@cardinali-studio/adminkit 2.2.11 → 2.2.12

package/dist/api.d.ts

@@ -76,6 +76,16 @@ export type ContentDocument = {
     publishedPayload: string | null;
     publishedTombstone: boolean | null;
 };
+export type SiteAccessPublicVersion = {
+    versionId: string;
+    enabled: boolean;
+    formatVersion: 1;
+};
+export type SiteAccessPublicState = {
+    active: SiteAccessPublicVersion | null;
+    draft: SiteAccessPublicVersion | null;
+    effective: SiteAccessPublicVersion | null;
+};
 /** Builds the only D1 Save wire shape. The Worker recomputes these hashes too,
  * so retries are deterministic rather than client-trusted. */
 export declare function contentSaveRequest(command: ContentSaveCommand): Promise<{
@@ -133,6 +143,20 @@ export declare const api: {
         ok: true;
         discarded: true;
     }>;
+    siteAccessState: () => Promise<{
+        ok: true;
+        state: SiteAccessPublicState;
+    }>;
+    saveSiteAccess: (enabled: boolean, password: string, expectedDraftVersionId: string | null) => Promise<{
+        ok: true;
+        saved: true;
+        state: SiteAccessPublicState;
+    }>;
+    discardSiteAccess: (expectedDraftVersionId: string) => Promise<{
+        ok: true;
+        discarded: true;
+        state: SiteAccessPublicState;
+    }>;
     /** D1 publication is site-owned: the site chooses which documents it can
      * materialize, while the panel only displays the pending immutable inputs. */
     contentPublishState: () => Promise<{
@@ -145,6 +169,9 @@ export declare const api: {
             updatedAt: number;
         }[];
         mediaOperations?: MediaOperationStatus[];
+        siteAccess?: {
+            enabled: boolean;
+        } | null;
         activeReleaseId?: string | null;
     }>;
     contentPublish: () => Promise<{
@@ -273,7 +300,21 @@ export declare const api: {
         ok: true;
     }>;
     /** L'upload NON è JSON: corpo grezzo e metadati negli header (vedi assets/upload.js). */
-    upload: (prefix: string, file: File) => Promise<AssetFile>;
+    upload: (prefix: string, file: File, metadata?: {
+        capturedAt?: string | null;
+    }) => Promise<AssetFile>;
+    mediaSettings: () => Promise<{
+        ok: true;
+        settings: {
+            autoWebp: boolean;
+        };
+    }>;
+    saveMediaSettings: (autoWebp: boolean) => Promise<{
+        ok: true;
+        settings: {
+            autoWebp: boolean;
+        };
+    }>;
     trash: () => Promise<{
         ok: true;
         items: TrashItem[];
@@ -295,4 +336,4 @@ export declare const api: {
         removed: number;
     }>;
 };
-export declare function uploadQueue(prefix: string, files: File[], onProgress: (done: number, total: number, last?: AssetFile, error?: string) => void, concurrency?: number): Promise<AssetFile[]>;
+export declare function uploadQueue(prefix: string, files: File[], onProgress: (done: number, total: number, last?: AssetFile, error?: string) => void, concurrency?: number, prepare?: (file: File) => Promise<File>): Promise<AssetFile[]>;

package/dist/api.js

@@ -60,6 +60,9 @@ export const api = {
     contentDocument: (documentId) => call(`/admin/api/content/document?id=${encodeURIComponent(documentId)}`),
     saveContent: async (command) => post("/admin/api/content/save", await contentSaveRequest(command)),
     discardContent: (documentId, expectedDraftRevisionId, baselineRevisionId) => post("/admin/api/content/discard", { documentId, expectedDraftRevisionId, baselineRevisionId }),
+    siteAccessState: () => call("/admin/api/content/site-access"),
+    saveSiteAccess: (enabled, password, expectedDraftVersionId) => post("/admin/api/content/site-access", { action: "save", enabled, password, expectedDraftVersionId }),
+    discardSiteAccess: (expectedDraftVersionId) => post("/admin/api/content/site-access", { action: "discard", expectedDraftVersionId }),
     /** D1 publication is site-owned: the site chooses which documents it can
      * materialize, while the panel only displays the pending immutable inputs. */
     contentPublishState: () => call("/admin/api/content/publish"),
@@ -123,15 +126,18 @@ export const api = {
         body: JSON.stringify({ id }),
     }),
     /** L'upload NON è JSON: corpo grezzo e metadati negli header (vedi assets/upload.js). */
-    upload: (prefix, file) => call("/admin/api/assets/upload", {
+    upload: (prefix, file, metadata = {}) => call("/admin/api/assets/upload", {
         method: "POST",
         headers: {
             "Content-Type": file.type || "application/octet-stream",
             "X-Prefix": prefix,
             "X-Filename": encodeURIComponent(file.name),
+            ...(metadata.capturedAt ? { "X-Captured-At": metadata.capturedAt } : {}),
         },
         body: file,
     }),
+    mediaSettings: () => call("/admin/api/assets/settings"),
+    saveMediaSettings: (autoWebp) => post("/admin/api/assets/settings", { autoWebp }),
     // ---- cestino
     trash: () => call("/admin/api/assets/trash"),
     trashRestore: (trashKeys) => post("/admin/api/assets/trash/restore", { trashKeys }),
@@ -142,14 +148,18 @@ export const api = {
  * (app.js:922), il che su quaranta foto è tedioso senza motivo; tutte insieme invece saturano
  * la connessione e rendono il progresso illeggibile. Tre è il compromesso.
  * Un file che fallisce non ferma gli altri: si segnala e si prosegue. */
-export async function uploadQueue(prefix, files, onProgress, concurrency = 3) {
+export async function uploadQueue(prefix, files, onProgress, concurrency = 3, prepare = async (file) => file) {
     const out = [];
     let done = 0, next = 0;
     const worker = async () => {
         while (next < files.length) {
             const file = files[next++];
             try {
-                const r = await api.upload(prefix, file);
+                /* Preparazione e rete stanno nello STESSO worker: tre immagini vengono convertite in
+                 * parallelo, e appena una è pronta parte il suo upload mentre le altre continuano. Non
+                 * teniamo in memoria quaranta WebP aspettando che l'intero batch sia convertito. */
+                const ready = await prepare(file);
+                const r = await api.upload(prefix, ready);
                 out.push(r);
                 onProgress(++done, files.length, r);
             }

