@rapidmx/web-client 0.37.0 → 0.38.1

package/dist/apps/shared/components/admin/integrations/IntegrationSectionForm.d.ts

@@ -0,0 +1,54 @@
+import React, { ReactNode } from "react";
+import { IntegrationSectionName, IntegrationSettings, IntegrationSource } from "../../../../../lib/admin/integrationsApi.js";
+/** How a section's form treats one of its fields. */
+export interface SectionField {
+    /** How the field's reset button names it ("Reset API key to the deployment default"). */
+    name: string;
+    /** The deployment's value, in words, for the line beneath the field. */
+    describe: (value: any) => string;
+    /** The form's value for a value of the view, saved here (`admin`) or the deployment's (the value itself when left out). */
+    toForm?: (value: any, source: IntegrationSource) => unknown;
+    /** The form's value as the server shows it, to compare with the saved and the deployment's values (the value itself when left out). */
+    toWire?: (formValue: any) => unknown;
+    /** What saving sends for the form's value, when it differs from `toWire()`'s. */
+    toSend?: (formValue: any) => unknown;
+    /** False when the form's value isn't the deployment's though `toWire()` shows it the same: a secret saved here masked like the deployment's.
+     * Such a value is never taken as edited back to the deployment's (reset), which would drop the secret saved here. */
+    canBeDeployment?: (formValue: any) => boolean;
+}
+/** A secret field: no value in the form (it is write-only, `SecretField`), "set" or "none" for the deployment's. */
+export declare function secretSectionField(name: string): SectionField;
+/** What a section form's fields are drawn with. */
+export interface SectionForm {
+    /** The field's value in the form. */
+    value(field: string): any;
+    /** Changes the field; `undefined` takes back any change. */
+    set(field: string, value: unknown): void;
+    /** What is saved for a secret field now: nothing, a value saved here, or the deployment's. A pending reset shows the deployment's. */
+    secret(field: string): "none" | "here" | "deployment";
+    /** Whether the secret saved here for the field is one the server can't decrypt, so that it must be entered again. */
+    unreadable(field: string): boolean;
+    /** Whether the form holds a value of the administrator's for the field, rather than the deployment's. */
+    setHere(field: string): boolean;
+    /** The line beneath a field: the deployment's value and, for a field set here, the button that puts it back. */
+    footer(field: string): ReactNode;
+}
+export interface IntegrationSectionFormProps {
+    section: IntegrationSectionName;
+    title: string;
+    description: ReactNode;
+    /** What a change affects, stated above the Save button. */
+    consequence?: ReactNode;
+    fields: Record<string, SectionField>;
+    settings: IntegrationSettings;
+    onChange: (settings: IntegrationSettings) => void;
+    children: (form: SectionForm) => ReactNode;
+}
+/**
+ * One Integrations section's form, following the policy pages: each field shows the deployment's value beneath it and, while the form holds a value
+ * saved here, a "Reset to deployment default" that puts the field back in the form only - Save sends it, with the rest, as `null`. A field is never
+ * saved as a copy of the deployment's value (it would stop following the deployment's configuration): edited back to it, it is reset too. Only what
+ * changes is sent, with the version the settings were read at, so a change made over someone else's is refused rather than overwriting it. A save
+ * the server refuses for want of a recently confirmed identity offers to confirm it again (`ActionAlert`).
+ */
+export default function IntegrationSectionForm({ section, title, description, consequence, fields, settings, onChange, children, }: IntegrationSectionFormProps): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/IntegrationSectionForm.js

