@oktis-works/admin 0.4.17 → 0.4.19

package/dist/server/chunks/{ContentEditor_B_alLPkZ.mjs → ContentEditor_CxZJjeXR.mjs}

@@ -1,5 +1,5 @@
-import { n as useTranslation, r as apiClient } from "./i18n_BZdCNETS.mjs";
-import { a as For2, d as createMemo$1, f as createSignal$1, l as Show2 } from "./DashboardLayout_B1lpShsT.mjs";
+import { n as useTranslation, r as apiClient } from "./i18n_DIBvEjfq.mjs";
+import { a as For2, d as createMemo$1, f as createSignal$1, l as Show2 } from "./DashboardLayout_DCIiRkcO.mjs";
 import { t as FieldTypePicker } from "./FieldTypePicker_CXwpmcQ3.mjs";
 import { createComponent, escape, memo, ssr, ssrAttribute, ssrHydrationKey } from "solid-js/web";
 import { For, Show, createMemo, createSignal, onMount } from "solid-js";
@@ -512,6 +512,312 @@ function expandCloneFields(fields) {
 	return result;
 }
 //#endregion
+//#region src/lib/sanitize.ts
+/**
+* Sanitizador de HTML em allowlist para pontos de injeção (innerHTML).
+*
+* O admin injeta HTML apenas no conteúdo das abas de ajuda (HelpTabs), que
+* vem do i18n — mas todo innerHTML passa por aqui por defesa em profundidade.
+*
+* Garantias:
+* - Allowlist de tags e atributos (script/style/svg/iframe/form são removidos,
+*   incluindo o conteúdo de tags de texto bruto como <script> e <style>).
+* - Atributos de evento (on*), style e demais fora da allowlist são descartados.
+* - href/src têm o protocolo validado DEPOIS de decodificar entidades e remover
+*   tab/newline — o valor emitido é re-escapado a partir do valor decodificado,
+*   de modo que o que o navegador decodifica é exatamente o que foi validado
+*   (bloqueia `javascript:`, `&#106;avascript:`, `javascript&colon;`, etc).
+* - Texto é escapado (& < >), preservando entidades já válidas.
+* - Tags de fechamento sem âncora são ignoradas: conteúdo malicioso não consegue
+*   "escapar" do container nem desbalancear a árvore (o quebra-cabeça de abas
+*   e widgets continua íntegro).
+*
+* Puro JavaScript, sem APIs de DOM: roda igual no SSR (Node) e no navegador.
+*/
+/** Tags permitidas (conteúdo rico simples: ajuda, títulos, listas, links). */
+var ALLOWED_TAGS = /* @__PURE__ */ new Set([
+	"a",
+	"abbr",
+	"b",
+	"blockquote",
+	"br",
+	"code",
+	"dd",
+	"div",
+	"dl",
+	"dt",
+	"em",
+	"figcaption",
+	"figure",
+	"h1",
+	"h2",
+	"h3",
+	"h4",
+	"h5",
+	"h6",
+	"hr",
+	"i",
+	"img",
+	"li",
+	"ol",
+	"p",
+	"pre",
+	"q",
+	"s",
+	"span",
+	"strong",
+	"sub",
+	"sup",
+	"u",
+	"ul"
+]);
+/** Tags vazias (emitidas com fechamento próprio, nunca empilhadas). */
+var VOID_TAGS = /* @__PURE__ */ new Set([
+	"br",
+	"hr",
+	"img"
+]);
+/**
+* Tags cujo conteúdo é texto bruto no HTML. Ao encontrá-las abertas, todo o
+* miolo é descartado até o fechamento correspondente (senão, o conteúdo do
+* <script> viraria texto visível ou vetor de parse).
