tempest-express-sdk 0.27.0 → 0.29.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { z, looseBoolean, toDict, PasswordUtils } from './chunk-ADF7OHRH.js';
-export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-ADF7OHRH.js';
+import { z, looseBoolean, toDict, PasswordUtils } from './chunk-7T4MZJZT.js';
+export { PasswordUtils, VERSION, baseAppSettingsSchema, baseAppSettingsShape, baseResponseSchema, centsField, corsSettingsShape, databaseSettingsShape, looseBoolean as envBoolean, hexColorField, latitudeField, loadSettings, longitudeField, looseBoolean, nonEmptyStrField, nonNegativeFloatField, nonNegativeIntField, percentField, portField, positiveFloatField, positiveIntField, priceField, ratingField, ratioField, serverSettingsShape, slugField, toDict, z } from './chunk-7T4MZJZT.js';
 import { AsyncLocalStorage } from 'async_hooks';
 import { Model, column, sql, BaseRepository, RecordNotFound, detectDialect, columnsOf, NodeSqliteDriver, AsyncEngine, or, and } from 'tempest-db-js';
 export { AsyncEngine, AsyncResult, AsyncSession, BaseRepository, Column, DeleteBuilder, InsertBuilder, Model, NoResultError, NodeSqliteDriver, PostgresDialect, RecordNotFound, SelectBuilder, SqliteDialect, SyncEngine, SyncSession, UpdateBuilder, and, belongsTo, column, columnsOf, createEngine, createSyncEngine, del, detectDialect, getDialect, hasMany, insert, join, loadRelations, not, or, parseDatabaseUrl, select, sql, update } from 'tempest-db-js';
@@ -9334,6 +9334,216 @@ function partitionTotal(partition) {
   return partition.segments.reduce((total, segment) => total + segment.value, 0);
 }
 
+// src/admin/logs.ts
+var LIFTED = /* @__PURE__ */ new Set(["level", "logger", "message", "timestamp", "stack"]);
+function toLogEntry(raw) {
+  const context = {};
+  for (const [key, value] of Object.entries(raw)) {
+    if (LIFTED.has(key) || value === null || value === void 0) continue;
+    context[key] = value;
+  }
+  return {
+    level: typeof raw.level === "string" ? raw.level : "info",
+    logger: typeof raw.logger === "string" ? raw.logger : "",
+    message: typeof raw.message === "string" ? raw.message : "",
+    timestamp: typeof raw.timestamp === "string" ? raw.timestamp : "",
+    stack: typeof raw.stack === "string" ? raw.stack : null,
+    context,
+    raw
+  };
+}
+function filterLogEntries(entries, term) {
+  const needle = term.trim().toLowerCase();
+  if (needle === "") return entries;
+  return entries.filter(
+    (entry) => `${entry.message} ${entry.logger} ${entry.stack ?? ""}`.toLowerCase().includes(needle)
+  );
+}
+function renderLogEntriesMarkdown(entries, options) {
+  const lines = [
+    "# Application logs",
+    "",
+    `- **Source:** \`${options.source}\``,
+    `- **Search:** ${options.query === "" ? "_none_" : `\`${options.query}\``}`,
+    `- **Exported:** ${entries.length} of ${options.total} matching record(s)`,
+    ""
+  ];
+  if (entries.length < options.total) {
+    lines.push(
+      `> Truncated: the export is capped, so ${options.total - entries.length} older matching record(s) are not included.`,
+      ""
+    );
+  }
+  for (const entry of entries) {
+    lines.push(
+      `## ${entry.level.toUpperCase()} \u2014 ${entry.message || "(no message)"}`,
+      "",
+      `- **When:** ${entry.timestamp || "unknown"}`,
+      `- **Logger:** ${entry.logger || "unknown"}`
+    );
+    for (const [key, value] of Object.entries(entry.context)) {
+      lines.push(
+        `- **${key}:** ${typeof value === "string" ? value : JSON.stringify(value)}`
+      );
+    }
+    lines.push("");
+    if (entry.stack !== null) {
+      lines.push("```text", entry.stack, "```", "");
+    }
+  }
+  return lines.join("\n");
+}
+function renderLogEntriesJson(entries) {
+  return JSON.stringify(
+    entries.map((entry) => entry.raw),
+    null,
+    2
+  );
+}
+
+// src/admin/sqlConsole.ts
+var SqlCapability = {
+  /** `SELECT`, `WITH … SELECT`, `EXPLAIN`, `SHOW`. */
+  READ: "read",
+  /** Adds rows. */
+  INSERT: "insert",
+  /** Changes rows. */
+  UPDATE: "update",
+  /** Removes rows. */
+  DELETE: "delete",
+  /** `CREATE` / `ALTER` / `COMMENT`. */
+  DDL: "ddl",
+  /** `DROP` and `TRUNCATE`: irreversible structure loss. */
+  DROP: "drop",
+  /**
+   * `GRANT` / `REVOKE` / `SET`, and anything the analyser cannot classify.
+   * Unknown statements land here on purpose, so a construct nobody anticipated
+   * needs the most privileged capability rather than the least.
+   */
+  ADMIN: "admin"
+};
+var STATEMENT_CAPABILITIES = {
+  select: SqlCapability.READ,
+  with: SqlCapability.READ,
+  explain: SqlCapability.READ,
+  show: SqlCapability.READ,
+  desc: SqlCapability.READ,
+  describe: SqlCapability.READ,
+  insert: SqlCapability.INSERT,
+  replace: SqlCapability.INSERT,
+  update: SqlCapability.UPDATE,
+  delete: SqlCapability.DELETE,
+  create: SqlCapability.DDL,
+  alter: SqlCapability.DDL,
+  comment: SqlCapability.DDL,
+  rename: SqlCapability.DDL,
+  drop: SqlCapability.DROP,
+  truncate: SqlCapability.DROP
+};
+var PARSER_HINT = "The admin SQL console needs the optional peer `node-sql-parser`. Install it with: npm install node-sql-parser";
+async function loadSqlParser() {
+  try {
+    const module = await import('node-sql-parser');
+    const Parser = module.Parser ?? module.default?.Parser;
+    if (Parser === void 0) throw new Error(PARSER_HINT);
+    return new Parser();
+  } catch {
+    throw new Error(PARSER_HINT);
+  }
+}
+function analyzeSql(sql5, dialect, parser) {
+  const capabilities = /* @__PURE__ */ new Set();
+  const tables = /* @__PURE__ */ new Set();
+  let statements = 0;
+  let parsed = true;
+  let unscopedWrite = false;
+  try {
+    const ast = parser.astify(sql5, { database: dialect });
+    const list = Array.isArray(ast) ? ast : [ast];
+    statements = list.length;
+    for (const statement of list) {
+      const type = String(statement.type ?? "").toLowerCase();
+      capabilities.add(STATEMENT_CAPABILITIES[type] ?? SqlCapability.ADMIN);
+      if ((type === "update" || type === "delete") && !statement.where) {
+        unscopedWrite = true;
+      }
+    }
+  } catch {
+    parsed = false;
+    statements = 1;
+    capabilities.add(SqlCapability.ADMIN);
+  }
+  try {
+    for (const entry of parser.tableList(sql5, { database: dialect })) {
+      const name = entry.split("::").pop();
+      if (name !== void 0 && name !== "null") tables.add(name.toLowerCase());
+    }
+  } catch {
+  }
+  return {
+    statements,
+    capabilities: [...capabilities],
+    tables: [...tables],
+    parsed,
+    unscopedWrite
+  };
+}
+function checkSqlPolicy(analysis, policy) {
+  const granted = new Set(policy.capabilities ?? [SqlCapability.READ]);
+  for (const capability of analysis.capabilities) {
+    if (!granted.has(capability)) {
+      return {
+        allowed: false,
+        reason: analysis.parsed ? `This console may not run ${capability} statements.` : "The statement could not be parsed, so it needs the admin capability."
