covara 0.0.1 → 0.6.0

package/dist/ui/admin-auth.js

@@ -0,0 +1,248 @@
+import { getClientIP } from "../server/request.js";
+import { readEnv } from "../server/env.js";
+import { getUser } from "../server/context.js";
+import { UnauthorizedError } from "../resource/error.js";
+const toStringArray = (value) => {
+    if (Array.isArray(value)) {
+        return value.filter((v) => typeof v === "string");
+    }
+    if (typeof value === "string")
+        return [value];
+    return [];
+};
+export const extractUserRoles = (user) => {
+    if (!user)
+        return [];
+    const roles = new Set();
+    for (const role of toStringArray(user.roles))
+        roles.add(role);
+    for (const role of toStringArray(user.role))
+        roles.add(role);
+    const metadata = user.metadata ?? undefined;
+    if (metadata) {
+        for (const role of toStringArray(metadata.roles))
+            roles.add(role);
+        for (const role of toStringArray(metadata.role))
+            roles.add(role);
+    }
+    return [...roles];
+};
+const extractUserPermissions = (user) => {
+    if (!user)
+        return [];
+    const perms = new Set();
+    for (const p of toStringArray(user.permissions))
+        perms.add(p);
+    const metadata = user.metadata ?? undefined;
+    if (metadata) {
+        for (const p of toStringArray(metadata.permissions))
+            perms.add(p);
+    }
+    return [...perms];
+};
+const hasRequiredRole = (userRoles, required) => {
+    const requiredRoles = toStringArray(required);
+    if (requiredRoles.length === 0)
+        return true;
+    return requiredRoles.some((r) => userRoles.includes(r));
+};
+const adminAuditLog = [];
+const MAX_AUDIT_ENTRIES = 1000;
+let auditSink = null;
+export const setAdminAuditSink = (sink) => {
+    auditSink = sink;
+};
+export const logAdminAction = (entry) => {
+    const fullEntry = { ...entry, timestamp: Date.now() };
+    adminAuditLog.unshift(fullEntry);
+    if (adminAuditLog.length > MAX_AUDIT_ENTRIES) {
+        adminAuditLog.pop();
+    }
+    if (auditSink) {
+        try {
+            const result = auditSink(fullEntry);
+            if (result instanceof Promise) {
+                result.catch(() => { });
+            }
+        }
+        catch {
+            // Never let audit-sink failures break the action being audited.
+        }
+    }
+};
+export const getAdminAuditLog = (limit = 100, offset = 0) => {
+    return adminAuditLog.slice(offset, offset + limit);
+};
+export const clearAdminAuditLog = () => {
+    adminAuditLog.length = 0;
+};
+export const detectEnvironment = () => {
+    const env = readEnv("NODE_ENV")?.toLowerCase();
+    if (env === "production")
+        return "production";
+    if (env === "staging")
+        return "staging";
+    return "development";
+};
+const rateLimitStore = new Map();
+export const createAdminAuthMiddleware = (config = {}) => {
+    const mode = config.mode ?? detectEnvironment();
+    return async (c, next) => {
+        const clientIP = getClientIP(c);
+        if (config.allowedIPs && config.allowedIPs.length > 0 && mode === "production") {
+            if (!config.allowedIPs.includes(clientIP)) {
+                return c.json({
+                    type: "/__covara/problems/forbidden",
+                    title: "IP not allowed",
+                    status: 403,
+                    detail: "Your IP address is not in the allowed list",
+                }, 403);
+            }
+        }
+        if (config.rateLimit) {
+            const key = clientIP;
+            const now = Date.now();
+            const entry = rateLimitStore.get(key);
+            if (entry && entry.resetAt > now) {
+                if (entry.count >= config.rateLimit.maxRequests) {
+                    return c.json({
+                        type: "/__covara/problems/rate-limit-exceeded",
+                        title: "Rate limit exceeded",
+                        status: 429,
+                        detail: "Too many admin API requests",
+                    }, 429);
+                }
+                entry.count++;
+            }
+            else {
+                rateLimitStore.set(key, {
+                    count: 1,
+                    resetAt: now + config.rateLimit.windowMs,
+                });
+            }
+        }
+        if (config.auth?.disabled) {
+            if (mode !== "development") {
+                console.warn("[Covara Admin] Auth is disabled in non-development mode. This is a security risk.");
+            }
+            c.set("adminUser", {
+                id: "admin",
