@burdenoff/microfe-admin 2026.511.1

package/dist/admin/constants/index.js

@@ -0,0 +1,90 @@
+//#region src/admin/constants/index.ts
+var e = {
+	active: {
+		label: "Active",
+		color: "bg-success/10 text-success border-success/20"
+	},
+	suspended: {
+		label: "Suspended",
+		color: "bg-destructive/10 text-destructive border-destructive/20"
+	},
+	trial: {
+		label: "Trial",
+		color: "bg-warning/10 text-warning border-warning/20"
+	},
+	deleted: {
+		label: "Deleted",
+		color: "bg-muted text-muted-foreground border-muted"
+	},
+	pending: {
+		label: "Pending",
+		color: "bg-info/10 text-info border-info/20"
+	},
+	provisioning: {
+		label: "Provisioning",
+		color: "bg-amber-100 text-amber-700 border-amber-200"
+	}
+}, t = {
+	active: {
+		label: "Active",
+		color: "bg-success/10 text-success border-success/20"
+	},
+	inactive: {
+		label: "Inactive",
+		color: "bg-muted text-muted-foreground border-muted"
+	},
+	blocked: {
+		label: "Blocked",
+		color: "bg-destructive/10 text-destructive border-destructive/20"
+	},
+	pending: {
+		label: "Pending",
+		color: "bg-warning/10 text-warning border-warning/20"
+	}
+}, n = {
+	healthy: {
+		label: "Healthy",
+		color: "bg-success/10 text-success border-success/20"
+	},
+	degraded: {
+		label: "Degraded",
+		color: "bg-warning/10 text-warning border-warning/20"
+	},
+	down: {
+		label: "Down",
+		color: "bg-destructive/10 text-destructive border-destructive/20"
+	},
+	unknown: {
+		label: "Unknown",
+		color: "bg-muted text-muted-foreground border-muted"
+	}
+}, r = {
+	pending: {
+		label: "Pending",
+		color: "bg-muted text-muted-foreground border-muted"
+	},
+	running: {
+		label: "Running",
+		color: "bg-info/10 text-info border-info/20"
+	},
+	in_progress: {
+		label: "In Progress",
+		color: "bg-info/10 text-info border-info/20"
+	},
+	success: {
+		label: "Success",
+		color: "bg-success/10 text-success border-success/20"
+	},
+	failed: {
+		label: "Failed",
+		color: "bg-destructive/10 text-destructive border-destructive/20"
+	},
+	rolled_back: {
+		label: "Rolled Back",
+		color: "bg-warning/10 text-warning border-warning/20"
+	}
+};
+//#endregion
+export { r as DEPLOYMENT_STATUS_CONFIG, n as HEALTH_STATUS_CONFIG, e as TENANT_STATUS_CONFIG, t as USER_STATUS_CONFIG };
+
+//# sourceMappingURL=index.js.map

package/dist/admin/constants/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/admin/constants/index.ts"],"sourcesContent":["import type {\n  TenantStatus,\n  UserStatus,\n  SubscriptionStatus,\n  TicketStatus,\n  TicketPriority,\n  HealthStatus,\n  DeploymentStatus,\n  CloudProvider,\n} from '../types';\n\n/**\n * Tenant status labels and colors\n */\nexport const TENANT_STATUS_CONFIG: Record<TenantStatus, { label: string; color: string }> = {\n  active: { label: 'Active', color: 'bg-success/10 text-success border-success/20' },\n  suspended: {\n    label: 'Suspended',\n    color: 'bg-destructive/10 text-destructive border-destructive/20',\n  },\n  trial: { label: 'Trial', color: 'bg-warning/10 text-warning border-warning/20' },\n  deleted: { label: 'Deleted', color: 'bg-muted text-muted-foreground border-muted' },\n  pending: { label: 'Pending', color: 'bg-info/10 text-info border-info/20' },\n  provisioning: { label: 'Provisioning', color: 'bg-amber-100 text-amber-700 border-amber-200' },\n};\n\n/**\n * User status labels and colors\n */\nexport const USER_STATUS_CONFIG: Record<UserStatus, { label: string; color: string }> = {\n  active: { label: 'Active', color: 'bg-success/10 text-success border-success/20' },\n  inactive: { label: 'Inactive', color: 'bg-muted text-muted-foreground border-muted' },\n  blocked: { label: 'Blocked', color: 'bg-destructive/10 text-destructive border-destructive/20' },\n  pending: { label: 'Pending', color: 'bg-warning/10 text-warning border-warning/20' },\n};\n\n/**\n * Subscription status labels and colors\n */\nexport const SUBSCRIPTION_STATUS_CONFIG: Record<\n  SubscriptionStatus,\n  { label: string; color: string }\n> = {\n  active: { label: 'Active', color: 'bg-success/10 text-success border-success/20' },\n  canceled: { label: 'Canceled', color: 'bg-muted text-muted-foreground border-muted' },\n  past_due: {\n    label: 'Past Due',\n    color: 'bg-destructive/10 text-destructive border-destructive/20',\n  },\n  trialing: { label: 'Trialing', color: 'bg-info/10 text-info border-info/20' },\n  paused: { label: 'Paused', color: 'bg-warning/10 text-warning border-warning/20' },\n};\n\n/**\n * Ticket status labels and colors\n */\nexport const TICKET_STATUS_CONFIG: Record<TicketStatus, { label: string; color: string }> = {\n  open: { label: 'Open', color: 'bg-info/10 text-info border-info/20' },\n  in_progress: { label: 'In Progress', color: 'bg-warning/10 text-warning border-warning/20' },\n  resolved: { label: 'Resolved', color: 'bg-success/10 text-success border-success/20' },\n  closed: { label: 'Closed', color: 'bg-muted text-muted-foreground border-muted' },\n};\n\n/**\n * Ticket priority labels and colors\n */\nexport const TICKET_PRIORITY_CONFIG: Record<TicketPriority, { label: string; color: string }> = {\n  low: { label: 'Low', color: 'bg-muted text-muted-foreground border-muted' },\n  medium: { label: 'Medium', color: 'bg-info/10 text-info border-info/20' },\n  high: { label: 'High', color: 'bg-warning/10 text-warning border-warning/20' },\n  critical: {\n    label: 'Critical',\n    color: 'bg-destructive/10 text-destructive border-destructive/20',\n  },\n};\n\n/**\n * Health status labels and colors\n */\nexport const HEALTH_STATUS_CONFIG: Record<HealthStatus, { label: string; color: string }> = {\n  healthy: { label: 'Healthy', color: 'bg-success/10 text-success border-success/20' },\n  degraded: { label: 'Degraded', color: 'bg-warning/10 text-warning border-warning/20' },\n  down: { label: 'Down', color: 'bg-destructive/10 text-destructive border-destructive/20' },\n  unknown: { label: 'Unknown', color: 'bg-muted text-muted-foreground border-muted' },\n};\n\n/**\n * Deployment status labels and colors\n */\nexport const DEPLOYMENT_STATUS_CONFIG: Record<DeploymentStatus, { label: string; color: string }> =\n  {\n    pending: { label: 'Pending', color: 'bg-muted text-muted-foreground border-muted' },\n    running: { label: 'Running', color: 'bg-info/10 text-info border-info/20' },\n    in_progress: { label: 'In Progress', color: 'bg-info/10 text-info border-info/20' },\n    success: { label: 'Success', color: 'bg-success/10 text-success border-success/20' },\n    failed: { label: 'Failed', color: 'bg-destructive/10 text-destructive border-destructive/20' },\n    rolled_back: { label: 'Rolled Back', color: 'bg-warning/10 text-warning border-warning/20' },\n  };\n\n/**\n * Cloud provider labels and colors\n */\nexport const CLOUD_PROVIDER_CONFIG: Record<\n  CloudProvider,\n  { label: string; color: string; icon: string }\n> = {\n  aws: {\n    label: 'AWS',\n    color: 'bg-orange-500/10 text-orange-500 border-orange-500/20',\n    icon: 'aws',\n  },\n  azure: {\n    label: 'Azure',\n    color: 'bg-blue-500/10 text-blue-500 border-blue-500/20',\n    icon: 'azure',\n  },\n  gcp: { label: 'GCP', color: 'bg-red-500/10 text-red-500 border-red-500/20', icon: 'gcp' },\n  digitalocean: {\n    label: 'DigitalOcean',\n    color: 'bg-cyan-500/10 text-cyan-500 border-cyan-500/20',\n    icon: 'do',\n  },\n};\n\n/**\n * Chart colors using semantic tokens\n */\nexport const CHART_COLORS = {\n  primary: 'hsl(var(--chart-1))',\n  secondary: 'hsl(var(--chart-2))',\n  tertiary: 'hsl(var(--chart-3))',\n  quaternary: 'hsl(var(--chart-4))',\n  quinary: 'hsl(var(--chart-5))',\n};\n\n/**\n * Default pagination\n */\nexport const DEFAULT_PAGE_SIZE = 20;\nexport const PAGE_SIZE_OPTIONS = [10, 20, 50, 100];\n"],"mappings":";AAcA,IAAa,IAA+E;CAC1F,QAAQ;EAAE,OAAO;EAAU,OAAO;EAAgD;CAClF,WAAW;EACT,OAAO;EACP,OAAO;EACR;CACD,OAAO;EAAE,OAAO;EAAS,OAAO;EAAgD;CAChF,SAAS;EAAE,OAAO;EAAW,OAAO;EAA+C;CACnF,SAAS;EAAE,OAAO;EAAW,OAAO;EAAuC;CAC3E,cAAc;EAAE,OAAO;EAAgB,OAAO;EAAgD;CAC/F,EAKY,IAA2E;CACtF,QAAQ;EAAE,OAAO;EAAU,OAAO;EAAgD;CAClF,UAAU;EAAE,OAAO;EAAY,OAAO;EAA+C;CACrF,SAAS;EAAE,OAAO;EAAW,OAAO;EAA4D;CAChG,SAAS;EAAE,OAAO;EAAW,OAAO;EAAgD;CACrF,EA6CY,IAA+E;CAC1F,SAAS;EAAE,OAAO;EAAW,OAAO;EAAgD;CACpF,UAAU;EAAE,OAAO;EAAY,OAAO;EAAgD;CACtF,MAAM;EAAE,OAAO;EAAQ,OAAO;EAA4D;CAC1F,SAAS;EAAE,OAAO;EAAW,OAAO;EAA+C;CACpF,EAKY,IACX;CACE,SAAS;EAAE,OAAO;EAAW,OAAO;EAA+C;CACnF,SAAS;EAAE,OAAO;EAAW,OAAO;EAAuC;CAC3E,aAAa;EAAE,OAAO;EAAe,OAAO;EAAuC;CACnF,SAAS;EAAE,OAAO;EAAW,OAAO;EAAgD;CACpF,QAAQ;EAAE,OAAO;EAAU,OAAO;EAA4D;CAC9F,aAAa;EAAE,OAAO;EAAe,OAAO;EAAgD;CAC7F"}