+      };
+    }
+  }
+  if ((policy.requireWhereOnWrites ?? true) && analysis.unscopedWrite) {
+    return {
+      allowed: false,
+      reason: "An UPDATE or DELETE without a WHERE clause is refused."
+    };
+  }
+  const denied = new Set((policy.denyTables ?? []).map((name) => name.toLowerCase()));
+  for (const table of analysis.tables) {
+    if (denied.has(table)) {
+      return { allowed: false, reason: `Table "${table}" is not available here.` };
+    }
+  }
+  if (policy.allowTables !== void 0) {
+    const allowed = new Set(policy.allowTables.map((name) => name.toLowerCase()));
+    if (analysis.tables.length === 0) {
+      return {
+        allowed: false,
+        reason: "This console only runs statements naming an allowed table."
+      };
+    }
+    for (const table of analysis.tables) {
+      if (!allowed.has(table)) {
+        return { allowed: false, reason: `Table "${table}" is not on the allow list.` };
+      }
+    }
+  }
+  return { allowed: true, reason: null };
+}
+
+// src/admin/inlines.ts
+function adminInline(options) {
+  const slug = options.model.tablename;
+  if (typeof slug !== "string" || slug === "") {
+    throw new Error("adminInline requires a concrete model with a tablename");
+  }
+  return {
+    model: options.model,
+    slug,
+    fkField: options.fkField,
+    listDisplay: options.listDisplay === void 0 ? null : [...options.listDisplay],
+    label: options.label ?? null,
+    editable: options.editable ?? false,
+    canDelete: options.canDelete ?? false
+  };
+}
+
 // src/admin/lenses.ts
 function slugify(name) {
   return name.normalize("NFD").replace(/\p{M}/gu, "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "lens";
@@ -9589,6 +9799,8 @@ var AdminModel = class {
   canImport;
   /** Foreign-key columns rendered as a typed search box. */
   autocompleteFields;
+  /** Related child models listed on the detail view. */
+  inlines;
   actions = /* @__PURE__ */ new Map();
   slugOverride;
   listDisplayOverride;
@@ -9620,6 +9832,7 @@ var AdminModel = class {
     this.uploadStorage = options.uploadStorage ?? null;
     this.canImport = options.canImport ?? false;
     this.autocompleteFields = [...options.autocompleteFields ?? []];
+    this.inlines = [...options.inlines ?? []];
     if (this.uploadFields.length > 0 && this.uploadStorage === null) {
       throw new Error(
         `AdminModel(${this.model.tablename}).uploadFields requires an uploadStorage (e.g. LocalUploadStorage / S3UploadStorage) \u2014 without one there is nowhere to write the file.`
@@ -9898,7 +10111,9 @@ function parseFormBody(admin, body, options = {}) {
   const data = {};
   const errors = {};
   const uploads = options.uploadsAsText === true ? /* @__PURE__ */ new Set() : new Set(admin.uploadFields);
+  const only = options.only === void 0 ? null : new Set(options.only);
   for (const name of admin.editableFieldNames()) {
+    if (only !== null && !only.has(name)) continue;
     const column6 = columns[name];
     if (column6 === void 0) continue;
     if (uploads.has(name)) continue;
@@ -11963,7 +12178,7 @@ function escapeHtml(value) {
   return String(value ?? "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 function renderLayout(context, title, body) {
-  const { site, theme, prefix, session, currentPath, navModels, messages } = context;
+  const { site, theme, prefix, session, currentPath, navModels, navSystem, messages } = context;
   const authed = session !== null;
   const indexUrl = `${prefix}/`;
   const navLink = (url, label, active) => `<a href="${escapeHtml(url)}" class="tempest-admin-sidebar__link${active ? " tempest-admin-sidebar__link--active" : ""}">${escapeHtml(label)}</a>`;
@@ -11973,6 +12188,9 @@ function renderLayout(context, title, body) {
         ${navLink(indexUrl, "Dashboard", currentPath === indexUrl)}
         ${navModels.length > 0 ? `<span class="tempest-admin-sidebar__heading">Models</span>${navModels.map(
     (entry) => navLink(entry.url, entry.label, currentPath.startsWith(entry.url))
+  ).join("")}` : ""}
+        ${navSystem.length > 0 ? `<span class="tempest-admin-sidebar__heading">System</span>${navSystem.map(
+    (entry) => navLink(entry.url, entry.label, currentPath.startsWith(entry.url))
   ).join("")}` : ""}
       </nav>
     </aside>` : "";
@@ -12232,15 +12450,102 @@ function renderDetailPage(context, view) {
     </div>
   </header>
   <dl class="tempest-admin-detail__fields">${fields}</dl>
+  ${view.inlines.map((inline) => renderInline(inline, context.session?.csrfToken ?? "", view.inlineError)).join("")}
   ${auditPanel}
 </section>`;
   return renderLayout(context, `${view.title} \xB7 ${view.identity}`, body);
 }
-function renderAuditPanel(audit) {
-  const rows = audit.fields.map(
+function renderInlineCell(field) {
+  const required = field.required ? " required" : "";
+  const name = escapeHtml(field.name);
+  const value = escapeHtml(field.value);
+  let control;
+  switch (field.widget) {
+    case "checkbox":
+      control = `<input type="checkbox" name="${name}" value="true"${field.checked ? " checked" : ""}>`;
+      break;
+    case "textarea":
+    case "json":
+      control = `<textarea name="${name}" rows="2"${required}>${value}</textarea>`;
+      break;
+    case "select": {
+      const blank = field.required ? "" : '<option value="">\u2014 none \u2014</option>';
+      const options = field.options.map(
+        (option) => `<option value="${escapeHtml(option.value)}"${option.value === field.value ? " selected" : ""}>${escapeHtml(option.label)}</option>`
+      ).join("");
+      control = `<select name="${name}"${required}>${blank}${options}</select>`;
+      break;
+    }
+    case "number":
+      control = `<input type="number" name="${name}" value="${value}"${field.step !== null ? ` step="${escapeHtml(field.step)}"` : ""}${required}>`;
+      break;
+    case "datetime":
+      control = `<input type="datetime-local" name="${name}" value="${value}"${required}>`;
+      break;
+    case "date":
+      control = `<input type="date" name="${name}" value="${value}"${required}>`;
+      break;
+    case "time":
+      control = `<input type="time" name="${name}" value="${value}"${required}>`;
+      break;
+    default:
