@jini-ai/admin 0.3.0 → 0.3.6

package/README.md

@@ -18,7 +18,7 @@ not in your bundle.
 | `@jini-ai/admin/core` | contracts, panel registry, route matching, transport, ports | nothing |
 | `@jini-ai/admin/browser` | `window`-bound navigation, link interception | a DOM |
 | `@jini-ai/admin/server` | Composio integration: catalog, OAuth, tool execution | Node.js |
-| `@jini-ai/admin/react` *(not built yet)* | `<AdminShell>`, primitives, panels | React (optional peer) |
+| `@jini-ai/admin/react` | Presentational primitives (`Sidebar`, `DataTable`, `RowMenu`, `ConfirmButton`, `ConfirmDialog`, `InteractiveHtmlEditor`) and hooks; `<AdminShell>` and panels are not built yet | React (optional peer) |
 
 `/core` is the layer a panel author codes against: no React, no DOM, no I/O. That boundary is
 enforced at runtime — this package's vitest config runs `src/core/**` without a jsdom environment,
@@ -133,6 +133,9 @@ unrelated domain features to get a type.
 
 ## Status
 
-Slice 1: `/core` and `/browser`, 76 tests. `/server` (Composio, folded in 2026-08-01, moved back out
-to `@jini-ai/integrations/composio`) no longer exists in this package. `/react` is not built yet,
-and of the twelve planned ports only `AdminIdentityPort` is specified.
+Slice 1: `/core` (75 tests) and `/browser` (no test files). `/server` (Composio, folded in
+2026-08-01, moved back out to `@jini-ai/integrations/composio`) no longer exists in this package.
+`/react` has real content — presentational primitives and hooks (147 tests) — but no `<AdminShell>`
+or panels yet. `src/core/ports/` now specifies 16 ports (`identity`, `menus`, `integrations`,
+`workspace`, `redirects`, `analytics`, `settings`, `forms`, `seo`, `database`, `members`,
+`recovery`, `auth`, `media`, `plugins`, `comments`), not just `AdminIdentityPort`.

package/dist/core/data-table/types.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @file Sort state for `@jini-ai/admin/react`'s `DataTable`. Plain data — no React, no DOM — so a
+ * panel can hold and pass this shape (e.g. as component state) without pulling in the React layer
+ * just for a type. `DataTable.tsx` imports and re-exports these for its own consumers; this file is
+ * the single source of truth.
+ */
+export type DataTableSortDirection = 'asc' | 'desc';
+/** Controlled sort state: the active column's `key` plus its direction. See `sort`/`onSortChange`
+ *  on `DataTableProps` in `DataTable.tsx` — `DataTable` never holds this itself. */
+export interface DataTableSortState {
+    column: string;
+    direction: DataTableSortDirection;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/data-table/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/data-table/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD;oFACoF;AACpF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,sBAAsB,CAAC;CACnC"}

package/dist/core/data-table/types.js

@@ -0,0 +1,8 @@
+/**
+ * @file Sort state for `@jini-ai/admin/react`'s `DataTable`. Plain data — no React, no DOM — so a
+ * panel can hold and pass this shape (e.g. as component state) without pulling in the React layer
+ * just for a type. `DataTable.tsx` imports and re-exports these for its own consumers; this file is
+ * the single source of truth.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/data-table/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/data-table/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/entities/rules.d.ts