+                email: "admin@localhost",
+            });
+            return next();
+        }
+        let adminUser = null;
+        if (config.auth?.apiKey) {
+            const authHeader = c.req.header("authorization");
+            if (authHeader?.startsWith("Bearer ")) {
+                const token = authHeader.slice(7);
+                if (token === config.auth.apiKey) {
+                    adminUser = { id: "api-key", email: "api-key@admin" };
+                }
+            }
+            const apiKeyHeader = c.req.header("x-admin-api-key");
+            if (apiKeyHeader === config.auth.apiKey) {
+                adminUser = { id: "api-key", email: "api-key@admin" };
+            }
+        }
+        const sessionAuthConfigured = config.auth?.useSessionAuth === true ||
+            config.requireRole !== undefined ||
+            config.authorize !== undefined ||
+            config.can !== undefined;
+        if (!adminUser && sessionAuthConfigured) {
+            const user = getUser(c);
+            if (user) {
+                adminUser = {
+                    id: user.id,
+                    email: user.email ?? "unknown",
+                    name: user.name ?? undefined,
+                    roles: extractUserRoles(user),
+                    permissions: extractUserPermissions(user),
+                };
+            }
+        }
+        if (!adminUser && config.auth?.authenticate) {
+            try {
+                adminUser = await config.auth.authenticate(c);
+            }
+            catch {
+                adminUser = null;
+            }
+        }
+        if (!adminUser) {
+            const anyAuthConfigured = config.auth?.apiKey !== undefined ||
+                config.auth?.authenticate !== undefined ||
+                sessionAuthConfigured;
+            if (mode === "development" && !anyAuthConfigured) {
+                c.set("adminUser", {
+                    id: "dev-admin",
+                    email: "dev@localhost",
+                });
+                return next();
+            }
+            return c.json({
+                type: "/__covara/problems/unauthorized",
+                title: "Unauthorized",
+                status: 401,
+                detail: "Admin authentication required",
+            }, 401);
+        }
+        const requiredRole = config.requireRole ?? config.authorization?.requiredRole;
+        if (requiredRole !== undefined) {
+            if (!hasRequiredRole(adminUser.roles ?? [], requiredRole)) {
+                const requiredLabel = toStringArray(requiredRole).join(", ");
+                return c.json({
+                    type: "/__covara/problems/forbidden",
+                    title: "Forbidden",
+                    status: 403,
+                    detail: `Required role: ${requiredLabel}`,
+                }, 403);
+            }
+        }
+        if (config.authorization?.requiredPermission && adminUser.permissions) {
+            if (!adminUser.permissions.includes(config.authorization.requiredPermission)) {
+                return c.json({
+                    type: "/__covara/problems/forbidden",
+                    title: "Forbidden",
+                    status: 403,
+                    detail: `Required permission: ${config.authorization.requiredPermission}`,
+                }, 403);
+            }
+        }
+        if (config.authorization?.authorize) {
+            const authorized = await config.authorization.authorize(adminUser);
+            if (!authorized) {
+                return c.json({
+                    type: "/__covara/problems/forbidden",
+                    title: "Forbidden",
+                    status: 403,
+                    detail: "Authorization check failed",
+                }, 403);
+            }
+        }
+        if (config.authorize) {
+            const authorized = await config.authorize(adminUser, c);
+            if (!authorized) {
+                return c.json({
+                    type: "/__covara/problems/forbidden",
+                    title: "Forbidden",
+                    status: 403,
+                    detail: "Authorization check failed",
+                }, 403);
+            }
+        }
+        c.set("adminUser", adminUser);
+        return next();
+    };
+};
+export const getAdminUser = (c) => {
+    return c.get("adminUser") ?? null;
+};
+export const requireAdminUser = (c) => {
+    const user = getAdminUser(c);
+    if (!user) {
+        throw new UnauthorizedError("Admin user not found in request");
+    }
+    return user;
+};
+//# sourceMappingURL=admin-auth.js.map

