// Represents: GET /slideshow · SlideshowsController — see docs/ISYSTEM_REFERENCE.md §Batch 4 "Banners (Slideshow)" /* CMS ▾ → Banners. Screen actions: SlideshowsController::index (L24 — 404s for Customer Care without `support_cms_banners`), ::slideshowForm (L61, GET /slideshow/form/?id=, the AJAX modal body), ::saveSlideshow (L73, POST /slideshow/saveSlideshow/?id=) and ::delete (L105, GET /slideshow/delete/{id}/). Routes routes/admin.php:L964-974 (+ L1625-1627 for delete) — all UNNAMED, inside Route::name('admin.')->middleware(['auth','admin','2fa','g2fa']). Enum helpers ::statiSlideshows L156 / ::tipologieSlideshow L173. All business logic lives in App\Services\SlideshowAdminService (MAX_IMAGES = 6); validation in App\Http\Requests\Admin\StoreSlideshowRequest. Views: admin/slideshow/index.blade.php + modal admin/slideshow/modals/slideshow.blade.php (generaModalGestione) + AJAX form admin/slideshow/forms/slideshow.blade.php with partial _upload-meta and component components/admin/slideshow/classic-image-card.blade.php; JS public/js/pages/slideshow/form.js. A `slideshows` row is ONE banner set, scoped to (skin_id, page, lang), rendered by the front office either as a Blade slideshow (SlideshowsController::showSlideShow → frontend.slideshow. default|slick) or through FAPI `GET /api/slideshow` (routes/fapi-v2.php:L45 → Fapi\Slideshow Controller::getList → Fapi\SlideshowService → SlideshowRepository). Each row carries up to MAX_IMAGES = 6 image slots (img_1..img_6 + their _mobile/_url/_nome_tasto/_priority/_login siblings); which of those slots the form exposes, and how, is decided entirely by `slideshow_type`: · default / slick → the six classic image cards · grid_view → max 3 drag-ordered grid banners with per-language texts stored as JSON {lang: value} in img_N_tag_name/_title/_subtitle/_nome_tasto, slots 4-6 zeroed, actives compacted into 1-3 by priority on save · sign_in_sign_up → two fixed sections pinned to slots 1 and 2, per-language image JSON in img_1/img_2, active forced to 1 Known real-platform defects, handled per the repo's known-bug policy (CLAUDE.md): 1. MOBILE IMAGE DROPPED ON CREATE. `img_*_mobile` is missing from Slideshow::$fillable (it only appears in SHOW_COLUMNS L90-95), so Slideshow::create($datip) mass-assignment strips every mobile file uploaded while CREATING a classic slideshow; the same fields persist on EDIT because that path is a query-builder Slideshow::where(...)->update() which bypasses $fillable. Net effect on the real platform: upload desktop + mobile on a new banner, save, and the mobile image is silently gone until you re-open and save a second time. The evident intent — the form offers the field, the front office reads it, the edit path stores it — is implemented here: mobile files survive the create. See hcbSaveRow() and the Tip on the mobile uploader in HcbClassicCard. 2. `whosee` IS WRITTEN, `show_type` IS READ. The form's "Who should see the slideshow" select is persisted to slideshows.whosee (SlideshowAdminService L144), but BOTH front-office readers filter on a different column — SlideshowsController L212 and SlideshowRepository L27 query show_type IN [0,1] when the viewer is authenticated and [0,2] when they are a guest — and nothing anywhere in the codebase writes show_type. So on the real platform the visibility select does not drive the visibility gate. The reference records this as UNCLEAR (show_type may be maintained by some external process), so this page does not pretend the divergence away: the evident intent (one visibility choice, honoured by the front office) is implemented by writing BOTH columns, and the divergence is stated in the field hint and in the Explainer rather than hidden. Both enums use the same 0/1/2 domain, which is what makes the intent evident: whosee 0 ALL / 1 Registered users / 2 Guests ≡ show_type 0 everyone / 1 logged-in only / 2 guests only. Faithful real-platform behaviour deliberately reproduced, NOT "fixed" (these are documented design choices, not bugs, so the known-bug policy does not apply): - Grid banners never store mobile artwork — SlideshowAdminService nulls img_N_mobile for grid_view. Grid is desktop-image-only and the form says so instead of offering a dead field. - Sign In/Sign Up reuses slots 1 and 2 and forces active = 1 on both. - Grid slots 4-6 are zeroed on save and the enabled banners are compacted into slots 1-3 by priority, so the stored slot number can differ from the on-screen order before saving. - The dimensions/mime helper text on the sign-auth uploads ("720 x 868" / "720 x 1477", .png) is display-only; only the GRID image is server-validated (image|mimes:png|dimensions: width=556,height=494 — SlideshowAdminService L338-345). Classic desktop/mobile files are validated as `image` only (L441, L453). - "Max size: 20mb" (_upload-meta.blade.php) is a caption; no size rule exists server-side. - The list is fixed ORDER BY slideshows.id DESC — no column is sortable. - The per-page filter is submitted as `page_id`, not `page`, because `page` is taken by the Laravel paginator. - Delete is a GET with no CSRF token, gated by