@adonis-agora/flags 0.0.0-beta-20261112141227

package/dist/src/analytics/results.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"results.js","sourceRoot":"","sources":["../../../src/analytics/results.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,SAAS,EAET,cAAc,EAEd,cAAc,EACd,OAAO,EACP,SAAS,GACV,MAAM,0BAA0B,CAAC;AAIlC,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AA+D7C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CACvF,CAAC,KAAK,EAAsD,EAAE,CAAC,OAAO,IAAI,KAAK,CAChF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK;QAChC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAyB,EACzB,IAAoB,EACpB,IAAgC,EAChC,QAA4B;IAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;IACrD,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACpE,6FAA6F;IAC7F,2EAA2E;IAC3E,MAAM,OAAO,GAAG,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,eAAe,CAAC,CAChF,CAAC;IAEF,IAAI,GAAG,GAA6B,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,GAAG,GAAG;gBACJ,GAAG,OAAO,CACR,QAAQ,EACR,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAClC;gBACD,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,CACjE,IAAI,CAAC,GAAG,EACR,UAAU,EACV,WAAW,CACZ,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QAC3D,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACxF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACxE,CAAC;QACF,MAAM,MAAM,GAAiB;YAC3B,IAAI;YACJ,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,SAAS;YACT,SAAS;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,CAAC,CAAC;YACF,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,KAAK;SACb,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,IAAI,OAAO,KAAK,OAAO;gBAAE,SAAS;YAClC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,qCAAqC,OAAO,WAAW,OAAO,OAAO,CAAC,CAAC;gBAC5F,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,EAAE,OAAO;iBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;gBAC7B,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;YACtE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3E,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;YAC5F,IAAI,UAAkE,CAAC;YACvE,IAAI,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;gBACnE,UAAU,GAAG;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU;oBACtC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;iBACvC,CAAC;YACJ,CAAC;iBAAM,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC5C,MAAM,CAAC,GAAG,cAAc,CACtB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,EACrC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,EAC/C,UAAU,CACX,CAAC;gBACF,UAAU,GAAG;oBACX,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU;iBACvC,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,SAAS,CAAC,YAAY,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;gBAC9D,UAAU,GAAG;oBACX,IAAI,EAAE,OAAO;oBACb,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,WAAW,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU;iBACvC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,cAAc,CAAC,YAAY,EAAE,cAAc,EAAE;gBACvD,KAAK,EAAE,CAAC,GAAG,UAAU;gBACrB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,QAAQ,GACZ,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC;YACnF,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;YAC1F,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC;gBACtB,OAAO;gBACP,GAAG,UAAU;gBACb,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE;gBACxF,OAAO;aACR,CAAC,CAAC;YACH,uFAAuF;YACvF,IAAI,SAAS,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,QAAQ;gBAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;QACrE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW;QACX,OAAO;QACP,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,SAAS;QACT,OAAO;QACP,GAAG;QACH,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/src/dashboard/access_denied_page.d.ts

