@webx-ui/module-admin 0.2.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 webx-ui
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,123 @@
+# @webx-ui/module-admin
+
+The frame a WebX UI admin panel runs in: the bootstrap, the shell, the HTTP client and the
+module registry.
+
+It is the front-end half of the Composer package [`webx-ui/module-admin`](https://packagist.org/packages/webx-ui/module-admin),
+and the two are paired by the manifest the server publishes — so a section appears in the panel
+when both halves have it, and the menu is what the installation actually has rather than a list
+written twice.
+
+## Install
+
+```bash
+pnpm add @webx-ui/module-admin @webx-ui/core @webx-ui/tokens vue vue-router
+```
+
+On the Laravel side, `php artisan webx:panel` writes the entry file below and wires it into
+Vite for you.
+
+## The panel
+
+```ts
+import { createAdmin } from '@webx-ui/module-admin'
+import { auth, WxUserMenu } from '@webx-ui/module-auth'
+import { pages } from '@webx-ui/module-pages'
+
+createAdmin({
+  modules: [pages],
+  plugins: [auth()],
+  userMenu: WxUserMenu,
+}).mount()
+```
+
+`createAdmin()` mounts into `#webx-app` — the element the server's Blade shell renders — and
+reads the manifest address out of the `webx-manifest` meta tag beside it. Both are overridable
+for a panel served some other way.
+
+Mounting does not wait for the server. The manifest needs a signed-in session, so a visit that
+starts at the sign-in screen would otherwise stare at a blank page waiting for a request it is
+bound to lose.
+
+## A module
+
+```ts
+import type { AdminModule } from '@webx-ui/module-admin'
+
+export const pages: AdminModule = {
+  id: 'pages', // the same id the server-side module answers to
+  path: '/pages',
+  routes: [{ path: '/pages', component: () => import('./PagesScreen.vue') }],
+}
+```
+
+A module the server reports with no front end installed has nowhere to send anybody, so it
+stays out of the menu; one installed but not reported is not there at all.
+
+## Language
+
+The panel draws itself in the language of whoever is reading it — their choice, stored against
+them on the server, not a setting of the site. A site published only in Ukrainian can still be
+maintained by somebody who wants English menus.
+
+```ts
+import { useI18n, useTranslate } from '@webx-ui/module-admin'
+
+const t = useTranslate('webx-admin') // t('shell.retry')
+const i18n = useI18n() // i18n.state.locale, i18n.state.panelLocales
+```
+
+The words come from the Composer package's `lang` files, fetched as one dictionary at boot and
+merged over the English this package ships in its own code. So a module is translated **once**,
+in the half that also writes the server's validation messages, and a panel with no server
+behind it still has labels.
+
+`i18n.state.contentLocales` is the other list: the languages the site publishes content in.
+That is what an editing screen builds its tabs from, and it has nothing to do with the language
+of the interface around them.
+
+## Talking to the backend
+
+```ts
+import { useAdmin, HttpError } from '@webx-ui/module-admin'
+
+const { http, can, state } = useAdmin()
+
+const body = await http.get<{ data: Page[] }>(`${state.manifest?.apiPath}/pages`)
+```
+
+The client speaks this backend's conventions rather than HTTP in general: a session cookie, a
+CSRF token fetched when needed and refreshed once if the server says it has gone stale, `422`
+arriving as `errors` ready for `WxForm`, `429` carrying `retryAfter`.
+
+```ts
+try {
+  await http.post('/api/cms/pages', page)
+} catch (error) {
+  if (error instanceof HttpError && error.isValidation) {
+    formErrors.value = error.errors
+  }
+}
+```
+
+`can('pages.manage')` answers from the signed-in session — a super administrator passes
+everything, the same rule the server applies.
+
+## Exports
+
+| Export                    | What it is                                     |
+| ------------------------- | ---------------------------------------------- |
+| `createAdmin`             | Assembles and mounts the panel                 |
+| `useAdmin`                | The context: `http`, `state`, `nav`, `can`     |
+| `createHttp`, `HttpError` | The client, usable on its own                  |
+| `AdminShell`, `AdminNav`  | The layout, for a panel that assembles its own |
+
+Styles come with `@webx-ui/core`; this package adds a little of its own:
+
+```ts
+import '@webx-ui/module-admin/style.css'
+```
+
+## Licence
+
+MIT.

package/dist/AdminNav.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The menu, built from the manifest rather than written out. What the panel offers is what the
+ * installation actually has — adding a module on the server and installing its front end is
+ * the whole of "adding a section".
+ */
+type __VLS_Props = {
+    collapsed?: boolean;
+};
+declare const _default: import('vue').DefineComponent<__VLS_Props, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {
+    select: () => any;
+}, string, import('vue').PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onSelect?: (() => any) | undefined;
+}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, false, {}, any>;
+export default _default;

package/dist/AdminShell.d.ts

@@ -0,0 +1,29 @@
+declare function __VLS_template(): {
+    attrs: Partial<{}>;
+    slots: {
+        brand?(_: {}): any;
+        user?(_: {}): any;
+        nav?(_: {
+            collapsed: boolean;
+        }): any;
+        nav?(_: {
+            collapsed: boolean;
+            onSelect: () => void;
+        }): any;
+    };
+    refs: {
+        shellEl: HTMLDivElement;
+    };
+    rootEl: any;
+};
+type __VLS_TemplateResult = ReturnType<typeof __VLS_template>;
+declare const __VLS_component: import('vue').DefineComponent<{}, {}, {}, {}, {}, import('vue').ComponentOptionsMixin, import('vue').ComponentOptionsMixin, {}, string, import('vue').PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import('vue').ComponentProvideOptions, true, {
+    shellEl: HTMLDivElement;
+}, any>;
+declare const _default: __VLS_WithTemplateSlots<typeof __VLS_component, __VLS_TemplateResult["slots"]>;
+export default _default;
+type __VLS_WithTemplateSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};

package/dist/admin.d.ts

@@ -0,0 +1,58 @@
+import { App, ComputedRef, InjectionKey } from 'vue';
+import { Http } from './http';
+import { I18n } from './i18n';
+import { AdminModule, AdminStatus, AdminUser, Manifest, NavEntry } from './types';
+export interface AdminContext {
+    /** The panel's own backend. */
+    readonly http: Http;
+    /** Where the panel is served — the router's base. */
+    readonly basePath: string;
+    /** Where its JSON lives, so a module does not have to be told twice. */
+    readonly apiPath: string;
+    readonly state: AdminState;
+    /** The interface's own words, and the languages it can be shown in. */
+    readonly i18n: I18n;
+    /** Modules registered on the front end, whether or not the server reports them. */
+    readonly modules: readonly AdminModule[];
+    /** Navigation, in the order the server gave, for the modules that exist on both sides. */
+    readonly nav: ComputedRef<NavEntry[]>;
+    /** Ask the server what the panel is and who is signed in again. */
+    reload(): Promise<void>;
+    /**
+     * Draw the panel in another language: fetches that dictionary and remembers the choice for
+     * the next visit. Storing it against the administrator is an auth module's business — this
+     * only changes what is on screen.
+     */
+    setLocale(code: string): Promise<void>;
+    /** Filled in by an auth module; `null` means nobody is signed in. */
+    setUser(user: AdminUser | null): void;
+    /**
+     * How the panel finds out who is signed in, set by an auth module. Without one the panel
+     * simply asks for the manifest and lets a 401 answer the question.
+     */
+    useSessionLoader(loader: () => Promise<AdminUser | null>): void;
+    can(permission: string): boolean;
+}
+export interface AdminState {
+    status: AdminStatus;
+    manifest: Manifest | null;
+    user: AdminUser | null;
+    error: string | null;
+}
+export declare const adminKey: InjectionKey<AdminContext>;
+export declare function useAdmin(): AdminContext;
+/**
+ * Permissions are flattened by the server, so a check is a lookup. A super administrator
+ * carries no permissions and passes everything — the same rule as on the server, in the one
+ * place the front end asks the question.
+ */
+export declare function createAdminContext(options: {
+    http: Http;
+    basePath: string;
+    apiPath: string;
+    modules: AdminModule[];
+    i18n: I18n;
+    loadManifest: () => Promise<Manifest>;
+    loadDictionary?: (locale: string) => Promise<void>;
+}): AdminContext;
+export declare function provideAdmin(app: App, admin: AdminContext): void;

package/dist/createAdmin.d.ts

@@ -0,0 +1,66 @@
+import { App, Component } from 'vue';
+import { Router, RouteRecordRaw } from 'vue-router';
+import { AdminContext } from './admin';
+import { Http } from './http';
+import { I18n } from './i18n';
+import { AdminModule } from './types';
+export interface CreateAdminOptions {
+    /** Where to mount. Defaults to `#webx-app`, which is what the Blade shell renders. */
+    el?: string | Element;
+    /**
+     * Where the manifest lives. Defaults to the `webx-manifest` meta tag the Blade shell writes,
+     * and to `/api/cms/manifest` when there is none — which is the case under a dev server,
+     * where the page is Vite's own index.html.
+     */
+    manifestUrl?: string;
+    /**
+     * Where the panel's JSON lives, e.g. `/api/cms`. Modules build their own addresses from it.
+     * Derived from the manifest URL when not given.
+     */
+    apiPath?: string;
+    /** Sections of the panel. */
+    modules?: AdminModule[];
+    /** Routes that belong to no module: a dashboard, a 404. */
+    routes?: RouteRecordRaw[];
+    /**
+     * Where the panel is served, for the router's history base. Taken from the manifest when it
+     * arrives; given here for the first paint, before it has.
+     */
+    basePath?: string;
+    /** Replaces the panel's name in the header — a logo, usually. */
+    brand?: Component;
+    /** The corner of the header: who is signed in, and the way out. */
+    userMenu?: Component;
+    /** Extensions that need the router and the context: an auth module, most of all. */
+    plugins?: AdminPlugin[];
+    /**
+     * The language to draw the panel in before the server has been asked. Defaults to the last
+     * one used, then to the page's `lang`, then to the browser's. Whatever is chosen, the server
+     * narrows it to a language the panel actually has.
+     */
+    locale?: string;
+    /** Swappable for tests. */
+    http?: Http;
+}
+/**
+ * Something that needs the assembled panel rather than a slot in it — it adds routes, guards
+ * the router, or tells the panel how to find out who is signed in.
+ */
+export interface AdminPlugin {
+    install(admin: Admin): void;
+}
+export interface Admin {
+    app: App;
+    router: Router;
+    context: AdminContext;
+    i18n: I18n;
+    mount(): Promise<void>;
+}
+/**
+ * Assemble the panel.
+ *
+ * Mounting does not wait for the server. The manifest needs a signed-in session, so a visit
+ * that starts at the sign-in screen would otherwise stare at a blank page until a request it
+ * is bound to lose comes back.
+ */
+export declare function createAdmin(options?: CreateAdminOptions): Admin;

package/dist/http.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The panel's way of talking to its own backend.
+ *
+ * Small on purpose — it is not a general HTTP library, it is the handful of conventions
+ * `webx-ui/module-admin` and `webx-ui/module-auth` answer with: a session cookie rather than a token,
+ * 422 for a bad form, 401 for a stranger, 429 with `Retry-After` when somebody is guessing.
+ */
+export interface HttpOptions {
+    /** Prefixed to every relative path, e.g. `/api/cms`. */
+    baseUrl?: string;
+    /** Where to fetch the CSRF cookie from before an unsafe request. */
+    csrfUrl?: string;
+    /** Called whenever the server answers 401, however deep in the app the call was. */
+    onUnauthenticated?: () => void;
+    /**
+     * Headers added to every request, read at the time of the request rather than fixed when
+     * the client is made — the panel's language changes while it runs.
+     */
+    headers?: () => Record<string, string>;
+    /** Swappable for tests. */
+    fetch?: typeof globalThis.fetch;
+}
+export interface RequestOptions {
+    /** Query parameters; `undefined` and `null` are left out rather than sent empty. */
+    query?: Record<string, string | number | boolean | null | undefined>;
+    headers?: Record<string, string>;
+    signal?: AbortSignal;
+}
+/**
+ * Everything that went wrong, in the shape the panel needs to react:
+ * `errors` goes straight into `WxForm`, `retryAfter` into "try again in a moment".
+ */
+export declare class HttpError extends Error {
+    readonly status: number;
+    readonly errors: Record<string, string[]>;
+    readonly retryAfter: number | null;
+    readonly body: unknown;
+    constructor(message: string, status: number, errors?: Record<string, string[]>, retryAfter?: number | null, body?: unknown);
+    /** A failed form rather than a failed request. */
+    get isValidation(): boolean;
+    get isUnauthenticated(): boolean;
+    get isThrottled(): boolean;
+}
+export interface Http {
+    get<T>(path: string, options?: RequestOptions): Promise<T>;
+    post<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    put<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    patch<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>;
+    delete<T>(path: string, options?: RequestOptions): Promise<T>;
+}
+export declare function createHttp(options?: HttpOptions): Http;
+/**
+ * Laravel writes the token URL-encoded, and it is read back the same way it was written.
+ */
+export declare function readCookie(name: string): string | null;

package/dist/i18n.d.ts

@@ -0,0 +1,58 @@
+import { App, InjectionKey } from 'vue';
+/**
+ * One language the panel can be drawn in. Mirrors what `GET /api/cms/locales` answers with.
+ */
+export interface LocaleDescriptor {
+    code: string;
+    name: string;
+    /** The language's name in itself — what belongs in a language picker. */
+    nativeName: string;
+    direction: 'ltr' | 'rtl';
+    default: boolean;
+}
+/** A group of lines, nested as deeply as the `lang` file that produced it. */
+export type Messages = {
+    [key: string]: string | Messages;
+};
+/** Namespace → group → lines, which is the shape the server assembles. */
+export type Dictionary = Record<string, Record<string, Messages>>;
+export interface I18nState {
+    /** The language the interface is being drawn in. */
+    locale: string;
+    /** Where a missing line is looked for next. */
+    fallback: string;
+    /** Languages the interface can be switched to. */
+    panelLocales: LocaleDescriptor[];
+    /** Languages the site publishes content in — every editing screen is built around this. */
+    contentLocales: LocaleDescriptor[];
+}
+export type Translate = (key: string, params?: Record<string, string | number>) => string;
+export interface I18n {
+    readonly state: I18nState;
+    /**
+     * Strings a package ships in its own code, used until the server's dictionary arrives and
+     * for whatever the dictionary does not carry.
+     *
+     * This is what lets a package work with no server at all — a story, a test, a panel
+     * assembled by hand — and what stops a missing translation from showing a key to somebody.
+     */
+    defaults(namespace: string, messages: Record<string, Messages>): void;
+    /** Replace the dictionary with what the server sent. */
+    load(dictionary: Dictionary, locale: string, fallback?: string): void;
+    /** A `t()` bound to one namespace, so a component writes `t('shell.loading')`. */
+    scope(namespace: string): Translate;
+    /** Absolute form: `t('webx-admin::shell.loading')`. */
+    t: Translate;
+}
+export declare const i18nKey: InjectionKey<I18n>;
+export declare function useI18n(): I18n;
+/**
+ * A component that may be used outside a panel — a login card placed by hand — needs a
+ * translator either way. This gives it the package's own English when there is no panel.
+ */
+export declare function useTranslate(namespace: string): Translate;
+export declare function provideI18n(app: App, i18n: I18n): void;
+export declare function createI18n(options?: {
+    locale?: string;
+    fallback?: string;
+}): I18n;

