@qwickapps/server 1.5.2 → 1.6.1

package/dist-ui-lib/src/api/clientBuilder.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Client Builder - Auto-generate typed API client from server manifest
+ *
+ * Fetches route manifest from server and builds dynamic API client with proper
+ * HTTP method handling, query parameters, and error handling.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export interface ClientManifest {
+    routes: Record<string, RouteManifestEntry>;
+    version: string;
+}
+export interface RouteManifestEntry {
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';
+    path: string;
+    auth: boolean;
+}
+/**
+ * Build typed API client from server manifest
+ *
+ * Fetches the manifest from /api/client-manifest and generates a nested
+ * client object with methods for each route.
+ *
+ * @param baseUrl - Base URL of the server (e.g., 'http://localhost:3000')
+ * @returns Promise resolving to the generated client
+ *
+ * @example
+ * ```typescript
+ * const client = await buildClientFromManifest<APIClient>('http://localhost:3000');
+ * const logs = await client.logs.query({ limit: 10 });
+ * ```
+ */
+export declare function buildClientFromManifest<T = any>(baseUrl: string): Promise<T>;

package/dist-ui-lib/{api → src/api}/controlPanelApi.d.ts

@@ -73,10 +73,14 @@ export interface LogSource {
     type: 'file' | 'api';
     available: boolean;
 }
+export type UserStatus = 'invited' | 'active' | 'suspended';
 export interface User {
     id: string;
     email: string;
     name?: string;
+    status: UserStatus;
+    invitation_token?: string;
+    invitation_expires_at?: string;
     created_at?: string;
     updated_at?: string;
     last_login?: string;
@@ -88,6 +92,26 @@ export interface UsersResponse {
     page: number;
     limit: number;
 }
+export interface InviteUserRequest {
+    email: string;
+    name?: string;
+    role?: string;
+    metadata?: Record<string, unknown>;
+    expiresInDays?: number;
+}
+export interface InvitationResponse {
+    user: User;
+    token: string;
+    inviteLink: string;
+    expiresAt: string;
+}
+export interface AcceptInvitationRequest {
+    token: string;
+}
+export interface AcceptInvitationResponse {
+    success: boolean;
+    user: User;
+}
 export interface Ban {
     id: string;
     user_id?: string;
@@ -101,6 +125,73 @@ export interface BansResponse {
     bans: Ban[];
     total: number;
 }
+export interface ApiKey {
+    id: string;
+    name: string;
+    key_prefix: string;
+    key_type: 'm2m' | 'pat';
+    scopes: string[];
+    last_used_at: string | null;
+    expires_at: string | null;
+    is_active: boolean;
+    created_at: string;
+    updated_at: string;
+}
+export interface ApiKeyWithPlaintext extends ApiKey {
+    key: string;
+}
+export interface ApiKeysResponse {
+    keys: ApiKey[];
+}
+export interface CreateApiKeyRequest {
+    name: string;
+    key_type: 'm2m' | 'pat';
+    scopes: string[];
+    expires_at?: string;
+}
+export interface UpdateApiKeyRequest {
+    name?: string;
+    scopes?: string[];
+    expires_at?: string;
+    is_active?: boolean;
+}
+export interface PluginScope {
+    name: string;
+    description: string;
+    category?: 'read' | 'write' | 'admin';
+}
+export interface PluginScopesGroup {
+    pluginId: string;
+    scopes: PluginScope[];
+}
+export interface AvailableScopesResponse {
+    scopes: PluginScopesGroup[];
+}
+export interface UsageLogEntry {
+    id: string;
+    key_id: string;
+    endpoint: string;
+    method: string;
+    status_code?: number;
+    ip_address?: string;
+    user_agent?: string;
+    timestamp: string;
+}
+export interface UsageStats {
+    totalCalls: number;
+    lastUsed: string | null;
+    callsByStatus: Record<string, number>;
+    callsByEndpoint: Record<string, number>;
+}
+export interface KeyUsageResponse {
+    keyId: string;
+    keyName: string;
+    totalCalls: number;
+    lastUsed: string | null;
+    callsByStatus: Record<string, number>;
+    callsByEndpoint: Record<string, number>;
+    logs: UsageLogEntry[];
+}
 export interface EntitlementDefinition {
     id: string;
     name: string;
@@ -365,12 +456,24 @@ export interface RateLimitConfigUpdateResponse {
     success: boolean;
     config: RateLimitConfig;
 }
+export interface PreferencesResponse {
+    user_id: string;
+    preferences: Record<string, unknown>;
+}
 declare class ControlPanelApi {
     private baseUrl;
+    private client;
+    private clientPromise;
     constructor(baseUrl?: string);
+    /**
+     * Ensure the API client is initialized.
+     * Lazy-loads the client on first use by fetching the manifest.
+     */
+    private ensureClient;
     /**
      * Set the base URL for API requests.
      * Call this when the control panel is mounted at a custom path.
+     * Invalidates the cached client since the manifest will be different.
      */
     setBaseUrl(baseUrl: string): void;
     /**
@@ -399,6 +502,9 @@ declare class ControlPanelApi {
         search?: string;
     }): Promise<UsersResponse>;
     getUserById(id: string): Promise<User>;
+    inviteUser(request: InviteUserRequest): Promise<InvitationResponse>;
+    acceptInvitation(token: string): Promise<AcceptInvitationResponse>;
+    getInvitations(): Promise<UsersResponse>;
     getBans(): Promise<BansResponse>;
     banUser(email: string, reason: string, expiresAt?: string): Promise<void>;
     unbanUser(email: string): Promise<void>;
@@ -466,6 +572,24 @@ declare class ControlPanelApi {
         success: boolean;
         message: string;
     }>;
+    getApiKeys(): Promise<ApiKeysResponse>;
+    createApiKey(request: CreateApiKeyRequest): Promise<ApiKeyWithPlaintext>;
+    getApiKey(keyId: string): Promise<ApiKey>;
+    updateApiKey(keyId: string, updates: UpdateApiKeyRequest): Promise<ApiKey>;
+    deleteApiKey(keyId: string): Promise<void>;
+    getAvailableScopes(): Promise<AvailableScopesResponse>;
+    getKeyUsage(keyId: string, _params?: {
+        limit?: number;
+        offset?: number;
+        since?: string;
+        until?: string;
+        endpoint?: string;
+        method?: string;
+        statusCode?: number;
+    }): Promise<KeyUsageResponse>;
+    getPreferences(): Promise<PreferencesResponse>;
+    updatePreferences(preferences: Record<string, unknown>): Promise<PreferencesResponse>;
+    deletePreferences(): Promise<void>;
 }
 export declare const api: ControlPanelApi;
 export {};

