@webx-ui/module-auth 0.13.0 → 0.14.1

package/dist/index-Bd6Dkuu8.js

@@ -0,0 +1,3675 @@
+import { inject as $e, defineComponent as ne, computed as R, ref as A, useTemplateRef as de, onBeforeUnmount as na, resolveComponent as le, openBlock as r, createBlock as h, withCtx as a, createVNode as t, withModifiers as De, createCommentVNode as O, createElementVNode as M, createTextVNode as v, toDisplayString as d, watch as me, unref as e, isRef as Se, normalizeClass as Ie, createElementBlock as G, resolveDynamicComponent as qe, createSlots as Me, Fragment as se, renderList as fe, onMounted as oa, h as Ke, defineAsyncComponent as ia } from "vue";
+import { useModal as ge, WxDialog as _e, WxFormItem as j, WxInput as te, WxSelect as ie, WxSpace as ce, WxCheckbox as he, WxText as q, WxButton as X, toast as Q, useElementWidth as ke, WxTable as we, WxEntityCard as xe, WxBadge as ee, WxAvatar as ra, WxIcon as ye, confirm as Ve, WxAlert as Ae, WxRadioGroup as ua, WxLoading as da, createModal as be, WxResult as ca, WxTabs as ma, WxTab as Ce, WxThemeSwitch as Ye, WxSwitch as va } from "@webx-ui/core";
+import { useTranslate as ae, HttpError as pa, useAdmin as oe, useI18n as Te, useErrorText as ve, rowMenuWidth as je, WxDate as ue, WxRowMenu as ze, WxFilterChips as He, WxListScreen as fa, useTheme as Ge } from "@webx-ui/module-admin";
+import { useRouter as ya, useRoute as ha, routerKey as ba } from "vue-router";
+const Je = /* @__PURE__ */ Symbol("webx-auth");
+function Ue() {
+  const l = $e(Je, null);
+  if (l === null)
+    throw new Error("useAuth() was called outside a panel that installed the auth plugin.");
+  return l;
+}
+function ga(l) {
+  const o = `${l.apiPath}/auth`;
+  return {
+    async me() {
+      try {
+        return (await l.http.get(`${o}/me`)).data;
+      } catch (s) {
+        if (ka(s))
+          return null;
+        throw s;
+      }
+    },
+    async login(s) {
+      const n = await l.http.post(`${o}/login`, {
+        email: s.email,
+        password: s.password,
+        remember: s.remember ?? !1
+      });
+      return l.setUser(n.data), await l.reload(), n.data;
+    },
+    async setLocale(s) {
+      const n = await l.http.put(`${o}/locale`, { locale: s });
+      l.setUser(n.data), await l.setLocale(s);
+    },
+    async setTheme(s) {
+      const n = await l.http.put(`${o}/theme`, {
+        theme: s === "system" ? null : s
+      });
+      l.setUser(n.data);
+    },
+    async setSiteBar(s) {
+      const n = await l.http.put(`${o}/site-bar`, { enabled: s });
+      l.setUser(n.data);
+    },
+    async updateProfile(s) {
+      const n = await l.http.put(
+        `${o}/me`,
+        s
+      );
+      return l.setUser(n.data), n.data;
+    },
+    async requestEmailChange(s, n) {
+      return (await l.http.post(`${o}/me/email`, {
+        email: s,
+        current_password: n
+      })).data;
+    },
+    async logout() {
+      try {
+        await l.http.post(`${o}/logout`);
+      } finally {
+        l.setUser(null), l.state.status = "unauthenticated", l.state.manifest = null;
+      }
+    }
+  };
+}
+const Qe = /* @__PURE__ */ Symbol("webx-auth-avatar"), Xe = /* @__PURE__ */ Symbol("webx-auth-avatar-field");
+function _a(l, o, s = null, n = null) {
+  l.provide(Je, o), l.provide(Qe, s), l.provide(Xe, n);
+}
+function ka(l) {
+  return typeof l == "object" && l !== null && "status" in l && l.status === 401;
+}
+const wa = ["title", "aria-label", "aria-pressed"], xa = /* @__PURE__ */ ne({
+  __name: "LoginCard",
+  props: {
+    emailLabel: { default: void 0 },
+    passwordLabel: { default: void 0 },
+    rememberLabel: { default: void 0 },
+    submitLabel: { default: void 0 },
+    capsLockWarning: { default: void 0 },
+    throttleMessage: { default: void 0 },
+    revealLabel: { default: void 0 },
+    hideLabel: { default: void 0 },
+    remember: { type: Boolean, default: !0 },
+    autofocus: { type: Boolean, default: !0 }
+  },
+  emits: ["success"],
+  setup(l, { expose: o, emit: s }) {
+    const n = l, x = s, f = Ue(), z = ae("webx-auth"), m = R(() => ({
+      email: n.emailLabel ?? z("card.email"),
+      password: n.passwordLabel ?? z("card.password"),
+      remember: n.rememberLabel ?? z("card.remember"),
+      submit: n.submitLabel ?? z("card.submit"),
+      capsLock: n.capsLockWarning ?? z("card.caps-lock"),
+      reveal: n.revealLabel ?? z("card.reveal"),
+      hide: n.hideLabel ?? z("card.hide")
+    })), u = A(""), N = A(""), c = A(!1), k = A(!1), $ = A(!1), W = A(!1), V = A(""), w = A({}), C = A(0), E = de("emailField");
+    let b = null;
+    na(U);
+    const L = R(() => C.value > 0), _ = R(
+      () => n.throttleMessage === void 0 ? z("card.throttled", { seconds: C.value }) : n.throttleMessage.replace(":seconds", String(C.value))
+    );
+    async function g() {
+      if (!(k.value || L.value)) {
+        k.value = !0, V.value = "", w.value = {};
+        try {
+          await f.login({
+            email: u.value,
+            password: N.value,
+            remember: c.value
+          }), N.value = "", x("success");
+        } catch (y) {
+          S(y);
+        } finally {
+          k.value = !1;
+        }
+      }
+    }
+    function S(y) {
+      if (!(y instanceof pa)) {
+        V.value = y instanceof Error ? y.message : String(y);
+        return;
+      }
+      if (y.isValidation) {
+        w.value = y.errors;
+        return;
+      }
+      if (y.isThrottled) {
+        F(y.retryAfter ?? 60);
+        return;
+      }
+      V.value = y.message;
+    }
+    function F(y) {
+      U(), C.value = y, b = setInterval(() => {
+        C.value -= 1, C.value <= 0 && U();
+      }, 1e3);
+    }
+    function U() {
+      b !== null && (clearInterval(b), b = null), C.value = 0;
+    }
+    function Y(y) {
+      W.value = y.getModifierState("CapsLock");
+    }
+    return o({ focus: () => E.value?.focus() }), (y, p) => {
+      const i = le("wx-alert"), T = le("wx-icon"), H = le("wx-input"), I = le("wx-form-item"), Z = le("wx-checkbox"), B = le("wx-button"), K = le("wx-form"), D = le("wx-card");
+      return r(), h(D, {
+        class: "wx-login",
+        padding: 24
+      }, {
+        default: a(() => [
+          t(K, {
+            errors: w.value,
+            disabled: k.value,
+            gap: "md",
+            onSubmit: De(g, ["prevent"])
+          }, {
+            default: a(() => [
+              V.value !== "" ? (r(), h(i, {
+                key: 0,
+                type: "danger",
+                variant: "soft",
+                live: "",
+                description: V.value,
+                class: "wx-login__message"
+              }, null, 8, ["description"])) : L.value ? (r(), h(i, {
+                key: 1,
+                type: "warning",
+                variant: "soft",
+                live: "",
+                description: _.value,
+                class: "wx-login__message"
+              }, null, 8, ["description"])) : O("", !0),
+              t(I, { name: "email" }, {
+                default: a(() => [
+                  t(H, {
+                    ref_key: "emailField",
+                    ref: E,
+                    modelValue: u.value,
+                    "onUpdate:modelValue": p[0] || (p[0] = (P) => u.value = P),
+                    type: "email",
+                    placeholder: m.value.email,
+                    "aria-label": m.value.email,
+                    autocomplete: "username",
+                    autofocus: l.autofocus,
+                    inputmode: "email",
+                    size: "lg"
+                  }, {
+                    prefix: a(() => [
+                      t(T, { name: "mail" })
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "placeholder", "aria-label", "autofocus"])
+                ]),
+                _: 1
+              }),
+              t(I, {
+                name: "password",
+                help: W.value ? m.value.capsLock : void 0
+              }, {
+                default: a(() => [
+                  t(H, {
+                    modelValue: N.value,
+                    "onUpdate:modelValue": p[2] || (p[2] = (P) => N.value = P),
+                    type: $.value ? "text" : "password",
+                    placeholder: m.value.password,
+                    "aria-label": m.value.password,
+                    autocomplete: "current-password",
+                    size: "lg",
+                    onKeydown: Y,
+                    onKeyup: Y
+                  }, {
+                    prefix: a(() => [
+                      t(T, { name: "lock" })
+                    ]),
+                    suffix: a(() => [
+                      M("button", {
+                        type: "button",
+                        class: "wx-login__reveal",
+                        title: $.value ? m.value.hide : m.value.reveal,
+                        "aria-label": $.value ? m.value.hide : m.value.reveal,
+                        "aria-pressed": $.value,
+                        tabindex: "-1",
+                        onClick: p[1] || (p[1] = (P) => $.value = !$.value)
+                      }, [
+                        t(T, {
+                          name: $.value ? "eye-off" : "eye"
+                        }, null, 8, ["name"])
+                      ], 8, wa)
+                    ]),
+                    _: 1
+                  }, 8, ["modelValue", "type", "placeholder", "aria-label"])
+                ]),
+                _: 1
+              }, 8, ["help"]),
+              l.remember ? (r(), h(Z, {
+                key: 2,
+                modelValue: c.value,
+                "onUpdate:modelValue": p[3] || (p[3] = (P) => c.value = P),
+                label: m.value.remember,
+                class: "wx-login__remember"
+              }, null, 8, ["modelValue", "label"])) : O("", !0),
+              t(B, {
+                type: "primary",
+                "native-type": "submit",
+                size: "lg",
+                block: "",
+                loading: k.value,
+                disabled: L.value
+              }, {
+                default: a(() => [
+                  v(d(m.value.submit), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "disabled"])
+            ]),
+            _: 1
+          }, 8, ["errors", "disabled"])
+        ]),
+        _: 1
+      });
+    };
+  }
+}), Le = (l, o) => {
+  const s = l.__vccOpts || l;
+  for (const [n, x] of o)
+    s[n] = x;
+  return s;
+}, Ca = /* @__PURE__ */ Le(xa, [["__scopeId", "data-v-3c206e31"]]);
+function Ze(l) {
+  return l.types["wx-media"]?.component ?? null;
+}
+function ea(l) {
+  const o = l.assetUrls;
+  return o ? async (s) => (await o([s]))[s] ?? null : null;
+}
+const aa = {
+  card: {
+    email: "Email",
+    password: "Password",
+    remember: "Stay signed in",
+    submit: "Sign in",
+    "caps-lock": "Caps Lock is on.",
+    reveal: "Show the password",
+    hide: "Hide the password",
+    throttled: "Too many attempts. Try again in :seconds s.",
+    failed: "Those details do not match an account."
+  },
+  admins: {
+    title: "Administrators",
+    "filter-role": "Role",
+    "filter-state": "State",
+    search: "Search administrators",
+    new: "New administrator",
+    edit: "Edit administrator",
+    // The same two, short enough for a button on a phone and for a dialog's heading.
+    "new-short": "Add",
+    "edit-short": "Edit",
+    name: "Name",
+    email: "Email",
+    password: "Password",
+    "password-hint": "At least 12 characters",
+    "password-keep": "Leave blank to keep the current one",
+    avatar: "Photo",
+    roles: "Roles",
+    "no-roles": "No roles",
+    active: "Active",
+    super: "Super administrator",
+    "super-hint": "Answers yes to everything, whatever the roles say",
+    locale: "Panel language",
+    "locale-auto": "Follow the browser",
+    "last-login": "Last signed in",
+    save: "Save",
+    cancel: "Cancel",
+    delete: "Delete",
+    "delete-title": "Delete :name?",
+    "delete-text": "They lose access at once. What they have written stays.",
+    "all-roles": "All roles",
+    "any-state": "Active and not",
+    "only-active": "Active only",
+    "only-inactive": "Switched off only",
+    empty: "Nobody matches that",
+    "select-one": "Choose an administrator",
+    "select-many": "Choose administrators",
+    chosen: "Chosen: :count",
+    created: "Administrator created",
+    updated: "Administrator saved",
+    deleted: "Administrator deleted"
+  },
+  // The roles: named sets of permissions, the view beside the administrators.
+  roles: {
+    title: "Roles",
+    "new-short": "Add",
+    new: "New role",
+    edit: "Edit role",
+    view: "Role",
+    name: "Name",
+    slug: "Code",
+    "slug-hint": "Latin letters, digits and hyphens. Made from the name when left blank.",
+    permissions: "Permissions",
+    "permission-count": "Permissions: :count",
+    users: "Administrators",
+    "users-count": "Administrators: :count",
+    all: "All",
+    unknown: "From modules not installed here",
+    "not-yours": "You do not hold this permission, so you cannot grant it",
+    held: "You hold this role, so somebody else edits it.",
+    empty: "No roles yet",
+    save: "Save",
+    cancel: "Cancel",
+    close: "Close",
+    delete: "Delete",
+    "delete-title": "Delete the role «:name»?",
+    "delete-text": "Nobody holds it.",
+    "delete-holders": "It is taken away from: :names.",
+    created: "Role created",
+    updated: "Role saved",
+    deleted: "Role deleted",
+    yours: "Yours"
+  },
+  // The trail of what agents did through the panel: the view next to the administrators.
+  calls: {
+    title: "Agent calls",
+    when: "When",
+    who: "Who",
+    client: "Client",
+    tool: "Tool",
+    outcome: "Outcome",
+    took: "Took",
+    ms: ":count ms",
+    answered: "Answered",
+    refused: "Refused",
+    "dry-run": "Dry run",
+    local: "Local server",
+    deleted: "Administrator #:id",
+    "filter-user": "Administrator",
+    "filter-tool": "Tool",
+    "filter-outcome": "Outcome",
+    everybody: "Everybody",
+    "all-tools": "All tools",
+    "any-outcome": "Any outcome",
+    "only-answered": "Answered only",
+    "only-refused": "Refused only",
+    "only-dry": "Dry runs only",
+    arguments: "Arguments",
+    "no-arguments": "Called with no arguments",
+    request: "The agent's request",
+    "request-hint": "What the agent passed to the tool. The answer is not kept.",
+    error: "Refused with",
+    empty: "No calls match"
+  },
+  // The connections tab and the page that tells somebody how to make one.
