tempest-express-sdk 0.24.0 → 0.26.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { z, looseBoolean, toDict, PasswordUtils } from './chunk-6KJTKSG5.js';
-export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-6KJTKSG5.js';
+import { z, looseBoolean, toDict, PasswordUtils } from './chunk-GLZYNX63.js';
+export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-GLZYNX63.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { Model, column, sql, BaseRepository, RecordNotFound, detectDialect, columnsOf, NodeSqliteDriver, AsyncEngine, or, and } from 'tempest-db-js';
 export { AsyncEngine, AsyncResult, AsyncSession, BaseRepository, Column, DeleteBuilder, InsertBuilder, Model, NoResultError, NodeSqliteDriver, PostgresDialect, RecordNotFound, SelectBuilder, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
@@ -9317,6 +9317,60 @@ var MessagingHub = class {
   }
 };
 
+// src/admin/dashboard.ts
+function metricCard(label, compute, helpText) {
+  return helpText === void 0 ? { label, compute } : { label, compute, helpText };
+}
+function trendPercent(trend) {
+  if (trend.previous === 0) return null;
+  return (trend.value - trend.previous) / trend.previous * 100;
+}
+function trendDirection(trend) {
+  if (trend.value > trend.previous) return "up";
+  if (trend.value < trend.previous) return "down";
+  return "flat";
+}
+function partitionTotal(partition) {
+  return partition.segments.reduce((total, segment) => total + segment.value, 0);
+}
+
+// src/admin/lenses.ts
+function slugify(name) {
+  return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
+}
+function adminLens(options) {
+  return {
+    name: options.name,
+    slug: slugify(options.name),
+    label: options.label ?? options.name,
+    filters: options.filters ?? {},
+    orderBy: options.orderBy ?? null
+  };
+}
+
+// src/admin/permissions.ts
+var AdminPermission = {
+  VIEW: "view",
+  CREATE: "create",
+  EDIT: "edit",
+  DELETE: "delete"
+};
+
+// src/admin/actions.ts
+function slugify2(label) {
+  return label.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "action";
+}
+function adminAction(options, handler) {
+  const name = options.name ?? slugify2(options.label);
+  if (name === "") throw new Error("adminAction requires a non-empty name or label");
+  return {
+    name,
+    label: options.label,
+    handler,
+    dangerous: options.dangerous ?? false
+  };
+}
+
 // src/admin/columns.ts
 function humanizeField(name) {
   return name.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
@@ -9397,6 +9451,9 @@ function filterForColumn(column6) {
   }
   return { kind: "text", options: [] };
 }
+function foreignKeyTable(column6) {
+  return column6.reference?.table ?? null;
+}
 function isSearchableColumn(column6) {
   const { kind } = column6.type;
   return kind === "varchar" || kind === "text" || kind === "char";
@@ -9410,6 +9467,12 @@ var NEVER_EDITABLE = [
   "hashedPassword"
 ];
 var NEVER_LISTED = ["hashedPassword"];
+var AUDIT_FIELDS = [
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "updatedBy"
+];
 var AdminModel = class {
   /** The managed model class. */
   model;
@@ -9433,6 +9496,11 @@ var AdminModel = class {
   canEdit;
   /** Whether the delete action is exposed. */
   canDelete;
+  /** Audit-log model backing the detail timeline, or `null`. */
+  auditModel;
+  /** Saved list-view presets, in declaration order. */
+  lenses;
+  actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
   verboseNameOverride;
@@ -9457,6 +9525,16 @@ var AdminModel = class {
     this.canCreate = options.canCreate ?? true;
     this.canEdit = options.canEdit ?? true;
     this.canDelete = options.canDelete ?? true;
+    this.auditModel = options.auditModel ?? null;
+    this.lenses = [...options.lenses ?? []];
+    for (const action of options.actions ?? []) {
+      if (this.actions.has(action.name)) {
+        throw new Error(
+          `Duplicate admin action name "${action.name}" on ${this.model.tablename}`
+        );
+      }
+      this.actions.set(action.name, action);
+    }
     const known = new Set(this.columnNames());
     for (const [option, names] of [
       ["listDisplay", this.listDisplayOverride ?? []],
@@ -9533,6 +9611,25 @@ var AdminModel = class {
     if (this.listDisplayOverride !== null) return [...this.listDisplayOverride];
     return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
   }
+  /**
+   * Look a lens up by its slug.
+   *
+   * @param slug - The `?lens=` value.
+   * @returns The lens, or `null` when nothing matches.
+   */
+  getLens(slug) {
+    return this.lenses.find((lens) => lens.slug === slug) ?? null;
+  }
+  /**
+   * Return the audit/timestamp columns the model actually declares.
+   *
+   * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+   *   `updatedBy` present on the model, in that order.
+   */
+  auditFieldNames() {
+    const known = new Set(this.columnNames());
+    return AUDIT_FIELDS.filter((name) => known.has(name));
+  }
   /**
    * Return the columns the detail view renders.
    *
@@ -9541,10 +9638,16 @@ var AdminModel = class {
    * where an operator goes to see the whole record, so trimming it there would
    * hide data with nowhere else to read it.
    *
-   * @returns Every column but the password hash, in declaration order.
+   * The audit/timestamp columns are held back too — they render in the detail
+   * view's own audit panel, next to the change history, rather than scattered
+   * among the domain fields.
+   *
+   * @returns Every domain column, in declaration order.
    */
   detailFieldNames() {
-    return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
+    return this.columnNames().filter(
+      (name) => !NEVER_LISTED.includes(name) && !AUDIT_FIELDS.includes(name)
+    );
   }
   /**
    * Return the columns a create/edit form exposes.