package/dist/admin/constants/permissions.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Admin Console Permission Constants
+ *
+ * Maps to resource types and actions in global-rbac-svc seed.
+ * The admin console uses global-layer resources: tenant, user, billing,
+ * notification, rbac.
+ */
+export declare const ADMIN_PERMISSIONS: {
+    readonly TENANT_READ: "tenant:read";
+    readonly TENANT_WRITE: "tenant:write";
+    readonly TENANT_DELETE: "tenant:delete";
+    readonly TENANT_ADMIN: "tenant:admin";
+    readonly USER_READ: "user:read";
+    readonly USER_UPDATE: "user:update";
+    readonly USER_DELETE: "user:delete";
+    readonly USER_ADMIN: "user:admin";
+    readonly BILLING_READ: "billing:read";
+    readonly NOTIFICATION_READ: "notification:read";
+    readonly RBAC_AUDIT_READ: "rbac:audit:read";
+    readonly WORKSPACE_ADMIN: "workspace:admin";
+    readonly PRODUCT_READ: "product:read";
+    readonly PRODUCT_WRITE: "product:write";
+    readonly WAITLIST_READ: "newsletter-waitlist:read";
+    readonly WAITLIST_MANAGE: "newsletter-waitlist:approve";
+};
+export type AdminPermission = (typeof ADMIN_PERMISSIONS)[keyof typeof ADMIN_PERMISSIONS];
+//# sourceMappingURL=permissions.d.ts.map

package/dist/admin/constants/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/admin/constants/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;CAgCpB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/admin/constants/permissions.js

@@ -0,0 +1,23 @@
+//#region src/admin/constants/permissions.ts
+var e = {
+	TENANT_READ: "tenant:read",
+	TENANT_WRITE: "tenant:write",
+	TENANT_DELETE: "tenant:delete",
+	TENANT_ADMIN: "tenant:admin",
+	USER_READ: "user:read",
+	USER_UPDATE: "user:update",
+	USER_DELETE: "user:delete",
+	USER_ADMIN: "user:admin",
+	BILLING_READ: "billing:read",
+	NOTIFICATION_READ: "notification:read",
+	RBAC_AUDIT_READ: "rbac:audit:read",
+	WORKSPACE_ADMIN: "workspace:admin",
+	PRODUCT_READ: "product:read",
+	PRODUCT_WRITE: "product:write",
+	WAITLIST_READ: "newsletter-waitlist:read",
+	WAITLIST_MANAGE: "newsletter-waitlist:approve"
+};
+//#endregion
+export { e as ADMIN_PERMISSIONS };
+
+//# sourceMappingURL=permissions.js.map

package/dist/admin/constants/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","names":[],"sources":["../../../src/admin/constants/permissions.ts"],"sourcesContent":["/**\n * Admin Console Permission Constants\n *\n * Maps to resource types and actions in global-rbac-svc seed.\n * The admin console uses global-layer resources: tenant, user, billing,\n * notification, rbac.\n */\n\nexport const ADMIN_PERMISSIONS = {\n  // Tenant management\n  TENANT_READ: 'tenant:read',\n  TENANT_WRITE: 'tenant:write',\n  TENANT_DELETE: 'tenant:delete',\n  TENANT_ADMIN: 'tenant:admin',\n\n  // User management\n  USER_READ: 'user:read',\n  USER_UPDATE: 'user:update',\n  USER_DELETE: 'user:delete',\n  USER_ADMIN: 'user:admin',\n\n  // Billing\n  BILLING_READ: 'billing:read',\n\n  // Notifications / Communications\n  NOTIFICATION_READ: 'notification:read',\n\n  // Audit logs\n  RBAC_AUDIT_READ: 'rbac:audit:read',\n\n  // Workspace / Sandbox\n  WORKSPACE_ADMIN: 'workspace:admin',\n\n  // Product management\n  PRODUCT_READ: 'product:read',\n  PRODUCT_WRITE: 'product:write',\n\n  // Waitlist management\n  WAITLIST_READ: 'newsletter-waitlist:read',\n  WAITLIST_MANAGE: 'newsletter-waitlist:approve',\n} as const;\n\nexport type AdminPermission = (typeof ADMIN_PERMISSIONS)[keyof typeof ADMIN_PERMISSIONS];\n"],"mappings":";AAQA,IAAa,IAAoB;CAE/B,aAAa;CACb,cAAc;CACd,eAAe;CACf,cAAc;CAGd,WAAW;CACX,aAAa;CACb,aAAa;CACb,YAAY;CAGZ,cAAc;CAGd,mBAAmB;CAGnB,iBAAiB;CAGjB,iBAAiB;CAGjB,cAAc;CACd,eAAe;CAGf,eAAe;CACf,iBAAiB;CAClB"}

