@wssto2/vue-core 0.14.0 → 0.15.1

package/dist/{UsersList-KMgImERy.js → UsersList-C6u3YCCp.js}

@@ -1,12 +1,12 @@
 import { defineComponent as C, useTemplateRef as N, computed as a, openBlock as i, createBlock as m, unref as s, withCtx as r, createVNode as d, createTextVNode as R, toDisplayString as l, createCommentVNode as S, createElementBlock as _, normalizeClass as p } from "vue";
 import { useI18n as E } from "vue-i18n";
 import { useRouter as $ } from "vue-router";
-import { u as B, _ as T } from "./CollectionPage.vue_vue_type_script_setup_true_lang-dIrdS_Gn.js";
+import { u as B, _ as T } from "./CollectionPage.vue_vue_type_script_setup_true_lang-qxeSTAKV.js";
 import { _ as V } from "./Avatar.vue_vue_type_script_setup_true_lang-BPj_fkJR.js";
 import { u as L } from "./format-Cp1h0vsC.js";
-import { u as z } from "./platform-DtISOEt7.js";
+import { u as z } from "./platform-ORzRR3Tw.js";
 import { _ as A } from "./Badge.vue_vue_type_script_setup_true_lang-DJyZc0C7.js";
-import { b as D, U as I, c as f, d as M, M as q, s as F } from "./index-D-2NNye6.js";
+import { b as D, U as I, c as f, d as M, M as q, s as F } from "./index-D5DuvKP1.js";
 const G = ["datetime"], Z = /* @__PURE__ */ C({
   __name: "UsersList",
   setup(K) {

package/dist/access/RestrictedPanel.vue.d.ts

@@ -0,0 +1,20 @@
+import { type RouteLocationRaw } from "vue-router";
+/**
+ * What a page the person may not open shows in its place: a lock, the sentence of `core.no_access`, whom to write to (the `contact`
+ * address, when the application has one) and a way back. Use it for `createApplication({ noAccess })`, which renders a component
+ * without props: `noAccess: () => h(RestrictedPanel, { contact: "access@example.com" })`.
+ *
+ * Back goes one step in the application's own history; a page opened directly (a bookmark, a shared link) has none, and going
+ * back there would leave the application, so it goes to `home` instead.
+ */
+type __VLS_Props = {
+    /** An e-mail address to write to for access, shown as a link. */
+    contact?: string;
+    /** Where back goes when the application's history has no previous page. Default `/`. */
+    home?: RouteLocationRaw;
+};
+declare const _default: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
+    home: RouteLocationRaw;
+    contact: string;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+export default _default;

package/dist/access/index.d.ts

@@ -13,3 +13,4 @@ export { roleProblems, useDescribeRefusal, useRefusalMessage } from "./refusals"
 export type { RoleProblem } from "./refusals";
 export { default as PersonAccess } from "./PersonAccess.vue";
 export { default as BindingRow } from "./BindingRow.vue";
+export { default as RestrictedPanel } from "./RestrictedPanel.vue";

