headroom-cms 0.1.1

package/README.md

@@ -0,0 +1,282 @@
+# Headroom CMS
+
+Serverless headless CMS for AWS, deployed with [SST](https://sst.dev).
+
+Headroom provisions a complete CMS stack — DynamoDB, S3, Lambda, CloudFront, Cognito, and an admin UI — from a single SST component. No Go toolchain or build step required; pre-compiled binaries and a pre-built admin UI are included in the package.
+
+## Quick Start
+
+```bash
+npm create headroom my-cms
+cd my-cms
+npx sst deploy --stage production
+./scripts/create-admin.sh admin@example.com 'YourPassword123!'
+```
+
+After deploying, the CLI prints three URLs:
+
+- **API** — the Lambda function URL for the content API
+- **CDN** — the CloudFront distribution (cached, edge-authenticated)
+- **Admin** — the admin UI
+
+Open the Admin URL and sign in with the credentials you just created.
+
+## Prerequisites
+
+- **Node.js 22+** and **pnpm** (or npm)
+- **AWS credentials** configured (`aws configure` or environment variables)
+- **SST v3** (installed automatically as a dev dependency)
+- **AWS CLI** (for the `create-admin.sh` and `get-token.sh` helper scripts)
+- **jq** (used by helper scripts to read SST outputs)
+
+## Configuration Reference
+
+Your `sst.config.ts` imports `HeadroomCMS` and passes a configuration object:
+
+```typescript
+/// <reference path="./.sst/platform/config.d.ts" />
+import { HeadroomCMS } from "headroom-cms";
+
+export default $config({
+  app(input) {
+    return {
+      name: "my-cms",
+      removal: input?.stage === "production" ? "retain" : "remove",
+      protect: input?.stage === "production",
+      home: "aws",
+    };
+  },
+  async run() {
+    const cms = new HeadroomCMS("CMS", {
+      senderEmail: "cms@mycompany.com",
+
+      // All options below are optional
+      domain: {
+        name: "api.mycompany.com",
+        certificateArn: "arn:aws:acm:us-east-1:...:certificate/...",
+      },
+      adminDomain: {
+        name: "cms.mycompany.com",
+        certificateArn: "arn:aws:acm:us-east-1:...:certificate/...",
+      },
+      priceClass: "PriceClass_100",
+      apiCacheTtl: 3600,
+      passwordPolicy: {
+        minimumLength: 12,
+        requireLowercase: true,
+        requireUppercase: true,
+        requireNumbers: true,
+        requireSymbols: true,
+      },
+    });
+
+    return cms.outputs;
+  },
+});
+```
+
+### Options
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `senderEmail` | `string` | **(required)** | Email for admin invitations and password resets. Must be verified in SES (see [Troubleshooting](#troubleshooting)). |
+| `domain` | `{ name, certificateArn }` | CloudFront default | Custom domain for the CDN / API endpoint. |
+| `adminDomain` | `{ name, certificateArn }` | CloudFront default | Custom domain for the admin UI. |
+| `priceClass` | `"PriceClass_100"` \| `"PriceClass_200"` \| `"PriceClass_All"` | `"PriceClass_100"` | CloudFront price class. `100` = US/Canada/Europe, `200` adds Asia/Africa, `All` = global. |
+| `apiCacheTtl` | `number` | `3600` | API response cache TTL in seconds at the CloudFront edge. |
+| `passwordPolicy` | `object` | See below | Cognito password policy overrides. |
+
+#### Password Policy Defaults
+
+| Field | Default |
+|-------|---------|
+| `minimumLength` | `12` |
+| `requireLowercase` | `true` |
+| `requireUppercase` | `true` |
+| `requireNumbers` | `true` |
+| `requireSymbols` | `true` |
+
+### Outputs
+
+The component returns these outputs (available in `.sst/outputs.json` after deploy):
+
+| Output | Description |
+|--------|-------------|
+| `api` | Lambda function URL for the Go API |
+| `cdn` | CloudFront distribution URL (cached, edge-authenticated) |
+| `admin` | Admin UI URL |
+| `userPoolId` | Cognito User Pool ID |
+| `userPoolClientId` | Cognito User Pool Client ID |
+
+## Custom Domains
+
+To use custom domains for the CDN or admin UI:
+
+1. **Request an ACM certificate** in **us-east-1** (required for CloudFront):
+
+   ```bash
+   aws acm request-certificate \
+     --domain-name api.mycompany.com \
+     --validation-method DNS \
+     --region us-east-1
+   ```
+
+2. **Validate the certificate** by adding the DNS records ACM provides (check the AWS Console or use `aws acm describe-certificate`).
