@vertebr/admin 0.8.1 → 0.10.0

package/dist/runtime/api/health.d.ts

@@ -0,0 +1,7 @@
+import type { AdminState } from "../services/state";
+export declare function healthHandler(state: AdminState, request: unknown): Promise<{
+    ok: boolean;
+    environment: string;
+    checks: import("../types").HealthCheck[];
+}>;
+//# sourceMappingURL=health.d.ts.map

package/dist/runtime/api/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/health.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,wBAAsB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;;;;GAatE"}

package/dist/runtime/api/health.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.healthHandler = healthHandler;
+const errors_1 = require("../errors");
+const access_1 = require("../services/access");
+const environment_1 = require("../services/environment");
+async function healthHandler(state, request) {
+    return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "health.read");
+        if (!state.healthDef) {
+            throw new errors_1.VertebrNotFoundError("Health is not configured");
+        }
+        const checks = await state.healthDef.load(ctx);
+        return {
+            ok: true,
+            environment: ctx.env,
+            checks,
+        };
+    });
+}
+//# sourceMappingURL=health.js.map

package/dist/runtime/api/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../src/runtime/api/health.ts"],"names":[],"mappings":";;AAKA,sCAaC;AAlBD,sCAAiD;AACjD,+CAAsD;AACtD,yDAAyD;AAGlD,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,OAAgB;IACrE,OAAO,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,IAAA,yBAAgB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,6BAAoB,CAAC,0BAA0B,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,MAAM;SACP,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/api/jobs.d.ts

@@ -0,0 +1,12 @@
+import type { AdminState } from "../services/state";
+export declare function listJobsHandler(state: AdminState, request: unknown): Promise<{
+    ok: boolean;
+    environment: string;
+    items: import("../types").Job[];
+}>;
+export declare function getJobHandler(state: AdminState, request: unknown): Promise<{
+    ok: boolean;
+    environment: string;
+    job: import("../types").Job;
+}>;
+//# sourceMappingURL=jobs.d.ts.map

package/dist/runtime/api/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/jobs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;;;;GASxE;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;;;;GAYtE"}

package/dist/runtime/api/jobs.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listJobsHandler = listJobsHandler;
+exports.getJobHandler = getJobHandler;
+const errors_1 = require("../errors");
+const access_1 = require("../services/access");
+const environment_1 = require("../services/environment");
+const request_1 = require("./request");
+async function listJobsHandler(state, request) {
+    return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "jobs.read");
+        if (!state.jobsDef) {
+            throw new errors_1.VertebrNotFoundError("Jobs are not configured");
+        }
+        const items = await state.jobsDef.list(ctx);
+        return { ok: true, environment: ctx.env, items };
+    });
+}
+async function getJobHandler(state, request) {
+    return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "jobs.read");
+        if (!state.jobsDef) {
+            throw new errors_1.VertebrNotFoundError("Jobs are not configured");
+        }
+        const id = (0, request_1.requestParam)(request, "id");
+        if (!id)
+            throw new errors_1.VertebrNotFoundError("Missing job id");
+        const job = await state.jobsDef.get(id, ctx);
+        if (!job)
+            throw new errors_1.VertebrNotFoundError(`Job "${id}" not found`);
+        return { ok: true, environment: ctx.env, job };
+    });
+}
+//# sourceMappingURL=jobs.js.map

package/dist/runtime/api/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../../src/runtime/api/jobs.ts"],"names":[],"mappings":";;AAMA,0CASC;AAED,sCAYC;AA7BD,sCAAiD;AACjD,+CAAsD;AACtD,yDAAyD;AAEzD,uCAAyC;AAElC,KAAK,UAAU,eAAe,CAAC,KAAiB,EAAE,OAAgB;IACvE,OAAO,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,IAAA,yBAAgB,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,6BAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,KAAiB,EAAE,OAAgB;IACrE,OAAO,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,IAAA,yBAAgB,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,6BAAoB,CAAC,yBAAyB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,6BAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,6BAAoB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/api/metrics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/metrics.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;;;;;;;;;;;;;;;;;;GAgCvE"}
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/metrics.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO;;;;;;;;;;;;;;;;;;GAiCvE"}

package/dist/runtime/api/metrics.js

@@ -2,8 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.metricsHandler = metricsHandler;
 const environment_1 = require("../services/environment");
+const access_1 = require("../services/access");
 async function metricsHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "overview.read");
         if (!state.metricsDef) {
             return {
                 ok: true,

