@saasicat/ui-vue 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/{chunk-P4EJF43F.js → chunk-CZIVA536.js}

@@ -1,9 +1,3 @@
-// src/client/i18n/format.ts
-import { formatErrorMessage } from "@saasicat/core";
-function formatMessage(template, params) {
-  return formatErrorMessage(template, params);
-}
-
 // src/client/attach-cause.ts
 function attachCause(error, cause) {
   Object.defineProperty(error, "cause", {
@@ -14,6 +8,12 @@ function attachCause(error, cause) {
   return error;
 }
 
+// src/client/i18n/format.ts
+import { formatErrorMessage } from "@saasicat/core";
+function formatMessage(template, params) {
+  return formatErrorMessage(template, params);
+}
+
 // src/client/admin-error.ts
 var ADMIN_ERROR = /* @__PURE__ */ Symbol.for("saasicat/ui-vue/AdminError");
 var PLATFORM_ERROR = /* @__PURE__ */ Symbol.for("saasicat/ui-vue/PlatformError");
@@ -253,14 +253,20 @@ async function getJson(http, url) {
   }
   return await res.json();
 }
-async function postJson(http, url, body) {
+function postJson(http, url, body) {
+  return sendJson(http, "POST", url, body);
+}
+function patchJson(http, url, body) {
+  return sendJson(http, "PATCH", url, body);
+}
+async function sendJson(http, method, url, body) {
   const res = await http(url, {
-    method: "POST",
+    method,
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body)
   });
   if (res.status < 200 || res.status >= 300) {
-    throw await failed(res, "POST", url);
+    throw await failed(res, method, url);
   }
   return await res.json();
 }
@@ -340,26 +346,14 @@ function defaultHttpClient() {
 }
 
 // src/client/resources/define-resource.ts
-function defineResource(key, ops, options = {}) {
-  return { key, ops, projectScoped: options.projectScoped ?? false };
-}
-function requireProjectKey(def, ctx) {
-  if (!def.projectScoped) return;
-  if (typeof ctx.projectKey === "string" && ctx.projectKey.trim() !== "") return;
-  throw new Error(
-    `Resource "${def.key}" is project-scoped, but the context it is bound to names no project. Its requests would go out as \`?projectKey=\`, which the admin API answers for no project at all: the catalogue reads as empty and the first create fails validation instead. Name the project this admin administers \u2014 \`endpoints.projectKey\` for createSuperAdminApp(), \`context.projectKey\` for createResourceRegistry().`
-  );
+function defineResource(key, ops) {
+  return { key, ops };
 }
 function bindResource(def, http, ctx) {
   const readContext = typeof ctx === "function" ? ctx : () => ctx;
-  if (def.projectScoped) requireProjectKey(def, readContext());
   const bound = {};
   for (const [name, op] of Object.entries(def.ops)) {
-    bound[name] = async (...args) => {
-      const context = readContext();
-      requireProjectKey(def, context);
-      return op(http, context, ...args);
-    };
+    bound[name] = async (...args) => op(http, readContext(), ...args);
   }
   return bound;
 }
@@ -463,6 +457,12 @@ function defineListOp(endpoint) {
   return async (http, ctx, query) => readListPage(await requestJson(http, listUrl(endpoint(ctx), query)));
 }
 
+// src/client/mfa-header.ts
+var MFA_CODE_HEADER = "X-Mfa-Code";
+function mfaHeader(mfaCode) {
+  return mfaCode ? { [MFA_CODE_HEADER]: mfaCode } : void 0;
+}
+
 // src/client/resources/plans.resource.ts
 function plansUrl(ctx) {
   return `${ctx.apiBase}/catalog/plans`;
@@ -470,50 +470,32 @@ function plansUrl(ctx) {
 function versionsUrl(ctx) {
   return `${ctx.apiBase}/catalog/plan-versions`;
 }
-function scoped(url, ctx) {
-  return `${url}?projectKey=${encodeURIComponent(ctx.projectKey)}`;
-}
-var plansResource = defineResource(
-  "plans",
-  {
-    list: async (http, ctx) => await requestJson(http, scoped(plansUrl(ctx), ctx)) ?? [],
-    tenantCounts: async (http, ctx) => await requestJson(
-      http,
-      scoped(`${plansUrl(ctx)}/tenant-counts`, ctx)
-    ) ?? {},
-    /**
-     * The project comes from the context, not from the caller.
-     *
-     * The endpoint takes it in the body, and the composable this replaces
-     * made that the caller's job — so a page had to keep hold of the
-     * project it was administering just to create in it, and `list()` and
-     * `create()` read two different sources for one value. A stale one
-     * creates a plan outside the project the list is showing.
-     */
-    create: (http, ctx, data) => requestJsonBody(http, plansUrl(ctx), "Create returned no body", {
-      method: "POST",
-      body: { ...data, projectKey: ctx.projectKey }
-    }),
-    update: (http, ctx, planId, data) => requestJsonBody(
-      http,
-      `${plansUrl(ctx)}/${planId}`,
-      "Update returned no body",
-      {
-        method: "PATCH",
-        body: data
-      }
-    ),
-    /** Marks the plan deleted. Fails while it still has versions. */
-    softDelete: async (http, ctx, planId) => {
-      await requestJson(http, `${plansUrl(ctx)}/${planId}`, { method: "DELETE" });
-    },
-    /** Removes the plan for good. 422 `PLAN_HAS_VERSIONS` when it cannot. */
-    hardDelete: async (http, ctx, planId) => {
-      await requestJson(http, `${plansUrl(ctx)}/${planId}/purge`, { method: "DELETE" });
-    }
+var plansResource = defineResource("plans", {
+  list: async (http, ctx) => await requestJson(http, plansUrl(ctx)) ?? [],
+  tenantCounts: async (http, ctx) => await requestJson(http, `${plansUrl(ctx)}/tenant-counts`) ?? {},
+  create: (http, ctx, data) => requestJsonBody(http, plansUrl(ctx), "Create returned no body", {
+    method: "POST",
+    body: data
+  }),
+  update: (http, ctx, planId, data) => requestJsonBody(http, `${plansUrl(ctx)}/${planId}`, "Update returned no body", {
+    method: "PATCH",
+    body: data
+  }),
+  /** Marks the plan deleted. Fails while it still has versions. */
+  softDelete: async (http, ctx, planId) => {
+    await requestJson(http, `${plansUrl(ctx)}/${planId}`, { method: "DELETE" });
   },
-  { projectScoped: true }
-);
+  /**
+   * Removes the plan for good. 422 `PLAN_HAS_VERSIONS` when it cannot. The
+   * route requires the second factor.