+
+3. **Add the domain config** to your `sst.config.ts`:
+
+   ```typescript
+   const cms = new HeadroomCMS("CMS", {
+     senderEmail: "cms@mycompany.com",
+     domain: {
+       name: "api.mycompany.com",
+       certificateArn: "arn:aws:acm:us-east-1:123456789:certificate/abc-123",
+     },
+   });
+   ```
+
+4. **Deploy**, then create a **CNAME** (or alias) DNS record pointing your domain to the CloudFront distribution domain shown in the deploy output.
+
+Repeat for `adminDomain` if you want a custom domain for the admin UI.
+
+## Updating
+
+```bash
+pnpm update headroom-cms
+npx sst deploy --stage production
+```
+
+SST detects changes in the component and updates Lambda code, admin UI assets, and any infrastructure changes automatically.
+
+### Version Policy
+
+Headroom follows semantic versioning:
+
+- **Patch** (0.1.x) — Bug fixes, no infrastructure changes
+- **Minor** (0.x.0) — New features, backward-compatible infrastructure additions
+- **Major** (x.0.0) — Breaking changes to config interface or infrastructure that may require manual steps
+
+## Troubleshooting
+
+### SES Email Verification
+
+Headroom creates an SES email identity for your `senderEmail` automatically, but AWS requires you to verify it. Check the inbox for that address and click the verification link. Until verified, admin invitation emails won't send.
+
+If your AWS account is still in the SES sandbox, you can only send to verified email addresses. Request production access in the AWS Console under SES > Account dashboard.
+
+### IAM Permissions
+
+The deploying user/role needs broad permissions to create DynamoDB tables, S3 buckets, Lambda functions, CloudFront distributions, Cognito user pools, SQS queues, and IAM roles. If you get `AccessDenied` errors during deploy, ensure your credentials have `AdministratorAccess` or an equivalent policy.
+
+### Deploy Errors
+
+- **"Resource already exists"** — You may have resources from a previous deployment in the same AWS account/region. Use a different SST stage name or clean up the old resources.
+- **"CREATE_FAILED ... custom-message Lambda"** — This usually means the Node.js runtime version isn't available in your region. Ensure you're deploying to a standard region.
+- **Timeout during deploy** — CloudFront distribution creation can take 5-15 minutes on first deploy. This is normal.
+
+### Helper Scripts
+
+The scaffolded project includes two helper scripts in `scripts/`:
+
+- **`create-admin.sh <email> <password>`** — Creates a Cognito admin user. Password must be 12+ characters with uppercase, lowercase, numbers, and symbols.
+- **`get-token.sh <email> <password>`** — Returns a JWT access token for testing admin API endpoints.
+
+Both scripts read from `.sst/outputs.json`, so you must deploy before running them.
