npm - @betterportal/config-manager - Versions diffs - 0.0.1 - Mend

@betterportal/config-manager 0.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (154) hide show

package/lib/plugins/service-betterportal-config-manager/bootstrapWizardHtml.js ADDED Viewed

@@ -0,0 +1,329 @@
+/**
+ * Vanilla HTML bootstrap wizard. No theme dependency.
+ *
+ * Flow (browser-side):
+ *  1. Operator enters bootstrap key + admin tenant/app + theme URL + auth URL.
+ *  2. Browser:
+ *     a) POST /.well-known/bp/bootstrap/commit  -> registers admin tenant/app in CP DB
+ *     b) For each of {theme, auth}:
+ *        - POST /.well-known/bp/admin/services/begin-install -> get setupToken
+ *        - POST {serviceUrl}/.well-known/bp/install with {setupToken, cpUrl}
+ *     c) Redirect to admin app URL
+ *  3. Admin app's login flow redirects to /register while the auth service has
+ *     zero users; the operator creates the first admin THERE (app origin, so
+ *     tenant/app context resolves from the request). Then logs in.
+ */
+export function renderBootstrapWizardHtml(input) {
+    const cpIssuerSafe = JSON.stringify(input.cpIssuer);
+    return `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>BetterPortal Bootstrap</title>
+<style>
+  :root { color-scheme: light dark; --bg:#0e1116; --fg:#e6edf3; --muted:#7d8590; --accent:#2f81f7; --ok:#3fb950; --err:#f85149; --card:#161b22; --border:#30363d; --input:#0d1117; }
+  @media (prefers-color-scheme: light) {
+    :root { --bg:#f6f8fa; --fg:#1f2328; --muted:#656d76; --accent:#0969da; --ok:#1a7f37; --err:#cf222e; --card:#ffffff; --border:#d0d7de; --input:#ffffff; }
+  }
+  *,*::before,*::after { box-sizing: border-box; }
+  body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif; background: var(--bg); color: var(--fg); min-height: 100vh; padding: 2rem 1rem; }
+  .wrap { max-width: 720px; margin: 0 auto; }
+  h1 { margin: 0 0 0.5rem; font-size: 1.8rem; letter-spacing: -0.02em; }
+  p.lead { color: var(--muted); margin: 0 0 2rem; line-height: 1.6; }
+  .card { background: var(--card); border: 1px solid var(--border); border-radius: 12px; padding: 1.5rem; margin-bottom: 1rem; }
+  .card h2 { margin: 0 0 0.25rem; font-size: 1rem; text-transform: uppercase; letter-spacing: 0.05em; color: var(--muted); }
+  .card p.hint { margin: 0.25rem 0 1rem; color: var(--muted); font-size: 0.9rem; }
+  label { display: block; margin: 0.75rem 0 0.25rem; font-size: 0.85rem; font-weight: 600; }
+  input { width: 100%; padding: 0.6rem 0.75rem; font: inherit; background: var(--input); color: var(--fg); border: 1px solid var(--border); border-radius: 6px; }
+  input:focus { outline: none; border-color: var(--accent); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent) 25%, transparent); }
+  .row { display: grid; grid-template-columns: 1fr 1fr; gap: 0.75rem; }
+  button { width: 100%; padding: 0.75rem; font: inherit; font-weight: 600; background: var(--accent); color: white; border: 0; border-radius: 8px; cursor: pointer; }
+  button:hover { filter: brightness(1.1); }
+  button:disabled { opacity: 0.5; cursor: not-allowed; }
+  pre { background: var(--input); border: 1px solid var(--border); padding: 0.75rem; border-radius: 6px; overflow-x: auto; font-size: 0.85rem; white-space: pre-wrap; word-break: break-all; }
+  .step { display: flex; align-items: center; padding: 0.5rem 0; gap: 0.75rem; color: var(--muted); font-size: 0.9rem; }
+  .step.done { color: var(--ok); }
+  .step.err { color: var(--err); }
+  .step .marker { width: 1.2rem; text-align: center; }
+  .alert-err { background: color-mix(in srgb, var(--err) 12%, transparent); color: var(--err); border: 1px solid var(--err); padding: 0.75rem; border-radius: 6px; margin-top: 1rem; }
+  .alert-ok { background: color-mix(in srgb, var(--ok) 12%, transparent); color: var(--ok); border: 1px solid var(--ok); padding: 0.75rem; border-radius: 6px; margin-top: 1rem; }
+  .modal-backdrop { position: fixed; inset: 0; background: rgba(0,0,0,0.55); display: none; align-items: center; justify-content: center; z-index: 1000; padding: 1rem; }
+  .modal-backdrop.open { display: flex; }
+  .modal { background: var(--card); border: 1px solid var(--border); border-radius: 12px; max-width: 560px; width: 100%; max-height: 80vh; display: flex; flex-direction: column; box-shadow: 0 20px 50px rgba(0,0,0,0.4); }
+  .modal-header { display: flex; align-items: center; justify-content: space-between; padding: 1rem 1.5rem; border-bottom: 1px solid var(--border); }
+  .modal-header h2 { margin: 0; font-size: 1rem; text-transform: uppercase; letter-spacing: 0.05em; color: var(--muted); }
+  .modal-close { background: transparent; color: var(--muted); border: 0; font-size: 1.25rem; line-height: 1; padding: 0.25rem 0.5rem; cursor: pointer; border-radius: 4px; }
+  .modal-close:hover { color: var(--fg); background: var(--input); }
+  .modal-body { padding: 1rem 1.5rem; overflow-y: auto; flex: 1; }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <h1>BetterPortal Bootstrap</h1>
+  <p class="lead">First-time setup. Enter the bootstrap key from your config-manager stdout, then point at your theme + auth service URLs and create the first admin user.</p>
+  <form id="wizard">
+    <div class="card">
+      <h2>1. Bootstrap key</h2>
+      <p class="hint">Logged to config-manager stdout on startup. Valid 15 minutes.</p>
+      <label>Key</label>
+      <input id="bootstrapKey" name="bootstrapKey" autocomplete="off" required placeholder="bootstrap-...">
+    </div>
+    <div class="card">
+      <h2>2. Admin tenant + app</h2>
+      <p class="hint">The product itself. This is where you log in to manage other tenants. IDs are auto-generated.</p>
+      <label>Tenant title</label>