+   */
+  hardDelete: async (http, ctx, planId, mfaCode) => {
+    await requestJson(http, `${plansUrl(ctx)}/${planId}/purge`, {
+      method: "DELETE",
+      headers: mfaHeader(mfaCode)
+    });
+  }
+});
 var planVersionsResource = defineResource("planVersions", {
   listForPlan: async (http, ctx, planId) => await requestJson(http, `${plansUrl(ctx)}/${planId}/versions`) ?? [],
   createDraft: (http, ctx, planId, data) => requestJsonBody(
@@ -528,11 +510,12 @@ var planVersionsResource = defineResource("planVersions", {
     "UpdateDraft returned no body",
     { method: "PATCH", body: data }
   ),
-  publish: (http, ctx, versionId, options = {}) => requestJsonBody(
+  /** Puts a draft live. The route requires the second factor. */
+  publish: (http, ctx, versionId, options = {}, mfaCode) => requestJsonBody(
     http,
     `${versionsUrl(ctx)}/${versionId}/publish`,
     "Publish returned no body",
-    { method: "POST", body: options }
+    { method: "POST", body: options, headers: mfaHeader(mfaCode) }
   ),
   discardDraft: async (http, ctx, versionId) => {
     await requestJson(http, `${versionsUrl(ctx)}/${versionId}`, { method: "DELETE" });
@@ -543,12 +526,13 @@ var planVersionsResource = defineResource("planVersions", {
    *
    * `endsAt` is the date itself, not a payload: the endpoint's body is
    * `{ endsAt }` and wrapping it is this operation's job, not the caller's.
+   * The route requires the second factor.
    */
-  terminate: (http, ctx, versionId, endsAt) => requestJsonBody(
+  terminate: (http, ctx, versionId, endsAt, mfaCode) => requestJsonBody(
     http,
     `${versionsUrl(ctx)}/${versionId}/terminate`,
     "Terminate returned no body",
-    { method: "POST", body: { endsAt } }
+    { method: "POST", body: { endsAt }, headers: mfaHeader(mfaCode) }
   )
 });
 
@@ -559,30 +543,23 @@ function bundlesUrl(ctx) {
 function bundleVersionsUrl(ctx) {
   return `${ctx.apiBase}/catalog/bundle-versions`;
 }
-function scoped2(url, ctx) {
-  return `${url}?projectKey=${encodeURIComponent(ctx.projectKey)}`;
-}
-var bundlesResource = defineResource(
-  "bundles",
-  {
-    list: async (http, ctx) => await requestJson(http, scoped2(bundlesUrl(ctx), ctx)) ?? [],
-    create: (http, ctx, data) => requestJsonBody(http, bundlesUrl(ctx), "Create returned no body", {
-      method: "POST",
-      body: { ...data, projectKey: ctx.projectKey }
-    }),
-    update: (http, ctx, bundleId, data) => requestJsonBody(
-      http,
-      `${bundlesUrl(ctx)}/${bundleId}`,
-      "Update returned no body",
-      { method: "PATCH", body: data }
-    ),
-    /** Marks the bundle deleted. */
-    softDelete: async (http, ctx, bundleId) => {
-      await requestJson(http, `${bundlesUrl(ctx)}/${bundleId}`, { method: "DELETE" });
-    }
-  },
-  { projectScoped: true }
-);
+var bundlesResource = defineResource("bundles", {
+  list: async (http, ctx) => await requestJson(http, bundlesUrl(ctx)) ?? [],
+  create: (http, ctx, data) => requestJsonBody(http, bundlesUrl(ctx), "Create returned no body", {
+    method: "POST",
+    body: data
+  }),
+  update: (http, ctx, bundleId, data) => requestJsonBody(
+    http,
+    `${bundlesUrl(ctx)}/${bundleId}`,
+    "Update returned no body",
+    { method: "PATCH", body: data }
+  ),
+  /** Marks the bundle deleted. */
+  softDelete: async (http, ctx, bundleId) => {
+    await requestJson(http, `${bundlesUrl(ctx)}/${bundleId}`, { method: "DELETE" });
+  }
+});
 var bundleVersionsResource = defineResource("bundleVersions", {
   listForBundle: async (http, ctx, bundleId) => await requestJson(http, `${bundlesUrl(ctx)}/${bundleId}/versions`) ?? [],
   createDraft: (http, ctx, bundleId, data) => requestJsonBody(
@@ -597,11 +574,12 @@ var bundleVersionsResource = defineResource("bundleVersions", {
     "UpdateDraft returned no body",
     { method: "PATCH", body: data }
   ),
-  publish: (http, ctx, versionId, options = {}) => requestJsonBody(
+  /** Puts a draft live. The route requires the second factor. */
+  publish: (http, ctx, versionId, options = {}, mfaCode) => requestJsonBody(
     http,
     `${bundleVersionsUrl(ctx)}/${versionId}/publish`,
     "Publish returned no body",
-    { method: "POST", body: options }
+    { method: "POST", body: options, headers: mfaHeader(mfaCode) }
   ),
   /**
    * Discards a draft. A published version cannot be discarded — the API
@@ -616,78 +594,62 @@ var bundleVersionsResource = defineResource("bundleVersions", {
 function catalogUrl(ctx) {
   return `${ctx.apiBase}/catalog`;
 }
-function scoped3(url, ctx) {
-  return `${url}?projectKey=${encodeURIComponent(ctx.projectKey)}`;
-}
-var catalogResource = defineResource(
-  "catalog",
-  {
-    capabilities: async (http, ctx) => await requestJson(
-      http,
-      scoped3(`${catalogUrl(ctx)}/capabilities`, ctx)
-    ) ?? [],
-    features: async (http, ctx) => await requestJson(
-      http,
-      scoped3(`${catalogUrl(ctx)}/features`, ctx)
-    ) ?? [],
-    quotas: async (http, ctx) => await requestJson(
-      http,
-      scoped3(`${catalogUrl(ctx)}/quotas`, ctx)
