@shamar/adonis 0.1.0

package/dist/resources/api_key_resource.js

@@ -0,0 +1,225 @@
+import { Resource, form, table, infolist, actions, Section, TextInput, Textarea, Select, DatePicker, AbilitiesAssignment, TextColumn, TextEntry, ValidationException, } from '@shamar/core';
+import { generateApiKey } from '@shamar/cherubim';
+/**
+ * ORM-agnostic API credentials resource (PATs + machine keys).
+ *
+ * Apps bind their model: `class AppApiKeyResource extends ApiKeyResource { static model = ApiKey }`
+ *
+ * Create generates a one-time secret (shown once). Editing credentials is disabled;
+ * admins can deactivate / reactivate (and delete) instead.
+ * Abilities are picked from the registered `permissions` catalog by name.
+ */
+export default class ApiKeyResource extends Resource {
+    /** Keep as `ResourceModel` so apps can override with a Lucid/Mongoose model class. */
+    static model = 'ApiKey';
+    static slug = 'api-keys';
+    static label = 'API Keys';
+    static singularLabel = 'API Key';
+    static recordTitleField = 'name';
+    static navigationGroup = 'System';
+    static navigationSort = 8;
+    static icon = 'key';
+    static canAccess(_user) {
+        return true;
+    }
+    static canViewAny(_user) {
+        return true;
+    }
+    static canView(_user, _record) {
+        return true;
+    }
+    static canCreate(_user) {
+        return true;
+    }
+    /** Secrets are create-once — use Deactivate / Reactivate instead of edit. */
+    static canEdit(_user, _record) {
+        return false;
+    }
+    static canDelete(_user, _record) {
+        return true;
+    }
+    static resourceActions() {
+        return actions((a) => {
+            a.create();
+            a.view();
+            a.delete().confirm('Permanently delete this API key? This cannot be undone.');
+            a.bulkDelete('Delete selected').confirm('Permanently delete %d selected API key(s)?');
+            a
+                .row('revoke', 'Deactivate')
+                .color('danger')
+                .confirm('Deactivate this API key? It will stop working immediately.')
+                .ability('delete');
+            a
+                .row('reactivate', 'Reactivate')
+                .confirm('Reactivate this API key?')
+                .ability('delete');
+            a
+                .bulk('revoke', 'Deactivate selected')
+                .color('danger')
+                .confirm('Deactivate %d selected API key(s)?')
+                .ability('delete');
+        });
+    }
+    static form() {
+        return form((f) => {
+            f.schema([
+                Section.make('Credential')
+                    .columns(2)
+                    .schema([
+                    TextInput.make('name').required().searchable().columnSpanFull(),
+                    Textarea.make('description')
+                        .rows(3)
+                        .columnSpanFull()
+                        .helperText('Optional note about what this credential is for.'),
+                    Select.make('kind')
+                        .label('Type')
+                        .options([
+                        { label: 'Machine API key', value: 'machine' },
+                        { label: 'Personal access token', value: 'pat' },
+                    ])
+                        .default('machine')
+                        .required()
+                        .live()
+                        .helperText('Machine keys are standalone principals. PATs act as the selected user.'),
+                    Select.make('userId')
+                        .label('User')
+                        .relationship('users', 'email')
+                        .visible(({ get }) => get('kind') === 'pat')
+                        .required(({ get }) => get('kind') === 'pat')
+                        .helperText('Required for personal access tokens.'),
+                    AbilitiesAssignment.make('abilities').helperText('Machine: permissions for the key (default * when empty). PAT: optional narrow of the user’s permissions.'),
+                    DatePicker.make('expiresAt').label('Expires at (optional)'),
+                ]),
+            ]);
+        });
+    }
+    static table() {
+        return table((t) => {
+            t.defaultSort('createdAt', 'desc')
+                .defaultFilters([{ field: 'kind', value: 'machine' }])
+                .schema([
+                TextColumn.make('name').searchable().sortable(),
+                TextColumn.make('description'),