@@ -0,0 +1,131 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import React, { useState } from "react";
+import { getIntegrations, isSecretMask, isUnreadableSecret, updateIntegrationSection, } from "../../../../../lib/admin/integrationsApi.js";
+import Button from "../../../../../lib/components/buttons/Button.js";
+import { ApiRequestError } from "../../../../../lib/util/api.js";
+import Alert from "../ActionAlert.js";
+import { actionErrorMessage } from "../elevation.js";
+/** A field put back to the deployment's value, pending the form's Save. */
+const RESET = Symbol("reset");
+/** A secret field: no value in the form (it is write-only, `SecretField`), "set" or "none" for the deployment's. */
+export function secretSectionField(name) {
+    return { name, describe: (value) => (isSecretMask(value) ? "set" : "none"), toForm: () => undefined };
+}
+/** Whether two values are the same once sent (`undefined` counting as `null`, and a secret's `unreadable` flag, which is only the server's remark, not
+ * counting at all). */
+function same(a, b) {
+    const plain = (value) => JSON.stringify(value ?? null, (key, inner) => (key === "unreadable" ? undefined : inner));
+    return plain(a) === plain(b);
+}
+/**
+ * One Integrations section's form, following the policy pages: each field shows the deployment's value beneath it and, while the form holds a value
+ * saved here, a "Reset to deployment default" that puts the field back in the form only - Save sends it, with the rest, as `null`. A field is never
+ * saved as a copy of the deployment's value (it would stop following the deployment's configuration): edited back to it, it is reset too. Only what
+ * changes is sent, with the version the settings were read at, so a change made over someone else's is refused rather than overwriting it. A save
+ * the server refuses for want of a recently confirmed identity offers to confirm it again (`ActionAlert`).
+ */
+export default function IntegrationSectionForm({ section, title, description, consequence, fields, settings, onChange, children, }) {
+    const view = settings[section];
+    const [edits, setEdits] = useState({});
+    // Bumped by a save, so the fields start over (a credential being replaced is shown as saved again).
+    const [formKey, setFormKey] = useState(0);
+    const [error, setError] = useState(null);
+    const [saving, setSaving] = useState(false);
+    const [saved, setSaved] = useState(false);
+    const toForm = (field, value, source) => (fields[field].toForm ? fields[field].toForm(value, source) : value);
+    /** The field's change as the server would show it, the deployment's value for a reset. */
+    const wire = (field, edit) => (edit === RESET ? view.defaults[field] : fields[field].toWire ? fields[field].toWire(edit) : edit);
+    /** Whether the field's change puts it back to the deployment's value: a reset, a value left empty (`null`, which the server takes as unset), or the
+     * deployment's own. */
+    const isDeployment = (field, edit) => edit === RESET ||
+        wire(field, edit) === null ||
+        (same(wire(field, edit), view.defaults[field]) && (fields[field].canBeDeployment?.(edit) ?? true));
+    const form = {
+        value: (field) => field in edits
+            ? edits[field] === RESET
+                ? toForm(field, view.defaults[field], "deployment")
+                : edits[field]
+            : toForm(field, view.values[field], view.source[field]),
+        set: (field, value) => setEdits((current) => {
+            const next = { ...current };
+            if (value === undefined) {
+                delete next[field];
+            }
+            else {
+                next[field] = value;
+            }
+            return next;
+        }),
+        secret: (field) => {
+            const reset = edits[field] === RESET;
+            const shown = reset ? view.defaults[field] : view.values[field];
+            const source = reset ? "deployment" : view.source[field];
+            return !isSecretMask(shown) ? "none" : source === "admin" ? "here" : "deployment";
+        },
+        unreadable: (field) => edits[field] !== RESET && view.source[field] === "admin" && isUnreadableSecret(view.values[field]),
+        setHere: (field) => field in edits
+            ? !isDeployment(field, edits[field])
+            : // A registry elsewhere than the deployment's shows its token as none set here (restapi's view): nothing to reset.
+                view.source[field] === "admin" && view.values[field] !== null,
+        footer: (field) => (_jsxs("div", { className: "flex flex-wrap items-center gap-x-3 text-xs text-text-muted -mt-1", children: [_jsxs("span", { children: ["Deployment default: ", fields[field].describe(view.defaults[field])] }), form.setHere(field) && (_jsx(Button, { type: "button", variant: "text", className: "text-xs", "aria-label": `Reset ${fields[field].name} to the deployment default`, onClick: () => form.set(field, RESET), children: "Reset to deployment default" }))] })),
+    };
+    async function handleSubmit(e) {
+        e.preventDefault();
+        setError(null);
+        setSaved(false);
+        const patch = {};
+        for (const [field, edit] of Object.entries(edits)) {
+            const value = wire(field, edit);
+            const admin = view.source[field] === "admin";
+            if (isDeployment(field, edit)) {
+                // Back to the deployment's value: nothing to send unless one is saved here.
+                if (admin) {
+                    patch[field] = null;
+                }
+            }
+            else if (!admin || !same(value, view.values[field])) {
+                patch[field] = fields[field].toSend ? fields[field].toSend(edit) : value;
+            }
+        }
+        if (Object.keys(patch).length === 0) {
+            setEdits({});
+            setSaved(true);
+            return;
+        }
+        setSaving(true);
+        try {
+            onChange(await updateIntegrationSection(section, { ...patch, version: settings.version }));
+            setEdits({});
+            setFormKey((key) => key + 1);
+            setSaved(true);
+        }
+        catch (err) {
+            setError(await refusalMessage(err));
+        }
+        finally {
+            setSaving(false);
+        }
+    }
+    /** What a failed save says. A change refused for a newer version loads the settings again (keeping the entries, which are compared with them when
+     * saving), so that the next Save is made against the version now saved rather than failing the same way until the page is reloaded. */
+    async function refusalMessage(err) {
+        if (err instanceof ApiRequestError && err.status === 409) {
+            try {
+                const latest = await getIntegrations();
+                if (latest.version !== settings.version) {
+                    onChange(latest);
+                    return "The integration settings were changed by someone else. They are shown as saved now, with your entries kept: check them and save again.";
+                }
+            }
+            catch {
+                // Not loaded: the server's own message stands.
+            }
+        }
+        return actionErrorMessage(err, `Could not save the ${title} settings.`);
+    }
+    return (_jsxs("div", { className: "max-w-xl", children: [_jsx("h2", { className: "text-lg font-bold uppercase tracking-wide mb-1", children: title }), _jsx("div", { className: "text-sm text-text-muted mb-5", children: description }), error && _jsx(Alert, { children: error }), saved && !error && _jsx("div", { className: "mb-4 text-sm text-success font-medium", children: "Saved." }), _jsxs("form", { onSubmit: handleSubmit, className: "flex flex-col gap-4", children: [_jsx(React.Fragment, { children: children(form) }, formKey), consequence && _jsx("p", { className: "text-xs text-text-muted", children: consequence }), _jsx("div", { children: _jsx(Button, { type: "submit", loading: saving, disabled: saving, className: "!w-auto", children: "Save" }) })] })] }));
+}

package/dist/apps/shared/components/admin/integrations/IntegrationSectionPage.d.ts