-    ) ?? [],
-    reviewFeature: (http, ctx, featureKey, data) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}/review`, ctx),
-      "Review returned no body",
-      { method: "PATCH", body: data }
-    ),
-    reviewQuota: (http, ctx, quotaKey, data) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}/review`, ctx),
-      "Review returned no body",
-      { method: "PATCH", body: data }
-    ),
-    /** The translations are wrapped in `{ i18n }` here, not by the caller. */
-    setFeatureI18n: (http, ctx, featureKey, i18n) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}/i18n`, ctx),
-      "i18n returned no body",
-      { method: "PATCH", body: { i18n } }
-    ),
-    setQuotaI18n: (http, ctx, quotaKey, i18n) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}/i18n`, ctx),
-      "i18n returned no body",
-      { method: "PATCH", body: { i18n } }
-    ),
-    setFeatureBase: (http, ctx, featureKey, data) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}`, ctx),
-      "Base returned no body",
-      { method: "PATCH", body: data }
-    ),
-    setQuotaBase: (http, ctx, quotaKey, data) => requestJsonBody(
-      http,
-      scoped3(`${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}`, ctx),
-      "Base returned no body",
-      { method: "PATCH", body: data }
-    ),
-    /**
-     * Writes a discovery snapshot into the catalogue.
-     *
-     * The request only. `useCatalogEntries.syncDiscovery` reloads the three
-     * lists afterwards, which is that composable keeping its refs true —
-     * not part of the call, and not something an override should inherit
-     * invisibly.
-     */
-    syncDiscovery: (http, ctx, snapshot) => requestJsonBody(
-      http,
-      `${catalogUrl(ctx)}/discovery/sync`,
-      "Sync returned no body",
-      { method: "POST", body: { snapshot } }
-    )
-  },
-  { projectScoped: true }
-);
+var catalogResource = defineResource("catalog", {
+  capabilities: async (http, ctx) => await requestJson(http, `${catalogUrl(ctx)}/capabilities`) ?? [],
+  features: async (http, ctx) => await requestJson(http, `${catalogUrl(ctx)}/features`) ?? [],
+  quotas: async (http, ctx) => await requestJson(http, `${catalogUrl(ctx)}/quotas`) ?? [],
+  reviewFeature: (http, ctx, featureKey, data) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}/review`,
+    "Review returned no body",
+    { method: "PATCH", body: data }
+  ),
+  reviewQuota: (http, ctx, quotaKey, data) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}/review`,
+    "Review returned no body",
+    { method: "PATCH", body: data }
+  ),
+  /** The translations are wrapped in `{ i18n }` here, not by the caller. */
+  setFeatureI18n: (http, ctx, featureKey, i18n) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}/i18n`,
+    "i18n returned no body",
+    { method: "PATCH", body: { i18n } }
+  ),
+  setQuotaI18n: (http, ctx, quotaKey, i18n) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}/i18n`,
+    "i18n returned no body",
+    { method: "PATCH", body: { i18n } }
+  ),
+  setFeatureBase: (http, ctx, featureKey, data) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/features/${encodeURIComponent(featureKey)}`,
+    "Base returned no body",
+    { method: "PATCH", body: data }
+  ),
+  setQuotaBase: (http, ctx, quotaKey, data) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/quotas/${encodeURIComponent(quotaKey)}`,
+    "Base returned no body",
+    { method: "PATCH", body: data }
+  ),
+  /**
+   * Writes a discovery snapshot into the catalogue.
+   *
+   * The request only. `useCatalogEntries.syncDiscovery` reloads the three
+   * lists afterwards, which is that composable keeping its refs true —
+   * not part of the call, and not something an override should inherit
+   * invisibly.
+   */
+  syncDiscovery: (http, ctx, snapshot) => requestJsonBody(
+    http,
+    `${catalogUrl(ctx)}/discovery/sync`,
+    "Sync returned no body",
+    { method: "POST", body: { snapshot } }
+  )
+});
 
 // src/client/resources/dashboard.resource.ts
 function readValue(body) {
@@ -797,61 +759,57 @@ function projectionsUrl(ctx) {
 function settingsUrl(ctx) {
   return `${ctx.apiBase}/catalog/marketing-settings`;
 }
-var marketingResource = defineResource(
-  "marketing",
-  {
-    listProjections: async (http, ctx, filter = {}) => {
-      const params = new URLSearchParams();
-      params.set("projectKey", ctx.projectKey);
-      if (filter.targetType) params.set("targetType", filter.targetType);
-      if (filter.targetVersionId) params.set("targetVersionId", filter.targetVersionId);
-      if (filter.locale) params.set("locale", filter.locale);
-      return await requestJson(
-        http,
-        `${projectionsUrl(ctx)}?${params.toString()}`
-      ) ?? [];
-    },
-    /**
-     * The request only. `useMarketingProjections.create` reloads the list
-     * afterwards because a unique-tuple insert can change what the filter
-     * matches — that is the composable keeping its refs true, not part of
-     * the call.
