@rapidmx/web-client 0.19.0 → 0.21.0

package/dist/apps/shared/components/admin/settings/PluginsManager.js

@@ -11,6 +11,7 @@ import Button from "@rapidmx/react-shared/components/buttons/Button.js";
 import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
 import { notify } from "../../../notifications/store.js";
 import { isElevationRequired } from "../elevation.js";
+import { getAllowPrerelease, setAllowPrerelease } from "./pluginPreferences.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 /** How often status is refreshed while server copies are still applying a change. */
 const PENDING_POLL_MS = 5000;
@@ -43,6 +44,45 @@ function purgeFailure(purge) {
 }
 /** A day, in the administrator's own format. */
 const formatDate = (iso) => new Date(iso).toLocaleDateString(undefined, { dateStyle: "medium" });
+const BULK_WORDS = {
+    upgrade: { doing: "Upgrading", done: "upgraded" },
+    disable: { doing: "Disabling", done: "disabled" },
+    uninstall: { doing: "Uninstalling", done: "uninstalled" },
+};
+const pluralPlugins = (count) => `${count} ${count === 1 ? "plugin" : "plugins"}`;
+/**
+ * `plugins` in the order a bulk action has to change them in, since a plugin that others require can't be disabled or
+ * uninstalled while they're enabled, and one that requires others may need them at their new versions first: each
+ * plugin comes after the ones it requires (`dependenciesFirst`, for an upgrade) or before them (for the rest).
+ */
+function orderByRequirements(plugins, dependenciesFirst) {
+    const byName = new Map(plugins.map((plugin) => [plugin.name, plugin]));
+    const ordered = [];
+    const seen = new Set();
+    const visit = (plugin) => {
+        if (seen.has(plugin.name)) {
+            return;
+        }
+        seen.add(plugin.name);
+        for (const required of Object.keys(plugin.manifest.requires ?? {})) {
+            const dependency = byName.get(required);
+            if (dependency) {
+                visit(dependency);
+            }
+        }
+        ordered.push(plugin);
+    };
+    plugins.forEach(visit);
+    return dependenciesFirst ? ordered : ordered.reverse();
+}
+/**
+ * The bar that runs across the top of the window while plugins are being changed, so it's plain that something is still
+ * happening: it slides endlessly, since how long a registry lookup or an install takes isn't known. It stands still
+ * (as a faded full bar) when the user asks for less motion.
+ */
+function PluginProgressBar({ label }) {
+    return (_jsx("div", { role: "progressbar", "aria-label": label, className: "fixed inset-x-0 top-0 z-[1100] h-1 overflow-hidden bg-primary/20", children: _jsx("div", { className: "rr-progress-indeterminate h-full w-1/3 rounded-pill bg-primary motion-reduce:w-full motion-reduce:opacity-40" }) }));
+}
 /** Classes for a plugin table's header and body cells. */
 const TH_CLASS = "text-left text-xs uppercase tracking-wide text-text-muted py-2 px-2.5 border-b border-border";
 const TD_CLASS = "py-3 px-2.5 border-b border-border align-top";
@@ -80,6 +120,21 @@ export default function PluginsManager({ embedded = false } = {}) {
     const [listStale, setListStale] = useState(false);
     /** How many times status has been retried while none has ever been read. */
     const [statusRetries, setStatusRetries] = useState(0);
+    /** Whether prerelease versions are offered (a preference of this browser). */
+    const [allowPrerelease, setAllowPrereleaseState] = useState(getAllowPrerelease);
+    /** The same, for `refreshUpdates()`, which must stay the same function for the effects that depend on it. */
+    const allowPrereleaseRef = useRef(allowPrerelease);
+    /** Identifies the latest update check, so a slower earlier one can't replace what it found. */
+    const updatesRequest = useRef(0);
+    /** The plugins ticked for a bulk action. */
+    const [selected, setSelected] = useState(new Set());
+    /** Set while a bulk action runs. */
+    const [bulk, setBulk] = useState(null);
+    const [bulkFailure, setBulkFailure] = useState(null);
+    /** The plugins waiting for the administrator to confirm uninstalling them together. */
+    const [confirmingBulkUninstall, setConfirmingBulkUninstall] = useState(null);
+    /** How many changes (or the lookups that come before them) are waiting on the server. */
+    const [working, setWorking] = useState(0);
     const statusRequest = useRef(null);
     /** The state each data deletion was last seen in, so a notification is raised when one that was under way ends. */
     const seenPurges = useRef(new Map());
@@ -107,12 +162,41 @@ export default function PluginsManager({ embedded = false } = {}) {
         }));
         return statusRequest.current;
     }, []);
+    /** Checks the registry for newer versions. Resolves what it found, or `undefined` when it couldn't check. */
     const refreshUpdates = useCallback(() => {
+        const token = ++updatesRequest.current;
         // Also advisory: a registry that can't be reached just means no update badges.
-        return getPluginUpdates()
-            .then((list) => setUpdates(new Map(list.map((info) => [info.uid, info]))))
-            .catch(() => setUpdates(new Map()));
+        return getPluginUpdates({ prerelease: allowPrereleaseRef.current })
+            .then((list) => {
+            if (token === updatesRequest.current) {
+                setUpdates(new Map(list.map((info) => [info.uid, info])));
+            }
+            return list;
+        })
+            .catch(() => {
+            if (token === updatesRequest.current) {
+                setUpdates(new Map());
+            }
+            return undefined;
+        });
     }, []);
+    /** Keeps `work` counted as in progress, which is what the bar across the top of the window shows. */
+    const track = useCallback(async (work) => {
+        setWorking((count) => count + 1);
+        try {
+            return await work;
+        }
+        finally {
+            setWorking((count) => count - 1);
+        }
+    }, []);
+    function changePrerelease(allow) {
+        setAllowPrerelease(allow);
+        allowPrereleaseRef.current = allow;
+        setAllowPrereleaseState(allow);
+        // What counts as an update depends on it.
