@paneljs/paneljs 0.1.0

package/dist/recordSelection.js

@@ -0,0 +1,65 @@
+import { hasModelPermission } from "./permissions.js";
+import { buildScopedRecordWhere, resolveScope } from "./scope.js";
+import { parseRecordId } from "./ids.js";
+import { isFieldVisible, isSensitiveFieldName, RequestValidationError } from "./validation.js";
+import { PermissionDeniedError } from "./errors.js";
+/** Build the safe select used by detail and edit endpoints. */
+export function buildRecordSelect(meta, model) {
+    const select = Object.fromEntries(meta.fields.filter((field) => field.type !== "relation" && isFieldVisible(field, model.raw)).map((field) => [field.name, true]));
+    for (const fieldName of model.resolved.listDisplay) {
+        const field = meta.fields.find((candidate) => candidate.name === fieldName);
+        if (!field?.relation || !isFieldVisible(field, model.raw))
+            continue;
+        if (field.relation.kind !== "belongsTo" && field.relation.kind !== "hasOne")
+            continue;
+        if (isSensitiveFieldName(field.relation.displayField))
+            continue;
+        select[field.name] = { select: { [field.relation.displayField]: true } };
+    }
+    return select;
+}
+/** Only return columns the list is configured to display, plus the primary key. */
+export function buildListRecordSelect(meta, model) {
+    const allowed = new Set([meta.idField, ...model.resolved.listDisplay]);
+    const select = Object.fromEntries(meta.fields.filter((field) => field.type !== "relation" && allowed.has(field.name) && isFieldVisible(field, model.raw)).map((field) => [field.name, true]));
+    select[meta.idField] = true;
+    for (const fieldName of model.resolved.listDisplay) {
+        const field = meta.fields.find((candidate) => candidate.name === fieldName);
+        if (!field?.relation || !isFieldVisible(field, model.raw))
+            continue;
+        if (field.relation.kind !== "belongsTo" && field.relation.kind !== "hasOne")
+            continue;
+        if (!isSensitiveFieldName(field.relation.displayField))
+            select[field.name] = { select: { [field.relation.displayField]: true } };
+    }
+    return select;
+}
+/** Verify submitted belongs-to IDs are visible under the related model's own access rules. */
+export async function assertSelectedRelationsAreVisible(data, model, models, adapter, adminUser) {
+    const modelsByName = new Map([...models.values()].map((candidate) => [candidate.meta.name, candidate]));
+    for (const relationField of model.meta.fields) {
+        const relation = relationField.relation;
+        if (relationField.type !== "relation" || relation?.kind !== "belongsTo" || relation.foreignKeyFields.length !== 1)
+            continue;
+        const foreignKeyField = relation.foreignKeyFields[0];
+        if (!foreignKeyField || !(foreignKeyField in data))
+            continue;
+        const selectedId = data[foreignKeyField];
+        if (selectedId === null)
+            continue;
+        const relatedModel = modelsByName.get(relation.model);
+        if (!relatedModel) {
+            throw new RequestValidationError(`Relation "${relationField.name}" cannot be changed because related model "${relation.model}" is not registered.`);
+        }
+        if (!hasModelPermission(adminUser, relatedModel.resolved.permissions, "list"))
+            throw new PermissionDeniedError();
+        const relatedScope = await resolveScope(relatedModel.raw, adminUser);
+        const relatedRecord = await adapter.resource(relatedModel.meta).findFirst({
+            where: buildScopedRecordWhere(relatedScope, relatedModel.meta.idField, parseRecordId(relatedModel.meta, String(selectedId))),
+            select: { [relatedModel.meta.idField]: true },
+        });
+        if (!relatedRecord)
+            throw new RequestValidationError(`The selected ${relation.model} record is unavailable.`);
+    }
+}
+//# sourceMappingURL=recordSelection.js.map

package/dist/recordSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recordSelection.js","sourceRoot":"","sources":["../src/recordSelection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,IAAoB,EAAE,KAA0B;IAC/E,MAAM,MAAM,GAA4D,MAAM,CAAC,WAAW,CACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CACjI,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACtF,IAAI,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,SAAS;QAChE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,IAAoB,EAAE,KAA0B;IACnF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAA4D,MAAM,CAAC,WAAW,CACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAC5J,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5B,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACtF,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IACpI,CAAC;IACD,OAAO,MAAM,CAAC;AACjB,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACpD,IAA6B,EAC7B,KAA0B,EAC1B,MAAwC,EACxC,OAAoB,EACpB,SAAoB;IAEpB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAExG,KAAK,MAAM,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QACxC,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,EAAE,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE5H,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC;YAAE,SAAS;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,IAAI;YAAE,SAAS;QAElC,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,sBAAsB,CAAC,aAAa,aAAa,CAAC,IAAI,8CAA8C,QAAQ,CAAC,KAAK,sBAAsB,CAAC,CAAC;QACvJ,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAEjH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YACvE,KAAK,EAAE,sBAAsB,CAAC,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5H,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,sBAAsB,CAAC,gBAAgB,QAAQ,CAAC,KAAK,yBAAyB,CAAC,CAAC;IACjH,CAAC;AACJ,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,156 @@
+import type { AdminModelMeta, ModelConfig, ModelPermissions } from "./types.js";
+/**
+ * A fully-resolved model configuration — every property is guaranteed
+ * to have a value (no undefined/optional). This is what the rest of the
+ * system uses internally (routerFactory, schemaEndpoint, etc.).