+  connections: {
+    title: "Connections",
+    client: "Client",
+    allowed: "What is allowed",
+    connected: "Connected",
+    "last-used": "Last used",
+    who: "Administrator",
+    full: "Everything :name can do",
+    "full-you": "Everything you can do",
+    "read-only": "Reading only",
+    "returns-to": "Answers go to :host",
+    disconnect: "Disconnect",
+    disconnected: "Disconnected",
+    "never-used": "Never",
+    empty: "No agents are connected",
+    "empty-all": "Nobody has connected an agent",
+    "confirm-title": "Disconnect :client?",
+    "confirm-text": "It loses access at once, including the month of refreshing it was given. Connecting it again takes three clicks.",
+    confirm: "Disconnect",
+    cancel: "Cancel",
+    done: ":client is disconnected",
+    deleted: "Administrator #:id"
+  },
+  // Keys for programs, issued and revoked under Administrators → Keys.
+  keys: {
+    title: "Keys",
+    issue: "Issue a key",
+    "issue-short": "Issue",
+    lead: "A key lets a program — a queue watcher, a nightly import — work in this panel without a browser. It acts as the administrator you choose and can never do more than they may. A key is a program, not a person: what a module keeps for a person, such as a stage checked by hand, it cannot do.",
+    name: "Name",
+    "name-hint": 'What the program is, so that the list says it: "queue watcher", "nightly import".',
+    who: "Acts as",
+    "who-hint": "Everything the key changes is done in this administrator's name, within their permissions.",
+    allowed: "What is allowed",
+    everything: "Everything the administrator may do",
+    chosen: "Only the scopes chosen below",
+    scopes: "Scopes",
+    "scopes-hint": "A module installed later is out of reach until a new key names it.",
+    "scopes-required": "Choose at least one scope.",
+    lifetime: "Lives for",
+    "lifetime-hint": "A key cannot be extended: issue a new one before this one runs out, then revoke the old one.",
+    "days-30": "30 days",
+    "days-90": "90 days",
+    "days-365": "1 year",
+    "days-1095": "3 years",
+    "days-3650": "10 years",
+    "issued-title": "Copy the key now",
+    "issued-text": "This is the only time the key is shown. Nobody can see it again — not here, not on the server. If it is lost, revoke it and issue a new one.",
+    secret: "Key",
+    copy: "Copy",
+    copied: "Copied",
+    "copy-failed": "Could not reach the clipboard. Select the key and copy it by hand.",
+    address: "Server address",
+    "header-hint": "The program sends the key in a header: Authorization: Bearer <key>.",
+    done: "Done",
+    cancel: "Cancel",
+    expires: "Expires",
+    until: "until",
+    "last-used": "Last used",
+    "never-used": "Never",
+    "issued-by": "Issued by :name",
+    "issued-console": "Issued in a terminal",
+    full: "Everything :name can do",
+    deleted: "Administrator #:id",
+    revoke: "Revoke",
+    revoked: "Revoked",
+    expired: "Expired",
+    "confirm-title": "Revoke :name?",
+    "confirm-text": "The program using it is refused from its next call. A revoked key cannot be switched back on.",
+    confirm: "Revoke",
+    "revoked-done": ":name is revoked",
+    empty: "No keys have been issued",
+    "lead-mine": "A key lets a program — a queue watcher, a nightly import — work in this panel as you, without a browser. It can never do more than you may, and only within the scopes you choose.",
+    "empty-mine": "You have no keys yet"
+  },
+  connect: {
+    lead: "An AI agent — Claude, ChatGPT, Cursor — can work in this panel as you. Give it the address below; it will ask you to sign in and then ask what it may do.",
+    title: "Connect an agent",
+    address: "The address of this panel for agents",
+    copy: "Copy the address",
+    copied: "Copied",
+    "copy-failed": "Could not reach the clipboard. Select the address and copy it by hand.",
+    "copy-line": "Copy",
+    how: "How to add it",
+    "claude-title": "Claude",
+    "claude-1": "Open Settings and go to Connectors.",
+    "claude-2": 'Press "Add custom connector".',
+    "claude-3": "Paste the address and press Add.",
+    "chatgpt-title": "ChatGPT",
+    "chatgpt-1": "Open Settings and go to Connectors.",
+    "chatgpt-2": 'Press "Add" and choose a custom MCP server.',
+    "chatgpt-3": "Paste the address, leave the authentication as OAuth, and confirm.",
+    "claude-code-title": "Claude Code",
+    "claude-code-hint": "One line in a terminal, from any project:",
+    "codex-title": "Codex",
+    "codex-hint": "These lines in ~/.codex/config.toml:",
+    "one-click": "One click",
+    "one-click-hint": "These two take the whole thing from a link: the editor opens, asks once, and the server is there.",
+    "install-in": "Add to :client",
+    "cursor-title": "Cursor",
+    "vscode-title": "VS Code",
+    next: "What happens next",
+    "next-1": "The client opens this site in a browser and asks you to sign in to the panel, with your usual password. It never sees the password.",
+    "next-2": 'The panel shows who is asking and where the answer goes. There is a "read only" switch on that screen, and turning it on is the safe way to begin.',
+    "next-3": "From then on the agent acts as you: it can do what you can do and nothing more, and every call it makes is written down.",
+    mine: "Your connections",
+    rules: "Rules for agents",
+    "rules-hint": "Every connected agent reads these before it writes anything a visitor will see.",
+    keys: "Your keys",
+    "keys-hint": "For a program that runs without a browser — a nightly import, a queue watcher. A key acts as you and can never do more than you may."
+  },
+  errors: {
+    unauthenticated: "Unauthenticated.",
+    inactive: "This account is no longer active.",
+    forbidden: "This account may not do that.",
+    "not-yourself": "You cannot do that to your own account.",
+    "last-super": "There has to be one super administrator left."
+  },
+  // Somebody editing themselves, which is a shorter list than an administrator editing them.
+  profile: {
+    title: "Your profile",
+    menu: "Edit your profile",
+    name: "Name",
+    avatar: "Photo",
+    password: "New password",
+    "password-hint": "At least 12 characters. Leave blank to keep the current one.",
+    "current-password": "Current password",
+    "current-password-hint": "Asked for before the password is changed.",
+    "wrong-password": "That is not the current password.",
+    saved: "Your profile is saved.",
+    save: "Save",
+    cancel: "Cancel",
+    "tab-main": "Profile",
+    "tab-interface": "Interface",
+    "tab-password": "Password",
+    "tab-email": "Email",
+    "not-yours": "The field «:field» is not part of your profile.",
+    "email-current": "Current address",
+    "email-new": "New address",
+    "email-hint": "A link goes to the new address. The address changes when you follow it.",
+    "email-password-hint": "Asked for before the address is changed.",
+    "email-send": "Send the link",
+    "email-sent": "A link is on its way to :email. It works for :minutes minutes.",
+    "email-unavailable": "This site does not send mail, so your address is changed by whoever manages administrators.",
+    "email-same": "That is already your address.",
+    "email-not-sent": "The letter could not be sent. Try again later.",
+    "email-done": "Your sign-in address is changed.",
+    "email-expired": "That link has run out or was already used. Ask for a new one in your profile.",
+    "email-taken": "That address now belongs to another administrator.",
+    "email-letter-subject": "Confirm your new address for :site",
+    "email-letter-hello": "Hello, :name.",
+    "email-letter-text": "You asked to sign in to the :site panel with this address. Follow the link to confirm it.",
+    "email-letter-button": "Confirm the address",
+    "email-letter-expires": "The link works for :minutes minutes.",
+    "email-letter-ignore": "If you did not ask for this, ignore this letter: nothing changes until the link is followed.",
+    language: "Panel language",
+    theme: "Theme",
+    "site-bar": "Panel on the site",
+    "site-bar-hint": "A bar on the site’s own pages while you are signed in.",
+    "interface-hint": "These take effect at once, on every device you sign in on.",
+    agents: "Agents and keys",
+    "agents-hint": "Your connected agents and your keys for programs.",
+    "agents-open": "Open"
+  },
+  menu: {
+    "sign-out": "Sign out",
+    language: "Interface language",
+    "site-bar": "Panel on the site"
+  }
+};
+function pe(l) {
+  const o = `${l.apiPath}/auth`, s = (n) => n.data;
+  return {
+    list: (n = {}) => l.http.get(`${o}/admins`, {
+      query: {
+        q: n.q || void 0,
+        role: n.role ?? void 0,
+        active: n.active ?? void 0,
+        sort: n.sort,
+        page: n.page,
+        per_page: n.per_page
+      }
+    }).then((x) => ({ ...x.meta, data: x.data })),
+    get: (n) => l.http.get(`${o}/admins/${n}`).then(s),
+    create: (n) => l.http.post(`${o}/admins`, n).then(s),
+    update: (n, x) => l.http.patch(`${o}/admins/${n}`, x).then(s),
+    remove: (n) => l.http.delete(`${o}/admins/${n}`),
+    roles: () => l.http.get(`${o}/roles`).then(s),
+    role: (n) => l.http.get(`${o}/roles/${n}`).then(s),
+    permissions: () => l.http.get(`${o}/roles/permissions`).then(s),
+    createRole: (n) => l.http.post(`${o}/roles`, n).then(s),
+    updateRole: (n, x) => l.http.put(`${o}/roles/${n}`, x).then(s),
+    removeRole: (n) => l.http.delete(`${o}/roles/${n}`),
+    calls: (n = {}) => l.http.get(`${o}/mcp-calls`, {
+      query: {
+        user: n.user ?? void 0,
+        tool: n.tool ?? void 0,
+        outcome: n.outcome ?? void 0,
+        page: n.page,
+        per_page: n.per_page
+      }
+    }).then((x) => ({ ...x.meta, data: x.data, filters: x.filters }))
+  };
+}
+const Re = /* @__PURE__ */ new WeakSet();
+function re() {
+  try {
+    const { i18n: l } = oe();
+    Re.has(l) || (l.defaults("webx-auth", aa), Re.add(l));
+  } catch {
+  }
+}
+const $a = { class: "wx-admin-form" }, Va = {
+  key: 0,
+  class: "wx-admin-form__aside"
+}, Aa = { class: "wx-admin-form__fields" }, za = /* @__PURE__ */ ne({
+  __name: "AdminDialog",
+  props: {
+    admin: { default: null },
+    avatarField: { default: void 0 }
+  },
+  setup(l) {
+    const o = l, { resolve: s, dismiss: n, open: x } = ge(), f = oe(), z = pe(f), m = Te();
+    re();
+    const u = ae("webx-auth"), N = ve(), c = A([]), k = f.can("roles.assign"), $ = f.state.user?.isSuper === !0, W = A(!1), V = A({}), w = A({
+      name: "",
+      email: "",
+      password: "",
+      avatar: null,
+      is_active: !0,
+      is_super: !1,
+      locale: null,
+      roles: []
+    }), C = R({
+      get: () => w.value.avatar ? { path: w.value.avatar } : null,
+      set: (S) => {
+        w.value.avatar = S?.path ?? null;
+      }
+    }), E = R(() => o.admin !== null), b = R(() => c.value.map((S) => ({ value: S.id, label: S.name }))), L = R(() => [
+      { value: "auto", label: u("admins.locale-auto") },
+      ...m.state.panelLocales.map((S) => ({ value: S.code, label: S.nativeName }))
+    ]);
+    k && z.roles().then((S) => c.value = S), me(
+      () => o.admin,
+      (S) => {
+        w.value = {
+          name: S?.name ?? "",
+          email: S?.email ?? "",
+          password: "",
+          avatar: S?.avatar ?? null,
+          is_active: S?.is_active ?? !0,
+          is_super: S?.is_super ?? !1,
+          locale: S?.locale ?? "auto",
+          roles: S?.roles.map((F) => F.id) ?? []
+        }, V.value = {};
+      },
+      { immediate: !0 }
+    );
+    function _(S) {
+      return V.value[S]?.[0];
+    }
+    async function g() {
+      W.value = !0, V.value = {};
+      const S = {
+        name: w.value.name,
+        email: w.value.email,
+        avatar: w.value.avatar,
+        is_active: w.value.is_active,
+        locale: w.value.locale === "auto" ? null : w.value.locale
+      };
+      k && (S.roles = w.value.roles ?? []), $ && (S.is_super = w.value.is_super), w.value.password && (S.password = w.value.password);
+      try {
+        const F = o.admin ? await z.update(o.admin.id, S) : await z.create(S);
+        Q.success(u(E.value ? "admins.updated" : "admins.created")), s(F);
+      } catch (F) {
+        const U = F.body;
+        U?.errors ? V.value = U.errors : Q.danger(N(F));
+      } finally {
+        W.value = !1;
+      }
+    }
+    return (S, F) => (r(), h(e(_e), {
+      open: e(x),
+      "onUpdate:open": F[9] || (F[9] = (U) => Se(x) ? x.value = U : null),
+      title: E.value ? e(u)("admins.edit-short") : e(u)("admins.new-short"),
+      width: 720
+    }, {
+      footer: a(() => [
+        t(e(ce), { size: "sm" }, {
+          default: a(() => [
+            t(e(X), {
+              variant: "outline",
+              onClick: F[8] || (F[8] = (U) => e(n)())
+            }, {
+              default: a(() => [
+                v(d(e(u)("admins.cancel")), 1)
+              ]),
+              _: 1
+            }),
+            t(e(X), {
+              type: "primary",
+              loading: W.value,
+              onClick: g
+            }, {
+              default: a(() => [
+                v(d(e(u)("admins.save")), 1)
+              ]),
+              _: 1
+            }, 8, ["loading"])
+          ]),
+          _: 1
+        })
+      ]),
+      default: a(() => [
+        M("div", $a, [
+          M("div", {
+            class: Ie(["wx-admin-form__grid", { "has-aside": l.avatarField }])
+          }, [
+            l.avatarField ? (r(), G("div", Va, [
+              (r(), h(qe(l.avatarField), {
+                modelValue: C.value,
+                "onUpdate:modelValue": F[0] || (F[0] = (U) => C.value = U),
+                label: e(u)("admins.avatar"),
+                aspect: "1/1",
+                captions: !1
+              }, null, 8, ["modelValue", "label"]))
+            ])) : O("", !0),
+            M("div", Aa, [
+              t(e(j), {
+                label: e(u)("admins.name"),
+                error: _("name")
+              }, {
+                default: a(() => [
+                  t(e(te), {
+                    modelValue: w.value.name,
+                    "onUpdate:modelValue": F[1] || (F[1] = (U) => w.value.name = U),
+                    name: "name"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              t(e(j), {
+                label: e(u)("admins.email"),
+                error: _("email")
+              }, {
+                default: a(() => [
+                  t(e(te), {
+                    modelValue: w.value.email,
+                    "onUpdate:modelValue": F[2] || (F[2] = (U) => w.value.email = U),
+                    type: "email",
+                    name: "email",
+                    autocomplete: "off"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"]),
+              t(e(j), {
+                label: e(u)("admins.password"),
+                error: _("password"),
+                help: E.value ? e(u)("admins.password-keep") : e(u)("admins.password-hint")
+              }, {
+                default: a(() => [
+                  t(e(te), {
+                    modelValue: w.value.password,
+                    "onUpdate:modelValue": F[3] || (F[3] = (U) => w.value.password = U),
+                    type: "password",
+                    name: "password",
+                    autocomplete: "new-password"
+                  }, null, 8, ["modelValue"])
+                ]),
+                _: 1
+              }, 8, ["label", "error", "help"]),
+              e(k) ? (r(), h(e(j), {
+                key: 0,
+                label: e(u)("admins.roles"),
+                error: _("roles")
+              }, {
+                default: a(() => [
+                  t(e(ie), {
+                    modelValue: w.value.roles,
+                    "onUpdate:modelValue": F[4] || (F[4] = (U) => w.value.roles = U),
+                    options: b.value,
+                    multiple: ""
+                  }, null, 8, ["modelValue", "options"])
+                ]),
+                _: 1
+              }, 8, ["label", "error"])) : O("", !0),
+              t(e(j), {
+                label: e(u)("admins.locale")
+              }, {
+                default: a(() => [
+                  t(e(ie), {
+                    modelValue: w.value.locale,
+                    "onUpdate:modelValue": F[5] || (F[5] = (U) => w.value.locale = U),
+                    options: L.value
+                  }, null, 8, ["modelValue", "options"])
+                ]),
+                _: 1
+              }, 8, ["label"]),
+              t(e(ce), { size: "md" }, {
+                default: a(() => [
+                  t(e(he), {
+                    modelValue: w.value.is_active,
+                    "onUpdate:modelValue": F[6] || (F[6] = (U) => w.value.is_active = U),
+                    label: e(u)("admins.active")
+                  }, null, 8, ["modelValue", "label"]),
+                  $ ? (r(), h(e(he), {
+                    key: 0,
+                    modelValue: w.value.is_super,
+                    "onUpdate:modelValue": F[7] || (F[7] = (U) => w.value.is_super = U),
+                    label: e(u)("admins.super")
+                  }, null, 8, ["modelValue", "label"])) : O("", !0)
+                ]),
+                _: 1
+              }),
+              $ ? (r(), h(e(q), {
+                key: 1,
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(u)("admins.super-hint")), 1)
+                ]),
+                _: 1
+              })) : O("", !0)
+            ])
+          ], 2)
+        ])
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), We = 480, ta = /* @__PURE__ */ ne({
+  __name: "AdminList",
+  props: {
+    picking: { type: Boolean, default: !1 },
+    multiple: { type: Boolean, default: !1 },
+    removable: { type: Boolean, default: !1 },
+    filters: { type: Boolean, default: !1 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  emits: ["open", "chosen", "selection", "remove"],
+  setup(l, { expose: o, emit: s }) {
+    const n = l, x = s, f = oe(), z = pe(f);
+    re();
+    const m = de("root"), u = ke(m), N = R(() => u.value > 0 && u.value < We), c = ae("webx-auth"), k = ae("webx-admin"), $ = A(null), W = A([]), V = A(!1), w = A("all"), C = A("any"), E = A([]), b = A({});
+    let L = { page: 1, perPage: 20, sort: null, search: "" };
+    const _ = R(() => [
+      { value: "all", label: c("admins.all-roles") },
+      ...W.value.map((I) => ({ value: I.slug, label: I.name }))
+    ]), g = R(() => [
+      { value: "any", label: c("admins.any-state") },
+      { value: "yes", label: c("admins.only-active") },
+      { value: "no", label: c("admins.only-inactive") }
+    ]), S = R(() => {
+      const I = [], Z = W.value.find((B) => B.slug === w.value);
+      return Z && I.push({
+        key: "role",
+        label: `${c("admins.filter-role")}: ${Z.name}`,
+        clear: () => w.value = "all"
+      }), C.value !== "any" && I.push({
+        key: "state",
+        label: `${c("admins.filter-state")}: ${C.value === "yes" ? c("admins.only-active") : c("admins.only-inactive")}`,
+        clear: () => C.value = "any"
+      }), I;
+    });
+    function F() {
+      w.value = "all", C.value = "any";
+    }
+    const U = R(() => N.value ? [{ key: "card", label: "" }] : [
+      { key: "name", label: c("admins.name"), sortable: !0 },
+      { key: "email", label: c("admins.email"), sortable: !0, hideBelow: 560 },
+      { key: "roles", label: c("admins.roles"), hideBelow: 760 },
+      { key: "is_active", label: c("admins.active"), align: "center", hideBelow: 660 },
+      {
+        key: "last_login_at",
+        label: c("admins.last-login"),
+        sortable: !0,
+        hideBelow: 900,
+        // The first thing to go when a row becomes a card: it is a date somebody scans down a
+        // column, and a card has no column to scan.
