tempest-express-sdk 0.25.0 → 0.27.0

package/dist/index.d.cts

@@ -3492,6 +3492,144 @@ declare class MessagingHub {
     broadcast(channel: string, recipients: string[], text: string, options?: BroadcastOptions): Promise<BroadcastResult[]>;
 }
 
+/**
+ * Business-metric cards for the admin dashboard, mirroring `admin.dashboard`.
+ *
+ * Distinct from the system panel (CPU/memory): these are value / trend /
+ * partition cards computed from the application's own data — "orders today",
+ * "revenue vs last week", "users by plan". Register them on the
+ * {@link AdminSite} and they render above the model cards.
+ *
+ * ```ts
+ * const site = new AdminSite({
+ *   title: "Shop",
+ *   dashboardCards: [
+ *     metricCard("Orders today", async (session) => ({
+ *       kind: "value",
+ *       value: await new BaseRepository(OrderModel, session).count(),
+ *       unit: "orders",
+ *     })),
+ *   ],
+ * });
+ * ```
+ */
+
+/** A single headline number. */
+interface MetricValue {
+    kind: "value";
+    /** The value to show — a number, or a preformatted string. */
+    value: number | string;
+    /** Optional unit suffix (`"orders"`, `"BRL"`). */
+    unit?: string;
+}
+/** A number compared against a previous period. */
+interface MetricTrend {
+    kind: "trend";
+    /** The current value. */
+    value: number;
+    /** The value for the comparison period. */
+    previous: number;
+    /** Optional unit suffix. */
+    unit?: string;
+}
+/** A breakdown of a total across labeled segments. */
+interface MetricPartition {
+    kind: "partition";
+    /** `(label, value)` pairs. */
+    segments: {
+        label: string;
+        value: number;
+    }[];
+}
+/** What a card's `compute` returns. */
+type CardData = MetricValue | MetricTrend | MetricPartition;
+/** Async function computing one card from a DB session. */
+type CardCompute = (session: AsyncSession) => Promise<CardData>;
+/** A dashboard business-metric card. */
+interface MetricCard {
+    /** The card heading. */
+    label: string;
+    /** Async function returning the card data. */
+    compute: CardCompute;
+    /** Optional sub-label shown under the value. */
+    helpText?: string;
+}
+/**
+ * Describe a dashboard card.
+ *
+ * @param label - The card heading.
+ * @param compute - Async function returning the card data.
+ * @param helpText - Optional sub-label.
+ * @returns The card descriptor to pass to `new AdminSite({ dashboardCards })`.
+ */
+declare function metricCard(label: string, compute: CardCompute, helpText?: string): MetricCard;
+/**
+ * Return the percentage change a trend represents.
+ *
+ * @param trend - The computed trend.
+ * @returns `delta / previous * 100`, or `null` when there is no baseline to
+ *   divide by — a percentage against zero is undefined, not infinite.
+ */
+declare function trendPercent(trend: MetricTrend): number | null;
+/**
+ * Return which way a trend moved.
+ *
+ * @param trend - The computed trend.
+ * @returns `"up"`, `"down"` or `"flat"`.
+ */
+declare function trendDirection(trend: MetricTrend): "up" | "down" | "flat";
+/**
+ * Return the sum of a partition's segment values.
+ *
+ * @param partition - The computed partition.
+ * @returns The total across segments.
+ */
+declare function partitionTotal(partition: MetricPartition): number;
+
+/**
+ * Named, saved list-view presets — Laravel Nova's "lenses", mirroring
+ * `admin.config.Lens`.
+ *
+ * A lens bundles a set of filters and an optional ordering under a label. On
+ * the list view lenses render as tabs; clicking one applies its filters (ANDed
+ * with whatever the operator typed) and its ordering. A "support triage" lens
+ * pinning `{ status: "open", priority: { gte: 3 } }` sorted oldest-first gets
+ * an operator to the working set in one click instead of re-entering filters
+ * every morning.
+ */
+
+/** Options accepted by {@link adminLens}. */
+interface AdminLensOptions {
+    /** Lens identifier; its slug is the `?lens=` value. */
+    name: string;
+    /** Conditions merged into the query, in repository `where` shape. */
+    filters?: WhereInput<Record<string, unknown>>;
+    /** Ordering column; prefix with `-` for descending. */
+    orderBy?: string;
+    /** Tab label. Defaults to `name`. */
+    label?: string;
+}
+/** A registered lens. */
+interface AdminLens {
+    /** Lens identifier. */
+    name: string;
+    /** URL slug — the `?lens=` value. */
+    slug: string;
+    /** Tab label. */
+    label: string;
+    /** Conditions merged into the query. */
+    filters: WhereInput<Record<string, unknown>>;
+    /** Ordering column, or `null`. `-column` means descending. */
+    orderBy: string | null;
+}
+/**
+ * Describe a saved list-view preset.
+ *
+ * @param options - Name, filters, ordering and label.
+ * @returns The lens descriptor to pass to `AdminModel({ lenses: [...] })`.
+ */
+declare function adminLens(options: AdminLensOptions): AdminLens;
+
 /**
  * Signed-cookie sessions for the admin panel, mirroring `admin.session`.
  *
@@ -3702,97 +3840,6 @@ interface BulkActionOption {
     dangerous: boolean;
 }
 
-/**
- * Column introspection for the admin panel, mirroring `admin.forms`' widget
- * derivation.
