tempest-express-sdk 0.25.0 → 0.26.0

package/dist/index.cjs

@@ -9444,12 +9444,51 @@ var MessagingHub = class {
   }
 };
 
+// src/admin/dashboard.ts
+function metricCard(label, compute, helpText) {
+  return helpText === void 0 ? { label, compute } : { label, compute, helpText };
+}
+function trendPercent(trend) {
+  if (trend.previous === 0) return null;
+  return (trend.value - trend.previous) / trend.previous * 100;
+}
+function trendDirection(trend) {
+  if (trend.value > trend.previous) return "up";
+  if (trend.value < trend.previous) return "down";
+  return "flat";
+}
+function partitionTotal(partition) {
+  return partition.segments.reduce((total, segment) => total + segment.value, 0);
+}
+
+// src/admin/lenses.ts
+function slugify(name) {
+  return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
+}
+function adminLens(options) {
+  return {
+    name: options.name,
+    slug: slugify(options.name),
+    label: options.label ?? options.name,
+    filters: options.filters ?? {},
+    orderBy: options.orderBy ?? null
+  };
+}
+
+// src/admin/permissions.ts
+var AdminPermission = {
+  VIEW: "view",
+  CREATE: "create",
+  EDIT: "edit",
+  DELETE: "delete"
+};
+
 // src/admin/actions.ts
-function slugify(label) {
+function slugify2(label) {
   return label.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "action";
 }
 function adminAction(options, handler) {
-  const name = options.name ?? slugify(options.label);
+  const name = options.name ?? slugify2(options.label);
   if (name === "") throw new Error("adminAction requires a non-empty name or label");
   return {
     name,
@@ -9555,6 +9594,12 @@ var NEVER_EDITABLE = [
   "hashedPassword"
 ];
 var NEVER_LISTED = ["hashedPassword"];
+var AUDIT_FIELDS = [
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "updatedBy"
+];
 var AdminModel = class {
   /** The managed model class. */
   model;
@@ -9578,6 +9623,10 @@ var AdminModel = class {
   canEdit;
   /** Whether the delete action is exposed. */
   canDelete;
+  /** Audit-log model backing the detail timeline, or `null`. */
+  auditModel;
+  /** Saved list-view presets, in declaration order. */
+  lenses;
   actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
@@ -9603,6 +9652,8 @@ var AdminModel = class {
     this.canCreate = options.canCreate ?? true;
     this.canEdit = options.canEdit ?? true;
     this.canDelete = options.canDelete ?? true;
+    this.auditModel = options.auditModel ?? null;
+    this.lenses = [...options.lenses ?? []];
     for (const action of options.actions ?? []) {
       if (this.actions.has(action.name)) {
         throw new Error(
@@ -9687,6 +9738,25 @@ var AdminModel = class {
     if (this.listDisplayOverride !== null) return [...this.listDisplayOverride];
     return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
   }
+  /**
+   * Look a lens up by its slug.
+   *
+   * @param slug - The `?lens=` value.
+   * @returns The lens, or `null` when nothing matches.
+   */
+  getLens(slug) {
+    return this.lenses.find((lens) => lens.slug === slug) ?? null;
+  }
+  /**
+   * Return the audit/timestamp columns the model actually declares.
+   *
+   * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+   *   `updatedBy` present on the model, in that order.
+   */
+  auditFieldNames() {
+    const known = new Set(this.columnNames());
+    return AUDIT_FIELDS.filter((name) => known.has(name));
+  }
   /**
    * Return the columns the detail view renders.
    *
@@ -9695,10 +9765,16 @@ var AdminModel = class {
    * where an operator goes to see the whole record, so trimming it there would
    * hide data with nowhere else to read it.
    *
-   * @returns Every column but the password hash, in declaration order.
+   * The audit/timestamp columns are held back too — they render in the detail
+   * view's own audit panel, next to the change history, rather than scattered
+   * among the domain fields.
