@saasicat/ui-vue 0.24.2 → 0.26.0

package/dist/quasar/index.cjs

@@ -23,17 +23,149 @@ __export(quasar_exports, {
   SA_PORTAL_CLASS: () => SA_PORTAL_CLASS,
   bindSaThemeToDocument: () => bindSaThemeToDocument,
   createSuperAdminApp: () => createSuperAdminApp,
+  quasarConfirm: () => quasarConfirm,
+  quasarConfirmOptions: () => quasarConfirmOptions,
   quasarNotify: () => quasarNotify,
+  resolveQuasarOptions: () => resolveQuasarOptions,
+  useSuperAdminConfirm: () => useSuperAdminConfirm,
   useSuperAdminNotify: () => useSuperAdminNotify
 });
 module.exports = __toCommonJS(quasar_exports);
 
 // src/quasar/create-super-admin-app.ts
-var import_vue5 = require("vue");
-var import_quasar3 = require("quasar");
+var import_vue7 = require("vue");
+var import_quasar4 = require("quasar");
 var import_pinia = require("pinia");
 var import_vue_router = require("vue-router");
 
+// src/client/i18n/format.ts
+var import_types = require("@saasicat/types");
+
+// src/client/admin-error.ts
+var ADMIN_ERROR = /* @__PURE__ */ Symbol.for("@saasicat/ui-vue/AdminError");
+var PLATFORM_ERROR = /* @__PURE__ */ Symbol.for("@saasicat/ui-vue/PlatformError");
+function markPlatformError(error) {
+  Object.defineProperty(error, PLATFORM_ERROR, { value: true });
+}
+var TRANSPORT_FAILURE = /* @__PURE__ */ Symbol.for("@saasicat/ui-vue/TransportFailure");
+function markTransportFailure(error) {
+  if (typeof error === "object" && error !== null) {
+    try {
+      Object.defineProperty(error, TRANSPORT_FAILURE, { value: true });
+    } catch {
+    }
+  }
+  return error;
+}
+function describe(init) {
+  const status = init.status ?? 0;
+  const where = [init.method, init.url].filter(Boolean).join(" ");
+  const what = status > 0 ? `HTTP ${status}` : "request failed";
+  const head = where ? `${where} \u2192 ${what}` : what;
+  const code = init.code ? ` (${init.code})` : "";
+  return init.detail ? `${head}${code}: ${init.detail}` : `${head}${code}`;
+}
+var AdminError = class extends Error {
+  /** HTTP status. `0` means the request never produced one. */
+  status;
+  /** Machine-readable code from the response body, when it carried one. */
+  code;
+  /** Parsed response body, when there was one. */
+  body;
+  /** Requested URL, when known. */
+  url;
+  /** Request method, when known. */
+  method;
+  /**
+   * Text the failing side supplied — the only candidate for user-facing
+   * output. `undefined` when nothing was supplied.
+   */
+  detail;
+  /** The request completed but the answer was unusable. See `AdminErrorInit`. */
+  emptyResponse;
+  /** The request never reached the server. See `AdminErrorInit`. */
+  transportFailure;
+  constructor(init = {}) {
+    super(init.message ?? describe(init), { cause: init.cause });
+    this.name = "AdminError";
+    this.status = init.status ?? 0;
+    this.code = init.code;
+    this.body = init.body;
+    this.url = init.url;
+    this.method = init.method;
+    this.detail = init.detail;
+    this.emptyResponse = init.emptyResponse ?? false;
+    this.transportFailure = init.transportFailure ?? false;
+    Object.defineProperty(this, ADMIN_ERROR, { value: true });
+    markPlatformError(this);
+  }
+};
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : void 0;
+}
+function asString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value : void 0;
+}
+function readErrorDetail(body) {
+  const record = asRecord(body);
+  if (!record) return asString(body);
+  const message = record.message;
+  if (Array.isArray(message)) {
+    const parts = message.filter((part) => typeof part === "string");
+    return parts.length > 0 ? parts.join(", ") : void 0;
+  }
+  return asString(message) ?? asString(record.error) ?? asString(record.reason);
+}
+function readErrorCode(body) {
+  return asString(asRecord(body)?.code);
+}
+
+// src/client/http-json.ts
+function serverAnswered(status) {
+  return status > 0;
+}
+function requireServerAnswer(status, method, url, raise) {
+  if (serverAnswered(status)) return;
+  throw markTransportFailure(
+    raise(`${method} ${url} produced no HTTP status \u2014 the request did not reach the server`)
+  );
+}
+function trimTrailingSlashes(url) {
+  let end = url.length;
+  while (end > 0 && url[end - 1] === "/") end--;
+  return url.slice(0, end);
+}
+
+// src/client/http/fetch-http-client.ts
+var ABSOLUTE_URL = /^[a-z][a-z0-9+.-]*:|^\/\//i;
+function resolveUrl(url, baseUrl) {
+  if (!baseUrl || ABSOLUTE_URL.test(url)) return url;
