@adonis-agora/durable 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/src/dashboard/console_switcher.d.ts

@@ -0,0 +1,132 @@
+import type { HttpContext } from '@adonisjs/core/http';
+/** The container binding the registry lives at. */
+export declare const AGORA_CONSOLES_BINDING = "agora.consoles";
+/** Bound as a VALUE under `'agora.consoles'`. Data only. */
+export interface AgoraConsoleRegistry {
+    readonly version: 1;
+    readonly entries: AgoraConsoleEntry[];
+    /**
+     * Optional, set by an account console (authkit): how a viewer signs out of the app. Every console
+     * reads it structurally to offer "Sign out" in its sidebar footer. A string is a POST action path.
+     */
+    account?: {
+        signOut?: string | {
+            action: string;
+        } | {
+            href: string;
+        };
+    };
+}
+/** The icon a console shows in the switcher. An unknown value renders as `generic`. */
+export type AgoraConsoleIcon = 'workflow' | 'telescope' | 'media' | 'payments' | 'agent' | 'identity' | 'generic';
+/** One hit of a console's global search. */
+export interface AgoraConsoleSearchHit {
+    title: string;
+    subtitle?: string;
+    /** Same-origin absolute path (`/durable#/run/42`). */
+    href: string;
+}
+/** One console the switcher can list. */
+export interface AgoraConsoleEntry {
+    /** `/^[a-z][a-z0-9-]*$/`: `'durable'`, `'telescope'`, … */
+    id: string;
+    /** Product title: `'Workflows'`, `'Telescope'`, `'Identity'`. */
+    title: string;
+    /** The package behind it, shown under the title (`'@adonis-agora/durable'`). */
+    package?: string;
+    icon: AgoraConsoleIcon;
+    /** Same-origin absolute path of the console shell (`/durable`). */
+    path: string;
+    /** Sort key: durable 10, telescope 20, agent 30, payments 40, media 50, authkit 90. */
+    order: number;
+    /** The console's RESOLVED gate (the function its own routes call). Never throws. */
+    authorize(ctx: HttpContext): Promise<{
+        allowed: boolean;
+        reason?: string;
+        redirectTo?: string;
+    }>;
+    /** Global search over this console's data, for a viewer this console already allowed. */
+    search?(ctx: HttpContext, q: string, limit: number): Promise<AgoraConsoleSearchHit[]>;
+}
+/** One console as the switcher endpoint returns it. */
+export interface VisibleConsole {
+    id: string;
+    title: string;
+    package?: string;
+    icon: AgoraConsoleIcon;
+    href: string;
+}
+/** The answer of `GET <console api>/consoles`. */
+export interface VisibleConsoles {
+    version: 1;
+    current: string;
+    consoles: VisibleConsole[];
+}
+/** The answer of `GET <console api>/consoles/search?q=`. */
+export interface ConsoleSearchResults {
+    version: 1;
+    q: string;
+    results: Array<{
+        id: string;
+        title: string;
+        icon: AgoraConsoleIcon;
+        hits: AgoraConsoleSearchHit[];
+    }>;
+}
+/** How long another console's `authorize` (or `search`) may take before it is left out. */
+export declare const PROBE_TIMEOUT_MS = 300;
+/** Hits per console in a global search. */
+export declare const SEARCH_HITS_PER_CONSOLE = 5;
+/** Whether `path` is a same-origin absolute path (`/x`, never `//host` or a URL). */
+export declare function isSameOriginPath(path: unknown): path is string;
+interface ContainerLike {
+    hasBinding(binding: string): boolean;
+    bindValue(binding: string, value: unknown): void;
+    make(binding: string): Promise<unknown>;
+}
+interface LoggerLike {
+    warn(message: string): void;
+}
+/**
+ * Add a console to the app's switcher registry, creating the registry when this is the first
+ * console to boot. Consoles call it from their provider's `boot()`; an app can call it too, for a
+ * console it mounts itself. A registry of another version is left alone; a duplicate id is skipped
+ * with a warning. Returns whether the entry was added.
+ */
+export declare function registerAgoraConsole(container: ContainerLike, entry: AgoraConsoleEntry, logger?: LoggerLike): Promise<boolean>;
+/** The registry, when one is bound with a version this copy reads. */
+export declare function readAgoraConsoles(container: Pick<ContainerLike, 'hasBinding' | 'make'>): Promise<AgoraConsoleRegistry | undefined>;
+/** How many consoles other than `selfId` are registered (no `authorize` runs). */
+export declare function otherConsoles(registry: AgoraConsoleRegistry | undefined, selfId: string): number;
+/**
+ * The consoles other than `selfId` the viewer may open: every other entry's `authorize` runs in
+ * parallel, each given {@link PROBE_TIMEOUT_MS}; a timeout, a rejection or any denial hides it. No
+ * reason is ever returned.