@@ -0,0 +1,12 @@
+import React, { ReactNode } from "react";
+import { IntegrationSettings } from "../../../../../lib/admin/integrationsApi.js";
+import { AdminShellProps } from "../layout/AdminShell.js";
+import { IntegrationArea } from "./IntegrationsLayout.js";
+/** What a server from before Integrations (no `system/integrations` route) is shown instead of a bare "Not Found". */
+export declare const NO_INTEGRATIONS_MESSAGE = "This server doesn't offer Integrations yet. Upgrade it to manage them here.";
+export interface IntegrationSectionPageProps extends Omit<AdminShellProps, "active"> {
+    area: Exclude<IntegrationArea, "dnsProviders">;
+    children: (settings: IntegrationSettings, onChange: (settings: IntegrationSettings) => void) => ReactNode;
+}
+/** One Integrations section's page: the console's frame, the Integrations navigation, and the section's form once the settings have loaded. */
+export default function IntegrationSectionPage({ area, children, ...props }: IntegrationSectionPageProps): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/IntegrationSectionPage.js

@@ -0,0 +1,21 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { getIntegrations } from "../../../../../lib/admin/integrationsApi.js";
+import { ApiRequestError } from "../../../../../lib/util/api.js";
+import AdminShell from "../layout/AdminShell.js";
+import LoadedSettingsForm from "../settings/LoadedSettingsForm.js";
+import IntegrationsLayout from "./IntegrationsLayout.js";
+/** What a server from before Integrations (no `system/integrations` route) is shown instead of a bare "Not Found". */
+export const NO_INTEGRATIONS_MESSAGE = "This server doesn't offer Integrations yet. Upgrade it to manage them here.";
+/** The integration settings, with a server that has none answering `NO_INTEGRATIONS_MESSAGE`. */
+async function loadIntegrations() {
+    try {
+        return await getIntegrations();
+    }
+    catch (err) {
+        throw err instanceof ApiRequestError && err.status === 404 ? new ApiRequestError(NO_INTEGRATIONS_MESSAGE, 404) : err;
+    }
+}
+/** One Integrations section's page: the console's frame, the Integrations navigation, and the section's form once the settings have loaded. */
+export default function IntegrationSectionPage({ area, children, ...props }) {
+    return (_jsx(AdminShell, { ...props, active: "integrations", children: _jsx(IntegrationsLayout, { active: area, children: _jsx(LoadedSettingsForm, { load: loadIntegrations, loadErrorMessage: "Could not load the integrations.", children: children }) }) }));
+}

package/dist/apps/shared/components/admin/integrations/IntegrationsLayout.d.ts

@@ -0,0 +1,14 @@
+import React, { ReactNode } from "react";
+/** The Integrations section's areas, in the order the console shows them. */
+export type IntegrationArea = "dnsProviders" | "giphy" | "stun" | "signingCa" | "dnsResolver" | "pluginRegistry";
+export declare const INTEGRATION_AREAS: readonly {
+    id: IntegrationArea;
+    href: string;
+    label: string;
+    description: string;
+}[];
+/** The Integrations heading and the navigation between its areas (`active` is the current one; none on the overview), above the area's page. */
+export default function IntegrationsLayout({ active, children }: {
+    active?: IntegrationArea;
+    children: ReactNode;
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/IntegrationsLayout.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+export const INTEGRATION_AREAS = [
+    {
+        id: "dnsProviders",
+        href: "/admin/integrations/dns-providers",
+        label: "DNS providers",
+        description: "The DNS hosting accounts that publish the DNS records of this server and its domains, so they don't have to be added by hand.",
+    },
+    {
+        id: "giphy",
+        href: "/admin/integrations/giphy",
+        label: "Giphy",
+        description: "GIF search in the message editor.",
+    },
+    {
+        id: "stun",
+        href: "/admin/integrations/stun",
+        label: "STUN servers",
+        description: "How video meetings find a way between participants' networks.",
+    },
+    {
+        id: "signingCa",
+        href: "/admin/integrations/signing-ca",
+        label: "S/MIME signing CA",
+        description: "How people get the certificates that sign their mail.",
+    },
+    {
+        id: "dnsResolver",
+        href: "/admin/integrations/dns-resolver",
+        label: "DNS resolver",
+        description: "How this server looks up DNS records.",
+    },
+    {
+        id: "pluginRegistry",
+        href: "/admin/integrations/plugin-registry",
+        label: "Plugin registry",
+        description: "Where plugins are found and installed from.",
+    },
+];
+/** The Integrations heading and the navigation between its areas (`active` is the current one; none on the overview), above the area's page. */
+export default function IntegrationsLayout({ active, children }) {
+    return (_jsxs(_Fragment, { children: [_jsx("h1", { className: "text-xl font-bold uppercase tracking-wide mb-3", children: "Integrations" }), _jsx("nav", { "aria-label": "Integrations", className: "flex flex-wrap gap-x-4 gap-y-1 border-b border-border mb-6", children: INTEGRATION_AREAS.map((area) => (_jsx("a", { href: area.href, "aria-current": area.id === active ? "page" : undefined, className: [
+                        "py-2 text-sm font-medium border-b-2 -mb-px",
+                        area.id === active ? "border-primary text-primary-dark" : "border-transparent text-text-muted hover:text-text",
+                    ].join(" "), children: area.label }, area.id))) }), children] }));
+}