canManageBannerForSkin() (own-skin scope; out-of-scope rows answer "Permission error"). Reproduced as-is, honestly labelled. - The modal's "new" title parameter is the leftover Italian "Nuovo slideshow"; the English label is used here, see HcbFormModal. - Sortable.js is pulled from the jsdelivr CDN and loaded twice (index L25 + form L378), with a retry loop in form.js to dodge an async-script race. Not reproduced (this prototype has no external dependency); grid reordering here is native drag-and-drop plus keyboard-reachable move buttons, which is the same outcome. Deliberately NOT built, because the real screen does not have it: no export (none exists), no bulk actions, no sortable columns, no KPI cards beyond the Results count + the status chip strip, no preview/duplicate/reorder-from-the-list actions, and no restore of any kind. Label policy (CLAUDE.md): every `backend.*` key this screen uses that resolves NOWHERE in the committed public/default-lang/en/backend.php — slideshow_index_subtitle, slideshow_search_ placeholder, type_of_banners, every slideshow_form_* key (big_size, grid_banners, remove, tag_name, title, subtitle, button_name, keep_background, add_section, sign_in_sign_up_banners, banner_link, network, upload_image, dimensions, max_size), user_not_found, select_user, results, apply, showing, prev, next, no_records, created — is rendered with a sensible operator-facing label carrying an inline "label inferred" marker. Runtime translations live in the gitignored storage/lang, so these are inferred, not invented from nothing. Mock data: skins are the shared HSD_SKINS/HRBZ_SKINS ids+names used by the rest of the Host rebuild, languages the shared HSL_SEED_LANGS set, so one prototype persona spans the build. Persona = super admin (isadmin()), which is why the Skin filter renders — see the field Tip. */ const { useState: hcbUseState, useMemo: hcbUseMemo } = React; /* Deterministic PRNG (FNV-1a + mulberry32), same convention as the sibling Host pages: every derived detail (image slots, priorities, notes, network targets) is a pure function of the row id, so the list and every form render identically on every load. */ const hcbHash = (s) => { let h = 2166136261 >>> 0; for (let i = 0; i < s.length; i++) { h ^= s.charCodeAt(i); h = Math.imul(h, 16777619); } return h >>> 0; }; const hcbRng = pbRng; // was a local copy of mulberry32 — see pbRng in src/data.jsx const hcbPick = (rnd, arr) => arr[Math.floor(rnd() * arr.length)]; /* SkinsController::skinPages() L4132 — the exact 11 entries, in source order. Feeds both the Page filter (submitted as `page_id`) and the form's required Page select. */ const HCB_PAGES = [ { value: "home", label: "Home" }, { value: "promotion", label: "Promotion" }, { value: "race", label: "Race" }, { value: "casino", label: "Casino" }, { value: "casino-live", label: "Casino Live" }, { value: "sport", label: "Sport" }, { value: "poker", label: "Poker" }, { value: "virtual", label: "Virtual" }, { value: "crashgames_list", label: "Crash Games" }, { value: "tablegames_list", label: "Table Games" }, { value: "virtual_pragmatic", label: "Virtual Pragmatic" }, ]; /* SkinsController::getSkinsListForCurrentUser() (L753) — all skins for a super admin, owned skins otherwise. Same ids/names the Report ▾ and Settings ▾ rebuilds use. */ const HCB_SKINS = [ { id: 47, name: "win24hs" }, { id: 52, name: "apostando365" }, { id: 55, name: "apuestadepana" }, { id: 58, name: "PlaySpin" }, { id: 60, name: "Anchodeespada" }, { id: 62, name: "Jokerenvivo" }, { id: 64, name: "Donjoker" }, { id: 66, name: "Juegojoker" }, { id: 68, name: "Tucasino" }, { id: 70, name: "Jugaygana" }, ]; /* `languages` rows via LanguagesController::getLanguages() (cached 24h), English forced first — same seed set as the Languages settings screen. Used for the `lang` select (prefixed with the literal 'all' option) and for the per-language translation/upload tabs of the grid and sign-auth types. */ const HCB_LANGS = [ { code: "en", name: "English" }, { code: "es", name: "Español" }, { code: "pt", name: "Português" }, { code: "pt_br", name: "Português-Brasil" }, { code: "it", name: "Italiano" }, { code: "fr", name: "Français" }, { code: "de", name: "Deutsch" }, { code: "tr", name: "Türkçe" }, ]; /* tipologieSlideshow() L173. `grid_view` maps to ITSELF on the real platform — the array has no human label for it, so the table prints the raw slug. Per the label policy an operator-facing label is shown here and the raw value is kept visible in the cell tooltip + the Type column header Tip, so nothing is quietly renamed. */ const HCB_TYPES = [ { value: "default", label: "Default", inferred: false }, { value: "slick", label: "Slick", inferred: false }, { value: "grid_view", label: "Grid view", inferred: true }, { value: "sign_in_sign_up", label: "Sign In/Sign Up Banners", inferred: false }, ]; /* statiSlideshows() L156 */ const HCB_STATI = [{ value: "1", label: "Active" }, { value: "0", label: "Disabled" }]; /* whosee 0/1/2 — 0 is __('backend.all_selections'). The same 0/1/2 domain is what the front office reads out of show_type (0 everyone / 1 