+
+## What Gets Deployed
+
+A single `HeadroomCMS` component creates:
+
+- **11 DynamoDB tables** (sites, content, collections, block types, media, API keys, tags, audit, relationships, webhooks, webhook deliveries)
+- **1 S3 bucket** (media files and content bodies)
+- **1 CloudFront KVS** (edge auth cache and site version tracking)
+- **1 Cognito User Pool + Client** (admin authentication)
+- **1 SES Email Identity** (admin invitations)
+- **4 Lambda functions** (API, webhook worker, image transform, custom message)
+- **1 CloudFront Distribution** with 2 CloudFront Functions (edge auth, media URL rewrite)
+- **1 Admin UI** (static site on CloudFront)
+- **2 SQS queues** (webhook delivery + dead letter queue)
+
+## Advanced: Forking
+
+If you need to modify Go API handlers, add custom admin UI pages, change DynamoDB schemas, or make other changes that the configuration options don't cover, you can eject to a full source checkout.
+
+This is a one-way migration: once ejected, updates come from merging upstream changes rather than `pnpm update`.
+
+### When to Eject
+
+The packaged component covers most use cases. Eject only when you need to:
+
+- Add custom API endpoints or middleware in the Go Lambda
+- Add custom admin UI pages or block editor plugins
+- Change DynamoDB table schemas
+- Wire additional Lambda functions into the same infrastructure
+- Replace a subsystem entirely (e.g., swap Cognito for a different auth provider)
+
+### Ejection Steps
+
+1. **Clone at your current version:**
+
+   ```bash
+   git clone --branch v0.1.0 https://github.com/cykod/headroom.git my-cms-custom
+   cd my-cms-custom
+   pnpm install
+   ```
+
+2. **Copy your SST state** so SST recognizes existing AWS resources:
+
+   ```bash
+   cp -r ../my-cms/.sst ./
+   ```
+
+3. **Update `sst.config.ts`** to use local source with the `dev` option:
+
+   ```typescript
+   /// <reference path="./.sst/platform/config.d.ts" />
+   import { HeadroomCMS } from "./packages/headroom-cms/src/index.js";
+
+   export default $config({
+     app(input) {
+       return {
+         name: "my-cms", // must match your previous app name
+         removal: input?.stage === "production" ? "retain" : "remove",
+         protect: input?.stage === "production",
+         home: "aws",
+       };
+     },
+     async run() {
+       const cms = new HeadroomCMS("CMS", {
+         senderEmail: "cms@mycompany.com",
+         dev: {
+           apiHandler: "packages/api",
+           webhookWorkerHandler: "packages/webhook-worker",
+           customMessageHandler: "packages/functions/custom-message.handler",
+           imageLambdaHandler: "packages/image-lambda/index.handler",
+           adminPath: "packages/admin",
+         },
+       });
+
+       return cms.outputs;
+     },
+   });
+   ```
+
+4. **Deploy to verify** the state transfer (should be a no-op if config matches):
+
+   ```bash
+   npx sst deploy --stage production
+   ```
+
+5. **Start customizing.** Key directories:
+
+   | Directory | What it is |
+   |-----------|-----------|
+   | `packages/api/` | Go Lambda API — add routes in `main.go`, handlers in `internal/handler/` |