+      control = `<input type="text" name="${name}" value="${value}"${required}>`;
+  }
+  const error = field.error !== null ? `<small class="tempest-admin-form__field-error">${escapeHtml(field.error)}</small>` : "";
+  return `${control}${error}`;
+}
+function renderInline(inline, csrfToken, error) {
+  const heading = `<header class="tempest-admin-inline__header">
+      <h2>${escapeHtml(inline.label)}${inline.total > 0 ? ` <span class="tempest-admin-inline__count">(${escapeHtml(inline.total)})</span>` : ""}</h2>
+      ${inline.addUrl !== null ? `<a class="tempest-admin-btn" href="${escapeHtml(inline.addUrl)}">Add</a>` : ""}
+    </header>`;
+  const more = inline.truncated ? `<p class="tempest-admin-inline__more"><em>Showing the first ${escapeHtml(inline.rows.length)} of ${escapeHtml(inline.total)}.</em></p>` : "";
+  if (!inline.editable) {
+    if (inline.rows.length === 0) {
+      return `<section class="tempest-admin-inline">${heading}<p><em>No related records.</em></p></section>`;
+    }
+    const head2 = `<tr>${inline.columns.map((column6) => `<th>${escapeHtml(column6)}</th>`).join("")}<th></th></tr>`;
+    const body = inline.rows.map(
+      (row) => `<tr>${row.cells.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("")}<td>${row.url === null ? "" : `<a href="${escapeHtml(row.url)}">View</a>`}</td></tr>`
+    ).join("");
+    return `<section class="tempest-admin-inline">
+      ${heading}
+      <div class="tempest-admin-inline__scroll">
+        <table class="tempest-admin-inline__table">
+          <thead>${head2}</thead>
+          <tbody>${body}</tbody>
+        </table>
+      </div>
+      ${more}
+    </section>`;
+  }
+  const head = `<tr>${inline.columns.map((column6) => `<th>${escapeHtml(column6)}</th>`).join("")}${inline.canDelete ? "<th>Delete</th>" : ""}</tr>`;
+  const renderRow = (row, isNew) => `<tr${isNew ? ' class="tempest-admin-inline__new"' : ""}>${row.fields.map((field) => `<td>${renderInlineCell(field)}</td>`).join("")}${inline.canDelete ? `<td class="tempest-admin-inline__del">${isNew ? "" : `<input type="checkbox" name="row.${escapeHtml(row.key)}.__delete" value="true">`}</td>` : ""}</tr>`;
+  const rows = inline.rows.map((row) => renderRow(row, false)).join("");
+  const blank = inline.newRow === null ? "" : renderRow(inline.newRow, true);
+  return `<section class="tempest-admin-inline">
+    ${heading}
+    ${error !== null ? `<p class="tempest-admin-form__error">${escapeHtml(error)}</p>` : ""}
+    <form method="post" action="${escapeHtml(inline.formAction)}" class="tempest-admin-inline__form">
+      <input type="hidden" name="csrf_token" value="${escapeHtml(csrfToken)}">
+      <div class="tempest-admin-inline__scroll">
+        <table class="tempest-admin-inline__table">
+          <thead>${head}</thead>
+          <tbody>${rows}${blank}</tbody>
+        </table>
+      </div>
+      <div class="tempest-admin-form__actions">
+        <button type="submit">Save ${escapeHtml(inline.label)}</button>
+      </div>
+    </form>
+    ${more}
+  </section>`;
+}
+function renderAuditPanel(audit2) {
+  const rows = audit2.fields.map(
     (field) => `<dt>${escapeHtml(field.label)}</dt><dd>${field.value === "" ? "<em>\u2014</em>" : escapeHtml(field.value)}</dd>`
   ).join("");
-  const history = audit.history.length > 0 ? `<ol class="tempest-admin-history">${audit.history.map((entry) => {
+  const history = audit2.history.length > 0 ? `<ol class="tempest-admin-history">${audit2.history.map((entry) => {
     const changes = entry.changes.length > 0 ? `<table class="tempest-admin-history__changes"><thead><tr><th>Field</th><th>Before</th><th>After</th></tr></thead><tbody>${entry.changes.map(
       (change) => `<tr><td>${escapeHtml(change.field)}</td><td>${escapeHtml(change.before)}</td><td>${escapeHtml(change.after)}</td></tr>`
     ).join("")}</tbody></table>` : "<p><em>No field changes recorded.</em></p>";
@@ -12338,6 +12643,86 @@ function renderFormPage(context, view) {
 </section>`;
   return renderLayout(context, `${heading} \xB7 ${context.site.title}`, body);
 }
+function renderLogsPage(context, view) {
+  const options = view.sources.map(
+    (source) => `<option value="${escapeHtml(source.value)}"${source.selected ? " selected" : ""}>${escapeHtml(source.label)}</option>`
+  ).join("");
+  const rows = view.rows.length > 0 ? view.rows.map((row) => {
+    const context_ = row.context.map(
+      (entry) => `<span class="tempest-admin-logs__meta"><b>${escapeHtml(entry.key)}</b>: ${escapeHtml(entry.value)}</span>`
+    ).join(" ");
+    const message = row.stack === null ? `${escapeHtml(row.message)}${context_ === "" ? "" : `<br>${context_}`}` : `<details><summary>${escapeHtml(row.message)}</summary>${context_ === "" ? "" : `<p>${context_}</p>`}<pre>${escapeHtml(row.stack)}</pre></details>`;
+    return `<tr>
+        <td data-label="Level"><span class="tempest-log-badge tempest-log-badge--${escapeHtml(row.level)}">${escapeHtml(row.level)}</span></td>
+        <td data-label="When">${escapeHtml(row.timestamp)}</td>
+        <td data-label="Logger">${escapeHtml(row.logger)}</td>
+        <td data-label="Message">${message}</td>
+      </tr>`;
+  }).join("") : `<tr><td colspan="4">No log records yet. Point <code>configureFileLogging</code> at the same directory to populate this page.</td></tr>`;
+  const body = `<section class="tempest-admin-logs">
+  <header class="tempest-admin-list__header">
+    <h1>Logs</h1>
+    <p>${escapeHtml(view.total)} record${view.total === 1 ? "" : "s"}.</p>
+  </header>
+  <div class="tempest-admin-list__toolbar">
+    <form method="get" class="tempest-admin-list__filters">
+      <label><span>Source</span><select name="source">${options}</select></label>
+      <input type="search" name="q" value="${escapeHtml(view.query)}" placeholder="Search\u2026" aria-label="Search">
+      <button type="submit">Apply</button>
+    </form>
+    <div class="tempest-admin-list__actions">
+      <a href="${escapeHtml(view.exportMarkdownUrl)}">Export Markdown</a>
+      <a href="${escapeHtml(view.exportJsonUrl)}">Export JSON</a>
+    </div>
+  </div>
+  <div class="tempest-admin-table-wrap">
+    <table class="tempest-admin-list__table">
+      <thead><tr><th>Level</th><th>When</th><th>Logger</th><th>Message</th></tr></thead>