logged-in only / 2 guests only). */ const HCB_WHOSEE = [ { value: "0", label: "ALL", show: "everyone" }, { value: "1", label: "Registered users", show: "logged-in only" }, { value: "2", label: "Guests", show: "guests only" }, ]; const HCB_MAX_IMAGES = 6; // SlideshowAdminService::MAX_IMAGES const HCB_GRID_MAX = 3; // grid_view caps at 3 banners; slots 4-6 are zeroed on save const HCB_PAGE_SIZE = 25; // listForTable() default (L25) → Laravel paginate(25) /* UsersController::searchUsers2 (GET /users2, routes/admin.php L504-506). The select2 sends user_types: [2,8,10,15,20] and the chosen skin_id, and is disabled until a skin is picked. Levels per App\Constants\UserRole: 2 ADMIN (Skin) · 8 MASTER (Agent) · 10 AGENT (Promoter) · 15 PROMOTER (Shop) · 20 SHOP (Cashier). */ const HCB_NETWORK_USERS = [ { id: 1104, username: "jokerenvivo_admin", level: 2, skin: 62, user_path: "/1/62/1104" }, { id: 1187, username: "centro_agent", level: 8, skin: 62, user_path: "/1/62/1104/1187" }, { id: 1244, username: "promotor_norte", level: 10, skin: 62, user_path: "/1/62/1104/1187/1244" }, { id: 1301, username: "shop_palermo", level: 15, skin: 62, user_path: "/1/62/1104/1187/1244/1301" }, { id: 1355, username: "caja_palermo_1", level: 20, skin: 62, user_path: "/1/62/1104/1187/1244/1301/1355" }, { id: 2101, username: "jugaygana_admin", level: 2, skin: 70, user_path: "/1/70/2101" }, { id: 2188, username: "jyg_agente_sur", level: 8, skin: 70, user_path: "/1/70/2101/2188" }, { id: 2242, username: "jyg_promotor_2", level: 10, skin: 70, user_path: "/1/70/2101/2188/2242" }, { id: 3102, username: "tucasino_admin", level: 2, skin: 68, user_path: "/1/68/3102" }, { id: 3190, username: "tc_agente_este", level: 8, skin: 68, user_path: "/1/68/3102/3190" }, { id: 4103, username: "win24_admin", level: 2, skin: 47, user_path: "/1/47/4103" }, { id: 4177, username: "w24_agente_1", level: 8, skin: 47, user_path: "/1/47/4103/4177" }, { id: 5104, username: "donjoker_admin", level: 2, skin: 64, user_path: "/1/64/5104" }, { id: 6105, username: "juegojoker_admin", level: 2, skin: 66, user_path: "/1/66/6105" }, ]; const HCB_LEVELS = { 2: "Skin admin", 8: "Agent", 10: "Promoter", 15: "Shop", 20: "Cashier" }; /* ------------------------------------------------------------------ * * Lookups * ------------------------------------------------------------------ */ const hcbSkin = (id) => HCB_SKINS.find(s => s.id === Number(id)) || null; /* skinPages()[$row->page]['name'] with a raw-slug fallback — a page slug that is no longer in the map still renders, exactly as the Blade does. */ const hcbPageName = (slug) => { const p = HCB_PAGES.find(x => x.value === slug); return p ? p.label : slug; }; const hcbType = (v) => HCB_TYPES.find(t => t.value === v) || { value: v, label: v, inferred: false }; const hcbLangName = (code) => { const l = HCB_LANGS.find(x => x.code === code); return l ? l.name : String(code || "").toUpperCase(); }; const hcbInitials = (name) => String(name || "").trim().split(/[\s_-]+/).slice(0, 2).map(w => w.charAt(0).toUpperCase()).join("") || "?"; const HCB_MONTHS = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"]; /* date('j M Y, H:i', addedTime) — `addedTime` is a unix-timestamp column (model getDateFormat() returns 'U'); an empty value renders "—". */ const hcbCreated = (t) => { if (!t) return null; const d = new Date(t * 1000); return `${d.getDate()} ${HCB_MONTHS[d.getMonth()]} ${d.getFullYear()}, ${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`; }; const hcbUnix = (y, m, d, h, mi) => Math.floor(new Date(y, m - 1, d, h, mi, 0).getTime() / 1000); /* ------------------------------------------------------------------ * * `slideshows` rows. Fixed ORDER BY slideshows.id DESC — the list has no * sortable column, so the seed is authored already in display order. * ------------------------------------------------------------------ */ const HCB_SEED = [ { id: 79, skin_id: 62, nome: "signup", page: "home", lang: "all", type: "sign_in_sign_up", stato: 1, addedTime: hcbUnix(2026, 3, 24, 17, 15) }, { id: 78, skin_id: 62, nome: "Prod_Banners", page: "home", lang: "all", type: "grid_view", stato: 1, addedTime: hcbUnix(2026, 3, 9, 16, 39) }, { id: 77, skin_id: 70, nome: "Home main ES", page: "home", lang: "es", type: "default", stato: 1, addedTime: hcbUnix(2026, 3, 2, 11, 4) }, { id: 76, skin_id: 47, nome: "Casino Live hero", page: "casino-live", lang: "all", type: "slick", stato: 1, addedTime: hcbUnix(2026, 2, 25, 9, 22) }, { id: 75, skin_id: 64, nome: "signup", page: "home", lang: "all", type: "sign_in_sign_up", stato: 1, addedTime: hcbUnix(2026, 3, 24, 17, 15) }, { id: 74, skin_id: 64, nome: "Prod_Banners", page: "home", lang: "all", type: "grid_view", stato: 1, addedTime: hcbUnix(2026, 3, 9, 16, 39) }, { id: 73, skin_id: 52, nome: "Promos febrero", page: "promotion", lang: "es", type: "default", stato: 0, addedTime: hcbUnix(2026, 2, 11, 15, 47) }, { id: 72, skin_id: 68, nome: "Table games", page: "tablegames_list", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2026, 2, 4, 10, 18) }, { id: 71, skin_id: 66, nome: "signup", page: "home", lang: "all", type: "sign_in_sign_up", stato: 1, addedTime: hcbUnix(2026, 3, 24, 17, 15) }, { id: 70, skin_id: 66, nome: "Prod_Banners", page: "home", lang: "all", type: "grid_view", stato: 1, addedTime: hcbUnix(2026, 3, 9, 16, 39) }, { id: 69, skin_id: 55, nome: "Sport top", page: "sport", lang: "es", type: "slick", stato: 1, addedTime: hcbUnix(2026, 1, 28, 8, 55) }, { id: 68, skin_id: 58, nome: "Virtual Pragmatic", page: "virtual_pragmatic", lang: "all", type: "default", stato: 0, addedTime: hcbUnix(2026, 1, 20, 13, 31) }, { id: 67, skin_id: 60, nome: "Poker lobby", page: "poker", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2026, 1, 12, 17, 2) }, { id: 66, skin_id: 70, nome: "Jugaygana Live", page: "casino-live", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 11, 25, 10, 51) }, { id: 65, skin_id: 47, nome: "Race weekly", page: "race", lang: "en", type: "default", stato: 0, addedTime: hcbUnix(2025, 11, 21, 16, 20) }, { id: 64, skin_id: 47, nome: "Casino", page: "home", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 11, 19, 18, 55) }, { id: 63, skin_id: 68, nome: "tucasino banner", page: "home", lang: "all", type: "grid_view", stato: 1, addedTime: hcbUnix(2025, 11, 13, 13, 18) }, { id: 62, skin_id: 70, nome: "Crash Games", page: "crashgames_list", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 10, 30, 10, 6) }, { id: 61, skin_id: 52, nome: "Apostando365CasinoLive", page: "casino-live", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 10, 16, 10, 4) }, { id: 60, skin_id: 52, nome: "Apostando365Crash", page: "crashgames_list", lang: "all", type: "default", stato: 0, addedTime: hcbUnix(2025, 10, 16, 10, 3) }, { id: 59, skin_id: 68, nome: "Casino", page: "home", lang: "all", type: "default", stato: 0, addedTime: hcbUnix(2025, 10, 9, 14, 7) }, { id: 58, skin_id: 62, nome: "Home main", page: "home", lang: "all", type: "grid_view", stato: 0, addedTime: hcbUnix(2025, 10, 2, 9, 33) }, { id: 57, skin_id: 64, nome: "Promotion PT", page: "promotion", lang: "pt", type: "default", stato: 1, addedTime: hcbUnix(2025, 9, 24, 12, 40) }, { id: 56, skin_id: 66, nome: "Casino", page: "casino", lang: "all", type: "slick", stato: 1, addedTime: hcbUnix(2025, 9, 15, 11, 11) }, { id: 55, skin_id: 60, nome: "signup", page: "home", lang: "all", type: "sign_in_sign_up", stato: 0, addedTime: hcbUnix(2025, 9, 3, 19, 26) }, { id: 54, skin_id: 58, nome: "Sport IT", page: "sport", lang: "it", type: "default", stato: 1, addedTime: hcbUnix(2025, 8, 27, 9, 48) }, { id: 53, skin_id: 55, nome: "Home", page: "home", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 8, 14, 15, 5) }, /* addedTime is nullable in practice on very old rows — the Blade prints "—". */ { id: 52, skin_id: 47, nome: "Virtual", page: "virtual", lang: "all", type: "default", stato: 0, addedTime: 0 }, { id: 51, skin_id: 70, nome: "Table games", page: "tablegames_list", lang: "all", type: "slick", stato: 1, addedTime: hcbUnix(2025, 7, 21, 14, 12) }, { id: 50, skin_id: 62, nome: "Casino Live", page: "casino-live", lang: "all", type: "default", stato: 1, addedTime: hcbUnix(2025, 7, 9, 8, 36) }, ]; const HCB_HEADLINES = ["Bono de bienvenida 150%", "Ruleta en vivo 24/7", "Crash x1000", "Torneo semanal", "Cashback los lunes", "Apuesta y gana", "Nuevos slots", "Giros gratis"]; const HCB_TAGS = ["NUEVO", "PROMO", "VIP", "HOT", "EXCLUSIVO"]; const HCB_BTNS = ["Jugar ahora", "Ver más", "Registrarse", "Depositar", "Participar"]; const hcbBlankSlot = (n) => ({ n, active: false, img: "", mobile: "", url: "", nome_tasto: "", priority: String(n), login: false, }); const hcbBlankGrid = (n) => ({ n, order: n, enabled: n === 1, image: "", image_existing: "", keep_background: false, url: "", translations: {}, }); const hcbBlankAuth = (section) => ({ section, images: {}, url: "" }); /* Image payload for a row, derived deterministically from its id. Real column shapes: classic rows fill img_N/_mobile/_url/_nome_tasto/_priority/_login; grid rows fill img_N plus the four JSON {lang: value} text columns and share one img_N_url; sign-auth rows fill img_1/img_2 with a JSON {lang: filename} map and one img_N_url each. All three shapes are always allocated (blank where the type does not use them) because the six img_* column families exist on EVERY row: the real form is rendered server-side with all three sections present and form.js only toggles which one is visible, so changing Type of banners mid-edit has to land on a usable section rather than an empty one. */ const hcbEmptySlots = () => Array.from({ length: HCB_MAX_IMAGES }, (_, i) => hcbBlankSlot(i + 1)); const hcbEmptyGrid = () => Array.from({ length: HCB_GRID_MAX }, (_, i) => hcbBlankGrid(i + 1)); const hcbEmptyAuth = () => [hcbBlankAuth("sign_in"), hcbBlankAuth("sign_up")]; const hcbBuildMedia = (row) => { const rnd = hcbRng(hcbHash(`slideshow|${row.id}|${row.type}`)); const slug = String(row.nome).toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_|_$/g, "") || "banner"; if (row.type === "grid_view") { const count = 1 + Math.floor(rnd() * HCB_GRID_MAX); const grid = []; for (let i = 1; i <= HCB_GRID_MAX; i++) { const g = hcbBlankGrid(i); g.enabled = i <= count; if (g.enabled) { g.image_existing = `${slug}_grid_${i}_${Math.floor(rnd() * 9000 + 1000)}.png`; g.keep_background = rnd() > 0.6; g.url = i === 1 ? "/promotions" : `/promotions/${slug}-${i}`; HCB_LANGS.forEach((l, li) => { if (li > 2 && rnd() > 0.35) return; // not every language is translated g.translations[l.code] = { tag_name: hcbPick(rnd, HCB_TAGS), title: hcbPick(rnd, HCB_HEADLINES), subtitle: "Términos y condiciones aplican", button_text: hcbPick(rnd, HCB_BTNS), }; }); } grid.push(g); } return { slots: hcbEmptySlots(), grid, auth: hcbEmptyAuth() }; } if (row.type === "sign_in_sign_up") { const auth = ["sign_in", "sign_up"].map((section, idx) => { const a = hcbBlankAuth(section); a.url = idx === 0 ? "/login" : "/signup"; HCB_LANGS.forEach((l, li) => { if (li > 1 && rnd() > 0.45) return; a.images[l.code] = `${slug}_${section}_${l.code}.png`; }); return a; }); return { slots: hcbEmptySlots(), grid: hcbEmptyGrid(), auth }; } const count = 1 + Math.floor(rnd() * 4); const slots = []; for (let i = 1; i <= HCB_MAX_IMAGES; i++) { const s = hcbBlankSlot(i); if (i <= count) { s.active = true; s.img = `${slug}_${i}_${Math.floor(rnd() * 9000 + 1000)}.jpg`; /* Some rows carry no mobile artwork at all — on the real platform that is often not a choice but bug #1 above: the file was uploaded on the create form and dropped. */ s.mobile = rnd() > 0.4 ? `${slug}_${i}_mobile_${Math.floor(rnd() * 9000 + 1000)}.jpg` : ""; s.url = i === 1 ? "/casino" : `/casino/${slug}-${i}`; s.nome_tasto = rnd() > 0.5 ? hcbPick(rnd, HCB_BTNS) : ""; s.priority = String(i); s.login = rnd() > 0.7; } slots.push(s); } return { slots, grid: hcbEmptyGrid(), auth: hcbEmptyAuth() }; }; const hcbBuildRows = () => HCB_SEED.map(r => { const rnd = hcbRng(hcbHash(`meta|${r.id}|${r.nome}`)); /* `whosee` is nullable in validation but the label carries obbligatorio(); rows created before the field existed can legitimately be null, which is why the select keeps an empty option. */ const whosee = rnd() > 0.75 ? String(1 + Math.floor(rnd() * 2)) : "0"; const targeted = rnd() > 0.8; const candidates = HCB_NETWORK_USERS.filter(u => u.skin === r.skin_id); const target = targeted && candidates.length ? candidates[Math.floor(rnd() * candidates.length)] : null; return { ...r, is_big: r.type === "default" && rnd() > 0.65 ? 1 : 0, whosee, /* Evident intent (bug #2): the prototype keeps show_type in step with whosee. On the real platform this column is whatever some out-of-band process left in it. */ show_type: whosee, user_id: target ? target.id : null, user_path: target ? target.user_path : "", note: rnd() > 0.7 ? "Rotación aprobada por marketing." : "", media: hcbBuildMedia(r), }; }); const hcbNewRow = () => ({ id: null, skin_id: "", nome: "", page: "", lang: "all", type: "default", stato: 0, is_big: 0, whosee: "0", show_type: "0", user_id: null, user_path: "", note: "", addedTime: 0, media: { slots: hcbEmptySlots(), grid: hcbEmptyGrid(), auth: hcbEmptyAuth() }, }); /* ------------------------------------------------------------------ * * Modal chrome — shared .bp-modal scrim, full-screen on mobile (§11). * The real modal is generaModalGestione() → admin/utils/modal.blade.php * with the body AJAX-loaded from GET /slideshow/form. * ------------------------------------------------------------------ */ const HcbModal = ({ title, sub, onClose, children, footer, size }) => (
e.stopPropagation()}>
{title}
{sub &&
{sub}
}
{children}
{footer &&
{footer}
}
); /* Settings.jsx-style sectioned panel: a titled block that can carry its own Explainer callout. */ const HcbSection = ({ title, hint, right, children }) => (
{title}
{right}
{hint &&
{hint}
}
{children}
); const HcbField = ({ label, required, tip, hint, error, children, wide }) => (
{label && ( )} {children} {hint &&
{hint}
} {error &&
{error}
}
); const HcbCheck = ({ checked, onChange, label, disabled, tip }) => ( ); /* ------------------------------------------------------------------ * * Upload widget. Real markup: a file input plus the _upload-meta partial * ("Upload image" / dimensions / "Max size: 20mb"). Nothing uploads in the * prototype — the picker records the chosen filename so the rest of the * form behaves exactly as it would with a stored file. Saved files land in * storeAs('public/slideshow', …) and are then @copy'd to * config('media.MEDIA_SLIDESHOWS_ROOT_PATH'). * ------------------------------------------------------------------ */ const HcbUpload = ({ id, label, accept, value, existing, onChange, dimensions, tip, error, note }) => (
{label} {tip && {tip}}
onChange(e.target.files && e.target.files[0] ? e.target.files[0].name : "")} />
{value ? <>{value} new : existing ? {existing} : No file selected}
{accept && {accept.split(",").join(" / ")}} {dimensions && {dimensions}} {/* backend.slideshow_form_max_size — caption only, never enforced anywhere server-side */} Max size: 20mb Display-only caption from _upload-meta.blade.php. No size rule exists in StoreSlideshowRequest or SlideshowAdminService, so a larger file is rejected by PHP's upload limits, not by the application.