+   | `packages/admin/` | React admin UI — add pages in `src/pages/`, components in `src/components/` |
+   | `packages/headroom-cms/src/` | SST infrastructure component — modify DynamoDB schemas, add resources |
+   | `packages/image-lambda/` | Sharp image transform Lambda |
+   | `packages/webhook-worker/` | Webhook delivery worker |
+
+## License
+
+PolyForm Noncommercial 1.0.0

package/admin/assets/AdminsPage-CnrQqwKA.js

@@ -0,0 +1 @@
+import{j as e}from"./tanstack-BO6c-AOu.js";import{u as H,r as x}from"./react-vendor-DNVhVxD7.js";import{n as L,u as q,a2 as B,a3 as _,o as z,a4 as M,a5 as V,S as y,D as G,h as $,B as l,i as J,j as K,k as Q,l as W,I as X,m as Y,s as i}from"./index-Ds50UTAc.js";import{u as Z}from"./useAdminResolver-BsQc_N4z.js";import{T as ee,a as se,b,c as p,d as ae,e as j}from"./table-B3EHrN_H.js";import{P as ie,a as te,b as ne,C as re,c as oe,d as le,e as de,f as ce,g as me}from"./command-ChD319uJ.js";import{S as ue,a as he,b as xe,c as pe,d as C}from"./select-CJXZv4wv.js";import{P as je}from"./plus-BgHSYWJN.js";import{T as ve}from"./trash-2-Gny2Upn-.js";import"./radix-DQ3amgxj.js";import"./search-DIzcfCVh.js";import"./check-BGA0ADyt.js";const fe=[["path",{d:"M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2",key:"1yyitq"}],["circle",{cx:"9",cy:"7",r:"4",key:"nufk8"}],["line",{x1:"19",x2:"19",y1:"8",y2:"14",key:"1bvyxn"}],["line",{x1:"22",x2:"16",y1:"11",y2:"11",key:"1shjgl"}]],ge=L("user-plus",fe);function Re(){const{host:d}=H(),{user:N}=q(),S=B(),{data:A,isLoading:I}=_(d),{data:T}=z(),c=M(d),m=V(d),n=A?.admins??[],E=T?.items??[],r=S==="admin",v=n.map(s=>s.id),{resolve:w}=Z(v),[D,f]=x.useState(!1),[P,g]=x.useState(!1),[u,h]=x.useState("");if(I)return e.jsxs("div",{className:"space-y-2",children:[e.jsx(y,{className:"h-8 w-64"}),Array.from({length:3}).map((s,a)=>e.jsx(y,{className:"h-12 w-full"},a))]});const R=E.filter(s=>!v.includes(s.sub));async function k(s){try{await c.mutateAsync({admins:[...n,{id:s,role:"editor"}]}),i.success("Admin added"),f(!1)}catch(a){i.error("Failed to add admin",{description:a instanceof Error?a.message:void 0})}}async function U(s){if(s.preventDefault(),!!u.trim())try{const a=await m.mutateAsync({email:u.trim()});a.existed?i.success("Existing user added to site"):i.success("Invite email sent",{description:`An invite has been sent to ${a.email}`}),h(""),g(!1)}catch(a){i.error("Failed to invite user",{description:a instanceof Error?a.message:void 0})}}async function O(s){try{await c.mutateAsync({admins:n.filter(a=>a.id!==s)}),i.success("Admin removed")}catch(a){i.error("Failed to remove admin",{description:a instanceof Error?a.message:void 0})}}async function F(s,a){const o=n.map(t=>t.id===s?