+*/
+var RAW_TEXT_TAGS = /* @__PURE__ */ new Set([
+	"script",
+	"style",
+	"iframe",
+	"object",
+	"embed",
+	"svg",
+	"math",
+	"textarea",
+	"title",
+	"noscript",
+	"template"
+]);
+/** Atributos permitidos (globais; validação extra por atributo abaixo). */
+var ALLOWED_ATTRS = /* @__PURE__ */ new Set([
+	"class",
+	"title",
+	"alt",
+	"width",
+	"height",
+	"href",
+	"src",
+	"target",
+	"rel"
+]);
+/** Esquemas aceitos em href (links externos, e-mail, telefone). */
+var HREF_SCHEMES = /* @__PURE__ */ new Set([
+	"http",
+	"https",
+	"mailto",
+	"tel"
+]);
+/** Esquemas aceitos em src (somente rede). */
+var SRC_SCHEMES = /* @__PURE__ */ new Set(["http", "https"]);
+/** Entidades nomeadas relevantes (as que poderiam alterar a validação de URL). */
+var NAMED_ENTITIES = {
+	amp: "&",
+	lt: "<",
+	gt: ">",
+	quot: "\"",
+	apos: "'",
+	colon: ":",
+	tab: "	",
+	newline: "\n",
+	sol: "/",
+	lpar: "(",
+	rpar: ")",
+	num: "#",
+	period: ".",
+	excl: "!",
+	comma: ","
+};
+/** Decodifica referências numéricas e nomeadas (uma passada, como o navegador). */
+function decodeEntities(value) {
+	return value.replace(/&#x([0-9a-fA-F]+);?/g, (_m, hex) => fromCodePoint(parseInt(hex, 16))).replace(/&#(\d+);?/g, (_m, dec) => fromCodePoint(parseInt(dec, 10))).replace(/&([a-zA-Z][a-zA-Z0-9]{1,30});?/g, (m, name) => {
+		return NAMED_ENTITIES[name in NAMED_ENTITIES ? name : name.toLowerCase()] ?? m;
+	});
+}
+function fromCodePoint(cp) {
+	if (!Number.isFinite(cp) || cp < 0 || cp > 1114111) return "";
+	try {
+		return String.fromCodePoint(cp);
+	} catch {
+		return "";
+	}
+}
+/** Escapa valor para uso dentro de atributo entre aspas duplas. */
+function escapeAttr(value) {
+	return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+}
+/**
+* Escapa texto preservando entidades já válidas (evita exibir `&amp;`
+* literalmente quando a tradução usa `&amp;` de propósito).
+*/
+function escapeText(text) {
+	return text.replace(/&(?![a-zA-Z][a-zA-Z0-9]{1,30};|#[0-9]{1,7};|#[xX][0-9a-fA-F]{1,6};)|[<>]/g, (m) => m === "&" ? "&amp;" : m === "<" ? "&lt;" : "&gt;");
+}
+/**
+* Valida URL decodificando entidades e removendo tab/newline (mesmo tratamento
+* do parser de URL do navegador) antes de inspecionar o esquema.
+*/
+function isSafeUrl(raw, allowedSchemes) {
+	const decoded = decodeEntities(raw).replace(/[\t\n\r]/g, "").trim();
+	const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(decoded);
+	if (!scheme) return true;
+	return allowedSchemes.has(scheme[1].toLowerCase());
+}
+/** Normaliza valor de atributo: decodifica (como o navegador faria) e re-escapa. */
+function normalizeAttrValue(raw) {
+	return escapeAttr(decodeEntities(raw));
+}
+/**
+* Extrai pares nome/valor de uma tag, respeitando aspas (um `>` dentro de
+* aspas não termina a tag) e valores não-aspados do HTML.