package/dist/access/index.js

@@ -1,49 +1,109 @@
-import { _ as f, a as R, b } from "../PersonAccess.vue_vue_type_script_setup_true_lang-CWCt9_dM.js";
-import { d as o, p as c } from "../feature-DdUAfyi4.js";
-import { a as s, b as t } from "../refusals-DfPzVNNY.js";
-import { d as g, p as x, r as h, c as v, u as y, e as C, f as K } from "../refusals-DfPzVNNY.js";
-import { d as r } from "../defineRoutes-BGAdiIrt.js";
-const a = r({
-  roles: { name: "access.roles", path: "/iam/roles", component: () => import("../RolesPage-NRRainCw.js"), meta: { access: s.viewRoles, titleKey: "core.access.title" } },
-  newRole: { name: "access.roles.new", path: "/iam/roles/new", component: () => import("../NewRolePage-Dt0O0VSI.js"), meta: { access: s.manageRoles, titleKey: "core.access.new_title" } },
+import { _ as Q, a as U, b as W } from "../PersonAccess.vue_vue_type_script_setup_true_lang-BPDh9s2m.js";
+import { d as _, p as x } from "../feature-DdUAfyi4.js";
+import { a as n, b } from "../refusals-DfPzVNNY.js";
+import { d as Y, p as Z, r as ee, c as se, u as te, e as oe, f as ce } from "../refusals-DfPzVNNY.js";
+import { d as h } from "../defineRoutes-BGAdiIrt.js";
+import { defineComponent as w, openBlock as m, createBlock as R, unref as s, withCtx as u, createElementVNode as a, createVNode as d, toDisplayString as o, normalizeClass as g, createElementBlock as k, createTextVNode as r, createCommentVNode as y } from "vue";
+import { useI18n as C } from "vue-i18n";
+import { useRouter as v } from "vue-router";
+import { _ as P } from "../Button.vue_vue_type_script_setup_true_lang-JrqhO99l.js";
+import { _ as B } from "../Panel.vue_vue_type_script_setup_true_lang-D_Wg42hu.js";
+import { _ as K } from "../Icon.vue_vue_type_script_lang-BhhsFYwp.js";
+const p = h({
+  roles: { name: "access.roles", path: "/iam/roles", component: () => import("../RolesPage-DKXXnnDV.js"), meta: { access: n.viewRoles, titleKey: "core.access.title" } },
+  newRole: { name: "access.roles.new", path: "/iam/roles/new", component: () => import("../NewRolePage-C-wbA-uW.js"), meta: { access: n.manageRoles, titleKey: "core.access.new_title" } },
   role: {
     name: "access.role",
     path: "/iam/roles/:ref",
-    component: () => import("../RolePage-noy-wmNc.js"),
+    component: () => import("../RolePage-Crp71rRb.js"),
     // A role's ref (its key, or the id of a custom one) swaps in place when a link leads to another role.
-    meta: { access: s.viewRoles, titleKey: "core.access.title", remountOnParam: "ref" }
+    meta: { access: n.viewRoles, titleKey: "core.access.title", remountOnParam: "ref" }
   }
-}), m = {
-  access: s.viewAccess,
+}), M = {
+  access: n.viewAccess,
   section: { labelKey: "core.access.person_roles", icon: "shieldStarFill" }
 };
-function u(e) {
-  return o({
+function O(e) {
+  return _({
     id: "access",
-    routes: a.records,
-    context: c(t, {
+    routes: p.records,
+    context: x(b, {
       catalogue: e.catalogue,
       subjectRoute: e.subjectRoute ?? (() => null),
       constraints: e.roleConstraints ?? [],
       problems: e.problems ?? {},
       scopes: e.scopes ?? null
     }),
-    navigation: e.destination ? [{ destination: e.destination, to: a.roles, within: ["access.role", "access.roles.new"] }] : []
+    navigation: e.destination ? [{ destination: e.destination, to: p.roles, within: ["access.role", "access.roles.new"] }] : []
   });
 }
+const z = {
+  "data-test": "restricted-panel",
+  class: "flex flex-1 flex-col items-center justify-center px-4 py-16 text-center"
+}, L = { class: "mb-2 text-lg font-semibold text-content-strong" }, N = {
+  key: 0,
+  class: "mb-6 text-subheadline text-content-muted"
+}, S = ["href"], G = /* @__PURE__ */ w({
+  __name: "RestrictedPanel",
+  props: {
+    contact: { default: void 0 },
+    home: { default: "/" }
+  },
+  setup(e) {
+    const t = e, i = v(), { t: c } = C();
+    function f() {
+      window.history.state?.back ? i.back() : i.push(t.home);
+    }
+    return (V, l) => (m(), R(s(B), null, {
+      default: u(() => [
+        a("div", z, [
+          d(s(K), {
+            name: "lockLine",
+            size: 32,
+            class: "mb-6 size-12 text-status-danger-content"
+          }),
+          a("h2", L, o(s(c)("core.no_access.title")), 1),
+          a("p", {
+            class: g(["max-w-prose text-subheadline text-content-muted", t.contact ? "mb-1" : "mb-6"])
+          }, o(s(c)("core.no_access.body")), 3),
+          t.contact ? (m(), k("p", N, [
+            r(o(s(c)("core.no_access.contact")) + " ", 1),
+            a("a", {
+              href: `mailto:${t.contact}`,
+              class: "text-content-link hover:underline"
+            }, o(t.contact), 9, S),
+            l[0] || (l[0] = r(". ", -1))
+          ])) : y("", !0),
+          d(s(P), {
+            size: "sm",
+            icon: "arrowLeftSLine",
+            onClick: f
+          }, {
+            default: u(() => [
+              r(o(s(c)("core.no_access.back")), 1)
+            ]),
+            _: 1
+          })
+        ])
+      ]),
+      _: 1
+    }));
+  }
+});
 export {
-  f as BindingRow,
-  R as PersonAccess,
-  u as accessFeature,
-  a as accessPages,
-  s as accessPermissions,
-  b as accessRoutes,
-  g as dependantsClosure,
-  x as permissionTree,
-  m as personRolesSection,
-  h as requiredClosure,
-  v as roleProblems,
-  y as useAccessLabels,
-  C as useDescribeRefusal,
-  K as useRefusalMessage
+  Q as BindingRow,
+  U as PersonAccess,
+  G as RestrictedPanel,
+  O as accessFeature,
+  p as accessPages,
+  n as accessPermissions,
+  W as accessRoutes,
+  Y as dependantsClosure,
+  Z as permissionTree,
+  M as personRolesSection,
+  ee as requiredClosure,
+  se as roleProblems,
+  te as useAccessLabels,
+  oe as useDescribeRefusal,
+  ce as useRefusalMessage
 };