package/dist/app/App.js

@@ -32,6 +32,7 @@ import { PagesList } from "./routes/PagesList";
 import { PageEditor, PageHeader } from "./routes/PageEditor";
 import { PageSeoEditor } from "./routes/PageSeoEditor";
 import { SiteSettingsEditor, WebsiteSeoSettingsEditor } from "./routes/SiteSettingsEditor";
+import { MediaSettingsEditor } from "./routes/MediaSettingsEditor";
 import { HomeEditor } from "./routes/HomeEditor";
 import { RequestsList, RequestDetail } from "./routes/Requests";
 import { useRequests } from "./lib/requests";
@@ -67,6 +68,7 @@ export function App() {
        colonna e la griglia nella terza, e sono due punti dello schermo lontani. Uno stato per
        ciascuno vorrebbe dire due idee diverse di quale cartella si sta guardando. */
     const media = useMediaLibrary({ mode: "manage", active: section === "media" });
+    const mediaSettingsOpen = view === "media" && route[1] === "settings";
     /* Le richieste si caricano SUBITO, non entrando nella sezione: il numero «da gestire» nella
        prima colonna è il motivo per cui uno ci entra, e un badge che compare solo dopo essere
        andati a guardare non serve a niente. */
@@ -195,7 +197,9 @@ export function App() {
         : section === "pages" ? (editing ? String(editing.title ?? editing.slug) : "Pagine")
             : section === "home" ? (homeGroup || "Home")
                 : view === "trash" ? "Cestino"
-                    : section === "media" ? (media.prefix ? media.labelOf(media.prefix) : "Senza cartella")
+                    : section === "media" ? (mediaSettingsOpen
+                        ? "Impostazioni Media"
+                        : media.prefix ? media.labelOf(media.prefix) : "Senza cartella")
                         /* Consegne non ripete il titolo qui: il nome del transfer sta nella sua schermata, dove
                            si modifica, e si aggiorna mentre lo si scrive. Averlo in due posti significa averne
                            uno dei due sempre vecchio. */
@@ -220,7 +224,7 @@ export function App() {
                                             : _jsx(PagesList, { pages: list, current: editing?.slug, onEdit: (slug) => go(`/pages/${slug}`), languages: languages, onChange: pages.update, onRenamed: (from, to) => {
                                                     if (editing?.slug === from)
                                                         go(`/pages/${to}${seoEditing ? "/seo" : ""}`);
-                                                } }) })] })), section === "media" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Cartelle" }) }), _jsx("div", { className: "col-body", children: _jsx(MediaFolders, { lib: media, trash: { active: view === "trash", open: () => go("/trash"), leave: () => go("/media") } }) })] })), section === "requests" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: pickedReq.size === 0 ? (_jsx("span", { className: "col-title", children: requests.rows ? `${requests.rows.length} richieste` : "Richieste" })) : (_jsxs("span", { className: "rq-bulk", children: [_jsxs("span", { className: "col-title", children: [pickedReq.size, " scelte"] }), _jsx("button", { className: "mg-act", onClick: () => { void requests.mark([...pickedReq], true); setPickedReq(new Set()); }, children: "Gestite" }), _jsx("button", { className: "mg-act is-danger", onClick: () => { void requests.remove([...pickedReq]); setPickedReq(new Set()); }, children: "Elimina" }), _jsx("button", { className: "mg-act", onClick: () => setPickedReq(new Set()), children: "\u00D7" })] })) }), _jsx("div", { className: "col-body", children: requests.error ? _jsx("p", { className: "ak-error", children: requests.error })
+                                                } }) })] })), section === "media" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Cartelle" }) }), _jsx("div", { className: "col-body", children: _jsx(MediaFolders, { lib: media, trash: { active: view === "trash", open: () => go("/trash"), leave: () => go("/media") }, settings: { active: mediaSettingsOpen, open: () => go("/media/settings") } }) })] })), section === "requests" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: pickedReq.size === 0 ? (_jsx("span", { className: "col-title", children: requests.rows ? `${requests.rows.length} richieste` : "Richieste" })) : (_jsxs("span", { className: "rq-bulk", children: [_jsxs("span", { className: "col-title", children: [pickedReq.size, " scelte"] }), _jsx("button", { className: "mg-act", onClick: () => { void requests.mark([...pickedReq], true); setPickedReq(new Set()); }, children: "Gestite" }), _jsx("button", { className: "mg-act is-danger", onClick: () => { void requests.remove([...pickedReq]); setPickedReq(new Set()); }, children: "Elimina" }), _jsx("button", { className: "mg-act", onClick: () => setPickedReq(new Set()), children: "\u00D7" })] })) }), _jsx("div", { className: "col-body", children: requests.error ? _jsx("p", { className: "ak-error", children: requests.error })
                                         : !requests.rows ? _jsx("p", { className: "ak-hint", children: "Carico\u2026" })
                                             : requests.rows.length === 0 ? _jsx("p", { className: "ak-hint", children: "Nessuna richiesta, per ora." })
                                                 : _jsx(RequestsList, { rows: requests.rows, current: openReq?.id, picked: pickedReq, onOpen: (id) => go(`/requests/${id}`), onPick: (id) => setPickedReq((prev) => {
@@ -240,7 +244,7 @@ export function App() {
                                             : deliveries.rows.length === 0 ? _jsx("p", { className: "ak-hint", children: "Nessun transfer, per ora." })
                                                 : _jsx(DeliveriesList, { rows: deliveries.rows, current: activeDeliveryId || quickSelectedId, onOpen: (id) => { setQuickSelectedId(undefined); go(`/deliveries/${id}`); } }) }), _jsxs("div", { className: "dl-col-foot", children: [deliveries.rows && _jsx(DeliveriesTotal, { rows: deliveries.rows }), _jsxs("button", { className: "col-item" + (deliverySettingsOpen ? " is-on" : ""), onClick: () => { setQuickSelectedId(undefined); go("/deliveries/settings"); }, children: [_jsx(Icon.settings, {}), _jsx("span", { children: "Impostazioni" })] })] })] })), section === "bookings" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: bookings.rows ? `${bookings.rows.length} appuntamenti` : "Prenotazioni" }) }), _jsx("div", { className: "col-body", children: bookings.error ? _jsx("p", { className: "ak-error", children: bookings.error })
                                         : !bookings.rows ? _jsx("p", { className: "ak-hint", children: "Carico\u2026" })
-                                            : _jsx(BookingsList, { rows: bookings.rows, current: bookingSettingsOpen ? "settings" : openBooking?.id, onOpen: (id) => go(`/bookings/${id}`), onAgenda: () => go("/bookings"), onSettings: () => go("/bookings/settings") }) })] })), section === "home" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Sezioni" }) }), _jsx("div", { className: "col-body", children: _jsx("ul", { className: "col-list", children: homeGroups.map((g) => (_jsx("li", { children: _jsx("button", { className: "col-item" + (g === homeGroup ? " is-on" : ""), onClick: () => go(`/home/${groupSlug(g)}`), children: g || "Generale" }) }, g))) }) })] })), section === "settings" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Impostazioni" }) }), _jsx("div", { className: "col-body", children: _jsxs("ul", { className: "col-list settings-list", children: [_jsx("li", { children: _jsxs("button", { className: "col-item settings-list-item" + (settingsView === "site" ? " is-on" : ""), onClick: () => go("/settings/site"), children: [_jsx("strong", { children: "Sito" }), _jsx("span", { children: "Favicon, identit\u00E0 e accesso generale." })] }) }), _jsx("li", { children: _jsxs("button", { className: "col-item settings-list-item" + (settingsView === "seo" ? " is-on" : ""), onClick: () => go("/settings/seo"), children: [_jsx("strong", { children: "SEO" }), _jsx("span", { children: "Motori di ricerca e crawler AI." })] }) })] }) })] }))] })), _jsxs("main", { className: "pane", children: [_jsxs("header", { className: "pane-head", children: [editing ? (_jsx(PageHeader, { page: editing, pages: list ?? [], onChange: replace, seoActive: seoEditing, onSeoToggle: () => go(`/pages/${editing.slug}${seoEditing ? "" : "/seo"}`), languages: languages, activeLanguage: pageLanguage, onLanguageChange: setPageLanguage })) : view === "media" ? (_jsxs("nav", { className: "pane-crumbs", "aria-label": "Percorso", children: [_jsx("button", { className: "pane-crumb" + (mediaCrumbs.length ? "" : " is-current"), onClick: () => media.go(""), children: "Senza cartella" }), mediaCrumbs.map((c, i) => (_jsxs("span", { className: "pane-crumb-part", children: [_jsx("span", { className: "pane-crumb-sep", "aria-hidden": "true", children: "\u203A" }), _jsx("button", { className: "pane-crumb" + (i === mediaCrumbs.length - 1 ? " is-current" : ""), onClick: () => media.go(c.prefix), children: c.label })] }, c.prefix)))] })) : (_jsx("h1", { className: "pane-title", children: heading })), view === "media" && _jsx("span", { className: "pane-count", children: media.shown.length }), _jsx("span", { className: "pane-spacer" }), view === "media" && (_jsx("button", { className: "ak-btn ak-btn-primary", onClick: () => media.setUploadOpen(true), children: "Carica immagini" })), saver?.notice && (_jsx("button", { className: "pane-notice", onClick: () => saver.setNotice(null), children: saver.notice })), section === "bookings" && bookings.notice && (_jsx("button", { className: "pane-notice", onClick: bookings.clearNotice, children: bookings.notice })), publish.notice && (_jsx("button", { className: "pane-notice", onClick: publish.clearNotice, children: publish.notice })), !publish.configured && publish.error && (_jsx("span", { className: "pane-notice", title: publish.error, children: publish.error })), saver && (_jsxs(_Fragment, { children: [saver.dirty && _jsx("span", { className: "pane-dot", title: "modifiche non salvate" }), _jsx("button", { className: "ak-btn", disabled: !saver.dirty || saver.saving, 
+                                            : _jsx(BookingsList, { rows: bookings.rows, current: bookingSettingsOpen ? "settings" : openBooking?.id, onOpen: (id) => go(`/bookings/${id}`), onAgenda: () => go("/bookings"), onSettings: () => go("/bookings/settings") }) })] })), section === "home" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Sezioni" }) }), _jsx("div", { className: "col-body", children: _jsx("ul", { className: "col-list", children: homeGroups.map((g) => (_jsx("li", { children: _jsx("button", { className: "col-item" + (g === homeGroup ? " is-on" : ""), onClick: () => go(`/home/${groupSlug(g)}`), children: g || "Generale" }) }, g))) }) })] })), section === "settings" && (_jsxs(_Fragment, { children: [_jsx("div", { className: "col-head", children: _jsx("span", { className: "col-title", children: "Impostazioni" }) }), _jsx("div", { className: "col-body", children: _jsxs("ul", { className: "col-list settings-list", children: [_jsx("li", { children: _jsxs("button", { className: "col-item settings-list-item" + (settingsView === "site" ? " is-on" : ""), onClick: () => go("/settings/site"), children: [_jsx("strong", { children: "Sito" }), _jsx("span", { children: "Favicon, identit\u00E0 e accesso generale." })] }) }), _jsx("li", { children: _jsxs("button", { className: "col-item settings-list-item" + (settingsView === "seo" ? " is-on" : ""), onClick: () => go("/settings/seo"), children: [_jsx("strong", { children: "SEO" }), _jsx("span", { children: "Motori di ricerca e crawler AI." })] }) })] }) })] }))] })), _jsxs("main", { className: "pane", children: [_jsxs("header", { className: "pane-head", children: [editing ? (_jsx(PageHeader, { page: editing, pages: list ?? [], onChange: replace, seoActive: seoEditing, onSeoToggle: () => go(`/pages/${editing.slug}${seoEditing ? "" : "/seo"}`), languages: languages, activeLanguage: pageLanguage, onLanguageChange: setPageLanguage })) : view === "media" && !mediaSettingsOpen ? (_jsxs("nav", { className: "pane-crumbs", "aria-label": "Percorso", children: [_jsx("button", { className: "pane-crumb" + (mediaCrumbs.length ? "" : " is-current"), onClick: () => media.go(""), children: "Senza cartella" }), mediaCrumbs.map((c, i) => (_jsxs("span", { className: "pane-crumb-part", children: [_jsx("span", { className: "pane-crumb-sep", "aria-hidden": "true", children: "\u203A" }), _jsx("button", { className: "pane-crumb" + (i === mediaCrumbs.length - 1 ? " is-current" : ""), onClick: () => media.go(c.prefix), children: c.label })] }, c.prefix)))] })) : (_jsx("h1", { className: "pane-title", children: heading })), view === "media" && !mediaSettingsOpen && _jsx("span", { className: "pane-count", children: media.shown.length }), _jsx("span", { className: "pane-spacer" }), view === "media" && !mediaSettingsOpen && (_jsx("button", { className: "ak-btn ak-btn-primary", onClick: () => media.setUploadOpen(true), children: "Carica immagini" })), saver?.notice && (_jsx("button", { className: "pane-notice", onClick: () => saver.setNotice(null), children: saver.notice })), section === "bookings" && bookings.notice && (_jsx("button", { className: "pane-notice", onClick: bookings.clearNotice, children: bookings.notice })), publish.notice && (_jsx("button", { className: "pane-notice", onClick: publish.clearNotice, children: publish.notice })), !publish.configured && publish.error && (_jsx("span", { className: "pane-notice", title: publish.error, children: publish.error })), saver && (_jsxs(_Fragment, { children: [saver.dirty && _jsx("span", { className: "pane-dot", title: "modifiche non salvate" }), _jsx("button", { className: "ak-btn", disabled: !saver.dirty || saver.saving, 
                                             /* Dopo un salvataggio il conteggio delle modifiche in attesa è cambiato: senza
                                                rileggerlo, «Pubblica» comparirebbe solo al ricaricamento della pagina — cioè
                                                il pannello direbbe che non c'è niente da pubblicare subito dopo aver salvato
@@ -261,7 +265,9 @@ export function App() {
                                             : home.data ? _jsx(HomeEditorView, { data: home.data, group: homeGroup, onChange: home.change, pickMedia: pickMedia })
                                                 : _jsx("p", { className: "ak-hint", children: "Carico\u2026" })), section === "settings" && (settings.error ? (_jsxs("div", { className: "pane-empty", children: [_jsx("p", { className: "ak-error", children: settings.error }), _jsx("button", { className: "ak-btn", onClick: () => void settings.load(), children: "Riprova" })] })) : settings.data ? (settingsView === "seo"
                                             ? _jsx(WebsiteSeoSettingsEditor, { value: settings.data, onChange: settings.change })
-                                            : _jsx(SiteSettingsEditor, { value: settings.data, onChange: settings.change, pickMediaFiles: pickMediaFiles, focus: route[1] })) : _jsx("p", { className: "pane-empty ak-hint", children: "Carico\u2026" })), view === "media" && _jsx(MediaGrid, { lib: media }), view === "trash" && _jsx(Trash, {}), section === "requests" && (requests.error ? _jsx("p", { className: "ak-error", children: requests.error })
+                                            : _jsx(SiteSettingsEditor, { value: settings.data, onChange: settings.change, pickMediaFiles: pickMediaFiles, focus: route[1], passwordDraftPending: settings.accessDraftPending, onDiscardPasswordDraft: () => void settings.discardSiteAccess().then(() => publish.reload()) })) : _jsx("p", { className: "pane-empty ak-hint", children: "Carico\u2026" })), view === "media" && (mediaSettingsOpen
+                                            ? _jsx(MediaSettingsEditor, { lib: media })
+                                            : _jsx(MediaGrid, { lib: media })), view === "trash" && _jsx(Trash, {}), section === "requests" && (requests.error ? _jsx("p", { className: "ak-error", children: requests.error })
                                             : openReq ? (_jsx(RequestDetail, { row: openReq, onMark: (h) => void requests.mark([openReq.id], h), onRemove: () => { void requests.remove([openReq.id]); go("/requests"); } }))
                                                 : _jsx("p", { className: "pane-empty ak-hint", children: requests.rows?.length ? "Scegli una richiesta dall'elenco." : "" })), section === "deliveries" && (deliveries.error ? _jsx("p", { className: "ak-error", children: deliveries.error })
                                             : deliverySettingsOpen ? (_jsx(DeliverySettings, { settings: deliveries.settings, onAction: deliveries.action, pickMedia: pickMedia })) : activeDeliveryId && !deliveries.detail ? (_jsx("p", { className: "pane-empty ak-hint", children: "Carico\u2026" })) : (

