=z,P.textContent=z.replace(/_/g," "),z===k&&(P.selected=!0),b.appendChild(P)}},(function(){let b="homelab",C=null;async function j(){try{const y=await fetch("/api/v1/config");if(y.ok&&(C=await y.json(),C&&C.setupComplete))return document.getElementById("setup-wizard").style.display="none",!0}catch(y){console.warn("Could not fetch server config, checking localStorage fallback:",y.message)}return safeGet("dashcaddy-setup")?(document.getElementById("setup-wizard").style.display="none",!0):(document.getElementById("setup-wizard").style.display="flex",!1)}j();const k=document.getElementById("setup-timezone");k&&window.populateTimezoneSelect(k);function z(m){document.querySelectorAll(".setup-step").forEach(S=>{S.style.display="none"});const y=document.getElementById(m);y&&(y.style.display="block")}function P(){const m=document.getElementById("setup-summary-content");if(!m)return;let y='<div style="display: grid; gap: 20px;">';if(b==="homelab"){const f=document.getElementById("setup-tld")?.value?.trim()||".home",E=document.getElementById("setup-ca-name")?.value?.trim()||"",s=document.getElementById("setup-dns-ip")?.value?.trim()||"",p=document.getElementById("setup-dns-port")?.value?.trim()||DC.DEFAULTS.DNS_PORT;y+=`
<div>
<h3 style="margin: 0 0 12px; color: var(--accent);">Home Lab Configuration</h3>
<div style="display: grid; gap: 12px; font-size: 0.95rem;">
<div><strong>TLD:</strong> ${y}</div>
<div><strong>Certificate Authority:</strong> ${w}</div>
<div><strong>TLD:</strong> ${f}</div>
<div><strong>Certificate Authority:</strong> ${E}</div>
<div><strong>DNS Server:</strong> ${s}:${p}</div>
<div><strong>Example URLs:</strong> https://uptime${y}, https://nextcloud${y}</div>
<div><strong>Example URLs:</strong> https://uptime${f}, https://nextcloud${f}</div>
</div>
</div>
`}else if(f==="simple"){const y=document.getElementById("setup-simple-ip")?.value?.trim()||"localhost";g+=`
`}else if(b==="simple"){const f=document.getElementById("setup-simple-ip")?.value?.trim()||"localhost";y+=`
<div>
<h3 style="margin: 0 0 12px; color: var(--accent);">Simple Setup</h3>
<div style="display: grid; gap: 12px; font-size: 0.95rem;">
<div><strong>Access Method:</strong> IP:Port only</div>
<div><strong>Default IP:</strong> ${y}</div>
<div><strong>Default IP:</strong> ${f}</div>
<div><strong>SSL:</strong> None (HTTP only)</div>
<div><strong>Example URLs:</strong> http://${y}:8080, http://${y}:3000</div>
<div><strong>Example URLs:</strong> http://${f}:8080, http://${f}:3000</div>
</div>
</div>
`}else if(f==="public"){const y=document.getElementById("setup-public-domain")?.value?.trim()||"",w=document.getElementById("setup-public-email")?.value?.trim()||"",s=document.querySelector('input[name="routing-mode"]:checked')?.value||"subdirectory",p=s==="subdirectory"?`https://${y}/sonarr, https://${y}/grafana`:`https://sonarr.${y}, https://grafana.${y}`;g+=`
`}else if(b==="public"){const f=document.getElementById("setup-public-domain")?.value?.trim()||"",E=document.getElementById("setup-public-email")?.value?.trim()||"",s=document.querySelector('input[name="routing-mode"]:checked')?.value||"subdirectory",p=s==="subdirectory"?`https://${f}/sonarr, https://${f}/grafana`:`https://sonarr.${f}, https://grafana.${f}`;y+=`
<div>
<h3 style="margin: 0 0 12px; color: var(--accent);">Public Server</h3>
<div style="display: grid; gap: 12px; font-size: 0.95rem;">
<div><strong>Domain:</strong> ${y}</div>
<div><strong>Domain:</strong> ${f}</div>
<div><strong>SSL:</strong> Let's Encrypt</div>
<div><strong>Email:</strong> ${w}</div>
<div><strong>Email:</strong> ${E}</div>
<div><strong>Routing:</strong> ${s==="subdirectory"?"Subdirectory (domain.com/app)":"Subdomain (app.domain.com)"}</div>
<div><strong>Example URLs:</strong> ${p}</div>
</div>
</div>
`}const S=document.getElementById("setup-timezone")?.value||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC";g+=`
`}const S=document.getElementById("setup-timezone")?.value||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC";y+=`
<div style="margin-top: 8px; padding-top: 12px; border-top: 1px solid var(--border);">
<div style="font-size: 0.95rem;"><strong>Timezone:</strong> ${S.replace(/_/g," ")}</div>
</div>
`,g+="</div>",u.innerHTML=g,D("setup-step-summary")}async function P(u){try{const g=await secureFetch("/api/v1/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(u)});return g.ok?(await g.json(),!0):(errorHandler.logError("[SetupWizard] Save Config",new Error(`Server returned ${g.status}`),{function:"saveConfigToServer"}),!1)}catch(g){return errorHandler.logError("[SetupWizard] Save Config",g,{function:"saveConfigToServer"}),!1}}async function R(){const u={setupComplete:!0,configurationType:f,timestamp:new Date().toISOString(),timezone:document.getElementById("setup-timezone")?.value||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC"};if(f==="homelab"){u.tld=document.getElementById("setup-tld")?.value?.trim()||".home",u.caName=document.getElementById("setup-ca-name")?.value?.trim()||"";const w=document.getElementById("setup-dns-provider")?.value||"technitium";u.dns={provider:w,ip:document.getElementById("setup-dns-ip")?.value?.trim()||"",port:document.getElementById("setup-dns-port")?.value?.trim()||DC.DEFAULTS.DNS_PORT,token:document.getElementById("setup-dns-token")?.value?.trim()||""},u.defaults={dnsType:"private",sslType:"internal",targetIP:"localhost"}}else f==="simple"?(u.defaultIP=document.getElementById("setup-simple-ip")?.value?.trim()||"localhost",u.defaults={dnsType:"none",sslType:"none",targetIP:u.defaultIP}):f==="public"&&(u.domain=document.getElementById("setup-public-domain")?.value?.trim()||"",u.email=document.getElementById("setup-public-email")?.value?.trim()||"",u.routingMode=document.querySelector('input[name="routing-mode"]:checked')?.value||"subdirectory",u.defaults={dnsType:u.routingMode==="subdirectory"?"none":"public",sslType:"letsencrypt",targetIP:"localhost"});const g=await P(u);safeSet("dashcaddy-config",JSON.stringify(u)),safeSet("dashcaddy-setup","completed"),document.getElementById("setup-wizard").style.display="none";const S=f==="homelab"?"Professional Home Lab":f==="simple"?"Simple Setup":"Public Server",y=g?"server (shared across all devices)":"locally (this browser only)";showNotification(`Setup Complete! Configured for: ${S}. Settings saved to: ${y}`,"success",5e3),setTimeout(()=>location.reload(),500)}const k=document.getElementById("setup-step-1-next");k&&(k.onclick=function(u){u.preventDefault();const g=document.querySelector('input[name="config-type"]:checked');g&&(f=g.value),D(f==="homelab"?"setup-step-homelab":f==="simple"?"setup-step-simple":f==="public"?"setup-step-public":"setup-step-homelab")});const M=document.getElementById("setup-skip");M&&(M.onclick=async function(u){u.preventDefault(),confirm("Skip setup? You can run it later from Settings.")&&(await P({setupComplete:!0,skipped:!0,timestamp:new Date().toISOString()}),safeSet("dashcaddy-setup","skipped"),document.getElementById("setup-wizard").style.display="none")});const E=document.getElementById("setup-tld");E&&(E.oninput=function(u){const g=u.target.value||".home",S=document.getElementById("tld-preview"),y=document.getElementById("tld-preview-2");S&&(S.textContent=g),y&&(y.textContent=g)});const z=document.getElementById("setup-homelab-back");z&&(z.onclick=function(u){u.preventDefault(),D("setup-step-1")});const C=document.getElementById("setup-homelab-next");C&&(C.onclick=function(u){u.preventDefault();const g=document.getElementById("setup-tld")?.value?.trim()||"",S=document.getElementById("setup-ca-name")?.value?.trim()||"",y=document.getElementById("setup-dns-ip")?.value?.trim()||"";if(!g||!g.startsWith(".")){showNotification("Please enter a valid TLD starting with a dot (e.g., .home)","warning");return}if(!S){showNotification("Please enter a Certificate Authority name","warning");return}if(!y){showNotification("Please enter your DNS server IP address","warning");return}A()});const N=document.getElementById("setup-simple-back");N&&(N.onclick=function(u){u.preventDefault(),D("setup-step-1")});const x=document.getElementById("setup-simple-next");x&&(x.onclick=function(u){u.preventDefault(),A()}),document.querySelectorAll('input[name="routing-mode"]').forEach(function(u){u.onchange=function(){var g=document.getElementById("dns-requirement-note");g&&(g.textContent=this.value==="subdirectory"?"Only one DNS record needed (for the main domain)":"You'll need to configure DNS manually for each subdomain")}});const I=document.getElementById("setup-public-back");I&&(I.onclick=function(u){u.preventDefault(),D("setup-step-1")});const H=document.getElementById("setup-public-next");H&&(H.onclick=function(u){u.preventDefault();const g=document.getElementById("setup-public-domain")?.value?.trim()||"",S=document.getElementById("setup-public-email")?.value?.trim()||"";if(!g){showNotification("Please enter your domain name","warning");return}if(!S||!S.includes("@")){showNotification("Please enter a valid email address","warning");return}A()});const m=document.getElementById("setup-summary-back");m&&(m.onclick=function(u){u.preventDefault(),f==="homelab"?D("setup-step-homela Line truncated
`,y+="</div>",m.innerHTML=y,z("setup-step-summary")}async function H(m){try{const y=await secureFetch("/api/v1/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(m)});return y.ok?(await y.json(),!0):(errorHandler.logError("[SetupWizard] Save Config",new Error(`Server returned ${y.status}`),{function:"saveConfigToServer"}),!1)}catch(y){return errorHandler.logError("[SetupWizard] Save Config",y,{function:"saveConfigToServer"}),!1}}async function A(){const m={setupComplete:!0,configurationType:b,timestamp:new Date().toISOString(),timezone:document.getElementById("setup-timezone")?.value||Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC"};if(b==="homelab"){m.tld=document.getElementById("setup-tld")?.value?.trim()||".home",m.caName=document.getElementById("setup-ca-name")?.value?.trim()||"";const E=document.getElementById("setup-dns-provider")?.value||"technitium";m.dns={provider:E,ip:document.getElementById("setup-dns-ip")?.value?.trim()||"",port:document.getElementById("setup-dns-port")?.value?.trim()||DC.DEFAULTS.DNS_PORT,token:document.getElementById("setup-dns-token")?.value?.trim()||""},m.defaults={dnsType:"private",sslType:"internal",targetIP:"localhost"}}else b==="simple"?(m.defaultIP=document.getElementById("setup-simple-ip")?.value?.trim()||"localhost",m.defaults={dnsType:"none",sslType:"none",targetIP:m.defaultIP}):b==="public"&&(m.domain=document.getElementById("setup-public-domain")?.value?.trim()||"",m.email=document.getElementById("setup-public-email")?.value?.trim()||"",m.routingMode=document.querySelector('input[name="routing-mode"]:checked')?.value||"subdirectory",m.defaults={dnsType:m.routingMode==="subdirectory"?"none":"public",sslType:"letsencrypt",targetIP:"localhost"});const y=await H(m);safeSet("dashcaddy-config",JSON.stringify(m)),safeSet("dashcaddy-setup","completed"),document.getElementById("setup-wizard").style.display="none";const S=b==="homelab"?"Professional Home Lab":b==="simple"?"Simple Setup":"Public Server",f=y?"server (shared across all devices)":"locally (this browser only)";showNotification(`Setup Complete! Configured for: ${S}. Settings saved to: ${f}`,"success",5e3),setTimeout(()=>location.reload(),500)}const x=document.getElementById("setup-step-1-next");x&&(x.onclick=function(m){m.preventDefault();const y=document.querySelector('input[name="config-type"]:checked');y&&(b=y.value),z(b==="homelab"?"setup-step-homelab":b==="simple"?"setup-step-simple":b==="public"?"setup-step-public":"setup-step-homelab")});const B=document.getElementById("setup-skip");B&&(B.onclick=async function(m){m.preventDefault(),confirm("Skip setup? You can run it later from Settings.")&&(await H({setupComplete:!0,skipped:!0,timestamp:new Date().toISOString()}),safeSet("dashcaddy-setup","skipped"),document.getElementById("setup-wizard").style.display="none")});const w=document.getElementById("setup-tld");w&&(w.oninput=function(m){const y=m.target.value||".home",S=document.getElementById("tld-preview"),f=document.getElementById("tld-preview-2");S&&(S.textContent=y),f&&(f.textContent=y)});const M=document.getElementById("setup-homelab-back");M&&(M.onclick=function(m){m.preventDefault(),z("setup-step-1")});const L=document.getElementById("setup-homelab-next");L&&(L.onclick=function(m){m.preventDefault();const y=document.getElementById("setup-tld")?.value?.trim()||"",S=document.getElementById("setup-ca-name")?.value?.trim()||"",f=document.getElementById("setup-dns-ip")?.value?.trim()||"";if(!y||!y.startsWith(".")){showNotification("Please enter a valid TLD starting with a dot (e.g., .home)","warning");return}if(!S){showNotification("Please enter a Certificate Authority name","warning");return}if(!f){showNotification("Please enter your DNS server IP address","warning");return}P()});const $=document.getElementById("setup-simple-back");$&&($.onclick=function(m){m.preventDefault(),z("setup-step-1")});const u=document.getElementById("setup-simple-next");u&&(u.onclick=function(m){m.preventDefault(),P()}),document.querySelectorAll('input[name="routing-mode"]').forEach(function(m){m.onchange=function(){var y=document.getElementById("dns-requirement-note");y&&(y.textContent=this.value==="subdirectory"?"Only one DNS record needed (for the main domain)":"You'll need to configure DNS manually for each subdomain")}});const v=document.getElementById("setup-public-back");v&&(v.onclick=function(m){m.preventDefault(),z("setup-step-1")});const D=document.getElementById("setup-public-next");D&&(D.onclick=function(m){m.preventDefault();const y=document.getElementById("setup-public-domain")?.value?.trim()||"",S=document.getElementById("setup-public-email")?.value?.trim()||"";if(!y){showNotification("Please enter your domain name","warning");return}if(!S||!S.includes("@")){showNotification("Please enter a valid email address","warning");return}P()});const I=document.getElementById("setup-summary-back");I&&(I.onclick=function(m){m.preventDefault(),b==="homelab"?z("setup-step-homela Line truncated
<div class="app-selector-content">
<h2 style="margin: 0 0 24px; color: var(--fg); text-align: center;">Choose an App</h2>
<div id="app-selector-grid" class="app-selector-grid"></div>
@@ -333,12 +333,12 @@ This will reset the logo, favicon, title, and position.`))try{if((await secureFe
</button>
</div>
</div>
</div>`);const B="custom-apps";let j=null,b=null;const D=document.getElementById("app-selector-modal"),A=document.getElementById("app-selector-grid");async function P(){try{const p=await(await fetch("/api/v1/apps/templates")).json();if(p.success)return j=p.templates,b=p.categories,!0}catch(s){f.logError("[AppSelector] Fetch Templates",s,{function:"fetchApiTemplates"})}return!1}async function R(s){try{return await(await fetch(`/api/v1/apps/ports/${s}/check`)).json()}catch(p){return f.logError("[AppSelector] Check Port",p,{function:"checkPortAvailability"}),{available:!0}}}async function k(s){try{const l=await(await fetch(`/api/v1/apps/ports/${s}/suggest`)).json();if(l.success)return l.suggestedPort}catch(p){f.logError("[AppSelector] Get Suggested Port",p,{function:"getSuggestedPort"})}return s}async function M(){if(A.innerHTML='<div style="text-align: center; padding: 40px; color: var(--muted);">Loading app templates...</div>',!j&&!await P()){A.innerHTML='<div style="text-align: center; padding: 40px; color: var(--error);">Failed to load app templates. Please try again.</div>';return}A.innerHTML="";const s={};for(const[l,v]of Object.entries(j)){const c=v.category||"Other";s[c]||(s[c]=[]),s[c].push({id:l,...v})}const p=b?Object.keys(b):Object.keys(s).sort();for(const l of p){const v=s[l];if(!v||v.length===0)continue;v.sort((e,a)=>(a.popularity||0)-(e.popularity||0));const c=document.createElement("div");c.className="app-category-header";const t=b?.[l]||{};c.innerHTML=`${escapeHtml(t.icon||"")} ${escapeHtml(l)}`,t.color&&(c.style.borderBottomColor=t.color),A.appendChild(c),v.forEach(e=>{const a=document.createElement("div");a.className="app-option";const o=e.isDashboardWidget,i=o&&safeGet("widget-"+e.id+"-enabled")!=="false",n=o?`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: ${i?"#2ecc7130":"#e74c3c30"}; color: ${i?"#2ecc71":"#e74c3c"}; font-weight: 600;">${i?"ON":"OFF"}</div>`:"",r=!o&&e.difficulty?`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: ${e.difficulty==="Easy"?"#2ecc71":e.difficulty==="Intermediate"?"#f39c12":"#e74c3c"}20; color: ${e.difficulty==="Easy"?"#2ecc71":e.difficulty==="Intermediate"?"#f39c12":"#e74c3c"};">${escapeHtml(e.difficulty)}</div>`:"";a.innerHTML=`
</div>`);const C="custom-apps";let j=null,k=null;const z=document.getElementById("app-selector-modal"),P=document.getElementById("app-selector-grid");async function H(){try{const p=await(await fetch("/api/v1/apps/templates")).json();if(p.success)return j=p.templates,k=p.categories,!0}catch(s){b.logError("[AppSelector] Fetch Templates",s,{function:"fetchApiTemplates"})}return!1}async function A(s){try{return await(await fetch(`/api/v1/apps/ports/${s}/check`)).json()}catch(p){return b.logError("[AppSelector] Check Port",p,{function:"checkPortAvailability"}),{available:!0}}}async function x(s){try{const l=await(await fetch(`/api/v1/apps/ports/${s}/suggest`)).json();if(l.success)return l.suggestedPort}catch(p){b.logError("[AppSelector] Get Suggested Port",p,{function:"getSuggestedPort"})}return s}async function B(){if(P.innerHTML='<div style="text-align: center; padding: 40px; color: var(--muted);">Loading app templates...</div>',!j&&!await H()){P.innerHTML='<div style="text-align: center; padding: 40px; color: var(--error);">Failed to load app templates. Please try again.</div>';return}P.innerHTML="";const s={};for(const[l,g]of Object.entries(j)){const c=g.category||"Other";s[c]||(s[c]=[]),s[c].push({id:l,...g})}const p=k?Object.keys(k):Object.keys(s).sort();for(const l of p){const g=s[l];if(!g||g.length===0)continue;g.sort((e,a)=>(a.popularity||0)-(e.popularity||0));const c=document.createElement("div");c.className="app-category-header";const t=k?.[l]||{};c.innerHTML=`${escapeHtml(t.icon||"")} ${escapeHtml(l)}`,t.color&&(c.style.borderBottomColor=t.color),P.appendChild(c),g.forEach(e=>{const a=document.createElement("div");a.className="app-option";const o=e.isDashboardWidget,i=o&&safeGet("widget-"+e.id+"-enabled")!=="false",n=o?`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: ${i?"#2ecc7130":"#e74c3c30"}; color: ${i?"#2ecc71":"#e74c3c"}; font-weight: 600;">${i?"ON":"OFF"}</div>`:"",r=!o&&e.difficulty?`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: ${e.difficulty==="Easy"?"#2ecc71":e.difficulty==="Intermediate"?"#f39c12":"#e74c3c"}20; color: ${e.difficulty==="Easy"?"#2ecc71":e.difficulty==="Intermediate"?"#f39c12":"#e74c3c"};">${escapeHtml(e.difficulty)}</div>`:"";a.innerHTML=`
<div class="app-option-icon">${escapeHtml(e.icon||"\u{1F4E6}")}</div>
<div class="app-option-name">${escapeHtml(e.name)}</div>
<div class="app-option-desc">${escapeHtml(e.description||"")}</div>
${n}${r}
`,o?a.onclick=()=>E(e,a):a.onclick=()=>z(e),A.appendChild(a)})}window.renderRecipeCards&&await window.renderRecipeCards(A)}function E(s,p){const l="widget-"+s.id+"-enabled",c=!(safeGet(l)!=="false");safeSet(l,String(c));const t=s.widgetSelector;if(t){const a=document.querySelector(t);a&&(a.style.display=c?"":"none")}const e=p.querySelector('div[style*="border-radius: 4px"]');e&&(e.textContent=c?"ON":"OFF",e.style.background=c?"#2ecc7130":"#e74c3c30",e.style.color=c?"#2ecc71":"#e74c3c"),showNotification(`${s.name} widget ${c?"enabled":"disabled"}`,"success",2e3)}async function z(s){const p=document.getElementById("app-deploy-modal"),l=document.getElementById("app-deploy-title"),v=document.getElementById("deploy-subdomain"),c=document.getElementById("deploy-url-preview"),t=document.getElementById("deploy-ip"),e=document.getElementById("deploy-port"),a=document.getElementById("deploy-tailscale-only"),o=document.getElementById("tailscale-status");try{const G=await(await secureFetch("/api/v1/apps/check-existing",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({appId:s.id})})).json();if(G.success&&G.exists){const V=G.container;confirm(`Found existing ${s.name} container:
`,o?a.onclick=()=>w(e,a):a.onclick=()=>M(e),P.appendChild(a)})}window.renderRecipeCards&&await window.renderRecipeCards(P)}function w(s,p){const l="widget-"+s.id+"-enabled",c=!(safeGet(l)!=="false");safeSet(l,String(c));const t=s.widgetSelector;if(t){const a=document.querySelector(t);a&&(a.style.display=c?"":"none")}const e=p.querySelector('div[style*="border-radius: 4px"]');e&&(e.textContent=c?"ON":"OFF",e.style.background=c?"#2ecc7130":"#e74c3c30",e.style.color=c?"#2ecc71":"#e74c3c"),showNotification(`${s.name} widget ${c?"enabled":"disabled"}`,"success",2e3)}async function M(s){const p=document.getElementById("app-deploy-modal"),l=document.getElementById("app-deploy-title"),g=document.getElementById("deploy-subdomain"),c=document.getElementById("deploy-url-preview"),t=document.getElementById("deploy-ip"),e=document.getElementById("deploy-port"),a=document.getElementById("deploy-tailscale-only"),o=document.getElementById("tailscale-status");try{const G=await(await secureFetch("/api/v1/apps/check-existing",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({appId:s.id})})).json();if(G.success&&G.exists){const V=G.container;confirm(`Found existing ${s.name} container:
Container: ${V.name}
Status: ${V.status}
@@ -347,38 +347,38 @@ Port: ${V.primaryPort||"N/A"}
Would you like to use this existing container?
Click OK to configure DNS/Caddy for the existing container.
Click Cancel to deploy a new container.`)&&(s._useExisting=!0,s._existingContainer=V)}}catch{}l.textContent=`Deploy ${s.name}`;const i=s.subdomain||s.id.replace(/-/g,"");v.value=i;const n=document.getElementById("subpath-compat-warning");if(n)if(SITE.routingMode==="subdirectory"){const W=s.subpathSupport||"strip";W==="none"?(n.style.display="block",n.innerHTML='<span style="color: #ff9800;">&#9888; <strong>'+s.name+"</strong> does not support subdirectory mode. It may not work correctly at a subpath.</span>"):W==="strip"?(n.style.display="block",n.innerHTML='<span style="color: var(--muted);">&#9432; '+s.name+" has unverified subdirectory support. It may require additional configuration.</span>"):n.style.display="none"}else n.style.display="none";const r=SITE.defaults.dnsType||(SITE.configurationType==="public"?"public":"private"),d=SITE.defaults.sslType||(SITE.configurationType==="public"?"letsencrypt":"internal"),h=document.querySelector(`input[name="dns-type"][value="${r}"]`),$=document.querySelector(`input[name="ssl-type"][value="${d}"]`);h?h.checked=!0:document.querySelector('input[name="dns-type"][value="private"]').checked=!0,$?$.checked=!0:document.querySelector('input[name="ssl-type"][value="internal"]').checked=!0,t.value=SITE.defaults.targetIP||"localhost",a.checked=!1;const U=document.querySelector("#app-deploy-modal .flex-col-gap")?.closest("div"),_=document.querySelector("#app-deploy-modal details"),F=_?.querySelector("div");if(_&&F&&(SITE.configurationType==="public"||SITE.configurationType==="homelab")){const W=document.querySelectorAll('#app-deploy-modal input[name="dns-type"]')[0]?.closest("div.flex-col-gap")?.parentElement,G=document.querySelectorAll('#app-deploy-modal input[name="ssl-type"]')[0]?.closest("div.flex-col-gap")?.parentElement;W&&!W.dataset.moved&&(F.appendChild(W),W.dataset.moved="1"),G&&!G.dataset.moved&&(F.appendChild(G),G.dataset.moved="1")}const q=document.getElementById("media-path-section"),J=document.getElementById("deploy-media-path"),X=document.getElementById("media-path-description");if(s.mediaMount){q.style.display="block",J.value="",J.placeholder="/media/Movies, /media/TVShows or click Browse";const W=document.getElementById("detected-mounts-container"),G=document.getElementById("detected-mounts-list");try{const K=await(await fetch("/api/v1/media/detected-mounts")).json();if(K.success&&K.mounts.length>0){W.style.display="block",G.innerHTML="";const te=[...new Set(K.mounts.map(ee=>ee.hostPath))];J.value=te.join(", "),K.mounts.forEach(ee=>{const Z=document.createElement("button");Z.type="button";const de=te.includes(ee.hostPath);Z.style.cssText=`padding: 8px 14px; font-size: 0.85rem; background: color-mix(in srgb, var(--success) ${de?"40%":"15%"}, var(--card-bg)); border: 1px solid var(--success); border-radius: 6px; cursor: pointer; color: var(--fg);`,Z.innerHTML=`<span style="font-weight: 500;">${escapeHtml(ee.folderName)}</span><br><span style="font-size: 0.7rem; color: var(--muted);">from ${escapeHtml(ee.sourceImage)}</span>`,Z.title=`${ee.hostPath} (from ${ee.sourceContainer})`,Z.onclick=()=>{const le=J.value.split(",").map(ce=>ce.trim()).filter(ce=>ce),pe=le.indexOf(ee.hostPath);pe>=0?(le.splice(pe,1),Z.style.background="color-mix(in srgb, var(--success) 15%, var(--card-bg))"):(le.push(ee.hostPath),Z.style.background="color-mix(in srgb, var(--success) 40%, var(--card-bg))"),J.value=le.join(", ")},G.appendChild(Z)})}else W.style.display="none"}catch{W.style.display="none"}document.getElementById("browse-media-btn").onclick=()=>{openFolderBrowser(J)}}else q.style.display="none",J.value="",document.getElementById("detected-mounts-container").style.display="none";const Q=document.getElementById("plex-claim-section");Q&&(s.id==="plex"||s.claimToken?(Q.style.display="block",document.getElementById("deploy-plex-claim").value=""):Q.style.display="none");const ne=document.getElementById("volume-mounts-section"),oe=document.getElementById("volume-mounts-list");if(oe.innerHTML="",s.docker?.volumes?.length){const W=s.mediaMount?.containerPath,G=s.docker.volumes.filter(V=>!V.includes("{{MEDIA_PATH}}")&&!(W&&V.endsWith(":"+W)));G.length>0?(ne.style.display="block",G.forEach((V,K)=>{const[te,ee]=V.split(":"),Z=document.createElement("div");Z.style.cssText="display: flex; gap: 6px; align-items: center;",Z.innerHTML=`
Click Cancel to deploy a new container.`)&&(s._useExisting=!0,s._existingContainer=V)}}catch{}l.textContent=`Deploy ${s.name}`;const i=s.subdomain||s.id.replace(/-/g,"");g.value=i;const n=document.getElementById("subpath-compat-warning");if(n)if(SITE.routingMode==="subdirectory"){const W=s.subpathSupport||"strip";W==="none"?(n.style.display="block",n.innerHTML='<span style="color: #ff9800;">&#9888; <strong>'+s.name+"</strong> does not support subdirectory mode. It may not work correctly at a subpath.</span>"):W==="strip"?(n.style.display="block",n.innerHTML='<span style="color: var(--muted);">&#9432; '+s.name+" has unverified subdirectory support. It may require additional configuration.</span>"):n.style.display="none"}else n.style.display="none";const r=SITE.defaults.dnsType||(SITE.configurationType==="public"?"public":"private"),d=SITE.defaults.sslType||(SITE.configurationType==="public"?"letsencrypt":"internal"),h=document.querySelector(`input[name="dns-type"][value="${r}"]`),T=document.querySelector(`input[name="ssl-type"][value="${d}"]`);h?h.checked=!0:document.querySelector('input[name="dns-type"][value="private"]').checked=!0,T?T.checked=!0:document.querySelector('input[name="ssl-type"][value="internal"]').checked=!0,t.value=SITE.defaults.targetIP||"localhost",a.checked=!1;const U=document.querySelector("#app-deploy-modal .flex-col-gap")?.closest("div"),q=document.querySelector("#app-deploy-modal details"),F=q?.querySelector("div");if(q&&F&&(SITE.configurationType==="public"||SITE.configurationType==="homelab")){const W=document.querySelectorAll('#app-deploy-modal input[name="dns-type"]')[0]?.closest("div.flex-col-gap")?.parentElement,G=document.querySelectorAll('#app-deploy-modal input[name="ssl-type"]')[0]?.closest("div.flex-col-gap")?.parentElement;W&&!W.dataset.moved&&(F.appendChild(W),W.dataset.moved="1"),G&&!G.dataset.moved&&(F.appendChild(G),G.dataset.moved="1")}const _=document.getElementById("media-path-section"),J=document.getElementById("deploy-media-path"),X=document.getElementById("media-path-description");if(s.mediaMount){_.style.display="block",J.value="",J.placeholder="/media/Movies, /media/TVShows or click Browse";const W=document.getElementById("detected-mounts-container"),G=document.getElementById("detected-mounts-list");try{const K=await(await fetch("/api/v1/media/detected-mounts")).json();if(K.success&&K.mounts.length>0){W.style.display="block",G.innerHTML="";const te=[...new Set(K.mounts.map(ee=>ee.hostPath))];J.value=te.join(", "),K.mounts.forEach(ee=>{const Z=document.createElement("button");Z.type="button";const de=te.includes(ee.hostPath);Z.style.cssText=`padding: 8px 14px; font-size: 0.85rem; background: color-mix(in srgb, var(--success) ${de?"40%":"15%"}, var(--card-bg)); border: 1px solid var(--success); border-radius: 6px; cursor: pointer; color: var(--fg);`,Z.innerHTML=`<span style="font-weight: 500;">${escapeHtml(ee.folderName)}</span><br><span style="font-size: 0.7rem; color: var(--muted);">from ${escapeHtml(ee.sourceImage)}</span>`,Z.title=`${ee.hostPath} (from ${ee.sourceContainer})`,Z.onclick=()=>{const le=J.value.split(",").map(ce=>ce.trim()).filter(ce=>ce),pe=le.indexOf(ee.hostPath);pe>=0?(le.splice(pe,1),Z.style.background="color-mix(in srgb, var(--success) 15%, var(--card-bg))"):(le.push(ee.hostPath),Z.style.background="color-mix(in srgb, var(--success) 40%, var(--card-bg))"),J.value=le.join(", ")},G.appendChild(Z)})}else W.style.display="none"}catch{W.style.display="none"}document.getElementById("browse-media-btn").onclick=()=>{openFolderBrowser(J)}}else _.style.display="none",J.value="",document.getElementById("detected-mounts-container").style.display="none";const Q=document.getElementById("plex-claim-section");Q&&(s.id==="plex"||s.claimToken?(Q.style.display="block",document.getElementById("deploy-plex-claim").value=""):Q.style.display="none");const ne=document.getElementById("volume-mounts-section"),oe=document.getElementById("volume-mounts-list");if(oe.innerHTML="",s.docker?.volumes?.length){const W=s.mediaMount?.containerPath,G=s.docker.volumes.filter(V=>!V.includes("{{MEDIA_PATH}}")&&!(W&&V.endsWith(":"+W)));G.length>0?(ne.style.display="block",G.forEach((V,K)=>{const[te,ee]=V.split(":"),Z=document.createElement("div");Z.style.cssText="display: flex; gap: 6px; align-items: center;",Z.innerHTML=`
<input type="text" class="vol-host-path" data-container-path="${ee}" value="${te}"
style="flex: 1; padding: 8px; background: var(--card-bg); color: var(--fg); border: 1px solid var(--border); border-radius: 6px; font-size: 0.85rem;" />
<span style="color: var(--muted); font-size: 0.85rem; white-space: nowrap;">\u2192 ${ee}</span>
<button type="button" class="vol-browse-btn" style="padding: 8px 10px; background: var(--accent); color: white; border: none; border-radius: 6px; cursor: pointer; font-size: 0.8rem;">\u{1F4C2}</button>
`,oe.appendChild(Z),Z.querySelector(".vol-browse-btn").onclick=()=>{const de=Z.querySelector(".vol-host-path");openFolderBrowser(de)}})):ne.style.display="none"}else ne.style.display="none";const se=s.defaultPort||8080;e.value="",e.placeholder=`Default: ${se}`;let Y=document.getElementById("deploy-port-status");Y||(Y=document.createElement("div"),Y.id="deploy-port-status",Y.style.cssText="font-size: 0.8rem; margin-top: 4px;",e.parentNode.appendChild(Y));async function ie(){const W=e.value||se;Y.innerHTML='<span style="color: var(--muted);">Checking port...</span>';const G=await R(W);if(G.available)Y.innerHTML=`<span style="color: #4caf50;">Port ${escapeHtml(String(W))} is available</span>`;else{const V=await k(se);Y.innerHTML=`
`,oe.appendChild(Z),Z.querySelector(".vol-browse-btn").onclick=()=>{const de=Z.querySelector(".vol-host-path");openFolderBrowser(de)}})):ne.style.display="none"}else ne.style.display="none";const se=s.defaultPort||8080;e.value="",e.placeholder=`Default: ${se}`;let Y=document.getElementById("deploy-port-status");Y||(Y=document.createElement("div"),Y.id="deploy-port-status",Y.style.cssText="font-size: 0.8rem; margin-top: 4px;",e.parentNode.appendChild(Y));async function ie(){const W=e.value||se;Y.innerHTML='<span style="color: var(--muted);">Checking port...</span>';const G=await A(W);if(G.available)Y.innerHTML=`<span style="color: #4caf50;">Port ${escapeHtml(String(W))} is available</span>`;else{const V=await x(se);Y.innerHTML=`
<span style="color: #e74c3c;">Port ${escapeHtml(W)} in use by ${escapeHtml(G.conflict?.usedBy||"unknown")}</span>
`;const K=document.createElement("button");K.type="button",K.textContent=`Use ${V}`,K.style.cssText="margin-left: 8px; padding: 2px 8px; font-size: 0.75rem; cursor: pointer;",K.onclick=()=>{document.getElementById("deploy-port").value=V,Y.innerHTML=`<span style="color: #4caf50;">Using suggested port ${escapeHtml(String(V))}</span>`},Y.appendChild(K)}}let re;e.oninput=function(){clearTimeout(re),re=setTimeout(ie,500)},ie();try{const G=await(await fetch("/api/v1/tailscale/status")).json();G.success&&G.installed&&G.connected?o.innerHTML=`
<span style="color: #4caf50;">Connected</span>
<span style="color: var(--muted); margin-left: 8px;">${G.self?.hostname} (${G.self?.ip})</span>
<span style="color: var(--muted); margin-left: 8px;">| ${G.deviceCount} devices</span>
`:G.installed?o.innerHTML='<span style="color: #ff9800;">Not connected</span>':(o.innerHTML='<span style="color: var(--muted);">Not available</span>',a.disabled=!0)}catch{o.innerHTML='<span style="color: var(--muted);">Could not check status</span>'}function ae(){const W=v.value||"subdomain",G=document.querySelector('input[name="dns-type"]:checked').value,V=document.querySelector('input[name="ssl-type"]:checked').value;let K="";if(SITE.routingMode==="subdirectory"&&SITE.domain)K=`https://${SITE.domain}/${W}`;else if(G==="private")K=`${V==="none"?"http":"https"}://${buildDomain(W)}`;else if(G==="public"){const te=V==="none"?"http":"https",ee=SITE.domain||W;K=SITE.domain?`${te}://${W}.${SITE.domain}`:`${te}://${W}`}else{const te=e.value||s.defaultPort||DC.DEFAULTS.SERVICE_PORT;K=`http://${t.value}:${te}`}c.textContent=K}v.oninput=ae,t.oninput=ae,e.oninput=ae,document.querySelectorAll('input[name="dns-type"]').forEach(W=>{W.onchange=ae}),document.querySelectorAll('input[name="ssl-type"]').forEach(W=>{W.onchange=ae}),ae(),D.classList.remove("show"),p.classList.add("show"),p.dataset.appTemplate=JSON.stringify(s)}async function C(s){const p=s.appTemplate,l=safeGetJSON(B,[]),v=p._useExisting&&p._existingContainer,c=l.find(t=>t.id===s.subdomain);if(!(c&&!v&&!confirm(`An app with subdomain "${s.subdomain}" already exists. Redeploy?`))){if(c){const t=l.indexOf(c);l.splice(t,1),safeSet(B,JSON.stringify(l))}if(v)s.port=p._existingContainer.primaryPort;else{const t=s.port||p.defaultPort||8080;showNotification(`Checking port ${t} availability...`,"info",0);const e=await R(t);if(!e.available){const a=await k(p.defaultPort||8080);if(confirm(`Port ${t} is already in use by ${e.conflict?.usedBy||"another container"}.
`:G.installed?o.innerHTML='<span style="color: #ff9800;">Not connected</span>':(o.innerHTML='<span style="color: var(--muted);">Not available</span>',a.disabled=!0)}catch{o.innerHTML='<span style="color: var(--muted);">Could not check status</span>'}function ae(){const W=g.value||"subdomain",G=document.querySelector('input[name="dns-type"]:checked').value,V=document.querySelector('input[name="ssl-type"]:checked').value;let K="";if(SITE.routingMode==="subdirectory"&&SITE.domain)K=`https://${SITE.domain}/${W}`;else if(G==="private")K=`${V==="none"?"http":"https"}://${buildDomain(W)}`;else if(G==="public"){const te=V==="none"?"http":"https",ee=SITE.domain||W;K=SITE.domain?`${te}://${W}.${SITE.domain}`:`${te}://${W}`}else{const te=e.value||s.defaultPort||DC.DEFAULTS.SERVICE_PORT;K=`http://${t.value}:${te}`}c.textContent=K}g.oninput=ae,t.oninput=ae,e.oninput=ae,document.querySelectorAll('input[name="dns-type"]').forEach(W=>{W.onchange=ae}),document.querySelectorAll('input[name="ssl-type"]').forEach(W=>{W.onchange=ae}),ae(),z.classList.remove("show"),p.classList.add("show"),p.dataset.appTemplate=JSON.stringify(s)}async function L(s){const p=s.appTemplate,l=safeGetJSON(C,[]),g=p._useExisting&&p._existingContainer,c=l.find(t=>t.id===s.subdomain);if(!(c&&!g&&!confirm(`An app with subdomain "${s.subdomain}" already exists. Redeploy?`))){if(c){const t=l.indexOf(c);l.splice(t,1),safeSet(C,JSON.stringify(l))}if(g)s.port=p._existingContainer.primaryPort;else{const t=s.port||p.defaultPort||8080;showNotification(`Checking port ${t} availability...`,"info",0);const e=await A(t);if(!e.available){const a=await x(p.defaultPort||8080);if(confirm(`Port ${t} is already in use by ${e.conflict?.usedBy||"another container"}.
Would you like to use port ${a} instead?`))s.port=a;else{showNotification("Deployment cancelled - port conflict","error",5e3);return}}}showNotification(v?`Configuring ${p.name} with existing container...`:`Deploying ${p.name}...`,"info",0);try{const t={appId:p.id,config:{subdomain:s.subdomain,ip:s.ip,createDns:s.dnsType==="private",port:s.port||p.defaultPort||null,sslType:s.sslType,dnsType:s.dnsType,tailscaleOnly:s.tailscaleOnly||!1,mediaPath:s.mediaPath||null,plexClaimToken:s.plexClaimToken||null,customVolumes:s.customVolumes||null}};v&&(t.config.useExisting=!0,t.config.existingContainerId=p._existingContainer.id,t.config.existingPort=p._existingContainer.primaryPort,!s.port&&p._existingContainer.primaryPort&&(t.config.port=p._existingContainer.primaryPort));const a=await(await secureFetch("/api/v1/apps/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json();if(a.success){const o={id:s.subdomain,name:p.name,logo:`/assets/${p.id}.png`,containerId:a.containerId,url:a.url,ip:s.ip,appTemplate:p.id,tailscaleOnly:s.tailscaleOnly||!1};l.push(o),safeSet(B,JSON.stringify(l)),window.APPS&&!window.APPS.some(n=>n.id===p.id)&&(window.APPS.push(o),typeof window.buildGrid=="function"&&window.buildGrid(),typeof window.refreshAll=="function"&&setTimeout(()=>window.refreshAll(),500));let i=a.usedExisting?`${p.name} configured with existing container!
Would you like to use port ${a} instead?`))s.port=a;else{showNotification("Deployment cancelled - port conflict","error",5e3);return}}}showNotification(g?`Configuring ${p.name} with existing container...`:`Deploying ${p.name}...`,"info",0);try{const t={appId:p.id,config:{subdomain:s.subdomain,ip:s.ip,createDns:s.dnsType==="private",port:s.port||p.defaultPort||null,sslType:s.sslType,dnsType:s.dnsType,tailscaleOnly:s.tailscaleOnly||!1,mediaPath:s.mediaPath||null,plexClaimToken:s.plexClaimToken||null,customVolumes:s.customVolumes||null}};g&&(t.config.useExisting=!0,t.config.existingContainerId=p._existingContainer.id,t.config.existingPort=p._existingContainer.primaryPort,!s.port&&p._existingContainer.primaryPort&&(t.config.port=p._existingContainer.primaryPort));const a=await(await secureFetch("/api/v1/apps/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)})).json();if(a.success){const o={id:s.subdomain,name:p.name,logo:`/assets/${p.id}.png`,containerId:a.containerId,url:a.url,ip:s.ip,appTemplate:p.id,tailscaleOnly:s.tailscaleOnly||!1};l.push(o),safeSet(C,JSON.stringify(l)),window.APPS&&!window.APPS.some(n=>n.id===p.id)&&(window.APPS.push(o),typeof window.buildGrid=="function"&&window.buildGrid(),typeof window.refreshAll=="function"&&setTimeout(()=>window.refreshAll(),500));let i=a.usedExisting?`${p.name} configured with existing container!
URL: ${a.url}`:`${p.name} deployed successfully!
URL: ${a.url}`;a.warning&&(i+=`
\u26A0 Warning: ${a.warning}`),showNotification(i,"success",8e3),delete p._useExisting,delete p._existingContainer,a.url&&a.url.startsWith("https://")&&N(a.url,p.name),a.setupInstructions&&a.setupInstructions.length>0&&setTimeout(()=>{const n=a.setupInstructions.join(`
`);showNotification(`Setup Instructions for ${p.name}: ${n}`,"info",1e4)},1e3)}else throw new Error(a.error||"Deployment failed")}catch(t){f.logError("[AppSelector] Deployment",t,{function:"deploy"}),showNotification(`Failed to deploy ${p.name}: ${t.message}`,"error",8e3)}}}async function N(s,p){showNotification(`\u23F3 Generating SSL certificate for ${p}...`,"warning",6e4);let l=0;const v=12,c=async()=>{l++;try{const t=await fetch(s,{method:"HEAD",mode:"no-cors"});return showNotification(`\u2705 ${p} is ready! SSL certificate generated.`,"success",5e3),!0}catch{return l<v?setTimeout(c,5e3):showNotification(`\u26A0\uFE0F ${p} deployed but SSL certificate may still be generating.
Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};setTimeout(c,3e3)}function x(){safeGetJSON(B,[]).forEach(p=>{window.APPS.some(l=>l.id===p.id)||window.APPS.push(p)})}document.getElementById("add-service-btn")?.addEventListener("click",()=>{M(),D.classList.add("show")}),wireModal(D,document.getElementById("app-selector-cancel"));const I=document.getElementById("app-deploy-modal");document.getElementById("app-deploy-cancel")?.addEventListener("click",()=>{I.classList.remove("show")}),document.getElementById("app-deploy-confirm")?.addEventListener("click",()=>{const s=JSON.parse(I.dataset.appTemplate),p=document.getElementById("deploy-media-path").value.trim(),l=[];document.querySelectorAll("#volume-mounts-list .vol-host-path").forEach(c=>{l.push({hostPath:c.value.trim(),containerPath:c.dataset.containerPath})});const v={appTemplate:s,subdomain:document.getElementById("deploy-subdomain").value.trim(),dnsType:document.querySelector('input[name="dns-type"]:checked').value,sslType:document.querySelector('input[name="ssl-type"]:checked').value,ip:document.getElementById("deploy-ip").value.trim(),port:document.getElementById("deploy-port").value.trim(),tailscaleOnly:document.getElementById("deploy-tailscale-only").checked,mediaPath:p||null,plexClaimToken:document.getElementById("deploy-plex-claim")?.value.trim()||null,customVolumes:l.length>0?l:null,resources:{cpus:parseFloat(document.getElementById("deploy-cpu-limit").value)||0,memory:parseFloat(document.getElementById("deploy-memory-limit").value)||0}};if(!v.subdomain){showNotification("Please enter a subdomain or domain name","warning");return}if(s.mediaMount?.required&&!p){showNotification("Please enter a media library path for this application","warning");return}I.classList.remove("show"),C(v)}),wireModal(I);const H=document.getElementById("folder-browser-modal"),m=document.getElementById("folder-browser-path"),L=document.getElementById("folder-browser-list"),T=document.getElementById("folder-browser-selected"),O=document.getElementById("folder-browser-selected-list");let u="",g=[],S=null;window.openFolderBrowser=function(s){S=s,g=s.value.split(",").map(p=>p.trim()).filter(p=>p),u="",w(),y(""),H.classList.add("show")};async function y(s){m.textContent=s||"Select a drive...",L.innerHTML='<div style="padding: 20px; text-align: center; color: var(--muted);">Loading...</div>';try{const l=await(await fetch(`/api/v1/browse/directories?path=${encodeURIComponent(s)}`)).json();if(!l.success){L.innerHTML=`<div style="padding: 20px; text-align: center; color: var(--error);">Error: ${escapeHtml(l.error)}</div>`;return}u=l.path||"",m.textContent=u||"Select a drive...";let v="";l.parent&&l.parent!==l.path&&(v+=`<div class="folder-item" data-path="${escapeHtml(l.parent)}" style="padding: 12px 16px; border-bottom: 1px solid var(--border); cursor: pointer; display: flex; align-items: center; gap: 10px;">
\u26A0 Warning: ${a.warning}`),showNotification(i,"success",8e3),delete p._useExisting,delete p._existingContainer,a.url&&a.url.startsWith("https://")&&$(a.url,p.name),a.setupInstructions&&a.setupInstructions.length>0&&setTimeout(()=>{const n=a.setupInstructions.join(`
`);showNotification(`Setup Instructions for ${p.name}: ${n}`,"info",1e4)},1e3)}else throw new Error(a.error||"Deployment failed")}catch(t){b.logError("[AppSelector] Deployment",t,{function:"deploy"}),showNotification(`Failed to deploy ${p.name}: ${t.message}`,"error",8e3)}}}async function $(s,p){showNotification(`\u23F3 Generating SSL certificate for ${p}...`,"warning",6e4);let l=0;const g=12,c=async()=>{l++;try{const t=await fetch(s,{method:"HEAD",mode:"no-cors"});return showNotification(`\u2705 ${p} is ready! SSL certificate generated.`,"success",5e3),!0}catch{return l<g?setTimeout(c,5e3):showNotification(`\u26A0\uFE0F ${p} deployed but SSL certificate may still be generating.
Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};setTimeout(c,3e3)}function u(){safeGetJSON(C,[]).forEach(p=>{window.APPS.some(l=>l.id===p.id)||window.APPS.push(p)})}document.getElementById("add-service-btn")?.addEventListener("click",()=>{B(),z.classList.add("show")}),wireModal(z,document.getElementById("app-selector-cancel"));const v=document.getElementById("app-deploy-modal");document.getElementById("app-deploy-cancel")?.addEventListener("click",()=>{v.classList.remove("show")}),document.getElementById("app-deploy-confirm")?.addEventListener("click",()=>{const s=JSON.parse(v.dataset.appTemplate),p=document.getElementById("deploy-media-path").value.trim(),l=[];document.querySelectorAll("#volume-mounts-list .vol-host-path").forEach(c=>{l.push({hostPath:c.value.trim(),containerPath:c.dataset.containerPath})});const g={appTemplate:s,subdomain:document.getElementById("deploy-subdomain").value.trim(),dnsType:document.querySelector('input[name="dns-type"]:checked').value,sslType:document.querySelector('input[name="ssl-type"]:checked').value,ip:document.getElementById("deploy-ip").value.trim(),port:document.getElementById("deploy-port").value.trim(),tailscaleOnly:document.getElementById("deploy-tailscale-only").checked,mediaPath:p||null,plexClaimToken:document.getElementById("deploy-plex-claim")?.value.trim()||null,customVolumes:l.length>0?l:null,resources:{cpus:parseFloat(document.getElementById("deploy-cpu-limit").value)||0,memory:parseFloat(document.getElementById("deploy-memory-limit").value)||0}};if(!g.subdomain){showNotification("Please enter a subdomain or domain name","warning");return}if(s.mediaMount?.required&&!p){showNotification("Please enter a media library path for this application","warning");return}v.classList.remove("show"),L(g)}),wireModal(v);const D=document.getElementById("folder-browser-modal"),I=document.getElementById("folder-browser-path"),R=document.getElementById("folder-browser-list"),N=document.getElementById("folder-browser-selected"),O=document.getElementById("folder-browser-selected-list");let m="",y=[],S=null;window.openFolderBrowser=function(s){S=s,y=s.value.split(",").map(p=>p.trim()).filter(p=>p),m="",E(),f(""),D.classList.add("show")};async function f(s){I.textContent=s||"Select a drive...",R.innerHTML='<div style="padding: 20px; text-align: center; color: var(--muted);">Loading...</div>';try{const l=await(await fetch(`/api/v1/browse/directories?path=${encodeURIComponent(s)}`)).json();if(!l.success){R.innerHTML=`<div style="padding: 20px; text-align: center; color: var(--error);">Error: ${escapeHtml(l.error)}</div>`;return}m=l.path||"",I.textContent=m||"Select a drive...";let g="";l.parent&&l.parent!==l.path&&(g+=`<div class="folder-item" data-path="${escapeHtml(l.parent)}" style="padding: 12px 16px; border-bottom: 1px solid var(--border); cursor: pointer; display: flex; align-items: center; gap: 10px;">
<span style="font-size: 1.2rem;">\u2B06\uFE0F</span>
<span style="color: var(--muted);">.. Parent Directory</span>
</div>`),l.items.length===0&&!l.parent?v+='<div style="padding: 20px; text-align: center; color: var(--muted);">No browseable drives configured. Check your docker-compose.yml volume mounts.</div>':l.items.length===0?v+='<div style="padding: 20px; text-align: center; color: var(--muted);">No subfolders found</div>':l.items.forEach(c=>{const t=c.type==="drive"?"\u{1F4BE}":"\u{1F4C1}",e=g.includes(c.path),a=e?"background: color-mix(in srgb, var(--success) 20%, transparent);":"";v+=`<div class="folder-item" data-path="${escapeHtml(c.path)}" style="padding: 12px 16px; border-bottom: 1px solid var(--border); cursor: pointer; display: flex; align-items: center; gap: 10px; ${a}">
</div>`),l.items.length===0&&!l.parent?g+='<div style="padding: 20px; text-align: center; color: var(--muted);">No browseable drives configured. Check your docker-compose.yml volume mounts.</div>':l.items.length===0?g+='<div style="padding: 20px; text-align: center; color: var(--muted);">No subfolders found</div>':l.items.forEach(c=>{const t=c.type==="drive"?"\u{1F4BE}":"\u{1F4C1}",e=y.includes(c.path),a=e?"background: color-mix(in srgb, var(--success) 20%, transparent);":"";g+=`<div class="folder-item" data-path="${escapeHtml(c.path)}" style="padding: 12px 16px; border-bottom: 1px solid var(--border); cursor: pointer; display: flex; align-items: center; gap: 10px; ${a}">
<span style="font-size: 1.2rem;">${t}</span>
<span style="flex: 1;">${escapeHtml(c.name)}</span>
${e?'<span style="color: var(--success);">\u2713</span>':""}
</div>`}),L.innerHTML=v,L.querySelectorAll(".folder-item").forEach(c=>{c.addEventListener("click",()=>{y(c.dataset.path)}),c.addEventListener("mouseenter",()=>{c.style.background="var(--card-bg)"}),c.addEventListener("mouseleave",()=>{const t=g.includes(c.dataset.path);c.style.background=t?"color-mix(in srgb, var(--success) 20%, transparent)":""})})}catch(p){L.innerHTML=`<div style="padding: 20px; text-align: center; color: var(--error);">Failed to load: ${escapeHtml(p.message)}</div>`}}function w(){if(g.length===0){T.style.display="none";return}T.style.display="block",O.innerHTML=g.map(s=>`
</div>`}),R.innerHTML=g,R.querySelectorAll(".folder-item").forEach(c=>{c.addEventListener("click",()=>{f(c.dataset.path)}),c.addEventListener("mouseenter",()=>{c.style.background="var(--card-bg)"}),c.addEventListener("mouseleave",()=>{const t=y.includes(c.dataset.path);c.style.background=t?"color-mix(in srgb, var(--success) 20%, transparent)":""})})}catch(p){R.innerHTML=`<div style="padding: 20px; text-align: center; color: var(--error);">Failed to load: ${escapeHtml(p.message)}</div>`}}function E(){if(y.length===0){N.style.display="none";return}N.style.display="block",O.innerHTML=y.map(s=>`
<span style="padding: 6px 12px; background: var(--card-bg); border: 1px solid var(--success); border-radius: 4px; display: flex; align-items: center; gap: 6px;">
${escapeHtml(s)}
<button type="button" onclick="removeSelectedFolder('${escapeHtml(s)}')" style="background: none; border: none; cursor: pointer; color: var(--error); font-size: 1rem; padding: 0;">\xD7</button>
</span>
`).join("")}window.removeSelectedFolder=function(s){g=g.filter(p=>p!==s),w(),y(u)},document.getElementById("folder-browser-select-current").addEventListener("click",()=>{u&&!g.includes(u)&&(g.push(u),w(),y(u))}),wireModal(H,document.getElementById("folder-browser-cancel")),document.getElementById("folder-browser-done").addEventListener("click",()=>{S&&(S.value=g.join(", ")),H.classList.remove("show")}),x()})(),(function(){injectModal("recipe-deploy-modal",`<div id="recipe-deploy-modal" class="weather-modal">
`).join("")}window.removeSelectedFolder=function(s){y=y.filter(p=>p!==s),E(),f(m)},document.getElementById("folder-browser-select-current").addEventListener("click",()=>{m&&!y.includes(m)&&(y.push(m),E(),f(m))}),wireModal(D,document.getElementById("folder-browser-cancel")),document.getElementById("folder-browser-done").addEventListener("click",()=>{S&&(S.value=y.join(", ")),D.classList.remove("show")}),u()})(),(function(){injectModal("recipe-deploy-modal",`<div id="recipe-deploy-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 620px; max-width: 740px;">
<h3 id="recipe-deploy-title">Deploy Recipe</h3>
@@ -445,70 +445,70 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="recipe-next" class="btn-accent-solid">Next</button>
</div>
</div>
</div>`);let f=null,B=null,j=null,b=1,D=!1;const A=document.getElementById("recipe-deploy-modal"),P=document.getElementById("recipe-cancel"),R=document.getElementById("recipe-prev"),k=document.getElementById("recipe-next");wireModal(A,P);async function M(){try{const u=await fetch("/api/v1/recipes/templates"),g=await u.json();if(g.success)return f=g.templates,B=g.categories,!0;if(u.status===403)return D=!1,!1}catch(u){console.warn("Failed to fetch recipe templates:",u.message)}return!1}async function E(){try{D=(await(await fetch("/api/v1/license/feature/recipes")).json()).available}catch{D=!1}return D}window.renderRecipeCards=async function(u){await E();let g;if(D&&f?g=f:g=z(),!g||g.length===0)return;const S=document.createElement("div");S.className="app-category-header",S.innerHTML="\u{1F9EA} Recipes",S.style.borderBottomColor="#8e44ad",u.appendChild(S);const y=Array.isArray(g)?g:Object.values(g);y.sort((w,s)=>(s.popularity||0)-(w.popularity||0));for(const w of y){const s=document.createElement("div");s.className="app-option",s.style.position="relative";const p=`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: rgba(142,68,173,0.2); color: #a855f7;">${w.componentCount||w.components?.length||"?"} apps</div>`,l=D?"":'<div style="position: absolute; top: 6px; right: 6px; font-size: 0.65rem; padding: 2px 8px; border-radius: 10px; background: rgba(241,196,15,0.2); color: #f1c40f; font-weight: 600;">PREMIUM</div>';s.innerHTML=`
</div>`);let b=null,C=null,j=null,k=1,z=!1;const P=document.getElementById("recipe-deploy-modal"),H=document.getElementById("recipe-cancel"),A=document.getElementById("recipe-prev"),x=document.getElementById("recipe-next");wireModal(P,H);async function B(){try{const m=await fetch("/api/v1/recipes/templates"),y=await m.json();if(y.success)return b=y.templates,C=y.categories,!0;if(m.status===403)return z=!1,!1}catch(m){console.warn("Failed to fetch recipe templates:",m.message)}return!1}async function w(){try{z=(await(await fetch("/api/v1/license/feature/recipes")).json()).available}catch{z=!1}return z}window.renderRecipeCards=async function(m){await w();let y;if(z&&b?y=b:y=M(),!y||y.length===0)return;const S=document.createElement("div");S.className="app-category-header",S.innerHTML="\u{1F9EA} Recipes",S.style.borderBottomColor="#8e44ad",m.appendChild(S);const f=Array.isArray(y)?y:Object.values(y);f.sort((E,s)=>(s.popularity||0)-(E.popularity||0));for(const E of f){const s=document.createElement("div");s.className="app-option",s.style.position="relative";const p=`<div style="font-size: 0.65rem; padding: 2px 6px; border-radius: 4px; margin-top: 4px; background: rgba(142,68,173,0.2); color: #a855f7;">${E.componentCount||E.components?.length||"?"} apps</div>`,l=z?"":'<div style="position: absolute; top: 6px; right: 6px; font-size: 0.65rem; padding: 2px 8px; border-radius: 10px; background: rgba(241,196,15,0.2); color: #f1c40f; font-weight: 600;">PREMIUM</div>';s.innerHTML=`
${l}
<div class="app-option-icon">${escapeHtml(w.icon||"\u{1F9EA}")}</div>
<div class="app-option-name">${escapeHtml(w.name)}</div>
<div class="app-option-desc">${escapeHtml(w.description||"")}</div>
<div class="app-option-icon">${escapeHtml(E.icon||"\u{1F9EA}")}</div>
<div class="app-option-name">${escapeHtml(E.name)}</div>
<div class="app-option-desc">${escapeHtml(E.description||"")}</div>
${p}
`,s.onclick=()=>{if(!D){showNotification("Recipes require a DashCaddy Premium license. Click the License button to activate.","warning",5e3),window.openLicenseModal&&window.openLicenseModal();return}C(w)},u.appendChild(s)}};function z(){return[{id:"htpc-suite",name:"HTPC Suite",icon:"\u{1F3AC}",description:"Complete media automation: find, download, organize, and stream",componentCount:6,popularity:98},{id:"nextcloud-complete",name:"Nextcloud Complete",icon:"\u2601\uFE0F",description:"Full productivity suite: cloud storage, office editing, and collaboration",componentCount:4,popularity:90},{id:"smart-home",name:"Smart Home Hub",icon:"\u{1F3E0}",description:"Home automation: control, automate, and monitor IoT devices",componentCount:4,popularity:88},{id:"dev-environment",name:"Dev Environment",icon:"\u{1F4BB}",description:"Self-hosted development workflow: Git, CI/CD, IDE, and database",componentCount:4,popularity:82}]}function C(u){j=u,b=1;const g=document.getElementById("app-selector-modal");g&&g.classList.remove("show"),document.getElementById("recipe-deploy-title").textContent=`Deploy ${u.name}`,N(),x(),A.classList.add("show")}function N(){document.querySelectorAll("#recipe-steps .recipe-step").forEach(u=>{const g=parseInt(u.dataset.step);u.classList.toggle("active",g===b),u.classList.toggle("completed",g<b)});for(let u=1;u<=4;u++){const g=document.getElementById(`recipe-step-${u}`);g&&(g.style.display=u===b?"":"none")}R.style.display=b>1&&b<4?"":"none",b===4?(k.style.display="none",P.textContent="Close"):b===3?(k.textContent="\u{1F680} Deploy",k.style.display="",P.textContent="Cancel"):(k.textContent="Next",k.style.display="",P.textContent="Cancel")}function x(){const u=document.getElementById("recipe-component-list");u.innerHTML="";const g=j.components||[];for(const S of g){const y=document.createElement("div");y.style.cssText="display: flex; align-items: center; gap: 12px; padding: 12px; border-radius: 8px; background: var(--card-bg); border: 1px solid var(--border);";const w=S.required,s=S.internal;y.innerHTML=`
<input type="checkbox" ${w?"checked disabled":"checked"} data-component-id="${S.id}"
`,s.onclick=()=>{if(!z){showNotification("Recipes require a DashCaddy Premium license. Click the License button to activate.","warning",5e3),window.openLicenseModal&&window.openLicenseModal();return}L(E)},m.appendChild(s)}};function M(){return[{id:"htpc-suite",name:"HTPC Suite",icon:"\u{1F3AC}",description:"Complete media automation: find, download, organize, and stream",componentCount:6,popularity:98},{id:"nextcloud-complete",name:"Nextcloud Complete",icon:"\u2601\uFE0F",description:"Full productivity suite: cloud storage, office editing, and collaboration",componentCount:4,popularity:90},{id:"smart-home",name:"Smart Home Hub",icon:"\u{1F3E0}",description:"Home automation: control, automate, and monitor IoT devices",componentCount:4,popularity:88},{id:"dev-environment",name:"Dev Environment",icon:"\u{1F4BB}",description:"Self-hosted development workflow: Git, CI/CD, IDE, and database",componentCount:4,popularity:82}]}function L(m){j=m,k=1;const y=document.getElementById("app-selector-modal");y&&y.classList.remove("show"),document.getElementById("recipe-deploy-title").textContent=`Deploy ${m.name}`,$(),u(),P.classList.add("show")}function $(){document.querySelectorAll("#recipe-steps .recipe-step").forEach(m=>{const y=parseInt(m.dataset.step);m.classList.toggle("active",y===k),m.classList.toggle("completed",y<k)});for(let m=1;m<=4;m++){const y=document.getElementById(`recipe-step-${m}`);y&&(y.style.display=m===k?"":"none")}A.style.display=k>1&&k<4?"":"none",k===4?(x.style.display="none",H.textContent="Close"):k===3?(x.textContent="\u{1F680} Deploy",x.style.display="",H.textContent="Cancel"):(x.textContent="Next",x.style.display="",H.textContent="Cancel")}function u(){const m=document.getElementById("recipe-component-list");m.innerHTML="";const y=j.components||[];for(const S of y){const f=document.createElement("div");f.style.cssText="display: flex; align-items: center; gap: 12px; padding: 12px; border-radius: 8px; background: var(--card-bg); border: 1px solid var(--border);";const E=S.required,s=S.internal;f.innerHTML=`
<input type="checkbox" ${E?"checked disabled":"checked"} data-component-id="${S.id}"
style="width: 18px; height: 18px; accent-color: var(--accent);" />
<div style="flex: 1;">
<div style="font-weight: 600; font-size: 0.9rem;">${escapeHtml(S.role||S.id)}</div>
<div style="font-size: 0.78rem; color: var(--muted);">
${S.templateRef?escapeHtml(S.templateRef):"Built-in"}
${w?'<span style="color: var(--accent); margin-left: 6px;">Required</span>':'<span style="color: var(--muted); margin-left: 6px;">Optional</span>'}
${E?'<span style="color: var(--accent); margin-left: 6px;">Required</span>':'<span style="color: var(--muted); margin-left: 6px;">Optional</span>'}
${s?'<span style="color: var(--muted); margin-left: 6px;">(Internal)</span>':""}
</div>
${S.note?`<div style="font-size: 0.75rem; color: var(--warn-fg); margin-top: 4px;">\u26A0 ${escapeHtml(S.note)}</div>`:""}
</div>
`,u.appendChild(y)}}function I(){const u=document.getElementById("recipe-volumes-section"),g=document.getElementById("recipe-volume-list"),S=j.sharedVolumes;if(S&&Object.keys(S).length>0){u.style.display="",g.innerHTML="";for(const[y,w]of Object.entries(S)){const s=document.createElement("div");s.style.cssText="display: grid; gap: 4px;",s.innerHTML=`
<label style="font-weight: 500; font-size: 0.85rem;">${escapeHtml(w.label||y)}</label>
<input type="text" data-volume-key="${y}" value="${escapeHtml(w.defaultPath||"")}"
placeholder="${escapeHtml(w.defaultPath||"/path")}"
`,m.appendChild(f)}}function v(){const m=document.getElementById("recipe-volumes-section"),y=document.getElementById("recipe-volume-list"),S=j.sharedVolumes;if(S&&Object.keys(S).length>0){m.style.display="",y.innerHTML="";for(const[f,E]of Object.entries(S)){const s=document.createElement("div");s.style.cssText="display: grid; gap: 4px;",s.innerHTML=`
<label style="font-weight: 500; font-size: 0.85rem;">${escapeHtml(E.label||f)}</label>
<input type="text" data-volume-key="${f}" value="${escapeHtml(E.defaultPath||"")}"
placeholder="${escapeHtml(E.defaultPath||"/path")}"
style="width: 100%; padding: 8px 12px; background: var(--card-bg); color: var(--fg); border: 1px solid var(--border); border-radius: 6px; font-family: monospace; font-size: 0.85rem;" />
<div class="form-hint-sm">${escapeHtml(w.description||"")}</div>
`,g.appendChild(s)}}else u.style.display="none"}function H(){const u=document.getElementById("recipe-review-content"),g=m(),S=document.querySelectorAll("#recipe-volume-list input[data-volume-key]"),y={};S.forEach(l=>{y[l.dataset.volumeKey]=l.value});const w=document.getElementById("recipe-timezone").value||"UTC",s=document.getElementById("recipe-ip").value||"host.docker.internal",p=document.getElementById("recipe-tailscale").checked;u.innerHTML=`
<div class="form-hint-sm">${escapeHtml(E.description||"")}</div>
`,y.appendChild(s)}}else m.style.display="none"}function D(){const m=document.getElementById("recipe-review-content"),y=I(),S=document.querySelectorAll("#recipe-volume-list input[data-volume-key]"),f={};S.forEach(l=>{f[l.dataset.volumeKey]=l.value});const E=document.getElementById("recipe-timezone").value||"UTC",s=document.getElementById("recipe-ip").value||"host.docker.internal",p=document.getElementById("recipe-tailscale").checked;m.innerHTML=`
<div style="font-weight: 600; font-size: 1rem; margin-bottom: 12px;">${escapeHtml(j.name)}</div>
<div style="color: var(--muted); margin-bottom: 16px;">${escapeHtml(j.description||"")}</div>
<div style="margin-bottom: 12px;">
<strong>Components (${g.length}):</strong>
<strong>Components (${y.length}):</strong>
<div style="display: grid; gap: 4px; margin-top: 6px;">
${g.map(l=>`<div style="padding: 4px 0; font-size: 0.85rem;">
${y.map(l=>`<div style="padding: 4px 0; font-size: 0.85rem;">
\u2022 <strong>${escapeHtml(l.role||l.id)}</strong> ${l.internal?'<span style="color:var(--muted)">(internal)</span>':""}
</div>`).join("")}
</div>
</div>
${Object.keys(y).length>0?`<div style="margin-bottom: 12px;">
${Object.keys(f).length>0?`<div style="margin-bottom: 12px;">
<strong>Volumes:</strong>
${Object.entries(y).map(([l,v])=>`<div style="font-size: 0.85rem; font-family: monospace; color: var(--muted);">${l}: ${escapeHtml(v)}</div>`).join("")}
${Object.entries(f).map(([l,g])=>`<div style="font-size: 0.85rem; font-family: monospace; color: var(--muted);">${l}: ${escapeHtml(g)}</div>`).join("")}
</div>`:""}
<div style="font-size: 0.85rem; color: var(--muted);">
Timezone: ${escapeHtml(w)} &bull; IP: ${escapeHtml(s)} ${p?"&bull; Tailscale only":""}
Timezone: ${escapeHtml(E)} &bull; IP: ${escapeHtml(s)} ${p?"&bull; Tailscale only":""}
</div>
${j.network?`<div style="font-size: 0.85rem; color: var(--muted); margin-top: 4px;">Docker network: <code>${escapeHtml(j.network.name)}</code></div>`:""}
`}function m(){const u=document.querySelectorAll("#recipe-component-list input[data-component-id]"),g=new Set;u.forEach(y=>{y.checked&&g.add(y.dataset.componentId)});const S=j.components||[];return S.filter(y=>y.required).forEach(y=>g.add(y.id)),S.filter(y=>g.has(y.id))}async function L(){const u=document.getElementById("recipe-progress-list"),g=document.getElementById("recipe-deploy-result");g.style.display="none",u.innerHTML="";const S=m();for(const p of S){const l=document.createElement("div");l.id=`recipe-progress-${p.id}`,l.style.cssText="display: flex; align-items: center; gap: 10px; padding: 10px 12px; border-radius: 6px; background: var(--card-bg); border: 1px solid var(--border); font-size: 0.85rem;",l.innerHTML=`
`}function I(){const m=document.querySelectorAll("#recipe-component-list input[data-component-id]"),y=new Set;m.forEach(f=>{f.checked&&y.add(f.dataset.componentId)});const S=j.components||[];return S.filter(f=>f.required).forEach(f=>y.add(f.id)),S.filter(f=>y.has(f.id))}async function R(){const m=document.getElementById("recipe-progress-list"),y=document.getElementById("recipe-deploy-result");y.style.display="none",m.innerHTML="";const S=I();for(const p of S){const l=document.createElement("div");l.id=`recipe-progress-${p.id}`,l.style.cssText="display: flex; align-items: center; gap: 10px; padding: 10px 12px; border-radius: 6px; background: var(--card-bg); border: 1px solid var(--border); font-size: 0.85rem;",l.innerHTML=`
<span class="recipe-progress-icon" style="font-size: 1.1rem;">\u23F3</span>
<span style="flex:1; font-weight: 500;">${escapeHtml(p.role||p.id)}</span>
<span class="recipe-progress-status" style="color: var(--muted);">Queued</span>
`,u.appendChild(l)}const y=document.querySelectorAll("#recipe-volume-list input[data-volume-key]"),w={};y.forEach(p=>{w[p.dataset.volumeKey]=p.value});const s={selectedComponents:S.map(p=>p.id),sharedConfig:{ip:document.getElementById("recipe-ip").value||"host.docker.internal",timezone:document.getElementById("recipe-timezone").value||"UTC",tailscaleOnly:document.getElementById("recipe-tailscale").checked,volumes:w},componentOverrides:{}};for(const p of S)T(p.id,"deploying","Deploying...");try{const l=await(await secureFetch("/api/v1/recipes/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({recipeId:j.id,config:s})})).json();if(l.success){for(const v of l.deployed||[])T(v.id,"success",v.url?`Running \u2192 ${v.url}`:"Running");for(const v of l.errors||[])T(v.componentId,"error",v.error);g.style.display="",g.innerHTML=`
`,m.appendChild(l)}const f=document.querySelectorAll("#recipe-volume-list input[data-volume-key]"),E={};f.forEach(p=>{E[p.dataset.volumeKey]=p.value});const s={selectedComponents:S.map(p=>p.id),sharedConfig:{ip:document.getElementById("recipe-ip").value||"host.docker.internal",timezone:document.getElementById("recipe-timezone").value||"UTC",tailscaleOnly:document.getElementById("recipe-tailscale").checked,volumes:E},componentOverrides:{}};for(const p of S)N(p.id,"deploying","Deploying...");try{const l=await(await secureFetch("/api/v1/recipes/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({recipeId:j.id,config:s})})).json();if(l.success){for(const g of l.deployed||[])N(g.id,"success",g.url?`Running \u2192 ${g.url}`:"Running");for(const g of l.errors||[])N(g.componentId,"error",g.error);y.style.display="",y.innerHTML=`
<div style="padding: 14px; border-radius: 8px; background: rgba(46,204,113,0.1); border: 1px solid rgba(46,204,113,0.3);">
<div style="font-weight: 600; color: var(--ok-fg); margin-bottom: 6px;">${escapeHtml(l.message||"Deployed!")}</div>
${l.setupInstructions?`<div style="font-size: 0.8rem; color: var(--muted); margin-top: 8px;">
<strong>Setup tips:</strong>
<ul style="margin: 4px 0 0 16px; padding: 0;">${l.setupInstructions.map(v=>`<li>${escapeHtml(v)}</li>`).join("")}</ul>
<ul style="margin: 4px 0 0 16px; padding: 0;">${l.setupInstructions.map(g=>`<li>${escapeHtml(g)}</li>`).join("")}</ul>
</div>`:""}
</div>
`,showNotification(`${j.name} recipe deployed successfully!`,"success",5e3),window.loadServices&&window.loadServices()}else g.style.display="",g.innerHTML=`<div style="padding: 14px; border-radius: 8px; background: rgba(231,76,60,0.1); border: 1px solid rgba(231,76,60,0.3); color: var(--bad-fg);">
`,showNotification(`${j.name} recipe deployed successfully!`,"success",5e3),window.loadServices&&window.loadServices()}else y.style.display="",y.innerHTML=`<div style="padding: 14px; border-radius: 8px; background: rgba(231,76,60,0.1); border: 1px solid rgba(231,76,60,0.3); color: var(--bad-fg);">
<strong>Deployment failed:</strong> ${escapeHtml(l.error||"Unknown error")}
</div>`,showNotification(`Recipe deployment failed: ${l.error}`,"error",5e3)}catch(p){g.style.display="",g.innerHTML=`<div style="padding: 14px; border-radius: 8px; background: rgba(231,76,60,0.1); border: 1px solid rgba(231,76,60,0.3); color: var(--bad-fg);">
</div>`,showNotification(`Recipe deployment failed: ${l.error}`,"error",5e3)}catch(p){y.style.display="",y.innerHTML=`<div style="padding: 14px; border-radius: 8px; background: rgba(231,76,60,0.1); border: 1px solid rgba(231,76,60,0.3); color: var(--bad-fg);">
<strong>Network error:</strong> ${escapeHtml(p.message)}
</div>`}}function T(u,g,S){const y=document.getElementById(`recipe-progress-${u}`);if(!y)return;const w=y.querySelector(".recipe-progress-icon"),s=y.querySelector(".recipe-progress-status");g==="deploying"?(w.textContent="\u23F3",s.style.color="var(--accent)"):g==="success"?(w.textContent="\u2705",s.style.color="var(--ok-fg)"):g==="error"&&(w.textContent="\u274C",s.style.color="var(--bad-fg)"),s.textContent=S}k.addEventListener("click",()=>{if(b===3){b=4,N(),L();return}b<3&&(b++,N(),b===2&&I(),b===3&&H())}),R.addEventListener("click",()=>{b>1&&b<4&&(b--,N())}),window.groupRecipeCards=function(){const u=document.querySelectorAll(".service-card[data-recipe-id]");if(u.length===0)return;const g={};u.forEach(S=>{const y=S.dataset.recipeId;g[y]||(g[y]=[]),g[y].push(S)});for(const[S,y]of Object.entries(g))y.length<2||y.forEach((w,s)=>{if(w.style.borderLeft="3px solid rgba(142,68,173,0.5)",s===0){let p=w.querySelector(".recipe-group-label");p||(p=document.createElement("div"),p.className="recipe-group-label",p.style.cssText="position: absolute; top: -8px; left: 12px; font-size: 0.6rem; padding: 1px 8px; border-radius: 8px; background: rgba(142,68,173,0.3); color: #d4a5ff; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px;",p.textContent=S.replace(/-/g," "),w.style.position="relative",w.appendChild(p))}})},window.manageRecipe=async function(u,g){const S=`/api/v1/recipes/${u}/${g}`,y=g==="remove"?"DELETE":"POST",w=g==="remove"?`/api/v1/recipes/${u}`:S;if(!(g==="remove"&&!confirm(`Remove the entire ${u} recipe? This will delete all containers and configuration.`)))try{const p=await(await secureFetch(w,{method:y})).json();p.success?(showNotification(`Recipe ${g}: ${p.results?.filter(l=>l.status!=="failed").length||0} components processed`,"success",4e3),window.loadServices&&window.loadServices()):showNotification(`Recipe ${g} failed: ${p.error}`,"error",5e3)}catch(s){showNotification(`Network error: ${s.message}`,"error",5e3)}};const O=document.createElement("style");O.textContent=`
</div>`}}function N(m,y,S){const f=document.getElementById(`recipe-progress-${m}`);if(!f)return;const E=f.querySelector(".recipe-progress-icon"),s=f.querySelector(".recipe-progress-status");y==="deploying"?(E.textContent="\u23F3",s.style.color="var(--accent)"):y==="success"?(E.textContent="\u2705",s.style.color="var(--ok-fg)"):y==="error"&&(E.textContent="\u274C",s.style.color="var(--bad-fg)"),s.textContent=S}x.addEventListener("click",()=>{if(k===3){k=4,$(),R();return}k<3&&(k++,$(),k===2&&v(),k===3&&D())}),A.addEventListener("click",()=>{k>1&&k<4&&(k--,$())}),window.groupRecipeCards=function(){const m=document.querySelectorAll(".service-card[data-recipe-id]");if(m.length===0)return;const y={};m.forEach(S=>{const f=S.dataset.recipeId;y[f]||(y[f]=[]),y[f].push(S)});for(const[S,f]of Object.entries(y))f.length<2||f.forEach((E,s)=>{if(E.style.borderLeft="3px solid rgba(142,68,173,0.5)",s===0){let p=E.querySelector(".recipe-group-label");p||(p=document.createElement("div"),p.className="recipe-group-label",p.style.cssText="position: absolute; top: -8px; left: 12px; font-size: 0.6rem; padding: 1px 8px; border-radius: 8px; background: rgba(142,68,173,0.3); color: #d4a5ff; font-weight: 600; text-transform: uppercase; letter-spacing: 0.5px;",p.textContent=S.replace(/-/g," "),E.style.position="relative",E.appendChild(p))}})},window.manageRecipe=async function(m,y){const S=`/api/v1/recipes/${m}/${y}`,f=y==="remove"?"DELETE":"POST",E=y==="remove"?`/api/v1/recipes/${m}`:S;if(!(y==="remove"&&!confirm(`Remove the entire ${m} recipe? This will delete all containers and configuration.`)))try{const p=await(await secureFetch(E,{method:f})).json();p.success?(showNotification(`Recipe ${y}: ${p.results?.filter(l=>l.status!=="failed").length||0} components processed`,"success",4e3),window.loadServices&&window.loadServices()):showNotification(`Recipe ${y} failed: ${p.error}`,"error",5e3)}catch(s){showNotification(`Network error: ${s.message}`,"error",5e3)}};const O=document.createElement("style");O.textContent=`
.recipe-step {
flex: 1;
text-align: center;
@@ -550,7 +550,7 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
.recipe-step-panel {
min-height: 180px;
}
`,document.head.appendChild(O),E()})(),(function(){document.getElementById("reload-caddy-top")?.addEventListener("click",async()=>{const f=document.getElementById("reload-caddy-top"),B=f.textContent;try{f.textContent="\u23F3 Reloading...",f.disabled=!0;const j=await secureFetch("/api/v1/caddy/reload",{method:"POST",headers:{"Content-Type":"application/json"}}),b=await j.json();if(j.ok&&b.success)f.textContent="\u2705 Reloaded!",setTimeout(()=>{f.textContent=B,f.disabled=!1},2e3);else throw new Error(b.error||"Reload failed")}catch(j){f.textContent="\u274C Failed",showNotification(`Failed to reload Caddy: ${j.message}`,"error"),setTimeout(()=>{f.textContent=B,f.disabled=!1},2e3)}})})(),(function(){injectModal("error-log-modal",`<div id="error-log-modal" class="weather-modal">
`,document.head.appendChild(O),w()})(),(function(){document.getElementById("reload-caddy-top")?.addEventListener("click",async()=>{const b=document.getElementById("reload-caddy-top"),C=b.textContent;try{b.textContent="\u23F3 Reloading...",b.disabled=!0;const j=await secureFetch("/api/v1/caddy/reload",{method:"POST",headers:{"Content-Type":"application/json"}}),k=await j.json();if(j.ok&&k.success)b.textContent="\u2705 Reloaded!",setTimeout(()=>{b.textContent=C,b.disabled=!1},2e3);else throw new Error(k.error||"Reload failed")}catch(j){b.textContent="\u274C Failed",showNotification(`Failed to reload Caddy: ${j.message}`,"error"),setTimeout(()=>{b.textContent=C,b.disabled=!1},2e3)}})})(),(function(){injectModal("error-log-modal",`<div id="error-log-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 950px; max-width: 1150px;">
<h3>\u{1F4CB} Error Logs</h3>
<p class="modal-subtitle">
@@ -597,8 +597,8 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="error-log-close">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("error-log-modal"),B=document.getElementById("view-error-logs"),j=document.getElementById("error-log-refresh"),b=document.getElementById("error-log-clear"),D=document.getElementById("error-log-close"),A=document.getElementById("error-log-level"),P=document.getElementById("error-log-context"),R=document.getElementById("error-log-search"),k=document.getElementById("error-log-since"),M=document.getElementById("error-log-until"),E=document.getElementById("error-log-container"),z=document.getElementById("error-log-load-more"),C=document.getElementById("error-log-total"),N=50;let x=0,I=null,H=0,m=[];function L(w){if(!w)return null;const s=new Date(w);return isNaN(s.getTime())?null:s.toISOString()}async function T(){try{const w=await fetch("/api/v1/error-logs/contexts");if(!w.ok)return;const s=await w.json();if(!s.success||!Array.isArray(s.contexts))return;m=s.contexts;const p=P.value;P.innerHTML='<option value="">All</option>';for(const l of s.contexts){const v=document.createElement("option");v.value=l.name,v.textContent=`${l.name} (${l.count})`,P.appendChild(v)}p&&s.contexts.some(l=>l.name===p)&&(P.value=p)}catch{}}function O(){const w=new URLSearchParams;w.set("limit",String(N)),w.set("offset",String(x)),A.value&&w.set("level",A.value),P.value&&w.set("context",P.value);const s=L(k.value),p=L(M.value);s&&w.set("since",s),p&&w.set("until",p);const l=(R.value||"").trim();return l&&w.set("search",l),w}async function u(w){try{w?(I&&I.abort(),I=new AbortController):(I&&I.abort(),I=new AbortController,x=0,H++,E.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading...</div>');const s=H,p=O(),l=await fetch("/api/v1/error-logs?"+p.toString(),{signal:I.signal});if(!l.ok){E.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: HTTP ${l.status}</div>`,z.style.display="none",C.textContent="";return}const v=await l.json();if(!v.success){E.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(v.error||"unknown")}</div>`,z.style.display="none",C.textContent="";return}if(!w&&s!==H)return;const c=Array.isArray(v.logs)?v.logs:[];if(c.length===0&&!w){const e=v.filters&&(v.filters.level||v.filters.context||v.filters.search||v.filters.since||v.filters.until)?"No error log entries match your filters.":"\u2705 No errors logged! Everything is working smoothly.";E.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4CB}</span>${escapeHtml(e)}</div>`,z.style.display="none",C.textContent=v.total?`${v.total} total`:"";return}let t="";w||(t='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',t+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);">',t+='<th style="padding: 6px; text-align: left; width: 160px;">When</th>',t+='<th style="padding: 6px; text-align: left; width: 80px;">Level</th>',t+='<th style="padding: 6px; text-align: left; width: 140px;">Context</th>',t+='<th style="padding: 6px; text-align: left;">Message</th>',t+='<th style="padding: 6px; text-align: left; width: 110px;">IP</th>',t+="</tr>");for(const e of c){const a=(e.level||"?").toUpperCase(),o=a==="ERR"?"var(--bad-fg)":a==="WARN"?"var(--warn-fg, #f0c674)":"var(--muted)",i=e.timestamp?new Date(e.timestamp).toLocaleString():"\u2014",n=e.context||"\u2014",r=(e.error||"").split(`
`)[0],d=e.request&&e.request.ip||"";t+='<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" class="error-log-row">',t+=`<td style="padding: 6px; color: var(--muted);" title="${escapeHtml(e.timestamp||"")}">${escapeHtml(i)}</td>`,t+=`<td style="padding: 6px;"><span style="color: ${o}; font-weight: 600;">${escapeHtml(a)}</span></td>`,t+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(n)}</td>`,t+=`<td style="padding: 6px;">${escapeHtml(r)}</td>`,t+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(d)}</td>`,t+="</tr>",e.detail&&(t+=`<tr class="error-log-detail" style="display: none;"><td colspan="5" style="padding: 6px 6px 10px; font-size: 0.78rem; color: var(--muted);"><pre style="margin: 0; white-space: pre-wrap; font-family: monospace; max-height: 320px; overflow: auto;">${escapeHtml(e.detail)}</pre></td></tr>`)}if(!w)t+="</table>",E.innerHTML=t;else{const e=E.querySelector("table");e&&e.insertAdjacentHTML("beforeend",t)}x+=c.length,z.style.display=v.hasMore?"":"none",C.textContent=`${v.total} total${v.hasMore?" (showing "+x+")":""}`,E.querySelectorAll(".error-log-row").forEach(e=>{e.dataset.wired||(e.dataset.wired="true",e.addEventListener("click",()=>{const a=e.nextElementSibling;a&&a.classList.contains("error-log-detail")&&(a.style.display=a.style.display==="none"?"":"none")}))})}catch(s){if(s&&s.name==="AbortError")return;E.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(s.message)}</div>`,C.textContent=""}}async function g(){if(confirm("Clear the entire error log? This cannot be undone."))try{const s=await(await secureFetch("/api/v1/error-logs",{method:"DELETE",headers:{"content-type":"application/json"},body:JSON.stringify({confirm:"CLEAR"})})).json();s.success?(await T(),u(!1),showNotification("\u2705 Error logs cleared","success",3e3)):showNotification("\u274C "+(s.error||"Clear failed"),"error",4e3)}catch(w){showNotification("\u274C "+w.message,"error",4e3)}}let S;function y(){A?.addEventListener("change",()=>u(!1)),P?.addEventListener("change",()=>u(!1)),R?.addEventListener("input",()=>{clearTimeout(S),S=setTimeout(()=>u(!1),250)});let w;[k,M].forEach(s=>{s?.addEventListener("change",()=>{clearTimeout(w),w=setTimeout(()=>u(!1),250)})}),j?.addEventListener("click",()=>u(!1)),z?.addEventListener("click",()=>u(!0)),b?.addEventListener("click",g),wireModal(f,D)}B?.addEventListener("click",async()=>{f?.classList.add("show"),await T(),u(!1)}),y()})(),(function(){injectModal("container-logs-modal",`<div id="container-logs-modal" class="weather-modal" style="z-index: 1001;">
</div>`);const b=document.getElementById("error-log-modal"),C=document.getElementById("view-error-logs"),j=document.getElementById("error-log-refresh"),k=document.getElementById("error-log-clear"),z=document.getElementById("error-log-close"),P=document.getElementById("error-log-level"),H=document.getElementById("error-log-context"),A=document.getElementById("error-log-search"),x=document.getElementById("error-log-since"),B=document.getElementById("error-log-until"),w=document.getElementById("error-log-container"),M=document.getElementById("error-log-load-more"),L=document.getElementById("error-log-total"),$=50;let u=0,v=null,D=0,I=[];function R(E){if(!E)return null;const s=new Date(E);return isNaN(s.getTime())?null:s.toISOString()}async function N(){try{const E=await fetch("/api/v1/error-logs/contexts");if(!E.ok)return;const s=await E.json();if(!s.success||!Array.isArray(s.contexts))return;I=s.contexts;const p=H.value;H.innerHTML='<option value="">All</option>';for(const l of s.contexts){const g=document.createElement("option");g.value=l.name,g.textContent=`${l.name} (${l.count})`,H.appendChild(g)}p&&s.contexts.some(l=>l.name===p)&&(H.value=p)}catch{}}function O(){const E=new URLSearchParams;E.set("limit",String($)),E.set("offset",String(u)),P.value&&E.set("level",P.value),H.value&&E.set("context",H.value);const s=R(x.value),p=R(B.value);s&&E.set("since",s),p&&E.set("until",p);const l=(A.value||"").trim();return l&&E.set("search",l),E}async function m(E){try{E?(v&&v.abort(),v=new AbortController):(v&&v.abort(),v=new AbortController,u=0,D++,w.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading...</div>');const s=D,p=O(),l=await fetch("/api/v1/error-logs?"+p.toString(),{signal:v.signal});if(!l.ok){w.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: HTTP ${l.status}</div>`,M.style.display="none",L.textContent="";return}const g=await l.json();if(!g.success){w.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(g.error||"unknown")}</div>`,M.style.display="none",L.textContent="";return}if(!E&&s!==D)return;const c=Array.isArray(g.logs)?g.logs:[];if(c.length===0&&!E){const e=g.filters&&(g.filters.level||g.filters.context||g.filters.search||g.filters.since||g.filters.until)?"No error log entries match your filters.":"\u2705 No errors logged! Everything is working smoothly.";w.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4CB}</span>${escapeHtml(e)}</div>`,M.style.display="none",L.textContent=g.total?`${g.total} total`:"";return}let t="";E||(t='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',t+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);">',t+='<th style="padding: 6px; text-align: left; width: 160px;">When</th>',t+='<th style="padding: 6px; text-align: left; width: 80px;">Level</th>',t+='<th style="padding: 6px; text-align: left; width: 140px;">Context</th>',t+='<th style="padding: 6px; text-align: left;">Message</th>',t+='<th style="padding: 6px; text-align: left; width: 110px;">IP</th>',t+="</tr>");for(const e of c){const a=(e.level||"?").toUpperCase(),o=a==="ERR"?"var(--bad-fg)":a==="WARN"?"var(--warn-fg, #f0c674)":"var(--muted)",i=e.timestamp?new Date(e.timestamp).toLocaleString():"\u2014",n=e.context||"\u2014",r=(e.error||"").split(`
`)[0],d=e.request&&e.request.ip||"";t+='<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" class="error-log-row">',t+=`<td style="padding: 6px; color: var(--muted);" title="${escapeHtml(e.timestamp||"")}">${escapeHtml(i)}</td>`,t+=`<td style="padding: 6px;"><span style="color: ${o}; font-weight: 600;">${escapeHtml(a)}</span></td>`,t+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(n)}</td>`,t+=`<td style="padding: 6px;">${escapeHtml(r)}</td>`,t+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(d)}</td>`,t+="</tr>",e.detail&&(t+=`<tr class="error-log-detail" style="display: none;"><td colspan="5" style="padding: 6px 6px 10px; font-size: 0.78rem; color: var(--muted);"><pre style="margin: 0; white-space: pre-wrap; font-family: monospace; max-height: 320px; overflow: auto;">${escapeHtml(e.detail)}</pre></td></tr>`)}if(!E)t+="</table>",w.innerHTML=t;else{const e=w.querySelector("table");e&&e.insertAdjacentHTML("beforeend",t)}u+=c.length,M.style.display=g.hasMore?"":"none",L.textContent=`${g.total} total${g.hasMore?" (showing "+u+")":""}`,w.querySelectorAll(".error-log-row").forEach(e=>{e.dataset.wired||(e.dataset.wired="true",e.addEventListener("click",()=>{const a=e.nextElementSibling;a&&a.classList.contains("error-log-detail")&&(a.style.display=a.style.display==="none"?"":"none")}))})}catch(s){if(s&&s.name==="AbortError")return;w.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(s.message)}</div>`,L.textContent=""}}async function y(){if(confirm("Clear the entire error log? This cannot be undone."))try{const s=await(await secureFetch("/api/v1/error-logs",{method:"DELETE",headers:{"content-type":"application/json"},body:JSON.stringify({confirm:"CLEAR"})})).json();s.success?(await N(),m(!1),showNotification("\u2705 Error logs cleared","success",3e3)):showNotification("\u274C "+(s.error||"Clear failed"),"error",4e3)}catch(E){showNotification("\u274C "+E.message,"error",4e3)}}let S;function f(){P?.addEventListener("change",()=>m(!1)),H?.addEventListener("change",()=>m(!1)),A?.addEventListener("input",()=>{clearTimeout(S),S=setTimeout(()=>m(!1),250)});let E;[x,B].forEach(s=>{s?.addEventListener("change",()=>{clearTimeout(E),E=setTimeout(()=>m(!1),250)})}),j?.addEventListener("click",()=>m(!1)),M?.addEventListener("click",()=>m(!0)),k?.addEventListener("click",y),wireModal(b,z)}C?.addEventListener("click",async()=>{b?.classList.add("show"),await N(),m(!1)}),f()})(),(function(){injectModal("container-logs-modal",`<div id="container-logs-modal" class="weather-modal" style="z-index: 1001;">
<div class="weather-modal-content" style="min-width: 900px; max-width: 95vw; height: 80vh; display: flex; flex-direction: column;">
<div class="logs-header" style="display: flex; justify-content: space-between; align-items: center; padding-bottom: 12px; border-bottom: 1px solid var(--border); margin-bottom: 12px;">
<div>
@@ -648,14 +648,14 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="cl-close-btn" class="btn-secondary">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("container-logs-modal"),B=document.getElementById("cl-container-select"),j=document.getElementById("cl-log-content"),b=document.getElementById("cl-log-search"),D=document.getElementById("cl-log-tail"),A=document.getElementById("cl-refresh"),P=document.getElementById("cl-stream"),R=document.getElementById("cl-download"),k=document.getElementById("cl-clear-search"),M=document.getElementById("cl-close"),E=document.getElementById("cl-close-btn"),z=document.getElementById("cl-stream-status"),C=document.getElementById("cl-stream-indicator"),N=document.getElementById("cl-stream-text"),x=document.getElementById("cl-line-count"),I=document.getElementById("cl-filter-count"),H=document.getElementById("cl-image"),m=document.getElementById("cl-status"),L=document.getElementById("cl-created");let T=null,O=[],u=[],g=null,S=!1,y=null;function w(r){if(!r)return"-";const d=new Date(r);return isNaN(d.getTime())?r:d.toLocaleString()}function s(r){if(!r)return"";const d=document.createElement("div");return d.textContent=r,d.innerHTML}function p(r,d){const h=r.stream==="stderr"?"log-stderr":"log-stdout",$=r.stream==="stderr"?"\u26A0\uFE0F":"\u{1F4E4}";return`
</div>`);const b=document.getElementById("container-logs-modal"),C=document.getElementById("cl-container-select"),j=document.getElementById("cl-log-content"),k=document.getElementById("cl-log-search"),z=document.getElementById("cl-log-tail"),P=document.getElementById("cl-refresh"),H=document.getElementById("cl-stream"),A=document.getElementById("cl-download"),x=document.getElementById("cl-clear-search"),B=document.getElementById("cl-close"),w=document.getElementById("cl-close-btn"),M=document.getElementById("cl-stream-status"),L=document.getElementById("cl-stream-indicator"),$=document.getElementById("cl-stream-text"),u=document.getElementById("cl-line-count"),v=document.getElementById("cl-filter-count"),D=document.getElementById("cl-image"),I=document.getElementById("cl-status"),R=document.getElementById("cl-created");let N=null,O=[],m=[],y=null,S=!1,f=null;function E(r){if(!r)return"-";const d=new Date(r);return isNaN(d.getTime())?r:d.toLocaleString()}function s(r){if(!r)return"";const d=document.createElement("div");return d.textContent=r,d.innerHTML}function p(r,d){const h=r.stream==="stderr"?"log-stderr":"log-stdout",T=r.stream==="stderr"?"\u26A0\uFE0F":"\u{1F4E4}";return`
<div class="log-entry ${h}" data-index="${d}" style="padding: 4px 8px; border-bottom: 1px solid #333; display: flex; gap: 8px;">
<span class="log-line-num" style="color: #666; min-width: 40px; text-align: right; user-select: none;">${d+1}</span>
<span class="log-stream-icon" style="color: ${r.stream==="stderr"?"#f59e0b":"#22c55e"};">${$}</span>
<span class="log-stream-icon" style="color: ${r.stream==="stderr"?"#f59e0b":"#22c55e"};">${T}</span>
<span class="log-text" style="flex: 1; white-space: pre-wrap; word-break: break-all; color: #e5e5e5;">${s(r.text)}</span>
</div>
`}function l(r,d=""){if(!r||r.length===0){j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs available</div>',x.textContent="0 lines",I.textContent="0 filtered";return}if(O=r,u=d?r.filter(h=>h.text&&h.text.toLowerCase().includes(d.toLowerCase())):r,x.textContent=`${r.length} lines`,I.textContent=d?`${u.length} of ${r.length} shown`:`${r.length} shown`,u.length===0){j.innerHTML=`<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs match "${s(d)}"</div>`;return}j.innerHTML=u.map((h,$)=>p(h,$)).join(""),j.scrollTop=j.scrollHeight}async function v(){try{const d=(await getJSON("/api/v1/logs/containers")).containers||[],h=B.value;B.innerHTML='<option value="">Select a container...</option>',d.forEach($=>{const U=document.createElement("option");U.value=$.id,U.textContent=`${$.name} (${$.image.split(":")[0]}) - ${$.status}`,U.dataset.name=$.name,U.dataset.image=$.image,U.dataset.status=$.status,U.dataset.created=$.created,B.appendChild(U)}),h&&B.querySelector(`option[value="${h}"]`)&&(B.value=h,c(h))}catch(r){console.error("Failed to load containers:",r)}}function c(r){const d=B.querySelector(`option[value="${r}"]`);d&&(H.textContent=d.dataset.image||"-",m.textContent=d.dataset.status||"-",m.style.color=d.dataset.status==="running"?"var(--ok-fg, #4ade80)":"var(--bad-fg, #ef4444)",L.textContent=w(d.dataset.created))}async function t(){const r=B.value;if(!r){j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Select a container to view logs</div>';return}a(),T=r,c(r);const d=D.value,h=b.value.trim();j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Loading logs...</div>';try{const $=`/api/v1/logs/container/${r}${d!=="all"?`?tail=${d}`:""}`,U=await getJSON($);U.logs&&U.logs.length>0?l(U.logs,h):(j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs found for this container</div>',x.textContent="0 lines",I.textContent="0 filtered")}catch($){j.innerHTML=`<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Error loading logs: ${s($.message)}</div>`}}function e(){const r=B.value;if(!r)return;a(),S=!0,P.textContent="\u23F9 Stop",z.style.display="flex",C.textContent="\u{1F7E2}",N.textContent="Connecting...";const d=`/api/v1/logs/stream/${r}`;g=new EventSource(d),g.onopen=()=>{C.textContent="\u{1F7E2}",N.textContent="Connected - streaming logs"},g.onmessage=h=>{try{const $=JSON.parse(h.data);if($.error){C.textContent="\u{1F534}",N.textContent=`Error: ${$.error}`;return}O.push($),u.push($),x.textContent=`${O.length} lines`,I.textContent=`${u.length} shown`;const U=b.value.trim();if(!U||$.text&&$.text.toLowerCase().includes(U.toLowerCase())){const _=document.createElement("div");_.innerHTML=p($,u.length-1);const F=_.firstElementChild;F.style.background="#1a3a1a",j.appendChild(F),j.scrollTop=j.scrollHeight}}catch($){console.error("Error parsing log:",$)}},g.onerror=()=>{C.textContent="\u{1F534}",N.textContent="Disconnected",S=!1,P.textContent="\u25B6 Stream"},f._eventSource=g}function a(){g&&(g.close(),g=null),f._eventSource&&(f._eventSource.close(),f._eventSource=null),S=!1,P.textContent="\u25B6 Stream",z.style.display="none"}function o(){if(!O||O.length===0){showNotification("No logs to download","error");return}const r=B.querySelector(`option[value="${T}"]`)?.dataset.name||T,d=new Date().toISOString().replace(/[:.]/g,"-"),h=`${r}-logs-${d}.txt`,$=O.map(q=>{const J=q.timestamp||"",X=q.stream==="stderr"?"[ERR]":"[OUT]";return`${J?J+" ":""}${X} ${q.text}`}).join(`
