@adonis-agora/agent 0.20.0 → 0.21.0

package/dist/assets/spa/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>agent · governance console</title>
+    <script type="module" crossorigin src="./assets/index-CkOAJYbh.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-BYLm0nq8.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/dist/configure.d.ts

@@ -3,16 +3,21 @@ import type Configure from '@adonisjs/core/commands/configure';
  * `node ace configure @adonis-agora/agent` — auto-wires the package:
  *
  * 1. registers the agent service provider in `adonisrc.ts`;
- * 2. registers the Assembler `init` hook that generates the typed `app/agent_tools` barrel at
+ * 2. registers the embedded dashboard provider — the governance console SPA, bundled into this
+ *    package's own `dist/` (`@adonis-agora/agent-dashboard`'s build output, copied in at build time),
+ *    served with no separate install. Toggle/relocate it with the optional `config('agent').dashboard`
+ *    block (see `config/agent.ts`); it mounts only once `governanceAuthorize` is configured — see the
+ *    provider's own doc comment for why;
+ * 3. registers the Assembler `init` hook that generates the typed `app/agent_tools` barrel at
  *    build/dev time (the provider imports it instead of scanning at runtime; it falls back to the
  *    runtime scan when the barrel is absent);
- * 3. publishes `config/agent.ts`;
- * 4. publishes `config/mcp.ts` (the MCP endpoint config; the MCP provider is separate);
- * 5. publishes the Lucid migration for the five agent tables (run `node ace migration:run`; delete it
+ * 4. publishes `config/agent.ts`;
+ * 5. publishes `config/mcp.ts` (the MCP endpoint config; the MCP provider is separate);
+ * 6. publishes the Lucid migration for the five agent tables (run `node ace migration:run`; delete it
  *    if you only use the in-memory store);
- * 6. publishes the additive run-tracking migration (`agent_run` table + `run_id` columns) — run it
+ * 7. publishes the additive run-tracking migration (`agent_run` table + `run_id` columns) — run it
  *    after the base migration; delete it with the base one if you only use the in-memory store;
- * 7. publishes the pgvector migration for the RAG chunk table (Postgres + pgvector only; delete it
+ * 8. publishes the pgvector migration for the RAG chunk table (Postgres + pgvector only; delete it
  *    unless you use `retrievers.pgvector({...})`).
  */
 export declare function configure(command: Configure): Promise<void>;

package/dist/configure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../configure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,mCAAmC,CAAC;AAG/D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,SAAS,iBAcjD"}
+{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../configure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,mCAAmC,CAAC;AAG/D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,SAAS,iBAejD"}

package/dist/configure.js

@@ -3,22 +3,28 @@ import { stubsRoot } from './stubs/main.js';
  * `node ace configure @adonis-agora/agent` — auto-wires the package:
  *
  * 1. registers the agent service provider in `adonisrc.ts`;
- * 2. registers the Assembler `init` hook that generates the typed `app/agent_tools` barrel at
+ * 2. registers the embedded dashboard provider — the governance console SPA, bundled into this
+ *    package's own `dist/` (`@adonis-agora/agent-dashboard`'s build output, copied in at build time),
+ *    served with no separate install. Toggle/relocate it with the optional `config('agent').dashboard`
+ *    block (see `config/agent.ts`); it mounts only once `governanceAuthorize` is configured — see the
+ *    provider's own doc comment for why;
+ * 3. registers the Assembler `init` hook that generates the typed `app/agent_tools` barrel at
  *    build/dev time (the provider imports it instead of scanning at runtime; it falls back to the
  *    runtime scan when the barrel is absent);
- * 3. publishes `config/agent.ts`;
- * 4. publishes `config/mcp.ts` (the MCP endpoint config; the MCP provider is separate);
- * 5. publishes the Lucid migration for the five agent tables (run `node ace migration:run`; delete it
+ * 4. publishes `config/agent.ts`;
+ * 5. publishes `config/mcp.ts` (the MCP endpoint config; the MCP provider is separate);
+ * 6. publishes the Lucid migration for the five agent tables (run `node ace migration:run`; delete it
  *    if you only use the in-memory store);
- * 6. publishes the additive run-tracking migration (`agent_run` table + `run_id` columns) — run it
+ * 7. publishes the additive run-tracking migration (`agent_run` table + `run_id` columns) — run it
  *    after the base migration; delete it with the base one if you only use the in-memory store;
- * 7. publishes the pgvector migration for the RAG chunk table (Postgres + pgvector only; delete it
+ * 8. publishes the pgvector migration for the RAG chunk table (Postgres + pgvector only; delete it
  *    unless you use `retrievers.pgvector({...})`).
  */
 export async function configure(command) {
     const codemods = await command.createCodemods();
     await codemods.updateRcFile((rcFile) => {
         rcFile.addProvider('@adonis-agora/agent/agent_provider');
+        rcFile.addProvider('@adonis-agora/agent/dashboard_provider');
         // Generate the typed app/agent_tools barrel at build/dev time (replaces the runtime readdir scan).
         rcFile.addAssemblerHook('init', '@adonis-agora/agent/hooks/tools');
     });