+ */
+export declare function listVisibleConsoles(registry: AgoraConsoleRegistry | undefined, selfId: string, ctx: HttpContext, timeoutMs?: number): Promise<VisibleConsoles>;
+/**
+ * Global search: `q` goes to every console the viewer may open that has a `search` (this one
+ * included, the viewer is already in it), in parallel, {@link PROBE_TIMEOUT_MS} each, at most
+ * {@link SEARCH_HITS_PER_CONSOLE} same-origin hits per console. Consoles with no hit are left out.
+ */
+export declare function searchConsoles(registry: AgoraConsoleRegistry | undefined, selfId: string, ctx: HttpContext, q: string, timeoutMs?: number): Promise<ConsoleSearchResults>;
+/** What {@link durableConsoleSearch} reads: a run by id, and workflow names with their counts. */
+export interface DurableSearchSource {
+    getRun(id: string): Promise<{
+        id: string;
+        workflow: string;
+        status: string;
+    } | null>;
+    /** Workflow names containing `q`, with their run counts. */
+    workflows(q: string, limit: number): Promise<Array<{
+        value: string | null;
+        count: number;
+    }>>;
+}
+/**
+ * The durable console's global search: an exact run id opens that run, and workflow names that
+ * contain `q` open the workflow's page. `base` is the console's mount path (`''` at the root).
+ */
+export declare function durableConsoleSearch(source: (ctx: HttpContext) => Promise<DurableSearchSource>, base: string): (ctx: HttpContext, q: string, limit: number) => Promise<AgoraConsoleSearchHit[]>;
+export {};
+//# sourceMappingURL=console_switcher.d.ts.map

package/dist/src/dashboard/console_switcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console_switcher.d.ts","sourceRoot":"","sources":["../../../src/dashboard/console_switcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,mDAAmD;AACnD,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACtC;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,GAAG;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CACxE;AAED,uFAAuF;AACvF,MAAM,MAAM,gBAAgB,GACxB,UAAU,GACV,WAAW,GACX,OAAO,GACP,UAAU,GACV,OAAO,GACP,UAAU,GACV,SAAS,CAAC;AAEd,4CAA4C;AAC5C,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjG,yFAAyF;IACzF,MAAM,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CACvF;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,kDAAkD;AAClD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,CAAC,CAAC;IACX,CAAC,EAAE,MAAM,CAAC;IACV,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,gBAAgB,CAAC;QACvB,IAAI,EAAE,qBAAqB,EAAE,CAAC;KAC/B,CAAC,CAAC;CACJ;AAYD,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,2CAA2C;AAC3C,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM,CAE9D;AAED,UAAU,aAAa;IACrB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC;AAED,UAAU,UAAU;IAClB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,aAAa,EACxB,KAAK,EAAE,iBAAiB,EACxB,MAAM,CAAC,EAAE,UAAU,GAClB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,sEAAsE;AACtE,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,GAAG,MAAM,CAAC,GACpD,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAO3C;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhG;AA2DD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,SAAS,SAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAkB1B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,EAC1C,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,MAAM,EACT,SAAS,SAAmB,GAC3B,OAAO,CAAC,oBAAoB,CAAC,CA+C/B;AAED,kGAAkG;AAClG,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrF,4DAA4D;IAC5D,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CAC9F;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,mBAAmB,CAAC,EAC1D,IAAI,EAAE,MAAM,GACX,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAyBlF"}

package/dist/src/dashboard/console_switcher.js

@@ -0,0 +1,201 @@
+/*
+ * The console switcher registry, version 1, declared here STRUCTURALLY: every `@adonis-agora`
+ * console declares the same shapes and binds the same plain value at `'agora.consoles'` when it is
+ * the first to boot. No lib imports another; whichever copy creates the registry, the others append
+ * to it.