+        hideOnCards: !0
+      },
+      {
+        key: "actions",
+        label: "",
+        width: je,
+        align: "right",
+        hidden: !n.removable,
+        // A card puts them along its top instead, through the `card-actions` slot.
+        hideOnCards: !0
+      }
+    ]);
+    z.roles().then((I) => W.value = I), me([w, C], () => Y(L));
+    async function Y(I) {
+      L = I, V.value = !0;
+      try {
+        $.value = await z.list({
+          q: I.search,
+          role: w.value === "all" ? null : w.value,
+          active: C.value === "any" ? null : C.value,
+          sort: I.sort ? `${I.sort.order === "desc" ? "-" : ""}${I.sort.key}` : "name",
+          page: I.page,
+          per_page: I.perPage
+        }), y();
+      } finally {
+        V.value = !1;
+      }
+    }
+    async function y() {
+      const I = n.resolveAvatar;
+      if (I)
+        for (const Z of $.value?.data ?? []) {
+          if (!Z.avatar || b.value[Z.avatar]) continue;
+          const B = await I(Z.avatar);
+          B && (b.value = { ...b.value, [Z.avatar]: B });
+        }
+    }
+    function p(I) {
+      return [
+        {
+          key: "delete",
+          icon: "trash",
+          label: c("admins.delete"),
+          danger: !0,
+          run: () => x("remove", I)
+        }
+      ];
+    }
+    function i(I) {
+      if (n.picking) {
+        x("chosen", [I]);
+        return;
+      }
+      x("open", I);
+    }
+    const T = R(() => !(n.picking && n.multiple));
+    function H(I, Z) {
+      E.value = Z, x("selection", Z);
+    }
+    return o({ reload: () => Y(L), chosen: () => E.value }), (I, Z) => (r(), G("div", {
+      ref_key: "root",
+      ref: m,
+      class: "wx-admin-list"
+    }, [
+      t(e(we), {
+        data: $.value,
+        columns: U.value,
+        "row-key": "id",
+        searchable: "",
+        clickable: T.value,
+        hover: T.value,
+        flush: "",
+        loading: V.value,
+        "search-placeholder": e(c)("admins.search"),
+        "empty-text": e(c)("admins.empty"),
+        selectable: l.picking && l.multiple,
+        "select-row-label": e(k)("filters.select-row"),
+        "select-all-label": e(k)("filters.select-all"),
+        "cards-below": We,
+        "filters-count": S.value.length,
+        "filters-label": e(k)("filters.title"),
+        onRowClick: i,
+        onStateChange: Y,
+        onSelectionChange: H
+      }, Me({
+        "cell-name": a(({ row: B }) => [
+          t(e(ce), {
+            size: "sm",
+            align: "center"
+          }, {
+            default: a(() => [
+              t(e(ra), {
+                name: B.name,
+                src: B.avatar ? b.value[B.avatar] : void 0,
+                size: "sm"
+              }, null, 8, ["name", "src"]),
+              M("span", null, d(B.name), 1),
+              B.is_super ? (r(), h(e(ee), {
+                key: 0,
+                type: "warning"
+              }, {
+                default: a(() => [
+                  v(d(e(c)("admins.super")), 1)
+                ]),
+                _: 1
+              })) : O("", !0)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-roles": a(({ row: B }) => [
+          B.roles.length > 0 ? (r(), h(e(ce), {
+            key: 0,
+            size: "xs",
+            wrap: ""
+          }, {
+            default: a(() => [
+              (r(!0), G(se, null, fe(B.roles, (K) => (r(), h(e(ee), {
+                key: K.id
+              }, {
+                default: a(() => [
+                  v(d(K.name), 1)
+                ]),
+                _: 2
+              }, 1024))), 128))
+            ]),
+            _: 2
+          }, 1024)) : (r(), h(e(q), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(c)("admins.no-roles")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-is_active": a(({ row: B }) => [
+          t(e(ee), {
+            type: B.is_active ? "success" : "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(B.is_active ? e(c)("admins.active") : e(c)("admins.only-inactive")), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"])
+        ]),
+        "card-actions": a(({ row: B }) => [
+          l.removable ? (r(), h(e(ze), {
+            key: 0,
+            actions: p(B),
+            label: B.name
+          }, null, 8, ["actions", "label"])) : O("", !0)
+        ]),
+        "cell-actions": a(({ row: B }) => [
+          t(e(ze), {
+            actions: p(B),
+            label: B.name
+          }, null, 8, ["actions", "label"])
+        ]),
+        "cell-last_login_at": a(({ row: B }) => [
+          t(e(ue), {
+            value: B.last_login_at,
+            tone: B.last_login_at ? "default" : "muted",
+            compact: ""
+          }, null, 8, ["value", "tone"])
+        ]),
+        "cell-card": a(({ row: B }) => [
+          t(e(xe), {
+            variant: "plain",
+            shape: "circle",
+            title: B.name,
+            image: B.avatar ? b.value[B.avatar] : void 0,
+            subtitle: B.email
+          }, {
+            meta: a(() => [
+              B.is_super ? (r(), h(e(ee), {
+                key: 0,
+                type: "warning",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(e(c)("admins.super")), 1)
+                ]),
+                _: 1
+              })) : O("", !0),
+              (r(!0), G(se, null, fe(B.roles, (K) => (r(), h(e(ee), {
+                key: K.id,
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(K.name), 1)
+                ]),
+                _: 2
+              }, 1024))), 128)),
+              t(e(ee), {
+                type: B.is_active ? "success" : "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(B.is_active ? e(c)("admins.active") : e(c)("admins.only-inactive")), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])
+            ]),
+            _: 2
+          }, 1032, ["title", "image", "subtitle"])
+        ]),
+        _: 2
+      }, [
+        l.filters ? {
+          name: "filters",
+          fn: a(() => [
+            t(e(j), {
+              label: e(c)("admins.filter-role")
+            }, {
+              default: a(() => [
+                t(e(ie), {
+                  modelValue: w.value,
+                  "onUpdate:modelValue": Z[0] || (Z[0] = (B) => w.value = B),
+                  options: _.value,
+                  size: "sm"
+                }, null, 8, ["modelValue", "options"])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            t(e(j), {
+              label: e(c)("admins.filter-state")
+            }, {
+              default: a(() => [
+                t(e(ie), {
+                  modelValue: C.value,
+                  "onUpdate:modelValue": Z[1] || (Z[1] = (B) => C.value = B),
+                  options: g.value,
+                  size: "sm"
+                }, null, 8, ["modelValue", "options"])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            S.value.length > 0 ? (r(), h(e(X), {
+              key: 0,
+              variant: "text",
+              size: "sm",
+              block: "",
+              onClick: F
+            }, {
+              icon: a(() => [
+                t(e(ye), { name: "close" })
+              ]),
+              default: a(() => [
+                v(" " + d(e(k)("filters.reset")), 1)
+              ]),
+              _: 1
+            })) : O("", !0)
+          ]),
+          key: "0"
+        } : void 0,
+        l.filters ? {
+          name: "applied",
+          fn: a(() => [
+            t(e(He), { filters: S.value }, null, 8, ["filters"])
+          ]),
+          key: "1"
+        } : void 0
+      ]), 1032, ["data", "columns", "clickable", "hover", "loading", "search-placeholder", "empty-text", "selectable", "select-row-label", "select-all-label", "filters-count", "filters-label"])
+    ], 512));
+  }
+}), Sa = { class: "wx-call-list__details" }, Ta = { class: "wx-call-list__label" }, Ua = {
+  key: 1,
+  class: "wx-call-list__arguments"
+}, La = {
+  class: "wx-call-list__glyph",
+  "aria-hidden": "true"
+}, Ra = {
+  key: 2,
+  class: "wx-call-list__arguments"
+}, Fe = 480, Wa = /* @__PURE__ */ ne({
+  __name: "CallList",
+  setup(l, { expose: o }) {
+    const s = oe(), n = pe(s);
+    re();
+    const x = de("root"), f = ke(x), z = R(() => f.value > 0 && f.value < Fe), m = ae("webx-auth"), u = ae("webx-admin"), N = A(null), c = A({ users: [], tools: [] }), k = A(!1), $ = A("all"), W = A("all"), V = A("any");
+    let w = { page: 1, perPage: 30, sort: null, search: "" };
+    function C(y) {
+      return y === null ? m("calls.local") : y.name ?? m("calls.deleted", { id: y.id });
+    }
+    const E = R(() => [
+      { value: "all", label: m("calls.everybody") },
+      ...c.value.users.map((y) => ({
+        value: y.id === null ? "none" : String(y.id),
+        label: C(y.id === null ? null : { id: y.id, name: y.name })
+      }))
+    ]), b = R(() => [
+      { value: "all", label: m("calls.all-tools") },
+      ...c.value.tools.map((y) => ({ value: y, label: y }))
+    ]), L = R(() => [
+      { value: "any", label: m("calls.any-outcome") },
+      { value: "ok", label: m("calls.only-answered") },
+      { value: "failed", label: m("calls.only-refused") },
+      { value: "dry", label: m("calls.only-dry") }
+    ]), _ = R(() => {
+      const y = [], p = E.value.find((T) => T.value === $.value);
+      $.value !== "all" && p && y.push({
+        key: "user",
+        label: `${m("calls.filter-user")}: ${p.label}`,
+        clear: () => $.value = "all"
+      }), W.value !== "all" && y.push({
+        key: "tool",
+        label: `${m("calls.filter-tool")}: ${W.value}`,
+        clear: () => W.value = "all"
+      });
+      const i = L.value.find((T) => T.value === V.value);
+      return V.value !== "any" && i && y.push({
+        key: "outcome",
+        label: `${m("calls.filter-outcome")}: ${i.label}`,
+        clear: () => V.value = "any"
+      }), y;
+    });
+    function g() {
+      $.value = "all", W.value = "all", V.value = "any";
+    }
+    const S = R(() => z.value ? [{ key: "card", label: "" }] : [
+      { key: "at", label: m("calls.when") },
+      { key: "user", label: m("calls.who"), hideBelow: 640 },
+      { key: "tool", label: m("calls.tool") },
+      { key: "outcome", label: m("calls.outcome") },
+      { key: "duration_ms", label: m("calls.took"), align: "right", hideBelow: 820 },
+      { key: "client", label: m("calls.client"), hideBelow: 960 }
+    ]);
+    me([$, W, V], () => F({ ...w, page: 1 }));
+    async function F(y) {
+      w = y, k.value = !0;
+      try {
+        N.value = await n.calls({
+          user: $.value === "all" ? null : $.value,
+          tool: W.value === "all" ? null : W.value,
+          outcome: V.value === "any" ? null : V.value,
+          page: y.page,
+          per_page: y.perPage
+        }), c.value = N.value.filters;
+      } finally {
+        k.value = !1;
+      }
+    }
+    function U(y) {
+      return y.ok ? y.dry_run ? { type: "info", label: m("calls.dry-run") } : { type: "success", label: m("calls.answered") } : { type: "danger", label: m("calls.refused") };
+    }
+    function Y(y) {
+      return y.arguments !== null || y.error !== null;
+    }
+    return o({ reload: () => F(w) }), (y, p) => (r(), G("div", {
+      ref_key: "root",
+      ref: x,
+      class: "wx-call-list"
+    }, [
+      t(e(we), {
+        data: N.value,
+        columns: S.value,
+        "row-key": "id",
+        flush: "",
+        loading: k.value,
+        clickable: !1,
+        expandable: !z.value,
+        "expandable-if": Y,
+        "empty-text": e(m)("calls.empty"),
+        "cards-below": Fe,
+        "filters-count": _.value.length,
+        "filters-label": e(u)("filters.title"),
+        onStateChange: F
+      }, {
+        filters: a(() => [
+          t(e(j), {
+            label: e(m)("calls.filter-user")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: $.value,
+                "onUpdate:modelValue": p[0] || (p[0] = (i) => $.value = i),
+                options: E.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          t(e(j), {
+            label: e(m)("calls.filter-tool")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: W.value,
+                "onUpdate:modelValue": p[1] || (p[1] = (i) => W.value = i),
+                options: b.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          t(e(j), {
+            label: e(m)("calls.filter-outcome")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: V.value,
+                "onUpdate:modelValue": p[2] || (p[2] = (i) => V.value = i),
+                options: L.value,
+                size: "sm"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          _.value.length > 0 ? (r(), h(e(X), {
+            key: 0,
+            variant: "text",
+            size: "sm",
+            block: "",
+            onClick: g
+          }, {
+            icon: a(() => [
+              t(e(ye), { name: "close" })
+            ]),
+            default: a(() => [
+              v(" " + d(e(u)("filters.reset")), 1)
+            ]),
+            _: 1
+          })) : O("", !0)
+        ]),
+        applied: a(() => [
+          t(e(He), { filters: _.value }, null, 8, ["filters"])
+        ]),
+        "cell-at": a(({ row: i }) => [
+          t(e(ue), {
+            value: i.at,
+            tone: "default",
+            compact: ""
+          }, null, 8, ["value"])
+        ]),
+        "cell-user": a(({ row: i }) => [
+          t(e(q), {
+            tone: i.user === null || i.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              v(d(C(i.user)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-tool": a(({ row: i }) => [
+          t(e(q), {
+            mono: "",
+            size: "sm"
+          }, {
+            default: a(() => [
+              v(d(i.tool), 1)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-outcome": a(({ row: i }) => [
+          t(e(ee), {
+            type: U(i).type,
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(U(i).label), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"])
+        ]),
+        "cell-duration_ms": a(({ row: i }) => [
+          t(e(q), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(m)("calls.ms", { count: i.duration_ms })), 1)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-client": a(({ row: i }) => [
+          i.client ? (r(), h(e(q), {
+            key: 0,
+            size: "sm"
+          }, {
+            default: a(() => [
+              v(d(i.client), 1)
+            ]),
+            _: 2
+          }, 1024)) : (r(), h(e(q), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [...p[3] || (p[3] = [
+              v("—", -1)
+            ])]),
+            _: 1
+          }))
+        ]),
+        expanded: a(({ row: i }) => [
+          M("div", Sa, [
+            i.error ? (r(), h(e(q), {
+              key: 0,
+              tone: "danger",
+              size: "sm",
+              class: "wx-call-list__error"
+            }, {
+              default: a(() => [
+                M("strong", null, d(e(m)("calls.error")) + ":", 1),
+                v(" " + d(i.error), 1)