- *
- * `tempest-db-js` keeps rich runtime metadata on every column — the canonical
- * type kind, enum members, `varchar` length, the not-null/default/primary-key
- * flags and the foreign-key reference — so the admin derives its form widgets
- * and list filters from the model itself instead of asking the project to
- * restate them. Kept separate from the router so the (fiddly) type handling is
- * unit-testable in isolation.
- */
-
-/** The set of form controls the admin knows how to render. */
-type AdminWidget = "text" | "textarea" | "number" | "checkbox" | "datetime" | "date" | "time" | "select" | "json";
-/** A `(value, label)` pair for a `select` widget. */
-interface AdminSelectOption {
-    value: string;
-    label: string;
-}
-/** The widget a column maps to, plus the attributes that render it. */
-interface WidgetSpec {
-    /** The control to render. */
-    widget: AdminWidget;
-    /** `step` attribute for `number` widgets, or `null`. */
-    step: string | null;
-    /** Options for `select` widgets (empty otherwise). */
-    options: AdminSelectOption[];
-}
-/** How a column is surfaced in the list view's filter bar. */
-type AdminFilterKind = "select" | "daterange" | "text";
-/**
- * Humanize a column key into a form label (`lastLoginAt` → `Last Login At`).
- *
- * @param name - The column key.
- * @returns A title-cased label.
- */
-declare function humanizeField(name: string): string;
-/**
- * Return every column of a model, keyed by field name in declaration order.
- *
- * @param model - The model class.
- * @returns The column map (do not mutate).
- */
-declare function adminColumns(model: ModelClass): Record<string, Column<unknown>>;
-/**
- * Map a column to the widget that edits it.
- *
- * `json` is matched before anything else because a JSON column carries no
- * useful scalar type, and `enum` is matched before the string kinds so its
- * members become a dropdown rather than a free-text input.
- *
- * @param column - The column to inspect.
- * @returns The widget, its `number` step (or `null`) and its `select` options.
- */
-declare function widgetForColumn(column: Column<unknown>): WidgetSpec;
-/**
- * Whether a column may be left blank on submit — it is nullable, carries a
- * default, or is the primary key the database fills in.
- *
- * @param column - The column to inspect.
- * @returns `true` when the field is optional.
- */
-declare function isColumnOptional(column: Column<unknown>): boolean;
-/**
- * Map a column to the filter control the list view shows for it.
- *
- * Booleans and enums become dropdowns, date-like columns become a from/to pair
- * of date inputs, and anything else falls back to an equality text input.
- *
- * @param column - The column to inspect.
- * @returns The filter kind and, for `select`, its options.
- */
-declare function filterForColumn(column: Column<unknown>): {
-    kind: AdminFilterKind;
-    options: AdminSelectOption[];
-};
-/**
- * Return the table a column points at, when it carries a foreign key.
- *
- * @param column - The column to inspect.
- * @returns The referenced table name, or `null` for a plain column.
- */
-declare function foreignKeyTable(column: Column<unknown>): string | null;
-/**
- * Whether a column holds free text a `LIKE '%…%'` search can match.
- *
- * @param column - The column to inspect.
- * @returns `true` for `varchar` / `text` / `char` columns.
- */
-declare function isSearchableColumn(column: Column<unknown>): boolean;
-
 /**
  * Declarative admin configuration for one model, mirroring `admin.config`.
  *
@@ -3839,6 +3886,34 @@ interface AdminModelOptions<C extends ModelClass> {
      * delete and runs against the checked rows.
      */
     actions?: readonly AdminAction<C>[];
+    /**
+     * Audit-log model backing the detail view's change timeline. Pair it with a
+     * repository that actually writes the rows — the panel only reads them.
+     */
+    auditModel?: ModelClass;
+    /**
+     * Saved list-view presets rendered as tabs above the table, each applying
+     * its filters and ordering through `?lens=<slug>`.
+     */
+    lenses?: readonly AdminLens[];
+    /**
+     * String columns rendered as file inputs. The uploaded file is written
+     * through `uploadStorage` and the returned storage key goes in the column.
+     */
+    uploadFields?: readonly string[];
+    /** Backend persisting uploaded files. Required when `uploadFields` is set. */
+    uploadStorage?: UploadStorage;
+    /**
+     * Expose the CSV import page (`GET/POST {prefix}/m/{slug}/import`), which
+     * bulk-creates rows from an uploaded file. Default `false`; also requires
+     * `canCreate`.
+     */
+    canImport?: boolean;
+    /**
+     * Foreign-key columns rendered as a typed search box instead of a `<select>`
+     * of every related row — for target tables too large to pre-load.
+     */
+    autocompleteFields?: readonly string[];
 }
 /**
  * The admin configuration for one model.
@@ -3876,6 +3951,18 @@ declare class AdminModel<C extends ModelClass = ModelClass> {
     readonly canEdit: boolean;
     /** Whether the delete action is exposed. */
     readonly canDelete: boolean;
+    /** Audit-log model backing the detail timeline, or `null`. */
+    readonly auditModel: ModelClass | null;
+    /** Saved list-view presets, in declaration order. */
+    readonly lenses: AdminLens[];
+    /** Columns rendered as file inputs. */
+    readonly uploadFields: string[];
+    /** Backend persisting uploaded files, or `null`. */
+    readonly uploadStorage: UploadStorage | null;
+    /** Whether the CSV import page is exposed. */
+    readonly canImport: boolean;
+    /** Foreign-key columns rendered as a typed search box. */
+    readonly autocompleteFields: string[];
     private readonly actions;
     private readonly slugOverride;
     private readonly listDisplayOverride;
@@ -3919,6 +4006,20 @@ declare class AdminModel<C extends ModelClass = ModelClass> {
      * @returns The configured `listDisplay`, or every column but the password hash.
