@qwickapps/server 1.7.0 → 1.7.2

package/dist-ui-lib/src/api/controlPanelApi.d.ts

@@ -245,9 +245,18 @@ export interface WidgetContribution {
     title: string;
     /** Component name to render (matched by frontend widget registry) */
     component: string;
+    /**
+     * Widget type/category - determines which page(s) can display this widget
+     * - 'status': System health, service status, monitoring metrics (Dashboard)
+     * - 'maintenance': Operational tasks like seeding, service control, config (Maintenance page)
+     * - 'analytics': Charts, graphs, usage metrics (Dashboard or Analytics page)
+     * - 'monitoring': Performance, logs, real-time data (Monitoring page)
+     * - 'custom': Custom widgets for specific use cases
+     */
+    type: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
     /** Priority for ordering (lower = first, default: 100) */
     priority?: number;
-    /** Whether this widget is shown by default */
+    /** Whether this widget is shown by default on its designated page */
     showByDefault?: boolean;
     pluginId: string;
 }

package/dist-ui-lib/src/dashboard/PluginWidgetRenderer.d.ts

@@ -7,6 +7,8 @@
  * Copyright (c) 2025 QwickApps.com. All rights reserved.
  */
 interface PluginWidgetRendererProps {
+    /** Filter widgets by type (e.g., 'status' for dashboard, 'maintenance' for maintenance page) */
+    widgetType?: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
     /** Only show widgets marked as showByDefault (default: true) */
     defaultOnly?: boolean;
     /** Additional widget IDs to show (beyond showByDefault) */
@@ -15,5 +17,5 @@ interface PluginWidgetRendererProps {
 /**
  * Renders widgets from plugins that have registered them via the server API
  */
-export declare function PluginWidgetRenderer({ defaultOnly, additionalWidgetIds, }: PluginWidgetRendererProps): import("react/jsx-runtime").JSX.Element | null;
+export declare function PluginWidgetRenderer({ widgetType, defaultOnly, additionalWidgetIds, }: PluginWidgetRendererProps): import("react/jsx-runtime").JSX.Element | null;
 export {};

package/dist-ui-lib/src/dashboard/widgets/CacheMaintenanceWidget.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Cache Maintenance Widget
+ *
+ * Provides cache management operations:
+ * - View cache statistics
+ * - Clear cache (flush all keys)
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function CacheMaintenanceWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/DatabaseOpsWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Database Operations Widget
+ *
+ * Provides database backup, restore, and maintenance operations.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function DatabaseOpsWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/EnvironmentConfigWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Environment Configuration Widget
+ *
+ * Displays and allows editing environment variables.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function EnvironmentConfigWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/LogsMaintenanceWidget.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Logs Maintenance Widget
+ *
+ * Provides log management operations:
+ * - View log statistics
+ * - Clear log files
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function LogsMaintenanceWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/SeedManagementWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Seed Management Widget
+ *
+ * Displays available seed scripts and allows executing them.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function SeedManagementWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/ServiceControlWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Service Control Widget
+ *
+ * Provides controls for starting, stopping, and restarting services.
+ * Part of the maintenance plugin.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export declare function ServiceControlWidget(): import("react/jsx-runtime").JSX.Element;

package/dist-ui-lib/src/dashboard/widgets/index.d.ts

@@ -9,3 +9,9 @@ export { AuthStatusWidget } from './AuthStatusWidget';
 export { NotificationsStatsWidget } from './NotificationsStatsWidget';
 export { CMSStatusWidget } from './CMSStatusWidget';
 export { CMSMaintenanceWidget } from './CMSMaintenanceWidget';
+export { SeedManagementWidget } from './SeedManagementWidget';
+export { ServiceControlWidget } from './ServiceControlWidget';
+export { EnvironmentConfigWidget } from './EnvironmentConfigWidget';
+export { DatabaseOpsWidget } from './DatabaseOpsWidget';
+export { LogsMaintenanceWidget } from './LogsMaintenanceWidget';
+export { CacheMaintenanceWidget } from './CacheMaintenanceWidget';

