@efa-one/sdk 1.21.0 → 1.23.0

package/backend/serviceClient.js

@@ -1,9 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serviceClient = exports.ServiceClient = void 0;
+exports.serviceClient = exports.ServiceClient = exports.ServiceClientError = void 0;
 function log(level, msg, extra) {
     console.log(JSON.stringify({ level, msg, timestamp: new Date().toISOString(), ...extra }));
 }
+class ServiceClientError extends Error {
+    constructor(message, serviceKey, status, timedOut = false) {
+        super(message);
+        this.name = 'ServiceClientError';
+        this.serviceKey = serviceKey;
+        this.status = status;
+        this.timedOut = timedOut;
+    }
+}
+exports.ServiceClientError = ServiceClientError;
+function isAbortError(err) {
+    const name = err?.name;
+    return name === 'AbortError' || name === 'TimeoutError';
+}
 class ServiceClient {
     constructor(options) {
         this.gatewayUrl = (options?.gatewayUrl ?? process.env.CONVERGE_GATEWAY_URL ?? '').replace(/\/$/, '');
@@ -12,7 +26,7 @@ class ServiceClient {
         this.retries = options?.retries ?? 2;
         this.retryDelay = options?.retryDelayMs ?? 1000;
     }
-    async call(serviceKey, method, path, body) {
+    async call(serviceKey, method, path, body, options = {}) {
         if (!this.gatewayUrl) {
             throw new Error('ServiceClient: CONVERGE_GATEWAY_URL nicht gesetzt');
         }
@@ -29,44 +43,63 @@ class ServiceClient {
         if (body !== undefined && method !== 'GET' && method !== 'HEAD') {
             fetchOptions.body = JSON.stringify(body);
         }
+        if (options.timeoutMs !== undefined && options.timeoutMs > 0) {
+            fetchOptions.signal = AbortSignal.timeout(options.timeoutMs);
+        }
+        const timedOut = () => new ServiceClientError(`ServiceClient: ${serviceKey} ${method} ${path} → Timeout nach ${options.timeoutMs} ms`, serviceKey, null, true);
         for (let attempt = 1; attempt <= this.retries + 1; attempt++) {
+            let res;
             try {
-                const res = await this.fetchImpl(url, fetchOptions);
-                if (res.status === 204) {
-                    return undefined;
+                res = await this.fetchImpl(url, fetchOptions);
+            }
+            catch (err) {
+                if (isAbortError(err) || fetchOptions.signal?.aborted)
+                    throw timedOut();
+                if (attempt <= this.retries) {
+                    log('warn', 'ServiceClient: Netzwerkfehler, Retry', {
+                        serviceKey, method, path, err: String(err), attempt,
+                    });
+                    await new Promise((r) => setTimeout(r, this.retryDelay));
+                    if (fetchOptions.signal?.aborted)
+                        throw timedOut();
+                    continue;
                 }
-                if (!res.ok) {
-                    let errorMessage = `ServiceClient: ${serviceKey} ${method} ${path} → ${res.status}`;
-                    try {
-                        const errBody = await res.json();
-                        if (errBody.error)
-                            errorMessage = errBody.error;
-                    }
-                    catch { }
-                    if (res.status >= 400 && res.status < 500) {
-                        throw new Error(errorMessage);
-                    }
-                    if (attempt <= this.retries) {
-                        log('warn', 'ServiceClient: Retry nach Server-Fehler', {
-                            serviceKey, method, path, status: res.status, attempt,
-                        });
-                        await new Promise((r) => setTimeout(r, this.retryDelay));
-                        continue;
-                    }
-                    throw new Error(errorMessage);
+                throw err;
+            }
+            if (res.status === 204) {
+                return undefined;
+            }
+            if (!res.ok) {
+                let errorMessage = `ServiceClient: ${serviceKey} ${method} ${path} → ${res.status}`;
+                try {
+                    const errBody = await res.json();
+                    if (errBody.error)
+                        errorMessage = errBody.error;
+                }
+                catch (err) {
+                    if (isAbortError(err))
+                        throw timedOut();
+                }
+                if (res.status >= 400 && res.status < 500) {
+                    throw new ServiceClientError(errorMessage, serviceKey, res.status);
+                }
+                if (attempt <= this.retries) {
+                    log('warn', 'ServiceClient: Retry nach Server-Fehler', {
+                        serviceKey, method, path, status: res.status, attempt,
+                    });
+                    await new Promise((r) => setTimeout(r, this.retryDelay));
+                    if (fetchOptions.signal?.aborted)
+                        throw timedOut();
+                    continue;
                 }
-                return res.json();
+                throw new ServiceClientError(errorMessage, serviceKey, res.status);
+            }
+            try {
+                return await res.json();
             }
             catch (err) {
-                if (err instanceof Error && !err.message.startsWith('ServiceClient:')) {
-                    if (attempt <= this.retries) {
-                        log('warn', 'ServiceClient: Netzwerkfehler, Retry', {
-                            serviceKey, method, path, err: String(err), attempt,
-                        });
-                        await new Promise((r) => setTimeout(r, this.retryDelay));
-                        continue;
-                    }
-                }
+                if (isAbortError(err))
+                    throw timedOut();
                 throw err;
             }
         }

