@ultimat3/admin 30.8.0 → 31.0.0

package/src/index.ts

@@ -2,13 +2,10 @@
 // Explicit exports only — a barrel that re-exports everything is how internal helpers become
 // someone's dependency.
 
-export { AdminActionForm, type AdminActionFormProps } from './action-form';
 export {
-  ACTION_NOT_APPLICABLE_REASON,
   type ActionGateInput,
   type AdminActionButton,
   actionButtons,
-  actionDecisions,
   adminPermissionForAction,
   decideAction,
   type InvokeInput,
@@ -16,30 +13,9 @@ export {
   invokeAdminAction,
   permissionsForAction,
 } from './action-gate';
-export {
-  ACTION_INPUT_PREFIX,
-  type ActionInputControl,
-  type ActionInputField,
-  actionInputFields,
-  decodeActionInput,
-} from './action-input';
 export { invokeRowAction, type RowActionInput } from './action-row';
-export {
-  ACTION_OPERATION,
-  ACTION_PARAM,
-  AdminActions,
-  type AdminActionsProps,
-  actionFormHref,
-  BATCH_OPERATION,
-  DELETE_OPERATION,
-  OPERATION_FIELD,
-} from './actions';
-export {
-  type AdminRequestActor,
-  ANONYMOUS_ADMIN_ACTOR,
-  adminActorFrom,
-  requestActor,
-} from './actor';
+export { AdminActions, type AdminActionsProps } from './actions';
+export { adminActorFrom } from './actor';
 export {
   type AdminApp,
   type AdminAuth,
@@ -58,12 +34,9 @@ export {
   type AiPanesOptions,
   type AiRunner,
   aiPanes,
-  type GatewayAdapter,
   runAiPane,
 } from './ai-panes';
 export {
-  AUDIT_PAGE_DEFAULT,
-  AUDIT_PAGE_MAX,
   type AuditCursor,
   type AuditDraft,
   type AuditEntry,
@@ -72,25 +45,15 @@ export {
   type AuditLogOptions,
   type AuditOutcome,
   type AuditQuery,
-  type AuditSink,
   auditCursorOf,
-  auditEntry,
   auditEntryMatches,
   auditWindow,
   deniedDraft,
   diffRows,
   memoryAuditLog,
 } from './audit';
-export {
-  type PostgresAuditLogOptions,
-  postgresAuditLog,
-} from './audit-pg';
-export {
-  type AuditRequest,
-  auditHref,
-  auditRequestOf,
-  HISTORY_PARAM,
-} from './audit-request';
+export { type PostgresAuditLogOptions, postgresAuditLog } from './audit-pg';
+export { type AuditRequest, auditHref, auditRequestOf, HISTORY_PARAM } from './audit-request';
 // The audit table's DDL is `@ultimat3/admin/schema`'s alone — one import path for one statement.
 export {
   type AdminActor,
@@ -100,36 +63,23 @@ export {
   type AdminSubject,
   adminAllowed,
   adminDenied,
-  anonymousAuthz,
   decideAll,
   expandPermissions,
-  isAllowed,
   staticAuthz,
 } from './authz';
 export {
   type AdminBatchAnswer,
   type AdminBatchInput,
   type AdminBatchResult,
-  BATCH_NOT_OFFERED_REASON,
   type BatchEnqueue,
   type BatchRow,
   type BatchRowOutcome,
   type BatchSelection,
-  batchConfirmationToken,
   batchPlan,
   MAX_BATCH_QUEUED_ROWS,
   MAX_BATCH_ROWS,
   runAdminBatch,
 } from './batch';
-export {
-  AdminBatchBar,
-  type AdminBatchBarProps,
-} from './batch-bar';
-export {
-  ADMIN_BATCH_JOB,
-  batchEnqueue,
-} from './batch-job';
-export { BATCH_MATCHING_REASON, matchingConfirmationToken } from './batch-matching';
 export { BATCH_QUEUED_REASON } from './batch-queue';
 export {
   type AdminClaimData,
@@ -151,37 +101,26 @@ export {
   type ListResult,
   permissionsForOperation,
 } from './crud';
-export {
-  type AdminActionDescription,
-  type AdminDescription,
-  type AdminResourceDescription,
-  type AdminRouteDescription,
-  type AdminScopeDescription,
-  type AdminSectionDescription,
-  describeAdmin,
+export type {
+  AdminActionDescription,
+  AdminDescription,
+  AdminResourceDescription,
+  AdminRouteDescription,
+  AdminScopeDescription,
+  AdminSectionDescription,
 } from './describe';
-export {
-  AdminDetail,
-  type AdminDetailProps,
-} from './detail';
-export {
-  type AdminColumnFacts,
-  type AdminColumnReference,
-  adminColumnsOf,
-  adminSealedColumnsOf,
-} from './entity-columns';
+export { AdminDetail, type AdminDetailProps } from './detail';
+export type { AdminColumnFacts, AdminColumnReference } from './entity-columns';