package/dist/configure.js.map

@@ -1 +1 @@
-{"version":3,"file":"configure.js","sourceRoot":"","sources":["../configure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAkB;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAEhD,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;QACzD,mGAAmG;QACnG,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,8CAA8C,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,oDAAoD,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}
+{"version":3,"file":"configure.js","sourceRoot":"","sources":["../configure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAkB;IAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;IAEhD,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;QACzD,MAAM,CAAC,WAAW,CAAC,wCAAwC,CAAC,CAAC;QAC7D,mGAAmG;QACnG,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,8CAA8C,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,oDAAoD,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,QAAQ,CAAC,aAAa,CAAC,SAAS,EAAE,kDAAkD,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/providers/dashboard_provider.d.ts

@@ -0,0 +1,55 @@
+import type { ApplicationService } from '@adonisjs/core/types';
+/**
+ * Serves the `@adonis-agora/agent-dashboard` governance SPA **from this package's own build** — no
+ * separate install, no separate provider registration. `node ace configure @adonis-agora/agent`
+ * registers this provider alongside `agent_provider`, and the SPA it serves is bundled straight into
+ * `@adonis-agora/agent`'s own `dist/` at build time (`package.json`'s `copy:stubs` copies
+ * `../dashboard/dist/spa`, the `@adonis-agora/agent-dashboard` package's `vite build` output, into
+ * `dist/assets/spa`) — mirrors `@adonis-agora/durable`'s `dashboard_provider.ts` /
+ * `src/dashboard/spa.ts` split, which does the identical thing for its own dashboard.
+ *
+ * The routing/gating logic here is BYTE-FOR-BYTE the same as `@adonis-agora/agent-dashboard`'s own
+ * `agent_dashboard_provider.ts` — both call the SAME shared helpers from `../src/dashboard/index.js`
+ * (`decideDashboardMount`, `evaluateDashboardGate`, the path/content-type helpers). The two providers
+ * differ only in WHERE they read the built `index.html`/assets from: this one reads its own
+ * `dist/assets/spa` (copied in at build time); the standalone provider reads
+ * `@adonis-agora/agent-dashboard`'s own `dist/spa`.
+ *
+ * Why the logic lives HERE rather than in `@adonis-agora/agent-dashboard` (which would let this
+ * provider stay a one-line re-export): `@adonis-agora/agent-dashboard` already depends on
+ * `@adonis-agora/agent` (its provider imports `AgentConfig`/`ActorResolver`), so a dependency the
+ * other way — this package depending on the dashboard package's code at runtime — would be circular,
+ * and in this monorepo it would ALSO be a real `turbo`/pnpm build cycle (the dashboard package's own
+ * build needs `@adonis-agora/agent` built first, to typecheck its provider against it). Keeping the
+ * shared logic in `src/dashboard/` (owned by this package) avoids the cycle exactly the way
+ * `@adonis-agora/durable` avoids it — by owning its `spa.ts` serving helpers directly rather than
+ * depending on `@adonis-agora/durable-dashboard` for anything but the BUILT ASSET FILES (a
+ * build-time-only, one-directional filesystem copy in `copy:stubs`, no package.json dependency at
+ * all — see that script for how the dashboard's SPA output is located: a plain relative path,
+ * `../dashboard/dist/spa`, resolved by directory layout, not by module resolution).
+ *
+ * `@adonis-agora/agent-dashboard`'s own provider keeps working entirely unchanged for apps that
+ * already install and register it directly (e.g. on an older `@adonis-agora/agent` version, or where
+ * an app wants the standalone package's independent versioning/release cadence) — this provider is
+ * purely additive. An app that registers BOTH providers with the same mount path will hit AdonisJS's
+ * "duplicate route" error at boot; pick one (this is the intended migration signal, not a bug).
+ *
+ * Routes (mount = `<agentPath>/dashboard`, default `/agent/dashboard`) — identical to the standalone
+ * provider's:
+ * - `GET <mount>`   → the SPA shell (`index.html`, with the resolved API base + `<base href>` injected)
+ * - `GET <mount>/*` → a built asset, or the SPA shell as a fallback (client-rendered console)
+ *
+ * Nothing mounts unless the agent config carries a `governanceAuthorize` gate: without it the
+ * `/agent/governance/*` routes the console reads do not exist, so the console would load and fail on
+ * every panel but Quota. The provider declines and logs why (see `decideDashboardMount`).
+ *
+ * Enable/disable and override the mount via the optional `config('agent').dashboard` block — the SAME
+ * block the standalone provider reads.
+ */
+export default class DashboardProvider {
+    #private;
+    protected app: ApplicationService;
+    constructor(app: ApplicationService);
+    boot(): Promise<void>;
+}
+//# sourceMappingURL=dashboard_provider.d.ts.map