+      <tbody>${rows}</tbody>
+    </table>
+  </div>
+  ${view.pages > 1 ? `<nav class="tempest-admin-list__pagination" aria-label="Pagination">
+    ${view.prevUrl !== null ? `<a href="${escapeHtml(view.prevUrl)}">\u2190 Prev</a>` : ""}
+    <span>Page ${escapeHtml(view.page)} of ${escapeHtml(view.pages)}</span>
+    ${view.nextUrl !== null ? `<a href="${escapeHtml(view.nextUrl)}">Next \u2192</a>` : ""}
+  </nav>` : ""}
+  <p class="tempest-admin-form__hint">Exports carry at most ${escapeHtml(view.exportMax)} records, newest first, honouring the filters above.</p>
+</section>`;
+  return renderLayout(context, `Logs \xB7 ${context.site.title}`, body);
+}
+function renderSqlPage(context, view) {
+  if (context.session === null) throw new Error("The SQL console requires a session");
+  const result = view.rowCount === null ? "" : `<p class="tempest-admin-form__hint">${escapeHtml(view.rowCount)} row${view.rowCount === 1 ? "" : "s"}${view.durationMs === null ? "" : ` in ${escapeHtml(view.durationMs)} ms`}${view.truncated ? " (truncated by the row cap)" : ""}.</p>
+      <div class="tempest-admin-table-wrap">
+        <table class="tempest-admin-list__table">
+          <thead><tr>${view.columns.map((column6) => `<th>${escapeHtml(column6)}</th>`).join("")}</tr></thead>
+          <tbody>${view.rows.map(
+    (row) => `<tr>${row.map((cell) => `<td>${escapeHtml(cell)}</td>`).join("")}</tr>`
+  ).join("")}</tbody>
+        </table>
+      </div>`;
+  const body = `<section class="tempest-admin-sql">
+  <header class="tempest-admin-list__header">
+    <h1>SQL console</h1>
+    <p>Capabilities: <code>${escapeHtml(view.capabilities.join(", "))}</code></p>
+  </header>
+  ${view.error !== null ? `<p class="tempest-admin-form__error">${escapeHtml(view.error)}</p>` : ""}
+  <form method="post" action="${escapeHtml(`${context.prefix}/sql`)}" class="tempest-admin-form__form">
+    <input type="hidden" name="csrf_token" value="${escapeHtml(context.session.csrfToken)}">
+    <div class="tempest-admin-form__field">
+      <label>
+        <span>Statement</span>
+        <textarea name="sql" rows="6" spellcheck="false" required>${escapeHtml(view.sql)}</textarea>
+      </label>
+    </div>
+    <div class="tempest-admin-form__actions">
+      <button type="submit">Run</button>
+    </div>
+  </form>
+  ${result}
+</section>`;
+  return renderLayout(context, `SQL console \xB7 ${context.site.title}`, body);
+}
 function renderImportPage(context, view) {
   if (context.session === null) throw new Error("The import page requires a session");
   const summary = view.created === null ? "" : `<p class="tempest-admin-import__summary">Created ${escapeHtml(view.created)} record${view.created === 1 ? "" : "s"}.</p>`;
@@ -12423,7 +12808,67 @@ var AUTOCOMPLETE_SCRIPT = `<script>
   });
 })();
 </script>`;
+function filesFor(dir, source) {
+  if (source === "500") return [join(dir, HTTP_500_LOG_FILE)];
+  if (source === "all") return Object.values(LEVEL_LOG_FILES).map((f) => join(dir, f));
+  return [join(dir, LEVEL_LOG_FILES[source])];
+}
+async function readLogEntries(dir, source) {
+  return await readEntries(filesFor(dir, source));
+}
+async function readEntries(files) {
+  const entries = [];
+  for (const file of files) {
+    let content;
+    try {
+      content = await readFile(file, "utf8");
+    } catch {
+      continue;
+    }
+    for (const line of content.split("\n")) {
+      if (!line.trim()) continue;
+      try {
+        entries.push(JSON.parse(line));
+      } catch {
+      }
+    }
+  }
+  return entries;
+}
+function makeLogsRouter(options) {
+  const router = Router();
+  const path = options.path ?? "/logs";
+  const guards = options.guards ?? [];
+  const handler = (req, res, next) => {
+    const source = req.query.source ?? "all";
+    const validSources = ["all", "debug", "info", "warning", "error", "500"];
+    if (!validSources.includes(source)) {
+      res.status(422).json({ detail: "Invalid log source", code: "VALIDATION_ERROR", details: {} });
+      return;
+    }
+    const page2 = Math.max(1, Number(req.query.page) || 1);
+    const pageSize = Math.min(500, Math.max(1, Number(req.query.pageSize) || 50));
+    readEntries(filesFor(options.dir, source)).then((entries) => {
+      entries.reverse();
+      const total = entries.length;
+      const start = (page2 - 1) * pageSize;
+      res.json({
+        items: entries.slice(start, start + pageSize),
+        total,
+        page: page2,
+        pageSize,
+        pages: Math.ceil(total / pageSize)
+      });
+    }).catch(next);
+  };
+  router.get(path, ...guards, handler);
+  return router;
+}
 var logger2 = new JSONLogger("tempest_express_sdk.admin.router");
+var LOG_SOURCES = ["all", "debug", "info", "warning", "error", "500"];
+var LOG_PAGE_SIZE = 50;
+var LOG_EXPORT_MAX = 500;
+var INLINE_ROW_LIMIT = 50;
 var AUTOCOMPLETE_LIMIT = 20;
 var AUDIT_HISTORY_LIMIT = 50;
 var FK_OPTION_CAP = 1e3;
@@ -12454,6 +12899,13 @@ function makeAdminRouter(site, options) {
   const theme = resolveAdminTheme(site.theme);
   const showMetrics = options.showMetrics ?? true;
   const exportMaxRows = options.exportMaxRows ?? 5e3;
+  const systemNav = [];
+  if (options.logDir !== void 0) {
+    systemNav.push({ label: "Logs", url: `${prefix}/logs` });
+  }
+  if (options.sqlConsole !== void 0) {
+    systemNav.push({ label: "SQL console", url: `${prefix}/sql` });
+  }
   const maxUploadBytes = options.maxUploadBytes ?? 10 * 1024 * 1024;
   const sessions = new AdminSessionStore({
     secret: options.secretKey,
@@ -12475,6 +12927,7 @@ function makeAdminRouter(site, options) {
       label: admin.verboseNamePlural(),
       url: `${prefix}/m/${admin.slug()}`
     })),
+    navSystem: systemNav,
     messages: flashFor(req)
   });
   const allows = async (principal, admin, action) => {
@@ -12685,6 +13138,187 @@ function makeAdminRouter(site, options) {
       );
     })
   );
+  if (options.logDir !== void 0) {
+    const logDir = options.logDir;
+    router.get(
+      `${prefix}/logs`,
+      guarded(async (req, res) => {
+        const state = await authenticate(req, res);
+        if (state === null) return;
+        const { entries, source, search } = await readLogs(req, logDir);