-     */
-    createProjection: (http, ctx, data) => requestJsonBody(
-      http,
-      projectionsUrl(ctx),
-      "Create returned no body",
-      { method: "POST", body: data }
-    ),
-    updateProjection: (http, ctx, id, data) => requestJsonBody(
-      http,
-      `${projectionsUrl(ctx)}/${id}`,
-      "Update returned no body",
-      { method: "PATCH", body: data }
-    ),
-    deleteProjection: async (http, ctx, id) => {
-      await requestJson(http, `${projectionsUrl(ctx)}/${id}`, { method: "DELETE" });
-    },
-    /**
-     * The activated locale subset, or `null` when none was ever stored.
-     *
-     * `null` means the full pool is active — the server's answer for "no
-     * row", and the state the page falls back to.
-     */
-    settings: (http, ctx) => requestJson(
+function withQuery(url, params) {
+  const query = params.toString();
+  return query ? `${url}?${query}` : url;
+}
+var marketingResource = defineResource("marketing", {
+  listProjections: async (http, ctx, filter = {}) => {
+    const params = new URLSearchParams();
+    if (filter.targetType) params.set("targetType", filter.targetType);
+    if (filter.targetVersionId) params.set("targetVersionId", filter.targetVersionId);
+    if (filter.locale) params.set("locale", filter.locale);
+    return await requestJson(
       http,
-      `${settingsUrl(ctx)}?projectKey=${encodeURIComponent(ctx.projectKey)}`
-    ),
-    /** `PUT`, not `PATCH`: the endpoint replaces the set it is given. */
-    saveSettings: async (http, ctx, activeLocales) => {
-      await requestJson(http, settingsUrl(ctx), {
-        method: "PUT",
-        body: { projectKey: ctx.projectKey, activeLocales }
-      });
-    }
+      withQuery(projectionsUrl(ctx), params)
+    ) ?? [];
   },
-  { projectScoped: true }
-);
+  /**
+   * The request only. `useMarketingProjections.create` reloads the list
+   * afterwards because a unique-tuple insert can change what the filter
+   * matches — that is the composable keeping its refs true, not part of
+   * the call.
+   */
+  createProjection: (http, ctx, data) => requestJsonBody(
+    http,
+    projectionsUrl(ctx),
+    "Create returned no body",
+    { method: "POST", body: data }
+  ),
+  updateProjection: (http, ctx, id, data) => requestJsonBody(
+    http,
+    `${projectionsUrl(ctx)}/${id}`,
+    "Update returned no body",
+    { method: "PATCH", body: data }
+  ),
+  deleteProjection: async (http, ctx, id) => {
+    await requestJson(http, `${projectionsUrl(ctx)}/${id}`, { method: "DELETE" });
+  },
+  /**
+   * The activated locale subset, or `null` when none was ever stored.
+   *
+   * `null` means the full pool is active — the server's answer for "no
+   * row", and the state the page falls back to.
+   */
+  settings: (http, ctx) => requestJson(http, settingsUrl(ctx)),
+  /** `PUT`, not `PATCH`: the endpoint replaces the set it is given. */
+  saveSettings: async (http, ctx, activeLocales) => {
+    await requestJson(http, settingsUrl(ctx), {
+      method: "PUT",
+      body: { activeLocales }
+    });
+  }
+});
 
 // src/client/resources/promo-codes.resource.ts
 function promoCodesUrl(ctx) {
@@ -902,29 +860,22 @@ var promoCodesResource = defineResource("promoCodes", {
 function promotionsUrl(ctx) {
   return `${ctx.apiBase}/catalog/promotions`;
 }
-var promotionsResource = defineResource(
-  "promotions",
-  {
-    list: async (http, ctx) => await requestJson(
-      http,
-      `${promotionsUrl(ctx)}?projectKey=${encodeURIComponent(ctx.projectKey)}`
-    ) ?? [],
-    create: (http, ctx, data) => requestJsonBody(http, promotionsUrl(ctx), "Create returned no body", {
-      method: "POST",
-      body: data
-    }),
-    update: (http, ctx, id, data) => requestJsonBody(
-      http,
-      `${promotionsUrl(ctx)}/${id}`,
-      "Update returned no body",
-      { method: "PATCH", body: data }
-    ),
-    remove: async (http, ctx, id) => {
-      await requestJson(http, `${promotionsUrl(ctx)}/${id}`, { method: "DELETE" });
-    }
-  },
-  { projectScoped: true }
-);
+var promotionsResource = defineResource("promotions", {
+  list: async (http, ctx) => await requestJson(http, promotionsUrl(ctx)) ?? [],
+  create: (http, ctx, data) => requestJsonBody(http, promotionsUrl(ctx), "Create returned no body", {
+    method: "POST",
+    body: data
+  }),
+  update: (http, ctx, id, data) => requestJsonBody(
+    http,
+    `${promotionsUrl(ctx)}/${id}`,
+    "Update returned no body",
+    { method: "PATCH", body: data }
+  ),
+  remove: async (http, ctx, id) => {
+    await requestJson(http, `${promotionsUrl(ctx)}/${id}`, { method: "DELETE" });
+  }
+});
 
 // src/client/resources/tenants.resource.ts
 function tenantsUrl(ctx) {
@@ -938,16 +889,21 @@ var tenantsResource = defineResource("tenants", {
   detail: async (http, ctx, slug) => requestJson(http, tenantUrl(ctx, slug)),
   /**
    * Suspends a tenant. The reason is recorded on the audit trail, so it is a
-   * required argument rather than an option with a default.
+   * required argument rather than an option with a default. Suspending and
+   * reactivating both require the second factor.
