rastack 0.0.44 → 0.0.45

package/dist/dev/harness.d.ts

@@ -30,6 +30,23 @@ export declare const DEV_DEFAULTS: DevArgs;
  * single positional resources dir. Unknown flags are ignored (forgiving CLI).
  */
 export declare function parseDevArgs(argv: string[]): DevArgs;
+/** Args for `rastack admin` — like `DevArgs`, but bound to a real server port. */
+export interface AdminArgs {
+    resourcesDir: string;
+    outDir: string;
+    warehouseDir: string;
+    /** TCP port the native `rastack-server` binds (the admin lives at `/admin/`). */
+    port: number;
+    open: boolean;
+}
+export declare const ADMIN_DEFAULTS: AdminArgs;
+/**
+ * Parse `rastack admin` args: `--port`, `--warehouse`, `--out`, `--no-open`, and
+ * a single positional resources dir. Mirrors `parseDevArgs` but defaults to the
+ * server's port 8000 (the React admin is served by the native server, not a
+ * node static server).
+ */
+export declare function parseAdminArgs(argv: string[]): AdminArgs;
 /** MIME type for a served path, defaulting to octet-stream (Iceberg data files). */
 export declare function contentType(filePath: string): string;
 /**

package/dist/dev/harness.js

@@ -47,8 +47,9 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WASM_ENTRY = exports.DEV_DEFAULTS = void 0;
+exports.WASM_ENTRY = exports.ADMIN_DEFAULTS = exports.DEV_DEFAULTS = void 0;
 exports.parseDevArgs = parseDevArgs;
+exports.parseAdminArgs = parseAdminArgs;
 exports.contentType = contentType;
 exports.wasmBundleCandidates = wasmBundleCandidates;
 exports.renderShell = renderShell;
@@ -88,6 +89,43 @@ function parseDevArgs(argv) {
         open,
     };
 }
+exports.ADMIN_DEFAULTS = {
+    resourcesDir: "resources",
+    outDir: ".rastack",
+    warehouseDir: "data/warehouse",
+    port: 8000,
+    open: true,
+};
+/**
+ * Parse `rastack admin` args: `--port`, `--warehouse`, `--out`, `--no-open`, and
+ * a single positional resources dir. Mirrors `parseDevArgs` but defaults to the
+ * server's port 8000 (the React admin is served by the native server, not a
+ * node static server).
+ */
+function parseAdminArgs(argv) {
+    const positional = [];
+    let { resourcesDir, outDir, warehouseDir, port, open } = exports.ADMIN_DEFAULTS;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--port")
+            port = Number(argv[++i]) || port;
+        else if (a === "--warehouse")
+            warehouseDir = argv[++i] ?? warehouseDir;
+        else if (a === "--out")
+            outDir = argv[++i] ?? outDir;
+        else if (a === "--no-open")
+            open = false;
+        else if (!a.startsWith("-"))
+            positional.push(a);
+    }
+    return {
+        resourcesDir: positional[0] || resourcesDir,
+        outDir,
+        warehouseDir,
+        port,
+        open,
+    };
+}
 const MIME = {
     ".html": "text/html; charset=utf-8",
     ".js": "text/javascript; charset=utf-8",

package/dist/rastack-admin.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * `rastack admin` — the full, Django-admin-style console, served by the native
+ * `rastack-server` against the real Iceberg warehouse.
+ *
+ *   rastack admin [resourcesDir] [--warehouse <dir>] [--port <n>] [--out <dir>] [--no-open]
+ *
+ * Unlike the old server-rendered `/admin`, the console is React API Stack's own
+ * React admin (`tools/admin`, built from `rastack/components` + `rastack/theme`)
+ * — this command compiles the resources, points the server at the prebuilt
+ * bundle (`RASTACK_ADMIN_ASSETS`), and boots it. The bundle talks back to the
+ * same server's `/api` over HTTP, so edits persist to the real warehouse.
+ */
+export {};

