init

.editorconfig

@@ -0,0 +1,21 @@
+[*.{css,scss,less,js,json,ts,sass,html,hbs,mustache,phtml,html.twig,md,yml}]
+charset = utf-8
+indent_style = space
+indent_size = 2
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+indent_size = 4
+trim_trailing_whitespace = false
+
+[site/templates/**.php]
+indent_size = 2
+
+[site/snippets/**.php]
+indent_size = 2
+
+[package.json,.{babelrc,editorconfig,eslintrc,lintstagedrc,stylelintrc}]
+indent_style = space
+indent_size = 2

.gitignore

@@ -0,0 +1,52 @@
+/content
+
+# System files
+# ------------
+
+Icon
+.DS_Store
+
+# Temporary files
+# ---------------
+
+/media/*
+!/media/index.html
+
+# Lock files
+# ---------------
+
+.lock
+
+# Editors
+# (sensitive workspace files)
+# ---------------------------
+*.sublime-workspace
+/.vscode
+/.idea
+
+# -------------SECURITY-------------
+# NEVER publish these files via Git!
+# -------------SECURITY-------------
+
+# Cache Files
+# ---------------
+
+/site/cache/*
+!/site/cache/index.html
+
+# Accounts
+# ---------------
+
+/site/accounts/*
+!/site/accounts/index.html
+
+# Sessions
+# ---------------
+
+/site/sessions/*
+!/site/sessions/index.html
+
+# License
+# ---------------
+
+/site/config/.license

.htaccess

@@ -0,0 +1,67 @@
+# Kirby .htaccess
+# revision 2023-07-22
+
+# rewrite rules
+<IfModule mod_rewrite.c>
+
+# enable awesome urls. i.e.:
+# http://yourdomain.com/about-us/team
+RewriteEngine on
+
+# make sure to set the RewriteBase correctly
+# if you are running the site in a subfolder;
+# otherwise links or the entire site will break.
+#
+# If your homepage is http://yourdomain.com/mysite,
+# set the RewriteBase to:
+#
+# RewriteBase /mysite
+
+# In some environments it's necessary to
+# set the RewriteBase to:
+#
+# RewriteBase /
+
+# block files and folders beginning with a dot, such as .git
+# except for the .well-known folder, which is used for Let's Encrypt and security.txt
+RewriteRule (^|/)\.(?!well-known\/) index.php [L]
+
+# block all files in the content folder from being accessed directly
+RewriteRule ^content/(.*) index.php [L]
+
+# block all files in the site folder from being accessed directly
+RewriteRule ^site/(.*) index.php [L]
+
+# block direct access to Kirby and the Panel sources
+RewriteRule ^kirby/(.*) index.php [L]
+
+# make site links work
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+RewriteRule ^(.*) index.php [L]
+
+</IfModule>
+
+# pass the Authorization header to PHP
+SetEnvIf Authorization "(.+)" HTTP_AUTHORIZATION=$1
+
+# compress text file responses
+<IfModule mod_deflate.c>
+AddOutputFilterByType DEFLATE text/plain
+AddOutputFilterByType DEFLATE text/html
+AddOutputFilterByType DEFLATE text/css
+AddOutputFilterByType DEFLATE text/javascript
+AddOutputFilterByType DEFLATE application/json
+AddOutputFilterByType DEFLATE application/javascript
+AddOutputFilterByType DEFLATE application/x-javascript
+</IfModule>
+
+# set security headers in all responses
+<IfModule mod_headers.c>
+
+# serve files as plain text if the actual content type is not known
+# (hardens against attacks from malicious file uploads)
+Header set Content-Type "text/plain" "expr=-z %{CONTENT_TYPE}"
+Header set X-Content-Type-Options "nosniff"
+
+</IfModule>

README.md

@@ -0,0 +1,36 @@
+<img src="http://getkirby.com/assets/images/github/plainkit.jpg" width="300">
+
+**Kirby: the CMS that adapts to any project, loved by developers and editors alike.**
+The Plainkit is a minimal Kirby setup with the basics you need to start a project from scratch. It is the ideal choice if you are already familiar with Kirby and want to start step-by-step.
+
+You can learn more about Kirby at [getkirby.com](https://getkirby.com).
+
+### Try Kirby for free
+
+You can try Kirby and the Plainkit on your local machine or on a test server as long as you need to make sure it is the right tool for your next project. … and when you’re convinced, [buy your license](https://getkirby.com/buy).
+
+### Get going
+
+Read our guide on [how to get started with Kirby](https://getkirby.com/docs/guide/quickstart).
+
+You can [download the latest version](https://github.com/getkirby/plainkit/archive/main.zip) of the Plainkit.
+If you are familiar with Git, you can clone Kirby's Plainkit repository from Github.
+
+    git clone https://github.com/getkirby/plainkit.git
+
+## What's Kirby?
+
+-   **[getkirby.com](https://getkirby.com)** – Get to know the CMS.
+-   **[Try it](https://getkirby.com/try)** – Take a test ride with our online demo. Or download one of our kits to get started.
+-   **[Documentation](https://getkirby.com/docs/guide)** – Read the official guide, reference and cookbook recipes.
+-   **[Issues](https://github.com/getkirby/kirby/issues)** – Report bugs and other problems.
+-   **[Feedback](https://feedback.getkirby.com)** – You have an idea for Kirby? Share it.
+-   **[Forum](https://forum.getkirby.com)** – Whenever you get stuck, don't hesitate to reach out for questions and support.
+-   **[Discord](https://chat.getkirby.com)** – Hang out and meet the community.
+-   **[Mastodon](https://mastodon.social/@getkirby)** – Spread the word.
+-   **[Instagram](https://www.instagram.com/getkirby/)** – Share your creations: #madewithkirby.
+
+---
+
+© 2009 Bastian Allgeier
+[getkirby.com](https://getkirby.com) · [License agreement](https://getkirby.com/license)

assets/style.css

@@ -0,0 +1,96 @@
+:root { --white: #f1edeb; --pink: #ff00ff; --green: #48bd8d; --lila: #8200ff; --orange: #ff6700; --black: #000 }
+
+html { font-family: VG5000; background: var(--white); font-size: 16pt; line-height: 30pt }
+body { margin: 0 }
+
+a { color: var(--black); }
+a:hover { color: var(--pink) }
+h1, h2, h3, h4, h5 { margin: 0 }
+figure { margin: 0 }
+
+h1, .text-40 { font-size: 40pt; line-height: 57pt; font-weight: normal }
+h2, .text-30 { font-size: 30pt; line-height: 29.5pt,;font-weight: normal }
+h3, .text-22 { font-size: 22pt; line-height: 29.5pt,;font-weight: normal }
+h4, .text-16 { font-size: 16pt; line-height: 29.5pt,;font-weight: normal }
+h5, .text-12 { font-size: 12pt; line-height: 15pt; font-weight: normal }
+
+.uppercase { text-transform: uppercase }
+
+.block { display: block !important }
+.flex { display: flex !important }
+
+.grid { display: grid; grid-template-columns: repeat(12, 1fr); grid-template-rows: auto; gap: 22pt }
+.grid > .column { grid-column: span var(--span); display: grid }
+.grid img { width: 100%; max-width: 100% }
+
+.border-top { border-top: 1px solid var(--black) }
+
+.leading-none { line-height: 1 }
+
+.font-kobata { font-family: Kobata !important; font-weight: normal }
+.font-vg5000 { font-family: VG5000 !important }
+
+.text-center { text-align: center }
+.align-self-center { align-self: center }
+
+code { font-family: Kobata !important; font-weight: normal }
+
+.bg-white-white, .bg-white-pink, .bg-white-green, .bg-white-lila, .bg-white-orange, .bg-white-black { background-color: var(--white) }
+.bg-pink-white, .bg-pink-pink, .bg-pink-green, .bg-pink-lila, .bg-pink-orange, .bg-pink-black { background-color: var(--pink) }
+.bg-green-white, .bg-green-pink, .bg-green-green, .bg-green-lila, .bg-green-orange, .bg-green-black { background-color: var(--green) }
+.bg-lila-white, .bg-lila-pink, .bg-lila-green, .bg-lila-lila, .bg-lila-orange, .bg-lila-black { background-color: var(--lila) }
+.bg-orange-white, .bg-orange-pink, .bg-orange-green, .bg-orange-lila, .bg-orange-orange, .bg-orange-black { background-color: var(--orange) }
+.bg-black-white, .bg-black-pink, .bg-black-green, .bg-black-lila, .bg-black-orange, .bg-black-black { background-color: var(--black) }
+
+.bg-white-white, .bg-pink-white, .bg-green-white, .bg-lila-white, .bg-orange-white, .bg-black-white { background-image: url("/assets/grid/white.png") }
+.bg-white-pink, .bg-pink-pink, .bg-green-pink, .bg-lila-pink, .bg-orange-pink, .bg-black-pink { background-image: url("/assets/grid/pink.png") }
+.bg-white-green, .bg-pink-green, .bg-green-green, .bg-lila-green, .bg-orange-green, .bg-black-green { background-image: url("/assets/grid/green.png") }
+.bg-white-lila, .bg-pink-lila, .bg-green-lila, .bg-lila-lila, .bg-orange-lila, .bg-black-lila { background-image: url("/assets/grid/lila.png") }
+.bg-white-orange, .bg-pink-orange, .bg-green-orange, .bg-lila-orange, .bg-orange-orange, .bg-black-orange { background-image: url("/assets/grid/orange.png") }
+.bg-white-black, .bg-pink-black, .bg-green-black, .bg-lila-black, .bg-orange-black, .bg-black-black { background-image: url("/assets/grid/black.png") }
+
+@media (min-resolution: 2x) {
+  .bg-white-white, .bg-pink-white, .bg-green-white, .bg-lila-white, .bg-orange-white, .bg-black-white { background-image: url("/assets/grid/white@2x.png"); background-size: 105px 78px }
+  .bg-white-pink, .bg-pink-pink, .bg-green-pink, .bg-lila-pink, .bg-orange-pink, .bg-black-pink { background-image: url("/assets/grid/pink@2x.png"); background-size: 105px 78px }
+  .bg-white-green, .bg-pink-green, .bg-green-green, .bg-lila-green, .bg-orange-green, .bg-black-green { background-image: url("/assets/grid/green@2x.png"); background-size: 105px 78px }
+  .bg-white-lila, .bg-pink-lila, .bg-green-lila, .bg-lila-lila, .bg-orange-lila, .bg-black-lila { background-image: url("/assets/grid/lila@2x.png"); background-size: 105px 78px }
+  .bg-white-orange, .bg-pink-orange, .bg-green-orange, .bg-lila-orange, .bg-orange-orange, .bg-black-orange { background-image: url("/assets/grid/orange@2x.png"); background-size: 105px 78px }
+  .bg-white-black, .bg-pink-black, .bg-green-black, .bg-lila-black, .bg-orange-black, .bg-black-black { background-image: url("/assets/grid/black@2x.png"); background-size: 105px 78px }
+}
+
+.container { padding: 22pt }
+
+.link { text-decoration: none; color: var(--black) }
+.link:hover { color: var(--lila) }
+
+.no-button { border: none; background: transparent; margin: 0; padding: 0 }
+.no-button:hover { cursor: pointer }
+
+.embed .iframe { display: none }
+.embed .iframe.active { padding:56.25% 0 0 0; position:relative }
+.embed .iframe.active iframe { position:absolute; top:0; left:0; width:100%; height:100% }
+.embed div { position: relative; }
+.embed video { width: 100%; }
+.embeded-iframe { border: none; width: 100% }
+
+.calendar-entry { display: grid; grid-template-columns: 199pt 508pt }
+
+.menu-button { display: none; width: 47px; height: 48px; flex-direction: column; justify-content: center; box-sizing: content-box }
+.menu-button div { width: 47px; height: 7px; background: var(--black) }
+.menu-button:hover { color: var(--lila) }
+.menu-button:hover div { background: var(--lila) }
+
+#menu-container { width: 498px; position: absolute; left: 0; top: 0; bottom: 0; pointer-events: none; }
+#menu-container button, #menu-container a { pointer-events: initial }
+nav { display: none }
+nav { height: 100%; padding-top: 89pt !important; justify-content: space-between; flex-direction: column; box-sizing: border-box; }
+nav > div { margin-left: -2px }
+
+#lang-switch { position: absolute; top: -3px; right: 0 }
+
+footer { background: var(--white) }
+
+.embed-btn { display:block; position:absolute !important; top:0; right:0; bottom:0; left:0; z-index:1; background-position:50%; background-size: 15.5% auto; background-repeat:no-repeat; background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 13 8'%3E%3Crect fill='rgba(0,0,0,.65)' width='13' height='8' rx='1' ry='1'/%3E%3Cpolygon fill='%23fff' points='5 6 9 4 5 2'/%3E%3C/svg%3E") }
+.embed-btn:hover { cursor: pointer; background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 13 8'%3E%3Crect fill='%231AB7EA' width='13' height='8' rx='1' ry='1'/%3E%3Cpolygon fill='%23fff' points='5 6 9 4 5 2'/%3E%3C/svg%3E") }
+.embed-btn.yt { background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 68 48'%3E%3Cpath fill='%23212121' fill-opacity='.8' d='M66.52,7.74c-0.78-2.93-2.49-5.41-5.42-6.19C55.79,.13,34,0,34,0S12.21,.13,6.9,1.55 C3.97,2.33,2.27,4.81,1.48,7.74C0.06,13.05,0,24,0,24s0.06,10.95,1.48,16.26c0.78,2.93,2.49,5.41,5.42,6.19 C12.21,47.87,34,48,34,48s21.79-0.13,27.1-1.55c2.93-0.78,4.64-3.26,5.42-6.19C67.94,34.95,68,24,68,24S67.94,13.05,66.52,7.74z'/%3E%3Cpath fill='%23fff' d='m45 24-18-10v20'/%3E%3C/svg%3E") }
+.embed-btn.yt:hover { background-image:url("data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 68 48'%3E%3Cpath fill='red' d='M66.52,7.74c-0.78-2.93-2.49-5.41-5.42-6.19C55.79,.13,34,0,34,0S12.21,.13,6.9,1.55 C3.97,2.33,2.27,4.81,1.48,7.74C0.06,13.05,0,24,0,24s0.06,10.95,1.48,16.26c0.78,2.93,2.49,5.41,5.42,6.19 C12.21,47.87,34,48,34,48s21.79-0.13,27.1-1.55c2.93-0.78,4.64-3.26,5.42-6.19C67.94,34.95,68,24,68,24S67.94,13.05,66.52,7.74z'/%3E%3Cpath fill='%23fff' d='m45 24-18-10v20'/%3E%3C/svg%3E") }

composer.json

@@ -0,0 +1,39 @@
+{
+  "name": "getkirby/plainkit",
+  "description": "Kirby Plainkit",
+  "type": "project",
+  "keywords": [
+    "kirby",
+    "cms",
+    "plainkit"
+  ],
+  "authors": [
+    {
+      "name": "Bastian Allgeier",
+      "email": "bastian@getkirby.com",
+      "homepage": "https://getkirby.com"
+    }
+  ],
+  "homepage": "https://getkirby.com",
+  "support": {
+    "email": "support@getkirby.com",
+    "forum": "https://forum.getkirby.com",
+    "source": "https://github.com/getkirby/plainkit"
+  },
+  "require": {
+    "php": "~8.1.0 || ~8.2.0 || ~8.3.0",
+    "getkirby/cms": "^4.0"
+  },
+  "config": {
+    "allow-plugins": {
+      "getkirby/composer-installer": true
+    },
+    "optimize-autoloader": true
+  },
+  "scripts": {
+    "start": [
+      "Composer\\Config::disableProcessTimeout",
+      "@php -S localhost:8000 kirby/router.php"
+    ]
+  }
+}

index.php

@@ -0,0 +1,5 @@
+<?php
+
+require 'kirby/bootstrap.php';
+
+echo (new Kirby)->render();

kirby/.editorconfig

@@ -0,0 +1,28 @@
+# This file is for unifying the coding style for different editors and IDEs
+# editorconfig.org
+
+# PHP PSR-12 Coding Standards
+# https://www.php-fig.org/psr/psr-12/
+
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_style = tab
+indent_size = 2
+trim_trailing_whitespace = true
+
+[*.php]
+indent_size = 4
+insert_final_newline = true
+
+[*.vue.php]
+indent_size = 2
+insert_final_newline = false
+
+[*.yml]
+indent_style = space
+
+[*.md]
+trim_trailing_whitespace = false

kirby/CONTRIBUTING.md

@@ -0,0 +1,101 @@
+# Contributing
+
+:+1::tada: First off, yes, you can contribute and thanks already for taking the time if you do! :tada::+1:
+
+## How we organize code
+
+To keep track of different states of our code (current release, bugfixes, features) we use branches:
+
+| Branch          | Used for                                                                 | PRs allowed?                |
+| --------------- | ------------------------------------------------------------------------ | --------------------------- |
+| `main`          | Latest released version                                                  | ❌                           |
+| `develop-patch` | Working branch for next patch release, e.g. `4.0.x`                      | ✅                          |
+| `develop-minor` | Working branch for next minor release, e.g. `4.x.0`                      | ✅                          |
+| `v5/develop`    | Working branch for next major release, e.g. `5.0.0`                      | ✅                          |
+| `fix/*`         | Temporary branches for single bugfix                                     | -                           |
+| `feature/*`     | Temporary branches for single feature                                    | -                           |
+| `release/*`     | Pre-releases in testing before they are merged into `main` when released | only during release testing |
+
+We will review all pull requests (PRs) to `develop-patch`, `develop-minor` and `v5/develop` and merge them if accepted, once an appropriate version is upcoming. Please understand that this might not be the immediate next release and might take some time.
+
+## How you can contribute
+
+### Report a bug
+
+When you find a bug, the first step to fixing it is to help us understand and reproduce the bug as best as possible. When you create a bug report, please include as many details as possible. Fill out [the template](https://github.com/getkirby/kirby/issues/new?template=bug_report.md) because the requested information helps us resolve issues so much faster.
+
+### Bug fixes
+
+For bug fixes, please create a new branch following the name scheme: `fix/issue_number-bug-x`, e.g. `fix/234-this-nasty-bug`. Limit bug fix PRs to a single bug. **Do not mix multiple bug fixes in a single PR.** This will make it easier for us to review the fix and merge it.
+
+- Always send bug fix PRs against the `develop-patch` branch––not `main`.
+- Add a helpful description of what the PR does if it is not 100% self-explanatory.
+- Every bug fix should include a [unit test](#tests) to avoid future regressions. Let us know if you need help with that.
+- Make sure your code [style](#style) matches ours and includes [comments/in-code documentation](#documentation).
+- Make sure your branch is up to date with the latest state on the `develop-patch` branch. [Rebase](https://help.github.com/articles/about-pull-request-merges/) changes before you send the PR.
+- Please *don't* commit updated dist files in the `panel/dist` folder to avoid merge conflicts. We only build the dist files on release. Your branch should only contain changes to the source files.
+
+### Features
+
+For features create a new branch following the name scheme: `feature/issue_number-feature-x`, e.g. `feature/123-awesome-function`. Our [feedback platform](https://feedback.getkirby.com) can be a good source of highly requested features. Maybe your feature idea already exists and you can get valuable feedback from other Kirby users. Focus on a single feature per PR. Don't mix features!
+
+- Always send feature PRs against the `develop-minor` branch––not `main`.
+- Add a helpful description of what the PR does.
+- New features should include [unit tests](#tests). Let us know if you need help with that.
+- Make your code [style](#style) matches ours and includes [comments/in-code documentation](#documentation).
+- Make sure your branch is up to date with the latest state on the `develop-minor` branch. [Rebase](https://help.github.com/articles/about-pull-request-merges/) changes before you send the PR.
+- Please *don't* commit updated dist files in the `panel/dist` folder to avoid merge conflicts. We only build the dist files on release. Your branch should only contain changes to the source files.
+
+We try to bundle features in our major releases, e.g. `5.0`. That is why we might only review and, if accepted, merge your PR once an appropriate release is upcoming. Please understand that we cannot merge all feature ideas or that it might take a while. Check out the [roadmap](https://roadmap.getkirby.com) to see upcoming releases.
+
+### Translations
+
+We are really happy about any help with translations. Please do not directly translate JSON files, though. We use a service called Transifex to handle [all translations](https://translation.getkirby.com/). Create an account there and send us a request to join our translator group. Additionally, also send an email to <support@getkirby.com>. Unfortunately, we don't get notified properly about new translator requests.
+
+## How we write code
+
+### Style
+
+#### Backend (PHP)
+
+We use [PHP CS Fixer](https://github.com/FriendsOfPHP/PHP-CS-Fixer) to ensure a consistent style for our PHP code. It is mainly based on [PSR-12](https://www.php-fig.org/psr/psr-12/). [Install PHP CS Fixer globally](https://github.com/FriendsOfPHP/PHP-CS-Fixer#globally-composer) via Composer and then run `composer fix` in the `kirby` folder to check for inconsistencies and fix them. Our automated PR checks will fail if there are code style issues with your code.
+
+#### Frontend/Panel (JavaScript, Vue)
+
+We use [Prettier](https://prettier.io) to ensure a consistent style for our JavaScript and Vue code. After running `npm install` in the `kirby/panel` folder, you can run `npm run format` to check for inconsistencies and fix them. We also use [ESLint](https://eslint.org) which you can use by running `npm run lint` and/or `npm run lint:fix`.
+
+### Documentation
+
+In-code documentation and comments help us understand each other's code - or our own code after some months. Especially when matters get more complicated, we try to add a lot of comments to explain what the code does or why we implemented it like this. Even better than good comments is good code that is easy to understand.
+
+#### Backend (PHP)
+
+We use PHP [DocBlocks](https://docs.phpdoc.org/guide/references/phpdoc/basic-syntax.html#what-is-a-docblock) for classes and methods.
+
+#### Frontend/Panel (JavaScript, Vue)
+
+We use [JSDoc](https://jsdoc.app) for documenting JavaScript code, especially for [Vue components](https://vue-styleguidist.github.io/docs/Documenting.html).
+
+#### Public documentation
+
+We also document Kirby on the Kirby website at <https://getkirby.com>. However we recommend to wait with writing public documentation until the feature PR is merged. If you don't know where the documentation for a feature best belongs, don't worry. We can take care of writing the docs.
+
+### Tests
+
+Unit and integration tests help us prevent regressions when we make changes to the code. Every bug fix should also add a unit test for the fixed bug to make sure we won't re-introduce the same problem later down the road. Every new feature should be accompanied by unit tests to protect it from breaking through future changes.
+
+#### Backend (PHP)
+
+We use [PHPUnit](https://phpunit.de) for unit test for our PHP code. You can find all existing tests in the [`kirby/tests` subfolders](https://github.com/getkirby/kirby/tree/main/tests). Take a look to see how we usually structure our tests.
+
+#### Frontend/Panel (JavaScript, Vue)
+
+The Panel doesn't have extensive test coverage yet. That's an area we are still trying to improve.
+
+We use [vitest](https://vitest.dev) for unit tests for JavaScript and Vue components - `.test.js` files next to the actual JavaScript/Vue file.
+
+## And last…
+
+Let us know [in the forum](https://forum.getkirby.com) if you have questions.
+
+**And once more: thank you!** :+1::tada:

kirby/LICENSE.md

@@ -0,0 +1,276 @@
+# Kirby License Agreement
+
+Published: November 28, 2023  
+Source: https://getkirby.com/license/2023-11-28
+
+## About this Agreement
+
+While Kirby's source code is publicly available, Kirby is **not free**. To use Kirby in production, you need to [purchase a license](https://getkirby.com/buy).
+
+This End User License Agreement (the **"Agreement"**) is fundamental to the relationship between you and us. Therefore we recommend to read this Agreement carefully before you download, install or use Kirby.
+
+If you do not agree to this Agreement, please do not download, install or use Kirby. Installation or use of Kirby signifies that you have read, understood, and agreed to be bound by this Agreement.
+
+## Summary
+
+This section summarizes the most important conditions of this Agreement to give you a quick overview:
+
+- With your purchase you obtain a license. A license allows you to use Kirby according to this Agreement.
+- Each project (defined by its URL) needs its own license. You need to purchase the right license for your project and/or client. You can find our license variants on <https://getkirby.com/buy>. In some explicitly listed cases, you can use Kirby without having to purchase a license.
+- Each license includes any Kirby version that gets released within three years from the date when you first activated your license. We also provide free security updates for older versions that may protect your project beyond three years.
+- After those three years, you can continue to use Kirby for your project with any of these versions as long as you want.
+- To use any newer version released after this time, you will need to upgrade your license.
+- Upgrading your license extends the timeframe for an additional three years during which you can use new releases. You can perform the upgrade at any time.
+- You have the right to transfer or reassign a license to another person or project if needed.
+- There are some restrictions for use of Kirby that you can find below.
+
+For the full license details, please read the Agreement in full. Only the following sections are legally binding.
+
+## Definitions
+
+Before we get started with the conditions of the Agreement, let's define the terms that will be used throughout it:
+
+- When we refer to **"You"**, we mean the licensee. Before purchasing Kirby, that's the individual or company that has downloaded and/or installed Kirby for a Development Installation, Private Installation or Extension Demo. When used for a Public Site, the licensee is the individual or company that has purchased the Kirby license. If you work on a client project and have purchased the Kirby license for your client, you (and _not_ the client) are the licensee.
+- When we refer to **"We"**/**"Us"**/**"Our"**, we mean the licensor, the Content Folder GmbH & Co. KG. You can find Our company and contact information on Our [contact page](https://getkirby.com/contact).
+- **"Client"** is the individual or company on whose behalf You create or work on a Website. This only applies if the client is not the licensee.
+- A **"Website"** is a single Kirby project that is defined by its domain name and root directory (e.g. `https://sub.example.com` or `https://example.com/example/`). Each (sub)domain and root directory is a separate Website, even if the projects are related in any way. Exception: If You use the cross-domain multi-language feature with the same `content` folder, these domains count as the same Website.
+  You may use Kirby as a headless backend or as a static site generator. In these cases the Website is defined by the domain and root directory of the user- or visitor-facing frontend(s).
+- A **"Development Installation"** is a Website that is installed purely for the purposes of development and client preview. It must only be accessible by a restricted number of users (like on a personal computer, on a server in a network with restricted access or when protecting a staging website with a password that only a restricted number of users know).
+- A **"Private Installation"** is a Website that is installed purely for personal use. It must only be accessible by You and Your family.
+- An **"Extension Demo"** is a Website with the single purpose to showcase a free or commercial Kirby theme or Kirby plugin, as long as that Website only contains demo content. If the showcased extension is a Kirby theme, the demo content must be exactly as shipped with the theme. Demos for Kirby plugins may _not_ contain any additional content that is not needed to showcase the plugin in use.
+- A **"Public Site"** is a Website that is _neither_ a Development Installation, a Private Installation nor an Extension Demo.
+- A **"Minor Release"** is a stable Kirby release which adds smaller new features, minor functionality enhancements or bug fixes. This class of release is identified by the change of the revision to the right of the first decimal point, e.g. 4.1 to 4.2, 4.X.1 to 4.X.2.
+- A **"Major Release"** is a stable Kirby release which incorporates major new features or enhancements that increase or change the core functionality of Kirby to a larger extent. It may also deprecate existing parts of the Source Code or change them in a breaking way. This class of release is identified by the change of the revision to the left of the first decimal point, e.g. 4.X to 5.0.
+- A **"Major Generation"** is defined as all releases that share the revision to the left of the first decimal point, e.g. 4.0.0, 4.0.X, 4.X.0 and 4.X.X.
+- The **"Source Code"** is defined as the contents of all files that are provided with Kirby and that make Kirby work. This includes (but is not limited to) all PHP, JavaScript, JSON, HTML and CSS files as well as all related image and other media files.
+- The **"Activation Date"** determines the included updates. It is defined like this:
+	- For a newly purchased license, it is the date when the license was first activated for use with a Public Site.
+	- When You upgrade an already activated license, it is the date on which the upgrade was performed in Our license hub. If the license is still within the Included Updates Period, the Activation Date of the upgrade license will be set to the end of the Included Updates Period of the existing license.
+	- When You upgrade a license that had _not_ been activated before, the upgrade license adopts the unactivated state of the existing license. The Activation Date is set on first activation for use with a Public Site.
+- The **"Included Updates Period"** is the time span of three (3) years after the Activation Date.
+- Licensees (You), Clients and Websites are **"Qualified"** if they satisfy the purchase requirements from the ["Order Process" section](#order-process) of this Agreement.
+
+Every time you see one of these capitalized terms in the following text, it has the meaning that has been explained above.
+
+## Usage for a Public Site
+
+Installing Kirby on or using it for a Public Site requires a [paid license](https://getkirby.com/buy). Once a paid license is needed, the license must be immediately activated to the Public Site’s domain name and root directory via our license hub or the activation feature in the Kirby Panel.
+
+As Kirby is software and software is intangible, We don't sell it as such. Instead, this Agreement grants a license for each purchase to install and use a single instance of Kirby on a **specific Website**. Additional Kirby licenses must be purchased in order to install and use Kirby on **additional Websites**.
+
+The license is **non-exclusive** (meaning that You are not the only one to whom We will issue a license) and **generally non-transferable** (meaning that the one who purchases the license is the licensee).
+
+On request, We will **transfer** a license to anyone who would be allowed and Qualified to purchase the license by law and this Agreement. The new licensee will take over all rights and obligations of this Agreement from You at the moment We confirm the license transfer.
+
+We will also **reassign** a license to another Qualified Website domain and root directory, if You confirm that the previous Website is no longer in operation and will not be operated with the same license in the future.
+
+If the new licensee, Website or Client in a transfer or reassignment is not Qualified for the existing license, You or the new licensee need to **upgrade the license to the qualifying terms and conditions** before the transfer or reassignment can be performed.
+
+> [!NOTE]
+> If you need to transfer your Kirby license to another individual or company (for example to your client or a new agency) or reassign it to a different project, please get in touch directly at <support@getkirby.com>.
+
+A license is valid for all Major Releases that We publish before the end of the Included Updates Period. It is also valid for all releases in those Major Generations independent of their release date. Whether a release is a Minor Release or Major Release is at Our sole discretion.
+
+The use of releases in Major Generations that We publish after the Included Updates Period requires a **paid license upgrade**. An upgrade license replaces the existing license.
+
+## Order Process
+
+Our order process is conducted by Our online reseller [Paddle.com](https://paddle.com). Paddle.com is the Merchant of Record for all Our orders. Paddle provides all customer service inquiries and handles returns.
+
+When purchasing a license, You are **responsible to choose the right license** based on You and the Website project. Different license variants can come with certain requirements towards You and/or the Website project. We publish all such requirements on <https://getkirby.com/buy> in a way that makes them clearly visible before the purchase. With Your purchase, You confirm that You and the Website project qualify for the selected license variant.
+
+If the Website is created for a Client, You need to make sure that the **Client qualifies for the selected license**.
+
+If You purchase licenses **in advance**, You need to ensure to only use the license(s) for projects that satisfy the requirements for the selected license variant(s).
+
+We **reserve the right to verify** at any time after the purchase whether You, the Website and (if applicable) the Client are Qualified. Changes to the situation of You, the Website or the Client as well as changes to the published information on Our "Buy" page after the purchase or after the assignment to a Client do _not_ take effect on an existing license unless You upgrade the license or We transfer or reassign the license on Your request.
+
+## Free Licenses
+
+Kirby can be used **for free in the following cases**.
+
+> [!NOTE]
+> Please note that the restrictions and all other clauses of this Agreement also apply to free licenses. You may especially _not_ alter or circumvent the licensing features.
+
+### Usage for a Development Installation
+
+We believe that it should be possible to test and evaluate software before having to purchase a license. Also, We understand that a web project first needs to be built in a protected environment before it can be published.
+
+Therefore, installing and using Kirby on a personal computer (like a desktop PC, notebook or tablet) or server for a Development Installation is **free** for as long as You need.
+
+> [!NOTE]
+> The usage of Kirby in production (with the intention to handle production data or content) is _never_ considered a Development Installation, even in internal apps or systems.
+
+### Usage for a Private Installation
+
+You may also install and use Kirby for **free** in Private Installations as long as they are not accessible by anyone except You and Your family.
+
+> [!NOTE]
+> Our [definition](#definitions) of a Private Installation allows the following use cases:
+>
+> - Private sites for personal use, for example:
+>   - Apps for You personally (like a personal diary)
+>   - Apps for You as a freelancer (like a bookkeeping, invoicing or project management app)
+>   - Apps for Your family (like a private photo gallery)
+> - Experimental local Kirby setups for Your personal use (for example to try out Kirby features)
+> 
+> However, the following use cases are _not_ covered and need a **[paid license](#usage-for-a-public-site)**:
+>
+> - Intranets for companies, authorities or organizations, no matter if on a local or public server
+> - (Internal) apps for teams or entire companies, authorities or organizations
+> - Websites that are accessible by the public, even for personal/non-commercial purposes
+> - Use of Kirby as a local CMS for a static or headless site without a license for the frontend domain(s)
+
+### Usage for an Extension Demo
+
+Extension Demos are not real Websites. We want to encourage you to build and showcase your themes and plugins.
+
+Therefore, You may **operate Extension Demos without purchasing a license**.
+
+> [!NOTE]
+> Please note that this does _not_ apply to store fronts or other types of sites used to promote free or commercial themes or plugins. If such a site is built with Kirby as well, it is a Public Site and needs a **[paid license](#usage-for-a-public-site)**.
+
+## Restrictions
+
+### Legal Restrictions
+
+You may only use Kirby in a manner that complies with any and all **applicable laws** in the jurisdictions in which You use Kirby. Please respect all applicable restrictions concerning **privacy and intellectual property rights**.
+
+### Making Copies
+
+You may make **copies of Kirby** in any machine readable form solely for the **following purposes**, provided that You reproduce Kirby in its original form and with all proprietary notices on the copy:
+
+- when deploying a Website to a server,
+- when developing a Website on a personal computer or server,
+- when working on code contributions to Kirby or
+- as a backup.
+
+You may _not_ reproduce Kirby or its Source Code, in whole or in part, for **any other purpose**.
+
+### Modification of the Source Code
+
+You may **alter, modify or extend the Source Code** for Your own use or with the intention to contribute Your changes back to Kirby. You may also **commission a third party** to perform those modifications for You.
+
+However You may _not_:
+
+- **alter or circumvent the licensing features**, including (but not limited to) the license validation and payment prompts or
+- **resell, redistribute or transfer** the modified or derivative version.
+
+> [!NOTE]
+> Please note that We **can't provide technical support** for modified or derivative versions of the Source Code.
+
+### Your Relationship to Third Parties
+
+You are generally _not_ allowed to **sell, assign, license, disclose, distribute, or otherwise transfer or make available** Kirby or its Source Code, in whole or in part, in any form to any third parties.
+
+The following cases are exempted from this restriction:
+
+- Kirby licenses may be transferred to a new licensee by requesting the transfer from Us ([see above](#usage-for-a-public-site)).
+- You may create Websites for third parties (e.g. as an agency or freelancer for a client). Together with this Website, You may bill Your client for the used Kirby license. You may also include the license price in a flat rate. Please note that the licensee in both of these cases is still You unless You request to transfer the license to Your client. If Your price exceeds the price You paid to Us, You need to give Your client the option to purchase the license directly from Us.
+- You may make Kirby available to customers via a Software-as-a-Service (SaaS) offering, provided You ensure that each Website has a valid Kirby license purchased either by You or Your customer. If multiple customers share a Website, each customer needs at least one license. Your offering _must not_ appear to be provided or officially endorsed by Us.
+- You may make a Kirby installation available to employees or partners of You or Your Website client. You may also disclose and distribute Kirby’s Source Code to Your client together with the source code of the Website You created for them.
+- You may disclose the Source Code to individuals or companies that are involved in the development or operation of Your Website (e.g. agencies, design or development freelancers, hosting providers or administrators).
+
+> [!NOTE]
+> E.g. the following cases are explicitly **_not_ allowed**:
+> 
+> - Selling, licensing or distributing a new product based on Kirby that modifies or hides Kirby’s identity as a Content Management System (CMS)
+> - Forking Kirby and selling the modified version ([see above](#modification-of-the-source-code))
+> - Buying licenses in bulk and reselling them in your own shop
+> - Bundling or including Kirby’s Source Code in the publication and/or distribution of a Website’s source code or a (free or paid) theme or plugin (please use Git submodules or Composer or provide a link to Our repository or website instead)
+
+### Disallowed Uses
+
+The following uses of Kirby are _not_ covered by this Agreement and will result in the termination of the license:
+
+- Direct or indirect use of Kirby in **critical infrastructure** (e.g. water and energy services, public health, financial services, public security services) or **high-risk environments** (e.g. handling of harmful or dangerous materials). The use in Websites without connection to core processes is allowed.
+- Use of Kirby for Websites that contain **misinformation, hate speech or discriminating content** based on age, gender, gender identity, race, sexuality, religion, nationality, serious illnesses or disabilities, no matter who authored this content. Misinformation is defined as content that is false or misleading and may lead to significant risk of physical or societal harm.
+- Use of Kirby by **companies or individuals who**:
+  - lobby for, promote, derive a majority of income from or are significantly invested in:
+    - the production of tobacco or weapons,
+    - any prison or jail operated for profit,
+    - any action or facility that supports or contributes to:
+      - gambling, adversely addictive behaviours or
+      - deforestation.
+  - lobby against, or derive a majority of income from actions that discourage or frustrate:
+    - peace,
+    - access to the rights set out in the Universal Declaration of Human Rights and the Convention on the Rights of the Child,
+    - peaceful assembly and association (including worker associations),
+    - a safe environment or action to curtail the use of fossil fuels or to prevent climate change or
+    - democratic processes.
+
+### Other Restrictions
+
+You may also _not_:
+
+- **extract parts of the Source Code** for use in other programs or projects (unless the code file in question is explicitly licensed under the terms of the MIT license) or
+- **remove or alter any proprietary notices** on Kirby.
+
+## Technical Support
+
+Technical support is **provided as described on Our website** at <https://getkirby.com>. **No representations or guarantees** are made regarding the response time in which support questions are answered, however We will do Our best to respond quickly.
+
+For each Major Generation, We aim to provide **security support for three (3) years** after the Major Release. Security support means that We will provide free security updates for the supported releases, which will include fixes for security vulnerabilities according to the following rules:
+	- We published a security advisory on <https://getkirby.com/security> within the respective security support period. We will publish vulnerabilities on this page as soon as they are known to Us and an official fix for any supported release is available.
+	- The latest release of the supported Major Generation is affected by the vulnerability.
+
+With each vulnerability, We aim to publish the security advisory and security updates for all supported Major Generations at the same time.
+
+> [!NOTE]
+> You can find up-to-date information on our currently supported versions in our [public security policy](https://getkirby.com/security).
+
+We reserve the right to **limit technical support for free licenses**.
+
+## Refund Policy
+
+We offer a **14-day**, money back refund policy if Kirby didn't work out for Your project.
+
+> [!NOTE]
+> If you need a refund, please get in touch directly at <support@getkirby.com>.
+
+## No Warranty
+
+KIRBY IS OFFERED ON AN **"AS-IS" BASIS** AND **NO WARRANTY**, EITHER EXPRESSED OR IMPLIED, IS GIVEN. WE EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. YOU ASSUME ALL RISK ASSOCIATED WITH THE QUALITY, PERFORMANCE, INSTALLATION AND USE OF KIRBY INCLUDING, BUT NOT LIMITED TO, THE RISKS OF PROGRAM ERRORS, DAMAGE TO EQUIPMENT, LOSS OF DATA OR SOFTWARE PROGRAMS, OR UNAVAILABILITY OR INTERRUPTION OF OPERATIONS. **YOU ARE SOLELY RESPONSIBLE** FOR DETERMINING THE APPROPRIATENESS OF USE OF KIRBY AND ASSUME ALL RISKS ASSOCIATED WITH ITS USE. THIS PARAGRAPH ALSO APPLIES TO YOU IF YOU ARE NOT THE LICENSEE (E.G. IF YOU USE KIRBY WHILE SOMEONE ELSE IS THE LICENSEE).
+
+## Term, Termination and Modification
+
+You may **indefinitely use** all Kirby versions that are covered by Your license under this Agreement until either party **terminates this Agreement** as described in this section.
+
+**You** may terminate the Agreement at any time.
+
+**We** may only terminate the Agreement if You or any individual or company who works with Kirby or uses it on Your behalf has violated or failed to comply with terms of this Agreement. If Your compliance with the Agreement can be restored by fixing the violation or non-compliance, We will first contact You with information on the specific term that was violated or not complied with and will allow reasonable time of at least 14 days before We will decide on a license termination. Should We be in the position to terminate a license according to this paragraph, other or all licenses granted to You may be terminated for the same reason(s) at the same time or at any later date.
+
+Termination takes effect upon notice to the other party in textual form (via email or letter). Upon termination, the specified **licenses granted to You will terminate**, and You will **immediately uninstall and cease all use** of Kirby. If not all licenses are terminated, You may continue to use Kirby for the Websites with active licenses. The sections entitled "No Warranty", "Indemnification" and "Limitation of Liability" will **survive any termination** of this Agreement.
+
+We may **modify Kirby and this Agreement** with notice to You either via email or by publishing content on the Kirby website at https://getkirby.com, including but not limited to changing the functionality or appearance of Kirby. Any such modification will **become binding on You** unless You terminate this Agreement. Changes to this Agreement that constrain Your rights to a great extent will only become effective with Your approval in textual or electronic form.
+
+## Indemnification
+
+By accepting the Agreement, you **agree to indemnify and otherwise hold harmless** Us as well as Our officers, employees, agents, subsidiaries, affiliates and other partners from any direct, indirect, incidental, special, consequential or exemplary damages arising out of, relating to, or resulting from your use of Kirby or any other matter relating to Kirby. This paragraph also applies to you if you are not the licensee (e.g. if you use Kirby while someone else is the licensee).
+
+## Limitation of Liability
+
+YOU EXPRESSLY UNDERSTAND AND AGREE THAT **WE SHALL NOT BE LIABLE** FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO, DAMAGES FOR LOSS OF PROFITS, GOODWILL, USE, DATA OR OTHER INTANGIBLE LOSSES (EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES). SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES. ACCORDINGLY, **SOME OF THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU**. **IN NO EVENT WILL OUR TOTAL CUMULATIVE DAMAGES EXCEED** THE FEES YOU PAID TO US UNDER THIS AGREEMENT IN THE MOST RECENT TWELVE-MONTH PERIOD. THIS PARAGRAPH ALSO APPLIES TO YOU IF YOU ARE NOT THE LICENSEE (E.G. IF YOU USE KIRBY WHILE SOMEONE ELSE IS THE LICENSEE).
+
+## All Rights Reserved
+
+Bastian Allgeier **owns all rights**, title and interest to Kirby (including all intellectual property rights) and **reserves all rights to Kirby** that are not expressly granted in this Agreement.
+
+In the event that Kirby will no longer be actively maintained, Bastian Allgeier will provide the Source Code under the terms of a free and open source software (FOSS) license as far as legally and contractually possible.
+
+## Applicable Law & Place of Jurisdiction
+
+1. For all disputes arising out of or in connection with this Agreement, the courts competent for Neckargemünd, Germany, shall have exclusive jurisdiction. However, We shall have the choice to file lawsuits against You before the courts competent for Your place of business.
+2. If You reside in Germany, para. 1 shall only apply if You are a merchant, a legal entity under public law or a special fund under public law.
+3. If You don't reside in Germany, but in a different member state of the European Union, para. 1 shall only apply if You are not a consumer under Art. 17 of the regulation (EU) No. 1215/2012. In that case, You shall be entitled to file actions against Us either at Our place of business or at the courts competent at the place where You usually reside. We, on the other hand, are only entitled to bring proceedings against You in the courts of the Member State in which You are domiciled.
+4. If You neither reside in Germany nor in a member state of the EU, the applicability of para. 1 remains unaffected.
+
+## Severability Clause
+
+Should any provision of this Agreement be or become invalid, void or unenforceable, in whole or in part, at present or in the future, this shall not affect the validity of the remaining provisions of this Agreement. The same shall apply if a gap requiring supplementation arises after conclusion of this Agreement. The parties shall replace the invalid, void or unenforceable provision or gap requiring filling by a valid provision which in its legal or economic content takes account of the invalid, void provision and the overall content of the agreement. § Section 139 of the German Civil Code (partial invalidity) is expressly waived.
+
+## Questions?
+
+Due to Kirby's flexibility, you may have special use cases or requirements that don't fit this Agreement.
+
+If that's the case or if you have any questions, feel free to [get in touch](mailto:support@getkirby.com). We are happy to think outside the box and find custom license solutions for your creative application of Kirby.

