Dashboard Contracts

The package is headless. It ships contracts and DTOs that a separate dashboard application can consume.

Read model

FlowDashboardReadModel lists runs, approvals, webhook outbox rows, and KPIs.

Authorization

DashboardActionAuthorizer is deny-by-default through DenyAllAuthorizer.

DTOs

Immutable DTOs carry run detail, summaries, pagination, approval summaries, audit entries, and outbox rows.

Production authorization

Bind your own DashboardActionAuthorizer before exposing dashboard actions to operators. AllowAllAuthorizer is for explicit development use only.