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { createAdmin, type Admin, type AdminPlugin, type CreateAdminOptions } from './createAdmin';
+export { createAdminContext, provideAdmin, useAdmin, adminKey, type AdminContext, type AdminState, } from './admin';
+export { createI18n, provideI18n, useI18n, useTranslate, i18nKey, type Dictionary, type I18n, type I18nState, type LocaleDescriptor, type Messages, type Translate, } from './i18n';
+export { adminMessages } from './messages';
+export { createHttp, readCookie, HttpError, type Http, type HttpOptions, type RequestOptions, } from './http';
+export type { AdminModule, AdminStatus, AdminUser, Manifest, ManifestModule, NavEntry, } from './types';
+export { default as AdminShell } from './AdminShell';
+export { default as AdminNav } from './AdminNav';

package/dist/index.js

@@ -0,0 +1,540 @@
+import { inject as C, reactive as T, computed as A, defineComponent as O, resolveComponent as v, openBlock as _, createBlock as U, unref as d, withCtx as g, createElementBlock as x, Fragment as j, renderList as z, ref as M, createVNode as w, createTextVNode as R, toDisplayString as N, renderSlot as L, createCommentVNode as G, isRef as J, createApp as Q, h as k } from "vue";
+import { useRouter as Y, useRoute as Z, createRouter as ee, createWebHistory as te } from "vue-router";
+import { useResponsiveShell as ne, WxToaster as ae, WebxUI as oe, localesKey as se } from "@webx-ui/core";
+const D = /* @__PURE__ */ Symbol("webx-admin");
+function H() {
+  const e = C(D, null);
+  if (e === null)
+    throw new Error("useAdmin() was called outside a panel created by createAdmin().");
+  return e;
+}
+function le(e) {
+  const t = T({
+    status: "loading",
+    manifest: null,
+    user: null,
+    error: null
+  }), n = A(() => {
+    const s = t.manifest;
+    if (s === null)
+      return [];
+    const o = [];
+    for (const l of s.modules) {
+      const a = e.modules.find((i) => i.id === l.id);
+      if (a === void 0)
+        continue;
+      const r = a.path ?? a.routes?.[0]?.path;
+      r !== void 0 && o.push({
+        id: l.id,
+        title: l.title,
+        icon: l.icon,
+        path: r
+      });
+    }
+    return o;
+  });
+  let c = null;
+  async function u() {
+    t.status = "loading", t.error = null;
+    try {
+      if (c !== null && (t.user = await c(), t.user === null)) {
+        t.manifest = null, t.status = "unauthenticated";
+        return;
+      }
+      const s = await e.loadManifest();
+      t.manifest = s, e.i18n.state.contentLocales = s.locales ?? [], e.i18n.state.panelLocales = s.panelLocales ?? e.i18n.state.panelLocales, s.locale !== void 0 && s.locale !== e.i18n.state.locale && await f(s.locale), t.status = "ready";
+    } catch (s) {
+      if (ie(s)) {
+        t.manifest = null, t.user = null, t.status = "unauthenticated";
+        return;
+      }
+      t.error = s instanceof Error ? s.message : String(s), t.status = "error";
+    }
+  }
+  async function f(s) {
+    if (e.loadDictionary === void 0) {
+      e.i18n.state.locale = s;
+      return;
+    }
+    if (await e.loadDictionary(s), t.manifest !== null)
+      try {
+        t.manifest = await e.loadManifest();
+      } catch {
+      }
+  }
+  return {
+    http: e.http,
+    basePath: e.basePath,
+    apiPath: e.apiPath,
+    state: t,
+    i18n: e.i18n,
+    modules: e.modules,
+    nav: n,
+    reload: u,
+    setLocale: f,
+    setUser(s) {
+      t.user = s;
+    },
+    useSessionLoader(s) {
+      c = s;
+    },
+    can(s) {
+      const o = t.user;
+      return o === null ? !1 : o.isSuper || o.permissions.includes(s);
+    }
+  };
+}
+function re(e, t) {
+  e.provide(D, t);
+}
+function ie(e) {
+  return typeof e == "object" && e !== null && "status" in e && e.status === 401;
+}
+const $ = /* @__PURE__ */ Symbol("webx-i18n");
+function Re() {
+  const e = C($, null);
+  if (e === null)
+    throw new Error("useI18n() was called outside a panel created by createAdmin().");
+  return e;
+}
+function F(e) {
+  const t = C($, null);
+  return t === null ? V().scope(e) : t.scope(e);
+}
+function ce(e, t) {
+  e.provide($, t);
+}
+function V(e = {}) {
+  const t = e.fallback ?? "en", n = T({
+    locale: e.locale ?? t,
+    fallback: t,
+    panelLocales: [],
+    contentLocales: []
+  }), c = {}, u = T({ value: {} });
+  function f(o, l, a) {
+    let r = o[l]?.[a[0] ?? ""];
+    for (const i of a.slice(1)) {
+      if (typeof r != "object" || r === null)
+        return null;
+      r = r[i];
+    }
+    return typeof r == "string" ? r : null;
+  }
+  function s(o, l, a) {
+    const [r, i] = l.includes("::") ? l.split("::", 2) : [o, l], m = i.split("."), y = f(u.value, r, m) ?? f(c, r, m) ?? // Not an empty string: a key on screen is ugly, but it says which key, and a blank
+    // label says nothing to anybody trying to fix it.
+    l;
+    return a === void 0 ? y : ue(y, a);
+  }
+  return {
+    state: n,
+    defaults(o, l) {
+      c[o] = { ...c[o], ...l };
+    },
+    load(o, l, a) {
+      u.value = o ?? {}, n.locale = l ?? n.locale, a !== void 0 && (n.fallback = a);
+    },
+    scope(o) {
+      return (l, a) => s(o, l, a);
+    },
+    t: (o, l) => s("", o, l)
+  };
+}
+function ue(e, t) {
+  let n = e;
+  for (const [c, u] of Object.entries(t))
+    n = n.replaceAll(`:${c}`, String(u));
+  return n;
+}
+const de = /* @__PURE__ */ O({
+  __name: "AdminNav",
+  props: {
+    collapsed: { type: Boolean }
+  },
+  emits: ["select"],
+  setup(e, { emit: t }) {
+    const n = t, c = H(), u = F("webx-admin"), f = Y(), s = Z(), o = A({
+      get: () => c.nav.value.find((a) => s.path.startsWith(a.path))?.id ?? "",
+      set: (l) => {
+        const a = c.nav.value.find((r) => r.id === l);
+        a !== void 0 && f.push(a.path);
+      }
+    });
+    return (l, a) => {
+      const r = v("wx-menu-item"), i = v("wx-menu");
+      return _(), U(i, {
+        modelValue: o.value,
+        "onUpdate:modelValue": a[0] || (a[0] = (m) => o.value = m),
+        collapsed: e.collapsed,
+        label: d(u)("nav.sections"),
+        onSelect: a[1] || (a[1] = (m) => n("select"))
+      }, {
+        default: g(() => [
+          (_(!0), x(j, null, z(d(c).nav.value, (m) => (_(), U(r, {
+            key: m.id,
+            value: m.id,
+            icon: m.icon ?? void 0,
+            label: m.title
+          }, null, 8, ["value", "icon", "label"]))), 128))
+        ]),
+        _: 1
+      }, 8, ["modelValue", "collapsed", "label"]);
+    };
+  }
+}), fe = {
+  key: 0,
+  class: "wx-root wx-admin-plain"
+}, me = {
+  key: 1,
+  class: "wx-root wx-admin-plain"
+}, pe = {
+  key: 2,
+  class: "wx-root wx-admin-plain"
+}, he = /* @__PURE__ */ O({
+  __name: "AdminShell",
+  setup(e) {
+    const t = H(), n = F("webx-admin"), c = M(null), { layout: u, collapsed: f, showAside: s, drawerOpen: o, toggle: l, close: a } = ne(c, {
+      persist: "webx-admin-shell"
+    });
+    return (r, i) => {
+      const m = v("router-view"), y = v("wx-loading"), b = v("wx-button"), p = v("wx-result"), h = v("wx-action"), S = v("wx-text"), K = v("wx-header"), W = v("wx-aside"), q = v("wx-main"), P = v("wx-container"), B = v("wx-drawer");
+      return _(), x(j, null, [
+        w(d(ae)),
+        d(t).state.status === "unauthenticated" ? (_(), x("div", fe, [
+          w(m)
+        ])) : d(t).state.status === "loading" ? (_(), x("div", me, [
+          w(y, {
+            label: d(n)("shell.loading")
+          }, null, 8, ["label"])
+        ])) : d(t).state.status === "error" ? (_(), x("div", pe, [
+          w(p, {
+            status: "error",
+            title: d(n)("shell.error-title"),
+            description: d(t).state.error
+          }, {
+            default: g(() => [
+              w(b, {
+                type: "primary",
+                onClick: i[0] || (i[0] = (E) => d(t).reload())
+              }, {
+                default: g(() => [
+                  R(N(d(n)("shell.retry")), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          }, 8, ["title", "description"])
+        ])) : (_(), x("div", {
+          key: 3,
+          ref_key: "shellEl",
+          ref: c,
+          class: "wx-root wx-admin"
+        }, [
+          w(P, { viewport: "" }, {
+            default: g(() => [
+              w(K, null, {
+                end: g(() => [
+                  L(r.$slots, "user", {}, void 0, !0)
+                ]),
+                default: g(() => [
+                  w(h, {
+                    icon: d(u) === "drawer" ? "menu" : "sidebar",
+                    title: d(u) === "drawer" ? d(n)("nav.menu") : d(n)("nav.collapse"),
+                    onClick: d(l)
+                  }, null, 8, ["icon", "title", "onClick"]),
+                  L(r.$slots, "brand", {}, () => [
+                    w(S, { weight: "semibold" }, {
+                      default: g(() => [
+                        R(N(d(t).state.manifest?.title), 1)
+                      ]),
+                      _: 1
+                    })
+                  ], !0)
+                ]),
+                _: 3
+              }),
+              w(P, { direction: "horizontal" }, {
+                default: g(() => [
+                  d(s) ? (_(), U(W, {
+                    key: 0,
+                    collapsed: d(f),
+                    width: 220,
+                    scroll: ""
+                  }, {
+                    default: g(() => [
+                      L(r.$slots, "nav", { collapsed: d(f) }, void 0, !0)
+                    ]),
+                    _: 3
+                  }, 8, ["collapsed"])) : G("", !0),
+                  w(q, {
+                    padding: "md",
+                    scroll: "",
+                    class: "wx-admin__screen"
+                  }, {
+                    default: g(() => [
+                      w(m)
+                    ]),
+                    _: 1
+                  })
+                ]),
+                _: 3
+              })
+            ]),
+            _: 3
+          }),
+          w(B, {
+            open: d(o),
+            "onUpdate:open": i[2] || (i[2] = (E) => J(o) ? o.value = E : null),
+            title: d(n)("nav.menu"),
+            side: "left",
+            size: 260,
+            closable: ""
+          }, {
+            default: g(() => [
+              L(r.$slots, "nav", {
+                collapsed: !1,
+                onSelect: i[1] || (i[1] = //@ts-ignore
+                (...E) => d(a) && d(a)(...E))
+              }, void 0, !0)
+            ]),
+            _: 3
+          }, 8, ["open", "title"])
+        ], 512))
+      ], 64);
+    };
+  }
+}), we = (e, t) => {
+  const n = e.__vccOpts || e;
+  for (const [c, u] of t)
+    n[c] = u;
+  return n;
+}, ve = /* @__PURE__ */ we(he, [["__scopeId", "data-v-9ef35d4d"]]);
+class ge extends Error {
+  constructor(t, n, c = {}, u = null, f = null) {
+    super(t), this.status = n, this.errors = c, this.retryAfter = u, this.body = f, this.name = "HttpError";
+  }
+  status;
+  errors;
+  retryAfter;
+  body;
+  /** A failed form rather than a failed request. */
+  get isValidation() {
+    return this.status === 422;
+  }
+  get isUnauthenticated() {
+    return this.status === 401;
+  }
+  get isThrottled() {
+    return this.status === 429;
+  }
+}
+const ye = /* @__PURE__ */ new Set(["POST", "PUT", "PATCH", "DELETE"]);
+function _e(e = {}) {
+  const t = (e.baseUrl ?? "").replace(/\/$/, ""), n = e.csrfUrl ?? "/sanctum/csrf-cookie", c = e.fetch ?? globalThis.fetch.bind(globalThis), u = e.onUnauthenticated, f = e.headers;
+  let s = !1;
+  async function o(a = !1) {