package/dist/runtime/api/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/runtime/api/metrics.ts"],"names":[],"mappings":";;AAIA,wCAgCC;AApCD,yDAAyD;AAIlD,KAAK,UAAU,cAAc,CAAC,KAAiB,EAAE,OAAgB;IACtE,OAAO,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,GAAG,CAAC,GAAG;gBACpB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC;gBACE,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,EAAmB;gBAC3B,WAAW,EAAE,SAAS;gBACtB,YAAY,EAAE,SAAS;aACxB;YACH,CAAC,CAAC,MAAM,CAAC;QACX,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,UAAU;YACrC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU;YAC3C,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/runtime/api/metrics.ts"],"names":[],"mappings":";;AAKA,wCAiCC;AAtCD,yDAAyD;AACzD,+CAAsD;AAI/C,KAAK,UAAU,cAAc,CAAC,KAAiB,EAAE,OAAgB;IACtE,OAAO,IAAA,4BAAc,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClD,IAAA,yBAAgB,EAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,GAAG,CAAC,GAAG;gBACpB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,CAAC,CAAC;gBACE,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,EAAmB;gBAC3B,WAAW,EAAE,SAAS;gBACtB,YAAY,EAAE,SAAS;aACxB;YACH,CAAC,CAAC,MAAM,CAAC;QACX,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,IAAI,UAAU;YACrC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU;YAC3C,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;SAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/api/public.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/public.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAiBjB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAoBjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAuBjB"}
+{"version":3,"file":"public.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/public.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAwBjB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAwBjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAwBjB"}

package/dist/runtime/api/public.js

@@ -11,14 +11,17 @@ async function publicControlsHandler(state, request) {
     return (0, environment_1.withPublicEnvContext)(state, request, async (ctx) => {
         const entries = await Promise.all([...state.controlMeta.entries()]
             .filter(([, meta]) => meta.public)
-            .map(async ([id]) => {
+            .map(async ([id, meta]) => {
             const value = await (0, registry_1.readConfigValue)(state, id, ctx.env);
+            if (meta.addon && meta.gatePublic !== false && value.enabled === false) {
+                return null;
+            }
             return [id, value];
         }));
         return {
             ok: true,
             environment: ctx.env,
-            configs: Object.fromEntries(entries),
+            configs: Object.fromEntries(entries.filter((entry) => entry !== null)),
         };
     });
 }
@@ -32,13 +35,17 @@ async function publicConfigHandler(state, request) {
         if (!meta?.public) {
             throw new errors_1.VertebrNotFoundError(`Public control "${id}" not found`);
         }
+        const value = await (0, registry_1.readConfigValue)(state, id, ctx.env);
+        if (meta.addon && meta.gatePublic !== false && value.enabled === false) {
+            throw new errors_1.VertebrNotFoundError(`Public control "${id}" not found`);
+        }
         const config = (0, registry_1.findConfig)(state, id);
         return {
             ok: true,
             id,
             label: config.label,
             environment: ctx.env,
-            value: await (0, registry_1.readConfigValue)(state, id, ctx.env),
+            value,
         };
     });
 }
@@ -53,7 +60,8 @@ async function publicResourceHandler(state, request) {
             throw new errors_1.VertebrNotFoundError(`Public resource "${id}" not found`);
         }
         const listed = resource.list ? await resource.list(ctx) : [];
-        const items = listed.filter((row) => {
+        const rows = Array.isArray(listed) ? listed : listed.items ?? [];
+        const items = rows.filter((row) => {
             if (!row || typeof row !== "object")
                 return false;
             return row.active !== false;