package/dist/admin/hooks/useAdminPermissions.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Hook for admin console RBAC permissions.
+ *
+ * SUPER_ADMIN role / actor type (verified from profile or JWT) bypasses all
+ * permission checks.
+ * Other users require granular permissions from the global RBAC service.
+ */
+export declare function useAdminPermissions(): {
+    canViewTenants: boolean;
+    canManageTenants: boolean;
+    canDeleteTenants: boolean;
+    isTenantAdmin: boolean;
+    canViewUsers: boolean;
+    canUpdateUsers: boolean;
+    canDeleteUsers: boolean;
+    isUserAdmin: boolean;
+    canViewBilling: boolean;
+    canViewCommunications: boolean;
+    canViewAuditLogs: boolean;
+    canManageSettings: boolean;
+    canViewSRE: boolean;
+    canManageSandbox: boolean;
+    canViewProducts: boolean;
+    canManageProducts: boolean;
+    canViewWaitlist: boolean;
+    canManageWaitlist: boolean;
+    canViewDashboard: boolean;
+    isLoading: boolean;
+};
+//# sourceMappingURL=useAdminPermissions.d.ts.map

package/dist/admin/hooks/useAdminPermissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAdminPermissions.d.ts","sourceRoot":"","sources":["../../../src/admin/hooks/useAdminPermissions.ts"],"names":[],"mappings":"AA+BA;;;;;;GAMG;AACH,wBAAgB,mBAAmB;;;;;;;;;;;;;;;;;;;;;EA8ElC"}

package/dist/admin/hooks/useAdminPermissions.js

@@ -0,0 +1,56 @@
+import { ADMIN_PERMISSIONS as e } from "../constants/permissions.js";
+import { usePermissions as t } from "@burdenoff/fe-libs/shared/providers/shell";
+import { useAuth as n } from "@burdenoff/fe-libs/shared/providers/shell/AuthProvider";
+//#region src/admin/hooks/useAdminPermissions.ts
+function r(e) {
+	if (!e) return {
+		role: null,
+		actorType: null
+	};
+	let t = e.split(".");
+	if (t.length !== 3) return {
+		role: null,
+		actorType: null
+	};
+	try {
+		let e = t[1].replace(/-/g, "+").replace(/_/g, "/"), n = e.padEnd(Math.ceil(e.length / 4) * 4, "="), r = JSON.parse(atob(n));
+		return {
+			role: typeof r.role == "string" ? r.role : null,
+			actorType: typeof r.actor_type == "string" ? r.actor_type : typeof r.actorType == "string" ? r.actorType : null
+		};
+	} catch {
+		return {
+			role: null,
+			actorType: null
+		};
+	}
+}
+function i() {
+	let { hasPermission: i, isLoading: a } = t(), o = n(), s = r(o.tokens?.accessToken), c = typeof o.user?.actorType == "string" ? o.user.actorType : typeof o.user?.actor_type == "string" ? o.user.actor_type : null, l = o.user?.role === "SUPER_ADMIN" || o.user?.role === "super_admin" || c === "super_admin" || s.role === "SUPER_ADMIN" || s.role === "super_admin" || s.actorType === "super_admin", u = (e) => l || i(e), d = l || i(e.TENANT_READ) || i(e.TENANT_ADMIN) || i(e.USER_READ) || i(e.USER_ADMIN) || i(e.BILLING_READ) || i(e.NOTIFICATION_READ) || i(e.RBAC_AUDIT_READ) || i(e.WORKSPACE_ADMIN);
+	return {
+		canViewTenants: u(e.TENANT_READ),
+		canManageTenants: u(e.TENANT_WRITE),
+		canDeleteTenants: u(e.TENANT_DELETE),
+		isTenantAdmin: u(e.TENANT_ADMIN),
+		canViewUsers: u(e.USER_READ),
+		canUpdateUsers: u(e.USER_UPDATE),
+		canDeleteUsers: u(e.USER_DELETE),
+		isUserAdmin: u(e.USER_ADMIN),
+		canViewBilling: u(e.BILLING_READ),
+		canViewCommunications: u(e.NOTIFICATION_READ),
+		canViewAuditLogs: u(e.RBAC_AUDIT_READ),
+		canManageSettings: u(e.TENANT_ADMIN),
+		canViewSRE: u(e.TENANT_ADMIN),
+		canManageSandbox: u(e.WORKSPACE_ADMIN),
+		canViewProducts: d,
+		canManageProducts: u(e.PRODUCT_WRITE),
+		canViewWaitlist: d,
+		canManageWaitlist: l || i(e.WAITLIST_MANAGE) || i(e.TENANT_ADMIN),
+		canViewDashboard: d,
+		isLoading: l ? !1 : a
+	};
+}
+//#endregion
+export { i as useAdminPermissions };
+
+//# sourceMappingURL=useAdminPermissions.js.map

