@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/bootstrap/handlers.js

@@ -0,0 +1,96 @@
+import { pagesRepo, readBool, rolesRepo, settingsRepo, userPrefsRepo, } from '@adminium/meta';
+import { UnauthorizedError } from '../../errors.js';
+import { toUserView } from '../auth/handlers.js';
+import { APP_VERSION } from '../../version.js';
+import { NAV_GROUP_KEYS, } from './schema.js';
+function principal(request) {
+    if (request.user === null)
+        throw new UnauthorizedError('UNAUTHENTICATED');
+    return request.user;
+}
+/**
+ * Buckets page rows into the five fixed groups; empty groups are omitted.
+ * `connectionNames` (id → display name) annotates every item with its owning
+ * connection so multi-connection sidebars can label generated groups
+ * unambiguously (M5-T05); with zero/one connection clients render flat.
+ */
+export function buildNavTree(rows, connectionNames = new Map()) {
+    let configVersion = 0;
+    const buckets = new Map();
+    for (const row of rows) {
+        // Every page row advances the config stamp, nav-visible or not.
+        if (row.updatedAt > configVersion)
+            configVersion = row.updatedAt;
+        if (!readBool(row.isEnabled))
+            continue;
+        const group = NAV_GROUP_KEYS.includes(row.navGroup ?? '')
+            ? row.navGroup
+            : null;
+        if (group === null)
+            continue;
+        const items = buckets.get(group) ?? [];
+        items.push({
+            pageId: row.id,
+            slug: row.slug,
+            labelKey: `nav.${row.slug}`,
+            fallback: row.title,
+            icon: row.icon ?? 'file',
+            order: row.navOrder,
+            connectionId: row.connectionId,
+            connectionName: row.connectionId === null ? null : (connectionNames.get(row.connectionId) ?? null),
+        });
+        buckets.set(group, items);
+    }
+    const groups = NAV_GROUP_KEYS.flatMap((key) => {
+        const items = buckets.get(key);
+        if (items === undefined || items.length === 0)
+            return [];
+        items.sort((a, b) => a.order - b.order || a.slug.localeCompare(b.slug));
+        return [{ key, items }];
+    });
+    return { nav: { groups }, configVersion };
+}
+export async function bootstrapHandler(ctx, request) {
+    const user = principal(request);
+    const [roles, prefs, pageRows, connectionRows, llmProvider] = await Promise.all([
+        rolesRepo(ctx.meta).rolesForUser(user.id),
+        userPrefsRepo(ctx.meta).resolve(user.id),
+        // Shared query path with the generator wave (07 §3.16 pagesRepo).
+        pagesRepo(ctx.meta).navRows(),
+        // Display names only — no DSN material (07 §3.13), so no crypto needed.
+        ctx.meta.db.selectFrom('adminium_connections').select(['id', 'name']).execute(),
+        // `llm.enabled` = a provider is configured (06 §3.2) — the same
+        // `llm.provider` row `resolveProviderClient` gates direct runs on.
+        settingsRepo(ctx.meta).get('llm.provider'),
+    ]);
+    // Permission filter (09 §2.1): drop rows the caller may not view. The
+    // per-request `request.can` cache resolves the permission set once;
+    // super-admins bypass inside it. The `typeof` guard mirrors routes/pages —
+    // minimal harnesses mount this route without the rbac plugin.
+    const visibleRows = typeof request.can === 'function'
+        ? await (async () => {
+            const rows = [];
+            for (const row of pageRows) {
+                if (await request.can(`page:${row.id}:view`))
+                    rows.push(row);
+            }
+            return rows;
+        })()
+        : [...pageRows];
+    // configVersion must track ALL rows (a permission change is not a config
+    // change, and a hidden page's regeneration still bumps the stamp).
+    const { configVersion } = buildNavTree(pageRows);
+    const { nav } = buildNavTree(visibleRows, new Map(connectionRows.map((row) => [row.id, row.name])));
+    return {
+        data: {
+            user: toUserView(user),
+            roles: roles.map((role) => role.slug),
+            prefs,
+            nav,
+            version: APP_VERSION,
+            configVersion,
+            llm: { enabled: typeof llmProvider === 'string' && llmProvider.length > 0 },
+        },
+    };
+}
+//# sourceMappingURL=handlers.js.map

