@vertebr/admin 0.13.0 → 0.14.0

package/dist/index/errors.d.ts

@@ -0,0 +1,17 @@
+export declare class VertebrAuthError extends Error {
+    readonly statusCode = 401;
+    constructor(message?: string);
+}
+export declare class VertebrNotFoundError extends Error {
+    readonly statusCode = 404;
+    constructor(message?: string);
+}
+export declare class VertebrEnvError extends Error {
+    readonly statusCode = 400;
+    constructor(message?: string);
+}
+export declare class VertebrBadRequestError extends Error {
+    readonly statusCode = 400;
+    constructor(message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/index/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/index/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,UAAU,OAAO;gBACd,OAAO,SAAiB;CAIrC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,UAAU,OAAO;gBACd,OAAO,SAAc;CAIlC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,UAAU,OAAO;gBACd,OAAO,SAAwB;CAI5C;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,UAAU,OAAO;gBACd,OAAO,SAAgB;CAIpC"}

package/dist/index/errors.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VertebrBadRequestError = exports.VertebrEnvError = exports.VertebrNotFoundError = exports.VertebrAuthError = void 0;
+class VertebrAuthError extends Error {
+    statusCode = 401;
+    constructor(message = "Unauthorized") {
+        super(message);
+        this.name = "VertebrAuthError";
+    }
+}
+exports.VertebrAuthError = VertebrAuthError;
+class VertebrNotFoundError extends Error {
+    statusCode = 404;
+    constructor(message = "Not found") {
+        super(message);
+        this.name = "VertebrNotFoundError";
+    }
+}
+exports.VertebrNotFoundError = VertebrNotFoundError;
+class VertebrEnvError extends Error {
+    statusCode = 400;
+    constructor(message = "Invalid environment") {
+        super(message);
+        this.name = "VertebrEnvError";
+    }
+}
+exports.VertebrEnvError = VertebrEnvError;
+class VertebrBadRequestError extends Error {
+    statusCode = 400;
+    constructor(message = "Bad request") {
+        super(message);
+        this.name = "VertebrBadRequestError";
+    }
+}
+exports.VertebrBadRequestError = VertebrBadRequestError;
+//# sourceMappingURL=errors.js.map

package/dist/index/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/index/errors.ts"],"names":[],"mappings":";;;AAAA,MAAa,gBAAiB,SAAQ,KAAK;IAChC,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAY,OAAO,GAAG,cAAc;QAClC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAND,4CAMC;AAED,MAAa,oBAAqB,SAAQ,KAAK;IACpC,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAY,OAAO,GAAG,WAAW;QAC/B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAND,oDAMC;AAED,MAAa,eAAgB,SAAQ,KAAK;IAC/B,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAY,OAAO,GAAG,qBAAqB;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAND,0CAMC;AAED,MAAa,sBAAuB,SAAQ,KAAK;IACtC,UAAU,GAAG,GAAG,CAAC;IAC1B,YAAY,OAAO,GAAG,aAAa;QACjC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAND,wDAMC"}

package/dist/index/services/environment.d.ts

@@ -0,0 +1,8 @@
+import type { HandlerContext } from "../../schema";
+import type { AdminState } from "./state";
+export declare function resolveEnv(state: AdminState, request: unknown): string;
+export declare function assertAuth(state: AdminState, request: unknown, envId: string): Promise<void>;
+export declare function withEnvContext<T>(state: AdminState, request: unknown, run: (ctx: HandlerContext) => Promise<T> | T): Promise<T>;
+/** Public storefront reads — resolve env, no auth. */
+export declare function withPublicEnvContext<T>(state: AdminState, request: unknown, run: (ctx: HandlerContext) => Promise<T> | T): Promise<T>;
+//# sourceMappingURL=environment.d.ts.map

package/dist/index/services/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../../src/index/services/environment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CActE;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAsB,cAAc,CAAC,CAAC,EACpC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CASZ;AAED,sDAAsD;AACtD,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAQZ"}