package/dist/rastack-admin.js

@@ -0,0 +1,128 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * `rastack admin` — the full, Django-admin-style console, served by the native
+ * `rastack-server` against the real Iceberg warehouse.
+ *
+ *   rastack admin [resourcesDir] [--warehouse <dir>] [--port <n>] [--out <dir>] [--no-open]
+ *
+ * Unlike the old server-rendered `/admin`, the console is React API Stack's own
+ * React admin (`tools/admin`, built from `rastack/components` + `rastack/theme`)
+ * — this command compiles the resources, points the server at the prebuilt
+ * bundle (`RASTACK_ADMIN_ASSETS`), and boots it. The bundle talks back to the
+ * same server's `/api` over HTTP, so edits persist to the real warehouse.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const harness_1 = require("./dev/harness");
+const HERE = __dirname; // dist/ when installed — the bundle lives beside us.
+/** Compile the resources to schema.rastack.json + openapi.json in outDir. */
+function compile(resourcesDir, outDir) {
+    const compiler = path.join(HERE, "rastack-compile.js");
+    const result = (0, child_process_1.spawnSync)(process.execPath, [compiler, "compile", resourcesDir, outDir], { stdio: "inherit" });
+    if (result.status !== 0)
+        return false;
+    return fs.existsSync(path.join(outDir, "schema.rastack.json"));
+}
+/** Best-effort open the default browser at `url`. */
+function openBrowser(url) {
+    const cmd = process.platform === "darwin"
+        ? "open"
+        : process.platform === "win32"
+            ? "start"
+            : "xdg-open";
+    try {
+        (0, child_process_1.execFileSync)(cmd, [url], { stdio: "ignore" });
+    }
+    catch {
+        /* non-fatal — the URL is printed anyway */
+    }
+}
+function main(argv) {
+    const args = (0, harness_1.parseAdminArgs)(argv);
+    console.log(`\n  rastack admin — the database console, built with React API Stack\n`);
+    console.log(`▸ Compiling ${args.resourcesDir} → ${args.outDir}`);
+    if (!compile(args.resourcesDir, args.outDir)) {
+        console.error("  ✗ compile failed — fix the resource graph and re-run.");
+        process.exit(1);
+    }
+    const bundle = path.join(HERE, "admin.js");
+    if (!fs.existsSync(bundle)) {
+        console.error("  ✗ admin bundle (dist/admin.js) not found — reinstall rastack.");
+        process.exit(1);
+    }
+    const repoRoot = path.resolve(HERE, "..", "..");
+    const binary = process.env.RASTACK_SERVER_BIN ||
+        path.join(repoRoot, "rust", "target", "release", "rastack-server");
+    const manifest = path.join(args.outDir, "schema.rastack.json");
+    const serverArgs = [
+        "admin",
+        "--manifest",
+        manifest,
+        "--warehouse",
+        args.warehouseDir,
+        "--addr",
+        `127.0.0.1:${args.port}`,
+        // Local dev context: the admin runs unauthenticated, exactly like the old
+        // native admin. Production admins run the server with --jwks/--admin-group.
+        "--insecure-dev-auth",
+    ];
+    const url = `http://127.0.0.1:${args.port}/admin/`;
+    // The server serves the React bundle from here; hand the path via env so the
+    // Rust side stays free of JS-toolchain knowledge.
+    const child = (0, child_process_1.spawn)(binary, serverArgs, {
+        stdio: "inherit",
+        env: { ...process.env, RASTACK_ADMIN_ASSETS: HERE },
+    });
+    child.on("error", () => {
+        console.error(`  ✗ Could not run the Rust server (${binary}). Build it first:\n` +
+            `      cd rust && cargo build --release\n`);
+        process.exit(1);
+    });
+    child.on("exit", (code) => process.exit(code ?? 0));
+    // Give the server a moment to bind, then print + open.
+    setTimeout(() => {
+        console.log(`\n  ▸ ${url}\n`);
+        console.log("  Press Ctrl+C to stop.\n");
+        if (args.open)
+            openBrowser(url);
+    }, 700);
+}
+if (require.main === module) {
+    main(process.argv.slice(2));
+}