package/dist/routes/bootstrap/handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.js","sourceRoot":"","sources":["../../../src/routes/bootstrap/handlers.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,SAAS,EACT,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,aAAa,GAGd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,cAAc,GAKf,MAAM,aAAa,CAAC;AAErB,SAAS,SAAS,CAAC,OAAuB;IACxC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA2B,EAC3B,kBAA+C,IAAI,GAAG,EAAE;IAKxD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmC,CAAC;IAE3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,gEAAgE;QAChE,IAAI,GAAG,CAAC,SAAS,GAAG,aAAa;YAAE,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QACvC,MAAM,KAAK,GAAI,cAAoC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC9E,CAAC,CAAE,GAAG,CAAC,QAAwB;YAC/B,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE;YAC3B,QAAQ,EAAE,GAAG,CAAC,KAAK;YACnB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,MAAM;YACxB,KAAK,EAAE,GAAG,CAAC,QAAQ;YACnB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,cAAc,EACZ,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;SACrF,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAgB,EAChB,OAAuB;IAEvB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAEhC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9E,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,kEAAkE;QAClE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE;QAC7B,wEAAwE;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QAC/E,gEAAgE;QAChE,mEAAmE;QACnE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;KAC3C,CAAC,CAAC;IAEH,sEAAsE;IACtE,oEAAoE;IACpE,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,WAAW,GACf,OAAO,OAAO,CAAC,GAAG,KAAK,UAAU;QAC/B,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,GAAiB,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,OAAO,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IAEpB,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,EAAE,GAAG,YAAY,CAC1B,WAAW,EACX,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CACzD,CAAC;IAEF,OAAO;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;YACtB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YACrC,KAAK;YACL,GAAG;YACH,OAAO,EAAE,WAAW;YACpB,aAAa;YACb,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;SAC5E;KACF,CAAC;AACJ,CAAC"}

package/dist/routes/bootstrap/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Bootstrap resource (09-generated-app.md §2.1, 01-architecture.md §5):
+ * `GET /api/v1/bootstrap` — the single round trip the SPA issues on a cold
+ * load. Session-bound; 503 META_NOT_CONFIGURED when the server boots without
+ * a meta store (same contract as auth/me).
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+export declare const bootstrapRoutes: FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/bootstrap/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/bootstrap/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAOvE,eAAO,MAAM,eAAe,EAAE,qBAgB7B,CAAC"}

package/dist/routes/bootstrap/index.js

@@ -0,0 +1,16 @@
+import { AppError } from '../../errors.js';
+import { bootstrapHandler } from './handlers.js';
+import { bootstrapReply } from './schema.js';
+export const bootstrapRoutes = async (app) => {
+    const ctx = () => {
+        if (app.authContext === null) {
+            throw new AppError(503, 'META_NOT_CONFIGURED', 'No meta store is configured.');
+        }
+        return app.authContext;
+    };
+    app.get('/bootstrap', {
+        preHandler: [app.requireMeta, app.requireAuth],
+        schema: { response: { 200: bootstrapReply } },
+    }, async (request) => bootstrapHandler(ctx(), request));
+};
+//# sourceMappingURL=index.js.map

package/dist/routes/bootstrap/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/bootstrap/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,CAAC,MAAM,eAAe,GAA0B,KAAK,EAAE,GAAG,EAAE,EAAE;IAClE,MAAM,GAAG,GAAG,GAAgB,EAAE;QAC5B,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,GAAG,CAAC,WAAW,CAAC;IACzB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,YAAY,EACZ;QACE,UAAU,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC;QAC9C,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE;KAC9C,EACD,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CACpD,CAAC;AACJ,CAAC,CAAC"}

