@dudousxd/nestjs-telescope-ui 1.26.0 → 2.0.1

package/dist/server/telescope-ui.module.js

@@ -6,59 +6,39 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 };
 var TelescopeUiModule_1;
 import 'reflect-metadata';
-import { dynamicController, normalizeTelescopePath } from '@dudousxd/nestjs-telescope';
+import { CONSOLE_DECORATORS_EXAMPLE, assertConsoleProtected, dynamicController, normalizeTelescopePath, } from '@dudousxd/nestjs-telescope';
 import { Module, } from '@nestjs/common';
 import { TelescopeUiController } from './telescope-ui.controller.js';
 import { TELESCOPE_UI_OPTIONS } from './telescope-ui.options.js';
-/**
- * `@nestjs/common`'s own `GUARDS_METADATA` key, INLINED rather than deep-imported
- * from '@nestjs/common/constants' — that subpath has no extension and a strict
- * ESM resolver 404s on it (same convention used by core's `TelescopeModule` and
- * `@dudousxd/nestjs-agent`'s `agent-dashboard.module.ts`). A drift spec asserts
- * this literal stays byte-identical to the real constant.
- */
-const GUARDS_METADATA = '__guards__';
-/** Narrows a `guards` entry to a class (constructor), not an already-built instance. */
-function isGuardClass(guard) {
-    return typeof guard === 'function';
-}
-/**
- * Stamp host guards onto the dashboard's page/asset controller. `TelescopeUiController`
- * carries no guard of its own, so — unlike core's `stampGuards` — there is nothing to
- * preserve: this is a plain REPLACE of whatever (nothing) was there before. A no-op
- * when `guards` is omitted/empty, leaving the controller unguarded exactly as before.
- */
-function stampGuards(guards, ...controllers) {
-    if (guards === undefined || guards.length === 0)
-        return;
-    for (const controller of controllers) {
-        Reflect.defineMetadata(GUARDS_METADATA, guards, controller);
-    }
+/** The controller mounted when `routes` is not `false` (none when it is). */
+function uiControllers(options) {
+    if (options.routes === false)
+        return [];
+    const path = normalizeTelescopePath(options.path);
+    assertConsoleProtected(options.decorators, {
+        module: 'TelescopeUiModule',
+        decoratorsExample: `TelescopeUiModule.forRoot({ ${CONSOLE_DECORATORS_EXAMPLE} })`,
+        selfMountExample: `TelescopeUiModule.forRoot({ routes: false }) + @Controller('${path}') @Can(ConsolePolicy, 'view') class ConsolePage extends TelescopeUiController {}`,
+    });
+    return [dynamicController(TelescopeUiController, path, options.decorators)];
 }
 let TelescopeUiModule = TelescopeUiModule_1 = class TelescopeUiModule {
     static forRoot(options = {}) {
-        const path = normalizeTelescopePath(options.path);
-        const uiController = dynamicController(TelescopeUiController, path);
-        stampGuards(options.guards, uiController);
         return {
             module: TelescopeUiModule_1,
             imports: options.imports ?? [],
-            controllers: [uiController],
-            providers: [
-                { provide: TELESCOPE_UI_OPTIONS, useValue: options },
-                ...(options.guards ?? []).filter(isGuardClass),
-            ],
+            controllers: uiControllers(options),
+            providers: [{ provide: TELESCOPE_UI_OPTIONS, useValue: options }],
+            exports: [TELESCOPE_UI_OPTIONS],
         };
     }
     static forRootAsync(config) {
         const path = normalizeTelescopePath(config.path);
-        const uiController = dynamicController(TelescopeUiController, path);
-        stampGuards(config.guards, uiController);
         const { useFactory } = config;
         return {
             module: TelescopeUiModule_1,
             imports: config.imports ?? [],
-            controllers: [uiController],
+            controllers: uiControllers(config),
             providers: [
                 {
                     provide: TELESCOPE_UI_OPTIONS,
@@ -72,8 +52,8 @@ let TelescopeUiModule = TelescopeUiModule_1 = class TelescopeUiModule {
                     }),
                     inject: config.inject ?? [],
                 },
-                ...(config.guards ?? []).filter(isGuardClass),
             ],
+            exports: [TELESCOPE_UI_OPTIONS],
         };
     }
 };

