@aiquants/authz-react-router 0.4.0 → 0.5.0

package/README.md

@@ -114,7 +114,9 @@ Multiple roles **union** (wider wins): rows OR'd (any `NULL` ⇒ all rows); colu
 
 ## API
 
-- `createAuthz({ appKey, resolveUserId, getEffectivePermissions, onDeny? })` → `{ requirePermission, getMyPermissions, requireAndGetPermission }`.
+- `createAuthz({ appKey, resolveUserId, resolveGroupIds?, getEffectivePermissions, onDeny? })` → `{ requirePermission, getMyPermissions, requireAndGetPermission }`.
+- `resolveGroupIds(request)` → the acting user's group ids. Forwarded automatically to `getEffectivePermissions` by both `requirePermission` and `getMyPermissions`, so group-granted roles count toward effective permissions. Returning `null`/`undefined` (or omitting the port) sends no `groupIds` at all.
+  ⚠️ Without this port, roles assigned to groups in the admin UI have **no runtime effect** — the store writes succeed and the UI looks correct, so the failure is silent. Cover the wiring with a test.
 - `requirePermission(request, {resourceKey, action}, options?)` → `{ userId, scope }` on allow (so loaders apply row WHERE / column mask — not just 403). Denies throw `AuthzDeniedError` (403), or `throw redirect(options.failureRedirect)` when set.
 - `requireAndGetPermission(request, {resourceKey, action}, options?)` → `{ userId, scope, permission }`. Atomically performs guard and fetches matching UI `PermissionView` to prevent page-resource mismatches.
 - `defineResources({ ... })` → Type-safe centralized resource registry helper for resource keys and display names.
@@ -125,6 +127,15 @@ Multiple roles **union** (wider wins): rows OR'd (any `NULL` ⇒ all rows); colu
 - `<MyPermissionStatus permission={view} resourceName="Documents" expectedResourceKey="documents" prefixLabel="Your Permissions" />` → Reusable status component combining prefix label and permission indicator badges for any application page.
 - `<MyPermissionGroupStatus items={[{ resourceName: "Primary Resource", permission: primaryView }, { resourceName: "Sub Resource", permission: subView, level: 1 }]} variant="pills" | "popover" size="xs" labels={{ fullWrite: "Writable", readOnly: "Read-only" }} />` → Multi-resource permission widget for pages with multiple distinct resource scopes. Supports inline status tags (`variant="pills"`), single-button popover cards (`variant="popover"`), hierarchical tree indentation via `level` / `children`, and fully customizable status label mappings (`labels`).
 
+## Admin UI tabs
+
+The splat-mounted admin app (`createAuthzAdminApp`) serves `roles`, `resources`, `role_permissions`, `user_roles`, plus:
+
+- **`group_roles`** — assign/revoke roles for a group. Group names are read from the group table; they are never synthesized from ids.
+- **`graph`** — a read-only topology map of *resource → role → group → user*. Nodes with no connections are hidden, and selecting a node highlights only the paths that actually reach it. Node dimming and edge highlighting are driven by the **same** predicate, so an edge never glows while both of its endpoints are dimmed; edges carry `data-testid` and `data-active` so this stays testable.
+
+Reads require `read` on the admin resource; writes require the verb matching their effect (`create` / `update` / `delete`).
+
 ## Demo App
 
 This package contains an interactive React Router 7 SPA demo in the `demo/` subdirectory. The demo app runs completely in the browser, using `localStorage` to mock database storage.

