@goodfellow-cms/admin 0.6.0 → 0.7.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { $ as useDebounced, A as useRoute, At as redirectsFileChange, B as FrameServicesProvider, C as AppLink, Ct as menusFileChange, D as hasUnsavedChanges, Dt as newPageData, E as entryEditorHref, Et as newCollectionSettings, F as PluginScreenFrame, H as useFrame, I as usePluginFrame, It as uniqueName, J as Dialog, K as draftStarted, L as usePluginHost, Lt as updateSettingsFileChange, M as prepareUpload, Mt as slugify, N as useOutsideHost, Nt as storedCss, O as navigate, Ot as pageFileChange, P as PublishFailure, Pt as storedData, Q as TextField, R as createMediaPreviews, S as MediaScreen, St as mediaFileChange, T as collectionHref, Tt as movePageChanges, U as useFrameServices, V as reloadFrames, W as useFrameUpdates, X as Field, Y as ErrorMessage, Z as PublishedNotice, _ as scheduleSettingsChanges, _t as customCssFileChange, bt as entryFileChange$1, c as useCanChangeSettings, ct as mediaUrl, d as useApplyThemeChoice, dt as addressPatternFor, et as StringsProvider, f as useDarkMode, ft as checkEntrySlug, g as ScheduleStatus, gt as collectionSettingsChanges, h as ScheduleFields, ht as collectionFileChange$1, it as describeContrast, j as useUnsavedChanges, jt as siteSettingsFileChange, k as pageEditorHref, kt as pageTitle$1, l as useSiteContent, lt as siteImages, m as ComingUp, mt as codeFileChanges, n as formValues, nt as useStringTable, o as AdminProvider, ot as allMedia, p as useThemeChoice$1, pt as checkPageAddress, q as Button, r as PreviewFrame, rt as useStrings, s as useAdmin, st as fileName, t as SCHEDULE_PROP, tt as defaultStrings, u as setThemeChoice, ut as uploadName, v as REGISTRY_VERSION, vt as deleteCollectionChanges, w as SETTINGS_SECTIONS, wt as moveEntryChanges, x as MediaField, xt as layoutFileChange, yt as duplicatePageData } from "./entry-values-BrY3L0Ai.js";
-import { APP_API_HEADER, BROKER_AI_ADDRESS, BROKER_CONNECT_MESSAGE, BROKER_READY_MESSAGE, CODE_THEMES, COLLECTIONS_DIR, CONFIG_FILE, ConflictError, ContentError, DEFAULT_CODE_THEMES, DEFAULT_DARK_THEME_COLORS, DEFAULT_THEME_COLORS, DEMO_CONTENT_PATH, DomainError, EditorsError, FIELD_TYPES, FOOTER_FILE, GOODFELLOW_VERSION, HEADER_FILE, HeadCodeError, INSTALLED_PLUGINS_FILE, INSTALLED_RECORD_FILE, MEDIA_DIR, NIGHTLY_MODES, NPM_REGISTRY, PackageError, PluginInstallError, PluginTaskError, REDIRECT_LINK_PLACEHOLDER, REDIRECT_MESSAGE, RELEASE_AGE_DAYS, RegistryError, SetupError, SignInError, THEME_COLORS, THEME_FILE, THEME_RELEASE_AGE_DAYS, TITLE_FIELD, ThemeError, UPDATES_FILE, UpdatesError, VERSION_PACKAGE, addressPatternProblem, adminOrigin, allPages, availableBlocks, availableUpdates, blockUses, brokerAddressProblem, brokerOrigin, brokerReleaseUrl, checkAdminAddress, checkEditedData, checkRecords, chooseRelease, chooseThemeRelease, collectionFileSchema, compareReleases, configAdmin, configBroker, contentInLanguage, contrastProblems, credentialStorage, decodeBase64, demoContentStore, demoStore, describeSiteChanges, describedConfig, domainZone, encodeBase64Bytes, entryAddress, entryLanguage, entryPathIn, entrySourceHash, entryTitle, entryTranslations, eventValueProblem, fetchBrokerRelease, fetchPluginPackage, fetchTheme, findEntry, formTarget, getPageHead, hasLanguages, inRange, isAddressSegment, isEmptyValue, isLanguageCode, isLanguageHome, isReservedPagePath, languageLayoutFile, languageName, languagePrefix, loadSiteContent, mainLanguage, menusFileSchema, normalizeDomain, pageLanguage, pageLinks, pageSourceHash, pageTitle, pageTranslations, parseDemoContent, parseHeadCode, parseInstalledPlugins, parseInstalledRecord, parseThemeRecord, parseUpdateSettings, pathLanguage, permissionChanges, planBlockChanges, planBroker, planPluginInstall, planPluginRemove, planTheme, pluginReleases, pluginsOutOfRange, recordsInPlace, redirectFrom, redirectProblems, registrarName, releaseVersions, remoteBackend, reviewPluginPackages, scheduleOf, scheduleProblem, searchPlugins, searchThemes, serializeContent, siteChangesSince, siteHistory, siteLanguages, siteRestoreChanges, siteSettingsSchema, siteVersion, storedRedirects, themeFileUrl, themeLabel, themeLoads, themeReleases, themeToCss, themeUnknownBlocks, todayIn, translationState, trimChars, withAdminConfig, withBrokerConfig, withSchedule, writesLockfile } from "@goodfellow-cms/core";
