@growth-labs/cms 0.1.0

package/dist/ui/api/topics/[id].js

@@ -0,0 +1,15 @@
+// src/ui/api/topics/[id].ts
+// PATCH /admin/api/topics/:id — rename content_items.primary_topic values.
+import { createTopicRoutes } from '../../../routes/topics.js';
+import { buildSiteAuthz } from '../_authz.js';
+function toCtx(c) {
+    const env = c.locals.cmsEnv ?? {};
+    return {
+        request: c.request,
+        params: c.params,
+        db: env.SITE_DB,
+        env,
+    };
+}
+export const PATCH = (c) => createTopicRoutes({ authz: buildSiteAuthz(c) }).update(toCtx(c));
+//# sourceMappingURL=%5Bid%5D.js.map

package/dist/ui/api/topics/[id].js.map

@@ -0,0 +1 @@
+{"version":3,"file":"[id].js","sourceRoot":"","sources":["../../../../src/ui/api/topics/[id].ts"],"names":[],"mappings":"AAAA,4BAA4B;AAC5B,2EAA2E;AAI3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,SAAS,KAAK,CAAC,CAAa;IAC3B,MAAM,GAAG,GAAI,CAAC,CAAC,MAA+C,CAAC,MAAM,IAAI,EAAE,CAAA;IAC3E,OAAO;QACN,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAgC;QAC1C,EAAE,EAAE,GAAG,CAAC,OAA6B;QACrC,GAAG;KACH,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,EAAE,CACtC,iBAAiB,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA"}

package/dist/ui/api/topics/index.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from 'astro';
+export declare const GET: (c: APIContext) => Promise<Response>;
+export declare const POST: (c: APIContext) => Promise<Response>;
+//# sourceMappingURL=index.d.ts.map

package/dist/ui/api/topics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ui/api/topics/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAUvC,eAAO,MAAM,GAAG,GAAI,GAAG,UAAU,sBAAmE,CAAA;AACpG,eAAO,MAAM,IAAI,GAAI,GAAG,UAAU,sBAC+B,CAAA"}

package/dist/ui/api/topics/index.js

@@ -0,0 +1,12 @@
+// src/ui/api/topics/index.ts
+// GET /admin/api/topics — list primary_topic values.
+// POST /admin/api/topics — explicit 501 until standalone topics are schema-backed.
+import { createTopicRoutes } from '../../../routes/topics.js';
+import { buildSiteAuthz } from '../_authz.js';
+function toCtx(c) {
+    const env = c.locals.cmsEnv ?? {};
+    return { request: c.request, params: {}, db: env.SITE_DB, env };
+}
+export const GET = (c) => createTopicRoutes({ authz: buildSiteAuthz(c) }).list(toCtx(c));
+export const POST = (c) => createTopicRoutes({ authz: buildSiteAuthz(c) }).create(toCtx(c));
+//# sourceMappingURL=index.js.map

package/dist/ui/api/topics/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ui/api/topics/index.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,qDAAqD;AACrD,mFAAmF;AAInF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,SAAS,KAAK,CAAC,CAAa;IAC3B,MAAM,GAAG,GAAI,CAAC,CAAC,MAA+C,CAAC,MAAM,IAAI,EAAE,CAAA;IAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,OAA6B,EAAE,GAAG,EAAE,CAAA;AACtF,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AACpG,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAa,EAAE,EAAE,CACrC,iBAAiB,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA"}

package/dist/ui/api/workspace-settings.d.ts

@@ -0,0 +1,4 @@
+import type { APIContext } from 'astro';
+export declare const GET: (c: APIContext) => Promise<Response>;
+export declare const PATCH: (c: APIContext) => Promise<Response>;
+//# sourceMappingURL=workspace-settings.d.ts.map

package/dist/ui/api/workspace-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-settings.d.ts","sourceRoot":"","sources":["../../../src/ui/api/workspace-settings.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAA;AAoBvC,eAAO,MAAM,GAAG,MAFI,UAAU,sBAEJ,CAAA;AAC1B,eAAO,MAAM,KAAK,MAHE,UAAU,sBAGF,CAAA"}

package/dist/ui/api/workspace-settings.js

@@ -0,0 +1,20 @@
+// src/ui/api/workspace-settings.ts — Astro endpoint adapter for GET+PATCH /admin/api/workspace-settings.
+// Maps the APIContext onto a RouteContext and delegates to createShellRoutes().workspaceSettings.
+import { config } from 'virtual:growth-labs/cms/config';
+import { createShellRoutes } from '../../routes/shell.js';
+import { buildSiteAuthz } from './_authz.js';
+function toCtx(c) {
+    const env = c.locals.cmsEnv ?? {};
+    return { request: c.request, params: {}, db: env.SITE_DB, env };
+}
+function shellConfig(c) {
+    return {
+        authz: buildSiteAuthz(c),
+        workspaces: config.workspaces,
+        activeWorkspaceId: config.activeWorkspaceId,
+    };
+}
+const handler = (c) => createShellRoutes(shellConfig(c)).workspaceSettings(toCtx(c));
+export const GET = handler;
+export const PATCH = handler;
+//# sourceMappingURL=workspace-settings.js.map