+        void refreshUpdates();
+    }
     /** Re-reads the list, for changes that also installed or enabled other plugins. */
     const reload = useCallback(() => {
         return listPlugins()
@@ -210,10 +294,14 @@ export default function PluginsManager({ embedded = false } = {}) {
         // A change waiting for confirmation keeps the row busy by itself, until the confirmation closes.
         setBusy(plugin.uid, false);
     }
+    /** Disables an installed plugin, resolving why it couldn't be, or `null`. */
+    function disable(plugin) {
+        return attempt(async () => applied(await track(updatePlugin(plugin.uid, { version: plugin.version, enabled: false }))), `Could not disable ${plugin.manifest.displayName}.`);
+    }
     function toggle(plugin) {
         const displayName = plugin.manifest.displayName;
         if (plugin.enabled) {
-            return onRow(plugin, () => attempt(async () => applied(await updatePlugin(plugin.uid, { version: plugin.version, enabled: false })), `Could not disable ${displayName}.`));
+            return onRow(plugin, () => disable(plugin));
         }
         // Enabling a plugin also installs or enables the plugins it requires, so it's previewed like any other change.
         // The installed version is planned from its stored manifest, so this doesn't need the registry. A preview that
@@ -221,7 +309,7 @@ export default function PluginsManager({ embedded = false } = {}) {
         // saw - so the failure is shown with a retry instead.
         return onRow(plugin, async () => {
             const problem = await planned(plugin.name, plugin.packageVersion, displayName, async (plan) => {
-                applied(await updatePlugin(plugin.uid, { version: plugin.version, enabled: true, expectedPlan: expectedPlanOf(plan) }));
+                applied(await track(updatePlugin(plugin.uid, { version: plugin.version, enabled: true, expectedPlan: expectedPlanOf(plan) })));
                 if (plan.install.length > 0 || plan.enable.length > 0) {
                     void reload();
                 }
@@ -239,7 +327,7 @@ export default function PluginsManager({ embedded = false } = {}) {
     async function planned(name, packageVersion, displayName, apply, failure, options = {}) {
         let plan;
         try {
-            plan = await planPluginChange(name, packageVersion);
+            plan = await track(planPluginChange(name, packageVersion));
         }
         catch (err) {
             return errorMessage(err, failure);
@@ -248,6 +336,9 @@ export default function PluginsManager({ embedded = false } = {}) {
             return `${displayName} ${plan.plugin.version} can't be installed. ${plan.conflicts.join(" ")}`;
         }
         if (plan.install.length > 0 || plan.enable.length > 0) {
+            if (options.unattended) {
+                return `${displayName} ${plan.plugin.version} also needs other plugins installed or enabled, so it wasn't changed. Change it on its own to review them.`;
+            }
             setConfirming({ displayName, plan, apply, failure, uid: options.uid });
             return null;
         }
@@ -255,7 +346,7 @@ export default function PluginsManager({ embedded = false } = {}) {
     }
     function install(name, packageVersion, displayName) {
         return planned(name, packageVersion, displayName, async (plan) => {
-            const result = await addPlugin(name, packageVersion, expectedPlanOf(plan));
+            const result = await track(addPlugin(name, packageVersion, expectedPlanOf(plan)));
             applied(...result.dependencies, result.plugin);
             // Adding a plugin cancels the deletion of its data that was waiting for the servers to stop running it.
             for (const warning of result.warnings ?? []) {
@@ -263,18 +354,18 @@ export default function PluginsManager({ embedded = false } = {}) {
             }
         }, `Could not install ${displayName}.`);
     }
-    function changeVersion(plugin, packageVersion) {
+    function changeVersion(plugin, packageVersion, unattended = false) {
         const failure = `Could not upgrade ${plugin.manifest.displayName}.`;
         if (!plugin.enabled) {
             // A disabled plugin stays disabled, so nothing it requires is installed or enabled - there's nothing to preview.
-            return attempt(async () => applied(await updatePlugin(plugin.uid, { version: plugin.version, packageVersion })), failure);
+            return attempt(async () => applied(await track(updatePlugin(plugin.uid, { version: plugin.version, packageVersion }))), failure);
         }
         return planned(plugin.name, packageVersion, plugin.manifest.displayName, async (plan) => {
-            applied(await updatePlugin(plugin.uid, { version: plugin.version, packageVersion, expectedPlan: expectedPlanOf(plan) }));
+            applied(await track(updatePlugin(plugin.uid, { version: plugin.version, packageVersion, expectedPlan: expectedPlanOf(plan) })));
             if (plan.install.length > 0 || plan.enable.length > 0) {
                 void reload();
             }
-        }, failure, { uid: plugin.uid });
+        }, failure, { uid: plugin.uid, unattended });
     }
     function upgrade(plugin, packageVersion) {
         return onRow(plugin, () => changeVersion(plugin, packageVersion));
@@ -285,7 +376,7 @@ export default function PluginsManager({ embedded = false } = {}) {
         return onRow(purge, async () => {
             let latest;
             try {
-                latest = (await planPluginChange(purge.name)).plugin.version;
+                latest = (await track(planPluginChange(purge.name, undefined, { prerelease: allowPrerelease }))).plugin.version;
             }
             catch (err) {
                 return errorMessage(err, `Could not install ${displayName}.`);
@@ -309,35 +400,157 @@ export default function PluginsManager({ embedded = false } = {}) {
         }
         setBusy(purge.uid, false);
     }
+    /** Lists a data deletion the server just scheduled. Shown at once; the status polling that follows replaces it with
+     * what the servers report. */
+    function showScheduledPurge(scheduled) {
+        setStatus((prev) => prev && scheduled ? { ...prev, purges: [...(prev.purges ?? []).filter((purge) => purge.uid !== scheduled.uid), scheduled] } : prev);
+    }
+    /** Uninstalls an installed plugin, and with `purgeData` deletes the data it stored once no server runs it. Resolves
+     * why it couldn't be, or `null`. */
+    async function uninstall(plugin, purgeData) {
+        try {
+            const result = await removePlugin(plugin.uid, { purgeData });
+            setPlugins((prev) => prev.filter((other) => other.uid !== plugin.uid));
+            if (result.purgeScheduled) {
+                showScheduledPurge(result.purge);
+            }
+            return null;
+        }
+        catch (err) {
+            return isElevationRequired(err) ? ELEVATION_MESSAGE : errorMessage(err, `Could not uninstall ${plugin.manifest.displayName}.`);
+        }
+    }
+    /**
+     * Applies `kind` to `targets` one after another, in the order their requirements allow, and says what became of
+     * them. A plugin that can't be changed is left as it was and the rest carry on. For an upgrade, `versions` holds the
+     * version each plugin goes to; for an uninstall, `purgeData` also deletes what each stored. Deleting data needs the
+     * administrator to have confirmed their identity recently, which no plugin will get past if one is refused for it,
+     * so the rest aren't tried.
