@rapidmx/web-client 0.3.0 → 0.4.0

package/dist/apps/admin/branding/index.js

@@ -1,16 +1,14 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 // Copyright (C) 2026 Jean-Philippe Steinmetz
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
-import { useEffect, useRef, useState } from "react";
+import { useEffect, useState } from "react";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { deleteBrandingIcon, deleteBrandingLogo, deleteBrandingStylesheet, getBranding, updateBranding, uploadBrandingIcon, uploadBrandingLogo, uploadBrandingStylesheet, } from "@rapidmx/react-shared/branding/brandingApi.js";
+import { getBranding } from "@rapidmx/react-shared/branding/brandingApi.js";
 import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import BrandingForm from "../../shared/components/admin/settings/BrandingForm.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-const INPUT_CLASS = "w-full text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
-const MAX_UPLOAD_BYTES = 5 * 1024 * 1024;
 export default function BrandingPage(props) {
     return (_jsx(AdminShell, { ...props, active: "branding", children: _jsx(BrandingContent, {}) }));
 }
@@ -32,95 +30,3 @@ function BrandingContent() {
     }
     return _jsx(BrandingForm, { branding: branding, onChange: setBranding });
 }
-function BrandingForm({ branding, onChange }) {
-    const [companyName, setCompanyName] = useState(branding.companyName);
-    const [title, setTitle] = useState(branding.title);
-    const [headerHtml, setHeaderHtml] = useState(branding.headerHtml ?? "");
-    const [footerHtml, setFooterHtml] = useState(branding.footerHtml ?? "");
-    const [logoUrlInput, setLogoUrlInput] = useState(branding.logoUrl ?? "");
-    const [iconUrlInput, setIconUrlInput] = useState(branding.iconUrl ?? "");
-    const [stylesheetUrlInput, setStylesheetUrlInput] = useState(branding.stylesheetUrl ?? "");
-    const [error, setError] = useState(null);
-    const [saving, setSaving] = useState(false);
-    const [saved, setSaved] = useState(false);
-    const [assetBusy, setAssetBusy] = useState(null);
-    const logoFileRef = useRef(null);
-    const iconFileRef = useRef(null);
-    const stylesheetFileRef = useRef(null);
-    function runAsset(name, action) {
-        setError(null);
-        setAssetBusy(name);
-        return action()
-            .then((updated) => {
-            onChange(updated);
-            setLogoUrlInput(updated.logoUrl ?? "");
-            setIconUrlInput(updated.iconUrl ?? "");
-            setStylesheetUrlInput(updated.stylesheetUrl ?? "");
-        })
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not update branding."))
-            .finally(() => setAssetBusy(null));
-    }
-    function handleLogoFileChange(e) {
-        const file = e.target.files?.[0];
-        if (!file)
-            return;
-        if (file.size > MAX_UPLOAD_BYTES) {
-            setError(`"${file.name}" is too large — logos must be 5MB or smaller.`);
-        }
-        else {
-            void runAsset("logo-upload", () => uploadBrandingLogo(file));
-        }
-        e.target.value = "";
-    }
-    function handleIconFileChange(e) {
-        const file = e.target.files?.[0];
-        if (!file)
-            return;
-        if (file.size > MAX_UPLOAD_BYTES) {
-            setError(`"${file.name}" is too large — icons must be 5MB or smaller.`);
-        }
-        else {
-            void runAsset("icon-upload", () => uploadBrandingIcon(file));
-        }
-        e.target.value = "";
-    }
-    function handleStylesheetFileChange(e) {
-        const file = e.target.files?.[0];
-        if (!file)
-            return;
-        if (file.size > MAX_UPLOAD_BYTES) {
-            setError(`"${file.name}" is too large — stylesheets must be 5MB or smaller.`);
-        }
-        else {
-            void runAsset("stylesheet-upload", () => uploadBrandingStylesheet(file));
-        }
-        e.target.value = "";
-    }
-    async function handleSubmit(e) {
-        e.preventDefault();
-        setError(null);
-        setSaved(false);
-        setSaving(true);
-        try {
-            const updated = await updateBranding({ companyName, title, headerHtml, footerHtml });
-            onChange(updated);
-            setSaved(true);
-        }
-        catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not save branding.");
-        }
-        finally {
-            setSaving(false);
-        }
-    }
-    return (_jsxs("div", { className: "max-w-2xl", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide mb-1", children: "Branding" }), _jsx("p", { className: "text-sm text-text-muted mb-5", children: "Customize the logo, nav-header icon, product name, and chrome shown to every visitor of the webmail and admin console \u2014 including anonymous booking-page visitors." }), error && _jsx(Alert, { children: error }), saved && !error && _jsx("div", { className: "mb-4 text-sm text-success font-medium", children: "Saved." }), _jsxs("div", { className: "flex flex-col gap-6", children: [_jsxs("section", { className: "flex flex-col gap-3", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide text-text-muted", children: "Logo" }), _jsxs("div", { className: "flex items-center gap-4", children: [_jsx("img", { src: branding.logoUrl || "/images/logo.svg", alt: "Current logo", width: "64", height: "64", className: "border border-border rounded-sm bg-surface-alt p-1" }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: assetBusy === "logo-upload", disabled: assetBusy !== null, onClick: () => logoFileRef.current?.click(), children: "Upload logo" }), _jsx("input", { ref: logoFileRef, type: "file", accept: "image/*", "aria-label": "Upload logo", className: "hidden", onChange: handleLogoFileChange }), branding.logoUrl && (_jsx(Button, { type: "button", variant: "text", disabled: assetBusy !== null, loading: assetBusy === "logo-delete", onClick: () => void runAsset("logo-delete", async () => {
