@rsc-kit/press 0.0.0-stage → 0.30.43

package/README.md

@@ -1,3 +1,118 @@
-# Temporary Holding Version
+# @rsc-kit/press
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Admin panels, public forms and pages built from blocks for [rsc-kit](https://rsc-kit.dev). You describe each resource once: its table, its form and where its rows come from. The package renders the list, create and edit pages for every resource from that, and a theme draws them. shadcn/ui is the theme that ships.
+
+| Import | What it has |
+| --- | --- |
+| `@rsc-kit/press` | `defineResource`, `memorySource`, `perTenant`, `definePlugin`, `defineBlock`, `Blocks`, and the `Storage` an upload field writes through. Nothing here draws. |
+| `@rsc-kit/press/admin` | `definePanel`, the url schemas its routes export, and the `AdminTheme` contract |
+| `@rsc-kit/press/forms` | `defineForm`: a contact form, a sign-up or a survey from a Standard Schema, and the `FormsTheme` contract |
+| `@rsc-kit/press/pages` | `definePages`: landing pages an editor builds in the panel from the app's blocks, served by one catch-all route |
+| `@rsc-kit/press/shadcn` | `shadcn`, the theme that draws them |
+| `@rsc-kit/press/signing` | `verifyPluginRequest`, for an installable plugin's server |
+
+```ts
+// src/admin/resources/products.ts
+import * as z from 'zod'
+import { defineResource, memorySource } from '@rsc-kit/press'
+
+const form = z.object({
+  name: z.string().min(2),
+  price: z.number().positive(),
+  status: z.enum(['draft', 'active', 'archived']),
+  featured: z.boolean().default(false),
+})
+
+export const products = defineResource<Product>()({
+  name: 'products',
+  key: 'id',
+  title: 'name',
+  source: memorySource<Product, z.infer<typeof form>>(seed, 'id', (id, values) => ({ id, ...values })),
+  table: (col) => [col.text('name').searchable().sortable(), col.money('price').sortable(), col.badge('status')],
+  filters: ['status'],
+  form,
+})
+```
+
+```ts
+// src/admin/panel.ts
+import { definePanel } from '@rsc-kit/press/admin'
+import { shadcn } from '@rsc-kit/press/shadcn'
+import { products } from './resources/products'
+
+export default definePanel({
+  path: '/admin',
+  theme: shadcn,
+  resources: [products],
+  authorize: async () => (await currentUser())?.isAdmin === true,
+})
+```
+
+The form is any Standard Schema - zod, valibot, arktype, Effect Schema - so the app uses the validator it already has. That one schema validates every save on the server, and decides which fields the form shows when it describes itself as JSON Schema (zod 4.2+ does); with any other, list the fields in `fields`. A refused save shows each error under its field and keeps what was typed.
+
+## Mounting it
+
+The engine finds routes, url schemas and sections by their files, so the panel is mounted with seven small route files:
+
+```ts
+// src/app/admin/middleware.ts
+export default panel.middleware
+// src/app/admin/layout.tsx
+export default panel.Layout
+// src/app/admin/page.tsx
+export default panel.Dashboard
+
+// src/app/admin/[resource]/page.tsx
+export const params = resourceParams
+export const searchParams = listSearch
+export default panel.Index
+// src/app/admin/[resource]/admin-table.section.tsx
+export default panel.Table
+
+// src/app/admin/[resource]/new/page.tsx
+export const params = resourceParams
+export default panel.Create
+// src/app/admin/[resource]/[id]/page.tsx
+export const params = recordParams
+export default panel.Edit
+```
+
+Each file also imports `panel`, and imports `resourceParams`, `recordParams` and `listSearch` from `@rsc-kit/press/admin`.
+
+## What you get
+
+- **Search and filters** are a GET form on the list page. The table stays on screen while a query runs.
+- **Sorting and paging** are held in the url, so a view can be bookmarked or shared.
+- **Delete** refreshes only the table (`admin-table`). The search box keeps what was typed in it.
+- **`authorize`** runs in the middleware, which answers a refusal with a real 404 before anything is sent. It runs again on every page and on every save and delete, because an action can be called without the page that rendered it.
+- **Every panel page is rendered per request.** The build stores each page's skeleton and never runs `authorize` or a data source.
