Termix/src/ui/sidebar/HostEditor.tsx

import { Select2 } from "@/components/select2";
import React, { useEffect, useMemo, useRef, useState } from "react";
import { useTranslation } from "react-i18next";
import { Button } from "@/components/button";
import { Input } from "@/components/input";
import { PasswordInput } from "@/components/password-input";
import {
  Globe,
  Pencil,
  Plus,
  Puzzle,
  Settings,
  Shield,
  Terminal,
  Upload,
  X,
} from "lucide-react";
import { InlineView, useConfirm } from "@/components/surface/surface-scope";
import {
  EditorPane,
  EditorSection,
  LazySection,
  type EditorNavBand,
} from "@/manage/EditorPane";
import { validateHostForm } from "@/manage/host-validation";
import { toast } from "sonner";
import { SectionCard, SettingRow, FakeSwitch } from "@/components/section-card";
import {
  createSSHHost,
  updateSSHHost,
  getUserInfo,
  getHostPassword,
  adminCreateUserHost,
  adminUpdateUserHost,
  adminGetHostPassword,
  createCredential,
  adminCreateUserCredential,
} from "@/main-axios";
import {
  getHostDefaultsLevel,
  previewHostDefaultsLevel,
  resolveHostDefaults,
  saveHostDefaultsLevel,
  waitForDefaultsJob,
  type HostDefaultsChange,
  type HostDefaultsTarget,
} from "@/api/host-defaults-api";
import type { ResolvedHostDefault } from "@/types/host-defaults";
import {
  HostDefaultBadge,
  HostDefaultsContext,
  HostOnly,
  type HostDefaultsContextValue,
} from "@/lib/host-defaults-context";
import { useEditorDefaultKeys } from "./host-defaults/catalog";
import {
  applyDefaultToForm,
  changedKeys,
  classifyForm,
  draftOwnKeys,
  formValueForKey,
  isOwnDefault,
  ownDefaultKeys,
  ownPluginValues,
  withAllNamespaces,
  withOwnKeys,
  withoutOwnKey,
} from "./host-defaults/form-mapping";
import type { Host } from "@/types/ui-types";
import type { SSHHost } from "@/types";
import { updatePluginHostSettings } from "@/api/plugins-api";
import {
  applyHostDraft,
  buildHostEditorPayload,
  createHostEditorForm,
  omitOwnerSshAuthFromSharedEdit,
  type HostAuthType,
  type HostEditorForm,
  type HostProtocols,
} from "./HostEditorData";
import { HostEditorGeneralTab } from "./HostEditorGeneralTab";
import { withProtocolSettings } from "./host-protocols";
import { canEditHost } from "./host-permissions";
import {
  getHostEditorSection,
  makeHostSshSubTabs,
  makeHostTabs,
  useHostEditorSections,
} from "./HostManagerTabs";
import { useSshAuthEditors } from "@/plugin-host/auth-registry";
import { useSshAuthProviders } from "@/hooks/useSshAuthProviders";
import { SshAuthProviderFields } from "./SshAuthProviderFields";
import type { PluginSettingsField } from "@termix-ssh/plugin-sdk/manifest";
import type { HostDraft } from "@termix-ssh/plugin-sdk/frontend";
import { PluginComponent } from "@/plugin-host/component-registry";
import {
  toCredentialOption,
  type CredentialOption,
} from "./quick-created-credential";

export function HostEditor({
  host,
  draft,
  advanced = true,
  banner,
  onBack,
  onSave,
  protocols,
  onProtocolChange,
  onDirtyChange,
  hosts,
  credentials,
  adminTargetUserId,
  onEditCredential,
  defaultsTarget,
  onDefaultsSaved,
}: {
  host: Host | null;
  /** Fields a plugin filled in for a new host. */
  draft?: HostDraft;
  /**
   * False keeps to what is needed to reach a host: General and SSH, with the
   * organizing fields folded away. Hidden fields still save unchanged.
   */
  advanced?: boolean;
  /** Shown above the form, like the defaults level's description. */
  banner?: React.ReactNode;
  onBack: () => void;
  onSave: (saved: SSHHost) => void;
  protocols: HostProtocols;
  onProtocolChange: (p: Partial<typeof protocols>) => void;
  onDirtyChange?: (dirty: boolean) => void;
  hosts: Host[];
  credentials: { id: string; name: string; username: string }[];
  // When set, the editor works on another user's host through the admin
  // impersonation endpoints instead of the signed-in user's own data.
  adminTargetUserId?: string;
  // Opens the currently-selected credential for editing (from within the
  // host editor), so the user can tweak/rotate it without leaving the flow.
  onEditCredential?: (credentialId: string) => void;
  /** Edits a level of host defaults instead of a host. */
  defaultsTarget?: HostDefaultsTarget;
  onDefaultsSaved?: () => void;
}) {
  const { t } = useTranslation();
  const confirm = useConfirm();
  // Re-render when a plugin adds or removes a section.
  useHostEditorSections();
  const simpleMode = !advanced;
  const defaultsMode = !!defaultsTarget;
  const revealRef = useRef<((id: string) => void) | null>(null);
  const [pendingReveal, setPendingReveal] = useState<string | null>(null);
  const defaultKeys = useEditorDefaultKeys();
  const trackedKeys = useRef<string[]>([]);
  trackedKeys.current = [...defaultKeys.keys()];

  const [form, setForm] = useState(() => {
    const initial = applyHostDraft(
      createHostEditorForm(host),
      host ? undefined : draft,
    );
    if (defaultsTarget) return { ...initial, username: "" };
    // What a plugin filled in for a new host is that host's own.
    return host
      ? initial
      : { ...initial, defaultOverrides: draftOwnKeys(draft) };
  });
  /**
   * What each key would be without the host's own value: its defaults, or in
   * the defaults editor, the levels above the one being edited.
   */
  const [resolved, setResolved] = useState<Record<string, ResolvedHostDefault>>(
    {},
  );
  /** The keys the level held when it was loaded, in the defaults editor. */
  const [levelKeys, setLevelKeys] = useState<string[]>([]);