-                                                    await deleteBrandingLogo();
-                                                    return { ...branding, logoUrl: undefined };
-                                                }), children: "Remove logo" }))] })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Or use an external image URL" }), _jsxs("div", { className: "flex gap-2", children: [_jsx("input", { "aria-label": "Logo URL", className: INPUT_CLASS, value: logoUrlInput, onChange: (e) => setLogoUrlInput(e.target.value) }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: assetBusy !== null || logoUrlInput === (branding.logoUrl ?? ""), loading: assetBusy === "logo-url", onClick: () => void runAsset("logo-url", () => updateBranding({ logoUrl: logoUrlInput })), children: "Set" })] })] })] }), _jsxs("section", { className: "flex flex-col gap-3", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide text-text-muted", children: "Icon" }), _jsx("p", { className: "text-xs text-text-muted -mt-1", children: "A compact mark for navigation headers, independent of the full logo above. Falls back to the logo, then a default asset, when not set." }), _jsxs("div", { className: "flex items-center gap-4", children: [_jsx("img", { src: branding.iconUrl || branding.logoUrl || "/images/logo.svg", alt: "Current icon", width: "64", height: "64", className: "border border-border rounded-sm bg-surface-alt p-1" }), _jsxs("div", { className: "flex flex-col gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: assetBusy === "icon-upload", disabled: assetBusy !== null, onClick: () => iconFileRef.current?.click(), children: "Upload icon" }), _jsx("input", { ref: iconFileRef, type: "file", accept: "image/*", "aria-label": "Upload icon", className: "hidden", onChange: handleIconFileChange }), branding.iconUrl && (_jsx(Button, { type: "button", variant: "text", disabled: assetBusy !== null, loading: assetBusy === "icon-delete", onClick: () => void runAsset("icon-delete", async () => {
-                                                    await deleteBrandingIcon();
-                                                    return { ...branding, iconUrl: undefined };
-                                                }), children: "Remove icon" }))] })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Or use an external image URL" }), _jsxs("div", { className: "flex gap-2", children: [_jsx("input", { "aria-label": "Icon URL", className: INPUT_CLASS, value: iconUrlInput, onChange: (e) => setIconUrlInput(e.target.value) }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: assetBusy !== null || iconUrlInput === (branding.iconUrl ?? ""), loading: assetBusy === "icon-url", onClick: () => void runAsset("icon-url", () => updateBranding({ iconUrl: iconUrlInput })), children: "Set" })] })] })] }), _jsxs("section", { className: "flex flex-col gap-3", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide text-text-muted", children: "Custom stylesheet" }), _jsx("div", { className: "flex items-center gap-3", children: _jsx("span", { className: "text-sm text-text-muted truncate", children: branding.stylesheetUrl || "None configured" }) }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: assetBusy === "stylesheet-upload", disabled: assetBusy !== null, onClick: () => stylesheetFileRef.current?.click(), children: "Upload CSS file" }), _jsx("input", { ref: stylesheetFileRef, type: "file", accept: "text/css,.css", "aria-label": "Upload stylesheet", className: "hidden", onChange: handleStylesheetFileChange }), branding.stylesheetUrl && (_jsx(Button, { type: "button", variant: "text", disabled: assetBusy !== null, loading: assetBusy === "stylesheet-delete", onClick: () => void runAsset("stylesheet-delete", async () => {
-                                            await deleteBrandingStylesheet();
-                                            return { ...branding, stylesheetUrl: undefined };
-                                        }), children: "Remove stylesheet" }))] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Or use an external stylesheet URL" }), _jsxs("div", { className: "flex gap-2", children: [_jsx("input", { "aria-label": "Stylesheet URL", className: INPUT_CLASS, value: stylesheetUrlInput, onChange: (e) => setStylesheetUrlInput(e.target.value) }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: assetBusy !== null || stylesheetUrlInput === (branding.stylesheetUrl ?? ""), loading: assetBusy === "stylesheet-url", onClick: () => void runAsset("stylesheet-url", () => updateBranding({ stylesheetUrl: stylesheetUrlInput })), children: "Set" })] })] })] }), _jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-4 pt-2 border-t border-border", children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Company name" }), _jsx("input", { "aria-label": "Company name", className: INPUT_CLASS, value: companyName, onChange: (e) => setCompanyName(e.target.value) })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Product title" }), _jsx("input", { "aria-label": "Product title", className: INPUT_CLASS, value: title, onChange: (e) => setTitle(e.target.value) }), _jsx("span", { className: "text-xs text-text-muted", children: "Shown as the browser tab title." })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Header HTML (optional)" }), _jsx("textarea", { "aria-label": "Header HTML", className: `${INPUT_CLASS} font-mono`, rows: 3, value: headerHtml, onChange: (e) => setHeaderHtml(e.target.value) })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Footer HTML (optional)" }), _jsx("textarea", { "aria-label": "Footer HTML", className: `${INPUT_CLASS} font-mono`, rows: 3, value: footerHtml, onChange: (e) => setFooterHtml(e.target.value) })] }), _jsx("div", { children: _jsx(Button, { type: "submit", loading: saving, disabled: saving, className: "!w-auto", children: "Save" }) })] })] })] }));
-}