package/dist/apps/shared/components/admin/integrations/PluginRegistryForm.d.ts

@@ -0,0 +1,7 @@
+import React from "react";
+import { IntegrationSettings } from "../../../../../lib/admin/integrationsApi.js";
+/** The plugin registry section: where plugins are found and installed from, its token, and the namespaces searched. */
+export default function PluginRegistryForm({ settings, onChange }: {
+    settings: IntegrationSettings;
+    onChange: (settings: IntegrationSettings) => void;
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/PluginRegistryForm.js

@@ -0,0 +1,90 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { useRef } from "react";
+import { isSecretMask, isUnreadableSecret, } from "../../../../../lib/admin/integrationsApi.js";
+import Button from "../../../../../lib/components/buttons/Button.js";
+import IntegrationSectionForm, { secretSectionField } from "./IntegrationSectionForm.js";
+import SecretField, { INPUT_CLASS } from "./SecretField.js";
+/** `name` as the server takes a scope (restapi `normalizePluginNamespaces()`): trimmed, with its `@`. */
+function scopeOf(name) {
+    const scope = name.trim();
+    return scope.startsWith("@") ? scope : `@${scope}`;
+}
+/** Where `draft`'s saved token is saved: none once the namespace is renamed, since the server keeps a token only under the scope it was saved for. */
+function savedToken(draft) {
+    return draft.saved !== "none" && draft.savedName !== undefined && scopeOf(draft.name) === scopeOf(draft.savedName) ? draft.saved : "none";
+}
+/** `drafts` as the server takes them: a token typed is sent, a saved one as the mask (kept) when `keep` says so, none left out. */
+function namespacesOf(drafts, keep) {
+    return drafts.map((draft) => {
+        const registry = draft.registry.trim();
+        const token = draft.token ?? (keep(savedToken(draft)) ? { secret: true } : undefined);
+        return { name: draft.name.trim(), ...(registry ? { registry } : {}), ...(token ? { token } : {}) };
+    });
+}
+/** Whether two registry URLs are the same registry, credentials in them aside (restapi `sameRegistryUrl()`): a token goes only to its own registry. */
+function sameRegistryUrl(a, b) {
+    const href = (value) => {
+        try {
+            const url = new URL(value.trim());
+            url.username = "";
+            url.password = "";
+            return url.href;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const left = href(a);
+    return left !== undefined && left === href(b);
+}
+const FIELDS = {
+    url: { name: "registry URL", describe: (url) => url },
+    token: secretSectionField("registry token"),
+    namespaces: {
+        name: "plugin namespaces",
+        describe: (namespaces) => namespaces.map((namespace) => namespace.name).join(", ") || "none",
+        toForm: (namespaces, source) => namespaces.map((namespace, index) => ({
+            id: `ns-${index}`,
+            name: namespace.name,
+            registry: namespace.registry ?? "",
+            savedName: namespace.name,
+            saved: !isSecretMask(namespace.token) ? "none" : source === "admin" ? "here" : "deployment",
+            unreadable: source === "admin" && isUnreadableSecret(namespace.token),
+        })),
+        // Compared as the server shows the list: a saved token as the mask, wherever it is saved.
+        toWire: (drafts) => namespacesOf(drafts, (saved) => saved !== "none"),
+        // Only a token saved here can be kept; the deployment's stay with the deployment's list.
+        toSend: (drafts) => namespacesOf(drafts, (saved) => saved === "here"),
+        // A token saved here shows as the same mask as the deployment's but isn't it: a list keeping one is saved, never reset (which deletes it).
+        canBeDeployment: (drafts) => drafts.every((draft) => draft.token !== undefined || savedToken(draft) !== "here"),
+    },
+};
+/** The plugin namespaces: each a scope, optionally its own registry, and a write-only token. */
+function NamespacesEditor({ form }) {
+    const nextId = useRef(0);
+    const drafts = form.value("namespaces");
+    const change = (next) => form.set("namespaces", next);
+    const update = (id, patch) => change(drafts.map((draft) => (draft.id === id ? { ...draft, ...patch } : draft)));
+    return (_jsxs("div", { className: "flex flex-col gap-2 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Plugin namespaces" }), _jsx("span", { className: "text-xs text-text-muted", children: "The npm scopes the plugin catalog searches. Plugins in them may be installed." }), drafts.length === 0 && _jsx("p", { className: "text-xs text-text-muted", children: "No namespaces: the plugin catalog searches none." }), drafts.map((draft, index) => {