+*/
+function parseAttrs(body) {
+	const pairs = [];
+	const n = body.length;
+	let i = 0;
+	const isWs = (c) => c === " " || c === "	" || c === "\n" || c === "\r" || c === "\f";
+	while (i < n) {
+		while (i < n && (isWs(body.charAt(i)) || body.charAt(i) === "/")) i++;
+		if (i >= n) break;
+		let name = "";
+		while (i < n && !isWs(body.charAt(i)) && body.charAt(i) !== "=" && body.charAt(i) !== ">" && body.charAt(i) !== "/" && body.charAt(i) !== "<") {
+			name += body.charAt(i);
+			i++;
+		}
+		if (!name) {
+			i++;
+			continue;
+		}
+		let value = "";
+		let j = i;
+		while (j < n && isWs(body.charAt(j))) j++;
+		if (j < n && body.charAt(j) === "=") {
+			j++;
+			while (j < n && isWs(body.charAt(j))) j++;
+			if (j < n && (body.charAt(j) === "\"" || body.charAt(j) === "'")) {
+				const quote = body.charAt(j);
+				j++;
+				const start = j;
+				while (j < n && body.charAt(j) !== quote) j++;
+				value = body.slice(start, j);
+				j++;
+			} else {
+				const start = j;
+				while (j < n && !isWs(body.charAt(j)) && body.charAt(j) !== ">") j++;
+				value = body.slice(start, j);
+			}
+			i = j;
+		}
+		pairs.push([name.toLowerCase(), value]);
+	}
+	return pairs;
+}
+/** Filtra atributos: allowlist + validação de protocolo; força rel seguro. */
+function filterAttrs(tag, pairs) {
+	const kept = [];
+	const seen = /* @__PURE__ */ new Set();
+	let targetBlank = false;
+	for (const [name, raw] of pairs) {
+		if (!ALLOWED_ATTRS.has(name) || seen.has(name)) continue;
+		if (name === "href" && !isSafeUrl(raw, HREF_SCHEMES)) continue;
+		if (name === "src" && !isSafeUrl(raw, SRC_SCHEMES)) continue;
+		if (name === "target") {
+			if (normalizeAttrValue(raw) !== "_blank") continue;
+			targetBlank = true;
+			continue;
+		}
+		if (name === "rel") continue;
+		seen.add(name);
+		kept.push(`${name}="${normalizeAttrValue(raw)}"`);
+	}
+	if (tag === "a" && targetBlank) {
+		kept.push("target=\"_blank\"");
+		kept.push("rel=\"noopener noreferrer\"");
+	}
+	return kept.length > 0 ? ` ${kept.join(" ")}` : "";
+}
+/**
+* Sanitiza uma string de HTML. Retorna apenas marcação da allowlist.
+* Idempotente e sem dependências de DOM (seguro no SSR e no cliente).
+*/
+function sanitizeHtml(input) {
+	if (typeof input !== "string" || input.length === 0) return "";
+	const lower = input.toLowerCase();
+	const n = input.length;
+	const stack = [];
+	let out = "";
+	let i = 0;
+	while (i < n) {
+		const lt = input.indexOf("<", i);
+		if (lt === -1) {
+			out += escapeText(input.slice(i));
+			break;
+		}
+		if (lt > i) out += escapeText(input.slice(i, lt));
+		if (input.startsWith("<!--", lt)) {
+			const end = input.indexOf("-->", lt + 4);
+			i = end === -1 ? n : end + 3;
+			continue;
+		}
+		if (input.charAt(lt + 1) === "!" || input.charAt(lt + 1) === "?") {
+			const end = input.indexOf(">", lt + 2);
+			i = end === -1 ? n : end + 1;
+			continue;
+		}
+		const tagMatch = /^<(\/?)([a-zA-Z][a-zA-Z0-9]*)(?=[\s/>])/.exec(input.slice(lt, Math.min(lt + 64, n)));
+		if (!tagMatch) {
+			out += "&lt;";
+			i = lt + 1;
+			continue;
+		}
+		const isClosing = tagMatch[1] === "/";
+		const tag = tagMatch[2].toLowerCase();
+		let j = lt + tagMatch[0].length;
+		let quote = "";
+		while (j < n) {
+			const ch = input[j];
+			if (quote) {
+				if (ch === quote) quote = "";
+			} else if (ch === "\"" || ch === "'") quote = ch;
+			else if (ch === ">") break;
+			j++;
+		}
+		if (j >= n) break;
+		const body = input.slice(lt + tagMatch[0].length, j);
+		i = j + 1;
+		if (!isClosing && RAW_TEXT_TAGS.has(tag)) {
+			const closeAt = lower.indexOf(`</${tag}`, i);
+			if (closeAt === -1) break;
+			const closeEnd = input.indexOf(">", closeAt);
+			i = closeEnd === -1 ? n : closeEnd + 1;
+			continue;
