workers-mini-admin 0.1.1

package/dist/handler.d.ts

@@ -0,0 +1,80 @@
+import { type Field } from './form.js';
+import { type FlashTone } from './html.js';
+export type AdminRenderResult = {
+    hint?: string;
+    flash?: string;
+    flashTone?: FlashTone;
+    submitLabel?: string;
+    /**
+    Appended after shared CSS.
+    */
+    extraCss?: string;
+    /**
+    Sets `.page-shell` max-width (e.g. `1200px`).
+    */
+    shellMaxWidth?: string;
+    /**
+    When false, do not wrap `body` / form in `.panel-card` (default true).
+    */
+    wrapBody?: boolean;
+    /**
+    Attributes merged onto `<body>`.
+    */
+    bodyAttrs?: Record<string, string>;
+} & ({
+    fields: Field[];
+    body?: undefined;
+} | {
+    body: string;
+    fields?: undefined;
+});
+export type AdminSaveResult = {
+    flash?: string;
+};
+export type AdminRouteContext<Env = unknown> = {
+    request: Request;
+    env: Env;
+    url: URL;
+    secret: string;
+    basePath: string;
+    /**
+    Relative path under the mount (e.g. `/preview`).
+    */
+    path: string;
+    requireAuth: () => Promise<Response | undefined>;
+};
+export type CreateAdminOptions<Env = unknown> = {
+    /**
+    Mount path. `""` or `"/"` = site root; default `"/admin"`.
+    */
+    basePath?: string;
+    title: string;
+    getSecret: (env: Env) => string | undefined;
+    cookieName?: string;
+    /**
+    Cookie Path attribute. Defaults to `/`.
+    */
+    cookiePath?: string;
+    render: (context: {
+        request: Request;
+        env: Env;
+        url: URL;
+    }) => AdminRenderResult | Promise<AdminRenderResult>;
+    save: (context: {
+        request: Request;
+        env: Env;
+        url: URL;
+        form: FormData;
+    }) => AdminSaveResult | Promise<AdminSaveResult>;
+    /**
+    Extra routes relative to `basePath`, e.g. `"POST /preview"`.
+    Run after secret is present; use `context.requireAuth()` for cookie/Bearer checks.
+    */
+    routes?: Record<string, (context: AdminRouteContext<Env>) => Response | Promise<Response>>;
+    disabledMessage?: string;
+};
+export type AdminHandler<Env = unknown> = {
+    fetch: (request: Request, env: Env) => Promise<Response | undefined>;
+};
+export declare function createAdmin<Env = unknown>(options: CreateAdminOptions<Env>): AdminHandler<Env>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAMA,OAAO,EAAuB,KAAK,KAAK,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,WAAW,CAAC;AAGnB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;MAEE;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;MAEE;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;MAEE;IACF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;MAEE;IACF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,GAAG,CACF;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,CAC7E,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,GAAG,GAAG,OAAO,IAAI;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;;MAEE;IACF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;CAClD,CAAC;AAEF,MAAM,MAAM,kBAAkB,CAAC,GAAG,GAAG,OAAO,IAAI;IAC9C;;MAEE;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;MAEE;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,OAAO,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,GAAG,CAAC;KACV,KAAK,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,OAAO,EAAE;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,GAAG,CAAC;QACT,IAAI,EAAE,QAAQ,CAAC;KAChB,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjD;;;MAGE;IACF,MAAM,CAAC,EAAE,MAAM,CACb,MAAM,EACN,CAAC,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAClE,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,CAAC,GAAG,GAAG,OAAO,IAAI;IACxC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;CACtE,CAAC;AA4BF,wBAAgB,WAAW,CAAC,GAAG,GAAG,OAAO,EACvC,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,GAC/B,YAAY,CAAC,GAAG,CAAC,CAwJnB"}