+        const page2 = Math.max(1, Number.parseInt(queryString(req.query.page), 10) || 1);
+        const start = (page2 - 1) * LOG_PAGE_SIZE;
+        const pages = Math.max(1, Math.ceil(entries.length / LOG_PAGE_SIZE));
+        const exportUrl = (format) => `${prefix}/logs/export?${buildQuery({ source, q: search, format })}`;
+        const pageUrl = (target) => `?${buildQuery({ source, q: search, page: target })}`;
+        html(
+          res,
+          renderLogsPage(context(req, state.session, state.visible), {
+            sources: LOG_SOURCES.map((value) => ({
+              value,
+              label: value === "500" ? "HTTP 500" : humanizeField(value),
+              selected: value === source
+            })),
+            query: search,
+            rows: entries.slice(start, start + LOG_PAGE_SIZE).map((entry) => ({
+              level: entry.level,
+              timestamp: entry.timestamp,
+              logger: entry.logger,
+              message: entry.message,
+              stack: entry.stack,
+              context: Object.entries(entry.context).map(([key, value]) => ({
+                key,
+                value: typeof value === "string" ? value : JSON.stringify(value)
+              }))
+            })),
+            total: entries.length,
+            page: page2,
+            pages,
+            prevUrl: page2 > 1 ? pageUrl(page2 - 1) : null,
+            nextUrl: page2 < pages ? pageUrl(page2 + 1) : null,
+            exportMarkdownUrl: exportUrl("md"),
+            exportJsonUrl: exportUrl("json"),
+            exportMax: LOG_EXPORT_MAX
+          })
+        );
+      })
+    );
+    router.get(
+      `${prefix}/logs/export`,
+      guarded(async (req, res) => {
+        const state = await authenticate(req, res);
+        if (state === null) return;
+        const format = queryString(req.query.format) === "json" ? "json" : "md";
+        const { entries, source, search } = await readLogs(req, logDir);
+        const window = entries.slice(0, LOG_EXPORT_MAX);
+        const payload = format === "json" ? renderLogEntriesJson(window) : renderLogEntriesMarkdown(window, {
+          source,
+          query: search,
+          total: entries.length
+        });
+        res.status(200).type(format === "json" ? "application/json" : "text/markdown; charset=utf-8").set("content-disposition", `attachment; filename="logs.${format}"`).send(payload);
+      })
+    );
+  }
+  if (options.sqlConsole !== void 0) {
+    const console_ = options.sqlConsole;
+    const policy = console_.policy ?? {};
+    const dialect = console_.dialect ?? "postgresql";
+    const capabilities = policy.capabilities ?? [SqlCapability.READ];
+    const maxRows = policy.maxRows ?? 200;
+    router.get(
+      `${prefix}/sql`,
+      guarded(async (req, res) => {
+        const state = await authenticate(req, res);
+        if (state === null) return;
+        html(
+          res,
+          renderSqlPage(context(req, state.session, state.visible), {
+            sql: "",
+            capabilities: [...capabilities],
+            error: null,
+            columns: [],
+            rows: [],
+            rowCount: null,
+            truncated: false,
+            durationMs: null
+          })
+        );
+      })
+    );
+    router.post(
+      `${prefix}/sql`,
+      guarded(async (req, res) => {
+        const state = await authenticate(req, res);
+        if (state === null) return;
+        if (!checkCsrf(req, res, state)) return;
+        const body = req.body;
+        const sql5 = typeof body.sql === "string" ? body.sql : "";
+        const principal = backend.displayName(state.principal);
+        const render = (view) => {
+          html(
+            res,
+            renderSqlPage(context(req, state.session, state.visible), {
+              sql: sql5,
+              capabilities: [...capabilities],
+              ...view
+            }),
+            view.error === null ? 200 : 400
+          );
+        };
+        const parser = await loadSqlParser();
+        const analysis = analyzeSql(sql5, dialect, parser);
+        const verdict = checkSqlPolicy(analysis, policy);
+        if (!verdict.allowed) {
+          await audit(console_.onAudit, {
+            sql: sql5,
+            principal,
+            allowed: false,
+            reason: verdict.reason,
+            analysis,
+            durationMs: null,
+            rowCount: null
+          });
+          render({
+            error: verdict.reason,
+            columns: [],
+            rows: [],
+            rowCount: null,
+            truncated: false,
+            durationMs: null
+          });
+          return;
+        }
+        const started = Date.now();
+        let rows;
+        try {
+          rows = console_.run === void 0 ? await state.dbSession.raw(sql5).all() : await console_.run(sql5, state.dbSession);
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          await audit(console_.onAudit, {
+            sql: sql5,
+            principal,
+            allowed: true,
+            reason: message,
+            analysis,
+            durationMs: Date.now() - started,
+            rowCount: null
+          });
+          render({
+            error: message,
+            columns: [],
+            rows: [],
+            rowCount: null,
+            truncated: false,
+            durationMs: null
+          });
+          return;
+        }
+        const durationMs = Date.now() - started;
+        await audit(console_.onAudit, {
+          sql: sql5,
+          principal,
+          allowed: true,
+          reason: null,
+          analysis,
+          durationMs,
+          rowCount: rows.length
+        });
+        const window = rows.slice(0, maxRows);
+        const columns = window.length === 0 ? [] : Object.keys(window[0] ?? {});
+        render({
+          error: null,
+          columns,
+          rows: window.map(
+            (row) => columns.map((column6) => formatCellValue(row[column6]))
+          ),
+          rowCount: rows.length,
+          truncated: rows.length > window.length,
+          durationMs
+        });
+      })
+    );
+  }
   router.get(
     `${prefix}/m/:slug`,
     guarded(async (req, res) => {