+              ]),
+              _: 2
+            }, 1024)) : O("", !0),
+            M("div", Ta, [
+              t(e(q), {
+                size: "sm",
+                weight: "semibold"
+              }, {
+                default: a(() => [
+                  v(d(e(m)("calls.request")), 1)
+                ]),
+                _: 1
+              }),
+              t(e(q), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(m)("calls.request-hint")), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            i.arguments ? (r(), G("pre", Ua, d(i.arguments), 1)) : (r(), h(e(q), {
+              key: 2,
+              size: "sm",
+              tone: "muted"
+            }, {
+              default: a(() => [
+                v(d(e(m)("calls.no-arguments")), 1)
+              ]),
+              _: 1
+            }))
+          ])
+        ]),
+        "cell-card": a(({ row: i }) => [
+          t(e(xe), {
+            variant: "plain",
+            title: i.tool,
+            subtitle: C(i.user)
+          }, {
+            media: a(() => [
+              M("span", La, [
+                t(e(ye), { name: "sliders" })
+              ])
+            ]),
+            meta: a(() => [
+              t(e(ee), {
+                type: U(i).type,
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(U(i).label), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"]),
+              t(e(ue), {
+                value: i.at,
+                compact: ""
+              }, null, 8, ["value"]),
+              i.client ? (r(), h(e(q), {
+                key: 0,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(i.client), 1)
+                ]),
+                _: 2
+              }, 1024)) : O("", !0)
+            ]),
+            default: a(() => [
+              Y(i) ? (r(), h(e(ce), {
+                key: 0,
+                direction: "vertical",
+                size: "xs",
+                class: "wx-call-list__card-details"
+              }, {
+                default: a(() => [
+                  i.error ? (r(), h(e(q), {
+                    key: 0,
+                    tone: "danger",
+                    size: "sm"
+                  }, {
+                    default: a(() => [
+                      v(d(i.error), 1)
+                    ]),
+                    _: 2
+                  }, 1024)) : O("", !0),
+                  i.arguments ? (r(), h(e(q), {
+                    key: 1,
+                    size: "xs",
+                    tone: "muted"
+                  }, {
+                    default: a(() => [
+                      v(d(e(m)("calls.request")), 1)
+                    ]),
+                    _: 1
+                  })) : O("", !0),
+                  i.arguments ? (r(), G("pre", Ra, d(i.arguments), 1)) : O("", !0)
+                ]),
+                _: 2
+              }, 1024)) : O("", !0)
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "expandable", "empty-text", "filters-count", "filters-label"])
+    ], 512));
+  }
+});
+function Fa(l) {
+  const o = `${l.apiPath}/auth/connections`;
+  return {
+    list: (s = "mine") => l.http.get(o, { query: { all: s === "all" ? 1 : void 0 } }).then((n) => ({
+      data: n.data,
+      scope: n.meta.scope,
+      canSeeEverybody: n.meta.can_see_everybody
+    })),
+    disconnect: (s) => l.http.delete(`${o}/${s}`).then((n) => n.data)
+  };
+}
+const Pa = {
+  class: "wx-connection-list__glyph",
+  "aria-hidden": "true"
+}, Pe = 560, Ba = /* @__PURE__ */ ne({
+  __name: "ConnectionList",
+  props: {
+    scope: { default: "mine" }
+  },
+  setup(l, { expose: o }) {
+    const s = l, n = oe(), x = Fa(n);
+    re();
+    const f = ae("webx-auth"), z = ve(), m = de("root"), u = ke(m), N = R(() => u.value > 0 && u.value < Pe), c = A([]), k = A(!1), $ = A(null), W = R(() => N.value ? [{ key: "card", label: "" }] : [
+      { key: "client", label: f("connections.client"), minWidth: 210 },
+      ...s.scope === "all" ? [{ key: "user", label: f("connections.who"), minWidth: 140 }] : [],
+      { key: "read_only", label: f("connections.allowed"), minWidth: 160 },
+      { key: "connected_at", label: f("connections.connected"), hideBelow: 860 },
+      { key: "last_used_at", label: f("connections.last-used"), minWidth: 130 },
+      { key: "end", label: "", align: "right", width: 140 }
+    ]);
+    function V(b) {
+      return b.user.name ?? f("calls.deleted", { id: b.user.id });
+    }
+    function w(b) {
+      if (b.read_only) return f("connections.read-only");
+      if (s.scope !== "all") return f("connections.full-you");
+      const L = b.user.name?.split(" ")[0];
+      return f("connections.full", { name: L || V(b) });
+    }
+    async function C() {
+      k.value = !0;
+      try {
+        c.value = (await x.list(s.scope)).data;
+      } catch (b) {
+        Q.danger(z(b));
+      } finally {
+        k.value = !1;
+      }
+    }
+    async function E(b) {
+      if (await Ve({
+        title: f("connections.confirm-title", { client: b.client }),
+        message: f("connections.confirm-text"),
+        confirmText: f("connections.confirm"),
+        cancelText: f("connections.cancel"),
+        tone: "danger"
+      })) {
+        $.value = b.id;
+        try {
+          const _ = await x.disconnect(b.id);
+          c.value = c.value.map((g) => g.id === _.id ? _ : g), Q.success(f("connections.done", { client: b.client }));
+        } catch (_) {
+          Q.danger(z(_));
+        } finally {
+          $.value = null;
+        }
+      }
+    }
+    return me(() => s.scope, C, { immediate: !0 }), o({ reload: C }), (b, L) => (r(), G("div", {
+      ref_key: "root",
+      ref: m,
+      class: "wx-connection-list"
+    }, [
+      t(e(we), {
+        data: c.value,
+        columns: W.value,
+        "row-key": "id",
+        flush: "",
+        loading: k.value,
+        clickable: !1,
+        "empty-text": l.scope === "all" ? e(f)("connections.empty-all") : e(f)("connections.empty"),
+        "cards-below": Pe,
+        "row-class": (_) => _.revoked_at ? "is-ended" : ""
+      }, {
+        "cell-client": a(({ row: _ }) => [
+          t(e(ce), {
+            direction: "vertical",
+            size: "none"
+          }, {
+            default: a(() => [
+              t(e(q), {
+                tone: _.revoked_at ? "muted" : "default",
+                weight: "medium"
+              }, {
+                default: a(() => [
+                  v(d(_.client), 1)
+                ]),
+                _: 2
+              }, 1032, ["tone"]),
+              t(e(q), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("connections.returns-to", { host: _.host })), 1)
+                ]),
+                _: 2
+              }, 1024)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-user": a(({ row: _ }) => [
+          t(e(q), {
+            tone: _.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              v(d(V(_)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-read_only": a(({ row: _ }) => [
+          _.revoked_at ? (r(), h(e(ee), {
+            key: 0,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(e(f)("connections.disconnected")), 1)
+            ]),
+            _: 1
+          })) : (r(), h(e(ee), {
+            key: 1,
+            type: _.read_only ? "info" : "success",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(w(_)), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"]))
+        ]),
+        "cell-connected_at": a(({ row: _ }) => [
+          t(e(ue), {
+            value: _.connected_at,
+            tone: "muted",
+            compact: ""
+          }, null, 8, ["value"])
+        ]),
+        "cell-last_used_at": a(({ row: _ }) => [
+          _.last_used_at ? (r(), h(e(ue), {
+            key: 0,
+            value: _.last_used_at,
+            tone: "default",
+            compact: ""
+          }, null, 8, ["value"])) : (r(), h(e(q), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(f)("connections.never-used")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-end": a(({ row: _ }) => [
+          _.revoked_at ? O("", !0) : (r(), h(e(X), {
+            key: 0,
+            type: "danger",
+            variant: "text",
+            size: "sm",
+            loading: $.value === _.id,
+            onClick: (g) => E(_)
+          }, {
+            default: a(() => [
+              v(d(e(f)("connections.disconnect")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading", "onClick"]))
+        ]),
+        "cell-card": a(({ row: _ }) => [
+          t(e(xe), {
+            variant: "plain",
+            title: _.client,
+            subtitle: e(f)("connections.returns-to", { host: _.host })
+          }, {
+            media: a(() => [
+              M("span", Pa, [
+                t(e(ye), { name: "link" })
+              ])
+            ]),
+            meta: a(() => [
+              _.revoked_at ? (r(), h(e(ee), {
+                key: 0,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("connections.disconnected")), 1)
+                ]),
+                _: 1
+              })) : (r(), h(e(ee), {
+                key: 1,
+                type: _.read_only ? "info" : "success",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(w(_)), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])),
+              l.scope === "all" ? (r(), h(e(q), {
+                key: 2,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(V(_)), 1)
+                ]),
+                _: 2
+              }, 1024)) : O("", !0),
+              _.last_used_at ? (r(), h(e(ue), {
+                key: 3,
+                value: _.last_used_at,
+                compact: ""
+              }, null, 8, ["value"])) : (r(), h(e(q), {
+                key: 4,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("connections.never-used")), 1)
+                ]),
+                _: 1
+              }))
+            ]),
+            actions: a(() => [
+              _.revoked_at ? O("", !0) : (r(), h(e(X), {
+                key: 0,
+                type: "danger",
+                variant: "text",
+                size: "sm",
+                loading: $.value === _.id,
+                onClick: (g) => E(_)
+              }, {
+                default: a(() => [
+                  v(d(e(f)("connections.disconnect")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "onClick"]))
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "empty-text", "row-class"])
+    ], 512));
+  }
+});
+async function Oa(l) {
+  try {
+    if (navigator.clipboard?.writeText)
+      return await navigator.clipboard.writeText(l), !0;
+  } catch {
+  }
+  return Ea(l);
+}
+function Ea(l) {
+  const o = document.createElement("textarea");
+  o.value = l, o.setAttribute("readonly", ""), o.style.position = "fixed", o.style.opacity = "0", document.body.append(o), o.select();
+  try {
+    return document.execCommand("copy");
+  } catch {
+    return !1;
+  } finally {
+    o.remove();
+  }
+}
+function la(l) {
+  const o = `${l.apiPath}/auth/keys`;
+  return {
+    list: (s) => l.http.get(
+      o,
+      ...s?.mine ? [{ query: { mine: 1 } }] : []
+    ).then((n) => ({
+      data: n.data,
+      scopes: n.meta.scopes,
+      maxDays: n.meta.max_days
+    })),
+    scopesFor: (s) => l.http.get(`${o}/scopes`, { query: { admin: s } }).then((n) => n.data),
+    issue: (s) => l.http.post(o, s).then((n) => ({ key: n.data, token: n.token })),
+    revoke: (s) => l.http.delete(`${o}/${s}`).then((n) => n.data)
+  };
+}
+const Na = {
+  key: 0,
+  class: "wx-key-dialog"
+}, Da = { class: "wx-key-dialog__secret" }, Ia = {
+  key: 1,
+  class: "wx-key-dialog"
+}, qa = /* @__PURE__ */ ne({
+  __name: "KeyDialog",
+  props: {
+    mine: { type: Boolean, default: !1 }
+  },
+  setup(l) {
+    const o = l, { open: s, resolve: n, dismiss: x } = ge(), f = oe(), z = la(f), m = pe(f);
+    re();
+    const u = ae("webx-auth"), N = ve(), c = [30, 90, 365, 1095, 3650], k = A({
+      name: "",
+      admin: o.mine && Number(f.state.user?.id) || null,
+      access: "everything",
+      scopes: [],
+      days: 365
+    }), $ = A([]), W = A([]), V = A(!1), w = A({}), C = A(null), E = A(!1), b = R(
+      () => $.value.filter((y) => y !== "mcp:use").map((y) => ({ value: y, label: y }))
+    ), L = R(() => [
+      { value: "everything", label: u("keys.everything") },
+      { value: "chosen", label: u("keys.chosen") }
+    ]), _ = R(
+      () => c.map((y) => ({ value: y, label: u(`keys.days-${y}`) }))
+    ), g = R(() => {
+      const y = f.state.manifest?.modules.find((p) => p.id === "connect")?.meta;
+      return typeof y?.url == "string" ? y.url : "";
+    });
+    me(
+      () => k.value.admin,
+      (y) => {
+        if (o.mine) {
+          z.scopesFor().then(
+            (p) => $.value = p,
+            (p) => Q.danger(N(p))
+          );
+          return;
+        }
+        if (y === null) {
+          $.value = [];
+          return;
+        }
+        z.scopesFor(y).then(
+          (p) => {
+            k.value.admin === y && ($.value = p, k.value.scopes = k.value.scopes.filter((i) => p.includes(i)));
+          },
+          (p) => Q.danger(N(p))
+        );
+      },
+      { immediate: o.mine }
+    ), o.mine || m.list({ active: "yes", per_page: 100, sort: "name" }).then(
+      (y) => W.value = y.data.map((p) => ({
+        value: p.id,
+        label: `${p.name} · ${p.email}`
+      })),
+      (y) => Q.danger(N(y))
+    );
+    function S(y) {
+      return w.value[y]?.[0] ?? w.value[`${y}.0`]?.[0];
+    }
+    async function F() {
+      if (w.value = {}, k.value.access === "chosen" && k.value.scopes.length === 0) {
+        w.value = { scopes: [u("keys.scopes-required")] };
+        return;
+      }
+      V.value = !0;
+      try {
+        C.value = await z.issue({
+          name: k.value.name,
+          admin: k.value.admin ?? 0,
+          scopes: k.value.access === "chosen" ? k.value.scopes : [],
+          days: k.value.days
+        });
+      } catch (y) {
+        const p = y.body;
+        p?.errors ? w.value = p.errors : Q.danger(N(y));
+      } finally {
+        V.value = !1;
+      }
+    }
+    async function U() {
+      C.value !== null && (await Oa(C.value.token) ? E.value = !0 : Q.danger(u("keys.copy-failed")));
+    }
+    function Y() {
+      C.value ? n(C.value.key) : x();
+    }
+    return (y, p) => (r(), h(e(_e), {
+      open: e(s),
+      title: C.value ? e(u)("keys.issued-title") : e(u)("keys.issue"),
+      width: 640,
+      "onUpdate:open": p[5] || (p[5] = (i) => i ? void 0 : Y())
+    }, {
+      footer: a(() => [
+        t(e(ce), { size: "sm" }, {
+          default: a(() => [
+            C.value ? (r(), h(e(X), {
+              key: 0,
+              type: "primary",
+              onClick: Y
+            }, {
+              default: a(() => [
+                v(d(e(u)("keys.done")), 1)
+              ]),
+              _: 1
+            })) : (r(), G(se, { key: 1 }, [
+              t(e(X), {
+                variant: "outline",
+                onClick: Y
+              }, {
+                default: a(() => [
+                  v(d(e(u)("keys.cancel")), 1)