+		}
+		if (isClosing) {
+			const anchor = stack.lastIndexOf(tag);
+			if (anchor !== -1) {
+				for (let k = stack.length - 1; k >= anchor; k--) out += `</${stack[k]}>`;
+				stack.length = anchor;
+			}
+			continue;
+		}
+		if (!ALLOWED_TAGS.has(tag)) continue;
+		const attrs = filterAttrs(tag, parseAttrs(body));
+		if (VOID_TAGS.has(tag)) out += `<${tag}${attrs} />`;
+		else {
+			out += `<${tag}${attrs}>`;
+			stack.push(tag);
+		}
+	}
+	for (let k = stack.length - 1; k >= 0; k--) out += `</${stack[k]}>`;
+	return out;
+}
+//#endregion
 //#region src/components/content/RelationshipPicker.tsx
 var _tmpl$$2 = [
 	"<ul",
@@ -636,8 +942,8 @@ var _tmpl$8$1 = [
 	">"
 ];
 var _tmpl$9$1 = ["<input", " type=\"email\" class=\"input\">"];
-var _tmpl$0 = ["<input", " type=\"url\" class=\"input\" placeholder=\"https://\">"];
-var _tmpl$1 = ["<input", " type=\"password\" class=\"input\">"];
+var _tmpl$0$1 = ["<input", " type=\"url\" class=\"input\" placeholder=\"https://\">"];
+var _tmpl$1$1 = ["<input", " type=\"password\" class=\"input\">"];
 var _tmpl$10 = [
 	"<input",
 	" type=\"checkbox\"",
@@ -833,8 +1139,8 @@ function FieldControl(props) {
 		case "number":
 		case "range": return ssr(_tmpl$8$1, ssrHydrationKey(), ssrAttribute("min", escape(config()["minValue"], true), false) + ssrAttribute("max", escape(config()["maxValue"], true), false) + ssrAttribute("step", escape(config()["step"], true), false));
 		case "email": return ssr(_tmpl$9$1, ssrHydrationKey());
-		case "url": return ssr(_tmpl$0, ssrHydrationKey());
-		case "password": return ssr(_tmpl$1, ssrHydrationKey());
+		case "url": return ssr(_tmpl$0$1, ssrHydrationKey());
+		case "password": return ssr(_tmpl$1$1, ssrHydrationKey());
 		case "true_false": return ssr(_tmpl$10, ssrHydrationKey(), ssrAttribute("checked", Boolean(props.value), true));
 		case "select": return ssr(_tmpl$11, ssrHydrationKey(), ssrAttribute("multiple", config()["multiple"] === true, true), escape(createComponent(For, {
 			get each() {
@@ -1045,73 +1351,90 @@ var _tmpl$ = [
 	"</div>"
 ];
 var _tmpl$2 = [
-	"<label",
-	"><!--$-->",
-	"<!--/--><input class=\"input\" required",
-	"></label>"
+	"<input",
+	" class=\"classic-editor__title\" required",
+	">"
 ];
 var _tmpl$3 = [
-	"<label",
-	"><!--$-->",
-	"<!--/--><textarea class=\"input\" rows=\"3\"",
-	"></textarea></label>"
+	"<div",
+	" class=\"classic-editor__toolbar\" role=\"toolbar\"",
+	"><button type=\"button\"><strong>B</strong></button><button type=\"button\"><em>I</em></button><button type=\"button\"><u>U</u></button><span class=\"classic-editor__toolbar-divider\"></span><button type=\"button\">❝</button><button type=\"button\">• List</button><button type=\"button\">1. List</button><button type=\"button\">Link</button></div>"
 ];
 var _tmpl$4 = [
-	"<label",
-	"><!--$-->",
-	"<!--/--><input class=\"input\"",
-	"></label>"
+	"<div",
+	" class=\"classic-editor__body\" contenteditable=\"true\" data-classic-editor role=\"textbox\" aria-multiline=\"true\"",
+	">",
+	"</div>"
 ];
 var _tmpl$5 = [
 	"<label",
-	"><!--$-->",
-	"<!--/--><select class=\"input\"",
-	"><option value>",
-	"</option><!--$-->",
-	"<!--/--></select></label>"
+	" class=\"classic-editor__excerpt\"><span>",
+	"</span><textarea class=\"input\" rows=\"4\"",
+	"></textarea></label>"
 ];
 var _tmpl$6 = [
-	"<div",
+	"<section",
 	" class=\"card custom-fields\"><h3>",
 	"</h3><!--$-->",
 	"<!--/--><details><summary>",
 	"</summary><!--$-->",
-	"<!--/--></details></div>"
+	"<!--/--></details></section>"
 ];
 var _tmpl$7 = [
+	"<section",
+	" class=\"card classic-editor__panel\"><h3>",
+	"</h3><input class=\"input\"",
+	"><p class=\"muted\">",
+	"</p></section>"
+];
+var _tmpl$8 = [
+	"<section",
