tempest-express-sdk 0.25.0 → 0.27.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { z, looseBoolean, toDict, PasswordUtils } from './chunk-TIW2KPT2.js';
-export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-TIW2KPT2.js';
+import { z, looseBoolean, toDict, PasswordUtils } from './chunk-ADF7OHRH.js';
+export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-ADF7OHRH.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { Model, column, sql, BaseRepository, RecordNotFound, detectDialect, columnsOf, NodeSqliteDriver, AsyncEngine, or, and } from 'tempest-db-js';
 export { AsyncEngine, AsyncResult, AsyncSession, BaseRepository, Column, DeleteBuilder, InsertBuilder, Model, NoResultError, NodeSqliteDriver, PostgresDialect, RecordNotFound, SelectBuilder, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
@@ -9317,12 +9317,51 @@ var MessagingHub = class {
   }
 };
 
+// src/admin/dashboard.ts
+function metricCard(label, compute, helpText) {
+  return helpText === void 0 ? { label, compute } : { label, compute, helpText };
+}
+function trendPercent(trend) {
+  if (trend.previous === 0) return null;
+  return (trend.value - trend.previous) / trend.previous * 100;
+}
+function trendDirection(trend) {
+  if (trend.value > trend.previous) return "up";
+  if (trend.value < trend.previous) return "down";
+  return "flat";
+}
+function partitionTotal(partition) {
+  return partition.segments.reduce((total, segment) => total + segment.value, 0);
+}
+
+// src/admin/lenses.ts
+function slugify(name) {
+  return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
+}
+function adminLens(options) {
+  return {
+    name: options.name,
+    slug: slugify(options.name),
+    label: options.label ?? options.name,
+    filters: options.filters ?? {},
+    orderBy: options.orderBy ?? null
+  };
+}
+
+// src/admin/permissions.ts
+var AdminPermission = {
+  VIEW: "view",
+  CREATE: "create",
+  EDIT: "edit",
+  DELETE: "delete"
+};
+
 // src/admin/actions.ts
-function slugify(label) {
+function slugify2(label) {
   return label.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "action";
 }
 function adminAction(options, handler) {
-  const name = options.name ?? slugify(options.label);
+  const name = options.name ?? slugify2(options.label);
   if (name === "") throw new Error("adminAction requires a non-empty name or label");
   return {
     name,
@@ -9332,6 +9371,85 @@ function adminAction(options, handler) {
   };
 }
 
+// src/admin/multipart.ts
+var BUSBOY_HINT = "The admin's upload and CSV-import screens need the optional peer `busboy`. Install it with: npm install busboy";
+async function loadBusboy() {
+  try {
+    const module = await import('busboy');
+    return module.default ?? module;
+  } catch {
+    throw new Error(BUSBOY_HINT);
+  }
+}
+var MultipartLimitError = class extends Error {
+  /**
+   * @param message - The operator-facing explanation.
+   */
+  constructor(message) {
+    super(message);
+    this.name = "MultipartLimitError";
+  }
+};
+async function parseMultipart(req, options = {}) {
+  const maxFileBytes = options.maxFileBytes ?? 10 * 1024 * 1024;
+  const maxFiles = options.maxFiles ?? 10;
+  const busboy = await loadBusboy();
+  return await new Promise((resolve, reject) => {
+    const fields = {};
+    const files = [];
+    let settled = false;
+    const fail = (error) => {
+      if (settled) return;
+      settled = true;
+      reject(error);
+    };
+    const parser = busboy({
+      headers: req.headers,
+      limits: { fileSize: maxFileBytes, files: maxFiles }
+    });
+    parser.on("field", ((name, value) => {
+      fields[name] = value;
+    }));
+    parser.on("file", ((name, stream, info) => {
+      const chunks = [];
+      stream.on("data", ((chunk) => chunks.push(chunk)));
+      stream.on("limit", () => {
+        fail(
+          new MultipartLimitError(
+            `The file is larger than the ${Math.floor(maxFileBytes / 1024 / 1024)} MB limit.`
+          )
+        );
+      });
+      stream.on("end", () => {
+        const data = Buffer.concat(chunks);
+        const filename = (info.filename ?? "").split(/[/\\]/).pop() ?? "";
+        if (filename === "" || data.length === 0) return;
+        files.push({
+          field: name,
+          filename,
+          contentType: info.mimeType ?? "application/octet-stream",
+          data
+        });
+      });
+    }));
+    parser.on("filesLimit", () => {
+      fail(new MultipartLimitError(`At most ${maxFiles} files can be uploaded at once.`));
+    });
+    parser.on("error", ((error) => {
+      fail(error instanceof Error ? error : new Error(String(error)));
+    }));
+    parser.on("close", () => {
+      if (settled) return;
+      settled = true;
+      resolve({ fields, files });
+    });
+    req.pipe(parser);
+  });
+}
+function isMultipart(req) {
+  return (req.header("content-type") ?? "").toLowerCase().startsWith("multipart/form-data");
+}
+
 // src/admin/columns.ts
 function humanizeField(name) {
   return name.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").trim().split(/\s+/).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ");
@@ -9425,9 +9543,17 @@ var NEVER_EDITABLE = [
   "id",
   "createdAt",
   "updatedAt",
+  "createdBy",
+  "updatedBy",
   "hashedPassword"
 ];
 var NEVER_LISTED = ["hashedPassword"];
+var AUDIT_FIELDS = [
+  "createdAt",
+  "updatedAt",
+  "createdBy",
+  "updatedBy"
+];
 var AdminModel = class {
   /** The managed model class. */
   model;
@@ -9451,6 +9577,18 @@ var AdminModel = class {
   canEdit;
   /** Whether the delete action is exposed. */
   canDelete;
+  /** Audit-log model backing the detail timeline, or `null`. */
+  auditModel;
+  /** Saved list-view presets, in declaration order. */
+  lenses;
+  /** Columns rendered as file inputs. */
+  uploadFields;
+  /** Backend persisting uploaded files, or `null`. */
+  uploadStorage;
+  /** Whether the CSV import page is exposed. */
+  canImport;
+  /** Foreign-key columns rendered as a typed search box. */
+  autocompleteFields;
   actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
@@ -9476,6 +9614,17 @@ var AdminModel = class {
     this.canCreate = options.canCreate ?? true;
     this.canEdit = options.canEdit ?? true;
     this.canDelete = options.canDelete ?? true;
+    this.auditModel = options.auditModel ?? null;
+    this.lenses = [...options.lenses ?? []];
+    this.uploadFields = [...options.uploadFields ?? []];
+    this.uploadStorage = options.uploadStorage ?? null;
+    this.canImport = options.canImport ?? false;
+    this.autocompleteFields = [...options.autocompleteFields ?? []];
+    if (this.uploadFields.length > 0 && this.uploadStorage === null) {
+      throw new Error(
+        `AdminModel(${this.model.tablename}).uploadFields requires an uploadStorage (e.g. LocalUploadStorage / S3UploadStorage) \u2014 without one there is nowhere to write the file.`
+      );
+    }
     for (const action of options.actions ?? []) {
       if (this.actions.has(action.name)) {
         throw new Error(
@@ -9490,7 +9639,9 @@ var AdminModel = class {
       ["listFilter", this.listFilter],
       ["searchFields", this.searchFields],
       ["readonlyFields", this.readonlyFields],
-      ["identityField", [this.identityField]]
+      ["identityField", [this.identityField]],
+      ["uploadFields", this.uploadFields],
+      ["autocompleteFields", this.autocompleteFields]
     ]) {
       for (const name of names) {
         if (!known.has(name)) {
@@ -9560,6 +9711,25 @@ var AdminModel = class {
     if (this.listDisplayOverride !== null) return [...this.listDisplayOverride];
     return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
   }
+  /**
+   * Look a lens up by its slug.