package/dist/index.d.mts

@@ -1,19 +1,22 @@
+import * as react_router from 'react-router';
 import * as react from 'react';
 import { ReactNode, CSSProperties } from 'react';
 import * as _aiquants_authz_core from '@aiquants/authz-core';
-import { EffectivePermission, DenyInfo, AuthzAction, GuardResult, AuthzGrant, AuthzResource, AuthzRole, AuthzAssignment, AuthzUser, AuthzAdminStore } from '@aiquants/authz-core';
-import * as react_router from 'react-router';
+import { EffectivePermission, DenyInfo, AuthzAction, GuardResult, AuthzGrant, AuthzUser, AuthzRole, AuthzResource, AuthzAssignment, AuthzGroupRoleAssignment, AuthzGroupSummary, AuthzAdminStore } from '@aiquants/authz-core';
 
 type Awaitable<T> = T | Promise<T>;
 type AuthzUserId = string | number;
 type AuthzConfig = {
     /** Stable app identifier (e.g. "quants"). Bound into every permission query. */
     appKey: string;
-    /** Resolve the acting user id from the request (cookie/session/openid → TDUsers.id). */
+    /** Resolve the acting user id from the request (cookie/session/openid → the consumer's user id). */
     resolveUserId: (request: Request) => Awaitable<AuthzUserId | null | undefined>;
+    /** Optionally resolve acting user's group IDs from the request or session. */
+    resolveGroupIds?: (request: Request) => Awaitable<(string | number)[] | null | undefined>;
     /** Load effective permissions for (user, app, resource) — typically via @aiquants/authz-drizzle. */
     getEffectivePermissions: (args: {
         userId: AuthzUserId | null;
+        groupIds?: (string | number)[];
         appKey: string;
         resourceKey: string;
     }) => Awaitable<EffectivePermission | null | undefined>;
@@ -70,6 +73,8 @@ type AuthzAdminLabels = {
         resources: string;
         role_permissions: string;
         user_roles: string;
+        group_roles: string;
+        graph: string;
     };
     common: {
         add: string;
@@ -134,6 +139,15 @@ type AuthzAdminLabels = {
         newHeading: string;
         selectPlaceholder: string;
     };
+    groupRoles: {
+        heading: string;
+        note: string;
+        group: string;
+        role: string;
+        empty: string;
+        newHeading: string;
+        selectPlaceholder: string;
+    };
     error: {
         forbiddenTitle: string;
         forbiddenBody: string;
@@ -157,6 +171,7 @@ type PartialAuthzAdminLabels = {
     resources?: Partial<AuthzAdminLabels["resources"]>;
     grants?: Partial<AuthzAdminLabels["grants"]>;
     userRoles?: Partial<AuthzAdminLabels["userRoles"]>;
+    groupRoles?: Partial<AuthzAdminLabels["groupRoles"]>;
     error?: Partial<AuthzAdminLabels["error"]>;
     warn?: Partial<AuthzAdminLabels["warn"]>;
 };
@@ -171,8 +186,21 @@ type AuthzLayoutData = WithLabels & {
     adminResourceKey: string;
     basePath?: string;
 };
+type AuthzLayoutShellProps = {
+    children: React.ReactNode;
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
+type AuthzLayoutProps = {
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
 /** ネストルート用レイアウト(子は Outlet)。`routes.ts` でネスト構成にする場合に使う。 */
-declare function AuthzLayout(): react.JSX.Element;
+declare function AuthzLayout({ renderHeader }?: AuthzLayoutProps): react.JSX.Element;
 /**
  * 認可管理 UI のエラー境界。ErrorBoundary は loader データを読めないため、ラベルは
  * `makeAuthzErrorBoundary(labels)` で注入する(アプリは自分のロケールで生成する)。
@@ -214,12 +242,35 @@ type AuthzUserRolesData = WithLabels & {
     selfAdminRoleIds?: number[];
 };
 declare function AuthzUserRolesView(): react.JSX.Element;
+type AuthzGroupRolesData = WithLabels & {
+    groupRoles: AuthzGroupRoleAssignment[];
+    roles: AuthzRole[];
+    groups: AuthzGroupSummary[];
+};
+declare function AuthzGroupRolesView(): react.JSX.Element;
+type AuthzGraphData = WithLabels & {
+    users: AuthzUser[];
+    roles: AuthzRole[];
+    resources: AuthzResource[];
+    grants: AuthzGrant[];
+    assignments: AuthzAssignment[];
+    groupRoles?: AuthzGroupRoleAssignment[];
+    groups?: AuthzGroupSummary[];
+};
+type AuthzNodeType = "user" | "group" | "role" | "resource";
+declare function AuthzGraphView(): react.JSX.Element;
+type AuthzAdminAppViewProps = {
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
 /**
  * スプラット(`authz/*`)1 ルートで認可管理 UI 全体を描画するコンポーネント(store 非依存)。
  * loader が返す `segment` に応じて該当タブのビューを描画する。レイアウト殻と各ビューは同一の
  * loader データ(セグメントデータ + myPermissions + labels をトップレベルに統合)を読む。
  */
-declare function AuthzAdminAppView(): react.JSX.Element;
+declare function AuthzAdminAppView({ renderHeader }?: AuthzAdminAppViewProps): react.JSX.Element;
 