+   *
+   * @returns Every domain column, in declaration order.
    */
   detailFieldNames() {
-    return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
+    return this.columnNames().filter(
+      (name) => !NEVER_LISTED.includes(name) && !AUDIT_FIELDS.includes(name)
+    );
   }
   /**
    * Return the columns a create/edit form exposes.
@@ -10155,6 +10231,8 @@ var AdminSite = class {
   siteUrl;
   /** Typed appearance overrides. */
   theme;
+  /** Business-metric cards rendered at the top of the dashboard. */
+  dashboardCards;
   registry = /* @__PURE__ */ new Map();
   /**
    * Initialize the site.
@@ -10167,6 +10245,7 @@ var AdminSite = class {
     this.indexSubtitle = options.indexSubtitle ?? "Site administration";
     this.siteUrl = options.siteUrl ?? null;
     this.theme = options.theme ?? {};
+    this.dashboardCards = [...options.dashboardCards ?? []];
   }
   /**
    * Return the centered header brand text.
@@ -11986,7 +12065,7 @@ function renderMfaPage(context, error) {
 </section>`;
   return renderLayout(context, `Two-factor \xB7 ${context.site.title}`, body);
 }
-function renderDashboardPage(context, cards, metrics) {
+function renderDashboardPage(context, cards, metrics, businessCards = []) {
   const metricsPanel = metrics === null ? "" : `<div class="tempest-admin-stats" aria-label="System metrics">
     <div class="tempest-admin-stat">
       <span class="tempest-admin-stat__label">CPU</span>
@@ -11998,6 +12077,7 @@ function renderDashboardPage(context, cards, metrics) {
       <span class="tempest-admin-stat__sub">${escapeHtml(metrics.memoryUsedGb)} / ${escapeHtml(metrics.memoryTotalGb)} GB</span>
     </div>
   </div>`;
+  const business = businessCards.length > 0 ? `<div class="tempest-admin-cards" aria-label="Business metrics">${businessCards.map(renderBusinessCard).join("")}</div>` : "";
   const models = cards.length > 0 ? `<div class="tempest-admin-models">${cards.map(
     (card) => `<article class="tempest-admin-model-card">
       <header class="tempest-admin-model-card__head">
@@ -12014,10 +12094,53 @@ function renderDashboardPage(context, cards, metrics) {
   <h1>${escapeHtml(context.site.title)}</h1>
   <p>${escapeHtml(context.site.indexSubtitle)}</p>
   ${metricsPanel}
+  ${business}
   ${models}
 </section>`;
   return renderLayout(context, context.site.title, body);
 }
+function renderBusinessCard(card) {
+  const help = card.helpText !== null ? `<span class="tempest-admin-card__help">${escapeHtml(card.helpText)}</span>` : "";
+  if (card.error !== null) {
+    return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">\u2014</span>
+      <span class="tempest-admin-card__help">${escapeHtml(card.error)}</span>
+    </article>`;
+  }
+  const unit = card.unit !== null ? ` <small>${escapeHtml(card.unit)}</small>` : "";
+  if (card.kind === "partition") {
+    const parts = card.segments.map(
+      (segment) => `<li>
+        <span class="tempest-admin-card__part-label">${escapeHtml(segment.label)}</span>
+        <span class="tempest-admin-card__part-bar"><span style="width: ${Math.round(segment.percent)}%"></span></span>
+        <span class="tempest-admin-card__part-value">${escapeHtml(segment.value)}</span>
+      </li>`
+    ).join("");
+    return `<article class="tempest-admin-card tempest-admin-card--partition">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <ul class="tempest-admin-card__parts">${parts}</ul>
+      ${help}
+    </article>`;
+  }
+  if (card.kind === "trend") {
+    const arrow = card.direction === "up" ? "\u25B2" : card.direction === "down" ? "\u25BC" : "\u25AC";
+    return `<article class="tempest-admin-card tempest-admin-card--trend">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      <span class="tempest-admin-card__trend tempest-admin-card__trend--${escapeHtml(card.direction)}">
+        ${arrow} ${card.percent === null ? "\u2014" : escapeHtml(card.percent)}
+        <small>vs prev ${escapeHtml(card.previous)}</small>
+      </span>
+      ${help}
+    </article>`;
+  }
+  return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      ${help}
+    </article>`;
+}
 function renderFilter(filter) {
