@phis/ui 0.1.0 → 0.2.0

package/plugins/runtime-modules/threads/widgets/thread-widget-config.d.ts

@@ -0,0 +1,42 @@
+import { type PhiSignal, type PhiSignalFilter, type PhiSignalReceiver, type PhiSignalRoute, type PhiSignalRouteSet } from "../../../../types/signals";
+/**
+ * What a conversation Widget is configured with: a padding, and where its signals go.
+ *
+ * The three surfaces of a conversation -- a listing, the conversation itself, the reply beneath it -- are
+ * placed separately and find each other over the `thread` channel, and none of them holds a conversation
+ * of its own. Two of the three are not this Widget: the listing is Core's Table over a Provider, and the
+ * reply is a declared Form, which is told its conversation as a field value rather than by listening. That
+ * only works if the wiring is part of the configuration rather than a channel name agreed on inside two
+ * clients: a Site places them and wires them, and a package from another repository can dock onto the same
+ * routes ([THREADS.md] section 13).
+ */
+export type PhiThreadWidgetConfig = {
+    padding?: number | string;
+    signalRoutes?: PhiSignalRouteSet | null;
+};
+export declare function parsePhiThreadWidgetConfig(rawConfig: Record<string, unknown> | null | undefined): PhiThreadWidgetConfig;
+/**
+ * The configured route a signal arrived on, or none -- which is also the answer *why* it arrived.
+ *
+ * A capability id rather than a channel is what the client then branches on, so the same Widget reads
+ * `select` whether a Site wired it to a listing, to an address or to something nobody has written yet.
+ *
+ * `valueSchema` narrows a `json` route only. For every other value type there is no schema on either
+ * side, and comparing null to null would read as a rule where there is none.
+ */
+export declare function findPhiThreadListenRoute(routes: readonly PhiSignalRoute[] | null | undefined, signal: PhiSignal): PhiSignalRoute | null;
+/**
+ * What the bus needs to deliver anything at all, narrowed to what this Widget was wired for.
+ *
+ * `null` when nothing is wired, which is how the bus is told to deliver nothing: an unwired Widget is
+ * silent rather than listening to every conversation on the page.
+ */
+export declare function buildPhiThreadListenFilter(routes: readonly PhiSignalRoute[] | null | undefined, receiver: PhiSignalReceiver | null | undefined): PhiSignalFilter | null;
+/**
+ * The conversation named on the address bar, or none.
+ *
+ * Signals do not come through here -- they carry `signals/thread-selection` and are read with
+ * `readPhiThreadSignalValue`. This is `?thread=`, which is a string somebody may have typed, and it is
+ * what a link in a notification points at.
+ */
+export declare function readPhiThreadAddressId(value: unknown): number | null;

package/plugins/runtime-modules/threads/widgets/thread-widget-config.js

@@ -0,0 +1,51 @@
+import { readPhiSignalRouteSet, } from "../../../../types/signals";
+export function parsePhiThreadWidgetConfig(rawConfig) {
+    const raw = rawConfig ?? {};
+    const padding = raw.padding;
+    return {
+        padding: typeof padding === "number" || typeof padding === "string" ? padding : undefined,
+        signalRoutes: readPhiSignalRouteSet(raw.signalRoutes),
+    };
+}
+/**
+ * The configured route a signal arrived on, or none -- which is also the answer *why* it arrived.
+ *
+ * A capability id rather than a channel is what the client then branches on, so the same Widget reads
+ * `select` whether a Site wired it to a listing, to an address or to something nobody has written yet.
+ *
+ * `valueSchema` narrows a `json` route only. For every other value type there is no schema on either
+ * side, and comparing null to null would read as a rule where there is none.
+ */
+export function findPhiThreadListenRoute(routes, signal) {
+    return routes?.find((route) => route.channel === signal.channel &&
+        route.action === signal.action &&
+        route.valueType === signal.valueType &&
+        (route.valueType !== "json" || route.valueSchema === signal.valueSchema)) ?? null;
+}
+/**
+ * What the bus needs to deliver anything at all, narrowed to what this Widget was wired for.
+ *
+ * `null` when nothing is wired, which is how the bus is told to deliver nothing: an unwired Widget is
+ * silent rather than listening to every conversation on the page.
+ */
+export function buildPhiThreadListenFilter(routes, receiver) {
+    if (!routes || routes.length === 0) {
+        return null;
+    }
+    return {
+        scopes: Array.from(new Set(routes.map((route) => route.scope))),
+        channels: Array.from(new Set(routes.map((route) => route.channel))),
+        receiver: receiver ?? undefined,
+    };
+}
+/**
+ * The conversation named on the address bar, or none.
+ *
+ * Signals do not come through here -- they carry `signals/thread-selection` and are read with
+ * `readPhiThreadSignalValue`. This is `?thread=`, which is a string somebody may have typed, and it is
+ * what a link in a notification points at.
+ */
+export function readPhiThreadAddressId(value) {
+    const parsed = typeof value === "number" ? value : Number(value);
+    return Number.isInteger(parsed) && parsed > 0 ? parsed : null;
+}

