@sonatel-os/strapi-plugin-tcg 0.0.0-stage → 0.2.0

package/dist/_chunks/SettingsPage-BcJXkWnW.mjs

@@ -0,0 +1,191 @@
+import { jsx, jsxs } from "react/jsx-runtime";
+import { Grid, Box, Flex, Typography, Badge } from "@strapi/design-system";
+import { Page, Layouts } from "@strapi/strapi/admin";
+import { ai as useGetSettingsQuery, I as Intro, g as Section, Y as Mono } from "./api-DACN35Y5.mjs";
+import { a as PERMISSIONS } from "./index-DSm3eEtn.mjs";
+const Row = ({ k, v, hint, tone }) => /* @__PURE__ */ jsxs(
+  Flex,
+  {
+    justifyContent: "space-between",
+    alignItems: "flex-start",
+    gap: 4,
+    paddingTop: 3,
+    paddingBottom: 3,
+    style: { borderBottom: "1px solid #eaeaef" },
+    children: [
+      /* @__PURE__ */ jsxs(Box, { style: { flex: 1, minWidth: 0 }, children: [
+        /* @__PURE__ */ jsx(Typography, { variant: "omega", fontWeight: "semiBold", tag: "p", children: k }),
+        hint ? /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", tag: "p", children: hint }) : null
+      ] }),
+      /* @__PURE__ */ jsxs(Flex, { gap: 2, alignItems: "center", style: { flexShrink: 0 }, children: [
+        tone ? /* @__PURE__ */ jsx(Badge, { backgroundColor: `${tone}100`, textColor: `${tone}700`, size: "S", children: tone === "success" ? "set" : "default" }) : null,
+        /* @__PURE__ */ jsx(Mono, { variant: "pi", fontWeight: "semiBold", children: String(v ?? "—") || "—" })
+      ] })
+    ]
+  }
+);
+const SettingsPage = () => {
+  const { data, isLoading, isError } = useGetSettingsQuery();
+  if (isLoading) return /* @__PURE__ */ jsx(Page.Loading, {});
+  if (isError) return /* @__PURE__ */ jsx(Page.Error, {});
+  const s = data ?? {};
+  const players = s.players ?? {};
+  return /* @__PURE__ */ jsx(Page.Protect, { permissions: PERMISSIONS.settingsRead, children: /* @__PURE__ */ jsxs(Page.Main, { children: [
+    /* @__PURE__ */ jsx(Page.Title, { children: "TCG · Configuration" }),
+    /* @__PURE__ */ jsx(
+      Layouts.Header,
+      {
+        title: "TCG configuration",
+        subtitle: "Read from config/plugins.js and the server environment. Nothing here is edited in the admin; secrets are masked."
+      }
+    ),
+    /* @__PURE__ */ jsxs(Layouts.Content, { children: [
+      /* @__PURE__ */ jsx(
+        Intro,
+        {
+          id: "settings",
+          title: "How a host app talks to the game",
+          body: [
+            "The plugin does not do authentication of its own. Its player routes under /api/tcg are ordinary Strapi content-API routes: give an API token (Settings → API Tokens) or a Users & Permissions role the TCG actions you want to allow, and call the routes with that credential. Any Strapi can install the plugin and any host can drive it.",
+            "The caller names the player with a header (x-player-id by default) carrying any stable id it owns: a phone number, a Max It user id, a username. Unknown ids create a player on first sight (autoProvision), and an optional name and avatar header refresh the profile. Catalog routes (season, packs, cards, live, rewards) need no player header.",
+            "Out of the box no configuration is needed. Before an event set TCG_QR_SECRET so printed and rotating QR codes survive a rotation of Strapi’s app keys."