  /** A value the user changed is the host's own from then on. */
  const markOwn = (before: HostEditorForm, after: HostEditorForm) => {
    if (after.defaultOverrides === null) return after;
    const changed = changedKeys(before, after, trackedKeys.current);
    if (changed.length === 0) return after;
    return {
      ...after,
      defaultOverrides: withOwnKeys(after.defaultOverrides, changed),
    };
  };

  const setField = <K extends keyof typeof form>(k: K, v: (typeof form)[K]) => {
    onDirtyChange?.(true);
    setForm((p) => markOwn(p, { ...p, [k]: v }));
  };

  /** Sets several fields at once, from the latest form. For plugin sections. */
  const updateForm = (
    patch: (current: Record<string, unknown>) => Record<string, unknown>,
  ) => {
    onDirtyChange?.(true);
    setForm((current) =>
      markOwn(current, {
        ...current,
        ...patch(current as unknown as Record<string, unknown>),
      } as HostEditorForm),
    );
  };

  const [saving, setSaving] = useState(false);
  const [isExternalUser, setIsExternalUser] = useState(false);
  const [showSecretSources, setShowSecretSources] = useState(false);
  const [quickCredentialName, setQuickCredentialName] = useState("");
  const [creatingQuickCredential, setCreatingQuickCredential] = useState(false);
  const [showQuickCredentialDialog, setShowQuickCredentialDialog] =
    useState(false);
  const [quickCreatedCredential, setQuickCreatedCredential] =
    useState<CredentialOption | null>(null);
  useEffect(() => {
    getUserInfo()
      .then((info) => setIsExternalUser(info.is_external))
      .catch(() => {});
  }, []);

  useEffect(() => {
    let cancelled = false;
    if (defaultsTarget) {
      getHostDefaultsLevel(defaultsTarget)
        .then((data) => {
          if (cancelled) return;
          setResolved(data.inherited);
          setLevelKeys(Object.keys(data.values));
          let next: HostEditorForm = {
            ...createHostEditorForm(null),
            username: "",
          };
          for (const [key, entry] of Object.entries(data.inherited)) {
            next = applyDefaultToForm(next, key, entry.value);
          }
          for (const [key, value] of Object.entries(data.values)) {
            next = applyDefaultToForm(next, key, value);
          }
          setForm({
            ...next,
            defaultOverrides: withOwnKeys({}, Object.keys(data.values)),
          });
        })
        .catch(() => toast.error(t("hostDefaults.loadFailed")));
      return () => {
        cancelled = true;
      };
    }
    if (host) {
      setForm(createHostEditorForm(host));
      resolveHostDefaults({ hostId: Number(host.id) }, adminTargetUserId)
        .then((values) => {
          if (cancelled) return;
          setResolved(values);
          // A host saved before host defaults: whatever matches follows them.
          setForm((current) =>
            current.defaultOverrides !== null
              ? current
              : {
                  ...current,
                  defaultOverrides: classifyForm(
                    current,
                    values,
                    trackedKeys.current,
                  ),
                },
          );
        })
        .catch(() => {});
    }
    return () => {
      cancelled = true;
    };
    // eslint-disable-next-line react-hooks/exhaustive-deps
  }, [host, defaultsTarget?.level, defaultsTarget?.folderId]);

  // A new host follows the defaults of wherever it is being placed.
  const newHostPlacement =
    !host && !defaultsTarget
      ? `${form.folder}\u0000${form.parentHostId}`
      : null;
  useEffect(() => {
    if (newHostPlacement === null) return;
    let cancelled = false;
    resolveHostDefaults(
      {
        folder: form.folder || null,
        parentHostId: form.parentHostId ? Number(form.parentHostId) : null,
      },
      adminTargetUserId,
    )
      .then((values) => {
        if (cancelled) return;
        setResolved(values);
        setForm((current) => {
          let next = current;
          for (const [key, entry] of Object.entries(values)) {
            if (isOwnDefault(current.defaultOverrides, key)) continue;
            next = applyDefaultToForm(next, key, entry.value);
          }
          return next;
        });
      })
      .catch(() => {});
    return () => {
      cancelled = true;
    };
    // eslint-disable-next-line react-hooks/exhaustive-deps
  }, [newHostPlacement]);

  const isAvailable = (fullKey: string) => {
    const entry = defaultKeys.get(fullKey);
    if (!entry) return false;
    return !defaultsTarget || entry.levels.includes(defaultsTarget.level);
  };

  const defaultsContext: HostDefaultsContextValue = {
    mode: defaultsMode ? "defaults" : "host",
    level: defaultsTarget?.level,
    isOwn: (fullKey) =>
      form.defaultOverrides === null ||
      isOwnDefault(form.defaultOverrides, fullKey),
    source: (fullKey) => resolved[fullKey]?.source,
    isAvailable,
    reset: (fullKey) => {
      onDirtyChange?.(true);
      setForm((current) => {
        const entry = resolved[fullKey];
        const next = entry
          ? applyDefaultToForm(current, fullKey, entry.value)
          : current;
        return {
          ...next,
          defaultOverrides: withoutOwnKey(
            current.defaultOverrides ??
              classifyForm(current, resolved, trackedKeys.current),
            fullKey,
          ),
        };
      });
    },
  };

  /**
   * Writes each plugin's host-scope values through its own route.
   *
   * One request per plugin rather than one per field, and a plugin that
   * rejects a value is reported without failing the host save that already
   * succeeded.
   */
  const savePluginHostSettings = async (
    hostId: number,
    values: Record<string, Record<string, unknown>> | undefined,
  ): Promise<Record<string, Record<string, unknown>>> => {
    const saved: Record<string, Record<string, unknown>> = {};
    if (!values || !Number.isInteger(hostId)) return saved;

    for (const [pluginId, fields] of Object.entries(values)) {
      if (!fields || Object.keys(fields).length === 0) continue;
      try {
        saved[pluginId] = await updatePluginHostSettings(
          pluginId,
          hostId,
          fields,
        );
      } catch {
        toast.error(t("settings.pluginSettingsSaveFailed"));
      }
    }
    return saved;
  };