package/dist/app/application.d.ts

@@ -106,8 +106,8 @@ export interface ApplicationOptions {
     describeError?: AppErrorDescriber;
     /**
      * The application's one sentence for a field message the server sent (often a code or a translation key), for every form
-     * (`useForm`, `useResourceForm`, `useCommand`) that has no `describeFieldError` of its own; a form's own wins. Without either,
-     * messages show as sent.
+     * (`useForm`, `useResourceForm`, `useCommand`) that has no `describeFieldError` of its own; a form's own wins. Without either, go-core's validator keys (`validation_errors.*`) are worded by the library and
+     * other messages show as sent.
      */
     describeFieldError?: AppFieldErrorDescriber;
     /** Called with every error the application catches (component errors, unhandled rejections, failed effects and loads). Default: `console.error`. */

package/dist/app/current.d.ts

@@ -1,3 +1,4 @@
+import type { HttpClient } from "../client";
 import type { Application } from "./application";
 /** Called by `createApplication`; the returned function unbinds, and only if this application is still the current one. */
 export declare function bindApplication(application: Application): () => void;
@@ -9,3 +10,8 @@ export declare function bindApplication(application: Application): () => void;
  * Throws before one exists. In a unit test make one first: `createTestApplication()` from `@wssto2/vue-core/testing`, and `dispose()` it after.
  */
 export declare function currentApplication(): Application;
+/**
+ * The platform's HTTP client of the current application, for an `api.ts` (`const http = currentHttp` is a module's one line of setup).
+ * Call it when a request is made, not at module load: it throws before `createApplication` ran.
+ */
+export declare function currentHttp(): HttpClient;

package/dist/app/index.d.ts

@@ -1,6 +1,6 @@
 export { createApplication } from "./application";
 export type { Application, ApplicationI18n, ApplicationErrorReport, ApplicationI18nOptions, ApplicationLocaleOptions, ApplicationOptions, ApplicationRouterOptions, ShellDefinition, } from "./application";
-export { currentApplication } from "./current";
+export { currentApplication, currentHttp } from "./current";
 export { ShellOutlet } from "./contributions";
 export { applicationKey, useApplication } from "./environment";
 export type { ApplicationEnvironment, ApplicationState } from "./environment";

package/dist/app/index.js

@@ -1,18 +1,19 @@
-import { A as o, c as r } from "../application-CrXtiGdw.js";
-import { c as t } from "../current-B0lHKTWr.js";
-import { S as i } from "../contributions-obnyn03x.js";
-import { a as c, u as l } from "../environment-Dva-SG8D.js";
-import { d as f, p as x } from "../feature-DdUAfyi4.js";
-import { k as A, u as d } from "../keepAlive-ClGnsIzT.js";
+import { A as r, c as o } from "../application-C900Wz0A.js";
+import { c as p, a as s } from "../current-CslcEPXp.js";
+import { S as n } from "../contributions-9CPT-Z5v.js";
+import { a as l, u } from "../environment-Dva-SG8D.js";
+import { d as x, p as m } from "../feature-DdUAfyi4.js";
+import { k as d, u as S } from "../keepAlive-ClGnsIzT.js";
 export {
-  o as ApplicationError,
-  i as ShellOutlet,
-  c as applicationKey,
-  r as createApplication,
-  t as currentApplication,
-  f as defineFeature,
-  A as keepSessionAlive,
-  x as provideContext,
-  l as useApplication,
-  d as useLanguages
+  r as ApplicationError,
+  n as ShellOutlet,
+  l as applicationKey,
+  o as createApplication,
+  p as currentApplication,
+  s as currentHttp,
+  x as defineFeature,
+  d as keepSessionAlive,
+  m as provideContext,
+  u as useApplication,
+  S as useLanguages
 };