package/package.json

@@ -1,21 +1,24 @@
 {
   "name": "@qwickapps/server",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "Plugin-based application server framework for building websites, APIs, admin dashboards, and full-stack products",
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",
-      "import": "./dist/src/index.js"
+      "import": "./dist/src/index.js",
+      "require": "./dist/src/index.js"
     },
     "./plugins": {
       "types": "./dist/src/plugins/index.d.ts",
-      "import": "./dist/src/plugins/index.js"
+      "import": "./dist/src/plugins/index.js",
+      "require": "./dist/src/plugins/index.js"
     },
     "./ui": {
       "types": "./dist-ui-lib/src/components/index.d.ts",
-      "import": "./dist-ui-lib/index.js"
+      "import": "./dist-ui-lib/index.js",
+      "require": "./dist-ui-lib/index.js"
     }
   },
   "files": [
@@ -41,7 +44,9 @@
     "test:e2e": "playwright test",
     "test:e2e:ui": "playwright test --ui",
     "test:e2e:headed": "playwright test --headed",
-    "demo": "npx tsx examples/demo-server.ts",
+    "demo": "npm run build:server && pnpm tsx examples/demo-server.ts",
+    "demo:gateway": "npm run build:server && pnpm tsx examples/demo-gateway.ts",
+    "demo:all": "npm run build:server && pnpm tsx examples/demo-all.ts",
     "type-check": "tsc --noEmit",
     "type-check:ui": "cd ui && tsc --noEmit",
     "validate:clean-install": "./qa/clean-install/validate.sh",
@@ -63,7 +68,7 @@
     "@mui/material": "^7.2.0",
     "@mui/x-data-grid": "^7.29.12",
     "@playwright/test": "^1.57.0",
-    "@qwickapps/auth-client": "^1.0.0",
+    "@qwickapps/auth-client": "^1.1.0",
     "@qwickapps/react-framework": "^1.5.5",
     "@testing-library/jest-dom": "^6.0.0",
     "@testing-library/react": "^14.0.0",
@@ -81,6 +86,7 @@
     "ioredis": "^5.4.0",
     "jsdom": "^25.0.0",
     "pg": "^8.13.0",
+    "pg-mem": "^3.0.5",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-router-dom": "^6.30.1",

package/src/core/control-panel.ts

@@ -41,10 +41,12 @@ import { createCorePlugin } from '../plugins/core/index.js';
 // Get the package root directory for serving UI assets
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-// Handle both src/core and dist/core paths - go up to find package root
-const packageRoot = __dirname.includes('/src/')
-  ? join(__dirname, '..', '..')
-  : join(__dirname, '..', '..');
+// Handle both src/core and dist/src/core paths - go up to find package root
+// - src/core/control-panel.ts → go up 2 levels to package root
+// - dist/src/core/control-panel.js → go up 3 levels to package root
+const packageRoot = __dirname.includes('/dist/src/')
+  ? join(__dirname, '..', '..', '..') // dist/src/core → package root (3 levels)
+  : join(__dirname, '..', '..'); // src/core → package root (2 levels)
 const uiDistPath = join(packageRoot, 'dist-ui');
 
 // Read @qwickapps/server package version

package/src/core/gateway.ts

@@ -37,8 +37,31 @@ import { fileURLToPath } from 'url';
 // Get QwickApps Server version from package.json
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
-const serverPackageJson = JSON.parse(readFileSync(join(__dirname, '..', '..', 'package.json'), 'utf-8'));
-const QWICKAPPS_SERVER_VERSION = serverPackageJson.version || '1.0.0';
+
+// Find package.json by walking up directories
+// Recommended approach for libraries that work in both source and compiled contexts
+function findPackageJson(): string {
+  let currentDir = __dirname;
+  // Walk up max 5 levels looking for the correct package.json
+  for (let i = 0; i < 5; i++) {
+    try {
+      const packagePath = join(currentDir, 'package.json');
+      if (existsSync(packagePath)) {
+        const pkg = JSON.parse(readFileSync(packagePath, 'utf-8'));
+        // Verify it's the right package
+        if (pkg.name === '@qwickapps/server') {
+          return pkg.version || '1.0.0';
+        }
+      }
+    } catch {
+      // Continue searching
+    }
+    currentDir = join(currentDir, '..');
+  }
+  return '1.0.0';
+}
+
+const QWICKAPPS_SERVER_VERSION = findPackageJson();
 
