@nestjs-dash/nestjs 0.1.1

package/dist/controllers/admin.controller.js

@@ -0,0 +1,1062 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var AdminController_1;
+import { isRelationCapable, isSoftDeleteCapable } from '@nestjs-dash/adapter';
+import { collectJsonTextareaFields, parseJsonArrayFields, parseJsonTextareaFields, stringifyJsonTextareaFields, validateFormPayload, } from '@nestjs-dash/core';
+import { Body, Controller, Delete, Get, Header, Inject, Logger, NotFoundException, Optional, Param, Post, Put, Query, Req, Res, UseGuards, UseInterceptors, } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { AdminAction } from '../decorators/admin-action.decorator.js';
+import { AdminAuditInterceptor } from '../features/audit/index.js';
+import { AdminPublic } from '../features/auth/public.decorator.js';
+import { parseCookies } from '../features/auth/session.js';
+import { enrichRecordsWithImageUrls, hydrateFormMediaValues } from '../features/media/enrich.js';
+import { extractMediaFields } from '../features/media/media.helpers.js';
+import { AdminAuthGuard } from '../guards/admin-auth.guard.js';
+import { AdminPolicyGuard } from '../guards/admin-policy.guard.js';
+import { executeActionHandler, findActionNode } from '../helpers/action.helpers.js';
+import { NAV_COLLAPSE_COOKIE_NAME, applyNavCollapseState, parseNavCollapseCookie, sanitizeCollapsedGroups, } from '../helpers/nav-collapse.helper.js';
+import { loadRelationSections, requireRelationAdapter, requireRelationManager, resolveBelongsToOptions, } from '../helpers/relation.helpers.js';
+import { resolveShellAssets } from '../helpers/shell-assets.helper.js';
+import { NESTJS_DASH_MEDIA_SERVICE, NESTJS_DASH_STORAGE_SERVICE, } from '../plugin-contracts.js';
+import { THEME_COOKIE_NAME, isThemeCookieValue } from '../react/theme.js';
+import { NESTJS_DASH_PANEL } from '../tokens.js';
+import { buildCustomPagePayload, buildDashboardPayload, buildFormPayload, buildListPayload, buildRelationPayload, buildViewPayload, renderCustomPageHtml, renderDashboardHtml, renderFormPage, renderListHtml, renderRelationActionPage, renderViewHtml, } from '../views/admin.views.js';
+const SPA_NAV_HEADER = 'x-nestjs-dash-nav';
+const require = createRequire(import.meta.url);
+let AdminController = AdminController_1 = class AdminController {
+    constructor(panel, storage, media, moduleRef) {
+        this.panel = panel;
+        this.storage = storage;
+        this.media = media;
+        this.moduleRef = moduleRef;
+        this.logger = new Logger(AdminController_1.name);
+    }
+    resolvePageInstance(pageClass) {
+        try {
+            return this.moduleRef.get(pageClass, { strict: false });
+        }
+        catch (error) {
+            this.logger.warn(`Page "${pageClass.slug ?? pageClass.name}" is not resolvable via ModuleRef ` +
+                `(${error instanceof Error ? error.message : String(error)}); constructing it ` +
+                'directly with no injected dependencies. If this page needs DI, make sure its ' +
+                "class is listed in a module's `providers: [...]` array.");
+        }
+        return new pageClass();
+    }
+    shellAssets(req) {
+        return resolveShellAssets(this.panel, req);
+    }
+    collapsedGroupLabels(req) {
+        return parseNavCollapseCookie(parseCookies(req?.headers.cookie)[NAV_COLLAPSE_COOKIE_NAME]);
+    }
+    wantsJson(req) {
+        return req?.header(SPA_NAV_HEADER) === '1';
+    }
+    policyContext(req, action) {
+        const user = req
+            ?.nestjsDashUser;
+        return { user, request: req, action };
+    }
+    sendRedirect(req, res, url) {
+        if (this.wantsJson(req)) {
+            res.status(200).json({ redirect: url });
+            return;
+        }
+        res.redirect(303, url);
+    }
+    serveStylesheet(res) {
+        try {
+            const cssPath = require.resolve('@nestjs-dash/design-system/nestjs-dash.css');
+            res.sendFile(cssPath);
+        }
+        catch {
+            throw new NotFoundException('Admin stylesheet not found. Build @nestjs-dash/design-system first.');
+        }
+    }
+    serveClientScript(res) {
+        const jsPath = join(dirname(fileURLToPath(import.meta.url)), '../client/nestjs-dash.js');
+        res.sendFile(jsPath, (err) => {
+            if (err && !res.headersSent) {
+                res.status(404).json({
+                    message: 'Admin client script not found. Build @nestjs-dash/core first.',
+                    error: 'Not Found',
+                    statusCode: 404,
+                });
+            }
+        });
+    }
+    setTheme(body, res) {
+        if (!isThemeCookieValue(body?.theme)) {
+            res.status(400).json({ message: 'Invalid theme value.' });
+            return;
+        }
+        res.cookie(THEME_COOKIE_NAME, body.theme, {
+            path: this.panel.getPath(),
+            maxAge: 60 * 60 * 24 * 365 * 1000,
+            httpOnly: true,
+            sameSite: 'lax',
+        });
+        res.status(204).send();
+    }
+    setNavCollapse(body, res) {
+        const groups = sanitizeCollapsedGroups(body?.collapsedGroups);
+        res.cookie(NAV_COLLAPSE_COOKIE_NAME, JSON.stringify(groups), {
+            path: this.panel.getPath(),
+            maxAge: 60 * 60 * 24 * 365 * 1000,
+            httpOnly: true,
+            sameSite: 'lax',
+        });
+        res.status(204).send();
+    }
+    async renderDashboard(req) {
+        const serialized = this.panel.serialize();
+        const cards = await Promise.all(serialized.resources.map(async (resource) => {
+            const adapter = this.panel.getResourceAdapter(resource.slug);
+            const totalItems = adapter
+                ? (await adapter.find({ page: 1, limit: 1 }, resource.listQueryConfig ?? undefined)).meta
+                    .totalItems
+                : 0;
+            return { resource, totalItems };
+        }));
+        const policyCtx = this.policyContext(req, 'view');
+        const ctx = { panelPath: serialized.path, brandName: serialized.brandName };
+        const widgets = await this.renderWidgetList(this.panel.getWidgets(), ctx, policyCtx);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            cards,
+            widgets,
+        };
+        return this.wantsJson(req) ? buildDashboardPayload(model) : renderDashboardHtml(model);
+    }
+    async renderWidgetList(widgetList, ctx, policyCtx) {
+        const widgets = { main: [], side: [] };
+        for (const widget of widgetList) {
+            if (widget.canAccess && !(await widget.canAccess(policyCtx))) {
+                continue;
+            }
+            const slot = widget.slot ?? 'main';
+            if (widget.chart) {
+                widgets[slot].push({ type: 'chart', chart: await widget.chart(ctx) });
+            }
+            else if (widget.render) {
+                widgets[slot].push({ type: 'html', html: await widget.render(ctx) });
+            }
+            else {
+                this.logger.warn(`Widget in slot "${slot}" implements neither render() nor chart() — skipping.`);
+            }
+        }
+        return widgets;
+    }
+    getPanelApi() {
+        return this.panel.serialize();
+    }
+    getResource(slug) {
+        return this.requireResource(slug);
+    }
+    async listRecords(slug, query) {
+        const resource = this.requireResource(slug);
+        const adapter = this.requireAdapter(slug);
+        return adapter.find(parseListQuery(query), resource.listQueryConfig ?? undefined);
+    }
+    async getRecord(slug, id) {
+        const adapter = this.requireAdapter(slug);
+        const record = await adapter.findOne(id);
+        if (!record) {
+            throw new NotFoundException(`Record ${id} not found`);
+        }
+        return record;
+    }
+    async createRecord(slug, body) {
+        return this.requireAdapter(slug).create(normalizeBody(body));
+    }
+    async updateRecord(slug, id, body) {
+        return this.requireAdapter(slug).update(id, normalizeBody(body));
+    }
+    async deleteRecord(slug, id) {
+        await this.requireAdapter(slug).delete(id);
+        return { ok: true };
+    }
+    async listOptions(resourceSlug, query) {
+        const adapter = this.requireAdapter(resourceSlug);
+        if (!isRelationCapable(adapter)) {
+            throw new NotFoundException(`Options loader unavailable for ${resourceSlug}`);
+        }
+        return adapter.searchRelatedOptions({
+            resource: resourceSlug,
+            titleAttribute: query.titleAttribute ?? 'name',
+            searchBy: query.searchBy?.split(',').filter(Boolean),
+        }, { search: query.search, limit: query.limit ? Number(query.limit) : 25 });
+    }
+    async renderCustomPage(pageSlug, req) {
+        const pageClass = this.panel.getPageClass(pageSlug);
+        if (!pageClass) {
+            throw new NotFoundException(`Page ${pageSlug} not found`);
+        }
+        const serialized = this.panel.serialize();
+        const page = serialized.pages.find((item) => item.slug === pageSlug);
+        if (!page) {
+            throw new NotFoundException(`Page ${pageSlug} not found`);
+        }
+        const instance = this.resolvePageInstance(pageClass);
+        const ctx = { panelPath: serialized.path, brandName: serialized.brandName };
+        const declaredWidgets = (await instance.widgets?.(ctx)) ?? [];
+        const content = await (instance.content?.(ctx) ??
+            (declaredWidgets.length > 0 ? '' : `<p class="text-afi-muted mt-4">Empty page.</p>`));
+        const widgets = declaredWidgets.length > 0
+            ? await this.renderWidgetList(declaredWidgets, ctx, this.policyContext(req, 'view'))
+            : undefined;
+        const pageStyles = await instance.styles?.(ctx);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            slug: page.slug,
+            title: page.title,
+            content,
+            widgets,
+            pageStyles,
+        };
+        return this.wantsJson(req) ? buildCustomPagePayload(model) : renderCustomPageHtml(model);
+    }
+    async submitPageAction(pageSlug, action, body, res, req) {
+        const pageClass = this.panel.getPageClass(pageSlug);
+        if (!pageClass) {
+            throw new NotFoundException(`Page ${pageSlug} not found`);
+        }
+        const instance = this.resolvePageInstance(pageClass);
+        const handler = instance.actions?.[action];
+        if (!handler) {
+            throw new NotFoundException(`Action ${action} not found on page ${pageSlug}`);
+        }
+        const result = await handler({
+            pageSlug,
+            action,
+            values: body,
+            user: this.policyContext(req, action).user,
+            request: req,
+        });
+        this.sendRedirect(req, res, `${this.panel.getPath()}/pages/${pageSlug}?flash=${encodeURIComponent(result?.message ?? `Ran ${action}`)}`);
+    }
+    async renderRelationCreate(slug, id, relation, req) {
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const ownerRecord = (await this.requireAdapter(slug).findOne(id)) ?? undefined;
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            manager,
+            ownerId: id,
+            ownerRecord,
+            title: `Create ${manager.title}`,
+            action: `${serialized.path}/${slug}/${id}/relations/${relation}/create`,
+            mode: 'create',
+        };
+        return this.wantsJson(req) ? buildRelationPayload(model) : renderRelationActionPage(model);
+    }
+    async submitRelationCreate(slug, id, relation, body, req, res) {
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const ownerAdapter = requireRelationAdapter(this.requireAdapter(slug));
+        const relatedAdapter = this.requireAdapter(manager.relatedResource);
+        const payload = normalizeBody(body);
+        if (manager.type === 'has-many' && manager.foreignKey) {
+            payload[manager.foreignKey] = id;
+        }
+        const created = await relatedAdapter.create(payload);
+        if (manager.type === 'belongs-to-many') {
+            await ownerAdapter.attach(id, manager.definition, String(created.id), pickPivot(body, manager.pivotFields));
+        }
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async renderAssociate(slug, id, relation, req) {
+        return this.renderLinkForm(slug, id, relation, 'associate', req);
+    }
+    async submitAssociate(slug, id, relation, body, req, res) {
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const adapter = requireRelationAdapter(this.requireAdapter(slug));
+        await adapter.associate(id, manager.definition, String(body.relatedId));
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async renderAttach(slug, id, relation, req) {
+        return this.renderLinkForm(slug, id, relation, 'attach', req);
+    }
+    async submitAttach(slug, id, relation, body, req, res) {
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const adapter = requireRelationAdapter(this.requireAdapter(slug));
+        await adapter.attach(id, manager.definition, String(body.relatedId), pickPivot(body, manager.pivotFields));
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async submitDissociate(slug, id, relation, relatedId, req, res) {
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const adapter = requireRelationAdapter(this.requireAdapter(slug));
+        await adapter.dissociate(id, manager.definition, relatedId);
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async submitDetach(slug, id, relation, relatedId, req, res) {
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const adapter = requireRelationAdapter(this.requireAdapter(slug));
+        await adapter.detach(id, manager.definition, relatedId);
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async renderCreate(slug, req) {
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const fieldOptions = await resolveBelongsToOptions(this.panel, resource);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            title: `Create ${resource.label}`,
+            action: `${serialized.path}/${slug}/create`,
+            submitLabel: 'Create',
+            fieldOptions,
+        };
+        return this.wantsJson(req) ? buildFormPayload(model) : renderFormPage(model);
+    }
+    async submitCreate(slug, body, res, req) {
+        const resource = this.requireResource(slug);
+        const { payload: mediaPayload, mediaByField } = extractMediaFields(normalizeBody(body), resource.form);
+        let payload = parseJsonArrayFields(mediaPayload, resource.form);
+        payload = parseJsonTextareaFields(payload, resource.form);
+        const errors = validateFormPayload(resource.form, payload);
+        if (errors) {
+            await this.rerenderForm(req, res, {
+                slug,
+                resource,
+                title: `Create ${resource.label}`,
+                action: `${this.panel.getPath()}/${slug}/create`,
+                submitLabel: 'Create',
+                values: payload,
+                errors,
+            });
+            return;
+        }
+        const created = await this.requireAdapter(slug).create(payload);
+        await this.syncMediaFields(slug, String(created.id), mediaByField);
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${String(created.id)}`);
+    }
+    async submitBulk(slug, body, req, res) {
+        const resource = this.requireResource(slug);
+        const adapter = this.requireAdapter(slug);
+        const action = String(body.bulkAction ?? '');
+        const ids = normalizeIds(body.ids);
+        const actionNode = findActionNode(resource.table?.bulkActions, action);
+        let message = `Processed ${ids.length} record(s)`;
+        if (actionNode) {
+            const records = (await Promise.all(ids.map((recordId) => adapter.findOne(recordId)))).filter((record) => record != null);
+            const result = await executeActionHandler(actionNode, adapter, {
+                resourceSlug: slug,
+                records,
+                ids,
+                values: {},
+            });
+            if (result?.message)
+                message = result.message;
+        }
+        else if (action === 'bulk-delete' || action === 'delete') {
+            for (const recordId of ids) {
+                await adapter.delete(recordId);
+            }
+        }
+        const url = `${this.panel.getPath()}/${slug}?flash=${encodeURIComponent(message)}`;
+        if (!res) {
+            return { url, statusCode: 303 };
+        }
+        this.sendRedirect(req, res, url);
+    }
+    async submitToolbarAction(slug, action, body, res, req) {
+        const resource = this.requireResource(slug);
+        const adapter = this.requireAdapter(slug);
+        const actionNode = findActionNode(resource.table?.toolbarActions, action);
+        if (!actionNode) {
+            throw new NotFoundException(`Action ${action} not found on ${slug}`);
+        }
+        const result = await executeActionHandler(actionNode, adapter, {
+            resourceSlug: slug,
+            values: body,
+        });
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}?flash=${encodeURIComponent(result?.message ?? `Ran ${action}`)}`);
+    }
+    async submitRecordAction(slug, id, action, body, res, req) {
+        const resource = this.requireResource(slug);
+        const adapter = this.requireAdapter(slug);
+        const actionNode = findActionNode(resource.table?.actions, action);
+        if (!actionNode) {
+            throw new NotFoundException(`Action ${action} not found on ${slug}`);
+        }
+        if (actionNode.kind === 'restore-action') {
+            if (!isSoftDeleteCapable(adapter)) {
+                throw new NotFoundException(`Resource ${slug} does not support soft delete`);
+            }
+            await adapter.restore(id);
+            this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}?flash=${encodeURIComponent('Record restored')}`);
+            return;
+        }
+        const record = await adapter.findOne(id);
+        if (!record) {
+            throw new NotFoundException(`Record ${id} not found`);
+        }
+        const result = await executeActionHandler(actionNode, adapter, {
+            resourceSlug: slug,
+            record,
+            values: body,
+        });
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}?flash=${encodeURIComponent(result?.message ?? `Ran ${action}`)}`);
+    }
+    async renderEdit(slug, id, req) {
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const record = await this.requireAdapter(slug).findOne(id);
+        if (!record) {
+            throw new NotFoundException(`Record ${id} not found`);
+        }
+        const fieldOptions = await resolveBelongsToOptions(this.panel, resource);
+        const hydratedValues = await hydrateFormMediaValues(record, resource.form, {
+            resourceSlug: slug,
+            recordId: id,
+            media: this.media,
+        });
+        const values = stringifyJsonTextareaFields(hydratedValues, resource.form);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            title: `Edit ${resource.label}`,
+            action: `${serialized.path}/${slug}/${id}/edit`,
+            values,
+            submitLabel: 'Save',
+            fieldOptions,
+            mode: 'edit',
+        };
+        return this.wantsJson(req) ? buildFormPayload(model) : renderFormPage(model);
+    }
+    async submitEdit(slug, id, body, res, req) {
+        const resource = this.requireResource(slug);
+        const { payload: mediaPayload, mediaByField } = extractMediaFields(normalizeBody(body), resource.form);
+        let payload = parseJsonArrayFields(mediaPayload, resource.form);
+        const needsExistingRecord = collectJsonTextareaFields(resource.form).some((field) => typeof field.props.jsonProperty === 'string');
+        const existingRecord = needsExistingRecord
+            ? await this.requireAdapter(slug).findOne(id)
+            : undefined;
+        payload = parseJsonTextareaFields(payload, resource.form, existingRecord);
+        const errors = validateFormPayload(resource.form, payload);
+        if (errors) {
+            await this.rerenderForm(req, res, {
+                slug,
+                resource,
+                title: `Edit ${resource.label}`,
+                action: `${this.panel.getPath()}/${slug}/${id}/edit`,
+                submitLabel: 'Save',
+                values: payload,
+                errors,
+                mode: 'edit',
+            });
+            return;
+        }
+        await this.requireAdapter(slug).update(id, payload);
+        await this.syncMediaFields(slug, id, mediaByField);
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}/${id}`);
+    }
+    async rerenderForm(req, res, options) {
+        const serialized = this.panel.serialize();
+        const fieldOptions = await resolveBelongsToOptions(this.panel, options.resource);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource: options.resource,
+            title: options.title,
+            action: options.action,
+            submitLabel: options.submitLabel,
+            values: stringifyJsonTextareaFields(options.values, options.resource.form),
+            fieldOptions,
+            errors: options.errors,
+            mode: options.mode,
+        };
+        if (this.wantsJson(req)) {
+            res.status(422).json(buildFormPayload(model));
+            return;
+        }
+        res.status(422).type('html').send(renderFormPage(model));
+    }
+    async submitDelete(slug, id, res, req) {
+        await this.requireAdapter(slug).delete(id);
+        this.sendRedirect(req, res, `${this.panel.getPath()}/${slug}?flash=${encodeURIComponent('Record deleted')}`);
+    }
+    async renderView(slug, id, query, req) {
+        if (id === 'create' || id === 'bulk' || id === 'relations') {
+            throw new NotFoundException();
+        }
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const record = await this.requireAdapter(slug).findOne(id);
+        if (!record) {
+            throw new NotFoundException(`Record ${id} not found`);
+        }
+        const relationSections = await loadRelationSections(this.panel, resource, id, query);
+        const panels = await this.renderResourcePanels(slug, record, serialized.path, serialized.brandName);
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            record,
+            relationSections,
+            panels,
+        };
+        return this.wantsJson(req) ? buildViewPayload(model) : renderViewHtml(model);
+    }
+    async renderResourcePanels(slug, record, panelPath, brandName) {
+        const resourceClass = this.panel.getResourceClass(slug);
+        if (!resourceClass?.panels?.length) {
+            return [];
+        }
+        const ctx = { resourceSlug: slug, record, panelPath, brandName };
+        return Promise.all(resourceClass.panels.map((PanelClass) => new PanelClass().render(ctx)));
+    }
+    async renderList(slug, query, res, req) {
+        if (slug === 'api' ||
+            slug === 'uploads' ||
+            slug === 'files' ||
+            slug === 'pages' ||
+            slug === 'login' ||
+            slug === 'logout') {
+            throw new NotFoundException();
+        }
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const adapter = this.panel.getResourceAdapter(slug);
+        const listQuery = parseListQuery(query);
+        const page = adapter
+            ? await adapter.find(listQuery, resource.listQueryConfig ?? undefined)
+            : {
+                data: [],
+                meta: { totalItems: 0, currentPage: 1, totalPages: 1, itemsPerPage: 20 },
+            };
+        const records = await enrichRecordsWithImageUrls(page.data, resource.table?.columns, {
+            resourceSlug: slug,
+            storage: this.storage,
+            media: this.media,
+        });
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            records,
+            meta: page.meta,
+            flash: query.flash,
+            query: {
+                search: listQuery.search,
+                filter: listQuery.filter,
+                filtersOpen: query.filtersOpen === '1' || query.filtersOpen === 'true',
+                limit: listQuery.limit,
+                sortBy: listQuery.sortBy,
+                withDeleted: listQuery.withDeleted,
+            },
+        };
+        if (this.wantsJson(req)) {
+            res.json(buildListPayload(model));
+            return;
+        }
+        res.type('html').send(renderListHtml(model));
+    }
+    async syncMediaFields(slug, recordId, mediaByField) {
+        if (!this.media?.isEnabled())
+            return;
+        for (const entry of Object.values(mediaByField)) {
+            await this.media.syncCollection({ modelType: slug, modelId: recordId }, entry.collection, entry.items, { disk: entry.disk });
+        }
+    }
+    async renderLinkForm(slug, id, relation, mode, req) {
+        const serialized = this.panel.serialize();
+        const resource = this.requireResource(slug);
+        const manager = requireRelationManager(resource, relation);
+        const adapter = requireRelationAdapter(this.requireAdapter(slug));
+        const ownerRecord = (await this.requireAdapter(slug).findOne(id)) ?? undefined;
+        const options = await adapter.searchRelatedOptions({
+            resource: manager.relatedResource,
+            titleAttribute: 'name',
+            searchBy: ['name'],
+        });
+        const model = {
+            brandName: serialized.brandName,
+            ...this.shellAssets(req),
+            path: serialized.path,
+            navigation: serialized.navigation,
+            navigationGroups: applyNavCollapseState(serialized.navigationGroups, this.collapsedGroupLabels(req)),
+            resource,
+            manager,
+            ownerId: id,
+            ownerRecord,
+            title: `${mode === 'attach' ? 'Attach' : 'Associate'} ${manager.title}`,
+            action: `${serialized.path}/${slug}/${id}/relations/${relation}/${mode}`,
+            mode,
+            options,
+        };
+        return this.wantsJson(req) ? buildRelationPayload(model) : renderRelationActionPage(model);
+    }
+    requireResource(slug) {
+        const resource = this.panel.serialize().resources.find((item) => item.slug === slug);
+        if (!resource) {
+            throw new NotFoundException(`Resource ${slug} not found`);
+        }
+        return resource;
+    }
+    requireAdapter(slug) {
+        const adapter = this.panel.getResourceAdapter(slug);
+        if (!adapter) {
+            throw new NotFoundException(`Adapter for ${slug} not found`);
+        }
+        return adapter;
+    }
+};
+__decorate([
+    AdminPublic(),
+    Get('_/assets/nestjs-dash.css'),
+    Header('Content-Type', 'text/css; charset=utf-8'),
+    Header('Cache-Control', 'public, max-age=3600'),
+    __param(0, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "serveStylesheet", null);
+__decorate([
+    AdminPublic(),
+    Get('_/assets/nestjs-dash.js'),
+    Header('Content-Type', 'text/javascript; charset=utf-8'),
+    Header('Cache-Control', 'public, max-age=3600'),
+    __param(0, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "serveClientScript", null);
+__decorate([
+    Post('_/theme'),
+    __param(0, Body()),
+    __param(1, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "setTheme", null);
+__decorate([
+    Post('_/nav-collapse'),
+    __param(0, Body()),
+    __param(1, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", void 0)
+], AdminController.prototype, "setNavCollapse", null);
+__decorate([
+    Get(),
+    __param(0, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderDashboard", null);
+__decorate([
+    Get('api/panel'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Object)
+], AdminController.prototype, "getPanelApi", null);
+__decorate([
+    Get('api/resources/:slug'),
+    __param(0, Param('slug')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Object)
+], AdminController.prototype, "getResource", null);
+__decorate([
+    Get('api/resources/:slug/records'),
+    __param(0, Param('slug')),
+    __param(1, Query()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "listRecords", null);
+__decorate([
+    Get('api/resources/:slug/records/:id'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "getRecord", null);
+__decorate([
+    Post('api/resources/:slug/records'),
+    AdminAction('create'),
+    __param(0, Param('slug')),
+    __param(1, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "createRecord", null);
+__decorate([
+    Put('api/resources/:slug/records/:id'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Body()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "updateRecord", null);
+__decorate([
+    Delete('api/resources/:slug/records/:id'),
+    AdminAction('delete'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "deleteRecord", null);
+__decorate([
+    Get('api/options/:resource'),
+    __param(0, Param('resource')),
+    __param(1, Query()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "listOptions", null);
+__decorate([
+    Get('pages/:pageSlug'),
+    __param(0, Param('pageSlug')),
+    __param(1, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderCustomPage", null);
+__decorate([
+    Post('pages/:pageSlug/actions/:action'),
+    AdminAction('action'),
+    __param(0, Param('pageSlug')),
+    __param(1, Param('action')),
+    __param(2, Body()),
+    __param(3, Res()),
+    __param(4, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitPageAction", null);
+__decorate([
+    Get(':slug/:id/relations/:relation/create'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderRelationCreate", null);
+__decorate([
+    Post(':slug/:id/relations/:relation/create'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Body()),
+    __param(4, Req()),
+    __param(5, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitRelationCreate", null);
+__decorate([
+    Get(':slug/:id/relations/:relation/associate'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderAssociate", null);
+__decorate([
+    Post(':slug/:id/relations/:relation/associate'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Body()),
+    __param(4, Req()),
+    __param(5, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitAssociate", null);
+__decorate([
+    Get(':slug/:id/relations/:relation/attach'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderAttach", null);
+__decorate([
+    Post(':slug/:id/relations/:relation/attach'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Body()),
+    __param(4, Req()),
+    __param(5, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitAttach", null);
+__decorate([
+    Post(':slug/:id/relations/:relation/dissociate/:relatedId'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Param('relatedId')),
+    __param(4, Req()),
+    __param(5, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitDissociate", null);
+__decorate([
+    Post(':slug/:id/relations/:relation/detach/:relatedId'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('relation')),
+    __param(3, Param('relatedId')),
+    __param(4, Req()),
+    __param(5, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitDetach", null);
+__decorate([
+    Get(':slug/create'),
+    AdminAction('create'),
+    __param(0, Param('slug')),
+    __param(1, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderCreate", null);
+__decorate([
+    Post(':slug/create'),
+    AdminAction('create'),
+    __param(0, Param('slug')),
+    __param(1, Body()),
+    __param(2, Res()),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitCreate", null);
+__decorate([
+    Post(':slug/bulk'),
+    AdminAction('bulk-action'),
+    __param(0, Param('slug')),
+    __param(1, Body()),
+    __param(2, Req()),
+    __param(3, Res()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitBulk", null);
+__decorate([
+    Post(':slug/actions/:action'),
+    AdminAction('action'),
+    __param(0, Param('slug')),
+    __param(1, Param('action')),
+    __param(2, Body()),
+    __param(3, Res()),
+    __param(4, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitToolbarAction", null);
+__decorate([
+    Post(':slug/:id/actions/:action'),
+    AdminAction('action'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Param('action')),
+    __param(3, Body()),
+    __param(4, Res()),
+    __param(5, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitRecordAction", null);
+__decorate([
+    Get(':slug/:id/edit'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderEdit", null);
+__decorate([
+    Post(':slug/:id/edit'),
+    AdminAction('update'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Body()),
+    __param(3, Res()),
+    __param(4, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitEdit", null);
+__decorate([
+    Post(':slug/:id/delete'),
+    AdminAction('delete'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Res()),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "submitDelete", null);
+__decorate([
+    Get(':slug/:id'),
+    __param(0, Param('slug')),
+    __param(1, Param('id')),
+    __param(2, Query()),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderView", null);
+__decorate([
+    Get(':slug'),
+    __param(0, Param('slug')),
+    __param(1, Query()),
+    __param(2, Res()),
+    __param(3, Req()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, Object]),
+    __metadata("design:returntype", Promise)
+], AdminController.prototype, "renderList", null);
+AdminController = AdminController_1 = __decorate([
+    Controller(),
+    UseGuards(AdminAuthGuard, AdminPolicyGuard),
+    UseInterceptors(AdminAuditInterceptor),
+    __param(0, Inject(NESTJS_DASH_PANEL)),
+    __param(1, Optional()),
+    __param(1, Inject(NESTJS_DASH_STORAGE_SERVICE)),
+    __param(2, Optional()),
+    __param(2, Inject(NESTJS_DASH_MEDIA_SERVICE)),
+    __metadata("design:paramtypes", [Function, Object, Object, ModuleRef])
+], AdminController);
+export { AdminController };
+function parseListQuery(query) {
+    const sortBy = query.sortBy
+        ? query.sortBy.split(',').map((part) => {
+            const [column, direction] = part.split(':');
+            return [
+                column ?? '',
+                (direction?.toUpperCase() === 'ASC' ? 'ASC' : 'DESC'),
+            ];
+        })
+        : undefined;
+    const filter = {};
+    for (const [key, value] of Object.entries(query)) {
+        if (key.startsWith('filter.') && value) {
+            filter[key.slice('filter.'.length)] = value;
+        }
+    }
+    return {
+        page: query.page ? Number(query.page) : undefined,
+        limit: query.limit ? Number(query.limit) : undefined,
+        search: query.search,
+        searchBy: query.searchBy?.split(',').filter(Boolean),
+        select: query.select?.split(',').filter(Boolean),
+        sortBy,
+        filter: Object.keys(filter).length > 0 ? filter : undefined,
+        withDeleted: query.withDeleted === '1' || query.withDeleted === 'true',
+    };
+}
+function normalizeBody(body) {
+    const result = { ...body };
+    for (const [key, value] of Object.entries(result)) {
+        if (value === 'true')
+            result[key] = true;
+        if (value === 'false')
+            result[key] = false;
+    }
+    if (typeof result.age === 'string' && result.age !== '') {
+        result.age = Number(result.age);
+    }
+    delete result.bulkAction;
+    delete result.ids;
+    delete result.relatedId;
+    return result;
+}
+function pickPivot(body, fields) {
+    if (!fields.length)
+        return undefined;
+    const pivot = {};
+    for (const field of fields) {
+        if (body[field] !== undefined) {
+            pivot[field] = body[field] === 'true' ? true : body[field] === 'false' ? false : body[field];
+        }
+    }
+    return Object.keys(pivot).length ? pivot : undefined;
+}
+function normalizeIds(ids) {
+    if (ids == null)
+        return [];
+    if (Array.isArray(ids))
+        return ids.map(String).filter(Boolean);
+    return [String(ids)].filter(Boolean);
+}
+//# sourceMappingURL=admin.controller.js.map