  const saveDefaults = async () => {
    if (!defaultsTarget) return;
    const own = ownDefaultKeys(form.defaultOverrides).filter(isAvailable);
    const change: HostDefaultsChange = {
      set: Object.fromEntries(
        own.map((key) => [key, formValueForKey(form, key)]),
      ),
      unset: levelKeys.filter((key) => !own.includes(key)),
    };
    setSaving(true);
    try {
      const preview = await previewHostDefaultsLevel(defaultsTarget, change);
      setSaving(false);
      const ok = await confirm({
        title: t("hostDefaults.confirmTitle"),
        description:
          preview.changedHosts > 0
            ? t("hostDefaults.confirmChanges", { count: preview.changedHosts })
            : t("hostDefaults.confirmNoChanges"),
        confirmLabel: t("hostDefaults.save"),
        destructive: false,
      });
      if (ok) await confirmDefaults(change);
    } catch {
      toast.error(t("hostDefaults.saveFailed"));
    } finally {
      setSaving(false);
    }
  };

  const confirmDefaults = async (change: HostDefaultsChange) => {
    if (!defaultsTarget) return;
    setSaving(true);
    try {
      const result = await saveHostDefaultsLevel(defaultsTarget, change);
      setLevelKeys(Object.keys(change.set));
      onDirtyChange?.(false);
      if (result.jobId) {
        toast.success(t("hostDefaults.savedInBackground"));
        void waitForDefaultsJob(result.jobId).then((changed) => {
          if (changed !== null) {
            toast.success(t("hostDefaults.appliedToHosts", { count: changed }));
          }
          window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
        });
      } else {
        toast.success(
          t("hostDefaults.saved", { count: result.changedHosts ?? 0 }),
        );
        window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
      }
      onDefaultsSaved?.();
    } catch {
      toast.error(t("hostDefaults.saveFailed"));
    } finally {
      setSaving(false);
    }
  };

  const handleSave = async () => {
    if (defaultsMode) {
      await saveDefaults();
      return;
    }
    setSaving(true);
    try {
      const withOverrides = {
        ...form,
        defaultOverrides: form.defaultOverrides
          ? withAllNamespaces(form.defaultOverrides, defaultKeys)
          : null,
      };
      const fullData = buildHostEditorPayload(withOverrides, protocols);
      const data = lockAuthReferences
        ? omitOwnerSshAuthFromSharedEdit(fullData)
        : fullData;
      let saved: SSHHost;
      if (adminTargetUserId) {
        saved = host
          ? await adminUpdateUserHost(adminTargetUserId, Number(host.id), data)
          : await adminCreateUserHost(adminTargetUserId, data);
      } else {
        saved = host
          ? await updateSSHHost(Number(host.id), data)
          : await createSSHHost(data);
      }
      // After the host: a new one has no id to scope settings to until it
      // exists. A failure here must not claim the host itself failed to save.
      // Values that follow the defaults were written by the server already.
      const pluginValues = withProtocolSettings(form.pluginSettings, protocols);
      const savedPluginValues = await savePluginHostSettings(
        Number(saved.id),
        ownPluginValues(
          pluginValues,
          withOverrides.defaultOverrides,
          defaultKeys,
        ),
      );
      // The host was read back before these were written.
      saved = {
        ...saved,
        pluginSettings: {
          ...(saved.pluginSettings ?? {}),
          ...savedPluginValues,
        },
      };

      toast.success(host ? t("hosts.hostUpdated") : t("hosts.hostCreated"));
      onSave(saved);
    } catch {
      toast.error(t("hosts.failedToSave"));
    } finally {
      setSaving(false);
    }
  };

  const authMethod = form.authType;
  // Auth types a plugin adds (Tailscale) bring their own editor and label.
  const sshAuthEditors = useSshAuthEditors();
  const activeAuthEditor = sshAuthEditors.find(
    (editor) => editor.id === authMethod,
  );
  const ActiveAuthEditor = activeAuthEditor?.component;
  const sshAuthProviders = useSshAuthProviders();
  const authEditorLabel = (method: string) => {
    const option = sshAuthProviders.find(method);
    if (option?.editorTitleKey) return t(option.editorTitleKey);
    if (option?.labelKey) return t(option.labelKey, { defaultValue: method });
    return method;
  };
  // A default never carries a login of its own, and a credential belongs to
  // one user, so the server level cannot hold one.
  const selectableAuthMethods = sshAuthProviders.providers
    .filter((option) => option.available)
    .map((option) => option.type)
    .filter(
      (type) =>
        !defaultsMode ||
        (type !== "password" &&
          type !== "key" &&
          (type !== "credential" || defaultsTarget?.level !== "admin")),
    );
  const currentAuthOption = sshAuthProviders.find(authMethod);
  // The host uses a type nothing here provides (its plugin is off).
  const missingAuthNotice =
    sshAuthProviders.loaded && authMethod && !currentAuthOption?.available
      ? currentAuthOption?.missingPlugin
        ? t("hosts.authTypeNeedsPlugin", {
            type: authMethod,
            plugin: currentAuthOption.missingPlugin.name,
          })
        : t("hosts.authTypeUnknown", { type: authMethod })
      : null;
  const availableCredentials =
    quickCreatedCredential &&
    !credentials.some(
      (credential) => credential.id === quickCreatedCredential.id,
    )
      ? [...credentials, quickCreatedCredential]
      : credentials;
  const selectedCredential = availableCredentials.find(
    (c) => String(c.id) === String(form.credentialId),
  );

  const canQuickCreateCredential =
    (authMethod === "password" || authMethod === "key") &&
    (authMethod === "password"
      ? !!form.password || !!host?.hasPassword
      : (!!form.key && form.key !== "existing_key") || !!host?.hasKey);

  const openQuickCredentialDialog = () => {
    setQuickCredentialName(form.name || form.username || "");
    setShowQuickCredentialDialog(true);
  };

  const handleQuickCreateCredential = async () => {
    if (!quickCredentialName.trim()) {
      toast.error(t("hosts.credentialNameRequired"));
      return;
    }
    setCreatingQuickCredential(true);
    try {
      const fetchField = (field: "password" | "key" | "keyPassword") =>
        adminTargetUserId
          ? adminGetHostPassword(adminTargetUserId, Number(host?.id), field)
          : getHostPassword(Number(host?.id), field);