 type Req = {
     request: Request;
@@ -302,6 +353,19 @@ declare function createAuthzAdminServer(opts: CreateAuthzAdminServerOptions): {
             ok: boolean;
         }>;
     };
+    groupRoles: {
+        data: () => Promise<AuthzGroupRolesData>;
+        loader({ request }: Req): Promise<AuthzGroupRolesData>;
+        action({ request }: Req): Promise<react_router.UNSAFE_DataWithResponseInit<{
+            error: string;
+        }> | {
+            ok: boolean;
+        }>;
+    };
+    graph: {
+        data: () => Promise<AuthzGraphData>;
+        loader({ request }: Req): Promise<AuthzGraphData>;
+    };
 };
 
 type RouteArgs = {
@@ -358,12 +422,17 @@ declare function createAuthzAdminApp(opts: CreateAuthzAdminAppOptions): {
         basePath: string;
         myPermissions: Record<string, PermissionView>;
         adminResourceKey: string;
+    } | {
+        labels: AuthzAdminLabels;
+        groupRoles: _aiquants_authz_core.AuthzGroupRoleAssignment[];
+        roles: _aiquants_authz_core.AuthzRole[];
+        groups: _aiquants_authz_core.AuthzGroupSummary[];
+        segment: string;
+        basePath: string;
+        myPermissions: Record<string, PermissionView>;
+        adminResourceKey: string;
     }>;
-    action: (args: RouteArgs) => Promise<react_router.UNSAFE_DataWithResponseInit<{
-        error: string;
-    }> | {
-        ok: boolean;
-    }>;
+    action: (args: RouteArgs) => Promise<unknown>;
     server: {
         labels: AuthzAdminLabels;
         resourceKey: string;
@@ -431,6 +500,25 @@ declare function createAuthzAdminApp(opts: CreateAuthzAdminAppOptions): {
                 ok: boolean;
             }>;
         };
+        groupRoles: {
+            data: () => Promise<AuthzGroupRolesData>;
+            loader({ request }: {
+                request: Request;
+            }): Promise<AuthzGroupRolesData>;
+            action({ request }: {
+                request: Request;
+            }): Promise<react_router.UNSAFE_DataWithResponseInit<{
+                error: string;
+            }> | {
+                ok: boolean;
+            }>;
+        };
+        graph: {
+            data: () => Promise<AuthzGraphData>;
+            loader({ request }: {
+                request: Request;
+            }): Promise<AuthzGraphData>;
+        };
     };
 };
 
