tempest-express-sdk 0.25.0 → 0.26.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { z, looseBoolean, toDict, PasswordUtils } from './chunk-TIW2KPT2.js';
-export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-TIW2KPT2.js';
+import { z, looseBoolean, toDict, PasswordUtils } from './chunk-GLZYNX63.js';
+export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-GLZYNX63.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { Model, column, sql, BaseRepository, RecordNotFound, detectDialect, columnsOf, NodeSqliteDriver, AsyncEngine, or, and } from 'tempest-db-js';
 export { AsyncEngine, AsyncResult, AsyncSession, BaseRepository, Column, DeleteBuilder, InsertBuilder, Model, NoResultError, NodeSqliteDriver, PostgresDialect, RecordNotFound, SelectBuilder, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
@@ -9317,12 +9317,51 @@ var MessagingHub = class {
   }
 };
 
+// src/admin/dashboard.ts
+function metricCard(label, compute, helpText) {
+  return helpText === void 0 ? { label, compute } : { label, compute, helpText };
+}
+function trendPercent(trend) {
+  if (trend.previous === 0) return null;
+  return (trend.value - trend.previous) / trend.previous * 100;
+}
+function trendDirection(trend) {
+  if (trend.value > trend.previous) return "up";
+  if (trend.value < trend.previous) return "down";
+  return "flat";
+}
+function partitionTotal(partition) {
+  return partition.segments.reduce((total, segment) => total + segment.value, 0);
+}
+
+// src/admin/lenses.ts
+function slugify(name) {
+  return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
+}
+function adminLens(options) {
+  return {
+    name: options.name,
+    slug: slugify(options.name),
+    label: options.label ?? options.name,
+    filters: options.filters ?? {},
+    orderBy: options.orderBy ?? null
+  };
+}
+
+// src/admin/permissions.ts
+var AdminPermission = {
+  VIEW: "view",
+  CREATE: "create",
+  EDIT: "edit",
+  DELETE: "delete"
+};
+
 // src/admin/actions.ts
-function slugify(label) {
+function slugify2(label) {
   return label.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "action";
 }
 function adminAction(options, handler) {
-  const name = options.name ?? slugify(options.label);
+  const name = options.name ?? slugify2(options.label);
   if (name === "") throw new Error("adminAction requires a non-empty name or label");
   return {
     name,
@@ -9428,6 +9467,12 @@ var NEVER_EDITABLE = [
   "hashedPassword"
 ];
 var NEVER_LISTED = ["hashedPassword"];
+var AUDIT_FIELDS = [
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "updatedBy"
+];
 var AdminModel = class {
   /** The managed model class. */
   model;
@@ -9451,6 +9496,10 @@ var AdminModel = class {
   canEdit;
   /** Whether the delete action is exposed. */
   canDelete;
+  /** Audit-log model backing the detail timeline, or `null`. */
+  auditModel;
+  /** Saved list-view presets, in declaration order. */
+  lenses;
   actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
@@ -9476,6 +9525,8 @@ var AdminModel = class {
     this.canCreate = options.canCreate ?? true;
     this.canEdit = options.canEdit ?? true;
     this.canDelete = options.canDelete ?? true;
+    this.auditModel = options.auditModel ?? null;
+    this.lenses = [...options.lenses ?? []];
     for (const action of options.actions ?? []) {
       if (this.actions.has(action.name)) {
         throw new Error(
@@ -9560,6 +9611,25 @@ var AdminModel = class {
     if (this.listDisplayOverride !== null) return [...this.listDisplayOverride];
     return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
   }
+  /**
+   * Look a lens up by its slug.
+   *
+   * @param slug - The `?lens=` value.
+   * @returns The lens, or `null` when nothing matches.
+   */
+  getLens(slug) {
+    return this.lenses.find((lens) => lens.slug === slug) ?? null;
+  }
+  /**
+   * Return the audit/timestamp columns the model actually declares.
+   *
+   * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+   *   `updatedBy` present on the model, in that order.
+   */
+  auditFieldNames() {
+    const known = new Set(this.columnNames());
+    return AUDIT_FIELDS.filter((name) => known.has(name));
+  }
   /**
    * Return the columns the detail view renders.