+                ]),
+                _: 1
+              }),
+              t(e(X), {
+                type: "primary",
+                loading: V.value,
+                onClick: F
+              }, {
+                default: a(() => [
+                  v(d(e(u)("keys.issue-short")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading"])
+            ], 64))
+          ]),
+          _: 1
+        })
+      ]),
+      default: a(() => [
+        C.value ? (r(), G("div", Na, [
+          t(e(Ae), {
+            type: "warning",
+            closable: !1
+          }, {
+            default: a(() => [
+              v(d(e(u)("keys.issued-text")), 1)
+            ]),
+            _: 1
+          }),
+          t(e(j), {
+            label: e(u)("keys.secret")
+          }, {
+            default: a(() => [
+              M("div", Da, [
+                t(e(te), {
+                  "model-value": C.value.token,
+                  readonly: "",
+                  name: "token"
+                }, null, 8, ["model-value"]),
+                t(e(X), {
+                  type: "primary",
+                  onClick: U
+                }, {
+                  icon: a(() => [
+                    t(e(ye), {
+                      name: E.value ? "check" : "copy"
+                    }, null, 8, ["name"])
+                  ]),
+                  default: a(() => [
+                    v(" " + d(E.value ? e(u)("keys.copied") : e(u)("keys.copy")), 1)
+                  ]),
+                  _: 1
+                })
+              ])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          g.value ? (r(), h(e(j), {
+            key: 0,
+            label: e(u)("keys.address")
+          }, {
+            default: a(() => [
+              t(e(te), {
+                "model-value": g.value,
+                readonly: "",
+                name: "address"
+              }, null, 8, ["model-value"])
+            ]),
+            _: 1
+          }, 8, ["label"])) : O("", !0),
+          t(e(q), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(u)("keys.header-hint")), 1)
+            ]),
+            _: 1
+          })
+        ])) : (r(), G("div", Ia, [
+          t(e(q), {
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(u)(o.mine ? "keys.lead-mine" : "keys.lead")), 1)
+            ]),
+            _: 1
+          }),
+          t(e(j), {
+            label: e(u)("keys.name"),
+            error: S("name"),
+            help: e(u)("keys.name-hint")
+          }, {
+            default: a(() => [
+              t(e(te), {
+                modelValue: k.value.name,
+                "onUpdate:modelValue": p[0] || (p[0] = (i) => k.value.name = i),
+                name: "name",
+                autocomplete: "off"
+              }, null, 8, ["modelValue"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"]),
+          o.mine ? O("", !0) : (r(), h(e(j), {
+            key: 0,
+            label: e(u)("keys.who"),
+            error: S("admin"),
+            help: e(u)("keys.who-hint")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: k.value.admin,
+                "onUpdate:modelValue": p[1] || (p[1] = (i) => k.value.admin = i),
+                options: W.value,
+                filterable: "",
+                name: "admin"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"])),
+          t(e(j), {
+            label: e(u)("keys.allowed")
+          }, {
+            default: a(() => [
+              t(e(ua), {
+                modelValue: k.value.access,
+                "onUpdate:modelValue": p[2] || (p[2] = (i) => k.value.access = i),
+                options: L.value,
+                name: "access"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label"]),
+          k.value.access === "chosen" ? (r(), h(e(j), {
+            key: 1,
+            label: e(u)("keys.scopes"),
+            error: S("scopes"),
+            help: e(u)("keys.scopes-hint")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: k.value.scopes,
+                "onUpdate:modelValue": p[3] || (p[3] = (i) => k.value.scopes = i),
+                options: b.value,
+                multiple: "",
+                filterable: "",
+                name: "scopes"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"])) : O("", !0),
+          t(e(j), {
+            label: e(u)("keys.lifetime"),
+            error: S("days"),
+            help: e(u)("keys.lifetime-hint")
+          }, {
+            default: a(() => [
+              t(e(ie), {
+                modelValue: k.value.days,
+                "onUpdate:modelValue": p[4] || (p[4] = (i) => k.value.days = i),
+                options: _.value,
+                name: "days"
+              }, null, 8, ["modelValue", "options"])
+            ]),
+            _: 1
+          }, 8, ["label", "error", "help"])
+        ]))
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), Ma = {
+  class: "wx-key-list__glyph",
+  "aria-hidden": "true"
+}, Be = 560, Ka = /* @__PURE__ */ ne({
+  __name: "KeyList",
+  props: {
+    mine: { type: Boolean, default: !1 }
+  },
+  setup(l, { expose: o }) {
+    const s = l, n = oe(), x = la(n);
+    re();
+    const f = ae("webx-auth"), z = ve(), m = de("root"), u = ke(m), N = R(() => u.value > 0 && u.value < Be), c = A([]), k = A(!1), $ = A(null), W = R(() => N.value ? [{ key: "card", label: "" }] : [
+      { key: "name", label: f("keys.name"), minWidth: 200 },
+      ...s.mine ? [] : [{ key: "user", label: f("keys.who"), minWidth: 140 }],
+      { key: "scopes", label: f("keys.allowed"), minWidth: 180 },
+      { key: "expires_at", label: f("keys.expires"), minWidth: 120 },
+      { key: "last_used_at", label: f("keys.last-used"), minWidth: 120, hideBelow: 860 },
+      { key: "end", label: "", align: "right", width: 120 }
+    ]);
+    function V(L) {
+      return L.user.name ?? f("keys.deleted", { id: L.user.id });
+    }
+    function w(L) {
+      return L.created_by?.name ? f("keys.issued-by", { name: L.created_by.name }) : f("keys.issued-console");
+    }
+    function C(L) {
+      return L.everything ? f("keys.full", { name: L.user.name?.split(" ")[0] || V(L) }) : L.scopes.join(", ");
+    }
+    async function E() {
+      k.value = !0;
+      try {
+        c.value = (await x.list({ mine: s.mine })).data;
+      } catch (L) {
+        Q.danger(z(L));
+      } finally {
+        k.value = !1;
+      }
+    }
+    async function b(L) {
+      if (await Ve({
+        title: f("keys.confirm-title", { name: L.name }),
+        message: f("keys.confirm-text"),
+        confirmText: f("keys.confirm"),
+        cancelText: f("keys.cancel"),
+        tone: "danger"
+      })) {
+        $.value = L.id;
+        try {
+          const g = await x.revoke(L.id);
+          c.value = c.value.map((S) => S.id === g.id ? g : S), Q.success(f("keys.revoked-done", { name: L.name }));
+        } catch (g) {
+          Q.danger(z(g));
+        } finally {
+          $.value = null;
+        }
+      }
+    }
+    return oa(E), o({ reload: E }), (L, _) => (r(), G("div", {
+      ref_key: "root",
+      ref: m,
+      class: "wx-key-list"
+    }, [
+      t(e(we), {
+        data: c.value,
+        columns: W.value,
+        "row-key": "id",
+        flush: "",
+        loading: k.value,
+        clickable: !1,
+        "empty-text": e(f)(s.mine ? "keys.empty-mine" : "keys.empty"),
+        "cards-below": Be,
+        "row-class": (g) => g.state === "live" ? "" : "is-ended"
+      }, {
+        "cell-name": a(({ row: g }) => [
+          t(e(ce), {
+            direction: "vertical",
+            size: "none"
+          }, {
+            default: a(() => [
+              t(e(q), {
+                tone: g.state === "live" ? "default" : "muted",
+                weight: "medium"
+              }, {
+                default: a(() => [
+                  v(d(g.name), 1)
+                ]),
+                _: 2
+              }, 1032, ["tone"]),
+              t(e(q), {
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(w(g)) + " · ", 1),
+                  t(e(ue), {
+                    value: g.created_at,
+                    tone: "muted",
+                    compact: ""
+                  }, null, 8, ["value"])
+                ]),
+                _: 2
+              }, 1024)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-user": a(({ row: g }) => [
+          t(e(q), {
+            tone: g.user.name === null ? "muted" : "default"
+          }, {
+            default: a(() => [
+              v(d(V(g)), 1)
+            ]),
+            _: 2
+          }, 1032, ["tone"])
+        ]),
+        "cell-scopes": a(({ row: g }) => [
+          g.state === "revoked" ? (r(), h(e(ee), {
+            key: 0,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(e(f)("keys.revoked")), 1)
+            ]),
+            _: 1
+          })) : g.state === "expired" ? (r(), h(e(ee), {
+            key: 1,
+            type: "default",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(e(f)("keys.expired")), 1)
+            ]),
+            _: 1
+          })) : (r(), h(e(ee), {
+            key: 2,
+            type: g.everything ? "success" : "info",
+            dot: ""
+          }, {
+            default: a(() => [
+              v(d(C(g)), 1)
+            ]),
+            _: 2
+          }, 1032, ["type"]))
+        ]),
+        "cell-expires_at": a(({ row: g }) => [
+          g.expires_at ? (r(), h(e(ue), {
+            key: 0,
+            value: g.expires_at,
+            compact: ""
+          }, null, 8, ["value"])) : O("", !0)
+        ]),
+        "cell-last_used_at": a(({ row: g }) => [
+          g.last_used_at ? (r(), h(e(ue), {
+            key: 0,
+            value: g.last_used_at,
+            compact: ""
+          }, null, 8, ["value"])) : (r(), h(e(q), {
+            key: 1,
+            size: "sm",
+            tone: "muted"
+          }, {
+            default: a(() => [
+              v(d(e(f)("keys.never-used")), 1)
+            ]),
+            _: 1
+          }))
+        ]),
+        "cell-end": a(({ row: g }) => [
+          g.state === "live" ? (r(), h(e(X), {
+            key: 0,
+            type: "danger",
+            variant: "text",
+            size: "sm",
+            loading: $.value === g.id,
+            onClick: (S) => b(g)
+          }, {
+            default: a(() => [
+              v(d(e(f)("keys.revoke")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading", "onClick"])) : O("", !0)
+        ]),
+        "cell-card": a(({ row: g }) => [
+          t(e(xe), {
+            variant: "plain",
+            title: g.name,
+            subtitle: s.mine ? w(g) : V(g)
+          }, {
+            media: a(() => [
+              M("span", Ma, [
+                t(e(ye), { name: "lock" })
+              ])
+            ]),
+            meta: a(() => [
+              g.state === "revoked" ? (r(), h(e(ee), {
+                key: 0,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("keys.revoked")), 1)
+                ]),
+                _: 1
+              })) : g.state === "expired" ? (r(), h(e(ee), {
+                key: 1,
+                type: "default",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("keys.expired")), 1)
+                ]),
+                _: 1
+              })) : (r(), h(e(ee), {
+                key: 2,
+                type: g.everything ? "success" : "info",
+                dot: "",
+                size: "sm"
+              }, {
+                default: a(() => [
+                  v(d(C(g)), 1)
+                ]),
+                _: 2
+              }, 1032, ["type"])),
+              g.expires_at ? (r(), h(e(q), {
+                key: 3,
+                size: "xs",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("keys.until")) + " ", 1),
+                  t(e(ue), {
+                    value: g.expires_at,
+                    compact: ""
+                  }, null, 8, ["value"])
+                ]),
+                _: 2
+              }, 1024)) : O("", !0)
+            ]),
+            actions: a(() => [
+              g.state === "live" ? (r(), h(e(X), {
+                key: 0,
+                type: "danger",
+                variant: "text",
+                size: "sm",
+                loading: $.value === g.id,
+                onClick: (S) => b(g)
+              }, {
+                default: a(() => [
+                  v(d(e(f)("keys.revoke")), 1)
+                ]),
+                _: 1
+              }, 8, ["loading", "onClick"])) : O("", !0)
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "empty-text", "row-class"])
+    ], 512));
+  }
+}), Ya = { class: "wx-role-form" }, ja = { class: "wx-role-form__names" }, Ha = {
+  key: 3,
+  class: "wx-role-form__matrix"
+}, Ga = { class: "wx-role-form__module" }, Ja = { class: "wx-role-form__cells" }, Qa = { class: "wx-role-form__label" }, Xa = { class: "wx-role-form__code" }, Za = {
+  key: 0,
+  class: "wx-role-form__row"
+}, et = { class: "wx-role-form__module" }, at = { class: "wx-role-form__cells" }, tt = { class: "wx-role-form__code" }, lt = /* @__PURE__ */ ne({
+  __name: "RoleDialog",
+  props: {
+    role: { default: null },
+    readOnly: { type: Boolean, default: !1 }
+  },
+  setup(l) {
+    const o = l, { resolve: s, dismiss: n, open: x } = ge(), f = oe(), z = pe(f);
+    re();
+    const m = ae("webx-auth"), u = ve(), N = A(null), c = A(!1), k = A({}), $ = A(o.role?.name ?? ""), W = A(o.role?.slug ?? ""), V = A(new Set(o.role?.permissions ?? [])), w = R(() => o.role !== null), C = R(() => o.readOnly || o.role?.held === !0), E = R(() => w.value ? C.value ? m("roles.view") : m("roles.edit") : m("roles.new")), b = R(() => {
+      if (N.value === null) return [];
+      const p = new Set(N.value.flatMap((i) => i.permissions.map((T) => T.name)));
+      return [...V.value].filter((i) => !p.has(i)).sort();
+    });
+    z.permissions().then((p) => N.value = p);
+    function L(p, i) {
+      return C.value || !i && !V.value.has(p);
+    }
+    function _(p, i) {
+      const T = new Set(V.value);
+      i ? T.add(p) : T.delete(p), V.value = T;
+    }
+    function g(p) {
+      return p.permissions.filter((i) => !L(i.name, i.held)).map((i) => i.name);
+    }
+    function S(p) {
+      const i = p.permissions.filter((T) => V.value.has(T.name)).length;
+      return {
+        checked: i > 0 && i === p.permissions.length,
+        indeterminate: i > 0 && i < p.permissions.length
+      };
+    }
+    function F(p, i) {
+      const T = new Set(V.value);
+      for (const H of g(p))
+        i ? T.add(H) : T.delete(H);
+      V.value = T;
+    }
+    function U(p) {
+      return k.value[p]?.[0];
+    }
+    const Y = R(() => {
+      const p = Object.keys(k.value).find((i) => i.startsWith("permissions"));
+      return p ? k.value[p]?.[0] : void 0;
+    });
+    async function y() {
+      c.value = !0, k.value = {};
+      const p = {
+        name: $.value,
+        slug: W.value.trim() === "" ? null : W.value.trim(),
+        permissions: [...V.value]
+      };
+      try {
+        const i = o.role ? await z.updateRole(o.role.id, p) : await z.createRole(p);