package/dist/app/app.css

@@ -235,6 +235,7 @@ body { margin: 0; background: var(--ak-bg); color: var(--ak-ink); font-family: v
 .st-inline-help {
   margin: -3px 0 0; color: var(--ak-ink-quiet); font: 400 11px/1.45 var(--ak-font);
 }
+.media-settings-note { margin-top: 13px; max-width: 520px; }
 .st-favicon { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
 .st-favicon-preview {
   width: 48px; height: 48px; display: grid; place-items: center; flex: none;
@@ -1165,6 +1166,10 @@ body { margin: 0; background: var(--ak-bg); color: var(--ak-ink); font-family: v
 .uk-job.is-failed .uk-job-top span { color: #a33; }
 .uk-track { height: 4px; overflow: hidden; border-radius: 3px; background: var(--ak-line); }
 .uk-track i { display: block; height: 100%; background: var(--ak-accent); transition: width .25s; }
+.uk-phase { display: grid; gap: 4px; }
+.uk-phase > span { color: var(--ak-ink-quiet); font: 500 10px/1.2 var(--ak-font); }
+.uk-media-job .uk-phase:nth-of-type(3) .uk-track i { opacity: .65; }
+.uk-warning { margin: 0; color: #8a5a12; font-size: 11px; line-height: 1.45; }
 .uk-job.is-paused .uk-track i { background: var(--ak-ink-quiet); }
 .uk-error { margin: 0; color: #a33; font-size: 11px; line-height: 1.45; }
 .uk-job-actions { display: flex; align-items: center; gap: 5px; flex-wrap: wrap; }