@@ -554,12 +642,12 @@ declare function formatResourceTooltip(resourceKey?: string, resourceName?: stri
  * Display permission indicator badges for read, write, and delete capabilities.
  * 閲覧・編集・削除の権限状態バッジ群を描画。
  */
-declare function MyPermissionIndicator({ permission, resourceName, expectedResourceKey, showResourceTooltip, labels, showScopeSummary, className, }: MyPermissionIndicatorProps): react.JSX.Element;
+declare function MyPermissionIndicator({ permission, resourceName, expectedResourceKey, showResourceTooltip, labels, showScopeSummary, className }: MyPermissionIndicatorProps): react.JSX.Element;
 /**
  * Reusable "Your Permissions" status bar component suitable for any application page.
  * 「あなたの権限」ラベルと権限状態インジケータを束ねた再利用可能なコンポーネント。
  */
-declare function MyPermissionStatus({ permission, resourceName, expectedResourceKey, prefixLabel, showPrefixLabel, showResourceTooltip, labels, showScopeSummary, className, style, }: MyPermissionStatusProps): react.JSX.Element;
+declare function MyPermissionStatus({ permission, resourceName, expectedResourceKey, prefixLabel, showPrefixLabel, showResourceTooltip, labels, showScopeSummary, className, style }: MyPermissionStatusProps): react.JSX.Element;
 
 /**
  * Resource definition and registry utilities for preventing page-resource mismatches.
@@ -607,4 +695,4 @@ type UsePermission = {
  */
 declare function usePermission(view: PermissionView | null | undefined): UsePermission;
 
-export { AuthzAdminAppView, type AuthzAdminLabels, type AuthzConfig, AuthzErrorBoundary, type AuthzGrantsData, AuthzGrantsView, AuthzLayout, type AuthzLayoutData, type AuthzResourcesData, AuthzResourcesView, type AuthzRolesData, AuthzRolesView, type AuthzUserId, type AuthzUserRolesData, AuthzUserRolesView, type CreateAuthzAdminAppOptions, type CreateAuthzAdminServerOptions, ErrorAlert, Field, type MyPermissionGroupItem, MyPermissionGroupStatus, type MyPermissionGroupStatusProps, MyPermissionIndicator, type MyPermissionIndicatorProps, MyPermissionStatus, type MyPermissionStatusProps, type PartialAuthzAdminLabels, type PermState, type PermissionView, type RequirePermissionOptions, type ResourceDefinition, type ResourceDefinitionInput, type ResourceRegistry, type UsePermission, createAuthz, createAuthzAdminApp, createAuthzAdminServer, defaultAuthzAdminLabels, defineResources, flattenGroupItems, formatResourceTooltip, getPermissionSummary, makeAuthzErrorBoundary, resolveLabels, toPermissionView, ui, usePermission };
+export { AuthzAdminAppView, type AuthzAdminAppViewProps, type AuthzAdminLabels, type AuthzConfig, AuthzErrorBoundary, type AuthzGrantsData, AuthzGrantsView, type AuthzGraphData, AuthzGraphView, type AuthzGroupRolesData, AuthzGroupRolesView, AuthzLayout, type AuthzLayoutData, type AuthzLayoutProps, type AuthzLayoutShellProps, type AuthzNodeType, type AuthzResourcesData, AuthzResourcesView, type AuthzRolesData, AuthzRolesView, type AuthzUserId, type AuthzUserRolesData, AuthzUserRolesView, type CreateAuthzAdminAppOptions, type CreateAuthzAdminServerOptions, ErrorAlert, Field, type MyPermissionGroupItem, MyPermissionGroupStatus, type MyPermissionGroupStatusProps, MyPermissionIndicator, type MyPermissionIndicatorProps, MyPermissionStatus, type MyPermissionStatusProps, type PartialAuthzAdminLabels, type PermState, type PermissionView, type RequirePermissionOptions, type ResourceDefinition, type ResourceDefinitionInput, type ResourceRegistry, type UsePermission, createAuthz, createAuthzAdminApp, createAuthzAdminServer, defaultAuthzAdminLabels, defineResources, flattenGroupItems, formatResourceTooltip, getPermissionSummary, makeAuthzErrorBoundary, resolveLabels, toPermissionView, ui, usePermission };