@@ -0,0 +1,100 @@
+/**
+ * The built-in "access denied" page a BROWSER sees when the dashboard guard refuses a page
+ * navigation — the SPA shell or its assets. Before this page
+ * existed the guard answered every denial with the JSON it answers the API with
+ * (`{ "error": "forbidden" }`), which is the right thing for the SPA's `fetch` calls and the wrong
+ * thing for a human staring at a browser tab.
+ *
+ * Deliberately a small, dependency-free, hand-authored HTML page — NOT part
+ * of the bundled SPA, so a denial never needs the SPA to load first. It carries NO `<script>` at all,
+ * so a host running a nonce'd `script-src` CSP (the `@adonisjs/shield` default) cannot break it; the
+ * one inline `<style>` takes the request's CSP nonce when the provider hands one over.
+ *
+ * Every string the host can supply ({@link AccessDeniedPageOptions}) is HTML-escaped on the way in.
+ * They are developer-controlled config values, not user input — but escaping them costs nothing and
+ * removes the one class of bug a "just interpolate it" template would invite.
+ *
+ * The visual language (Aviary neutrals, the console's own accent, mono eyebrow over a sans body)
+ * mirrors the flags SPA so the refusal reads as part of the same product, not a server default.
+ *
+ * Ported from `@adonis-agora/payments` (as durable, media, agent and telescope were) with only
+ * {@link CONSOLE} changed, so the Agora consoles share ONE
+ * refusal story rather than each inventing its own.
+ */
+/** Why the guard refused. Drives the default title/message and which buttons make sense. */
+export type AccessDeniedReason = 
+/** Nobody is signed in (a `401`): offer the login page when one exists. */
+'unauthenticated'
+/** Somebody is signed in but `authorize` said no (a `403`). */
+ | 'forbidden';
+/** What the provider knows about the refusal — handed to a custom renderer and to the default page. */
+export interface AccessDeniedInfo {
+    /** The HTTP status the page is served with. */
+    status: 401 | 403;
+    reason: AccessDeniedReason;
+    /** The console's mount path (`/flags`; `''` when mounted at the root). */
+    basePath: string;
+    /** The app's login page, when the console knows one (`accessDenied.loginHref`). */
+    loginHref?: string;
+    /** A developer-facing detail (e.g. a thrown hook's message). Providers set it OUTSIDE production only. */
+    detail?: string;
+    /** The request's CSP nonce, applied to the inline `<style>` so a nonce'd `style-src` keeps the page styled. */
+    nonce?: string;
+}
+/**
+ * Knobs for the built-in page — the `accessDenied` config option in its OBJECT form. Every field is
+ * optional; omit the option entirely for the defaults.
+ */
+export interface AccessDeniedPageOptions {
+    /** Console name in the eyebrow and `<title>`. Default: the console's own name (`Flags`). */
+    brand?: string;
+    /** Heading. Default depends on {@link AccessDeniedInfo.reason}. */
+    title?: string;
+    /** The sentence under the heading. Default depends on the reason. */
+    message?: string;
+    /** Where "Back to app" points. Default `/`; `false` hides the button. */
+    homeHref?: string | false;
+    /** Label of the "Back to app" button. */
+    homeLabel?: string;
+    /** Where "Sign in" points (your app's login page). Default: none; `false` hides it. */
+    loginHref?: string | false;
+    /** Label of the "Sign in" button. */
+    loginLabel?: string;
+    /** Accent colour (any CSS colour). Default: the console's own accent. */
+    accent?: string;
+}
+/**
+ * The `accessDenied` config option in its FUNCTION form: render the page yourself. Return an HTML
+ * string and the provider serves it (with the refusal's status, `text/html`, `no-store`). Return
+ * nothing after answering the request yourself — a redirect to your own login page, most commonly —
+ * and the provider stands down. Return nothing WITHOUT answering and the default page is served, so
+ * the hook is safe to use for side effects (logging) alone.
+ *
+ * `Ctx` is the host framework's HTTP context — the provider passes AdonisJS's `HttpContext` through
+ * untouched; it is generic here so this module stays framework-light and unit-testable.
+ */
+export type AccessDeniedRenderer<Ctx = unknown> = (info: AccessDeniedInfo, ctx: Ctx) => string | undefined | null | void | Promise<string | undefined | null | void>;
+/** The `accessDenied` config option: tweak the built-in page, or replace it. */
+export type AccessDeniedOption<Ctx = unknown> = AccessDeniedPageOptions | AccessDeniedRenderer<Ctx>;
+/** This console's identity — the ONLY thing that differs between the Agora ports of this file. */
+export declare const CONSOLE: {
+    readonly brand: 'Flags';
+    readonly accent: '#818cf8';
+    readonly packageName: '@adonis-agora/flags';
+};
+/** Escape the five characters that matter inside HTML text and double-quoted attributes. */
+export declare function escapeHtml(value: string): string;
+/**
+ * Render the built-in page. Pure: same `info` + `options` in, same HTML out — so it is trivially
+ * snapshot/regex testable and safe to call from anywhere (the provider, a test, a host that wants
+ * to embed the default page inside its own layout).
+ */
+export declare function renderAccessDeniedPage(info: AccessDeniedInfo, options?: AccessDeniedPageOptions): string;
+/**
+ * Resolve WHAT to serve for a refusal, honouring the host's `accessDenied` option in either form.
+ * Returns the HTML to send, or `null` when a custom renderer already answered the request itself
+ * (`answered()` reports whether it did — the provider wires that to "a `location` header or a body
+ * is already set"). Framework-light: knows nothing about the HTTP context beyond passing it through.
+ */
+export declare function resolveAccessDeniedPage<Ctx>(info: AccessDeniedInfo, option: AccessDeniedOption<Ctx> | null | undefined, ctx: Ctx, answered: () => boolean): Promise<string | null>;
+//# sourceMappingURL=access_denied_page.d.ts.map

