@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/system/schema.js

@@ -0,0 +1,109 @@
+/**
+ * Zod schemas for the system resource (naming per 08-server-api.md §1.5:
+ * `<resource><Action><Part>` consts, `z.infer` PascalCase types).
+ */
+import { z } from 'zod';
+import { RUNTIMES } from '../../config/env.js';
+/** Meta-store dialects (07-meta-store.md); `null` until meta wiring (wave 2). */
+export const metaDialect = z.enum(['postgres', 'mysql', 'sqlite']);
+/**
+ * The deployment wrapper, straight off `Env.ADMINIUM_RUNTIME` — the SAME enum,
+ * imported rather than re-spelled. 11-electron.md §4 makes this reply the
+ * authority the SPA gates on ("the SPA trusts the server for feature gating and
+ * the bridge only for native affordances"), so a copy that drifted from the env
+ * schema would be a gate that disagrees with the server it is gating.
+ */
+export const systemRuntime = z.enum(RUNTIMES);
+export const systemHealthzReply = z.object({
+    /** Liveness only — always `true` when the process answers at all. */
+    ok: z.literal(true),
+    version: z.string(),
+    /** Seconds since process start. */
+    uptime: z.number().nonnegative(),
+});
+/** Per-dependency readiness verdicts (01-architecture.md §4.1 `/readyz`). */
+export const systemReadyzChecks = z.object({
+    /** `not-configured` = booted without a meta store; `unreachable` = it failed. */
+    meta: z.enum(['ok', 'unreachable', 'not-configured']),
+});
+export const systemReadyzReply = z.object({
+    /** `false` ⇒ the route answers 503; take this instance out of rotation. */
+    ok: z.boolean(),
+    version: z.string(),
+    checks: systemReadyzChecks,
+});
+/**
+ * Build/runtime info + the 11-electron.md §8.2 CAPABILITY FLAGS the SPA gates
+ * on. Unauthenticated, like its two sibling probes — deliberately, because the
+ * surfaces that need the answers earliest are pre-auth (`/login`, `/forgot`,
+ * `/setup`), and every field here is either already public (`version`, `node`)
+ * or a yes/no about this deployment's own configuration. Nothing names a host, a
+ * credential, or a user.
+ *
+ * WHAT EACH FLAG IS ENTITLED TO CLAIM — the schema is only honest if the
+ * handler can actually answer it:
+ *
+ *  - `runtime` — parsed at boot from `ADMINIUM_RUNTIME`. Certain.
+ *  - `smtpConfigured` — is `adminium_settings.email.smtp` set? Certain, and it
+ *    is the exact question §8.2's email row asks. It is NOT "email will
+ *    succeed": a configured-but-wrong SMTP host still fails at send time, and no
+ *    flag can promise otherwise. The gap is narrow and the alternative — a probe
+ *    connection per page load — is worse.
+ *  - `networkFeaturesAllowed` — POLICY, from `ADMINIUM_NETWORK_FEATURES`, never
+ *    reachability. See that variable's comment in `config/env.ts`; the short
+ *    version is that a server which promises to make zero unprompted outbound
+ *    calls cannot also report whether outbound calls would work.
+ *  - `lanShare` — is this desktop process bound to every interface (§8.3)?
+ *    Certain, and the strongest kind of certain available: it is read off the
+ *    bind this process was booted with, not off a config file describing what
+ *    somebody meant to happen. See `desktop/lan-share.ts`.
+ */
+export const systemInfoReply = z.object({
+    version: z.string(),
+    node: z.string(),
+    dialect: metaDialect.nullable(),
+    /** Which wrapper booted this process (11-electron.md §4 detection contract). */
+    runtime: systemRuntime,
+    /** `email.smtp` is set ⇒ §8.2 email actions are offered. False without a meta store. */
+    smtpConfigured: z.boolean(),
+    /** Operator policy for outbound features. NOT a reachability claim — see above. */
+    networkFeaturesAllowed: z.boolean(),
+    /**
+     * 11-electron.md §8.3: this desktop process is bound to every interface, so
+     * other devices on the LAN can reach it. Always `false` off the desktop
+     * runtime — see `desktop/lan-share.ts` for why a `0.0.0.0` Docker bind is not
+     * this fact.
