@prenta/admin 1.17.13 → 1.17.16

package/dist/views/lazy-views.js

@@ -0,0 +1,37 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { lazy } from 'react';
+import { Skeleton } from '../components/ui/Skeleton.js';
+/**
+ * Route-level splits. Each view is a dynamic import so the admin shell
+ * (login, layout, dashboard) does not download the editors up front.
+ * Named exports are adapted to the default export `React.lazy` expects.
+ */
+export const CollectionList = lazy(() => import('./CollectionList.js').then((m) => ({ default: m.CollectionList })));
+export const DocumentEdit = lazy(() => import('./DocumentEdit.js').then((m) => ({ default: m.DocumentEdit })));
+export const MediaBrowser = lazy(() => import('./MediaBrowser.js').then((m) => ({ default: m.MediaBrowser })));
+export const Settings = lazy(() => import('./Settings.js').then((m) => ({ default: m.Settings })));
+export const Profile = lazy(() => import('./Profile.js').then((m) => ({ default: m.Profile })));
+export const Forms = lazy(() => import('./Forms.js').then((m) => ({ default: m.Forms })));
+export const FormEditor = lazy(() => import('./FormEditor.js').then((m) => ({ default: m.FormEditor })));
+export const FormSubmissions = lazy(() => import('./FormSubmissions.js').then((m) => ({ default: m.FormSubmissions })));
+export const FormEntries = lazy(() => import('./FormEntries.js').then((m) => ({ default: m.FormEntries })));
+export const FormDeliveries = lazy(() => import('./FormDeliveries.js').then((m) => ({ default: m.FormDeliveries })));
+export const SEO = lazy(() => import('./SEO.js').then((m) => ({ default: m.SEO })));
+export const ScriptTags = lazy(() => import('./ScriptTags.js').then((m) => ({ default: m.ScriptTags })));
+export const PageSectionEditor = lazy(() => import('./page-editor/PageSectionEditor.js').then((m) => ({ default: m.PageSectionEditor })));
+export const Trash = lazy(() => import('./Trash.js').then((m) => ({ default: m.Trash })));
+export const PagesListView = lazy(() => import('./Pages/PagesListView.js').then((m) => ({ default: m.PagesListView })));
+export const PageTagManager = lazy(() => import('./Pages/PageTagManager.js').then((m) => ({ default: m.PageTagManager })));
+export const PostsListView = lazy(() => import('./Posts/PostsListView.js').then((m) => ({ default: m.PostsListView })));
+export const PostTypesView = lazy(() => import('./Posts/PostTypesView.js').then((m) => ({ default: m.PostTypesView })));
+export const PostTypeEditor = lazy(() => import('./Posts/PostTypeEditor.js').then((m) => ({ default: m.PostTypeEditor })));
+export const NewPostPicker = lazy(() => import('./Posts/NewPostPicker.js').then((m) => ({ default: m.NewPostPicker })));
+export const NewPostTypeInstructions = lazy(() => import('./Posts/NewPostTypeInstructions.js').then((m) => ({
+    default: m.NewPostTypeInstructions,
+})));
+export const PostSectionEditor = lazy(() => import('./post-editor/PostSectionEditor.js').then((m) => ({ default: m.PostSectionEditor })));
+export const PostTemplateEditor = lazy(() => import('./post-editor/PostTemplateEditor.js').then((m) => ({ default: m.PostTemplateEditor })));
+export function ViewFallback() {
+    return (_jsxs("div", { className: "p-6", "aria-busy": "true", "aria-live": "polite", children: [_jsx("p", { className: "text-muted-foreground text-sm", children: "Loading" }), _jsx(Skeleton, { className: "mt-4" })] }));
+}
+//# sourceMappingURL=lazy-views.js.map

package/dist/views/lazy-views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-views.js","sourceRoot":"","sources":["../../src/views/lazy-views.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAA;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAEvD;;;;GAIG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CACtC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAC3E,CAAA;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CACpC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CACvE,CAAA;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CACpC,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CACvE,CAAA;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;AAClG,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAA;AAC/F,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;AACzF,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAClC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CACnE,CAAA;AACD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CACvC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAC7E,CAAA;AACD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CACnC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACrE,CAAA;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CACtC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAC3E,CAAA;AACD,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAClC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CACnE,CAAA;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CACzC,MAAM,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAC7F,CAAA;AACD,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;AACzF,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CACrC,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAC/E,CAAA;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CACtC,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CACjF,CAAA;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CACrC,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAC/E,CAAA;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CACrC,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAC/E,CAAA;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CACtC,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CACjF,CAAA;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CACrC,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAC/E,CAAA;AACD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,GAAG,EAAE,CAC/C,MAAM,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,uBAAuB;CACnC,CAAC,CAAC,CACJ,CAAA;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CACzC,MAAM,CAAC,oCAAoC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAC7F,CAAA;AACD,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAC1C,MAAM,CAAC,qCAAqC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAC/F,CAAA;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,CACL,eAAK,SAAS,EAAC,KAAK,eAAW,MAAM,eAAW,QAAQ,aACtD,YAAG,SAAS,EAAC,+BAA+B,wBAAY,EACxD,KAAC,QAAQ,IAAC,SAAS,EAAC,MAAM,GAAG,IACzB,CACP,CAAA;AACH,CAAC"}