+
+## Themes
+
+A theme is an object of components: `Shell`, `Brand`, `TenantSwitcher`, `Nav`, `Breadcrumbs`, `UserMenu`, `Dashboard`, `Index`, `Table`, `Form`, `Plugins`, `Cell` and `Loading`. The panel decides what each page shows and who may see it, and hands the theme data, server actions already bound, and elements already drawn - never a component, so any of them may be a client component. To replace one page, spread the shipped theme: `theme: { ...shadcn, Dashboard: MyDashboard }`.
+
+## Data sources
+
+`memorySource` keeps rows in memory, for prototypes and tests. A database adapter is the same five functions:
+
+```ts
+interface DataSource<Row, Values> {
+  list(query: ListQuery): Promise<{ rows: Row[]; total: number }>
+  find(id: string): Promise<Row | null>
+  create(values: Values): Promise<Row>
+  update(id: string, values: Values): Promise<Row>
+  delete(id: string): Promise<void>
+}
+```
+
+## Server or client tables
+
+`mode: 'server'` (the default) asks `list` for one page per search, filter, sort and page, and keeps the state in the url. `mode: 'client'` asks once with `perPage: null`, gets every row, and searches, sorts and pages in the browser - for small data.
+
+## Auth, tenants and plugins
+
+- `authorize` asks the app's own auth, on every page and every save, delete and switch. A refusal is a 404. `user` and `signOut` fill the sidebar's footer.
+- `tenancy: { tenants, current, switch }` adds a team switcher, and every data source call is told `{ tenant }`. A tenant that is not the visitor's is refused.
+- `plugins: [auditLog()]` adds resources, dashboard widgets and a reaction to every change. Writing, publishing and selling one: [Admin plugins](https://rsc-kit.dev/guides/admin-plugins/).
+
+The shadcn theme needs Tailwind v4 and shadcn, and `@import "@rsc-kit/press/shadcn.css";` in the app's stylesheet. The full guide is [Admin panels](https://rsc-kit.dev/guides/admin/), and `examples/admin` is a panel over a per-team catalogue, a client-mode table and a REST API.

package/dist/admin/actions.d.ts

@@ -0,0 +1,30 @@
+/**
+ * One save for every resource, bound by the page:
+ * saveRecord.bind(null, '/admin', 'products', id). The resource's own schema
+ * is the check, and the panel's authorize runs first, on every call - an
+ * action is reachable without the page that rendered it.
+ */
+export declare function saveRecord(path: string, name: string, id: string | null, form: FormData): Promise<never>;
+/** Deleting from the table refreshes the table, and nothing else on the page. */
+export declare function deleteRecord(path: string, name: string, id: string): Promise<void>;
+/**
+ * The rows ticked in the table, deleted or handed to one of the resource's
+ * bulk actions. Each id is found as the visitor first, so one from another
+ * tenant, or already gone, is left out rather than acted on.
+ */
+export declare function bulkRecords(path: string, name: string, action: string, ids: string[]): Promise<void>;
+/** The switcher's choice, checked against the visitor's own tenants, then the dashboard. */
+export declare function switchTenant(path: string, id: string): Promise<void>;
+export declare function signOut(path: string): Promise<void>;
+/** A manifest url, fetched and checked, then shown for review. Nothing is installed yet. */
+export declare function reviewPlugin(path: string, form: FormData): Promise<never>;
+/**
+ * Install what was reviewed. The manifest is fetched again and must match the
+ * digest the review page showed: a plugin that changed its scopes between the
+ * review and the click is refused, not installed with scopes nobody read.
+ */
+export declare function installPlugin(path: string, url: string, digest: string): Promise<void>;
+/** Uninstalled: its secret goes with it, so every call it could have answered stops at once. */
+export declare function uninstallPlugin(path: string, id: string): Promise<void>;
+/** The secret was copied into the plugin; the plugins page stops showing it. */
+export declare function secretCopied(path: string, id: string): Promise<void>;

package/dist/admin/actions.js

@@ -0,0 +1,171 @@
+'use server';
+import { fieldErrors } from '@rsc-kit/core/action';
+import { flash } from '@rsc-kit/core/flash';
+import { redirect } from '@rsc-kit/core/redirect';
+import { revalidate } from '@rsc-kit/core/revalidate';
+import { digestOf, fetchManifest, newInstallation } from '../installable.js';
+import { allowOf, allowedResource, contextOf, panelAt, resourcesFor, tellAll } from './registry.js';
+import { bulkToast, parse } from '../resource.js';
+/**
+ * One save for every resource, bound by the page:
+ * saveRecord.bind(null, '/admin', 'products', id). The resource's own schema
+ * is the check, and the panel's authorize runs first, on every call - an
+ * action is reachable without the page that rendered it.