+     *
+     * THIS FIELD IS WHY §8.1's CHIP CAN EXIST. §8.1 spends a sentence forbidding
+     * the obvious source — "fed by `GET /api/v1/system/info` + a lightweight
+     * connection-health poll — no preload involvement" — and neither of those two
+     * feeds carried a bind address until this line. Without it the `lan-share`
+     * chip state is unreachable: the component renders it, the precedence function
+     * ranks it, and nothing can ever pass `true`.
+     *
+     * Unauthenticated, like the rest of this reply, and that is sound rather than
+     * tolerated: a caller who reached this route over the LAN has already proved
+     * the answer is `true` by the act of connecting, and a loopback caller is the
+     * person who owns the machine. The field discloses nothing a peer does not
+     * already hold.
+     */
+    lanShare: z.boolean(),
+    /**
+     * 11-electron.md §6 step 2 card 4: can this build seed the demo database?
+     *
+     * The SAME condition `compose.ts` registers the route on — desktop runtime AND
+     * an `ADMINIUM_DEMO_SEED_SCRIPT` that exists — so a `true` here means
+     * `POST /desktop/demo-database` is mounted, and a `false` means it would 404.
+     * Deriving it twice would be a flag that disagrees with the router it
+     * describes; `demoSeedAvailable()` is the one predicate, imported by both.
+     *
+     * IT EXISTS FOR §8.2's RULE: "never hide, always explain". The wizard's fourth
+     * source card must either work or say why it does not, and without this field
+     * the SPA has no way to tell the two apart — it would offer a card whose button
+     * 404s, which is worse than a card that explains itself. `desktopDemoEnabled`
+     * on `composeServer`'s return value is the same fact, but only the process that
+     * called compose can see it, and the SPA is not that process.
+     */
+    desktopDemo: z.boolean(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/system/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/system/schema.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,iFAAiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,qEAAqE;IACrE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,mCAAmC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACjC,CAAC,CAAC;AAGH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,iFAAiF;IACjF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,2EAA2E;IAC3E,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,gFAAgF;IAChF,OAAO,EAAE,aAAa;IACtB,wFAAwF;IACxF,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,mFAAmF;IACnF,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE;IACnC;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;CACzB,CAAC,CAAC"}

package/dist/routes/views/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Saved-views routes (M5-T06, 07-meta-store.md §3.18, 08-server-api.md):
+ *
+ *   GET    /api/v1/pages/:pageId/views            → list (own + shared)
+ *   POST   /api/v1/pages/:pageId/views            → create a personal view
+ *   PATCH  /api/v1/pages/:pageId/views/:viewId    → rename / re-save / default
+ *   DELETE /api/v1/pages/:pageId/views/:viewId    → delete (client confirms)
+ *
+ * Auth: a live session (`requireAuth`). Ownership: a user sees and mutates
+ * only their own views plus shared (`user_id = NULL`) workspace views; a
+ * shared view can only be changed by a settings admin
+ * (`system:settings:manage`). Someone else's private view is invisible (404).
+ * Every mutation is audited (category `data`), matching the sibling resources.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+export interface ViewsRoutesDeps {
+    meta: MetaDb;
+}
+export declare function viewsRoutes(deps: ViewsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/views/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/views/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EAAwB,KAAK,MAAM,EAAkB,MAAM,gBAAgB,CAAC;AAenF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd;AAoBD,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,qBAAqB,CA4IxE"}

package/dist/routes/views/index.js

@@ -0,0 +1,155 @@
+/**
+ * Saved-views routes (M5-T06, 07-meta-store.md §3.18, 08-server-api.md):
+ *
+ *   GET    /api/v1/pages/:pageId/views            → list (own + shared)
+ *   POST   /api/v1/pages/:pageId/views            → create a personal view
+ *   PATCH  /api/v1/pages/:pageId/views/:viewId    → rename / re-save / default
+ *   DELETE /api/v1/pages/:pageId/views/:viewId    → delete (client confirms)
+ *
+ * Auth: a live session (`requireAuth`). Ownership: a user sees and mutates
+ * only their own views plus shared (`user_id = NULL`) workspace views; a
+ * shared view can only be changed by a settings admin
+ * (`system:settings:manage`). Someone else's private view is invisible (404).