package/dist/admin/hooks/useAdminPermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAdminPermissions.js","names":[],"sources":["../../../src/admin/hooks/useAdminPermissions.ts"],"sourcesContent":["import { usePermissions } from '@burdenoff/fe-libs/shared/providers/shell';\nimport { useAuth } from '@burdenoff/fe-libs/shared/providers/shell/AuthProvider';\nimport { ADMIN_PERMISSIONS } from '../constants/permissions';\n\ninterface JwtAccessClaims {\n  role: string | null;\n  actorType: string | null;\n}\n\nfunction decodeJwtAccessClaims(token: string | undefined): JwtAccessClaims {\n  if (!token) return { role: null, actorType: null };\n  const parts = token.split('.');\n  if (parts.length !== 3) return { role: null, actorType: null };\n  try {\n    const base64 = parts[1].replace(/-/g, '+').replace(/_/g, '/');\n    const normalized = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n    const payload = JSON.parse(atob(normalized)) as Record<string, unknown>;\n    return {\n      role: typeof payload.role === 'string' ? payload.role : null,\n      actorType:\n        typeof payload.actor_type === 'string'\n          ? payload.actor_type\n          : typeof payload.actorType === 'string'\n            ? payload.actorType\n            : null,\n    };\n  } catch {\n    return { role: null, actorType: null };\n  }\n}\n\n/**\n * Hook for admin console RBAC permissions.\n *\n * SUPER_ADMIN role / actor type (verified from profile or JWT) bypasses all\n * permission checks.\n * Other users require granular permissions from the global RBAC service.\n */\nexport function useAdminPermissions() {\n  const { hasPermission, isLoading } = usePermissions();\n  const auth = useAuth();\n\n  const jwtClaims = decodeJwtAccessClaims(auth.tokens?.accessToken);\n  const userActorType =\n    typeof auth.user?.actorType === 'string'\n      ? auth.user.actorType\n      : typeof auth.user?.actor_type === 'string'\n        ? auth.user.actor_type\n        : null;\n  const isSuperAdmin =\n    auth.user?.role === 'SUPER_ADMIN' ||\n    auth.user?.role === 'super_admin' ||\n    userActorType === 'super_admin' ||\n    jwtClaims.role === 'SUPER_ADMIN' ||\n    jwtClaims.role === 'super_admin' ||\n    jwtClaims.actorType === 'super_admin';\n\n  const check = (permission: string) => isSuperAdmin || hasPermission(permission);\n\n  // True if the user holds any admin-level permission (read or admin grants)\n  const hasAnyAdminAccess =\n    isSuperAdmin ||\n    hasPermission(ADMIN_PERMISSIONS.TENANT_READ) ||\n    hasPermission(ADMIN_PERMISSIONS.TENANT_ADMIN) ||\n    hasPermission(ADMIN_PERMISSIONS.USER_READ) ||\n    hasPermission(ADMIN_PERMISSIONS.USER_ADMIN) ||\n    hasPermission(ADMIN_PERMISSIONS.BILLING_READ) ||\n    hasPermission(ADMIN_PERMISSIONS.NOTIFICATION_READ) ||\n    hasPermission(ADMIN_PERMISSIONS.RBAC_AUDIT_READ) ||\n    hasPermission(ADMIN_PERMISSIONS.WORKSPACE_ADMIN);\n\n  return {\n    // Tenant management\n    canViewTenants: check(ADMIN_PERMISSIONS.TENANT_READ),\n    canManageTenants: check(ADMIN_PERMISSIONS.TENANT_WRITE),\n    canDeleteTenants: check(ADMIN_PERMISSIONS.TENANT_DELETE),\n    isTenantAdmin: check(ADMIN_PERMISSIONS.TENANT_ADMIN),\n\n    // User management\n    canViewUsers: check(ADMIN_PERMISSIONS.USER_READ),\n    canUpdateUsers: check(ADMIN_PERMISSIONS.USER_UPDATE),\n    canDeleteUsers: check(ADMIN_PERMISSIONS.USER_DELETE),\n    isUserAdmin: check(ADMIN_PERMISSIONS.USER_ADMIN),\n\n    // Billing\n    canViewBilling: check(ADMIN_PERMISSIONS.BILLING_READ),\n\n    // Communications\n    canViewCommunications: check(ADMIN_PERMISSIONS.NOTIFICATION_READ),\n\n    // Audit\n    canViewAuditLogs: check(ADMIN_PERMISSIONS.RBAC_AUDIT_READ),\n\n    // Platform settings / SRE\n    canManageSettings: check(ADMIN_PERMISSIONS.TENANT_ADMIN),\n    canViewSRE: check(ADMIN_PERMISSIONS.TENANT_ADMIN),\n\n    // Workspace / Sandbox\n    canManageSandbox: check(ADMIN_PERMISSIONS.WORKSPACE_ADMIN),\n\n    // Products\n    canViewProducts: hasAnyAdminAccess,\n    canManageProducts: check(ADMIN_PERMISSIONS.PRODUCT_WRITE),\n\n    // Waitlist\n    canViewWaitlist: hasAnyAdminAccess,\n    canManageWaitlist:\n      isSuperAdmin ||\n      hasPermission(ADMIN_PERMISSIONS.WAITLIST_MANAGE) ||\n      hasPermission(ADMIN_PERMISSIONS.TENANT_ADMIN),\n\n    // General pages — any admin role can access\n    canViewDashboard: hasAnyAdminAccess,\n\n    isLoading: isSuperAdmin ? false : isLoading,\n  };\n}\n"],"mappings":";;;;AASA,SAAS,EAAsB,GAA4C;AACzE,KAAI,CAAC,EAAO,QAAO;EAAE,MAAM;EAAM,WAAW;EAAM;CAClD,IAAM,IAAQ,EAAM,MAAM,IAAI;AAC9B,KAAI,EAAM,WAAW,EAAG,QAAO;EAAE,MAAM;EAAM,WAAW;EAAM;AAC9D,KAAI;EACF,IAAM,IAAS,EAAM,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,EACvD,IAAa,EAAO,OAAO,KAAK,KAAK,EAAO,SAAS,EAAE,GAAG,GAAG,IAAI,EACjE,IAAU,KAAK,MAAM,KAAK,EAAW,CAAC;AAC5C,SAAO;GACL,MAAM,OAAO,EAAQ,QAAS,WAAW,EAAQ,OAAO;GACxD,WACE,OAAO,EAAQ,cAAe,WAC1B,EAAQ,aACR,OAAO,EAAQ,aAAc,WAC3B,EAAQ,YACR;GACT;SACK;AACN,SAAO;GAAE,MAAM;GAAM,WAAW;GAAM;;;AAW1C,SAAgB,IAAsB;CACpC,IAAM,EAAE,kBAAe,iBAAc,GAAgB,EAC/C,IAAO,GAAS,EAEhB,IAAY,EAAsB,EAAK,QAAQ,YAAY,EAC3D,IACJ,OAAO,EAAK,MAAM,aAAc,WAC5B,EAAK,KAAK,YACV,OAAO,EAAK,MAAM,cAAe,WAC/B,EAAK,KAAK,aACV,MACF,IACJ,EAAK,MAAM,SAAS,iBACpB,EAAK,MAAM,SAAS,iBACpB,MAAkB,iBAClB,EAAU,SAAS,iBACnB,EAAU,SAAS,iBACnB,EAAU,cAAc,eAEpB,KAAS,MAAuB,KAAgB,EAAc,EAAW,EAGzE,IACJ,KACA,EAAc,EAAkB,YAAY,IAC5C,EAAc,EAAkB,aAAa,IAC7C,EAAc,EAAkB,UAAU,IAC1C,EAAc,EAAkB,WAAW,IAC3C,EAAc,EAAkB,aAAa,IAC7C,EAAc,EAAkB,kBAAkB,IAClD,EAAc,EAAkB,gBAAgB,IAChD,EAAc,EAAkB,gBAAgB;AAElD,QAAO;EAEL,gBAAgB,EAAM,EAAkB,YAAY;EACpD,kBAAkB,EAAM,EAAkB,aAAa;EACvD,kBAAkB,EAAM,EAAkB,cAAc;EACxD,eAAe,EAAM,EAAkB,aAAa;EAGpD,cAAc,EAAM,EAAkB,UAAU;EAChD,gBAAgB,EAAM,EAAkB,YAAY;EACpD,gBAAgB,EAAM,EAAkB,YAAY;EACpD,aAAa,EAAM,EAAkB,WAAW;EAGhD,gBAAgB,EAAM,EAAkB,aAAa;EAGrD,uBAAuB,EAAM,EAAkB,kBAAkB;EAGjE,kBAAkB,EAAM,EAAkB,gBAAgB;EAG1D,mBAAmB,EAAM,EAAkB,aAAa;EACxD,YAAY,EAAM,EAAkB,aAAa;EAGjD,kBAAkB,EAAM,EAAkB,gBAAgB;EAG1D,iBAAiB;EACjB,mBAAmB,EAAM,EAAkB,cAAc;EAGzD,iBAAiB;EACjB,mBACE,KACA,EAAc,EAAkB,gBAAgB,IAChD,EAAc,EAAkB,aAAa;EAG/C,kBAAkB;EAElB,WAAW,IAAe,KAAQ;EACnC"}