package/dist/providers/dashboard_provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard_provider.d.ts","sourceRoot":"","sources":["../../providers/dashboard_provider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAiB/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;;IACxB,SAAS,CAAC,GAAG,EAAE,kBAAkB;gBAAvB,GAAG,EAAE,kBAAkB;IAcvC,IAAI;CAuGX"}

package/dist/providers/dashboard_provider.js

@@ -0,0 +1,152 @@
+import { readFile } from 'node:fs/promises';
+import { resolve as resolvePath } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { apiBaseFor, contentTypeFor, decideDashboardMount, evaluateDashboardGate, injectApiBase, injectBaseHref, mountPathFor, resolveDashboardConfig, safeAssetSegments, } from '../src/dashboard/index.js';
+/**
+ * Serves the `@adonis-agora/agent-dashboard` governance SPA **from this package's own build** — no
+ * separate install, no separate provider registration. `node ace configure @adonis-agora/agent`
+ * registers this provider alongside `agent_provider`, and the SPA it serves is bundled straight into
+ * `@adonis-agora/agent`'s own `dist/` at build time (`package.json`'s `copy:stubs` copies
+ * `../dashboard/dist/spa`, the `@adonis-agora/agent-dashboard` package's `vite build` output, into
+ * `dist/assets/spa`) — mirrors `@adonis-agora/durable`'s `dashboard_provider.ts` /
+ * `src/dashboard/spa.ts` split, which does the identical thing for its own dashboard.
+ *
+ * The routing/gating logic here is BYTE-FOR-BYTE the same as `@adonis-agora/agent-dashboard`'s own
+ * `agent_dashboard_provider.ts` — both call the SAME shared helpers from `../src/dashboard/index.js`
+ * (`decideDashboardMount`, `evaluateDashboardGate`, the path/content-type helpers). The two providers
+ * differ only in WHERE they read the built `index.html`/assets from: this one reads its own
+ * `dist/assets/spa` (copied in at build time); the standalone provider reads
+ * `@adonis-agora/agent-dashboard`'s own `dist/spa`.
+ *
+ * Why the logic lives HERE rather than in `@adonis-agora/agent-dashboard` (which would let this
+ * provider stay a one-line re-export): `@adonis-agora/agent-dashboard` already depends on
+ * `@adonis-agora/agent` (its provider imports `AgentConfig`/`ActorResolver`), so a dependency the
+ * other way — this package depending on the dashboard package's code at runtime — would be circular,
+ * and in this monorepo it would ALSO be a real `turbo`/pnpm build cycle (the dashboard package's own
+ * build needs `@adonis-agora/agent` built first, to typecheck its provider against it). Keeping the
+ * shared logic in `src/dashboard/` (owned by this package) avoids the cycle exactly the way
+ * `@adonis-agora/durable` avoids it — by owning its `spa.ts` serving helpers directly rather than
+ * depending on `@adonis-agora/durable-dashboard` for anything but the BUILT ASSET FILES (a
+ * build-time-only, one-directional filesystem copy in `copy:stubs`, no package.json dependency at
+ * all — see that script for how the dashboard's SPA output is located: a plain relative path,
+ * `../dashboard/dist/spa`, resolved by directory layout, not by module resolution).
+ *
+ * `@adonis-agora/agent-dashboard`'s own provider keeps working entirely unchanged for apps that
+ * already install and register it directly (e.g. on an older `@adonis-agora/agent` version, or where
+ * an app wants the standalone package's independent versioning/release cadence) — this provider is
+ * purely additive. An app that registers BOTH providers with the same mount path will hit AdonisJS's
+ * "duplicate route" error at boot; pick one (this is the intended migration signal, not a bug).
+ *
+ * Routes (mount = `<agentPath>/dashboard`, default `/agent/dashboard`) — identical to the standalone
+ * provider's:
+ * - `GET <mount>`   → the SPA shell (`index.html`, with the resolved API base + `<base href>` injected)
+ * - `GET <mount>/*` → a built asset, or the SPA shell as a fallback (client-rendered console)
+ *
+ * Nothing mounts unless the agent config carries a `governanceAuthorize` gate: without it the
+ * `/agent/governance/*` routes the console reads do not exist, so the console would load and fail on
+ * every panel but Quota. The provider declines and logs why (see `decideDashboardMount`).
+ *
+ * Enable/disable and override the mount via the optional `config('agent').dashboard` block — the SAME
+ * block the standalone provider reads.
+ */
+export default class DashboardProvider {
+    app;
+    constructor(app) {
+        this.app = app;
+    }
+    /**
+     * Directory of the built SPA (`dist/assets/spa`, copied in by `copy:stubs` — see `package.json`),
+     * relative to this compiled provider (`dist/providers`). Resolved lazily (not at module scope):
+     * `fileURLToPath` throws on any non-`file:` `import.meta.url`, which would make this provider
+     * unimportable under a test runner that doesn't use real file URLs.