+ * Every mutation is audited (category `data`), matching the sibling resources.
+ */
+import { pagesRepo, viewsRepo } from '@adminium/meta';
+import { ConflictError, ForbiddenError, NotFoundError, UnauthorizedError } from '../../errors.js';
+import { PERMISSIONS } from '../../rbac/permissions.js';
+import { viewCreateBody, viewIdParams, viewListReply, viewOkReply, viewPageParams, viewPatchBody, viewReply, } from './schema.js';
+function sessionUserId(request) {
+    if (request.apiKeyPrincipal !== null)
+        return null;
+    return request.user?.id ?? null;
+}
+function toView(view) {
+    return {
+        id: view.id,
+        pageId: view.pageId,
+        userId: view.userId,
+        name: view.name,
+        config: view.config,
+        isDefault: view.isDefault,
+        createdAt: view.createdAt,
+        updatedAt: view.updatedAt,
+    };
+}
+export function viewsRoutes(deps) {
+    const { meta } = deps;
+    const views = viewsRepo(meta);
+    const pages = pagesRepo(meta);
+    return async (app) => {
+        /** The acting session user, or 401 for keyless/API-key principals. */
+        function requireUserId(request) {
+            const userId = sessionUserId(request);
+            if (userId === null) {
+                throw new UnauthorizedError('UNAUTHENTICATED', 'Saved views require a user session.');
+            }
+            return userId;
+        }
+        /** Load a view scoped to (pageId, caller-visible); 404 otherwise. */
+        async function loadVisible(pageId, viewId, userId) {
+            const view = await views.findById(viewId);
+            if (view === null || view.pageId !== pageId || (view.userId !== null && view.userId !== userId)) {
+                throw new NotFoundError(`view ${viewId} does not exist`);
+            }
+            return view;
+        }
+        /** Owner may mutate their own view; a shared view needs settings:manage. */
+        async function assertCanMutate(request, view, userId) {
+            if (view.userId === userId)
+                return;
+            if (view.userId === null && (await request.can(PERMISSIONS.settingsManage)))
+                return;
+            throw new ForbiddenError('You cannot modify this view.', 'FORBIDDEN', { viewId: view.id });
+        }
+        app.get('/pages/:pageId/views', {
+            preHandler: app.requireAuth,
+            schema: { params: viewPageParams, response: { 200: viewListReply } },
+        }, async (request) => {
+            const userId = sessionUserId(request);
+            if (userId === null)
+                return { data: { views: [] } };
+            const list = await views.listForPageUser(request.params.pageId, userId);
+            return { data: { views: list.map(toView) } };
+        });
+        app.post('/pages/:pageId/views', {
+            preHandler: app.requireAuth,
+            schema: { params: viewPageParams, body: viewCreateBody, response: { 201: viewReply } },
+        }, async (request, reply) => {
+            const userId = requireUserId(request);
+            const { pageId } = request.params;
+            const page = await pages.findById(pageId);
+            if (page === null)
+                throw new NotFoundError(`page ${pageId} does not exist`);
+            const clash = await views.findByName(pageId, userId, request.body.name);
+            if (clash !== null) {
+                throw new ConflictError('A view with that name already exists.', 'UNIQUE_VIOLATION', {
+                    name: request.body.name,
+                });
+            }
+            const created = await views.create({
+                pageId,
+                userId,
+                name: request.body.name,
+                config: request.body.config,
+                isDefault: request.body.isDefault ?? false,
+            });
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'view.create',
+                changes: { after: { pageId, name: created.name, isDefault: created.isDefault } },
+            });
+            return reply.status(201).send({ data: toView(created) });
+        });
+        app.patch('/pages/:pageId/views/:viewId', {
+            preHandler: app.requireAuth,
+            schema: { params: viewIdParams, body: viewPatchBody, response: { 200: viewReply } },
+        }, async (request) => {
+            const userId = requireUserId(request);
+            const { pageId, viewId } = request.params;
+            const view = await loadVisible(pageId, viewId, userId);
+            await assertCanMutate(request, view, userId);
+            if (request.body.name !== undefined && request.body.name !== view.name) {
+                const clash = await views.findByName(pageId, view.userId, request.body.name);
+                if (clash !== null && clash.id !== view.id) {
+                    throw new ConflictError('A view with that name already exists.', 'UNIQUE_VIOLATION', {
+                        name: request.body.name,
+                    });
+                }