+	" class=\"card classic-editor__panel\"><h3>",
+	"</h3><label><!--$-->",
+	"<!--/--><select class=\"input\"",
+	"><option value>",
+	"</option><!--$-->",
+	"<!--/--></select></label></section>"
+];
+var _tmpl$9 = [
 	"<form",
-	" class=\"content-editor\"><!--$-->",
+	" class=\"content-editor classic-editor\"><!--$-->",
 	"<!--/--><!--$-->",
-	"<!--/--><div class=\"card\"><label><!--$-->",
-	"<!--/--><select class=\"input\"",
+	"<!--/--><div class=\"classic-editor__topbar\"><div><span class=\"classic-editor__eyebrow\">",
+	"</span><h2>",
+	"</h2></div><div class=\"classic-editor__actions\"><a class=\"btn btn-secondary\" href=\"",
+	"\">",
+	"</a><button type=\"submit\" class=\"btn btn-primary\"",
 	">",
-	"</select></label><!--$-->",
-	"<!--/--><label><!--$-->",
-	"<!--/--><input class=\"input\"",
-	"></label><!--$-->",
+	"</button></div></div><div class=\"classic-editor__columns\"><main class=\"classic-editor__main\"><section class=\"card classic-editor__canvas-card\"><!--$-->",
+	"<!--/--><div class=\"classic-editor__permalink\"><span><!--$-->",
+	"<!--/-->:</span><input class=\"input\"",
+	"></div><!--$-->",
 	"<!--/--><!--$-->",
-	"<!--/--><label><!--$-->",
+	"<!--/--></section><!--$-->",
+	"<!--/--></main><aside class=\"classic-editor__sidebar\"><section class=\"card classic-editor__panel\"><h3>",
+	"</h3><label><!--$-->",
 	"<!--/--><select class=\"input\"",
 	"><option value=\"DRAFT\">",
 	"</option><option value=\"PUBLISHED\">",
 	"</option><option value=\"ARCHIVED\">",
-	"</option></select></label><!--$-->",
-	"<!--/--></div><!--$-->",
-	"<!--/--><button type=\"submit\" class=\"btn btn-primary\"",
+	"</option></select></label><button type=\"submit\" class=\"btn btn-primary classic-editor__full-button\"",
 	">",
-	"</button></form>"
+	"</button></section><!--$-->",
+	"<!--/--><!--$-->",
+	"<!--/--></aside></div></form>"
 ];
-var _tmpl$8 = [
+var _tmpl$0 = [
 	"<div",
 	" class=\"notice notice--error\">",
 	"</div>"
 ];
-var _tmpl$9 = [
+var _tmpl$1 = [
 	"<option",
 	">",
 	"</option>"
 ];
-function ContentEditor() {
+function ContentEditor(props) {
 	const { t } = useTranslation();
 	const [types, setTypes] = createSignal([]);
 	const [fieldTypes, setFieldTypes] = createSignal([]);
@@ -1123,20 +1446,40 @@ function ContentEditor() {
 	const [saving, setSaving] = createSignal(false);
 	const [message, setMessage] = createSignal("");
 	const [draft, setDraft] = createSignal({
-		type: "post",
+		type: props.initialType || "post",
 		title: "",
 		status: "DRAFT"
 	});
-	const supports = () => new Set(types().find((t) => t.slug === draft().type)?.supports ?? ["title", "editor"]);
+	const supports = () => new Set(types().find((type) => type.slug === draft().type)?.supports ?? ["title", "editor"]);
 	const hasSupport = (support) => supports().has(support);
+	const typeListFallback = (available, requested) => requested || available[0]?.slug || "post";
+	const availableLayouts = () => {
+		const layouts = /* @__PURE__ */ new Set();
+		for (const theme of themes()) for (const layout of theme.manifest?.provides?.layouts ?? []) layouts.add(layout);
+		return [...layouts].sort();
+	};
+	const loadGroups = async (context) => {
+		try {
+			const query = typeof context === "string" ? { type: context } : context;
+			const all = await apiClient.getFieldGroups(query.type ? query : void 0);
+			const resolved = await Promise.all(all.filter((group) => group.active).map(async (group) => {
+				return (await apiClient.getFieldGroup(group.id)).fields ?? [];
+			}));
+			setGroups(expandCloneFields(resolved.flat()));
+		} catch (err) {
+			setErrors([err instanceof Error ? err.message : String(err)]);
+		}
+	};
 	onMount(async () => {
+		let typeList = [];
 		try {
-			const [typeList, fieldTypeCatalog, themeList] = await Promise.all([