+   *
+   * @param slug - The `?lens=` value.
+   * @returns The lens, or `null` when nothing matches.
+   */
+  getLens(slug) {
+    return this.lenses.find((lens) => lens.slug === slug) ?? null;
+  }
+  /**
+   * Return the audit/timestamp columns the model actually declares.
+   *
+   * @returns The subset of `createdAt` / `updatedAt` / `createdBy` /
+   *   `updatedBy` present on the model, in that order.
+   */
+  auditFieldNames() {
+    const known = new Set(this.columnNames());
+    return AUDIT_FIELDS.filter((name) => known.has(name));
+  }
   /**
    * Return the columns the detail view renders.
    *
@@ -9568,10 +9738,16 @@ var AdminModel = class {
    * where an operator goes to see the whole record, so trimming it there would
    * hide data with nowhere else to read it.
    *
-   * @returns Every column but the password hash, in declaration order.
+   * The audit/timestamp columns are held back too — they render in the detail
+   * view's own audit panel, next to the change history, rather than scattered
+   * among the domain fields.
+   *
+   * @returns Every domain column, in declaration order.
    */
   detailFieldNames() {
-    return this.columnNames().filter((name) => !NEVER_LISTED.includes(name));
+    return this.columnNames().filter(
+      (name) => !NEVER_LISTED.includes(name) && !AUDIT_FIELDS.includes(name)
+    );
   }
   /**
    * Return the columns a create/edit form exposes.
@@ -9647,11 +9823,15 @@ function buildFormFields(admin, options = {}) {
   const values = options.values ?? {};
   const errors = options.errors ?? {};
   const foreignKeys = options.foreignKeyOptions ?? {};
+  const autocompleteUrls = options.autocompleteUrls ?? {};
+  const autocompleteLabels = options.autocompleteLabels ?? {};
+  const uploads = new Set(admin.uploadFields);
   return admin.editableFieldNames().flatMap((name) => {
     const column6 = columns[name];
     if (column6 === void 0) return [];
     const related = foreignKeys[name];
-    const spec = related === void 0 ? widgetForColumn(column6) : { widget: "select", step: null, options: related };
+    const autocompleteUrl = autocompleteUrls[name];
+    const spec = uploads.has(name) ? { widget: "file", step: null, options: [] } : autocompleteUrl !== void 0 ? { widget: "autocomplete", step: null, options: [] } : related === void 0 ? widgetForColumn(column6) : { widget: "select", step: null, options: related };
     const raw = name in values ? values[name] : literalDefault(column6);
     return [
       {
@@ -9663,7 +9843,9 @@ function buildFormFields(admin, options = {}) {
         checked: spec.widget === "checkbox" && toBoolean(raw),
         step: spec.step,
         options: spec.options,
-        error: errors[name] ?? null
+        error: errors[name] ?? null,
+        autocompleteUrl: autocompleteUrl ?? null,
+        displayLabel: autocompleteLabels[name] ?? ""
       }
     ];
   });
@@ -9711,13 +9893,15 @@ function coerceValue(column6, widget, raw) {
       return raw;
   }
 }
-function parseFormBody(admin, body) {
+function parseFormBody(admin, body, options = {}) {
   const columns = adminColumns(admin.model);
   const data = {};
   const errors = {};
+  const uploads = options.uploadsAsText === true ? /* @__PURE__ */ new Set() : new Set(admin.uploadFields);
   for (const name of admin.editableFieldNames()) {
     const column6 = columns[name];
     if (column6 === void 0) continue;
+    if (uploads.has(name)) continue;
     const { widget } = widgetForColumn(column6);
     if (widget === "checkbox") {
       data[name] = toBoolean(body[name]);
@@ -10028,6 +10212,8 @@ var AdminSite = class {
   siteUrl;
   /** Typed appearance overrides. */
   theme;
+  /** Business-metric cards rendered at the top of the dashboard. */
+  dashboardCards;
   registry = /* @__PURE__ */ new Map();
   /**
    * Initialize the site.
@@ -10040,6 +10226,7 @@ var AdminSite = class {
     this.indexSubtitle = options.indexSubtitle ?? "Site administration";
     this.siteUrl = options.siteUrl ?? null;
     this.theme = options.theme ?? {};
+    this.dashboardCards = [...options.dashboardCards ?? []];
   }
   /**
    * Return the centered header brand text.