    */
-  suspend: async (http, ctx, slug, reason) => {
+  suspend: async (http, ctx, slug, reason, mfaCode) => {
     await requestJson(http, `${tenantUrl(ctx, slug)}/suspend`, {
       method: "POST",
-      body: { reason }
+      body: { reason },
+      headers: mfaHeader(mfaCode)
     });
   },
-  reactivate: async (http, ctx, slug) => {
-    await requestJson(http, `${tenantUrl(ctx, slug)}/reactivate`, { method: "POST" });
+  reactivate: async (http, ctx, slug, mfaCode) => {
+    await requestJson(http, `${tenantUrl(ctx, slug)}/reactivate`, {
+      method: "POST",
+      headers: mfaHeader(mfaCode)
+    });
   }
 });
 
@@ -982,7 +938,7 @@ var usersResource = defineResource("users", {
     {
       method: "POST",
       body: { reason },
-      headers: mfaCode ? { "X-Mfa-Code": mfaCode } : void 0
+      headers: mfaHeader(mfaCode)
     }
   ),
   /** Same contract as `resetPassword`: app-served, audit-logged, MFA-gated. */
@@ -990,7 +946,7 @@ var usersResource = defineResource("users", {
     await requestJson(http, `${usersUrl(ctx)}/${encodeURIComponent(id)}/deactivate`, {
       method: "POST",
       body: { reason },
-      headers: mfaCode ? { "X-Mfa-Code": mfaCode } : void 0
+      headers: mfaHeader(mfaCode)
     });
   }
 });
@@ -1052,9 +1008,6 @@ var pilotsResource = defineResource("pilots", {
     });
   }
 });
-function mfaHeader(mfaCode) {
-  return mfaCode ? { "X-Mfa-Code": mfaCode } : void 0;
-}
 
 // src/client/resources/platform-email.resource.ts
 function providersUrl(base) {
@@ -1069,18 +1022,18 @@ var platformEmailResource = defineResource("platformEmail", {
     http,
     providersUrl(ctx.apiBase),
     "Create returned no body",
-    { method: "POST", body: payload, headers: mfaHeader2(mfaCode) }
+    { method: "POST", body: payload, headers: mfaHeader(mfaCode) }
   ),
   update: (http, ctx, id, payload, mfaCode) => requestJsonBody(
     http,
     `${providersUrl(ctx.apiBase)}/${encodeURIComponent(id)}`,
     "Update returned no body",
-    { method: "PATCH", body: payload, headers: mfaHeader2(mfaCode) }
+    { method: "PATCH", body: payload, headers: mfaHeader(mfaCode) }
   ),
   remove: async (http, ctx, id, mfaCode) => {
     await requestJson(http, `${providersUrl(ctx.apiBase)}/${encodeURIComponent(id)}`, {
       method: "DELETE",
-      headers: mfaHeader2(mfaCode)
+      headers: mfaHeader(mfaCode)
     });
   },
   /** Sends one mail through the provider and reports what happened. */
@@ -1111,7 +1064,7 @@ var emailHistoryResource = defineResource("emailHistory", {
   remove: async (http, ctx, id, mfaCode) => {
     await requestJson(http, `${historyUrl(ctx.apiBase)}/${encodeURIComponent(id)}`, {
       method: "DELETE",
-      headers: mfaHeader2(mfaCode)
+      headers: mfaHeader(mfaCode)
     });
   },
   /**
@@ -1124,12 +1077,30 @@ var emailHistoryResource = defineResource("emailHistory", {
   resend: async (http, ctx, id, mfaCode) => requestJson(
     http,
     `${historyUrl(ctx.apiBase)}/${encodeURIComponent(id)}/resend`,
-    { method: "POST", headers: mfaHeader2(mfaCode) }
+    { method: "POST", headers: mfaHeader(mfaCode) }
   )
 });
-function mfaHeader2(mfaCode) {
-  return mfaCode ? { "X-Mfa-Code": mfaCode } : void 0;
+
+// src/client/resources/settings.resource.ts
+function settingsUrl2(ctx) {
+  return `${ctx.apiBase}/settings`;
 }
+var settingsResource = defineResource("settings", {
+  read: async (http, ctx) => {
+    const view = await requestJson(http, settingsUrl2(ctx));
+    if (!view) throw new Error("GET /settings answered with no body");
+    return view;
+  },
+  acknowledgeChange: async (http, ctx, id) => {
+    const view = await requestJson(
+      http,
+      `${settingsUrl2(ctx)}/changes/${encodeURIComponent(id)}/acknowledge`,
+      { method: "POST" }
+    );
+    if (!view) throw new Error("POST /settings/changes/{id}/acknowledge answered with no body");
+    return view;
+  }
+});
 
 // src/client/resources/index.ts
 var platformResources = {
@@ -1147,6 +1118,7 @@ var platformResources = {
   users: usersResource,
   subscriptions: subscriptionsResource,
   audit: auditResource,
+  settings: settingsResource,
   // ── App-served, platform-shaped ──────────────────────────────────────────
   //
   // The platform ships pages for these three and serves no route for any of
@@ -1436,8 +1408,10 @@ var bundlesMessages = defineMessages(
       emptyBefore: "Noch keine Bundles angelegt. \xDCber",
       emptyAfter: "einen Bundle-Stamm anlegen, dann Features & Quotas in einer Draft-Version kuratieren.",
       strictWarnings: "{count} Strict-Mode-Warnung(en) bei letzter Operation",
-      confirmSoftDelete: "Bundle '{bundleKey}' wirklich soft-deleten? Bestand bleibt durch published BundleVersions gesch\xFCtzt.",
-      confirmDiscardVersion: "Diese Draft-Version verwerfen? Der Inhalt geht verloren."
+      confirmSoftDeleteTitle: "Bundle soft-l\xF6schen?",
+      confirmSoftDelete: "Bundle \u201E{label}\u201C soft-l\xF6schen? Alle {versions} Version(en) verschwinden aus der Verwaltung. Bereits verkaufte Best\xE4nde bleiben durch die published BundleVersions gesch\xFCtzt.",
+      confirmDiscardVersionTitle: "Draft-Version verwerfen?",
+      confirmDiscardVersion: "Diese Draft-Version verwerfen? Der bearbeitete Inhalt geht verloren und l\xE4sst sich nicht wiederherstellen."