`),U=new Blob([$],{type:"text/plain"}),_=URL.createObjectURL(U),F=document.createElement("a");F.href=_,F.download=h,document.body.appendChild(F),F.click(),document.body.removeChild(F),URL.revokeObjectURL(_),showNotification(`Downloaded ${O.length} log lines`,"success")}B?.addEventListener("change",()=>{t()}),D?.addEventListener("change",()=>{t()}),A?.addEventListener("click",()=>{t()}),P?.addEventListener("click",()=>{S?a():e()}),R?.addEventListener("click",()=>{o()}),k?.addEventListener("click",()=>{b.value="",l(O,"")}),b?.addEventListener("input",()=>{clearTimeout(y),y=setTimeout(()=>{l(O,b.value.trim())},300)}),b?.addEventListener("keydown",r=>{r.key==="Escape"&&(b.value="",l(O,""))}),document.getElementById("view-container-logs")?.addEventListener("click",()=>{f.classList.add("show"),v()});function n(){a(),f.classList.remove("show")}M?.addEventListener("click",n),E?.addEventListener("click",n),document.addEventListener("keydown",r=>{r.key==="Escape"&&f.classList.contains("show")&&n()}),f.addEventListener("click",r=>{r.target===f&&n()}),window.openContainerLogsModal=function(r,d){f.classList.add("show"),v().then(()=>{const h=Array.from(B.options).find($=>$.value===r||$.dataset.name===d);h?(B.value=h.value,c(h.value),t()):r?(T=r,H.textContent=d||r,m.textContent="-",L.textContent="-",t()):j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Select a container to view logs</div>'})}})(),(function(){"use strict";const f=[{unit:"caddy",label:"Caddy (reverse proxy)"},{unit:"dashcaddy-api",label:"DashCaddy API (host systemd unit, not this container)"},{unit:"docker",label:"Docker daemon"},{unit:"ssh",label:"SSH server"},{unit:"systemd-journald",label:"systemd-journald"},{unit:"tailscaled",label:"Tailscale"},{unit:"networkd-dispatcher",label:"Networkd dispatcher"}];injectModal("journald-modal",`
`}function l(r,d=""){if(!r||r.length===0){j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs available</div>',u.textContent="0 lines",v.textContent="0 filtered";return}if(O=r,m=d?r.filter(h=>h.text&&h.text.toLowerCase().includes(d.toLowerCase())):r,u.textContent=`${r.length} lines`,v.textContent=d?`${m.length} of ${r.length} shown`:`${r.length} shown`,m.length===0){j.innerHTML=`<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs match "${s(d)}"</div>`;return}j.innerHTML=m.map((h,T)=>p(h,T)).join(""),j.scrollTop=j.scrollHeight}async function g(){try{const d=(await getJSON("/api/v1/logs/containers")).containers||[],h=C.value;C.innerHTML='<option value="">Select a container...</option>',d.forEach(T=>{const U=document.createElement("option");U.value=T.id,U.textContent=`${T.name} (${T.image.split(":")[0]}) - ${T.status}`,U.dataset.name=T.name,U.dataset.image=T.image,U.dataset.status=T.status,U.dataset.created=T.created,C.appendChild(U)}),h&&C.querySelector(`option[value="${h}"]`)&&(C.value=h,c(h))}catch(r){console.error("Failed to load containers:",r)}}function c(r){const d=C.querySelector(`option[value="${r}"]`);d&&(D.textContent=d.dataset.image||"-",I.textContent=d.dataset.status||"-",I.style.color=d.dataset.status==="running"?"var(--ok-fg, #4ade80)":"var(--bad-fg, #ef4444)",R.textContent=E(d.dataset.created))}async function t(){const r=C.value;if(!r){j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Select a container to view logs</div>';return}a(),N=r,c(r);const d=z.value,h=k.value.trim();j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Loading logs...</div>';try{const T=`/api/v1/logs/container/${r}${d!=="all"?`?tail=${d}`:""}`,U=await getJSON(T);U.logs&&U.logs.length>0?l(U.logs,h):(j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No logs found for this container</div>',u.textContent="0 lines",v.textContent="0 filtered")}catch(T){j.innerHTML=`<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Error loading logs: ${s(T.message)}</div>`}}function e(){const r=C.value;if(!r)return;a(),S=!0,H.textContent="\u23F9 Stop",M.style.display="flex",L.textContent="\u{1F7E2}",$.textContent="Connecting...";const d=`/api/v1/logs/stream/${r}`;y=new EventSource(d),y.onopen=()=>{L.textContent="\u{1F7E2}",$.textContent="Connected - streaming logs"},y.onmessage=h=>{try{const T=JSON.parse(h.data);if(T.error){L.textContent="\u{1F534}",$.textContent=`Error: ${T.error}`;return}O.push(T),m.push(T),u.textContent=`${O.length} lines`,v.textContent=`${m.length} shown`;const U=k.value.trim();if(!U||T.text&&T.text.toLowerCase().includes(U.toLowerCase())){const q=document.createElement("div");q.innerHTML=p(T,m.length-1);const F=q.firstElementChild;F.style.background="#1a3a1a",j.appendChild(F),j.scrollTop=j.scrollHeight}}catch(T){console.error("Error parsing log:",T)}},y.onerror=()=>{L.textContent="\u{1F534}",$.textContent="Disconnected",S=!1,H.textContent="\u25B6 Stream"},b._eventSource=y}function a(){y&&(y.close(),y=null),b._eventSource&&(b._eventSource.close(),b._eventSource=null),S=!1,H.textContent="\u25B6 Stream",M.style.display="none"}function o(){if(!O||O.length===0){showNotification("No logs to download","error");return}const r=C.querySelector(`option[value="${N}"]`)?.dataset.name||N,d=new Date().toISOString().replace(/[:.]/g,"-"),h=`${r}-logs-${d}.txt`,T=O.map(_=>{const J=_.timestamp||"",X=_.stream==="stderr"?"[ERR]":"[OUT]";return`${J?J+" ":""}${X} ${_.text}`}).join(`
`),U=new Blob([T],{type:"text/plain"}),q=URL.createObjectURL(U),F=document.createElement("a");F.href=q,F.download=h,document.body.appendChild(F),F.click(),document.body.removeChild(F),URL.revokeObjectURL(q),showNotification(`Downloaded ${O.length} log lines`,"success")}C?.addEventListener("change",()=>{t()}),z?.addEventListener("change",()=>{t()}),P?.addEventListener("click",()=>{t()}),H?.addEventListener("click",()=>{S?a():e()}),A?.addEventListener("click",()=>{o()}),x?.addEventListener("click",()=>{k.value="",l(O,"")}),k?.addEventListener("input",()=>{clearTimeout(f),f=setTimeout(()=>{l(O,k.value.trim())},300)}),k?.addEventListener("keydown",r=>{r.key==="Escape"&&(k.value="",l(O,""))}),document.getElementById("view-container-logs")?.addEventListener("click",()=>{b.classList.add("show"),g()});function n(){a(),b.classList.remove("show")}B?.addEventListener("click",n),w?.addEventListener("click",n),document.addEventListener("keydown",r=>{r.key==="Escape"&&b.classList.contains("show")&&n()}),b.addEventListener("click",r=>{r.target===b&&n()}),window.openContainerLogsModal=function(r,d){b.classList.add("show"),g().then(()=>{const h=Array.from(C.options).find(T=>T.value===r||T.dataset.name===d);h?(C.value=h.value,c(h.value),t()):r?(N=r,D.textContent=d||r,I.textContent="-",R.textContent="-",t()):j.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Select a container to view logs</div>'})}})(),(function(){"use strict";const b=[{unit:"caddy",label:"Caddy (reverse proxy)"},{unit:"dashcaddy-api",label:"DashCaddy API (host systemd unit, not this container)"},{unit:"docker",label:"Docker daemon"},{unit:"ssh",label:"SSH server"},{unit:"systemd-journald",label:"systemd-journald"},{unit:"tailscaled",label:"Tailscale"},{unit:"networkd-dispatcher",label:"Networkd dispatcher"}];injectModal("journald-modal",`
<div id="journald-modal" class="weather-modal" style="z-index: 1002;">
<div class="weather-modal-content" style="min-width: 900px; max-width: 95vw; height: 80vh; display: flex; flex-direction: column;">
<div class="logs-header" style="display: flex; justify-content: space-between; align-items: center; padding-bottom: 12px; border-bottom: 1px solid var(--border); margin-bottom: 12px;">
@@ -698,7 +698,7 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
</div>
</div>
</div>
`);const B=document.getElementById("journald-modal"),j=document.getElementById("jd-unit-select"),b=document.getElementById("jd-search"),D=document.getElementById("jd-tail"),A=document.getElementById("jd-refresh"),P=document.getElementById("jd-stream"),R=document.getElementById("jd-clear-search"),k=document.getElementById("jd-close"),M=document.getElementById("jd-close-btn"),E=document.getElementById("jd-content"),z=document.getElementById("jd-line-count"),C=document.getElementById("jd-filter-count"),N=document.getElementById("jd-overflow"),x=document.getElementById("jd-unit-display"),I=document.getElementById("jd-stream-state");let H=!1,m=[],L=!1,T=null,O=null;function u(c){const t=document.createElement("div");return t.textContent=String(c),t.innerHTML}function g(c){H=c,j.innerHTML="",f.forEach(t=>{const e=document.createElement("option");e.value=t.unit,e.textContent=t.label+" ("+t.unit+")",j.appendChild(e)}),j.disabled=!c,c?(A.disabled=!1,P.disabled=!1):(E.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">journald bind-mount not available in this container.<br/><small>Requires <code>/var/log/journal</code> + <code>/usr/bin/journalctl</code> mounted (start.sh).</small></div>',A.disabled=!0,P.disabled=!0)}async function S(){try{const c=await fetch("/api/v1/logs/journal/units");if(!c.ok){g(!1);return}const t=await c.json();g(!!t.available)}catch{g(!1)}}function y(){const c=(b.value||"").trim().toLowerCase(),t=c?m.filter(e=>(e.textContent||"").toLowerCase().includes(c)):m;if(t.length===0)E.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No entries'+(c?` matching &quot;${u(c)}&quot;`:"")+"</div>";else{const e=t.map(o=>{const i=o.timestamp?u(o.timestamp):"\u2014",n=u(o.textContent);return`<div class="jd-line" style="padding: 1px 0; line-height: 1.4; color: #d4d4d4;"><span style="color: var(--muted); margin-right: 8px;">${i}</span>${n}</div>`}).join("");E.innerHTML=e,E.scrollHeight-E.scrollTop-E.clientHeight<80&&(E.scrollTop=E.scrollHeight)}z.textContent=`${m.length} entries`,C.textContent=c?`${t.length} of ${m.length} shown`:`${m.length} shown`}async function w(){if(!H)return;p();const c=j.value;if(!c)return;const t=Math.max(1,Math.min(5e3,Number(D.value)||200)),e=(b.value||"").trim();E.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Loading\u2026</div>';try{const a=new URL("/api/v1/logs/journal",window.location.origin);a.searchParams.set("unit",c),a.searchParams.set("tail",String(t)),e&&a.searchParams.set("search",e);const o=await fetch(a.toString()),i=await o.json();if(!o.ok||!i.success){E.innerHTML='<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Failed: '+u(i&&i.error||"HTTP "+o.status)+"</div>";return}x.textContent=c,m=(i.entries||[]).map(n=>({timestamp:n.timestamp,unit:n.unit,textContent:n.text||""})),N.style.display="none",y()}catch(a){E.innerHTML='<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Error: '+u(a.message)+"</div>"}}function s(){if(!H)return;p();const c=j.value;if(!c)return;const t=(b.value||"").trim();x.textContent=c,P.textContent="\u23F8 Stop",P.classList.add("streaming"),I.textContent="streaming",I.style.color="var(--ok-fg, #4ade80)",m=[],y(),N.style.display="none";const e=new URL("/api/v1/logs/journal/stream",window.location.origin);e.searchParams.set("unit",c),t&&e.searchParams.set("search",t),T=new EventSource(e.toString()),T.onmessage=a=>{try{const o=JSON.parse(a.data);if(o.error){/stream (exceeded|line cap)/.test(o.error)&&(N.style.display="",p()),E.innerHTML+='<div class="jd-line" style="color: var(--bad-fg, #ef4444); padding: 4px 0;">\u26A0 '+u(o.error)+"</div>",E.scrollTop=E.scrollHeight;return}m.push({timestamp:o.timestamp,unit:o.unit||c,textContent:o.text||""}),m.length>5e3&&(m=m.slice(m.length-5e3),N.style.display=""),y()}catch{}},T.onerror=()=>{},L=!0}function p(){if(L=!1,T){try{T.close()}catch{}T=null}P.textContent="\u25B6 Stream",P.classList.remove("streaming"),I.textContent="disconnected",I.style.color="var(--muted)"}function l(){p(),B.classList.remove("show")}A.addEventListener("click",w),P.addEventListener("click",()=>L?p():s()),R.addEventListener("click",()=>{b.value="",y()}),b.addEventListener("input",()=>{clearTimeout(O),O=setTimeout(y,200)}),b.addEventListener("keydown",c=>{c.key==="Escape"&&(b.value="",y())}),k.addEventListener("click",l),M.addEventListener("click",l),B.addEventListener("click",c=>{c.target===B&&l()}),document.addEventListener("keydown",c=>{c.key==="Escape"&&B.classList.contains("show")&&l()}),j.addEventListener("change",()=>{m.length>0&&w()});function v(){B.classList.add("show"),S()}window.openJournaldModal=v,document.getElementById("view-journald-logs")?.addEventListener("click",v)})(),(function(){injectModal("snapshot-modal",`<div id="snapshot-modal" class="weather-modal">
`);const C=document.getElementById("journald-modal"),j=document.getElementById("jd-unit-select"),k=document.getElementById("jd-search"),z=document.getElementById("jd-tail"),P=document.getElementById("jd-refresh"),H=document.getElementById("jd-stream"),A=document.getElementById("jd-clear-search"),x=document.getElementById("jd-close"),B=document.getElementById("jd-close-btn"),w=document.getElementById("jd-content"),M=document.getElementById("jd-line-count"),L=document.getElementById("jd-filter-count"),$=document.getElementById("jd-overflow"),u=document.getElementById("jd-unit-display"),v=document.getElementById("jd-stream-state");let D=!1,I=[],R=!1,N=null,O=null;function m(c){const t=document.createElement("div");return t.textContent=String(c),t.innerHTML}function y(c){D=c,j.innerHTML="",b.forEach(t=>{const e=document.createElement("option");e.value=t.unit,e.textContent=t.label+" ("+t.unit+")",j.appendChild(e)}),j.disabled=!c,c?(P.disabled=!1,H.disabled=!1):(w.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">journald bind-mount not available in this container.<br/><small>Requires <code>/var/log/journal</code> + <code>/usr/bin/journalctl</code> mounted (start.sh).</small></div>',P.disabled=!0,H.disabled=!0)}async function S(){try{const c=await fetch("/api/v1/logs/journal/units");if(!c.ok){y(!1);return}const t=await c.json();y(!!t.available)}catch{y(!1)}}function f(){const c=(k.value||"").trim().toLowerCase(),t=c?I.filter(e=>(e.textContent||"").toLowerCase().includes(c)):I;if(t.length===0)w.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">No entries'+(c?` matching &quot;${m(c)}&quot;`:"")+"</div>";else{const e=t.map(o=>{const i=o.timestamp?m(o.timestamp):"\u2014",n=m(o.textContent);return`<div class="jd-line" style="padding: 1px 0; line-height: 1.4; color: #d4d4d4;"><span style="color: var(--muted); margin-right: 8px;">${i}</span>${n}</div>`}).join("");w.innerHTML=e,w.scrollHeight-w.scrollTop-w.clientHeight<80&&(w.scrollTop=w.scrollHeight)}M.textContent=`${I.length} entries`,L.textContent=c?`${t.length} of ${I.length} shown`:`${I.length} shown`}async function E(){if(!D)return;p();const c=j.value;if(!c)return;const t=Math.max(1,Math.min(5e3,Number(z.value)||200)),e=(k.value||"").trim();w.innerHTML='<div class="logs-loading" style="color: var(--muted); text-align: center; padding: 40px;">Loading\u2026</div>';try{const a=new URL("/api/v1/logs/journal",window.location.origin);a.searchParams.set("unit",c),a.searchParams.set("tail",String(t)),e&&a.searchParams.set("search",e);const o=await fetch(a.toString()),i=await o.json();if(!o.ok||!i.success){w.innerHTML='<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Failed: '+m(i&&i.error||"HTTP "+o.status)+"</div>";return}u.textContent=c,I=(i.entries||[]).map(n=>({timestamp:n.timestamp,unit:n.unit,textContent:n.text||""})),$.style.display="none",f()}catch(a){w.innerHTML='<div class="logs-loading" style="color: var(--bad-fg, #ef4444); text-align: center; padding: 40px;">Error: '+m(a.message)+"</div>"}}function s(){if(!D)return;p();const c=j.value;if(!c)return;const t=(k.value||"").trim();u.textContent=c,H.textContent="\u23F8 Stop",H.classList.add("streaming"),v.textContent="streaming",v.style.color="var(--ok-fg, #4ade80)",I=[],f(),$.style.display="none";const e=new URL("/api/v1/logs/journal/stream",window.location.origin);e.searchParams.set("unit",c),t&&e.searchParams.set("search",t),N=new EventSource(e.toString()),N.onmessage=a=>{try{const o=JSON.parse(a.data);if(o.error){/stream (exceeded|line cap)/.test(o.error)&&($.style.display="",p()),w.innerHTML+='<div class="jd-line" style="color: var(--bad-fg, #ef4444); padding: 4px 0;">\u26A0 '+m(o.error)+"</div>",w.scrollTop=w.scrollHeight;return}I.push({timestamp:o.timestamp,unit:o.unit||c,textContent:o.text||""}),I.length>5e3&&(I=I.slice(I.length-5e3),$.style.display=""),f()}catch{}},N.onerror=()=>{},R=!0}function p(){if(R=!1,N){try{N.close()}catch{}N=null}H.textContent="\u25B6 Stream",H.classList.remove("streaming"),v.textContent="disconnected",v.style.color="var(--muted)"}function l(){p(),C.classList.remove("show")}P.addEventListener("click",E),H.addEventListener("click",()=>R?p():s()),A.addEventListener("click",()=>{k.value="",f()}),k.addEventListener("input",()=>{clearTimeout(O),O=setTimeout(f,200)}),k.addEventListener("keydown",c=>{c.key==="Escape"&&(k.value="",f())}),x.addEventListener("click",l),B.addEventListener("click",l),C.addEventListener("click",c=>{c.target===C&&l()}),document.addEventListener("keydown",c=>{c.key==="Escape"&&C.classList.contains("show")&&l()}),j.addEventListener("change",()=>{I.length>0&&E()});function g(){C.classList.add("show"),S()}window.openJournaldModal=g,document.getElementById("view-journald-logs")?.addEventListener("click",g)})(),(function(){injectModal("snapshot-modal",`<div id="snapshot-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 700px; max-width: 850px;">
<h3>\u{1F4BE} Container Snapshots</h3>
<p class="modal-subtitle">
@@ -752,7 +752,7 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="snapshot-close">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("snapshot-modal"),B=document.getElementById("snapshot-btn"),j=document.getElementById("snapshot-close"),b=document.getElementById("snapshot-container-select"),D=document.getElementById("snapshot-details"),A=document.getElementById("snapshot-create-btn"),P=document.getElementById("snapshot-create-status");let R=null;async function k(){try{const x=await(await fetch("/api/v1/containers")).json();if(!x.success||!x.containers)return;b.innerHTML='<option value="">-- Select a container --</option>';for(const I of x.containers){const H=document.createElement("option");H.value=I.id,H.textContent=`${I.name||I.id} (${I.image||"unknown"})`,H.dataset.name=I.name,H.dataset.image=I.image,H.dataset.status=I.status,H.dataset.created=I.created,b.appendChild(H)}}catch(N){console.error("Failed to load containers:",N)}}function M(N){if(!N||!N.value){D.style.display="none",R=null;return}R=N.value,document.getElementById("snapshot-image").textContent=N.dataset.image||"-",document.getElementById("snapshot-status").textContent=N.dataset.status||"-",document.getElementById("snapshot-created").textContent=N.dataset.created?new Date(N.dataset.created*1e3).toLocaleString():"-",document.getElementById("snapshot-id").textContent=N.value.substring(0,12),D.style.display=""}async function E(){if(!R){P.textContent="Please select a container first",P.style.color="var(--bad-fg)";return}const N=document.getElementById("snapshot-name").value.trim();if(!N){P.textContent="Please enter a snapshot name",P.style.color="var(--bad-fg)";return}const x=document.getElementById("snapshot-leave-running").checked;A.disabled=!0,A.textContent="Creating...",P.textContent="";try{const H=await(await fetch(`/api/v1/containers/${encodeURIComponent(R)}/checkpoint`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({name:N,leaveRunning:x})})).json();H.success?(P.textContent=`\u2713 Snapshot "${N}" created successfully`,P.style.color="var(--ok-fg)",document.getElementById("snapshot-name").value=""):(P.textContent=`\u2717 Failed: ${H.error||"Unknown error"}`,P.style.color="var(--bad-fg)")}catch(I){P.textContent=`\u2717 Error: ${I.message}`,P.style.color="var(--bad-fg)"}finally{A.disabled=!1,A.textContent="\u{1F4BE} Create Snapshot"}}function z(){f.classList.add("show"),k()}function C(){f.classList.remove("show"),D.style.display="none",R=null,b.selectedIndex=0}B?.addEventListener("click",z),j?.addEventListener("click",C),wireModal(f,j),b?.addEventListener("change",N=>{const x=b.options[b.selectedIndex];M(x)}),A?.addEventListener("click",E),f?.querySelectorAll(".panel-tab").forEach(N=>{N.addEventListener("click",()=>{f.querySelectorAll(".panel-tab").forEach(x=>x.classList.remove("active")),f.querySelectorAll(".panel-section").forEach(x=>x.classList.remove("active")),N.classList.add("active"),f.querySelector(`#${N.dataset.panel}`).classList.add("active")})})})(),(function(){injectModal("arr-setup-modal",`<div id="arr-setup-modal" class="weather-modal">
</div>`);const b=document.getElementById("snapshot-modal"),C=document.getElementById("snapshot-btn"),j=document.getElementById("snapshot-close"),k=document.getElementById("snapshot-container-select"),z=document.getElementById("snapshot-details"),P=document.getElementById("snapshot-create-btn"),H=document.getElementById("snapshot-create-status");let A=null;async function x(){try{const u=await(await fetch("/api/v1/containers")).json();if(!u.success||!u.containers)return;k.innerHTML='<option value="">-- Select a container --</option>';for(const v of u.containers){const D=document.createElement("option");D.value=v.id,D.textContent=`${v.name||v.id} (${v.image||"unknown"})`,D.dataset.name=v.name,D.dataset.image=v.image,D.dataset.status=v.status,D.dataset.created=v.created,k.appendChild(D)}}catch($){console.error("Failed to load containers:",$)}}function B($){if(!$||!$.value){z.style.display="none",A=null;return}A=$.value,document.getElementById("snapshot-image").textContent=$.dataset.image||"-",document.getElementById("snapshot-status").textContent=$.dataset.status||"-",document.getElementById("snapshot-created").textContent=$.dataset.created?new Date($.dataset.created*1e3).toLocaleString():"-",document.getElementById("snapshot-id").textContent=$.value.substring(0,12),z.style.display=""}async function w(){if(!A){H.textContent="Please select a container first",H.style.color="var(--bad-fg)";return}const $=document.getElementById("snapshot-name").value.trim();if(!$){H.textContent="Please enter a snapshot name",H.style.color="var(--bad-fg)";return}const u=document.getElementById("snapshot-leave-running").checked;P.disabled=!0,P.textContent="Creating...",H.textContent="";try{const D=await(await fetch(`/api/v1/containers/${encodeURIComponent(A)}/checkpoint`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({name:$,leaveRunning:u})})).json();D.success?(H.textContent=`\u2713 Snapshot "${$}" created successfully`,H.style.color="var(--ok-fg)",document.getElementById("snapshot-name").value=""):(H.textContent=`\u2717 Failed: ${D.error||"Unknown error"}`,H.style.color="var(--bad-fg)")}catch(v){H.textContent=`\u2717 Error: ${v.message}`,H.style.color="var(--bad-fg)"}finally{P.disabled=!1,P.textContent="\u{1F4BE} Create Snapshot"}}function M(){b.classList.add("show"),x()}function L(){b.classList.remove("show"),z.style.display="none",A=null,k.selectedIndex=0}C?.addEventListener("click",M),j?.addEventListener("click",L),wireModal(b,j),k?.addEventListener("change",$=>{const u=k.options[k.selectedIndex];B(u)}),P?.addEventListener("click",w),b?.querySelectorAll(".panel-tab").forEach($=>{$.addEventListener("click",()=>{b.querySelectorAll(".panel-tab").forEach(u=>u.classList.remove("active")),b.querySelectorAll(".panel-section").forEach(u=>u.classList.remove("active")),$.classList.add("active"),b.querySelector(`#${$.dataset.panel}`).classList.add("active")})})})(),(function(){injectModal("arr-setup-modal",`<div id="arr-setup-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 600px; max-width: 720px;">
<h3>\u{1F3AC} Smart Arr Connect</h3>
<p style="color: var(--muted); margin: 0 0 16px; font-size: 0.9rem;">
@@ -831,19 +831,19 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="arr-setup-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("arr-setup-modal"),B=document.getElementById("arr-setup-btn"),j=document.getElementById("arr-setup-cancel"),b=document.getElementById("smart-connect-btn"),D=document.getElementById("smart-phase-detect"),A=document.getElementById("smart-phase-credentials"),P=document.getElementById("smart-phase-progress"),R=document.getElementById("smart-phase-results"),k=document.getElementById("smart-detect-results"),M=document.getElementById("smart-credential-inputs"),E=document.getElementById("smart-progress-steps"),z=document.getElementById("smart-results-content"),C=document.getElementById("smart-plex-libraries"),N=document.getElementById("smart-retry-btn");let x=null;const I={plex:"\u{1F3AC}",radarr:"\u{1F3AC}",sonarr:"\u{1F4FA}",prowlarr:"\u{1F50D}",seerr:"\u{1F4CB}"},H={plex:"Plex",radarr:"Radarr (Movies)",sonarr:"Sonarr (TV)",prowlarr:"Prowlarr (Indexers)",seerr:"Seerr"};function m(y){D.style.display=y==="detect"?"block":"none",A.style.display=y==="credentials"?"block":"none",P.style.display=y==="progress"?"block":"none",R.style.display=y==="results"?"block":"none"}function L(y){const w={connected:{bg:"var(--ok-fg)",icon:"&#10003;",text:"Connected"},needs_key:{bg:"#f39c12",icon:"&#128273;",text:"Needs API Key"},not_found:{bg:"var(--muted)",icon:"&mdash;",text:"Not Found"},error:{bg:"var(--bad-fg)",icon:"&#10007;",text:"Error"}},s=w[y]||w.not_found;return`<span style="display: inline-flex; align-items: center; gap: 4px; padding: 2px 8px; border-radius: 4px; font-size: 0.75rem; background: color-mix(in srgb, ${s.bg} 20%, transparent); color: ${s.bg};">${s.icon} ${s.text}</span>`}async function T(){m("detect"),k.style.display="none";try{if(x=await(await fetch("/api/v1/arr/smart-detect")).json(),!x.success){k.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Detection failed: ${escapeHtml(x.error)}</div>`,k.style.display="block";return}let w='<div style="display: flex; flex-direction: column; gap: 8px;">';for(const[p,l]of Object.entries(x.services)){const v=I[p]||"\u{1F4E6}",c=H[p]||p,t=l.source?`<span style="font-size: 0.7rem; color: var(--muted); padding: 1px 6px; background: var(--card-bg); border-radius: 3px;">${escapeHtml(l.source)}</span>`:"",e=l.version?`<span style="font-size: 0.7rem; color: var(--muted);">v${escapeHtml(l.version)}</span>`:"",a=(l.hasApiKey||l.hasToken)&&l.status==="connected"?'<span style="font-size: 0.7rem; color: var(--ok-fg);">Key saved</span>':"";w+=`<div style="display: flex; align-items: center; gap: 10px; padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<span style="font-size: 1.1rem;">${v}</span>
</div>`);const b=document.getElementById("arr-setup-modal"),C=document.getElementById("arr-setup-btn"),j=document.getElementById("arr-setup-cancel"),k=document.getElementById("smart-connect-btn"),z=document.getElementById("smart-phase-detect"),P=document.getElementById("smart-phase-credentials"),H=document.getElementById("smart-phase-progress"),A=document.getElementById("smart-phase-results"),x=document.getElementById("smart-detect-results"),B=document.getElementById("smart-credential-inputs"),w=document.getElementById("smart-progress-steps"),M=document.getElementById("smart-results-content"),L=document.getElementById("smart-plex-libraries"),$=document.getElementById("smart-retry-btn");let u=null;const v={plex:"\u{1F3AC}",radarr:"\u{1F3AC}",sonarr:"\u{1F4FA}",prowlarr:"\u{1F50D}",seerr:"\u{1F4CB}"},D={plex:"Plex",radarr:"Radarr (Movies)",sonarr:"Sonarr (TV)",prowlarr:"Prowlarr (Indexers)",seerr:"Seerr"};function I(f){z.style.display=f==="detect"?"block":"none",P.style.display=f==="credentials"?"block":"none",H.style.display=f==="progress"?"block":"none",A.style.display=f==="results"?"block":"none"}function R(f){const E={connected:{bg:"var(--ok-fg)",icon:"&#10003;",text:"Connected"},needs_key:{bg:"#f39c12",icon:"&#128273;",text:"Needs API Key"},not_found:{bg:"var(--muted)",icon:"&mdash;",text:"Not Found"},error:{bg:"var(--bad-fg)",icon:"&#10007;",text:"Error"}},s=E[f]||E.not_found;return`<span style="display: inline-flex; align-items: center; gap: 4px; padding: 2px 8px; border-radius: 4px; font-size: 0.75rem; background: color-mix(in srgb, ${s.bg} 20%, transparent); color: ${s.bg};">${s.icon} ${s.text}</span>`}async function N(){I("detect"),x.style.display="none";try{if(u=await(await fetch("/api/v1/arr/smart-detect")).json(),!u.success){x.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Detection failed: ${escapeHtml(u.error)}</div>`,x.style.display="block";return}let E='<div style="display: flex; flex-direction: column; gap: 8px;">';for(const[p,l]of Object.entries(u.services)){const g=v[p]||"\u{1F4E6}",c=D[p]||p,t=l.source?`<span style="font-size: 0.7rem; color: var(--muted); padding: 1px 6px; background: var(--card-bg); border-radius: 3px;">${escapeHtml(l.source)}</span>`:"",e=l.version?`<span style="font-size: 0.7rem; color: var(--muted);">v${escapeHtml(l.version)}</span>`:"",a=(l.hasApiKey||l.hasToken)&&l.status==="connected"?'<span style="font-size: 0.7rem; color: var(--ok-fg);">Key saved</span>':"";E+=`<div style="display: flex; align-items: center; gap: 10px; padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<span style="font-size: 1.1rem;">${g}</span>
<div style="flex: 1;">
<div style="font-weight: 500; font-size: 0.9rem;">${c}</div>
<div style="display: flex; gap: 6px; align-items: center; flex-wrap: wrap;">
${t} ${e} ${a}
</div>
</div>
${L(l.status)}
</div>`}w+="</div>";const s=x.summary;w+=`<div style="margin-top: 12px; padding: 10px; background: color-mix(in srgb, var(--accent) 8%, transparent); border-radius: 8px; font-size: 0.85rem;">
${R(l.status)}
</div>`}E+="</div>";const s=u.summary;E+=`<div style="margin-top: 12px; padding: 10px; background: color-mix(in srgb, var(--accent) 8%, transparent); border-radius: 8px; font-size: 0.85rem;">
${escapeHtml(String(s.fullyConnected))}/${escapeHtml(String(s.totalDetected+(5-s.totalDetected)))} services detected &middot;
${escapeHtml(String(s.fullyConnected))} connected${s.needsApiKey>0?` &middot; <strong>${escapeHtml(String(s.needsApiKey))} needs API key</strong>`:""}
</div>`,k.innerHTML=w,k.style.display="block",O(x),setTimeout(()=>{m("credentials")},800)}catch(y){k.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Error: ${escapeHtml(y.message)}</div>`,k.style.display="block"}}function O(y){let w="";const s=y.services,p=["radarr","sonarr","prowlarr"];for(const c of p){const t=s[c];if(!t||t.status==="not_found"&&!t.url)continue;const e=I[c],a=H[c],o=t.status==="connected";w+=`<div style="margin-bottom: 10px; padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${o?"var(--ok-fg)":"var(--border)"};">
</div>`,x.innerHTML=E,x.style.display="block",O(u),setTimeout(()=>{I("credentials")},800)}catch(f){x.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Error: ${escapeHtml(f.message)}</div>`,x.style.display="block"}}function O(f){let E="";const s=f.services,p=["radarr","sonarr","prowlarr"];for(const c of p){const t=s[c];if(!t||t.status==="not_found"&&!t.url)continue;const e=v[c],a=D[c],o=t.status==="connected";E+=`<div style="margin-bottom: 10px; padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${o?"var(--ok-fg)":"var(--border)"};">
<div style="display: flex; align-items: center; gap: 8px; margin-bottom: 8px;">
<span style="font-size: 1.1rem;">${e}</span>
<span style="font-weight: 500;">${a}</span>
@@ -864,40 +864,40 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
</div>
</div>
<button onclick="smartTestConnection('${c}')" style="margin-top: 8px; padding: 4px 12px; font-size: 0.75rem; cursor: pointer;">Test</button>
</div>`}const l=s.plex;if(l){const c=l.status==="connected";w+=`<div style="padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${c?"var(--ok-fg)":"var(--border)"}; margin-bottom: 10px;">
</div>`}const l=s.plex;if(l){const c=l.status==="connected";E+=`<div style="padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${c?"var(--ok-fg)":"var(--border)"}; margin-bottom: 10px;">
<div style="display: flex; align-items: center; gap: 8px;">
<span style="font-size: 1.1rem;">\u{1F3AC}</span>
<span style="font-weight: 500;">Plex</span>
${L(l.status)}
${R(l.status)}
<span style="margin-left: auto; font-size: 0.75rem; color: var(--muted);">${escapeHtml(l.source||"")}</span>
</div>
</div>`}const v=s.seerr;if(v){const c=v.status==="connected";let t="";if(v.configuredServices){const e=v.configuredServices;t=`<div style="font-size: 0.75rem; color: var(--muted); margin-top: 4px;">
</div>`}const g=s.seerr;if(g){const c=g.status==="connected";let t="";if(g.configuredServices){const e=g.configuredServices;t=`<div style="font-size: 0.75rem; color: var(--muted); margin-top: 4px;">
Configured: ${e.radarr?"&#10003; Radarr":"&#10007; Radarr"} &middot;
${e.sonarr?"&#10003; Sonarr":"&#10007; Sonarr"} &middot;
${e.plex?"&#10003; Plex":"&#10007; Plex"}
</div>`}w+=`<div style="padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${c?"var(--ok-fg)":"var(--border)"};">
</div>`}E+=`<div style="padding: 10px 12px; background: var(--card-base); border-radius: 8px; border: 1px solid ${c?"var(--ok-fg)":"var(--border)"};">
<div style="display: flex; align-items: center; gap: 8px;">
<span style="font-size: 1.1rem;">\u{1F4CB}</span>
<span style="font-weight: 500;">Seerr</span>
${L(v.status)}
${R(g.status)}
</div>
${t}
</div>`}M.innerHTML=w}window.smartTestConnection=async function(y){const w=document.getElementById(`smart-${y}-url`),s=document.getElementById(`smart-${y}-key`),p=document.getElementById(`smart-${y}-status`),l=w?.value.trim(),v=s?.value.trim();if(!l||!v){p.innerHTML='<span style="color: var(--bad-fg);">Enter URL and API key</span>';return}p.innerHTML='<span class="brand-spinner"></span>';try{const t=await(await secureFetch("/api/v1/arr/test-connection",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({service:y,url:l,apiKey:v})})).json();t.success?p.innerHTML=`<span style="color: var(--ok-fg);">&#10003; ${escapeHtml(t.appName||"Connected")} v${escapeHtml(t.version||"")}</span>`:p.innerHTML=`<span style="color: var(--bad-fg);">&#10007; ${escapeHtml(t.error)}</span>`}catch(c){p.innerHTML=`<span style="color: var(--bad-fg);">&#10007; ${escapeHtml(c.message)}</span>`}};async function u(){m("progress"),E.innerHTML='<div style="text-align: center; padding: 20px;"><span class="brand-spinner"></span><div style="color: var(--muted); margin-top: 8px;">Connecting services...</div></div>';const y={};for(const s of["radarr","sonarr","prowlarr"]){const p=document.getElementById(`smart-${s}-url`)?.value.trim(),l=document.getElementById(`smart-${s}-key`)?.value.trim();l&&p?y[s]={apiKey:l,url:p}:l&&(y[s]={apiKey:l})}const w={services:Object.keys(y).length>0?y:void 0,configurePlex:document.getElementById("smart-opt-plex")?.checked,configureProwlarr:document.getElementById("smart-opt-prowlarr")?.checked,configureSeerr:document.getElementById("smart-opt-seerr")?.checked,saveCredentials:document.getElementById("smart-opt-save")?.checked};try{const p=await(await secureFetch("/api/v1/arr/smart-connect",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(w)})).json();let l="";for(const v of p.steps||[]){const c=v.status==="success"?'<span style="color: var(--ok-fg);">&#10003;</span>':'<span style="color: var(--bad-fg);">&#10007;</span>',t=v.status==="success"?"var(--muted)":"var(--bad-fg)";l+=`<div style="display: flex; align-items: center; gap: 8px; padding: 6px 10px; background: var(--card-base); border-radius: 6px; font-size: 0.85rem;">
</div>`}B.innerHTML=E}window.smartTestConnection=async function(f){const E=document.getElementById(`smart-${f}-url`),s=document.getElementById(`smart-${f}-key`),p=document.getElementById(`smart-${f}-status`),l=E?.value.trim(),g=s?.value.trim();if(!l||!g){p.innerHTML='<span style="color: var(--bad-fg);">Enter URL and API key</span>';return}p.innerHTML='<span class="brand-spinner"></span>';try{const t=await(await secureFetch("/api/v1/arr/test-connection",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({service:f,url:l,apiKey:g})})).json();t.success?p.innerHTML=`<span style="color: var(--ok-fg);">&#10003; ${escapeHtml(t.appName||"Connected")} v${escapeHtml(t.version||"")}</span>`:p.innerHTML=`<span style="color: var(--bad-fg);">&#10007; ${escapeHtml(t.error)}</span>`}catch(c){p.innerHTML=`<span style="color: var(--bad-fg);">&#10007; ${escapeHtml(c.message)}</span>`}};async function m(){I("progress"),w.innerHTML='<div style="text-align: center; padding: 20px;"><span class="brand-spinner"></span><div style="color: var(--muted); margin-top: 8px;">Connecting services...</div></div>';const f={};for(const s of["radarr","sonarr","prowlarr"]){const p=document.getElementById(`smart-${s}-url`)?.value.trim(),l=document.getElementById(`smart-${s}-key`)?.value.trim();l&&p?f[s]={apiKey:l,url:p}:l&&(f[s]={apiKey:l})}const E={services:Object.keys(f).length>0?f:void 0,configurePlex:document.getElementById("smart-opt-plex")?.checked,configureProwlarr:document.getElementById("smart-opt-prowlarr")?.checked,configureSeerr:document.getElementById("smart-opt-seerr")?.checked,saveCredentials:document.getElementById("smart-opt-save")?.checked};try{const p=await(await secureFetch("/api/v1/arr/smart-connect",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(E)})).json();let l="";for(const g of p.steps||[]){const c=g.status==="success"?'<span style="color: var(--ok-fg);">&#10003;</span>':'<span style="color: var(--bad-fg);">&#10007;</span>',t=g.status==="success"?"var(--muted)":"var(--bad-fg)";l+=`<div style="display: flex; align-items: center; gap: 8px; padding: 6px 10px; background: var(--card-base); border-radius: 6px; font-size: 0.85rem;">
${c}
<span>${escapeHtml(v.step)}</span>
<span style="margin-left: auto; font-size: 0.75rem; color: ${t};">${escapeHtml(v.details||"")}</span>
</div>`}E.innerHTML=l,setTimeout(()=>g(p),500)}catch(s){E.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Connection error: ${escapeHtml(s.message)}</div>`}}function g(y){m("results");const w=y.summary||{},s=w.failed===0&&w.succeeded>0,p=s?"var(--ok-fg)":"#f39c12",l=s?"&#10003;":"&#9888;",v=s?"All Connected!":`${escapeHtml(String(w.succeeded))}/${escapeHtml(String(w.totalSteps))} Steps Succeeded`;let c=`<div style="text-align: center; padding: 16px; background: color-mix(in srgb, ${p} 12%, transparent); border-radius: 10px; border: 1px solid ${p}; margin-bottom: 12px;">
<span>${escapeHtml(g.step)}</span>
<span style="margin-left: auto; font-size: 0.75rem; color: ${t};">${escapeHtml(g.details||"")}</span>
</div>`}w.innerHTML=l,setTimeout(()=>y(p),500)}catch(s){w.innerHTML=`<div style="padding: 12px; color: var(--bad-fg);">Connection error: ${escapeHtml(s.message)}</div>`}}function y(f){I("results");const E=f.summary||{},s=E.failed===0&&E.succeeded>0,p=s?"var(--ok-fg)":"#f39c12",l=s?"&#10003;":"&#9888;",g=s?"All Connected!":`${escapeHtml(String(E.succeeded))}/${escapeHtml(String(E.totalSteps))} Steps Succeeded`;let c=`<div style="text-align: center; padding: 16px; background: color-mix(in srgb, ${p} 12%, transparent); border-radius: 10px; border: 1px solid ${p}; margin-bottom: 12px;">
<div style="font-size: 1.5rem; color: ${p};">${l}</div>
<div style="font-size: 1.1rem; font-weight: 600; color: ${p};">${v}</div>
<div style="font-size: 0.85rem; color: var(--muted); margin-top: 4px;">${escapeHtml(String(w.succeeded))} succeeded, ${escapeHtml(String(w.failed))} failed</div>
</div>`;c+='<div style="display: flex; flex-direction: column; gap: 4px;">';for(const t of y.steps||[]){const e=t.status==="success"?'<span style="color: var(--ok-fg);">&#10003;</span>':'<span style="color: var(--bad-fg);">&#10007;</span>';c+=`<div style="display: flex; align-items: center; gap: 8px; padding: 4px 8px; font-size: 0.8rem;">
<div style="font-size: 1.1rem; font-weight: 600; color: ${p};">${g}</div>
<div style="font-size: 0.85rem; color: var(--muted); margin-top: 4px;">${escapeHtml(String(E.succeeded))} succeeded, ${escapeHtml(String(E.failed))} failed</div>
</div>`;c+='<div style="display: flex; flex-direction: column; gap: 4px;">';for(const t of f.steps||[]){const e=t.status==="success"?'<span style="color: var(--ok-fg);">&#10003;</span>':'<span style="color: var(--bad-fg);">&#10007;</span>';c+=`<div style="display: flex; align-items: center; gap: 8px; padding: 4px 8px; font-size: 0.8rem;">
${e} ${escapeHtml(t.step)} <span style="margin-left: auto; color: var(--muted); font-size: 0.75rem;">${escapeHtml(t.details||"")}</span>
</div>`}c+="</div>",z.innerHTML=c,N.style.display=w.failed>0?"block":"none",y.steps?.some(t=>t.step.includes("Plex")&&t.status==="success")&&S()}async function S(){try{const w=await(await fetch("/api/v1/plex/libraries")).json();if(w.success&&w.libraries?.length>0){let s=`<div style="padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<h4 style="margin: 0 0 8px; font-size: 0.85rem; color: var(--accent);">\u{1F3AC} ${escapeHtml(w.serverName)} Libraries</h4>
<div style="display: flex; flex-wrap: wrap; gap: 8px;">`;for(const p of w.libraries){const l=p.type==="movie"?"\u{1F3AC}":p.type==="show"?"\u{1F4FA}":"\u{1F3B5}";s+=`<div style="padding: 8px 12px; background: var(--card-bg); border-radius: 6px; font-size: 0.85rem;">
</div>`}c+="</div>",M.innerHTML=c,$.style.display=E.failed>0?"block":"none",f.steps?.some(t=>t.step.includes("Plex")&&t.status==="success")&&S()}async function S(){try{const E=await(await fetch("/api/v1/plex/libraries")).json();if(E.success&&E.libraries?.length>0){let s=`<div style="padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<h4 style="margin: 0 0 8px; font-size: 0.85rem; color: var(--accent);">\u{1F3AC} ${escapeHtml(E.serverName)} Libraries</h4>
<div style="display: flex; flex-wrap: wrap; gap: 8px;">`;for(const p of E.libraries){const l=p.type==="movie"?"\u{1F3AC}":p.type==="show"?"\u{1F4FA}":"\u{1F3B5}";s+=`<div style="padding: 8px 12px; background: var(--card-bg); border-radius: 6px; font-size: 0.85rem;">
${l} <strong>${escapeHtml(p.title)}</strong>
<span style="color: var(--muted); font-size: 0.75rem;">${escapeHtml(String(p.count))} items</span>
</div>`}s+="</div></div>",C.innerHTML=s,C.style.display="block"}}catch{}}B?.addEventListener("click",()=>{f.classList.add("show"),C.style.display="none",T()}),wireModal(f,j),b?.addEventListener("click",u),N?.addEventListener("click",u)})(),(function(){const f=new ErrorHandler;injectModal("notifications-modal",`<div id="notifications-modal" class="weather-modal">
</div>`}s+="</div></div>",L.innerHTML=s,L.style.display="block"}}catch{}}C?.addEventListener("click",()=>{b.classList.add("show"),L.style.display="none",N()}),wireModal(b,j),k?.addEventListener("click",m),$?.addEventListener("click",m)})(),(function(){const b=new ErrorHandler;injectModal("notifications-modal",`<div id="notifications-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 550px; max-width: 650px;">
<h3>\u{1F514} Notification Settings</h3>
@@ -1109,15 +1109,15 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="notifications-save" class="btn-accent">Save Settings</button>
</div>
</div>
</div>`);const B=document.getElementById("notifications-modal"),j=document.getElementById("manage-notifications"),b=document.getElementById("notifications-save"),D=document.getElementById("notifications-cancel");["discord","telegram","ntfy","email"].forEach(C=>{const N=document.getElementById(`${C}-enabled`),x=document.getElementById(`${C}-config`);N?.addEventListener("change",()=>{x.style.display=N.checked?"block":"none"})});const A=document.getElementById("health-check-enabled"),P=document.getElementById("health-check-config");A?.addEventListener("change",()=>{P.style.opacity=A.checked?"1":"0.5"});async function R(){try{const N=await(await fetch("/api/v1/notifications/config")).json();if(N.success){const x=N.config;document.getElementById("notifications-enabled").checked=x.enabled,document.getElementById("discord-enabled").checked=x.providers?.discord?.enabled||!1,document.getElementById("telegram-enabled").checked=x.providers?.telegram?.enabled||!1,document.getElementById("ntfy-enabled").checked=x.providers?.ntfy?.enabled||!1,document.getElementById("email-enabled").checked=x.providers?.email?.enabled||!1,document.getElementById("discord-config").style.display=x.providers?.discord?.enabled?"block":"none",document.getElementById("telegram-config").style.display=x.providers?.telegram?.enabled?"block":"none",document.getElementById("ntfy-config").style.display=x.providers?.ntfy?.enabled?"block":"none",document.getElementById("email-config").style.display=x.providers?.email?.enabled?"block":"none",x.providers?.ntfy?.serverUrl&&(document.getElementById("ntfy-server").value=x.providers.ntfy.serverUrl),x.providers?.email?.host&&(document.getElementById("email-host").value=x.providers.email.host),x.providers?.email?.from&&(document.getElementById("email-from").value=x.providers.email.from),x.providers?.email?.to&&(document.getElementById("email-to").value=x.providers.email.to),x.providers?.email?.port&&(document.getElementById("email-port").value=x.providers.email.port),x.providers?.email?.secure!==void 0&&(document.getElementById("email-secure").checked=x.providers.email.secure===!0),x.providers?.email?.username&&(document.getElementById("email-user").value=x.providers.email.username);const I=document.getElementById("email-pass");x.providers?.email?.hasPassword?(I.value="",I.placeholder="saved \u2014 leave blank to keep"):I.placeholder="app password",document.getElementById("health-check-enabled").checked=x.healthCheck?.enabled||!1,x.healthCheck?.intervalMinutes&&(document.getElementById("health-check-interval").value=x.healthCheck.intervalMinutes),x.healthCheck?.lastCheck&&(document.getElementById("health-check-status").textContent=`Last check: ${new Date(x.healthCheck.lastCheck).toLocaleString()}`),document.getElementById("event-container-down").checked=x.events?.["container-down"]!==!1,document.getElementById("event-container-up").checked=x.events?.["container-up"]===!0,document.getElementById("event-deploy-success").checked=x.events?.["deploy-success"]!==!1,document.getElementById("event-deploy-failed").checked=x.events?.["deploy-failed"]!==!1,document.getElementById("event-ssl-cert-expiry").checked=x.events?.["ssl-cert-expiry"]!==!1,document.getElementById("event-dns-propagation").checked=x.events?.["dns-propagation"]!==!1,document.getElementById("event-drift-detected").checked=x.events?.["drift-detected"]!==!1,document.getElementById("event-dependency-restart").checked=x.events?.["dependency-restart"]!==!1,document.getElementById("event-recipe-removed").checked=x.events?.["recipe-removed"]!==!1,document.getElementById("event-workflow").checked=x.events?.workflow!==!1,document.getElementById("event-backup-complete").checked=x.events?.["backup-complete"]!==!1,document.getElementById("event-backup-failed").checked=x.events?.["backup-failed"]!==!1,document.getElementById("event-update-available").checked=x.events?.["update-available"]!==!1,document.getElementById("event-resource-alert").checked=x.events?.alert!==!1}}catch(C){f.logError("[Notifications] Load Config",C,{function:"loadConfig"})}}async function k(){try{const N=await(await fetch("/api/v1/notifications/history?limit=10")).json(),x=document.getElementById("notification-history");N.success&&N.history?.length>0?x.innerHTML=N.history.map(I=>{const H=new Date(I.timestamp).toLocaleString();return`