+  return `${trimTrailingSlashes(baseUrl)}${url.startsWith("/") ? "" : "/"}${url}`;
+}
+function createFetchHttpClient(options = {}) {
+  return async (url, init) => {
+    const headers = new Headers(await options.headers?.());
+    if (!headers.has("Accept")) headers.set("Accept", "application/json");
+    for (const [name, value] of Object.entries(init?.headers ?? {})) {
+      headers.set(name, value);
+    }
+    if (init?.body !== void 0 && !headers.has("Content-Type")) {
+      headers.set("Content-Type", "application/json");
+    }
+    let response;
+    try {
+      response = await fetch(resolveUrl(url, options.baseUrl), {
+        method: init?.method ?? "GET",
+        headers,
+        body: init?.body
+      });
+    } catch (err) {
+      throw markTransportFailure(err);
+    }
+    return response;
+  };
+}
+
 // src/client/types.ts
 var NOOP_KV_STORE = {
   get: () => null,
@@ -75,7 +207,7 @@ function resolveLocalStorage() {
   }
 }
 function defaultHttpClient() {
-  return (url, init) => fetch(url, init);
+  return createFetchHttpClient();
 }
 
 // src/vue/super-admin-context.ts
@@ -148,15 +280,294 @@ var SUPER_ADMIN_NOTIFY_KEY = /* @__PURE__ */ Symbol.for(
   "@saasicat/ui-vue/SUPER_ADMIN_NOTIFY"
 );
 
-// src/vue/use-sa-theme.ts
+// src/vue/ui-confirm.ts
+var SUPER_ADMIN_CONFIRM_KEY = /* @__PURE__ */ Symbol.for(
+  "@saasicat/ui-vue/SUPER_ADMIN_CONFIRM"
+);
+
+// src/vue/resource-registry.ts
 var import_vue = require("vue");
-var SCHEMES = ["light", "dark", "system"];
-var STORAGE_KEY = "saasicat.theme.scheme";
+
+// src/client/resources/define-resource.ts
+function defineResource(key, ops, options = {}) {
+  return { key, ops, projectScoped: options.projectScoped ?? false };
+}
+function requireProjectKey(def, ctx) {
+  if (!def.projectScoped) return;
+  if (typeof ctx.projectKey === "string" && ctx.projectKey.trim() !== "") return;
+  throw new Error(
+    `Resource "${def.key}" is project-scoped, but the context it is bound to names no project. Its requests would go out as \`?projectKey=\`, which the admin API answers for no project at all: the catalogue reads as empty and the first create fails validation instead. Name the project this admin administers \u2014 \`endpoints.projectKey\` for createSuperAdminApp(), \`context.projectKey\` for createResourceRegistry().`
+  );
+}
+function bindResource(def, http, ctx) {
+  const readContext = typeof ctx === "function" ? ctx : () => ctx;
+  if (def.projectScoped) requireProjectKey(def, readContext());
+  const bound = {};
+  for (const [name, op] of Object.entries(def.ops)) {
+    bound[name] = async (...args) => {
+      const context = readContext();
+      requireProjectKey(def, context);
+      return op(http, context, ...args);
+    };
+  }
+  return bound;
+}
+
+// src/client/resources/resource-request.ts
+async function requestJson(http, url, init = {}) {
+  const method = init.method ?? "GET";
+  const response = await http(url, {
+    method,
+    headers: { "content-type": "application/json", ...init.headers },
+    body: init.body === void 0 ? void 0 : JSON.stringify(init.body)
+  });
+  requireServerAnswer(
+    response.status,
+    method,
+    url,
+    (diagnostic) => new AdminError({ status: response.status, url, method, message: diagnostic })
+  );
+  if (response.status === 204) return null;
+  const body = await response.json().catch(() => null);
+  if (response.status >= 400) {
+    throw new AdminError({
+      status: response.status,
+      code: readErrorCode(body),
+      body,
+      // The third place this had to be read, and the second time it was
+      // read a narrower way: without `detail` a page migrating onto these
+      // resources loses "Plan already exists" and shows the generic
+      // status sentence instead. One decision, one function.
+      detail: readErrorDetail(body),
+      url,
+      method
+    });
+  }
+  return body;
+}
+async function requestJsonBody(http, url, what, init = {}) {
+  const body = await requestJson(http, url, init);
+  if (body === null || body === void 0) {
+    throw new AdminError({
+      status: 0,
+      url,
+      method: init.method ?? "GET",
+      // `what` is a diagnostic — "Create returned no body" — so it goes
+      // on `message`, not `detail`. As `detail` it out-ranked the
+      // localized wording and the operator read an English internal
+      // string instead of being told the change may already have landed.