package/dist/views/seo/seo-routes.d.ts

@@ -0,0 +1,16 @@
+/**
+ * SEO deep-link table. Kept out of `SEO.tsx` so the admin shell can route
+ * these paths without loading the SEO view.
+ */
+declare const SEO_TAB_IDS: readonly ["overview", "content", "links", "technical", "ai-visibility", "redirects", "audit", "proposals"];
+export type SeoTabId = (typeof SEO_TAB_IDS)[number];
+/**
+ * SEO deep paths the admin router resolves onto the tabbed SEO view — including
+ * every path plugin-seo advertises in the sidebar. `matchRoute` is exact, so any
+ * of these NOT listed here falls through to the generic 404.
+ */
+export declare const SEO_DEEP_PATHS: readonly ["/seo/link-health", "/seo/sitemap", "/seo/redirects", "/seo/content", "/seo/canonicals", "/seo/technical", "/seo/links", "/seo/audit", "/seo/proposals", "/seo/ai-visibility", "/seo"];
+/** Map an SEO deep path to the tab it should open, or null if it isn't one. */
+export declare function seoTabForPath(pathname: string): SeoTabId | null;
+export {};
+//# sourceMappingURL=seo-routes.d.ts.map

package/dist/views/seo/seo-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-routes.d.ts","sourceRoot":"","sources":["../../../src/views/seo/seo-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,QAAA,MAAM,WAAW,4GASP,CAAA;AAEV,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnD;;;;GAIG;AACH,eAAO,MAAM,cAAc,kMAYjB,CAAA;AAgBV,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAK/D"}

package/dist/views/seo/seo-routes.js

@@ -0,0 +1,53 @@
+/**
+ * SEO deep-link table. Kept out of `SEO.tsx` so the admin shell can route
+ * these paths without loading the SEO view.
+ */
+const SEO_TAB_IDS = [
+    'overview',
+    'content',
+    'links',
+    'technical',
+    'ai-visibility',
+    'redirects',
+    'audit',
+    'proposals',
+];
+/**
+ * SEO deep paths the admin router resolves onto the tabbed SEO view — including
+ * every path plugin-seo advertises in the sidebar. `matchRoute` is exact, so any
+ * of these NOT listed here falls through to the generic 404.
+ */
+export const SEO_DEEP_PATHS = [
+    '/seo/link-health',
+    '/seo/sitemap',
+    '/seo/redirects',
+    '/seo/content',
+    '/seo/canonicals',
+    '/seo/technical',
+    '/seo/links',
+    '/seo/audit',
+    '/seo/proposals',
+    '/seo/ai-visibility',
+    '/seo',
+];
+const SEO_TAB_BY_PATH = {
+    '/seo/link-health': 'links',
+    '/seo/sitemap': 'technical',
+    '/seo/redirects': 'redirects',
+    '/seo/content': 'content',
+    '/seo/canonicals': 'content',
+    '/seo/technical': 'technical',
+    '/seo/links': 'technical',
+    '/seo/audit': 'audit',
+    '/seo/proposals': 'proposals',
+    '/seo/ai-visibility': 'ai-visibility',
+    '/seo': 'overview',
+};
+/** Map an SEO deep path to the tab it should open, or null if it isn't one. */
+export function seoTabForPath(pathname) {
+    if (Object.prototype.hasOwnProperty.call(SEO_TAB_BY_PATH, pathname)) {
+        return SEO_TAB_BY_PATH[pathname];
+    }
+    return null;
+}
+//# sourceMappingURL=seo-routes.js.map

package/dist/views/seo/seo-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-routes.js","sourceRoot":"","sources":["../../../src/views/seo/seo-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;IACX,eAAe;IACf,WAAW;IACX,OAAO;IACP,WAAW;CACH,CAAA;AAIV;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,kBAAkB;IAClB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,oBAAoB;IACpB,MAAM;CACE,CAAA;AAEV,MAAM,eAAe,GAAsD;IACzE,kBAAkB,EAAE,OAAO;IAC3B,cAAc,EAAE,WAAW;IAC3B,gBAAgB,EAAE,WAAW;IAC7B,cAAc,EAAE,SAAS;IACzB,iBAAiB,EAAE,SAAS;IAC5B,gBAAgB,EAAE,WAAW;IAC7B,YAAY,EAAE,WAAW;IACzB,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,WAAW;IAC7B,oBAAoB,EAAE,eAAe;IACrC,MAAM,EAAE,UAAU;CACnB,CAAA;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpE,OAAO,eAAe,CAAC,QAAwC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/views/settings/AuditLogExportCard.d.ts

@@ -0,0 +1,9 @@
+export type AuditExportFormat = 'csv' | 'json';
+export declare function auditExportPath(options: {
+    format: AuditExportFormat;
+    from: string;
+    to: string;
+}): string;
+/** Admin download of the audit log as CSV or JSON, optionally limited to a date range. */
+export declare function AuditLogExportCard(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=AuditLogExportCard.d.ts.map

package/dist/views/settings/AuditLogExportCard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogExportCard.d.ts","sourceRoot":"","sources":["../../../src/views/settings/AuditLogExportCard.tsx"],"names":[],"mappings":"AASA,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,MAAM,CAAA;AAE9C,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,MAAM,EAAE,iBAAiB,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX,GAAG,MAAM,CAKT;AAyBD,0FAA0F;AAC1F,wBAAgB,kBAAkB,4CAoFjC"}