package/dist/{application-CrXtiGdw.js → application-C900Wz0A.js}

@@ -10,16 +10,16 @@ import { coreMessages as le, createMessageRuntime as Xe } from "./i18n/index.js"
 import { i as Ye, a as Ze } from "./Icon.vue_vue_type_script_lang-BhhsFYwp.js";
 import { i as et, b as tt } from "./bottomDock-BZEiOPYZ.js";
 import { i as st, p as ot } from "./chrome-nUcmVu8G.js";
-import { i as rt, g as at } from "./platform-DtISOEt7.js";
+import { i as rt, g as at } from "./platform-ORzRR3Tw.js";
 import { c as nt, A as it, r as ue } from "./access-DmAceEo5.js";
 import { c as ct, _ as lt } from "./NoAccess.vue_vue_type_script_setup_true_lang-BHzZtZ50.js";
-import { i as ut } from "./guards-DGcSfTEh.js";
-import { b as ft, c as dt, n as fe } from "./navigation-CctcxT51.js";
-import { c as pt, s as de } from "./contributions-obnyn03x.js";
+import { i as ut } from "./guards-6fJxfUtk.js";
+import { b as ft, c as dt, n as fe } from "./navigation-DMJ6akat.js";
+import { c as pt, s as de } from "./contributions-9CPT-Z5v.js";
 import { a as pe } from "./environment-Dva-SG8D.js";
 import { b as me, c as he } from "./describeError-B-NMa--w.js";
-import { b as mt } from "./current-B0lHKTWr.js";
-import { _ as ht } from "./Button.vue_vue_type_script_setup_true_lang-C74hcb0N.js";
+import { b as mt } from "./current-CslcEPXp.js";
+import { _ as ht } from "./Button.vue_vue_type_script_setup_true_lang-JrqhO99l.js";
 import { _ as gt } from "./EmptyState.vue_vue_type_script_setup_true_lang-DbZiO2RF.js";
 import { i as wt } from "./feature-DdUAfyi4.js";
 function vt(e) {

package/dist/button/index.js

@@ -1,5 +1,5 @@
-import { _ as o } from "../Button.vue_vue_type_script_setup_true_lang-C74hcb0N.js";
-import { m as a, s as e, u, a as c } from "../shortcut-DUR6yPWA.js";
+import { _ as o } from "../Button.vue_vue_type_script_setup_true_lang-JrqhO99l.js";
+import { m as a, s as e, u, a as c } from "../shortcut-oixX55SZ.js";
 export {
   o as Button,
   a as matchesShortcut,

package/dist/client/client.d.ts

@@ -6,6 +6,12 @@ import { type Transport } from "./transport";
 export interface RequestOptions {
     query?: Readonly<Record<string, QueryValue>>;
     headers?: HeadersInit;
+    /**
+     * The key of this attempt at a change, sent as the `Idempotency-Key` header (it wins over a header of that name): the server does
+     * it once however many times the same key arrives. Make it once per attempt (a form holds one until it succeeds) and give it
+     * to every retry; the client's own renew-and-retry after a 401 sends it again.
+     */
+    idempotencyKey?: string;
     /** Cancels the request; it then fails with kind `aborted` (see `isAborted`), it never resolves half-way. */
     signal?: AbortSignal;
     /** False for calls that establish or end the session (sign-in, `/auth/me`), where a 401 is an answer, not an expiry. Default true. */