+      message: what,
+      emptyResponse: true
+    });
+  }
+  return body;
+}
+
+// src/client/resources/list-resource.ts
+var LIST_FIRST_PAGE = 1;
+var LIST_PAGE_SIZE_DEFAULT = 50;
+function isSentInQuery(value) {
+  return value !== void 0 && value !== null && value !== "";
+}
+function appendFilter(params, filter) {
+  for (const [key, value] of Object.entries(filter ?? {})) {
+    if (!isSentInQuery(value)) continue;
+    params.set(key, String(value));
+  }
+}
+function listUrl(endpoint, query = {}) {
+  const params = new URLSearchParams();
+  params.set("page", String(query.page ?? LIST_FIRST_PAGE));
+  params.set("pageSize", String(query.pageSize ?? LIST_PAGE_SIZE_DEFAULT));
+  appendFilter(params, query.filter);
+  return `${endpoint}${endpoint.includes("?") ? "&" : "?"}${params.toString()}`;
+}
+function readListPage(raw) {
+  if (Array.isArray(raw)) return { items: raw, total: raw.length };
+  if (raw === null || typeof raw !== "object") return { items: [], total: 0 };
+  const body = raw;
+  const page = {
+    items: Array.isArray(body.items) ? body.items : []
+  };
+  if (typeof body.total === "number") page.total = body.total;
+  if (typeof body.page === "number") page.page = body.page;
+  if (typeof body.pageSize === "number") page.pageSize = body.pageSize;
+  return page;
+}
+function defineListOp(endpoint) {
+  return async (http, ctx, query) => readListPage(await requestJson(http, listUrl(endpoint(ctx), query)));
+}
+
+// src/client/resources/plans.resource.ts
+function plansUrl(ctx) {
+  return `${ctx.apiBase}/catalog/plans`;
+}
+function versionsUrl(ctx) {
+  return `${ctx.apiBase}/catalog/plan-versions`;
+}
+function scoped(url, ctx) {
+  return `${url}?projectKey=${encodeURIComponent(ctx.projectKey)}`;
+}
+var plansResource = defineResource(
+  "plans",
+  {
+    list: async (http, ctx) => await requestJson(http, scoped(plansUrl(ctx), ctx)) ?? [],
+    tenantCounts: async (http, ctx) => await requestJson(
+      http,
+      scoped(`${plansUrl(ctx)}/tenant-counts`, ctx)
+    ) ?? {},
+    /**
+     * The project comes from the context, not from the caller.
+     *
+     * The endpoint takes it in the body, and the composable this replaces
+     * made that the caller's job — so a page had to keep hold of the
+     * project it was administering just to create in it, and `list()` and
+     * `create()` read two different sources for one value. A stale one
+     * creates a plan outside the project the list is showing.
+     */
+    create: (http, ctx, data) => requestJsonBody(http, plansUrl(ctx), "Create returned no body", {
+      method: "POST",
+      body: { ...data, projectKey: ctx.projectKey }
+    }),
+    update: (http, ctx, planId, data) => requestJsonBody(
+      http,
+      `${plansUrl(ctx)}/${planId}`,
+      "Update returned no body",
+      {
+        method: "PATCH",
+        body: data
+      }
+    ),
+    /** Marks the plan deleted. Fails while it still has versions. */
+    softDelete: async (http, ctx, planId) => {
+      await requestJson(http, `${plansUrl(ctx)}/${planId}`, { method: "DELETE" });
+    },
+    /** Removes the plan for good. 422 `PLAN_HAS_VERSIONS` when it cannot. */
+    hardDelete: async (http, ctx, planId) => {
+      await requestJson(http, `${plansUrl(ctx)}/${planId}/purge`, { method: "DELETE" });
+    }
+  },
+  { projectScoped: true }
+);
+var planVersionsResource = defineResource("planVersions", {
+  listForPlan: async (http, ctx, planId) => await requestJson(http, `${plansUrl(ctx)}/${planId}/versions`) ?? [],
+  createDraft: (http, ctx, planId, data) => requestJsonBody(
+    http,
+    `${plansUrl(ctx)}/${planId}/versions`,
+    "CreateDraft returned no body",
+    { method: "POST", body: data }
+  ),
+  updateDraft: (http, ctx, versionId, data) => requestJsonBody(
+    http,
+    `${versionsUrl(ctx)}/${versionId}`,
+    "UpdateDraft returned no body",
+    { method: "PATCH", body: data }
+  ),
+  publish: (http, ctx, versionId, options = {}) => requestJsonBody(
+    http,
+    `${versionsUrl(ctx)}/${versionId}/publish`,
+    "Publish returned no body",
+    { method: "POST", body: options }
+  ),
+  discardDraft: async (http, ctx, versionId) => {
+    await requestJson(http, `${versionsUrl(ctx)}/${versionId}`, { method: "DELETE" });
+  },
+  /**
+   * Ends a live version on `endsAt`, with no successor. Idempotent — a
+   * second call with another date overwrites the first.
