@pilotiq/pilotiq 0.21.0 → 0.23.0

package/dist/routes.js

@@ -2,6 +2,7 @@ import { dispatchFormSubmit, findForms, selectForm } from './elements/dispatchFo
 import { RESERVED_RELATIONSHIP_TOKENS } from './RelationManager.js';
 import { Table } from './elements/Table.js';
 import { Column } from './Column.js';
+import { wantsJson } from './routes/helpers.js';
 // `routes.ts` is split into a directory of focused modules under
 // `./routes/`. This file is the orchestrator — boot-time validation
 // loops + the per-Resource / per-Global / per-Page registration
@@ -170,43 +171,65 @@ export function registerPilotiqRoutes(router, pilotiq) {
             editableEnabled.add(R.getSlug());
         }
     }
-    // ── Panel-level sibling routes ────────────────────────
-    // Dashboard, _uploads, _widget, _search, _notifications.
-    // Pulled out 2026-05-12 (Phase 2 of the routes.ts split).
-    registerPanelRoutes(router, pilotiq, base);
-    // ── Resource routes ───────────────────────────────────
-    // List / view / create / edit / delete + soft-delete / actions /
-    // widgets / deferred-table / reorder / per-row editable cells / the
-    // four form-state companion endpoints / record sub-pages. Each
-    // Resource also fans out into its registered relation managers
-    // (depth-1 + depth-2). Pulled out 2026-05-12 (Phase 5 of the
-    // routes.ts split).
-    for (const R of cfg.resources) {
-        registerResourceRoutes(router, pilotiq, R, base, {
-            reorderable: reorderEnabled.has(R.getSlug()),
-            editable: editableEnabled.has(R.getSlug()),
-        });
-    }
-    // ── Globals (singletons — 2-segment, no /:id) ────────
-    // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
-    for (const G of cfg.globals) {
-        registerGlobalRoutes(router, pilotiq, G, base);
-    }
-    // ── Custom pages (2-segment, slug route) ──────────────
-    // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
-    for (const PageClass of cfg.pages) {
-        // The dashboard page lives at `${base}` (panel routes handle it);
-        // skip it here so we don't register a duplicate `${pageUrl}` route
-        // or a broken `${base}/` (when `slug = ''`).
-        if (cfg.dashboardPage === PageClass)
-            continue;
-        registerCustomPageRoutes(router, pilotiq, PageClass, base);
-    }
-    // ── Theme editor ──────────────────────────────────────
-    // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
-    if (cfg.themeEditor) {
-        registerThemeRoutes(router, pilotiq, base);
-    }
+    // ── `Pilotiq.guard()` — panel-wide 401 layer ──────────
+    // Documented as the unauthenticated-request gate, but until 2026-05-21
+    // only `_uploads` consulted it — every other route relied on
+    // `cfg.user` returning null + `R.canX(user, …)` defaulting to true,
+    // so an app that wired `guard(req => Auth.check())` but shipped any
+    // Resource without `canAccess` ended up with an unauthenticated,
+    // fully-readable admin panel. Wrap every core panel route in one
+    // group so the guard runs in front of every handler.
+    const guardMiddleware = async (req, res, next) => {
+        if (cfg.guard) {
+            const allowed = await cfg.guard(req);
+            if (!allowed) {
+                res.status(401);
+                if (wantsJson(req))
+                    return res.json({ ok: false, error: 'Unauthorized' });
+                return res.send('Unauthorized');
+            }
+        }
+        return next();
+    };
+    router.group({ middleware: [guardMiddleware] }, () => {
+        // ── Panel-level sibling routes ────────────────────────
+        // Dashboard, _uploads, _widget, _search, _notifications.
+        // Pulled out 2026-05-12 (Phase 2 of the routes.ts split).
+        registerPanelRoutes(router, pilotiq, base);
+        // ── Resource routes ───────────────────────────────────
+        // List / view / create / edit / delete + soft-delete / actions /
+        // widgets / deferred-table / reorder / per-row editable cells / the
+        // four form-state companion endpoints / record sub-pages. Each
+        // Resource also fans out into its registered relation managers
+        // (depth-1 + depth-2). Pulled out 2026-05-12 (Phase 5 of the
+        // routes.ts split).
+        for (const R of cfg.resources) {
+            registerResourceRoutes(router, pilotiq, R, base, {
+                reorderable: reorderEnabled.has(R.getSlug()),
+                editable: editableEnabled.has(R.getSlug()),
+            });
+        }
+        // ── Globals (singletons — 2-segment, no /:id) ────────
+        // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
+        for (const G of cfg.globals) {
+            registerGlobalRoutes(router, pilotiq, G, base);
+        }
+        // ── Custom pages (2-segment, slug route) ──────────────
+        // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
+        for (const PageClass of cfg.pages) {
+            // The dashboard page lives at `${base}` (panel routes handle it);
+            // skip it here so we don't register a duplicate `${pageUrl}` route
+            // or a broken `${base}/` (when `slug = ''`).
+            if (cfg.dashboardPage === PageClass)
+                continue;
+            registerCustomPageRoutes(router, pilotiq, PageClass, base);
+        }
+        // ── Theme editor ──────────────────────────────────────
+        // Pulled out 2026-05-12 (Phase 3 of the routes.ts split).
+        if (cfg.themeEditor) {
+            registerThemeRoutes(router, pilotiq, base);
+        }
+    });
     // Plugin route hook — runs AFTER all core routes register so plugins
     // can mount their own HTTP surface alongside the panel's. Order
     // matches the registration order on `.use()` / `.plugins([…])`. Each
@@ -215,6 +238,11 @@ export function registerPilotiqRoutes(router, pilotiq) {
     // `_notifications`) is the recommended shape. Failures inside a
     // plugin's hook propagate — boot order is "register all core, then
     // each plugin in order"; a throw on hook N stops hooks N+1..N+M.
+    //
+    // Plugin routes mount OUTSIDE the guard group — plugins own their
+    // own auth posture (e.g. public webhooks, custom auth handshakes).
+    // Plugin authors that want the panel guard should consult
+    // `cfg.guard` themselves at the top of their handlers.
     for (const plugin of pilotiq.getPlugins()) {
         plugin.registerRoutes?.(router, pilotiq);
     }

