tempest-express-sdk 0.24.0 → 0.26.0

package/dist/index.cjs

@@ -9444,6 +9444,60 @@ var MessagingHub = class {
   }
 };
 
+// src/admin/dashboard.ts
+function metricCard(label, compute, helpText) {
+  return helpText === void 0 ? { label, compute } : { label, compute, helpText };
+}
+function trendPercent(trend) {
+  if (trend.previous === 0) return null;
+  return (trend.value - trend.previous) / trend.previous * 100;
+}
+function trendDirection(trend) {
+  if (trend.value > trend.previous) return "up";
+  if (trend.value < trend.previous) return "down";
+  return "flat";
+}
+function partitionTotal(partition) {
+  return partition.segments.reduce((total, segment) => total + segment.value, 0);
+}
+
+// src/admin/lenses.ts
+function slugify(name) {
+  return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
+}
+function adminLens(options) {
+  return {
+    name: options.name,
+    slug: slugify(options.name),
+    label: options.label ?? options.name,
+    filters: options.filters ?? {},
+    orderBy: options.orderBy ?? null
+  };
+}
+
+// src/admin/permissions.ts
+var AdminPermission = {
+  VIEW: "view",
+  CREATE: "create",
+  EDIT: "edit",
+  DELETE: "delete"
+};
+
+// src/admin/actions.ts
+function slugify2(label) {
+  return label.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "action";
+}
+function adminAction(options, handler) {
+  const name = options.name ?? slugify2(options.label);
+  if (name === "") throw new Error("adminAction requires a non-empty name or label");
+  return {
+    name,
+    label: options.label,
+    handler,
+    dangerous: options.dangerous ?? false
+  };
+}
+
 // src/admin/columns.ts
 function humanizeField(name) {
   return name.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
@@ -9524,6 +9578,9 @@ function filterForColumn(column6) {
   }
   return { kind: "text", options: [] };
 }
+function foreignKeyTable(column6) {
+  return column6.reference?.table ?? null;
+}
 function isSearchableColumn(column6) {
   const { kind } = column6.type;
   return kind === "varchar" || kind === "text" || kind === "char";
@@ -9537,6 +9594,12 @@ var NEVER_EDITABLE = [
   "hashedPassword"
 ];
 var NEVER_LISTED = ["hashedPassword"];
+var AUDIT_FIELDS = [
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "updatedBy"
+];
 var AdminModel = class {
   /** The managed model class. */
   model;
@@ -9560,6 +9623,11 @@ var AdminModel = class {
   canEdit;
   /** Whether the delete action is exposed. */
   canDelete;
+  /** Audit-log model backing the detail timeline, or `null`. */
+  auditModel;
+  /** Saved list-view presets, in declaration order. */
+  lenses;
+  actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
   verboseNameOverride;
@@ -9584,6 +9652,16 @@ var AdminModel = class {
     this.canCreate = options.canCreate ?? true;
     this.canEdit = options.canEdit ?? true;
     this.canDelete = options.canDelete ?? true;
+    this.auditModel = options.auditModel ?? null;
+    this.lenses = [...options.lenses ?? []];
+    for (const action of options.actions ?? []) {
+      if (this.actions.has(action.name)) {
+        throw new Error(
+          `Duplicate admin action name "${action.name}" on ${this.model.tablename}`
+        );
+      }
+      this.actions.set(action.name, action);
+    }
     const known = new Set(this.columnNames());
     for (const [option, names] of [
       ["listDisplay", this.listDisplayOverride ?? []],
@@ -9660,6 +9738,25 @@ var AdminModel = class {
     if (this.listDisplayOverride !== null) return [...this.listDisplayOverride];
     return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
   }
+  /**
+   * Look a lens up by its slug.
+   *
+   * @param slug - The `?lens=` value.
+   * @returns The lens, or `null` when nothing matches.
+   */
+  getLens(slug) {
+    return this.lenses.find((lens) => lens.slug === slug) ?? null;
+  }
+  /**
+   * Return the audit/timestamp columns the model actually declares.
+   *
+   * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+   *   `updatedBy` present on the model, in that order.
+   */
+  auditFieldNames() {
+    const known = new Set(this.columnNames());
+    return AUDIT_FIELDS.filter((name) => known.has(name));
+  }
   /**
    * Return the columns the detail view renders.
    *
@@ -9668,10 +9765,16 @@ var AdminModel = class {
    * where an operator goes to see the whole record, so trimming it there would
    * hide data with nowhere else to read it.
    *
-   * @returns Every column but the password hash, in declaration order.
+   * The audit/timestamp columns are held back too — they render in the detail
+   * view's own audit panel, next to the change history, rather than scattered
+   * among the domain fields.
+   *
+   * @returns Every domain column, in declaration order.
    */
   detailFieldNames() {
-    return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
+    return this.columnNames().filter(
+      (name) => !NEVER_LISTED.includes(name) && !AUDIT_FIELDS.includes(name)
+    );
   }
   /**
    * Return the columns a create/edit form exposes.
@@ -9686,6 +9789,25 @@ var AdminModel = class {
     const skip = /* @__PURE__ */ new Set([...this.readonlyFields, ...NEVER_EDITABLE]);
     return this.columnNames().filter((name) => !skip.has(name));
   }
+  /**
+   * Return the registered custom actions, in declaration order.
+   *
+   * @returns The actions passed via `actions` (empty when none). The model
+   *   type is erased here, the way {@link AdminSite} erases it when it stores a
+   *   configuration — a registry keyed by slug cannot stay generic.
+   */
+  customActions() {
+    return [...this.actions.values()];
+  }
+  /**
+   * Look a custom action up by name.
+   *
+   * @param name - The action identifier (its submitted form value).
+   * @returns The action, or `null` when nothing matches.
+   */
+  getAction(name) {
+    return this.actions.get(name) ?? null;
+  }
   /**
    * Build a repository for this model bound to a session.