package/backend/serviceProvenance.d.ts

@@ -0,0 +1,31 @@
+import type { Request } from 'express';
+export declare const PROVENANCE_ISSUER = "converge-gateway";
+export declare const PROVENANCE_MAX_AGE_SEC = 60;
+export declare const SERVICE_KEY_RE: RegExp;
+export declare const PROVENANCE_REPLAY_CACHE_MAX = 20000;
+export interface ProvenanceGuardOptions {
+    allowedCallers?: readonly string[];
+}
+export type ProvenanceResult = {
+    ok: true;
+    caller: string;
+} | {
+    ok: false;
+    reason: 'missing';
+} | {
+    ok: false;
+    reason: 'invalid';
+} | {
+    ok: false;
+    reason: 'replayed';
+} | {
+    ok: false;
+    reason: 'caller_not_allowed';
+    caller: string;
+};
+export declare function getPlatformPublicKey(): string;
+export declare function isTruthyEnv(value: string | undefined): boolean;
+export declare function resetProvenanceReplayCache(max?: number): void;
+export declare function provenanceReplayCacheSize(): number;
+export declare function verifyServiceProvenance(req: Request, options?: ProvenanceGuardOptions): ProvenanceResult;
+export declare function assertProvenanceOptions(options: ProvenanceGuardOptions): void;