package/dist/rastack.d.ts

@@ -11,7 +11,7 @@
  *   rastack tokens  [input] [outDir]            Compile design tokens → CSS vars + typed theme
  *   rastack design  [input] [--port n]          Live design-system studio (showcase + edit)
  *   rastack dev     [--port n] [--warehouse d]  Local dev: run the app + admin in-browser over WASM
- *   rastack admin   [--warehouse dir]           Run the Rust admin (Django-admin-style DB browser)
+ *   rastack admin   [--warehouse dir] [--port n] Full admin console — React UI (rastack/components) over the native server
  *   rastack scan   [files...] [--fail-on-pii]   Scan CSVs for PII and schema info
  *   rastack seed   [--env dev] [--source gs://] Load CSVs into Iceberg namespace
  *   rastack bootstrap [--owner o] [--repo r]    Stand the tier-0 AWS account stack up (once per account+region)

package/dist/rastack.js

@@ -12,7 +12,7 @@
  *   rastack tokens  [input] [outDir]            Compile design tokens → CSS vars + typed theme
  *   rastack design  [input] [--port n]          Live design-system studio (showcase + edit)
  *   rastack dev     [--port n] [--warehouse d]  Local dev: run the app + admin in-browser over WASM
- *   rastack admin   [--warehouse dir]           Run the Rust admin (Django-admin-style DB browser)
+ *   rastack admin   [--warehouse dir] [--port n] Full admin console — React UI (rastack/components) over the native server
  *   rastack scan   [files...] [--fail-on-pii]   Scan CSVs for PII and schema info
  *   rastack seed   [--env dev] [--source gs://] Load CSVs into Iceberg namespace
  *   rastack bootstrap [--owner o] [--repo r]    Stand the tier-0 AWS account stack up (once per account+region)
@@ -56,26 +56,6 @@ function run(script, args = rest) {
         process.exit(err.status ?? 1);
     }
 }
-/** Invoke the compiled Rust server binary (built by `cargo build` in rust/). */
-function runRust(subcommand) {
-    const repoRoot = path_1.default.resolve(__dirname, "..", "..");
-    const binary = process.env.RASTACK_SERVER_BIN ||
-        path_1.default.join(repoRoot, "rust", "target", "release", "rastack-server");
-    // Runs the locally-built Rust server binary with a fixed internal subcommand
-    // ("serve"/"admin"); `rest` is the developer's own CLI args, not untrusted
-    // input — no command-injection surface.
-    // nosemgrep: javascript.lang.security.detect-child-process.detect-child-process
-    const result = (0, child_process_1.spawnSync)(binary, [subcommand, ...rest], {
-        stdio: "inherit",
-        env: process.env,
-    });
-    if (result.error) {
-        console.error(`Could not run the Rust server (${binary}). Build it first:\n` +
-            `  cd rust && cargo build --release\n`);
-        process.exit(1);
-    }
-    process.exit(result.status ?? 0);
-}
 switch (command) {
     case "--version":
     case "-v":
@@ -95,7 +75,11 @@ switch (command) {
         run("rastack-dev.js", rest);
         break;
     case "admin":
-        runRust("admin");
+        // Full Django-admin-style console: the native Rust server serves React API
+        // Stack's own React admin (built from `rastack/components` + `rastack/theme`)
+        // over the real Iceberg warehouse. `rastack-admin.js` compiles, wires the
+        // bundle in, and boots the server.
+        run("rastack-admin.js", rest);
         break;
     case "tokens":
         // Design tokens → CSS custom properties + typed theme.
@@ -148,7 +132,7 @@ switch (command) {
             `  rastack tokens  [input] [outDir] [--prefix p]  Compile design tokens → CSS vars + typed theme\n` +
             `  rastack design  [input] [--port n]             Live design-system studio (showcase + edit)\n` +
             `  rastack dev     [--port n] [--warehouse dir] [--no-open]  Run the app + admin in-browser over WASM (local dev)\n` +
-            `  rastack admin   [--warehouse dir]              Run the native Rust admin (needs a built rastack-server)\n` +
+            `  rastack admin   [--warehouse dir] [--port n] [--no-open]  Full admin console (React UI over the native server; needs a built rastack-server)\n` +
             `  rastack scan   [files...] [--fail-on-pii]\n` +
             `  rastack seed   [--env dev|staging] [--source gs://bucket/ | ./myapp-dev/]\n` +
             `  rastack bootstrap [--owner o] [--repo r] [--region r] [--prefix p] [--reuse-oidc] [--print]  Stand the AWS account stack up\n` +