{note &&
{note}
}
{(value || existing) && ( )}
{error &&
{error}
}
); /* ------------------------------------------------------------------ * * Classic image card (types default + slick) — one per img_1..img_6. * Mirrors components/admin/slideshow/classic-image-card.blade.php. * ------------------------------------------------------------------ */ const HcbClassicCard = ({ slot, onPatch, isNew }) => (
Banner {slot.n} onPatch({ active: v })} label="Active" />
onPatch({ imgNew: v, img: v ? slot.img : "" })} tip={<>Field img_{slot.n}. The input accepts .png,.jpg,.jpeg, but the server rule is just image (SlideshowAdminService L441) — no mime or dimension check.} /> {/* KNOWN BUG — DIVERGENCE (see header #1): img_*_mobile is absent from Slideshow::$fillable, so the real create path drops whatever is uploaded here and only a later edit persists it. Evident intent implemented: this prototype keeps the file on create too. */} onPatch({ mobileNew: v, mobile: v ? slot.mobile : "" })} tip={<>Field img_{slot.n}_mobile. On the real platform this column is missing from Slideshow::$fillable, so a mobile image uploaded while creating a new slideshow is silently discarded — it only sticks if you save the row a second time from the edit form. This prototype implements the evident intent and keeps it on create.} note={isNew ? <> Kept on create here; the real platform would drop it until the next save. : null} /> {/* img_N_url */} onPatch({ url: e.target.value })} /> {/* img_N_nome_tasto */} onPatch({ nome_tasto: e.target.value })} /> Field img_{slot.n}_priority — a free-text field, not validated. It orders the slides inside the set.}> onPatch({ priority: e.target.value })} /> Field img_{slot.n}_login — renders the slide's call-to-action as a login button in the front office.}> onPatch({ login: v })} onLabel="On" offLabel="Off" size="sm" />
); /* ------------------------------------------------------------------ * * Grid banner (type grid_view) — max 3, drag-reorder (the real form uses * Sortable.js from a CDN; native DnD + move buttons here), Add/Remove * section, banner 1 non-removable and forced enabled. * ------------------------------------------------------------------ */ const HcbGridBanner = ({ banner, index, count, lang, onLang, onPatch, onMove, onRemove, onDragStart, onDragOver, onDrop, error }) => { const tr = banner.translations[lang] || {}; const patchTr = (patch) => onPatch({ translations: { ...banner.translations, [lang]: { ...tr, ...patch } } }); const first = index === 0; return (
Banner {index + 1} slot img_{banner.n}
{/* banner 1 is non-removable and force-enabled by form.js */} onPatch({ enabled: v })} tip={first ? <>The first grid banner cannot be disabled or removed — form.js forces grid_banners[1][enabled] = 1. : null} />
onPatch({ image: v })} dimensions="Exactly 556 x 494 px" error={error} tip={<>Field grid_banner_{banner.n}_image — the ONLY upload on this screen with a real server rule: image|mimes:png|dimensions:width=556,height=494 (SlideshowAdminService L338-345). A JPEG or an off-size PNG is rejected on save.} /> onPatch({ keep_background: v })} tip={<>Field grid_banners[{banner.n}][keep_background]. Keeps the currently stored artwork when no new file is chosen.} />{/* label inferred */}
Language {HCB_LANGS.map(l => ( ))}
{/* label inferred */} patchTr({ tag_name: e.target.value })} /> {/* label inferred */} patchTr({ title: e.target.value })} /> {/* label inferred */} patchTr({ subtitle: e.target.value })} /> {/* label inferred */} patchTr({ button_text: e.target.value })} /> The per-language button_link inputs are mirrored by form.js into one shared value and stored in a single img_{banner.n}_url column — so this link is the same for every language, by design.} hint="Shared across all languages">{/* label inferred — backend.slideshow_form_banner_link */} onPatch({ url: e.target.value })} />
); }; /* ------------------------------------------------------------------ * * Sign In / Sign Up section (type sign_in_sign_up) — two fixed sections * pinned to slots 1 and 2, per-language upload, one shared link each. * ------------------------------------------------------------------ */ const HcbAuthBanner = ({ banner, slot, title, dims, lang, onLang, onPatch }) => (
{title}
slot img_{slot} always active
Language {HCB_LANGS.map(l => ( ))}
onPatch({ images: { ...banner.images, [lang]: v } })} dimensions={dims} tip={<>Field auth_banner_{banner.section}_image_{lang}, stored as JSON {"{lang: filename}"} in img_{slot}. The dimensions and the .png restriction are helper text only — neither is validated server-side for this type.} /> {/* label inferred */} onPatch({ url: e.target.value })} />