+    s && !a && I("XSRF-TOKEN") !== null || (await c(n, { credentials: "same-origin" }), s = !0);
+  }
+  async function l(a, r, i, m = {}, y = !1) {
+    const b = ye.has(a);
+    b && await o();
+    const p = {
+      Accept: "application/json",
+      "X-Requested-With": "XMLHttpRequest",
+      // Standing headers first, so a caller can still override one for a single request.
+      ...f?.(),
+      ...m.headers
+    };
+    if (b) {
+      const S = I("XSRF-TOKEN");
+      S !== null && (p["X-XSRF-TOKEN"] = S);
+    }
+    i !== void 0 && (p["Content-Type"] = "application/json");
+    const h = await c(xe(t, r, m.query), {
+      method: a,
+      credentials: "same-origin",
+      headers: p,
+      signal: m.signal,
+      body: i === void 0 ? void 0 : JSON.stringify(i)
+    });
+    if (h.status === 419 && b && !y)
+      return await o(!0), l(a, r, i, m, !0);
+    if (h.status === 401 && u?.(), !h.ok)
+      throw await be(h);
+    if (h.status !== 204)
+      return await h.json();
+  }
+  return {
+    get: (a, r) => l("GET", a, void 0, r),
+    post: (a, r, i) => l("POST", a, r, i),
+    put: (a, r, i) => l("PUT", a, r, i),
+    patch: (a, r, i) => l("PATCH", a, r, i),
+    delete: (a, r) => l("DELETE", a, void 0, r)
+  };
+}
+async function be(e) {
+  let t = null;
+  try {
+    t = await e.json();
+  } catch {
+  }
+  const n = t ?? {}, c = typeof n.message == "string" && n.message !== "" ? n.message : e.statusText || `Request failed with ${e.status}`, u = n.errors !== null && typeof n.errors == "object" ? n.errors : {}, f = e.headers.get("Retry-After"), s = f === null ? null : Number.parseInt(f, 10);
+  return new ge(
+    c,
+    e.status,
+    u,
+    Number.isFinite(s) ? s : null,
+    t
+  );
+}
+function xe(e, t, n) {
+  const u = /^https?:\/\//i.test(t) ? t : `${e}/${t.replace(/^\//, "")}`;
+  if (n === void 0)
+    return u;
+  const f = new URLSearchParams();
+  for (const [o, l] of Object.entries(n))
+    l != null && f.set(o, String(l));
+  const s = f.toString();
+  return s === "" ? u : `${u}${u.includes("?") ? "&" : "?"}${s}`;
+}
+function I(e) {
+  if (typeof document > "u")
+    return null;
+  for (const t of document.cookie.split(";")) {
+    const [n, ...c] = t.trim().split("=");
+    if (n === e)
+      return decodeURIComponent(c.join("="));
+  }
+  return null;
+}
+const Se = {
+  shell: {
+    loading: "Loading the panel…",
+    "error-title": "The panel could not start",
+    retry: "Try again",
+    "empty-title": "Nothing is installed yet",
+    "empty-description": "This panel has no modules. Install one and it will appear here."
+  },
+  nav: {
+    sections: "Sections",
+    menu: "Menu",
+    collapse: "Collapse the menu",
+    language: "Language"
+  }
+}, X = "webx.locale";
+function Ne(e = {}) {
+  const t = e.manifestUrl ?? Ue() ?? "/api/cms/manifest", n = e.apiPath ?? t.replace(/\/manifest\/?$/, ""), c = e.basePath ?? "/cms", u = e.modules ?? [], f = [...e.routes ?? []];
+  for (const p of u)
+    f.push(...p.routes ?? []);
+  const s = ee({
+    history: te(c),
+    routes: f
+  }), o = V({ locale: e.locale ?? Le() }), l = e.http ?? _e({
+    baseUrl: "",
+    onUnauthenticated: () => {
+      r.setUser(null), r.state.status = "unauthenticated";
+    },
+    // Every request says which language the panel is currently showing. It decides what
+    // the server writes its own messages in — a 422 under a field — for anybody who has
+    // not stored a preference yet, which is everybody until they choose one. Without it,
+    // signing in on a Russian sign-in screen lands in an English panel.
+    headers: () => ({ "X-Webx-Locale": o.state.locale })
+  });
+  o.defaults("webx-admin", Se);
+  async function a(p) {
+    const h = await l.get(`${n}/translations/${p}`);
+    o.load(h.data.namespaces, h.data.locale, h.data.fallback), ke(h.data.locale), Te(h.data.locale, o.state.panelLocales);
+  }
+  const r = le({
+    http: l,
+    basePath: c,
+    apiPath: n,
+    modules: u,
+    i18n: o,
+    loadDictionary: a,
+    loadManifest: async () => (await l.get(t)).data
+  }), i = Q(Ee(e));
+  i.use(oe), re(i, r), ce(i, o);
+  const m = M("");
+  i.provide(se, {
+    list: A(
+      () => o.state.contentLocales.map((p) => ({
+        code: p.code,
+        label: p.code.toUpperCase()
+      }))
+    ),
+    active: A({
+      get: () => m.value || (o.state.contentLocales[0]?.code ?? ""),
+      set: (p) => {
+        m.value = p;
+      }
+    })
+  });
+  const y = {
+    app: i,
+    router: s,
+    context: r,
+    i18n: o,
+    async mount() {
+      await Promise.all([b(), a(o.state.locale)]).catch(() => {
+      }), i.mount(e.el ?? "#webx-app"), await r.reload();
+    }
+  };
+  async function b() {
+    const p = await l.get(`${n}/locales`);
+    o.state.panelLocales = p.data.panel, o.state.contentLocales = p.data.content;
+  }
+  for (const p of e.plugins ?? [])
+    p.install(y);
+  return i.use(s), y;
+}
+function Ee(e) {
+  const t = {
+    // The menu is the panel's own: it is the manifest, drawn.
+    nav: (n) => k(de, { collapsed: n.collapsed === !0 })
+  };
+  return e.brand !== void 0 && (t.brand = () => k(e.brand)), e.userMenu !== void 0 && (t.user = () => k(e.userMenu)), { render: () => k(ve, null, t) };
+}
+function Le() {
+  const e = Ae(X);
+  return e !== null ? e : typeof document < "u" && document.documentElement.lang !== "" ? document.documentElement.lang : typeof navigator > "u" ? "en" : navigator.language;
+}
+function ke(e) {
+  try {
+    localStorage.setItem(X, e);
+  } catch {
+  }
+}
+function Ae(e) {
+  try {
+    return localStorage.getItem(e);
+  } catch {
+    return null;
+  }
+}
+function Te(e, t) {
+  typeof document > "u" || (document.documentElement.lang = e, document.documentElement.dir = t.find((n) => n.code === e)?.direction ?? "ltr");
+}
+function Ue() {
+  return typeof document > "u" ? null : document.querySelector('meta[name="webx-manifest"]')?.getAttribute("content") ?? null;
+}
+export {
+  de as AdminNav,
+  ve as AdminShell,
+  ge as HttpError,
+  D as adminKey,
+  Se as adminMessages,
+  Ne as createAdmin,
+  le as createAdminContext,
+  _e as createHttp,
+  V as createI18n,
+  $ as i18nKey,
+  re as provideAdmin,
+  ce as provideI18n,
+  I as readCookie,
+  H as useAdmin,
+  Re as useI18n,
+  F as useTranslate
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../src/admin.ts","../src/i18n.ts","../src/AdminNav.vue","../src/AdminShell.vue","../src/http.ts","../src/messages.ts","../src/createAdmin.ts"],"sourcesContent":["import { computed, inject, reactive, type App, type ComputedRef, type InjectionKey } from 'vue'\nimport type { Http } from './http'\nimport type { I18n } from './i18n'\nimport type { AdminModule, AdminStatus, AdminUser, Manifest, NavEntry } from './types'\n\nexport interface AdminContext {\n  /** The panel's own backend. */\n  readonly http: Http\n  /** Where the panel is served — the router's base. */\n  readonly basePath: string\n  /** Where its JSON lives, so a module does not have to be told twice. */\n  readonly apiPath: string\n  readonly state: AdminState\n  /** The interface's own words, and the languages it can be shown in. */\n  readonly i18n: I18n\n  /** Modules registered on the front end, whether or not the server reports them. */\n  readonly modules: readonly AdminModule[]\n  /** Navigation, in the order the server gave, for the modules that exist on both sides. */\n  readonly nav: ComputedRef<NavEntry[]>\n  /** Ask the server what the panel is and who is signed in again. */\n  reload(): Promise<void>\n  /**\n   * Draw the panel in another language: fetches that dictionary and remembers the choice for\n   * the next visit. Storing it against the administrator is an auth module's business — this\n   * only changes what is on screen.\n   */\n  setLocale(code: string): Promise<void>\n  /** Filled in by an auth module; `null` means nobody is signed in. */\n  setUser(user: AdminUser | null): void\n  /**\n   * How the panel finds out who is signed in, set by an auth module. Without one the panel\n   * simply asks for the manifest and lets a 401 answer the question.\n   */\n  useSessionLoader(loader: () => Promise<AdminUser | null>): void\n  can(permission: string): boolean\n}\n\nexport interface AdminState {\n  status: AdminStatus\n  manifest: Manifest | null\n  user: AdminUser | null\n  error: string | null\n}\n\nexport const adminKey: InjectionKey<AdminContext> = Symbol('webx-admin')\n\nexport function useAdmin(): AdminContext {\n  const admin = inject(adminKey, null)\n\n  if (admin === null) {\n    throw new Error('useAdmin() was called outside a panel created by createAdmin().')\n  }\n\n  return admin\n}\n\n/**\n * Permissions are flattened by the server, so a check is a lookup. A super administrator\n * carries no permissions and passes everything — the same rule as on the server, in the one\n * place the front end asks the question.\n */\nexport function createAdminContext(options: {\n  http: Http\n  basePath: string\n  apiPath: string\n  modules: AdminModule[]\n  i18n: I18n\n  loadManifest: () => Promise<Manifest>\n  loadDictionary?: (locale: string) => Promise<void>\n}): AdminContext {\n  const state = reactive<AdminState>({\n    status: 'loading',\n    manifest: null,\n    user: null,\n    error: null,\n  })\n\n  const nav = computed<NavEntry[]>(() => {\n    const manifest = state.manifest\n\n    if (manifest === null) {\n      return []\n    }\n\n    const entries: NavEntry[] = []\n\n    for (const module of manifest.modules) {\n      const registered = options.modules.find((candidate) => candidate.id === module.id)\n\n      // A module the server has and the front end does not is not a bug worth shouting\n      // about — the panel is assembled from two halves and they are deployed separately —\n      // but it has nowhere to send anybody, so it stays out of the menu.\n      if (registered === undefined) {\n        continue\n      }\n\n      const path = registered.path ?? registered.routes?.[0]?.path\n\n      if (path === undefined) {\n        continue\n      }\n\n      entries.push({\n        id: module.id,\n        title: module.title,\n        icon: module.icon,\n        path,\n      })\n    }\n\n    return entries\n  })\n\n  let loadSession: (() => Promise<AdminUser | null>) | null = null\n\n  async function reload(): Promise<void> {\n    state.status = 'loading'\n    state.error = null\n\n    try {\n      if (loadSession !== null) {\n        state.user = await loadSession()\n\n        // Asking for the manifest as a stranger would only produce the 401 we already know\n        // about, and a spurious one in the network log for whoever is debugging.\n        if (state.user === null) {\n          state.manifest = null\n          state.status = 'unauthenticated'\n\n          return\n        }\n      }\n\n      const manifest = await options.loadManifest()\n\n      state.manifest = manifest\n      options.i18n.state.contentLocales = manifest.locales ?? []\n      options.i18n.state.panelLocales = manifest.panelLocales ?? options.i18n.state.panelLocales\n\n      // The administrator's own choice, which the sign-in screen had no way of knowing: it\n      // drew itself in whatever the browser asked for.\n      if (manifest.locale !== undefined && manifest.locale !== options.i18n.state.locale) {\n        await setLocale(manifest.locale)\n      }\n\n      state.status = 'ready'\n    } catch (error) {\n      // 401 is not a failure: it is the panel finding out nobody is signed in, which is the\n      // normal way a visit starts.