package/dist/wasm/rastack_wasm.js

@@ -375,7 +375,7 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 84, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 80, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen_1a7aa9db5392c486___convert__closures_____invoke___wasm_bindgen_1a7aa9db5392c486___JsValue__core_7d5f0a2ba6a62c33___result__Result_____wasm_bindgen_1a7aa9db5392c486___JsError___true_);
             return ret;
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rastack",
-  "version": "0.0.44",
+  "version": "0.0.45",
   "description": "",
   "main": "runtime.ts",
   "types": "runtime.ts",

package/src/dev/harness.ts

@@ -60,6 +60,50 @@ export function parseDevArgs(argv: string[]): DevArgs {
   };
 }
 
+/** Args for `rastack admin` — like `DevArgs`, but bound to a real server port. */
+export interface AdminArgs {
+  resourcesDir: string;
+  outDir: string;
+  warehouseDir: string;
+  /** TCP port the native `rastack-server` binds (the admin lives at `/admin/`). */
+  port: number;
+  open: boolean;
+}
+
+export const ADMIN_DEFAULTS: AdminArgs = {
+  resourcesDir: "resources",
+  outDir: ".rastack",
+  warehouseDir: "data/warehouse",
+  port: 8000,
+  open: true,
+};
+
+/**
+ * Parse `rastack admin` args: `--port`, `--warehouse`, `--out`, `--no-open`, and
+ * a single positional resources dir. Mirrors `parseDevArgs` but defaults to the
+ * server's port 8000 (the React admin is served by the native server, not a
+ * node static server).
+ */
+export function parseAdminArgs(argv: string[]): AdminArgs {
+  const positional: string[] = [];
+  let { resourcesDir, outDir, warehouseDir, port, open } = ADMIN_DEFAULTS;
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--port") port = Number(argv[++i]) || port;
+    else if (a === "--warehouse") warehouseDir = argv[++i] ?? warehouseDir;
+    else if (a === "--out") outDir = argv[++i] ?? outDir;
+    else if (a === "--no-open") open = false;
+    else if (!a.startsWith("-")) positional.push(a);
+  }
+  return {
+    resourcesDir: positional[0] || resourcesDir,
+    outDir,
+    warehouseDir,
+    port,
+    open,
+  };
+}
+
 const MIME: Record<string, string> = {
   ".html": "text/html; charset=utf-8",
   ".js": "text/javascript; charset=utf-8",

