@webx-ui/module-auth 0.7.4 → 0.8.0

package/dist/module.d.ts

@@ -13,6 +13,8 @@ export interface AdminsOptions {
     /** Turns an avatar key into an address. Omitted, rows and forms show initials. */
     resolveAvatar?: (key: string) => Promise<string | null>;
 }
+/** Which of the three views of the administrators section a route opens. */
+export type AdminsView = 'admins' | 'calls' | 'connections';
 /**
  * The administrators, as a section of the panel.
  *
@@ -20,3 +22,19 @@ export interface AdminsOptions {
  * navigation: a section shows up when both halves are installed.
  */
 export declare function admins(options?: AdminsOptions): AdminModule;
+export interface ConnectOptions {
+    /** Where the page lives inside the panel. */
+    path?: string;
+}
+/**
+ * The page that tells a person how to connect their own agent.
+ *
+ * A section of its own rather than a corner of the profile dialog, because it is the page
+ * somebody is sent a link to — a client who has never opened this panel, on a call, with
+ * somebody reading the steps out. The server reports it only where there is a door to connect
+ * to, so a panel with the agent server switched off simply has no such entry.
+ *
+ * It carries no permission: whoever got into the panel may connect an agent, and the agent
+ * will not be able to do anything they cannot.
+ */
+export declare function connect(options?: ConnectOptions): AdminModule;

package/dist/session.d.ts

@@ -1,5 +1,5 @@
 import { App, Component, InjectionKey } from 'vue';
-import { AdminContext, AdminUser } from '@webx-ui/module-admin';
+import { AdminContext, AdminUser, ThemePreference } from '@webx-ui/module-admin';
 export interface Credentials {
     email: string;
     password: string;
@@ -19,6 +19,14 @@ export interface AuthSession {
      * the label above it.
      */
     setLocale(code: string): Promise<void>;
+    /**
+     * Write down which theme this administrator reads the panel in.
+     *
+     * Only writes it down: the screen has already changed by the time this is called. Painting
+     * is instant and local, and an account that has not caught up yet costs nobody anything —
+     * whereas a panel that waits for the network before it changes colour looks broken.
+     */
+    setTheme(preference: ThemePreference): Promise<void>;
     /**
      * Change what is yours to change about yourself: your name, your photograph, your password.
      *