kirby/README.md

@@ -0,0 +1,49 @@
+[<img src="https://getkirby.com/assets/images/github/kirby.jpg" width="300">](https://getkirby.com)
+
+[![Release](https://img.shields.io/github/v/release/getkirby/kirby)](https://github.com/getkirby/kirby/releases/latest)
+[![CI Status](https://img.shields.io/github/actions/workflow/status/getkirby/kirby/ci.yml?branch=main&label=CI)](https://github.com/getkirby/kirby/actions?query=workflow%3ACI+branch%3Amain)
+[![Coverage Status](https://img.shields.io/codecov/c/gh/getkirby/kirby?token=ROZ2RVA0OF)](https://codecov.io/gh/getkirby/kirby)
+[![Downloads](https://img.shields.io/packagist/dt/getkirby/cms?color=red)](https://github.com/getkirby/kirby/releases/latest)
+
+**Kirby: the CMS that adapts to any project, loved by developers and editors alike.**  
+With Kirby, you build your own ideal interface. Combine forms, galleries, articles, spreadsheets and more into an amazing editing experience. You can learn more about Kirby at [getkirby.com](https://getkirby.com).
+
+This is Kirby's core application folder. Get started with one of the following repositories instead:
+
+- [Starterkit](https://github.com/getkirby/starterkit)
+- [Plainkit](https://github.com/getkirby/plainkit)
+
+<img src="https://getkirby.com/assets/images/github/kirby-screen.png" />
+
+### Try Kirby for free
+
+Kirby is not free software. However, you can try Kirby and the Starterkit on your local machine or on a test server as long as you need to make sure it is the right tool for your next project. … and when you’re convinced, [buy your license](https://getkirby.com/buy).
+
+### Contribute
+
+**Found a bug?**  
+Please post all bugs as individual reports in our [issue tracker](https://github.com/getkirby/kirby/issues).
+
+**Suggest a feature**  
+If you have ideas for a feature or enhancement for Kirby, please use our [feedback platform](https://feedback.getkirby.com).
+
+**Translations, bug fixes, code contributions ...**  
+Read about how to contribute to the development in our [contributing guide](/CONTRIBUTING.md).
+
+## What's Kirby?
+
+- **[getkirby.com](https://getkirby.com)** – Get to know the CMS.
+- **[Try it](https://getkirby.com/try)** – Take a test ride with our online demo. Or download one of our kits to get started.
+- **[Documentation](https://getkirby.com/docs/guide)** – Read the official guide, reference and cookbook recipes.
+- **[Issues](https://github.com/getkirby/kirby/issues)** – Report bugs and other problems.
+- **[Feedback](https://feedback.getkirby.com)** – You have an idea for Kirby? Share it.
+- **[Forum](https://forum.getkirby.com)** – Whenever you get stuck, don't hesitate to reach out for questions and support.
+- **[Discord](https://chat.getkirby.com)** – Hang out and meet the community.
+- **[YouTube](https://youtube.com/kirbyCasts)** - Watch the latest video tutorials visually with Bastian.
+- **[Mastodon](https://mastodon.social/@getkirby)** – Spread the word.
+- **[Instagram](https://www.instagram.com/getkirby/)** – Share your creations: #madewithkirby.
+
+---
+
+© 2009 Bastian Allgeier
+[getkirby.com](https://getkirby.com) · [License agreement](https://getkirby.com/license)

kirby/SECURITY.md

@@ -0,0 +1,27 @@
+# Security Policy
+
+## Supported versions and past security incidents
+
+You can find up-to-date information on the security status of each version on <https://getkirby.com/security>.
+
+## Security of your Kirby site
+
+We have a detailed [security guide](https://getkirby.com/docs/guide/security) with information on how to keep your Kirby installation secure.
+
+## Reporting a vulnerability
+
+If you have spotted a vulnerability in Kirby's core or the Panel, please make sure to let us know immediately. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
+
+You can always contact us directly at **<security@getkirby.com>**.  
+If you want to encrypt your message, our GPG key is [6E6B 057A F491 FFAD 363F  6F49 9101 10FA A459 E120](https://getkirby.com/pgp.asc).
+
+You can also use the [security advisory form on GitHub](https://github.com/getkirby/kirby/security/advisories/new) to securely and privately report a vulnerability to us.
+
+We will send you a response as soon as possible and will keep you informed on our progress towards a fix and announcement.
+
+> [!IMPORTANT]
+> Please do not write to us publicly, e.g. in the forum, on Discord or in a GitHub issue. A public report can give attackers valuable time to exploit the issue before it is fixed.
+> 
+> By letting us know directly and coordinating the disclosure with us, you can help to protect other Kirby users from such attacks.
+> 
+> Also please do *not* request a CVE ID from organizations like MITRE. The responsible CVE Numbering Authority (CNA) for Kirby is GitHub. We can and will request a CVE ID for each confirmed vulnerability and will provide it to you in advance of the coordinated release.

kirby/assets/whoops.css

@@ -0,0 +1,83 @@
+body {
+  background: #efefef;
+  font: normal normal 400 12px/1.5 -apple-system, BlinkMacSystemFont, Segoe UI,
+    Roboto, Helvetica, Arial, sans-serif;
+}
+
+.left-panel {
+  background: transparent;
+}
+
+header {
+  background-color: #313740;
+}
+
+.exc-title-primary {
+  color: hsl(0, 71%, 55%);
+}
+
+.frame.active {
+  color: hsl(0, 71%, 55%);
+  box-shadow: inset -5px 0 0 0 #d16464;
+}
+
+.frame:not(.active):hover {
+  background: rgba(203, 215, 229, 0.5);
+}
+
+.rightButton {
+  color: #999;
+  box-shadow: inset 0 0 0 1px #777;
+  border-radius: 0;
+}
+
+.rightButton:hover {
+  box-shadow: inset 0 0 0 1px #555;
+  color: #777;
+}
+
+.details-heading {
+  color: #7e9abf;
+  font-weight: 500;
+}
+
+.frame-code {
+  background: #000;
+}
+
+pre.code-block,
+code.code-block,
+.frame-args.code-block,
+.frame-args.code-block samp {
+  background: #16171a;
+}
+
+.linenums li.current {
+  background: transparent;
+}
+
+.linenums li.current.active {
+  background: rgba(209, 100, 100, 0.3);
+}
+
+pre .atv,
+code .atv,
+pre .str,
+code .str {
+  color: #a7bd68;
+}
+
+pre .tag,
+code .tag {
+  color: #d16464;
+}
+
+pre .kwd,
+code .kwd {
+  color: #8abeb7;
+}
+
+pre .atn,
+code .atn {
+  color: #de935f;
+}

kirby/bootstrap.php

@@ -0,0 +1,36 @@
+<?php
+
+/**
+ * Validate the PHP version to already
+ * stop at older or too recent versions
+ */
+if (
+	version_compare(PHP_VERSION, '8.1.0', '>=') === false ||
+	version_compare(PHP_VERSION, '8.4.0', '<')  === false
+) {
+	die(include __DIR__ . '/views/php.php');
+}
+
+if (is_file($autoloader = dirname(__DIR__) . '/vendor/autoload.php')) {
+	/**
+	 * Always prefer a site-wide Composer autoloader
+	 * if it exists, it means that the user has probably
+	 * installed additional packages
+	 *
+	 * @psalm-suppress MissingFile
+	 */
+	include $autoloader;
+} elseif (is_file($autoloader = __DIR__ . '/vendor/autoload.php')) {
+	/**
+	 * Fall back to the local autoloader if that exists
+	 *
+	 * @psalm-suppress MissingFile
+	 */
+	include $autoloader;
+} else {
+	/**
+	 * If neither one exists, don't bother searching;
+	 * it's a custom directory setup and the users need to
+	 * load the autoloader themselves
+	 */
+}

kirby/composer.json

@@ -0,0 +1,115 @@
+{
+	"name": "getkirby/cms",
+	"description": "The Kirby core",
+	"license": "proprietary",
+	"type": "kirby-cms",
+	"version": "4.3.1",
+	"keywords": [
+		"kirby",
+		"cms",
+		"core"
+	],
+	"authors": [
+		{
+			"name": "Kirby Team",
+			"email": "support@getkirby.com",
+			"homepage": "https://getkirby.com"
+		}
+	],
+	"homepage": "https://getkirby.com",
+	"support": {
+		"email": "support@getkirby.com",
+		"issues": "https://github.com/getkirby/kirby/issues",
+		"forum": "https://forum.getkirby.com",
+		"source": "https://github.com/getkirby/kirby"
+	},
+	"require": {
+		"php": "~8.1.0 || ~8.2.0 || ~8.3.0",
+		"ext-SimpleXML": "*",
+		"ext-ctype": "*",
+		"ext-curl": "*",
+		"ext-dom": "*",
+		"ext-filter": "*",
+		"ext-hash": "*",
+		"ext-iconv": "*",
+		"ext-json": "*",
+		"ext-libxml": "*",
+		"ext-mbstring": "*",
+		"ext-openssl": "*",
+		"christian-riesen/base32": "1.6.0",
+		"claviska/simpleimage": "4.2.0",
+		"composer/semver": "3.4.0",
+		"filp/whoops": "2.15.4",
+		"getkirby/composer-installer": "^1.2.1",
+		"laminas/laminas-escaper": "2.13.0",
+		"michelf/php-smartypants": "1.8.1",
+		"phpmailer/phpmailer": "6.9.1",
+		"symfony/polyfill-intl-idn": "1.29.0",
+		"symfony/polyfill-mbstring": "1.29.0",
+		"symfony/yaml": "6.4.8"
+	},
+	"replace": {
+		"symfony/polyfill-php72": "*"
+	},
+	"suggest": {
+		"ext-PDO": "Support for using databases",
+		"ext-apcu": "Support for the Apcu cache driver",
+		"ext-exif": "Support for exif information from images",
+		"ext-fileinfo": "Improved mime type detection for files",
+		"ext-intl": "Improved i18n number formatting",
+		"ext-memcached": "Support for the Memcached cache driver",
+		"ext-sodium": "Support for the crypto class and more robust session handling",
+		"ext-zip": "Support for ZIP archive file functions",
+		"ext-zlib": "Sanitization and validation for svgz files"
+	},
+	"autoload": {
+		"psr-4": {
+			"Kirby\\": "src/"
+		},
+		"classmap": [
+			"dependencies/"
+		],
+		"files": [
+			"config/setup.php",
+			"config/helpers.php"
+		]
+	},
+	"config": {
+		"allow-plugins": {
+			"getkirby/composer-installer": true
+		},
+		"optimize-autoloader": true,
+		"platform": {
+			"php": "8.1.0"
+		},
+		"platform-check": false
+	},
+	"extra": {
+		"unused": [
+			"symfony/polyfill-intl-idn"
+		]
+	},
+	"scripts": {
+		"post-update-cmd": "curl -o cacert.pem https://curl.se/ca/cacert.pem",
+		"analyze": [
+			"@analyze:composer",
+			"@analyze:psalm",
+			"@analyze:phpmd"
+		],
+		"analyze:composer": "composer validate --strict --no-check-version --no-check-all",
+		"analyze:phpmd": "phpmd . ansi phpmd.xml.dist --exclude 'dependencies/*,tests/*,vendor/*'",
+		"analyze:psalm": "psalm",
+		"bench": "phpbench run --report=aggregate --ref baseline",
+		"bench:baseline": "phpbench run --report=aggregate --tag baseline",
+		"build": "./scripts/build",
+		"ci": [
+			"@fix",
+			"@analyze",
+			"@test"
+		],
+		"fix": "php-cs-fixer fix",
+		"test": "phpunit",
+		"test:coverage": "XDEBUG_MODE=coverage phpunit --coverage-html=tests/coverage",
+		"zip": "composer archive --format=zip --file=dist"
+	}
+}

kirby/config/aliases.php

@@ -0,0 +1,95 @@
+<?php
+
+return [
+	// cms classes
+	'collection' => 'Kirby\Cms\Collection',
+	'file'       => 'Kirby\Cms\File',
+	'files'      => 'Kirby\Cms\Files',
+	'find'       => 'Kirby\Cms\Find',
+	'helpers'    => 'Kirby\Cms\Helpers',
+	'html'       => 'Kirby\Cms\Html',
+	'kirby'      => 'Kirby\Cms\App',
+	'page'       => 'Kirby\Cms\Page',
+	'pages'      => 'Kirby\Cms\Pages',
+	'pagination' => 'Kirby\Cms\Pagination',
+	'r'          => 'Kirby\Cms\R',
+	'response'   => 'Kirby\Cms\Response',
+	's'          => 'Kirby\Cms\S',
+	'sane'       => 'Kirby\Sane\Sane',
+	'site'       => 'Kirby\Cms\Site',
+	'structure'  => 'Kirby\Cms\Structure',
+	'url'        => 'Kirby\Cms\Url',
+	'user'       => 'Kirby\Cms\User',
+	'users'      => 'Kirby\Cms\Users',
+	'visitor'    => 'Kirby\Cms\Visitor',
+
+	// content classes
+	'field'      => 'Kirby\Content\Field',
+
+	// data handler
+	'data'      => 'Kirby\Data\Data',
+	'json'      => 'Kirby\Data\Json',
+	'yaml'      => 'Kirby\Data\Yaml',
+
+	// file classes
+	'asset'      => 'Kirby\Filesystem\Asset',
+	'dir'        => 'Kirby\Filesystem\Dir',
+	'f'          => 'Kirby\Filesystem\F',
+	'mime'       => 'Kirby\Filesystem\Mime',
+
+	// data classes
+	'database'  => 'Kirby\Database\Database',
+	'db'        => 'Kirby\Database\Db',
+
+	// exceptions
+	'errorpageexception' => 'Kirby\Exception\ErrorPageException',
+
+	// http classes
+	'cookie'     => 'Kirby\Http\Cookie',
+	'header'     => 'Kirby\Http\Header',
+	'remote'     => 'Kirby\Http\Remote',
+
+	// image classes
+	'dimensions' => 'Kirby\Image\Dimensions',
+
+	// panel classes
+	'panel'      => 'Kirby\Panel\Panel',
+
+	// template classes
+	'snippet'    => 'Kirby\Template\Snippet',
+	'slot'       => 'Kirby\Template\Slot',
+
+	// toolkit classes
+	'a'          => 'Kirby\Toolkit\A',
+	'c'          => 'Kirby\Toolkit\Config',
+	'config'     => 'Kirby\Toolkit\Config',
+	'escape'     => 'Kirby\Toolkit\Escape',
+	'i18n'       => 'Kirby\Toolkit\I18n',
+	'obj'        => 'Kirby\Toolkit\Obj',
+	'str'        => 'Kirby\Toolkit\Str',
+	'tpl'        => 'Kirby\Toolkit\Tpl',
+	'v'          => 'Kirby\Toolkit\V',
+	'xml'        => 'Kirby\Toolkit\Xml',
+
+	// Deprecated aliases:
+	// Any of these might be removed at any point in the future
+	'kirby\cms\asset'              => 'Kirby\Filesystem\Asset',
+	'kirby\cms\content'            => 'Kirby\Content\Content',
+	'kirby\cms\contenttranslation' => 'Kirby\Content\ContentTranslation',
+	'kirby\cms\dir'                => 'Kirby\Filesystem\Dir',
+	'kirby\cms\filename'           => 'Kirby\Filesystem\Filename',
+	'kirby\cms\filefoundation'     => 'Kirby\Filesystem\IsFile',
+	'kirby\cms\field'              => 'Kirby\Content\Field',
+	'kirby\cms\form'               => 'Kirby\Form\Form',
+	'kirby\cms\kirbytag'           => 'Kirby\Text\KirbyTag',
+	'kirby\cms\kirbytags'          => 'Kirby\Text\KirbyTags',
+	'kirby\cms\template'           => 'Kirby\Template\Template',
+	'kirby\form\options'           => 'Kirby\Option\Options',
+	'kirby\form\optionsapi'        => 'Kirby\Option\OptionsApi',
+	'kirby\form\optionsquery'      => 'Kirby\Option\OptionsQuery',
+	'kirby\toolkit\dir'            => 'Kirby\Filesystem\Dir',
+	'kirby\toolkit\f'              => 'Kirby\Filesystem\F',
+	'kirby\toolkit\file'           => 'Kirby\Filesystem\File',
+	'kirby\toolkit\mime'           => 'Kirby\Filesystem\Mime',
+	'kirby\toolkit\query'          => 'Kirby\Query\Query',
+];

kirby/config/api/authentication.php

@@ -0,0 +1,27 @@
+<?php
+
+use Kirby\Exception\AuthException;
+
+return function () {
+	$auth               = $this->kirby()->auth();
+	$allowImpersonation = $this->kirby()->option('api.allowImpersonation') ?? false;
+
+	// csrf token check
+	if (
+		$auth->type($allowImpersonation) === 'session' &&
+		$auth->csrf() === false
+	) {
+		throw new AuthException('Unauthenticated');
+	}
+
+	// get user from session or basic auth
+	if ($user = $auth->user(null, $allowImpersonation)) {
+		if ($user->role()->permissions()->for('access', 'panel') === false) {
+			throw new AuthException(['key' => 'access.panel']);
+		}
+
+		return $user;
+	}
+
+	throw new AuthException('Unauthenticated');
+};

kirby/config/api/collections.php

@@ -0,0 +1,78 @@
+<?php
+
+/**
+ * Api Collection Definitions
+ */
+
+use Kirby\Cms\Files;
+use Kirby\Cms\Languages;
+use Kirby\Cms\Pages;
+use Kirby\Cms\Roles;
+use Kirby\Cms\Translations;
+use Kirby\Cms\Users;
+
+return [
+
+	/**
+	 * Children
+	 */
+	'children' => [
+		'model' => 'page',
+		'type'  => Pages::class,
+		'view'  => 'compact'
+	],
+
+	/**
+	 * Files
+	 */
+	'files' => [
+		'model' => 'file',
+		'type'  => Files::class,
+	],
+
+	/**
+	 * Languages
+	 */
+	'languages' => [
+		'model' => 'language',
+		'type'  => Languages::class,
+	],
+
+	/**
+	 * Pages
+	 */
+	'pages' => [
+		'model' => 'page',
+		'type'  => Pages::class,
+		'view'  => 'compact'
+	],
+
+	/**
+	 * Roles
+	 */
+	'roles' => [
+		'model' => 'role',
+		'type'  => Roles::class,
+		'view'  => 'compact'
+	],
+
+	/**
+	 * Translations
+	 */
+	'translations' => [
+		'model' => 'translation',
+		'type'  => Translations::class,
+		'view'  => 'compact'
+	],
+
+	/**
+	 * Users
+	 */
+	'users' => [
+		'default' => fn () => $this->users(),
+		'model'   => 'user',
+		'type'    => Users::class,
+		'view'    => 'compact'
+	]
+
+];

kirby/config/api/models.php

@@ -0,0 +1,21 @@
+<?php
+
+/**
+ * Api Model Definitions
+ */
+return [
+	'File'          => include __DIR__ . '/models/File.php',
+	'FileBlueprint' => include __DIR__ . '/models/FileBlueprint.php',
+	'FileVersion'   => include __DIR__ . '/models/FileVersion.php',
+	'Language'      => include __DIR__ . '/models/Language.php',
+	'License'       => include __DIR__ . '/models/License.php',
+	'Page'          => include __DIR__ . '/models/Page.php',
+	'PageBlueprint' => include __DIR__ . '/models/PageBlueprint.php',
+	'Role'          => include __DIR__ . '/models/Role.php',
+	'Site'          => include __DIR__ . '/models/Site.php',
+	'SiteBlueprint' => include __DIR__ . '/models/SiteBlueprint.php',
+	'System'        => include __DIR__ . '/models/System.php',
+	'Translation'   => include __DIR__ . '/models/Translation.php',
+	'User'          => include __DIR__ . '/models/User.php',
+	'UserBlueprint' => include __DIR__ . '/models/UserBlueprint.php',
+];

kirby/config/api/models/File.php

@@ -0,0 +1,119 @@
+<?php
+
+use Kirby\Cms\File;
+use Kirby\Form\Form;
+
+/**
+ * File
+ */
+return [
+	'fields' => [
+		'blueprint'  => fn (File $file) => $file->blueprint(),
+		'content'    => fn (File $file) => Form::for($file)->values(),
+		'dimensions' => fn (File $file) => $file->dimensions()->toArray(),
+		'dragText'   => fn (File $file) => $file->panel()->dragText(),
+		'exists'     => fn (File $file) => $file->exists(),
+		'extension'  => fn (File $file) => $file->extension(),
+		'filename'   => fn (File $file) => $file->filename(),
+		'id'         => fn (File $file) => $file->id(),
+		'link'       => fn (File $file) => $file->panel()->url(true),
+		'mime'       => fn (File $file) => $file->mime(),
+		'modified'   => fn (File $file) => $file->modified('c'),
+		'name'       => fn (File $file) => $file->name(),
+		'next'       => fn (File $file) => $file->next(),
+		'nextWithTemplate' => function (File $file) {
+			$files = $file->templateSiblings()->sorted();
+			$index = $files->indexOf($file);
+
+			return $files->nth($index + 1);
+		},
+		'niceSize'   => fn (File $file) => $file->niceSize(),
+		'options'    => fn (File $file) => $file->panel()->options(),
+		'panelImage' => fn (File $file) => $file->panel()->image(),
+		'panelUrl'   => fn (File $file) => $file->panel()->url(true),
+		'prev'       => fn (File $file) => $file->prev(),
+		'prevWithTemplate' => function (File $file) {
+			$files = $file->templateSiblings()->sorted();
+			$index = $files->indexOf($file);
+
+			return $files->nth($index - 1);
+		},
+		'parent'     => fn (File $file) => $file->parent(),
+		'parents'    => fn (File $file) => $file->parents()->flip(),
+		'size'       => fn (File $file) => $file->size(),
+		'template'   => fn (File $file) => $file->template(),
+		'thumbs'     => function ($file) {
+			if ($file->isResizable() === false) {
+				return null;
+			}
+
+			return [
+				'tiny'   => $file->resize(128)->url(),
+				'small'  => $file->resize(256)->url(),
+				'medium' => $file->resize(512)->url(),
+				'large'  => $file->resize(768)->url(),
+				'huge'   => $file->resize(1024)->url(),
+			];
+		},
+		'type'       => fn (File $file) => $file->type(),
+		'url'        => fn (File $file) => $file->url(),
+		'uuid'       => fn (File $file) => $file->uuid()?->toString()
+	],
+	'type'  => File::class,
+	'views' => [
+		'default' => [
+			'content',
+			'dimensions',
+			'exists',
+			'extension',
+			'filename',
+			'id',
+			'link',
+			'mime',
+			'modified',
+			'name',
+			'next' => 'compact',
+			'niceSize',
+			'parent' => 'compact',
+			'options',
+			'prev' => 'compact',
+			'size',
+			'template',
+			'type',
+			'url',
+			'uuid'
+		],
+		'compact' => [
+			'filename',
+			'id',
+			'link',
+			'type',
+			'url',
+			'uuid'
+		],
+		'panel' => [
+			'blueprint',
+			'content',
+			'dimensions',
+			'extension',
+			'filename',
+			'id',
+			'link',
+			'mime',
+			'modified',
+			'name',
+			'nextWithTemplate' => 'compact',
+			'niceSize',
+			'options',
+			'panelIcon',
+			'panelImage',
+			'parent' => 'compact',
+			'parents' => ['id', 'slug', 'title'],
+			'prevWithTemplate' => 'compact',
+			'template',
+			'type',
+			'url',
+			'uuid'
+		]
+	],
+];