package/src/rastack-admin.ts

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+
+/**
+ * `rastack admin` — the full, Django-admin-style console, served by the native
+ * `rastack-server` against the real Iceberg warehouse.
+ *
+ *   rastack admin [resourcesDir] [--warehouse <dir>] [--port <n>] [--out <dir>] [--no-open]
+ *
+ * Unlike the old server-rendered `/admin`, the console is React API Stack's own
+ * React admin (`tools/admin`, built from `rastack/components` + `rastack/theme`)
+ * — this command compiles the resources, points the server at the prebuilt
+ * bundle (`RASTACK_ADMIN_ASSETS`), and boots it. The bundle talks back to the
+ * same server's `/api` over HTTP, so edits persist to the real warehouse.
+ */
+
+import { execFileSync, spawn, spawnSync } from "child_process";
+import * as fs from "fs";
+import * as path from "path";
+import { parseAdminArgs } from "./dev/harness";
+
+const HERE = __dirname; // dist/ when installed — the bundle lives beside us.
+
+/** Compile the resources to schema.rastack.json + openapi.json in outDir. */
+function compile(resourcesDir: string, outDir: string): boolean {
+  const compiler = path.join(HERE, "rastack-compile.js");
+  const result = spawnSync(
+    process.execPath,
+    [compiler, "compile", resourcesDir, outDir],
+    { stdio: "inherit" },
+  );
+  if (result.status !== 0) return false;
+  return fs.existsSync(path.join(outDir, "schema.rastack.json"));
+}
+
+/** Best-effort open the default browser at `url`. */
+function openBrowser(url: string): void {
+  const cmd =
+    process.platform === "darwin"
+      ? "open"
+      : process.platform === "win32"
+        ? "start"
+        : "xdg-open";
+  try {
+    execFileSync(cmd, [url], { stdio: "ignore" });
+  } catch {
+    /* non-fatal — the URL is printed anyway */
+  }
+}
+
+function main(argv: string[]): void {
+  const args = parseAdminArgs(argv);
+
+  console.log(`\n  rastack admin — the database console, built with React API Stack\n`);
+  console.log(`▸ Compiling ${args.resourcesDir} → ${args.outDir}`);
+  if (!compile(args.resourcesDir, args.outDir)) {
+    console.error("  ✗ compile failed — fix the resource graph and re-run.");
+    process.exit(1);
+  }
+
+  const bundle = path.join(HERE, "admin.js");
+  if (!fs.existsSync(bundle)) {
+    console.error("  ✗ admin bundle (dist/admin.js) not found — reinstall rastack.");
+    process.exit(1);
+  }
+
+  const repoRoot = path.resolve(HERE, "..", "..");
+  const binary =
+    process.env.RASTACK_SERVER_BIN ||
+    path.join(repoRoot, "rust", "target", "release", "rastack-server");
+
+  const manifest = path.join(args.outDir, "schema.rastack.json");
+  const serverArgs = [
+    "admin",
+    "--manifest",
+    manifest,
+    "--warehouse",
+    args.warehouseDir,
+    "--addr",
+    `127.0.0.1:${args.port}`,
+    // Local dev context: the admin runs unauthenticated, exactly like the old
+    // native admin. Production admins run the server with --jwks/--admin-group.
+    "--insecure-dev-auth",
+  ];
+
+  const url = `http://127.0.0.1:${args.port}/admin/`;
+  // The server serves the React bundle from here; hand the path via env so the
+  // Rust side stays free of JS-toolchain knowledge.
+  const child = spawn(binary, serverArgs, {
+    stdio: "inherit",
+    env: { ...process.env, RASTACK_ADMIN_ASSETS: HERE },
+  });
+
+  child.on("error", () => {
+    console.error(
+      `  ✗ Could not run the Rust server (${binary}). Build it first:\n` +
+        `      cd rust && cargo build --release\n`,
+    );
+    process.exit(1);
+  });
+  child.on("exit", (code) => process.exit(code ?? 0));
+
+  // Give the server a moment to bind, then print + open.
+  setTimeout(() => {
+    console.log(`\n  ▸ ${url}\n`);
+    console.log("  Press Ctrl+C to stop.\n");
+    if (args.open) openBrowser(url);
+  }, 700);
+}
+
+if (require.main === module) {
+  main(process.argv.slice(2));
+}