+ */
+export async function saveRecord(path, name, id, form) {
+    const { resource, context } = await allowedResource(path, name);
+    const current = id === null ? null : await resource.source.find(id, context);
+    if (id !== null && !current)
+        throw new Error(`[admin] no ${name} ${id} here`);
+    // What the record had is what a file field may keep without uploading again.
+    const parsed = await parse(resource, form, { current: current, tenant: context.tenant });
+    if (!parsed.ok)
+        return fieldErrors(parsed.errors);
+    // A relation's value is an id the browser sent, so it is looked up as the
+    // visitor: one from another tenant, or none at all, is not one of theirs.
+    const values = parsed.values;
+    const unrelated = {};
+    for (const field of resource.fields) {
+        const value = values[field.name];
+        if (!field.relation || value === undefined || value === null || value === '')
+            continue;
+        const related = (await resourcesFor(panelAt(path), context)).find((candidate) => candidate.name === field.relation);
+        if (!(await related.source.find(String(value), context)))
+            unrelated[field.name] = `Choose one of the listed ${related.label.toLowerCase()}.`;
+    }
+    if (Object.keys(unrelated).length > 0)
+        return fieldErrors(unrelated);
+    const row = id === null ? await resource.source.create(parsed.values, context) : await resource.source.update(id, parsed.values, context);
+    await tellAll(panelAt(path), { panel: path, resource: name, id: String(row[resource.key]), change: id === null ? 'created' : 'updated', values: parsed.values, tenant: context.tenant }, context);
+    // The form is replaced by the list the redirect lands on, so the word
+    // that it worked rides along to that page.
+    await flash(`${resource.singular} ${id === null ? 'created' : 'saved'}.`);
+    redirect(`${path}/${name}`);
+}
+/** Deleting from the table refreshes the table, and nothing else on the page. */
+export async function deleteRecord(path, name, id) {
+    const { resource, context } = await allowedResource(path, name);
+    if (!(await resource.source.find(id, context)))
+        return;
+    await resource.source.delete(id, context);
+    await tellAll(panelAt(path), { panel: path, resource: name, id, change: 'deleted', tenant: context.tenant }, context);
+    await flash(`${resource.singular} deleted.`);
+    revalidate('admin-table');
+}
+/**
+ * The rows ticked in the table, deleted or handed to one of the resource's
+ * bulk actions. Each id is found as the visitor first, so one from another
+ * tenant, or already gone, is left out rather than acted on.
+ */
+export async function bulkRecords(path, name, action, ids) {
+    const { resource, context } = await allowedResource(path, name);
+    const bulk = action === 'delete' ? null : resource.bulkActions.find((candidate) => candidate.name === action);
+    if (bulk === undefined)
+        throw new Error(`[admin] ${name} has no bulk action ${action}`);
+    const found = await Promise.all([...new Set(ids.map(String))].map(async (id) => [id, await resource.source.find(id, context)]));
+    const rows = found.filter(([, row]) => row !== null && row !== undefined);
+    const noun = (count) => (count === 1 ? resource.singular : resource.label).toLowerCase();
+    if (bulk === null) {
+        for (const [id] of rows) {
+            await resource.source.delete(id, context);
+            await tellAll(panelAt(path), { panel: path, resource: name, id, change: 'deleted', tenant: context.tenant }, context);
+        }
+        await flash(bulkToast({ label: 'Delete', done: 'deleted' }, rows.length, noun(rows.length)));
+    }
+    else {
+        const said = await bulk.run(rows.map(([, row]) => row), context);
+        await flash(typeof said === 'string' ? said : bulkToast(bulk, rows.length, noun(rows.length)));
+    }
+    revalidate('admin-table');
+}
+/** The switcher's choice, checked against the visitor's own tenants, then the dashboard. */
+export async function switchTenant(path, id) {
+    const panel = panelAt(path);
+    if (!(await panel.authorize()) || !panel.tenancy)
+        throw new Error('[admin] not allowed');
+    const theirs = await panel.tenancy.tenants();
+    if (!theirs.some((tenant) => tenant.id === id))
+        throw new Error('[admin] not one of this visitor\'s tenants');
+    await panel.tenancy.switch(id);
+    // The team's name and nav are in the layout, which a redirect keeps as it
+    // was unless the action says what it changed.