+import { $ as PublishedNotice, A as useRoute, At as pageFileChange, B as mayChange, C as AppLink, Ct as layoutFileChange, D as hasUnsavedChanges, Dt as movePageChanges, E as entryEditorHref, Et as moveEntryChanges, F as PluginScreenFrame, Ft as storedCss, G as useFrameServices, H as FrameServicesProvider, I as usePluginFrame, It as storedData, J as draftStarted, K as useFrameUpdates, L as usePluginHost, M as prepareUpload, Mt as redirectsFileChange, N as useOutsideHost, Nt as siteSettingsFileChange, O as navigate, Ot as newCollectionSettings, P as PublishFailure, Pt as slugify, Q as Field, R as createMediaPreviews, Rt as uniqueName, S as MediaScreen, St as entryFileChange$1, T as collectionHref, Tt as menusFileChange, U as reloadFrames, V as useMayChange, W as useFrame, X as Dialog, Y as Button, Z as ErrorMessage, _ as scheduleSettingsChanges, _t as collectionFileChange$1, at as useStrings, bt as deleteCollectionChanges, c as useCanChangeSettings, ct as allMedia, d as useApplyThemeChoice, dt as siteImages, et as TextField, f as useDarkMode, ft as uploadName, g as ScheduleStatus, gt as codeFileChanges, h as ScheduleFields, ht as checkPageAddress, it as useStringTable, j as useUnsavedChanges, jt as pageTitle$1, k as pageEditorHref, kt as newPageData, l as useSiteContent, lt as fileName, m as ComingUp, mt as checkEntrySlug, n as formValues, nt as StringsProvider, o as AdminProvider, ot as describeContrast, p as useThemeChoice$1, pt as addressPatternFor, r as PreviewFrame, rt as defaultStrings, s as useAdmin, t as SCHEDULE_PROP, tt as useDebounced, u as setThemeChoice, ut as mediaUrl, v as REGISTRY_VERSION, vt as collectionSettingsChanges, w as SETTINGS_SECTIONS, wt as mediaFileChange, x as MediaField, xt as duplicatePageData, yt as customCssFileChange, zt as updateSettingsFileChange } from "./entry-values-DO01xZ9L.js";
+import { APP_API_HEADER, BROKER_AI_ADDRESS, BROKER_CONNECT_MESSAGE, BROKER_READY_MESSAGE, CODE_THEMES, COLLECTIONS_DIR, CONFIG_FILE, ConflictError, ContentError, DEFAULT_CODE_THEMES, DEFAULT_DARK_THEME_COLORS, DEFAULT_THEME_COLORS, DEMO_CONTENT_PATH, DomainError, EditorsError, FIELD_TYPES, FOOTER_FILE, GOODFELLOW_VERSION, HEADER_FILE, HeadCodeError, INSTALLED_PLUGINS_FILE, INSTALLED_RECORD_FILE, MEDIA_DIR, NIGHTLY_MODES, NPM_REGISTRY, PackageError, PluginInstallError, PluginTaskError, REDIRECT_LINK_PLACEHOLDER, REDIRECT_MESSAGE, RELEASE_AGE_DAYS, RegistryError, SetupError, SignInError, THEME_COLORS, THEME_FILE, THEME_RELEASE_AGE_DAYS, TITLE_FIELD, ThemeError, UPDATES_FILE, UpdatesError, VERSION_PACKAGE, addressPatternProblem, adminOrigin, allPages, availableBlocks, availableUpdates, blockUses, brokerAddressProblem, brokerOrigin, brokerReleaseUrl, checkAdminAddress, checkEditedData, checkRecords, chooseRelease, chooseThemeRelease, collectionFileSchema, compareReleases, configAdmin, configBroker, contentInLanguage, contrastProblems, credentialStorage, decodeBase64, demoContentStore, demoStore, describeSiteChanges, describedConfig, domainZone, encodeBase64Bytes, entryAddress, entryLanguage, entryPathIn, entrySourceHash, entryTitle, entryTranslations, eventValueProblem, fetchBrokerRelease, fetchPluginPackage, fetchTheme, findEntry, formTarget, getPageHead, googleFontsUrl, hasLanguages, inRange, isAddressSegment, isEmptyValue, isLanguageCode, isLanguageHome, isReservedPagePath, languageLayoutFile, languageName, languagePrefix, loadSiteContent, mainLanguage, menusFileSchema, normalizeDomain, pageLanguage, pageLinks, pageSourceHash, pageTitle, pageTranslations, parseDemoContent, parseHeadCode, parseInstalledPlugins, parseInstalledRecord, parseThemeRecord, parseUpdateSettings, pathLanguage, permissionChanges, permissionsFileChange, planBlockChanges, planBroker, planPluginInstall, planPluginRemove, planTheme, pluginReleases, pluginsOutOfRange, recordsInPlace, redirectFrom, redirectProblems, registrarName, releaseVersions, remoteBackend, reviewPluginPackages, scheduleOf, scheduleProblem, searchPlugins, searchThemes, serializeContent, siteChangesSince, siteHistory, siteLanguages, siteRestoreChanges, siteSettingsSchema, siteVersion, storedRedirects, themeFileUrl, themeLabel, themeLoads, themeReleases, themeToCss, themeUnknownBlocks, todayIn, translationState, trimChars, withAdminConfig, withBrokerConfig, withSchedule, writesLockfile } from "@goodfellow-cms/core";
 import { Fragment, useCallback, useEffect, useId, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { createRoot } from "react-dom/client";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
@@ -2033,14 +2033,17 @@ function PluginEditorFrame({ plugin, target, data, onOpen, onChange }) {
 		themeCss
 	};
 	const opening = useRef(void 0);
+	const [ready, setReady] = useState(false);