\n      if (isUnauthenticated(error)) {\n        state.manifest = null\n        state.user = null\n        state.status = 'unauthenticated'\n\n        return\n      }\n\n      state.error = error instanceof Error ? error.message : String(error)\n      state.status = 'error'\n    }\n  }\n\n  async function setLocale(code: string): Promise<void> {\n    if (options.loadDictionary === undefined) {\n      options.i18n.state.locale = code\n\n      return\n    }\n\n    await options.loadDictionary(code)\n\n    // The dictionary is not the whole of the interface. Section titles are translated on the\n    // server and travel inside the manifest, which was fetched in the previous language — so\n    // without this the panel switches everything except its own navigation, and the sidebar\n    // goes on naming the section in the language nobody is reading any more until the page is\n    // reloaded. Only worth doing once there is a manifest to replace: during the first load\n    // the caller is `reload()` itself, which is about to fetch one.\n    if (state.manifest !== null) {\n      try {\n        state.manifest = await options.loadManifest()\n      } catch {\n        // A manifest that will not come back is `reload()`'s problem to report. The language\n        // did change, and a stale section title is not worth throwing away a working panel.\n      }\n    }\n  }\n\n  return {\n    http: options.http,\n    basePath: options.basePath,\n    apiPath: options.apiPath,\n    state,\n    i18n: options.i18n,\n    modules: options.modules,\n    nav,\n    reload,\n    setLocale,\n    setUser(user) {\n      state.user = user\n    },\n    useSessionLoader(loader) {\n      loadSession = loader\n    },\n    can(permission) {\n      const user = state.user\n\n      if (user === null) {\n        return false\n      }\n\n      return user.isSuper || user.permissions.includes(permission)\n    },\n  }\n}\n\nexport function provideAdmin(app: App, admin: AdminContext): void {\n  app.provide(adminKey, admin)\n}\n\nfunction isUnauthenticated(error: unknown): boolean {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'status' in error &&\n    (error as { status: unknown }).status === 401\n  )\n}\n","import { inject, reactive, type App, type InjectionKey } from 'vue'\n\n/**\n * One language the panel can be drawn in. Mirrors what `GET /api/cms/locales` answers with.\n */\nexport interface LocaleDescriptor {\n  code: string\n  name: string\n  /** The language's name in itself — what belongs in a language picker. */\n  nativeName: string\n  direction: 'ltr' | 'rtl'\n  default: boolean\n}\n\n/** A group of lines, nested as deeply as the `lang` file that produced it. */\nexport type Messages = { [key: string]: string | Messages }\n\n/** Namespace → group → lines, which is the shape the server assembles. */\nexport type Dictionary = Record<string, Record<string, Messages>>\n\nexport interface I18nState {\n  /** The language the interface is being drawn in. */\n  locale: string\n  /** Where a missing line is looked for next. */\n  fallback: string\n  /** Languages the interface can be switched to. */\n  panelLocales: LocaleDescriptor[]\n  /** Languages the site publishes content in — every editing screen is built around this. */\n  contentLocales: LocaleDescriptor[]\n}\n\nexport type Translate = (key: string, params?: Record<string, string | number>) => string\n\nexport interface I18n {\n  readonly state: I18nState\n  /**\n   * Strings a package ships in its own code, used until the server's dictionary arrives and\n   * for whatever the dictionary does not carry.\n   *\n   * This is what lets a package work with no server at all — a story, a test, a panel\n   * assembled by hand — and what stops a missing translation from showing a key to somebody.\n   */\n  defaults(namespace: string, messages: Record<string, Messages>): void\n  /** Replace the dictionary with what the server sent. */\n  load(dictionary: Dictionary, locale: string, fallback?: string): void\n  /** A `t()` bound to one namespace, so a component writes `t('shell.loading')`. */\n  scope(namespace: string): Translate\n  /** Absolute form: `t('webx-admin::shell.loading')`. */\n  t: Translate\n}\n\nexport const i18nKey: InjectionKey<I18n> = Symbol('webx-i18n')\n\nexport function useI18n(): I18n {\n  const i18n = inject(i18nKey, null)\n\n  if (i18n === null) {\n    throw new Error('useI18n() was called outside a panel created by createAdmin().')\n  }\n\n  return i18n\n}\n\n/**\n * A component that may be used outside a panel — a login card placed by hand — needs a\n * translator either way. This gives it the package's own English when there is no panel.\n */\nexport function useTranslate(namespace: string): Translate {\n  const i18n = inject(i18nKey, null)\n\n  return i18n === null ? createI18n().scope(namespace) : i18n.scope(namespace)\n}\n\nexport function provideI18n(app: App, i18n: I18n): void {\n  app.provide(i18nKey, i18n)\n}\n\nexport function createI18n(options: { locale?: string; fallback?: string } = {}): I18n {\n  const fallback = options.fallback ?? 'en'\n\n  const state = reactive<I18nState>({\n    locale: options.locale ?? fallback,\n    fallback,\n    panelLocales: [],\n    contentLocales: [],\n  })\n\n  // Kept apart from the dictionary rather than merged into it: the server's answer is\n  // replaced wholesale on every language change, and built-in strings have to survive that.\n  const builtIn: Dictionary = {}\n  const dictionary = reactive<{ value: Dictionary }>({ value: {} })\n\n  function lookup(source: Dictionary, namespace: string, path: string[]): string | null {\n    let node: string | Messages | undefined = source[namespace]?.[path[0] ?? '']\n\n    for (const segment of path.slice(1)) {\n      if (typeof node !== 'object' || node === null) {\n        return null\n      }\n\n      node = node[segment]\n    }\n\n    return typeof node === 'string' ? node : null\n  }\n\n  function translate(\n    namespace: string,\n    key: string,\n    params?: Record<string, string | number>,\n  ): string {\n    // An absolute key wins, so one namespace can borrow a line from another without a second\n    // translator.\n    const [explicitNamespace, rest] = key.includes('::')\n      ? (key.split('::', 2) as [string, string])\n      : [namespace, key]\n\n    const path = rest.split('.')\n\n    const line =\n      lookup(dictionary.value, explicitNamespace, path) ??\n      lookup(builtIn, explicitNamespace, path) ??\n      // Not an empty string: a key on screen is ugly, but it says which key, and a blank\n      // label says nothing to anybody trying to fix it.\n      key\n\n    return params === undefined ? line : fill(line, params)\n  }\n\n  return {\n    state,\n    defaults(namespace, messages) {\n      builtIn[namespace] = { ...builtIn[namespace], ...messages }\n    },\n    load(next, locale, nextFallback) {\n      // Guarded rather than trusted: an answer that is not the shape expected should leave\n      // the panel in English, not without any words at all.\n      dictionary.value = next ?? {}\n      state.locale = locale ?? state.locale\n\n      if (nextFallback !== undefined) {\n        state.fallback = nextFallback\n      }\n    },\n    scope(namespace) {\n      return (key, params) => translate(namespace, key, params)\n    },\n    t: (key, params) => translate('', key, params),\n  }\n}\n\n/**\n * `:name` placeholders, the way Laravel writes them — the strings come from its `lang` files,\n * so they should read the same on both sides.\n */\nfunction fill(line: string, params: Record<string, string | number>): string {\n  let filled = line\n\n  for (const [name, value] of Object.entries(params)) {\n    filled = filled.replaceAll(`:${name}`, String(value))\n  }\n\n  return filled\n}\n","<script setup lang=\"ts\">\nimport { computed } from 'vue'\nimport { useRoute, useRouter } from 'vue-router'\nimport { useAdmin } from './admin'\nimport { useTranslate } from './i18n'\n\n/**\n * The menu, built from the manifest rather than written out. What the panel offers is what the\n * installation actually has — adding a module on the server and installing its front end is\n * the whole of \"adding a section\".\n */\ndefineProps<{ collapsed?: boolean }>()\n\nconst emit = defineEmits<{ select: [] }>()\n\nconst admin = useAdmin()\nconst t = useTranslate('webx-admin')\nconst router = useRouter()\nconst route = useRoute()\n\nconst current = computed<string>({\n  get: () => {\n    const match = admin.nav.value.find((entry) => route.path.startsWith(entry.path))\n\n    return match?.id ?? ''\n  },\n  set: (id) => {\n    const entry = admin.nav.value.find((candidate) => candidate.id === id)\n\n    if (entry !== undefined) {\n      void router.push(entry.path)\n    }\n  },\n})\n</script>\n\n<template>\n  <wx-menu\n    v-model=\"current\"\n    :collapsed=\"collapsed\"\n    :label=\"t('nav.sections')\"\n    @select=\"emit('select')\"\n  >\n    <wx-menu-item\n      v-for=\"entry in admin.nav.value\"\n      :key=\"entry.id\"\n      :value=\"entry.id\"\n      :icon=\"entry.icon ?? undefined\"\n      :label=\"entry.title\"\n    />\n  </wx-menu>\n</template>\n","<script setup lang=\"ts\">\nimport { ref } from 'vue'\nimport { useResponsiveShell, WxToaster } from '@webx-ui/core'\nimport { useAdmin } from './admin'\nimport { useTranslate } from './i18n'\n\n/**\n * The panel around the screen: navigation built from the manifest, a header, and the hole the\n * router fills.\n *\n * Three shapes, chosen by the width of the shell rather than the window: the full sidebar on a\n * desktop, an icon rail on a tablet, a drawer behind a burger on a phone.\n *\n * It draws nothing until the manifest has arrived, and nothing but the route while nobody is\n * signed in — the sign-in screen is a route like any other, and it has no business being\n * wrapped in a menu of sections the visitor cannot reach.\n */\nconst admin = useAdmin()\nconst t = useTranslate('webx-admin')\nconst shellEl = ref<HTMLElement | null>(null)\n\nconst { layout, collapsed, showAside, drawerOpen, toggle, close } = useResponsiveShell(shellEl, {\n  persist: 'webx-admin-shell',\n})\n</script>\n\n<template>\n  <wx-toaster />\n\n  <div v-if=\"admin.state.status === 'unauthenticated'\" class=\"wx-root wx-admin-plain\">\n    <router-view />\n  </div>\n\n  <div v-else-if=\"admin.state.status === 'loading'\" class=\"wx-root wx-admin-plain\">\n    <wx-loading :label=\"t('shell.loading')\" />\n  </div>\n\n  <div v-else-if=\"admin.state.status === 'error'\" class=\"wx-root wx-admin-plain\">\n    <wx-result status=\"error\" :title=\"t('shell.error-title')\" :description=\"admin.state.error\">\n      <wx-button type=\"primary\" @click=\"admin.reload()\">{{ t('shell.retry') }}</wx-button>\n    </wx-result>\n  </div>\n\n  <div v-else ref=\"shellEl\" class=\"wx-root wx-admin\">\n    <wx-container viewport>\n      <wx-header>\n        <wx-action\n          :icon=\"layout === 'drawer' ? 