@jini-ai/admin 0.6.15-rc.1 → 0.6.15

package/dist/security/controllers/other-credentials.controller.js

@@ -21,7 +21,8 @@ export function createOtherCredentialsController({ api, permissions = [] }, _opt
     async function load(_required, _optional = {}) {
         if (store.signal.aborted || !grants.has('security.read'))
             return;
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         store.set({ patch: { loading: true } });
         await Promise.all(OTHER_STORES.map(id => read(id, ticket)));
         if (ticket === generation)
@@ -31,7 +32,8 @@ export function createOtherCredentialsController({ api, permissions = [] }, _opt
     // This is tab-local; cross-session races still require a server concurrency check.
     let lane = Promise.resolve();
     function write(row, remove) {
-        if (store.signal.aborted || !grants.has('security.read') || !grants.has(otherWritePermission({ store: row.store })) || (!remove && !row.supportsReplace))
+        const permitted = grants.has('security.read') && grants.has(otherWritePermission({ store: row.store }));
+        if (store.signal.aborted || !permitted || (!remove && !row.supportsReplace))
             return Promise.resolve(false);
         const token = store.getSnapshot().drafts[`${row.store}:${row.id}`]?.trim() ?? '';
         if (!remove && !token)

package/dist/security/controllers/root-key.controller.js

@@ -1,9 +1,10 @@
 import { createControllerStore } from '../../core/module/controller-store.js';
 import { ROOT_KEY_PERMISSION, START_FRESH_CONFIRMATION, isRootKeyLocked } from '../rules.js';
+const receiverLabel = (w) => `${w.label} (${w.targetUrl})`;
 /** Receivers named in a result need their new signing secret; the message tells the operator which ones. */
 function resultMessage({ result, response }, _optional = {}) {
     const hooks = response.affectedWebhooks;
-    return hooks?.length ? `${result} Update receivers: ${hooks.map(w => `${w.label} (${w.targetUrl})`).join(', ')}` : result;
+    return hooks?.length ? `${result} Update receivers: ${hooks.map(receiverLabel).join(', ')}` : result;
 }
 export function createRootKeyController({ api, permissions = [] }, _optional = {}) {
     const granted = permissions.includes(ROOT_KEY_PERMISSION);
@@ -14,7 +15,8 @@ export function createRootKeyController({ api, permissions = [] }, _optional = {
     async function load(_required, _optional = {}) {
         if (!allowed())
             return;
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         store.set({ patch: { loading: true } });
         try {
             const status = await api.status({}, { signal: store.signal });
@@ -66,7 +68,8 @@ export function createRootKeyController({ api, permissions = [] }, _optional = {
         async preview(_required, _optional = {}) {
             if (!canPreview())
                 return false;
-            const ticket = ++generation;
+            generation += 1;
+            const ticket = generation;
             store.set({ patch: { loading: true, preview: null, confirm: '', error: null } });
             let ok = false;
             try {
@@ -86,8 +89,12 @@ export function createRootKeyController({ api, permissions = [] }, _optional = {
             }
             return ok;
         },
-        startFresh(_required, _optional = {}) { const state = store.getSnapshot(); if (!isRootKeyLocked({ status: state.status }) || !state.preview || !state.confirming || state.confirm !== START_FRESH_CONFIRMATION)
-            return Promise.resolve(false); return execute(() => api.startFresh({ confirm: state.confirm }, { signal: store.signal }), 'Done. Re-enter removed credentials.'); },
+        startFresh(_required, _optional = {}) {
+            const state = store.getSnapshot();
+            if (!isRootKeyLocked({ status: state.status }) || !state.preview || !state.confirming || state.confirm !== START_FRESH_CONFIRMATION)
+                return Promise.resolve(false);
+            return execute(() => api.startFresh({ confirm: state.confirm }, { signal: store.signal }), 'Done. Re-enter removed credentials.');
+        },
         cancel(_required, _optional = {}) { if (!store.getSnapshot().saving) {
             generation++;
             store.set({ patch: { confirming: false, preview: null, confirm: '', loading: false } });

package/dist/security/react/hooks/AccessTokensTab.hooks.js

@@ -55,9 +55,14 @@ export function useAccessTokensTab({ permissions = [] }, _optional = {}) {
         reload() { void access.controller?.load({}); void other.controller?.load({}); },
         cancelRemove() { if (!s?.saving && !o?.saving)
             setRemoval(null); },
-        async confirmRemove() { if (!removal)
-            return; const ok = removal.type === 'access' ? await access.controller?.remove({ row: removal.row }) : await other.controller?.remove({ row: removal.row }); if (!ok)
-            throw new Error('Unable to remove credential'); setRemoval(null); },
+        async confirmRemove() {
+            if (!removal)
+                return;
+            const ok = removal.type === 'access' ? await access.controller?.remove({ row: removal.row }) : await other.controller?.remove({ row: removal.row });
+            if (!ok)
+                throw new Error('Unable to remove credential');
+            setRemoval(null);
+        },
         controller: access.controller, };
 }
 //# sourceMappingURL=AccessTokensTab.hooks.js.map