+     */
+    async function runBulk(kind, targets, options = {}) {
+        const { versions = new Map(), purgeData = false } = options;
+        const ordered = orderByRequirements(targets, kind === "upgrade");
+        const reasons = [];
+        const failed = new Set();
+        setError(null);
+        setRetryEnableUid(null);
+        setBulkFailure(null);
+        await track((async () => {
+            for (const [index, plugin] of ordered.entries()) {
+                setBulk({ kind, done: index, total: ordered.length, current: plugin.manifest.displayName });
+                const problem = kind === "upgrade"
+                    ? await changeVersion(plugin, versions.get(plugin.uid), true)
+                    : kind === "disable"
+                        ? await disable(plugin)
+                        : await uninstall(plugin, purgeData);
+                if (!problem) {
+                    continue;
+                }
+                failed.add(plugin.uid);
+                reasons.push(`${plugin.manifest.displayName}: ${problem}`);
+                if (problem === ELEVATION_MESSAGE) {
+                    for (const untried of ordered.slice(index + 1)) {
+                        failed.add(untried.uid);
+                        reasons.push(`${untried.manifest.displayName}: Not attempted.`);
+                    }
+                    break;
+                }
+            }
+        })());
+        setBulk(null);
+        setSelected(failed);
+        const succeeded = ordered.length - failed.size;
+        if (kind === "uninstall" && succeeded > 0) {
+            watchRollout();
+        }
+        if (succeeded > 0) {
+            notify({
+                kind: "success",
+                title: `${pluralPlugins(succeeded)} ${BULK_WORDS[kind].done}`,
+                message: purgeData ? "Their data is deleted once every server has stopped running them. Adding a plugin again before then cancels its deletion." : undefined,
+            });
+        }
+        if (reasons.length > 0) {
+            setBulkFailure({ title: `${pluralPlugins(reasons.length)} couldn't be ${BULK_WORDS[kind].done}:`, reasons });
+        }
+    }
+    /** Upgrades every plugin that has an update, whatever is ticked. Checks the registry first, so it's never working
+     * from an out-of-date list of updates. */
+    async function upgradeAll() {
+        setError(null);
+        setBulkFailure(null);
+        const found = await track(refreshUpdates());
+        if (!found) {
+            setError("Could not check for plugin updates.");
+            return;
+        }
+        const versions = new Map();
+        for (const info of found) {
+            if (info.updateAvailable && info.latestVersion) {
+                versions.set(info.uid, info.latestVersion);
+            }
+        }
+        const targets = plugins.filter((plugin) => versions.has(plugin.uid));
+        if (targets.length === 0) {
+            const unchecked = found.filter((info) => info.error).length;
+            notify(unchecked > 0
+                ? { kind: "warning", title: "No updates found", message: `${pluralPlugins(unchecked)} couldn't be checked against the registry.` }
+                : { kind: "info", title: "All plugins are up to date" });
+            return;
+        }
+        await runBulk("upgrade", targets, { versions });
+    }
+    const toggleSelected = (uid) => setSelected((prev) => {
+        const next = new Set(prev);
+        if (!next.delete(uid)) {
+            next.add(uid);
+        }
+        return next;
+    });
+    const selectedPlugins = plugins.filter((plugin) => selected.has(plugin.uid));
+    const allSelected = plugins.length > 0 && selectedPlugins.length === plugins.length;
+    const selectedUpgrades = selectedPlugins.filter((plugin) => updates.get(plugin.uid)?.updateAvailable);
+    const selectedEnabled = selectedPlugins.filter((plugin) => plugin.enabled);
     // Retried against the plugin as it's listed now (a newer version, or already enabled elsewhere, hides the retry).
     const retryEnable = plugins.find((plugin) => plugin.uid === retryEnableUid && !plugin.enabled);
     const displayNameOf = (name) => plugins.find((plugin) => plugin.name === name)?.manifest.displayName ?? name;
     const SectionHeading = embedded ? "h3" : "h2";
     const addButton = (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0", onClick: () => setAdding(true), children: "Add by name" }));
-    return (_jsxs(_Fragment, { children: [embedded ? (_jsx("p", { className: "text-sm text-text-muted mb-5 max-w-3xl", children: "Changes are applied by restarting the servers one at a time, so mail keeps flowing. Plugins run with full access to the server, so only add ones you trust." })) : (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between gap-4 mb-2", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Plugins" }), addButton] }), _jsx("p", { className: "text-sm text-text-muted mb-6 max-w-3xl", children: "Plugins add protocols and features to every server. Changes are applied by restarting the servers one at a time, so mail keeps flowing. Plugins run with full access to the server, so only add ones you trust." })] })), error && (_jsxs(Alert, { children: [error, retryEnable && (_jsxs(_Fragment, { children: [" ", _jsx(Button, { type: "button", variant: "text", className: "!w-auto !p-0", onClick: () => void toggle(retryEnable), children: "Try again" })] }))] })), _jsx(RolloutBanner, { status: status }), statusStale && status && (_jsx("p", { className: "mb-4 text-xs text-text-muted", children: "Couldn't refresh server status. Showing the last status reported." })), listStale && (_jsxs("p", { className: "mb-4 text-xs text-text-muted", children: ["Couldn't re-read the plugin list, so it may be out of date.", " ", _jsx(Button, { type: "button", variant: "text", className: "!w-auto !p-0 !text-xs", onClick: () => void reload(), children: "Retry" })] })), _jsxs("div", { className: "flex items-center justify-between gap-4 mb-2", children: [_jsx(SectionHeading, { className: "text-sm font-bold uppercase tracking-wide", children: "Installed plugins" }), embedded && addButton] }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : plugins.length === 0 && purges.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No plugins installed." })) : (_jsx("div", { className: "overflow-x-auto", children: _jsxs("table", { role: "table", className: "w-full text-sm border-collapse block lg:table", children: [_jsx("thead", { role: "rowgroup", className: "hidden lg:table-header-group", children: _jsxs("tr", { role: "row", children: [_jsx("th", { role: "columnheader", className: TH_CLASS, children: "Plugin" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: "Version" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: "Status" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: _jsx("span", { className: "sr-only", children: "Actions" }) })] }) }), _jsxs("tbody", { role: "rowgroup", className: "block lg:table-row-group", children: [plugins.map((plugin) => {