'menu' : 'sidebar'\"\n          :title=\"layout === 'drawer' ? t('nav.menu') : t('nav.collapse')\"\n          @click=\"toggle\"\n        />\n\n        <slot name=\"brand\">\n          <wx-text weight=\"semibold\">{{ admin.state.manifest?.title }}</wx-text>\n        </slot>\n\n        <template #end>\n          <slot name=\"user\" />\n        </template>\n      </wx-header>\n\n      <wx-container direction=\"horizontal\">\n        <wx-aside v-if=\"showAside\" :collapsed=\"collapsed\" :width=\"220\" scroll>\n          <slot name=\"nav\" :collapsed=\"collapsed\" />\n        </wx-aside>\n\n        <wx-main padding=\"md\" scroll class=\"wx-admin__screen\">\n          <router-view />\n        </wx-main>\n      </wx-container>\n    </wx-container>\n\n    <wx-drawer v-model:open=\"drawerOpen\" :title=\"t('nav.menu')\" side=\"left\" :size=\"260\" closable>\n      <slot name=\"nav\" :collapsed=\"false\" @select=\"close\" />\n    </wx-drawer>\n  </div>\n</template>\n\n<style scoped>\n.wx-admin {\n  height: 100dvh;\n}\n\n.wx-admin__screen {\n  min-width: 0;\n  min-height: 0;\n}\n\n/* The states with no shell around them: sign-in, loading, and the one where the panel could\n   not start. Each is a single thing in the middle of an empty page. */\n.wx-admin-plain {\n  display: grid;\n  place-items: center;\n  /* Without this the padding is added to the viewport height and the page scrolls by exactly\n     the padding. */\n  box-sizing: border-box;\n  min-height: 100dvh;\n  padding: var(--wx-space-16);\n  background: var(--wx-bg-body);\n}\n</style>\n\n<style>\n/* Not scoped, and global on purpose: the panel is the whole page, so the browser default\n   margin on <body> shows up as a gap around the shell and puts a scrollbar under a column\n   that is exactly one viewport tall. */\nhtml:has(> body > #webx-app),\nbody:has(> #webx-app) {\n  margin: 0;\n}\n</style>\n","/**\n * The panel's way of talking to its own backend.\n *\n * Small on purpose — it is not a general HTTP library, it is the handful of conventions\n * `webx-ui/module-admin` and `webx-ui/module-auth` answer with: a session cookie rather than a token,\n * 422 for a bad form, 401 for a stranger, 429 with `Retry-After` when somebody is guessing.\n */\n\nexport interface HttpOptions {\n  /** Prefixed to every relative path, e.g. `/api/cms`. */\n  baseUrl?: string\n  /** Where to fetch the CSRF cookie from before an unsafe request. */\n  csrfUrl?: string\n  /** Called whenever the server answers 401, however deep in the app the call was. */\n  onUnauthenticated?: () => void\n  /**\n   * Headers added to every request, read at the time of the request rather than fixed when\n   * the client is made — the panel's language changes while it runs.\n   */\n  headers?: () => Record<string, string>\n  /** Swappable for tests. */\n  fetch?: typeof globalThis.fetch\n}\n\nexport interface RequestOptions {\n  /** Query parameters; `undefined` and `null` are left out rather than sent empty. */\n  query?: Record<string, string | number | boolean | null | undefined>\n  headers?: Record<string, string>\n  signal?: AbortSignal\n}\n\n/**\n * Everything that went wrong, in the shape the panel needs to react:\n * `errors` goes straight into `WxForm`, `retryAfter` into \"try again in a moment\".\n */\nexport class HttpError extends Error {\n  constructor(\n    message: string,\n    readonly status: number,\n    readonly errors: Record<string, string[]> = {},\n    readonly retryAfter: number | null = null,\n    readonly body: unknown = null,\n  ) {\n    super(message)\n    this.name = 'HttpError'\n  }\n\n  /** A failed form rather than a failed request. */\n  get isValidation(): boolean {\n    return this.status === 422\n  }\n\n  get isUnauthenticated(): boolean {\n    return this.status === 401\n  }\n\n  get isThrottled(): boolean {\n    return this.status === 429\n  }\n}\n\nexport interface Http {\n  get<T>(path: string, options?: RequestOptions): Promise<T>\n  post<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>\n  put<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>\n  patch<T>(path: string, body?: unknown, options?: RequestOptions): Promise<T>\n  delete<T>(path: string, options?: RequestOptions): Promise<T>\n}\n\nconst UNSAFE = new Set(['POST', 'PUT', 'PATCH', 'DELETE'])\n\nexport function createHttp(options: HttpOptions = {}): Http {\n  const baseUrl = (options.baseUrl ?? '').replace(/\\/$/, '')\n  const csrfUrl = options.csrfUrl ?? '/sanctum/csrf-cookie'\n  const doFetch = options.fetch ?? globalThis.fetch.bind(globalThis)\n  const onUnauthenticated = options.onUnauthenticated\n  const standingHeaders = options.headers\n\n  let csrfFetched = false\n\n  async function ensureCsrfCookie(force = false): Promise<void> {\n    if (csrfFetched && !force && readCookie('XSRF-TOKEN') !== null) {\n      return\n    }\n\n    await doFetch(csrfUrl, { credentials: 'same-origin' })\n    csrfFetched = true\n  }\n\n  async function request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    options: RequestOptions = {},\n    retried = false,\n  ): Promise<T> {\n    const unsafe = UNSAFE.has(method)\n\n    if (unsafe) {\n      await ensureCsrfCookie()\n    }\n\n    const headers: Record<string, string> = {\n      Accept: 'application/json',\n      'X-Requested-With': 'XMLHttpRequest',\n      // Standing headers first, so a caller can still override one for a single request.\n      ...standingHeaders?.(),\n      ...options.headers,\n    }\n\n    if (unsafe) {\n      const token = readCookie('XSRF-TOKEN')\n\n      if (token !== null) {\n        headers['X-XSRF-TOKEN'] = token\n      }\n    }\n\n    if (body !== undefined) {\n      headers['Content-Type'] = 'application/json'\n    }\n\n    const response = await doFetch(url(baseUrl, path, options.query), {\n      method,\n      credentials: 'same-origin',\n      headers,\n      signal: options.signal,\n      body: body === undefined ? undefined : JSON.stringify(body),\n    })\n\n    // 419 is Laravel for \"your CSRF token has gone stale\", which happens after a session is\n    // regenerated — at sign-in, most of all. Fetching a fresh one and going again is what a\n    // person would do by reloading, without the reload.\n    if (response.status === 419 && unsafe && !retried) {\n      await ensureCsrfCookie(true)\n\n      return request<T>(method, path, body, options, true)\n    }\n\n    if (response.status === 401) {\n      onUnauthenticated?.()\n    }\n\n    if (!response.ok) {\n      throw await toError(response)\n    }\n\n    if (response.status === 204) {\n      return undefined as T\n    }\n\n    return (await response.json()) as T\n  }\n\n  return {\n    get: (path, options) => request('GET', path, undefined, options),\n    post: (path, body, options) => request('POST', path, body, options),\n    put: (path, body, options) => request('PUT', path, body, options),\n    patch: (path, body, options) => request('PATCH', path, body, options),\n    delete: (path, options) => request('DELETE', path, undefined, options),\n  }\n}\n\nasync function toError(response: Response): Promise<HttpError> {\n  let body: unknown = null\n\n  try {\n    body = await response.json()\n  } catch {\n    // A gateway or a fatal error answers with HTML; there is nothing to read out of it.\n  }\n\n  const payload = (body ?? {}) as { message?: unknown; errors?: unknown }\n  const message =\n    typeof payload.message === 'string' && payload.message !== ''\n      ? payload.message\n      : response.statusText || `Request failed with ${response.status}`\n\n  const errors =\n    payload.errors !== null && typeof payload.errors === 'object'\n      ? (payload.errors as Record<string, string[]>)\n      : {}\n\n  const header = response.headers.get('Retry-After')\n  const retryAfter = header === null ? null : Number.parseInt(header, 10)\n\n  return new HttpError(\n    message,\n    response.status,\n    errors,\n    Number.isFinite(retryAfter) ? retryAfter : null,\n    body,\n  )\n}\n\nfunction url(baseUrl: string, path: string, query?: RequestOptions['query']): string {\n  const absolute = /^https?:\\/\\//i.test(path)\n  const full = absolute ? path : `${baseUrl}/${path.replace(/^\\//, '')}`\n\n  if (query === undefined) {\n    return full\n  }\n\n  const search = new URLSearchParams()\n\n  for (const [key, value] of Object.entries(query)) {\n    if (value !== undefined && value !== null) {\n      search.set(key, String(value))\n    }\n  }\n\n  const serialised = search.toString()\n\n  return serialised === '' ? full : `${full}${full.includes('?') ? '&' : '?'}${serialised}`\n}\n\n/**\n * Laravel writes the token URL-encoded, and it is read back the same way it was written.\n */\nexport function readCookie(name: string): string | null {\n  if (typeof document === 'undefined') {\n    return null\n  }\n\n  for (const part of document.cookie.split(';')) {\n    const [key, ...rest] = part.trim().split('=')\n\n    if (key === name) {\n      return decodeURIComponent(rest.join('='))\n    }\n  }\n\n  return null\n}\n","import type { Messages } from './i18n'\n\n/**\n * The panel's own words, in English.\n *\n * The same keys `webx-ui/module-admin` ships as `lang/en/*.php`, kept here so the package works with\n * no server behind it. Anything the server sends wins; this is the floor, not the source of\n * truth. Translations belong in the Composer package, where one file serves both halves.\n */\nexport const adminMessages: Record<string, Messages> = {\n  shell: {\n    loading: 'Loading the panel…',\n    'error-title': 'The panel could not start',\n    retry: 'Try again',\n    'empty-title': 'Nothing is installed yet',\n    'empty-description': 'This panel has no modules. Install one and it will appear here.',\n  },\n  nav: {\n    sections: 'Sections',\n    menu: 'Menu',\n    collapse: 'Collapse the menu',\n    language: 'Language',\n  },\n}\n","import { computed, createApp, h, ref, type App, type Component } from 'vue'\nimport { createRouter, createWebHistory, type Router, type RouteRecordRaw } from 'vue-router'\nimport { localesKey, WebxUI, type LocaleOption } from '@webx-ui/core'\nimport AdminNav from './AdminNav.vue'\nimport AdminShell from './AdminShell.vue'\nimport { createAdminContext, provideAdmin, type AdminContext } from './admin'\nimport { createHttp, type Http } from './http'\nimport { createI18n, provideI18n, type Dictionary, type I18n, type LocaleDescriptor } from './i18n'\nimport { adminMessages } from './messages'\nimport type { AdminModule, Manifest } from './types'\n\nconst STORED_LOCALE = 'webx.locale'\n\nexport interface CreateAdminOptions {\n  /** Where to mount. Defaults to `#webx-app`, which is what the Blade shell renders. */\n  el?: string | Element\n  /**\n   * Where the manifest lives. Defaults to the `webx-manifest` meta tag the Blade shell writes,\n   * and to `/api/cms/manifest` when there is none — which is the case under a dev server,\n   * where the page is Vite's own index.html.\n   */\n  manifestUrl?: string\n  /**\n   * Where the panel's JSON lives, e.g. `/api/cms`. Modules build their own addresses from it.\n   * Derived from the manifest URL when not given.\n   */\n  apiPath?: string\n  /** Sections of the panel. */\n  modules?: AdminModule[]\n  /** Routes that belong to no module: a dashboard, a 404. */\n  routes?: RouteRecordRaw[]\n  /**\n   * Where the panel is served, for the router's history base. Taken from the manifest when it\n   * arrives; given here for the first paint, before it has.\n   */\n  basePath?: string\n  /** Replaces the panel's name in the header — a logo, usually. */\n  brand?: Component\n  /** The corner of the header: who is signed in, and the way out. */\n  userMenu?: Component\n  /** Extensions that need the router and the context: an auth module, most of all. */\n  plugins?: AdminPlugin[]\n  /**\n   * The language to draw the panel in before the server has been asked. Defaults to the last\n   * one used, then to the page's `lang`, then to the browser's. Whatever is chosen, the server\n   * narrows it to a language the panel actually has.\n   */\n  locale?: string\n  /** Swappable for tests. */\n  http?: Http\n}\n\n/**\n * Something that needs the assembled panel rather than a slot in it — it adds routes, guards\n * the router, or tells the panel how to find out who is signed in.