package/dist/handler.js

@@ -0,0 +1,177 @@
+import { DEFAULT_COOKIE_NAME, isAuthenticated, loginResponse, logoutResponse, } from './auth.js';
+import { adminForm, formText } from './form.js';
+import { adminDisabledResponse, adminPage, html, loginPageHtml, } from './html.js';
+import { joinBasePath, normalizeBasePath, relativeToBase } from './path.js';
+function isSecureCookie(request) {
+    return new URL(request.url).protocol === 'https:';
+}
+function isRootMount(basePath) {
+    return normalizeBasePath(basePath) === '';
+}
+function knownRelativePaths(routes) {
+    const known = new Set(['/', '/login', '/logout']);
+    if (!routes) {
+        return known;
+    }
+    for (const key of Object.keys(routes)) {
+        const space = key.indexOf(' ');
+        if (space === -1) {
+            continue;
+        }
+        const relativePath = key.slice(space + 1);
+        known.add(relativePath.startsWith('/') ? relativePath : `/${relativePath}`);
+    }
+    return known;
+}
+export function createAdmin(options) {
+    const basePath = normalizeBasePath(options.basePath ?? '/admin');
+    const cookieName = options.cookieName ?? DEFAULT_COOKIE_NAME;
+    // Prefer Path=/ so login/logout always agree. Mount-scoped paths (e.g.
+    // `/admin`) left stale Path=/ cookies that sign-out could not clear.
+    const cookiePath = options.cookiePath ?? '/';
+    const homePath = joinBasePath(basePath);
+    const known = knownRelativePaths(options.routes);
+    const loginHtml = (error) => loginPageHtml({
+        title: options.title,
+        error,
+        basePath,
+    });
+    async function requireAuth(request, secret) {
+        const isSignedIn = await isAuthenticated(request, secret, cookieName);
+        return isSignedIn ? undefined : html(loginHtml(), 401);
+    }
+    async function loginGet(request, url, secret) {
+        const isSignedIn = await isAuthenticated(request, secret, cookieName);
+        return isSignedIn
+            ? Response.redirect(new URL(homePath, url).href, 302)
+            : html(loginHtml());
+    }
+    async function loginPost(request, secret) {
+        const form = await request.formData();
+        const password = formText(form, 'password');
+        return loginResponse({
+            secret,
+            password,
+            secureCookie: isSecureCookie(request),
+            basePath,
+            cookieName,
+            cookiePath,
+            loginHtml,
+        });
+    }
+    async function home(request, env, url, secret) {
+        const unauth = await requireAuth(request, secret);
+        if (unauth) {
+            return unauth;
+        }
+        if (request.method === 'GET') {
+            const page = await options.render({ request, env, url });
+            return html(renderAdminPage(options.title, basePath, page));
+        }
+        return request.method === 'POST'
+            ? saveHome(request, env, url)
+            : new Response('Method not allowed', { status: 405 });
+    }
+    async function saveHome(request, env, url) {
+        try {
+            const form = await request.formData();
+            const saved = await options.save({
+                request,
+                env,
+                url,
+                form,
+            });
+            const page = await options.render({ request, env, url });
+            return html(renderAdminPage(options.title, basePath, {
+                ...page,
+                flash: saved.flash ?? page.flash,
+            }));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            const page = await options.render({ request, env, url });
+            return html(renderAdminPage(options.title, basePath, {
+                ...page,
+                flash: `Error: ${message}`,
+            }), 400);
+        }
+    }
+    return {
+        async fetch(request, env) {
+            const url = new URL(request.url);
+            const relativePath = relativeToBase(url.pathname, basePath);
+            if (relativePath === undefined) {
+                return undefined;
+            }
+            if (isRootMount(basePath) && !known.has(relativePath)) {
+                return undefined;
+            }
+            const secret = options.getSecret(env);
+            if (!secret) {
+                return adminDisabledResponse(options.disabledMessage);
+            }
+            const routeKey = `${request.method} ${relativePath}`;
+            const custom = options.routes?.[routeKey];
+            if (custom) {
+                return custom({
+                    request,
+                    env,
+                    url,
+                    secret,
+                    basePath,
+                    path: relativePath,
+                    requireAuth: () => requireAuth(request, secret),
+                });
+            }
+            if (relativePath === '/login' && request.method === 'GET') {
+                return loginGet(request, url, secret);
+            }
+            if (relativePath === '/login' && request.method === 'POST') {
+                return loginPost(request, secret);
+            }
+            if (relativePath === '/logout' && request.method === 'POST') {
+                return logoutResponse({
+                    secureCookie: isSecureCookie(request),
+                    basePath,
+                    cookieName,
+                    cookiePath,
+                });
+            }
+            if (relativePath === '/') {
+                return home(request, env, url, secret);
+            }
+            return isRootMount(basePath)
+                ? undefined
+                : new Response('Not found', { status: 404 });
+        },
+    };
+}
+function renderAdminPage(title, basePath, page) {
+    let body;
+    if ('body' in page && page.body !== undefined) {
+        body = page.body;
+    }
+    else if ('fields' in page) {
+        body = adminForm({
+            action: joinBasePath(basePath),
+            fields: page.fields,
+            submitLabel: page.submitLabel,
+        });
+    }
+    else {
+        body = '';
+    }
+    return adminPage({
+        title,
+        body,
+        flash: page.flash,
+        flashTone: page.flashTone,
+        hint: page.hint,
+        basePath,
+        extraCss: page.extraCss,
+        shellMaxWidth: page.shellMaxWidth,
+        wrapBody: page.wrapBody,
+        bodyAttrs: page.bodyAttrs,
+    });
+}
+//# sourceMappingURL=handler.js.map