package/dist/security/react/hooks/SecurityPorts.hooks.js

@@ -6,6 +6,10 @@ const refuse = async () => { throw new Error('Unavailable'); };
 export const unavailableRootKey = { status: refuse, generate: refuse, importToken: refuse, previewStartFresh: refuse, startFresh: refuse };
 export const noOtherCredentials = { async list() { return []; }, replace: refuse, remove: refuse };
 export const SecurityPortsContext = createContext(null);
-export function useSecurityPorts(_required = {}, _optional = {}) { const ports = useContext(SecurityPortsContext); if (!ports)
-    throw new AdminConfigError({ issues: ['React scope unavailable: security'] }); return ports; }
+export function useSecurityPorts(_required = {}, _optional = {}) {
+    const ports = useContext(SecurityPortsContext);
+    if (!ports)
+        throw new AdminConfigError({ issues: ['React scope unavailable: security'] });
+    return ports;
+}
 //# sourceMappingURL=SecurityPorts.hooks.js.map

package/dist/security/rules.js

@@ -6,10 +6,22 @@ export const CATEGORIES = [
     { value: 'ai', label: 'AI' }, { value: 'ops', label: 'Ops' }, { value: 'general', label: 'General' },
 ];
 export const OTHER_STORES = ['site-assistant', 'admin-byok', 'media-provider', 'external-mcp'];
-export function writePermission({ kind }, _optional = {}) { return kind === 'custom' ? 'custom-credentials.write' : kind === 'publish' ? 'system.publish' : 'source-control.credentials.write'; }
+export function writePermission({ kind }, _optional = {}) {
+    if (kind === 'custom')
+        return 'custom-credentials.write';
+    return kind === 'publish' ? 'system.publish' : 'source-control.credentials.write';
+}
 export function otherWritePermission({ store }, _optional = {}) { return store === 'site-assistant' || store === 'admin-byok' ? 'admin.assistant.manage' : 'admin.integrations.manage'; }
-export function credentialStore({ api, kind }, _optional = {}) { return kind === 'source-control' ? api.sourceControl : kind === 'publish' ? api.publish : api.custom; }
-function defaultCategory({ kind }, _optional = {}) { return kind === 'publish' ? 'hosting' : kind === 'source-control' ? 'source-control' : 'general'; }
+export function credentialStore({ api, kind }, _optional = {}) {
+    if (kind === 'source-control')
+        return api.sourceControl;
+    return kind === 'publish' ? api.publish : api.custom;
+}
+function defaultCategory({ kind }, _optional = {}) {
+    if (kind === 'publish')
+        return 'hosting';
+    return kind === 'source-control' ? 'source-control' : 'general';
+}
 export function blankCredentialDraft({ kind, providerId = '' }, _optional = {}) {
     return { kind, providerId, label: '', token: '', values: {}, category: defaultCategory({ kind }), baseUrl: '', additionalHosts: '', username: '' };
 }
@@ -28,7 +40,8 @@ export function filterOtherCredentials({ rows, query, category }, _optional = {}
 function findProvider({ draft, providers }, _optional = {}) { return providers.find(p => p.kind === draft.kind && p.id === draft.providerId); }
 function isDuplicateLabel({ draft, rows }, _optional = {}) {
     const label = draft.label.trim().toLowerCase();
-    return rows.some(r => r.kind === draft.kind && r.id !== draft.id && (draft.kind === 'custom' || r.providerId === draft.providerId) && r.label.trim().toLowerCase() === label);
+    const sameScope = (r) => r.kind === draft.kind && r.id !== draft.id && (draft.kind === 'custom' || r.providerId === draft.providerId);
+    return rows.some(r => sameScope(r) && r.label.trim().toLowerCase() === label);
 }
 function customDraftError({ draft }, _optional = {}) {
     try {
@@ -76,7 +89,8 @@ function customPatchFields({ draft }, _optional = {}) {
 export function buildCredentialPatch({ draft, providers }, _optional = {}) {
     const token = draft.token.trim();
     const custom = draft.kind === 'custom';
-    const connection = token ? (custom ? customConnection({ draft, token }) : providerConnection({ draft, token, providers })) : undefined;
+    const connectionFor = (value) => (custom ? customConnection({ draft, token: value }) : providerConnection({ draft, token: value, providers }));
+    const connection = token ? connectionFor(token) : undefined;
     return { label: draft.label.trim(), ...(connection ? { connection } : {}), ...(custom ? customPatchFields({ draft }) : {}) };
 }
 export function isRootKeyLocked({ status }, _optional = {}) { return status?.state === 'missing-with-data' || status?.state === 'mismatch'; }

package/dist/seo/adapters/memory.js

@@ -1,3 +1,4 @@
+import { omitKeys } from '../../core/omit-keys.js';
 const defaultSettings = () => ({ titleTemplate: '%s', defaultRobots: { noindex: false, nofollow: false }, sitemapEnabled: true, robotsRules: [] });
 const clone = (value) => structuredClone(value);
 /** `patch value ?? meta value`, named — {@link applySeoPatch} calls this once per field instead of
@@ -66,7 +67,7 @@ function settingOrCleared(patchValue, currentValue) {
  *  @complexity O(1) — three fixed field reads, no iteration. */
 function applySettingsPatch(current, patch) {
     const { defaultDescription, defaultOgImage, twitterSite, ...rest } = patch;
-    const { defaultDescription: _description, defaultOgImage: _image, twitterSite: _site, ...retained } = current;
+    const retained = omitKeys(current, ['defaultDescription', 'defaultOgImage', 'twitterSite']);
     return {
         ...retained,
         ...rest,
@@ -106,9 +107,11 @@ export function createMemorySeoApi(required = {}, { resolveEntry } = {}) {
             // O(k) in patch keys; null removes only touched overrides, omission preserves other edits.
             for (const key of Object.keys(patch)) {
                 const value = patch[key];
+                if (value === undefined)
+                    continue;
                 if (value === null)
                     delete current[key];
-                else if (value !== undefined)
+                else
                     Object.assign(current, { [key]: value });
             }
             overrides[entryId] = current;