package/dist/client/index.js

@@ -1,4 +1,4 @@
-import { R, a as i, c as p, f as E } from "../client-Dg303Pmc.js";
+import { R, a as i, c as p, f as E } from "../client-Do8v1I5l.js";
 import { A as f, i as l, a as b } from "../error-CD7x0Jrz.js";
 import { r as u } from "../route-goWMxDUN.js";
 function a(r, e) {

package/dist/client-Do8v1I5l.js

@@ -0,0 +1,193 @@
+import { A as S, k as O, a as q } from "./error-CD7x0Jrz.js";
+function B(e) {
+  if (!e) return "";
+  const t = new URLSearchParams();
+  for (const [s, r] of Object.entries(e))
+    if (!(r == null || r === ""))
+      if (Array.isArray(r)) for (const o of r) t.append(s, String(o));
+      else t.append(s, String(r));
+  return t.toString();
+}
+const E = (e) => typeof Blob < "u" && e instanceof Blob;
+function _(e) {
+  const t = new FormData();
+  for (const [s, r] of Object.entries(e))
+    if (r != null)
+      if (Array.isArray(r))
+        for (const o of r) t.append(`${s}[]`, j(o));
+      else
+        t.append(s, j(r));
+  return t;
+}
+function j(e) {
+  return E(e) ? e : e instanceof Date ? e.toISOString() : typeof e == "object" && e !== null ? JSON.stringify(e) : String(e);
+}
+function F(e) {
+  if (e === void 0) return { body: void 0, contentType: null };
+  if (typeof e == "string" || e instanceof FormData || e instanceof URLSearchParams || e instanceof ArrayBuffer || ArrayBuffer.isView(e) || E(e))
+    return { body: e, contentType: null };
+  if (typeof e == "object" && e !== null && !Array.isArray(e)) {
+    const t = e;
+    if (Object.values(t).some((s) => E(s) || Array.isArray(s) && s.some(E)))
+      return { body: _(t), contentType: null };
+  }
+  return { body: JSON.stringify(e), contentType: "application/json" };
+}
+function N() {
+  const e = new Uint8Array(16);
+  return globalThis.crypto.getRandomValues(e), Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
+}
+const T = "X-Request-ID", I = (e) => typeof e == "object" && e !== null && !Array.isArray(e), A = (e) => typeof e == "string" && e !== "" ? e : null;
+function P(e) {
+  const t = e?.errors ?? e?.fields;
+  if (!I(t)) return {};
+  const s = {};
+  for (const [r, o] of Object.entries(t))
+    Array.isArray(o) ? s[r] = o.map(String) : o != null && (s[r] = [String(o)]);
+  return s;
+}
+async function H(e) {
+  const t = await e.text();
+  if (t.trim() === "") return { payload: null, readable: !0 };
+  try {
+    return { payload: JSON.parse(t), readable: !0 };
+  } catch {
+    return { payload: null, readable: !1 };
+  }
+}
+async function k(e, t) {
+  const s = e.headers.get(T) ?? t, { payload: r, readable: o } = await H(e), c = I(r) ? r : null;
+  if (!e.ok) {
+    const b = P(c), p = c?.params;
+    throw new S({
+      kind: O(e.status, Object.keys(b).length > 0),
+      message: A(c?.error) ?? A(c?.message) ?? `Request failed with status ${e.status}`,
+      status: e.status,
+      fields: b,
+      code: A(c?.code),
+      params: I(p) ? p : null,
+      requestId: s,
+      payload: r
+    });
+  }
+  if (!o)
+    throw new S({
+      kind: "malformed",
+      message: `The server answered ${e.status} with a body that is not JSON`,
+      status: e.status,
+      requestId: s
+    });
+  return c !== null && typeof c.success == "boolean" ? {
+    data: c.data ?? null,
+    meta: c.meta ?? null,
+    message: A(c.message),
+    status: e.status,
+    requestId: s
+  } : { data: r, meta: null, message: null, status: e.status, requestId: s };
+}
+const J = /;\s*([^\s=;]+)\s*=\s*("(?:[^"\\]|\\.)*"|[^;]*)/g;
+function L(e) {
+  const t = /^([^']*)'[^']*'(.*)$/s.exec(e);
+  if (!t) return null;
+  const s = new TextEncoder(), r = [];
+  for (const [, o, c] of t[2].matchAll(/%([0-9a-f]{2})|(.)/gis)) r.push(...o ? [parseInt(o, 16)] : s.encode(c));
+  try {
+    return new TextDecoder(t[1] || "utf-8", { fatal: !0 }).decode(Uint8Array.from(r));
+  } catch {
+    return null;
+  }
+}
+const G = (e) => e.slice(Math.max(e.lastIndexOf("/"), e.lastIndexOf("\\")) + 1).trim();
+function K(e) {
+  if (!e) return null;
+  let t = null, s = null;