package/dist/index.d.ts

@@ -1,19 +1,22 @@
+import * as react_router from 'react-router';
 import * as react from 'react';
 import { ReactNode, CSSProperties } from 'react';
 import * as _aiquants_authz_core from '@aiquants/authz-core';
-import { EffectivePermission, DenyInfo, AuthzAction, GuardResult, AuthzGrant, AuthzResource, AuthzRole, AuthzAssignment, AuthzUser, AuthzAdminStore } from '@aiquants/authz-core';
-import * as react_router from 'react-router';
+import { EffectivePermission, DenyInfo, AuthzAction, GuardResult, AuthzGrant, AuthzUser, AuthzRole, AuthzResource, AuthzAssignment, AuthzGroupRoleAssignment, AuthzGroupSummary, AuthzAdminStore } from '@aiquants/authz-core';
 
 type Awaitable<T> = T | Promise<T>;
 type AuthzUserId = string | number;
 type AuthzConfig = {
     /** Stable app identifier (e.g. "quants"). Bound into every permission query. */
     appKey: string;
-    /** Resolve the acting user id from the request (cookie/session/openid → TDUsers.id). */
+    /** Resolve the acting user id from the request (cookie/session/openid → the consumer's user id). */
     resolveUserId: (request: Request) => Awaitable<AuthzUserId | null | undefined>;
+    /** Optionally resolve acting user's group IDs from the request or session. */
+    resolveGroupIds?: (request: Request) => Awaitable<(string | number)[] | null | undefined>;
     /** Load effective permissions for (user, app, resource) — typically via @aiquants/authz-drizzle. */
     getEffectivePermissions: (args: {
         userId: AuthzUserId | null;
+        groupIds?: (string | number)[];
         appKey: string;
         resourceKey: string;
     }) => Awaitable<EffectivePermission | null | undefined>;
@@ -70,6 +73,8 @@ type AuthzAdminLabels = {
         resources: string;
         role_permissions: string;
         user_roles: string;
+        group_roles: string;
+        graph: string;
     };
     common: {
         add: string;
@@ -134,6 +139,15 @@ type AuthzAdminLabels = {
         newHeading: string;
         selectPlaceholder: string;
     };
+    groupRoles: {
+        heading: string;
+        note: string;
+        group: string;
+        role: string;
+        empty: string;
+        newHeading: string;
+        selectPlaceholder: string;
+    };
     error: {
         forbiddenTitle: string;
         forbiddenBody: string;
@@ -157,6 +171,7 @@ type PartialAuthzAdminLabels = {
     resources?: Partial<AuthzAdminLabels["resources"]>;
     grants?: Partial<AuthzAdminLabels["grants"]>;
     userRoles?: Partial<AuthzAdminLabels["userRoles"]>;
+    groupRoles?: Partial<AuthzAdminLabels["groupRoles"]>;
     error?: Partial<AuthzAdminLabels["error"]>;
     warn?: Partial<AuthzAdminLabels["warn"]>;
 };
@@ -171,8 +186,21 @@ type AuthzLayoutData = WithLabels & {
     adminResourceKey: string;
     basePath?: string;
 };
+type AuthzLayoutShellProps = {
+    children: React.ReactNode;
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
+type AuthzLayoutProps = {
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
 /** ネストルート用レイアウト(子は Outlet)。`routes.ts` でネスト構成にする場合に使う。 */
-declare function AuthzLayout(): react.JSX.Element;
+declare function AuthzLayout({ renderHeader }?: AuthzLayoutProps): react.JSX.Element;
 /**
  * 認可管理 UI のエラー境界。ErrorBoundary は loader データを読めないため、ラベルは
  * `makeAuthzErrorBoundary(labels)` で注入する(アプリは自分のロケールで生成する)。
@@ -214,12 +242,35 @@ type AuthzUserRolesData = WithLabels & {
     selfAdminRoleIds?: number[];
 };
 declare function AuthzUserRolesView(): react.JSX.Element;
+type AuthzGroupRolesData = WithLabels & {
+    groupRoles: AuthzGroupRoleAssignment[];
+    roles: AuthzRole[];
+    groups: AuthzGroupSummary[];
+};
+declare function AuthzGroupRolesView(): react.JSX.Element;
+type AuthzGraphData = WithLabels & {
+    users: AuthzUser[];
+    roles: AuthzRole[];
+    resources: AuthzResource[];
+    grants: AuthzGrant[];
+    assignments: AuthzAssignment[];
+    groupRoles?: AuthzGroupRoleAssignment[];
+    groups?: AuthzGroupSummary[];
+};
+type AuthzNodeType = "user" | "group" | "role" | "resource";
+declare function AuthzGraphView(): react.JSX.Element;
+type AuthzAdminAppViewProps = {
+    renderHeader?: (props: {
+        title: string;
+        annotation: React.ReactNode;
+    }) => React.ReactNode;
+};
 /**
  * スプラット(`authz/*`)1 ルートで認可管理 UI 全体を描画するコンポーネント(store 非依存)。
  * loader が返す `segment` に応じて該当タブのビューを描画する。レイアウト殻と各ビューは同一の
  * loader データ(セグメントデータ + myPermissions + labels をトップレベルに統合)を読む。
  */
-declare function AuthzAdminAppView(): react.JSX.Element;
+declare function AuthzAdminAppView({ renderHeader }?: AuthzAdminAppViewProps): react.JSX.Element;
 