+                TextColumn.make('kind').label('Type').sortable().filterable().groupable(),
+                TextColumn.make('tokenPrefix').label('Prefix'),
+                TextColumn.make('status').label('Status').badge(),
+                TextColumn.make('user.email').label('User'),
+                TextColumn.make('lastUsedAt').dateTime().label('Last used'),
+                TextColumn.make('expiresAt').dateTime().label('Expires'),
+            ]);
+        });
+    }
+    static infolist() {
+        return infolist((i) => {
+            i.schema([
+                Section.make('Credential')
+                    .columns(2)
+                    .schema([
+                    TextEntry.make('name').columnSpanFull(),
+                    TextEntry.make('description').columnSpanFull(),
+                    TextEntry.make('kind').label('Type'),
+                    TextEntry.make('status').label('Status').badge(),
+                    TextEntry.make('tokenPrefix').label('Prefix').copyable(),
+                    TextEntry.make('user.email').label('User'),
+                    TextEntry.make('abilities').badge().label('Abilities').columnSpanFull(),
+                    TextEntry.make('lastUsedAt').dateTime().label('Last used'),
+                    TextEntry.make('expiresAt').dateTime().label('Expires'),
+                    TextEntry.make('revokedAt').dateTime().label('Revoked'),
+                    TextEntry.make('createdAt').dateTime().label('Created'),
+                ]),
+            ]);
+        });
+    }
+    static async prepareCreate(data, ctx) {
+        const name = String(data.name ?? '').trim();
+        const descriptionRaw = data.description;
+        const description = descriptionRaw != null && String(descriptionRaw).trim() !== ''
+            ? String(descriptionRaw).trim()
+            : null;
+        const kind = String(data.kind ?? 'machine').trim();
+        const userIdRaw = data.userId;
+        const userId = userIdRaw != null && String(userIdRaw).trim() !== ''
+            ? String(userIdRaw).trim()
+            : null;
+        const errors = {};
+        if (!name)
+            errors.name = 'Name is required.';
+        if (kind !== 'pat' && kind !== 'machine') {
+            errors.kind = 'Choose Machine API key or Personal access token.';
+        }
+        if (kind === 'pat' && !userId) {
+            errors.userId = 'Personal access tokens require a user.';
+        }
+        if (Object.keys(errors).length > 0) {
+            throw new ValidationException(errors);
+        }
+        let abilities = Array.isArray(data.abilities)
+            ? data.abilities.map(String).map((entry) => entry.trim()).filter(Boolean)
+            : [];
+        if (kind === 'machine' && abilities.length === 0) {
+            abilities = ['*'];
+        }
+        const generated = generateApiKey();
+        const expiresRaw = data.expiresAt;
+        const expiresAt = expiresRaw != null && String(expiresRaw).trim() !== ''
+            ? new Date(String(expiresRaw))
+            : null;
+        const payload = {
+            name,
+            description,
+            kind,
+            abilities,
+            userId: kind === 'pat' ? userId : null,
+            tokenHash: generated.tokenHash,
+            tokenPrefix: generated.prefix,
+            createdByUserId: ctx.userId ?? null,
+            expiresAt: expiresAt && !Number.isNaN(expiresAt.getTime()) ? expiresAt : null,
+            revokedAt: null,
+            lastUsedAt: null,
+        };
+        const label = kind === 'pat' ? 'Personal access token' : 'Machine API key';
+        return {
+            data: payload,
+            flashPlainText: generated.plainText,
+            flashMessage: `${label} "${name}" created. Copy it now — it will not be shown again:\n${generated.plainText}`,
+        };
+    }
+    static async handleAction(action, records, ctx) {
+        if (action !== 'revoke' && action !== 'reactivate') {
+            return null;
+        }
+        let changed = 0;
+        for (const record of records) {
+            const id = String(record.id ?? record._id ?? '');
+            if (!id)
+                continue;
+            const revokedAt = record.revokedAt;
+            const isRevoked = revokedAt != null && String(revokedAt).trim() !== '';
+            if (action === 'revoke') {
+                if (isRevoked)
+                    continue;
+                await ctx.adapter.update(ctx.meta, id, { revokedAt: new Date() });
+                changed += 1;
+            }
+            else {
+                if (!isRevoked)
