@paneljs/paneljs 0.2.0 → 0.2.1

package/dist/cli.js

@@ -0,0 +1,53 @@
+#!/usr/bin/env node
+import { stdin, stdout } from "node:process";
+import { argument } from "./cli/args.js";
+import { authSchema, createSuperuser } from "./cli/auth.js";
+import { createDefaultInstall, runInit } from "./cli/init.js";
+import { confirm, select } from "./cli/prompt.js";
+const usage = () => {
+    console.log(`Usage:
+  paneljs init [--framework express] [--orm prisma|typeorm] [--pm npm|pnpm|yarn|bun] [--yes] [--dry-run]
+  paneljs auth:schema --identifier <email|username>
+  paneljs createsuperuser --config ./paneljs.config.mjs [--email value] [--username value] [--password value]
+
+init adds PanelJS packages to the current app. It does not rewrite source files.
+auth:schema and createsuperuser are Prisma setup tools. TypeORM uses builtInAuthEntities() instead.
+
+The createsuperuser config module must default-export { prisma, auth }, where auth is a built-in auth configuration.`);
+};
+const command = process.argv[2];
+const argv = process.argv.slice(2);
+try {
+    if (command === "init") {
+        await runInit({
+            cwd: process.cwd(),
+            argv: process.argv.slice(3),
+            io: {
+                stdout,
+                isTTY: Boolean(stdin.isTTY),
+                env: process.env,
+                select,
+                confirm: (label) => confirm(label, true),
+                install: createDefaultInstall(),
+            },
+        });
+    }
+    else if (command === "auth:schema") {
+        console.log(authSchema(argument(argv, "--identifier") ?? ""));
+    }
+    else if (command === "createsuperuser") {
+        await createSuperuser(argv);
+    }
+    else if (command === "--help" || command === "-h") {
+        usage();
+    }
+    else {
+        usage();
+        process.exitCode = command ? 1 : 0;
+    }
+}
+catch (error) {
+    console.error(error instanceof Error ? error.message : "Command failed.");
+    process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,KAAK,GAAG,GAAS,EAAE;IACvB,OAAO,CAAC,GAAG,CAAC;;;;;;;;qHAQuG,CAAC,CAAC;AACvH,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEnC,IAAI,CAAC;IACH,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC;YACZ,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,EAAE,EAAE;gBACF,MAAM;gBACN,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM;gBACN,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;gBACxC,OAAO,EAAE,oBAAoB,EAAE;aAChC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,OAAO,KAAK,iBAAiB,EAAE,CAAC;QACzC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC;IACV,CAAC;SAAM,CAAC;QACN,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/deleteRelations.d.ts

@@ -0,0 +1,17 @@
+import type { DataAdapter } from "./adapter.js";
+import type { FullRegisteredModel } from "./registry.js";
+import type { AdminUser } from "./types.js";
+export type DeleteReferentialAction = "Cascade" | "SetNull" | "Restrict";
+export type DeletePreviewRelation = {
+    fieldName: string;
+    modelName: string;
+    pluralName: string;
+    idField: string;
+    displayField: string;
+    onDelete: DeleteReferentialAction;
+    recordsByParentId: Record<string, Record<string, unknown>[]>;
+};
+/** Related rows shown on a transport's delete confirmation page. */
+export declare function loadDeletePreviewRelations(parent: FullRegisteredModel, models: Map<string, FullRegisteredModel>, adapter: DataAdapter, adminUser: AdminUser, ids: Array<string | number>): Promise<DeletePreviewRelation[]>;
+/** Reject deletes that would violate Restrict / Protect relations. */
+export declare function assertNoRestrictedRelations(parent: FullRegisteredModel, models: Map<string, FullRegisteredModel>, adapter: DataAdapter, adminUser: AdminUser, ids: Array<string | number>): Promise<void>;

package/dist/deleteRelations.js

@@ -0,0 +1,100 @@
+import { buildListRecordSelect } from "./recordSelection.js";
+import { hasModelPermission } from "./permissions.js";
+import { withSelectFields } from "./query.js";
+import { resolveScope } from "./scope.js";
+import { RequestValidationError } from "./validation.js";
+function referentialAction(onDelete) {
+    if (onDelete === "Cascade")
+        return "Cascade";
+    if (onDelete === "SetNull")
+        return "SetNull";