+                const n = index + 1;
+                return (_jsxs("fieldset", { className: "border border-border rounded-sm p-3 flex flex-col gap-2", children: [_jsxs("legend", { className: "sr-only", children: ["Namespace ", n] }), _jsx("input", { "aria-label": `Scope of namespace ${n}`, className: INPUT_CLASS, placeholder: "@acme", value: draft.name, onChange: (e) => update(draft.id, { name: e.target.value }) }), _jsx("input", { "aria-label": `Registry of namespace ${n}`, type: "url", className: INPUT_CLASS, placeholder: "Its own registry, if not the one above (https://...)", value: draft.registry, onChange: (e) => update(draft.id, { registry: e.target.value }) }), _jsx(SecretField, { id: `namespace-token-${draft.id}`, label: `Token of namespace ${n}`, name: `token of namespace ${n}`, saved: savedToken(draft), unreadable: draft.unreadable && savedToken(draft) === "here", value: draft.token, onChange: (token) => update(draft.id, { token }) }), draft.saved !== "none" && savedToken(draft) === "none" && (_jsxs("span", { className: "text-xs text-text-muted", children: ["The token saved for ", draft.savedName, " doesn\u2019t follow a new scope: enter it again, or leave it empty for none."] })), _jsx(Button, { type: "button", variant: "text", className: "!w-auto self-start text-xs", "aria-label": `Remove namespace ${n}`, onClick: () => change(drafts.filter((other) => other.id !== draft.id)), children: "Remove" })] }, draft.id));
+            }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto self-start", onClick: () => change([...drafts, { id: `new-${nextId.current++}`, name: "", registry: "", saved: "none" }]), children: "Add namespace" })] }));
+}
+/** The plugin registry section: where plugins are found and installed from, its token, and the namespaces searched. */
+export default function PluginRegistryForm({ settings, onChange }) {
+    const view = settings.pluginRegistry;
+    // The deployment's registry token, and its namespaces' tokens for its registry, are only ever sent to its registry (restapi
+    // `buildIntegrationsConfigLayer()`): with another URL in the form, saved or about to be, none of them is used.
+    const deploymentRegistryTokens = isSecretMask(view.defaults.token) || view.defaults.namespaces.some((namespace) => !namespace.registry && isSecretMask(namespace.token));
+    /** Whether the form's registry gets none of those tokens and none of its own is set or typed. */
+    const noTokenUsed = (form) => deploymentRegistryTokens &&
+        form.secret("token") !== "here" &&
+        form.value("token") === undefined &&
+        !sameRegistryUrl(form.value("url"), view.defaults.url);
+    const deploymentTokens = view.source.namespaces === "deployment" && view.values.namespaces.some((namespace) => isSecretMask(namespace.token));
+    return (_jsx(IntegrationSectionForm, { section: "pluginRegistry", title: "Plugin registry", description: "The npm registry plugins are found and installed from.", consequence: "A change affects the next plugin install or update only; installed plugins are not touched.", fields: FIELDS, settings: settings, onChange: onChange, children: (form) => (_jsxs(_Fragment, { children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Registry URL" }), _jsx("input", { "aria-label": "Registry URL", type: "url", className: INPUT_CLASS, value: form.value("url"), onChange: (e) => form.set("url", e.target.value) })] }), form.footer("url"), _jsxs("div", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Registry token" }), _jsx(SecretField, { id: "plugin-registry-token", label: "Registry token", name: "registry token", saved: form.secret("token"), unreadable: form.unreadable("token"), value: form.value("token"), onChange: (value) => form.set("token", value) }), noTokenUsed(form) && (_jsx("span", { className: "text-xs text-text-muted", children: "The deployment\u2019s tokens for its registry are only sent to the deployment\u2019s registry, so none is used with this one unless it is set here." }))] }), form.footer("token"), _jsx(NamespacesEditor, { form: form }), deploymentTokens && (_jsx("p", { className: "text-xs text-text-muted", children: "These are the deployment\u2019s namespaces. A changed list saved here replaces them, and the tokens the deployment sets for them aren\u2019t copied: enter them again." })), form.footer("namespaces")] })) }));
+}