+     */
+    #spaDir;
+    #spaDirectory() {
+        this.#spaDir ??= fileURLToPath(new URL('../assets/spa/', import.meta.url));
+        return this.#spaDir;
+    }
+    async boot() {
+        const agentConfig = this.app.config.get('agent', {});
+        const dashboardConfig = resolveDashboardConfig(this.app.config.get('agent.dashboard', {}));
+        // Mount only when the console can actually work: every panel but Quota reads the agent's
+        // cross-actor `/agent/governance/*` routes, and those do not exist without a `governanceAuthorize`
+        // gate. Refusing here — loudly — beats serving a shell that 404s its own data with no explanation.
+        const decision = decideDashboardMount(dashboardConfig.enabled, agentConfig.governanceAuthorize, agentConfig.governanceQueries);
+        if (!decision.mount) {
+            if (decision.reason !== 'disabled')
+                console.warn(decision.warning);
+            return;
+        }
+        // Resolve the router from the container, NOT from `@adonisjs/core/services/router`: that service's
+        // default export is assigned inside an `app.booted()` hook, which runs AFTER every provider's
+        // `boot()` — so at this point the module default is still `undefined` and `router.get(...)` throws.
+        const router = await this.app.container.make('router');
+        const agentPath = agentConfig.path ?? 'agent';
+        const apiBase = apiBaseFor(agentPath);
+        const mount = mountPathFor(agentPath, dashboardConfig.path);
+        const actorResolver = agentConfig.actorResolver;
+        const authorize = dashboardConfig.authorize;
+        // The SPA shell, served at the bare mount. We do NOT redirect to a trailing-slash variant: the
+        // AdonisJS router normalizes trailing slashes, so `mount` and `${mount}/` are the SAME route
+        // pattern — registering both throws "Duplicate route". Instead `sendIndex` injects a
+        // `<base href="${mount}/">`, so the SPA's relative `./assets/*` URLs resolve against the mount
+        // directory regardless of whether the browser's URL carries a trailing slash.
+        router.get(mount, async (ctx) => {
+            if (!(await this.#gate(ctx, actorResolver, authorize)))
+                return;
+            await this.#sendIndex(ctx, apiBase, mount);
+        });
+        // Built assets (JS/CSS/fonts/...), with an index fallback for any unmatched path so the
+        // client-rendered console still boots on a deep link.
+        router.get(`${mount}/*`, async (ctx) => {
+            if (!(await this.#gate(ctx, actorResolver, authorize)))
+                return;
+            const segments = safeAssetSegments(ctx.params['*']);
+            if (segments === null) {
+                return ctx.response.status(400).json({ error: 'bad asset path' });
+            }
+            await this.#sendAsset(ctx, segments, apiBase, mount);
+        });
+    }
+    /**
+     * Resolve the actor through the agent config's resolver, mirroring the governance routes, then run
+     * the optional `authorize` gate. Returns `true` to proceed; replies `401` on a missing/failed
+     * resolver and `403` when `authorize` denies the resolved actor. The decision itself lives in the
+     * router-free {@link evaluateDashboardGate} so it can be unit tested; this only writes the response.
+     */
+    async #gate(ctx, actorResolver, authorize) {
+        const verdict = await evaluateDashboardGate(ctx, actorResolver, authorize);
+        if (!verdict.ok) {
+            ctx.response.status(verdict.status).json({ error: verdict.error });
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Read `dist/assets/spa/index.html`, inject the `<base href>` (so relative `./assets/*` resolve
+     * against the mount dir) and the API base, and send it.
+     */
+    async #sendIndex(ctx, apiBase, mount) {
+        const html = await readFile(resolvePath(this.#spaDirectory(), 'index.html'), 'utf8');
+        ctx.response.header('content-type', 'text/html; charset=utf-8');
+        ctx.response.header('cache-control', 'no-store, must-revalidate');
+        ctx.response.send(injectApiBase(injectBaseHref(html, mount), apiBase));
+    }
+    /** Send the requested built asset, or fall back to the SPA shell when it does not exist. */
+    async #sendAsset(ctx, segments, apiBase, mount) {
+        const filename = segments[segments.length - 1] ?? 'index.html';
+        try {
+            const buffer = await readFile(resolvePath(this.#spaDirectory(), ...segments));
+            ctx.response.header('content-type', contentTypeFor(filename));
+            ctx.response.send(buffer);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                await this.#sendIndex(ctx, apiBase, mount);
+                return;
+            }
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=dashboard_provider.js.map

