@navette-js/panels 1.0.0-beta.3 → 1.0.0-beta.4

package/lib/index.js

@@ -15,13 +15,17 @@ import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import express from 'express';
-import { Action, useColorManager, ActionGroup } from '@navette-js/actions';
-import { Checkbox, Field, Select, TextInput, Wizard, richDocumentToHtml, richHtmlToDocument, fillSchema, fillSchemaFromRecord, getSchemaState, validateSchema, useColorManager as useFormsColorManager } from '@navette-js/forms';
+import { Action, ActionHalt, useColorManager, ActionGroup } from '@navette-js/actions';
+import { Checkbox, Field, Select, TextInput, Wizard, richDocumentToHtml, richHtmlToDocument, fillSchema, fillSchemaFromRecord, getSchemaState, loadSchemaRelationships, saveSchemaRelationships, validateSchema, useColorManager as useFormsColorManager } from '@navette-js/forms';
 import { Actions, Component as SchemaComponent, EmbeddedSchema, Form, Group, Html, RenderHook, Schema, StatefulGroup } from '@navette-js/schemas';
 import { WireError } from '@navette-js/wire';
 import { useColorManager as useInfolistsColorManager, useHtmlSanitizer } from '@navette-js/infolists';
 import { Notification, Notifications, publish, runInRequest } from "./notifications.js";
 export { Notification, Notifications } from "./notifications.js";
+export { MemorySessionStore } from "./session-store.js";
+export { csvCell, csvLine, DownloadStore, ExportAction, ExportBulkAction, ExportColumn, Exporter, ImportAction, ImportColumn, Importer, parseCsv } from "./import-export.js";
+import { DownloadStore } from "./import-export.js";
+import { MemorySessionStore } from "./session-store.js";
 import { addDays, addMonths, CALENDAR_LABELS, CALENDAR_VIEWS, isDate, renderCalendar, visibleRange } from "./calendar.js";
 export { addDays, addMonths, CALENDAR_LABELS, dayOf, daysBetween, eventsOn, renderCalendar, renderCalendarEvent, timeOf, visibleRange } from "./calendar.js";
 import { DatabaseNotifications, GlobalSearch, keyBindingSuffix } from "./topbar.js";
@@ -29,7 +33,7 @@ export { DatabaseNotifications, GlobalSearch, knexNotificationStore, timeAgo } f
 import { Attributes, ColorManager, HtmlString, RenderHookRegistry, cls, convertToRgb, e, icon, js, loadingIndicator, renderHook, runWithRenderHooks, views } from '@navette-js/support';
 import { t, tc } from '@navette-js/support/i18n';
 import { emptyState } from '@navette-js/support/ui';
-import { REORDER_LIMIT, Table, initializeTableGrouping, updateTableColumnState as updateEditableColumnState, getTableQuery, renderTable, sanitizeColumnState, sortTable, useColorManager as useTableColorManager } from '@navette-js/tables';
+import { REORDER_LIMIT, Table, TrashedFilter, filterSelectableKeys, getTableRecords, initializeTableGrouping, isTableFilterRemovable, updateTableColumnState as updateEditableColumnState, getTableQuery, renderTable, sanitizeColumnState, sortTable, useColorManager as useTableColorManager } from '@navette-js/tables';
 import { Component } from '@navette-js/wire';
 import { csrfToken, verifyCsrf, wireRouter, wireScripts, wireStyles } from '@navette-js/wire/express';
 const dir = (p) => fileURLToPath(new URL(p, import.meta.url));
@@ -37,6 +41,19 @@ views.namespace('filament-panels', dir('../views'));
 views.namespace('filament', fileURLToPath(new URL('../views', import.meta.resolve('@navette-js/support'))));
 views.share({ t, tc });
 export const ASSET_VERSION = '5.11.2.0';
+/** Navigation group: label, icon (then its items have none, as in Filament) and whether it can be collapsed. */
+export class NavigationGroup {
+    _label;
+    _icon = null;
+    _collapsible = true;
+    constructor(label) { this._label = label; }
+    static make(label) { return new NavigationGroup(label); }
+    icon(name) { this._icon = name; return this; }
+    collapsible(condition = true) { this._collapsible = condition; return this; }
+    getLabel() { return this._label; }
+    getIcon() { return this._icon; }
+    isCollapsible() { return this._collapsible; }
+}
 export class NavigationItem {
     label;
     _url = '#';
@@ -73,10 +90,20 @@ export class Panel {
     _login = null;
     _auth = null;
     _key = 'cle-de-developpement-a-remplacer';
+    _sessionStore = null;
+    /** Where per-browser data is kept (persisted table filters, search and sort): in memory by default. */
+    sessionStore(store) { this._sessionStore = store; return this; }
+    getSessionStore() { return (this._sessionStore ??= new MemorySessionStore()); }
+    _downloads = null;
+    /** Where files offered for download (exports, failed import rows) are kept: in memory by default. */
+    downloads(store) { this._downloads = store; return this; }
+    getDownloads() { return (this._downloads ??= new DownloadStore()); }
+    getDownloadUrl(token) { return this.getBaseUrl(`downloads/${encodeURIComponent(token)}`); }
     _pages = [];
     _resources = [];
     _navigationItems = [];
     _navigationGroups = [];
+    _navigationGroupOptions = new Map();
     _maxContentWidth = '7xl';
     colors = new ColorManager();
     static make() { return new Panel(); }
@@ -136,6 +163,33 @@ export class Panel {
     login(page = Login) { this._login = page; return this; }
     auth(provider) { this._auth = provider; return this; }
     key(key) { this._key = key; return this; }
+    _authGuard = 'web';
+    _canAccess = null;
+    /**
+     * Session shared with the other panels that use the same guard (`'web'` by default): signing into one signs into all of
+     * them, and `canAccess()` decides who may enter each one. `null` gives this panel a session of its own.
+     * Panels sharing a guard must use the same key and the same auth provider.
+     */
+    authGuard(guard) {
+        if (guard !== null && !/^[a-z0-9_-]{1,40}$/.test(guard))
+            throw new Error(`Invalid auth guard name: ${guard}`);
+        this._authGuard = guard;
+        return this;
+    }
+    getAuthGuard() { return this._authGuard; }
+    /** Who may use this panel, e.g. `panel.canAccess((user) => user.role === 'admin')`. Checked on every request and at login. */
+    canAccess(rule) { this._canAccess = rule; return this; }
+    /** True if this user may use this panel: the panel's rule and the provider's `canAccessPanel()`, when set, must both allow it. */
+    async userCanAccess(user) {
+        if (this._canAccess && !(await this._canAccess(user, this)))
+            return false;
+        const provider = this.getAuth();
+        if (provider.canAccessPanel && !(await provider.canAccessPanel(user, this)))
+            return false;
+        return true;
+    }
+    /** Name of the session cookie: per guard (shared), or per panel. */
+    getSessionCookieName() { return this._authGuard !== null ? `navette_${this._authGuard}_session` : `navette_${this._id}_session`; }
     pages(pages) { this._pages.push(...pages); return this; }
     /** Registers resources: their pages and navigation items. */
     resources(resources) {
@@ -148,7 +202,23 @@ export class Panel {
     }
     navigationItems(items) { this._navigationItems.push(...items); return this; }
     /** Order of navigation groups. */
-    navigationGroups(groups) { this._navigationGroups = groups; return this; }
+    /** Order of the navigation groups: labels, or `NavigationGroup.make('Shop').icon('o-shopping-cart').collapsible(false)`. */
+    _darkMode = true;
+    _darkModeForced = false;
+    _defaultThemeMode = 'system';
+    /** `false`: light mode only (no switcher); `darkMode(true, true)`: dark mode only. */
+    darkMode(condition = true, isForced = false) { this._darkMode = condition; this._darkModeForced = condition && isForced; return this; }
+    /** Mode used until the user picks one in the switcher: `'system'` (default), `'light'` or `'dark'`. */
+    defaultThemeMode(mode) { if (!['light', 'dark', 'system'].includes(mode))
+        throw new Error(`Invalid theme mode: ${mode}`); this._defaultThemeMode = mode; return this; }
+    hasDarkMode() { return this._darkMode; }
+    hasDarkModeForced() { return this._darkModeForced; }
+    getDefaultThemeMode() { return this._defaultThemeMode; }
+    navigationGroups(groups) {
+        this._navigationGroups = groups.map((group) => (typeof group === 'string' ? group : group.getLabel()));
+        this._navigationGroupOptions = new Map(groups.filter((group) => typeof group !== 'string').map((group) => [group.getLabel(), { icon: group.getIcon(), collapsible: group.isCollapsible() }]));
+        return this;
+    }
     _plugins = [];
     /** Applies a plugin: an object that configures the panel (resources, pages, render hooks, themes…). */
     plugin(plugin) {
@@ -310,11 +380,29 @@ export class Panel {
     mailer(mailer) { this._mailer = mailer; return this; }
     async sendMail(message) { await this._mailer.send(message); }
     getAuthKey() { return this._key; }
-    getRegistrationUrl() { return this.getBaseUrl('register'); }
-    getRequestPasswordResetUrl() { return this.getBaseUrl('password-reset/request'); }
+    _authSlugs = { login: 'login', registration: 'register', passwordResetPrefix: 'password-reset', passwordResetRequest: 'request', passwordReset: 'reset' };
+    authSlug(slug) { if (!/^[a-z0-9][a-z0-9-]{0,60}$/.test(slug))
+        throw new Error(`Invalid route slug: ${slug}`); return slug; }
+    /** URL segment of the login page (`login` by default). */
+    loginRouteSlug(slug) { this._authSlugs.login = this.authSlug(slug); return this; }
+    /** URL segment of the registration page (`register` by default). */
+    registrationRouteSlug(slug) { this._authSlugs.registration = this.authSlug(slug); return this; }
+    /** URL segments of the password reset pages: `<prefix>/<request>` and `<prefix>/<reset>` (`password-reset/request` and `password-reset/reset` by default). */
+    passwordResetRoutePrefix(prefix) { this._authSlugs.passwordResetPrefix = this.authSlug(prefix); return this; }
+    passwordResetRequestRouteSlug(slug) { this._authSlugs.passwordResetRequest = this.authSlug(slug); return this; }
+    passwordResetRouteSlug(slug) { this._authSlugs.passwordReset = this.authSlug(slug); return this; }
+    /** Paths of the authentication pages, relative to the panel. */
+    getAuthPaths() {
+        const slugs = this._authSlugs;
+        return { login: slugs.login, registration: slugs.registration, passwordResetRequest: `${slugs.passwordResetPrefix}/${slugs.passwordResetRequest}`, passwordReset: `${slugs.passwordResetPrefix}/${slugs.passwordReset}` };
+    }
+    /** First URL segments used by the panel itself (never page slugs or tenant keys). */
+    getReservedSegments() { return new Set([...RESERVED_SEGMENTS, this._authSlugs.login, this._authSlugs.registration, this._authSlugs.passwordResetPrefix]); }
+    getRegistrationUrl() { return this.getBaseUrl(this.getAuthPaths().registration); }
+    getRequestPasswordResetUrl() { return this.getBaseUrl(this.getAuthPaths().passwordResetRequest); }
     getResetPasswordUrl(user, fingerprint) {
         const token = signToken(this._key, `${this._id}.password-reset`, { uid: user.id, fp: fingerprint }, 60 * 60);
-        return `${this.getBaseUrl('password-reset/reset')}?email=${encodeURIComponent(user.email)}&token=${encodeURIComponent(token)}`;
+        return `${this.getBaseUrl(this.getAuthPaths().passwordReset)}?email=${encodeURIComponent(user.email)}&token=${encodeURIComponent(token)}`;
     }
     /** Payload of a password reset token valid for this panel, otherwise `null`. */
     readResetPasswordToken(token) { return readToken(this._key, `${this._id}.password-reset`, token); }
@@ -386,7 +474,7 @@ export class Panel {
     }
     /** URL outside any tenant (login, registration, profile, tenant registration). */
     getBaseUrl(sub = '') { return '/' + [this._path, sub.replace(/^\/|\/$/g, '')].filter(Boolean).join('/'); }