   const name = `filter_${filter.field}`;
   if (filter.kind === "select") {
@@ -12087,6 +12210,9 @@ function renderListPage(context, view) {
       <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
     </div>
   </div>
+  ${view.lenses.length > 0 ? `<nav class="tempest-admin-lenses" aria-label="Lenses">${view.lenses.map(
+    (lens) => `<a class="tempest-admin-lens${lens.active ? " tempest-admin-lens--active" : ""}" href="${escapeHtml(lens.url)}">${escapeHtml(lens.label)}</a>`
+  ).join("")}</nav>` : ""}
   ${bulkBar}
   <div class="tempest-admin-table-wrap">
     <table class="tempest-admin-list__table">
@@ -12110,6 +12236,7 @@ function renderDetailPage(context, view) {
   const fields = view.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
+  const auditPanel = view.audit === null ? "" : renderAuditPanel(view.audit);
   const body = `<section class="tempest-admin-detail">
   <header class="tempest-admin-detail__header">
     <h1>${escapeHtml(view.title)} \xB7 ${escapeHtml(view.identity)}</h1>
@@ -12123,9 +12250,37 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
+function renderAuditPanel(audit) {
+  const rows = audit.fields.map(
+    (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
+  ).join("");
+  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+    const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
+      (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
+    ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
+    const context = entry.context !== null ? `<pre class="tempest-admin-detail__json">${escapeHtml(entry.context)}</pre>` : "";
+    return `<li class="tempest-admin-history__item">
+        <details>
+          <summary>
+            <span class="tempest-admin-history__action">${escapeHtml(entry.action)}</span>
+            <span class="tempest-admin-history__actor">${escapeHtml(entry.actor)}</span>
+            <span class="tempest-admin-history__at">${escapeHtml(entry.at)}</span>
+          </summary>
+          ${changes}
+          ${context}
+        </details>
+      </li>`;
+  }).join("")}</ol>` : "";
+  return `<section class="tempest-admin-audit">
+    <h2>Audit</h2>
+    <dl class="tempest-admin-detail__fields">${rows}</dl>
+    ${history}
+  </section>`;
+}
 function renderFormField(field) {
   const required = field.required ? " required" : "";
   const name = escapeHtml(field.name);
@@ -12189,6 +12344,7 @@ function renderFormPage(context, view) {
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var AUDIT_HISTORY_LIMIT = 50;
 var FK_OPTION_CAP = 1e3;
 var FLASH_MAX_LENGTH = 300;
 var FLASH_MESSAGES = {
@@ -12227,18 +12383,23 @@ function makeAdminRouter(site, options) {
   const backend = options.authBackend;
   const router = express3__default.default.Router();
   router.use(prefix, express3__default.default.urlencoded({ extended: false }));
-  const context = (req, session) => ({
+  const context = (req, session, models = site.list()) => ({
     site,
     theme,
     prefix,
     session,
     currentPath: req.originalUrl.split("?")[0] ?? req.path,
-    navModels: site.list().map((admin) => ({
+    navModels: models.map((admin) => ({
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
     messages: flashFor(req)
   });
+  const allows = async (principal, admin, action) => {
+    if (!flagAllows(admin, action)) return false;
+    if (options.accessPolicy === void 0) return true;
+    return Boolean(await options.accessPolicy(principal, admin, action));
+  };
   const flashFor = (req) => {
     const fixed = FLASH_MESSAGES[queryString(req.query.ok)];
     if (fixed !== void 0) return [fixed];
@@ -12286,14 +12447,28 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/mfa`);
       return null;
     }
-    return { session, dbSession, principal };
+    const visible = [];
+    for (const admin of site.list()) {
+      if (await allows(principal, admin, AdminPermission.VIEW)) visible.push(admin);
+    }
+    return { session, dbSession, principal, visible };
   };
-  const resolveAdmin = (req, res, state) => {
+  const resolveAdmin = async (req, res, state, action = AdminPermission.VIEW) => {
