adminizer 5.0.0-build.2 → 5.0.0-build.21

package/models/FilterColumn.d.ts

@@ -1,4 +1,4 @@
-import type { Filter } from "./Filter";
+import type { Filter } from "./Filter.js";
 /**
  * FilterColumn interface for TypeScript
  */

package/models/Group.d.ts

@@ -1,8 +1,9 @@
-import type { User } from "./User";
+import type { User } from "./User.js";
+import type { PermissionGrant } from "../interfaces/types.js";
 export interface Group {
     id?: number;
     name: string;
     description?: string;
-    tokens?: string[];
+    tokens?: PermissionGrant[];
     users?: User[];
 }

package/models/HistoryActions.d.ts

@@ -1,4 +1,4 @@
-import type { User } from "./User";
+import type { User } from "./User.js";
 export interface HistoryActions {
     id?: number;
     modelId: number | string;

package/models/MediaManagerAP.d.ts

@@ -1,5 +1,5 @@
-import type { MediaManagerAssociationsAP } from "./MediaManagerAssociationsAP";
-import type { MediaManagerMetaAP } from "./MediaManagerMetaAP";
+import type { MediaManagerAssociationsAP } from "./MediaManagerAssociationsAP.js";
+import type { MediaManagerMetaAP } from "./MediaManagerMetaAP.js";
 export interface MediaManagerAP {
     id: string;
     parent?: MediaManagerAP;

package/models/MediaManagerAssociationsAP.d.ts

@@ -1,4 +1,4 @@
-import type { MediaManagerAP } from "./MediaManagerAP";
+import type { MediaManagerAP } from "./MediaManagerAP.js";
 export interface MediaManagerAssociationsAP {
     id: string;
     mediaManagerId?: string;

package/models/MediaManagerMetaAP.d.ts

@@ -1,4 +1,4 @@
-import type { MediaManagerAP } from "./MediaManagerAP";
+import type { MediaManagerAP } from "./MediaManagerAP.js";
 export interface MediaManagerMetaAP {
     id?: string;
     key?: string;

package/models/User.d.ts

@@ -1,5 +1,5 @@
-import type { WidgetConfig, WidgetsLayouts } from "../lib/widgets/widgetHandler";
-import type { Group } from "./Group";
+import type { WidgetConfig, WidgetsLayouts } from "../lib/widgets/widgetHandler.js";
+import type { Group } from "./Group.js";
 export interface User {
     id?: number;
     login: string;