    *
@@ -9568,10 +9638,16 @@ var AdminModel = class {
    * where an operator goes to see the whole record, so trimming it there would
    * hide data with nowhere else to read it.
    *
-   * @returns Every column but the password hash, in declaration order.
+   * The audit/timestamp columns are held back too — they render in the detail
+   * view's own audit panel, next to the change history, rather than scattered
+   * among the domain fields.
+   *
+   * @returns Every domain column, in declaration order.
    */
   detailFieldNames() {
-    return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
+    return this.columnNames().filter(
+      (name) => !NEVER_LISTED.includes(name) && !AUDIT_FIELDS.includes(name)
+    );
   }
   /**
    * Return the columns a create/edit form exposes.
@@ -10028,6 +10104,8 @@ var AdminSite = class {
   siteUrl;
   /** Typed appearance overrides. */
   theme;
+  /** Business-metric cards rendered at the top of the dashboard. */
+  dashboardCards;
   registry = /* @__PURE__ */ new Map();
   /**
    * Initialize the site.
@@ -10040,6 +10118,7 @@ var AdminSite = class {
     this.indexSubtitle = options.indexSubtitle ?? "Site administration";
     this.siteUrl = options.siteUrl ?? null;
     this.theme = options.theme ?? {};
+    this.dashboardCards = [...options.dashboardCards ?? []];
   }
   /**
    * Return the centered header brand text.
@@ -11859,7 +11938,7 @@ function renderMfaPage(context, error) {
 </section>`;
   return renderLayout(context, `Two-factor \xB7 ${context.site.title}`, body);
 }
-function renderDashboardPage(context, cards, metrics) {
+function renderDashboardPage(context, cards, metrics, businessCards = []) {
   const metricsPanel = metrics === null ? "" : `<div class="tempest-admin-stats" aria-label="System metrics">
     <div class="tempest-admin-stat">
       <span class="tempest-admin-stat__label">CPU</span>
@@ -11871,6 +11950,7 @@ function renderDashboardPage(context, cards, metrics) {
       <span class="tempest-admin-stat__sub">${escapeHtml(metrics.memoryUsedGb)} / ${escapeHtml(metrics.memoryTotalGb)} GB</span>
     </div>
   </div>`;
+  const business = businessCards.length > 0 ? `<div class="tempest-admin-cards" aria-label="Business metrics">${businessCards.map(renderBusinessCard).join("")}</div>` : "";
   const models = cards.length > 0 ? `<div class="tempest-admin-models">${cards.map(
     (card) => `<article class="tempest-admin-model-card">
       <header class="tempest-admin-model-card__head">
@@ -11887,10 +11967,53 @@ function renderDashboardPage(context, cards, metrics) {
   <h1>${escapeHtml(context.site.title)}</h1>
   <p>${escapeHtml(context.site.indexSubtitle)}</p>
   ${metricsPanel}
+  ${business}
   ${models}
 </section>`;
   return renderLayout(context, context.site.title, body);
 }
+function renderBusinessCard(card) {
+  const help = card.helpText !== null ? `<span class="tempest-admin-card__help">${escapeHtml(card.helpText)}</span>` : "";
+  if (card.error !== null) {
+    return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">\u2014</span>
+      <span class="tempest-admin-card__help">${escapeHtml(card.error)}</span>
+    </article>`;
+  }
+  const unit = card.unit !== null ? ` <small>${escapeHtml(card.unit)}</small>` : "";
+  if (card.kind === "partition") {
+    const parts = card.segments.map(
+      (segment) => `<li>
+        <span class="tempest-admin-card__part-label">${escapeHtml(segment.label)}</span>
+        <span class="tempest-admin-card__part-bar"><span style="width: ${Math.round(segment.percent)}%"></span></span>
+        <span class="tempest-admin-card__part-value">${escapeHtml(segment.value)}</span>
+      </li>`
+    ).join("");
+    return `<article class="tempest-admin-card tempest-admin-card--partition">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <ul class="tempest-admin-card__parts">${parts}</ul>
+      ${help}
+    </article>`;
+  }
+  if (card.kind === "trend") {
+    const arrow = card.direction === "up" ? "\u25B2" : card.direction === "down" ? "\u25BC" : "\u25AC";
+    return `<article class="tempest-admin-card tempest-admin-card--trend">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      <span class="tempest-admin-card__trend tempest-admin-card__trend--${escapeHtml(card.direction)}">
+        ${arrow} ${card.percent === null ? "\u2014" : escapeHtml(card.percent)}
+        <small>vs prev ${escapeHtml(card.previous)}</small>
+      </span>
+      ${help}
+    </article>`;
+  }
+  return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      ${help}
+    </article>`;
+}
 function renderFilter(filter) {
   const name = `filter_${filter.field}`;
   if (filter.kind === "select") {