+    revalidate('all');
+    redirect(path);
+}
+export async function signOut(path) {
+    const panel = panelAt(path);
+    await panel.signOut?.();
+    redirect('/');
+}
+/** The panel, once this visitor may install and uninstall there. */
+async function managed(path) {
+    const panel = panelAt(path);
+    if (!panel.installs || !(await panel.authorize()))
+        throw new Error('[admin] not allowed');
+    if (panel.installs.manage && !(await panel.installs.manage()))
+        throw new Error('[admin] not allowed to manage plugins');
+    const context = await contextOf(panel);
+    if (!context)
+        throw new Error('[admin] no tenant chosen, or not one of this visitor\'s');
+    return { panel, installs: panel.installs, context };
+}
+/** A manifest url, fetched and checked, then shown for review. Nothing is installed yet. */
+export async function reviewPlugin(path, form) {
+    const { panel } = await managed(path);
+    const url = String(form.get('manifest') ?? '').trim();
+    try {
+        await fetchManifest(url, allowOf(panel), panel.resources.map((resource) => resource.name));
+    }
+    catch (error) {
+        return fieldErrors({ manifest: error instanceof Error ? error.message : 'The manifest could not be read.' });
+    }
+    redirect(`${path}/plugins?review=${encodeURIComponent(url)}`);
+}
+/**
+ * Install what was reviewed. The manifest is fetched again and must match the
+ * digest the review page showed: a plugin that changed its scopes between the
+ * review and the click is refused, not installed with scopes nobody read.
+ */
+export async function installPlugin(path, url, digest) {
+    const { panel, installs, context } = await managed(path);
+    const host = panel.resources.map((resource) => resource.name);
+    const manifest = await fetchManifest(url, allowOf(panel), host);
+    if ((await digestOf(manifest)) !== digest) {
+        await flash('The plugin changed since you reviewed it. Review it again.', 'error');
+        redirect(`${path}/plugins?review=${encodeURIComponent(url)}`);
+    }
+    const installed = await installs.store.list(context.tenant);
+    const taken = new Set([...host, ...installed.flatMap((installation) => installation.manifest.resources.map((resource) => resource.name))]);
+    if (installed.some((installation) => installation.manifest.name === manifest.name)) {
+        await flash(`${manifest.label} is already installed.`, 'error');
+        redirect(`${path}/plugins`);
+    }
+    const clash = manifest.resources.find((resource) => taken.has(resource.name));
+    if (clash) {
+        await flash(`Another plugin already adds ${clash.name}.`, 'error');
+        redirect(`${path}/plugins`);
+    }
+    await installs.store.add(context.tenant, newInstallation(url, manifest));
+    await flash(`${manifest.label} installed. Copy its secret into the plugin.`);
+    // Re-rendered in place, not redirected: its resources join the sidebar,
+    // which is in a layout a redirect keeps mounted from before the install.
+    // The review it came from closes itself once the manifest is installed.
+    revalidate('all');
+}
+/** Uninstalled: its secret goes with it, so every call it could have answered stops at once. */
+export async function uninstallPlugin(path, id) {
+    const { installs, context } = await managed(path);
+    const installation = (await installs.store.list(context.tenant)).find((candidate) => candidate.id === id);
+    if (!installation)
+        return;
+    await installs.store.remove(context.tenant, id);
+    await flash(`${installation.manifest.label} uninstalled.`);
+    revalidate('all');
+}
+/** The secret was copied into the plugin; the plugins page stops showing it. */
+export async function secretCopied(path, id) {
+    const { installs, context } = await managed(path);
+    await installs.store.seen(context.tenant, id);
+    redirect(`${path}/plugins`);
+}
+//# sourceMappingURL=actions.js.map

package/dist/admin/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/admin/actions.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACnG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,EAAiB,EAAE,IAAc;IAC5F,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC/D,MAAM,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IAE5E,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,EAAE,OAAO,CAAC,CAAA;IAE7E,6EAA6E;IAC7E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAyC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAE1H,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEjD,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAA;IACvD,MAAM,SAAS,GAA2B,EAAE,CAAA;IAE5C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAEhC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QAEtF,MAAM,OAAO,GAAG,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAE,CAAA;QAEpH,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,4BAA4B,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAA;IAC9I,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,SAAS,CAAC,CAAA;IAEpE,MAAM,GAAG,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEzI,MAAM,OAAO,CACX,OAAO,CAAC,IAAI,CAAC,EACb,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAC1J,OAAO,CACR,CAAA;IAED,sEAAsE;IACtE,2CAA2C;IAC3C,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAA;IAEzE,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,EAAW,CAAC,CAAA;AACtC,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,EAAU;IACvE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAE/D,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAAE,OAAM;IAEtD,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACzC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;IACrH,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,QAAQ,WAAW,CAAC,CAAA;IAC5C,UAAU,CAAC,aAAsB,CAAC,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc,EAAE,GAAa;IACzF,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC/D,MAAM,IAAI,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;IAE7G,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,uBAAuB,MAAM,EAAE,CAAC,CAAA;IAEvF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAU,CAAC,CAAC,CAAA;IACxI,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAC,CAAA;IACzE,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IAEhG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;YACzC,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAA;QACvH,CAAC;QAED,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC9F,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QAEhE,MAAM,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;IAED,UAAU,CAAC,aAAsB,CAAC,CAAA;AACpC,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAExF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAE7G,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9B,0EAA0E;IAC1E,8CAA8C;IAC9C,UAAU,CAAC,KAAc,CAAC,CAAA;IAC1B,QAAQ,CAAC,IAAa,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;IACvB,QAAQ,CAAC,GAAY,CAAC,CAAA;AACxB,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IACzF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAEvH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAA;IAEtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAExF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;AACrD,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,IAAc;IAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAErD,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,EAAE,CAAC,CAAA;IAC9G,CAAC;IAED,QAAQ,CAAC,GAAG,IAAI,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,EAAW,CAAC,CAAA;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW,EAAE,MAAc;IAC3E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA;IAE/D,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC1C,MAAM,KAAK,CAAC,4DAA4D,EAAE,OAAO,CAAC,CAAA;QAClF,QAAQ,CAAC,GAAG,IAAI,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,EAAW,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IAE1I,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,wBAAwB,EAAE,OAAO,CAAC,CAAA;QAC/D,QAAQ,CAAC,GAAG,IAAI,UAAmB,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAE7E,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,CAAC,+BAA+B,KAAK,CAAC,IAAI,GAAG,EAAE,OAAO,CAAC,CAAA;QAClE,QAAQ,CAAC,GAAG,IAAI,UAAmB,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;IACxE,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,8CAA8C,CAAC,CAAA;IAC5E,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,UAAU,CAAC,KAAc,CAAC,CAAA;AAC5B,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,EAAU;IAC5D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAEzG,IAAI,CAAC,YAAY;QAAE,OAAM;IAEzB,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,KAAK,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,eAAe,CAAC,CAAA;IAC1D,UAAU,CAAC,KAAc,CAAC,CAAA;AAC5B,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,EAAU;IACzD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAEjD,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7C,QAAQ,CAAC,GAAG,IAAI,UAAmB,CAAC,CAAA;AACtC,CAAC","sourcesContent":["'use server'\n\nimport { fieldErrors } from '@rsc-kit/core/action'\nimport { flash } from '@rsc-kit/core/flash'\nimport { redirect } from '@rsc-kit/core/redirect'\nimport { revalidate } from '@rsc-kit/core/revalidate'\nimport { digestOf, fetchManifest, newInstallation } from '../installable.js'\nimport { allowOf, allowedResource, contextOf, panelAt, resourcesFor, tellAll } from './registry.js'\nimport { bulkToast, parse } from '../resource.js'\n\n/**\n * One save for every resource, bound by the page:\n * saveRecord.bind(null, '/admin', 'products', id). The resource's own schema\n * is the check, and the panel's authorize runs first, on every call - an\n * action is reachable without the page that rendered it.\n */\nexport async function saveRecord(path: string, name: string, id: string | null, form: FormData) {\n  const { resource, context } = await allowedResource(path, name)\n  const current = id === null ? null : await resource.source.find(id, context)\n\n  if (id !== null && !current) throw new Error(`[admin] no ${name} ${id} here`)\n\n  // What the record had is what a file field may keep without uploading again.\n  const parsed = await parse(resource, form, { current: current as Record<string, unknown> | null, tenant: context.tenant })\n\n  if (!parsed.ok) return fieldErrors(parsed.errors)\n\n  // A relation's value is an id the browser sent, so it is looked up as the\n  // visitor: one from another tenant, or none at all, is not one of theirs.