</div>`);const C=document.getElementById("notifications-modal"),j=document.getElementById("manage-notifications"),k=document.getElementById("notifications-save"),z=document.getElementById("notifications-cancel");["discord","telegram","ntfy","email"].forEach(L=>{const $=document.getElementById(`${L}-enabled`),u=document.getElementById(`${L}-config`);$?.addEventListener("change",()=>{u.style.display=$.checked?"block":"none"})});const P=document.getElementById("health-check-enabled"),H=document.getElementById("health-check-config");P?.addEventListener("change",()=>{H.style.opacity=P.checked?"1":"0.5"});async function A(){try{const $=await(await fetch("/api/v1/notifications/config")).json();if($.success){const u=$.config;document.getElementById("notifications-enabled").checked=u.enabled,document.getElementById("discord-enabled").checked=u.providers?.discord?.enabled||!1,document.getElementById("telegram-enabled").checked=u.providers?.telegram?.enabled||!1,document.getElementById("ntfy-enabled").checked=u.providers?.ntfy?.enabled||!1,document.getElementById("email-enabled").checked=u.providers?.email?.enabled||!1,document.getElementById("discord-config").style.display=u.providers?.discord?.enabled?"block":"none",document.getElementById("telegram-config").style.display=u.providers?.telegram?.enabled?"block":"none",document.getElementById("ntfy-config").style.display=u.providers?.ntfy?.enabled?"block":"none",document.getElementById("email-config").style.display=u.providers?.email?.enabled?"block":"none",u.providers?.ntfy?.serverUrl&&(document.getElementById("ntfy-server").value=u.providers.ntfy.serverUrl),u.providers?.email?.host&&(document.getElementById("email-host").value=u.providers.email.host),u.providers?.email?.from&&(document.getElementById("email-from").value=u.providers.email.from),u.providers?.email?.to&&(document.getElementById("email-to").value=u.providers.email.to),u.providers?.email?.port&&(document.getElementById("email-port").value=u.providers.email.port),u.providers?.email?.secure!==void 0&&(document.getElementById("email-secure").checked=u.providers.email.secure===!0),u.providers?.email?.username&&(document.getElementById("email-user").value=u.providers.email.username);const v=document.getElementById("email-pass");u.providers?.email?.hasPassword?(v.value="",v.placeholder="saved \u2014 leave blank to keep"):v.placeholder="app password",document.getElementById("health-check-enabled").checked=u.healthCheck?.enabled||!1,u.healthCheck?.intervalMinutes&&(document.getElementById("health-check-interval").value=u.healthCheck.intervalMinutes),u.healthCheck?.lastCheck&&(document.getElementById("health-check-status").textContent=`Last check: ${new Date(u.healthCheck.lastCheck).toLocaleString()}`),document.getElementById("event-container-down").checked=u.events?.["container-down"]!==!1,document.getElementById("event-container-up").checked=u.events?.["container-up"]===!0,document.getElementById("event-deploy-success").checked=u.events?.["deploy-success"]!==!1,document.getElementById("event-deploy-failed").checked=u.events?.["deploy-failed"]!==!1,document.getElementById("event-ssl-cert-expiry").checked=u.events?.["ssl-cert-expiry"]!==!1,document.getElementById("event-dns-propagation").checked=u.events?.["dns-propagation"]!==!1,document.getElementById("event-drift-detected").checked=u.events?.["drift-detected"]!==!1,document.getElementById("event-dependency-restart").checked=u.events?.["dependency-restart"]!==!1,document.getElementById("event-recipe-removed").checked=u.events?.["recipe-removed"]!==!1,document.getElementById("event-workflow").checked=u.events?.workflow!==!1,document.getElementById("event-backup-complete").checked=u.events?.["backup-complete"]!==!1,document.getElementById("event-backup-failed").checked=u.events?.["backup-failed"]!==!1,document.getElementById("event-update-available").checked=u.events?.["update-available"]!==!1,document.getElementById("event-resource-alert").checked=u.events?.alert!==!1}}catch(L){b.logError("[Notifications] Load Config",L,{function:"loadConfig"})}}async function x(){try{const $=await(await fetch("/api/v1/notifications/history?limit=10")).json(),u=document.getElementById("notification-history");$.success&&$.history?.length>0?u.innerHTML=$.history.map(v=>{const D=new Date(v.timestamp).toLocaleString();return`
<div style="padding: 6px 8px; border-bottom: 1px solid var(--border); display: flex; gap: 8px; align-items: flex-start;">
<span style="color: ${{success:"var(--ok-fg)",error:"var(--bad-fg)",warning:"#f39c12",info:"var(--accent)"}[I.type]||"var(--muted)"}">${I.type==="success"?"\u2713":I.type==="error"?"\u2717":"\u2139"}</span>
<span style="color: ${{success:"var(--ok-fg)",error:"var(--bad-fg)",warning:"#f39c12",info:"var(--accent)"}[v.type]||"var(--muted)"}">${v.type==="success"?"\u2713":v.type==="error"?"\u2717":"\u2139"}</span>
<div style="flex: 1; min-width: 0;">
<div style="font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis;">${escapeHtml(I.title)}</div>
<div style="font-size: 0.7rem; color: var(--muted);">${H}</div>
<div style="font-weight: 500; white-space: nowrap; overflow: hidden; text-overflow: ellipsis;">${escapeHtml(v.title)}</div>
<div style="font-size: 0.7rem; color: var(--muted);">${D}</div>
</div>
</div>
`}).join(""):x.innerHTML='<div style="color: var(--muted); text-align: center; padding: 20px;">No notifications yet</div>'}catch(C){f.logError("[Notifications] Load History",C,{function:"loadHistory"})}}async function M(){try{const C={enabled:document.getElementById("notifications-enabled").checked,providers:{discord:{enabled:document.getElementById("discord-enabled").checked,webhookUrl:document.getElementById("discord-webhook").value.trim()},telegram:{enabled:document.getElementById("telegram-enabled").checked,botToken:document.getElementById("telegram-bot-token").value.trim(),chatId:document.getElementById("telegram-chat-id").value.trim()},ntfy:{enabled:document.getElementById("ntfy-enabled").checked,serverUrl:document.getElementById("ntfy-server").value.trim()||"https://ntfy.sh",topic:document.getElementById("ntfy-topic").value.trim()},email:{enabled:document.getElementById("email-enabled").checked,host:document.getElementById("email-host").value.trim(),port:parseInt(document.getElementById("email-port").value)||587,secure:document.getElementById("email-secure").checked,username:document.getElementById("email-user").value.trim(),password:document.getElementById("email-pass").value.trim(),from:document.getElementById("email-from").value.trim(),to:document.getElementById("email-to").value.trim()}},events:{"container-down":document.getElementById("event-container-down").checked,"container-up":document.getElementById("event-container-up").checked,"deploy-success":document.getElementById("event-deploy-success").checked,"deploy-failed":document.getElementById("event-deploy-failed").checked,"ssl-cert-expiry":document.getElementById("event-ssl-cert-expiry").checked,"dns-propagation":document.getElementById("event-dns-propagation").checked,"drift-detected":document.getElementById("event-drift-detected").checked,"dependency-restart":document.getElementById("event-dependency-restart").checked,"recipe-removed":document.getElementById("event-recipe-removed").checked,workflow:document.getElementById("event-workflow").checked,"backup-complete":document.getElementById("event-backup-complete").checked,"backup-failed":document.getElementById("event-backup-failed").checked,"update-available":document.getElementById("event-update-available").checked,alert:document.getElementById("event-resource-alert").checked},healthCheck:{enabled:document.getElementById("health-check-enabled").checked,intervalMinutes:parseInt(document.getElementById("health-check-interval").value)||5}},x=await(await secureFetch("/api/v1/notifications/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(C)})).json();x.success?(showNotification("Notification settings saved","success",3e3),B.classList.remove("show")):showNotification(`Failed to save: ${x.error}`,"error",3e3)}catch(C){showNotification(`Error: ${C.message}`,"error",3e3)}}async function E(C){try{const x=await(await secureFetch("/api/v1/notifications/test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({provider:C})})).json();x.success?showNotification(`Test ${C} notification sent!`,"success",3e3):showNotification(`Test failed: ${x.error}`,"error",3e3)}catch(N){showNotification(`Error: ${N.message}`,"error",3e3)}}document.getElementById("discord-test")?.addEventListener("click",()=>E("discord")),document.getElementById("telegram-test")?.addEventListener("click",()=>E("telegram")),document.getElementById("ntfy-test")?.addEventListener("click",()=>E("ntfy")),document.getElementById("email-test")?.addEventListener("click",()=>E("email")),document.getElementById("health-check-now")?.addEventListener("click",async()=>{try{const N=await(await secureFetch("/api/v1/notifications/health-check",{method:"POST"})).json();N.success&&(document.getElementById("health-check-status").textContent=`Last check: ${new Date(N.lastCheck).toLocaleString()} (${N.containersMonitored} containers)`,showNotification("Health check completed","success",2e3))}catch(C){showNotification(`Error: ${C.message}`,"error",3e3)}}),j?.addEventListener("click",()=>{B.classList.add("show"),R(),k()}),b?.addEventListener("click",M),document.getElementById("notifications-send-test")?.addEventListener("click",async()=>{const C=document.getElementById("notifications-send-test"),N=C.textContent;C.textContent="Sending...",C.disabled=!0;try{const I=await(await secureFetch("/api/v1/notifications/send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({event:"test",data:{message:"This is a test notification from DashCaddy."},type:"info"})})).json();I.success?(showNotification("Test notification sent!","success",3e3),z()):showNotification(`Test failed: ${I.results?.map(H=>`${H.provider}: ${H.error||"ok"}`).join(", ")}`,"error",5e3)}catch(x){showNotification(`Error: ${x.message}`,"error",3e3)}finally{C.textContent=N,C.disabled=!1}});async function z(){try{const N=await(await fetch("/api/v1/notifications/status")).json();if(N.success&&N.lastSent){ Line truncated
`}).join(""):u.innerHTML='<div style="color: var(--muted); text-align: center; padding: 20px;">No notifications yet</div>'}catch(L){b.logError("[Notifications] Load History",L,{function:"loadHistory"})}}async function B(){try{const L={enabled:document.getElementById("notifications-enabled").checked,providers:{discord:{enabled:document.getElementById("discord-enabled").checked,webhookUrl:document.getElementById("discord-webhook").value.trim()},telegram:{enabled:document.getElementById("telegram-enabled").checked,botToken:document.getElementById("telegram-bot-token").value.trim(),chatId:document.getElementById("telegram-chat-id").value.trim()},ntfy:{enabled:document.getElementById("ntfy-enabled").checked,serverUrl:document.getElementById("ntfy-server").value.trim()||"https://ntfy.sh",topic:document.getElementById("ntfy-topic").value.trim()},email:{enabled:document.getElementById("email-enabled").checked,host:document.getElementById("email-host").value.trim(),port:parseInt(document.getElementById("email-port").value)||587,secure:document.getElementById("email-secure").checked,username:document.getElementById("email-user").value.trim(),password:document.getElementById("email-pass").value.trim(),from:document.getElementById("email-from").value.trim(),to:document.getElementById("email-to").value.trim()}},events:{"container-down":document.getElementById("event-container-down").checked,"container-up":document.getElementById("event-container-up").checked,"deploy-success":document.getElementById("event-deploy-success").checked,"deploy-failed":document.getElementById("event-deploy-failed").checked,"ssl-cert-expiry":document.getElementById("event-ssl-cert-expiry").checked,"dns-propagation":document.getElementById("event-dns-propagation").checked,"drift-detected":document.getElementById("event-drift-detected").checked,"dependency-restart":document.getElementById("event-dependency-restart").checked,"recipe-removed":document.getElementById("event-recipe-removed").checked,workflow:document.getElementById("event-workflow").checked,"backup-complete":document.getElementById("event-backup-complete").checked,"backup-failed":document.getElementById("event-backup-failed").checked,"update-available":document.getElementById("event-update-available").checked,alert:document.getElementById("event-resource-alert").checked},healthCheck:{enabled:document.getElementById("health-check-enabled").checked,intervalMinutes:parseInt(document.getElementById("health-check-interval").value)||5}},u=await(await secureFetch("/api/v1/notifications/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(L)})).json();u.success?(showNotification("Notification settings saved","success",3e3),C.classList.remove("show")):showNotification(`Failed to save: ${u.error}`,"error",3e3)}catch(L){showNotification(`Error: ${L.message}`,"error",3e3)}}async function w(L){try{const u=await(await secureFetch("/api/v1/notifications/test",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({provider:L})})).json();u.success?showNotification(`Test ${L} notification sent!`,"success",3e3):showNotification(`Test failed: ${u.error}`,"error",3e3)}catch($){showNotification(`Error: ${$.message}`,"error",3e3)}}document.getElementById("discord-test")?.addEventListener("click",()=>w("discord")),document.getElementById("telegram-test")?.addEventListener("click",()=>w("telegram")),document.getElementById("ntfy-test")?.addEventListener("click",()=>w("ntfy")),document.getElementById("email-test")?.addEventListener("click",()=>w("email")),document.getElementById("health-check-now")?.addEventListener("click",async()=>{try{const $=await(await secureFetch("/api/v1/notifications/health-check",{method:"POST"})).json();$.success&&(document.getElementById("health-check-status").textContent=`Last check: ${new Date($.lastCheck).toLocaleString()} (${$.containersMonitored} containers)`,showNotification("Health check completed","success",2e3))}catch(L){showNotification(`Error: ${L.message}`,"error",3e3)}}),j?.addEventListener("click",()=>{C.classList.add("show"),A(),x()}),k?.addEventListener("click",B),document.getElementById("notifications-send-test")?.addEventListener("click",async()=>{const L=document.getElementById("notifications-send-test"),$=L.textContent;L.textContent="Sending...",L.disabled=!0;try{const v=await(await secureFetch("/api/v1/notifications/send",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({event:"test",data:{message:"This is a test notification from DashCaddy."},type:"info"})})).json();v.success?(showNotification("Test notification sent!","success",3e3),M()):showNotification(`Test failed: ${v.results?.map(D=>`${D.provider}: ${D.error||"ok"}`).join(", ")}`,"error",5e3)}catch(u){showNotification(`Error: ${u.message}`,"error",3e3)}finally{L.textContent=$,L.disabled=!1}});async function M(){try{const $=await(await fetch("/api/v1/notifications/status")).json();if($.success&&$.lastSent){ Line truncated
<div class="weather-modal-content" style="min-width: 550px; max-width: 650px;">
<h3>\u{1F4BE} Backup & Restore</h3>
<p class="modal-subtitle">
@@ -1223,7 +1223,7 @@ Try refreshing in a moment if you see a certificate error.`,"warning",1e4),!1}};
<button id="backup-cancel">Close</button>
</div>
</div>
</div>`);var A=document.getElementById("backup-modal"),P=document.getElementById("backup-restore-btn"),R=document.getElementById("backup-cancel"),k=document.getElementById("backup-export-btn"),M=document.getElementById("backup-select-file"),E=document.getElementById("backup-file-input"),z=document.getElementById("backup-file-name"),C=document.getElementById("backup-preview"),N=document.getElementById("backup-preview-content"),x=document.getElementById("backup-do-restore-btn"),I=document.getElementById("backup-result"),H=document.getElementById("backup-schedules-container"),m=document.getElementById("backup-history-container"),L=document.getElementById("backup-disk-container"),T=document.getElementById("pointintime-container"),O=null;P?.addEventListener("click",function(){A.classList.add("show"),I&&(I.style.display="none"),C&&(C.style.display="none"),z&&(z.style.display="none"),O=null}),wireModal(A,R),k?.addEventListener("click",async function(){k.disabled=!0,k.innerHTML='<span class="brand-spinner"></span> Exporting...';try{var e=await fetch("/api/v1/backup/export"),a=await e.json();a.browserState=B();var o=new Blob([JSON.stringify(a,null,2)],{type:"application/json"}),i=URL.createObjectURL(o),n=document.createElement("a");n.href=i,n.download="dashcaddy-backup-"+new Date().toISOString().split("T")[0]+".json",document.body.appendChild(n),n.click(),document.body.removeChild(n),URL.revokeObjectURL(i);var r=Object.keys(a.browserState).length,d=a.themes?Object.keys(a.themes).length:0;I.innerHTML="\u2705 Full backup downloaded \u2014 server config + "+r+" browser settings"+(d?" + "+d+" themes":""),I.style.display="block",I.style.background="color-mix(in srgb, var(--ok-fg) 15%, transparent)",I.style.border="1px solid var(--ok-fg)"}catch(h){I.innerHTML="\u274C Export failed: "+escapeHtml(h.message),I.style.display="block",I.style.background="color-mix(in srgb, var(--bad-fg) 15%, transparent)",I.style.border="1px solid var(--bad-fg)"}k.disabled=!1,k.innerHTML="\u2B07\uFE0F Download Full Backup"}),M?.addEventListener("click",function(){E.click()}),E?.addEventListener("change",async function(e){var a=e.target.files[0];if(a){z.textContent="\u{1F4C4} "+a.name,z.style.display="block",I.style.display="none";try{var o=await a.text(),i=JSON.parse(o);if(b(i)){O=i;var n='<div style="margin-bottom: 8px; color: var(--muted); font-size: 0.8rem;">Legacy format (v'+escapeHtml(i.version)+")</div>";n+='<div style="display: flex; flex-wrap: wrap; gap: 6px;">',i.services?.length&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F4CB} '+i.services.length+" services</span>"),i.customApps?.length&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F4E6} '+i.customApps.length+" custom apps</span>"),i.theme&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F3A8} Theme: '+escapeHtml(i.theme)+"</span>"),i.userThemes&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F3A8} '+Object.keys(i.userThemes).length+" custom themes</span>"),n+="</div>",N.innerHTML=n,C.style.display="block";return}var r=await secureFetch("/api/v1/backup/preview",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(i)}),d=await r.json();if(d.success){O=i;var n='<div style="margin-bottom: 8px; color: var(--muted); font-size: 0.8rem;">Exported: '+new Date(i.exportedAt).toLocaleString()+" (v"+escapeHtml(i.version)+")</div>";n+='<div style="margin-bottom: 6px; font-size: 0.75rem; color: var(--muted); text-transform: uppercase; letter-spacing: 0.5px;">Server Config</div>',n+='<div style="display: flex; flex-wrap: wrap; gap: 6px; margin-bottom: 10px;">';for(var h in d.preview.files){var $=d.preview.files[h],U=$.action==="create"?"\u{1F195}":"\u{1F4DD}";n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">'+U+" "+escapeHtml($.description)+"</span>"}n+="</div>",d.preview.serviceCount&&(n+='<div style="font-size: 0.8rem; color: var(--accent); margin-bottom: 6px;">'+d.preview.serviceCount+" services</div>"),d.preview.themeCount&&(n+='<div style="font-size: 0.8rem; color: var(--accent); margin-bottom: 6px;">\u{1F3A8} '+d.preview.themeCount+" custom themes</div>"),d.preview.browserStateCount&&(n+='<div style="margin-top: 6px; font-size: 0.75rem; color: var(--muted); text-transform: uppercase; letter-spacing: 0.5px;">Browser Preferences</div>',n+='<div style="font-size: 0.8rem; color: var(--accent);">\u{1F5A5}\uFE0F '+d.preview.browserStateCount+" saved settings (theme, weather, clock, widgets, etc.)</div>"),N.innerHTML=n,C.style.display="block"}else I.innerHTML="\u26A0\uFE0F Invalid backup file: "+escapeHtml(d.error),I.style.display="block",I.style.background="color-mix(in srgb, #f39c12 15%, transparent)",I.style.border="1px solid #f39c12",C.style.display="none"}catch(_){I.innerHTML="\u274CLine truncated
</div>`);var P=document.getElementById("backup-modal"),H=document.getElementById("backup-restore-btn"),A=document.getElementById("backup-cancel"),x=document.getElementById("backup-export-btn"),B=document.getElementById("backup-select-file"),w=document.getElementById("backup-file-input"),M=document.getElementById("backup-file-name"),L=document.getElementById("backup-preview"),$=document.getElementById("backup-preview-content"),u=document.getElementById("backup-do-restore-btn"),v=document.getElementById("backup-result"),D=document.getElementById("backup-schedules-container"),I=document.getElementById("backup-history-container"),R=document.getElementById("backup-disk-container"),N=document.getElementById("pointintime-container"),O=null;H?.addEventListener("click",function(){P.classList.add("show"),v&&(v.style.display="none"),L&&(L.style.display="none"),M&&(M.style.display="none"),O=null}),wireModal(P,A),x?.addEventListener("click",async function(){x.disabled=!0,x.innerHTML='<span class="brand-spinner"></span> Exporting...';try{var e=await fetch("/api/v1/backup/export"),a=await e.json();a.browserState=C();var o=new Blob([JSON.stringify(a,null,2)],{type:"application/json"}),i=URL.createObjectURL(o),n=document.createElement("a");n.href=i,n.download="dashcaddy-backup-"+new Date().toISOString().split("T")[0]+".json",document.body.appendChild(n),n.click(),document.body.removeChild(n),URL.revokeObjectURL(i);var r=Object.keys(a.browserState).length,d=a.themes?Object.keys(a.themes).length:0;v.innerHTML="\u2705 Full backup downloaded \u2014 server config + "+r+" browser settings"+(d?" + "+d+" themes":""),v.style.display="block",v.style.background="color-mix(in srgb, var(--ok-fg) 15%, transparent)",v.style.border="1px solid var(--ok-fg)"}catch(h){v.innerHTML="\u274C Export failed: "+escapeHtml(h.message),v.style.display="block",v.style.background="color-mix(in srgb, var(--bad-fg) 15%, transparent)",v.style.border="1px solid var(--bad-fg)"}x.disabled=!1,x.innerHTML="\u2B07\uFE0F Download Full Backup"}),B?.addEventListener("click",function(){w.click()}),w?.addEventListener("change",async function(e){var a=e.target.files[0];if(a){M.textContent="\u{1F4C4} "+a.name,M.style.display="block",v.style.display="none";try{var o=await a.text(),i=JSON.parse(o);if(k(i)){O=i;var n='<div style="margin-bottom: 8px; color: var(--muted); font-size: 0.8rem;">Legacy format (v'+escapeHtml(i.version)+")</div>";n+='<div style="display: flex; flex-wrap: wrap; gap: 6px;">',i.services?.length&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F4CB} '+i.services.length+" services</span>"),i.customApps?.length&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F4E6} '+i.customApps.length+" custom apps</span>"),i.theme&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F3A8} Theme: '+escapeHtml(i.theme)+"</span>"),i.userThemes&&(n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">\u{1F3A8} '+Object.keys(i.userThemes).length+" custom themes</span>"),n+="</div>",$.innerHTML=n,L.style.display="block";return}var r=await secureFetch("/api/v1/backup/preview",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(i)}),d=await r.json();if(d.success){O=i;var n='<div style="margin-bottom: 8px; color: var(--muted); font-size: 0.8rem;">Exported: '+new Date(i.exportedAt).toLocaleString()+" (v"+escapeHtml(i.version)+")</div>";n+='<div style="margin-bottom: 6px; font-size: 0.75rem; color: var(--muted); text-transform: uppercase; letter-spacing: 0.5px;">Server Config</div>',n+='<div style="display: flex; flex-wrap: wrap; gap: 6px; margin-bottom: 10px;">';for(var h in d.preview.files){var T=d.preview.files[h],U=T.action==="create"?"\u{1F195}":"\u{1F4DD}";n+='<span style="padding: 4px 8px; background: var(--base); border-radius: 4px; font-size: 0.8rem;">'+U+" "+escapeHtml(T.description)+"</span>"}n+="</div>",d.preview.serviceCount&&(n+='<div style="font-size: 0.8rem; color: var(--accent); margin-bottom: 6px;">'+d.preview.serviceCount+" services</div>"),d.preview.themeCount&&(n+='<div style="font-size: 0.8rem; color: var(--accent); margin-bottom: 6px;">\u{1F3A8} '+d.preview.themeCount+" custom themes</div>"),d.preview.browserStateCount&&(n+='<div style="margin-top: 6px; font-size: 0.75rem; color: var(--muted); text-transform: uppercase; letter-spacing: 0.5px;">Browser Preferences</div>',n+='<div style="font-size: 0.8rem; color: var(--accent);">\u{1F5A5}\uFE0F '+d.preview.browserStateCount+" saved settings (theme, weather, clock, widgets, etc.)</div>"),$.innerHTML=n,L.style.display="block"}else v.innerHTML="\u26A0\uFE0F Invalid backup file: "+escapeHtml(d.error),v.style.display="block",v.style.background="color-mix(in srgb, #f39c12 15%, transparent)",v.style.border="1px solid #f39c12",L.style.display="none"}catch(q){v.innerHTML="\u274CLine truncated
This will replace current configuration, credentials, and data. Containers will be restarted.`))try{var o=await secureFetch("/api/v1/apps/"+encodeURIComponent(e)+"/revert/"+encodeURIComponent(a),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({restartContainers:!0})}),i=await o.json();i.success?(showNotification(e+" restored to "+a,"success"),setTimeout(function(){location.reload()},1500)):showNotification("Restore failed: "+(i.error||"Unknown"),"error")}catch(n){showNotification("Restore error: "+n.message,"error")}}})(),(function(){injectModal("stats-modal",`<div id="stats-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 750px; max-width: 950px;">
@@ -1305,11 +1305,11 @@ This will replace current configuration, credentials, and data. Containers will
<button id="stats-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("stats-modal"),B=document.getElementById("container-stats-btn"),j=document.getElementById("stats-cancel"),b=document.getElementById("stats-refresh-btn"),D=document.getElementById("stats-auto-refresh"),A=document.getElementById("stats-container"),P=document.getElementById("stats-aggregated-container"),R=document.getElementById("stats-alerts-container"),k=document.getElementById("stats-last-update");let M=null,E=null;function z(l){if(l===0||!l)return"0 B";const v=1024,c=["B","KB","MB","GB"],t=Math.floor(Math.log(l)/Math.log(v));return parseFloat((l/Math.pow(v,t)).toFixed(1))+" "+c[t]}function C(l){return l<30?"#2ecc71":l<70?"#f39c12":"#e74c3c"}function N(l){return l<50?"#2ecc71":l<80?"#f39c12":"#e74c3c"}async function x(){try{let l=null,v=!1;try{const e=await(await fetch("/api/v1/monitoring/stats")).json();e.success&&e.stats&&(l=e.stats,v=!0,E=e.stats)}catch{}if(!v){const e=await(await fetch("/api/v1/stats/containers")).json();if(e.success&&e.stats){l={};for(const a of e.stats)l[a.name]={name:a.name,current:{cpu:a.cpu,memory:{percent:a.memory.percent,usage:a.memory.used,limit:a.memory.limit,usageMB:Math.round(a.memory.used/1048576),limitMB:Math.round(a.memory.limit/1048576)},network:{rxBytes:a.network.rx,txBytes:a.network.tx,rxMB:(a.network.rx/1048576).toFixed(1),txMB:(a.network.tx/1048576).toFixed(1)},disk:{readMB:0,writeMB:0}},status:a.status};E=l}}if(!l||Object.keys(l).length===0){A.innerHTML='<div style="text-align: center; padding: 40px; color: var(--muted);">No running containers found</div>';return}let c='<div style="display: flex; flex-direction: column; gap: 8px;">';for(const[t,e]of Object.entries(l)){const a=e.current||e,o=a.cpu?.percent||0,i=a.memory?.percent||0,n=C(o),r=N(i),d=a.memory?.usage||a.memory?.used||0,h=a.memory?.limit||0,$=a.network?.rxBytes||a.network?.rx||0,U=a.network?.txBytes||a.network?.tx||0,_=e.aggregated;c+=`
</div>`);const b=document.getElementById("stats-modal"),C=document.getElementById("container-stats-btn"),j=document.getElementById("stats-cancel"),k=document.getElementById("stats-refresh-btn"),z=document.getElementById("stats-auto-refresh"),P=document.getElementById("stats-container"),H=document.getElementById("stats-aggregated-container"),A=document.getElementById("stats-alerts-container"),x=document.getElementById("stats-last-update");let B=null,w=null;function M(l){if(l===0||!l)return"0 B";const g=1024,c=["B","KB","MB","GB"],t=Math.floor(Math.log(l)/Math.log(g));return parseFloat((l/Math.pow(g,t)).toFixed(1))+" "+c[t]}function L(l){return l<30?"#2ecc71":l<70?"#f39c12":"#e74c3c"}function $(l){return l<50?"#2ecc71":l<80?"#f39c12":"#e74c3c"}async function u(){try{let l=null,g=!1;try{const e=await(await fetch("/api/v1/monitoring/stats")).json();e.success&&e.stats&&(l=e.stats,g=!0,w=e.stats)}catch{}if(!g){const e=await(await fetch("/api/v1/stats/containers")).json();if(e.success&&e.stats){l={};for(const a of e.stats)l[a.name]={name:a.name,current:{cpu:a.cpu,memory:{percent:a.memory.percent,usage:a.memory.used,limit:a.memory.limit,usageMB:Math.round(a.memory.used/1048576),limitMB:Math.round(a.memory.limit/1048576)},network:{rxBytes:a.network.rx,txBytes:a.network.tx,rxMB:(a.network.rx/1048576).toFixed(1),txMB:(a.network.tx/1048576).toFixed(1)},disk:{readMB:0,writeMB:0}},status:a.status};w=l}}if(!l||Object.keys(l).length===0){P.innerHTML='<div style="text-align: center; padding: 40px; color: var(--muted);">No running containers found</div>';return}let c='<div style="display: flex; flex-direction: column; gap: 8px;">';for(const[t,e]of Object.entries(l)){const a=e.current||e,o=a.cpu?.percent||0,i=a.memory?.percent||0,n=L(o),r=$(i),d=a.memory?.usage||a.memory?.used||0,h=a.memory?.limit||0,T=a.network?.rxBytes||a.network?.rx||0,U=a.network?.txBytes||a.network?.tx||0,q=e.aggregated;c+=`
<div style="padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<div style="display: flex; align-items: center; gap: 12px; margin-bottom: 10px;">
<span style="font-weight: 600; flex: 1;">${e.name||t}</span>
${_?`<span style="font-size: 0.65rem; color: var(--muted); padding: 2px 6px; background: color-mix(in srgb, var(--accent) 10%, transparent); border-radius: 4px;">avg ${_.cpu?.avg?.toFixed(0)||0}% cpu</span>`:""}
${q?`<span style="font-size: 0.65rem; color: var(--muted); padding: 2px 6px; background: color-mix(in srgb, var(--accent) 10%, transparent); border-radius: 4px;">avg ${q.cpu?.avg?.toFixed(0)||0}% cpu</span>`:""}
<span style="font-size: 0.75rem; color: var(--muted); background: var(--base); padding: 2px 8px; border-radius: 4px;">${e.status||"running"}</span>
</div>
<div style="display: grid; grid-template-columns: repeat(3, 1fr); gap: 12px;">
@@ -1330,18 +1330,18 @@ This will replace current configuration, credentials, and data. Containers will
</div>
<span style="font-size: 0.8rem; font-weight: 500; color: ${r}; min-width: 45px; text-align: right;">${i.toFixed(1)}%</span>
</div>
<div style="font-size: 0.65rem; color: var(--muted); margin-top: 2px;">${z(d)} / ${z(h)}</div>
<div style="font-size: 0.65rem; color: var(--muted); margin-top: 2px;">${M(d)} / ${M(h)}</div>
</div>
<div>
<div style="font-size: 0.7rem; color: var(--muted); margin-bottom: 4px;">Network</div>
<div style="font-size: 0.8rem;">
<span style="color: #3498db;">\u2193 ${z($)}</span>
<span style="color: #3498db;">\u2193 ${M(T)}</span>
<span style="color: var(--muted); margin: 0 4px;">/</span>
<span style="color: #e74c3c;">\u2191 ${z(U)}</span>
<span style="color: #e74c3c;">\u2191 ${M(U)}</span>
</div>
</div>
</div>
</div>`}c+="</div>",A.innerHTML=c,k.textContent="Updated: "+new Date().toLocaleTimeString()}catch(l){A.innerHTML=`<div style="text-align: center; padding: 40px; color: var(--bad-fg);">\u274C Failed to load stats: ${escapeHtml(l.message)}</div>`}}async function I(){if(!P)return;const l=E;if(!l||Object.keys(l).length===0){P.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4C8}</span>No monitoring data available. Open the Live Stats tab first.</div>';return}let v='<div style="display: flex; flex-direction: column; gap: 12px;">';for(const[c,t]of Object.entries(l)){const e=t.aggregated;e&&(v+=`<div style="padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
</div>`}c+="</div>",P.innerHTML=c,x.textContent="Updated: "+new Date().toLocaleTimeString()}catch(l){P.innerHTML=`<div style="text-align: center; padding: 40px; color: var(--bad-fg);">\u274C Failed to load stats: ${escapeHtml(l.message)}</div>`}}async function v(){if(!H)return;const l=w;if(!l||Object.keys(l).length===0){H.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4C8}</span>No monitoring data available. Open the Live Stats tab first.</div>';return}let g='<div style="display: flex; flex-direction: column; gap: 12px;">';for(const[c,t]of Object.entries(l)){const e=t.aggregated;e&&(g+=`<div style="padding: 12px; background: var(--card-base); border-radius: 8px; border: 1px solid var(--border);">
<div style="font-weight: 600; margin-bottom: 10px;">${t.name||c}</div>
<div style="display: grid; grid-template-columns: repeat(4, 1fr); gap: 8px;">
<div class="stat-mini-card"><span class="stat-val">${e.cpu?.avg?.toFixed(1)||0}%</span><span class="stat-lbl">Avg CPU</span></div>
@@ -1350,13 +1350,13 @@ This will replace current configuration, credentials, and data. Containers will
<div class="stat-mini-card"><span class="stat-val">${e.memory?.max?.toFixed(1)||0}%</span><span class="stat-lbl">Max Mem</span></div>
</div>
${e.dataPoints?`<div style="font-size: 0.7rem; color: var(--muted); margin-top: 6px;">${e.dataPoints} data points over ${e.timeRange||24}h</div>`:""}
</div>`)}v+="</div>",P.innerHTML=v}async function H(){if(!R)return;R.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading alerts...</div>';const l=E;if(!l||Object.keys(l).length===0){R.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F514}</span>No containers found. Open the Live Stats tab first.</div>';return}let v=!1;try{v=(await(await fetch("/api/v1/license/feature/resource-alerts")).json()).available}catch{v=!1}let c=[];try{const r=await(await fetch("/api/v1/monitoring/alerts?limit=50")).json();r.success&&(c=r.history||[])}catch{}let t={};try{const r=await(await fetch("/api/v1/monitoring/alerts/config")).json();r.success&&(t=r.configs||{})}catch{}const a=Object.entries(l).map(([n,r])=>{const d=t[n]||{cpuThreshold:80,memoryThreshold:90,diskIOThreshold:50,autoRestart:!1,enabled:!1};return`
</div>`)}g+="</div>",H.innerHTML=g}async function D(){if(!A)return;A.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading alerts...</div>';const l=w;if(!l||Object.keys(l).length===0){A.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F514}</span>No containers found. Open the Live Stats tab first.</div>';return}let g=!1;try{g=(await(await fetch("/api/v1/license/feature/resource-alerts")).json()).available}catch{g=!1}let c=[];try{const r=await(await fetch("/api/v1/monitoring/alerts?limit=50")).json();r.success&&(c=r.history||[])}catch{}let t={};try{const r=await(await fetch("/api/v1/monitoring/alerts/config")).json();r.success&&(t=r.configs||{})}catch{}const a=Object.entries(l).map(([n,r])=>{const d=t[n]||{cpuThreshold:80,memoryThreshold:90,diskIOThreshold:50,autoRestart:!1,enabled:!1};return`
<tr data-container="${n}">
<td style="font-weight: 600; padding: 8px;">${r.name||n}</td>
<td style="padding: 4px 8px;"><input type="number" class="alert-cpu" value="${d.cpuThreshold??80}" min="0" max="100" style="width: 60px; font-size: 0.8rem; padding: 2px 4px;" ${v?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="number" class="alert-mem" value="${d.memoryThreshold??90}" min="0" max="100" style="width: 60px; font-size: 0.8rem; padding: 2px 4px;" ${v?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="number" class="alert-disk" value="${d.diskIOThreshold??50}" min="0" max="1000" style="width: 70px; font-size: 0.8rem; padding: 2px 4px;" ${v?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="checkbox" class="alert-autorestart" ${d.autoRestart?"checked":""} ${v?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="number" class="alert-cpu" value="${d.cpuThreshold??80}" min="0" max="100" style="width: 60px; font-size: 0.8rem; padding: 2px 4px;" ${g?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="number" class="alert-mem" value="${d.memoryThreshold??90}" min="0" max="100" style="width: 60px; font-size: 0.8rem; padding: 2px 4px;" ${g?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="number" class="alert-disk" value="${d.diskIOThreshold??50}" min="0" max="1000" style="width: 70px; font-size: 0.8rem; padding: 2px 4px;" ${g?"":"disabled"} /></td>
<td style="padding: 4px 8px;"><input type="checkbox" class="alert-autorestart" ${d.autoRestart?"checked":""} ${g?"":"disabled"} /></td>
<td style="padding: 4px 8px;">
<button class="alert-test-btn btn-xs" data-container="${n}" data-name="${r.name||n}" style="padding: 2px 8px; font-size: 0.75rem; background: var(--card-base); border: 1px solid var(--border); border-radius: 4px; cursor: pointer;">Test</button>
</td>
@@ -1370,7 +1370,7 @@ This will replace current configuration, credentials, and data. Containers will
<td style="padding: 6px 8px; text-align: center;">${d}</td>
<td style="padding: 6px 8px; font-size: 0.75rem; color: ${n.autoRestartTriggered?"#f39c12":"var(--muted)"};">${n.autoRestartTriggered?"\u21BB":""}</td>
</tr>
`}).join(""),i=v?`
`}).join(""),i=g?`
<div style="margin-bottom: 20px;">
<div style="display: flex; align-items: center; justify-content: space-between; margin-bottom: 10px;">
<h4 style="margin: 0; font-size: 0.9rem;">\u2699\uFE0F Alert Configuration</h4>
@@ -1401,7 +1401,7 @@ This will replace current configuration, credentials, and data. Containers will
<p style="margin: 6px 0 0; font-size: 0.75rem; color: var(--muted);">Upgrade to configure resource alert thresholds per container.</p>
<button id="upgrade-for-alerts" style="margin-top: 8px; padding: 4px 12px; font-size: 0.75rem; background: #f1c40f; color: #000; border: none; border-radius: 4px; cursor: pointer; font-weight: 600;">Upgrade Now</button>
</div>
`;R.innerHTML=`
`;A.innerHTML=`
${i}
<div>
<h4 style="margin: 0 0 10px; font-size: 0.9rem;">\u{1F4CB} Recent Alerts</h4>
@@ -1423,21 +1423,21 @@ This will replace current configuration, credentials, and data. Containers will
</div>
`:'<div style="color: var(--muted); text-align: center; padding: 20px;">No alerts recorded yet.</div>'}
</div>
`,document.getElementById("save-all-alerts")?.addEventListener("click",async()=>{const n={};document.querySelectorAll("#stats-alerts-container tr[data-container]").forEach(r=>{const d=r.dataset.container;n[d]={cpuThreshold:parseInt(r.querySelector(".alert-cpu")?.value)||80,memoryThreshold:parseInt(r.querySelector(".alert-mem")?.value)||90,diskIOThreshold:parseInt(r.querySelector(".alert-disk")?.value)||50,autoRestart:!!r.querySelector(".alert-autorestart")?.checked,enabled:!0}});try{const d=await(await secureFetch("/api/v1/monitoring/alerts/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({configs:n})})).json(),h=document.getElementById("save-all-alerts");h.textContent=d.success?"\u2705 Saved":"\u274C Failed",setTimeout(()=>{h.textContent="Save All"},2e3)}catch{const d=document.getElementById("save-all-alerts");d.textContent="\u274C Error",setTimeout(()=>{d.textContent="Save All"},2e3)}}),document.getElementById("go-to-notifications")?.addEventListener("click",n=>{n.preventDefault(),f.classList.remove("show"),L(),document.getElementById("manage-notifications")?.click()}),document.querySelectorAll(".alert-test-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.textContent;n.textContent="...";try{await secureFetch(`/api/v1/monitoring/alerts/${n.dataset.container}/test`,{method:"POST"}),n.textContent="\u2705",showNotification("Test alert sent for "+n.dataset.name,"success",3e3)}catch{n.textContent="\u274C"}setTimeout(()=>{n.textContent=r},2e3)})}),document.getElementById("upgrade-for-alerts")?.addEventListener("click",()=>{f.classList.remove("show"),L(),typeof openLicenseModal=="function"&&openLicenseModal()})}function m(){M&&clearInterval(M),D?.checked&&(M=setInterval(x,DC.POLL.STATS))}function L(){M&&(clearInterval(M),M=null)}B?.addEventListener("click",()=>{f.classList.add("show"),x(),m()}),j?.addEventListener("click",()=>{f.classList.remove("show"),L()}),f?.addEventListener("click",l=>{l.target===f&&(f.classList.remove("show"),L())}),b?.addEventListener("click",x),D?.addEventListener("change",()=>{D.checked?m():L()}),document.querySelector('[data-panel="stats-aggregated"]')?.addEventListener("click",I),document.querySelector('[data-panel="stats-alerts"]')?.addEventListener("click",H);const T=document.getElementById("stats-history-container"),O=document.getElementById("stats-history-container-area"),u=document.querySelectorAll(".stats-range-btn");let g="1h";function S(l){switch(l){case"1h":return 3600*1e3;case"24h":return 1440*60*1e3;case"7d":return 10080*60*1e3;case"30d":return 720*60*60*1e3;case"1y":return 365*24*60*60*1e3;default:return 3600*1e3}}function y(l){return l==="raw"?"live (10s samples)":l==="hourly"?"hourly average":l==="daily"?"daily average":l}function w(l,v,c,t,e){if(!l||l.length===0)return`<div style="text-align: center; color: var(--muted); padding: 20px;">No data for ${escapeHtml(t)}</div>`;const a=l.map(v).filter(q=>q!=null);if(a.length===0)return`<div style="text-align: center; color: var(--muted); padding: 20px;">No data for ${escapeHtml(t)}</div>`;const o=Math.max(...a,1),i=Math.min(...a,0),n=o-i||1,r=600,d=80,h=4,$=(r-h*2)/Math.max(a.length-1,1),U=a.map((q,J)=>{const X=h+J*$,Q=d-h-(q-i)/n*(d-h*2);return`${X.toFixed(1)},${Q.toFixed(1)}`}).join(" "),_=a[a.length-1],F=a.reduce((q,J)=>q+J,0)/a.length;return`
`,document.getElementById("save-all-alerts")?.addEventListener("click",async()=>{const n={};document.querySelectorAll("#stats-alerts-container tr[data-container]").forEach(r=>{const d=r.dataset.container;n[d]={cpuThreshold:parseInt(r.querySelector(".alert-cpu")?.value)||80,memoryThreshold:parseInt(r.querySelector(".alert-mem")?.value)||90,diskIOThreshold:parseInt(r.querySelector(".alert-disk")?.value)||50,autoRestart:!!r.querySelector(".alert-autorestart")?.checked,enabled:!0}});try{const d=await(await secureFetch("/api/v1/monitoring/alerts/config",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({configs:n})})).json(),h=document.getElementById("save-all-alerts");h.textContent=d.success?"\u2705 Saved":"\u274C Failed",setTimeout(()=>{h.textContent="Save All"},2e3)}catch{const d=document.getElementById("save-all-alerts");d.textContent="\u274C Error",setTimeout(()=>{d.textContent="Save All"},2e3)}}),document.getElementById("go-to-notifications")?.addEventListener("click",n=>{n.preventDefault(),b.classList.remove("show"),R(),document.getElementById("manage-notifications")?.click()}),document.querySelectorAll(".alert-test-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.textContent;n.textContent="...";try{await secureFetch(`/api/v1/monitoring/alerts/${n.dataset.container}/test`,{method:"POST"}),n.textContent="\u2705",showNotification("Test alert sent for "+n.dataset.name,"success",3e3)}catch{n.textContent="\u274C"}setTimeout(()=>{n.textContent=r},2e3)})}),document.getElementById("upgrade-for-alerts")?.addEventListener("click",()=>{b.classList.remove("show"),R(),typeof openLicenseModal=="function"&&openLicenseModal()})}function I(){B&&clearInterval(B),z?.checked&&(B=setInterval(u,DC.POLL.STATS))}function R(){B&&(clearInterval(B),B=null)}C?.addEventListener("click",()=>{b.classList.add("show"),u(),I()}),j?.addEventListener("click",()=>{b.classList.remove("show"),R()}),b?.addEventListener("click",l=>{l.target===b&&(b.classList.remove("show"),R())}),k?.addEventListener("click",u),z?.addEventListener("change",()=>{z.checked?I():R()}),document.querySelector('[data-panel="stats-aggregated"]')?.addEventListener("click",v),document.querySelector('[data-panel="stats-alerts"]')?.addEventListener("click",D);const N=document.getElementById("stats-history-container"),O=document.getElementById("stats-history-container-area"),m=document.querySelectorAll(".stats-range-btn");let y="1h";function S(l){switch(l){case"1h":return 3600*1e3;case"24h":return 1440*60*1e3;case"7d":return 10080*60*1e3;case"30d":return 720*60*60*1e3;case"1y":return 365*24*60*60*1e3;default:return 3600*1e3}}function f(l){return l==="raw"?"live (10s samples)":l==="hourly"?"hourly average":l==="daily"?"daily average":l}function E(l,g,c,t,e){if(!l||l.length===0)return`<div style="text-align: center; color: var(--muted); padding: 20px;">No data for ${escapeHtml(t)}</div>`;const a=l.map(g).filter(_=>_!=null);if(a.length===0)return`<div style="text-align: center; color: var(--muted); padding: 20px;">No data for ${escapeHtml(t)}</div>`;const o=Math.max(...a,1),i=Math.min(...a,0),n=o-i||1,r=600,d=80,h=4,T=(r-h*2)/Math.max(a.length-1,1),U=a.map((_,J)=>{const X=h+J*T,Q=d-h-(_-i)/n*(d-h*2);return`${X.toFixed(1)},${Q.toFixed(1)}`}).join(" "),q=a[a.length-1],F=a.reduce((_,J)=>_+J,0)/a.length;return`
<div style="margin-bottom: 14px;">
<div style="display: flex; align-items: baseline; gap: 12px; margin-bottom: 4px;">
<span style="font-weight: 600; font-size: 0.9rem;">${escapeHtml(t)}</span>
<span style="font-size: 0.75rem; color: var(--muted);">last ${_.toFixed(1)}${e} \xB7 avg ${F.toFixed(1)}${e} \xB7 max ${o.toFixed(1)}${e}</span>
<span style="font-size: 0.75rem; color: var(--muted);">last ${q.toFixed(1)}${e} \xB7 avg ${F.toFixed(1)}${e} \xB7 max ${o.toFixed(1)}${e}</span>
</div>
<svg viewBox="0 0 ${r} ${d}" preserveAspectRatio="none" style="width: 100%; height: ${d}px; background: var(--base); border-radius: 4px;">
<polyline fill="none" stroke="${c}" stroke-width="1.5" points="${U}" />
</svg>
</div>
`}function s(){if(!T)return;const l=E||{},v=T.value,c=Object.entries(l);if(c.length===0){T.innerHTML='<option value="">No containers</option>';return}T.innerHTML=c.map(([t,e])=>`<option value="${escapeHtml(t)}">${escapeHtml(e.name||t)}</option>`).join(""),v&&l[v]&&(T.value=v)}async function p(){if(!O||!T)return;const l=T.value;if(!l){O.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4CA}</span>No container selected.</div>';return}const v=Date.now(),c=v-S(g);O.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading history...</div>';try{const e=await(await fetch(`/api/v1/monitoring/history/${encodeURIComponent(l)}?startTime=${c}&endTime=${v}`)).json();if(!e.success)throw new Error(e.error||"Failed to load history");const a=e.samples||[],o=e.tier||"raw";if(a.length===0){O.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4CA}</span>No data for the last ${g}. Tier: ${y(o)}.</div>`;return}const i=o==="raw",n=i?U=>U.cpu?.percent:U=>U.cpu?.avg,r=i?U=>U.memory?.percent:U=>U.memory?.avgPercent,d=i?U=>U.network?.rxMB||0:U=>U.network?.rxMB||0,h=i?U=>U.network?.txMB||0:U=>U.network?.txMB||0;let $=`
`}function s(){if(!N)return;const l=w||{},g=N.value,c=Object.entries(l);if(c.length===0){N.innerHTML='<option value="">No containers</option>';return}N.innerHTML=c.map(([t,e])=>`<option value="${escapeHtml(t)}">${escapeHtml(e.name||t)}</option>`).join(""),g&&l[g]&&(N.value=g)}async function p(){if(!O||!N)return;const l=N.value;if(!l){O.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4CA}</span>No container selected.</div>';return}const g=Date.now(),c=g-S(y);O.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading history...</div>';try{const e=await(await fetch(`/api/v1/monitoring/history/${encodeURIComponent(l)}?startTime=${c}&endTime=${g}`)).json();if(!e.success)throw new Error(e.error||"Failed to load history");const a=e.samples||[],o=e.tier||"raw";if(a.length===0){O.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4CA}</span>No data for the last ${y}. Tier: ${f(o)}.</div>`;return}const i=o==="raw",n=i?U=>U.cpu?.percent:U=>U.cpu?.avg,r=i?U=>U.memory?.percent:U=>U.memory?.avgPercent,d=i?U=>U.network?.rxMB||0:U=>U.network?.rxMB||0,h=i?U=>U.network?.txMB||0:U=>U.network?.txMB||0;let T=`
<div style="font-size: 0.75rem; color: var(--muted); margin-bottom: 8px;">
${a.length} samples \xB7 ${escapeHtml(y(o))} \xB7 ${new Date(c).toLocaleString()} \u2192 ${new Date(v).toLocaleString()}
${a.length} samples \xB7 ${escapeHtml(f(o))} \xB7 ${new Date(c).toLocaleString()} \u2192 ${new Date(g).toLocaleString()}
</div>
`;$+=w(a,n,"#2ecc71","CPU","%"),$+=w(a,r,"#3498db","Memory","%"),$+=w(a,d,"#9b59b6","Network RX"," MB"),$+=w(a,h,"#e67e22","Network TX"," MB"),O.innerHTML=$}catch(t){O.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u26A0\uFE0F</span>Failed to load history: ${escapeHtml(t.message)}</div>`}}u.forEach(l=>{l.addEventListener("click",()=>{u.forEach(v=>v.classList.remove("active")),l.classList.add("active"),g=l.dataset.range,p()})}),T?.addEventListener("change",p),document.querySelector('[data-panel="stats-history"]')?.addEventListener("click",()=>{s(),p()})})(),(function(){injectModal("health-modal",`<div id="health-modal" class="weather-modal">
`;T+=E(a,n,"#2ecc71","CPU","%"),T+=E(a,r,"#3498db","Memory","%"),T+=E(a,d,"#9b59b6","Network RX"," MB"),T+=E(a,h,"#e67e22","Network TX"," MB"),O.innerHTML=T}catch(t){O.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u26A0\uFE0F</span>Failed to load history: ${escapeHtml(t.message)}</div>`}}m.forEach(l=>{l.addEventListener("click",()=>{m.forEach(g=>g.classList.remove("active")),l.classList.add("active"),y=l.dataset.range,p()})}),N?.addEventListener("change",p),document.querySelector('[data-panel="stats-history"]')?.addEventListener("click",()=>{s(),p()})})(),(function(){injectModal("health-modal",`<div id="health-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 800px; max-width: 1000px;">