kirby/config/api/models/FileBlueprint.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Cms\FileBlueprint;
+
+/**
+ * FileBlueprint
+ */
+return [
+	'fields' => [
+		'name'    => fn (FileBlueprint $blueprint) => $blueprint->name(),
+		'options' => fn (FileBlueprint $blueprint) => $blueprint->options(),
+		'tabs'    => fn (FileBlueprint $blueprint) => $blueprint->tabs(),
+		'title'   => fn (FileBlueprint $blueprint) => $blueprint->title(),
+	],
+	'type'  => FileBlueprint::class,
+	'views' => [],
+];

kirby/config/api/models/FileVersion.php

@@ -0,0 +1,59 @@
+<?php
+
+use Kirby\Cms\FileVersion;
+
+/**
+ * FileVersion
+ */
+return [
+	'fields' => [
+		'dimensions' => fn (FileVersion $file) => $file->dimensions()->toArray(),
+		'exists'     => fn (FileVersion $file) => $file->exists(),
+		'extension'  => fn (FileVersion $file) => $file->extension(),
+		'filename'   => fn (FileVersion $file) => $file->filename(),
+		'id'         => fn (FileVersion $file) => $file->id(),
+		'mime'       => fn (FileVersion $file) => $file->mime(),
+		'modified'   => fn (FileVersion $file) => $file->modified('c'),
+		'name'       => fn (FileVersion $file) => $file->name(),
+		'niceSize'   => fn (FileVersion $file) => $file->niceSize(),
+		'size'       => fn (FileVersion $file) => $file->size(),
+		'type'       => fn (FileVersion $file) => $file->type(),
+		'url'        => fn (FileVersion $file) => $file->url(),
+	],
+	'type'  => FileVersion::class,
+	'views' => [
+		'default' => [
+			'dimensions',
+			'exists',
+			'extension',
+			'filename',
+			'id',
+			'mime',
+			'modified',
+			'name',
+			'niceSize',
+			'size',
+			'type',
+			'url'
+		],
+		'compact' => [
+			'filename',
+			'id',
+			'type',
+			'url',
+		],
+		'panel' => [
+			'dimensions',
+			'extension',
+			'filename',
+			'id',
+			'mime',
+			'modified',
+			'name',
+			'niceSize',
+			'template',
+			'type',
+			'url'
+		]
+	],
+];

kirby/config/api/models/Language.php

@@ -0,0 +1,30 @@
+<?php
+
+use Kirby\Cms\Language;
+
+/**
+ * Language
+ */
+return [
+	'fields' => [
+		'code'      => fn (Language $language) => $language->code(),
+		'default'   => fn (Language $language) => $language->isDefault(),
+		'direction' => fn (Language $language) => $language->direction(),
+		'locale'    => fn (Language $language) => $language->locale(),
+		'name'      => fn (Language $language) => $language->name(),
+		'rules'     => fn (Language $language) => $language->rules(),
+		'url'       => fn (Language $language) => $language->url(),
+	],
+	'type'  => Language::class,
+	'views' => [
+		'default' => [
+			'code',
+			'default',
+			'direction',
+			'locale',
+			'name',
+			'rules',
+			'url'
+		]
+	]
+];

kirby/config/api/models/License.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Cms\License;
+
+/**
+ * Page
+ */
+return [
+	'fields' => [
+		'status' => fn (License $license) => $license->status()->value(),
+		'code'   => function (License $license) {
+			return $this->kirby()->user()->isAdmin() ? $license->code() : $license->code(true);
+		},
+		'type' => fn (License $license) => $license->type()->label(),
+	],
+	'type' => License::class,
+];

kirby/config/api/models/Page.php

@@ -0,0 +1,96 @@
+<?php
+
+use Kirby\Cms\Page;
+use Kirby\Form\Form;
+
+/**
+ * Page
+ */
+return [
+	'fields' => [
+		'blueprint'   => fn (Page $page) => $page->blueprint(),
+		'blueprints'  => fn (Page $page) => $page->blueprints(),
+		'children'    => fn (Page $page) => $page->children(),
+		'content'     => fn (Page $page) => Form::for($page)->values(),
+		'drafts'      => fn (Page $page) => $page->drafts(),
+		'errors'      => fn (Page $page) => $page->errors(),
+		'files'       => fn (Page $page) => $page->files()->sorted(),
+		'hasChildren' => fn (Page $page) => $page->hasChildren(),
+		'hasDrafts'   => fn (Page $page) => $page->hasDrafts(),
+		'hasFiles'    => fn (Page $page) => $page->hasFiles(),
+		'id'          => fn (Page $page) => $page->id(),
+		'isSortable'  => fn (Page $page) => $page->isSortable(),
+		'num'     	  => fn (Page $page) => $page->num(),
+		'options' 	  => fn (Page $page) => $page->panel()->options(['preview']),
+		'panelImage'  => fn (Page $page) => $page->panel()->image(),
+		'parent'      => fn (Page $page) => $page->parent(),
+		'parents'     => fn (Page $page) => $page->parents()->flip(),
+		'previewUrl'  => fn (Page $page) => $page->previewUrl(),
+		'siblings'    => function (Page $page) {
+			if ($page->isDraft() === true) {
+				return $page->parentModel()->children()->not($page);
+			}
+
+			return $page->siblings();
+		},
+		'slug'     => fn (Page $page) => $page->slug(),
+		'status'   => fn (Page $page) => $page->status(),
+		'template' => fn (Page $page) => $page->intendedTemplate()->name(),
+		'title'    => fn (Page $page) => $page->title()->value(),
+		'url'      => fn (Page $page) => $page->url(),
+		'uuid'     => fn (Page $page) => $page->uuid()?->toString()
+	],
+	'type' => Page::class,
+	'views' => [
+		'compact' => [
+			'id',
+			'title',
+			'url',
+			'num',
+			'uuid'
+		],
+		'default' => [
+			'content',
+			'id',
+			'status',
+			'num',
+			'options',
+			'parent' => 'compact',
+			'slug',
+			'template',
+			'title',
+			'url',
+			'uuid'
+		],
+		'panel' => [
+			'id',
+			'blueprint',
+			'content',
+			'status',
+			'options',
+			'next'    => ['id', 'slug', 'title'],
+			'parents' => ['id', 'slug', 'title'],
+			'prev'    => ['id', 'slug', 'title'],
+			'previewUrl',
+			'slug',
+			'title',
+			'url',
+			'uuid'
+		],
+		'selector' => [
+			'id',
+			'title',
+			'parent' => [
+				'id',
+				'title'
+			],
+			'children' => [
+				'hasChildren',
+				'id',
+				'panelIcon',
+				'panelImage',
+				'title',
+			],
+		]
+	],
+];

kirby/config/api/models/PageBlueprint.php

@@ -0,0 +1,20 @@
+<?php
+
+use Kirby\Cms\PageBlueprint;
+
+/**
+ * PageBlueprint
+ */
+return [
+	'fields' => [
+		'name'    => fn (PageBlueprint $blueprint) => $blueprint->name(),
+		'num'     => fn (PageBlueprint $blueprint) => $blueprint->num(),
+		'options' => fn (PageBlueprint $blueprint) => $blueprint->options(),
+		'preview' => fn (PageBlueprint $blueprint) => $blueprint->preview(),
+		'status'  => fn (PageBlueprint $blueprint) => $blueprint->status(),
+		'tabs'    => fn (PageBlueprint $blueprint) => $blueprint->tabs(),
+		'title'   => fn (PageBlueprint $blueprint) => $blueprint->title(),
+	],
+	'type'  => PageBlueprint::class,
+	'views' => [],
+];

kirby/config/api/models/Role.php

@@ -0,0 +1,23 @@
+<?php
+
+use Kirby\Cms\Role;
+
+/**
+ * Role
+ */
+return [
+	'fields' => [
+		'description' => fn (Role $role) => $role->description(),
+		'name'        => fn (Role $role) => $role->name(),
+		'permissions' => fn (Role $role) => $role->permissions()->toArray(),
+		'title'       => fn (Role $role) => $role->title(),
+	],
+	'type'  => Role::class,
+	'views' => [
+		'compact' => [
+			'description',
+			'name',
+			'title'
+		]
+	]
+];

kirby/config/api/models/Site.php

@@ -0,0 +1,52 @@
+<?php
+
+use Kirby\Cms\Site;
+use Kirby\Form\Form;
+
+/**
+ * Site
+ */
+return [
+	'default' => fn () => $this->site(),
+	'fields' => [
+		'blueprint'  => fn (Site $site) => $site->blueprint(),
+		'children'   => fn (Site $site) => $site->children(),
+		'content'    => fn (Site $site) => Form::for($site)->values(),
+		'drafts'     => fn (Site $site) => $site->drafts(),
+		'files'      => fn (Site $site) => $site->files()->sorted(),
+		'options'    => fn (Site $site) => $site->permissions()->toArray(),
+		'previewUrl' => fn (Site $site) => $site->previewUrl(),
+		'title'      => fn (Site $site) => $site->title()->value(),
+		'url'        => fn (Site $site) => $site->url(),
+	],
+	'type' =>  Site::class,
+	'views' => [
+		'compact' => [
+			'title',
+			'url'
+		],
+		'default' => [
+			'content',
+			'options',
+			'title',
+			'url'
+		],
+		'panel' => [
+			'title',
+			'blueprint',
+			'content',
+			'options',
+			'previewUrl',
+			'url'
+		],
+		'selector' => [
+			'title',
+			'children' => [
+				'id',
+				'title',
+				'panelIcon',
+				'hasChildren'
+			],
+		]
+	]
+];

kirby/config/api/models/SiteBlueprint.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Cms\SiteBlueprint;
+
+/**
+ * SiteBlueprint
+ */
+return [
+	'fields' => [
+		'name'    => fn (SiteBlueprint $blueprint) => $blueprint->name(),
+		'options' => fn (SiteBlueprint $blueprint) => $blueprint->options(),
+		'tabs'    => fn (SiteBlueprint $blueprint) => $blueprint->tabs(),
+		'title'   => fn (SiteBlueprint $blueprint) => $blueprint->title(),
+	],
+	'type'  => SiteBlueprint::class,
+	'views' => [],
+];

kirby/config/api/models/System.php

@@ -0,0 +1,91 @@
+<?php
+
+use Kirby\Cms\System;
+use Kirby\Toolkit\Str;
+
+/**
+ * System
+ */
+return [
+	'fields' => [
+		'ascii'           => fn () => Str::$ascii,
+		'authStatus'      => fn () => $this->kirby()->auth()->status()->toArray(),
+		'defaultLanguage' => fn () => $this->kirby()->panelLanguage(),
+		'isOk'            => fn (System $system) => $system->isOk(),
+		'isInstallable'   => fn (System $system) => $system->isInstallable(),
+		'isInstalled'     => fn (System $system) => $system->isInstalled(),
+		'isLocal'         => fn (System $system) => $system->isLocal(),
+		'multilang'       => fn () => $this->kirby()->option('languages', false) !== false,
+		'languages'       => fn () => $this->kirby()->languages(),
+		'license'         => fn (System $system) => $system->license(),
+		'locales'         => function () {
+			$locales = [];
+			$translations = $this->kirby()->translations();
+			foreach ($translations as $translation) {
+				$locales[$translation->code()] = $translation->locale();
+			}
+			return $locales;
+		},
+		'loginMethods' => fn (System $system) => array_keys($system->loginMethods()),
+		'requirements' => fn (System $system) => $system->toArray(),
+		'site'         => fn (System $system) => $system->title(),
+		'slugs'        => fn () => Str::$language,
+		'title'        => fn () => $this->site()->title()->value(),
+		'translation' => function () {
+			$code = $this->user()?->language() ??
+					$this->kirby()->panelLanguage();
+
+			return
+				$this->kirby()->translation($code) ??
+				$this->kirby()->translation('en');
+		},
+		'kirbytext' => fn () => $this->kirby()->option('panel.kirbytext') ?? true,
+		'user' => fn () => $this->user(),
+		'version' => function () {
+			if ($this->user()?->role()->permissions()->for('access', 'system') === true) {
+				return $this->kirby()->version();
+			}
+
+			return null;
+		}
+	],
+	'type'   => System::class,
+	'views'  => [
+		'login' => [
+			'authStatus',
+			'isOk',
+			'isInstallable',
+			'isInstalled',
+			'loginMethods',
+			'title',
+			'translation'
+		],
+		'troubleshooting' => [
+			'isOk',
+			'isInstallable',
+			'isInstalled',
+			'title',
+			'translation',
+			'requirements'
+		],
+		'panel' => [
+			'ascii',
+			'defaultLanguage',
+			'isOk',
+			'isInstalled',
+			'isLocal',
+			'kirbytext',
+			'languages',
+			'license',
+			'locales',
+			'multilang',
+			'requirements',
+			'site',
+			'slugs',
+			'title',
+			'translation',
+			'user' => 'auth',
+			'version'
+		]
+	],
+];

kirby/config/api/models/Translation.php

@@ -0,0 +1,24 @@
+<?php
+
+use Kirby\Cms\Translation;
+
+/**
+ * Translation
+ */
+return [
+	'fields' => [
+		'author'    => fn (Translation $translation) => $translation->author(),
+		'data'      => fn (Translation $translation) => $translation->dataWithFallback(),
+		'direction' => fn (Translation $translation) => $translation->direction(),
+		'id'        => fn (Translation $translation) => $translation->id(),
+		'name'      => fn (Translation $translation) => $translation->name(),
+	],
+	'type'  => Translation::class,
+	'views' => [
+		'compact' => [
+			'direction',
+			'id',
+			'name'
+		]
+	]
+];

kirby/config/api/models/User.php

@@ -0,0 +1,81 @@
+<?php
+
+use Kirby\Cms\User;
+use Kirby\Form\Form;
+
+/**
+ * User
+ */
+return [
+	'default' => fn () => $this->user(),
+	'fields' => [
+		'avatar'      => fn (User $user) => $user->avatar()?->crop(512),
+		'blueprint'   => fn (User $user) => $user->blueprint(),
+		'content'     => fn (User $user) => Form::for($user)->values(),
+		'email'       => fn (User $user) => $user->email(),
+		'files'       => fn (User $user) => $user->files()->sorted(),
+		'id'          => fn (User $user) => $user->id(),
+		'language'    => fn (User $user) => $user->language(),
+		'name'        => fn (User $user) => $user->name()->value(),
+		'next'        => fn (User $user) => $user->next(),
+		'options'     => fn (User $user) => $user->panel()->options(),
+		'panelImage'  => fn (User $user) => $user->panel()->image(),
+		'permissions' => fn (User $user) => $user->role()->permissions()->toArray(),
+		'prev'        => fn (User $user) => $user->prev(),
+		'role'        => fn (User $user) => $user->role(),
+		'roles'       => fn (User $user) => $user->roles(),
+		'username'    => fn (User $user) => $user->username(),
+		'uuid'        => fn (User $user) => $user->uuid()?->toString()
+	],
+	'type'  => User::class,
+	'views' => [
+		'default' => [
+			'avatar',
+			'content',
+			'email',
+			'id',
+			'language',
+			'name',
+			'next' => 'compact',
+			'options',
+			'prev' => 'compact',
+			'role',
+			'username',
+			'uuid'
+		],
+		'compact' => [
+			'avatar' => 'compact',
+			'id',
+			'email',
+			'language',
+			'name',
+			'role' => 'compact',
+			'username',
+			'uuid'
+		],
+		'auth' => [
+			'avatar' => 'compact',
+			'permissions',
+			'email',
+			'id',
+			'name',
+			'role',
+			'language'
+		],
+		'panel' => [
+			'avatar' => 'compact',
+			'blueprint',
+			'content',
+			'email',
+			'id',
+			'language',
+			'name',
+			'next' => ['id', 'name'],
+			'options',
+			'prev' => ['id', 'name'],
+			'role',
+			'username',
+			'uuid'
+		],
+	]
+];

kirby/config/api/models/UserBlueprint.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Cms\UserBlueprint;
+
+/**
+ * UserBlueprint
+ */
+return [
+	'fields' => [
+		'name'    => fn (UserBlueprint $blueprint) => $blueprint->name(),
+		'options' => fn (UserBlueprint $blueprint) => $blueprint->options(),
+		'tabs'    => fn (UserBlueprint $blueprint) => $blueprint->tabs(),
+		'title'   => fn (UserBlueprint $blueprint) => $blueprint->title(),
+	],
+	'type'  => UserBlueprint::class,
+	'views' => [],
+];

kirby/config/api/routes.php

@@ -0,0 +1,29 @@
+<?php
+
+/**
+ * Api Routes Definitions
+ */
+return function ($kirby) {
+	$routes = array_merge(
+		include __DIR__ . '/routes/auth.php',
+		include __DIR__ . '/routes/pages.php',
+		include __DIR__ . '/routes/roles.php',
+		include __DIR__ . '/routes/site.php',
+		include __DIR__ . '/routes/users.php',
+		include __DIR__ . '/routes/files.php',
+		include __DIR__ . '/routes/lock.php',
+		include __DIR__ . '/routes/system.php',
+		include __DIR__ . '/routes/translations.php'
+	);
+
+	// only add the language routes if the
+	// multi language setup is activated
+	if ($kirby->option('languages', false) !== false) {
+		$routes = array_merge(
+			$routes,
+			include __DIR__ . '/routes/languages.php'
+		);
+	}
+
+	return $routes;
+};

kirby/config/api/routes/auth.php

@@ -0,0 +1,116 @@
+<?php
+
+use Kirby\Exception\InvalidArgumentException;
+use Kirby\Exception\NotFoundException;
+
+/**
+ * Authentication
+ */
+return [
+	[
+		'pattern' => 'auth',
+		'method'  => 'GET',
+		'action'  => function () {
+			if ($user = $this->kirby()->auth()->user()) {
+				return $this->resolve($user)->view('auth');
+			}
+
+			throw new NotFoundException('The user cannot be found');
+		}
+	],
+	[
+		'pattern' => 'auth/code',
+		'method'  => 'POST',
+		'auth'    => false,
+		'action'  => function () {
+			$auth = $this->kirby()->auth();
+
+			// csrf token check
+			if ($auth->type() === 'session' && $auth->csrf() === false) {
+				throw new InvalidArgumentException('Invalid CSRF token');
+			}
+
+			$user = $auth->verifyChallenge($this->requestBody('code'));
+
+			return [
+				'code'   => 200,
+				'status' => 'ok',
+				'user'   => $this->resolve($user)->view('auth')->toArray()
+			];
+		}
+	],
+	[
+		'pattern' => 'auth/login',
+		'method'  => 'POST',
+		'auth'    => false,
+		'action'  => function () {
+			$auth    = $this->kirby()->auth();
+			$methods = $this->kirby()->system()->loginMethods();
+
+			// csrf token check
+			if ($auth->type() === 'session' && $auth->csrf() === false) {
+				throw new InvalidArgumentException('Invalid CSRF token');
+			}
+
+			$email    = $this->requestBody('email');
+			$long     = $this->requestBody('long');
+			$password = $this->requestBody('password');
+
+			if ($password) {
+				if (isset($methods['password']) !== true) {
+					throw new InvalidArgumentException('Login with password is not enabled');
+				}
+
+				if (
+					isset($methods['password']['2fa']) === true &&
+					$methods['password']['2fa'] === true
+				) {
+					$status = $auth->login2fa($email, $password, $long);
+				} else {
+					$user = $auth->login($email, $password, $long);
+				}
+			} else {
+				$mode = match (true) {
+					isset($methods['code']) 		  => 'login',
+					isset($methods['password-reset']) => 'password-reset',
+					default => throw new InvalidArgumentException('Login without password is not enabled')
+				};
+
+				$status = $auth->createChallenge($email, $long, $mode);
+			}
+
+			if (isset($user)) {
+				return [
+					'code'   => 200,
+					'status' => 'ok',
+					'user'   => $this->resolve($user)->view('auth')->toArray()
+				];
+			}
+
+			return [
+				'code'      => 200,
+				'status'    => 'ok',
+				'challenge' => $status->challenge()
+			];
+		}
+	],
+	[
+		'pattern' => 'auth/logout',
+		'method'  => 'POST',
+		'auth'    => false,
+		'action'  => function () {
+			$this->kirby()->auth()->logout();
+			return true;
+		}
+	],
+	[
+		'pattern' => 'auth/ping',
+		'method'  => 'POST',
+		'auth'    => false,
+		'action'  => function () {
+			// refresh the session timeout
+			$this->kirby()->session();
+			return true;
+		}
+	],
+];

kirby/config/api/routes/files.php

@@ -0,0 +1,148 @@
+<?php
+
+// routing pattern to match all models with files
+$filePattern = '(account/|pages/[^/]+/|site/|users/[^/]+/|)files/(:any)';
+$parentPattern = '(account|pages/[^/]+|site|users/[^/]+)/files';
+
+/**
+ * Files Routes
+ */
+return [
+	[
+		'pattern' => $filePattern . '/fields/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $parent, string $filename, string $fieldName, string|null $path = null) {
+			if ($file = $this->file($parent, $filename)) {
+				return $this->fieldApi($file, $fieldName, $path);
+			}
+		}
+	],
+	[
+		'pattern' => $filePattern . '/sections/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $path, string $filename, string $sectionName) {
+			return $this->file($path, $filename)->blueprint()->section($sectionName)?->toResponse();
+		}
+	],
+	[
+		'pattern' => $filePattern . '/sections/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $parent, string $filename, string $sectionName, string|null $path = null) {
+			if ($file = $this->file($parent, $filename)) {
+				return $this->sectionApi($file, $sectionName, $path);
+			}
+		}
+	],
+	[
+		'pattern' => $parentPattern,
+		'method'  => 'GET',
+		'action'  => function (string $path) {
+			return $this->files($path)->sorted();
+		}
+	],
+	[
+		'pattern' => $parentPattern,
+		'method'  => 'POST',
+		'action'  => function (string $path) {
+			// move_uploaded_file() not working with unit test
+			// @codeCoverageIgnoreStart
+			return $this->upload(function ($source, $filename) use ($path) {
+				$props = [
+					'content' => [
+						'sort' => $this->requestBody('sort')
+					],
+					'source'   => $source,
+					'template' => $this->requestBody('template'),
+					'filename' => $filename
+				];
+
+				// move the source file from the temp dir
+				return $this->parent($path)->createFile($props, true);
+			});
+			// @codeCoverageIgnoreEnd
+		}
+	],
+	[
+		'pattern' => $parentPattern . '/search',
+		'method'  => 'GET|POST',
+		'action'  => function (string $path) {
+			$files = $this->files($path);
+
+			if ($this->requestMethod() === 'GET') {
+				return $files->search($this->requestQuery('q'));
+			}
+
+			return $files->query($this->requestBody());
+		}
+	],
+	[
+		'pattern' => $parentPattern . '/sort',
+		'method'  => 'PATCH',
+		'action'  => function (string $path) {
+			return $this->files($path)->changeSort(
+				$this->requestBody('files'),
+				$this->requestBody('index')
+			);
+		}
+	],
+	[
+		'pattern' => $filePattern,
+		'method'  => 'GET',
+		'action'  => function (string $path, string $filename) {
+			return $this->file($path, $filename);
+		}
+	],
+	[
+		'pattern' => $filePattern,
+		'method'  => 'PATCH',
+		'action'  => function (string $path, string $filename) {
+			return $this->file($path, $filename)->update(
+				$this->requestBody(),
+				$this->language(),
+				true
+			);
+		}
+	],
+	[
+		'pattern' => $filePattern,
+		'method'  => 'POST',
+		'action'  => function (string $path, string $filename) {
+			// move the source file from the temp dir
+			return $this->upload(
+				fn ($source) => $this->file($path, $filename)->replace($source, true)
+			);
+		}
+	],
+	[
+		'pattern' => $filePattern,
+		'method'  => 'DELETE',
+		'action'  => function (string $path, string $filename) {
+			return $this->file($path, $filename)->delete();
+		}
+	],
+	[
+		'pattern' => $filePattern . '/name',
+		'method'  => 'PATCH',
+		'action'  => function (string $path, string $filename) {
+			return $this->file($path, $filename)->changeName($this->requestBody('name'));
+		}
+	],
+	[
+		'pattern' => $parentPattern . '/search',
+		'method'  => 'GET|POST',
+		'action'  => function () {
+			$files = $this
+				->site()
+				->index(true)
+				->filter('isListable', true)
+				->files()
+				->filter('isListable', true);
+
+			if ($this->requestMethod() === 'GET') {
+				return $files->search($this->requestQuery('q'));
+			}
+
+			return $files->query($this->requestBody());
+		}
+	],
+];

