@michaelthielemann/kestrel 4.1.3 → 5.0.2

package/layers/admin/app/components/LocaleBar.vue

@@ -1,107 +0,0 @@
-<script setup lang="ts">
-// Pruvious-style content-locale switcher for the record editor. Shows every configured website locale:
-// the active one as a label, an existing sibling as a pen (edit) + copy control, a missing one as a
-// "+" (create) link. Content locales only — not the admin-UI language.
-const props = defineProps<{
-  collection: string
-  id: string
-  mode: 'single' | 'multi'
-  current: string
-  translations: Record<string, number | null>
-  group?: string
-}>()
-const emit = defineEmits<{ copyFrom: [locale: string] }>()
-
-const { locales } = useContentLocales()
-
-/** Existing sibling row id for a locale (multi only), or null when there is no translation yet. */
-function existingId(loc: string): number | null {
-  const v = props.translations[loc]
-  return typeof v === 'number' ? v : null
-}
-function createLink(loc: string): string {
-  const q = new URLSearchParams({ locale: loc })
-  if (props.group) q.set('group', props.group)
-  return `/admin/${props.collection}/new?${q.toString()}`
-}
-const up = (s: string) => s.toUpperCase()
-const { t } = useT()
-</script>
-
-<template>
-  <div class="locale-bar" role="group" :aria-label="t('localeBar.groupLabel')">
-    <template v-for="loc in locales" :key="loc">
-      <span v-if="loc === current" class="locale-bar__item locale-bar__item--active" aria-current="true">{{ up(loc) }}</span>
-
-      <NuxtLink
-        v-else-if="mode === 'single'"
-        class="locale-bar__item locale-bar__btn"
-        :to="`/admin/${collection}?locale=${loc}`"
-        :aria-label="t('localeBar.editLocale', { loc: up(loc) })"
-      >{{ up(loc) }}<KestrelUiIcon name="pencil" :size="14" /></NuxtLink>
-
-      <span v-else-if="existingId(loc) !== null" class="locale-bar__item">
-        <!-- No `?locale=` here: the target id already IS a specific locale's row (useEditForm reads the
-             active locale off the loaded record, not the query, once an id is known). -->
-        <NuxtLink class="locale-bar__btn" :to="`/admin/${collection}/${existingId(loc)}`" :aria-label="t('localeBar.editLocale', { loc: up(loc) })">{{ up(loc) }}<KestrelUiIcon name="pencil" :size="14" /></NuxtLink>
-        <button type="button" class="locale-bar__btn locale-bar__btn--copy" :aria-label="t('localeBar.copyInto', { loc: up(loc), current: up(current) })" @click="emit('copyFrom', loc)"><KestrelUiIcon name="copy" :size="14" /></button>
-      </span>
-
-      <NuxtLink
-        v-else
-        class="locale-bar__item locale-bar__btn locale-bar__btn--add"
-        :to="createLink(loc)"
-        :aria-label="t('localeBar.createTranslation', { loc: up(loc) })"
-      >{{ up(loc) }}<KestrelUiIcon name="plus" :size="14" /></NuxtLink>
-    </template>
-  </div>
-</template>
-
-<style lang="scss">
-.locale-bar {
-  display: flex;
-  align-items: center;
-  gap: var(--space-2);
-
-  &__item {
-    display: inline-flex;
-    align-items: center;
-    gap: var(--space-1);
-    font-size: var(--text-sm);
-    font-weight: var(--weight-medium);
-
-    &--active {
-      padding: var(--space-1) var(--space-2);
-      border-radius: var(--radius-sm);
-      background: var(--color-surface);
-      border: 1px solid var(--color-border);
-      color: var(--color-text);
-    }
-  }
-  &__btn {
-    display: inline-flex;
-    align-items: center;
-    gap: var(--space-1);
-    padding: var(--space-1) var(--space-2);
-    border: 1px solid var(--color-border);
-    border-radius: var(--radius-sm);
-    background: transparent;
-    color: var(--color-text-muted);
-    text-decoration: none;
-    cursor: pointer;
-
-    &:hover {
-      border-color: var(--color-text-muted);
-      color: var(--color-text);
-    }
-    &--add {
-      border-style: solid;
-      border-color: var(--color-border);
-      color: var(--color-text-muted);
-    }
-    &--copy {
-      padding: var(--space-1);
-    }
-  }
-}
-</style>