package/dist/src/dashboard/access_denied_page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access_denied_page.d.ts","sourceRoot":"","sources":["../../../src/dashboard/access_denied_page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,4FAA4F;AAC5F,MAAM,MAAM,kBAAkB;AAC5B,2EAA2E;AACzE,iBAAiB;AACnB,+DAA+D;GAC7D,WAAW,CAAC;AAEhB,uGAAuG;AACvG,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+GAA+G;IAC/G,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC1B,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC3B,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,oBAAoB,CAAC,GAAG,GAAG,OAAO,IAAI,CAChD,IAAI,EAAE,gBAAgB,EACtB,GAAG,EAAE,GAAG,KAEL,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAElF,gFAAgF;AAChF,MAAM,MAAM,kBAAkB,CAAC,GAAG,GAAG,OAAO,IAAI,uBAAuB,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAEpG,kGAAkG;AAClG,eAAO,MAAM,OAAO;aAClB,KAAK,EAAE,OAAO;aACd,MAAM,EAAE,SAAS;aACjB,WAAW,EAAE,qBAAqB;CAC1B,CAAC;AAcX,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAyBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,gBAAgB,EACtB,OAAO,GAAE,uBAA4B,GACpC,MAAM,CAqLR;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAC/C,IAAI,EAAE,gBAAgB,EACtB,MAAM,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,SAAS,EAClD,GAAG,EAAE,GAAG,EACR,QAAQ,EAAE,MAAM,OAAO,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQxB"}