package/models/UserNotification.d.ts

@@ -1,4 +1,4 @@
-import type { Notification } from "./Notification";
+import type { Notification } from "./Notification.js";
 export interface UserNotification {
     id: number;
     userId: number;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "adminizer",
   "type": "module",
-  "version": "5.0.0-build.2",
+  "version": "5.0.0-build.21",
   "main": "index.js",
   "exports": {
     ".": "./index.js",
@@ -21,7 +21,7 @@
     "dev:typeorm:no-seed": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true ORM=typeorm tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
     "dev:no-seed-clean": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true CLEAN_TMP=true ORM=sequelize tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
     "dev:cors": "cross-env ADMINIZER_ENV=dev NO_SEED_DATA=true ORM=sequelize FRONTEND_URL=http://localhost:8080 tsx watch --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
-    "build:assets": "vite build && vite build --config vite.config.controls.ts && vite build --config fixture/widgets/vite.config.widget.ts",
+    "build:assets": "vite build && vite build --config vite.config.controls.ts && vite build --config vite.config.ai-assistant.ts && vite build --config fixture/widgets/vite.config.widget.ts",
     "build:controls": "vite build --config vite.config.controls.ts",
     "compile:backend": "tsc -p src/tsconfig.json && node ./scripts/appendJsExtension.js",
     "compile:ui": "tsc -p tsconfig.ui.json",
@@ -31,7 +31,8 @@
     "build": "npm run copy:backend && npm run compile:backend && npm run compile:ui && npm run build:assets",
     "build:catalog-modules": "cross-env CATALOG_COMPONENT=catalogAction vite build --config fixture/virtual-catalog/vite.config.module.ts && cross-env CATALOG_COMPONENT=Group vite build --config fixture/virtual-catalog/vite.config.module.ts",
     "start:typeorm:seed": "cross-env ORM=typeorm tsx --tsconfig ./fixture/tsconfig.json ./fixture/index.ts",
-    "build:apps": "vite build --config fixture/apps/notification-sender/vite.config.module.ts && vite build --config fixture/apps/module-manager/vite.config.module.ts && vite build --config fixture/apps/navigation/vite.config.module.ts && vite build --config fixture/apps/quill-editor/vite.config.module.ts && vite build --config fixture/apps/widgets/vite.config.module.ts && vite build --config fixture/apps/handsontable-test/vite.config.module.ts && npm run build:catalog-modules"
+    "build:apps": "vite build --config fixture/apps/notification-sender/vite.config.module.ts && vite build --config fixture/apps/module-manager/vite.config.module.ts && vite build --config fixture/apps/navigation/vite.config.module.ts && vite build --config fixture/apps/quill-editor/vite.config.module.ts && vite build --config fixture/apps/widgets/vite.config.module.ts && vite build --config fixture/apps/handsontable-test/vite.config.module.ts && vite build --config fixture/apps/record-scope-test/vite.config.module.ts && npm run build:catalog-modules",
+    "build:ai-assistant": "vite build --config vite.config.ai-assistant.ts"
   },
   "keywords": [],
   "author": "Siziy Ivan <xziy88@gmail.com>",
@@ -59,41 +60,34 @@
     "jsonwebtoken": "^9.0.3",
     "multer": "^2.1.1",
     "password-hash": "^1.2.2",
+    "serve-static": "^2.2.1",
     "sharp": "^0.33.5",
