@fuzdev/fuz_app 0.1.0

package/dist/ui/sidebar_state.svelte.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Options for configuring a `SidebarState`.
+ *
+ * @param enabled Optional reactive getter that controls whether the sidebar is enabled.
+ *                When provided, overrides the internal `enabled` state.
+ *                `show_sidebar` automatically returns `false` when `enabled` is `false`.
+ */
+export interface SidebarStateOptions {
+    enabled?: () => boolean;
+}
+export declare class SidebarState {
+    #private;
+    get enabled(): boolean;
+    set enabled(value: boolean);
+    get show_sidebar(): boolean;
+    set show_sidebar(value: boolean);
+    constructor(options?: SidebarStateOptions);
+    toggle_sidebar(value?: boolean): void;
+    /**
+     * Activates the sidebar, showing it and enabling the toggle.
+     * Returns a cleanup function that deactivates.
+     */
+    activate(): () => void;
+}
+export declare const sidebar_state_context: {
+    get: (error_message?: string) => () => SidebarState;
+    get_maybe: () => (() => SidebarState) | undefined;
+    set: (value: () => SidebarState) => () => SidebarState;
+};
+//# sourceMappingURL=sidebar_state.svelte.d.ts.map

package/dist/ui/sidebar_state.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/sidebar_state.svelte.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IACnC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;CACxB;AAED,qBAAa,YAAY;;IAKxB,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAEzB;IAED,IAAI,YAAY,IAAI,OAAO,CAG1B;IAED,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,EAE9B;gBAEW,OAAO,CAAC,EAAE,mBAAmB;IAIzC,cAAc,CAAC,KAAK,GAAE,OAA4B,GAAG,IAAI;IAIzD;;;OAGG;IACH,QAAQ,IAAI,MAAM,IAAI;CAQtB;AAED,eAAO,MAAM,qBAAqB;2CAAwB,YAAY;4BAAZ,YAAY;uBAAZ,YAAY,WAAZ,YAAY;CAAG,CAAC"}

package/dist/ui/sidebar_state.svelte.js

@@ -0,0 +1,39 @@
+import { create_context } from '@fuzdev/fuz_ui/context_helpers.js';
+export class SidebarState {
+    #get_enabled;
+    #enabled = $state(true);
+    #show_sidebar = $state(true);
+    get enabled() {
+        return this.#get_enabled?.() ?? this.#enabled;
+    }
+    set enabled(value) {
+        this.#enabled = value;
+    }
+    get show_sidebar() {
+        if (!this.enabled)
+            return false;
+        return this.#show_sidebar;
+    }
+    set show_sidebar(value) {
+        this.#show_sidebar = value;
+    }
+    constructor(options) {
+        this.#get_enabled = options?.enabled;
+    }
+    toggle_sidebar(value = !this.show_sidebar) {
+        this.show_sidebar = value;
+    }
+    /**
+     * Activates the sidebar, showing it and enabling the toggle.
+     * Returns a cleanup function that deactivates.
+     */
+    activate() {
+        this.enabled = true;
+        this.show_sidebar = true;
+        return () => {
+            this.enabled = false;
+            this.show_sidebar = false;
+        };
+    }
+}
+export const sidebar_state_context = create_context();

package/dist/ui/table_state.svelte.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Reactive state for database table pagination and data fetching.
+ *
+ * Extends `Loadable` to manage paginated table data with column metadata,
+ * row deletion, and derived pagination controls.
+ *
+ * @example
+ * ```ts
+ * const table = new TableState();
+ * await table.fetch('accounts', 0, 50);
+ *
+ * // pagination
+ * if (table.has_next) table.go_next();
+ * await table.fetch(table.table_name, table.offset, table.limit);
+ *
+ * // deletion
+ * const deleted = await table.delete_row(table.rows[0]);
+ * ```
+ *
+ * @example
+ * ```svelte
+ * <script lang="ts">
+ * 	import {TableState} from '@fuzdev/fuz_app/ui/table_state.svelte.js';
+ *
+ * 	const table = new TableState();
+ * 	table.fetch('accounts');
+ * </script>
+ *
+ * {#if table.loading}
+ * 	<p>loading…</p>
+ * {:else if table.error}
+ * 	<p>{table.error}</p>
+ * {:else}
+ * 	<p>showing {table.showing_start}–{table.showing_end} of {table.total}</p>
+ * {/if}
+ * ```
+ *
+ * @module
+ */
+import { Loadable } from './loadable.svelte.js';
+import type { ColumnInfo } from '../http/db_routes.js';
+/** Maximum number of rows that can be fetched in a single page. */
+export declare const TABLE_LIMIT_MAX = 1000;
+export declare class TableState extends Loadable {
+    table_name: string;
+    columns: Array<ColumnInfo>;
+    rows: Array<Record<string, unknown>>;
+    total: number;
+    offset: number;
+    limit: number;
+    primary_key: string | null;
+    deleting: string | null;
+    delete_error: string | null;
+    readonly showing_start: number;
+    readonly showing_end: number;
+    readonly has_prev: boolean;
+    readonly has_next: boolean;
+    fetch(table_name: string, offset?: number, limit?: number): Promise<void>;
+    go_prev(): void;
+    go_next(): void;
+    delete_row(row: Record<string, unknown>): Promise<boolean>;
+}
+//# sourceMappingURL=table_state.svelte.d.ts.map

package/dist/ui/table_state.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"table_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/table_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAC,QAAQ,EAAC,MAAM,sBAAsB,CAAC;AAG9C,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAErD,mEAAmE;AACnE,eAAO,MAAM,eAAe,OAAO,CAAC;AAEpC,qBAAa,UAAW,SAAQ,QAAQ;IACvC,UAAU,EAAE,MAAM,CAAc;IAChC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAc;IACxC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAc;IAClD,KAAK,SAAa;IAClB,MAAM,SAAa;IACnB,KAAK,SAAe;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAgB;IAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAgB;IACvC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAgB;IAG3C,QAAQ,CAAC,aAAa,SAAoD;IAC1E,QAAQ,CAAC,WAAW,SAAkE;IACtF,QAAQ,CAAC,QAAQ,UAA6B;IAC9C,QAAQ,CAAC,QAAQ,UAAmD;IAE9D,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,SAAI,EAAE,KAAK,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBvE,OAAO,IAAI,IAAI;IAIf,OAAO,IAAI,IAAI;IAIT,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAoChE"}

package/dist/ui/table_state.svelte.js

@@ -0,0 +1,117 @@
+/**
+ * Reactive state for database table pagination and data fetching.
+ *
+ * Extends `Loadable` to manage paginated table data with column metadata,
+ * row deletion, and derived pagination controls.
+ *
+ * @example
+ * ```ts
+ * const table = new TableState();
+ * await table.fetch('accounts', 0, 50);
+ *
+ * // pagination
+ * if (table.has_next) table.go_next();
+ * await table.fetch(table.table_name, table.offset, table.limit);
+ *
+ * // deletion
+ * const deleted = await table.delete_row(table.rows[0]);
+ * ```
+ *
+ * @example
+ * ```svelte
+ * <script lang="ts">
+ * 	import {TableState} from '@fuzdev/fuz_app/ui/table_state.svelte.js';
+ *
+ * 	const table = new TableState();
+ * 	table.fetch('accounts');
+ * </script>
+ *
+ * {#if table.loading}
+ * 	<p>loading…</p>
+ * {:else if table.error}
+ * 	<p>{table.error}</p>
+ * {:else}
+ * 	<p>showing {table.showing_start}–{table.showing_end} of {table.total}</p>
+ * {/if}
+ * ```
+ *
+ * @module
+ */
+import { Loadable } from './loadable.svelte.js';
+import { parse_response_error, ui_fetch } from './ui_fetch.js';
+import { format_value } from './ui_format.js';
+/** Maximum number of rows that can be fetched in a single page. */
+export const TABLE_LIMIT_MAX = 1000;
+export class TableState extends Loadable {
+    table_name = $state('');
+    columns = $state([]);
+    rows = $state([]);
+    total = $state(0);
+    offset = $state(0);
+    limit = $state(100);
+    primary_key = $state(null);
+    deleting = $state(null);
+    delete_error = $state(null);
+    // Pagination computed values
+    showing_start = $derived(this.total === 0 ? 0 : this.offset + 1);
+    showing_end = $derived(Math.min(this.offset + this.rows.length, this.total));
+    has_prev = $derived(this.offset > 0);
+    has_next = $derived(this.offset + this.limit < this.total);
+    async fetch(table_name, offset = 0, limit = 100) {
+        this.table_name = table_name;
+        this.offset = offset;
+        this.limit = Math.max(1, Math.min(TABLE_LIMIT_MAX, limit));
+        await this.run(async () => {
+            const response = await ui_fetch(`/api/db/tables/${table_name}?offset=${this.offset}&limit=${this.limit}`);
+            if (!response.ok) {
+                throw new Error(await parse_response_error(response, 'Failed to fetch table'));
+            }
+            const data = await response.json();
+            this.columns = data.columns ?? [];
+            this.rows = data.rows ?? [];
+            this.total = data.total ?? 0;
+            this.primary_key = data.primary_key ?? null;
+        });
+    }
+    go_prev() {
+        this.offset = Math.max(0, this.offset - this.limit);
+    }
+    go_next() {
+        this.offset += this.limit;
+    }
+    async delete_row(row) {
+        if (!this.primary_key)
+            return false;
+        const pk_value = row[this.primary_key];
+        if (pk_value === null || pk_value === undefined)
+            return false;
+        const pk_str = format_value(pk_value);
+        this.deleting = pk_str;
+        this.delete_error = null;
+        try {
+            const response = await ui_fetch(`/api/db/tables/${this.table_name}/rows/${encodeURIComponent(pk_str)}`, { method: 'DELETE' });
+            if (!response.ok) {
+                try {
+                    const data = await response.json();
+                    const error_msg = data.error || 'unknown error';
+                    this.delete_error = data.detail ? `${error_msg}: ${data.detail}` : error_msg;
+                }
+                catch {
+                    this.delete_error = `Error: ${response.status}`;
+                }
+                return false;
+            }
+            // Remove from UI
+            this.rows = this.rows.filter((r) => r[this.primary_key] !== pk_value);
+            this.total -= 1;
+            return true;
+        }
+        catch (e) {
+            this.delete_error = e instanceof Error ? e.message : 'Delete failed';
+            return false;
+        }
+        finally {
+            this.deleting = null;
+        }
+    }
+}

package/dist/ui/ui_fetch.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Authenticated fetch helper for cookie-based session auth.
+ *
+ * Wraps the standard `fetch` with `credentials: 'include'` so cookies
+ * are sent with every request. Use for all API calls in apps
+ * that rely on `@fuzdev/fuz_app` session middleware.
+ *
+ * @module
+ */
+/**
+ * Fetch with credentials included (sends cookies).
+ *
+ * @param input - the request URL or Request object
+ * @param init - optional fetch init options
+ * @returns fetch response promise
+ */
+export declare const ui_fetch: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * Safely extract an error message from a non-ok response.
+ *
+ * Handles responses with non-JSON bodies (e.g. HTML 404 pages)
+ * that would throw on `response.json()`.
+ *
+ * @param response - the non-ok response
+ * @param fallback - fallback message when no `.error` field is found
+ * @returns error message string
+ */
+export declare const parse_response_error: (response: Response, fallback?: string) => Promise<string>;
+//# sourceMappingURL=ui_fetch.d.ts.map

package/dist/ui/ui_fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui_fetch.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/ui_fetch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,GAAI,OAAO,WAAW,GAAG,GAAG,EAAE,OAAO,WAAW,KAAG,OAAO,CAAC,QAAQ,CACxC,CAAC;AAEjD;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,GAChC,UAAU,QAAQ,EAClB,WAAW,MAAM,KACf,OAAO,CAAC,MAAM,CAQhB,CAAC"}

package/dist/ui/ui_fetch.js

@@ -0,0 +1,37 @@
+/**
+ * Authenticated fetch helper for cookie-based session auth.
+ *
+ * Wraps the standard `fetch` with `credentials: 'include'` so cookies
+ * are sent with every request. Use for all API calls in apps
+ * that rely on `@fuzdev/fuz_app` session middleware.
+ *
+ * @module
+ */
+/**
+ * Fetch with credentials included (sends cookies).
+ *
+ * @param input - the request URL or Request object
+ * @param init - optional fetch init options
+ * @returns fetch response promise
+ */
+export const ui_fetch = (input, init) => fetch(input, { ...init, credentials: 'include' });
+/**
+ * Safely extract an error message from a non-ok response.
+ *
+ * Handles responses with non-JSON bodies (e.g. HTML 404 pages)
+ * that would throw on `response.json()`.
+ *
+ * @param response - the non-ok response
+ * @param fallback - fallback message when no `.error` field is found
+ * @returns error message string
+ */
+export const parse_response_error = async (response, fallback) => {
+    const default_message = fallback ?? `Error: ${response.status}`;
+    try {
+        const data = await response.json();
+        return typeof data?.error === 'string' ? data.error : default_message;
+    }
+    catch {
+        return default_message;
+    }
+};

package/dist/ui/ui_format.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Formatting utilities for UI display.
+ *
+ * Value formatting, relative timestamps, uptime display,
+ * absolute timestamp formatting, and audit metadata formatting.
+ *
+ * @module
+ */
+import type { AuditEventType } from '../auth/audit_log_schema.js';
+/**
+ * Format a timestamp as a relative time string.
+ *
+ * @param timestamp - a date value (`string`, `number`, or `Date`)
+ * @param now - reference time in ms since epoch, defaults to `Date.now()`
+ * @returns human-friendly relative time (e.g. "2m ago", "3h ago", "5d ago", "2mo ago", "1y ago")
+ */
+export declare const format_relative_time: (timestamp: string | number | Date, now?: number) => string;
+/**
+ * Format milliseconds as a human-friendly uptime string.
+ *
+ * @param ms - duration in milliseconds
+ * @returns human-friendly duration (e.g. "45s", "12m", "3h 15m", "2d 5h")
+ */
+export declare const format_uptime: (ms: number) => string;
+/**
+ * Truncate a string by keeping the start and end, with a separator in the middle.
+ *
+ * @param str - the string to truncate
+ * @param max_length - maximum total length including separator
+ * @param separator - the middle separator
+ * @returns the truncated string, or the original if it fits
+ */
+export declare const truncate_middle: (str: string, max_length: number, separator?: string) => string;
+/**
+ * Truncate a UUID for display, keeping start and end visible.
+ *
+ * @param uuid - the UUID string to truncate
+ * @returns a 12-character truncated UUID like `a1b2c…7890`
+ */
+export declare const truncate_uuid: (uuid: string) => string;
+/**
+ * Format an arbitrary value for table cell display.
+ *
+ * @param value - the value to format
+ * @returns string representation suitable for UI display
+ */
+export declare const format_value: (value: unknown) => string;
+/**
+ * Format a timestamp as an absolute datetime string for title attributes.
+ *
+ * @param timestamp - a date value
+ * @returns readable absolute datetime like `"2026-03-21 14:30:00 UTC"`
+ */
+export declare const format_datetime_local: (timestamp: string | number | Date) => string;
+/**
+ * Format audit event metadata for display based on event type.
+ *
+ * @param event_type - the audit event type
+ * @param metadata - the metadata object (may be null)
+ * @returns human-readable summary string
+ */
+export declare const format_audit_metadata: (event_type: AuditEventType, metadata: Record<string, unknown> | null) => string;
+//# sourceMappingURL=ui_format.d.ts.map

package/dist/ui/ui_format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui_format.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/ui_format.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,6BAA6B,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAChC,WAAW,MAAM,GAAG,MAAM,GAAG,IAAI,EACjC,MAAK,MAAmB,KACtB,MA2BF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,IAAI,MAAM,KAAG,MAY1C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,MAAM,EAAE,YAAY,MAAM,EAAE,kBAAe,KAAG,MAOlF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAAmC,CAAC;AAEjF;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,MAS7C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAAI,WAAW,MAAM,GAAG,MAAM,GAAG,IAAI,KAAG,MAOzE,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GACjC,YAAY,cAAc,EAC1B,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KACtC,MAuDF,CAAC"}

package/dist/ui/ui_format.js

@@ -0,0 +1,196 @@
+/**
+ * Formatting utilities for UI display.
+ *
+ * Value formatting, relative timestamps, uptime display,
+ * absolute timestamp formatting, and audit metadata formatting.
+ *
+ * @module
+ */
+/**
+ * Format a timestamp as a relative time string.
+ *
+ * @param timestamp - a date value (`string`, `number`, or `Date`)
+ * @param now - reference time in ms since epoch, defaults to `Date.now()`
+ * @returns human-friendly relative time (e.g. "2m ago", "3h ago", "5d ago", "2mo ago", "1y ago")
+ */
+export const format_relative_time = (timestamp, now = Date.now()) => {
+    const ts = typeof timestamp === 'number'
+        ? timestamp
+        : timestamp instanceof Date
+            ? timestamp.getTime()
+            : new Date(timestamp).getTime();
+    const diff_ms = now - ts;
+    if (Number.isNaN(diff_ms))
+        return 'just now';
+    const abs_ms = Math.abs(diff_ms);
+    const past = diff_ms >= 0;
+    const abs_mins = Math.floor(abs_ms / 60000);
+    const abs_hours = Math.floor(abs_ms / 3600000);
+    const abs_days = Math.floor(abs_ms / 86400000);
+    const abs_weeks = Math.floor(abs_days / 7);
+    const abs_months = Math.floor(abs_days / 30);
+    const abs_years = Math.floor(abs_days / 365);
+    if (abs_mins <= 0)
+        return 'just now';
+    const suffix = past ? ' ago' : '';
+    const prefix = past ? '' : 'in ';
+    if (abs_mins < 60)
+        return `${prefix}${abs_mins}m${suffix}`;
+    if (abs_hours < 24)
+        return `${prefix}${abs_hours}h${suffix}`;
+    if (abs_days < 7)
+        return `${prefix}${abs_days}d${suffix}`;
+    if (abs_weeks < 5)
+        return `${prefix}${abs_weeks}w${suffix}`;
+    if (abs_months < 12)
+        return `${prefix}${abs_months}mo${suffix}`;
+    return `${prefix}${abs_years}y${suffix}`;
+};
+/**
+ * Format milliseconds as a human-friendly uptime string.
+ *
+ * @param ms - duration in milliseconds
+ * @returns human-friendly duration (e.g. "45s", "12m", "3h 15m", "2d 5h")
+ */
+export const format_uptime = (ms) => {
+    if (ms < 0)
+        return `-${format_uptime(-ms)}`;
+    const seconds = Math.floor(ms / 1000);
+    if (seconds < 60)
+        return `${seconds}s`;
+    const minutes = Math.floor(seconds / 60);
+    if (minutes < 60)
+        return `${minutes}m`;
+    const hours = Math.floor(minutes / 60);
+    const remaining_mins = minutes % 60;
+    if (hours < 24)
+        return remaining_mins > 0 ? `${hours}h ${remaining_mins}m` : `${hours}h`;
+    const days = Math.floor(hours / 24);
+    const remaining_hours = hours % 24;
+    return remaining_hours > 0 ? `${days}d ${remaining_hours}h` : `${days}d`;
+};
+/**
+ * Truncate a string by keeping the start and end, with a separator in the middle.
+ *
+ * @param str - the string to truncate
+ * @param max_length - maximum total length including separator
+ * @param separator - the middle separator
+ * @returns the truncated string, or the original if it fits
+ */
+export const truncate_middle = (str, max_length, separator = '…') => {
+    if (str.length <= max_length)
+        return str;
+    const available = max_length - separator.length;
+    if (available <= 0)
+        return separator.slice(0, max_length);
+    const start_length = Math.ceil(available / 2);
+    const end_length = Math.floor(available / 2);
+    return str.slice(0, start_length) + separator + str.slice(str.length - end_length);
+};
+/**
+ * Truncate a UUID for display, keeping start and end visible.
+ *
+ * @param uuid - the UUID string to truncate
+ * @returns a 12-character truncated UUID like `a1b2c…7890`
+ */
+export const truncate_uuid = (uuid) => truncate_middle(uuid, 12);
+/**
+ * Format an arbitrary value for table cell display.
+ *
+ * @param value - the value to format
+ * @returns string representation suitable for UI display
+ */
+export const format_value = (value) => {
+    if (value === null)
+        return 'NULL';
+    if (value === undefined)
+        return 'undefined';
+    if (typeof value === 'object')
+        return JSON.stringify(value);
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean' || typeof value === 'bigint')
+        return String(value);
+    if (typeof value === 'symbol')
+        return value.toString();
+    return String(value);
+};
+/**
+ * Format a timestamp as an absolute datetime string for title attributes.
+ *
+ * @param timestamp - a date value
+ * @returns readable absolute datetime like `"2026-03-21 14:30:00 UTC"`
+ */
+export const format_datetime_local = (timestamp) => {
+    const date = timestamp instanceof Date ? timestamp : new Date(timestamp);
+    if (Number.isNaN(date.getTime()))
+        return '';
+    return date
+        .toISOString()
+        .replace('T', ' ')
+        .replace(/\.\d+Z$/, ' UTC');
+};
+/**
+ * Format audit event metadata for display based on event type.
+ *
+ * @param event_type - the audit event type
+ * @param metadata - the metadata object (may be null)
+ * @returns human-readable summary string
+ */
+export const format_audit_metadata = (event_type, metadata) => {
+    if (!metadata)
+        return '';
+    switch (event_type) {
+        case 'login':
+            return metadata.username ? `user: ${metadata.username}` : '';
+        case 'logout':
+            return '';
+        case 'bootstrap':
+            return metadata.error ? `error: ${metadata.error}` : '';
+        case 'signup':
+            return [
+                metadata.username ? `user: ${metadata.username}` : '',
+                metadata.invite_id ? 'via invite' : '',
+                metadata.open_signup ? 'open signup' : '',
+            ]
+                .filter(Boolean)
+                .join(', ');
+        case 'password_change':
+            return metadata.sessions_revoked != null
+                ? `${metadata.sessions_revoked} sessions revoked`
+                : '';
+        case 'session_revoke':
+            return metadata.session_id
+                ? `session: ${truncate_middle(metadata.session_id, 12)}`
+                : '';
+        case 'session_revoke_all':
+            return metadata.count != null ? `${metadata.count} sessions` : '';
+        case 'token_create':
+            return metadata.name ? `"${metadata.name}"` : '';
+        case 'token_revoke':
+            return metadata.token_id ? `token: ${truncate_middle(metadata.token_id, 12)}` : '';
+        case 'token_revoke_all':
+            return metadata.count != null ? `${metadata.count} tokens` : '';
+        case 'permit_grant':
+            return metadata.role ? `role: ${metadata.role}` : '';
+        case 'permit_revoke':
+            return metadata.role ? `role: ${metadata.role}` : '';
+        case 'invite_create':
+            return [
+                metadata.email ? `email: ${metadata.email}` : '',
+                metadata.username ? `user: ${metadata.username}` : '',
+            ]
+                .filter(Boolean)
+                .join(', ');
+        case 'invite_delete':
+            return metadata.invite_id
+                ? `invite: ${truncate_middle(metadata.invite_id, 12)}`
+                : '';
+        case 'app_settings_update':
+            return metadata.setting
+                ? `${metadata.setting}: ${JSON.stringify(metadata.old_value)} → ${JSON.stringify(metadata.new_value)}`
+                : '';
+        default:
+            return JSON.stringify(metadata);
+    }
+};