package/dist/ui/api/workspace-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-settings.js","sourceRoot":"","sources":["../../../src/ui/api/workspace-settings.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,kGAAkG;AAElG,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AAGvD,OAAO,EAAE,iBAAiB,EAAyB,MAAM,uBAAuB,CAAA;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAE5C,SAAS,KAAK,CAAC,CAAa;IAC3B,MAAM,GAAG,GAAI,CAAC,CAAC,MAA+C,CAAC,MAAM,IAAI,EAAE,CAAA;IAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,OAA6B,EAAE,GAAG,EAAE,CAAA;AACtF,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IACjC,OAAO;QACN,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC3C,CAAA;AACF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAEhG,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAA;AAC1B,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAA"}

package/dist/ui/client/boot-state.d.ts

@@ -0,0 +1,15 @@
+export type BootState = 'app' | 'no-access';
+/** The normalized outcome of `GET <base>/api/me` that the decision needs. */
+export interface MeResponseSummary {
+    ok: boolean;
+    status: number;
+    body: unknown;
+}
+/**
+ * Decide what the SPA should render from the `/api/me` outcome.
+ *
+ * `null` means the fetch itself threw (offline / network) — treated as transient,
+ * so we fall through to the app rather than misreport "no access".
+ */
+export declare function resolveBootState(me: MeResponseSummary | null): BootState;
+//# sourceMappingURL=boot-state.d.ts.map

package/dist/ui/client/boot-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-state.d.ts","sourceRoot":"","sources":["../../../src/ui/client/boot-state.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,WAAW,CAAA;AAE3C,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,OAAO,CAAA;CACb;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,CAUxE"}

package/dist/ui/client/boot-state.js

@@ -0,0 +1,36 @@
+// src/ui/client/boot-state.ts — pure SPA bootstrap decision (deep-review blocker C).
+//
+// The page-level gate (admin.astro) already redirects an UNAUTHENTICATED host
+// user to /login/ before the SPA ever mounts. So by the time the client runs,
+// the host user is logged in. The only access question left for the SPA is:
+// does this logged-in user have a Masthead workspace_membership, or not?
+//
+//   GET <base>/api/me → 200            → 'app'        (mount the full shell)
+//   GET <base>/api/me → 401/403        → 'no-access'  (honest "no access yet" screen)
+//   GET <base>/api/me → other failure  → 'app'        (transient — let screens
+//                                                       show their own errors; do
+//                                                       NOT lock the user out)
+//
+// Pure: no DOM, no fetch — unit-tested directly. mount.tsx does the fetch and
+// hands the normalized result here.
+/**
+ * Decide what the SPA should render from the `/api/me` outcome.
+ *
+ * `null` means the fetch itself threw (offline / network) — treated as transient,
+ * so we fall through to the app rather than misreport "no access".
+ */
+export function resolveBootState(me) {
+    if (me === null)
+        return 'app';
+    if (me.ok)
+        return 'app';
+    // Authenticated (page gate passed) but the membership/role check denied →
+    // logged in without Masthead access. 403 is the role-matrix denial, 401 the
+    // "no resolvable member" denial; both mean "no access yet".
+    if (me.status === 401 || me.status === 403)
+        return 'no-access';
+    // Any other status (e.g. 500) is a transient server error, not an access
+    // decision — don't lock the user out of the shell over it.
+    return 'app';
+}
+//# sourceMappingURL=boot-state.js.map

package/dist/ui/client/boot-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot-state.js","sourceRoot":"","sources":["../../../src/ui/client/boot-state.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,yEAAyE;AACzE,EAAE;AACF,6EAA6E;AAC7E,sFAAsF;AACtF,+EAA+E;AAC/E,kFAAkF;AAClF,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,oCAAoC;AAWpC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAA4B;IAC5D,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7B,IAAI,EAAE,CAAC,EAAE;QAAE,OAAO,KAAK,CAAA;IACvB,0EAA0E;IAC1E,4EAA4E;IAC5E,4DAA4D;IAC5D,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAA;IAC9D,yEAAyE;IACzE,2DAA2D;IAC3D,OAAO,KAAK,CAAA;AACb,CAAC"}

package/dist/ui/client/mount.d.ts

@@ -0,0 +1,3 @@
+import '../styles/broadsheet.css';
+export declare function mount(elementId?: string): Promise<void>;
+//# sourceMappingURL=mount.d.ts.map

package/dist/ui/client/mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/ui/client/mount.tsx"],"names":[],"mappings":"AAOA,OAAO,0BAA0B,CAAA;AAajC,wBAAsB,KAAK,CAAC,SAAS,SAAkB,iBAkBtD"}