-                                    const update = updates.get(plugin.uid);
-                                    const latest = update?.updateAvailable ? update.latestVersion : undefined;
-                                    const busy = busyUids.has(plugin.uid) || confirming?.uid === plugin.uid;
-                                    const requires = Object.keys(plugin.manifest.requires ?? {}).map(displayNameOf);
-                                    const requiredBy = plugins
-                                        .filter((other) => other.uid !== plugin.uid && other.manifest.requires?.[plugin.name] !== undefined)
-                                        .map((other) => other.manifest.displayName);
-                                    return (_jsxs("tr", { role: "row", className: INSTALLED_ROW_CLASS, children: [_jsxs("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-3 pb-2`, children: [_jsx("div", { className: "font-semibold", children: plugin.manifest.displayName }), _jsx("div", { className: "text-xs text-text-muted", children: plugin.name }), plugin.manifest.description && (_jsx("div", { className: "text-xs text-text-muted mt-1 max-w-md", children: plugin.manifest.description })), requires.length > 0 && _jsxs("div", { className: "text-xs text-text-muted mt-1", children: ["Requires: ", requires.join(", ")] }), requiredBy.length > 0 && (_jsxs("div", { className: "text-xs text-text-muted mt-1", children: ["Required by: ", requiredBy.join(", ")] }))] }), _jsxs("td", { role: "cell", className: `${INSTALLED_TD_CLASS} pt-1 pb-1 whitespace-nowrap`, children: [_jsx("div", { children: plugin.packageVersion }), latest && _jsxs("div", { className: "mt-1 text-xs font-semibold text-primary-dark", children: ["Update available: ", latest] })] }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} pt-1 pb-1`, children: _jsx(PluginStatusCell, { plugin: plugin, status: status }) }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-2 pb-3`, children: _jsxs("div", { className: "flex flex-col items-start gap-1.5 lg:items-end lg:min-w-[11rem]", children: [_jsxs("div", { className: "flex flex-wrap gap-2 lg:justify-end", children: [latest && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": `Upgrade ${plugin.manifest.displayName} to ${latest}`, disabled: busy, onClick: () => void upgrade(plugin, latest), children: "Upgrade" })), (plugin.manifest.settings ?? []).length > 0 && (_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", onClick: () => setConfiguring(plugin), children: "Settings" })), _jsx(Button, { variant: plugin.enabled ? "secondary" : "primary", type: "button", className: "!w-auto min-w-[5.5rem]", "aria-label": `${plugin.enabled ? "Disable" : "Enable"} ${plugin.manifest.displayName}`, disabled: busy, onClick: () => void toggle(plugin), children: plugin.enabled ? "Disable" : "Enable" })] }), _jsxs("div", { className: "flex flex-wrap gap-x-4 lg:justify-end", children: [_jsx(Button, { variant: "text", type: "button", onClick: () => setUpgrading(plugin), children: "Change version" }), _jsx(Button, { variant: "text", type: "button", onClick: () => setRemoving(plugin), children: "Uninstall" })] })] }) })] }, plugin.uid));
-                                }), purges.map((purge) => (_jsx(UninstalledPluginRow, { purge: purge, busy: busyUids.has(purge.uid), onRetry: () => void retryPurge(purge), onInstall: () => void reinstall(purge) }, purge.uid)))] })] }) })), _jsx(PluginBrowser, { headingLevel: SectionHeading, plugins: plugins, onInstall: (result) => install(result.name, result.version, result.name), 
+    const bulkBusy = bulk !== null;
+    return (_jsxs(_Fragment, { children: [(working > 0 || pending) && _jsx(PluginProgressBar, { label: working > 0 ? "Working on plugins" : "Applying plugin changes" }), embedded ? (_jsx("p", { className: "text-sm text-text-muted mb-5 max-w-3xl", children: "Changes are applied by restarting the servers one at a time, so mail keeps flowing. Plugins run with full access to the server, so only add ones you trust." })) : (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between gap-4 mb-2", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Plugins" }), addButton] }), _jsx("p", { className: "text-sm text-text-muted mb-6 max-w-3xl", children: "Plugins add protocols and features to every server. Changes are applied by restarting the servers one at a time, so mail keeps flowing. Plugins run with full access to the server, so only add ones you trust." })] })), _jsxs("label", { className: "flex items-start gap-2 text-sm mb-5 max-w-3xl cursor-pointer", children: [_jsx("input", { type: "checkbox", className: "mt-0.5 h-4 w-4 shrink-0", checked: allowPrerelease, onChange: (e) => changePrerelease(e.target.checked) }), _jsxs("span", { className: "flex flex-col gap-0.5", children: [_jsx("span", { className: "font-semibold", children: "Allow pre-release versions" }), _jsx("span", { className: "text-xs text-text-muted", children: "Also offer beta and other pre-release builds, such as 1.0.0-beta.2, as updates and as versions to install. They can be unstable. This is remembered in this browser." })] })] }), bulkFailure && (_jsx(Alert, { children: _jsxs("div", { children: [bulkFailure.title, _jsx("ul", { className: "list-disc pl-5 mt-1", children: bulkFailure.reasons.map((reason) => (_jsx("li", { className: "break-words", children: reason }, reason))) })] }) })), error && (_jsxs(Alert, { children: [error, retryEnable && (_jsxs(_Fragment, { children: [" ", _jsx(Button, { type: "button", variant: "text", className: "!w-auto !p-0", onClick: () => void toggle(retryEnable), children: "Try again" })] }))] })), _jsx(RolloutBanner, { status: status }), statusStale && status && (_jsx("p", { className: "mb-4 text-xs text-text-muted", children: "Couldn't refresh server status. Showing the last status reported." })), listStale && (_jsxs("p", { className: "mb-4 text-xs text-text-muted", children: ["Couldn't re-read the plugin list, so it may be out of date.", " ", _jsx(Button, { type: "button", variant: "text", className: "!w-auto !p-0 !text-xs", onClick: () => void reload(), children: "Retry" })] })), _jsxs("div", { className: "flex items-center justify-between gap-4 mb-2", children: [_jsx(SectionHeading, { className: "text-sm font-bold uppercase tracking-wide", children: "Installed plugins" }), embedded && addButton] }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : plugins.length === 0 && purges.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No plugins installed." })) : (_jsxs("div", { className: "overflow-x-auto", children: [plugins.length > 0 && (_jsxs("div", { role: "toolbar", "aria-label": "Actions for several plugins", className: "flex flex-wrap items-center gap-2 py-2", children: [_jsxs("label", { className: "flex items-center gap-2 text-sm mr-2 cursor-pointer", children: [_jsx("input", { type: "checkbox", className: "h-4 w-4 shrink-0", "aria-label": "Select all plugins", checked: allSelected, disabled: bulkBusy, ref: (input) => {