+ */
+/** The container binding the registry lives at. */
+export const AGORA_CONSOLES_BINDING = 'agora.consoles';
+const ID = /^[a-z][a-z0-9-]*$/;
+const ICONS = new Set([
+    'workflow',
+    'telescope',
+    'media',
+    'payments',
+    'agent',
+    'identity',
+    'generic',
+]);
+/** How long another console's `authorize` (or `search`) may take before it is left out. */
+export const PROBE_TIMEOUT_MS = 300;
+/** Hits per console in a global search. */
+export const SEARCH_HITS_PER_CONSOLE = 5;
+/** Whether `path` is a same-origin absolute path (`/x`, never `//host` or a URL). */
+export function isSameOriginPath(path) {
+    return typeof path === 'string' && path.startsWith('/') && !path.startsWith('//');
+}
+/**
+ * Add a console to the app's switcher registry, creating the registry when this is the first
+ * console to boot. Consoles call it from their provider's `boot()`; an app can call it too, for a
+ * console it mounts itself. A registry of another version is left alone; a duplicate id is skipped
+ * with a warning. Returns whether the entry was added.
+ */
+export async function registerAgoraConsole(container, entry, logger) {
+    if (!ID.test(entry.id)) {
+        throw new Error(`[@adonis-agora/durable] console id ${JSON.stringify(entry.id)} is invalid`);
+    }
+    if (!isSameOriginPath(entry.path)) {
+        throw new Error(`[@adonis-agora/durable] console path ${JSON.stringify(entry.path)} must start with a single "/"`);
+    }
+    if (!container.hasBinding(AGORA_CONSOLES_BINDING)) {
+        const fresh = { version: 1, entries: [] };
+        container.bindValue(AGORA_CONSOLES_BINDING, fresh);
+    }
+    const registry = (await container.make(AGORA_CONSOLES_BINDING));
+    if (registry?.version !== 1 || !Array.isArray(registry.entries))
+        return false;
+    if (registry.entries.some((existing) => existing.id === entry.id)) {
+        logger?.warn(`[@adonis-agora/durable] console id "${entry.id}" already registered`);
+        return false;
+    }
+    registry.entries.push(entry);
+    return true;
+}
+/** The registry, when one is bound with a version this copy reads. */
+export async function readAgoraConsoles(container) {
+    if (!container.hasBinding(AGORA_CONSOLES_BINDING))
+        return undefined;
+    const registry = (await container.make(AGORA_CONSOLES_BINDING));
+    if (registry?.version !== 1 || !Array.isArray(registry.entries))
+        return undefined;
+    return registry;
+}
+/** How many consoles other than `selfId` are registered (no `authorize` runs). */
+export function otherConsoles(registry, selfId) {
+    return registry ? registry.entries.filter((entry) => entry.id !== selfId).length : 0;
+}
+/** `work`, or `fallback` when it rejects or takes longer than `ms`. */
+async function within(work, ms, fallback) {
+    let timer;
+    const timeout = new Promise((resolve) => {
+        timer = setTimeout(() => resolve(fallback), ms);
+    });
+    try {
+        return await Promise.race([
+            Promise.resolve()
+                .then(work)
+                .catch(() => fallback),
+            timeout,
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+/**
+ * Run `fn` with the probe marker on `ctx`: an `authorize` that writes an audit trail can read
+ * `ctx.agoraProbe === true` and skip it, since the switcher only asks, it does not open anything.
+ */
+async function probing(ctx, fn) {
+    const marked = ctx;
+    const previous = marked.agoraProbe;
+    marked.agoraProbe = true;
+    try {
+        return await fn();
+    }
+    finally {
+        if (previous === undefined)
+            delete marked.agoraProbe;
+        else
+            marked.agoraProbe = previous;
+    }
+}
+function sorted(entries) {
+    return [...entries].sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
+}
+async function allowedEntries(entries, ctx, timeoutMs) {
+    const verdicts = await probing(ctx, () => Promise.all(entries.map((entry) => within(async () => (await entry.authorize(ctx)).allowed === true, timeoutMs, false))));
+    return entries.filter((_, index) => verdicts[index]);
+}
+function iconOf(icon) {
+    return ICONS.has(icon) ? icon : 'generic';
+}
+/**
+ * The consoles other than `selfId` the viewer may open: every other entry's `authorize` runs in
+ * parallel, each given {@link PROBE_TIMEOUT_MS}; a timeout, a rejection or any denial hides it. No
+ * reason is ever returned.