); /* ------------------------------------------------------------------ * * Network picker — the real control is a select2 fed by GET /users2 * (UsersController::searchUsers2) with user_types [2,8,10,15,20] and the * chosen skin_id, DISABLED until a skin is selected. On save the chosen * user's `user_path` is denormalised onto the slideshow row; the front * office then shows the banner only to viewers whose own user_path starts * with it, otherwise falling back to a row with an empty user_path * (SlideshowsController L216-224). * ------------------------------------------------------------------ */ const HcbNetworkPicker = ({ skinId, value, onChange, error }) => { const [q, setQ] = hcbUseState(""); const [open, setOpen] = hcbUseState(false); const disabled = !skinId; const chosen = HCB_NETWORK_USERS.find(u => u.id === Number(value)) || null; const pool = HCB_NETWORK_USERS.filter(u => u.skin === Number(skinId)); const hits = q.trim() ? pool.filter(u => u.username.toLowerCase().indexOf(q.trim().toLowerCase()) !== -1 || String(u.id) === q.trim()) : pool; return (
{chosen ? (
{chosen.username} {HCB_LEVELS[chosen.level]} {chosen.user_path}
) : ( <> setOpen(true)} onChange={e => { setQ(e.target.value); setOpen(true); }} /> {open && !disabled &&
setOpen(false)} />} {open && !disabled && (
{hits.length === 0 &&
No user found for this skin.
} {hits.map(u => ( ))}
)} )}
); }; /* ------------------------------------------------------------------ * * Create / Edit form. GET /slideshow/form/?id= → modal → POST * /slideshow/saveSlideshow/?id=, gated at save by * canManageBannerForSkin(). Validation mirrors StoreSlideshowRequest: * failedValidation() answers ajaxError JSON carrying a `campierrati` * field list, which the shared modal turns into red field outlines. * ------------------------------------------------------------------ */ const HcbFormModal = ({ row, onClose, onSave }) => { const isNew = row.id == null; const [f, setF] = hcbUseState(() => JSON.parse(JSON.stringify(row))); const [lang, setLang] = hcbUseState("en"); const [errs, setErrs] = hcbUseState({}); const [banner, setBanner] = hcbUseState(""); const [drag, setDrag] = hcbUseState(null); const set = (patch) => { setF(x => ({ ...x, ...patch })); setBanner(""); }; const clearErr = (k) => setErrs(x => { const n = { ...x }; delete n[k]; return n; }); const patchSlot = (i, patch) => setF(x => { const slots = x.media.slots.slice(); slots[i] = { ...slots[i], ...patch }; return { ...x, media: { ...x.media, slots } }; }); const patchGrid = (i, patch) => setF(x => { const grid = x.media.grid.slice(); grid[i] = { ...grid[i], ...patch }; return { ...x, media: { ...x.media, grid } }; }); const patchAuth = (i, patch) => setF(x => { const auth = x.media.auth.slice(); auth[i] = { ...auth[i], ...patch }; return { ...x, media: { ...x.media, auth } }; }); const moveGrid = (i, d) => setF(x => { const grid = x.media.grid.slice(); const j = i + d; if (j < 0 || j >= grid.length) return x; const t = grid[i]; grid[i] = grid[j]; grid[j] = t; return { ...x, media: { ...x.media, grid } }; }); const isClassic = f.type === "default" || f.type === "slick"; const isGrid = f.type === "grid_view"; const isAuth = f.type === "sign_in_sign_up"; const gridShown = f.media.grid.filter((g, i) => i === 0 || g.enabled); const save = () => { /* StoreSlideshowRequest: nome required|string · page required · skin_id required · lang required|string · slideshow_type required|Rule::in(default,slick,grid_view, sign_in_sign_up) · whosee nullable|in:0,1,2 · is_big nullable|in:0,1 · stato nullable| in:0,1. prepareForValidation() coerces is_big/stato to 0/1. Plus the service-side rules: the grid image is required + PNG + exactly 556x494, and a Network user that does not resolve fails with backend.user_not_found. */ const e = {}; if (!String(f.nome).trim()) e.nome = "Insert a name"; if (!f.page) e.page = "Select a page"; if (!f.skin_id) e.skin_id = "Select a skin"; if (!f.lang) e.lang = "Select a language"; if (!f.type) e.slideshow_type = "Select a type of banners"; if (isGrid) { f.media.grid.forEach((g, i) => { if ((i === 0 || g.enabled) && !g.image && !g.image_existing) e[`grid_${g.n}`] = "A 556 x 494 PNG is required for this banner"; }); } if (f.user_id && !HCB_NETWORK_USERS.some(u => u.id === Number(f.user_id))) e.user_id = "User not found";/* label inferred — backend.user_not_found */ setErrs(e); const keys = Object.keys(e); if (keys.length) { setBanner(e[keys[0]]); return; } setBanner(""); onSave(f, isNew); onClose(); }; const skinOpts = HCB_SKINS; return ( New slideshow{/* label inferred — real modal title is the hardcoded Italian "Nuovo slideshow" */} : `Edit ${f.nome}`} sub={isNew ? <>POST /slideshow/saveSlideshow/ · gated by canManageBannerForSkin() : <>ID {f.id} · POST /slideshow/saveSlideshow/?id={f.id}} onClose={onClose} footer={<> }> {banner &&
{banner}
} Identity of the banner set. The triple skin + page + language is what the front office matches on when it asks for a slideshow — two rows with the same triple both qualify, and the network targeting below breaks the tie.}>