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsxs(Grid.Root, { gap: 4, children: [
+        /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxs(
+          Section,
+          {
+            eyebrow: "The contract",
+            title: "Player identity",
+            help: "Header names the caller must send on player routes.",
+            style: { width: "100%" },
+            children: [
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Player id header",
+                  hint: "players.idHeader · required on every player route",
+                  v: players.idHeader || "x-player-id",
+                  tone: players.idHeader && players.idHeader !== "x-player-id" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Display name header",
+                  hint: "players.nameHeader · optional hint, refreshes the profile",
+                  v: players.nameHeader || "x-player-name",
+                  tone: players.nameHeader && players.nameHeader !== "x-player-name" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Avatar header",
+                  hint: "players.avatarHeader · optional URL",
+                  v: players.avatarHeader || "x-player-avatar",
+                  tone: players.avatarHeader && players.avatarHeader !== "x-player-avatar" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Auto-provision",
+                  hint: "players.autoProvision · create a player for an unknown id; off answers 404 PLAYER_NOT_FOUND",
+                  v: players.autoProvision === false ? "off" : "on",
+                  tone: players.autoProvision === false ? "success" : "warning"
+                }
+              )
+            ]
+          }
+        ) }),
+        /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxs(
+          Section,
+          {
+            eyebrow: "Before an event",
+            title: "Secrets and defaults",
+            help: "Shown with their effective value.",
+            style: { width: "100%" },
+            children: [
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "QR global secret",
+                  hint: "TCG_QR_SECRET · signs trade QR codes and packs without their own secret; derived from the app keys when unset",
+                  v: s.qr?.globalSecret || "derived from app keys",
+                  tone: s.qr?.globalSecret ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Player code prefix",
+                  hint: "TCG_PLAYER_CODE_PREFIX · the JMB in JMB-A7K2",
+                  v: s.playerCodePrefix || "TCG",
+                  tone: s.playerCodePrefix && s.playerCodePrefix !== "TCG" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsx(
+                Row,
+                {
+                  k: "Background sweeps",
+                  hint: "Expired QR nonces and trade offers are cleaned up by the server",
+                  v: s.sweeps?.enabled === false ? "off" : "on",
+                  tone: "warning"
+                }
+              )
+            ]
+          }
+        ) })
+      ] }),
+      /* @__PURE__ */ jsx(Box, { paddingTop: 6, children: /* @__PURE__ */ jsxs(Grid.Root, { gap: 4, children: [
+        /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsx(
+          Section,
+          {
+            eyebrow: "Copy / paste",
+            title: "config/plugins.js",
+            help: "Everything is optional; values come from the environment.",
+            style: { width: "100%" },
+            children: /* @__PURE__ */ jsx(Mono, { variant: "pi", tag: "pre", style: { whiteSpace: "pre-wrap" }, children: `tcg: {
+  enabled: true,
+  config: {
+    playerCodePrefix: env('TCG_PLAYER_CODE_PREFIX', '${s.playerCodePrefix ?? "TCG"}'),
+    qr: { globalSecret: env('TCG_QR_SECRET', '') },
+    players: {
+      idHeader: '${players.idHeader ?? "x-player-id"}',
+      nameHeader: '${players.nameHeader ?? "x-player-name"}',
+      avatarHeader: '${players.avatarHeader ?? "x-player-avatar"}',
+      autoProvision: ${players.autoProvision === false ? "false" : "true"},
+    },
+  },
+},` })
+          }
+        ) }),
+        /* @__PURE__ */ jsx(Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsx(
+          Section,
+          {
+            eyebrow: "Copy / paste",