package/dist/seo/controllers/seo-entry.controller.js

@@ -34,7 +34,8 @@ export function createSeoEntryController({ api, entryId }, { t = key => key, des
             store.set({ patch: { resolved, touched: {}, notice: t('Saved.') } });
             // Saving finishes with the PUT, before this best-effort analysis settles. A newer save's
             // analysis must supersede an earlier slow response (the source's 2026-09-07 race fix).
-            const ticket = ++analyzeGeneration;
+            analyzeGeneration += 1;
+            const ticket = analyzeGeneration;
             void api.analyzeSeoEntry({ entryId }).then(analysis => {
                 if (ticket === analyzeGeneration)
                     store.set({ patch: { analysis } });

package/dist/seo/controllers/sitemap.controller.js

@@ -6,7 +6,8 @@ export function createSitemapController({ api, enabled }, _optional = {}) {
     async function load(_required = {}, _optional = {}) {
         if (!enabled)
             return;
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         store.set({ patch: { status: 'loading', error: null } });
         try {
             const { text } = await api.fetchSitemapXml({}, { signal: store.signal });

package/dist/seo/react/hooks/MediaPickerBridge.hooks.js

@@ -8,7 +8,7 @@ export function useMediaPickerBridge(required, _optional = {}) {
     useEffect(() => {
         if (!mediaPicker) {
             setError('Media picker unavailable');
-            return;
+            return undefined;
         }
         const abort = new AbortController();
         void mediaPicker.pick({ accept: callbacks.current.accept ?? ['image/*'] }, { signal: abort.signal }).then(item => {

package/dist/seo/react/hooks/SeoPage.hooks.d.ts

@@ -1,4 +1,4 @@
-import type { FormEvent, ComponentType } from 'react';
+import type { FormEvent } from 'react';
 import type { TabBarTab } from '@jini-ai/ui/tab-strip';
 import type { SeoTranslator, SeoSettingsPatch, SeoSettings, SeoEntryAnalysis } from '../../models.js';
 export { buildSeoSettingsPatch, resolveSeoTabId } from '../../rules.js';
@@ -47,24 +47,4 @@ export interface SeoTabController {
     regenerateSitemap: () => void;
     openSitemapModal: () => void;
 }
-/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
-export declare function seoTabPanel({ activeTabId, controller, components }: {
-    activeTabId: import('../../rules.js').SeoTabId;
-    controller: SeoTabController;
-    components: {
-        SeoDefaultsTab: ComponentType<{
-            controller: SeoTabController;
-        }>;
-        SeoSitemapTab: ComponentType<{
-            controller: SeoTabController;
-        }>;
-        SeoEntrySection: ComponentType<{
-            locale: string;
-        }>;
-    };
-}, _optional?: Record<string, never>): import("react").ReactElement<{
-    controller: SeoTabController;
-}, string | import("react").JSXElementConstructor<any>> | import("react").ReactElement<{
-    locale: string;
-}, string | import("react").JSXElementConstructor<any>>;
 //# sourceMappingURL=SeoPage.hooks.d.ts.map

package/dist/seo/react/hooks/SeoPage.hooks.js

@@ -26,12 +26,4 @@ export function useAnalyzePanel({ analysis }, _optional = {}) {
 export function useSeoDefaults({ save }, _optional = {}) {
     return { submit: (event) => { event.preventDefault(); void save(buildSeoSettingsPatch({ form: new FormData(event.currentTarget) })); } };
 }
-/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
-export function seoTabPanel({ activeTabId, controller, components }, _optional = {}) {
-    if (activeTabId === 'sitemap')
-        return createElement(components.SeoSitemapTab, { controller });
-    if (activeTabId === 'entries')
-        return createElement(components.SeoEntrySection, { locale: controller.locale });
-    return createElement(components.SeoDefaultsTab, { controller });
-}
 //# sourceMappingURL=SeoPage.hooks.js.map

package/dist/seo/react/hooks/use-seo.hooks.js

@@ -27,7 +27,7 @@ export function useSeo({ api }, { t, events } = {}) {
     }, [controller, cached.query.data]);
     useEffect(() => {
         if (!controller || !events)
-            return;
+            return undefined;
         return events.subscribe({ onRefresh: () => { invalidate({ key: SEO_KEYS.settings }); } });
     }, [controller, events, invalidate]);
     return {