+        Q.success(m(w.value ? "roles.updated" : "roles.created")), s(i);
+      } catch (i) {
+        const T = i.body;
+        T?.errors ? k.value = T.errors : Q.danger(u(i));
+      } finally {
+        c.value = !1;
+      }
+    }
+    return (p, i) => (r(), h(e(_e), {
+      open: e(x),
+      "onUpdate:open": i[3] || (i[3] = (T) => Se(x) ? x.value = T : null),
+      title: E.value,
+      width: 800
+    }, {
+      footer: a(() => [
+        t(e(ce), { size: "sm" }, {
+          default: a(() => [
+            t(e(X), {
+              variant: "outline",
+              onClick: i[2] || (i[2] = (T) => e(n)())
+            }, {
+              default: a(() => [
+                v(d(C.value ? e(m)("roles.close") : e(m)("roles.cancel")), 1)
+              ]),
+              _: 1
+            }),
+            C.value ? O("", !0) : (r(), h(e(X), {
+              key: 0,
+              type: "primary",
+              loading: c.value,
+              onClick: y
+            }, {
+              default: a(() => [
+                v(d(e(m)("roles.save")), 1)
+              ]),
+              _: 1
+            }, 8, ["loading"]))
+          ]),
+          _: 1
+        })
+      ]),
+      default: a(() => [
+        M("div", Ya, [
+          l.role?.held ? (r(), h(e(Ae), {
+            key: 0,
+            type: "info",
+            description: e(m)("roles.held")
+          }, null, 8, ["description"])) : O("", !0),
+          M("div", ja, [
+            t(e(j), {
+              label: e(m)("roles.name"),
+              error: U("name")
+            }, {
+              default: a(() => [
+                t(e(te), {
+                  modelValue: $.value,
+                  "onUpdate:modelValue": i[0] || (i[0] = (T) => $.value = T),
+                  name: "name",
+                  disabled: C.value
+                }, null, 8, ["modelValue", "disabled"])
+              ]),
+              _: 1
+            }, 8, ["label", "error"]),
+            t(e(j), {
+              label: e(m)("roles.slug"),
+              error: U("slug"),
+              help: C.value ? void 0 : e(m)("roles.slug-hint")
+            }, {
+              default: a(() => [
+                t(e(te), {
+                  modelValue: W.value,
+                  "onUpdate:modelValue": i[1] || (i[1] = (T) => W.value = T),
+                  name: "slug",
+                  autocomplete: "off",
+                  disabled: C.value
+                }, null, 8, ["modelValue", "disabled"])
+              ]),
+              _: 1
+            }, 8, ["label", "error", "help"])
+          ]),
+          t(e(q), { weight: "semibold" }, {
+            default: a(() => [
+              v(d(e(m)("roles.permissions")), 1)
+            ]),
+            _: 1
+          }),
+          Y.value ? (r(), h(e(q), {
+            key: 1,
+            size: "sm",
+            tone: "danger"
+          }, {
+            default: a(() => [
+              v(d(Y.value), 1)
+            ]),
+            _: 1
+          })) : O("", !0),
+          N.value === null ? (r(), h(e(da), { key: 2 })) : (r(), G("div", Ha, [
+            (r(!0), G(se, null, fe(N.value, (T) => (r(), G("section", {
+              key: T.module,
+              class: "wx-role-form__row"
+            }, [
+              M("div", Ga, [
+                t(e(he), {
+                  "model-value": S(T).checked,
+                  indeterminate: S(T).indeterminate,
+                  disabled: g(T).length === 0,
+                  "aria-label": `${e(m)("roles.all")}: ${T.title}`,
+                  "onUpdate:modelValue": (H) => F(T, H)
+                }, {
+                  default: a(() => [
+                    t(e(q), { weight: "semibold" }, {
+                      default: a(() => [
+                        v(d(T.title), 1)
+                      ]),
+                      _: 2
+                    }, 1024)
+                  ]),
+                  _: 2
+                }, 1032, ["model-value", "indeterminate", "disabled", "aria-label", "onUpdate:modelValue"])
+              ]),
+              M("div", Ja, [
+                (r(!0), G(se, null, fe(T.permissions, (H) => (r(), h(e(he), {
+                  key: H.name,
+                  class: "wx-role-form__cell",
+                  "model-value": V.value.has(H.name),
+                  disabled: L(H.name, H.held),
+                  title: H.held ? H.name : `${H.name} — ${e(m)("roles.not-yours")}`,
+                  "onUpdate:modelValue": (I) => _(H.name, I)
+                }, {
+                  default: a(() => [
+                    M("span", Qa, [
+                      M("span", null, d(H.label), 1),
+                      M("span", Xa, d(H.name), 1)
+                    ])
+                  ]),
+                  _: 2
+                }, 1032, ["model-value", "disabled", "title", "onUpdate:modelValue"]))), 128))
+              ])
+            ]))), 128)),
+            b.value.length > 0 ? (r(), G("section", Za, [
+              M("div", et, [
+                t(e(q), { weight: "semibold" }, {
+                  default: a(() => [
+                    v(d(e(m)("roles.unknown")), 1)
+                  ]),
+                  _: 1
+                })
+              ]),
+              M("div", at, [
+                (r(!0), G(se, null, fe(b.value, (T) => (r(), h(e(he), {
+                  key: T,
+                  class: "wx-role-form__cell",
+                  "model-value": V.value.has(T),
+                  disabled: C.value,
+                  "onUpdate:modelValue": (H) => _(T, H)
+                }, {
+                  default: a(() => [
+                    M("span", tt, d(T), 1)
+                  ]),
+                  _: 2
+                }, 1032, ["model-value", "disabled", "onUpdate:modelValue"]))), 128))
+              ])
+            ])) : O("", !0)
+          ]))
+        ])
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), st = { class: "wx-role-list__name" }, Oe = 480, nt = /* @__PURE__ */ ne({
+  __name: "RoleList",
+  props: {
+    removable: { type: Boolean, default: !1 }
+  },
+  emits: ["open", "remove"],
+  setup(l, { expose: o, emit: s }) {
+    const n = l, x = s, f = oe(), z = pe(f);
+    re();
+    const m = ae("webx-auth"), u = de("root"), N = ke(u), c = R(() => N.value > 0 && N.value < Oe), k = A([]), $ = A(!1), W = R(() => c.value ? [{ key: "card", label: "" }] : [
+      { key: "name", label: m("roles.name") },
+      { key: "slug", label: m("roles.slug"), hideBelow: 620 },
+      { key: "permissions", label: m("roles.permissions"), align: "right", hideBelow: 520 },
+      { key: "users", label: m("roles.users"), align: "right" },
+      {
+        key: "actions",
+        label: "",
+        width: je,
+        align: "right",
+        hidden: !n.removable,
+        hideOnCards: !0
+      }
+    ]);
+    async function V() {
+      $.value = !0;
+      try {
+        k.value = await z.roles();
+      } finally {
+        $.value = !1;
+      }
+    }
+    function w(C) {
+      return C.held ? [] : [
+        {
+          key: "delete",
+          icon: "trash",
+          label: m("roles.delete"),
+          danger: !0,
+          run: () => x("remove", C)
+        }
+      ];
+    }
+    return V(), o({ reload: V }), (C, E) => (r(), G("div", {
+      ref_key: "root",
+      ref: u,
+      class: "wx-role-list"
+    }, [
+      t(e(we), {
+        data: k.value,
+        columns: W.value,
+        "row-key": "id",
+        clickable: "",
+        hover: "",
+        flush: "",
+        loading: $.value,
+        "empty-text": e(m)("roles.empty"),
+        "cards-below": Oe,
+        onRowClick: E[0] || (E[0] = (b) => x("open", b))
+      }, {
+        "cell-name": a(({ row: b }) => [
+          M("span", st, [
+            M("span", null, d(b.name), 1),
+            b.held ? (r(), h(e(ee), {
+              key: 0,
+              type: "info",
+              size: "sm"
+            }, {
+              default: a(() => [
+                v(d(e(m)("roles.yours")), 1)
+              ]),
+              _: 1
+            })) : O("", !0)
+          ])
+        ]),
+        "cell-slug": a(({ row: b }) => [
+          t(e(q), {
+            size: "sm",
+            tone: "muted",
+            class: "wx-role-list__slug"
+          }, {
+            default: a(() => [
+              v(d(b.slug), 1)
+            ]),
+            _: 2
+          }, 1024)
+        ]),
+        "cell-permissions": a(({ row: b }) => [
+          v(d(b.permissions.length), 1)
+        ]),
+        "cell-users": a(({ row: b }) => [
+          v(d(b.users), 1)
+        ]),
+        "cell-actions": a(({ row: b }) => [
+          b.held ? O("", !0) : (r(), h(e(ze), {
+            key: 0,
+            actions: w(b),
+            label: b.name
+          }, null, 8, ["actions", "label"]))
+        ]),
+        "card-actions": a(({ row: b }) => [
+          l.removable && !b.held ? (r(), h(e(ze), {
+            key: 0,
+            actions: w(b),
+            label: b.name
+          }, null, 8, ["actions", "label"])) : O("", !0)
+        ]),
+        "cell-card": a(({ row: b }) => [
+          t(e(xe), {
+            variant: "plain",
+            title: b.name,
+            subtitle: b.slug
+          }, {
+            meta: a(() => [
+              t(e(ee), { size: "sm" }, {
+                default: a(() => [
+                  v(d(e(m)("roles.permission-count", { count: b.permissions.length })), 1)
+                ]),
+                _: 2
+              }, 1024),
+              t(e(ee), { size: "sm" }, {
+                default: a(() => [
+                  v(d(e(m)("roles.users-count", { count: b.users })), 1)
+                ]),
+                _: 2
+              }, 1024)
+            ]),
+            _: 2
+          }, 1032, ["title", "subtitle"])
+        ]),
+        _: 1
+      }, 8, ["data", "columns", "loading", "empty-text"])
+    ], 512));
+  }
+}), ot = /* @__PURE__ */ ne({
+  __name: "AdminsPage",
+  props: {
+    base: { default: "/admins" },
+    current: { default: "admins" },
+    avatarField: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  setup(l) {
+    const o = l, s = oe(), n = pe(s), x = o.avatarField ?? Ze(s) ?? void 0, f = o.resolveAvatar ?? ea(s) ?? void 0, z = ya(), m = ha();
+    re();
+    const u = ae("webx-auth"), N = ae("webx-admin"), c = ve(), k = de("list"), $ = de("keys"), W = de("roles"), V = A(null), w = be(za), C = be(qa), E = be(lt), b = s.can("admins.manage"), L = s.can("admins.audit"), _ = b || s.can("admins.view"), g = s.can("roles.manage"), S = _ || g || s.can("roles.assign"), F = R(() => {
+      const K = [];
+      return _ && K.push("admins"), S && K.push("roles"), L && K.push("calls"), b && K.push("connections", "keys"), K;
+    }), U = R(
+      () => F.value.includes(o.current) ? o.current : F.value[0] ?? null
+    ), Y = R(
+      () => s.state.manifest?.modules.find((K) => K.id === "admins")?.title ?? u("admins.title")
+    ), y = R(() => {
+      const K = {
+        admins: Y.value,
+        roles: u("roles.title"),
+        calls: u("calls.title"),
+        connections: u("connections.title"),
+        keys: u("keys.title")
+      }, D = F.value.map((P) => ({ value: P, label: K[P] }));
+      return D.length > 1 ? D : void 0;
+    }), p = R({
+      get: () => U.value ?? o.current,
+      set: (K) => {
+        const D = K === "admins" ? o.base : `${o.base}/${String(K)}`;
+        D !== m.path && z.push(D);
+      }
+    }), i = R(() => U.value === "roles" ? g ? [
+      {
+        key: "new-role",
+        label: u("roles.new-short"),
+        icon: "plus",
+        primary: !0,
+        run: () => {
+          I(null);
+        }
+      }
+    ] : [] : b ? U.value === "admins" ? [
+      {
+        key: "new",
+        label: u("admins.new-short"),
+        icon: "plus",
+        primary: !0,
+        run: () => {
+          H(null);
+        }
+      }
+    ] : U.value === "keys" ? [
+      {
+        key: "issue",
+        label: u("keys.issue-short"),
+        icon: "plus",
+        primary: !0,
+        run: () => {
+          T();
+        }
+      }
+    ] : [] : []);
+    async function T() {
+      await C() && $.value?.reload();
+    }
+    async function H(K) {
+      V.value = K, await w({ admin: K, avatarField: x }) && k.value?.reload();
+    }
+    async function I(K) {
+      await E({ role: K, readOnly: !g }) && W.value?.reload();
+    }
+    async function Z(K) {
+      let D = [];
+      try {
+        D = (await n.role(K.id)).holders.map((J) => J.name);
+      } catch (J) {
+        Q.danger(c(J));
+        return;
+      }
+      if (await Ve({
+        title: u("roles.delete-title", { name: K.name }),
+        message: D.length > 0 ? u("roles.delete-holders", { names: D.join(", ") }) : u("roles.delete-text"),
+        confirmText: u("roles.delete"),
+        cancelText: u("roles.cancel"),
+        tone: "danger"
+      }))
+        try {
+          await n.removeRole(K.id), Q.success(u("roles.deleted")), W.value?.reload();
+        } catch (J) {
+          Q.danger(c(J));
+        }
+    }
+    async function B(K) {
+      if (await Ve({
+        title: u("admins.delete-title", { name: K.name }),
+        message: u("admins.delete-text"),
+        confirmText: u("admins.delete"),
+        cancelText: u("admins.cancel"),
+        tone: "danger"
+      }))
+        try {
+          await n.remove(K.id), Q.success(u("admins.deleted")), k.value?.reload();
+        } catch (P) {
+          Q.danger(c(P));
+        }
+    }
+    return (K, D) => (r(), h(e(fa), {
+      view: p.value,
+      "onUpdate:view": D[0] || (D[0] = (P) => p.value = P),
+      title: Y.value,
+      views: y.value,
+      actions: i.value
+    }, {
+      default: a(() => [
+        U.value === null ? (r(), h(e(ca), {
+          key: 0,
+          status: "403",
+          title: e(N)("shell.forbidden-title"),
+          subtitle: e(N)("shell.forbidden-description")
+        }, null, 8, ["title", "subtitle"])) : U.value === "roles" ? (r(), h(nt, {
+          key: 1,
+          ref: "roles",
+          removable: e(g),
+          onOpen: I,
+          onRemove: Z
+        }, null, 8, ["removable"])) : U.value === "calls" ? (r(), h(Wa, { key: 2 })) : U.value === "connections" ? (r(), h(Ba, {
+          key: 3,
+          scope: "all"
+        })) : U.value === "keys" ? (r(), h(Ka, {
+          key: 4,
+          ref: "keys"
+        }, null, 512)) : (r(), h(ta, {
+          key: 5,
+          ref_key: "list",
+          ref: k,
+          removable: e(b),
+          "resolve-avatar": e(f),
+          onOpen: H,
+          onRemove: B
+        }, null, 8, ["removable", "resolve-avatar"]))
+      ]),
+      _: 1
+    }, 8, ["view", "title", "views", "actions"]));
+  }
+});
+function St(l = {}) {
+  const o = l.path ?? "/admins", s = (n) => ({
+    render: () => Ke(ot, {
+      base: o,
+      current: n,
+      avatarField: l.avatarField,
+      resolveAvatar: l.resolveAvatar
+    })
+  });
+  return {
+    id: "admins",
+    path: o,
+    routes: [
+      { path: o, name: "webx.admins", component: s("admins") },
+      // The roles: what the people above are allowed, as named sets of permissions.