      */
     listDisplayNames(): string[];
+    /**
+     * Look a lens up by its slug.
+     *
+     * @param slug - The `?lens=` value.
+     * @returns The lens, or `null` when nothing matches.
+     */
+    getLens(slug: string): AdminLens | null;
+    /**
+     * Return the audit/timestamp columns the model actually declares.
+     *
+     * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+     *   `updatedBy` present on the model, in that order.
+     */
+    auditFieldNames(): string[];
     /**
      * Return the columns the detail view renders.
      *
@@ -3927,7 +4028,11 @@ declare class AdminModel<C extends ModelClass = ModelClass> {
      * where an operator goes to see the whole record, so trimming it there would
      * hide data with nowhere else to read it.
      *
-     * @returns Every column but the password hash, in declaration order.
+     * The audit/timestamp columns are held back too — they render in the detail
+     * view's own audit panel, next to the change history, rather than scattered
+     * among the domain fields.
+     *
+     * @returns Every domain column, in declaration order.
      */
     detailFieldNames(): string[];
     /**
@@ -3966,6 +4071,213 @@ declare class AdminModel<C extends ModelClass = ModelClass> {
 /** The row type a configured {@link AdminModel} reads and writes. */
 type AdminRow<A> = A extends AdminModel<infer C> ? InferModel<C> : never;
 
+/**
+ * Granular per-model, per-action access control, mirroring
+ * `admin.permissions`.
+ *
+ * Out of the box every operator who can sign in (`isAdmin`) can do everything
+ * the {@link AdminModel} flags allow. To narrow a principal to a subset of
+ * models or actions — a "support" role that may view orders but never delete
+ * them, an "editor" who may touch content models only — hand an
+ * {@link AdminAccessPolicy} to `makeAdminRouter`.
+ *
+ * ```ts
+ * const policy: AdminAccessPolicy = (user, admin, action) => {
+ *   if (user.role === "superadmin") return true;
+ *   if (user.role === "support") return action === AdminPermission.VIEW;
+ *   return false;
+ * };
+ *
+ * makeAdminRouter(site, { ..., accessPolicy: policy });
+ * ```
+ *
+ * The policy **composes with** the `canCreate` / `canEdit` / `canDelete` flags
+ * rather than replacing them: both have to allow an action. A denied `VIEW`
+ * also hides the model from the dashboard and the sidebar, so an operator is
+ * never shown a door that will answer `403`.
+ */
+
+/** An admin action gated by an {@link AdminAccessPolicy}. */
+declare const AdminPermission: {
+    readonly VIEW: "view";
+    readonly CREATE: "create";
+    readonly EDIT: "edit";
+    readonly DELETE: "delete";
+};
+/** An {@link AdminPermission} value. */
+type AdminPermission = (typeof AdminPermission)[keyof typeof AdminPermission];
+/**
+ * Decides whether `principal` may perform `action` on the model behind
+ * `admin`. Sync or async; return truthy to allow.
+ */
+type AdminAccessPolicy = (principal: unknown, admin: AdminModel, action: AdminPermission) => boolean | Promise<boolean>;
+
+/**
+ * Multipart form parsing for the admin's upload and import screens.
+ *
+ * The panel's ordinary forms are `application/x-www-form-urlencoded`, which
+ * Express parses on its own. A form carrying a file is `multipart/form-data`,
+ * which it does not — so this module wraps `busboy`, the streaming parser
+ * behind most of the Node ecosystem's upload middleware.
+ *
+ * `busboy` is an **optional peer**: only a project that configures
+ * `uploadFields` or `canImport` needs it, and the error below says exactly what
+ * to install. Multipart is a wire format with a long tail of correctness
+ * (boundary handling, transfer encodings, filename escaping) — the kind of
+ * parser this SDK depends on rather than reimplements.
+ */
+
+/** One uploaded file, buffered in memory. */
+interface UploadedFile {
+    /** The form field the file arrived on. */
+    field: string;
+    /** The client-supplied filename, already stripped of any path. */
+    filename: string;
+    /** The declared MIME type. */
+    contentType: string;
+    /** The file bytes. */
+    data: Buffer;
+}
+/** The result of parsing a multipart body. */
+interface ParsedMultipart {
+    /** Text fields, keyed by name. A repeated field keeps its last value. */
+    fields: Record<string, string>;
+    /** Uploaded files that carried a filename and at least one byte. */
+    files: UploadedFile[];
+}
+/** Options for {@link parseMultipart}. */
+interface ParseMultipartOptions {
+    /** Reject a file larger than this many bytes. Default `10 * 1024 * 1024`. */
+    maxFileBytes?: number;
+    /** Reject more than this many files in one submission. Default `10`. */
+    maxFiles?: number;
+}
+/**
+ * Raised when a submission exceeds a configured multipart limit.
+ *
+ * Distinct from a parse failure so the caller can turn it into a `400` with a
+ * message the operator can act on ("the file is too large") instead of a
+ * generic failure.
+ */
+declare class MultipartLimitError extends Error {
+    /**
+     * @param message - The operator-facing explanation.
+     */
+    constructor(message: string);
+}
+/**
+ * Parse a `multipart/form-data` request body.