package/dist/routes/bootstrap/schema.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Zod schemas for `GET /api/v1/bootstrap` (09-generated-app.md §2.1,
+ * 01-architecture.md §5): the one-round-trip boot payload — session user +
+ * roles, server-resolved preference axes, the permission-filtered nav tree
+ * derived from `adminium_pages`, and version/configVersion stamps.
+ *
+ * SYNC NOTE: the client-side mirror of these shapes lives in
+ * `apps/dashboard/src/app/bootstrap.ts` (type-only copy — the dashboard may
+ * not import server runtime code per the 01-architecture.md §2.3 matrix).
+ * Change both together.
+ */
+import { z } from 'zod';
+/** The five fixed sidebar groups, in order (research/ia-mapping.md §2A). */
+export declare const NAV_GROUP_KEYS: readonly ["workspace", "library", "planning", "people", "account"];
+export declare const navGroupKey: z.ZodEnum<{
+    account: "account";
+    workspace: "workspace";
+    library: "library";
+    planning: "planning";
+    people: "people";
+}>;
+export type NavGroupKey = z.infer<typeof navGroupKey>;
+/** One sidebar entry (09-generated-app.md §2.2 NavTree item). */
+export declare const bootstrapNavItem: z.ZodObject<{
+    pageId: z.ZodString;
+    slug: z.ZodString;
+    labelKey: z.ZodString;
+    fallback: z.ZodString;
+    icon: z.ZodString;
+    badge: z.ZodOptional<z.ZodEnum<{
+        "unread-count": "unread-count";
+        "pending-count": "pending-count";
+    }>>;
+    order: z.ZodNumber;
+    connectionId: z.ZodNullable<z.ZodString>;
+    connectionName: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type BootstrapNavItem = z.infer<typeof bootstrapNavItem>;
+export declare const bootstrapNavTree: z.ZodObject<{
+    groups: z.ZodArray<z.ZodObject<{
+        key: z.ZodEnum<{
+            account: "account";
+            workspace: "workspace";
+            library: "library";
+            planning: "planning";
+            people: "people";
+        }>;
+        items: z.ZodArray<z.ZodObject<{
+            pageId: z.ZodString;
+            slug: z.ZodString;
+            labelKey: z.ZodString;
+            fallback: z.ZodString;
+            icon: z.ZodString;
+            badge: z.ZodOptional<z.ZodEnum<{
+                "unread-count": "unread-count";
+                "pending-count": "pending-count";
+            }>>;
+            order: z.ZodNumber;
+            connectionId: z.ZodNullable<z.ZodString>;
+            connectionName: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BootstrapNavTree = z.infer<typeof bootstrapNavTree>;
+export declare const bootstrapReply: z.ZodObject<{
+    data: z.ZodObject<{
+        user: z.ZodObject<{
+            id: z.ZodString;
+            email: z.ZodString;
+            name: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                invited: "invited";
+                suspended: "suspended";
+            }>;
+            totpEnabled: z.ZodBoolean;
+            lastLoginAt: z.ZodNullable<z.ZodNumber>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strip>;
+        roles: z.ZodArray<z.ZodString>;
+        prefs: z.ZodObject<{
+            theme: z.ZodEnum<{
+                light: "light";
+                dark: "dark";
+                system: "system";
+            }>;
+            accent: z.ZodEnum<{
+                indigo: "indigo";
+                blue: "blue";
+                teal: "teal";
+                violet: "violet";
+                rose: "rose";
+                red: "red";
+                orange: "orange";
+                black: "black";
+            }>;
+            density: z.ZodEnum<{
+                comfortable: "comfortable";
+                compact: "compact";
+            }>;
+            locale: z.ZodEnum<{
+                en_US: "en_US";
+                de_DE: "de_DE";
+                ar_EG: "ar_EG";
+                zh_CN: "zh_CN";
+                zh_TW: "zh_TW";
+                cs_CZ: "cs_CZ";
+                da_DK: "da_DK";
+                fr_FR: "fr_FR";
+            }>;
+            dir: z.ZodEnum<{
+                ltr: "ltr";
+                rtl: "rtl";
+            }>;
+            source: z.ZodObject<{
+                theme: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                accent: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                density: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                locale: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                dir: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        nav: z.ZodObject<{
+            groups: z.ZodArray<z.ZodObject<{
+                key: z.ZodEnum<{
+                    account: "account";
+                    workspace: "workspace";
+                    library: "library";
+                    planning: "planning";
+                    people: "people";
+                }>;
+                items: z.ZodArray<z.ZodObject<{
+                    pageId: z.ZodString;
+                    slug: z.ZodString;
+                    labelKey: z.ZodString;
+                    fallback: z.ZodString;
+                    icon: z.ZodString;
+                    badge: z.ZodOptional<z.ZodEnum<{
+                        "unread-count": "unread-count";
+                        "pending-count": "pending-count";
+                    }>>;
+                    order: z.ZodNumber;
+                    connectionId: z.ZodNullable<z.ZodString>;
+                    connectionName: z.ZodNullable<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        version: z.ZodString;
+        configVersion: z.ZodNumber;
+        llm: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type BootstrapReply = z.infer<typeof bootstrapReply>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/bootstrap/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/bootstrap/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,4EAA4E;AAC5E,eAAO,MAAM,cAAc,oEAAqE,CAAC;AAEjG,eAAO,MAAM,WAAW;;;;;;EAAyB,CAAC;AAClD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,iEAAiE;AACjE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAgB3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;iBAE3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAezB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/routes/bootstrap/schema.js