package/dist/views/settings/AuditLogExportCard.js

@@ -0,0 +1,66 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Download } from 'lucide-react';
+import { toast } from 'sonner';
+import { Button } from '../../components/ui/Button.js';
+import { getApiBase } from '../../lib/api.js';
+import { SecurityCard } from './securityPrimitives.js';
+export function auditExportPath(options) {
+    const params = new URLSearchParams({ format: options.format });
+    if (options.from)
+        params.set('from', options.from);
+    if (options.to)
+        params.set('to', options.to);
+    return `/security/audit-log/export?${params.toString()}`;
+}
+async function downloadAuditExport(path) {
+    let res;
+    try {
+        res = await fetch(`${getApiBase()}${path}`, { credentials: 'include' });
+    }
+    catch (err) {
+        return { error: err instanceof Error ? err.message : 'Network error' };
+    }
+    if (!res.ok) {
+        const body = (await res.json().catch(() => ({})));
+        return { error: body.error || `Export failed (${res.status})` };
+    }
+    const blob = await res.blob();
+    const disposition = res.headers.get('content-disposition') ?? '';
+    const filename = /filename="([^"]+)"/.exec(disposition)?.[1] ?? 'audit-log.csv';
+    const url = URL.createObjectURL(blob);
+    const link = document.createElement('a');
+    link.href = url;
+    link.download = filename;
+    link.click();
+    URL.revokeObjectURL(url);
+    return { truncated: res.headers.get('x-audit-export-truncated') === 'true' };
+}
+/** Admin download of the audit log as CSV or JSON, optionally limited to a date range. */
+export function AuditLogExportCard() {
+    const [from, setFrom] = useState('');
+    const [to, setTo] = useState('');
+    const [pending, setPending] = useState(null);
+    const [error, setError] = useState(null);
+    async function exportAs(format) {
+        setPending(format);
+        setError(null);
+        const result = await downloadAuditExport(auditExportPath({ format, from, to }));
+        setPending(null);
+        if (result.error) {
+            setError(result.error);
+            return;
+        }
+        if (result.truncated) {
+            toast.success('Export downloaded. It was capped at the newest 10,000 events.');
+            return;
+        }
+        toast.success('Audit log exported');
+    }
+    return (_jsx(SecurityCard, { title: "Audit log export", description: "Download recorded security and content events. A date range limits the file. The newest 10,000 matching events are included.", children: _jsxs("form", { className: "flex flex-col gap-4", onSubmit: (event) => {
+                event.preventDefault();
+                void exportAs('csv');
+            }, children: [_jsxs("div", { className: "flex flex-col gap-4 sm:flex-row", children: [_jsxs("label", { className: "flex min-w-0 flex-1 flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "text-foreground font-medium", children: "From" }), _jsx("input", { type: "date", value: from, onChange: (event) => setFrom(event.target.value), className: "border-border bg-input-background text-foreground focus-visible:ring-ring min-h-11 rounded-md border px-3 text-sm focus-visible:ring-2 focus-visible:outline-none" })] }), _jsxs("label", { className: "flex min-w-0 flex-1 flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "text-foreground font-medium", children: "To" }), _jsx("input", { type: "date", value: to, onChange: (event) => setTo(event.target.value), className: "border-border bg-input-background text-foreground focus-visible:ring-ring min-h-11 rounded-md border px-3 text-sm focus-visible:ring-2 focus-visible:outline-none" })] })] }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx(Button, { type: "submit", className: "min-h-11", loading: pending === 'csv', disabled: pending !== null, leftIcon: _jsx(Download, { size: 16, "aria-hidden": true }), children: "Export CSV" }), _jsx(Button, { type: "button", variant: "outline", className: "min-h-11", loading: pending === 'json', disabled: pending !== null, leftIcon: _jsx(Download, { size: 16, "aria-hidden": true }), onClick: () => void exportAs('json'), children: "Export JSON" })] }), error && (_jsx("p", { className: "text-destructive text-sm", role: "alert", children: error }))] }) }));
+}
+//# sourceMappingURL=AuditLogExportCard.js.map

package/dist/views/settings/AuditLogExportCard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogExportCard.js","sourceRoot":"","sources":["../../../src/views/settings/AuditLogExportCard.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAItD,MAAM,UAAU,eAAe,CAAC,OAI/B;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,IAAI,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,IAAI,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5C,OAAO,8BAA8B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AAC1D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,GAAa,CAAA;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAA;IACxE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAuB,CAAA;QACvE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,kBAAkB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAA;IACjE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAA;IAChE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,eAAe,CAAA;IAC/E,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAA;IACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACxB,IAAI,CAAC,KAAK,EAAE,CAAA;IACZ,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,KAAK,MAAM,EAAE,CAAA;AAC9E,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAA2B,IAAI,CAAC,CAAA;IACtE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAA;IAEvD,KAAK,UAAU,QAAQ,CAAC,MAAyB;QAC/C,UAAU,CAAC,MAAM,CAAC,CAAA;QAClB,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC/E,UAAU,CAAC,IAAI,CAAC,CAAA;QAChB,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtB,OAAM;QACR,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,OAAO,CAAC,+DAA+D,CAAC,CAAA;YAC9E,OAAM;QACR,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACrC,CAAC;IAED,OAAO,CACL,KAAC,YAAY,IACX,KAAK,EAAC,kBAAkB,EACxB,WAAW,EAAC,8HAA8H,YAE1I,gBACE,SAAS,EAAC,qBAAqB,EAC/B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,KAAK,CAAC,cAAc,EAAE,CAAA;gBACtB,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC,aAED,eAAK,SAAS,EAAC,iCAAiC,aAC9C,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,eAAM,SAAS,EAAC,6BAA6B,qBAAY,EACzD,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAChD,SAAS,EAAC,mKAAmK,GAC7K,IACI,EACR,iBAAO,SAAS,EAAC,8CAA8C,aAC7D,eAAM,SAAS,EAAC,6BAA6B,mBAAU,EACvD,gBACE,IAAI,EAAC,MAAM,EACX,KAAK,EAAE,EAAE,EACT,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAC9C,SAAS,EAAC,mKAAmK,GAC7K,IACI,IACJ,EACN,eAAK,SAAS,EAAC,sBAAsB,aACnC,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,SAAS,EAAC,UAAU,EACpB,OAAO,EAAE,OAAO,KAAK,KAAK,EAC1B,QAAQ,EAAE,OAAO,KAAK,IAAI,EAC1B,QAAQ,EAAE,KAAC,QAAQ,IAAC,IAAI,EAAE,EAAE,wBAAgB,2BAGrC,EACT,KAAC,MAAM,IACL,IAAI,EAAC,QAAQ,EACb,OAAO,EAAC,SAAS,EACjB,SAAS,EAAC,UAAU,EACpB,OAAO,EAAE,OAAO,KAAK,MAAM,EAC3B,QAAQ,EAAE,OAAO,KAAK,IAAI,EAC1B,QAAQ,EAAE,KAAC,QAAQ,IAAC,IAAI,EAAE,EAAE,wBAAgB,EAC5C,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,4BAG7B,IACL,EACL,KAAK,IAAI,CACR,YAAG,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,OAAO,YACjD,KAAK,GACJ,CACL,IACI,GACM,CAChB,CAAA;AACH,CAAC"}