package/dist/src/dashboard/access_denied_page.js

@@ -0,0 +1,262 @@
+/**
+ * The built-in "access denied" page a BROWSER sees when the dashboard guard refuses a page
+ * navigation — the SPA shell or its assets. Before this page
+ * existed the guard answered every denial with the JSON it answers the API with
+ * (`{ "error": "forbidden" }`), which is the right thing for the SPA's `fetch` calls and the wrong
+ * thing for a human staring at a browser tab.
+ *
+ * Deliberately a small, dependency-free, hand-authored HTML page — NOT part
+ * of the bundled SPA, so a denial never needs the SPA to load first. It carries NO `<script>` at all,
+ * so a host running a nonce'd `script-src` CSP (the `@adonisjs/shield` default) cannot break it; the
+ * one inline `<style>` takes the request's CSP nonce when the provider hands one over.
+ *
+ * Every string the host can supply ({@link AccessDeniedPageOptions}) is HTML-escaped on the way in.
+ * They are developer-controlled config values, not user input — but escaping them costs nothing and
+ * removes the one class of bug a "just interpolate it" template would invite.
+ *
+ * The visual language (Aviary neutrals, the console's own accent, mono eyebrow over a sans body)
+ * mirrors the flags SPA so the refusal reads as part of the same product, not a server default.
+ *
+ * Ported from `@adonis-agora/payments` (as durable, media, agent and telescope were) with only
+ * {@link CONSOLE} changed, so the Agora consoles share ONE
+ * refusal story rather than each inventing its own.
+ */
+/** This console's identity — the ONLY thing that differs between the Agora ports of this file. */
+export const CONSOLE = {
+    brand: 'Flags',
+    accent: '#818cf8',
+    packageName: '@adonis-agora/flags',
+};
+const DEFAULT_COPY = {
+    unauthenticated: {
+        title: 'Sign in required',
+        message: 'You need to be signed in to open this console.',
+    },
+    forbidden: {
+        title: 'Access denied',
+        message: 'Your account is not allowed to open this console. If that looks wrong, ask an administrator to grant you access.',
+    },
+};
+/** Escape the five characters that matter inside HTML text and double-quoted attributes. */
+export function escapeHtml(value) {
+    return value
+        .replaceAll('&', '&amp;')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#39;');
+}
+/**
+ * Accept only a same-origin, root-relative path for a button `href` — the same open-redirect rule
+ * `sanitizeReturnTo` applies to `returnTo`. A host-supplied absolute URL is still a developer's
+ * choice, so it is allowed; what is refused is anything that could smuggle a `javascript:` scheme.
+ */
+function safeHref(candidate) {
+    const trimmed = candidate.trim();
+    if (trimmed === '')
+        return null;
+    if (/^(https?:)?\/\//i.test(trimmed))
+        return trimmed;
+    if (trimmed.startsWith('/'))
+        return trimmed;
+    return null;
+}
+/** Only a plausible CSS colour token reaches the stylesheet; anything else falls back to the accent. */
+function safeColor(candidate) {
+    return /^[#a-zA-Z0-9(),.%\s-]+$/.test(candidate) ? candidate : CONSOLE.accent;
+}
+const LOCK_ICON = '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>';
+const KEY_ICON = '<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="7.5" cy="15.5" r="4.5"/><path d="m21 2-9.6 9.6"/><path d="m15.5 7.5 3 3L22 7l-3-3"/></svg>';
+/**
+ * Render the built-in page. Pure: same `info` + `options` in, same HTML out — so it is trivially
+ * snapshot/regex testable and safe to call from anywhere (the provider, a test, a host that wants
+ * to embed the default page inside its own layout).
+ */
+export function renderAccessDeniedPage(info, options = {}) {
+    const copy = DEFAULT_COPY[info.reason];
+    const brand = escapeHtml(options.brand ?? CONSOLE.brand);
+    const title = escapeHtml(options.title ?? copy.title);
+    const message = escapeHtml(options.message ?? copy.message);
+    const accent = safeColor(options.accent ?? CONSOLE.accent);
+    const nonceAttr = info.nonce !== undefined ? ` nonce="${escapeHtml(info.nonce)}"` : '';
+    const loginHref = options.loginHref === false
+        ? null
+        : (safeHref(options.loginHref ?? info.loginHref ?? '') ?? null);
+    const homeHref = options.homeHref === false ? null : safeHref(options.homeHref ?? '/');
+    const buttons = [];
+    if (loginHref !== null && info.reason !== 'forbidden') {
+        buttons.push(`<a class="btn primary" href="${escapeHtml(loginHref)}">${KEY_ICON}${escapeHtml(options.loginLabel ?? 'Sign in')}</a>`);
+    }
+    if (homeHref !== null) {
+        buttons.push(`<a class="btn${buttons.length === 0 ? ' primary' : ''}" href="${escapeHtml(homeHref)}">${escapeHtml(options.homeLabel ?? 'Back to app')}</a>`);
+    }
+    if (loginHref !== null && info.reason === 'forbidden') {
+        // A forbidden user might simply be the wrong user: offer a way to switch accounts, second.
+        buttons.push(`<a class="btn" href="${escapeHtml(loginHref)}">${escapeHtml(options.loginLabel ?? 'Sign in as someone else')}</a>`);
+    }
+    const detail = info.detail !== undefined && info.detail !== ''
+        ? `\n    <p class="detail">${escapeHtml(info.detail)}</p>`
+        : '';
+    const actions = buttons.length > 0 ? `\n    <div class="actions">${buttons.join('')}</div>` : '';
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<meta name="robots" content="noindex, nofollow" />
+<title>${title} — ${brand}</title>
+<style${nonceAttr}>
+  :root {
+    color-scheme: dark;
+    --bg: #09090b;
+    --panel: #0c0c0f;
+    --panel-2: #101017;
+    --line: #1c1c22;
+    --text: #e7e7ea;
+    --muted: #76767f;
+    --bad: #f87171;
+    --accent: ${accent};
+  }
+  * { box-sizing: border-box; }
+  body {
+    margin: 0;
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 24px;
+    background:
+      radial-gradient(900px 480px at 50% -10%, color-mix(in srgb, var(--accent) 9%, transparent), transparent 70%),
+      var(--bg);
+    color: var(--text);
+    font: 15px/1.6 "Space Grotesk", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
+    -webkit-font-smoothing: antialiased;
+  }
+  .card {
+    position: relative;
+    overflow: hidden;
+    width: 100%;
+    max-width: 440px;
+    padding: 36px 32px 28px;
+    background: var(--panel);
+    border: 1px solid var(--line);
+    border-radius: 12px;
+    box-shadow: 0 30px 60px -24px rgb(0 0 0 / 0.7);
+  }
+  .card::before {
+    content: "";
+    position: absolute;
+    inset: 0 0 auto 0;
+    height: 2px;
+    background: linear-gradient(90deg, var(--accent), transparent 80%);
+  }
+  .eyebrow {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    margin: 0 0 22px;
+    font: 11px/1 "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+    letter-spacing: 0.12em;
+    text-transform: uppercase;
+    color: var(--muted);
+  }
+  .eyebrow .brand { color: var(--accent); }
+  .eyebrow .status {
+    margin-left: auto;
+    padding: 4px 7px;
+    border: 1px solid var(--line);
+    border-radius: 4px;
+    color: var(--bad);
+    letter-spacing: 0.08em;
+  }
+  .icon {
+    display: grid;
+    place-items: center;
+    width: 40px;
+    height: 40px;
+    margin-bottom: 18px;
+    border-radius: 10px;
+    background: color-mix(in srgb, var(--accent) 12%, transparent);
+    color: var(--accent);
+  }
+  h1 {
+    margin: 0 0 8px;
+    font-size: 22px;
+    font-weight: 600;
+    letter-spacing: -0.01em;
+  }
+  p { margin: 0; color: var(--muted); }
+  .detail {
+    margin-top: 14px;
+    padding: 10px 12px;
+    border: 1px solid var(--line);
+    border-radius: 6px;
+    background: var(--panel-2);
+    font: 12px/1.5 "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+    color: var(--text);
+    overflow-wrap: anywhere;
+  }
+  .actions {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 10px;
+    margin-top: 26px;
+  }
+  .btn {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    padding: 9px 14px;
+    border: 1px solid var(--line);
+    border-radius: 6px;
+    background: var(--panel-2);
+    color: var(--text);
+    font-size: 13px;
+    font-weight: 500;
+    text-decoration: none;
+  }
+  .btn:hover { border-color: color-mix(in srgb, var(--accent) 50%, var(--line)); }
+  .btn.primary {
+    background: color-mix(in srgb, var(--accent) 14%, transparent);
+    border-color: color-mix(in srgb, var(--accent) 45%, transparent);
+    color: var(--accent);
+  }
+  .btn.primary:hover { background: color-mix(in srgb, var(--accent) 22%, transparent); }
+  .foot {
+    margin-top: 26px;
+    font: 11px/1 "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+    letter-spacing: 0.04em;
+    color: var(--muted);
+    opacity: 0.7;
+  }
+</style>
+</head>
+<body>
+  <main class="card">
+    <p class="eyebrow"><span class="brand">${brand}</span><span>console</span><span class="status">${info.status}</span></p>
+    <div class="icon" aria-hidden="true">${info.reason === 'forbidden' ? LOCK_ICON : KEY_ICON}</div>
+    <h1>${title}</h1>
+    <p>${message}</p>${detail}${actions}
+    <p class="foot">${escapeHtml(CONSOLE.packageName)}</p>
+  </main>
+</body>
+</html>`;
+}
+/**
+ * Resolve WHAT to serve for a refusal, honouring the host's `accessDenied` option in either form.
+ * Returns the HTML to send, or `null` when a custom renderer already answered the request itself
+ * (`answered()` reports whether it did — the provider wires that to "a `location` header or a body
+ * is already set"). Framework-light: knows nothing about the HTTP context beyond passing it through.
+ */
+export async function resolveAccessDeniedPage(info, option, ctx, answered) {
+    if (typeof option === 'function') {
+        const rendered = await option(info, ctx);
+        if (typeof rendered === 'string')
+            return rendered;
+        if (answered())
+            return null;
+        return renderAccessDeniedPage(info);
+    }
+    return renderAccessDeniedPage(info, option ?? {});
+}
+//# sourceMappingURL=access_denied_page.js.map