package/dist/app/lib/publish.js

@@ -27,7 +27,10 @@ export function usePublish() {
                     .map((operation) => ({
                     message: operation.type === "move" ? "Spostamento Media pronto" : "Eliminazione Media pronta",
                     date: operation.updatedAt ? new Date(operation.updatedAt).toISOString() : null,
-                }))));
+                }))).concat(d.siteAccess ? [{
+                        message: d.siteAccess.enabled ? "Attivazione o cambio password del sito" : "Disattivazione password del sito",
+                        date: null,
+                    }] : []));
                 setConfigured(true);
                 setError(null);
             }

package/dist/app/lib/settings.d.ts

@@ -26,4 +26,6 @@ export declare function useSiteSettings(active: boolean): {
     change: (next: SiteSettings) => void;
     save: () => Promise<void>;
     setNotice: import("react").Dispatch<import("react").SetStateAction<string | null>>;
+    accessDraftPending: boolean;
+    discardSiteAccess: () => Promise<void>;
 };

package/dist/app/lib/settings.js

@@ -37,6 +37,12 @@ export function useSiteSettings(active) {
     const [saving, setSaving] = useState(false);
     const [notice, setNotice] = useState(null);
     const [revision, setRevision] = useState(null);
+    const [accessState, setAccessState] = useState(null);
+    const [editorialBaseline, setEditorialBaseline] = useState("");
+    const editorialSnapshot = (settings) => {
+        const { password: _password, passwordEnabled: _passwordEnabled, ...editorial } = settings;
+        return JSON.stringify(editorial);
+    };
     const load = useCallback(async () => {
         try {
             const mapped = site().siteSettingsDocument;
@@ -49,12 +55,18 @@ export function useSiteSettings(active) {
                 const settings = mapped.fromPayload ? mapped.fromPayload(stored) : stored;
                 if (!settings || typeof settings !== "object" || Array.isArray(settings))
                     throw new Error("content_unavailable");
-                setData({ ...empty, ...settings, password: "" });
+                const access = site().siteAccess ? (await api.siteAccessState()).state : null;
+                const loaded = { ...empty, ...settings, passwordEnabled: access?.effective?.enabled ?? false, password: "" };
+                setData(loaded);
+                setAccessState(access);
+                setEditorialBaseline(editorialSnapshot(loaded));
                 setRevision({ base: document.draftRevisionId ?? document.publishedRevisionId, expected: document.draftRevisionId });
             }
             else {
                 const result = await call("/admin/api/settings");
-                setData({ ...empty, ...result.settings, password: "" });
+                const loaded = { ...empty, ...result.settings, password: "" };
+                setData(loaded);
+                setEditorialBaseline(editorialSnapshot(loaded));
             }
             setError(null);
             setDirty(false);
@@ -75,10 +87,19 @@ export function useSiteSettings(active) {
         try {
             const mapped = site().siteSettingsDocument;
             if (contentPersistenceMode() === "d1" && mapped && revision) {
-                const revisionId = crypto.randomUUID();
-                const payload = mapped.toPayload ? mapped.toPayload(data) : data;
-                await api.saveContent({ revisionId, documentId: mapped.documentId, baseRevisionId: revision.base, expectedDraftRevisionId: revision.expected, kind: mapped.kind, locale: mapped.locale, schemaVersion: mapped.schemaVersion, payload: payload, tombstone: false });
-                setRevision({ base: revisionId, expected: revisionId });
+                if (editorialSnapshot(data) !== editorialBaseline) {
+                    const revisionId = crypto.randomUUID();
+                    const payload = mapped.toPayload ? mapped.toPayload(data) : data;
+                    await api.saveContent({ revisionId, documentId: mapped.documentId, baseRevisionId: revision.base, expectedDraftRevisionId: revision.expected, kind: mapped.kind, locale: mapped.locale, schemaVersion: mapped.schemaVersion, payload: payload, tombstone: false });
+                    setRevision({ base: revisionId, expected: revisionId });
+                    setEditorialBaseline(editorialSnapshot(data));
+                }
+                const effectiveEnabled = accessState?.effective?.enabled ?? false;
+                if (site().siteAccess && (data.password !== "" || data.passwordEnabled !== effectiveEnabled)) {
+                    const result = await api.saveSiteAccess(data.passwordEnabled, data.password, accessState?.draft?.versionId ?? null);
+                    setAccessState(result.state);
+                    setData({ ...data, password: "", passwordEnabled: result.state.effective?.enabled ?? false });
+                }
                 setDirty(false);
                 setNotice("Bozza D1 salvata");
                 return;
@@ -101,10 +122,35 @@ export function useSiteSettings(active) {
         finally {
             setSaving(false);
         }
-    }, [data, revision]);
+    }, [data, revision, accessState, editorialBaseline]);
     const change = useCallback((next) => {
         setData(next);
         setDirty(true);
     }, []);
-    return { data, error, dirty, saving, notice, load, change, save, setNotice };
+    const discardSiteAccess = useCallback(async () => {
+        if (!accessState?.draft)
+            return;
+        setSaving(true);
+        setNotice(null);
+        try {
+            const result = await api.discardSiteAccess(accessState.draft.versionId);
+            setAccessState(result.state);
+            setData((current) => {
+                if (!current)
+                    return current;
+                const next = { ...current, password: "", passwordEnabled: result.state.active?.enabled ?? false };
+                setDirty(editorialSnapshot(next) !== editorialBaseline);
+                return next;
+            });
+            setNotice("Modifica della password annullata");
+        }
+        catch (error) {
+            setNotice(error.message);
+        }
+        finally {
+            setSaving(false);
+        }
+    }, [accessState, editorialBaseline]);
+    return { data, error, dirty, saving, notice, load, change, save, setNotice,
+        accessDraftPending: Boolean(accessState?.draft), discardSiteAccess };
 }

package/dist/app/routes/MediaSettingsEditor.d.ts

@@ -0,0 +1,4 @@
+import type { MediaLibrary } from "../../form/media/useMediaLibrary.js";
+export declare function MediaSettingsEditor({ lib }: {
+    lib: MediaLibrary;
+}): import("react").JSX.Element;

package/dist/app/routes/MediaSettingsEditor.js

@@ -0,0 +1,4 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+export function MediaSettingsEditor({ lib }) {
+    return (_jsxs("section", { className: "settings-editor", children: [_jsxs("header", { className: "st-intro", children: [_jsx("span", { children: "Impostazioni Media" }), _jsx("h2", { children: "Caricamento immagini" }), _jsx("p", { children: "Ottimizza le immagini prima che vengano inviate alla libreria del sito." })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Ottimizzazione automatica" }), _jsxs("div", { className: "st-row", children: [_jsxs("div", { className: "st-copy", children: [_jsx("h3", { children: "Converti le immagini in WebP" }), _jsx("p", { children: "JPG, JPEG, PNG, WebP, HEIC e gli altri formati immagine compatibili vengono convertiti in WebP, qualit\u00E0 80, con lato lungo massimo di 2500 px. I file pi\u00F9 piccoli non vengono ingranditi. Video e file non immagine restano invariati." })] }), _jsxs("div", { className: "st-control", children: [_jsxs("label", { className: "st-toggle" + (lib.settingsBusy ? " is-locked" : ""), children: [_jsx("input", { type: "checkbox", checked: lib.autoWebp, disabled: lib.settingsBusy, onChange: (event) => void lib.setAutoWebp(event.target.checked) }), _jsx("span", { className: "st-toggle-track", "aria-hidden": "true", children: _jsx("span", {}) }), _jsxs("span", { children: [lib.autoWebp ? "On" : "Off", " \u00B7 Conversione automatica"] })] }), _jsx("p", { className: "st-inline-help media-settings-note", children: "La conversione (da una a tre immagini) e l\u2019upload (da due a quattro file) usano pool adattivi e procedono in parallelo in base al dispositivo e alla connessione. L\u2019impostazione vale per questo sito e per tutti gli utenti del pannello." })] })] })] }), lib.error && _jsx("p", { className: "ak-error", onClick: lib.clearError, children: lib.error })] }));
+}