package/backend/serviceProvenance.js

@@ -0,0 +1,137 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROVENANCE_REPLAY_CACHE_MAX = exports.SERVICE_KEY_RE = exports.PROVENANCE_MAX_AGE_SEC = exports.PROVENANCE_ISSUER = void 0;
+exports.getPlatformPublicKey = getPlatformPublicKey;
+exports.isTruthyEnv = isTruthyEnv;
+exports.resetProvenanceReplayCache = resetProvenanceReplayCache;
+exports.provenanceReplayCacheSize = provenanceReplayCacheSize;
+exports.verifyServiceProvenance = verifyServiceProvenance;
+exports.assertProvenanceOptions = assertProvenanceOptions;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+exports.PROVENANCE_ISSUER = 'converge-gateway';
+exports.PROVENANCE_MAX_AGE_SEC = 60;
+const CLOCK_TOLERANCE_SEC = 5;
+exports.SERVICE_KEY_RE = /^[a-z][a-z0-9_]{1,63}$/;
+exports.PROVENANCE_REPLAY_CACHE_MAX = 20000;
+let decodedKey = null;
+function getPlatformPublicKey() {
+    const s = process.env.JWT_PUBLIC_KEY;
+    if (!s)
+        throw new Error('JWT_PUBLIC_KEY environment variable is required');
+    if (decodedKey?.b64 !== s)
+        decodedKey = { b64: s, pem: Buffer.from(s, 'base64').toString('utf8') };
+    return decodedKey.pem;
+}
+function isTruthyEnv(value) {
+    return !!value && ['1', 'true', 'yes', 'on'].includes(value.trim().toLowerCase());
+}
+const usedJtis = new Map();
+const SWEEP_INTERVAL_MS = 5000;
+let lastSweep = 0;
+let capacityWarned = false;
+let replayCacheMax = exports.PROVENANCE_REPLAY_CACHE_MAX;
+function consumeJti(jti, expSec) {
+    const now = Date.now();
+    if (now - lastSweep >= SWEEP_INTERVAL_MS) {
+        lastSweep = now;
+        for (const [k, exp] of usedJtis) {
+            if (exp >= now)
+                break;
+            usedJtis.delete(k);
+        }
+    }
+    if (usedJtis.has(jti))
+        return false;
+    while (usedJtis.size >= replayCacheMax) {
+        const oldest = usedJtis.keys().next().value;
+        usedJtis.delete(oldest);
+        if (!capacityWarned) {
+            capacityWarned = true;
+            console.warn(JSON.stringify({
+                level: 'warn',
+                msg: 'Provenance-Replay-Liste voll – älteste Einträge fallen heraus',
+                max: replayCacheMax,
+            }));
+        }
+    }
+    usedJtis.set(jti, (expSec + CLOCK_TOLERANCE_SEC) * 1000);
+    return true;
+}
+function resetProvenanceReplayCache(max = exports.PROVENANCE_REPLAY_CACHE_MAX) {
+    usedJtis.clear();
+    lastSweep = 0;
+    capacityWarned = false;
+    replayCacheMax = max;
+}
+function provenanceReplayCacheSize() {
+    return usedJtis.size;
+}
+const verifiedInRequest = new WeakMap();
+function readToken(req) {
+    const raw = req.headers?.['x-service-token'];
+    const token = Array.isArray(raw) ? raw[0] : raw;
+    return typeof token === 'string' && token ? token : undefined;
+}
+function verifyToken(req) {
+    const token = readToken(req);
+    if (!token)
+        return { ok: false, reason: 'missing' };
+    const memo = verifiedInRequest.get(req);
+    if (memo && memo.token === token)
+        return { ok: true, caller: memo.caller };
+    const audience = process.env.SERVICE_KEY;
+    if (!audience)
+        return { ok: false, reason: 'invalid' };
+    let payload;
+    try {
+        payload = jsonwebtoken_1.default.verify(token, getPlatformPublicKey(), {
+            algorithms: ['RS256'],
+            issuer: exports.PROVENANCE_ISSUER,
+            audience,
+            maxAge: exports.PROVENANCE_MAX_AGE_SEC,
+            clockTolerance: CLOCK_TOLERANCE_SEC,
+        });
+    }
+    catch {
+        return { ok: false, reason: 'invalid' };
+    }
+    const caller = payload.sub;
+    if (typeof caller !== 'string' || !exports.SERVICE_KEY_RE.test(caller))
+        return { ok: false, reason: 'invalid' };
+    if (payload.jti !== undefined) {
+        if (typeof payload.jti !== 'string' || !payload.jti || typeof payload.exp !== 'number') {
+            return { ok: false, reason: 'invalid' };
+        }
+        if (!consumeJti(payload.jti, payload.exp))
+            return { ok: false, reason: 'replayed' };
+    }
+    verifiedInRequest.set(req, { token, caller });
+    return { ok: true, caller };
+}
+function verifyServiceProvenance(req, options = {}) {
+    const result = verifyToken(req);
+    if (!result.ok)
+        return result;
+    if (options.allowedCallers && !options.allowedCallers.includes(result.caller)) {
+        delete req.callerService;
+        return { ok: false, reason: 'caller_not_allowed', caller: result.caller };
+    }
+    req.callerService = result.caller;
+    return result;
+}
+function assertProvenanceOptions(options) {
+    const callers = options.allowedCallers;
+    if (callers === undefined)
+        return;
+    if (!Array.isArray(callers) || callers.length === 0) {
+        throw new Error('allowedCallers: mindestens ein Service-Key angeben (leere Liste sperrt jeden Aufrufer)');
+    }
+    for (const c of callers) {
+        if (typeof c !== 'string' || !exports.SERVICE_KEY_RE.test(c)) {
+            throw new Error(`allowedCallers: ungültiger Service-Key ${JSON.stringify(c)}`);
+        }
+    }
+}

package/frontend/index.d.ts

@@ -1,5 +1,6 @@
 export * from './ipc.js';
 export * from './format.js';
+export * from './platformAdmin.js';
 export { useIsMobile, MOBILE_QUERY } from './useIsMobile.js';
 export * from './i18n.js';
 export { default as DevHeader } from './DevHeader.js';