     "sprintf-js": "^1.1.3",
+    "sqlite3": "^5.1.7",
+    "typeorm": "^0.3.20",
     "uuid": "^14.0.0",
     "winston": "^3.17.0",
     "xlsx": "^0.18.5",
-    "zod": "^4.1.11",
-    "sqlite3": "^5.1.7",
-    "typeorm": "^0.3.20"
+    "zod": "^4.1.11"
   },
   "devDependencies": {
-    "reflect-metadata": "^0.2.2",
-    "react-dnd": "^16.0.1",
-    "react-cropper": "^2.3.3",
-    "material-icons": "^1.13.14",
-    "next-themes": "^0.4.6",
-    "dotenv": "^17.4.2",
-    "date-fns": "^3.6.0",
-    "cmdk": "^1.1.1",
-    "@handsontable/react-wrapper": "^17.0.1",
-    "@minoru/react-dnd-treeview": "^3.5.2",
-    "@radix-ui/react-context-menu": "^2.2.15",
-    "@radix-ui/react-tabs": "^1.1.12",
-    "typescript": "^6.0.3",
+    "@assistant-ui/react": "^0.15.15",
+    "@assistant-ui/react-markdown": "^0.14.6",
     "@babel/plugin-proposal-decorators": "^7.27.1",
     "@ckeditor/ckeditor5-react": "^9.5.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@eslint/compat": "^1.2.9",
     "@faker-js/faker": "^9.7.0",
+    "@handsontable/react-wrapper": "^17.0.1",
     "@inertiajs/react": "^3.0.3",
+    "@minoru/react-dnd-treeview": "^3.5.2",
     "@monaco-editor/react": "^4.7.0",
     "@openai/agents": "^0.3.2",
     "@radix-ui/react-avatar": "^1.1.3",
     "@radix-ui/react-checkbox": "^1.1.4",
     "@radix-ui/react-collapsible": "^1.1.3",
+    "@radix-ui/react-context-menu": "^2.2.15",
     "@radix-ui/react-dialog": "^1.1.7",
     "@radix-ui/react-dropdown-menu": "^2.1.6",
     "@radix-ui/react-label": "^2.1.2",
@@ -105,6 +99,7 @@
     "@radix-ui/react-slider": "^1.2.3",
     "@radix-ui/react-slot": "^1.2.0",
     "@radix-ui/react-switch": "^1.2.4",
+    "@radix-ui/react-tabs": "^1.1.12",
     "@radix-ui/react-tooltip": "^1.1.8",
     "@tailwindcss/vite": "^4.0.15",
     "@tanstack/react-table": "^8.21.2",
@@ -129,10 +124,14 @@
     "@types/uuid": "^10.0.0",
     "@typescript-eslint/eslint-plugin": "^8.32.1",
     "@vitejs/plugin-react": "^5.2.0",
+    "asmcrypto.js": "^0.22.0",
     "ckeditor5": "^45.0.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
     "cross-env": "^7.0.3",
+    "date-fns": "^3.6.0",
+    "dotenv": "^17.4.2",
     "eslint": "^9.26.0",
     "handsontable": "^17.0.1",
     "isomorphic-webcrypto": "^2.3.8",
@@ -141,14 +140,22 @@
     "leaflet-draw": "^1.0.4",
     "lodash-es": "^4.17.21",
     "lucide-react": "^0.485.0",
+    "material-icons": "^1.13.14",
+    "mermaid": "^11.17.0",
+    "next-themes": "^0.4.6",
+    "radix-ui": "^1.6.7",
     "react": "^19.0.0",
+    "react-cropper": "^2.3.3",
     "react-day-picker": "^8.10.1",
+    "react-dnd": "^16.0.1",
     "react-dom": "^19.0.0",
     "react-grid-layout": "^1.5.1",
     "react-intersection-observer": "^9.16.0",
     "react-leaflet": "^5.0.0",
     "react-quill-new": "^3.4.6",
     "react-simple-wysiwyg": "^3.2.2",
+    "reflect-metadata": "^0.2.2",
+    "remark-gfm": "^4.0.1",
     "sequelize": "^6.37.7",
     "sequelize-typescript": "^2.1.6",
     "shelljs": "^0.9.2",
@@ -157,10 +164,12 @@
     "tailwindcss": "^4.0.15",
     "tsx": "^4.21.0",
     "tw-animate-css": "^1.2.5",
+    "typescript": "^6.0.3",
     "vanilla-jsoneditor": "^3.1.1",
     "vite": "^7.3.2",
     "vite-plugin-externals": "^0.6.2",
-    "vitest": "^3.0.7"
+    "vitest": "^3.0.7",
+    "zustand": "^5.0.14"
   },
   "overrides": {
     "@toast-ui/react-editor": {