package/dist-ui-lib/src/api/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * QwickApps Control Panel API Client
+ *
+ * Auto-generated typed API client from server manifest.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export { buildClientFromManifest } from './clientBuilder.js';
+export type { ClientManifest, RouteManifestEntry } from './clientBuilder.js';
+export type { APIClient } from './types.js';
+export * from './controlPanelApi.js';

package/dist-ui-lib/src/api/types.d.ts

@@ -0,0 +1,313 @@
+/**
+ * API Client Type Definitions
+ *
+ * Type-safe API client interfaces for the auto-generated client.
+ * These types are manually maintained and should be updated when
+ * new plugins/routes are added.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import type { HealthResponse, InfoResponse, DiagnosticsResponse, ConfigResponse, LogsResponse, LogSource, UsersResponse, User, InviteUserRequest, InvitationResponse, BansResponse, ApiKeysResponse, ApiKey, CreateApiKeyRequest, UpdateApiKeyRequest, AvailableScopesResponse, KeyUsageResponse, EntitlementsStatus, UiContributionsResponse, PluginsResponse, AuthConfigStatus, RuntimeAuthConfig, UpdateAuthConfigRequest, TestProviderRequest, TestProviderResponse, NotificationsStatsResponse, NotificationsClientsResponse, RateLimitConfigUpdateRequest, RateLimitConfigUpdateResponse, PreferencesResponse } from './controlPanelApi.js';
+/**
+ * Type-safe API route manifest
+ *
+ * Manually maintained to provide IDE autocomplete and type checking.
+ * Update when new plugins/routes are added.
+ */
+export interface APIClientManifest {
+    routes: {
+        'config.query': {
+            method: 'GET';
+            path: '/api/config';
+            auth: true;
+        };
+        'core.health': {
+            method: 'GET';
+            path: '/api/health';
+            auth: false;
+        };
+        'core.info': {
+            method: 'GET';
+            path: '/api/info';
+            auth: false;
+        };
+        'core.diagnostics': {
+            method: 'GET';
+            path: '/api/diagnostics';
+            auth: false;
+        };
+        'core.uiContributions': {
+            method: 'GET';
+            path: '/api/ui-contributions';
+            auth: false;
+        };
+        'core.plugins': {
+            method: 'GET';
+            path: '/api/plugins';
+            auth: false;
+        };
+        'logs.query': {
+            method: 'GET';
+            path: '/api/logs';
+            auth: true;
+        };
+        'logs.sources': {
+            method: 'GET';
+            path: '/api/logs/sources';
+            auth: true;
+        };
+        'users.query': {
+            method: 'GET';
+            path: '/api/users';
+            auth: true;
+        };
+        'users.get': {
+            method: 'GET';
+            path: '/api/users/:id';
+            auth: true;
+        };
+        'users.invite': {
+            method: 'POST';
+            path: '/api/users/invite';
+            auth: true;
+        };
+        'bans.query': {
+            method: 'GET';
+            path: '/api/bans';
+            auth: true;
+        };
+        'apiKeys.query': {
+            method: 'GET';
+            path: '/api/api-keys';
+            auth: true;
+        };
+        'apiKeys.create': {
+            method: 'POST';
+            path: '/api/api-keys';
+            auth: true;
+        };
+        'apiKeys.get': {
+            method: 'GET';
+            path: '/api/api-keys/:id';
+            auth: true;
+        };
+        'apiKeys.update': {
+            method: 'PUT';
+            path: '/api/api-keys/:id';
+            auth: true;
+        };
+        'apiKeys.delete': {
+            method: 'DELETE';
+            path: '/api/api-keys/:id';
+            auth: true;
+        };
+        'apiKeys.scopes': {
+            method: 'GET';
+            path: '/api/api-keys/scopes';
+            auth: true;
+        };
+        'apiKeys.usage': {
+            method: 'GET';
+            path: '/api/api-keys/:id/usage';
+            auth: true;
+        };
+        'entitlements.query': {
+            method: 'GET';
+            path: '/api/entitlements';
+            auth: true;
+        };
+        'auth.status': {
+            method: 'GET';
+            path: '/api/auth/status';
+            auth: true;
+        };
+        'auth.config': {
+            method: 'GET';
+            path: '/api/auth/config';
+            auth: true;
+        };
+        'auth.update': {
+            method: 'PUT';
+            path: '/api/auth/config';
+            auth: true;
+        };
+        'auth.test': {
+            method: 'POST';
+            path: '/api/auth/test-provider';
+            auth: true;
+        };
+        'notifications.stats': {
+            method: 'GET';
+            path: '/api/notifications/stats';
+            auth: true;
+        };
+        'notifications.clients': {
+            method: 'GET';
+            path: '/api/notifications/clients';
+            auth: true;
