@almadar/std 16.235.0 → 16.236.0

package/behaviors/lolo/ui/core/molecules/ui-swipeable-row.lolo

@@ -2,13 +2,15 @@ app ui-swipeable-row "1.0.0"
 "SwipeableRow — UI factory (1:1 with the @almadar/ui swipeable-row pattern)."
 ;; @pattern "swipeable-row"
 orbital SwipeableRowOrbital {
-    type SwipeableRowLoaded = Event { data : [SwipeableRowItem] } "SwipeableRow rows finished loading; payload.data holds the collection"
+    type SwipeableRowLoaded = Event { data : SwipeableRowItem } "SwipeableRow row finished loading; payload.data holds the single row"
   type SwipeableRowLeftActionsItem = {
     label : string!
     icon : icon
     variant : "primary" | "secondary" | "danger" | "ghost"
     event : event!
     eventPayload : @payload event
+    when : SExpr
+    roles : [string]
   }
   type SwipeableRowRightActionsItem = {
     label : string!
@@ -16,6 +18,8 @@ orbital SwipeableRowOrbital {
     variant : "primary" | "secondary" | "danger" | "ghost"
     event : event!
     eventPayload : @payload event
+    when : SExpr
+    roles : [string]
   }
 
   entity SwipeableRowItem [runtime] {
@@ -23,24 +27,37 @@ orbital SwipeableRowOrbital {
   }
 
   trait SwipeableRowRender -> @rebindable SwipeableRowItem [interaction, instance] {
-    initial: idle
+    initial: resolving
 
-    state idle {
-      INIT -> idle when @config.selfFetch
-        (fetch SwipeableRowItem { emit: { success: SwipeableRowLoaded } })
+    state resolving {
+      INIT -> idle when (and @config.selfFetch (!= (str/default ?id "") ""))
+        (fetch SwipeableRowItem { id: ?id, emit: { success: SwipeableRowLoaded } })
+        (render-ui main {
+          leftActions: (array/filter @config.leftActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          rightActions: (array/filter @config.rightActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          threshold: @config.threshold
+          children: @config.children
+          itemData: @entity
+          className: @config.className
+          type: swipeable-row
+        })
+      INIT -> idle when (not (and @config.selfFetch (!= (str/default ?id "") "")))
         (render-ui main {
-          leftActions: @config.leftActions
-          rightActions: @config.rightActions
+          leftActions: (array/filter @config.leftActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          rightActions: (array/filter @config.rightActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           threshold: @config.threshold
           children: @config.children
           itemData: @entity
           className: @config.className
           type: swipeable-row
         })
-      INIT -> idle when (not @config.selfFetch)
+    }
+
+    state idle {
+      INIT -> idle
         (render-ui main {
-          leftActions: @config.leftActions
-          rightActions: @config.rightActions
+          leftActions: (array/filter @config.leftActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          rightActions: (array/filter @config.rightActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           threshold: @config.threshold
           children: @config.children
           itemData: @entity
@@ -49,8 +66,8 @@ orbital SwipeableRowOrbital {
         })
       SwipeableRowLoaded -> idle
         (render-ui main {
-          leftActions: @config.leftActions
-          rightActions: @config.rightActions
+          leftActions: (array/filter @config.leftActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          rightActions: (array/filter @config.rightActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           threshold: @config.threshold
           children: @config.children
           itemData: @payload.data
@@ -61,11 +78,19 @@ orbital SwipeableRowOrbital {
 
     emits {
       SwipeableRowLoaded
-        @description "SwipeableRow rows finished loading; payload.data holds the collection."
+        @description "SwipeableRow row finished loading; payload.data holds the single row."
         @synonyms "loaded, fetched, retrieved"
         @tier "essential"
     }
 