package/policies/authPolicies.js

@@ -20,7 +20,7 @@ function resolveToken(token, req) {
     return token;
 }
 export function requireAuthEnabled() {
-    return (req, res, next) => {
+    return async (req, res, next) => {
         if (!req.adminizer.config.auth.enable) {
             return res.status(403).json({ error: "Auth is disabled" });
         }
@@ -28,7 +28,7 @@ export function requireAuthEnabled() {
     };
 }
 export function requireAuthUI() {
-    return (req, res, next) => {
+    return async (req, res, next) => {
         if (req.adminizer.config.auth.enable && !req.user) {
             unauthorized(req, res, "ui");
             return;
@@ -64,7 +64,7 @@ export function requireAdmin(options = {}) {
 }
 export function requirePermission(token, options = {}) {
     const mode = options.mode || "api";
-    return (req, res, next) => {
+    return async (req, res, next) => {
         if (!req.adminizer.config.auth.enable) {
             return next();
         }
@@ -73,7 +73,7 @@ export function requirePermission(token, options = {}) {
             return;
         }
         const tokenId = resolveToken(token, req);
-        const hasPermission = req.adminizer.accessRightsHelper.hasPermission(tokenId, req.user);
+        const hasPermission = await req.adminizer.accessRightsHelper.hasPermission(tokenId, req.user);
         if (!hasPermission) {
             forbidden(req, res, mode);
             return;
@@ -83,7 +83,7 @@ export function requirePermission(token, options = {}) {
 }
 export function requireAnyPermission(tokens, options = {}) {
     const mode = options.mode || "api";
-    return (req, res, next) => {
+    return async (req, res, next) => {
         if (!req.adminizer.config.auth.enable) {
             return next();
         }
@@ -94,7 +94,7 @@ export function requireAnyPermission(tokens, options = {}) {
         const tokenIds = tokens
             .map((token) => resolveToken(token, req))
             .filter((token) => Boolean(token));
-        const hasPermission = req.adminizer.accessRightsHelper.enoughPermissions(tokenIds, req.user);
+        const hasPermission = await req.adminizer.accessRightsHelper.enoughPermissions(tokenIds, req.user);
         if (!hasPermission) {
             forbidden(req, res, mode);
             return;