{...t,role:a}:t);if(!o.some(t=>t.role==="admin")){i.error("At least one admin role is required");return}try{await c.mutateAsync({admins:o}),i.success("Role updated")}catch(t){i.error("Failed to update role",{description:t instanceof Error?t.message:void 0})}}return e.jsxs("div",{children:[e.jsx("h1",{className:"mb-6 text-2xl font-semibold",children:"Admins"}),r&&e.jsxs("div",{className:"mb-6 flex gap-2",children:[e.jsxs(G,{open:P,onOpenChange:s=>{g(s),s||h("")},children:[e.jsx($,{asChild:!0,children:e.jsxs(l,{children:[e.jsx(ge,{className:"mr-2 h-4 w-4"}),"Invite by email"]})}),e.jsxs(J,{children:[e.jsxs(K,{children:[e.jsx(Q,{children:"Invite User to Site"}),e.jsx(W,{className:"sr-only",children:"Send an invite email to add a user to this site"})]}),e.jsxs("form",{onSubmit:U,className:"space-y-4",children:[e.jsx("p",{className:"text-muted-foreground text-sm",children:"Enter an email address. If the user doesn't have an account yet, they'll receive an invite email."}),e.jsx(X,{type:"email",value:u,onChange:s=>h(s.target.value),placeholder:"email@example.com",required:!0}),e.jsx(Y,{children:e.jsx(l,{type:"submit",disabled:m.isPending,children:m.isPending?"Inviting...":"Send Invite"})})]})]})]}),e.jsxs(ie,{open:D,onOpenChange:f,children:[e.jsx(te,{asChild:!0,children:e.jsxs(l,{variant:"outline",children:[e.jsx(je,{className:"mr-2 h-4 w-4"}),"Add existing user"]})}),e.jsx(ne,{className:"w-72 p-0",align:"start",children:e.jsxs(re,{children:[e.jsx(oe,{placeholder:"Search users..."}),e.jsxs(le,{children:[e.jsx(de,{children:"No users found."}),e.jsx(ce,{children:R.map(s=>e.jsx(me,{value:s.email,onSelect:()=>k(s.sub),children:s.email},s.sub))})]})]})})]})]}),n.length===0?e.jsx("p",{className:"text-muted-foreground",children:"No admins configured."}):e.jsxs(ee,{children:[e.jsx(se,{children:e.jsxs(b,{children:[e.jsx(p,{children:"Email"}),e.jsx(p,{children:"Role"}),r&&e.jsx(p,{})]})}),e.jsx(ae,{children:n.map(s=>{const a=s.id===N?.sub;return e.jsxs(b,{children:[e.jsxs(j,{className:"text-sm",children:[w(s.id),a&&e.jsx("span",{className:"ml-2 text-muted-foreground",children:"(you)"})]}),e.jsx(j,{children:r&&!a?e.jsxs(ue,{value:s.role,onValueChange:o=>F(s.id,o),children:[e.jsx(he,{className:"w-28",children:e.jsx(xe,{})}),e.jsxs(pe,{children:[e.jsx(C,{value:"admin",children:"Admin"}),e.jsx(C,{value:"editor",children:"Editor"})]})]}):e.jsx("span",{className:"text-sm capitalize",children:s.role})}),r&&e.jsx(j,{className:"text-right",children:!a&&e.jsx(l,{variant:"ghost",size:"sm",onClick:()=>O(s.id),title:"Remove from site",children:e.jsx(ve,{className:"h-4 w-4"})})})]},s.id)})})]})]})}export{Re as AdminsPage};

package/admin/assets/AllContentPage-ByN1h3PP.js

@@ -0,0 +1 @@
+import{j as s}from"./tanstack-BO6c-AOu.js";import{u as P,e as T,r as p}from"./react-vendor-DNVhVxD7.js";import{u as U,a as I,b as D,c as L}from"./useContent-CSobIico.js";import{m as M}from"./media-url-DIg_vSyf.js";import{t as R,s as c,S as z,B as E}from"./index-Ds50UTAc.js";import{B as g}from"./badge-0Z1nL6DI.js";import{C as b}from"./checkbox-BPqrj_XS.js";import{T as H,a as F,b as S,c as o,d as V,e as r}from"./table-B3EHrN_H.js";import{f as _}from"./format-CZ9bpk32.js";import{B as q}from"./BulkActionBar-BMcUBJSH.js";import"./radix-DQ3amgxj.js";import"./check-BGA0ADyt.js";function le(){const{host:i}=P(),k=T(),{collections:C}=R(),[w,N]=p.useState(),[n,a]=p.useState(new Set),{data:d,isLoading:v}=U(i,w),m=I(i),x=D(i),f=L(i),y=new Map(C.map(e=>[e.name,e.label])),h=d?.items.map(e=>e.contentId)??