kirby/config/api/routes/kql.php

@@ -0,0 +1,35 @@
+<?php
+
+// @codeCoverageIgnoreStart
+return [
+	'routes' => function ($kirby) {
+		return [
+			[
+				'pattern' => 'query',
+				'method'  => 'POST|GET',
+				'auth'    => $kirby->option('kql.auth') !== false,
+				'action'  => function () use ($kirby) {
+					$kql = '\Kirby\Kql\Kql';
+
+					if (class_exists($kql) === false) {
+						return [
+							'code'    => 500,
+							'status'  => 'error',
+							'message' => 'KQL plugin is not installed',
+						];
+					}
+
+					$input  = $kirby->request()->get();
+					$result = $kql::run($input);
+
+					return [
+						'code'   => 200,
+						'result' => $result,
+						'status' => 'ok',
+					];
+				}
+			]
+		];
+	}
+];
+// @codeCoverageIgnoreEnd

kirby/config/api/routes/languages.php

@@ -0,0 +1,42 @@
+<?php
+
+/**
+ * Roles Routes
+ */
+return [
+	[
+		'pattern' => 'languages',
+		'method'  => 'GET',
+		'action'  => function () {
+			return $this->kirby()->languages();
+		}
+	],
+	[
+		'pattern' => 'languages',
+		'method'  => 'POST',
+		'action'  => function () {
+			return $this->kirby()->languages()->create($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'languages/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $code) {
+			return $this->kirby()->languages()->find($code);
+		}
+	],
+	[
+		'pattern' => 'languages/(:any)',
+		'method'  => 'PATCH',
+		'action'  => function (string $code) {
+			return $this->kirby()->languages()->find($code)?->update($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'languages/(:any)',
+		'method'  => 'DELETE',
+		'action'  => function (string $code) {
+			return $this->kirby()->languages()->find($code)?->delete();
+		}
+	]
+];

kirby/config/api/routes/lock.php

@@ -0,0 +1,56 @@
+<?php
+
+
+/**
+ * Content Lock Routes
+ */
+
+use Kirby\Exception\NotFoundException;
+
+return [
+	[
+		'pattern' => '(:all)/lock',
+		'method'  => 'GET',
+		'action'  => function (string $path) {
+			return [
+				'lock' => $this->parent($path)->lock()?->toArray() ?? false
+			];
+		}
+	],
+	[
+		'pattern' => '(:all)/lock',
+		'method'  => 'PATCH',
+		'action'  => function (string $path) {
+			return $this->parent($path)->lock()?->create();
+		}
+	],
+	[
+		'pattern' => '(:all)/lock',
+		'method'  => 'DELETE',
+		'action'  => function (string $path) {
+			try {
+				return $this->parent($path)->lock()?->remove();
+			} catch (NotFoundException) {
+				return true;
+			}
+		}
+	],
+	[
+		'pattern' => '(:all)/unlock',
+		'method'  => 'PATCH',
+		'action'  => function (string $path) {
+			return  $this->parent($path)->lock()?->unlock();
+		}
+	],
+	[
+		'pattern' => '(:all)/unlock',
+		'method'  => 'DELETE',
+		'action'  => function (string $path) {
+			try {
+				return $this->parent($path)->lock()?->resolve();
+			} catch (NotFoundException) {
+				return true;
+			}
+		}
+	],
+];

kirby/config/api/routes/pages.php

@@ -0,0 +1,129 @@
+<?php
+
+
+/**
+ * Page Routes
+ */
+return [
+	// @codeCoverageIgnoreStart
+	[
+		'pattern' => 'pages/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->page($id);
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)',
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->page($id)->update($this->requestBody(), $this->language(), true);
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)',
+		'method'  => 'DELETE',
+		'action'  => function (string $id) {
+			return $this->page($id)->delete($this->requestBody('force', false));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/blueprint',
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->page($id)->blueprint();
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/blueprints',
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->page($id)->blueprints($this->requestQuery('section'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/children',
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->pages($id, $this->requestQuery('status'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/children',
+		'method'  => 'POST',
+		'action'  => function (string $id) {
+			return $this->page($id)->createChild($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/children/search',
+		'method'  => 'GET|POST',
+		'action'  => function (string $id) {
+			return $this->searchPages($id);
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/duplicate',
+		'method'  => 'POST',
+		'action'  => function (string $id) {
+			return $this->page($id)->duplicate($this->requestBody('slug'), [
+				'children' => $this->requestBody('children'),
+				'files'    => $this->requestBody('files'),
+			]);
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/slug',
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->page($id)->changeSlug($this->requestBody('slug'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/status',
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->page($id)->changeStatus($this->requestBody('status'), $this->requestBody('position'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/template',
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->page($id)->changeTemplate($this->requestBody('template'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/title',
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->page($id)->changeTitle($this->requestBody('title'));
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/fields/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $id, string $fieldName, string|null $path = null) {
+			if ($page = $this->page($id)) {
+				return $this->fieldApi($page, $fieldName, $path);
+			}
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/sections/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $id, string $sectionName) {
+			return $this->page($id)->blueprint()->section($sectionName)?->toResponse();
+		}
+	],
+	[
+		'pattern' => 'pages/(:any)/sections/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $id, string $sectionName, string|null $path = null) {
+			if ($page = $this->page($id)) {
+				return $this->sectionApi($page, $sectionName, $path);
+			}
+		}
+	],
+	// @codeCoverageIgnoreEnd
+];

kirby/config/api/routes/roles.php

@@ -0,0 +1,27 @@
+<?php
+
+/**
+ * Roles Routes
+ */
+return [
+	[
+		'pattern' => 'roles',
+		'method'  => 'GET',
+		'action'  => function () {
+			$kirby = $this->kirby();
+
+			return match ($kirby->request()->get('canBe')) {
+				'changed' => $kirby->roles()->canBeChanged(),
+				'created' => $kirby->roles()->canBeCreated(),
+				default   => $kirby->roles()
+			};
+		}
+	],
+	[
+		'pattern' => 'roles/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $name) {
+			return $this->kirby()->roles()->find($name);
+		}
+	]
+];

kirby/config/api/routes/site.php

@@ -0,0 +1,109 @@
+<?php
+
+
+/**
+ * Site Routes
+ */
+return [
+	// @codeCoverageIgnoreStart
+	[
+		'pattern' => 'site',
+		'action'  => function () {
+			return $this->site();
+		}
+	],
+	[
+		'pattern' => 'site',
+		'method'  => 'PATCH',
+		'action'  => function () {
+			return $this->site()->update($this->requestBody(), $this->language(), true);
+		}
+	],
+	[
+		'pattern' => 'site/children',
+		'method'  => 'GET',
+		'action'  => function () {
+			return $this->pages(null, $this->requestQuery('status'));
+		}
+	],
+	[
+		'pattern' => 'site/children',
+		'method'  => 'POST',
+		'action'  => function () {
+			return $this->site()->createChild($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'site/children/search',
+		'method'  => 'GET|POST',
+		'action'  => function () {
+			return $this->searchPages();
+		}
+	],
+	[
+		'pattern' => 'site/blueprint',
+		'method'  => 'GET',
+		'action'  => function () {
+			return $this->site()->blueprint();
+		}
+	],
+	[
+		'pattern' => 'site/blueprints',
+		'method'  => 'GET',
+		'action'  => function () {
+			return $this->site()->blueprints($this->requestQuery('section'));
+		}
+	],
+	[
+		'pattern' => 'site/find',
+		'method'  => 'POST',
+		'action'  => function () {
+			return $this->site()->find(false, ...$this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'site/title',
+		'method'  => 'PATCH',
+		'action'  => function () {
+			return $this->site()->changeTitle($this->requestBody('title'));
+		}
+	],
+	[
+		'pattern' => 'site/search',
+		'method'  => 'GET|POST',
+		'action'  => function () {
+			$pages = $this
+				->site()
+				->index(true)
+				->filter('isListable', true);
+
+			if ($this->requestMethod() === 'GET') {
+				return $pages->search($this->requestQuery('q'));
+			}
+
+			return $pages->query($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'site/fields/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $fieldName, string|null $path = null) {
+			return $this->fieldApi($this->site(), $fieldName, $path);
+		}
+	],
+	[
+		'pattern' => 'site/sections/(:any)',
+		'method'  => 'GET',
+		'action'  => function (string $sectionName) {
+			return $this->site()->blueprint()->section($sectionName)?->toResponse();
+		}
+	],
+	[
+		'pattern' => 'site/sections/(:any)/(:all?)',
+		'method'  => 'ALL',
+		'action'  => function (string $sectionName, string|null $path = null) {
+			return $this->sectionApi($this->site(), $sectionName, $path);
+		}
+	],
+	// @codeCoverageIgnoreEnd
+];

kirby/config/api/routes/system.php

@@ -0,0 +1,78 @@
+<?php
+
+use Kirby\Exception\Exception;
+use Kirby\Exception\InvalidArgumentException;
+
+/**
+ * System Routes
+ */
+return [
+
+	[
+		'pattern' => 'system',
+		'method'  => 'GET',
+		'auth'    => false,
+		'action'  => function () {
+			$system = $this->kirby()->system();
+
+			if ($this->kirby()->user()) {
+				return $system;
+			}
+
+			$info = match ($system->isOk()) {
+				true  => $this->resolve($system)->view('login')->toArray(),
+				false => $this->resolve($system)->view('troubleshooting')->toArray()
+			};
+
+			return [
+				'status' => 'ok',
+				'data'   => $info,
+				'type'   => 'model'
+			];
+		}
+	],
+	[
+		'pattern' => 'system/register',
+		'method'  => 'POST',
+		'action'  => function () {
+			return $this->kirby()->system()->register($this->requestBody('license'), $this->requestBody('email'));
+		}
+	],
+	[
+		'pattern' => 'system/install',
+		'method'  => 'POST',
+		'auth'    => false,
+		'action'  => function () {
+			$system = $this->kirby()->system();
+			$auth   = $this->kirby()->auth();
+
+			// csrf token check
+			if ($auth->type() === 'session' && $auth->csrf() === false) {
+				throw new InvalidArgumentException('Invalid CSRF token');
+			}
+
+			if ($system->isOk() === false) {
+				throw new Exception('The server is not setup correctly');
+			}
+
+			if ($system->isInstallable() === false) {
+				throw new Exception('The Panel cannot be installed');
+			}
+
+			if ($system->isInstalled() === true) {
+				throw new Exception('The Panel is already installed');
+			}
+
+			// create the first user
+			$user  = $this->users()->create($this->requestBody());
+			$token = $user->login($this->requestBody('password'));
+
+			return [
+				'status' => 'ok',
+				'token'  => $token,
+				'user'   => $this->resolve($user)->view('auth')->toArray()
+			];
+		}
+	]
+
+];

kirby/config/api/routes/translations.php

@@ -0,0 +1,24 @@
+<?php
+
+/**
+ * Translations Routes
+ */
+return [
+	[
+		'pattern' => 'translations',
+		'method'  => 'GET',
+		'auth'    => false,
+		'action'  => function () {
+			return $this->kirby()->translations();
+		}
+	],
+	[
+		'pattern' => 'translations/(:any)',
+		'method'  => 'GET',
+		'auth'    => false,
+		'action'  => function (string $code) {
+			return $this->kirby()->translations()->find($code);
+		}
+	]
+
+];

kirby/config/api/routes/users.php

@@ -0,0 +1,242 @@
+<?php
+
+use Kirby\Exception\Exception;
+use Kirby\Filesystem\F;
+use Kirby\Toolkit\Str;
+
+/**
+ * User Routes
+ */
+return [
+	// @codeCoverageIgnoreStart
+	[
+		'pattern' => 'users',
+		'method'  => 'GET',
+		'action'  => function () {
+			return $this->users()->sort('username', 'asc', 'email', 'asc');
+		}
+	],
+	[
+		'pattern' => 'users',
+		'method'  => 'POST',
+		'action'  => function () {
+			return $this->users()->create($this->requestBody());
+		}
+	],
+	[
+		'pattern' => 'users/search',
+		'method'  => 'GET|POST',
+		'action'  => function () {
+			if ($this->requestMethod() === 'GET') {
+				return $this->users()->search($this->requestQuery('q'));
+			}
+
+			return $this->users()->query($this->requestBody());
+		}
+	],
+	[
+		'pattern' => [
+			'(account)',
+			'users/(:any)',
+		],
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->user($id);
+		}
+	],
+	[
+		'pattern' => [
+			'(account)',
+			'users/(:any)',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->update($this->requestBody(), $this->language(), true);
+		}
+	],
+	[
+		'pattern' => [
+			'(account)',
+			'users/(:any)',
+		],
+		'method'  => 'DELETE',
+		'action'  => function (string $id) {
+			return $this->user($id)->delete();
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/avatar',
+			'users/(:any)/avatar',
+		],
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->user($id)->avatar();
+		}
+	],
+	// @codeCoverageIgnoreStart
+	[
+		'pattern' => [
+			'(account)/avatar',
+			'users/(:any)/avatar',
+		],
+		'method'  => 'POST',
+		'action'  => function (string $id) {
+			return $this->upload(
+				function ($source, $filename) use ($id) {
+					$type = F::type($filename);
+					if ($type !== 'image') {
+						throw new Exception([
+							'key'  => 'file.type.invalid',
+							'data' => compact('type')
+						]);
+					}
+
+					$mime = F::mime($source);
+					if (Str::startsWith($mime, 'image/') !== true) {
+						throw new Exception([
+							'key'  => 'file.mime.invalid',
+							'data' => compact('mime')
+						]);
+					}
+
+					// delete the old avatar
+					$this->user($id)->avatar()?->delete();
+
+					$props = [
+						'filename' => 'profile.' . F::extension($filename),
+						'template' => 'avatar',
+						'source'   => $source
+					];
+
+					// move the source file from the temp dir
+					return $this->user($id)->createFile($props, true);
+				},
+				single: true
+			);
+		}
+	],
+	// @codeCoverageIgnoreEnd
+	[
+		'pattern' => [
+			'(account)/avatar',
+			'users/(:any)/avatar',
+		],
+		'method'  => 'DELETE',
+		'action'  => function (string $id) {
+			return $this->user($id)->avatar()->delete();
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/blueprint',
+			'users/(:any)/blueprint',
+		],
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->user($id)->blueprint();
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/blueprints',
+			'users/(:any)/blueprints',
+		],
+		'method'  => 'GET',
+		'action'  => function (string $id) {
+			return $this->user($id)->blueprints($this->requestQuery('section'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/email',
+			'users/(:any)/email',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->changeEmail($this->requestBody('email'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/language',
+			'users/(:any)/language',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->changeLanguage($this->requestBody('language'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/name',
+			'users/(:any)/name',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->changeName($this->requestBody('name'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/password',
+			'users/(:any)/password',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->changePassword($this->requestBody('password'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/role',
+			'users/(:any)/role',
+		],
+		'method'  => 'PATCH',
+		'action'  => function (string $id) {
+			return $this->user($id)->changeRole($this->requestBody('role'));
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/roles',
+			'users/(:any)/roles',
+		],
+		'action'  => function (string $id) {
+			return $this->user($id)->roles();
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/fields/(:any)/(:all?)',
+			'users/(:any)/fields/(:any)/(:all?)',
+		],
+		'method'  => 'ALL',
+		'action'  => function (string $id, string $fieldName, string|null $path = null) {
+			return $this->fieldApi($this->user($id), $fieldName, $path);
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/sections/(:any)',
+			'users/(:any)/sections/(:any)',
+		],
+		'method'  => 'GET',
+		'action'  => function (string $id, string $sectionName) {
+			if ($section = $this->user($id)->blueprint()->section($sectionName)) {
+				return $section->toResponse();
+			}
+		}
+	],
+	[
+		'pattern' => [
+			'(account)/sections/(:any)/(:all?)',
+			'users/(:any)/sections/(:any)/(:all?)',
+		],
+		'method'  => 'ALL',
+		'action'  => function (string $id, string $sectionName, string|null $path = null) {
+			return $this->sectionApi($this->user($id), $sectionName, $path);
+		}
+	],
+	// @codeCoverageIgnoreEnd
+];

kirby/config/areas/account.php

@@ -0,0 +1,15 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function () {
+	return [
+		'icon'      => 'account',
+		'label'     => I18n::translate('view.account'),
+		'search'    => 'users',
+		'dialogs'   => require __DIR__ . '/account/dialogs.php',
+		'drawers'   => require __DIR__ . '/account/drawers.php',
+		'dropdowns' => require __DIR__ . '/account/dropdowns.php',
+		'views'     => require __DIR__ . '/account/views.php'
+	];
+};

kirby/config/areas/account/dialogs.php

@@ -0,0 +1,106 @@
+<?php
+
+use Kirby\Panel\UserTotpEnableDialog;
+
+$dialogs = require __DIR__ . '/../users/dialogs.php';
+
+return [
+
+	// change email
+	'account.changeEmail' => [
+		'pattern' => '(account)/changeEmail',
+		'load'    => $dialogs['user.changeEmail']['load'],
+		'submit'  => $dialogs['user.changeEmail']['submit'],
+	],
+
+	// change language
+	'account.changeLanguage' => [
+		'pattern' => '(account)/changeLanguage',
+		'load'    => $dialogs['user.changeLanguage']['load'],
+		'submit'  => $dialogs['user.changeLanguage']['submit'],
+	],
+
+	// change name
+	'account.changeName' => [
+		'pattern' => '(account)/changeName',
+		'load'    => $dialogs['user.changeName']['load'],
+		'submit'  => $dialogs['user.changeName']['submit'],
+	],
+
+	// change password
+	'account.changePassword' => [
+		'pattern' => '(account)/changePassword',
+		'load'    => $dialogs['user.changePassword']['load'],
+		'submit'  => $dialogs['user.changePassword']['submit'],
+	],
+
+	// change role
+	'account.changeRole' => [
+		'pattern' => '(account)/changeRole',
+		'load'    => $dialogs['user.changeRole']['load'],
+		'submit'  => $dialogs['user.changeRole']['submit'],
+	],
+
+	// delete
+	'account.delete' => [
+		'pattern' => '(account)/delete',
+		'load'    => $dialogs['user.delete']['load'],
+		'submit'  => $dialogs['user.delete']['submit'],
+	],
+
+	// account fields dialogs
+	'account.fields' => [
+		'pattern' => '(account)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $dialogs['user.fields']['load'],
+		'submit'  => $dialogs['user.fields']['submit']
+	],
+
+	// change file name
+	'account.file.changeName' => [
+		'pattern' => '(account)/files/(:any)/changeName',
+		'load'    => $dialogs['user.file.changeName']['load'],
+		'submit'  => $dialogs['user.file.changeName']['submit'],
+	],
+
+	// change file sort
+	'account.file.changeSort' => [
+		'pattern' => '(account)/files/(:any)/changeSort',
+		'load'    => $dialogs['user.file.changeSort']['load'],
+		'submit'  => $dialogs['user.file.changeSort']['submit'],
+	],
+
+	// change file template
+	'account.file.changeTemplate' => [
+		'pattern' => '(account)/files/(:any)/changeTemplate',
+		'load'    => $dialogs['user.file.changeTemplate']['load'],
+		'submit'  => $dialogs['user.file.changeTemplate']['submit'],
+	],
+
+	// delete
+	'account.file.delete' => [
+		'pattern' => '(account)/files/(:any)/delete',
+		'load'    => $dialogs['user.file.delete']['load'],
+		'submit'  => $dialogs['user.file.delete']['submit'],
+	],
+
+	// account file fields dialogs
+	'account.file.fields' => [
+		'pattern' => '(account)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $dialogs['user.file.fields']['load'],
+		'submit'  => $dialogs['user.file.fields']['submit']
+	],
+
+	// account enable TOTP
+	'account.totp.enable' => [
+		'pattern' => '(account)/totp/enable',
+		'load'    => fn () => (new UserTotpEnableDialog())->load(),
+		'submit'  => fn () => (new UserTotpEnableDialog())->submit()
+	],
+
+	// account disable TOTP
+	'account.totp.disable' => [
+		'pattern' => '(account)/totp/disable',
+		'load'    => $dialogs['user.totp.disable']['load'],
+		'submit'  => $dialogs['user.totp.disable']['submit']
+	],
+];

kirby/config/areas/account/drawers.php

@@ -0,0 +1,19 @@
+<?php
+
+$drawers = require __DIR__ . '/../users/drawers.php';
+
+return [
+	// account fields drawers
+	'account.fields' => [
+		'pattern' => '(account)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $drawers['user.fields']['load'],
+		'submit'  => $drawers['user.fields']['submit']
+	],
+
+	// account file fields drawers
+	'account.file.fields' => [
+		'pattern' => '(account)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $drawers['user.file.fields']['load'],
+		'submit'  => $drawers['user.file.fields']['submit']
+	],
+];

kirby/config/areas/account/dropdowns.php

@@ -0,0 +1,14 @@
+<?php
+
+$dropdowns = require __DIR__ . '/../users/dropdowns.php';
+
+return [
+	'account' => [
+		'pattern' => '(account)',
+		'options' => $dropdowns['user']['options']
+	],
+	'account.file' => [
+		'pattern' => '(account)/files/(:any)',
+		'options' => $dropdowns['user.file']['options']
+	],
+];