@@ -9559,6 +9662,25 @@ var AdminModel = class {
     const skip = /* @__PURE__ */ new Set([...this.readonlyFields, ...NEVER_EDITABLE]);
     return this.columnNames().filter((name) => !skip.has(name));
   }
+  /**
+   * Return the registered custom actions, in declaration order.
+   *
+   * @returns The actions passed via `actions` (empty when none). The model
+   *   type is erased here, the way {@link AdminSite} erases it when it stores a
+   *   configuration — a registry keyed by slug cannot stay generic.
+   */
+  customActions() {
+    return [...this.actions.values()];
+  }
+  /**
+   * Look a custom action up by name.
+   *
+   * @param name - The action identifier (its submitted form value).
+   * @returns The action, or `null` when nothing matches.
+   */
+  getAction(name) {
+    return this.actions.get(name) ?? null;
+  }
   /**
    * Build a repository for this model bound to a session.
    *
@@ -9600,10 +9722,12 @@ function buildFormFields(admin, options = {}) {
   const columns = adminColumns(admin.model);
   const values = options.values ?? {};
   const errors = options.errors ?? {};
+  const foreignKeys = options.foreignKeyOptions ?? {};
   return admin.editableFieldNames().flatMap((name) => {
     const column6 = columns[name];
     if (column6 === void 0) return [];
-    const spec = widgetForColumn(column6);
+    const related = foreignKeys[name];
+    const spec = related === void 0 ? widgetForColumn(column6) : { widget: "select", step: null, options: related };
     const raw = name in values ? values[name] : literalDefault(column6);
     return [
       {
@@ -9653,7 +9777,7 @@ function coerceValue(column6, widget, raw) {
         throw new Error("Enter valid JSON.");
       }
     case "select": {
-      const allowed = meta.values ?? [];
+      const allowed = kind === "enum" ? meta.values ?? [] : [];
       if (allowed.length > 0 && !allowed.includes(raw)) {
         throw new Error(`Choose one of: ${allowed.join(", ")}.`);
       }
@@ -9701,6 +9825,28 @@ function formatCellValue(value) {
   if (typeof value === "object") return JSON.stringify(value);
   return String(value);
 }
+function foreignKeyFields(admin) {
+  const columns = adminColumns(admin.model);
+  const out = {};
+  for (const name of admin.editableFieldNames()) {
+    const column6 = columns[name];
+    if (column6 === void 0) continue;
+    const table = foreignKeyTable(column6);
+    if (table !== null) out[name] = table;
+  }
+  return out;
+}
+function foreignKeyLabel(admin, row) {
+  for (const field of admin.searchFields) {
+    const value = row[field];
+    if (typeof value === "string" && value !== "") return value;
+  }
+  for (const field of ["name", "title", "email", "label", "reference"]) {
+    const value = row[field];
+    if (typeof value === "string" && value !== "") return value;
+  }
+  return String(row[admin.identityField] ?? "");
+}
 
 // src/admin/auth.ts
 var UserModelAuthBackend = class {
@@ -9958,6 +10104,8 @@ var AdminSite = class {
   siteUrl;
   /** Typed appearance overrides. */
   theme;
+  /** Business-metric cards rendered at the top of the dashboard. */
+  dashboardCards;
   registry = /* @__PURE__ */ new Map();
   /**
    * Initialize the site.
@@ -9970,6 +10118,7 @@ var AdminSite = class {
     this.indexSubtitle = options.indexSubtitle ?? "Site administration";
     this.siteUrl = options.siteUrl ?? null;
     this.theme = options.theme ?? {};
+    this.dashboardCards = [...options.dashboardCards ?? []];
   }
   /**
    * Return the centered header brand text.
@@ -11789,7 +11938,7 @@ function renderMfaPage(context, error) {
 </section>`;
   return renderLayout(context, `Two-factor \xB7 ${context.site.title}`, body);
 }
-function renderDashboardPage(context, cards, metrics) {
+function renderDashboardPage(context, cards, metrics, businessCards = []) {
   const metricsPanel = metrics === null ? "" : `<div class="tempest-admin-stats" aria-label="System metrics">
     <div class="tempest-admin-stat">
       <span class="tempest-admin-stat__label">CPU</span>
@@ -11801,6 +11950,7 @@ function renderDashboardPage(context, cards, metrics) {
       <span class="tempest-admin-stat__sub">${escapeHtml(metrics.memoryUsedGb)} / ${escapeHtml(metrics.memoryTotalGb)} GB</span>
     </div>
   </div>`;
+  const business = businessCards.length > 0 ? `<div class="tempest-admin-cards" aria-label="Business metrics">${businessCards.map(renderBusinessCard).join("")}</div>` : "";
   const models = cards.length > 0 ? `<div class="tempest-admin-models">${cards.map(
     (card) => `<article class="tempest-admin-model-card">
       <header class="tempest-admin-model-card__head">
@@ -11817,10 +11967,53 @@ function renderDashboardPage(context, cards, metrics) {
   <h1>${escapeHtml(context.site.title)}</h1>
   <p>${escapeHtml(context.site.indexSubtitle)}</p>
   ${metricsPanel}
+  ${business}
   ${models}
 </section>`;
   return renderLayout(context, context.site.title, body);
 }
+function renderBusinessCard(card) {
+  const help = card.helpText !== null ? `<span class="tempest-admin-card__help">${escapeHtml(card.helpText)}</span>` : "";
+  if (card.error !== null) {
+    return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">\u2014</span>
+      <span class="tempest-admin-card__help">${escapeHtml(card.error)}</span>
+    </article>`;
+  }
+  const unit = card.unit !== null ? ` <small>${escapeHtml(card.unit)}</small>` : "";
+  if (card.kind === "partition") {
+    const parts = card.segments.map(
+      (segment) => `<li>
+        <span class="tempest-admin-card__part-label">${escapeHtml(segment.label)}</span>
+        <span class="tempest-admin-card__part-bar"><span style="width: ${Math.round(segment.percent)}%"></span></span>
+        <span class="tempest-admin-card__part-value">${escapeHtml(segment.value)}</span>
+      </li>`
+    ).join("");
+    return `<article class="tempest-admin-card tempest-admin-card--partition">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <ul class="tempest-admin-card__parts">${parts}</ul>
+      ${help}
+    </article>`;
+  }
