@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/roles/schema.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Zod schemas for the roles resource (08-server-api.md §2.3; naming per §1.5:
+ * `<resource><Action><Part>` consts, PascalCase inferred types).
+ */
+import { z } from 'zod';
+export declare const roleDto: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    isBuiltin: z.ZodBoolean;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type RoleDto = z.infer<typeof roleDto>;
+export declare const roleListItem: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    isBuiltin: z.ZodBoolean;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    memberCount: z.ZodNumber;
+}, z.core.$strip>;
+export declare const roleListReply: z.ZodObject<{
+    roles: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        isBuiltin: z.ZodBoolean;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+        memberCount: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RoleListReply = z.infer<typeof roleListReply>;
+export declare const roleReply: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    isBuiltin: z.ZodBoolean;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type RoleReply = z.infer<typeof roleReply>;
+export declare const roleCreateBody: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    cloneFromRoleId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RoleCreateBody = z.infer<typeof roleCreateBody>;
+export declare const rolePatchBody: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+export type RolePatchBody = z.infer<typeof rolePatchBody>;
+export declare const roleIdParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const roleDeleteQuery: z.ZodObject<{
+    reassignTo: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const roleOkReply: z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export declare const rolePermissionsReply: z.ZodObject<{
+    roleId: z.ZodString;
+    grants: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type RolePermissionsReply = z.infer<typeof rolePermissionsReply>;
+export declare const rolePermissionsPutBody: z.ZodObject<{
+    grants: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type RolePermissionsPutBody = z.infer<typeof rolePermissionsPutBody>;
+export declare const userRolesParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const userRoleDeleteParams: z.ZodObject<{
+    id: z.ZodString;
+    roleId: z.ZodString;
+}, z.core.$strip>;
+export declare const userRolesPostBody: z.ZodObject<{
+    roleId: z.ZodString;
+}, z.core.$strip>;
+export type UserRolesPostBody = z.infer<typeof userRolesPostBody>;
+export declare const userRolesReply: z.ZodObject<{
+    userId: z.ZodString;
+    roleIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type UserRolesReply = z.infer<typeof userRolesReply>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/roles/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/roles/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,OAAO;;;;;;;;iBAQlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,eAAO,MAAM,YAAY;;;;;;;;;iBAGvB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;iBAA6C,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,SAAS;;;;;;;;iBAAU,CAAC;AACjC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,cAAc;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,aAAa;;;iBAOtB,CAAC;AACL,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY;;iBAA+B,CAAC;AAEzD,eAAO,MAAM,eAAe;;iBAG1B,CAAC;AAEH,eAAO,MAAM,WAAW;;iBAAoC,CAAC;AAE7D,eAAO,MAAM,oBAAoB;;;iBAI/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAI5E,eAAO,MAAM,eAAe;;iBAA+B,CAAC;AAC5D,eAAO,MAAM,oBAAoB;;;iBAAmD,CAAC;AAErF,eAAO,MAAM,iBAAiB;;iBAAmC,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/routes/roles/schema.js

@@ -0,0 +1,57 @@
+/**
+ * Zod schemas for the roles resource (08-server-api.md §2.3; naming per §1.5:
+ * `<resource><Action><Part>` consts, PascalCase inferred types).