+      <input name="adminTenant.title" value="BetterPortal" required>
+      <label>App title</label>
+      <input name="adminApp.title" value="Admin Portal" required>
+      <label>App URL (where you'll log in)</label>
+      <input name="adminApp.hostname" placeholder="http://localhost:3100" required>
+    </div>
+    <div class="card">
+      <h2>3. Theme service</h2>
+      <p class="hint">Renders the admin UI. Identity (UUIDv7) is auto-generated.</p>
+      <label>Title</label>
+      <input name="themeService.title" value="Bootstrap1" required>
+      <label>Theme URL</label>
+      <input name="themeService.hostname" placeholder="http://localhost:3100" required>
+    </div>
+    <div class="card">
+      <h2>4. Auth service</h2>
+      <p class="hint">Issues login tokens. Must publish /.well-known/bp/manifest. Identity (UUIDv7) is auto-generated.</p>
+      <label>Title</label>
+      <input name="authService.title" value="Auth Default" required>
+      <label>Auth URL</label>
+      <input name="authService.hostname" placeholder="http://localhost:3210" required>
+    </div>
+    <p class="hint">No admin user is created here. After setup you'll be redirected to the admin app, which walks you through creating the first admin account (open only while the auth service has zero users).</p>
+    <button type="submit" id="submitBtn">Run setup</button>
+  </form>
+</div>
+<div class="modal-backdrop" id="progressModal" role="dialog" aria-modal="true" aria-labelledby="progressModalTitle">
+  <div class="modal" role="document">
+    <div class="modal-header">
+      <h2 id="progressModalTitle">Setup progress</h2>
+      <button type="button" class="modal-close" id="progressModalClose" aria-label="Close">&times;</button>
+    </div>
+    <div class="modal-body" id="steps"></div>
+  </div>
+</div>
+<script>
+const CP_ISSUER = ${cpIssuerSafe};
+function getValue(form, name) { return form.elements.namedItem(name) ? form.elements.namedItem(name).value : ""; }
+async function readJson(res, label) {
+  const contentType = res.headers.get("content-type") || "";
+  if (contentType.includes("application/json")) return res.json();
+  let text = "";
+  try { text = await res.text(); } catch (_) {}
+  throw new Error(label + " returned " + (contentType || "non-JSON") + " HTTP " + res.status + (text ? ": " + text.slice(0, 160) : ""));
+}
+function step(id, label) {
+  const wrap = document.getElementById("steps");
+  const div = document.createElement("div");
+  div.className = "step";
+  div.id = id;
+  div.innerHTML = '<span class="marker">...</span><span>' + label + '</span>';
+  wrap.appendChild(div);
+  return {
+    done() { div.classList.add("done"); div.querySelector(".marker").textContent = "OK"; },
+    fail(msg) { div.classList.add("err"); div.querySelector(".marker").textContent = "X"; if (msg) div.querySelector("span:last-child").textContent = label + " - " + msg; }
+  };
+}
+async function postJson(url, body) {
+  const res = await fetch(url, { method: "POST", headers: { "content-type": "application/json", "accept": "application/json" }, body: JSON.stringify(body) });
+  if (!res.ok) {
+    let text = "";
+    try { text = await res.text(); } catch (_) {}
+    throw new Error("HTTP " + res.status + " " + (text || res.statusText));
+  }
+  return readJson(res, "POST " + url);
+}
+async function getJson(url) {
+  const res = await fetch(url, { headers: { accept: "application/json" } });
+  if (!res.ok) throw new Error("HTTP " + res.status);
+  return readJson(res, "GET " + url);
+}
+async function installService(label, serviceUrl, scope, options) {
+  const s = step("install-" + label, "Install " + label + " service");
+  try {
+    const beginRes = await postJson(CP_ISSUER + "/.well-known/bp/admin/services/begin-install", {
+      serviceUrl,
+      ...(scope || {}),
+      ...(options && options.instanceId ? { instanceId: options.instanceId } : {}),
+      ...(options && options.sharedServiceId ? { sharedServiceId: options.sharedServiceId } : {})
+    });
+    const installRes = await postJson(serviceUrl.replace(/\\/+$/, "") + "/.well-known/bp/install", {
+      setupToken: beginRes.setupToken,
+      cpUrl: CP_ISSUER
+    });
+    s.done();
+    return installRes;
+  } catch (e) {
+    s.fail(e.message);
+    throw e;
+  }
+}
+async function buildAdminRole(adminAppId, payload, commit) {
+  const s = step("admin-role", "Build admin role from service manifests");
+  try {
+    // Fetch each known service's manifest to discover view-level permission requirements.
+    // serviceId in grants MUST be the UUIDv7 instance id (matches routes/fragments
+    // and what the framework auth resolver compares against), NOT the pluginId.
+    const sources = [
+      { instanceId: commit.cmInstanceId, url: CP_ISSUER },
+      { instanceId: commit.authActivationId, url: payload.authService.hostname }
+    ];
+    if (payload.themeService && payload.themeService.hostname && commit.themeActivationId) {
+      sources.push({ instanceId: commit.themeActivationId, url: payload.themeService.hostname });
+    }
+    const ACTIONS = ["read", "create", "update", "delete"];
+    const grants = [];
+    for (const src of sources) {
+      try {
+        const m = await getJson(src.url.replace(/\\/+$/, "") + "/.well-known/bp/manifest");
+        const views = Array.isArray(m.views) ? m.views : [];
+        for (const v of views) {
+          if (!v.viewId) continue;
+          grants.push({
+            serviceId: src.instanceId,
+            viewId: v.viewId,
+            permissions: ACTIONS.slice()
+          });
+        }
+      } catch (e) {
+        // Manifest fetch can fail in race with install. Continue with whatever we have.