package/layers/admin/app/components/PageFields.vue

@@ -1,129 +0,0 @@
-<script setup lang="ts">
-import type { FieldDef, LayoutNode, SeoMeta } from '@michaelthielemann/kestrel-core'
-import { slugify } from '@michaelthielemann/kestrel-core/client'
-// The collection (page) field list — delegates to the shared <KestrelFieldLayout> renderer (rows / groups /
-// widths, or one field per row when the collection declares no layout), shared by the flat-collection
-// form and the 3-pane editor's root-selected pane so the wiring lives in exactly one place. pageLike
-// collections also get their routable `path` (slug); seo-enabled ones get the SEO section — both as
-// page-level system fields bracketing the collection fields.
-const props = defineProps<{
-  fields: Record<string, FieldDef>
-  /** Normalized admin editor layout (from the serialized collection). Absent → one field per row. */
-  fieldLayout?: LayoutNode[]
-  values: Record<string, unknown>
-  errors: Record<string, string>
-  /** Root field keys holding a stale reference — shown as a non-blocking warning note. */
-  deadFields?: Set<string>
-  locale: string
-  pageLike?: boolean
-  seo?: boolean
-  status?: boolean
-  disabled?: boolean
-}>()
-const emit = defineEmits<{ update: [name: string, value: unknown] }>()
-const { t } = useT()
-
-// A project with a single layout has nothing to choose, so the control stays out of the pane entirely
-// rather than offering one dead option.
-const layoutOptions = computed(() => layoutSelectOptions(useOfferableLayouts(), t('pageSettings.layoutDefault')))
-const showLayout = computed(() => !!props.pageLike && layoutOptions.value.length > 1)
-
-// Article metadata is an installation-wide policy (`kestrel.seo.articleMeta`), not a per-collection one,
-// so it comes from runtimeConfig rather than the serialized collection schema.
-const articleMeta = computed(() => (useRuntimeConfig().public as { seoArticleMeta?: boolean }).seoArticleMeta === true)
-
-// Live preview of the slug the server will auto-generate from the title while the field is left blank
-// (the server slugifies the title on save). Falls back to '/' when there is no title yet.
-const slugPlaceholder = computed(() => {
-  const s = slugify(recordTitle(props.fields, props.values))
-  return s ? `/${s}` : '/'
-})
-</script>
-
-<template>
-  <!-- Publish gate (the `status` system column). The primary page-level control, so it leads the pane:
-       Draft keeps the page out of the generated site; Published renders + auto-publishes it. -->
-  <KestrelUiField
-    v-if="status"
-    class="page-settings__status"
-    :label="t('pageSettings.statusLabel')"
-    :hint="t('pageSettings.statusHint')"
-  >
-    <template #default="f">
-      <KestrelUiSelect
-        :model-value="(values.status as string) ?? 'draft'"
-        :options="[
-          { label: t('pageSettings.statusDraft'), value: 'draft' },
-          { label: t('pageSettings.statusPublished'), value: 'published' },
-        ]"
-        :disabled="disabled"
-        v-bind="f"
-        @update:model-value="(v) => emit('update', 'status', v)"
-      />
-    </template>
-  </KestrelUiField>
-
-  <!-- The collection (page) fields, laid out by the shared renderer (rows / groups / widths, or one field
-       per row when the collection declares no `fieldLayout`). The condition gate + dead-ref note live inside. -->
-  <KestrelFieldLayout
-    :layout="fieldLayout"
-    :fields="fields"
-    :values="values"
-    :errors="errors"
-    :dead-fields="deadFields"
-    :locale="locale"
-    :disabled="disabled"
-    @update="(name, value) => emit('update', name, value)"
-  />
-
-  <!-- Page slug (the routable path). A system column on pageLike collections, edited like a field. -->
-  <KestrelUiField
-    v-if="pageLike"
-    class="page-settings__slug"
-    :label="t('pageSettings.slugLabel')"
-    :hint="t('pageSettings.slugHint')"
-    :error="errors.path || null"
-  >
-    <template #default="f">
-      <KestrelUiTextInput
-        :model-value="(values.path as string) ?? ''"
-        :disabled="disabled"
-        :placeholder="slugPlaceholder"
-        v-bind="f"
-        @update:model-value="(v) => emit('update', 'path', v)"
-      />
-    </template>
-  </KestrelUiField>
-
-  <!-- Which layout renders this page (the `layout` system column). Empty = the `default` layout, so an
-       unset value keeps rendering exactly as a project without the column. -->
-  <KestrelUiField
-    v-if="showLayout"
-    class="page-settings__layout"
-    :label="t('pageSettings.layoutLabel')"
-    :hint="t('pageSettings.layoutHint')"
-    :error="errors.layout || null"
-  >
-    <template #default="f">
-      <KestrelUiSelect
-        :model-value="(values.layout as string) ?? ''"
-        :options="layoutOptions"
-        :disabled="disabled"
-        v-bind="f"
-        @update:model-value="(v) => emit('update', 'layout', v)"
-      />
-    </template>
-  </KestrelUiField>
-
-  <!-- Page SEO (meta title/description/noindex + Google preview). The `seo` JSON system column. -->
-  <KestrelSeoFields
-    v-if="seo"
-    :value="(values.seo as SeoMeta) ?? {}"
-    :page-title="(values.title as string) ?? ''"
-    :path="(values.path as string) ?? ''"
-    :locale="locale"
-    :disabled="disabled"
-    :article-meta="articleMeta"
-    @update="(v) => emit('update', 'seo', v)"
-  />
-</template>