+  if (card.kind === "trend") {
+    const arrow = card.direction === "up" ? "\u25B2" : card.direction === "down" ? "\u25BC" : "\u25AC";
+    return `<article class="tempest-admin-card tempest-admin-card--trend">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      <span class="tempest-admin-card__trend tempest-admin-card__trend--${escapeHtml(card.direction)}">
+        ${arrow} ${card.percent === null ? "\u2014" : escapeHtml(card.percent)}
+        <small>vs prev ${escapeHtml(card.previous)}</small>
+      </span>
+      ${help}
+    </article>`;
+  }
+  return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      ${help}
+    </article>`;
+}
 function renderFilter(filter) {
   const name = `filter_${filter.field}`;
   if (filter.kind === "select") {
@@ -11838,15 +12031,40 @@ function renderFilter(filter) {
   return `<label><span>${escapeHtml(filter.label)}</span><input type="text" name="${escapeHtml(name)}" value="${escapeHtml(filter.value)}"></label>`;
 }
 function renderListPage(context, view) {
+  const bulk = view.bulkActions.length > 0 && context.session !== null;
+  const checkColumn = bulk ? 1 : 0;
   const headers = view.columns.map((column6) => {
     const state = view.sort[column6];
     if (state === void 0) return `<th>${escapeHtml(column6)}</th>`;
     const arrow = state.active ? state.ascending ? "\u25B2" : "\u25BC" : "\u2195";
     return `<th><a class="tempest-sort${state.active ? " tempest-sort--active" : ""}" href="${escapeHtml(state.url)}"><span>${escapeHtml(column6)}</span><span class="tempest-sort__arrow" aria-hidden="true">${arrow}</span></a></th>`;
   }).join("");
-  const rows = view.rows.length > 0 ? view.rows.map(
-    (row) => `<tr>${row.cells.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("")}<td><a href="${escapeHtml(row.url)}">View</a></td></tr>`
-  ).join("") : `<tr><td colspan="${view.columns.length + 1}">No records.</td></tr>`;
+  const rows = view.rows.length > 0 ? view.rows.map((row) => {
+    const check = bulk ? `<td class="tempest-admin-list__check"><input type="checkbox" name="ids" value="${escapeHtml(row.identity)}" data-row-check aria-label="Select row"></td>` : "";
+    const cells = row.cells.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("");
+    return `<tr>${check}${cells}<td><a href="${escapeHtml(row.url)}">View</a></td></tr>`;
+  }).join("") : `<tr><td colspan="${view.columns.length + 1 + checkColumn}">No records.</td></tr>`;
+  const bulkBar = bulk ? `<form method="post" action="${escapeHtml(view.bulkUrl)}" class="tempest-admin-bulk" onsubmit="return confirm('Apply the selected action to the checked rows?');">
+    <input type="hidden" name="csrf_token" value="${escapeHtml(context.session?.csrfToken)}">
+    <div class="tempest-admin-bulk__bar">
+      <select name="action" aria-label="Bulk action">
+        ${view.bulkActions.map(
+    (action) => `<option value="${escapeHtml(action.value)}">${escapeHtml(action.label)}${action.dangerous ? " \u26A0" : ""}</option>`
+  ).join("")}
+      </select>
+      <button type="submit">Apply to selected</button>
+    </div>` : "";
+  const selectAllScript = bulk ? `<script>
+    (function () {
+      var master = document.querySelector('[data-select-all]');
+      if (!master) return;
+      master.addEventListener('change', function () {
+        document.querySelectorAll('[data-row-check]').forEach(function (box) {
+          box.checked = master.checked;
+        });
+      });
+    })();
+  </script>` : "";
   const hasControls = view.searchable || view.filters.length > 0;
   const body = `<section class="tempest-admin-list">
   <header class="tempest-admin-list__header">
@@ -11861,14 +12079,22 @@ function renderListPage(context, view) {
     </form>
     <div class="tempest-admin-list__actions">
       ${view.newUrl !== null ? `<a class="tempest-admin-list__new" href="${escapeHtml(view.newUrl)}">+ New</a>` : ""}
+      <a href="${escapeHtml(view.exportCsvUrl)}">Export CSV</a>
+      <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
     </div>
   </div>
+  ${view.lenses.length > 0 ? `<nav class="tempest-admin-lenses" aria-label="Lenses">${view.lenses.map(
+    (lens) => `<a class="tempest-admin-lens${lens.active ? " tempest-admin-lens--active" : ""}" href="${escapeHtml(lens.url)}">${escapeHtml(lens.label)}</a>`
+  ).join("")}</nav>` : ""}
+  ${bulkBar}
   <div class="tempest-admin-table-wrap">
     <table class="tempest-admin-list__table">
-      <thead><tr>${headers}<th>Actions</th></tr></thead>
+      <thead><tr>${bulk ? '<th class="tempest-admin-list__check"><input type="checkbox" data-select-all aria-label="Select all"></th>' : ""}${headers}<th>Actions</th></tr></thead>
       <tbody>${rows}</tbody>
     </table>
   </div>
+  ${bulk ? "</form>" : ""}
+  ${selectAllScript}
   ${view.pages > 1 ? `<nav class="tempest-admin-list__pagination" aria-label="Pagination">
     ${view.prevUrl !== null ? `<a href="${escapeHtml(view.prevUrl)}">\u2190 Prev</a>` : ""}
     <span>Page ${escapeHtml(view.page)} of ${escapeHtml(view.pages)}</span>
@@ -11883,6 +12109,7 @@ function renderDetailPage(context, view) {
   const fields = view.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
+  const auditPanel = view.audit === null ? "" : renderAuditPanel(view.audit);
   const body = `<section class="tempest-admin-detail">
   <header class="tempest-admin-detail__header">
     <h1>${escapeHtml(view.title)} \xB7 ${escapeHtml(view.identity)}</h1>
@@ -11896,9 +12123,37 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
+function renderAuditPanel(audit) {
+  const rows = audit.fields.map(
+    (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
+  ).join("");
+  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+    const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
+      (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
+    ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
+    const context = entry.context !== null ? `<pre class="tempest-admin-detail__json">${escapeHtml(entry.context)}</pre>` : "";
+    return `<li class="tempest-admin-history__item">