    *
@@ -9727,10 +9849,12 @@ function buildFormFields(admin, options = {}) {
   const columns = adminColumns(admin.model);
   const values = options.values ?? {};
   const errors = options.errors ?? {};
+  const foreignKeys = options.foreignKeyOptions ?? {};
   return admin.editableFieldNames().flatMap((name) => {
     const column6 = columns[name];
     if (column6 === void 0) return [];
-    const spec = widgetForColumn(column6);
+    const related = foreignKeys[name];
+    const spec = related === void 0 ? widgetForColumn(column6) : { widget: "select", step: null, options: related };
     const raw = name in values ? values[name] : literalDefault(column6);
     return [
       {
@@ -9780,7 +9904,7 @@ function coerceValue(column6, widget, raw) {
         throw new Error("Enter valid JSON.");
       }
     case "select": {
-      const allowed = meta.values ?? [];
+      const allowed = kind === "enum" ? meta.values ?? [] : [];
       if (allowed.length > 0 && !allowed.includes(raw)) {
         throw new Error(`Choose one of: ${allowed.join(", ")}.`);
       }
@@ -9828,6 +9952,28 @@ function formatCellValue(value) {
   if (typeof value === "object") return JSON.stringify(value);
   return String(value);
 }
+function foreignKeyFields(admin) {
+  const columns = adminColumns(admin.model);
+  const out = {};
+  for (const name of admin.editableFieldNames()) {
+    const column6 = columns[name];
+    if (column6 === void 0) continue;
+    const table = foreignKeyTable(column6);
+    if (table !== null) out[name] = table;
+  }
+  return out;
+}
+function foreignKeyLabel(admin, row) {
+  for (const field of admin.searchFields) {
+    const value = row[field];
+    if (typeof value === "string" && value !== "") return value;
+  }
+  for (const field of ["name", "title", "email", "label", "reference"]) {
+    const value = row[field];
+    if (typeof value === "string" && value !== "") return value;
+  }
+  return String(row[admin.identityField] ?? "");
+}
 
 // src/admin/auth.ts
 var UserModelAuthBackend = class {
@@ -10085,6 +10231,8 @@ var AdminSite = class {
   siteUrl;
   /** Typed appearance overrides. */
   theme;
+  /** Business-metric cards rendered at the top of the dashboard. */
+  dashboardCards;
   registry = /* @__PURE__ */ new Map();
   /**
    * Initialize the site.
@@ -10097,6 +10245,7 @@ var AdminSite = class {
     this.indexSubtitle = options.indexSubtitle ?? "Site administration";
     this.siteUrl = options.siteUrl ?? null;
     this.theme = options.theme ?? {};
+    this.dashboardCards = [...options.dashboardCards ?? []];
   }
   /**
    * Return the centered header brand text.
@@ -11916,7 +12065,7 @@ function renderMfaPage(context, error) {
 </section>`;
   return renderLayout(context, `Two-factor \xB7 ${context.site.title}`, body);
 }
-function renderDashboardPage(context, cards, metrics) {
+function renderDashboardPage(context, cards, metrics, businessCards = []) {
   const metricsPanel = metrics === null ? "" : `<div class="tempest-admin-stats" aria-label="System metrics">
     <div class="tempest-admin-stat">
       <span class="tempest-admin-stat__label">CPU</span>
@@ -11928,6 +12077,7 @@ function renderDashboardPage(context, cards, metrics) {
       <span class="tempest-admin-stat__sub">${escapeHtml(metrics.memoryUsedGb)} / ${escapeHtml(metrics.memoryTotalGb)} GB</span>
     </div>
   </div>`;
+  const business = businessCards.length > 0 ? `<div class="tempest-admin-cards" aria-label="Business metrics">${businessCards.map(renderBusinessCard).join("")}</div>` : "";
   const models = cards.length > 0 ? `<div class="tempest-admin-models">${cards.map(
     (card) => `<article class="tempest-admin-model-card">
       <header class="tempest-admin-model-card__head">
@@ -11944,10 +12094,53 @@ function renderDashboardPage(context, cards, metrics) {
   <h1>${escapeHtml(context.site.title)}</h1>
   <p>${escapeHtml(context.site.indexSubtitle)}</p>
   ${metricsPanel}
+  ${business}
   ${models}
 </section>`;
   return renderLayout(context, context.site.title, body);
 }
+function renderBusinessCard(card) {
+  const help = card.helpText !== null ? `<span class="tempest-admin-card__help">${escapeHtml(card.helpText)}</span>` : "";
+  if (card.error !== null) {
+    return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">\u2014</span>
+      <span class="tempest-admin-card__help">${escapeHtml(card.error)}</span>
+    </article>`;
+  }
+  const unit = card.unit !== null ? ` <small>${escapeHtml(card.unit)}</small>` : "";
+  if (card.kind === "partition") {
+    const parts = card.segments.map(
+      (segment) => `<li>
+        <span class="tempest-admin-card__part-label">${escapeHtml(segment.label)}</span>
+        <span class="tempest-admin-card__part-bar"><span style="width: ${Math.round(segment.percent)}%"></span></span>
+        <span class="tempest-admin-card__part-value">${escapeHtml(segment.value)}</span>
+      </li>`
+    ).join("");
+    return `<article class="tempest-admin-card tempest-admin-card--partition">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <ul class="tempest-admin-card__parts">${parts}</ul>
+      ${help}
+    </article>`;
+  }
+  if (card.kind === "trend") {
+    const arrow = card.direction === "up" ? "\u25B2" : card.direction === "down" ? "\u25BC" : "\u25AC";
+    return `<article class="tempest-admin-card tempest-admin-card--trend">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      <span class="tempest-admin-card__trend tempest-admin-card__trend--${escapeHtml(card.direction)}">
+        ${arrow} ${card.percent === null ? "\u2014" : escapeHtml(card.percent)}
+        <small>vs prev ${escapeHtml(card.previous)}</small>
+      </span>
+      ${help}
+    </article>`;
+  }
+  return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      ${help}
+    </article>`;
+}
 function renderFilter(filter) {
   const name = `filter_${filter.field}`;
   if (filter.kind === "select") {
@@ -11965,15 +12158,40 @@ function renderFilter(filter) {
   return `<label><span>${escapeHtml(filter.label)}</span><input type="text" name="${escapeHtml(name)}" value="${escapeHtml(filter.value)}"></label>`;
 }
 function renderListPage(context, view) {
+  const bulk = view.bulkActions.length > 0 && context.session !== null;
+  const checkColumn = bulk ? 1 : 0;