package/dist/style.css

@@ -1 +1 @@
-.wx-login[data-v-3c206e31]{width:100%;max-width:26rem}.wx-login__message[data-v-3c206e31]{margin-block-end:var(--wx-space-4)}.wx-login__remember[data-v-3c206e31]{margin-block-start:calc(-1 * var(--wx-space-12))}.wx-login__reveal[data-v-3c206e31]{display:inline-flex;align-items:center;padding:0;font:inherit;color:var(--wx-text-muted);background:none;border:0;cursor:pointer}.wx-login__reveal[data-v-3c206e31]:hover,.wx-login__reveal[aria-pressed=true][data-v-3c206e31]{color:var(--wx-text-default)}.wx-admin-form{container-type:inline-size}.wx-admin-form__grid{display:grid;grid-template-columns:200px minmax(0,1fr);gap:var(--wx-space-24)}.wx-admin-form__fields{display:flex;flex-direction:column;gap:var(--wx-space-12);min-width:0}@container (max-width: 520px){.wx-admin-form__grid{grid-template-columns:minmax(0,1fr)}.wx-admin-form__aside{max-width:200px}}.wx-admin-list{min-width:0}.wx-profile-host[data-v-9583a67a]{container-type:inline-size}.wx-profile[data-v-9583a67a]{display:flex;gap:var(--wx-space-16)}.wx-profile__aside[data-v-9583a67a]{flex:0 0 180px}.wx-profile__fields[data-v-9583a67a]{display:flex;flex-direction:column;gap:var(--wx-space-12);flex:1 1 auto;min-width:0}@container (max-width: 480px){.wx-profile[data-v-9583a67a]{flex-direction:column}.wx-profile__aside[data-v-9583a67a]{flex:none}}.wx-user-menu__trigger[data-v-d51d13e4]{display:inline-flex;padding:0;border:none;border-radius:var(--wx-radius-full);background:transparent;cursor:pointer;transition:opacity var(--wx-duration-fast) var(--wx-easing-standard)}.wx-user-menu__trigger[data-v-d51d13e4]:hover{opacity:.85}.wx-user-menu__trigger[data-v-d51d13e4]:focus-visible{outline:2px solid var(--wx-border-focus);outline-offset:2px}.wx-user-menu__trigger--named[data-v-d51d13e4]{align-items:center;gap:var(--wx-space-8);width:100%;min-width:0;padding:var(--wx-space-4);border-radius:var(--wx-radius-control);text-align:start}.wx-user-menu__trigger--named[data-v-d51d13e4]:hover{opacity:1;background:var(--wx-bg-subtle)}.wx-user-menu__name[data-v-d51d13e4]{flex:1 1 auto;min-width:0;overflow:hidden;color:var(--wx-text-default);font-family:var(--wx-font-family-sans);font-size:var(--wx-font-size-sm);font-weight:var(--wx-font-weight-medium);text-overflow:ellipsis;white-space:nowrap}
+.wx-login[data-v-3c206e31]{width:100%;max-width:26rem}.wx-login__message[data-v-3c206e31]{margin-block-end:var(--wx-space-4)}.wx-login__remember[data-v-3c206e31]{margin-block-start:calc(-1 * var(--wx-space-12))}.wx-login__reveal[data-v-3c206e31]{display:inline-flex;align-items:center;padding:0;font:inherit;color:var(--wx-text-muted);background:none;border:0;cursor:pointer}.wx-login__reveal[data-v-3c206e31]:hover,.wx-login__reveal[aria-pressed=true][data-v-3c206e31]{color:var(--wx-text-default)}.wx-admin-form{container-type:inline-size}.wx-admin-form__grid{display:grid;grid-template-columns:200px minmax(0,1fr);gap:var(--wx-space-24)}.wx-admin-form__fields{display:flex;flex-direction:column;gap:var(--wx-space-12);min-width:0}@container (max-width: 520px){.wx-admin-form__grid{grid-template-columns:minmax(0,1fr)}.wx-admin-form__aside{max-width:200px}}.wx-admin-list,.wx-call-list{min-width:0}.wx-call-list__details{display:flex;flex-direction:column;gap:var(--wx-space-8);padding:var(--wx-space-8) var(--wx-space-16)}.wx-call-list__card-details{margin-top:var(--wx-space-8)}.wx-call-list__glyph{display:flex;align-items:center;justify-content:center;width:100%;height:100%;color:var(--wx-text-muted);background:var(--wx-bg-subtle)}.wx-call-list__arguments{margin:0;padding:var(--wx-space-8) var(--wx-space-12);max-height:320px;overflow:auto;border-radius:var(--wx-radius-sm);background:var(--wx-bg-subtle);color:var(--wx-text-default);font-family:var(--wx-font-family-mono);font-size:var(--wx-font-size-xs);line-height:var(--wx-font-line-height-relaxed);white-space:pre-wrap;word-break:break-word}.wx-connection-list{min-width:0}.wx-connection-list__glyph{display:flex;align-items:center;justify-content:center;width:100%;height:100%;color:var(--wx-text-muted);background:var(--wx-bg-subtle)}.wx-connection-list .wx-table__row.is-ended,.wx-connection-list .wx-table__card.is-ended{opacity:.6}.wx-connect[data-v-92d62c98]{display:flex;flex-direction:column;gap:var(--wx-space-24);min-width:0}.wx-connect__lead[data-v-92d62c98]{max-width:68ch}.wx-connect__label[data-v-92d62c98]{display:block;margin-bottom:var(--wx-space-8)}.wx-connect__row[data-v-92d62c98]{display:flex;flex-wrap:wrap;align-items:center;gap:var(--wx-space-12)}.wx-connect__url[data-v-92d62c98]{flex:1 1 260px;min-width:0;padding:var(--wx-space-10) var(--wx-space-12);border-radius:var(--wx-radius-sm);background:var(--wx-bg-subtle);color:var(--wx-text-default);font-family:var(--wx-font-family-mono);font-size:var(--wx-font-size-md);word-break:break-all}.wx-connect__section[data-v-92d62c98]{display:flex;flex-direction:column;gap:var(--wx-space-12);min-width:0}.wx-connect__steps[data-v-92d62c98]{display:flex;flex-direction:column;gap:var(--wx-space-8);margin:0;padding-left:var(--wx-space-24);color:var(--wx-text-default);font-size:var(--wx-font-size-sm);line-height:var(--wx-font-line-height-relaxed)}.wx-connect__snippet[data-v-92d62c98]{display:flex;flex-wrap:wrap;align-items:flex-start;justify-content:space-between;gap:var(--wx-space-8);padding:var(--wx-space-12);border-radius:var(--wx-radius-sm);background:var(--wx-bg-subtle)}.wx-connect__snippet pre[data-v-92d62c98]{flex:1 1 240px;margin:0;min-width:0;color:var(--wx-text-default);font-family:var(--wx-font-family-mono);font-size:var(--wx-font-size-xs);line-height:var(--wx-font-line-height-relaxed);white-space:pre-wrap;word-break:break-all}.wx-connect__links[data-v-92d62c98]{display:flex;flex-wrap:wrap;gap:var(--wx-space-12)}.wx-profile-host[data-v-9583a67a]{container-type:inline-size}.wx-profile[data-v-9583a67a]{display:flex;gap:var(--wx-space-16)}.wx-profile__aside[data-v-9583a67a]{flex:0 0 180px}.wx-profile__fields[data-v-9583a67a]{display:flex;flex-direction:column;gap:var(--wx-space-12);flex:1 1 auto;min-width:0}@container (max-width: 480px){.wx-profile[data-v-9583a67a]{flex-direction:column}.wx-profile__aside[data-v-9583a67a]{flex:none}}.wx-user-menu__theme[data-v-4dbd81da]{padding:var(--wx-space-2) var(--wx-space-8) var(--wx-space-6)}.wx-user-menu__trigger[data-v-4dbd81da]{display:inline-flex;padding:0;border:none;border-radius:var(--wx-radius-full);background:transparent;cursor:pointer;transition:opacity var(--wx-duration-fast) var(--wx-easing-standard)}.wx-user-menu__trigger[data-v-4dbd81da]:hover{opacity:.85}.wx-user-menu__trigger[data-v-4dbd81da]:focus-visible{outline:2px solid var(--wx-border-focus);outline-offset:2px}.wx-user-menu__trigger--named[data-v-4dbd81da]{align-items:center;gap:var(--wx-space-8);width:100%;min-width:0;padding:var(--wx-space-4);border-radius:var(--wx-radius-control);text-align:start}.wx-user-menu__trigger--named[data-v-4dbd81da]:hover{opacity:1;background:var(--wx-bg-subtle)}.wx-user-menu__name[data-v-4dbd81da]{flex:1 1 auto;min-width:0;overflow:hidden;color:var(--wx-text-default);font-family:var(--wx-font-family-sans);font-size:var(--wx-font-size-sm);font-weight:var(--wx-font-weight-medium);text-overflow:ellipsis;white-space:nowrap}