+ */
+export async function listVisibleConsoles(registry, selfId, ctx, timeoutMs = PROBE_TIMEOUT_MS) {
+    const others = registry
+        ? sorted(registry.entries.filter((entry) => entry.id !== selfId && isSameOriginPath(entry.path)))
+        : [];
+    const allowed = await allowedEntries(others, ctx, timeoutMs);
+    return {
+        version: 1,
+        current: selfId,
+        consoles: allowed.map((entry) => ({
+            id: entry.id,
+            title: entry.title,
+            ...(entry.package !== undefined ? { package: entry.package } : {}),
+            icon: iconOf(entry.icon),
+            href: entry.path,
+        })),
+    };
+}
+/**
+ * Global search: `q` goes to every console the viewer may open that has a `search` (this one
+ * included, the viewer is already in it), in parallel, {@link PROBE_TIMEOUT_MS} each, at most
+ * {@link SEARCH_HITS_PER_CONSOLE} same-origin hits per console. Consoles with no hit are left out.
+ */
+export async function searchConsoles(registry, selfId, ctx, q, timeoutMs = PROBE_TIMEOUT_MS) {
+    const query = q.trim().slice(0, 200);
+    if (!registry || query === '')
+        return { version: 1, q: query, results: [] };
+    const searchable = sorted(registry.entries.filter((entry) => typeof entry.search === 'function' && isSameOriginPath(entry.path)));
+    const self = searchable.filter((entry) => entry.id === selfId);
+    const others = await allowedEntries(searchable.filter((entry) => entry.id !== selfId), ctx, timeoutMs);
+    const targets = sorted([...self, ...others]);
+    const hits = await probing(ctx, () => Promise.all(targets.map((entry) => within(async () => (await entry.search?.(ctx, query, SEARCH_HITS_PER_CONSOLE)) ?? [], timeoutMs, []))));
+    const results = [];
+    targets.forEach((entry, index) => {
+        const safe = (hits[index] ?? [])
+            .filter((hit) => typeof hit === 'object' &&
+            hit !== null &&
+            typeof hit.title === 'string' &&
+            isSameOriginPath(hit.href))
+            .slice(0, SEARCH_HITS_PER_CONSOLE)
+            .map((hit) => ({
+            title: hit.title,
+            ...(typeof hit.subtitle === 'string' ? { subtitle: hit.subtitle } : {}),
+            href: hit.href,
+        }));
+        if (safe.length > 0) {
+            results.push({ id: entry.id, title: entry.title, icon: iconOf(entry.icon), hits: safe });
+        }
+    });
+    return { version: 1, q: query, results };
+}
+/**
+ * The durable console's global search: an exact run id opens that run, and workflow names that
+ * contain `q` open the workflow's page. `base` is the console's mount path (`''` at the root).
+ */
+export function durableConsoleSearch(source, base) {
+    const shell = base === '' ? '/' : base;
+    return async (ctx, q, limit) => {
+        const reader = await source(ctx);
+        const hits = [];
+        const run = await reader.getRun(q).catch(() => null);
+        if (run) {
+            hits.push({
+                title: run.id,
+                subtitle: `run · ${run.workflow} · ${run.status}`,
+                href: `${shell}#/run/${encodeURIComponent(run.id)}`,
+            });
+        }
+        const rows = await reader.workflows(q, limit).catch(() => []);
+        for (const row of rows) {
+            if (hits.length >= limit)
+                break;
+            if (row.value === null)
+                continue;
+            hits.push({
+                title: row.value,
+                subtitle: `workflow · ${row.count} ${row.count === 1 ? 'run' : 'runs'}`,
+                href: `${shell}#/workflow/${encodeURIComponent(row.value)}`,
+            });
+        }
+        return hits.slice(0, limit);
+    };
+}
+//# sourceMappingURL=console_switcher.js.map

package/dist/src/dashboard/console_switcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console_switcher.js","sourceRoot":"","sources":["../../../src/dashboard/console_switcher.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AA8EvD,MAAM,EAAE,GAAG,mBAAmB,CAAC;AAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAmB;IACtC,UAAU;IACV,WAAW;IACX,OAAO;IACP,UAAU;IACV,OAAO;IACP,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AACH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AACpC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACpF,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAwB,EACxB,KAAwB,EACxB,MAAmB;IAEnB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAClG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAyB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChE,SAAS,CAAC,SAAS,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAEjD,CAAC;IACd,IAAI,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,IAAI,CAAC,uCAAuC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAqD;IAErD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,sBAAsB,CAAC;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAEjD,CAAC;IACd,IAAI,QAAQ,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,QAAgC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