kirby/config/areas/account/views.php

@@ -0,0 +1,32 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Toolkit\I18n;
+
+return [
+	'account' => [
+		'pattern' => 'account',
+		'action'  => fn () => [
+			'component' => 'k-account-view',
+			'props'     => App::instance()->user()->panel()->props(),
+		],
+	],
+	'account.file' => [
+		'pattern' => 'account/files/(:any)',
+		'action'  => function (string $filename) {
+			return Find::file('account', $filename)->panel()->view();
+		}
+	],
+	'account.password' => [
+		'pattern' => 'reset-password',
+		'action'  => fn () => [
+			'component' => 'k-reset-password-view',
+			'breadcrumb' => [
+				[
+					'label' => I18n::translate('view.resetPassword')
+				]
+			]
+		]
+	]
+];

kirby/config/areas/fields/dialogs.php

@@ -0,0 +1,61 @@
+<?php
+
+use Kirby\Cms\Find;
+use Kirby\Panel\Field;
+
+return [
+	'model' => [
+		'load' => function (
+			string $modelPath,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::dialog(
+				model:     Find::parent($modelPath),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'GET'
+			);
+		},
+		'submit'  => function (
+			string $modelPath,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::dialog(
+				model:     Find::parent($modelPath),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'POST'
+			);
+		}
+	],
+	'file' => [
+		'load' => function (
+			string $modelPath,
+			string $filename,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::dialog(
+				model:     Find::file($modelPath, $filename),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'GET'
+			);
+		},
+		'submit' => function (
+			string $modelPath,
+			string $filename,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::dialog(
+				model:     Find::file($modelPath, $filename),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'POST'
+			);
+		}
+	],
+];

kirby/config/areas/fields/drawers.php

@@ -0,0 +1,61 @@
+<?php
+
+use Kirby\Cms\Find;
+use Kirby\Panel\Field;
+
+return [
+	'model' => [
+		'load' => function (
+			string $modelPath,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::drawer(
+				model:     Find::parent($modelPath),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'GET'
+			);
+		},
+		'submit'  => function (
+			string $modelPath,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::drawer(
+				model:     Find::parent($modelPath),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'POST'
+			);
+		}
+	],
+	'file' => [
+		'load' => function (
+			string $modelPath,
+			string $filename,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::drawer(
+				model:     Find::file($modelPath, $filename),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'GET'
+			);
+		},
+		'submit' => function (
+			string $modelPath,
+			string $filename,
+			string $fieldName,
+			string|null $path = null
+		) {
+			return Field::drawer(
+				model:     Find::file($modelPath, $filename),
+				fieldName: $fieldName,
+				path:      $path,
+				method:    'POST'
+			);
+		}
+	],
+];

kirby/config/areas/files/dialogs.php

@@ -0,0 +1,172 @@
+<?php
+
+use Kirby\Cms\Find;
+use Kirby\Panel\Field;
+use Kirby\Panel\Panel;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+/**
+ * Shared file dialogs
+ * They are included in the site and
+ * users area to create dialogs there.
+ * The array keys are replaced by
+ * the appropriate routes in the areas.
+ */
+return [
+	'changeName' => [
+		'load' => function (string $path, string $filename) {
+			$file = Find::file($path, $filename);
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'name' => [
+							'label'     => I18n::translate('name'),
+							'type'      => 'slug',
+							'required'  => true,
+							'icon'      => 'title',
+							'allow'     => 'a-z0-9@._-',
+							'after'     => '.' . $file->extension(),
+							'preselect' => true
+						]
+					],
+					'submitButton' => I18n::translate('rename'),
+					'value' => [
+						'name' => $file->name(),
+					]
+				]
+			];
+		},
+		'submit' => function (string $path, string $filename) {
+			$file     = Find::file($path, $filename);
+			$name     = $file->kirby()->request()->get('name');
+			$renamed  = $file->changeName($name);
+			$oldUrl   = $file->panel()->url(true);
+			$newUrl   = $renamed->panel()->url(true);
+			$response = [
+				'event' => 'file.changeName',
+				'dispatch' => [
+					'content/move' => [
+						$oldUrl,
+						$newUrl
+					]
+				],
+			];
+
+			// check for a necessary redirect after the filename has changed
+			if (Panel::referrer() === $oldUrl && $oldUrl !== $newUrl) {
+				$response['redirect'] = $newUrl;
+			}
+
+			return $response;
+		}
+	],
+
+	'changeSort' => [
+		'load' => function (string $path, string $filename) {
+			$file = Find::file($path, $filename);
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'position' => Field::filePosition($file)
+					],
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'position' => $file->sort()->isEmpty() ? $file->siblings(false)->count() + 1 : $file->sort()->toInt(),
+					]
+				]
+			];
+		},
+		'submit' => function (string $path, string $filename) {
+			$file     = Find::file($path, $filename);
+			$files    = $file->siblings()->sorted();
+			$ids      = $files->keys();
+			$newIndex = (int)($file->kirby()->request()->get('position')) - 1;
+			$oldIndex = $files->indexOf($file);
+
+			array_splice($ids, $oldIndex, 1);
+			array_splice($ids, $newIndex, 0, $file->id());
+
+			$files->changeSort($ids);
+
+			return [
+				'event' => 'file.sort',
+			];
+		}
+	],
+
+	'changeTemplate' => [
+		'load' => function (string $path, string $filename) {
+			$file 		= Find::file($path, $filename);
+			$blueprints = $file->blueprints();
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'warning' => [
+							'type'  => 'info',
+							'theme' => 'notice',
+							'text'  => I18n::translate('file.changeTemplate.notice')
+						],
+						'template' => Field::template($blueprints, [
+							'required' => true
+						])
+					],
+					'theme' => 'notice',
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'template' => $file->template()
+					]
+				]
+			];
+		},
+		'submit' => function (string $path, string $filename) {
+			$file     = Find::file($path, $filename);
+			$template = $file->kirby()->request()->get('template');
+
+			$file->changeTemplate($template);
+
+			return [
+				'event' => 'file.changeTemplate',
+			];
+		}
+	],
+
+	'delete' => [
+		'load' => function (string $path, string $filename) {
+			$file = Find::file($path, $filename);
+			return [
+				'component' => 'k-remove-dialog',
+				'props' => [
+					'text' => I18n::template('file.delete.confirm', [
+						'filename' => Escape::html($file->filename())
+					]),
+				]
+			];
+		},
+		'submit' => function (string $path, string $filename) {
+			$file     = Find::file($path, $filename);
+			$redirect = false;
+			$referrer = Panel::referrer();
+			$url      = $file->panel()->url(true);
+
+			$file->delete();
+
+			// redirect to the parent model URL
+			// if the dialog has been opened in the file view
+			if ($referrer === $url) {
+				$redirect = $file->parent()->panel()->url(true);
+			}
+
+			return [
+				'event'    => 'file.delete',
+				'dispatch' => ['content/remove' => [$url]],
+				'redirect' => $redirect
+			];
+		}
+	],
+
+];

kirby/config/areas/files/dropdowns.php

@@ -0,0 +1,9 @@
+<?php
+
+use Kirby\Cms\Find;
+
+return [
+	'file' => function (string $parent, string $filename) {
+		return Find::file($parent, $filename)->panel()->dropdown();
+	}
+];

kirby/config/areas/installation.php

@@ -0,0 +1,40 @@
+<?php
+
+use Kirby\Panel\Panel;
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'  => 'settings',
+		'label' => I18n::translate('view.installation'),
+		'views' => [
+			'installation' => [
+				'pattern' => 'installation',
+				'auth'    => false,
+				'action'  => function () use ($kirby) {
+					$system = $kirby->system();
+					return [
+						'component' => 'k-installation-view',
+						'props'     => [
+							'isInstallable' => $system->isInstallable(),
+							'isInstalled'   => $system->isInstalled(),
+							'isOk'          => $system->isOk(),
+							'requirements'  => $system->status(),
+							'translations'  => $kirby->translations()->values(function ($translation) {
+								return [
+									'text'  => $translation->name(),
+									'value' => $translation->code(),
+								];
+							}),
+						]
+					];
+				}
+			],
+			'installation.fallback' => [
+				'pattern' => '(:all)',
+				'auth'    => false,
+				'action'  => fn () => Panel::go('installation')
+			]
+		]
+	];
+};

kirby/config/areas/lab.php

@@ -0,0 +1,11 @@
+<?php
+
+return function () {
+	return [
+		'icon'    => 'lab',
+		'label'   => 'Lab',
+		'menu'    => false,
+		'drawers' => require __DIR__ . '/lab/drawers.php',
+		'views'   => require __DIR__ . '/lab/views.php'
+	];
+};

kirby/config/areas/lab/drawers.php

@@ -0,0 +1,30 @@
+<?php
+
+use Kirby\Panel\Lab\Docs;
+
+return [
+	'lab.docs' => [
+		'pattern' => 'lab/docs/(:any)',
+		'load'    => function (string $component) {
+			if (Docs::installed() === false) {
+				return [
+					'component' => 'k-text-drawer',
+					'props' => [
+						'text' => 'The UI docs are not installed.'
+					]
+				];
+			}
+
+			$docs = new Docs($component);
+
+			return [
+				'component' => 'k-lab-docs-drawer',
+				'props' => [
+					'icon' => 'book',
+					'title' => $component,
+					'docs'  => $docs->toArray()
+				]
+			];
+		},
+	],
+];

kirby/config/areas/lab/views.php

@@ -0,0 +1,148 @@
+<?php
+
+use Kirby\Panel\Lab\Category;
+use Kirby\Panel\Lab\Docs;
+
+return [
+	'lab' => [
+		'pattern' => 'lab',
+		'action'  => function () {
+			return [
+				'component' => 'k-lab-index-view',
+				'props' => [
+					'categories' => Category::all(),
+					'info'       => Category::installed() ? null : 'The default Lab examples are not installed.',
+					'tab'        => 'examples',
+				],
+			];
+		}
+	],
+	'lab.docs' => [
+		'pattern' => 'lab/docs',
+		'action'  => function () {
+			$props = match (Docs::installed()) {
+				true => [
+					'categories' => [['examples' => Docs::all()]],
+					'tab'        => 'docs',
+				],
+				false => [
+					'info' => 'The UI docs are not installed.',
+					'tab'  => 'docs',
+				]
+			};
+
+			return [
+				'component' => 'k-lab-index-view',
+				'title'     => 'Docs',
+				'breadcrumb' => [
+					[
+						'label' => 'Docs',
+						'link'  => 'lab/docs'
+					]
+				],
+				'props' => $props,
+			];
+		}
+	],
+	'lab.doc' => [
+		'pattern' => 'lab/docs/(:any)',
+		'action'  => function (string $component) {
+			$crumbs = [
+				[
+					'label' => 'Docs',
+					'link'  => 'lab/docs'
+				],
+				[
+					'label' => $component,
+					'link'  => 'lab/docs/' . $component
+				]
+			];
+
+			if (Docs::installed() === false) {
+				return [
+					'component'  => 'k-lab-index-view',
+					'title'      => $component,
+					'breadcrumb' => $crumbs,
+					'props'      => [
+						'info' => 'The UI docs are not installed.',
+						'tab'  => 'docs',
+					],
+				];
+			}
+
+			$docs = new Docs($component);
+
+			return [
+				'component'  => 'k-lab-docs-view',
+				'title'      => $component,
+				'breadcrumb' => $crumbs,
+				'props'      => [
+					'component' => $component,
+					'docs'      => $docs->toArray(),
+					'lab'       => $docs->lab()
+				]
+			];
+		}
+	],
+	'lab.vue' => [
+		'pattern' => [
+			'lab/(:any)/(:any)/index.vue',
+			'lab/(:any)/(:any)/(:any)/index.vue'
+		],
+		'action'  => function (
+			string $category,
+			string $id,
+			string|null $tab = null
+		) {
+			return Category::factory($category)->example($id, $tab)->serve();
+		}
+	],
+	'lab.example' => [
+		'pattern' => 'lab/(:any)/(:any)/(:any?)',
+		'action'  => function (
+			string $category,
+			string $id,
+			string|null $tab = null
+		) {
+			$category = Category::factory($category);
+			$example  = $category->example($id, $tab);
+			$props    = $example->props();
+			$vue      = $example->vue();
+
+			if (Docs::installed() === true && $docs = $props['docs'] ?? null) {
+				$docs = new Docs($docs);
+			}
+
+			$github = $docs?->github();
+
+			if ($source = $props['source'] ?? null) {
+				$github ??= 'https://github.com/getkirby/kirby/tree/main/' . $source;
+			}
+
+			return [
+				'component' => 'k-lab-playground-view',
+				'breadcrumb' => [
+					[
+						'label' => $category->name(),
+					],
+					[
+						'label' => $example->title(),
+						'link'  => $example->url()
+					]
+				],
+				'props' => [
+					'docs'     => $docs?->name(),
+					'examples' => $vue['examples'],
+					'file'     => $example->module(),
+					'github'   => $github,
+					'props'    => $props,
+					'styles'   => $vue['style'],
+					'tab'      => $example->tab(),
+					'tabs'     => array_values($example->tabs()),
+					'template' => $vue['template'],
+					'title'    => $example->title(),
+				],
+			];
+		}
+	]
+];

kirby/config/areas/languages.php

@@ -0,0 +1,13 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'    => 'translate',
+		'label'   => I18n::translate('view.languages'),
+		'menu'    => true,
+		'dialogs' => require __DIR__ . '/languages/dialogs.php',
+		'views'   => require __DIR__ . '/languages/views.php'
+	];
+};

kirby/config/areas/languages/dialogs.php

@@ -0,0 +1,266 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Cms\LanguageVariable;
+use Kirby\Exception\NotFoundException;
+use Kirby\Toolkit\A;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+$languageDialogFields = [
+	'name' => [
+		'counter'  => false,
+		'label'    => I18n::translate('language.name'),
+		'type'     => 'text',
+		'required' => true,
+		'icon'     => 'title'
+	],
+	'code' => [
+		'label'    => I18n::translate('language.code'),
+		'type'     => 'text',
+		'required' => true,
+		'counter'  => false,
+		'icon'     => 'translate',
+		'width'    => '1/2'
+	],
+	'direction' => [
+		'label'    => I18n::translate('language.direction'),
+		'type'     => 'select',
+		'required' => true,
+		'empty'    => false,
+		'options'  => [
+			['value' => 'ltr', 'text' => I18n::translate('language.direction.ltr')],
+			['value' => 'rtl', 'text' => I18n::translate('language.direction.rtl')]
+		],
+		'width'    => '1/2'
+	],
+	'locale' => [
+		'counter' => false,
+		'label'   => I18n::translate('language.locale'),
+		'type'    => 'text',
+	],
+];
+
+$translationDialogFields = [
+	'key' => [
+		'counter' => false,
+		'icon'    => null,
+		'label'   => I18n::translate('language.variable.key'),
+		'type'    => 'text'
+	],
+	'value' => [
+		'buttons' => false,
+		'counter' => false,
+		'label'   => I18n::translate('language.variable.value'),
+		'type'    => 'textarea'
+	]
+];
+
+return [
+
+	// create language
+	'language.create' => [
+		'pattern' => 'languages/create',
+		'load' => function () use ($languageDialogFields) {
+			return [
+				'component' => 'k-language-dialog',
+				'props' => [
+					'fields' => $languageDialogFields,
+					'submitButton' => I18n::translate('language.create'),
+					'value' => [
+						'code'      => '',
+						'direction' => 'ltr',
+						'locale'    => '',
+						'name'      => '',
+					]
+				]
+			];
+		},
+		'submit' => function () {
+			$kirby = App::instance();
+
+			$data = $kirby->request()->get([
+				'code',
+				'direction',
+				'locale',
+				'name'
+			]);
+			$kirby->languages()->create($data);
+
+			return [
+				'event' => 'language.create'
+			];
+		}
+	],
+
+	// delete language
+	'language.delete' => [
+		'pattern' => 'languages/(:any)/delete',
+		'load' => function (string $id) {
+			$language = Find::language($id);
+			return [
+				'component' => 'k-remove-dialog',
+				'props' => [
+					'text' => I18n::template('language.delete.confirm', [
+						'name' => Escape::html($language->name())
+					])
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			Find::language($id)->delete();
+
+			return [
+				'event'    => 'language.delete',
+				'redirect' => 'languages'
+			];
+		}
+	],
+
+	// update language
+	'language.update' => [
+		'pattern' => 'languages/(:any)/update',
+		'load' => function (string $id) use ($languageDialogFields) {
+			$language = Find::language($id);
+			$fields   = $languageDialogFields;
+			$locale   = $language->locale();
+
+			// use the first locale key if there's only one
+			if (count($locale) === 1) {
+				$locale = A::first($locale);
+			}
+
+			// the code of an existing language cannot be changed
+			$fields['code']['disabled'] = true;
+
+			// if the locale settings is more complex than just a
+			// single string, the text field won't do it anymore.
+			// Changes can only be made in the language file and
+			// we display a warning box instead.
+			if (is_array($locale) === true) {
+				$fields['locale'] = [
+					'label' => $fields['locale']['label'],
+					'type'  => 'info',
+					'text'  => I18n::translate('language.locale.warning')
+				];
+			}
+
+			return [
+				'component' => 'k-language-dialog',
+				'props' => [
+					'fields'       => $fields,
+					'submitButton' => I18n::translate('save'),
+					'value'        => [
+						'code'      => $language->code(),
+						'direction' => $language->direction(),
+						'locale'    => $locale,
+						'name'      => $language->name(),
+						'rules'     => $language->rules(),
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$kirby = App::instance();
+
+			$data = $kirby->request()->get(['direction', 'locale', 'name']);
+			$language = Find::language($id)->update($data);
+
+			return [
+				'event' => 'language.update'
+			];
+		}
+	],
+
+	'language.translation.create' => [
+		'pattern' => 'languages/(:any)/translations/create',
+		'load'    => function (string $languageCode) use ($translationDialogFields) {
+			// find the language to make sure it exists
+			Find::language($languageCode);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => $translationDialogFields,
+					'size'   => 'large',
+				],
+			];
+		},
+		'submit' => function (string $languageCode) {
+			$request  = App::instance()->request();
+			$language = Find::language($languageCode);
+
+			$key   = $request->get('key', '');
+			$value = $request->get('value', '');
+
+			LanguageVariable::create($key, $value);
+
+			if ($language->isDefault() === false) {
+				$language->variable($key)->update($value);
+			}
+
+			return true;
+		}
+	],
+	'language.translation.delete' => [
+		'pattern' => 'languages/(:any)/translations/(:any)/delete',
+		'load'    => function (string $languageCode, string $translationKey) {
+			$variable = Find::language($languageCode)->variable($translationKey, true);
+
+			if ($variable->exists() === false) {
+				throw new NotFoundException([
+					'key' => 'language.variable.notFound'
+				]);
+			}
+
+			return [
+				'component' => 'k-remove-dialog',
+				'props' => [
+					'text' => I18n::template('language.variable.delete.confirm', [
+						'key' => Escape::html($variable->key())
+					])
+				],
+			];
+		},
+		'submit' => function (string $languageCode, string $translationKey) {
+			return Find::language($languageCode)->variable($translationKey, true)->delete();
+		}
+	],
+	'language.translation.update' => [
+		'pattern' => 'languages/(:any)/translations/(:any)/update',
+		'load'    => function (string $languageCode, string $translationKey) use ($translationDialogFields) {
+			$variable = Find::language($languageCode)->variable($translationKey, true);
+
+			if ($variable->exists() === false) {
+				throw new NotFoundException([
+					'key' => 'language.variable.notFound'
+				]);
+			}
+
+			$fields = $translationDialogFields;
+			$fields['key']['disabled'] = true;
+			$fields['value']['autofocus'] = true;
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => $fields,
+					'size'   => 'large',
+					'value'  => [
+						'key'   => $variable->key(),
+						'value' => $variable->value()
+					]
+				],
+			];
+		},
+		'submit' => function (string $languageCode, string $translationKey) {
+			Find::language($languageCode)->variable($translationKey, true)->update(
+				App::instance()->request()->get('value')
+			);
+
+			return true;
+		}
+	]
+
+];

kirby/config/areas/languages/views.php

@@ -0,0 +1,128 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+return [
+	'language' => [
+		'pattern' => 'languages/(:any)',
+		'when'    => function (): bool {
+			return App::instance()->option('languages.variables', true) !== false;
+		},
+		'action'  => function (string $code) {
+			$kirby        = App::instance();
+			$language     = Find::language($code);
+			$link         = '/languages/' . $language->code();
+			$strings      = [];
+			$foundation   = $kirby->defaultLanguage()->translations();
+			$translations = $language->translations();
+
+			// TODO: update following line and adapt for update and delete options
+			// when new `languageVariables.*` permissions available
+			$canUpdate = $kirby->user()?->role()->permissions()->for('languages', 'update') === true;
+
+			ksort($foundation);
+
+			foreach ($foundation as $key => $value) {
+				$strings[] = [
+					'key'     => $key,
+					'value'   => $translations[$key] ?? null,
+					'options' => [
+						[
+							'click'    => 'update',
+							'disabled' => $canUpdate === false,
+							'icon'     => 'edit',
+							'text'     => I18n::translate('edit'),
+						],
+						[
+							'click'    => 'delete',
+							'disabled' => $canUpdate === false || $language->isDefault() === false,
+							'icon'     => 'trash',
+							'text'     => I18n::translate('delete'),
+						]
+					]
+				];
+			}
+
+			$next = function () use ($language) {
+				if ($next = $language->next()) {
+					return [
+						'link'  => '/languages/' . $next->code(),
+						'title' => $next->name(),
+					];
+				}
+			};
+
+			$prev = function () use ($language) {
+				if ($prev = $language->prev()) {
+					return [
+						'link'  => '/languages/' . $prev->code(),
+						'title' => $prev->name(),
+					];
+				}
+			};
+
+			return [
+				'component'  => 'k-language-view',
+				'breadcrumb' => [
+					[
+						'label' => $name = $language->name(),
+						'link'  => $link,
+					]
+				],
+				'props'      => [
+					'deletable'    => $language->isDeletable(),
+					'code'         => Escape::html($language->code()),
+					'default'      => $language->isDefault(),
+					'direction'    => $language->direction(),
+					'id'           => $language->code(),
+					'info'         => [
+						[
+							'label' => 'Status',
+							'value' => I18n::translate('language.' . ($language->isDefault() ? 'default' : 'secondary')),
+						],
+						[
+							'label' => I18n::translate('language.code'),
+							'value' => $language->code(),
+						],
+						[
+							'label' => I18n::translate('language.locale'),
+							'value' => $language->locale(LC_ALL)
+						],
+						[
+							'label' => I18n::translate('language.direction'),
+							'value' => I18n::translate('language.direction.' . $language->direction()),
+						],
+					],
+					'name'         => $name,
+					'next'         => $next,
+					'prev'         => $prev,
+					'translations' => $strings,
+					'url'          => $language->url(),
+				]
+			];
+		}
+	],
+	'languages' => [
+		'pattern' => 'languages',
+		'action'  => function () {
+			$kirby = App::instance();
+
+			return [
+				'component' => 'k-languages-view',
+				'props'     => [
+					'languages' => $kirby->languages()->values(fn ($language) => [
+						'deletable' => $language->isDeletable(),
+						'default'   => $language->isDefault(),
+						'id'        => $language->code(),
+						'info'      => Escape::html($language->code()),
+						'text'      => Escape::html($language->name()),
+					]),
+					'variables' => $kirby->option('languages.variables', true)
+				]
+			];
+		}
+	]
+];