+        <details>
+          <summary>
+            <span class="tempest-admin-history__action">${escapeHtml(entry.action)}</span>
+            <span class="tempest-admin-history__actor">${escapeHtml(entry.actor)}</span>
+            <span class="tempest-admin-history__at">${escapeHtml(entry.at)}</span>
+          </summary>
+          ${changes}
+          ${context}
+        </details>
+      </li>`;
+  }).join("")}</ol>` : "";
+  return `<section class="tempest-admin-audit">
+    <h2>Audit</h2>
+    <dl class="tempest-admin-detail__fields">${rows}</dl>
+    ${history}
+  </section>`;
+}
 function renderFormField(field) {
   const required = field.required ? " required" : "";
   const name = escapeHtml(field.name);
@@ -11962,11 +12217,17 @@ function renderFormPage(context, view) {
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var AUDIT_HISTORY_LIMIT = 50;
+var FK_OPTION_CAP = 1e3;
+var FLASH_MAX_LENGTH = 300;
 var FLASH_MESSAGES = {
   created: { text: "Record created.", level: "success" },
   updated: { text: "Record updated.", level: "success" },
   deleted: { text: "Record deleted.", level: "success" }
 };
+async function runCustomAction(action, context) {
+  return await action.handler(context) ?? null;
+}
 function queryString(value) {
   if (typeof value === "string") return value.trim();
   if (Array.isArray(value) && typeof value[0] === "string") return value[0].trim();
@@ -11984,6 +12245,7 @@ function makeAdminRouter(site, options) {
   const prefix = (options.prefix ?? "/admin").replace(/\/$/, "");
   const theme = resolveAdminTheme(site.theme);
   const showMetrics = options.showMetrics ?? true;
+  const exportMaxRows = options.exportMaxRows ?? 5e3;
   const sessions = new AdminSessionStore({
     secret: options.secretKey,
     ...options.cookieName === void 0 ? {} : { cookieName: options.cookieName },
@@ -11994,21 +12256,35 @@ function makeAdminRouter(site, options) {
   const backend = options.authBackend;
   const router = express3.Router();
   router.use(prefix, express3.urlencoded({ extended: false }));
-  const context = (req, session) => ({
+  const context = (req, session, models = site.list()) => ({
     site,
     theme,
     prefix,
     session,
     currentPath: req.originalUrl.split("?")[0] ?? req.path,
-    navModels: site.list().map((admin) => ({
+    navModels: models.map((admin) => ({
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
     messages: flashFor(req)
   });
+  const allows = async (principal, admin, action) => {
+    if (!flagAllows(admin, action)) return false;
+    if (options.accessPolicy === void 0) return true;
+    return Boolean(await options.accessPolicy(principal, admin, action));
+  };
   const flashFor = (req) => {
-    const message = FLASH_MESSAGES[queryString(req.query.ok)];
-    return message === void 0 ? [] : [message];
+    const fixed = FLASH_MESSAGES[queryString(req.query.ok)];
+    if (fixed !== void 0) return [fixed];
+    const text = queryString(req.query.flash);
+    if (text === "") return [];
+    const level = queryString(req.query.level);
+    return [
+      {
+        text: text.slice(0, FLASH_MAX_LENGTH),
+        level: level === "error" || level === "warning" ? level : "success"
+      }
+    ];
   };
   const html = (res, body, status = 200) => {
     res.status(status).type("html").send(body);
@@ -12044,14 +12320,28 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/mfa`);
       return null;
     }
-    return { session, dbSession };
+    const visible = [];
+    for (const admin of site.list()) {
+      if (await allows(principal, admin, AdminPermission.VIEW)) visible.push(admin);
+    }
+    return { session, dbSession, principal, visible };
   };
-  const resolveAdmin = (req, res, state) => {
+  const resolveAdmin = async (req, res, state, action = AdminPermission.VIEW) => {
     const admin = site.get(String(req.params.slug));
-    if (admin === null) {
-      html(res, renderNotFound(context(req, state.session)), 404);
+    if (admin === null || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+      html(res, renderNotFound(context(req, state.session, state.visible)), 404);
       return null;
     }
+    if (action !== AdminPermission.VIEW) {
+      if (!flagAllows(admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return null;
+      }
+      if (!await allows(state.principal, admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return null;
+      }
+    }
     return admin;
   };
   const renderNotFound = (ctx) => renderDashboardPage(
@@ -12062,7 +12352,7 @@ function makeAdminRouter(site, options) {
   const checkCsrf = (req, res, state) => {
     const body = req.body;
     if (csrfTokenMatches(state.session, body?.csrf_token)) return true;
-    html(res, renderNotFound(context(req, state.session)), 403);
+    html(res, renderNotFound(context(req, state.session, state.visible)), 403);
     return false;
   };
   router.get(`${prefix}/static/admin.css`, (_req, res) => {
@@ -12144,7 +12434,7 @@ function makeAdminRouter(site, options) {
       const state = await authenticate(req, res);
       if (state === null) return;
       const cards = [];
-      for (const admin of site.list()) {
+      for (const admin of state.visible) {
         let count = null;
         try {
           count = await admin.repository(state.dbSession).count();
@@ -12158,9 +12448,13 @@ function makeAdminRouter(site, options) {
           label: admin.verboseNamePlural(),
           count,
           url: `${prefix}/m/${admin.slug()}`,
-          newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+          newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null
         });
       }
+      const businessCards = [];
+      for (const card of site.dashboardCards) {
+        businessCards.push(await computeBusinessCard(card, state.dbSession));
+      }
       let metrics = null;
       if (showMetrics) {
         const snapshot2 = MetricsUtils.system();
@@ -12171,7 +12465,15 @@ function makeAdminRouter(site, options) {
           memoryTotalGb: (snapshot2.memory.total / 1024 ** 3).toFixed(1)