+  for (const [, r, o] of e.replace(/^[^;]*/, "").matchAll(J)) {
+    const c = r.toLowerCase();
+    if (c !== "filename" && c !== "filename*") continue;
+    const p = o.startsWith('"') ? o.slice(1, -1).replace(/\\(.)/g, "$1") : o.trim();
+    c === "filename*" ? s ?? (s = L(p)) : t ?? (t = p);
+  }
+  return G(s ?? t ?? "") || null;
+}
+const Q = (e, t) => globalThis.fetch(e, t), V = 20, M = (e) => /^[a-z][a-z0-9+.-]*:\/\//i.test(e);
+function Z(e, t, s) {
+  const r = M(t) || e === "" ? t : `${e.replace(/\/+$/, "")}/${t.replace(/^\/+/, "")}`;
+  return s === "" ? r : `${r}${r.includes("?") ? "&" : "?"}${s}`;
+}
+const $ = (e, t) => new S({ kind: "aborted", message: "The request was cancelled", requestId: e, cause: t });
+function X(e = {}) {
+  const { baseUrl: t = "", transport: s = Q, credentials: r = "include" } = e, o = [], c = (n) => {
+    n !== null && (o.push(n), o.length > V && o.shift());
+  };
+  async function b(n, a, i, u, y, m) {
+    const { signal: f } = u, l = e.requestId === !1 ? null : (e.requestId ?? N)();
+    if (f?.aborted) throw $(l, f.reason);
+    const h = F(i), w = new Headers({ Accept: y }), D = e.headers ? await e.headers() : void 0;
+    for (const d of [D, u.headers])
+      d && new Headers(d).forEach((z, C) => w.set(C, z));
+    u.idempotencyKey !== void 0 && w.set("Idempotency-Key", u.idempotencyKey), l !== null && !w.has(T) && w.set(T, l), h.contentType !== null && !w.has("Content-Type") && w.set("Content-Type", h.contentType);
+    const U = { method: n, headers: w, credentials: r, body: h.body, signal: f }, v = Z(t, a, B(u.query));
+    try {
+      const d = await s(v, U);
+      return await m(d, l);
+    } catch (d) {
+      throw q(d) ? (c(d.requestId), d) : f?.aborted || d instanceof Error && d.name === "AbortError" ? $(l, d) : (c(l), new S({
+        kind: "network",
+        message: d instanceof Error ? d.message : "The server could not be reached",
+        requestId: l,
+        cause: d
+      }));
+    }
+  }
+  async function p(n, a, i, u, y, m) {
+    try {
+      return await b(n, a, i, u, y, m);
+    } catch (f) {
+      if (!q(f) || f.kind !== "unauthorized" || u.handleUnauthorized === !1 || !e.onUnauthorized || await e.onUnauthorized({ error: f, method: n, path: a }) !== "retry") throw f;
+      return b(n, a, i, u, y, m);
+    }
+  }
+  const g = (n, a, i, u = {}) => p(n, a, i, u, "application/json", async (y, m) => {
+    const f = await k(y, m);
+    return c(f.requestId), f;
+  });
+  function R(n, a = {}, i) {
+    const { accept: u = "*/*", method: y = "GET", body: m, ...f } = a;
+    return p(y, n, m, f, u, async (l, h) => {
+      l.ok || await k(l, h);
+      const w = l.headers.get(T) ?? h;
+      return c(w), i(l, w);
+    });
+  }
+  async function x(n, a, i = {}) {
+    const u = typeof a == "object" && a !== null && !Array.isArray(a) ? { ...a } : {}, y = n.path.replace(/:([A-Za-z_][A-Za-z0-9_]*)/g, (f, l) => {
+      const h = u[l];
+      if (h == null || h === "")
+        throw new Error(`${n.method} ${n.path}: the input has no value for the path parameter "${l}"`);
+      return delete u[l], encodeURIComponent(String(h));
+    }), m = Object.keys(u).length > 0;
+    return n.method === "GET" || n.method === "DELETE" ? g(n.method, y, void 0, { ...i, query: { ...u, ...i.query } }) : g(n.method, y, m ? u : void 0, i);
+  }
+  return {
+    // the rest-tuple overload is the public contract; the implementation takes its arguments positionally
+    request: x,
+    get: (n, a) => g("GET", n, void 0, a),
+    post: (n, a, i) => g("POST", n, a, i),
+    put: (n, a, i) => g("PUT", n, a, i),
+    patch: (n, a, i) => g("PATCH", n, a, i),
+    delete: (n, a) => g("DELETE", n, void 0, a),
+    download: (n, a) => R(n, a, async (i, u) => ({
+      blob: await i.blob(),
+      filename: K(i.headers.get("Content-Disposition")),
+      requestId: u
+    })),
+    stream: (n, a) => R(n, a, async (i) => i),
+    recentRequestIds: () => [...o]
+  };
+}
+export {
+  V as R,
+  T as a,
+  X as c,
+  Q as f
+};