+   *
+   * `endsAt` is the date itself, not a payload: the endpoint's body is
+   * `{ endsAt }` and wrapping it is this operation's job, not the caller's.
+   */
+  terminate: (http, ctx, versionId, endsAt) => requestJsonBody(
+    http,
+    `${versionsUrl(ctx)}/${versionId}/terminate`,
+    "Terminate returned no body",
+    { method: "POST", body: { endsAt } }
+  )
+});
+
+// src/client/resources/tenants.resource.ts
+var tenantsResource = defineResource("tenants", {
+  list: defineListOp((ctx) => `${ctx.apiBase}/tenants`)
+});
+
+// src/client/resources/audit.resource.ts
+var auditResource = defineResource("audit", {
+  list: defineListOp((ctx) => `${ctx.apiBase}/audit`)
+});
+
+// src/client/resources/index.ts
+var platformResources = {
+  plans: plansResource,
+  planVersions: planVersionsResource,
+  tenants: tenantsResource,
+  audit: auditResource
+};
+
+// src/vue/resource-registry.ts
+function boundWithOverride(def, http, readContext, override) {
+  const context = override?.context ? () => ({ ...readContext(), ...override.context }) : readContext;
+  const platform = bindResource(def, override?.http ?? http, context);
+  if (!override?.ops) return platform;
+  const result = { ...platform };
+  for (const [name, wrap] of Object.entries(override.ops)) {
+    if (typeof wrap !== "function") continue;
+    if (!Object.hasOwn(platform, name)) {
+      throw new Error(
+        `createResourceRegistry: resource "${def.key}" has no operation "${name}" to override. It offers: ${Object.keys(platform).join(", ")}.`
+      );
+    }
+    const next = platform[name];
+    result[name] = (...args) => wrap(next, ...args);
+  }
+  return result;
+}
+function createResourceRegistry(options) {
+  if (!options?.http) {
+    throw new Error(
+      "createResourceRegistry: `http` is required. Pass the HttpClient your app already uses \u2014 createAxiosHttpClient(instance) or createFetchHttpClient({ headers }) \u2014 so every platform request carries its auth."
+    );
+  }
+  const readContext = typeof options.context === "function" ? options.context : () => options.context;
+  const unknown = Object.keys(options.overrides ?? {}).filter(
+    (key) => !Object.hasOwn(options.resources, key)
+  );
+  if (unknown.length > 0) {
+    throw new Error(
+      `createResourceRegistry: no resource named ${unknown.map((k) => `"${k}"`).join(", ")} to override. The registry holds: ${Object.keys(options.resources).join(", ")}.`
+    );
+  }
+  const bound = /* @__PURE__ */ new Map();
+  for (const [key, def] of Object.entries(options.resources)) {
+    bound.set(key, boundWithOverride(def, options.http, readContext, options.overrides?.[key]));
+  }
+  return {
+    get(key) {
+      const ops = bound.get(key);
+      if (!ops) {
+        throw new Error(
+          `useResource("${String(key)}"): no such resource. The registry offers: ${[...bound.keys()].join(", ")}.`
+        );
+      }
+      return ops;
+    },
+    keys: () => [...bound.keys()]
+  };
+}
+var SUPER_ADMIN_RESOURCES_KEY = /* @__PURE__ */ Symbol.for(
+  "@saasicat/ui-vue/SUPER_ADMIN_RESOURCES"
+);
+
+// src/vue/use-sa-theme.ts
+var import_vue2 = require("vue");
+var SA_COLOR_SCHEMES = ["light", "dark", "system"];
+var SA_THEME_STORAGE_KEY = "saasicat.theme.scheme";
 function isScheme(value) {
-  return typeof value === "string" && SCHEMES.includes(value);
+  return typeof value === "string" && SA_COLOR_SCHEMES.includes(value);
 }
 function systemScheme() {
-  const value = (0, import_vue.ref)("light");
+  const value = (0, import_vue2.ref)("light");
   if (typeof window === "undefined" || typeof window.matchMedia !== "function") {
     return { value, unsubscribe: () => {
     } };
@@ -173,14 +584,20 @@ function createSaTheme(options = {}) {
   const storage = options.storage ?? defaultKvStore();
   const persist = options.persist !== false;
   const provided = options.scheme;
-  const appOwnsIt = (0, import_vue.isRef)(provided);
-  const stored = persist && !appOwnsIt ? storage.get(STORAGE_KEY) : null;
-  const scheme = (0, import_vue.isRef)(provided) ? provided : (0, import_vue.ref)(isScheme(stored) ? stored : provided ?? "system");
