@plutocms/supabase 0.10.0 → 0.11.0

package/i18n/locales/en.json

@@ -28,12 +28,9 @@
       },
       "toasts": {
         "loginFailed": "Could not log in",
-        "loggedOut": "Logged out successfully",
         "resetFailed": "Could not send reset email",
         "updateFailed": "Could not update password",
-        "passwordUpdated": "Password updated successfully",
-        "notLoggedIn": "You are not logged in",
-        "notLoggedInDescription": "Please log in to continue."
+        "passwordUpdated": "Password updated successfully"
       },
       "errors": {
         "unknown": "An unknown error occurred.",
@@ -65,10 +62,7 @@
       },
       "login": {
         "title": "Login",
-        "submit": "Login",
-        "createAccount": "Create Account",
-        "backToHome": "Back to Home",
-        "forgotPassword": "Forgot password?"
+        "submit": "Login"
       },
       "update": {
         "title": "Update Password",
@@ -95,16 +89,6 @@
         "checkSpam": "If you don't see the email, please check your spam folder."
       }
     },
-    "navbar": {
-      "defaultUserName": "User",
-      "github": "Pluto on GitHub",
-      "logout": "Logout",
-      "openNavigation": "Open navigation",
-      "goHome": "Go to dashboard home",
-      "visitSite": "Visit {domain}",
-      "viewSite": "View site",
-      "openUserMenu": "Open user menu"
-    },
     "settings": {
       "general": {
         "title": "General",

package/i18n/locales/pt-BR.json

@@ -28,12 +28,9 @@
       },
       "toasts": {
         "loginFailed": "Não foi possível entrar",
-        "loggedOut": "Sessão encerrada com sucesso",
         "resetFailed": "Não foi possível enviar o e-mail de redefinição",
         "updateFailed": "Não foi possível atualizar a senha",
-        "passwordUpdated": "Senha atualizada com sucesso",
-        "notLoggedIn": "Você não está conectado",
-        "notLoggedInDescription": "Entre na sua conta para continuar."
+        "passwordUpdated": "Senha atualizada com sucesso"
       },
       "errors": {
         "unknown": "Ocorreu um erro desconhecido.",
@@ -65,10 +62,7 @@
       },
       "login": {
         "title": "Entrar",
-        "submit": "Entrar",
-        "createAccount": "Criar conta",
-        "backToHome": "Voltar para o início",
-        "forgotPassword": "Esqueceu a senha?"
+        "submit": "Entrar"
       },
       "update": {
         "title": "Atualizar senha",
@@ -95,16 +89,6 @@
         "checkSpam": "Se você não encontrar o e-mail, verifique sua pasta de spam."
       }
     },
-    "navbar": {
-      "defaultUserName": "Usuário",
-      "github": "Pluto no GitHub",
-      "logout": "Sair",
-      "openNavigation": "Abrir navegação",
-      "goHome": "Ir para o início do painel",
-      "visitSite": "Visitar {domain}",
-      "viewSite": "Ver site",
-      "openUserMenu": "Abrir menu do usuário"
-    },
     "settings": {
       "general": {
         "title": "Geral",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@plutocms/supabase",
   "type": "module",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "trustedDependencies": [
     "@parcel/watcher",
     "@plutocms/pluto",
@@ -39,7 +39,7 @@
     "@nuxt/eslint": "^1.17.0",
     "@nuxt/ui": "^4.12.0",
     "@nuxtjs/supabase": "^2.1.0",
-    "@plutocms/pluto": "^0.14.0",
+    "@plutocms/pluto": "^0.16.0",
     "@plutocms/utils": "^0.2.1",
     "postgres": "^3.4.9",
     "supabase": "^2.121.0",

