@dudousxd/nestjs-telescope-ui 2.0.1 → 3.0.0

package/dist/spa/index.html

@@ -4,8 +4,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>Telescope</title>
-    <script type="module" crossorigin src="/telescope/assets/index-BPSlup7m.js"></script>
-    <link rel="stylesheet" crossorigin href="/telescope/assets/index-DmsmJrlA.css">
+    <script type="module" crossorigin src="/telescope/assets/index-EBJiTdQF.js"></script>
+    <link rel="stylesheet" crossorigin href="/telescope/assets/index-BfyQ_2IN.css">
   </head>
   <body>
     <div id="root"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dudousxd/nestjs-telescope-ui",
-  "version": "2.0.1",
+  "version": "3.0.0",
   "description": "Bundled dashboard + composable React components for @dudousxd/nestjs-telescope.",
   "license": "MIT",
   "repository": {
@@ -62,7 +62,7 @@
     "react-router-dom": "^6.0.0 || ^7.0.0",
     "recharts": "^2.0.0 || ^3.0.0",
     "reflect-metadata": "^0.1.13 || ^0.2.0",
-    "@dudousxd/nestjs-telescope": "^2.0.1"
+    "@dudousxd/nestjs-telescope": "^3.0.0"
   },
   "peerDependenciesMeta": {
     "react": {
@@ -122,7 +122,7 @@
     "typescript": "5.9.3",
     "vite": "5.4.21",
     "vitest": "3.2.7",
-    "@dudousxd/nestjs-telescope": "2.0.1"
+    "@dudousxd/nestjs-telescope": "3.0.0"
   },
   "engines": {
     "node": ">=20"

package/skills/telescope-ui-dashboard/SKILL.md

@@ -3,12 +3,11 @@ name: telescope-ui-dashboard
 description: >-
   Serve and embed the nestjs-telescope dashboard with @dudousxd/nestjs-telescope-ui.
   Mount the bundled React SPA via TelescopeUiModule.forRoot({ path?, assetsDir?,
-  decorators?, routes? }) / forRootAsync (the path is static in the async form,
-  as are decorators and routes; the path must match TelescopeModule); with
-  NODE_ENV=production mounting the page with no decorators fails the boot
-  (routes:false always boots).
+  authorize?, decorators?, routes? }) / forRootAsync (the path is static in the
+  async form, as are decorators and routes; the path must match
+  TelescopeModule); without authorize the page answers 403 in production.
   call the headless API from any frontend with createTelescopeClient({ baseUrl?,
-  fetch? }) from the /client subpath; build a custom console with the React
+  fetch?, onAccessDenied? }) from the /client subpath; build a custom console with the React
   components, hooks (TelescopeProvider, useTelescopeClient, useEntries, usePulse,
   useTimeseries) from the /react subpath. Use for "show the Telescope dashboard",
   "custom path", "call the Telescope API from React", "embed Telescope components".
@@ -16,7 +15,7 @@ license: MIT
 metadata:
   type: core
   library: "@dudousxd/nestjs-telescope-ui"
-  library_version: "1.12.0"
+  library_version: "3.0.0"
   framework: nestjs
 ---
 
@@ -33,27 +32,31 @@ Import the UI module alongside the core module. The `path` must match
 `TelescopeModule` (default `telescope`):
 
 ```ts
-import { Module, UseGuards } from '@nestjs/common';
-import { AuthenticationGuard } from '@nestjs/authentication';
-import { Can } from '@nestjs/authorization';
+import { type ExecutionContext, Module } from '@nestjs/common';
 import { TelescopeModule } from '@dudousxd/nestjs-telescope';
 import { TelescopeUiModule } from '@dudousxd/nestjs-telescope-ui';
 
-const protect = [UseGuards(AuthenticationGuard), Can(ConsolePolicy, 'view')];
+const authorize = (ctx: ExecutionContext) =>
+  ctx.switchToHttp().getRequest().user?.isAdmin === true;
 
 @Module({
   imports: [
-    TelescopeModule.forRoot({ enabled: true, decorators: protect }),
-    TelescopeUiModule.forRoot({ decorators: protect }), // dashboard at /telescope
+    TelescopeModule.forRoot({ enabled: true, authorize }),
+    TelescopeUiModule.forRoot({ authorize }), // dashboard at /telescope
   ],
 })
 export class AppModule {}
 ```
 
-With `NODE_ENV=production`, mounting the page with no `decorators` (an empty
-array counts as none) fails the boot; `routes: false` always boots (serve the
-page from your own subclass of the exported `TelescopeUiController`). Outside
-production an undecorated page mounts open.
+Without `authorize` the page is open outside production; with
+`NODE_ENV=production` it answers 403 and the boot logs a warning. A denied
+navigation gets an "Access denied" page (403), a "Sign in required" page (401),
+or a 302 for `{ redirectTo }`; inside the SPA a 401 with `redirectTo` is
+followed and a 403 shows an access-denied screen. `routes: false` mounts
+nothing: serve the page from your own subclass of `TelescopeUiController` with
+`@UseConsoleAuthorize()` listed ABOVE your auth guard (Nest applies class
+decorators bottom-up, so the auth guard runs first). With no argument it runs
+`TelescopeModule.forRoot({ authorize })`; `{ authorize }` overrides it.
 
 Source: `packages/ui/src/server/telescope-ui.module.ts`,
 `packages/ui/src/server/telescope-ui.options.ts` (`TelescopeUiModuleOptions`).
@@ -78,8 +81,8 @@ TelescopeUiModule.forRootAsync({
 });
 ```
 
-In production both modules still need `decorators` (or `routes: false`); the
-Setup section shows the protection.
+In production both modules still need `authorize` (or `routes: false`); the
+Setup section shows it.
 
 Source: `packages/ui/src/server/telescope-ui.module.ts`,
 `packages/ui/src/server/telescope-ui.options.ts`.
@@ -88,7 +91,9 @@ Source: `packages/ui/src/server/telescope-ui.module.ts`,
 
 `createTelescopeClient` (from the `/client` subpath) is a typed wrapper over the
 JSON API, usable in any frontend. `baseUrl` defaults to
-`window.__TELESCOPE_BASE__ + '/api'`, else `/telescope/api`.
+`window.__TELESCOPE_BASE__ + '/api'`, else `/telescope/api`. `onAccessDenied`
+runs when `authorize` refuses a call (default: follow `redirectTo`, else show
+the access-denied screen).
 
 ```ts
 import { createTelescopeClient } from '@dudousxd/nestjs-telescope-ui/client';