+      { path: `${o}/roles`, name: "webx.admins.roles", component: s("roles") },
+      // What their agents did, which agents they let in, and their keys: more views of the same
+      // section, each with an address of its own so that its filters survive a trip to the
+      // people and back.
+      { path: `${o}/calls`, name: "webx.admins.calls", component: s("calls") },
+      {
+        path: `${o}/connections`,
+        name: "webx.admins.connections",
+        component: s("connections")
+      },
+      // Keys for programs: a connection without a browser, issued by somebody who manages
+      // the people it acts as.
+      { path: `${o}/keys`, name: "webx.admins.keys", component: s("keys") }
+    ]
+  };
+}
+function Tt(l = {}) {
+  const o = l.path ?? "/connect";
+  return {
+    id: "connect",
+    path: o,
+    routes: [{ path: o, name: "webx.connect", component: () => import("./ConnectPage-CMJlMsmn.js") }]
+  };
+}
+const it = /* @__PURE__ */ ne({
+  __name: "AdminPicker",
+  props: {
+    multiple: { type: Boolean, default: !1 },
+    title: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 }
+  },
+  setup(l) {
+    const o = l, { open: s, resolve: n, dismiss: x } = ge();
+    re();
+    const f = ae("webx-auth"), z = de("list"), m = A(0);
+    function u(c) {
+      n(c);
+    }
+    function N(c) {
+      m.value = c.length;
+    }
+    return (c, k) => (r(), h(e(_e), {
+      open: e(s),
+      "onUpdate:open": k[2] || (k[2] = ($) => Se(s) ? s.value = $ : null),
+      title: l.title ?? e(f)(l.multiple ? "admins.select-many" : "admins.select-one"),
+      width: 880
+    }, Me({
+      default: a(() => [
+        t(ta, {
+          ref_key: "list",
+          ref: z,
+          picking: "",
+          multiple: l.multiple,
+          "resolve-avatar": o.resolveAvatar,
+          onChosen: u,
+          onSelection: N
+        }, null, 8, ["multiple", "resolve-avatar"])
+      ]),
+      _: 2
+    }, [
+      l.multiple ? {
+        name: "footer",
+        fn: a(() => [
+          t(e(ce), {
+            size: "sm",
+            align: "center"
+          }, {
+            default: a(() => [
+              t(e(q), {
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(f)("admins.chosen", { count: m.value })), 1)
+                ]),
+                _: 1
+              }),
+              t(e(X), {
+                variant: "outline",
+                onClick: k[0] || (k[0] = ($) => e(x)())
+              }, {
+                default: a(() => [
+                  v(d(e(f)("admins.cancel")), 1)
+                ]),
+                _: 1
+              }),
+              t(e(X), {
+                type: "primary",
+                disabled: m.value === 0,
+                onClick: k[1] || (k[1] = ($) => e(n)(z.value?.chosen() ?? []))
+              }, {
+                default: a(() => [
+                  v(d(e(f)("admins.save")), 1)
+                ]),
+                _: 1
+              }, 8, ["disabled"])
+            ]),
+            _: 1
+          })
+        ]),
+        key: "0"
+      } : void 0
+    ]), 1032, ["open", "title"]));
+  }
+}), sa = be(it);
+async function Ut(l = {}) {
+  return (await sa({ ...l, multiple: !1 }))?.[0];
+}
+function Lt(l = {}) {
+  return sa({ ...l, multiple: !0 });
+}
+const rt = { class: "wx-profile-host" }, ut = { class: "wx-profile" }, dt = {
+  key: 0,
+  class: "wx-profile__aside"
+}, ct = { class: "wx-profile__fields" }, mt = {
+  key: 0,
+  class: "wx-profile__agents"
+}, vt = { class: "wx-profile__agents-text" }, pt = { class: "wx-profile__section" }, ft = { class: "wx-profile__section" }, yt = { class: "wx-profile__section" }, ht = /* @__PURE__ */ ne({
+  __name: "ProfileDialog",
+  props: {
+    avatarField: { default: void 0 }
+  },
+  setup(l) {
+    const o = l, { resolve: s, dismiss: n, open: x } = ge(), f = oe(), z = Ue(), m = Te(), u = Ge(), N = $e(ba, null);
+    re();
+    const c = ae("webx-auth"), k = m.scope("webx-admin"), $ = ve(), W = A("main"), V = A(!1), w = A(!1), C = A({}), E = R(() => f.state.user), b = A({
+      name: E.value?.name ?? "",
+      avatar: E.value?.avatar ?? null,
+      password: "",
+      current_password: ""
+    }), L = A({ email: "", current_password: "" }), _ = A(null), g = A(b.value.avatar ? { path: b.value.avatar } : null), S = R(() => E.value?.emailChange === !0), F = R(
+      () => m.state.panelLocales.map((D) => ({ value: D.code, label: D.nativeName }))
+    ), U = R(
+      () => typeof E.value?.siteBar == "boolean" ? E.value.siteBar : null
+    ), Y = R(
+      () => N?.hasRoute("webx.connect") === !0 && (f.state.manifest?.modules.some((D) => D.id === "connect") ?? !1)
+    ), y = R({
+      get: () => u.state.preference,
+      set: (D) => {
+        u.set(D), z.setTheme(D);
+      }
+    });
+    async function p(D) {
+      if (!(typeof D != "string" || D === m.state.locale))
+        try {
+          await z.setLocale(D);
+        } catch (P) {
+          Q.danger($(P));
+        }
+    }
+    function i(D) {
+      z.setSiteBar(D === !0).catch((P) => Q.danger($(P)));
+    }
+    function T(D) {
+      return C.value[D]?.[0];
+    }
+    function H(D) {
+      const P = D.body;
+      P?.errors ? C.value = P.errors : Q.danger($(D));
+    }
+    async function I() {
+      V.value = !0, C.value = {};
+      try {
+        await z.updateProfile({
+          name: b.value.name,
+          avatar: g.value?.path ?? null,
+          // Blank is left out entirely rather than sent as an empty string: the server reads a
+          // filled password as "change it", and an empty one would be a change to nothing.
+          ...b.value.password ? { password: b.value.password, current_password: b.value.current_password } : {}
+        }), Q.success(c("profile.saved")), s(!0);
+      } catch (D) {
+        H(D), C.value.password || C.value.current_password ? W.value = "password" : C.value.name && (W.value = "main");
+      } finally {
+        V.value = !1;
+      }
+    }
+    async function Z() {
+      w.value = !0, C.value = {};
+      try {
+        _.value = await z.requestEmailChange(L.value.email, L.value.current_password), L.value = { email: "", current_password: "" };
+      } catch (D) {
+        H(D);
+      } finally {
+        w.value = !1;
+      }
+    }
+    const B = R(() => W.value === "email" ? S.value ? "send" : "close" : W.value === "interface" ? "close" : "save");
+    function K() {
+      n(), N?.push({ name: "webx.connect" });
+    }
+    return (D, P) => (r(), h(e(_e), {
+      open: e(x),
+      "onUpdate:open": P[11] || (P[11] = (J) => Se(x) ? x.value = J : null),
+      title: e(c)("profile.title"),
+      width: 600
+    }, {
+      footer: a(() => [
+        B.value === "close" ? (r(), h(e(X), {
+          key: 0,
+          onClick: P[8] || (P[8] = (J) => e(n)())
+        }, {
+          default: a(() => [
+            v(d(e(c)("profile.cancel")), 1)
+          ]),
+          _: 1
+        })) : B.value === "send" ? (r(), G(se, { key: 1 }, [
+          t(e(X), {
+            onClick: P[9] || (P[9] = (J) => e(n)())
+          }, {
+            default: a(() => [
+              v(d(e(c)("profile.cancel")), 1)
+            ]),
+            _: 1
+          }),
+          t(e(X), {
+            type: "primary",
+            loading: w.value,
+            onClick: Z
+          }, {
+            default: a(() => [
+              v(d(e(c)("profile.email-send")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading"])
+        ], 64)) : (r(), G(se, { key: 2 }, [
+          t(e(X), {
+            onClick: P[10] || (P[10] = (J) => e(n)())
+          }, {
+            default: a(() => [
+              v(d(e(c)("profile.cancel")), 1)
+            ]),
+            _: 1
+          }),
+          t(e(X), {
+            type: "primary",
+            loading: V.value,
+            onClick: I
+          }, {
+            default: a(() => [
+              v(d(e(c)("profile.save")), 1)
+            ]),
+            _: 1
+          }, 8, ["loading"])
+        ], 64))
+      ]),
+      default: a(() => [
+        t(e(ma), {
+          modelValue: W.value,
+          "onUpdate:modelValue": P[7] || (P[7] = (J) => W.value = J),
+          variant: "line",
+          "keep-alive": "",
+          "aria-label": e(c)("profile.title")
+        }, {
+          default: a(() => [
+            t(e(Ce), {
+              value: "main",
+              label: e(c)("profile.tab-main")
+            }, {
+              default: a(() => [
+                M("div", rt, [
+                  M("div", ut, [
+                    o.avatarField ? (r(), G("div", dt, [
+                      (r(), h(qe(o.avatarField), {
+                        modelValue: g.value,
+                        "onUpdate:modelValue": P[0] || (P[0] = (J) => g.value = J),
+                        label: e(c)("profile.avatar"),
+                        aspect: "1/1",
+                        captions: !1
+                      }, null, 8, ["modelValue", "label"]))
+                    ])) : O("", !0),
+                    M("div", ct, [
+                      t(e(j), {
+                        label: e(c)("profile.name"),
+                        error: T("name")
+                      }, {
+                        default: a(() => [
+                          t(e(te), {
+                            modelValue: b.value.name,
+                            "onUpdate:modelValue": P[1] || (P[1] = (J) => b.value.name = J),
+                            name: "name"
+                          }, null, 8, ["modelValue"])
+                        ]),
+                        _: 1
+                      }, 8, ["label", "error"]),
+                      t(e(j), {
+                        label: e(c)("admins.email")
+                      }, {
+                        default: a(() => [
+                          t(e(te), {
+                            "model-value": E.value?.email ?? "",
+                            readonly: ""
+                          }, null, 8, ["model-value"])
+                        ]),
+                        _: 1
+                      }, 8, ["label"]),
+                      Y.value ? (r(), G("div", mt, [
+                        M("div", vt, [
+                          t(e(q), {
+                            size: "sm",
+                            weight: "medium"
+                          }, {
+                            default: a(() => [
+                              v(d(e(c)("profile.agents")), 1)
+                            ]),
+                            _: 1
+                          }),
+                          t(e(q), {
+                            size: "xs",
+                            tone: "muted"
+                          }, {
+                            default: a(() => [
+                              v(d(e(c)("profile.agents-hint")), 1)
+                            ]),
+                            _: 1
+                          })
+                        ]),
+                        t(e(X), {
+                          variant: "outline",
+                          size: "sm",
+                          onClick: K
+                        }, {
+                          default: a(() => [
+                            v(d(e(c)("profile.agents-open")), 1)
+                          ]),
+                          _: 1
+                        })
+                      ])) : O("", !0)
+                    ])
+                  ])
+                ])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            t(e(Ce), {
+              value: "interface",
+              label: e(c)("profile.tab-interface")
+            }, {
+              default: a(() => [
+                M("div", pt, [
+                  t(e(q), {
+                    size: "sm",
+                    tone: "muted"
+                  }, {
+                    default: a(() => [
+                      v(d(e(c)("profile.interface-hint")), 1)
+                    ]),
+                    _: 1
+                  }),
+                  F.value.length > 1 ? (r(), h(e(j), {
+                    key: 0,
+                    label: e(c)("profile.language")
+                  }, {
+                    default: a(() => [
+                      t(e(ie), {
+                        "model-value": e(m).state.locale,
+                        options: F.value,
+                        name: "locale",
+                        "onUpdate:modelValue": p
+                      }, null, 8, ["model-value", "options"])
+                    ]),
+                    _: 1
+                  }, 8, ["label"])) : O("", !0),
+                  t(e(j), {
+                    label: e(c)("profile.theme")
+                  }, {
+                    default: a(() => [
+                      t(e(Ye), {
+                        modelValue: y.value,
+                        "onUpdate:modelValue": P[2] || (P[2] = (J) => y.value = J),
+                        "aria-label": e(k)("theme.label"),
+                        "light-label": e(k)("theme.light"),
+                        "dark-label": e(k)("theme.dark"),
+                        "system-label": e(k)("theme.system")
+                      }, null, 8, ["modelValue", "aria-label", "light-label", "dark-label", "system-label"])
+                    ]),
+                    _: 1
+                  }, 8, ["label"]),
+                  U.value !== null ? (r(), h(e(j), {
+                    key: 1,
+                    help: e(c)("profile.site-bar-hint")
+                  }, {
+                    default: a(() => [
+                      t(e(va), {
+                        "model-value": U.value,
+                        label: e(c)("profile.site-bar"),
+                        name: "site_bar",
+                        "onUpdate:modelValue": i
+                      }, null, 8, ["model-value", "label"])
+                    ]),
+                    _: 1
+                  }, 8, ["help"])) : O("", !0)