      const data: Record<string, unknown> = {
        name: quickCredentialName,
        username: form.username || null,
        folder: form.folder || null,
      };

      if (authMethod === "password") {
        data.authType = "password";
        data.password =
          form.password && form.password !== "existing_password"
            ? form.password
            : host?.hasPassword
              ? await fetchField("password")
              : null;
      } else {
        const key =
          form.key && form.key !== "existing_key"
            ? form.key
            : host?.hasKey
              ? await fetchField("key")
              : null;
        const keyPassword =
          form.keyPassword && form.keyPassword !== "existing_key_password"
            ? form.keyPassword
            : host?.hasKeyPassword
              ? await fetchField("keyPassword")
              : null;
        data.authType = "key";
        data.key = key;
        data.keyPassword = keyPassword;
        data.password =
          form.password && form.password !== "existing_password"
            ? form.password
            : null;
      }

      const created = adminTargetUserId
        ? await adminCreateUserCredential(adminTargetUserId, data)
        : await createCredential(data);
      const credential = toCredentialOption(created);
      if (!credential) throw new Error(t("hosts.failedToSaveCredential"));

      setQuickCreatedCredential(credential);
      setForm((current) => ({
        ...current,
        authType: "credential",
        credentialId: credential.id,
      }));
      toast.success(t("hosts.credentialCreated"));
      if (!adminTargetUserId) {
        window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
      }
      setShowQuickCredentialDialog(false);
    } catch (err) {
      const msg = err instanceof Error ? err.message : null;
      toast.error(msg || t("hosts.failedToSaveCredential"));
    } finally {
      setCreatingQuickCredential(false);
    }
  };

  // Shared hosts: view-level recipients see a read-only editor; edit-level
  // recipients may change the host but never its credential references
  // or auth type (owner-only, enforced server-side too).
  const isSharedHost = !!host?.isShared;
  const readOnly = isSharedHost && host !== null && !canEditHost(host);
  const lockAuthReferences = isSharedHost && !readOnly;

  const handleProtocolToggle = (
    proto: keyof typeof protocols,
    value: boolean,
  ) => {
    onDirtyChange?.(true);
    onProtocolChange({ [proto]: value });
    if (!value) return;
    if (proto === "enableSsh") {
      setPendingReveal("ssh");
      return;
    }
    const before = protocols as unknown as Record<string, boolean>;
    const after = { ...before, [proto]: value };
    const visibleBefore = new Set(
      makeHostTabs((k) => k, before).map((tab) => tab.id),
    );
    const revealed = makeHostTabs((k) => k, after)
      .map((tab) => tab.id)
      .find((id) => id !== "ssh" && !visibleBefore.has(id));
    if (revealed) setPendingReveal(revealed);
  };

  useEffect(() => {
    if (!pendingReveal) return;
    const id = pendingReveal;
    setPendingReveal(null);
    requestAnimationFrame(() => revealRef.current?.(id));
  }, [pendingReveal]);

  const flags = protocols as unknown as Record<string, boolean>;
  // The editor is one scrolling form. Sections follow the old tab order:
  // General, then SSH and its plugin sections, then other plugins.
  const sectionBands = useMemo(() => {
    const top = makeHostTabs(t, flags, defaultsMode).filter(
      (tab) => tab.id !== "general" && tab.id !== "ssh",
    );
    const sshGroup = makeHostSshSubTabs(t, flags, defaultsMode).filter(
      (tab) => tab.id !== "ssh",
    );
    const bands: EditorNavBand[] = [
      {
        id: "host",
        label: t("manage.bandHost"),
        items: [
          {
            id: "general",
            label: t("hosts.tabGeneral"),
            icon: <Settings className="size-3.5" />,
          },
        ],
      },
    ];
    if (protocols.enableSsh || defaultsMode) {
      bands.push({
        id: "ssh",
        label: t("hosts.tabSsh"),
        items: [
          {
            id: "ssh",
            label: t("manage.sshConnection"),
            icon: <Terminal className="size-3.5" />,
          },
          ...(simpleMode ? [] : sshGroup),
        ],
      });
    }
    if (!simpleMode && top.length > 0) {
      bands.push({
        id: "features",
        label: t("manage.bandFeatures"),
        items: top.map((tab) => ({
          ...tab,
          icon: tab.icon ?? <Puzzle className="size-3.5" />,
        })),
      });
    }
    return bands;
    // eslint-disable-next-line react-hooks/exhaustive-deps
  }, [t, JSON.stringify(flags), defaultsMode, simpleMode]);

  const errors = defaultsMode ? {} : validateHostForm(form, protocols);
  const errorCount = Object.keys(errors).length;
  const errorSections = new Set<string>(
    Object.keys(errors).map((key) => (key === "sshPort" ? "ssh" : "general")),
  );
  const bands = sectionBands.map((band) => ({
    ...band,
    items: band.items.map((item) => ({
      ...item,
      error: errorSections.has(item.id),
    })),
  }));
  const pluginSectionIds = bands
    .flatMap((band) => band.items.map((item) => item.id))
    .filter((id) => id !== "general" && id !== "ssh");

  const renderPluginSection = (id: string) => {
    const section = getHostEditorSection(id);
    if (!section) return null;
    const Section = section.component;
    return (
      <EditorSection
        key={id}
        id={id}
        label={section.label ?? t(section.labelKey)}
      >
        <LazySection>
          <Section
            form={form}
            setField={
              setField as unknown as (key: string, value: unknown) => void
            }
            updateForm={updateForm}
            host={host}
            credentials={availableCredentials}
            adminTargetUserId={adminTargetUserId}
            protocols={flags}
            mode={defaultsMode ? "defaults" : "host"}
          />
        </LazySection>
      </EditorSection>
    );
  };