,QAA0C,EAAE,MAAc;IACtF,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,MAAM,CAAI,IAAsB,EAAE,EAAU,EAAE,QAAW;IACtE,IAAI,KAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,EAAE;QACzC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;YACxB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAI,GAAgB,EAAE,EAAoB;IAC9D,MAAM,MAAM,GAAG,GAA6C,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC;;YAChD,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAqC;IACnD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAA4B,EAC5B,GAAgB,EAChB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CACvC,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CACpF,CACF,CACF,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,OAAO,KAAK,CAAC,GAAG,CAAC,IAAwB,CAAC,CAAC,CAAC,CAAE,IAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAA0C,EAC1C,MAAc,EACd,GAAgB,EAChB,SAAS,GAAG,gBAAgB;IAE5B,MAAM,MAAM,GAAG,QAAQ;QACrB,CAAC,CAAC,MAAM,CACJ,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CACxF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAC7D,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA0C,EAC1C,MAAc,EACd,GAAgB,EAChB,CAAS,EACT,SAAS,GAAG,gBAAgB;IAE5B,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CACvB,QAAQ,CAAC,OAAO,CAAC,MAAM,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAC9E,CACF,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EACjD,GAAG,EACH,SAAS,CACV,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CACnC,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CACJ,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,uBAAuB,CAAC,CAAC,IAAI,EAAE,EAC7E,SAAS,EACT,EAA6B,CAC9B,CACF,CACF,CACF,CAAC;IACF,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC7B,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;YAC7B,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAC7B;aACA,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;aACjC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,IAAI,EAAE,GAAG,CAAC,IAAI;SACf,CAAC,CAAC,CAAC;QACN,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0D,EAC1D,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,OAAO,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,QAAQ,EAAE,SAAS,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,MAAM,EAAE;gBACjD,IAAI,EAAE,GAAG,KAAK,SAAS,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;gBAAE,MAAM;YAChC,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAAE,SAAS;YACjC,IAAI,CAAC,IAAI,CAAC;gBACR,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,QAAQ,EAAE,cAAc,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE;gBACvE,IAAI,EAAE,GAAG,KAAK,cAAc,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/dashboard/define_config.d.ts

@@ -1,6 +1,7 @@
 import type { HttpContext } from '@adonisjs/core/http';
 import type { AccessDeniedOption as GenericAccessDeniedOption, AccessDeniedRenderer as GenericAccessDeniedRenderer } from './access_denied_page.js';
-import { type DashboardAuthOptions, type ResolvedDashboardAuth } from './auth.js';
+import { type ConsoleAuthorize, type ConsoleAuthorizeGate, type ConsoleAuthorizeResult, type ConsoleDecision } from './console_authorize.js';
+import type { ConsoleViewer, SignOutOption, ViewerHook } from './console_shell.js';
 /**
  * The function form of {@link DurableDashboardConfig.accessDenied}: render (or answer) a refused
  * page navigation yourself. Receives the refusal ({@link AccessDeniedInfo}) and the AdonisJS
@@ -15,41 +16,28 @@ export type AccessDeniedOption = GenericAccessDeniedOption<HttpContext>;
  * A structured answer from an {@link AuthorizeHook}: whether the request may proceed and, when it may
  * not, why. The `reason` picks the status: `'unauthenticated'` (nobody is signed in) → `401`,
  * `'forbidden'` (signed in, not allowed) → `403`. No reason → `403` (fail closed).
- *
- * This is the shared Agora dashboard-gate contract — the same shape every `@adonis-agora` console
- * accepts, so one hook (e.g. `@adonis-agora/authz`'s `authorizeByRoles`) can gate them all.
  */
 export interface AuthorizeDecision {
     allowed: boolean;
     reason?: 'unauthenticated' | 'forbidden';
 }
-/** What an {@link AuthorizeHook} may return: a bare boolean or an {@link AuthorizeDecision}. */
-export type AuthorizeResult = boolean | AuthorizeDecision;
 /**
- * Authorization guard for the dashboard. Runs before every dashboard route (API + HTML). May be
- * async (e.g. an auth lookup). Return:
- *
- * - `true` or `{ allowed: true }` → the request proceeds;
- * - `{ allowed: false, reason: 'unauthenticated' }` → `401` (the access-denied page with the
- *   "sign in" story for a page navigation, `{ error: 'unauthorized' }` for an API request);
- * - `{ allowed: false, reason: 'forbidden' }`, `{ allowed: false }` or `false` → `403` (the
- *   access-denied page, or `{ error: 'forbidden' }`).
- *
- * A hook that THROWS is a denial (`403`), never a pass. A hook that answers the request itself — a
- * redirect to the host's login page, most commonly — keeps its answer: the provider writes nothing
- * over it.