package/app/components/navbar/NavbarAdmin.vue

@@ -1,219 +0,0 @@
-<script setup lang="ts">
-import { UDropdownMenu } from '#components'
-import { domainFromUrl } from '#imports'
-
-const host = useRequestURL().host
-
-const route = useRoute()
-const isSidebarOpen = useState<boolean>('pluto-admin-sidebar-open', () => false)
-
-function openSidebar() {
-  isSidebarOpen.value = true
-}
-
-const { t } = usePlutoI18n()
-
-const { isLoggedIn, user, logout } = await useAuth()
-
-const displayName = computed(() => {
-  return (
-    user.value?.display_name ||
-    user.value?.full_name ||
-    user.value?.name ||
-    user.value?.username ||
-    t('supabase.navbar.defaultUserName')
-  )
-})
-
-const shortDisplayName = computed(() => displayName.value.split(' ')[0])
-
-const userMenuLabel = computed(() => {
-  return user.value?.username
-    ? `${displayName.value} (${user.value.username})`
-    : displayName.value
-})
-
-const has_settings_modified = useState<boolean>('has_settings_modified')
-
-const { data: settingsData, status } = await useFetch('/api/settings', {
-  watch: [has_settings_modified],
-})
-
-const maybeDevUrl = computed(() => {
-  if (import.meta.dev) {
-    return `http://${host}`
-  }
-
-  return settingsData.value?.settings.website_url || ''
-})
-
-type DropdownItems = NonNullable<
-  Parameters<typeof UDropdownMenu>[0]['items']
->
-
-const items = computed<DropdownItems>(() => [
-  [
-    {
-      label: userMenuLabel.value,
-      avatar: {
-        icon: 'lucide:user',
-        class: 'bg-primary',
-        ui: {
-          icon: 'text-inverted text-sm',
-        },
-      },
-      type: 'label',
-    },
-  ],
-
-  [
-    {
-      label: t('pluto.common.settings'),
-      icon: 'i-lucide-cog',
-      type: 'link',
-      to: '/admin/settings',
-      kbds: ['meta', ','],
-      onSelect() {
-        if (isLoggedIn.value) {
-          navigateTo('/admin/settings')
-        }
-      },
-    },
-  ],
-
-  [
-    {
-      label: t('supabase.navbar.github'),
-      icon: 'i-simple-icons-github',
-      type: 'link',
-      to: 'https://github.com/ojvribeiro/pluto',
-      target: '_blank',
-      external: true,
-    },
-  ],
-
-  [
-    {
-      label: t('supabase.navbar.logout'),
-      icon: 'i-lucide-log-out',
-      kbds: ['meta', 'shift', 'q'],
-      class: 'cursor-pointer',
-      onSelect() {
-        logout({ showToast: true })
-      },
-    },
-  ],
-])
-
-defineShortcuts(extractShortcuts(items.value))
-</script>
-
-<template>
-  <PlutoNavbarAdmin>
-    <div
-      class="flex h-full min-w-0 items-stretch justify-between gap-1 px-2 lg:px-4"
-    >
-      <div class="flex min-w-0 items-center gap-x-1 lg:gap-x-3">
-        <UButton
-          :aria-label="t('supabase.navbar.openNavigation')"
-          class="lg:hidden"
-          icon="lucide:menu"
-          color="neutral"
-          variant="ghost"
-          square
-          @click="openSidebar"
-        />
-
-        <div class="h-full shrink-0 py-1">
-          <NuxtLink
-            :title="t('supabase.navbar.goHome')"
-            to="/admin/home"
-            class="group block h-full"
-          >
-            <img
-              src="/img/pluto.png"
-              class="block h-full grayscale-100 group-hover:grayscale-0"
-            />
-          </NuxtLink>
-        </div>
-
-        <div class="min-w-0 h-full overflow-hidden">
-          <ul class="flex h-full min-w-0 items-center text-sm">
-            <NavbarAdminActionButton
-              :show="route.path.startsWith('/admin')"
-              :title="
-                t('supabase.navbar.visitSite', {
-                  domain: domainFromUrl(maybeDevUrl),
-                })
-              "
-              :icon="
-                status === 'pending'
-                  ? 'lucide:loader-circle'
-                  : 'lucide:external-link'
-              "
-              :disabled="status === 'pending'"
-              :to="maybeDevUrl"
-              :label="t('supabase.navbar.viewSite')"
-              target="_blank"
-            />
-
-            <ClientOnly>
-              <template #fallback>
-                <li class="h-full">
-                  <div
-                    class="text-dimmed flex h-full items-center gap-x-2 rounded-sm px-2"
-                  >
-                    <Icon name="svg-spinners:ring-resize" />
-                  </div>
-                </li>
-              </template>
-
-              <PlutoNavbarAdminActions />
-            </ClientOnly>
-          </ul>
-        </div>
-      </div>
-
-      <div class="flex shrink-0 items-center gap-1 lg:gap-3">
-        <ColorModeButton />
-
-        <div class="h-full">
-          <UDropdownMenu
-            :items="items"
-            :ui="{
-              content: 'w-64',
-            }"
-            :modal="false"
-          >
-            <button
-              :aria-label="t('supabase.navbar.openUserMenu')"
-              class="group h-full py-1"
-              type="button"
-            >
-              <div
-                class="flex h-full items-center gap-x-2 rounded-sm rounded-l-xl pr-2 pl-0.5 group-hover:bg-elevated"
-              >
-                <UAvatar
-                  :ui="{
-                    root: 'rounded-xl',
-                    icon: 'text-inverted text-lg',
-                  }"
-                  :alt="displayName"
-                  size="sm"
-                  icon="lucide:user"
-                  class="bg-primary"
-                />
-
-                <span
-                  class="text-highlighted hidden text-sm font-semibold lg:inline"
-                >
-                  {{ shortDisplayName }}
-                </span>
-              </div>
-            </button>
-          </UDropdownMenu>
-        </div>
-      </div>
-    </div>
-  </PlutoNavbarAdmin>
-</template>