package/dist/app/routes/SiteSettingsEditor.d.ts

@@ -7,13 +7,15 @@ export declare const EXTRAS: {
     card: string;
     short: string;
 }[];
-export declare function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, }: {
+export declare function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, passwordDraftPending, onDiscardPasswordDraft, }: {
     value: SiteSettings;
     onChange: (next: SiteSettings) => void;
     pickMediaFiles: (o: {
         multiple: boolean;
     }) => Promise<AssetFile[] | null>;
     focus?: string;
+    passwordDraftPending?: boolean;
+    onDiscardPasswordDraft?: () => void;
 }): import("react").JSX.Element;
 export declare function WebsiteSeoSettingsEditor({ value, onChange, }: {
     value: SiteSettings;

package/dist/app/routes/SiteSettingsEditor.js

@@ -35,8 +35,9 @@ function SettingRow({ title, help, children, }) {
 function Field({ value, onChange, maxLength, placeholder, type = "text", disabled = false, }) {
     return (_jsx("input", { className: "st-input", type: type, value: value, maxLength: maxLength, placeholder: placeholder, disabled: disabled, onChange: (event) => onChange(event.target.value) }));
 }
-export function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, }) {
+export function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, passwordDraftPending = false, onDiscardPasswordDraft, }) {
     const d1Content = contentPersistenceMode() === "d1";
+    const managedSiteAccess = d1Content && Boolean(site().siteAccess);
     const update = (key, next) => onChange({ ...value, [key]: next });
     const extras = useRef(null);
     /* Salto SECCO (`behavior: "auto"`), non fluido, e al frame successivo.
@@ -58,7 +59,7 @@ export function SiteSettingsEditor({ value, onChange, pickMediaFiles, focus, })
         if (selected?.[0])
             update("favicon", selected[0].url);
     };
-    return (_jsxs("section", { className: "settings-editor", children: [_jsxs("header", { className: "st-intro", children: [_jsx("span", { children: "Impostazioni generali" }), _jsx("h2", { children: "Sito" }), _jsx("p", { children: "Identit\u00E0, descrizione e accesso al sito pubblico." })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Identit\u00E0 del sito" }), _jsx(SettingRow, { title: "Titolo del sito", help: "Il nome generale del sito, usato anche come nome del publisher nei metadati.", children: _jsx(Field, { value: value.siteTitle, maxLength: 140, placeholder: site().name, onChange: (next) => update("siteTitle", next) }) }), _jsxs(SettingRow, { title: "Descrizione breve", help: "Una frase sintetica usata come descrizione predefinita quando una pagina non ne possiede una specifica.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 3, value: value.shortDescription, maxLength: 255, onChange: (event) => update("shortDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.shortDescription.length, "/255"] })] }), _jsx(SettingRow, { title: "Favicon", help: "L\u2019icona mostrata nella scheda del browser. \u00C8 preferibile un\u2019immagine quadrata.", children: _jsxs("div", { className: "st-favicon", children: [_jsx("span", { className: "st-favicon-preview", children: value.favicon ? _jsx("img", { src: value.favicon, alt: "Anteprima favicon" }) : _jsx(Icon.pages, {}) }), _jsx("button", { className: "ak-btn", type: "button", onClick: () => void chooseFavicon(), children: value.favicon ? "Cambia favicon" : "Carica favicon" }), value.favicon && (_jsx("button", { className: "ak-btn ak-btn-quiet", type: "button", onClick: () => update("favicon", ""), children: "Rimuovi" }))] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Accesso al sito" }), _jsx(SettingRow, { title: "Password del sito", help: "Quando \u00E8 attiva, ogni pagina e ogni immagine pubblica richiedono la stessa password. L\u2019admin resta raggiungibile tramite il suo accesso protetto.", children: _jsxs("div", { className: "st-stack", children: [_jsx(Field, { type: "password", value: value.password, maxLength: 200, placeholder: value.passwordEnabled ? "Password già impostata · inseriscine una per cambiarla" : "Almeno 8 caratteri", disabled: d1Content, onChange: (next) => update("password", next) }), _jsx(Toggle, { checked: value.passwordEnabled, label: "Protezione con password", disabled: d1Content, onChange: (next) => update("passwordEnabled", next) }), d1Content && (_jsx("p", { className: "st-inline-help", children: "La protezione esistente resta attiva e viene gestita dall\u2019operatore durante la migrazione D1." })), value.passwordEnabled && (_jsx("p", { className: "st-inline-help", children: "Lascia il campo vuoto per mantenere la password attuale." }))] }) })] }), _jsxs("section", { className: "st-section" + (focus === "funzioni" ? " is-focused" : ""), ref: extras, children: [_jsx("h2", { children: "Funzioni aggiuntive" }), EXTRAS.map((extra) => (_jsx(SettingRow, { title: extra.title, help: extra.help, children: _jsx(Toggle, { checked: value.features[extra.key], disabled: true, label: value.features[extra.key] ? "Attiva su questo sito" : "Non attiva", onChange: () => { } }) }, extra.key))), _jsxs("p", { className: "st-inline-help st-extras-note", children: ["Queste funzioni si attivano separatamente. Per accenderle su questo sito scrivi a", " ", _jsx("strong", { children: site().support.name }), ":", " ", _jsx("a", { href: `mailto:${site().support.email}`, children: site().support.email }), "."] })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Statistiche" }), _jsx(SettingRow, { title: "Tag Analytics", help: _jsxs(_Fragment, { children: ["Il codice fornito dal servizio di statistiche (Umami, Google Analytics, altro). Si incolla qui cos\u00EC com\u2019\u00E8: finisce dentro ", _jsx("code", { children: "<head>" }), " di ogni pagina del sito alla prossima pubblicazione. Le pagine di consegna ai clienti restano escluse. Per svuotarlo, cancella tutto e salva."] }), children: _jsxs("div", { className: "st-stack", children: [_jsx("textarea", { className: "st-input st-textarea st-code", rows: 6, value: value.analyticsTag, maxLength: 4000, spellCheck: false, autoCapitalize: "off", autoCorrect: "off", placeholder: '<script defer src="https://cloud.umami.is/script.js" data-website-id="…"></script>', onChange: (event) => update("analyticsTag", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.analyticsTag.length, "/4000"] }), _jsxs("p", { className: "st-inline-help", children: ["\u00C8 codice eseguito su ogni pagina: incolla solo quello che ti ha dato il servizio. Un tag incompleto (per esempio senza ", _jsx("code", { children: "</script>" }), ") pu\u00F2 rompere il sito."] })] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Profilo" }), _jsx(SettingRow, { title: "Nome", help: "Il nome della persona proprietaria del sito. Sar\u00E0 disponibile per future funzioni del pannello.", children: _jsx(Field, { value: value.ownerName, maxLength: 120, placeholder: site().name, onChange: (next) => update("ownerName", next) }) }), _jsxs(SettingRow, { title: "Descrizione del sito", help: "Una descrizione generale pi\u00F9 estesa, conservata come informazione del profilo del sito.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 5, value: value.siteDescription, maxLength: 1200, onChange: (event) => update("siteDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.siteDescription.length, "/1200"] })] })] })] }));
+    return (_jsxs("section", { className: "settings-editor", children: [_jsxs("header", { className: "st-intro", children: [_jsx("span", { children: "Impostazioni generali" }), _jsx("h2", { children: "Sito" }), _jsx("p", { children: "Identit\u00E0, descrizione e accesso al sito pubblico." })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Identit\u00E0 del sito" }), _jsx(SettingRow, { title: "Titolo del sito", help: "Il nome generale del sito, usato anche come nome del publisher nei metadati.", children: _jsx(Field, { value: value.siteTitle, maxLength: 140, placeholder: site().name, onChange: (next) => update("siteTitle", next) }) }), _jsxs(SettingRow, { title: "Descrizione breve", help: "Una frase sintetica usata come descrizione predefinita quando una pagina non ne possiede una specifica.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 3, value: value.shortDescription, maxLength: 255, onChange: (event) => update("shortDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.shortDescription.length, "/255"] })] }), _jsx(SettingRow, { title: "Favicon", help: "L\u2019icona mostrata nella scheda del browser. \u00C8 preferibile un\u2019immagine quadrata.", children: _jsxs("div", { className: "st-favicon", children: [_jsx("span", { className: "st-favicon-preview", children: value.favicon ? _jsx("img", { src: value.favicon, alt: "Anteprima favicon" }) : _jsx(Icon.pages, {}) }), _jsx("button", { className: "ak-btn", type: "button", onClick: () => void chooseFavicon(), children: value.favicon ? "Cambia favicon" : "Carica favicon" }), value.favicon && (_jsx("button", { className: "ak-btn ak-btn-quiet", type: "button", onClick: () => update("favicon", ""), children: "Rimuovi" }))] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Accesso al sito" }), _jsx(SettingRow, { title: "Password del sito", help: "Quando \u00E8 attiva, ogni pagina e ogni immagine pubblica richiedono la stessa password. L\u2019admin resta raggiungibile tramite il suo accesso protetto.", children: _jsxs("div", { className: "st-stack", children: [_jsx(Field, { type: "password", value: value.password, maxLength: 200, placeholder: value.passwordEnabled ? "Password già impostata · inseriscine una per cambiarla" : "Almeno 8 caratteri", disabled: d1Content && !managedSiteAccess, onChange: (next) => update("password", next) }), _jsx(Toggle, { checked: value.passwordEnabled, label: "Protezione con password", disabled: d1Content && !managedSiteAccess, onChange: (next) => update("passwordEnabled", next) }), d1Content && !managedSiteAccess && (_jsx("p", { className: "st-inline-help", children: "La protezione esistente resta attiva e viene gestita dall\u2019operatore durante la migrazione D1." })), managedSiteAccess && (_jsx("p", { className: "st-inline-help", children: "La modifica resta in bozza e diventa effettiva solo dopo una pubblicazione completata." })), managedSiteAccess && passwordDraftPending && onDiscardPasswordDraft && (_jsx("button", { className: "ak-btn ak-btn-quiet", type: "button", onClick: onDiscardPasswordDraft, children: "Annulla la modifica salvata" })), value.passwordEnabled && (_jsx("p", { className: "st-inline-help", children: "Lascia il campo vuoto per mantenere la password attuale." }))] }) })] }), _jsxs("section", { className: "st-section" + (focus === "funzioni" ? " is-focused" : ""), ref: extras, children: [_jsx("h2", { children: "Funzioni aggiuntive" }), EXTRAS.map((extra) => (_jsx(SettingRow, { title: extra.title, help: extra.help, children: _jsx(Toggle, { checked: value.features[extra.key], disabled: true, label: value.features[extra.key] ? "Attiva su questo sito" : "Non attiva", onChange: () => { } }) }, extra.key))), _jsxs("p", { className: "st-inline-help st-extras-note", children: ["Queste funzioni si attivano separatamente. Per accenderle su questo sito scrivi a", " ", _jsx("strong", { children: site().support.name }), ":", " ", _jsx("a", { href: `mailto:${site().support.email}`, children: site().support.email }), "."] })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Statistiche" }), _jsx(SettingRow, { title: "Tag Analytics", help: _jsxs(_Fragment, { children: ["Il codice fornito dal servizio di statistiche (Umami, Google Analytics, altro). Si incolla qui cos\u00EC com\u2019\u00E8: finisce dentro ", _jsx("code", { children: "<head>" }), " di ogni pagina del sito alla prossima pubblicazione. Le pagine di consegna ai clienti restano escluse. Per svuotarlo, cancella tutto e salva."] }), children: _jsxs("div", { className: "st-stack", children: [_jsx("textarea", { className: "st-input st-textarea st-code", rows: 6, value: value.analyticsTag, maxLength: 4000, spellCheck: false, autoCapitalize: "off", autoCorrect: "off", placeholder: '<script defer src="https://cloud.umami.is/script.js" data-website-id="…"></script>', onChange: (event) => update("analyticsTag", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.analyticsTag.length, "/4000"] }), _jsxs("p", { className: "st-inline-help", children: ["\u00C8 codice eseguito su ogni pagina: incolla solo quello che ti ha dato il servizio. Un tag incompleto (per esempio senza ", _jsx("code", { children: "</script>" }), ") pu\u00F2 rompere il sito."] })] }) })] }), _jsxs("section", { className: "st-section", children: [_jsx("h2", { children: "Profilo" }), _jsx(SettingRow, { title: "Nome", help: "Il nome della persona proprietaria del sito. Sar\u00E0 disponibile per future funzioni del pannello.", children: _jsx(Field, { value: value.ownerName, maxLength: 120, placeholder: site().name, onChange: (next) => update("ownerName", next) }) }), _jsxs(SettingRow, { title: "Descrizione del sito", help: "Una descrizione generale pi\u00F9 estesa, conservata come informazione del profilo del sito.", children: [_jsx("textarea", { className: "st-input st-textarea", rows: 5, value: value.siteDescription, maxLength: 1200, onChange: (event) => update("siteDescription", event.target.value) }), _jsxs("span", { className: "st-count", children: [value.siteDescription.length, "/1200"] })] })] })] }));
 }
 export function WebsiteSeoSettingsEditor({ value, onChange, }) {
     const update = (key, next) => onChange({ ...value, [key]: next });