+ */
+import { z } from 'zod';
+export const roleDto = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string(),
+    description: z.string().nullable(),
+    isBuiltin: z.boolean(),
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+export const roleListItem = roleDto.extend({
+    /** Users currently holding the role (`adminium_user_roles`). */
+    memberCount: z.number().int().nonnegative(),
+});
+export const roleListReply = z.object({ roles: z.array(roleListItem) });
+export const roleReply = roleDto;
+export const roleCreateBody = z.object({
+    name: z.string().min(1).max(80),
+    description: z.string().max(2000).optional(),
+    /** Copy the source role's permission matrix rows. */
+    cloneFromRoleId: z.string().optional(),
+});
+export const rolePatchBody = z
+    .object({
+    name: z.string().min(1).max(80).optional(),
+    description: z.string().max(2000).nullable().optional(),
+})
+    .refine((body) => body.name !== undefined || body.description !== undefined, {
+    message: 'Provide name and/or description.',
+});
+export const roleIdParams = z.object({ id: z.string() });
+export const roleDeleteQuery = z.object({
+    /** Target role for existing members; required when the role has members. */
+    reassignTo: z.string().optional(),
+});
+export const roleOkReply = z.object({ ok: z.literal(true) });
+export const rolePermissionsReply = z.object({
+    roleId: z.string(),
+    /** §5.1 grant strings expanded from the matrix rows. */
+    grants: z.array(z.string()),
+});
+export const rolePermissionsPutBody = z.object({
+    grants: z.array(z.string()).max(2000),
+});
+// --- user-role assignment (POST/DELETE /users/:id/roles…) ---------------------
+export const userRolesParams = z.object({ id: z.string() });
+export const userRoleDeleteParams = z.object({ id: z.string(), roleId: z.string() });
+export const userRolesPostBody = z.object({ roleId: z.string() });
+export const userRolesReply = z.object({
+    userId: z.string(),
+    roleIds: z.array(z.string()),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/roles/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/roles/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IACzC,gEAAgE;IAChE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC;AAGjC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC5C,qDAAqD;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE;IAC3E,OAAO,EAAE,kCAAkC;CAC5C,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,4EAA4E;IAC5E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACtC,CAAC,CAAC;AAGH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAGlE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC"}

package/dist/routes/scheduled-reports/index.d.ts

@@ -0,0 +1,15 @@
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+/**
+ * `system:reports:manage` — the scheduled-reports admin grant. Declared in
+ * this track's handoff for meta's SYSTEM_ACTION_KEYS (`reports.manage`);
+ * until assembly lands the key the check denies for everyone except
+ * super-admin (whose permission set short-circuits to allow-all).
+ */
+export declare const REPORTS_MANAGE_PERMISSION = "system:reports:manage";
+export interface ScheduledReportsRoutesDeps {
+    meta: MetaDb;
+    now?: (() => number) | undefined;
+}
+export declare function scheduledReportsRoutes(deps: ScheduledReportsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/scheduled-reports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/scheduled-reports/index.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAGL,KAAK,MAAM,EAGZ,MAAM,gBAAgB,CAAC;AAiBxB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CAClC;AAcD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,GAAG,qBAAqB,CAkM9F"}

package/dist/routes/scheduled-reports/index.js

@@ -0,0 +1,195 @@
+import { pagesRepo, scheduledReportsRepo, } from '@adminium/meta';
+import { z } from 'zod';
+import { loadSnapshotView } from '../../data-io/snapshot-view.js';
+import { ForbiddenError, NotFoundError, UnauthorizedError, ValidationFailedError } from '../../errors.js';
+import { ReportScheduleError, nextRunAtOf } from '../../reports/schedule.js';
+import { scheduledReportIdParams, scheduledReportsCreateBody, scheduledReportsDeleteReply, scheduledReportsItemReply, scheduledReportsListQuery, scheduledReportsListReply, scheduledReportsPatchBody, } from './schema.js';
+/**
+ * `system:reports:manage` — the scheduled-reports admin grant. Declared in
+ * this track's handoff for meta's SYSTEM_ACTION_KEYS (`reports.manage`);
+ * until assembly lands the key the check denies for everyone except
+ * super-admin (whose permission set short-circuits to allow-all).
+ */
+export const REPORTS_MANAGE_PERMISSION = 'system:reports:manage';
+/** The page-envelope slice a report snapshots (mirrors jobs/report-run.ts). */
+const envelopeSourceSchema = z.object({
+    source: z.object({ connectionId: z.string().nullable(), table: z.string().nullable() }),
+});
+function requireUserId(request) {
+    const user = request.user;
+    const id = user?.id ?? request.apiKeyPrincipal?.id ?? null;
+    if (id === null)
+        throw new UnauthorizedError();
+    return id;
+}
+export function scheduledReportsRoutes(deps) {
+    const { meta } = deps;
+    const now = deps.now ?? Date.now;
+    const reports = scheduledReportsRepo(meta);
+    const pages = pagesRepo(meta);
+    async function requireManage(request) {
+        requireUserId(request);
+        if (await request.can(REPORTS_MANAGE_PERMISSION))
+            return;
+        throw new ForbiddenError('You do not have permission to manage scheduled reports.', 'FORBIDDEN', {
+            permission: REPORTS_MANAGE_PERMISSION,
+        });
+    }
+    async function toView(row, page) {
+        const resolved = page === undefined ? await pages.findById(row.pageId) : page;
+        return {
+            id: row.id,
+            pageId: row.pageId,
+            pageTitle: resolved?.title ?? null,
+            pageSlug: resolved?.slug ?? null,
+            name: row.name,
+            schedule: row.schedule,
+            recipients: row.recipients,
+            format: row.format,
+            enabled: row.enabled,
+            lastRunAt: row.lastRunAt,
+            nextRunAt: row.nextRunAt,
+            createdBy: row.createdBy,
+            createdAt: row.createdAt,
+            updatedAt: row.updatedAt,
+        };
+    }
+    /**
+     * Fail-fast UX guard (wave-2 audit): when the page's table source resolves,
+     * the CALLER must hold its `table:<conn>:<table>:export` grant — otherwise
+     * `system:reports:manage` alone would let them schedule recurring snapshots
+     * of tables they cannot read. The authoritative re-check runs at run time
+     * in jobs/report-run.ts (revocation must also stop EXISTING schedules);
+     * unresolvable sources are left to that check rather than 500ing here.