package/app/components/navbar/NavbarAdminProvider.vue

@@ -1,18 +0,0 @@
-<script setup lang="ts">
-const route = useRoute()
-const session = useSupabaseSession()
-
-const shouldShowNavbar = computed(() => {
-  if (allowedUnauthenticatedPaths.includes(route.path)) {
-    return false
-  }
-
-  return route.path === '/admin'
-    || route.path.startsWith('/admin/')
-    || Boolean(session.value)
-})
-</script>
-
-<template>
-  <NavbarAdmin v-if="shouldShowNavbar" />
-</template>

package/app/middleware/auth.ts

@@ -1,34 +0,0 @@
-import type { RouteLocationNormalizedGeneric } from 'vue-router'
-
-export default defineNuxtRouteMiddleware(async (to, from) => {
-  const { isLoggedIn, logout, allowedUnauthenticatedPaths } = await useAuth({
-    route: to as RouteLocationNormalizedGeneric,
-  })
-
-  if (
-    isLoggedIn.value &&
-    allowedUnauthenticatedPaths.includes(to.path) &&
-    to.path !== '/admin/update-password'
-  ) {
-    return navigateTo(
-      to.query.redirect
-        ? decodeURIComponent(to.query.redirect as string)
-        : '/admin/home'
-    )
-  }
-
-  if (
-    !isLoggedIn.value &&
-    to.path.startsWith('/admin') &&
-    !allowedUnauthenticatedPaths.includes(to.path)
-  ) {
-    if (from.query.redirect) {
-      return logout({
-        redirectTo: from.query.redirect as string,
-        showToast: true,
-      })
-    } else {
-      return logout()
-    }
-  }
-})