   const headers = view.columns.map((column6) => {
     const state = view.sort[column6];
     if (state === void 0) return `<th>${escapeHtml(column6)}</th>`;
     const arrow = state.active ? state.ascending ? "\u25B2" : "\u25BC" : "\u2195";
     return `<th><a class="tempest-sort${state.active ? " tempest-sort--active" : ""}" href="${escapeHtml(state.url)}"><span>${escapeHtml(column6)}</span><span class="tempest-sort__arrow" aria-hidden="true">${arrow}</span></a></th>`;
   }).join("");
-  const rows = view.rows.length > 0 ? view.rows.map(
-    (row) => `<tr>${row.cells.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("")}<td><a href="${escapeHtml(row.url)}">View</a></td></tr>`
-  ).join("") : `<tr><td colspan="${view.columns.length + 1}">No records.</td></tr>`;
+  const rows = view.rows.length > 0 ? view.rows.map((row) => {
+    const check = bulk ? `<td class="tempest-admin-list__check"><input type="checkbox" name="ids" value="${escapeHtml(row.identity)}" data-row-check aria-label="Select row"></td>` : "";
+    const cells = row.cells.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("");
+    return `<tr>${check}${cells}<td><a href="${escapeHtml(row.url)}">View</a></td></tr>`;
+  }).join("") : `<tr><td colspan="${view.columns.length + 1 + checkColumn}">No records.</td></tr>`;
+  const bulkBar = bulk ? `<form method="post" action="${escapeHtml(view.bulkUrl)}" class="tempest-admin-bulk" onsubmit="return confirm('Apply the selected action to the checked rows?');">
+    <input type="hidden" name="csrf_token" value="${escapeHtml(context.session?.csrfToken)}">
+    <div class="tempest-admin-bulk__bar">
+      <select name="action" aria-label="Bulk action">
+        ${view.bulkActions.map(
+    (action) => `<option value="${escapeHtml(action.value)}">${escapeHtml(action.label)}${action.dangerous ? " \u26A0" : ""}</option>`
+  ).join("")}
+      </select>
+      <button type="submit">Apply to selected</button>
+    </div>` : "";
+  const selectAllScript = bulk ? `<script>
+    (function () {
+      var master = document.querySelector('[data-select-all]');
+      if (!master) return;
+      master.addEventListener('change', function () {
+        document.querySelectorAll('[data-row-check]').forEach(function (box) {
+          box.checked = master.checked;
+        });
+      });
+    })();
+  </script>` : "";
   const hasControls = view.searchable || view.filters.length > 0;
   const body = `<section class="tempest-admin-list">
   <header class="tempest-admin-list__header">
@@ -11988,14 +12206,22 @@ function renderListPage(context, view) {
     </form>
     <div class="tempest-admin-list__actions">
       ${view.newUrl !== null ? `<a class="tempest-admin-list__new" href="${escapeHtml(view.newUrl)}">+ New</a>` : ""}
+      <a href="${escapeHtml(view.exportCsvUrl)}">Export CSV</a>
+      <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
     </div>
   </div>
+  ${view.lenses.length > 0 ? `<nav class="tempest-admin-lenses" aria-label="Lenses">${view.lenses.map(
+    (lens) => `<a class="tempest-admin-lens${lens.active ? " tempest-admin-lens--active" : ""}" href="${escapeHtml(lens.url)}">${escapeHtml(lens.label)}</a>`
+  ).join("")}</nav>` : ""}
+  ${bulkBar}
   <div class="tempest-admin-table-wrap">
     <table class="tempest-admin-list__table">
-      <thead><tr>${headers}<th>Actions</th></tr></thead>
+      <thead><tr>${bulk ? '<th class="tempest-admin-list__check"><input type="checkbox" data-select-all aria-label="Select all"></th>' : ""}${headers}<th>Actions</th></tr></thead>
       <tbody>${rows}</tbody>
     </table>
   </div>
+  ${bulk ? "</form>" : ""}
+  ${selectAllScript}
   ${view.pages > 1 ? `<nav class="tempest-admin-list__pagination" aria-label="Pagination">
     ${view.prevUrl !== null ? `<a href="${escapeHtml(view.prevUrl)}">\u2190 Prev</a>` : ""}
     <span>Page ${escapeHtml(view.page)} of ${escapeHtml(view.pages)}</span>
@@ -12010,6 +12236,7 @@ function renderDetailPage(context, view) {
   const fields = view.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
+  const auditPanel = view.audit === null ? "" : renderAuditPanel(view.audit);
   const body = `<section class="tempest-admin-detail">
   <header class="tempest-admin-detail__header">
     <h1>${escapeHtml(view.title)} \xB7 ${escapeHtml(view.identity)}</h1>
@@ -12023,9 +12250,37 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
+function renderAuditPanel(audit) {
+  const rows = audit.fields.map(
+    (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
+  ).join("");
+  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+    const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
+      (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
+    ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
+    const context = entry.context !== null ? `<pre class="tempest-admin-detail__json">${escapeHtml(entry.context)}</pre>` : "";
+    return `<li class="tempest-admin-history__item">
+        <details>
+          <summary>
+            <span class="tempest-admin-history__action">${escapeHtml(entry.action)}</span>
+            <span class="tempest-admin-history__actor">${escapeHtml(entry.actor)}</span>
+            <span class="tempest-admin-history__at">${escapeHtml(entry.at)}</span>
+          </summary>
+          ${changes}
+          ${context}
+        </details>
+      </li>`;
+  }).join("")}</ol>` : "";
+  return `<section class="tempest-admin-audit">
+    <h2>Audit</h2>
+    <dl class="tempest-admin-detail__fields">${rows}</dl>
+    ${history}
+  </section>`;
+}
 function renderFormField(field) {
   const required = field.required ? " required" : "";
   const name = escapeHtml(field.name);
@@ -12089,11 +12344,17 @@ function renderFormPage(context, view) {
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var AUDIT_HISTORY_LIMIT = 50;
+var FK_OPTION_CAP = 1e3;
+var FLASH_MAX_LENGTH = 300;
 var FLASH_MESSAGES = {
   created: { text: "Record created.", level: "success" },
   updated: { text: "Record updated.", level: "success" },
   deleted: { text: "Record deleted.", level: "success" }
 };
+async function runCustomAction(action, context) {
+  return await action.handler(context) ?? null;
+}
 function queryString(value) {
   if (typeof value === "string") return value.trim();