+     */
+    async function requireExportGrantForPage(request, page) {
+        const parsed = envelopeSourceSchema.safeParse(page.config);
+        const source = parsed.success ? parsed.data.source : null;
+        if (source === null || source.connectionId === null || source.table === null)
+            return;
+        let permission = null;
+        try {
+            const view = await loadSnapshotView(meta, source.connectionId);
+            permission = `table:${source.connectionId}:${view.table(source.table).id}:export`;
+        }
+        catch {
+            return; // no snapshot / table gone — the run-time check owns this case
+        }
+        if (!(await request.can(permission))) {
+            throw new ForbiddenError('You do not have export access to this report’s table.', 'TABLE_FORBIDDEN', { permission });
+        }
+    }
+    /** croner evaluation with the §1.4 422 on unusable time/timezone fields. */
+    function nextRunOrThrow(schedule, from) {
+        try {
+            return nextRunAtOf(schedule, from);
+        }
+        catch (error) {
+            if (error instanceof ReportScheduleError) {
+                throw new ValidationFailedError(error.message, { schedule });
+            }
+            throw error;
+        }
+    }
+    return async (app) => {
+        app.get('/scheduled-reports', { schema: { querystring: scheduledReportsListQuery, response: { 200: scheduledReportsListReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const manage = await request.can(REPORTS_MANAGE_PERMISSION);
+            const rows = await reports.list({
+                ...(manage ? {} : { createdBy: userId }),
+                limit: request.query.limit,
+            });
+            const views = [];
+            for (const row of rows)
+                views.push(await toView(row));
+            return { data: views };
+        });
+        app.post('/scheduled-reports', { schema: { body: scheduledReportsCreateBody, response: { 201: scheduledReportsItemReply } } }, async (request, reply) => {
+            await requireManage(request);
+            const userId = requireUserId(request);
+            const { pageId, name, schedule, recipients, format, enabled } = request.body;
+            const page = await pages.findById(pageId);
+            if (page === null) {
+                throw new ValidationFailedError(`Page ${pageId} does not exist.`, { pageId });
+            }
+            await requireExportGrantForPage(request, page);
+            const at = now();
+            const row = await reports.create({
+                pageId,
+                name,
+                schedule,
+                recipients,
+                format,
+                enabled,
+                nextRunAt: enabled ? nextRunOrThrow(schedule, at) : null,
+                createdBy: userId,
+            }, at);
+            await app.rbac.audit(request, {
+                category: 'export',
+                action: 'report.schedule',
+                changes: { after: { reportId: row.id, pageId, name, enabled } },
+            });
+            return reply.status(201).send({ data: await toView(row, page) });
+        });
+        app.patch('/scheduled-reports/:id', {
+            schema: {
+                params: scheduledReportIdParams,
+                body: scheduledReportsPatchBody,
+                response: { 200: scheduledReportsItemReply },
+            },
+        }, async (request) => {
+            await requireManage(request);
+            const existing = await reports.findById(request.params.id);
+            if (existing === null) {
+                throw new NotFoundError(`Scheduled report ${request.params.id} not found.`);
+            }
+            const patch = request.body;
+            if (patch.pageId !== undefined) {
+                const nextPage = await pages.findById(patch.pageId);
+                if (nextPage === null) {
+                    throw new ValidationFailedError(`Page ${patch.pageId} does not exist.`, {
+                        pageId: patch.pageId,
+                    });
+                }
+                // Retargeting a schedule is scheduling: same export-grant guard.
+                await requireExportGrantForPage(request, nextPage);
+            }
+            const at = now();
+            // Schedule/enable changes recompute next_run_at; disable parks it.