  return (
    <HostDefaultsContext.Provider value={defaultsContext}>
      <EditorPane
        bands={bands}
        revealRef={revealRef}
        errorCount={errorCount}
        banner={
          <>
            {banner}
            {isSharedHost && (
              <div className="flex items-start gap-2.5 p-3 border border-accent-brand/30 bg-accent-brand/5 text-xs text-muted-foreground">
                <Shield className="size-3.5 shrink-0 mt-0.5 text-accent-brand" />
                <div>
                  {readOnly
                    ? t("hosts.sharing.viewOnlyBanner", {
                        owner: host?.ownerUsername || "?",
                      })
                    : t("hosts.sharing.sharedEditBanner", {
                        owner: host?.ownerUsername || "?",
                      })}
                </div>
              </div>
            )}
          </>
        }
        footer={
          <>
            <Button
              variant="ghost"
              size="sm"
              onClick={onBack}
              disabled={saving}
            >
              {t("hosts.editorCancel")}
            </Button>
            {!readOnly && (
              <Button
                variant="outline"
                size="sm"
                className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand px-6"
                onClick={handleSave}
                disabled={saving || errorCount > 0}
              >
                {saving
                  ? t("hosts.editorSaving")
                  : defaultsMode
                    ? t("hostDefaults.save")
                    : host
                      ? t("hosts.editorUpdate")
                      : t("hosts.editorAdd")}
              </Button>
            )}
          </>
        }
      >
        <fieldset
          disabled={readOnly}
          className={`flex flex-col gap-2 min-w-0 ${readOnly ? "opacity-80" : ""}`}
        >
          <EditorSection id="general" label={t("hosts.tabGeneral")}>
            <HostEditorGeneralTab
              form={form}
              setField={setField}
              protocols={protocols}
              handleProtocolToggle={handleProtocolToggle}
              hosts={hosts}
              host={host}
              simpleMode={simpleMode}
              errors={errors}
            />
          </EditorSection>