 /**
  * Maintenance mode configuration for a mounted app

package/src/core/plugin-registry.ts

@@ -185,7 +185,7 @@ export interface PageContribution {
 }
 
 /**
- * Widget contribution for dashboards
+ * Widget contribution for dashboards and pages
  */
 export interface WidgetContribution {
   /** Unique ID for this widget */
@@ -194,9 +194,22 @@ export interface WidgetContribution {
   title: string;
   /** Component name to render (matched by frontend widget registry) */
   component: string;
+  /**
+   * Widget type/category - determines which page(s) can display this widget
+   * - 'status': System health, service status, monitoring metrics (Dashboard)
+   * - 'maintenance': Operational tasks like seeding, service control, config (Maintenance page)
+   * - 'analytics': Charts, graphs, usage metrics (Dashboard or Analytics page)
+   * - 'monitoring': Performance, logs, real-time data (Monitoring page)
+   * - 'custom': Custom widgets for specific use cases
+   */
+  type: 'status' | 'maintenance' | 'analytics' | 'monitoring' | 'custom';
   /** Priority for ordering (lower = first, default: 100) */
   priority?: number;
-  /** Whether this widget is shown by default (default: false) */
+  /**
+   * Whether this widget is shown by default on its page (default: false)
+   * true = widget appears by default in the initial layout
+   * false = widget is available but admin must add it manually
+   */
   showByDefault?: boolean;
   /** Default size */
   defaultSize?: { width: number; height: number };

package/src/index.ts

@@ -116,6 +116,7 @@ export {
   linkUserIdentifiers,
   findOrCreateUser,
   postgresUserStore,
+  inMemoryUserStore,
   // Bans plugin (separate from Users, depends on Users)
   createBansPlugin,
   getBanStore,
@@ -126,6 +127,7 @@ export {
   unbanUser,
   listActiveBans,
   postgresBanStore,
+  inMemoryBanStore,
   // API Keys plugin (M2M authentication, depends on Users)
   createApiKeysPlugin,
   getApiKeysStore,
@@ -158,6 +160,21 @@ export {
   requireAnyEntitlement,
   requireAllEntitlements,
   postgresEntitlementSource,
+  inMemoryEntitlementSource,
+  // Preferences plugin
+  createPreferencesPlugin,
+  getPreferencesStore,
+  getPreferences,
+  updatePreferences,
+  deletePreferences,
+  getDefaultPreferences,
+  postgresPreferencesStore,
+  deepMerge,
+  // Tenants plugin (multi-tenant data isolation, depends on Users)
+  createTenantsPlugin,
+  getTenantStore,
+  postgresTenantStore,
+  inMemoryTenantStore,
   // Rate Limit plugin
   createRateLimitPlugin,
   createRateLimitPluginFromEnv,
@@ -276,6 +293,14 @@ export {
   getActivityLog,
   postgresParentalStore,
   kidsAdapter,
+  // Notifications plugin
+  createNotificationsPlugin,
+  NotificationsManager,
+  getNotificationsManager,
+  hasNotificationsManager,
+  broadcastToDevice,
+  broadcastToUser,
+  broadcastToAll,
   // QwickBrain plugin
   createQwickBrainPlugin,
   getConnectionStatus,
@@ -355,6 +380,26 @@ export type {
   UserEntitlement,
   CachedEntitlements,
   EntitlementStats,
+  // Preferences plugin types
+  PreferencesPluginConfig,
+  PreferencesStore,
+  UserPreferences,
+  PostgresPreferencesStoreConfig,
+  PreferencesApiConfig,
+  // Tenants plugin types
+  TenantsPluginConfig,
+  TenantStore,
+  TenantType,
+  Tenant,
+  CreateTenantInput,
+  UpdateTenantInput,
+  TenantSearchParams,
+  TenantListResponse,
+  TenantMembership,
+  CreateTenantMembershipInput,
+  UpdateTenantMembershipInput,
+  TenantWithMembership,
+  PostgresTenantStoreConfig,
   // Rate Limit plugin types
   RateLimitPluginConfig,
   RateLimitEnvPluginOptions,
@@ -445,6 +490,14 @@ export type {
   ParentalApiConfig,
   PostgresParentalStoreConfig,
   KidsAdapterConfig,
+  // Notifications plugin types
+  NotificationsPluginConfig,
+  SSEClient,
+  NotifyPayload,
+  SSEEvent,
+  NotificationsStats,
+  ConnectionHealth,
+  NotificationsManagerInterface,
   // QwickBrain plugin types
   QwickBrainPluginConfig,
   MCPToolDefinition,