package/dist/views/settings/SecurityTab.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityTab.d.ts","sourceRoot":"","sources":["../../../src/views/settings/SecurityTab.tsx"],"names":[],"mappings":"AA+BA,wBAAgB,WAAW,CAAC,EAC1B,IAAI,EACJ,UAAU,GACX,EAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACpC,2CAsJA"}
+{"version":3,"file":"SecurityTab.d.ts","sourceRoot":"","sources":["../../../src/views/settings/SecurityTab.tsx"],"names":[],"mappings":"AAgCA,wBAAgB,WAAW,CAAC,EAC1B,IAAI,EACJ,UAAU,GACX,EAAE;IACD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACpC,2CAuJA"}

package/dist/views/settings/SecurityTab.js

@@ -6,6 +6,7 @@ import { parseRouteQuery } from '../../router/index.js';
 import { ConfirmDangerousSettingDialog, SettingsSaveBar, SettingsValidationSummary, } from './components.js';
 import { AccessProtectionCard } from './AccessProtectionCard.js';
 import { AuthMfaCard } from './AuthMfaCard.js';
+import { AuditLogExportCard } from './AuditLogExportCard.js';
 import { SecretsAuditCard } from './SecretsAuditCard.js';
 import { SecurityStatusCard } from './SecurityStatusCard.js';
 import { CaptchaStatusCard } from './CaptchaStatusCard.js';
@@ -38,6 +39,6 @@ export function SecurityTab({ role, onNavigate, }) {
                                 ? 'Ask an administrator to review the Security tab.'
                                 : (loadError ?? 'The security service could not be reached. Try again shortly.') })] })] }));
     }
-    return (_jsxs("div", { className: "space-y-4 pb-4", children: [_jsx(SecurityStatusCard, { status: data.status, onNavigate: onNavigate }), _jsx(CaptchaStatusCard, {}), issues.length > 0 && _jsx(SettingsValidationSummary, { issues: issues }), !canEdit && (_jsx("p", { className: "text-muted-foreground text-sm", children: "You have read-only access. Only administrators can change security settings." })), _jsx(AuthMfaCard, { form: form, setField: setField, canEdit: canEdit, viewerHasMfa: data.viewerHasMfa, withMfa: data.users.withMfa, totalAdmins: data.users.totalAdmins, onNavigate: onNavigate }), _jsx("div", { id: "security-sessions", children: _jsx(SessionPolicyCard, { form: form, setField: setField, canEdit: canEdit, activeSessions: data.activeSessions, revokeState: revokeState, onRevokeAll: () => void revokeAllOtherSessions() }) }), _jsx("div", { id: "security-ip-allowlist", children: _jsx(AccessProtectionCard, { form: form, setField: setField, canEdit: canEdit, ipAllowlist: data.ipAllowlist, secrets: data.secrets, csrfEnabled: data.csrfEnabled, uploadValidation: data.uploadValidation, sources: data.sources, onNavigate: onNavigate }) }), _jsx("div", { id: "security-audit", children: _jsx(SecretsAuditCard, { secrets: data.secrets, auditEnabled: data.auditEnabled, failedLogins24h: data.failedLogins24h, users: data.users, apiKeys: data.apiKeys, sources: data.sources, onNavigate: onNavigate }) }), saveState === 'error' && (_jsx("p", { className: "text-destructive text-sm", role: "alert", children: "Failed to save security settings. Please try again." })), _jsx(ConfirmDangerousSettingDialog, { open: lockoutPrompt !== null, title: "This allowlist may lock you out", description: lockoutPrompt ?? 'Your current IP is not covered by the allowlist you are about to save.', confirmLabel: "Save anyway", onConfirm: () => void save({ confirmLockout: true }), onCancel: dismissLockoutPrompt }), _jsx(SettingsSaveBar, { dirty: dirty, canEdit: canEdit, hasErrors: hasErrors, saveState: saveState, onSave: () => void save(), onReset: reset })] }));
+    return (_jsxs("div", { className: "space-y-4 pb-4", children: [_jsx(SecurityStatusCard, { status: data.status, onNavigate: onNavigate }), _jsx(CaptchaStatusCard, {}), issues.length > 0 && _jsx(SettingsValidationSummary, { issues: issues }), !canEdit && (_jsx("p", { className: "text-muted-foreground text-sm", children: "You have read-only access. Only administrators can change security settings." })), _jsx(AuthMfaCard, { form: form, setField: setField, canEdit: canEdit, viewerHasMfa: data.viewerHasMfa, withMfa: data.users.withMfa, totalAdmins: data.users.totalAdmins, onNavigate: onNavigate }), _jsx("div", { id: "security-sessions", children: _jsx(SessionPolicyCard, { form: form, setField: setField, canEdit: canEdit, activeSessions: data.activeSessions, revokeState: revokeState, onRevokeAll: () => void revokeAllOtherSessions() }) }), _jsx("div", { id: "security-ip-allowlist", children: _jsx(AccessProtectionCard, { form: form, setField: setField, canEdit: canEdit, ipAllowlist: data.ipAllowlist, secrets: data.secrets, csrfEnabled: data.csrfEnabled, uploadValidation: data.uploadValidation, sources: data.sources, onNavigate: onNavigate }) }), _jsxs("div", { id: "security-audit", className: "space-y-4", children: [canEdit && _jsx(AuditLogExportCard, {}), _jsx(SecretsAuditCard, { secrets: data.secrets, auditEnabled: data.auditEnabled, failedLogins24h: data.failedLogins24h, users: data.users, apiKeys: data.apiKeys, sources: data.sources, onNavigate: onNavigate })] }), saveState === 'error' && (_jsx("p", { className: "text-destructive text-sm", role: "alert", children: "Failed to save security settings. Please try again." })), _jsx(ConfirmDangerousSettingDialog, { open: lockoutPrompt !== null, title: "This allowlist may lock you out", description: lockoutPrompt ?? 'Your current IP is not covered by the allowlist you are about to save.', confirmLabel: "Save anyway", onConfirm: () => void save({ confirmLockout: true }), onCancel: dismissLockoutPrompt }), _jsx(SettingsSaveBar, { dirty: dirty, canEdit: canEdit, hasErrors: hasErrors, saveState: saveState, onSave: () => void save(), onReset: reset })] }));
 }
 //# sourceMappingURL=SecurityTab.js.map