package/app/middleware/setup-check.ts

@@ -1,44 +0,0 @@
-export default defineNuxtRouteMiddleware(async (to, _from) => {
-  if (!to.path.startsWith('/admin')) {
-    return
-  }
-
-  try {
-    const data = await $fetch('/api/settings/first_setup')
-
-    if (!data.success) {
-      // Cannot determine setup state — send to setup page
-      if (to.path !== '/admin/setup') {
-        return navigateTo('/admin/setup')
-      }
-      return
-    }
-
-    if (data.is_first_setup) {
-      // Setup not done yet — only allow the setup page
-      if (to.path !== '/admin/setup') {
-        return navigateTo('/admin/setup')
-      }
-    } else {
-      // Setup already done — block access to setup page.
-      //
-      // Keep this redirect even after layer migrations move to
-      // /admin/migrations. The setup page prompts an unauthenticated
-      // visitor for a raw database connection string, and it is safe only
-      // because it is unreachable once setup is done. Reopening it for a
-      // routine layer addition would let an anonymous visitor submit a
-      // connection string to the server.
-      if (to.path === '/admin/setup') {
-        return navigateTo('/admin/login')
-      }
-    }
-  } catch (error) {
-    if (import.meta.dev) {
-      console.error('Error checking first setup status:', error)
-    }
-
-    if (to.path !== '/admin/setup') {
-      return navigateTo('/admin/setup')
-    }
-  }
-})

package/app/pages/admin/(auth)/login.vue

@@ -1,95 +0,0 @@
-<script setup lang="ts">
-interface Form {
-  email: string
-  password: string
-}
-
-definePageMeta({
-  layout: 'auth',
-})
-
-const { t } = usePlutoI18n()
-
-useHead({
-  title: () => t('supabase.auth.login.title'),
-})
-
-const { isSubmitting, login } = await useAuth()
-
-const form = ref<Form>({
-  email: '',
-  password: '',
-})
-
-function submitForm() {
-  login(form.value)
-}
-</script>
-
-<template>
-  <div class="grid min-h-dvh place-items-center p-4">
-    <UCard class="w-full max-w-100">
-      <form @submit.prevent="submitForm">
-        <div class="flex flex-col gap-y-6">
-          <h1 class="text-3xl font-bold">{{ t('supabase.auth.login.title') }}</h1>
-
-          <UFormField :label="t('supabase.auth.fields.email')">
-            <UInput
-              v-model="form.email"
-              placeholder="victor@example.com"
-              class="w-full"
-              autocomplete="email"
-            />
-          </UFormField>
-
-          <UFormField :label="t('supabase.auth.fields.password')">
-            <UInput
-              v-model="form.password"
-              placeholder="••••"
-              class="w-full"
-              type="password"
-            />
-          </UFormField>
-
-          <div
-            class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between sm:gap-x-4"
-          >
-            <UFormField>
-              <UButton
-                :loading="isSubmitting"
-                type="submit"
-                icon="lucide:log-in"
-                class="w-full justify-center sm:w-auto"
-              >
-                {{ t('supabase.auth.login.submit') }}
-              </UButton>
-            </UFormField>
-
-            <UFormField>
-              <UButton variant="link" to="/admin/signup" class="px-0">
-                {{ t('supabase.auth.login.createAccount') }}
-              </UButton>
-            </UFormField>
-          </div>
-
-          <div
-            class="flex flex-col gap-2 sm:flex-row sm:items-center sm:justify-between"
-          >
-            <UButton
-              variant="link"
-              icon="lucide:arrow-left"
-              to="/"
-              class="px-0"
-            >
-              {{ t('supabase.auth.login.backToHome') }}
-            </UButton>
-
-            <UButton variant="link" to="/admin/forgot-password" class="px-0">
-              {{ t('supabase.auth.login.forgotPassword') }}
-            </UButton>
-          </div>
-        </div>
-      </form>
-    </UCard>
-  </div>
-</template>