 // The screens only. The sink and its stores are `@ultimat3/admin/error-groups`'s alone: every role
 // installs the sink, and this barrel would carry every admin screen into a worker's graph.
 export { ERRORS_READ, type ErrorGroupsPagesOptions, errorGroupsPages } from './error-groups-pages';
+export type { AdminErrorCode } from './errors';
 // The /_x dashboard is NOT re-exported here — it has its own door, `@ultimat3/admin/dev`, so a
 // host that only mounts the dev panels never loads a production admin component.
 export {
-  ADMIN_ERROR_CODES,
-  ADMIN_ERROR_TITLES,
   AdminActionDuplicateError,
   AdminActionNotApplicableError,
   AdminEntityUnknownError,
-  type AdminErrorCode,
   type AdminErrorParts,
   AdminFieldUnsupportedError,
   AdminFilterInvalidError,
@@ -190,7 +129,6 @@ export {
   AdminPageUnguardedError,
   AdminPolicyMissingError,
   AdminRepoUnboundError,
-  adminErrorFrom,
   DevDashboardInProdError,
   DevSourceUnavailableError,
 } from './errors';
@@ -199,59 +137,21 @@ export {
   type AdminFieldType,
   type AdminFilterKind,
   type AdminWidget,
-  fieldTypeFromColumn,
   filterable,
-  filterKindFor,
   listable,
   searchable,
   sortable,
-  WIDGET_BY_FIELD_TYPE,
-  widgetFor,
 } from './fields';
-export { AdminForm, type AdminFormProps, issueText } from './form';
-export { currencyFieldOf, decodeForm, posted } from './form-decode';
+export { AdminForm, type AdminFormProps } from './form';
+export { posted } from './form-decode';
 export { JOB_MANAGE, JOB_READ } from './jobs/job-actions';
-export { JOB_ENTITY } from './jobs/job-entities';
-export { JOBS_PATH, jobRowScope } from './jobs/job-resources';
+export { jobRowScope } from './jobs/job-resources';
 export { AdminLayout, type AdminLayoutProps, adminActorLabel } from './layout';
 export { AdminList, type AdminListProps } from './list';
-export { type ResourceColumnsInput, resourceColumns } from './list-columns';
-export { AdminFilterBar, type AdminFilterBarProps } from './list-filter-bar';
-export {
-  type AskedFilter,
-  checkedFilter,
-  declaredFilters,
-  FILTER_PREFIX,
-  filterOpsOf,
-  filterParam,
-  knownFilterParams,
-} from './list-filters';
-export {
-  CURSOR_PARAM,
-  type ListLocation,
-  listHref,
-  pageRequestOf,
-  SCOPE_PARAM,
-  SORT_PARAM,
-} from './list-request';
-export {
-  type AdminListRequest,
-  findRow,
-  type ListWhere,
-  listWhere,
-  rowWhere,
-  scopeCounts,
-  scopeNamed,
-} from './list-scope';
-export { AdminScopeTabs, type AdminScopeTabsProps } from './list-scope-tabs';
-export {
-  type AdminMcpActor,
-  type AdminMcpOptions,
-  type AdminToolResult,
-  adminMcp,
-  callAdminTool,
-  type McpInput,
-} from './mcp';
+export { type ListLocation, listHref, pageRequestOf } from './list-request';
+export { type AdminListRequest, findRow, type ListWhere, listWhere } from './list-scope';
+export { type AdminMcpActor, type AdminMcpOptions, adminMcp } from './mcp';
+export { type AdminToolResult, callAdminTool, type McpInput } from './mcp-dispatch';
 export { adminTokenScopes, adminToolScopes } from './mcp-scopes';
 export {
   type AdminMcpTool,
@@ -259,40 +159,21 @@ export {
   type AdminToolKind,
   adminMcpTools,
   adminToolCatalog,
-  adminToolDecisions,
 } from './mcp-tools';
-export {
-  ADMIN_MOUNTS,
-  adminMountAt,
-  adminMounts,
-  clearAdminMounts,
-  registerAdminMount,
-} from './mounts';
-export { adminNav, type NavGroup, type NavItem, type NavOptions, visibleNav } from './nav';
-export { AdminPageDenied, auditRefusal } from './page-guard';
+export { ADMIN_MOUNTS, adminMounts, clearAdminMounts } from './mounts';
+export { type NavGroup, type NavItem, type NavOptions, visibleNav } from './nav';
+export { AdminPageDenied } from './page-guard';
 export {
   type AdminCustomPage,
   type AdminPageComponent,
   type AdminPageProps,
-  pageNavItems,
   pagePermissions,
   pageRoutes,
 } from './pages';
-export {
-  type AdminCursor,
-  type AdminPage,
-  decodeAdminCursor,
-  encodeAdminCursor,
-  fetchPage,
-  listQuery,
-  type PageRequest,