package/dist/views/settings/SecurityTab.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecurityTab.js","sourceRoot":"","sources":["../../../src/views/settings/SecurityTab.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAW,WAAW,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,yBAAyB,GAC1B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,SAAS,YAAY;IACnB,OAAO,CACL,eAAK,SAAS,EAAC,2DAA2D,aACxE,cAAK,SAAS,EAAC,gCAAgC,GAAG,EAClD,cAAK,SAAS,EAAC,gCAAgC,GAAG,EAClD,eAAK,SAAS,EAAC,WAAW,aACxB,cAAK,SAAS,EAAC,6BAA6B,GAAG,EAC/C,cAAK,SAAS,EAAC,4BAA4B,GAAG,IAC1C,IACF,CACP,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAC1B,IAAI,EACJ,UAAU,GAIX;IACC,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,CAAA;IAChC,MAAM,EACJ,OAAO,EACP,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,IAAI,EACJ,KAAK,EACL,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,sBAAsB,GACvB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAEhC,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAM;QACpD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QACzD,EAAE,EAAE,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5D,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAEb,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,YAAY,KAAG,EAChB,KAAC,YAAY,KAAG,EAChB,KAAC,YAAY,KAAG,IACZ,CACP,CAAA;IACH,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,oCAAoC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QAC5E,OAAO,CACL,eAAK,SAAS,EAAC,kGAAkG,aAC/G,KAAC,WAAW,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,8BAA8B,iBAAa,MAAM,GAAG,EACrF,0BACE,YAAG,SAAS,EAAC,6BAA6B,YACvC,SAAS;gCACR,CAAC,CAAC,6CAA6C;gCAC/C,CAAC,CAAC,+BAA+B,GACjC,EACJ,YAAG,SAAS,EAAC,MAAM,YAChB,SAAS;gCACR,CAAC,CAAC,kDAAkD;gCACpD,CAAC,CAAC,CAAC,SAAS,IAAI,+DAA+D,CAAC,GAChF,IACA,IACF,CACP,CAAA;IACH,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,gBAAgB,aAC7B,KAAC,kBAAkB,IAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,GAAI,EAEnE,KAAC,iBAAiB,KAAG,EAEpB,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAC,yBAAyB,IAAC,MAAM,EAAE,MAAM,GAAI,EAElE,CAAC,OAAO,IAAI,CACX,YAAG,SAAS,EAAC,+BAA+B,6FAExC,CACL,EAED,KAAC,WAAW,IACV,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAC3B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EACnC,UAAU,EAAE,UAAU,GACtB,EAEF,cAAK,EAAE,EAAC,mBAAmB,YACzB,KAAC,iBAAiB,IAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,IAAI,CAAC,cAAc,EACnC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,sBAAsB,EAAE,GAChD,GACE,EAEN,cAAK,EAAE,EAAC,uBAAuB,YAC7B,KAAC,oBAAoB,IACnB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,IAAI,CAAC,WAAW,EAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,WAAW,EAAE,IAAI,CAAC,WAAW,EAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EACvC,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,GACtB,GACE,EAEN,cAAK,EAAE,EAAC,gBAAgB,YACtB,KAAC,gBAAgB,IACf,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,EACrC,KAAK,EAAE,IAAI,CAAC,KAAK,EACjB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,GACtB,GACE,EAEL,SAAS,KAAK,OAAO,IAAI,CACxB,YAAG,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,OAAO,oEAEhD,CACL,EAID,KAAC,6BAA6B,IAC5B,IAAI,EAAE,aAAa,KAAK,IAAI,EAC5B,KAAK,EAAC,iCAAiC,EACvC,WAAW,EACT,aAAa,IAAI,wEAAwE,EAE3F,YAAY,EAAC,aAAa,EAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EACpD,QAAQ,EAAE,oBAAoB,GAC9B,EAEF,KAAC,eAAe,IACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EACzB,OAAO,EAAE,KAAK,GACd,IACE,CACP,CAAA;AACH,CAAC"}