package/src/plugins/api-keys/api-keys-plugin.ts

@@ -23,22 +23,25 @@ import {
   CreateApiKeySchema,
   UpdateApiKeySchema,
 } from './types.js';
+import { hasPostgres, getPostgres } from '../postgres-plugin.js';
+import { postgresApiKeyStore } from './stores/index.js';
 
 // Store instance for helper access
 let currentStore: ApiKeyStore | null = null;
 
 /**
- * Create the API Keys plugin
+ * Create the API Keys plugin with smart defaults
+ *
+ * Config is optional - plugin will use defaults and get dependencies from registry.
+ * Gracefully handles missing dependencies with clear log messages.
  */
-export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
-  const debug = config.debug || false;
-  // Framework automatically prefixes routes with plugin slug, so use root path
-  const apiPrefix = config.api?.prefix || '/';
-  const apiEnabled = config.api?.enabled !== false;
-
-  function log(message: string, data?: Record<string, unknown>) {
-    if (debug) {
-      console.log(`[ApiKeysPlugin] ${message}`, data || '');
+export function createApiKeysPlugin(config: Partial<ApiKeysPluginConfig> = {}): Plugin {
+  function log(message: string, data?: Record<string, unknown>, isError = false) {
+    const prefix = '[ApiKeysPlugin]';
+    if (isError) {
+      console.error(`${prefix} ${message}`, data || '');
+    } else if (config.debug) {
+      console.log(`${prefix} ${message}`, data || '');
     }
   }
 
@@ -48,15 +51,56 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
     version: '1.0.0',
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
-      log('Starting API keys plugin');
+      const logger = registry.getLogger('api-keys');
 
       // Check for users plugin dependency
       if (!registry.hasPlugin('users')) {
-        throw new Error('API Keys plugin requires Users plugin to be loaded first');
+        logger.warn('Users plugin not loaded! API Keys plugin disabled.');
+        registry.registerHealthCheck({
+          name: 'api-keys-store',
+          type: 'custom',
+          check: async () => ({
+            healthy: false,
+            details: {
+              error: 'Users plugin not available',
+              state: 'disabled',
+            },
+          }),
+        });
+        return;
       }
 
+      // Check for postgres in registry
+      if (!hasPostgres()) {
+        logger.warn('No Database! API Keys plugin disabled.');
+        registry.registerHealthCheck({
+          name: 'api-keys-store',
+          type: 'custom',
+          check: async () => ({
+            healthy: false,
+            details: {
+              error: 'PostgreSQL not available',
+              state: 'disabled',
+            },
+          }),
+        });
+        return;
+      }
+
+      // Smart defaults - get dependencies from registry
+      const store = config.store ?? postgresApiKeyStore({
+        pool: () => getPostgres().getPool(),
+        autoCreateTables: true,
+      });
+
+      const debug = config.debug ?? false;
+      const apiPrefix = config.api?.prefix ?? '/api-keys';
+      const apiEnabled = config.api?.enabled ?? true;
+
+      log('Starting API keys plugin');
+
       // Initialize the store (creates tables and RLS policies if needed)
-      await config.store.initialize();
+      await store.initialize();
       log('API keys store initialized');
 