package/dist/types.d.ts

@@ -57,6 +57,57 @@ export interface AdminPage {
     from: number | null;
     to: number | null;
 }
+/**
+ * One tool call an agent made, as `GET /api/cms/auth/mcp-calls` answers it.
+ *
+ * `user` is null for a call on the stdio server, where there was nobody to act as; a user with
+ * no `name` was deleted since. `arguments` is the JSON as the server kept it — secrets blanked,
+ * cut to a length — and so is text to show, not an object to read.
+ */
+export interface AgentCall {
+    id: number;
+    at: string | null;
+    user: {
+        id: number;
+        name: string | null;
+    } | null;
+    /** What the client called itself on the consent screen; null off a connection. */
+    client: string | null;
+    tool: string;
+    arguments: string | null;
+    dry_run: boolean;
+    ok: boolean;
+    error: string | null;
+    duration_ms: number;
+    [key: string]: unknown;
+}
+export type AgentCallOutcome = 'ok' | 'failed' | 'dry';
+export interface AgentCallQuery {
+    /** An administrator's id, or `none` for the stdio server. */
+    user?: string | null;
+    tool?: string | null;
+    outcome?: AgentCallOutcome | null;
+    page?: number;
+    per_page?: number;
+}
+/** What the log can be narrowed by: the people and the tools that actually appear in it. */
+export interface AgentCallFilters {
+    users: {
+        id: number | null;
+        name: string | null;
+    }[];
+    tools: string[];
+}
+export interface AgentCallPage {
+    data: AgentCall[];
+    current_page: number;
+    last_page: number;
+    per_page: number;
+    total: number;
+    from: number | null;
+    to: number | null;
+    filters: AgentCallFilters;
+}
 /** What a form sends. `password` left out is a password left alone. */
 export interface AdminInput {
     name: string;
@@ -68,3 +119,33 @@ export interface AdminInput {
     locale?: string | null;
     roles?: number[];
 }
+/**
+ * One agent somebody let into the panel, as `GET /api/cms/auth/connections` answers it.
+ *
+ * `client` is the name the client chose for itself on the consent screen and `host` is where
+ * the code was sent — both, always, because only the second is evidence. `revoked_at` is set
+ * on a connection that was ended: the row is kept, since it is what the call log points at.
+ */
+export interface Connection {
+    id: number;
+    client: string;
+    host: string;
+    read_only: boolean;
+    user: {
+        id: number;
+        name: string | null;
+    };
+    connected_at: string | null;
+    last_used_at: string | null;
+    revoked_at: string | null;
+    [key: string]: unknown;
+}
+/** The list, with what the reader may ask for next. */
+export interface Connections {
+    data: Connection[];
+    /** Which list this is: only this person's, or everybody's. */
+    scope: ConnectionScope;
+    /** Whether everybody's is a list this reader would be allowed. */
+    canSeeEverybody: boolean;
+}
+export type ConnectionScope = 'mine' | 'all';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@webx-ui/module-auth",
-  "version": "0.7.4",
+  "version": "0.8.0",
   "description": "Signing in to a WebX UI admin panel: the screen, the session and the router guard. Pairs with webx-ui/module-auth on the server.",
   "license": "MIT",
   "type": "module",
@@ -44,8 +44,8 @@
     "vue-router": "^4.5.0"
   },
   "dependencies": {
-    "@webx-ui/module-admin": "^0.12.2",
-    "@webx-ui/core": "^0.29.0"
+    "@webx-ui/module-admin": "^0.13.0",
+    "@webx-ui/core": "^0.30.0"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",