     },
     header: {
       title: "Bundles",
@@ -1501,6 +1475,7 @@ var bundlesMessages = defineMessages(
       save: "Stammdaten & \xDCbersetzungen speichern",
       noVersion: "Noch keine Version. Lege eine neue Version an, um Features, Quotas & Pricing zu kuratieren.",
       publishVersion: "Diese Version publishen",
+      unsavedChanges: "Ungespeicherte \xC4nderungen",
       softDelete: "Bundle soft-deleten"
     },
     // BundleCreatePanel — inline wizard for a new bundle (root + v1 draft).
@@ -1577,6 +1552,7 @@ var bundlesMessages = defineMessages(
       changeNotePlaceholder: "z. B. Add WhatsApp + Preisanpassung +4 \u20AC",
       selectedCount: "{count} ausgew\xE4hlt",
       saveTooltip: "\xC4nderungen speichern",
+      saveVersion: "Version speichern",
       saveDisabledTooltip: "Form ist invalide oder unver\xE4ndert"
     },
     // BundlePlanCompatPicker — plans this bundle may be booked with.
@@ -1622,7 +1598,8 @@ var bundlesMessages = defineMessages(
       regressionBodySuffix: "-Confirm.",
       forceRegressive: "Trotzdem publishen",
       confirm: "Publishen",
-      confirmRegressive: "Regressiv publishen"
+      confirmRegressive: "Regressiv publishen",
+      mfaDescription: "Version v{version} von Bundle {bundleKey} publishen."
     }
   },
   {
@@ -1650,8 +1627,10 @@ var bundlesMessages = defineMessages(
       emptyBefore: "No bundles created yet. Use",
       emptyAfter: "to create a bundle master record, then curate features & quotas in a draft version.",
       strictWarnings: "{count} strict mode warning(s) in the last operation",
-      confirmSoftDelete: "Really soft-delete bundle '{bundleKey}'? Existing contracts stay protected by published bundle versions.",
-      confirmDiscardVersion: "Discard this draft version? Its content will be lost."
+      confirmSoftDeleteTitle: "Soft-delete bundle?",
+      confirmSoftDelete: 'Soft-delete bundle "{label}"? All {versions} version(s) leave the administration. Contracts already sold stay protected by the published bundle versions.',
+      confirmDiscardVersionTitle: "Discard draft version?",
+      confirmDiscardVersion: "Discard this draft version? The edited content is lost and cannot be restored."
     },
     header: {
       title: "Bundles",
@@ -1713,6 +1692,7 @@ var bundlesMessages = defineMessages(
       save: "Save master data & translations",
       noVersion: "No version yet. Create a new version to curate features, quotas & pricing.",
       publishVersion: "Publish this version",
+      unsavedChanges: "Unsaved changes",
       softDelete: "Soft-delete bundle"
     },
     create: {
@@ -1783,6 +1763,7 @@ var bundlesMessages = defineMessages(
       changeNotePlaceholder: "e.g. Add WhatsApp + price adjustment +4 \u20AC",
       selectedCount: "{count} selected",
       saveTooltip: "Save changes",
+      saveVersion: "Save version",
       saveDisabledTooltip: "Form is invalid or unchanged"
     },
     featuresEditor: {
@@ -1826,7 +1807,8 @@ var bundlesMessages = defineMessages(
       regressionBodySuffix: " confirmation.",
       forceRegressive: "Publish anyway",
       confirm: "Publish",
-      confirmRegressive: "Publish regressively"
+      confirmRegressive: "Publish regressively",
+      mfaDescription: "Publish version v{version} of bundle {bundleKey}."
     }
   }
 );
@@ -2033,14 +2015,18 @@ var discoveryMessages = defineMessages(
     noQuotasDeclared: "Keine Quotas im Code deklariert.",
     orphansTitle: "Capabilities ohne Feature",
     noOwner: "Ohne Owner",
-    owner: "Owner",
+    owner: "Besitzer",
     unit: "Einheit",
     replacedBy: "ersetzt durch {key}",
     replaces: "ersetzt: {keys}",
     reapproveEmphasis: "erneut freigeben",
     capList: {
       orphanFeature: "Feature im Katalog ohne implementierende Capability \u2014 blockiert im blocking-Strict-Mode das Plan-Publish.",
-      removedFromCode: "aus Code entfernt"
+      flagNew: "neu",
+      flagExperimental: "experimentell",
+      flagDeprecated: "veraltet",
+      removedFromCode: "aus Code entfernt",
+      implementedAt: "implementiert in"
     },
     kpi: {
       featuresTotal: "Features gesamt",
@@ -2100,14 +2086,6 @@ var discoveryMessages = defineMessages(
       noUsageProviderWarning: "Eine harte Quota ohne UsageProvider ist nicht deploy-f\xE4hig (Preflight).",
       outdatedBanner: "Die code-abgeleiteten Quota-Fakten (Einheit/Enforcement/Provider) haben sich seit der letzten Freigabe ge\xE4ndert \u2014 bitte pr\xFCfen und"
     },
-    caps: {
-      emptyHint: "Feature im Katalog ohne implementierende Capability \u2014 blockiert im blocking-Strict-Mode das Plan-Publish.",
-      flagNew: "neu",
-      flagExperimental: "experimental",
-      flagDeprecated: "deprecated",
-      flagRemoved: "aus Code entfernt",
-      implementedAt: "impl"
-    },
     trans: {
       sourceBadge: "Source",
       fieldLabel: "Label",
@@ -2141,7 +2119,11 @@ var discoveryMessages = defineMessages(
     reapproveEmphasis: "approve again",
     capList: {
       orphanFeature: "Feature in the catalog without an implementing capability \u2014 blocks plan publishing in blocking strict mode.",
-      removedFromCode: "removed from code"
+      flagNew: "new",