package/dist/ui/client/mount.js

@@ -0,0 +1,37 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { config } from 'virtual:growth-labs/cms/config';
+import { createRoot } from 'react-dom/client';
+import { CmsApp } from '../components/CmsApp.js';
+import { cmsScreens } from '../screens/registry.js';
+import { initialWorkspaceState } from '../workspace-context.js';
+import { resolveBootState } from './boot-state.js';
+import '../styles/broadsheet.css';
+async function fetchMe(base) {
+    try {
+        const r = await fetch(`${base}/api/me`);
+        const body = r.ok ? await r.json().catch(() => null) : null;
+        return { ok: r.ok, status: r.status, body };
+    }
+    catch {
+        // Network/offline — transient, not an access decision.
+        return null;
+    }
+}
+export async function mount(elementId = 'masthead-root') {
+    const el = document.getElementById(elementId);
+    if (!el)
+        return;
+    // admin.astro already redirected unauthenticated users to login, so reaching
+    // here means the host user is signed in. Resolve whether they're a provisioned
+    // Masthead member before deciding what to render (deep-review blocker C).
+    const base = config.adminBasePath;
+    const me = await fetchMe(base);
+    const boot = resolveBootState(me);
+    const user = me?.ok && me.body && typeof me.body === 'object' && 'user' in me.body
+        ? (me.body.user ?? null)
+        : null;
+    const initial = initialWorkspaceState(config.workspaces, config.activeWorkspaceId, user);
+    createRoot(el).render(_jsx(CmsApp, { initial: initial, screens: cmsScreens, boot: boot }));
+}
+void mount();
+//# sourceMappingURL=mount.js.map

package/dist/ui/client/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../../src/ui/client/mount.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAE7C,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAA0B,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAC1E,OAAO,0BAA0B,CAAA;AAEjC,KAAK,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC;QACJ,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,CAAC,CAAA;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC3D,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,uDAAuD;QACvD,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,SAAS,GAAG,eAAe;IACtD,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;IAC7C,IAAI,CAAC,EAAE;QAAE,OAAM;IAEf,6EAA6E;IAC7E,+EAA+E;IAC/E,0EAA0E;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAA;IACjC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAEjC,MAAM,IAAI,GACT,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI;QACpE,CAAC,CAAC,CAAE,EAAE,CAAC,IAAiC,CAAC,IAAI,IAAI,IAAI,CAAC;QACtD,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IACxF,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAC,MAAM,IAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAI,CAAC,CAAA;AACrF,CAAC;AAED,KAAK,KAAK,EAAE,CAAA"}

package/dist/ui/commands.d.ts

@@ -0,0 +1,23 @@
+import { type Route } from './hash-router.js';
+export type Command = {
+    kind: 'create';
+    label: string;
+    icon: string;
+    hint: string;
+    contentType: 'article' | 'video' | 'podcast';
+} | {
+    kind: 'jump';
+    label: string;
+    icon: string;
+    hint: string;
+    route: Route;
+} | {
+    kind: 'doc';
+    label: string;
+    icon: string;
+    hint: string;
+    id: string;
+};
+export declare const baseCommands: Command[];
+export declare function filterCommands(query: string, all: Command[]): Command[];
+//# sourceMappingURL=commands.d.ts.map

package/dist/ui/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/ui/commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAU,KAAK,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAErD,MAAM,MAAM,OAAO,GAChB;IACA,IAAI,EAAE,QAAQ,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;CAC3C,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AA6BzE,eAAO,MAAM,YAAY,EAAE,OAAO,EAajC,CAAA;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAIvE"}

package/dist/ui/commands.js

@@ -0,0 +1,48 @@
+// src/ui/commands.ts — the ⌘K command set + the pure filter. "create"/"jump"
+// are static; "doc" entries are fed in from the /admin/api/search results.
+import { ROUTES } from './hash-router.js';
+const JUMP_LABELS = {
+    dashboard: 'Dashboard',
+    content: 'Content',
+    calendar: 'Calendar',
+    media: 'Media',
+    analytics: 'Analytics',
+    authors: 'Authors & bylines',
+    topics: 'Topics & tags',
+    'content-insights': 'Content Insights',
+    subscriptions: 'Subscriptions',
+    'social-share': 'Social Share',
+    settings: 'Settings',
+};
+const JUMP_ICONS = {
+    dashboard: 'dashboard',
+    content: 'library',
+    calendar: 'calendar',
+    media: 'media',
+    analytics: 'chart',
+    authors: 'users',
+    topics: 'tag',
+    'content-insights': 'sparkle',
+    subscriptions: 'inbox',
+    'social-share': 'share',
+    settings: 'settings',
+};
+export const baseCommands = [
+    { kind: 'create', label: 'New article', icon: 'doc', hint: 'Create', contentType: 'article' },
+    { kind: 'create', label: 'New video', icon: 'video', hint: 'Create', contentType: 'video' },
+    { kind: 'create', label: 'New podcast', icon: 'mic', hint: 'Create', contentType: 'podcast' },
+    ...ROUTES.map((r) => ({
+        kind: 'jump',
+        label: `Go to ${JUMP_LABELS[r]}`,
+        icon: JUMP_ICONS[r],
+        hint: 'Jump',
+        route: r,
+    })),
+];
+export function filterCommands(query, all) {
+    const q = query.trim().toLowerCase();
+    if (!q)
+        return all.slice(0, 9);
+    return all.filter((c) => c.label.toLowerCase().includes(q));
+}
+//# sourceMappingURL=commands.js.map