package/src/rastack.ts

@@ -12,7 +12,7 @@
  *   rastack tokens  [input] [outDir]            Compile design tokens → CSS vars + typed theme
  *   rastack design  [input] [--port n]          Live design-system studio (showcase + edit)
  *   rastack dev     [--port n] [--warehouse d]  Local dev: run the app + admin in-browser over WASM
- *   rastack admin   [--warehouse dir]           Run the Rust admin (Django-admin-style DB browser)
+ *   rastack admin   [--warehouse dir] [--port n] Full admin console — React UI (rastack/components) over the native server
  *   rastack scan   [files...] [--fail-on-pii]   Scan CSVs for PII and schema info
  *   rastack seed   [--env dev] [--source gs://] Load CSVs into Iceberg namespace
  *   rastack bootstrap [--owner o] [--repo r]    Stand the tier-0 AWS account stack up (once per account+region)
@@ -22,7 +22,7 @@
  *   rastack update [<version>] [--check]        Update the CLI in place (self-update)
  */
 
-import { execSync, spawnSync } from "child_process";
+import { execSync } from "child_process";
 import { readFileSync } from "fs";
 import path from "path";
 
@@ -57,30 +57,6 @@ function run(script: string, args: string[] = rest) {
   }
 }
 
-/** Invoke the compiled Rust server binary (built by `cargo build` in rust/). */
-function runRust(subcommand: string) {
-  const repoRoot = path.resolve(__dirname, "..", "..");
-  const binary =
-    process.env.RASTACK_SERVER_BIN ||
-    path.join(repoRoot, "rust", "target", "release", "rastack-server");
-  // Runs the locally-built Rust server binary with a fixed internal subcommand
-  // ("serve"/"admin"); `rest` is the developer's own CLI args, not untrusted
-  // input — no command-injection surface.
-  // nosemgrep: javascript.lang.security.detect-child-process.detect-child-process
-  const result = spawnSync(binary, [subcommand, ...rest], {
-    stdio: "inherit",
-    env: process.env,
-  });
-  if (result.error) {
-    console.error(
-      `Could not run the Rust server (${binary}). Build it first:\n` +
-        `  cd rust && cargo build --release\n`,
-    );
-    process.exit(1);
-  }
-  process.exit(result.status ?? 0);
-}
-
 switch (command) {
   case "--version":
   case "-v":
@@ -100,7 +76,11 @@ switch (command) {
     run("rastack-dev.js", rest);
     break;
   case "admin":
-    runRust("admin");
+    // Full Django-admin-style console: the native Rust server serves React API
+    // Stack's own React admin (built from `rastack/components` + `rastack/theme`)
+    // over the real Iceberg warehouse. `rastack-admin.js` compiles, wires the
+    // bundle in, and boots the server.
+    run("rastack-admin.js", rest);
     break;
   case "tokens":
     // Design tokens → CSS custom properties + typed theme.
@@ -154,7 +134,7 @@ switch (command) {
         `  rastack tokens  [input] [outDir] [--prefix p]  Compile design tokens → CSS vars + typed theme\n` +
         `  rastack design  [input] [--port n]             Live design-system studio (showcase + edit)\n` +
         `  rastack dev     [--port n] [--warehouse dir] [--no-open]  Run the app + admin in-browser over WASM (local dev)\n` +
-        `  rastack admin   [--warehouse dir]              Run the native Rust admin (needs a built rastack-server)\n` +
+        `  rastack admin   [--warehouse dir] [--port n] [--no-open]  Full admin console (React UI over the native server; needs a built rastack-server)\n` +
         `  rastack scan   [files...] [--fail-on-pii]\n` +
         `  rastack seed   [--env dev|staging] [--source gs://bucket/ | ./myapp-dev/]\n` +
         `  rastack bootstrap [--owner o] [--repo r] [--region r] [--prefix p] [--reuse-oidc] [--print]  Stand the AWS account stack up\n` +