package/layers/admin/app/components/PageFieldsPane.vue

@@ -1,39 +0,0 @@
-<script setup lang="ts">
-import type { PageFieldsBindings } from '../utils/editor-form-context'
-
-// The page-fields fragment shared by both editor bodies: an optional content-locale switcher
-// (labelled like a page field) sitting above the collection (page) field list. Centralises the
-// LocaleBar + PageFields wiring so the flat form and the 3-pane editor's root pane stay in sync.
-// Props are the shared `PageFieldsBindings` type — the same shape the shell pre-builds and provides.
-defineProps<PageFieldsBindings>()
-const emit = defineEmits<{ copyFrom: [locale: string]; update: [name: string, value: unknown] }>()
-const { t } = useT()
-</script>
-
-<template>
-  <div v-if="translatable" class="ui-field">
-    <span class="ui-field__label">{{ t('localeBar.fieldLabel') }}</span>
-    <KestrelLocaleBar
-      :collection="collection"
-      :id="id"
-      :mode="mode"
-      :current="locale"
-      :translations="translations"
-      :group="group"
-      @copy-from="(loc) => emit('copyFrom', loc)"
-    />
-  </div>
-  <KestrelPageFields
-    :fields="fields"
-    :field-layout="fieldLayout"
-    :values="values"
-    :errors="errors"
-    :dead-fields="deadFields"
-    :locale="locale"
-    :page-like="pageLike"
-    :seo="seo"
-    :status="status"
-    :disabled="disabled"
-    @update="(name, value) => emit('update', name, value)"
-  />
-</template>