package/dist/src/dashboard/access_denied_page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access_denied_page.js","sourceRoot":"","sources":["../../../src/dashboard/access_denied_page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAkEH,kGAAkG;AAClG,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,qBAAqB;CAC1B,CAAC;AAEX,MAAM,YAAY,GAAmE;IACnF,eAAe,EAAE;QACf,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,gDAAgD;KAC1D;IACD,SAAS,EAAE;QACT,KAAK,EAAE,eAAe;QACtB,OAAO,EACL,kHAAkH;KACrH;CACF,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;AAChF,CAAC;AAED,MAAM,SAAS,GACb,gPAAgP,CAAC;AACnP,MAAM,QAAQ,GACZ,0PAA0P,CAAC;AAE7P;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAsB,EACtB,OAAO,GAA4B,EAAE;IAErC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,KAAK;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CACV,gCAAgC,UAAU,CAAC,SAAS,CAAC,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM,CACvH,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CACV,gBAAgB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,UAAU,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,aAAa,CAAC,MAAM,CAC/I,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACtD,2FAA2F;QAC3F,OAAO,CAAC,IAAI,CACV,wBAAwB,UAAU,CAAC,SAAS,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,UAAU,IAAI,yBAAyB,CAAC,MAAM,CACpH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;QAC7C,CAAC,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;QAC1D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAEjG,OAAO;;;;;;SAMA,KAAK,MAAM,KAAK;QACjB,SAAS;;;;;;;;;;gBAUD,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6CAsHuB,KAAK,mDAAmD,IAAI,CAAC,MAAM;2CACrE,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;UACnF,KAAK;SACN,OAAO,OAAO,MAAM,GAAG,OAAO;sBACjB,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC;;;QAG7C,CAAC;AACT,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAsB,EACtB,MAAkD,EAClD,GAAQ,EACR,QAAuB;IAEvB,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,QAAQ,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC"}