package/app/pages/admin.vue

@@ -1,57 +0,0 @@
-<script setup lang="ts">
-definePageMeta({
-  middleware: ['setup-check', 'auth'],
-  layout: 'admin',
-})
-
-const route = useRoute()
-const { t } = usePlutoI18n()
-const { isLoggedIn, logout, allowedUnauthenticatedPaths } = await useAuth()
-const toast = useToast()
-
-// Loading/clearing permissions on login/logout lives in
-// app/plugins/pluto-permissions-sync.ts now, not here — that plugin runs
-// on every page, not just this one, so a signed-in admin browsing a public
-// page directly (no prior visit to /admin/** this session) still gets
-// their capabilities loaded.
-
-const visibility = useDocumentVisibility()
-
-watch(visibility, async (current, previous) => {
-  if (current === 'visible' && previous === 'hidden') {
-    if (
-      !isLoggedIn.value &&
-      !route.path.startsWith('/admin/setup') &&
-      !allowedUnauthenticatedPaths.includes(route.path)
-    ) {
-      await logout({ redirectTo: route.path })
-
-      toast.add({
-        title: t('supabase.auth.toasts.notLoggedIn'),
-        description: t('supabase.auth.toasts.notLoggedInDescription'),
-        icon: 'lucide:circle-x',
-        color: 'error',
-      })
-    }
-  }
-})
-</script>
-
-<template>
-  <div class="light:text-zinc-800 h-full dark:text-white">
-    <ClientOnly>
-      <Container
-        v-if="
-          isLoggedIn
-            && !route.path.startsWith('/admin/setup')
-            && !route.path.startsWith('/admin/migrations')
-        "
-        class="pt-4"
-      >
-        <MigrationsBanner />
-      </Container>
-    </ClientOnly>
-
-    <NuxtPage />
-  </div>
-</template>

package/app/plugins/pluto-locale-sync.client.ts

@@ -1,30 +0,0 @@
-/**
- * Loads the signed-in user's stored admin language whenever a session
- * appears: after a login, and on a page load that already has a session.
- * App-wide, like pluto-permissions-sync.ts, so any page gets the language,
- * not only the pages under /admin.
- *
- * Client-only, unlike the permissions sync. A server `$fetch` does not forward
- * the user's cookies, so a server run would read no locale and clear the cookie.
- * The server already resolves the first locale from the cookie or the
- * Accept-Language header. The stored value then replaces it on the client, and
- * the cookie keeps it for the next server render.
- *
- * `useSupabaseSession()` is the same primitive the permissions sync uses.
- * `syncUserLocale()` never throws. With no driver, or on an error, nothing
- * changes.
- */
-export default defineNuxtPlugin(() => {
-  const session = useSupabaseSession()
-  const { syncUserLocale } = usePlutoI18n()
-
-  watch(
-    session,
-    (current) => {
-      if (current) {
-        void syncUserLocale()
-      }
-    },
-    { immediate: true }
-  )
-})

package/app/plugins/pluto-permissions-sync.ts

@@ -1,38 +0,0 @@
-/**
- * Loads (or clears) the current user's capabilities whenever their session
- * appears or disappears — app-wide, not page-scoped.
- *
- * This used to live as a `watch` inside `app/pages/admin.vue`. That only
- * ran while `admin.vue` was the mounted page, so a signed-in admin loading
- * a public page directly (a fresh navigation or a page reload, with no
- * earlier visit to `/admin/**` in the same app instance) never triggered a
- * load at all — `usePlutoPermissions().granted` stayed empty, and every
- * `can()` check for that admin read as `false` on that page, even though
- * the same admin's capability-gated UI worked correctly inside `/admin/**`.
- * `NavbarAdminActions.vue`'s "Edit product" quick-link (shown while
- * viewing a live `/product/**` page) is exactly the kind of capability-
- * gated UI that lives outside `/admin/**` by design, so it needs this to
- * fire on every page, not just admin ones.
- *
- * `useSupabaseSession()` (not `useAuth()`) on purpose: it is the same
- * primitive `useAuth()`'s own `isLoggedIn` is built from
- * (`computed(() => !!supabaseSession.value)`), and it is genuinely
- * app-wide reactive state already (managed by `@nuxtjs/supabase`'s own
- * plugin), so reading it directly here needs no extra composable surface.
- */
-export default defineNuxtPlugin(() => {
-  const session = useSupabaseSession()
-  const { load, clear } = usePlutoPermissions()
-
-  watch(
-    session,
-    (current) => {
-      if (current) {
-        load()
-      } else {
-        clear()
-      }
-    },
-    { immediate: true }
-  )
-})