 	const hooks = useMemo(() => ({
 		open: () => {
 			const { target, data, content, description } = latest.current;
 			const opened = data();
 			opening.current = opened;
+			setReady(false);
 			return editorOpen(target, opened, content, description);
 		},
 		onOpened: (opened, channel) => {
+			setReady(true);
 			latest.current.onOpen(editorHandle(opened, channel), opening.current ?? latest.current.data());
 		},
 		onChange: ({ data, state }) => {
@@ -2064,19 +2067,31 @@ function PluginEditorFrame({ plugin, target, data, onOpen, onChange }) {
 		},
 		styles: async () => {
 			const { services, content, themeCss } = latest.current;
+			const fonts = googleFontsUrl(content.settings.theme);
 			return {
 				stylesheets: [...await services.siteCss(), themeToCss(content.settings.theme)],
-				tailwind: `${themeCss}\n${content.customCss}`
+				tailwind: `${themeCss}\n${content.customCss}`,
+				...fonts && { fonts }
 			};
 		}
 	}), []);
 	const { failed, frameProps } = usePluginFrame(plugin, host, "editor", void 0, hooks);
 	const name = plugin.editor?.title ?? plugin.title;
 	if (failed) return /* @__PURE__ */ jsx(ErrorMessage, { message: t("editor.plugin.failed", { editor: name }) });
-	return /* @__PURE__ */ jsx("iframe", {
-		className: "gfa-editor-frame",
-		title: t("editor.frame", { title: target.title }),
-		...frameProps
+	return /* @__PURE__ */ jsxs("div", {
+		className: "gfa-plugin-editor-wrap",
+		children: [/* @__PURE__ */ jsx("iframe", {
+			className: "gfa-editor-frame",
+			title: t("editor.frame", { title: target.title }),
+			...frameProps
+		}), !ready && /* @__PURE__ */ jsxs("div", {
+			className: "gfa-editor-loading",
+			role: "status",
+			children: [/* @__PURE__ */ jsx("span", {
+				className: "gfa-spinner",
+				"aria-hidden": "true"
+			}), t("editor.plugin.loading", { editor: name })]
+		})]
 	});
 }
 /** What the header asks the editor's frame for, as far as it said it can. */
@@ -2154,6 +2169,18 @@ function sharePreview(content, path, root) {
 * can do, and the AI assistant, which keeps editors' keys out of the frame.
 */
 /** Where the editors' sidebars' widths are remembered: items' fields have a wider one of their own. */
+/** One thing an editor plugin gave back that the site can't keep, in words: the block and setting, then what's wrong. */
+function problemLine(t, problem) {
+	const where = problem.block ?? t("editor.plugin.pageSettings");
+	return problem.field ? t("editor.plugin.problemField", {
+		block: where,
+		field: problem.field,
+		message: problem.message
+	}) : t("editor.plugin.problem", {
+		block: where,
+		message: problem.message
+	});
+}
 const WIDTHS_KEY = "goodfellow-editor-sidebar-widths";
 const ENTRY_WIDTHS_KEY = "goodfellow-entry-sidebar-widths";
 function readWidths(key) {
@@ -2188,6 +2215,20 @@ const VIEWPORTS = [
 function PuckEditor({ kind, path, title, data, collection, entry, validate, toChanges, actions, notice, language }) {
 	const t = useStrings();
 	const { site, publish, reload, drafts } = useAdmin();
+	const readOnly = !useMayChange(kind === "page" ? {
+		kind,
+		path
+	} : kind === "entry" ? {
+		kind,
+		collection: collection?.id ?? "",
+		entry: entry ?? ""
+	} : kind === "template" ? {
+		kind,
+		collection: collection?.id ?? ""
+	} : {
+		kind,
+		...language && { language }
+	});
 	const editors = useEditorChoice(site.description, kind);
 	const plugin = editors.chosen;
 	const editorName = plugin?.editor?.title ?? plugin?.title ?? "";
@@ -2211,7 +2252,8 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 		data,
 		...collection && { collection: collection.id },
 		...entry && { entry },
-		...language && { language }
+		...language && { language },
+		...readOnly && { readOnly }
 	}), [
 		kind,
 		path,
@@ -2219,7 +2261,8 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 		data,
 		collection,
 		entry,
-		language
+		language,
+		readOnly
 	]);
 	const onConnect = useCallback(async (client) => {
 		client.on("editor.state", (next) => {
@@ -2285,12 +2328,23 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 			rightSideBarVisible: false
 		});
 	}, []);
-	/** Changes editor, keeping what's edited: from an editor plugin, only what the site can publish. */
+	/**
+	* Changes editor, keeping what's edited: from Puck, as it is when the choice is made, even if its frame hasn't
+	* said so yet; from an editor plugin, only what the site can publish, and where some of it can't be, only once
+	* the editor has agreed to leave those changes behind.