package/frontend/index.js

@@ -1,5 +1,6 @@
 export * from './ipc.js';
 export * from './format.js';
+export * from './platformAdmin.js';
 export { useIsMobile, MOBILE_QUERY } from './useIsMobile.js';
 export * from './i18n.js';
 export { default as DevHeader } from './DevHeader.js';

package/frontend/ipc.js

@@ -15,7 +15,9 @@ export function getParentOrigin() {
     }
 }
 export function isFromPlatformParent(event) {
-    return event.source === window.parent;
+    if (event.source !== window.parent)
+        return false;
+    return event.origin === window.location.origin;
 }
 export function sendAtStart() {
     if (!isEmbedded())

package/frontend/platformAdmin.d.ts

@@ -0,0 +1,4 @@
+export declare const PLATFORM_ADMIN_PERMISSION = "efa-all";
+export declare const PLATFORM_ADMIN_PERMISSIONS: readonly string[];
+export declare function isPlatformAdminPermission(key: string): boolean;
+export declare function isPlatformAdmin(permissionKeys: readonly string[] | null | undefined): boolean;

package/frontend/platformAdmin.js

@@ -0,0 +1,11 @@
+export const PLATFORM_ADMIN_PERMISSION = 'efa-all';
+export const PLATFORM_ADMIN_PERMISSIONS = Object.freeze([
+    PLATFORM_ADMIN_PERMISSION,
+    'converge-admin',
+]);
+export function isPlatformAdminPermission(key) {
+    return PLATFORM_ADMIN_PERMISSIONS.includes(key);
+}
+export function isPlatformAdmin(permissionKeys) {
+    return !!permissionKeys && permissionKeys.some(isPlatformAdminPermission);
+}

package/frontend/ui/DataTable.d.ts

@@ -1,5 +1,6 @@
 import React from 'react';
 import { type ViewPreferencesAdapter } from '../viewPreferences.js';
+import { type ExportCell, type ExportTable } from './tableExport.js';
 export type FilterDef = {
     type: 'text';
 } | {
@@ -23,6 +24,8 @@ export interface ColumnDef<T> {
     sortable?: boolean;
     width?: string;
     defaultVisible?: boolean;
+    exportValue?: (row: T) => string | number | boolean | Date | null | undefined;
+    exportable?: boolean;
 }
 interface FilterValue {
     text?: string;
@@ -58,11 +61,16 @@ interface DataTableProps<T, K extends string | number> {
     footer?: React.ReactNode;
     groupsDefaultExpanded?: boolean;
     persistence?: ViewPreferencesAdapter;
+    exportable?: boolean;
+    exportFileName?: string;
 }
 export declare function defaultPrefsFor<T>(columns: ColumnDef<T>[], overrides?: Partial<ViewPrefs>): ViewPrefs;
 export declare function reconcileOrder<T>(columns: ColumnDef<T>[], order: string[]): string[];
 export declare function isColumnVisible<T>(column: ColumnDef<T>, visibility: Record<string, boolean>): boolean;
 export declare function formatCellValue<T>(col: ColumnDef<T>, row: T): string;
+export declare function exportCellOf<T>(col: ColumnDef<T>, row: T): ExportCell;
+export declare function buildExportTable<T>(rows: T[], visibleColumns: ColumnDef<T>[]): ExportTable;
+export declare function exportFileBase(name: string, now?: Date): string;
 export declare const MIN_COLUMN_WIDTH = 60;
 export declare const MAX_COLUMN_WIDTH = 1600;
 export declare function clampColumnWidth(px: number): number;
@@ -78,7 +86,7 @@ interface RenderItem<T> {
     expanded?: boolean;
     row?: T;
 }
-export declare function buildRenderItems<T>(rows: T[], groupBy: string[], columnsById: Map<string, ColumnDef<T>>, expandedGroups: Set<string>): RenderItem<T>[];
+export declare function buildRenderItems<T>(rows: T[], groupBy: string[], columnsById: Map<string, ColumnDef<T>>, expandedGroups: Set<string> | 'all'): RenderItem<T>[];
 export declare function collectAllGroupKeys<T>(rows: T[], groupBy: string[], columnsById: Map<string, ColumnDef<T>>): string[];
-export declare function DataTable<T, K extends string | number>({ listId, rows, columns, rowKey, onRowClick, selection, initialPrefs, footer, groupsDefaultExpanded, persistence, }: DataTableProps<T, K>): React.ReactElement;
+export declare function DataTable<T, K extends string | number>({ listId, rows, columns, rowKey, onRowClick, selection, initialPrefs, footer, groupsDefaultExpanded, persistence, exportable, exportFileName, }: DataTableProps<T, K>): React.ReactElement;
 export {};