\n */\nexport interface AdminPlugin {\n  install(admin: Admin): void\n}\n\nexport interface Admin {\n  app: App\n  router: Router\n  context: AdminContext\n  i18n: I18n\n  mount(): Promise<void>\n}\n\n/**\n * Assemble the panel.\n *\n * Mounting does not wait for the server. The manifest needs a signed-in session, so a visit\n * that starts at the sign-in screen would otherwise stare at a blank page until a request it\n * is bound to lose comes back.\n */\nexport function createAdmin(options: CreateAdminOptions = {}): Admin {\n  const manifestUrl = options.manifestUrl ?? readManifestUrl() ?? '/api/cms/manifest'\n  // The Blade shell writes the manifest address rather than the API root, and every module\n  // needs the root, so it is read back out of the one thing the page does say.\n  const apiPath = options.apiPath ?? manifestUrl.replace(/\\/manifest\\/?$/, '')\n  const basePath = options.basePath ?? '/cms'\n  const modules = options.modules ?? []\n\n  const routes: RouteRecordRaw[] = [...(options.routes ?? [])]\n\n  for (const module of modules) {\n    routes.push(...(module.routes ?? []))\n  }\n\n  const router = createRouter({\n    history: createWebHistory(basePath),\n    routes,\n  })\n\n  const i18n = createI18n({ locale: options.locale ?? preferredLocale() })\n\n  const http =\n    options.http ??\n    createHttp({\n      baseUrl: '',\n      onUnauthenticated: () => {\n        context.setUser(null)\n        context.state.status = 'unauthenticated'\n      },\n      // Every request says which language the panel is currently showing. It decides what\n      // the server writes its own messages in — a 422 under a field — for anybody who has\n      // not stored a preference yet, which is everybody until they choose one. Without it,\n      // signing in on a Russian sign-in screen lands in an English panel.\n      headers: () => ({ 'X-Webx-Locale': i18n.state.locale }),\n    })\n\n  i18n.defaults('webx-admin', adminMessages)\n\n  async function loadDictionary(locale: string): Promise<void> {\n    const body = await http.get<{\n      data: { locale: string; fallback: string; namespaces: Dictionary }\n    }>(`${apiPath}/translations/${locale}`)\n\n    i18n.load(body.data.namespaces, body.data.locale, body.data.fallback)\n    rememberLocale(body.data.locale)\n    markDocumentLanguage(body.data.locale, i18n.state.panelLocales)\n  }\n\n  const context = createAdminContext({\n    http,\n    basePath,\n    apiPath,\n    modules,\n    i18n,\n    loadDictionary,\n    loadManifest: async () => {\n      const body = await http.get<{ data: Manifest }>(manifestUrl)\n\n      return body.data\n    },\n  })\n\n  const app = createApp(rootComponent(options))\n\n  app.use(WebxUI)\n  provideAdmin(app, context)\n  provideI18n(app, i18n)\n\n  /*\n   * The languages a localized field offers are the site's *content* languages, not the ones the\n   * panel can be drawn in: a panel in English routinely edits a site published in Ukrainian and\n   * Russian. They arrive with the manifest, so this is a computed over what is already there\n   * rather than a second request — and a form written before they arrive simply has nothing to\n   * switch between yet.\n   */\n  const editing = ref('')\n\n  app.provide(localesKey, {\n    list: computed<LocaleOption[]>(() =>\n      i18n.state.contentLocales.map((locale) => ({\n        code: locale.code,\n        label: locale.code.toUpperCase(),\n      })),\n    ),\n    active: computed({\n      get: () => editing.value || (i18n.state.contentLocales[0]?.code ?? ''),\n      set: (code: string) => {\n        editing.value = code\n      },\n    }),\n  })\n\n  const admin: Admin = {\n    app,\n    router,\n    context,\n    i18n,\n    async mount() {\n      // The one thing worth waiting for. It is a public, cached request, and painting the\n      // sign-in screen in English and then swapping every label a moment later looks like a\n      // bug rather than like a translation arriving. The manifest is still not waited for —\n      // that one needs a session and is bound to 401 for a visitor.\n      await Promise.all([loadPanelLocales(), loadDictionary(i18n.state.locale)]).catch(() => {\n        // A server that cannot answer these cannot run a panel either, and the built-in\n        // English is a better thing to fail with than a blank page.\n      })\n\n      app.mount(options.el ?? '#webx-app')\n\n      await context.reload()\n    },\n  }\n\n  async function loadPanelLocales(): Promise<void> {\n    const body = await http.get<{\n      data: { panel: LocaleDescriptor[]; content: LocaleDescriptor[] }\n    }>(`${apiPath}/locales`)\n\n    i18n.state.panelLocales = body.data.panel\n    i18n.state.contentLocales = body.data.content\n  }\n\n  // Plugins go on before the router does, because installing the router is what starts the\n  // first navigation. A route added after that is a route the visit already failed to match:\n  // opening /login directly would land on nothing while /cms worked, because / matched and the\n  // redirect to /login happened later, by which time the route existed.\n  for (const plugin of options.plugins ?? []) {\n    plugin.install(admin)\n  }\n\n  app.use(router)\n\n  return admin\n}\n\nfunction rootComponent(options: CreateAdminOptions): Component {\n  const slots: Record<string, (props: { collapsed?: boolean }) => unknown> = {\n    // The menu is the panel's own: it is the manifest, drawn.\n    nav: (props) => h(AdminNav, { collapsed: props.collapsed === true }),\n  }\n\n  if (options.brand !== undefined) {\n    slots.brand = () => h(options.brand as Component)\n  }\n\n  if (options.userMenu !== undefined) {\n    slots.user = () => h(options.userMenu as Component)\n  }\n\n  return { render: () => h(AdminShell, null, slots) }\n}\n\n/**\n * The language to ask for first. A guess, and treated as one — the server answers with the\n * language it actually has, and that is what the panel adopts.\n */\nfunction preferredLocale(): string {\n  const remembered = read(STORED_LOCALE)\n\n  if (remembered !== null) {\n    return remembered\n  }\n\n  if (typeof document !== 'undefined' && document.documentElement.lang !== '') {\n    return document.documentElement.lang\n  }\n\n  return typeof navigator === 'undefined' ? 'en' : navigator.language\n}\n\nfunction rememberLocale(locale: string): void {\n  // A per-browser convenience, so a signed-out reload of the sign-in screen keeps the\n  // language. The choice that lasts is the one stored against the administrator.\n  try {\n    localStorage.setItem(STORED_LOCALE, locale)\n  } catch {\n    // Private windows, blocked site data. Nothing here is worth an error.\n  }\n}\n\nfunction read(key: string): string | null {\n  try {\n    return localStorage.getItem(key)\n  } catch {\n    return null\n  }\n}\n\n/** So the browser hyphenates, spell-checks and reads the page aloud in the right language. */\nfunction markDocumentLanguage(locale: string, locales: LocaleDescriptor[]): void {\n  if (typeof document === 'undefined') {\n    return\n  }\n\n  document.documentElement.lang = locale\n  document.documentElement.dir =\n    locales.find((candidate) => candidate.code === locale)?.direction ?? 'ltr'\n}\n\nfunction readManifestUrl(): string | null {\n  if (typeof document === 'undefined') {\n    return null\n  }\n\n  const meta = document.querySelector('meta[name=\"webx-manifest\"]')\n\n  return meta?.getAttribute('content') ?? null\n}\n"],"names":["adminKey","useAdmin","admin","inject","createAdminContext","options","state","reactive","nav","computed","manifest","entries","module","registered","candidate","path","loadSession","reload","setLocale","error","isUnauthenticated","code","user","loader","permission","provideAdmin","app","i18nKey","useI18n","i18n","useTranslate","namespace","createI18n","provideI18n","fallback","builtIn","dictionary","lookup","source","node","segment","translate","key","params","explicitNamespace","rest","line","fill","messages","next","locale","nextFallback","filled","name","value","emit","__emit","t","router","useRouter","route","useRoute","current","entry","id","_createBlock","_component_wx_menu","$event","__props","_unref","_openBlock","_createElementBlock","_Fragment","_component_wx_menu_item","shellEl","ref","layout","collapsed","showAside","drawerOpen","toggle","close","useResponsiveShell","_createVNode","WxToaster","_hoisted_1","_component_router_view","_hoisted_2","_component_wx_loading","_hoisted_3","_component_wx_result","_component_wx_button","_cache","_component_wx_container","_component_wx_header","_renderSlot","_ctx","_component_wx_action","_component_wx_text","_createTextVNode","_toDisplayString","_component_wx_aside","_component_wx_main","_component_wx_drawer","args","HttpError","message","status","errors","retryAfter","body","UNSAFE","createHttp","baseUrl","csrfUrl","doFetch","onUnauthenticated","standingHeaders","csrfFetched","ensureCsrfCookie","force","readCookie","request","method","retried","unsafe","headers","token","response","url","toError","payload","header","query","full","search","serialised","part","adminMessages","STORED_LOCALE","createAdmin","manifestUrl","readManifestUrl","apiPath","basePath","modules","routes","createRouter","createWebHistory","preferredLocale","http","context","loadDictionary","rememberLocale","markDocumentLanguage","createApp","rootComponent","WebxUI","editing","localesKey","loadPanelLocales","plugin","slots","props","h","AdminNav","AdminShell","remembered","read","locales"],"mappings":";;;AA4CO,MAAMA,2BAA8C,YAAY;AAEhE,SAASC,IAAyB;AACvC,QAAMC,IAAQC,EAAOH,GAAU,IAAI;AAEnC,MAAIE,MAAU;AACZ,UAAM,IAAI,MAAM,iEAAiE;AAGnF,SAAOA;AACT;AAOO,SAASE,GAAmBC,GAQlB;AACf,QAAMC,IAAQC,EAAqB;AAAA,IACjC,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,MAAM;AAAA,IACN,OAAO;AAAA,EAAA,CACR,GAEKC,IAAMC,EAAqB,MAAM;AACrC,UAAMC,IAAWJ,EAAM;AAEvB,QAAII,MAAa;AACf,aAAO,CAAA;AAGT,UAAMC,IAAsB,CAAA;AAE5B,eAAWC,KAAUF,EAAS,SAAS;AACrC,YAAMG,IAAaR,EAAQ,QAAQ,KAAK,CAACS,MAAcA,EAAU,OAAOF,EAAO,EAAE;AAKjF,UAAIC,MAAe;AACjB;AAGF,YAAME,IAAOF,EAAW,QAAQA,EAAW,SAAS,CAAC,GAAG;AAExD,MAAIE,MAAS,UAIbJ,EAAQ,KAAK;AAAA,QACX,IAAIC,EAAO;AAAA,QACX,OAAOA,EAAO;AAAA,QACd,MAAMA,EAAO;AAAA,QACb,MAAAG;AAAA,MAAA,CACD;AAAA,IACH;AAEA,WAAOJ;AAAA,EACT,CAAC;AAED,MAAIK,IAAwD;AAE5D,iBAAeC,IAAwB;AACrC,IAAAX,EAAM,SAAS,WACfA,EAAM,QAAQ;AAEd,QAAI;AACF,UAAIU,MAAgB,SAClBV,EAAM,OAAO,MAAMU,EAAA,GAIfV,EAAM,SAAS,OAAM;AACvB,QAAAA,EAAM,WAAW,MACjBA,EAAM,SAAS;AAEf;AAAA,MACF;AAGF,YAAMI,IAAW,MAAML,EAAQ,aAAA;AAE/B,MAAAC,EAAM,WAAWI,GACjBL,EAAQ,KAAK,MAAM,iBAAiBK,EAAS,WAAW,CAAA,GACxDL,EAAQ,KAAK,MAAM,eAAeK,EAAS,gBAAgBL,EAAQ,KAAK,MAAM,cAI1EK,EAAS,WAAW,UAAaA,EAAS,WAAWL,EAAQ,KAAK,MAAM,UAC1E,MAAMa,EAAUR,EAAS,MAAM,GAGjCJ,EAAM,SAAS;AAAA,IACjB,SAASa,GAAO;AAGd,UAAIC,GAAkBD,CAAK,GAAG;AAC5B,QAAAb,EAAM,WAAW,MACjBA,EAAM,OAAO,MACbA,EAAM,SAAS;AAEf;AAAA,MACF;AAEA,MAAAA,EAAM,QAAQa,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK,GACnEb,EAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAEA,iBAAeY,EAAUG,GAA6B;AACpD,QAAIhB,EAAQ,mBAAmB,QAAW;AACxC,MAAAA,EAAQ,KAAK,MAAM,SAASgB;AAE5B;AAAA,IACF;AAUA,QARA,MAAMhB,EAAQ,eAAegB,CAAI,GAQ7Bf,EAAM,aAAa;AACrB,UAAI;AACF,QAAAA,EAAM,WAAW,MAAMD,EAAQ,aAAA;AAAA,MACjC,QAAQ;AAAA,MAGR;AAAA,EAEJ;AAEA,SAAO;AAAA,IACL,MAAMA,EAAQ;AAAA,IACd,UAAUA,EAAQ;AAAA,IAClB,SAASA,EAAQ;AAAA,IACjB,OAAAC;AAAA,IACA,MAAMD,EAAQ;AAAA,IACd,SAASA,EAAQ;AAAA,IACjB,KAAAG;AAAA,IACA,QAAAS;AAAA,IACA,WAAAC;AAAA,IACA,QAAQI,GAAM;AACZ,MAAAhB,EAAM,OAAOgB;AAAA,IACf;AAAA,IACA,iBAAiBC,GAAQ;AACvB,MAAAP,IAAcO;AAAA,IAChB;AAAA,IACA,IAAIC,GAAY;AACd,YAAMF,IAAOhB,EAAM;AAEnB,aAAIgB,MAAS,OACJ,KAGFA,EAAK,WAAWA,EAAK,YAAY,SAASE,CAAU;AAAA,IAC7D;AAAA,EAAA;