package/dist/seo/react/hooks/use-share-image-warning.hooks.js

@@ -18,7 +18,7 @@ export function useShareImageWarning({ value, previewUrl, api }, { t = key => ke
     useEffect(() => {
         const inspect = api.inspectShareImage;
         if (!previewUrl || !inspect || !isBrowserSameOrigin({ url: previewUrl }))
-            return;
+            return undefined;
         const controller = new AbortController();
         let active = true;
         const timeout = setTimeout(() => {

package/dist/seo/react/hooks/use-sitemap-modal.hooks.js

@@ -4,10 +4,18 @@ import { useController } from '../../../core/react/use-controller.js';
 import { createSitemapController } from '../../controllers/sitemap.controller.js';
 import { parseSitemapXml, filterSitemapEntries } from '../../rules.js';
 import { useSeoPorts } from './SeoPorts.hooks.js';
+/** Disabled outranks a failed fetch, which outranks a loaded document; anything else is still loading. */
+function sitemapStatus({ enabled, query }) {
+    if (!enabled)
+        return 'disabled';
+    if (query.error)
+        return 'error';
+    return query.data ? 'ready' : 'loading';
+}
 export function useSitemapModal({ api, enabled }, _optional = {}) {
     const cached = useSitemapQuery({ api, enabled });
     const { controller, snapshot } = useController({ create: () => createSitemapController({ api: cached.api, enabled }), dependencies: [cached.api, enabled] }, { start: ({ controller }) => { void controller.load({}); } });
-    const state = { ...(snapshot ?? { filter: '', view: 'table' }), status: !enabled ? 'disabled' : cached.query.error ? 'error' : cached.query.data ? 'ready' : 'loading', error: cached.query.error?.message ?? null, xmlText: cached.query.data?.text ?? '' };
+    const state = { ...(snapshot ?? { filter: '', view: 'table' }), status: sitemapStatus({ enabled, query: cached.query }), error: cached.query.error?.message ?? null, xmlText: cached.query.data?.text ?? '' };
     // Parse only when text/status changes, never on each filter keystroke.
     const entries = useMemo(() => state.status === 'ready' ? parseSitemapXml({ xmlText: state.xmlText }) : [], [state.status, state.xmlText]);
     const filteredEntries = useMemo(() => filterSitemapEntries({ entries, query: state.filter }), [entries, state.filter]);