@@ -13040,6 +13674,8 @@ function makeAdminRouter(site, options) {
           title: admin.verboseName(),
           identity,
           audit: await buildAuditView(admin, row, state.dbSession),
+          inlines: await buildInlines(admin, row, state, identity),
+          inlineError: null,
           fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(row[name]) })),
           backUrl: `${prefix}/m/${admin.slug()}`,
           editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
@@ -13160,6 +13796,103 @@ function makeAdminRouter(site, options) {
       res.redirect(`${prefix}/m/${admin.slug()}/${identity}?ok=updated`);
     })
   );
+  router.post(
+    `${prefix}/m/:slug/:identity/inlines/:child`,
+    guarded(async (req, res) => {
+      const state = await authenticate(req, res);
+      if (state === null) return;
+      const admin = await resolveAdmin(req, res, state);
+      if (admin === null) return;
+      if (!checkCsrf(req, res, state)) return;
+      const childSlug = String(req.params.child);
+      const inline = admin.inlines.find(
+        (entry) => entry.slug === childSlug && entry.editable
+      );
+      const childAdmin = inline === void 0 ? null : site.get(childSlug);
+      if (inline === void 0 || childAdmin === null || !await allows(state.principal, childAdmin, AdminPermission.EDIT)) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      const identity = String(req.params.identity);
+      const parent = await findRow(admin, state.dbSession, identity);
+      if (parent === null) {
+        html(res, renderNotFound(context(req, state.session, state.visible)), 404);
+        return;
+      }
+      const parentId = parent[admin.identityField];
+      const { rows: grouped, deletions } = groupInlineSubmission(
+        req.body
+      );
+      const names = inlineFieldNames(childAdmin, inline);
+      const childRepo = childAdmin.repository(state.dbSession);
+      const actorId = backend.principalId(state.principal);
+      const canDelete = inline.canDelete && await allows(state.principal, childAdmin, AdminPermission.DELETE);
+      const failed = [];
+      let formError = null;
+      const owned = async (key) => await childRepo.first({
+        [childAdmin.identityField]: key,
+        [inline.fkField]: parentId
+      });
+      for (const [key, values] of Object.entries(grouped)) {
+        const isNew = key.startsWith("new");
+        if (!isNew && canDelete && deletions.has(key)) {
+          if (await owned(key) !== null) {
+            await childRepo.delete({ [childAdmin.identityField]: key });
+          }
+          continue;
+        }
+        if (isNew && Object.values(values).every((value) => value.trim() === "")) {
+          continue;
+        }
+        const parsed = parseFormBody(childAdmin, values, { only: names });
+        if (Object.keys(parsed.errors).length > 0) {
+          failed.push({ key, values, errors: parsed.errors });
+          continue;
+        }
+        try {
+          if (isNew) {
+            stampActor(childAdmin, parsed.data, actorId, true);
+            await childRepo.create({
+              ...parsed.data,
+              [inline.fkField]: parentId
+            });
+          } else {
+            if (await owned(key) === null) continue;
+            stampActor(childAdmin, parsed.data, actorId, false);
+            await childRepo.update(
+              { [childAdmin.identityField]: key },
+              parsed.data
+            );
+          }
+        } catch (error) {
+          formError = describeWriteFailure(childAdmin, error);
+          failed.push({ key, values, errors: {} });
+        }
+      }
+      if (failed.length > 0) {
+        const fresh = await findRow(admin, state.dbSession, identity) ?? parent;
+        html(
+          res,
+          renderDetailPage(context(req, state.session, state.visible), {
+            title: admin.verboseName(),
+            identity,
+            audit: await buildAuditView(admin, fresh, state.dbSession),
+            inlines: await buildInlines(admin, fresh, state, identity, {
+              [childSlug]: failed
+            }),
+            inlineError: formError ?? "Some inline rows could not be saved.",
+            fields: admin.detailFieldNames().map((name) => ({ label: name, value: formatCellValue(fresh[name]) })),
+            backUrl: `${prefix}/m/${admin.slug()}`,
+            editUrl: await allows(state.principal, admin, AdminPermission.EDIT) ? `${prefix}/m/${admin.slug()}/${identity}/edit` : null,
+            deleteUrl: await allows(state.principal, admin, AdminPermission.DELETE) ? `${prefix}/m/${admin.slug()}/${identity}/delete` : null
+          }),
+          400
+        );
+        return;
+      }
+      res.redirect(`${prefix}/m/${admin.slug()}/${identity}?ok=updated`);
+    })
+  );
   router.post(
     `${prefix}/m/:slug/:identity/delete`,
     guarded(async (req, res) => {
@@ -13181,6 +13914,89 @@ function makeAdminRouter(site, options) {
     const principal = await backend.loadPrincipal(dbSession, String(actor));
     return principal === null ? String(actor) : backend.displayName(principal);
   }
+  async function buildInlines(admin, parent, state, identity, overrides = {}) {
+    const parentId = parent[admin.identityField];
+    const blocks = [];
+    for (const inline of admin.inlines) {
+      const childAdmin = site.get(inline.slug);
+      const repository = childAdmin === null ? new BaseRepository(inline.model, state.dbSession) : childAdmin.repository(state.dbSession);
+      const children = await repository.list({
+        [inline.fkField]: parentId
+      });
+      const columns = inline.listDisplay ?? childAdmin?.listDisplayNames() ?? Object.keys(adminColumns(inline.model));
+      const label = inline.label ?? childAdmin?.verboseNamePlural() ?? humanizeField(inline.slug);
+      const visible = children.slice(0, INLINE_ROW_LIMIT);
+      const editable = inline.editable && childAdmin !== null && await allows(state.principal, childAdmin, AdminPermission.EDIT);
+      const addUrl = childAdmin !== null && await allows(state.principal, childAdmin, AdminPermission.CREATE) ? `${prefix}/m/${inline.slug}/new` : null;
+      if (!editable || childAdmin === null) {