+ *
+ * It's distinct from ModelConfig (which is all-optional) so TypeScript
+ * can enforce that consumers don't need to null-check these fields.
+ */
+export interface ResolvedModelConfig {
+    listDisplay: string[];
+    listFilter: string[];
+    searchFields: string[];
+    defaultSort: {
+        field: string;
+        direction: "asc" | "desc";
+    };
+    perPage: number;
+    permissions: ModelPermissions;
+}
+/**
+ * A registered model entry — the full picture of a model in the admin.
+ * Combines the DMMF-derived AdminModelMeta with the fully resolved config.
+ *
+ * The raw user-supplied config is kept as well for cases where the
+ * caller needs access to lifecycle hooks, scope functions, etc.
+ * (Those can't go into ResolvedModelConfig because they hold functions,
+ * and functions aren't serializable to JSON for the schema endpoint.)
+ */
+export interface FullRegisteredModel {
+    /** DMMF-derived metadata — auto-generated from schema */
+    meta: AdminModelMeta;
+    /**
+     * Fully resolved config — all defaults filled in.
+     * Safe to access any property without null-checking.
+     * Used by: routerFactory, schemaEndpoint, filterParser, includeBuilder.
+     */
+    resolved: ResolvedModelConfig;
+    /**
+     * The original developer-supplied config — kept for lifecycle hooks,
+     * scope functions, actions, and field overrides that can't be resolved
+     * at registration time.
+     * Used by: routerFactory (hooks, scope), auth/permissions middleware.
+     */
+    raw: ModelConfig;
+}
+/**
+ * The AdminRegistry holds all registered models and provides the interface
+ * for the rest of the system to look them up.
+ *
+ * Lifecycle:
+ *   1. createAdmin() creates a registry instance.
+ *   2. admin.register("ModelName", config?) adds each model.
+ *   3. admin.mount(app) triggers initialization — introspects the schema,
+ *      validates all registrations, resolves configs.
+ *   4. After init, the routerFactory and schemaEndpoint read from the registry.
+ *
+ * The registry is NOT async at registration time. Developers call
+ * admin.register() synchronously. The async getDMMF work happens during
+ * admin.mount() / initialize(), not at register() time. This keeps the
+ * developer API synchronous and clean.
+ */
+export declare class AdminRegistry {
+    /**
+     * Raw pending registrations: model name → user config.
+     * These are stored at admin.register() time but not yet resolved.
+     * Resolution happens during initialize() when we have DMMF data.
+     */
+    private pendingRegistrations;
+    /**
+     * Fully resolved registered models, populated by initialize().
+     * Map key is the model name exactly as defined in Prisma schema ("User", "Post").
+     */
+    private models;
+    /**
+     * Whether initialize() has been called successfully.
+     * Guards against using the registry before it's ready.
+     */
+    private initialized;
+    /**
+     * Register a model with the admin.
+     *
+     * This is the public API that developers call:
+     *   admin.register("User")
+     *   admin.register("Post", { listDisplay: ["title", "author", "published"] })
+     *
+     * Registration is synchronous and lightweight — it just stores the intent.
+     * The actual introspection and config resolution happens lazily in initialize().
+     *
+     * Important: You can call register() before the Prisma schema has been
+     * generated. The validation only happens at mount time.