+	*/
 	const chooseEditor = async (name) => {
 		if (plugin && pluginEditor) {
 			const checked = await pluginData(pluginEditor, latest.current.data);
+			if (!checked.ok) {
+				const problems = checked.problems.map((problem) => problemLine(t, problem)).join("\n");
+				if (!window.confirm(t("editor.plugin.switchLoses", {
+					editor: editorName,
+					problems
+				}))) return;
+			}
 			latest.current.data = checked.ok ? checked.data : pluginEditor.opened;
-		}
+		} else if (!plugin && client) latest.current.data = await client.call("editor.data").catch(() => latest.current.data);
 		setPluginEditor(void 0);
 		editors.choose(name);
 	};
@@ -2305,7 +2359,7 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 				setStatus({
 					type: "invalid",
 					message: t("editor.plugin.invalid", { editor: editorName }),
-					details: checked.problems.map((problem) => `${problem.path}: ${problem.message}`).join("\n")
+					details: checked.problems.map((problem) => problemLine(t, problem)).join("\n")
 				});
 				return;
 			}
@@ -2381,6 +2435,10 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 				className: "gfa-editor-notice",
 				children: notice
 			}),
+			readOnly && /* @__PURE__ */ jsx("div", {
+				className: "gfa-editor-notice",
+				children: t("limits.readOnly")
+			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "gfa-editor-header",
 				children: [
@@ -2461,13 +2519,13 @@ function PuckEditor({ kind, path, title, data, collection, entry, validate, toCh
 								onClick: () => setAiOpen(!aiOpen),
 								children: t("ai.label")
 							}),
-							!drafts.current && /* @__PURE__ */ jsx(Button, {
+							!drafts.current && !readOnly && /* @__PURE__ */ jsx(Button, {
 								title: t("draft.addHint"),
 								disabled: !state || status.type === "publishing",
 								onClick: () => void onPublish(true),
 								children: t("draft.add")
 							}),
-							/* @__PURE__ */ jsx(Button, {
+							!readOnly && /* @__PURE__ */ jsx(Button, {
 								variant: "primary",
 								disabled: !state || status.type === "publishing",
 								onClick: () => void onPublish(),
@@ -5013,7 +5071,7 @@ async function answers(address) {
 /** Connects a custom domain to a site published with its git host's own Pages, and follows it until it works. */
 function DomainScreen() {
 	const t = useStrings();
-	const { pages, account, demo, publish } = useAdmin();
+	const { pages, account, demo, publish, site: about } = useAdmin();
 	const { content } = useSiteContent();
 	const host = account?.hostName ?? "";
 	const outside = useOutsideHost();
@@ -5075,6 +5133,10 @@ function DomainScreen() {
 			className: "gfa-form",
 			children: [
 				/* @__PURE__ */ jsx("p", { children: t("domain.intro") }),
+				about.copy?.url && /* @__PURE__ */ jsx("p", {
+					className: "gfa-hint",
+					children: t("domain.copy", { address: about.copy.url })
+				}),
 				/* @__PURE__ */ jsx(OwnerTokenActive, { onForget: loadSite }),
 				body,
 				!demo && (pages || outside) && /* @__PURE__ */ jsx(AdminAddressSection, { outside })
@@ -5493,6 +5555,301 @@ function LayoutEditorScreen({ part, language }) {
 	});
 }
 //#endregion
+//#region src/permissions-section.tsx
+/** Limits a new person starts with: nothing, until the owner ticks what they may change. */
+const NO_LIMITS = {
+	pages: [],
+	collections: []
+};
+/** The page sections an owner can choose from: every page, then each page at the top of the main language's addresses. */
+function pageSections(content) {
+	const main = mainLanguage(content.settings);
+	const sections = /* @__PURE__ */ new Set();
+	for (const page of content.pages) {
+		if (pathLanguage(content.settings, page.path) !== main) continue;
+		const first = page.path.split("/")[1];
+		if (first) sections.add(`/${first}`);
+	}
+	return ["/", ...[...sections].sort()];
+}
+function toggled(list, value, on) {
+	const without = (list ?? []).filter((item) => item !== value);
+	return on ? [...without, value] : without;
+}
+/**
+* What each limited person may change, and who reviews the rest, written to
+* `content/permissions.json`. Anyone it doesn't list may change everything.
+*/
+function PermissionsSection() {
+	const t = useStrings();
+	const { publish, account } = useAdmin();
+	const { content } = useSiteContent();
+	const permissions = content.permissions ?? { people: {} };
+	const [editing, setEditing] = useState();
+	const [login, setLogin] = useState("");
+	const [busy, setBusy] = useState(false);
+	const [reviewers, setReviewers] = useState((permissions.reviewers ?? []).join(", "));
+	const people = Object.entries(permissions.people).sort(([a], [b]) => a.localeCompare(b));
+	const save = async (next, message) => {
+		setBusy(true);
+		const result = await publish([permissionsFileChange(next)], message, { checks: false });
+		setBusy(false);
+		return result.ok;
+	};
+	const remove = (person) => {
+		const { [person]: _, ...rest } = permissions.people;
+		save({
+			...permissions,
+			people: rest
+		}, t("permissions.removeMessage", { name: person }));
+	};
