@webx-ui/module-auth 0.12.0 → 0.13.0

package/dist/index-BUVSIwLQ.js

@@ -0,0 +1,2865 @@
+import { inject as ge, defineComponent as X, computed as P, ref as A, useTemplateRef as ne, onBeforeUnmount as Je, resolveComponent as H, openBlock as c, createBlock as h, withCtx as a, createVNode as l, withModifiers as We, createCommentVNode as B, createElementVNode as N, createTextVNode as p, toDisplayString as m, watch as de, unref as e, isRef as we, normalizeClass as Fe, createElementBlock as K, resolveDynamicComponent as Pe, createSlots as Oe, Fragment as ie, renderList as _e, onMounted as Qe, h as Be, defineAsyncComponent as Xe } from "vue";
+import { useTranslate as J, HttpError as Ze, useAdmin as te, useI18n as Re, useErrorText as ce, rowMenuWidth as ea, WxDate as Z, WxRowMenu as Ve, WxFilterChips as Ee, WxListScreen as aa, useTheme as ta } from "@webx-ui/module-admin";
+import { useRouter as la, useRoute as sa } from "vue-router";
+import { useModal as fe, WxDialog as ye, WxFormItem as I, WxInput as ee, WxSelect as ae, WxSpace as le, WxCheckbox as Ae, WxText as E, WxButton as j, toast as G, useElementWidth as he, WxTable as be, WxEntityCard as ke, WxBadge as M, WxAvatar as na, WxIcon as ue, confirm as xe, WxAlert as oa, WxRadioGroup as ia, createModal as pe, WxThemeSwitch as ra } from "@webx-ui/core";
+const De = /* @__PURE__ */ Symbol("webx-auth");
+function Ce() {
+  const s = ge(De, null);
+  if (s === null)
+    throw new Error("useAuth() was called outside a panel that installed the auth plugin.");
+  return s;
+}
+function ua(s) {
+  const r = `${s.apiPath}/auth`;
+  return {
+    async me() {
+      try {
+        return (await s.http.get(`${r}/me`)).data;
+      } catch (o) {
+        if (ca(o))
+          return null;
+        throw o;
+      }
+    },
+    async login(o) {
+      const i = await s.http.post(`${r}/login`, {
+        email: o.email,
+        password: o.password,
+        remember: o.remember ?? !1
+      });
+      return s.setUser(i.data), await s.reload(), i.data;
+    },
+    async setLocale(o) {
+      const i = await s.http.put(`${r}/locale`, { locale: o });
+      s.setUser(i.data), await s.setLocale(o);
+    },
+    async setTheme(o) {
+      const i = await s.http.put(`${r}/theme`, {
+        theme: o === "system" ? null : o
+      });
+      s.setUser(i.data);
+    },
+    async setSiteBar(o) {
+      const i = await s.http.put(`${r}/site-bar`, { enabled: o });
+      s.setUser(i.data);
+    },
+    async updateProfile(o) {
+      const i = await s.http.put(
+        `${r}/me`,
+        o
+      );
+      return s.setUser(i.data), i.data;
+    },
+    async logout() {
+      try {
+        await s.http.post(`${r}/logout`);
+      } finally {
+        s.setUser(null), s.state.status = "unauthenticated", s.state.manifest = null;
+      }
+    }
+  };
+}
+const Ie = /* @__PURE__ */ Symbol("webx-auth-avatar"), Ne = /* @__PURE__ */ Symbol("webx-auth-avatar-field");
+function da(s, r, o = null, i = null) {
+  s.provide(De, r), s.provide(Ie, o), s.provide(Ne, i);
+}
+function ca(s) {
+  return typeof s == "object" && s !== null && "status" in s && s.status === 401;
+}
+const ma = ["title", "aria-label", "aria-pressed"], va = /* @__PURE__ */ X({
+  __name: "LoginCard",
+  props: {
+    emailLabel: { default: void 0 },
+    passwordLabel: { default: void 0 },
+    rememberLabel: { default: void 0 },
+    submitLabel: { default: void 0 },
+    capsLockWarning: { default: void 0 },
+    throttleMessage: { default: void 0 },
+    revealLabel: { default: void 0 },
+    hideLabel: { default: void 0 },
+    remember: { type: Boolean, default: !0 },
+    autofocus: { type: Boolean, default: !0 }
+  },
+  emits: ["success"],
+  setup(s, { expose: r, emit: o }) {
+    const i = s, v = o, k = Ce(), z = J("webx-auth"), n = P(() => ({
+      email: i.emailLabel ?? z("card.email"),
+      password: i.passwordLabel ?? z("card.password"),
+      remember: i.rememberLabel ?? z("card.remember"),
+      submit: i.submitLabel ?? z("card.submit"),
+      capsLock: i.capsLockWarning ?? z("card.caps-lock"),
+      reveal: i.revealLabel ?? z("card.reveal"),
+      hide: i.hideLabel ?? z("card.hide")
+    })), y = A(""), O = A(""), u = A(!1), w = A(!1), V = A(!1), f = A(!1), S = A(""), $ = A({}), x = A(0), T = ne("emailField");
+    let g = null;
+    Je(F);
+    const D = P(() => x.value > 0), t = P(
+      () => i.throttleMessage === void 0 ? z("card.throttled", { seconds: x.value }) : i.throttleMessage.replace(":seconds", String(x.value))
+    );
+    async function b() {
+      if (!(w.value || D.value)) {
+        w.value = !0, S.value = "", $.value = {};
+        try {
+          await k.login({
+            email: y.value,
+            password: O.value,
+            remember: u.value
+          }), O.value = "", v("success");
+        } catch (d) {
+          U(d);
+        } finally {
+          w.value = !1;
+        }
+      }
+    }
+    function U(d) {
+      if (!(d instanceof Ze)) {
+        S.value = d instanceof Error ? d.message : String(d);
+        return;
+      }
+      if (d.isValidation) {
+        $.value = d.errors;
+        return;
+      }
+      if (d.isThrottled) {
+        Y(d.retryAfter ?? 60);
+        return;
+      }
+      S.value = d.message;
+    }
+    function Y(d) {
+      F(), x.value = d, g = setInterval(() => {
+        x.value -= 1, x.value <= 0 && F();
+      }, 1e3);
+    }
+    function F() {
+      g !== null && (clearInterval(g), g = null), x.value = 0;
+    }
+    function C(d) {
+      f.value = d.getModifierState("CapsLock");
+    }
+    return r({ focus: () => T.value?.focus() }), (d, W) => {
+      const _ = H("wx-alert"), Q = H("wx-icon"), ve = H("wx-input"), R = H("wx-form-item"), q = H("wx-checkbox"), L = H("wx-button"), oe = H("wx-form"), Ye = H("wx-card");
+      return c(), h(Ye, {
+        class: "wx-login",
+        padding: 24
+      }, {
+        default: a(() => [
+          l(oe, {
+            errors: $.value,
+            disabled: w.value,
+            gap: "md",
+            onSubmit: We(b, ["prevent"])
+          }, {
+            default: a(() => [
+              S.value !== "" ? (c(), h(_, {
+                key: 0,
+                type: "danger",
+                variant: "soft",
+                live: "",
+                description: S.value,
+                class: "wx-login__message"
+              }, null, 8, ["description"])) : D.value ? (c(), h(_, {
+                key: 1,
+                type: "warning",
+                variant: "soft",
+                live: "",
+                description: t.value,
+                class: "wx-login__message"
+              }, null, 8, ["description"])) : B("", !0),
+              l(R, { name: "email" }, {
+                default: a(() => [
+                  l(ve, {
+                    ref_key: "emailField",
+                    ref: T,
+                    modelValue: y.value,
+                    "onUpdate:modelValue": W[0] || (W[0] = (re) => y.value = re),
+                    type: "email",
+                    placeholder: n.value.email,
+                    "aria-label": n.value.email,
+                    autocomplete: "username",
+                    autofocus: s.autofocus,
+                    inputmode: "email",
+                    size: "lg"
+                  }, {
+                    prefix: a(() => [
+                      l(Q, { name: "mail" })
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "placeholder", "aria-label", "autofocus"])
+                ]),
+                _: 1
+              }),
+              l(R, {
+                name: "password",
+                help: f.value ? n.value.capsLock : void 0
+              }, {
+                default: a(() => [
+                  l(ve, {
+                    modelValue: O.value,
+                    "onUpdate:modelValue": W[2] || (W[2] = (re) => O.value = re),
+                    type: V.value ? "text" : "password",
+                    placeholder: n.value.password,
+                    "aria-label": n.value.password,
+                    autocomplete: "current-password",
+                    size: "lg",
+                    onKeydown: C,
+                    onKeyup: C
+                  }, {
+                    prefix: a(() => [
+                      l(Q, { name: "lock" })
+                    ]),
+                    suffix: a(() => [
+                      N("button", {
+                        type: "button",
+                        class: "wx-login__reveal",
+                        title: V.value ? n.value.hide : n.value.reveal,
+                        "aria-label": V.value ? n.value.hide : n.value.reveal,
+                        "aria-pressed": V.value,
+                        tabindex: "-1",
+                        onClick: W[1] || (W[1] = (re) => V.value = !V.value)
+                      }, [
+                        l(Q, {
+                          name: V.value ? "eye-off" : "eye"
+                        }, null, 8, ["name"])
+                      ], 8, ma)
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "type", "placeholder", "aria-label"])
+                ]),
+                _: 1
+              }, 8, ["help"]),
+              s.remember ? (c(), h(q, {
+                key: 2,
+                modelValue: u.value,
+                "onUpdate:modelValue": W[3] || (W[3] = (re) => u.value = re),
+                label: n.value.remember,
+                class: "wx-login__remember"
+              }, null, 8, ["modelValue", "label"])) : B("", !0),
+              l(L, {
+                type: "primary",
+                "native-type": "submit",
+                size: "lg",
+                block: "",
+                loading: w.value,
+                disabled: D.value
+              }, {
+                default: a(() => [
+                  p(m(n.value.submit), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "disabled"])
+            ]),
+            _: 1
+          }, 8, ["errors", "disabled"])
+        ]),
+        _: 1
+      });
+    };
+  }
+}), $e = (s, r) => {
+  const o = s.__vccOpts || s;
+  for (const [i, v] of r)
+    o[i] = v;
+  return o;
+}, pa = /* @__PURE__ */ $e(va, [["__scopeId", "data-v-3c206e31"]]);
+function Me(s) {
+  return s.types["wx-media"]?.component ?? null;
+}
+function qe(s) {
+  const r = s.assetUrls;
+  return r ? async (o) => (await r([o]))[o] ?? null : null;
+}
+const Ke = {
+  card: {
+    email: "Email",
+    password: "Password",
+    remember: "Stay signed in",
+    submit: "Sign in",
+    "caps-lock": "Caps Lock is on.",
+    reveal: "Show the password",
+    hide: "Hide the password",
+    throttled: "Too many attempts. Try again in :seconds s.",
+    failed: "Those details do not match an account."