+        // (silent - surface only via the wizard's overall failure step if all manifests miss)
+      }
+    }
+    // POST admin role with all gathered grants
+    const res = await postJson(CP_ISSUER + "/.well-known/bp/admin/apps/" + encodeURIComponent(adminAppId) + "/auth/roles", {
+      id: "admin",
+      title: "Administrator",
+      description: "Full access to all services and views. Auto-created during bootstrap.",
+      permissions: grants
+    });
+    s.done();
+    return res;
+  } catch (e) {
+    s.fail(e.message);
+    throw e;
+  }
+}
+async function commitBootstrap(payload) {
+  const s = step("commit", "Register admin tenant/app");
+  try {
+    const r = await postJson(CP_ISSUER + "/.well-known/bp/bootstrap/commit", payload);
+    s.done();
+    return r;
+  } catch (e) {
+    s.fail(e.message);
+    throw e;
+  }
+}
+const progressModal = document.getElementById("progressModal");
+const stepsEl = document.getElementById("steps");
+function openProgressModal() {
+  stepsEl.innerHTML = "";
+  progressModal.classList.add("open");
+  document.body.style.overflow = "hidden";
+}
+function closeProgressModal() {
+  progressModal.classList.remove("open");
+  document.body.style.overflow = "";
+  stepsEl.innerHTML = "";
+  document.getElementById("submitBtn").disabled = false;
+}
+document.getElementById("progressModalClose").addEventListener("click", closeProgressModal);
+progressModal.addEventListener("click", (e) => { if (e.target === progressModal) closeProgressModal(); });
+document.addEventListener("keydown", (e) => {
+  if (e.key === "Escape" && progressModal.classList.contains("open")) closeProgressModal();
+});
+document.getElementById("wizard").addEventListener("submit", async (evt) => {
+  evt.preventDefault();
+  const form = evt.currentTarget;
+  document.getElementById("submitBtn").disabled = true;
+  openProgressModal();
+  const payload = {
+    bootstrapKey: getValue(form, "bootstrapKey"),
+    adminTenant: {
+      title: getValue(form, "adminTenant.title")
+    },
+    adminApp: {
+      title: getValue(form, "adminApp.title"),
+      hostname: getValue(form, "adminApp.hostname")
+    },
+    themeService: {
+      hostname: getValue(form, "themeService.hostname"),
+      title: getValue(form, "themeService.title")
+    },
+    authService: {
+      hostname: getValue(form, "authService.hostname"),
+      title: getValue(form, "authService.title")
+    }
+  };
+  try {
+    // 1. Commit admin tenant + app to CP (CM generates UUIDv7 ids and returns them)
+    const commit = await commitBootstrap(payload);
+    // 2. Install auth + theme services via setup-token handshake (browser dispatches).
+    //    instanceIds from commit response -> match pre-created tenant.services placeholders.
+    await installService(
+      "auth",
+      payload.authService.hostname,
+      { tenantId: commit.adminTenantId, appId: commit.adminAppId },
+      { sharedServiceId: commit.authSharedServiceId }
+    );
+    if (payload.themeService && payload.themeService.hostname) {
+      await installService(
+        "theme",
+        payload.themeService.hostname,
+        { tenantId: commit.adminTenantId, appId: commit.adminAppId },
+        { sharedServiceId: commit.themeSharedServiceId }
+      );
+    }
+    // 3. Build admin role with all permissions from every registered service's manifest.
+    await buildAdminRole(commit.adminAppId, payload, commit);
+    // 4. Redirect to admin app. First admin user is created THERE: the app's
+    //    login flow redirects to /register while the auth service has zero
+    //    users, so the request originates from the app origin and tenant/app
+    //    context resolves naturally.
+    const okStep = step("done", "Bootstrap complete - redirecting to " + payload.adminApp.hostname + " to create the first admin");
+    okStep.done();
+    setTimeout(() => { window.location.href = payload.adminApp.hostname; }, 2000);
+  } catch (e) {
+    const note = document.createElement("div");
+    note.className = "alert-err";
+    note.textContent = "Setup failed: " + e.message;
+    stepsEl.appendChild(note);
+    document.getElementById("submitBtn").disabled = false;
+  }
+});
+</script>
+</body>
+</html>`;
+}
+//# sourceMappingURL=bootstrapWizardHtml.js.map

package/lib/plugins/service-betterportal-config-manager/bootstrapWizardHtml.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"bootstrapWizardHtml.js","sourceRoot":"","sources":["../../../src/plugins/service-betterportal-config-manager/bootstrapWizardHtml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAA2B;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAuGW,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA8MxB,CAAC;AACT,CAAC"}

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { HtmlRenderable } from "@betterportal/framework";
+import type { ResponseData } from "../index.js";
+export declare function render(data: ResponseData): HtmlRenderable;
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA+BhD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAqOzD"}

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.js ADDED Viewed

@@ -0,0 +1,38 @@
+import { jsx as _jsx, jsxs as _jsxs } from "jsx-htmx/jsx-runtime";
+/** @jsxImportSource jsx-htmx */
+import { js } from "jsx-htmx";
+function permsScript(apiBase, serviceUrl, selectedAppId) {
+    return js(`(() => {
+    const apiBase = ${JSON.stringify(apiBase)};