+  const appOwnsIt = (0, import_vue2.isRef)(provided);
+  const key = `${options.storageKeyPrefix ?? ""}${SA_THEME_STORAGE_KEY}`;
+  const stored = persist && !appOwnsIt ? storage.get(key) : null;
+  const scheme = (0, import_vue2.isRef)(provided) ? provided : (0, import_vue2.ref)(isScheme(stored) ? stored : provided ?? "system");
   const { value: system, unsubscribe } = systemScheme();
-  const stopPersisting = persist && !appOwnsIt ? (0, import_vue.watch)(scheme, (next) => storage.set(STORAGE_KEY, next)) : null;
+  const stopPersisting = persist && !appOwnsIt ? (0, import_vue2.watch)(scheme, (next) => storage.set(key, next)) : null;
   return {
     scheme,
-    resolved: (0, import_vue.computed)(() => scheme.value === "system" ? system.value : scheme.value),
+    resolved: (0, import_vue2.computed)(() => scheme.value === "system" ? system.value : scheme.value),
+    // A readonly ref (typically a `computed` derived from a profile
+    // setting) silently swallows writes, so the switcher would be a dead
+    // control. TypeScript ignores `readonly` when checking assignability,
+    // so the guard has to be a runtime one — same as the locale next door.
+    switcherEnabled: (options.switcher ?? true) && !(0, import_vue2.isReadonly)(scheme),
     dispose: () => {
       unsubscribe();
       stopPersisting?.();
@@ -190,7 +607,7 @@ function createSaTheme(options = {}) {
 var SA_THEME_KEY = /* @__PURE__ */ Symbol.for("@saasicat/ui-vue/SA_THEME");
 
 // src/vue/use-super-admin-i18n.ts
-var import_vue2 = require("vue");
+var import_vue3 = require("vue");
 
 // src/client/i18n/locale.ts
 var SA_LOCALES = ["de", "en"];
@@ -228,9 +645,6 @@ function mergeMessages(base, overrides) {
   return result;
 }
 
-// src/client/i18n/format.ts
-var import_types2 = require("@saasicat/types");
-
 // src/client/i18n/messages/audit.ts
 var auditMessages = defineMessages(
   {
@@ -905,9 +1319,6 @@ var discoveryMessages = defineMessages(
     replacedBy: "ersetzt durch {key}",
     replaces: "ersetzt: {keys}",
     reapproveEmphasis: "erneut freigeben",
-    errorDiscoveryHttp: "Discovery-Endpoint antwortete mit HTTP {status}",
-    errorRescanHttp: "Discovery-Rescan antwortete mit HTTP {status}",
-    errorCatalogHttp: "Catalog-Entries-API antwortete mit HTTP {status}",
     capList: {
       orphanFeature: "Feature im Katalog ohne implementierende Capability \u2014 blockiert im blocking-Strict-Mode das Plan-Publish.",
       removedFromCode: "aus Code entfernt"
@@ -1009,9 +1420,6 @@ var discoveryMessages = defineMessages(
     replacedBy: "replaced by {key}",
     replaces: "replaces: {keys}",
     reapproveEmphasis: "approve again",
-    errorDiscoveryHttp: "Discovery endpoint responded with HTTP {status}",
-    errorRescanHttp: "Discovery rescan responded with HTTP {status}",
-    errorCatalogHttp: "Catalog entries API responded with HTTP {status}",
     capList: {
       orphanFeature: "Feature in the catalog without an implementing capability \u2014 blocks plan publishing in blocking strict mode.",
       removedFromCode: "removed from code"
@@ -1216,6 +1624,36 @@ var emailMessages = defineMessages(
   }
 );
 
+// src/client/i18n/messages/errors.ts
+var errorsMessages = defineMessages(
+  {
+    network: "Die Anfrage konnte nicht abgeschlossen werden. Bitte Verbindung pr\xFCfen.",
+    emptyResponse: "Der Server hat nichts zur\xFCckgegeben. Bitte pr\xFCfen, ob die \xC4nderung angekommen ist.",
+    unauthorized: "Die Sitzung ist abgelaufen. Bitte erneut anmelden.",
+    forbidden: "F\xFCr diese Aktion fehlt die Berechtigung.",
+    notFound: "Der angeforderte Eintrag existiert nicht mehr.",
+    conflict: "Der Eintrag wurde zwischenzeitlich ge\xE4ndert. Bitte neu laden.",
+    validation: "Die Eingaben wurden nicht akzeptiert.",
+    rateLimited: "Zu viele Anfragen. Bitte kurz warten und erneut versuchen.",
+    server: "Der Server konnte die Anfrage nicht verarbeiten.",
+    httpStatus: "Die Anfrage ist fehlgeschlagen (HTTP {status}).",
+    unexpected: "Es ist ein unerwarteter Fehler aufgetreten. Bitte erneut versuchen."