+                                            if (input) {
+                                                input.indeterminate = selectedPlugins.length > 0 && !allSelected;
+                                            }
+                                        }, onChange: (e) => setSelected(e.target.checked ? new Set(plugins.map((plugin) => plugin.uid)) : new Set()) }), _jsx("span", { children: selectedPlugins.length > 0 ? `${selectedPlugins.length} selected` : "Select all" })] }), _jsxs(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Upgrade selected plugins", disabled: bulkBusy || selectedUpgrades.length === 0, onClick: () => void runBulk("upgrade", selectedUpgrades, {
+                                    versions: new Map(selectedUpgrades.map((plugin) => [plugin.uid, updates.get(plugin.uid).latestVersion])),
+                                }), children: ["Upgrade", selectedUpgrades.length > 0 ? ` (${selectedUpgrades.length})` : ""] }), _jsxs(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Disable selected plugins", disabled: bulkBusy || selectedEnabled.length === 0, onClick: () => void runBulk("disable", selectedEnabled), children: ["Disable", selectedEnabled.length > 0 ? ` (${selectedEnabled.length})` : ""] }), _jsxs(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Uninstall selected plugins", disabled: bulkBusy || selectedPlugins.length === 0, onClick: () => setConfirmingBulkUninstall(selectedPlugins), children: ["Uninstall", selectedPlugins.length > 0 ? ` (${selectedPlugins.length})` : ""] }), _jsx(Button, { type: "button", className: "!w-auto ml-auto", "aria-label": "Upgrade all plugins", loading: bulk?.kind === "upgrade", disabled: bulkBusy, onClick: () => void upgradeAll(), children: "Upgrade all" }), bulk && (_jsxs("span", { "aria-live": "polite", className: "basis-full text-xs text-text-muted", children: [BULK_WORDS[bulk.kind].doing, " ", bulk.current, " (", bulk.done + 1, " of ", bulk.total, ")\u2026"] }))] })), _jsxs("table", { role: "table", className: "w-full text-sm border-collapse block lg:table", children: [_jsx("thead", { role: "rowgroup", className: "hidden lg:table-header-group", children: _jsxs("tr", { role: "row", children: [_jsx("th", { role: "columnheader", className: TH_CLASS, children: "Plugin" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: "Version" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: "Status" }), _jsx("th", { role: "columnheader", className: TH_CLASS, children: _jsx("span", { className: "sr-only", children: "Actions" }) })] }) }), _jsxs("tbody", { role: "rowgroup", className: "block lg:table-row-group", children: [plugins.map((plugin) => {
+                                        const update = updates.get(plugin.uid);
+                                        const latest = update?.updateAvailable ? update.latestVersion : undefined;
+                                        const busy = busyUids.has(plugin.uid) || confirming?.uid === plugin.uid || bulkBusy;
+                                        const requires = Object.keys(plugin.manifest.requires ?? {}).map(displayNameOf);
+                                        const requiredBy = plugins
+                                            .filter((other) => other.uid !== plugin.uid && other.manifest.requires?.[plugin.name] !== undefined)
+                                            .map((other) => other.manifest.displayName);
+                                        return (_jsxs("tr", { role: "row", className: INSTALLED_ROW_CLASS, children: [_jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-3 pb-2`, children: _jsxs("div", { className: "flex items-start gap-3", children: [_jsx("input", { type: "checkbox", className: "mt-1 h-4 w-4 shrink-0", "aria-label": `Select ${plugin.manifest.displayName}`, checked: selected.has(plugin.uid), disabled: bulkBusy, onChange: () => toggleSelected(plugin.uid) }), _jsxs("div", { className: "min-w-0", children: [_jsx("div", { className: "font-semibold", children: plugin.manifest.displayName }), _jsx("div", { className: "text-xs text-text-muted", children: plugin.name }), plugin.manifest.description && (_jsx("div", { className: "text-xs text-text-muted mt-1 max-w-md", children: plugin.manifest.description })), requires.length > 0 && _jsxs("div", { className: "text-xs text-text-muted mt-1", children: ["Requires: ", requires.join(", ")] }), requiredBy.length > 0 && (_jsxs("div", { className: "text-xs text-text-muted mt-1", children: ["Required by: ", requiredBy.join(", ")] }))] })] }) }), _jsxs("td", { role: "cell", className: `${INSTALLED_TD_CLASS} pt-1 pb-1 whitespace-nowrap`, children: [_jsx("div", { children: plugin.packageVersion }), latest && _jsxs("div", { className: "mt-1 text-xs font-semibold text-primary-dark", children: ["Update available: ", latest] })] }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} pt-1 pb-1`, children: _jsx(PluginStatusCell, { plugin: plugin, status: status }) }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-2 pb-3`, children: _jsxs("div", { className: "flex flex-col items-start gap-1.5 lg:items-end lg:min-w-[11rem]", children: [_jsxs("div", { className: "flex flex-wrap gap-2 lg:justify-end", children: [latest && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": `Upgrade ${plugin.manifest.displayName} to ${latest}`, disabled: busy, onClick: () => void upgrade(plugin, latest), children: "Upgrade" })), (plugin.manifest.settings ?? []).length > 0 && (_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", onClick: () => setConfiguring(plugin), children: "Settings" })), _jsx(Button, { variant: plugin.enabled ? "secondary" : "primary", type: "button", className: "!w-auto min-w-[5.5rem]", "aria-label": `${plugin.enabled ? "Disable" : "Enable"} ${plugin.manifest.displayName}`, disabled: busy, onClick: () => void toggle(plugin), children: plugin.enabled ? "Disable" : "Enable" })] }), _jsxs("div", { className: "flex flex-wrap gap-x-4 lg:justify-end", children: [_jsx(Button, { variant: "text", type: "button", onClick: () => setUpgrading(plugin), children: "Change version" }), _jsx(Button, { variant: "text", type: "button", onClick: () => setRemoving(plugin), children: "Uninstall" })] })] }) })] }, plugin.uid));
+                                    }), purges.map((purge) => (_jsx(UninstalledPluginRow, { purge: purge, busy: busyUids.has(purge.uid), onRetry: () => void retryPurge(purge), onInstall: () => void reinstall(purge) }, purge.uid)))] })] })] })), _jsx(PluginBrowser, { headingLevel: SectionHeading, plugins: plugins, prerelease: allowPrerelease, onInstall: (result) => install(result.name, result.version, result.name), 
                 // The browser only offers an upgrade for a result it matched to one of these same `plugins`.