\n  const values = parsed.values as Record<string, unknown>\n  const unrelated: Record<string, string> = {}\n\n  for (const field of resource.fields) {\n    const value = values[field.name]\n\n    if (!field.relation || value === undefined || value === null || value === '') continue\n\n    const related = (await resourcesFor(panelAt(path), context)).find((candidate) => candidate.name === field.relation)!\n\n    if (!(await related.source.find(String(value), context))) unrelated[field.name] = `Choose one of the listed ${related.label.toLowerCase()}.`\n  }\n\n  if (Object.keys(unrelated).length > 0) return fieldErrors(unrelated)\n\n  const row = id === null ? await resource.source.create(parsed.values, context) : await resource.source.update(id, parsed.values, context)\n\n  await tellAll(\n    panelAt(path),\n    { panel: path, resource: name, id: String(row[resource.key]), change: id === null ? 'created' : 'updated', values: parsed.values, tenant: context.tenant },\n    context,\n  )\n\n  // The form is replaced by the list the redirect lands on, so the word\n  // that it worked rides along to that page.\n  await flash(`${resource.singular} ${id === null ? 'created' : 'saved'}.`)\n\n  redirect(`${path}/${name}` as never)\n}\n\n/** Deleting from the table refreshes the table, and nothing else on the page. */\nexport async function deleteRecord(path: string, name: string, id: string) {\n  const { resource, context } = await allowedResource(path, name)\n\n  if (!(await resource.source.find(id, context))) return\n\n  await resource.source.delete(id, context)\n  await tellAll(panelAt(path), { panel: path, resource: name, id, change: 'deleted', tenant: context.tenant }, context)\n  await flash(`${resource.singular} deleted.`)\n  revalidate('admin-table' as never)\n}\n\n/**\n * The rows ticked in the table, deleted or handed to one of the resource's\n * bulk actions. Each id is found as the visitor first, so one from another\n * tenant, or already gone, is left out rather than acted on.\n */\nexport async function bulkRecords(path: string, name: string, action: string, ids: string[]) {\n  const { resource, context } = await allowedResource(path, name)\n  const bulk = action === 'delete' ? null : resource.bulkActions.find((candidate) => candidate.name === action)\n\n  if (bulk === undefined) throw new Error(`[admin] ${name} has no bulk action ${action}`)\n\n  const found = await Promise.all([...new Set(ids.map(String))].map(async (id) => [id, await resource.source.find(id, context)] as const))\n  const rows = found.filter(([, row]) => row !== null && row !== undefined)\n  const noun = (count: number) => (count === 1 ? resource.singular : resource.label).toLowerCase()\n\n  if (bulk === null) {\n    for (const [id] of rows) {\n      await resource.source.delete(id, context)\n      await tellAll(panelAt(path), { panel: path, resource: name, id, change: 'deleted', tenant: context.tenant }, context)\n    }\n\n    await flash(bulkToast({ label: 'Delete', done: 'deleted' }, rows.length, noun(rows.length)))\n  } else {\n    const said = await bulk.run(rows.map(([, row]) => row), context)\n\n    await flash(typeof said === 'string' ? said : bulkToast(bulk, rows.length, noun(rows.length)))\n  }\n\n  revalidate('admin-table' as never)\n}\n\n/** The switcher's choice, checked against the visitor's own tenants, then the dashboard. */\nexport async function switchTenant(path: string, id: string) {\n  const panel = panelAt(path)\n\n  if (!(await panel.authorize()) || !panel.tenancy) throw new Error('[admin] not allowed')\n\n  const theirs = await panel.tenancy.tenants()\n\n  if (!theirs.some((tenant) => tenant.id === id)) throw new Error('[admin] not one of this visitor\\'s tenants')\n\n  await panel.tenancy.switch(id)\n  // The team's name and nav are in the layout, which a redirect keeps as it\n  // was unless the action says what it changed.\n  revalidate('all' as never)\n  redirect(path as never)\n}\n\nexport async function signOut(path: string) {\n  const panel = panelAt(path)\n\n  await panel.signOut?.()\n  redirect('/' as never)\n}\n\n/** The panel, once this visitor may install and uninstall there. */\nasync function managed(path: string) {\n  const panel = panelAt(path)\n\n  if (!panel.installs || !(await panel.authorize())) throw new Error('[admin] not allowed')\n  if (panel.installs.manage && !(await panel.installs.manage())) throw new Error('[admin] not allowed to manage plugins')\n\n  const context = await contextOf(panel)\n\n  if (!context) throw new Error('[admin] no tenant chosen, or not one of this visitor\\'s')\n\n  return { panel, installs: panel.installs, context }\n}\n\n/** A manifest url, fetched and checked, then shown for review. Nothing is installed yet. */\nexport async function reviewPlugin(path: string, form: FormData) {\n  const { panel } = await managed(path)\n  const url = String(form.get('manifest') ?? '').trim()\n\n  try {\n    await fetchManifest(url, allowOf(panel), panel.resources.map((resource) => resource.name))\n  } catch (error) {\n    return fieldErrors({ manifest: error instanceof Error ? error.message : 'The manifest could not be read.' })\n  }\n\n  redirect(`${path}/plugins?review=${encodeURIComponent(url)}` as never)\n}\n\n/**\n * Install what was reviewed. The manifest is fetched again and must match the\n * digest the review page showed: a plugin that changed its scopes between the\n * review and the click is refused, not installed with scopes nobody read.