package/plugins/runtime-modules/threads/widgets.d.ts

@@ -0,0 +1,2 @@
+import type { PhiRuntimeModuleWidgetDefinition } from "../contracts";
+export declare const PHI_THREADS_RUNTIME_MODULE_WIDGETS: readonly PhiRuntimeModuleWidgetDefinition[];

package/plugins/runtime-modules/threads/widgets.js

@@ -0,0 +1,14 @@
+import { PHI_THREADS_RUNTIME_MODULE_ID } from "./ids";
+import { PHI_THREAD_CONVERSATION_WIDGET_DEFINITION } from "./widgets/thread-conversation/config";
+function defineFirstPartyWidget(options) {
+    return options;
+}
+export const PHI_THREADS_RUNTIME_MODULE_WIDGETS = [
+    defineFirstPartyWidget({
+        definition: PHI_THREAD_CONVERSATION_WIDGET_DEFINITION,
+        ownerModuleId: PHI_THREADS_RUNTIME_MODULE_ID,
+        renderPolicies: { runtime: "custom", preview: "custom", authoring: "custom" },
+        loadRuntime: () => import("./widgets/thread-conversation/plugin").then((module) => module.PHI_THREAD_CONVERSATION_WIDGET_PLUGIN),
+        loadPreview: () => import("./widgets/thread-conversation/plugin").then((module) => module.PHI_THREAD_CONVERSATION_WIDGET_PLUGIN),
+    }),
+];

package/plugins/runtime-modules/user-management/cards.d.ts

@@ -0,0 +1,3 @@
+import "server-only";
+import { type PhiDashboardCardProvider } from "../../../types/dashboard-cards";
+export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE_DASHBOARD_CARDS: PhiDashboardCardProvider;

package/plugins/runtime-modules/user-management/cards.js

@@ -0,0 +1,73 @@
+import "server-only";
+import { PHI_TR_CTX_WEB_UI_LABEL } from "../../../gateway/tr";
+import { definePhiLabelSet, getPhiLabelSet } from "../../../gateway/label-set";
+import { getResolvedSiteStats } from "../../../gateway/site-stats";
+import { createPhiDashboardCardId, } from "../../../types/dashboard-cards";
+import { PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID } from "./ids";
+/**
+ * How many accounts this Site has, answered by the Module that manages them.
+ *
+ * The figure is read the same way it always was -- the Site's own server call, with the internal token
+ * -- and it stays on the server: the card that reaches the browser carries the number, not the address
+ * it came from. That distinction is why the fan-in is answered in the Site rather than by a Collection
+ * provider calling Core directly.
+ */
+const PHI_USER_MANAGEMENT_DASHBOARD_CARD_LABEL_SET = definePhiLabelSet({
+    key: "cards:user-management-accounts",
+    ctx: PHI_TR_CTX_WEB_UI_LABEL,
+    labels: {
+        accounts_eyebrow: "Accounts",
+        accounts_title: "Site users",
+        accounts_description: "User accounts on this site",
+        accounts_meta: "Admin, editor, accounting, auth, and shop accounts",
+    },
+});
+const PHI_USER_MANAGEMENT_ACCOUNTS_CARD_ID = createPhiDashboardCardId(PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID, "accounts");
+function readLabels(context) {
+    const options = {
+        apiBaseUrl: context.apiBaseUrl,
+        internalToken: context.internalToken,
+        locale: context.locale,
+    };
+    return getPhiLabelSet(options, PHI_USER_MANAGEMENT_DASHBOARD_CARD_LABEL_SET);
+}
+export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_DASHBOARD_CARDS = {
+    async listCards(context) {
+        if (context.area !== "admin") {
+            return [];
+        }
+        const labels = await readLabels(context);
+        return [{
+                cardId: PHI_USER_MANAGEMENT_ACCOUNTS_CARD_ID,
+                form: "stat",
+                eyebrow: labels.accounts_eyebrow,
+                title: labels.accounts_title,
+                description: labels.accounts_description,
+                mark: "antd:user",
+                // Its own page, named as a preset: the Dashboard never learns where User Management lives.
+                target: {
+                    ownerModuleId: PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID,
+                    presetKey: "admin-users-page",
+                },
+            }];
+    },
+    async resolveCard(cardId, context) {
+        if (cardId !== PHI_USER_MANAGEMENT_ACCOUNTS_CARD_ID) {
+            throw new Error(`Unknown User Management Dashboard card "${cardId}".`);
+        }
+        const labels = await readLabels(context);
+        const { userCount } = await getResolvedSiteStats({
+            apiBaseUrl: context.apiBaseUrl,
+            internalToken: context.internalToken,
+            siteKey: context.siteKey,
+        });
+        return {
+            cardId,
+            value: String(userCount),
+            description: labels.accounts_description,
+            meta: labels.accounts_meta,
+            error: null,
+            resolvedAt: new Date().toISOString(),
+        };
+    },
+};