package/dist/runtime/api/public.js.map

@@ -1 +1 @@
-{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../src/runtime/api/public.ts"],"names":[],"mappings":";;AAMA,sDAmBC;AAED,kDAsBC;AAED,sDAyBC;AA5ED,sCAAiD;AACjD,yDAA+D;AAC/D,mDAAiF;AAEjF,uCAAyC;AAElC,KAAK,UAAU,qBAAqB,CACzC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;aACjC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAe,EAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QACF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,qBAAU,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,KAAK,EAAE,MAAM,IAAA,0BAAe,EAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC;SACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,6BAAoB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,uBAAY,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,6BAAoB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAClD,OAAQ,GAA+B,CAAC,MAAM,KAAK,KAAK,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../../src/runtime/api/public.ts"],"names":[],"mappings":";;AAMA,sDA0BC;AAED,kDA0BC;AAED,sDA0BC;AAxFD,sCAAiD;AACjD,yDAA+D;AAC/D,mDAAiF;AAEjF,uCAAyC;AAElC,KAAK,UAAU,qBAAqB,CACzC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;aACjC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE;YACxB,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAe,EAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBACvE,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC;QAC9B,CAAC,CAAC,CACL,CAAC;QACF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAA8C,EAAE,CACnE,KAAK,KAAK,IAAI,CACf,CACF;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAA,0BAAe,EAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACvE,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,qBAAU,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,KAAiB,EACjB,OAAgB;IAEhB,OAAO,IAAA,kCAAoB,EAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,6BAAoB,CAAC,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,uBAAY,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,6BAAoB,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAClD,OAAQ,GAA+B,CAAC,MAAM,KAAK,KAAK,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,WAAW,EAAE,GAAG,CAAC,GAAG;YACpB,KAAK;SACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/api/resources.d.ts

@@ -1,6 +1,18 @@
 import type { FieldSchema, ResourceUploadResult } from "../../schema";
 import type { AdminState } from "../services/state";
 export declare function listResourceHandler(state: AdminState, request: unknown): Promise<{
+    listQuery?: boolean | Record<string, FieldSchema> | undefined;
+    query?: {
+        filters?: Record<string, string> | undefined;
+        cursor?: string | undefined;
+        offset?: number | undefined;
+        limit?: number | undefined;
+        order?: "asc" | "desc" | undefined;
+        sort?: string | undefined;
+        q?: string | undefined;
+    } | undefined;
+    cursor?: string | undefined;
+    total?: number | undefined;
     id: string;
     label: string;
     schema: Record<string, FieldSchema>;
@@ -14,6 +26,11 @@ export declare function listResourceHandler(state: AdminState, request: unknown)
         label: string;
         input?: Record<string, FieldSchema>;
         mail?: boolean;
+        bulk?: boolean;
+    }>;
+    bulkActions: Record<string, {
+        label: string;
+        input?: Record<string, FieldSchema>;
     }>;
     collectionActions: Record<string, {
         label: string;
@@ -65,6 +82,18 @@ export declare function resourceActionHandler(state: AdminState, request: unknow
     environment: string;
     result: unknown;
 }>;
+export declare function bulkActionHandler(state: AdminState, request: unknown): Promise<{
+    ok: boolean;
+    id: string;
+    actionId: string;
+    environment: string;
+    results: {
+        rowId: string;
+        ok: boolean;
+        result?: unknown;
+        error?: string;
+    }[];
+}>;
 export declare function mailPreviewHandler(state: AdminState, request: unknown): Promise<{
     to: string | string[];
     subject: string;

package/dist/runtime/api/resources.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/resources.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EAGX,oBAAoB,EACrB,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAoIpD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;;;;;eA5DP,MAAM;gBAAU,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;eAAS,OAAO;;;eAwCzD,MAAM;kBAAY,MAAM;gBAAU,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;;;;GAyCzE;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;GAajB;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAuBjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAgBjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAejB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAejB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;GAwBjB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;;;;GAqCjB;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAuBjB"}
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../../src/runtime/api/resources.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EAGX,oBAAoB,EACrB,MAAM,cAAc,CAAC;AAKtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAqNpD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;eAnGP,MAAM;gBACL,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;eAC5B,OAAO;eACP,OAAO;;;eAqBS,MAAM;gBAAU,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;;;eAuDzD,MAAM;kBAAY,MAAM;gBAAU,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;;;;GAsDzE;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;GAcjB;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAwBjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAiCjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAqCjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;GAgCjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;GAiDjB;AAED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;eA8BL,MAAM;YACT,OAAO;iBACF,OAAO;gBACR,MAAM;;GAqCnB;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;;;;;GAsCjB;AAED,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,OAAO;;;;;;GAsCjB"}