       // Initialize optional Phase 2 stores
@@ -71,7 +115,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
       }
 
       // Store reference for helper access
-      currentStore = config.store;
+      currentStore = store;
 
       // Register health check
       registry.registerHealthCheck({
@@ -117,7 +161,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
               };
 
               // Create the API key
-              const apiKey = await config.store.create(params);
+              const apiKey = await store.create(params);
 
               // Return the key with plaintext (ONLY time plaintext is accessible)
               res.status(201).json({
@@ -152,7 +196,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
                 return res.status(401).json({ error: 'Authentication required' });
               }
 
-              const keys = await config.store.list(userId);
+              const keys = await store.list(userId);
 
               // Remove sensitive fields from response
               const sanitized = keys.map(key => ({
@@ -191,7 +235,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
               }
 
               const { id } = req.params;
-              const key = await config.store.get(userId, id);
+              const key = await store.get(userId, id);
 
               if (!key) {
                 return res.status(404).json({ error: 'API key not found' });
@@ -244,7 +288,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
               const { id } = req.params;
               const params: UpdateApiKeyParams = validation.data;
 
-              const updated = await config.store.update(userId, id, params);
+              const updated = await store.update(userId, id, params);
 
               if (!updated) {
                 return res.status(404).json({ error: 'API key not found' });
@@ -287,7 +331,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
               }
 
               const { id } = req.params;
-              const deleted = await config.store.delete(userId, id);
+              const deleted = await store.delete(userId, id);
 
               if (!deleted) {
                 return res.status(404).json({ error: 'API key not found' });
@@ -357,7 +401,7 @@ export function createApiKeysPlugin(config: ApiKeysPluginConfig): Plugin {
                 const { id: keyId } = req.params;
 
                 // Verify key belongs to user
-                const key = await config.store.get(userId, keyId);
+                const key = await store.get(userId, keyId);
                 if (!key) {
                   return res.status(404).json({ error: 'API key not found' });
                 }

package/src/plugins/api-keys/index.ts

@@ -48,8 +48,5 @@ export { postgresApiKeyStore } from './stores/index.js';
 // Middleware
 export { bearerTokenAuth } from './middleware/index.js';
 
-// UI Components
-export { ApiKeysStatusWidget } from './ApiKeysStatusWidget.js';
-export type { ApiKeysStatusWidgetProps } from './ApiKeysStatusWidget.js';
-export { ApiKeysManagementPage } from './ApiKeysManagementPage.js';
-export type { ApiKeysManagementPageProps } from './ApiKeysManagementPage.js';
+// UI Components are exported from main package index (@qwickapps/server)
+// Do NOT export here to avoid loading UI dependencies when importing plugins

package/src/plugins/api-keys/stores/postgres-store.ts

@@ -266,6 +266,36 @@ export function postgresApiKeyStore(config: PostgresApiKeyStoreConfig): ApiKeySt
         CREATE INDEX IF NOT EXISTS idx_${tableName}_key_hash ON ${tableFullName}(key_hash);
       `);
 