+        };
+        'rateLimit.config': {
+            method: 'GET';
+            path: '/api/rate-limit/config';
+            auth: true;
+        };
+        'rateLimit.update': {
+            method: 'PUT';
+            path: '/api/rate-limit/config';
+            auth: true;
+        };
+        'preferences.query': {
+            method: 'GET';
+            path: '/api/preferences';
+            auth: true;
+        };
+    };
+}
+/**
+ * Query parameters for log queries
+ */
+export interface LogQueryParams {
+    level?: string;
+    source?: string;
+    limit?: number;
+    offset?: number;
+    startTime?: string;
+    endTime?: string;
+}
+/**
+ * Query parameters for user queries
+ */
+export interface UserQueryParams {
+    status?: string;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Query parameters for bans
+ */
+export interface BanQueryParams {
+    userId?: string;
+    active?: boolean;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Query parameters for API keys
+ */
+export interface ApiKeyQueryParams {
+    userId?: string;
+    active?: boolean;
+    limit?: number;
+    offset?: number;
+}
+/**
+ * Query parameters for entitlements
+ */
+export interface EntitlementQueryParams {
+    userId?: string;
+}
+/**
+ * Query parameters for preferences
+ */
+export interface PreferenceQueryParams {
+    userId?: string;
+}
+/**
+ * Generated API Client interface
+ *
+ * Provides type-safe access to all API routes.
+ * Auto-generated at runtime, types defined manually.
+ */
+export interface APIClient {
+    /** Configuration plugin routes */
+    config: {
+        /** Get server configuration */
+        query: () => Promise<ConfigResponse>;
+    };
+    /** Core system routes */
+    core: {
+        /** Health check endpoint */
+        health: () => Promise<HealthResponse>;
+        /** Server information */
+        info: () => Promise<InfoResponse>;
+        /** System diagnostics */
+        diagnostics: () => Promise<DiagnosticsResponse>;
+        /** UI contributions from plugins */
+        uiContributions: () => Promise<UiContributionsResponse>;
+        /** List plugins */
+        plugins: () => Promise<PluginsResponse>;
+    };
+    /** Logs plugin routes */
+    logs: {
+        /** Query logs */
+        query: (params?: LogQueryParams) => Promise<LogsResponse>;
+        /** Get log sources */
+        sources: () => Promise<LogSource[]>;
+    };
+    /** Users plugin routes */
+    users: {
+        /** Query users */
+        query: (params?: UserQueryParams) => Promise<UsersResponse>;
+        /** Get user by ID */
+        get: (id: string) => Promise<User>;
+        /** Invite new user */
+        invite: (data: InviteUserRequest) => Promise<InvitationResponse>;
+    };
+    /** Bans plugin routes */
+    bans: {
+        /** Query bans */
+        query: (params?: BanQueryParams) => Promise<BansResponse>;
+    };
+    /** API Keys plugin routes */
+    apiKeys: {
+        /** Query API keys */
+        query: (params?: ApiKeyQueryParams) => Promise<ApiKeysResponse>;
+        /** Create API key */
+        create: (data: CreateApiKeyRequest) => Promise<ApiKey>;
+        /** Get API key by ID */
+        get: (id: string) => Promise<ApiKey>;
+        /** Update API key */
+        update: (id: string, data: UpdateApiKeyRequest) => Promise<ApiKey>;
+        /** Delete API key */
+        delete: (id: string) => Promise<void>;
+        /** Get available scopes */
+        scopes: () => Promise<AvailableScopesResponse>;
+        /** Get key usage stats */
+        usage: (id: string) => Promise<KeyUsageResponse>;
+    };
+    /** Entitlements plugin routes */
+    entitlements: {
+        /** Query entitlements */
+        query: (params?: EntitlementQueryParams) => Promise<EntitlementsStatus>;
+    };
+    /** Auth plugin routes */
+    auth: {
+        /** Get auth status */
+        status: () => Promise<AuthConfigStatus>;
+        /** Get auth config */
+        config: () => Promise<RuntimeAuthConfig>;
+        /** Update auth config */
+        update: (data: UpdateAuthConfigRequest) => Promise<RuntimeAuthConfig>;
+        /** Test provider connection */
+        test: (data: TestProviderRequest) => Promise<TestProviderResponse>;
+    };
+    /** Notifications plugin routes */
+    notifications: {
+        /** Get notification stats */
+        stats: () => Promise<NotificationsStatsResponse>;
+        /** Get connected clients */
+        clients: () => Promise<NotificationsClientsResponse>;
+    };
+    /** Rate limit plugin routes */
+    rateLimit: {
+        /** Get rate limit config */
+        config: () => Promise<RateLimitConfigUpdateResponse>;
+        /** Update rate limit config */
+        update: (data: RateLimitConfigUpdateRequest) => Promise<RateLimitConfigUpdateResponse>;
+    };
+    /** Preferences plugin routes */
+    preferences: {
+        /** Query preferences */
+        query: (params?: PreferenceQueryParams) => Promise<PreferencesResponse>;
+    };
+}