         };
       }
-      html(res, renderDashboardPage(context(req, state.session), cards, metrics));
+      html(
+        res,
+        renderDashboardPage(
+          context(req, state.session, state.visible),
+          cards,
+          metrics,
+          businessCards
+        )
+      );
     })
   );
   router.get(
@@ -12179,7 +12481,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       html(res, await renderList(req, admin, state));
     })
@@ -12189,18 +12491,20 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "create",
           title: admin.verboseName(),
-          fields: buildFormFields(admin),
+          fields: buildFormFields(admin, {
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+          }),
           actionUrl: `${prefix}/m/${admin.slug()}/new`,
           backUrl: `${prefix}/m/${admin.slug()}`,
           error: null
@@ -12213,22 +12517,27 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
       const parsed = parseFormBody(admin, body);
+      const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "create",
             title: admin.verboseName(),
-            fields: buildFormFields(admin, { values: body, errors: parsed.errors }),
+            fields: buildFormFields(admin, {
+              values: body,
+              errors: parsed.errors,
+              foreignKeyOptions
+            }),
             actionUrl: `${prefix}/m/${admin.slug()}/new`,
             backUrl: `${prefix}/m/${admin.slug()}`,
             error
@@ -12240,6 +12549,7 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(admin, parsed.data, backend.principalId(state.principal), true);
       try {
         await admin.repository(state.dbSession).create(parsed.data);
       } catch (error) {
@@ -12249,28 +12559,134 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=created`);
     })
   );
+  router.get(
+    `${prefix}/m/:slug/export.:format`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state);
+      if (admin === null) return;
+      const format = String(req.params.format);
+      if (format !== "csv" && format !== "json") {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      const query = await resolveListQuery(req, admin, state.dbSession);
+      const result = await admin.repository(state.dbSession).paginate({
+        page: 1,
+        pageSize: exportMaxRows,
+        ...query.orderBy === void 0 ? {} : { orderBy: query.orderBy },
+        ascending: query.ascending,
+        ...query.where === void 0 ? {} : { filters: query.where }
+      });
+      const columns = admin.listDisplayNames();
+      const rows = result.items;
+      const payload = format === "csv" ? toCsv(columns, rows) : toJson(columns, rows);
+      res.status(200).type(format === "csv" ? "text/csv; charset=utf-8" : "application/json").set("content-disposition", `attachment; filename="${admin.slug()}.${format}"`).send(payload);
+    })
+  );
+  router.post(
+    `${prefix}/m/:slug/bulk`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state);
+      if (admin === null) return;
+      if (!checkCsrf(req, res, state)) return;
+      const body = req.body;
+      const action = typeof body.action === "string" ? body.action : "";
+      const raw = body.ids;
+      const ids = (Array.isArray(raw) ? raw : raw === void 0 ? [] : [raw]).filter((value) => typeof value === "string").filter((value) => value !== "");
+      const listUrl = `${prefix}/m/${admin.slug()}`;
+      const back = (message, level) => {
+        res.redirect(`${listUrl}?${buildQuery({ flash: message, level })}`);
+      };
+      if (ids.length === 0) {
+        back("No rows were selected.", "warning");
+        return;
+      }
+      if (!bulkActionsFor(admin).some((option) => option.value === action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+        return;
+      }
+      const needed = action === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (!await allows(state.principal, admin, needed)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return;
+      }
+      const repository = admin.repository(state.dbSession);
+      const scope = { [admin.identityField]: { in: ids } };
+      if (action.startsWith("custom:")) {
+        const custom = admin.getAction(action.slice("custom:".length));
+        if (custom === null) {
+          html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+          return;
+        }
+        let result;
+        try {
+          result = await runCustomAction(custom, {
+            ids,
+            repository,
+            dbSession: state.dbSession,
+            request: req,
+            session: state.session,
+            principal: state.principal
+          });
+        } catch (error) {
+          logger2.error("Admin action failed", {
+            slug: admin.slug(),
+            action: custom.name,
+            error: error instanceof Error ? error.message : String(error)
+          });
+          back(
+            `${custom.label} failed: ${error instanceof Error ? error.message : String(error)}`,
+            "error"
+          );
+          return;
+        }
+        if (result === null) {
+          res.redirect(listUrl);
+          return;
+        }
+        back(result.message, result.category ?? "success");
+        return;
+      }
+      if (action === "delete") {
+        const removed = await repository.delete(scope);
+        back(`Deleted ${removed} record${removed === 1 ? "" : "s"}.`, "success");
+        return;
+      }
+      const active = action === "activate";
+      const changed = await repository.update(scope, { isActive: active });
+      back(
+        `${active ? "Activated" : "Deactivated"} ${changed} record${changed === 1 ? "" : "s"}.`,
+        "success"
+      );
+    })
+  );
   router.get(
     `${prefix}/m/:slug/:identity`,
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const row = await findRow(admin, state.dbSession, String(req.params.identity));
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const identity = String(row[admin.identityField]);