\n */\nexport async function installPlugin(path: string, url: string, digest: string) {\n  const { panel, installs, context } = await managed(path)\n  const host = panel.resources.map((resource) => resource.name)\n  const manifest = await fetchManifest(url, allowOf(panel), host)\n\n  if ((await digestOf(manifest)) !== digest) {\n    await flash('The plugin changed since you reviewed it. Review it again.', 'error')\n    redirect(`${path}/plugins?review=${encodeURIComponent(url)}` as never)\n  }\n\n  const installed = await installs.store.list(context.tenant)\n  const taken = new Set([...host, ...installed.flatMap((installation) => installation.manifest.resources.map((resource) => resource.name))])\n\n  if (installed.some((installation) => installation.manifest.name === manifest.name)) {\n    await flash(`${manifest.label} is already installed.`, 'error')\n    redirect(`${path}/plugins` as never)\n  }\n\n  const clash = manifest.resources.find((resource) => taken.has(resource.name))\n\n  if (clash) {\n    await flash(`Another plugin already adds ${clash.name}.`, 'error')\n    redirect(`${path}/plugins` as never)\n  }\n\n  await installs.store.add(context.tenant, newInstallation(url, manifest))\n  await flash(`${manifest.label} installed. Copy its secret into the plugin.`)\n  // Re-rendered in place, not redirected: its resources join the sidebar,\n  // which is in a layout a redirect keeps mounted from before the install.\n  // The review it came from closes itself once the manifest is installed.\n  revalidate('all' as never)\n}\n\n/** Uninstalled: its secret goes with it, so every call it could have answered stops at once. */\nexport async function uninstallPlugin(path: string, id: string) {\n  const { installs, context } = await managed(path)\n  const installation = (await installs.store.list(context.tenant)).find((candidate) => candidate.id === id)\n\n  if (!installation) return\n\n  await installs.store.remove(context.tenant, id)\n  await flash(`${installation.manifest.label} uninstalled.`)\n  revalidate('all' as never)\n}\n\n/** The secret was copied into the plugin; the plugins page stops showing it. */\nexport async function secretCopied(path: string, id: string) {\n  const { installs, context } = await managed(path)\n\n  await installs.store.seen(context.tenant, id)\n  redirect(`${path}/plugins` as never)\n}\n"]}

package/dist/admin/index.d.ts

@@ -0,0 +1,5 @@
+export { definePanel, listSearch, pluginsSearch, recordParams, resourceParams } from './panel.js';
+export type { Panel, PanelDefinition } from './panel.js';
+export type { ListSearch, PluginsSearch } from './url.js';
+export type { Tenancy } from './registry.js';
+export type { AdminTheme, BrandProps, BreadcrumbsProps, DashboardProps, FormProps, IndexProps, InstalledPlugin, NavItem, PanelUser, PluginReview, PluginsProps, ShellProps, TableBulkAction, TableColumn, TableProps, TableQuery, TableRowData, TenantSwitcherProps, UserMenuProps, } from './theme.js';

package/dist/admin/index.js

@@ -0,0 +1,2 @@
+export { definePanel, listSearch, pluginsSearch, recordParams, resourceParams } from './panel.js';
+//# sourceMappingURL=index.js.map

package/dist/admin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/admin/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA","sourcesContent":["export { definePanel, listSearch, pluginsSearch, recordParams, resourceParams } from './panel.js'\nexport type { Panel, PanelDefinition } from './panel.js'\nexport type { ListSearch, PluginsSearch } from './url.js'\nexport type { Tenancy } from './registry.js'\nexport type {\n  AdminTheme,\n  BrandProps,\n  BreadcrumbsProps,\n  DashboardProps,\n  FormProps,\n  IndexProps,\n  InstalledPlugin,\n  NavItem,\n  PanelUser,\n  PluginReview,\n  PluginsProps,\n  ShellProps,\n  TableBulkAction,\n  TableColumn,\n  TableProps,\n  TableQuery,\n  TableRowData,\n  TenantSwitcherProps,\n  UserMenuProps,\n} from './theme.js'\n"]}

package/dist/admin/panel.d.ts

@@ -0,0 +1,96 @@
+import type { ComponentType, ReactNode } from 'react';
+import type { Installs } from '../installable.js';
+import type { PanelPlugin } from '../plugin.js';
+import type { Tenancy } from './registry.js';
+import type { Resource } from '../resource.js';
+import type { AdminTheme, PanelUser } from './theme.js';
+import type { ListSearch, PluginsSearch } from './url.js';
+export { listSearch, pluginsSearch, recordParams, resourceParams } from './url.js';
+export interface PanelDefinition {
+    /** Where the panel's routes are: the folder under src/app it is mounted in. */
+    path?: string;
+    title?: string;
+    /** The sidebar's mark beside the title, in a panel without tenants. */
+    logo?: ComponentType<{
+        className?: string;
+    }>;
+    resources: Resource[];
+    /**
+     * What draws the panel: import { shadcn } from '@rsc-kit/press/shadcn', or
+     * any object that fulfils AdminTheme. The panel decides what is shown and
+     * who may see it; the theme only draws.