+  },
+  admins: {
+    title: "Administrators",
+    "filter-role": "Role",
+    "filter-state": "State",
+    search: "Search administrators",
+    new: "New administrator",
+    edit: "Edit administrator",
+    // The same two, short enough for a button on a phone and for a dialog's heading.
+    "new-short": "Add",
+    "edit-short": "Edit",
+    name: "Name",
+    email: "Email",
+    password: "Password",
+    "password-hint": "At least 12 characters",
+    "password-keep": "Leave blank to keep the current one",
+    avatar: "Photo",
+    roles: "Roles",
+    "no-roles": "No roles",
+    active: "Active",
+    super: "Super administrator",
+    "super-hint": "Answers yes to everything, whatever the roles say",
+    locale: "Panel language",
+    "locale-auto": "Follow the browser",
+    "last-login": "Last signed in",
+    save: "Save",
+    cancel: "Cancel",
+    delete: "Delete",
+    "delete-title": "Delete :name?",
+    "delete-text": "They lose access at once. What they have written stays.",
+    "all-roles": "All roles",
+    "any-state": "Active and not",
+    "only-active": "Active only",
+    "only-inactive": "Switched off only",
+    empty: "Nobody matches that",
+    "select-one": "Choose an administrator",
+    "select-many": "Choose administrators",
+    chosen: "Chosen: :count",
+    created: "Administrator created",
+    updated: "Administrator saved",
+    deleted: "Administrator deleted"
+  },
+  // The trail of what agents did through the panel: the view next to the administrators.
+  calls: {
+    title: "Agent calls",
+    when: "When",
+    who: "Who",
+    client: "Client",
+    tool: "Tool",
+    outcome: "Outcome",
+    took: "Took",
+    ms: ":count ms",
+    answered: "Answered",
+    refused: "Refused",
+    "dry-run": "Dry run",
+    local: "Local server",
+    deleted: "Administrator #:id",
+    "filter-user": "Administrator",
+    "filter-tool": "Tool",
+    "filter-outcome": "Outcome",
+    everybody: "Everybody",
+    "all-tools": "All tools",
+    "any-outcome": "Any outcome",
+    "only-answered": "Answered only",
+    "only-refused": "Refused only",
+    "only-dry": "Dry runs only",
+    arguments: "Arguments",
+    "no-arguments": "Called with no arguments",
+    request: "The agent's request",
+    "request-hint": "What the agent passed to the tool. The answer is not kept.",
+    error: "Refused with",
+    empty: "No calls match"
+  },
+  // The connections tab and the page that tells somebody how to make one.
+  connections: {
+    title: "Connections",
+    client: "Client",
+    allowed: "What is allowed",
+    connected: "Connected",
+    "last-used": "Last used",
+    who: "Administrator",
+    full: "Everything :name can do",
+    "full-you": "Everything you can do",
+    "read-only": "Reading only",
+    "returns-to": "Answers go to :host",
+    disconnect: "Disconnect",
+    disconnected: "Disconnected",
+    "never-used": "Never",
+    empty: "No agents are connected",
+    "empty-all": "Nobody has connected an agent",
+    "confirm-title": "Disconnect :client?",
+    "confirm-text": "It loses access at once, including the month of refreshing it was given. Connecting it again takes three clicks.",
+    confirm: "Disconnect",
+    cancel: "Cancel",
+    done: ":client is disconnected",
+    deleted: "Administrator #:id"
+  },
+  // Keys for programs, issued and revoked under Administrators → Keys.
+  keys: {
+    title: "Keys",
+    issue: "Issue a key",
+    "issue-short": "Issue",
+    lead: "A key lets a program — a queue watcher, a nightly import — work in this panel without a browser. It acts as the administrator you choose and can never do more than they may. A key is a program, not a person: what a module keeps for a person, such as a stage checked by hand, it cannot do.",
+    name: "Name",
+    "name-hint": 'What the program is, so that the list says it: "queue watcher", "nightly import".',
+    who: "Acts as",
+    "who-hint": "Everything the key changes is done in this administrator's name, within their permissions.",
+    allowed: "What is allowed",
+    everything: "Everything the administrator may do",
+    chosen: "Only the scopes chosen below",
+    scopes: "Scopes",
+    "scopes-hint": "A module installed later is out of reach until a new key names it.",
+    "scopes-required": "Choose at least one scope.",
+    lifetime: "Lives for",
+    "lifetime-hint": "A key cannot be extended: issue a new one before this one runs out, then revoke the old one.",
+    "days-30": "30 days",
+    "days-90": "90 days",
+    "days-365": "1 year",
+    "days-1095": "3 years",
+    "days-3650": "10 years",
+    "issued-title": "Copy the key now",
+    "issued-text": "This is the only time the key is shown. Nobody can see it again — not here, not on the server. If it is lost, revoke it and issue a new one.",
+    secret: "Key",
+    copy: "Copy",
+    copied: "Copied",
+    "copy-failed": "Could not reach the clipboard. Select the key and copy it by hand.",
+    address: "Server address",
+    "header-hint": "The program sends the key in a header: Authorization: Bearer <key>.",
+    done: "Done",
+    cancel: "Cancel",
+    expires: "Expires",
+    until: "until",
+    "last-used": "Last used",
+    "never-used": "Never",
+    "issued-by": "Issued by :name",
+    "issued-console": "Issued in a terminal",
+    full: "Everything :name can do",
+    deleted: "Administrator #:id",
+    revoke: "Revoke",
+    revoked: "Revoked",
+    expired: "Expired",
+    "confirm-title": "Revoke :name?",
+    "confirm-text": "The program using it is refused from its next call. A revoked key cannot be switched back on.",
+    confirm: "Revoke",
+    "revoked-done": ":name is revoked",
+    empty: "No keys have been issued"
+  },
+  connect: {
+    lead: "An AI agent — Claude, ChatGPT, Cursor — can work in this panel as you. Give it the address below; it will ask you to sign in and then ask what it may do.",
+    title: "Connect an agent",
+    address: "The address of this panel for agents",
+    copy: "Copy the address",
+    copied: "Copied",
+    "copy-failed": "Could not reach the clipboard. Select the address and copy it by hand.",
+    "copy-line": "Copy",
+    how: "How to add it",
+    "claude-title": "Claude",
+    "claude-1": "Open Settings and go to Connectors.",
+    "claude-2": 'Press "Add custom connector".',
+    "claude-3": "Paste the address and press Add.",
+    "chatgpt-title": "ChatGPT",
+    "chatgpt-1": "Open Settings and go to Connectors.",
+    "chatgpt-2": 'Press "Add" and choose a custom MCP server.',
+    "chatgpt-3": "Paste the address, leave the authentication as OAuth, and confirm.",
+    "claude-code-title": "Claude Code",
+    "claude-code-hint": "One line in a terminal, from any project:",
+    "codex-title": "Codex",
+    "codex-hint": "These lines in ~/.codex/config.toml:",
+    "one-click": "One click",
+    "one-click-hint": "These two take the whole thing from a link: the editor opens, asks once, and the server is there.",
+    "install-in": "Add to :client",
+    "cursor-title": "Cursor",
+    "vscode-title": "VS Code",
+    next: "What happens next",
+    "next-1": "The client opens this site in a browser and asks you to sign in to the panel, with your usual password. It never sees the password.",
+    "next-2": 'The panel shows who is asking and where the answer goes. There is a "read only" switch on that screen, and turning it on is the safe way to begin.',
+    "next-3": "From then on the agent acts as you: it can do what you can do and nothing more, and every call it makes is written down.",
+    mine: "Your connections",
+    rules: "Rules for agents",
+    "rules-hint": "Every connected agent reads these before it writes anything a visitor will see."
+  },
+  errors: {
+    unauthenticated: "Unauthenticated.",
+    inactive: "This account is no longer active.",
+    forbidden: "This account may not do that.",
+    "not-yourself": "You cannot do that to your own account.",
+    "last-super": "There has to be one super administrator left."
+  },
+  // Somebody editing themselves, which is a shorter list than an administrator editing them.