package/dist/ui/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/ui/commands.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,OAAO,EAAE,MAAM,EAAc,MAAM,kBAAkB,CAAA;AAarD,MAAM,WAAW,GAA0B;IAC1C,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,eAAe;IACvB,kBAAkB,EAAE,kBAAkB;IACtC,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,cAAc;IAC9B,QAAQ,EAAE,UAAU;CACpB,CAAA;AACD,MAAM,UAAU,GAA0B;IACzC,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,KAAK;IACb,kBAAkB,EAAE,SAAS;IAC7B,aAAa,EAAE,OAAO;IACtB,cAAc,EAAE,OAAO;IACvB,QAAQ,EAAE,UAAU;CACpB,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAc;IACtC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;IAC7F,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;IAC3F,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE;IAC7F,GAAG,MAAM,CAAC,GAAG,CACZ,CAAC,CAAC,EAAW,EAAE,CAAC,CAAC;QAChB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE;QAChC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,CAAC;KACR,CAAC,CACF;CACD,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,GAAc;IAC3D,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;AAC5D,CAAC"}

package/dist/ui/components/CmsApp.d.ts

@@ -0,0 +1,16 @@
+import { type ReactNode } from 'react';
+import type { BootState } from '../client/boot-state.js';
+import type { Route } from '../hash-router.js';
+import { type WorkspaceState } from '../workspace-context.js';
+export type ScreenRegistry = Partial<Record<Route, () => ReactNode>>;
+export declare function CmsApp(props: {
+    initial: WorkspaceState;
+    screens?: ScreenRegistry;
+    /**
+     * Bootstrap access decision from GET <base>/api/me (deep-review blocker C).
+     * 'no-access' → render the honest no-access screen instead of the empty shell.
+     * Defaults to 'app' so existing callers/tests are unaffected.
+     */
+    boot?: BootState;
+}): import("react").JSX.Element;
+//# sourceMappingURL=CmsApp.d.ts.map

package/dist/ui/components/CmsApp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CmsApp.d.ts","sourceRoot":"","sources":["../../../src/ui/components/CmsApp.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAa,KAAK,SAAS,EAAuB,MAAM,OAAO,CAAA;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAG9C,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAMhF,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC,CAAA;AAEpE,wBAAgB,MAAM,CAAC,KAAK,EAAE;IAC7B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB;;;;OAIG;IACH,IAAI,CAAC,EAAE,SAAS,CAAA;CAChB,+BASA"}

package/dist/ui/components/CmsApp.js

@@ -0,0 +1,74 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { Component, useEffect, useState } from 'react';
+import { useHashRouter } from '../use-hash-router.js';
+import { useTweaks } from '../use-tweaks.js';
+import { WorkspaceProvider } from '../workspace-context.js';
+import { CommandPalette } from './CommandPalette.js';
+import { NoAccessScreen } from './NoAccessScreen.js';
+import { Sidebar } from './Sidebar.js';
+import { Topbar } from './Topbar.js';
+export function CmsApp(props) {
+    if (props.boot === 'no-access') {
+        return _jsx(NoAccessScreen, {});
+    }
+    return (_jsx(WorkspaceProvider, { initial: props.initial, children: _jsx(Shell, { screens: props.screens ?? {} }) }));
+}
+function Shell({ screens }) {
+    const { route, navigate } = useHashRouter();
+    const { t, setTweak } = useTweaks();
+    const [cmd, setCmd] = useState(false);
+    const [collapsed, setCollapsed] = useState(false);
+    useEffect(() => {
+        const h = (e) => {
+            if ((e.metaKey || e.ctrlKey) && e.key.toLowerCase() === 'k') {
+                e.preventDefault();
+                setCmd((c) => !c);
+            }
+            if (e.key === 'Escape')
+                setCmd(false);
+        };
+        window.addEventListener('keydown', h);
+        return () => window.removeEventListener('keydown', h);
+    }, []);
+    const screen = screens[route];
+    return (_jsxs("div", { className: "app", "data-collapsed": collapsed, children: [_jsx(Sidebar, { route: route, navigate: navigate, collapsed: collapsed }), _jsxs("div", { className: "main", children: [_jsx(Topbar, { collapsed: collapsed, setCollapsed: setCollapsed, onCommand: () => setCmd(true), theme: t.theme, setTheme: (v) => setTweak('theme', v) }), _jsx("div", { className: "scroll", children: _jsx(ScreenErrorBoundary, { route: route, children: _jsx(ScreenSlot, { render: screen, route: route }) }, route) })] }), cmd && (_jsx(CommandPalette, { onClose: () => setCmd(false), navigate: navigate, openDoc: () => setCmd(false) }))] }));
+}
+function EmptyRoute({ route }) {
+    return (_jsxs("div", { className: "page", style: { padding: 40, color: 'var(--ink-muted)' }, children: ["The \"", route, "\" screen mounts here."] }));
+}
+// Render the active screen as a real child of the error boundary. The registry
+// stores screens as `() => ReactNode`; calling that inline in Shell would run it
+// in Shell's render scope (outside any boundary), so a throw would blank the whole
+// app. Calling it inside ScreenSlot makes the screen a child the boundary can catch.
+function ScreenSlot({ render, route }) {
+    return _jsx(_Fragment, { children: render ? render() : _jsx(EmptyRoute, { route: route }) });
+}
+// Per-screen error boundary: a crash in one screen shows a readable message
+// instead of unmounting the entire CMS (sidebar/topbar included). Keyed by route
+// in Shell so navigating away clears a caught error.
+class ScreenErrorBoundary extends Component {
+    state = { error: null };
+    static getDerivedStateFromError(error) {
+        return { error };
+    }
+    componentDidCatch(error) {
+        // Surface to the console for triage; the platform tail consumer captures it.
+        console.error(`[masthead] screen "${this.props.route}" crashed:`, error);
+    }
+    render() {
+        if (this.state.error) {
+            return (_jsxs("div", { className: "page", style: { padding: 40 }, children: [_jsx("h1", { className: "page-title", children: "Something went wrong" }), _jsxs("div", { className: "page-sub", style: { marginTop: 8 }, children: ["The \u201C", this.props.route, "\u201D screen hit an error and couldn\u2019t render. The rest of the CMS is unaffected \u2014 use the sidebar to navigate elsewhere."] }), _jsx("pre", { style: {
+                            marginTop: 16,
+                            padding: 12,
+                            fontSize: 12,
+                            color: 'var(--red)',
+                            whiteSpace: 'pre-wrap',
+                            wordBreak: 'break-word',
+                            background: 'var(--surface-sunken, rgba(0,0,0,0.04))',
+                            borderRadius: 6,
+                        }, children: this.state.error.message }), _jsx("button", { type: "button", className: "btn sm", style: { marginTop: 12 }, onClick: () => this.setState({ error: null }), children: "Retry" })] }));
+        }
+        return this.props.children;
+    }
+}
+//# sourceMappingURL=CmsApp.js.map