+                    continue;
+                await ctx.adapter.update(ctx.meta, id, { revokedAt: null });
+                changed += 1;
+            }
+        }
+        if (action === 'revoke') {
+            return {
+                message: changed === 1
+                    ? 'API key deactivated'
+                    : `${changed} API key(s) deactivated`,
+            };
+        }
+        return {
+            message: changed === 1
+                ? 'API key reactivated'
+                : `${changed} API key(s) reactivated`,
+        };
+    }
+}
+//# sourceMappingURL=api_key_resource.js.map

package/dist/resources/api_key_resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api_key_resource.js","sourceRoot":"","sources":["../../src/resources/api_key_resource.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,OAAO,EACP,SAAS,EACT,QAAQ,EACR,MAAM,EACN,UAAU,EACV,mBAAmB,EACnB,UAAU,EACV,SAAS,EACT,mBAAmB,GAOpB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD;;;;;;;;GAQG;AACH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,QAAQ;IAClD,sFAAsF;IACtF,MAAM,CAAU,KAAK,GAAkB,QAAQ,CAAA;IAC/C,MAAM,CAAU,IAAI,GAAG,UAAU,CAAA;IACjC,MAAM,CAAU,KAAK,GAAG,UAAU,CAAA;IAClC,MAAM,CAAU,aAAa,GAAG,SAAS,CAAA;IACzC,MAAM,CAAU,gBAAgB,GAAG,MAAM,CAAA;IACzC,MAAM,CAAU,eAAe,GAAG,QAAQ,CAAA;IAC1C,MAAM,CAAU,cAAc,GAAG,CAAC,CAAA;IAClC,MAAM,CAAU,IAAI,GAAG,KAAK,CAAA;IAE5B,MAAM,CAAU,SAAS,CAAC,KAAiB;QACzC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAU,UAAU,CAAC,KAAiB;QAC1C,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAU,OAAO,CAAC,KAAiB,EAAE,OAAiC;QAC1E,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAU,SAAS,CAAC,KAAiB;QACzC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAU,OAAO,CAAC,KAAiB,EAAE,OAAiC;QAC1E,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,CAAU,SAAS,CAAC,KAAiB,EAAE,OAAiC;QAC5E,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,CAAU,eAAe;QAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACnB,CAAC,CAAC,MAAM,EAAE,CAAA;YACV,CAAC,CAAC,IAAI,EAAE,CAAA;YACR,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAA;YAC7E,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAA;YACrF,CAAC;iBACE,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;iBAC3B,KAAK,CAAC,QAAQ,CAAC;iBACf,OAAO,CAAC,4DAA4D,CAAC;iBACrE,OAAO,CAAC,QAAQ,CAAC,CAAA;YACpB,CAAC;iBACE,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;iBAC/B,OAAO,CAAC,0BAA0B,CAAC;iBACnC,OAAO,CAAC,QAAQ,CAAC,CAAA;YACpB,CAAC;iBACE,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC;iBACrC,KAAK,CAAC,QAAQ,CAAC;iBACf,OAAO,CAAC,oCAAoC,CAAC;iBAC7C,OAAO,CAAC,QAAQ,CAAC,CAAA;QACtB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAU,IAAI;QAClB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAChB,CAAC,CAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;qBACvB,OAAO,CAAC,CAAC,CAAC;qBACV,MAAM,CAAC;oBACN,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE;oBAC/D,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;yBACzB,IAAI,CAAC,CAAC,CAAC;yBACP,cAAc,EAAE;yBAChB,UAAU,CAAC,kDAAkD,CAAC;oBACjE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;yBAChB,KAAK,CAAC,MAAM,CAAC;yBACb,OAAO,CAAC;wBACP,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;wBAC9C,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAAE;qBACjD,CAAC;yBACD,OAAO,CAAC,SAAS,CAAC;yBAClB,QAAQ,EAAE;yBACV,IAAI,EAAE;yBACN,UAAU,CACT,wEAAwE,CACzE;oBACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;yBAClB,KAAK,CAAC,MAAM,CAAC;yBACb,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;yBAC9B,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC;yBAC3C,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC;yBAC5C,UAAU,CAAC,sCAAsC,CAAC;oBACrD,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAC9C,0GAA0G,CAC3G;oBACD,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;iBAC5D,CAAC;aACL,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAU,KAAK;QACnB,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACjB,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;iBAC/B,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;iBACrD,MAAM,CAAC;gBACR,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE;gBAC/C,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE;gBACzE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE;gBACjD,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC3C,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;aACzD,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAU,QAAQ;QACtB,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,CAAC,CAAC,MAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;qBACvB,OAAO,CAAC,CAAC,CAAC;qBACV,MAAM,CAAC;oBACN,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;oBACvC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE;oBAC9C,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;oBACpC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE;oBAChD,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;oBACxD,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC1C,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,cAAc,EAAE;oBACvE,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;oBAC1D,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;oBACvD,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;oBACvD,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;iBACxD,CAAC;aACL,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,aAAa,CACjC,IAA6B,EAC7B,GAAyB;QAEzB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAA;QACvC,MAAM,WAAW,GACf,cAAc,IAAI,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5D,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;YAC/B,CAAC,CAAC,IAAI,CAAA;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7B,MAAM,MAAM,GACV,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAClD,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;YAC1B,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,MAAM,GAA2B,EAAE,CAAA;QACzC,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,mBAAmB,CAAA;QAC5C,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,GAAG,kDAAkD,CAAA;QAClE,CAAC;QACD,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,GAAG,wCAAwC,CAAA;QAC1D,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;QACvC,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACzE,CAAC,CAAC,EAAE,CAAA;QAEN,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,SAAS,GAAG,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,EAAE,CAAA;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAA;QACjC,MAAM,SAAS,GACb,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YACpD,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC,CAAC,IAAI,CAAA;QAEV,MAAM,OAAO,GAA4B;YACvC,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,SAAS;YACT,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACtC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,SAAS,CAAC,MAAM;YAC7B,eAAe,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YACnC,SAAS,EACP,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACpE,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;SACjB,CAAA;QAED,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,iBAAiB,CAAA;QAE1E,OAAO;YACL,IAAI,EAAE,OAAO;YACb,cAAc,EAAE,SAAS,CAAC,SAAS;YACnC,YAAY,EAAE,GAAG,KAAK,KAAK,IAAI,yDAAyD,SAAS,CAAC,SAAS,EAAE;SAC9G,CAAA;IACH,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,YAAY,CAChC,MAAc,EACd,OAAkC,EAClC,GAAwB;QAExB,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YACnD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;YAChD,IAAI,CAAC,EAAE;gBAAE,SAAQ;YACjB,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;YAClC,MAAM,SAAS,GAAG,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAA;YAEtE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,SAAS;oBAAE,SAAQ;gBACvB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;gBACjE,OAAO,IAAI,CAAC,CAAA;YACd,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS;oBAAE,SAAQ;gBACxB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,OAAO,IAAI,CAAC,CAAA;YACd,CAAC;QACH,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EACL,OAAO,KAAK,CAAC;oBACX,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,GAAG,OAAO,yBAAyB;aAC1C,CAAA;QACH,CAAC;QAED,OAAO;YACL,OAAO,EACL,OAAO,KAAK,CAAC;gBACX,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,GAAG,OAAO,yBAAyB;SAC1C,CAAA;IACH,CAAC"}

package/dist/routes.d.ts

@@ -0,0 +1,5 @@
+import type { Router } from '@adonisjs/core/http';
+import type { ApplicationService } from '@adonisjs/core/types';
+import type { ShamarRuntime } from './runtime.js';
+export declare function registerShamarRoutes(app: ApplicationService, router: Router, runtime: ShamarRuntime): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAqBhE,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/routes.js

@@ -0,0 +1,97 @@
+import { AdminController } from './controllers/admin_controller.js';
+import { AssetsController } from './assets-controller.js';
+export async function registerShamarRoutes(app, router, runtime) {
+    const apiPrefix = runtime.config.apiPrefix ?? '/api/shamar';
+    for (const panel of runtime.panels) {
+        registerPanelRoutes(app, router, runtime, panel);
+    }
+    // JSON API uses the first panel's registry/adapter (compat).
