@asteby/metacore-runtime-react 46.4.0 → 47.1.0

package/dist/nav-permissions.d.ts

@@ -0,0 +1,19 @@
+import { type CanFn } from './permissions-context';
+/** Minimal structural shape of a sidebar leaf (matches `@asteby/metacore-ui` NavLinkItem). */
+export interface NavLeafLike {
+    url: string;
+    requires?: string;
+}
+/** Model key of a `/m/<model>` url, or undefined for any other route. */
+export declare function modelFromNavUrl(url: string | undefined): string | undefined;
+/** Capability a leaf needs, or undefined when it is not gated by the SDK. */
+export declare function capabilityForNavItem(item: NavLeafLike): string | undefined;
+/** Pure visibility predicate for a leaf given a capability checker. */
+export declare function isNavItemAllowed(item: NavLeafLike, can: CanFn): boolean;
+/**
+ * Hook for the host's sidebar: returns a predicate for `<AppSidebar
+ * isItemVisible>` / `filterNavGroups`, or `undefined` when permission gating
+ * is not active (nothing to filter).
+ */
+export declare function useNavItemVisible(): ((item: NavLeafLike) => boolean) | undefined;
+//# sourceMappingURL=nav-permissions.d.ts.map

package/dist/nav-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nav-permissions.d.ts","sourceRoot":"","sources":["../src/nav-permissions.ts"],"names":[],"mappings":"AAYA,OAAO,EAAiD,KAAK,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAEjG,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAID,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAS3E;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,GAAG,OAAO,CAGvE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,GAAG,SAAS,CAKhF"}

package/dist/nav-permissions.js

@@ -0,0 +1,51 @@
+// nav-permissions — the sidebar follows the role's EFFECTIVE permissions
+// (PIT-044). Before, every installed addon's entries were listed for every
+// role and only failed with a 403 after the click.
+//
+// Rules (same capability vocabulary as useCan/gateTableMetadata):
+//   - no <PermissionsProvider> mounted, or isAdmin / "*"  -> nothing hidden
+//     (useCan() is always-true then, so the predicate is a no-op);
+//   - an entry with an explicit `requires` capability     -> can(requires);
+//   - an entry pointing at a model screen (`/m/<model>`)  -> can('<model>.index');
+//   - any other entry (custom pages, activity, settings…) -> kept. Those are
+//     gated by the backend / the host's own `requires`, never guessed here.
+import { useCallback } from 'react';
+import { modelCapability, useCan, usePermissionsActive } from './permissions-context';
+const MODEL_URL_RE = /^\/(?:app\/)?m\/([^/?#]+)/i;
+/** Model key of a `/m/<model>` url, or undefined for any other route. */
+export function modelFromNavUrl(url) {
+    if (!url)
+        return undefined;
+    const m = MODEL_URL_RE.exec(url);
+    if (!m)
+        return undefined;
+    try {
+        return decodeURIComponent(m[1]);
+    }
+    catch {
+        return m[1];
+    }
+}
+/** Capability a leaf needs, or undefined when it is not gated by the SDK. */
+export function capabilityForNavItem(item) {
+    if (item.requires)
+        return item.requires;
+    const model = modelFromNavUrl(item.url);
+    return model ? modelCapability(model, 'index') : undefined;
+}
+/** Pure visibility predicate for a leaf given a capability checker. */
+export function isNavItemAllowed(item, can) {
+    const cap = capabilityForNavItem(item);
+    return cap ? can(cap) : true;
+}
+/**
+ * Hook for the host's sidebar: returns a predicate for `<AppSidebar
+ * isItemVisible>` / `filterNavGroups`, or `undefined` when permission gating
+ * is not active (nothing to filter).
+ */
+export function useNavItemVisible() {
+    const can = useCan();
+    const active = usePermissionsActive();
+    const predicate = useCallback((item) => isNavItemAllowed(item, can), [can]);
+    return active ? predicate : undefined;
+}

package/dist/navigation-builder.d.ts

@@ -1,3 +1,4 @@
+import { type CanFn } from './permissions-context';
 export interface NavItem {
     key: string;
     label: string;
@@ -22,6 +23,11 @@ export interface AddonNavigationContribution {
  *  conflict the higher-priority wins, then the later contribution.
  */
 export declare function mergeNavigation(base: NavItem[], contributions: AddonNavigationContribution[]): NavItem[];
+/**
+ * Drops items whose `requires` capability the user lacks (PIT-044). A parent
+ * left without children is dropped too, unless it links somewhere itself.
+ */
+export declare function filterNavigationByCapability(items: NavItem[], can: CanFn): NavItem[];
 export declare function useNavigation(base: NavItem[], contributions: AddonNavigationContribution[]): NavItem[];
 export interface NavigationBuilderProps {
     base: NavItem[];