-    getLoginUrl() { return this.getBaseUrl('login'); }
+    getLoginUrl() { return this.getBaseUrl(this.getAuthPaths().login); }
     getLogoutUrl() { return this.getBaseUrl('logout'); }
     /** Prefix of this panel's Livewire endpoint (`/livewire` or `/<path>/livewire`): each panel has its own. */
     getLivewirePrefix() { return this._path ? `/${this._path}/livewire` : '/livewire'; }
@@ -435,18 +523,19 @@ export class Panel {
         const order = [null, ...this._navigationGroups, ...items.map((i) => i._group).filter((g) => g !== null && !this._navigationGroups.includes(g))];
         return [...new Set(order)].map((label) => {
             const own = items.filter((i) => i._group === label).map((i) => ({ label: i.label, url: i._url, icon: i._icon, isActive: i.isActive(path), badge: i._badge, badgeColorClasses: this.colors.getComponentClasses('badge', i._badgeColor) }));
-            return { label, itemsId: label ? `fi-sidebar-group-items-${slug(label)}-${createHash('md5').update(label).digest('hex').slice(0, 8)}` : '', isActive: own.some((i) => i.isActive), items: own };
+            const options = label ? this._navigationGroupOptions.get(label) : undefined;
+            return { label, itemsId: label ? `fi-sidebar-group-items-${slug(label)}-${createHash('md5').update(label).digest('hex').slice(0, 8)}` : '', isActive: own.some((i) => i.isActive), items: options?.icon ? own.map((i) => ({ ...i, icon: null })) : own, icon: options?.icon ?? null, collapsible: options?.collapsible ?? true };
         }).filter((g) => g.items.length);
     }
     // --- session: an HMAC-signed cookie holding the user id
     sign(value) { return createHmac('sha256', this._key).update(value).digest('base64url'); }
     logIn(res, user, remember) {
         const value = Buffer.from(JSON.stringify({ uid: user.id })).toString('base64url');
-        res.cookie(`navette_${this._id}_session`, `${value}.${this.sign(value)}`, { httpOnly: true, sameSite: 'lax', secure: res.req?.secure === true, ...(remember ? { maxAge: 1000 * 60 * 60 * 24 * 30 } : {}) });
+        res.cookie(this.getSessionCookieName(), `${value}.${this.sign(value)}`, { httpOnly: true, sameSite: 'lax', secure: res.req?.secure === true, ...(remember ? { maxAge: 1000 * 60 * 60 * 24 * 30 } : {}) });
     }
-    logOut(res) { res.clearCookie(`navette_${this._id}_session`); }
+    logOut(res) { res.clearCookie(this.getSessionCookieName()); }
     async user(req) {
-        const raw = (req.headers.cookie ?? '').split(';').map((c) => c.trim()).find((c) => c.startsWith(`navette_${this._id}_session=`))?.split('=')[1];
+        const raw = (req.headers.cookie ?? '').split(';').map((c) => c.trim()).find((c) => c.startsWith(`${this.getSessionCookieName()}=`))?.split('=')[1];
         if (!raw)
             return null;
         const [value, mac] = raw.split('.');
@@ -674,18 +763,29 @@ export class Page extends BasePage {
     async renderContent() { return (await this.getSchema('content')).toHtml(); }
     // --- mounted actions: the stack lives in the component state, modals are rendered server-side
     mountedActions = [];
+    /** Files uploaded by rich editors (`componentFileAttachments.<state path>.<id>`), stored by the editor when it asks for their URL. */
+    componentFileAttachments = {};
     getActionMountContext() { return {}; }
     getActionRecord() { return null; }
     /** Record targeted by an action mounted in a given context (table row…). */
     async resolveActionRecord(_context) { return this.getActionRecord(); }
     /** Actions that can be mounted in a given context (page header by default). */
     getMountableActions(context) {
-        return typeof context.schemaComponent === 'string' ? this.getSchemaComponentActions(context.schemaComponent) : this.getHeaderActions();
+        return typeof context.schemaComponent === 'string' ? this.getSchemaComponentActions(context.schemaComponent) : flattenActions(this.getHeaderActions());
     }
     /**
      * Actions owned by a schema component (Repeater: add, delete, move; Section: header actions).
      * The key comes from the browser: it must match a real component of the schema, or the schema itself.
      */
+    /** Visible component of a schema of this page (or of a mounted action's form) with this key. */
+    async findSchemaComponent(key) {
+        const name = key.split('.')[0];
+        const mountedIndex = /^mountedActionSchema(\d+)$/.exec(name);
+        if (!mountedIndex && (!/^[A-Za-z]+$/.test(name) || typeof this[`${name}Schema`] !== 'function'))
+            return null;
+        const schema = mountedIndex ? await this.getMountedActionSchema(Number(mountedIndex[1])) : this.getSchema(name);
+        return schema ? (await schema.getVisibleFlatComponents()).find((c) => c.getKey() === key) ?? null : null;
+    }
     async getSchemaComponentActions(key) {
         const name = key.split('.')[0];
         // The component may belong to the form of an already mounted action (rich editor in a modal).
@@ -708,12 +808,42 @@ export class Page extends BasePage {
         return typeof component === 'string' && component.length <= 200 ? { ...this.getActionMountContext(), schemaComponent: component } : this.getActionMountContext();
     }
     async findMountableAction(name, context = this.getActionMountContext()) {
+        // An action of a modal footer: found among the extra footer actions of its (mounted) parent action.
+        if (typeof context.parentAction === 'number') {
+            const parent = this.mountedActions[context.parentAction];
+            const owner = parent ? await this.findMountableAction(parent.name, parent.context) : null;
+            const child = owner?.getExtraModalFooterActions().find((a) => a.getName() === name && a.isMountable());
+            if (!child)
+                throw new WireError(404, `Action not found: ${String(name)}`);
+            return child;
+        }
         const action = (await this.getMountableActions(context)).find((a) => a.getName() === name && a.isMountable());
         if (!action)
             throw new WireError(404, `Action not found: ${String(name)}`);
         return action;
     }
-    async actionContext(mounted) { return { livewire: this, record: await this.resolveActionRecord(mounted.context), arguments: mounted.arguments, data: emptyToNull(mounted.data ?? {}) }; }
+    async actionContext(mounted) {
+        const parentIndex = mounted.context.parentAction;
+        const parent = typeof parentIndex === 'number' ? this.mountedActions[parentIndex] : undefined;
+        const parentData = parent ? (parent.data ??= {}) : undefined;
+        // An action of a form field (affix action): its state, and access to the other fields of the same form.
+        let fieldAccess = {};
+        if (typeof mounted.context.schemaComponent === 'string') {
+            const component = await this.findSchemaComponent(mounted.context.schemaComponent);
+            const path = typeof component?.getStatePath === 'function' && component.hasStatePath() ? String(component.getStatePath()) : null;
+            if (path) {
+                const container = path.split('.').slice(0, -1);
+                const nodeOf = () => container.reduce((node, segment) => (node && typeof node === 'object' ? node[segment] : undefined), this);
+                fieldAccess = {
+                    state: path.split('.').reduce((node, segment) => (node && typeof node === 'object' ? node[segment] : undefined), this),
+                    get: (name) => nodeOf()?.[name],
+                    set: (name, value) => { const node = nodeOf(); if (node && typeof node === 'object' && /^[A-Za-z0-9_]+$/.test(name))
+                        node[name] = value; },
+                };
+            }
+        }
+        return { livewire: this, record: await this.resolveActionRecord(mounted.context), arguments: mounted.arguments, data: emptyToNull(mounted.data ?? {}), ...(parentData ? { parentData } : {}), ...fieldAccess };
+    }
     /** Form schema of a mounted action: key `mountedActionSchema<n>`, state under `mountedActions.<n>.data`. */
     async getMountedActionSchema(index) {
         const mounted = this.mountedActions[index];
@@ -724,7 +854,7 @@ export class Page extends BasePage {
     }
     async renderActionModal(index) {
         const mounted = this.mountedActions[index];
-        return (await this.findMountableAction(mounted.name, mounted.context)).toModalHtml(await this.actionContext(mounted), index, (await (await this.getMountedActionSchema(index))?.toHtml()) ?? null);
+        return (await this.findMountableAction(mounted.name, mounted.context)).toModalHtml(await this.actionContext(mounted), index, (await (await this.getMountedActionSchema(index))?.toHtml()) ?? null, mounted.context);
     }
     /** Cancels a partial modal render prepared by a live field when the same request then runs an action. */
     cancelModalPartialRender() {
@@ -797,12 +927,23 @@ export class Page extends BasePage {
     /** Mounts an action: without a modal it runs immediately; with one, only the modals fragment is returned. */
     async mountAction(name, args = {}, _context = {}) {
         this.cancelModalPartialRender();
-        const context = this.resolveMountContext(_context);
+        // A modal footer action: its context is its parent's (kept by the server), plus the parent's index.
+        const parentIndex = _context?.parentAction;
+        const context = Number.isInteger(parentIndex) && parentIndex >= 0 && parentIndex < this.mountedActions.length
+            ? { ...this.mountedActions[parentIndex].context, parentAction: parentIndex }
+            : this.resolveMountContext(_context);
         const action = await this.findMountableAction(name, context);
         await this.assertActionVisible(action, context);
         const mounted = { name: String(name), arguments: args && typeof args === 'object' ? args : {}, context };
-        if (!action.hasModal()) {
-            await action.call(await this.actionContext(mounted));
+        if (!action.hasModal() || (await action.isModalHidden(await this.actionContext(mounted)))) {
+            // Without a modal, `halt()` and `cancel()` simply stop the action.
+            try {
+                await action.call(await this.actionContext(mounted));
+            }
+            catch (error) {
+                if (!(error instanceof ActionHalt))
+                    throw error;
+            }
             return;
         }
         this.mountedActions.push(mounted);
@@ -812,10 +953,14 @@ export class Page extends BasePage {
             const data = {};
             mounted.data = data;
             fillSchema(schema, data);
-            const fill = await action.getFormFill(await this.actionContext(mounted));
-            if (fill)
+            const fillContext = await this.actionContext(mounted);
+            const fill = await action.getFormFill(fillContext);
+            if (fill) {
                 fillSchemaFromRecord(schema, data, fill);
+                await loadSchemaRelationships(schema, data, fillContext.record);
+            }
         }
+        await action.runMountUsing({ ...(await this.actionContext(mounted)), data: (mounted.data ??= {}), action });
         this.renderPartial('action-modals', await this.renderActionModals());
         this.syncActionModals();
     }
@@ -841,14 +986,30 @@ export class Page extends BasePage {
             }
         }
         const callContext = await this.actionContext(mounted);
-        if (schema)
+        if (schema) {
             callContext.data = await getSchemaState(schema);
-        await action.call(callContext);
-        // "… & create another": the modal stays open with a reset form.