- *
- * It receives the AdonisJS {@link HttpContext}, so it can read the session,
- * a bearer token, an IP allow-list, etc.
+ * What an {@link AuthorizeHook} may return: the shared {@link ConsoleAuthorizeResult} (a boolean,
+ * a decision, or `{ redirectTo }`) or an {@link AuthorizeDecision}.
+ */
+export type AuthorizeResult = ConsoleAuthorizeResult | AuthorizeDecision;
+/**
+ * The function form of `authorize`. It receives the AdonisJS {@link HttpContext}, so it can read the
+ * session, a bearer token, an IP allow-list, etc. May be async.
  */
 export type AuthorizeHook = (ctx: HttpContext) => AuthorizeResult | Promise<AuthorizeResult>;
 /**
  * Collapse an {@link AuthorizeResult} into a decision. Only `true` or an object with
- * `allowed === true` allows: anything else — `false`, `{ allowed: false }`, a truthy non-boolean, a
- * missing value — denies. (A decision OBJECT is truthy, so a `!result` check would wave
- * `{ allowed: false }` through; this is why the guard never tests the raw value.)
+ * `allowed === true` allows; `{ redirectTo }` is an unauthenticated denial carrying the redirect
+ * target; anything else — `false`, `{ allowed: false }`, a truthy non-boolean, a missing value —
+ * denies with `403`.
  */
-export declare function normalizeAuthorizeResult(result: unknown): AuthorizeDecision;
+export declare function normalizeAuthorizeResult(result: unknown): ConsoleDecision;
 /** Shape of `config/durable_dashboard.ts`. */
 export interface DurableDashboardConfig {
     /**
@@ -64,39 +52,17 @@ export interface DurableDashboardConfig {
      */
     path?: string;
     /**
-     * Per-request authorization guard — see {@link AuthorizeHook} for what it may return
-     * (`boolean` or an {@link AuthorizeDecision}; `reason: 'unauthenticated'` → `401`, otherwise a
-     * denial is `403`). Defaults to {@link defaultAuthorize}, which FAILS CLOSED in
-     * EVERY environment: it requires a bearer token matching `DURABLE_DASHBOARD_TOKEN` (denying
-     * everything when that env var is unset) — unless {@link dashboardAuth} is configured (the
-     * session guard is then the gate) or {@link allowUnauthenticated} explicitly opts out.
+     * Who may reach the console. Runs before every dashboard route (API + HTML). Takes the shared
+     * {@link ConsoleAuthorize} contract — an inline function, an authorizer class (resolved through the
+     * container, so `@inject()` works), or a lazy import of one (`() => import('#policies/console_access')`).
+     * It returns a boolean, `{ allowed, reason? }` (`reason: 'unauthenticated'` → `401`, any other
+     * denial `403`) or `{ redirectTo }` (`302` for a page, `401` for an API call). A throw is a `403`.
      *
-     * (Before 0.37 the default was open outside `NODE_ENV=production` — which left every dev/staging
-     * deployment, and any box where NODE_ENV was unset or spelled differently, with an unauthenticated
-     * console whose destructive endpoints a malicious web page could drive via cross-site POSTs.)
-     */
-    authorize?: AuthorizeHook;
-    /**
-     * Explicitly serve the dashboard WITHOUT any authentication. This is the loaded footgun the old
-     * "open outside production" default was — now it at least has to be spelled out in config, so a
-     * deploy can grep for it. Only for local development / networks you fully trust. Ignored when
-     * `authorize` or `dashboardAuth` is configured.
+     * Omitted, the console is open when the app is not in production and answers `403` to every
+     * request in production (a warning is logged once at boot). For machine access use
+     * `authorizeByToken({ token })`.
      */
-    allowUnauthenticated?: boolean;
-    /**
-     * Optional built-in login screen. When set, the provider mounts a
-     * server-rendered `GET <path>/login` page plus `POST <path>/login` /
-     * `GET <path>/logout`, and stamps a session guard on the dashboard: an
-     * unauthenticated page navigation is redirected (`302`) to the login page and
-     * an unauthenticated API request gets `401`. The signed session cookie is
-     * minted only by the host's {@link DashboardAuthOptions.login} hook.
-     *
-     * This is ADDITIVE and composes WITH {@link authorize} (both must pass) — it
-     * does not replace it. Omit it entirely to keep today's behavior byte-for-byte
-     * (no login/logout routes, no session guard). Missing `secret`/`login` fails
-     * closed at boot.