package/dist/providers/dashboard_provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard_provider.js","sourceRoot":"","sources":["../../providers/dashboard_provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAGL,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AAInC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACd;IAAtB,YAAsB,GAAuB;QAAvB,QAAG,GAAH,GAAG,CAAoB;IAAG,CAAC;IAEjD;;;;;OAKG;IACH,OAAO,CAAqB;IAC5B,aAAa;QACX,IAAI,CAAC,OAAO,KAAK,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAc,OAAO,EAAE,EAAiB,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,sBAAsB,CAC5C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAuB,iBAAiB,EAAE,EAAE,CAAC,CACjE,CAAC;QAEF,yFAAyF;QACzF,mGAAmG;QACnG,mGAAmG;QACnG,MAAM,QAAQ,GAAG,oBAAoB,CACnC,eAAe,CAAC,OAAO,EACvB,WAAW,CAAC,mBAAmB,EAC/B,WAAW,CAAC,iBAAiB,CAC9B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,mGAAmG;QACnG,8FAA8F;QAC9F,oGAAoG;QACpG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEvD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,IAAI,OAAO,CAAC;QAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;QAEhD,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC;QAE5C,+FAA+F;QAC/F,6FAA6F;QAC7F,qFAAqF;QACrF,+FAA+F;QAC/F,8EAA8E;QAC9E,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO;YAC/D,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO;YAC/D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CACT,GAAgB,EAChB,aAAwC,EACxC,SAAmC;QAEnC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAgB,EAAE,OAAe,EAAE,KAAa;QAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,UAAU,CACd,GAAgB,EAChB,QAAkB,EAClB,OAAe,EACf,KAAa;QAEb,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;YAC9E,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/src/dashboard/define_config.d.ts

@@ -0,0 +1,75 @@
+import type { HttpContext } from '@adonisjs/core/http';
+import type { AgentGovernanceAuthorize } from '../governance-gate.js';
+import type { Actor } from '../types.js';
+/**
+ * An extra authorization gate for the dashboard, run AFTER the agent config's `actorResolver` has
+ * resolved the caller. Return `false` (or throw) to deny — the request gets `403`. The governance
+ * read-model the SPA serves spans EVERY actor's spend/usage, so most apps restrict the console beyond
+ * mere authentication, e.g. `(actor) => actor.roles?.includes('ADMIN') ?? false`.
+ */
+export type AgentDashboardAuthorize = (actor: Actor, ctx: HttpContext) => boolean | Promise<boolean>;
+/**
+ * Optional `config('agent').dashboard` block. The dashboard reuses the agent config's `path` and
+ * `actorResolver` (so it sits behind the SAME actor gating as the governance routes); this block
+ * toggles it on/off, optionally overrides the mount path, and optionally adds an `authorize` gate.
+ *
+ * Shared by BOTH the embedded dashboard provider (`@adonis-agora/agent/dashboard_provider`, wired
+ * automatically when you `node ace configure @adonis-agora/agent`) and the standalone
+ * `@adonis-agora/agent-dashboard` package's provider — one config block controls whichever one is
+ * registered.
+ */
+export interface AgentDashboardConfig {
+    /**
+     * Mount the SPA. Default `true` — set `false` to keep the routes off entirely. Note `true` is
+     * necessary but not sufficient: the console also needs the agent's `governanceAuthorize` gate, see
+     * {@link decideDashboardMount}.
+     */
+    enabled?: boolean;
+    /** Override the mount path. Default `<agentPath>/dashboard`. */
+    path?: string;
+    /**
+     * Extra authorization run after the actor resolves. Return `false` to deny (`403`). Omit to allow
+     * any resolved actor (the default) — note this is only an EXTRA gate on the SPA shell; whether the
+     * console mounts at all, and whether its data is readable, is decided by the agent config's
+     * `governanceAuthorize`.
+     */
+    authorize?: AgentDashboardAuthorize;
+}
+export interface ResolvedAgentDashboardConfig {
+    enabled: boolean;
+    path?: string;
+    authorize?: AgentDashboardAuthorize;
+}
+/** Fill defaults for the optional dashboard config block. */
+export declare function resolveDashboardConfig(config: AgentDashboardConfig | undefined): ResolvedAgentDashboardConfig;
+/** Whether the provider registers the console's routes, and (when it refuses) what to say about it. */
+export type DashboardMountDecision = {
+    mount: true;
+} | {
+    mount: false;
+    reason: 'disabled';
+} | {
+    mount: false;
+    reason: 'no-governance-gate';
+    warning: string;
+} | {
+    mount: false;
+    reason: 'no-governance-queries';
+    warning: string;
+};
+/**
+ * Decide whether to register the console's routes at all — the router-free core of the provider's
+ * mount check, extracted so it can be unit tested without booting an app.
+ *
+ * The console is a pure consumer of the agent's cross-actor `/agent/governance/*` read routes, and
+ * those routes are not mounted unless the agent config carries a `governanceAuthorize` gate. Serving
+ * a shell that can only 404 its own data is worse than not serving it: the failure shows up as seven
+ * dead panels at click time with nothing anywhere explaining why. So the console follows the same
+ * fail-closed-by-omission rule one layer down — no gate, no routes — and says so at boot.
+ *
+ * This costs nothing that still works: every app affected is an app whose console is ALREADY dead in
+ * every view but Quota. `dashboard.authorize` is deliberately NOT the trigger; it gates the shell,
+ * not the data, and an app can set it and still have a console with nothing to render.
+ */
+export declare function decideDashboardMount(enabled: boolean, governanceAuthorize: AgentGovernanceAuthorize | undefined, governanceQueries?: unknown): DashboardMountDecision;
+//# sourceMappingURL=define_config.d.ts.map