+			const [typeCatalog, fieldTypeCatalog, themeList] = await Promise.all([
 				apiClient.getContentTypes(),
 				apiClient.getFieldTypes(),
 				apiClient.getThemes().catch(() => [])
 			]);
-			setTypes(typeList);
+			typeList = typeCatalog;
+			setTypes(typeCatalog);
 			setFieldTypes(fieldTypeCatalog.types);
 			setCategories(fieldTypeCatalog.categories);
 			setThemes(themeList);
@@ -1161,30 +1504,21 @@ function ContentEditor() {
 		} catch (err) {
 			setErrors([err instanceof Error ? err.message : String(err)]);
 		}
+		else if (!typeList.some((type) => type.slug === draft().type)) setDraft({
+			...draft(),
+			type: typeListFallback(typeList, props.initialType)
+		});
 		await loadGroups({
 			type: draft().type,
 			slug: draft().slug,
 			status: draft().status
 		});
 	});
-	const availableLayouts = () => {
-		const layouts = /* @__PURE__ */ new Set();
-		for (const theme of themes()) for (const layout of theme.manifest?.provides?.layouts ?? []) layouts.add(layout);
-		return [...layouts].sort();
+	const editorContent = () => {
+		const value = data()["content"];
+		return typeof value === "string" ? value : "";
 	};
-	const loadGroups = async (context) => {
-		try {
-			const query = typeof context === "string" ? { type: context } : context;
-			const all = await apiClient.getFieldGroups(query.type ? query : void 0);
-			const resolved = await Promise.all(all.filter((group) => group.active).map(async (group) => {
-				return (await apiClient.getFieldGroup(group.id)).fields ?? [];
-			}));
-			setGroups(expandCloneFields(resolved.flat()));
-		} catch (err) {
-			setErrors([err instanceof Error ? err.message : String(err)]);
-		}
-	};
-	return ssr(_tmpl$7, ssrHydrationKey(), escape(createComponent(Show, {
+	return ssr(_tmpl$9, ssrHydrationKey(), escape(createComponent(Show, {
 		get when() {
 			return errors().length > 0;
 		},
@@ -1193,7 +1527,7 @@ function ContentEditor() {
 				get each() {
 					return errors();
 				},
-				children: (err) => ssr(_tmpl$8, ssrHydrationKey(), escape(err))
+				children: (err) => ssr(_tmpl$0, ssrHydrationKey(), escape(err))
 			});
 		}
 	})), escape(createComponent(Show, {
@@ -1203,43 +1537,26 @@ function ContentEditor() {
 		get children() {
 			return ssr(_tmpl$, ssrHydrationKey(), escape(message()));
 		}
-	})), escape(t("content.editor.type")), ssrAttribute("value", escape(draft().type, true), false), escape(createComponent(For, {
-		get each() {
-			return types();
-		},
-		children: (type) => ssr(_tmpl$9, ssrHydrationKey() + ssrAttribute("value", escape(type.slug, true), false), escape(type.pluralLabel))
-	})), escape(createComponent(Show, {
+	})), escape(types().find((type) => type.slug === draft().type)?.singularLabel || draft().type), draft().id ? escape(t("content.editor.editing")) : escape(t("content.editor.adding")), `/content?type=${escape(encodeURIComponent(draft().type), true)}`, escape(t("content.editor.backToList")), ssrAttribute("disabled", saving(), true), saving() ? escape(t("content.editor.saving")) : escape(t("content.editor.save")), escape(createComponent(Show, {
 		get when() {
 			return hasSupport("title");
 		},
 		get children() {
-			return ssr(_tmpl$2, ssrHydrationKey(), escape(t("content.editor.title")), ssrAttribute("value", escape(draft().title, true), false));
+			return ssr(_tmpl$2, ssrHydrationKey(), ssrAttribute("aria-label", escape(t("content.editor.title"), true), false) + ssrAttribute("placeholder", escape(t("content.editor.titlePlaceholder"), true), false) + ssrAttribute("value", escape(draft().title, true), false));
 		}
-	})), escape(t("content.editor.slug")), ssrAttribute("value", escape(draft().slug ?? "", true), false), escape(createComponent(Show, {