package/dist/runtime/api/resources.js

@@ -7,15 +7,54 @@ exports.updateResourceHandler = updateResourceHandler;
 exports.createResourceHandler = createResourceHandler;
 exports.deleteResourceHandler = deleteResourceHandler;
 exports.resourceActionHandler = resourceActionHandler;
+exports.bulkActionHandler = bulkActionHandler;
 exports.mailPreviewHandler = mailPreviewHandler;
 exports.collectionActionHandler = collectionActionHandler;
 const constants_1 = require("../constants");
 const errors_1 = require("../errors");
+const access_1 = require("../services/access");
+const audit_1 = require("../services/audit");
 const environment_1 = require("../services/environment");
 const registry_1 = require("../services/registry");
 const uploads_1 = require("../utils/uploads");
 const mail_1 = require("../mail");
 const request_1 = require("./request");
+function normalizeListResult(raw) {
+    if (Array.isArray(raw))
+        return { items: raw };
+    return {
+        items: raw.items ?? [],
+        ...(raw.total != null ? { total: raw.total } : {}),
+        ...(raw.cursor ? { cursor: raw.cursor } : {}),
+    };
+}
+function parseListQuery(query) {
+    if (!query)
+        return {};
+    const filters = {};
+    for (const [key, value] of Object.entries(query)) {
+        if (key.startsWith("filter.") || key.startsWith("filters.")) {
+            const field = key.replace(/^filters?\./, "");
+            if (field)
+                filters[field] = value;
+        }
+    }
+    return {
+        ...(query.q ? { q: query.q } : {}),
+        ...(query.sort ? { sort: query.sort } : {}),
+        ...(query.order === "asc" || query.order === "desc"
+            ? { order: query.order }
+            : {}),
+        ...(query.limit && Number.isFinite(Number(query.limit))
+            ? { limit: Number(query.limit) }
+            : {}),
+        ...(query.offset && Number.isFinite(Number(query.offset))
+            ? { offset: Number(query.offset) }
+            : {}),
+        ...(query.cursor ? { cursor: query.cursor } : {}),
+        ...(Object.keys(filters).length ? { filters } : {}),
+    };
+}
 async function runFieldUpload(resource, field, file, ctx) {
     const def = resource.uploads?.[field];
     if (!def) {
@@ -58,18 +97,46 @@ function resolvedActions(state, resource) {
             {
                 label: action.label,
                 input: (0, mail_1.normalizeActionInput)(action.input),
+                ...(action.bulk ? { bulk: true } : {}),
             },
         ]))
         : {};
     return { ...fromMail, ...fromResource };
 }
+function resolvedBulkActions(resource) {
+    const fromBulk = resource.bulkActions
+        ? Object.fromEntries(Object.entries(resource.bulkActions).map(([key, action]) => [
+            key,
+            {
+                label: action.label,
+                input: (0, mail_1.normalizeActionInput)(action.input),
+            },
+        ]))
+        : {};
+    const fromRow = resource.actions
+        ? Object.fromEntries(Object.entries(resource.actions)
+            .filter(([, action]) => action.bulk)
+            .map(([key, action]) => [
+            key,
+            {
+                label: action.label,
+                input: (0, mail_1.normalizeActionInput)(action.input),
+            },
+        ]))
+        : {};
+    return { ...fromRow, ...fromBulk };
+}
 async function loadResourceRow(resource, rowId, ctx) {
-    const row = resource.get
-        ? await resource.get(rowId, ctx)
-        : (await (resource.list?.(ctx) ?? [])).find((item) => String(item.id ?? "") === rowId ||
-            String(item.slug ?? "") === rowId ||
-            String(item.uid ?? "") === rowId ||
-            String(item.email ?? "") === rowId);
+    if (resource.get) {
+        const row = await resource.get(rowId, ctx);
+        return row;
+    }
+    const raw = await (resource.list?.(ctx) ?? []);
+    const items = normalizeListResult(raw).items;
+    const row = items.find((item) => String(item.id ?? "") === rowId ||
+        String(item.slug ?? "") === rowId ||
+        String(item.uid ?? "") === rowId ||
+        String(item.email ?? "") === rowId);
     return row;
 }
 async function resolvedCollectionActions(resource, ctx) {
@@ -88,12 +155,15 @@ async function resolvedCollectionActions(resource, ctx) {
 }
 async function listResourceHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.read");
         const id = (0, request_1.requestParam)(request, "id");
         if (!id) {
             throw new errors_1.VertebrNotFoundError("Missing resource id");
         }
         const resource = (0, registry_1.findResource)(state, id);
-        const items = resource.list ? await resource.list(ctx) : [];
+        const raw = resource.list ? await resource.list(ctx) : [];
+        const { items, total, cursor } = normalizeListResult(raw);
+        const parsedQuery = parseListQuery(ctx.query);
         return {
             id: resource.id,
             label: resource.label,
@@ -101,14 +171,24 @@ async function listResourceHandler(state, request) {