package/dist/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAc,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,IAAI,EACJ,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAkF5E,SAAS,cAAc,CAAC,OAAgB;IACtC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA2C;IAE3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAgC;IAEhC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,GAAG,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAEjD,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,aAAa,CAAC;QACZ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,QAAQ;KACT,CAAC,CAAC;IAEL,KAAK,UAAU,WAAW,CACxB,OAAgB,EAChB,MAAc;QAEd,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACtE,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,GAAQ,EAAE,MAAc;QAChE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACtE,OAAO,UAAU;YACf,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,MAAc;QACvD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,OAAO,aAAa,CAAC;YACnB,MAAM;YACN,QAAQ;YACR,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC;YACrC,QAAQ;YACR,UAAU;YACV,UAAU;YACV,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,IAAI,CACjB,OAAgB,EAChB,GAAQ,EACR,GAAQ,EACR,MAAc;QAEd,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,OAAO,CAAC,MAAM,KAAK,MAAM;YAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC;YAC7B,CAAC,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,GAAQ,EAAE,GAAQ;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC/B,OAAO;gBACP,GAAG;gBACH,GAAG;gBACH,IAAI;aACL,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CACT,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE;gBACvC,GAAG,IAAI;gBACP,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,OAAO,IAAI,CACT,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE;gBACvC,GAAG,IAAI;gBACP,KAAK,EAAE,UAAU,OAAO,EAAE;aAC3B,CAAC,EACF,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG;YACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC5D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACtD,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC;oBACZ,OAAO;oBACP,GAAG;oBACH,GAAG;oBACH,MAAM;oBACN,QAAQ;oBACR,IAAI,EAAE,YAAY;oBAClB,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1D,OAAO,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3D,OAAO,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YAED,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5D,OAAO,cAAc,CAAC;oBACpB,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC;oBACrC,QAAQ;oBACR,UAAU;oBACV,UAAU;iBACX,CAAC,CAAC;YACL,CAAC;YAED,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAED,OAAO,WAAW,CAAC,QAAQ,CAAC;gBAC1B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAAa,EACb,QAAgB,EAChB,IAAuB;IAEvB,IAAI,IAAY,CAAC;IACjB,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,GAAG,SAAS,CAAC;YACf,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,SAAS,CAAC;QACf,KAAK;QACL,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/html.d.ts