          {(protocols.enableSsh || defaultsMode) && (
            <EditorSection id="ssh" label={t("manage.sshConnection")}>
              <SectionCard
                title={t("hosts.connectionLabel")}
                icon={<Globe className="size-3.5" />}
              >
                <div className="flex flex-col gap-4 py-3">
                  <div className="flex flex-col gap-1.5">
                    <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                      {t("hosts.sshPort")}
                      <HostDefaultBadge settingKey="core.sshPort" />
                    </label>
                    <Input
                      type="number"
                      placeholder="22"
                      value={form.sshPort}
                      aria-invalid={!!errors.sshPort}
                      onChange={(e) =>
                        setField("sshPort", Number(e.target.value))
                      }
                      className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
                    />
                    {errors.sshPort && (
                      <span className="text-[10px] text-destructive">
                        {t(errors.sshPort)}
                      </span>
                    )}
                  </div>
                  <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4">
                    <div className="flex flex-col gap-1.5">
                      <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.keepaliveIntervalLabel")}
                        <HostDefaultBadge settingKey="core.keepaliveInterval" />
                      </label>
                      <Input
                        type="number"
                        value={form.keepaliveInterval}
                        onChange={(e) =>
                          setField("keepaliveInterval", Number(e.target.value))
                        }
                        className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
                      />
                    </div>
                    <div className="flex flex-col gap-1.5">
                      <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.maxKeepaliveMisses")}
                        <HostDefaultBadge settingKey="core.keepaliveCountMax" />
                      </label>
                      <Input
                        type="number"
                        value={form.keepaliveCountMax}
                        onChange={(e) =>
                          setField("keepaliveCountMax", Number(e.target.value))
                        }
                        className="[appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
                      />
                    </div>
                  </div>
                  <SettingRow
                    label={t("hosts.sshAgentForwardingLabel")}
                    description={t("hosts.sshAgentForwardingShortDesc")}
                    defaultKey="core.agentForwarding"
                  >
                    <FakeSwitch
                      checked={form.agentForwarding}
                      onChange={(v) => setField("agentForwarding", v)}
                    />
                  </SettingRow>
                  <div className="flex flex-col gap-3 border-t border-border pt-4">
                    <div className="flex items-center justify-between">
                      <span className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.environmentVariablesLabel")}
                        <HostDefaultBadge settingKey="core.environmentVariables" />
                      </span>
                      <Button
                        variant="outline"
                        size="sm"
                        className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand"
                        onClick={() =>
                          setField("environmentVariables", [
                            ...form.environmentVariables,
                            { key: "", value: "" },
                          ])
                        }
                      >
                        <Plus className="size-3 mr-1" />{" "}
                        {t("hosts.addVariableBtn")}
                      </Button>
                    </div>
                    {form.environmentVariables.length === 0 && (
                      <p className="text-[10px] text-muted-foreground/50">
                        {t("hosts.noEnvVars")}
                      </p>
                    )}
                    <div className="flex flex-col gap-2">
                      {form.environmentVariables.map((ev, i) => (
                        <div key={i} className="flex items-center gap-2">
                          <Input
                            className="h-7 text-xs flex-1"
                            placeholder="KEY"
                            value={ev.key}
                            onChange={(e) => {
                              const updated = [...form.environmentVariables];
                              updated[i] = {
                                ...updated[i],
                                key: e.target.value,
                              };
                              setField("environmentVariables", updated);
                            }}
                          />
                          <Input
                            className="h-7 text-xs flex-1"
                            placeholder="VALUE"
                            value={ev.value}
                            onChange={(e) => {
                              const updated = [...form.environmentVariables];
                              updated[i] = {
                                ...updated[i],
                                value: e.target.value,
                              };
                              setField("environmentVariables", updated);
                            }}
                          />
                          <button
                            type="button"
                            className="text-destructive"
                            onClick={() =>
                              setField(
                                "environmentVariables",
                                form.environmentVariables.filter(
                                  (_, idx) => idx !== i,
                                ),
                              )
                            }
                          >
                            <X className="size-4" />
                          </button>
                        </div>
                      ))}
                    </div>
                  </div>
                </div>
              </SectionCard>
              <SectionCard
                title={t("hosts.authenticationLabel")}
                icon={<Shield className="size-3.5" />}
                action={
                  !isSharedHost &&
                  !defaultsMode &&
                  canQuickCreateCredential && (
                    <Button
                      type="button"
                      variant="outline"
                      size="sm"
                      className="h-6 text-[10px] px-2 border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10"
                      onClick={openQuickCredentialDialog}
                    >
                      <Plus className="size-3 mr-1" />
                      {t("hosts.createCredentialFromHostBtn")}
                    </Button>
                  )
                }
              >
                {isSharedHost && (
                  <div className="py-3 text-xs text-muted-foreground">
                    {t(
                      host?.shareSshAuth
                        ? "hosts.sharing.ownerAuthShared"
                        : "hosts.sharing.ownerAuthPrivate",
                    )}
                  </div>
                )}
                <div
                  className={`flex flex-col gap-4 py-3 ${isSharedHost ? "hidden" : ""}`}
                >
                  <div className="flex flex-col gap-1.5">
                    <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                      {t("hosts.authenticationMethod")}
                      <HostDefaultBadge settingKey="core.auth" />
                    </label>
                    <p className="text-[10px] text-muted-foreground">
                      {t("hosts.authenticationMethodDesc")}
                    </p>
                    <div
                      className="flex flex-wrap gap-2"
                      role="radiogroup"
                      aria-label={t("hosts.authenticationMethod")}
                    >
                      {selectableAuthMethods.map((m) => (
                        <button
                          key={m}
                          type="button"
                          role="radio"
                          aria-checked={authMethod === m}
                          disabled={lockAuthReferences}
                          title={
                            lockAuthReferences
                              ? t("hosts.sharing.ownerOnlyControl")
                              : undefined
                          }
                          onClick={() => {
                            setField("authType", m as HostAuthType);
                          }}
                          className={`px-3 py-1.5 text-[10px] font-bold uppercase tracking-widest border transition-colors disabled:opacity-50 disabled:cursor-not-allowed ${authMethod === m ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
                        >
                          {authEditorLabel(m)}
                        </button>
                      ))}
                    </div>
                    {lockAuthReferences && (
                      <p className="text-[10px] text-muted-foreground/60">
                        {t("hosts.sharing.ownerOnlyControl")}
                      </p>
                    )}
                    {missingAuthNotice && (
                      <p className="text-[10px] text-destructive">
                        {missingAuthNotice}
                      </p>
                    )}
                  </div>
                  <div className="grid grid-cols-1 md:grid-cols-2 gap-4 border-t border-border pt-4 mt-1">
                    <div className="flex flex-col gap-1.5">
                      <label className="flex items-center gap-1.5 text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.username")}
                        <HostDefaultBadge settingKey="core.username" />
                      </label>
                      <Input
                        placeholder="root"
                        value={form.username}
                        disabled={
                          authMethod === "credential" &&
                          !!selectedCredential?.username &&
                          !form.overrideCredentialUsername
                        }
                        onFocus={() => {
                          if (!defaultsMode && form.username === "root")
                            setField("username", "");
                        }}
                        onBlur={() => {
                          if (!defaultsMode && form.username === "")
                            setField("username", "root");
                        }}
                        onChange={(e) => setField("username", e.target.value)}
                      />
                      {isExternalUser && (
                        <p className="text-[10px] text-muted-foreground/60">
                          {t("hosts.externalUsernameHint")}
                        </p>
                      )}
                      {activeAuthEditor?.hintKey && (
                        <p className="text-[10px] text-muted-foreground/60">
                          {t(activeAuthEditor.hintKey)}
                        </p>
                      )}
                    </div>
                    {authMethod === "password" && (
                      <div className="flex flex-col gap-1.5">
                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                          {t("hosts.password")}
                        </label>
                        <PasswordInput
                          className="h-8 text-xs pr-8"
                          placeholder={
                            form.password === "existing_password"
                              ? t("hosts.passwordSaved")
                              : "••••••••"
                          }
                          value={
                            form.password === "existing_password"
                              ? ""
                              : form.password
                          }
                          onChange={(e) => setField("password", e.target.value)}
                        />
                        <PluginComponent
                          id="credentials.secretHint"
                          onManage={() => setShowSecretSources((v) => !v)}
                        />
                      </div>
                    )}
                    {(authMethod === "password" || authMethod === "key") &&
                      showSecretSources && (
                        <PluginComponent
                          id="credentials.secretManager"
                          onClose={() => setShowSecretSources(false)}
                        />
                      )}
                    {authMethod === "key" && (
                      <>
                        <div className="flex flex-col gap-1.5 col-span-2">
                          <div className="flex items-center justify-between">
                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                              {t("hosts.sshPrivateKey")}
                            </label>
                            <div className="flex gap-1">
                              {(["paste", "upload"] as const).map((tab) => (
                                <button
                                  key={tab}
                                  type="button"
                                  onClick={() => setField("keySubTab", tab)}
                                  className={`px-2 py-0.5 text-[9px] font-bold uppercase tracking-widest border transition-colors ${form.keySubTab === tab ? "border-accent-brand/40 bg-accent-brand/10 text-accent-brand" : "border-border text-muted-foreground hover:text-foreground"}`}
                                >
                                  {tab === "paste"
                                    ? t("hosts.keyPasteTab")
                                    : t("hosts.keyUploadTab")}
                                </button>
                              ))}
                            </div>
                          </div>
                          {form.keySubTab === "paste" ? (
                            <div className="flex flex-col gap-1.5">
                              {form.key === "existing_key" && (
                                <div className="px-3 py-2 text-[10px] border border-accent-brand/30 bg-accent-brand/5 text-accent-brand">
                                  {t("hosts.keySaved")}.{" "}
                                  {t("hosts.keyReplaceNotice")}
                                </div>
                              )}
                              <textarea
                                placeholder="-----BEGIN OPENSSH PRIVATE KEY-----"
                                rows={5}
                                value={
                                  form.key === "existing_key" ? "" : form.key
                                }
                                onChange={(e) =>
                                  setField("key", e.target.value)
                                }
                                className="w-full px-3 py-2 text-[10px] bg-background border border-border text-foreground placeholder:text-muted-foreground resize-none outline-none focus:ring-1 focus:ring-ring font-mono"
                              />
                            </div>
                          ) : (
                            <div className="flex flex-col gap-2">
                              <label
                                className={`flex items-center justify-center gap-2 h-16 border-2 border-dashed cursor-pointer transition-colors ${form.key ? "border-accent-brand/40 bg-accent-brand/5 text-accent-brand" : "border-border text-muted-foreground hover:border-accent-brand/30 hover:text-foreground"}`}
                              >
                                <Upload className="size-4" />
                                <span className="text-xs">