+    return "Restrict";
+}
+function findChildBelongsTo(parent, child, parentHasManyRelationName) {
+    return child.meta.fields.find((field) => {
+        const relation = field.relation;
+        return (field.type === "relation" &&
+            relation?.kind === "belongsTo" &&
+            relation.model === parent.meta.name &&
+            relation.foreignKeyFields.length === 1 &&
+            (relation.relationName === parentHasManyRelationName ||
+                field.name === parentHasManyRelationName));
+    });
+}
+function listChildRelations(parent, models) {
+    const modelsByName = new Map([...models.values()].map((entry) => [entry.meta.name, entry]));
+    const children = [];
+    for (const relationField of parent.meta.fields) {
+        const relation = relationField.relation;
+        if (relationField.type !== "relation" || relation?.kind !== "hasMany") {
+            continue;
+        }
+        const childModel = modelsByName.get(relation.model);
+        if (!childModel)
+            continue;
+        const childRelationField = findChildBelongsTo(parent, childModel, relation.relationName);
+        const foreignKey = childRelationField?.relation?.foreignKeyFields[0];
+        if (!childRelationField || !foreignKey)
+            continue;
+        children.push({
+            parentFieldName: relationField.name,
+            childModel,
+            foreignKey,
+            onDelete: referentialAction(childRelationField.relation?.onDelete),
+        });
+    }
+    return children;
+}
+/** Related rows shown on a transport's delete confirmation page. */
+export async function loadDeletePreviewRelations(parent, models, adapter, adminUser, ids) {
+    const relations = [];
+    for (const child of listChildRelations(parent, models)) {
+        if (!hasModelPermission(adminUser, child.childModel.resolved.permissions, "list")) {
+            continue;
+        }
+        const childScope = await resolveScope(child.childModel.raw, adminUser);
+        const childSelect = withSelectFields(buildListRecordSelect(child.childModel.meta, child.childModel), [child.foreignKey]);
+        const childRecords = await adapter
+            .resource(child.childModel.meta)
+            .findMany({
+            scope: childScope,
+            filters: { [child.foreignKey]: { in: ids } },
+            select: childSelect,
+        });
+        const recordsByParentId = {};
+        for (const record of childRecords) {
+            const parentId = record[child.foreignKey];
+            if (typeof parentId !== "string" && typeof parentId !== "number") {
+                continue;
+            }
+            const key = String(parentId);
+            recordsByParentId[key] = [...(recordsByParentId[key] ?? []), record];
+        }
+        relations.push({
+            fieldName: child.parentFieldName,
+            modelName: child.childModel.meta.name,
+            pluralName: child.childModel.meta.pluralName,
+            idField: child.childModel.meta.idField,
+            displayField: child.childModel.meta.displayField,
+            onDelete: child.onDelete,
+            recordsByParentId,
+        });
+    }
+    return relations;
+}
+/** Reject deletes that would violate Restrict / Protect relations. */
+export async function assertNoRestrictedRelations(parent, models, adapter, adminUser, ids) {
+    for (const child of listChildRelations(parent, models)) {
+        if (child.onDelete !== "Restrict")
+            continue;
+        const childScope = await resolveScope(child.childModel.raw, adminUser);
+        const count = await adapter.resource(child.childModel.meta).count({
+            scope: childScope,
+            filters: { [child.foreignKey]: { in: ids } },
+        });
+        if (count === 0)
+            continue;
+        throw new RequestValidationError(`Cannot delete this ${parent.meta.name} because related ${child.childModel.meta.name} records still reference it.`);
+    }
+}
+//# sourceMappingURL=deleteRelations.js.map