+    const primary = runtime.panels[0];
+    const apiHandler = (action) => {
+        return async (ctx) => {
+            const controller = new AdminController(primary, runtime.config, runtime.authorizer);
+            const method = controller[action];
+            return method.call(controller, ctx, { asJson: true });
+        };
+    };
+    const api = router.group(() => {
+        router.get('/:slug', apiHandler('index')).as('shamar.api.index');
+        router.get('/:slug/:id', apiHandler('show')).as('shamar.api.show');
+        router.post('/:slug', apiHandler('store')).as('shamar.api.store');
+        router.put('/:slug/:id', apiHandler('update')).as('shamar.api.update');
+        router.delete('/:slug/:id', apiHandler('destroy')).as('shamar.api.destroy');
+    });
+    api.prefix(apiPrefix);
+    if (runtime.config.auth?.apiKeys?.protectApi) {
+        const { createRequireApiKeyMiddleware } = await import('./middleware/require_api_key_middleware.js');
+        api.use(createRequireApiKeyMiddleware(runtime.config));
+    }
+}
+function registerPanelRoutes(app, router, runtime, panel) {
+    const prefix = panel.path.replace(/\/+$/, '') || '/admin';
+    const routePrefix = `shamar.${panel.id}`;
+    const handler = (action, asJson = false) => {
+        return async (ctx) => {
+            const controller = new AdminController(panel, runtime.config, runtime.authorizer);
+            const method = controller[action];
+            return method.call(controller, ctx, { asJson });
+        };
+    };
+    const assets = new AssetsController(runtime.config, panel.config.branding);
+    const assetHandler = (action) => {
+        return async (ctx) => {
+            const method = assets[action];
+            return method.call(assets, ctx);
+        };
+    };
+    const group = router.group(() => {
+        router.get('/assets/admin.css', assetHandler('adminCss')).as(`${routePrefix}.assets.adminCss`);
+        router
+            .get('/assets/branding.css', assetHandler('brandingCss'))
+            .as(`${routePrefix}.assets.brandingCss`);
+        router.get('/assets/shamar-ui.js', assetHandler('shamarUi')).as(`${routePrefix}.assets.shamarUi`);
+        router.get('/assets/loom-ui.js', assetHandler('shamarUi')).as(`${routePrefix}.assets.legacyUi`);
+        router
+            .get('/assets/alpine.min.js', assetHandler('alpineJs'))
+            .as(`${routePrefix}.assets.alpineJs`);
+        router.get('/', handler('dashboard')).as(`${routePrefix}.dashboard`);
+        router.get('/:slug/create', handler('create')).as(`${routePrefix}.resources.create`);
+        router.post('/:slug/form-state', handler('formState')).as(`${routePrefix}.resources.formState`);
+        router
+            .get('/:slug/relation-search', handler('relationSearch', true))
+            .as(`${routePrefix}.resources.relationSearch`);
+        router
+            .post('/:slug/relation-quick-create', handler('relationQuickCreate', true))
+            .as(`${routePrefix}.resources.relationQuickCreate`);
+        router
+            .post('/:slug/relation-attach', handler('relationAttach', true))
+            .as(`${routePrefix}.resources.relationAttach`);
+        router
+            .post('/:slug/relation-detach', handler('relationDetach', true))
+            .as(`${routePrefix}.resources.relationDetach`);
+        router.post('/:slug', handler('store')).as(`${routePrefix}.resources.store`);
+        router.post('/:slug/bulk', handler('bulk')).as(`${routePrefix}.resources.bulk`);
+        router.get('/:slug/:id/edit', handler('edit')).as(`${routePrefix}.resources.edit`);
+        router
+            .get('/:slug/:id/summary', handler('summary', true))
+            .as(`${routePrefix}.resources.summary`);
+        router
+            .post('/:slug/:id/action/:action', handler('recordAction'))
+            .as(`${routePrefix}.resources.recordAction`);
+        router.post('/:slug/:id/delete', handler('destroy')).as(`${routePrefix}.resources.destroy`);
+        router.post('/:slug/:id', handler('update')).as(`${routePrefix}.resources.update`);
+        router.put('/:slug/:id', handler('update')).as(`${routePrefix}.resources.update.put`);
+        router.delete('/:slug/:id', handler('destroy')).as(`${routePrefix}.resources.destroy.delete`);
+        router
+            .get('/:slug/:id', handler('show'))
+            .where('slug', /^(?!assets$)/)