+  profile: {
+    title: "Your profile",
+    menu: "Edit your profile",
+    name: "Name",
+    avatar: "Photo",
+    password: "New password",
+    "password-hint": "At least 12 characters. Leave blank to keep the current one.",
+    "current-password": "Current password",
+    "current-password-hint": "Asked for before the password is changed.",
+    "wrong-password": "That is not the current password.",
+    saved: "Your profile is saved.",
+    save: "Save",
+    cancel: "Cancel"
+  },
+  menu: {
+    "sign-out": "Sign out",
+    language: "Interface language",
+    "site-bar": "Panel on the site"
+  }
+};
+function me(s) {
+  const r = `${s.apiPath}/auth`, o = (i) => i.data;
+  return {
+    list: (i = {}) => s.http.get(`${r}/admins`, {
+      query: {
+        q: i.q || void 0,
+        role: i.role ?? void 0,
+        active: i.active ?? void 0,
+        sort: i.sort,
+        page: i.page,
+        per_page: i.per_page
+      }
+    }).then((v) => ({ ...v.meta, data: v.data })),
+    get: (i) => s.http.get(`${r}/admins/${i}`).then(o),
+    create: (i) => s.http.post(`${r}/admins`, i).then(o),
+    update: (i, v) => s.http.patch(`${r}/admins/${i}`, v).then(o),
+    remove: (i) => s.http.delete(`${r}/admins/${i}`),
+    roles: () => s.http.get(`${r}/roles`).then(o),
+    calls: (i = {}) => s.http.get(`${r}/mcp-calls`, {
+      query: {
+        user: i.user ?? void 0,
+        tool: i.tool ?? void 0,
+        outcome: i.outcome ?? void 0,
+        page: i.page,
+        per_page: i.per_page
+      }
+    }).then((v) => ({ ...v.meta, data: v.data, filters: v.filters }))
+  };
+}
+const ze = /* @__PURE__ */ new WeakSet();
+function se() {
+  try {
+    const { i18n: s } = te();
+    ze.has(s) || (s.defaults("webx-auth", Ke), ze.add(s));
+  } catch {
+  }
+}
+const fa = { class: "wx-admin-form" }, ya = {
+  key: 0,
+  class: "wx-admin-form__aside"
+}, ha = { class: "wx-admin-form__fields" }, ba = /* @__PURE__ */ X({
+  __name: "AdminDialog",
+  props: {
+    admin: { default: null },
+    avatarField: { default: void 0 }
+  },
+  setup(s) {
+    const r = s, { resolve: o, dismiss: i, open: v } = fe(), k = te(), z = me(k), n = Re();
+    se();
+    const y = J("webx-auth"), O = ce(), u = A([]), w = A(!1), V = A({}), f = A({
+      name: "",
+      email: "",
+      password: "",
+      avatar: null,
+      is_active: !0,
+      is_super: !1,
+      locale: null,
+      roles: []
+    }), S = P({
+      get: () => f.value.avatar ? { path: f.value.avatar } : null,
+      set: (t) => {
+        f.value.avatar = t?.path ?? null;
+      }
+    }), $ = P(() => r.admin !== null), x = P(() => u.value.map((t) => ({ value: t.id, label: t.name }))), T = P(() => [
+      { value: "auto", label: y("admins.locale-auto") },
+      ...n.state.panelLocales.map((t) => ({ value: t.code, label: t.nativeName }))
+    ]);
+    z.roles().then((t) => u.value = t), de(
+      () => r.admin,
+      (t) => {
+        f.value = {
+          name: t?.name ?? "",
+          email: t?.email ?? "",
+          password: "",
+          avatar: t?.avatar ?? null,
+          is_active: t?.is_active ?? !0,
+          is_super: t?.is_super ?? !1,
+          locale: t?.locale ?? "auto",
+          roles: t?.roles.map((b) => b.id) ?? []
+        }, V.value = {};
+      },
+      { immediate: !0 }
+    );
+    function g(t) {
+      return V.value[t]?.[0];
+    }
+    async function D() {
+      w.value = !0, V.value = {};
+      const t = {
+        name: f.value.name,
+        email: f.value.email,
+        avatar: f.value.avatar,
+        is_active: f.value.is_active,
+        is_super: f.value.is_super,
+        locale: f.value.locale === "auto" ? null : f.value.locale,
+        roles: f.value.roles ?? []
+      };
+      f.value.password && (t.password = f.value.password);
+      try {
+        const b = r.admin ? await z.update(r.admin.id, t) : await z.create(t);
+        G.success(y($.value ? "admins.updated" : "admins.created")), o(b);
+      } catch (b) {
+        const U = b.body;
+        U?.errors ? V.value = U.errors : G.danger(O(b));
+      } finally {
+        w.value = !1;
+      }
+    }
+    return (t, b) => (c(), h(e(ye), {
+      open: e(v),
+      "onUpdate:open": b[9] || (b[9] = (U) => we(v) ? v.value = U : null),
+      title: $.value ? e(y)("admins.edit-short") : e(y)("admins.new-short"),
+      width: 720
+    }, {
+      footer: a(() => [
+        l(e(le), { size: "sm" }, {
+          default: a(() => [
+            l(e(j), {
+              variant: "outline",
+              onClick: b[8] || (b[8] = (U) => e(i)())
+            }, {
+              default: a(() => [
+                p(m(e(y)("admins.cancel")), 1)
+              ]),
+              _: 1
+            }),
+            l(e(j), {
+              type: "primary",
+              loading: w.value,
+              onClick: D
+            }, {
+              default: a(() => [
+                p(m(e(y)("admins.save")), 1)
+              ]),
+              _: 1
+            }, 8, ["loading"])
+          ]),
+          _: 1
+        })
+      ]),
+      default: a(() => [
+        N("div", fa, [
+          N("div", {
+            class: Fe(["wx-admin-form__grid", { "has-aside": s.avatarField }])
+          }, [
+            s.avatarField ? (c(), K("div", ya, [
+              (c(), h(Pe(s.avatarField), {
+                modelValue: S.value,
+                "onUpdate:modelValue": b[0] || (b[0] = (U) => S.value = U),
+                label: e(y)("admins.avatar"),
+                aspect: "1/1",
+                captions: !1
+              }, null, 8, ["modelValue", "label"]))
+            ])) : B("", !0),
+            N("div", ha, [
+              l(e(I), {
+                label: e(y)("admins.name"),
+                error: g("name")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: f.value.name,
+                    "onUpdate:modelValue": b[1] || (b[1] = (U) => f.value.name = U),
+                    name: "name"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              l(e(I), {
+                label: e(y)("admins.email"),
+                error: g("email")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: f.value.email,
+                    "onUpdate:modelValue": b[2] || (b[2] = (U) => f.value.email = U),
+                    type: "email",
+                    name: "email",
+                    autocomplete: "off"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              l(e(I), {
+                label: e(y)("admins.password"),
+                error: g("password"),
+                help: $.value ? e(y)("admins.password-keep") : e(y)("admins.password-hint")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: f.value.password,
+                    "onUpdate:modelValue": b[3] || (b[3] = (U) => f.value.password = U),
+                    type: "password",
+                    name: "password",
+                    autocomplete: "new-password"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error", "help"]),
+              l(e(I), {
+                label: e(y)("admins.roles"),
+                error: g("roles")
+              }, {
+                default: a(() => [
+                  l(e(ae), {
+                    modelValue: f.value.roles,
+                    "onUpdate:modelValue": b[4] || (b[4] = (U) => f.value.roles = U),
+                    options: x.value,
+                    multiple: ""
+                  }, null, 8, ["modelValue", "options"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              l(e(I), {
+                label: e(y)("admins.locale")
+              }, {
+                default: a(() => [
+                  l(e(ae), {
+                    modelValue: f.value.locale,
+                    "onUpdate:modelValue": b[5] || (b[5] = (U) => f.value.locale = U),
+                    options: T.value
+                  }, null, 8, ["modelValue", "options"])
+                ]),
+                _: 1
+              }, 8, ["label"]),
+              l(e(le), { size: "md" }, {
+                default: a(() => [
+                  l(e(Ae), {
+                    modelValue: f.value.is_active,
+                    "onUpdate:modelValue": b[6] || (b[6] = (U) => f.value.is_active = U),
+                    label: e(y)("admins.active")
+                  }, null, 8, ["modelValue", "label"]),
+                  l(e(Ae), {
+                    modelValue: f.value.is_super,
+                    "onUpdate:modelValue": b[7] || (b[7] = (U) => f.value.is_super = U),
+                    label: e(y)("admins.super")
+                  }, null, 8, ["modelValue", "label"])
+                ]),
+                _: 1
+              }),
+              l(e(E), {
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(y)("admins.super-hint")), 1)
+                ]),
+                _: 1
+              })
+            ])
+          ], 2)
+        ])
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), Se = 480, je = /* @__PURE__ */ X({
+  __name: "AdminList",
+  props: {
+    picking: { type: Boolean, default: !1 },
+    multiple: { type: Boolean, default: !1 },
+    removable: { type: Boolean, default: !1 },
+    filters: { type: Boolean, default: !1 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  emits: ["open", "chosen", "selection", "remove"],
+  setup(s, { expose: r, emit: o }) {
+    const i = s, v = o, k = te(), z = me(k);
+    se();
+    const n = ne("root"), y = he(n), O = P(() => y.value > 0 && y.value < Se), u = J("webx-auth"), w = J("webx-admin"), V = A(null), f = A([]), S = A(!1), $ = A("all"), x = A("any"), T = A([]), g = A({});
+    let D = { page: 1, perPage: 20, sort: null, search: "" };
+    const t = P(() => [
+      { value: "all", label: u("admins.all-roles") },
+      ...f.value.map((R) => ({ value: R.slug, label: R.name }))
+    ]), b = P(() => [
+      { value: "any", label: u("admins.any-state") },
+      { value: "yes", label: u("admins.only-active") },
+      { value: "no", label: u("admins.only-inactive") }
+    ]), U = P(() => {
+      const R = [], q = f.value.find((L) => L.slug === $.value);
+      return q && R.push({
+        key: "role",
+        label: `${u("admins.filter-role")}: ${q.name}`,
+        clear: () => $.value = "all"
+      }), x.value !== "any" && R.push({
+        key: "state",
+        label: `${u("admins.filter-state")}: ${x.value === "yes" ? u("admins.only-active") : u("admins.only-inactive")}`,
+        clear: () => x.value = "any"
+      }), R;
+    });
+    function Y() {
+      $.value = "all", x.value = "any";
+    }
+    const F = P(() => O.value ? [{ key: "card", label: "" }] : [
+      { key: "name", label: u("admins.name"), sortable: !0 },
+      { key: "email", label: u("admins.email"), sortable: !0, hideBelow: 560 },
+      { key: "roles", label: u("admins.roles"), hideBelow: 760 },
+      { key: "is_active", label: u("admins.active"), align: "center", hideBelow: 660 },
+      {
+        key: "last_login_at",
+        label: u("admins.last-login"),
+        sortable: !0,
+        hideBelow: 900,
+        // The first thing to go when a row becomes a card: it is a date somebody scans down a
+        // column, and a card has no column to scan.
+        hideOnCards: !0
+      },
+      {
+        key: "actions",
+        label: "",
+        width: ea,
+        align: "right",
+        hidden: !i.removable,
+        // A card puts them along its top instead, through the `card-actions` slot.