+    listens {
+      INIT {
+        id : string
+      }
+        @description "Mount payload; a host that routes to this panel by id (a :id page param) passes it here."
+        @tier "internal"
+    }
+
     config {
       leftActions : [SwipeableRowLeftActionsItem] = []
         @label "Left Actions"
@@ -87,9 +112,13 @@ orbital SwipeableRowOrbital {
         @label "Class Name"
         @description "className prop"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
-        @label "Fetch its own rows on mount?"
-        @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."
+        @label "Fetch its own row on mount?"
+        @description "true (default) = a mount that carries an id loads that one row (never the collection); a create-mode mount skips the load. false = a composing atom owns the load."
         @tier "internal"
     }
   }

package/behaviors/lolo/ui/core/molecules/ui-table-view.lolo

@@ -4,6 +4,10 @@ app ui-table-view "1.0.0"
 ;; @pattern "table-view"
 orbital TableViewOrbital {
     type TableViewLoaded = Event { data : [TableViewItem] } "TableView rows finished loading; payload.data holds the collection"
+  type TableViewEmptyAction = {
+    label : string!
+    event : event
+  }
   type TableViewColumnsItem = {
     key : string!
     field : string
@@ -35,6 +39,8 @@ orbital TableViewOrbital {
     event : event!
     icon : icon
     variant : "primary" | "secondary" | "ghost" | "danger"
+    when : SExpr
+    roles : [string]
   }
   type TableViewError = {
     message : string!
@@ -68,10 +74,14 @@ orbital TableViewOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           columns: @config.columns
           fields: @config.fields
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           selectable: @config.selectable
@@ -100,10 +110,14 @@ orbital TableViewOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @entity
           columns: @config.columns
           fields: @config.fields
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           selectable: @config.selectable
@@ -132,10 +146,14 @@ orbital TableViewOrbital {
           positionEvent: @config.positionEvent
           dndItemIdField: @config.dndItemIdField
           dndRoot: @config.dndRoot
+          emptyIcon: @config.emptyIcon
+          emptyTitle: @config.emptyTitle
+          emptyDescription: @config.emptyDescription
+          emptyAction: @config.emptyAction
           entity: @payload.data
           columns: @config.columns
           fields: @config.fields
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           itemClickEvent: @config.itemClickEvent
           selectable: @config.selectable
@@ -213,6 +231,22 @@ orbital TableViewOrbital {
         @label "Dnd Root"
         @description "Mark this container as the DnD root for its subtree — descendant zones share one DndContext (cross-container drag). Use on an outer container whose own items are not draggable."
         @tier "presentation"
+      emptyIcon : icon
+        @label "Empty Icon"
+        @description "Domain icon for the empty state."
+        @tier "presentation"
+      emptyTitle : string
+        @label "Empty Title"
+        @description "Specific title ('No orders yet')."
+        @tier "presentation"
+      emptyDescription : string
+        @label "Empty Description"
+        @description "What will appear here once rows exist."
+        @tier "presentation"
+      emptyAction : TableViewEmptyAction
+        @label "Empty Action"
+        @description "Create-the-first-item action."
+        @tier "presentation"
       columns : [TableViewColumnsItem] = []
         @label "Columns"
         @description "Column definitions. The compiler emits `columns`; `fields` is the alias."
@@ -289,6 +323,10 @@ orbital TableViewOrbital {
         @label "Relations Data"
         @description "Relation display data: { fieldName: [{value, label}] } — injected server-side by the runtime (relation-option injection) or bound by compiled codegen; resolves stored foreign ids to display names for a column whose field is relation-typed. Same contract DetailPanel takes."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."