 type Req = {
     request: Request;
@@ -302,6 +353,19 @@ declare function createAuthzAdminServer(opts: CreateAuthzAdminServerOptions): {
             ok: boolean;
         }>;
     };
+    groupRoles: {
+        data: () => Promise<AuthzGroupRolesData>;
+        loader({ request }: Req): Promise<AuthzGroupRolesData>;
+        action({ request }: Req): Promise<react_router.UNSAFE_DataWithResponseInit<{
+            error: string;
+        }> | {
+            ok: boolean;
+        }>;
+    };
+    graph: {
+        data: () => Promise<AuthzGraphData>;
+        loader({ request }: Req): Promise<AuthzGraphData>;
+    };
 };
 
 type RouteArgs = {
@@ -358,12 +422,17 @@ declare function createAuthzAdminApp(opts: CreateAuthzAdminAppOptions): {
         basePath: string;
         myPermissions: Record<string, PermissionView>;
         adminResourceKey: string;
+    } | {
+        labels: AuthzAdminLabels;
+        groupRoles: _aiquants_authz_core.AuthzGroupRoleAssignment[];
+        roles: _aiquants_authz_core.AuthzRole[];
+        groups: _aiquants_authz_core.AuthzGroupSummary[];
+        segment: string;
+        basePath: string;
+        myPermissions: Record<string, PermissionView>;
+        adminResourceKey: string;
     }>;
-    action: (args: RouteArgs) => Promise<react_router.UNSAFE_DataWithResponseInit<{
-        error: string;
-    }> | {
-        ok: boolean;
-    }>;
+    action: (args: RouteArgs) => Promise<unknown>;
     server: {
         labels: AuthzAdminLabels;
         resourceKey: string;
@@ -431,6 +500,25 @@ declare function createAuthzAdminApp(opts: CreateAuthzAdminAppOptions): {
                 ok: boolean;
             }>;
         };
+        groupRoles: {
+            data: () => Promise<AuthzGroupRolesData>;
+            loader({ request }: {
+                request: Request;
+            }): Promise<AuthzGroupRolesData>;
+            action({ request }: {
+                request: Request;
+            }): Promise<react_router.UNSAFE_DataWithResponseInit<{
+                error: string;
+            }> | {
+                ok: boolean;
+            }>;
+        };
+        graph: {
+            data: () => Promise<AuthzGraphData>;
+            loader({ request }: {
+                request: Request;
+            }): Promise<AuthzGraphData>;
+        };
     };
 };
 