+            title: "A call from a host",
+            help: "An API token with the TCG actions, plus the player header.",
+            style: { width: "100%" },
+            children: /* @__PURE__ */ jsx(Mono, { variant: "pi", tag: "pre", style: { whiteSpace: "pre-wrap" }, children: `POST /api/tcg/pulls/scan
+Authorization: Bearer <strapi api token>
+${players.idHeader ?? "x-player-id"}: 221770000001
+${players.nameHeader ?? "x-player-name"}: Awa Diop
+Content-Type: application/json
+
+{ "qrToken": "p.…" }
+
+→ 201 { "data": { "card": { … }, "mintNumber": 17, "isNew": true } }
+→ 400 { "error": { "code": "PLAYER_REQUIRED" } }   // header missing
+→ 403 { "error": { "code": "PLAYER_INACTIVE" } }   // deactivated in Players` })
+          }
+        ) })
+      ] }) })
+    ] })
+  ] }) });
+};
+export {
+  SettingsPage
+};

package/dist/_chunks/SettingsPage-Bxa_71iT.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const jsxRuntime = require("react/jsx-runtime");
+const designSystem = require("@strapi/design-system");
+const admin = require("@strapi/strapi/admin");
+const api = require("./api-Aney2S9e.js");
+const index = require("./index-DXuaf32J.js");
+const Row = ({ k, v, hint, tone }) => /* @__PURE__ */ jsxRuntime.jsxs(
+  designSystem.Flex,
+  {
+    justifyContent: "space-between",
+    alignItems: "flex-start",
+    gap: 4,
+    paddingTop: 3,
+    paddingBottom: 3,
+    style: { borderBottom: "1px solid #eaeaef" },
+    children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Box, { style: { flex: 1, minWidth: 0 }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "omega", fontWeight: "semiBold", tag: "p", children: k }),
+        hint ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Typography, { variant: "pi", textColor: "neutral600", tag: "p", children: hint }) : null
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Flex, { gap: 2, alignItems: "center", style: { flexShrink: 0 }, children: [
+        tone ? /* @__PURE__ */ jsxRuntime.jsx(designSystem.Badge, { backgroundColor: `${tone}100`, textColor: `${tone}700`, size: "S", children: tone === "success" ? "set" : "default" }) : null,
+        /* @__PURE__ */ jsxRuntime.jsx(api.Mono, { variant: "pi", fontWeight: "semiBold", children: String(v ?? "—") || "—" })
+      ] })
+    ]
+  }
+);
+const SettingsPage = () => {
+  const { data, isLoading, isError } = api.useGetSettingsQuery();
+  if (isLoading) return /* @__PURE__ */ jsxRuntime.jsx(admin.Page.Loading, {});
+  if (isError) return /* @__PURE__ */ jsxRuntime.jsx(admin.Page.Error, {});
+  const s = data ?? {};
+  const players = s.players ?? {};
+  return /* @__PURE__ */ jsxRuntime.jsx(admin.Page.Protect, { permissions: index.PERMISSIONS.settingsRead, children: /* @__PURE__ */ jsxRuntime.jsxs(admin.Page.Main, { children: [
+    /* @__PURE__ */ jsxRuntime.jsx(admin.Page.Title, { children: "TCG · Configuration" }),
+    /* @__PURE__ */ jsxRuntime.jsx(
+      admin.Layouts.Header,
+      {
+        title: "TCG configuration",
+        subtitle: "Read from config/plugins.js and the server environment. Nothing here is edited in the admin; secrets are masked."
+      }
+    ),
+    /* @__PURE__ */ jsxRuntime.jsxs(admin.Layouts.Content, { children: [
+      /* @__PURE__ */ jsxRuntime.jsx(
+        api.Intro,
+        {
+          id: "settings",
+          title: "How a host app talks to the game",
+          body: [
+            "The plugin does not do authentication of its own. Its player routes under /api/tcg are ordinary Strapi content-API routes: give an API token (Settings → API Tokens) or a Users & Permissions role the TCG actions you want to allow, and call the routes with that credential. Any Strapi can install the plugin and any host can drive it.",
+            "The caller names the player with a header (x-player-id by default) carrying any stable id it owns: a phone number, a Max It user id, a username. Unknown ids create a player on first sight (autoProvision), and an optional name and avatar header refresh the profile. Catalog routes (season, packs, cards, live, rewards) need no player header.",
+            "Out of the box no configuration is needed. Before an event set TCG_QR_SECRET so printed and rotating QR codes survive a rotation of Strapi’s app keys."