package/dist/seo/react/pages/SeoPage.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { useAnalyzePanel, useSeoDefaults, useSeoTabs, seoTabPanel } from "../hooks/SeoPage.hooks.js";
+import { useAnalyzePanel, useSeoDefaults, useSeoTabs } from "../hooks/SeoPage.hooks.js";
 import { agentHandle } from "@jini-ai/agentic";
 import { TabBar } from "@jini-ai/ui/tab-strip";
 import { InfoTip, Select } from "@jini-ai/ui/admin-widgets";
@@ -52,6 +52,12 @@ function EntryPicker({ locale, entryId, onChange, useEntryPickerHook = useWiredE
        than leaving a placeholder-only control with no name at all. The i18n key is unchanged. */
     return (_jsx("div", { className: "jini-seo-entry-picker", children: _jsx(Select, { value: entryId, onChange: onChange, options: options ?? [], placeholder: t({ locale: locale, key: "Choose an entry…" }), "aria-label": t({ locale: locale, key: "Entry" }), agentHandle: "seo-entry-picker", translate: (key) => t({ locale, key }) }) }));
 }
+/** Status-chip modifier for an issue: errors read as failures, warnings as warnings, anything else as success. */
+function issueStatusClass(severity) {
+    if (severity === "error")
+        return "failure";
+    return severity === "warning" ? "warning" : "success";
+}
 /** Read-only score + issues view (REQ-07) — exact field names read off `SeoAnalysis`/`SeoIssue`
  * (`src/seo/types.ts`), not guessed. No state of its own — only the severity sort, which lives in
  * `rules.ts` as `sortIssuesBySeverity`. */
@@ -62,7 +68,7 @@ function AnalyzePanel(props) {
     /* Heading + score pill on one line, issues as a compact list (owner, 2026-10-15: the bare
        "Score: 100 / No issues." read as unstyled text). The pill reuses the issue pills' status
        tones, so the score and the issues under it speak one colour language. */
-    return (_jsxs("section", { className: "jini-seo-analyze-panel", "aria-labelledby": "seo-analysis-heading", children: [_jsxs("div", { className: "jini-seo-analyze-head", children: [_jsx("h3", { id: "seo-analysis-heading", children: t({ locale: locale, key: "Analysis" }) }), _jsxs("span", { className: `jini-status jini-status-${tone} jini-seo-score`, children: [t({ locale: locale, key: "Score:" }), " ", _jsx("strong", { children: props.analysis.score })] })] }), sortedIssues.length === 0 ? (_jsx("p", { className: "jini-seo-analyze-empty", children: t({ locale: locale, key: "No issues." }) })) : (_jsx("ul", { className: "jini-seo-issues", children: sortedIssues.map((issue, i) => (_jsxs("li", { className: "jini-seo-issue", children: [_jsx("span", { className: `jini-status jini-status-${issue.severity === "error" ? "failure" : issue.severity === "warning" ? "warning" : "success"}`, children: issue.severity }), _jsxs("span", { className: "jini-seo-issue-text", children: [issue.message, issue.field ? _jsxs("span", { className: "jini-muted-cell", children: [" (", issue.field, ")"] }) : null] })] }, `${issue.code}-${i}`))) }))] }));
+    return (_jsxs("section", { className: "jini-seo-analyze-panel", "aria-labelledby": "seo-analysis-heading", children: [_jsxs("div", { className: "jini-seo-analyze-head", children: [_jsx("h3", { id: "seo-analysis-heading", children: t({ locale: locale, key: "Analysis" }) }), _jsxs("span", { className: `jini-status jini-status-${tone} jini-seo-score`, children: [t({ locale: locale, key: "Score:" }), " ", _jsx("strong", { children: props.analysis.score })] })] }), sortedIssues.length === 0 ? (_jsx("p", { className: "jini-seo-analyze-empty", children: t({ locale: locale, key: "No issues." }) })) : (_jsx("ul", { className: "jini-seo-issues", children: sortedIssues.map((issue, i) => (_jsxs("li", { className: "jini-seo-issue", children: [_jsx("span", { className: `jini-status jini-status-${issueStatusClass(issue.severity)}`, children: issue.severity }), _jsxs("span", { className: "jini-seo-issue-text", children: [issue.message, issue.field ? _jsxs("span", { className: "jini-muted-cell", children: [" (", issue.field, ")"] }) : null] })] }, `${issue.code}-${i}`))) }))] }));
 }
 /** Per-entry overrides edit form (REQ-06). Pre-fills from `getSeoEntry`'s resolved meta, but
  * tracks which fields the user actually touched so `putSeoEntry` only ever sends a genuine
@@ -230,7 +236,15 @@ export function Seo({ tabId, onTabChange, useSeoHook = useWiredSeo } = {}) {
         regenerateSitemap,
         openSitemapModal,
     };
-    return (_jsxs("div", { className: "jini-page jini-seo-page", children: [_jsxs("div", { className: "jini-page-header", children: [_jsxs("div", { className: "jini-page-header-text", children: [_jsx("p", { className: "jini-page-kicker", children: t({ locale: locale, key: "Marketing" }) }), _jsx("h1", { className: "jini-page-title", children: "SEO" }), _jsx("p", { className: "jini-page-description", children: t({ locale: locale, key: "Site-wide defaults for meta titles, descriptions, social previews, and robots directives." }) })] }), _jsx("div", { className: "jini-page-actions", children: headerActions })] }), error ? _jsx("div", { className: "jini-notice jini-notice-error", children: error }) : null, notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, _jsx(TabBar, { ariaLabel: "SEO", tabs: tabs, activeId: activeTabId, onChange: changeTab, containerHandle: "seo-tab-bar" }), seoTabPanel({ activeTabId, controller, components: { SeoDefaultsTab, SeoSitemapTab, SeoEntrySection } }), sitemapModalOpen ? (_jsx(SitemapModal, { locale: locale, sitemapEnabled: settings.sitemapEnabled, regenerating: saving, onRegenerate: regenerateSitemap, onClose: closeSitemapModal })) : null] }));
+    return (_jsxs("div", { className: "jini-page jini-seo-page", children: [_jsxs("div", { className: "jini-page-header", children: [_jsxs("div", { className: "jini-page-header-text", children: [_jsx("p", { className: "jini-page-kicker", children: t({ locale: locale, key: "Marketing" }) }), _jsx("h1", { className: "jini-page-title", children: "SEO" }), _jsx("p", { className: "jini-page-description", children: t({ locale: locale, key: "Site-wide defaults for meta titles, descriptions, social previews, and robots directives." }) })] }), _jsx("div", { className: "jini-page-actions", children: headerActions })] }), error ? _jsx("div", { className: "jini-notice jini-notice-error", children: error }) : null, notice ? _jsx("div", { className: "jini-notice", children: notice }) : null, _jsx(TabBar, { ariaLabel: "SEO", tabs: tabs, activeId: activeTabId, onChange: changeTab, containerHandle: "seo-tab-bar" }), seoTabPanel({ activeTabId, controller }), sitemapModalOpen ? (_jsx(SitemapModal, { locale: locale, sitemapEnabled: settings.sitemapEnabled, regenerating: saving, onRegenerate: regenerateSitemap, onClose: closeSitemapModal })) : null] }));
+}
+/** Panel selection is presentation dispatch; this never changes the defaults form's field set. */
+function seoTabPanel({ activeTabId, controller }, _optional = {}) {
+    if (activeTabId === 'sitemap')
+        return _jsx(SeoSitemapTab, { controller: controller });
+    if (activeTabId === 'entries')
+        return _jsx(SeoEntrySection, { locale: controller.locale });
+    return _jsx(SeoDefaultsTab, { controller: controller });
 }
 export { Seo as SeoPage };
 export default Seo;