     const admin = site.get(String(req.params.slug));
-    if (admin === null) {
-      html(res, renderNotFound(context(req, state.session)), 404);
+    if (admin === null || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+      html(res, renderNotFound(context(req, state.session, state.visible)), 404);
       return null;
     }
+    if (action !== AdminPermission.VIEW) {
+      if (!flagAllows(admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return null;
+      }
+      if (!await allows(state.principal, admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return null;
+      }
+    }
     return admin;
   };
   const renderNotFound = (ctx) => renderDashboardPage(
@@ -12304,7 +12479,7 @@ function makeAdminRouter(site, options) {
   const checkCsrf = (req, res, state) => {
     const body = req.body;
     if (csrfTokenMatches(state.session, body?.csrf_token)) return true;
-    html(res, renderNotFound(context(req, state.session)), 403);
+    html(res, renderNotFound(context(req, state.session, state.visible)), 403);
     return false;
   };
   router.get(`${prefix}/static/admin.css`, (_req, res) => {
@@ -12386,7 +12561,7 @@ function makeAdminRouter(site, options) {
       const state = await authenticate(req, res);
       if (state === null) return;
       const cards = [];
-      for (const admin of site.list()) {
+      for (const admin of state.visible) {
         let count = null;
         try {
           count = await admin.repository(state.dbSession).count();
@@ -12400,9 +12575,13 @@ function makeAdminRouter(site, options) {
           label: admin.verboseNamePlural(),
           count,
           url: `${prefix}/m/${admin.slug()}`,
-          newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+          newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null
         });
       }
+      const businessCards = [];
+      for (const card of site.dashboardCards) {
+        businessCards.push(await computeBusinessCard(card, state.dbSession));
+      }
       let metrics = null;
       if (showMetrics) {
         const snapshot2 = MetricsUtils.system();
@@ -12413,7 +12592,15 @@ function makeAdminRouter(site, options) {
           memoryTotalGb: (snapshot2.memory.total / 1024 ** 3).toFixed(1)
         };
       }
-      html(res, renderDashboardPage(context(req, state.session), cards, metrics));
+      html(
+        res,
+        renderDashboardPage(
+          context(req, state.session, state.visible),
+          cards,
+          metrics,
+          businessCards
+        )
+      );
     })
   );
   router.get(
@@ -12421,7 +12608,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       html(res, await renderList(req, admin, state));
     })
@@ -12431,15 +12618,15 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "create",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
@@ -12457,10 +12644,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12470,7 +12657,7 @@ function makeAdminRouter(site, options) {
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "create",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
@@ -12489,6 +12676,7 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(admin, parsed.data, backend.principalId(state.principal), true);
       try {
         await admin.repository(state.dbSession).create(parsed.data);
       } catch (error) {
@@ -12503,11 +12691,11 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const format = String(req.params.format);
       if (format !== "csv" && format !== "json") {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12529,7 +12717,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
@@ -12545,7 +12733,12 @@ function makeAdminRouter(site, options) {
         return;
       }
       if (!bulkActionsFor(admin).some((option) => option.value === action)) {
-        html(res, renderNotFound(context(req, state.session)), 400);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+        return;
+      }
+      const needed = action === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (!await allows(state.principal, admin, needed)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
         return;