+            }
+            const updated = await views.update(viewId, {
+                ...(request.body.name !== undefined ? { name: request.body.name } : {}),
+                ...(request.body.config !== undefined ? { config: request.body.config } : {}),
+                ...(request.body.isDefault !== undefined ? { isDefault: request.body.isDefault } : {}),
+            });
+            if (updated === null)
+                throw new NotFoundError(`view ${viewId} does not exist`);
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'view.update',
+                changes: {
+                    before: { name: view.name, isDefault: view.isDefault },
+                    after: { name: updated.name, isDefault: updated.isDefault },
+                },
+            });
+            return { data: toView(updated) };
+        });
+        app.delete('/pages/:pageId/views/:viewId', {
+            preHandler: app.requireAuth,
+            schema: { params: viewIdParams, response: { 200: viewOkReply } },
+        }, async (request) => {
+            const userId = requireUserId(request);
+            const { pageId, viewId } = request.params;
+            const view = await loadVisible(pageId, viewId, userId);
+            await assertCanMutate(request, view, userId);
+            await views.delete(viewId);
+            await app.rbac.audit(request, {
+                category: 'data',
+                action: 'view.delete',
+                changes: { before: { pageId, name: view.name } },
+            });
+            return { data: { ok: true } };
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/views/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/views/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,OAAO,EAAE,SAAS,EAAE,SAAS,EAA+B,MAAM,gBAAgB,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,EACX,cAAc,EACd,aAAa,EACb,SAAS,GAEV,MAAM,aAAa,CAAC;AAMrB,SAAS,aAAa,CAAC,OAAuB;IAC5C,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClD,OAAQ,OAAiD,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,MAAM,CAAC,IAAe;IAC7B,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,sEAAsE;QACtE,SAAS,aAAa,CAAC,OAAuB;YAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,qEAAqE;QACrE,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc;YACvE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;gBAChG,MAAM,IAAI,aAAa,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4EAA4E;QAC5E,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAe,EAAE,MAAc;YACrF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO;YACnC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;gBAAE,OAAO;YACpF,MAAM,IAAI,cAAc,CAAC,8BAA8B,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,GAAG,CAAC,GAAG,CACL,sBAAsB,EACtB;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SACrE,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC/C,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,IAAI,CACN,sBAAsB,EACtB;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;SACvF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAC;YAE5E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,kBAAkB,EAAE;oBACnF,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjC,MAAM;gBACN,MAAM;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;gBAC3B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK;aAC3C,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE;aACjF,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,KAAK,CACP,8BAA8B,EAC9B;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;SACpF,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAE7C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACvE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,IAAI,aAAa,CAAC,uCAAuC,EAAE,kBAAkB,EAAE;wBACnF,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;qBACxB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;gBACzC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAC;YAC/E,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE;oBACP,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;oBACtD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;iBAC5D;aACF,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,MAAM,CACR,8BAA8B,EAC9B;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE;SACjE,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE;aACjD,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAa,EAAE,EAAE,CAAC;QACzC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/views/schema.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Zod schemas for saved views (M5-T06, 07-meta-store.md §3.18).
+ *
+ * `config` is the page-crud grid state (search / sort / filters / page size /
+ * visible columns). It is validated structurally but kept forward-compatible
+ * (`.passthrough()`, permissive filter `op`) — the grid state is opaque config
+ * like a page envelope; the data route re-validates filter grammar when a view
+ * is actually applied. Shapes mirror `@adminium/widgets` `CrudSort` /
+ * `CrudFilterCondition` (crud-api.ts) — change both together.