package/policies/permissionResolvers.d.ts

@@ -8,5 +8,6 @@ export declare function widgetsToken(): string;
 export declare function catalogToken(req: ReqType): string | undefined;
 export declare function mediaManagerToken(req: ReqType): string | undefined;
 export declare function aiModelToken(req: ReqType): string | undefined;
+export declare function documentationToken(req: ReqType): string;
 export declare function historyToken(req: ReqType): string;
 export declare function groupFilterVisibilityToken(): string;

package/policies/permissionResolvers.js

@@ -44,6 +44,9 @@ export function aiModelToken(req) {
     const modelId = req.params?.modelId || (typeof req.body?.modelId === "string" ? req.body.modelId : undefined);
     return modelId ? `ai-assistant-${modelId}` : undefined;
 }
+export function documentationToken(req) {
+    return req.adminizer.documentationHandler.baseToken;
+}
 export function historyToken(req) {
     return `history-${req.adminizer.config.history?.adapter ?? "default"}`;
 }

package/services/FeedService.d.ts

@@ -1,6 +1,6 @@
-import { Adminizer } from "../lib/Adminizer";
-import { Filter } from "../models/Filter";
-import { User } from "../models/User";
+import { Adminizer } from "../lib/Adminizer.js";
+import { Filter } from "../models/Filter.js";
+import { User } from "../models/User.js";
 /**
  * Feed export format types
  */

package/system/Router.d.ts

@@ -1,4 +1,4 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default class Router {
     adminizer: Adminizer;
     constructor(adminizer: Adminizer);