package/dist/source-control/adapters/memory.js

@@ -3,28 +3,44 @@ export function createMemorySourceControlApi({ providers = [], credentials = []
     const catalog = Object.freeze(providers.map(p => Object.freeze({ ...p, ...(p.credential ? { credential: Object.freeze({ ...p.credential, fields: Object.freeze(p.credential.fields.map(f => Object.freeze({ ...f }))) }) } : {}) })));
     const rows = new Map(credentials.map(row => [row.id, sourceControlSummary({ row })]));
     let sequence = 0;
+    const nextSequence = () => { sequence += 1; return sequence; };
     function fail(code) { throw Object.assign(new Error(code), { code }); }
-    function checkLabel(providerId, label, id) { if (!label.trim())
-        fail('VALIDATION'); if ([...rows.values()].some(r => r.providerId === providerId && r.label === label.trim() && r.id !== id))
-        fail('DUPLICATE_LABEL'); }
+    function checkLabel(providerId, label, id) {
+        if (!label.trim())
+            fail('VALIDATION');
+        if ([...rows.values()].some(r => r.providerId === providerId && r.label === label.trim() && r.id !== id))
+            fail('DUPLICATE_LABEL');
+    }
     function validate(input) { const info = sourceControlProviders({ providers: catalog, credentials: [] }).find(p => p.id === input.providerId); if (!info || !sourceControlReady({ info, draft: { ...blankSourceControlDraft({}), token: input.token, values: input } }))
         fail('VALIDATION'); }
-    function setDefault(row) { if (row.isDefault)
-        for (const old of rows.values())
-            if (old.providerId === row.providerId && old.id !== row.id && old.isDefault)
-                rows.set(old.id, sourceControlSummary({ row: { ...old, isDefault: false } })); rows.set(row.id, sourceControlSummary({ row })); return rows.get(row.id); }
+    function setDefault(row) {
+        if (row.isDefault)
+            for (const old of rows.values())
+                if (old.providerId === row.providerId && old.id !== row.id && old.isDefault)
+                    rows.set(old.id, sourceControlSummary({ row: { ...old, isDefault: false } }));
+        rows.set(row.id, sourceControlSummary({ row }));
+        return rows.get(row.id);
+    }
     return {
         async providers(_r, o = {}) { o.signal?.throwIfAborted(); return catalog; },
         async list(_r, o = {}) { o.signal?.throwIfAborted(); return Object.freeze([...rows.values()]); },
         async create(input, o = {}) { o.signal?.throwIfAborted(); validate(input.connection); const providerId = input.connection.providerId, label = input.label.trim(); checkLabel(providerId, label); let id; do {
-            id = `memory-source-${++sequence}`;
+            id = `memory-source-${nextSequence()}`;
         } while (rows.has(id)); const timestamp = now(); return setDefault({ id, providerId, label, configured: true, isDefault: input.isDefault ?? ![...rows.values()].some(r => r.providerId === providerId), createdAt: timestamp, updatedAt: timestamp }); },
-        async update({ id, patch }, o = {}) { o.signal?.throwIfAborted(); const old = rows.get(id); if (!old)
-            fail('NOT_FOUND'); if (patch.connection) {
-            validate(patch.connection);
-            if (patch.connection.providerId !== old.providerId)
-                fail('VALIDATION');
-        } const label = (patch.label ?? old.label).trim(); checkLabel(old.providerId, label, id); return setDefault({ ...old, label, isDefault: patch.isDefault ?? old.isDefault, updatedAt: now() }); },
+        async update({ id, patch }, o = {}) {
+            o.signal?.throwIfAborted();
+            const old = rows.get(id);
+            if (!old)
+                fail('NOT_FOUND');
+            if (patch.connection) {
+                validate(patch.connection);
+                if (patch.connection.providerId !== old.providerId)
+                    fail('VALIDATION');
+            }
+            const label = (patch.label ?? old.label).trim();
+            checkLabel(old.providerId, label, id);
+            return setDefault({ ...old, label, isDefault: patch.isDefault ?? old.isDefault, updatedAt: now() });
+        },
         async remove({ id }, o = {}) { o.signal?.throwIfAborted(); const old = rows.get(id); rows.delete(id); if (old?.isDefault) {
             const next = [...rows.values()].find(r => r.providerId === old.providerId);
             if (next)

package/dist/source-control/controllers/source-control.controller.js

@@ -4,7 +4,9 @@ import { blankSourceControlDraft, sourceControlProviders, defaultSourceControlCr
 function readySaveTarget({ state, providerId }) {
     const draft = state.drafts[providerId] ?? blankSourceControlDraft({});
     const info = sourceControlProviders({ providers: state.providers, credentials: state.credentials }).find(p => p.id === providerId);
-    return state.loaded && !draft.saving && info && sourceControlReady({ info, draft }) ? { info, draft } : null;
+    if (!state.loaded || draft.saving || !info)
+        return null;
+    return sourceControlReady({ info, draft }) ? { info, draft } : null;
 }
 /** Replaces the row with `summary`'s id in place, or appends `summary` when it is new. */
 function spliceCredential({ credentials, summary }) {
@@ -20,7 +22,8 @@ export function createSourceControlController({ api, permissions = [] }, _option
     async function load(_required, _optional = {}) {
         if (!canRead())
             return;
-        const ticket = ++generation, revision = credentialRevision;
+        generation += 1;
+        const ticket = generation, revision = credentialRevision;
         store.set({ patch: { loading: true } });
         // Catalog failure must not hide saved connections; retain each successful store independently.
         await Promise.all([

