@plutocms/core 0.44.1 → 0.45.0

package/CHANGELOG.md

@@ -1,6 +1,13 @@
 # Changelog
 
 
+## [0.45.0](https://github.com/plutocms/pluto/compare/v0.44.1...v0.45.0) (2026-11-01)
+
+
+### Features
+
+* in production, the admin shows a not-configured page when no auth driver is registered ([#346](https://github.com/plutocms/pluto/issues/346)) ([6f49cb8](https://github.com/plutocms/pluto/commit/6f49cb814d1d3614d8b3b7b92722081ba82549ae))
+
 ## [0.44.1](https://github.com/plutocms/pluto/compare/v0.44.0...v0.44.1) (2026-11-01)
 
 

package/FEATURES.md

@@ -101,7 +101,7 @@ policies shared by every project here.
   `defineAsyncComponent`, shows a skeleton per field, widget and settings panel while a chunk
   loads, and warns in dev about a registered component that is not async.
   @.claude/skills/extension-registry/SKILL.md
-- Admin shell: core owns the `/admin` parent route, the `/admin/login` page, the route guard, the admin banners, the navbar and the user menu. A backend layer registers an auth driver, account menu items, site info and link actions. The admin is for staff only: a signed-in user with no capability goes to `/admin/no-access`. The bar shows on `/admin/**` for staff, and on public pages for staff only. A route hides the bar with the page meta `plutoAdminBar: false`, and `isPlutoPreviewPath` marks the preview path. The bar height is the token `--pluto-admin-bar-height`, and `<html>` gets `data-pluto-admin-bar` while the bar shows. A hint cookie puts the bar frame in the server HTML of a public page for staff (the actions and the user menu load after the mount). Content types with `adminBar` get "New <type>" and "Edit <type>" buttons (`usePlutoEditLink`). With two or more types, one "New" menu lists them, grouped by `navGroup`. A `navGroup` also puts related types under one sidebar item (registry bucket `navGroups`, core group `pages`). @.claude/skills/admin-shell/SKILL.md
+- Admin shell: core owns the `/admin` parent route, the `/admin/login` page, the route guard, the admin banners, the navbar and the user menu. A backend layer registers an auth driver, account menu items, site info and link actions. The admin is for staff only: a signed-in user with no capability goes to `/admin/no-access`. In production, an app with no auth driver (the backend is missing or did not load) sends every admin path to `/admin/not-configured`; in dev the admin opens. The bar shows on `/admin/**` for staff, and on public pages for staff only. A route hides the bar with the page meta `plutoAdminBar: false`, and `isPlutoPreviewPath` marks the preview path. The bar height is the token `--pluto-admin-bar-height`, and `<html>` gets `data-pluto-admin-bar` while the bar shows. A hint cookie puts the bar frame in the server HTML of a public page for staff (the actions and the user menu load after the mount). Content types with `adminBar` get "New <type>" and "Edit <type>" buttons (`usePlutoEditLink`). With two or more types, one "New" menu lists them, grouped by `navGroup`. A `navGroup` also puts related types under one sidebar item (registry bucket `navGroups`, core group `pages`). @.claude/skills/admin-shell/SKILL.md
 - Local layers helper: `plutoLayer(name)` from `@plutocms/core/layers` gives a Nuxt `extends` entry.
   With `PLUTO_LOCAL_ROOT`, it uses the local checkouts of the Pluto layers. @.claude/skills/local-layers/SKILL.md
 - Pluto logo: `PlutoLogo` draws the logo inline. The wordmark takes the text color, so the logo works

package/app/composables/internal/admin-shell.ts

@@ -9,6 +9,7 @@ import type {
 export const ADMIN_LOGIN_PATH = '/admin/login'
 export const ADMIN_HOME_PATH = '/admin/home'
 export const ADMIN_NO_ACCESS_PATH = '/admin/no-access'
+export const ADMIN_NOT_CONFIGURED_PATH = '/admin/not-configured'
 
 const FAKE_ORIGIN = 'http://pluto.invalid'
 
@@ -111,6 +112,40 @@ function firstString(value: unknown): unknown {
   return Array.isArray(value) ? value[0] : value
 }
 