+	const named = reviewers.split(/[\s,]+/).map((name) => name.trim()).filter(Boolean);
+	return /* @__PURE__ */ jsxs("section", {
+		className: "gfa-form",
+		"aria-labelledby": "gfa-permissions-title",
+		children: [
+			/* @__PURE__ */ jsx("h2", {
+				id: "gfa-permissions-title",
+				className: "gfa-section-title",
+				children: t("permissions.title")
+			}),
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-hint",
+				children: t("permissions.intro")
+			}),
+			/* @__PURE__ */ jsx("p", {
+				className: "gfa-hint",
+				children: account?.role ? t("permissions.whereServer") : t("permissions.where", { host: account?.hostName || t("permissions.host") })
+			}),
+			people.length > 0 && /* @__PURE__ */ jsx("ul", {
+				className: "gfa-check-list",
+				children: people.map(([person, limits]) => /* @__PURE__ */ jsxs("li", { children: [
+					/* @__PURE__ */ jsx("strong", { children: person }),
+					" ",
+					/* @__PURE__ */ jsx("span", {
+						className: "gfa-hint",
+						children: describeLimits(t, limits)
+					}),
+					" ",
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						disabled: busy,
+						onClick: () => setEditing({
+							login: person,
+							limits
+						}),
+						children: t("permissions.change")
+					}),
+					/* @__PURE__ */ jsx(Button, {
+						variant: "ghost",
+						disabled: busy,
+						onClick: () => remove(person),
+						children: t("permissions.remove")
+					})
+				] }, person))
+			}),
+			/* @__PURE__ */ jsxs("form", {
+				className: "gfa-form",
+				onSubmit: (event) => {
+					event.preventDefault();
+					const name = login.trim();
+					if (!name) return;
+					setEditing({
+						login: name,
+						limits: permissions.people[name] ?? NO_LIMITS
+					});
+				},
+				children: [/* @__PURE__ */ jsx(TextField, {
+					label: t("permissions.person"),
+					hint: t("permissions.personHint"),
+					value: login,
+					autoComplete: "off",
+					onChange: setLogin
+				}), /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
+					type: "submit",
+					disabled: busy || !login.trim(),
+					children: t("permissions.add")
+				}) })]
+			}),
+			/* @__PURE__ */ jsxs("form", {
+				className: "gfa-form",
+				onSubmit: (event) => {
+					event.preventDefault();
+					const { reviewers: _, ...rest } = permissions;
+					save(named.length > 0 ? {
+						...rest,
+						reviewers: named
+					} : rest, t("permissions.reviewersMessage"));
+				},
+				children: [/* @__PURE__ */ jsx(TextField, {
+					label: t("permissions.reviewers"),
+					hint: t("permissions.reviewersHint"),
+					value: reviewers,
+					autoComplete: "off",
+					onChange: setReviewers
+				}), /* @__PURE__ */ jsx("div", { children: /* @__PURE__ */ jsx(Button, {
+					type: "submit",
+					disabled: busy || named.join(",") === (permissions.reviewers ?? []).join(","),
+					children: t("permissions.saveReviewers")
+				}) })]
+			}),
+			editing && /* @__PURE__ */ jsx(LimitsEditor, {
+				login: editing.login,
+				limits: editing.limits,
+				busy,
+				onClose: () => setEditing(void 0),
+				onSave: async (limits) => {
+					if (await save({
+						...permissions,
+						people: {
+							...permissions.people,
+							[editing.login]: limits
+						}
+					}, t("permissions.message", { name: editing.login }))) {
+						setEditing(void 0);
+						setLogin("");
+					}
+				}
+			})
+		]
+	});
+}
+/** Someone's limits in a few words, for the list. */
+function describeLimits(t, limits) {
+	const parts = [
+		...(limits.pages ?? []).map((section) => section === "/" ? t("permissions.allPages") : section),
+		...limits.collections ?? [],
+		...limits.media ? [t("limits.media")] : [],
+		...limits.layout ? [t("limits.layout")] : [],
+		...limits.menus ? [t("limits.menus")] : []
+	];
+	const text = parts.length > 0 ? parts.join(", ") : t("permissions.nothing");
+	return limits.languages ? `${text} (${limits.languages.join(", ")})` : text;
+}
+function Check({ label, checked, onChange }) {
+	return /* @__PURE__ */ jsxs("label", {
+		className: "gfa-checkbox",
+		children: [/* @__PURE__ */ jsx("input", {
+			type: "checkbox",
+			checked,
+			onChange: (event) => onChange(event.target.checked)
+		}), label]
+	});
+}
+function LimitsEditor({ login, limits: initial, busy, onClose, onSave }) {
+	const t = useStrings();
+	const { content } = useSiteContent();
+	const [limits, setLimits] = useState(initial);
+	const id = useId();
+	const sections = useMemo(() => {
+		const found = pageSections(content);
+		return [...found, ...(initial.pages ?? []).filter((section) => !found.includes(section))];
+	}, [content, initial.pages]);
+	const languages = [{
+		code: mainLanguage(content.settings),
+		name: void 0
+	}, ...content.settings.languages ?? []];
+	const set = (change) => setLimits((current) => ({
+		...current,
+		...change
+	}));
+	return /* @__PURE__ */ jsxs(Dialog, {
+		title: t("permissions.editTitle", { name: login }),
+		onClose,
+		children: [
+			/* @__PURE__ */ jsx("p", { children: t("permissions.editIntro") }),
+			/* @__PURE__ */ jsxs("fieldset", {
+				className: "gfa-fieldset",