kirby/config/areas/login.php

@@ -0,0 +1,44 @@
+<?php
+
+use Kirby\Panel\Panel;
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'  => 'user',
+		'label' => I18n::translate('login'),
+		'views' => [
+			'login' => [
+				'pattern' => 'login',
+				'auth'    => false,
+				'action'  => function () use ($kirby) {
+					$system = $kirby->system();
+					$status = $kirby->auth()->status();
+					return [
+						'component' => 'k-login-view',
+						'props'     => [
+							'methods' => array_keys($system->loginMethods()),
+							'pending' => [
+								'email'     => $status->email(),
+								'challenge' => $status->challenge()
+							]
+						],
+					];
+				}
+			],
+			'login.fallback' => [
+				'pattern' => '(:all)',
+				'auth'    => false,
+				'action'  => function ($path) use ($kirby) {
+					/**
+					 * Store the current path in the session
+					 * Once the user is logged in, the path will
+					 * be used to redirect to that view again
+					 */
+					$kirby->session()->set('panel.path', $path);
+					Panel::go('login');
+				}
+			]
+		]
+	];
+};

kirby/config/areas/logout.php

@@ -0,0 +1,21 @@
+<?php
+
+use Kirby\Panel\Panel;
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'  => 'user',
+		'label' => I18n::translate('logout'),
+		'views' => [
+			'logout' => [
+				'pattern' => 'logout',
+				'auth'    => false,
+				'action'  => function () use ($kirby) {
+					$kirby->auth()->logout();
+					Panel::go('login');
+				},
+			]
+		]
+	];
+};

kirby/config/areas/search.php

@@ -0,0 +1,11 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function () {
+	return [
+		'icon'    => 'search',
+		'label'   => I18n::translate('search'),
+		'views'   => require __DIR__ . '/search/views.php'
+	];
+};

kirby/config/areas/search/views.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Cms\App;
+
+return [
+	'search' => [
+		'pattern' => 'search',
+		'action'  => function () {
+			return [
+				'component' => 'k-search-view',
+				'props' => [
+					'type' => App::instance()->request()->get('type'),
+				]
+			];
+		}
+	],
+];

kirby/config/areas/site.php

@@ -0,0 +1,20 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'breadcrumbLabel' => function () use ($kirby) {
+			return $kirby->site()->title()->or(I18n::translate('view.site'))->toString();
+		},
+		'icon'      => 'home',
+		'label'     => $kirby->site()->blueprint()->title() ?? I18n::translate('view.site'),
+		'menu'      => true,
+		'dialogs'   => require __DIR__ . '/site/dialogs.php',
+		'drawers'   => require __DIR__ . '/site/drawers.php',
+		'dropdowns' => require __DIR__ . '/site/dropdowns.php',
+		'requests'  => require __DIR__ . '/site/requests.php',
+		'searches'  => require __DIR__ . '/site/searches.php',
+		'views'     => require __DIR__ . '/site/views.php',
+	];
+};

kirby/config/areas/site/dialogs.php

@@ -0,0 +1,643 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Cms\PageRules;
+use Kirby\Exception\Exception;
+use Kirby\Exception\InvalidArgumentException;
+use Kirby\Exception\PermissionException;
+use Kirby\Panel\ChangesDialog;
+use Kirby\Panel\Field;
+use Kirby\Panel\PageCreateDialog;
+use Kirby\Panel\Panel;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+use Kirby\Toolkit\Str;
+use Kirby\Uuid\Uuids;
+
+$fields = require __DIR__ . '/../fields/dialogs.php';
+$files = require __DIR__ . '/../files/dialogs.php';
+
+return [
+
+	// change page position
+	'page.changeSort' => [
+		'pattern' => 'pages/(:any)/changeSort',
+		'load' => function (string $id) {
+			$page = Find::page($id);
+
+			if ($page->blueprint()->num() !== 'default') {
+				throw new PermissionException([
+					'key'  => 'page.sort.permission',
+					'data' => [
+						'slug' => $page->slug()
+					]
+				]);
+			}
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'position' => Field::pagePosition($page),
+					],
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'position' => $page->panel()->position()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			Find::page($id)->changeStatus(
+				'listed',
+				$request->get('position')
+			);
+
+			return [
+				'event' => 'page.sort',
+			];
+		}
+	],
+
+	// change page status
+	'page.changeStatus' => [
+		'pattern' => 'pages/(:any)/changeStatus',
+		'load' => function (string $id) {
+			$page      = Find::page($id);
+			$blueprint = $page->blueprint();
+			$status    = $page->status();
+			$states    = [];
+			$position  = null;
+
+			foreach ($blueprint->status() as $key => $state) {
+				$states[] = [
+					'value' => $key,
+					'text'  => $state['label'],
+					'info'  => $state['text'],
+				];
+			}
+
+			if ($status === 'draft') {
+				$errors = $page->errors();
+
+				// switch to the error dialog if there are
+				// errors and the draft cannot be published
+				if (count($errors) > 0) {
+					return [
+						'component' => 'k-error-dialog',
+						'props'     => [
+							'message' => I18n::translate('error.page.changeStatus.incomplete'),
+							'details' => $errors,
+						]
+					];
+				}
+			}
+
+			$fields = [
+				'status' => [
+					'label'    => I18n::translate('page.changeStatus.select'),
+					'type'     => 'radio',
+					'required' => true,
+					'options'  => $states
+				]
+			];
+
+			if ($blueprint->num() === 'default') {
+				$fields['position'] = Field::pagePosition($page, [
+					'when' => [
+						'status' => 'listed'
+					]
+				]);
+
+				$position = $page->panel()->position();
+			}
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields'       => $fields,
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'status'   => $status,
+						'position' => $position
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			Find::page($id)->changeStatus(
+				$request->get('status'),
+				$request->get('position')
+			);
+
+			return [
+				'event' => 'page.changeStatus',
+			];
+		}
+	],
+
+	// change template
+	'page.changeTemplate' => [
+		'pattern' => 'pages/(:any)/changeTemplate',
+		'load' => function (string $id) {
+			$page       = Find::page($id);
+			$blueprints = $page->blueprints();
+
+			if (count($blueprints) <= 1) {
+				throw new Exception([
+					'key'  => 'page.changeTemplate.invalid',
+					'data' => [
+						'slug' => $id
+					]
+				]);
+			}
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'notice' => [
+							'type'  => 'info',
+							'theme' => 'notice',
+							'text'  => I18n::translate('page.changeTemplate.notice')
+						],
+						'template' => Field::template($blueprints, [
+							'required' => true
+						])
+					],
+					'theme' => 'notice',
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'template' => $page->intendedTemplate()->name()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$page     = Find::page($id);
+			$template = App::instance()->request()->get('template');
+
+			$page->changeTemplate($template);
+
+			return [
+				'event' => 'page.changeTemplate',
+			];
+		}
+	],
+
+	// change title
+	'page.changeTitle' => [
+		'pattern' => 'pages/(:any)/changeTitle',
+		'load' => function (string $id) {
+			$request = App::instance()->request();
+
+			$page        = Find::page($id);
+			$permissions = $page->permissions();
+			$select      = $request->get('select', 'title');
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'title' => Field::title([
+							'required'  => true,
+							'preselect' => $select === 'title',
+							'disabled'  => $permissions->can('changeTitle') === false
+						]),
+						'slug' => Field::slug([
+							'required'  => true,
+							'preselect' => $select === 'slug',
+							'path'      => $page->parent() ? '/' . $page->parent()->uri() . '/' : '/',
+							'disabled'  => $permissions->can('changeSlug') === false,
+							'wizard'    => [
+								'text'  => I18n::translate('page.changeSlug.fromTitle'),
+								'field' => 'title'
+							]
+						])
+					],
+					'autofocus' => false,
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'title' => $page->title()->value(),
+						'slug'  => $page->slug(),
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			$page  = Find::page($id);
+			$title = trim($request->get('title', ''));
+			$slug  = trim($request->get('slug', ''));
+
+			// basic input validation before we move on
+			PageRules::validateTitleLength($title);
+			PageRules::validateSlugLength($slug);
+
+			// nothing changed
+			if ($page->title()->value() === $title && $page->slug() === $slug) {
+				return true;
+			}
+
+			// prepare the response
+			$response = [
+				'event' => []
+			];
+
+			// the page title changed
+			if ($page->title()->value() !== $title) {
+				$page->changeTitle($title);
+				$response['event'][] = 'page.changeTitle';
+			}
+
+			// the slug changed
+			if ($page->slug() !== $slug) {
+				$newPage = $page->changeSlug($slug);
+				$response['event'][] = 'page.changeSlug';
+				$response['dispatch'] = [
+					'content/move' => [
+						$oldUrl = $page->panel()->url(true),
+						$newUrl = $newPage->panel()->url(true)
+					]
+				];
+
+				// check for a necessary redirect after the slug has changed
+				if (Panel::referrer() === $oldUrl && $oldUrl !== $newUrl) {
+					$response['redirect'] = $newUrl;
+				}
+			}
+
+			return $response;
+		}
+	],
+
+	// create a new page
+	'page.create' => [
+		'pattern' => 'pages/create',
+		'load' => function () {
+			$request = App::instance()->request();
+			$dialog  = new PageCreateDialog(
+				parentId: $request->get('parent'),
+				sectionId: $request->get('section'),
+				slug: $request->get('slug'),
+				template: $request->get('template'),
+				title: $request->get('title'),
+				viewId: $request->get('view'),
+			);
+
+			return $dialog->load();
+		},
+		'submit' => function () {
+			$request = App::instance()->request();
+			$dialog  = new PageCreateDialog(
+				parentId: $request->get('parent'),
+				sectionId: $request->get('section'),
+				slug: $request->get('slug'),
+				template: $request->get('template'),
+				title: $request->get('title'),
+				viewId: $request->get('view'),
+			);
+
+			return $dialog->submit($request->get());
+		}
+	],
+
+	// delete page
+	'page.delete' => [
+		'pattern' => 'pages/(:any)/delete',
+		'load' => function (string $id) {
+			$page = Find::page($id);
+			$text = I18n::template('page.delete.confirm', [
+				'title' => Escape::html($page->title()->value())
+			]);
+
+			if ($page->childrenAndDrafts()->count() > 0) {
+				return [
+					'component' => 'k-form-dialog',
+					'props' => [
+						'fields' => [
+							'info' => [
+								'type'  => 'info',
+								'theme' => 'negative',
+								'text'  => I18n::translate('page.delete.confirm.subpages')
+							],
+							'check' => [
+								'label'   => I18n::translate('page.delete.confirm.title'),
+								'type'    => 'text',
+								'counter' => false
+							]
+						],
+						'size'         => 'medium',
+						'submitButton' => I18n::translate('delete'),
+						'text'         => $text,
+						'theme'        => 'negative',
+					]
+				];
+			}
+
+			return [
+				'component' => 'k-remove-dialog',
+				'props' => [
+					'text' => $text
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			$page     = Find::page($id);
+			$redirect = false;
+			$referrer = Panel::referrer();
+			$url      = $page->panel()->url(true);
+
+			if (
+				$page->childrenAndDrafts()->count() > 0 &&
+				$request->get('check') !== $page->title()->value()
+			) {
+				throw new InvalidArgumentException(['key' => 'page.delete.confirm']);
+			}
+
+			$page->delete(true);
+
+			// redirect to the parent model URL
+			// if the dialog has been opened in the page view
+			if ($referrer === $url) {
+				$redirect = $page->parentModel()->panel()->url(true);
+			}
+
+			return [
+				'event'    => 'page.delete',
+				'dispatch' => ['content/remove' => [$url]],
+				'redirect' => $redirect
+			];
+		}
+	],
+
+	// duplicate page
+	'page.duplicate' => [
+		'pattern' => 'pages/(:any)/duplicate',
+		'load' => function (string $id) {
+			$page            = Find::page($id);
+			$hasChildren     = $page->hasChildren();
+			$hasFiles        = $page->hasFiles();
+			$toggleWidth     = '1/' . count(array_filter([$hasChildren, $hasFiles]));
+
+			$fields = [
+				'title' => Field::title([
+					'required' => true
+				]),
+				'slug' => Field::slug([
+					'required' => true,
+					'path'     => $page->parent() ? '/' . $page->parent()->id() . '/' : '/',
+					'wizard'   => [
+						'text'  => I18n::translate('page.changeSlug.fromTitle'),
+						'field' => 'title'
+					]
+				])
+			];
+
+			if ($hasFiles === true) {
+				$fields['files'] = [
+					'label'    => I18n::translate('page.duplicate.files'),
+					'type'     => 'toggle',
+					'required' => true,
+					'width'    => $toggleWidth
+				];
+			}
+
+			if ($hasChildren === true) {
+				$fields['children'] = [
+					'label'    => I18n::translate('page.duplicate.pages'),
+					'type'     => 'toggle',
+					'required' => true,
+					'width'    => $toggleWidth
+				];
+			}
+
+			$slugAppendix  = Str::slug(I18n::translate('page.duplicate.appendix'));
+			$titleAppendix = I18n::translate('page.duplicate.appendix');
+
+			// if the item to be duplicated already exists
+			// add a suffix at the end of slug and title
+			$duplicateSlug = $page->slug() . '-' . $slugAppendix;
+			$siblingKeys   = $page->parentModel()->childrenAndDrafts()->pluck('uid');
+
+			if (in_array($duplicateSlug, $siblingKeys) === true) {
+				$suffixCounter = 2;
+				$newSlug       = $duplicateSlug . $suffixCounter;
+
+				while (in_array($newSlug, $siblingKeys) === true) {
+					$newSlug = $duplicateSlug . ++$suffixCounter;
+				}
+
+				$slugAppendix  .= $suffixCounter;
+				$titleAppendix .= ' ' . $suffixCounter;
+			}
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields'       => $fields,
+					'submitButton' => I18n::translate('duplicate'),
+					'value' => [
+						'children' => false,
+						'files'    => false,
+						'slug'     => $page->slug() . '-' . $slugAppendix,
+						'title'    => $page->title() . ' ' . $titleAppendix
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			$newPage = Find::page($id)->duplicate($request->get('slug'), [
+				'children' => (bool)$request->get('children'),
+				'files'    => (bool)$request->get('files'),
+				'title'    => (string)$request->get('title'),
+			]);
+
+			return [
+				'event'    => 'page.duplicate',
+				'redirect' => $newPage->panel()->url(true)
+			];
+		}
+	],
+
+	// page field dialogs
+	'page.fields' => [
+		'pattern' => '(pages/.*?)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit']
+	],
+
+	// change filename
+	'page.file.changeName' => [
+		'pattern' => '(pages/.*?)/files/(:any)/changeName',
+		'load'    => $files['changeName']['load'],
+		'submit'  => $files['changeName']['submit'],
+	],
+
+	// change sort
+	'page.file.changeSort' => [
+		'pattern' => '(pages/.*?)/files/(:any)/changeSort',
+		'load'    => $files['changeSort']['load'],
+		'submit'  => $files['changeSort']['submit'],
+	],
+
+	// change template
+	'page.file.changeTemplate' => [
+		'pattern' => '(pages/.*?)/files/(:any)/changeTemplate',
+		'load'    => $files['changeTemplate']['load'],
+		'submit'  => $files['changeTemplate']['submit'],
+	],
+
+	// delete
+	'page.file.delete' => [
+		'pattern' => '(pages/.*?)/files/(:any)/delete',
+		'load'    => $files['delete']['load'],
+		'submit'  => $files['delete']['submit'],
+	],
+
+	// page file field dialogs
+	'page.file.fields' => [
+		'pattern' => '(pages/.*?)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit'],
+	],
+
+	// move page
+	'page.move' => [
+		'pattern' => 'pages/(:any)/move',
+		'load'    => function (string $id) {
+			$page   = Find::page($id);
+			$parent = $page->parentModel();
+
+			if (Uuids::enabled() === false) {
+				$parentId = $parent?->id() ?? '/';
+			} else {
+				$parentId = $parent?->uuid()->toString() ?? 'site://';
+			}
+
+			return [
+				'component' => 'k-page-move-dialog',
+				'props' => [
+					'value' => [
+						'move'   => $page->panel()->url(true),
+						'parent' => $parentId
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$kirby    = App::instance();
+			$parentId = $kirby->request()->get('parent');
+			$parent   = (empty($parentId) === true || $parentId === '/' || $parentId === 'site://') ? $kirby->site() : Find::page($parentId);
+			$oldPage  = Find::page($id);
+			$newPage  = $oldPage->move($parent);
+
+			return [
+				'event'    => 'page.move',
+				'redirect' => $newPage->panel()->url(true),
+				'dispatch' => [
+					'content/move' => [
+						$oldPage->panel()->url(true),
+						$newPage->panel()->url(true)
+					]
+				],
+			];
+		}
+	],
+
+	// change site title
+	'site.changeTitle' => [
+		'pattern' => 'site/changeTitle',
+		'load' => function () {
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'title' => Field::title([
+							'required'  => true,
+							'preselect' => true
+						])
+					],
+					'submitButton' => I18n::translate('rename'),
+					'value' => [
+						'title' => App::instance()->site()->title()->value()
+					]
+				]
+			];
+		},
+		'submit' => function () {
+			$kirby = App::instance();
+			$kirby->site()->changeTitle($kirby->request()->get('title'));
+
+			return [
+				'event' => 'site.changeTitle',
+			];
+		}
+	],
+
+	// site field dialogs
+	'site.fields' => [
+		'pattern' => '(site)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit'],
+	],
+
+	// change filename
+	'site.file.changeName' => [
+		'pattern' => '(site)/files/(:any)/changeName',
+		'load'    => $files['changeName']['load'],
+		'submit'  => $files['changeName']['submit'],
+	],
+
+	// change sort
+	'site.file.changeSort' => [
+		'pattern' => '(site)/files/(:any)/changeSort',
+		'load'    => $files['changeSort']['load'],
+		'submit'  => $files['changeSort']['submit'],
+	],
+
+	// change template
+	'site.file.changeTemplate' => [
+		'pattern' => '(site)/files/(:any)/changeTemplate',
+		'load'    => $files['changeTemplate']['load'],
+		'submit'  => $files['changeTemplate']['submit'],
+	],
+
+	// delete
+	'site.file.delete' => [
+		'pattern' => '(site)/files/(:any)/delete',
+		'load'    => $files['delete']['load'],
+		'submit'  => $files['delete']['submit'],
+	],
+
+	// site file field dialogs
+	'site.file.fields' => [
+		'pattern' => '(site)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit'],
+	],
+
+	// content changes
+	'changes' => [
+		'pattern' => 'changes',
+		'load'    => function () {
+			$dialog = new ChangesDialog();
+			return $dialog->load();
+		},
+		'submit' => function () {
+			$dialog = new ChangesDialog();
+			$ids    = App::instance()->request()->get('ids');
+			return $dialog->submit($ids);
+		}
+	],
+];

kirby/config/areas/site/drawers.php

@@ -0,0 +1,33 @@
+<?php
+
+$fields = require __DIR__ . '/../fields/drawers.php';
+
+return [
+	// page field drawers
+	'page.fields' => [
+		'pattern' => '(pages/.*?)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit']
+	],
+
+	// page file field drawers
+	'page.file.fields' => [
+		'pattern' => '(pages/.*?)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit'],
+	],
+
+	// site field drawers
+	'site.fields' => [
+		'pattern' => '(site)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit'],
+	],
+
+	// site file field drawers
+	'site.file.fields' => [
+		'pattern' => '(site)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit'],
+	],
+];

kirby/config/areas/site/dropdowns.php

@@ -0,0 +1,21 @@
+<?php
+
+
+$files = require __DIR__ . '/../files/dropdowns.php';
+
+return [
+	'page' => [
+		'pattern' => 'pages/(:any)',
+		'options' => function (string $path) {
+			return Find::page($path)->panel()->dropdown();
+		}
+	],
+	'page.file' => [
+		'pattern' => '(pages/.*?)/files/(:any)',
+		'options' => $files['file']
+	],
+	'site.file' => [
+		'pattern' => '(site)/files/(:any)',
+		'options' => $files['file']
+	]
+];

kirby/config/areas/site/requests.php

@@ -0,0 +1,66 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Toolkit\I18n;
+
+return [
+	'tree' => [
+		'pattern' => 'site/tree',
+		'action'  => function () {
+			$kirby   = App::instance();
+			$request = $kirby->request();
+			$move    = $request->get('move');
+			$move    = $move ? Find::parent($move) : null;
+			$parent  = $request->get('parent');
+
+			if ($parent === null) {
+				$site  = $kirby->site();
+				$panel = $site->panel();
+				$uuid  = $site->uuid()?->toString();
+				$url   = $site->url();
+				$value = $uuid ?? '/';
+
+				return [
+					[
+						'children'    => $panel->url(true),
+						'disabled'    => $move?->isMovableTo($site) === false,
+						'hasChildren' => true,
+						'icon'        => 'home',
+						'id'          => '/',
+						'label'       => I18n::translate('view.site'),
+						'open'        => false,
+						'url'         => $url,
+						'uuid'        => $uuid,
+						'value'       => $value
+					]
+				];
+			}
+
+			$parent = Find::parent($parent);
+			$pages  = [];
+
+			foreach ($parent->childrenAndDrafts()->filterBy('isListable', true) as $child) {
+				$panel = $child->panel();
+				$uuid  = $child->uuid()?->toString();
+				$url   = $child->url();
+				$value = $uuid ?? $child->id();
+
+				$pages[] = [
+					'children'    => $panel->url(true),
+					'disabled'    => $move?->isMovableTo($child) === false,
+					'hasChildren' => $child->hasChildren() === true || $child->hasDrafts() === true,
+					'icon'        => $panel->image()['icon'] ?? null,
+					'id'          => $child->id(),
+					'open'        => false,
+					'label'       => $child->title()->value(),
+					'url'         => $url,
+					'uuid'        => $uuid,
+					'value'       => $value
+				];
+			}
+
+			return $pages;
+		}
+	]
+];