package/dist/collection/index.js

@@ -1,17 +1,17 @@
-import { D as K, d as Q, h as W, l as Y, a as ee, r as te, b as se } from "../http-DOEfFCDA.js";
-import { _ as ie, a as ae, u as ne } from "../CollectionPage.vue_vue_type_script_setup_true_lang-dIrdS_Gn.js";
-import { L as re } from "../state-CXMexi0l.js";
-import { a as de, u as ue } from "../neighbors-Csfan8Ho.js";
+import { D as K, d as Q, h as W, l as Y, a as ee, r as te, b as se } from "../http-D6qOS6xs.js";
+import { _ as ie, a as ae, u as ne } from "../CollectionPage.vue_vue_type_script_setup_true_lang-qxeSTAKV.js";
+import { L as re } from "../state-QDaxntgR.js";
+import { a as de, u as ue } from "../neighbors-DrEahe7B.js";
 import { r as p } from "../route-goWMxDUN.js";
-import { b as pe, a as me } from "../rowLayout-Ohh5ng1u.js";
-import { _ as _e } from "../DataTable.vue_vue_type_script_setup_true_lang-J3PhyJAS.js";
+import { b as pe, a as me } from "../rowLayout-QKfNHsML.js";
+import { _ as _e } from "../DataTable.vue_vue_type_script_setup_true_lang-DbRS37n3.js";
 import { defineComponent as h, openBlock as c, createElementBlock as u, Fragment as P, renderList as E, createBlock as w, unref as d, withCtx as g, normalizeClass as v, createVNode as _, createCommentVNode as y, shallowRef as S, useTemplateRef as T, watch as L, renderSlot as D } from "vue";
 import { _ as b } from "../Icon.vue_vue_type_script_lang-BhhsFYwp.js";
-import { _ as R } from "../Tooltip.vue_vue_type_script_setup_true_lang-Dtg5Y6pf.js";
+import { _ as R } from "../Tooltip.vue_vue_type_script_setup_true_lang-C1C1qeBj.js";
 import { D as ke, u as xe } from "../datePresets-DB13HHHd.js";
 import { _ as we, h as ge } from "../Highlight.vue_vue_type_script_setup_true_lang-DZGBmwcX.js";
 import { useI18n as z } from "vue-i18n";
-import { _ as A } from "../Modal.vue_vue_type_script_setup_true_lang-DDS0iEnn.js";
+import { _ as A } from "../Modal.vue_vue_type_script_setup_true_lang-CZ7WrDwu.js";
 const m = {
   index: p("GET", "/v1/saved-views"),
   store: p("POST", "/v1/saved-views"),