package/frontend/ui/DataTable.js

@@ -1,11 +1,12 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useEffect, useMemo, useRef, useState } from 'react';
 import * as DropdownMenu from './DropdownMenu.js';
-import { ChevronDown, ChevronUp, ChevronRight, Settings, EyeOff, Filter, RotateCcw, ArrowUp, ArrowDown, Layers, X, GripVertical } from 'lucide-react';
+import { ChevronDown, ChevronUp, ChevronRight, Settings, EyeOff, Filter, RotateCcw, ArrowUp, ArrowDown, Layers, X, GripVertical, Download } from 'lucide-react';
 import { Button } from './Button.js';
 import { useViewPreferences } from '../viewPreferences.js';
 import { useIsMobile } from '../useIsMobile.js';
-import { formatDate, formatDateTime } from '../format.js';
+import { formatDate, formatDateTime, formatFileStamp } from '../format.js';
+import { downloadFile, toCsv, toXlsx, trimChar, XLSX_MIME } from './tableExport.js';
 const GROUP_KEY_SEP = '\x1f';
 const EMPTY_GROUP_LABEL = '– ohne –';
 export const DEFAULT_VIEW_VERSION = 2;
@@ -54,6 +55,47 @@ export function formatCellValue(col, row) {
     }
     return String(v ?? '');
 }
+export function exportCellOf(col, row) {
+    const v = col.exportValue ? col.exportValue(row) : col.accessor(row);
+    if (v == null || v === '')
+        return null;
+    if (isDateColumn(col, v)) {
+        const t = timeOf(v);
+        if (t != null)
+            return { date: new Date(t), withTime: col.type === 'datetime' };
+        return col.exportValue ? String(v) : null;
+    }
+    const f = col.exportValue ? undefined : col.filter;
+    if (typeof v === 'boolean') {
+        if (f?.type === 'boolean')
+            return v ? (f.labelTrue ?? 'Ja') : (f.labelFalse ?? 'Nein');
+        return v ? 'Ja' : 'Nein';
+    }
+    if (typeof v === 'number') {
+        if (!Number.isFinite(v))
+            return null;
+        const opt = f?.type === 'multi-select' ? f.options.find((o) => o.value === String(v)) : undefined;
+        return opt ? opt.label : v;
+    }
+    const labelOf = (x) => {
+        const s = String(x);
+        return f?.type === 'multi-select' ? (f.options.find((o) => o.value === s)?.label ?? s) : s;
+    };
+    if (Array.isArray(v))
+        return v.map(labelOf).join(', ');
+    return labelOf(v);
+}
+export function buildExportTable(rows, visibleColumns) {
+    const cols = visibleColumns.filter((c) => c.exportable !== false);
+    return {
+        headers: cols.map((c) => c.label),
+        rows: rows.map((r) => cols.map((c) => exportCellOf(c, r))),
+    };
+}
+export function exportFileBase(name, now = new Date()) {
+    const base = trimChar(name.trim().replace(/[\\/:*?"<>|\s]+/g, '_'), '_') || 'export';
+    return `${base}_${formatFileStamp(now)}`;
+}
 export const MIN_COLUMN_WIDTH = 60;
 export const MAX_COLUMN_WIDTH = 1600;
 const KEYBOARD_RESIZE_STEP = 16;
@@ -138,7 +180,7 @@ export function buildRenderItems(rows, groupBy, columnsById, expandedGroups) {
         for (const label of labels) {
             const childRows = buckets.get(label);
             const key = parentKey ? `${parentKey}${GROUP_KEY_SEP}${label}` : label;
-            const expanded = expandedGroups.has(key);
+            const expanded = expandedGroups === 'all' || expandedGroups.has(key);
             out.push({
                 kind: 'group',
                 key,
@@ -178,7 +220,7 @@ export function collectAllGroupKeys(rows, groupBy, columnsById) {
     recurse(rows, 0, '');
     return keys;
 }
-export function DataTable({ listId, rows, columns, rowKey, onRowClick, selection, initialPrefs, footer, groupsDefaultExpanded, persistence, }) {
+export function DataTable({ listId, rows, columns, rowKey, onRowClick, selection, initialPrefs, footer, groupsDefaultExpanded, persistence, exportable = true, exportFileName, }) {
     const defaultPrefs = useMemo(() => defaultPrefsFor(columns, initialPrefs), [columns, initialPrefs]);
     const [prefs, setPrefs, reset] = useViewPreferences(listId, defaultPrefs, persistence);
     const isMobile = useIsMobile();
@@ -375,8 +417,23 @@ export function DataTable({ listId, rows, columns, rowKey, onRowClick, selection
         }
         setPrefs({ ...prefs, filters });
     };
-    const gearButton = (_jsx(ColumnInventoryButton, { columns: columns, prefs: prefs, setColumnVisible: setColumnVisible, moveColumn: moveColumn, reset: reset, groupBy: groupBy, addGroupBy: addGroupBy, removeGroupBy: removeGroupBy, moveGroupBy: moveGroupBy, clearGroupBy: clearGroupBy }));