+        hideOnCards: !0
+      }
+    ]);
+    z.roles().then((R) => f.value = R), de([$, x], () => C(D));
+    async function C(R) {
+      D = R, S.value = !0;
+      try {
+        V.value = await z.list({
+          q: R.search,
+          role: $.value === "all" ? null : $.value,
+          active: x.value === "any" ? null : x.value,
+          sort: R.sort ? `${R.sort.order === "desc" ? "-" : ""}${R.sort.key}` : "name",
+          page: R.page,
+          per_page: R.perPage
+        }), d();
+      } finally {
+        S.value = !1;
+      }
+    }
+    async function d() {
+      const R = i.resolveAvatar;
+      if (R)
+        for (const q of V.value?.data ?? []) {
+          if (!q.avatar || g.value[q.avatar]) continue;
+          const L = await R(q.avatar);
+          L && (g.value = { ...g.value, [q.avatar]: L });
+        }
+    }
+    function W(R) {
+      return [
+        {
+          key: "delete",
+          icon: "trash",
+          label: u("admins.delete"),
+          danger: !0,
+          run: () => v("remove", R)
+        }
+      ];
+    }
+    function _(R) {
+      if (i.picking) {
+        v("chosen", [R]);
+        return;
+      }
+      v("open", R);
+    }
+    const Q = P(() => !(i.picking && i.multiple));
+    function ve(R, q) {
+      T.value = q, v("selection", q);
+    }
+    return r({ reload: () => C(D), chosen: () => T.value }), (R, q) => (c(), K("div", {
+      ref_key: "root",
+      ref: n,
+      class: "wx-admin-list"
+    }, [
+      l(e(be), {
+        data: V.value,
+        columns: F.value,
+        "row-key": "id",
+        searchable: "",
+        clickable: Q.value,
+        hover: Q.value,
+        flush: "",
+        loading: S.value,
+        "search-placeholder": e(u)("admins.search"),
+        "empty-text": e(u)("admins.empty"),
+        selectable: s.picking && s.multiple,
+        "select-row-label": e(w)("filters.select-row"),
+        "select-all-label": e(w)("filters.select-all"),
+        "cards-below": Se,
+        "filters-count": U.value.length,
+        "filters-label": e(w)("filters.title"),
+        onRowClick: _,
+        onStateChange: C,
+        onSelectionChange: ve
+      }, Oe({
+        "cell-name": a(({ row: L }) => [
+          l(e(le), {
+            size: "sm",
+            align: "center"
+          }, {
+            default: a(() => [
+              l(e(na), {
+                name: L.name,
+                src: L.avatar ? g.value[L.avatar] : void 0,
+                size: "sm"
+              }, null, 8, ["name", "src"]),
+              N("span", null, m(L.name), 1),
+              L.is_super ? (c(), h(e(M), {
+                key: 0,
+                type: "warning"
+              }, {
+                default: a(() => [
+                  p(m(e(u)("admins.super")), 1)
+                ]),
+                _: 1
+              })) : B("", !0)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-roles": a(({ row: L }) => [
+          L.roles.length > 0 ? (c(), h(e(le), {
+            key: 0,
+            size: "xs",
+            wrap: ""
+          }, {
+            default: a(() => [
+              (c(!0), K(ie, null, _e(L.roles, (oe) => (c(), h(e(M), {
+                key: oe.id
+              }, {
+                default: a(() => [
+                  p(m(oe.name), 1)
+                ]),
+                _: 2
+              }, 1024))), 128))
+            ]),
+            _: 2
+          }, 1024)) : (c(), h(e(E), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(u)("admins.no-roles")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-is_active": a(({ row: L }) => [
+          l(e(M), {
+            type: L.is_active ? "success" : "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m(L.is_active ? e(u)("admins.active") : e(u)("admins.only-inactive")), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"])
+        ]),
+        "card-actions": a(({ row: L }) => [
+          s.removable ? (c(), h(e(Ve), {
+            key: 0,
+            actions: W(L),
+            label: L.name
+          }, null, 8, ["actions", "label"])) : B("", !0)
+        ]),
+        "cell-actions": a(({ row: L }) => [
+          l(e(Ve), {
+            actions: W(L),
+            label: L.name
+          }, null, 8, ["actions", "label"])
+        ]),
+        "cell-last_login_at": a(({ row: L }) => [
+          l(e(Z), {
+            value: L.last_login_at,
+            tone: L.last_login_at ? "default" : "muted",
+            compact: ""
+          }, null, 8, ["value", "tone"])
+        ]),
+        "cell-card": a(({ row: L }) => [
+          l(e(ke), {
+            variant: "plain",
+            shape: "circle",
+            title: L.name,
+            image: L.avatar ? g.value[L.avatar] : void 0,
+            subtitle: L.email
+          }, {
+            meta: a(() => [
+              L.is_super ? (c(), h(e(M), {
+                key: 0,
+                type: "warning",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(e(u)("admins.super")), 1)
+                ]),
+                _: 1
+              })) : B("", !0),
+              (c(!0), K(ie, null, _e(L.roles, (oe) => (c(), h(e(M), {
+                key: oe.id,
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(oe.name), 1)
+                ]),
+                _: 2
+              }, 1024))), 128)),
+              l(e(M), {
+                type: L.is_active ? "success" : "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(L.is_active ? e(u)("admins.active") : e(u)("admins.only-inactive")), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])
+            ]),
+            _: 2
+          }, 1032, ["title", "image", "subtitle"])
+        ]),
+        _: 2
+      }, [
+        s.filters ? {
+          name: "filters",
+          fn: a(() => [
+            l(e(I), {
+              label: e(u)("admins.filter-role")
+            }, {
+              default: a(() => [
+                l(e(ae), {
+                  modelValue: $.value,
+                  "onUpdate:modelValue": q[0] || (q[0] = (L) => $.value = L),
+                  options: t.value,
+                  size: "sm"
+                }, null, 8, ["modelValue", "options"])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            l(e(I), {
+              label: e(u)("admins.filter-state")
+            }, {
+              default: a(() => [
+                l(e(ae), {
+                  modelValue: x.value,
+                  "onUpdate:modelValue": q[1] || (q[1] = (L) => x.value = L),
+                  options: b.value,
+                  size: "sm"
+                }, null, 8, ["modelValue", "options"])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            U.value.length > 0 ? (c(), h(e(j), {
+              key: 0,
+              variant: "text",
+              size: "sm",
+              block: "",
+              onClick: Y
+            }, {
+              icon: a(() => [
+                l(e(ue), { name: "close" })
+              ]),
+              default: a(() => [
+                p(" " + m(e(w)("filters.reset")), 1)
+              ]),
+              _: 1
+            })) : B("", !0)
+          ]),
+          key: "0"
+        } : void 0,
+        s.filters ? {
+          name: "applied",
+          fn: a(() => [
+            l(e(Ee), { filters: U.value }, null, 8, ["filters"])
+          ]),
+          key: "1"
+        } : void 0
+      ]), 1032, ["data", "columns", "clickable", "hover", "loading", "search-placeholder", "empty-text", "selectable", "select-row-label", "select-all-label", "filters-count", "filters-label"])
+    ], 512));
+  }
+}), ka = { class: "wx-call-list__details" }, ga = { class: "wx-call-list__label" }, _a = {
+  key: 1,
+  class: "wx-call-list__arguments"
+}, wa = {
+  class: "wx-call-list__glyph",
+  "aria-hidden": "true"
+}, xa = {
+  key: 2,
+  class: "wx-call-list__arguments"
+}, Le = 480, Ca = /* @__PURE__ */ X({
+  __name: "CallList",
+  setup(s, { expose: r }) {
+    const o = te(), i = me(o);
+    se();
+    const v = ne("root"), k = he(v), z = P(() => k.value > 0 && k.value < Le), n = J("webx-auth"), y = J("webx-admin"), O = A(null), u = A({ users: [], tools: [] }), w = A(!1), V = A("all"), f = A("all"), S = A("any");
+    let $ = { page: 1, perPage: 30, sort: null, search: "" };
+    function x(d) {
+      return d === null ? n("calls.local") : d.name ?? n("calls.deleted", { id: d.id });
+    }
+    const T = P(() => [
+      { value: "all", label: n("calls.everybody") },
+      ...u.value.users.map((d) => ({
+        value: d.id === null ? "none" : String(d.id),
+        label: x(d.id === null ? null : { id: d.id, name: d.name })
+      }))
+    ]), g = P(() => [
+      { value: "all", label: n("calls.all-tools") },
+      ...u.value.tools.map((d) => ({ value: d, label: d }))
+    ]), D = P(() => [
+      { value: "any", label: n("calls.any-outcome") },
+      { value: "ok", label: n("calls.only-answered") },
+      { value: "failed", label: n("calls.only-refused") },
+      { value: "dry", label: n("calls.only-dry") }
+    ]), t = P(() => {
+      const d = [], W = T.value.find((Q) => Q.value === V.value);
+      V.value !== "all" && W && d.push({
+        key: "user",
+        label: `${n("calls.filter-user")}: ${W.label}`,
+        clear: () => V.value = "all"
+      }), f.value !== "all" && d.push({
+        key: "tool",
+        label: `${n("calls.filter-tool")}: ${f.value}`,
+        clear: () => f.value = "all"
+      });
+      const _ = D.value.find((Q) => Q.value === S.value);
+      return S.value !== "any" && _ && d.push({
+        key: "outcome",
+        label: `${n("calls.filter-outcome")}: ${_.label}`,
+        clear: () => S.value = "any"
+      }), d;
+    });
+    function b() {
+      V.value = "all", f.value = "all", S.value = "any";
+    }
+    const U = P(() => z.value ? [{ key: "card", label: "" }] : [
+      { key: "at", label: n("calls.when") },
+      { key: "user", label: n("calls.who"), hideBelow: 640 },
+      { key: "tool", label: n("calls.tool") },
+      { key: "outcome", label: n("calls.outcome") },
+      { key: "duration_ms", label: n("calls.took"), align: "right", hideBelow: 820 },
+      { key: "client", label: n("calls.client"), hideBelow: 960 }
+    ]);
+    de([V, f, S], () => Y({ ...$, page: 1 }));
+    async function Y(d) {
+      $ = d, w.value = !0;
+      try {
+        O.value = await i.calls({
+          user: V.value === "all" ? null : V.value,
+          tool: f.value === "all" ? null : f.value,
+          outcome: S.value === "any" ? null : S.value,
+          page: d.page,
+          per_page: d.perPage
+        }), u.value = O.value.filters;
+      } finally {
+        w.value = !1;
+      }
+    }
+    function F(d) {
+      return d.ok ? d.dry_run ? { type: "info", label: n("calls.dry-run") } : { type: "success", label: n("calls.answered") } : { type: "danger", label: n("calls.refused") };
+    }
+    function C(d) {
+      return d.arguments !== null || d.error !== null;
+    }
+    return r({ reload: () => Y($) }), (d, W) => (c(), K("div", {
+      ref_key: "root",
+      ref: v,
+      class: "wx-call-list"
+    }, [
+      l(e(be), {
+        data: O.value,
+        columns: U.value,
+        "row-key": "id",
+        flush: "",
+        loading: w.value,
+        clickable: !1,
+        expandable: !z.value,
+        "expandable-if": C,
+        "empty-text": e(n)("calls.empty"),
+        "cards-below": Le,
+        "filters-count": t.value.length,
+        "filters-label": e(y)("filters.title"),
+        onStateChange: Y
+      }, {
+        filters: a(() => [
+          l(e(I), {
+            label: e(n)("calls.filter-user")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: V.value,
+                "onUpdate:modelValue": W[0] || (W[0] = (_) => V.value = _),
+                options: T.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          l(e(I), {
+            label: e(n)("calls.filter-tool")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: f.value,
+                "onUpdate:modelValue": W[1] || (W[1] = (_) => f.value = _),
+                options: g.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          l(e(I), {