+            callContext.schema = schema;
+        }
+        try {
+            await action.call(callContext);
+        }
+        catch (error) {
+            // `action.halt()`: the modal stays open; `action.cancel()`: it closes.
+            if (!(error instanceof ActionHalt))
+                throw error;
+            if (error.closesModal) {
+                this.mountedActions.pop();
+                this.syncActionModals();
+            }
+            return;
+        }
+        // "… & create another": the modal stays open with a reset form (except the preserved fields).
         if (schema && _args && typeof _args === 'object' && _args.another === true) {
+            const preserved = JSON.parse(JSON.stringify(action.getDataPreservedForAnother(callContext.data ?? {})));
             const data = {};
             mounted.data = data;
             fillSchema(schema, data);
+            Object.assign(data, preserved);
             return;
         }
         this.mountedActions.pop();
@@ -880,7 +1041,8 @@ export class Dashboard extends Page {
     /** Filters form state. Stays `null` while the page has no filters. */
     filters = null;
     /** Dashboard widgets. Defaults to the panel's (`panel.widgets([...])`). */
-    getWidgets() { return this.panel.getWidgets(); }
+    /** The panel's widgets, ordered by their `sort` (stable). */
+    getWidgets() { return [...this.panel.getWidgets()].map((widget, index) => ({ widget, index })).sort((a, b) => (a.widget.sort ?? Infinity) - (b.widget.sort ?? Infinity) || a.index - b.index).map(({ widget }) => widget); }
     /** Grid columns: a number (at the `lg` breakpoint), or one number per breakpoint. */
     getColumns() { return 2; }
     hasFiltersForm() { return typeof this.filtersFormSchema === 'function'; }
@@ -1341,7 +1503,8 @@ export class Login extends SimplePage {
             return;
         }
         const user = await panel.getAuth().attempt(String(this.data.email), String(this.data.password));
-        if (!user) {
+        // As in Filament: a valid account that may not use this panel gets the same message as wrong credentials.
+        if (!user || !(await panel.userCanAccess(user))) {
             this.addError('data.email', t('filament-panels::auth/pages/login.messages.failed'));
             return;
         }
@@ -1434,7 +1597,11 @@ export class Resource {
     /** Columns searched by global search; defaults to the title attribute. Empty array: the resource is not searchable. */
     static globallySearchableAttributes = null;
     static getGloballySearchableAttributes() { return this.globallySearchableAttributes ?? (this.recordTitleAttribute ? [this.recordTitleAttribute] : []); }
-    static canGloballySearch() { return this.getGloballySearchableAttributes().length > 0; }
+    /** `false`: the resource is left out of global search. */
+    static isGloballySearchable = true;
+    /** `false`: the search term is matched as a whole instead of word by word. */
+    static shouldSplitGlobalSearchTerms = true;
+    static canGloballySearch() { return this.isGloballySearchable && this.getGloballySearchableAttributes().length > 0; }
     /** Position of this resource's group in the results; without one, after the others in registration order. */
     static globalSearchSort = null;
     /** Maximum results rendered per resource. */
@@ -1455,7 +1622,7 @@ export class Resource {
         return action ? `${this.getUrl('index')}?tableAction=${action}&tableActionRecord=${encodeURIComponent(key)}` : null;
     }
     static async getGlobalSearchResults(search, user) {
-        const page = await this.adapter.paginate({ search, searchColumns: this.getGloballySearchableAttributes(), page: 1, perPage: Math.min(Math.max(this.globalSearchResultsLimit, 1), 200) });
+        const page = await this.adapter.paginate({ search, searchColumns: this.getGloballySearchableAttributes(), splitSearchTerms: this.shouldSplitGlobalSearchTerms, page: 1, perPage: Math.min(Math.max(this.globalSearchResultsLimit, 1), 200) });
         const results = [];
         for (const record of page.records) {
             const url = await this.getGlobalSearchResultUrl(record, user);
@@ -1527,8 +1694,10 @@ export class Resource {
 /** Widget: a component displayed in a page's widget grid. */
 export class Widget extends Component {
     static componentName;
-    /** Width in the widget grid: a number of columns, or `'full'`. */
+    /** Width in the widget grid: a number of columns or `'full'` (from `lg`), or a span per breakpoint (`{ md: 2, xl: 3 }`). */
     static columnSpan = 1;
+    /** Position on the dashboard (lower first); widgets without a sort keep their order, after the sorted ones. */
+    static sort = null;
     /** Loaded when it becomes visible. */
     static isLazy = true;
     get panel() { return this._ctx.panel; }
@@ -1542,9 +1711,16 @@ export class Widget extends Component {
         if (!(await ctx.panel.authorize(ctx.user, 'view', { widget: WidgetClass, rule: () => WidgetClass.canView(ctx.user) })))
             throw new WireError(403, 'Forbidden.');
     }
-    /** Grid column classes and style, at the `lg` breakpoint. */
+    /** Grid column classes and style: at the `lg` breakpoint, or per breakpoint. */
     gridColumn() {
         const span = this.constructor.columnSpan;
+        if (typeof span === 'object') {
+            const entries = Object.entries(span).filter(([breakpoint, value]) => /^(default|sm|md|lg|xl|2xl)$/.test(breakpoint) && (value === 'full' || (Number.isInteger(value) && value > 0)));
+            return {
+                classes: ['fi-grid-col', ...entries.map(([breakpoint]) => (breakpoint === 'default' ? 'fi-grid-col-span' : `${breakpoint}:fi-grid-col-span`))],
+                style: entries.map(([breakpoint, value]) => `--col-span-${breakpoint}: ${value === 'full' ? '1 / -1' : `span ${value} / span ${value}`};`).join(' '),
+            };
+        }
         // The span is always written, even for a single column.
         return { classes: ['fi-grid-col', 'lg:fi-grid-col-span'], style: `--col-span-lg: ${span === 'full' ? '1 / -1' : `span ${Math.floor(span)} / span ${Math.floor(span)}`};` };
     }
@@ -1842,6 +2018,10 @@ export class StatsOverviewWidget extends Widget {
     static columnSpan = 'full';
     /** Polling interval, or `null` to disable polling. */
     static pollingInterval = '5s';
+    /** Heading shown above the stats. */
+    getHeading() { return null; }
+    /** Description under the heading. */
+    getDescription() { return null; }
     /** Row columns: three, or four when the number of stats fits better. */
     getColumns(count) { return count < 3 ? 3 : count % 3 !== 1 ? 3 : 4; }
     async render() {
@@ -1855,11 +2035,13 @@ export class StatsOverviewWidget extends Widget {
             const id = `stats-overview-stat-${index}`, key = `content.${id}`;
             return `<div wire:partial="schema-component::${key}" x-data="filamentSchemaComponent(${e(js({ key, exposedMethods: [], path: '', containerPath: '' }))})" wire:key="${e(`${this.id}.${key}`)}" class="fi-grid-col" style="--col-span-default: span 1 / span 1;"><div class="fi-sc-component">${stat.toHtml(this.panel, id)}</div></div>`;
         }).join('');
+        const heading = this.getHeading(), description = this.getDescription();
+        const header = heading !== null || description !== null ? `<header class="fi-section-header"><div class="fi-section-header-content fi-section-header-content-has-heading"><div class="fi-section-header-text-ctn">${heading !== null ? `<h3 class="fi-section-header-heading">${e(heading)}</h3>` : ''}${description !== null ? `<p class="fi-section-header-description">${e(description)}</p>` : ''}</div></div></header>` : '';
         const interval = this.constructor.pollingInterval;
         const poll = interval && /^[0-9]+(ms|s)$/.test(interval) ? ` wire:poll.${interval}` : '';
         return this.wrap(`<div x-data="filamentSchema({ livewireId: ${e(js(this.id))}, schemaKey: 'content' })" x-on:form-validation-error.window="handleFormValidationError" x-on:reset-schema-component-state.window="handleClientSideStateReset" class="fi-grid fi-sc fi-sc-has-gap" style="--cols-default: repeat(1, minmax(0, 1fr));"><div ${anonymous} class="fi-grid-col" style="--col-span-default: span 1 / span 1;"><div class="fi-sc-component fi-grid-ctn"><div${poll} class="fi-sc-section"><section x-data="{
         isCollapsed: false,
-    }" class="fi-section fi-section-not-contained"><div class="fi-section-content-ctn"><div class="fi-section-content fi-grid @xl:fi-grid-cols !@lg:fi-grid-cols fi-sc fi-sc-has-gap" style="--cols-cxl: repeat(${columns}, minmax(0, 1fr)); --cols-nclg: repeat(${columns}, minmax(0, 1fr)); --cols-default: repeat(1, minmax(0, 1fr));">${cells}</div></div></section></div></div></div></div>`, ['fi-wi-stats-overview']);
+    }" class="fi-section fi-section-not-contained${header ? ' fi-section-has-header' : ''}">${header}<div class="fi-section-content-ctn"><div class="fi-section-content fi-grid @xl:fi-grid-cols !@lg:fi-grid-cols fi-sc fi-sc-has-gap" style="--cols-cxl: repeat(${columns}, minmax(0, 1fr)); --cols-nclg: repeat(${columns}, minmax(0, 1fr)); --cols-default: repeat(1, minmax(0, 1fr));">${cells}</div></div></section></div></div></div></div>`, ['fi-wi-stats-overview']);
     }
 }
 /**
@@ -1868,6 +2050,10 @@ export class StatsOverviewWidget extends Widget {
  * has changed (checksum).