+     *
+     * @param modelName - The model name exactly as it appears in schema.prisma (PascalCase)
+     * @param config    - Optional customization config. Every field is optional.
+     */
+    register(modelName: string, config?: ModelConfig): void;
+    /**
+     * Initialize the registry.
+     *
+     * This is called internally by admin.mount(app). Developers never call this directly.
+     *
+     * What happens here:
+     *   1. Run the introspector → get AdminModelMeta for every model in the schema.
+     *   2. For each pending registration, validate the model name exists in the schema.
+     *   3. If the developer provided field overrides (config.fields), validate that
+     *      every field name they referenced actually exists on the model.
+     *   4. Resolve the config — fill in all defaults.
+     *   5. Store the fully resolved FullRegisteredModel.
+     *
+     * After this, the registry is "sealed" — no more register() calls are allowed.
+     *
+     * @param allModelMeta - Model metadata from the host data adapter.
+     */
+    initialize(allModelMeta: Map<string, AdminModelMeta>): Promise<void>;
+    /**
+     * Assert that initialize() has been called.
+     * Every read method calls this to give clear errors if accessed too early.
+     */
+    private assertInitialized;
+    /**
+     * Get a single registered model by its Prisma model name.
+     *
+     * Returns undefined if the model was not registered.
+     * Consumers should handle undefined — not every model in the schema
+     * is necessarily registered in the admin.
+     *
+     * @param modelName - PascalCase model name, e.g. "User", "Post"
+     */
+    get(modelName: string): FullRegisteredModel | undefined;
+    /**
+     * Get a registered model by its plural URL name.
+     * e.g. "users" → the User FullRegisteredModel
+     *
+     * Used by the router to resolve "GET /admin/api/users" → User model.
+     *
+     * @param pluralName - e.g. "users", "posts", "categories"
+     */
+    getByPluralName(pluralName: string): FullRegisteredModel | undefined;
+    /**
+     * Get all registered models, in registration order.
+     *
+     * Used by:
+     *  - GET /admin/api/schema  → returns all models to the UI
+     *  - The admin sidebar      → lists all models for navigation
+     */
+    getAll(): FullRegisteredModel[];
+    /**
+     * Returns the number of registered models.
+     * Useful for health checks and logging.
+     */
+    get size(): number;
+    /**
+     * Whether a model name is currently registered.
+     */
+    has(modelName: string): boolean;
+}

package/dist/registry.js

@@ -0,0 +1,388 @@
+import { DELETE_SELECTED_ACTION } from "./defaultActions.js";
+// ============================================================
+// DEFAULT RESOLUTION
+// ============================================================
+/**
+ * How many non-relation, non-readonly scalar fields to show in
+ * list view when the developer hasn't specified listDisplay.
+ */
+const DEFAULT_LIST_DISPLAY_LIMIT = 6;
+/**
+ * Default number of records per page.
+ */
+const DEFAULT_PER_PAGE = 50;
+/**
+ * Given raw AdminModelMeta (from DMMF) and a developer-supplied ModelConfig
+ * (which may be empty {}), produce a complete, fully-resolved config where
+ * every property has a value.
+ *
+ * This is where "zero config" is implemented. A developer calling
+ * admin.register("User") with no options still gets a fully working admin
+ * because this function fills in every missing piece intelligently.
+ *
+ * ── listDisplay ───────────────────────────────────────────────────────────
+ * Default: the first N scalar fields that are not:
+ *   - relation fields (they need a sub-query, we don't include them in lists by default)
+ *   - the id field (it's usually a UUID, not useful in a list table)
+ *   - but we DO include the displayField always, even if it would be beyond the limit
+ *
+ * We put the displayField first so the list table always leads with the
+ * human-readable identifier for the record.
+ *
+ * ── listFilter ────────────────────────────────────────────────────────────
+ * Default: no filters. Developers opt in with listFilter so list pages only
+ * show the filters that are useful for that model.
+ *
+ * ── searchFields ──────────────────────────────────────────────────────────
+ * Default: every field the introspector marked as isSearchable.
+ * These are non-id, non-FK string fields.
+ *
+ * ── defaultSort ───────────────────────────────────────────────────────────
+ * Default: sort by createdAt desc (most recent first) if the model has
+ * a createdAt timestamp. Otherwise sort by the id field descending.
+ * Developers commonly want newest records first in a list view.
+ *
+ * ── perPage ───────────────────────────────────────────────────────────────
+ * Default: 50. The developer can override this per model.