package/dist/apps/admin/domains/[uid].js

@@ -3,72 +3,26 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // Copyright (C) 2026 Jean-Philippe Steinmetz
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
-import { useEffect, useState } from "react";
+import { useState } from "react";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { deleteDomain, getDnsSetup, getDomain, verifyDomain } from "@rapidmx/react-shared/admin/domainsApi.js";
+import { deleteDomain } from "@rapidmx/react-shared/admin/domainsApi.js";
 import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import DomainDnsSetup from "../../shared/components/admin/settings/DomainDnsSetup.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
 import Button from "@rapidmx/react-shared/components/buttons/Button.js";
 import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-const RECORD_TYPE_LABELS = {
-    ownership: "Ownership (TXT)",
-    mx: "MX",
-    spf: "SPF",
-    dkim: "DKIM",
-    dmarc: "DMARC",
-};
 export default function DomainDetailPage(props) {
     return (_jsx(AdminShell, { ...props, active: "domains", children: _jsx(DomainDetailContent, { uid: props.params.uid }) }));
 }
 function DomainDetailContent({ uid }) {
     const [domain, setDomain] = useState(null);
-    const [dnsSetup, setDnsSetup] = useState([]);
-    const [loading, setLoading] = useState(true);
-    const [error, setError] = useState(null);
-    const [verifying, setVerifying] = useState(false);
-    const [copied, setCopied] = useState(false);
     const [confirmingDelete, setConfirmingDelete] = useState(false);
     const [deleting, setDeleting] = useState(false);
     const [deleteError, setDeleteError] = useState(null);
-    function reload(id) {
-        setLoading(true);
-        setError(null);
-        Promise.all([getDomain(id), getDnsSetup(id)])
-            .then(([d, checks]) => {
-            setDomain(d);
-            setDnsSetup(checks);
-        })
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load this domain."))
-            .finally(() => setLoading(false));
-    }
-    useEffect(() => {
-        reload(uid);
-    }, [uid]);
-    // Only ever invoked from the "Verify now" button below, which itself only renders once `domain` is
-    // resolved (children only render once loaded — see the early returns above) — the non-null assertion
-    // reflects that real invariant, not an unchecked assumption. Matches `QuarantineContent.handleRelease`'s
-    // identical pattern.
-    async function handleVerify() {
-        setVerifying(true);
-        setError(null);
-        try {
-            await verifyDomain(domain.uid);
-            reload(domain.uid);
-        }
-        catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not verify this domain.");
-        }
-        finally {
-            setVerifying(false);
-        }
-    }
-    // Only ever invoked from the "Delete domain" confirmation modal below, which itself only renders once
-    // `domain` is resolved (children only render once loaded — see the early returns above) — the non-null
-    // assertion reflects that real invariant, not an unchecked assumption. Matches `handleVerify`'s identical
-    // pattern above.
     function closeDeleteModal() {
         setConfirmingDelete(false);
     }
+    // Only ever invoked from the "Delete domain" confirmation modal, which only renders once `domain` is loaded.
     async function handleDelete() {
         setDeleting(true);
         setDeleteError(null);
@@ -81,22 +35,5 @@ function DomainDetailContent({ uid }) {
             setDeleting(false);
         }
     }
-    async function handleCopy(value) {
-        try {
-            await navigator.clipboard.writeText(value);
-            setCopied(true);
-            setTimeout(() => setCopied(false), 2000);
-        }
-        catch {
-            // Clipboard access can be denied by the browser — the value is still selectable/copyable by hand.
-        }
-    }
-    if (loading) {
-        return _jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" });
-    }
-    if (error || !domain) {
-        return _jsx(Alert, { children: error ?? "Domain not found." });
-    }
-    const ownershipCheck = dnsSetup.find((c) => c.type === "ownership");
-    return (_jsxs("div", { className: "max-w-3xl flex flex-col gap-5", children: [_jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("a", { href: "/admin/domains", className: "text-sm text-primary-dark hover:underline", children: "\u2190 All domains" }), _jsx("h1", { className: "text-xl font-bold tracking-tight mt-1", children: domain.name })] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger", onClick: () => setConfirmingDelete(true), children: "Delete domain" })] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsxs("dl", { className: "grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm", children: [_jsx("dt", { className: "text-text-muted", children: "Enabled" }), _jsx("dd", { children: domain.enabled ? "Yes" : "No" }), _jsx("dt", { className: "text-text-muted", children: "Verification" }), _jsx("dd", { children: domain.verified ? (_jsx("span", { className: "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-success text-white", children: "Verified" })) : (_jsx("span", { className: "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-surface-alt text-text-muted", children: "Unverified" })) }), _jsx("dt", { className: "text-text-muted", children: "Last checked" }), _jsx("dd", { children: domain.lastCheckedAt ? new Date(domain.lastCheckedAt).toLocaleString() : "Never" })] }), !domain.verified && (_jsxs("div", { className: "mt-5 pt-5 border-t border-border", children: [_jsxs("p", { className: "text-sm mb-2", children: ["Add the following TXT record to ", _jsx("strong", { children: domain.name }), " to prove ownership, then verify:"] }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("code", { className: "flex-1 text-xs bg-surface-alt border border-border rounded-sm py-2 px-3 overflow-x-auto whitespace-nowrap", children: ownershipCheck?.recommendedValue ?? `rapidmx-domain-verification=${domain.verificationToken}` }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0", onClick: () => handleCopy(ownershipCheck?.recommendedValue ?? `rapidmx-domain-verification=${domain.verificationToken}`), children: copied ? "Copied" : "Copy" })] }), _jsx(Button, { type: "button", className: "!w-auto mt-3", loading: verifying, disabled: verifying, onClick: handleVerify, children: "Verify now" })] }))] }), dnsSetup.length > 0 && (_jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-sm font-bold uppercase tracking-wide mb-3", children: "DNS setup checklist" }), _jsx("div", { className: "overflow-x-auto", children: _jsxs("table", { className: "w-full text-sm border-collapse", children: [_jsx("thead", { children: _jsx("tr", { children: ["Record", "Status", "Recommended value"].map((h) => (_jsx("th", { className: "text-left text-xs uppercase tracking-wide text-text-muted py-2 px-2.5 border-b border-border", children: h }, h))) }) }), _jsx("tbody", { children: dnsSetup.map((check) => (_jsxs("tr", { children: [_jsx("td", { className: "py-2.5 px-2.5 border-b border-border", children: RECORD_TYPE_LABELS[check.type] }), _jsx("td", { className: "py-2.5 px-2.5 border-b border-border", children: !check.configured ? (_jsx("span", { className: "text-xs text-text-muted", children: "Not configured" })) : check.matches ? (_jsx("span", { className: "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-success text-white", children: "Live" })) : (_jsx("span", { className: "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-surface-alt text-text-muted", children: "Not found" })) }), _jsx("td", { className: "py-2.5 px-2.5 border-b border-border text-text-muted", children: _jsx("code", { className: "text-xs", children: check.recommendedValue ?? "—" }) })] }, check.type))) })] }) })] })), _jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete domain", children: [_jsxs("p", { className: "text-sm mb-5", children: ["Are you sure you want to delete ", _jsx("strong", { children: domain.name }), "? This cannot be undone."] }), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting, onClick: handleDelete, children: "Delete" })] })] })] }));
+    return (_jsxs("div", { className: "max-w-3xl flex flex-col gap-5", children: [domain && (_jsxs("div", { className: "flex items-start justify-between gap-4", children: [_jsxs("div", { children: [_jsx("a", { href: "/admin/domains", className: "text-sm text-primary-dark hover:underline", children: "\u2190 All domains" }), _jsx("h1", { className: "text-xl font-bold tracking-tight mt-1", children: domain.name })] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0 !border-danger !text-danger hover:!border-danger hover:!text-danger", onClick: () => setConfirmingDelete(true), children: "Delete domain" })] })), _jsx(DomainDnsSetup, { uid: uid, onLoaded: setDomain }), domain && (_jsxs(Modal, { open: confirmingDelete, onClose: closeDeleteModal, title: "Delete domain", children: [_jsxs("p", { className: "text-sm mb-5", children: ["Are you sure you want to delete ", _jsx("strong", { children: domain.name }), "? This cannot be undone."] }), deleteError && _jsx(Alert, { children: deleteError }), _jsxs("div", { className: "flex gap-3 justify-end mt-5", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: deleting, onClick: closeDeleteModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: deleting, disabled: deleting, onClick: handleDelete, children: "Delete" })] })] }))] }));
 }