+    const appId = ${JSON.stringify(selectedAppId ?? "")};
+    if (!appId) return;
+    document.querySelectorAll("[data-bp-edit-role]").forEach((btn) => {
+      btn.addEventListener("click", () => {
+        const role = JSON.parse(btn.dataset.bpEditRole);
+        const form = document.getElementById("bp-edit-role-form");
+        if (!form) return;
+        form.setAttribute("hx-put", apiBase + "/apps/" + encodeURIComponent(appId) + "/auth/roles/" + encodeURIComponent(role.id));
+        form.querySelector("[name=roleId]").value = role.id;
+        form.querySelector("[name=title]").value = role.title;
+        form.querySelector("[name=description]").value = role.description || "";
+        form.querySelectorAll("[data-bp-grant]").forEach((box) => {
+          const [sid, vid, action] = box.dataset.bpGrant.split("|");
+          const grant = role.permissions.find((p) => p.serviceId === sid && p.viewId === vid);
+          box.checked = !!(grant && grant.permissions.includes(action));
+        });
+        if (window.htmx) window.htmx.process(form);
+      });
+    });
+  })()`);
+}
+const ACTIONS = ["read", "create", "update", "delete"];
+export function render(data) {
+    const serviceUrl = data.serviceBaseUrl ?? "";
+    const apiBase = serviceUrl + data.adminApiBase;
+    const authPath = `${serviceUrl}/auth`;
+    const selectedApp = data.apps.find((a) => a.id === data.selectedAppId);
+    return (_jsxs("div", { class: "container-fluid px-0", children: [_jsxs("div", { class: "d-flex justify-content-between align-items-center mb-4", children: [_jsxs("div", { children: [_jsx("h2", { class: "mb-1", children: data.title }), _jsx("p", { class: "text-secondary mb-0", children: "Define roles + permission grants per app. Services advertise per-view requirements via manifest." })] }), selectedApp && data.authConfigured ? (_jsx("button", { class: "btn btn-primary", "data-bs-toggle": "offcanvas", "data-bs-target": "#bp-add-role-panel", children: "+ Add Role" })) : null] }), _jsxs("div", { class: "mb-4", children: [_jsx("label", { class: "form-label", children: "App" }), _jsxs("select", { class: "form-select", id: "bp-app-select", name: "appId", "hx-get": authPath, "hx-trigger": "change", "hx-target": "#bp-main", "hx-swap": "innerHTML", "hx-push-url": "true", children: [_jsx("option", { value: "", children: "Select app..." }), data.apps.map((a) => (_jsx("option", { value: a.id, selected: a.id === data.selectedAppId ? true : undefined, children: a.title })))] })] }), !selectedApp ? (_jsxs("div", { class: "alert alert-secondary", children: ["Select an app to manage its roles. No apps? Create one in ", _jsx("strong", { children: "Tenants & Apps" }), "."] })) : !data.authConfigured ? (_jsx("div", { class: "alert alert-warning", children: "Configure an auth provider for this app before creating roles." })) : (_jsxs("div", { class: "row g-4", children: [_jsx("div", { class: "col-lg-7", children: _jsx("div", { class: "card border-0 shadow-sm", children: _jsxs("div", { class: "card-body", children: [_jsxs("h5", { class: "card-title mb-3", children: ["Roles for ", selectedApp.title, " (", data.currentRoles.length, ")"] }), data.currentRoles.length === 0 ? (_jsx("div", { class: "alert alert-secondary mb-0", children: "No roles defined. Click \"Add Role\" to create one." })) : (_jsx("div", { class: "table-responsive", children: _jsxs("table", { class: "table table-sm align-middle", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { children: "ID" }), _jsx("th", { children: "Title" }), _jsx("th", { children: "Grants" }), _jsx("th", {})] }) }), _jsx("tbody", { children: data.currentRoles.map((r) => (_jsxs("tr", { children: [_jsx("td", { class: "font-monospace small", children: r.id }), _jsxs("td", { children: [_jsx("div", { children: r.title }), r.description ? _jsx("div", { class: "small text-secondary", children: r.description }) : null] }), _jsx("td", { children: _jsxs("span", { class: "badge text-bg-secondary", children: [r.permissions.length, " grant", r.permissions.length === 1 ? "" : "s"] }) }), _jsx("td", { children: _jsxs("div", { class: "btn-group btn-group-sm", children: [_jsx("button", { class: "btn btn-outline-primary", "data-bs-toggle": "offcanvas", "data-bs-target": "#bp-edit-role-panel", "data-bp-edit-role": JSON.stringify(r), children: "Edit" }), _jsx("button", { class: "btn btn-outline-danger", "hx-delete": `${apiBase}/apps/${selectedApp.id}/auth/roles/${r.id}`, "hx-confirm": `Delete role ${r.id}?`, "hx-target": "#bp-main", "hx-swap": "innerHTML", children: "x" })] }) })] }))) })] }) }))] }) }) }), _jsx("div", { class: "col-lg-5", children: _jsx("div", { class: "card border-0 shadow-sm", children: _jsxs("div", { class: "card-body", children: [_jsx("h5", { class: "card-title mb-3", children: "Available services & views" }), data.servicePermissions.length === 0 ? (_jsx("div", { class: "text-secondary small", children: "No services registered yet." })) : (data.servicePermissions.map((s) => (_jsxs("div", { class: "mb-3", children: [_jsx("div", { class: "fw-semibold", children: s.title }), _jsxs("div", { class: "font-monospace small text-secondary mb-1", children: [s.serviceId, s.manifestVersion ? ` - v${s.manifestVersion}` : " - manifest pending"] }), s.views.length === 0 ? (_jsx("div", { class: "small text-secondary fst-italic", children: "No views in manifest cache." })) : (_jsx("ul", { class: "list-unstyled small mb-0", children: s.views.map((v) => (_jsxs("li", { class: "ms-2", children: [_jsx("code", { children: v.viewId }), _jsxs("span", { class: "text-secondary", children: [" ", v.path] }), v.role ? _jsx("span", { class: "badge text-bg-info ms-1", children: v.role }) : null] }))) }))] }))))] }) }) })] })), selectedApp && data.authConfigured ? (_jsxs("div", { class: "offcanvas offcanvas-end", tabindex: -1, id: "bp-add-role-panel", children: [_jsxs("div", { class: "offcanvas-header", children: [_jsx("h5", { class: "offcanvas-title", children: "Add Role" }), _jsx("button", { type: "button", class: "btn-close", "data-bs-dismiss": "offcanvas" })] }), _jsx("div", { class: "offcanvas-body", children: _jsxs("form", { id: "bp-add-role-form", "hx-post": `${apiBase}/apps/${selectedApp.id}/auth/roles`, "hx-target": "#bp-main", "hx-swap": "innerHTML", children: [_jsxs("div", { class: "mb-3", children: [_jsx("label", { class: "form-label", children: "Title" }), _jsx("input", { type: "text", class: "form-control", name: "title", placeholder: "Administrator", required: true })] }), _jsxs("div", { class: "mb-3", children: [_jsx("label", { class: "form-label", children: "Description (optional)" }), _jsx("textarea", { class: "form-control", name: "description", rows: 2 })] }), _jsx("div", { class: "alert alert-danger d-none", id: "bp-add-role-error" }), _jsx("button", { type: "submit", class: "btn btn-primary w-100", children: "Create Role" }), _jsx("p", { class: "text-secondary small mt-2 mb-0", children: "Grants are set via the Edit panel after creation." })] }) })] })) : null, selectedApp && data.authConfigured ? (_jsxs("div", { class: "offcanvas offcanvas-end", tabindex: -1, id: "bp-edit-role-panel", style: "--bs-offcanvas-width: 600px;", children: [_jsxs("div", { class: "offcanvas-header", children: [_jsx("h5", { class: "offcanvas-title", children: "Edit Role" }), _jsx("button", { type: "button", class: "btn-close", "data-bs-dismiss": "offcanvas" })] }), _jsx("div", { class: "offcanvas-body", children: _jsxs("form", { id: "bp-edit-role-form", "hx-target": "#bp-main", "hx-swap": "innerHTML", children: [_jsx("input", { type: "hidden", name: "roleId" }), _jsxs("div", { class: "mb-3", children: [_jsx("label", { class: "form-label", children: "Title" }), _jsx("input", { type: "text", class: "form-control", name: "title", required: true })] }), _jsxs("div", { class: "mb-3", children: [_jsx("label", { class: "form-label", children: "Description" }), _jsx("textarea", { class: "form-control", name: "description", rows: 2 })] }), _jsx("h6", { class: "mt-4 mb-2", children: "Permission grants" }), _jsx("p", { class: "small text-secondary", children: "Check actions this role grants for each service view." }), data.servicePermissions.length === 0 || data.servicePermissions.every((s) => s.views.length === 0) ? (_jsx("div", { class: "alert alert-secondary small mb-3", children: "No services or views in manifest cache yet. Services will appear here once they push their manifest (next poll cycle)." })) : (data.servicePermissions.map((s) => (s.views.length === 0 ? null : (_jsxs("div", { class: "mb-3", children: [_jsx("div", { class: "fw-semibold small", children: s.title }), _jsx("div", { class: "table-responsive", children: _jsxs("table", { class: "table table-sm align-middle mb-0", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { class: "small", children: "View" }), ACTIONS.map((a) => (_jsx("th", { class: "text-center small", children: a })))] }) }), _jsx("tbody", { children: s.views.map((v) => (_jsxs("tr", { children: [_jsx("td", { class: "font-monospace small", children: v.viewId }), ACTIONS.map((a) => (_jsx("td", { class: "text-center", children: _jsx("input", { type: "checkbox", class: "form-check-input", name: "grant", value: `${s.serviceId}|${v.viewId}|${a}`, "data-bp-grant": `${s.serviceId}|${v.viewId}|${a}` }) })))] }))) })] }) })] }))))), _jsx("div", { class: "alert alert-danger d-none", id: "bp-edit-role-error" }), _jsx("button", { type: "submit", class: "btn btn-primary w-100", children: "Save Role" })] }) })] })) : null, _jsx("script", { children: permsScript(apiBase, serviceUrl, data.selectedAppId) })] }));
+}
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-config-manager/bp-routes/auth/_theme.bootstrap1/index.tsx"],"names":[],"mappings":";AAAA,gCAAgC;AAChC,OAAO,EAAE,EAAE,EAAE,MAAM,UAAU,CAAC;AAI9B,SAAS,WAAW,CAAC,OAAe,EAAE,UAAkB,EAAE,aAAiC;IACzF,OAAO,EAAE,CAAC;sBACU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;oBACzB,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;OAqBhD,CAAC,CAAC;AACT,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEhE,MAAM,UAAU,MAAM,CAAC,IAAkB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,UAAU,OAAO,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC;IAEvE,OAAO,CACL,eAAK,KAAK,EAAC,sBAAsB,aAC/B,eAAK,KAAK,EAAC,wDAAwD,aACjE,0BACE,aAAI,KAAK,EAAC,MAAM,YAAE,IAAI,CAAC,KAAK,GAAM,EAClC,YAAG,KAAK,EAAC,qBAAqB,iHAAqG,IAC/H,EACL,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CACpC,iBAAQ,KAAK,EAAC,iBAAiB,oBAAgB,WAAW,oBAAgB,oBAAoB,2BAAoB,CACnH,CAAC,CAAC,CAAC,IAAI,IACJ,EAGN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,oBAAY,EACrC,kBACE,KAAK,EAAC,aAAa,EACnB,EAAE,EAAC,eAAe,EAClB,IAAI,EAAC,OAAO,YACJ,QAAQ,gBACL,QAAQ,eACT,UAAU,aACZ,WAAW,iBACP,MAAM,aAElB,iBAAQ,KAAK,EAAC,EAAE,8BAAuB,EACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACpB,iBAAQ,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,YAAG,CAAC,CAAC,KAAK,GAAU,CAClG,CAAC,IACK,IACL,EAEL,CAAC,WAAW,CAAC,CAAC,CAAC,CACd,eAAK,KAAK,EAAC,uBAAuB,2EAA2D,8CAA+B,SAAO,CACpI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CACzB,cAAK,KAAK,EAAC,qBAAqB,+EAE1B,CACP,CAAC,CAAC,CAAC,CACF,eAAK,KAAK,EAAC,SAAS,aAElB,cAAK,KAAK,EAAC,UAAU,YACnB,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,WAAW,aACpB,cAAI,KAAK,EAAC,iBAAiB,2BAAY,WAAW,CAAC,KAAK,QAAI,IAAI,CAAC,YAAY,CAAC,MAAM,SAAO,EAC1F,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAChC,cAAK,KAAK,EAAC,4BAA4B,oEAAwD,CAChG,CAAC,CAAC,CAAC,CACF,cAAK,KAAK,EAAC,kBAAkB,YAC3B,iBAAO,KAAK,EAAC,6BAA6B,aACxC,0BAAO,yBAAI,8BAAW,EAAA,iCAAc,EAAA,kCAAe,EAAA,cAAS,IAAK,GAAQ,EACzE,0BACG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC5B,yBACE,aAAI,KAAK,EAAC,sBAAsB,YAAE,CAAC,CAAC,EAAE,GAAM,EAC5C,yBACE,wBAAM,CAAC,CAAC,KAAK,GAAO,EACnB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAK,KAAK,EAAC,sBAAsB,YAAE,CAAC,CAAC,WAAW,GAAO,CAAC,CAAC,CAAC,IAAI,IAC5E,EACL,uBAAI,gBAAM,KAAK,EAAC,yBAAyB,aAAE,CAAC,CAAC,WAAW,CAAC,MAAM,YAAQ,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAQ,GAAK,EACzH,uBACE,eAAK,KAAK,EAAC,wBAAwB,aACjC,iBAAQ,KAAK,EAAC,yBAAyB,oBAAgB,WAAW,oBAAgB,qBAAqB,uBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAe,EAC3J,iBACE,KAAK,EAAC,wBAAwB,eACnB,GAAG,OAAO,SAAS,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE,gBACrD,eAAe,CAAC,CAAC,EAAE,GAAG,eACxB,UAAU,aACZ,WAAW,kBACV,IACP,GACH,IACF,CACN,CAAC,GACI,IACF,GACJ,CACP,IACG,GACF,GACF,EAGN,cAAK,KAAK,EAAC,UAAU,YACnB,cAAK,KAAK,EAAC,yBAAyB,YAClC,eAAK,KAAK,EAAC,WAAW,aACpB,aAAI,KAAK,EAAC,iBAAiB,2CAAgC,EAC1D,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACtC,cAAK,KAAK,EAAC,sBAAsB,4CAAkC,CACpE,CAAC,CAAC,CAAC,CACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACjC,eAAK,KAAK,EAAC,MAAM,aACf,cAAK,KAAK,EAAC,aAAa,YAAE,CAAC,CAAC,KAAK,GAAO,EACxC,eAAK,KAAK,EAAC,0CAA0C,aAClD,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,qBAAqB,IACnE,EACL,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACtB,cAAK,KAAK,EAAC,iCAAiC,4CAAkC,CAC/E,CAAC,CAAC,CAAC,CACF,aAAI,KAAK,EAAC,0BAA0B,YACjC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,cAAI,KAAK,EAAC,MAAM,aACd,yBAAO,CAAC,CAAC,MAAM,GAAQ,EACvB,gBAAM,KAAK,EAAC,gBAAgB,kBAAG,CAAC,CAAC,IAAI,IAAQ,EAC5C,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAM,KAAK,EAAC,yBAAyB,YAAE,CAAC,CAAC,IAAI,GAAQ,CAAC,CAAC,CAAC,IAAI,IACnE,CACN,CAAC,GACC,CACN,IACG,CACP,CAAC,CACH,IACG,GACF,GACF,IACF,CACP,EAGA,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CACpC,eAAK,KAAK,EAAC,yBAAyB,EAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAC,mBAAmB,aACvE,eAAK,KAAK,EAAC,kBAAkB,aAC3B,aAAI,KAAK,EAAC,iBAAiB,yBAAc,EACzC,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,WAAW,qBAAiB,WAAW,GAAU,IACzE,EACN,cAAK,KAAK,EAAC,gBAAgB,YACzB,gBACE,EAAE,EAAC,kBAAkB,aACZ,GAAG,OAAO,SAAS,WAAW,CAAC,EAAE,aAAa,eAC7C,UAAU,aACZ,WAAW,aAEnB,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,sBAAc,EACvC,gBAAO,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,WAAW,EAAC,eAAe,EAAC,QAAQ,SAAG,IACxF,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,uCAA+B,EACxD,mBAAU,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAE,CAAC,GAAa,IAClE,EACN,cAAK,KAAK,EAAC,2BAA2B,EAAC,EAAE,EAAC,mBAAmB,GAAO,EACpE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,uBAAuB,4BAAqB,EACxE,YAAG,KAAK,EAAC,gCAAgC,kEAAsD,IAC1F,GACH,IACF,CACP,CAAC,CAAC,CAAC,IAAI,EAGP,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CACpC,eAAK,KAAK,EAAC,yBAAyB,EAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAC,oBAAoB,EAAC,KAAK,EAAC,8BAA8B,aAC7G,eAAK,KAAK,EAAC,kBAAkB,aAC3B,aAAI,KAAK,EAAC,iBAAiB,0BAAe,EAC1C,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,WAAW,qBAAiB,WAAW,GAAU,IACzE,EACN,cAAK,KAAK,EAAC,gBAAgB,YACzB,gBAAM,EAAE,EAAC,mBAAmB,eAAW,UAAU,aAAS,WAAW,aACnE,gBAAO,IAAI,EAAC,QAAQ,EAAC,IAAI,EAAC,QAAQ,GAAG,EACrC,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,sBAAc,EACvC,gBAAO,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,OAAO,EAAC,QAAQ,SAAG,IAC5D,EACN,eAAK,KAAK,EAAC,MAAM,aACf,gBAAO,KAAK,EAAC,YAAY,4BAAoB,EAC7C,mBAAU,KAAK,EAAC,cAAc,EAAC,IAAI,EAAC,aAAa,EAAC,IAAI,EAAE,CAAC,GAAa,IAClE,EAEN,aAAI,KAAK,EAAC,WAAW,kCAAuB,EAC5C,YAAG,KAAK,EAAC,sBAAsB,sEAA0D,EAExF,IAAI,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CACpG,cAAK,KAAK,EAAC,kCAAkC,uIAEvC,CACP,CAAC,CAAC,CAAC,CACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACjC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAC5B,eAAK,KAAK,EAAC,MAAM,aACf,cAAK,KAAK,EAAC,mBAAmB,YAAE,CAAC,CAAC,KAAK,GAAO,EAC9C,cAAK,KAAK,EAAC,kBAAkB,YAC3B,iBAAO,KAAK,EAAC,kCAAkC,aAC7C,0BACE,yBACE,aAAI,KAAK,EAAC,OAAO,qBAAU,EAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAI,KAAK,EAAC,mBAAmB,YAAE,CAAC,GAAM,CAAC,CAAC,IAC1D,GACC,EACR,0BACG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,yBACE,aAAI,KAAK,EAAC,sBAAsB,YAAE,CAAC,CAAC,MAAM,GAAM,EAC/C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAClB,aAAI,KAAK,EAAC,aAAa,YACrB,gBACE,IAAI,EAAC,UAAU,EACf,KAAK,EAAC,kBAAkB,EACxB,IAAI,EAAC,OAAO,EACZ,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,mBACzB,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,GAChD,GACC,CACN,CAAC,IACC,CACN,CAAC,GACI,IACF,GACJ,IACF,CACP,CACF,CAAC,CACH,EAED,cAAK,KAAK,EAAC,2BAA2B,EAAC,EAAE,EAAC,oBAAoB,GAAO,EACrE,iBAAQ,IAAI,EAAC,QAAQ,EAAC,KAAK,EAAC,uBAAuB,0BAAmB,IACjE,GACH,IACF,CACP,CAAC,CAAC,CAAC,IAAI,EAER,2BAAS,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,GAAU,IACnE,CACP,CAAC;AACJ,CAAC"}

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/index.d.ts ADDED Viewed

@@ -0,0 +1,96 @@
+import * as av from "anyvali";
+import type { Infer } from "anyvali";
+import { type ApiAuthRequirement, type CacheHints } from "@betterportal/framework";
+export declare const QuerySchema: av.ObjectSchema<{
+    appId: av.OptionalSchema<av.StringSchema>;
+}>;
+export declare const HeadersSchema: av.ObjectSchema<{}>;
+export declare const RequestSchema: av.ObjectSchema<{}>;
+export declare const ResponseSchema: av.ObjectSchema<{
+    title: av.StringSchema;
+    apps: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        tenantId: av.StringSchema;
+        title: av.StringSchema;
+    }>>;
+    selectedAppId: av.OptionalSchema<av.StringSchema>;
+    selectedTenantId: av.OptionalSchema<av.StringSchema>;
+    authConfigured: av.BoolSchema;
+    servicePermissions: av.ArraySchema<av.ObjectSchema<{
+        serviceId: av.StringSchema;
+        title: av.StringSchema;
+        hostname: av.StringSchema;
+        manifestVersion: av.OptionalSchema<av.StringSchema>;
+        views: av.ArraySchema<av.ObjectSchema<{
+            viewId: av.StringSchema;
+            path: av.StringSchema;
+            methods: av.ArraySchema<av.StringSchema>;
+            role: av.OptionalSchema<av.StringSchema>;
+            requiredPermissions: av.ArraySchema<av.ObjectSchema<{
+                serviceId: av.StringSchema;
+                viewId: av.StringSchema;
+                permissions: av.ArraySchema<av.StringSchema>;
+            }>>;
+        }>>;
+    }>>;
+    currentRoles: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.OptionalSchema<av.StringSchema>;
+        permissions: av.ArraySchema<av.ObjectSchema<{
+            serviceId: av.StringSchema;
+            viewId: av.StringSchema;
+            permissions: av.ArraySchema<av.EnumSchema<readonly ["read", "create", "update", "delete"]>>;
+        }>>;
+    }>>;
+    adminApiBase: av.StringSchema;
+    serviceBaseUrl: av.OptionalSchema<av.StringSchema>;
+}>;
+export type ResponseData = Infer<typeof ResponseSchema>;
+export declare const title = "Permission Manager";
+export declare const description = "Define role -> permission grants per app. Services advertise per-view permission requirements via their manifest.";
+export declare const auth: ApiAuthRequirement;
+export declare const cacheHints: CacheHints;
+export declare const handleGet: import("@betterportal/framework").RouteHandler<Record<string, string>, {
+    appId?: string | undefined;
+}, Record<string, string>, Record<string, unknown>, {
+    title: string;
+    apps: {
+        id: string;
+        tenantId: string;
+        title: string;
+    }[];
+    authConfigured: boolean;
+    servicePermissions: {
+        serviceId: string;
+        title: string;
+        hostname: string;
+        views: {
+            viewId: string;
+            path: string;
+            methods: string[];
+            requiredPermissions: {
+                serviceId: string;
+                viewId: string;
+                permissions: string[];
+            }[];
+            role?: string | undefined;
+        }[];
+        manifestVersion?: string | undefined;
+    }[];
+    currentRoles: {
+        id: string;
+        title: string;
+        permissions: {
+            serviceId: string;
+            viewId: string;
+            permissions: ("read" | "create" | "update" | "delete")[];
+        }[];
+        description?: string | undefined;
+    }[];
+    adminApiBase: string;
+    selectedAppId?: string | undefined;
+    selectedTenantId?: string | undefined;
+    serviceBaseUrl?: string | undefined;
+}, unknown, Record<string, unknown>>;
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/index.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-config-manager/bp-routes/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,UAAU,EAChB,MAAM,yBAAyB,CAAC;AA2CjC,eAAO,MAAM,WAAW;;EAEI,CAAC;AAE7B,eAAO,MAAM,aAAa,qBAA0C,CAAC;AAErE,eAAO,MAAM,aAAa,qBAA0C,CAAC;AAErE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUC,CAAC;AAC7B,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAExD,eAAO,MAAM,KAAK,uBAAuB,CAAC;AAC1C,eAAO,MAAM,WAAW,sHAAsH,CAAC;AAE/I,eAAO,MAAM,IAAI,EAAE,kBAKlB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,UAGxB,CAAC;AAEF,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oCAarB,CAAC"}

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/index.js ADDED Viewed

@@ -0,0 +1,78 @@
+import * as av from "anyvali";
+import { createHandler } from "@betterportal/framework";
+const PermissionActionSchema = av.enum_(["read", "create", "update", "delete"]);
+const ViewWithPermsSchema = av.object({
+    viewId: av.string().minLength(1),
+    path: av.string().minLength(1),
+    methods: av.array(av.string()).default([]),
+    role: av.optional(av.string()),
+    requiredPermissions: av.array(av.object({
+        serviceId: av.string().minLength(1),
+        viewId: av.string().minLength(1),
+        permissions: av.array(av.string())
+    }, { unknownKeys: "strip" })).default([])
+}, { unknownKeys: "strip" });
+const ServiceWithViewsSchema = av.object({
+    serviceId: av.string().minLength(1),
+    title: av.string().minLength(1),
+    hostname: av.string(),
+    manifestVersion: av.optional(av.string()),
+    views: av.array(ViewWithPermsSchema).default([])
+}, { unknownKeys: "strip" });
+const RolePermissionGrantSchema = av.object({
+    serviceId: av.string().minLength(1),
+    viewId: av.string().minLength(1),
+    permissions: av.array(PermissionActionSchema).minItems(1)
+}, { unknownKeys: "strip" });
+const AppRoleSchema = av.object({
+    id: av.string().minLength(1),
+    title: av.string().minLength(1),
+    description: av.optional(av.string()),
+    permissions: av.array(RolePermissionGrantSchema).default([])
+}, { unknownKeys: "strip" });
+const AppSummarySchema = av.object({
+    id: av.string().minLength(1),
+    tenantId: av.string().minLength(1),
+    title: av.string().minLength(1)
+}, { unknownKeys: "strip" });
+export const QuerySchema = av.object({
+    appId: av.optional(av.string().minLength(1))
+}, { unknownKeys: "strip" });
+export const HeadersSchema = av.object({}, { unknownKeys: "strip" });
+export const RequestSchema = av.object({}, { unknownKeys: "strip" });
+export const ResponseSchema = av.object({
+    title: av.string().minLength(1),
+    apps: av.array(AppSummarySchema).default([]),
+    selectedAppId: av.optional(av.string()),
+    selectedTenantId: av.optional(av.string()),
+    authConfigured: av.bool().default(false),
+    servicePermissions: av.array(ServiceWithViewsSchema).default([]),
+    currentRoles: av.array(AppRoleSchema).default([]),
+    adminApiBase: av.string().default("/.well-known/bp/admin"),
+    serviceBaseUrl: av.optional(av.string())
+}, { unknownKeys: "strip" });
+export const title = "Permission Manager";
+export const description = "Define role -> permission grants per app. Services advertise per-view permission requirements via their manifest.";
+export const auth = {
+    required: true,
+    permissions: [
+        { serviceId: "service.betterportal.config-manager", viewId: "auth.index", permissions: ["read", "create", "update", "delete"] }
+    ]
+};
+export const cacheHints = {
+    ttlSeconds: 0,
+    varyBy: ["accept", "origin"]
+};
+export const handleGet = createHandler({ response: ResponseSchema, query: QuerySchema }, (ctx) => {
+    if (ctx.responseModel)
+        return ctx.responseModel;
+    return {
+        title: "Permission Manager",
+        apps: [],
+        authConfigured: false,
+        servicePermissions: [],
+        currentRoles: [],
+        adminApiBase: "/.well-known/bp/admin"
+    };
+});
+//# sourceMappingURL=index.js.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/auth/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/plugins/service-betterportal-config-manager/bp-routes/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EACL,aAAa,EAGd,MAAM,yBAAyB,CAAC;AAEjC,MAAM,sBAAsB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC,CAAC;AAEzF,MAAM,mBAAmB,GAAG,EAAE,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC9B,mBAAmB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;QACtC,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAChC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;KACnC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,sBAAsB,GAAG,EAAE,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE;IACrB,eAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACzC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,yBAAyB,GAAG,EAAE,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;CAC1D,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACrC,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7D,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;CAChC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CAC7C,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7B,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACvC,gBAAgB,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC1C,cAAc,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,YAAY,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC1D,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;CACzC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,KAAK,GAAG,oBAAoB,CAAC;AAC1C,MAAM,CAAC,MAAM,WAAW,GAAG,mHAAmH,CAAC;AAE/I,MAAM,CAAC,MAAM,IAAI,GAAuB;IACtC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE;QACX,EAAE,SAAS,EAAE,qCAAqC,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,MAAM,EAAC,QAAQ,EAAC,QAAQ,EAAC,QAAQ,CAAC,EAAE;KAC7H;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAe;IACpC,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CACpC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,EAChD,CAAC,GAAG,EAAE,EAAE;IACN,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,GAAG,CAAC,aAA6B,CAAC;IAChE,OAAO;QACL,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,EAAE;QACR,cAAc,EAAE,KAAK;QACrB,kBAAkB,EAAE,EAAE;QACtB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,uBAAuB;KACtC,CAAC;AACJ,CAAC,CACF,CAAC"}

package/lib/plugins/service-betterportal-config-manager/bp-routes/config/_theme.bootstrap1/index.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { HtmlRenderable } from "@betterportal/framework";
+import type { ResponseData } from "../index.js";
+export declare function render(data: ResponseData): HtmlRenderable;
+//# sourceMappingURL=index.d.ts.map

package/lib/plugins/service-betterportal-config-manager/bp-routes/config/_theme.bootstrap1/index.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/plugins/service-betterportal-config-manager/bp-routes/config/_theme.bootstrap1/index.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA0DhD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CA+DzD"}