+            .as(`${routePrefix}.resources.show`);
+        router
+            .get('/:slug', handler('index'))
+            .where('slug', /^(?!assets$)/)
+            .as(`${routePrefix}.resources.index`);
+    });
+    group.prefix(prefix);
+    void app;
+}
+//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAmB1D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAuB,EACvB,MAAc,EACd,OAAsB;IAEtB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC;IAE5D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED,6DAA6D;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;IACnC,MAAM,UAAU,GAAG,CAAC,MAAmB,EAAE,EAAE;QACzC,OAAO,KAAK,EAAE,GAAgB,EAAE,EAAE;YAChC,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACpF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAGX,CAAC;YACtB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAwB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;QAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEtB,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QAC7C,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,MAAM,CACpD,4CAA4C,CAC7C,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,GAAuB,EACvB,MAAc,EACd,OAAsB,EACtB,KAAmB;IAEnB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;IAC1D,MAAM,WAAW,GAAG,UAAU,KAAK,CAAC,EAAE,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE;QACtD,OAAO,KAAK,EAAE,GAAgB,EAAE,EAAE;YAChC,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAGX,CAAC;YACtB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE3E,MAAM,YAAY,GAAG,CAAC,MAAmB,EAAE,EAAE;QAC3C,OAAO,KAAK,EAAE,GAAgB,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAsC,CAAC;YACnE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;QAC/F,MAAM;aACH,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC;aACxD,EAAE,CAAC,GAAG,WAAW,qBAAqB,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;QAClG,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;QAChG,MAAM;aACH,GAAG,CAAC,uBAAuB,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;aACtD,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;QAExC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,YAAY,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,mBAAmB,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,sBAAsB,CAAC,CAAC;QAChG,MAAM;aACH,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;aAC9D,EAAE,CAAC,GAAG,WAAW,2BAA2B,CAAC,CAAC;QACjD,MAAM;aACH,IAAI,CAAC,8BAA8B,EAAE,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;aAC1E,EAAE,CAAC,GAAG,WAAW,gCAAgC,CAAC,CAAC;QACtD,MAAM;aACH,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;aAC/D,EAAE,CAAC,GAAG,WAAW,2BAA2B,CAAC,CAAC;QACjD,MAAM;aACH,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;aAC/D,EAAE,CAAC,GAAG,WAAW,2BAA2B,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,iBAAiB,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,iBAAiB,CAAC,CAAC;QACnF,MAAM;aACH,GAAG,CAAC,oBAAoB,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;aACnD,EAAE,CAAC,GAAG,WAAW,oBAAoB,CAAC,CAAC;QAC1C,MAAM;aACH,IAAI,CAAC,2BAA2B,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;aAC1D,EAAE,CAAC,GAAG,WAAW,yBAAyB,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,oBAAoB,CAAC,CAAC;QAC5F,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,mBAAmB,CAAC,CAAC;QACnF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,uBAAuB,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,2BAA2B,CAAC,CAAC;QAC9F,MAAM;aACH,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;aAClC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;aAC7B,EAAE,CAAC,GAAG,WAAW,iBAAiB,CAAC,CAAC;QACvC,MAAM;aACH,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;aAC/B,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC;aAC7B,EAAE,CAAC,GAAG,WAAW,kBAAkB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,GAAG,CAAC;AACX,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,27 @@
+import { ResourceRegistry, type DataAdapter, type PanelConfig } from '@shamar/core';
+import { type ShamarConfig } from './config.js';
+import { type Authorizer } from '@shamar/cherubim';
+export interface PanelRuntime {
+    id: string;
+    path: string;
+    config: PanelConfig;
+    registry: ResourceRegistry;
+    adapter: DataAdapter;
+}
+export interface ShamarRuntime {
+    config: ShamarConfig & {
+        panels: PanelConfig[];
+    };
+    authorizer: Authorizer;
+    /** @deprecated First panel registry — prefer `panels`. */