package/plugins/runtime-modules/user-management/controller/client.js

@@ -4,7 +4,7 @@ import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { PHI_USER_MANAGEMENT_RUNTIME_DATA_PROVIDER_KEYS } from "../ids";
 import { PHI_VIEWER_ACCESS_SITE_ADMIN, canPhiViewerAccess } from "../../../../types/access";
 import { PHI_SIGNAL_VALUE_SCHEMAS, createPhiSignalAddress, createPhiSignalSubcontrolAddress } from "../../../../types/signals";
-import { readPhiTableActionSignalValue } from "../../../../types/table-widget";
+import { readPhiTableActionSignalValue } from "../../../../types/table-signal-values";
 import { readPhiOverlayCloseRequest } from "../../../../types/cms-overlay";
 import { createPhiRuntimeControllerClient } from "../../../../components/runtime/runtime-controller-client-factory";
 import { usePhiRuntimeConditionStateResponder } from "../../../../components/runtime/runtime-condition-state-responder";

package/plugins/runtime-modules/user-management/definition.d.ts

@@ -3,11 +3,6 @@ export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION: {
     kind: "module";
     eligibleAreas: readonly ["admin"];
     serverBinding: import("../../../types").PhiRuntimeModuleServerBinding;
-    accessPolicy: {
-        readonly access: "roles";
-        readonly providerId: "@phis/server/core";
-        readonly allowedRoleFlags: number;
-    };
     controllerType: "@phis/ui/modules/user-management/controller/default";
     controller: import("../contracts").PhiRuntimeModuleControllerDescriptor;
     title: string;

package/plugins/runtime-modules/user-management/definition.js

@@ -3,7 +3,6 @@ import { PHI_USER_MANAGEMENT_CONTROLLER_TYPE } from "../../../plugins/runtime-mo
 import { buildPhiRuntimeModuleControllerDescriptor } from "../contracts";
 import { PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID } from "./ids";
 import { PHI_CORE_SERVER_BINDING } from "../../../types/server-capabilities";
-import { PHI_VIEWER_ACCESS_DEVELOPER_TOOLS } from "../../../types/access";
 import { PHI_USER_MANAGEMENT_RUNTIME_DATA_PROVIDER_DESCRIPTORS } from "./data-providers";
 import { PHI_USER_MANAGEMENT_FORM_HANDLER_PROVIDER_DESCRIPTORS } from "../../../plugins/runtime-modules/user-management/forms";
 export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION = {
@@ -11,7 +10,6 @@ export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION = {
     kind: "module",
     eligibleAreas: ["admin"],
     serverBinding: PHI_CORE_SERVER_BINDING,
-    accessPolicy: PHI_VIEWER_ACCESS_DEVELOPER_TOOLS,
     controllerType: PHI_USER_MANAGEMENT_CONTROLLER_TYPE,
     controller: buildPhiRuntimeModuleControllerDescriptor(PHI_USER_MANAGEMENT_RUNTIME_CONTROLLER_DEFINITION),
     title: "User Management",