   if (Array.isArray(value) && typeof value[0] === "string") return value[0].trim();
@@ -12111,6 +12372,7 @@ function makeAdminRouter(site, options) {
   const prefix = (options.prefix ?? "/admin").replace(/\/$/, "");
   const theme = resolveAdminTheme(site.theme);
   const showMetrics = options.showMetrics ?? true;
+  const exportMaxRows = options.exportMaxRows ?? 5e3;
   const sessions = new AdminSessionStore({
     secret: options.secretKey,
     ...options.cookieName === void 0 ? {} : { cookieName: options.cookieName },
@@ -12121,21 +12383,35 @@ function makeAdminRouter(site, options) {
   const backend = options.authBackend;
   const router = express3__default.default.Router();
   router.use(prefix, express3__default.default.urlencoded({ extended: false }));
-  const context = (req, session) => ({
+  const context = (req, session, models = site.list()) => ({
     site,
     theme,
     prefix,
     session,
     currentPath: req.originalUrl.split("?")[0] ?? req.path,
-    navModels: site.list().map((admin) => ({
+    navModels: models.map((admin) => ({
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
     messages: flashFor(req)
   });
+  const allows = async (principal, admin, action) => {
+    if (!flagAllows(admin, action)) return false;
+    if (options.accessPolicy === void 0) return true;
+    return Boolean(await options.accessPolicy(principal, admin, action));
+  };
   const flashFor = (req) => {
-    const message = FLASH_MESSAGES[queryString(req.query.ok)];
-    return message === void 0 ? [] : [message];
+    const fixed = FLASH_MESSAGES[queryString(req.query.ok)];
+    if (fixed !== void 0) return [fixed];
+    const text = queryString(req.query.flash);
+    if (text === "") return [];
+    const level = queryString(req.query.level);
+    return [
+      {
+        text: text.slice(0, FLASH_MAX_LENGTH),
+        level: level === "error" || level === "warning" ? level : "success"
+      }
+    ];
   };
   const html = (res, body, status = 200) => {
     res.status(status).type("html").send(body);
@@ -12171,14 +12447,28 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/mfa`);
       return null;
     }
-    return { session, dbSession };
+    const visible = [];
+    for (const admin of site.list()) {
+      if (await allows(principal, admin, AdminPermission.VIEW)) visible.push(admin);
+    }
+    return { session, dbSession, principal, visible };
   };
-  const resolveAdmin = (req, res, state) => {
+  const resolveAdmin = async (req, res, state, action = AdminPermission.VIEW) => {
     const admin = site.get(String(req.params.slug));
-    if (admin === null) {
-      html(res, renderNotFound(context(req, state.session)), 404);
+    if (admin === null || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+      html(res, renderNotFound(context(req, state.session, state.visible)), 404);
       return null;
     }
+    if (action !== AdminPermission.VIEW) {
+      if (!flagAllows(admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return null;
+      }
+      if (!await allows(state.principal, admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return null;
+      }
+    }
     return admin;
   };
   const renderNotFound = (ctx) => renderDashboardPage(
@@ -12189,7 +12479,7 @@ function makeAdminRouter(site, options) {
   const checkCsrf = (req, res, state) => {
     const body = req.body;
     if (csrfTokenMatches(state.session, body?.csrf_token)) return true;
-    html(res, renderNotFound(context(req, state.session)), 403);
+    html(res, renderNotFound(context(req, state.session, state.visible)), 403);
     return false;
   };
   router.get(`${prefix}/static/admin.css`, (_req, res) => {
@@ -12271,7 +12561,7 @@ function makeAdminRouter(site, options) {
       const state = await authenticate(req, res);
       if (state === null) return;
       const cards = [];
-      for (const admin of site.list()) {
+      for (const admin of state.visible) {
         let count = null;
         try {
           count = await admin.repository(state.dbSession).count();
@@ -12285,9 +12575,13 @@ function makeAdminRouter(site, options) {
           label: admin.verboseNamePlural(),
           count,
           url: `${prefix}/m/${admin.slug()}`,
-          newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+          newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null
         });
       }
+      const businessCards = [];
+      for (const card of site.dashboardCards) {
+        businessCards.push(await computeBusinessCard(card, state.dbSession));
+      }
       let metrics = null;
       if (showMetrics) {
         const snapshot2 = MetricsUtils.system();
@@ -12298,7 +12592,15 @@ function makeAdminRouter(site, options) {
           memoryTotalGb: (snapshot2.memory.total / 1024 ** 3).toFixed(1)
         };
       }
-      html(res, renderDashboardPage(context(req, state.session), cards, metrics));
+      html(
+        res,
+        renderDashboardPage(
+          context(req, state.session, state.visible),
+          cards,
+          metrics,
+          businessCards
+        )
+      );
     })
   );
   router.get(
@@ -12306,7 +12608,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       html(res, await renderList(req, admin, state));
     })
@@ -12316,18 +12618,20 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "create",
           title: admin.verboseName(),
-          fields: buildFormFields(admin),
+          fields: buildFormFields(admin, {
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+          }),
           actionUrl: `${prefix}/m/${admin.slug()}/new`,
           backUrl: `${prefix}/m/${admin.slug()}`,
           error: null
@@ -12340,22 +12644,27 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
       const parsed = parseFormBody(admin, body);
+      const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "create",
             title: admin.verboseName(),
-            fields: buildFormFields(admin, { values: body, errors: parsed.errors }),
+            fields: buildFormFields(admin, {
+              values: body,
+              errors: parsed.errors,
+              foreignKeyOptions
+            }),
             actionUrl: `${prefix}/m/${admin.slug()}/new`,
             backUrl: `${prefix}/m/${admin.slug()}`,
             error
