@saasicat/ui-vue 0.24.2 → 0.26.0

package/dist/{chunk-D74FFCCP.js → chunk-NEXTZZRQ.js}

@@ -1,169 +1,103 @@
 import {
   DEFAULT_SA_LOCALE,
   defaultHttpClient,
-  defaultKvStore,
+  filterQueryString,
+  isAxiosNoResponseError,
   isSaBuiltinLocale,
-  navMessages
-} from "./chunk-F7NRM6KI.js";
+  markTransportFailure,
+  navMessages,
+  trimTrailingSlashes
+} from "./chunk-BPF2BMCQ.js";
 
 // src/client/version.ts
 var ADMIN_UI_VERSION = "1.2.0";
 
-// src/client/http-json.ts
-var HttpJsonError = class extends Error {
-  constructor(status, code) {
-    super(code ?? `HTTP ${status}`);
-    this.status = status;
-    this.code = code;
-    this.name = "HttpJsonError";
-  }
-  status;
-  code;
-};
-async function extractCode(res) {
-  try {
-    const body = await res.json();
-    return typeof body?.code === "string" ? body.code : void 0;
-  } catch {
-    return void 0;
-  }
+// src/client/http/axios-http-client.ts
+function stripped(url, prefixes) {
+  for (const prefix of prefixes) {
+    const trimmed = trimTrailingSlashes(prefix);
+    if (!trimmed || !url.startsWith(trimmed)) continue;
+    const rest = url.slice(trimmed.length);
+    if (rest === "") return "/";
+    if (rest.startsWith("/")) return rest;
+    if (rest.startsWith("?") || rest.startsWith("#")) return `/${rest}`;
+  }
+  return url;
 }
-function trimTrailingSlashes(url) {
-  let end = url.length;
-  while (end > 0 && url[end - 1] === "/") end--;
-  return url.slice(0, end);
+function headerReader(headers) {
+  const record = typeof headers === "object" && headers !== null ? headers : {};
+  const lowered = /* @__PURE__ */ new Map();
+  for (const [key, value] of Object.entries(record)) lowered.set(key.toLowerCase(), value);
+  return (name) => {
+    const value = lowered.get(name.toLowerCase());
+    return value == null ? null : String(value);
+  };
 }
-async function getJson(http, url) {
-  const res = await http(url);
-  if (res.status < 200 || res.status >= 300) {
-    throw new HttpJsonError(res.status, await extractCode(res));
-  }
-  return await res.json();
+function bodyIsRaw(response, declared) {
+  if (declared !== "auto") return declared === "raw";
+  if (response.data === "") return true;
+  const config = response.config;
+  if (config?.transformResponse === null) return true;
+  if (Array.isArray(config?.transformResponse) && config.transformResponse.length === 0) {
+    return true;
+  }
+  const responseType = config?.responseType;
+  if (responseType === "json") return false;
+  if (typeof responseType === "string" && responseType !== "") return true;
+  const transitional = config?.transitional;
+  return typeof transitional === "object" && transitional !== null && transitional.forcedJSONParsing === false;
 }
-async function postJson(http, url, body) {
-  const res = await http(url, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  });
-  if (res.status < 200 || res.status >= 300) {
-    throw new HttpJsonError(res.status, await extractCode(res));
+async function readBody(data) {
+  if (typeof data === "string" || data === null || data === void 0) return data;
+  if (data instanceof ArrayBuffer) return new TextDecoder().decode(data);
+  if (ArrayBuffer.isView(data)) return new TextDecoder().decode(data);
+  const maybe = data;
+  if (typeof maybe.pipe === "function" || typeof maybe.getReader === "function") {
+    throw new TypeError(
+      "createAxiosHttpClient cannot read a streamed body: responseType 'stream' can be consumed only once, and never synchronously. Use 'arraybuffer' or the default for the instance the platform receives."
+    );
   }
-  return await res.json();
+  if (typeof maybe.text === "function") return maybe.text.call(data);
+  return data;
 }
-
-// src/client/boot-loader.ts
-var BootLoadError = class extends Error {
-  constructor(status, message) {
-    super(message);
-    this.status = status;
-    this.name = "BootLoadError";
-  }
-  status;
-};
-var BootLoader = class {
-  endpoint;
-  http;
-  constructor(options) {
-    if (!options?.endpoint) {
-      throw new Error(
-        'BootLoader: `endpoint` is required (e.g. "/api/admin/boot" or "/api/v1/admin/boot"). The platform has no default because apps use different globalPrefix conventions.'
-      );
-    }
-    this.endpoint = options.endpoint;