package/dist/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGpC,iEAAiE;AACjE,oEAAoE;AACpE,gEAAgE;AAChE,uEAAuE;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAY,mBAAmB,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAS,uBAAuB,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAW,qBAAqB,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAO,mBAAmB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAY,mBAAmB,CAAA;AAE7D,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IAErB,qEAAqE;IACrE,oEAAoE;IACpE,gCAAgC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,uBAAuB,GAAG,CAC9B,IAAqC,EACrC,KAAsD,EAChD,EAAE;QACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAQ;YACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,IAAI,IAAI,CAAC,IAAI,uBAAuB,IAAI,CAAC,OAAO,CAAC,IAAI,4BAA4B;oBAClG,kCAAkC,CACnC,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IAClD,uBAAuB,CAAC,QAAQ,EAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAChD,uBAAuB,CAAC,MAAM,EAAM,GAAG,CAAC,KAAK,CAAC,CAAA;IAE9C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;QACzC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;YACrB,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,wBAAwB,CAAC,KAAK;oBACzD,0EAA0E,CAC3E,CAAA;YACH,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,sCAAsC,CAAC,kCAAkC,CAC1E,CAAA;YACH,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,qBAAqB,GAAG,CAC5B,IAAqC,EACrC,KAAU,EACV,IAA2B,EACrB,EAAE;YACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;oBAAE,SAAQ;gBACrD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,IAAI,KAAK,UAAU;wBAC9B,CAAC,CAAC,4DAA4D;wBAC9D,CAAC,CAAC,EAAE,CAAA;oBACN,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,IAAI,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,OAAO,EAAE,6CAA6C,IAAI,EAAE,CAC1G,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QACD,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QAChD,qBAAqB,CAAC,QAAQ,EAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC9C,qBAAqB,CAAC,MAAM,EAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,aAAa,CAAC,CAAA;QAC1E,mEAAmE;QACnE,qEAAqE;QACrE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAA;YACxB,IAAI,EAAE,KAAK,SAAS;gBAAE,SAAQ;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,2BAA2B,EAAE,CAAC,IAAI,iDAAiD,CAC/G,CAAA;YACH,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,IAAI,mCAAmC,CAAC,CAAC,IAAI,GAAG,CACjH,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,qEAAqE;IACrE,wCAAwC;IACxC,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,2CAA2C;IAC3C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;YAC/B,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,gCAAgC,GAAG,KAAK;oBACxF,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;gBACrC,IAAI,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CACb,oCAAoC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,gCAAgC,SAAS,KAAK;wBACrH,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CACb,oCAAoC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,iCAAiC;wBACxG,8HAA8H,CAC/H,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,8CAA8C;IAC9C,qEAAqE;IACrE,oEAAoE;IACpE,gEAAgE;IAChE,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,wBAAwB,GAAG,kBAAkB,CAAA;IACnD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,EAAE,CAAA;QACtC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC7C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;QACzE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG;oBAC7E,2CAA2C,CAC5C,CAAA;YACH,CAAC;YACD,IAAI,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,QAAQ,CAAC,CAAC,IAAI,uCAAuC;oBACnG,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;YACH,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,QAAQ,CAAC,CAAC,IAAI,iDAAiD,WAAW,KAAK;oBAC7H,yEAAyE,CAC1E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,qEAAqE;IACrE,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,8BAA8B;IAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAA,CAAC,gBAAgB;IACjE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAgD,CAAA;QACpD,IAAI,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QACrC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC,CAAG,yCAAyC;QAE9D,MAAM,WAAW,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAA;QAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,IAAI,+BAA+B,WAAW,qDAAqD;oBAClH,2FAA2F,CAC5F,CAAA;YACH,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,IAAI,4CAA4C;oBAC/D,gEAAgE;oBAChE,+DAA+D;oBAC/D,sDAAsD,CACvD,CAAA;YACH,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,yDAAyD;IACzD,0DAA0D;IAC1D,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;IAE1C,yDAAyD;IACzD,iEAAiE;IACjE,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,6DAA6D;IAC7D,oBAAoB;IACpB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE;YAC/C,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YAC5C,QAAQ,EAAK,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IAED,wDAAwD;IACxD,0DAA0D;IAC1D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5B,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;IAED,yDAAyD;IACzD,0DAA0D;IAC1D,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAClC,kEAAkE;QAClE,mEAAmE;QACnE,6CAA6C;QAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;YAAE,SAAQ;QAC7C,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IAC5D,CAAC;IAED,yDAAyD;IACzD,0DAA0D;IAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;IAC5C,CAAC;IAED,qEAAqE;IACrE,gEAAgE;IAChE,qEAAqE;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA"}