package/layers/admin/app/components/SeoFields.vue

@@ -1,210 +0,0 @@
-<script setup lang="ts">
-import { computed } from 'vue'
-import { localePath } from '@michaelthielemann/kestrel-core/client'
-import type { FieldDef, SeoMeta } from '@michaelthielemann/kestrel-core'
-// The page-level SEO section: edit the meta title/description/noindex (the `seo` system column) with a
-// live Google-result preview. Emits the whole merged SeoMeta so the parent routes it through setField.
-const props = defineProps<{
-  value: SeoMeta
-  pageTitle?: string
-  path?: string
-  locale: string
-  disabled?: boolean
-  /** `kestrel.seo.articleMeta`. Off (the default) hides author/date/keywords entirely: an installation
-   *  that must not attribute content should never be offered the fields, not merely stop publishing
-   *  them. Stored values are hidden, never cleared — turning the flag back on restores them. */
-  articleMeta?: boolean
-}>()
-const emit = defineEmits<{ update: [seo: SeoMeta] }>()
-const { t } = useT()
-const { primary, prefixPrimary } = useContentLocales()
-
-// Soft guidance limits (Google truncates ~ these lengths).
-const TITLE_MAX = 60
-const DESC_MAX = 160
-
-function patch(next: Partial<SeoMeta>) {
-  emit('update', { ...props.value, ...next })
-}
-
-const previewTitle = computed(() => props.value.title?.trim() || props.pageTitle?.trim() || t('seo.untitled'))
-const previewDesc = computed(() => props.value.description?.trim() || t('seo.noDescription'))
-
-const host = computed(() => {
-  try { return useRequestURL().host } catch { return '' }
-})
-const previewUrl = computed(() => `${host.value}${localePath(props.path || '/', props.locale, primary, prefixPrimary)}`)
-
-const titleLen = computed(() => (props.value.title ?? '').length)
-const descLen = computed(() => (props.value.description ?? '').length)
-
-// The social-share image (og:image) rides the standard media widget over a synthetic single-media field
-// def — same picker/thumb/remove UX as any media field, stored as `seo.image` (a media id).
-const socialImageField = { type: 'media', options: { accept: 'image' } } as FieldDef
-</script>
-
-<template>
-  <div class="seo-fields">
-    <p class="seo-fields__section-label">{{ t('seo.sectionLabel') }}</p>
-
-    <!-- Google SERP-style preview. Decorative (it mirrors the inputs below) → hidden from SRs. -->
-    <div class="seo-preview" aria-hidden="true">
-      <div class="seo-preview__url">{{ previewUrl }}</div>
-      <div class="seo-preview__title">{{ previewTitle }}</div>
-      <div class="seo-preview__desc">{{ previewDesc }}</div>
-    </div>
-
-    <KestrelUiField class="seo-fields__title" :label="t('seo.metaTitle')" :hint="`${titleLen}/${TITLE_MAX}`">
-      <template #default="f">
-        <KestrelUiTextInput
-          :model-value="value.title ?? ''"
-          :placeholder="pageTitle"
-          :disabled="disabled"
-          v-bind="f"
-          @update:model-value="(v) => patch({ title: v ?? '' })"
-        />
-      </template>
-    </KestrelUiField>
-
-    <KestrelUiField class="seo-fields__desc" :label="t('seo.metaDescription')" :hint="`${descLen}/${DESC_MAX}`">
-      <template #default="f">
-        <KestrelUiTextarea
-          :model-value="value.description ?? ''"
-          :rows="3"
-          :disabled="disabled"
-          v-bind="f"
-          @update:model-value="(v) => patch({ description: v ?? '' })"
-        />
-      </template>
-    </KestrelUiField>
-
-    <KestrelUiField class="seo-fields__image" :label="t('seo.socialImage')" :hint="t('seo.socialImageHint')">
-      <template #default="f">
-        <KestrelFieldMedia
-          :field="socialImageField"
-          name="seoImage"
-          :locale="locale"
-          :disabled="disabled"
-          v-bind="f"
-          :model-value="value.image ?? null"
-          @update:model-value="(v) => patch({ image: typeof v === 'number' ? v : null })"
-        />
-      </template>
-    </KestrelUiField>
-
-    <!-- Article metadata (schema.org author / datePublished / keywords). Opt-in per installation. -->
-    <template v-if="articleMeta">
-      <KestrelUiField class="seo-fields__author" :label="t('seo.author')" :hint="t('seo.authorHint')">
-        <template #default="f">
-          <KestrelUiTextInput
-            :model-value="value.author ?? ''"
-            :disabled="disabled"
-            v-bind="f"
-            @update:model-value="(v) => patch({ author: v ?? '' })"
-          />
-        </template>
-      </KestrelUiField>
-
-      <KestrelUiField class="seo-fields__published" :label="t('seo.publishedDate')" :hint="t('seo.publishedDateHint')">
-        <template #default="f">
-          <KestrelUiDatePicker
-            :model-value="value.publishedDate || null"
-            precision="date"
-            :disabled="disabled"
-            :aria-label="t('seo.publishedDate')"
-            :describedby="f['aria-describedby']"
-            @update:model-value="(v) => patch({ publishedDate: v ?? '' })"
-          />
-        </template>
-      </KestrelUiField>
-
-      <KestrelUiField class="seo-fields__keywords" :label="t('seo.keywords')" :hint="t('seo.keywordsHint')">
-        <template #default="f">
-          <KestrelUiTextInput
-            :model-value="value.keywords ?? ''"
-            :disabled="disabled"
-            v-bind="f"
-            @update:model-value="(v) => patch({ keywords: v ?? '' })"
-          />
-        </template>
-      </KestrelUiField>
-    </template>
-
-    <!-- eslint-disable-next-line vuejs-accessibility/label-has-for -- native wrapping label around a custom UiCheckbox; no `for`/`id` pair needed, invisible to static analysis -->
-    <label class="seo-fields__noindex">
-      <KestrelUiCheckbox
-        :model-value="!!value.noindex"
-        :disabled="disabled"
-        @update:model-value="(v) => patch({ noindex: v })"
-      />
-      <span>{{ t('seo.noindexLabel') }}</span>
-    </label>
-  </div>
-</template>
-
-<style lang="scss">
-.seo-fields {
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-4);
-
-  &__section-label {
-    margin: 0;
-    font-size: var(--text-sm);
-    font-weight: var(--weight-medium);
-    color: var(--color-text-muted);
-  }
-
-  &__noindex {
-    display: inline-flex;
-    align-items: center;
-    gap: var(--space-2);
-    font-size: var(--text-sm);
-    cursor: pointer;
-
-    input {
-      width: 1rem;
-      height: 1rem;
-      accent-color: var(--color-primary);
-    }
-  }
-}
-
-// A restrained take on a Google result card — enough to gauge truncation, not a pixel-perfect clone.
-.seo-preview {
-  padding: var(--space-3);
-  border: 1px solid var(--color-border);
-  border-radius: var(--radius-md);
-  background: var(--color-surface);
-
-  &__url {
-    font-size: var(--text-xs, 0.75rem);
-    color: var(--color-text-muted);
-    white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
-  }
-  &__title {
-    margin-top: var(--space-1);
-    font-size: var(--text-lg);
-    line-height: 1.3;
-    color: var(--color-link, #1a0dab);
-    overflow: hidden;
-    text-overflow: ellipsis;
-    display: -webkit-box;
-    -webkit-line-clamp: 1;
-    line-clamp: 1;
-    -webkit-box-orient: vertical;
-  }
-  &__desc {
-    margin-top: var(--space-1);
-    font-size: var(--text-sm);
-    color: var(--color-text);
-    overflow: hidden;
-    display: -webkit-box;
-    -webkit-line-clamp: 2;
-    line-clamp: 2;
-    -webkit-box-orient: vertical;
-  }
-}
-</style>