package/dist/src/dashboard/define_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/dashboard/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,CACpC,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,WAAW,KACb,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,uBAAuB,CAAC;CACrC;AAED,6DAA6D;AAC7D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,oBAAoB,GAAG,SAAS,GACvC,4BAA4B,CAK9B;AAED,uGAAuG;AACvG,MAAM,MAAM,sBAAsB,GAC9B;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAoBvE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,OAAO,EAChB,mBAAmB,EAAE,wBAAwB,GAAG,SAAS,EACzD,iBAAiB,CAAC,EAAE,OAAO,GAC1B,sBAAsB,CAgBxB"}

package/dist/src/dashboard/define_config.js

@@ -0,0 +1,56 @@
+/** Fill defaults for the optional dashboard config block. */
+export function resolveDashboardConfig(config) {
+    const resolved = { enabled: config?.enabled ?? true };
+    if (config?.path !== undefined)
+        resolved.path = config.path;
+    if (config?.authorize !== undefined)
+        resolved.authorize = config.authorize;
+    return resolved;
+}
+/**
+ * The exact wording the provider logs when it declines to mount. Mirrors the agent provider's own
+ * governance boot warning — same three facts, same vocabulary — so a reader who sees one recognises
+ * the other.
+ */
+const NO_GOVERNANCE_GATE_WARNING = '[@adonis-agora/agent-dashboard] the governance console was NOT mounted: every panel but Quota reads the cross-actor `/agent/governance/*` routes, and those are themselves not mounted because no `governanceAuthorize` gate is configured — so the console would load and then fail on every panel. Set `governanceAuthorize` in config/agent.ts (e.g. an ADMIN check) to mount the routes and this console gated, or `governanceAuthorize: () => true` to deliberately restore the old behaviour of letting ANY authenticated actor read them. `GET /agent/approvals/mine` is unaffected — it stays mounted and scoped to the calling actor. To keep the console off on purpose and silence this, set `dashboard: { enabled: false }`.';
+/**
+ * The wording logged when the read-model itself was turned off. Deliberately distinct from
+ * {@link NO_GOVERNANCE_GATE_WARNING}: both produce the same dead console, and an operator staring at
+ * a 404 must be able to tell from the log ALONE which of the two knobs is responsible. A shared
+ * "governance is not configured" message would recreate exactly the diagnosability problem this
+ * check exists to remove.
+ */
+const NO_GOVERNANCE_QUERIES_WARNING = '[@adonis-agora/agent-dashboard] the governance console was NOT mounted: `governanceQueries` is set to `false` in config/agent.ts, so the cross-actor read-model was never built and the `/agent/governance/*` routes it serves do not exist — the console would load and then fail on every panel but Quota. A `governanceAuthorize` gate is NOT the missing piece here; it is already configured. Remove `governanceQueries: false` (omit it to get the Lucid read-model when the main store is Lucid, or pass a store/factory explicitly) to mount the read-model and this console. To keep the console off on purpose and silence this, set `dashboard: { enabled: false }`.';
+/**
+ * Decide whether to register the console's routes at all — the router-free core of the provider's
+ * mount check, extracted so it can be unit tested without booting an app.
+ *
+ * The console is a pure consumer of the agent's cross-actor `/agent/governance/*` read routes, and
+ * those routes are not mounted unless the agent config carries a `governanceAuthorize` gate. Serving
+ * a shell that can only 404 its own data is worse than not serving it: the failure shows up as seven
+ * dead panels at click time with nothing anywhere explaining why. So the console follows the same
+ * fail-closed-by-omission rule one layer down — no gate, no routes — and says so at boot.
+ *
+ * This costs nothing that still works: every app affected is an app whose console is ALREADY dead in
+ * every view but Quota. `dashboard.authorize` is deliberately NOT the trigger; it gates the shell,
+ * not the data, and an app can set it and still have a console with nothing to render.
+ */
+export function decideDashboardMount(enabled, governanceAuthorize, governanceQueries) {
+    if (!enabled)
+        return { mount: false, reason: 'disabled' };
+    if (governanceAuthorize === undefined) {
+        return { mount: false, reason: 'no-governance-gate', warning: NO_GOVERNANCE_GATE_WARNING };
+    }
+    // ONLY an explicit `false` is decidable here. `undefined` does NOT mean "no read-model": the agent
+    // provider's `#resolveGovernance` defaults it to the Lucid read-model whenever the main store is
+    // Lucid, and reproducing that resolution would duplicate provider logic in the dashboard.
+    if (governanceQueries === false) {
+        return {
+            mount: false,
+            reason: 'no-governance-queries',
+            warning: NO_GOVERNANCE_QUERIES_WARNING,
+        };
+    }
+    return { mount: true };
+}
+//# sourceMappingURL=define_config.js.map