package/dist/src/dashboard/actor.d.ts

@@ -0,0 +1,12 @@
+import type { Actor } from '../stores/store.js';
+/** Who a change is attributed to when nobody can be identified. */
+export declare const FALLBACK_ACTOR: Actor;
+/**
+ * The default `actor`: the signed-in user (`ctx.auth.user`, read structurally — this package does
+ * not depend on `@adonisjs/auth`). `id` is the user's `id`; `name` its `email` or `name`.
+ * `'dashboard'` when nobody is signed in.
+ */
+export declare function defaultActor(ctx: unknown): Actor;
+/** Normalize what a configured `actor` resolver returned. */
+export declare function toActor(value: unknown): Actor;
+//# sourceMappingURL=actor.d.ts.map

package/dist/src/dashboard/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../../src/dashboard/actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAEhD,mEAAmE;AACnE,eAAO,MAAM,cAAc,EAAE,KAA4C,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAYhD;AAED,6DAA6D;AAC7D,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAS7C"}

package/dist/src/dashboard/actor.js

@@ -0,0 +1,33 @@
+/** Who a change is attributed to when nobody can be identified. */
+export const FALLBACK_ACTOR = { id: 'dashboard', anonymous: true };
+/**
+ * The default `actor`: the signed-in user (`ctx.auth.user`, read structurally — this package does
+ * not depend on `@adonisjs/auth`). `id` is the user's `id`; `name` its `email` or `name`.
+ * `'dashboard'` when nobody is signed in.
+ */
+export function defaultActor(ctx) {
+    const user = ctx?.auth?.user;
+    if (!user)
+        return FALLBACK_ACTOR;
+    const id = user.id;
+    const name = [user.email, user.name].find((value) => typeof value === 'string' && value !== '');
+    if (typeof id === 'string' && id !== '')
+        return name ? { id, name } : { id };
+    if (typeof id === 'number' || typeof id === 'bigint') {
+        return name ? { id: String(id), name } : { id: String(id) };
+    }
+    return name ? { id: name, name } : FALLBACK_ACTOR;
+}
+/** Normalize what a configured `actor` resolver returned. */
+export function toActor(value) {
+    if (typeof value === 'string' && value !== '')
+        return { id: value };
+    if (typeof value === 'object' && value !== null) {
+        const { id, name } = value;
+        if (typeof id === 'string' && id !== '') {
+            return typeof name === 'string' && name !== '' ? { id, name } : { id };
+        }
+    }
+    return FALLBACK_ACTOR;
+}
+//# sourceMappingURL=actor.js.map

package/dist/src/dashboard/actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.js","sourceRoot":"","sources":["../../../src/dashboard/actor.ts"],"names":[],"mappings":"AAEA,mEAAmE;AACnE,MAAM,CAAC,MAAM,cAAc,GAAU,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,IAAI,GAAI,GAAmE,EAAE,IAAI,EAAE,IAAI,CAAC;IAC9F,IAAI,CAAC,IAAI;QAAE,OAAO,cAAc,CAAC;IACjC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CACvC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CACtE,CAAC;IACF,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IAC7E,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;AACpD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC,CAAC;QAC/D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/src/dashboard/authorize_decision.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The dashboard-gate contract: what an `authorize` hook may answer, and how that answer becomes an
+ * HTTP status. Framework-light (no AdonisJS types), so it is unit-testable on its own.
+ *
+ * Every `@adonis-agora` console (payments, durable, telescope, media, agent, flags) carries an IDENTICAL
+ * copy of these types — copied, not shared through a package — so a hook such as
+ * `@adonis-agora/authz`'s `authorizeByRoles` can be dropped into any of them and mean the same thing.
+ *
+ * The one rule that matters most: a decision OBJECT is truthy, so `if (!(await authorize(ctx)))`
+ * would wave `{ allowed: false }` through. Always go through {@link resolveAuthorizeResult}.
+ */
+/**
+ * A structured answer from an `authorize` hook. `reason` lets a console tell "nobody is signed in"
+ * (`401`) apart from "signed in, but not allowed" (`403`). Omitted on a denial → `403`.
+ */
+export interface AuthorizeDecision {
+    allowed: boolean;
+    reason?: 'unauthenticated' | 'forbidden';
+}
+/** What an `authorize` hook returns: a bare boolean, or an {@link AuthorizeDecision}. */
+export type AuthorizeResult = boolean | AuthorizeDecision;
+/** An {@link AuthorizeResult} normalized to the HTTP answer it maps to. */
+export type ResolvedAuthorizeResult = {
+    allowed: true;
+} | {
+    allowed: false;
+    status: 401;
+    reason: 'unauthenticated';
+} | {
+    allowed: false;
+    status: 403;
+    reason: 'forbidden';
+};
+/**
+ * Normalize whatever an `authorize` hook returned. Fails CLOSED: only `true` or an object whose
+ * `allowed` is exactly `true` passes; anything else (`false`, `{ allowed: false }`, `undefined`, a
+ * malformed value) is a denial — `401` when the hook said `reason: 'unauthenticated'`, `403`
+ * otherwise.
+ */
+export declare function resolveAuthorizeResult(result: unknown): ResolvedAuthorizeResult;
+/**
+ * Run an `authorize` hook and normalize its answer. A hook that THROWS is a `403` denial, never a
+ * `500` and never a pass; the error is handed back so the caller can log it.
+ */
+export declare function runAuthorize<Ctx>(hook: (ctx: Ctx) => AuthorizeResult | Promise<AuthorizeResult>, ctx: Ctx): Promise<ResolvedAuthorizeResult & {
+    hookError?: unknown;
+}>;
+//# sourceMappingURL=authorize_decision.d.ts.map