package/dist/ui/components/CmsApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CmsApp.js","sourceRoot":"","sources":["../../../src/ui/components/CmsApp.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAkB,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAGtE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAuB,MAAM,yBAAyB,CAAA;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAIpC,MAAM,UAAU,MAAM,CAAC,KAStB;IACA,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,KAAC,cAAc,KAAG,CAAA;IAC1B,CAAC;IACD,OAAO,CACN,KAAC,iBAAiB,IAAC,OAAO,EAAE,KAAK,CAAC,OAAO,YACxC,KAAC,KAAK,IAAC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,GAAI,GACpB,CACpB,CAAA;AACF,CAAC;AAED,SAAS,KAAK,CAAC,EAAE,OAAO,EAA+B;IACtD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,aAAa,EAAE,CAAA;IAC3C,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,CAAA;IACnC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IACjD,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,CAAC,CAAgB,EAAE,EAAE;YAC9B,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBAC7D,CAAC,CAAC,cAAc,EAAE,CAAA;gBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;YAClB,CAAC;YACD,IAAI,CAAC,CAAC,GAAG,KAAK,QAAQ;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC,CAAA;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;QACrC,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACtD,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,CACN,eAAK,SAAS,EAAC,KAAK,oBAAiB,SAAS,aAC7C,KAAC,OAAO,IAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAI,EACnE,eAAK,SAAS,EAAC,MAAM,aACpB,KAAC,MAAM,IACN,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,EACd,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GACpC,EACF,cAAK,SAAS,EAAC,QAAQ,YACtB,KAAC,mBAAmB,IAAa,KAAK,EAAE,KAAK,YAC5C,KAAC,UAAU,IAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAI,IADnB,KAAK,CAET,GACjB,IACD,EACL,GAAG,IAAI,CACP,KAAC,cAAc,IACd,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAC5B,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAC3B,CACF,IACI,CACN,CAAA;AACF,CAAC;AAED,SAAS,UAAU,CAAC,EAAE,KAAK,EAAoB;IAC9C,OAAO,CACN,eAAK,SAAS,EAAC,MAAM,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,uBAC3D,KAAK,8BACX,CACN,CAAA;AACF,CAAC;AAED,+EAA+E;AAC/E,iFAAiF;AACjF,mFAAmF;AACnF,qFAAqF;AACrF,SAAS,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,EAA8C;IAChF,OAAO,4BAAG,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAC,UAAU,IAAC,KAAK,EAAE,KAAK,GAAI,GAAI,CAAA;AAC/D,CAAC;AAED,4EAA4E;AAC5E,iFAAiF;AACjF,qDAAqD;AACrD,MAAM,mBAAoB,SAAQ,SAGjC;IACA,KAAK,GAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IAEhD,MAAM,CAAC,wBAAwB,CAAC,KAAY;QAC3C,OAAO,EAAE,KAAK,EAAE,CAAA;IACjB,CAAC;IAED,iBAAiB,CAAC,KAAY;QAC7B,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,KAAK,CAAC,KAAK,YAAY,EAAE,KAAK,CAAC,CAAA;IACzE,CAAC;IAED,MAAM;QACL,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CACN,eAAK,SAAS,EAAC,MAAM,EAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,aAC3C,aAAI,SAAS,EAAC,YAAY,qCAA0B,EACpD,eAAK,SAAS,EAAC,UAAU,EAAC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,2BAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,4IAEjB,EACN,cACC,KAAK,EAAE;4BACN,SAAS,EAAE,EAAE;4BACb,OAAO,EAAE,EAAE;4BACX,QAAQ,EAAE,EAAE;4BACZ,KAAK,EAAE,YAAY;4BACnB,UAAU,EAAE,UAAU;4BACtB,SAAS,EAAE,YAAY;4BACvB,UAAU,EAAE,yCAAyC;4BACrD,YAAY,EAAE,CAAC;yBACf,YAEA,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GACpB,EACN,iBACC,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,QAAQ,EAClB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EACxB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,sBAGrC,IACJ,CACN,CAAA;QACF,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAA;IAC3B,CAAC;CACD"}