+ *
+ * ── permissions ───────────────────────────────────────────────────────────
+ * Default: authenticated admins may list and view. Create, update, delete,
+ * and custom actions require an explicit role allowlist.
+ */
+function resolveConfig(meta, userConfig) {
+    // ── listDisplay ────────────────────────────────────────────
+    let listDisplay;
+    if (userConfig.listDisplay && userConfig.listDisplay.length > 0) {
+        // Developer explicitly specified which columns to show
+        listDisplay = userConfig.listDisplay;
+    }
+    else {
+        // Auto-generate: pick scalar, non-id, non-relation fields up to the limit.
+        // We exclude the id field from the list because it's a UUID and clutters the table.
+        // We exclude relation fields because they require extra includes and joins.
+        const candidates = meta.fields
+            .filter((f) => f.type !== "relation" && // no relation fields in list
+            !f.isId && // no id field
+            !f.isReadOnly)
+            .map((f) => f.name);
+        // Start with the displayField so the first column is always the human label
+        const result = [];
+        if (!result.includes(meta.displayField)) {
+            result.push(meta.displayField);
+        }
+        // Add up to the limit from the candidates
+        for (const name of candidates) {
+            if (result.length >= DEFAULT_LIST_DISPLAY_LIMIT)
+                break;
+            if (!result.includes(name)) {
+                result.push(name);
+            }
+        }
+        // Always add createdAt at the end if it exists and we have room
+        if (meta.timestamps.createdAt && !result.includes(meta.timestamps.createdAt)) {
+            result.push(meta.timestamps.createdAt);
+        }
+        listDisplay = result;
+    }
+    // ── listFilter ─────────────────────────────────────────────
+    const listFilter = userConfig.listFilter ?? [];
+    // ── searchFields ───────────────────────────────────────────
+    const searchFields = userConfig.searchFields ?? meta.searchableFields;
+    // ── defaultSort ────────────────────────────────────────────
+    let defaultSort;
+    if (userConfig.defaultSort) {
+        defaultSort = userConfig.defaultSort;
+    }
+    else if (meta.timestamps.createdAt) {
+        // Most useful default: newest records first
+        defaultSort = { field: meta.timestamps.createdAt, direction: "desc" };
+    }
+    else {
+        defaultSort = { field: meta.idField, direction: "desc" };
+    }
+    // ── perPage ────────────────────────────────────────────────
+    const perPage = userConfig.perPage ?? DEFAULT_PER_PAGE;
+    // ── permissions ────────────────────────────────────────────
+    const permissions = userConfig.permissions ?? {};
+    return {
+        listDisplay,
+        listFilter,
+        searchFields,
+        defaultSort,
+        perPage,
+        permissions,
+    };
+}
+// ============================================================
+// REGISTRY CLASS
+// ============================================================
+/**
+ * The AdminRegistry holds all registered models and provides the interface
+ * for the rest of the system to look them up.
+ *
+ * Lifecycle:
+ *   1. createAdmin() creates a registry instance.
+ *   2. admin.register("ModelName", config?) adds each model.
+ *   3. admin.mount(app) triggers initialization — introspects the schema,
+ *      validates all registrations, resolves configs.
+ *   4. After init, the routerFactory and schemaEndpoint read from the registry.
+ *
+ * The registry is NOT async at registration time. Developers call
+ * admin.register() synchronously. The async getDMMF work happens during
+ * admin.mount() / initialize(), not at register() time. This keeps the
+ * developer API synchronous and clean.
+ */
+export class AdminRegistry {
+    /**
+     * Raw pending registrations: model name → user config.
+     * These are stored at admin.register() time but not yet resolved.
+     * Resolution happens during initialize() when we have DMMF data.
+     */
+    pendingRegistrations = new Map();
+    /**
+     * Fully resolved registered models, populated by initialize().
+     * Map key is the model name exactly as defined in Prisma schema ("User", "Post").
+     */
+    models = new Map();
+    /**
+     * Whether initialize() has been called successfully.
+     * Guards against using the registry before it's ready.
+     */
+    initialized = false;
+    /**
+     * Register a model with the admin.
+     *
+     * This is the public API that developers call:
+     *   admin.register("User")
+     *   admin.register("Post", { listDisplay: ["title", "author", "published"] })
+     *
+     * Registration is synchronous and lightweight — it just stores the intent.
+     * The actual introspection and config resolution happens lazily in initialize().