+  },
+  {
+    network: "The request could not be completed. Please check your connection.",
+    emptyResponse: "The server returned nothing. Please check whether the change was applied.",
+    unauthorized: "Your session has expired. Please sign in again.",
+    forbidden: "You do not have permission for this action.",
+    notFound: "The requested entry no longer exists.",
+    conflict: "The entry changed in the meantime. Please reload.",
+    validation: "The input was not accepted.",
+    rateLimited: "Too many requests. Please wait a moment and try again.",
+    server: "The server could not process the request.",
+    httpStatus: "The request failed (HTTP {status}).",
+    unexpected: "Something went wrong. Please try again."
+  }
+);
+
 // src/client/i18n/messages/marketing.ts
 var marketingMessages = defineMessages(
   {
@@ -1340,9 +1778,6 @@ var marketingMessages = defineMessages(
       colorLabel: "Farbe",
       delete: "Aktion l\xF6schen",
       deleteConfirm: "Aktion \u201E{label}\u201C wirklich l\xF6schen?"
-    },
-    errors: {
-      projectionsApi: "MarketingProjections-API antwortete mit HTTP {status}"
     }
   },
   {
@@ -1467,9 +1902,6 @@ var marketingMessages = defineMessages(
       colorLabel: "Color",
       delete: "Delete promotion",
       deleteConfirm: 'Really delete promotion "{label}"?'
-    },
-    errors: {
-      projectionsApi: "MarketingProjections API responded with HTTP {status}"
     }
   }
 );
@@ -2713,7 +3145,6 @@ var promosMessages = defineMessages(
   {
     title: "Promo-Codes",
     createAction: "Promo-Code anlegen",
-    apiErrorHttpStatus: "Promotions-API antwortete mit HTTP {status}",
     list: {
       searchLabel: "Suche (Code)",
       tileScheduled: "Geplant",
@@ -2811,7 +3242,6 @@ var promosMessages = defineMessages(
   {
     title: "Promo codes",
     createAction: "Create promo code",
-    apiErrorHttpStatus: "Promotions API responded with HTTP {status}",
     list: {
       searchLabel: "Search (code)",
       tileScheduled: "Scheduled",
@@ -2919,7 +3349,13 @@ var shellMessages = defineMessages(
       subtitle: "SuperAdmin \xB7 Plattform-Verwaltung",
       roleBadge: "SUPER ADMIN",
       logout: "Abmelden",
-      language: "Sprache"
+      language: "Sprache",
+      theme: {
+        label: "Darstellung",
+        light: "Hell",
+        dark: "Dunkel",
+        system: "System"
+      }
     },
     drawer: {
       docs: "Doku \xF6ffnen"
@@ -2988,7 +3424,13 @@ var shellMessages = defineMessages(
       subtitle: "SuperAdmin \xB7 Platform administration",
       roleBadge: "SUPER ADMIN",
       logout: "Sign out",
-      language: "Language"
+      language: "Language",
+      theme: {
+        label: "Appearance",
+        light: "Light",
+        dark: "Dark",
+        system: "System"
+      }
     },
     drawer: {
       docs: "Open documentation"
@@ -3232,6 +3674,7 @@ var usersMessages = defineMessages(
 function catalogFor(locale) {
   return {
     common: commonMessages[locale],
+    errors: errorsMessages[locale],
     nav: navMessages[locale],
     shell: shellMessages[locale],
     dashboard: dashboardMessages[locale],
@@ -3293,13 +3736,13 @@ var SUPER_ADMIN_I18N_KEY = /* @__PURE__ */ Symbol.for(
 );
 function createSuperAdminI18n(options = {}) {
   const catalog = createSaCatalog(options);
-  const locale = (0, import_vue2.isRef)(options.locale) ? options.locale : createOwnedLocale(options, catalog);
-  const active = (0, import_vue2.computed)(
+  const locale = (0, import_vue3.isRef)(options.locale) ? options.locale : createOwnedLocale(options, catalog);
+  const active = (0, import_vue3.computed)(
     () => catalog.has(locale.value) ? locale.value : catalog.defaultLocale
   );
-  const messages = (0, import_vue2.computed)(() => catalog.messagesFor(active.value));