package/dist/navigation-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navigation-builder.d.ts","sourceRoot":"","sources":["../src/navigation-builder.tsx"],"names":[],"mappings":"AAIA,MAAM,WAAW,OAAO;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,OAAO,EAAE,CAAA;CACnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,OAAO,EAAE,CA8BxG;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,OAAO,EAAE,CAEtG;AAED,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,aAAa,EAAE,2BAA2B,EAAE,CAAA;IAC5C,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,SAAS,CAAA;CAChD;AAED;6CAC6C;AAC7C,wBAAgB,iBAAiB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,sBAAsB,+BAGxF"}
+{"version":3,"file":"navigation-builder.d.ts","sourceRoot":"","sources":["../src/navigation-builder.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAU,KAAK,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAE1D,MAAM,WAAW,OAAO;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,2BAA2B;IACxC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,OAAO,EAAE,CAAA;CACnB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,OAAO,EAAE,CA8BxG;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,GAAG,OAAO,EAAE,CAapF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,2BAA2B,EAAE,GAAG,OAAO,EAAE,CAQtG;AAED,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,aAAa,EAAE,2BAA2B,EAAE,CAAA;IAC5C,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,SAAS,CAAA;CAChD;AAED;6CAC6C;AAC7C,wBAAgB,iBAAiB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,sBAAsB,+BAGxF"}

package/dist/navigation-builder.js

@@ -2,6 +2,7 @@ import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
 // NavigationBuilder — merges a host's base sidebar with `manifest.navigation`
 // contributions from every loaded addon. Pure function + a React hook.
 import { useMemo } from 'react';
+import { useCan } from './permissions-context';
 /** Deep-merge nav trees by `key`. Children are merged recursively; on
  *  conflict the higher-priority wins, then the later contribution.
  */
@@ -34,8 +35,32 @@ export function mergeNavigation(base, contributions) {
         .map(k => byKey.get(k))
         .sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
 }
+/**
+ * Drops items whose `requires` capability the user lacks (PIT-044). A parent
+ * left without children is dropped too, unless it links somewhere itself.
+ */
+export function filterNavigationByCapability(items, can) {
+    const out = [];
+    for (const item of items) {
+        if (item.requires && !can(item.requires))
+            continue;
+        if (item.children) {
+            const children = filterNavigationByCapability(item.children, can);
+            if (children.length === 0 && item.children.length > 0 && !item.to)
+                continue;
+            out.push({ ...item, children });
+        }
+        else {
+            out.push(item);
+        }
+    }
+    return out;
+}
 export function useNavigation(base, contributions) {
-    return useMemo(() => mergeNavigation(base, contributions), [base, contributions]);
+    // useCan() allows everything without a <PermissionsProvider>, so hosts that
+    // never opt in keep the full tree.
+    const can = useCan();
+    return useMemo(() => filterNavigationByCapability(mergeNavigation(base, contributions), can), [base, contributions, can]);
 }
 /** Render-prop component for hosts that want the merge logic but render
  *  the sidebar with their own primitives. */

package/dist/option-filter.d.ts

@@ -0,0 +1,31 @@
+import type { ResolvedOption } from './use-options-resolver';
+export interface OptionFilterRule {
+    /** Option property to test: a `meta` key (e.g. `status`) or `id`/`value`/`label`/`name`/`description`/`color`/`icon`. */
+    field: string;
+    /** Keep only options whose value equals this. */
+    equals?: string | number | boolean;
+    /** snake_case alias of `notEquals`. */
+    not_equals?: string | number | boolean;
+    /** Hide options whose value equals this. */
+    notEquals?: string | number | boolean;
+    /** Keep only options whose value is one of these. */
+    in?: Array<string | number | boolean>;
+    /** Hide options whose value is one of these. */
+    not_in?: Array<string | number | boolean>;
+    /** camelCase alias of `not_in`. */
+    notIn?: Array<string | number | boolean>;
+}
+/** One rule, or a list of rules that must ALL pass (AND). */
+export type OptionFilter = OptionFilterRule | OptionFilterRule[];
+/** Reads the filter from a field (camelCase or the snake_case the kernel serves). */
+export declare function getOptionFilter(field: unknown): OptionFilterRule[];
+/** True when the option satisfies the rule. Comparison is trimmed + case-insensitive. */
+export declare function optionPassesRule(opt: ResolvedOption, rule: OptionFilterRule): boolean;
+/**
+ * Applies the field's filter to resolved options. Returns the SAME array when
+ * there is nothing to filter. `keepValue` (the current selection) is never
+ * hidden, so an existing record keeps showing its label after the option
+ * became ineligible.
+ */
+export declare function applyOptionFilter(options: ResolvedOption[], rules: OptionFilterRule[], keepValue?: unknown): ResolvedOption[];
+//# sourceMappingURL=option-filter.d.ts.map