{ set({ nome: e.target.value }); clearErr("nome"); }} /> Stored in slideshows.page as the slug. The list filter submits the same value as page_id, not page, because page is reserved by the Laravel paginator.}> A super admin and Customer Care get this select (options limited to the skins they own); everyone else gets a hidden input pinned to Auth::user()->skin_id. The save re-checks scope with canManageBannerForSkin(), so picking a skin outside your own answers "Permission error".}> Field slideshow_type. It decides which section below renders and how the six image slots are used. grid_view has no human label on the real platform — tipologieSlideshow() maps it to itself, so the list prints the raw slug.}> {/* form.js hides the language select for grid/sign-auth types — those store their texts and images per language internally — but the field is still submitted, and it is still `required` in StoreSlideshowRequest. Hidden here for the same reason, with the stored value stated so nothing is silently posted. */} {isClassic ? ( Option ALL is the literal string all; every other option is a languages row code. The front office matches the viewer's language against this column.}> ) : ( Hidden by form.js for this type — the grid and sign-auth banners carry their own per-language content — but the field is still submitted and is still required server-side.}>
Submitted as {f.lang || "all"} (hidden by the form for this type)
 )} Field is_big, submitted with the hidden-0 + checkbox-1 pattern and coerced to 0/1 by prepareForValidation(). It selects the taller front-office layout.}> set({ is_big: v ? 1 : 0 })} />
{isClassic && ( {f.media.slots.filter(s => s.active).length} of {HCB_MAX_IMAGES} active} hint={ Every slideshow row owns six fixed image slots (img_1…img_6). A slot is published when its Active box is ticked; the Priority field orders the published slides inside the set. Desktop and mobile artwork are separate columns, and only the desktop one is guaranteed to survive a first save on the real platform — see the note on the mobile uploader. }>
{f.media.slots.map((s, i) => ( patchSlot(i, p)} /> ))}
)} {isGrid && ( {gridShown.length} of {HCB_GRID_MAX}} hint={ Up to three banners, drag-ordered. Their texts are kept per language as JSON {"{lang: value}"} maps inside the same img_N_* columns the classic type uses, and the button link is collapsed to one shared value in img_N_url. On save, slots 4-6 are zeroed and the enabled banners are compacted into slots 1-3 by priority — so a banner's stored slot can change when you reorder. Grid banners never store mobile artwork: img_N_mobile is always nulled for this type, by design. }>
{f.media.grid.map((g, i) => (i === 0 || g.enabled) && ( { patchGrid(i, p); clearErr(`grid_${g.n}`); }} onMove={d => moveGrid(i, d)} onRemove={() => patchGrid(i, { enabled: false })} onDragStart={() => setDrag(i)} onDragOver={e => e.preventDefault()} onDrop={() => { if (drag != null && drag !== i) moveGrid(drag, i - drag); setDrag(null); }} /> ))}
{gridShown.length < HCB_GRID_MAX && ( )} )} {isAuth && ( Two fixed sections, not a list: sign-in always writes slot img_1 and sign-up slot img_2, both forced active. Each section stores one filename per language as a JSON {"{lang: filename}"} map plus a single shared link. The pixel dimensions and the .png restriction shown here are helper text from the Blade — unlike the grid image, neither is enforced server-side. }>
patchAuth(0, p)} /> patchAuth(1, p)} />
)} Publication state, audience, and who inside the skin's user tree the set is aimed at.}>
Field stato — 0 Disabled, 1 Active (statiSlideshows()). New rows default to Disabled.}> set({ stato: v ? 1 : 0 })} /> {/* KNOWN BUG — DIVERGENCE (see header #2): this select is saved to `whosee`, but both front-office readers filter on `show_type`, which nothing writes. Evident intent implemented — the prototype keeps show_type in step with the chosen value — and the divergence is disclosed in the hint below rather than papered over. */} Labelled required by obbligatorio() in the Blade, but StoreSlideshowRequest validates it as nullable|in:0,1,2 — an empty value saves fine, which is why older rows can have none.} hint={<> Saved to slideshows.whosee. The front office, however, filters on a different column — show_type ([0,1] for a logged-in viewer, [0,2] for a guest) — and nothing in the platform writes show_type. This prototype writes both, so the choice actually takes effect: {(HCB_WHOSEE.find(w => w.value === String(f.whosee)) || HCB_WHOSEE[0]).label} → show_type = {f.whosee || 0} ({(HCB_WHOSEE.find(w => w.value === String(f.whosee)) || HCB_WHOSEE[0]).show}). }> Optional targeting. The picker searches GET /users2 for user levels 2/8/10/15/20 inside the chosen skin and is disabled until a skin is selected. Saving copies the user's user_path onto the row.} hint={<>The front office shows the set only to viewers whose own user_path starts with the stored one; if none matches it falls back to a row with an empty user_path. Leave empty to target the whole skin.}> { const u = HCB_NETWORK_USERS.find(x => x.id === id); set({ user_id: id, user_path: u ? u.user_path : "" }); clearErr("user_id"); }} />