-    this.http = options.http ?? defaultHttpClient();
-  }
-  async load() {
-    const res = await this.http(this.endpoint);
-    if (res.status !== 200) {
-      throw new BootLoadError(res.status, `Boot-Endpunkt antwortete HTTP ${res.status}`);
+function adapt(response, declared) {
+  return {
+    status: response.status,
+    headers: { get: headerReader(response.headers) },
+    json: async () => {
+      const data = await readBody(response.data);
+      if (typeof data !== "string") return data;
+      return bodyIsRaw({ ...response, data }, declared) ? JSON.parse(data) : data;
+    },
+    text: async () => {
+      const data = await readBody(response.data);
+      return typeof data === "string" ? data : JSON.stringify(data);
     }
-    return await res.json();
-  }
-};
-
-// src/client/manifest-loader.ts
-var ManifestLoadError = class extends Error {
-  constructor(status, message) {
-    super(message);
-    this.status = status;
-    this.name = "ManifestLoadError";
-  }
-  status;
-};
-var ManifestLoader = class {
-  endpoint;
-  http;
-  storage;
-  bodyKey;
-  etagKey;
-  getAuthToken;
-  constructor(options) {
-    if (!options?.endpoint) {
-      throw new Error(
-        'ManifestLoader: `endpoint` is required (e.g. "/api/admin/manifest" or "/api/v1/admin/manifest"). The platform has no default because apps use different globalPrefix conventions.'
+  };
+}
+function createAxiosHttpClient(instance, options = {}) {
+  const prefixes = typeof options.stripPrefix === "string" ? [options.stripPrefix] : options.stripPrefix ?? [];
+  const responseBody = options.responseBody ?? "auto";
+  return async (url, init) => {
+    try {
+      return adapt(
+        await instance.request({
+          url: stripped(url, prefixes),
+          method: (init?.method ?? "GET").toUpperCase(),
+          headers: init?.headers,
+          data: init?.body
+        }),
+        responseBody
       );
-    }
-    this.endpoint = options.endpoint;
-    this.http = options.http ?? defaultHttpClient();
-    this.storage = options.storage ?? defaultKvStore();
-    const prefix = options.storageKeyPrefix ?? "";
-    this.bodyKey = `${prefix}manifest:body`;
-    this.etagKey = `${prefix}manifest:etag`;
-    this.getAuthToken = options.getAuthToken;
-  }
-  /**
-   * Loads the current manifest. On a cache hit (304) the cached
-   * body is returned — otherwise the fresh server body.
-   */
-  async load() {
-    const cachedEtag = this.storage.get(this.etagKey);
-    const headers = {};
-    const token = this.getAuthToken?.();
-    if (token) headers.Authorization = `Bearer ${token}`;
-    if (cachedEtag) headers["If-None-Match"] = cachedEtag;
-    const res = await this.http(this.endpoint, { method: "GET", headers });
-    if (res.status === 304) {
-      const cachedBody = this.readCachedBody();
-      if (!cachedBody) {
-        throw new ManifestLoadError(
-          304,
-          "Server returned 304 but the cache body is missing \u2014 call clearCache() and reload"
-        );
+    } catch (err) {
+      const response = err?.response;
+      if (response && typeof response.status === "number") {
+        return adapt(response, responseBody);
       }
-      return cachedBody.body;
-    }
-    if (res.status !== 200) {
-      throw new ManifestLoadError(
-        res.status,
-        `Manifest endpoint responded with HTTP ${res.status}`
-      );
-    }
-    const body = await res.json();
-    const etag = res.headers.get("ETag") ?? res.headers.get("etag");
-    if (etag) {
-      this.storage.set(this.etagKey, etag);
-      this.storage.set(this.bodyKey, JSON.stringify(body));
-    }
-    return body;
-  }
-  /** Reads the cached manifest body from storage; null if absent. */
-  readCachedBody() {
-    const etag = this.storage.get(this.etagKey);
-    const bodyStr = this.storage.get(this.bodyKey);
-    if (!etag || !bodyStr) return null;
-    try {
-      return { etag, body: JSON.parse(bodyStr) };
-    } catch {
-      return null;
+      throw isAxiosNoResponseError(err) ? markTransportFailure(err) : err;
     }
-  }
-  /** Clears the cache — e.g. on logout or after `manifest reload`. */
-  clearCache() {
-    this.storage.remove(this.etagKey);
-    this.storage.remove(this.bodyKey);
-  }
-};
+  };
+}
 