  */
 export class ChartWidget extends Widget {
+    /** Empty state shown when `getData()` returns nothing. */
+    getEmptyStateHeading() { return t('filament-widgets::chart.empty.heading'); }
+    getEmptyStateDescription() { return null; }
+    getEmptyStateIcon() { return 'o-x-mark'; }
     static callable = ['updateChartData'];
     static locked = ['dataChecksum'];
     /** Polling interval, or `null` to disable polling. */
@@ -1933,7 +2119,7 @@ export class ChartWidget extends Widget {
                                 type: ${e(js(type))},
                             })" class="${cls([...this.panel.colors.getComponentClasses('stat-chart', this.getColor()), 'fi-wi-chart-frame', 'fi-wi-chart-canvas-ctn', { 'fi-wi-chart-frame-no-aspect-ratio': hasMaxHeight }])}"><canvas x-ref="canvas" aria-hidden="true" style="width: 100%; ${hasMaxHeight ? `max-height: ${e(maxHeight)}` : 'height: 100%; max-height: 100%'}"></canvas>${colors.map((name, index) => `<span aria-hidden="true" x-ref="${refs[index]}ColorElement" class="fi-wi-chart-${name}-color"></span>`).join('')}</div>`;
         const empty = isEmpty
-            ? `<div class="${cls(['fi-wi-chart-frame', { 'fi-wi-chart-frame-no-aspect-ratio': hasMaxHeight }])}"${hasMaxHeight ? ` style="min-height: ${e(maxHeight)}"` : ''}>${emptyState({ heading: t('filament-widgets::chart.empty.heading'), icon: 'o-x-mark', iconColor: 'gray', contained: false })}</div>`
+            ? `<div class="${cls(['fi-wi-chart-frame', { 'fi-wi-chart-frame-no-aspect-ratio': hasMaxHeight }])}"${hasMaxHeight ? ` style="min-height: ${e(maxHeight)}"` : ''}>${emptyState({ heading: this.getEmptyStateHeading(), description: this.getEmptyStateDescription() ?? undefined, icon: this.getEmptyStateIcon() ?? undefined, iconColor: 'gray', contained: false })}</div>`
             : '';
         const body = `<div${poll}${isEmpty ? ' style="display: none"' : ''}><div class="fi-wi-chart-image"${label ? ` role="img" aria-label="${e(label)}"` : ''}>${frame}</div>${assistive ? `<div class="fi-wi-chart-assistive-content fi-sr-only"><p>${e(assistive)}</p></div>` : ''}</div>${empty}`;
         return this.wrap(`<section x-data="{
@@ -2078,6 +2264,13 @@ export class Tab {
     badge(resolver) { this._badge = resolver; return this; }
     badgeColor(color) { this._badgeColor = color; this._hasBadgeColor = true; return this; }
     query(modifier) { this._query = modifier; return this; }
+    _icon = null;
+    _iconPosition = 'before';
+    /** Icon of the tab, before its label (or after, with `iconPosition('after')`). */
+    icon(name) { this._icon = name; return this; }
+    iconPosition(position) { this._iconPosition = position; return this; }
+    getIcon() { return this._icon; }
+    getIconPosition() { return this._iconPosition; }
     getLabel(key) { return this._label ?? ucfirst(key.replace(/[_-]+/g, ' ')); }
     hasBadge() { return this._badge !== null; }
     async getBadge() { return this._badge ? this._badge() : null; }
@@ -2132,7 +2325,7 @@ class ResourceTabs extends SchemaComponent {
  ${d}?.badgeIconHtml &&
  ${d}?.badgeIconPosition === 'after'
  "><span x-html="${d}.badgeIconHtml"></span></template></span></template>` : '';
-            return `<button id="fi-sc-tab-${createHash('md5').update(`${key}.${k}`).digest('hex')}" aria-pressed="${k === active ? 'true' : 'false'}" x-bind:aria-pressed="isTabSelected(${q(k)})" tabindex="0" x-bind:tabindex="getTabIndex(${q(k)})" data-tab-key="${e(k)}" x-bind:data-tab-available="Boolean(true).toString()" x-show="true" x-on:click.capture="if (! selectTab(${q(k)}, $event)) { $event.preventDefault(); $event.stopImmediatePropagation() }" x-bind:class="{ 'fi-active': isTabSelected(${q(k)}) }" type="button" wire:click="$set('activeTab', ${k === '' ? 'null' : q(k)})" class="${cls(['fi-tabs-item', { 'fi-active': k === active }])}"><span class="fi-tabs-item-label">${e(tab.getLabel(k))}</span>${badge}</button>`;
+            return `<button id="fi-sc-tab-${createHash('md5').update(`${key}.${k}`).digest('hex')}" aria-pressed="${k === active ? 'true' : 'false'}" x-bind:aria-pressed="isTabSelected(${q(k)})" tabindex="0" x-bind:tabindex="getTabIndex(${q(k)})" data-tab-key="${e(k)}" x-bind:data-tab-available="Boolean(true).toString()" x-show="true" x-on:click.capture="if (! selectTab(${q(k)}, $event)) { $event.preventDefault(); $event.stopImmediatePropagation() }" x-bind:class="{ 'fi-active': isTabSelected(${q(k)}) }" type="button" wire:click="$set('activeTab', ${k === '' ? 'null' : q(k)})" class="${cls(['fi-tabs-item', { 'fi-active': k === active }])}">${tab.getIcon() && tab.getIconPosition() === 'before' ? icon(tab.getIcon(), { attributes: new Attributes().class(['fi-tabs-item-icon']) }) : ''}<span class="fi-tabs-item-label">${e(tab.getLabel(k))}</span>${tab.getIcon() && tab.getIconPosition() === 'after' ? icon(tab.getIcon(), { attributes: new Attributes().class(['fi-tabs-item-icon']) }) : ''}${badge}</button>`;
         });
         return `<div x-data="tabsSchemaComponent({
  activeTab: ${Math.max(tabs.findIndex(([k]) => k === active), 0) + 1},
@@ -2194,10 +2387,73 @@ export class ListRecords extends Page {
             if (allowed.delete(key))
                 await adapter.update(key, { [column]: ++rank });
     }
+    /** Key of this table's persisted state: per page class (and resource or relationship). */
+    tableSessionKey(part) {
+        const page = this.constructor;
+        return ['tables', page.name, page.resource?.slug ?? '', page.relationship ?? '', part].join(':');
+    }
+    /** Session of the persisted table state: the browser (its CSRF token) and the signed-in user. */
+    tableSession() {
+        const ctx = this._ctx;
+        return ctx?.mailbox ? `${ctx.panel.getId()}:${ctx.user?.id ?? ''}:${ctx.mailbox}` : null;
+    }
+    async dehydrate() {
+        await super.dehydrate?.();
+        const table = this.getTable(), session = this.tableSession();
+        if (!session)
+            return;
+        const store = this._ctx.panel.getSessionStore();
+        if (table.persistsFiltersInSession())
+            await store.set(session, this.tableSessionKey('filters'), this.tableFilters);
+        if (table.persistsSearchInSession())
+            await store.set(session, this.tableSessionKey('search'), this.tableSearch);
+        if (table.persistsColumnSearchesInSession())
+            await store.set(session, this.tableSessionKey('column-searches'), this.tableColumnSearches);
+        if (table.persistsSortInSession())
+            await store.set(session, this.tableSessionKey('sort'), this.tableSort);
+        if (table.persistsGroupingInSession())
+            await store.set(session, this.tableSessionKey('grouping'), this.tableGrouping);
+    }
+    /** Restores the persisted table state; every value is sanitized like browser input. */
+    async restoreTableSession(table) {
+        const session = this.tableSession();
+        if (!session)
+            return;
+        const store = this._ctx.panel.getSessionStore();
+        if (table.persistsFiltersInSession()) {
+            const saved = await store.get(session, this.tableSessionKey('filters'));
+            if (saved && typeof saved === 'object') {
+                this.tableFilters = this.sanitizeTableFilters(saved);
+                this.tableDeferredFilters = JSON.parse(JSON.stringify(this.tableFilters));
+            }
+        }
+        if (table.persistsSearchInSession()) {
+            const saved = await store.get(session, this.tableSessionKey('search'));
+            if (typeof saved === 'string')
+                this.tableSearch = saved.slice(0, 1000);
+        }
+        if (table.persistsColumnSearchesInSession()) {
+            const saved = await store.get(session, this.tableSessionKey('column-searches'));
+            if (saved && typeof saved === 'object')
+                this.tableColumnSearches = Object.fromEntries(Object.entries(saved).filter(([name, value]) => typeof value === 'string' && table.getColumn(name)?.isIndividuallySearchable()).map(([name, value]) => [name, value.slice(0, 1000)]));
+        }
+        if (table.persistsSortInSession()) {
+            const saved = await store.get(session, this.tableSessionKey('sort'));
+            if (typeof saved === 'string' || saved === null)
+                this.tableSort = saved;
+        }
+        // Only a group the table declares is kept: `getTableGrouping()` ignores anything else.
+        if (table.persistsGroupingInSession()) {
+            const saved = await store.get(session, this.tableSessionKey('grouping'));
+            if (typeof saved === 'string' && saved.length <= 200)
+                this.tableGrouping = saved;
+        }
+    }
     async mount(_params = {}) {
         const table = this.getTable();
         this.tableFilters = table.getDefaultFilterState();
         this.tableDeferredFilters = table.getDefaultFilterState();
+        await this.restoreTableSession(table);
         this.tableColumns = table.getDefaultColumnState();
         // Preselect the default group.
         initializeTableGrouping(table, this);
@@ -2216,43 +2472,71 @@ export class ListRecords extends Page {
     /** Filters form: one group per filter, bound to `tableDeferredFilters.<filter>`. */
     tableFiltersFormSchema(schema) {
         const table = this.getTable();
-        // Above the content, filters spread over several columns; in the dropdown, a single one.
-        const columns = table.getFiltersLayout() === 'above-content-collapsible' ? { sm: 2, lg: 3, xl: 4, '2xl': 5 } : 1;
-        return schema.statePath('tableDeferredFilters').columns(columns).partiallyRendered().components(table.getFilters().map((filter) => {
+        // Deferred filters edit a copy applied by the "Apply" button; otherwise the form edits the applied state, field by field.
+        const deferred = table.hasDeferredFilters();
+        const groups = table.getFilters().map((filter) => {
             // A filter may provide its own form (query builder); otherwise it is a select.
             const custom = filter.getFormComponents?.();
             if (custom)
                 return StatefulGroup.make(filter.name, custom).columnSpan(filter.getColumnSpan?.() ?? { default: 1, lg: 1 });
             const definition = filter.getFormDefinition();
             return StatefulGroup.make(filter.name, [Select.make('value').label(filter.getLabel()).placeholder(definition.placeholder).options(filter.getFormOptions ? () => filter.getFormOptions() : definition.options)]).columnSpan({ default: 1, lg: 1 });
+        });
+        // `filtersFormSchema()`: the application arranges the filter groups (sections, columns...).
+        const arrange = table.getFiltersFormSchema();
+        const components = arrange ? arrange(Object.fromEntries(table.getFilters().map((filter, index) => [filter.name, groups[index]]))) : groups;
+        const built = schema.statePath(deferred ? 'tableDeferredFilters' : 'tableFilters').columns(table.getFiltersFormColumns()).partiallyRendered().components(components);
+        if (!deferred)
+            for (const component of built.getFlatComponents())
+                if (component instanceof Field)
+                    component.live();
+        return built;
+    }
+    /** Applied state of every declared filter, sanitized from the given (browser) state. */
+    sanitizeTableFilters(source) {
+        return Object.fromEntries(this.getTable().getFilters().map((filter) => {
+            const received = source?.[filter.name];
+            if (filter.sanitizeState)
+                return [filter.name, filter.sanitizeState(received)];
+            return [filter.name, Object.fromEntries(Object.keys(filter.getDefaultState()).map((key) => [key, received?.[key] ?? null]))];
         }));
     }
+    /** Live filters (`deferFilters(false)`): a changed field applies at once. */
+    async updatedTableFilters(value, key) {
+        if (this.getTable().hasDeferredFilters()) {
+            this.tableFilters = this.sanitizeTableFilters(this.tableFilters);
+            return;
+        }
+        await this.runFilterFieldHook('tableFilters', key);
+        this.tableFilters = this.sanitizeTableFilters(this.tableFilters);
+        this.tableDeferredFilters = JSON.parse(JSON.stringify(this.tableFilters));
+        this.paginators.page = 1;
+        this.dispatch('deselectAllTableRecords', [], { self: true });
+    }
     applyTableFilters() {
         // Only filters declared by the table reach the applied state: each sanitizes its own state, or else only its known keys are kept.
-        this.tableFilters = Object.fromEntries(this.getTable().getFilters().map((filter) => {
-            const deferred = this.tableDeferredFilters?.[filter.name];
-            if (filter.sanitizeState)
-                return [filter.name, filter.sanitizeState(deferred)];
-            return [filter.name, Object.fromEntries(Object.keys(filter.getDefaultState()).map((key) => [key, deferred?.[key] ?? null]))];
-        }));
+        this.tableFilters = this.sanitizeTableFilters(this.tableDeferredFilters);
         this.paginators.page = 1;
     }
     /** Removes an active filter indicator: the field is cleared from both the applied state and the form. */
-    removeTableFilter(filterName, field = null) {
-        const filter = this.getTable().getFilters().find((candidate) => candidate.name === filterName);
-        if (!filter)
+    async removeTableFilter(filterName, field = null) {
+        const table = this.getTable();
+        const filter = table.getFilters().find((candidate) => candidate.name === filterName);
+        // A filter showing a non-removable indicator cannot be removed by a forged call either.