-  const intlLocale = (0, import_vue2.computed)(() => catalog.intlLocaleFor(active.value));
-  const writable = !(0, import_vue2.isReadonly)(locale);
+  const messages = (0, import_vue3.computed)(() => catalog.messagesFor(active.value));
+  const intlLocale = (0, import_vue3.computed)(() => catalog.intlLocaleFor(active.value));
+  const writable = !(0, import_vue3.isReadonly)(locale);
   return {
     locale,
     messages,
@@ -3310,35 +3753,43 @@ function createSuperAdminI18n(options = {}) {
 }
 function createOwnedLocale(options, catalog) {
   const initial = options.locale ?? catalog.defaultLocale;
-  if (options.persist === false) return (0, import_vue2.ref)(initial);
+  if (options.persist === false) return (0, import_vue3.ref)(initial);
   const storage = options.storage ?? defaultKvStore();
   const key = `${options.storageKeyPrefix ?? ""}${SA_LOCALE_STORAGE_KEY}`;
   const stored = storage.get(key);
-  const locale = (0, import_vue2.ref)(stored && catalog.has(stored) ? stored : initial);
-  (0, import_vue2.watch)(locale, (next) => storage.set(key, next));
+  const locale = (0, import_vue3.ref)(stored && catalog.has(stored) ? stored : initial);
+  (0, import_vue3.watch)(locale, (next) => storage.set(key, next));
   return locale;
 }
 
 // src/quasar/dark-bridge.ts
 var import_quasar = require("quasar");
-var import_vue3 = require("vue");
+var import_vue4 = require("vue");
 function bindSaThemeToDocument(theme) {
-  const toQuasar = (0, import_vue3.watch)(
+  let mirroring = false;
+  const toQuasar = (0, import_vue4.watch)(
     theme.resolved,
     (resolved) => {
       if (typeof document !== "undefined") {
         document.documentElement.setAttribute("data-sa-theme", resolved);
       }
-      import_quasar.Dark.set(resolved === "dark");
+      mirroring = true;
+      try {
+        import_quasar.Dark.set(resolved === "dark");
+      } finally {
+        mirroring = false;
+      }
     },
     { immediate: true }
   );
-  const fromQuasar = (0, import_vue3.watch)(
-    () => import_quasar.Dark.isActive,
-    (isDark) => {
-      const asScheme = isDark ? "dark" : "light";
-      if (theme.resolved.value !== asScheme) theme.scheme.value = asScheme;
-    }
+  const fromQuasar = (0, import_vue4.watch)(
+    () => import_quasar.Dark.mode,
+    (mode) => {
+      if (mirroring) return;
+      const picked = mode === "auto" ? "system" : mode === true ? "dark" : "light";
+      if (theme.scheme.value !== picked) theme.scheme.value = picked;
+    },
+    { flush: "sync" }
   );
   return () => {
     toQuasar();
@@ -3346,8 +3797,18 @@ function bindSaThemeToDocument(theme) {
   };
 }
 
+// src/vue/platform-loaders.ts
+function resolveSuperAdminEndpoints(endpoints) {
+  return {
+    apiBase: endpoints.apiBase,
+    publicBootEndpoint: endpoints.publicBootEndpoint ?? `${endpoints.apiBase}/boot`,
+    manifestEndpoint: endpoints.manifestEndpoint ?? `${endpoints.apiBase}/manifest`,
+    projectKey: endpoints.projectKey ?? ""
+  };
+}
+
 // src/quasar/notify.ts
-var import_vue4 = require("vue");
+var import_vue5 = require("vue");
 var import_quasar2 = require("quasar");
 var quasarNotify = (kind, message, options) => {
   import_quasar2.Notify.create({
@@ -3359,21 +3820,54 @@ var quasarNotify = (kind, message, options) => {
   });
 };
 function useSuperAdminNotify() {
-  return (0, import_vue4.inject)(SUPER_ADMIN_NOTIFY_KEY, quasarNotify);
+  return (0, import_vue5.inject)(SUPER_ADMIN_NOTIFY_KEY, quasarNotify);
+}
+
+// src/quasar/confirm.ts
+var import_vue6 = require("vue");
+var import_quasar3 = require("quasar");
+function quasarConfirmOptions(request) {
+  return {
+    title: request.title,
+    message: request.message,
+    cancel: request.cancelLabel,
+    ok: { label: request.confirmLabel, color: request.tone ?? "primary" },
+    ...request.prompt ? {
+      prompt: {
+        model: request.prompt.initial ?? "",