+				"aria-describedby": `${id}-pages`,
+				children: [
+					/* @__PURE__ */ jsx("legend", { children: t("permissions.pages") }),
+					/* @__PURE__ */ jsx("p", {
+						id: `${id}-pages`,
+						className: "gfa-hint",
+						children: t("permissions.pagesHint")
+					}),
+					sections.map((section) => /* @__PURE__ */ jsx(Check, {
+						label: section === "/" ? t("permissions.allPages") : section,
+						checked: (limits.pages ?? []).includes(section),
+						onChange: (on) => set({ pages: toggled(limits.pages, section, on) })
+					}, section))
+				]
+			}),
+			content.collections.length > 0 && /* @__PURE__ */ jsxs("fieldset", {
+				className: "gfa-fieldset",
+				children: [/* @__PURE__ */ jsx("legend", { children: t("permissions.collections") }), content.collections.map((collection) => /* @__PURE__ */ jsx(Check, {
+					label: collection.settings.name,
+					checked: (limits.collections ?? []).includes(collection.id),
+					onChange: (on) => set({ collections: toggled(limits.collections, collection.id, on) })
+				}, collection.id))]
+			}),
+			/* @__PURE__ */ jsxs("fieldset", {
+				className: "gfa-fieldset",
+				children: [
+					/* @__PURE__ */ jsx("legend", { children: t("permissions.more") }),
+					/* @__PURE__ */ jsx(Check, {
+						label: t("limits.media"),
+						checked: limits.media === true,
+						onChange: (on) => set({ media: on })
+					}),
+					/* @__PURE__ */ jsx(Check, {
+						label: t("limits.layout"),
+						checked: limits.layout === true,
+						onChange: (on) => set({ layout: on })
+					}),
+					/* @__PURE__ */ jsx(Check, {
+						label: t("limits.menus"),
+						checked: limits.menus === true,
+						onChange: (on) => set({ menus: on })
+					})
+				]
+			}),
+			languages.length > 1 && /* @__PURE__ */ jsxs("fieldset", {
+				className: "gfa-fieldset",
+				children: [
+					/* @__PURE__ */ jsx("legend", { children: t("permissions.languages") }),
+					/* @__PURE__ */ jsx(Check, {
+						label: t("permissions.everyLanguage"),
+						checked: !limits.languages,
+						onChange: (on) => setLimits(({ languages: _, ...rest }) => on ? rest : {
+							...rest,
+							languages: []
+						})
+					}),
+					limits.languages !== void 0 && languages.map(({ code, name }) => /* @__PURE__ */ jsx(Check, {
+						label: name ? `${name} (${code})` : code,
+						checked: limits.languages?.includes(code) === true,
+						onChange: (on) => set({ languages: toggled(limits.languages, code, on) })
+					}, code))
+				]
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-dialog-actions",
+				children: [/* @__PURE__ */ jsx(Button, {
+					onClick: onClose,
+					children: t("action.cancel")
+				}), /* @__PURE__ */ jsx(Button, {
+					variant: "primary",
+					disabled: busy,
+					onClick: () => void onSave(cleaned(limits)),
+					children: t(busy ? "publish.publishing" : "permissions.save")
+				})]
+			})
+		]
+	});
+}
+/** Limits as the file keeps them: no `false`, and no empty lists but pages and collections. */
+function cleaned(limits) {
+	return {
+		pages: limits.pages ?? [],
+		collections: limits.collections ?? [],
+		...limits.media && { media: true },
+		...limits.layout && { layout: true },
+		...limits.menus && { menus: true },
+		...limits.languages && { languages: limits.languages }
+	};
+}
+//#endregion
 //#region src/editors-screen.tsx
 const ROLE_LABELS = {
 	owner: "editors.role.owner",
@@ -5506,16 +5863,21 @@ function problemText(error) {
 /** Who edits the site: inviting people, changing what they can do, and removing them. */
 function EditorsScreen() {
 	const t = useStrings();
-	const { editors, demo } = useAdmin();
+	const { editors, demo, limits } = useAdmin();
+	const owner = useCanChangeSettings() && !limits;
 	return /* @__PURE__ */ jsxs("div", {
 		className: "gfa-screen",
-		children: [/* @__PURE__ */ jsx("div", {
-			className: "gfa-screen-header",
-			children: /* @__PURE__ */ jsx("h1", { children: t("settings.tab.editors") })
-		}), /* @__PURE__ */ jsxs("div", {
-			className: "gfa-form",
-			children: [/* @__PURE__ */ jsx("p", { children: t("editors.intro") }), demo ? /* @__PURE__ */ jsx("p", { children: t("editors.demo") }) : editors ? /* @__PURE__ */ jsx(EditorsPanel, {}) : /* @__PURE__ */ jsx("p", { children: t("editors.local") })]
-		})]
+		children: [
+			/* @__PURE__ */ jsx("div", {
+				className: "gfa-screen-header",
+				children: /* @__PURE__ */ jsx("h1", { children: t("settings.tab.editors") })
+			}),
+			/* @__PURE__ */ jsxs("div", {
+				className: "gfa-form",
+				children: [/* @__PURE__ */ jsx("p", { children: t("editors.intro") }), demo ? /* @__PURE__ */ jsx("p", { children: t("editors.demo") }) : editors ? /* @__PURE__ */ jsx(EditorsPanel, {}) : /* @__PURE__ */ jsx("p", { children: t("editors.local") })]
+			}),
+			owner && /* @__PURE__ */ jsx(PermissionsSection, {})
+		]
 	});
 }
 function EditorsPanel() {
@@ -6482,7 +6844,7 @@ function DeletePageDialog({ page, onClose }) {
 }
 function PagesScreen() {
 	const t = useStrings();
-	const { siteUrl } = useAdmin();
+	const { siteUrl, limits } = useAdmin();