package/dist/src/dashboard/define_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define_config.js","sourceRoot":"","sources":["../../../src/dashboard/define_config.ts"],"names":[],"mappings":"AAiDA,6DAA6D;AAC7D,MAAM,UAAU,sBAAsB,CACpC,MAAwC;IAExC,MAAM,QAAQ,GAAiC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC;IACpF,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;QAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5D,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS;QAAE,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC3E,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD;;;;GAIG;AACH,MAAM,0BAA0B,GAC9B,0sBAA0sB,CAAC;AAE7sB;;;;;;GAMG;AACH,MAAM,6BAA6B,GACjC,ipBAAipB,CAAC;AAEppB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgB,EAChB,mBAAyD,EACzD,iBAA2B;IAE3B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1D,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC7F,CAAC;IACD,mGAAmG;IACnG,iGAAiG;IACjG,0FAA0F;IAC1F,IAAI,iBAAiB,KAAK,KAAK,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,6BAA6B;SACvC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/dist/src/dashboard/gate.d.ts

@@ -0,0 +1,33 @@
+import type { HttpContext } from '@adonisjs/core/http';
+import type { ActorResolver } from '../spi/actor-resolver.js';
+import type { AgentDashboardAuthorize } from './define_config.js';
+/** The outcome of the dashboard access gate: proceed, or deny with an HTTP status + message. */
+export type DashboardGateVerdict = {
+    ok: true;
+} | {
+    ok: false;
+    status: 401 | 403;
+    error: string;
+};
+/**
+ * Decide whether a request may reach the dashboard, WITHOUT touching the response — so it is unit
+ * testable free of the AdonisJS router/app: resolve the actor through the agent config's resolver
+ * (missing/failed → `401`), then run the optional `authorize` gate over the resolved actor
+ * (denied/threw → `403`).
+ *
+ * This gates the SPA **shell**, and only the shell. It is NOT what decides whether the console's data
+ * is readable, and it is no longer the last line of defence it once had to be:
+ *
+ * - Whether the console mounts at all is decided earlier, by {@link decideDashboardMount} — the
+ *   routes are not registered unless the agent config carries a `governanceAuthorize` gate AND its
+ *   `governanceQueries` read-model exists. So this function never runs for a console that could only
+ *   404 its own panels.
+ * - Whether the DATA is readable is decided by the agent's own `governanceAuthorize` on the
+ *   `/agent/governance/*` routes, not here. Omitting `authorize` while a gate is configured leaves
+ *   the shell open to any resolved actor but exposes no cross-actor data.
+ *
+ * Omitting BOTH the resolver and `authorize` would expose the shell to any request; the provider is
+ * expected to short-circuit on a missing resolver via the `401` here.
+ */
+export declare function evaluateDashboardGate(ctx: HttpContext, actorResolver: ActorResolver | undefined, authorize?: AgentDashboardAuthorize): Promise<DashboardGateVerdict>;
+//# sourceMappingURL=gate.d.ts.map

package/dist/src/dashboard/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../src/dashboard/gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAElE,gGAAgG;AAChG,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,WAAW,EAChB,aAAa,EAAE,aAAa,GAAG,SAAS,EACxC,SAAS,CAAC,EAAE,uBAAuB,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA4B/B"}