@@ -554,12 +642,12 @@ declare function formatResourceTooltip(resourceKey?: string, resourceName?: stri
  * Display permission indicator badges for read, write, and delete capabilities.
  * 閲覧・編集・削除の権限状態バッジ群を描画。
  */
-declare function MyPermissionIndicator({ permission, resourceName, expectedResourceKey, showResourceTooltip, labels, showScopeSummary, className, }: MyPermissionIndicatorProps): react.JSX.Element;
+declare function MyPermissionIndicator({ permission, resourceName, expectedResourceKey, showResourceTooltip, labels, showScopeSummary, className }: MyPermissionIndicatorProps): react.JSX.Element;
 /**
  * Reusable "Your Permissions" status bar component suitable for any application page.
  * 「あなたの権限」ラベルと権限状態インジケータを束ねた再利用可能なコンポーネント。
  */
-declare function MyPermissionStatus({ permission, resourceName, expectedResourceKey, prefixLabel, showPrefixLabel, showResourceTooltip, labels, showScopeSummary, className, style, }: MyPermissionStatusProps): react.JSX.Element;
+declare function MyPermissionStatus({ permission, resourceName, expectedResourceKey, prefixLabel, showPrefixLabel, showResourceTooltip, labels, showScopeSummary, className, style }: MyPermissionStatusProps): react.JSX.Element;
 
 /**
  * Resource definition and registry utilities for preventing page-resource mismatches.
@@ -607,4 +695,4 @@ type UsePermission = {
  */
 declare function usePermission(view: PermissionView | null | undefined): UsePermission;
 
-export { AuthzAdminAppView, type AuthzAdminLabels, type AuthzConfig, AuthzErrorBoundary, type AuthzGrantsData, AuthzGrantsView, AuthzLayout, type AuthzLayoutData, type AuthzResourcesData, AuthzResourcesView, type AuthzRolesData, AuthzRolesView, type AuthzUserId, type AuthzUserRolesData, AuthzUserRolesView, type CreateAuthzAdminAppOptions, type CreateAuthzAdminServerOptions, ErrorAlert, Field, type MyPermissionGroupItem, MyPermissionGroupStatus, type MyPermissionGroupStatusProps, MyPermissionIndicator, type MyPermissionIndicatorProps, MyPermissionStatus, type MyPermissionStatusProps, type PartialAuthzAdminLabels, type PermState, type PermissionView, type RequirePermissionOptions, type ResourceDefinition, type ResourceDefinitionInput, type ResourceRegistry, type UsePermission, createAuthz, createAuthzAdminApp, createAuthzAdminServer, defaultAuthzAdminLabels, defineResources, flattenGroupItems, formatResourceTooltip, getPermissionSummary, makeAuthzErrorBoundary, resolveLabels, toPermissionView, ui, usePermission };
+export { AuthzAdminAppView, type AuthzAdminAppViewProps, type AuthzAdminLabels, type AuthzConfig, AuthzErrorBoundary, type AuthzGrantsData, AuthzGrantsView, type AuthzGraphData, AuthzGraphView, type AuthzGroupRolesData, AuthzGroupRolesView, AuthzLayout, type AuthzLayoutData, type AuthzLayoutProps, type AuthzLayoutShellProps, type AuthzNodeType, type AuthzResourcesData, AuthzResourcesView, type AuthzRolesData, AuthzRolesView, type AuthzUserId, type AuthzUserRolesData, AuthzUserRolesView, type CreateAuthzAdminAppOptions, type CreateAuthzAdminServerOptions, ErrorAlert, Field, type MyPermissionGroupItem, MyPermissionGroupStatus, type MyPermissionGroupStatusProps, MyPermissionIndicator, type MyPermissionIndicatorProps, MyPermissionStatus, type MyPermissionStatusProps, type PartialAuthzAdminLabels, type PermState, type PermissionView, type RequirePermissionOptions, type ResourceDefinition, type ResourceDefinitionInput, type ResourceRegistry, type UsePermission, createAuthz, createAuthzAdminApp, createAuthzAdminServer, defaultAuthzAdminLabels, defineResources, flattenGroupItems, formatResourceTooltip, getPermissionSummary, makeAuthzErrorBoundary, resolveLabels, toPermissionView, ui, usePermission };