 	const { content } = useSiteContent();
 	const [dialog, setDialog] = useState(null);
 	const close = () => setDialog(null);
@@ -6507,74 +6869,79 @@ function PagesScreen() {
 						className: "gfa-visually-hidden",
 						children: t("pages.edit")
 					}) })
-				] }) }), /* @__PURE__ */ jsx("tbody", { children: content.pages.map((page) => /* @__PURE__ */ jsxs("tr", { children: [
-					/* @__PURE__ */ jsxs("td", { children: [
-						/* @__PURE__ */ jsx("a", {
-							href: pageEditorHref(page.path),
-							className: "gfa-link-strong",
-							children: pageTitle$1(page)
-						}),
-						/* @__PURE__ */ jsx(ScheduleStatus, {
-							schedule: page.content,
-							content
-						}),
-						/* @__PURE__ */ jsx(PageTranslations, { page })
-					] }),
-					/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx("code", { children: page.path }) }),
-					/* @__PURE__ */ jsxs("td", {
-						className: "gfa-row-actions",
-						children: [
+				] }) }), /* @__PURE__ */ jsx("tbody", { children: content.pages.map((page) => {
+					const changeable = mayChange(content, limits, {
+						kind: "page",
+						path: page.path
+					});
+					return /* @__PURE__ */ jsxs("tr", { children: [
+						/* @__PURE__ */ jsxs("td", { children: [
 							/* @__PURE__ */ jsx("a", {
-								className: "gfa-button gfa-button-secondary",
 								href: pageEditorHref(page.path),
-								children: t("pages.edit")
+								className: "gfa-link-strong",
+								children: pageTitle$1(page)
 							}),
-							/* @__PURE__ */ jsx("a", {
-								className: "gfa-button gfa-button-ghost",
-								href: `${siteUrl.replace(/\/$/, "")}${page.path}`,
-								target: "_blank",
-								rel: "noreferrer",
-								children: t("pages.view")
+							/* @__PURE__ */ jsx(ScheduleStatus, {
+								schedule: page.content,
+								content
 							}),
-							/* @__PURE__ */ jsx(Button, {
-								variant: "ghost",
-								onClick: () => setDialog({
-									type: "move",
-									page
+							/* @__PURE__ */ jsx(PageTranslations, { page })
+						] }),
+						/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx("code", { children: page.path }) }),
+						/* @__PURE__ */ jsxs("td", {
+							className: "gfa-row-actions",
+							children: [
+								/* @__PURE__ */ jsx("a", {
+									className: "gfa-button gfa-button-secondary",
+									href: pageEditorHref(page.path),
+									children: t(changeable ? "pages.edit" : "pages.look")
 								}),
-								disabled: page.path === "/",
-								children: t("pages.move")
-							}),
-							/* @__PURE__ */ jsx(Button, {
-								variant: "ghost",
-								onClick: () => setDialog({
-									type: "duplicate",
-									page
+								/* @__PURE__ */ jsx("a", {
+									className: "gfa-button gfa-button-ghost",
+									href: `${siteUrl.replace(/\/$/, "")}${page.path}`,
+									target: "_blank",
+									rel: "noreferrer",
+									children: t("pages.view")
 								}),
-								children: t("pages.duplicate")
-							}),
-							/* @__PURE__ */ jsx(Button, {
-								variant: "ghost",
-								onClick: () => setDialog({
-									type: "schedule",
-									page
+								changeable && /* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDialog({
+										type: "move",
+										page
+									}),
+									disabled: page.path === "/",
+									children: t("pages.move")
 								}),
-								disabled: page.path === "/",
-								children: t("pages.schedule")
-							}),
-							/* @__PURE__ */ jsx(Button, {
-								variant: "ghost",
-								onClick: () => setDialog({
-									type: "delete",
-									page
+								/* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDialog({
+										type: "duplicate",
+										page
+									}),
+									children: t("pages.duplicate")
 								}),
-								disabled: page.path === "/",
-								title: page.path === "/" ? t("pages.homeCantDelete") : void 0,
-								children: t("pages.delete")
-							})
-						]
-					})
-				] }, page.path)) })]
+								changeable && /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDialog({
+										type: "schedule",
+										page
+									}),
+									disabled: page.path === "/",
+									children: t("pages.schedule")
+								}), /* @__PURE__ */ jsx(Button, {
+									variant: "ghost",
+									onClick: () => setDialog({
+										type: "delete",
+										page
+									}),
+									disabled: page.path === "/",
+									title: page.path === "/" ? t("pages.homeCantDelete") : void 0,
+									children: t("pages.delete")
+								})] })
+							]
+						})
+					] }, page.path);
+				}) })]
 			}),
 			dialog?.type === "new" && /* @__PURE__ */ jsx(NewPageDialog, { onClose: close }),
 			dialog?.type === "duplicate" && /* @__PURE__ */ jsx(NewPageDialog, {
@@ -9151,6 +9518,16 @@ function validate(draft) {
 	};
 	return { errors: Object.fromEntries(result.error.issues.map((issue) => [issue.path.join("."), issue.message])) };
 }
+/**
+* The loaded settings and redirects as the form would save them, serialized
+* to compare with. Settings the form can't save as they are stay as loaded.