[],j=h.length>0&&h.every(e=>n.has(e));function A(e){a(l=>{const t=new Set(l);return t.has(e)?t.delete(e):t.add(e),t})}function $(){a(j?new Set:new Set(h))}const B=m.isPending||x.isPending||f.isPending;return s.jsxs("div",{children:[s.jsxs("div",{className:"mb-6",children:[s.jsx("h1",{className:"text-2xl font-semibold",children:"All Content"}),s.jsx("p",{className:"text-muted-foreground text-sm",children:"Recently updated content across all collections."})]}),n.size>0&&s.jsx(q,{selectedCount:n.size,onPublish:async()=>{const e=[...n],t=(await m.mutateAsync(e)).filter(u=>u.status==="rejected").length;t?c.error(`${t} of ${e.length} failed to publish`):c.success(`${e.length} item(s) published`),a(new Set)},onUnpublish:async()=>{const e=[...n],t=(await x.mutateAsync(e)).filter(u=>u.status==="rejected").length;t?c.error(`${t} of ${e.length} failed to unpublish`):c.success(`${e.length} item(s) unpublished`),a(new Set)},onDelete:async()=>{const e=[...n],t=(await f.mutateAsync(e)).filter(u=>u.status==="rejected").length;t?c.error(`${t} of ${e.length} failed to delete`):c.success(`${e.length} item(s) deleted`),a(new Set)},onClear:()=>a(new Set),isPending:B}),v?s.jsx("div",{className:"space-y-2",children:Array.from({length:5}).map((e,l)=>s.jsx(z,{className:"h-12 w-full"},l))}):d?.items.length?s.jsxs(s.Fragment,{children:[s.jsxs(H,{children:[s.jsx(F,{children:s.jsxs(S,{children:[s.jsx(o,{className:"w-10",children:s.jsx(b,{checked:j,onCheckedChange:$,"aria-label":"Select all"})}),s.jsx(o,{children:"Title"}),s.jsx(o,{children:"Slug"}),s.jsx(o,{children:"Collection"}),s.jsx(o,{children:"Status"}),s.jsx(o,{children:"Updated"})]})}),s.jsx(V,{children:d.items.map(e=>s.jsxs(S,{className:"cursor-pointer",onClick:()=>k(`/sites/${i}/content/${e.collection}/${e.contentId}`),children:[s.jsx(r,{onClick:l=>l.stopPropagation(),children:s.jsx(b,{checked:n.has(e.contentId),onCheckedChange:()=>A(e.contentId),"aria-label":`Select ${e.title||"Untitled"}`})}),s.jsx(r,{className:"font-medium",children:s.jsxs("div",{className:"flex items-center gap-3",children:[!!e.coverUrl&&s.jsx("img",{src:M(e.coverUrl),alt:"",className:"h-8 w-8 rounded object-cover flex-shrink-0"}),s.jsx("span",{children:e.title||"Untitled"})]})}),s.jsx(r,{className:"text-muted-foreground text-sm",children:e.slug||"—"}),s.jsx(r,{children:s.jsx(g,{variant:"outline",children:y.get(e.collection)??e.collection})}),s.jsx(r,{children:s.jsx(g,{variant:e.publishedAt?"default":"secondary",children:e.publishedAt?"Published":"Draft"})}),s.jsx(r,{className:"text-muted-foreground",children:e.publishedAt?_(e.publishedAt):"—"})]},e.contentId))})]}),d.hasMore&&s.jsx("div",{className:"mt-4 flex justify-center",children:s.jsx(E,{variant:"outline",onClick:()=>N(d.cursor??void 0),children:"Load More"})})]}):s.jsx("p",{className:"text-muted-foreground",children:"No content yet."})]})}export{le as AllContentPage};

package/admin/assets/ApiKeysPage-FgNHZPBS.js

@@ -0,0 +1 @@
+import{u as L,a as N,b as A,j as e}from"./tanstack-BO6c-AOu.js";import{u as E,r as m}from"./react-vendor-DNVhVxD7.js";import{E as f,B as r,S as q,D as K,i as D,j as w,k as I,l as T,I as g,m as p,L as O,s as x}from"./index-Ds50UTAc.js";import{T as G,a as Q,b as k,c as d,d as R,e as u}from"./table-B3EHrN_H.js";import{f as C}from"./format-CZ9bpk32.js";import{P as $}from"./plus-BgHSYWJN.js";import{T as B}from"./trash-2-Gny2Upn-.js";import{C as H}from"./copy-BqH9rXYM.js";import"./radix-DQ3amgxj.js";function U(s){const t=f();return L({queryKey:["sites",s,"api-keys"],queryFn:async()=>({items:(await t.apiFetch(`/v1/admin/sites/${s}/api-keys`)).keys}),enabled:!!s})}function z(s){const t=f(),n=N();return A({mutationFn:i=>t.apiFetch(`/v1/admin/sites/${s}/api-keys`,{method:"POST",body:JSON.stringify(i)}),onSuccess:()=>n.invalidateQueries({queryKey:["sites",s,"api-keys"]})})}function J(s,t){const n=f(),i=N();return A({mutationFn:()=>n.apiFetch(`/v1/admin/sites/${s}/api-keys/${t}`,{method:"DELETE"}),onSuccess:()=>i.invalidateQueries({queryKey:["sites",s,"api-keys"]})})}function te(){const{host:s}=E(),{data:t,isLoading:n}=U(s),i=z(s),[h,l]=m.useState(!1),[b,y]=m.useState(""),[o,j]=m.useState(null),[P,v]=m.useState(null);async function F(a){a.preventDefault();try{const c=await i.mutateAsync({label:b});j(c.key),y("")}catch(c){x.error("Failed to create API key",{description:c instanceof Error?c.message:void 0})}}function S(){o&&(navigator.clipboard.writeText(o),x.success("Copied to clipboard"))}return e.jsxs("div",{children:[e.jsxs("div",{className:"mb-6 flex items-center justify-between",children:[e.jsx("h1",{className:"text-2xl font-semibold",children:"API Keys"}),e.jsxs(r,{onClick:()=>l(!0),children:[e.jsx($,{className:"mr-2 h-4 w-4"}),"Generate Key"]})]}),n?e.jsx("div",{className:"space-y-2",children:Array.from({length:3}).map((a,c)=>e.jsx(q,{className:"h-12 w-full"},c))}):t?.items.length?e.jsxs(G,{children:[e.jsx(Q,{children:e.jsxs(k,{children:[e.jsx(d,{children:"Label"}),e.jsx(d,{children:"Key ID"}),e.jsx(d,{children:"Created"}),e.jsx(d,{children:"Last Used"}),e.jsx(d,{})]})}),e.jsx(R,{children:t.items.map(a=>e.jsxs(k,{children:[e.jsx(u,{className:"font-medium",children:a.label}),e.jsx(u,{className:"font-mono text-xs",children:a.keyId}),e.jsx(u,{className:"text-muted-foreground",children:C(a.createdAt)}),e.jsx(u,{className:"text-muted-foreground",children:a.lastUsedAt?C(a.lastUsedAt):"Never"}),e.jsx(u,{children:e.jsx(r,{variant:"ghost",size:"sm",onClick:()=>v(a.keyId),children:e.jsx(B,{className:"h-4 w-4"})})})]},a.keyId))})]}):e.jsx("p",{className:"text-muted-foreground",children:"No API keys."}),e.jsx(K,{open:h,onOpenChange:a=>{l(a),a||(j(null),y(""))},children:e.jsxs(D,{children:[e.jsxs(w,{children:[e.jsx(I,{children:o?"API Key Generated":"Generate API Key"}),e.jsx(T,{className:"sr-only",children:"Create a new API key for site access"})]}),o?e.jsxs("div",{className:"space-y-4",children:[e.jsx("p",{className:"text-sm text-muted-foreground",children:"Copy this key now. You won't be able to see it again."}),e.jsxs("div",{className:"flex gap-2",children:[e.jsx(g,{value:o,readOnly:!0,className:"font-mono text-xs"}),e.jsx(r,{variant:"outline",size:"icon",onClick:S,children:e.jsx(H,{className:"h-4 w-4"})})]}),e.jsx(p,{children:e.jsx(r,{onClick:()=>{l(!1),j(null)},children:"Done"})})]}):e.jsxs("form",{onSubmit:F,className:"space-y-4",children:[e.jsxs("div",{className:"space-y-2",children:[e.jsx(O,{htmlFor:"key-label",children:"Label"}),e.jsx(g,{id:"key-label",value:b,onChange:a=>y(a.target.value),required:!0,autoFocus:!0})]}),e.jsxs(p,{children:[e.jsx(r,{variant:"outline",onClick:()=>l(!1),children:"Cancel"}),e.jsx(r,{type:"submit",disabled:i.isPending,children:"Generate"})]})]})]})}),e.jsx(M,{host:s,keyId:P,onClose:()=>v(null)})]})}function M({host:s,keyId:t,onClose:n}){const i=J(s,t??"");async function h(){try{await i.mutateAsync(),x.success("API key revoked"),n()}catch(l){x.error("Failed to revoke",{description:l instanceof Error?l.message:void 0})}}return e.jsx(K,{open:!!t,onOpenChange:()=>n(),children:e.jsxs(D,{children:[e.jsxs(w,{children:[e.jsx(I,{children:"Revoke API key?"}),e.jsx(T,{children:"This action cannot be undone. Any applications using this key will lose access."})]}),e.jsxs(p,{children:[e.jsx(r,{variant:"outline",onClick:n,children:"Cancel"}),e.jsx(r,{variant:"destructive",onClick:h,children:"Revoke"})]})]})})}export{te as ApiKeysPage};

package/admin/assets/AuditPage-DAPpo-sj.js

@@ -0,0 +1 @@
+import{u as x,j as e}from"./tanstack-BO6c-AOu.js";import{u as h,r as f}from"./react-vendor-DNVhVxD7.js";import{E as j,S as b,B as g}from"./index-Ds50UTAc.js";import{u as p}from"./useAdminResolver-BsQc_N4z.js";import{T as A,a as N,b as c,c as n,d as T,e as o}from"./table-B3EHrN_H.js";import{f as y}from"./format-CZ9bpk32.js";import"./radix-DQ3amgxj.js";function S(a,t){const d=j(),s=new URLSearchParams;t?.action&&s.set("action",t.action),t?.before&&s.set("before",String(t.before));const r=s.toString();return x({queryKey:["sites",a,"audit",t?.action??"",t?.before??""],queryFn:()=>d.apiFetch(`/v1/admin/sites/${a}/audit${r?`?${r}`:""}`),enabled:!!a})}function C(){const{host:a}=h(),[t,d]=f.useState(),{data:s,isLoading:r}=S(a,{before:t}),l=s?.items.map(i=>i.adminId)??[],{resolve:m}=p(l);return e.jsxs("div",{children:[e.jsx("h1",{className:"mb-6 text-2xl font-semibold",children:"Audit Log"}),r?e.jsx("div",{className:"space-y-2",children:Array.from({length:5}).map((i,u)=>e.jsx(b,{className:"h-12 w-full"},u))}):s?.items.length?e.jsxs(e.Fragment,{children:[e.jsxs(A,{children:[e.jsx(N,{children:e.jsxs(c,{children:[e.jsx(n,{children:"Action"}),e.jsx(n,{children:"Admin"}),e.jsx(n,{children:"Status"}),e.jsx(n,{children:"Time"})]})}),e.jsx(T,{children:s.items.map(i=>e.jsxs(c,{children:[e.jsx(o,{className:"font-medium",children:i.action}),e.jsx(o,{className:"text-sm",children:m(i.adminId)}),e.jsx(o,{children:e.jsx("span",{className:"text-muted-foreground",children:i.status})}),e.jsx(o,{className:"text-muted-foreground",children:y(i.createdAt)})]},i.eventId))})]}),s.hasMore&&s.items.length>0&&e.jsx("div",{className:"mt-4 flex justify-center",children:e.jsx(g,{variant:"outline",onClick:()=>d(s.items[s.items.length-1].createdAt),children:"Load More"})})]}):e.jsx("p",{className:"text-muted-foreground",children:"No audit events."})]})}export{C as AuditPage};