+ */
+import { z } from 'zod';
+/** The persisted grid-state envelope. */
+export declare const viewConfigSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    search: z.ZodOptional<z.ZodString>;
+    sort: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        column: z.ZodString;
+        dir: z.ZodEnum<{
+            asc: "asc";
+            desc: "desc";
+        }>;
+    }, z.core.$strip>>>;
+    filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        column: z.ZodString;
+        op: z.ZodString;
+        value: z.ZodOptional<z.ZodUnknown>;
+    }, z.core.$loose>>>;
+    pageSize: z.ZodOptional<z.ZodNumber>;
+    columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$loose>;
+export type ViewConfig = z.infer<typeof viewConfigSchema>;
+export declare const viewPageParams: z.ZodObject<{
+    pageId: z.ZodString;
+}, z.core.$strip>;
+export declare const viewIdParams: z.ZodObject<{
+    pageId: z.ZodString;
+    viewId: z.ZodString;
+}, z.core.$strip>;
+export declare const viewCreateBody: z.ZodObject<{
+    name: z.ZodString;
+    config: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        search: z.ZodOptional<z.ZodString>;
+        sort: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            column: z.ZodString;
+            dir: z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>;
+        }, z.core.$strip>>>;
+        filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            op: z.ZodString;
+            value: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$loose>>>;
+        pageSize: z.ZodOptional<z.ZodNumber>;
+        columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$loose>;
+    isDefault: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ViewCreateBody = z.infer<typeof viewCreateBody>;
+export declare const viewPatchBody: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    config: z.ZodOptional<z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        search: z.ZodOptional<z.ZodString>;
+        sort: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            column: z.ZodString;
+            dir: z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>;
+        }, z.core.$strip>>>;
+        filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            op: z.ZodString;
+            value: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$loose>>>;
+        pageSize: z.ZodOptional<z.ZodNumber>;
+        columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$loose>>;
+    isDefault: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ViewPatchBody = z.infer<typeof viewPatchBody>;
+export declare const viewView: z.ZodObject<{
+    id: z.ZodString;
+    pageId: z.ZodString;
+    userId: z.ZodNullable<z.ZodString>;
+    name: z.ZodString;
+    config: z.ZodUnknown;
+    isDefault: z.ZodBoolean;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+}, z.core.$strip>;
+export type ViewView = z.infer<typeof viewView>;
+export declare const viewListReply: z.ZodObject<{
+    data: z.ZodObject<{
+        views: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            pageId: z.ZodString;
+            userId: z.ZodNullable<z.ZodString>;
+            name: z.ZodString;
+            config: z.ZodUnknown;
+            isDefault: z.ZodBoolean;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const viewReply: z.ZodObject<{
+    data: z.ZodObject<{
+        id: z.ZodString;
+        pageId: z.ZodString;
+        userId: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+        config: z.ZodUnknown;
+        isDefault: z.ZodBoolean;
+        createdAt: z.ZodNumber;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const viewOkReply: z.ZodObject<{
+    data: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/views/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/views/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,yCAAyC;AACzC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;iBASb,CAAC;AACjB,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc;;iBAA0C,CAAC;AACtE,eAAO,MAAM,YAAY;;;iBAAqE,CAAC;AAE/F,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;iBAMmD,CAAC;AAC9E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,eAAO,MAAM,QAAQ;;;;;;;;;iBASnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;;iBAA6D,CAAC;AACxF,eAAO,MAAM,SAAS;;;;;;;;;;;iBAA+B,CAAC;AACtD,eAAO,MAAM,WAAW;;;;iBAAwD,CAAC"}

package/dist/routes/views/schema.js

@@ -0,0 +1,56 @@
+/**
+ * Zod schemas for saved views (M5-T06, 07-meta-store.md §3.18).
+ *
+ * `config` is the page-crud grid state (search / sort / filters / page size /
+ * visible columns). It is validated structurally but kept forward-compatible
+ * (`.passthrough()`, permissive filter `op`) — the grid state is opaque config
+ * like a page envelope; the data route re-validates filter grammar when a view
+ * is actually applied. Shapes mirror `@adminium/widgets` `CrudSort` /
+ * `CrudFilterCondition` (crud-api.ts) — change both together.