       }
       const repository = admin.repository(state.dbSession);
@@ -12553,7 +12746,7 @@ function makeAdminRouter(site, options) {
       if (action.startsWith("custom:")) {
         const custom = admin.getAction(action.slice("custom:".length));
         if (custom === null) {
-          html(res, renderNotFound(context(req, state.session)), 400);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 400);
           return;
         }
         let result;
@@ -12603,23 +12796,24 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const row = await findRow(admin, state.dbSession, String(req.params.identity));
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const identity = String(row[admin.identityField]);
       html(
         res,
-        renderDetailPage(context(req, state.session), {
+        renderDetailPage(context(req, state.session, state.visible), {
           title: admin.verboseName(),
           identity,
+          audit: await buildAuditView(admin, row, state.dbSession),
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
-          editUrl: admin.canEdit ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
-          deleteUrl: admin.canDelete ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+          deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
         })
       );
     })
@@ -12629,17 +12823,17 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       const row = admin.canEdit ? await findRow(admin, state.dbSession, identity) : null;
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "edit",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
@@ -12658,11 +12852,11 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       if (!admin.canEdit) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12672,7 +12866,7 @@ function makeAdminRouter(site, options) {
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "edit",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
@@ -12691,10 +12885,16 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(
+        admin,
+        parsed.data,
+        backend.principalId(state.principal),
+        false
+      );
       try {
         const changed = await admin.repository(state.dbSession).update({ [admin.identityField]: identity }, parsed.data);
         if (changed === 0) {
-          html(res, renderNotFound(context(req, state.session)), 404);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 404);
           return;
         }
       } catch (error) {
@@ -12709,10 +12909,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.DELETE);
       if (admin === null) return;
       if (!admin.canDelete) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12720,10 +12920,58 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=deleted`);
     })
   );
+  async function actorLabel(actor, dbSession) {
+    if (actor === null || actor === void 0 || actor === "") return "";
+    const principal = await backend.loadPrincipal(dbSession, String(actor));
+    return principal === null ? String(actor) : backend.displayName(principal);
+  }
+  async function buildAuditView(admin, row, dbSession) {
+    const fields = [];
+    for (const name of admin.auditFieldNames()) {
+      const value = name === "createdBy" || name === "updatedBy" ? await actorLabel(row[name], dbSession) : formatCellValue(row[name]);
+      fields.push({ label: humanizeField(name), value });
+    }
+    const history = [];
+    if (admin.auditModel !== null) {
+      const entity = admin.model.name;
+      const entityId = String(row[admin.identityField]);
+      const page2 = await new tempestDbJs.BaseRepository(admin.auditModel, dbSession).paginate({
+        page: 1,
+        pageSize: AUDIT_HISTORY_LIMIT,
+        orderBy: "createdAt",
+        ascending: false,
+        filters: { entity, entityId }
+      });
+      for (const entry of page2.items) {
+        const changes = entry.changes ?? {};
+        history.push({
+          action: String(entry.action ?? ""),
+          at: formatCellValue(entry.createdAt),
+          actor: await actorLabel(entry.actor, dbSession) || "\u2014",
+          changes: Object.entries(changes).map(([field, change]) => ({