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAA;AACnE,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE/C,iEAAiE;AACjE,oEAAoE;AACpE,gEAAgE;AAChE,uEAAuE;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAY,mBAAmB,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAS,uBAAuB,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAW,qBAAqB,CAAA;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAO,mBAAmB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAY,mBAAmB,CAAA;AAE7D,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAA;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IAErB,qEAAqE;IACrE,oEAAoE;IACpE,gCAAgC;IAChC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,uBAAuB,GAAG,CAC9B,IAAqC,EACrC,KAAsD,EAChD,EAAE;QACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAQ;YACxC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,IAAI,IAAI,CAAC,IAAI,uBAAuB,IAAI,CAAC,OAAO,CAAC,IAAI,4BAA4B;oBAClG,kCAAkC,CACnC,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IAClD,uBAAuB,CAAC,QAAQ,EAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAChD,uBAAuB,CAAC,MAAM,EAAM,GAAG,CAAC,KAAK,CAAC,CAAA;IAE9C,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;QACzC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAA;YACrB,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,wBAAwB,CAAC,KAAK;oBACzD,0EAA0E,CAC3E,CAAA;YACH,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CACb,sCAAsC,CAAC,kCAAkC,CAC1E,CAAA;YACH,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,qBAAqB,GAAG,CAC5B,IAAqC,EACrC,KAAU,EACV,IAA2B,EACrB,EAAE;YACR,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;oBAAE,SAAQ;gBACrD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,IAAI,KAAK,UAAU;wBAC9B,CAAC,CAAC,4DAA4D;wBAC9D,CAAC,CAAC,EAAE,CAAA;oBACN,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,IAAI,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,OAAO,EAAE,6CAA6C,IAAI,EAAE,CAC1G,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QACD,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QAChD,qBAAqB,CAAC,QAAQ,EAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QAC9C,qBAAqB,CAAC,MAAM,EAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,aAAa,CAAC,CAAA;QAC1E,mEAAmE;QACnE,qEAAqE;QACrE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAA;YACxB,IAAI,EAAE,KAAK,SAAS;gBAAE,SAAQ;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,2BAA2B,EAAE,CAAC,IAAI,iDAAiD,CAC/G,CAAA;YACH,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,qBAAqB,CAAC,CAAC,IAAI,kBAAkB,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,IAAI,mCAAmC,CAAC,CAAC,IAAI,GAAG,CACjH,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,qEAAqE;IACrE,wCAAwC;IACxC,EAAE;IACF,qEAAqE;IACrE,uEAAuE;IACvE,iEAAiE;IACjE,2CAA2C;IAC3C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;YAC/B,IAAI,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,gCAAgC,GAAG,KAAK;oBACxF,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,EAAE,CAAA;gBACrC,IAAI,4BAA4B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,MAAM,IAAI,KAAK,CACb,oCAAoC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,gCAAgC,SAAS,KAAK;wBACrH,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CACb,oCAAoC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,iCAAiC;wBACxG,8HAA8H,CAC/H,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,8CAA8C;IAC9C,qEAAqE;IACrE,oEAAoE;IACpE,gEAAgE;IAChE,uEAAuE;IACvE,mDAAmD;IACnD,MAAM,wBAAwB,GAAG,kBAAkB,CAAA;IACnD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,CAAC,CAAC,cAAc,EAAE,CAAA;QACtC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC7C,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAA;QACzE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;YACvC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG;oBAC7E,2CAA2C,CAC5C,CAAA;YACH,CAAC;YACD,IAAI,4BAA4B,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,QAAQ,CAAC,CAAC,IAAI,uCAAuC;oBACnG,oBAAoB,CAAC,GAAG,4BAA4B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/E,CAAA;YACH,CAAC;YACD,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,mCAAmC,WAAW,QAAQ,CAAC,CAAC,IAAI,iDAAiD,WAAW,KAAK;oBAC7H,yEAAyE,CAC1E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,gEAAgE;IAChE,qEAAqE;IACrE,mEAAmE;IACnE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,8BAA8B;IAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAA,CAAC,gBAAgB;IACjE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAgD,CAAA;QACpD,IAAI,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QACrC,MAAM,CAAC;YAAC,SAAQ;QAAC,CAAC,CAAG,yCAAyC;QAE9D,MAAM,WAAW,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAA;QAChD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,IAAI,+BAA+B,WAAW,qDAAqD;oBAClH,2FAA2F,CAC5F,CAAA;YACH,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;QACnD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CACb,aAAa,CAAC,CAAC,IAAI,4CAA4C;oBAC/D,gEAAgE;oBAChE,+DAA+D;oBAC/D,sDAAsD,CACvD,CAAA;YACH,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,uEAAuE;IACvE,6DAA6D;IAC7D,oEAAoE;IACpE,oEAAoE;IACpE,iEAAiE;IACjE,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,eAAe,GAAsB,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAClE,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBACf,IAAI,SAAS,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBACzE,OAAO,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;IAED,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE;QACnD,yDAAyD;QACzD,yDAAyD;QACzD,0DAA0D;QAC1D,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAE1C,yDAAyD;QACzD,iEAAiE;QACjE,oEAAoE;QACpE,+DAA+D;QAC/D,+DAA+D;QAC/D,6DAA6D;QAC7D,oBAAoB;QACpB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAC9B,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE;gBAC/C,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5C,QAAQ,EAAK,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;aAC9C,CAAC,CAAA;QACJ,CAAC;QAED,wDAAwD;QACxD,0DAA0D;QAC1D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAChD,CAAC;QAED,yDAAyD;QACzD,0DAA0D;QAC1D,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAClC,kEAAkE;YAClE,mEAAmE;YACnE,6CAA6C;YAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;gBAAE,SAAQ;YAC7C,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;QAC5D,CAAC;QAED,yDAAyD;QACzD,0DAA0D;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YACpB,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,qEAAqE;IACrE,gEAAgE;IAChE,qEAAqE;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,gEAAgE;IAChE,mEAAmE;IACnE,iEAAiE;IACjE,EAAE;IACF,kEAAkE;IAClE,mEAAmE;IACnE,0DAA0D;IAC1D,uDAAuD;IACvD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA"}