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Grid.Root, { gap: 4, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxRuntime.jsxs(
+          api.Section,
+          {
+            eyebrow: "The contract",
+            title: "Player identity",
+            help: "Header names the caller must send on player routes.",
+            style: { width: "100%" },
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Player id header",
+                  hint: "players.idHeader · required on every player route",
+                  v: players.idHeader || "x-player-id",
+                  tone: players.idHeader && players.idHeader !== "x-player-id" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Display name header",
+                  hint: "players.nameHeader · optional hint, refreshes the profile",
+                  v: players.nameHeader || "x-player-name",
+                  tone: players.nameHeader && players.nameHeader !== "x-player-name" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Avatar header",
+                  hint: "players.avatarHeader · optional URL",
+                  v: players.avatarHeader || "x-player-avatar",
+                  tone: players.avatarHeader && players.avatarHeader !== "x-player-avatar" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Auto-provision",
+                  hint: "players.autoProvision · create a player for an unknown id; off answers 404 PLAYER_NOT_FOUND",
+                  v: players.autoProvision === false ? "off" : "on",
+                  tone: players.autoProvision === false ? "success" : "warning"
+                }
+              )
+            ]
+          }
+        ) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxRuntime.jsxs(
+          api.Section,
+          {
+            eyebrow: "Before an event",
+            title: "Secrets and defaults",
+            help: "Shown with their effective value.",
+            style: { width: "100%" },
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "QR global secret",
+                  hint: "TCG_QR_SECRET · signs trade QR codes and packs without their own secret; derived from the app keys when unset",
+                  v: s.qr?.globalSecret || "derived from app keys",
+                  tone: s.qr?.globalSecret ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Player code prefix",
+                  hint: "TCG_PLAYER_CODE_PREFIX · the JMB in JMB-A7K2",
+                  v: s.playerCodePrefix || "TCG",
+                  tone: s.playerCodePrefix && s.playerCodePrefix !== "TCG" ? "success" : "warning"
+                }
+              ),
+              /* @__PURE__ */ jsxRuntime.jsx(
+                Row,
+                {
+                  k: "Background sweeps",
+                  hint: "Expired QR nonces and trade offers are cleaned up by the server",
+                  v: s.sweeps?.enabled === false ? "off" : "on",
+                  tone: "warning"
+                }
+              )
+            ]
+          }
+        ) })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(designSystem.Box, { paddingTop: 6, children: /* @__PURE__ */ jsxRuntime.jsxs(designSystem.Grid.Root, { gap: 4, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxRuntime.jsx(
+          api.Section,
+          {
+            eyebrow: "Copy / paste",
+            title: "config/plugins.js",
+            help: "Everything is optional; values come from the environment.",
+            style: { width: "100%" },
+            children: /* @__PURE__ */ jsxRuntime.jsx(api.Mono, { variant: "pi", tag: "pre", style: { whiteSpace: "pre-wrap" }, children: `tcg: {
+  enabled: true,
+  config: {
+    playerCodePrefix: env('TCG_PLAYER_CODE_PREFIX', '${s.playerCodePrefix ?? "TCG"}'),
+    qr: { globalSecret: env('TCG_QR_SECRET', '') },
+    players: {
+      idHeader: '${players.idHeader ?? "x-player-id"}',
+      nameHeader: '${players.nameHeader ?? "x-player-name"}',
+      avatarHeader: '${players.avatarHeader ?? "x-player-avatar"}',
+      autoProvision: ${players.autoProvision === false ? "false" : "true"},
+    },
+  },
+},` })
+          }
+        ) }),
+        /* @__PURE__ */ jsxRuntime.jsx(designSystem.Grid.Item, { col: 6, s: 12, alignItems: "stretch", children: /* @__PURE__ */ jsxRuntime.jsx(
+          api.Section,
+          {
+            eyebrow: "Copy / paste",
+            title: "A call from a host",
+            help: "An API token with the TCG actions, plus the player header.",
+            style: { width: "100%" },
+            children: /* @__PURE__ */ jsxRuntime.jsx(api.Mono, { variant: "pi", tag: "pre", style: { whiteSpace: "pre-wrap" }, children: `POST /api/tcg/pulls/scan
+Authorization: Bearer <strapi api token>
+${players.idHeader ?? "x-player-id"}: 221770000001
+${players.nameHeader ?? "x-player-name"}: Awa Diop
+Content-Type: application/json
+
+{ "qrToken": "p.…" }
+
+→ 201 { "data": { "card": { … }, "mintNumber": 17, "isNew": true } }
+→ 400 { "error": { "code": "PLAYER_REQUIRED" } }   // header missing
+→ 403 { "error": { "code": "PLAYER_INACTIVE" } }   // deactivated in Players` })
+          }
+        ) })
+      ] }) })
+    ] })
+  ] }) });
+};
+exports.SettingsPage = SettingsPage;