 // src/client/nav-builder.ts
 var DEFAULT_STANDARD_PAGE_ROUTES = {
@@ -381,7 +315,7 @@ var ActionRegistry = class {
 // src/client/batch-column-fetcher.ts
 var BatchColumnDriftError = class extends Error {
   constructor(column, reason) {
-    super(`Spalte "${column.key}": ${reason}`);
+    super(`Column "${column.key}": ${reason}`);
     this.column = column;
     this.name = "BatchColumnDriftError";
   }
@@ -424,7 +358,7 @@ var BatchColumnFetcher = class {
     const res = await this.http(url, { method: "GET", headers });
     if (res.status !== 200) {
       throw new Error(
-        `Spalte "${column.key}" \u2014 Endpoint ${column.endpoint} antwortete HTTP ${res.status}`
+        `Column "${column.key}" \u2014 endpoint ${column.endpoint} responded with HTTP ${res.status}`
       );
     }
     const body = await res.json();
@@ -482,7 +416,7 @@ var BatchColumnFetcher = class {
 function createAdminResourceClient(options) {
   const base = options.adminBase ?? "/api/v1/admin";
   const tenantsEndpoint = `${base}/tenants`;
-  const getJson2 = async (url) => {
+  const getJson = async (url) => {
     const response = await options.http(url, { method: "GET" });
     assertSuccess(response.status, "GET", url);
     return await response.json();
@@ -498,12 +432,12 @@ function createAdminResourceClient(options) {
   };
   return {
     tenantsEndpoint,
-    loadTenantDetail: (slug) => getJson2(`${tenantsEndpoint}/${encodeURIComponent(slug)}`),
-    loadUsers: (filter) => getJson2(
-      `${base}/users${queryString({ q: filter.q, tenant: filter.tenant })}`
+    loadTenantDetail: (slug) => getJson(`${tenantsEndpoint}/${encodeURIComponent(slug)}`),
+    loadUsers: (filter) => getJson(
+      `${base}/users${filterQueryString({ q: filter.q, tenant: filter.tenant })}`
     ),
-    loadAudit: (filter) => getJson2(
-      `${base}/audit${queryString({
+    loadAudit: (filter) => getJson(
+      `${base}/audit${filterQueryString({
         actor: filter.actor,
         action: filter.action,
         entity: filter.entity,
@@ -511,9 +445,9 @@ function createAdminResourceClient(options) {
         limit: filter.limit
       })}`
     ),
-    loadSubscriptions: () => getJson2(`${base}/subscriptions`),
-    loadPromos: (filter) => getJson2(
-      `${base}/promo-codes${queryString({
+    loadSubscriptions: () => getJson(`${base}/subscriptions`),
+    loadPromos: (filter) => getJson(
+      `${base}/promo-codes${filterQueryString({
         search: filter.search,
         status: filter.status
       })}`
@@ -538,15 +472,6 @@ function assertSuccess(status, method, url) {
     throw new Error(`${method} ${url} \u2192 HTTP ${status}`);
   }
 }
-function queryString(params) {
-  const search = new URLSearchParams();
-  for (const [key, value2] of Object.entries(params)) {
-    if (value2 === void 0 || value2 === null || value2 === "") continue;
-    search.set(key, String(value2));
-  }
-  const value = search.toString();
-  return value ? `?${value}` : "";
-}
 