+	})), escape(t("content.editor.slug")), ssrAttribute("value", escape(draft().slug ?? "", true), false) + ssrAttribute("placeholder", escape(t("content.editor.slugPlaceholder"), true), false), escape(createComponent(Show, {
 		get when() {
-			return hasSupport("excerpt");
+			return hasSupport("editor");
 		},
 		get children() {
-			return ssr(_tmpl$3, ssrHydrationKey(), escape(t("content.editor.excerpt")), ssrAttribute("value", escape(draft().excerpt ?? "", true), false));
+			return [ssr(_tmpl$3, ssrHydrationKey(), ssrAttribute("aria-label", escape(t("content.editor.toolbar"), true), false)), ssr(_tmpl$4, ssrHydrationKey(), ssrAttribute("data-placeholder", escape(t("content.editor.bodyPlaceholder"), true), false), sanitizeHtml(editorContent()))];
 		}
 	})), escape(createComponent(Show, {
 		get when() {
-			return hasSupport("thumbnail");
-		},
-		get children() {
-			return ssr(_tmpl$4, ssrHydrationKey(), escape(t("content.editor.featuredImage")), ssrAttribute("value", escape(draft().featuredImageId ?? "", true), false));
-		}
-	})), escape(t("content.editor.status")), ssrAttribute("value", escape(draft().status, true), false), escape(t("content.editor.statusOptions.draft")), escape(t("content.editor.statusOptions.published")), escape(t("content.editor.statusOptions.archived")), escape(createComponent(Show, {
-		get when() {
-			return availableLayouts().length > 0;
+			return hasSupport("excerpt");
 		},
 		get children() {
-			return ssr(_tmpl$5, ssrHydrationKey(), escape(t("content.editor.layout")), ssrAttribute("value", escape(draft().layout ?? "", true), false), escape(t("content.editor.layoutAuto")), escape(createComponent(For, {
-				get each() {
-					return availableLayouts();
-				},
-				children: (layout) => ssr(_tmpl$9, ssrHydrationKey() + ssrAttribute("value", escape(layout, true), false), escape(layout))
-			})));
+			return ssr(_tmpl$5, ssrHydrationKey(), escape(t("content.editor.excerpt")), ssrAttribute("value", escape(draft().excerpt ?? "", true), false));
 		}
 	})), escape(createComponent(Show, {
 		get when() {
@@ -1271,7 +1588,26 @@ function ContentEditor() {
 				onChange: () => void 0
 			})));
 		}
-	})), ssrAttribute("disabled", saving(), true), escape(t("content.editor.save")));
+	})), escape(t("content.editor.publishPanel")), escape(t("content.editor.status")), ssrAttribute("value", escape(draft().status, true), false), escape(t("content.editor.statusOptions.draft")), escape(t("content.editor.statusOptions.published")), escape(t("content.editor.statusOptions.archived")), ssrAttribute("disabled", saving(), true), saving() ? escape(t("content.editor.saving")) : escape(t("content.editor.save")), escape(createComponent(Show, {
+		get when() {
+			return hasSupport("thumbnail");
+		},
+		get children() {
+			return ssr(_tmpl$7, ssrHydrationKey(), escape(t("content.editor.featuredImage")), ssrAttribute("value", escape(draft().featuredImageId ?? "", true), false) + ssrAttribute("placeholder", escape(t("content.editor.mediaIdPlaceholder"), true), false), escape(t("content.editor.featuredImageHint")));
+		}
+	})), escape(createComponent(Show, {
+		get when() {
+			return availableLayouts().length > 0;
+		},
+		get children() {
+			return ssr(_tmpl$8, ssrHydrationKey(), escape(t("content.editor.pageAttributes")), escape(t("content.editor.layout")), ssrAttribute("value", escape(draft().layout ?? "", true), false), escape(t("content.editor.layoutAuto")), escape(createComponent(For, {
+				get each() {
+					return availableLayouts();
+				},
+				children: (layout) => ssr(_tmpl$1, ssrHydrationKey() + ssrAttribute("value", escape(layout, true), false), escape(layout))
+			})));
+		}
+	})));
 }
 //#endregion
 export { ContentEditor as t };