+            const enabled = patch.enabled ?? existing.enabled;
+            const schedule = patch.schedule ?? existing.schedule;
+            const nextRunAt = !enabled
+                ? null
+                : patch.schedule !== undefined || patch.enabled === true
+                    ? nextRunOrThrow(schedule, at)
+                    : existing.nextRunAt;
+            const row = await reports.update(existing.id, { ...patch, nextRunAt }, at);
+            if (row === null)
+                throw new NotFoundError(`Scheduled report ${existing.id} not found.`);
+            await app.rbac.audit(request, {
+                category: 'export',
+                action: 'report.schedule.update',
+                changes: {
+                    before: { enabled: existing.enabled, nextRunAt: existing.nextRunAt },
+                    after: { reportId: row.id, enabled: row.enabled, nextRunAt: row.nextRunAt },
+                },
+            });
+            return { data: await toView(row) };
+        });
+        app.delete('/scheduled-reports/:id', { schema: { params: scheduledReportIdParams, response: { 200: scheduledReportsDeleteReply } } }, async (request) => {
+            await requireManage(request);
+            const existing = await reports.findById(request.params.id);
+            if (existing === null) {
+                throw new NotFoundError(`Scheduled report ${request.params.id} not found.`);
+            }
+            const deleted = await reports.remove(existing.id);
+            await app.rbac.audit(request, {
+                category: 'export',
+                action: 'report.schedule.delete',
+                changes: { before: { reportId: existing.id, name: existing.name } },
+            });
+            return { data: { deleted } };
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/scheduled-reports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/scheduled-reports/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,SAAS,EACT,oBAAoB,GAIrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC1G,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,GAE1B,MAAM,aAAa,CAAC;AAErB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAOjE,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CACxF,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAAuB;IAC5C,MAAM,IAAI,GAAI,OAAiD,CAAC,IAAI,CAAC;IACrE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,IAAI,CAAC;IAC3D,IAAI,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAC/C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAgC;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,KAAK,UAAU,aAAa,CAAC,OAAuB;QAClD,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAAE,OAAO;QACzD,MAAM,IAAI,cAAc,CAAC,yDAAyD,EAAE,WAAW,EAAE;YAC/F,UAAU,EAAE,yBAAyB;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,MAAM,CAAC,GAAoB,EAAE,IAAkB;QAC5D,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9E,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI;YAClC,QAAQ,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,UAAU,yBAAyB,CAAC,OAAuB,EAAE,IAAU;QAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO;QACrF,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YAC/D,UAAU,GAAG,SAAS,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,+DAA+D;QACzE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,cAAc,CACtB,uDAAuD,EACvD,iBAAiB,EACjB,EAAE,UAAU,EAAE,CACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,SAAS,cAAc,CAAC,QAAqC,EAAE,IAAY;QACzE,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;gBACzC,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,GAAG,CAAC,GAAG,CACL,oBAAoB,EACpB,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,EAAE,EAAE,EACpG,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;gBACxC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;aAC3B,CAAC,CAAC;YACH,MAAM,KAAK,GAA0B,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,IAAI,CACN,oBAAoB,EACpB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,EAAE,EAAE,EAC9F,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAC7E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,qBAAqB,CAAC,QAAQ,MAAM,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAC9B;gBACE,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,UAAU;gBACV,MAAM;gBACN,OAAO;gBACP,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;gBACxD,SAAS,EAAE,MAAM;aAClB,EACD,EAAE,CACH,CAAC;YACF,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;aAChE,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,KAAK,CACP,wBAAwB,EACxB;YACE,MAAM,EAAE;gBACN,MAAM,EAAE,uBAAuB;gBAC/B,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE;aAC7C;SACF,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,aAAa,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,IAAI,qBAAqB,CAAC,QAAQ,KAAK,CAAC,MAAM,kBAAkB,EAAE;wBACtE,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;gBACL,CAAC;gBACD,iEAAiE;gBACjE,MAAM,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,mEAAmE;YACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACrD,MAAM,SAAS,GAAG,CAAC,OAAO;gBACxB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;oBACtD,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC9B,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3E,IAAI,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;YACxF,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,wBAAwB;gBAChC,OAAO,EAAE;oBACP,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;oBACpE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;iBAC5E;aACF,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,MAAM,CACR,wBAAwB,EACxB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE,EAAE,EAAE,EAC/F,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,aAAa,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,wBAAwB;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE;aACpE,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/B,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/scheduled-reports/schema.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Zod schemas for the scheduled-reports resource (M7 reports track,
+ * 07-meta-store.md §3.24). Schedule/recipients/format vocabularies come from
+ * meta's payload schemas — one authority, no drift.