+            label: e(n)("calls.filter-outcome")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: S.value,
+                "onUpdate:modelValue": W[2] || (W[2] = (_) => S.value = _),
+                options: D.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          t.value.length > 0 ? (c(), h(e(j), {
+            key: 0,
+            variant: "text",
+            size: "sm",
+            block: "",
+            onClick: b
+          }, {
+            icon: a(() => [
+              l(e(ue), { name: "close" })
+            ]),
+            default: a(() => [
+              p(" " + m(e(y)("filters.reset")), 1)
+            ]),
+            _: 1
+          })) : B("", !0)
+        ]),
+        applied: a(() => [
+          l(e(Ee), { filters: t.value }, null, 8, ["filters"])
+        ]),
+        "cell-at": a(({ row: _ }) => [
+          l(e(Z), {
+            value: _.at,
+            tone: "default",
+            compact: ""
+          }, null, 8, ["value"])
+        ]),
+        "cell-user": a(({ row: _ }) => [
+          l(e(E), {
+            tone: _.user === null || _.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              p(m(x(_.user)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-tool": a(({ row: _ }) => [
+          l(e(E), {
+            mono: "",
+            size: "sm"
+          }, {
+            default: a(() => [
+              p(m(_.tool), 1)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-outcome": a(({ row: _ }) => [
+          l(e(M), {
+            type: F(_).type,
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m(F(_).label), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"])
+        ]),
+        "cell-duration_ms": a(({ row: _ }) => [
+          l(e(E), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(n)("calls.ms", { count: _.duration_ms })), 1)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-client": a(({ row: _ }) => [
+          _.client ? (c(), h(e(E), {
+            key: 0,
+            size: "sm"
+          }, {
+            default: a(() => [
+              p(m(_.client), 1)
+            ]),
+            _: 2
+          }, 1024)) : (c(), h(e(E), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [...W[3] || (W[3] = [
+              p("—", -1)
+            ])]),
+            _: 1
+          }))
+        ]),
+        expanded: a(({ row: _ }) => [
+          N("div", ka, [
+            _.error ? (c(), h(e(E), {
+              key: 0,
+              tone: "danger",
+              size: "sm",
+              class: "wx-call-list__error"
+            }, {
+              default: a(() => [
+                N("strong", null, m(e(n)("calls.error")) + ":", 1),
+                p(" " + m(_.error), 1)
+              ]),
+              _: 2
+            }, 1024)) : B("", !0),
+            N("div", ga, [
+              l(e(E), {
+                size: "sm",
+                weight: "semibold"
+              }, {
+                default: a(() => [
+                  p(m(e(n)("calls.request")), 1)
+                ]),
+                _: 1
+              }),
+              l(e(E), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(n)("calls.request-hint")), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _.arguments ? (c(), K("pre", _a, m(_.arguments), 1)) : (c(), h(e(E), {
+              key: 2,
+              size: "sm",
+              tone: "muted"
+            }, {
+              default: a(() => [
+                p(m(e(n)("calls.no-arguments")), 1)
+              ]),
+              _: 1
+            }))
+          ])
+        ]),
+        "cell-card": a(({ row: _ }) => [
+          l(e(ke), {
+            variant: "plain",
+            title: _.tool,
+            subtitle: x(_.user)
+          }, {
+            media: a(() => [
+              N("span", wa, [
+                l(e(ue), { name: "sliders" })
+              ])
+            ]),
+            meta: a(() => [
+              l(e(M), {
+                type: F(_).type,
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(F(_).label), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"]),
+              l(e(Z), {
+                value: _.at,
+                compact: ""
+              }, null, 8, ["value"]),
+              _.client ? (c(), h(e(E), {
+                key: 0,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(_.client), 1)
+                ]),
+                _: 2
+              }, 1024)) : B("", !0)
+            ]),
+            default: a(() => [
+              C(_) ? (c(), h(e(le), {
+                key: 0,
+                direction: "vertical",
+                size: "xs",
+                class: "wx-call-list__card-details"
+              }, {
+                default: a(() => [
+                  _.error ? (c(), h(e(E), {
+                    key: 0,
+                    tone: "danger",
+                    size: "sm"
+                  }, {
+                    default: a(() => [
+                      p(m(_.error), 1)
+                    ]),
+                    _: 2
+                  }, 1024)) : B("", !0),
+                  _.arguments ? (c(), h(e(E), {
+                    key: 1,
+                    size: "xs",
+                    tone: "muted"
+                  }, {
+                    default: a(() => [
+                      p(m(e(n)("calls.request")), 1)
+                    ]),
+                    _: 1
+                  })) : B("", !0),
+                  _.arguments ? (c(), K("pre", xa, m(_.arguments), 1)) : B("", !0)
+                ]),
+                _: 2
+              }, 1024)) : B("", !0)
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "expandable", "empty-text", "filters-count", "filters-label"])
+    ], 512));
+  }
+});
+function $a(s) {
+  const r = `${s.apiPath}/auth/connections`;
+  return {
+    list: (o = "mine") => s.http.get(r, { query: { all: o === "all" ? 1 : void 0 } }).then((i) => ({
+      data: i.data,
+      scope: i.meta.scope,
+      canSeeEverybody: i.meta.can_see_everybody
+    })),
+    disconnect: (o) => s.http.delete(`${r}/${o}`).then((i) => i.data)
+  };
+}
+const Va = {
+  class: "wx-connection-list__glyph",
+  "aria-hidden": "true"
+}, Ue = 560, Aa = /* @__PURE__ */ X({
+  __name: "ConnectionList",
+  props: {
+    scope: { default: "mine" }
+  },
+  setup(s, { expose: r }) {
+    const o = s, i = te(), v = $a(i);
+    se();
+    const k = J("webx-auth"), z = ce(), n = ne("root"), y = he(n), O = P(() => y.value > 0 && y.value < Ue), u = A([]), w = A(!1), V = A(null), f = P(() => O.value ? [{ key: "card", label: "" }] : [
+      { key: "client", label: k("connections.client"), minWidth: 210 },
+      ...o.scope === "all" ? [{ key: "user", label: k("connections.who"), minWidth: 140 }] : [],
+      { key: "read_only", label: k("connections.allowed"), minWidth: 160 },
+      { key: "connected_at", label: k("connections.connected"), hideBelow: 860 },
+      { key: "last_used_at", label: k("connections.last-used"), minWidth: 130 },
+      { key: "end", label: "", align: "right", width: 140 }
+    ]);
+    function S(g) {
+      return g.user.name ?? k("calls.deleted", { id: g.user.id });
+    }
+    function $(g) {
+      if (g.read_only) return k("connections.read-only");
+      if (o.scope !== "all") return k("connections.full-you");
+      const D = g.user.name?.split(" ")[0];
+      return k("connections.full", { name: D || S(g) });
+    }
+    async function x() {
+      w.value = !0;
+      try {
+        u.value = (await v.list(o.scope)).data;
+      } catch (g) {
+        G.danger(z(g));
+      } finally {
+        w.value = !1;
+      }
+    }
+    async function T(g) {
+      if (await xe({
+        title: k("connections.confirm-title", { client: g.client }),
+        message: k("connections.confirm-text"),
+        confirmText: k("connections.confirm"),
+        cancelText: k("connections.cancel"),
+        tone: "danger"
+      })) {
+        V.value = g.id;
+        try {
+          const t = await v.disconnect(g.id);
+          u.value = u.value.map((b) => b.id === t.id ? t : b), G.success(k("connections.done", { client: g.client }));
+        } catch (t) {
+          G.danger(z(t));
+        } finally {
+          V.value = null;
+        }
+      }
+    }
+    return de(() => o.scope, x, { immediate: !0 }), r({ reload: x }), (g, D) => (c(), K("div", {
+      ref_key: "root",
+      ref: n,
+      class: "wx-connection-list"
+    }, [
+      l(e(be), {
+        data: u.value,
+        columns: f.value,
+        "row-key": "id",
+        flush: "",
+        loading: w.value,
+        clickable: !1,
+        "empty-text": s.scope === "all" ? e(k)("connections.empty-all") : e(k)("connections.empty"),
+        "cards-below": Ue,
+        "row-class": (t) => t.revoked_at ? "is-ended" : ""
+      }, {
+        "cell-client": a(({ row: t }) => [
+          l(e(le), {
+            direction: "vertical",
+            size: "none"
+          }, {
+            default: a(() => [
+              l(e(E), {
+                tone: t.revoked_at ? "muted" : "default",
+                weight: "medium"
+              }, {
+                default: a(() => [
+                  p(m(t.client), 1)
+                ]),
+                _: 2
+              }, 1032, ["tone"]),
+              l(e(E), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(k)("connections.returns-to", { host: t.host })), 1)
+                ]),
+                _: 2
+              }, 1024)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-user": a(({ row: t }) => [
+          l(e(E), {
+            tone: t.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              p(m(S(t)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-read_only": a(({ row: t }) => [
+          t.revoked_at ? (c(), h(e(M), {
+            key: 0,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m(e(k)("connections.disconnected")), 1)
+            ]),
+            _: 1
+          })) : (c(), h(e(M), {
+            key: 1,
+            type: t.read_only ? "info" : "success",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m($(t)), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"]))
+        ]),
+        "cell-connected_at": a(({ row: t }) => [
+          l(e(Z), {
+            value: t.connected_at,
+            tone: "muted",
+            compact: ""
+          }, null, 8, ["value"])
+        ]),
+        "cell-last_used_at": a(({ row: t }) => [
+          t.last_used_at ? (c(), h(e(Z), {
+            key: 0,
+            value: t.last_used_at,
+            tone: "default",
+            compact: ""
+          }, null, 8, ["value"])) : (c(), h(e(E), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(k)("connections.never-used")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-end": a(({ row: t }) => [
+          t.revoked_at ? B("", !0) : (c(), h(e(j), {
+            key: 0,
+            type: "danger",
+            variant: "text",
+            size: "sm",
+            loading: V.value === t.id,
+            onClick: (b) => T(t)
+          }, {
+            default: a(() => [
+              p(m(e(k)("connections.disconnect")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading", "onClick"]))
+        ]),
+        "cell-card": a(({ row: t }) => [
+          l(e(ke), {
+            variant: "plain",
+            title: t.client,
+            subtitle: e(k)("connections.returns-to", { host: t.host })
+          }, {
+            media: a(() => [
+              N("span", Va, [
+                l(e(ue), { name: "link" })
+              ])
+            ]),
+            meta: a(() => [
+              t.revoked_at ? (c(), h(e(M), {
+                key: 0,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(e(k)("connections.disconnected")), 1)
+                ]),
+                _: 1
+              })) : (c(), h(e(M), {
+                key: 1,
+                type: t.read_only ? "info" : "success",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m($(t)), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])),
+              s.scope === "all" ? (c(), h(e(E), {
+                key: 2,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(S(t)), 1)
+                ]),
+                _: 2
+              }, 1024)) : B("", !0),