@@ -0,0 +1,138 @@
+/**
+ * @file The runtime half of `AdminEntityPort`: registration, descriptor validation, and the one
+ * erasure a screen generic over all entities needs.
+ *
+ * `core/ports/entities.ts` is types only, like every other port. Everything here is the code those
+ * types cannot be: checks that a descriptor is internally consistent, and the single cast that
+ * turns a descriptor-generic port into the shape a screen can hold.
+ *
+ * ## Why any of this is runtime rather than type-level
+ *
+ * Two of the descriptor's own promises are not expressible in the type system:
+ *
+ * - `titleField` names a `text` field on this same descriptor. Encoding that needs a conditional
+ *   type heavy enough to make every descriptor's error message unreadable — and a typo here is not
+ *   cosmetic: it makes every relation picker pointing at this entity render `undefined` for every
+ *   row, which looks like missing data rather than a typo.
+ * - `relation.target` names another *registered* entity. A descriptor cannot know what it will be
+ *   registered beside, so this can only be checked once the registry is assembled.
+ *
+ * Both are therefore checked at composition time, where they fail once, at startup, naming the
+ * problem — rather than at render time, silently, as blank cells.
+ */
+import type { AdminEntityDescriptor, AdminEntityField, AdminEntityPort, AdminEntityRegistry, AdminErasedEntityPort } from '../ports/entities.js';
+/**
+ * A row that does not match the descriptor its port advertises.
+ *
+ * This is the failure `eraseEntityPort`'s cast makes possible: the cast is sound in the direction
+ * that matters (a typed row *is* a bag of unknowns), and unsound only if an adapter lies about its
+ * own descriptor. Nothing in the type system catches that, so this is what does — as a report, not
+ * an exception: a mistyped field is a fidelity problem, and throwing on a read would take a
+ * mostly-working screen down over one bad cell.
+ */
+export interface AdminEntityRowViolation {
+    /** `descriptor.name` of the port that produced the row. */
+    readonly entity: string;
+    readonly operation: 'list' | 'get' | 'create' | 'update';
+    /** The offending row's `id`, or `'<no id>'` when that is itself what is wrong. */
+    readonly rowId: string;
+    /** Declared field name, `'id'`, or the undeclared key that appeared. */
+    readonly field: string;
+    readonly problem: 'missing-required' | 'wrong-type' | 'undeclared-field';
+    /** One sentence naming what was expected and what arrived. Safe to log verbatim. */
+    readonly detail: string;
+}
+export interface AdminEntityErasureOptions {
+    /**
+     * Where descriptor-conformance violations are reported.
+     *
+     * **Omit it and no row checking runs at all** — that is the zero-cost default, and it is why this
+     * package emits no diagnostics of its own (nothing here writes to `console`; a host owns its
+     * reporting the same way it owns its transport). A host wires this under its own development
+     * flag and gets adapter drift surfaced the moment it happens; production pays nothing.
+     */
+    readonly onViolation?: (violation: AdminEntityRowViolation) => void;
+}
+/**
+ * Whether `value` is a legal runtime value for `field`.
+ *
+ * Exported because an EDITOR needs exactly this judgement and must not re-derive it. A generic form
+ * that decides for itself what an `integer` accepts will drift from what the conformance walk
+ * below rejects, and the two disagreeing is worse than either being wrong alone: the form saves a
+ * value the port then reports as a violation, so the write succeeds and the diagnostic blames the
+ * adapter. `1.5` in an `integer` and `Infinity` in a `real` are both reachable from a plain
+ * `<input type="number">` — `step` constrains the spinner, not the parsed value — so this is not a
+ * theoretical seam. One function, both callers.
+ *
+ * @param field The declared field the value is destined for.
+ * @param value The candidate value, typically a form draft entry or an adapter-returned cell.
+ * @returns `null` when it conforms, otherwise a one-phrase reason naming what arrived instead.
+ *   Phrased to complete the sentence "declared `<kind>`; ...".