package/dist/apps/admin/encryption-policy/index.js

@@ -0,0 +1,8 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { getEncryptionPolicy } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
+import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import EncryptionPolicyForm from "../../shared/components/admin/settings/EncryptionPolicyForm.js";
+import LoadedSettingsForm from "../../shared/components/admin/settings/LoadedSettingsForm.js";
+export default function EncryptionPolicyPage(props) {
+    return (_jsx(AdminShell, { ...props, active: "encryptionPolicy", children: _jsx(LoadedSettingsForm, { load: getEncryptionPolicy, loadErrorMessage: "Could not load the encryption policy.", children: (policy, onChange) => _jsx(EncryptionPolicyForm, { policy: policy, onChange: onChange }) }) }));
+}

package/dist/apps/admin/index.js

@@ -6,6 +6,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useEffect, useState } from "react";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
 import { listMailboxes } from "@rapidmx/react-shared/mail/mailApi.js";
+import { reopenSetup } from "@rapidmx/react-shared/admin/setupApi.js";
 import AdminShell from "../shared/components/admin/layout/AdminShell.js";
 import MailboxTable from "../shared/components/admin/mailboxes/MailboxTable.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
@@ -28,5 +29,17 @@ function MailboxesListContent() {
             .finally(() => setLoading(false));
     }, [page]);
     const hasNextPage = mailboxes.length === PAGE_SIZE;
-    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between mb-5", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Mailboxes" }), _jsx("a", { href: "/admin/mailboxes/new", children: _jsx(Button, { type: "button", className: "!w-auto", children: "+ New mailbox" }) })] }), error && _jsx(Alert, { children: error }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : (_jsx(MailboxTable, { mailboxes: mailboxes })), _jsxs("div", { className: "flex gap-3 items-center mt-4", children: [_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: page === 0 || loading, onClick: () => setPage((p) => Math.max(0, p - 1)), children: "Previous" }), _jsxs("span", { className: "text-sm text-text-muted", children: ["Page ", page + 1] }), _jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: !hasNextPage || loading, onClick: () => setPage((p) => p + 1), children: "Next" })] })] }));
+    const [reopening, setReopening] = useState(false);
+    async function handleRunSetup() {
+        setReopening(true);
+        try {
+            await reopenSetup();
+            window.location.href = "/admin/setup";
+        }
+        catch (err) {
+            setError(err instanceof ApiRequestError ? err.message : "Could not reopen setup.");
+            setReopening(false);
+        }
+    }
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "flex items-center justify-between mb-5", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide", children: "Mailboxes" }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: reopening, disabled: reopening, onClick: () => void handleRunSetup(), children: "Run setup again" }), _jsx("a", { href: "/admin/mailboxes/new", children: _jsx(Button, { type: "button", className: "!w-auto", children: "+ New mailbox" }) })] })] }), error && _jsx(Alert, { children: error }), loading ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : (_jsx(MailboxTable, { mailboxes: mailboxes })), _jsxs("div", { className: "flex gap-3 items-center mt-4", children: [_jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: page === 0 || loading, onClick: () => setPage((p) => Math.max(0, p - 1)), children: "Previous" }), _jsxs("span", { className: "text-sm text-text-muted", children: ["Page ", page + 1] }), _jsx(Button, { variant: "secondary", type: "button", className: "!w-auto", disabled: !hasNextPage || loading, onClick: () => setPage((p) => p + 1), children: "Next" })] })] }));
 }

package/dist/apps/admin/mailbox-policy/index.js

@@ -0,0 +1,8 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { getMailboxPolicy } from "@rapidmx/react-shared/admin/mailboxPolicyApi.js";
+import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import LoadedSettingsForm from "../../shared/components/admin/settings/LoadedSettingsForm.js";
+import MailboxPolicyForm from "../../shared/components/admin/settings/MailboxPolicyForm.js";
+export default function MailboxPolicyPage(props) {
+    return (_jsx(AdminShell, { ...props, active: "mailboxPolicy", children: _jsx(LoadedSettingsForm, { load: getMailboxPolicy, loadErrorMessage: "Could not load the mailbox policy.", children: (policy, onChange) => _jsx(MailboxPolicyForm, { policy: policy, onChange: onChange }) }) }));
+}