package/dist/theme/index.d.ts

@@ -10,6 +10,8 @@ export { iconMap, resolveIconName } from './icon-map.js';
 export { colors, BASE_COLOR_NAMES, HUE_NAMES } from './colors.js';
 export { parseSeedToScale } from './generate-scale.js';
 export { migrateThemeOverrides } from './migrate.js';
+export { prismaThemeStorage } from './storage.js';
+export type { ThemeStorageAdapter, PanelGlobalDelegate, PrismaThemeStorageOptions, } from './storage.js';
 export type { ColorName, ColorScale, ColorStep } from './colors.js';
 export type { StylePreset, BaseColor, HueColor, ThemeColor, ChartColor, RadiusPreset, SpacingPreset, IconLibrary, ThemeFonts, ThemeConfig, ThemeMeta, PresetDefinition, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/theme/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/theme/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEpD,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACnE,YAAY,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/theme/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,cAAc,CAAA;AAErB,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACnE,YAAY,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAA"}

package/dist/theme/index.js

@@ -10,4 +10,5 @@ export { iconMap, resolveIconName } from './icon-map.js';
 export { colors, BASE_COLOR_NAMES, HUE_NAMES } from './colors.js';
 export { parseSeedToScale } from './generate-scale.js';
 export { migrateThemeOverrides } from './migrate.js';
+export { prismaThemeStorage } from './storage.js';
 //# sourceMappingURL=index.js.map

package/dist/theme/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/theme/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/theme/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/theme/storage.d.ts