       html(
         res,
-        renderDetailPage(context(req, state.session), {
+        renderDetailPage(context(req, state.session, state.visible), {
           title: admin.verboseName(),
           identity,
+          audit: await buildAuditView(admin, row, state.dbSession),
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
-          editUrl: admin.canEdit ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
-          deleteUrl: admin.canDelete ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+          deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
         })
       );
     })
@@ -12280,20 +12696,23 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       const row = admin.canEdit ? await findRow(admin, state.dbSession, identity) : null;
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "edit",
           title: admin.verboseName(),
-          fields: buildFormFields(admin, { values: row }),
+          fields: buildFormFields(admin, {
+            values: row,
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+          }),
           actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
           backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
           error: null
@@ -12306,23 +12725,28 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       if (!admin.canEdit) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
       const parsed = parseFormBody(admin, body);
+      const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "edit",
             title: admin.verboseName(),
-            fields: buildFormFields(admin, { values: body, errors: parsed.errors }),
+            fields: buildFormFields(admin, {
+              values: body,
+              errors: parsed.errors,
+              foreignKeyOptions
+            }),
             actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
             backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
             error
@@ -12334,10 +12758,16 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(
+        admin,
+        parsed.data,
+        backend.principalId(state.principal),
+        false
+      );
       try {
         const changed = await admin.repository(state.dbSession).update({ [admin.identityField]: identity }, parsed.data);
         if (changed === 0) {
-          html(res, renderNotFound(context(req, state.session)), 404);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 404);
           return;
         }
       } catch (error) {
@@ -12352,10 +12782,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.DELETE);
       if (admin === null) return;
       if (!admin.canDelete) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12363,18 +12793,142 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=deleted`);
     })
   );
+  async function actorLabel(actor, dbSession) {
+    if (actor === null || actor === void 0 || actor === "") return "";
+    const principal = await backend.loadPrincipal(dbSession, String(actor));
+    return principal === null ? String(actor) : backend.displayName(principal);
+  }
+  async function buildAuditView(admin, row, dbSession) {
+    const fields = [];
+    for (const name of admin.auditFieldNames()) {
+      const value = name === "createdBy" || name === "updatedBy" ? await actorLabel(row[name], dbSession) : formatCellValue(row[name]);
+      fields.push({ label: humanizeField(name), value });
+    }
+    const history = [];
+    if (admin.auditModel !== null) {
+      const entity = admin.model.name;
+      const entityId = String(row[admin.identityField]);
+      const page2 = await new BaseRepository(admin.auditModel, dbSession).paginate({
+        page: 1,
+        pageSize: AUDIT_HISTORY_LIMIT,
+        orderBy: "createdAt",
+        ascending: false,
+        filters: { entity, entityId }
+      });
+      for (const entry of page2.items) {
+        const changes = entry.changes ?? {};
+        history.push({
+          action: String(entry.action ?? ""),
+          at: formatCellValue(entry.createdAt),
+          actor: await actorLabel(entry.actor, dbSession) || "\u2014",
+          changes: Object.entries(changes).map(([field, change]) => ({
+            field,
+            before: formatCellValue(change?.before),
+            after: formatCellValue(change?.after)
+          })),
+          context: entry.context === null || entry.context === void 0 ? null : JSON.stringify(entry.context, null, 2)
+        });
+      }
+    }
+    if (fields.length === 0 && history.length === 0) return null;
+    return { fields, history };
+  }
   async function findRow(admin, dbSession, identity) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  async function permittedBulkActions(admin, principal) {
+    const permitted = [];
+    for (const option of bulkActionsFor(admin)) {
+      const needed = option.value === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (await allows(principal, admin, needed)) permitted.push(option);
+    }
+    return permitted;
+  }
   async function renderList(req, admin, state) {
     const columns = adminColumns(admin.model);
-    const search = queryString(req.query.q);
+    const query = await resolveListQuery(req, admin, state.dbSession);
     const page2 = Math.max(1, Number.parseInt(queryString(req.query.page), 10) || 1);
+    const result = await admin.repository(state.dbSession).paginate({
+      page: page2,
+      pageSize: admin.pageSize,
+      ...query.orderBy === void 0 ? {} : { orderBy: query.orderBy },
+      ascending: query.ascending,
+      ...query.where === void 0 ? {} : { filters: query.where }
+    });
+    const displayed = admin.listDisplayNames();
+    const sort = {};
+    for (const column6 of displayed) {
+      if (!(column6 in columns)) continue;
+      const active = (query.sortColumn ?? admin.orderKey) === column6;
+      const nextAscending = active ? !query.ascending : true;
+      sort[column6] = {
+        url: `?${buildQuery({
+          ...query.baseQuery,
+          sort: column6,
+          dir: nextAscending ? "asc" : "desc"