+ * @complexity Time O(1) for every kind but `json`; see {@link describeNonJsonValue} for that one.
+ * @overallScore 100
+ */
+export declare function describeAdminEntityFieldMismatch(field: AdminEntityField, value: unknown): string | null;
+/**
+ * Erases a port's descriptor generic so a screen can hold ports for different entities in one
+ * collection.
+ *
+ * The `as unknown as` below is unavoidable and is the only one in this port. `create` and `update`
+ * take the row type as a *parameter*, so `AdminEntityPort<SpecificDescriptor>` is contravariant in
+ * it and is genuinely not assignable to any common supertype. The cast is sound in the direction
+ * that gets exercised — a typed row is a bag of unknowns — and unsound only if the adapter's rows
+ * do not match the descriptor it advertises, which is precisely what `options.onViolation` is here
+ * to surface.
+ *
+ * @param port A port whose rows are typed by its own descriptor.
+ * @param options Wire `onViolation` to have every row checked against the descriptor on the way
+ *   out; omit it for zero added cost.
+ * @returns The same port, typed as {@link AdminErasedEntityPort}; a fresh wrapper object when
+ *   `onViolation` is set, and the original object when it is not.
+ * @complexity Time O(1) to erase; O(rows × fields) per call when checking is on.
+ * @overallScore 100
+ */
+export declare function eraseEntityPort<D extends AdminEntityDescriptor>(port: AdminEntityPort<D>, options?: AdminEntityErasureOptions): AdminErasedEntityPort;
+/**
+ * Assembles entity ports into a registry, validating every descriptor first.
+ *
+ * Same ergonomics as `createAdminClient`: one object literal, `TPorts` inferred, host-owned and
+ * Jini-shipped entries indistinguishable. Registering an entity is one line.
+ *
+ * **No key is reserved.** `createAdminClient` reserves `'transport'` because it merges the
+ * transport into the same object it returns; this returns nothing but the ports, so there is
+ * nothing an entity named `transport` could shadow. The returned object has a `null` prototype, so
+ * a lookup by an attacker- or URL-supplied name (`'constructor'`, `'__proto__'`) resolves to
+ * `undefined` rather than walking to `Object.prototype` and yielding a truthy non-port.
+ *
+ * Deliberately takes no erasure options: a registry holds ports with their row types intact, and
+ * checking only becomes possible once those types are erased. `onViolation` therefore belongs to
+ * {@link getErasedEntityPort}/{@link listErasedEntityPorts}, at the point the guarantee is dropped.
+ *
+ * @param ports Entity name -> port. Each key must equal that port's `descriptor.name`.
+ * @returns A frozen, null-prototype registry preserving each port's own type.
+ * @throws {Error} listing *every* problem found, not just the first — a descriptor with three
+ *   typos should take one round trip to fix, not three.
+ * @complexity Time O(entities × fields); space O(entities).
+ * @overallScore 100
+ */
+export declare function createAdminEntityRegistry<TPorts extends Record<string, AdminEntityPort<AdminEntityDescriptor>>>(ports: TPorts): AdminEntityRegistry<TPorts>;
+/**
+ * Every registered port, erased, in registration order — what a screen that renders any entity
+ * iterates.
+ *
+ * @complexity Time O(entities); space O(entities).
+ * @overallScore 100
+ */
+export declare function listErasedEntityPorts(registry: Readonly<Record<string, AdminEntityPort<AdminEntityDescriptor>>>, options?: AdminEntityErasureOptions): readonly AdminErasedEntityPort[];
+/**
+ * The erased port registered under `name`, or `null`.
+ *
+ * `name` is routinely a URL segment, so this never trusts a bare property read: the registry's null
+ * prototype already stops `'constructor'` resolving to something truthy, and `Object.hasOwn` holds
+ * that guarantee even for a caller that hands in a plain object literal instead.
+ *
+ * @complexity Time O(1) for the lookup, O(1) for the erasure.
+ * @overallScore 100
+ */
+export declare function getErasedEntityPort(registry: Readonly<Record<string, AdminEntityPort<AdminEntityDescriptor>>>, name: string, options?: AdminEntityErasureOptions): AdminErasedEntityPort | null;
+//# sourceMappingURL=rules.d.ts.map