package/dist/ui/components/CommandPalette.d.ts

@@ -0,0 +1,7 @@
+import type { Route } from '../hash-router.js';
+export declare function CommandPalette(props: {
+    onClose: () => void;
+    navigate: (r: Route) => void;
+    openDoc: (id: string | null, type?: string) => void;
+}): import("react").JSX.Element;
+//# sourceMappingURL=CommandPalette.d.ts.map

package/dist/ui/components/CommandPalette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandPalette.d.ts","sourceRoot":"","sources":["../../../src/ui/components/CommandPalette.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AAQ9C,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,CAAA;IAC5B,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CACnD,+BAuGA"}

package/dist/ui/components/CommandPalette.js

@@ -0,0 +1,61 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useRef, useState } from 'react';
+import { baseCommands, filterCommands } from '../commands.js';
+function commandKey(c, i) {
+    if (c.kind === 'doc')
+        return `doc:${c.id}`;
+    if (c.kind === 'jump')
+        return `jump:${c.route}`;
+    return `create:${c.contentType}:${i}`;
+}
+export function CommandPalette(props) {
+    const [q, setQ] = useState('');
+    const [docs, setDocs] = useState([]);
+    const inputRef = useRef(null);
+    useEffect(() => {
+        inputRef.current?.focus();
+    }, []);
+    useEffect(() => {
+        if (!q.trim()) {
+            setDocs([]);
+            return;
+        }
+        const ctrl = new AbortController();
+        fetch(`/admin/api/search?q=${encodeURIComponent(q)}`, { signal: ctrl.signal })
+            .then((r) => r.json())
+            .then((b) => setDocs(b.data.map((d) => ({ kind: 'doc', id: d.id, label: d.title, icon: 'doc', hint: d.type }))))
+            .catch(() => { });
+        return () => ctrl.abort();
+    }, [q]);
+    const all = [...baseCommands, ...docs];
+    const filtered = filterCommands(q, all);
+    function run(c) {
+        if (c.kind === 'jump')
+            props.navigate(c.route);
+        else if (c.kind === 'create')
+            props.openDoc(null, c.contentType);
+        else
+            props.openDoc(c.id);
+        props.onClose();
+    }
+    return (_jsx("div", { className: "scrim", style: { paddingTop: '12vh' }, onMouseDown: props.onClose, role: "dialog", "aria-modal": "true", "aria-label": "Command palette", children: _jsxs("div", { className: "panel fade-in", style: {
+                width: 600,
+                maxWidth: '92vw',
+                boxShadow: 'var(--shadow-lg)',
+                overflow: 'hidden',
+            }, onMouseDown: (e) => e.stopPropagation(), children: [_jsxs("div", { style: {
+                        display: 'flex',
+                        alignItems: 'center',
+                        gap: 11,
+                        padding: '16px 18px',
+                        borderBottom: '1px solid var(--border)',
+                    }, children: [_jsx("input", { ref: inputRef, value: q, onChange: (e) => setQ(e.target.value), placeholder: "Search or run a command\u2026", "aria-label": "Search or run a command", style: {
+                                flex: 1,
+                                border: 0,
+                                outline: 0,
+                                background: 'transparent',
+                                color: 'var(--ink)',
+                                fontSize: 16,
+                            } }), _jsx("span", { className: "kbd", children: "esc" })] }), _jsxs("div", { style: { maxHeight: 380, overflowY: 'auto', padding: 8 }, role: "listbox", children: [filtered.length === 0 && (_jsx("div", { style: { padding: 24, textAlign: 'center', color: 'var(--ink-muted)' }, children: "No matches" })), filtered.map((a, i) => (_jsxs("button", { type: "button", role: "option", "aria-selected": false, className: "nav-item", style: { width: '100%', borderRadius: 8 }, onClick: () => run(a), children: [_jsx("span", { style: { flex: 1, color: 'var(--ink)', fontWeight: 500 }, children: a.label }), _jsx("span", { className: "kicker", style: { fontSize: 10 }, children: a.hint })] }, commandKey(a, i))))] })] }) }));
+}
+//# sourceMappingURL=CommandPalette.js.map