@@ -0,0 +1,55 @@
+/**
+ * Zod schemas for `GET /api/v1/bootstrap` (09-generated-app.md §2.1,
+ * 01-architecture.md §5): the one-round-trip boot payload — session user +
+ * roles, server-resolved preference axes, the permission-filtered nav tree
+ * derived from `adminium_pages`, and version/configVersion stamps.
+ *
+ * SYNC NOTE: the client-side mirror of these shapes lives in
+ * `apps/dashboard/src/app/bootstrap.ts` (type-only copy — the dashboard may
+ * not import server runtime code per the 01-architecture.md §2.3 matrix).
+ * Change both together.
+ */
+import { z } from 'zod';
+import { authUserView } from '../auth/schema.js';
+import { mePrefsResolvedView } from '../me/schema.js';
+/** The five fixed sidebar groups, in order (research/ia-mapping.md §2A). */
+export const NAV_GROUP_KEYS = ['workspace', 'library', 'planning', 'people', 'account'];
+export const navGroupKey = z.enum(NAV_GROUP_KEYS);
+/** One sidebar entry (09-generated-app.md §2.2 NavTree item). */
+export const bootstrapNavItem = z.object({
+    pageId: z.string(),
+    /** Unique kebab-case URL segment — the `/p/$slug` param. */
+    slug: z.string(),
+    /** i18n key (`nav.<slug>`); clients fall back to `fallback` until M8. */
+    labelKey: z.string(),
+    fallback: z.string(),
+    /** lucide icon name. */
+    icon: z.string(),
+    /** Live badge source, resolved over WS (client concern). */
+    badge: z.enum(['unread-count', 'pending-count']).optional(),
+    order: z.number(),
+    /** Owning connection (M5-T05): with 2+ connections the sidebar groups
+     *  generated items under the connection's display name. Null = shared. */
+    connectionId: z.string().nullable(),
+    connectionName: z.string().nullable(),
+});
+export const bootstrapNavTree = z.object({
+    groups: z.array(z.object({ key: navGroupKey, items: z.array(bootstrapNavItem) })),
+});
+export const bootstrapReply = z.object({
+    data: z.object({
+        user: authUserView,
+        /** Role slugs for the session user (RBAC grants resolve server-side). */
+        roles: z.array(z.string()),
+        /** §7.2 resolved axes (system → global → user) + provenance. */
+        prefs: mePrefsResolvedView,
+        nav: bootstrapNavTree,
+        /** Server build version (package.json). */
+        version: z.string(),
+        /** Monotonic config stamp — max(updatedAt) over adminium_pages; 0 when none. */
+        configVersion: z.number(),
+        /** `llm.enabled` gates the ⌘K "Ask AI" affordance (06-llm-assist.md). */
+        llm: z.object({ enabled: z.boolean() }),
+    }),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/bootstrap/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/bootstrap/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEjG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGlD,iEAAiE;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,4DAA4D;IAC5D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,yEAAyE;IACzE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,wBAAwB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,4DAA4D;IAC5D,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB;8EAC0E;IAC1E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;CAClF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,YAAY;QAClB,yEAAyE;QACzE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,gEAAgE;QAChE,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,gBAAgB;QACrB,2CAA2C;QAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,gFAAgF;QAChF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,yEAAyE;QACzE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;KACxC,CAAC;CACH,CAAC,CAAC"}

package/dist/routes/connections/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Connections manager routes (08-server-api.md §2.4, M3-T04):
+ * create (test + encrypt + meta-placement enforcement), list with health,
+ * get/patch, type-to-confirm delete (pool disposal included), pre-create and
+ * per-connection test, and introspection (202 job when the jobs worker is
+ * wired; synchronous fallback otherwise).
+ *
+ * All routes are guarded by `system:connections:manage` — the v1 closed
+ * grant set (meta SYSTEM_ACTION_KEYS) has no `connections.read`, so reads
+ * share the manage grant until the grammar grows one.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+import type { ConnectionManager } from '../../connections/manager.js';
+export declare const CONNECTIONS_MANAGE = "system:connections:manage";
+export interface ConnectionsRoutesDeps {
+    manager: ConnectionManager;
+    meta: MetaDb;
+}
+export declare function connectionsRoutes(deps: ConnectionsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/connections/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/connections/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAA6C,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAQxF,OAAO,KAAK,EAAE,iBAAiB,EAAyB,MAAM,8BAA8B,CAAC;AAiB7F,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAoBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,qBAAqB,CAmRpF"}