package/dist/app/routes/UploadDock.js

@@ -12,11 +12,13 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
  */
 import { useEffect, useState } from "react";
 import { cancelUpload, dismissUpload, isBusy, pauseUpload, resumeUpload, useUploads, } from "../lib/upload-queue";
+import { dismissMediaUpload, useMediaUploads, } from "../../form/media/media-upload-queue.js";
 export function UploadDock() {
     const jobs = useUploads();
+    const mediaJobs = useMediaUploads();
     const [open, setOpen] = useState(true);
     const [confirmStop, setConfirmStop] = useState(null);
-    const busy = jobs.some((job) => job.state === "running");
+    const busy = jobs.some(isBusy) || mediaJobs.some((job) => job.state === "running");
     useEffect(() => {
         if (!busy)
             return;
@@ -24,21 +26,41 @@ export function UploadDock() {
         window.addEventListener("beforeunload", warn);
         return () => window.removeEventListener("beforeunload", warn);
     }, [busy]);
-    if (!jobs.length)
+    if (!jobs.length && !mediaJobs.length)
         return null;
-    return (_jsxs("aside", { className: "uk" + (open ? "" : " is-closed"), "aria-label": "Caricamenti", children: [_jsxs("button", { className: "uk-head", onClick: () => setOpen((value) => !value), "aria-expanded": open, children: [_jsx("span", { className: "uk-head-text", children: summary(jobs) }), _jsx("span", { className: "uk-chevron", "aria-hidden": "true", children: open ? "▾" : "▴" })] }), open && (_jsx("ul", { className: "uk-list", children: jobs.map((job) => (_jsxs("li", { className: "uk-job is-" + job.state, children: [_jsxs("div", { className: "uk-job-top", children: [_jsx("strong", { children: job.title }), _jsx("span", { children: line(job) })] }), isBusy(job) && (_jsx("div", { className: "uk-track", children: _jsx("i", { style: { width: `${percent(job)}%` } }) })), job.error && _jsx("p", { className: "uk-error", children: job.error }), _jsxs("div", { className: "uk-job-actions", children: [job.state === "running" && (_jsx("button", { className: "ak-btn", onClick: () => pauseUpload(job.id), children: "Pausa" })), job.state === "paused" && (_jsx("button", { className: "ak-btn", onClick: () => resumeUpload(job.id), children: "Riprendi" })), isBusy(job) && (confirmStop === job.id ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "uk-confirm", children: "I file gi\u00E0 caricati verranno buttati." }), _jsx("button", { className: "ak-btn", onClick: () => setConfirmStop(null), children: "No" }), _jsx("button", { className: "ak-btn dl-danger-btn", onClick: () => { cancelUpload(job.id); setConfirmStop(null); }, children: "Annulla il caricamento" })] })) : (_jsx("button", { className: "ak-btn ak-btn-quiet", onClick: () => setConfirmStop(job.id), children: "Annulla" }))), !isBusy(job) && (_jsx("button", { className: "ak-btn ak-btn-quiet", onClick: () => dismissUpload(job.id), children: "Togli dall'elenco" }))] })] }, job.id))) }))] }));
+    return (_jsxs("aside", { className: "uk" + (open ? "" : " is-closed"), "aria-label": "Caricamenti", children: [_jsxs("button", { className: "uk-head", onClick: () => setOpen((value) => !value), "aria-expanded": open, children: [_jsx("span", { className: "uk-head-text", children: summary(jobs, mediaJobs) }), _jsx("span", { className: "uk-chevron", "aria-hidden": "true", children: open ? "▾" : "▴" })] }), open && (_jsxs("ul", { className: "uk-list", children: [mediaJobs.map((job) => _jsx(MediaJob, { job: job }, job.id)), jobs.map((job) => (_jsxs("li", { className: "uk-job is-" + job.state, children: [_jsxs("div", { className: "uk-job-top", children: [_jsx("strong", { children: job.title }), _jsx("span", { children: line(job) })] }), isBusy(job) && (_jsx("div", { className: "uk-track", children: _jsx("i", { style: { width: `${percent(job)}%` } }) })), job.error && _jsx("p", { className: "uk-error", children: job.error }), _jsxs("div", { className: "uk-job-actions", children: [job.state === "running" && (_jsx("button", { className: "ak-btn", onClick: () => pauseUpload(job.id), children: "Pausa" })), job.state === "paused" && (_jsx("button", { className: "ak-btn", onClick: () => resumeUpload(job.id), children: "Riprendi" })), isBusy(job) && (confirmStop === job.id ? (_jsxs(_Fragment, { children: [_jsx("span", { className: "uk-confirm", children: "I file gi\u00E0 caricati verranno buttati." }), _jsx("button", { className: "ak-btn", onClick: () => setConfirmStop(null), children: "No" }), _jsx("button", { className: "ak-btn dl-danger-btn", onClick: () => { cancelUpload(job.id); setConfirmStop(null); }, children: "Annulla il caricamento" })] })) : (_jsx("button", { className: "ak-btn ak-btn-quiet", onClick: () => setConfirmStop(job.id), children: "Annulla" }))), !isBusy(job) && (_jsx("button", { className: "ak-btn ak-btn-quiet", onClick: () => dismissUpload(job.id), children: "Togli dall'elenco" }))] })] }, job.id)))] }))] }));
 }
-function summary(jobs) {
-    const running = jobs.filter((job) => job.state === "running").length;
+function MediaJob({ job }) {
+    const conversionPercent = job.total ? (job.conversionDone / job.total) * 100 : 0;
+    const uploadPercent = job.total ? (job.uploadDone / job.total) * 100 : 0;
+    return (_jsxs("li", { className: "uk-job uk-media-job is-" + job.state, children: [_jsxs("div", { className: "uk-job-top", children: [_jsx("strong", { children: job.title }), _jsx("span", { children: mediaLine(job) })] }), _jsxs("div", { className: "uk-phase", children: [_jsxs("span", { children: [job.autoWebp ? "Conversione" : "Preparazione", " \u00B7 ", job.conversionDone, "/", job.total] }), _jsx("div", { className: "uk-track", children: _jsx("i", { style: { width: `${Math.max(3, conversionPercent)}%` } }) })] }), _jsxs("div", { className: "uk-phase", children: [_jsxs("span", { children: ["Upload \u00B7 ", job.uploadDone, "/", job.total] }), _jsx("div", { className: "uk-track", children: _jsx("i", { style: { width: `${Math.max(3, uploadPercent)}%` } }) })] }), job.originals > 0 && (_jsx("p", { className: "uk-warning", children: job.originals === 1 ? "1 originale caricato dopo tre tentativi di conversione." :
+                    `${job.originals} originali caricati dopo tre tentativi di conversione.` })), job.errors.map((error, index) => _jsx("p", { className: "uk-error", children: error }, `${index}-${error}`)), job.state !== "running" && (_jsx("div", { className: "uk-job-actions", children: _jsx("button", { className: "ak-btn ak-btn-quiet", onClick: () => dismissMediaUpload(job.id), children: "Togli dall\u2019elenco" }) }))] }));
+}
+function mediaLine(job) {
+    if (job.state === "failed")
+        return `Completato con ${job.failed} ${job.failed === 1 ? "errore" : "errori"}`;
+    if (job.state === "done")
+        return job.originals ? "Completato con originali" : "Completato";
+    if (job.uploadDone < job.conversionDone)
+        return "Conversione e upload in parallelo";
+    return job.autoWebp ? "Converto le immagini" : "Preparo i file";
+}
+function summary(jobs, mediaJobs) {
+    const running = jobs.filter((job) => job.state === "running").length +
+        mediaJobs.filter((job) => job.state === "running").length;
     const paused = jobs.filter((job) => job.state === "paused").length;
-    const failed = jobs.filter((job) => job.state === "failed").length;
+    const interrupted = jobs.filter((job) => job.state === "failed").length;
+    const partial = mediaJobs.filter((job) => job.state === "failed").length;
+    const total = jobs.length + mediaJobs.length;
     if (running)
         return running === 1 ? "Caricamento in corso" : `${running} caricamenti in corso`;
     if (paused)
         return paused === 1 ? "Caricamento in pausa" : `${paused} caricamenti in pausa`;
-    if (failed)
-        return failed === 1 ? "Caricamento interrotto" : `${failed} caricamenti interrotti`;
-    return jobs.length === 1 ? "Caricamento completato" : "Caricamenti completati";
+    if (interrupted)
+        return interrupted === 1 ? "Caricamento interrotto" : `${interrupted} caricamenti interrotti`;
+    if (partial)
+        return partial === 1 ? "Caricamento completato con errori" : `${partial} caricamenti con errori`;
+    return total === 1 ? "Caricamento completato" : "Caricamenti completati";
 }
 function line(job) {
     if (job.state === "done") {

package/dist/app/site.d.ts

@@ -82,6 +82,10 @@ export interface SiteAdminConfig {
         fromPayload?: (payload: unknown) => Record<string, unknown>;
         toPayload?: (settings: Record<string, unknown>) => unknown;
     };
+    /** Separate versioned D1 access control. Passwords never enter an editorial document. */
+    siteAccess?: {
+        siteId: string;
+    };
 }
 /** Chiamata da `mountAdmin` prima del primo render. */
 export declare function setSiteConfig(config: SiteAdminConfig): void;

package/dist/deployment.js

@@ -191,13 +191,26 @@ export class D1DeploymentAttemptRepository {
         WHERE draft_revision_id IN (SELECT revision_id FROM content_release_entries WHERE release_id = ?)
           AND document_id IN (SELECT document_id FROM content_release_entries WHERE release_id = ?) AND ${guard}`)
                 .bind(input.now, input.releaseId, input.releaseId, input.attemptId, input.releaseId, input.tokenChecksum, input.now),
+            this.db.prepare(`UPDATE site_access_versions SET state = 'superseded', superseded_at = ?, rollback_expires_at = ?
+        WHERE state = 'active' AND version_id IS NOT (SELECT version_id FROM content_release_site_access WHERE release_id = ?)
+          AND EXISTS (SELECT 1 FROM content_release_site_access WHERE release_id = ?) AND ${guard}`)
+                .bind(input.now, input.now + 7 * 24 * 60 * 60 * 1000, input.releaseId, input.releaseId, input.attemptId, input.releaseId, input.tokenChecksum, input.now),
+            this.db.prepare(`UPDATE site_access_versions SET state = 'active', activated_at = ?
+        WHERE version_id = (SELECT version_id FROM content_release_site_access WHERE release_id = ?) AND state = 'draft' AND ${guard}`)
+                .bind(input.now, input.releaseId, input.attemptId, input.releaseId, input.tokenChecksum, input.now),
+            this.db.prepare(`UPDATE site_access_state SET
+          active_version_id = COALESCE((SELECT version_id FROM content_release_site_access WHERE release_id = ?), active_version_id),
+          draft_version_id = CASE WHEN draft_version_id = (SELECT version_id FROM content_release_site_access WHERE release_id = ?) THEN NULL ELSE draft_version_id END,
+          updated_at = ?
+        WHERE singleton = 1 AND EXISTS (SELECT 1 FROM content_release_site_access WHERE release_id = ?) AND ${guard}`)
+                .bind(input.releaseId, input.releaseId, input.now, input.releaseId, input.attemptId, input.releaseId, input.tokenChecksum, input.now),
             this.db.prepare(`UPDATE production_deployment_attempts SET phase = 'succeeded', active_slot = NULL, updated_at = ?, finished_at = ?
         WHERE attempt_id = ? AND release_id = ? AND phase = 'verifying_canonical' AND ci_claim_token_checksum = ?
           AND ci_claim_expires_at > ? AND EXISTS (SELECT 1 FROM content_site_state WHERE singleton = 1 AND current_release_id = ?)`)
                 .bind(input.now, input.now, input.attemptId, input.releaseId, input.tokenChecksum, input.now, input.releaseId),
         ];
         const results = await this.db.batch(statements);
-        if (results[0]?.meta?.changes !== 1 || results[1]?.meta?.changes !== 1 || results[3]?.meta?.changes !== 1) {
+        if (results[0]?.meta?.changes !== 1 || results[1]?.meta?.changes !== 1 || results[6]?.meta?.changes !== 1) {
             throw new Error("attempt_unavailable");
         }
     }