+        if (!filter || !(await isTableFilterRemovable(table, this, filter.name)))
             return;
         const current = this.tableFilters?.[filter.name];
-        const next = filter.removeIndicator && typeof field === 'string' && current && typeof current === 'object' ? filter.removeIndicator(current, field) : filter.getDefaultState();
+        const next = filter.removeIndicator && typeof field === 'string' && current && typeof current === 'object' ? filter.removeIndicator(current, field) : (filter.getResetState?.() ?? filter.getDefaultState());
         this.tableFilters = { ...this.tableFilters, [filter.name]: next };
         this.tableDeferredFilters = { ...this.tableDeferredFilters, [filter.name]: JSON.parse(JSON.stringify(next)) };
         this.paginators.page = 1;
     }
     /** Live field in the filters form (e.g. a rule's operator changed): runs its `afterStateUpdated`. */
-    async updatedTableDeferredFilters(_value, key) {
+    async updatedTableDeferredFilters(_value, key) { await this.runFilterFieldHook('tableDeferredFilters', key); }
+    async runFilterFieldHook(property, key) {
         if (!key)
             return;
-        const path = `tableDeferredFilters.${key}`;
+        const path = `${property}.${key}`;
         const field = this.getSchema('tableFiltersForm').getFlatComponents().find((c) => c instanceof Field && c.getStatePath() === path);
         if (!field?.hasAfterStateUpdated())
             return;
@@ -2273,7 +2557,21 @@ export class ListRecords extends Page {
         this.paginators.page = 1;
         this.dispatch('deselectAllTableRecords', [], { self: true });
     }
-    removeTableFilters() { this.resetTableFiltersForm(); }
+    /** "Remove all": resets every removable filter (to its empty state, not its default), the search and the column searches. */
+    async removeTableFilters() {
+        const table = this.getTable();
+        for (const filter of table.getFilters()) {
+            if (!(await isTableFilterRemovable(table, this, filter.name)))
+                continue;
+            const reset = filter.getResetState?.() ?? filter.getDefaultState();
+            this.tableFilters = { ...this.tableFilters, [filter.name]: reset };
+            this.tableDeferredFilters = { ...this.tableDeferredFilters, [filter.name]: JSON.parse(JSON.stringify(reset)) };
+        }
+        this.tableSearch = '';
+        this.tableColumnSearches = {};
+        this.paginators.page = 1;
+        this.dispatch('deselectAllTableRecords', [], { self: true });
+    }
     applyTableColumnManager(state = null, _wasReordered = false) { if (state)
         this.tableColumns = sanitizeColumnState(this.getTable(), state); }
     resetTableColumnManager() { this.tableColumns = this.getTable().getDefaultColumnState(); }
@@ -2300,7 +2598,11 @@ export class ListRecords extends Page {
     rendersActionModalsInPage() { return false; }
     getBulkActions() { return this.getTable().getBulkActions() ?? [DeleteBulkAction.make()]; }
     /** Row actions declared by the table, with groups flattened. */
-    getRecordActions() { return this.getTable().getRecordActions().flatMap((a) => (a instanceof ActionGroup ? a.getActions() : [a])); }
+    getRecordActions() {
+        const table = this.getTable();
+        // Column actions are record actions too: mounted with the record key, and checked the same way.
+        return [...table.getRecordActions().flatMap((a) => (a instanceof ActionGroup ? a.getActions() : [a])), ...table.getColumnActions()];
+    }
     getMountableActions(context) {
         if (typeof context.schemaComponent === 'string')
             return this.getSchemaComponentActions(context.schemaComponent);
@@ -2309,8 +2611,8 @@ export class ListRecords extends Page {
         if (context.table === true && typeof context.recordKey === 'string')
             return this.getRecordActions();
         if (context.table === true)
-            return this.getTable().getHeaderActions();
-        return this.getHeaderActions();
+            return flattenActions([...this.getTable().getHeaderActions(), ...this.getTable().getToolbarActions(), ...this.getTable().getEmptyStateActions()]);
+        return flattenActions(this.getHeaderActions());
     }
     /** Only known context shapes are kept; the record key is checked again in the database on mount. */
     resolveMountContext(clientContext) {
@@ -2339,11 +2641,73 @@ export class ListRecords extends Page {
     /** Selected keys: the sent list, or, in "select all" mode, every record of the current query except deselected ones. */
     async getSelectedRecordKeys() {
         const clean = (list) => (Array.isArray(list) ? list.filter((k) => typeof k === 'string' || typeof k === 'number').map(String) : []);
+        const table = this.getTable(), adapter = this.getDataAdapterForTable();
+        let keys;
         // The selection comes from the browser: it is narrowed to records this table can actually display.
         if (!this.isTrackingDeselectedTableRecords)
-            return this.resource.adapter.keysInScope(clean(this.selectedTableRecords));
-        const excluded = new Set(clean(this.deselectedTableRecords));
-        return (await this.resource.adapter.listKeys(getTableQuery(this.getTable(), this))).filter((k) => !excluded.has(k));
+            keys = await adapter.keysInScope(clean(this.selectedTableRecords));
+        else {
+            const excluded = new Set(clean(this.deselectedTableRecords));
+            // "Select all" covers the whole query, or only the current page with `selectCurrentPageOnly()`.
+            const all = table.selectsCurrentPageOnly() ? (await getTableRecords(table, this, adapter)).records.map((record) => adapter.getKey(record)) : await adapter.listKeys(getTableQuery(table, this));
+            keys = all.filter((k) => !excluded.has(k));
+        }
+        // Records that cannot be selected, and anything beyond `maxSelectableRecords()`, are dropped whatever the browser sent.
+        keys = await filterSelectableKeys(table, adapter, keys);
+        const max = table.getMaxSelectableRecords();
+        return max !== null ? keys.slice(0, max) : keys;
+    }
+    /**
+     * Runs `process` for each selected record, loaded in chunks of `chunkSelectedRecords()`. Records failing the action's
+     * `authorizeIndividualRecords()` are skipped; `process` reports a failure by returning `false` or throwing. Then sends the
+     * action's success notification, or its failure notification with the number of records skipped and failed.
+     */
+    async processSelectedRecords(action, process) {
+        const keys = await this.getSelectedRecordKeys();
+        const adapter = this.getDataAdapterForTable();
+        const authorization = action.getIndividualRecordsAuthorization();
+        const ctx = { livewire: this, record: null, arguments: {}, data: {}, action };
+        let success = 0, unauthorized = 0, failed = 0;
+        const size = action.getSelectedRecordsChunkSize();
+        for (let index = 0; index < keys.length; index += size) {
+            const records = await Promise.all(keys.slice(index, index + size).map((key) => adapter.find(key)));
+            for (const record of records) {
+                if (!record) {
+                    failed++;
+                    continue;
+                }
+                const allowed = authorization === null ? true : typeof authorization === 'string' ? await canOn(this, authorization, record) : await authorization(record, { ...ctx, record });
+                if (!allowed) {
+                    unauthorized++;
+                    continue;
+                }
+                try {
+                    if ((await process(record)) === false)
+                        failed++;
+                    else
+                        success++;
+                }
+                catch (error) {
+                    failed++;
+                    if (failed === 1)
+                        console.error(error);
+                }
+            }
+        }
+        const total = keys.length;
+        if (unauthorized + failed === 0) {
+            const title = action.getSuccessNotificationTitle();
+            if (title)
+                Notification.make().success().title(title).send();
+        }
+        else {
+            const body = [action.getMissingBulkAuthorizationFailureNotificationMessage(unauthorized, total) && unauthorized ? action.getMissingBulkAuthorizationFailureNotificationMessage(unauthorized, total) : null, failed ? action.getMissingBulkProcessingFailureNotificationMessage(failed, total) : null].filter(Boolean).join(' ');
+            const notification = Notification.make().title(action.getFailureNotificationTitle(success, total) ?? action.getSuccessNotificationTitle() ?? '');
+            (success ? notification.warning() : notification.danger()).body(body || null).send();
+        }
+        if (action.shouldDeselectRecordsAfterCompletion())
+            this.deselectAllTableRecords();
+        return { total, success, unauthorized, failed };
     }
     deselectAllTableRecords() {
         this.selectedTableRecords = [];
@@ -2366,7 +2730,7 @@ export class ListRecords extends Page {
                 bulkActions.push(await action.toGroupedHtml(ctx, { table: true, bulk: true }));
         const table = this.getTable();
         return renderTable(table, this, resource.adapter, {
-            bulkActions, headerActions: await this.renderTableHeaderActions(ctx), after: await this.renderActionModals(),
+            bulkActions, headerActions: await this.renderTableHeaderActions(ctx), toolbarActions: await this.renderTableToolbarActions(ctx), emptyStateActions: await this.renderTableEmptyStateActions(ctx), after: await this.renderActionModals(),
             filtersForm: table.getFilters().length ? await this.getSchema('tableFiltersForm').toHtml() : null,
             rowActionsHtml: table.getRecordActions().length ? async (record) => {
                 const key = resource.adapter.getKey(record);
@@ -2385,7 +2749,21 @@ export class ListRecords extends Page {
             rowActions: async (record) => resource.isSimple || table.getRecordActions().length || !(await canOn(this, 'update', record)) ? [] : [{ label: t('filament-actions::edit.single.label'), url: resource.getUrl('edit', resource.adapter.getKey(record)), icon: 'c-pencil-square', key: `edit.${createHash('md5').update(resource.adapter.getKey(record)).digest('hex')}` }],
         });
     }
+    async renderTableEmptyStateActions(ctx) {
+        const html = [];
+        for (const action of this.getTable().getEmptyStateActions())
+            if (await action.isVisible(ctx))
+                html.push(await action.toHtml(ctx, { table: true }));
+        return html;
+    }
     /** Table header actions (none on a list page: they go in the page header). */
+    async renderTableToolbarActions(ctx) {
+        const html = [];
+        for (const action of this.getTable().getToolbarActions())
+            if (await action.isVisible(ctx))
+                html.push(await action.toHtml(ctx, { table: true }));
+        return html;
+    }
     async renderTableHeaderActions(ctx) {
         const html = [];
         for (const action of this.getTable().getHeaderActions())
@@ -2468,6 +2846,15 @@ export class RelationManager extends ListRecords {
     static searchAttachable(_ownerKey, _search) { throw new Error('RelationManager.searchAttachable() must be defined.'); }
     /** Label of an attachable record, or `null` if it is not attachable (also used as validation). */
     static attachableLabel(_ownerKey, _recordKey) { throw new Error('RelationManager.attachableLabel() must be defined.'); }
+    // --- one-to-many: to be defined by managers offering Associate / Dissociate
+    /** Sets the owner of an existing record (its foreign key). */
+    static associate(_ownerKey, _recordKey) { throw new Error('RelationManager.associate() must be defined.'); }
+    /** Clears the owner of records (their foreign key), without deleting them. */
+    static dissociate(_ownerKey, _recordKeys) { throw new Error('RelationManager.dissociate() must be defined.'); }
+    /** Associable records matching the search: [key, label]. */
+    static searchAssociable(_ownerKey, _search) { throw new Error('RelationManager.searchAssociable() must be defined.'); }
+    /** Label of an associable record, or `null` if it is not associable (also used as validation). */
+    static associableLabel(_ownerKey, _recordKey) { throw new Error('RelationManager.associableLabel() must be defined.'); }
     getHeaderActions() { return []; }