-    return (_jsxs("div", { ref: containerRef, className: "border border-[var(--color-border)] overflow-x-auto", style: { '--dt-cols': gridTemplate }, children: [selection && selection.selected.size > 0 && (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm border-b border-[var(--color-border)]", style: { background: 'var(--color-surface-raised)' }, children: [_jsxs("span", { children: [selection.selected.size, " ausgew\u00E4hlt"] }), _jsx("button", { type: "button", className: "text-xs underline text-[var(--color-text-muted)] hover:text-[var(--color-text-primary)]", onClick: () => selection.onChange(new Set()), children: "Auswahl l\u00F6schen" }), _jsx("div", { className: "flex-1" }), selection.bulkActions] })), isMobile ? (_jsxs("div", { className: "flex items-center gap-3 px-3 py-2 text-xs font-medium border-b border-[var(--color-border)]", style: { background: 'var(--color-surface-raised)' }, children: [selection && (_jsxs("label", { className: "flex items-center gap-2 py-2 pr-2 cursor-pointer", children: [_jsx("input", { type: "checkbox", className: "w-5 h-5", checked: allSelected, onChange: toggleAll, "aria-label": "Alle ausw\u00E4hlen" }), _jsx("span", { className: "text-[var(--color-text-muted)]", children: "Alle" })] })), _jsx("div", { className: "flex-1" }), gearButton] })) : (_jsxs("div", { className: "grid items-center min-w-min px-3 py-2 text-xs font-medium border-b border-[var(--color-border)]", style: { gridTemplateColumns: 'var(--dt-cols)', background: 'var(--color-surface-raised)' }, children: [selection && (_jsx("input", { type: "checkbox", checked: allSelected, onChange: toggleAll, "aria-label": "Alle ausw\u00E4hlen" })), visibleColumns.map((col) => {
+    const runExport = (format) => {
+        const exportRows = buildRenderItems(sortedFilteredRows, groupBy, columnsById, 'all')
+            .filter((i) => i.kind === 'row')
+            .map((i) => i.row);
+        const table = buildExportTable(exportRows, visibleColumns);
+        const base = exportFileBase(exportFileName ?? listId);
+        if (format === 'csv')
+            downloadFile(toCsv(table), `${base}.csv`, 'text/csv;charset=utf-8');
+        else
+            downloadFile(toXlsx(table, exportFileName ?? 'Export'), `${base}.xlsx`, XLSX_MIME);
+    };
+    const gearButton = (_jsx(ColumnInventoryButton, { exportInfo: exportable ? {
+            rowCount: sortedFilteredRows.length,
+            hasColumns: visibleColumns.some((c) => c.exportable !== false),
+            run: runExport,
+        } : undefined, columns: columns, prefs: prefs, setColumnVisible: setColumnVisible, moveColumn: moveColumn, reset: reset, groupBy: groupBy, addGroupBy: addGroupBy, removeGroupBy: removeGroupBy, moveGroupBy: moveGroupBy, clearGroupBy: clearGroupBy }));
+    return (_jsxs("div", { ref: containerRef, className: "border border-[var(--color-border)] overflow-x-auto", style: { '--dt-cols': gridTemplate }, children: [selection && selection.selected.size > 0 && (_jsxs("div", { className: "flex items-center gap-2 px-3 py-2 text-sm border-b border-[var(--color-border)]", style: { background: 'var(--color-surface-raised)' }, children: [_jsxs("span", { children: [selection.selected.size, " ausgew\u00E4hlt"] }), _jsx("button", { type: "button", className: "text-xs underline text-[var(--color-text-muted)] hover:text-[var(--color-text-primary)]", onClick: () => selection.onChange(new Set()), children: "Auswahl aufheben" }), _jsx("div", { className: "flex-1" }), selection.bulkActions] })), isMobile ? (_jsxs("div", { className: "flex items-center gap-3 px-3 py-2 text-xs font-medium border-b border-[var(--color-border)]", style: { background: 'var(--color-surface-raised)' }, children: [selection && (_jsxs("label", { className: "flex items-center gap-2 py-2 pr-2 cursor-pointer", children: [_jsx("input", { type: "checkbox", className: "w-5 h-5", checked: allSelected, onChange: toggleAll, "aria-label": "Alle ausw\u00E4hlen" }), _jsx("span", { className: "text-[var(--color-text-muted)]", children: "Alle" })] })), _jsx("div", { className: "flex-1" }), gearButton] })) : (_jsxs("div", { className: "grid items-center min-w-min px-3 py-2 text-xs font-medium border-b border-[var(--color-border)]", style: { gridTemplateColumns: 'var(--dt-cols)', background: 'var(--color-surface-raised)' }, children: [selection && (_jsx("input", { type: "checkbox", checked: allSelected, onChange: toggleAll, "aria-label": "Alle ausw\u00E4hlen" })), visibleColumns.map((col) => {