@@ -11859,7 +12046,7 @@ function renderMfaPage(context, error) {
 </section>`;
   return renderLayout(context, `Two-factor \xB7 ${context.site.title}`, body);
 }
-function renderDashboardPage(context, cards, metrics) {
+function renderDashboardPage(context, cards, metrics, businessCards = []) {
   const metricsPanel = metrics === null ? "" : `<div class="tempest-admin-stats" aria-label="System metrics">
     <div class="tempest-admin-stat">
       <span class="tempest-admin-stat__label">CPU</span>
@@ -11871,6 +12058,7 @@ function renderDashboardPage(context, cards, metrics) {
       <span class="tempest-admin-stat__sub">${escapeHtml(metrics.memoryUsedGb)} / ${escapeHtml(metrics.memoryTotalGb)} GB</span>
     </div>
   </div>`;
+  const business = businessCards.length > 0 ? `<div class="tempest-admin-cards" aria-label="Business metrics">${businessCards.map(renderBusinessCard).join("")}</div>` : "";
   const models = cards.length > 0 ? `<div class="tempest-admin-models">${cards.map(
     (card) => `<article class="tempest-admin-model-card">
       <header class="tempest-admin-model-card__head">
@@ -11887,10 +12075,53 @@ function renderDashboardPage(context, cards, metrics) {
   <h1>${escapeHtml(context.site.title)}</h1>
   <p>${escapeHtml(context.site.indexSubtitle)}</p>
   ${metricsPanel}
+  ${business}
   ${models}
 </section>`;
   return renderLayout(context, context.site.title, body);
 }
+function renderBusinessCard(card) {
+  const help = card.helpText !== null ? `<span class="tempest-admin-card__help">${escapeHtml(card.helpText)}</span>` : "";
+  if (card.error !== null) {
+    return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">\u2014</span>
+      <span class="tempest-admin-card__help">${escapeHtml(card.error)}</span>
+    </article>`;
+  }
+  const unit = card.unit !== null ? ` <small>${escapeHtml(card.unit)}</small>` : "";
+  if (card.kind === "partition") {
+    const parts = card.segments.map(
+      (segment) => `<li>
+        <span class="tempest-admin-card__part-label">${escapeHtml(segment.label)}</span>
+        <span class="tempest-admin-card__part-bar"><span style="width: ${Math.round(segment.percent)}%"></span></span>
+        <span class="tempest-admin-card__part-value">${escapeHtml(segment.value)}</span>
+      </li>`
+    ).join("");
+    return `<article class="tempest-admin-card tempest-admin-card--partition">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <ul class="tempest-admin-card__parts">${parts}</ul>
+      ${help}
+    </article>`;
+  }
+  if (card.kind === "trend") {
+    const arrow = card.direction === "up" ? "\u25B2" : card.direction === "down" ? "\u25BC" : "\u25AC";
+    return `<article class="tempest-admin-card tempest-admin-card--trend">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      <span class="tempest-admin-card__trend tempest-admin-card__trend--${escapeHtml(card.direction)}">
+        ${arrow} ${card.percent === null ? "\u2014" : escapeHtml(card.percent)}
+        <small>vs prev ${escapeHtml(card.previous)}</small>
+      </span>
+      ${help}
+    </article>`;
+  }
+  return `<article class="tempest-admin-card tempest-admin-card--value">
+      <span class="tempest-admin-card__label">${escapeHtml(card.label)}</span>
+      <span class="tempest-admin-card__value">${escapeHtml(card.value)}${unit}</span>
+      ${help}
+    </article>`;
+}
 function renderFilter(filter) {
   const name = `filter_${filter.field}`;
   if (filter.kind === "select") {
@@ -11956,10 +12187,14 @@ function renderListPage(context, view) {
     </form>
     <div class="tempest-admin-list__actions">
       ${view.newUrl !== null ? `<a class="tempest-admin-list__new" href="${escapeHtml(view.newUrl)}">+ New</a>` : ""}
+      ${view.importUrl !== null ? `<a href="${escapeHtml(view.importUrl)}">Import CSV</a>` : ""}
       <a href="${escapeHtml(view.exportCsvUrl)}">Export CSV</a>
       <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
     </div>
   </div>
+  ${view.lenses.length > 0 ? `<nav class="tempest-admin-lenses" aria-label="Lenses">${view.lenses.map(
+    (lens) => `<a class="tempest-admin-lens${lens.active ? " tempest-admin-lens--active" : ""}" href="${escapeHtml(lens.url)}">${escapeHtml(lens.label)}</a>`
+  ).join("")}</nav>` : ""}
   ${bulkBar}
   <div class="tempest-admin-table-wrap">
     <table class="tempest-admin-list__table">
@@ -11983,6 +12218,7 @@ function renderDetailPage(context, view) {
   const fields = view.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
+  const auditPanel = view.audit === null ? "" : renderAuditPanel(view.audit);
   const body = `<section class="tempest-admin-detail">
   <header class="tempest-admin-detail__header">
     <h1>${escapeHtml(view.title)} \xB7 ${escapeHtml(view.identity)}</h1>
@@ -11996,9 +12232,37 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
+function renderAuditPanel(audit) {
+  const rows = audit.fields.map(
+    (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
+  ).join("");
+  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+    const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
+      (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
+    ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
+    const context = entry.context !== null ? `<pre class="tempest-admin-detail__json">${escapeHtml(entry.context)}</pre>` : "";
+    return `<li class="tempest-admin-history__item">
+        <details>
+          <summary>
+            <span class="tempest-admin-history__action">${escapeHtml(entry.action)}</span>
+            <span class="tempest-admin-history__actor">${escapeHtml(entry.actor)}</span>
+            <span class="tempest-admin-history__at">${escapeHtml(entry.at)}</span>
+          </summary>
+          ${changes}
+          ${context}
+        </details>
+      </li>`;
+  }).join("")}</ol>` : "";
+  return `<section class="tempest-admin-audit">
+    <h2>Audit</h2>
+    <dl class="tempest-admin-detail__fields">${rows}</dl>
+    ${history}
+  </section>`;
+}
 function renderFormField(field) {
   const required = field.required ? " required" : "";
   const name = escapeHtml(field.name);
@@ -12023,6 +12287,18 @@ function renderFormField(field) {
       control = `<label><span>${label}${field.required ? " *" : ""}</span><select name="${name}"${required}>${blank}${options}</select></label>`;
       break;
     }
+    case "file":
+      control = `<label><span>${label}${field.required ? " *" : ""}</span><input type="file" name="${name}"${required}></label>${field.value === "" ? "" : `<small class="tempest-admin-form__hint">Current: ${value} \u2014 choose a file to replace it.</small>`}`;
+      break;
+    case "autocomplete":
+      control = `<label><span>${label}${field.required ? " *" : ""}</span>
+        <div class="tempest-admin-ac" data-ac data-ac-url="${escapeHtml(field.autocompleteUrl)}">
+          <input type="text" class="tempest-admin-ac__search" value="${escapeHtml(field.displayLabel)}" placeholder="Search\u2026" autocomplete="off" data-ac-search>
+          <input type="hidden" name="${name}" value="${value}"${required} data-ac-value>
+          <ul class="tempest-admin-ac__results" data-ac-results hidden></ul>
+        </div>
+      </label>`;
+      break;
     case "number":