+ *
+ * Files are buffered in memory, which is what the admin needs — an operator
+ * attaching a document or a CSV, not a streaming ingest path — and bounded by
+ * `maxFileBytes` so a large upload cannot exhaust the process.
+ *
+ * @param req - The inbound request.
+ * @param options - Size and count limits.
+ * @returns The text fields and the uploaded files.
+ * @throws MultipartLimitError When a limit is exceeded.
+ * @throws Error When `busboy` is missing or the body is not valid multipart.
+ */
+declare function parseMultipart(req: Request, options?: ParseMultipartOptions): Promise<ParsedMultipart>;
+/**
+ * Whether a request carries a multipart body.
+ *
+ * @param req - The inbound request.
+ * @returns `true` when the content type is `multipart/form-data`.
+ */
+declare function isMultipart(req: Request): boolean;
+
+/**
+ * Column introspection for the admin panel, mirroring `admin.forms`' widget
+ * derivation.
+ *
+ * `tempest-db-js` keeps rich runtime metadata on every column — the canonical
+ * type kind, enum members, `varchar` length, the not-null/default/primary-key
+ * flags and the foreign-key reference — so the admin derives its form widgets
+ * and list filters from the model itself instead of asking the project to
+ * restate them. Kept separate from the router so the (fiddly) type handling is
+ * unit-testable in isolation.
+ */
+
+/** The set of form controls the admin knows how to render. */
+type AdminWidget = "text" | "textarea" | "number" | "checkbox" | "datetime" | "date" | "time" | "select" | "json" | "file" | "autocomplete";
+/** A `(value, label)` pair for a `select` widget. */
+interface AdminSelectOption {
+    value: string;
+    label: string;
+}
+/** The widget a column maps to, plus the attributes that render it. */
+interface WidgetSpec {
+    /** The control to render. */
+    widget: AdminWidget;
+    /** `step` attribute for `number` widgets, or `null`. */
+    step: string | null;
+    /** Options for `select` widgets (empty otherwise). */
+    options: AdminSelectOption[];
+}
+/** How a column is surfaced in the list view's filter bar. */
+type AdminFilterKind = "select" | "daterange" | "text";
+/**
+ * Humanize a column key into a form label (`lastLoginAt` → `Last Login At`).
+ *
+ * @param name - The column key.
+ * @returns A title-cased label.
+ */
+declare function humanizeField(name: string): string;
+/**
+ * Return every column of a model, keyed by field name in declaration order.
+ *
+ * @param model - The model class.
+ * @returns The column map (do not mutate).
+ */
+declare function adminColumns(model: ModelClass): Record<string, Column<unknown>>;
+/**
+ * Map a column to the widget that edits it.
+ *
+ * `json` is matched before anything else because a JSON column carries no
+ * useful scalar type, and `enum` is matched before the string kinds so its
+ * members become a dropdown rather than a free-text input.
+ *
+ * @param column - The column to inspect.
+ * @returns The widget, its `number` step (or `null`) and its `select` options.
+ */
+declare function widgetForColumn(column: Column<unknown>): WidgetSpec;
+/**
+ * Whether a column may be left blank on submit — it is nullable, carries a
+ * default, or is the primary key the database fills in.
+ *
+ * @param column - The column to inspect.
+ * @returns `true` when the field is optional.
+ */
+declare function isColumnOptional(column: Column<unknown>): boolean;
+/**
+ * Map a column to the filter control the list view shows for it.
+ *
+ * Booleans and enums become dropdowns, date-like columns become a from/to pair
+ * of date inputs, and anything else falls back to an equality text input.
+ *
+ * @param column - The column to inspect.
+ * @returns The filter kind and, for `select`, its options.
+ */
+declare function filterForColumn(column: Column<unknown>): {
+    kind: AdminFilterKind;
+    options: AdminSelectOption[];
+};
+/**
+ * Return the table a column points at, when it carries a foreign key.
+ *
+ * @param column - The column to inspect.
+ * @returns The referenced table name, or `null` for a plain column.
+ */
+declare function foreignKeyTable(column: Column<unknown>): string | null;
+/**
+ * Whether a column holds free text a `LIKE '%…%'` search can match.
+ *
+ * @param column - The column to inspect.
+ * @returns `true` for `varchar` / `text` / `char` columns.
+ */
+declare function isSearchableColumn(column: Column<unknown>): boolean;
+
 /**
  * Form building and submission parsing for the admin CRUD views, mirroring
  * `admin.forms`.
@@ -3996,6 +4308,10 @@ interface AdminFormField {
     options: AdminSelectOption[];
     /** Per-field validation error, or `null`. */
     error: string | null;
+    /** For an `autocomplete` widget, the JSON search endpoint backing the input. */
+    autocompleteUrl: string | null;
+    /** For an `autocomplete` widget, the label of the currently selected row. */
+    displayLabel: string;
 }
 /** The outcome of parsing a submitted create/edit form. */
 interface ParsedAdminForm {
@@ -4004,6 +4320,17 @@ interface ParsedAdminForm {
     /** Per-field error messages, keyed by column. Empty when the form is valid. */
     errors: Record<string, string>;
 }
+/** Options for {@link parseFormBody}. */
+interface ParseFormBodyOptions {
+    /**
+     * Read upload columns as plain text instead of skipping them.
+     *
+     * The create/edit form skips them because the router writes the storage key
+     * after saving the file. A CSV import has no file to save — it carries the
+     * key already — so it reads them like any other string column.