package/behaviors/lolo/ui/core/molecules/ui-tabs.lolo

@@ -13,6 +13,7 @@ orbital TabsOrbital {
     disabled : boolean
     event : event
     active : boolean
+    roles : [string]
   }
   type TabsItemsItemIconAsset = {
     url : asset!
@@ -39,6 +40,7 @@ orbital TabsOrbital {
     disabled : boolean
     event : event
     active : boolean
+    roles : [string]
   }
   type TabsTabsItemIconAsset = {
     url : asset!
@@ -65,8 +67,8 @@ orbital TabsOrbital {
     state idle {
       INIT -> idle
         (render-ui main {
-          items: @config.items
-          tabs: @config.tabs
+          items: (array/filter @config.items (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          tabs: (array/filter @config.tabs (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           defaultActiveTab: @config.defaultActiveTab
           activeTab: @config.activeTab
           onTabChange: @config.onTabChange
@@ -123,6 +125,10 @@ orbital TabsOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/organisms/ui-detail-panel.lolo

@@ -2,7 +2,7 @@ app ui-detail-panel "1.0.0"
 "DetailPanel — UI factory (1:1 with the @almadar/ui detail-panel pattern)."
 ;; @pattern "detail-panel"
 orbital DetailPanelOrbital {
-    type DetailPanelLoaded = Event { data : [DetailPanelItem] } "DetailPanel rows finished loading; payload.data holds the collection"
+    type DetailPanelLoaded = Event { data : DetailPanelItem } "DetailPanel row finished loading; payload.data holds the single row"
   type DetailPanelError = {
     message : string!
     name : string
@@ -29,6 +29,8 @@ orbital DetailPanelOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost" | "danger"
+    when : SExpr
+    roles : [string]
   }
   type DetailPanelBackAction = {
     label : string!
@@ -36,6 +38,7 @@ orbital DetailPanelOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost" | "danger"
+    when : SExpr
   }
   type DetailPanelFieldsItem = {
     key : string!
@@ -60,11 +63,11 @@ orbital DetailPanelOrbital {
   }
 
   trait DetailPanelRender -> @rebindable DetailPanelItem [interaction, instance] {
-    initial: idle
+    initial: resolving
 
-    state idle {
-      INIT -> idle when @config.selfFetch
-        (fetch DetailPanelItem { emit: { success: DetailPanelLoaded } })
+    state resolving {
+      INIT -> idle when (and @config.selfFetch (!= (str/default ?id "") "") (!= @config.mode "create"))
+        (fetch DetailPanelItem { id: ?id, emit: { success: DetailPanelLoaded } })
         (render-ui main {
           className: @config.className
           isLoading: @config.isLoading
@@ -84,7 +87,7 @@ orbital DetailPanelOrbital {
           status: @config.status
           avatar: @config.avatar
           sections: @config.sections
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           backAction: @config.backAction
           footer: @config.footer
@@ -100,7 +103,7 @@ orbital DetailPanelOrbital {
           relationsData: @config.relationsData
           type: detail-panel
         })
-      INIT -> idle when (not @config.selfFetch)
+      INIT -> idle when (not (and @config.selfFetch (!= (str/default ?id "") "") (!= @config.mode "create")))
         (render-ui main {
           className: @config.className
           isLoading: @config.isLoading
@@ -120,7 +123,46 @@ orbital DetailPanelOrbital {
           status: @config.status
           avatar: @config.avatar
           sections: @config.sections
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          maxInlineActions: @config.maxInlineActions
+          backAction: @config.backAction
+          footer: @config.footer
+          slideOver: @config.slideOver
+          fields: @config.fields
+          fieldNames: @config.fieldNames
+          initialData: @entity
+          mode: @config.mode
+          position: @config.position
+          width: @config.width
+          displayFields: @config.displayFields
+          showActions: @config.showActions
+          relationsData: @config.relationsData
+          type: detail-panel
+        })
+    }
+
+    state idle {
+      INIT -> idle
+        (render-ui main {
+          className: @config.className
+          isLoading: @config.isLoading
+          error: @config.error
+          sortBy: @config.sortBy
+          sortDirection: @config.sortDirection
+          searchValue: @config.searchValue
+          page: @config.pageProp
+          pageSize: @config.pageSize
+          totalCount: @config.totalCount
+          activeFilters: @config.activeFilters
+          selectedIds: @config.selectedIds
+          entity: @entity
+          title: @config.title
+          onTitleCommit: @config.onTitleCommit
+          subtitle: @config.subtitle
+          status: @config.status
+          avatar: @config.avatar
+          sections: @config.sections
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           backAction: @config.backAction
           footer: @config.footer
@@ -156,7 +198,7 @@ orbital DetailPanelOrbital {
           status: @config.status
           avatar: @config.avatar
           sections: @config.sections
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           maxInlineActions: @config.maxInlineActions
           backAction: @config.backAction
           footer: @config.footer
@@ -176,11 +218,19 @@ orbital DetailPanelOrbital {
 