@@ -0,0 +1,47 @@
+export { escapeHtml } from './escape.js';
+export type FlashTone = 'ok' | 'warn' | 'error';
+export declare function html(body: string, status?: number): Response;
+export declare function redirect(location: string, cookie?: string | readonly string[]): Response;
+export declare function adminDisabledResponse(message?: string): Response;
+export declare function loginPageHtml(options: {
+    title: string;
+    error?: string;
+    action?: string;
+    basePath?: string;
+}): string;
+/**
+Allow only simple CSS lengths for shellMaxWidth (no injection).
+*/
+export declare function isSafeCssLength(value: string): boolean;
+export declare function resolveFlashClass(flash: string, tone?: FlashTone): 'ok' | 'warn' | 'flash-err';
+export type AdminPageOptions = {
+    title: string;
+    body: string;
+    flash?: string;
+    flashTone?: FlashTone;
+    /**
+    Hint under the title. Not escaped — may include trusted HTML (e.g. `<code>`).
+    */
+    hint?: string;
+    logoutAction?: string;
+    basePath?: string;
+    /**
+    Appended after shared CSS (app-specific rules).
+    */
+    extraCss?: string;
+    /**
+    Sets `.page-shell { max-width }`. Must be a simple length (e.g. `1200px`).
+    */
+    shellMaxWidth?: string;
+    /**
+    When false, `body` is not wrapped in `.panel-card` (default true).
+    Use for multi-panel / bring-your-own-card layouts.
+    */
+    wrapBody?: boolean;
+    /**
+    Attributes merged onto `<body>` (values escaped).
+    */
+    bodyAttrs?: Record<string, string>;
+};
+export declare function adminPage(options: AdminPageOptions): string;
+//# sourceMappingURL=html.d.ts.map

package/dist/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../src/html.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAM,GAAG,QAAQ,CAKzD;AAED,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAClC,QAAQ,CAUV;AAKD,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAKhE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CA+BT;AAED;;EAEE;AACF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,SAAS,GACf,IAAI,GAAG,MAAM,GAAG,WAAW,CAO7B;AAaD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;MAEE;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;MAEE;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;MAEE;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;MAGE;IACF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;MAEE;IACF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC,CAAC;AAEF,wBAAgB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAgD3D"}