package/dist/option-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"option-filter.d.ts","sourceRoot":"","sources":["../src/option-filter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,MAAM,WAAW,gBAAgB;IAC7B,yHAAyH;IACzH,KAAK,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IAClC,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACtC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;IACrC,qDAAqD;IACrD,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;IACrC,gDAAgD;IAChD,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;IACzC,mCAAmC;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;CAC3C;AAED,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,gBAAgB,EAAE,CAAA;AAIhE,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,EAAE,CASlE;AAaD,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAarF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,OAAO,EAAE,cAAc,EAAE,EACzB,KAAK,EAAE,gBAAgB,EAAE,EACzB,SAAS,CAAC,EAAE,OAAO,GACpB,cAAc,EAAE,CAMlB"}

package/dist/option-filter.js

@@ -0,0 +1,49 @@
+/** Reads the filter from a field (camelCase or the snake_case the kernel serves). */
+export function getOptionFilter(field) {
+    if (!field || typeof field !== 'object')
+        return [];
+    const f = field;
+    const raw = f.optionFilter ?? f.option_filter;
+    const list = Array.isArray(raw) ? raw : raw && typeof raw === 'object' ? [raw] : [];
+    return list.filter((r) => !!r && typeof r === 'object' && typeof r.field === 'string' && r.field !== '');
+}
+function norm(v) {
+    return String(v).trim().toLowerCase();
+}
+function readProp(opt, key) {
+    if (key === 'id' || key === 'value' || key === 'label' || key === 'name' || key === 'description' || key === 'color' || key === 'icon' || key === 'image') {
+        return opt[key];
+    }
+    return opt.meta?.[key];
+}
+/** True when the option satisfies the rule. Comparison is trimmed + case-insensitive. */
+export function optionPassesRule(opt, rule) {
+    const raw = readProp(opt, rule.field);
+    const known = raw !== undefined && raw !== null;
+    const v = known ? norm(raw) : '';
+    const notEquals = rule.notEquals ?? rule.not_equals;
+    const notIn = rule.notIn ?? rule.not_in;
+    // Positive rules need the property to exist; negative rules cannot exclude
+    // what they cannot see, so an option lacking the property is kept.
+    if (rule.equals !== undefined && !(known && v === norm(rule.equals)))
+        return false;
+    if (Array.isArray(rule.in) && !(known && rule.in.some((x) => norm(x) === v)))
+        return false;
+    if (notEquals !== undefined && known && v === norm(notEquals))
+        return false;
+    if (Array.isArray(notIn) && known && notIn.some((x) => norm(x) === v))
+        return false;
+    return true;
+}
+/**
+ * Applies the field's filter to resolved options. Returns the SAME array when
+ * there is nothing to filter. `keepValue` (the current selection) is never
+ * hidden, so an existing record keeps showing its label after the option
+ * became ineligible.
+ */
+export function applyOptionFilter(options, rules, keepValue) {
+    if (rules.length === 0)
+        return options;
+    const keep = keepValue === undefined || keepValue === null || keepValue === '' ? null : String(keepValue);
+    return options.filter((o) => (keep !== null && String(o.id) === keep) || rules.every((r) => optionPassesRule(o, r)));
+}