     placeholder() {
         return `<div role="status" aria-busy="true" style="height: 8rem; ;" class="fi-section fi-loading-section fi-grid-col"><span class="fi-sr-only">${e(t('filament::components/loading-section.label'))}</span></div>`;
@@ -2640,11 +3027,23 @@ class ResourceFormPage extends Page {
         return Action.make('cancel').label(t(`filament-panels::resources/pages/${this.getOperation()}-record.form.actions.cancel.label`)).color('gray')
             .alpineClickHandler(`document.referrer ? window.history.back() : Livewire.navigate(${js(this.getCancelUrl())})`);
     }
+    // --- lifecycle hooks around filling and validation (to override; none can be called from the browser)
+    /** Before the form is filled (with defaults, or with the record on the edit page). */
+    beforeFill() { }
+    /** After the form is filled. */
+    afterFill() { }
+    /** Before the form is validated, when it is submitted. */
+    beforeValidate() { }
+    /** After the form is validated successfully, before the data is transformed and saved. */
+    afterValidate() { }
     /** Validates the form; on error, sets the errors on the component and notifies the browser. */
     async validateForm() {
+        await this.beforeValidate();
         this._errors = await validateSchema(this.getSchema('form'));
-        if (!Object.keys(this._errors).length)
+        if (!Object.keys(this._errors).length) {
+            await this.afterValidate();
             return true;
+        }
         this.dispatch('form-validation-error', { livewireId: this.id });
         return false;
     }
@@ -2652,7 +3051,7 @@ class ResourceFormPage extends Page {
 /** Record creation page. */
 export class CreateRecord extends ResourceFormPage {
     static callable = ['create', 'createAnother'];
-    mount() { fillSchema(this.getSchema('form'), this.data); }
+    async mount() { await this.beforeFill(); fillSchema(this.getSchema('form'), this.data); await this.afterFill(); }
     getOperation() { return 'create'; }
     getSubmitMethod() { return 'create'; }
     getTitle() { return t('filament-panels::resources/pages/create-record.title', { label: this.resource.modelLabel.split(' ').map(ucfirst).join(' ') }); }
@@ -2686,6 +3085,7 @@ export class CreateRecord extends ResourceFormPage {
         const data = await this.mutateFormDataBeforeCreate(await getSchemaState(this.getSchema('form')));
         await this.beforeCreate(data);
         const record = await this.handleRecordCreation(data);
+        await saveSchemaRelationships(this.getSchema('form'), record);
         await this.afterCreate(record);
         const title = this.getCreatedNotificationTitle();
         if (title !== null)
@@ -2710,34 +3110,62 @@ export class DeleteAction {
             .hidden(({ livewire, record }) => { const target = record ?? livewire._record; return target ? livewire.getDataAdapter().isTrashed(target) : false; })
             .modalHeading(({ livewire, record }) => t('filament-actions::delete.single.modal.heading', { label: livewire.resource.getRecordTitle(record ?? livewire._record) }))
             .modalSubmitActionLabel(t('filament-actions::delete.single.modal.actions.delete.label'))
-            .action(async ({ livewire, record }) => {
+            .action(async (ctx) => {
+            const { livewire, record } = ctx;
             const adapter = livewire.getDataAdapter();
             const inTable = typeof livewire.getTable === 'function';
             await adapter.delete(inTable ? adapter.getKey(record) : livewire.recordKey);
-            Notification.make().success().title(t('filament-actions::delete.single.notifications.deleted.title')).send();
-            if (!inTable)
-                livewire.redirect(livewire.resource.getUrl(), true);
+            await finishAction(ctx.action, ctx, t('filament-actions::delete.single.notifications.deleted.title'), inTable ? null : livewire.resource.getUrl());
         });
     }
 }
+/**
+ * Success outcome of a prebuilt action: its notification (`successNotificationTitle()`, `successNotification()`), then the
+ * redirect (`successRedirectUrl()`, or `fallbackUrl`). Only local or http(s) URLs are followed.
+ */
+async function finishAction(action, ctx, defaultTitle, fallbackUrl = null) {
+    let notification = Notification.make().success().title(action.getSuccessNotificationTitle() ?? defaultTitle);
+    const customize = action.getSuccessNotificationCustomizer();
+    if (customize)
+        notification = customize(notification, ctx);
+    notification?.send();
+    const url = (await action.getSuccessRedirectUrl(ctx)) ?? fallbackUrl;
+    if (url && /^(\/(?!\/)|https?:\/\/)/.test(url))
+        ctx.livewire.redirect(url, true);
+}
 /** Duplicates a table row: the copy takes the record's attributes, except its key, timestamps and excluded ones. */
 export class ReplicateAction {
     static make() {
         let excluded = [];
+        let beforeSaved = null, afterSaved = null;
         const action = Action.make('replicate').authorize(({ livewire, record }) => canOn(livewire, 'replicate', record))
             .label(t('filament-actions::replicate.single.label')).tableIcon('c-square-2-stack').groupedIcon('m-square-2-stack')
             .modalHeading(({ livewire, record }) => t('filament-actions::replicate.single.modal.heading', { label: livewire.resource.getRecordTitle(record) }))
             .modalSubmitActionLabel(t('filament-actions::replicate.single.modal.actions.replicate.label'))
-            .action(async ({ livewire, record }) => {
+            // With a modal form (`schema()`), it is filled with the record's attributes; its data overrides them in the copy.
+            .fillForm(({ record }) => {
+            const source = typeof record?.toJSON === 'function' ? record.toJSON() : { ...record };
+            for (const attribute of ['id', 'created_at', 'updated_at', ...excluded])
+                delete source[attribute];
+            return source;
+        })
+            .action(async (ctx) => {
+            const { livewire, record } = ctx;
             const adapter = livewire.getDataAdapter();
             const source = typeof record?.toJSON === 'function' ? record.toJSON() : { ...record };
             // No primary key, no created/updated timestamps.
             for (const attribute of ['id', 'created_at', 'updated_at', ...excluded])
                 delete source[attribute];
-            await adapter.create(source);
-            Notification.make().success().title(t('filament-actions::replicate.single.notifications.replicated.title')).send();
+            const data = ctx.data ?? {};
+            const replica = { ...source, ...data };
+            await beforeSaved?.({ replica, data, record });
+            const saved = await adapter.create(replica);
+            await afterSaved?.({ replica: saved, data, record });
+            await finishAction(ctx.action, { ...ctx, replica: saved }, t('filament-actions::replicate.single.notifications.replicated.title'));
         });
         action.excludeAttributes = (attributes) => { excluded = attributes; return action; };
+        action.beforeReplicaSaved = (callback) => { beforeSaved = callback; return action; };
+        action.afterReplicaSaved = (callback) => { afterSaved = callback; return action; };
         return action;
     }
 }
@@ -2752,9 +3180,10 @@ export class CreateAction {
             .modalSubmitActionLabel(t('filament-actions::create.single.modal.actions.create.label'))
             .extraModalFooterActions([Action.make('createAnother').label(t('filament-actions::create.single.modal.actions.create_another.label')).color('gray').action(`callMountedAction(${js({ another: true })})`)])
             .schema((schema) => of(schema.livewire).form(schema))
-            .action(async ({ livewire, data }) => {
-            await of(livewire).adapter.create(data);
-            Notification.make().success().title(t('filament-actions::create.single.notifications.created.title')).send();
+            .action(async (ctx) => {
+            const record = await of(ctx.livewire).adapter.create(ctx.data);
+            await saveSchemaRelationships(ctx.schema, record);
+            await finishAction(ctx.action, { ...ctx, record }, t('filament-actions::create.single.notifications.created.title'));
         });
     }
 }
@@ -2769,10 +3198,11 @@ export class EditAction {
             .modalSubmitActionLabel(t('filament-actions::edit.single.modal.actions.save.label'))
             .schema((schema) => of(schema.livewire).form(schema))
             .fillForm(({ record }) => ({ ...record }))
-            .action(async ({ livewire, record, data }) => {
-            const adapter = of(livewire).adapter;
-            await adapter.update(adapter.getKey(record), data);
-            Notification.make().success().title(t('filament-actions::edit.single.notifications.saved.title')).send();
+            .action(async (ctx) => {
+            const adapter = of(ctx.livewire).adapter;
+            const saved = await adapter.update(adapter.getKey(ctx.record), ctx.data);
+            await saveSchemaRelationships(ctx.schema, saved ?? ctx.record);
+            await finishAction(ctx.action, ctx, t('filament-actions::edit.single.notifications.saved.title'));
         });
     }
 }
@@ -2840,6 +3270,56 @@ export class DetachBulkAction {
         });
     }
 }
+/** Gives an existing record to the owner of a one-to-many relation manager (its foreign key). */
+export class AssociateAction {
+    static make() {
+        return Action.make('associate')
+            .label(t('filament-actions::associate.single.label')).color('gray').modalWidth('lg')
+            .modalHeading(({ livewire }) => t('filament-actions::associate.single.modal.heading', { label: String(livewire.resource.modelLabel).split(' ').map(ucfirst).join(' ') }))
+            .modalSubmitActionLabel(t('filament-actions::associate.single.modal.actions.associate.label'))
+            .extraModalFooterActions([Action.make('associateAnother').label(t('filament-actions::associate.single.modal.actions.associate_another.label')).color('gray').action(`callMountedAction(${js({ another: true })})`)])
+            .schema((schema) => {
+            const livewire = schema.livewire;
+            return [Select.make('recordId').label(t('filament-actions::associate.single.modal.fields.record_id.label')).hiddenLabel().required()
+                    .getSearchResultsUsing((search) => managerOf(livewire).searchAssociable(livewire.ownerRecord, search))
+                    .getOptionLabelUsing((value) => managerOf(livewire).associableLabel(livewire.ownerRecord, value))];
+        })
+            .action(async ({ livewire, data }) => {
+            await managerOf(livewire).associate(livewire.ownerRecord, String(data.recordId));
+            Notification.make().success().title(t('filament-actions::associate.single.notifications.associated.title')).send();
+        });
+    }
+}
+/** Removes a row from the owner (clears its foreign key) without deleting it. */
+export class DissociateAction {
+    static make() {
+        return Action.make('dissociate')
+            .label(t('filament-actions::dissociate.single.label')).color('danger').icon('c-x-mark').groupedIcon('m-x-mark')
+            .requiresConfirmation().modalIcon('o-x-mark')
+            .modalHeading(({ livewire, record }) => t('filament-actions::dissociate.single.modal.heading', { label: livewire.resource.getRecordTitle(record) }))
+            .modalSubmitActionLabel(t('filament-actions::dissociate.single.modal.actions.dissociate.label'))
+            .action(async ({ livewire, record }) => {
+            await managerOf(livewire).dissociate(livewire.ownerRecord, [livewire.resource.adapter.getKey(record)]);
+            Notification.make().success().title(t('filament-actions::dissociate.single.notifications.dissociated.title')).send();
+        });
+    }
+}
+/** Dissociates the selected rows. */
+export class DissociateBulkAction {
+    static make() {
+        return Action.make('dissociate')
+            .label(t('filament-actions::dissociate.multiple.label')).color('danger').icon('m-x-mark')
+            .requiresConfirmation().modalIcon('o-x-mark')
+            .modalHeading(({ livewire }) => t('filament-actions::dissociate.multiple.modal.heading', { label: livewire.resource.getPluralModelLabel() }))
+            .modalSubmitActionLabel(t('filament-actions::dissociate.multiple.modal.actions.dissociate.label'))
+            .action(async ({ livewire }) => {
+            // Selected keys come from the manager's current query, so they belong to the owner.