                         const activeSort = prefs.sort?.columnId === col.id ? prefs.sort.direction : null;
                         const filterValue = prefs.filters[col.id];
                         const isFiltered = filterValue != null;
@@ -569,7 +626,7 @@ function FilterEditor({ column, value, onChange, }) {
     }
     return null;
 }
-function ColumnInventoryButton({ columns, prefs, setColumnVisible, moveColumn, reset, groupBy, addGroupBy, removeGroupBy, moveGroupBy, clearGroupBy, }) {
+function ColumnInventoryButton({ columns, prefs, setColumnVisible, moveColumn, reset, groupBy, addGroupBy, removeGroupBy, moveGroupBy, clearGroupBy, exportInfo, }) {
     const groupableCandidates = columns.filter((c) => !groupBy.includes(c.id));
     const [open, setOpen] = useState(false);
     const orderedColumns = useMemo(() => {
@@ -587,5 +644,5 @@ function ColumnInventoryButton({ columns, prefs, setColumnVisible, moveColumn, r
                                 }, className: "flex-1 px-1 py-0.5 text-xs border border-[var(--color-border)] bg-[var(--color-surface)]", style: { borderRadius: 'var(--border-radius-md)' }, children: [_jsx("option", { value: "", children: "\u2013 w\u00E4hlen \u2013" }), groupableCandidates.map((c) => (_jsx("option", { value: c.id, children: c.label }, c.id)))] })] })), _jsx("div", { className: "border-t border-[var(--color-border)] mb-2" }), _jsx("div", { className: "text-xs font-semibold mb-2 text-[var(--color-text-muted)] uppercase", children: "Spalten" }), orderedColumns.map((col, idx) => {
                         const visible = isColumnVisible(col, prefs.columnVisibility);
                         return (_jsxs("div", { className: "flex items-center gap-2 px-1 py-1 text-sm", onClick: (e) => e.stopPropagation(), children: [_jsx("input", { type: "checkbox", checked: visible, onChange: () => setColumnVisible(col.id, !visible), "aria-label": `Spalte ${col.label} ${visible ? 'ausblenden' : 'einblenden'}` }), _jsx("span", { className: "flex-1 text-xs", children: col.label }), _jsx("button", { type: "button", disabled: idx === 0, onClick: () => moveColumn(col.id, -1), className: "p-2 sm:p-0.5 disabled:opacity-30 hover:bg-[var(--color-surface-raised)]", title: "Nach oben", style: { borderRadius: 'var(--border-radius-md)' }, children: _jsx(ArrowUp, { className: "w-3 h-3" }) }), _jsx("button", { type: "button", disabled: idx === orderedColumns.length - 1, onClick: () => moveColumn(col.id, 1), className: "p-2 sm:p-0.5 disabled:opacity-30 hover:bg-[var(--color-surface-raised)]", title: "Nach unten", style: { borderRadius: 'var(--border-radius-md)' }, children: _jsx(ArrowDown, { className: "w-3 h-3" }) })] }, col.id));
-                    }), _jsx("div", { className: "border-t border-[var(--color-border)] mt-2 pt-2", children: _jsxs(Button, { variant: "ghost", onClick: () => { reset(); setOpen(false); }, children: [_jsx(RotateCcw, { className: "w-4 h-4" }), "Zur\u00FCcksetzen"] }) })] })] }));
+                    }), exportInfo && (_jsxs("div", { className: "border-t border-[var(--color-border)] mt-2 pt-2", children: [_jsx("div", { className: "text-xs font-semibold mb-1 text-[var(--color-text-muted)] uppercase", children: "Exportieren" }), _jsxs("div", { className: "text-xs text-[var(--color-text-muted)] px-1 mb-1", children: ["Aktuelle Ansicht \u00B7 ", exportInfo.rowCount, " ", exportInfo.rowCount === 1 ? 'Zeile' : 'Zeilen'] }), _jsxs("div", { className: "flex items-center gap-1", children: [_jsxs(Button, { variant: "ghost", disabled: exportInfo.rowCount === 0 || !exportInfo.hasColumns, onClick: () => { exportInfo.run('xlsx'); setOpen(false); }, children: [_jsx(Download, { className: "w-4 h-4" }), "Excel"] }), _jsxs(Button, { variant: "ghost", disabled: exportInfo.rowCount === 0 || !exportInfo.hasColumns, title: "CSV, Trennzeichen Semikolon", onClick: () => { exportInfo.run('csv'); setOpen(false); }, children: [_jsx(Download, { className: "w-4 h-4" }), "CSV"] })] })] })), _jsx("div", { className: "border-t border-[var(--color-border)] mt-2 pt-2", children: _jsxs(Button, { variant: "ghost", onClick: () => { reset(); setOpen(false); }, children: [_jsx(RotateCcw, { className: "w-4 h-4" }), "Zur\u00FCcksetzen"] }) })] })] }));
 }

package/frontend/ui/index.d.ts

@@ -10,3 +10,4 @@ export { Skeleton, SkeletonRow } from './Skeleton.js';
 export { RecordDialog, type RecordDialogMode } from './RecordDialog.js';
 export { useIsMobile, MOBILE_QUERY } from '../useIsMobile.js';
 export { DataTable, DEFAULT_VIEW_VERSION, type ColumnDef, type FilterDef, type DataTableSelectionProps, } from './DataTable.js';
+export { toCsv, toXlsx, downloadFile, type ExportCell, type ExportTable } from './tableExport.js';

package/frontend/ui/index.js

@@ -10,3 +10,4 @@ export { Skeleton, SkeletonRow } from './Skeleton.js';
 export { RecordDialog } from './RecordDialog.js';
 export { useIsMobile, MOBILE_QUERY } from '../useIsMobile.js';
 export { DataTable, DEFAULT_VIEW_VERSION, } from './DataTable.js';
+export { toCsv, toXlsx, downloadFile } from './tableExport.js';

package/frontend/ui/tableExport.d.ts

@@ -0,0 +1,22 @@
+export type ExportCell = null | string | number | {
+    date: Date;
+    withTime: boolean;
+};
+export interface ExportTable {
+    headers: string[];
+    rows: ExportCell[][];
+}
+export declare const CSV_SEPARATOR = ";";
+export declare function toCsv(table: ExportTable): string;
+export declare function columnLetter(index: number): string;
+export declare function excelSerial(date: Date, withTime: boolean): number;
+export declare function trimChar(s: string, ch: string): string;
+export declare function sanitizeSheetName(name: string): string;
+export declare function toXlsx(table: ExportTable, sheetName?: string): Uint8Array<ArrayBuffer>;
+export declare function crc32(bytes: Uint8Array): number;
+export declare function zipStore(files: Array<{
+    name: string;
+    data: string;
+}>): Uint8Array<ArrayBuffer>;
+export declare const XLSX_MIME = "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet";
+export declare function downloadFile(data: BlobPart, fileName: string, mime: string): void;