 // src/client/login-branding.ts
 var DEFAULT_TAG = "SuperAdmin";
@@ -676,14 +601,7 @@ function identityChipStyle(accent) {
 
 export {
   ADMIN_UI_VERSION,
-  HttpJsonError,
-  trimTrailingSlashes,
-  getJson,
-  postJson,
-  BootLoadError,
-  BootLoader,
-  ManifestLoadError,
-  ManifestLoader,
+  createAxiosHttpClient,
   DEFAULT_STANDARD_PAGE_ROUTES,
   defaultSectionOrder,
   buildRoutes,

package/dist/{chunk-TQQMKWN6.js → chunk-O3J3ITF2.js}

@@ -1,7 +1,10 @@
 import {
+  BootLoader,
+  ManifestLoader,
+  bindResource,
   createSaCatalog,
   defaultKvStore
-} from "./chunk-F7NRM6KI.js";
+} from "./chunk-BPF2BMCQ.js";
 
 // src/vue/super-admin-context.ts
 var SUPER_ADMIN_BRAND_KEY = /* @__PURE__ */ Symbol.for(
@@ -73,6 +76,11 @@ var SUPER_ADMIN_NOTIFY_KEY = /* @__PURE__ */ Symbol.for(
   "@saasicat/ui-vue/SUPER_ADMIN_NOTIFY"
 );
 
+// src/vue/ui-confirm.ts
+var SUPER_ADMIN_CONFIRM_KEY = /* @__PURE__ */ Symbol.for(
+  "@saasicat/ui-vue/SUPER_ADMIN_CONFIRM"
+);
+
 // src/vue/use-super-admin-i18n.ts
 import {
   computed,
@@ -129,14 +137,15 @@ function useSaMessages(namespace) {
 import {
   computed as computed2,
   inject as inject2,
+  isReadonly as isReadonly2,
   isRef as isRef2,
   ref as ref2,
   watch as watch2
 } from "vue";
-var SCHEMES = ["light", "dark", "system"];
-var STORAGE_KEY = "saasicat.theme.scheme";
+var SA_COLOR_SCHEMES = ["light", "dark", "system"];
+var SA_THEME_STORAGE_KEY = "saasicat.theme.scheme";
 function isScheme(value) {
-  return typeof value === "string" && SCHEMES.includes(value);
+  return typeof value === "string" && SA_COLOR_SCHEMES.includes(value);
 }
 function systemScheme() {
   const value = ref2("light");
@@ -157,13 +166,19 @@ function createSaTheme(options = {}) {
   const persist = options.persist !== false;
   const provided = options.scheme;
   const appOwnsIt = isRef2(provided);
-  const stored = persist && !appOwnsIt ? storage.get(STORAGE_KEY) : null;
+  const key = `${options.storageKeyPrefix ?? ""}${SA_THEME_STORAGE_KEY}`;
+  const stored = persist && !appOwnsIt ? storage.get(key) : null;
   const scheme = isRef2(provided) ? provided : ref2(isScheme(stored) ? stored : provided ?? "system");
   const { value: system, unsubscribe } = systemScheme();
-  const stopPersisting = persist && !appOwnsIt ? watch2(scheme, (next) => storage.set(STORAGE_KEY, next)) : null;
+  const stopPersisting = persist && !appOwnsIt ? watch2(scheme, (next) => storage.set(key, next)) : null;
   return {
     scheme,
     resolved: computed2(() => scheme.value === "system" ? system.value : scheme.value),
+    // A readonly ref (typically a `computed` derived from a profile
+    // setting) silently swallows writes, so the switcher would be a dead
+    // control. TypeScript ignores `readonly` when checking assignability,
+    // so the guard has to be a runtime one — same as the locale next door.
+    switcherEnabled: (options.switcher ?? true) && !isReadonly2(scheme),
     dispose: () => {
       unsubscribe();
       stopPersisting?.();
@@ -179,6 +194,95 @@ function useSaTheme() {
   return fallbackTheme;
 }
 