package/dist/src/dashboard/authorize_decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize_decision.d.ts","sourceRoot":"","sources":["../../../src/dashboard/authorize_decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAAC;CAC1C;AAED,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,iBAAiB,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAC/B;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC1D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAIzD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,GAAG,uBAAuB,CAS/E;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,GAAG,EACpC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,EAC9D,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,uBAAuB,GAAG;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAM5D"}

package/dist/src/dashboard/authorize_decision.js

@@ -0,0 +1,44 @@
+/**
+ * The dashboard-gate contract: what an `authorize` hook may answer, and how that answer becomes an
+ * HTTP status. Framework-light (no AdonisJS types), so it is unit-testable on its own.
+ *
+ * Every `@adonis-agora` console (payments, durable, telescope, media, agent, flags) carries an IDENTICAL
+ * copy of these types — copied, not shared through a package — so a hook such as
+ * `@adonis-agora/authz`'s `authorizeByRoles` can be dropped into any of them and mean the same thing.
+ *
+ * The one rule that matters most: a decision OBJECT is truthy, so `if (!(await authorize(ctx)))`
+ * would wave `{ allowed: false }` through. Always go through {@link resolveAuthorizeResult}.
+ */
+const FORBIDDEN = { allowed: false, status: 403, reason: 'forbidden' };
+/**
+ * Normalize whatever an `authorize` hook returned. Fails CLOSED: only `true` or an object whose
+ * `allowed` is exactly `true` passes; anything else (`false`, `{ allowed: false }`, `undefined`, a
+ * malformed value) is a denial — `401` when the hook said `reason: 'unauthenticated'`, `403`
+ * otherwise.
+ */
+export function resolveAuthorizeResult(result) {
+    if (result === true)
+        return { allowed: true };
+    if (typeof result !== 'object' || result === null)
+        return FORBIDDEN;
+    const decision = result;
+    if (decision.allowed === true)
+        return { allowed: true };
+    if (decision.reason === 'unauthenticated') {
+        return { allowed: false, status: 401, reason: 'unauthenticated' };
+    }
+    return FORBIDDEN;
+}
+/**
+ * Run an `authorize` hook and normalize its answer. A hook that THROWS is a `403` denial, never a
+ * `500` and never a pass; the error is handed back so the caller can log it.
+ */
+export async function runAuthorize(hook, ctx) {
+    try {
+        return resolveAuthorizeResult(await hook(ctx));
+    }
+    catch (error) {
+        return { ...FORBIDDEN, hookError: error };
+    }
+}
+//# sourceMappingURL=authorize_decision.js.map

package/dist/src/dashboard/authorize_decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize_decision.js","sourceRoot":"","sources":["../../../src/dashboard/authorize_decision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAoBH,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAW,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAe;IACpD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAoC,CAAC;IACtD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA8D,EAC9D,GAAQ;IAER,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/src/dashboard/console_authorize.d.ts