+    registry: ResourceRegistry;
+    /** @deprecated First panel adapter — prefer `panels`. */
+    adapter: DataAdapter;
+    panels: PanelRuntime[];
+    panel(id: string): PanelRuntime;
+    panelByPath(pathname: string): PanelRuntime | undefined;
+}
+export declare function createShamarRuntime(config: ShamarConfig, options?: {
+    appRoot?: string;
+}): Promise<ShamarRuntime>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,EAEjB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAgB,KAAK,YAAY,EAAkB,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,GAAG;QAAE,MAAM,EAAE,WAAW,EAAE,CAAA;KAAE,CAAC;IACjD,UAAU,EAAE,UAAU,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,yDAAyD;IACzD,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,CAAC;IAChC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;CACzD;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,OAAO,CAAC,aAAa,CAAC,CAoDxB"}

package/dist/runtime.js

@@ -0,0 +1,74 @@
+import { ResourceRegistry, } from '@shamar/core';
+import { createLucidAdapter } from '@shamar/lucid';
+import { createMongooseAdapter } from '@shamar/mongoose';
+import { defineConfig } from './config.js';
+import { createAuthorizer } from './shamar/auth.js';
+import { PolicyRegistry } from '@shamar/cherubim';
+import { discoverResources } from './discover.js';
+export async function createShamarRuntime(config, options = {}) {
+    const resolved = defineConfig(config);
+    const policyRegistry = new PolicyRegistry();
+    if (resolved.auth?.policies) {
+        policyRegistry.registerMany(resolved.auth.policies);
+    }
+    const authorizer = createAuthorizer(resolved, policyRegistry);
+    const panels = [];
+    for (const panelConfig of resolved.panels) {
+        let resources = [...panelConfig.resources];
+        if (panelConfig.discover && options.appRoot) {
+            const discovered = await discoverResources(options.appRoot, panelConfig.discover);
+            resources = mergeResources(resources, discovered);
+        }
+        const panelResolved = { ...panelConfig, resources };
+        policyRegistry.registerResources(resources);
+        panels.push({
+            id: panelResolved.id,
+            path: panelResolved.path,
+            config: panelResolved,
+            registry: new ResourceRegistry(resources),
+            adapter: resolveAdapter(resolved, panelResolved),
+        });
+    }
+    if (panels.length === 0) {
+        throw new Error('Shamar config must define at least one panel');
+    }
+    const first = panels[0];
+    return {
+        config: resolved,
+        authorizer,
+        registry: first.registry,
+        adapter: first.adapter,
+        panels,
+        panel(id) {
+            const found = panels.find((p) => p.id === id);
+            if (!found)
+                throw new Error(`Unknown Shamar panel "${id}"`);
+            return found;
+        },
+        panelByPath(pathname) {
+            const normalized = pathname.replace(/\/+$/, '') || '/';
+            return panels
+                .slice()
+                .sort((a, b) => b.path.length - a.path.length)
+                .find((p) => normalized === p.path || normalized.startsWith(`${p.path}/`));
+        },
+    };
+}
+function mergeResources(explicit, discovered) {
+    const bySlug = new Map();
+    for (const resource of [...discovered, ...explicit]) {
+        bySlug.set(resource.slug, resource);
+    }
+    return [...bySlug.values()];
+}
+function resolveAdapter(config, panel) {
+    if (config.adapter) {
+        return typeof config.adapter === 'function' ? config.adapter() : config.adapter;
+    }
+    const orm = panel.orm ?? config.orm ?? 'lucid';
+    if (orm === 'mongoose') {
+        return createMongooseAdapter();
+    }
+    return createLucidAdapter();