package/dist/permissions-manager.d.ts

@@ -141,6 +141,15 @@ export declare function capabilitySetsEqual(a: ReadonlySet<string>, b: ReadonlyS
 export declare function defaultActionIcon(actionKey: string, kind?: string): string;
 /** Suggest a Lucide icon from the role label (create-dialog default). */
 export declare function suggestRoleIcon(label: string): string;
+/** Label of the synthetic module that hosts the general (non-model) flags. */
+export declare const GENERAL_MODULE_LABEL = "Permisos generales";
+/**
+ * The general flags (`general.work_after_hours`, …) as a synthetic module, so
+ * they are picked from the module combobox and edited in the same two-column
+ * action grid as any module's actions (#1021). Each flag keeps its full
+ * capability key through `PermissionActionDef.capability`.
+ */
+export declare function generalPermissionsModule(general: GeneralPermissionDef[]): PermissionModuleDef;
 /**
  * Normalize whatever `loadModules` returned into the canonical grouped shape.
  *

package/dist/permissions-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions-manager.d.ts","sourceRoot":"","sources":["../src/permissions-manager.tsx"],"names":[],"mappings":"AAyBA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAiE9B,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAA;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAA;IAC3D;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,gEAAgE;IAChE,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;IACzB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACjC,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACtC,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,OAAO,EAAE,oBAAoB,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,OAAO,EAAE,oBAAoB,EAAE,CAAA;CAClC;AAED,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,sBAAsB,CAAA;AAEnF,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACpC,0EAA0E;IAC1E,WAAW,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9C,mCAAmC;IACnC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACnC,0DAA0D;IAC1D,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1D,0DAA0D;IAC1D,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9E,2DAA2D;IAC3D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC1D,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC1E,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;eAEe;AACf,wBAAgB,sBAAsB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GACpB,MAAM,CAGR;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAIxE;AAED,MAAM,WAAW,kBAAkB;IAC/B,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,CAwBvF;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CACjC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAC5B,MAAM,EAAE,mBAAmB,GAC5B,MAAM,CAER;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAI3F;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAsB1E;AAwBD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoBrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,EAAE,CA0BjF;AAED,gEAAgE;AAChE,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,GAAG,IAAI,CAGvE;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CACzB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACxC,EAAE,EAAE,MAAM,GAAG,IAAI,GAClB;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAAG,IAAI,CAM5D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAE1E;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAYtF;AAmHD,wBAAgB,kBAAkB,CAAC,EAC/B,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,UAAU,EACV,KAA0B,EAC1B,SAAS,GACZ,EAAE,uBAAuB,qBA41BzB"}
+{"version":3,"file":"permissions-manager.d.ts","sourceRoot":"","sources":["../src/permissions-manager.tsx"],"names":[],"mappings":"AAyBA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAgE9B,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,GAAG,EAAE,MAAM,CAAA;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAA;IAC3D;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAA;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,gEAAgE;IAChE,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAA;IACzB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oEAAoE;IACpE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACjC,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACtC,MAAM,EAAE,WAAW,EAAE,CAAA;IACrB,OAAO,EAAE,oBAAoB,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,OAAO,EAAE,oBAAoB,EAAE,CAAA;CAClC;AAED,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,sBAAsB,CAAA;AAEnF,MAAM,WAAW,OAAO;IACpB,EAAE,EAAE,MAAM,CAAA;IACV,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,SAAS;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB;IACpC,0EAA0E;IAC1E,WAAW,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAC9C,mCAAmC;IACnC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACnC,0DAA0D;IAC1D,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1D,0DAA0D;IAC1D,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9E,2DAA2D;IAC3D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC1D,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;IAC1E,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACrB;AAMD;;eAEe;AACf,wBAAgB,sBAAsB,CAClC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,GACpB,MAAM,CAGR;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAIxE;AAED,MAAM,WAAW,kBAAkB;IAC/B,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,mBAAmB,EAAE,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,CAwBvF;AAED,oEAAoE;AACpE,wBAAgB,qBAAqB,CACjC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAC5B,MAAM,EAAE,mBAAmB,GAC5B,MAAM,CAER;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAI3F;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAsB1E;AAwBD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoBrD;AAED,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,uBAAuB,CAAA;AAExD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,mBAAmB,CAc7F;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,EAAE,CA0BjF;AAED,gEAAgE;AAChE,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,GAAG,IAAI,CAGvE;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CACzB,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,GAAG,SAAS,EACxC,EAAE,EAAE,MAAM,GAAG,IAAI,GAClB;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAAG,IAAI,CAM5D;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,mBAAmB,EAAE,CAE1E;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,EAAE,CAYtF;AAmHD,wBAAgB,kBAAkB,CAAC,EAC/B,WAAW,EACX,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,UAAU,EACV,KAA0B,EAC1B,SAAS,GACZ,EAAE,uBAAuB,qBAi1BzB"}