package/dist/config/index.d.ts

@@ -41,6 +41,22 @@ export interface ArchitectureFile {
 }
 /** An application's own rule: the messages for one file (each is prefixed with the file's path), or none. */
 export type ArchitectureRule = (file: ArchitectureFile) => string[] | undefined;
+/** The rule `no-hardcoded-copy`: no text in the language of the code's authors where a person reads it. */
+export interface CopyRuleConfig {
+    /** What the text of that language looks like: its letters and common words (matched line by line). Required. */
+    pattern: RegExp;
+    /** Where every string literal of a `.ts` / `<script>` and a template's `placeholder`, `title`, `aria-label` and `label` count. Default: the UI folders (`uiDirs`). Elsewhere only a template's text and the strings of `form.ts`, `*Form.ts` and `forms/` count. */
+    scope?: RegExp;
+    /** Words that are written in that language's letters in every language (brand names), cut out of what `scope` scans. Give it the `g` flag. */
+    properNames?: RegExp;
+}
+/** The rule `no-route-policy`: a route names its permission in `meta.permission`, never in `policy:` / `requires:` of a `routes.ts`. */
+export interface RouteAccessConfig {
+    /** The session's retired list of permission names (`policies`): `authStore.<name>` and `state.<name>` are reported too. Default none. */
+    sessionField?: string;
+    /** Files (by path from the config's folder) that are not scanned: scripts, docs, e2e. Tests are never scanned. */
+    exclude?: RegExp;
+}
 export interface ArchitectureConfig {
     /** The folder of the features, relative to the config file (default "features"). */
     featuresDir?: string;
@@ -63,11 +79,15 @@ export interface ArchitectureConfig {
     };
     /**
      * Known offenders that predate a rule, by rule: "deep-import" (`<file> -> <specifier>`), "raw-http", "feature-name" and
-     * "feature-shape" (paths), and a pack rule's id (files; a stale entry is a violation, so the list only shrinks).
+     * "feature-shape" (paths), and a pack rule's or `copy` / `routeAccess` rule's id (files; a stale entry is a violation, so the list only shrinks).
      */
     allow?: Record<string, string[]>;
     /** Opt-in rule packs: "design-values" (theme tokens) and "presentation" (use the library's components). */
     packs?: ("design-values" | "presentation")[];
+    /** Switches on `no-hardcoded-copy`; its allowlist (`allow["no-hardcoded-copy"]`) is a ratchet like a pack rule's. */
+    copy?: CopyRuleConfig;
+    /** Switches on `no-route-policy`; its allowlist is `allow["no-route-policy"]`. */
+    routeAccess?: RouteAccessConfig;
     /** The application's own rules, run on every source file. */
     rules?: ArchitectureRule[];
     /** A document to name after a rule's message, by rule: "shared-layer", "api-error" or a pack rule's id. */

package/dist/content/StatSummary.vue.d.ts

@@ -0,0 +1,40 @@
+/**
+ * An outcome as one grouped card of numbers: a quiet label over a large tabular value per cell, hairlines between cells, an optional
+ * share bar under a value, and optional header and footer rows (a run's date and status, a success-rate bar).
+ *
+ *   <StatSummary :items="[{ key: 'total', label: 'Rows', value: 120 },
+ *                         { key: 'failed', label: 'Errors', value: 9, tone: 'danger', share: 7.5 }]">
+ *     <template #footer>…</template>
+ *   </StatSummary>
+ *
+ * Wide screens show every cell in one row; compact screens wrap into `compactColumns` and drop cells marked `compact: false`.
+ */
+export type StatTone = "neutral" | "muted" | "info" | "success" | "warning" | "danger";
+export type StatItem = {
+    key: string;
+    label: string;
+    value: number;
+    tone?: StatTone;
+    /** 0–100: draws a share bar with the percentage under the value. */
+    share?: number | null;
+    /** False hides the cell on compact screens (secondary numbers). */
+    compact?: boolean;
+};
+type __VLS_Props = {
+    items: StatItem[];
+    compactColumns?: number;
+};
+type __VLS_Slots = {
+    header?: () => unknown;
+    footer?: () => unknown;
+};
+declare const __VLS_component: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
+    compactColumns: number;
+}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
+export default _default;
+type __VLS_WithSlots<T, S> = T & {
+    new (): {
+        $slots: S;
+    };
+};

package/dist/content/index.d.ts

@@ -9,4 +9,5 @@ export { default as KeyValueList, type KeyValueItem } from "./KeyValueList.vue";
 export { default as MicroLabel } from "./MicroLabel.vue";
 export { default as Money } from "./Money.vue";
 export { default as Panel } from "./Panel.vue";
+export { default as StatSummary, type StatItem, type StatTone } from "./StatSummary.vue";
 export { default as Timestamp } from "./Timestamp.vue";