package/dist/index/services/environment.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEnv = resolveEnv;
+exports.assertAuth = assertAuth;
+exports.withEnvContext = withEnvContext;
+exports.withPublicEnvContext = withPublicEnvContext;
+const constants_1 = require("../constants");
+const errors_1 = require("../errors");
+const auth_1 = require("../utils/auth");
+const http_1 = require("../utils/http");
+function resolveEnv(state, request) {
+    const headers = request.headers;
+    const header = (0, http_1.headerValue)(headers, constants_1.VERTEBR_ENV_HEADER);
+    const env = (header ?? state.defaultEnvironment).trim();
+    if (!state.environments.some((item) => item.id === env)) {
+        throw new errors_1.VertebrEnvError(`Unknown environment "${env}". Expected one of: ${state.environments
+            .map((item) => item.id)
+            .join(", ")}`);
+    }
+    return env;
+}
+async function assertAuth(state, request, envId) {
+    const environment = state.environments.find((item) => item.id === envId);
+    if (!environment) {
+        throw new errors_1.VertebrEnvError(`Unknown environment "${envId}"`);
+    }
+    const user = state.options.auth.getUser
+        ? await state.options.auth.getUser(request)
+        : null;
+    const envAuth = environment.auth;
+    if (envAuth?.required) {
+        if (!user) {
+            throw new errors_1.VertebrAuthError("Sign in required for this environment");
+        }
+        if (envAuth.claimKey) {
+            const expected = envAuth.claimIncludes ?? environment.id;
+            if (!(0, auth_1.claimSatisfied)(user.claims, envAuth.claimKey, expected)) {
+                throw new errors_1.VertebrAuthError(`Missing claim ${envAuth.claimKey}=${expected} for environment "${environment.id}"`);
+            }
+        }
+        if (envAuth.roles?.length) {
+            const roles = user.roles ?? [];
+            const ok = envAuth.roles.some((role) => roles.includes(role));
+            if (!ok) {
+                throw new errors_1.VertebrAuthError(`Requires one of roles: ${envAuth.roles.join(", ")}`);
+            }
+        }
+    }
+    const allowed = await state.options.auth.check(request, {
+        env: envId,
+        user,
+        environment,
+    });
+    if (!allowed) {
+        throw new errors_1.VertebrAuthError();
+    }
+}
+async function withEnvContext(state, request, run) {
+    const env = resolveEnv(state, request);
+    await assertAuth(state, request, env);
+    const ctx = { env, request };
+    const execute = () => Promise.resolve(run(ctx));
+    if (state.options.onEnvironment) {
+        return state.options.onEnvironment(env, execute);
+    }
+    return execute();
+}
+/** Public storefront reads — resolve env, no auth. */
+async function withPublicEnvContext(state, request, run) {
+    const env = resolveEnv(state, request);
+    const ctx = { env, request };
+    const execute = () => Promise.resolve(run(ctx));
+    if (state.options.onEnvironment) {
+        return state.options.onEnvironment(env, execute);
+    }
+    return execute();
+}
+//# sourceMappingURL=environment.js.map

package/dist/index/services/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../src/index/services/environment.ts"],"names":[],"mappings":";;AAOA,gCAcC;AAED,gCA8CC;AAED,wCAaC;AAGD,oDAYC;AAnGD,4CAAkD;AAClD,sCAA8D;AAE9D,wCAA+C;AAC/C,wCAA4C;AAG5C,SAAgB,UAAU,CAAC,KAAiB,EAAE,OAAgB;IAC5D,MAAM,OAAO,GACX,OACD,CAAC,OAAO,CAAC;IACV,MAAM,MAAM,GAAG,IAAA,kBAAW,EAAC,OAAO,EAAE,8BAAkB,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,wBAAe,CACvB,wBAAwB,GAAG,uBAAuB,KAAK,CAAC,YAAY;aACjE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;aACtB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,KAAiB,EACjB,OAAgB,EAChB,KAAa;IAEb,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IACzE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,wBAAe,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO;QACrC,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC;IACjC,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,yBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,yBAAgB,CACxB,iBAAiB,OAAO,CAAC,QAAQ,IAAI,QAAQ,qBAAqB,WAAW,CAAC,EAAE,GAAG,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,yBAAgB,CACxB,0BAA0B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;QACtD,GAAG,EAAE,KAAK;QACV,IAAI;QACJ,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,yBAAgB,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,KAAiB,EACjB,OAAgB,EAChB,GAA4C;IAE5C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAmB,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC;AAED,sDAAsD;AAC/C,KAAK,UAAU,oBAAoB,CACxC,KAAiB,EACjB,OAAgB,EAChB,GAA4C;IAE5C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAmB,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,EAAE,CAAC;AACnB,CAAC"}