@@ -12367,6 +12676,7 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(admin, parsed.data, backend.principalId(state.principal), true);
       try {
         await admin.repository(state.dbSession).create(parsed.data);
       } catch (error) {
@@ -12376,28 +12686,134 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=created`);
     })
   );
+  router.get(
+    `${prefix}/m/:slug/export.:format`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state);
+      if (admin === null) return;
+      const format = String(req.params.format);
+      if (format !== "csv" && format !== "json") {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      const query = await resolveListQuery(req, admin, state.dbSession);
+      const result = await admin.repository(state.dbSession).paginate({
+        page: 1,
+        pageSize: exportMaxRows,
+        ...query.orderBy === void 0 ? {} : { orderBy: query.orderBy },
+        ascending: query.ascending,
+        ...query.where === void 0 ? {} : { filters: query.where }
+      });
+      const columns = admin.listDisplayNames();
+      const rows = result.items;
+      const payload = format === "csv" ? toCsv(columns, rows) : toJson(columns, rows);
+      res.status(200).type(format === "csv" ? "text/csv; charset=utf-8" : "application/json").set("content-disposition", `attachment; filename="${admin.slug()}.${format}"`).send(payload);
+    })
+  );
+  router.post(
+    `${prefix}/m/:slug/bulk`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state);
+      if (admin === null) return;
+      if (!checkCsrf(req, res, state)) return;
+      const body = req.body;
+      const action = typeof body.action === "string" ? body.action : "";
+      const raw = body.ids;
+      const ids = (Array.isArray(raw) ? raw : raw === void 0 ? [] : [raw]).filter((value) => typeof value === "string").filter((value) => value !== "");
+      const listUrl = `${prefix}/m/${admin.slug()}`;
+      const back = (message, level) => {
+        res.redirect(`${listUrl}?${buildQuery({ flash: message, level })}`);
+      };
+      if (ids.length === 0) {
+        back("No rows were selected.", "warning");
+        return;
+      }
+      if (!bulkActionsFor(admin).some((option) => option.value === action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+        return;
+      }
+      const needed = action === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (!await allows(state.principal, admin, needed)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return;
+      }
+      const repository = admin.repository(state.dbSession);
+      const scope = { [admin.identityField]: { in: ids } };
+      if (action.startsWith("custom:")) {
+        const custom = admin.getAction(action.slice("custom:".length));
+        if (custom === null) {
+          html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+          return;
+        }
+        let result;
+        try {
+          result = await runCustomAction(custom, {
+            ids,
+            repository,
+            dbSession: state.dbSession,
+            request: req,
+            session: state.session,
+            principal: state.principal
+          });
+        } catch (error) {
+          logger2.error("Admin action failed", {
+            slug: admin.slug(),
+            action: custom.name,
+            error: error instanceof Error ? error.message : String(error)
+          });
+          back(
+            `${custom.label} failed: ${error instanceof Error ? error.message : String(error)}`,
+            "error"
+          );
+          return;
+        }
+        if (result === null) {
+          res.redirect(listUrl);
+          return;
+        }
+        back(result.message, result.category ?? "success");
+        return;
+      }
+      if (action === "delete") {
+        const removed = await repository.delete(scope);
+        back(`Deleted ${removed} record${removed === 1 ? "" : "s"}.`, "success");
+        return;
+      }
+      const active = action === "activate";
+      const changed = await repository.update(scope, { isActive: active });
+      back(
+        `${active ? "Activated" : "Deactivated"} ${changed} record${changed === 1 ? "" : "s"}.`,
+        "success"
+      );
+    })
+  );
   router.get(
     `${prefix}/m/:slug/:identity`,
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const row = await findRow(admin, state.dbSession, String(req.params.identity));
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const identity = String(row[admin.identityField]);
       html(
         res,
-        renderDetailPage(context(req, state.session), {
+        renderDetailPage(context(req, state.session, state.visible), {
           title: admin.verboseName(),
           identity,
+          audit: await buildAuditView(admin, row, state.dbSession),
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
-          editUrl: admin.canEdit ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
-          deleteUrl: admin.canDelete ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+          deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
         })
       );
     })
@@ -12407,20 +12823,23 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       const row = admin.canEdit ? await findRow(admin, state.dbSession, identity) : null;
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "edit",
           title: admin.verboseName(),
-          fields: buildFormFields(admin, { values: row }),
+          fields: buildFormFields(admin, {
+            values: row,
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+          }),
           actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
           backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
           error: null
@@ -12433,23 +12852,28 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       if (!admin.canEdit) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
       const parsed = parseFormBody(admin, body);
+      const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "edit",
             title: admin.verboseName(),
-            fields: buildFormFields(admin, { values: body, errors: parsed.errors }),
+            fields: buildFormFields(admin, {
+              values: body,
+              errors: parsed.errors,