+            field,
+            before: formatCellValue(change?.before),
+            after: formatCellValue(change?.after)
+          })),
+          context: entry.context === null || entry.context === void 0 ? null : JSON.stringify(entry.context, null, 2)
+        });
+      }
+    }
+    if (fields.length === 0 && history.length === 0) return null;
+    return { fields, history };
+  }
   async function findRow(admin, dbSession, identity) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  async function permittedBulkActions(admin, principal) {
+    const permitted = [];
+    for (const option of bulkActionsFor(admin)) {
+      const needed = option.value === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (await allows(principal, admin, needed)) permitted.push(option);
+    }
+    return permitted;
+  }
   async function renderList(req, admin, state) {
     const columns = adminColumns(admin.model);
     const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12778,21 +13026,36 @@ function makeAdminRouter(site, options) {
       searchValue: query.search,
       filters: query.filterViews,
       sort,
-      newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null,
-      bulkActions: bulkActionsFor(admin),
+      newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null,
+      bulkActions: await permittedBulkActions(admin, state.principal),
       bulkUrl: `${prefix}/m/${admin.slug()}/bulk`,
       exportCsvUrl: exportUrl("csv"),
-      exportJsonUrl: exportUrl("json")
+      exportJsonUrl: exportUrl("json"),
+      lenses: admin.lenses.length === 0 ? [] : [
+        {
+          label: "All",
+          url: `?${buildQuery({ ...query.baseQuery, lens: void 0 })}`,
+          active: query.lens === ""
+        },
+        ...admin.lenses.map((entry) => ({
+          label: entry.label,
+          url: `?${buildQuery({ ...query.baseQuery, lens: entry.slug })}`,
+          active: query.lens === entry.slug
+        }))
+      ]
     };
-    return renderListPage(context(req, state.session), view);
+    return renderListPage(context(req, state.session, state.visible), view);
   }
   async function resolveListQuery(req, admin, dbSession) {
     const columns = adminColumns(admin.model);
     const search = queryString(req.query.q);
     const sortField = queryString(req.query.sort);
     const sortColumn = sortField in columns ? sortField : null;
-    const ascending = sortColumn === null ? admin.orderAscending : queryString(req.query.dir) !== "desc";
+    const lens = admin.getLens(queryString(req.query.lens));
     const conditions = [];
+    if (lens !== null && Object.keys(lens.filters).length > 0) {
+      conditions.push(lens.filters);
+    }
     const filterViews = [];
     for (const field of admin.listFilter) {
       const column6 = columns[field];
@@ -12856,15 +13119,21 @@ function makeAdminRouter(site, options) {
         baseQuery[`filter_${view.field}`] = view.value;
       }
     }
+    const lensOrder = lens?.orderBy ?? null;
+    const lensDescending = lensOrder?.startsWith("-");
+    const lensColumn = lensOrder === null ? null : lensOrder.replace(/^-/, "");
+    const ascending = sortColumn !== null ? queryString(req.query.dir) !== "desc" : lensColumn !== null ? !lensDescending : admin.orderAscending;
+    if (lens !== null) baseQuery.lens = lens.slug;
     return {
       search,
       searchable,
       where: conditions.length === 0 ? void 0 : tempestDbJs.and(...conditions),
-      orderBy: sortColumn ?? admin.orderKey ?? void 0,
+      orderBy: sortColumn ?? lensColumn ?? admin.orderKey ?? void 0,
       ascending,
       sortColumn,
       filterViews,
-      baseQuery
+      baseQuery,
+      lens: lens?.slug ?? ""
     };
   }
   async function relatedOptions(column6, dbSession) {
@@ -12891,6 +13160,76 @@ function makeAdminRouter(site, options) {
   }
   return router;
 }
+function flagAllows(admin, action) {
+  if (action === AdminPermission.CREATE) return admin.canCreate;
+  if (action === AdminPermission.EDIT) return admin.canEdit;
+  if (action === AdminPermission.DELETE) return admin.canDelete;
+  return true;