package/layers/admin/app/components/SingletonEditor.vue

@@ -1,93 +0,0 @@
-<script setup lang="ts">
-// A proper editor for a single-record (singleton) collection — the same header-driven chrome as the
-// record editor, minus list/new/delete. The header carries the title and a Save button that submits the
-// CollectionEditor's form by id; `saving`/`dirty` come from the editor's exposed state.
-import type { EditorExpose } from '../utils/editor-expose'
-
-defineProps<{ collection: string; title: string; localeParam?: string }>()
-
-const { t } = useT()
-const toast = useToast()
-
-const EDITOR_FORM_ID = 'singleton-editor'
-const editorRef = ref<EditorExpose | null>(null)
-const saving = computed(() => editorRef.value?.saving ?? false)
-
-function onSaved() {
-  toast.success(t('toast.saved'))
-}
-
-// Unsaved edits preview through a ticket instead of a save; the editor owns both paths (ADR-0008).
-const previewTitle = computed(() => t(editorRef.value?.dirty ? 'editor.previewUnsaved' : 'editor.openInNewTab'))
-
-// Guard in-app navigation away from unsaved changes — both record-change AND same-record `?locale`
-// switches (the LocaleBar's singleton locale switch reuses this route record → onBeforeRouteUpdate).
-// The editor itself guards native unload.
-useUnsavedGuard(() => editorRef.value?.dirty ?? false, () => t('editor.discardConfirm'))
-</script>
-
-<template>
-  <section class="singleton">
-    <div class="singleton__head">
-      <h1 class="singleton__title">{{ title }}</h1>
-      <div class="singleton__actions">
-        <KestrelUiButton type="button" variant="ghost" size="sm" icon="undo" :disabled="saving || !editorRef?.canUndo" :title="t('history.undo')" :aria-label="t('history.undo')" @click="editorRef?.undo()" />
-        <KestrelUiButton type="button" variant="ghost" size="sm" icon="redo" :disabled="saving || !editorRef?.canRedo" :title="t('history.redo')" :aria-label="t('history.redo')" @click="editorRef?.redo()" />
-        <KestrelUiButton type="button" variant="ghost" size="sm" icon="external-link" :title="previewTitle" :aria-label="previewTitle" :loading="editorRef?.previewOpening" @click="editorRef?.openPreview()" />
-        <!-- A quarantined record is read-only: no Save, no Publish — there is nothing valid to write. -->
-        <KestrelUiButton v-if="!editorRef?.quarantined" type="submit" :form="EDITOR_FORM_ID" variant="primary" size="sm" icon="check" :loading="saving">{{ t('common.save') }}</KestrelUiButton>
-        <!-- Publishing is its own decision: Save persists, Publish writes the static page (ADR-0008). -->
-        <KestrelUiButton v-if="editorRef?.canPublish !== false && !editorRef?.quarantined" type="button" variant="secondary" size="sm" icon="upload" :loading="editorRef?.publishing" :disabled="saving" @click="editorRef?.publish()">{{ t('common.publish') }}</KestrelUiButton>
-        <KestrelEditorStatus class="singleton__ampel" :dirty="editorRef?.dirty ?? false" :saving="saving" :has-status="editorRef?.hasStatus ?? false" :status="editorRef?.status" :saved-status="editorRef?.savedStatus" :page-like="editorRef?.pageLike ?? false" :live="editorRef?.live" />
-      </div>
-    </div>
-    <KestrelCollectionEditor
-      ref="editorRef"
-      :collection="collection"
-      id="single"
-      :form-id="EDITOR_FORM_ID"
-      :locale-param="localeParam"
-      :actions="false"
-      @saved="onSaved"
-    />
-  </section>
-</template>
-
-<style lang="scss">
-// The singleton shell stays fixed and fills the height handed down; the editor body (.editor__flat /
-// .editor3) owns the scroll — same model as the record editor (see the admin layout).
-.singleton {
-  display: flex;
-  flex-direction: column;
-  gap: var(--space-4);
-  flex: 1 1 auto;
-  min-height: 0;
-  overflow: hidden;
-
-  // Fixed header; the fields scroll below it, so it needs no sticky positioning (matching .record__head).
-  &__head {
-    flex: 0 0 auto;
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    gap: var(--space-4);
-    padding-bottom: var(--space-3);
-    border-bottom: 1px solid var(--color-border);
-  }
-  &__title {
-    font-size: var(--text-xl);
-    font-weight: var(--weight-bold);
-    text-transform: capitalize;
-  }
-  &__actions {
-    display: flex;
-    align-items: center;
-    gap: var(--space-2);
-  }
-  &__ampel {
-    margin-inline-start: var(--space-1);
-    padding-inline-start: var(--space-3);
-    border-inline-start: 1px solid var(--color-border);
-  }
-}
-</style>