package/dist/server/telescope-ui.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"telescope-ui.module.js","sourceRoot":"","sources":["../../src/server/telescope-ui.module.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAIL,MAAM,GAGP,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAiC,MAAM,2BAA2B,CAAC;AAEhG;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,wFAAwF;AACxF,SAAS,YAAY,CAAC,KAAsC;IAC1D,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,MAA0D,EAC1D,GAAG,WAAmB;IAEtB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACxD,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAGM,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAC5B,MAAM,CAAC,OAAO,CAAC,UAAoC,EAAE;QACnD,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACpE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,WAAW,EAAE,CAAC,YAAY,CAAC;YAC3B,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE;gBACpD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;aAC/C;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,MAsBnB;QACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACpE,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,WAAW,EAAE,CAAC,YAAY,CAAC;YAC3B,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,oBAAoB;oBAC7B,wEAAwE;oBACxE,sEAAsE;oBACtE,iEAAiE;oBACjE,+DAA+D;oBAC/D,UAAU,EAAE,KAAK,EAAE,GAAG,IAAe,EAAqC,EAAE,CAAC,CAAC;wBAC5E,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;wBAC9B,IAAI;qBACL,CAAC;oBACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;iBAC5B;gBACD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;aAC9C;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAhEY,iBAAiB;IAD7B,MAAM,CAAC,EAAE,CAAC;GACE,iBAAiB,CAgE7B"}
+{"version":3,"file":"telescope-ui.module.js","sourceRoot":"","sources":["../../src/server/telescope-ui.module.ts"],"names":[],"mappings":";;;;;;;AAAA,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAGL,MAAM,GAGP,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAiC,MAAM,2BAA2B,CAAC;AAEhG,6EAA6E;AAC7E,SAAS,aAAa,CACpB,OAAyE;IAEzE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE;QACzC,MAAM,EAAE,mBAAmB;QAC3B,iBAAiB,EAAE,+BAA+B,0BAA0B,KAAK;QACjF,gBAAgB,EAAE,+DAA+D,IAAI,mFAAmF;KACzK,CAAC,CAAC;IACH,OAAO,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAC9E,CAAC;AAGM,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAC5B,MAAM,CAAC,OAAO,CAAC,UAAoC,EAAE;QACnD,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,WAAW,EAAE,aAAa,CAAC,OAAO,CAAC;YACnC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACjE,OAAO,EAAE,CAAC,oBAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,MA2BnB;QACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC;YAClC,SAAS,EAAE;gBACT;oBACE,OAAO,EAAE,oBAAoB;oBAC7B,wEAAwE;oBACxE,sEAAsE;oBACtE,iEAAiE;oBACjE,+DAA+D;oBAC/D,UAAU,EAAE,KAAK,EAAE,GAAG,IAAe,EAAqC,EAAE,CAAC,CAAC;wBAC5E,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;wBAC9B,IAAI;qBACL,CAAC;oBACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;iBAC5B;aACF;YACD,OAAO,EAAE,CAAC,oBAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAA;AA9DY,iBAAiB;IAD7B,MAAM,CAAC,EAAE,CAAC;GACE,iBAAiB,CA8D7B"}