+     *
+     * Important: You can call register() before the Prisma schema has been
+     * generated. The validation only happens at mount time.
+     *
+     * @param modelName - The model name exactly as it appears in schema.prisma (PascalCase)
+     * @param config    - Optional customization config. Every field is optional.
+     */
+    register(modelName, config = {}) {
+        if (this.initialized) {
+            throw new Error(`[paneljs] Cannot call register("${modelName}") after admin.mount() has been called. ` + `All register() calls must happen before mounting the admin router.`);
+        }
+        if (this.pendingRegistrations.has(modelName)) {
+            console.warn(`[paneljs] Model "${modelName}" registered more than once. The second registration will overwrite the first.`);
+        }
+        this.pendingRegistrations.set(modelName, config);
+    }
+    /**
+     * Initialize the registry.
+     *
+     * This is called internally by admin.mount(app). Developers never call this directly.
+     *
+     * What happens here:
+     *   1. Run the introspector → get AdminModelMeta for every model in the schema.
+     *   2. For each pending registration, validate the model name exists in the schema.
+     *   3. If the developer provided field overrides (config.fields), validate that
+     *      every field name they referenced actually exists on the model.
+     *   4. Resolve the config — fill in all defaults.
+     *   5. Store the fully resolved FullRegisteredModel.
+     *
+     * After this, the registry is "sealed" — no more register() calls are allowed.
+     *
+     * @param allModelMeta - Model metadata from the host data adapter.
+     */
+    async initialize(allModelMeta) {
+        if (this.initialized) {
+            throw new Error(`[paneljs] initialize() called more than once. This is a bug.`);
+        }
+        // ── Validate and resolve each pending registration ─────────
+        for (const [modelName, rawConfig] of this.pendingRegistrations) {
+            const meta = allModelMeta.get(modelName);
+            // Guard: model name must exist in the schema
+            if (!meta) {
+                const available = [...allModelMeta.keys()].sort().join(", ");
+                throw new Error(`[paneljs] admin.register("${modelName}") failed: ` + `no model named "${modelName}" found in the Prisma schema.\n` + `Available models: ${available}`);
+            }
+            // Guard: validate field override names
+            // If the developer writes config.fields: { nonExistentField: { exclude: true } },
+            // that's almost certainly a typo. Fail loudly instead of silently ignoring it.
+            if (rawConfig.fields) {
+                const modelFieldNames = new Set(meta.fields.map((f) => f.name));
+                for (const overrideName of Object.keys(rawConfig.fields)) {
+                    if (!modelFieldNames.has(overrideName)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") config.fields: ` +
+                            `field "${overrideName}" does not exist on model "${modelName}".\n` +
+                            `Available fields: ${[...modelFieldNames].sort().join(", ")}`);
+                    }
+                }
+            }
+            // Guard: validate listDisplay field names
+            if (rawConfig.listDisplay) {
+                const modelFieldNames = new Set(meta.fields.map((f) => f.name));
+                for (const fieldName of rawConfig.listDisplay) {
+                    if (!modelFieldNames.has(fieldName)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") config.listDisplay: ` +
+                            `field "${fieldName}" does not exist on model "${modelName}".\n` +
+                            `Available fields: ${[...modelFieldNames].sort().join(", ")}`);
+                    }
+                }
+            }
+            // Guard: validate searchFields names
+            if (rawConfig.searchFields) {
+                const scalarStringFields = new Set(meta.fields.filter((f) => f.type === "string" && !f.isId).map((f) => f.name));
+                for (const fieldName of rawConfig.searchFields) {
+                    if (!scalarStringFields.has(fieldName)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") config.searchFields: ` +
+                            `field "${fieldName}" either does not exist or is not a String field on model "${modelName}". ` +
+                            `Only String fields can be used as search fields.`);
+                    }
+                }
+            }
+            // Guard: list filters must be fields the introspector marked as
+            // filterable (enum, boolean, date-time, or foreign-key scalar).