@@ -11960,6 +12083,9 @@ function renderListPage(context, view) {
       <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
     </div>
   </div>
+  ${view.lenses.length > 0 ? `<nav class="tempest-admin-lenses" aria-label="Lenses">${view.lenses.map(
+    (lens) => `<a class="tempest-admin-lens${lens.active ? " tempest-admin-lens--active" : ""}" href="${escapeHtml(lens.url)}">${escapeHtml(lens.label)}</a>`
+  ).join("")}</nav>` : ""}
   ${bulkBar}
   <div class="tempest-admin-table-wrap">
     <table class="tempest-admin-list__table">
@@ -11983,6 +12109,7 @@ function renderDetailPage(context, view) {
   const fields = view.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
+  const auditPanel = view.audit === null ? "" : renderAuditPanel(view.audit);
   const body = `<section class="tempest-admin-detail">
   <header class="tempest-admin-detail__header">
     <h1>${escapeHtml(view.title)} \xB7 ${escapeHtml(view.identity)}</h1>
@@ -11996,9 +12123,37 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
+function renderAuditPanel(audit) {
+  const rows = audit.fields.map(
+    (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
+  ).join("");
+  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+    const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
+      (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
+    ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
+    const context = entry.context !== null ? `<pre class="tempest-admin-detail__json">${escapeHtml(entry.context)}</pre>` : "";
+    return `<li class="tempest-admin-history__item">
+        <details>
+          <summary>
+            <span class="tempest-admin-history__action">${escapeHtml(entry.action)}</span>
+            <span class="tempest-admin-history__actor">${escapeHtml(entry.actor)}</span>
+            <span class="tempest-admin-history__at">${escapeHtml(entry.at)}</span>
+          </summary>
+          ${changes}
+          ${context}
+        </details>
+      </li>`;
+  }).join("")}</ol>` : "";
+  return `<section class="tempest-admin-audit">
+    <h2>Audit</h2>
+    <dl class="tempest-admin-detail__fields">${rows}</dl>
+    ${history}
+  </section>`;
+}
 function renderFormField(field) {
   const required = field.required ? " required" : "";
   const name = escapeHtml(field.name);
@@ -12062,6 +12217,7 @@ function renderFormPage(context, view) {
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var AUDIT_HISTORY_LIMIT = 50;
 var FK_OPTION_CAP = 1e3;
 var FLASH_MAX_LENGTH = 300;
 var FLASH_MESSAGES = {
@@ -12100,18 +12256,23 @@ function makeAdminRouter(site, options) {
   const backend = options.authBackend;
   const router = express3.Router();
   router.use(prefix, express3.urlencoded({ extended: false }));
-  const context = (req, session) => ({
+  const context = (req, session, models = site.list()) => ({
     site,
     theme,
     prefix,
     session,
     currentPath: req.originalUrl.split("?")[0] ?? req.path,
-    navModels: site.list().map((admin) => ({
+    navModels: models.map((admin) => ({
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
     messages: flashFor(req)
   });
+  const allows = async (principal, admin, action) => {
+    if (!flagAllows(admin, action)) return false;
+    if (options.accessPolicy === void 0) return true;
+    return Boolean(await options.accessPolicy(principal, admin, action));
+  };
   const flashFor = (req) => {
     const fixed = FLASH_MESSAGES[queryString(req.query.ok)];
     if (fixed !== void 0) return [fixed];
@@ -12159,14 +12320,28 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/mfa`);
       return null;
     }
-    return { session, dbSession, principal };
+    const visible = [];
+    for (const admin of site.list()) {
+      if (await allows(principal, admin, AdminPermission.VIEW)) visible.push(admin);
+    }
+    return { session, dbSession, principal, visible };
   };
-  const resolveAdmin = (req, res, state) => {
+  const resolveAdmin = async (req, res, state, action = AdminPermission.VIEW) => {
     const admin = site.get(String(req.params.slug));
-    if (admin === null) {
-      html(res, renderNotFound(context(req, state.session)), 404);
+    if (admin === null || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+      html(res, renderNotFound(context(req, state.session, state.visible)), 404);
       return null;
     }
+    if (action !== AdminPermission.VIEW) {
+      if (!flagAllows(admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return null;
+      }
+      if (!await allows(state.principal, admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return null;
+      }
+    }
     return admin;
   };
   const renderNotFound = (ctx) => renderDashboardPage(
@@ -12177,7 +12352,7 @@ function makeAdminRouter(site, options) {
   const checkCsrf = (req, res, state) => {
     const body = req.body;
     if (csrfTokenMatches(state.session, body?.csrf_token)) return true;
-    html(res, renderNotFound(context(req, state.session)), 403);
+    html(res, renderNotFound(context(req, state.session, state.visible)), 403);
     return false;
   };
   router.get(`${prefix}/static/admin.css`, (_req, res) => {
@@ -12259,7 +12434,7 @@ function makeAdminRouter(site, options) {
       const state = await authenticate(req, res);
       if (state === null) return;
       const cards = [];
-      for (const admin of site.list()) {
+      for (const admin of state.visible) {
         let count = null;
         try {
           count = await admin.repository(state.dbSession).count();
@@ -12273,9 +12448,13 @@ function makeAdminRouter(site, options) {
           label: admin.verboseNamePlural(),
           count,
           url: `${prefix}/m/${admin.slug()}`,
-          newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+          newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null
         });
       }
+      const businessCards = [];
+      for (const card of site.dashboardCards) {
+        businessCards.push(await computeBusinessCard(card, state.dbSession));
+      }
       let metrics = null;
       if (showMetrics) {
         const snapshot2 = MetricsUtils.system();
@@ -12286,7 +12465,15 @@ function makeAdminRouter(site, options) {
           memoryTotalGb: (snapshot2.memory.total / 1024 ** 3).toFixed(1)
         };
       }
-      html(res, renderDashboardPage(context(req, state.session), cards, metrics));
+      html(
+        res,
+        renderDashboardPage(
+          context(req, state.session, state.visible),
+          cards,
+          metrics,
+          businessCards
+        )
+      );
     })
   );
   router.get(
@@ -12294,7 +12481,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       html(res, await renderList(req, admin, state));
     })
@@ -12304,15 +12491,15 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "create",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
@@ -12330,10 +12517,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12343,7 +12530,7 @@ function makeAdminRouter(site, options) {
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "create",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
@@ -12362,6 +12549,7 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(admin, parsed.data, backend.principalId(state.principal), true);
       try {
         await admin.repository(state.dbSession).create(parsed.data);
       } catch (error) {
@@ -12376,11 +12564,11 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const format = String(req.params.format);
       if (format !== "csv" && format !== "json") {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12402,7 +12590,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
@@ -12418,7 +12606,12 @@ function makeAdminRouter(site, options) {
         return;
       }
       if (!bulkActionsFor(admin).some((option) => option.value === action)) {
-        html(res, renderNotFound(context(req, state.session)), 400);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+        return;
+      }
+      const needed = action === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (!await allows(state.principal, admin, needed)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
         return;
       }
       const repository = admin.repository(state.dbSession);
@@ -12426,7 +12619,7 @@ function makeAdminRouter(site, options) {
       if (action.startsWith("custom:")) {
         const custom = admin.getAction(action.slice("custom:".length));
         if (custom === null) {
-          html(res, renderNotFound(context(req, state.session)), 400);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 400);
           return;
         }
         let result;
@@ -12476,23 +12669,24 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const row = await findRow(admin, state.dbSession, String(req.params.identity));
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const identity = String(row[admin.identityField]);
       html(
         res,
-        renderDetailPage(context(req, state.session), {
+        renderDetailPage(context(req, state.session, state.visible), {
           title: admin.verboseName(),
           identity,
+          audit: await buildAuditView(admin, row, state.dbSession),
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
-          editUrl: admin.canEdit ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
-          deleteUrl: admin.canDelete ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+          deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
         })
       );
     })
@@ -12502,17 +12696,17 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       const row = admin.canEdit ? await findRow(admin, state.dbSession, identity) : null;
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "edit",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
@@ -12531,11 +12725,11 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       if (!admin.canEdit) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12545,7 +12739,7 @@ function makeAdminRouter(site, options) {
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "edit",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
@@ -12564,10 +12758,16 @@ function makeAdminRouter(site, options) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(
+        admin,
+        parsed.data,
+        backend.principalId(state.principal),
+        false
+      );
       try {
         const changed = await admin.repository(state.dbSession).update({ [admin.identityField]: identity }, parsed.data);
         if (changed === 0) {
-          html(res, renderNotFound(context(req, state.session)), 404);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 404);
           return;
         }
       } catch (error) {
@@ -12582,10 +12782,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.DELETE);
       if (admin === null) return;
       if (!admin.canDelete) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12593,10 +12793,58 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=deleted`);
     })
   );
+  async function actorLabel(actor, dbSession) {
+    if (actor === null || actor === void 0 || actor === "") return "";
+    const principal = await backend.loadPrincipal(dbSession, String(actor));
+    return principal === null ? String(actor) : backend.displayName(principal);
+  }
+  async function buildAuditView(admin, row, dbSession) {
+    const fields = [];
+    for (const name of admin.auditFieldNames()) {
+      const value = name === "createdBy" || name === "updatedBy" ? await actorLabel(row[name], dbSession) : formatCellValue(row[name]);
+      fields.push({ label: humanizeField(name), value });
+    }
+    const history = [];
+    if (admin.auditModel !== null) {
+      const entity = admin.model.name;
+      const entityId = String(row[admin.identityField]);
+      const page2 = await new BaseRepository(admin.auditModel, dbSession).paginate({
+        page: 1,
+        pageSize: AUDIT_HISTORY_LIMIT,
+        orderBy: "createdAt",
+        ascending: false,
+        filters: { entity, entityId }
+      });
+      for (const entry of page2.items) {
+        const changes = entry.changes ?? {};
+        history.push({
+          action: String(entry.action ?? ""),
+          at: formatCellValue(entry.createdAt),
+          actor: await actorLabel(entry.actor, dbSession) || "\u2014",
+          changes: Object.entries(changes).map(([field, change]) => ({
+            field,
+            before: formatCellValue(change?.before),
+            after: formatCellValue(change?.after)
+          })),
+          context: entry.context === null || entry.context === void 0 ? null : JSON.stringify(entry.context, null, 2)
+        });
+      }
+    }
+    if (fields.length === 0 && history.length === 0) return null;
+    return { fields, history };
+  }
   async function findRow(admin, dbSession, identity) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  async function permittedBulkActions(admin, principal) {
+    const permitted = [];
+    for (const option of bulkActionsFor(admin)) {
+      const needed = option.value === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (await allows(principal, admin, needed)) permitted.push(option);
+    }
+    return permitted;
+  }
   async function renderList(req, admin, state) {
     const columns = adminColumns(admin.model);
     const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12651,21 +12899,36 @@ function makeAdminRouter(site, options) {
       searchValue: query.search,
       filters: query.filterViews,
       sort,
-      newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null,
-      bulkActions: bulkActionsFor(admin),
+      newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null,
+      bulkActions: await permittedBulkActions(admin, state.principal),
       bulkUrl: `${prefix}/m/${admin.slug()}/bulk`,
       exportCsvUrl: exportUrl("csv"),
-      exportJsonUrl: exportUrl("json")
+      exportJsonUrl: exportUrl("json"),
+      lenses: admin.lenses.length === 0 ? [] : [
+        {
+          label: "All",
+          url: `?${buildQuery({ ...query.baseQuery, lens: void 0 })}`,
+          active: query.lens === ""
+        },
+        ...admin.lenses.map((entry) => ({
+          label: entry.label,
+          url: `?${buildQuery({ ...query.baseQuery, lens: entry.slug })}`,
+          active: query.lens === entry.slug
+        }))
+      ]
     };
-    return renderListPage(context(req, state.session), view);
+    return renderListPage(context(req, state.session, state.visible), view);
   }
   async function resolveListQuery(req, admin, dbSession) {
     const columns = adminColumns(admin.model);
     const search = queryString(req.query.q);
     const sortField = queryString(req.query.sort);
     const sortColumn = sortField in columns ? sortField : null;
-    const ascending = sortColumn === null ? admin.orderAscending : queryString(req.query.dir) !== "desc";
+    const lens = admin.getLens(queryString(req.query.lens));
     const conditions = [];
+    if (lens !== null && Object.keys(lens.filters).length > 0) {
+      conditions.push(lens.filters);
+    }
     const filterViews = [];
     for (const field of admin.listFilter) {
       const column6 = columns[field];
@@ -12729,15 +12992,21 @@ function makeAdminRouter(site, options) {
         baseQuery[`filter_${view.field}`] = view.value;
       }
     }
+    const lensOrder = lens?.orderBy ?? null;
+    const lensDescending = lensOrder?.startsWith("-");
+    const lensColumn = lensOrder === null ? null : lensOrder.replace(/^-/, "");
+    const ascending = sortColumn !== null ? queryString(req.query.dir) !== "desc" : lensColumn !== null ? !lensDescending : admin.orderAscending;
+    if (lens !== null) baseQuery.lens = lens.slug;
     return {
       search,
       searchable,
       where: conditions.length === 0 ? void 0 : and(...conditions),
-      orderBy: sortColumn ?? admin.orderKey ?? void 0,
+      orderBy: sortColumn ?? lensColumn ?? admin.orderKey ?? void 0,
       ascending,
       sortColumn,
       filterViews,
-      baseQuery
+      baseQuery,
+      lens: lens?.slug ?? ""
     };
   }
   async function relatedOptions(column6, dbSession) {
@@ -12764,6 +13033,76 @@ function makeAdminRouter(site, options) {
   }
   return router;
 }
+function flagAllows(admin, action) {
+  if (action === AdminPermission.CREATE) return admin.canCreate;
+  if (action === AdminPermission.EDIT) return admin.canEdit;
+  if (action === AdminPermission.DELETE) return admin.canDelete;
+  return true;
+}
+function stampActor(admin, data, actorId, creating) {
+  const columns = adminColumns(admin.model);
+  if (creating && "createdBy" in columns) data.createdBy = actorId;
+  if ("updatedBy" in columns) data.updatedBy = actorId;
+}
+function formatMetric(value) {
+  if (typeof value === "string") return value;
+  return Number.isInteger(value) ? String(value) : value.toFixed(2);
+}
+async function computeBusinessCard(card, dbSession) {
+  const base = {
+    label: card.label,
+    unit: null,
+    direction: "flat",
+    percent: null,
+    previous: "",
+    segments: [],
+    helpText: card.helpText ?? null
+  };
+  let data;
+  try {
+    data = await card.compute(dbSession);
+  } catch (error) {
+    logger2.warning("Admin dashboard card failed", {
+      card: card.label,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { ...base, kind: "value", value: "", error: "Could not compute this metric." };
+  }
+  if (data.kind === "partition") {
+    const total = partitionTotal(data);
+    return {
+      ...base,
+      kind: "partition",
+      value: formatMetric(total),
+      segments: data.segments.map((segment) => ({
+        label: segment.label,
+        value: formatMetric(segment.value),
+        percent: total === 0 ? 0 : segment.value / total * 100
+      })),
+      error: null
+    };
+  }
+  if (data.kind === "trend") {
+    const percent = trendPercent(data);
+    return {
+      ...base,
+      kind: "trend",
+      value: formatMetric(data.value),
+      unit: data.unit ?? null,
+      direction: trendDirection(data),
+      percent: percent === null ? null : `${percent >= 0 ? "+" : ""}${percent.toFixed(1)}%`,
+      previous: formatMetric(data.previous),
+      error: null
+    };
+  }
+  return {
+    ...base,
+    kind: "value",
+    value: formatMetric(data.value),
+    unit: data.unit ?? null,
+    error: null
+  };
+}
 function bulkActionsFor(admin) {
   const actions = [];
   const hasActiveFlag = "isActive" in adminColumns(admin.model);
@@ -14815,6 +15154,6 @@ async function withTestDatabase(models, fn) {
   }
 }
 
-export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminPermission, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminLens, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map