+{"version":3,"file":"SecurityTab.js","sourceRoot":"","sources":["../../../src/views/settings/SecurityTab.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACjC,OAAO,EAAW,WAAW,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,yBAAyB,GAC1B,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAE9D,SAAS,YAAY;IACnB,OAAO,CACL,eAAK,SAAS,EAAC,2DAA2D,aACxE,cAAK,SAAS,EAAC,gCAAgC,GAAG,EAClD,cAAK,SAAS,EAAC,gCAAgC,GAAG,EAClD,eAAK,SAAS,EAAC,WAAW,aACxB,cAAK,SAAS,EAAC,6BAA6B,GAAG,EAC/C,cAAK,SAAS,EAAC,4BAA4B,GAAG,IAC1C,IACF,CACP,CAAA;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAC1B,IAAI,EACJ,UAAU,GAIX;IACC,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,CAAA;IAChC,MAAM,EACJ,OAAO,EACP,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,MAAM,EACN,SAAS,EACT,SAAS,EACT,IAAI,EACJ,KAAK,EACL,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,sBAAsB,GACvB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAEhC,gFAAgF;IAChF,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAM;QACpD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACtE,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,EAAE,GAAG,QAAQ,CAAC,cAAc,CAAC,YAAY,OAAO,EAAE,CAAC,CAAA;QACzD,EAAE,EAAE,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IAC5D,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IAEb,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CACL,eAAK,SAAS,EAAC,WAAW,aACxB,KAAC,YAAY,KAAG,EAChB,KAAC,YAAY,KAAG,EAChB,KAAC,YAAY,KAAG,IACZ,CACP,CAAA;IACH,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,oCAAoC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;QAC5E,OAAO,CACL,eAAK,SAAS,EAAC,kGAAkG,aAC/G,KAAC,WAAW,IAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAC,8BAA8B,iBAAa,MAAM,GAAG,EACrF,0BACE,YAAG,SAAS,EAAC,6BAA6B,YACvC,SAAS;gCACR,CAAC,CAAC,6CAA6C;gCAC/C,CAAC,CAAC,+BAA+B,GACjC,EACJ,YAAG,SAAS,EAAC,MAAM,YAChB,SAAS;gCACR,CAAC,CAAC,kDAAkD;gCACpD,CAAC,CAAC,CAAC,SAAS,IAAI,+DAA+D,CAAC,GAChF,IACA,IACF,CACP,CAAA;IACH,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,gBAAgB,aAC7B,KAAC,kBAAkB,IAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,GAAI,EAEnE,KAAC,iBAAiB,KAAG,EAEpB,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAC,yBAAyB,IAAC,MAAM,EAAE,MAAM,GAAI,EAElE,CAAC,OAAO,IAAI,CACX,YAAG,SAAS,EAAC,+BAA+B,6FAExC,CACL,EAED,KAAC,WAAW,IACV,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAC3B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EACnC,UAAU,EAAE,UAAU,GACtB,EAEF,cAAK,EAAE,EAAC,mBAAmB,YACzB,KAAC,iBAAiB,IAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,IAAI,CAAC,cAAc,EACnC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,sBAAsB,EAAE,GAChD,GACE,EAEN,cAAK,EAAE,EAAC,uBAAuB,YAC7B,KAAC,oBAAoB,IACnB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,IAAI,CAAC,WAAW,EAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,WAAW,EAAE,IAAI,CAAC,WAAW,EAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EACvC,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,GACtB,GACE,EAEN,eAAK,EAAE,EAAC,gBAAgB,EAAC,SAAS,EAAC,WAAW,aAC3C,OAAO,IAAI,KAAC,kBAAkB,KAAG,EAClC,KAAC,gBAAgB,IACf,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,EACrC,KAAK,EAAE,IAAI,CAAC,KAAK,EACjB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,GACtB,IACE,EAEL,SAAS,KAAK,OAAO,IAAI,CACxB,YAAG,SAAS,EAAC,0BAA0B,EAAC,IAAI,EAAC,OAAO,oEAEhD,CACL,EAID,KAAC,6BAA6B,IAC5B,IAAI,EAAE,aAAa,KAAK,IAAI,EAC5B,KAAK,EAAC,iCAAiC,EACvC,WAAW,EACT,aAAa,IAAI,wEAAwE,EAE3F,YAAY,EAAC,aAAa,EAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EACpD,QAAQ,EAAE,oBAAoB,GAC9B,EAEF,KAAC,eAAe,IACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EACzB,OAAO,EAAE,KAAK,GACd,IACE,CACP,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prenta/admin",
-  "version": "1.17.13",
+  "version": "1.17.16",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -99,16 +99,16 @@
     "tailwindcss": "^4.0.0",
     "typescript": "^5.7.0",
     "vitest": "^4.1.0",
-    "@prenta/core": "7.5.4",
+    "@prenta/component-blocks": "0.3.1",
+    "@prenta/core": "7.6.4",
     "@prenta/plugin-ai": "3.0.1",
     "@prenta/plugin-blocks": "0.2.1",
     "@prenta/plugin-commerce": "0.2.3",
-    "@prenta/component-blocks": "0.3.1",
+    "@prenta/plugin-forms": "0.1.1",
     "@prenta/plugin-media": "0.2.1",
     "@prenta/plugin-navigation": "0.3.1",
     "@prenta/plugin-seo": "1.0.1",
-    "@prenta/plugin-forms": "0.1.1",
-    "@prenta/sections-react": "0.17.56"
+    "@prenta/sections-react": "0.17.61"
   },
   "scripts": {
     "build": "tsc --project tsconfig.json && npx @tailwindcss/cli -i src/styles/build-input.css -o dist/prenta-admin.css --minify",