package/dist/admin/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Admin Console Microfrontend
+ *
+ * Provides a comprehensive platform administration interface
+ * for managing tenants, users, billing, support, and system health.
+ *
+ * @example
+ * ```tsx
+ * import { AdminRoot, type AdminRootProps } from '@burdenoff/microfe-admin';
+ *
+ * function App() {
+ *   const props: AdminRootProps = {
+ *     basePath: '/admin',
+ *     navigate: (path) => router.push(path),
+ *     currentUser: { id: '1', email: 'admin@example.com', role: 'PLATFORM_SUPERADMIN' },
+ *     tenantId: 'tenant-123',
+ *     apiGatewayUrl: 'https://api.example.com',
+ *     authToken: 'token',
+ *   };
+ *
+ *   return <AdminRoot {...props} />;
+ * }
+ * ```
+ */
+export { AdminRoot } from './AdminRoot';
+export type { AdminRootProps, AdminUser, AdminRole, AdminView, Tenant, TenantStatus, TenantSettings, User, UserStatus, Subscription, SubscriptionStatus, Invoice, InvoiceStatus, DashboardMetrics, Activity, NavItem, FooterItem, } from './types';
+export { useAdmin } from './providers/AdminProvider';
+export { useAdminStore } from './store/adminStore';
+export { TenantForm, UserForm, SubscriptionForm, FormSheet, FormSheetFooter, FormSection, FormRow, } from './components';
+export * from './schemas';
+//# sourceMappingURL=index.d.ts.map

package/dist/admin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EACV,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EACT,MAAM,EACN,YAAY,EACZ,cAAc,EACd,IAAI,EACJ,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,OAAO,EACP,aAAa,EACb,gBAAgB,EAChB,QAAQ,EACR,OAAO,EACP,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EACL,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,eAAe,EACf,WAAW,EACX,OAAO,GACR,MAAM,cAAc,CAAC;AAGtB,cAAc,WAAW,CAAC"}

package/dist/admin/index.js

@@ -0,0 +1,9 @@
+import "./providers/AdminProvider.js";
+import "./components/FormSheet.js";
+import "./components/forms/TenantForm.js";
+import "./components/forms/UserForm.js";
+import "./components/forms/SubscriptionForm.js";
+import "./components/index.js";
+import "./store/adminStore.js";
+import "./AdminRoot.js";
+import "./schemas/index.js";

package/dist/admin/pages/AuditLogsPage.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Audit logs page — connected to real backend
+ */
+export declare function AuditLogsPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=AuditLogsPage.d.ts.map

package/dist/admin/pages/AuditLogsPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogsPage.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/AuditLogsPage.tsx"],"names":[],"mappings":"AA+BA;;GAEG;AACH,wBAAgB,aAAa,4CAmP5B"}

package/dist/admin/pages/AuditLogsPage.js

@@ -0,0 +1,209 @@
+import { useAdminPermissions as e } from "../hooks/useAdminPermissions.js";
+import { Button as t, EmptyState as n, Input as r } from "../components/ui.js";
+import { PageLayout as i } from "../components/PageLayout.js";
+import { formatRelativeTime as a } from "../utils/formatters.js";
+import { DataTable as o, Pagination as s } from "../components/DataTable.js";
+import { PermissionGuard as c } from "../components/PermissionGuard.js";
+import "../components/index.js";
+import { useListAuditLogsQuery as l } from "../../generated/global-operations.js";
+import { useCallback as u, useMemo as d, useState as f } from "react";
+import { Database as p, Download as m, FileText as h, Key as g, Search as _, Settings as v, Shield as y, User as b } from "lucide-react";
+import { jsx as x, jsxs as S } from "react/jsx-runtime";
+//#region src/admin/pages/AuditLogsPage.tsx
+var C = 20, w = {
+	auth: /* @__PURE__ */ x(b, { className: "h-3 w-3" }),
+	user: /* @__PURE__ */ x(b, { className: "h-3 w-3" }),
+	settings: /* @__PURE__ */ x(v, { className: "h-3 w-3" }),
+	rbac: /* @__PURE__ */ x(y, { className: "h-3 w-3" }),
+	data: /* @__PURE__ */ x(p, { className: "h-3 w-3" }),
+	api: /* @__PURE__ */ x(g, { className: "h-3 w-3" })
+};
+function T(e) {
+	return w[e.split(".")[0]] ?? /* @__PURE__ */ x(h, { className: "h-3 w-3" });
+}
+function E() {
+	let { canViewAuditLogs: p, isLoading: g } = e(), [v, y] = f(1), [b, w] = f(""), [E, D] = f(""), O = g || !p, { data: k, loading: A, error: j } = l({
+		variables: {
+			resource: E || void 0,
+			limit: C,
+			offset: (v - 1) * C
+		},
+		fetchPolicy: "cache-and-network",
+		skip: O
+	}), M = d(() => (k?.auditLogs?.edges ?? []).map((e) => e.node), [k]), N = d(() => {
+		if (!b) return M;
+		let e = b.toLowerCase();
+		return M.filter((t) => t.action.toLowerCase().includes(e) || t.actorId.toLowerCase().includes(e) || t.resource.toLowerCase().includes(e) || t.tenantId.toLowerCase().includes(e));
+	}, [M, b]), P = k?.auditLogs?.totalCount ?? 0, F = Math.ceil(P / C), I = u(() => {
+		let e = N;
+		if (e.length === 0) return;
+		let t = [
+			"id",
+			"action",
+			"actorId",
+			"actorType",
+			"resource",
+			"resourceId",
+			"tenantId",
+			"ipAddress",
+			"userAgent",
+			"changes",
+			"metadata",
+			"createdAt"
+		], n = (e) => {
+			if (e == null) return "";
+			let t = typeof e == "object" ? JSON.stringify(e) : String(e);
+			return /[",\n\r]/.test(t) ? `"${t.replace(/"/g, "\"\"")}"` : t;
+		}, r = [t.join(","), ...e.map((e) => [
+			n(e.id),
+			n(e.action),
+			n(e.actorId),
+			n(e.actorType),
+			n(e.resource),
+			n(e.resourceId),
+			n(e.tenantId),
+			n(e.ipAddress),
+			n(e.userAgent),
+			n(e.changes),
+			n(e.metadata),
+			n(e.createdAt)
+		].join(","))].join("\n"), i = new Blob([r], { type: "text/csv;charset=utf-8;" }), a = URL.createObjectURL(i), o = document.createElement("a"), s = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+		o.href = a, o.setAttribute("download", `audit-logs-${s}.csv`), document.body.appendChild(o), o.click(), document.body.removeChild(o), URL.revokeObjectURL(a);
+	}, [N]);
+	return /* @__PURE__ */ x(c, {
+		allowed: p,
+		isLoading: g,
+		pageTitle: "Audit Logs",
+		denyMessage: "You don't have permission to view audit logs.",
+		children: /* @__PURE__ */ x(i, {
+			title: "Audit Logs",
+			description: `Security and compliance audit trail${P ? ` · ${P} total` : ""}`,
+			actions: /* @__PURE__ */ S(t, {
+				variant: "outline",
+				onClick: I,
+				disabled: A || N.length === 0,
+				"data-testid": "audit-logs-export-csv",
+				children: [/* @__PURE__ */ x(m, { className: "mr-2 h-4 w-4" }), "Export CSV"]
+			}),
+			children: /* @__PURE__ */ S("div", {
+				className: "space-y-4",
+				children: [
+					/* @__PURE__ */ S("div", {
+						className: "flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between",
+						children: [/* @__PURE__ */ S("div", {
+							className: "relative max-w-sm flex-1",
+							children: [/* @__PURE__ */ x(_, { className: "absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground" }), /* @__PURE__ */ x(r, {
+								placeholder: "Search by action, actor, or resource...",
+								value: b,
+								onChange: (e) => w(e.target.value),
+								className: "pl-9"
+							})]
+						}), /* @__PURE__ */ x(r, {
+							placeholder: "Filter by resource (e.g. tenant, user)...",
+							value: E,
+							onChange: (e) => {
+								y(1), D(e.target.value);
+							},
+							className: "max-w-xs"
+						})]
+					}),
+					j && /* @__PURE__ */ S("div", {
+						className: "rounded-md border border-destructive/50 bg-destructive/10 p-4 text-sm text-destructive",
+						children: ["Failed to load audit logs: ", j.message]
+					}),
+					/* @__PURE__ */ x(o, {
+						columns: [
+							{
+								key: "action",
+								header: "Action",
+								render: (e) => /* @__PURE__ */ S("div", {
+									className: "flex items-center gap-2",
+									children: [/* @__PURE__ */ x("span", {
+										className: "text-muted-foreground",
+										children: T(e.action)
+									}), /* @__PURE__ */ x("span", {
+										className: "font-mono text-sm font-medium text-foreground",
+										children: e.action
+									})]
+								})
+							},
+							{
+								key: "actorId",
+								header: "Actor",
+								width: "180px",
+								render: (e) => /* @__PURE__ */ S("div", {
+									className: "min-w-0",
+									children: [/* @__PURE__ */ x("div", {
+										className: "truncate text-sm",
+										children: e.actorId
+									}), /* @__PURE__ */ x("div", {
+										className: "text-xs text-muted-foreground capitalize",
+										children: e.actorType
+									})]
+								})
+							},
+							{
+								key: "resource",
+								header: "Resource",
+								width: "150px",
+								render: (e) => /* @__PURE__ */ S("div", {
+									className: "min-w-0",
+									children: [/* @__PURE__ */ x("div", {
+										className: "truncate text-sm",
+										children: e.resource
+									}), e.resourceId && /* @__PURE__ */ S("div", {
+										className: "truncate text-xs text-muted-foreground",
+										children: ["#", String(e.resourceId).slice(-8)]
+									})]
+								})
+							},
+							{
+								key: "tenantId",
+								header: "Tenant",
+								width: "130px",
+								render: (e) => /* @__PURE__ */ x("span", {
+									className: "text-xs text-muted-foreground",
+									children: e.tenantId ? `#${e.tenantId.slice(-8)}` : "—"
+								})
+							},
+							{
+								key: "ipAddress",
+								header: "IP",
+								width: "120px",
+								render: (e) => /* @__PURE__ */ x("span", {
+									className: "font-mono text-xs text-muted-foreground",
+									children: e.ipAddress ?? "—"
+								})
+							},
+							{
+								key: "createdAt",
+								header: "Time",
+								width: "110px",
+								render: (e) => a(e.createdAt)
+							}
+						],
+						data: N,
+						keyExtractor: (e) => e.id,
+						loading: A,
+						emptyState: /* @__PURE__ */ x(n, {
+							icon: /* @__PURE__ */ x(h, { className: "h-8 w-8" }),
+							title: "No audit logs found",
+							description: "Audit events will appear here when actions are performed"
+						})
+					}),
+					P > C && /* @__PURE__ */ x(s, {
+						page: v,
+						totalPages: F,
+						totalItems: P,
+						pageSize: C,
+						onPageChange: y
+					})
+				]
+			})
+		})
+	});
+}
+//#endregion
+export { E as AuditLogsPage };
+
+//# sourceMappingURL=AuditLogsPage.js.map