+              t.last_used_at ? (c(), h(e(Z), {
+                key: 3,
+                value: t.last_used_at,
+                compact: ""
+              }, null, 8, ["value"])) : (c(), h(e(E), {
+                key: 4,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(k)("connections.never-used")), 1)
+                ]),
+                _: 1
+              }))
+            ]),
+            actions: a(() => [
+              t.revoked_at ? B("", !0) : (c(), h(e(j), {
+                key: 0,
+                type: "danger",
+                variant: "text",
+                size: "sm",
+                loading: V.value === t.id,
+                onClick: (b) => T(t)
+              }, {
+                default: a(() => [
+                  p(m(e(k)("connections.disconnect")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "onClick"]))
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "empty-text", "row-class"])
+    ], 512));
+  }
+});
+async function za(s) {
+  try {
+    if (navigator.clipboard?.writeText)
+      return await navigator.clipboard.writeText(s), !0;
+  } catch {
+  }
+  return Sa(s);
+}
+function Sa(s) {
+  const r = document.createElement("textarea");
+  r.value = s, r.setAttribute("readonly", ""), r.style.position = "fixed", r.style.opacity = "0", document.body.append(r), r.select();
+  try {
+    return document.execCommand("copy");
+  } catch {
+    return !1;
+  } finally {
+    r.remove();
+  }
+}
+function Ge(s) {
+  const r = `${s.apiPath}/auth/keys`;
+  return {
+    list: () => s.http.get(r).then((o) => ({
+      data: o.data,
+      scopes: o.meta.scopes,
+      maxDays: o.meta.max_days
+    })),
+    issue: (o) => s.http.post(r, o).then((i) => ({ key: i.data, token: i.token })),
+    revoke: (o) => s.http.delete(`${r}/${o}`).then((i) => i.data)
+  };
+}
+const La = {
+  key: 0,
+  class: "wx-key-dialog"
+}, Ua = { class: "wx-key-dialog__secret" }, Ta = {
+  key: 1,
+  class: "wx-key-dialog"
+}, Wa = /* @__PURE__ */ X({
+  __name: "KeyDialog",
+  setup(s) {
+    const { open: r, resolve: o, dismiss: i } = fe(), v = te(), k = Ge(v), z = me(v);
+    se();
+    const n = J("webx-auth"), y = ce(), O = [30, 90, 365, 1095, 3650], u = A({
+      name: "",
+      admin: null,
+      access: "everything",
+      scopes: [],
+      days: 365
+    }), w = A([]), V = A([]), f = A(!1), S = A({}), $ = A(null), x = A(!1), T = P(
+      () => w.value.filter((C) => C !== "mcp:use").map((C) => ({ value: C, label: C }))
+    ), g = P(() => [
+      { value: "everything", label: n("keys.everything") },
+      { value: "chosen", label: n("keys.chosen") }
+    ]), D = P(
+      () => O.map((C) => ({ value: C, label: n(`keys.days-${C}`) }))
+    ), t = P(() => {
+      const C = v.state.manifest?.modules.find((d) => d.id === "connect")?.meta;
+      return typeof C?.url == "string" ? C.url : "";
+    });
+    k.list().then(
+      (C) => w.value = C.scopes,
+      (C) => G.danger(y(C))
+    ), z.list({ active: "yes", per_page: 100, sort: "name" }).then(
+      (C) => V.value = C.data.map((d) => ({
+        value: d.id,
+        label: `${d.name} · ${d.email}`
+      })),
+      (C) => G.danger(y(C))
+    );
+    function b(C) {
+      return S.value[C]?.[0] ?? S.value[`${C}.0`]?.[0];
+    }
+    async function U() {
+      if (S.value = {}, u.value.access === "chosen" && u.value.scopes.length === 0) {
+        S.value = { scopes: [n("keys.scopes-required")] };
+        return;
+      }
+      f.value = !0;
+      try {
+        $.value = await k.issue({
+          name: u.value.name,
+          admin: u.value.admin ?? 0,
+          scopes: u.value.access === "chosen" ? u.value.scopes : [],
+          days: u.value.days
+        });
+      } catch (C) {
+        const d = C.body;
+        d?.errors ? S.value = d.errors : G.danger(y(C));
+      } finally {
+        f.value = !1;
+      }
+    }
+    async function Y() {
+      $.value !== null && (await za($.value.token) ? x.value = !0 : G.danger(n("keys.copy-failed")));
+    }
+    function F() {
+      $.value ? o($.value.key) : i();
+    }
+    return (C, d) => (c(), h(e(ye), {
+      open: e(r),
+      title: $.value ? e(n)("keys.issued-title") : e(n)("keys.issue"),
+      width: 640,
+      "onUpdate:open": d[5] || (d[5] = (W) => W ? void 0 : F())
+    }, {
+      footer: a(() => [
+        l(e(le), { size: "sm" }, {
+          default: a(() => [
+            $.value ? (c(), h(e(j), {
+              key: 0,
+              type: "primary",
+              onClick: F
+            }, {
+              default: a(() => [
+                p(m(e(n)("keys.done")), 1)
+              ]),
+              _: 1
+            })) : (c(), K(ie, { key: 1 }, [
+              l(e(j), {
+                variant: "outline",
+                onClick: F
+              }, {
+                default: a(() => [
+                  p(m(e(n)("keys.cancel")), 1)
+                ]),
+                _: 1
+              }),
+              l(e(j), {
+                type: "primary",
+                loading: f.value,
+                onClick: U
+              }, {
+                default: a(() => [
+                  p(m(e(n)("keys.issue-short")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading"])
+            ], 64))
+          ]),
+          _: 1
+        })
+      ]),
+      default: a(() => [
+        $.value ? (c(), K("div", La, [
+          l(e(oa), {
+            type: "warning",
+            closable: !1
+          }, {
+            default: a(() => [
+              p(m(e(n)("keys.issued-text")), 1)
+            ]),
+            _: 1
+          }),
+          l(e(I), {
+            label: e(n)("keys.secret")
+          }, {
+            default: a(() => [
+              N("div", Ua, [
+                l(e(ee), {
+                  "model-value": $.value.token,
+                  readonly: "",
+                  name: "token"
+                }, null, 8, ["model-value"]),
+                l(e(j), {
+                  type: "primary",
+                  onClick: Y
+                }, {
+                  icon: a(() => [
+                    l(e(ue), {
+                      name: x.value ? "check" : "copy"
+                    }, null, 8, ["name"])
+                  ]),
+                  default: a(() => [
+                    p(" " + m(x.value ? e(n)("keys.copied") : e(n)("keys.copy")), 1)
+                  ]),
+                  _: 1
+                })
+              ])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          t.value ? (c(), h(e(I), {
+            key: 0,
+            label: e(n)("keys.address")
+          }, {
+            default: a(() => [
+              l(e(ee), {
+                "model-value": t.value,
+                readonly: "",
+                name: "address"
+              }, null, 8, ["model-value"])
+            ]),
+            _: 1
+          }, 8, ["label"])) : B("", !0),
+          l(e(E), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(n)("keys.header-hint")), 1)
+            ]),
+            _: 1
+          })
+        ])) : (c(), K("div", Ta, [
+          l(e(E), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(n)("keys.lead")), 1)
+            ]),
+            _: 1
+          }),
+          l(e(I), {
+            label: e(n)("keys.name"),
+            error: b("name"),
+            help: e(n)("keys.name-hint")
+          }, {
+            default: a(() => [
+              l(e(ee), {
+                modelValue: u.value.name,
+                "onUpdate:modelValue": d[0] || (d[0] = (W) => u.value.name = W),
+                name: "name",
+                autocomplete: "off"
+              }, null, 8, ["modelValue"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"]),
+          l(e(I), {
+            label: e(n)("keys.who"),
+            error: b("admin"),
+            help: e(n)("keys.who-hint")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: u.value.admin,
+                "onUpdate:modelValue": d[1] || (d[1] = (W) => u.value.admin = W),
+                options: V.value,
+                filterable: "",
+                name: "admin"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"]),
+          l(e(I), {
+            label: e(n)("keys.allowed")
+          }, {
+            default: a(() => [
+              l(e(ia), {
+                modelValue: u.value.access,
+                "onUpdate:modelValue": d[2] || (d[2] = (W) => u.value.access = W),
+                options: g.value,
+                name: "access"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          u.value.access === "chosen" ? (c(), h(e(I), {
+            key: 0,
+            label: e(n)("keys.scopes"),
+            error: b("scopes"),
+            help: e(n)("keys.scopes-hint")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: u.value.scopes,
+                "onUpdate:modelValue": d[3] || (d[3] = (W) => u.value.scopes = W),
+                options: T.value,
+                multiple: "",
+                filterable: "",
+                name: "scopes"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"])) : B("", !0),
+          l(e(I), {
+            label: e(n)("keys.lifetime"),
+            error: b("days"),
+            help: e(n)("keys.lifetime-hint")
+          }, {
+            default: a(() => [
+              l(e(ae), {
+                modelValue: u.value.days,
+                "onUpdate:modelValue": d[4] || (d[4] = (W) => u.value.days = W),
+                options: D.value,
+                name: "days"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"])
+        ]))
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), Fa = {
+  class: "wx-key-list__glyph",
+  "aria-hidden": "true"
+}, Te = 560, Pa = /* @__PURE__ */ X({
+  __name: "KeyList",
+  setup(s, { expose: r }) {
+    const o = te(), i = Ge(o);
+    se();
+    const v = J("webx-auth"), k = ce(), z = ne("root"), n = he(z), y = P(() => n.value > 0 && n.value < Te), O = A([]), u = A(!1), w = A(null), V = P(() => y.value ? [{ key: "card", label: "" }] : [
+      { key: "name", label: v("keys.name"), minWidth: 200 },
+      { key: "user", label: v("keys.who"), minWidth: 140 },
+      { key: "scopes", label: v("keys.allowed"), minWidth: 180 },
+      { key: "expires_at", label: v("keys.expires"), minWidth: 120 },
+      { key: "last_used_at", label: v("keys.last-used"), minWidth: 120, hideBelow: 860 },
+      { key: "end", label: "", align: "right", width: 120 }
+    ]);
+    function f(g) {
+      return g.user.name ?? v("keys.deleted", { id: g.user.id });
+    }
+    function S(g) {
+      return g.created_by?.name ? v("keys.issued-by", { name: g.created_by.name }) : v("keys.issued-console");
+    }
+    function $(g) {
+      return g.everything ? v("keys.full", { name: g.user.name?.split(" ")[0] || f(g) }) : g.scopes.join(", ");
+    }
+    async function x() {
+      u.value = !0;
+      try {
+        O.value = (await i.list()).data;
+      } catch (g) {
+        G.danger(k(g));
+      } finally {
+        u.value = !1;
+      }
+    }
+    async function T(g) {
+      if (await xe({
+        title: v("keys.confirm-title", { name: g.name }),
+        message: v("keys.confirm-text"),
+        confirmText: v("keys.confirm"),
+        cancelText: v("keys.cancel"),
+        tone: "danger"
+      })) {
+        w.value = g.id;
+        try {
+          const t = await i.revoke(g.id);
+          O.value = O.value.map((b) => b.id === t.id ? t : b), G.success(v("keys.revoked-done", { name: g.name }));
+        } catch (t) {
+          G.danger(k(t));
+        } finally {
+          w.value = null;
+        }
+      }
+    }
+    return Qe(x), r({ reload: x }), (g, D) => (c(), K("div", {
+      ref_key: "root",
+      ref: z,
+      class: "wx-key-list"
+    }, [
+      l(e(be), {
+        data: O.value,
+        columns: V.value,
+        "row-key": "id",
+        flush: "",
+        loading: u.value,
+        clickable: !1,
+        "empty-text": e(v)("keys.empty"),
+        "cards-below": Te,
+        "row-class": (t) => t.state === "live" ? "" : "is-ended"
+      }, {
+        "cell-name": a(({ row: t }) => [
+          l(e(le), {
+            direction: "vertical",
+            size: "none"
+          }, {
+            default: a(() => [