+        })}`,
+        active,
+        ascending: query.ascending
+      };
+    }
+    const sortParams = {
+      sort: query.sortColumn ?? void 0,
+      dir: query.sortColumn === null ? void 0 : query.ascending ? "asc" : "desc"
+    };
+    const pageUrl = (target) => `?${buildQuery({ ...query.baseQuery, ...sortParams, page: target })}`;
+    const exportQuery = buildQuery({ ...query.baseQuery, ...sortParams });
+    const exportUrl = (format) => `${prefix}/m/${admin.slug()}/export.${format}${exportQuery === "" ? "" : `?${exportQuery}`}`;
+    const view = {
+      title: admin.verboseNamePlural(),
+      columns: displayed,
+      rows: result.items.map((row) => {
+        const identity = String(row[admin.identityField]);
+        return {
+          identity,
+          cells: displayed.map((column6) => formatCellValue(row[column6])),
+          url: `${prefix}/m/${admin.slug()}/${identity}`
+        };
+      }),
+      total: result.total,
+      page: result.page,
+      pages: result.pages,
+      prevUrl: result.page > 1 ? pageUrl(result.page - 1) : null,
+      nextUrl: result.page < result.pages ? pageUrl(result.page + 1) : null,
+      searchable: query.searchable.length > 0,
+      searchValue: query.search,
+      filters: query.filterViews,
+      sort,
+      newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null,
+      bulkActions: await permittedBulkActions(admin, state.principal),
+      bulkUrl: `${prefix}/m/${admin.slug()}/bulk`,
+      exportCsvUrl: exportUrl("csv"),
+      exportJsonUrl: exportUrl("json"),
+      lenses: admin.lenses.length === 0 ? [] : [
+        {
+          label: "All",
+          url: `?${buildQuery({ ...query.baseQuery, lens: void 0 })}`,
+          active: query.lens === ""
+        },
+        ...admin.lenses.map((entry) => ({
+          label: entry.label,
+          url: `?${buildQuery({ ...query.baseQuery, lens: entry.slug })}`,
+          active: query.lens === entry.slug
+        }))
+      ]
+    };
+    return renderListPage(context(req, state.session, state.visible), view);
+  }
+  async function resolveListQuery(req, admin, dbSession) {
+    const columns = adminColumns(admin.model);
+    const search = queryString(req.query.q);
     const sortField = queryString(req.query.sort);
     const sortColumn = sortField in columns ? sortField : null;
-    const ascending = sortColumn === null ? admin.orderAscending : queryString(req.query.dir) !== "desc";
+    const lens = admin.getLens(queryString(req.query.lens));
     const conditions = [];
+    if (lens !== null && Object.keys(lens.filters).length > 0) {
+      conditions.push(lens.filters);
+    }
     const filterViews = [];
     for (const field of admin.listFilter) {
       const column6 = columns[field];
@@ -12398,6 +12952,8 @@ function makeAdminRouter(site, options) {
         });
         continue;
       }
+      const related = await relatedOptions(column6, dbSession);
+      const options2 = related ?? spec.options;
       const value = queryString(req.query[`filter_${field}`]);
       if (value !== "") {
         conditions.push({
@@ -12407,11 +12963,11 @@ function makeAdminRouter(site, options) {
       filterViews.push({
         field,
         label: humanizeField(field),
-        kind: spec.kind,
+        kind: related === null ? spec.kind : "select",
         value,
         valueFrom: "",
         valueTo: "",
-        options: spec.options.map((option) => ({
+        options: options2.map((option) => ({
           value: option.value,
           label: option.label,
           selected: option.value === value
@@ -12427,72 +12983,174 @@ function makeAdminRouter(site, options) {
         or(...searchable.map((field) => ({ [field]: { ilike: `%${search}%` } })))
       );
     }
-    const where = conditions.length === 0 ? void 0 : and(...conditions);
-    const orderBy = sortColumn ?? admin.orderKey ?? void 0;
-    const result = await admin.repository(state.dbSession).paginate({
-      page: page2,
-      pageSize: admin.pageSize,
-      ...orderBy === void 0 ? {} : { orderBy },
-      ascending,
-      ...where === void 0 ? {} : { filters: where }
-    });
-    const displayed = admin.listDisplayNames();
     const baseQuery = { q: search };
-    for (const view2 of filterViews) {
-      if (view2.kind === "daterange") {
-        baseQuery[`filter_${view2.field}_from`] = view2.valueFrom;
-        baseQuery[`filter_${view2.field}_to`] = view2.valueTo;
+    for (const view of filterViews) {
+      if (view.kind === "daterange") {
+        baseQuery[`filter_${view.field}_from`] = view.valueFrom;
+        baseQuery[`filter_${view.field}_to`] = view.valueTo;
       } else {
-        baseQuery[`filter_${view2.field}`] = view2.value;
+        baseQuery[`filter_${view.field}`] = view.value;
       }
     }
-    const sort = {};
-    for (const column6 of displayed) {
-      if (!(column6 in columns)) continue;
-      const active = (sortColumn ?? admin.orderKey) === column6;
-      const nextAscending = active ? !ascending : true;
-      sort[column6] = {
-        url: `?${buildQuery({
-          ...baseQuery,
-          sort: column6,
-          dir: nextAscending ? "asc" : "desc"
-        })}`,
-        active,
-        ascending
-      };
-    }
-    const pageUrl = (target) => `?${buildQuery({
-      ...baseQuery,
-      sort: sortColumn ?? void 0,
-      dir: sortColumn === null ? void 0 : ascending ? "asc" : "desc",
-      page: target
-    })}`;
-    const view = {
-      title: admin.verboseNamePlural(),
-      columns: displayed,
-      rows: result.items.map((row) => {
-        const identity = String(row[admin.identityField]);
-        return {
-          identity,
-          cells: displayed.map((column6) => formatCellValue(row[column6])),
-          url: `${prefix}/m/${admin.slug()}/${identity}`
-        };
-      }),
-      total: result.total,
-      page: result.page,
-      pages: result.pages,
-      prevUrl: result.page > 1 ? pageUrl(result.page - 1) : null,
-      nextUrl: result.page < result.pages ? pageUrl(result.page + 1) : null,