package/dist/apps/shared/components/admin/integrations/SecretField.d.ts

@@ -0,0 +1,25 @@
+import React from "react";
+export declare const INPUT_CLASS = "w-full text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
+export interface SecretFieldProps {
+    id: string;
+    /** The input's label. */
+    label: string;
+    /** How the buttons name the field ("Replace API key"). */
+    name: string;
+    /** What is saved now: nothing, a value saved here, or the deployment's. */
+    saved: "none" | "here" | "deployment";
+    /** A new value typed, `undefined` for none: what saving sends. */
+    value: string | undefined;
+    onChange: (value: string | undefined) => void;
+    /** A file's content rather than a token: a text area. */
+    multiLine?: boolean;
+    /** The saved value is set but the server can't decrypt it (its key is gone from the keyring): it must be entered again. */
+    unreadable?: boolean;
+}
+/**
+ * A write-only credential. The server never sends a saved value back, so a saved one is shown only as "Set" (or "Set by this deployment") with a
+ * Replace button; typing a value is what replaces it, and an empty field sends nothing. What is typed is never shown (a password field), and is not
+ * offered for the browser to remember. One the server can't decrypt is "Set, but can't be read: enter it again": it is still there, but only a new value
+ * helps.
+ */
+export default function SecretField({ id, label, name, saved, value, onChange, multiLine, unreadable }: SecretFieldProps): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/SecretField.js

@@ -0,0 +1,25 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { useState } from "react";
+import Button from "../../../../../lib/components/buttons/Button.js";
+export const INPUT_CLASS = "w-full text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
+/**
+ * A write-only credential. The server never sends a saved value back, so a saved one is shown only as "Set" (or "Set by this deployment") with a
+ * Replace button; typing a value is what replaces it, and an empty field sends nothing. What is typed is never shown (a password field), and is not
+ * offered for the browser to remember. One the server can't decrypt is "Set, but can't be read: enter it again": it is still there, but only a new value
+ * helps.
+ */
+export default function SecretField({ id, label, name, saved, value, onChange, multiLine = false, unreadable = false }) {
+    const [replacing, setReplacing] = useState(false);
+    if (saved !== "none" && !replacing) {
+        return (_jsxs("div", { className: "flex items-center gap-3 text-sm", children: [unreadable ? (_jsx("span", { className: "font-medium text-danger", children: "Set, but can't be read: enter it again" })) : (_jsx("span", { className: "font-medium", children: saved === "here" ? "Set" : "Set by this deployment" })), _jsx(Button, { type: "button", variant: "text", className: "text-xs", "aria-label": `Replace ${name}`, onClick: () => setReplacing(true), children: "Replace" })] }));
+    }
+    const change = (text) => onChange(text === "" ? undefined : text);
+    return (_jsxs("div", { className: "flex flex-col gap-1", children: [multiLine ? (_jsx("textarea", { id: id, "aria-label": label, rows: 6, spellCheck: false, autoComplete: "off", className: `${INPUT_CLASS} font-mono`, value: value ?? "", onChange: (e) => change(e.target.value) })) : (_jsx("input", { id: id, "aria-label": label, type: "password", autoComplete: "new-password", className: INPUT_CLASS, value: value ?? "", onChange: (e) => change(e.target.value) })), saved !== "none" && (_jsx(Button, { type: "button", variant: "text", className: "!w-auto self-start text-xs", "aria-label": `Keep the saved ${name}`, onClick: () => {
+                    setReplacing(false);
+                    onChange(undefined);
+                }, children: "Keep the saved value" }))] }));
+}

package/dist/apps/shared/components/admin/integrations/SigningCaForm.d.ts

@@ -0,0 +1,7 @@
+import React from "react";
+import { IntegrationSettings } from "../../../../../lib/admin/integrationsApi.js";
+/** The S/MIME signing CA section: how people get the certificates that sign their mail. */
+export default function SigningCaForm({ settings, onChange }: {
+    settings: IntegrationSettings;
+    onChange: (settings: IntegrationSettings) => void;
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/SigningCaForm.js

@@ -0,0 +1,25 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import IntegrationSectionForm from "./IntegrationSectionForm.js";
+import { INPUT_CLASS } from "./SecretField.js";
+const BACKENDS = {
+    rfc8823: "Automatically, from a public CA (RFC 8823)",
+    manual: "Manually, by an administrator",
+    none: "Not offered",
+};
+/** Text, "none" when unset. */
+const describeText = (value) => value ?? "none";
+const FIELDS = {
+    backend: { name: "certificate issuing", describe: (backend) => BACKENDS[backend] },
+    directoryUrl: { name: "ACME directory URL", describe: describeText },
+    contactEmail: {
+        name: "contact email",
+        describe: describeText,
+        toForm: (value) => value ?? "",
+        toWire: (text) => text.trim() || null,
+    },
+};
+/** The S/MIME signing CA section: how people get the certificates that sign their mail. */
+export default function SigningCaForm({ settings, onChange }) {
+    const deploymentContact = settings.signingCa.defaults.contactEmail;
+    return (_jsx(IntegrationSectionForm, { section: "signingCa", title: "S/MIME signing CA", description: "How a signing certificate is issued when someone asks for one in their encryption settings.", consequence: "A change affects new enrollments only; certificates already being issued finish with the CA they started with.", fields: FIELDS, settings: settings, onChange: onChange, children: (form) => (_jsxs(_Fragment, { children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "How signing certificates are issued" }), _jsx("select", { "aria-label": "How signing certificates are issued", className: INPUT_CLASS, value: form.value("backend"), onChange: (e) => form.set("backend", e.target.value), children: Object.entries(BACKENDS).map(([backend, label]) => (_jsx("option", { value: backend, children: label }, backend))) })] }), form.footer("backend"), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "ACME directory URL" }), _jsx("input", { "aria-label": "ACME directory URL", type: "url", className: INPUT_CLASS, value: form.value("directoryUrl"), onChange: (e) => form.set("directoryUrl", e.target.value) }), _jsx("span", { className: "text-xs text-text-muted", children: "The CA's RFC 8823 ACME directory, https:// only. Used when certificates are issued automatically." })] }), form.footer("directoryUrl"), _jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "Contact email" }), _jsx("input", { "aria-label": "Contact email", type: "email", className: INPUT_CLASS, value: form.value("contactEmail"), onChange: (e) => form.set("contactEmail", e.target.value) }), _jsxs("span", { className: "text-xs text-text-muted", children: ["Where the CA sends notices about this server's account.", deploymentContact && ` Left empty, the deployment's address (${deploymentContact}) is used.`] })] }), form.footer("contactEmail")] })) }));
+}