package/dist/index/services/registry.d.ts

@@ -0,0 +1,6 @@
+import type { ConfigDefinition, ResourceDefinition } from "../types";
+import type { AdminState } from "./state";
+export declare function findResource(state: AdminState, id: string): ResourceDefinition;
+export declare function findConfig(state: AdminState, id: string): ConfigDefinition;
+export declare function readConfigValue(state: AdminState, id: string, env: string): Promise<Record<string, unknown>>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/index/services/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/index/services/registry.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAErE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,wBAAgB,YAAY,CAC1B,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,GACT,kBAAkB,CAMpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,GAAG,gBAAgB,CAM1E;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAWlC"}

package/dist/index/services/registry.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.findResource = findResource;
+exports.findConfig = findConfig;
+exports.readConfigValue = readConfigValue;
+const store_1 = require("../../store");
+const errors_1 = require("../errors");
+const config_1 = require("../utils/config");
+function findResource(state, id) {
+    const resource = state.resources.find((item) => item.id === id);
+    if (!resource) {
+        throw new errors_1.VertebrNotFoundError(`Resource "${id}" not found`);
+    }
+    return resource;
+}
+function findConfig(state, id) {
+    const config = state.configs.find((item) => item.id === id);
+    if (!config) {
+        throw new errors_1.VertebrNotFoundError(`Config "${id}" not found`);
+    }
+    return config;
+}
+async function readConfigValue(state, id, env) {
+    const meta = state.controlMeta.get(id);
+    if (meta) {
+        const stored = await meta.store.get(id, env);
+        return (0, store_1.mergeConfigValue)((0, config_1.resolveDefaults)(meta.schema, meta.defaults, env), stored);
+    }
+    const config = findConfig(state, id);
+    return config.get({ env, request: null });
+}
+//# sourceMappingURL=registry.js.map

package/dist/index/services/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/index/services/registry.ts"],"names":[],"mappings":";;AAMA,oCASC;AAED,gCAMC;AAED,0CAeC;AAxCD,uCAA+C;AAC/C,sCAAiD;AAEjD,4CAAkD;AAGlD,SAAgB,YAAY,CAC1B,KAAiB,EACjB,EAAU;IAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,6BAAoB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,UAAU,CAAC,KAAiB,EAAE,EAAU;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,KAAiB,EACjB,EAAU,EACV,GAAW;IAEX,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,IAAA,wBAAgB,EACrB,IAAA,wBAAe,EAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAChD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/index/services/state.d.ts

@@ -0,0 +1,24 @@
+import type { ConfigStore } from "../../store";
+import type { FieldSchema, GalleryDefinition } from "../../schema";
+import type { AdminEnvironment, ConfigDefinition, ControlDefinition, CreateAdminOptions, MetricsDefinition, ResourceDefinition } from "../types";
+export type ControlMeta = {
+    public: boolean;
+    store: ConfigStore;
+    defaults?: ControlDefinition["defaults"];
+    schema: Record<string, FieldSchema>;
+};
+/** Mutable registry used by handlers after `createAdmin()`. */
+export type AdminState = {
+    options: CreateAdminOptions;
+    basePath: string;
+    apiBase: string;
+    resources: ResourceDefinition[];
+    configs: ConfigDefinition[];
+    environments: AdminEnvironment[];
+    defaultEnvironment: string;
+    staticDir: string | undefined;
+    controlMeta: Map<string, ControlMeta>;
+    metricsDef: MetricsDefinition | null;
+    galleryDef: GalleryDefinition | null;
+};
+//# sourceMappingURL=state.d.ts.map