package/dist/core/entities/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../../src/core/entities/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,gBAAgB,EAGhB,eAAe,EACf,mBAAmB,EAEnB,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAW9B;;;;;;;;GAQG;AACH,MAAM,WAAW,uBAAuB;IACtC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzD,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,YAAY,GAAG,kBAAkB,CAAC;IACzE,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;OAOG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,uBAAuB,KAAK,IAAI,CAAC;CACrE;AA8CD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,OAAO,GACb,MAAM,GAAG,IAAI,CAuBf;AAyED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,qBAAqB,EAC7D,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,yBAA8B,GACtC,qBAAqB,CAgCvB;AA4DD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,qBAAqB,CAAC,CAAC,EACrE,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAc5C;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAC1E,OAAO,GAAE,yBAA8B,GACtC,SAAS,qBAAqB,EAAE,CAElC;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAC1E,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,yBAA8B,GACtC,qBAAqB,GAAG,IAAI,CAI9B"}

package/dist/core/entities/rules.js

@@ -0,0 +1,344 @@
+/**
+ * @file The runtime half of `AdminEntityPort`: registration, descriptor validation, and the one
+ * erasure a screen generic over all entities needs.
+ *
+ * `core/ports/entities.ts` is types only, like every other port. Everything here is the code those
+ * types cannot be: checks that a descriptor is internally consistent, and the single cast that
+ * turns a descriptor-generic port into the shape a screen can hold.
+ *
+ * ## Why any of this is runtime rather than type-level
+ *
+ * Two of the descriptor's own promises are not expressible in the type system:
+ *
+ * - `titleField` names a `text` field on this same descriptor. Encoding that needs a conditional
+ *   type heavy enough to make every descriptor's error message unreadable — and a typo here is not
+ *   cosmetic: it makes every relation picker pointing at this entity render `undefined` for every
+ *   row, which looks like missing data rather than a typo.
+ * - `relation.target` names another *registered* entity. A descriptor cannot know what it will be
+ *   registered beside, so this can only be checked once the registry is assembled.
+ *
+ * Both are therefore checked at composition time, where they fail once, at startup, naming the
+ * problem — rather than at render time, silently, as blank cells.
+ */
+/** Row keys are never declared as fields — every row carries one implicitly. */
+const IMPLICIT_ROW_KEY = 'id';
+/** Bounds on the `json` conformance walk. Sized like `MAX_FIELD_DEFS` in `@jini-ai/cms`: large
+ *  enough that no honest payload hits them, small enough that a cyclic or adversarial value fails
+ *  fast instead of hanging a render. */
+const MAX_JSON_DEPTH = 32;
+const MAX_JSON_NODES = 10_000;
+/**
+ * Whether `value` is a JSON value: `null`, a boolean, a *finite* number, a string, an array of
+ * them, or a plain object of them.
+ *
+ * Bounded by {@link MAX_JSON_DEPTH}/{@link MAX_JSON_NODES}, which also makes it terminate on a
+ * cyclic value rather than recursing forever. "Storage-only" means not indexed — it does not mean
+ * not checked: a validator that returns true for everything is not a validator, and the values it
+ * would wave through (functions, `BigInt`, `undefined`, `NaN`, cycles) are exactly the ones that
+ * throw or silently vanish at the `JSON.stringify` boundary downstream of it.
+ *
+ * @returns `null` when the value conforms, otherwise a one-phrase reason.
+ * @complexity Time O(nodes) bounded by {@link MAX_JSON_NODES}; space O(depth) bounded by
+ *   {@link MAX_JSON_DEPTH}.
+ * @overallScore 100
+ */
+function describeNonJsonValue(value, depth = 0, budget = { nodes: 0 }) {
+    if (depth > MAX_JSON_DEPTH)
+        return `nests deeper than ${MAX_JSON_DEPTH} levels`;
+    if (++budget.nodes > MAX_JSON_NODES)
+        return `holds more than ${MAX_JSON_NODES} values`;
+    if (value === null)
+        return null;
+    const type = typeof value;
+    if (type === 'string' || type === 'boolean')
+        return null;
+    if (type === 'number')
+        return Number.isFinite(value) ? null : 'is a non-finite number';
+    if (type !== 'object')
+        return `is a ${type}`;
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            const reason = describeNonJsonValue(item, depth + 1, budget);
+            if (reason !== null)
+                return reason;
+        }
+        return null;
+    }
+    // Rejects class instances, `Map`, `Date`, and anything else that survives `typeof === 'object'`
+    // but does not round-trip through JSON as itself.
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null)
+        return 'is a non-plain object';
+    for (const item of Object.values(value)) {
+        const reason = describeNonJsonValue(item, depth + 1, budget);
+        if (reason !== null)
+            return reason;
+    }
+    return null;
+}
+/**
+ * Whether `value` is a legal runtime value for `field`.
+ *
+ * Exported because an EDITOR needs exactly this judgement and must not re-derive it. A generic form
+ * that decides for itself what an `integer` accepts will drift from what the conformance walk
+ * below rejects, and the two disagreeing is worse than either being wrong alone: the form saves a
+ * value the port then reports as a violation, so the write succeeds and the diagnostic blames the
+ * adapter. `1.5` in an `integer` and `Infinity` in a `real` are both reachable from a plain
+ * `<input type="number">` — `step` constrains the spinner, not the parsed value — so this is not a
+ * theoretical seam. One function, both callers.
+ *
+ * @param field The declared field the value is destined for.
+ * @param value The candidate value, typically a form draft entry or an adapter-returned cell.
+ * @returns `null` when it conforms, otherwise a one-phrase reason naming what arrived instead.
+ *   Phrased to complete the sentence "declared `<kind>`; ...".