package/plugins/runtime-modules/user-management/forms.js

@@ -173,12 +173,6 @@ export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_FORMS = [
         tags: ["users", "create"],
         descriptor: descriptor(PHI_USER_MANAGEMENT_FORM_IDS.create, "create"),
         submitHandlerKey: PHI_USER_MANAGEMENT_FORM_HANDLER_KEYS.create,
-        confirmHandlerKey: null,
-        previewHandlerKey: null,
-        defaultConfig: {},
-        variant: "default",
-        config: {},
-        previewUpstreamPath: null,
         loadLabels,
     }),
     definePhiRuntimeModuleForm({
@@ -193,12 +187,6 @@ export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_FORMS = [
         tags: ["users", "edit"],
         descriptor: descriptor(PHI_USER_MANAGEMENT_FORM_IDS.edit, "edit"),
         submitHandlerKey: PHI_USER_MANAGEMENT_FORM_HANDLER_KEYS.edit,
-        confirmHandlerKey: null,
-        previewHandlerKey: null,
-        defaultConfig: {},
-        variant: "default",
-        config: {},
-        previewUpstreamPath: null,
         loadLabels,
     }),
 ];

package/plugins/runtime-modules/user-management/module.d.ts

@@ -1,257 +1 @@
-export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE: {
-    controllerDefinition: {
-        kind: "controller";
-        pluginKey: string;
-        key: string;
-        title: string;
-        description: string;
-        iconFamily: string;
-        allowedMountScopes: "page"[];
-        runtimeSignals: {
-            emits: ({
-                id: string;
-                action: "activate";
-                valueType: "none";
-                valueSchema?: undefined;
-            } | {
-                id: string;
-                action: "close";
-                valueType: "none";
-                valueSchema?: undefined;
-            } | {
-                id: string;
-                action: "activate";
-                valueType: "json";
-                valueSchema: `${string}/signals/${string}`;
-            } | {
-                id: string;
-                action: "change";
-                valueType: "json";
-                valueSchema: `${string}/signals/${string}`;
-            })[];
-            listens: ({
-                id: string;
-                channel: string;
-                action: "activate";
-                valueType: "json";
-                valueSchema: `${string}/signals/${string}`;
-            } | {
-                id: string;
-                channel: string;
-                action: "activate";
-                valueType: "string";
-                valueSchema?: undefined;
-            } | {
-                id: string;
-                channel: string;
-                action: "change";
-                valueType: "boolean";
-                valueSchema?: undefined;
-            } | {
-                id: string;
-                channel: string;
-                action: "close";
-                valueType: "json";
-                valueSchema: `${string}/signals/${string}`;
-            } | {
-                id: string;
-                channel: string;
-                action: "reload";
-                valueType: "none";
-                valueSchema?: undefined;
-            })[];
-        };
-        defaultConfig: {};
-        parseConfig: () => import("../../../plugins/runtime-modules/user-management/controller/definition").PhiUserManagementControllerConfig;
-    };
-    moduleId: "@phis/ui/modules/user-management";
-    kind: "module";
-    eligibleAreas: readonly ["admin"];
-    serverBinding: import("../../../types").PhiRuntimeModuleServerBinding;
-    accessPolicy: {
-        readonly access: "roles";
-        readonly providerId: "@phis/server/core";
-        readonly allowedRoleFlags: number;
-    };
-    controllerType: "@phis/ui/modules/user-management/controller/default";
-    controller: import("../contracts").PhiRuntimeModuleControllerDescriptor;
-    title: string;
-    description: string;
-    category: "foundation";
-    iconFamily: string;
-    controllerMountPolicy: "demand";
-    formProviders: {
-        handlers: {
-            key: `${string}/${string}`;
-            ownerModuleId: "@phis/ui/modules/user-management";
-            title: string;
-            phase: "submit";
-            handlerKey: "site.user-management.create" | "site.user-management.edit";
-            category: "site";
-            transport: "relay";
-            method: "POST" | "PUT";
-            endpointKey: null;
-            upstreamPath: string;
-            csrfPath: null;
-            requiresCsrf: false;
-            credentialPolicy: "site-session";
-        }[];
-    };
-    dataProviders: {
-        key: `${string}/${string}`;
-        ownerModuleId: "@phis/ui/modules/user-management";
-        kind: "table";
-        executionMode: "live";
-        authoringMode: "none";
-        title: string;
-        description: string;
-        resources: ({
-            resourceKey: string;
-            title: string;
-            rowIdentityPath: string;
-            recordRead: true;
-            summaryFields: {
-                key: string;
-                title: string;
-                type: "number";
-            }[];
-            fields: ({