       control = `<label><span>${label}${field.required ? " *" : ""}</span><input type="number" name="${name}" value="${value}"${field.step !== null ? ` step="${escapeHtml(field.step)}"` : ""}${required}></label>`;
       break;
@@ -12050,7 +12326,7 @@ function renderFormPage(context, view) {
     <a href="${escapeHtml(view.backUrl)}">\u2190 Back</a>
   </header>
   ${view.error !== null ? `<p class="tempest-admin-form__error">${escapeHtml(view.error)}</p>` : ""}
-  <form method="post" action="${escapeHtml(view.actionUrl)}" class="tempest-admin-form__form">
+  <form method="post" action="${escapeHtml(view.actionUrl)}" class="tempest-admin-form__form"${view.fields.some((field) => field.widget === "file") ? ' enctype="multipart/form-data"' : ""}>
     <input type="hidden" name="csrf_token" value="${escapeHtml(context.session.csrfToken)}">
     ${view.fields.map(renderFormField).join("")}
     <div class="tempest-admin-form__actions">
@@ -12058,10 +12334,98 @@ function renderFormPage(context, view) {
       <a href="${escapeHtml(view.backUrl)}" class="tempest-admin-form__cancel">Cancel</a>
     </div>
   </form>
+  ${view.fields.some((field) => field.widget === "autocomplete") ? AUTOCOMPLETE_SCRIPT : ""}
 </section>`;
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
+function renderImportPage(context, view) {
+  if (context.session === null) throw new Error("The import page requires a session");
+  const summary = view.created === null ? "" : `<p class="tempest-admin-import__summary">Created ${escapeHtml(view.created)} record${view.created === 1 ? "" : "s"}.</p>`;
+  const failures = view.rowErrors.length > 0 ? `<table class="tempest-admin-import__errors"><thead><tr><th>Row</th><th>Problem</th></tr></thead><tbody>${view.rowErrors.map(
+    (failure) => `<tr><td>${escapeHtml(failure.row)}</td><td>${escapeHtml(failure.message)}</td></tr>`
+  ).join("")}</tbody></table>` : "";
+  const body = `<section class="tempest-admin-import">
+  <header class="tempest-admin-detail__header">
+    <h1>Import ${escapeHtml(view.title)}</h1>
+    <a href="${escapeHtml(view.backUrl)}">\u2190 Back</a>
+  </header>
+  ${view.error !== null ? `<p class="tempest-admin-form__error">${escapeHtml(view.error)}</p>` : ""}
+  ${summary}
+  ${failures}
+  <form method="post" action="${escapeHtml(view.actionUrl)}" class="tempest-admin-form__form" enctype="multipart/form-data">
+    <input type="hidden" name="csrf_token" value="${escapeHtml(context.session.csrfToken)}">
+    <div class="tempest-admin-form__field">
+      <label>
+        <span>CSV file *</span>
+        <input type="file" name="file" accept=".csv,text/csv" required>
+      </label>
+      <small class="tempest-admin-form__hint">
+        UTF-8, comma-separated, with a header row. Recognised columns:
+        <code>${escapeHtml(view.columns.join(", "))}</code>. Unknown columns are ignored.
+      </small>
+    </div>
+    <div class="tempest-admin-form__actions">
+      <button type="submit">Import</button>
+      <a href="${escapeHtml(view.backUrl)}" class="tempest-admin-form__cancel">Cancel</a>
+    </div>
+  </form>
+</section>`;
+  return renderLayout(context, `Import ${view.title} \xB7 ${context.site.title}`, body);
+}
+var AUTOCOMPLETE_SCRIPT = `<script>
+(function () {
+  document.querySelectorAll("[data-ac]").forEach(function (box) {
+    var search = box.querySelector("[data-ac-search]");
+    var value = box.querySelector("[data-ac-value]");
+    var results = box.querySelector("[data-ac-results]");
+    var url = box.getAttribute("data-ac-url");
+    var timer = null;
+
+    function close() {
+      results.hidden = true;
+      results.innerHTML = "";
+    }
+
+    function pick(option) {
+      value.value = option.value;
+      search.value = option.label;
+      close();
+    }
+
+    function run() {
+      var term = search.value.trim();
+      fetch(url + "?q=" + encodeURIComponent(term), { credentials: "same-origin" })
+        .then(function (response) { return response.ok ? response.json() : { options: [] }; })
+        .then(function (payload) {
+          results.innerHTML = "";
+          (payload.options || []).forEach(function (option) {
+            var item = document.createElement("li");
+            item.textContent = option.label;
+            item.setAttribute("role", "option");
+            item.addEventListener("mousedown", function (event) {
+              event.preventDefault();
+              pick(option);
+            });
+            results.appendChild(item);
+          });
+          results.hidden = results.children.length === 0;
+        })
+        .catch(close);
+    }
+
+    search.addEventListener("input", function () {
+      value.value = "";
+      window.clearTimeout(timer);
+      timer = window.setTimeout(run, 250);
+    });
+    search.addEventListener("focus", run);
+    search.addEventListener("blur", function () { window.setTimeout(close, 150); });
+  });
+})();
+</script>`;
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var AUTOCOMPLETE_LIMIT = 20;
+var AUDIT_HISTORY_LIMIT = 50;
 var FK_OPTION_CAP = 1e3;
 var FLASH_MAX_LENGTH = 300;
 var FLASH_MESSAGES = {
@@ -12090,6 +12454,7 @@ function makeAdminRouter(site, options) {
   const theme = resolveAdminTheme(site.theme);
   const showMetrics = options.showMetrics ?? true;
   const exportMaxRows = options.exportMaxRows ?? 5e3;
+  const maxUploadBytes = options.maxUploadBytes ?? 10 * 1024 * 1024;
   const sessions = new AdminSessionStore({
     secret: options.secretKey,
     ...options.cookieName === void 0 ? {} : { cookieName: options.cookieName },
@@ -12100,18 +12465,23 @@ function makeAdminRouter(site, options) {
   const backend = options.authBackend;
   const router = express3.Router();
   router.use(prefix, express3.urlencoded({ extended: false }));
-  const context = (req, session) => ({
+  const context = (req, session, models = site.list()) => ({
     site,
     theme,
     prefix,
     session,
     currentPath: req.originalUrl.split("?")[0] ?? req.path,
-    navModels: site.list().map((admin) => ({
+    navModels: models.map((admin) => ({
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
     messages: flashFor(req)
   });
+  const allows = async (principal, admin, action) => {
+    if (!flagAllows(admin, action)) return false;
+    if (options.accessPolicy === void 0) return true;
+    return Boolean(await options.accessPolicy(principal, admin, action));
+  };
   const flashFor = (req) => {
     const fixed = FLASH_MESSAGES[queryString(req.query.ok)];
     if (fixed !== void 0) return [fixed];
@@ -12159,14 +12529,28 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/mfa`);
       return null;
     }
-    return { session, dbSession, principal };
+    const visible = [];
+    for (const admin of site.list()) {
+      if (await allows(principal, admin, AdminPermission.VIEW)) visible.push(admin);
+    }
+    return { session, dbSession, principal, visible };
   };
-  const resolveAdmin = (req, res, state) => {
+  const resolveAdmin = async (req, res, state, action = AdminPermission.VIEW) => {
     const admin = site.get(String(req.params.slug));
-    if (admin === null) {
-      html(res, renderNotFound(context(req, state.session)), 404);