package/dist/html.js

@@ -0,0 +1,116 @@
+import { SHARED_CSS } from './css.js';
+import { escapeHtml } from './escape.js';
+import { joinBasePath, resolveBasePath } from './path.js';
+export { escapeHtml } from './escape.js';
+export function html(body, status = 200) {
+    return new Response(body, {
+        status,
+        headers: { 'content-type': 'text/html; charset=utf-8' },
+    });
+}
+export function redirect(location, cookie) {
+    const headers = new Headers({ Location: location });
+    if (typeof cookie === 'string') {
+        headers.append('Set-Cookie', cookie);
+    }
+    else if (cookie) {
+        for (const value of cookie) {
+            headers.append('Set-Cookie', value);
+        }
+    }
+    return new Response(undefined, { status: 302, headers });
+}
+const DEFAULT_ADMIN_DISABLED_MESSAGE = 'Admin UI is disabled. Set the ADMIN_SECRET secret (wrangler secret put ADMIN_SECRET).';
+export function adminDisabledResponse(message) {
+    return new Response(message ?? DEFAULT_ADMIN_DISABLED_MESSAGE, {
+        status: 503,
+        headers: { 'content-type': 'text/plain; charset=utf-8' },
+    });
+}
+export function loginPageHtml(options) {
+    const { title, error, basePath, action = joinBasePath(resolveBasePath(basePath), 'login'), } = options;
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${escapeHtml(title)} — login</title>
+  <style>${SHARED_CSS}</style>
+</head>
+<body class="admin-body">
+  <div class="login-shell">
+  <div class="panel-card">
+  <h1>${escapeHtml(title)}</h1>
+  ${error ? `<p class="err">${escapeHtml(error)}</p>` : ''}
+  <form method="post" action="${escapeHtml(action)}">
+    <label for="password">Password</label>
+    <input id="password" name="password" type="password" autocomplete="current-password" required>
+    <div class="actions">
+      <button type="submit" class="btn-primary">Sign in</button>
+    </div>
+  </form>
+  </div>
+  </div>
+</body>
+</html>`;
+}
+/**
+Allow only simple CSS lengths for shellMaxWidth (no injection).
+*/
+export function isSafeCssLength(value) {
+    return /^-?\d+(\.\d+)?(px|rem|em|%|ch|vw|vh)$/.test(value.trim());
+}
+export function resolveFlashClass(flash, tone) {
+    if (tone === 'error' || (!tone && flash.startsWith('Error:'))) {
+        return 'flash-err';
+    }
+    return tone === 'warn' || (!tone && /\bfailed\b/i.test(flash))
+        ? 'warn'
+        : 'ok';
+}
+function bodyAttributesToString(attributes) {
+    if (!attributes) {
+        return '';
+    }
+    let out = '';
+    for (const [key, value] of Object.entries(attributes)) {
+        out += ` ${escapeHtml(key)}="${escapeHtml(value)}"`;
+    }
+    return out;
+}
+export function adminPage(options) {
+    const { title, body, flash, flashTone, hint, basePath, extraCss, shellMaxWidth, wrapBody = true, bodyAttrs, logoutAction = joinBasePath(resolveBasePath(basePath), 'logout'), } = options;
+    const flashClass = flash ? resolveFlashClass(flash, flashTone) : 'ok';
+    const shellRule = shellMaxWidth && isSafeCssLength(shellMaxWidth)
+        ? '\n.page-shell { max-width: ' + shellMaxWidth.trim() + '; }'
+        : '';
+    const styles = SHARED_CSS + shellRule + (extraCss ? '\n' + extraCss : '');
+    const main = wrapBody
+        ? `<div class="panel-card">
+  ${body}
+  </div>`
+        : body;
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${escapeHtml(title)}</title>
+  <style>${styles}</style>
+</head>
+<body class="admin-body"${bodyAttributesToString(bodyAttrs)}>
+  <div class="page-shell">
+  <header class="page-header">
+    <h1>${escapeHtml(title)}</h1>
+    ${hint ? `<p class="hint">${hint}</p>` : ''}
+  </header>
+  ${flash ? `<p class="${flashClass}">${escapeHtml(flash)}</p>` : ''}
+  ${main}
+  <form method="post" action="${escapeHtml(logoutAction)}" style="margin-top:0.75rem">
+    <button type="submit" class="btn-ghost">Sign out</button>
+  </form>
+  </div>
+</body>
+</html>`;
+}
+//# sourceMappingURL=html.js.map