     emits {
       DetailPanelLoaded
-        @description "DetailPanel rows finished loading; payload.data holds the collection."
+        @description "DetailPanel row finished loading; payload.data holds the single row."
         @synonyms "loaded, fetched, retrieved"
         @tier "essential"
     }
 
+    listens {
+      INIT {
+        id : string
+      }
+        @description "Mount payload; a host that routes to this panel by id (a :id page param) passes it here."
+        @tier "internal"
+    }
+
     config {
       className : string
         @label "Class Name"
@@ -303,9 +353,13 @@ orbital DetailPanelOrbital {
         @label "Relations Data"
         @description "Relation display data: { fieldName: [{value, label}] } — injected server-side by the runtime (relation-option injection) or bound by compiled codegen; resolves stored foreign ids to display names."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
-        @label "Fetch its own rows on mount?"
-        @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."
+        @label "Fetch its own row on mount?"
+        @description "true (default) = a mount that carries an id loads that one row (never the collection); a create-mode mount skips the load. false = a composing atom owns the load."
         @tier "internal"
     }
   }

package/behaviors/lolo/ui/core/organisms/ui-entity-cards.lolo

@@ -27,6 +27,8 @@ orbital EntityCardsOrbital {
     navigatesTo : string
     placement : string
     variant : string
+    when : SExpr
+    roles : [string]
   }
 
   entity EntityCardsItem [runtime] {
@@ -60,7 +62,7 @@ orbital EntityCardsOrbital {
           fields: @config.fields
           fieldNames: @config.fieldNames
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showTotal: @config.showTotal
           showAvatar: @config.showAvatar
           variant: @config.variant
@@ -89,7 +91,7 @@ orbital EntityCardsOrbital {
           fields: @config.fields
           fieldNames: @config.fieldNames
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showTotal: @config.showTotal
           showAvatar: @config.showAvatar
           variant: @config.variant
@@ -118,7 +120,7 @@ orbital EntityCardsOrbital {
           fields: @config.fields
           fieldNames: @config.fieldNames
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showTotal: @config.showTotal
           showAvatar: @config.showAvatar
           variant: @config.variant
@@ -238,6 +240,10 @@ orbital EntityCardsOrbital {
         @label "Image Field"
         @description "Entity field name containing an image URL to display as card thumbnail"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."

package/behaviors/lolo/ui/core/organisms/ui-entity-list.lolo

@@ -21,6 +21,8 @@ orbital EntityListOrbital {
     navigatesTo : string
     placement : string
     variant : "primary" | "secondary" | "ghost" | "danger" | "default"
+    when : SExpr
+    roles : [string]
   }
 
   entity EntityListItem [runtime] {
@@ -48,7 +50,7 @@ orbital EntityListOrbital {
           entity: @entity
           entityType: @config.entityType
           selectable: @config.selectable
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showDividers: @config.showDividers
           variant: @config.variant
           emptyMessage: @config.emptyMessage
@@ -73,7 +75,7 @@ orbital EntityListOrbital {
           entity: @entity
           entityType: @config.entityType
           selectable: @config.selectable
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showDividers: @config.showDividers
           variant: @config.variant
           emptyMessage: @config.emptyMessage
@@ -98,7 +100,7 @@ orbital EntityListOrbital {
           entity: @payload.data
           entityType: @config.entityType
           selectable: @config.selectable
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           showDividers: @config.showDividers
           variant: @config.variant
           emptyMessage: @config.emptyMessage
@@ -207,6 +209,10 @@ orbital EntityListOrbital {
         @label "Field Names"
         @description "Alias for fields - backwards compatibility"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."