AAEJ;AAEO,SAASC,GAAaC,GAAUxB,GAA2B;AAChE,EAAAwB,EAAI,QAAQ1B,GAAUE,CAAK;AAC7B;AAEA,SAASkB,GAAkBD,GAAyB;AAClD,SACE,OAAOA,KAAU,YACjBA,MAAU,QACV,YAAYA,KACXA,EAA8B,WAAW;AAE9C;AC/KO,MAAMQ,2BAAqC,WAAW;AAEtD,SAASC,KAAgB;AAC9B,QAAMC,IAAO1B,EAAOwB,GAAS,IAAI;AAEjC,MAAIE,MAAS;AACX,UAAM,IAAI,MAAM,gEAAgE;AAGlF,SAAOA;AACT;AAMO,SAASC,EAAaC,GAA8B;AACzD,QAAMF,IAAO1B,EAAOwB,GAAS,IAAI;AAEjC,SAAOE,MAAS,OAAOG,IAAa,MAAMD,CAAS,IAAIF,EAAK,MAAME,CAAS;AAC7E;AAEO,SAASE,GAAYP,GAAUG,GAAkB;AACtD,EAAAH,EAAI,QAAQC,GAASE,CAAI;AAC3B;AAEO,SAASG,EAAW3B,IAAkD,IAAU;AACrF,QAAM6B,IAAW7B,EAAQ,YAAY,MAE/BC,IAAQC,EAAoB;AAAA,IAChC,QAAQF,EAAQ,UAAU6B;AAAA,IAC1B,UAAAA;AAAA,IACA,cAAc,CAAA;AAAA,IACd,gBAAgB,CAAA;AAAA,EAAC,CAClB,GAIKC,IAAsB,CAAA,GACtBC,IAAa7B,EAAgC,EAAE,OAAO,CAAA,GAAI;AAEhE,WAAS8B,EAAOC,GAAoBP,GAAmBhB,GAA+B;AACpF,QAAIwB,IAAsCD,EAAOP,CAAS,IAAIhB,EAAK,CAAC,KAAK,EAAE;AAE3E,eAAWyB,KAAWzB,EAAK,MAAM,CAAC,GAAG;AACnC,UAAI,OAAOwB,KAAS,YAAYA,MAAS;AACvC,eAAO;AAGT,MAAAA,IAAOA,EAAKC,CAAO;AAAA,IACrB;AAEA,WAAO,OAAOD,KAAS,WAAWA,IAAO;AAAA,EAC3C;AAEA,WAASE,EACPV,GACAW,GACAC,GACQ;AAGR,UAAM,CAACC,GAAmBC,CAAI,IAAIH,EAAI,SAAS,IAAI,IAC9CA,EAAI,MAAM,MAAM,CAAC,IAClB,CAACX,GAAWW,CAAG,GAEb3B,IAAO8B,EAAK,MAAM,GAAG,GAErBC,IACJT,EAAOD,EAAW,OAAOQ,GAAmB7B,CAAI,KAChDsB,EAAOF,GAASS,GAAmB7B,CAAI;AAAA;AAAA,IAGvC2B;AAEF,WAAOC,MAAW,SAAYG,IAAOC,GAAKD,GAAMH,CAAM;AAAA,EACxD;AAEA,SAAO;AAAA,IACL,OAAArC;AAAA,IACA,SAASyB,GAAWiB,GAAU;AAC5B,MAAAb,EAAQJ,CAAS,IAAI,EAAE,GAAGI,EAAQJ,CAAS,GAAG,GAAGiB,EAAA;AAAA,IACnD;AAAA,IACA,KAAKC,GAAMC,GAAQC,GAAc;AAG/B,MAAAf,EAAW,QAAQa,KAAQ,CAAA,GAC3B3C,EAAM,SAAS4C,KAAU5C,EAAM,QAE3B6C,MAAiB,WACnB7C,EAAM,WAAW6C;AAAA,IAErB;AAAA,IACA,MAAMpB,GAAW;AACf,aAAO,CAACW,GAAKC,MAAWF,EAAUV,GAAWW,GAAKC,CAAM;AAAA,IAC1D;AAAA,IACA,GAAG,CAACD,GAAKC,MAAWF,EAAU,IAAIC,GAAKC,CAAM;AAAA,EAAA;AAEjD;AAMA,SAASI,GAAKD,GAAcH,GAAiD;AAC3E,MAAIS,IAASN;AAEb,aAAW,CAACO,GAAMC,CAAK,KAAK,OAAO,QAAQX,CAAM;AAC/C,IAAAS,IAASA,EAAO,WAAW,IAAIC,CAAI,IAAI,OAAOC,CAAK,CAAC;AAGtD,SAAOF;AACT;;;;;;;;ACtJA,UAAMG,IAAOC,GAEPtD,IAAQD,EAAA,GACRwD,IAAI3B,EAAa,YAAY,GAC7B4B,IAASC,EAAA,GACTC,IAAQC,EAAA,GAERC,IAAUrD,EAAiB;AAAA,MAC/B,KAAK,MACWP,EAAM,IAAI,MAAM,KAAK,CAAC6D,MAAUH,EAAM,KAAK,WAAWG,EAAM,IAAI,CAAC,GAEjE,MAAM;AAAA,MAEtB,KAAK,CAACC,MAAO;AACX,cAAMD,IAAQ7D,EAAM,IAAI,MAAM,KAAK,CAACY,MAAcA,EAAU,OAAOkD,CAAE;AAErE,QAAID,MAAU,UACPL,EAAO,KAAKK,EAAM,IAAI;AAAA,MAE/B;AAAA,IAAA,CACD;;;kBAICE,EAaUC,GAAA;AAAA,oBAZCJ,EAAA;AAAA,sDAAAA,EAAO,QAAAK;AAAA,QACf,WAAWC,EAAA;AAAA,QACX,OAAOC,EAAAZ,CAAA,EAAC,cAAA;AAAA,QACR,iCAAQF,EAAI,QAAA;AAAA,MAAA;mBAGX,MAAgC;AAAA,WADlCe,EAAA,EAAA,GAAAC,EAMEC,WALgBH,EAAAnE,CAAA,EAAM,IAAI,QAAnB6D,YADTE,EAMEQ,GAAA;AAAA,YAJC,KAAKV,EAAM;AAAA,YACX,OAAOA,EAAM;AAAA,YACb,MAAMA,EAAM,QAAQ;AAAA,YACpB,OAAOA,EAAM;AAAA,UAAA;;;;;;;;;;;;;;;;;;AC/BpB,UAAM7D,IAAQD,EAAA,GACRwD,IAAI3B,EAAa,YAAY,GAC7B4C,IAAUC,EAAwB,IAAI,GAEtC,EAAE,QAAAC,GAAQ,WAAAC,GAAW,WAAAC,GAAW,YAAAC,GAAY,QAAAC,GAAQ,OAAAC,EAAA,IAAUC,GAAmBR,GAAS;AAAA,MAC9F,SAAS;AAAA,IAAA,CACV;;;;QAICS,EAAcd,EAAAe,EAAA,CAAA;AAAA,QAEHf,EAAAnE,CAAA,EAAM,MAAM,WAAM,qBAA7BoE,KAAAC,EAEM,OAFNc,IAEM;AAAA,UADJF,EAAeG,CAAA;AAAA,QAAA,MAGDjB,EAAAnE,CAAA,EAAM,MAAM,WAAM,aAAlCoE,EAAA,GAAAC,EAEM,OAFNgB,IAEM;AAAA,UADJJ,EAA0CK,GAAA;AAAA,YAA7B,OAAOnB,EAAAZ,CAAA,EAAC,eAAA;AAAA,UAAA;cAGPY,EAAAnE,CAAA,EAAM,MAAM,WAAM,WAAlCoE,EAAA,GAAAC,EAIM,OAJNkB,IAIM;AAAA,UAHJN,EAEYO,GAAA;AAAA,YAFD,QAAO;AAAA,YAAS,OAAOrB,EAAAZ,CAAA,EAAC,mBAAA;AAAA,YAAwB,aAAaY,EAAAnE,CAAA,EAAM,MAAM;AAAA,UAAA;uBAClF,MAAoF;AAAA,cAApFiF,EAAoFQ,GAAA;AAAA,gBAAzE,MAAK;AAAA,gBAAW,SAAKC,EAAA,CAAA,MAAAA,EAAA,CAAA,IAAA,CAAAzB,MAAEE,EAAAnE,CAAA,EAAM,OAAA;AAAA,cAAM;2BAAI,MAAsB;AAAA,sBAAnBmE,EAAAZ,CAAA,EAAC,aAAA,CAAA,GAAA,CAAA;AAAA,gBAAA;;;;;;oBAI1Dc,EAgCM,OAAA;AAAA;mBAhCU;AAAA,UAAJ,KAAIG;AAAA,UAAU,OAAM;AAAA,QAAA;UAC9BS,EA0BeU,GAAA,EA1BD,UAAA,MAAQ;AAAA,uBACpB,MAcY;AAAA,cAdZV,EAcYW,GAAA,MAAA;AAAA,gBAHC,OACT,MAAoB;AAAA,kBAApBC,EAAoBC,EAAA,QAAA,QAAA,CAAA,GAAA,QAAA,EAAA;AAAA,gBAAA;2BAXtB,MAIE;AAAA,kBAJFb,EAIEc,GAAA;AAAA,oBAHC,MAAM5B,EAAAO,CAAA,MAAM,WAAA,SAAA;AAAA,oBACZ,OAAOP,EAAAO,CAAA,MAAM,WAAgBP,EAAAZ,CAAA,gBAAgBY,EAAAZ,CAAA,EAAC,cAAA;AAAA,oBAC9C,SAAOY,EAAAW,CAAA;AAAA,kBAAA;kBAGVe,EAEOC,uBAFP,MAEO;AAAA,oBADLb,EAAsEe,GAAA,EAA7D,QAAO,cAAU;AAAA,iCAAC,MAAiC;AAAA,wBAA9BC,EAAAC,EAAA/B,EAAAnE,CAAA,EAAM,MAAM,UAAU,KAAK,GAAA,CAAA;AAAA,sBAAA;;;;;;;cAQ7DiF,EAQeU,GAAA,EARD,WAAU,gBAAY;AAAA,2BAClC,MAEW;AAAA,kBAFKxB,EAAAS,CAAA,UAAhBb,EAEWoC,GAAA;AAAA;oBAFiB,WAAWhC,EAAAQ,CAAA;AAAA,oBAAY,OAAO;AAAA,oBAAK,QAAA;AAAA,kBAAA;+BAC7D,MAA0C;AAAA,sBAA1CkB,EAA0CC,EAAA,QAAA,OAAA,EAAxB,WAAW3B,EAAAQ,CAAA,KAAS,QAAA,EAAA;AAAA,oBAAA;;;kBAGxCM,EAEUmB,GAAA;AAAA,oBAFD,SAAQ;AAAA,oBAAK,QAAA;AAAA,oBAAO,OAAM;AAAA,kBAAA;+BACjC,MAAe;AAAA,sBAAfnB,EAAeG,CAAA;AAAA,oBAAA;;;;;;;;;UAKrBH,EAEYoB,GAAA;AAAA,YAFO,MAAMlC,EAAAU,CAAA;AAAA,2DAAAA,EAAU,QAAAZ,IAAA;AAAA,YAAG,OAAOE,EAAAZ,CAAA,EAAC,UAAA;AAAA,YAAc,MAAK;AAAA,YAAQ,MAAM;AAAA,YAAK,UAAA;AAAA,UAAA;uBAClF,MAAsD;AAAA,cAAtDsC,EAAsDC,EAAA,QAAA,OAAA;AAAA,gBAApC,WAAW;AAAA,gBAAQ,UAAMJ,EAAA,CAAA,MAAAA,EAAA,CAAA;AAAA,0BAAEvB,EAAAY,CAAA,KAAAZ,EAAAY,CAAA,EAAA,GAAAuB,CAAA;AAAA,cAAA;;;;;;;;;;;;;;ACtC5C,MAAMC,WAAkB,MAAM;AAAA,EACnC,YACEC,GACSC,GACAC,IAAmC,CAAA,GACnCC,IAA4B,MAC5BC,IAAgB,MACzB;AACA,UAAMJ,CAAO,GALJ,KAAA,SAAAC,GACA,KAAA,SAAAC,GACA,KAAA,aAAAC,GACA,KAAA,OAAAC,GAGT,KAAK,OAAO;AAAA,EACd;AAAA,EAPW;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAOX,IAAI,eAAwB;AAC1B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,oBAA6B;AAC/B,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA,EAEA,IAAI,cAAuB;AACzB,WAAO,KAAK,WAAW;AAAA,EACzB;AACF;AAUA,MAAMC,yBAAa,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ,CAAC;AAElD,SAASC,GAAW3G,IAAuB,IAAU;AAC1D,QAAM4G,KAAW5G,EAAQ,WAAW,IAAI,QAAQ,OAAO,EAAE,GACnD6G,IAAU7G,EAAQ,WAAW,wBAC7B8G,IAAU9G,EAAQ,SAAS,WAAW,MAAM,KAAK,UAAU,GAC3D+G,IAAoB/G,EAAQ,mBAC5BgH,IAAkBhH,EAAQ;AAEhC,MAAIiH,IAAc;AAElB,iBAAeC,EAAiBC,IAAQ,IAAsB;AAC5D,IAAIF,KAAe,CAACE,KAASC,EAAW,YAAY,MAAM,SAI1D,MAAMN,EAAQD,GAAS,EAAE,aAAa,eAAe,GACrDI,IAAc;AAAA,EAChB;AAEA,iBAAeI,EACbC,GACA5G,GACA+F,GACAzG,IAA0B,CAAA,GAC1BuH,IAAU,IACE;AACZ,UAAMC,IAASd,GAAO,IAAIY,CAAM;AAEhC,IAAIE,KACF,MAAMN,EAAA;AAGR,UAAMO,IAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,oBAAoB;AAAA;AAAA,MAEpB,GAAGT,IAAA;AAAA,MACH,GAAGhH,EAAQ;AAAA,IAAA;AAGb,QAAIwH,GAAQ;AACV,YAAME,IAAQN,EAAW,YAAY;AAErC,MAAIM,MAAU,SACZD,EAAQ,cAAc,IAAIC;AAAA,IAE9B;AAEA,IAAIjB,MAAS,WACXgB,EAAQ,cAAc,IAAI;AAG5B,UAAME,IAAW,MAAMb,EAAQc,GAAIhB,GAASlG,GAAMV,EAAQ,KAAK,GAAG;AAAA,MAChE,QAAAsH;AAAA,MACA,aAAa;AAAA,MACb,SAAAG;AAAA,MACA,QAAQzH,EAAQ;AAAA,MAChB,MAAMyG,MAAS,SAAY,SAAY,KAAK,UAAUA,CAAI;AAAA,IAAA,CAC3D;AAKD,QAAIkB,EAAS,WAAW,OAAOH,KAAU,CAACD;AACxC,mBAAML,EAAiB,EAAI,GAEpBG,EAAWC,GAAQ5G,GAAM+F,GAAMzG,GAAS,EAAI;AAOrD,QAJI2H,EAAS,WAAW,OACtBZ,IAAA,GAGE,CAACY,EAAS;AACZ,YAAM,MAAME,GAAQF,CAAQ;AAG9B,QAAIA,EAAS,WAAW;AAIxB,aAAQ,MAAMA,EAAS,KAAA;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,KAAK,CAACjH,GAAMV,MAAYqH,EAAQ,OAAO3G,GAAM,QAAWV,CAAO;AAAA,IAC/D,MAAM,CAACU,GAAM+F,GAAMzG,MAAYqH,EAAQ,QAAQ3G,GAAM+F,GAAMzG,CAAO;AAAA,IAClE,KAAK,CAACU,GAAM+F,GAAMzG,MAAYqH,EAAQ,OAAO3G,GAAM+F,GAAMzG,CAAO;AAAA,IAChE,OAAO,CAACU,GAAM+F,GAAMzG,MAAYqH,EAAQ,SAAS3G,GAAM+F,GAAMzG,CAAO;AAAA,IACpE,QAAQ,CAACU,GAAMV,MAAYqH,EAAQ,UAAU3G,GAAM,QAAWV,CAAO;AAAA,EAAA;AAEzE;AAEA,eAAe6H,GAAQF,GAAwC;AAC7D,MAAIlB,IAAgB;AAEpB,MAAI;AACF,IAAAA,IAAO,MAAMkB,EAAS,KAAA;AAAA,EACxB,QAAQ;AAAA,EAER;AAEA,QAAMG,IAAWrB,KAAQ,CAAA,GACnBJ,IACJ,OAAOyB,EAAQ,WAAY,YAAYA,EAAQ,YAAY,KACvDA,EAAQ,UACRH,EAAS,cAAc,uBAAuBA,EAAS,MAAM,IAE7DpB,IACJuB,EAAQ,WAAW,QAAQ,OAAOA,EAAQ,UAAW,WAChDA,EAAQ,SACT,CAAA,GAEAC,IAASJ,EAAS,QAAQ,IAAI,aAAa,GAC3CnB,IAAauB,MAAW,OAAO,OAAO,OAAO,SAASA,GAAQ,EAAE;AAEtE,SAAO,IAAI3B;AAAA,IACTC;AAAA,IACAsB,EAAS;AAAA,IACTpB;AAAA,IACA,OAAO,SAASC,CAAU,IAAIA,IAAa;AAAA,IAC3CC;AAAA,EAAA;AAEJ;AAEA,SAASmB,GAAIhB,GAAiBlG,GAAcsH,GAAyC;AAEnF,QAAMC,IADW,gBAAgB,KAAKvH,CAAI,IAClBA,IAAO,GAAGkG,CAAO,IAAIlG,EAAK,QAAQ,OAAO,EAAE,CAAC;AAEpE,MAAIsH,MAAU;AACZ,WAAOC;AAGT,QAAMC,IAAS,IAAI,gBAAA;AAEnB,aAAW,CAAC7F,GAAKY,CAAK,KAAK,OAAO,QAAQ+E,CAAK;AAC7C,IAA2B/E,KAAU,QACnCiF,EAAO,IAAI7F,GAAK,OAAOY,CAAK,CAAC;AAIjC,QAAMkF,IAAaD,EAAO,SAAA;AAE1B,SAAOC,MAAe,KAAKF,IAAO,GAAGA,CAAI,GAAGA,EAAK,SAAS,GAAG,IAAI,MAAM,GAAG,GAAGE,CAAU;AACzF;AAKO,SAASf,EAAWpE,GAA6B;AACtD,MAAI,OAAO,WAAa;AACtB,WAAO;AAGT,aAAWoF,KAAQ,SAAS,OAAO,MAAM,GAAG,GAAG;AAC7C,UAAM,CAAC/F,GAAK,GAAGG,CAAI,IAAI4F,EAAK,KAAA,EAAO,MAAM,GAAG;AAE5C,QAAI/F,MAAQW;AACV,aAAO,mBAAmBR,EAAK,KAAK,GAAG,CAAC;AAAA,EAE5C;AAEA,SAAO;AACT;AChOO,MAAM6F,KAA0C;AAAA,EACrD,OAAO;AAAA,IACL,SAAS;AAAA,IACT,eAAe;AAAA,IACf,OAAO;AAAA,IACP,eAAe;AAAA,IACf,qBAAqB;AAAA,EAAA;AAAA,EAEvB,KAAK;AAAA,IACH,UAAU;AAAA,IACV,MAAM;AAAA,IACN,UAAU;AAAA,IACV,UAAU;AAAA,EAAA;AAEd,GCZMC,IAAgB;AAgEf,SAASC,GAAYvI,IAA8B,IAAW;AACnE,QAAMwI,IAAcxI,EAAQ,eAAeyI,GAAA,KAAqB,qBAG1DC,IAAU1I,EAAQ,WAAWwI,EAAY,QAAQ,kBAAkB,EAAE,GACrEG,IAAW3I,EAAQ,YAAY,QAC/B4I,IAAU5I,EAAQ,WAAW,CAAA,GAE7B6I,IAA2B,CAAC,GAAI7I,EAAQ,UAAU,CAAA,CAAG;AAE3D,aAAWO,KAAUqI;AACnB,IAAAC,EAAO,KAAK,GAAItI,EAAO,UAAU,CAAA,CAAG;AAGtC,QAAM8C,IAASyF,GAAa;AAAA,IAC1B,SAASC,GAAiBJ,CAAQ;AAAA,IAClC,QAAAE;AAAA,EAAA,CACD,GAEKrH,IAAOG,EAAW,EAAE,QAAQ3B,EAAQ,UAAUgJ,GAAA,GAAmB,GAEjEC,IACJjJ,EAAQ,QACR2G,GAAW;AAAA,IACT,SAAS;AAAA,IACT,mBAAmB,MAAM;AACvB,MAAAuC,EAAQ,QAAQ,IAAI,GACpBA,EAAQ,MAAM,SAAS;AAAA,IACzB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKA,SAAS,OAAO,EAAE,iBAAiB1H,EAAK,MAAM,OAAA;AAAA,EAAO,CACtD;AAEH,EAAAA,EAAK,SAAS,cAAc6G,EAAa;AAEzC,iBAAec,EAAetG,GAA+B;AAC3D,UAAM4D,IAAO,MAAMwC,EAAK,IAErB,GAAGP,CAAO,iBAAiB7F,CAAM,EAAE;AAEtC,IAAArB,EAAK,KAAKiF,EAAK,KAAK,YAAYA,EAAK,KAAK,QAAQA,EAAK,KAAK,QAAQ,GACpE2C,GAAe3C,EAAK,KAAK,MAAM,GAC/B4C,GAAqB5C,EAAK,KAAK,QAAQjF,EAAK,MAAM,YAAY;AAAA,EAChE;AAEA,QAAM0H,IAAUnJ,GAAmB;AAAA,IACjC,MAAAkJ;AAAA,IACA,UAAAN;AAAA,IACA,SAAAD;AAAA,IACA,SAAAE;AAAA,IACA,MAAApH;AAAA,IACA,gBAAA2H;AAAA,IACA,cAAc,aACC,MAAMF,EAAK,IAAwBT,CAAW,GAE/C;AAAA,EACd,CACD,GAEKnH,IAAMiI,EAAUC,GAAcvJ,CAAO,CAAC;AAE5C,EAAAqB,EAAI,IAAImI,EAAM,GACdpI,GAAaC,GAAK6H,CAAO,GACzBtH,GAAYP,GAAKG,CAAI;AASrB,QAAMiI,IAAUnF,EAAI,EAAE;AAEtB,EAAAjD,EAAI,QAAQqI,IAAY;AAAA,IACtB,MAAMtJ;AAAA,MAAyB,MAC7BoB,EAAK,MAAM,eAAe,IAAI,CAACqB,OAAY;AAAA,QACzC,MAAMA,EAAO;AAAA,QACb,OAAOA,EAAO,KAAK,YAAA;AAAA,MAAY,EAC/B;AAAA,IAAA;AAAA,IAEJ,QAAQzC,EAAS;AAAA,MACf,KAAK,MAAMqJ,EAAQ,UAAUjI,EAAK,MAAM,eAAe,CAAC,GAAG,QAAQ;AAAA,MACnE,KAAK,CAACR,MAAiB;AACrB,QAAAyI,EAAQ,QAAQzI;AAAA,MAClB;AAAA,IAAA,CACD;AAAA,EAAA,CACF;AAED,QAAMnB,IAAe;AAAA,IACnB,KAAAwB;AAAA,IACA,QAAAgC;AAAA,IACA,SAAA6F;AAAA,IACA,MAAA1H;AAAA,IACA,MAAM,QAAQ;AAKZ,YAAM,QAAQ,IAAI,CAACmI,EAAA,GAAoBR,EAAe3H,EAAK,MAAM,MAAM,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,MAGvF,CAAC,GAEDH,EAAI,MAAMrB,EAAQ,MAAM,WAAW,GAEnC,MAAMkJ,EAAQ,OAAA;AAAA,IAChB;AAAA,EAAA;AAGF,iBAAeS,IAAkC;AAC/C,UAAMlD,IAAO,MAAMwC,EAAK,IAErB,GAAGP,CAAO,UAAU;AAEvB,IAAAlH,EAAK,MAAM,eAAeiF,EAAK,KAAK,OACpCjF,EAAK,MAAM,iBAAiBiF,EAAK,KAAK;AAAA,EACxC;AAMA,aAAWmD,KAAU5J,EAAQ,WAAW,CAAA;AACtC,IAAA4J,EAAO,QAAQ/J,CAAK;AAGtB,SAAAwB,EAAI,IAAIgC,CAAM,GAEPxD;AACT;AAEA,SAAS0J,GAAcvJ,GAAwC;AAC7D,QAAM6J,IAAqE;AAAA;AAAA,IAEzE,KAAK,CAACC,MAAUC,EAAEC,IAAU,EAAE,WAAWF,EAAM,cAAc,GAAA,CAAM;AAAA,EAAA;AAGrE,SAAI9J,EAAQ,UAAU,WACpB6J,EAAM,QAAQ,MAAME,EAAE/J,EAAQ,KAAkB,IAG9CA,EAAQ,aAAa,WACvB6J,EAAM,OAAO,MAAME,EAAE/J,EAAQ,QAAqB,IAG7C,EAAE,QAAQ,MAAM+J,EAAEE,IAAY,MAAMJ,CAAK,EAAA;AAClD;AAMA,SAASb,KAA0B;AACjC,QAAMkB,IAAaC,GAAK7B,CAAa;AAErC,SAAI4B,MAAe,OACVA,IAGL,OAAO,WAAa,OAAe,SAAS,gBAAgB,SAAS,KAChE,SAAS,gBAAgB,OAG3B,OAAO,YAAc,MAAc,OAAO,UAAU;AAC7D;AAEA,SAASd,GAAevG,GAAsB;AAG5C,MAAI;AACF,iBAAa,QAAQyF,GAAezF,CAAM;AAAA,EAC5C,QAAQ;AAAA,EAER;AACF;AAEA,SAASsH,GAAK9H,GAA4B;AACxC,MAAI;AACF,WAAO,aAAa,QAAQA,CAAG;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAASgH,GAAqBxG,GAAgBuH,GAAmC;AAC/E,EAAI,OAAO,WAAa,QAIxB,SAAS,gBAAgB,OAAOvH,GAChC,SAAS,gBAAgB,MACvBuH,EAAQ,KAAK,CAAC3J,MAAcA,EAAU,SAASoC,CAAM,GAAG,aAAa;AACzE;AAEA,SAAS4F,KAAiC;AACxC,SAAI,OAAO,WAAa,MACf,OAGI,SAAS,cAAc,4BAA4B,GAEnD,aAAa,SAAS,KAAK;AAC1C;"}