+            await managerOf(livewire).dissociate(livewire.ownerRecord, await livewire.getSelectedRecordKeys());
+            Notification.make().success().title(t('filament-actions::dissociate.multiple.notifications.dissociated.title')).send();
+            livewire.deselectAllTableRecords();
+        });
+    }
+}
 /** Restores a soft-deleted record. Only visible when the record is deleted. */
 export class RestoreAction {
     static make() {
@@ -2849,10 +3329,10 @@ export class RestoreAction {
             .hidden(({ livewire }) => !livewire.getDataAdapter().isTrashed(livewire._record))
             .modalHeading(({ livewire }) => t('filament-actions::restore.single.modal.heading', { label: livewire.resource.getRecordTitle(livewire._record) }))
             .modalSubmitActionLabel(t('filament-actions::restore.single.modal.actions.restore.label'))
-            .action(async ({ livewire }) => {
-            await livewire.getDataAdapter().restore(livewire.recordKey);
-            await livewire.hydrate();
-            Notification.make().success().title(t('filament-actions::restore.single.notifications.restored.title')).send();
+            .action(async (ctx) => {
+            await ctx.livewire.getDataAdapter().restore(ctx.livewire.recordKey);
+            await ctx.livewire.hydrate();
+            await finishAction(ctx.action, ctx, t('filament-actions::restore.single.notifications.restored.title'));
         });
     }
 }
@@ -2865,28 +3345,93 @@ export class ForceDeleteAction {
             .hidden(({ livewire }) => !livewire.getDataAdapter().isTrashed(livewire._record))
             .modalHeading(({ livewire }) => t('filament-actions::force-delete.single.modal.heading', { label: livewire.resource.getRecordTitle(livewire._record) }))
             .modalSubmitActionLabel(t('filament-actions::force-delete.single.modal.actions.delete.label'))
-            .action(async ({ livewire }) => {
-            await livewire.getDataAdapter().forceDelete(livewire.recordKey);
-            Notification.make().success().title(t('filament-actions::force-delete.single.notifications.deleted.title')).send();
-            livewire.redirect(livewire.resource.getUrl(), true);
+            .action(async (ctx) => {
+            await ctx.livewire.getDataAdapter().forceDelete(ctx.livewire.recordKey);
+            await finishAction(ctx.action, ctx, t('filament-actions::force-delete.single.notifications.deleted.title'), ctx.livewire.resource.getUrl());
         });
     }
 }
-/** Deletes the records selected in a table. */
+/** Actions of a list that may contain action groups: the groups' actions are mounted, never the groups. */
+const flattenActions = (actions) => actions.flatMap((action) => (action instanceof ActionGroup ? action.getActions() : [action]));
+/** Value of the table's trashed filter: `'1'` with deleted records, `'0'` only deleted records, `null` without. */
+const trashedFilterValue = (livewire) => {
+    const filter = livewire.getTable?.().getFilters().find((candidate) => candidate instanceof TrashedFilter);
+    const value = filter ? livewire.tableFilters?.[filter.name]?.value : null;
+    return value === '1' || value === '0' ? value : null;
+};
+/**
+ * Deletes the records selected in a table. Without `authorizeIndividualRecords()`, the selection is deleted in one query;
+ * with it, record by record, and the notification reports the records that could not be deleted.
+ */
 export class DeleteBulkAction {
     static make() {
         return Action.make('delete').authorize(({ livewire, record }) => canOn(livewire, 'deleteAny', record))
             .label(t('filament-actions::delete.multiple.label')).color('danger').icon('m-trash')
             .requiresConfirmation().modalIcon('o-trash')
+            // Showing only deleted records: there is nothing left to delete.
+            .hidden(({ livewire }) => trashedFilterValue(livewire) === '0')
             .modalHeading(({ livewire }) => t('filament-actions::delete.multiple.modal.heading', { label: livewire.resource.getTitleCasePluralModelLabel() }))
             .modalSubmitActionLabel(t('filament-actions::delete.multiple.modal.actions.delete.label'))
-            .action(async ({ livewire }) => {
-            await livewire.getDataAdapterForTable().deleteMany(await livewire.getSelectedRecordKeys());
-            Notification.make().success().title(t('filament-actions::delete.multiple.notifications.deleted.title')).send();
+            .successNotificationTitle(t('filament-actions::delete.multiple.notifications.deleted.title'))
+            .failureNotificationTitle((success, total) => (success ? tc('filament-actions::delete.multiple.notifications.deleted_partial.title', success, { count: success, total }) : tc('filament-actions::delete.multiple.notifications.deleted_none.title', total, { count: total, total })))
+            .missingBulkAuthorizationFailureNotificationMessage((count, total) => tc(`filament-actions::delete.multiple.notifications.${count === total ? 'deleted_none' : 'deleted_partial'}.missing_authorization_failure_message`, count, { count }))
+            .missingBulkProcessingFailureNotificationMessage((count, total) => tc(`filament-actions::delete.multiple.notifications.${count === total ? 'deleted_none' : 'deleted_partial'}.missing_processing_failure_message`, count, { count }))
+            .deselectRecordsAfterCompletion()
+            .action(async ({ livewire, action }) => {
+            const adapter = livewire.getDataAdapterForTable();
+            if (action.getIndividualRecordsAuthorization() !== null) {
+                await livewire.processSelectedRecords(action, (record) => adapter.delete(adapter.getKey(record)));
+                return;
+            }
+            await adapter.deleteMany(await livewire.getSelectedRecordKeys());
+            Notification.make().success().title(action.getSuccessNotificationTitle() ?? t('filament-actions::delete.multiple.notifications.deleted.title')).send();
             livewire.deselectAllTableRecords();
         });
     }
 }
+/** Restores the soft-deleted records selected in a table, each one checked with the `restore` ability. */
+export class RestoreBulkAction {
+    static make() {
+        return Action.make('restore').authorize(({ livewire, record }) => canOn(livewire, 'restoreAny', record))
+            .label(t('filament-actions::restore.multiple.label')).color('gray').icon('m-arrow-uturn-left')
+            .requiresConfirmation().modalIcon('o-arrow-uturn-left')
+            .hidden(({ livewire }) => trashedFilterValue(livewire) === null)
+            .modalHeading(({ livewire }) => t('filament-actions::restore.multiple.modal.heading', { label: livewire.resource.getTitleCasePluralModelLabel() }))
+            .modalSubmitActionLabel(t('filament-actions::restore.multiple.modal.actions.restore.label'))
+            .authorizeIndividualRecords('restore')
+            .successNotificationTitle(t('filament-actions::restore.multiple.notifications.restored.title'))
+            .failureNotificationTitle((success, total) => (success ? tc('filament-actions::restore.multiple.notifications.restored_partial.title', success, { count: success, total }) : tc('filament-actions::restore.multiple.notifications.restored_none.title', total, { count: total, total })))
+            .missingBulkAuthorizationFailureNotificationMessage((count, total) => tc(`filament-actions::restore.multiple.notifications.${count === total ? 'restored_none' : 'restored_partial'}.missing_authorization_failure_message`, count, { count }))
+            .missingBulkProcessingFailureNotificationMessage((count, total) => tc(`filament-actions::restore.multiple.notifications.${count === total ? 'restored_none' : 'restored_partial'}.missing_processing_failure_message`, count, { count }))
+            .deselectRecordsAfterCompletion()
+            .action(async ({ livewire, action }) => {
+            const adapter = livewire.getDataAdapterForTable();
+            // Only deleted records are restored; the others count as failures.
+            await livewire.processSelectedRecords(action, (record) => adapter.isTrashed(record) && adapter.restore(adapter.getKey(record)));
+        });
+    }
+}
+/** Permanently deletes the soft-deleted records selected in a table, each one checked with the `forceDelete` ability. */
+export class ForceDeleteBulkAction {
+    static make() {
+        return Action.make('forceDelete').authorize(({ livewire, record }) => canOn(livewire, 'forceDeleteAny', record))
+            .label(t('filament-actions::force-delete.multiple.label')).color('danger').icon('m-trash')
+            .requiresConfirmation().modalIcon('o-trash')
+            .hidden(({ livewire }) => trashedFilterValue(livewire) === null)
+            .modalHeading(({ livewire }) => t('filament-actions::force-delete.multiple.modal.heading', { label: livewire.resource.getTitleCasePluralModelLabel() }))
+            .modalSubmitActionLabel(t('filament-actions::force-delete.multiple.modal.actions.delete.label'))
+            .authorizeIndividualRecords('forceDelete')
+            .successNotificationTitle(t('filament-actions::force-delete.multiple.notifications.deleted.title'))
+            .failureNotificationTitle((success, total) => (success ? tc('filament-actions::force-delete.multiple.notifications.deleted_partial.title', success, { count: success, total }) : tc('filament-actions::force-delete.multiple.notifications.deleted_none.title', total, { count: total, total })))
+            .missingBulkAuthorizationFailureNotificationMessage((count, total) => tc(`filament-actions::force-delete.multiple.notifications.${count === total ? 'deleted_none' : 'deleted_partial'}.missing_authorization_failure_message`, count, { count }))
+            .missingBulkProcessingFailureNotificationMessage((count, total) => tc(`filament-actions::force-delete.multiple.notifications.${count === total ? 'deleted_none' : 'deleted_partial'}.missing_processing_failure_message`, count, { count }))
+            .deselectRecordsAfterCompletion()
+            .action(async ({ livewire, action }) => {
+            const adapter = livewire.getDataAdapterForTable();
+            await livewire.processSelectedRecords(action, (record) => adapter.forceDelete(adapter.getKey(record)));
+        });
+    }
+}
 /** Record edit page. */
 export class EditRecord extends ResourceFormPage {
     static callable = ['save'];
@@ -2910,7 +3455,10 @@ export class EditRecord extends ResourceFormPage {
         this.recordKey = String(params.record ?? '');
         this.previousUrl = previousUrlOf(this._ctx?.req);
         await this.hydrate();
+        await this.beforeFill();
         fillSchemaFromRecord(this.getSchema('form'), this.data, await this.mutateFormDataBeforeFill({ ...this._record }));
+        await loadSchemaRelationships(this.getSchema('form'), this.data, this._record);
+        await this.afterFill();
     }
     /** The record is reloaded on every request (no route model binding). */
     async hydrate() {
@@ -2967,6 +3515,7 @@ export class EditRecord extends ResourceFormPage {
         const data = await this.mutateFormDataBeforeSave(await getSchemaState(this.getSchema('form')));
         await this.beforeSave(data);
         this._record = await this.handleRecordUpdate(this._record, data);
+        await saveSchemaRelationships(this.getSchema('form'), this._record);
         await this.afterSave(this._record);
         const title = this.getSavedNotificationTitle();
         if (title !== null)
@@ -3047,6 +3596,7 @@ async function renderUserMenu(component, position) {
         profileUrl: profileUrl && !custom.profile ? profileUrl : null,
         itemsBefore: await html(visible.filter((item) => item.getSort() < 0)), itemsAfter: await html(visible.filter((item) => item.getSort() >= 0)),
         themes: panel.getThemes().map((theme) => ({ id: theme.id, label: theme.label, swatch: swatchOf(theme, panel) })), activeTheme: panel.resolveTheme(req)?.id ?? null,
+        hasThemeSwitcher: panel.hasDarkMode() && !panel.hasDarkModeForced(), defaultThemeMode: panel.getDefaultThemeMode(),
     });
 }
 /** Tenant menu: current tenant, other tenants, registration, profile. */
@@ -3210,7 +3760,24 @@ const runtimePanels = new WeakMap();
 /** Reserved segments right after a multi-tenant panel's path (they are not tenant keys). */
 const RESERVED_SEGMENTS = new Set(['login', 'logout', 'register', 'password-reset', 'email-verification', 'profile', 'livewire']);
 /** Express router for a panel: assets, runtime endpoint, authentication, tenants, protected pages. */
+/** Panels sharing an auth guard: same key and same auth provider, otherwise a user id of one could be read as a user of the other. */
+const guardOwners = new Map();
+function checkSharedGuard(panel) {
+    const guard = panel.getAuthGuard();
+    if (guard === null)
+        return;
+    const other = guardOwners.get(guard);
+    if (!other || other === panel) {
+        guardOwners.set(guard, panel);
+        return;
+    }
+    if (other._key !== panel._key)
+        throw new Error(`Panels "${other.getId()}" and "${panel.getId()}" share the auth guard "${guard}" but not the same key: give them the same key, or a different authGuard().`);
+    if (other.getAuth() !== panel.getAuth())
+        throw new Error(`Panels "${other.getId()}" and "${panel.getId()}" share the auth guard "${guard}" but not the same auth provider: share the provider, or give one of them authGuard(null) or another guard.`);
+}
 export function panelRouter(panel, runtime) {
+    checkSharedGuard(panel);
     const owner = runtimePanels.get(runtime);
     if (owner && owner !== panel)
         throw new Error(`This WireRuntime already serves panel "${owner.getId()}": create one WireRuntime per panel.`);
@@ -3245,7 +3812,13 @@ export function panelRouter(panel, runtime) {
     const name = (suffix) => `navette.${panel.getId()}.${suffix}`;
     const livewire = panel.getLivewirePrefix();
     // The notifications mailbox is per browser: it is keyed by the CSRF token.