+    if (admin === null || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+      html(res, renderNotFound(context(req, state.session, state.visible)), 404);
       return null;
     }
+    if (action !== AdminPermission.VIEW) {
+      if (!flagAllows(admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return null;
+      }
+      if (!await allows(state.principal, admin, action)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return null;
+      }
+    }
     return admin;
   };
   const renderNotFound = (ctx) => renderDashboardPage(
@@ -12177,7 +12561,7 @@ function makeAdminRouter(site, options) {
   const checkCsrf = (req, res, state) => {
     const body = req.body;
     if (csrfTokenMatches(state.session, body?.csrf_token)) return true;
-    html(res, renderNotFound(context(req, state.session)), 403);
+    html(res, renderNotFound(context(req, state.session, state.visible)), 403);
     return false;
   };
   router.get(`${prefix}/static/admin.css`, (_req, res) => {
@@ -12259,7 +12643,7 @@ function makeAdminRouter(site, options) {
       const state = await authenticate(req, res);
       if (state === null) return;
       const cards = [];
-      for (const admin of site.list()) {
+      for (const admin of state.visible) {
         let count = null;
         try {
           count = await admin.repository(state.dbSession).count();
@@ -12273,9 +12657,13 @@ function makeAdminRouter(site, options) {
           label: admin.verboseNamePlural(),
           count,
           url: `${prefix}/m/${admin.slug()}`,
-          newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null
+          newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null
         });
       }
+      const businessCards = [];
+      for (const card of site.dashboardCards) {
+        businessCards.push(await computeBusinessCard(card, state.dbSession));
+      }
       let metrics = null;
       if (showMetrics) {
         const snapshot2 = MetricsUtils.system();
@@ -12286,7 +12674,15 @@ function makeAdminRouter(site, options) {
           memoryTotalGb: (snapshot2.memory.total / 1024 ** 3).toFixed(1)
         };
       }
-      html(res, renderDashboardPage(context(req, state.session), cards, metrics));
+      html(
+        res,
+        renderDashboardPage(
+          context(req, state.session, state.visible),
+          cards,
+          metrics,
+          businessCards
+        )
+      );
     })
   );
   router.get(
@@ -12294,7 +12690,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       html(res, await renderList(req, admin, state));
     })
@@ -12304,19 +12700,20 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "create",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
-            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession),
+            autocompleteUrls: autocompleteUrlsFor(admin)
           }),
           actionUrl: `${prefix}/m/${admin.slug()}/new`,
           backUrl: `${prefix}/m/${admin.slug()}`,
@@ -12330,26 +12727,46 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
       if (admin === null) return;
       if (!admin.canCreate) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      let uploadError = null;
+      let submission;
+      try {
+        submission = await readSubmission(req);
+      } catch (error) {
+        if (!(error instanceof MultipartLimitError)) throw error;
+        submission = { fields: {}, files: [] };
+        uploadError = error.message;
+      }
+      const body = submission.fields;
+      if (uploadError === null && !csrfTokenMatches(state.session, body.csrf_token)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
         return;
       }
-      if (!checkCsrf(req, res, state)) return;
-      const body = req.body;
       const parsed = parseFormBody(admin, body);
+      await applyUploads(admin, parsed.data, parsed.errors, submission.files, true);
       const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
+      const autocompleteLabels = await autocompleteLabelsFor(
+        admin,
+        body,
+        state.dbSession
+      );
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "create",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
               values: body,
               errors: parsed.errors,
-              foreignKeyOptions
+              foreignKeyOptions,
+              autocompleteUrls: autocompleteUrlsFor(admin),
+              autocompleteLabels
             }),
             actionUrl: `${prefix}/m/${admin.slug()}/new`,
             backUrl: `${prefix}/m/${admin.slug()}`,
@@ -12358,10 +12775,15 @@ function makeAdminRouter(site, options) {
           status
         );
       };
+      if (uploadError !== null) {
+        rerender(uploadError, 400);
+        return;
+      }
       if (Object.keys(parsed.errors).length > 0) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(admin, parsed.data, backend.principalId(state.principal), true);
       try {
         await admin.repository(state.dbSession).create(parsed.data);
       } catch (error) {
@@ -12376,11 +12798,11 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const format = String(req.params.format);
       if (format !== "csv" && format !== "json") {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12402,7 +12824,7 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       if (!checkCsrf(req, res, state)) return;
       const body = req.body;
@@ -12418,7 +12840,12 @@ function makeAdminRouter(site, options) {
         return;
       }
       if (!bulkActionsFor(admin).some((option) => option.value === action)) {
-        html(res, renderNotFound(context(req, state.session)), 400);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 400);
+        return;
+      }
+      const needed = action === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (!await allows(state.principal, admin, needed)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
         return;
       }
       const repository = admin.repository(state.dbSession);
@@ -12426,7 +12853,7 @@ function makeAdminRouter(site, options) {
       if (action.startsWith("custom:")) {
         const custom = admin.getAction(action.slice("custom:".length));
         if (custom === null) {
-          html(res, renderNotFound(context(req, state.session)), 400);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 400);
           return;
         }
         let result;
@@ -12471,28 +12898,152 @@ function makeAdminRouter(site, options) {
       );
     })
   );
+  router.get(
+    `${prefix}/m/:slug/import`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
+      if (admin === null) return;
+      if (!admin.canImport) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      html(res, renderImport(req, state, admin, null, null, []));
+    })
+  );
+  router.post(
+    `${prefix}/m/:slug/import`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state, AdminPermission.CREATE);
+      if (admin === null) return;
+      if (!admin.canImport) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      let submission;
+      try {
+        submission = await readSubmission(req);
+      } catch (error) {
+        if (!(error instanceof MultipartLimitError)) throw error;
+        html(res, renderImport(req, state, admin, error.message, null, []), 400);