package/dist/admin/pages/AuditLogsPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuditLogsPage.js","names":[],"sources":["../../../src/admin/pages/AuditLogsPage.tsx"],"sourcesContent":["import { useState, useMemo, useCallback } from 'react';\nimport { FileText, Search, Download, User, Settings, Shield, Database, Key } from 'lucide-react';\nimport {\n  PageLayout,\n  Input,\n  DataTable,\n  Pagination,\n  EmptyState,\n  Button,\n  PermissionGuard,\n} from '../components';\nimport { useAdminPermissions } from '../hooks/useAdminPermissions';\nimport { formatRelativeTime } from '../utils/formatters';\nimport { useListAuditLogsQuery } from '../../generated/global-operations';\n\nconst PAGE_SIZE = 20;\n\nconst ACTION_ICONS: Record<string, React.ReactNode> = {\n  auth: <User className=\"h-3 w-3\" />,\n  user: <User className=\"h-3 w-3\" />,\n  settings: <Settings className=\"h-3 w-3\" />,\n  rbac: <Shield className=\"h-3 w-3\" />,\n  data: <Database className=\"h-3 w-3\" />,\n  api: <Key className=\"h-3 w-3\" />,\n};\n\nfunction getActionIcon(action: string) {\n  const prefix = action.split('.')[0];\n  return ACTION_ICONS[prefix] ?? <FileText className=\"h-3 w-3\" />;\n}\n\n/**\n * Audit logs page — connected to real backend\n */\nexport function AuditLogsPage() {\n  const { canViewAuditLogs, isLoading: permissionsLoading } = useAdminPermissions();\n\n  const [page, setPage] = useState(1);\n  const [search, setSearch] = useState('');\n  const [resourceFilter, setResourceFilter] = useState('');\n\n  const skipQueries = permissionsLoading || !canViewAuditLogs;\n\n  const { data, loading, error } = useListAuditLogsQuery({\n    variables: {\n      resource: resourceFilter || undefined,\n      limit: PAGE_SIZE,\n      offset: (page - 1) * PAGE_SIZE,\n    },\n    fetchPolicy: 'cache-and-network',\n    skip: skipQueries,\n  });\n\n  const auditLogs = useMemo(() => {\n    const edges = data?.auditLogs?.edges ?? [];\n    return edges.map((e: (typeof edges)[number]) => e.node);\n  }, [data]);\n\n  type AuditLogNode = (typeof auditLogs)[number];\n\n  const filteredLogs = useMemo(() => {\n    if (!search) return auditLogs;\n    const q = search.toLowerCase();\n    return auditLogs.filter(\n      (log: AuditLogNode) =>\n        log.action.toLowerCase().includes(q) ||\n        log.actorId.toLowerCase().includes(q) ||\n        log.resource.toLowerCase().includes(q) ||\n        log.tenantId.toLowerCase().includes(q)\n    );\n  }, [auditLogs, search]);\n\n  const total = data?.auditLogs?.totalCount ?? 0;\n  const totalPages = Math.ceil(total / PAGE_SIZE);\n\n  const exportToCsv = useCallback(() => {\n    const rows = filteredLogs;\n    if (rows.length === 0) return;\n\n    const headers = [\n      'id',\n      'action',\n      'actorId',\n      'actorType',\n      'resource',\n      'resourceId',\n      'tenantId',\n      'ipAddress',\n      'userAgent',\n      'changes',\n      'metadata',\n      'createdAt',\n    ];\n\n    const escape = (value: unknown): string => {\n      if (value === null || value === undefined) return '';\n      const str = typeof value === 'object' ? JSON.stringify(value) : String(value);\n      // RFC 4180: wrap in quotes if it contains quote, comma, or newline; double internal quotes\n      if (/[\",\\n\\r]/.test(str)) {\n        return `\"${str.replace(/\"/g, '\"\"')}\"`;\n      }\n      return str;\n    };\n\n    const csvLines = [\n      headers.join(','),\n      ...rows.map((log: AuditLogNode) =>\n        [\n          escape(log.id),\n          escape(log.action),\n          escape(log.actorId),\n          escape(log.actorType),\n          escape(log.resource),\n          escape(log.resourceId),\n          escape(log.tenantId),\n          escape(log.ipAddress),\n          escape((log as { userAgent?: unknown }).userAgent),\n          escape((log as { changes?: unknown }).changes),\n          escape((log as { metadata?: unknown }).metadata),\n          escape(log.createdAt),\n        ].join(',')\n      ),\n    ];\n\n    const csv = csvLines.join('\\n');\n    const blob = new Blob([csv], { type: 'text/csv;charset=utf-8;' });\n    const url = URL.createObjectURL(blob);\n    const link = document.createElement('a');\n    const stamp = new Date().toISOString().replace(/[:.]