package/dist/apps/admin/mailboxes/new/index.js

@@ -1,93 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-///////////////////////////////////////////////////////////////////////////////
-// Copyright (C) 2026 Jean-Philippe Steinmetz
-// SPDX-License-Identifier: MPL-2.0
-///////////////////////////////////////////////////////////////////////////////
-import { useEffect, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { createMailbox, listMailboxDomains } from "@rapidmx/react-shared/mail/mailApi.js";
 import AdminShell from "../../../shared/components/admin/layout/AdminShell.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
-const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
-const SELECT_CLASS = "text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
+import MailboxCreateForm from "../../../shared/components/admin/settings/MailboxCreateForm.js";
 export default function NewMailboxPage(props) {
-    return (_jsx(AdminShell, { ...props, active: "mailboxes", children: _jsx(NewMailboxForm, {}) }));
-}
-function NewMailboxForm() {
-    const [primarySmtpAddress, setPrimarySmtpAddress] = useState("");
-    const [localPart, setLocalPart] = useState("");
-    const [domains, setDomains] = useState([]);
-    const [domain, setDomain] = useState("");
-    const [displayName, setDisplayName] = useState("");
-    const [ownerUserUid, setOwnerUserUid] = useState("");
-    const [timezone, setTimezone] = useState("UTC");
-    const [quotaGb, setQuotaGb] = useState(5);
-    const [isResource, setIsResource] = useState(false);
-    const [resourceType, setResourceType] = useState("room");
-    const [resourceCapacity, setResourceCapacity] = useState("");
-    const [autoAcceptBookings, setAutoAcceptBookings] = useState(false);
-    const [allowConflicts, setAllowConflicts] = useState(false);
-    const [bookingWindowDays, setBookingWindowDays] = useState("");
-    const [maxDurationMinutes, setMaxDurationMinutes] = useState("");
-    const [error, setError] = useState(null);
-    const [saving, setSaving] = useState(false);
-    // An empty `mail:domains` list (the default) means this server enforces no domain restriction —
-    // the address field stays free text, exactly as before. Once an admin configures at least one
-    // domain, every mailbox this server creates must be on one of them (enforced server-side too, in
-    // `BaseMailboxRoute.create()`), so the form switches to a local-part input + domain dropdown to
-    // make that restriction visible rather than let an admin discover it only via a rejected submit.
-    useEffect(() => {
-        listMailboxDomains()
-            .then((list) => {
-            setDomains(list);
-            setDomain(list[0] ?? "");
-        })
-            .catch(() => undefined);
-    }, []);
-    const constrained = domains.length > 0;
-    async function handleSubmit(e) {
-        e.preventDefault();
-        setError(null);
-        const address = constrained ? `${localPart.trim()}@${domain}` : primarySmtpAddress.trim();
-        if (constrained ? !localPart.trim() : !primarySmtpAddress.trim()) {
-            setError("A primary SMTP address is required.");
-            return;
-        }
-        if (!displayName.trim()) {
-            setError("A display name is required.");
-            return;
-        }
-        setSaving(true);
-        try {
-            // ownerUserUid left blank creates a true ownerless shared mailbox (e.g. support@example.com);
-            // delegates are then granted access from the mailbox's detail page. A resource mailbox is
-            // ownerless the same way — leave "Owner user uid" blank for one too.
-            const mailbox = await createMailbox({
-                primarySmtpAddress: address,
-                displayName: displayName.trim(),
-                ownerUserUid: ownerUserUid.trim() || undefined,
-                timezone,
-                quotaBytes: Math.round(quotaGb * 1000000000),
-                ...(isResource && {
-                    isResource: true,
-                    resourceType,
-                    resourceCapacity: resourceCapacity ? Number(resourceCapacity) : undefined,
-                    autoAcceptBookings,
-                    allowConflicts,
-                    bookingWindowDays: bookingWindowDays ? Number(bookingWindowDays) : undefined,
-                    maxDurationMinutes: maxDurationMinutes ? Number(maxDurationMinutes) : undefined,
-                }),
-            });
-            window.location.href = `/admin/mailboxes/${encodeURIComponent(mailbox.uid)}`;
-        }
-        catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not create the mailbox.");
-        }
-        finally {
-            setSaving(false);
-        }
-    }