@@ -0,0 +1,77 @@
+import type { HttpContext } from '@adonisjs/core/http';
+/**
+ * The console access contract every `@adonis-agora` console (durable, telescope, media, payments, flags,
+ * agent, the authkit admin) takes for its `authorize` option. These types are copied, not shared
+ * through a package, and kept identical across the libs: TypeScript is structural, so one
+ * authorizer class satisfies every console.
+ */
+/** What an authorizer may answer. */
+export type ConsoleAuthorizeResult = boolean | {
+    allowed: true;
+} | {
+    allowed: false;
+    reason?: 'unauthenticated' | 'forbidden';
+} | {
+    redirectTo: string;
+};
+/** A class form, for an authorizer in its own file (`@inject()` works). */
+export interface ConsoleAuthorizer {
+    authorize(ctx: HttpContext): ConsoleAuthorizeResult | Promise<ConsoleAuthorizeResult>;
+}
+export type ConsoleAuthorizerClass = new (...args: any[]) => ConsoleAuthorizer;
+/** The `authorize` option: an inline function, the authorizer class, or a lazy import of it. */
+export type ConsoleAuthorize = ((ctx: HttpContext) => ConsoleAuthorizeResult | Promise<ConsoleAuthorizeResult>) | ConsoleAuthorizerClass | (() => Promise<{
+    default: ConsoleAuthorizerClass;
+}>);
+/** A {@link ConsoleAuthorizeResult} normalized to the answer the console writes. */
+export type ConsoleAuthorizeDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    status: 401;
+    reason: 'unauthenticated';
+} | {
+    allowed: false;
+    status: 403;
+    reason: 'forbidden';
+    error?: unknown;
+} | {
+    allowed: false;
+    status: 302;
+    redirectTo: string;
+};
+/**
+ * Normalize an authorizer's answer. Fails closed: only `true` or `{ allowed: true }` passes;
+ * `{ redirectTo }` with a non-empty string is a redirect; anything else is a denial (`401` for
+ * `reason: 'unauthenticated'`, `403` otherwise).
+ */
+export declare function normalizeConsoleAuthorizeResult(result: unknown): ConsoleAuthorizeDecision;
+/**
+ * Turn an `authorize` option into one guard function.
+ *
+ * - A class is built through the request's container (`ctx.containerResolver.make`), so
+ *   `@inject()` works, and its `authorize(ctx)` is called.
+ * - A function is called with `ctx`. When it resolves to a module whose `default` is an
+ *   authorizer class, it was a lazy import: the class is remembered (the import runs once per
+ *   returned guard) and used as above.
+ * - A thrown error is a `403` denial, carried on `error` so the caller can log it.
+ */
+export declare function resolveConsoleAuthorize(authorize: ConsoleAuthorize): (ctx: HttpContext) => Promise<ConsoleAuthorizeDecision>;
+/** Options for {@link authorizeByToken}. */
+export interface AuthorizeByTokenOptions {
+    /** The shared secret callers send as `Authorization: Bearer <token>`. */
+    token: string | undefined;
+}
+/**
+ * An `authorize` check for machine access: allows a request whose `Authorization` header is
+ * `Bearer <token>` (compared in constant time), and answers
+ * `{ allowed: false, reason: 'unauthenticated' }` (`401`) otherwise. Only the header is read.
+ *
+ * ```ts
+ * authorize: authorizeByToken({ token: env.get('CONSOLE_TOKEN') }),
+ * ```
+ *
+ * Throws at config time when `token` is empty or undefined.
+ */
+export declare function authorizeByToken(options: AuthorizeByTokenOptions): ConsoleAuthorize;
+//# sourceMappingURL=console_authorize.d.ts.map

package/dist/src/dashboard/console_authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console_authorize.d.ts","sourceRoot":"","sources":["../../../src/dashboard/console_authorize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;;GAKG;AAEH,qCAAqC;AACrC,MAAM,MAAM,sBAAsB,GAC9B,OAAO,GACP;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,WAAW,CAAA;CAAE,GAC5D;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3B,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,GAAG,EAAE,WAAW,GAAG,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvF;AAGD,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,iBAAiB,CAAC;AAE/E,gGAAgG;AAChG,MAAM,MAAM,gBAAgB,GACxB,CAAC,CAAC,GAAG,EAAE,WAAW,KAAK,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC,GAChF,sBAAsB,GACtB,CAAC,MAAM,OAAO,CAAC;IAAE,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAAC,CAAC;AAEzD,oFAAoF;AACpF,MAAM,MAAM,wBAAwB,GAChC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC1D;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrE;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAkBxD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,OAAO,GAAG,wBAAwB,CAYzF;AAeD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,gBAAgB,GAC1B,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAsBzD;AAED,4CAA4C;AAC5C,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAYnF"}