+// src/vue/resource-registry.ts
+import { inject as inject3 } from "vue";
+function boundWithOverride(def, http, readContext, override) {
+  const context = override?.context ? () => ({ ...readContext(), ...override.context }) : readContext;
+  const platform = bindResource(def, override?.http ?? http, context);
+  if (!override?.ops) return platform;
+  const result = { ...platform };
+  for (const [name, wrap] of Object.entries(override.ops)) {
+    if (typeof wrap !== "function") continue;
+    if (!Object.hasOwn(platform, name)) {
+      throw new Error(
+        `createResourceRegistry: resource "${def.key}" has no operation "${name}" to override. It offers: ${Object.keys(platform).join(", ")}.`
+      );
+    }
+    const next = platform[name];
+    result[name] = (...args) => wrap(next, ...args);
+  }
+  return result;
+}
+function createResourceRegistry(options) {
+  if (!options?.http) {
+    throw new Error(
+      "createResourceRegistry: `http` is required. Pass the HttpClient your app already uses \u2014 createAxiosHttpClient(instance) or createFetchHttpClient({ headers }) \u2014 so every platform request carries its auth."
+    );
+  }
+  const readContext = typeof options.context === "function" ? options.context : () => options.context;
+  const unknown = Object.keys(options.overrides ?? {}).filter(
+    (key) => !Object.hasOwn(options.resources, key)
+  );
+  if (unknown.length > 0) {
+    throw new Error(
+      `createResourceRegistry: no resource named ${unknown.map((k) => `"${k}"`).join(", ")} to override. The registry holds: ${Object.keys(options.resources).join(", ")}.`
+    );
+  }
+  const bound = /* @__PURE__ */ new Map();
+  for (const [key, def] of Object.entries(options.resources)) {
+    bound.set(key, boundWithOverride(def, options.http, readContext, options.overrides?.[key]));
+  }
+  return {
+    get(key) {
+      const ops = bound.get(key);
+      if (!ops) {
+        throw new Error(
+          `useResource("${String(key)}"): no such resource. The registry offers: ${[...bound.keys()].join(", ")}.`
+        );
+      }
+      return ops;
+    },
+    keys: () => [...bound.keys()]
+  };
+}
+var SUPER_ADMIN_RESOURCES_KEY = /* @__PURE__ */ Symbol.for(
+  "@saasicat/ui-vue/SUPER_ADMIN_RESOURCES"
+);
+function useResource(key) {
+  const registry = inject3(SUPER_ADMIN_RESOURCES_KEY, null);
+  if (!registry) {
+    throw new Error(
+      `useResource("${key}"): no resource registry in scope. Either the component was not mounted inside createSuperAdminApp(), or the app did not pass an \`http\` client \u2014 the registry is not installed without one, because a bare fetch would send every request without your Authorization header and fail silently.`
+    );
+  }
+  return registry.get(key);
+}
+
+// src/vue/platform-loaders.ts
+function resolveSuperAdminEndpoints(endpoints) {
+  return {
+    apiBase: endpoints.apiBase,
+    publicBootEndpoint: endpoints.publicBootEndpoint ?? `${endpoints.apiBase}/boot`,
+    manifestEndpoint: endpoints.manifestEndpoint ?? `${endpoints.apiBase}/manifest`,
+    projectKey: endpoints.projectKey ?? ""
+  };
+}
+function createPlatformLoaders(options) {
+  const resolved = resolveSuperAdminEndpoints(options.endpoints);
+  const bootLoader = new BootLoader({
+    endpoint: resolved.publicBootEndpoint,
+    http: options.http
+  });
+  const manifestLoader = new ManifestLoader({
+    endpoint: resolved.manifestEndpoint,
+    http: options.http,
+    storage: options.storage,
+    storageKeyPrefix: options.storageKeyPrefix,
+    getAuthToken: options.getAuthToken
+  });
+  return { bootLoader, manifestLoader };
+}
+
 export {
   SUPER_ADMIN_BRAND_KEY,
   SUPER_ADMIN_ENDPOINTS_KEY,
@@ -190,12 +294,20 @@ export {
   SUPER_ADMIN_HTTP_KEY,
   buildNavigationGuard,
   SUPER_ADMIN_NOTIFY_KEY,
+  SUPER_ADMIN_CONFIRM_KEY,
   SA_LOCALE_STORAGE_KEY,
   SUPER_ADMIN_I18N_KEY,
   createSuperAdminI18n,
   useSuperAdminI18n,
   useSaMessages,
+  SA_COLOR_SCHEMES,
+  SA_THEME_STORAGE_KEY,
   createSaTheme,
   SA_THEME_KEY,
-  useSaTheme
+  useSaTheme,
+  createResourceRegistry,
+  SUPER_ADMIN_RESOURCES_KEY,
+  useResource,
+  resolveSuperAdminEndpoints,
+  createPlatformLoaders
 };