@@ -0,0 +1,86 @@
+import type { ThemeConfig } from './types.js';
+/**
+ * Adapter that persists a panel's theme overrides — the JSON blob
+ * written when a user edits theme settings via the `themeEditor()`
+ * plugin and reloaded on next boot.
+ *
+ * The shipped implementation is `prismaThemeStorage`, which writes to
+ * the `panelGlobal` row created by `@rudderjs/orm-prisma`. Apps on a
+ * different ORM, key-value store, or filesystem can implement the
+ * three methods themselves.
+ *
+ * Contract:
+ *
+ * - `load()` returns `null` when no overrides have been persisted yet
+ *   (fresh install). Throwing surfaces a configuration error to the
+ *   caller — pilotiq does not swallow.
+ * - `save(overrides)` writes the blob verbatim. The next `load()` must
+ *   return a deep-equal copy. Throwing surfaces to the route handler
+ *   as a 500.
+ * - `clear()` deletes the row. Tolerating "not found" is the adapter's
+ *   responsibility — `clear()` on an empty store is a no-op.
+ */
+export interface ThemeStorageAdapter {
+    load(): Promise<Partial<ThemeConfig> | null>;
+    save(overrides: Partial<ThemeConfig>): Promise<void>;
+    clear(): Promise<void>;
+}
+/**
+ * Minimal Prisma surface used by `prismaThemeStorage`. Narrow enough
+ * to keep the import surface decoupled from `PrismaClient`'s generated
+ * types — apps swap in any client whose `panelGlobal` delegate matches
+ * this shape.
+ */
+export interface PanelGlobalDelegate {
+    panelGlobal: {
+        findUnique(args: {
+            where: {
+                slug: string;
+            };
+        }): Promise<{
+            data: string | object | null;
+        } | null>;
+        upsert(args: {
+            where: {
+                slug: string;
+            };
+            update: {
+                data: string;
+            };
+            create: {
+                slug: string;
+                data: string;
+            };
+        }): Promise<unknown>;
+        delete(args: {
+            where: {
+                slug: string;
+            };
+        }): Promise<unknown>;
+    };
+}
+export interface PrismaThemeStorageOptions {
+    /** Row key written to `panelGlobal.slug`. Pass per-panel so multiple
+     *  panels in the same app don't clobber each other. Typically
+     *  `${panel.name}__theme`. */
+    slug: string;
+}
+/**
+ * Default storage adapter — writes JSON to the `panelGlobal` row keyed
+ * by `opts.slug`. The Prisma delegate is dependency-injected so consumers
+ * pick how to resolve it (e.g. `app.make('prisma')`, a direct import, a
+ * test stub).
+ *
+ * @example
+ * ```ts
+ * import { Pilotiq } from '@pilotiq/pilotiq'
+ * import { themeEditor, prismaThemeStorage } from '@pilotiq/pilotiq/plugins'
+ *
+ * const adminPanel = Pilotiq.make('Admin')
+ *   .use(themeEditor({
+ *     storage: prismaThemeStorage(prisma, { slug: 'admin__theme' }),
+ *   }))
+ * ```
+ */
+export declare function prismaThemeStorage(prisma: PanelGlobalDelegate, opts: PrismaThemeStorageOptions): ThemeStorageAdapter;
+//# sourceMappingURL=storage.d.ts.map

package/dist/theme/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/theme/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE;QACX,UAAU,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC,CAAA;QAC/F,MAAM,CAAC,IAAI,EAAE;YACX,KAAK,EAAG;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;YACxB,MAAM,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;YACxB,MAAM,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SACvC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACpB,MAAM,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAC5D,CAAA;CACF;AAED,MAAM,WAAW,yBAAyB;IACxC;;kCAE8B;IAC9B,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAI,yBAAyB,GAChC,mBAAmB,CAyBrB"}

package/dist/theme/storage.js

@@ -0,0 +1,52 @@
+/**
+ * Default storage adapter — writes JSON to the `panelGlobal` row keyed
+ * by `opts.slug`. The Prisma delegate is dependency-injected so consumers
+ * pick how to resolve it (e.g. `app.make('prisma')`, a direct import, a
+ * test stub).
+ *
+ * @example
+ * ```ts
+ * import { Pilotiq } from '@pilotiq/pilotiq'
+ * import { themeEditor, prismaThemeStorage } from '@pilotiq/pilotiq/plugins'
+ *
+ * const adminPanel = Pilotiq.make('Admin')
+ *   .use(themeEditor({
+ *     storage: prismaThemeStorage(prisma, { slug: 'admin__theme' }),
+ *   }))
+ * ```
+ */
+export function prismaThemeStorage(prisma, opts) {
+    const { slug } = opts;
+    return {
+        async load() {
+            const row = await prisma.panelGlobal.findUnique({ where: { slug } });
+            if (!row?.data)
+                return null;
+            const raw = typeof row.data === 'string' ? JSON.parse(row.data) : row.data;
+            return raw;
+        },
+        async save(overrides) {
+            const data = JSON.stringify(overrides);
+            await prisma.panelGlobal.upsert({
+                where: { slug },
+                update: { data },
+                create: { slug, data },
+            });
+        },
+        async clear() {
+            try {
+                await prisma.panelGlobal.delete({ where: { slug } });
+            }
+            catch (e) {
+                if (!isRecordNotFound(e))
+                    throw e;
+            }
+        },
+    };
+}
+function isRecordNotFound(e) {
+    return typeof e === 'object'
+        && e !== null
+        && e.code === 'P2025';
+}
+//# sourceMappingURL=storage.js.map

package/dist/theme/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/theme/storage.ts"],"names":[],"mappings":"AAsDA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA2B,EAC3B,IAAiC;IAEjC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IACrB,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YACpE,IAAI,CAAC,GAAG,EAAE,IAAI;gBAAE,OAAO,IAAI,CAAA;YAC3B,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;YAC1E,OAAO,GAA2B,CAAA;QACpC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACtC,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC9B,KAAK,EAAG,EAAE,IAAI,EAAE;gBAChB,MAAM,EAAE,EAAE,IAAI,EAAE;gBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACvB,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAA;YACtD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAU;IAClC,OAAO,OAAO,CAAC,KAAK,QAAQ;WACvB,CAAC,KAAK,IAAI;WACT,CAAuB,CAAC,IAAI,KAAK,OAAO,CAAA;AAChD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pilotiq/pilotiq",
-  "version": "0.21.0",
+  "version": "0.23.0",
   "description": "View-based admin panel for RudderJS",
   "license": "MIT",
   "repository": {

package/src/Pilotiq.perf.test.ts

@@ -0,0 +1,252 @@
+/**
+ * Phase 5 perf sweep — covers the four hot-path changes that landed
+ * 2026-05-22:
+ *
+ *  - 5b Per-user navigation-badge TTL cache (`Pilotiq.navigationBadgeTtl`)
+ *  - 5c Map-based slug lookup (`Pilotiq.findResource/findGlobal/findPage`)
+ *  - 5a Chunked import (`importFactory.runImport` honors `concurrency`)
+ *
+ *  5d (`policyGate`) is exercised indirectly by the existing routes /
+ *  authorization tests — its contract is identical to the prior
+ *  serial pair, just parallelized; no behavior change to assert here.
+ */
+import { describe, it } from 'node:test'
+import assert from 'node:assert/strict'
+
+import { Pilotiq } from './Pilotiq.js'
+import { Resource } from './Resource.js'
+import { Global } from './Global.js'
+import { Page } from './Page.js'
+import { runImport } from './actions/importFactory.js'
+
+// ─── Fixtures ─────────────────────────────────────────────────
+
+class Articles extends Resource {
+  static override slug = 'articles'
+  static override label = 'Articles'
+}
+class Comments extends Resource {
+  static override slug = 'comments'
+  static override label = 'Comments'
+}
+class Settings extends Global {
+  static override slug = 'settings'
+  static override label = 'Settings'
+}
+class Branding extends Global {
+  static override slug = 'branding'
+  static override label = 'Branding'
+}
+class Reports extends Page {
+  static override slug = 'reports'
+  static override label = 'Reports'
+}
+class Health extends Page {
+  static override slug = 'health'
+  static override label = 'Health'
+}
+
+// ─── 5c — Map-based slug lookup ───────────────────────────────
+
+describe('Pilotiq.find{Resource,Global,Page}() — Plan 5c', () => {
+  it('returns the matching class by slug', () => {
+    const p = Pilotiq.make('admin')
+      .resources([Articles, Comments])
+      .globals([Settings, Branding])
+      .pages([Reports, Health])
+    assert.equal(p.findResource('articles'), Articles)
+    assert.equal(p.findResource('comments'), Comments)
+    assert.equal(p.findGlobal('settings'),   Settings)
+    assert.equal(p.findGlobal('branding'),   Branding)
+    assert.equal(p.findPage('reports'),      Reports)
+    assert.equal(p.findPage('health'),       Health)
+  })
+
+  it('returns undefined for unknown slugs', () => {
+    const p = Pilotiq.make('admin').resources([Articles])
+    assert.equal(p.findResource('nope'), undefined)
+    assert.equal(p.findGlobal('nope'),   undefined)
+    assert.equal(p.findPage('nope'),     undefined)
+  })
+
+  it('invalidates the cache when .resources() is reassigned', () => {
+    const p = Pilotiq.make('admin').resources([Articles])
+    assert.equal(p.findResource('articles'), Articles)
+    assert.equal(p.findResource('comments'), undefined)
+    p.resources([Articles, Comments])
+    assert.equal(p.findResource('comments'), Comments)
+  })
+
+  it('invalidates the page cache when .pages() is reassigned', () => {
+    const p = Pilotiq.make('admin').pages([Reports])
+    assert.equal(p.findPage('reports'), Reports)
+    assert.equal(p.findPage('health'),  undefined)
+    p.pages([Reports, Health])
+    assert.equal(p.findPage('health'), Health)
+  })
+
+  it('invalidates the page cache when .dashboard()/.profile() auto-append', () => {
+    class Dash extends Page {
+      static override slug = 'dash'
+      static override label = 'Dashboard'
+    }
+    const p = Pilotiq.make('admin')
+    assert.equal(p.findPage('dash'), undefined)
+    p.dashboard(Dash)
+    assert.equal(p.findPage('dash'), Dash)
+  })
+})
+
+// ─── 5b — Navigation badge TTL cache ──────────────────────────
+
+describe('Pilotiq.navigationBadgeTtl() + resolveNavigationBadge() — Plan 5b', () => {
+  it('default TTL is 30s', () => {
+    const p = Pilotiq.make('admin')
+    assert.equal(p.getNavigationBadgeTtl(), 30_000)
+  })
+
+  it('navigationBadgeTtl(ms) overrides; clamps negatives to 0', () => {
+    const p = Pilotiq.make('admin').navigationBadgeTtl(5_000)
+    assert.equal(p.getNavigationBadgeTtl(), 5_000)
+    p.navigationBadgeTtl(-1)
+    assert.equal(p.getNavigationBadgeTtl(), 0)
+  })
+
+  it('navigationBadgeTtl(null) restores the default', () => {
+    const p = Pilotiq.make('admin').navigationBadgeTtl(1_000)
+    p.navigationBadgeTtl(null)
+    assert.equal(p.getNavigationBadgeTtl(), 30_000)
+  })
+
+  it('resolveNavigationBadge caches within TTL, busts on user change', async () => {
+    const p = Pilotiq.make('admin')
+    let calls = 0
+    const resolver = async () => { calls++; return String(calls) }
+
+    // First call: miss → resolver fires → returns '1'.
+    assert.equal(await p.resolveNavigationBadge('Articles', { id: 1 }, resolver), '1')
+    assert.equal(calls, 1)
+    // Same user + owner: hit → no new call → still '1'.
+    assert.equal(await p.resolveNavigationBadge('Articles', { id: 1 }, resolver), '1')
+    assert.equal(calls, 1)
+    // Different user: miss → resolver fires again.
+    assert.equal(await p.resolveNavigationBadge('Articles', { id: 2 }, resolver), '2')
+    assert.equal(calls, 2)
+    // Different owner, same user: separate cache slot.
+    assert.equal(await p.resolveNavigationBadge('Comments', { id: 1 }, resolver), '3')
+    assert.equal(calls, 3)
+  })
+
+  it('TTL of 0 disables caching entirely', async () => {
+    const p = Pilotiq.make('admin').navigationBadgeTtl(0)
+    let calls = 0
+    const resolver = async () => { calls++; return 'x' }
+    await p.resolveNavigationBadge('Articles', { id: 1 }, resolver)
+    await p.resolveNavigationBadge('Articles', { id: 1 }, resolver)
+    assert.equal(calls, 2)
+  })
+
+  it('caches undefined results (no need to keep re-resolving "no badge")', async () => {
+    const p = Pilotiq.make('admin')
+    let calls = 0
+    const resolver = async () => { calls++; return undefined }
+    assert.equal(await p.resolveNavigationBadge('Articles', null, resolver), undefined)
+    assert.equal(await p.resolveNavigationBadge('Articles', null, resolver), undefined)
+    assert.equal(calls, 1)
+  })
+
+  it('navigationBadgeTtl(ms) clears the cache', async () => {
+    const p = Pilotiq.make('admin')
+    let calls = 0
+    const resolver = async () => { calls++; return 'x' }
+    await p.resolveNavigationBadge('A', null, resolver)
+    assert.equal(calls, 1)
+    p.navigationBadgeTtl(60_000)
+    await p.resolveNavigationBadge('A', null, resolver)
+    assert.equal(calls, 2)
+  })
+
+  it('anonymous users share one cache slot', async () => {
+    const p = Pilotiq.make('admin')
+    let calls = 0
+    const resolver = async () => { calls++; return 'x' }
+    await p.resolveNavigationBadge('A', null,      resolver)
+    await p.resolveNavigationBadge('A', undefined, resolver)
+    assert.equal(calls, 1)
+  })
+
+  it('falls back to JSON.stringify when user has no .id', async () => {
+    const p = Pilotiq.make('admin')
+    let calls = 0
+    const resolver = async () => { calls++; return 'x' }
+    await p.resolveNavigationBadge('A', { role: 'editor' }, resolver)
+    await p.resolveNavigationBadge('A', { role: 'editor' }, resolver)
+    assert.equal(calls, 1) // same JSON shape → cache hit
+    await p.resolveNavigationBadge('A', { role: 'admin'  }, resolver)
+    assert.equal(calls, 2) // different JSON → miss
+  })
+})
+
+// ─── 5a — Chunked importFactory.runImport ─────────────────────
+
+describe('importFactory.runImport — Plan 5a chunking', () => {
+  it('runs rows in chunks of `concurrency` and aggregates counts', async () => {
+    const created: string[] = []
+    let maxInFlight = 0
+    let inFlight = 0
+    const M = {
+      async create(row: { id: string }) {
+        inFlight++; if (inFlight > maxInFlight) maxInFlight = inFlight
+        await new Promise(r => setTimeout(r, 5))
+        inFlight--
+        created.push(row.id)
+      },
+      // unused for create-mode tests but the type wants them present
+      query() { return { where() { return { paginate: async () => ({ data: [] }) } } } },
+      async update() {},
+    }
+    const rows = Array.from({ length: 25 }, (_, i) => ({ id: `r${i}` }))
+    const summary = await runImport(rows, M, 'create', { concurrency: 5 }, { request: undefined })
+    assert.equal(summary.created, 25)
+    assert.equal(summary.errors.length, 0)
+    // With concurrency=5 we should see at least 4 in-flight at peak.
+    assert.ok(maxInFlight >= 4, `expected >=4 concurrent, saw ${maxInFlight}`)
+    // Never exceed the cap.
+    assert.ok(maxInFlight <= 5, `expected <=5 concurrent, saw ${maxInFlight}`)
+  })
+
+  it('preserves original-row indices in error messages despite chunking', async () => {
+    const M = {
+      async create(row: { id: string }) {
+        if (row.id === 'r2') throw new Error('boom')
+      },
+      query() { return { where() { return { paginate: async () => ({ data: [] }) } } } },
+      async update() {},
+    }
+    const rows = [{ id: 'r0' }, { id: 'r1' }, { id: 'r2' }, { id: 'r3' }]
+    const summary = await runImport(rows, M, 'create', { concurrency: 4 }, { request: undefined })
+    assert.equal(summary.created, 3)
+    assert.equal(summary.skipped, 1)
+    assert.equal(summary.errors.length, 1)
+    assert.equal(summary.errors[0]?.row, 3) // 1-based, original index 2 → row 3
+    assert.match(summary.errors[0]?.message ?? '', /boom/)
+  })
+
+  it('defaults to concurrency 10 when unset', async () => {
+    let maxInFlight = 0
+    let inFlight = 0
+    const M = {
+      async create() {
+        inFlight++; if (inFlight > maxInFlight) maxInFlight = inFlight
+        await new Promise(r => setTimeout(r, 3))
+        inFlight--
+      },
+      query() { return { where() { return { paginate: async () => ({ data: [] }) } } } },
+      async update() {},
+    }
+    const rows = Array.from({ length: 30 }, () => ({}))
+    await runImport(rows, M, 'create', {}, { request: undefined })
+    assert.ok(maxInFlight <= 10, `expected <=10 concurrent, saw ${maxInFlight}`)
+    assert.ok(maxInFlight >= 5,  `expected >=5 concurrent under default, saw ${maxInFlight}`)
+  })
+})

package/src/Pilotiq.test.ts

@@ -62,6 +62,10 @@ function makeStubRouter(): Router & { _calls: Array<{ method: string; path: stri
     put:    (path: string) => noop(path),
     delete: (path: string) => noop(path),
     patch:  (path: string) => noop(path),
+    // `router.group(opts, fn)` runs `fn()` synchronously inside its
+    // scope. Stub mirrors that — `Pilotiq.guard()` middleware doesn't
+    // touch the stub, only `fn()` matters.
+    group:  (_opts: unknown, fn: () => void) => { fn() },
     _calls: calls,
   }
   return stub