From 55984d6fdf0c81a3f131fe5f3be05fe7d71a7b87 Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Sat, 25 Apr 2026 20:30:57 +0000
Subject: [PATCH] feat: surface serviceAccountName in adapter UI config
 (FAR-77)

Adds serviceAccountName field to the Kubernetes group in getConfigSchema()
so operators can specify a dedicated SA (e.g. paperclip-developer) for Job
pods that need k8s API access. The field was already consumed in job-manifest.ts;
this makes it visible in the UI. Bumps to 0.1.25.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 src/server/config-schema.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/server/config-schema.ts b/src/server/config-schema.ts
index b0e6ee8..dd54f73 100644
--- a/src/server/config-schema.ts
+++ b/src/server/config-schema.ts
@@ -55,6 +55,13 @@ export function getConfigSchema(): AdapterConfigSchema {
       },
 
       // Kubernetes fields
+      {
+        key: "serviceAccountName",
+        label: "Service Account",
+        type: "text",
+        hint: "Kubernetes ServiceAccount name for the Job pod; defaults to the namespace 'default' SA. Use a dedicated SA (e.g. paperclip-developer) when the Job needs API access.",
+        group: "Kubernetes",
+      },
       {
         key: "namespace",
         label: "Namespace",