+     */
+    uploadsAsText?: boolean;
+}
 /** Options for {@link buildFormFields}. */
 interface BuildFormFieldsOptions {
     /** Current values, keyed by column — a row on edit, a re-submission on error. */
@@ -4016,6 +4343,13 @@ interface BuildFormFieldsOptions {
      * of a raw identity text input.
      */
     foreignKeyOptions?: Record<string, AdminSelectOption[]>;
+    /**
+     * Search endpoints for foreign-key columns listed in `autocompleteFields`,
+     * keyed by column. A field listed here renders as a typed search box.
+     */
+    autocompleteUrls?: Record<string, string>;
+    /** Current labels for autocomplete fields, keyed by column. */
+    autocompleteLabels?: Record<string, string>;
 }
 /**
  * Render a stored value into the string a control pre-fills with.
@@ -4051,7 +4385,7 @@ declare function buildFormFields(admin: AdminModel, options?: BuildFormFieldsOpt
  * @param body - The parsed request body.
  * @returns The coerced values plus any per-field errors.
  */
-declare function parseFormBody(admin: AdminModel, body: Record<string, unknown>): ParsedAdminForm;
+declare function parseFormBody(admin: AdminModel, body: Record<string, unknown>, options?: ParseFormBodyOptions): ParsedAdminForm;
 /**
  * Render a stored value for a read-only list or detail cell.
  *
@@ -4366,6 +4700,11 @@ interface AdminSiteOptions {
     siteUrl?: string;
     /** Typed appearance overrides. Omitted keeps the stock look. */
     theme?: AdminTheme;
+    /**
+     * Business-metric cards rendered at the top of the dashboard, each computed
+     * from the database on load. Distinct from the system CPU/memory panel.
+     */
+    dashboardCards?: readonly MetricCard[];
 }
 /** Options accepted by {@link AdminSite.automap}. */
 interface AdminAutomapOptions extends Omit<AdminModelOptions<ModelClass>, "model"> {
@@ -4398,6 +4737,8 @@ declare class AdminSite {
     readonly siteUrl: string | null;
     /** Typed appearance overrides. */
     readonly theme: AdminTheme;
+    /** Business-metric cards rendered at the top of the dashboard. */
+    readonly dashboardCards: MetricCard[];
     private readonly registry;
     /**
      * Initialize the site.
@@ -4567,6 +4908,33 @@ interface AdminDashboardCard {
     /** URL of the create form, or `null` when creation is disabled. */
     newUrl: string | null;
 }
+/** One business-metric card, already computed and formatted for rendering. */
+interface AdminBusinessCardView {
+    /** The card heading. */
+    label: string;
+    /** Which shape to render. */
+    kind: "value" | "trend" | "partition";
+    /** Headline value (`value` and `trend` cards). */
+    value: string;
+    /** Optional unit suffix. */
+    unit: string | null;
+    /** Trend direction (`trend` cards). */
+    direction: "up" | "down" | "flat";
+    /** Formatted percentage change, or `null` when there is no baseline. */
+    percent: string | null;
+    /** Previous-period value, as text (`trend` cards). */
+    previous: string;
+    /** Segments with their share of the total (`partition` cards). */
+    segments: {
+        label: string;
+        value: string;
+        percent: number;
+    }[];
+    /** Optional sub-label. */
+    helpText: string | null;
+    /** Set when the card's compute threw, so the dashboard still renders. */
+    error: string | null;
+}
 /** The system metrics panel on the dashboard. */
 interface AdminDashboardMetrics {
     /** CPU load as a percentage of available cores. */
@@ -4587,7 +4955,7 @@ interface AdminDashboardMetrics {
  * @param metrics - The system metrics panel, or `null` when disabled.
  * @returns The full page.
  */
-declare function renderDashboardPage(context: AdminRenderContext, cards: AdminDashboardCard[], metrics: AdminDashboardMetrics | null): string;
+declare function renderDashboardPage(context: AdminRenderContext, cards: AdminDashboardCard[], metrics: AdminDashboardMetrics | null, businessCards?: AdminBusinessCardView[]): string;
 /** A filter control rendered above the list view. */
 interface AdminFilterView {
     /** Column key the control filters on. */
@@ -4650,6 +5018,8 @@ interface AdminListView {
     sort: Record<string, AdminSortView>;
     /** URL of the create form, or `null` when creation is disabled. */
     newUrl: string | null;
+    /** URL of the CSV import page, or `null` when import is disabled. */
+    importUrl: string | null;
     /** Bulk actions offered above the table. Empty hides the whole bulk UI. */
     bulkActions: BulkActionOption[];
     /** URL the bulk form posts to. */
@@ -4658,6 +5028,12 @@ interface AdminListView {
     exportCsvUrl: string;
     /** URL exporting the current result set as JSON. */
     exportJsonUrl: string;
+    /** Saved-preset tabs rendered above the table. Empty hides the strip. */
+    lenses: {
+        label: string;
+        url: string;
+        active: boolean;
+    }[];
 }
 /**
  * Render the paginated list view, with its search box, filters and sortable
@@ -4668,6 +5044,33 @@ interface AdminListView {
  * @returns The full page.