package/dist-ui-lib/{components → src/components}/ControlPanelApp.d.ts

@@ -58,4 +58,5 @@ export interface ControlPanelAppProps {
     /** Custom routes to add (as Route elements) */
     children?: ReactNode;
 }
-export declare function ControlPanelApp({ productName, logo, footerContent, dashboardWidgets, widgetComponents, navigationItems, showBaseNavigation, hideBaseNavItems, showThemeSwitcher, showPaletteSwitcher, basePath, children, }: ControlPanelAppProps): import("react/jsx-runtime").JSX.Element;
+export declare function ControlPanelApp({ productName, logo, footerContent, dashboardWidgets, widgetComponents, navigationItems, showBaseNavigation, hideBaseNavItems, showThemeSwitcher, showPaletteSwitcher, basePath: _basePath, // Keep for backwards compatibility but unused (API always at /api)
+children, }: ControlPanelAppProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/AcceptInvitationPage.d.ts

@@ -0,0 +1,21 @@
+/**
+ * AcceptInvitationPage - User invitation acceptance form
+ *
+ * Allows invited users to set password and activate their account
+ */
+export interface AcceptInvitationPageProps {
+    /**
+     * Auto-generated API client from qwickapps-server
+     */
+    apiClient: any;
+    /**
+     * Callback invoked on successful invitation acceptance
+     */
+    onSuccess?: (user: any) => void;
+    /**
+     * Path to redirect to after successful acceptance
+     * @default '/login'
+     */
+    redirectTo?: string;
+}
+export declare function AcceptInvitationPage({ apiClient, onSuccess, redirectTo, }: AcceptInvitationPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/LoginPage.d.ts

@@ -0,0 +1,27 @@
+/**
+ * LoginPage - User login form component
+ *
+ * Provides email/password login with integration to auth provider
+ */
+export interface LoginPageProps {
+    /**
+     * Callback invoked on successful login
+     */
+    onSuccess?: (user: any) => void;
+    /**
+     * Path to redirect to after successful login
+     * @default '/dashboard'
+     */
+    redirectTo?: string;
+    /**
+     * Whether to show signup link
+     * @default true
+     */
+    showSignupLink?: boolean;
+    /**
+     * Whether to show password reset link
+     * @default true
+     */
+    showPasswordResetLink?: boolean;
+}
+export declare function LoginPage({ onSuccess, redirectTo, showSignupLink, showPasswordResetLink, }: LoginPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/PasswordResetConfirmPage.d.ts

@@ -0,0 +1,17 @@
+/**
+ * PasswordResetConfirmPage - Password reset confirmation form
+ *
+ * Allows users to set a new password using reset token
+ */
+export interface PasswordResetConfirmPageProps {
+    /**
+     * Callback invoked on successful password reset
+     */
+    onSuccess?: () => void;
+    /**
+     * Path to redirect to after successful reset
+     * @default '/login'
+     */
+    redirectTo?: string;
+}
+export declare function PasswordResetConfirmPage({}: PasswordResetConfirmPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/PasswordResetPage.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PasswordResetPage - Password reset request form
+ *
+ * Allows users to request a password reset email
+ */
+export interface PasswordResetPageProps {
+    /**
+     * Callback invoked on successful password reset request
+     */
+    onSuccess?: () => void;
+}
+export declare function PasswordResetPage({ onSuccess }: PasswordResetPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/SignupPage.d.ts

@@ -0,0 +1,27 @@
+/**
+ * SignupPage - User registration form component
+ *
+ * Provides name, email, password registration with validation
+ */
+export interface SignupPageProps {
+    /**
+     * Callback invoked on successful registration
+     */
+    onSuccess?: (user: any) => void;
+    /**
+     * Path to redirect to after successful registration
+     * @default '/verify-email'
+     */
+    redirectTo?: string;
+    /**
+     * Whether email verification is required
+     * @default true
+     */
+    requireEmailVerification?: boolean;
+    /**
+     * Whether to show login link
+     * @default true
+     */
+    showLoginLink?: boolean;
+}
+export declare function SignupPage({ onSuccess, redirectTo, showLoginLink, }: SignupPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/VerifyEmailPage.d.ts

@@ -0,0 +1,12 @@
+/**
+ * VerifyEmailPage - Email verification page
+ *
+ * Displays instructions for email verification
+ */
+export interface VerifyEmailPageProps {
+    /**
+     * User's email address
+     */
+    email?: string;
+}
+export declare function VerifyEmailPage({ email }: VerifyEmailPageProps): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/components/auth/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Authentication page components
+ *
+ * Reusable auth pages for frontend applications
+ */
+export { LoginPage } from './LoginPage';
+export type { LoginPageProps } from './LoginPage';
+export { SignupPage } from './SignupPage';
+export type { SignupPageProps } from './SignupPage';
+export { AcceptInvitationPage } from './AcceptInvitationPage';
+export type { AcceptInvitationPageProps } from './AcceptInvitationPage';
+export { PasswordResetPage } from './PasswordResetPage';
+export type { PasswordResetPageProps } from './PasswordResetPage';
+export { PasswordResetConfirmPage } from './PasswordResetConfirmPage';
+export type { PasswordResetConfirmPageProps } from './PasswordResetConfirmPage';
+export { VerifyEmailPage } from './VerifyEmailPage';
+export type { VerifyEmailPageProps } from './VerifyEmailPage';
+export { AuthLayout, AuthError } from './shared';
+export type { AuthLayoutProps, AuthErrorProps } from './shared';

package/dist-ui-lib/src/components/auth/shared/AuthError.d.ts

@@ -0,0 +1,9 @@
+/**
+ * AuthError - Error message display component for auth pages
+ *
+ * Displays error messages with consistent styling
+ */
+export interface AuthErrorProps {
+    message: string;
+}
+export declare function AuthError({ message }: AuthErrorProps): import("react/jsx-runtime").JSX.Element;