+     */
+    theme: AdminTheme;
+    /**
+     * Whether this request may use the panel. Runs on every page and on every
+     * save, delete and switch - an action is reachable without the page that
+     * rendered it, so a guard on the pages alone would not be one. A refusal is
+     * a 404. The panel has no login of its own: this asks the app's.
+     */
+    authorize?: () => boolean | Promise<boolean>;
+    /** Who is signed in, for the sidebar's footer. */
+    user?: () => PanelUser | null | Promise<PanelUser | null>;
+    /** Sign the visitor out. Runs in a server action; the visitor lands on /. */
+    signOut?: () => void | Promise<void>;
+    /** Whose records the panel shows: a switcher in the sidebar, and a tenant on every data source call. */
+    tenancy?: Tenancy;
+    /** Packages that add resources, dashboard widgets and reactions to changes. */
+    plugins?: PanelPlugin[];
+    /**
+     * Plugins a person installs from the panel while it runs, with no rebuild:
+     * a manifest url, reviewed, then installed for the current tenant. Mounted
+     * as src/app/admin/plugins/page.tsx. See installable.ts for what they can
+     * and cannot reach.
+     */
+    installs?: Installs;
+    /** The light/dark switch in the header. On unless the app has its own. */
+    modeToggle?: boolean;
+}
+/** A type, not an interface: section() takes props that are a record, and an interface has no index signature. */
+type Props<P, S = never> = {
+    params: Promise<P>;
+    searchParams: Promise<S>;
+};
+/**
+ * A panel: its resources, and the pages that show them, already bound to it.
+ * The app mounts each in a route file of its own, because the engine finds
+ * routes, url schemas and sections by their files:
+ *
+ *     src/app/admin/middleware.ts                      export default panel.middleware
+ *     src/app/admin/layout.tsx                         export default panel.Layout
+ *     src/app/admin/page.tsx                           export default panel.Dashboard
+ *     src/app/admin/[resource]/page.tsx                export const params = resourceParams
+ *                                                      export const searchParams = listSearch
+ *                                                      export default panel.Index
+ *     src/app/admin/[resource]/admin-table.section.tsx export default panel.Table
+ *     src/app/admin/[resource]/new/page.tsx            export const params = resourceParams
+ *                                                      export default panel.Create
+ *     src/app/admin/[resource]/[id]/page.tsx           export const params = recordParams
+ *                                                      export default panel.Edit
+ */
+export declare function definePanel(definition: PanelDefinition): {
+    path: string;
+    resources: Resource<any, import("../resource.js").FormSchema>[];
+    middleware: (params?: Record<string, string | undefined>) => Promise<void>;
+    Layout: ({ children }: {
+        children: ReactNode;
+    }) => import("react").JSX.Element;
+    Dashboard: () => import("react").JSX.Element;
+    Index: (props: Props<{
+        resource: string;
+    }, ListSearch>) => import("react").JSX.Element;
+    Table: ComponentType<Props<{
+        resource: string;
+    }, ListSearch>>;
+    Create: (props: Props<{
+        resource: string;
+    }>) => import("react").JSX.Element;
+    Edit: (props: Props<{
+        resource: string;
+        id: string;
+    }>) => import("react").JSX.Element;
+    Plugins: (props: {
+        searchParams: Promise<PluginsSearch>;
+    }) => import("react").JSX.Element;
+};
+export type Panel = ReturnType<typeof definePanel>;