-    const context = async (req, res) => ({ req, res, panel, user: await panel.user(req), mailbox: csrfToken(req, res), tenant: null });
+    const context = async (req, res) => {
+        const user = await panel.user(req);
+        // Signed in through a shared session, but not allowed into this panel: treated as a guest that gets 403 pages.
+        const denied = user !== null && !(await panel.userCanAccess(user));
+        return { req, res, panel, user: denied ? null : user, denied, mailbox: csrfToken(req, res), tenant: null };
+    };
+    const forbidden = (res) => void res.status(403).send('Forbidden');
     /** Tenant designated by a panel URL, if the user is a member. */
     const tenantFromPath = async (path, user) => {
         if (!panel.hasTenancy() || !user)
@@ -3262,7 +3835,7 @@ export function panelRouter(panel, runtime) {
             return null;
         }
         const registration = panel.getTenantRegistrationPage();
-        if (!key || RESERVED_SEGMENTS.has(key) || key === registration?.slug || key.length > 200)
+        if (!key || panel.getReservedSegments().has(key) || key === registration?.slug || key.length > 200)
             return null;
         const provider = panel.getTenantProvider();
         const tenant = await provider.find(key);
@@ -3376,7 +3949,7 @@ export function panelRouter(panel, runtime) {
         const bodyClass = options.layout === 'index' ? cls([{ 'fi-body-has-navigation': hasNavigation, 'fi-body-has-sidebar-collapsible-on-desktop': panel.isSidebarCollapsibleOnDesktop(), 'fi-body-has-sidebar-fully-collapsible-on-desktop': panel.isSidebarFullyCollapsibleOnDesktop(), 'fi-body-has-topbar': panel.hasTopbar(), 'fi-body-has-top-navigation': panel.hasTopNavigation() }]) || null : null;
         res.send(views.render('filament-panels::layout.base', {
             renderHookScopes, title: options.title, brandName: panel.getBrandName(), favicon: panel.getFavicon(), theme: panel.getTheme(), motion: panel.hasMotion(), panelId: panel.getId(), font: panel.resolveTheme(req)?.font ? { ...panel.getFont(), ...fontOf(panel.resolveTheme(req).font) } : panel.getFont(), themeCss: panel.resolveTheme(req)?.css ?? '',
-            bodyClass, body, spa: panel.hasSpaMode(),
+            bodyClass, body, spa: panel.hasSpaMode(), darkMode: panel.hasDarkMode(), darkModeForced: panel.hasDarkModeForced(), defaultThemeMode: panel.getDefaultThemeMode(),
             csrf: csrfToken(req, res), colorVariables: panel.colors.renderCssVariables(), wireStyles: wireStyles(), wireScripts: wireScripts(req, res, livewire),
             notifications: (await runtime.mount('navette.notifications', {}, request)).replace(/^<div /, '<div wire:key="lw-1-0-0" '),
         }));
@@ -3398,6 +3971,8 @@ export function panelRouter(panel, runtime) {
     const guestPage = (path, component, title, params = () => ({})) => {
         router.get(panel.getBaseUrl(path), async (req, res) => {
             const ctx = await context(req, res);
+            if (ctx.denied)
+                return forbidden(res);
             if (ctx.user)
                 return res.redirect((await homeUrl(ctx.user)) ?? panel.getBaseUrl());
             await guarded(res, () => document(req, res, ctx, { title, component, layout: 'simple', params: params(req) }));
@@ -3407,13 +3982,29 @@ export function panelRouter(panel, runtime) {
     const userPage = (path, component, title, layout = 'simple') => {
         router.get(panel.getBaseUrl(path), async (req, res) => {
             const ctx = await context(req, res);
+            if (ctx.denied)
+                return forbidden(res);
             if (!ctx.user)
                 return res.redirect(panel.getLoginUrl());
             await guarded(res, () => document(req, res, ctx, { title, component, layout }));
         });
     };
+    // Files offered to the signed-in user (exports, failed import rows): only the user who created them can download them.
+    router.get(panel.getBaseUrl('downloads/:token'), async (req, res) => {
+        const ctx = await context(req, res);
+        if (!ctx.user || ctx.denied)
+            return forbidden(res);
+        const file = panel.getDownloads().get(String(req.params.token), ctx.user.id);
+        if (!file)
+            return void res.status(404).send('Not Found');
+        res.setHeader('Content-Type', file.type);
+        res.setHeader('Content-Disposition', `attachment; filename="${file.name.replace(/[^A-Za-z0-9._-]/g, '_')}"`);
+        res.setHeader('X-Content-Type-Options', 'nosniff');
+        res.setHeader('Cache-Control', 'private, no-store');
+        res.send(file.content);
+    });
     if (LoginPage) {
-        guestPage('login', name('auth.login'), t('filament-panels::auth/pages/login.title'));
+        guestPage(panel.getAuthPaths().login, name('auth.login'), t('filament-panels::auth/pages/login.title'));
         router.post(panel.getLogoutUrl(), express.urlencoded({ extended: false }), (req, res) => {
             if (!verifyCsrf(req, req.body?._token))
                 return res.status(419).send('Invalid CSRF token.');
@@ -3422,16 +4013,18 @@ export function panelRouter(panel, runtime) {
         });
     }
     if (RegistrationPage)
-        guestPage('register', name('auth.register'), t('filament-panels::auth/pages/register.title'));
+        guestPage(panel.getAuthPaths().registration, name('auth.register'), t('filament-panels::auth/pages/register.title'));
     if (passwordReset) {
-        guestPage('password-reset/request', name('auth.password-reset.request'), t('filament-panels::auth/pages/password-reset/request-password-reset.title'));
-        guestPage('password-reset/reset', name('auth.password-reset.reset'), t('filament-panels::auth/pages/password-reset/reset-password.title'), (req) => ({ email: typeof req.query.email === 'string' ? req.query.email : null, token: typeof req.query.token === 'string' ? req.query.token : null }));
+        guestPage(panel.getAuthPaths().passwordResetRequest, name('auth.password-reset.request'), t('filament-panels::auth/pages/password-reset/request-password-reset.title'));
+        guestPage(panel.getAuthPaths().passwordReset, name('auth.password-reset.reset'), t('filament-panels::auth/pages/password-reset/reset-password.title'), (req) => ({ email: typeof req.query.email === 'string' ? req.query.email : null, token: typeof req.query.token === 'string' ? req.query.token : null }));
     }
     if (VerificationPrompt) {
         userPage('email-verification/prompt', name('auth.email-verification.prompt'), t('filament-panels::auth/pages/email-verification/email-verification-prompt.title'));
         // Emailed link: signed, time-limited, and only valid for the signed-in user it designates.
         router.get(panel.getBaseUrl('email-verification/verify/:id/:hash'), async (req, res) => {
             const ctx = await context(req, res);
+            if (ctx.denied)
+                return forbidden(res);
             if (!ctx.user)
                 return res.redirect(panel.getLoginUrl());
             const id = String(req.params.id), hash = String(req.params.hash);
@@ -3449,6 +4042,10 @@ export function panelRouter(panel, runtime) {
     /** Context of a protected page: login, email verification, tenant. Returns `null` after responding. */
     const pageContext = async (req, res) => {
         const ctx = await context(req, res);
+        if (ctx.denied) {
+            forbidden(res);
+            return null;
+        }
         if (!ctx.user) {
             res.redirect(panel.getLoginUrl());
             return null;
@@ -3471,6 +4068,8 @@ export function panelRouter(panel, runtime) {
         // Panel root: the user's first tenant, otherwise tenant registration.
         router.get(panel.getBaseUrl(), async (req, res) => {
             const ctx = await context(req, res);
+            if (ctx.denied)
+                return forbidden(res);
             if (!ctx.user)
                 return res.redirect(panel.getLoginUrl());
             if (await panel.mustVerifyEmail(ctx.user))
@@ -3483,7 +4082,7 @@ export function panelRouter(panel, runtime) {
         // Tenant root without a dashboard: the first menu page.
         if (!panel.getPages().some((page) => page.slug === '')) {
             router.get(panel.getBaseUrl(':tenant'), async (req, res, next) => {
-                if (RESERVED_SEGMENTS.has(req.params.tenant) || req.params.tenant === TenantRegistration?.slug)
+                if (panel.getReservedSegments().has(req.params.tenant) || req.params.tenant === TenantRegistration?.slug)
                     return next();
                 const ctx = await pageContext(req, res);
                 if (!ctx)
@@ -3500,7 +4099,7 @@ export function panelRouter(panel, runtime) {
         runtime.register(component, PageClass);
         // `{record}` in the slug becomes a route parameter, passed to mount().
         router.get(panel.getBaseUrl(tenantSegment + PageClass.slug).replace(/\{(\w+)\}/g, ':$1'), async (req, res, next) => {
-            if (panel.hasTenancy() && (RESERVED_SEGMENTS.has(req.params.tenant) || req.params.tenant === TenantRegistration?.slug))
+            if (panel.hasTenancy() && (panel.getReservedSegments().has(req.params.tenant) || req.params.tenant === TenantRegistration?.slug))
                 return next();
             const ctx = await pageContext(req, res);
             if (!ctx)