-    return (_jsxs("div", { className: "max-w-xl", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide mb-1", children: "New mailbox" }), _jsx("p", { className: "text-sm text-text-muted mb-5", children: "Leave \"Owner user uid\" blank to create a true ownerless shared mailbox (the Exchange \"shared mailbox\" concept) \u2014 access is then granted entirely to delegates afterward, not to a single owner. Set an owner to create a mailbox for a specific user instead." }), error && _jsx(Alert, { children: error }), _jsxs("form", { onSubmit: handleSubmit, className: "bg-surface border border-border rounded-md p-6", children: [constrained ? (_jsx(FormField, { label: "Local part", htmlFor: "localPart", children: _jsxs("div", { className: "flex gap-2 items-center", children: [_jsx("input", { id: "localPart", type: "text", className: INPUT_CLASS, value: localPart, onChange: (e) => setLocalPart(e.target.value), placeholder: "support" }), _jsx("span", { className: "text-text-muted shrink-0", children: "@" }), _jsx("select", { "aria-label": "Domain", className: SELECT_CLASS, value: domain, onChange: (e) => setDomain(e.target.value), children: domains.map((d) => (_jsx("option", { value: d, children: d }, d))) })] }) })) : (_jsx(FormField, { label: "Primary SMTP address", htmlFor: "primarySmtpAddress", children: _jsx("input", { id: "primarySmtpAddress", type: "email", className: INPUT_CLASS, value: primarySmtpAddress, onChange: (e) => setPrimarySmtpAddress(e.target.value), placeholder: "support@example.com" }) })), _jsx(FormField, { label: "Display name", htmlFor: "displayName", children: _jsx("input", { id: "displayName", type: "text", className: INPUT_CLASS, value: displayName, onChange: (e) => setDisplayName(e.target.value), placeholder: "Support" }) }), _jsx(FormField, { label: "Owner user uid (optional)", htmlFor: "ownerUserUid", children: _jsx("input", { id: "ownerUserUid", type: "text", className: INPUT_CLASS, value: ownerUserUid, onChange: (e) => setOwnerUserUid(e.target.value), placeholder: "Leave blank for a shared mailbox" }) }), _jsx(FormField, { label: "Timezone", htmlFor: "timezone", children: _jsx("input", { id: "timezone", type: "text", className: INPUT_CLASS, value: timezone, onChange: (e) => setTimezone(e.target.value), placeholder: "America/Los_Angeles" }) }), _jsx(FormField, { label: "Quota (GB)", htmlFor: "quotaGb", children: _jsx("input", { id: "quotaGb", type: "number", min: 1, step: 1, className: INPUT_CLASS, value: quotaGb, onChange: (e) => setQuotaGb(Number(e.target.value)) }) }), _jsxs("label", { className: "flex items-center gap-2 text-sm mb-4", children: [_jsx("input", { type: "checkbox", checked: isResource, onChange: (e) => setIsResource(e.target.checked) }), "This is a resource mailbox (a bookable room or piece of equipment)"] }), isResource && (_jsxs("div", { className: "border border-border rounded-sm p-4 mb-4 flex flex-col gap-4", children: [_jsx(FormField, { label: "Resource type", htmlFor: "resourceType", children: _jsxs("select", { id: "resourceType", className: SELECT_CLASS, value: resourceType, onChange: (e) => setResourceType(e.target.value), children: [_jsx("option", { value: "room", children: "Room" }), _jsx("option", { value: "equipment", children: "Equipment" })] }) }), _jsx(FormField, { label: "Capacity (optional)", htmlFor: "resourceCapacity", children: _jsx("input", { id: "resourceCapacity", type: "number", min: 0, step: 1, className: INPUT_CLASS, value: resourceCapacity, onChange: (e) => setResourceCapacity(e.target.value), placeholder: "Informational only" }) }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: autoAcceptBookings, onChange: (e) => setAutoAcceptBookings(e.target.checked) }), "Automatically accept booking requests"] }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: allowConflicts, onChange: (e) => setAllowConflicts(e.target.checked) }), "Allow conflicting bookings (skip conflict checking entirely)"] }), _jsx(FormField, { label: "Booking window, in days (optional)", htmlFor: "bookingWindowDays", children: _jsx("input", { id: "bookingWindowDays", type: "number", min: 0, step: 1, className: INPUT_CLASS, value: bookingWindowDays, onChange: (e) => setBookingWindowDays(e.target.value), placeholder: "No limit" }) }), _jsx(FormField, { label: "Maximum duration, in minutes (optional)", htmlFor: "maxDurationMinutes", children: _jsx("input", { id: "maxDurationMinutes", type: "number", min: 0, step: 1, className: INPUT_CLASS, value: maxDurationMinutes, onChange: (e) => setMaxDurationMinutes(e.target.value), placeholder: "No limit" }) })] })), _jsxs("div", { className: "flex gap-3 mt-2", children: [_jsx(Button, { type: "submit", loading: saving, disabled: saving, className: "!w-auto", children: "Create mailbox" }), _jsx("a", { href: "/admin", children: _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", children: "Cancel" }) })] })] })] }));
+    return (_jsx(AdminShell, { ...props, active: "mailboxes", children: _jsxs("div", { className: "max-w-xl", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide mb-1", children: "New mailbox" }), _jsx("p", { className: "text-sm text-text-muted mb-5", children: "Leave \"Owner user uid\" blank to create a true ownerless shared mailbox (the Exchange \"shared mailbox\" concept) \u2014 access is then granted entirely to delegates afterward, not to a single owner. Set an owner to create a mailbox for a specific user instead." }), _jsx(MailboxCreateForm, { cancelHref: "/admin", onCreated: (mailbox) => {
+                        window.location.href = `/admin/mailboxes/${encodeURIComponent(mailbox.uid)}`;
+                    } })] }) }));
 }