-      searchable: searchable.length > 0,
-      searchValue: search,
-      filters: filterViews,
-      sort,
-      newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+    const lensOrder = lens?.orderBy ?? null;
+    const lensDescending = lensOrder?.startsWith("-");
+    const lensColumn = lensOrder === null ? null : lensOrder.replace(/^-/, "");
+    const ascending = sortColumn !== null ? queryString(req.query.dir) !== "desc" : lensColumn !== null ? !lensDescending : admin.orderAscending;
+    if (lens !== null) baseQuery.lens = lens.slug;
+    return {
+      search,
+      searchable,
+      where: conditions.length === 0 ? void 0 : and(...conditions),
+      orderBy: sortColumn ?? lensColumn ?? admin.orderKey ?? void 0,
+      ascending,
+      sortColumn,
+      filterViews,
+      baseQuery,
+      lens: lens?.slug ?? ""
     };
-    return renderListPage(context(req, state.session), view);
+  }
+  async function relatedOptions(column6, dbSession) {
+    const table = foreignKeyTable(column6);
+    if (table === null) return null;
+    const referenced = site.get(table);
+    if (referenced === null) return null;
+    const rows = await referenced.repository(dbSession).list();
+    return rows.slice(0, FK_OPTION_CAP).map((row) => ({
+      value: String(row[referenced.identityField]),
+      label: foreignKeyLabel(referenced, row)
+    }));
+  }
+  async function foreignKeyOptionsFor(admin, dbSession) {
+    const columns = adminColumns(admin.model);
+    const options2 = {};
+    for (const field of Object.keys(foreignKeyFields(admin))) {
+      const column6 = columns[field];
+      if (column6 === void 0) continue;
+      const related = await relatedOptions(column6, dbSession);
+      if (related !== null) options2[field] = related;
+    }
+    return options2;
   }
   return router;
 }
+function flagAllows(admin, action) {
+  if (action === AdminPermission.CREATE) return admin.canCreate;
+  if (action === AdminPermission.EDIT) return admin.canEdit;
+  if (action === AdminPermission.DELETE) return admin.canDelete;
+  return true;
+}
+function stampActor(admin, data, actorId, creating) {
+  const columns = adminColumns(admin.model);
+  if (creating && "createdBy" in columns) data.createdBy = actorId;
+  if ("updatedBy" in columns) data.updatedBy = actorId;
+}
+function formatMetric(value) {
+  if (typeof value === "string") return value;
+  return Number.isInteger(value) ? String(value) : value.toFixed(2);
+}
+async function computeBusinessCard(card, dbSession) {
+  const base = {
+    label: card.label,
+    unit: null,
+    direction: "flat",
+    percent: null,
+    previous: "",
+    segments: [],
+    helpText: card.helpText ?? null
+  };
+  let data;
+  try {
+    data = await card.compute(dbSession);
+  } catch (error) {
+    logger2.warning("Admin dashboard card failed", {
+      card: card.label,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { ...base, kind: "value", value: "", error: "Could not compute this metric." };
+  }
+  if (data.kind === "partition") {
+    const total = partitionTotal(data);
+    return {
+      ...base,
+      kind: "partition",
+      value: formatMetric(total),
+      segments: data.segments.map((segment) => ({
+        label: segment.label,
+        value: formatMetric(segment.value),
+        percent: total === 0 ? 0 : segment.value / total * 100
+      })),
+      error: null
+    };
+  }
+  if (data.kind === "trend") {
+    const percent = trendPercent(data);
+    return {
+      ...base,
+      kind: "trend",
+      value: formatMetric(data.value),
+      unit: data.unit ?? null,
+      direction: trendDirection(data),
+      percent: percent === null ? null : `${percent >= 0 ? "+" : ""}${percent.toFixed(1)}%`,
+      previous: formatMetric(data.previous),
+      error: null
+    };
+  }
+  return {
+    ...base,
+    kind: "value",
+    value: formatMetric(data.value),
+    unit: data.unit ?? null,
+    error: null
+  };
+}
+function bulkActionsFor(admin) {
+  const actions = [];
+  const hasActiveFlag = "isActive" in adminColumns(admin.model);
+  if (admin.canEdit && hasActiveFlag) {
+    actions.push({ value: "activate", label: "Activate", dangerous: false });
+    actions.push({ value: "deactivate", label: "Deactivate", dangerous: false });
+  }
+  if (admin.canDelete) {
+    actions.push({ value: "delete", label: "Delete", dangerous: true });
+  }
+  for (const action of admin.customActions()) {
+    actions.push({
+      value: `custom:${action.name}`,
+      label: action.label,
+      dangerous: action.dangerous
+    });
+  }
+  return actions;
+}
+function exportValue(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "bigint") return value.toString();
+  if (value instanceof Uint8Array) return Buffer.from(value).toString("base64");
+  return value;
+}
+function csvField(value) {
+  if (value === null || value === void 0) return "";
+  const text = typeof value === "object" ? JSON.stringify(value) : String(value);
+  if (/[",\r\n]/.test(text)) return `"${text.replace(/"/g, '""')}"`;
+  return text;
+}
+function toCsv(columns, rows) {
+  const lines = [columns.map(csvField).join(",")];
+  for (const row of rows) {
+    lines.push(columns.map((column6) => csvField(exportValue(row[column6]))).join(","));
+  }
+  return `${lines.join("\r\n")}\r
+`;
+}
+function toJson(columns, rows) {
+  return JSON.stringify(
+    rows.map(
+      (row) => Object.fromEntries(columns.map((column6) => [column6, exportValue(row[column6])]))
+    ),
+    null,
+    2
+  );
+}
 function describeWriteFailure(admin, error) {
   const detail = error instanceof Error ? error.message : String(error);
   return `The database refused this ${admin.verboseName().toLowerCase()}: ${detail}`;
@@ -14496,6 +15154,6 @@ async function withTestDatabase(models, fn) {
   }
 }
 
-export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminColumns, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminPermission, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminLens, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map