+        return;
+      }
+      if (!csrfTokenMatches(state.session, submission.fields.csrf_token)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
+        return;
+      }
+      const file = submission.files[0];
+      if (file === void 0) {
+        html(
+          res,
+          renderImport(req, state, admin, "Choose a CSV file to import.", null, []),
+          400
+        );
+        return;
+      }
+      let rows;
+      try {
+        rows = parseCsv(file.data.toString("utf8"));
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Could not read the file as UTF-8 CSV.";
+        html(res, renderImport(req, state, admin, message, null, []), 400);
+        return;
+      }
+      const repository = admin.repository(state.dbSession);
+      const actorId = backend.principalId(state.principal);
+      const rowErrors = [];
+      let created = 0;
+      for (const [index, row] of rows.entries()) {
+        const parsed = parseFormBody(admin, row, { uploadsAsText: true });
+        const failures = Object.entries(parsed.errors);
+        if (failures.length > 0) {
+          rowErrors.push({
+            row: index + 2,
+            message: failures.map(([field, error]) => `${field}: ${error}`).join("; ")
+          });
+          continue;
+        }
+        stampActor(admin, parsed.data, actorId, true);
+        try {
+          await repository.create(parsed.data);
+          created += 1;
+        } catch (error) {
+          rowErrors.push({
+            row: index + 2,
+            message: error instanceof Error ? error.message : String(error)
+          });
+        }
+      }
+      html(res, renderImport(req, state, admin, null, created, rowErrors));
+    })
+  );
+  router.get(
+    `${prefix}/m/:slug/autocomplete/:field`,
+    guarded(async (req, res) => {
+      if (sessions.load(req) === null) {
+        res.status(401).json({ options: [] });
+        return;
+      }
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = site.get(String(req.params.slug));
+      const field = String(req.params.field);
+      if (admin === null || !admin.autocompleteFields.includes(field) || !await allows(state.principal, admin, AdminPermission.VIEW)) {
+        res.status(404).json({ options: [] });
+        return;
+      }
+      const column6 = adminColumns(admin.model)[field];
+      const table = column6 === void 0 ? null : foreignKeyTable(column6);
+      const referenced = table === null ? null : site.get(table);
+      if (referenced === null) {
+        res.json({ options: [] });
+        return;
+      }
+      const term = queryString(req.query.q);
+      const searchable = referenced.searchFields.filter((name) => {
+        const target = adminColumns(referenced.model)[name];
+        return target !== void 0 && isSearchableColumn(target);
+      });
+      const filters = term === "" || searchable.length === 0 ? void 0 : or(...searchable.map((name) => ({ [name]: { ilike: `%${term}%` } })));
+      const page2 = await referenced.repository(state.dbSession).paginate({
+        page: 1,
+        pageSize: AUTOCOMPLETE_LIMIT,
+        ...filters === void 0 ? {} : { filters }
+      });
+      res.json({
+        options: page2.items.map((row) => ({
+          value: String(row[referenced.identityField]),
+          label: foreignKeyLabel(referenced, row)
+        }))
+      });
+    })
+  );
   router.get(
     `${prefix}/m/:slug/:identity`,
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state);
       if (admin === null) return;
       const row = await findRow(admin, state.dbSession, String(req.params.identity));
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       const identity = String(row[admin.identityField]);
       html(
         res,
-        renderDetailPage(context(req, state.session), {
+        renderDetailPage(context(req, state.session, state.visible), {
           title: admin.verboseName(),
           identity,
+          audit: await buildAuditView(admin, row, state.dbSession),
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
-          editUrl: admin.canEdit ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
-          deleteUrl: admin.canDelete ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+          deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
         })
       );
     })
@@ -12502,22 +13053,24 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       const row = admin.canEdit ? await findRow(admin, state.dbSession, identity) : null;
       if (row === null) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       html(
         res,
-        renderFormPage(context(req, state.session), {
+        renderFormPage(context(req, state.session, state.visible), {
           mode: "edit",
           title: admin.verboseName(),
           fields: buildFormFields(admin, {
             values: row,
-            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession)
+            foreignKeyOptions: await foreignKeyOptionsFor(admin, state.dbSession),
+            autocompleteUrls: autocompleteUrlsFor(admin),
+            autocompleteLabels: await autocompleteLabelsFor(admin, row, state.dbSession)
           }),
           actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
           backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
@@ -12531,27 +13084,47 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.EDIT);
       if (admin === null) return;
       const identity = String(req.params.identity);
       if (!admin.canEdit) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      let uploadError = null;
+      let submission;
+      try {
+        submission = await readSubmission(req);
+      } catch (error) {
+        if (!(error instanceof MultipartLimitError)) throw error;
+        submission = { fields: {}, files: [] };
+        uploadError = error.message;
+      }
+      const body = submission.fields;
+      if (uploadError === null && !csrfTokenMatches(state.session, body.csrf_token)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 403);
         return;
       }
-      if (!checkCsrf(req, res, state)) return;
-      const body = req.body;
       const parsed = parseFormBody(admin, body);
+      await applyUploads(admin, parsed.data, parsed.errors, submission.files, false);
       const foreignKeyOptions = await foreignKeyOptionsFor(admin, state.dbSession);
+      const autocompleteLabels = await autocompleteLabelsFor(
+        admin,
+        body,
+        state.dbSession
+      );
       const rerender = (error, status) => {
         html(
           res,
-          renderFormPage(context(req, state.session), {
+          renderFormPage(context(req, state.session, state.visible), {
             mode: "edit",
             title: admin.verboseName(),
             fields: buildFormFields(admin, {
               values: body,
               errors: parsed.errors,
-              foreignKeyOptions
+              foreignKeyOptions,
+              autocompleteUrls: autocompleteUrlsFor(admin),
+              autocompleteLabels
             }),
             actionUrl: `${prefix}/m/${admin.slug()}/${identity}/edit`,
             backUrl: `${prefix}/m/${admin.slug()}/${identity}`,