-  pageFrom,
-} from './pagination';
+export { type AdminCursor, type AdminPage, type PageRequest, pageFrom } from './pagination';
 export {
   ADMIN_DESTROY,
-  ADMIN_IMPERSONATE,
   ADMIN_OPERATION_RULES,
-  ADMIN_OPERATIONS,
   ADMIN_PERMISSION_SPEC,
   ADMIN_PERMISSIONS,
   ADMIN_READ,
@@ -300,8 +181,6 @@ export {
   type AdminOperation,
   type AdminPermission,
   type AdminPermissionRule,
-  adminPermissionFor,
-  CONFIRMATION_REQUIRED_REASON,
   confirmationToken,
   entityPermissionFor,
   isDestructive,
@@ -333,64 +212,38 @@ export {
   type AdminSort,
   type AdminTable,
   type AdminTableRead,
-  computedRow,
-  FILTER_OPS,
   type FilterOp,
   type KeysetBound,
-  type RegisteredEntity,
-  type RegisteredTable,
   readField,
   rowId,
 } from './registry';
+export { type AdminRelated, type AdminRelatedList, relatedLists, relatedOf } from './related';
 export {
-  type AdminRelated,
-  type AdminRelatedList,
-  RELATED_PAGE_SIZE,
-  relatedLists,
-  relatedOf,
-} from './related';
-export {
-  type AdminLookupRequest,
-  type AdminLookupResult,
   type AdminOption,
-  adminLookup,
-  LOOKUP_SELECT_MAX,
   labelOf,
   type RelationData,
   type RelationNeed,
   relationDataFor,
-  relationNeeds,
 } from './relations';
-export { ComputedCell, TRUNCATE_AT } from './renderers';
-export { adminEntitiesOf, adminRepoFor, adminTablesOf } from './repo-entity';
-export {
-  type AdminResource,
-  type AdminResourceOptions,
-  adminResource,
-  repoOf,
-  resourceFor,
-} from './resource';
+export { adminEntitiesOf, adminRepoFor } from './repo-entity';
+export { type AdminResource, type AdminResourceOptions, adminResource, repoOf } from './resource';
 export type { AdminFieldOverride } from './resource-fields';
-export {
-  type AdminFormGroupOptions,
-  type AdminSection,
-  type AdminSectionOptions,
-  DEFAULT_SECTION_KEY,
+export type {
+  AdminFormGroupOptions,
+  AdminSection,
+  AdminSectionOptions,
 } from './resource-layout';
-export {
-  ADMIN_RENDERERS,
-  type AdminColumnComponent,
-  type AdminColumnRenderProps,
-  type AdminComputedColumn,
-  type AdminComputedColumnOptions,
-  type AdminRenderer,
-  type AdminRowScope,
-  type AdminScope,
-  type AdminScopeOptions,
-  type AdminScopeWhere,
-  LOOKUP_SEGMENT,
+export type {
+  AdminColumnComponent,
+  AdminColumnRenderProps,
+  AdminComputedColumn,
+  AdminComputedColumnOptions,
+  AdminRenderer,
+  AdminRowScope,
+  AdminScope,
+  AdminScopeOptions,
+  AdminScopeWhere,
 } from './resource-list';
-export { AdminViewWriteError, VIEW_OPERATIONS } from './resource-operations';
 export {
   type AdminRouteConfig,
   type AdminRouteMatch,
@@ -399,17 +252,13 @@ export {
   adminRouteMatch,
   adminRoutes,
 } from './routes';
-export { ROW_OUT_OF_SCOPE_REASON } from './row-scope-write';
 export { ROW_CHANGED_REASON, rowVersion, VERSION_FIELD } from './row-version';
 export {
   type AdminRouteRequest,
   type AdminRouteResponse,
   type AdminScreen,
   guardedScreen,
-  lookupHref,
-  widgetContextOf,
 } from './screen-frame';
-export { type OperationDecision, OperationMatrix, operationMatrix } from './screen-home';
 export {
   type AdminSearchHit,
   type AdminSearchInput,
@@ -417,23 +266,12 @@ export {
   adminSearch,
 } from './search';
 export { type AdminTestCtxInput, adminTestCtx } from './test-ctx';
-export {
-  type AdminBranding,
-  adminBranding,
-  defaultBranding,
-  type ThemeAttributes,
-  type ThemeMode,
-  type ThemeTokenRef,
-  themeAttributes,
+export type {
+  AdminBranding,
+  ThemeAttributes,
+  ThemeMode,
+  ThemeTokenRef,
 } from './theme';
 export { type ValidationIssue, type ValidationResult, validateInput } from './validate';
-export {
-  assertMoney,
-  assertZone,
-  type GuardedField,
-  type SelectOption,
-  type WidgetContext,
-  type WidgetProps,
-  widgetProps,
-} from './widget-value';
+export type { SelectOption, WidgetContext, WidgetProps } from './widget-value';
 export { optionLabel, Widget, type WidgetInput } from './widgets';