+      flagExperimental: "experimental",
+      flagDeprecated: "deprecated",
+      removedFromCode: "removed from code",
+      implementedAt: "implemented at"
     },
     kpi: {
       featuresTotal: "Features total",
@@ -2201,14 +2183,6 @@ var discoveryMessages = defineMessages(
       noUsageProviderWarning: "A hard quota without a UsageProvider is not deployable (preflight).",
       outdatedBanner: "The code-derived quota facts (unit/enforcement/provider) have changed since the last approval \u2014 please review and"
     },
-    caps: {
-      emptyHint: "Feature in the catalog without an implementing capability \u2014 blocks the plan publish in blocking strict mode.",
-      flagNew: "new",
-      flagExperimental: "experimental",
-      flagDeprecated: "deprecated",
-      flagRemoved: "removed from code",
-      implementedAt: "impl"
-    },
     trans: {
       sourceBadge: "Source",
       fieldLabel: "Label",
@@ -2420,8 +2394,10 @@ var marketingMessages = defineMessages(
       colPlan: "Plan",
       colVisible: "Sichtbar",
       colBadge: "Badge",
-      colPriority: "Priorit\xE4t",
+      colOrder: "Reihenfolge",
       colHighlight: "Highlight",
+      reorderLabel: "{plan} verschieben \xB7 Position {position} von {total}",
+      reorderTitle: "Ziehen oder Pfeiltasten: Reihenfolge \xE4ndern",
       versionTabsLabel: "Plan-Versionen f\xFCr {plan}",
       versionTitle: "Version {version}: g\xFCltig {from} bis {until}{changeNote}",
       versionValidFromUnknown: "unbekannt",
@@ -2544,8 +2520,10 @@ var marketingMessages = defineMessages(
       colPlan: "Plan",
       colVisible: "Visible",
       colBadge: "Badge",
-      colPriority: "Priority",
+      colOrder: "Order",
       colHighlight: "Highlight",
+      reorderLabel: "Move {plan} \xB7 position {position} of {total}",
+      reorderTitle: "Drag or use the arrow keys to reorder",
       versionTabsLabel: "Plan versions for {plan}",
       versionTitle: "Version {version}: valid {from} to {until}{changeNote}",
       versionValidFromUnknown: "unknown",
@@ -2641,7 +2619,8 @@ var navMessages = defineMessages(
       bundles: "Bundles",
       marketingCatalog: "Marketing-Catalog",
       platformEmail: "Plattform-E-Mail",
-      platformEmailHistory: "E-Mail-Verlauf"
+      platformEmailHistory: "E-Mail-Verlauf",
+      settings: "Einstellungen"
     },
     sections: {
       overview: "\xDCbersicht",
@@ -2664,7 +2643,8 @@ var navMessages = defineMessages(
       bundles: "Bundles",
       marketingCatalog: "Marketing catalog",
       platformEmail: "Platform email",
-      platformEmailHistory: "Email history"
+      platformEmailHistory: "Email history",
+      settings: "Settings"
     },
     sections: {
       overview: "Overview",
@@ -3325,8 +3305,7 @@ var planVersionsMessages = defineMessages(
     diffFields: {
       featuresAdded: "Hinzugef\xFCgte Features",
       featuresRemoved: "Entfernte Features",
-      maxUsers: "Max. Benutzer",
-      maxStorageGb: "Speicher (GB)",
+      quota: 'Kontingent \u201E{key}"',
       monthlyNet: "Preis monatlich (netto)",
       yearlyNet: "Preis j\xE4hrlich (netto)",
       unitSize: "Einheitsgr\xF6\xDFe"
@@ -3377,8 +3356,7 @@ var planVersionsMessages = defineMessages(
     diffFields: {
       featuresAdded: "Added features",
       featuresRemoved: "Removed features",
-      maxUsers: "Max. users",
-      maxStorageGb: "Storage (GB)",
+      quota: 'Quota "{key}"',
       monthlyNet: "Price monthly (net)",
       yearlyNet: "Price yearly (net)",
       unitSize: "Unit size"
@@ -3413,6 +3391,9 @@ var plansMessages = defineMessages(
       toastPlanDeleted: "Plan {planKey} komplett aus der DB gel\xF6scht.",
       toastDraftDiscarded: "Draft v{version} von {planKey} verworfen \u2014 Live-Version unver\xE4ndert.",
       toastVersionTerminated: "v{version} terminiert.",
+      mfaPublish: "v{version} von {planKey} ver\xF6ffentlichen.",
+      mfaTerminate: "Live-Version v{version} von {planKey} beenden.",
+      mfaPurge: "Plan {planKey} endg\xFCltig l\xF6schen.",
       errorSessionExpiredSave: "Sitzung abgelaufen \u2014 bitte neu anmelden und erneut speichern.",
       errorStrictMode: "Strict-Mode-Check: {details}",
       errorStrictModeFallback: "Drift gegen den Discovery-Snapshot.",
@@ -3444,8 +3425,7 @@ var plansMessages = defineMessages(
       yearlyNet: "Preis (j\xE4hrlich, netto)",
       featuresRemoved: "Entfernte Features",
       featuresAdded: "Hinzugef\xFCgte Features",
-      quotasLowered: "Gesenkte Quotas",
-      quotasRaised: "Erh\xF6hte Quotas",
+      quota: 'Kontingent \u201E{key}"',
       bundlesRemoved: "Entfernte Bundles",
       bundlesAdded: "Hinzugef\xFCgte Bundles"
     },
@@ -3645,6 +3625,9 @@ var plansMessages = defineMessages(
       toastPlanDeleted: "Plan {planKey} completely removed from the database.",
       toastDraftDiscarded: "Draft v{version} of {planKey} discarded \u2014 live version unchanged.",
       toastVersionTerminated: "v{version} terminated.",
+      mfaPublish: "Publish v{version} of {planKey}.",
+      mfaTerminate: "End live version v{version} of {planKey}.",
+      mfaPurge: "Delete plan {planKey} for good.",
       errorSessionExpiredSave: "Session expired \u2014 please sign in again and save once more.",