+export interface DriverInput {
+  path: string
+  /** An auth driver is registered. */
+  hasDriver: boolean
+  /** The app runs in dev (`import.meta.dev`). */
+  dev: boolean
+}
+
+/**
+ * Decides what the route guard does about the auth driver, before the sign-in
+ * rules. It returns `undefined` when a driver is registered and the sign-in
+ * rules apply. It never touches a path outside `/admin`.
+ *
+ * - No driver in production: the backend is missing or did not load (both
+ *   backends register a driver). Every admin path goes to the not-configured
+ *   page, so the admin pages do not show to everyone.
+ * - No driver in dev: allow, so admin pages can be built with no backend.
+ * - A driver, on the not-configured page: go to the admin home.
+ */
+export function driverDecision(input: DriverInput): GuardDecision | undefined {
+  const { path, hasDriver, dev } = input
+  if (!isAdminPath(path)) {
+    return { action: 'allow' }
+  }
+  const onPage = trimSlash(path) === ADMIN_NOT_CONFIGURED_PATH
+  if (hasDriver) {
+    return onPage ? { action: 'redirect', to: ADMIN_HOME_PATH } : undefined
+  }
+  if (dev || onPage) {
+    return { action: 'allow' }
+  }
+  return { action: 'redirect', to: ADMIN_NOT_CONFIGURED_PATH }
+}
+
 /**
  * Decides what the route guard does. It never touches a path outside `/admin`.
  * A signed-out user on a private admin path goes to the login page, with the

package/app/middleware/pluto-admin-auth.global.ts

@@ -1,16 +1,16 @@
 import {
+  driverDecision,
   guardDecision,
-  isAdminPath,
   matchPublicPath,
   staffDecision,
 } from '../composables/internal/admin-shell'
 
 /**
- * The route guard of the admin. It does nothing when no auth driver is
- * registered, so a backend with its own guard (supabase 0.10) is not affected.
- * It never touches a path outside `/admin`. A signed-out user on a private
- * admin path goes to the login page. A signed-in user on a public auth path
- * goes to the admin home. The driver's own `guard` runs first, so a backend
+ * The route guard of the admin. It never touches a path outside `/admin`.
+ * With no auth driver, `driverDecision` decides: in production every admin
+ * path goes to the not-configured page, in dev the admin opens. With a driver,
+ * a signed-out user on a private admin path goes to the login page. A
+ * signed-in user on a public auth path goes to the admin home. The driver's own `guard` runs first, so a backend
  * can send the user somewhere else (supabase: the first setup). Then a signed-in
  * user on a private path must be staff (at least one capability, or no
  * permissions driver). Other users go to `/admin/no-access`. The public auth
@@ -19,8 +19,15 @@ import {
  */
 export default defineNuxtRouteMiddleware(async (to) => {
   const auth = usePlutoAuth()
-  if (!auth.hasDriver.value || !isAdminPath(to.path)) {
-    return
+  const driver = driverDecision({
+    path: to.path,
+    hasDriver: auth.hasDriver.value,
+    dev: import.meta.dev,
+  })
+  if (driver) {
+    return driver.action === 'redirect'
+      ? navigateTo(driver.to, { replace: true })
+      : undefined
   }
 
   try {

package/app/pages/admin/not-configured.vue

@@ -0,0 +1,22 @@
+<script setup lang="ts">
+// The page for an admin with no auth driver in production: the backend is
+// missing or did not load. The route guard sends every admin path here (see
+// `driverDecision`), so the admin pages do not show to everyone. The frame is
+// PlutoAdminAuthCard. See the admin-shell skill.
+definePageMeta({ layout: 'auth' })
+
+const { t } = usePlutoI18n()
+
+useHead({ title: () => t('pluto.notConfigured.title') })
+</script>
+
+<template>
+  <PlutoAdminAuthCard :title="t('pluto.notConfigured.title')">
+    <UAlert
+      :description="t('pluto.notConfigured.description')"
+      color="warning"
+      icon="lucide:plug-zap"
+      variant="subtle"
+    />
+  </PlutoAdminAuthCard>
+</template>

package/i18n/locales/en.json

@@ -597,6 +597,10 @@
       "goToSite": "Go to the site",
       "signOut": "Sign out"
     },
+    "notConfigured": {
+      "title": "The admin is not set up",
+      "description": "This site has no sign-in for the admin. If you run this site, make sure that the server can load its content backend, and check the environment variables of the server."
+    },
     "post": {
       "previewTitle": "Post preview",
       "previewBadge": "Preview",

package/i18n/locales/pt-BR.json

@@ -597,6 +597,10 @@
       "goToSite": "Ir para o site",
       "signOut": "Sair"
     },
+    "notConfigured": {
+      "title": "O painel não está configurado",
+      "description": "Este site não tem login para o painel. Se você administra este site, confira se o servidor consegue carregar o backend de conteúdo e verifique as variáveis de ambiente do servidor."
+    },
     "post": {
       "previewTitle": "Prévia do post",
       "previewBadge": "Prévia",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@plutocms/core",
   "type": "module",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "description": "The base layer every Pluto app extends: the admin, the content model, and the Git CMS",
   "author": "Victor Ribeiro",
   "license": "MIT",