package/dist/ui/admin-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.js","sourceRoot":"","sources":["../../src/ui/admin-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AA6DrD,MAAM,aAAa,GAAG,CAAC,KAAc,EAAY,EAAE;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAIb,EAAY,EAAE;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,IAGZ,EAAY,EAAE;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,SAAmB,EACnB,QAA2B,EAClB,EAAE;IACX,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC,CAAC;AAeF,MAAM,aAAa,GAAsB,EAAE,CAAC;AAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,IAAI,SAAS,GAA8D,IAAI,CAAC;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAA+D,EACzD,EAAE;IACR,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAyC,EAAQ,EAAE;IAChF,MAAM,SAAS,GAAoB,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,aAAa,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QAC7C,aAAa,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,QAAgB,GAAG,EACnB,SAAiB,CAAC,EACC,EAAE;IACrB,OAAO,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAS,EAAE;IAC3C,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAoB,EAAE;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC/C,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8C,CAAC;AAE7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,SAA8B,EAAE,EACb,EAAE;IACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAEhD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAEhC,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/E,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,gBAAgB;oBACvB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,4CAA4C;iBACrD,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,QAAQ,CAAC;YACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEtC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBAChD,OAAO,CAAC,CAAC,IAAI,CACX;wBACE,IAAI,EAAE,wCAAwC;wBAC9C,KAAK,EAAE,qBAAqB;wBAC5B,MAAM,EAAE,GAAG;wBACX,MAAM,EAAE,6BAA6B;qBACtC,EACD,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE;oBACtB,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ;iBACzC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CACV,mFAAmF,CACpF,CAAC;YACJ,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE;gBACjB,EAAE,EAAE,OAAO;gBACX,KAAK,EAAE,iBAAiB;aACzB,CAAC,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,SAAS,GAAqB,IAAI,CAAC;QAEvC,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACxB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACjD,IAAI,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,KAAK,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjC,SAAS,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACrD,IAAI,YAAY,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACxC,SAAS,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;YACxD,CAAC;QACH,CAAC;QAED,MAAM,qBAAqB,GACzB,MAAM,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI;YACpC,MAAM,CAAC,WAAW,KAAK,SAAS;YAChC,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC;QAE3B,IAAI,CAAC,SAAS,IAAI,qBAAqB,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,GAAG;oBACV,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;oBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;oBAC5B,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC;oBAC7B,WAAW,EAAE,sBAAsB,CAAC,IAAI,CAAC;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,iBAAiB,GACrB,MAAM,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS;gBACjC,MAAM,CAAC,IAAI,EAAE,YAAY,KAAK,SAAS;gBACvC,qBAAqB,CAAC;YAExB,IAAI,IAAI,KAAK,aAAa,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACjD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE;oBACjB,EAAE,EAAE,WAAW;oBACf,KAAK,EAAE,eAAe;iBACvB,CAAC,CAAC;gBACH,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,IAAI,EAAE,iCAAiC;gBACvC,KAAK,EAAE,cAAc;gBACrB,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,+BAA+B;aACxC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC;QAC9E,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,aAAa,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7D,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,kBAAkB,aAAa,EAAE;iBAC1C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,kBAAkB,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACtE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC7E,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,wBAAwB,MAAM,CAAC,aAAa,CAAC,kBAAkB,EAAE;iBAC1E,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,4BAA4B;iBACrC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,IAAI,EAAE,8BAA8B;oBACpC,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,4BAA4B;iBACrC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAU,EAAoB,EAAE;IAC3D,OAAO,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAa,EAAE;IACxD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/ui/data-explorer.d.ts

@@ -0,0 +1,11 @@
+import { Hono } from "hono";
+import { AdminSecurityConfig } from "./admin-auth.js";
+export interface DataExplorerConfig {
+    enabled?: boolean;
+    resources?: string[];
+    excludeFields?: Record<string, string[]>;
+    maxLimit?: number;
+    readOnly?: boolean;
+}
+export declare const createDataExplorerRoutes: (config?: DataExplorerConfig, securityConfig?: AdminSecurityConfig) => Hono;
+//# sourceMappingURL=data-explorer.d.ts.map

package/dist/ui/data-explorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-explorer.d.ts","sourceRoot":"","sources":["../../src/ui/data-explorer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAc5B,OAAO,EAIL,mBAAmB,EAEpB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAkBD,eAAO,MAAM,wBAAwB,GACnC,SAAQ,kBAAuB,EAC/B,iBAAgB,mBAAwB,KACvC,IA2hBF,CAAC"}