package/dist/ui/components/CommandPalette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandPalette.js","sourceRoot":"","sources":["../../../src/ui/components/CommandPalette.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AACnD,OAAO,EAAE,YAAY,EAAgB,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAG3E,SAAS,UAAU,CAAC,CAAU,EAAE,CAAS;IACxC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC,CAAC,EAAE,EAAE,CAAA;IAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAA;IAC/C,OAAO,UAAU,CAAC,CAAC,WAAW,IAAI,CAAC,EAAE,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAI9B;IACA,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC9B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAY,EAAE,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAmB,IAAI,CAAC,CAAA;IAC/C,SAAS,CAAC,GAAG,EAAE;QACd,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,CAAA;IAC1B,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAA;YACX,OAAM;QACP,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAA;QAClC,KAAK,CAAC,uBAAuB,kBAAkB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;aAC5E,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACrB,IAAI,CAAC,CAAC,CAA+D,EAAE,EAAE,CACzE,OAAO,CACN,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CACzF,CACD;aACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACjB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAA;IAC1B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACP,MAAM,GAAG,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACvC,SAAS,GAAG,CAAC,CAAU;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;aACzC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,CAAA;;YAC3D,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACxB,KAAK,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC;IACD,OAAO,CACN,cACC,SAAS,EAAC,OAAO,EACjB,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAC7B,WAAW,EAAE,KAAK,CAAC,OAAO,EAC1B,IAAI,EAAC,QAAQ,gBACF,MAAM,gBACN,iBAAiB,YAG5B,eACC,SAAS,EAAC,eAAe,EACzB,KAAK,EAAE;gBACN,KAAK,EAAE,GAAG;gBACV,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,kBAAkB;gBAC7B,QAAQ,EAAE,QAAQ;aAClB,EACD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,aAEvC,eACC,KAAK,EAAE;wBACN,OAAO,EAAE,MAAM;wBACf,UAAU,EAAE,QAAQ;wBACpB,GAAG,EAAE,EAAE;wBACP,OAAO,EAAE,WAAW;wBACpB,YAAY,EAAE,yBAAyB;qBACvC,aAED,gBACC,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EACrC,WAAW,EAAC,+BAA0B,gBAC3B,yBAAyB,EACpC,KAAK,EAAE;gCACN,IAAI,EAAE,CAAC;gCACP,MAAM,EAAE,CAAC;gCACT,OAAO,EAAE,CAAC;gCACV,UAAU,EAAE,aAAa;gCACzB,KAAK,EAAE,YAAY;gCACnB,QAAQ,EAAE,EAAE;6BACZ,GACA,EACF,eAAM,SAAS,EAAC,KAAK,oBAAW,IAC3B,EACN,eAAK,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAC,SAAS,aAC3E,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CACzB,cAAK,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,2BAErE,CACN,EACA,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CACvB,kBAEC,IAAI,EAAC,QAAQ,EACb,IAAI,EAAC,QAAQ,mBACE,KAAK,EACpB,SAAS,EAAC,UAAU,EACpB,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,EACzC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,aAErB,eAAM,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,EAAE,YAAG,CAAC,CAAC,KAAK,GAAQ,EAChF,eAAM,SAAS,EAAC,QAAQ,EAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,YAC9C,CAAC,CAAC,IAAI,GACD,KAXF,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAYb,CACT,CAAC,IACG,IACD,GACD,CACN,CAAA;AACF,CAAC"}

package/dist/ui/components/NoAccessScreen.d.ts

@@ -0,0 +1,2 @@
+export declare function NoAccessScreen(): import("react").JSX.Element;
+//# sourceMappingURL=NoAccessScreen.d.ts.map

package/dist/ui/components/NoAccessScreen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoAccessScreen.d.ts","sourceRoot":"","sources":["../../../src/ui/components/NoAccessScreen.tsx"],"names":[],"mappings":"AAYA,wBAAgB,cAAc,gCAkE7B"}

package/dist/ui/components/NoAccessScreen.js

@@ -0,0 +1,42 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// src/ui/components/NoAccessScreen.tsx — honest "no Masthead access yet" screen
+// (deep-review blocker C).
+//
+// Shown when an AUTHENTICATED host user has no workspace_membership: the page-level
+// gate (admin.astro) already let them past login, but GET <base>/api/me returned
+// 401/403 because they aren't provisioned. Instead of the blank app shell (every
+// /admin/api/* panel 401ing), render this standalone screen telling them exactly
+// what's wrong and what to do. It deliberately does NOT mount the Sidebar/Topbar
+// chrome — it stands on its own.
+import { Icon } from '../icons.js';
+export function NoAccessScreen() {
+    return (_jsx("div", { style: {
+            minHeight: '100vh',
+            display: 'flex',
+            alignItems: 'center',
+            justifyContent: 'center',
+            padding: 24,
+            background: 'var(--bg, #0c0f14)',
+        }, children: _jsxs("div", { className: "panel panel-pad fade-in", style: {
+                maxWidth: 460,
+                textAlign: 'center',
+                display: 'flex',
+                flexDirection: 'column',
+                alignItems: 'center',
+                gap: 14,
+                padding: '36px 32px',
+            }, children: [_jsx("div", { style: {
+                        width: 52,
+                        height: 52,
+                        borderRadius: '50%',
+                        display: 'grid',
+                        placeItems: 'center',
+                        background: 'color-mix(in srgb, var(--amber, #b8860b) 12%, transparent)',
+                        color: 'var(--amber, #b8860b)',
+                    }, children: _jsx(Icon, { name: "users", size: 24 }) }), _jsx("h1", { className: "serif", style: { fontSize: 24, fontWeight: 600, color: 'var(--ink)', margin: 0 }, children: "You don\u2019t have Masthead access yet" }), _jsx("p", { style: { fontSize: 14, lineHeight: 1.5, color: 'var(--ink-muted)', margin: 0 }, children: "Your account is signed in, but it hasn\u2019t been added to this publication. Ask an owner to add you as a member, then refresh this page." }), _jsxs("a", { href: "mailto:", className: "btn", style: { marginTop: 6, display: 'inline-flex', alignItems: 'center', gap: 7 }, onClick: (e) => {
+                        // No mailto target baked in — the host wires the owner contact. Until
+                        // then this is an honest no-op rather than a dead link to nowhere.
+                        e.preventDefault();
+                    }, children: [_jsx(Icon, { name: "mail", size: 15 }), "Request access"] })] }) }));
+}
+//# sourceMappingURL=NoAccessScreen.js.map