+            if (rawConfig.listFilter) {
+                const filterableFieldNames = new Set(meta.filterableFields);
+                for (const fieldName of rawConfig.listFilter) {
+                    if (!filterableFieldNames.has(fieldName)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") config.listFilter: ` +
+                            `field "${fieldName}" cannot be used as a filter. ` +
+                            `Available filter fields: ${[...filterableFieldNames].sort().join(", ") || "none"}.`);
+                    }
+                }
+            }
+            if (rawConfig.perPage !== undefined && (!Number.isSafeInteger(rawConfig.perPage) || rawConfig.perPage < 1 || rawConfig.perPage > 200)) {
+                throw new Error(`[paneljs] admin.register("${modelName}") config.perPage must be an integer from 1 to 200.`);
+            }
+            if (rawConfig.defaultSort) {
+                const sortField = meta.fields.find((field) => field.name === rawConfig.defaultSort?.field);
+                if (!sortField || sortField.type === "relation")
+                    throw new Error(`[paneljs] admin.register("${modelName}") config.defaultSort.field must be a scalar field on the model.`);
+                if (rawConfig.defaultSort.direction !== "asc" && rawConfig.defaultSort.direction !== "desc")
+                    throw new Error(`[paneljs] admin.register("${modelName}") config.defaultSort.direction must be "asc" or "desc".`);
+            }
+            if (rawConfig.pluralName !== undefined && !/^[a-z][a-z0-9-]*$/i.test(rawConfig.pluralName)) {
+                throw new Error(`[paneljs] admin.register("${modelName}") config.pluralName must contain only letters, numbers, and hyphens.`);
+            }
+            if (process.env.NODE_ENV === "production" && rawConfig.permissions === undefined) {
+                throw new Error(`[paneljs] admin.register("${modelName}") requires explicit permissions in production.`);
+            }
+            // Guard: custom actions must have stable, URL-safe names and unique
+            // identifiers. Failing at mount avoids discovering configuration
+            // mistakes only when an administrator clicks an action in production.
+            if (rawConfig.actions) {
+                const actionNames = new Set();
+                for (const action of rawConfig.actions) {
+                    if (action.name === DELETE_SELECTED_ACTION.name) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") action name "${action.name}" is reserved for the built-in delete action.`);
+                    }
+                    if (!/^[a-z][a-z0-9_]*$/.test(action.name)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") action name "${action.name}" must use lowercase letters, numbers, and underscores and begin with a letter.`);
+                    }
+                    if (actionNames.has(action.name)) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") defines the action "${action.name}" more than once.`);
+                    }
+                    if (!action.label.trim()) {
+                        throw new Error(`[paneljs] admin.register("${modelName}") action "${action.name}" must have a label.`);
+                    }
+                    if (typeof action.handler !== "function") {
+                        throw new Error(`[paneljs] admin.register("${modelName}") action "${action.name}" must define a handler.`);
+                    }
+                    actionNames.add(action.name);
+                }
+            }
+            // ── Apply displayField / pluralName overrides from config ─
+            // The developer can override what the introspector auto-detected.
+            // We apply these overrides directly onto a copy of the meta here
+            // so downstream consumers only need to look at meta, not config.
+            const resolvedMeta = { ...meta };
+            if (rawConfig.displayField) {
+                const fieldExists = meta.fields.some((f) => f.name === rawConfig.displayField);
+                if (!fieldExists) {
+                    throw new Error(`[paneljs] admin.register("${modelName}") config.displayField: ` + `field "${rawConfig.displayField}" does not exist on model "${modelName}".`);
+                }
+                resolvedMeta.displayField = rawConfig.displayField;
+            }
+            if (rawConfig.pluralName) {
+                resolvedMeta.pluralName = rawConfig.pluralName.toLowerCase();
+            }
+            // ── Resolve the config — fill in all defaults ─────────────
+            const resolved = resolveConfig(resolvedMeta, rawConfig);
+            if ([...this.models.values()].some((entry) => entry.meta.pluralName === resolvedMeta.pluralName)) {
+                throw new Error(`[paneljs] admin.register("${modelName}") duplicates the pluralName "${resolvedMeta.pluralName}" of another registered model.`);
+            }
+            // ── Store the fully resolved entry ─────────────────────────
+            this.models.set(modelName, {
+                meta: resolvedMeta,
+                resolved,
+                raw: rawConfig,
+            });
+        }
+        this.initialized = true;
+    }
+    // ============================================================
+    // READ API (used by routerFactory, schemaEndpoint, auth middleware)
+    // ============================================================
+    /**
+     * Assert that initialize() has been called.
+     * Every read method calls this to give clear errors if accessed too early.
+     */
+    assertInitialized() {
+        if (!this.initialized) {
+            throw new Error(`[paneljs] Registry accessed before admin.mount() was called. ` + `Make sure you call admin.mount(app) before handling any requests.`);
+        }
+    }
+    /**
+     * Get a single registered model by its Prisma model name.