package/dist/messages.d.ts

@@ -0,0 +1,9 @@
+import { Messages } from './i18n';
+/**
+ * The panel's own words, in English.
+ *
+ * The same keys `webx-ui/module-admin` ships as `lang/en/*.php`, kept here so the package works with
+ * no server behind it. Anything the server sends wins; this is the floor, not the source of
+ * truth. Translations belong in the Composer package, where one file serves both halves.
+ */
+export declare const adminMessages: Record<string, Messages>;

package/dist/style.css

@@ -0,0 +1 @@
+.wx-admin[data-v-9ef35d4d]{height:100dvh}.wx-admin__screen[data-v-9ef35d4d]{min-width:0;min-height:0}.wx-admin-plain[data-v-9ef35d4d]{display:grid;place-items:center;box-sizing:border-box;min-height:100dvh;padding:var(--wx-space-16);background:var(--wx-bg-body)}html:has(>body>#webx-app),body:has(>#webx-app){margin:0}

package/dist/types.d.ts

@@ -0,0 +1,70 @@
+import { RouteRecordRaw } from 'vue-router';
+import { LocaleDescriptor } from './i18n';
+/**
+ * What `GET /api/cms/manifest` answers with — the panel's own description of itself, and the
+ * first thing the front end asks for. Mirrors `WebxUi\Admin\Manifest\ManifestBuilder`.
+ */
+export interface Manifest {
+    title: string;
+    /** Where the panel is served, e.g. `/cms`. Becomes the router's base. */
+    path: string;
+    /** Where its JSON lives, e.g. `/api/cms`. */
+    apiPath: string;
+    /** The language this administrator reads the panel in — their choice, not the site's. */
+    locale: string;
+    /** The languages the site publishes content in. Editing screens are built around this. */
+    locales: LocaleDescriptor[];
+    /** The languages the interface itself can be switched to. */
+    panelLocales: LocaleDescriptor[];
+    modules: ManifestModule[];
+}
+export interface ManifestModule {
+    id: string;
+    title: string;
+    icon: string | null;
+    order: number;
+    permissions: string[];
+    /** Whatever the server-side module wanted to say, in its own room. */
+    meta: Record<string, unknown>;
+}
+/**
+ * Whoever is signed in. Filled in by an auth module — this package defines the shape and
+ * answers `can()` from it, but knows nothing about how anybody signs in.
+ */
+export interface AdminUser {
+    id: number | string;
+    name: string;
+    email: string;
+    isSuper: boolean;
+    permissions: string[];
+    /** The panel language they chose, or null if they never have. */
+    locale?: string | null;
+    [key: string]: unknown;
+}
+/**
+ * A section of the panel, on the front end.
+ *
+ * Pairs with a module on the server by `id`: the server says a module exists and what it is
+ * called, this says what it looks like. A front-end module the server does not report is not
+ * shown — the panel is whatever the installation actually has.
+ */
+export interface AdminModule {
+    /** Same id the server-side module answers to. */
+    id: string;
+    /** Routes mounted under the panel's base path. */
+    routes?: RouteRecordRaw[];
+    /** Where the navigation entry points. Defaults to the first route's path. */
+    path?: string;
+    /**
+     * Shown before the manifest has arrived, and for routes outside it — the sign-in screen is
+     * the reason this exists.
+     */
+    public?: boolean;
+}
+export type AdminStatus = 'loading' | 'ready' | 'unauthenticated' | 'error';
+export interface NavEntry {
+    id: string;
+    title: string;
+    icon: string | null;
+    path: string;
+}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@webx-ui/module-admin",
+  "version": "0.2.4",
+  "description": "The frame a WebX UI admin panel runs in: bootstrap, the shell, the HTTP client and the module registry that pairs with webx-ui/module-admin on the server.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": [
+    "*.css"
+  ],
+  "keywords": [
+    "webx-ui",
+    "vue",
+    "vue3",
+    "admin",
+    "cms",
+    "laravel"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/webx-ui/webx-ui.git",
+    "directory": "packages/module-admin"
+  },
+  "homepage": "https://webx-ui.github.io/webx-ui/guide/roadmap.html",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./style.css": "./dist/style.css",
+    "./dist/style.css": "./dist/style.css",
+    "./package.json": "./package.json"
+  },
+  "peerDependencies": {
+    "vue": "^3.5.0",
+    "vue-router": "^4.5.0"
+  },
+  "dependencies": {
+    "@webx-ui/core": "^0.16.0",
+    "@webx-ui/tokens": "^0.2.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "@vitejs/plugin-vue": "^6.0.1",
+    "typescript": "^5.9.3",
+    "vite": "^7.1.14",
+    "vite-plugin-dts": "^4.5.4",
+    "vue": "^3.5.24",
+    "vue-router": "^4.5.1",
+    "vue-tsc": "^3.1.3"
+  },
+  "scripts": {
+    "build": "vite build",
+    "dev": "vite build --watch",
+    "typecheck": "vue-tsc -p tsconfig.json --noEmit"
+  }
+}