package/dist/apps/shared/components/admin/integrations/StunForm.d.ts

@@ -0,0 +1,9 @@
+import React from "react";
+import { IntegrationSettings } from "../../../../../lib/admin/integrationsApi.js";
+/** The lines of `text` that hold something, trimmed. */
+export declare function lines(text: string): string[];
+/** The STUN section: the servers video meetings use to find a way between participants' networks. */
+export default function StunForm({ settings, onChange }: {
+    settings: IntegrationSettings;
+    onChange: (settings: IntegrationSettings) => void;
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/StunForm.js

@@ -0,0 +1,26 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import IntegrationSectionForm from "./IntegrationSectionForm.js";
+import { INPUT_CLASS } from "./SecretField.js";
+/** The lines of `text` that hold something, trimmed. */
+export function lines(text) {
+    return text
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line !== "");
+}
+const FIELDS = {
+    urls: {
+        name: "STUN servers",
+        describe: (urls) => (urls ? urls.join(", ") : "the meet plugin's built-in list"),
+        toForm: (urls) => (urls ?? []).join("\n"),
+        // An emptied box is no list (the server refuses an empty one): the deployment's value.
+        toWire: (text) => {
+            const urls = lines(text);
+            return urls.length > 0 ? urls : null;
+        },
+    },
+};
+/** The STUN section: the servers video meetings use to find a way between participants' networks. */
+export default function StunForm({ settings, onChange }) {
+    return (_jsx(IntegrationSectionForm, { section: "stun", title: "STUN servers", description: _jsx(_Fragment, { children: "The STUN servers video meetings hand to participants\u2019 browsers. TURN servers stay in the Meet plugin\u2019s settings." }), consequence: "Meetings started after saving use the new list.", fields: FIELDS, settings: settings, onChange: onChange, children: (form) => (_jsxs(_Fragment, { children: [_jsxs("label", { className: "flex flex-col gap-1.5 text-sm", children: [_jsx("span", { className: "font-semibold", children: "STUN servers" }), _jsx("textarea", { "aria-label": "STUN servers", rows: 4, spellCheck: false, className: `${INPUT_CLASS} font-mono`, placeholder: "stun:stun.example.com:3478", value: form.value("urls"), onChange: (e) => form.set("urls", e.target.value) }), _jsx("span", { className: "text-xs text-text-muted", children: "One per line, 1 to 10 of them, each a stun: or stuns: address." })] }), form.footer("urls")] })) }));
+}