+ * @complexity Time O(1) for every kind but `json`; see {@link describeNonJsonValue} for that one.
+ * @overallScore 100
+ */
+export function describeAdminEntityFieldMismatch(field, value) {
+    switch (field.kind) {
+        case 'text':
+        case 'relation':
+            return typeof value === 'string' ? null : `expected a string, got ${typeof value}`;
+        case 'datetime':
+            if (typeof value !== 'string')
+                return `expected an ISO-8601 string, got ${typeof value}`;
+            // A `datetime` that is not parseable renders fine and orders wrongly — the exact class of
+            // fault this whole check exists for, so it is a mismatch rather than a pass.
+            return Number.isNaN(Date.parse(value)) ? 'is not a parseable ISO-8601 timestamp' : null;
+        case 'integer':
+            if (typeof value !== 'number')
+                return `expected a number, got ${typeof value}`;
+            return Number.isInteger(value) ? null : 'is not an integer';
+        case 'real':
+            if (typeof value !== 'number')
+                return `expected a number, got ${typeof value}`;
+            return Number.isFinite(value) ? null : 'is not a finite number';
+        case 'boolean':
+            return typeof value === 'boolean' ? null : `expected a boolean, got ${typeof value}`;
+        case 'json': {
+            const reason = describeNonJsonValue(value);
+            return reason === null ? null : `is not a JSON value: it ${reason}`;
+        }
+    }
+}
+/**
+ * Every way `row` fails to match `descriptor`.
+ *
+ * Reports undeclared keys as well as missing and mistyped ones: a key the descriptor does not
+ * mention is invisible to a generic screen, so an adapter growing a field without declaring it
+ * shows up as data that exists and never renders — which reads as a screen bug rather than a
+ * descriptor gap.
+ *
+ * @complexity Time O(fields + row keys) plus the `json` walk; space O(violations).
+ * @overallScore 100
+ */
+function findRowViolations(descriptor, operation, row) {
+    const found = [];
+    const rowId = typeof row.id === 'string' && row.id !== '' ? row.id : '<no id>';
+    const push = (field, problem, detail) => {
+        found.push({ entity: descriptor.name, operation, rowId, field, problem, detail });
+    };
+    if (typeof row.id !== 'string' || row.id === '') {
+        push(IMPLICIT_ROW_KEY, 'wrong-type', 'every row must carry a non-empty string `id`');
+    }
+    const declared = new Set([IMPLICIT_ROW_KEY]);
+    for (const field of descriptor.fields) {
+        declared.add(field.name);
+        const value = row[field.name];
+        if (value === undefined) {
+            if (field.required === true) {
+                push(field.name, 'missing-required', 'declared `required: true` but absent from the row');
+            }
+            continue;
+        }
+        const mismatch = describeAdminEntityFieldMismatch(field, value);
+        if (mismatch !== null)
+            push(field.name, 'wrong-type', `declared \`${field.kind}\`; ${mismatch}`);
+    }
+    for (const key of Object.keys(row)) {
+        if (declared.has(key))
+            continue;
+        push(key, 'undeclared-field', 'present on the row but not declared on the descriptor');
+    }
+    return found;
+}
+/**
+ * Runs `row` past its descriptor and reports anything wrong, then returns it unchanged.
+ *
+ * Deliberately identity-returning: this is an observation point, never a repair point. Coercing a
+ * bad value here would hide the adapter bug it exists to expose.
+ *
+ * @complexity Time O(rows × fields); no-op and O(1) when `onViolation` is absent.
+ * @overallScore 100
+ */
+function checkRow(descriptor, operation, row, onViolation) {
+    if (onViolation === undefined)
+        return row;
+    for (const violation of findRowViolations(descriptor, operation, row))
+        onViolation(violation);
+    return row;
+}
+/**
+ * Erases a port's descriptor generic so a screen can hold ports for different entities in one
+ * collection.
+ *
+ * The `as unknown as` below is unavoidable and is the only one in this port. `create` and `update`
+ * take the row type as a *parameter*, so `AdminEntityPort<SpecificDescriptor>` is contravariant in
+ * it and is genuinely not assignable to any common supertype. The cast is sound in the direction
+ * that gets exercised — a typed row is a bag of unknowns — and unsound only if the adapter's rows
+ * do not match the descriptor it advertises, which is precisely what `options.onViolation` is here
+ * to surface.
+ *
+ * @param port A port whose rows are typed by its own descriptor.
+ * @param options Wire `onViolation` to have every row checked against the descriptor on the way
+ *   out; omit it for zero added cost.
+ * @returns The same port, typed as {@link AdminErasedEntityPort}; a fresh wrapper object when
+ *   `onViolation` is set, and the original object when it is not.
+ * @complexity Time O(1) to erase; O(rows × fields) per call when checking is on.
+ * @overallScore 100
+ */
+export function eraseEntityPort(port, options = {}) {
+    const erased = port;
+    const { onViolation } = options;
+    if (onViolation === undefined)
+        return erased;
+    const { descriptor } = port;
+    const checked = {
+        descriptor,
+        async list(query) {
+            const page = await erased.list(query);
+            for (const row of page.items)
+                checkRow(descriptor, 'list', row, onViolation);
+            return page;
+        },
+        async get(id) {
+            const row = await erased.get(id);
+            return row === null ? null : checkRow(descriptor, 'get', row, onViolation);
+        },
+        async create(input) {
+            return checkRow(descriptor, 'create', await erased.create(input), onViolation);
+        },
+        async update(id, patch) {
+            return checkRow(descriptor, 'update', await erased.update(id, patch), onViolation);
+        },
+    };
+    // Preserved by presence, not by a forwarding stub: a screen decides whether to render a delete