package/dist/ui/components/NoAccessScreen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NoAccessScreen.js","sourceRoot":"","sources":["../../../src/ui/components/NoAccessScreen.tsx"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,2BAA2B;AAC3B,EAAE;AACF,oFAAoF;AACpF,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,iCAAiC;AAEjC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,MAAM,UAAU,cAAc;IAC7B,OAAO,CACN,cACC,KAAK,EAAE;YACN,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,cAAc,EAAE,QAAQ;YACxB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,oBAAoB;SAChC,YAED,eACC,SAAS,EAAC,yBAAyB,EACnC,KAAK,EAAE;gBACN,QAAQ,EAAE,GAAG;gBACb,SAAS,EAAE,QAAQ;gBACnB,OAAO,EAAE,MAAM;gBACf,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,QAAQ;gBACpB,GAAG,EAAE,EAAE;gBACP,OAAO,EAAE,WAAW;aACpB,aAED,cACC,KAAK,EAAE;wBACN,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,EAAE;wBACV,YAAY,EAAE,KAAK;wBACnB,OAAO,EAAE,MAAM;wBACf,UAAU,EAAE,QAAQ;wBACpB,UAAU,EAAE,4DAA4D;wBACxE,KAAK,EAAE,uBAAuB;qBAC9B,YAED,KAAC,IAAI,IAAC,IAAI,EAAC,OAAO,EAAC,IAAI,EAAE,EAAE,GAAI,GAC1B,EAEN,aACC,SAAS,EAAC,OAAO,EACjB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,wDAGpE,EAEL,YAAG,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,EAAE,2JAG7E,EAEJ,aACC,IAAI,EAAC,SAAS,EACd,SAAS,EAAC,KAAK,EACf,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,EAC7E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;wBACd,sEAAsE;wBACtE,mEAAmE;wBACnE,CAAC,CAAC,cAAc,EAAE,CAAA;oBACnB,CAAC,aAED,KAAC,IAAI,IAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAE,EAAE,GAAI,sBAE3B,IACC,GACD,CACN,CAAA;AACF,CAAC"}

package/dist/ui/components/ShareModal.d.ts

@@ -0,0 +1,27 @@
+import type { ContentType } from '../../schema/types.js';
+import { type AuthorRef } from '../screens/social-share-data.js';
+export interface ShareModalPrefill {
+    /** The content item's public destination URL. */
+    destinationUrl: string;
+    /** The content slug (used as contentSlug in the batch payload). */
+    contentSlug: string;
+    /** The content type (used as contentType in the batch payload). */
+    contentType: ContentType | '';
+    /** Defaults the social campaign; normally the content slug. */
+    campaign?: string;
+    /** The content author, pre-selected for author-attributed share links. */
+    author?: AuthorRef;
+}
+export interface ShareModalProps {
+    prefill: ShareModalPrefill;
+    onClose: () => void;
+}
+export declare function ShareModal({ prefill, onClose }: ShareModalProps): import("react").JSX.Element;
+export declare function buildSharePrefill(row: {
+    type: ContentType;
+    slug: string;
+    authorId?: string | null;
+    authorSlug?: string | null;
+    authorName?: string | null;
+}, siteBase?: string): ShareModalPrefill;
+//# sourceMappingURL=ShareModal.d.ts.map

package/dist/ui/components/ShareModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShareModal.d.ts","sourceRoot":"","sources":["../../../src/ui/components/ShareModal.tsx"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAGxD,OAAO,EACN,KAAK,SAAS,EAkBd,MAAM,iCAAiC,CAAA;AAMxC,MAAM,WAAW,iBAAiB;IACjC,iDAAiD;IACjD,cAAc,EAAE,MAAM,CAAA;IACtB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,WAAW,EAAE,WAAW,GAAG,EAAE,CAAA;IAC7B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,SAAS,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,iBAAiB,CAAA;IAC1B,OAAO,EAAE,MAAM,IAAI,CAAA;CACnB;AAiBD,wBAAgB,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,eAAe,+BAugB/D;AAQD,wBAAgB,iBAAiB,CAChC,GAAG,EAAE;IACJ,IAAI,EAAE,WAAW,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,EACD,QAAQ,CAAC,EAAE,MAAM,GACf,iBAAiB,CAoBnB"}