package/layers/admin/app/composables/useAuth.ts

@@ -1,68 +0,0 @@
-interface AuthState {
-  authenticated: boolean
-  exp: number | null
-  checked: boolean
-}
-
-export function useAuth() {
-  const state = useState<AuthState>('kestrel-auth', () => ({
-    authenticated: false,
-    exp: null,
-    checked: false,
-  }))
-
-  const expired = () => state.value.exp !== null && state.value.exp <= Date.now()
-
-  async function checkSession() {
-    // Fail closed: a transient session-endpoint failure (5xx, offline) must read as
-    // "not authenticated" so the route guard redirects to login instead of throwing an error page.
-    try {
-      const r = await $fetch<{ authenticated: boolean; exp?: number }>('/api/session')
-      state.value = { authenticated: r.authenticated, exp: r.exp ?? null, checked: true }
-    } catch {
-      state.value = { authenticated: false, exp: null, checked: true }
-    }
-    return state.value.authenticated
-  }
-
-  async function ensureSession() {
-    if (!state.value.checked || expired()) await checkSession()
-    return state.value.authenticated && !expired()
-  }
-
-  async function login(password: string) {
-    const r = await $fetch<{ ok: true; exp: number }>('/api/login', {
-      method: 'POST',
-      body: { password },
-    })
-    state.value = { authenticated: true, exp: r.exp, checked: true }
-    return r
-  }
-
-  /** Drop the local session without a server round-trip — used by the re-auth interceptor on a 401. */
-  function reset() {
-    state.value = { authenticated: false, exp: null, checked: true }
-  }
-
-  async function logout() {
-    // The desired end state is "logged out" regardless of the response: an expired/rotated
-    // session makes the guarded logout endpoint 401, but the local session is still cleared.
-    try {
-      await $fetch('/api/logout', { method: 'POST' })
-    } catch {
-      // already invalid server-side — nothing to clear there
-    }
-    state.value = { authenticated: false, exp: null, checked: true }
-    await navigateTo('/admin/login')
-  }
-
-  return {
-    authenticated: computed(() => state.value.authenticated && !expired()),
-    exp: computed(() => state.value.exp),
-    checkSession,
-    ensureSession,
-    login,
-    logout,
-    reset,
-  }
-}