package/system/Router.js

@@ -11,6 +11,7 @@ import { getSavedFilters, saveFilter, deleteFilter, applyTemporaryFilter, getTem
 import { getAllUserFilters } from "../controllers/filter-fields/getAllUserFilters.js";
 import { getModelColumns, updateFilterColumns } from "../controllers/filter-fields/columns.js";
 import { getAllGroups } from "../controllers/filter-fields/groups.js";
+import { getPermissionOptions } from "../controllers/access-rights/permissionOptions.js";
 import { ckEditorUpload } from "../controllers/ckeditorUpload.js";
 import _exportData from "../controllers/exportData.js";
 import _feed from "../controllers/feed.js";
@@ -29,9 +30,11 @@ import { Adminizer } from "../lib/Adminizer.js";
 import timezones from "../controllers/timezones.js";
 import { NotificationController } from "../controllers/notifications/NotificationController.js";
 import { HistoryController } from "../controllers/history-actions/HistoryController.js";
+import { AiAssistantController } from "../controllers/ai/AiAssistantController.js";
+import { AiAgentController } from "../controllers/ai/AiAgentController.js";
 import listUserFilters from "../controllers/listUserFilters.js";
 import { requireAnyPermission, requireAuthAPI, requireAuthEnabled, requireAuthUI, requirePermission } from "../policies/authPolicies.js";
-import { catalogToken, groupFilterVisibilityToken, historyToken, mediaManagerToken, modelCreateToken, modelDeleteToken, modelReadToken, modelUpdateToken, widgetToken, widgetsToken } from "../policies/permissionResolvers.js";
+import { aiModelToken, catalogToken, groupFilterVisibilityToken, historyToken, mediaManagerToken, modelCreateToken, modelDeleteToken, modelReadToken, modelUpdateToken, widgetToken, widgetsToken } from "../policies/permissionResolvers.js";
 import { bindWithMiddlewares } from "./routePolicies.js";
 export default class Router {
     adminizer;
@@ -69,6 +72,7 @@ export default class Router {
         const noCachePrefixes = [
             '/api',
             '/notifications/api',
+            '/docs/api',
             '/history',
             '/widgets-get-all',
             '/widgets-get-all-db',
@@ -166,6 +170,7 @@ export default class Router {
         /**
          * List of records
          */
+        adminizer.app.get(`${adminizer.config.routePrefix}/access-rights/permission-options`, withPolicies(getPermissionOptions, requireAuthAPI(), requireAnyPermission(["create-Group-model", "update-Group-model"])));
         adminizer.app.all(resourceRoute(), withPolicies(_list, requireAuthUI(), requirePermission(modelReadToken, { mode: "ui" })));
         if (adminizer.config.filters?.enabled) {
             /**
@@ -217,6 +222,27 @@ export default class Router {
          */
         adminizer.app.get(`${adminizer.config.routePrefix}/api/user-key`, withPolicies(getUserApiKey, requireAuthEnabled(), requireAuthAPI()));
         adminizer.app.post(`${adminizer.config.routePrefix}/api/user-key/regenerate`, withPolicies(regenerateUserApiKey, requireAuthEnabled(), requireAuthAPI()));
+        /**
+         * AI assistant — consumed by src/assets/js/contexts/AiAssistantContext.tsx
+         */
+        adminizer.app.get(`${adminizer.config.routePrefix}/api/ai-assistant/models`, withPolicies(AiAssistantController.getModels, requireAuthAPI()));
+        /**
+         * Streaming agent transport — consumed by the assistant panel bundle
+         * (src/assets/js/ai-assistant). Model services that implement only
+         * `generateReply` are served through the same routes.
+         */
+        const agentRoute = `${adminizer.config.routePrefix}/api/ai-assistant/agent/:modelId`;
+        adminizer.app.get(`${agentRoute}/status`, withPolicies(AiAgentController.getStatus, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.get(`${agentRoute}/limits`, withPolicies(AiAgentController.getLimits, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.get(`${agentRoute}/meta`, withPolicies(AiAgentController.getMeta, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.post(`${agentRoute}/model`, withPolicies(AiAgentController.setModel, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.get(`${agentRoute}/history`, withPolicies(AiAgentController.getHistory, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.get(`${agentRoute}/conversations`, withPolicies(AiAgentController.listConversations, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.post(`${agentRoute}/conversations`, withPolicies(AiAgentController.createConversation, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.post(`${agentRoute}/conversations/:conversationId/select`, withPolicies(AiAgentController.selectConversation, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.delete(`${agentRoute}/conversations/:conversationId`, withPolicies(AiAgentController.deleteConversation, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.post(`${agentRoute}/runs`, withPolicies(AiAgentController.startRun, requireAuthAPI(), requirePermission(aiModelToken)));
+        adminizer.app.get(`${agentRoute}/runs/:runId/stream`, withPolicies(AiAgentController.streamRun, requireAuthAPI(), requirePermission(aiModelToken)));
         adminizer.app.get(`${adminizer.config.routePrefix}/get-timezones`, withPolicies(timezones, requireAuthUI()));
         if (adminizer.config.models) {
             for (let model in adminizer.config.models) {

package/system/bindAccessRights.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindAccessRights(adminizer: Adminizer): Promise<void>;