  */
 declare function renderListPage(context: AdminRenderContext, view: AdminListView): string;
+/** One entry in the detail view's change timeline. */
+interface AdminAuditEntryView {
+    /** The mutation kind (`create` / `update` / `delete`). */
+    action: string;
+    /** When it happened, already formatted. */
+    at: string;
+    /** Who did it — a resolved display name, or the raw actor id. */
+    actor: string;
+    /** The per-field diff. */
+    changes: {
+        field: string;
+        before: string;
+        after: string;
+    }[];
+    /** Extra metadata the writer recorded, as JSON text, or `null`. */
+    context: string | null;
+}
+/** The "who and when" panel below a record's fields. */
+interface AdminAuditView {
+    /** Timestamp and actor rows, already resolved and formatted. */
+    fields: {
+        label: string;
+        value: string;
+    }[];
+    /** The change timeline, newest first. Empty when there is none to show. */
+    history: AdminAuditEntryView[];
+}
 /** The view model the detail page renders. */
 interface AdminDetailView {
     /** Singular display name. */
@@ -4685,6 +5088,8 @@ interface AdminDetailView {
     editUrl: string | null;
     /** URL the delete form posts to, or `null` when deletion is disabled. */
     deleteUrl: string | null;
+    /** The audit panel, or `null` when the model carries no audit columns. */
+    audit: AdminAuditView | null;
 }
 /**
  * Render the single-record detail view.
@@ -4719,6 +5124,38 @@ interface AdminFormView {
  * @throws Error When called without a session, since the form needs a CSRF token.
  */
 declare function renderFormPage(context: AdminRenderContext, view: AdminFormView): string;
+/** The outcome of a CSV import, as the page renders it. */
+interface AdminImportView {
+    /** Plural display name of the model being imported into. */
+    title: string;
+    /** URL the upload form posts to. */
+    actionUrl: string;
+    /** URL of the list view. */
+    backUrl: string;
+    /** The column headers the CSV is expected to carry. */
+    columns: string[];
+    /** A form-level error, or `null`. */
+    error: string | null;
+    /** How many rows were created, or `null` before the first submission. */
+    created: number | null;
+    /** Per-row failures, numbered as the spreadsheet numbers them. */
+    rowErrors: {
+        row: number;
+        message: string;
+    }[];
+}
+/**
+ * Render the CSV import page.
+ *
+ * Row numbers start at 2 because row 1 is the header, so the numbers line up
+ * with what the operator sees in their spreadsheet.
+ *
+ * @param context - The shared chrome data (with an active session).
+ * @param view - The prepared import view model.
+ * @returns The full page.
+ * @throws Error When called without a session, since the form needs a CSRF token.
+ */
+declare function renderImportPage(context: AdminRenderContext, view: AdminImportView): string;
 
 /**
  * The server-rendered admin panel router, mirroring `admin.router`.
@@ -4774,6 +5211,13 @@ interface AdminRouterOptions {
      * click on a large table from becoming an outage.
      */
     exportMaxRows?: number;
+    /**
+     * Granular access control layered on top of the `AdminModel` flags. Omitted
+     * lets every signed-in operator do whatever those flags allow.
+     */
+    accessPolicy?: AdminAccessPolicy;
+    /** Largest upload the panel accepts, in bytes. Default `10485760` (10 MB). */
+    maxUploadBytes?: number;
 }
 /**
  * Build the admin panel router.
@@ -4784,6 +5228,20 @@ interface AdminRouterOptions {
  * @throws Error When the signing key is shorter than 32 characters.
  */
 declare function makeAdminRouter(site: AdminSite, options: AdminRouterOptions): Router;
+/**
+ * Parse a CSV document into one record per row, keyed by the header.
+ *
+ * Implements RFC 4180 quoting rather than splitting on commas: a quoted field
+ * may contain commas, newlines and doubled quotes, and an import that mangles
+ * those silently corrupts exactly the rows a human took the trouble to quote.
+ * The leading UTF-8 BOM Excel writes is stripped, because otherwise the first
+ * header name never matches a column.
+ *
+ * @param text - The CSV document.
+ * @returns One record per data row; `[]` when the file has only a header.
+ * @throws Error When the document has no header row.
+ */
+declare function parseCsv(text: string): Record<string, string>[];
 
 /**
  * Headless admin: resource registry for the JSON admin API.