/g, '-');\n    link.href = url;\n    link.setAttribute('download', `audit-logs-${stamp}.csv`);\n    document.body.appendChild(link);\n    link.click();\n    document.body.removeChild(link);\n    URL.revokeObjectURL(url);\n  }, [filteredLogs]);\n\n  const columns = [\n    {\n      key: 'action',\n      header: 'Action',\n      render: (log: (typeof auditLogs)[number]) => (\n        <div className=\"flex items-center gap-2\">\n          <span className=\"text-muted-foreground\">{getActionIcon(log.action)}</span>\n          <span className=\"font-mono text-sm font-medium text-foreground\">{log.action}</span>\n        </div>\n      ),\n    },\n    {\n      key: 'actorId',\n      header: 'Actor',\n      width: '180px',\n      render: (log: (typeof auditLogs)[number]) => (\n        <div className=\"min-w-0\">\n          <div className=\"truncate text-sm\">{log.actorId}</div>\n          <div className=\"text-xs text-muted-foreground capitalize\">{log.actorType}</div>\n        </div>\n      ),\n    },\n    {\n      key: 'resource',\n      header: 'Resource',\n      width: '150px',\n      render: (log: (typeof auditLogs)[number]) => (\n        <div className=\"min-w-0\">\n          <div className=\"truncate text-sm\">{log.resource}</div>\n          {log.resourceId && (\n            <div className=\"truncate text-xs text-muted-foreground\">\n              #{String(log.resourceId).slice(-8)}\n            </div>\n          )}\n        </div>\n      ),\n    },\n    {\n      key: 'tenantId',\n      header: 'Tenant',\n      width: '130px',\n      render: (log: (typeof auditLogs)[number]) => (\n        <span className=\"text-xs text-muted-foreground\">\n          {log.tenantId ? `#${log.tenantId.slice(-8)}` : '—'}\n        </span>\n      ),\n    },\n    {\n      key: 'ipAddress',\n      header: 'IP',\n      width: '120px',\n      render: (log: (typeof auditLogs)[number]) => (\n        <span className=\"font-mono text-xs text-muted-foreground\">{log.ipAddress ?? '—'}</span>\n      ),\n    },\n    {\n      key: 'createdAt',\n      header: 'Time',\n      width: '110px',\n      render: (log: (typeof auditLogs)[number]) => formatRelativeTime(log.createdAt),\n    },\n  ];\n\n  return (\n    <PermissionGuard\n      allowed={canViewAuditLogs}\n      isLoading={permissionsLoading}\n      pageTitle=\"Audit Logs\"\n      denyMessage=\"You don't have permission to view audit logs.\"\n    >\n      <PageLayout\n        title=\"Audit Logs\"\n        description={`Security and compliance audit trail${total ? ` · ${total} total` : ''}`}\n        actions={\n          <Button\n            variant=\"outline\"\n            onClick={exportToCsv}\n            disabled={loading || filteredLogs.length === 0}\n            data-testid=\"audit-logs-export-csv\"\n          >\n            <Download className=\"mr-2 h-4 w-4\" />\n            Export CSV\n          </Button>\n        }\n      >\n        <div className=\"space-y-4\">\n          <div className=\"flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between\">\n            <div className=\"relative max-w-sm flex-1\">\n              <Search className=\"absolute left-3 top-1/2 h-4 w-4 -translate-y-1/2 text-muted-foreground\" />\n              <Input\n                placeholder=\"Search by action, actor, or resource...\"\n                value={search}\n                onChange={(e) => setSearch(e.target.value)}\n                className=\"pl-9\"\n              />\n            </div>\n            <Input\n              placeholder=\"Filter by resource (e.g. tenant, user)...\"\n              value={resourceFilter}\n              onChange={(e) => {\n                setPage(1);\n                setResourceFilter(e.target.value);\n              }}\n              className=\"max-w-xs\"\n            />\n          </div>\n\n          {error && (\n            <div className=\"rounded-md border border-destructive/50 bg-destructive/10 p-4 text-sm text-destructive\">\n              Failed to load audit logs: {error.message}\n            </div>\n          )}\n\n          <DataTable\n            columns={columns}\n            data={filteredLogs}\n            keyExtractor={(l) => l.id}\n            loading={loading}\n            emptyState={\n              <EmptyState\n                icon={<FileText className=\"h-8 w-8\" />}\n                title=\"No audit logs found\"\n                description=\"Audit events will appear here when actions are performed\"\n              />\n            }\n          />\n\n          {total > PAGE_SIZE && (\n            <Pagination\n              page={page}\n              totalPages={totalPages}\n              totalItems={total}\n              pageSize={PAGE_SIZE}\n              onPageChange={setPage}\n            />\n          )}\n        </div>\n      </PageLayout>\n    </PermissionGuard>\n  );\n}\n"],"mappings":";;;;;;;;;;;;AAeA,IAAM,IAAY,IAEZ,IAAgD;CACpD,MAAM,kBAAC,GAAD,EAAM,WAAU,WAAY,CAAA;CAClC,MAAM,kBAAC,GAAD,EAAM,WAAU,WAAY,CAAA;CAClC,UAAU,kBAAC,GAAD,EAAU,WAAU,WAAY,CAAA;CAC1C,MAAM,kBAAC,GAAD,EAAQ,WAAU,WAAY,CAAA;CACpC,MAAM,kBAAC,GAAD,EAAU,WAAU,WAAY,CAAA;CACtC,KAAK,kBAAC,GAAD,EAAK,WAAU,WAAY,CAAA;CACjC;AAED,SAAS,EAAc,GAAgB;AAErC,QAAO,EADQ,EAAO,MAAM,IAAI,CAAC,OACF,kBAAC,GAAD,EAAU,WAAU,WAAY,CAAA;;AAMjE,SAAgB,IAAgB;CAC9B,IAAM,EAAE,qBAAkB,WAAW,MAAuB,GAAqB,EAE3E,CAAC,GAAM,KAAW,EAAS,EAAE,EAC7B,CAAC,GAAQ,KAAa,EAAS,GAAG,EAClC,CAAC,GAAgB,KAAqB,EAAS,GAAG,EAElD,IAAc,KAAsB,CAAC,GAErC,EAAE,SAAM,YAAS,aAAU,EAAsB;EACrD,WAAW;GACT,UAAU,KAAkB,KAAA;GAC5B,OAAO;GACP,SAAS,IAAO,KAAK;GACtB;EACD,aAAa;EACb,MAAM;EACP,CAAC,EAEI,IAAY,SACF,GAAM,WAAW,SAAS,EAAE,EAC7B,KAAK,MAA8B,EAAE,KAAK,EACtD,CAAC,EAAK,CAAC,EAIJ,IAAe,QAAc;AACjC,MAAI,CAAC,EAAQ,QAAO;EACpB,IAAM,IAAI,EAAO,aAAa;AAC9B,SAAO,EAAU,QACd,MACC,EAAI,OAAO,aAAa,CAAC,SAAS,EAAE,IACpC,EAAI,QAAQ,aAAa,CAAC,SAAS,EAAE,IACrC,EAAI,SAAS,aAAa,CAAC,SAAS,EAAE,IACtC,EAAI,SAAS,aAAa,CAAC,SAAS,EAAE,CACzC;IACA,CAAC,GAAW,EAAO,CAAC,EAEjB,IAAQ,GAAM,WAAW,cAAc,GACvC,IAAa,KAAK,KAAK,IAAQ,EAAU,EAEzC,IAAc,QAAkB;EACpC,IAAM,IAAO;AACb,MAAI,EAAK,WAAW,EAAG;EAEvB,IAAM,IAAU;GACd;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,EAEK,KAAU,MAA2B;AACzC,OAAI,KAAU,KAA6B,QAAO;GAClD,IAAM,IAAM,OAAO,KAAU,WAAW,KAAK,UAAU,EAAM,GAAG,OAAO,EAAM;AAK7E,UAHI,WAAW,KAAK,EAAI,GACf,IAAI,EAAI,QAAQ,MAAM,OAAK,CAAC,KAE9B;KAuBH,IApBW,CACf,EAAQ,KAAK,IAAI,EACjB,GAAG,EAAK,KAAK,MACX;GACE,EAAO,EAAI,GAAG;GACd,EAAO,EAAI,OAAO;GAClB,EAAO,EAAI,QAAQ;GACnB,EAAO,EAAI,UAAU;GACrB,EAAO,EAAI,SAAS;GACpB,EAAO,EAAI,WAAW;GACtB,EAAO,EAAI,SAAS;GACpB,EAAO,EAAI,UAAU;GACrB,EAAQ,EAAgC,UAAU;GAClD,EAAQ,EAA8B,QAAQ;GAC9C,EAAQ,EAA+B,SAAS;GAChD,EAAO,EAAI,UAAU;GACtB,CAAC,KAAK,IAAI,CACZ,CACF,CAEoB,KAAK,KAAK,EACzB,IAAO,IAAI,KAAK,CAAC,EAAI,EAAE,EAAE,MAAM,2BAA2B,CAAC,EAC3D,IAAM,IAAI,gBAAgB,EAAK,EAC/B,IAAO,SAAS,cAAc,IAAI,EAClC,qBAAQ,IAAI,MAAM,EAAC,aAAa,CAAC,QAAQ,SAAS,IAAI;AAM5D,EALA,EAAK,OAAO,GACZ,EAAK,aAAa,YAAY,cAAc,EAAM,MAAM,EACxD,SAAS,KAAK,YAAY,EAAK,EAC/B,EAAK,OAAO,EACZ,SAAS,KAAK,YAAY,EAAK,EAC/B,IAAI,gBAAgB,EAAI;IACvB,CAAC,EAAa,CAAC;AAiElB,QACE,kBAAC,GAAD;EACE,SAAS;EACT,WAAW;EACX,WAAU;EACV,aAAY;YAEZ,kBAAC,GAAD;GACE,OAAM;GACN,aAAa,sCAAsC,IAAQ,MAAM,EAAM,UAAU;GACjF,SACE,kBAAC,GAAD;IACE,SAAQ;IACR,SAAS;IACT,UAAU,KAAW,EAAa,WAAW;IAC7C,eAAY;cAJd,CAME,kBAAC,GAAD,EAAU,WAAU,gBAAiB,CAAA,EAAA,aAE9B;;aAGX,kBAAC,OAAD;IAAK,WAAU;cAAf;KACE,kBAAC,OAAD;MAAK,WAAU;gBAAf,CACE,kBAAC,OAAD;OAAK,WAAU;iBAAf,CACE,kBAAC,GAAD,EAAQ,WAAU,0EAA2E,CAAA,EAC7F,kBAAC,GAAD;QACE,aAAY;QACZ,OAAO;QACP,WAAW,MAAM,EAAU,EAAE,OAAO,MAAM;QAC1C,WAAU;QACV,CAAA,CACE;UACN,kBAAC,GAAD;OACE,aAAY;OACZ,OAAO;OACP,WAAW,MAAM;AAEf,QADA,EAAQ,EAAE,EACV,EAAkB,EAAE,OAAO,MAAM;;OAEnC,WAAU;OACV,CAAA,CACE;;KAEL,KACC,kBAAC,OAAD;MAAK,WAAU;gBAAf,CAAwG,+BAC1E,EAAM,QAC9B;;KAGR,kBAAC,GAAD;MACW,SAlHH;OACd;QACE,KAAK;QACL,QAAQ;QACR,SAAS,MACP,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,QAAD;UAAM,WAAU;oBAAyB,EAAc,EAAI,OAAO;UAAQ,CAAA,EAC1E,kBAAC,QAAD;UAAM,WAAU;oBAAiD,EAAI;UAAc,CAAA,CAC/E;;QAET;OACD;QACE,KAAK;QACL,QAAQ;QACR,OAAO;QACP,SAAS,MACP,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD;UAAK,WAAU;oBAAoB,EAAI;UAAc,CAAA,EACrD,kBAAC,OAAD;UAAK,WAAU;oBAA4C,EAAI;UAAgB,CAAA,CAC3E;;QAET;OACD;QACE,KAAK;QACL,QAAQ;QACR,OAAO;QACP,SAAS,MACP,kBAAC,OAAD;SAAK,WAAU;mBAAf,CACE,kBAAC,OAAD;UAAK,WAAU;oBAAoB,EAAI;UAAe,CAAA,EACrD,EAAI,cACH,kBAAC,OAAD;UAAK,WAAU;oBAAf,CAAwD,KACpD,OAAO,EAAI,WAAW,CAAC,MAAM,GAAG,CAC9B;YAEJ;;QAET;OACD;QACE,KAAK;QACL,QAAQ;QACR,OAAO;QACP,SAAS,MACP,kBAAC,QAAD;SAAM,WAAU;mBACb,EAAI,WAAW,IAAI,EAAI,SAAS,MAAM,GAAG,KAAK;SAC1C,CAAA;QAEV;OACD;QACE,KAAK;QACL,QAAQ;QACR,OAAO;QACP,SAAS,MACP,kBAAC,QAAD;SAAM,WAAU;mBAA2C,EAAI,aAAa;SAAW,CAAA;QAE1F;OACD;QACE,KAAK;QACL,QAAQ;QACR,OAAO;QACP,SAAS,MAAoC,EAAmB,EAAI,UAAU;QAC/E;OACF;MAsDS,MAAM;MACN,eAAe,MAAM,EAAE;MACd;MACT,YACE,kBAAC,GAAD;OACE,MAAM,kBAAC,GAAD,EAAU,WAAU,WAAY,CAAA;OACtC,OAAM;OACN,aAAY;OACZ,CAAA;MAEJ,CAAA;KAED,IAAQ,KACP,kBAAC,GAAD;MACQ;MACM;MACZ,YAAY;MACZ,UAAU;MACV,cAAc;MACd,CAAA;KAEA;;GACK,CAAA;EACG,CAAA"}

package/dist/admin/pages/BillingPage.d.ts

@@ -0,0 +1,2 @@
+export declare function BillingPage(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=BillingPage.d.ts.map

package/dist/admin/pages/BillingPage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BillingPage.d.ts","sourceRoot":"","sources":["../../../src/admin/pages/BillingPage.tsx"],"names":[],"mappings":"AASA,wBAAgB,WAAW,4CA2J1B"}