             environment: ctx.env,
             permissions: await resolvedPermissions(resource, ctx),
             actions: resolvedActions(state, resource),
+            bulkActions: resolvedBulkActions(resource),
             collectionActions: await resolvedCollectionActions(resource, ctx),
             uploads: (0, uploads_1.publicUploads)(resource),
             items,
+            ...(total != null ? { total } : {}),
+            ...(cursor ? { cursor } : {}),
+            ...(Object.keys(parsedQuery).length ? { query: parsedQuery } : {}),
+            ...(resource.listQuery != null
+                ? {
+                    listQuery: resource.listQuery === true ? true : resource.listQuery,
+                }
+                : {}),
         };
     });
 }
 async function uploadResourceFileHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.write");
         const id = (0, request_1.requestParam)(request, "id");
         const field = (0, request_1.requestParam)(request, "field");
         if (!id || !field) {
@@ -122,6 +202,7 @@ async function uploadResourceFileHandler(state, request) {
 }
 async function uploadResourceFilesHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.write");
         const id = (0, request_1.requestParam)(request, "id");
         const field = (0, request_1.requestParam)(request, "field");
         if (!id || !field) {
@@ -145,6 +226,7 @@ async function uploadResourceFilesHandler(state, request) {
 }
 async function updateResourceHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.write");
         const id = (0, request_1.requestParam)(request, "id");
         const rowId = (0, request_1.requestParam)(request, "rowId");
         if (!id || !rowId) {
@@ -156,11 +238,28 @@ async function updateResourceHandler(state, request) {
         }
         const value = (0, request_1.requestObjectPayload)(request);
         const item = await resource.update(rowId, value, ctx);
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: "resource.update",
+                targetType: "resource",
+                targetId: `${id}/${rowId}`,
+                summary: `Updated ${resource.label} row ${rowId}`,
+            },
+            event: {
+                type: "resource.written",
+                resourceId: id,
+                rowId,
+                op: "update",
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+            },
+        });
         return { ok: true, id, rowId, environment: ctx.env, item };
     });
 }
 async function createResourceHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.write");
         const id = (0, request_1.requestParam)(request, "id");
         if (!id) {
             throw new errors_1.VertebrNotFoundError("Missing resource id");
@@ -171,11 +270,31 @@ async function createResourceHandler(state, request) {
         }
         const value = (0, request_1.requestObjectPayload)(request);
         const item = await resource.create(value, ctx);
+        const rowId = String(item?.id ??
+            item?.slug ??
+            "");
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: "resource.create",
+                targetType: "resource",
+                targetId: `${id}/${rowId || "new"}`,
+                summary: `Created ${resource.label} row`,
+            },
+            event: {
+                type: "resource.written",
+                resourceId: id,
+                rowId: rowId || "new",
+                op: "create",
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+            },
+        });
         return { ok: true, id, environment: ctx.env, item };
     });
 }
 async function deleteResourceHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.delete");
         const id = (0, request_1.requestParam)(request, "id");
         const rowId = (0, request_1.requestParam)(request, "rowId");
         if (!id || !rowId) {
@@ -186,11 +305,28 @@ async function deleteResourceHandler(state, request) {
             throw new errors_1.VertebrNotFoundError(`Resource "${id}" cannot delete`);
         }
         await resource.remove(rowId, ctx);
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: "resource.delete",
+                targetType: "resource",
+                targetId: `${id}/${rowId}`,
+                summary: `Deleted ${resource.label} row ${rowId}`,
+            },
+            event: {
+                type: "resource.written",
+                resourceId: id,
+                rowId,
+                op: "delete",
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+            },
+        });
         return { ok: true, id, rowId, environment: ctx.env };
     });
 }
 async function resourceActionHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.action");
         const id = (0, request_1.requestParam)(request, "id");
         const rowId = (0, request_1.requestParam)(request, "rowId");
         const actionId = (0, request_1.requestParam)(request, "actionId");
@@ -209,11 +345,99 @@ async function resourceActionHandler(state, request) {
         }