-                onUpgrade: (uid, packageVersion) => upgrade(plugins.find((p) => p.uid === uid), packageVersion) }), _jsx(AddPluginModal, { open: adding, onClose: () => setAdding(false), onAdd: async (name, packageVersion, displayName) => {
+                onUpgrade: (uid, packageVersion) => upgrade(plugins.find((p) => p.uid === uid), packageVersion) }), _jsx(AddPluginModal, { open: adding, prerelease: allowPrerelease, onClose: () => setAdding(false), onAdd: async (name, packageVersion, displayName) => {
                     const problem = await install(name, packageVersion, displayName);
                     if (!problem) {
                         setAdding(false);
                     }
                     return problem;
-                } }), upgrading && (_jsx(ChangeVersionModal, { plugin: upgrading, onClose: () => setUpgrading(null), onSave: async (packageVersion) => {
+                } }), upgrading && (_jsx(ChangeVersionModal, { plugin: upgrading, prerelease: allowPrerelease, onClose: () => setUpgrading(null), onSave: async (packageVersion) => {
                     const problem = await changeVersion(upgrading, packageVersion);
                     if (!problem) {
                         setUpgrading(null);
                     }
                     return problem;
-                } })), confirming && (_jsx(ConfirmDependenciesModal, { change: confirming, displayNameOf: displayNameOf, onClose: () => setConfirming(null), onDone: () => setConfirming(null) })), configuring && (_jsx(SettingsModal, { plugin: configuring, onClose: () => setConfiguring(null), onSaved: (plugin) => {
+                } })), confirming && (_jsx(ConfirmDependenciesModal, { change: confirming, displayNameOf: displayNameOf, onClose: () => setConfirming(null), onDone: () => setConfirming(null) })), confirmingBulkUninstall && (_jsx(BulkUninstallModal, { plugins: confirmingBulkUninstall, onClose: () => setConfirmingBulkUninstall(null), onConfirm: (purgeData) => {
+                    const targets = confirmingBulkUninstall;
+                    setConfirmingBulkUninstall(null);
+                    void runBulk("uninstall", targets, { purgeData });
+                } })), configuring && (_jsx(SettingsModal, { plugin: configuring, onClose: () => setConfiguring(null), onSaved: (plugin) => {
                     setConfiguring(null);
                     applied(plugin);
                 } })), removing && (_jsx(RemoveModal, { plugin: removing, onClose: () => setRemoving(null), onRemoved: (result) => {
@@ -346,9 +559,7 @@ export default function PluginsManager({ embedded = false } = {}) {
                     setRemoving(null);
                     setPlugins((prev) => prev.filter((plugin) => plugin.uid !== uid));
                     if (result.purgeScheduled) {
-                        // Shown at once; the status polling that follows replaces it with what the servers report.
-                        const scheduled = result.purge;
-                        setStatus((prev) => prev && scheduled ? { ...prev, purges: [...(prev.purges ?? []).filter((purge) => purge.uid !== scheduled.uid), scheduled] } : prev);
+                        showScheduledPurge(result.purge);
                         notify({
                             kind: "info",
                             title: `${displayName} uninstalled`,
@@ -360,7 +571,7 @@ export default function PluginsManager({ embedded = false } = {}) {
 }
 const ALL_NAMESPACES = "";
 /** Searches the configured namespaces' registries for plugin packages, with install and upgrade actions. */
-function PluginBrowser({ headingLevel: Heading, plugins, onInstall, onUpgrade, }) {
+function PluginBrowser({ headingLevel: Heading, plugins, prerelease, onInstall, onUpgrade, }) {
     const [namespaces, setNamespaces] = useState([]);
     const [namespace, setNamespace] = useState(ALL_NAMESPACES);
     const [results, setResults] = useState(null);
@@ -372,12 +583,14 @@ function PluginBrowser({ headingLevel: Heading, plugins, onInstall, onUpgrade, }
             .then(setNamespaces)
             .catch(() => setNamespaces([]));
     }, []);
+    // What was found was found under the other setting, so it isn't shown as though it still held.
+    useEffect(() => setResults(null), [prerelease]);
     async function search(e) {
         e.preventDefault();
         setSearching(true);
         setError(null);
         try {
-            setResults(await searchPlugins(namespace || undefined));
+            setResults(await searchPlugins(namespace || undefined, { prerelease }));
         }
         catch (err) {
             setResults(null);
@@ -460,7 +673,7 @@ function UninstalledPluginRow({ purge, busy, onRetry, onInstall }) {
     const failedSteps = purge.steps.filter((step) => !step.ok);
     return (_jsxs("tr", { role: "row", className: INSTALLED_ROW_CLASS, children: [_jsxs("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-3 pb-2`, children: [_jsx("div", { className: "font-semibold", children: purgeName(purge) }), _jsx("div", { className: "text-xs text-text-muted", children: purge.name })] }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} hidden lg:table-cell` }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} pt-1 pb-3 basis-full lg:basis-auto`, children: _jsxs("div", { className: "flex flex-col items-start gap-1 text-xs max-w-sm", children: [_jsx("span", { className: `${BADGE_CLASS} bg-surface-alt text-text-muted`, children: "Uninstalled" }), purge.state === "pending" && (_jsxs(_Fragment, { children: [_jsx("span", { children: "Uninstalled - data will be deleted after servers restart" }), !!purge.serversRunning && (_jsxs("span", { className: "text-text-muted", children: [purge.serversRunning, " of ", purge.serversTotal, " ", purge.serversTotal === 1 ? "server" : "servers", " still running it"] }))] })), purge.state === "running" && _jsx("span", { children: "Uninstalled - deleting its data now" }), purge.state === "done" && _jsxs("span", { className: "text-success font-medium", children: ["Data deleted", purge.completedAt ? ` ${formatDate(purge.completedAt)}` : ""] }), purge.state === "failed" && (_jsxs(_Fragment, { children: [_jsxs("span", { className: "text-danger break-words", children: ["Data deletion failed: ", purgeFailure(purge)] }), failedSteps.length > 0 && (_jsx("ul", { className: "list-disc pl-4 text-text-muted break-words", children: failedSteps.map((step) => (_jsxs("li", { children: [step.step, ": ", step.error ?? "failed"] }, step.step))) }))] }))] }) }), _jsx("td", { role: "cell", className: `${INSTALLED_TD_CLASS} basis-full pt-1 pb-3`, children: _jsxs("div", { className: "flex gap-2 lg:justify-end", children: [purge.state === "failed" && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": `Retry deleting the data of ${purgeName(purge)}`, disabled: busy, loading: busy, onClick: onRetry, children: "Retry" })), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": `Install ${purgeName(purge)}`, disabled: busy || purge.state === "running", onClick: onInstall, children: "Install" })] }) })] }));