<h3>\u{1F3E5} Health Check Dashboard</h3>
<p class="modal-subtitle">
@@ -1561,24 +1561,24 @@ This will replace current configuration, credentials, and data. Containers will
<button id="health-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("health-modal"),B=document.getElementById("health-check-btn"),j=document.getElementById("health-cancel"),b=document.getElementById("health-refresh-btn"),D=document.getElementById("health-status-container"),A=document.getElementById("health-incidents-container"),P=document.getElementById("health-config-container"),R=document.getElementById("health-last-update"),k=document.getElementById("health-add-btn"),M=document.getElementById("health-config-form"),E=document.getElementById("health-form-title"),z=document.getElementById("health-form-cancel"),C=document.getElementById("health-form-save"),N="dashcaddy-health-settings",x={retentionDays:30,pollingInterval:60,statsPollingInterval:30,maxEntriesPerService:500,diskUsageThreshold:80},I=document.getElementById("health-global-save"),H=document.getElementById("health-global-reset"),m=document.getElementById("health-global-status"),L=document.getElementById("health-setting-retention"),T=document.getElementById("health-setting-interval"),O=document.getElementById("health-setting-stats-interval"),u=document.getElementById("health-setting-max-entries"),g=document.getElementById("health-setting-disk-threshold");function S(){try{const i=safeGet(N),n=i?JSON.parse(i):{};return Object.assign({},x,n)}catch{return Object.assign({},x)}}function y(){const i=S();L&&(L.value=i.retentionDays),T&&(T.value=i.pollingInterval),O&&(O.value=i.statsPollingInterval),u&&(u.value=i.maxEntriesPerService),g&&(g.value=i.diskUsageThreshold)}function w(){const i={retentionDays:Math.max(1,Math.min(3650,parseInt(L?.value)||x.retentionDays)),pollingInterval:Math.max(5,Math.min(3600,parseInt(T?.value)||x.pollingInterval)),statsPollingInterval:Math.max(5,Math.min(3600,parseInt(O?.value)||x.statsPollingInterval)),maxEntriesPerService:Math.max(10,Math.min(1e5,parseInt(u?.value)||x.maxEntriesPerService)),diskUsageThreshold:Math.max(50,Math.min(99,parseInt(g?.value)||x.diskUsageThreshold))};try{safeSet(N,JSON.stringify(i)),y(),m&&(m.textContent="Saved \u2713",m.style.color="var(--ok-fg)",setTimeout(()=>{m&&(m.textContent="")},2500)),typeof showNotification=="function"&&showNotification("Global health settings saved","success")}catch(n){m&&(m.textContent="Save failed",m.style.color="var(--bad-fg)"),typeof showNotification=="function"&&showNotification("Failed to save settings: "+n.message,"error")}}function s(){try{safeSet(N,JSON.stringify(x))}catch{}y(),m&&(m.textContent="Reset to defaults \u2713",m.style.color="var(--ok-fg)",setTimeout(()=>{m&&(m.textContent="")},2500))}y(),I?.addEventListener("click",w),H?.addEventListener("click",s);let p=null;function l(i){return i>=99.9?"var(--ok-fg)":i>=95?"#f39c12":"var(--bad-fg)"}function v(i){const n={critical:"var(--bad-fg)",high:"#ff6b6b",medium:"#f39c12",low:"var(--muted)"};return`<span style="padding: 2px 8px; border-radius: 4px; font-size: 0.75rem; background: ${n[i]||"var(--muted)"}20; color: ${n[i]||"var(--muted)"};">${i}</span>`}async function c(){try{const n=await(await fetch("/api/v1/health-checks/status")).json();if(!n.success||!n.status||Object.keys(n.status).length===0){D.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F3E5}</span>No health checks configured. Go to the Configure tab to add services.</div>';return}const r=Object.values(n.status);let d='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';d+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted); text-align: left;">',d+='<th style="padding: 8px;">Service</th><th style="padding: 8px;">Status</th>',d+='<th style="padding: 8px;">Uptime 24h</th><th style="padding: 8px;">Uptime 7d</th>',d+='<th style="padding: 8px;">Avg Response</th><th style="padding: 8px;">Last Check</th></tr>';for(const h of r){const $=h.status==="up",U=$?"var(--dot-ok)":"var(--dot-bad)",_=h.uptime?.["24h"]??"-",F=h.uptime?.["7d"]??"-",q=h.avgResponseTime!=null?Math.round(h.avgResponseTime)+"ms":"-",J=h.timestamp?timeAgo(h.timestamp):"-";d+=`<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" data-health-id="${escapeHtml(h.serviceId)}">`,d+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(h.name||h.serviceId)}</td>`,d+=`<td style="padding: 8px;"><span style="display: inline-block; width: 8px; height: 8px; border-radius: 50%; background: ${U}; margin-right: 6px;"></span>${$?"Up":"Down"}</td>`,d+=`<td style="padding: 8px; color: ${typeof _=="number"?l(_):"var(--muted)"};">${typeof _=="number"?_.toFixed(1)+"%":_}</td>`,d+=`<td style="padding: 8px; color: ${typeof F=="number"?l(F):"var(--muted)"};">${typeof F=="number"?F.toFixed(1)+"%":F}</td>`,d+=`<td style="padding: 8px;">${q}</td>`,d+=`<td style="padding: 8px; color: var(--muted);">${J}</td>`,d+="</tr>",d+=`<tr id="health-detail-${escapeHtml(h.serviceId)}" style="display: none;"><td colspan="6" style="padding: 12px; background: var(--bg); border-bottom: 1px solid var(--border);"><div class="panel-empty"><span class="brand-spinner"></span> Loading Line truncated
</div>`);const b=document.getElementById("health-modal"),C=document.getElementById("health-check-btn"),j=document.getElementById("health-cancel"),k=document.getElementById("health-refresh-btn"),z=document.getElementById("health-status-container"),P=document.getElementById("health-incidents-container"),H=document.getElementById("health-config-container"),A=document.getElementById("health-last-update"),x=document.getElementById("health-add-btn"),B=document.getElementById("health-config-form"),w=document.getElementById("health-form-title"),M=document.getElementById("health-form-cancel"),L=document.getElementById("health-form-save"),$="dashcaddy-health-settings",u={retentionDays:30,pollingInterval:60,statsPollingInterval:30,maxEntriesPerService:500,diskUsageThreshold:80},v=document.getElementById("health-global-save"),D=document.getElementById("health-global-reset"),I=document.getElementById("health-global-status"),R=document.getElementById("health-setting-retention"),N=document.getElementById("health-setting-interval"),O=document.getElementById("health-setting-stats-interval"),m=document.getElementById("health-setting-max-entries"),y=document.getElementById("health-setting-disk-threshold");function S(){try{const i=safeGet($),n=i?JSON.parse(i):{};return Object.assign({},u,n)}catch{return Object.assign({},u)}}function f(){const i=S();R&&(R.value=i.retentionDays),N&&(N.value=i.pollingInterval),O&&(O.value=i.statsPollingInterval),m&&(m.value=i.maxEntriesPerService),y&&(y.value=i.diskUsageThreshold)}function E(){const i={retentionDays:Math.max(1,Math.min(3650,parseInt(R?.value)||u.retentionDays)),pollingInterval:Math.max(5,Math.min(3600,parseInt(N?.value)||u.pollingInterval)),statsPollingInterval:Math.max(5,Math.min(3600,parseInt(O?.value)||u.statsPollingInterval)),maxEntriesPerService:Math.max(10,Math.min(1e5,parseInt(m?.value)||u.maxEntriesPerService)),diskUsageThreshold:Math.max(50,Math.min(99,parseInt(y?.value)||u.diskUsageThreshold))};try{safeSet($,JSON.stringify(i)),f(),I&&(I.textContent="Saved \u2713",I.style.color="var(--ok-fg)",setTimeout(()=>{I&&(I.textContent="")},2500)),typeof showNotification=="function"&&showNotification("Global health settings saved","success")}catch(n){I&&(I.textContent="Save failed",I.style.color="var(--bad-fg)"),typeof showNotification=="function"&&showNotification("Failed to save settings: "+n.message,"error")}}function s(){try{safeSet($,JSON.stringify(u))}catch{}f(),I&&(I.textContent="Reset to defaults \u2713",I.style.color="var(--ok-fg)",setTimeout(()=>{I&&(I.textContent="")},2500))}f(),v?.addEventListener("click",E),D?.addEventListener("click",s);let p=null;function l(i){return i>=99.9?"var(--ok-fg)":i>=95?"#f39c12":"var(--bad-fg)"}function g(i){const n={critical:"var(--bad-fg)",high:"#ff6b6b",medium:"#f39c12",low:"var(--muted)"};return`<span style="padding: 2px 8px; border-radius: 4px; font-size: 0.75rem; background: ${n[i]||"var(--muted)"}20; color: ${n[i]||"var(--muted)"};">${i}</span>`}async function c(){try{const n=await(await fetch("/api/v1/health-checks/status")).json();if(!n.success||!n.status||Object.keys(n.status).length===0){z.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F3E5}</span>No health checks configured. Go to the Configure tab to add services.</div>';return}const r=Object.values(n.status);let d='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';d+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted); text-align: left;">',d+='<th style="padding: 8px;">Service</th><th style="padding: 8px;">Status</th>',d+='<th style="padding: 8px;">Uptime 24h</th><th style="padding: 8px;">Uptime 7d</th>',d+='<th style="padding: 8px;">Avg Response</th><th style="padding: 8px;">Last Check</th></tr>';for(const h of r){const T=h.status==="up",U=T?"var(--dot-ok)":"var(--dot-bad)",q=h.uptime?.["24h"]??"-",F=h.uptime?.["7d"]??"-",_=h.avgResponseTime!=null?Math.round(h.avgResponseTime)+"ms":"-",J=h.timestamp?timeAgo(h.timestamp):"-";d+=`<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" data-health-id="${escapeHtml(h.serviceId)}">`,d+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(h.name||h.serviceId)}</td>`,d+=`<td style="padding: 8px;"><span style="display: inline-block; width: 8px; height: 8px; border-radius: 50%; background: ${U}; margin-right: 6px;"></span>${T?"Up":"Down"}</td>`,d+=`<td style="padding: 8px; color: ${typeof q=="number"?l(q):"var(--muted)"};">${typeof q=="number"?q.toFixed(1)+"%":q}</td>`,d+=`<td style="padding: 8px; color: ${typeof F=="number"?l(F):"var(--muted)"};">${typeof F=="number"?F.toFixed(1)+"%":F}</td>`,d+=`<td style="padding: 8px;">${_}</td>`,d+=`<td style="padding: 8px; color: var(--muted);">${J}</td>`,d+="</tr>",d+=`<tr id="health-detail-${escapeHtml(h.serviceId)}" style="display: none;"><td colspan="6" style="padding: 12px; background: var(--bg); border-bottom: 1px solid var(--border);"><div class="panel-empty"><span class="brand-spinner"></span> Loading Line truncated
<div style="display: grid; grid-template-columns: repeat(4, 1fr); gap: 12px; font-size: 0.82rem;">
<div><span style="color: var(--muted);">Total Checks</span><br><strong>${q.totalChecks||0}</strong></div>
<div><span style="color: var(--muted);">Uptime</span><br><strong style="color: ${l(q.uptime||0)};">${(q.uptime||0).toFixed(2)}%</strong></div>
<div><span style="color: var(--muted);">Total Checks</span><br><strong>${_.totalChecks||0}</strong></div>
<div><span style="color: var(--muted);">Uptime</span><br><strong style="color: ${l(_.uptime||0)};">${(_.uptime||0).toFixed(2)}%</strong></div>
<div><span style="color: var(--muted);">Avg Response</span><br><strong>${Math.round(J.avg||0)}ms</strong></div>
<div><span style="color: var(--muted);">P95 / P99</span><br><strong>${Math.round(J.p95||0)}ms / ${Math.round(J.p99||0)}ms</strong></div>
<div><span style="color: var(--muted);">Min Response</span><br><strong>${Math.round(J.min||0)}ms</strong></div>
<div><span style="color: var(--muted);">Max Response</span><br><strong>${Math.round(J.max||0)}ms</strong></div>
<div><span style="color: var(--muted);">Up Checks</span><br><strong style="color: var(--ok-fg);">${q.upChecks||0}</strong></div>
<div><span style="color: var(--muted);">Down Checks</span><br><strong style="color: var(--bad-fg);">${q.downChecks||0}</strong></div>
</div>`}else U.querySelector("td").innerHTML='<div class="panel-empty">No detailed stats available for this period.</div>'}catch(_){U.querySelector("td").innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(_.message)}</div>`}}})})}catch(i){D.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed to load health status: ${escapeHtml(i.message)}</div>`}}async function t(){try{const[i,n]=await Promise.all([fetch("/api/v1/health-checks/incidents"),fetch("/api/v1/health-checks/incidents/history?limit=50")]),r=await i.json(),d=await n.json();let h="";const $=r.success&&r.incidents?r.incidents:[];if($.length>0){h+='<div style="margin-bottom: 16px;"><h4 style="color: var(--bad-fg); margin: 0 0 8px;">Open Incidents ('+$.length+")</h4>";for(const _ of $)h+=`<div style="padding: 10px 12px; margin-bottom: 8px; border: 1px solid var(--bad-fg)30; border-radius: 8px; background: var(--bad-bg);">
<div><span style="color: var(--muted);">Up Checks</span><br><strong style="color: var(--ok-fg);">${_.upChecks||0}</strong></div>
<div><span style="color: var(--muted);">Down Checks</span><br><strong style="color: var(--bad-fg);">${_.downChecks||0}</strong></div>
</div>`}else U.querySelector("td").innerHTML='<div class="panel-empty">No detailed stats available for this period.</div>'}catch(q){U.querySelector("td").innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(q.message)}</div>`}}})})}catch(i){z.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed to load health status: ${escapeHtml(i.message)}</div>`}}async function t(){try{const[i,n]=await Promise.all([fetch("/api/v1/health-checks/incidents"),fetch("/api/v1/health-checks/incidents/history?limit=50")]),r=await i.json(),d=await n.json();let h="";const T=r.success&&r.incidents?r.incidents:[];if(T.length>0){h+='<div style="margin-bottom: 16px;"><h4 style="color: var(--bad-fg); margin: 0 0 8px;">Open Incidents ('+T.length+")</h4>";for(const q of T)h+=`<div style="padding: 10px 12px; margin-bottom: 8px; border: 1px solid var(--bad-fg)30; border-radius: 8px; background: var(--bad-bg);">
<div style="display: flex; justify-content: space-between; align-items: center;">
<span style="font-weight: 500;">${escapeHtml(_.serviceId)}</span>
<span>${v(_.severity)}</span>
<span style="font-weight: 500;">${escapeHtml(q.serviceId)}</span>
<span>${g(q.severity)}</span>
</div>
<div style="font-size: 0.82rem; color: var(--muted); margin-top: 4px;">${escapeHtml(_.message)}</div>
<div style="font-size: 0.75rem; color: var(--muted); margin-top: 4px;">Started ${timeAgo(_.createdAt)} \xB7 ${_.occurrences||1} occurrence(s)</div>
</div>`;h+="</div>"}else h+='<div style="padding: 12px; margin-bottom: 16px; border: 1px solid var(--ok-fg)30; border-radius: 8px; background: var(--ok-bg); text-align: center; color: var(--ok-fg); font-size: 0.9rem;">All services operational \u2014 no open incidents</div>';const U=d.success&&d.history?d.history:[];if(U.length>0){h+='<h4 style="margin: 0 0 8px; color: var(--muted);">Incident History</h4>',h+='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',h+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Service</th><th style="padding: 6px; text-align: left;">Type</th><th style="padding: 6px; text-align: left;">Severity</th><th style="padding: 6px; text-align: left;">Status</th><th style="padding: 6px; text-align: left;">Duration</th><th style="padding: 6px; text-align: left;">When</th></tr>';for(const _ of U){const F=_.status==="resolved",q=F&&_.duration?_.duration<6e4?Math.round(_.duration/1e3)+"s":Math.round(_.duration/6e4)+"m":"-";h+='<tr style="border-bottom: 1px solid var(--border);">',h+=`<td style="padding: 6px;">${escapeHtml(_.serviceId)}</td>`,h+=`<td style="padding: 6px;">${escapeHtml(_.type)}</td>`,h+=`<td style="padding: 6px;">${v(_.severity)}</td>`,h+=`<td style="padding: 6px;"><span style="color: ${F?"var(--ok-fg)":"var(--bad-fg)"};">${_.status}</span></td>`,h+=`<td style="padding: 6px;">${q}</td>`,h+=`<td style="padding: 6px; color: var(--muted);">${timeAgo(_.createdAt)}</td>`,h+="</tr>"}h+="</table>"}A.innerHTML=h||'<div class="panel-empty"><span class="empty-icon">\u{1F6A8}</span>No incidents recorded yet.</div>'}catch(i){A.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(i.message)}</div>`}}async function e(){try{const n=await(await fetch("/api/v1/health-checks/status")).json(),r=n.success&&n.status?Object.values(n.status):[];if(r.length===0){P.innerHTML='<div class="panel-empty"><span class="empty-icon">\u2699\uFE0F</span>No health checks configured yet. Click "Add Health Check" below.</div>';return}let d='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';d+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 8px; text-align: left;">Service</th><th style="padding: 8px; text-align: left;">Status</th><th style="padding: 8px; text-align: left;">SLA Target</th><th style="padding: 8px; text-align: right;">Actions</th></tr>';for(const h of r){const $=h.status==="up";d+='<tr style="border-bottom: 1px solid var(--border);">',d+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(h.name||h.serviceId)}</td>`,d+=`<td style="padding: 8px; color: ${$?"var(--ok-fg)":"var(--bad-fg)"};">${$?"Up":"Down"}</td>`,d+=`<td style="padding: 8px;">${h.sla?.target?h.sla.target+"%":"-"}</td>`,d+='<td style="padding: 8px; text-align: right;">',d+=`<button onclick="document.dispatchEvent(new CustomEvent('health-edit', {detail:'${escapeHtml(h.serviceId)}'}))" style="padding: 4px 10px; font-size: 0.78rem; margin-right: 4px;">Edit</button>`,d+=`<button onclick="document.dispatchEvent(new CustomEvent('health-delete', {detail:'${escapeHtml(h.serviceId)}'}))" style="padding: 4px 10px; font-size: 0.78rem; color: var(--bad-fg); border-color: var(--bad-fg);">Delete</button>`,d+="</td></tr>"}d+="</table>",P.innerHTML=d}catch(i){P.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(i.message)}</div>`}}function a(i,n,r,d,h,$,U){p=i||null,E.textContent=i?"Edit Health Check":"Add Health Check",document.getElementById("health-form-id").value=i||"",document.getElementById("health-form-id").disabled=!!i,document.getElementById("health-form-name").value=n||"",document.getElementById("health-form-url").value=r||"",document.getElementById("health-form-timeout").value=d||1e4,document.getElementById("health-form-codes").value=h||"200",document.getElementById("health-form-sla").value=$||99.9,document.getElementById("health-form-slow").value=U||5e3,M.style.display="",k.style.display="none"}function o(){M.style.display="none",k.style.display="",p=null}k?.addEventListener("click",()=>a("","","",1e4,"200",99.9,5e3)),z?.addEventListener("click",o),C?.addEventListener("click",async()=>{const i=p||document.getElementById("health-form-id").value.trim();if(!i)return showNotification("Service ID is required","warning");const n=document.getElementById("health-form-url").value.trim();if(!n)return showNotification("URL is required","warning");const r=document.getElementById("health-form-codes").value.split(",").map(h=>parseInt(h.trim())).filter(Boolean),d={name:document.getElementById("health-form-name").value.trim()||i,url:n,timeout:parseInt(document.getElementById("health-form-timeout").value)||1e4,expectedStatusCodes:r.length?r:[200],sla:{target:parseFloat(document.getElementById("health-form-sla").value)||99.9},slowResponseThreshold:parseInt(document.getElementById("health-form-slow").value)|Line truncated
<div style="font-size: 0.82rem; color: var(--muted); margin-top: 4px;">${escapeHtml(q.message)}</div>
<div style="font-size: 0.75rem; color: var(--muted); margin-top: 4px;">Started ${timeAgo(q.createdAt)} \xB7 ${q.occurrences||1} occurrence(s)</div>
</div>`;h+="</div>"}else h+='<div style="padding: 12px; margin-bottom: 16px; border: 1px solid var(--ok-fg)30; border-radius: 8px; background: var(--ok-bg); text-align: center; color: var(--ok-fg); font-size: 0.9rem;">All services operational \u2014 no open incidents</div>';const U=d.success&&d.history?d.history:[];if(U.length>0){h+='<h4 style="margin: 0 0 8px; color: var(--muted);">Incident History</h4>',h+='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',h+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Service</th><th style="padding: 6px; text-align: left;">Type</th><th style="padding: 6px; text-align: left;">Severity</th><th style="padding: 6px; text-align: left;">Status</th><th style="padding: 6px; text-align: left;">Duration</th><th style="padding: 6px; text-align: left;">When</th></tr>';for(const q of U){const F=q.status==="resolved",_=F&&q.duration?q.duration<6e4?Math.round(q.duration/1e3)+"s":Math.round(q.duration/6e4)+"m":"-";h+='<tr style="border-bottom: 1px solid var(--border);">',h+=`<td style="padding: 6px;">${escapeHtml(q.serviceId)}</td>`,h+=`<td style="padding: 6px;">${escapeHtml(q.type)}</td>`,h+=`<td style="padding: 6px;">${g(q.severity)}</td>`,h+=`<td style="padding: 6px;"><span style="color: ${F?"var(--ok-fg)":"var(--bad-fg)"};">${q.status}</span></td>`,h+=`<td style="padding: 6px;">${_}</td>`,h+=`<td style="padding: 6px; color: var(--muted);">${timeAgo(q.createdAt)}</td>`,h+="</tr>"}h+="</table>"}P.innerHTML=h||'<div class="panel-empty"><span class="empty-icon">\u{1F6A8}</span>No incidents recorded yet.</div>'}catch(i){P.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(i.message)}</div>`}}async function e(){try{const n=await(await fetch("/api/v1/health-checks/status")).json(),r=n.success&&n.status?Object.values(n.status):[];if(r.length===0){H.innerHTML='<div class="panel-empty"><span class="empty-icon">\u2699\uFE0F</span>No health checks configured yet. Click "Add Health Check" below.</div>';return}let d='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';d+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 8px; text-align: left;">Service</th><th style="padding: 8px; text-align: left;">Status</th><th style="padding: 8px; text-align: left;">SLA Target</th><th style="padding: 8px; text-align: right;">Actions</th></tr>';for(const h of r){const T=h.status==="up";d+='<tr style="border-bottom: 1px solid var(--border);">',d+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(h.name||h.serviceId)}</td>`,d+=`<td style="padding: 8px; color: ${T?"var(--ok-fg)":"var(--bad-fg)"};">${T?"Up":"Down"}</td>`,d+=`<td style="padding: 8px;">${h.sla?.target?h.sla.target+"%":"-"}</td>`,d+='<td style="padding: 8px; text-align: right;">',d+=`<button onclick="document.dispatchEvent(new CustomEvent('health-edit', {detail:'${escapeHtml(h.serviceId)}'}))" style="padding: 4px 10px; font-size: 0.78rem; margin-right: 4px;">Edit</button>`,d+=`<button onclick="document.dispatchEvent(new CustomEvent('health-delete', {detail:'${escapeHtml(h.serviceId)}'}))" style="padding: 4px 10px; font-size: 0.78rem; color: var(--bad-fg); border-color: var(--bad-fg);">Delete</button>`,d+="</td></tr>"}d+="</table>",H.innerHTML=d}catch(i){H.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(i.message)}</div>`}}function a(i,n,r,d,h,T,U){p=i||null,w.textContent=i?"Edit Health Check":"Add Health Check",document.getElementById("health-form-id").value=i||"",document.getElementById("health-form-id").disabled=!!i,document.getElementById("health-form-name").value=n||"",document.getElementById("health-form-url").value=r||"",document.getElementById("health-form-timeout").value=d||1e4,document.getElementById("health-form-codes").value=h||"200",document.getElementById("health-form-sla").value=T||99.9,document.getElementById("health-form-slow").value=U||5e3,B.style.display="",x.style.display="none"}function o(){B.style.display="none",x.style.display="",p=null}x?.addEventListener("click",()=>a("","","",1e4,"200",99.9,5e3)),M?.addEventListener("click",o),L?.addEventListener("click",async()=>{const i=p||document.getElementById("health-form-id").value.trim();if(!i)return showNotification("Service ID is required","warning");const n=document.getElementById("health-form-url").value.trim();if(!n)return showNotification("URL is required","warning");const r=document.getElementById("health-form-codes").value.split(",").map(h=>parseInt(h.trim())).filter(Boolean),d={name:document.getElementById("health-form-name").value.trim()||i,url:n,timeout:parseInt(document.getElementById("health-form-timeout").value)||1e4,expectedStatusCodes:r.length?r:[200],sla:{target:parseFloat(document.getElementById("health-form-sla").value)||99.9},slowResponseThreshold:parseInt(document.getElementById("health-form-slow").value)|Line truncated
<div class="weather-modal-content" style="min-width: 750px; max-width: 950px;">
<h3>\u2B06\uFE0F Update Management</h3>
<p class="modal-subtitle">
@@ -1652,17 +1652,17 @@ This will replace current configuration, credentials, and data. Containers will
<button id="updates-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("updates-modal"),B=document.getElementById("updates-btn"),j=document.getElementById("updates-cancel"),b=document.getElementById("updates-check-btn"),D=document.getElementById("updates-available-container"),A=document.getElementById("updates-history-container"),P=document.getElementById("updates-auto-container"),R=document.getElementById("updates-last-check");async function k(){try{const t=await(await fetch("/api/v1/updates/available")).json();if(!t.success)throw new Error(t.error);const e=t.updates||[];if(e.length===0){D.innerHTML='<div class="panel-empty"><span class="empty-icon">\u2705</span>All containers are up to date.</div>',R.textContent="",document.getElementById("updates-update-all-btn").style.display="none",document.getElementById("updates-count-badge").style.display="none",window._pendingUpdates=[];return}let a='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';a+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 8px; text-align: left;">Container</th><th style="padding: 8px; text-align: left;">Image</th><th style="padding: 8px; text-align: left;">Current</th><th style="padding: 8px; text-align: left;">Latest</th><th style="padding: 8px; text-align: right;">Actions</th></tr>';for(const n of e){const r=(()=>{const d=window.APPS||[];for(const h of d)if(h.containerId===n.containerId||h.name===n.containerName||h.id===n.containerName)return h.id;return n.containerName})();a+=`<tr data-app-id="${escapeHtml(r)}" style="border-bottom: 1px solid var(--border);">`,a+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(n.containerName)}</td>`,a+=`<td style="padding: 8px; color: var(--muted);">${escapeHtml(n.imageName)}</td>`,a+=`<td style="padding: 8px;"><code style="font-size: 0.78rem; background: var(--bg); padding: 2px 6px; border-radius: 4px;">${escapeHtml(n.currentDigest)}</code></td>`,a+=`<td style="padding: 8px;"><code style="font-size: 0.78rem; background: var(--ok-bg); color: var(--ok-fg); padding: 2px 6px; border-radius: 4px;">${escapeHtml(n.latestDigest)}</code></td>`,a+='<td style="padding: 8px; text-align: right;">',a+=`<button class="update-now-btn" data-id="${escapeHtml(n.containerId)}" data-name="${escapeHtml(n.containerName)}" style="padding: 4px 10px; font-size: 0.78rem; background: var(--accent); color: var(--bg); border-color: var(--accent); margin-right: 4px;">Update</button>`,a+=`<button class="rollback-btn" data-id="${escapeHtml(n.containerId)}" data-name="${escapeHtml(n.containerName)}" style="padding: 4px 10px; font-size: 0.78rem;">Rollback</button>`,a+="</td></tr>"}a+="</table>",D.innerHTML=a,R.textContent=e.length+" update(s) available";const o=document.getElementById("updates-count-badge"),i=document.getElementById("updates-update-all-btn");o&&(o.textContent=e.length+" pending",o.style.display=""),i&&e.length>0&&(i.style.display=""),window._pendingUpdates=e,D.querySelectorAll(".update-now-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.dataset.id,d=n.dataset.name;if(confirm(`Update "${d}" to the latest version? The container will restart.`)){n.textContent="Updating...",n.disabled=!0;try{const $=await(await secureFetch(`/api/v1/updates/update/${encodeURIComponent(r)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({autoRollback:!0})})).json();if($.success)n.textContent="Done!",n.style.background="var(--ok-fg)",setTimeout(()=>k(),2e3);else throw new Error($.error||"Update failed")}catch(h){n.textContent="Failed",n.style.color="var(--bad-fg)",showNotification("Update error: "+h.message,"error"),setTimeout(()=>{n.textContent="Update",n.disabled=!1,n.style.color="",n.style.background=""},3e3)}}})}),D.querySelectorAll(".rollback-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.dataset.id,d=n.dataset.name;if(confirm(`Rollback "${d}" to its previous version?`)){n.textContent="Rolling back...",n.disabled=!0;try{const $=await(await secureFetch(`/api/v1/updates/rollback/${encodeURIComponent(r)}`,{method:"POST"})).json();if($.success)n.textContent="Rolled back!",setTimeout(()=>k(),2e3);else throw new Error($.error||"Rollback failed")}catch(h){n.textContent="Failed",showNotification("Rollback error: "+h.message,"error"),setTimeout(()=>{n.textContent="Rollback",n.disabled=!1},3e3)}}})})}catch(c){D.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(c.message)}</div>`}}async function M(){const c=window._pendingUpdates||[];if(!c.length)return;const t=document.getElementById("updates-update-all-btn");if(!confirm(`Update all ${c.length} containers? Each will restart.`))return;t.textContent="\u23F3 Updating...",t.disabled=!0;let e=0,a=0;for(const o of c)try{(await(await secureFetch(`/api/v1/updates/update/${encodeURIComponent(o.containerId)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({autoRollback:!0})})).json()).success?e++:a++}catch{a++}t.textCLine truncated
</div>`);const b=document.getElementById("updates-modal"),C=document.getElementById("updates-btn"),j=document.getElementById("updates-cancel"),k=document.getElementById("updates-check-btn"),z=document.getElementById("updates-available-container"),P=document.getElementById("updates-history-container"),H=document.getElementById("updates-auto-container"),A=document.getElementById("updates-last-check");async function x(){try{const t=await(await fetch("/api/v1/updates/available")).json();if(!t.success)throw new Error(t.error);const e=t.updates||[];if(e.length===0){z.innerHTML='<div class="panel-empty"><span class="empty-icon">\u2705</span>All containers are up to date.</div>',A.textContent="",document.getElementById("updates-update-all-btn").style.display="none",document.getElementById("updates-count-badge").style.display="none",window._pendingUpdates=[];return}let a='<table style="width: 100%; border-collapse: collapse; font-size: 0.85rem;">';a+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 8px; text-align: left;">Container</th><th style="padding: 8px; text-align: left;">Image</th><th style="padding: 8px; text-align: left;">Current</th><th style="padding: 8px; text-align: left;">Latest</th><th style="padding: 8px; text-align: right;">Actions</th></tr>';for(const n of e){const r=(()=>{const d=window.APPS||[];for(const h of d)if(h.containerId===n.containerId||h.name===n.containerName||h.id===n.containerName)return h.id;return n.containerName})();a+=`<tr data-app-id="${escapeHtml(r)}" style="border-bottom: 1px solid var(--border);">`,a+=`<td style="padding: 8px; font-weight: 500;">${escapeHtml(n.containerName)}</td>`,a+=`<td style="padding: 8px; color: var(--muted);">${escapeHtml(n.imageName)}</td>`,a+=`<td style="padding: 8px;"><code style="font-size: 0.78rem; background: var(--bg); padding: 2px 6px; border-radius: 4px;">${escapeHtml(n.currentDigest)}</code></td>`,a+=`<td style="padding: 8px;"><code style="font-size: 0.78rem; background: var(--ok-bg); color: var(--ok-fg); padding: 2px 6px; border-radius: 4px;">${escapeHtml(n.latestDigest)}</code></td>`,a+='<td style="padding: 8px; text-align: right;">',a+=`<button class="update-now-btn" data-id="${escapeHtml(n.containerId)}" data-name="${escapeHtml(n.containerName)}" style="padding: 4px 10px; font-size: 0.78rem; background: var(--accent); color: var(--bg); border-color: var(--accent); margin-right: 4px;">Update</button>`,a+=`<button class="rollback-btn" data-id="${escapeHtml(n.containerId)}" data-name="${escapeHtml(n.containerName)}" style="padding: 4px 10px; font-size: 0.78rem;">Rollback</button>`,a+="</td></tr>"}a+="</table>",z.innerHTML=a,A.textContent=e.length+" update(s) available";const o=document.getElementById("updates-count-badge"),i=document.getElementById("updates-update-all-btn");o&&(o.textContent=e.length+" pending",o.style.display=""),i&&e.length>0&&(i.style.display=""),window._pendingUpdates=e,z.querySelectorAll(".update-now-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.dataset.id,d=n.dataset.name;if(confirm(`Update "${d}" to the latest version? The container will restart.`)){n.textContent="Updating...",n.disabled=!0;try{const T=await(await secureFetch(`/api/v1/updates/update/${encodeURIComponent(r)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({autoRollback:!0})})).json();if(T.success)n.textContent="Done!",n.style.background="var(--ok-fg)",setTimeout(()=>x(),2e3);else throw new Error(T.error||"Update failed")}catch(h){n.textContent="Failed",n.style.color="var(--bad-fg)",showNotification("Update error: "+h.message,"error"),setTimeout(()=>{n.textContent="Update",n.disabled=!1,n.style.color="",n.style.background=""},3e3)}}})}),z.querySelectorAll(".rollback-btn").forEach(n=>{n.addEventListener("click",async()=>{const r=n.dataset.id,d=n.dataset.name;if(confirm(`Rollback "${d}" to its previous version?`)){n.textContent="Rolling back...",n.disabled=!0;try{const T=await(await secureFetch(`/api/v1/updates/rollback/${encodeURIComponent(r)}`,{method:"POST"})).json();if(T.success)n.textContent="Rolled back!",setTimeout(()=>x(),2e3);else throw new Error(T.error||"Rollback failed")}catch(h){n.textContent="Failed",showNotification("Rollback error: "+h.message,"error"),setTimeout(()=>{n.textContent="Rollback",n.disabled=!1},3e3)}}})})}catch(c){z.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(c.message)}</div>`}}async function B(){const c=window._pendingUpdates||[];if(!c.length)return;const t=document.getElementById("updates-update-all-btn");if(!confirm(`Update all ${c.length} containers? Each will restart.`))return;t.textContent="\u23F3 Updating...",t.disabled=!0;let e=0,a=0;for(const o of c)try{(await(await secureFetch(`/api/v1/updates/update/${encodeURIComponent(o.containerId)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({autoRollback:!0})})).json()).success?e++:a++}catch{a++}t.textCLine truncated
<select class="auto-schedule" data-id="${escapeHtml(h)}" style="padding: 4px 8px; border-radius: 4px; border: 1px solid var(--border); background: var(--bg); color: var(--fg); font-size: 0.82rem;">
<option value=""${U?"":" selected"}>Disabled</option>
<option value="daily"${U==="daily"?" selected":""}>Daily</option>
<option value="weekly"${U==="weekly"?" selected":""}>Weekly</option>
<option value="monthly"${U==="monthly"?" selected":""}>Monthly</option>
</select></td>`,n+=`<td style="padding: 8px;"><input type="text" class="auto-window" data-id="${escapeHtml(h)}" value="${escapeHtml(F)}" placeholder="02:00-04:00" style="width: 90px; padding: 3px 6px; font-size: 0.78rem; border: 1px solid var(--border); border-radius: 4px; background: var(--bg); color: var(--fg);" /></td>`,n+=`<td style="padding: 8px;"><input type="checkbox" class="auto-rollback" data-id="${escapeHtml(h)}"${_?" checked":""} /></td>`,n+=`<td style="padding: 8px; font-size: 0.78rem; color: var(--muted);">${q}</td>`,n+=`<td style="padding: 8px; text-align: right;"><button class="save-auto-btn" data-id="${escapeHtml(h)}" data-name="${escapeHtml(d)}" style="padding: 4px 10px; font-size: 0.78rem;">Save</button></td>`,n+="</tr>"}n+="</table>",P.innerHTML=n,P.querySelectorAll(".save-auto-btn").forEach(r=>{r.addEventListener("click",async()=>{const d=r.dataset.id,h=r.closest("tr"),$=h.querySelector(".auto-schedule").value,U=h.querySelector(".auto-rollback").checked,_=h.querySelector(".auto-window").value.trim();r.textContent="Saving...",r.disabled=!0;try{const q=await(await secureFetch(`/api/v1/updates/auto-update/${encodeURIComponent(d)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({enabled:!!$,schedule:$||"weekly",autoRollback:U,maintenanceWindow:_||void 0})})).json();if(q.success)r.textContent="\u2713 Saved";else throw new Error(q.error)}catch(F){r.textContent="\u2717 Error",showNotification("Save error: "+F.message,"error")}setTimeout(()=>{r.textContent="Save",r.disabled=!1},2e3)})})}catch(c){P.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(c.message)}</div>`}}const N=document.getElementById("dashcaddy-current-version"),x=document.getElementById("dashcaddy-update-badge"),I=document.getElementById("dashcaddy-update-details"),H=document.getElementById("dashcaddy-new-version"),m=document.getElementById("dashcaddy-changelog"),L=document.getElementById("dashcaddy-apply-btn"),T=document.getElementById("dashcaddy-check-btn"),O=document.getElementById("dashcaddy-rollback-btn"),u=document.getElementById("dashcaddy-status-bar"),g=document.getElementById("dashcaddy-history-container");let S=null;function y(c,t){u&&(u.style.display="block",u.style.background=t==="error"?"var(--bad-bg)":t==="success"?"var(--ok-bg)":"var(--bg)",u.style.color=t==="error"?"var(--bad-fg)":t==="success"?"var(--ok-fg)":"var(--fg)",u.textContent=c)}async function w(){try{const t=await(await fetch("/api/v1/system/version")).json();if(t.success){const e=t.commit&&t.commit!=="unknown"?t.commit:null;N.textContent="v"+t.version+(e?" ("+e.substring(0,7)+")":"")}}catch{N.textContent="Unable to fetch version"}}async function s(c){c||(T.textContent="Checking...",T.disabled=!0);try{const e=await(await fetch("/api/v1/system/update-check")).json();if(S=e,e.success&&e.available&&e.remote){x.style.display="",I.style.display="",H.textContent="v"+e.remote.version,m.textContent=e.remote.changelog||"No changelog available.";const a=document.getElementById("updates-btn");if(a&&!a.querySelector(".update-dot")){const i=document.createElement("span");i.className="update-dot",i.style.cssText="position:absolute;top:2px;right:2px;width:8px;height:8px;border-radius:50%;background:var(--accent);",a.style.position="relative",a.appendChild(i)}const o=document.getElementById("updates-dashcaddy-tab");if(o&&!o.querySelector(".update-dot")){const i=document.createElement("span");i.className="update-dot",i.style.cssText="display:inline-block;width:6px;height:6px;border-radius:50%;background:var(--accent);margin-left:4px;vertical-align:middle;",o.appendChild(i)}}else x.style.display="none",I.style.display="none",await w(),c||y("You are running the latest version.","success");c||(T.textContent="Check for Updates",T.disabled=!1)}catch(t){c||(y("Failed to check: "+t.message,"error"),T.textContent="Check for Updates",T.disabled=!1)}}async function p(){if(!confirm("Apply DashCaddy update? The API container will restart."))return!1;L.textContent="Updating...",L.disabled=!0,y("Downloading and applying update...","info");try{const t=await(await secureFetch("/api/v1/system/update-apply",{method:"POST"})).json();if(t.success)return y("Update initiated: v"+(t.fromVersion||"?")+" \u2192 v"+(t.toVersion||"?")+". The container will restart shortly.","success"),L.textContent="Applied!",document.querySelectorAll(".update-dot").forEach(e=>e.remove()),!0;throw new Error(t.error||"Update failed")}catch(c){throw y("Update failed: "+c.message,"error"),L.textContent="Update Now",L.disabled=!1,c}}async function l(){try{const t=await(await fetch("/api/v1/system/update-history")).json(),e=t.success&&t.history?t.history:[];if(e.length===0){g.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4E6}</span>No self-update history.</div>';return}let a='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';a+='<tr style="border-bottom: 1px solid var(--border); color: var(--mutLine truncated
</select></td>`,n+=`<td style="padding: 8px;"><input type="text" class="auto-window" data-id="${escapeHtml(h)}" value="${escapeHtml(F)}" placeholder="02:00-04:00" style="width: 90px; padding: 3px 6px; font-size: 0.78rem; border: 1px solid var(--border); border-radius: 4px; background: var(--bg); color: var(--fg);" /></td>`,n+=`<td style="padding: 8px;"><input type="checkbox" class="auto-rollback" data-id="${escapeHtml(h)}"${q?" checked":""} /></td>`,n+=`<td style="padding: 8px; font-size: 0.78rem; color: var(--muted);">${_}</td>`,n+=`<td style="padding: 8px; text-align: right;"><button class="save-auto-btn" data-id="${escapeHtml(h)}" data-name="${escapeHtml(d)}" style="padding: 4px 10px; font-size: 0.78rem;">Save</button></td>`,n+="</tr>"}n+="</table>",H.innerHTML=n,H.querySelectorAll(".save-auto-btn").forEach(r=>{r.addEventListener("click",async()=>{const d=r.dataset.id,h=r.closest("tr"),T=h.querySelector(".auto-schedule").value,U=h.querySelector(".auto-rollback").checked,q=h.querySelector(".auto-window").value.trim();r.textContent="Saving...",r.disabled=!0;try{const _=await(await secureFetch(`/api/v1/updates/auto-update/${encodeURIComponent(d)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({enabled:!!T,schedule:T||"weekly",autoRollback:U,maintenanceWindow:q||void 0})})).json();if(_.success)r.textContent="\u2713 Saved";else throw new Error(_.error)}catch(F){r.textContent="\u2717 Error",showNotification("Save error: "+F.message,"error")}setTimeout(()=>{r.textContent="Save",r.disabled=!1},2e3)})})}catch(c){H.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(c.message)}</div>`}}const $=document.getElementById("dashcaddy-current-version"),u=document.getElementById("dashcaddy-update-badge"),v=document.getElementById("dashcaddy-update-details"),D=document.getElementById("dashcaddy-new-version"),I=document.getElementById("dashcaddy-changelog"),R=document.getElementById("dashcaddy-apply-btn"),N=document.getElementById("dashcaddy-check-btn"),O=document.getElementById("dashcaddy-rollback-btn"),m=document.getElementById("dashcaddy-status-bar"),y=document.getElementById("dashcaddy-history-container");let S=null;function f(c,t){m&&(m.style.display="block",m.style.background=t==="error"?"var(--bad-bg)":t==="success"?"var(--ok-bg)":"var(--bg)",m.style.color=t==="error"?"var(--bad-fg)":t==="success"?"var(--ok-fg)":"var(--fg)",m.textContent=c)}async function E(){try{const t=await(await fetch("/api/v1/system/version")).json();if(t.success){const e=t.commit&&t.commit!=="unknown"?t.commit:null;$.textContent="v"+t.version+(e?" ("+e.substring(0,7)+")":"")}}catch{$.textContent="Unable to fetch version"}}async function s(c){c||(N.textContent="Checking...",N.disabled=!0);try{const e=await(await fetch("/api/v1/system/update-check")).json();if(S=e,e.success&&e.available&&e.remote){u.style.display="",v.style.display="",D.textContent="v"+e.remote.version,I.textContent=e.remote.changelog||"No changelog available.";const a=document.getElementById("updates-btn");if(a&&!a.querySelector(".update-dot")){const i=document.createElement("span");i.className="update-dot",i.style.cssText="position:absolute;top:2px;right:2px;width:8px;height:8px;border-radius:50%;background:var(--accent);",a.style.position="relative",a.appendChild(i)}const o=document.getElementById("updates-dashcaddy-tab");if(o&&!o.querySelector(".update-dot")){const i=document.createElement("span");i.className="update-dot",i.style.cssText="display:inline-block;width:6px;height:6px;border-radius:50%;background:var(--accent);margin-left:4px;vertical-align:middle;",o.appendChild(i)}}else u.style.display="none",v.style.display="none",await E(),c||f("You are running the latest version.","success");c||(N.textContent="Check for Updates",N.disabled=!1)}catch(t){c||(f("Failed to check: "+t.message,"error"),N.textContent="Check for Updates",N.disabled=!1)}}async function p(){if(!confirm("Apply DashCaddy update? The API container will restart."))return!1;R.textContent="Updating...",R.disabled=!0,f("Downloading and applying update...","info");try{const t=await(await secureFetch("/api/v1/system/update-apply",{method:"POST"})).json();if(t.success)return f("Update initiated: v"+(t.fromVersion||"?")+" \u2192 v"+(t.toVersion||"?")+". The container will restart shortly.","success"),R.textContent="Applied!",document.querySelectorAll(".update-dot").forEach(e=>e.remove()),!0;throw new Error(t.error||"Update failed")}catch(c){throw f("Update failed: "+c.message,"error"),R.textContent="Update Now",R.disabled=!1,c}}async function l(){try{const t=await(await fetch("/api/v1/system/update-history")).json(),e=t.success&&t.history?t.history:[];if(e.length===0){y.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4E6}</span>No self-update history.</div>';return}let a='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';a+='<tr style="border-bottom: 1px solid var(--border); color: var(--mutLine truncated
`+e.join(`
`)+`
Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification("Invalid version: "+a,"error");return}if(!confirm("Rollback DashCaddy to v"+a+"? The container will restart."))return;y("Rolling back to v"+a+"...","info");const i=await(await secureFetch("/api/v1/system/rollback",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({version:a})})).json();if(i.success)y("Rollback to v"+a+" initiated. Container will restart.","success");else throw new Error(i.error||"Rollback failed")}catch(c){y("Rollback failed: "+c.message,"error")}}T?.addEventListener("click",()=>s(!1)),L?.addEventListener("click",()=>p().catch(()=>{})),O?.addEventListener("click",v),b?.addEventListener("click",E),B?.addEventListener("click",()=>{f?.classList.add("show"),k()}),wireModal(f,j),window.openUpdateModal=function(c){f?.classList.add("show"),k().then(()=>{if(!c)return;const t=D.querySelector(`[data-app-id="${c}"]`);t&&(t.scrollIntoView({behavior:"smooth",block:"center"}),t.style.background="rgba(249,115,22,0.15)",setTimeout(()=>{t.style.background=""},3e3))})},document.querySelector('[data-panel="updates-history"]')?.addEventListener("click",z),document.querySelector('[data-panel="updates-auto"]')?.addEventListener("click",C),document.querySelector('[data-panel="updates-dashcaddy"]')?.addEventListener("click",()=>{w(),l(),S||s(!0)}),window.dcApplyUpdate=p,window.dcCheckForUpdate=s,setTimeout(()=>s(!0),5e3)})(),(function(){injectModal("docker-resources-modal",`<div id="docker-resources-modal" class="weather-modal">
Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification("Invalid version: "+a,"error");return}if(!confirm("Rollback DashCaddy to v"+a+"? The container will restart."))return;f("Rolling back to v"+a+"...","info");const i=await(await secureFetch("/api/v1/system/rollback",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({version:a})})).json();if(i.success)f("Rollback to v"+a+" initiated. Container will restart.","success");else throw new Error(i.error||"Rollback failed")}catch(c){f("Rollback failed: "+c.message,"error")}}N?.addEventListener("click",()=>s(!1)),R?.addEventListener("click",()=>p().catch(()=>{})),O?.addEventListener("click",g),k?.addEventListener("click",w),C?.addEventListener("click",()=>{b?.classList.add("show"),x()}),wireModal(b,j),window.openUpdateModal=function(c){b?.classList.add("show"),x().then(()=>{if(!c)return;const t=z.querySelector(`[data-app-id="${c}"]`);t&&(t.scrollIntoView({behavior:"smooth",block:"center"}),t.style.background="rgba(249,115,22,0.15)",setTimeout(()=>{t.style.background=""},3e3))})},document.querySelector('[data-panel="updates-history"]')?.addEventListener("click",M),document.querySelector('[data-panel="updates-auto"]')?.addEventListener("click",L),document.querySelector('[data-panel="updates-dashcaddy"]')?.addEventListener("click",()=>{E(),l(),S||s(!0)}),window.dcApplyUpdate=p,window.dcCheckForUpdate=s,setTimeout(()=>s(!0),5e3)})(),(function(){injectModal("docker-resources-modal",`<div id="docker-resources-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 750px; max-width: 950px;">
<h3>\u{1F433} Docker Resources</h3>
<p class="modal-subtitle">Manage volumes, networks, and view disk usage.</p>
@@ -1711,7 +1711,7 @@ Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification
<button id="dr-close">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("docker-resources-modal"),B=document.getElementById("docker-resources-btn"),j=document.getElementById("dr-close");function b(R){if(!R||R===0)return"0 B";const k=["B","KB","MB","GB","TB"],M=Math.floor(Math.log(Math.abs(R))/Math.log(1024));return(R/Math.pow(1024,M)).toFixed(1)+" "+k[M]}async function D(){const R=document.getElementById("dr-vol-list");try{const M=(await getJSON("/api/v1/docker/volumes")).volumes||[];if(M.length===0){R.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4E6}</span>No volumes found.</div>';return}let E='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';E+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Name</th><th style="padding: 6px;">Driver</th><th style="padding: 6px;">Scope</th><th style="padding: 6px; text-align: right;">Actions</th></tr>';for(const z of M){const C=z.name==="buildkit"||z.name.length===64;E+='<tr style="border-bottom: 1px solid var(--border);">',E+=`<td style="padding: 6px; font-weight: 500; max-width: 300px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="${escapeHtml(z.name)}">${escapeHtml(z.name.length>40?z.name.substring(0,37)+"...":z.name)}</td>`,E+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(z.driver)}</td>`,E+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(z.scope)}</td>`,E+='<td style="padding: 6px; text-align: right;">',C||(E+=`<button class="dr-vol-del" data-name="${escapeHtml(z.name)}" style="padding: 3px 8px; font-size: 0.75rem; color: var(--bad-fg);">Delete</button>`),E+="</td></tr>"}E+="</table>",R.innerHTML=E,R.querySelectorAll(".dr-vol-del").forEach(z=>{z.addEventListener("click",async()=>{if(confirm(`Delete volume "${z.dataset.name}"? Data will be lost.`)){z.textContent="...",z.disabled=!0;try{await deleteAPI(`/api/v1/docker/volumes/${encodeURIComponent(z.dataset.name)}?force=true`),D()}catch(C){showNotification("Delete failed: "+C.message,"error"),z.textContent="Delete",z.disabled=!1}}})})}catch(k){R.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(k.message)}</div>`}}document.getElementById("dr-vol-create")?.addEventListener("click",async()=>{const R=document.getElementById("dr-vol-name"),k=R.value.trim();if(!k){showNotification("Enter a volume name","warning");return}try{await postJSON("/api/v1/docker/volumes",{name:k}),R.value="",showNotification(`Volume "${k}" created`,"success"),D()}catch(M){showNotification("Create failed: "+M.message,"error")}});async function A(){const R=document.getElementById("dr-net-list");try{const M=(await getJSON("/api/v1/docker/networks")).networks||[];if(M.length===0){R.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F310}</span>No networks found.</div>';return}let E='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';E+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Name</th><th style="padding: 6px;">Driver</th><th style="padding: 6px;">Scope</th><th style="padding: 6px;">Containers</th><th style="padding: 6px; text-align: right;">Actions</th></tr>';for(const z of M){const C=["bridge","host","none"].includes(z.name);E+='<tr style="border-bottom: 1px solid var(--border);">',E+=`<td style="padding: 6px; font-weight: 500;">${escapeHtml(z.name)}</td>`,E+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(z.driver)}</td>`,E+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(z.scope)}</td>`,E+=`<td style="padding: 6px; text-align: center;">${z.containers}</td>`,E+='<td style="padding: 6px; text-align: right;">',C||(E+=`<button class="dr-net-del" data-id="${escapeHtml(z.id)}" data-name="${escapeHtml(z.name)}" style="padding: 3px 8px; font-size: 0.75rem; color: var(--bad-fg);">Delete</button>`),E+="</td></tr>"}E+="</table>",R.innerHTML=E,R.querySelectorAll(".dr-net-del").forEach(z=>{z.addEventListener("click",async()=>{if(confirm(`Delete network "${z.dataset.name}"?`)){z.textContent="...",z.disabled=!0;try{await deleteAPI(`/api/v1/docker/networks/${encodeURIComponent(z.dataset.id)}`),A()}catch(C){showNotification("Delete failed: "+C.message,"error"),z.textContent="Delete",z.disabled=!1}}})})}catch(k){R.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(k.message)}</div>`}}document.getElementById("dr-net-create")?.addEventListener("click",async()=>{const R=document.getElementById("dr-net-name"),k=document.getElementById("dr-net-driver"),M=R.value.trim();if(!M){showNotification("Enter a network name","warning");return}try{await postJSON("/api/v1/docker/networks",{name:M,driver:k.value}),R.value="",showNotification(`Network "${M}" created`,"success"),A()}catch(E){showNotification("Create failed: "+E.message,"error")}});async fuLine truncated
</div>`);const b=document.getElementById("docker-resources-modal"),C=document.getElementById("docker-resources-btn"),j=document.getElementById("dr-close");function k(A){if(!A||A===0)return"0 B";const x=["B","KB","MB","GB","TB"],B=Math.floor(Math.log(Math.abs(A))/Math.log(1024));return(A/Math.pow(1024,B)).toFixed(1)+" "+x[B]}async function z(){const A=document.getElementById("dr-vol-list");try{const B=(await getJSON("/api/v1/docker/volumes")).volumes||[];if(B.length===0){A.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F4E6}</span>No volumes found.</div>';return}let w='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';w+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Name</th><th style="padding: 6px;">Driver</th><th style="padding: 6px;">Scope</th><th style="padding: 6px; text-align: right;">Actions</th></tr>';for(const M of B){const L=M.name==="buildkit"||M.name.length===64;w+='<tr style="border-bottom: 1px solid var(--border);">',w+=`<td style="padding: 6px; font-weight: 500; max-width: 300px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap;" title="${escapeHtml(M.name)}">${escapeHtml(M.name.length>40?M.name.substring(0,37)+"...":M.name)}</td>`,w+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(M.driver)}</td>`,w+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(M.scope)}</td>`,w+='<td style="padding: 6px; text-align: right;">',L||(w+=`<button class="dr-vol-del" data-name="${escapeHtml(M.name)}" style="padding: 3px 8px; font-size: 0.75rem; color: var(--bad-fg);">Delete</button>`),w+="</td></tr>"}w+="</table>",A.innerHTML=w,A.querySelectorAll(".dr-vol-del").forEach(M=>{M.addEventListener("click",async()=>{if(confirm(`Delete volume "${M.dataset.name}"? Data will be lost.`)){M.textContent="...",M.disabled=!0;try{await deleteAPI(`/api/v1/docker/volumes/${encodeURIComponent(M.dataset.name)}?force=true`),z()}catch(L){showNotification("Delete failed: "+L.message,"error"),M.textContent="Delete",M.disabled=!1}}})})}catch(x){A.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(x.message)}</div>`}}document.getElementById("dr-vol-create")?.addEventListener("click",async()=>{const A=document.getElementById("dr-vol-name"),x=A.value.trim();if(!x){showNotification("Enter a volume name","warning");return}try{await postJSON("/api/v1/docker/volumes",{name:x}),A.value="",showNotification(`Volume "${x}" created`,"success"),z()}catch(B){showNotification("Create failed: "+B.message,"error")}});async function P(){const A=document.getElementById("dr-net-list");try{const B=(await getJSON("/api/v1/docker/networks")).networks||[];if(B.length===0){A.innerHTML='<div class="panel-empty"><span class="empty-icon">\u{1F310}</span>No networks found.</div>';return}let w='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">';w+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);"><th style="padding: 6px; text-align: left;">Name</th><th style="padding: 6px;">Driver</th><th style="padding: 6px;">Scope</th><th style="padding: 6px;">Containers</th><th style="padding: 6px; text-align: right;">Actions</th></tr>';for(const M of B){const L=["bridge","host","none"].includes(M.name);w+='<tr style="border-bottom: 1px solid var(--border);">',w+=`<td style="padding: 6px; font-weight: 500;">${escapeHtml(M.name)}</td>`,w+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(M.driver)}</td>`,w+=`<td style="padding: 6px; text-align: center; color: var(--muted);">${escapeHtml(M.scope)}</td>`,w+=`<td style="padding: 6px; text-align: center;">${M.containers}</td>`,w+='<td style="padding: 6px; text-align: right;">',L||(w+=`<button class="dr-net-del" data-id="${escapeHtml(M.id)}" data-name="${escapeHtml(M.name)}" style="padding: 3px 8px; font-size: 0.75rem; color: var(--bad-fg);">Delete</button>`),w+="</td></tr>"}w+="</table>",A.innerHTML=w,A.querySelectorAll(".dr-net-del").forEach(M=>{M.addEventListener("click",async()=>{if(confirm(`Delete network "${M.dataset.name}"?`)){M.textContent="...",M.disabled=!0;try{await deleteAPI(`/api/v1/docker/networks/${encodeURIComponent(M.dataset.id)}`),P()}catch(L){showNotification("Delete failed: "+L.message,"error"),M.textContent="Delete",M.disabled=!1}}})})}catch(x){A.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(x.message)}</div>`}}document.getElementById("dr-net-create")?.addEventListener("click",async()=>{const A=document.getElementById("dr-net-name"),x=document.getElementById("dr-net-driver"),B=A.value.trim();if(!B){showNotification("Enter a network name","warning");return}try{await postJSON("/api/v1/docker/networks",{name:B,driver:x.value}),A.value="",showNotification(`Network "${B}" created`,"success"),P()}catch(w){showNotification("Create failed: "+w.message,"error")}});async fuLine truncated
<div class="weather-modal-content" style="min-width: 650px; max-width: 800px;">
<h3>\u{1F4E6} Import Docker Compose</h3>
<p class="modal-subtitle">Paste a docker-compose.yml to import and deploy services.</p>
@@ -1752,8 +1752,8 @@ Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification
<div id="compose-progress-content"></div>
</div>
</div>
</div>`);const f=document.getElementById("compose-import-modal"),B=document.getElementById("compose-import-btn"),j=document.getElementById("compose-cancel");wireModal(f,j);let b=null;function D(P){document.getElementById("compose-step-paste").style.display=P==="paste"?"":"none",document.getElementById("compose-step-preview").style.display=P==="preview"?"":"none",document.getElementById("compose-step-progress").style.display=P==="progress"?"":"none"}B?.addEventListener("click",()=>{D("paste"),b=null,document.getElementById("compose-yaml").value="",document.getElementById("compose-stack-name").value="",f?.classList.add("show")}),document.getElementById("compose-file-upload")?.addEventListener("change",P=>{const R=P.target.files[0];if(!R)return;const k=new FileReader;k.onload=()=>{document.getElementById("compose-yaml").value=k.result},k.readAsText(R)}),document.getElementById("compose-parse-btn")?.addEventListener("click",async()=>{const P=document.getElementById("compose-yaml").value.trim(),R=document.getElementById("compose-stack-name").value.trim()||"stack";if(!P){showNotification("Paste a docker-compose.yml","warning");return}const k=document.getElementById("compose-parse-btn"),M=k.textContent;k.textContent="Parsing...",k.disabled=!0;try{const E=await postJSON("/api/v1/apps/import-compose",{yaml:P,stackName:R});b=E,b.stackName=R,A(E),D("preview")}catch(E){showNotification("Parse failed: "+E.message,"error")}finally{k.textContent=M,k.disabled=!1}});function A(P){const R=document.getElementById("compose-preview-content");let k="";P.networks&&P.networks.length>0&&(k+=`<div style="margin-bottom: 12px; font-size: 0.82rem; color: var(--muted);">Networks: ${P.networks.map(M=>`<code>${escapeHtml(M)}</code>`).join(", ")}</div>`),P.volumes&&P.volumes.length>0&&(k+=`<div style="margin-bottom: 12px; font-size: 0.82rem; color: var(--muted);">Volumes: ${P.volumes.map(M=>`<code>${escapeHtml(M)}</code>`).join(", ")}</div>`),k+=`<div style="font-weight: 600; margin-bottom: 8px;">${P.services.length} service(s)</div>`,k+='<div class="scroll-container" style="max-height: 350px;">';for(const M of P.services){const E=M.skip?"var(--bad-fg)":"var(--border)";if(k+=`<div style="padding: 10px 14px; border: 1px solid ${E}; border-radius: 8px; margin-bottom: 8px; background: var(--bg);">`,k+=`<div style="font-weight: 600; font-size: 0.9rem;">${escapeHtml(M.name)}`,M.skip&&(k+=` <span style="color: var(--bad-fg); font-weight: 400; font-size: 0.78rem;">\u2014 skipped: ${escapeHtml(M.reason)}</span>`),k+="</div>",!M.skip&&(k+=`<div style="font-size: 0.8rem; color: var(--muted); margin-top: 4px;">Image: <code>${escapeHtml(M.image)}</code></div>`,M.ports?.length&&(k+=`<div style="font-size: 0.8rem; color: var(--muted);">Ports: ${M.ports.map(z=>`${z.host}:${z.container}`).join(", ")}</div>`),M.volumes?.length&&(k+=`<div style="font-size: 0.8rem; color: var(--muted);">Volumes: ${M.volumes.length}</div>`),Object.keys(M.environment||{}).length&&(k+=`<div style="font-size: 0.8rem; color: var(--muted);">Env vars: ${Object.keys(M.environment).length}</div>`),M.envFileWarning&&(k+=`<div style="font-size: 0.78rem; color: var(--bad-fg);">\u26A0 ${escapeHtml(M.envFileWarning)}</div>`),M.resources?.cpus||M.resources?.memory)){const z=[];M.resources.cpus&&z.push(`CPU: ${M.resources.cpus}`),M.resources.memory&&z.push(`Mem: ${M.resources.memory}MB`),k+=`<div style="font-size: 0.8rem; color: var(--muted);">Limits: ${z.join(", ")}</div>`}k+="</div>"}k+="</div>",R.innerHTML=k}document.getElementById("compose-back-btn")?.addEventListener("click",()=>D("paste")),document.getElementById("compose-deploy-btn")?.addEventListener("click",async()=>{if(!b)return;const P=document.getElementById("compose-deploy-btn");P.textContent="Deploying...",P.disabled=!0,D("progress");const R=document.getElementById("compose-progress-content");R.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Deploying services...</div>';try{const k=await postJSON("/api/v1/apps/deploy-compose",{services:b.services,networks:b.networks,stackName:b.stackName});let M=`<div style="font-weight: 600; margin-bottom: 12px;">Stack "${escapeHtml(k.stackName)}" \u2014 Deployment Complete</div>`;M+='<div class="scroll-container" style="max-height: 350px;">';for(const E of k.results){const z=E.status==="deployed"||E.status==="created"?"\u2705":E.status==="exists"?"\u26A1":E.status==="skipped"?"\u23ED":"\u274C";M+='<div style="padding: 8px 12px; border-bottom: 1px solid var(--border); font-size: 0.85rem;">',M+=`${z} <strong>${escapeHtml(E.name)}</strong> (${E.type}) \u2014 ${escapeHtml(E.status)}`,E.error&&(M+=` <span style="color: var(--bad-fg);">${escapeHtml(E.error)}</span>`),E.subdomain&&(M+=` \u2192 <code>${escapeHtml(E.subdomain)}</code>`),E.reason&&(M+=` <span style="color: var(--muted);">(${escapeHtml(E.reason)})</span>`),M+="</div>"}M+="</div>",M+='<div class="weather-modal-buttons modal-footer-bar" style="margin-top: 16px;"><button id="compose-done-btn">Done</button></div>Line truncated
<div class="weather-modal-buttons modal-footer-bar" style="margin-top: 16px;"><button id="compose-retry-btn">Back</button></div>`,document.getElementById("compose-retry-btn")?.addEventListener("click",()=>D("paste"))}finally{P.textContent="Deploy All",P.disabled=!1}})})(),(function(){injectModal("exec-modal",`<div id="exec-modal" class="weather-modal">
</div>`);const b=document.getElementById("compose-import-modal"),C=document.getElementById("compose-import-btn"),j=document.getElementById("compose-cancel");wireModal(b,j);let k=null;function z(H){document.getElementById("compose-step-paste").style.display=H==="paste"?"":"none",document.getElementById("compose-step-preview").style.display=H==="preview"?"":"none",document.getElementById("compose-step-progress").style.display=H==="progress"?"":"none"}C?.addEventListener("click",()=>{z("paste"),k=null,document.getElementById("compose-yaml").value="",document.getElementById("compose-stack-name").value="",b?.classList.add("show")}),document.getElementById("compose-file-upload")?.addEventListener("change",H=>{const A=H.target.files[0];if(!A)return;const x=new FileReader;x.onload=()=>{document.getElementById("compose-yaml").value=x.result},x.readAsText(A)}),document.getElementById("compose-parse-btn")?.addEventListener("click",async()=>{const H=document.getElementById("compose-yaml").value.trim(),A=document.getElementById("compose-stack-name").value.trim()||"stack";if(!H){showNotification("Paste a docker-compose.yml","warning");return}const x=document.getElementById("compose-parse-btn"),B=x.textContent;x.textContent="Parsing...",x.disabled=!0;try{const w=await postJSON("/api/v1/apps/import-compose",{yaml:H,stackName:A});k=w,k.stackName=A,P(w),z("preview")}catch(w){showNotification("Parse failed: "+w.message,"error")}finally{x.textContent=B,x.disabled=!1}});function P(H){const A=document.getElementById("compose-preview-content");let x="";H.networks&&H.networks.length>0&&(x+=`<div style="margin-bottom: 12px; font-size: 0.82rem; color: var(--muted);">Networks: ${H.networks.map(B=>`<code>${escapeHtml(B)}</code>`).join(", ")}</div>`),H.volumes&&H.volumes.length>0&&(x+=`<div style="margin-bottom: 12px; font-size: 0.82rem; color: var(--muted);">Volumes: ${H.volumes.map(B=>`<code>${escapeHtml(B)}</code>`).join(", ")}</div>`),x+=`<div style="font-weight: 600; margin-bottom: 8px;">${H.services.length} service(s)</div>`,x+='<div class="scroll-container" style="max-height: 350px;">';for(const B of H.services){const w=B.skip?"var(--bad-fg)":"var(--border)";if(x+=`<div style="padding: 10px 14px; border: 1px solid ${w}; border-radius: 8px; margin-bottom: 8px; background: var(--bg);">`,x+=`<div style="font-weight: 600; font-size: 0.9rem;">${escapeHtml(B.name)}`,B.skip&&(x+=` <span style="color: var(--bad-fg); font-weight: 400; font-size: 0.78rem;">\u2014 skipped: ${escapeHtml(B.reason)}</span>`),x+="</div>",!B.skip&&(x+=`<div style="font-size: 0.8rem; color: var(--muted); margin-top: 4px;">Image: <code>${escapeHtml(B.image)}</code></div>`,B.ports?.length&&(x+=`<div style="font-size: 0.8rem; color: var(--muted);">Ports: ${B.ports.map(M=>`${M.host}:${M.container}`).join(", ")}</div>`),B.volumes?.length&&(x+=`<div style="font-size: 0.8rem; color: var(--muted);">Volumes: ${B.volumes.length}</div>`),Object.keys(B.environment||{}).length&&(x+=`<div style="font-size: 0.8rem; color: var(--muted);">Env vars: ${Object.keys(B.environment).length}</div>`),B.envFileWarning&&(x+=`<div style="font-size: 0.78rem; color: var(--bad-fg);">\u26A0 ${escapeHtml(B.envFileWarning)}</div>`),B.resources?.cpus||B.resources?.memory)){const M=[];B.resources.cpus&&M.push(`CPU: ${B.resources.cpus}`),B.resources.memory&&M.push(`Mem: ${B.resources.memory}MB`),x+=`<div style="font-size: 0.8rem; color: var(--muted);">Limits: ${M.join(", ")}</div>`}x+="</div>"}x+="</div>",A.innerHTML=x}document.getElementById("compose-back-btn")?.addEventListener("click",()=>z("paste")),document.getElementById("compose-deploy-btn")?.addEventListener("click",async()=>{if(!k)return;const H=document.getElementById("compose-deploy-btn");H.textContent="Deploying...",H.disabled=!0,z("progress");const A=document.getElementById("compose-progress-content");A.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Deploying services...</div>';try{const x=await postJSON("/api/v1/apps/deploy-compose",{services:k.services,networks:k.networks,stackName:k.stackName});let B=`<div style="font-weight: 600; margin-bottom: 12px;">Stack "${escapeHtml(x.stackName)}" \u2014 Deployment Complete</div>`;B+='<div class="scroll-container" style="max-height: 350px;">';for(const w of x.results){const M=w.status==="deployed"||w.status==="created"?"\u2705":w.status==="exists"?"\u26A1":w.status==="skipped"?"\u23ED":"\u274C";B+='<div style="padding: 8px 12px; border-bottom: 1px solid var(--border); font-size: 0.85rem;">',B+=`${M} <strong>${escapeHtml(w.name)}</strong> (${w.type}) \u2014 ${escapeHtml(w.status)}`,w.error&&(B+=` <span style="color: var(--bad-fg);">${escapeHtml(w.error)}</span>`),w.subdomain&&(B+=` \u2192 <code>${escapeHtml(w.subdomain)}</code>`),w.reason&&(B+=` <span style="color: var(--muted);">(${escapeHtml(w.reason)})</span>`),B+="</div>"}B+="</div>",B+='<div class="weather-modal-buttons modal-footer-bar" style="margin-top: 16px;"><button id="compose-done-btn">Done</button></div>Line truncated
<div class="weather-modal-buttons modal-footer-bar" style="margin-top: 16px;"><button id="compose-retry-btn">Back</button></div>`,document.getElementById("compose-retry-btn")?.addEventListener("click",()=>z("paste"))}finally{H.textContent="Deploy All",H.disabled=!1}})})(),(function(){injectModal("exec-modal",`<div id="exec-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 700px; max-width: 900px; padding-bottom: 0;">
<h3 id="exec-title">Terminal</h3>
<div id="exec-terminal" style="height: 420px; border-radius: 6px; overflow: hidden; background: #1e1e1e;"></div>
@@ -1761,11 +1761,11 @@ Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification
<button id="exec-close">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("exec-modal"),B=document.getElementById("exec-terminal"),j=document.getElementById("exec-close");let b=null,D=null,A=null;function P(){if(D){try{D.close()}catch{}D=null}if(b){try{b.dispose()}catch{}b=null}A=null,B.innerHTML=""}function R(k,M){if(P(),document.getElementById("exec-title").textContent=`Terminal \u2014 ${M||k}`,f?.classList.add("show"),typeof Terminal>"u"){B.innerHTML='<div style="color: #f44; padding: 20px; font-family: monospace;">xterm.js not loaded</div>';return}b=new Terminal({cursorBlink:!0,fontSize:14,fontFamily:"'Cascadia Code', 'Fira Code', 'Consolas', monospace",theme:{background:"#1e1e1e",foreground:"#d4d4d4",cursor:"#aeafad",selectionBackground:"#264f78"},scrollback:5e3}),typeof FitAddon<"u"&&(A=new FitAddon.FitAddon,b.loadAddon(A)),b.open(B),A&&setTimeout(()=>A.fit(),50);const E=location.protocol==="https:"?"wss:":"ws:";D=new WebSocket(`${E}//${location.host}/ws/exec/${encodeURIComponent(k)}`),D.binaryType="arraybuffer",D.onopen=()=>{if(b.writeln("\x1B[32mConnecting...\x1B[0m"),A){const C=A.proposeDimensions();C&&D.send(JSON.stringify({type:"resize",cols:C.cols,rows:C.rows}))}},D.onmessage=C=>{if(typeof C.data=="string"){try{const N=JSON.parse(C.data);if(N.type==="connected"){b.writeln(`\x1B[32mConnected (${N.shell})\x1B[0m\r
`);return}if(N.type==="error"){b.writeln(`\x1B[31mError: ${N.message}\x1B[0m`);return}if(N.type==="exit"){b.writeln(`\r
\x1B[33mSession ended.\x1B[0m`);return}}catch{}b.write(C.data)}else b.write(new Uint8Array(C.data))},D.onclose=()=>{b&&b.writeln(`\r
\x1B[33mDisconnected.\x1B[0m`)},D.onerror=()=>{b&&b.writeln(`\r
\x1B[31mConnection error.\x1B[0m`)},b.onData(C=>{D&&D.readyState===WebSocket.OPEN&&D.send(C)}),b.onResize(({cols:C,rows:N})=>{D&&D.readyState===WebSocket.OPEN&&D.send(JSON.stringify({type:"resize",cols:C,rows:N}))});const z=()=>{A&&A.fit()};window.addEventListener("resize",z),f._resizeHandler=z}j?.addEventListener("click",()=>{P(),f._resizeHandler&&window.removeEventListener("resize",f._resizeHandler),f?.classList.remove("show")}),f?.addEventListener("click",k=>{k.target===f&&(P(),f._resizeHandler&&window.removeEventListener("resize",f._resizeHandler),f?.classList.remove("show"))}),window.openExecModal=R})(),(function(){injectModal("audit-modal",`<div id="audit-modal" class="weather-modal">
</div>`);const b=document.getElementById("exec-modal"),C=document.getElementById("exec-terminal"),j=document.getElementById("exec-close");let k=null,z=null,P=null;function H(){if(z){try{z.close()}catch{}z=null}if(k){try{k.dispose()}catch{}k=null}P=null,C.innerHTML=""}function A(x,B){if(H(),document.getElementById("exec-title").textContent=`Terminal \u2014 ${B||x}`,b?.classList.add("show"),typeof Terminal>"u"){C.innerHTML='<div style="color: #f44; padding: 20px; font-family: monospace;">xterm.js not loaded</div>';return}k=new Terminal({cursorBlink:!0,fontSize:14,fontFamily:"'Cascadia Code', 'Fira Code', 'Consolas', monospace",theme:{background:"#1e1e1e",foreground:"#d4d4d4",cursor:"#aeafad",selectionBackground:"#264f78"},scrollback:5e3}),typeof FitAddon<"u"&&(P=new FitAddon.FitAddon,k.loadAddon(P)),k.open(C),P&&setTimeout(()=>P.fit(),50);const w=location.protocol==="https:"?"wss:":"ws:";z=new WebSocket(`${w}//${location.host}/ws/exec/${encodeURIComponent(x)}`),z.binaryType="arraybuffer",z.onopen=()=>{if(k.writeln("\x1B[32mConnecting...\x1B[0m"),P){const L=P.proposeDimensions();L&&z.send(JSON.stringify({type:"resize",cols:L.cols,rows:L.rows}))}},z.onmessage=L=>{if(typeof L.data=="string"){try{const $=JSON.parse(L.data);if($.type==="connected"){k.writeln(`\x1B[32mConnected (${$.shell})\x1B[0m\r
`);return}if($.type==="error"){k.writeln(`\x1B[31mError: ${$.message}\x1B[0m`);return}if($.type==="exit"){k.writeln(`\r
\x1B[33mSession ended.\x1B[0m`);return}}catch{}k.write(L.data)}else k.write(new Uint8Array(L.data))},z.onclose=()=>{k&&k.writeln(`\r
\x1B[33mDisconnected.\x1B[0m`)},z.onerror=()=>{k&&k.writeln(`\r
\x1B[31mConnection error.\x1B[0m`)},k.onData(L=>{z&&z.readyState===WebSocket.OPEN&&z.send(L)}),k.onResize(({cols:L,rows:$})=>{z&&z.readyState===WebSocket.OPEN&&z.send(JSON.stringify({type:"resize",cols:L,rows:$}))});const M=()=>{P&&P.fit()};window.addEventListener("resize",M),b._resizeHandler=M}j?.addEventListener("click",()=>{H(),b._resizeHandler&&window.removeEventListener("resize",b._resizeHandler),b?.classList.remove("show")}),b?.addEventListener("click",x=>{x.target===b&&(H(),b._resizeHandler&&window.removeEventListener("resize",b._resizeHandler),b?.classList.remove("show"))}),window.openExecModal=A})(),(function(){injectModal("audit-modal",`<div id="audit-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 950px; max-width: 1150px;">
<h3>\u{1F4DC} Audit Log</h3>
<p class="modal-subtitle">
@@ -1811,7 +1811,7 @@ Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification
<button id="audit-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("audit-modal"),B=document.getElementById("audit-log-btn"),j=document.getElementById("audit-cancel"),b=document.getElementById("audit-refresh-btn"),D=document.getElementById("audit-clear-btn"),A=document.getElementById("audit-filter"),P=document.getElementById("audit-outcome-filter"),R=document.getElementById("audit-since"),k=document.getElementById("audit-until"),M=document.getElementById("audit-log-container"),E=document.getElementById("audit-load-more");let z=0,C=null,N=0;const x=50;function I(T){if(!T)return null;const O=new Date(T);return isNaN(O.getTime())?null:O.toISOString()}async function H(T){try{T?(C&&C.abort(),C=new AbortController):(C&&C.abort(),C=new AbortController,z=0,N++,M.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading...</div>');const O=N,u=new URLSearchParams;u.set("limit",String(x)),u.set("offset",String(z));const g=A.value,S=P.value,y=I(R.value),w=I(k.value);g&&u.set("action",g),S&&u.set("outcome",S),y&&u.set("since",y),w&&u.set("until",w);const s=await fetch("/api/v1/audit-logs?"+u.toString(),{signal:C.signal});if(!s.ok){M.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: HTTP ${s.status}</div>`,E.style.display="none";return}const p=await s.json();if(!p.success){M.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(p.error||"unknown")}</div>`,E.style.display="none";return}if(!T&&O!==N)return;const l=Array.isArray(p.entries)?p.entries:[];if(l.length===0&&!T){const c=p.filters&&(p.filters.action||p.filters.outcome||p.filters.since||p.filters.until)?"No entries match your filters.":"No audit log entries yet. Actions will be logged automatically.";M.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4DC}</span>${escapeHtml(c)}</div>`,E.style.display="none";return}let v="";T||(v='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',v+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);">',v+='<th style="padding: 6px; text-align: left;">When</th>',v+='<th style="padding: 6px; text-align: left;">Actor</th>',v+='<th style="padding: 6px; text-align: left;">IP</th>',v+='<th style="padding: 6px; text-align: left;">Action</th>',v+='<th style="padding: 6px; text-align: left;">Resource</th>',v+='<th style="padding: 6px; text-align: left;">Result</th>',v+="</tr>");for(const c of l){const t=c.outcome==="success",e=m(c);v+='<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" class="audit-row">',v+=`<td style="padding: 6px; color: var(--muted);" title="${escapeHtml(c.timestamp||"")}">${timeAgo(c.timestamp)}</td>`,v+=`<td style="padding: 6px; font-size: 0.78rem;">${e}</td>`,v+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(c.ip||"-")}</td>`,v+=`<td style="padding: 6px; font-weight: 500;">${escapeHtml(c.action||"-")}</td>`,v+=`<td style="padding: 6px;">${escapeHtml(c.resource||"-")}</td>`,v+=`<td style="padding: 6px;"><span style="color: ${t?"var(--ok-fg)":"var(--bad-fg)"};">${t?"\u2713":"\u2717"} ${escapeHtml(c.outcome||"")}</span></td>`,v+="</tr>",c.details&&Object.keys(c.details).length>0&&(v+=`<tr class="audit-detail" style="display: none;"><td colspan="6" style="padding: 6px 6px 10px; font-size: 0.78rem; color: var(--muted);"><pre style="margin: 0; white-space: pre-wrap; font-family: monospace;">${escapeHtml(JSON.stringify(c.details,null,2))}</pre></td></tr>`)}if(!T)v+="</table>",M.innerHTML=v;else{const c=M.querySelector("table");c&&c.insertAdjacentHTML("beforeend",v)}z+=l.length,E.style.display=p.hasMore?"":"none",M.querySelectorAll(".audit-row").forEach(c=>{c.dataset.wired||(c.dataset.wired="true",c.addEventListener("click",()=>{const t=c.nextElementSibling;t&&t.classList.contains("audit-detail")&&(t.style.display=t.style.display==="none"?"":"none")}))})}catch(O){if(O&&O.name==="AbortError")return;M.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(O.message)}</div>`}}function m(T){const O=T.details||{},u=O.userEmail,g=O.userId,S=O.userRole,y=O.viaProvider;if(u){const w=S?` <span style="color: var(--muted); font-size: 0.72rem;">[${escapeHtml(S)}${y?"/"+escapeHtml(y):""}]</span>`:"";return`${escapeHtml(u)}${w}`}return g?`<span style="font-family: monospace; color: var(--muted);">${escapeHtml(g)}</span>`:T.ip?'<span style="color: var(--muted);">anon</span>':'<span style="color: var(--muted);">system</span>'}B?.addEventListener("click",()=>{f?.classList.add("show"),H(!1)}),wireModal(f,j),b?.addEventListener("click",()=>H(!1)),A?.addEventListener("change",()=>H(!1)),P?.addEventListener("change",()=>H(!1));let L;[R,k].forEach(T=>{T?.addEventListener("change",()=>{clearTimeout(L),L=setTimeout(()=>H(!1),250)})}),E?.addEventListener("click",()=>H(!0)),D?.addEventListener("click",async()=>{if(confirm("Clear the entire audit log? This cannot be undone."))try{const O=await(await secureFetch("/api/v1/audit-logs",{method:"DELETE"Line truncated
</div>`);const b=document.getElementById("audit-modal"),C=document.getElementById("audit-log-btn"),j=document.getElementById("audit-cancel"),k=document.getElementById("audit-refresh-btn"),z=document.getElementById("audit-clear-btn"),P=document.getElementById("audit-filter"),H=document.getElementById("audit-outcome-filter"),A=document.getElementById("audit-since"),x=document.getElementById("audit-until"),B=document.getElementById("audit-log-container"),w=document.getElementById("audit-load-more");let M=0,L=null,$=0;const u=50;function v(N){if(!N)return null;const O=new Date(N);return isNaN(O.getTime())?null:O.toISOString()}async function D(N){try{N?(L&&L.abort(),L=new AbortController):(L&&L.abort(),L=new AbortController,M=0,$++,B.innerHTML='<div class="panel-empty"><span class="brand-spinner"></span> Loading...</div>');const O=$,m=new URLSearchParams;m.set("limit",String(u)),m.set("offset",String(M));const y=P.value,S=H.value,f=v(A.value),E=v(x.value);y&&m.set("action",y),S&&m.set("outcome",S),f&&m.set("since",f),E&&m.set("until",E);const s=await fetch("/api/v1/audit-logs?"+m.toString(),{signal:L.signal});if(!s.ok){B.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: HTTP ${s.status}</div>`,w.style.display="none";return}const p=await s.json();if(!p.success){B.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(p.error||"unknown")}</div>`,w.style.display="none";return}if(!N&&O!==$)return;const l=Array.isArray(p.entries)?p.entries:[];if(l.length===0&&!N){const c=p.filters&&(p.filters.action||p.filters.outcome||p.filters.since||p.filters.until)?"No entries match your filters.":"No audit log entries yet. Actions will be logged automatically.";B.innerHTML=`<div class="panel-empty"><span class="empty-icon">\u{1F4DC}</span>${escapeHtml(c)}</div>`,w.style.display="none";return}let g="";N||(g='<table style="width: 100%; border-collapse: collapse; font-size: 0.82rem;">',g+='<tr style="border-bottom: 1px solid var(--border); color: var(--muted);">',g+='<th style="padding: 6px; text-align: left;">When</th>',g+='<th style="padding: 6px; text-align: left;">Actor</th>',g+='<th style="padding: 6px; text-align: left;">IP</th>',g+='<th style="padding: 6px; text-align: left;">Action</th>',g+='<th style="padding: 6px; text-align: left;">Resource</th>',g+='<th style="padding: 6px; text-align: left;">Result</th>',g+="</tr>");for(const c of l){const t=c.outcome==="success",e=I(c);g+='<tr style="border-bottom: 1px solid var(--border); cursor: pointer;" class="audit-row">',g+=`<td style="padding: 6px; color: var(--muted);" title="${escapeHtml(c.timestamp||"")}">${timeAgo(c.timestamp)}</td>`,g+=`<td style="padding: 6px; font-size: 0.78rem;">${e}</td>`,g+=`<td style="padding: 6px; font-family: monospace; font-size: 0.78rem;">${escapeHtml(c.ip||"-")}</td>`,g+=`<td style="padding: 6px; font-weight: 500;">${escapeHtml(c.action||"-")}</td>`,g+=`<td style="padding: 6px;">${escapeHtml(c.resource||"-")}</td>`,g+=`<td style="padding: 6px;"><span style="color: ${t?"var(--ok-fg)":"var(--bad-fg)"};">${t?"\u2713":"\u2717"} ${escapeHtml(c.outcome||"")}</span></td>`,g+="</tr>",c.details&&Object.keys(c.details).length>0&&(g+=`<tr class="audit-detail" style="display: none;"><td colspan="6" style="padding: 6px 6px 10px; font-size: 0.78rem; color: var(--muted);"><pre style="margin: 0; white-space: pre-wrap; font-family: monospace;">${escapeHtml(JSON.stringify(c.details,null,2))}</pre></td></tr>`)}if(!N)g+="</table>",B.innerHTML=g;else{const c=B.querySelector("table");c&&c.insertAdjacentHTML("beforeend",g)}M+=l.length,w.style.display=p.hasMore?"":"none",B.querySelectorAll(".audit-row").forEach(c=>{c.dataset.wired||(c.dataset.wired="true",c.addEventListener("click",()=>{const t=c.nextElementSibling;t&&t.classList.contains("audit-detail")&&(t.style.display=t.style.display==="none"?"":"none")}))})}catch(O){if(O&&O.name==="AbortError")return;B.innerHTML=`<div class="panel-empty" style="color: var(--bad-fg);">Failed: ${escapeHtml(O.message)}</div>`}}function I(N){const O=N.details||{},m=O.userEmail,y=O.userId,S=O.userRole,f=O.viaProvider;if(m){const E=S?` <span style="color: var(--muted); font-size: 0.72rem;">[${escapeHtml(S)}${f?"/"+escapeHtml(f):""}]</span>`:"";return`${escapeHtml(m)}${E}`}return y?`<span style="font-family: monospace; color: var(--muted);">${escapeHtml(y)}</span>`:N.ip?'<span style="color: var(--muted);">anon</span>':'<span style="color: var(--muted);">system</span>'}C?.addEventListener("click",()=>{b?.classList.add("show"),D(!1)}),wireModal(b,j),k?.addEventListener("click",()=>D(!1)),P?.addEventListener("change",()=>D(!1)),H?.addEventListener("change",()=>D(!1));let R;[A,x].forEach(N=>{N?.addEventListener("change",()=>{clearTimeout(R),R=setTimeout(()=>D(!1),250)})}),w?.addEventListener("click",()=>D(!0)),z?.addEventListener("click",async()=>{if(confirm("Clear the entire audit log? This cannot be undone."))try{const O=await(await secureFetch("/api/v1/audit-logs",{method:"DELETE"Line truncated
<div class="weather-modal-content" style="min-width: 980px; max-width: 1280px;">
<h3>\u{1F6E1}\uFE0F Security Center</h3>
<p class="modal-subtitle">
@@ -1890,28 +1890,28 @@ Enter version to rollback to:`);if(!a)return;if(!e.includes(a)){showNotification
<button id="sec-cancel">Close</button>
</div>
</div>
</div>`);const f=document.getElementById("security-modal"),B=document.getElementById("security-center-btn"),j=document.getElementById("sec-cancel"),b=f.querySelectorAll(".sec-tab"),D=f.querySelectorAll(".sec-panel");let A=[],P=[],R=null;b.forEach(s=>{s.addEventListener("click",()=>{b.forEach(p=>p.classList.toggle("active",p===s)),D.forEach(p=>p.style.display=p.dataset.panel===s.dataset.tab?"":"none"),s.dataset.tab==="overview"&&z(),s.dataset.tab==="events"&&L(),s.dataset.tab==="hosts"&&g()})}),B&&B.addEventListener("click",()=>{f.classList.add("show"),z(),M()}),j.addEventListener("click",k),f.addEventListener("click",s=>{s.target===f&&k()});function k(){f.classList.remove("show"),E()}function M(){if(E(),!!document.getElementById("sec-live-tail").checked&&!(typeof EventSource>"u"))try{R=new EventSource("/api/v1/security/events/stream"),R.addEventListener("init",s=>{try{A=JSON.parse(s.data).events||[],T()}catch{}}),R.addEventListener("security",s=>{try{const p=JSON.parse(s.data);A.unshift(p),A.length>500&&(A.length=500);const l=f.querySelector(".sec-tab.active")?.dataset?.tab;l==="events"?T():l==="overview"&&z()}catch{}}),R.onerror=()=>{}}catch(s){console.warn("[security] SSE failed:",s.message)}}function E(){if(R){try{R.close()}catch{}R=null}}document.getElementById("sec-live-tail").addEventListener("change",()=>{f.classList.contains("show")&&M()});async function z(){try{const s=new Date(Date.now()-864e5).toISOString(),[p,l,v]=await Promise.all([fetch(`/api/v1/security/events/stats?since=${encodeURIComponent(s)}`),fetch("/api/v1/security/hosts"),fetch(`/api/v1/security/events?limit=1&since=${encodeURIComponent(s)}`)]),c=(await p.json()).data||{},t=(await l.json()).data?.hosts||[],e=(await v.json()).data?.total||0;document.querySelector('#sec-stats [data-key="total"]').textContent=`${e} events (24h)`,document.querySelector('#sec-stats [data-key="warn"]').textContent=`${c.by_severity?.warn||0} warnings`,document.querySelector('#sec-stats [data-key="error"]').textContent=`${c.by_severity?.error||0} errors`,document.querySelector('#sec-stats [data-key="denied"]').textContent=`${c.by_outcome?.denied||0} denied`,document.querySelector('#sec-stats [data-key="hosts"]').textContent=`${t.length} hosts`,C("sec-top-actors",c.top_actors||[]),C("sec-top-targets",c.top_targets||[])}catch(s){console.warn("[security] refreshOverview failed:",s.message)}}function C(s,p){const l=document.getElementById(s);if(!p.length){l.innerHTML='<div class="panel-empty">No data</div>';return}l.innerHTML='<table style="width:100%;font-size:0.85rem;">'+p.map(v=>`<tr><td style="padding:3px 0;word-break:break-all;">${y(String(v.key))}</td><td style="text-align:right;color:var(--muted);">${v.count}</td></tr>`).join("")+"</table>"}const N=document.getElementById("sec-filter-source"),x=document.getElementById("sec-filter-severity"),I=document.getElementById("sec-filter-host"),H=document.getElementById("sec-filter-actor"),m=document.getElementById("sec-refresh-btn");[N,x,I].forEach(s=>s.addEventListener("change",L)),H.addEventListener("input",w(L,250)),m.addEventListener("click",L);async function L(){try{const s=new URLSearchParams;s.set("limit","200"),N.value&&s.set("source_type",N.value),x.value&&s.set("severity",x.value),I.value&&s.set("source_host",I.value),H.value&&s.set("actor_prefix",H.value),A=(await(await fetch(`/api/v1/security/events?${s}`)).json()).data.events||[],T(),(!I.options.length||I.options.length===1)&&await u()}catch(s){document.getElementById("sec-events-container").innerHTML='<div class="panel-empty">Load failed: '+y(s.message)+"</div>"}}function T(){const s=document.getElementById("sec-events-container");if(!A.length){s.innerHTML='<div class="panel-empty">No events</div>';return}s.innerHTML=A.slice(0,200).map(O).join("")}function O(s){const p=s.severity||"info",l={critical:"#c0392b",error:"#e74c3c",warn:"#f39c12",notice:"#3498db",info:"#7f8c8d"}[p]||"#7f8c8d",v=s.ts?new Date(s.ts).toLocaleTimeString():"",c=s.source_type||"",t=s.actor||"\u2014",e=s.target||"",a=s.action||"",o=s.outcome||"";return`<div class="sec-event-row" style="display:grid;grid-template-columns:84px 80px 1fr 1fr 100px 90px;gap:8px;padding:5px 8px;border-bottom:1px solid var(--border);font-size:0.82rem;align-items:center;">
<span style="color:${l};font-weight:600;">${y(p)}</span>
<span style="color:var(--muted);font-size:0.75rem;">${y(c)}</span>
<span title="${y(t)}" style="overflow:hidden;text-overflow:ellipsis;white-space:nowrap;">${y(t)}</span>
<span title="${y(e)}" style="overflow:hidden;text-overflow:ellipsis;white-space:nowrap;">${y(a)} ${y(e)}</span>
<span style="color:var(--muted);font-size:0.75rem;">${y(o)}</span>
<span style="color:var(--muted);font-size:0.75rem;text-align:right;">${y(v)}</span>
</div>`}async function u(){try{const p=(await(await fetch("/api/v1/security/hosts")).json()).data?.hosts||[],l=I.value;I.innerHTML='<option value="">All hosts</option>'+p.map(v=>`<option value="${y(v.id)}">${y(v.label||v.id)}</option>`).join(""),l&&(I.value=l)}catch{}}document.getElementById("sec-host-register-btn").addEventListener("click",S),document.getElementById("sec-hosts-refresh").addEventListener("click",g);async function g(){try{const p=(await(await fetch("/api/v1/security/hosts")).json()).data?.hosts||[];P=p;const l=document.getElementById("sec-hosts-container");if(!p.length){l.innerHTML='<div class="panel-empty">No hosts registered. Click \u2795 Register Host to add one.</div>';return}l.innerHTML=p.map(v=>{const c=v.enabled?v.last_seen_at?Date.now()-Date.parse(v.last_seen_at)>18e5?"\u{1F7E1} stale":"\u{1F7E2} online":"\u26AA registered":"\u{1F534} disabled";return`<div style="padding:10px 12px;border-bottom:1px solid var(--border);display:flex;justify-content:space-between;align-items:center;">
</div>`);const b=document.getElementById("security-modal"),C=document.getElementById("security-center-btn"),j=document.getElementById("sec-cancel"),k=b.querySelectorAll(".sec-tab"),z=b.querySelectorAll(".sec-panel");let P=[],H=[],A=null;k.forEach(s=>{s.addEventListener("click",()=>{k.forEach(p=>p.classList.toggle("active",p===s)),z.forEach(p=>p.style.display=p.dataset.panel===s.dataset.tab?"":"none"),s.dataset.tab==="overview"&&M(),s.dataset.tab==="events"&&R(),s.dataset.tab==="hosts"&&y()})}),C&&C.addEventListener("click",()=>{b.classList.add("show"),M(),B()}),j.addEventListener("click",x),b.addEventListener("click",s=>{s.target===b&&x()});function x(){b.classList.remove("show"),w()}function B(){if(w(),!!document.getElementById("sec-live-tail").checked&&!(typeof EventSource>"u"))try{A=new EventSource("/api/v1/security/events/stream"),A.addEventListener("init",s=>{try{P=JSON.parse(s.data).events||[],N()}catch{}}),A.addEventListener("security",s=>{try{const p=JSON.parse(s.data);P.unshift(p),P.length>500&&(P.length=500);const l=b.querySelector(".sec-tab.active")?.dataset?.tab;l==="events"?N():l==="overview"&&M()}catch{}}),A.onerror=()=>{}}catch(s){console.warn("[security] SSE failed:",s.message)}}function w(){if(A){try{A.close()}catch{}A=null}}document.getElementById("sec-live-tail").addEventListener("change",()=>{b.classList.contains("show")&&B()});async function M(){try{const s=new Date(Date.now()-864e5).toISOString(),[p,l,g]=await Promise.all([fetch(`/api/v1/security/events/stats?since=${encodeURIComponent(s)}`),fetch("/api/v1/security/hosts"),fetch(`/api/v1/security/events?limit=1&since=${encodeURIComponent(s)}`)]),c=(await p.json()).data||{},t=(await l.json()).data?.hosts||[],e=(await g.json()).data?.total||0;document.querySelector('#sec-stats [data-key="total"]').textContent=`${e} events (24h)`,document.querySelector('#sec-stats [data-key="warn"]').textContent=`${c.by_severity?.warn||0} warnings`,document.querySelector('#sec-stats [data-key="error"]').textContent=`${c.by_severity?.error||0} errors`,document.querySelector('#sec-stats [data-key="denied"]').textContent=`${c.by_outcome?.denied||0} denied`,document.querySelector('#sec-stats [data-key="hosts"]').textContent=`${t.length} hosts`,L("sec-top-actors",c.top_actors||[]),L("sec-top-targets",c.top_targets||[])}catch(s){console.warn("[security] refreshOverview failed:",s.message)}}function L(s,p){const l=document.getElementById(s);if(!p.length){l.innerHTML='<div class="panel-empty">No data</div>';return}l.innerHTML='<table style="width:100%;font-size:0.85rem;">'+p.map(g=>`<tr><td style="padding:3px 0;word-break:break-all;">${f(String(g.key))}</td><td style="text-align:right;color:var(--muted);">${g.count}</td></tr>`).join("")+"</table>"}const $=document.getElementById("sec-filter-source"),u=document.getElementById("sec-filter-severity"),v=document.getElementById("sec-filter-host"),D=document.getElementById("sec-filter-actor"),I=document.getElementById("sec-refresh-btn");[$,u,v].forEach(s=>s.addEventListener("change",R)),D.addEventListener("input",E(R,250)),I.addEventListener("click",R);async function R(){try{const s=new URLSearchParams;s.set("limit","200"),$.value&&s.set("source_type",$.value),u.value&&s.set("severity",u.value),v.value&&s.set("source_host",v.value),D.value&&s.set("actor_prefix",D.value),P=(await(await fetch(`/api/v1/security/events?${s}`)).json()).data.events||[],N(),(!v.options.length||v.options.length===1)&&await m()}catch(s){document.getElementById("sec-events-container").innerHTML='<div class="panel-empty">Load failed: '+f(s.message)+"</div>"}}function N(){const s=document.getElementById("sec-events-container");if(!P.length){s.innerHTML='<div class="panel-empty">No events</div>';return}s.innerHTML=P.slice(0,200).map(O).join("")}function O(s){const p=s.severity||"info",l={critical:"#c0392b",error:"#e74c3c",warn:"#f39c12",notice:"#3498db",info:"#7f8c8d"}[p]||"#7f8c8d",g=s.ts?new Date(s.ts).toLocaleTimeString():"",c=s.source_type||"",t=s.actor||"\u2014",e=s.target||"",a=s.action||"",o=s.outcome||"";return`<div class="sec-event-row" style="display:grid;grid-template-columns:84px 80px 1fr 1fr 100px 90px;gap:8px;padding:5px 8px;border-bottom:1px solid var(--border);font-size:0.82rem;align-items:center;">
<span style="color:${l};font-weight:600;">${f(p)}</span>
<span style="color:var(--muted);font-size:0.75rem;">${f(c)}</span>
<span title="${f(t)}" style="overflow:hidden;text-overflow:ellipsis;white-space:nowrap;">${f(t)}</span>
<span title="${f(e)}" style="overflow:hidden;text-overflow:ellipsis;white-space:nowrap;">${f(a)} ${f(e)}</span>
<span style="color:var(--muted);font-size:0.75rem;">${f(o)}</span>
<span style="color:var(--muted);font-size:0.75rem;text-align:right;">${f(g)}</span>
</div>`}async function m(){try{const p=(await(await fetch("/api/v1/security/hosts")).json()).data?.hosts||[],l=v.value;v.innerHTML='<option value="">All hosts</option>'+p.map(g=>`<option value="${f(g.id)}">${f(g.label||g.id)}</option>`).join(""),l&&(v.value=l)}catch{}}document.getElementById("sec-host-register-btn").addEventListener("click",S),document.getElementById("sec-hosts-refresh").addEventListener("click",y);async function y(){try{const p=(await(await fetch("/api/v1/security/hosts")).json()).data?.hosts||[];H=p;const l=document.getElementById("sec-hosts-container");if(!p.length){l.innerHTML='<div class="panel-empty">No hosts registered. Click \u2795 Register Host to add one.</div>';return}l.innerHTML=p.map(g=>{const c=g.enabled?g.last_seen_at?Date.now()-Date.parse(g.last_seen_at)>18e5?"\u{1F7E1} stale":"\u{1F7E2} online":"\u26AA registered":"\u{1F534} disabled";return`<div style="padding:10px 12px;border-bottom:1px solid var(--border);display:flex;justify-content:space-between;align-items:center;">
<div>
<strong>${y(v.label||v.id)}</strong>
<span style="color:var(--muted);margin-left:8px;font-size:0.8rem;">${y(v.type)}</span>
<strong>${f(g.label||g.id)}</strong>
<span style="color:var(--muted);margin-left:8px;font-size:0.8rem;">${f(g.type)}</span>
<div style="color:var(--muted);font-size:0.78rem;margin-top:2px;">
id: ${y(v.id)} \xB7
registered ${new Date(v.registered_at).toLocaleDateString()} \xB7
last seen ${v.last_seen_at?new Date(v.last_seen_at).toLocaleString():"never"}
id: ${f(g.id)} \xB7
registered ${new Date(g.registered_at).toLocaleDateString()} \xB7
last seen ${g.last_seen_at?new Date(g.last_seen_at).toLocaleString():"never"}
</div>
</div>
<div>
<span style="font-size:0.85rem;margin-right:12px;">${c}</span>
${v.id==="self"?"":`<button class="btn-sm sec-host-del" data-id="${y(v.id)}" style="color:var(--bad-fg);">Remove</button>`}
${g.id==="self"?"":`<button class="btn-sm sec-host-del" data-id="${f(g.id)}" style="color:var(--bad-fg);">Remove</button>`}
</div>
</div>`}).join(""),l.querySelectorAll(".sec-host-del").forEach(v=>{v.addEventListener("click",async()=>{confirm(`Remove host ${v.dataset.id}? Events already received will remain in the store.`)&&(await fetch(`/api/v1/security/hosts/${encodeURIComponent(v.dataset.id)}`,{method:"DELETE"}),g())})})}catch(s){document.getElementById("sec-hosts-container").innerHTML='<div class="panel-empty">Load failed: '+y(s.message)+"</div>"}}async function S(){const s=prompt("Host id (lowercase, no spaces):");if(!s)return;const p=prompt("Display label:",s)||s,l=prompt('Type ("dashcaddy", "service", or "agent"):',"agent")||"agent";try{const v=await fetch("/api/v1/security/hosts",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({id:s,label:p,type:l})}),c=await v.json();if(!v.ok){alert("Failed: "+(c?.error?.message||v.statusText));return}alert(`\u2705 Host registered!