-     */
-    dashboardAuth?: DashboardAuthOptions;
+    authorize?: ConsoleAuthorize | AuthorizeHook;
     /**
      * Audit sink for MUTATING console actions (retry, cancel, bulk, fix-and-replay, signal, update,
      * task completion, schedule control): called once per attempt with who did what, before the
@@ -117,26 +83,39 @@ export interface DurableDashboardConfig {
     };
     /**
      * What a BROWSER sees when the guard refuses a page navigation (the SPA shell, its assets, or —
-     * Mode A only — a session-less visit). API requests are unaffected:
+     * nothing else). API requests are unaffected:
      * they keep getting the JSON the SPA relies on (`403 { error: 'forbidden' }` /
-     * `401 { error: 'unauthorized', auth }`).
+     * `401 { error: 'unauthenticated' }`).
      *
      * Omit it for the built-in page — a dark card in the console's own visual language, with the
-     * status, a sentence explaining the refusal, a "Back to app" link and, when `dashboardAuth.login`
-     * exists, a "Sign in" button. Pass an object to tweak that page (`brand`, `title`, `message`,
+     * status, a sentence explaining the refusal and a "Back to app" link. Pass an object to tweak that page (`brand`, `title`, `message`,
      * `homeHref`, `loginHref`, `accent`, …), or a function to render/answer it yourself — see
      * {@link AccessDeniedRenderer}. Either way, an `authorize` hook that already wrote a redirect
      * still wins: the provider never overwrites a `location` header.
      */
     accessDenied?: AccessDeniedOption;
+    /**
+     * Who the console's sidebar footer shows as signed in. Omit it to read `ctx.auth.user`
+     * structurally (`fullName`/`name`/`email`, first of `role`/`roles`) when the request is already
+     * authenticated; return `null` for no user row. A throw is treated as `null`.
+     */
+    viewer?: ViewerHook;
+    /**
+     * The footer's "Sign out": a POST action path (`'/logout'`, sent with the CSRF token), `{ href }`
+     * for a plain link, or `false` for none. Omit it to use the sign-out an account console (authkit)
+     * announces on the `agora.consoles` registry, when there is one. Same-origin paths only.
+     */
+    signOut?: SignOutOption;
 }
+export type { ConsoleViewer, SignOutOption, ViewerHook };
 /** A fully-resolved config — every field present (defaults applied). */
 export interface ResolvedDurableDashboardConfig {
     enabled: boolean;
     path: string;
-    authorize: AuthorizeHook;
-    /** Resolved built-in login config, or `null` when `dashboardAuth` is unconfigured. */
-    dashboardAuth: ResolvedDashboardAuth | null;
+    /** The resolved `authorize` gate (or the default): one call per request, never throws. */
+    authorize: ConsoleAuthorizeGate;
+    /** Whether the host set `authorize` (`false` means the dev-open / production-deny default). */
+    authorizeConfigured: boolean;
     /** The host's `accessDenied` option as given, or `null` for the built-in page with defaults. */
     accessDenied: AccessDeniedOption | null;
     /** The host's audit sink, or `null` for the default logger line. */
@@ -146,33 +125,41 @@ export interface ResolvedDurableDashboardConfig {
         run?: (run: Record<string, unknown>) => Record<string, unknown>;
         checkpoint?: (checkpoint: Record<string, unknown>) => Record<string, unknown>;
     } | null;
+    /** The host's `viewer` hook, or `null` for the structural `ctx.auth.user` read. */
+    viewer: ViewerHook | null;
+    /** The host's `signOut` option, or `null` for the registry's announced one. */
+    signOut: SignOutOption | null;
 }
 /** One audited mutating console action — who (actor), what (method + path), when. */
 export interface DashboardAuditEntry {
     at: Date;
-    /** The session user's name/id, `'token'` for a bearer-token caller, else `'anonymous'`. */
+    /**
+     * The signed-in user (`ctx.auth.user`'s `email`, `name` or `id`), `'bearer'` for a caller with an
+     * `Authorization` header and no user, else `'anonymous'`. An action run from a developer tool
+     * over MCP is `'mcp:<caller>'` (`mcp:token:3f9a1c2b7d10`, `mcp:user:42`); one run from an ace
+     * command is `'cli:<os user>'` (or `'cli'`).
+     */
     actor: string;
+    /** The HTTP method, `'MCP'` for a developer tool, or `'CLI'` for an ace command. */
     method: string;
-    /** The request path (no query string — a `?token=` must never reach an audit log). */
+    /**
+     * The request path (no query string), `'<tool> <run id or schedule key>'` for a developer tool, or
+     * `'<command> <target>'` for an ace command (`durable:runs:cancel ord-42`).