                                  {form.key === "existing_key"
                                    ? t("hosts.keySaved")
                                    : form.key
                                      ? t("hosts.keyFileLoaded")
                                      : t("hosts.keyUploadClick")}
                                </span>
                                <input
                                  type="file"
                                  accept=".pem,.key,.ppk,.txt"
                                  className="hidden"
                                  onChange={async (e) => {
                                    const file = e.target.files?.[0];
                                    if (!file) return;
                                    const text = await file.text();
                                    setField("key", text);
                                    e.target.value = "";
                                  }}
                                />
                              </label>
                              {form.key && (
                                <button
                                  type="button"
                                  onClick={() => setField("key", "")}
                                  className="text-[10px] text-destructive self-start"
                                >
                                  {form.key === "existing_key"
                                    ? t("hosts.replaceKey")
                                    : t("hosts.clearKey")}
                                </button>
                              )}
                            </div>
                          )}
                        </div>
                        <div className="flex flex-col gap-1.5">
                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                            {t("hosts.keyPassphrase")}
                          </label>
                          <PasswordInput
                            className="h-8 text-xs pr-8"
                            placeholder={
                              form.keyPassword === "existing_key_password"
                                ? t("hosts.keyPassphraseSaved")
                                : t("hosts.optional")
                            }
                            value={
                              form.keyPassword === "existing_key_password"
                                ? ""
                                : form.keyPassword
                            }
                            onChange={(e) =>
                              setField("keyPassword", e.target.value)
                            }
                          />
                        </div>
                        <div className="flex flex-col gap-1.5">
                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                            {t("hosts.password")} ({t("common.optional")})
                          </label>
                          <PasswordInput
                            className="h-8 text-xs pr-8"
                            placeholder={
                              form.password === "existing_password"
                                ? t("hosts.passwordSaved")
                                : "••••••••"
                            }
                            value={
                              form.password === "existing_password"
                                ? ""
                                : form.password
                            }
                            onChange={(e) =>
                              setField("password", e.target.value)
                            }
                          />
                        </div>
                        <div className="flex flex-col gap-1.5">
                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                            {t("hosts.keyTypeLabel")}
                          </label>
                          <Select2
                            value={form.keyType}
                            onChange={(e) =>
                              setField("keyType", e.target.value)
                            }
                            className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring"
                          >
                            <option value="auto">
                              {t("hosts.keyTypeAuto")}
                            </option>
                            <option value="ssh-rsa">RSA</option>
                            <option value="ssh-ed25519">Ed25519</option>
                            <option value="ecdsa-sha2-nistp256">
                              ECDSA P-256
                            </option>
                            <option value="ecdsa-sha2-nistp384">
                              ECDSA P-384
                            </option>
                            <option value="ecdsa-sha2-nistp521">
                              ECDSA P-521
                            </option>
                            <option value="ssh-dss">DSA</option>
                            <option value="ssh-rsa-sha2-256">
                              RSA SHA2-256
                            </option>
                            <option value="ssh-rsa-sha2-512">
                              RSA SHA2-512
                            </option>
                          </Select2>
                        </div>
                      </>
                    )}
                    {authMethod === "credential" && (
                      <>
                        <div className="flex flex-col gap-1.5">
                          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                            {t("hosts.storedCredential")}
                          </label>
                          <div className="flex items-center gap-2">
                            <Select2
                              value={form.credentialId}
                              disabled={lockAuthReferences}
                              title={
                                lockAuthReferences
                                  ? t("hosts.sharing.ownerOnlyControl")
                                  : undefined
                              }
                              onChange={(e) => {
                                const newId = e.target.value;
                                setField("credentialId", newId);
                                if (!form.overrideCredentialUsername) {
                                  const cred = availableCredentials.find(
                                    (c) => c.id === newId,
                                  );
                                  if (cred?.username)
                                    setField("username", cred.username);
                                }
                              }}
                              className="flex h-9 w-full border border-border bg-background px-3 py-1 text-xs outline-none focus:ring-1 focus:ring-ring disabled:opacity-50 disabled:cursor-not-allowed"
                            >
                              <option value="">
                                {t("hosts.selectACredential")}
                              </option>
                              {availableCredentials.map((c) => (
                                <option key={c.id} value={c.id}>
                                  {c.username
                                    ? `${c.name} (${c.username})`
                                    : c.name}
                                </option>
                              ))}
                            </Select2>
                            {onEditCredential && form.credentialId && (
                              <Button
                                type="button"
                                variant="outline"
                                size="sm"
                                className="h-9 px-2.5 shrink-0"
                                title={t("hosts.editCredentialAction")}
                                onClick={() =>
                                  onEditCredential(form.credentialId)
                                }
                              >
                                <Pencil className="size-3.5" />
                              </Button>
                            )}
                          </div>
                        </div>
                        {selectedCredential?.username && (
                          <div className="flex items-center justify-between col-span-2 pt-1">
                            <div className="flex flex-col gap-0.5">
                              <span className="text-xs font-medium">
                                {t("hosts.overrideCredentialUsername")}
                              </span>
                              <span className="text-[10px] text-muted-foreground">
                                {t("hosts.overrideCredentialUsernameDesc")}
                              </span>
                            </div>
                            <FakeSwitch
                              checked={form.overrideCredentialUsername}
                              onChange={(v) => {
                                setField("overrideCredentialUsername", v);
                                if (!v && selectedCredential?.username) {
                                  setField(
                                    "username",
                                    selectedCredential.username,
                                  );
                                }
                              }}
                            />
                          </div>
                        )}
                        <HostOnly>
                          <div className="flex flex-col gap-1.5">
                            <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                              {t("hosts.password")} ({t("common.optional")})
                            </label>
                            <PasswordInput
                              className="h-8 text-xs pr-8"
                              placeholder={
                                form.password === "existing_password"
                                  ? t("hosts.passwordSaved")
                                  : "••••••••"
                              }
                              value={
                                form.password === "existing_password"
                                  ? ""
                                  : form.password
                              }
                              onChange={(e) =>
                                setField("password", e.target.value)
                              }
                            />
                          </div>
                        </HostOnly>
                      </>
                    )}
                  </div>
                  {!ActiveAuthEditor &&
                    currentAuthOption?.available &&
                    currentAuthOption.pluginId !== "core" &&
                    currentAuthOption.fields.length > 0 && (
                      <SshAuthProviderFields
                        pluginId={currentAuthOption.pluginId}
                        hostId={host?.id ? Number(host.id) : undefined}
                        fields={
                          currentAuthOption.fields as unknown as PluginSettingsField[]
                        }
                      />
                    )}
                  {ActiveAuthEditor && (
                    <ActiveAuthEditor
                      form={form}
                      setField={
                        setField as unknown as (
                          key: string,
                          value: unknown,
                        ) => void
                      }
                    />
                  )}
                  {authMethod === "agent" && (
                    <div className="flex flex-col gap-2 border-t border-border pt-3">
                      <span className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.agentLabel")}
                      </span>
                      <p className="text-[10px] text-muted-foreground">
                        {t("hosts.agentAuthenticationDesc")}
                      </p>
                      <div className="flex flex-col gap-1.5">
                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                          {t("hosts.agentSocketPathLabel")}
                        </label>
                        <Input
                          placeholder={t("hosts.agentSocketPathPlaceholder")}
                          value={form.agentSocketPath}
                          onChange={(e) =>
                            setField("agentSocketPath", e.target.value)
                          }
                        />
                        <p className="text-[10px] text-muted-foreground">
                          {t("hosts.agentSocketPathHint")}
                        </p>
                      </div>
                      <div className="flex flex-col gap-1.5">
                        <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                          {t("hosts.agentIdentityLabel")}
                        </label>
                        <Input
                          placeholder={t("hosts.agentIdentityPlaceholder")}
                          value={form.agentIdentity}
                          onChange={(e) =>
                            setField("agentIdentity", e.target.value)
                          }
                        />
                        <p className="text-[10px] text-muted-foreground">
                          {t("hosts.agentIdentityHint")}
                        </p>
                      </div>
                    </div>
                  )}
                  <HostOnly>
                    <SettingRow
                      label={t("hosts.shareSshAuthLabel")}
                      description={t("hosts.shareSshAuthDesc")}
                    >
                      <FakeSwitch
                        checked={form.shareSshAuth}
                        onChange={(v) => setField("shareSshAuth", v)}
                      />
                    </SettingRow>
                  </HostOnly>
                  <SettingRow
                    label={t("hosts.forceKeyboardInteractiveLabel")}
                    description={t("hosts.forceKeyboardInteractiveShortDesc")}
                    defaultKey="core.forceKeyboardInteractive"
                  >
                    <FakeSwitch
                      checked={form.forceKeyboardInteractive}
                      onChange={(v) => setField("forceKeyboardInteractive", v)}
                    />
                  </SettingRow>
                  <SettingRow
                    label={t("hosts.allowLegacyAlgorithmsLabel")}
                    defaultKey="core.allowLegacyAlgorithms"
                    badge={
                      form.allowLegacyAlgorithms
                        ? t("hosts.insecure")
                        : undefined
                    }
                    description={t("hosts.allowLegacyAlgorithmsDesc")}
                  >
                    <FakeSwitch
                      checked={form.allowLegacyAlgorithms}
                      onChange={(v) => setField("allowLegacyAlgorithms", v)}
                    />
                  </SettingRow>
                  <HostOnly>
                    <div className="flex flex-col gap-1.5">
                      <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
                        {t("hosts.sudoPasswordLabel")}
                      </label>
                      <PasswordInput
                        className="h-8 text-xs pr-8"
                        placeholder={
                          form.sudoPassword === "existing_sudo_password"
                            ? t("hosts.sudoPasswordSaved")
                            : "••••••••"
                        }
                        value={
                          form.sudoPassword === "existing_sudo_password"
                            ? ""
                            : form.sudoPassword
                        }
                        onChange={(e) =>
                          setField("sudoPassword", e.target.value)
                        }
                      />
                      <p className="text-[10px] text-muted-foreground">
                        {t("hosts.sudoPasswordDesc")}
                      </p>
                    </div>
                  </HostOnly>
                </div>
              </SectionCard>
            </EditorSection>
          )}