</div>`}).join(""),l.querySelectorAll(".sec-host-del").forEach(g=>{g.addEventListener("click",async()=>{confirm(`Remove host ${g.dataset.id}? Events already received will remain in the store.`)&&(await fetch(`/api/v1/security/hosts/${encodeURIComponent(g.dataset.id)}`,{method:"DELETE"}),y())})})}catch(s){document.getElementById("sec-hosts-container").innerHTML='<div class="panel-empty">Load failed: '+f(s.message)+"</div>"}}async function S(){const s=prompt("Host id (lowercase, no spaces):");if(!s)return;const p=prompt("Display label:",s)||s,l=prompt('Type ("dashcaddy", "service", or "agent"):',"agent")||"agent";try{const g=await fetch("/api/v1/security/hosts",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({id:s,label:p,type:l})}),c=await g.json();if(!g.ok){alert("Failed: "+(c?.error?.message||g.statusText));return}alert(`\u2705 Host registered!
id: ${c.data.host.id}
label: ${c.data.host.label}
@@ -1922,7 +1922,7 @@ type: ${c.data.host.type}
${c.data.api_key}
Send this key as: Authorization: Bearer <api_key>
To endpoint: POST /api/v1/security/events/ingest or /events/batch`),g()}catch(v){alert("Failed: "+v.message)}}function y(s){return String(s).replace(/[&<>"']/g,p=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[p])}function w(s,p){let l;return function(){clearTimeout(l),l=setTimeout(()=>s.apply(this,arguments),p)}}})(),window.__dc133_buildRepoOptions=function(f,B){var j=B||function(b){return String(b).replace(/[&<>"']/g,function(D){return{"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"}[D]})};return'<option value="">\u2014 choose a repo \u2014</option>'+(f||[]).map(function(b){return'<option value="'+j(b.url)+'" data-id="'+j(b.id)+'">'+j(b.full_name)+(b.description?" \u2014 "+j(b.description):"")+"</option>"}).join("")},window.__dc133_requestToken=function(f,B){if(f)return"";var j=String(B||"").trim();return j||void 0},(function(){injectModal("deploys-modal",`<div id="deploys-modal" class="weather-modal">
To endpoint: POST /api/v1/security/events/ingest or /events/batch`),y()}catch(g){alert("Failed: "+g.message)}}function f(s){return String(s).replace(/[&<>"']/g,p=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[p])}function E(s,p){let l;return function(){clearTimeout(l),l=setTimeout(()=>s.apply(this,arguments),p)}}})(),(function(){injectModal("deploys-modal",`<div id="deploys-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 860px; max-width: 1200px;">
<h3>\u{1F69A} Deploys</h3>
<p class="modal-subtitle">
@@ -1932,7 +1932,7 @@ To endpoint: POST /api/v1/security/events/ingest or /events/batch`),g()}catch(v)
<div class="sec-tabs" style="display:flex;gap:8px;margin-bottom:14px;border-bottom:1px solid var(--border);">
<button class="dep-tab active" data-tab="services">Services</button>
<button class="dep-tab" data-tab="deploy">Deploy</button>
<button class="dep-tab" data-tab="journal">Journal</button><button class="dep-tab" data-tab="install">Install</button>
<button class="dep-tab" data-tab="journal">Journal</button>
</div>
<!-- SERVICES TAB -->
@@ -1962,43 +1962,6 @@ To endpoint: POST /api/v1/security/events/ingest or /events/batch`),g()}catch(v)
<div id="dep-journal" class="scroll-container" style="max-height:320px;">Loading\u2026</div>
</div>
<!-- INSTALL TAB (DC-131) -->
<div class="dep-panel" data-panel="install" style="display:none;">
<div style="display:grid;gap:10px;max-width:640px;">
<div style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Gitea server (any instance)</span>
<div style="display:flex;gap:8px;">
<input id="dep-gh-gitea-host" placeholder="git.dashcaddy.net (default)" style="flex:1;" autocomplete="off" spellcheck="false" />
<input id="dep-gh-gitea-token" type="password" placeholder="token (private repos)" style="flex:1;" autocomplete="off" spellcheck="false" />
</div>
<label style="display:flex;gap:6px;align-items:center;font-size:12px;">
<input id="dep-gh-anonymous" type="checkbox" />
Anonymous \u2014 ignore the saved fleet token for this request
</label>
</div>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Pick a repo</span>
<select id="dep-gh-gitea" style="min-width:280px;"><option value="">Loading\u2026</option></select>
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">\u2026or paste any repo URL (GitHub, Gitea, or any https git host)</span>
<input id="dep-gh-url" placeholder="https://host/owner/repo" style="width:100%;" />
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Name (used as subdomain; card title falls back to repo name)</span>
<input id="dep-gh-service" placeholder="my-app" style="width:220px;" />
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Optional launch args (space-separated simple tokens, e.g. -text hi)</span>
<input id="dep-gh-args" placeholder="-text hello" style="width:100%;" />
</label>
<p class="modal-subtitle" style="margin:0;">
Go repos with a main package install automatically: build, systemd release,
Caddy gate (tailnet-only), DNS, verify, dashboard card. Takes ~30-60s.
</p>
<div><button class="btn btn-primary" id="dep-gh-btn">Install</button></div>
</div>
</div>
<!-- OUTPUT -->
<pre id="dep-output" class="scroll-container" style="display:none;max-height:260px;margin-top:12px;background:var(--bg-2,#111);padding:10px;border-radius:8px;white-space:pre-wrap;"></pre>
@@ -2006,16 +1969,12 @@ To endpoint: POST /api/v1/security/events/ingest or /events/batch`),g()}catch(v)
<button class="btn" id="dep-close">Close</button>
</div>
</div>
</div>`);const f=H=>document.getElementById(H);let B=null,j=!1;function b(H){return window.escapeHtml?window.escapeHtml(String(H)):String(H).replace(/[&<>"']/g,m=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[m])}async function D(H,m){const L=await fetch("/dashcaddy-api/api/v1/deploys"+H,Object.assign({credentials:"include"},m||{}));let T=null;try{T=await L.json()}catch{T={success:!1,error:"non-JSON response"}}return{status:L.status,body:T}}function A(H){const m=f("dep-output");m.style.display="block",m.textContent=H||"(no output)",m.scrollTop=m.scrollHeight}async function P(){const H=f("dep-services"),{body:m}=await D("/services");if(!m.success){H.innerHTML="<em>"+b(m.error||"unavailable")+"</em>";return}const L=m.services||[];if(!L.length){H.innerHTML="<em>No shipdeck deployments on record yet.</em>";return}H.innerHTML='<table class="table" style="width:100%;"><thead><tr><th>Service</th><th>Last action</th><th>When</th><th>Release</th><th></th></tr></thead><tbody>'+L.map(T=>"<tr><td><strong>"+b(T.name)+"</strong></td><td>"+b(T.last_action)+"</td><td>"+b(T.last_time)+"</td><td>"+b(T.last_epoch)+'</td><td><button class="btn btn-sm dep-rollback" data-service="'+b(T.name)+'">Rollback</button> <button class="btn btn-sm dep-status" data-service="'+b(T.name)+'">Status</button></td></tr>').join("")+"</tbody></table>"}async function R(){const H=f("dep-repo-select"),{body:m}=await D("/repos");if(!m.success){H.innerHTML="<option>"+b(m.error||"unavailable")+"</option>";return}const L=m.repos||[];H.innerHTML=L.length?L.map(T=>'<option value="'+b(T.dir)+'">'+b(T.name)+"</option>").join(""):'<option value="">(no repos with a Shipdeckfile found)</option>'}async function k(H){const m=f("dep-journal"),L=H?"?service="+encodeURIComponent(H):"",{body:T}=await D("/journal"+L),O=T.rows||[];if(!O.length){m.innerHTML="<em>No journal rows.</em>";return}m.innerHTML='<table class="table" style="width:100%;"><thead><tr><th>Time</th><th>Service</th><th>Action</th><th>Release</th><th>Duration</th></tr></thead><tbody>'+O.map(u=>"<tr><td>"+b(u.time)+"</td><td>"+b(u.service)+"</td><td>"+b(u.action)+"</td><td>"+b(u.epoch)+"</td><td>"+b(u.duration||"\u2014")+"</td></tr>").join("")+"</tbody></table>"}async function M(){const H=document.getElementById("dep-gh-gitea"),m=document.getElementById("dep-gh-gitea-host"),L=document.getElementById("dep-gh-gitea-token"),T=document.getElementById("dep-gh-anonymous"),O={};if(m&&m.value.trim()&&(O.gitea_url="https://"+m.value.trim().replace(/^https?:\/*/,"")),T&&T.checked)O.token="";else{const u=window.__dc133_requestToken(!1,L&&L.value);u!==void 0&&(O.token=u)}try{const{status:u,body:g}=await D("/gitea-repos",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(O)});if(!g.success||!(g.repos||[]).length){H.innerHTML='<option value="">'+b(g.error||"no repos found")+"</option>";return}H.innerHTML=window.__dc133_buildRepoOptions(g.repos,b)}catch{H.innerHTML='<option value="">unavailable</option>'}}async function E(){const H=document.getElementById("dep-gh-btn"),m=document.getElementById("dep-gh-url").value.trim(),L=(document.getElementById("dep-gh-service").value.trim()||"").toLowerCase(),T=document.getElementById("dep-gh-args").value.trim();if(!m||!L){A("Repo URL and name are required.");return}const O=T?T.split(/\s+/):[];z(!0,H,"Install"),A("Installing "+m+`
Cloning, building, gating and DNS-ing... (~30-60s)`);try{const u=!!(document.getElementById("dep-gh-anonymous")||{}).checked,g=(document.getElementById("dep-gh-gitea-token")||{value:""}).value,S=window.__dc133_requestToken(u,g),{status:y,body:w}=await D("/install",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({repo_url:m,service:L,args:O,token:S})});if(!w.success){A((w.output?w.output+`
`:"")+"FAIL "+(w.error||"HTTP "+y)),z(!1,H,"Install");return}const s=w.service||{};if(!(window.APPS||[]).some(l=>l.id===s.id)){const l={id:s.id,name:s.name||s.id,url:s.url,logo:s.logo,tailscaleOnly:!0,isCustom:!0};try{await fetch("/dashcaddy-api/api/v1/services",{method:"POST",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify(l)}),window.APPS.push(l),typeof window.renderApps=="function"&&window.renderApps(),typeof window.renderGrid=="function"&&window.renderGrid()}catch{}}A("INSTALLED "+(s.name||s.id)+" in "+(s.deploy_seconds||"?")+`s
Card: `+(s.url||"")+`
`+(w.output||"").slice(-800)),P()}catch(u){A("install error: "+u.message)}z(!1,H,"Install")}function z(H,m,L){m&&(m.disabled=H,L&&(m.textContent=H?"Working\u2026":L))}async function C(){const H=f("dep-deploy-btn"),m=f("dep-repo-select").value;if(m){z(!0,H,"Deploy"),A("Deploying "+m+`
This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({dir:m})});A((L.output||L.error||"")+(L.success?`
</div>`);const b=u=>document.getElementById(u);let C=null,j=!1;function k(u){return window.escapeHtml?window.escapeHtml(String(u)):String(u).replace(/[&<>"']/g,v=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[v])}async function z(u,v){const D=await fetch("/dashcaddy-api/api/v1/deploys"+u,Object.assign({credentials:"include"},v||{}));let I=null;try{I=await D.json()}catch{I={success:!1,error:"non-JSON response"}}return{status:D.status,body:I}}function P(u){const v=b("dep-output");v.style.display="block",v.textContent=u||"(no output)",v.scrollTop=v.scrollHeight}async function H(){const u=b("dep-services"),{body:v}=await z("/services");if(!v.success){u.innerHTML="<em>"+k(v.error||"unavailable")+"</em>";return}const D=v.services||[];if(!D.length){u.innerHTML="<em>No shipdeck deployments on record yet.</em>";return}u.innerHTML='<table class="table" style="width:100%;"><thead><tr><th>Service</th><th>Last action</th><th>When</th><th>Release</th><th></th></tr></thead><tbody>'+D.map(I=>"<tr><td><strong>"+k(I.name)+"</strong></td><td>"+k(I.last_action)+"</td><td>"+k(I.last_time)+"</td><td>"+k(I.last_epoch)+'</td><td><button class="btn btn-sm dep-rollback" data-service="'+k(I.name)+'">Rollback</button> <button class="btn btn-sm dep-status" data-service="'+k(I.name)+'">Status</button></td></tr>').join("")+"</tbody></table>"}async function A(){const u=b("dep-repo-select"),{body:v}=await z("/repos");if(!v.success){u.innerHTML="<option>"+k(v.error||"unavailable")+"</option>";return}const D=v.repos||[];u.innerHTML=D.length?D.map(I=>'<option value="'+k(I.dir)+'">'+k(I.name)+"</option>").join(""):'<option value="">(no repos with a Shipdeckfile found)</option>'}async function x(u){const v=b("dep-journal"),D=u?"?service="+encodeURIComponent(u):"",{body:I}=await z("/journal"+D),R=I.rows||[];if(!R.length){v.innerHTML="<em>No journal rows.</em>";return}v.innerHTML='<table class="table" style="width:100%;"><thead><tr><th>Time</th><th>Service</th><th>Action</th><th>Release</th><th>Duration</th></tr></thead><tbody>'+R.map(N=>"<tr><td>"+k(N.time)+"</td><td>"+k(N.service)+"</td><td>"+k(N.action)+"</td><td>"+k(N.epoch)+"</td><td>"+k(N.duration||"\u2014")+"</td></tr>").join("")+"</tbody></table>"}function B(u,v,D){v&&(v.disabled=u,D&&(v.textContent=u?"Working\u2026":D))}async function w(){const u=b("dep-deploy-btn"),v=b("dep-repo-select").value;if(v){B(!0,u,"Deploy"),P("Deploying "+v+`
This can take ~30-60s\u2026`);try{const{body:D}=await z("/deploy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({dir:v})});P((D.output||D.error||"")+(D.success?`
\u2705 SUCCESS`:`
\u274C FAILED`)),P()}catch(L){A("deploy error: "+L.message)}z(!1,H,"Deploy")}}async function N(H,m){if(confirm("Roll back "+H+" to the previous release?")){z(!0,m,"Rollback"),A("Rolling back "+H+"\u2026");try{const{body:L}=await D("/rollback",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({service:H})});A((L.output||L.error||"")+(L.success?`
\u274C FAILED`)),H()}catch(D){P("deploy error: "+D.message)}B(!1,u,"Deploy")}}async function M(u,v){if(confirm("Roll back "+u+" to the previous release?")){B(!0,v,"Rollback"),P("Rolling back "+u+"\u2026");try{const{body:D}=await z("/rollback",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({service:u})});P((D.output||D.error||"")+(D.success?`
\u2705 ROLLED BACK`:`
\u274C FAILED`)),P()}catch(L){A("rollback error: "+L.message)}z(!1,m,"Rollback")}}async function x(H,m){z(!0,m,"Status");try{const{body:L}=await D("/status?service="+encodeURIComponent(H));A(L.output||L.error||"(no output)")}catch(L){A("status error: "+L.message)}z(!1,m,"Status")}function I(){B=document.getElementById("deploys-btn"),B&&(B.addEventListener("click",async()=>{f("deploys-modal").classList.add("open"),j||(j=!0,P(),R(),k(""),M())}),f("dep-close").addEventListener("click",()=>{f("deploys-modal").classList.remove("open")}),document.querySelectorAll(".dep-tab").forEach(H=>{H.addEventListener("click",()=>{document.querySelectorAll(".dep-tab").forEach(m=>m.classList.remove("active")),H.classList.add("active"),document.querySelectorAll("#deploys-modal .dep-panel").forEach(m=>{m.style.display=m.dataset.panel===H.dataset.tab?"block":"none"})})}),f("dep-deploy-btn").addEventListener("click",C),f("dep-gh-btn").addEventListener("click",E),["dep-gh-gitea-host","dep-gh-gitea-token"].forEach(H=>{const m=document.getElementById(H);m&&m.addEventListener("change",()=>M())}),document.getElementById("dep-gh-gitea").addEventListener("change",H=>{const m=H.target.value;if(m){document.getElementById("dep-gh-url").value=m;const L=H.target.selectedOptions[0],T=L&&L.dataset?L.dataset.id:"",O=document.getElementById("dep-gh-service");T&&!O.value&&(O.value=T)}}),f("dep-journal-btn").addEventListener("click",()=>k(f("dep-journal-name").value.trim())),f("dep-status-btn").addEventListener("click",()=>{const H=f("dep-status-name").value.trim();H&&x(H)}),f("dep-services").addEventListener("click",H=>{const m=H.target.closest(".dep-rollback");if(m)return N(m.dataset.service,m);const L=H.target.closest(".dep-status");if(L)return x(L.dataset.service,L)}))}document.readyState==="loading"?document.addEventListener("DOMContentLoaded",I):I()})(),(function(){const f=new ErrorHandler;injectModal("weather-modal",`<div id="weather-modal" class="weather-modal"><div class="weather-modal-content"><h3>Weather Settings</h3>
\u274C FAILED`)),H()}catch(D){P("rollback error: "+D.message)}B(!1,v,"Rollback")}}async function L(u,v){B(!0,v,"Status");try{const{body:D}=await z("/status?service="+encodeURIComponent(u));P(D.output||D.error||"(no output)")}catch(D){P("status error: "+D.message)}B(!1,v,"Status")}function $(){C=document.getElementById("deploys-btn"),C&&(C.addEventListener("click",async()=>{b("deploys-modal").classList.add("open"),j||(j=!0,H(),A(),x(""))}),b("dep-close").addEventListener("click",()=>{b("deploys-modal").classList.remove("open")}),document.querySelectorAll(".dep-tab").forEach(u=>{u.addEventListener("click",()=>{document.querySelectorAll(".dep-tab").forEach(v=>v.classList.remove("active")),u.classList.add("active"),document.querySelectorAll("#deploys-modal .dep-panel").forEach(v=>{v.style.display=v.dataset.panel===u.dataset.tab?"block":"none"})})}),b("dep-deploy-btn").addEventListener("click",w),b("dep-journal-btn").addEventListener("click",()=>x(b("dep-journal-name").value.trim())),b("dep-status-btn").addEventListener("click",()=>{const u=b("dep-status-name").value.trim();u&&L(u)}),b("dep-services").addEventListener("click",u=>{const v=u.target.closest(".dep-rollback");if(v)return M(v.dataset.service,v);const D=u.target.closest(".dep-status");if(D)return L(D.dataset.service,D)}))}document.readyState==="loading"?document.addEventListener("DOMContentLoaded",$):$()})(),(function(){const b=new ErrorHandler;injectModal("weather-modal",`<div id="weather-modal" class="weather-modal"><div class="weather-modal-content"><h3>Weather Settings</h3>
<label for="weather-location-input">Location:</label>
<input type="text" id="weather-location-input" placeholder="City name or ZIP (e.g., Hamburg, 90210)" maxlength="100">
<div style="font-size: 0.78rem; color: var(--muted); margin-top: 4px;">Enter a city name, postal code, or &ldquo;City, Country&rdquo;</div>
@@ -2026,23 +1985,23 @@ This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST"
<label class="weather-unit-option"><input type="radio" name="weather-unit-radio" value="metric"><span class="weather-unit-card">&deg;C / km/h</span></label>
</div>
</div>
<div class="weather-modal-buttons"><button id="weather-cancel">Cancel</button><button id="weather-save">Save</button></div></div></div>`);const B="weather-location",j="weather-zip",b="weather-geo",D="weather-unit";!safeGet(B)&&safeGet(j)&&safeSet(B,safeGet(j));function A(){return safeGet(D)||"imperial"}function P(){return{icon:document.querySelector(".weather-icon"),temp:document.querySelector(".weather-temp"),condition:document.querySelector(".weather-condition"),location:document.querySelector(".weather-location"),wind:document.querySelector(".weather-wind")}}const R={0:"Clear sky",1:"Mainly clear",2:"Partly cloudy",3:"Overcast",45:"Fog",48:"Rime fog",51:"Light drizzle",53:"Drizzle",55:"Dense drizzle",56:"Freezing drizzle",57:"Dense freezing drizzle",61:"Light rain",63:"Moderate rain",65:"Heavy rain",66:"Light freezing rain",67:"Heavy freezing rain",71:"Light snow",73:"Moderate snow",75:"Heavy snow",77:"Snow grains",80:"Light showers",81:"Moderate showers",82:"Violent showers",85:"Light snow showers",86:"Heavy snow showers",95:"Thunderstorm",96:"Thunderstorm with hail",99:"Severe thunderstorm"},k={0:"\u2600\uFE0F",1:"\u{1F324}\uFE0F",2:"\u26C5",3:"\u2601\uFE0F",45:"\u{1F32B}\uFE0F",48:"\u{1F32B}\uFE0F",51:"\u{1F326}\uFE0F",53:"\u{1F326}\uFE0F",55:"\u{1F326}\uFE0F",56:"\u{1F328}\uFE0F",57:"\u{1F328}\uFE0F",61:"\u{1F326}\uFE0F",63:"\u{1F327}\uFE0F",65:"\u{1F327}\uFE0F",66:"\u{1F328}\uFE0F",67:"\u{1F328}\uFE0F",71:"\u{1F328}\uFE0F",73:"\u2744\uFE0F",75:"\u2744\uFE0F",77:"\u2744\uFE0F",80:"\u{1F326}\uFE0F",81:"\u{1F327}\uFE0F",82:"\u{1F327}\uFE0F",85:"\u{1F328}\uFE0F",86:"\u2744\uFE0F",95:"\u26C8\uFE0F",96:"\u26C8\uFE0F",99:"\u26C8\uFE0F"},M=["N","NNE","NE","ENE","E","ESE","SE","SSE","S","SSW","SW","WSW","W","WNW","NW","NNW"];function E(m){return M[Math.round(m/22.5)%16]}async function z(m){const L=safeGet(b);if(L)try{const S=JSON.parse(L);if(S.query===m)return S}catch{}const T=await fetch(`https://geocoding-api.open-meteo.com/v1/search?name=${encodeURIComponent(m)}&count=1&language=en&format=json`);if(!T.ok)throw new Error("Geocoding failed");const O=await T.json();if(!O.results||!O.results.length)throw new Error("Location not found");const u=O.results[0],g={query:m,lat:u.latitude,lon:u.longitude,city:u.name,state:u.admin1||"",country:u.country||"",countryCode:u.country_code||""};return safeSet(b,JSON.stringify(g)),g}function C(m){return m.countryCode==="US"&&m.state?`${m.city}, ${m.state}`:m.country?`${m.city}, ${m.country}`:m.city}async function N(m){try{const L=await z(m),T=A(),O=T==="metric"?"celsius":"fahrenheit",u=T==="metric"?"kmh":"mph",g=`https://api.open-meteo.com/v1/forecast?latitude=${L.lat}&longitude=${L.lon}&current=temperature_2m,weather_code,wind_speed_10m,wind_direction_10m&temperature_unit=${O}&wind_speed_unit=${u}`,S=await fetch(g);if(!S.ok)throw new Error("Weather fetch failed");const w=(await S.json()).current,s=w.weather_code;return{temp:Math.round(w.temperature_2m),condition:R[s]||"Unknown",icon:k[s]||"\u{1F324}\uFE0F",locationStr:C(L),windSpeed:Math.round(w.wind_speed_10m),windDir:E(w.wind_direction_10m),unit:T}}catch(L){return console.warn("Weather fetch failed:",L),null}}async function x(){const m=P();if(!m.icon||!m.temp||!m.condition||!m.location||!m.wind){console.warn("Weather widget elements not found");return}const L=safeGet(B);if(!L){m.location.textContent="Set Location",m.temp.textContent="--\xB0",m.condition.textContent="Click \u2699\uFE0F to configure",m.wind.textContent="--",m.icon.innerHTML='<span class="weather-emoji">\u{1F324}\uFE0F</span>';return}try{const T=await N(L);if(T){const O=T.unit==="metric"?"\xB0C":"\xB0F",u=T.unit==="metric"?"km/h":"mph";m.location.textContent=T.locationStr,m.temp.textContent=`${T.temp}${O}`,m.condition.textContent=T.condition,m.wind.textContent=`Wind: ${T.windSpeed} ${u} ${T.windDir}`,m.icon.innerHTML=`<span class="weather-emoji">${escapeHtml(T.icon)}</span>`}}catch(T){f.logError("[Weather] Update Error",T,{function:"updateWeather"}),m.location.textContent="Weather Error",m.temp.textContent="Error",m.condition.textContent="Failed to load",m.wind.textContent="--"}}const I=document.getElementById("weather-modal"),H=document.getElementById("weather-location-input");document.getElementById("weather-settings")?.addEventListener("click",()=>{H.value=safeGet(B)||"";const m=A(),L=I.querySelector(`input[name="weather-unit-radio"][value="${m}"]`);L&&(L.checked=!0),I.classList.add("show"),H.focus()}),document.getElementById("weather-cancel")?.addEventListener("click",()=>{I.classList.remove("show")}),document.getElementById("weather-save")?.addEventListener("click",()=>{const m=H.value.trim();if(m){safeGet(B)!==m&&safeSet(b,""),safeSet(B,m);const T=I.querySelector('input[name="weather-unit-radio"]:checked'),O=T?T.value:"imperial",u=A();safeSet(D,O),u!==O&&safeSet(b,""),I.classList.remove("show"),x()}else showNotification("Please enter a location (e.g., Hamburg, London, 90210)","warning")}),wireModal(I),document.addEventListener("keydown",m=>{m.keyLine truncated
<div class="weather-modal-buttons"><button id="weather-cancel">Cancel</button><button id="weather-save">Save</button></div></div></div>`);const C="weather-location",j="weather-zip",k="weather-geo",z="weather-unit";!safeGet(C)&&safeGet(j)&&safeSet(C,safeGet(j));function P(){return safeGet(z)||"imperial"}function H(){return{icon:document.querySelector(".weather-icon"),temp:document.querySelector(".weather-temp"),condition:document.querySelector(".weather-condition"),location:document.querySelector(".weather-location"),wind:document.querySelector(".weather-wind")}}const A={0:"Clear sky",1:"Mainly clear",2:"Partly cloudy",3:"Overcast",45:"Fog",48:"Rime fog",51:"Light drizzle",53:"Drizzle",55:"Dense drizzle",56:"Freezing drizzle",57:"Dense freezing drizzle",61:"Light rain",63:"Moderate rain",65:"Heavy rain",66:"Light freezing rain",67:"Heavy freezing rain",71:"Light snow",73:"Moderate snow",75:"Heavy snow",77:"Snow grains",80:"Light showers",81:"Moderate showers",82:"Violent showers",85:"Light snow showers",86:"Heavy snow showers",95:"Thunderstorm",96:"Thunderstorm with hail",99:"Severe thunderstorm"},x={0:"\u2600\uFE0F",1:"\u{1F324}\uFE0F",2:"\u26C5",3:"\u2601\uFE0F",45:"\u{1F32B}\uFE0F",48:"\u{1F32B}\uFE0F",51:"\u{1F326}\uFE0F",53:"\u{1F326}\uFE0F",55:"\u{1F326}\uFE0F",56:"\u{1F328}\uFE0F",57:"\u{1F328}\uFE0F",61:"\u{1F326}\uFE0F",63:"\u{1F327}\uFE0F",65:"\u{1F327}\uFE0F",66:"\u{1F328}\uFE0F",67:"\u{1F328}\uFE0F",71:"\u{1F328}\uFE0F",73:"\u2744\uFE0F",75:"\u2744\uFE0F",77:"\u2744\uFE0F",80:"\u{1F326}\uFE0F",81:"\u{1F327}\uFE0F",82:"\u{1F327}\uFE0F",85:"\u{1F328}\uFE0F",86:"\u2744\uFE0F",95:"\u26C8\uFE0F",96:"\u26C8\uFE0F",99:"\u26C8\uFE0F"},B=["N","NNE","NE","ENE","E","ESE","SE","SSE","S","SSW","SW","WSW","W","WNW","NW","NNW"];function w(I){return B[Math.round(I/22.5)%16]}async function M(I){const R=safeGet(k);if(R)try{const S=JSON.parse(R);if(S.query===I)return S}catch{}const N=await fetch(`https://geocoding-api.open-meteo.com/v1/search?name=${encodeURIComponent(I)}&count=1&language=en&format=json`);if(!N.ok)throw new Error("Geocoding failed");const O=await N.json();if(!O.results||!O.results.length)throw new Error("Location not found");const m=O.results[0],y={query:I,lat:m.latitude,lon:m.longitude,city:m.name,state:m.admin1||"",country:m.country||"",countryCode:m.country_code||""};return safeSet(k,JSON.stringify(y)),y}function L(I){return I.countryCode==="US"&&I.state?`${I.city}, ${I.state}`:I.country?`${I.city}, ${I.country}`:I.city}async function $(I){try{const R=await M(I),N=P(),O=N==="metric"?"celsius":"fahrenheit",m=N==="metric"?"kmh":"mph",y=`https://api.open-meteo.com/v1/forecast?latitude=${R.lat}&longitude=${R.lon}&current=temperature_2m,weather_code,wind_speed_10m,wind_direction_10m&temperature_unit=${O}&wind_speed_unit=${m}`,S=await fetch(y);if(!S.ok)throw new Error("Weather fetch failed");const E=(await S.json()).current,s=E.weather_code;return{temp:Math.round(E.temperature_2m),condition:A[s]||"Unknown",icon:x[s]||"\u{1F324}\uFE0F",locationStr:L(R),windSpeed:Math.round(E.wind_speed_10m),windDir:w(E.wind_direction_10m),unit:N}}catch(R){return console.warn("Weather fetch failed:",R),null}}async function u(){const I=H();if(!I.icon||!I.temp||!I.condition||!I.location||!I.wind){console.warn("Weather widget elements not found");return}const R=safeGet(C);if(!R){I.location.textContent="Set Location",I.temp.textContent="--\xB0",I.condition.textContent="Click \u2699\uFE0F to configure",I.wind.textContent="--",I.icon.innerHTML='<span class="weather-emoji">\u{1F324}\uFE0F</span>';return}try{const N=await $(R);if(N){const O=N.unit==="metric"?"\xB0C":"\xB0F",m=N.unit==="metric"?"km/h":"mph";I.location.textContent=N.locationStr,I.temp.textContent=`${N.temp}${O}`,I.condition.textContent=N.condition,I.wind.textContent=`Wind: ${N.windSpeed} ${m} ${N.windDir}`,I.icon.innerHTML=`<span class="weather-emoji">${escapeHtml(N.icon)}</span>`}}catch(N){b.logError("[Weather] Update Error",N,{function:"updateWeather"}),I.location.textContent="Weather Error",I.temp.textContent="Error",I.condition.textContent="Failed to load",I.wind.textContent="--"}}const v=document.getElementById("weather-modal"),D=document.getElementById("weather-location-input");document.getElementById("weather-settings")?.addEventListener("click",()=>{D.value=safeGet(C)||"";const I=P(),R=v.querySelector(`input[name="weather-unit-radio"][value="${I}"]`);R&&(R.checked=!0),v.classList.add("show"),D.focus()}),document.getElementById("weather-cancel")?.addEventListener("click",()=>{v.classList.remove("show")}),document.getElementById("weather-save")?.addEventListener("click",()=>{const I=D.value.trim();if(I){safeGet(C)!==I&&safeSet(k,""),safeSet(C,I);const N=v.querySelector('input[name="weather-unit-radio"]:checked'),O=N?N.value:"imperial",m=P();safeSet(z,O),m!==O&&safeSet(k,""),v.classList.remove("show"),u()}else showNotification("Please enter a location (e.g., Hamburg, London, 90210)","warning")}),wireModal(v),document.addEventListener("keydown",I=>{I.keyLine truncated
<circle cx="${r}" cy="${d}" r="58" fill="none" stroke="var(--border)" stroke-width="2"/>
${F}
${_}
${q}
<line x1="${r}" y1="${d}" x2="${r+28*Math.cos(U*Math.PI/180)}" y2="${d+28*Math.sin(U*Math.PI/180)}" stroke="var(--fg)" stroke-width="3" stroke-linecap="round"/>
<line x1="${r}" y1="${d}" x2="${r+38*Math.cos($*Math.PI/180)}" y2="${d+38*Math.sin($*Math.PI/180)}" stroke="var(--fg)" stroke-width="2" stroke-linecap="round"/>
<line x1="${r}" y1="${d}" x2="${r+38*Math.cos(T*Math.PI/180)}" y2="${d+38*Math.sin(T*Math.PI/180)}" stroke="var(--fg)" stroke-width="2" stroke-linecap="round"/>
<line x1="${r}" y1="${d}" x2="${r+42*Math.cos(h*Math.PI/180)}" y2="${d+42*Math.sin(h*Math.PI/180)}" stroke="#e74c3c" stroke-width="1" stroke-linecap="round"/>
<circle cx="${r}" cy="${d}" r="3" fill="var(--fg)"/>
</svg>`,J=t.getHours()>=12?"PM":"AM";B.innerHTML=`<div class="analog-clock-wrap">${q}<div class="analog-info"><span class="analog-digital">${t.getHours()%12||12}:${String(o).padStart(2,"0")} ${J}</span><span class="analog-date-sm">${N(t)}</span></div></div>`,M="analog"}function g(){const t=new Date,e=t.getHours()%12||12,a=t.getMinutes(),o=t.getSeconds(),i="clock-widget"+(A!=="default"?" "+A:"");switch(f.className!==i&&(f.className=i),A){case"lcd":m(t);break;case"lcd-blue":m(t);break;case"lcd-amber":m(t);break;case"lcd-retro":m(t);break;case"lcd-taxi":m(t);break;case"flip":L(t);break;case"binary":O(t);break;case"analog":u(t,!1);break;case"roman":u(t,!0);break;default:H(t)}a===0&&o===0&&e!==P&&(P=e,C(e)),a!==0&&(P=-1)}function S(){clearTimeout(z);const t=document.hidden?6e4:1e3,e=t-Date.now()%t+25;z=setTimeout(()=>{g(),S()},e)}document.addEventListener("visibilitychange",()=>{k="",x(),g(),S()}),g(),S();const y=[{id:"default",label:"Default",icon:"\u{1F550}"},{id:"lcd",label:"LCD Green",icon:"\u{1F49A}"},{id:"lcd-blue",label:"LCD Blue",icon:"\u{1F499}"},{id:"lcd-amber",label:"LCD Amber",icon:"\u{1F7E0}"},{id:"lcd-retro",label:"LCD Retro",icon:"\u{1F7E9}"},{id:"lcd-taxi",label:"LCD Taxi",icon:"\u{1F7E1}"},{id:"flip",label:"Flip Clock",icon:"\u{1F4DF}"},{id:"binary",label:"Binary",icon:"\u{1F4BB}"},{id:"analog",label:"Analog",icon:"\u23F0"},{id:"roman",label:"Roman",icon:"\u{1F3DB}\uFE0F"}];let w='<div class="clock-style-grid">';y.forEach(t=>{w+=`<label class="clock-style-option">
</svg>`,J=t.getHours()>=12?"PM":"AM";C.innerHTML=`<div class="analog-clock-wrap">${_}<div class="analog-info"><span class="analog-digital">${t.getHours()%12||12}:${String(o).padStart(2,"0")} ${J}</span><span class="analog-date-sm">${$(t)}</span></div></div>`,B="analog"}function y(){const t=new Date,e=t.getHours()%12||12,a=t.getMinutes(),o=t.getSeconds(),i="clock-widget"+(P!=="default"?" "+P:"");switch(b.className!==i&&(b.className=i),P){case"lcd":I(t);break;case"lcd-blue":I(t);break;case"lcd-amber":I(t);break;case"lcd-retro":I(t);break;case"lcd-taxi":I(t);break;case"flip":R(t);break;case"binary":O(t);break;case"analog":m(t,!1);break;case"roman":m(t,!0);break;default:D(t)}a===0&&o===0&&e!==H&&(H=e,L(e)),a!==0&&(H=-1)}function S(){clearTimeout(M);const t=document.hidden?6e4:1e3,e=t-Date.now()%t+25;M=setTimeout(()=>{y(),S()},e)}document.addEventListener("visibilitychange",()=>{x="",u(),y(),S()}),y(),S();const f=[{id:"default",label:"Default",icon:"\u{1F550}"},{id:"lcd",label:"LCD Green",icon:"\u{1F49A}"},{id:"lcd-blue",label:"LCD Blue",icon:"\u{1F499}"},{id:"lcd-amber",label:"LCD Amber",icon:"\u{1F7E0}"},{id:"lcd-retro",label:"LCD Retro",icon:"\u{1F7E9}"},{id:"lcd-taxi",label:"LCD Taxi",icon:"\u{1F7E1}"},{id:"flip",label:"Flip Clock",icon:"\u{1F4DF}"},{id:"binary",label:"Binary",icon:"\u{1F4BB}"},{id:"analog",label:"Analog",icon:"\u23F0"},{id:"roman",label:"Roman",icon:"\u{1F3DB}\uFE0F"}];let E='<div class="clock-style-grid">';f.forEach(t=>{E+=`<label class="clock-style-option">
<input type="radio" name="clock-style-radio" value="${t.id}">
<span class="clock-style-card"><span class="clock-style-icon">${t.icon}</span><span class="clock-style-label">${t.label}</span></span>
</label>`}),w+="</div>",injectModal("clock-settings-modal",`<div id="clock-settings-modal" class="weather-modal">
</label>`}),E+="</div>",injectModal("clock-settings-modal",`<div id="clock-settings-modal" class="weather-modal">
<div class="weather-modal-content" style="max-width: 420px;">
<h3>Clock Settings</h3>
<div style="margin-bottom: 16px;">
<label style="display: block; margin-bottom: 8px; font-weight: 600; color: var(--fg);">Style</label>
${w}
${E}
</div>
<div style="margin-bottom: 16px; padding-top: 12px; border-top: 1px solid var(--border);">
<label style="display: flex; align-items: center; gap: 8px; cursor: pointer; font-weight: 600; color: var(--fg);">
@@ -2066,7 +2025,7 @@ This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST"
<button id="clock-settings-save">Save</button>
</div>
</div>
</div>`);const s=document.getElementById("clock-settings-modal"),p=document.getElementById("clock-chimes-toggle"),l=document.getElementById("clock-chime-volume"),v=document.getElementById("clock-volume-section");function c(){const t=safeGet("clock-style")||"default",e=s.querySelector(`input[value="${t}"]`);e&&(e.checked=!0),p.checked=safeGet("clock-chimes")==="true",l.value=safeGet("clock-chime-volume")||"50",v.style.opacity=p.checked?"1":"0.4"}p?.addEventListener("change",()=>{v.style.opacity=p.checked?"1":"0.4"}),document.getElementById("clock-settings")?.addEventListener("click",()=>{c(),s.classList.add("show")}),document.getElementById("clock-chime-test")?.addEventListener("click",()=>{const t=parseInt(l.value,10)/100,e=new Audio("/assets/sounds/church-bell.mp3");e.volume=t,e.play().catch(()=>{})}),document.getElementById("clock-settings-save")?.addEventListener("click",()=>{const t=s.querySelector('input[name="clock-style-radio"]:checked'),e=t?t.value:"default";safeSet("clock-style",e),safeSet("clock-chimes",String(p.checked)),safeSet("clock-chime-volume",l.value),A=e,k="",x(),g(),S(),s.classList.remove("show"),showNotification("Clock settings saved","success",2e3)}),document.getElementById("clock-settings-cancel")?.addEventListener("click",()=>{s.classList.remove("show")}),wireModal(s),s?.querySelectorAll('input[name="clock-style-radio"]').forEach(t=>{t.addEventListener("change",()=>{A=t.value,k="",x(),g()})})})(),(function(){async function f(){try{const R=await(await fetch("/api/v1/health-checks/status")).json();if(!R.success||!R.status)return;for(const[k,M]of Object.entries(R.status)){const E=document.getElementById("uptime-"+k),z=document.getElementById("uptime-bar-"+k);if(!E)continue;const C=M.uptime?.["24h"];if(C!=null){const N=C.toFixed(1);E.textContent=`${N}% uptime`,E.className="uptime-chip",C>=99.9?E.classList.add("excellent"):C>=99?E.classList.add("good"):C>=95?E.classList.add("degraded"):E.classList.add("poor"),z&&(z.style.width=N+"%")}}}catch{console.warn("[Card Badges] Health check API unavailable")}}let B;try{B=new Set(JSON.parse(safeSessionGet("dismissed-updates")||"[]"))}catch{B=new Set}let j=[];async function b(P){try{const k=await(await fetch("/api/v1/updates/available")).json();if(!k.success)return;document.querySelectorAll(".update-available-badge").forEach(E=>E.classList.remove("visible"));const M=k.updates||[];if(j=M,P&&M.length>0){const E=window._lastKnownUpdateCount||0;E>0&&M.length>E&&showNotification(`${M.length} container update(s) available \u2014 click Update Management to review.`,"info"),window._lastKnownUpdateCount=M.length}if(!M.length)return;for(const E of M){const z=window.APPS||[];for(const C of z)if(C.containerId===E.containerId||C.id===E.containerName||C.name===E.containerName){if(B.has(C.id))break;const N=document.getElementById("update-badge-"+C.id),x=document.getElementById("update-btn-"+C.id);N&&(N.classList.add("visible"),N.title="Update available \u2014 click to open Update Management.",N.style.cursor="pointer",N.onclick=I=>{I.stopPropagation(),window.openUpdateModal&&window.openUpdateModal(C.id)}),x&&(x.style.background="#f97316",x.style.borderColor="#f97316",x.style.boxShadow="0 0 6px #f9731688",x.title="Update available \u2014 click to open Update Management.");break}}}catch{console.warn("[Card Badges] Updates API unavailable")}}function D(){setTimeout(()=>{f(),b()},5e3),setInterval(()=>{f(),b(!0)},6e4)}const A=window.refreshAll;A&&(window.refreshAll=async function(){try{await A(),setTimeout(f,1e3)}catch(P){console.warn("[Card Badges] Error in refreshAll hook:",P.message)}}),D()})(),(function(){var f=null,B=null,j={},b={dark:"Dark",light:"Light",blue:"Blue",black:"Black",nord:"Nord",dracula:"Dracula","solarized-dark":"Solarized Dark","solarized-light":"Solarized Light",taxi:"Taxi",ocean:"Ocean"},D=[["bg","Background","base"],["card-base","Card","base"],["fg","Text","base"],["muted","Muted Text","base"],["border","Border","base"],["accent","Accent","accent"],["accent-strong","Accent Strong","accent"],["ok-bg","OK Background","status"],["ok-fg","OK Text","status"],["bad-bg","Error Bg","status"],["bad-fg","Error Text","status"],["dot-ok","Dot OK","status"],["dot-bad","Dot Error","status"],["uptime","Uptime Bar","status"],["hover","Hover","advanced"],["card-hover","Card Hover","advanced"],["base","Tags/Badges","advanced"],["fg-muted","Dim Text","advanced"],["success","Success","advanced"],["error","Error","advanced"],["warning","Warning","advanced"]],A=document.getElementById("theme");if(!A)return;var P=document.getElementById("theme-label");function R(o){if(b[o])return b[o];var i=safeGetJSON(window.USER_THEMES_KEY,{});return i[o]&&i[o].name||o}function k(){P&&(P.textContent=R(window.getActiveTheme()))}A.addEventListener("click",function(){var o=window.THEMES.slice(),i=window.getActiveTheme(),n=o.indexOf(i),r=o[(n+1)%o.length];window.applyTheme(r),k()}),k();function M(){var o={base:"Base Colors",accent:"Accent",status:"Status",advanced:"Advanced (auto-deriLine truncated
</div>`);const s=document.getElementById("clock-settings-modal"),p=document.getElementById("clock-chimes-toggle"),l=document.getElementById("clock-chime-volume"),g=document.getElementById("clock-volume-section");function c(){const t=safeGet("clock-style")||"default",e=s.querySelector(`input[value="${t}"]`);e&&(e.checked=!0),p.checked=safeGet("clock-chimes")==="true",l.value=safeGet("clock-chime-volume")||"50",g.style.opacity=p.checked?"1":"0.4"}p?.addEventListener("change",()=>{g.style.opacity=p.checked?"1":"0.4"}),document.getElementById("clock-settings")?.addEventListener("click",()=>{c(),s.classList.add("show")}),document.getElementById("clock-chime-test")?.addEventListener("click",()=>{const t=parseInt(l.value,10)/100,e=new Audio("/assets/sounds/church-bell.mp3");e.volume=t,e.play().catch(()=>{})}),document.getElementById("clock-settings-save")?.addEventListener("click",()=>{const t=s.querySelector('input[name="clock-style-radio"]:checked'),e=t?t.value:"default";safeSet("clock-style",e),safeSet("clock-chimes",String(p.checked)),safeSet("clock-chime-volume",l.value),P=e,x="",u(),y(),S(),s.classList.remove("show"),showNotification("Clock settings saved","success",2e3)}),document.getElementById("clock-settings-cancel")?.addEventListener("click",()=>{s.classList.remove("show")}),wireModal(s),s?.querySelectorAll('input[name="clock-style-radio"]').forEach(t=>{t.addEventListener("change",()=>{P=t.value,x="",u(),y()})})})(),(function(){async function b(){try{const A=await(await fetch("/api/v1/health-checks/status")).json();if(!A.success||!A.status)return;for(const[x,B]of Object.entries(A.status)){const w=document.getElementById("uptime-"+x),M=document.getElementById("uptime-bar-"+x);if(!w)continue;const L=B.uptime?.["24h"];if(L!=null){const $=L.toFixed(1);w.textContent=`${$}% uptime`,w.className="uptime-chip",L>=99.9?w.classList.add("excellent"):L>=99?w.classList.add("good"):L>=95?w.classList.add("degraded"):w.classList.add("poor"),M&&(M.style.width=$+"%")}}}catch{console.warn("[Card Badges] Health check API unavailable")}}let C;try{C=new Set(JSON.parse(safeSessionGet("dismissed-updates")||"[]"))}catch{C=new Set}let j=[];async function k(H){try{const x=await(await fetch("/api/v1/updates/available")).json();if(!x.success)return;document.querySelectorAll(".update-available-badge").forEach(w=>w.classList.remove("visible"));const B=x.updates||[];if(j=B,H&&B.length>0){const w=window._lastKnownUpdateCount||0;w>0&&B.length>w&&showNotification(`${B.length} container update(s) available \u2014 click Update Management to review.`,"info"),window._lastKnownUpdateCount=B.length}if(!B.length)return;for(const w of B){const M=window.APPS||[];for(const L of M)if(L.containerId===w.containerId||L.id===w.containerName||L.name===w.containerName){if(C.has(L.id))break;const $=document.getElementById("update-badge-"+L.id),u=document.getElementById("update-btn-"+L.id);$&&($.classList.add("visible"),$.title="Update available \u2014 click to open Update Management.",$.style.cursor="pointer",$.onclick=v=>{v.stopPropagation(),window.openUpdateModal&&window.openUpdateModal(L.id)}),u&&(u.style.background="#f97316",u.style.borderColor="#f97316",u.style.boxShadow="0 0 6px #f9731688",u.title="Update available \u2014 click to open Update Management.");break}}}catch{console.warn("[Card Badges] Updates API unavailable")}}function z(){setTimeout(()=>{b(),k()},5e3),setInterval(()=>{b(),k(!0)},6e4)}const P=window.refreshAll;P&&(window.refreshAll=async function(){try{await P(),setTimeout(b,1e3)}catch(H){console.warn("[Card Badges] Error in refreshAll hook:",H.message)}}),z()})(),(function(){var b=null,C=null,j={},k={dark:"Dark",light:"Light",blue:"Blue",black:"Black",nord:"Nord",dracula:"Dracula","solarized-dark":"Solarized Dark","solarized-light":"Solarized Light",taxi:"Taxi",ocean:"Ocean"},z=[["bg","Background","base"],["card-base","Card","base"],["fg","Text","base"],["muted","Muted Text","base"],["border","Border","base"],["accent","Accent","accent"],["accent-strong","Accent Strong","accent"],["ok-bg","OK Background","status"],["ok-fg","OK Text","status"],["bad-bg","Error Bg","status"],["bad-fg","Error Text","status"],["dot-ok","Dot OK","status"],["dot-bad","Dot Error","status"],["uptime","Uptime Bar","status"],["hover","Hover","advanced"],["card-hover","Card Hover","advanced"],["base","Tags/Badges","advanced"],["fg-muted","Dim Text","advanced"],["success","Success","advanced"],["error","Error","advanced"],["warning","Warning","advanced"]],P=document.getElementById("theme");if(!P)return;var H=document.getElementById("theme-label");function A(o){if(k[o])return k[o];var i=safeGetJSON(window.USER_THEMES_KEY,{});return i[o]&&i[o].name||o}function x(){H&&(H.textContent=A(window.getActiveTheme()))}P.addEventListener("click",function(){var o=window.THEMES.slice(),i=window.getActiveTheme(),n=o.indexOf(i),r=o[(n+1)%o.length];window.applyTheme(r),x()}),x();function B(){var o={base:"Base Colors",accent:"Accent",status:"Status",advanced:"Advanced (auto-deriLine truncated