package/dist/form/media/MediaFolders.d.ts

@@ -9,7 +9,7 @@ export declare function FolderMenu({ lib, prefix, label, openTo }: {
     label: string;
     openTo?: "left" | "auto";
 }): import("react").JSX.Element;
-export declare function MediaFolders({ lib, trash }: {
+export declare function MediaFolders({ lib, trash, settings }: {
     lib: MediaLibrary;
     /** `leave` riporta ai media: dal cestino, cliccare una cartella deve anche USCIRE dal cestino. */
     trash?: {
@@ -17,4 +17,8 @@ export declare function MediaFolders({ lib, trash }: {
         open: () => void;
         leave: () => void;
     };
+    settings?: {
+        active: boolean;
+        open: () => void;
+    };
 }): import("react").JSX.Element;

package/dist/form/media/MediaFolders.js

@@ -63,10 +63,11 @@ export function FolderMenu({ lib, prefix, label, openTo = "left" }) {
                         } }), _jsx("span", { className: "ak-hint", children: "Cambia anche l'indirizzo delle foto dentro. Le pagine del sito vengono aggiornate; i link scritti a mano altrove no." }), _jsxs("div", { className: "mf-menu-row", children: [_jsx("button", { className: "ak-btn ak-btn-primary", disabled: !name.trim(), onClick: () => { close(); void lib.renameFolder(prefix, name); }, children: "Rinomina" }), _jsx("button", { className: "ak-btn ak-btn-quiet", onClick: close, children: "Annulla" })] })] }))] }));
 }
 const IcoTrash = () => (_jsx("svg", { className: "mf-ico", viewBox: "0 0 16 16", width: "15", height: "15", "aria-hidden": "true", children: _jsx("path", { fill: "none", stroke: "currentColor", strokeWidth: "1.4", strokeLinecap: "round", strokeLinejoin: "round", d: "M3 4.5h10M6 4.5V3h4v1.5M4.5 4.5 5 13.5h6l.5-9" }) }));
+const IcoSettings = () => (_jsxs("svg", { className: "mf-ico", viewBox: "0 0 16 16", width: "15", height: "15", "aria-hidden": "true", children: [_jsx("path", { fill: "none", stroke: "currentColor", strokeWidth: "1.35", strokeLinecap: "round", strokeLinejoin: "round", d: "M6.6 2.2h2.8l.4 1.5c.4.2.8.4 1.1.7l1.5-.4 1.4 2.4-1.1 1.1v1l1.1 1.1-1.4 2.4-1.5-.4c-.3.3-.7.5-1.1.7l-.4 1.5H6.6l-.4-1.5a5 5 0 0 1-1.1-.7l-1.5.4-1.4-2.4 1.1-1.1v-1L2.2 6.4 3.6 4l1.5.4c.3-.3.7-.5 1.1-.7l.4-1.5Z" }), _jsx("circle", { cx: "8", cy: "8", r: "2", fill: "none", stroke: "currentColor", strokeWidth: "1.35" })] }));
 /* `trash` è facoltativo perché il cestino è una ROTTA, e le rotte le conosce l'applicazione, non
  * questo componente. Sta qui in fondo, sotto «+ Cartella», perché è l'ultimo posto dove finiscono
  * le foto: nella colonna che elenca dove stanno, non in una barra da un'altra parte. */
-export function MediaFolders({ lib, trash }) {
+export function MediaFolders({ lib, trash, settings }) {
     const [over, setOver] = useState(null);
     const [draggingFolder, setDraggingFolder] = useState(false);
     const canDrop = lib.mode === "manage";
@@ -112,5 +113,5 @@ export function MediaFolders({ lib, trash }) {
                         + (over === f.prefix ? " is-over" : ""), onDragOver: (e) => { if (canDrop) {
                         e.preventDefault();
                         setOver(f.prefix);
-                    } }, onDragLeave: () => setOver((p) => (p === f.prefix ? null : p)), onDrop: drop(f.prefix), children: [_jsxs("button", { className: "mf-open", onClick: () => goTo(f.prefix), children: [_jsx("span", { className: "mf-name", children: f.label || f.name }), f.count != null && _jsx("span", { className: "mf-count", children: f.count })] }), canDrop && _jsx(FolderMenu, { lib: lib, prefix: f.prefix, label: f.label || f.name })] }, f.prefix))) }), draggingFolder && (_jsx("div", { className: "mf-root-drop" + (over === "__root" ? " is-over" : ""), onDragOver: (e) => { e.preventDefault(); setOver("__root"); }, onDragLeave: () => setOver((p) => (p === "__root" ? null : p)), onDrop: drop(""), children: "Porta al primo livello" })), canDrop && (_jsx("button", { className: "ak-btn ak-btn-quiet mf-new", onClick: () => void lib.newFolder(""), children: "+ Cartella" })), trash && (_jsx("ul", { className: "mf-list mf-tail", children: _jsx("li", { className: "mf-item" + (trash.active ? " is-on" : ""), children: _jsxs("button", { className: "mf-open", onClick: trash.open, children: [_jsx(IcoTrash, {}), _jsx("span", { className: "mf-name", children: "Cestino" })] }) }) }))] }));
+                    } }, onDragLeave: () => setOver((p) => (p === f.prefix ? null : p)), onDrop: drop(f.prefix), children: [_jsxs("button", { className: "mf-open", onClick: () => goTo(f.prefix), children: [_jsx("span", { className: "mf-name", children: f.label || f.name }), f.count != null && _jsx("span", { className: "mf-count", children: f.count })] }), canDrop && _jsx(FolderMenu, { lib: lib, prefix: f.prefix, label: f.label || f.name })] }, f.prefix))) }), draggingFolder && (_jsx("div", { className: "mf-root-drop" + (over === "__root" ? " is-over" : ""), onDragOver: (e) => { e.preventDefault(); setOver("__root"); }, onDragLeave: () => setOver((p) => (p === "__root" ? null : p)), onDrop: drop(""), children: "Porta al primo livello" })), canDrop && (_jsx("button", { className: "ak-btn ak-btn-quiet mf-new", onClick: () => void lib.newFolder(""), children: "+ Cartella" })), trash && (_jsx("ul", { className: "mf-list mf-tail", children: _jsx("li", { className: "mf-item" + (trash.active ? " is-on" : ""), children: _jsxs("button", { className: "mf-open", onClick: trash.open, children: [_jsx(IcoTrash, {}), _jsx("span", { className: "mf-name", children: "Cestino" })] }) }) })), settings && (_jsx("ul", { className: "mf-list mf-settings-tail", children: _jsx("li", { className: "mf-item" + (settings.active ? " is-on" : ""), children: _jsxs("button", { className: "mf-open", onClick: settings.open, children: [_jsx(IcoSettings, {}), _jsx("span", { className: "mf-name", children: "Impostazioni" })] }) }) }))] }));
 }