package/dist/source-control/react/components/SourceControlProviderRow.js

@@ -1,7 +1,12 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { Notice } from '@jini-ai/ui-kit/react';
 import { SourceControlCredentialFields } from './SourceControlCredentialFields.js';
+function providerRowBody(row) {
+    if (row.unlisted)
+        return _jsx(Notice, { children: "Its plugin is off or missing. Manage this token on the Access tokens page." });
+    return row.canEdit ? _jsx(SourceControlCredentialFields, { row: row }) : _jsx(Notice, { children: "Read-only connection" });
+}
 export function SourceControlProviderRow({ row }, _optional = {}) {
-    return _jsxs("details", { name: "jini-source-control-provider", open: row.defaultOpen, "data-jini-part": "source-control.provider", children: [_jsxs("summary", { children: [_jsx("h2", { children: row.heading }), row.saved && _jsxs(_Fragment, { children: [_jsx("span", { children: "Token saved" }), _jsxs("span", { children: ["Saved ", row.saved.updatedAt] }), _jsx("span", { children: "Replace token \u25BE" })] }), !row.saved && _jsx("span", { children: "Expand \u25BE" })] }), row.unlisted ? _jsx(Notice, { children: "Its plugin is off or missing. Manage this token on the Access tokens page." }) : row.canEdit ? _jsx(SourceControlCredentialFields, { row: row }) : _jsx(Notice, { children: "Read-only connection" })] });
+    return _jsxs("details", { name: "jini-source-control-provider", open: row.defaultOpen, "data-jini-part": "source-control.provider", children: [_jsxs("summary", { children: [_jsx("h2", { children: row.heading }), row.saved && _jsxs(_Fragment, { children: [_jsx("span", { children: "Token saved" }), _jsxs("span", { children: ["Saved ", row.saved.updatedAt] }), _jsx("span", { children: "Replace token \u25BE" })] }), !row.saved && _jsx("span", { children: "Expand \u25BE" })] }), providerRowBody(row)] });
 }
 //# sourceMappingURL=SourceControlProviderRow.js.map

package/dist/source-control/react/hooks/SourceControlPorts.hooks.js

@@ -1,6 +1,10 @@
 import { createContext, useContext } from 'react';
 import { AdminConfigError } from '../../../core/module/index.js';
 export const SourceControlPortsContext = createContext(null);
-export function useSourceControlPorts(_required = {}, _optional = {}) { const ports = useContext(SourceControlPortsContext); if (!ports)
-    throw new AdminConfigError({ issues: ['React scope unavailable: source-control'] }); return ports; }
+export function useSourceControlPorts(_required = {}, _optional = {}) {
+    const ports = useContext(SourceControlPortsContext);
+    if (!ports)
+        throw new AdminConfigError({ issues: ['React scope unavailable: source-control'] });
+    return ports;
+}
 //# sourceMappingURL=SourceControlPorts.hooks.js.map

package/dist/source-control/rules.js

@@ -22,9 +22,15 @@ export function buildSourceControlConnection({ info, draft }, _optional = {}) {
 }
 /** Explicit projection prevents accidental token, ciphertext or username disclosure. */
 export function sourceControlSummary({ row }, _optional = {}) { return Object.freeze({ id: row.id, providerId: row.providerId, label: row.label, configured: true, isDefault: row.isDefault, createdAt: row.createdAt, updatedAt: row.updatedAt }); }
-export function sourceControlErrorMessage({ error }, _optional = {}) { const e = error; const marker = e?.code ?? e?.message; if (marker === 'DUPLICATE_LABEL')
-    return 'This connection was already saved — reload and try again.'; if (marker === 'VALIDATION')
-    return 'Check the required credential fields.'; return 'Unable to save connection'; }
+export function sourceControlErrorMessage({ error }, _optional = {}) {
+    const e = error;
+    const marker = e?.code ?? e?.message;
+    if (marker === 'DUPLICATE_LABEL')
+        return 'This connection was already saved — reload and try again.';
+    if (marker === 'VALIDATION')
+        return 'Check the required credential fields.';
+    return 'Unable to save connection';
+}
 export function safeSourceControlUrl({ url }, _optional = {}) { try {
     const parsed = new URL(url);
     return parsed.protocol === 'https:' || parsed.protocol === 'http:' ? url : undefined;

package/dist/widgets/adapters/http.js

@@ -1,3 +1,4 @@
+import { querySuffix } from '../../core/transport/query-suffix.js';
 /** basePath is the host workspace root; the adapter adds /widgets and the shared /trash/items. */
 export function createHttpWidgetsApi({ transport, basePath }, _optional = {}) {
     const root = basePath.replace(/\/$/, '');
@@ -14,7 +15,7 @@ export function createHttpWidgetsApi({ transport, basePath }, _optional = {}) {
             if (includeInactive)
                 query.set('includeInactive', 'true');
             const suffix = query.toString();
-            return request(`${base}${suffix ? `?${suffix}` : ''}`, 'GET', undefined, options);
+            return request(`${base}${querySuffix(suffix)}`, 'GET', undefined, options);
         },
         getWidget({ id }, options = {}) { return request(`${base}/${encodeURIComponent(id)}`, 'GET', undefined, options); },
         createWidget(input, options = {}) { return request(base, 'POST', input, options); },