package/dist/server/telescope-ui.options.d.ts

@@ -1,5 +1,4 @@
-import type { DashboardAuthOptions } from '@dudousxd/nestjs-telescope';
-import type { CanActivate, DynamicModule, Type } from '@nestjs/common';
+import type { DynamicModule } from '@nestjs/common';
 export declare const TELESCOPE_UI_OPTIONS: unique symbol;
 export interface TelescopeUiModuleOptions {
     /** Directory of the built SPA (index.html + assets/). Defaults to the bundled dist/spa. */
@@ -11,44 +10,49 @@ export interface TelescopeUiModuleOptions {
      */
     path?: string;
     /**
-     * Guard classes (or already-instantiated `CanActivate`s) fronting the
-     * dashboard's page + static-asset controller (`TelescopeUiController`) — the
-     * full-page HTML shell and its hashed JS/CSS bundle. See
-     * `TelescopeModuleOptions.guards` (`@dudousxd/nestjs-telescope`) for the full
-     * rationale: full-page navigations carry no `Authorization` header, so a
-     * header-only auth scheme can't gate this controller — a guard here must be
-     * able to authenticate from a COOKIE (falling back to a header for XHR/fetch
-     * callers if useful). See the "Securing the console" guide.
+     * Class decorators applied to the dashboard's page + asset controller
+     * (`TelescopeUiController`), the same shape as `@nestjs/mcp`'s `decorators`,
+     * e.g. `[UseGuards(AuthenticationGuard), Can(ConsolePolicy, 'view')]` with
+     * `@nestjs/authentication` + `@nestjs/authorization`. Pass the same list to
+     * `TelescopeModule.forRoot({ decorators })` (core) so the API matches. Full-page
+     * navigations carry cookies, not an `Authorization` header, so the
+     * authentication strategy here must read a cookie session.
      *
-     * These two `guards` options are INDEPENDENT — different package, different
-     * module — so pass the SAME `guards` (and matching `imports`) to BOTH
-     * `TelescopeModule.forRoot` (core) and this module. Setting it here alone
-     * still leaves the API reachable; setting it only on core still leaves the
-     * page itself (HTML shell + assets) reachable by an anonymous browser.
+     * PRODUCTION RULE: with `NODE_ENV === 'production'`, mounting the page with no
+     * `decorators` (an empty array counts as none) fails the boot; protect it with
+     * `decorators` or mount it yourself with {@link routes}`: false`. Outside
+     * production an undecorated page mounts open.
      *
-     * Unlike core's console API controllers, `TelescopeUiController` ships with
-     * NO guard of its own by default (the page + assets are considered public —
-     * no data lives there), so setting `guards` here is a plain REPLACE: the
-     * listed guard(s) become the controller's entire gate.
+     * The controller is also marked open to `@nestjs/authorization`'s
+     * deny-by-default global `AuthorizationGuard` (as `@Can.Anyone()` would), so an
+     * undecorated dev page keeps loading when that package is adopted. A
+     * `Can(...)` passed here is still enforced. Applied to a fresh subclass per
+     * registration, so nothing leaks between `forRoot` calls. With `forRootAsync`,
+     * pass it as the static top-level option.
      */
-    guards?: Array<Type<CanActivate> | CanActivate>;
+    decorators?: ClassDecorator[];
     /**
-     * The SAME `dashboardAuth` passed to `TelescopeModule.forRoot` (core). Only needed to use
-     * `dashboardAuth.unauthenticatedPage`: this module serves the page + SPA shell, so it is the only
-     * one that can replace that page — core gates the API, not the HTML.
+     * `false` mounts NO controller; serve the page from a controller of your own
+     * by extending the exported `TelescopeUiController` (its `TELESCOPE_UI_OPTIONS`
+     * dependency is exported by the module), protected with ordinary Nest
+     * decorators. The base class carries no guard, so yours are the whole gate:
      *
-     * Like {@link guards}, the two options are INDEPENDENT (different package, different module).
-     * Setting `unauthenticatedPage` only on core gates the API but leaves the page untouched, and the
-     * visitor keeps getting the SPA's built-in auth screen.
+     * ```ts
+     * @Controller('ops/telescope')
+     * @Can(ConsolePolicy, 'view')
+     * class ConsolePage extends TelescopeUiController {}
+     * ```
      *
-     * Everything except `secret`, the configured modes, and `unauthenticatedPage` is ignored here —
-     * minting and renewal stay entirely core's job. The full options type is accepted so a host can
-     * pass one object to both modules rather than hand-picking fields.
+     * Named `routes`, not `path: false`, because `path` keeps a job without
+     * routes: the page rewrites its asset URLs against it, so set it to where you
+     * mount the controller (and to core's `path`). `decorators` only applies to
+     * the mounted controller and is ignored here. With `forRootAsync`, pass it as
+     * the static top-level `routes`. Default `true`.
      */
-    dashboardAuth?: DashboardAuthOptions;
+    routes?: boolean;
     /**
      * Extra `imports` merged into `TelescopeUiModule`'s own dynamic module — the
-     * DI resolution path for a class passed to {@link guards}.
+     * DI resolution path for whatever the {@link decorators} need.
      */
     imports?: DynamicModule['imports'];
 }

package/dist/server/telescope-ui.options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telescope-ui.options.d.ts","sourceRoot":"","sources":["../../src/server/telescope-ui.options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEvE,eAAO,MAAM,oBAAoB,eAAiC,CAAC;AAEnE,MAAM,WAAW,wBAAwB;IACvC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,WAAW,CAAC,CAAC;IAChD;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;CACpC"}
+{"version":3,"file":"telescope-ui.options.d.ts","sourceRoot":"","sources":["../../src/server/telescope-ui.options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,eAAO,MAAM,oBAAoB,eAAiC,CAAC;AAEnE,MAAM,WAAW,wBAAwB;IACvC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;CACpC"}

package/dist/server/telescope-ui.options.js.map

@@ -1 +1 @@
-{"version":3,"file":"telescope-ui.options.js","sourceRoot":"","sources":["../../src/server/telescope-ui.options.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"telescope-ui.options.js","sourceRoot":"","sources":["../../src/server/telescope-ui.options.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC"}