package/system/bindAccessRights.js

@@ -2,10 +2,9 @@ import { GROUP_FILTER_VISIBILITY_TOKEN } from "../policies/permissionResolvers.j
 export default async function bindAccessRights(adminizer) {
     if (adminizer.config.models) {
         let models = adminizer.config.models;
-        for (let key of Object.keys(models)) {
-            const model = models[key];
+        for (const [resourceName, model] of Object.entries(models)) {
             if (typeof model !== "boolean") {
-                adminizer.accessRightsHelper.registerModelTokens(model.model);
+                adminizer.accessRightsHelper.registerModelTokens(resourceName);
             }
         }
     }

package/system/bindAuthorization.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindAuthorization(adminizer: Adminizer): Promise<void>;

package/system/bindControls.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export declare function bindControls(adminizer: Adminizer): void;

package/system/bindCors.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export declare function bindCors(adminizer: Adminizer): void;

package/system/bindCustomFilterHandlers.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindCustomFilterHandlers(adminizer: Adminizer): void;

package/system/bindDashboardWidgets.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from '../lib/Adminizer';
+import { Adminizer } from '../lib/Adminizer.js';
 export default function bindDashboardWidgets(adminizer: Adminizer): Promise<void>;

package/system/bindDev.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindDev(adminizer: Adminizer): void;

package/system/bindDocs.d.ts

@@ -0,0 +1,13 @@
+import { Adminizer } from '../lib/Adminizer.js';
+/**
+ * The single wiring point of the documentation subsystem: the base token, the
+ * navigation entries, the assistant skills and the HTTP routes.
+ *
+ * It is run by `DocumentationHandler.activate()` — at most once, and only when
+ * the feature has both of its switches: `config.documentation.enabled` is
+ * `true` AND an implementation is registered. Either one missing means none of
+ * this exists; the feature is indistinguishable from absent. The implementation
+ * arrives after `init()`, so the routes are mounted late — the same way the
+ * feedback controller is.
+ */
+export default function bindDocs(adminizer: Adminizer): void;

package/system/bindDocs.js

@@ -0,0 +1,77 @@
+import { DOCUMENTATION_DEPARTMENT } from '../lib/docs/DocumentationHandler.js';
+import { buildDocumentationAgentSkills } from '../lib/docs/docsAgentSkills.js';
+import { docsContext, docsDoc, docsKeywords, docsList, docsPage, docsResolve, docsSchema, docsSearch } from '../controllers/docs';
+import { requireAuthAPI, requireAuthUI, requirePermission } from '../policies/authPolicies.js';
+import { documentationToken } from '../policies/permissionResolvers.js';
+import { bindWithMiddlewares } from './routePolicies.js';
+/**
+ * The single wiring point of the documentation subsystem: the base token, the
+ * navigation entries, the assistant skills and the HTTP routes.
+ *
+ * It is run by `DocumentationHandler.activate()` — at most once, and only when
+ * the feature has both of its switches: `config.documentation.enabled` is
+ * `true` AND an implementation is registered. Either one missing means none of
+ * this exists; the feature is indistinguishable from absent. The implementation
+ * arrives after `init()`, so the routes are mounted late — the same way the
+ * feedback controller is.
+ */
+export default function bindDocs(adminizer) {
+    adminizer.accessRightsHelper.registerToken({
+        id: adminizer.documentationHandler.baseToken,
+        name: 'Documentation',
+        description: 'Access to the built-in documentation (knowledge base)',
+        department: DOCUMENTATION_DEPARTMENT,
+    });
+    // The viewer in the navigation, and the per-document page as a template:
+    // the assistant discovers both through `list_admin_navigation` and can
+    // link a user straight to an article.
+    adminizer.adminLinkHandler.add({
+        id: 'documentation',
+        type: 'page',
+        name: 'Documentation',
+        title: 'Documentation',
+        link: `${adminizer.config.routePrefix}/docs`,
+        section: 'Platform',
+        accessRightsToken: adminizer.documentationHandler.baseToken,
+    });
+    adminizer.adminLinkHandler.addTemplate({
+        id: 'documentation-article',
+        title: 'Documentation article',
+        description: 'A single knowledge base article opened in the documentation viewer',
+        template: `${adminizer.config.routePrefix}/docs/:id`,
+        section: 'Platform',
+        accessRightsToken: adminizer.documentationHandler.baseToken,
+        params: [{ name: 'id', description: 'Document id as returned by the documentation skills' }],
+    });
+    // The assistant and the documentation are independent: skills are just
+    // registered; whether an agent picks them up is the assistant's business.
+    for (const skill of buildDocumentationAgentSkills(adminizer)) {
+        adminizer.aiAssistantAgentSkillHandler.add(skill);
+    }
+    /**
+     * HTTP routes — a thin proxy over DocumentationHandler. Mounted routes
+     * cannot be unmounted, so after a runtime `unregister()` the API answers
+     * the same `404` an unknown path gets, not a 500.
+     */
+    const requireDocsService = (req, res, next) => {
+        if (!req.adminizer.documentationHandler.isRegistered()) {
+            return res.status(404).json({ error: req.i18n?.__('Not found') || 'Not found' });
+        }
+        return next();
+    };
+    const middlewares = adminizer.config.middlewares ?? [];
+    const route = (action, ...policies) => bindWithMiddlewares(adminizer, middlewares, action, policies);
+    const prefix = adminizer.config.routePrefix;
+    adminizer.app.get(`${prefix}/docs/api/list`, route(docsList, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/keywords`, route(docsKeywords, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/search`, route(docsSearch, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/context`, route(docsContext, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/doc/:id`, route(docsDoc, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/resolve`, route(docsResolve, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    adminizer.app.get(`${prefix}/docs/api/schema`, route(docsSchema, requireDocsService, requireAuthAPI(), requirePermission(documentationToken)));
+    // The viewer itself; registered after the API so that `/docs/api/...`
+    // never falls into `/docs/:id`. Without a service the page renders an
+    // empty knowledge base — the API behind it answers 404.
+    adminizer.app.get(`${prefix}/docs`, route(docsPage, requireAuthUI(), requirePermission(documentationToken, { mode: 'ui' })));
+    adminizer.app.get(`${prefix}/docs/:id`, route(docsPage, requireAuthUI(), requirePermission(documentationToken, { mode: 'ui' })));
+}