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAIjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAqC,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAmB,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAsBlD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,UAAgC,EAAE;IAElC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1C,IAAI,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,WAAW,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5C,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClF,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,aAAa,GAAgB,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC;QACjE,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,IAAI,gBAAgB,CAAC,SAAS,CAAC;YACzC,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IAEzB,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,UAAU;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM;QACN,KAAK,CAAC,EAAU;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,WAAW,CAAC,QAAgB;YAC1B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;YACvD,OAAO,MAAM;iBACV,KAAK,EAAE;iBACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;iBAC7C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,QAAgC,EAChC,UAAkC;IAElC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,MAAoB,EAAE,KAAkB;IAC9D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAc,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC;IAC1D,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC"}

package/dist/shamar/auth.d.ts

@@ -0,0 +1,30 @@
+import type { ShamarHttpContext } from '../context.js';
+import { Authorizer, ForbiddenError, PolicyRegistry, UnauthorizedError, type AuthorizationContext, type CherubimUser, type ResourceAction } from '@shamar/cherubim';
+import type { ResourceMeta, ResourceRegistry } from '@shamar/core';
+import type { ShamarConfig } from '../config.js';
+export { ForbiddenError, UnauthorizedError };
+/** Whether panel routes should require an authenticated user. */
+export declare function authRequired(config: ShamarConfig): boolean;
+export declare function createAuthorizer(config: ShamarConfig, policies: PolicyRegistry): Authorizer;
+/** Map header credentials / session to a Cherubim principal. */
+export declare function resolveShamarUser(ctx: ShamarHttpContext, config: ShamarConfig): Promise<CherubimUser | null>;
+export declare function buildAuthContext(ctx: ShamarHttpContext, config: ShamarConfig, panelId?: string): Promise<AuthorizationContext>;
+/**
+ * API-prefix requests may require a valid machine gateway key when the
+ * `requireApiKey` middleware is applied to the route (or `auth.apiKeys.protectApi`).
+ *
+ * @deprecated Prefer {@link RequireApiKeyMiddleware} / `protectApi`. Kept for
+ * callers that still pass an explicit API-route flag.
+ */
+export declare function missingRequiredMachineKey(authCtx: AuthorizationContext, config: ShamarConfig, isApiRoute: boolean): boolean;
+export interface ResourcePolicyFlags {
+    create: boolean;
+    update: boolean;
+    delete: boolean;
+}
+export declare function resourcePolicyFlags(authorizer: Authorizer, authCtx: AuthorizationContext, registry: ResourceRegistry, meta: ResourceMeta, record?: Record<string, unknown> | null): ResourcePolicyFlags;
+export declare function canViewResource(authorizer: Authorizer, authCtx: AuthorizationContext, registry: ResourceRegistry, slug: string): boolean;
+export declare function respondUnauthorized(ctx: ShamarHttpContext, config: ShamarConfig, asJson: boolean, message?: string): unknown;
+export declare function respondForbidden(ctx: ShamarHttpContext, message: string, asJson: boolean, fallbackPath: string): unknown;
+export declare function assertResourceAccess(authorizer: Authorizer, authCtx: AuthorizationContext, registry: ResourceRegistry, meta: ResourceMeta, action: ResourceAction, record?: Record<string, unknown>): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/shamar/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/shamar/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,EACd,iBAAiB,EAQjB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AAE7C,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAI1D;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,GAAG,UAAU,CAS3F;AAwHD,gEAAgE;AAChE,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAK9B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,oBAAoB,CAAC,CA0D/B;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,OAAO,GAClB,OAAO,CAIT;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,EAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GACtC,mBAAmB,CAWrB;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,MAAM,GACX,OAAO,CAKT;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,iBAAiB,EACtB,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,OAAO,EACf,OAAO,SAA6B,GACnC,OAAO,CAMT;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,iBAAiB,EACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAOT;AAED,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAIN"}