+              foreignKeyOptions
+            }),
             actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
             backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
             error
@@ -12461,10 +12885,16 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(
+        admin,
+        parsed.data,
+        backend.principalId(state.principal),
+        false
+      );
       try {
         const changed = await admin.repository(state.dbSession).update({ [admin.identityField]: identity }, parsed.data);
         if (changed === 0) {
-          html(res, renderNotFound(context(req, state.session)), 404);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 404);
           return;
         }
       } catch (error) {
@@ -12479,10 +12909,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.DELETE);
       if (admin === null) return;
       if (!admin.canDelete) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12490,18 +12920,142 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=deleted`);
     })
   );
+  async function actorLabel(actor, dbSession) {
+    if (actor === null || actor === void 0 || actor === "") return "";
+    const principal = await backend.loadPrincipal(dbSession, String(actor));
+    return principal === null ? String(actor) : backend.displayName(principal);
+  }
+  async function buildAuditView(admin, row, dbSession) {
+    const fields = [];
+    for (const name of admin.auditFieldNames()) {
+      const value = name === "createdBy" || name === "updatedBy" ? await actorLabel(row[name], dbSession) : formatCellValue(row[name]);
+      fields.push({ label: humanizeField(name), value });
+    }
+    const history = [];
+    if (admin.auditModel !== null) {
+      const entity = admin.model.name;
+      const entityId = String(row[admin.identityField]);
+      const page2 = await new tempestDbJs.BaseRepository(admin.auditModel, dbSession).paginate({
+        page: 1,
+        pageSize: AUDIT_HISTORY_LIMIT,
+        orderBy: "createdAt",
+        ascending: false,
+        filters: { entity, entityId }
+      });
+      for (const entry of page2.items) {
+        const changes = entry.changes ?? {};
+        history.push({
+          action: String(entry.action ?? ""),
+          at: formatCellValue(entry.createdAt),
+          actor: await actorLabel(entry.actor, dbSession) || "\u2014",
+          changes: Object.entries(changes).map(([field, change]) => ({
+            field,
+            before: formatCellValue(change?.before),
+            after: formatCellValue(change?.after)
+          })),
+          context: entry.context === null || entry.context === void 0 ? null : JSON.stringify(entry.context, null, 2)
+        });
+      }
+    }
+    if (fields.length === 0 && history.length === 0) return null;
+    return { fields, history };
+  }
   async function findRow(admin, dbSession, identity) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  async function permittedBulkActions(admin, principal) {
+    const permitted = [];
+    for (const option of bulkActionsFor(admin)) {
+      const needed = option.value === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (await allows(principal, admin, needed)) permitted.push(option);
+    }
+    return permitted;
+  }
   async function renderList(req, admin, state) {
     const columns = adminColumns(admin.model);
-    const search = queryString(req.query.q);
+    const query = await resolveListQuery(req, admin, state.dbSession);
     const page2 = Math.max(1, Number.parseInt(queryString(req.query.page), 10) || 1);
+    const result = await admin.repository(state.dbSession).paginate({
+      page: page2,
+      pageSize: admin.pageSize,
+      ...query.orderBy === void 0 ? {} : { orderBy: query.orderBy },
+      ascending: query.ascending,
+      ...query.where === void 0 ? {} : { filters: query.where }
+    });
+    const displayed = admin.listDisplayNames();
+    const sort = {};
+    for (const column6 of displayed) {
+      if (!(column6 in columns)) continue;
+      const active = (query.sortColumn ?? admin.orderKey) === column6;
+      const nextAscending = active ? !query.ascending : true;
+      sort[column6] = {
+        url: `?${buildQuery({
+          ...query.baseQuery,
+          sort: column6,
+          dir: nextAscending ? "asc" : "desc"
+        })}`,
+        active,
+        ascending: query.ascending
+      };
+    }
+    const sortParams = {
+      sort: query.sortColumn ?? void 0,
+      dir: query.sortColumn === null ? void 0 : query.ascending ? "asc" : "desc"
+    };
+    const pageUrl = (target) => `?${buildQuery({ ...query.baseQuery, ...sortParams, page: target })}`;
+    const exportQuery = buildQuery({ ...query.baseQuery, ...sortParams });
+    const exportUrl = (format) => `${prefix}/m/${admin.slug()}/export.${format}${exportQuery === "" ? "" : `?${exportQuery}`}`;
+    const view = {
+      title: admin.verboseNamePlural(),
+      columns: displayed,
+      rows: result.items.map((row) => {
+        const identity = String(row[admin.identityField]);
+        return {
+          identity,
+          cells: displayed.map((column6) => formatCellValue(row[column6])),
+          url: `${prefix}/m/${admin.slug()}/${identity}`
+        };
+      }),
+      total: result.total,
+      page: result.page,
+      pages: result.pages,
+      prevUrl: result.page > 1 ? pageUrl(result.page - 1) : null,
+      nextUrl: result.page < result.pages ? pageUrl(result.page + 1) : null,
+      searchable: query.searchable.length > 0,
+      searchValue: query.search,
+      filters: query.filterViews,
+      sort,
+      newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null,
+      bulkActions: await permittedBulkActions(admin, state.principal),
+      bulkUrl: `${prefix}/m/${admin.slug()}/bulk`,
+      exportCsvUrl: exportUrl("csv"),
+      exportJsonUrl: exportUrl("json"),
+      lenses: admin.lenses.length === 0 ? [] : [
+        {
+          label: "All",
+          url: `?${buildQuery({ ...query.baseQuery, lens: void 0 })}`,
+          active: query.lens === ""
+        },
+        ...admin.lenses.map((entry) => ({
+          label: entry.label,
+          url: `?${buildQuery({ ...query.baseQuery, lens: entry.slug })}`,
+          active: query.lens === entry.slug
