From 973925b35d8c3b17bb162498749880ae7c5e7192 Mon Sep 17 00:00:00 2001
From: Owen <owen@txv.io>
Date: Tue, 4 Aug 2026 14:22:36 -0400
Subject: [PATCH] allow creating basic inference resource

---
 messages/en-US.json                           |  1 +
 .../siteResource/createSiteResource.ts        |  5 +++-
 .../resources/private/create/page.tsx         | 26 ++++++++++++++++-
 src/lib/privateResourceForm.ts                | 28 ++++++++++++++-----
 4 files changed, 51 insertions(+), 9 deletions(-)

diff --git a/messages/en-US.json b/messages/en-US.json
index d6759f822..81a60f0a1 100644
--- a/messages/en-US.json
+++ b/messages/en-US.json
@@ -2554,6 +2554,7 @@
     "createInternalResourceDialogModeHttp": "HTTP",
     "createInternalResourceDialogModeHttps": "HTTPS",
     "createInternalResourceDialogModeSsh": "SSH",
+    "createInternalResourceDialogModeInference": "Inference",
     "scheme": "Scheme",
     "createInternalResourceDialogScheme": "Scheme",
     "createInternalResourceDialogEnableSsl": "Enable TLS",
diff --git a/server/routers/siteResource/createSiteResource.ts b/server/routers/siteResource/createSiteResource.ts
index b80775b49..3244668f5 100644
--- a/server/routers/siteResource/createSiteResource.ts
+++ b/server/routers/siteResource/createSiteResource.ts
@@ -164,7 +164,10 @@ const createSiteResourceSchema = z
     .refine(
         (data) => {
             // destination is only optional for ssh mode with native authDaemonMode
-            if (data.mode === "ssh" && data.authDaemonMode === "native") {
+            if (
+                (data.mode === "ssh" && data.authDaemonMode === "native") ||
+                data.mode == "inference"
+            ) {
                 return true;
             }
             return (
diff --git a/src/app/[orgId]/settings/resources/private/create/page.tsx b/src/app/[orgId]/settings/resources/private/create/page.tsx
index 7e6144172..936409d40 100644
--- a/src/app/[orgId]/settings/resources/private/create/page.tsx
+++ b/src/app/[orgId]/settings/resources/private/create/page.tsx
@@ -153,7 +153,11 @@ export default function CreatePrivateResourcePage() {
                       label: t("createInternalResourceDialogModeSsh")
                   }
               ]
-            : [])
+            : []),
+        {
+            value: "inference" as const,
+            label: t("createInternalResourceDialogModeInference")
+        }
     ];
 
     const submitDisabled =
@@ -313,6 +317,25 @@ export default function CreatePrivateResourcePage() {
                                                                     "destinationPort",
                                                                     443
                                                                 );
+                                                            } else if (
+                                                                newMode ===
+                                                                "inference"
+                                                            ) {
+                                                                form.setValue(
+                                                                    "siteIds",
+                                                                    []
+                                                                );
+                                                                setSelectedSites(
+                                                                    []
+                                                                );
+                                                                form.setValue(
+                                                                    "destination",
+                                                                    null
+                                                                );
+                                                                form.setValue(
+                                                                    "destinationPort",
+                                                                    null
+                                                                );
                                                             } else {
                                                                 form.setValue(
                                                                     "destinationPort",
@@ -377,6 +400,7 @@ export default function CreatePrivateResourcePage() {
                                     )}
 
                                     {(mode === "host" ||
+                                        mode === "inference" ||
                                         (mode === "ssh" && !isNativeSsh)) && (
                                         <SettingsFormCell span="half">
                                             <PrivateResourceAliasField
diff --git a/src/lib/privateResourceForm.ts b/src/lib/privateResourceForm.ts
index 2f11b6e7b..1e2dfd120 100644
--- a/src/lib/privateResourceForm.ts
+++ b/src/lib/privateResourceForm.ts
@@ -21,7 +21,7 @@ export type PrivateResourceClient = {
 
 export type PrivateResourceFormValues = {
     name: string;
-    siteIds: number[];
+    siteIds?: number[];
     mode: PrivateResourceMode;
     destination: string | null;
     alias?: string | null;
@@ -163,9 +163,12 @@ export function buildCreateSiteResourcePayload(
 
     return {
         name: data.name,
-        siteIds: data.siteIds,
+        siteIds: data.siteIds ?? [],
         mode: data.mode,
-        destination: isNativeSsh ? undefined : (data.destination ?? undefined),
+        destination:
+            isNativeSsh || data.mode === "inference"
+                ? undefined
+                : (data.destination ?? undefined),
         ...(data.mode === "http" && {
             scheme: data.scheme,
             ssl: data.ssl ?? false,
@@ -391,10 +394,8 @@ export function createCreateFormSchema(t: TranslateFn) {
                 .string()
                 .min(1, t("createInternalResourceDialogNameRequired"))
                 .max(255, t("createInternalResourceDialogNameMaxLength")),
-            siteIds: z
-                .array(z.number().int().positive())
-                .min(1, t("createInternalResourceDialogPleaseSelectSite")),
-            mode: z.enum(["host", "cidr", "http", "ssh"]),
+            siteIds: z.array(z.number().int().positive()).optional(),
+            mode: z.enum(["host", "cidr", "http", "ssh", "inference"]),
             destination: z.string().nullish(),
             alias: z.string().nullish(),
             destinationPort: z
@@ -427,8 +428,21 @@ export function createCreateFormSchema(t: TranslateFn) {
             const isNativeSsh =
                 data.mode === "ssh" && data.authDaemonMode === "native";
             const trimmedDestination = data.destination?.trim();
+            if (
+                data.mode !== "inference" &&
+                (!data.siteIds || data.siteIds.length < 1)
+            ) {
+                ctx.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    message: t(
+                        "createInternalResourceDialogPleaseSelectSite"
+                    ),
+                    path: ["siteIds"]
+                });
+            }
             if (
                 data.mode !== "ssh" &&
+                data.mode !== "inference" &&
                 (!trimmedDestination || trimmedDestination.length < 1)
             ) {
                 ctx.addIssue({