+    // affordance by testing `remove !== undefined`, so wrapping an absent one into an always-present
+    // function would give every entity a delete button that throws.
+    const { remove } = erased;
+    if (remove === undefined)
+        return checked;
+    // `.call(erased, ...)` rather than a bare reference: an adapter written as an object literal with
+    // shorthand methods may legitimately use `this` to reach its own store.
+    return { ...checked, remove: (id) => remove.call(erased, id) };
+}
+/**
+ * Every internal inconsistency in one descriptor, as human-readable sentences.
+ *
+ * @param descriptor The descriptor to check.
+ * @param registryKey The key it is being registered under.
+ * @param registeredNames Every name in the registry, for resolving `relation` targets.
+ * @complexity Time O(fields); space O(problems).
+ * @overallScore 100
+ */
+function findDescriptorProblems(descriptor, registryKey, registeredNames) {
+    const problems = [];
+    const at = `'${registryKey}'`;
+    if (descriptor.name !== registryKey) {
+        // One entity, one name. Allowing these to differ would leave the URL segment, the relation
+        // target, and the registry key as three identifiers with no stated relationship between them.
+        problems.push(`${at}: registered under '${registryKey}' but its descriptor is named '${descriptor.name}'`);
+    }
+    if (descriptor.labelSingular === '' || descriptor.labelPlural === '') {
+        problems.push(`${at}: labelSingular and labelPlural must both be non-empty`);
+    }
+    if (descriptor.fields.length === 0) {
+        problems.push(`${at}: declares no fields, so nothing but its id could ever be shown or edited`);
+    }
+    const seen = new Set();
+    for (const field of descriptor.fields) {
+        if (field.name === '') {
+            problems.push(`${at}: a field has an empty name`);
+            continue;
+        }
+        if (field.name === IMPLICIT_ROW_KEY) {
+            problems.push(`${at}: '${IMPLICIT_ROW_KEY}' is implicit on every row and must not be declared as a field`);
+        }
+        if (seen.has(field.name))
+            problems.push(`${at}: field '${field.name}' is declared more than once`);
+        seen.add(field.name);
+        if (field.kind === 'relation' && !registeredNames.has(field.target)) {
+            problems.push(`${at}: field '${field.name}' targets '${field.target}', which is not a registered entity`);
+        }
+    }
+    const titleField = descriptor.fields.find((field) => field.name === descriptor.titleField);
+    if (titleField === undefined) {
+        problems.push(`${at}: titleField '${descriptor.titleField}' does not name a declared field`);
+    }
+    else if (titleField.kind !== 'text') {
+        problems.push(`${at}: titleField '${descriptor.titleField}' is kind '${titleField.kind}'; a title must be 'text'`);
+    }
+    return problems;
+}
+/**
+ * Assembles entity ports into a registry, validating every descriptor first.
+ *
+ * Same ergonomics as `createAdminClient`: one object literal, `TPorts` inferred, host-owned and
+ * Jini-shipped entries indistinguishable. Registering an entity is one line.
+ *
+ * **No key is reserved.** `createAdminClient` reserves `'transport'` because it merges the
+ * transport into the same object it returns; this returns nothing but the ports, so there is
+ * nothing an entity named `transport` could shadow. The returned object has a `null` prototype, so
+ * a lookup by an attacker- or URL-supplied name (`'constructor'`, `'__proto__'`) resolves to
+ * `undefined` rather than walking to `Object.prototype` and yielding a truthy non-port.
+ *
+ * Deliberately takes no erasure options: a registry holds ports with their row types intact, and
+ * checking only becomes possible once those types are erased. `onViolation` therefore belongs to
+ * {@link getErasedEntityPort}/{@link listErasedEntityPorts}, at the point the guarantee is dropped.
+ *
+ * @param ports Entity name -> port. Each key must equal that port's `descriptor.name`.
+ * @returns A frozen, null-prototype registry preserving each port's own type.
+ * @throws {Error} listing *every* problem found, not just the first — a descriptor with three
+ *   typos should take one round trip to fix, not three.
+ * @complexity Time O(entities × fields); space O(entities).
+ * @overallScore 100
+ */
+export function createAdminEntityRegistry(ports) {
+    const entries = Object.entries(ports);
+    const registeredNames = new Set(entries.map(([, port]) => port.descriptor.name));
+    const problems = entries.flatMap(([key, port]) => findDescriptorProblems(port.descriptor, key, registeredNames));
+    if (problems.length > 0) {
+        throw new Error(`createAdminEntityRegistry: invalid descriptors\n- ${problems.join('\n- ')}`);
+    }
+    const registry = Object.create(null);
+    for (const [key, port] of entries)
+        registry[key] = port;
+    return Object.freeze(registry);
+}
+/**
+ * Every registered port, erased, in registration order — what a screen that renders any entity
+ * iterates.
+ *
+ * @complexity Time O(entities); space O(entities).
+ * @overallScore 100
+ */
+export function listErasedEntityPorts(registry, options = {}) {
+    return Object.values(registry).map((port) => eraseEntityPort(port, options));
+}
+/**
+ * The erased port registered under `name`, or `null`.
+ *
+ * `name` is routinely a URL segment, so this never trusts a bare property read: the registry's null
+ * prototype already stops `'constructor'` resolving to something truthy, and `Object.hasOwn` holds
+ * that guarantee even for a caller that hands in a plain object literal instead.
+ *
+ * @complexity Time O(1) for the lookup, O(1) for the erasure.
+ * @overallScore 100
+ */
+export function getErasedEntityPort(registry, name, options = {}) {
+    if (!Object.hasOwn(registry, name))
+        return null;
+    const port = registry[name];
+    return port === undefined ? null : eraseEntityPort(port, options);
+}
+//# sourceMappingURL=rules.js.map