package/dist/index/services/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/index/services/state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACrC,CAAC;AAEF,+DAA+D;AAC/D,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,kBAAkB,EAAE,CAAC;IAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACtC,CAAC"}

package/dist/index/services/state.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=state.js.map

package/dist/index/services/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/index/services/state.ts"],"names":[],"mappings":""}

package/dist/index/types/admin.d.ts

@@ -0,0 +1,77 @@
+import type { GalleryDefinition } from "../../schema";
+import type { AdminAuth, AdminEnvironment } from "./auth";
+import type { ConfigDefinition, ControlDefinition, PageDefinition } from "./config";
+import type { LayoutDefinition } from "./layout";
+import type { MetricsDefinition } from "./metrics";
+import type { ResourceDefinition } from "./resource";
+export type Connector = {
+    id: string;
+    register: (admin: Admin) => void;
+};
+export type CreateAdminOptions = {
+    auth: AdminAuth;
+    basePath?: string;
+    /** Directory of built dashboard SPA (index.html + assets). */
+    staticDir?: string;
+    /**
+     * Environments the owner can switch between.
+     * Omit or pass one entry for single-env apps.
+     */
+    environments?: AdminEnvironment[];
+    /** Fallback when the client sends no env header. */
+    defaultEnvironment?: string;
+    /**
+     * Run resource/config handlers inside host env scope
+     * (Firestore ALS, tenant context, etc.).
+     */
+    onEnvironment?: <T>(env: string, run: () => Promise<T> | T) => Promise<T> | T;
+};
+export type Admin = {
+    resource: <T = unknown>(def: ResourceDefinition<T>) => Admin;
+    config: (def: ConfigDefinition) => Admin;
+    /**
+     * Register a store-backed control (dashboard form + optional public read).
+     * Prefer this over raw `config()` for site flags and copy.
+     */
+    control: (def: ControlDefinition) => Admin;
+    /**
+     * Register page-specific content (appears under Pages in the sidebar).
+     * Equivalent to `control({ ...def, section: "page" })`.
+     */
+    page: (def: PageDefinition) => Admin;
+    /**
+     * Register an owner-reorderable layout (preset + ordered blocks).
+     * Appears under Pages by default; expose with `public: true` for the storefront.
+     */
+    layout: (def: LayoutDefinition) => Admin;
+    /** Register the overview metrics board. */
+    metrics: (def: MetricsDefinition) => Admin;
+    /**
+     * Register a media gallery (sidebar under Resources).
+     * Host lists/uploads/deletes assets; Vertebr renders the UI.
+     */
+    gallery: (def: GalleryDefinition) => Admin;
+    /** Server-side read of a registered config/control (auth not applied). */
+    readConfig: (id: string, env: string) => Promise<Record<string, unknown>>;
+    use: (connector: Connector) => Admin;
+    routes: () => AdminRoute[];
+    hapiRoutes: () => HapiCompatibleRoute[];
+    resources: () => ResourceDefinition[];
+    configs: () => ConfigDefinition[];
+    environments: () => AdminEnvironment[];
+};
+export type AdminRoute = {
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    path: string;
+    handler: (request: unknown) => Promise<unknown> | unknown;
+};
+export type HapiCompatibleRoute = {
+    method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    path: string;
+    options?: {
+        auth?: false | string;
+        [key: string]: any;
+    };
+    handler: (request: unknown, h: unknown) => Promise<unknown> | unknown;
+};
+//# sourceMappingURL=admin.d.ts.map