+     *
+     * Returns undefined if the model was not registered.
+     * Consumers should handle undefined — not every model in the schema
+     * is necessarily registered in the admin.
+     *
+     * @param modelName - PascalCase model name, e.g. "User", "Post"
+     */
+    get(modelName) {
+        this.assertInitialized();
+        return this.models.get(modelName);
+    }
+    /**
+     * Get a registered model by its plural URL name.
+     * e.g. "users" → the User FullRegisteredModel
+     *
+     * Used by the router to resolve "GET /admin/api/users" → User model.
+     *
+     * @param pluralName - e.g. "users", "posts", "categories"
+     */
+    getByPluralName(pluralName) {
+        this.assertInitialized();
+        for (const entry of this.models.values()) {
+            if (entry.meta.pluralName === pluralName)
+                return entry;
+        }
+        return undefined;
+    }
+    /**
+     * Get all registered models, in registration order.
+     *
+     * Used by:
+     *  - GET /admin/api/schema  → returns all models to the UI
+     *  - The admin sidebar      → lists all models for navigation
+     */
+    getAll() {
+        this.assertInitialized();
+        return [...this.models.values()];
+    }
+    /**
+     * Returns the number of registered models.
+     * Useful for health checks and logging.
+     */
+    get size() {
+        return this.initialized ? this.models.size : this.pendingRegistrations.size;
+    }
+    /**
+     * Whether a model name is currently registered.
+     */
+    has(modelName) {
+        return this.initialized ? this.models.has(modelName) : this.pendingRegistrations.has(modelName);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,+DAA+D;AAC/D,qBAAqB;AACrB,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAErC;;GAEG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,SAAS,aAAa,CAAC,IAAoB,EAAE,UAAuB;IACjE,8DAA8D;IAC9D,IAAI,WAAqB,CAAC;IAC1B,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,uDAAuD;QACvD,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IACxC,CAAC;SAAM,CAAC;QACL,2EAA2E;QAC3E,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM;aAC1B,MAAM,CACJ,CAAC,CAAC,EAAE,EAAE,CACH,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,6BAA6B;YACtD,CAAC,CAAC,CAAC,IAAI,IAAI,cAAc;YACzB,CAAC,CAAC,CAAC,UAAU,CAElB;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEvB,4EAA4E;QAC5E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QAED,0CAA0C;QAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,MAAM,IAAI,0BAA0B;gBAAE,MAAM;YACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,WAAW,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,8DAA8D;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC;IAE/C,8DAA8D;IAC9D,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC,gBAAgB,CAAC;IAEtE,8DAA8D;IAC9D,IAAI,WAAyD,CAAC;IAC9D,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC1B,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACpC,4CAA4C;QAC5C,WAAW,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACzE,CAAC;SAAM,CAAC;QACL,WAAW,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,8DAA8D;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,gBAAgB,CAAC;IAEvD,8DAA8D;IAC9D,MAAM,WAAW,GAAqB,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;IAEnE,OAAO;QACJ,WAAW;QACX,UAAU;QACV,YAAY;QACZ,WAAW;QACX,OAAO;QACP,WAAW;KACb,CAAC;AACL,CAAC;AAoDD,+DAA+D;AAC/D,iBAAiB;AACjB,+DAA+D;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,aAAa;IACvB;;;;OAIG;IACK,oBAAoB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE9D;;;OAGG;IACK,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IAExD;;;OAGG;IACK,WAAW,GAAG,KAAK,CAAC;IAE5B;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,SAAiB,EAAE,SAAsB,EAAE;QACjD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,0CAA0C,GAAG,oEAAoE,CAAC,CAAC;QAClL,CAAC;QAED,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,oBAAoB,SAAS,gFAAgF,CAAC,CAAC;QAC/H,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,UAAU,CAAC,YAAyC;QACvD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACnF,CAAC;QAED,8DAA8D;QAC9D,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEzC,6CAA6C;YAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACT,MAAM,SAAS,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,aAAa,GAAG,mBAAmB,SAAS,iCAAiC,GAAG,qBAAqB,SAAS,EAAE,CAAC,CAAC;YAC3K,CAAC;YAED,uCAAuC;YACvC,kFAAkF;YAClF,+EAA+E;YAC/E,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CACZ,6BAA6B,SAAS,oBAAoB;4BACvD,UAAU,YAAY,8BAA8B,SAAS,MAAM;4BACnE,qBAAqB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;oBACL,CAAC;gBACJ,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;oBAC7C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACnC,MAAM,IAAI,KAAK,CACZ,6BAA6B,SAAS,yBAAyB;4BAC5D,UAAU,SAAS,8BAA8B,SAAS,MAAM;4BAChE,qBAAqB,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClE,CAAC;oBACL,CAAC;gBACJ,CAAC;YACJ,CAAC;YAED,qCAAqC;YACrC,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjH,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBAC9C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CACZ,6BAA6B,SAAS,0BAA0B;4BAC7D,UAAU,SAAS,8DAA8D,SAAS,KAAK;4BAC/F,kDAAkD,CACvD,CAAC;oBACL,CAAC;gBACJ,CAAC;YACJ,CAAC;YAED,gEAAgE;YAChE,gEAAgE;YAChE,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CACZ,6BAA6B,SAAS,wBAAwB;4BAC3D,UAAU,SAAS,gCAAgC;4BACnD,4BAA4B,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,CACzF,CAAC;oBACL,CAAC;gBACJ,CAAC;YACJ,CAAC;YAED,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;gBACrI,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,qDAAqD,CAAC,CAAC;YAChH,CAAC;YAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC3F,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,kEAAkE,CAAC,CAAC;gBAC3K,IAAI,SAAS,CAAC,WAAW,CAAC,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,WAAW,CAAC,SAAS,KAAK,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,0DAA0D,CAAC,CAAC;YAClN,CAAC;YAED,IAAI,SAAS,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,uEAAuE,CAAC,CAAC;YAClI,CAAC;YAED,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,SAAS,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,iDAAiD,CAAC,CAAC;YAC5G,CAAC;YAED,oEAAoE;YACpE,iEAAiE;YACjE,sEAAsE;YACtE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;gBACtC,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;oBACtC,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;wBAC/C,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,mBAAmB,MAAM,CAAC,IAAI,+CAA+C,CAAC,CAAC;oBACxI,CAAC;oBACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,mBAAmB,MAAM,CAAC,IAAI,iFAAiF,CAAC,CAAC;oBAC1K,CAAC;oBACD,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,0BAA0B,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC;oBACnH,CAAC;oBACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;wBACxB,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,cAAc,MAAM,CAAC,IAAI,sBAAsB,CAAC,CAAC;oBAC1G,CAAC;oBACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,cAAc,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC;oBAC9G,CAAC;oBACD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;YACJ,CAAC;YAED,6DAA6D;YAC7D,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,MAAM,YAAY,GAAmB,EAAE,GAAG,IAAI,EAAE,CAAC;YAEjD,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,YAAY,CAAC,CAAC;gBAC/E,IAAI,CAAC,WAAW,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,0BAA0B,GAAG,UAAU,SAAS,CAAC,YAAY,8BAA8B,SAAS,IAAI,CAAC,CAAC;gBACnK,CAAC;gBACD,YAAY,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YACtD,CAAC;YAED,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACxB,YAAY,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAChE,CAAC;YAED,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAExD,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChG,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,iCAAiC,YAAY,CAAC,UAAU,gCAAgC,CAAC,CAAC;YACnJ,CAAC;YAED,8DAA8D;YAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;gBACxB,IAAI,EAAE,YAAY;gBAClB,QAAQ;gBACR,GAAG,EAAE,SAAS;aAChB,CAAC,CAAC;QACN,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,oEAAoE;IACpE,+DAA+D;IAE/D;;;OAGG;IACK,iBAAiB;QACtB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,+DAA+D,GAAG,mEAAmE,CAAC,CAAC;QAC1J,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,GAAG,CAAC,SAAiB;QAClB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CAAC,UAAkB;QAC/B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU;gBAAE,OAAO,KAAK,CAAC;QAC1D,CAAC;QACD,OAAO,SAAS,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACH,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,IAAI,IAAI;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAAiB;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnG,CAAC;CACH"}

package/dist/schema.d.ts

@@ -0,0 +1,8 @@
+import type { AdminUser, SchemaResponse } from "./types.js";
+import type { AdminRegistry } from "./registry.js";
+export declare function buildSchemaResponse(registry: AdminRegistry, options: {
+    adminUser: AdminUser;
+    siteName: string;
+    basePath: string;
+    authMode: "built-in" | "external";
+}): SchemaResponse;