+        blocks.push({
+          label,
+          total: children.length,
+          columns,
+          editable: false,
+          canDelete: false,
+          addUrl,
+          formAction: "",
+          rows: visible.map((child) => ({
+            key: String(child[childAdmin?.identityField ?? "id"]),
+            cells: columns.map((column6) => formatCellValue(child[column6])),
+            fields: [],
+            url: childAdmin === null ? null : `${prefix}/m/${inline.slug}/${String(child[childAdmin.identityField])}`
+          })),
+          newRow: null,
+          truncated: children.length > visible.length
+        });
+        continue;
+      }
+      const names = inlineFieldNames(childAdmin, inline);
+      const submitted = overrides[inline.slug];
+      const rows = [];
+      if (submitted !== void 0) {
+        for (const entry of submitted) {
+          rows.push({
+            key: entry.key,
+            cells: [],
+            fields: inlineFields(
+              childAdmin,
+              names,
+              entry.key,
+              entry.values,
+              entry.errors
+            ),
+            url: null
+          });
+        }
+      } else {
+        for (const child of visible) {
+          const key = String(child[childAdmin.identityField]);
+          rows.push({
+            key,
+            cells: [],
+            fields: inlineFields(childAdmin, names, key, child, {}),
+            url: `${prefix}/m/${inline.slug}/${key}`
+          });
+        }
+      }
+      blocks.push({
+        label,
+        total: children.length,
+        columns: names.map(humanizeField),
+        editable: true,
+        canDelete: inline.canDelete && childAdmin.canDelete,
+        addUrl,
+        formAction: `${prefix}/m/${admin.slug()}/${identity}/inlines/${inline.slug}`,
+        rows,
+        newRow: {
+          key: "new1",
+          cells: [],
+          fields: inlineFields(childAdmin, names, "new1", {}, {}),
+          url: null
+        },
+        truncated: children.length > visible.length
+      });
+    }
+    return blocks;
+  }
   async function buildAuditView(admin, row, dbSession) {
     const fields = [];
     for (const name of admin.auditFieldNames()) {
@@ -13220,6 +14036,15 @@ function makeAdminRouter(site, options) {
     const row = await admin.repository(dbSession).first({ [admin.identityField]: identity });
     return row ?? null;
   }
+  async function readLogs(req, dir) {
+    const requested = queryString(req.query.source);
+    const source = LOG_SOURCES.includes(requested) ? requested : "all";
+    const search = queryString(req.query.q);
+    const raw = await readLogEntries(dir, source);
+    const entries = filterLogEntries(raw.map(toLogEntry), search);
+    entries.reverse();
+    return { entries, source, search };
+  }
   function renderImport(req, state, admin, error, created, rowErrors) {
     return renderImportPage(context(req, state.session, state.visible), {
       title: admin.verboseNamePlural(),
@@ -13479,6 +14304,45 @@ function makeAdminRouter(site, options) {
   }
   return router;
 }
+function groupInlineSubmission(body) {
+  const rows = {};
+  const deletions = /* @__PURE__ */ new Set();
+  for (const [key, raw] of Object.entries(body)) {
+    if (!key.startsWith("row.")) continue;
+    const parts = key.split(".");
+    if (parts.length !== 3) continue;
+    const [, rowKey, field] = parts;
+    const value = typeof raw === "string" ? raw : "";
+    if (field === "__delete") {
+      if (!["", "false", "off", "0", "no"].includes(value.trim().toLowerCase())) {
+        deletions.add(rowKey);
+      }
+      continue;
+    }
+    const row = rows[rowKey] ?? {};
+    row[field] = value;
+    rows[rowKey] = row;
+  }
+  return { rows, deletions };
+}
+function inlineFieldNames(childAdmin, inline) {
+  return childAdmin.editableFieldNames().filter(
+    (name) => name !== inline.fkField && !childAdmin.uploadFields.includes(name) && !childAdmin.autocompleteFields.includes(name)
+  );
+}
+function inlineFields(childAdmin, names, key, values, errors) {
+  return buildFormFields(childAdmin, { values, errors }).filter((field) => names.includes(field.name)).map((field) => ({ ...field, name: `row.${key}.${field.name}` }));
+}
+async function audit(hook, entry) {
+  if (hook === void 0) return;
+  try {
+    await hook(entry);
+  } catch (error) {
+    logger2.error("Admin SQL audit hook failed", {
+      error: error instanceof Error ? error.message : String(error)
+    });
+  }
+}
 function flagAllows(admin, action) {
   if (action === AdminPermission.CREATE) return admin.canCreate;
   if (action === AdminPermission.EDIT) return admin.canEdit;
@@ -15565,59 +16429,6 @@ function makeToolSpecRouter(spec, options = {}) {
   });
   return router;
 }
-function filesFor(dir, source) {
-  if (source === "500") return [join(dir, HTTP_500_LOG_FILE)];
-  if (source === "all") return Object.values(LEVEL_LOG_FILES).map((f) => join(dir, f));
-  return [join(dir, LEVEL_LOG_FILES[source])];
-}
-async function readEntries(files) {
-  const entries = [];
-  for (const file of files) {
-    let content;
-    try {
-      content = await readFile(file, "utf8");
-    } catch {
-      continue;
-    }
-    for (const line of content.split("\n")) {
-      if (!line.trim()) continue;
-      try {
-        entries.push(JSON.parse(line));
-      } catch {
-      }
-    }
-  }
-  return entries;
-}
-function makeLogsRouter(options) {
-  const router = Router();
-  const path = options.path ?? "/logs";
-  const guards = options.guards ?? [];
-  const handler = (req, res, next) => {
-    const source = req.query.source ?? "all";
-    const validSources = ["all", "debug", "info", "warning", "error", "500"];
-    if (!validSources.includes(source)) {
-      res.status(422).json({ detail: "Invalid log source", code: "VALIDATION_ERROR", details: {} });
-      return;
-    }
-    const page2 = Math.max(1, Number(req.query.page) || 1);
-    const pageSize = Math.min(500, Math.max(1, Number(req.query.pageSize) || 50));
-    readEntries(filesFor(options.dir, source)).then((entries) => {
-      entries.reverse();
-      const total = entries.length;
-      const start = (page2 - 1) * pageSize;