+        }))
+      ]
+    };
+    return renderListPage(context(req, state.session, state.visible), view);
+  }
+  async function resolveListQuery(req, admin, dbSession) {
+    const columns = adminColumns(admin.model);
+    const search = queryString(req.query.q);
     const sortField = queryString(req.query.sort);
     const sortColumn = sortField in columns ? sortField : null;
-    const ascending = sortColumn === null ? admin.orderAscending : queryString(req.query.dir) !== "desc";
+    const lens = admin.getLens(queryString(req.query.lens));
     const conditions = [];
+    if (lens !== null && Object.keys(lens.filters).length > 0) {
+      conditions.push(lens.filters);
+    }
     const filterViews = [];
     for (const field of admin.listFilter) {
       const column6 = columns[field];
@@ -12525,6 +13079,8 @@ function makeAdminRouter(site, options) {
         });
         continue;
       }
+      const related = await relatedOptions(column6, dbSession);
+      const options2 = related ?? spec.options;
       const value = queryString(req.query[`filter_${field}`]);
       if (value !== "") {
         conditions.push({
@@ -12534,11 +13090,11 @@ function makeAdminRouter(site, options) {
       filterViews.push({
         field,
         label: humanizeField(field),
-        kind: spec.kind,
+        kind: related === null ? spec.kind : "select",
         value,
         valueFrom: "",
         valueTo: "",
-        options: spec.options.map((option) => ({
+        options: options2.map((option) => ({
           value: option.value,
           label: option.label,
           selected: option.value === value
@@ -12554,72 +13110,174 @@ function makeAdminRouter(site, options) {
         tempestDbJs.or(...searchable.map((field) => ({ [field]: { ilike: `%${search}%` } })))
       );
     }
-    const where = conditions.length === 0 ? void 0 : tempestDbJs.and(...conditions);
-    const orderBy = sortColumn ?? admin.orderKey ?? void 0;
-    const result = await admin.repository(state.dbSession).paginate({
-      page: page2,
-      pageSize: admin.pageSize,
-      ...orderBy === void 0 ? {} : { orderBy },
-      ascending,
-      ...where === void 0 ? {} : { filters: where }
-    });
-    const displayed = admin.listDisplayNames();
     const baseQuery = { q: search };
-    for (const view2 of filterViews) {
-      if (view2.kind === "daterange") {
-        baseQuery[`filter_${view2.field}_from`] = view2.valueFrom;
-        baseQuery[`filter_${view2.field}_to`] = view2.valueTo;
+    for (const view of filterViews) {
+      if (view.kind === "daterange") {
+        baseQuery[`filter_${view.field}_from`] = view.valueFrom;
+        baseQuery[`filter_${view.field}_to`] = view.valueTo;
       } else {
-        baseQuery[`filter_${view2.field}`] = view2.value;
+        baseQuery[`filter_${view.field}`] = view.value;
       }
     }
-    const sort = {};
-    for (const column6 of displayed) {
-      if (!(column6 in columns)) continue;
-      const active = (sortColumn ?? admin.orderKey) === column6;
-      const nextAscending = active ? !ascending : true;
-      sort[column6] = {
-        url: `?${buildQuery({
-          ...baseQuery,
-          sort: column6,
-          dir: nextAscending ? "asc" : "desc"
-        })}`,
-        active,
-        ascending
-      };
-    }
-    const pageUrl = (target) => `?${buildQuery({
-      ...baseQuery,
-      sort: sortColumn ?? void 0,
-      dir: sortColumn === null ? void 0 : ascending ? "asc" : "desc",
-      page: target
-    })}`;
-    const view = {
-      title: admin.verboseNamePlural(),
-      columns: displayed,
-      rows: result.items.map((row) => {
-        const identity = String(row[admin.identityField]);
-        return {
-          identity,
-          cells: displayed.map((column6) => formatCellValue(row[column6])),
-          url: `${prefix}/m/${admin.slug()}/${identity}`
-        };
-      }),
-      total: result.total,
-      page: result.page,
-      pages: result.pages,
-      prevUrl: result.page > 1 ? pageUrl(result.page - 1) : null,
-      nextUrl: result.page < result.pages ? pageUrl(result.page + 1) : null,
-      searchable: searchable.length > 0,
-      searchValue: search,
-      filters: filterViews,
-      sort,
-      newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+    const lensOrder = lens?.orderBy ?? null;
+    const lensDescending = lensOrder?.startsWith("-");
+    const lensColumn = lensOrder === null ? null : lensOrder.replace(/^-/, "");
+    const ascending = sortColumn !== null ? queryString(req.query.dir) !== "desc" : lensColumn !== null ? !lensDescending : admin.orderAscending;
+    if (lens !== null) baseQuery.lens = lens.slug;
+    return {
+      search,
+      searchable,
+      where: conditions.length === 0 ? void 0 : tempestDbJs.and(...conditions),
+      orderBy: sortColumn ?? lensColumn ?? admin.orderKey ?? void 0,
+      ascending,
+      sortColumn,
+      filterViews,
+      baseQuery,
+      lens: lens?.slug ?? ""
     };
-    return renderListPage(context(req, state.session), view);
+  }
+  async function relatedOptions(column6, dbSession) {
+    const table = foreignKeyTable(column6);
+    if (table === null) return null;
+    const referenced = site.get(table);
+    if (referenced === null) return null;
+    const rows = await referenced.repository(dbSession).list();
+    return rows.slice(0, FK_OPTION_CAP).map((row) => ({
+      value: String(row[referenced.identityField]),
+      label: foreignKeyLabel(referenced, row)
+    }));
+  }
+  async function foreignKeyOptionsFor(admin, dbSession) {
+    const columns = adminColumns(admin.model);
+    const options2 = {};
+    for (const field of Object.keys(foreignKeyFields(admin))) {
+      const column6 = columns[field];
+      if (column6 === void 0) continue;
+      const related = await relatedOptions(column6, dbSession);
+      if (related !== null) options2[field] = related;
+    }
+    return options2;
   }
   return router;
 }
+function flagAllows(admin, action) {
+  if (action === AdminPermission.CREATE) return admin.canCreate;
+  if (action === AdminPermission.EDIT) return admin.canEdit;
+  if (action === AdminPermission.DELETE) return admin.canDelete;
+  return true;
+}
+function stampActor(admin, data, actorId, creating) {