+ */
+import { z } from 'zod';
+const viewSort = z
+    .object({ column: z.string().min(1), dir: z.enum(['asc', 'desc']) })
+    .nullable();
+const viewFilter = z
+    .object({ column: z.string().min(1), op: z.string().min(1), value: z.unknown().optional() })
+    .passthrough();
+/** The persisted grid-state envelope. */
+export const viewConfigSchema = z
+    .object({
+    v: z.literal(1),
+    search: z.string().max(500).optional(),
+    sort: viewSort.optional(),
+    filters: z.array(viewFilter).max(50).optional(),
+    pageSize: z.number().int().positive().max(500).optional(),
+    columns: z.array(z.string()).max(200).optional(),
+})
+    .passthrough();
+export const viewPageParams = z.object({ pageId: z.string().min(1) });
+export const viewIdParams = z.object({ pageId: z.string().min(1), viewId: z.string().min(1) });
+export const viewCreateBody = z.object({
+    name: z.string().trim().min(1).max(80),
+    config: viewConfigSchema,
+    isDefault: z.boolean().optional(),
+});
+export const viewPatchBody = z
+    .object({
+    name: z.string().trim().min(1).max(80).optional(),
+    config: viewConfigSchema.optional(),
+    isDefault: z.boolean().optional(),
+})
+    .refine((body) => Object.keys(body).length > 0, { message: 'empty patch' });
+export const viewView = z.object({
+    id: z.string(),
+    pageId: z.string(),
+    userId: z.string().nullable(),
+    name: z.string(),
+    config: z.unknown(),
+    isDefault: z.boolean(),
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+export const viewListReply = z.object({ data: z.object({ views: z.array(viewView) }) });
+export const viewReply = z.object({ data: viewView });
+export const viewOkReply = z.object({ data: z.object({ ok: z.literal(true) }) });
+//# sourceMappingURL=schema.js.map

package/dist/routes/views/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/views/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;KACnE,QAAQ,EAAE,CAAC;AAEd,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC3F,WAAW,EAAE,CAAC;AAEjB,yCAAyC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,WAAW,EAAE,CAAC;AAGjB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE/F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtC,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,MAAM,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;AAG9E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/routes/widget-data/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Widget-data API (04-widget-registry.md §5.2, M4-T04 subset):
+ *
+ * - `POST /api/v1/widget-data/query` — one descriptor → one shaped payload;
+ * - `POST /api/v1/widget-data/batch` — ≤40 `{ instanceId, descriptor }`
+ *   items resolved in parallel with per-item error isolation, so a
+ *   dashboard loads in one round trip and one failing widget never takes
+ *   the page down (acceptance criterion #6).
+ *
+ * Pipeline per item: Zod validation (route schema) → snapshot identifier
+ * resolution → per-table RBAC read check (403 TABLE_FORBIDDEN + audit on
+ * denial) → PII column refusal (403 COLUMN_FORBIDDEN, in the compiler) →
+ * dynamic-Kysely execution on the data connection → §3 envelope shaping →
+ * 30 s in-memory cache keyed on descriptor+params+connection+role scope.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+import type { ConnectionManager } from '../../connections/manager.js';
+import { WidgetDataCache } from '../../widget-data/cache.js';
+export interface WidgetDataRoutesDeps {
+    manager: ConnectionManager;
+    meta: MetaDb;
+    /** Injectable for TTL tests; a fresh 30 s cache otherwise. */
+    cache?: WidgetDataCache | undefined;
+    /** Injectable clock for `window` bounds (tests). */
+    now?: (() => Date) | undefined;
+}
+export declare function widgetDataRoutes(deps: WidgetDataRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/widget-data/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/widget-data/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAgC,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAM3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAItE,OAAO,EAAE,eAAe,EAAc,MAAM,4BAA4B,CAAC;AAKzE,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,oDAAoD;IACpD,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CAChC;AAOD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,qBAAqB,CAsJlF"}