-                key: string;
-                title: string;
-                type: "string";
-                required: true;
-                mutable?: undefined;
-                mutableWhen?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "boolean";
-                mutable: true;
-                mutableWhen: {
-                    match: "all";
-                    conditions: ({
-                        source: "controller";
-                        controllerAddress: `controller:${string}/${string}:${string}`;
-                        valuePath: string;
-                        operator: "falsy";
-                    } | {
-                        source: "row";
-                        valuePath: string;
-                        operator: "falsy";
-                        controllerAddress?: undefined;
-                    })[];
-                };
-                required?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "string";
-                required?: undefined;
-                mutable?: undefined;
-                mutableWhen?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "json";
-                required?: undefined;
-                mutable?: undefined;
-                mutableWhen?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "datetime";
-                required?: undefined;
-                mutable?: undefined;
-                mutableWhen?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "boolean";
-                required?: undefined;
-                mutable?: undefined;
-                mutableWhen?: undefined;
-            })[];
-            query: {
-                search: true;
-                filterFields: string[];
-                sorting: "single";
-                pagination: "offset";
-            };
-            actions: ({
-                key: string;
-                title: string;
-                scope: "row";
-                disabledWhen: {
-                    match: "any";
-                    conditions: ({
-                        source: "controller";
-                        controllerAddress: `controller:${string}/${string}:${string}`;
-                        valuePath: string;
-                        operator: "truthy";
-                    } | {
-                        source: "row";
-                        valuePath: string;
-                        operator: "truthy";
-                        controllerAddress?: undefined;
-                    })[];
-                };
-                intent: "destructive";
-                confirmation: "required";
-                valueType?: undefined;
-            } | {
-                key: string;
-                title: string;
-                scope: "resource";
-                disabledWhen?: undefined;
-                intent?: undefined;
-                confirmation?: undefined;
-                valueType?: undefined;
-            } | {
-                key: string;
-                title: string;
-                scope: "resource";
-                valueType: "json";
-                disabledWhen?: undefined;
-                intent?: undefined;
-                confirmation?: undefined;
-            } | {
-                key: string;
-                title: string;
-                scope: "row";
-                valueType: "json";
-                disabledWhen?: undefined;
-                intent?: undefined;
-                confirmation?: undefined;
-            })[];
-        } | {
-            resourceKey: string;
-            title: string;
-            rowIdentityPath: string;
-            fields: ({
-                key: string;
-                title: string;
-                type: "string";
-                required: true;
-            } | {
-                key: string;
-                title: string;
-                type: "datetime";
-                required?: undefined;
-            } | {
-                key: string;
-                title: string;
-                type: "string";
-                required?: undefined;
-            })[];
-            query: {
-                filterFields: string[];
-                sorting: "none";
-                pagination: "none";
-                search?: undefined;
-            };
-            recordRead?: undefined;
-            summaryFields?: undefined;
-            actions?: undefined;
-        })[];
-    }[];
-};
+export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE: import("../contracts").PhiRuntimeModule;

package/plugins/runtime-modules/user-management/module.js

@@ -1,6 +1,4 @@
 import { PHI_USER_MANAGEMENT_RUNTIME_CONTROLLER_DEFINITION } from "../../../plugins/runtime-modules/user-management/controller/definition";
 import { PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION } from "./definition";
-export const PHI_USER_MANAGEMENT_RUNTIME_MODULE = {
-    ...PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION,
-    controllerDefinition: PHI_USER_MANAGEMENT_RUNTIME_CONTROLLER_DEFINITION,
-};
+import { createPhiAreaBaseRuntimeModule } from "../area-base-module";
+export const PHI_USER_MANAGEMENT_RUNTIME_MODULE = createPhiAreaBaseRuntimeModule(PHI_USER_MANAGEMENT_RUNTIME_MODULE_DEFINITION, PHI_USER_MANAGEMENT_RUNTIME_CONTROLLER_DEFINITION);