+  const columns = adminColumns(admin.model);
+  if (creating && "createdBy" in columns) data.createdBy = actorId;
+  if ("updatedBy" in columns) data.updatedBy = actorId;
+}
+function formatMetric(value) {
+  if (typeof value === "string") return value;
+  return Number.isInteger(value) ? String(value) : value.toFixed(2);
+}
+async function computeBusinessCard(card, dbSession) {
+  const base = {
+    label: card.label,
+    unit: null,
+    direction: "flat",
+    percent: null,
+    previous: "",
+    segments: [],
+    helpText: card.helpText ?? null
+  };
+  let data;
+  try {
+    data = await card.compute(dbSession);
+  } catch (error) {
+    logger2.warning("Admin dashboard card failed", {
+      card: card.label,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { ...base, kind: "value", value: "", error: "Could not compute this metric." };
+  }
+  if (data.kind === "partition") {
+    const total = partitionTotal(data);
+    return {
+      ...base,
+      kind: "partition",
+      value: formatMetric(total),
+      segments: data.segments.map((segment) => ({
+        label: segment.label,
+        value: formatMetric(segment.value),
+        percent: total === 0 ? 0 : segment.value / total * 100
+      })),
+      error: null
+    };
+  }
+  if (data.kind === "trend") {
+    const percent = trendPercent(data);
+    return {
+      ...base,
+      kind: "trend",
+      value: formatMetric(data.value),
+      unit: data.unit ?? null,
+      direction: trendDirection(data),
+      percent: percent === null ? null : `${percent >= 0 ? "+" : ""}${percent.toFixed(1)}%`,
+      previous: formatMetric(data.previous),
+      error: null
+    };
+  }
+  return {
+    ...base,
+    kind: "value",
+    value: formatMetric(data.value),
+    unit: data.unit ?? null,
+    error: null
+  };
+}
+function bulkActionsFor(admin) {
+  const actions = [];
+  const hasActiveFlag = "isActive" in adminColumns(admin.model);
+  if (admin.canEdit && hasActiveFlag) {
+    actions.push({ value: "activate", label: "Activate", dangerous: false });
+    actions.push({ value: "deactivate", label: "Deactivate", dangerous: false });
+  }
+  if (admin.canDelete) {
+    actions.push({ value: "delete", label: "Delete", dangerous: true });
+  }
+  for (const action of admin.customActions()) {
+    actions.push({
+      value: `custom:${action.name}`,
+      label: action.label,
+      dangerous: action.dangerous
+    });
+  }
+  return actions;
+}
+function exportValue(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "bigint") return value.toString();
+  if (value instanceof Uint8Array) return Buffer.from(value).toString("base64");
+  return value;
+}
+function csvField(value) {
+  if (value === null || value === void 0) return "";
+  const text = typeof value === "object" ? JSON.stringify(value) : String(value);
+  if (/[",\r\n]/.test(text)) return `"${text.replace(/"/g, '""')}"`;
+  return text;
+}
+function toCsv(columns, rows) {
+  const lines = [columns.map(csvField).join(",")];
+  for (const row of rows) {
+    lines.push(columns.map((column6) => csvField(exportValue(row[column6]))).join(","));
+  }
+  return `${lines.join("\r\n")}\r
+`;
+}
+function toJson(columns, rows) {
+  return JSON.stringify(
+    rows.map(
+      (row) => Object.fromEntries(columns.map((column6) => [column6, exportValue(row[column6])]))
+    ),
+    null,
+    2
+  );
+}
 function describeWriteFailure(admin, error) {
   const detail = error instanceof Error ? error.message : String(error);
   return `The database refused this ${admin.verboseName().toLowerCase()}: ${detail}`;
@@ -14624,7 +15282,7 @@ async function withTestDatabase(models, fn) {
 }
 
 // src/version.ts
-var VERSION = "0.24.0";
+var VERSION = "0.26.0";
 
 Object.defineProperty(exports, "OpenAPIRegistry", {
   enumerable: true,
@@ -14782,6 +15440,7 @@ exports.ADMIN_CSS = ADMIN_CSS;
 exports.ActivationService = ActivationService;
 exports.AdminJsonSite = AdminJsonSite;
 exports.AdminModel = AdminModel;
+exports.AdminPermission = AdminPermission;
 exports.AdminSessionStore = AdminSessionStore;
 exports.AdminSite = AdminSite;
 exports.AppException = AppException;
@@ -14880,7 +15539,9 @@ exports.WebhookSignatureVerifier = WebhookSignatureVerifier;
 exports.WhatsAppProvider = WhatsAppProvider;
 exports.activationSchema = activationSchema;
 exports.addLogSink = addLogSink;
+exports.adminAction = adminAction;
 exports.adminColumns = adminColumns;
+exports.adminLens = adminLens;
 exports.adminThemeCss = adminThemeCss;
 exports.attachWebSocketHub = attachWebSocketHub;
 exports.authResponseSchema = authResponseSchema;
@@ -14926,6 +15587,9 @@ exports.envBoolean = looseBoolean;
 exports.envList = envList;
 exports.escapeHtml = escapeHtml;
 exports.filterForColumn = filterForColumn;
+exports.foreignKeyFields = foreignKeyFields;
+exports.foreignKeyLabel = foreignKeyLabel;
+exports.foreignKeyTable = foreignKeyTable;
 exports.formatCellValue = formatCellValue;
 exports.formatFieldValue = formatFieldValue;
 exports.generateCsrfToken = generateCsrfToken;
@@ -14979,6 +15643,7 @@ exports.makeToolSpecRouter = makeToolSpecRouter;
 exports.makeTwilioWebhookRouter = makeTwilioWebhookRouter;
 exports.makeUnhandledExceptionHandler = makeUnhandledExceptionHandler;
 exports.makeWhatsAppWebhookRouter = makeWhatsAppWebhookRouter;
+exports.metricCard = metricCard;
 exports.mfaChallengeSchema = mfaChallengeSchema;
 exports.mfaCodeSchema = mfaCodeSchema;
 exports.mfaEnrollResponseSchema = mfaEnrollResponseSchema;
@@ -15003,6 +15668,7 @@ exports.paginationSchema = paginationSchema;
 exports.parseAcceptLanguage = parseAcceptLanguage;
 exports.parseCookies = parseCookies;
 exports.parseFormBody = parseFormBody;
+exports.partitionTotal = partitionTotal;
 exports.passwordResetConfirmSchema = passwordResetConfirmSchema;
 exports.passwordResetRequestSchema = passwordResetRequestSchema;
 exports.percentField = percentField;
@@ -15055,6 +15721,8 @@ exports.toUtc = toUtc;
 exports.tokenFromUrl = tokenFromUrl;
 exports.tokenPairSchema = tokenPairSchema;
 exports.tokenSettingsShape = tokenSettingsShape;
+exports.trendDirection = trendDirection;
+exports.trendPercent = trendPercent;
 exports.ufField = ufField;
 exports.updatedByColumn = updatedByColumn;
 exports.uploadSettingsShape = uploadSettingsShape;