+                ])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            t(e(Ce), {
+              value: "password",
+              label: e(c)("profile.tab-password")
+            }, {
+              default: a(() => [
+                M("div", ft, [
+                  t(e(j), {
+                    label: e(c)("profile.current-password"),
+                    help: e(c)("profile.current-password-hint"),
+                    error: W.value === "password" ? T("current_password") : void 0
+                  }, {
+                    default: a(() => [
+                      t(e(te), {
+                        modelValue: b.value.current_password,
+                        "onUpdate:modelValue": P[3] || (P[3] = (J) => b.value.current_password = J),
+                        type: "password",
+                        name: "current_password",
+                        autocomplete: "current-password"
+                      }, null, 8, ["modelValue"])
+                    ]),
+                    _: 1
+                  }, 8, ["label", "help", "error"]),
+                  t(e(j), {
+                    label: e(c)("profile.password"),
+                    help: e(c)("profile.password-hint"),
+                    error: T("password")
+                  }, {
+                    default: a(() => [
+                      t(e(te), {
+                        modelValue: b.value.password,
+                        "onUpdate:modelValue": P[4] || (P[4] = (J) => b.value.password = J),
+                        type: "password",
+                        name: "password",
+                        autocomplete: "new-password"
+                      }, null, 8, ["modelValue"])
+                    ]),
+                    _: 1
+                  }, 8, ["label", "help", "error"])
+                ])
+              ]),
+              _: 1
+            }, 8, ["label"]),
+            t(e(Ce), {
+              value: "email",
+              label: e(c)("profile.tab-email")
+            }, {
+              default: a(() => [
+                M("div", yt, [
+                  t(e(j), {
+                    label: e(c)("profile.email-current")
+                  }, {
+                    default: a(() => [
+                      t(e(te), {
+                        "model-value": E.value?.email ?? "",
+                        readonly: ""
+                      }, null, 8, ["model-value"])
+                    ]),
+                    _: 1
+                  }, 8, ["label"]),
+                  S.value ? (r(), G(se, { key: 1 }, [
+                    _.value ? (r(), h(e(Ae), {
+                      key: 0,
+                      type: "success",
+                      closable: !1
+                    }, {
+                      default: a(() => [
+                        v(d(e(c)("profile.email-sent", { email: _.value.email, minutes: _.value.minutes })), 1)
+                      ]),
+                      _: 1
+                    })) : O("", !0),
+                    t(e(j), {
+                      label: e(c)("profile.email-new"),
+                      help: e(c)("profile.email-hint"),
+                      error: T("email")
+                    }, {
+                      default: a(() => [
+                        t(e(te), {
+                          modelValue: L.value.email,
+                          "onUpdate:modelValue": P[5] || (P[5] = (J) => L.value.email = J),
+                          type: "email",
+                          name: "new_email",
+                          autocomplete: "email"
+                        }, null, 8, ["modelValue"])
+                      ]),
+                      _: 1
+                    }, 8, ["label", "help", "error"]),
+                    t(e(j), {
+                      label: e(c)("profile.current-password"),
+                      help: e(c)("profile.email-password-hint"),
+                      error: W.value === "email" ? T("current_password") : void 0
+                    }, {
+                      default: a(() => [
+                        t(e(te), {
+                          modelValue: L.value.current_password,
+                          "onUpdate:modelValue": P[6] || (P[6] = (J) => L.value.current_password = J),
+                          type: "password",
+                          name: "email_current_password",
+                          autocomplete: "current-password"
+                        }, null, 8, ["modelValue"])
+                      ]),
+                      _: 1
+                    }, 8, ["label", "help", "error"])
+                  ], 64)) : (r(), h(e(Ae), {
+                    key: 0,
+                    type: "info",
+                    closable: !1
+                  }, {
+                    default: a(() => [
+                      v(d(e(c)("profile.email-unavailable")), 1)
+                    ]),
+                    _: 1
+                  }))
+                ])
+              ]),
+              _: 1
+            }, 8, ["label"])
+          ]),
+          _: 1
+        }, 8, ["modelValue", "aria-label"])
+      ]),
+      _: 1
+    }, 8, ["open", "title"]));
+  }
+}), bt = /* @__PURE__ */ Le(ht, [["__scopeId", "data-v-39b6c2a5"]]), gt = ["title"], _t = { class: "wx-user-menu__who" }, kt = { class: "wx-user-menu__name" }, wt = { class: "wx-user-menu__email" }, xt = /* @__PURE__ */ ne({
+  __name: "UserMenu",
+  props: {
+    signOutLabel: { default: void 0 },
+    resolveAvatar: { type: Function, default: void 0 },
+    avatarField: { default: void 0 },
+    expanded: { type: Boolean, default: !1 }
+  },
+  setup(l) {
+    const o = l, s = oe(), n = Ue(), x = Te(), f = Ge(), z = ae("webx-auth"), m = x.scope("webx-admin"), u = R(() => s.state.user), N = s.siteUrl, c = R(
+      () => x.state.panelLocales.length > 1 ? x.state.panelLocales : []
+    ), k = $e(Qe, null), $ = $e(Xe, null), W = A(void 0);
+    me(
+      () => typeof u.value?.avatar == "string" ? u.value.avatar : null,
+      async (_) => {
+        const g = o.resolveAvatar ?? k;
+        if (_ === null || _ === "" || g === null) {
+          W.value = void 0;
+          return;
+        }
+        const S = await g(_);
+        u.value?.avatar === _ && (W.value = S ?? void 0);
+      },
+      { immediate: !0 }
+    );
+    const V = be(bt);
+    function w() {
+      setTimeout(
+        () => {
+          V({ avatarField: o.avatarField ?? $ ?? void 0 });
+        },
+        0
+      );
+    }
+    const C = R({
+      get: () => f.state.preference,
+      set: (_) => {
+        f.set(_), n.setTheme(_);
+      }
+    }), E = R(
+      () => typeof u.value?.siteBar == "boolean" ? u.value.siteBar : null
+    );
+    function b() {
+      E.value !== null && n.setSiteBar(!E.value);
+    }
+    async function L(_) {
+      _ !== x.state.locale && await n.setLocale(_);
+    }
+    return (_, g) => {
+      const S = le("wx-avatar"), F = le("wx-icon"), U = le("wx-text"), Y = le("wx-dropdown-item"), y = le("wx-divider"), p = le("wx-dropdown");
+      return u.value !== null ? (r(), h(p, { key: 0 }, {
+        trigger: a(() => [
+          M("button", {
+            type: "button",
+            class: Ie(["wx-user-menu__trigger", { "wx-user-menu__trigger--named": l.expanded }]),
+            title: u.value.name
+          }, [
+            t(S, {
+              name: u.value.name,
+              src: W.value,
+              size: "lg"
+            }, null, 8, ["name", "src"]),
+            l.expanded ? (r(), G(se, { key: 0 }, [
+              M("span", _t, [
+                M("span", kt, d(u.value.name), 1),
+                M("span", wt, d(u.value.email), 1)
+              ]),
+              t(F, {
+                name: "chevron-up",
+                size: "sm",
+                class: "wx-user-menu__chevron"
+              })
+            ], 64)) : O("", !0)
+          ], 10, gt)
+        ]),
+        default: a(() => [
+          t(Y, { disabled: "" }, {
+            default: a(() => [
+              t(U, { size: "sm" }, {
+                default: a(() => [
+                  v(d(u.value.email), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          }),
+          t(y, { spacing: "sm" }),
+          t(Y, {
+            icon: "user",
+            onClick: w
+          }, {
+            default: a(() => [
+              v(d(e(z)("profile.menu")), 1)
+            ]),
+            _: 1
+          }),
+          e(N) ? (r(), h(Y, {
+            key: 0,
+            icon: "external-link",
+            href: e(N),
+            target: "_blank",
+            rel: "noopener"
+          }, {
+            default: a(() => [
+              v(d(e(m)("nav.open-site")), 1)
+            ]),
+            _: 1
+          }, 8, ["href"])) : O("", !0),
+          t(y, { spacing: "sm" }),
+          t(Y, { disabled: "" }, {
+            default: a(() => [
+              t(U, {
+                size: "sm",
+                tone: "muted"
+              }, {
+                default: a(() => [
+                  v(d(e(m)("theme.label")), 1)
+                ]),
+                _: 1
+              })
+            ]),
+            _: 1
+          }),
+          M("div", {
+            class: "wx-user-menu__theme",
+            onClick: g[1] || (g[1] = De(() => {
+            }, ["stop"]))
+          }, [
+            t(e(Ye), {
+              modelValue: C.value,
+              "onUpdate:modelValue": g[0] || (g[0] = (i) => C.value = i),
+              size: "sm",
+              block: "",
+              "aria-label": e(m)("theme.label"),
+              "light-label": e(m)("theme.light"),
+              "dark-label": e(m)("theme.dark"),
+              "system-label": e(m)("theme.system")
+            }, null, 8, ["modelValue", "aria-label", "light-label", "dark-label", "system-label"])
+          ]),
+          E.value !== null ? (r(), G(se, { key: 1 }, [
+            t(y, { spacing: "sm" }),
+            t(Y, {
+              icon: E.value ? "check" : void 0,
+              onClick: b
+            }, {
+              default: a(() => [
+                v(d(e(z)("menu.site-bar")), 1)
+              ]),
+              _: 1
+            }, 8, ["icon"])
+          ], 64)) : O("", !0),
+          c.value.length > 0 ? (r(), G(se, { key: 2 }, [
+            t(y, { spacing: "sm" }),
+            t(Y, { disabled: "" }, {
+              default: a(() => [
+                t(U, {
+                  size: "sm",
+                  tone: "muted"
+                }, {
+                  default: a(() => [
+                    v(d(e(z)("menu.language")), 1)
+                  ]),
+                  _: 1
+                })
+              ]),
+              _: 1
+            }),
+            (r(!0), G(se, null, fe(c.value, (i) => (r(), h(Y, {
+              key: i.code,
+              icon: i.code === e(x).state.locale ? "check" : void 0,
+              onClick: (T) => L(i.code)
+            }, {
+              default: a(() => [
+                v(d(i.nativeName), 1)
+              ]),
+              _: 2
+            }, 1032, ["icon", "onClick"]))), 128)),
+            t(y, { spacing: "sm" })
+          ], 64)) : O("", !0),
+          t(Y, {
+            icon: "logout",
+            onClick: g[2] || (g[2] = (i) => e(n).logout())
+          }, {
+            default: a(() => [
+              v(d(l.signOutLabel ?? e(z)("menu.sign-out")), 1)
+            ]),
+            _: 1
+          })
+        ]),
+        _: 1
+      })) : O("", !0);
+    };
+  }
+}), Rt = /* @__PURE__ */ Le(xt, [["__scopeId", "data-v-31b12be6"]]);
+function Wt(l = {}) {
+  const o = l.path ?? "/login";
+  return {
+    install(s) {
+      const n = ga(s.context);
+      s.i18n.defaults("webx-auth", aa), _a(
+        s.app,
+        n,
+        l.resolveAvatar ?? ea(s.context),
+        l.avatarField ?? Ze(s.context)
+      ), s.context.useSessionLoader(() => n.me()), s.router.addRoute({
+        path: o,
+        name: "webx.login",
+        meta: { public: !0 },
+        component: { render: () => Ke(Ca, { ...l.card }) }
+      }), s.router.afterEach(() => {
+        s.context.state.status === "ready" && Ne(s);
+      }), s.router.beforeEach((x) => x.meta.public === !0 || s.context.state.status !== "unauthenticated" ? !0 : { path: o, query: x.fullPath === "/" ? {} : { next: x.fullPath } }), me(
+        () => s.context.state.status,
+        (x) => {
+          const f = s.router.currentRoute.value;
+          if (x === "unauthenticated" && f.path !== o) {
+            s.router.replace({ path: o, query: { next: f.fullPath } });
+            return;
+          }
+          if (x === "ready" && s.router.isReady().then(() => Ne(s)), x === "ready" && f.path === o) {
+            const z = f.query.next;
+            if (typeof z == "string" && Ct(z)) {
+              location.assign(z);
+              return;
+            }
+            s.router.replace(typeof z == "string" ? z : "/");
+          }
+        }
+      );
+    }
+  };
+}
+const Ee = /* @__PURE__ */ new WeakSet();
+function Ne(l) {
+  const o = l.router.currentRoute.value, s = o.query["email-change"];
+  if (s !== "done" && s !== "expired" && s !== "taken" || Ee.has(o)) return;
+  Ee.add(o);
+  const n = l.i18n.scope("webx-auth"), x = { ...o.query };
+  delete x["email-change"], l.router.replace({ path: o.path, query: x, hash: o.hash }), s === "done" ? Q.success(n("profile.email-done")) : Q.danger(n(`profile.email-${s}`));
+}
+function Ct(l) {
+  if (!/^https?:\/\//i.test(l))
+    return !1;
+  try {
+    return new URL(l).origin === location.origin;
+  } catch {
+    return !1;
+  }
+}
+const Ft = ia(() => import("./ConnectPage-CMJlMsmn.js"));
+export {
+  Ca as L,
+  bt as P,
+  Rt as U,
+  Ft as W,
+  Le as _,
+  qa as a,
+  Ba as b,
+  Ka as c,
+  Oa as d,
+  ta as e,
+  ot as f,
+  Wa as g,
+  lt as h,
+  nt as i,
+  St as j,
+  Wt as k,
+  Je as l,
+  aa as m,
+  Xe as n,
+  Qe as o,
+  Tt as p,
+  pe as q,
+  ga as r,
+  Fa as s,
+  la as t,
+  re as u,
+  _a as v,
+  Ut as w,
+  Lt as x,
+  Ue as y
+};
+//# sourceMappingURL=index-Bd6Dkuu8.js.map