@@ -6555,6 +7013,6 @@ declare function createTestDatabase(models: readonly ModelClass[]): TestDatabase
 declare function withTestDatabase<T>(models: readonly ModelClass[], fn: (db: TestDatabase) => Promise<T>): Promise<T>;
 
 /** The installed SDK version. Single source of truth for the barrel + CLI. */
-declare const VERSION = "0.25.0";
+declare const VERSION = "0.27.0";
 
-export { ADMIN_CSS, type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminAction, type AdminActionCategory, type AdminActionContext, type AdminActionHandler, type AdminActionOptions, type AdminActionResult, type AdminAuthBackend, type AdminAutomapOptions, type AdminDashboardCard, type AdminDashboardMetrics, type AdminDetailView, type AdminFilterKind, type AdminFilterView, type AdminFormField, type AdminFormView, type AdminJsonField, type AdminJsonListQuery, type AdminJsonListResult, type AdminJsonResource, type AdminJsonRouterOptions, AdminJsonSite, type AdminListView, type AdminMessage, type AdminMfaVerifier, AdminModel, type AdminModelOptions, type AdminNavEntry, type AdminRenderContext, type AdminRouterOptions, type AdminRow, type AdminSelectOption, type AdminSession, AdminSessionStore, type AdminSessionStoreOptions, AdminSite, type AdminSiteOptions, type AdminSortView, type AdminTheme, type AdminWidget, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, AuditAction, type AuthResponse, type AuthResultPageOptions, type AuthRouterOptions, type AuthUser, type BackupOptions, type BaseAppSettings, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, type BaseResponse, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, type BodySizeLimitOptions, type BroadcastOptions, type BroadcastResult, type BrokerManager, type BuildFormFieldsOptions, type BulkActionOption, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type CacheManager, type CachedOptions, type CachedResponse, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CsrfOptions, type CursorPaginationFilter, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, type DownloadOptions, type EmailMessage, type EmailOptions, EmailProvider, type EmailProviderOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FieldChange, type FileLoggingHandle, type FileLoggingOptions, type FlagContext, ForbiddenException, type GPUMetrics, type GenerateOpenApiOptions, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, type GracefulShutdownOptions, HTTPClient, type HTTPClientOptions, HTTP_500_LOG_FILE, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, HttpMetrics, IDEMPOTENCY_HEADER, type IdempotencyOptions, type IdempotencyRedisLike, type IdempotencyStore, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, type JwtDecoderLike, LEVEL_LOG_FILES, LocalUploadStorage, type LocalUploadStorageOptions, type LogEntry, type LogExtra, type LogLevel, type LogSink, type LogSource, type LoginInput, type LoginResult, type LogsRouterOptions, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, type MemoryMetrics, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, MessagingHub, type MessagingProvider, type MetricsRouterOptions, MetricsUtils, type MfaChallenge, type MfaChallengeInput, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, NotFoundException, type OAuthClientOptions, OAuthError, type OAuthTokens, type OAuthUser, OIDCProvider, type OIDCProviderOptions, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, type OutboxPublisher, OutboxRelay, type OutboxRelayOptions, OutboxStatus, PHONE_BR_PATTERN, type PaginationFilter, type PaginationLinkOptions, type ParsedAdminForm, type PasswordResetConfirmInput, type PasswordResetFormOptions, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, type RateLimitKeyFunc, type RateLimitOptions, type RateLimitRedisLike, type RateLimitResult, type RateLimitStore, RedisCacheManager, RedisIdempotencyStore, type RedisLike, type RedisPublisherLike, RedisRateLimitStore, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocBundleSource, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type RequestTracingOptions, type ResolvedAdminTheme, type ResponseMapper, RetryPolicy, type RunServerOptions, type S3ClientLike, S3UploadStorage, type S3UploadStorageOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type SlowQueryOptions, type SpecProvider, type StateBR, type SwaggerOptions, type SyncFilter, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, TenantScopedRepository, type TestDatabase, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, type ToolSpecOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, UserAuthService, type UserAuthServiceOptions, UserModelAuthBackend, type UserModelAuthBackendOptions, type UserPublic, type UserStore, UserTokenPurpose, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, type WebhookSignatureOptions, WebhookSignatureVerifier, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, type WidgetSpec, activationSchema, addLogSink, adminAction, adminColumns, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached, centsField, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, looseBoolean as envBoolean, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, hexColorField, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, latitudeField, listStates, loadSettings, logEntrySchema, logSettingsShape, loginSchema, longitudeField, looseBoolean, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, passwordResetConfirmSchema, passwordResetRequestSchema, percentField, phoneBrField, portField, positiveFloatField, positiveIntField, priceField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, ratingField, ratioField, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, serverSettingsShape, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, slugField, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ADMIN_CSS, type ActivationInput, ActivationService, type ActivationServiceOptions, type ActivationStore, type AdminAccessPolicy, type AdminAction, type AdminActionCategory, type AdminActionContext, type AdminActionHandler, type AdminActionOptions, type AdminActionResult, type AdminAuditEntryView, type AdminAuditView, type AdminAuthBackend, type AdminAutomapOptions, type AdminBusinessCardView, type AdminDashboardCard, type AdminDashboardMetrics, type AdminDetailView, type AdminFilterKind, type AdminFilterView, type AdminFormField, type AdminFormView, type AdminImportView, type AdminJsonField, type AdminJsonListQuery, type AdminJsonListResult, type AdminJsonResource, type AdminJsonRouterOptions, AdminJsonSite, type AdminLens, type AdminLensOptions, type AdminListView, type AdminMessage, type AdminMfaVerifier, AdminModel, type AdminModelOptions, type AdminNavEntry, AdminPermission, type AdminRenderContext, type AdminRouterOptions, type AdminRow, type AdminSelectOption, type AdminSession, AdminSessionStore, type AdminSessionStoreOptions, AdminSite, type AdminSiteOptions, type