+*/
+function loadedForm(content) {
+	return {
+		settings: serializeContent(validate(content.settings).settings ?? content.settings),
+		redirects: serializeContent(storedRedirects(filledRedirects(content.redirects ?? [])))
+	};
+}
 /** The time zones this browser knows, such as `America/New_York`. */
 function timeZones(current) {
 	const known = typeof Intl.supportedValuesOf === "function" ? Intl.supportedValuesOf("timeZone") : [];
@@ -9752,17 +10129,18 @@ function SettingsScreen({ tab, section }) {
 	const headError = useMemo(() => headCodeProblem(t, code.head), [t, code.head]);
 	const formsError = useMemo(() => formsProblem(t, settings.forms), [t, settings.forms]);
 	const savedRedirects = useMemo(() => storedRedirects(filledRedirects(redirects)), [redirects]);
+	const loaded = useMemo(() => loadedForm(content), [content]);
 	const redirectsInvalid = useMemo(() => redirectProblems(savedRedirects).some(Boolean), [savedRedirects]);
 	const pages = useSitePages(content);
 	const taken = useMemo(() => pages.map((page) => page.path), [pages]);
 	const changes = useMemo(() => {
 		const result = [];
-		if (validation.settings && serializeContent(validation.settings) !== serializeContent(content.settings)) result.push(siteSettingsFileChange(validation.settings));
+		if (validation.settings && serializeContent(validation.settings) !== loaded.settings) result.push(siteSettingsFileChange(validation.settings));
 		if (serializeContent(menus) !== serializeContent(content.menus) || serializeContent(languageMenus) !== serializeContent(content.languageMenus ?? {})) result.push(menusFileChange({
 			menus,
 			languageMenus
 		}));
-		if (serializeContent(savedRedirects) !== serializeContent(content.redirects ?? []) || redirectMessage.trim() !== (content.redirectMessage ?? "").trim()) result.push(redirectsFileChange({
+		if (serializeContent(savedRedirects) !== loaded.redirects || redirectMessage.trim() !== (content.redirectMessage ?? "").trim()) result.push(redirectsFileChange({
 			redirects: savedRedirects,
 			message: redirectMessage
 		}));
@@ -9771,6 +10149,7 @@ function SettingsScreen({ tab, section }) {
 		return result;
 	}, [
 		validation,
+		loaded,
 		menus,
 		languageMenus,
 		savedRedirects,
@@ -11792,7 +12171,7 @@ function DemoBanner() {
 */
 function DraftBanner() {
 	const t = useStrings();
-	const { drafts, state } = useAdmin();
+	const { drafts, state, limits } = useAdmin();
 	const [busy, setBusy] = useState(false);
 	const [confirming, setConfirming] = useState(false);
 	const [chosen, setChosen] = useState();
@@ -11850,14 +12229,29 @@ function DraftBanner() {
 			error: result.error
 		});
 	});
-	const waiting = names.filter((name) => name !== current?.name);
+	const reviewed = new Map(drafts.reviews.map((review) => [review.name, review]));
+	const others = names.filter((name) => name !== current?.name);
+	const forReview = limits ? [] : others.filter((name) => reviewed.has(name));
+	const waiting = forReview.length > 0 ? forReview : others;
 	const selected = chosen && waiting.includes(chosen) ? chosen : waiting[0];
+	const currentReview = current ? reviewed.get(current.name) : void 0;
+	const selectedReview = selected ? reviewed.get(selected) : void 0;
 	return /* @__PURE__ */ jsxs("section", {
 		className: "gfa-draft-banner",
 		"aria-label": t("draft.label"),
 		children: [
 			current ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
 				/* @__PURE__ */ jsx("span", { children: t(kept ? "draft.bannerKept" : "draft.banner", { date: draftStarted(current.name) }) }),
+				currentReview && /* @__PURE__ */ jsxs("span", { children: [
+					t("draft.inReview"),
+					" ",
+					/* @__PURE__ */ jsx("a", {
+						href: currentReview.url,
+						target: "_blank",
+						rel: "noreferrer",
+						children: t("draft.seeReview")
+					})
+				] }),
 				current.paths.length > 0 && /* @__PURE__ */ jsx("span", {
 					className: "gfa-draft-count",
 					children: current.paths.length === 1 ? t("draft.oneChange") : t("draft.changes", { count: String(current.paths.length) })
@@ -11886,20 +12280,26 @@ function DraftBanner() {
 					children: t("draft.leave")
 				})
 			] }) : waiting.length > 0 && /* @__PURE__ */ jsxs(Fragment$1, { children: [
-				/* @__PURE__ */ jsx("span", { children: waiting.length === 1 ? t("draft.waiting", { date: draftStarted(waiting[0] ?? "") }) : t("draft.waitingMany", { count: String(waiting.length) }) }),
+				/* @__PURE__ */ jsx("span", { children: forReview.length > 0 ? waiting.length === 1 ? t("draft.reviewWaiting", { title: selectedReview?.title ?? "" }) : t("draft.reviewWaitingMany", { count: String(waiting.length) }) : waiting.length === 1 ? t("draft.waiting", { date: draftStarted(waiting[0] ?? "") }) : t("draft.waitingMany", { count: String(waiting.length) }) }),
 				waiting.length > 1 && /* @__PURE__ */ jsx("select", {
 					"aria-label": t("draft.choose"),
 					value: selected,
 					onChange: (event) => setChosen(event.target.value),
 					children: waiting.map((name) => /* @__PURE__ */ jsx("option", {
 						value: name,
-						children: t("draft.started", { date: draftStarted(name) })
+						children: reviewed.get(name)?.title ?? t("draft.started", { date: draftStarted(name) })
 					}, name))
 				}),
 				/* @__PURE__ */ jsx(Button, {
 					disabled: busy,
 					onClick: () => void switchTo(selected),
 					children: t("draft.open")
+				}),
+				forReview.length > 0 && selectedReview && /* @__PURE__ */ jsx("a", {
+					href: selectedReview.url,
+					target: "_blank",
+					rel: "noreferrer",
+					children: t("draft.seeReview")
 				})
 			] }),
 			busy && notice === void 0 && current && /* @__PURE__ */ jsx("span", {