package/plugins/runtime-modules/user-management/presets.d.ts

@@ -1,30 +1,2 @@
-export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE_ROUTES: {
-    ownerModuleId: "@phis/ui/modules/user-management";
-    presetKey: string;
-    presetVersion: number;
-    area: "admin";
-    title: string;
-    accessPolicy: {
-        readonly access: "roles";
-        readonly providerId: "@phis/server/core";
-        readonly allowedRoleFlags: number;
-    };
-    path: string;
-    navigation: {
-        navKey: "admin:sidebar";
-        parentItemKey: null;
-        before: string;
-        item: {
-            itemKey: string;
-            label: {
-                defaultMessage: string;
-            };
-            icon: string;
-            routePresetKey: string;
-        };
-    }[];
-    loadTree: ({ page, runtime }: import("../../../types").PhiCmsDescriptorBuildContext & {
-        activeModuleIds: ReadonlySet<import("../contracts").PhiRuntimeModuleId>;
-        params: Readonly<Record<string, string>>;
-    }) => Promise<import("../../../types").PhiResolvedCmsPageTree>;
-}[];
+import type { PhiCmsRoutePresetDescriptor } from "../../../types/cms-module-descriptors";
+export declare const PHI_USER_MANAGEMENT_RUNTIME_MODULE_ROUTES: PhiCmsRoutePresetDescriptor[];

package/plugins/runtime-modules/user-management/presets.js

@@ -1,30 +1,21 @@
-import { PHI_BASE_PAGE_LAYOUT_VERSION } from "../../../components/regions/presets/phi-base-page-layout";
+import { buildPhiSidebarRoutePresetDescriptor } from "../sidebar-route";
 import { PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID } from "./ids";
-import { PHI_VIEWER_ACCESS_DEVELOPER_TOOLS } from "../../../types/access";
-export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_ROUTES = [{
+export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_ROUTES = [
+    buildPhiSidebarRoutePresetDescriptor({
+        area: "admin",
+        anchor: "main",
         ownerModuleId: PHI_USER_MANAGEMENT_RUNTIME_MODULE_ID,
         presetKey: "admin-users-page",
-        presetVersion: 1 + PHI_BASE_PAGE_LAYOUT_VERSION,
-        area: "admin",
         title: "Users",
         // A Developer reads user management but changes nothing, matching what `phi-server` enforces:
         // GET on /api/site/admin/users takes the developer guard, every mutating method the admin-only
         // one. The page carries that split through the controller's `permissions.readOnly` projection and
         // the `disabledWhen` conditions built on it, so entry is the route's decision and capability is
         // the surface's.
-        accessPolicy: PHI_VIEWER_ACCESS_DEVELOPER_TOOLS,
         path: "/users",
-        navigation: [{
-                navKey: "admin:sidebar",
-                parentItemKey: null,
-                before: "@phis/ui/modules/admin/nav/settings",
-                item: {
-                    itemKey: "@phis/ui/modules/user-management/nav/admin/users",
-                    label: { defaultMessage: "Users" },
-                    icon: "antd:team",
-                    routePresetKey: "admin-users-page",
-                },
-            }],
-        loadTree: ({ page, runtime }) => import("../../../components/regions/presets/phi-default-admin-users-page-tree")
+        itemKey: "@phis/ui/modules/user-management/nav/admin/users",
+        icon: "antd:team",
+        loadTree: ({ page, runtime }) => import("./trees/phi-default-admin-users-page-tree")
             .then((module) => module.buildPhiDefaultAdminUsersPageTree({ page, runtime })),
-    }];
+    }),
+];

package/plugins/runtime-modules/user-management/server.js

@@ -10,6 +10,10 @@ export const PHI_USER_MANAGEMENT_RUNTIME_MODULE_SERVER_AREA_CONTRIBUTION = defin
         forms: PHI_USER_MANAGEMENT_RUNTIME_MODULE_FORMS,
         layouts: [],
         routes: PHI_USER_MANAGEMENT_RUNTIME_MODULE_ROUTES,
+        dashboardCards: {
+            load: () => import("./cards")
+                .then((module) => module.PHI_USER_MANAGEMENT_RUNTIME_MODULE_DASHBOARD_CARDS),
+        },
         load: () => import("./module").then((module) => module.PHI_USER_MANAGEMENT_RUNTIME_MODULE),
     },
 });