<div class="weather-modal-content" style="min-width: 420px; max-width: 520px;">
<h3>DashCaddy License</h3>
<p style="font-size: 0.85rem; color: var(--muted); margin: 0 0 16px;">
@@ -2103,16 +2062,16 @@ This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST"
<button id="license-activate" class="btn-accent">Activate</button>
</div>
</div>
</div>`);const f=document.getElementById("license-modal"),B=document.getElementById("license-code-input"),j=document.getElementById("license-activate"),b=document.getElementById("license-deactivate"),D=document.getElementById("license-error"),A=document.getElementById("license-success"),P=document.getElementById("license-badge-icon"),R=document.getElementById("license-badge-text"),k=document.getElementById("license-badge"),M=document.getElementById("license-details"),E=document.getElementById("license-feature-list"),z=document.getElementById("license-activate-section");let C=null;function N(){D.style.display="none",A.style.display="none"}function x(S){N(),D.textContent=S,D.style.display="block"}function I(S){N(),A.textContent=S,A.style.display="block"}function H(S){if(C=S,S.active){k.style.background="rgba(46,204,113,0.15)",k.style.color="var(--ok-fg)",P.textContent="\u2605",R.textContent="Premium Active";const s=S.lifetime?"<div>License: <strong>LIFETIME</strong></div>":`<div>Expires: <strong>${new Date(S.expiresAt).toLocaleDateString()}</strong> (${S.daysRemaining} days remaining)</div>`;M.innerHTML=`
</div>`);const b=document.getElementById("license-modal"),C=document.getElementById("license-code-input"),j=document.getElementById("license-activate"),k=document.getElementById("license-deactivate"),z=document.getElementById("license-error"),P=document.getElementById("license-success"),H=document.getElementById("license-badge-icon"),A=document.getElementById("license-badge-text"),x=document.getElementById("license-badge"),B=document.getElementById("license-details"),w=document.getElementById("license-feature-list"),M=document.getElementById("license-activate-section");let L=null;function $(){z.style.display="none",P.style.display="none"}function u(S){$(),z.textContent=S,z.style.display="block"}function v(S){$(),P.textContent=S,P.style.display="block"}function D(S){if(L=S,S.active){x.style.background="rgba(46,204,113,0.15)",x.style.color="var(--ok-fg)",H.textContent="\u2605",A.textContent="Premium Active";const s=S.lifetime?"<div>License: <strong>LIFETIME</strong></div>":`<div>Expires: <strong>${new Date(S.expiresAt).toLocaleDateString()}</strong> (${S.daysRemaining} days remaining)</div>`;B.innerHTML=`
<div>Code: <code style="font-family: monospace;">${S.code||"***"}</code></div>
${s}
`,z.style.display="none",j.style.display="none",b.style.display=""}else k.style.background="rgba(149,165,166,0.15)",k.style.color="var(--muted)",P.textContent="\u2606",R.textContent=S.expired?"License Expired":"Free Tier",M.innerHTML=S.expired?"<div>Your license has expired. Enter a new code to renew.</div>":"<div>Enter a license code to unlock premium features.</div>",z.style.display="",j.style.display="",b.style.display="none";const y=S.premiumFeatures||{},w=new Set(S.features||[]);E.innerHTML=Object.entries(y).map(([s,p])=>`<div style="display: flex; align-items: center; gap: 8px; padding: 8px 12px; border-radius: 6px; background: var(--card-bg); border: 1px solid var(--border);">
<span style="font-size: 1.1rem;">${w.has(s)?"\u2705":"\u{1F512}"}</span>
`,M.style.display="none",j.style.display="none",k.style.display=""}else x.style.background="rgba(149,165,166,0.15)",x.style.color="var(--muted)",H.textContent="\u2606",A.textContent=S.expired?"License Expired":"Free Tier",B.innerHTML=S.expired?"<div>Your license has expired. Enter a new code to renew.</div>":"<div>Enter a license code to unlock premium features.</div>",M.style.display="",j.style.display="",k.style.display="none";const f=S.premiumFeatures||{},E=new Set(S.features||[]);w.innerHTML=Object.entries(f).map(([s,p])=>`<div style="display: flex; align-items: center; gap: 8px; padding: 8px 12px; border-radius: 6px; background: var(--card-bg); border: 1px solid var(--border);">
<span style="font-size: 1.1rem;">${E.has(s)?"\u2705":"\u{1F512}"}</span>
<div>
<div style="font-weight: 600; font-size: 0.9rem;">${p.name}</div>
<div style="font-size: 0.78rem; color: var(--muted);">${p.description}</div>
</div>
</div>`).join("")}async function m(){try{const y=await(await fetch("/api/v1/license/status")).json();y.success&&(H(y.license),O(y.license))}catch(S){console.warn("Failed to load license status:",S.message)}}async function L(){const S=B.value.trim();if(!S){x("Please enter a license code.");return}N(),j.disabled=!0,j.textContent="Activating...";try{const w=await(await secureFetch("/api/v1/license/activate",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:S})})).json();w.success?(I(w.message),B.value="",H(w.license),showNotification("License activated! Premium features unlocked.","success",5e3),O(w.license)):x(w.error||"Activation failed")}catch(y){x("Network error: "+y.message)}finally{j.disabled=!1,j.textContent="Activate"}}async function T(){if(confirm("Deactivate your license? You can reuse the code on another machine.")){b.disabled=!0,b.textContent="Deactivating...";try{const y=await(await secureFetch("/api/v1/license/deactivate",{method:"POST"})).json();y.success?(I(y.message),await m(),showNotification("License deactivated.","info",3e3),O({active:!1})):x(y.error||"Deactivation failed")}catch(S){x("Network error: "+S.message)}finally{b.disabled=!1,b.textContent="Deactivate"}}}function O(S){const y=document.getElementById("license-status-topbar"),w=document.getElementById("license-topbar-icon"),s=document.getElementById("license-topbar-text"),p=document.getElementById("license-topbar-time");if(y)if(y.className="license-status-topbar "+(S.active?"premium":"free"),S.active)if(w.textContent="\u2605",s.textContent="PREMIUM",S.lifetime)p.textContent="\xB7 LIFETIME";else{const l=S.daysRemaining;p.textContent=l!=null?"\xB7 "+l+"d remaining":""}else w.textContent="\u2606",s.textContent=S.expired?"EXPIRED":"FREE TIER",p.textContent=""}function u(){N(),m(),f.classList.add("show")}B.addEventListener("input",function(){let S=this.value.toUpperCase().replace(/[^A-Z0-9-]/g,"");if(S.length>this._prevLength&&(S=S.replace(/-/g,""),S.length>2&&!S.startsWith("DC")&&(S="DC"+S),S.startsWith("DC")&&S.length>2)){const y=["DC"],w=S.substring(2);for(let s=0;s<w.length;s+=5)y.push(w.substring(s,s+5));S=y.join("-")}this._prevLength=S.length,this.value=S}),j.addEventListener("click",L),b.addEventListener("click",T),B.addEventListener("keydown",S=>{S.key==="Enter"&&L()}),wireModal(f,document.getElementById("license-cancel"));const g=document.getElementById("license-status-topbar");g&&g.addEventListener("click",()=>window.openLicenseModal&&window.openLicenseModal()),window.openLicenseModal=u,window.checkPremiumFeature=async function(S){try{return(await(await fetch(`/api/v1/license/feature/${S}`)).json()).available}catch{return!1}},m().then(S=>{C&&O(C)})})(),(function(){"use strict";if(window.__dc_058_share_modal_loaded)return;window.__dc_058_share_modal_loaded=!0;const f=[{ms:3600*1e3,label:"1 hour"},{ms:1440*60*1e3,label:"24 hours"},{ms:10080*60*1e3,label:"7 days"}];injectModal("share-modal",`
</div>`).join("")}async function I(){try{const f=await(await fetch("/api/v1/license/status")).json();f.success&&(D(f.license),O(f.license))}catch(S){console.warn("Failed to load license status:",S.message)}}async function R(){const S=C.value.trim();if(!S){u("Please enter a license code.");return}$(),j.disabled=!0,j.textContent="Activating...";try{const E=await(await secureFetch("/api/v1/license/activate",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:S})})).json();E.success?(v(E.message),C.value="",D(E.license),showNotification("License activated! Premium features unlocked.","success",5e3),O(E.license)):u(E.error||"Activation failed")}catch(f){u("Network error: "+f.message)}finally{j.disabled=!1,j.textContent="Activate"}}async function N(){if(confirm("Deactivate your license? You can reuse the code on another machine.")){k.disabled=!0,k.textContent="Deactivating...";try{const f=await(await secureFetch("/api/v1/license/deactivate",{method:"POST"})).json();f.success?(v(f.message),await I(),showNotification("License deactivated.","info",3e3),O({active:!1})):u(f.error||"Deactivation failed")}catch(S){u("Network error: "+S.message)}finally{k.disabled=!1,k.textContent="Deactivate"}}}function O(S){const f=document.getElementById("license-status-topbar"),E=document.getElementById("license-topbar-icon"),s=document.getElementById("license-topbar-text"),p=document.getElementById("license-topbar-time");if(f)if(f.className="license-status-topbar "+(S.active?"premium":"free"),S.active)if(E.textContent="\u2605",s.textContent="PREMIUM",S.lifetime)p.textContent="\xB7 LIFETIME";else{const l=S.daysRemaining;p.textContent=l!=null?"\xB7 "+l+"d remaining":""}else E.textContent="\u2606",s.textContent=S.expired?"EXPIRED":"FREE TIER",p.textContent=""}function m(){$(),I(),b.classList.add("show")}C.addEventListener("input",function(){let S=this.value.toUpperCase().replace(/[^A-Z0-9-]/g,"");if(S.length>this._prevLength&&(S=S.replace(/-/g,""),S.length>2&&!S.startsWith("DC")&&(S="DC"+S),S.startsWith("DC")&&S.length>2)){const f=["DC"],E=S.substring(2);for(let s=0;s<E.length;s+=5)f.push(E.substring(s,s+5));S=f.join("-")}this._prevLength=S.length,this.value=S}),j.addEventListener("click",R),k.addEventListener("click",N),C.addEventListener("keydown",S=>{S.key==="Enter"&&R()}),wireModal(b,document.getElementById("license-cancel"));const y=document.getElementById("license-status-topbar");y&&y.addEventListener("click",()=>window.openLicenseModal&&window.openLicenseModal()),window.openLicenseModal=m,window.checkPremiumFeature=async function(S){try{return(await(await fetch(`/api/v1/license/feature/${S}`)).json()).available}catch{return!1}},I().then(S=>{L&&O(L)})})(),(function(){"use strict";if(window.__dc_058_share_modal_loaded)return;window.__dc_058_share_modal_loaded=!0;const b=[{ms:3600*1e3,label:"1 hour"},{ms:1440*60*1e3,label:"24 hours"},{ms:10080*60*1e3,label:"7 days"}];injectModal("share-modal",`
<div id="share-modal" class="weather-modal" role="dialog" aria-labelledby="share-modal-title">
<div class="weather-modal-content" style="min-width: 460px; max-width: 580px;">
<h3 id="share-modal-title">Share <span id="share-modal-service-name">\u2026</span></h3>
@@ -2134,7 +2093,7 @@ This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST"
<div class="share-tab-panel" data-panel="public">
<label class="form-label-bold" for="share-public-ttl">Link duration:</label>
<select id="share-public-ttl" style="width: 100%; padding: 8px 10px; margin: 6px 0 12px; background: var(--input-bg); color: var(--fg); border: 1px solid var(--border); border-radius: 4px;">
${f.map(t=>`<option value="${t.ms}">${t.label}</option>`).join("")}
${b.map(t=>`<option value="${t.ms}">${t.label}</option>`).join("")}
</select>
<button id="share-public-create" class="btn-accent" type="button"
style="width: 100%; padding: 10px; background: var(--accent); color: #04141f; border: 0; border-radius: 4px; font-weight: 600; cursor: pointer;">
@@ -2181,17 +2140,17 @@ This can take ~30-60s\u2026`);try{const{body:L}=await D("/deploy",{method:"POST"
</div>
</div>
</div>
`);const B=document.getElementById("share-modal"),j=document.getElementById("share-modal-service-name"),b=document.getElementById("share-issued"),D=document.getElementById("share-issued-url"),A=document.getElementById("share-issued-copy"),P=document.getElementById("share-issued-meta"),R=document.getElementById("share-error"),k=document.getElementById("share-success"),M=document.getElementById("share-outstanding-list"),E=document.getElementById("share-cancel"),z=document.getElementById("share-public-create"),C=document.getElementById("share-ts-create"),N=document.getElementById("share-ts-email"),x=document.getElementById("share-public-ttl");let I=null,H="public";function m(){R.style.display="none",k.style.display="none",b.style.display="none"}function L(t){k.style.display="none",b.style.display="none",R.textContent=t,R.style.display="block"}function T(t){R.style.display="none",k.textContent=t,k.style.display="block"}function O(){return window.location.origin}function u(t){return t.startsWith("http")?t:O()+t}function g(t){if(!t)return"";const e=new Date(t);return Number.isNaN(e.getTime())?"":e.toLocaleString()}function S(t){if(t<=0)return"expired";const e=Math.floor(t/36e5);if(e>=24)return`${Math.floor(e/24)}d ${e%24}h left`;const a=Math.floor(t%36e5/6e4);return`${e}h ${a}m left`}function y(t){H=t,m(),B.querySelectorAll(".share-tab").forEach(e=>{const a=e.dataset.tab===t;e.classList.toggle("active",a),e.style.borderBottomColor=a?"var(--accent)":"transparent",e.style.color=a?"var(--fg)":"var(--muted)",e.style.fontWeight=a?"600":"400"}),B.querySelectorAll(".share-tab-panel").forEach(e=>{e.style.display=e.dataset.panel===t?"":"none"})}async function w(){M.innerHTML='<span style="color: var(--muted);">Loading\u2026</span>';try{const t=await fetch("/api/v1/share",{credentials:"same-origin"});if(!t.ok){M.innerHTML='<span style="color: var(--muted);">No shares listed.</span>';return}const e=await t.json(),o=(e&&e.data||[]).filter(i=>i.serviceId===I.id);if(o.length===0){M.innerHTML='<span style="color: var(--muted);">No outstanding shares for this service.</span>';return}M.innerHTML=o.map(i=>{const n=i.expiresAt?S(new Date(i.expiresAt).getTime()-Date.now()):"";return`
`);const C=document.getElementById("share-modal"),j=document.getElementById("share-modal-service-name"),k=document.getElementById("share-issued"),z=document.getElementById("share-issued-url"),P=document.getElementById("share-issued-copy"),H=document.getElementById("share-issued-meta"),A=document.getElementById("share-error"),x=document.getElementById("share-success"),B=document.getElementById("share-outstanding-list"),w=document.getElementById("share-cancel"),M=document.getElementById("share-public-create"),L=document.getElementById("share-ts-create"),$=document.getElementById("share-ts-email"),u=document.getElementById("share-public-ttl");let v=null,D="public";function I(){A.style.display="none",x.style.display="none",k.style.display="none"}function R(t){x.style.display="none",k.style.display="none",A.textContent=t,A.style.display="block"}function N(t){A.style.display="none",x.textContent=t,x.style.display="block"}function O(){return window.location.origin}function m(t){return t.startsWith("http")?t:O()+t}function y(t){if(!t)return"";const e=new Date(t);return Number.isNaN(e.getTime())?"":e.toLocaleString()}function S(t){if(t<=0)return"expired";const e=Math.floor(t/36e5);if(e>=24)return`${Math.floor(e/24)}d ${e%24}h left`;const a=Math.floor(t%36e5/6e4);return`${e}h ${a}m left`}function f(t){D=t,I(),C.querySelectorAll(".share-tab").forEach(e=>{const a=e.dataset.tab===t;e.classList.toggle("active",a),e.style.borderBottomColor=a?"var(--accent)":"transparent",e.style.color=a?"var(--fg)":"var(--muted)",e.style.fontWeight=a?"600":"400"}),C.querySelectorAll(".share-tab-panel").forEach(e=>{e.style.display=e.dataset.panel===t?"":"none"})}async function E(){B.innerHTML='<span style="color: var(--muted);">Loading\u2026</span>';try{const t=await fetch("/api/v1/share",{credentials:"same-origin"});if(!t.ok){B.innerHTML='<span style="color: var(--muted);">No shares listed.</span>';return}const e=await t.json(),o=(e&&e.data||[]).filter(i=>i.serviceId===v.id);if(o.length===0){B.innerHTML='<span style="color: var(--muted);">No outstanding shares for this service.</span>';return}B.innerHTML=o.map(i=>{const n=i.expiresAt?S(new Date(i.expiresAt).getTime()-Date.now()):"";return`
<div class="share-row" data-share-id="${escapeHtml(i.id)}"
style="display: flex; align-items: center; gap: 8px; padding: 6px 0; border-bottom: 1px dashed var(--border);">
<span style="flex: 1;">
<strong>${i.kind==="tailscale"?"Tailscale":"Public"}</strong>
<span style="color: var(--muted);"> \xB7 expires ${escapeHtml(g(i.expiresAt))} (${n})</span>
<span style="color: var(--muted);"> \xB7 expires ${escapeHtml(y(i.expiresAt))} (${n})</span>
</span>
<button class="share-revoke" data-share-id="${escapeHtml(i.id)}" type="button"
style="padding: 4px 10px; background: transparent; color: var(--bad-fg); border: 1px solid var(--bad-fg); border-radius: 4px; cursor: pointer; font-size: 0.8rem;">
Revoke
</button>
</div>
`}).join(""),M.querySelectorAll(".share-revoke").forEach(i=>{i.addEventListener("click",()=>s(i.dataset.shareId))})}catch{M.innerHTML='<span style="color: var(--muted);">Could not load outstanding shares.</span>'}}async function s(t){try{const e=await fetch(`/api/v1/share/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"same-origin"});if(!e.ok){const a=await e.json().catch(()=>({}));L(a&&a.error||`Revoke failed (HTTP ${e.status}).`);return}T("Share revoked."),w()}catch{L("Network error while revoking.")}}async function p(){if(!I)return;m(),z.disabled=!0;const t=z.textContent;z.textContent="Creating\u2026";try{const e=parseInt(x.value,10),a=await fetch("/api/v1/share",{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({serviceId:I.id,ttlMs:e})}),o=await a.json().catch(()=>({}));if(!a.ok||!o.success){v(a.status,o);return}const i=o.data.urlPath;D.value=u(i),P.textContent=`Public link \xB7 expires ${g(o.data.expiresAt)}`,b.style.display="block",T("Share link created."),w()}catch{L("Network error while creating share.")}finally{z.disabled=!1,z.textContent=t}}async function l(){if(!I)return;const t=(N.value||"").trim();if(!t||!t.includes("@")){L("A valid recipient email is required.");return}m(),C.disabled=!0;const e=C.textContent;C.textContent="Creating\u2026";try{const a=await fetch("/api/v1/share/tailscale",{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({serviceId:I.id,email:t})}),o=await a.json().catch(()=>({}));if(!a.ok||!o.success){v(a.status,o);return}const i=o.data&&o.data.urlPath;i?(D.value=u(i),P.textContent=`Tailscale invite \xB7 emailed to ${t} (or use this URL manually if delivery failed).`):(D.value="",P.textContent=`Tailscale invite sent to ${t}.`),b.style.display="block",T("Tailscale invite created."),N.value="",w()}catch{L("Network error while creating Tailscale invite.")}finally{C.disabled=!1,C.textContent=e}}function v(t,e){const a=e&&e.error||"";if(t===402){L("Share is a Pro feature. Activate a license to unlock.");return}if(t===400&&/tailscale/i.test(a)){L("Tailscale is not configured on this host. Set up Tailscale in the dashboard first.");return}if(t===403){L("You do not have permission to share services.");return}if(t===404){L("Service not found. It may have been deleted.");return}L(a||`Request failed (HTTP ${t}).`)}function c(t){!t||!t.id||(I={id:t.id,name:t.name||t.id},j.textContent=I.name,m(),y("public"),N.value="",x.value=String(f[1].ms),B.classList.add("show"),w())}B.querySelectorAll(".share-tab").forEach(t=>{t.addEventListener("click",()=>y(t.dataset.tab))}),z.addEventListener("click",p),C.addEventListener("click",l),E.addEventListener("click",()=>B.classList.remove("show")),wireModal(B,E),A.addEventListener("click",async()=>{const t=D.value;if(t)try{navigator.clipboard&&navigator.clipboard.writeText?await navigator.clipboard.writeText(t):(D.select(),document.execCommand("copy"));const e=A.textContent;A.textContent="Copied!",setTimeout(()=>{A.textContent=e},1200)}catch{L("Could not copy to clipboard. Select the URL manually.")}}),window.openShareModal=c})();
//# sourceMappingURL=data:application/json;base64,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 Line truncated
`}).join(""),B.querySelectorAll(".share-revoke").forEach(i=>{i.addEventListener("click",()=>s(i.dataset.shareId))})}catch{B.innerHTML='<span style="color: var(--muted);">Could not load outstanding shares.</span>'}}async function s(t){try{const e=await fetch(`/api/v1/share/${encodeURIComponent(t)}`,{method:"DELETE",credentials:"same-origin"});if(!e.ok){const a=await e.json().catch(()=>({}));R(a&&a.error||`Revoke failed (HTTP ${e.status}).`);return}N("Share revoked."),E()}catch{R("Network error while revoking.")}}async function p(){if(!v)return;I(),M.disabled=!0;const t=M.textContent;M.textContent="Creating\u2026";try{const e=parseInt(u.value,10),a=await fetch("/api/v1/share",{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({serviceId:v.id,ttlMs:e})}),o=await a.json().catch(()=>({}));if(!a.ok||!o.success){g(a.status,o);return}const i=o.data.urlPath;z.value=m(i),H.textContent=`Public link \xB7 expires ${y(o.data.expiresAt)}`,k.style.display="block",N("Share link created."),E()}catch{R("Network error while creating share.")}finally{M.disabled=!1,M.textContent=t}}async function l(){if(!v)return;const t=($.value||"").trim();if(!t||!t.includes("@")){R("A valid recipient email is required.");return}I(),L.disabled=!0;const e=L.textContent;L.textContent="Creating\u2026";try{const a=await fetch("/api/v1/share/tailscale",{method:"POST",credentials:"same-origin",headers:{"Content-Type":"application/json"},body:JSON.stringify({serviceId:v.id,email:t})}),o=await a.json().catch(()=>({}));if(!a.ok||!o.success){g(a.status,o);return}const i=o.data&&o.data.urlPath;i?(z.value=m(i),H.textContent=`Tailscale invite \xB7 emailed to ${t} (or use this URL manually if delivery failed).`):(z.value="",H.textContent=`Tailscale invite sent to ${t}.`),k.style.display="block",N("Tailscale invite created."),$.value="",E()}catch{R("Network error while creating Tailscale invite.")}finally{L.disabled=!1,L.textContent=e}}function g(t,e){const a=e&&e.error||"";if(t===402){R("Share is a Pro feature. Activate a license to unlock.");return}if(t===400&&/tailscale/i.test(a)){R("Tailscale is not configured on this host. Set up Tailscale in the dashboard first.");return}if(t===403){R("You do not have permission to share services.");return}if(t===404){R("Service not found. It may have been deleted.");return}R(a||`Request failed (HTTP ${t}).`)}function c(t){!t||!t.id||(v={id:t.id,name:t.name||t.id},j.textContent=v.name,I(),f("public"),$.value="",u.value=String(b[1].ms),C.classList.add("show"),E())}C.querySelectorAll(".share-tab").forEach(t=>{t.addEventListener("click",()=>f(t.dataset.tab))}),M.addEventListener("click",p),L.addEventListener("click",l),w.addEventListener("click",()=>C.classList.remove("show")),wireModal(C,w),P.addEventListener("click",async()=>{const t=z.value;if(t)try{navigator.clipboard&&navigator.clipboard.writeText?await navigator.clipboard.writeText(t):(z.select(),document.execCommand("copy"));const e=P.textContent;P.textContent="Copied!",setTimeout(()=>{P.textContent=e},1200)}catch{R("Could not copy to clipboard. Select the URL manually.")}}),window.openShareModal=c})();
//# sourceMappingURL=data:application/json;base64,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 Line truncated
+1 -165
View File
@@ -6,31 +6,6 @@
// Follows the security-center.js modal pattern (injectModal + button in the
// top bar) and the weather-modal visual language.
// DC-133: pure repo-option builder. Remote Gitea fields are UNTRUSTED (a
// hostile instance controls full_name/description/url), so every
// interpolated value must be HTML-escaped before innerHTML. Exposed on
// window so status/tests can pin the escaping with hostile payloads.
window.__dc133_buildRepoOptions = function (repos, escFn) {
var e = escFn || function (s) {
return String(s).replace(/[&<>"']/g, function (c) {
return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
});
};
return '<option value="">— choose a repo —</option>' +
(repos || []).map(function (r) {
return '<option value="' + e(r.url) + '" data-id="' + e(r.id) + '">' +
e(r.full_name) + (r.description ? ' — ' + e(r.description) : '') + '</option>';
}).join('');
};
// Three-state token semantics, exposed for VM tests:
// anonymous=true -> explicit empty; typed value -> token; neither -> omitted.
window.__dc133_requestToken = function (anonymous, typed) {
if (anonymous) return '';
var t = String(typed || '').trim();
return t || undefined;
};
(function () {
injectModal('deploys-modal', `<div id="deploys-modal" class="weather-modal">
<div class="weather-modal-content" style="min-width: 860px; max-width: 1200px;">
@@ -42,7 +17,7 @@ window.__dc133_requestToken = function (anonymous, typed) {
<div class="sec-tabs" style="display:flex;gap:8px;margin-bottom:14px;border-bottom:1px solid var(--border);">
<button class="dep-tab active" data-tab="services">Services</button>
<button class="dep-tab" data-tab="deploy">Deploy</button>
<button class="dep-tab" data-tab="journal">Journal</button><button class="dep-tab" data-tab="install">Install</button>
<button class="dep-tab" data-tab="journal">Journal</button>
</div>
<!-- SERVICES TAB -->
@@ -72,43 +47,6 @@ window.__dc133_requestToken = function (anonymous, typed) {
<div id="dep-journal" class="scroll-container" style="max-height:320px;">Loading…</div>
</div>
<!-- INSTALL TAB (DC-131) -->
<div class="dep-panel" data-panel="install" style="display:none;">
<div style="display:grid;gap:10px;max-width:640px;">
<div style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Gitea server (any instance)</span>
<div style="display:flex;gap:8px;">
<input id="dep-gh-gitea-host" placeholder="git.dashcaddy.net (default)" style="flex:1;" autocomplete="off" spellcheck="false" />
<input id="dep-gh-gitea-token" type="password" placeholder="token (private repos)" style="flex:1;" autocomplete="off" spellcheck="false" />
</div>
<label style="display:flex;gap:6px;align-items:center;font-size:12px;">
<input id="dep-gh-anonymous" type="checkbox" />
Anonymous — ignore the saved fleet token for this request
</label>
</div>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Pick a repo</span>
<select id="dep-gh-gitea" style="min-width:280px;"><option value="">Loading…</option></select>
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">…or paste any repo URL (GitHub, Gitea, or any https git host)</span>
<input id="dep-gh-url" placeholder="https://host/owner/repo" style="width:100%;" />
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Name (used as subdomain; card title falls back to repo name)</span>
<input id="dep-gh-service" placeholder="my-app" style="width:220px;" />
</label>
<label style="display:grid;gap:4px;">
<span class="modal-subtitle" style="margin:0;">Optional launch args (space-separated simple tokens, e.g. -text hi)</span>
<input id="dep-gh-args" placeholder="-text hello" style="width:100%;" />
</label>
<p class="modal-subtitle" style="margin:0;">
Go repos with a main package install automatically: build, systemd release,
Caddy gate (tailnet-only), DNS, verify, dashboard card. Takes ~30-60s.
</p>
<div><button class="btn btn-primary" id="dep-gh-btn">Install</button></div>
</div>
</div>
<!-- OUTPUT -->
<pre id="dep-output" class="scroll-container" style="display:none;max-height:260px;margin-top:12px;background:var(--bg-2,#111);padding:10px;border-radius:8px;white-space:pre-wrap;"></pre>
@@ -198,91 +136,6 @@ window.__dc133_requestToken = function (anonymous, typed) {
).join('') + '</tbody></table>';
}
async function loadGiteaRepos() {
const sel = document.getElementById('dep-gh-gitea');
const hostEl = document.getElementById('dep-gh-gitea-host');
const tokEl = document.getElementById('dep-gh-gitea-token');
const anonEl = document.getElementById('dep-gh-anonymous');
const payload = {};
if (hostEl && hostEl.value.trim()) payload.gitea_url = 'https://' + hostEl.value.trim().replace(/^https?:\/*/, '');
// Distinguish omitted (fleet fallback allowed) from explicit anonymous
// (empty token preserved on wire). A non-empty user token wins.
if (anonEl && anonEl.checked) payload.token = '';
else {
const t = window.__dc133_requestToken(false, tokEl && tokEl.value);
if (t !== undefined) payload.token = t;
}
try {
const { status, body } = await api('/gitea-repos', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify(payload),
});
if (!body.success || !(body.repos || []).length) {
sel.innerHTML = '<option value="">' + esc(body.error || 'no repos found') + '</option>';
return;
}
// All remote fields are untrusted (hostile Gitea instance or repo
// metadata) — build options through the escaping helper (pinned by
// status/tests/deploys-install.test.js).
sel.innerHTML = window.__dc133_buildRepoOptions(body.repos, esc);
} catch (e) {
sel.innerHTML = '<option value="">unavailable</option>';
}
}
async function runInstall() {
const btn = document.getElementById('dep-gh-btn');
const repoUrl = document.getElementById('dep-gh-url').value.trim();
const service = (document.getElementById('dep-gh-service').value.trim() || '').toLowerCase();
const argsRaw = document.getElementById('dep-gh-args').value.trim();
if (!repoUrl || !service) { showOutput('Repo URL and name are required.'); return; }
const args = argsRaw ? argsRaw.split(/\s+/) : [];
setBusy(true, btn, 'Install');
showOutput('Installing ' + repoUrl + '\nCloning, building, gating and DNS-ing... (~30-60s)');
try {
const anonymous = !!(document.getElementById('dep-gh-anonymous') || {}).checked;
const typedToken = (document.getElementById('dep-gh-gitea-token') || { value: '' }).value;
const requestToken = window.__dc133_requestToken(anonymous, typedToken);
const { status, body } = await api('/install', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ repo_url: repoUrl, service, args,
token: requestToken }),
});
if (!body.success) {
showOutput((body.output ? body.output + '\n' : '') + 'FAIL ' + (body.error || ('HTTP ' + status)));
setBusy(false, btn, 'Install');
return;
}
const svc = body.service || {};
const exists = (window.APPS || []).some((a) => a.id === svc.id);
if (!exists) {
const card = { id: svc.id, name: svc.name || svc.id, url: svc.url, logo: svc.logo, tailscaleOnly: true, isCustom: true };
try {
await fetch('/dashcaddy-api/api/v1/services', {
method: 'POST',
credentials: 'include',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify(card),
});
window.APPS.push(card);
if (typeof window.renderApps === 'function') window.renderApps();
if (typeof window.renderGrid === 'function') window.renderGrid();
} catch (e) { /* card registration best-effort */ }
}
showOutput('INSTALLED ' + (svc.name || svc.id) + ' in ' + (svc.deploy_seconds || '?') + 's' +
'\nCard: ' + (svc.url || '') +
'\n' + (body.output || '').slice(-800));
loadServices();
} catch (e) {
showOutput('install error: ' + e.message);
}
setBusy(false, btn, 'Install');
}
function setBusy(busy, btn, label) {
if (!btn) return;
btn.disabled = busy;
@@ -349,7 +202,6 @@ window.__dc133_requestToken = function (anonymous, typed) {
loadServices();
loadRepos();
loadJournal('');
loadGiteaRepos();
}
});
@@ -369,22 +221,6 @@ window.__dc133_requestToken = function (anonymous, typed) {
});
$('dep-deploy-btn').addEventListener('click', runDeploy);
$('dep-gh-btn').addEventListener('click', runInstall);
['dep-gh-gitea-host', 'dep-gh-gitea-token'].forEach((id) => {
const el = document.getElementById(id);
if (el) el.addEventListener('change', () => loadGiteaRepos());
});
document.getElementById('dep-gh-gitea').addEventListener('change', (e) => {
const v = e.target.value;
if (v) {
document.getElementById('dep-gh-url').value = v;
const opt = e.target.selectedOptions[0];
const id = opt && opt.dataset ? opt.dataset.id : '';
const svc = document.getElementById('dep-gh-service');
if (id && !svc.value) svc.value = id;
}
});
$('dep-journal-btn').addEventListener('click', () => loadJournal($('dep-journal-name').value.trim()));
$('dep-status-btn').addEventListener('click', () => {
+1 -1
View File
@@ -1,4 +1,4 @@
const CACHE = 'dashcaddy-shell-31798d1d47';
const CACHE = 'dashcaddy-shell-e494299e9f';
const PRECACHE = [
'/',
'/index.html',
-195
View File
@@ -1,195 +0,0 @@
'use strict';
/**
* DC-131/133 deploys Install tab tests.
*
* Pins the DOM-XSS escaping on the Gitea repo picker: remote repo fields
* (url, id, full_name, description) are UNTRUSTED — a hostile Gitea
* instance controls them — so they must be HTML-escaped before they reach
* innerHTML. We load status/js/deploys.js in a sandboxed VM with a minimal
* mocked DOM (same pattern as share-modal.test.js) and drive the exposed
* window.__dc133_buildRepoOptions() with hostile payloads.
*
* Also verifies the token input is type="password" (not echoed to screen)
* and that the modal carries no github.com-only assumptions.
*/
const fs = require('fs');
const path = require('path');
const vm = require('vm');
const test = require('node:test');
const assert = require('node:assert/strict');
function findTarget() {
// Prefer the panel (ui) file; the routes/deploys.js proxy file is a
// different module (CommonJS, jest-side) and must not match this scan.
const candidates = [
path.join(__dirname, '..', 'js', 'deploys.js'),
path.join(__dirname, 'deploys.js'),
path.join(__dirname, 'ui-deploys.js'),
];
for (const p of candidates) {
try { if (fs.statSync(p).isFile()) return p; } catch (_) { /* keep looking */ }
}
const dir = __dirname;
let entries = [];
try { entries = fs.readdirSync(dir); } catch (_) { return null; }
const match = entries.find(e => e.endsWith('_ui-deploys.js') || e.endsWith('-ui-deploys.js'));
return match ? path.join(dir, match) : null;
}
const SOURCE_PATH = findTarget();
if (!SOURCE_PATH) {
throw new Error('Cannot find ui-deploys.js (panel bundle source). Searched ' + __dirname + ' and ../js/.');
}
function buildFakeDom() {
const elements = new Map();
function makeEl(id) {
return {
id,
value: '',
textContent: '',
innerHTML: '',
style: {},
dataset: {},
classList: {
_set: new Set(),
add(c) { this._set.add(c); },
remove(c) { this._set.delete(c); },
toggle(c, on) { if (on) this._set.add(c); else this._set.delete(c); },
contains(c) { return this._set.has(c); },
},
disabled: false,
addEventListener() {},
appendChild() {},
querySelectorAll() { return []; },
selectedOptions: [],
setAttribute() {},
getAttribute() { return null; },
};
}
const knownIds = [
'deploys-modal', 'dep-gh-gitea', 'dep-gh-gitea-host', 'dep-gh-gitea-token',
'dep-gh-anonymous', 'dep-gh-url', 'dep-gh-service', 'dep-gh-args', 'dep-gh-btn',
'dep-output', 'dep-services', 'dep-journal', 'dep-journal-name',
'dep-journal-btn', 'dep-status-name', 'dep-status-btn',
'dep-repo-select', 'dep-close', 'dep-deploy-btn',
];
for (const id of knownIds) elements.set(id, makeEl(id));
return {
_elements: elements,
body: { insertAdjacentHTML() {}, appendChild() {} },
getElementById(id) { return elements.get(id) || null; },
createElement() { return makeEl('created'); },
addEventListener() {},
querySelectorAll() { return []; },
readyState: 'complete',
};
}
function buildSandbox() {
const dom = buildFakeDom();
const windowStub = {
escapeHtml: (s) => String(s == null ? '' : s)
.replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])),
renderApps: undefined,
renderGrid: undefined,
APPS: [],
};
const sandbox = {
window: windowStub,
document: dom,
fetch: () => Promise.resolve({ status: 200, json: async () => ({ success: true, rows: [], repos: [], services: [] }) }),
URL,
location: { origin: 'https://status.sami' },
setTimeout,
clearTimeout,
navigator: {},
injectModal: () => {},
wireModal: () => {},
showNotification: () => {},
console,
};
vm.createContext(sandbox);
return { sandbox, dom, windowStub };
}
function loadModule() {
const { sandbox, dom, windowStub } = buildSandbox();
vm.runInContext(fs.readFileSync(SOURCE_PATH, 'utf8'), sandbox, { filename: SOURCE_PATH });
return { dom, windowStub };
}
test('deploys.js loads in sandbox and exposes the DC-133 option builder', () => {
const { windowStub } = loadModule();
assert.equal(typeof windowStub.__dc133_buildRepoOptions, 'function');
});
test('repo options escape hostile full_name/description/url/id payloads', () => {
const { windowStub } = loadModule();
const build = windowStub.__dc133_buildRepoOptions;
const hostile = [{
url: 'https://evil.example/"><script>alert(1)</script>/x',
id: 'x" onmouseover="alert(2)',
full_name: '<script>alert(3)</script>',
description: '"><img src=x onerror=alert(4)>',
}];
const html = build(hostile);
// Security property: the hostile payloads' raw attack vectors must not
// survive — tags cannot open, quotes cannot delimit attributes. (The
// output legitimately contains its own <option> elements; what must be
// absent is any raw form of the injected values.)
assert.equal(html.includes('<script'), false, 'raw <script from payload must not survive');
assert.equal(html.includes('<img'), false, 'raw <img from payload must not survive');
assert.equal(html.includes('"><'), false, 'quote-angle injection delimiter must not survive');
assert.equal(html.includes('onmouseover="'), false, 'raw quoted attribute from payload must not survive');
assert.ok(html.includes('&lt;script&gt;'), 'escaped script tag present as inert text');
assert.ok(html.includes('&quot;&gt;'), 'escaped quote-angle present');
});
test('repo options builder is safe with an injected escFn too (no bypass)', () => {
const { windowStub } = loadModule();
const build = windowStub.__dc133_buildRepoOptions;
const html = build([{ url: 'u"><svg onload=alert(9)>', id: 'i', full_name: 'n', description: 'd' }],
(s) => String(s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c])));
assert.equal(html.includes('<svg'), false, 'raw <svg from payload must not survive');
assert.equal(html.includes('"><'), false, 'quote-angle delimiter must not survive');
});
test('empty and null repos arrays produce just the placeholder option', () => {
const { windowStub } = loadModule();
const build = windowStub.__dc133_buildRepoOptions;
assert.ok(build([]).includes('choose a repo'));
assert.ok(build(null).includes('choose a repo'));
});
test('token input is type=password in the modal markup', () => {
const source = fs.readFileSync(SOURCE_PATH, 'utf8');
const m = source.match(/id="dep-gh-gitea-token"[^>]*>/);
assert.ok(m, 'token input exists');
assert.ok(/type="password"/.test(m[0]), 'token input must be type=password, got: ' + m[0]);
});
test('install modal has no github.com-only placeholders (any-host UX)', () => {
const source = fs.readFileSync(SOURCE_PATH, 'utf8');
assert.equal(source.includes('https://github.com/owner/repo'), false,
'placeholder must not suggest github-only URLs');
});
test('request-token helper preserves explicit anonymous versus omitted', () => {
const { windowStub } = loadModule();
const token = windowStub.__dc133_requestToken;
assert.equal(typeof token, 'function');
assert.equal(token(true, 'typed-secret'), '',
'anonymous checkbox wins and emits explicit empty string');
assert.equal(token(false, ' typed-secret '), 'typed-secret');
assert.equal(token(false, ''), undefined,
'blank field without anonymous checkbox omits token (fleet fallback allowed)');
assert.equal(token(false, ' '), undefined);
});
test('anonymous checkbox exists in modal markup', () => {
const source = fs.readFileSync(SOURCE_PATH, 'utf8');
assert.match(source, /id="dep-gh-anonymous"[^>]*type="checkbox"/);
});