          {pluginSectionIds.map(renderPluginSection)}
        </fieldset>
      </EditorPane>

      <InlineView
        open={showQuickCredentialDialog}
        onOpenChange={setShowQuickCredentialDialog}
        title={t("hosts.createCredentialFromHostTitle")}
        footer={
          <div className="ml-auto flex gap-2">
            <Button
              variant="ghost"
              size="sm"
              onClick={() => setShowQuickCredentialDialog(false)}
              disabled={creatingQuickCredential}
            >
              {t("hosts.cancelBtn")}
            </Button>
            <Button
              variant="outline"
              size="sm"
              className="border-accent-brand/40 text-accent-brand hover:bg-accent-brand/10 hover:text-accent-brand"
              onClick={handleQuickCreateCredential}
              disabled={creatingQuickCredential}
            >
              {creatingQuickCredential
                ? t("hosts.savingBtn")
                : t("hosts.addCredentialBtn")}
            </Button>
          </div>
        }
      >
        <p className="text-xs text-muted-foreground">
          {t("hosts.createCredentialFromHostDesc")}
        </p>
        <div className="flex flex-col gap-1.5">
          <label className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
            {t("hosts.friendlyNameLabel")}
          </label>
          <Input
            autoFocus
            placeholder={t("placeholders.credentialName")}
            value={quickCredentialName}
            onChange={(e) => setQuickCredentialName(e.target.value)}
            onKeyDown={(e) => {
              if (e.key === "Enter") void handleQuickCreateCredential();
            }}
          />
        </div>
      </InlineView>
    </HostDefaultsContext.Provider>
  );
}