package/src/AdminRoot.tsx

@@ -1,6 +1,6 @@
 'use client'
 
-import { useState, useMemo, useEffect, useRef, useCallback } from 'react'
+import { useState, useMemo, useEffect, useRef, useCallback, Suspense } from 'react'
 import * as Dialog from '@radix-ui/react-dialog'
 import { toast } from 'sonner'
 import { Layout } from './layout/Layout.js'
@@ -14,22 +14,38 @@ import {
   resetCustomSectionTypes,
   resolveCustomSectionTypes,
   registerSectionTemplates,
+  registerSectionPathTemplates,
   resetSectionTemplates,
   type CustomSectionTypeInput,
 } from '@prenta/core/page-sections'
 import { Dashboard } from './views/Dashboard.js'
-import { CollectionList } from './views/CollectionList.js'
-import { DocumentEdit } from './views/DocumentEdit.js'
-import { MediaBrowser } from './views/MediaBrowser.js'
-import { Settings } from './views/Settings.js'
-import { Profile } from './views/Profile.js'
-import { Forms } from './views/Forms.js'
-import { FormEditor } from './views/FormEditor.js'
-import { FormSubmissions } from './views/FormSubmissions.js'
-import { FormEntries } from './views/FormEntries.js'
-import { FormDeliveries } from './views/FormDeliveries.js'
-import { SEO, SEO_DEEP_PATHS, seoTabForPath } from './views/SEO.js'
-import { ScriptTags } from './views/ScriptTags.js'
+import { SEO_DEEP_PATHS, seoTabForPath } from './views/seo/seo-routes.js'
+import {
+  CollectionList,
+  DocumentEdit,
+  FormDeliveries,
+  FormEditor,
+  FormEntries,
+  FormSubmissions,
+  Forms,
+  MediaBrowser,
+  NewPostPicker,
+  NewPostTypeInstructions,
+  PageSectionEditor,
+  PageTagManager,
+  PagesListView,
+  PostSectionEditor,
+  PostTemplateEditor,
+  PostTypeEditor,
+  PostTypesView,
+  PostsListView,
+  Profile,
+  SEO,
+  ScriptTags,
+  Settings,
+  Trash,
+  ViewFallback,
+} from './views/lazy-views.js'
 import { SetupWizard } from './views/SetupWizard.js'
 import { Login } from './views/Login.js'
 import { HiddenLoginNotFound } from './views/HiddenLoginNotFound.js'
@@ -44,23 +60,12 @@ import { useKeyboardShortcuts } from './hooks/useKeyboardShortcuts.js'
 import { useAppearanceBootstrap } from './hooks/useAppearanceBootstrap.js'
 import { useIdleLogout } from './hooks/useIdleLogout.js'
 import { resolveLogoutRedirect } from './lib/logout-redirect.js'
-import { PageSectionEditor } from './views/page-editor/PageSectionEditor.js'
 import {
   AdminSectionRenderersProvider,
   type AdminSectionRendererMap,
 } from './views/page-editor/sections/index.js'
 import { ThemeChromeProvider } from './views/page-editor/theme-chrome/index.js'
 import type { AdminThemeChrome } from './lib/theme-chrome.js'
-import { Trash } from './views/Trash.js'
-import { PagesListView } from './views/Pages/PagesListView.js'
-import { PageTagManager } from './views/Pages/PageTagManager.js'
-import { PostsListView } from './views/Posts/PostsListView.js'
-import { PostTypesView } from './views/Posts/PostTypesView.js'
-import { PostTypeEditor } from './views/Posts/PostTypeEditor.js'
-import { NewPostPicker } from './views/Posts/NewPostPicker.js'
-import { NewPostTypeInstructions } from './views/Posts/NewPostTypeInstructions.js'
-import { PostSectionEditor } from './views/post-editor/PostSectionEditor.js'
-import { PostTemplateEditor } from './views/post-editor/PostTemplateEditor.js'
 
 export interface AdminRootProps {
   config: any
@@ -272,6 +277,7 @@ function AdminShell({
     registerSectionTypes(resolveCustomSectionTypes(config?.sections))
     resetSectionTemplates()
     registerSectionTemplates(config?.sections?.templates)
+    registerSectionPathTemplates(config?.sections?.pathTemplates)
 
     let cancelled = false
     void cmsApi<CustomSectionTypeInput[]>('/page-sections/types').then((res) => {
@@ -709,7 +715,9 @@ function AdminShell({
       onNavigate={navigate}
       onLogout={handleLogout}
     >
-      <ErrorBoundary>{renderView()}</ErrorBoundary>
+      <ErrorBoundary>
+        <Suspense fallback={<ViewFallback />}>{renderView()}</Suspense>
+      </ErrorBoundary>
       <ShortcutHelp open={shortcutHelpOpen} onClose={() => setShortcutHelpOpen(false)} />
     </Layout>
   )

package/src/__tests__/lib/pages-service-fetch.test.ts

@@ -69,6 +69,11 @@ describe('fetchPagesDataset', () => {
     )
 
     const ds = await fetchPagesDataset()
+    const pagesCall = cmsApi.mock.calls.find((call) =>
+      String(call[0]).startsWith('/collections/pages'),
+    )
+    expect(String(pagesCall?.[0])).toContain('pick=title')
+    expect(String(pagesCall?.[0])).not.toContain('sections')
     expect(ds.pages).toHaveLength(3)
     expect(ds.tags.find((t) => t.slug === 'a')?.pageCount).toBe(2)
     expect(ds.tags.find((t) => t.slug === 'b')?.pageCount).toBe(1)

package/src/__tests__/views/admin-lazy-route.render.test.tsx

@@ -0,0 +1,39 @@
+// @vitest-environment happy-dom
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { cleanup, render, screen } from '@testing-library/react'
+
+vi.mock('../../lib/api.js', () => ({
+  cmsApi: vi.fn(async () => ({ data: { docs: [] }, status: 200 })),
+  ensureCsrfToken: vi.fn(async () => undefined),
+  setApiBase: vi.fn(),
+  getApiBase: () => '',
+}))
+
+const storage = new Map<string, string>()
+vi.stubGlobal('localStorage', {
+  getItem: (key: string) => storage.get(key) ?? null,
+  setItem: (key: string, value: string) => void storage.set(key, String(value)),
+  removeItem: (key: string) => void storage.delete(key),
+  clear: () => storage.clear(),
+})
+
+const { AdminRoot } = await import('../../AdminRoot.js')
+
+afterEach(() => {
+  cleanup()
+  window.history.replaceState({}, '', '/')
+})
+
+describe('AdminRoot lazy routes', () => {
+  it('loads the trash view through the route split', async () => {
+    window.history.replaceState({}, '', '/admin/trash')
+    render(
+      <AdminRoot
+        config={{}}
+        session={{ user: { id: 'u1', email: 'admin@example.com', role: 'ADMIN' } }}
+        initialPath="/trash"
+      />,
+    )
+    expect(await screen.findByText('Trash is empty')).toBeTruthy()
+  })
+})