+        type: request.prompt.type ?? "text"
+      }
+    } : {}
+  };
+}
+var quasarConfirm = (request) => new Promise((resolve) => {
+  import_quasar3.Dialog.create(quasarConfirmOptions(request)).onOk((value) => {
+    resolve({ ok: true, value: typeof value === "string" ? value : void 0 });
+  }).onCancel(() => resolve({ ok: false }));
+});
+function useSuperAdminConfirm() {
+  return (0, import_vue6.inject)(SUPER_ADMIN_CONFIRM_KEY, quasarConfirm);
 }
 
 // src/quasar/create-super-admin-app.ts
 var SA_PORTAL_CLASS = "sa-portal";
 var DEFAULT_QUASAR_OPTIONS = {
-  plugins: { Notify: import_quasar3.Notify, Dialog: import_quasar3.Dialog, Loading: import_quasar3.Loading },
+  plugins: { Notify: import_quasar4.Notify, Dialog: import_quasar4.Dialog, Loading: import_quasar4.Loading },
   config: { notify: { position: "top-right", timeout: 3e3 } }
 };
+function resolveQuasarOptions(own) {
+  if (!own) return DEFAULT_QUASAR_OPTIONS;
+  return {
+    ...own,
+    plugins: { ...DEFAULT_QUASAR_OPTIONS.plugins, ...own.plugins }
+  };
+}
 function createSuperAdminApp(options) {
-  const app = (0, import_vue5.createApp)(options.rootComponent);
-  const quasarOptions = options.quasarOptions ?? DEFAULT_QUASAR_OPTIONS;
+  const app = (0, import_vue7.createApp)(options.rootComponent);
+  const quasarOptions = resolveQuasarOptions(options.quasarOptions);
   const config = quasarOptions.config;
   const existingPortalClass = config?.globalNodes?.class;
-  app.use(import_quasar3.Quasar, {
+  app.use(import_quasar4.Quasar, {
     ...quasarOptions,
     config: {
       ...quasarOptions.config,
@@ -3393,11 +3887,8 @@ function createSuperAdminApp(options) {
     router.beforeEach(navGuard);
   }
   app.use(router);
-  const endpoints = {
-    apiBase: options.endpoints.apiBase,
-    publicBootEndpoint: options.endpoints.publicBootEndpoint ?? `${options.endpoints.apiBase}/boot`,
-    manifestEndpoint: options.endpoints.manifestEndpoint ?? `${options.endpoints.apiBase}/manifest`
-  };
+  const endpoints = resolveSuperAdminEndpoints(options.endpoints);
+  const http = options.http ?? defaultHttpClient();
   const i18n = createSuperAdminI18n(options.i18n);
   const configuredDark = options.quasarOptions?.config?.dark;
   const theme = createSaTheme({
@@ -3412,6 +3903,23 @@ function createSuperAdminApp(options) {
   app.provide(SUPER_ADMIN_EXTENSIONS_KEY, options.extensions ?? {});
   app.provide(SUPER_ADMIN_ACTIONS_KEY, options.actions ?? {});
   app.provide(SUPER_ADMIN_NOTIFY_KEY, options.notify ?? quasarNotify);
+  app.provide(SUPER_ADMIN_CONFIRM_KEY, options.confirm ?? quasarConfirm);
+  if (options.http) {
+    app.provide(
+      SUPER_ADMIN_RESOURCES_KEY,
+      createResourceRegistry({
+        http: options.http,
+        // Read per call: the locale changes while the app runs.
+        context: () => ({
+          apiBase: endpoints.apiBase,
+          projectKey: endpoints.projectKey,
+          locale: i18n.locale.value
+        }),
+        resources: platformResources,
+        overrides: options.resourceOverrides
+      })
+    );
+  }
   if (options.manifestGuard?.getManifest) {
     app.provide(SUPER_ADMIN_MANIFEST_KEY, options.manifestGuard.getManifest);
   }
@@ -3421,7 +3929,7 @@ function createSuperAdminApp(options) {
   if (options.loginAdapter) {
     app.provide(SUPER_ADMIN_LOGIN_ADAPTER_KEY, options.loginAdapter);
   }
-  app.provide(SUPER_ADMIN_HTTP_KEY, options.http ?? defaultHttpClient());
+  app.provide(SUPER_ADMIN_HTTP_KEY, http);
   for (const plugin of options.installPlugins ?? []) {
     plugin(app);
   }
@@ -3443,6 +3951,10 @@ function createSuperAdminApp(options) {
   SA_PORTAL_CLASS,
   bindSaThemeToDocument,
   createSuperAdminApp,
+  quasarConfirm,
+  quasarConfirmOptions,
   quasarNotify,
+  resolveQuasarOptions,
+  useSuperAdminConfirm,
   useSuperAdminNotify
 });