package/dist/deleteRelations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteRelations.js","sourceRoot":"","sources":["../src/deleteRelations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAczD,SAAS,iBAAiB,CACxB,QAAmC;IAEnC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA2B,EAC3B,KAA0B,EAC1B,yBAAiC;IAEjC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,UAAU;YACzB,QAAQ,EAAE,IAAI,KAAK,WAAW;YAC9B,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI;YACnC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtC,CAAC,QAAQ,CAAC,YAAY,KAAK,yBAAyB;gBAClD,KAAK,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,kBAAkB,CACzB,MAA2B,EAC3B,MAAwC;IAExC,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC9D,CAAC;IACF,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QACxC,IAAI,aAAa,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,kBAAkB,GAAG,kBAAkB,CAC3C,MAAM,EACN,UAAU,EACV,QAAQ,CAAC,YAAY,CACtB,CAAC;QACF,MAAM,UAAU,GAAG,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU;YAAE,SAAS;QACjD,QAAQ,CAAC,IAAI,CAAC;YACZ,eAAe,EAAE,aAAa,CAAC,IAAI;YACnC,UAAU;YACV,UAAU;YACV,QAAQ,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA2B,EAC3B,MAAwC,EACxC,OAAoB,EACpB,SAAoB,EACpB,GAA2B;IAE3B,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACvD,IACE,CAAC,kBAAkB,CACjB,SAAS,EACT,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EACrC,MAAM,CACP,EACD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,WAAW,GAAG,gBAAgB,CAClC,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,EAC9D,CAAC,KAAK,CAAC,UAAU,CAAC,CACnB,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,OAAO;aAC/B,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;aAC/B,QAAQ,CAAC;YACR,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;YAC5C,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACL,MAAM,iBAAiB,GAA8C,EAAE,CAAC;QACxE,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjE,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QACD,SAAS,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;YAC5C,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO;YACtC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY;YAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAA2B,EAC3B,MAAwC,EACxC,OAAoB,EACpB,SAAoB,EACpB,GAA2B;IAE3B,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU;YAAE,SAAS;QAC5C,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;YAChE,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;SAC7C,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,CAAC;YAAE,SAAS;QAC1B,MAAM,IAAI,sBAAsB,CAC9B,sBAAsB,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,8BAA8B,CACnH,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,13 @@
 import type { AdminConfig, ModelConfig } from "./types.js";
 import { AdminRegistry } from "./registry.js";
+import { AdminService } from "./adminService.js";
 export interface Admin {
     register(modelName: string, modelConfig?: ModelConfig): Admin;
     initialize(): Promise<void>;
     readonly registry: AdminRegistry;
     readonly config: AdminConfig;
+    /** Available after initialize(); transports delegate admin operations here. */
+    readonly service: AdminService;
 }
 export declare function createAdmin(config: AdminConfig): Admin;
 export type { AdminConfig, ModelConfig, AdminUser, AuthConfig, BuiltInAuthConfig, ExternalAuthConfig, AdminHttpRequest, AuditConfig, AdminAuditEvent, AdminFieldMeta, AdminModelMeta, AdminFieldType, RelationKind, ModelPermissions, AdminAction, AdminFieldOverride, PaginatedResponse, SchemaResponse, } from "./types.js";
@@ -13,10 +16,14 @@ export type { ActionWhere, CountQuery, CreateQuery, DeleteManyQuery, EqualityFil
 export { idSelect, withSelectFields } from "./query.js";
 export type { ResolvedModelConfig, FullRegisteredModel } from "./registry.js";
 export { AdminRegistry } from "./registry.js";
-export { hashAdminPassword, verifyAdminPassword, verifyLoginPassword } from "./passwords.js";
-export { AdminApiError, AuthenticationError, PermissionDeniedError, ModelNotFoundError, RecordNotFoundError } from "./errors.js";
-export { RequestValidationError, isFieldVisible, isFieldWritable, isSensitiveFieldName, validateWritePayload, validateHookPayload, assertRequiredCreateFields } from "./validation.js";
-export { hasModelPermission, hasActionPermission, hasRegisteredActionPermission } from "./permissions.js";
+export { AdminService, validateSelectedIds } from "./adminService.js";
+export type { AdminListInput, AdminServiceOptions, DeletePreview, DeleteSelectedResult, } from "./adminService.js";
+export { assertNoRestrictedRelations, loadDeletePreviewRelations, } from "./deleteRelations.js";