package/dist/src/dashboard/gate.js

@@ -0,0 +1,52 @@
+/**
+ * Decide whether a request may reach the dashboard, WITHOUT touching the response — so it is unit
+ * testable free of the AdonisJS router/app: resolve the actor through the agent config's resolver
+ * (missing/failed → `401`), then run the optional `authorize` gate over the resolved actor
+ * (denied/threw → `403`).
+ *
+ * This gates the SPA **shell**, and only the shell. It is NOT what decides whether the console's data
+ * is readable, and it is no longer the last line of defence it once had to be:
+ *
+ * - Whether the console mounts at all is decided earlier, by {@link decideDashboardMount} — the
+ *   routes are not registered unless the agent config carries a `governanceAuthorize` gate AND its
+ *   `governanceQueries` read-model exists. So this function never runs for a console that could only
+ *   404 its own panels.
+ * - Whether the DATA is readable is decided by the agent's own `governanceAuthorize` on the
+ *   `/agent/governance/*` routes, not here. Omitting `authorize` while a gate is configured leaves
+ *   the shell open to any resolved actor but exposes no cross-actor data.
+ *
+ * Omitting BOTH the resolver and `authorize` would expose the shell to any request; the provider is
+ * expected to short-circuit on a missing resolver via the `401` here.
+ */
+export async function evaluateDashboardGate(ctx, actorResolver, authorize) {
+    if (actorResolver === undefined) {
+        return { ok: false, status: 401, error: 'no actor resolver configured' };
+    }
+    let actor;
+    try {
+        actor = await actorResolver.resolve(ctx);
+    }
+    catch (error) {
+        return {
+            ok: false,
+            status: 401,
+            error: error instanceof Error ? error.message : 'unauthorized',
+        };
+    }
+    if (authorize !== undefined) {
+        try {
+            if (!(await authorize(actor, ctx))) {
+                return { ok: false, status: 403, error: 'forbidden' };
+            }
+        }
+        catch (error) {
+            return {
+                ok: false,
+                status: 403,
+                error: error instanceof Error ? error.message : 'forbidden',
+            };
+        }
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=gate.js.map

package/dist/src/dashboard/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../src/dashboard/gate.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAgB,EAChB,aAAwC,EACxC,SAAmC;IAEnC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,KAAoD,CAAC;IACzD,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;aAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/dashboard/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Serving helpers for the `@adonis-agora/agent-dashboard` governance SPA — the config shape, the
+ * mount/gate decisions, and the pure path/asset helpers. Framework-light (no AdonisJS router/app
+ * dependency), so they're unit-testable in isolation and reusable by BOTH dashboard providers:
+ *
+ * - `@adonis-agora/agent/dashboard_provider` (this package, `providers/dashboard_provider.ts`) —
+ *   embedded: registered automatically by `node ace configure @adonis-agora/agent`, serves the SPA
+ *   bundle copied into THIS package's own `dist/assets/spa` at build time.
+ * - `@adonis-agora/agent-dashboard`'s own provider (`agent_dashboard_provider.ts`) — standalone: an
+ *   independently installable/registrable package some apps already depend on directly.
+ *
+ * Living here (rather than in `@adonis-agora/agent-dashboard`) keeps the dependency direction
+ * one-way: the dashboard package already depends on this one for `AgentConfig`/`ActorResolver`/etc.,
+ * so a package.json edge back from here to there would be circular. See
+ * `providers/dashboard_provider.ts`'s module doc for the full story.
+ */
+export { type AgentDashboardAuthorize, type AgentDashboardConfig, type DashboardMountDecision, type ResolvedAgentDashboardConfig, decideDashboardMount, resolveDashboardConfig, } from './define_config.js';
+export { type DashboardGateVerdict, evaluateDashboardGate } from './gate.js';
+export { apiBaseFor, contentTypeFor, injectApiBase, injectBaseHref, mountPathFor, safeAssetSegments, trimSlashes, } from './paths.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/dashboard/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,KAAK,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EACL,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/src/dashboard/index.js

@@ -0,0 +1,20 @@
+/**
+ * Serving helpers for the `@adonis-agora/agent-dashboard` governance SPA — the config shape, the
+ * mount/gate decisions, and the pure path/asset helpers. Framework-light (no AdonisJS router/app
+ * dependency), so they're unit-testable in isolation and reusable by BOTH dashboard providers:
+ *
+ * - `@adonis-agora/agent/dashboard_provider` (this package, `providers/dashboard_provider.ts`) —
+ *   embedded: registered automatically by `node ace configure @adonis-agora/agent`, serves the SPA
+ *   bundle copied into THIS package's own `dist/assets/spa` at build time.
+ * - `@adonis-agora/agent-dashboard`'s own provider (`agent_dashboard_provider.ts`) — standalone: an
+ *   independently installable/registrable package some apps already depend on directly.
+ *
+ * Living here (rather than in `@adonis-agora/agent-dashboard`) keeps the dependency direction
+ * one-way: the dashboard package already depends on this one for `AgentConfig`/`ActorResolver`/etc.,
+ * so a package.json edge back from here to there would be circular. See
+ * `providers/dashboard_provider.ts`'s module doc for the full story.
+ */
+export { decideDashboardMount, resolveDashboardConfig, } from './define_config.js';
+export { evaluateDashboardGate } from './gate.js';
+export { apiBaseFor, contentTypeFor, injectApiBase, injectBaseHref, mountPathFor, safeAssetSegments, trimSlashes, } from './paths.js';
+//# sourceMappingURL=index.js.map

package/dist/src/dashboard/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dashboard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAKL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAA6B,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EACL,UAAU,EACV,cAAc,EACd,aAAa,EACb,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC"}