package/src/__tests__/views/admin-lazy-views.test.ts

@@ -0,0 +1,70 @@
+import { existsSync, readFileSync, statSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { describe, expect, it } from 'vitest'
+
+const srcRoot = fileURLToPath(new URL('../../', import.meta.url))
+
+const HEAVY_VIEWS = [
+  'views/page-editor/PageSectionEditor.tsx',
+  'views/post-editor/PostSectionEditor.tsx',
+  'views/post-editor/PostTemplateEditor.tsx',
+  'views/Settings.tsx',
+  'views/SEO.tsx',
+  'views/MediaBrowser.tsx',
+  'views/DocumentEdit.tsx',
+  'views/Forms.tsx',
+]
+
+function resolveSpecifier(fromFile: string, specifier: string): string | undefined {
+  const base = resolve(dirname(fromFile), specifier)
+  const candidates = [
+    base,
+    base.replace(/\.js$/, '.tsx'),
+    base.replace(/\.js$/, '.ts'),
+    `${base}.tsx`,
+    `${base}.ts`,
+    join(base, 'index.tsx'),
+    join(base, 'index.ts'),
+  ]
+  return candidates.find((candidate) => existsSync(candidate))
+}
+
+/** Static import graph. Dynamic `import()` edges are stripped first. */
+function staticGraph(entry: string): Set<string> {
+  const seen = new Set<string>()
+  const stack = [entry]
+  while (stack.length > 0) {
+    const file = stack.pop()
+    if (!file || seen.has(file)) continue
+    seen.add(file)
+    const text = readFileSync(file, 'utf8').replace(/import\s*\(\s*['"][^'"]+['"]\s*\)/g, '')
+    for (const match of text.matchAll(/from ['"](\.[^'"]+)['"]/g)) {
+      const specifier = match[1]
+      if (!specifier) continue
+      const next = resolveSpecifier(file, specifier)
+      if (next) stack.push(next)
+    }
+  }
+  return seen
+}
+
+describe('admin route-level code splitting', () => {
+  it('keeps heavy views out of the AdminRoot static import graph', () => {
+    const graph = staticGraph(join(srcRoot, 'AdminRoot.tsx'))
+    const present = HEAVY_VIEWS.filter((view) => graph.has(join(srcRoot, view)))
+    expect(present).toEqual([])
+
+    const bytes = HEAVY_VIEWS.reduce((total, view) => total + statSync(join(srcRoot, view)).size, 0)
+    // The shell no longer statically imports these modules. Their source is
+    // the chunk the app bundler can defer. This floor fails if the split is
+    // reverted and the files are pulled back into the entry graph above.
+    expect(bytes).toBeGreaterThan(40_000)
+
+    const lazySource = readFileSync(join(srcRoot, 'views/lazy-views.tsx'), 'utf8')
+    expect(lazySource).toContain("import('./page-editor/PageSectionEditor.js')")
+    expect(lazySource).toContain("import('./SEO.js')")
+    expect(lazySource).toContain("import('./Settings.js')")
+    expect(lazySource).toContain("import('./MediaBrowser.js')")
+  })
+})

package/src/__tests__/views/audit-log-export.test.ts

@@ -0,0 +1,17 @@
+import { describe, expect, it } from 'vitest'
+
+import { auditExportPath } from '../../views/settings/AuditLogExportCard.js'
+
+describe('auditExportPath', () => {
+  it('omits empty dates and keeps the format', () => {
+    expect(auditExportPath({ format: 'csv', from: '', to: '' })).toBe(
+      '/security/audit-log/export?format=csv',
+    )
+  })
+
+  it('includes a date range', () => {
+    expect(auditExportPath({ format: 'json', from: '2026-01-01', to: '2026-01-31' })).toBe(
+      '/security/audit-log/export?format=json&from=2026-01-01&to=2026-01-31',
+    )
+  })
+})

package/src/__tests__/views/trash.render.test.tsx

@@ -96,4 +96,44 @@ describe('Trash', () => {
       )
     })
   })
+
+  it('asks before permanently deleting a trashed document', async () => {
+    cmsApi.mockImplementation(async (endpoint: string, options?: { method?: string }) => {
+      if (options?.method === 'POST' && String(endpoint).includes('/purge')) {
+        return { data: { success: true }, status: 200 }
+      }
+      if (String(endpoint).includes('/collections/pages')) {
+        return {
+          data: {
+            docs: [
+              {
+                id: 'p1',
+                title: 'About',
+                slug: null,
+                deletedAt: '2026-08-01T00:00:00.000Z',
+                data: { slug: 'about' },
+              },
+            ],
+          },
+          status: 200,
+        }
+      }
+      return { data: { docs: [] }, status: 200 }
+    })
+
+    render(<Trash onNavigate={vi.fn()} />)
+    expect(await screen.findByText('About')).toBeTruthy()
+    fireEvent.click(screen.getByRole('button', { name: 'Delete About permanently' }))
+    expect(cmsApi).not.toHaveBeenCalledWith(expect.stringContaining('/purge'), expect.anything())
+    fireEvent.click(screen.getByRole('button', { name: 'Delete permanently' }))
+    await waitFor(() => {
+      expect(cmsApi).toHaveBeenCalledWith(
+        '/collections/pages/p1/purge',
+        expect.objectContaining({ method: 'POST' }),
+      )
+    })
+    await waitFor(() => {
+      expect(screen.queryByText('About')).toBeNull()
+    })
+  })
 })