@@ -12560,14 +13133,24 @@ function makeAdminRouter(site, options) {
           status
         );
       };
+      if (uploadError !== null) {
+        rerender(uploadError, 400);
+        return;
+      }
       if (Object.keys(parsed.errors).length > 0) {
         rerender("Please fix the highlighted fields.", 400);
         return;
       }
+      stampActor(
+        admin,
+        parsed.data,
+        backend.principalId(state.principal),
+        false
+      );
       try {
         const changed = await admin.repository(state.dbSession).update({ [admin.identityField]: identity }, parsed.data);
         if (changed === 0) {
-          html(res, renderNotFound(context(req, state.session)), 404);
+          html(res, renderNotFound(context(req, state.session, state.visible)), 404);
           return;
         }
       } catch (error) {
@@ -12582,10 +13165,10 @@ function makeAdminRouter(site, options) {
     guarded(async (req, res) => {
       const state = await authenticate(req, res);
       if (state === null) return;
-      const admin = resolveAdmin(req, res, state);
+      const admin = await resolveAdmin(req, res, state, AdminPermission.DELETE);
       if (admin === null) return;
       if (!admin.canDelete) {
-        html(res, renderNotFound(context(req, state.session)), 404);
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
         return;
       }
       if (!checkCsrf(req, res, state)) return;
@@ -12593,10 +13176,96 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}?ok=deleted`);
     })
   );
+  async function actorLabel(actor, dbSession) {
+    if (actor === null || actor === void 0 || actor === "") return "";
+    const principal = await backend.loadPrincipal(dbSession, String(actor));
+    return principal === null ? String(actor) : backend.displayName(principal);
+  }
+  async function buildAuditView(admin, row, dbSession) {
+    const fields = [];
+    for (const name of admin.auditFieldNames()) {
+      const value = name === "createdBy" || name === "updatedBy" ? await actorLabel(row[name], dbSession) : formatCellValue(row[name]);
+      fields.push({ label: humanizeField(name), value });
+    }
+    const history = [];
+    if (admin.auditModel !== null) {
+      const entity = admin.model.name;
+      const entityId = String(row[admin.identityField]);
+      const page2 = await new BaseRepository(admin.auditModel, dbSession).paginate({
+        page: 1,
+        pageSize: AUDIT_HISTORY_LIMIT,
+        orderBy: "createdAt",
+        ascending: false,
+        filters: { entity, entityId }
+      });
+      for (const entry of page2.items) {
+        const changes = entry.changes ?? {};
+        history.push({
+          action: String(entry.action ?? ""),
+          at: formatCellValue(entry.createdAt),
+          actor: await actorLabel(entry.actor, dbSession) || "\u2014",
+          changes: Object.entries(changes).map(([field, change]) => ({
+            field,
+            before: formatCellValue(change?.before),
+            after: formatCellValue(change?.after)
+          })),
+          context: entry.context === null || entry.context === void 0 ? null : JSON.stringify(entry.context, null, 2)
+        });
+      }
+    }
+    if (fields.length === 0 && history.length === 0) return null;
+    return { fields, history };
+  }
   async function findRow(admin, dbSession, identity) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  function renderImport(req, state, admin, error, created, rowErrors) {
+    return renderImportPage(context(req, state.session, state.visible), {
+      title: admin.verboseNamePlural(),
+      actionUrl: `${prefix}/m/${admin.slug()}/import`,
+      backUrl: `${prefix}/m/${admin.slug()}`,
+      columns: admin.editableFieldNames(),
+      error,
+      created,
+      rowErrors
+    });
+  }
+  async function readSubmission(req) {
+    if (!isMultipart(req)) {
+      return { fields: req.body ?? {}, files: [] };
+    }
+    const parsed = await parseMultipart(req, { maxFileBytes: maxUploadBytes });
+    return { fields: parsed.fields, files: parsed.files };
+  }
+  async function applyUploads(admin, data, errors, files, creating) {
+    if (admin.uploadFields.length === 0) return;
+    const storage2 = admin.uploadStorage;
+    if (storage2 === null) return;
+    const columns = adminColumns(admin.model);
+    for (const field of admin.uploadFields) {
+      const file = files.find((candidate) => candidate.field === field);
+      if (file === void 0) {
+        const column6 = columns[field];
+        if (creating && column6 !== void 0 && !isColumnOptional(column6)) {
+          errors[field] = "This field is required.";
+        }
+        continue;
+      }
+      const extension = file.filename.includes(".") ? `.${file.filename.split(".").pop()}` : "";
+      const key = `${admin.slug()}/${field}/${randomUUID()}${extension}`;
+      const saved = await storage2.save(key, file.data, { contentType: file.contentType });
+      data[field] = saved.key;
+    }
+  }
+  async function permittedBulkActions(admin, principal) {
+    const permitted = [];
+    for (const option of bulkActionsFor(admin)) {
+      const needed = option.value === "delete" ? AdminPermission.DELETE : AdminPermission.EDIT;
+      if (await allows(principal, admin, needed)) permitted.push(option);
+    }
+    return permitted;
+  }
   async function renderList(req, admin, state) {
     const columns = adminColumns(admin.model);
     const query = await resolveListQuery(req, admin, state.dbSession);
@@ -12651,21 +13320,37 @@ function makeAdminRouter(site, options) {
       searchValue: query.search,
       filters: query.filterViews,
       sort,
-      newUrl: admin.canCreate ? `${prefix}/m/${admin.slug()}/new` : null,
-      bulkActions: bulkActionsFor(admin),
+      newUrl: await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/new` : null,
+      importUrl: admin.canImport && await allows(state.principal, admin, AdminPermission.CREATE) ? `${prefix}/m/${admin.slug()}/import` : null,
+      bulkActions: await permittedBulkActions(admin, state.principal),
       bulkUrl: `${prefix}/m/${admin.slug()}/bulk`,
       exportCsvUrl: exportUrl("csv"),
-      exportJsonUrl: exportUrl("json")
+      exportJsonUrl: exportUrl("json"),
+      lenses: admin.lenses.length === 0 ? [] : [
+        {
+          label: "All",
+          url: `?${buildQuery({ ...query.baseQuery, lens: void 0 })}`,
+          active: query.lens === ""
+        },
+        ...admin.lenses.map((entry) => ({
+          label: entry.label,
+          url: `?${buildQuery({ ...query.baseQuery, lens: entry.slug })}`,
+          active: query.lens === entry.slug
+        }))
+      ]
     };
-    return renderListPage(context(req, state.session), view);
+    return renderListPage(context(req, state.session, state.visible), view);
   }
   async function resolveListQuery(req, admin, dbSession) {
     const columns = adminColumns(admin.model);
     const search = queryString(req.query.q);
     const sortField = queryString(req.query.sort);
     const sortColumn = sortField in columns ? sortField : null;
-    const ascending = sortColumn === null ? admin.orderAscending : queryString(req.query.dir) !== "desc";
+    const lens = admin.getLens(queryString(req.query.lens));