+      // Migration: Add user_id column if it doesn't exist (for existing installations)
+      await pool.query(`
+        DO $$
+        DECLARE
+          row_count INTEGER;
+        BEGIN
+          IF NOT EXISTS (
+            SELECT 1 FROM information_schema.columns
+            WHERE table_schema = '${schema}'
+            AND table_name = '${tableName}'
+            AND column_name = 'user_id'
+          ) THEN
+            -- Check if table has data
+            EXECUTE 'SELECT COUNT(*) FROM ${tableFullName}' INTO row_count;
+
+            IF row_count > 0 THEN
+              -- If table has data, cannot add NOT NULL column
+              -- This requires manual migration or data cleanup
+              RAISE EXCEPTION 'Cannot add user_id column: table ${tableFullName} contains % rows. Please migrate data or clear the table first.', row_count;
+            ELSE
+              -- Table is empty, safe to add NOT NULL column
+              ALTER TABLE ${tableFullName}
+              ADD COLUMN user_id UUID NOT NULL REFERENCES "public"."users"(id) ON DELETE CASCADE;
+
+              CREATE INDEX IF NOT EXISTS idx_${tableName}_user_id ON ${tableFullName}(user_id);
+            END IF;
+          END IF;
+        END $$;
+      `);
+
       // Enable RLS if configured
       if (enableRLS) {
         await pool.query(`

package/src/plugins/api-keys/types.ts

@@ -230,17 +230,23 @@ export interface ApiKeysApiConfig {
 
 /**
  * API keys plugin configuration
+ *
+ * All properties are optional - plugin will use smart defaults:
+ * - store: Postgres API key store using registry's postgres instance
+ * - api.prefix: '/api-keys'
+ * - api.enabled: true
+ * - debug: false
  */
 export interface ApiKeysPluginConfig {
-  /** API key storage backend */
-  store: ApiKeyStore;
+  /** API key storage backend (default: postgres API key store from registry) */
+  store?: ApiKeyStore;
   /** Plugin scope storage backend (optional, for Phase 2) */
   scopeStore?: import('./stores/plugin-scope-store.js').PluginScopeStore;
   /** Usage log storage backend (optional, for Phase 2) */
   usageStore?: import('./stores/usage-log-store.js').UsageLogStore;
   /** API configuration */
   api?: ApiKeysApiConfig;
-  /** Enable debug logging */
+  /** Enable debug logging (default: false) */
   debug?: boolean;
 }
 

package/src/plugins/auth/auth-plugin.ts

@@ -42,6 +42,7 @@ export function createAuthPlugin(config: AuthPluginConfig): Plugin {
 
     async onStart(_pluginConfig: PluginConfig, registry: PluginRegistry): Promise<void> {
       const app = registry.getApp();
+      const router = registry.getRouter();
 
       // Store adapters for helper access
       currentAdapter = config.adapter;
@@ -72,8 +73,9 @@ export function createAuthPlugin(config: AuthPluginConfig): Plugin {
         }
       }
 
-      // Add the auth checking middleware
-      app.use(createAuthMiddleware());
+      // Add the auth checking middleware to router (not app)
+      // This ensures it processes requests to /api/* routes
+      router.use(createAuthMiddleware());
 
       // Register auth status route
       registry.addRoute({

package/src/plugins/auth/env-config.ts

@@ -790,6 +790,7 @@ export function registerAuthConfigRoutes(registry: PluginRegistry): void {
     id: 'auth-status',
     title: 'Authentication',
     component: 'AuthStatusWidget',
+    type: 'status',
     priority: 40, // Show before integrations
     showByDefault: true,
     pluginId: 'auth',

package/src/plugins/auth/index.ts

@@ -65,8 +65,6 @@ export { basicAdapter } from './adapters/basic-adapter.js';
 export { supabaseAdapter } from './adapters/supabase-adapter.js';
 export { supertokensAdapter } from './adapters/supertokens-adapter.js';
 
-// UI Components
-export { AuthStatusWidget } from './AuthStatusWidget.js';
-export type { AuthStatusWidgetProps } from './AuthStatusWidget.js';
-export { AuthManagementPage } from './AuthManagementPage.js';
-export type { AuthManagementPageProps } from './AuthManagementPage.js';
+// UI Components are exported from main package index (@qwickapps/server)
+// Do NOT export here to avoid loading UI dependencies when importing plugins
+