package/dist/apps/shared/components/admin/integrations/dnsProviderParts.d.ts

@@ -0,0 +1,28 @@
+import React, { ReactNode } from "react";
+import type { DnsProvider } from "../../../../../lib/admin/dnsProvidersApi.js";
+import type { DnsExistingRecord } from "../../../../../lib/admin/domainsApi.js";
+/** A small label beside a name ("Not yet live-tested", "Added by the installer"). */
+export declare function Badge({ children }: {
+    children: ReactNode;
+}): React.JSX.Element;
+/** How long without a report from the DNS controller before it is shown as possibly down: it reports every minute by default
+ * (`DNS_CONTROLLER_STATUS_INTERVAL_SECONDS`), so this is ten missed reports, well past a pod restart or a clock off by a few minutes. */
+export declare const CONTROLLER_SILENT_MS: number;
+/** Whether a report made at `iso` is older than `CONTROLLER_SILENT_MS`: what it says may no longer hold. */
+export declare function isStaleReport(iso: string, now?: number): boolean;
+/** What the console says of a provider config's external-dns instance: Disabled (the admin's switch), Unknown when the DNS controller last reported
+ * on it too long ago (it may be down: nothing it said still holds), Error with the last error the controller reported, Running (a ready pod), or Not
+ * ready (none yet, including a config the controller hasn't reported on). */
+export declare function dnsProviderStatus(provider: DnsProvider, now?: number): {
+    label: "Disabled" | "Unknown" | "Error" | "Running" | "Not ready";
+    error?: string;
+};
+/** `iso` as the browser's local date and time, nothing when unset. */
+export declare function formatTime(iso: string | undefined): string;
+/** "1 domain", "2 domains". */
+export declare function domainsText(count: number): string;
+/** What a record in `type_mismatch` conflict says: records of another type stand where this one would be published, RapidMX never deletes or takes them over,
+ * and the administrator deletes them at their DNS host. Lists them (type and value) when the server names them. */
+export declare function TypeMismatchNotice({ existing }: {
+    existing?: DnsExistingRecord[];
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/integrations/dnsProviderParts.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/** A small label beside a name ("Not yet live-tested", "Added by the installer"). */
+export function Badge({ children }) {
+    return _jsx("span", { className: "ml-2 text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill bg-surface-alt text-text-muted", children: children });
+}
+/** How long without a report from the DNS controller before it is shown as possibly down: it reports every minute by default
+ * (`DNS_CONTROLLER_STATUS_INTERVAL_SECONDS`), so this is ten missed reports, well past a pod restart or a clock off by a few minutes. */
+export const CONTROLLER_SILENT_MS = 10 * 60 * 1000;
+/** Whether a report made at `iso` is older than `CONTROLLER_SILENT_MS`: what it says may no longer hold. */
+export function isStaleReport(iso, now = Date.now()) {
+    return now - new Date(iso).getTime() > CONTROLLER_SILENT_MS;
+}
+/** What the console says of a provider config's external-dns instance: Disabled (the admin's switch), Unknown when the DNS controller last reported
+ * on it too long ago (it may be down: nothing it said still holds), Error with the last error the controller reported, Running (a ready pod), or Not
+ * ready (none yet, including a config the controller hasn't reported on). */
+export function dnsProviderStatus(provider, now = Date.now()) {
+    if (!provider.enabled) {
+        return { label: "Disabled" };
+    }
+    if (provider.status?.reportedAt && isStaleReport(provider.status.reportedAt, now)) {
+        return {
+            label: "Unknown",
+            error: `The DNS controller hasn't reported on it since ${formatTime(provider.status.reportedAt)}; it may be down.`,
+        };
+    }
+    if (provider.status?.lastError) {
+        return { label: "Error", error: provider.status.lastError };
+    }
+    return { label: (provider.status?.readyReplicas ?? 0) > 0 ? "Running" : "Not ready" };
+}
+/** `iso` as the browser's local date and time, nothing when unset. */
+export function formatTime(iso) {
+    return iso ? new Date(iso).toLocaleString() : "";
+}
+/** "1 domain", "2 domains". */
+export function domainsText(count) {
+    return count === 1 ? "1 domain" : `${count} domains`;
+}
+/** What a record in `type_mismatch` conflict says: records of another type stand where this one would be published, RapidMX never deletes or takes them over,
+ * and the administrator deletes them at their DNS host. Lists them (type and value) when the server names them. */
+export function TypeMismatchNotice({ existing }) {
+    return (_jsxs("div", { className: "text-xs mt-1 max-w-xs", children: ["Records of another type are in the way. RapidMX never deletes them; delete them at your DNS host and this record is published.", existing && existing.length > 0 && (_jsx("ul", { className: "mt-1 list-none flex flex-col gap-0.5", children: existing.map((record) => (_jsx("li", { children: _jsx("code", { className: "break-all", children: `${record.type} ${record.value}` }) }, `${record.type} ${record.value}`))) }))] }));
+}

package/dist/apps/shared/components/admin/layout/AdminShell.d.ts

@@ -2,7 +2,7 @@ import "../../../styles/app.css";
 import React, { PropsWithChildren } from "react";
 import type { NavItem } from "../../../../../lib/components/navigation/BottomTabBar.js";
 import { PluginNav, PluginNavProps } from "../../../plugins/pluginNav.js";
-export type AdminSection = "mailboxes" | "quarantine" | "ingestQueue" | "domains" | "auditLog" | "distributionLists" | "transportRules" | "escrowScopes" | "retentionPolicy" | "encryptionPolicy" | "mailboxPolicy" | "setup" | "dataRequests" | "plugins" | "diagnostics" | "branding" | "signingCertificates";
+export type AdminSection = "mailboxes" | "quarantine" | "ingestQueue" | "domains" | "auditLog" | "distributionLists" | "transportRules" | "escrowScopes" | "retentionPolicy" | "encryptionPolicy" | "mailboxPolicy" | "setup" | "dataRequests" | "plugins" | "diagnostics" | "branding" | "signingCertificates" | "integrations" | "configurationEncryption";
 /** A core `AdminSection`, or a plugin's `adminNav` item id (see `PluginNav`). */
 export type AdminShellActive = AdminSection | (string & {});
 export interface AdminShellProps extends PluginNavProps {