 }
-function AddPluginModal({ open, onClose, onAdd, }) {
+function AddPluginModal({ open, prerelease, onClose, onAdd, }) {
     const [name, setName] = useState("");
     const [lookup, setLookup] = useState(null);
     const [selectedVersion, setSelectedVersion] = useState("");
@@ -494,7 +707,7 @@ function AddPluginModal({ open, onClose, onAdd, }) {
         setLooking(true);
         setError(null);
         try {
-            const found = await lookupPluginPackage(packageName, packageVersion);
+            const found = await lookupPluginPackage(packageName, packageVersion, { prerelease });
             if (token === lookupToken.current) {
                 setLookup(found);
                 setSelectedVersion(found.selected.version);
@@ -550,20 +763,20 @@ function AddPluginModal({ open, onClose, onAdd, }) {
                                     setLookup(null);
                                 } })] }), _jsx(Button, { type: "submit", variant: "secondary", className: "!w-auto", loading: looking && !lookup, disabled: busy || looking, children: "Find" })] }), lookup && (_jsxs("div", { className: "flex flex-col gap-3", children: [typeof manifest === "string" ? (_jsxs(_Fragment, { children: [_jsx("div", { className: "text-sm font-semibold", children: lookup.package.name }), _jsx(Alert, { children: manifest })] })) : (_jsxs("div", { className: "text-sm", children: [_jsx("div", { className: "font-semibold", children: manifest?.displayName }), _jsx("div", { className: "text-xs text-text-muted", children: lookup.package.name }), manifest?.description && _jsx("div", { className: "text-text-muted", children: manifest.description })] })), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Version" }), _jsx("select", { "aria-label": "Version", className: INPUT_CLASS, value: selectedVersion, onChange: (e) => chooseVersion(e.target.value), children: lookup.package.versions.map((version) => (_jsxs("option", { value: version, children: [version, version === lookup.package.latest ? " (latest)" : ""] }, version))) })] }), _jsxs("div", { className: "flex gap-2 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", loading: busy || looking, disabled: busy || looking || typeof manifest === "string", onClick: () => void add(), children: "Add plugin" })] })] }))] }));
 }
-function ChangeVersionModal({ plugin, onClose, onSave, }) {
+function ChangeVersionModal({ plugin, prerelease, onClose, onSave, }) {
     const [versions, setVersions] = useState(null);
     const [latest, setLatest] = useState();
     const [selected, setSelected] = useState(plugin.packageVersion);
     const [error, setError] = useState(null);
     const [busy, setBusy] = useState(false);
     useEffect(() => {
-        lookupPluginPackage(plugin.name)
+        lookupPluginPackage(plugin.name, undefined, { prerelease })
             .then((found) => {
             setVersions(found.package.versions);
             setLatest(found.package.latest);
         })
             .catch((err) => setError(errorMessage(err, "Could not load the available versions.")));
-    }, [plugin.name]);
+    }, [plugin.name, prerelease]);
     async function save() {
         setBusy(true);
         setError(null);
@@ -732,6 +945,25 @@ function SettingField({ definition, value, configured, onChange, }) {
     }
     return (_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: definition.label }), definition.type === "select" ? (_jsxs("select", { "aria-label": definition.label, className: INPUT_CLASS, value: String(value), onChange: (e) => onChange(e.target.value), children: [!definition.required && _jsx("option", { value: "", children: "Default" }), (definition.options ?? []).map((option) => (_jsx("option", { value: option.value, children: option.label }, option.value)))] })) : (_jsx("input", { "aria-label": definition.label, className: INPUT_CLASS, type: definition.type === "number" ? "number" : "text", min: definition.min, max: definition.max, required: definition.required && !configured, placeholder: placeholder, value: String(value), onChange: (e) => onChange(e.target.value) })), help] }));
 }
+/** The word typed to confirm deleting the data of several plugins at once, in place of a plugin's name. */
+const BULK_DELETE_WORD = "delete";
+/** Asks for confirmation before several plugins are uninstalled at once, listing them, with the choice to delete the
+ * data they stored too. Deleting data is permanent, so it also takes `BULK_DELETE_WORD` typed out. */
+function BulkUninstallModal({ plugins, onClose, onConfirm }) {
+    const [purgeData, setPurgeData] = useState(false);
+    const [typed, setTyped] = useState("");
+    const helpId = useId();
+    const single = plugins.length === 1;
+    const confirmed = !purgeData || typed.trim().toLowerCase() === BULK_DELETE_WORD;
+    return (_jsx(Modal, { open: true, onClose: onClose, title: `Uninstall ${pluralPlugins(plugins.length)}?`, children: _jsxs("form", { onSubmit: (event) => {
+                event.preventDefault();
+                if (confirmed) {
+                    onConfirm(purgeData);
+                }
+            }, children: [_jsxs("p", { className: "text-sm mb-2", children: ["The servers stop running ", single ? "this plugin" : "these plugins", " after they restart:"] }), _jsx("ul", { className: "text-sm list-disc pl-5 mb-4", children: plugins.map((plugin) => (_jsx("li", { children: plugin.manifest.displayName }, plugin.uid))) }), _jsx("p", { className: "text-sm mb-4", children: purgeData
+                        ? `Once every server has stopped running ${single ? "it" : "them"}, all the data ${single ? "it" : "they"} stored is deleted.`
+                        : `Data ${single ? "it" : "they"} stored stays in the database, and adding ${single ? "the plugin" : "a plugin"} again brings it back.` }), _jsxs("div", { className: "mb-4", children: [_jsxs("label", { className: "flex items-start gap-2 text-sm font-semibold cursor-pointer", children: [_jsx("input", { type: "checkbox", className: "mt-0.5 h-4 w-4 shrink-0 accent-danger", checked: purgeData, "aria-describedby": helpId, onChange: (e) => setPurgeData(e.target.checked) }), _jsxs("span", { children: ["Also delete all data ", single ? "this plugin" : "these plugins", " stored"] })] }), _jsxs("div", { id: helpId, className: "mt-2 pl-6 text-xs text-text-muted", children: [_jsx("p", { children: "What is deleted, for each plugin:" }), _jsxs("ul", { className: "list-disc pl-5 mt-1 space-y-0.5", children: [_jsx("li", { children: "the database collections and tables its features use, with everything in them" }), _jsx("li", { children: "its saved settings" }), _jsx("li", { children: "its downloaded package and cached pages on the servers" }), _jsx("li", { children: "whatever else it cleans up itself, such as files it stored or data kept outside the database" })] }), _jsx("p", { className: "mt-2 text-danger font-semibold", children: "This can't be undone." })] })] }), purgeData && (_jsxs(_Fragment, { children: [_jsx("p", { className: "text-xs text-text-muted mb-3", children: "Nothing is deleted while a server is still running a plugin. Adding a plugin again before its data is deleted cancels the deletion." }), _jsxs("label", { className: "block text-sm mb-4", children: [_jsxs("span", { children: ["Type ", _jsx("strong", { children: BULK_DELETE_WORD }), " to confirm"] }), _jsx("input", { type: "text", className: `${INPUT_CLASS} mt-1.5`, value: typed, autoComplete: "off", spellCheck: false, onChange: (e) => setTyped(e.target.value) })] })] })), _jsxs("div", { className: "flex gap-2 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: onClose, children: "Cancel" }), _jsx(Button, { type: "submit", className: purgeData ? DANGER_BUTTON_CLASS : "!w-auto", disabled: !confirmed, children: purgeData ? `Uninstall ${pluralPlugins(plugins.length)} and delete data` : `Uninstall ${pluralPlugins(plugins.length)}` })] })] }) }));
+}
 function RemoveModal({ plugin, onClose, onRemoved }) {
     const [error, setError] = useState(null);
     const [busy, setBusy] = useState(false);

package/dist/apps/shared/components/admin/settings/pluginPreferences.d.ts

@@ -0,0 +1,2 @@
+export declare function getAllowPrerelease(): boolean;
+export declare function setAllowPrerelease(allow: boolean): void;

package/dist/apps/shared/components/admin/settings/pluginPreferences.js

@@ -0,0 +1,35 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * Whether the Plugins page offers prerelease versions (`1.0.0-beta.2`) of plugins - for an update, in the version lists
+ * and in a plugin search. Stored in `localStorage`, so it is a preference of this browser, not a setting the server
+ * keeps: it only decides what the administrator is shown, since an administrator can already install any published
+ * version by name. Off unless it was turned on.
+ *
+ * A read that finds nothing, or a `localStorage` that throws (private-browsing/storage-blocked contexts), is off, and a
+ * write that fails is swallowed, so a blocked store only means the choice doesn't survive a reload.
+ */
+const STORAGE_KEY = "rapidmx:plugins-allow-prerelease";
+export function getAllowPrerelease() {
+    try {
+        return localStorage.getItem(STORAGE_KEY) === "true";
+    }
+    catch {
+        return false;
+    }
+}
+export function setAllowPrerelease(allow) {
+    try {
+        if (allow) {
+            localStorage.setItem(STORAGE_KEY, "true");
+        }
+        else {
+            localStorage.removeItem(STORAGE_KEY);
+        }
+    }
+    catch {
+        // Not persisted; the choice still applies until the page is reloaded.
+    }
+}

package/dist/apps/shared/components/escrow/layout/EscrowShell.js

@@ -8,7 +8,7 @@ import { useEffect, useState } from "react";
 import { HiOutlineClipboardDocumentList, HiOutlineFolderOpen } from "react-icons/hi2";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
 import { listMatters } from "@rapidmx/react-shared/admin/mattersApi.js";
-import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
+import { useSessionRefresh } from "@rapidmx/react-shared/auth/session.js";
 import { getBranding } from "@rapidmx/react-shared/branding/brandingApi.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
 import BottomTabBar from "@rapidmx/react-shared/components/navigation/BottomTabBar.js";
@@ -41,7 +41,7 @@ export default function EscrowShell({ active, userUid, authServerUrl, children }
     const [status, setStatus] = useState("checking");
     const [error, setError] = useState(null);
     const [iconSrc, setIconSrc] = useState(DEFAULT_ICON_SRC);
-    useRedirectIfUnauthenticated(userUid, authServerUrl);
+    useSessionRefresh(userUid, authServerUrl);
     // Only the icon is taken from branding here. The escrow console deliberately skips `useBranding()`, which
     // would inject the custom stylesheet, and never renders the admin-configured header/footer HTML - this
     // console handles escrow key material, so no admin-supplied markup or CSS runs on it.

package/dist/apps/shared/components/layout/AppShell.js

@@ -7,7 +7,7 @@ import "../../styles/app.css";
 import { useEffect, useLayoutEffect, useRef, useState } from "react";
 import { HiOutlineCalendarDays, HiOutlineClipboardDocumentList, HiOutlineEnvelope, HiOutlinePuzzlePiece, HiOutlineUsers, } from "react-icons/hi2";
 import { useRouter } from "@rapidrest/react/client";
-import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
+import { useSessionRefresh } from "@rapidmx/react-shared/auth/session.js";
 import { getSetupStatus } from "@rapidmx/react-shared/admin/setupApi.js";
 import { stopImpersonating } from "@rapidmx/react-shared/mail/mailApi.js";
 import useBranding from "@rapidmx/react-shared/branding/useBranding.js";
@@ -118,7 +118,9 @@ export function AppChrome({ active, userUid, authServerUrl, impersonating, imper
     useSigningEnrollmentWatcher({ userUid, mailboxes: mail.mailboxes, enabled: inFrame });
     // A meeting reminder pops up on whichever page they are - see the hook.
     useCalendarReminders({ userUid, enabled: inFrame });
-    useRedirectIfUnauthenticated(userUid, authServerUrl);
+    // A refused refresh means the sign-in has ended: open compose windows save what they hold (the access token still works for a while) and the
+    // browser goes to sign-in. Not while viewing as another user - the refresh cookie is the admin's own, and refreshing would end the impersonation.
+    useSessionRefresh(userUid, authServerUrl, { paused: impersonating, beforeRedirect: () => flushComposeDrafts(LOGOUT_TIMEOUT_MS) });
     // Any request this app makes that the server answers with a 401 - the session ended - raises one "Your session expired" pop-up with a
     // Sign in action (see `notifySessionExpired()`), whichever request noticed first, a background refresh included.
     useEffect(() => {