package/dist/apps/admin/plugins/index.js

@@ -0,0 +1,6 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import PluginsManager from "../../shared/components/admin/settings/PluginsManager.js";
+export default function PluginsPage(props) {
+    return (_jsx(AdminShell, { ...props, active: "plugins", children: _jsx(PluginsManager, {}) }));
+}

package/dist/apps/admin/retention-policy/index.js

@@ -1,15 +1,14 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 // Copyright (C) 2026 Jean-Philippe Steinmetz
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { MIN_AUDIT_LOG_RETENTION_DAYS, getRetentionPolicy, updateRetentionPolicy, } from "@rapidmx/react-shared/admin/retentionPolicyApi.js";
+import { getRetentionPolicy } from "@rapidmx/react-shared/admin/retentionPolicyApi.js";
 import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import RetentionPolicyForm from "../../shared/components/admin/settings/RetentionPolicyForm.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-const INPUT_CLASS = "w-full text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 export default function RetentionPolicyPage(props) {
     return (_jsx(AdminShell, { ...props, active: "retentionPolicy", children: _jsx(RetentionPolicyContent, {}) }));
 }
@@ -31,35 +30,3 @@ function RetentionPolicyContent() {
     }
     return _jsx(RetentionPolicyForm, { policy: policy, onChange: setPolicy });
 }
-function RetentionPolicyForm({ policy, onChange }) {
-    const [messageRetentionDays, setMessageRetentionDays] = useState(policy.messageRetentionDays?.toString() ?? "");
-    const [auditLogRetentionDays, setAuditLogRetentionDays] = useState(policy.auditLogRetentionDays?.toString() ?? "");
-    const [error, setError] = useState(null);
-    const [saving, setSaving] = useState(false);
-    const [saved, setSaved] = useState(false);
-    async function handleSubmit(e) {
-        e.preventDefault();
-        setError(null);
-        setSaved(false);
-        setSaving(true);
-        try {
-            const patch = {};
-            if (messageRetentionDays.trim() !== "") {
-                patch.messageRetentionDays = Number(messageRetentionDays);
-            }
-            if (auditLogRetentionDays.trim() !== "") {
-                patch.auditLogRetentionDays = Number(auditLogRetentionDays);
-            }
-            const updated = await updateRetentionPolicy(patch);
-            onChange(updated);
-            setSaved(true);
-        }
-        catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not save the retention policy.");
-        }
-        finally {
-            setSaving(false);
-        }
-    }
-    return (_jsxs("div", { className: "max-w-xl", children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide mb-1", children: "Retention Policy" }), _jsx("p", { className: "text-sm text-text-muted mb-5", children: "Automatically and permanently deletes mail/audit-log entries older than the configured age. Leave a field blank for no automatic purge. This does not apply to a mailbox that is a custodian on an active legal hold \u2014 a held message is skipped and retried on a later run once the hold is lifted." }), error && _jsx(Alert, { children: error }), saved && !error && _jsx("div", { className: "mb-4 text-sm text-success font-medium", children: "Saved." }), _jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-4", children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Message retention (days)" }), _jsx("input", { "aria-label": "Message retention (days)", type: "number", min: 1, className: INPUT_CLASS, value: messageRetentionDays, onChange: (e) => setMessageRetentionDays(e.target.value), placeholder: "No automatic purge" }), _jsx("span", { className: "text-xs text-text-muted", children: "Applies to any message, in any folder, regardless of age." })] }), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Audit log retention (days)" }), _jsx("input", { "aria-label": "Audit log retention (days)", type: "number", min: MIN_AUDIT_LOG_RETENTION_DAYS, className: INPUT_CLASS, value: auditLogRetentionDays, onChange: (e) => setAuditLogRetentionDays(e.target.value), placeholder: "Keep forever" }), _jsxs("span", { className: "text-xs text-text-muted", children: ["Cannot be set below ", MIN_AUDIT_LOG_RETENTION_DAYS, " days. Never applies to the tamper-evident escrow audit chain."] })] }), _jsx("div", { children: _jsx(Button, { type: "submit", loading: saving, disabled: saving, className: "!w-auto", children: "Save" }) })] })] }));
-}