+     */
     path: string;
 }
-/**
- * Whether the process is running in production. Mirrors how AdonisJS reads the
- * environment without taking a hard dependency on its env service. No longer an
- * AUTH decision input (the guard fails closed everywhere) — used only for
- * cookie hardening defaults.
- */
-export declare function isProduction(): boolean;
-/**
- * The default guard: FAIL CLOSED in every environment — require a bearer token equal to
- * `DURABLE_DASHBOARD_TOKEN`, denying everything when that env var is unset. There is no
- * NODE_ENV branch anymore: "not production" is exactly the set of deployments (dev boxes,
- * staging, misspelled envs) that used to ship an open console. Opt out explicitly with
- * `allowUnauthenticated: true`, or configure `dashboardAuth`/your own `authorize`.
- */
-export declare function defaultAuthorize(ctx: HttpContext): boolean;
+/** The warning logged once at boot when `authorize` is omitted. */
+export declare const NO_AUTHORIZE_WARNING = "[@adonis-agora/durable] console has no `authorize` configured: it is open outside production and denies every request in production. Set `authorize` in config/durable_dashboard.ts.";
+/** Options for {@link resolveConfig}. */
+export interface ResolveConfigOptions {
+    /**
+     * Whether the app runs in production (`app.inProduction`). Only `false` opens a console without
+     * `authorize`; anything else denies it.
+     */
+    inProduction?: boolean;
+}
 /** Apply defaults to a partial config, producing a fully-resolved one. */
-export declare function resolveConfig(config?: DurableDashboardConfig): ResolvedDurableDashboardConfig;
+export declare function resolveConfig(config?: DurableDashboardConfig, options?: ResolveConfigOptions): ResolvedDurableDashboardConfig;
 /** Identity helper giving `config/durable_dashboard.ts` full type-checking. */
 export declare function defineConfig(config?: DurableDashboardConfig): DurableDashboardConfig;
 //# sourceMappingURL=define_config.d.ts.map

package/dist/src/dashboard/define_config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/dashboard/define_config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EACV,kBAAkB,IAAI,yBAAyB,EAC/C,oBAAoB,IAAI,2BAA2B,EACpD,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAE3B,MAAM,WAAW,CAAC;AAEnB;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;AAE5E,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAAC;CAC1C;AAED,gGAAgG;AAChG,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAE1D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE7F;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,iBAAiB,CAc3E;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC7C;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/E,CAAC;IACF;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,wEAAwE;AACxE,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,sFAAsF;IACtF,aAAa,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC5C,gGAAgG;IAChG,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,oEAAoE;IACpE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,mEAAmE;IACnE,MAAM,EAAE;QACN,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/E,GAAG,IAAI,CAAC;CACV;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAuCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAO1D;AAOD,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,MAAM,GAAE,sBAA2B,GAAG,8BAA8B,CAuCjG;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,MAAM,GAAE,sBAA2B,GAAG,sBAAsB,CAExF"}
+{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/dashboard/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EACV,kBAAkB,IAAI,yBAAyB,EAC/C,oBAAoB,IAAI,2BAA2B,EACpD,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EAGrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;AAE5E,8FAA8F;AAC9F,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAAC;CAC1C;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,sBAAsB,GAAG,iBAAiB,CAAC;AAEzE;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE7F;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,GAAG,eAAe,CAEzE;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,gBAAgB,GAAG,aAAa,CAAC;IAC7C;;;;;OAKG;IACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC7C;;;;;;OAMG;IACH,MAAM,CAAC,EAAE;QACP,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/E,CAAC;IACF;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC;AAEzD,wEAAwE;AACxE,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,SAAS,EAAE,oBAAoB,CAAC;IAChC,+FAA+F;IAC/F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gGAAgG;IAChG,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACxC,oEAAoE;IACpE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,mEAAmE;IACnE,MAAM,EAAE;QACN,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/E,GAAG,IAAI,CAAC;IACT,mFAAmF;IACnF,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,+EAA+E;IAC/E,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;CAC/B;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,IAAI,CAAC;IACT;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,yLACuJ,CAAC;AAKzL,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAC3B,MAAM,GAAE,sBAA2B,EACnC,OAAO,GAAE,oBAAyB,GACjC,8BAA8B,CAmBhC;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,MAAM,GAAE,sBAA2B,GAAG,sBAAsB,CAExF"}