       errorStrictMode: "Strict mode check: {details}",
       errorStrictModeFallback: "Drift against the discovery snapshot.",
@@ -3675,8 +3658,7 @@ var plansMessages = defineMessages(
       yearlyNet: "Price (yearly, net)",
       featuresRemoved: "Removed features",
       featuresAdded: "Added features",
-      quotasLowered: "Lowered quotas",
-      quotasRaised: "Raised quotas",
+      quota: 'Quota "{key}"',
       bundlesRemoved: "Removed bundles",
       bundlesAdded: "Added bundles"
     },
@@ -3873,6 +3855,7 @@ var promosMessages = defineMessages(
       columnCode: "Code",
       columnValue: "Wert",
       columnRedemptions: "Einl\xF6sungen",
+      redemptionsHeld: "{redeemed} + {held} reserviert / {max}",
       columnCampaign: "Kampagne",
       columnValidUntil: "G\xFCltig bis",
       actionPause: "Pausieren",
@@ -3970,6 +3953,7 @@ var promosMessages = defineMessages(
       columnCode: "Code",
       columnValue: "Value",
       columnRedemptions: "Redemptions",
+      redemptionsHeld: "{redeemed} + {held} held / {max}",
       columnCampaign: "Campaign",
       columnValidUntil: "Valid until",
       actionPause: "Pause",
@@ -4057,6 +4041,74 @@ var promosMessages = defineMessages(
   }
 );
 
+// src/client/i18n/messages/settings.ts
+var settingsMessages = defineMessages(
+  {
+    title: "Einstellungen",
+    subtitle: "Was diese Installation ausf\xFChrt \u2014 und seit wann.",
+    applied: {
+      title: "Angewendete Konfiguration",
+      appliedAt: "Angewendet am",
+      source: "Quelle",
+      fingerprint: "Fingerabdruck",
+      notRecorded: "Diese Installation zeichnet nicht auf, wann ihre Konfiguration angewendet wurde: der Persistenz-Adapter liefert keinen `core.appliedSettings`-Port. Die Werte unten sind die laufenden.",
+      recordStale: "Der Datensatz beschreibt eine fr\xFChere Konfiguration \u2014 der Start konnte ihn nicht schreiben. Die Werte unten sind die laufenden; siehe das Boot-Log.",
+      readOnly: "Nur lesen. Diese Werte leben in der Datei; eine \xC4nderung dort greift beim n\xE4chsten Start."
+    },
+    changes: {
+      title: "\xC4nderungen zwischen zwei Starts",
+      empty: "Kein Start hat die Einstellungen ver\xE4ndert vorgefunden.",
+      noticedAt: "Bemerkt am",
+      leaf: "Einstellung",
+      before: "Vorher",
+      after: "Nachher",
+      absent: "\u2014 nicht gesetzt \u2014",
+      acknowledge: "Als gesehen markieren",
+      acknowledgedBy: "Gesehen von {who} am {when}",
+      open: "Ungesehen",
+      acknowledged: "Gesehen"
+    },
+    values: {
+      title: "Laufende Werte",
+      value: "Wert"
+    },
+    loadFailed: "Die Einstellungen konnten nicht geladen werden.",
+    acknowledgeFailed: "Die \xC4nderung konnte nicht als gesehen markiert werden."
+  },
+  {
+    title: "Settings",
+    subtitle: "What this installation is running on \u2014 and since when.",
+    applied: {
+      title: "Applied configuration",
+      appliedAt: "Applied at",
+      source: "Source",
+      fingerprint: "Fingerprint",
+      notRecorded: "This installation does not record when its configuration was applied: the persistence adapter provides no `core.appliedSettings` port. The values below are the running ones.",
+      recordStale: "The record describes an earlier configuration \u2014 the start could not write it. The values below are the running ones; see the boot log.",
+      readOnly: "Read-only. These values live in the file; a change there takes effect at the next start."
+    },
+    changes: {
+      title: "Changes between two starts",
+      empty: "No start has found the settings changed.",
+      noticedAt: "Noticed at",
+      leaf: "Setting",
+      before: "Before",
+      after: "After",
+      absent: "\u2014 not set \u2014",
+      acknowledge: "Mark as seen",
+      acknowledgedBy: "Seen by {who} on {when}",
+      open: "Unseen",
+      acknowledged: "Seen"
+    },
+    values: {
+      title: "Running values",
+      value: "Value"
+    },
+    loadFailed: "The settings could not be loaded.",
+    acknowledgeFailed: "The change could not be marked as seen."
+  }
+);
+
 // src/client/i18n/messages/shell.ts
 var shellMessages = defineMessages(
   {
@@ -4409,7 +4461,8 @@ function catalogFor(locale) {
     marketing: marketingMessages[locale],
     promos: promosMessages[locale],
     pilots: pilotsMessages[locale],
-    email: emailMessages[locale]
+    email: emailMessages[locale],
+    settings: settingsMessages[locale]
   };
 }
 var SA_MESSAGES = {
@@ -4453,6 +4506,7 @@ function createSaCatalog(options = {}) {
 }
 
 export {
+  attachCause,
   formatMessage,
   markPlatformError,
   isPlatformError,
@@ -4473,6 +4527,7 @@ export {
   trimTrailingSlashes,
   getJson,
   postJson,
+  patchJson,
   createFetchHttpClient,
   defaultKvStore,
   defaultHttpClient,
@@ -4491,6 +4546,8 @@ export {
   clampListPage,
   clampListPageSize,
   defineListOp,
+  MFA_CODE_HEADER,
+  mfaHeader,
   plansResource,
   planVersionsResource,
   bundlesResource,
@@ -4508,6 +4565,7 @@ export {
   pilotsResource,
   platformEmailResource,
   emailHistoryResource,
+  settingsResource,
   platformResources,
   BootLoadError,
   BootLoader,