package/system/bindHistory.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindHistory(adminizer: Adminizer): void;

package/system/bindInertia.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export declare function bindInertia(adminizer: Adminizer): void;

package/system/bindInertia.js

@@ -2,8 +2,10 @@ import flash from "../lib/inertia/flash.js";
 import inertia from "../lib/inertia/inertiaAdapter.js";
 import fs from "fs";
 import path from "node:path";
+import { Adminizer } from "../lib/Adminizer.js";
 import { InertiaMenuHelper } from "../helpers/inertiaMenuHelper.js";
 import { getUiTranslations } from "../lib/ui-i18n/getUiTranslations.js";
+import { getAssetVersion } from "../helpers/assetVersionHelper.js";
 import { COMMON_UI_TRANSLATION_KEYS } from "../lib/ui-i18n/uiTranslationKeys.js";
 export function bindInertia(adminizer) {
     const escapeHtmlAttribute = (value) => value
@@ -30,6 +32,10 @@ export function bindInertia(adminizer) {
         }
         return `${adminizer.config.routePrefix}/${customFavicon.replace(/^\/+/, "")}`;
     };
+    // The main bundle is content-hashed and needs no query string; the version
+    // is published to the page for the entries that are *not* hashed, because
+    // they are imported by a hard-coded path (agent.es.js, controls/*).
+    const assetVersion = getAssetVersion();
     const viteRender = () => {
         if (process.env.ADMINIZER_ENV === 'dev') {
             return `
@@ -72,6 +78,9 @@ export function bindInertia(adminizer) {
             }
             // JS resource
             if (entry.file) {
+                // Never append a query here: split chunks import the entry by its
+                // bare name, so `app.js?v=x` and `app.js` become two modules and
+                // the page ends up with two Reacts. The name is hashed instead.
                 const href = `${adminizer.config.routePrefix}/assets/${entry.file}`;
                 preloadLinks.push(`<link rel="modulepreload" href="${href}" as="script">`);
                 scripts.push(`<script type="module" src="${href}"></script>`);
@@ -79,12 +88,14 @@ export function bindInertia(adminizer) {
             // Route prefix script
             const routePrefixScript = `<script>window.routePrefix = "${adminizer.config.routePrefix}";</script>`;
             const bindPublic = `<script>window.bindPublic = ${adminizer.config.bind?.public}</script>`;
+            const versionScript = `<script>window.adminizerVersion = "${assetVersion}";</script>`;
             return `
                 ${preloadLinks.join('\n')}
                 ${stylesheets.join('\n')}
                 ${scripts.join('\n')}
                 ${routePrefixScript}
                 ${bindPublic}
+                ${versionScript}
         `;
         }
     };
@@ -121,7 +132,7 @@ export function bindInertia(adminizer) {
             headerName: 'x-xsrf-token'
         }
     }));
-    adminizer.app.use((req, _, next) => {
+    adminizer.app.use(async (req, _, next) => {
         checkAuth(req, adminizer);
         const defaultLocale = typeof req.adminizer.config.translation !== "boolean"
             ? req.adminizer.config.translation.defaultLocale
@@ -132,6 +143,16 @@ export function bindInertia(adminizer) {
             lang: locale,
         });
         const menuHelper = new InertiaMenuHelper(adminizer);
+        // Contextual documentation of this page: metadata only, and null when
+        // the subsystem is off or the user may not read documentation.
+        // A broken implementation must never take the panel down with it.
+        let docs = null;
+        try {
+            docs = req.user ? await adminizer.documentationHandler.forContextMeta(req.user, req.path) : null;
+        }
+        catch (error) {
+            Adminizer.log.error(`bindInertia > documentation context failed: ${error}`);
+        }
         req.Inertia.shareProps({
             auth: {
                 user: req.session.userPretended ?? req.user
@@ -169,6 +190,7 @@ export function bindInertia(adminizer) {
                     return { text: v, link: null, hint: null };
                 return { text: v.text ?? null, link: v.link ?? null, hint: v.hint ?? null };
             })(),
+            docs,
             showFeedback: req.adminizer.feedbackHandler?.isRegistered() ?? false,
             feedbackTriggerLabel: req.adminizer.feedbackHandler?.getTriggerLabel() ?? null,
             feedbackPlaceholder: req.adminizer.feedbackHandler?.getPlaceholder() ?? null,

package/system/bindMediaManager.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindMediaManager(adminizer: Adminizer): void;

package/system/bindNotifications.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from '../lib/Adminizer';
+import { Adminizer } from '../lib/Adminizer.js';
 export declare function bindNotifications(adminizer: Adminizer): void;

package/system/bindReqFunctions.d.ts

@@ -1,3 +1,3 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export declare function createDeprecatedAdminizerProxy(adminizer: Adminizer, warn?: (message: string) => void): Adminizer;
 export default function bindReqFunctions(adminizer: Adminizer): void;

package/system/bindTranslations.d.ts

@@ -1,2 +1,2 @@
-import { Adminizer } from "../lib/Adminizer";
+import { Adminizer } from "../lib/Adminizer.js";
 export default function bindTranslations(adminizer: Adminizer): void;

package/system/buildInternalModelAccess.d.ts

@@ -1,4 +1,4 @@
-import { AdminpanelConfig } from "../interfaces/adminpanelConfig";
-import { InternalModelAccessMap } from "../interfaces/internalModelAccess";
-import { ModelHandler } from "../lib/model/ModelHandler";
+import { AdminpanelConfig } from "../interfaces/adminpanelConfig.js";
+import { InternalModelAccessMap } from "../interfaces/internalModelAccess.js";
+import { ModelHandler } from "../lib/model/ModelHandler.js";
 export declare function buildInternalModelAccess(config: AdminpanelConfig, modelHandler: ModelHandler): InternalModelAccessMap | undefined;