+ */
+import { z } from 'zod';
+export declare const scheduledReportView: z.ZodObject<{
+    id: z.ZodString;
+    pageId: z.ZodString;
+    pageTitle: z.ZodNullable<z.ZodString>;
+    pageSlug: z.ZodNullable<z.ZodString>;
+    name: z.ZodString;
+    schedule: z.ZodObject<{
+        frequency: z.ZodEnum<{
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+        }>;
+        dayOfWeek: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        dayOfMonth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        time: z.ZodString;
+        timezone: z.ZodString;
+    }, z.core.$strip>;
+    recipients: z.ZodArray<z.ZodString>;
+    format: z.ZodEnum<{
+        pdf: "pdf";
+        png: "png";
+    }>;
+    enabled: z.ZodBoolean;
+    lastRunAt: z.ZodNullable<z.ZodNumber>;
+    nextRunAt: z.ZodNullable<z.ZodNumber>;
+    createdBy: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type ScheduledReportView = z.infer<typeof scheduledReportView>;
+export declare const scheduledReportsCreateBody: z.ZodObject<{
+    pageId: z.ZodString;
+    name: z.ZodString;
+    schedule: z.ZodObject<{
+        frequency: z.ZodEnum<{
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+        }>;
+        dayOfWeek: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        dayOfMonth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        time: z.ZodString;
+        timezone: z.ZodString;
+    }, z.core.$strip>;
+    recipients: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    format: z.ZodDefault<z.ZodEnum<{
+        pdf: "pdf";
+        png: "png";
+    }>>;
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ScheduledReportsCreateBody = z.infer<typeof scheduledReportsCreateBody>;
+export declare const scheduledReportsPatchBody: z.ZodObject<{
+    pageId: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    schedule: z.ZodOptional<z.ZodObject<{
+        frequency: z.ZodEnum<{
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+        }>;
+        dayOfWeek: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        dayOfMonth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        time: z.ZodString;
+        timezone: z.ZodString;
+    }, z.core.$strip>>;
+    recipients: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    format: z.ZodOptional<z.ZodEnum<{
+        pdf: "pdf";
+        png: "png";
+    }>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ScheduledReportsPatchBody = z.infer<typeof scheduledReportsPatchBody>;
+export declare const scheduledReportIdParams: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const scheduledReportsListQuery: z.ZodObject<{
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const scheduledReportsListReply: z.ZodObject<{
+    data: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        pageId: z.ZodString;
+        pageTitle: z.ZodNullable<z.ZodString>;
+        pageSlug: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+        schedule: z.ZodObject<{
+            frequency: z.ZodEnum<{
+                daily: "daily";
+                weekly: "weekly";
+                monthly: "monthly";
+            }>;
+            dayOfWeek: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            dayOfMonth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            time: z.ZodString;
+            timezone: z.ZodString;
+        }, z.core.$strip>;
+        recipients: z.ZodArray<z.ZodString>;
+        format: z.ZodEnum<{
+            pdf: "pdf";
+            png: "png";
+        }>;
+        enabled: z.ZodBoolean;
+        lastRunAt: z.ZodNullable<z.ZodNumber>;
+        nextRunAt: z.ZodNullable<z.ZodNumber>;
+        createdBy: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const scheduledReportsItemReply: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodString;
+        pageId: z.ZodString;
+        pageTitle: z.ZodNullable<z.ZodString>;
+        pageSlug: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+        schedule: z.ZodObject<{
+            frequency: z.ZodEnum<{
+                daily: "daily";
+                weekly: "weekly";
+                monthly: "monthly";
+            }>;
+            dayOfWeek: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            dayOfMonth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+            time: z.ZodString;
+            timezone: z.ZodString;
+        }, z.core.$strip>;
+        recipients: z.ZodArray<z.ZodString>;
+        format: z.ZodEnum<{
+            pdf: "pdf";
+            png: "png";
+        }>;
+        enabled: z.ZodBoolean;
+        lastRunAt: z.ZodNullable<z.ZodNumber>;
+        nextRunAt: z.ZodNullable<z.ZodNumber>;
+        createdBy: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const scheduledReportsDeleteReply: z.ZodObject<{
+    data: z.ZodObject<{
+        deleted: z.ZodBoolean;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/scheduled-reports/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/scheduled-reports/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiB9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;iBAOrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;iBAOpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAElF,eAAO,MAAM,uBAAuB;;iBAAsC,CAAC;AAE3E,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAmD,CAAC;AAC1F,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA0C,CAAC;AACjF,eAAO,MAAM,2BAA2B;;;;iBAAyD,CAAC"}

package/dist/routes/scheduled-reports/schema.js

@@ -0,0 +1,49 @@
+/**
+ * Zod schemas for the scheduled-reports resource (M7 reports track,
+ * 07-meta-store.md §3.24). Schedule/recipients/format vocabularies come from
+ * meta's payload schemas — one authority, no drift.