package/dist/index/types/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../src/index/types/admin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACf,MAAM,UAAU,CAAC;AAClB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAClC,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,CAAC,EAChB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KACtB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,QAAQ,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IAC7D,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC;IACzC;;;OAGG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,KAAK,CAAC;IAC3C;;;OAGG;IACH,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,KAAK,CAAC;IACrC;;;OAGG;IACH,MAAM,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,KAAK,CAAC;IACzC,2CAA2C;IAC3C,OAAO,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,KAAK,CAAC;IAC3C;;;OAGG;IACH,OAAO,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,KAAK,CAAC;IAC3C,0EAA0E;IAC1E,UAAU,EAAE,CACV,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,KAAK,CAAC;IACrC,MAAM,EAAE,MAAM,UAAU,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,mBAAmB,EAAE,CAAC;IACxC,SAAS,EAAE,MAAM,kBAAkB,EAAE,CAAC;IACtC,OAAO,EAAE,MAAM,gBAAgB,EAAE,CAAC;IAClC,YAAY,EAAE,MAAM,gBAAgB,EAAE,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC3D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;QAEtB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACvE,CAAC"}

package/dist/index/types/admin.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=admin.js.map

package/dist/index/types/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../src/index/types/admin.ts"],"names":[],"mappings":""}

package/dist/index/types/auth.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Per-environment auth — adjusted by the host app developer.
+ * Vertebr enforces these after resolving the user via `auth.getUser`.
+ */
+export type EnvironmentAuthConfig = {
+    /** Require a signed-in user for this environment. @default false */
+    required?: boolean;
+    /**
+     * Custom claim key (e.g. `allowedEnvs`).
+     * Array/string claims must include `claimIncludes` (defaults to env id).
+     */
+    claimKey?: string;
+    /** Value required in the claim. Defaults to this environment's id. */
+    claimIncludes?: string;
+    /** If set, user.roles must include at least one of these. */
+    roles?: string[];
+    /**
+     * Public browser auth configuration. Safe Firebase web config only;
+     * never put service-account credentials or secrets here.
+     */
+    client?: {
+        provider: "firebase";
+        config: {
+            apiKey: string;
+            authDomain: string;
+            projectId: string;
+            appId: string;
+            messagingSenderId?: string;
+        };
+        methods?: Array<"email" | "google">;
+    };
+};
+export type AdminEnvironment = {
+    id: string;
+    label: string;
+    /** Optional UI hint — e.g. production = danger. */
+    tone?: "neutral" | "warn" | "danger";
+    /** Auth rules for this environment (developer-configurable). */
+    auth?: EnvironmentAuthConfig;
+};
+/** Public auth summary returned to the dashboard (no secrets). */
+export type EnvironmentAuthPublic = {
+    required: boolean;
+    claimKey?: string;
+    roles?: string[];
+    client?: EnvironmentAuthConfig["client"];
+};
+export type VertebrUser = {
+    uid: string;
+    claims?: Record<string, unknown>;
+    roles?: string[];
+};
+export type AuthContext = {
+    env: string;
+    user: VertebrUser | null;
+    environment: AdminEnvironment;
+};
+export type AdminAuth = {
+    /** Resolve the current user (Firebase token, session, etc.). */
+    getUser?: (request: unknown) => Promise<VertebrUser | null> | VertebrUser | null;
+    /**
+     * Global gate after per-env auth rules.
+     * Return false to deny even when env auth passed.
+     */
+    check: (request: unknown, ctx: AuthContext) => Promise<boolean> | boolean;
+};
+//# sourceMappingURL=auth.d.ts.map

package/dist/index/types/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/index/types/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;OAGG;IACH,MAAM,CAAC,EAAE;QACP,QAAQ,EAAE,UAAU,CAAC;QACrB,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC;YACf,UAAU,EAAE,MAAM,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC;YAClB,KAAK,EAAE,MAAM,CAAC;YACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;QACF,OAAO,CAAC,EAAE,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC;KACrC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,gEAAgE;IAChE,IAAI,CAAC,EAAE,qBAAqB,CAAC;CAC9B,CAAC;AAEF,kEAAkE;AAClE,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,gEAAgE;IAChE,OAAO,CAAC,EAAE,CACR,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC;IACtD;;;OAGG;IACH,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjC,CAAC"}