+              l(e(E), {
+                tone: t.state === "live" ? "default" : "muted",
+                weight: "medium"
+              }, {
+                default: a(() => [
+                  p(m(t.name), 1)
+                ]),
+                _: 2
+              }, 1032, ["tone"]),
+              l(e(E), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(S(t)) + " · ", 1),
+                  l(e(Z), {
+                    value: t.created_at,
+                    tone: "muted",
+                    compact: ""
+                  }, null, 8, ["value"])
+                ]),
+                _: 2
+              }, 1024)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-user": a(({ row: t }) => [
+          l(e(E), {
+            tone: t.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              p(m(f(t)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-scopes": a(({ row: t }) => [
+          t.state === "revoked" ? (c(), h(e(M), {
+            key: 0,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m(e(v)("keys.revoked")), 1)
+            ]),
+            _: 1
+          })) : t.state === "expired" ? (c(), h(e(M), {
+            key: 1,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m(e(v)("keys.expired")), 1)
+            ]),
+            _: 1
+          })) : (c(), h(e(M), {
+            key: 2,
+            type: t.everything ? "success" : "info",
+            dot: ""
+          }, {
+            default: a(() => [
+              p(m($(t)), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"]))
+        ]),
+        "cell-expires_at": a(({ row: t }) => [
+          t.expires_at ? (c(), h(e(Z), {
+            key: 0,
+            value: t.expires_at,
+            compact: ""
+          }, null, 8, ["value"])) : B("", !0)
+        ]),
+        "cell-last_used_at": a(({ row: t }) => [
+          t.last_used_at ? (c(), h(e(Z), {
+            key: 0,
+            value: t.last_used_at,
+            compact: ""
+          }, null, 8, ["value"])) : (c(), h(e(E), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              p(m(e(v)("keys.never-used")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-end": a(({ row: t }) => [
+          t.state === "live" ? (c(), h(e(j), {
+            key: 0,
+            type: "danger",
+            variant: "text",
+            size: "sm",
+            loading: w.value === t.id,
+            onClick: (b) => T(t)
+          }, {
+            default: a(() => [
+              p(m(e(v)("keys.revoke")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading", "onClick"])) : B("", !0)
+        ]),
+        "cell-card": a(({ row: t }) => [
+          l(e(ke), {
+            variant: "plain",
+            title: t.name,
+            subtitle: f(t)
+          }, {
+            media: a(() => [
+              N("span", Fa, [
+                l(e(ue), { name: "lock" })
+              ])
+            ]),
+            meta: a(() => [
+              t.state === "revoked" ? (c(), h(e(M), {
+                key: 0,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(e(v)("keys.revoked")), 1)
+                ]),
+                _: 1
+              })) : t.state === "expired" ? (c(), h(e(M), {
+                key: 1,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m(e(v)("keys.expired")), 1)
+                ]),
+                _: 1
+              })) : (c(), h(e(M), {
+                key: 2,
+                type: t.everything ? "success" : "info",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  p(m($(t)), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])),
+              t.expires_at ? (c(), h(e(E), {
+                key: 3,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(v)("keys.until")) + " ", 1),
+                  l(e(Z), {
+                    value: t.expires_at,
+                    compact: ""
+                  }, null, 8, ["value"])
+                ]),
+                _: 2
+              }, 1024)) : B("", !0)
+            ]),
+            actions: a(() => [
+              t.state === "live" ? (c(), h(e(j), {
+                key: 0,
+                type: "danger",
+                variant: "text",
+                size: "sm",
+                loading: w.value === t.id,
+                onClick: (b) => T(t)
+              }, {
+                default: a(() => [
+                  p(m(e(v)("keys.revoke")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "onClick"])) : B("", !0)
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "empty-text", "row-class"])
+    ], 512));
+  }
+}), Oa = /* @__PURE__ */ X({
+  __name: "AdminsPage",
+  props: {
+    base: { default: "/admins" },
+    current: { default: "admins" },
+    avatarField: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  setup(s) {
+    const r = s, o = te(), i = me(o), v = r.avatarField ?? Me(o) ?? void 0, k = r.resolveAvatar ?? qe(o) ?? void 0, z = la(), n = sa();
+    se();
+    const y = J("webx-auth"), O = ce(), u = ne("list"), w = ne("keys"), V = A(null), f = pe(ba), S = pe(Wa), $ = o.can("admins.manage"), x = o.can("admins.audit"), T = P(
+      () => o.state.manifest?.modules.find((F) => F.id === "admins")?.title ?? y("admins.title")
+    ), g = P(() => {
+      const F = [{ value: "admins", label: T.value }];
+      return x && F.push({ value: "calls", label: y("calls.title") }), $ && F.push({ value: "connections", label: y("connections.title") }), $ && F.push({ value: "keys", label: y("keys.title") }), F.length > 1 ? F : void 0;
+    }), D = P({
+      get: () => r.current,
+      set: (F) => {
+        const C = F === "admins" ? r.base : `${r.base}/${String(F)}`;
+        C !== n.path && z.push(C);
+      }
+    }), t = P(() => $ ? r.current === "admins" ? [
+      {
+        key: "new",
+        label: y("admins.new-short"),
+        icon: "plus",
+        primary: !0,
+        run: () => {
+          U(null);
+        }
+      }
+    ] : r.current === "keys" ? [
+      {
+        key: "issue",
+        label: y("keys.issue-short"),
+        icon: "plus",
+        primary: !0,
+        run: () => {
+          b();
+        }
+      }
+    ] : [] : []);
+    async function b() {
+      await S() && w.value?.reload();
+    }
+    async function U(F) {
+      V.value = F, await f({ admin: F, avatarField: v }) && u.value?.reload();
+    }
+    async function Y(F) {
+      if (await xe({
+        title: y("admins.delete-title", { name: F.name }),
+        message: y("admins.delete-text"),
+        confirmText: y("admins.delete"),
+        cancelText: y("admins.cancel"),
+        tone: "danger"
+      }))
+        try {
+          await i.remove(F.id), G.success(y("admins.deleted")), u.value?.reload();
+        } catch (d) {
+          G.danger(O(d));
+        }
+    }
+    return (F, C) => (c(), h(e(aa), {
+      view: D.value,
+      "onUpdate:view": C[0] || (C[0] = (d) => D.value = d),
+      title: T.value,
+      views: g.value,
+      actions: t.value
+    }, {
+      default: a(() => [
+        s.current === "calls" ? (c(), h(Ca, { key: 0 })) : s.current === "connections" ? (c(), h(Aa, {
+          key: 1,
+          scope: "all"
+        })) : s.current === "keys" ? (c(), h(Pa, {
+          key: 2,
+          ref: "keys"
+        }, null, 512)) : (c(), h(je, {
+          key: 3,
+          ref_key: "list",
+          ref: u,
+          removable: e($),
+          "resolve-avatar": e(k),
+          onOpen: U,
+          onRemove: Y
+        }, null, 8, ["removable", "resolve-avatar"]))
+      ]),
+      _: 1
+    }, 8, ["view", "title", "views", "actions"]));
+  }
+});
+function et(s = {}) {
+  const r = s.path ?? "/admins", o = (i) => ({
+    render: () => Be(Oa, {
+      base: r,
+      current: i,
+      avatarField: s.avatarField,
+      resolveAvatar: s.resolveAvatar
+    })
+  });
+  return {
+    id: "admins",
+    path: r,
+    routes: [
+      { path: r, name: "webx.admins", component: o("admins") },
+      // What their agents did, which agents they let in, and their keys: more views of the same
+      // section, each with an address of its own so that its filters survive a trip to the
+      // people and back.
+      { path: `${r}/calls`, name: "webx.admins.calls", component: o("calls") },
+      {
+        path: `${r}/connections`,
+        name: "webx.admins.connections",
+        component: o("connections")
+      },
+      // Keys for programs: a connection without a browser, issued by somebody who manages
+      // the people it acts as.
+      { path: `${r}/keys`, name: "webx.admins.keys", component: o("keys") }
+    ]
+  };
+}
+function at(s = {}) {
+  const r = s.path ?? "/connect";
+  return {
+    id: "connect",
+    path: r,
+    routes: [{ path: r, name: "webx.connect", component: () => import("./ConnectPage-CGGeG8--.js") }]
+  };
+}
+const Ba = /* @__PURE__ */ X({
+  __name: "AdminPicker",
+  props: {
+    multiple: { type: Boolean, default: !1 },
+    title: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  setup(s) {
+    const r = s, { open: o, resolve: i, dismiss: v } = fe();
+    se();
+    const k = J("webx-auth"), z = ne("list"), n = A(0);
+    function y(u) {
+      i(u);
+    }
+    function O(u) {
+      n.value = u.length;
+    }
+    return (u, w) => (c(), h(e(ye), {
+      open: e(o),
+      "onUpdate:open": w[2] || (w[2] = (V) => we(o) ? o.value = V : null),
+      title: s.title ?? e(k)(s.multiple ? "admins.select-many" : "admins.select-one"),
+      width: 880
+    }, Oe({
+      default: a(() => [
+        l(je, {
+          ref_key: "list",
+          ref: z,
+          picking: "",
+          multiple: s.multiple,
+          "resolve-avatar": r.resolveAvatar,
+          onChosen: y,
+          onSelection: O
+        }, null, 8, ["multiple", "resolve-avatar"])
+      ]),
+      _: 2
+    }, [
+      s.multiple ? {
+        name: "footer",
+        fn: a(() => [
+          l(e(le), {
+            size: "sm",
+            align: "center"
+          }, {
+            default: a(() => [
+              l(e(E), {
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(k)("admins.chosen", { count: n.value })), 1)
+                ]),
+                _: 1
+              }),
+              l(e(j), {
+                variant: "outline",
+                onClick: w[0] || (w[0] = (V) => e(v)())
+              }, {
+                default: a(() => [
+                  p(m(e(k)("admins.cancel")), 1)
+                ]),
+                _: 1
+              }),
+              l(e(j), {
+                type: "primary",
+                disabled: n.value === 0,
+                onClick: w[1] || (w[1] = (V) => e(i)(z.value?.chosen() ?? []))
+              }, {
+                default: a(() => [
+                  p(m(e(k)("admins.save")), 1)
+                ]),
+                _: 1
+              }, 8, ["disabled"])
+            ]),
+            _: 1
+          })
+        ]),
+        key: "0"
+      } : void 0
+    ]), 1032, ["open", "title"]));
+  }
+}), He = pe(Ba);
+async function tt(s = {}) {
+  return (await He({ ...s, multiple: !1 }))?.[0];
+}
+function lt(s = {}) {
+  return He({ ...s, multiple: !0 });
+}
+const Ra = { class: "wx-profile-host" }, Ea = { class: "wx-profile" }, Da = {
+  key: 0,
+  class: "wx-profile__aside"
+}, Ia = { class: "wx-profile__fields" }, Na = /* @__PURE__ */ X({
+  __name: "ProfileDialog",
+  props: {
+    avatarField: { default: void 0 }
+  },
+  setup(s) {
+    const r = s, { resolve: o, dismiss: i, open: v } = fe(), k = te(), z = Ce();
+    se();
+    const n = J("webx-auth"), y = ce(), O = A(!1), u = A({}), w = A({
+      name: k.state.user?.name ?? "",
+      avatar: k.state.user?.avatar ?? null,
+      password: "",
+      current_password: ""
+    }), V = A(w.value.avatar ? { path: w.value.avatar } : null);
+    function f($) {
+      return u.value[$]?.[0];
+    }
+    async function S() {
+      O.value = !0, u.value = {};
+      try {
+        await z.updateProfile({
+          name: w.value.name,
+          avatar: V.value?.path ?? null,
+          // Blank is left out entirely rather than sent as an empty string: the server reads a
+          // filled password as "change it", and an empty one would be a change to nothing.