+}
+function stampActor(admin, data, actorId, creating) {
+  const columns = adminColumns(admin.model);
+  if (creating && "createdBy" in columns) data.createdBy = actorId;
+  if ("updatedBy" in columns) data.updatedBy = actorId;
+}
+function formatMetric(value) {
+  if (typeof value === "string") return value;
+  return Number.isInteger(value) ? String(value) : value.toFixed(2);
+}
+async function computeBusinessCard(card, dbSession) {
+  const base = {
+    label: card.label,
+    unit: null,
+    direction: "flat",
+    percent: null,
+    previous: "",
+    segments: [],
+    helpText: card.helpText ?? null
+  };
+  let data;
+  try {
+    data = await card.compute(dbSession);
+  } catch (error) {
+    logger2.warning("Admin dashboard card failed", {
+      card: card.label,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { ...base, kind: "value", value: "", error: "Could not compute this metric." };
+  }
+  if (data.kind === "partition") {
+    const total = partitionTotal(data);
+    return {
+      ...base,
+      kind: "partition",
+      value: formatMetric(total),
+      segments: data.segments.map((segment) => ({
+        label: segment.label,
+        value: formatMetric(segment.value),
+        percent: total === 0 ? 0 : segment.value / total * 100
+      })),
+      error: null
+    };
+  }
+  if (data.kind === "trend") {
+    const percent = trendPercent(data);
+    return {
+      ...base,
+      kind: "trend",
+      value: formatMetric(data.value),
+      unit: data.unit ?? null,
+      direction: trendDirection(data),
+      percent: percent === null ? null : `${percent >= 0 ? "+" : ""}${percent.toFixed(1)}%`,
+      previous: formatMetric(data.previous),
+      error: null
+    };
+  }
+  return {
+    ...base,
+    kind: "value",
+    value: formatMetric(data.value),
+    unit: data.unit ?? null,
+    error: null
+  };
+}
 function bulkActionsFor(admin) {
   const actions = [];
   const hasActiveFlag = "isActive" in adminColumns(admin.model);
@@ -14943,7 +15282,7 @@ async function withTestDatabase(models, fn) {
 }
 
 // src/version.ts
-var VERSION = "0.25.0";
+var VERSION = "0.26.0";
 
 Object.defineProperty(exports, "OpenAPIRegistry", {
   enumerable: true,
@@ -15101,6 +15440,7 @@ exports.ADMIN_CSS = ADMIN_CSS;
 exports.ActivationService = ActivationService;
 exports.AdminJsonSite = AdminJsonSite;
 exports.AdminModel = AdminModel;
+exports.AdminPermission = AdminPermission;
 exports.AdminSessionStore = AdminSessionStore;
 exports.AdminSite = AdminSite;
 exports.AppException = AppException;
@@ -15201,6 +15541,7 @@ exports.activationSchema = activationSchema;
 exports.addLogSink = addLogSink;
 exports.adminAction = adminAction;
 exports.adminColumns = adminColumns;
+exports.adminLens = adminLens;
 exports.adminThemeCss = adminThemeCss;
 exports.attachWebSocketHub = attachWebSocketHub;
 exports.authResponseSchema = authResponseSchema;
@@ -15302,6 +15643,7 @@ exports.makeToolSpecRouter = makeToolSpecRouter;
 exports.makeTwilioWebhookRouter = makeTwilioWebhookRouter;
 exports.makeUnhandledExceptionHandler = makeUnhandledExceptionHandler;
 exports.makeWhatsAppWebhookRouter = makeWhatsAppWebhookRouter;
+exports.metricCard = metricCard;
 exports.mfaChallengeSchema = mfaChallengeSchema;
 exports.mfaCodeSchema = mfaCodeSchema;
 exports.mfaEnrollResponseSchema = mfaEnrollResponseSchema;
@@ -15326,6 +15668,7 @@ exports.paginationSchema = paginationSchema;
 exports.parseAcceptLanguage = parseAcceptLanguage;
 exports.parseCookies = parseCookies;
 exports.parseFormBody = parseFormBody;
+exports.partitionTotal = partitionTotal;
 exports.passwordResetConfirmSchema = passwordResetConfirmSchema;
 exports.passwordResetRequestSchema = passwordResetRequestSchema;
 exports.percentField = percentField;
@@ -15378,6 +15721,8 @@ exports.toUtc = toUtc;
 exports.tokenFromUrl = tokenFromUrl;
 exports.tokenPairSchema = tokenPairSchema;
 exports.tokenSettingsShape = tokenSettingsShape;
+exports.trendDirection = trendDirection;
+exports.trendPercent = trendPercent;
 exports.ufField = ufField;
 exports.updatedByColumn = updatedByColumn;
 exports.uploadSettingsShape = uploadSettingsShape;