-      res.json({
-        items: entries.slice(start, start + pageSize),
-        total,
-        page: page2,
-        pageSize,
-        pages: Math.ceil(total / pageSize)
-      });
-    }).catch(next);
-  };
-  router.get(path, ...guards, handler);
-  return router;
-}
 function createTestDatabase(models) {
   const driver = NodeSqliteDriver.open(":memory:");
   for (const model of models) {
@@ -15649,6 +16460,6 @@ async function withTestDatabase(models, fn) {
   }
 }
 
-export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminPermission, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, MultipartLimitError, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminLens, adminThemeCss, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isMultipart, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseCsv, parseFormBody, parseMultipart, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderImportPage, renderLayout, renderListPage, renderLoginPage, renderMfaPage, renderPasswordResetFormPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
+export { ADMIN_CSS, ActivationService, AdminJsonSite, AdminModel, AdminPermission, AdminSessionStore, AdminSite, AppException, AttemptThrottle, AuditAction, BaseAuditLogModel, BaseController, BaseModel, BaseOAuthClient, BaseOutboxModel, BaseService, BaseUserModel, BaseUserRefreshTokenModel, BaseUserTokenModel, CEP_PATTERN, CNPJ_PATTERN, CPF_PATTERN, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, CircuitOpenError, CompositeFeatureFlagBackend, ConflictException, DEFAULT_DOCS_FAVICON, DEFAULT_LOCALE, EmailProvider, EmailUtils, EnvFeatureFlagBackend, EventStream, ExpiredTokenException, FeatureFlags, ForbiddenException, GitHubOAuthClient, GoogleOAuthClient, GracefulShutdown, HTTPClient, HTTP_500_LOG_FILE, HTTP_500_MARKER, HttpMetrics, IDEMPOTENCY_HEADER, InvalidTokenException, JSONLogger, JWTUtils, LEVEL_LOG_FILES, LocalUploadStorage, MemoryBroker, MemoryCacheManager, MemoryFeatureFlagBackend, MemoryIdempotencyStore, MemoryRateLimitStore, MemorySessionStore, MemoryThrottleBackend, MessageCatalog, MessagingHub, MetricsUtils, MfaService, MultipartLimitError, NotFoundException, OAuthError, OIDCProvider, OutboxRelay, OutboxStatus, PHONE_BR_PATTERN, PasswordResetService, REDOC_CDN_URL, REQUEST_ID_HEADER, RabbitBroker, RedisCacheManager, RedisIdempotencyStore, RedisRateLimitStore, RedisSSEBroker, RedisSessionStore, Region, RetryPolicy, S3UploadStorage, SSEBroker, ServerSentEvent, SessionService, SqlCapability, TOTPHelper, TaskManager, TelegramProvider, TenantScopedRepository, TooManyRequestsException, TwilioSmsProvider, UF, UnauthorizedException, UserAuthService, UserModelAuthBackend, UserTokenPurpose, ValidationException, WebPushDispatcher, WebPushError, WebPushGoneError, WebSocketHub, WebhookSignatureVerifier, WhatsAppProvider, activationSchema, addLogSink, adminAction, adminColumns, adminInline, adminLens, adminThemeCss, analyzeSql, attachWebSocketHub, authResponseSchema, authSettingsShape, backupDatabase, bearerToken, bodySizeLimitMiddleware, broadcastText, buildContentDisposition, buildFormFields, buildPaginationLinkHeader, cached2 as cached, cepField, checkSqlPolicy, citiesByUf, cnpjField, coerceFlag, configureFileLogging, configureLogging, cpfField, cpfOrCnpjField, createApp, createOpenApiRegistry, createTestDatabase, createdByColumn, csrfMiddleware, csrfTokenMatches, cursorPaginationFilterSchema, cursorPaginationSchema, decodeCursor, defaultMessageCatalog, defineEnum, deletedAtColumn, diffSnapshots, emailSettingsShape, encodeCursor, envList, escapeHtml, filterForColumn, filterLogEntries, foreignKeyFields, foreignKeyLabel, foreignKeyTable, formatCellValue, formatFieldValue, generateCsrfToken, generateOAuthState, generateOpaqueToken, generateOpenApiDocument, getAuth, getClientIp, getConditions, getPaginationConditions, getRequestId, getState, groupInlineSubmission, hashOpaqueToken, humanizeField, idempotencyMiddleware, inboundMessageSchema, isColumnOptional, isMultipart, isSearchableColumn, isValidCep, isValidCity, isValidCnpj, isValidCpf, isValidCpfCnpj, isValidPhoneBr, isValidUf, jwtSettingsShape, keyByHeader, keyByIp, keyByJwtClaim, keyByJwtSubject, listStates, loadSqlParser, logEntrySchema, logSettingsShape, loginSchema, makeAdminJsonRouter, makeAdminRouter, makeAppExceptionHandler, makeAuthRouter, makeFlagGuard, makeHealthRouter, makeJwtAuthMiddleware, makeLogsRouter, makeMetricsRouter, makeSessionMiddleware, makeToolSpecRouter, makeTwilioWebhookRouter, makeUnhandledExceptionHandler, makeWhatsAppWebhookRouter, metricCard, mfaChallengeSchema, mfaCodeSchema, mfaEnrollResponseSchema, minioSettingsShape, modifyDict, mountOpenApiJson, mountRedoc, mountSwaggerUi, normalizeCep, normalizeCnpj, normalizeCpf, normalizeCpfCnpj, normalizePhoneBr, normalizeUf, notFoundHandler, onlyDigits, paginationFilterSchema, paginationSchema, parseAcceptLanguage, parseCookies, parseCsv, parseFormBody, parseMultipart, partitionTotal, passwordResetConfirmSchema, passwordResetRequestSchema, phoneBrField, prometheusMiddleware, rabbitmqSettingsShape, rateLimitMiddleware, readLogEntries, redisSettingsShape, refreshSchema, registerExceptionHandlers, renderAuthResultPage, renderDashboardPage, renderDetailPage, renderFormPage, renderImportPage, renderLayout, renderListPage, renderLogEntriesJson, renderLogEntriesMarkdown, renderLoginPage, renderLogsPage, renderMfaPage, renderPasswordResetFormPage, renderSqlPage, requestIdMiddleware, requestTracingMiddleware, requireRoles, resolveAdminTheme, resolveDownloadPath, resolveRedocBundle, runServer, runWithRequestContext, sendBytesDownload, sendFileDownload, sessionCookie, sessionSettingsShape, setRequestId, signupSchema, snapshot, sseResponse, statesByRegion, syncFilterSchema, syncPaginationSchema, tableNameFor, toLogEntry, toUtc, tokenFromUrl, tokenPairSchema, tokenSettingsShape, trendDirection, trendPercent, ufField, updatedByColumn, uploadSettingsShape, userPublicSchema, utcnow, validateTwilioSignature, verifyOpaqueToken, webPushKeysSchema, webPushPayloadSchema, webPushSettingsShape, webPushSubscriptionSchema, webSocketSettingsShape, widgetForColumn, withTestDatabase, wrapWithSlowQueryLog, wsEnvelopeSchema };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map