     const conditions = [];
+    if (lens !== null && Object.keys(lens.filters).length > 0) {
+      conditions.push(lens.filters);
+    }
     const filterViews = [];
     for (const field of admin.listFilter) {
       const column6 = columns[field];
@@ -12729,15 +13414,21 @@ function makeAdminRouter(site, options) {
         baseQuery[`filter_${view.field}`] = view.value;
       }
     }
+    const lensOrder = lens?.orderBy ?? null;
+    const lensDescending = lensOrder?.startsWith("-");
+    const lensColumn = lensOrder === null ? null : lensOrder.replace(/^-/, "");
+    const ascending = sortColumn !== null ? queryString(req.query.dir) !== "desc" : lensColumn !== null ? !lensDescending : admin.orderAscending;
+    if (lens !== null) baseQuery.lens = lens.slug;
     return {
       search,
       searchable,
       where: conditions.length === 0 ? void 0 : and(...conditions),
-      orderBy: sortColumn ?? admin.orderKey ?? void 0,
+      orderBy: sortColumn ?? lensColumn ?? admin.orderKey ?? void 0,
       ascending,
       sortColumn,
       filterViews,
-      baseQuery
+      baseQuery,
+      lens: lens?.slug ?? ""
     };
   }
   async function relatedOptions(column6, dbSession) {
@@ -12755,6 +13446,7 @@ function makeAdminRouter(site, options) {
     const columns = adminColumns(admin.model);
     const options2 = {};
     for (const field of Object.keys(foreignKeyFields(admin))) {
+      if (admin.autocompleteFields.includes(field)) continue;
       const column6 = columns[field];
       if (column6 === void 0) continue;
       const related = await relatedOptions(column6, dbSession);
@@ -12762,8 +13454,101 @@ function makeAdminRouter(site, options) {
     }
     return options2;
   }
+  function autocompleteUrlsFor(admin) {
+    const urls = {};
+    for (const field of admin.autocompleteFields) {
+      urls[field] = `${prefix}/m/${admin.slug()}/autocomplete/${field}`;
+    }
+    return urls;
+  }
+  async function autocompleteLabelsFor(admin, row, dbSession) {
+    const labels = {};
+    if (row === null) return labels;
+    const columns = adminColumns(admin.model);
+    for (const field of admin.autocompleteFields) {
+      const value = row[field];
+      if (value === null || value === void 0 || value === "") continue;
+      const column6 = columns[field];
+      const table = column6 === void 0 ? null : foreignKeyTable(column6);
+      const referenced = table === null ? null : site.get(table);
+      if (referenced === null) continue;
+      const related = await referenced.repository(dbSession).first({ [referenced.identityField]: value });
+      if (related !== null) labels[field] = foreignKeyLabel(referenced, related);
+    }
+    return labels;
+  }
   return router;
 }
+function flagAllows(admin, action) {
+  if (action === AdminPermission.CREATE) return admin.canCreate;
+  if (action === AdminPermission.EDIT) return admin.canEdit;
+  if (action === AdminPermission.DELETE) return admin.canDelete;
+  return true;
+}
+function stampActor(admin, data, actorId, creating) {
+  const columns = adminColumns(admin.model);
+  if (creating && "createdBy" in columns) data.createdBy = actorId;
+  if ("updatedBy" in columns) data.updatedBy = actorId;
+}
+function formatMetric(value) {
+  if (typeof value === "string") return value;
+  return Number.isInteger(value) ? String(value) : value.toFixed(2);
+}
+async function computeBusinessCard(card, dbSession) {
+  const base = {
+    label: card.label,
+    unit: null,
+    direction: "flat",
+    percent: null,
+    previous: "",
+    segments: [],
+    helpText: card.helpText ?? null
+  };
+  let data;
+  try {
+    data = await card.compute(dbSession);
+  } catch (error) {
+    logger2.warning("Admin dashboard card failed", {
+      card: card.label,
+      error: error instanceof Error ? error.message : String(error)
+    });
+    return { ...base, kind: "value", value: "", error: "Could not compute this metric." };
+  }
+  if (data.kind === "partition") {
+    const total = partitionTotal(data);
+    return {
+      ...base,
+      kind: "partition",
+      value: formatMetric(total),
+      segments: data.segments.map((segment) => ({
+        label: segment.label,
+        value: formatMetric(segment.value),
+        percent: total === 0 ? 0 : segment.value / total * 100
+      })),
+      error: null
+    };
+  }
+  if (data.kind === "trend") {
+    const percent = trendPercent(data);
+    return {
+      ...base,
+      kind: "trend",
+      value: formatMetric(data.value),
+      unit: data.unit ?? null,
+      direction: trendDirection(data),
+      percent: percent === null ? null : `${percent >= 0 ? "+" : ""}${percent.toFixed(1)}%`,
+      previous: formatMetric(data.previous),
+      error: null
+    };
+  }
+  return {
+    ...base,
+    kind: "value",
+    value: formatMetric(data.value),
+    unit: data.unit ?? null,
+    error: null
+  };
+}
 function bulkActionsFor(admin) {
   const actions = [];
   const hasActiveFlag = "isActive" in adminColumns(admin.model);
@@ -12783,6 +13568,55 @@ function bulkActionsFor(admin) {
   }
   return actions;
 }
+function parseCsv(text) {
+  const source = text.charCodeAt(0) === 65279 ? text.slice(1) : text;
+  const rows = [];
+  let row = [];
+  let field = "";
+  let quoted = false;
+  for (let index = 0; index < source.length; index += 1) {
+    const char = source[index];
+    if (quoted) {
+      if (char === '"') {
+        if (source[index + 1] === '"') {
+          field += '"';
+          index += 1;
+        } else {
+          quoted = false;
+        }
+      } else {
+        field += char;
+      }
+      continue;
+    }
+    if (char === '"') {
+      quoted = true;
+    } else if (char === ",") {
+      row.push(field);
+      field = "";
+    } else if (char === "\n" || char === "\r") {
+      if (char === "\r" && source[index + 1] === "\n") index += 1;
+      row.push(field);
+      rows.push(row);
+      row = [];
+      field = "";
+    } else {
+      field += char;
+    }
+  }
+  if (field !== "" || row.length > 0) {
+    row.push(field);
+    rows.push(row);
+  }
+  const header = rows.shift();
+  if (header === void 0 || header.length === 0) {
+    throw new Error("The file has no header row.");
+  }
+  const keys = header.map((name) => name.trim());
+  return rows.filter((entry) => entry.some((value) => value.trim() !== "")).map(
+    (entry) => Object.fromEntries(keys.map((key, position) => [key, entry[position] ?? ""]))
+  );
+}
 function exportValue(value) {
   if (value instanceof Date) return value.toISOString();
   if (typeof value === "bigint") return value.toString();
@@ -14815,6 +15649,6 @@ async function withTestDatabase(models, fn) {
   }
 }
 
-export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseFormBody, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminPermission, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, MultipartLimitError, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminLens, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isMultipart, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseCsv, parseFormBody, parseMultipart, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderImportPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map