package/dist/core/entities/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../../src/core/entities/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAaH,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B;;wCAEwC;AACxC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,MAAM,CAAC;AAoC9B;;;;;;;;;;;;;;GAcG;AACH,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE;IAC5E,IAAI,KAAK,GAAG,cAAc;QAAE,OAAO,qBAAqB,cAAc,SAAS,CAAC;IAChF,IAAI,EAAE,MAAM,CAAC,KAAK,GAAG,cAAc;QAAE,OAAO,mBAAmB,cAAc,SAAS,CAAC;IAEvF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;IACvF,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,IAAI,EAAE,CAAC;IAE7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7D,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gGAAgG;IAChG,kDAAkD;IAClD,MAAM,KAAK,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,uBAAuB,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAAuB,EACvB,KAAc;IAEd,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,OAAO,KAAK,EAAE,CAAC;QACrF,KAAK,UAAU;YACb,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,oCAAoC,OAAO,KAAK,EAAE,CAAC;YACzF,0FAA0F;YAC1F,6EAA6E;YAC7E,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,KAAK,SAAS;YACZ,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,0BAA0B,OAAO,KAAK,EAAE,CAAC;YAC/E,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC9D,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,0BAA0B,OAAO,KAAK,EAAE,CAAC;YAC/E,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,OAAO,KAAK,EAAE,CAAC;QACvF,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2BAA2B,MAAM,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,UAAiC,EACjC,SAA+C,EAC/C,GAAuB;IAEvB,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,IAAI,GAAG,CACX,KAAa,EACb,OAA2C,EAC3C,MAAc,EACR,EAAE;QACR,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,8CAA8C,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,mDAAmD,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,cAAc,KAAK,CAAC,IAAI,OAAO,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,uDAAuD,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CACf,UAAiC,EACjC,SAA+C,EAC/C,GAAS,EACT,WAAuE;IAEvE,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAC1C,KAAK,MAAM,SAAS,IAAI,iBAAiB,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC;QAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAwB,EACxB,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAG,IAAwC,CAAC;IACxD,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAChC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAE7C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,OAAO,GAA0B;QACrC,UAAU;QACV,KAAK,CAAC,IAAI,CAAC,KAA4B;YACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK;gBAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAU;YAClB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAA8B;YACzC,OAAO,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA8B;YACrD,OAAO,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;QACrF,CAAC;KACF,CAAC;IACF,+FAA+F;IAC/F,iGAAiG;IACjG,gEAAgE;IAChE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACzC,kGAAkG;IAClG,wEAAwE;IACxE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAC7B,UAAiC,EACjC,WAAmB,EACnB,eAAoC;IAEpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,WAAW,GAAG,CAAC;IAE9B,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,2FAA2F;QAC3F,8FAA8F;QAC9F,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,WAAW,kCAAkC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,KAAK,EAAE,IAAI,UAAU,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,2EAA2E,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,gBAAgB,gEAAgE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,KAAK,CAAC,IAAI,8BAA8B,CAAC,CAAC;QACnG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CACX,GAAG,EAAE,YAAY,KAAK,CAAC,IAAI,cAAc,KAAK,CAAC,MAAM,qCAAqC,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3F,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,UAAU,CAAC,UAAU,kCAAkC,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACtC,QAAQ,CAAC,IAAI,CACX,GAAG,EAAE,iBAAiB,UAAU,CAAC,UAAU,cAAc,UAAU,CAAC,IAAI,2BAA2B,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,yBAAyB,CAEvC,KAAa;IACb,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAC/C,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,eAAe,CAAC,CAC9D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2D,CAAC;IAC/F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAgC,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA0E,EAC1E,UAAqC,EAAE;IAEvC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAA0E,EAC1E,IAAY,EACZ,UAAqC,EAAE;IAEvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC"}

package/dist/core/index.d.ts

@@ -15,6 +15,10 @@ export { hasPermission } from './permissions/rules.js';
 export { AdminApiError, createAdminClient, createHttpTransport, describeApiError, } from './transport/index.js';
 export type { AdminClient, AdminRouteGroupFactory, AdminTransport, AdminFetch, HttpTransportOptions, } from './transport/index.js';
 export type { GatedConfirmResult, GatedOperation, GatedPlanResult } from './gated/types.js';
+export type { DataTableSortDirection, DataTableSortState } from './data-table/types.js';
 export type { AdminAnalyticsHit, AdminAnalyticsPort, AdminAuthPort, AdminAuthUser, AdminComment, AdminCommentsPort, AdminCommentsQueuePage, AdminDatabasePort, AdminDegradedBanner, AdminDisclosureResult, AdminExtensionEnabledResult, AdminExtensionsPort, AdminIdentityPort, AdminIdentityUser, AdminIntegrationDelivery, AdminIntegrationDeliverySummary, AdminIntegrationSubscription, AdminIntegrationsPort, AdminLedgerRow, AdminMedia, AdminMediaPort, AdminMember, AdminMembersPort, AdminPlugin, AdminPolicy, AdminRecoveryDeepLinkResult, AdminRecoveryPort, AdminRecoveryStatus, AdminRestorePoint, AdminRestorePointSummary, AdminRole, AdminSettingsPort, AdminWorkspace, AdminWorkspacePort, CategoryCount, CommentModerationAction, CommentsSettings, CommentStatus, DatabaseContextEnvelope, DegradedBannerActionKind, DegradedBannerKind, MigrateForwardResult, RestoreConfirmInput, RestoreExecuteInput, RestoreExecuteResult, RestorePointCostClass, SettingResolvedValue, SettingResetResponse, SettingScope, SettingValueResponse, } from './ports/index.js';
 export type { AdminAssignMenuLocationResult, AdminDeleteMenuResult, AdminFormCreateInput, AdminFormDefinition, AdminFormField, AdminFormNotifyConfig, AdminFormsPort, AdminFormSubmission, AdminFormSubmissionPage, AdminFormUpdatePatch, AdminMenu, AdminMenuBinding, AdminMenuCreateInput, AdminMenuCustomTarget, AdminMenuEntryTarget, AdminMenuItem, AdminMenuItemAttrs, AdminMenuRouteTarget, AdminMenusPort, AdminMenuTarget, AdminMenuTermTarget, AdminMenuUpdateTreeInput, AdminMenuUrlTarget, AdminRedirect, AdminRedirectCreateInput, AdminRedirectHitStats, AdminRedirectImportFailure, AdminRedirectImportResult, AdminRedirectListFilter, AdminRedirectsPort, AdminRedirectUpdatePatch, AdminSeoAnalysis, AdminSeoIssue, AdminSeoMeta, AdminSeoOpenGraph, AdminSeoOverrides, AdminSeoPort, AdminSeoRobotsDirective, AdminSeoRobotsRule, AdminSeoSettings, AdminSeoTwitterCard, FormDefinitionStatus, FormFieldType, MenuStatus, NavTargetKind, RedirectMatchType, RedirectSource, RedirectStatus, RedirectStatusCode, SeoIssueSeverity, SeoOpenGraphType, SeoTwitterCardKind, } from './ports/index.js';
+export type { AdminEntityDescriptor, AdminEntityField, AdminEntityFieldKind, AdminEntityFilter, AdminEntityJsonField, AdminEntityListQuery, AdminEntityPage, AdminEntityPort, AdminEntityRegistry, AdminEntityRelationField, AdminEntityRow, AdminEntityRowData, AdminEntityScalarField, AdminErasedEntityPort, } from './ports/index.js';
+export { createAdminEntityRegistry, describeAdminEntityFieldMismatch, eraseEntityPort, getErasedEntityPort, listErasedEntityPorts, } from './entities/rules.js';
+export type { AdminEntityErasureOptions, AdminEntityRowViolation } from './entities/rules.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG7F,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,WAAW,EACX,sBAAsB,EACtB,cAAc,EACd,UAAU,EACV,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG5F,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,SAAS,EACT,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG7F,YAAY,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAGvD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,WAAW,EACX,sBAAsB,EACtB,cAAc,EACd,UAAU,EACV,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAI5F,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAGxF,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,EACrB,cAAc,EACd,UAAU,EACV,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,YAAY,EACZ,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,SAAS,EACT,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,wBAAwB,EACxB,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAI1B,YAAY,EACV,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/core/index.js

@@ -12,4 +12,5 @@ export { DEFAULT_ADMIN_BASE, adminHref, currentRoutePath, matchRoute, stripTrail
 export { hasPermission } from './permissions/rules.js';
 // Transport — the seam every route group is built on.
 export { AdminApiError, createAdminClient, createHttpTransport, describeApiError, } from './transport/index.js';
+export { createAdminEntityRegistry, describeAdminEntityFieldMismatch, eraseEntityPort, getErasedEntityPort, listErasedEntityPorts, } from './entities/rules.js';
 //# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,kEAAkE;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,sDAAsD;AACtD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,kBAAkB,EAClB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,kEAAkE;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEvD,sDAAsD;AACtD,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AA8I9B,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC"}