package/behaviors/lolo/ui/core/organisms/ui-entity-table.lolo

@@ -32,6 +32,8 @@ orbital EntityTableOrbital {
     placement : string
     icon : icon
     variant : string
+    when : SExpr
+    roles : [string]
   }
   type EntityTableEmptyAction = {
     label : string!
@@ -42,12 +44,15 @@ orbital EntityTableOrbital {
     icon : icon
     variant : "default" | "danger"
     event : event
+    when : SExpr
+    roles : [string]
   }
   type EntityTableBulkActionsItem = {
     label : string!
     icon : icon
     variant : "default" | "danger"
     event : event
+    roles : [string]
   }
   type EntityTableRelationsDataValueItem = {
     value : string!
@@ -81,7 +86,7 @@ orbital EntityTableOrbital {
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           emptyIcon: @config.emptyIcon
           emptyTitle: @config.emptyTitle
           emptyDescription: @config.emptyDescription
@@ -89,8 +94,8 @@ orbital EntityTableOrbital {
           selectable: @config.selectable
           searchable: @config.searchable
           searchPlaceholder: @config.searchPlaceholder
-          rowActions: @config.rowActions
-          bulkActions: @config.bulkActions
+          rowActions: (array/filter @config.rowActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          bulkActions: (array/filter @config.bulkActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           headerActions: @config.headerActions
           showTotal: @config.showTotal
           look: @config.look
@@ -113,7 +118,7 @@ orbital EntityTableOrbital {
           entity: @entity
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           emptyIcon: @config.emptyIcon
           emptyTitle: @config.emptyTitle
           emptyDescription: @config.emptyDescription
@@ -121,8 +126,8 @@ orbital EntityTableOrbital {
           selectable: @config.selectable
           searchable: @config.searchable
           searchPlaceholder: @config.searchPlaceholder
-          rowActions: @config.rowActions
-          bulkActions: @config.bulkActions
+          rowActions: (array/filter @config.rowActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          bulkActions: (array/filter @config.bulkActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           headerActions: @config.headerActions
           showTotal: @config.showTotal
           look: @config.look
@@ -145,7 +150,7 @@ orbital EntityTableOrbital {
           entity: @payload.data
           fields: @config.fields
           columns: @config.columns
-          itemActions: @config.itemActions
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           emptyIcon: @config.emptyIcon
           emptyTitle: @config.emptyTitle
           emptyDescription: @config.emptyDescription
@@ -153,8 +158,8 @@ orbital EntityTableOrbital {
           selectable: @config.selectable
           searchable: @config.searchable
           searchPlaceholder: @config.searchPlaceholder
-          rowActions: @config.rowActions
-          bulkActions: @config.bulkActions
+          rowActions: (array/filter @config.rowActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          bulkActions: (array/filter @config.bulkActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           headerActions: @config.headerActions
           showTotal: @config.showTotal
           look: @config.look
@@ -286,6 +291,10 @@ orbital EntityTableOrbital {
         @label "Relations Data"
         @description "Relation display data: { fieldName: [{value, label}] } — injected server-side by the runtime (relation-option injection) or bound by compiled codegen; resolves stored foreign ids to display names for a column whose field is relation-typed. Same contract DetailPanel takes."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
       selfFetch : boolean = true
         @label "Fetch its own rows on mount?"
         @description "true (default) = standalone mount self-populates on INIT. false = a composing atom owns the fetch and routes its loaded event here — suppresses the wrapper's own un-hydrated fetch so it cannot race the composer's."