package/dist/apps/admin/setup/index.js

@@ -0,0 +1,6 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
+import SetupWizard from "../../shared/components/admin/setup/SetupWizard.js";
+export default function SetupPage(props) {
+    return (_jsx(AdminShell, { ...props, active: "setup", children: _jsx(SetupWizard, { userUid: props.userUid ?? "" }) }));
+}

package/dist/apps/shared/components/admin/layout/AdminShell.js

@@ -5,8 +5,9 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 ///////////////////////////////////////////////////////////////////////////////
 import "../../../styles/app.css";
 import { useEffect, useState } from "react";
-import { HiOutlineClipboardDocumentList, HiOutlineClock, HiOutlineDocumentArrowDown, HiOutlineGlobeAlt, HiOutlineInboxStack, HiOutlineKey, HiOutlinePaintBrush, HiOutlineQueueList, HiOutlineShieldCheck, HiOutlineShieldExclamation, HiOutlineUserGroup, } from "react-icons/hi2";
+import { HiOutlineClipboardDocumentList, HiOutlineClock, HiOutlineDocumentArrowDown, HiOutlineGlobeAlt, HiOutlineInboxStack, HiOutlineKey, HiOutlineLockClosed, HiOutlinePaintBrush, HiOutlinePuzzlePiece, HiOutlineQueueList, HiOutlineRocketLaunch, HiOutlineShieldCheck, HiOutlineShieldExclamation, HiOutlineUserGroup, HiOutlineWrenchScrewdriver, } from "react-icons/hi2";
 import { apiFetch, ApiRequestError } from "@rapidmx/react-shared/util/api.js";
+import { getSetupStatus } from "@rapidmx/react-shared/admin/setupApi.js";
 import { useRedirectIfUnauthenticated } from "@rapidmx/react-shared/auth/session.js";
 import useBranding from "@rapidmx/react-shared/branding/useBranding.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
@@ -39,6 +40,18 @@ const NAV_ITEMS = [
         label: "Escrow Scopes",
         icon: HiOutlineKey,
     },
+    {
+        id: "encryptionPolicy",
+        href: "/admin/encryption-policy",
+        label: "Encryption Policy",
+        icon: HiOutlineLockClosed,
+    },
+    {
+        id: "mailboxPolicy",
+        href: "/admin/mailbox-policy",
+        label: "Mailbox Policy",
+        icon: HiOutlineWrenchScrewdriver,
+    },
     {
         id: "retentionPolicy",
         href: "/admin/retention-policy",
@@ -51,6 +64,7 @@ const NAV_ITEMS = [
         label: "Data Requests",
         icon: HiOutlineDocumentArrowDown,
     },
+    { id: "plugins", href: "/admin/plugins", label: "Plugins", icon: HiOutlinePuzzlePiece },
     { id: "branding", href: "/admin/branding", label: "Branding", icon: HiOutlinePaintBrush },
 ];
 /** Mailbox-scoped sections — not part of the global nav rail/tab bar (see `NAV_ITEMS` above), but
@@ -59,7 +73,9 @@ const MAILBOX_SCOPED_ITEMS = [
     { id: "quarantine", href: "/admin/quarantine", label: "Quarantine", icon: HiOutlineShieldExclamation },
     { id: "ingestQueue", href: "/admin/ingest-queue", label: "Ingest Queue", icon: HiOutlineQueueList },
 ];
-const ALL_ITEMS = [...NAV_ITEMS, ...MAILBOX_SCOPED_ITEMS];
+/** The setup wizard - reached by redirect or from the Mailboxes page, not from the rail. */
+const SETUP_ITEM = { id: "setup", href: "/admin/setup", label: "Setup", icon: HiOutlineRocketLaunch };
+const ALL_ITEMS = [...NAV_ITEMS, ...MAILBOX_SCOPED_ITEMS, SETUP_ITEM];
 /**
  * Gates every `apps/admin` page behind the `admin` trusted role. Uses `GET /api/admin/release-notes` (any
  * `BaseAdminRoute` endpoint works — this one is side-effect-free) purely as a canary: a 200 means the
@@ -76,7 +92,22 @@ export default function AdminShell({ active, userUid, authServerUrl, children })
             return;
         }
         apiFetch("/admin/release-notes")
-            .then(() => setStatus("authorized"))
+            .then(async () => {
+            // Until first-run setup is finished, every other admin page sends the admin to the wizard. A failed
+            // check never blocks the console - the admin can still reach setup from the Mailboxes page.
+            if (active !== "setup") {
+                try {
+                    if ((await getSetupStatus()).required) {
+                        window.location.href = SETUP_ITEM.href;
+                        return;
+                    }
+                }
+                catch {
+                    // Fall through to the page.
+                }
+            }
+            setStatus("authorized");
+        })
             .catch((err) => {
             if (err instanceof ApiRequestError && (err.status === 403 || err.status === 401)) {
                 setStatus("denied");