package/dist/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../src/html.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,MAAM,GAAG,GAAG;IAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,QAAgB,EAChB,MAAmC;IAEnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,8BAA8B,GAClC,uFAAuF,CAAC;AAE1F,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,8BAA8B,EAAE;QAC7D,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;KACzD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAK7B;IACC,MAAM,EACJ,KAAK,EACL,KAAK,EACL,QAAQ,EACR,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,GAC1D,GAAG,OAAO,CAAC;IACZ,OAAO;;;;;WAKE,UAAU,CAAC,KAAK,CAAC;WACjB,UAAU;;;;;QAKb,UAAU,CAAC,KAAK,CAAC;IACrB,KAAK,CAAC,CAAC,CAAC,kBAAkB,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gCAC1B,UAAU,CAAC,MAAM,CAAC;;;;;;;;;;QAU1C,CAAC;AACT,CAAC;AAED;;EAEE;AACF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAgB;IAEhB,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAmC;IACjE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,GAAG,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAgCD,MAAM,UAAU,SAAS,CAAC,OAAyB;IACjD,MAAM,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,EACL,SAAS,EACT,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,QAAQ,GAAG,IAAI,EACf,SAAS,EACT,YAAY,GAAG,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,GACjE,GAAG,OAAO,CAAC;IACZ,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,SAAS,GACb,aAAa,IAAI,eAAe,CAAC,aAAa,CAAC;QAC7C,CAAC,CAAC,6BAA6B,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK;QAC9D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,QAAQ;QACnB,CAAC,CAAC;IACF,IAAI;SACC;QACL,CAAC,CAAC,IAAI,CAAC;IAET,OAAO;;;;;WAKE,UAAU,CAAC,KAAK,CAAC;WACjB,MAAM;;0BAES,sBAAsB,CAAC,SAAS,CAAC;;;UAGjD,UAAU,CAAC,KAAK,CAAC;MACrB,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE;;IAE3C,KAAK,CAAC,CAAC,CAAC,aAAa,UAAU,KAAK,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;IAChE,IAAI;gCACwB,UAAU,CAAC,YAAY,CAAC;;;;;QAKhD,CAAC;AACT,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { adminAuthCookie, DEFAULT_COOKIE_NAME, hexSha256, isAuthenticated, loginResponse, logoutResponse, timingSafeEqual, } from './auth.js';
+export { SHARED_CSS } from './css.js';
+export { adminForm, formText, parseAdminForm, type CheckboxField, type Field, type FieldOption, type FieldsetField, type HtmlField, type NumberField, type RadioField, type SelectField, type TextareaField, type TextField, } from './form.js';
+export { createAdmin, type AdminHandler, type AdminRenderResult, type AdminRouteContext, type AdminSaveResult, type CreateAdminOptions, } from './handler.js';
+export { adminDisabledResponse, adminPage, escapeHtml, html, isSafeCssLength, loginPageHtml, redirect, resolveFlashClass, type AdminPageOptions, type FlashTone, } from './html.js';
+export { cookiePathForBase, joinBasePath, normalizeBasePath, normalizePathname, relativeToBase, resolveBasePath, } from './path.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EACL,SAAS,EACT,QAAQ,EACR,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,WAAW,EACX,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,IAAI,EACJ,eAAe,EACf,aAAa,EACb,QAAQ,EACR,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,SAAS,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { adminAuthCookie, DEFAULT_COOKIE_NAME, hexSha256, isAuthenticated, loginResponse, logoutResponse, timingSafeEqual, } from './auth.js';
+export { SHARED_CSS } from './css.js';
+export { adminForm, formText, parseAdminForm, } from './form.js';
+export { createAdmin, } from './handler.js';
+export { adminDisabledResponse, adminPage, escapeHtml, html, isSafeCssLength, loginPageHtml, redirect, resolveFlashClass, } from './html.js';
+export { cookiePathForBase, joinBasePath, normalizeBasePath, normalizePathname, relativeToBase, resolveBasePath, } from './path.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,aAAa,EACb,cAAc,EACd,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EACL,SAAS,EACT,QAAQ,EACR,cAAc,GAWf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,WAAW,GAMZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,IAAI,EACJ,eAAe,EACf,aAAa,EACb,QAAQ,EACR,iBAAiB,GAGlB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,cAAc,EACd,eAAe,GAChB,MAAM,WAAW,CAAC"}

package/dist/path.d.ts

@@ -0,0 +1,28 @@
+/**
+Normalize admin mount: `""` and `"/"` → root; strip trailing slashes otherwise.
+*/
+export declare function normalizeBasePath(basePath: string): string;
+/**
+Resolve mount for low-level helpers: omitted → legacy `/admin`;
+`""` / `"/"` → site root.
+*/
+export declare function resolveBasePath(basePath?: string): string;
+/**
+Join mount + segments into an absolute path (always starts with `/` except empty join → `/`).
+*/
+export declare function joinBasePath(basePath: string, ...segments: string[]): string;
+/**
+Cookie `Path` attribute for a mount (`/` when root).
+*/
+export declare function cookiePathForBase(basePath: string): string;
+/**
+Strip trailing slashes; empty → `/`.
+*/
+export declare function normalizePathname(pathname: string): string;
+/**
+Path relative to the admin mount, or `undefined` if outside the mount.
+Root mount (`""`): relative is the full pathname (always "under" for known-route checks).
+Non-root: `undefined` when pathname is not `{base}` or `{base}/…`.
+*/
+export declare function relativeToBase(pathname: string, basePath: string): string | undefined;
+//# sourceMappingURL=path.d.ts.map