package/src/jobs/operator.ts

@@ -21,13 +21,13 @@ export function jobsOperator(): JobsOperator {
     throw new DriverUnavailableError({
       driver: 'none',
       cause: 'the jobs dashboard was asked for rows and this process installed no queue',
-      fix: 'run the app through x dev or the container entry, which install the queue — or in a test: setJobDriver(memoryJobDriver())',
+      fix: 'run the app through x dev or the container entry, which install the queue — or in a test: installJobDriver(memoryJobDriver()) from @ultimat3/jobs/adapter',
     });
   }
   if (driver.introspect === undefined) {
     throw new NotImplementedError({
       cause: `the operator surface of the "${driver.name}" jobs driver is not implemented: the driver has no introspect`,
-      fix: 'call setJobDriver(postgresJobDriver()) at boot — the pg and memory drivers implement introspect',
+      fix: 'export const runtime = { jobs: postgresJobDriver() }   # apps/<app>/runtime.ts — or delete that line so the boot installs it; the pg and memory drivers implement introspect',
     });
   }
   return { driver, introspect: driver.introspect };

package/src/layout.tsx

@@ -128,7 +128,7 @@ export function AdminLayout(props: AdminLayoutProps): JSX.Element {
 
         {/* The way out. The admin's route table never points back at the app, so without this an
             operator who opened the dashboard has no link home and edits the URL bar. */}
-        <a class={styles['navLink']} href="/">
+        <a class={styles['navLink']} href={props.app.home ?? '/'}>
           {t('admin.backToApp')}
         </a>
       </aside>

package/src/localized-app.ts

@@ -0,0 +1,29 @@
+// The admin as one request reached it: the same declaration, its links rooted where the request
+// was SERVED — behind an HTTP base path, under a routed locale, or both (`/myapp/es/admin`). Every
+// link, form action and redirect a screen writes starts from `app.basePath` or `app.home`, so this
+// one substitution keeps every click where the operator is instead of dropping the prefix.
+
+import type { AdminApp } from './admin';
+
+/**
+ * `app` itself when it was reached at its declared base path; otherwise a copy whose `basePath` is
+ * the pathname up to and including the declared base (`/myapp/es/admin`) and whose `home` is the
+ * part before it with a trailing slash (`/myapp/es/`). The first match from the left is the mount:
+ * a row id or a page path that repeats the base comes after it. The route table (`routes`) is left
+ * as declared: the host matches on the stripped route path, and the audit names the route.
+ */
+export function adminAppFor(app: AdminApp, url: string): AdminApp {
+  const segments = (URL.parse(url, 'http://localhost')?.pathname ?? '').split('/').slice(1);
+  const base = app.basePath.split('/').filter((segment) => segment !== '');
+  for (let at = 0; at + base.length <= segments.length; at += 1) {
+    if (!base.every((segment, i) => segments[at + i] === segment)) continue;
+    if (at === 0) return app;
+    const served = segments.slice(0, at);
+    return {
+      ...app,
+      basePath: `/${[...served, ...base].join('/')}`,
+      home: `/${served.join('/')}/`,
+    };
+  }
+  return app;
+}