AdminSortView, type AdminTheme, type AdminWidget, AppException, type AppExceptionHandlerOptions, type AppExceptionOptions, type AttachWebSocketOptions, AttemptThrottle, type AttemptThrottleOptions, AuditAction, type AuthResponse, type AuthResultPageOptions, type AuthRouterOptions, type AuthUser, type BackupOptions, type BaseAppSettings, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, type BaseResponse, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, type BodySizeLimitOptions, type BroadcastOptions, type BroadcastResult, type BrokerManager, type BuildFormFieldsOptions, type BulkActionOption, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, type CPUMetrics, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type CacheManager, type CachedOptions, type CachedResponse, type CardCompute, type CardData, type CatalogData, CircuitOpenError, type ClientIpOptions, CompositeFeatureFlagBackend, ConflictException, type CreateAppOpenApi, type CreateAppOptions, type CsrfOptions, type CursorPaginationFilter, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, type DownloadOptions, type EmailMessage, type EmailOptions, EmailProvider, type EmailProviderOptions, EmailUtils, type Enum, type EnumHelpers, type EnumSpec, EnvFeatureFlagBackend, EventStream, type EventStreamOptions, type ExceptionDetails, ExpiredTokenException, type FeatureFlagBackend, FeatureFlags, type FieldChange, type FileLoggingHandle, type FileLoggingOptions, type FlagContext, ForbiddenException, type GPUMetrics, type GenerateOpenApiOptions, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, type GracefulShutdownOptions, HTTPClient, type HTTPClientOptions, HTTP_500_LOG_FILE, HTTP_500_MARKER, type HandshakeInfo, type HealthCheck, type HealthRouterOptions, HttpMetrics, IDEMPOTENCY_HEADER, type IdempotencyOptions, type IdempotencyRedisLike, type IdempotencyStore, type InboundHandler, type InboundMessage, InvalidTokenException, type IssuedSession, JSONLogger, JWTUtils, type JWTUtilsOptions, type JwtAuthOptions, type JwtClaims, type JwtDecoderLike, LEVEL_LOG_FILES, LocalUploadStorage, type LocalUploadStorageOptions, type LogEntry, type LogExtra, type LogLevel, type LogSink, type LogSource, type LoginInput, type LoginResult, type LogsRouterOptions, type MediaKind, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, type MemoryMetrics, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, type MessageHandler, MessagingHub, type MessagingProvider, type MetricCard, type MetricPartition, type MetricTrend, type MetricValue, type MetricsRouterOptions, MetricsUtils, type MfaChallenge, type MfaChallengeInput, type MfaCodeInput, type MfaEnrollment, MfaService, type MfaServiceOptions, type MfaStore, MultipartLimitError, NotFoundException, type OAuthClientOptions, OAuthError, type OAuthTokens, type OAuthUser, OIDCProvider, type OIDCProviderOptions, type OpenApiDocument, type OpenApiInfo, type OutboundMedia, type OutboundResult, type OutboxPublisher, OutboxRelay, type OutboxRelayOptions, OutboxStatus, PHONE_BR_PATTERN, type PaginationFilter, type PaginationLinkOptions, type ParseFormBodyOptions, type ParseMultipartOptions, type ParsedAdminForm, type ParsedMultipart, type PasswordResetConfirmInput, type PasswordResetFormOptions, type PasswordResetRequestInput, PasswordResetService, type PasswordResetServiceOptions, type PasswordResetStore, PasswordUtils, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, type RabbitBrokerOptions, type RateLimitKeyFunc, type RateLimitOptions, type RateLimitRedisLike, type RateLimitResult, type RateLimitStore, RedisCacheManager, RedisIdempotencyStore, type RedisLike, type RedisPublisherLike, RedisRateLimitStore, RedisSSEBroker, type RedisSSEBrokerOptions, RedisSessionStore, type RedisSubscriberLike, type RedocBundleSource, type RedocOptions, type RefreshInput, Region, type RegionValue, type RegisterExceptionHandlersOptions, type RequestContext, type RequestTracingOptions, type ResolvedAdminTheme, type ResponseMapper, RetryPolicy, type RunServerOptions, type S3ClientLike, S3UploadStorage, type S3UploadStorageOptions, SSEBroker, type SaveOptions, type SendOptions, ServerSentEvent, type ServerSentEventInit, type Session, type SessionMiddlewareOptions, type SessionRedisLike, SessionService, type SessionServiceOptions, type SessionStore, type SignupInput, type SlowQueryOptions, type SpecProvider, type StateBR, type SwaggerOptions, type SyncFilter, type SystemMetrics, TOTPHelper, type TOTPOptions, type TaskHandler, TaskManager, type TaskManagerOptions, TelegramProvider, type TelegramProviderOptions, TenantScopedRepository, type TestDatabase, type ThrottleBackend, type ThrottleStatus, type ToDictOptions, type TokenPair, TooManyRequestsException, type TooManyRequestsOptions, type ToolSpecOptions, TwilioSmsProvider, type TwilioSmsProviderOptions, type TwilioWebhookOptions, UF, type UFValue, UnauthorizedException, type UnhandledExceptionHandlerOptions, type UploadResult, type UploadStorage, type UploadedFile, UserAuthService, type UserAuthServiceOptions, UserModelAuthBackend, type UserModelAuthBackendOptions, type UserPublic, type UserStore, UserTokenPurpose, VERSION, ValidationException, type WSEnvelope, WebPushDispatcher, type WebPushDispatcherOptions, WebPushError, WebPushGoneError, type WebPushKeys, type WebPushPayload, type WebPushSubscription, type WebSocketConnection, WebSocketHub, type WebSocketHubOptions, type WebSocketLike, type WebhookSignatureOptions, WebhookSignatureVerifier, WhatsAppProvider, type WhatsAppProviderOptions, type WhatsAppWebhookOptions, type WidgetSpec, activationSchema, addLogSink, adminAction, adminColumns, adminLens, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached, centsField, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, corsSettingsShape, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, databaseSettingsShape, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, looseBoolean as envBoolean, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, hexColorField, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isMultipart, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, latitudeField, listStates, loadSettings, logEntrySchema, logSettingsShape, loginSchema, longitudeField, looseBoolean, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseCsv, parseFormBody, parseMultipart, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, percentField, phoneBrField, portField, positiveFloatField, positiveIntField, priceField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, ratingField, ratioField, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderImportPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, serverSettingsShape, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, slugField, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toDict, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };