oclaw/interfaces/admin/static/js/router.js

import {
  state, t, el, mount, setActive, applyI18nStatic, getRoute,
  authStoreRemove, AUTH_TOKEN_KEY, AUTH_SESSION_KEY, getStoredAuthToken, apiPost,
} from "./core.js";
import { hasPermission, canManageApiGrants, isAdministratorUsername } from "./pages/authz.js";
import { renderStack } from "./pages/stack.js";
import { renderScheduledJobs } from "./pages/scheduled-jobs.js";
import { renderUserManagement } from "./pages/users.js";
import { renderMemory } from "./pages/memory.js";
import { renderModels } from "./pages/models.js";
import { renderAudit } from "./pages/audit.js";
import { renderPlugins } from "./pages/plugins.js";
import { renderSkills } from "./pages/skills.js";
import { renderAttachments } from "./pages/attachments.js";
import { renderWorkspacePaths } from "./pages/workspace-paths.js";
import { renderProfile } from "./pages/profile.js";
import { renderLogin } from "./pages/login.js";

async function router() {
  const route = getRoute();
  const page = route.page;
  const tok = getStoredAuthToken();
  if (!state.authSession || !tok) {
    if (state.authSession || tok) {
      authStoreRemove(AUTH_TOKEN_KEY);
      authStoreRemove(AUTH_SESSION_KEY);
      state.authSession = null;
    }
    try {
      await apiPost("/admin/api/auth/bootstrap", {});
    } catch (_) {}
    const loginCard = await renderLogin();
    mount(loginCard);
    return;
  }
  applyI18nStatic();
  setActive(page);
  document.querySelectorAll(".nav__item").forEach((a) => {
    const p = String(a.dataset.page || "");
    if (p === "stack" && !hasPermission("admin:runtime:write")) a.style.display = "none";
    else if (p === "scheduled-jobs" && !hasPermission("admin:read")) a.style.display = "none";
    else if (p === "users" && !hasPermission("admin:user:read")) a.style.display = "none";
    else if (p === "session-monitor" && !isAdministratorUsername()) a.style.display = "none";
    else if (p === "admin-audit" && !hasPermission("admin:user:write")) a.style.display = "none";
    else if (p === "plugins" && !hasPermission("admin:user:write")) a.style.display = "none";
    else if (p === "skills" && !hasPermission("admin:read")) a.style.display = "none";
    else if (p === "attachments" && !isAdministratorUsername()) a.style.display = "none";
    else if (p === "workspace-paths" && !hasPermission("admin:user:read") && !hasPermission("admin:workspace_paths:read")) a.style.display = "none";
    else if (p === "api-grants" && !canManageApiGrants()) a.style.display = "none";
    else a.style.display = "";
  });
  const user = document.getElementById("authUser");
  if (user) {
    const name = String((state.authSession && (state.authSession.display_name || state.authSession.username || state.authSession.user_id)) || "");
    const role = String((state.authSession && state.authSession.role) || "");
    user.textContent = name ? `${name} (${role})` : "";
  }
  const forbiddenCard = () =>
    el("div", { class: "card" }, [el("div", { class: "card__title", text: t("common.forbidden") })]);
  const mountPageLoading = (titleKey) => {
    mount(
      el("div", { class: "card" }, [
        el("div", { class: "card__title", text: t(titleKey) }),
        el("div", { class: "muted", text: t("chat.loading") }),
      ]),
    );
  };
  /** Let the browser paint the loading card before heavy page fetches/DOM work. */
  const yieldForPaint = () =>
    new Promise((resolve) => {
      requestAnimationFrame(() => resolve());
    });
  let view;
  if (page === "stack") {
    mountPageLoading("title.stack");
    await yieldForPaint();
    view = await renderStack();
  }
  else if (page === "scheduled-jobs") {
    view = hasPermission("admin:read") ? await renderScheduledJobs() : forbiddenCard();
  }
  else if (page === "users") {
    view = hasPermission("admin:user:read") ? await renderUserManagement() : forbiddenCard();
  } else if (page === "memory") view = await renderMemory();
  else if (page === "models") view = await renderModels();
  else if (page === "api-grants" || page === "session-monitor" || page === "admin-audit") {
    view = el("div", { class: "card" }, [
      el("div", { class: "card__title", text: t("common.notFound") }),
      el("div", { class: "muted", text: t("common.pageRemoved") }),
    ]);
  } else if (page === "audit") view = await renderAudit(route.params.get("session_id") || "");
  else if (false && page === "session-monitor") {
    view = isAdministratorUsername() ? await renderSessionMonitor() : el("div", { class: "card" }, [el("div", { class: "card__title", text: t("sessionMonitor.onlyAdministrator") })]);
  } else if (false && page === "admin-audit") {
    view = hasPermission("admin:user:write") ? await renderAdminAudit() : forbiddenCard();
  } else if (page === "plugins") {
    if (!hasPermission("admin:user:write")) {
      view = forbiddenCard();
    } else {
      mountPageLoading("title.plugins");
      await yieldForPaint();
      view = await renderPlugins();
    }
  } else if (page === "skills") {
    if (!hasPermission("admin:read")) {
      view = forbiddenCard();
    } else {
      mountPageLoading("title.skills");
      await yieldForPaint();
      view = await renderSkills();
    }
  } else if (page === "attachments") {
    view = isAdministratorUsername() ? await renderAttachments() : forbiddenCard();
  } else if (page === "workspace-paths") {
    view =
      hasPermission("admin:user:read") || hasPermission("admin:workspace_paths:read")
        ? await renderWorkspacePaths()
        : forbiddenCard();
  } else if (page === "profile") {
    view = await renderProfile();
  } else view = el("div", { class: "card" }, [el("div", { class: "card__title", text: t("common.notFound") })]);
  mount(view);
}


export { router };