package/dist/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAqBA;;EAEE;AACF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED;;;EAGE;AACF,wBAAgB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;EAEE;AACF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAa5E;AAED;;EAEE;AACF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;EAEE;AACF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;EAIE;AACF,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACf,MAAM,GAAG,SAAS,CAYpB"}

package/dist/path.js

@@ -0,0 +1,82 @@
+function stripTrailingSlashes(value) {
+    let end = value.length;
+    while (end > 0 && value.startsWith('/', end - 1)) {
+        end -= 1;
+    }
+    return value.slice(0, end);
+}
+function stripEdgeSlashes(value) {
+    let start = 0;
+    const endLimit = value.length;
+    while (start < endLimit && value.startsWith('/', start)) {
+        start += 1;
+    }
+    let end = endLimit;
+    while (end > start && value.startsWith('/', end - 1)) {
+        end -= 1;
+    }
+    return value.slice(start, end);
+}
+/**
+Normalize admin mount: `""` and `"/"` → root; strip trailing slashes otherwise.
+*/
+export function normalizeBasePath(basePath) {
+    return basePath === '' || basePath === '/'
+        ? ''
+        : stripTrailingSlashes(basePath);
+}
+/**
+Resolve mount for low-level helpers: omitted → legacy `/admin`;
+`""` / `"/"` → site root.
+*/
+export function resolveBasePath(basePath) {
+    return basePath === undefined ? '/admin' : normalizeBasePath(basePath);
+}
+/**
+Join mount + segments into an absolute path (always starts with `/` except empty join → `/`).
+*/
+export function joinBasePath(basePath, ...segments) {
+    const base = normalizeBasePath(basePath);
+    const rest = segments
+        .map((segment) => stripEdgeSlashes(segment))
+        .filter(Boolean)
+        .join('/');
+    if (!base && !rest) {
+        return '/';
+    }
+    if (!base) {
+        return `/${rest}`;
+    }
+    return rest ? `${base}/${rest}` : base;
+}
+/**
+Cookie `Path` attribute for a mount (`/` when root).
+*/
+export function cookiePathForBase(basePath) {
+    return normalizeBasePath(basePath) || '/';
+}
+/**
+Strip trailing slashes; empty → `/`.
+*/
+export function normalizePathname(pathname) {
+    return stripTrailingSlashes(pathname) || '/';
+}
+/**
+Path relative to the admin mount, or `undefined` if outside the mount.
+Root mount (`""`): relative is the full pathname (always "under" for known-route checks).
+Non-root: `undefined` when pathname is not `{base}` or `{base}/…`.
+*/
+export function relativeToBase(pathname, basePath) {
+    const path = normalizePathname(pathname);
+    const base = normalizeBasePath(basePath);
+    if (!base) {
+        return path;
+    }
+    if (path === base) {
+        return '/';
+    }
+    return path.startsWith(`${base}/`)
+        ? path.slice(base.length) || '/'
+        : undefined;
+}
+//# sourceMappingURL=path.js.map

package/dist/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAAA,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;IAC9B,OAAO,KAAK,GAAG,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QACxD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED;;EAEE;AACF,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,GAAG;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED;;;EAGE;AACF,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED;;EAEE;AACF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,GAAG,QAAkB;IAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;SAC3C,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,IAAI,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;EAEE;AACF,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;AAC5C,CAAC;AAED;;EAEE;AACF,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;AAC/C,CAAC;AAED;;;;EAIE;AACF,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,QAAgB;IAEhB,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG;QAChC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}