+export type { DeletePreviewRelation, DeleteReferentialAction, } from "./deleteRelations.js";
+export { hashAdminPassword, verifyAdminPassword, verifyLoginPassword, } from "./passwords.js";
+export { AdminApiError, AuthenticationError, PermissionDeniedError, ModelNotFoundError, RecordNotFoundError, } from "./errors.js";
+export { RequestValidationError, isFieldVisible, isFieldWritable, isSensitiveFieldName, validateWritePayload, validateHookPayload, assertRequiredCreateFields, } from "./validation.js";
+export { hasModelPermission, hasActionPermission, hasRegisteredActionPermission, } from "./permissions.js";
 export type { AdminOperation } from "./permissions.js";
 export { DELETE_SELECTED_ACTION } from "./defaultActions.js";
 export { writeAuditEvent } from "./audit.js";
@@ -24,11 +31,11 @@ export { buildSchemaResponse } from "./schema.js";
 export { parseListQuery } from "./listQuery.js";
 export type { ParsedListQuery } from "./listQuery.js";
 export { parseRecordId } from "./ids.js";
-export { buildRecordSelect, buildListRecordSelect, assertSelectedRelationsAreVisible } from "./recordSelection.js";
-export { applyCreateScope, assertScopeFieldsUnchanged, buildScopedRecordWhere, collectScopeFieldNames, resolveScope } from "./scope.js";
+export { buildRecordSelect, buildListRecordSelect, assertSelectedRelationsAreVisible, } from "./recordSelection.js";
+export { applyCreateScope, assertScopeFieldsUnchanged, buildScopedRecordWhere, collectScopeFieldNames, resolveScope, } from "./scope.js";
 export { getAdminUiDist } from "./uiPath.js";
 export { isBuiltInAuth } from "./authMode.js";
-export type { AdminAuthStore, AuthStoreOptions, BuiltInSessionRecord, BuiltInUserRecord } from "./authStore.js";
-export { DEFAULT_AUTH_SESSION_MODEL, DEFAULT_AUTH_USER_MODEL } from "./authStore.js";
+export type { AdminAuthStore, AuthStoreOptions, BuiltInSessionRecord, BuiltInUserRecord, } from "./authStore.js";
+export { DEFAULT_AUTH_SESSION_MODEL, DEFAULT_AUTH_USER_MODEL, } from "./authStore.js";
 export { SESSION_COOKIE_NAME, authenticateBuiltInRequest, authenticateSession, clearedSessionCookie, loginWithPassword, logoutBuiltIn, readSessionToken, resolveAuthStore, sessionCookie, } from "./builtInAuth.js";
-export type { BuiltInLoginResult, BuiltInLogoutResult, SessionCookie } from "./builtInAuth.js";
+export type { BuiltInLoginResult, BuiltInLogoutResult, SessionCookie, } from "./builtInAuth.js";

package/dist/index.js

@@ -1,7 +1,9 @@
 import { AdminRegistry } from "./registry.js";
+import { AdminService } from "./adminService.js";
 export function createAdmin(config) {
     const registry = new AdminRegistry();
     let initialized = false;
+    let service;
     const admin = {
         register(modelName, modelConfig = {}) {
             registry.register(modelName, modelConfig);
@@ -12,6 +14,11 @@ export function createAdmin(config) {
                 return;
             const models = await config.adapter.introspect();
             await registry.initialize(models);
+            service = new AdminService({
+                models: new Map(registry.getAll().map((model) => [model.meta.name, model])),
+                adapter: config.adapter,
+                audit: config.audit,
+            });
             initialized = true;
         },
         get registry() {
@@ -20,24 +27,32 @@ export function createAdmin(config) {
         get config() {
             return config;
         },
+        get service() {
+            if (!service) {
+                throw new Error("[paneljs] AdminService is unavailable before admin.initialize().");
+            }
+            return service;
+        },
     };
     return admin;
 }
 export { idSelect, withSelectFields } from "./query.js";
 export { AdminRegistry } from "./registry.js";
-export { hashAdminPassword, verifyAdminPassword, verifyLoginPassword } from "./passwords.js";
-export { AdminApiError, AuthenticationError, PermissionDeniedError, ModelNotFoundError, RecordNotFoundError } from "./errors.js";
-export { RequestValidationError, isFieldVisible, isFieldWritable, isSensitiveFieldName, validateWritePayload, validateHookPayload, assertRequiredCreateFields } from "./validation.js";
-export { hasModelPermission, hasActionPermission, hasRegisteredActionPermission } from "./permissions.js";