+          ...w.value.password ? { password: w.value.password, current_password: w.value.current_password } : {}
+        }), G.success(n("profile.saved")), o(!0);
+      } catch ($) {
+        const x = $.body;
+        x?.errors ? u.value = x.errors : G.danger(y($));
+      } finally {
+        O.value = !1;
+      }
+    }
+    return ($, x) => (c(), h(e(ye), {
+      open: e(v),
+      "onUpdate:open": x[5] || (x[5] = (T) => we(v) ? v.value = T : null),
+      title: e(n)("profile.title"),
+      width: 560
+    }, {
+      footer: a(() => [
+        l(e(j), {
+          onClick: x[4] || (x[4] = (T) => e(i)())
+        }, {
+          default: a(() => [
+            p(m(e(n)("profile.cancel")), 1)
+          ]),
+          _: 1
+        }),
+        l(e(j), {
+          type: "primary",
+          loading: O.value,
+          onClick: S
+        }, {
+          default: a(() => [
+            p(m(e(n)("profile.save")), 1)
+          ]),
+          _: 1
+        }, 8, ["loading"])
+      ]),
+      default: a(() => [
+        N("div", Ra, [
+          N("div", Ea, [
+            r.avatarField ? (c(), K("div", Da, [
+              (c(), h(Pe(r.avatarField), {
+                modelValue: V.value,
+                "onUpdate:modelValue": x[0] || (x[0] = (T) => V.value = T),
+                label: e(n)("profile.avatar"),
+                aspect: "1/1",
+                captions: !1
+              }, null, 8, ["modelValue", "label"]))
+            ])) : B("", !0),
+            N("div", Ia, [
+              l(e(I), {
+                label: e(n)("profile.name"),
+                error: f("name")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: w.value.name,
+                    "onUpdate:modelValue": x[1] || (x[1] = (T) => w.value.name = T),
+                    name: "name"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              l(e(I), {
+                label: e(n)("admins.email")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    "model-value": e(k).state.user?.email ?? "",
+                    readonly: ""
+                  }, null, 8, ["model-value"])
+                ]),
+                _: 1
+              }, 8, ["label"]),
+              l(e(I), {
+                label: e(n)("profile.password"),
+                help: e(n)("profile.password-hint"),
+                error: f("password")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: w.value.password,
+                    "onUpdate:modelValue": x[2] || (x[2] = (T) => w.value.password = T),
+                    type: "password",
+                    autocomplete: "new-password"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "help", "error"]),
+              w.value.password ? (c(), h(e(I), {
+                key: 0,
+                label: e(n)("profile.current-password"),
+                help: e(n)("profile.current-password-hint"),
+                error: f("current_password")
+              }, {
+                default: a(() => [
+                  l(e(ee), {
+                    modelValue: w.value.current_password,
+                    "onUpdate:modelValue": x[3] || (x[3] = (T) => w.value.current_password = T),
+                    type: "password",
+                    autocomplete: "current-password"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "help", "error"])) : B("", !0)
+            ])
+          ])
+        ])
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), Ma = /* @__PURE__ */ $e(Na, [["__scopeId", "data-v-9583a67a"]]), qa = ["title"], Ka = { class: "wx-user-menu__who" }, ja = { class: "wx-user-menu__name" }, Ga = { class: "wx-user-menu__email" }, Ha = /* @__PURE__ */ X({
+  __name: "UserMenu",
+  props: {
+    signOutLabel: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 },
+    avatarField: { default: void 0 },
+    expanded: { type: Boolean, default: !1 }
+  },
+  setup(s) {
+    const r = s, o = te(), i = Ce(), v = Re(), k = ta(), z = J("webx-auth"), n = v.scope("webx-admin"), y = P(() => o.state.user), O = o.siteUrl, u = P(
+      () => v.state.panelLocales.length > 1 ? v.state.panelLocales : []
+    ), w = ge(Ie, null), V = ge(Ne, null), f = A(void 0);
+    de(
+      () => typeof y.value?.avatar == "string" ? y.value.avatar : null,
+      async (t) => {
+        const b = r.resolveAvatar ?? w;
+        if (t === null || t === "" || b === null) {
+          f.value = void 0;
+          return;
+        }
+        const U = await b(t);
+        y.value?.avatar === t && (f.value = U ?? void 0);
+      },
+      { immediate: !0 }
+    );
+    const S = pe(Ma);
+    function $() {
+      setTimeout(
+        () => {
+          S({ avatarField: r.avatarField ?? V ?? void 0 });
+        },
+        0
+      );
+    }
+    const x = P({
+      get: () => k.state.preference,
+      set: (t) => {
+        k.set(t), i.setTheme(t);
+      }
+    }), T = P(
+      () => typeof y.value?.siteBar == "boolean" ? y.value.siteBar : null
+    );
+    function g() {
+      T.value !== null && i.setSiteBar(!T.value);
+    }
+    async function D(t) {
+      t !== v.state.locale && await i.setLocale(t);
+    }
+    return (t, b) => {
+      const U = H("wx-avatar"), Y = H("wx-icon"), F = H("wx-text"), C = H("wx-dropdown-item"), d = H("wx-divider"), W = H("wx-dropdown");
+      return y.value !== null ? (c(), h(W, { key: 0 }, {
+        trigger: a(() => [
+          N("button", {
+            type: "button",
+            class: Fe(["wx-user-menu__trigger", { "wx-user-menu__trigger--named": s.expanded }]),
+            title: y.value.name
+          }, [
+            l(U, {
+              name: y.value.name,
+              src: f.value,
+              size: "lg"
+            }, null, 8, ["name", "src"]),
+            s.expanded ? (c(), K(ie, { key: 0 }, [
+              N("span", Ka, [
+                N("span", ja, m(y.value.name), 1),
+                N("span", Ga, m(y.value.email), 1)
+              ]),
+              l(Y, {
+                name: "chevron-up",
+                size: "sm",
+                class: "wx-user-menu__chevron"
+              })
+            ], 64)) : B("", !0)
+          ], 10, qa)
+        ]),
+        default: a(() => [
+          l(C, { disabled: "" }, {
+            default: a(() => [
+              l(F, { size: "sm" }, {
+                default: a(() => [
+                  p(m(y.value.email), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          }),
+          l(d, { spacing: "sm" }),
+          l(C, {
+            icon: "user",
+            onClick: $
+          }, {
+            default: a(() => [
+              p(m(e(z)("profile.menu")), 1)
+            ]),
+            _: 1
+          }),
+          e(O) ? (c(), h(C, {
+            key: 0,
+            icon: "external-link",
+            href: e(O),
+            target: "_blank",
+            rel: "noopener"
+          }, {
+            default: a(() => [
+              p(m(e(n)("nav.open-site")), 1)
+            ]),
+            _: 1
+          }, 8, ["href"])) : B("", !0),
+          l(d, { spacing: "sm" }),
+          l(C, { disabled: "" }, {
+            default: a(() => [
+              l(F, {
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  p(m(e(n)("theme.label")), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          }),
+          N("div", {
+            class: "wx-user-menu__theme",
+            onClick: b[1] || (b[1] = We(() => {
+            }, ["stop"]))
+          }, [
+            l(e(ra), {
+              modelValue: x.value,
+              "onUpdate:modelValue": b[0] || (b[0] = (_) => x.value = _),
+              size: "sm",
+              block: "",
+              "aria-label": e(n)("theme.label"),
+              "light-label": e(n)("theme.light"),
+              "dark-label": e(n)("theme.dark"),
+              "system-label": e(n)("theme.system")
+            }, null, 8, ["modelValue", "aria-label", "light-label", "dark-label", "system-label"])
+          ]),
+          T.value !== null ? (c(), K(ie, { key: 1 }, [
+            l(d, { spacing: "sm" }),
+            l(C, {
+              icon: T.value ? "check" : void 0,
+              onClick: g
+            }, {
+              default: a(() => [
+                p(m(e(z)("menu.site-bar")), 1)
+              ]),
+              _: 1
+            }, 8, ["icon"])
+          ], 64)) : B("", !0),
+          u.value.length > 0 ? (c(), K(ie, { key: 2 }, [
+            l(d, { spacing: "sm" }),
+            l(C, { disabled: "" }, {
+              default: a(() => [
+                l(F, {
+                  size: "sm",
+                  tone: "muted"
+                }, {
+                  default: a(() => [
+                    p(m(e(z)("menu.language")), 1)
+                  ]),
+                  _: 1
+                })
+              ]),
+              _: 1
+            }),
+            (c(!0), K(ie, null, _e(u.value, (_) => (c(), h(C, {
+              key: _.code,
+              icon: _.code === e(v).state.locale ? "check" : void 0,
+              onClick: (Q) => D(_.code)
+            }, {
+              default: a(() => [
+                p(m(_.nativeName), 1)
+              ]),
+              _: 2
+            }, 1032, ["icon", "onClick"]))), 128)),
+            l(d, { spacing: "sm" })
+          ], 64)) : B("", !0),
+          l(C, {
+            icon: "logout",
+            onClick: b[2] || (b[2] = (_) => e(i).logout())
+          }, {
+            default: a(() => [
+              p(m(s.signOutLabel ?? e(z)("menu.sign-out")), 1)
+            ]),
+            _: 1
+          })
+        ]),
+        _: 1
+      })) : B("", !0);
+    };
+  }
+}), st = /* @__PURE__ */ $e(Ha, [["__scopeId", "data-v-31b12be6"]]);
+function nt(s = {}) {
+  const r = s.path ?? "/login";
+  return {
+    install(o) {
+      const i = ua(o.context);
+      o.i18n.defaults("webx-auth", Ke), da(
+        o.app,
+        i,
+        s.resolveAvatar ?? qe(o.context),
+        s.avatarField ?? Me(o.context)
+      ), o.context.useSessionLoader(() => i.me()), o.router.addRoute({
+        path: r,
+        name: "webx.login",
+        meta: { public: !0 },
+        component: { render: () => Be(pa, { ...s.card }) }
+      }), o.router.beforeEach((v) => v.meta.public === !0 || o.context.state.status !== "unauthenticated" ? !0 : { path: r, query: v.fullPath === "/" ? {} : { next: v.fullPath } }), de(
+        () => o.context.state.status,
+        (v) => {
+          const k = o.router.currentRoute.value;
+          if (v === "unauthenticated" && k.path !== r) {
+            o.router.replace({ path: r, query: { next: k.fullPath } });
+            return;
+          }
+          if (v === "ready" && k.path === r) {
+            const z = k.query.next;
+            if (typeof z == "string" && Ya(z)) {
+              location.assign(z);
+              return;
+            }
+            o.router.replace(typeof z == "string" ? z : "/");
+          }
+        }
+      );
+    }
+  };
+}
+function Ya(s) {
+  if (!/^https?:\/\//i.test(s))
+    return !1;
+  try {
+    return new URL(s).origin === location.origin;
+  } catch {
+    return !1;
+  }
+}
+const ot = Xe(() => import("./ConnectPage-CGGeG8--.js"));
+export {
+  pa as L,
+  Ma as P,
+  st as U,
+  ot as W,
+  $e as _,
+  Aa as a,
+  je as b,
+  za as c,
+  Oa as d,
+  Ca as e,
+  Pa as f,
+  et as g,
+  nt as h,
+  De as i,
+  Ke as j,
+  Ne as k,
+  Ie as l,
+  at as m,
+  me as n,
+  ua as o,
+  $a as p,
+  Ge as q,
+  da as r,
+  tt as s,
+  lt as t,
+  se as u,
+  Ce as v
+};
+//# sourceMappingURL=index-BUVSIwLQ.js.map