package/dist/index/types/auth.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=auth.js.map

package/dist/index/types/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/index/types/auth.ts"],"names":[],"mappings":""}

package/dist/index/types/config.d.ts

@@ -0,0 +1,35 @@
+import type { FieldSchema, HandlerContext } from "../../schema";
+import type { ConfigStore } from "../../store";
+/** Sidebar group for configs / controls in the dashboard. */
+export type ConfigSection = "config" | "page";
+export type ConfigDefinition = {
+    id: string;
+    label: string;
+    schema: Record<string, FieldSchema>;
+    /** Sidebar group — use `"page"` for page-specific content. @default "config" */
+    section?: ConfigSection;
+    get: (ctx: HandlerContext) => Promise<Record<string, unknown>> | Record<string, unknown>;
+    set: (value: Record<string, unknown>, ctx: HandlerContext) => Promise<void> | void;
+};
+/**
+ * High-level control registration — store-backed config with optional
+ * public storefront read.
+ */
+export type ControlDefinition = {
+    id: string;
+    label: string;
+    schema: Record<string, FieldSchema>;
+    store: ConfigStore;
+    /** Sidebar group — use `"page"` for page-specific content. @default "config" */
+    section?: ConfigSection;
+    /** When true, exposed via `/api/public/controls` (no auth). */
+    public?: boolean;
+    /**
+     * Defaults merged under stored values.
+     * Schema `default` values are applied first, then this.
+     */
+    defaults?: Record<string, unknown> | ((env: string) => Record<string, unknown>);
+};
+/** Store-backed page content — same as `control()` with `section: "page"`. */
+export type PageDefinition = Omit<ControlDefinition, "section">;
+//# sourceMappingURL=config.d.ts.map

package/dist/index/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/index/types/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,gFAAgF;IAChF,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,GAAG,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzF,GAAG,EAAE,CACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,KAAK,EAAE,WAAW,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,EACL,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvB,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAChD,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC"}

package/dist/index/types/config.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.js.map

package/dist/index/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/index/types/config.ts"],"names":[],"mappings":""}

package/dist/index/types/index.d.ts

@@ -0,0 +1,7 @@
+export type { Admin, AdminRoute, Connector, CreateAdminOptions, HapiCompatibleRoute, } from "./admin";
+export type { AdminAuth, AdminEnvironment, AuthContext, EnvironmentAuthConfig, EnvironmentAuthPublic, VertebrUser, } from "./auth";
+export type { ConfigDefinition, ConfigSection, ControlDefinition, PageDefinition, } from "./config";
+export type { LayoutDefinition, LayoutPreset, LayoutSlot, } from "./layout";
+export type { MetricCard, MetricsDefinition } from "./metrics";
+export type { ResourceAction, ResourceDefinition } from "./resource";
+//# sourceMappingURL=index.d.ts.map

package/dist/index/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,KAAK,EACL,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,GACZ,MAAM,QAAQ,CAAC;AAChB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,GACX,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/index/types/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/index/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index/types/index.ts"],"names":[],"mappings":""}

package/dist/index/types/layout.d.ts

@@ -0,0 +1,27 @@
+import type { ConfigStore } from "../../store";
+import type { ConfigSection } from "./config";
+/** Named slot in a host-rendered page layout. */
+export type LayoutSlot = {
+    id: string;
+    label: string;
+};
+export type LayoutPreset = {
+    id: string;
+    label: string;
+};
+/**
+ * Owner-reorderable page layout. Vertebr stores the recipe; the host
+ * still owns CSS and rendering.
+ */
+export type LayoutDefinition = {
+    id: string;
+    label: string;
+    slots: LayoutSlot[];
+    /** @default slot ids in declaration order */
+    defaultOrder?: string[];
+    presets?: LayoutPreset[];
+    store: ConfigStore;
+    public?: boolean;
+    section?: ConfigSection;
+};
+//# sourceMappingURL=layout.d.ts.map