package/dist/widgets/adapters/memory.js

@@ -32,7 +32,8 @@ export function createMemoryWidgetsApi({ widgets = [], regions = [], areas = {},
             options.signal?.throwIfAborted();
             let id;
             do {
-                id = `fake-${++widgetSequence}`;
+                widgetSequence += 1;
+                id = `fake-${widgetSequence}`;
             } while (rows.some(w => w.id === id || w.slug === `fake-slug-${widgetSequence}`));
             const widget = { id, workspaceId, slug: `fake-slug-${widgetSequence}`, title: input.title, status: 'active', widgetType: input.widgetType, config: copy(input.config), updatedAt: now(), version: 1 };
             rows.push(widget);
@@ -61,7 +62,8 @@ export function createMemoryWidgetsApi({ widgets = [], regions = [], areas = {},
                 fail('WIDGETS_REGION_BOUND', 'Region already bound');
             let id;
             do {
-                id = `fake-area-${++areaSequence}`;
+                areaSequence += 1;
+                id = `fake-area-${areaSequence}`;
             } while (bindings.some(b => b.areaEntryId === id) || [...regionRows.values()].some(r => r.area.id === id));
             const area = { id, workspaceId, regionKey, updatedAt: now(), version: 1 };
             bindings.push({ workspaceId, regionKey, areaEntryId: id, updatedAt: area.updatedAt, placementCount: 0 });

package/dist/widgets/conformance/widgets-api.conformance.js

@@ -1,8 +1,11 @@
 /** Mutates an isolated adapter. Returns named checks and throws at the first contract failure. */
 export async function runWidgetsApiConformance({ api }, _optional = {}) {
     const checks = [];
-    function assert(condition, name) { if (!condition)
-        throw new Error(`Widgets API conformance: ${name}`); checks.push(name); }
+    function assert(condition, name) {
+        if (!condition)
+            throw new Error(`Widgets API conformance: ${name}`);
+        checks.push(name);
+    }
     async function rejects(run, name) { let rejected = false; try {
         await run();
     }

package/dist/widgets/controllers/instance-editor.controller.js

@@ -17,7 +17,8 @@ export function createWidgetInstanceEditorController({ api, params: initialParam
     const isLiveLoad = ({ ticket }) => ticket === generation && !store.signal.aborted;
     const isLiveSave = ({ savingFor }) => currentKey() === savingFor && !store.signal.aborted;
     async function load(_required = {}, _optional = {}) {
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         const isNew = params.widgetId === null;
         store.set({ patch: { isNew, saving: false } });
         if (isNew) {
@@ -58,7 +59,7 @@ export function createWidgetInstanceEditorController({ api, params: initialParam
         try {
             if (isNew)
                 await createAndOpen({ widgetType, title, config });
-            else if (widget)
+            if (!isNew && widget)
                 await updateExisting({ widget, title, config, savingFor });
         }
         catch (error) {

package/dist/widgets/controllers/library.controller.js

@@ -8,7 +8,8 @@ export function createWidgetsLibraryController({ api }, { t = widgetsEnglish } =
     let generation = 0;
     const isLiveRead = ({ ticket }) => ticket === generation && !store.signal.aborted;
     async function load(_required = {}, _optional = {}) {
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         try {
             // No includeInactive: trashed widgets belong to the shared Trash screen.
             const result = await api.listWidgets({}, { signal: store.signal });

package/dist/widgets/controllers/region-editor.controller.js

@@ -8,7 +8,8 @@ export function createWidgetRegionEditorController({ api, regionKey: initialKey
     let regionKey = initialKey, generation = 0;
     const isLiveRead = ({ ticket }) => ticket === generation && !store.signal.aborted;
     async function load(_required = {}, _optional = {}) {
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         store.set({ patch: { loading: true, error: null, saving: false } });
         try {
             const result = await api.getWidgetRegion({ regionKey }, { signal: store.signal });

package/dist/widgets/controllers/regions.controller.js

@@ -7,7 +7,8 @@ export function createWidgetRegionsController({ api }, { t = widgetsEnglish, nav
     const store = createControllerStore({ initial: { regions: null, error: null, newRegionKey: '', binding: false } });
     let generation = 0;
     async function load(_required = {}, _optional = {}) {
-        const ticket = ++generation;
+        generation += 1;
+        const ticket = generation;
         try {
             const result = await api.listWidgetRegions({}, { signal: store.signal });
             if (ticket === generation && !store.signal.aborted)

package/dist/widgets/react/components/WidgetInstanceNotices.d.ts

@@ -10,5 +10,5 @@ import type { WidgetInstanceGuard } from '../../rules.js';
 export declare function WidgetInstanceGuardNotice({ guard, t }: {
     guard: WidgetInstanceGuard;
     t: (key: string) => string;
-}): import("react").JSX.Element;
+}): import("react").JSX.Element | null;
 //# sourceMappingURL=WidgetInstanceNotices.d.ts.map

package/dist/widgets/react/components/WidgetInstanceNotices.js

@@ -20,6 +20,8 @@ export function WidgetInstanceGuardNotice({ guard, t }) {
             return _jsx("div", { className: "notice error", children: t("No widget type specified.") });
         case "unknown-type":
             return _jsxs("div", { className: "notice error", children: [t('Unknown widget type "'), guard.widgetType, "\"."] });
+        default:
+            return null;
     }
 }
 //# sourceMappingURL=WidgetInstanceNotices.js.map