kirby/config/areas/site/searches.php

@@ -0,0 +1,56 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+return [
+	'pages' => [
+		'label' => I18n::translate('pages'),
+		'icon'  => 'page',
+		'query' => function (string $query = null, int $limit, int $page) {
+			$kirby = App::instance();
+			$pages = $kirby->site()
+				->index(true)
+				->search($query)
+				->filter('isListable', true)
+				->paginate($limit, $page);
+
+			return [
+				'results' => $pages->values(fn ($page) => [
+					'image' => $page->panel()->image(),
+					'text' => Escape::html($page->title()->value()),
+					'link' => $page->panel()->url(true),
+					'info' => Escape::html($page->id()),
+					'uuid' => $page->uuid()?->toString(),
+				]),
+				'pagination' => $pages->pagination()->toArray()
+			];
+		}
+	],
+	'files' => [
+		'label' => I18n::translate('files'),
+		'icon'  => 'image',
+		'query' => function (string $query = null, int $limit, int $page) {
+			$kirby = App::instance();
+			$files = $kirby->site()
+				->index(true)
+				->filter('isListable', true)
+				->files()
+				->filter('isListable', true)
+				->search($query)
+				->paginate($limit, $page);
+
+			return [
+				'results' => $files->values(fn ($file) => [
+					'image' => $file->panel()->image(),
+					'text'  => Escape::html($file->filename()),
+					'link'  => $file->panel()->url(true),
+					'info'  => Escape::html($file->id()),
+					'uuid'  => $file->uuid()->toString(),
+				]),
+				'pagination' => $files->pagination()->toArray()
+			];
+		}
+	]
+];

kirby/config/areas/site/views.php

@@ -0,0 +1,27 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+
+return [
+	'page' => [
+		'pattern' => 'pages/(:any)',
+		'action'  => fn (string $path) => Find::page($path)->panel()->view()
+	],
+	'page.file' => [
+		'pattern' => 'pages/(:any)/files/(:any)',
+		'action'  => function (string $id, string $filename) {
+			return Find::file('pages/' . $id, $filename)->panel()->view();
+		}
+	],
+	'site' => [
+		'pattern' => 'site',
+		'action'  => fn () => App::instance()->site()->panel()->view()
+	],
+	'site.file' => [
+		'pattern' => 'site/files/(:any)',
+		'action'  => function (string $filename) {
+			return Find::file('site', $filename)->panel()->view();
+		}
+	],
+];

kirby/config/areas/system.php

@@ -0,0 +1,13 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'    => 'settings',
+		'label'   => I18n::translate('view.system'),
+		'menu'    => true,
+		'dialogs' => require __DIR__ . '/system/dialogs.php',
+		'views'   => require __DIR__ . '/system/views.php'
+	];
+};

kirby/config/areas/system/dialogs.php

@@ -0,0 +1,113 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Exception\LogicException;
+use Kirby\Panel\Field;
+use Kirby\Toolkit\I18n;
+
+return [
+	// license key
+	'license' => [
+		'load' => function () {
+			$kirby      = App::instance();
+			$license    = $kirby->system()->license();
+			$obfuscated = $kirby->user()->isAdmin() === false;
+			$status     = $license->status();
+			$renewable  = $status->renewable();
+
+			return [
+				'component' => 'k-license-dialog',
+				'props' => [
+					'license' => [
+						'code'  => $license->code($obfuscated),
+						'icon'  => $status->icon(),
+						'info'  => $status->info($license->renewal('Y-m-d', 'date')),
+						'theme' => $status->theme(),
+						'type'  => $license->label(),
+					],
+					'cancelButton' => $renewable,
+					'submitButton' => $renewable ? [
+						'icon'  => 'refresh',
+						'text'  => I18n::translate('renew'),
+						'theme' => 'love',
+					] : false,
+				]
+			];
+		},
+		'submit' => function () {
+			// @codeCoverageIgnoreStart
+			$response = App::instance()->system()->license()->upgrade();
+
+			// the upgrade is still needed
+			if ($response['status'] === 'upgrade') {
+				return [
+					'redirect' => $response['url']
+				];
+			}
+
+			// the upgrade has already been completed
+			if ($response['status'] === 'complete') {
+				return [
+					'event'   => 'system.renew',
+					'message' => I18n::translate('license.success')
+				];
+			}
+
+			throw new LogicException('The upgrade failed');
+			// @codeCoverageIgnoreEnd
+		}
+	],
+	// license registration
+	'registration' => [
+		'load' => function () {
+			$system = App::instance()->system();
+			$local  = $system->isLocal();
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'domain' => [
+							'label' => I18n::translate('license.activate.label'),
+							'type'  => 'info',
+							'theme' => $local ? 'warning' : 'info',
+							'text'  => I18n::template('license.activate.' . ($local ? 'local' : 'domain'), ['host' => $system->indexUrl()])
+						],
+						'license' => [
+							'label'       => I18n::translate('license.code.label'),
+							'type'        => 'text',
+							'required'    => true,
+							'counter'     => false,
+							'placeholder' => 'K-',
+							'help'        => I18n::translate('license.code.help') . ' ' . '<a href="https://getkirby.com/buy" target="_blank">' . I18n::translate('license.buy') . ' &rarr;</a>'
+						],
+						'email' => Field::email(['required' => true])
+					],
+					'submitButton' => [
+						'icon'  => 'key',
+						'text'  => I18n::translate('activate'),
+						'theme' => 'love',
+					],
+					'value' => [
+						'license' => null,
+						'email'   => null
+					]
+				]
+			];
+		},
+		'submit' => function () {
+			// @codeCoverageIgnoreStart
+			$kirby = App::instance();
+			$kirby->system()->register(
+				$kirby->request()->get('license'),
+				$kirby->request()->get('email')
+			);
+
+			return [
+				'event'   => 'system.register',
+				'message' => I18n::translate('license.success')
+			];
+			// @codeCoverageIgnoreEnd
+		}
+	],
+];

kirby/config/areas/system/views.php

@@ -0,0 +1,101 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Toolkit\I18n;
+
+return [
+	'system' => [
+		'pattern' => 'system',
+		'action'  => function () {
+			$kirby        = App::instance();
+			$system       = $kirby->system();
+			$updateStatus = $system->updateStatus();
+			$license      = $system->license();
+
+			$environment = [
+				[
+					'label'  => $license->status()->label(),
+					'value'  => $license->label(),
+					'theme'  => $license->status()->theme(),
+					'icon'   => $license->status()->icon(),
+					'dialog' => $license->status()->dialog()
+				],
+				[
+					'label' => $updateStatus?->label() ?? I18n::translate('version'),
+					'value' => $kirby->version(),
+					'link'  => $updateStatus?->url() ??
+						'https://github.com/getkirby/kirby/releases/tag/' . $kirby->version(),
+					'theme' => $updateStatus?->theme(),
+					'icon'  => $updateStatus?->icon() ?? 'info'
+				],
+				[
+					'label' => 'PHP',
+					'value' => phpversion(),
+					'icon'  => 'code'
+				],
+				[
+					'label' => I18n::translate('server'),
+					'value' => $system->serverSoftware() ?? '?',
+					'icon'  => 'server'
+				]
+			];
+
+			$exceptions = $updateStatus?->exceptionMessages() ?? [];
+
+			$plugins = $system->plugins()->values(function ($plugin) use (&$exceptions) {
+				$authors      = $plugin->authorsNames();
+				$updateStatus = $plugin->updateStatus();
+				$version      = $updateStatus?->toArray() ?? $plugin->version() ?? '–';
+
+				if ($updateStatus !== null) {
+					$exceptions = array_merge($exceptions, $updateStatus->exceptionMessages());
+				}
+
+				return [
+					'author'  => empty($authors) ? '–' : $authors,
+					'license' => $plugin->license() ?? '–',
+					'name'    => [
+						'text' => $plugin->name() ?? '–',
+						'href' => $plugin->link(),
+					],
+					'version' => $version,
+				];
+			});
+
+			$security = $updateStatus?->messages() ?? [];
+
+			if ($kirby->option('debug', false) === true) {
+				$security[] = [
+					'id'   => 'debug',
+					'text' => I18n::translate('system.issues.debug'),
+					'link' => 'https://getkirby.com/security/debug'
+				];
+			}
+
+			if ($kirby->environment()->https() !== true) {
+				$security[] = [
+					'id'   => 'https',
+					'text' => I18n::translate('system.issues.https'),
+					'link' => 'https://getkirby.com/security/https'
+				];
+			}
+
+			return [
+				'component' => 'k-system-view',
+				'props'     => [
+					'environment' => $environment,
+					'exceptions'  => $kirby->option('debug') === true ? $exceptions : [],
+					'info'        => $system->info(),
+					'plugins'     => $plugins,
+					'security'    => $security,
+					'urls'        => [
+						'content' => $system->exposedFileUrl('content'),
+						'git'     => $system->exposedFileUrl('git'),
+						'kirby'   => $system->exposedFileUrl('kirby'),
+						'site'    => $system->exposedFileUrl('site')
+					]
+				]
+			];
+		}
+	],
+];

kirby/config/areas/users.php

@@ -0,0 +1,17 @@
+<?php
+
+use Kirby\Toolkit\I18n;
+
+return function ($kirby) {
+	return [
+		'icon'      => 'users',
+		'label'     => I18n::translate('view.users'),
+		'search'    => 'users',
+		'menu'      => true,
+		'dialogs'   => require __DIR__ . '/users/dialogs.php',
+		'drawers'   => require __DIR__ . '/users/drawers.php',
+		'dropdowns' => require __DIR__ . '/users/dropdowns.php',
+		'searches'  => require __DIR__ . '/users/searches.php',
+		'views'     => require __DIR__ . '/users/views.php'
+	];
+};

kirby/config/areas/users/dialogs.php

@@ -0,0 +1,346 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Cms\UserRules;
+use Kirby\Exception\InvalidArgumentException;
+use Kirby\Panel\Field;
+use Kirby\Panel\Panel;
+use Kirby\Panel\UserTotpDisableDialog;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+$fields = require __DIR__ . '/../fields/dialogs.php';
+$files = require __DIR__ . '/../files/dialogs.php';
+
+return [
+
+	// create
+	'user.create' => [
+		'pattern' => 'users/create',
+		'load' => function () {
+			$kirby = App::instance();
+
+			// get default value for role
+			if ($role = $kirby->request()->get('role')) {
+				$role = $kirby->roles()->find($role)?->id();
+			}
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'name'  => Field::username(),
+						'email' => Field::email([
+							'link'     => false,
+							'required' => true
+						]),
+						'password'     => Field::password(),
+						'translation'  => Field::translation([
+							'required' => true
+						]),
+						'role' => Field::role([
+							'required' => true
+						])
+					],
+					'submitButton' => I18n::translate('create'),
+					'value' => [
+						'name'        => '',
+						'email'       => '',
+						'password'    => '',
+						'translation' => $kirby->panelLanguage(),
+						'role'        => $role ?? $kirby->user()->role()->name()
+					]
+				]
+			];
+		},
+		'submit' => function () {
+			$kirby = App::instance();
+
+			$kirby->users()->create([
+				'name'     => $kirby->request()->get('name'),
+				'email'    => $kirby->request()->get('email'),
+				'password' => $kirby->request()->get('password'),
+				'language' => $kirby->request()->get('translation'),
+				'role'     => $kirby->request()->get('role')
+			]);
+
+			return [
+				'event' => 'user.create'
+			];
+		}
+	],
+
+	// change email
+	'user.changeEmail' => [
+		'pattern' => 'users/(:any)/changeEmail',
+		'load' => function (string $id) {
+			$user = Find::user($id);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'email' => [
+							'label'     => I18n::translate('email'),
+							'required'  => true,
+							'type'      => 'email',
+							'preselect' => true
+						]
+					],
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'email' => $user->email()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			Find::user($id)->changeEmail($request->get('email'));
+
+			return [
+				'event' => 'user.changeEmail'
+			];
+		}
+	],
+
+	// change language
+	'user.changeLanguage' => [
+		'pattern' => 'users/(:any)/changeLanguage',
+		'load' => function (string $id) {
+			$user = Find::user($id);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'translation' => Field::translation(['required' => true])
+					],
+					'submitButton' => I18n::translate('change'),
+					'value' => [
+						'translation' => $user->language()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			Find::user($id)->changeLanguage($request->get('translation'));
+
+			return [
+				'event'  => 'user.changeLanguage',
+				'reload' => [
+					'globals' => '$translation'
+				]
+			];
+		}
+	],
+
+	// change name
+	'user.changeName' => [
+		'pattern' => 'users/(:any)/changeName',
+		'load' => function (string $id) {
+			$user = Find::user($id);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'name' => Field::username([
+							'preselect' => true
+						])
+					],
+					'submitButton' => I18n::translate('rename'),
+					'value' => [
+						'name' => $user->name()->value()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			Find::user($id)->changeName($request->get('name'));
+
+			return [
+				'event' => 'user.changeName'
+			];
+		}
+	],
+
+	// change password
+	'user.changePassword' => [
+		'pattern' => 'users/(:any)/changePassword',
+		'load' => function (string $id) {
+			$user = Find::user($id);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'password' => Field::password([
+							'label' => I18n::translate('user.changePassword.new'),
+						]),
+						'passwordConfirmation' => Field::password([
+							'label' => I18n::translate('user.changePassword.new.confirm'),
+						])
+					],
+					'submitButton' => I18n::translate('change'),
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			$user                 = Find::user($id);
+			$password             = $request->get('password');
+			$passwordConfirmation = $request->get('passwordConfirmation');
+
+			// validate the password
+			UserRules::validPassword($user, $password ?? '');
+
+			// compare passwords
+			if ($password !== $passwordConfirmation) {
+				throw new InvalidArgumentException([
+					'key' => 'user.password.notSame'
+				]);
+			}
+
+			// change password if everything's fine
+			$user->changePassword($password);
+
+			return [
+				'event' => 'user.changePassword'
+			];
+		}
+	],
+
+	// change role
+	'user.changeRole' => [
+		'pattern' => 'users/(:any)/changeRole',
+		'load' => function (string $id) {
+			$user = Find::user($id);
+
+			return [
+				'component' => 'k-form-dialog',
+				'props' => [
+					'fields' => [
+						'role' => Field::role([
+							'label'    => I18n::translate('user.changeRole.select'),
+							'required' => true,
+						])
+					],
+					'submitButton' => I18n::translate('user.changeRole'),
+					'value' => [
+						'role' => $user->role()->name()
+					]
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$request = App::instance()->request();
+
+			$user = Find::user($id)->changeRole($request->get('role'));
+
+			return [
+				'event' => 'user.changeRole',
+				'user' => $user->toArray()
+			];
+		}
+	],
+
+	// delete
+	'user.delete' => [
+		'pattern' => 'users/(:any)/delete',
+		'load' => function (string $id) {
+			$user       = Find::user($id);
+			$i18nPrefix = $user->isLoggedIn() ? 'account' : 'user';
+
+			return [
+				'component' => 'k-remove-dialog',
+				'props' => [
+					'text' => I18n::template($i18nPrefix . '.delete.confirm', [
+						'email' => Escape::html($user->email())
+					])
+				]
+			];
+		},
+		'submit' => function (string $id) {
+			$user     = Find::user($id);
+			$redirect = false;
+			$referrer = Panel::referrer();
+			$url      = $user->panel()->url(true);
+
+			$user->delete();
+
+			// redirect to the users view
+			// if the dialog has been opened in the user view
+			if ($referrer === $url) {
+				$redirect = '/users';
+			}
+
+			// logout the user if they deleted themselves
+			if ($user->isLoggedIn()) {
+				$redirect = '/logout';
+			}
+
+			return [
+				'event'    => 'user.delete',
+				'dispatch' => ['content/remove' => [$url]],
+				'redirect' => $redirect
+			];
+		}
+	],
+
+	// user field dialogs
+	'user.fields' => [
+		'pattern' => '(users/.*?)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit']
+	],
+
+	// change file name
+	'user.file.changeName' => [
+		'pattern' => '(users/.*?)/files/(:any)/changeName',
+		'load'    => $files['changeName']['load'],
+		'submit'  => $files['changeName']['submit'],
+	],
+
+	// change file sort
+	'user.file.changeSort' => [
+		'pattern' => '(users/.*?)/files/(:any)/changeSort',
+		'load'    => $files['changeSort']['load'],
+		'submit'  => $files['changeSort']['submit'],
+	],
+
+	// change file template
+	'user.file.changeTemplate' => [
+		'pattern' => '(users/.*?)/files/(:any)/changeTemplate',
+		'load'    => $files['changeTemplate']['load'],
+		'submit'  => $files['changeTemplate']['submit'],
+	],
+
+	// delete file
+	'user.file.delete' => [
+		'pattern' => '(users/.*?)/files/(:any)/delete',
+		'load'    => $files['delete']['load'],
+		'submit'  => $files['delete']['submit'],
+	],
+
+	// user file fields dialogs
+	'user.file.fields' => [
+		'pattern' => '(users/.*?)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit']
+	],
+
+	// user disable TOTP
+	'user.totp.disable' => [
+		'pattern' => 'users/(:any)/totp/disable',
+		'load'    => fn (string $id) => (new UserTotpDisableDialog($id))->load(),
+		'submit'  => fn (string $id) => (new UserTotpDisableDialog($id))->submit()
+	],
+];

kirby/config/areas/users/drawers.php

@@ -0,0 +1,18 @@
+<?php
+
+$fields = require __DIR__ . '/../fields/drawers.php';
+
+return [
+	// user field drawers
+	'user.fields' => [
+		'pattern' => '(users/.*?)/fields/(:any)/(:all?)',
+		'load'    => $fields['model']['load'],
+		'submit'  => $fields['model']['submit']
+	],
+	// user file fields drawers
+	'user.file.fields' => [
+		'pattern' => '(users/.*?)/files/(:any)/fields/(:any)/(:all?)',
+		'load'    => $fields['file']['load'],
+		'submit'  => $fields['file']['submit']
+	],
+];

kirby/config/areas/users/dropdowns.php

@@ -0,0 +1,18 @@
+<?php
+
+use Kirby\Cms\Find;
+
+$files = require __DIR__ . '/../files/dropdowns.php';
+
+return [
+	'user' => [
+		'pattern' => 'users/(:any)',
+		'options' => function (string $id) {
+			return Find::user($id)->panel()->dropdown();
+		}
+	],
+	'user.file' => [
+		'pattern' => '(users/.*?)/files/(:any)',
+		'options' => $files['file']
+	]
+];

kirby/config/areas/users/searches.php

@@ -0,0 +1,29 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Toolkit\Escape;
+use Kirby\Toolkit\I18n;
+
+return [
+	'users' => [
+		'label' => I18n::translate('users'),
+		'icon'  => 'users',
+		'query' => function (string $query = null, int $limit, int $page) {
+			$kirby = App::instance();
+			$users = $kirby->users()
+				->search($query)
+				->paginate($limit, $page);
+
+			return [
+				'results' => $users->values(fn ($user) => [
+					'image' => $user->panel()->image(),
+					'text'  => Escape::html($user->username()),
+					'link'  => $user->panel()->url(true),
+					'info'  => Escape::html($user->role()->title()),
+					'uuid'  => $user->uuid()->toString(),
+				]),
+				'pagination' => $users->pagination()->toArray()
+			];
+		}
+	]
+];

kirby/config/areas/users/views.php

@@ -0,0 +1,70 @@
+<?php
+
+use Kirby\Cms\App;
+use Kirby\Cms\Find;
+use Kirby\Toolkit\Escape;
+
+return [
+	'users' => [
+		'pattern' => 'users',
+		'action'  => function () {
+			$kirby = App::instance();
+			$role  = $kirby->request()->get('role');
+			$roles = $kirby->roles()->toArray(fn ($role) => [
+				'id'    => $role->id(),
+				'title' => $role->title(),
+			]);
+
+			return [
+				'component' => 'k-users-view',
+				'props'     => [
+					'role' => function () use ($kirby, $roles, $role) {
+						if ($role) {
+							return $roles[$role] ?? null;
+						}
+					},
+					'roles' => array_values($roles),
+					'users' => function () use ($kirby, $role) {
+						$users = $kirby->users();
+
+						if (empty($role) === false) {
+							$users = $users->role($role);
+						}
+
+						// sort users alphabetically
+						$users = $users->sortBy('username', 'asc');
+
+						// paginate
+						$users = $users->paginate([
+							'limit' => 20,
+							'page'  => $kirby->request()->get('page')
+						]);
+
+						return [
+							'data' => $users->values(fn ($user) => [
+								'id'    => $user->id(),
+								'image' => $user->panel()->image(),
+								'info'  => Escape::html($user->role()->title()),
+								'link'  => $user->panel()->url(true),
+								'text'  => Escape::html($user->username())
+							]),
+							'pagination' => $users->pagination()->toArray()
+						];
+					},
+				]
+			];
+		}
+	],
+	'user' => [
+		'pattern' => 'users/(:any)',
+		'action'  => function (string $id) {
+			return Find::user($id)->panel()->view();
+		}
+	],
+	'user.file' => [
+		'pattern' => 'users/(:any)/files/(:any)',
+		'action'  => function (string $id, string $filename) {
+			return Find::file('users/' . $id, $filename)->panel()->view();
+		}
+	],
+];

kirby/config/blocks/code/code.php

@@ -0,0 +1,2 @@
+<?php /** @var \Kirby\Cms\Block $block */ ?>
+<pre><code class="language-<?= $block->language()->or('text') ?>"><?= $block->code()->html(false) ?></code></pre>

kirby/config/blocks/code/code.yml

@@ -0,0 +1,59 @@
+name: field.blocks.code.name
+icon: code
+wysiwyg: true
+preview: code
+fields:
+  code:
+    label: field.blocks.code.name
+    type: textarea
+    placeholder: field.blocks.code.placeholder
+    buttons: false
+    font: monospace
+  language:
+    label: field.blocks.code.language
+    type: select
+    default: text
+    options:
+      bash: Bash
+      basic: BASIC
+      c: C
+      clojure: Clojure
+      cpp: C++
+      csharp: C#
+      css: CSS
+      diff: Diff
+      elixir: Elixir
+      elm: Elm
+      erlang: Erlang
+      go: Go
+      graphql: GraphQL
+      haskell: Haskell
+      html: HTML
+      java: Java
+      js: JavaScript
+      json: JSON
+      latext: LaTeX
+      less: Less
+      lisp: Lisp
+      lua: Lua
+      makefile: Makefile
+      markdown: Markdown
+      markup: Markup
+      objectivec: Objective-C
+      pascal: Pascal
+      perl: Perl
+      php: PHP
+      text: Plain Text
+      python: Python
+      r: R
+      ruby: Ruby
+      rust: Rust
+      sass: Sass
+      scss: SCSS
+      shell: Shell
+      sql: SQL
+      swift: Swift
+      typescript: TypeScript
+      vbnet: VB.net
+      xml: XML
+      yaml: YAML