+ */
+import { z } from 'zod';
+import { reportFormatSchema, reportRecipientsSchema, reportScheduleSchema } from '@adminium/meta';
+export const scheduledReportView = z.object({
+    id: z.string(),
+    pageId: z.string(),
+    /** Denormalized for the list row; null when the page has vanished. */
+    pageTitle: z.string().nullable(),
+    pageSlug: z.string().nullable(),
+    name: z.string(),
+    schedule: reportScheduleSchema,
+    recipients: reportRecipientsSchema,
+    /** §3.24 stored INTENT (`pdf | png`); v1 delivers a CSV data snapshot. */
+    format: reportFormatSchema,
+    enabled: z.boolean(),
+    lastRunAt: z.number().nullable(),
+    nextRunAt: z.number().nullable(),
+    createdBy: z.string().nullable(),
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+export const scheduledReportsCreateBody = z.object({
+    pageId: z.string().min(1),
+    name: z.string().min(1).max(120),
+    schedule: reportScheduleSchema,
+    recipients: reportRecipientsSchema.default([]),
+    format: reportFormatSchema.default('pdf'),
+    enabled: z.boolean().default(true),
+});
+export const scheduledReportsPatchBody = z.object({
+    pageId: z.string().min(1).optional(),
+    name: z.string().min(1).max(120).optional(),
+    schedule: reportScheduleSchema.optional(),
+    recipients: reportRecipientsSchema.optional(),
+    format: reportFormatSchema.optional(),
+    enabled: z.boolean().optional(),
+});
+export const scheduledReportIdParams = z.object({ id: z.string().min(1) });
+export const scheduledReportsListQuery = z.object({
+    limit: z.coerce.number().int().min(1).max(200).default(100),
+});
+export const scheduledReportsListReply = z.object({ data: z.array(scheduledReportView) });
+export const scheduledReportsItemReply = z.object({ data: scheduledReportView });
+export const scheduledReportsDeleteReply = z.object({ data: z.object({ deleted: z.boolean() }) });
+//# sourceMappingURL=schema.js.map

package/dist/routes/scheduled-reports/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/scheduled-reports/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAElG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,sEAAsE;IACtE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,oBAAoB;IAC9B,UAAU,EAAE,sBAAsB;IAClC,0EAA0E;IAC1E,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,oBAAoB;IAC9B,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;AACjF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/routes/schema/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Schema routes (08-server-api.md §2.5, 05 §11, M3-T05/T06):
+ *
+ * - `GET /connections/:id/schema` — active snapshot with overrides APPLIED
+ *   (`?raw=true` returns the untouched introspection result),
+ * - `GET /connections/:id/schema/snapshots[/:snapshotId]` — history,
+ * - `GET /connections/:id/schema/diff` — previous vs latest (or `from`/`to`),
+ * - `GET/PUT /connections/:id/schema/overrides` (+ the 05 §11
+ *   `/connections/:id/overrides` alias) — validated against the active
+ *   snapshot; unknown identifiers → 422.
+ *
+ * Reads require an authenticated principal (the v1 closed grant set has no
+ * `schema.read`); override writes require `system:schema:remap`.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+import type { ConnectionManager } from '../../connections/manager.js';
+export declare const SCHEMA_REMAP = "system:schema:remap";
+export interface SchemaRoutesDeps {
+    manager: ConnectionManager;
+    meta: MetaDb;
+}
+export declare function schemaRoutes(deps: SchemaRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/schema/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EAKL,KAAK,MAAM,EAEZ,MAAM,gBAAgB,CAAC;AAIxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AActE,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,qBAAqB,CA4O1E"}