         const input = (0, request_1.requestOptionalObjectPayload)(request);
         const result = await action.run(row, input, ctx);
+        const jobId = result &&
+            typeof result === "object" &&
+            typeof result.jobId === "string"
+            ? result.jobId
+            : undefined;
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: `resource.action.${actionId}`,
+                targetType: "resource",
+                targetId: `${id}/${rowId}`,
+                summary: `Ran ${action.label} on ${rowId}`,
+                ...(jobId ? { meta: { jobId } } : {}),
+            },
+            event: {
+                type: "resource.action",
+                resourceId: id,
+                rowId,
+                actionId,
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+                ...(jobId ? { jobId } : {}),
+            },
+        });
         return { ok: true, id, rowId, actionId, environment: ctx.env, result };
     });
 }
+async function bulkActionHandler(state, request) {
+    return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.action");
+        const id = (0, request_1.requestParam)(request, "id");
+        const actionId = (0, request_1.requestParam)(request, "actionId");
+        if (!id || !actionId) {
+            throw new errors_1.VertebrNotFoundError("Missing resource or action id");
+        }
+        const resource = (0, registry_1.findResource)(state, id);
+        const action = resource.bulkActions?.[actionId] ??
+            (resource.actions?.[actionId]?.bulk
+                ? resource.actions[actionId]
+                : undefined);
+        if (!action) {
+            throw new errors_1.VertebrNotFoundError(`Bulk action "${actionId}" not found`);
+        }
+        const body = (0, request_1.requestObjectPayload)(request);
+        const rowIds = Array.isArray(body.rowIds)
+            ? body.rowIds.map(String)
+            : [];
+        if (!rowIds.length) {
+            throw new errors_1.VertebrBadRequestError("Provide rowIds: string[]");
+        }
+        const input = body.input && typeof body.input === "object"
+            ? body.input
+            : undefined;
+        const results = [];
+        for (const rowId of rowIds) {
+            try {
+                const row = await loadResourceRow(resource, rowId, ctx);
+                if (!row) {
+                    results.push({ rowId, ok: false, error: "Not found" });
+                    continue;
+                }
+                const result = await action.run(row, input, ctx);
+                results.push({ rowId, ok: true, result });
+            }
+            catch (error) {
+                results.push({
+                    rowId,
+                    ok: false,
+                    error: error instanceof Error ? error.message : "Failed",
+                });
+            }
+        }
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: `resource.bulk.${actionId}`,
+                targetType: "resource",
+                targetId: id,
+                summary: `Bulk ${action.label} on ${rowIds.length} rows`,
+                meta: { rowIds },
+            },
+            event: {
+                type: "resource.action",
+                resourceId: id,
+                actionId,
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+            },
+        });
+        return { ok: true, id, actionId, environment: ctx.env, results };
+    });
+}
 async function mailPreviewHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "emails.read");
         const id = (0, request_1.requestParam)(request, "id");
         const rowId = (0, request_1.requestParam)(request, "rowId");
         const templateId = (0, request_1.requestParam)(request, "templateId");
@@ -244,6 +468,7 @@ async function mailPreviewHandler(state, request) {
 }
 async function collectionActionHandler(state, request) {
     return (0, environment_1.withEnvContext)(state, request, async (ctx) => {
+        (0, access_1.assertCapability)(ctx, "resource.action");
         const id = (0, request_1.requestParam)(request, "id");
         const actionId = (0, request_1.requestParam)(request, "actionId");
         if (!id || !actionId) {
@@ -261,6 +486,21 @@ async function collectionActionHandler(state, request) {
         }
         const input = (0, request_1.requestOptionalObjectPayload)(request);
         const result = await action.run(input, ctx);
+        await (0, audit_1.afterMutation)(state, ctx, {
+            audit: {
+                action: `resource.collection.${actionId}`,
+                targetType: "resource",
+                targetId: id,
+                summary: `Ran collection action ${action.label}`,
+            },
+            event: {
+                type: "resource.action",
+                resourceId: id,
+                actionId,
+                env: ctx.env,
+                actor: (0, audit_1.eventActor)(ctx),
+            },
+        });
         return { ok: true, id, actionId, environment: ctx.env, result };
     });
 }