package/dist/index/types/layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../../src/index/types/layout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,CAAC"}

package/dist/index/types/layout.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=layout.js.map

package/dist/index/types/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../../src/index/types/layout.ts"],"names":[],"mappings":""}

package/dist/index/types/metrics.d.ts

@@ -0,0 +1,15 @@
+import type { HandlerContext } from "../../schema";
+/** Dashboard KPI card returned by `metrics()`. */
+export type MetricCard = {
+    id: string;
+    label: string;
+    value: string | number;
+    hint?: string;
+    tone?: "neutral" | "ok" | "warn" | "danger";
+};
+export type MetricsDefinition = {
+    id?: string;
+    label?: string;
+    load: (ctx: HandlerContext) => Promise<MetricCard[]> | MetricCard[];
+};
+//# sourceMappingURL=metrics.d.ts.map

package/dist/index/types/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/index/types/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC;CACrE,CAAC"}

package/dist/index/types/metrics.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=metrics.js.map

package/dist/index/types/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/index/types/metrics.ts"],"names":[],"mappings":""}

package/dist/index/types/resource.d.ts

@@ -0,0 +1,34 @@
+import type { FieldSchema, FieldType, HandlerContext, ResourceUploadDefinition } from "../../schema";
+export type ResourceAction<T = unknown> = {
+    label: string;
+    input?: Record<string, FieldType>;
+    run: (row: T, input: Record<string, unknown> | undefined, ctx: HandlerContext) => Promise<unknown> | unknown;
+};
+export type ResourceDefinition<T = unknown> = {
+    id: string;
+    label: string;
+    schema: Record<string, FieldSchema>;
+    list?: (ctx: HandlerContext) => Promise<T[]> | T[];
+    get?: (id: string, ctx: HandlerContext) => Promise<T | undefined> | T | undefined;
+    create?: (input: Partial<T>, ctx: HandlerContext) => Promise<T> | T;
+    update?: (id: string, input: Partial<T>, ctx: HandlerContext) => Promise<T> | T;
+    remove?: (id: string, ctx: HandlerContext) => Promise<void> | void;
+    actions?: Record<string, ResourceAction<T>>;
+    /**
+     * Field-keyed upload handlers. Keys must match schema fields
+     * (typically image URL strings).
+     */
+    uploads?: Record<string, ResourceUploadDefinition>;
+    permissions?: {
+        create?: boolean;
+        update?: boolean;
+        delete?: boolean;
+    };
+    /**
+     * When true, storefront can list this resource via
+     * `/api/public/resources/{id}` (no auth). Rows with `active: false`
+     * are omitted.
+     */
+    public?: boolean;
+};
+//# sourceMappingURL=resource.d.ts.map

package/dist/index/types/resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../../src/index/types/resource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,wBAAwB,EACzB,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,OAAO,IAAI;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,GAAG,EAAE,CACH,GAAG,EAAE,CAAC,EACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC1C,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,CAAC,CAAC,GAAG,OAAO,IAAI;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAClF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,CACP,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EACjB,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACnD,WAAW,CAAC,EAAE;QACZ,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC"}

package/dist/index/types/resource.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=resource.js.map

package/dist/index/types/resource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../../src/index/types/resource.ts"],"names":[],"mappings":""}

package/dist/index/utils/auth.d.ts

@@ -0,0 +1,4 @@
+import type { AdminEnvironment, EnvironmentAuthPublic } from "../types";
+export declare function publicAuth(env: AdminEnvironment): EnvironmentAuthPublic;
+export declare function claimSatisfied(claims: Record<string, unknown> | undefined, key: string, expected: string): boolean;
+//# sourceMappingURL=auth.d.ts.map