+export { AdminService, validateSelectedIds } from "./adminService.js";
+export { assertNoRestrictedRelations, loadDeletePreviewRelations, } from "./deleteRelations.js";
+export { hashAdminPassword, verifyAdminPassword, verifyLoginPassword, } from "./passwords.js";
+export { AdminApiError, AuthenticationError, PermissionDeniedError, ModelNotFoundError, RecordNotFoundError, } from "./errors.js";
+export { RequestValidationError, isFieldVisible, isFieldWritable, isSensitiveFieldName, validateWritePayload, validateHookPayload, assertRequiredCreateFields, } from "./validation.js";
+export { hasModelPermission, hasActionPermission, hasRegisteredActionPermission, } from "./permissions.js";
 export { DELETE_SELECTED_ACTION } from "./defaultActions.js";
 export { writeAuditEvent } from "./audit.js";
 export { buildSchemaResponse } from "./schema.js";
 export { parseListQuery } from "./listQuery.js";
 export { parseRecordId } from "./ids.js";
-export { buildRecordSelect, buildListRecordSelect, assertSelectedRelationsAreVisible } from "./recordSelection.js";
-export { applyCreateScope, assertScopeFieldsUnchanged, buildScopedRecordWhere, collectScopeFieldNames, resolveScope } from "./scope.js";
+export { buildRecordSelect, buildListRecordSelect, assertSelectedRelationsAreVisible, } from "./recordSelection.js";
+export { applyCreateScope, assertScopeFieldsUnchanged, buildScopedRecordWhere, collectScopeFieldNames, resolveScope, } from "./scope.js";
 export { getAdminUiDist } from "./uiPath.js";
 export { isBuiltInAuth } from "./authMode.js";
-export { DEFAULT_AUTH_SESSION_MODEL, DEFAULT_AUTH_USER_MODEL } from "./authStore.js";
+export { DEFAULT_AUTH_SESSION_MODEL, DEFAULT_AUTH_USER_MODEL, } from "./authStore.js";
 export { SESSION_COOKIE_NAME, authenticateBuiltInRequest, authenticateSession, clearedSessionCookie, loginWithPassword, logoutBuiltIn, readSessionToken, resolveAuthStore, sessionCookie, } from "./builtInAuth.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAS9C,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC5C,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACrC,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,MAAM,KAAK,GAAU;QAClB,QAAQ,CAAC,SAAiB,EAAE,cAA2B,EAAE;YACtD,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,UAAU;YACb,IAAI,WAAW;gBAAE,OAAO;YACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,WAAW,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,QAAQ;YACT,OAAO,QAAQ,CAAC;QACnB,CAAC;QACD,IAAI,MAAM;YACP,OAAO,MAAM,CAAC;QACjB,CAAC;KACH,CAAC;IAEF,OAAO,KAAK,CAAC;AAChB,CAAC;AAsCD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACjI,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,eAAe,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AACvL,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAE1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACnH,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxI,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EACJ,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,GACf,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWjD,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACrC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAiC,CAAC;IAEtC,MAAM,KAAK,GAAU;QACnB,QAAQ,CAAC,SAAiB,EAAE,cAA2B,EAAE;YACvD,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,CAAC,UAAU;YACd,IAAI,WAAW;gBAAE,OAAO;YACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,GAAG,IAAI,YAAY,CAAC;gBACzB,MAAM,EAAE,IAAI,GAAG,CACb,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC3D;gBACD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO;YACT,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAsCD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAOtE,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAO9C,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paneljs/paneljs",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Django-style, schema-driven Prisma admin panel for Express and Node.js applications.",
   "license": "MIT",
   "type": "module",
@@ -52,6 +52,8 @@
     "dev": "pnpm --dir ui dev",
     "lint": "echo \"paneljs: no lint yet\"",
     "check-types": "tsc --noEmit -p tsconfig.json",
+    "test": "vitest run --passWithNoTests",
+    "test:unit": "vitest run --passWithNoTests",
     "prepublishOnly": "pnpm run build"
   },
   "devDependencies": {