package/dist/permissions-manager.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // permissions-manager — "Permisos y Roles" pro view (rol × módulo × acción).
 //
 // Transport-agnostic: every read/write arrives via props (loaders/mutators),
@@ -29,7 +29,7 @@ import { Check, ChevronsUpDown, CheckCheck, ChevronDown, Eraser, Pencil, Plus, S
 import { toast } from 'sonner';
 import { extractServerError } from './server-error';
 import { cn } from '@asteby/metacore-ui/lib';
-import { AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, Checkbox, Command, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, Input, Label, Popover, PopoverContent, PopoverTrigger, Separator, Skeleton, Collapsible, CollapsibleContent, CollapsibleTrigger, } from '@asteby/metacore-ui/primitives';
+import { AlertDialog, AlertDialogAction, AlertDialogCancel, AlertDialogContent, AlertDialogDescription, AlertDialogFooter, AlertDialogHeader, AlertDialogTitle, Badge, Button, Card, CardContent, CardDescription, CardHeader, CardTitle, Checkbox, Command, CommandEmpty, CommandGroup, CommandInput, CommandItem, CommandList, Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, Input, Label, Popover, PopoverContent, PopoverTrigger, Skeleton, Collapsible, CollapsibleContent, CollapsibleTrigger, } from '@asteby/metacore-ui/primitives';
 import { DynamicIcon } from './dynamic-icon';
 import { IconPickerField } from './icon-picker-field';
 import { ColorPickerField, DEFAULT_ROLE_COLOR } from './color-picker-field';
@@ -159,6 +159,29 @@ export function suggestRoleIcon(label) {
     }
     return 'Shield';
 }
+/** Label of the synthetic module that hosts the general (non-model) flags. */
+export const GENERAL_MODULE_LABEL = 'Permisos generales';
+/**
+ * The general flags (`general.work_after_hours`, …) as a synthetic module, so
+ * they are picked from the module combobox and edited in the same two-column
+ * action grid as any module's actions (#1021). Each flag keeps its full
+ * capability key through `PermissionActionDef.capability`.
+ */
+export function generalPermissionsModule(general) {
+    return {
+        key: 'general',
+        label: GENERAL_MODULE_LABEL,
+        icon: 'SlidersHorizontal',
+        kind: 'model',
+        actions: general.map((g) => ({
+            key: g.key.replace(/^general\./, ''),
+            label: g.label,
+            description: g.description,
+            capability: g.key,
+            kind: 'custom',
+        })),
+    };
+}
 /**
  * Normalize whatever `loadModules` returned into the canonical grouped shape.
  *
@@ -287,6 +310,16 @@ export function PermissionsManager({ loadModules, loadRoles, loadRolePermissions
     const [deleting, setDeleting] = React.useState(false);
     const loading = groups === null || roles === null;
     const allModules = React.useMemo(() => (groups ? flattenGroups(groups) : []), [groups]);
+    // What the module picker lists: the catalog groups plus a trailing synthetic
+    // group for the general flags. `allModules` / "Otorgar todo" keep using the
+    // plain catalog, so that button's scope does not change.
+    const pickerGroups = React.useMemo(() => {
+        if (!groups)
+            return groups;
+        if (!general || general.length === 0)
+            return groups;
+        return [...groups, { title: '', modules: [generalPermissionsModule(general)] }];
+    }, [groups, general]);
     // ---- initial load: catalog + roles in parallel -------------------------
     React.useEffect(() => {
         let cancelled = false;
@@ -343,7 +376,7 @@ export function PermissionsManager({ loadModules, loadRoles, loadRolePermissions
         // eslint-disable-next-line react-hooks/exhaustive-deps
     }, [activeRoleId]);
     const activeRole = React.useMemo(() => roles?.find((r) => r.id === activeRoleId) ?? null, [roles, activeRoleId]);
-    const activeModule = React.useMemo(() => moduleAtEntry(groups, activeModuleKey)?.module ?? null, [groups, activeModuleKey]);
+    const activeModule = React.useMemo(() => moduleAtEntry(pickerGroups, activeModuleKey)?.module ?? null, [pickerGroups, activeModuleKey]);
     const dirty = baseline !== null && draft !== null && !capabilitySetsEqual(baseline, draft);
     // ---- capability edits ---------------------------------------------------
     const toggleCapability = React.useCallback((cap) => {
@@ -513,7 +546,7 @@ export function PermissionsManager({ loadModules, loadRoles, loadRolePermissions
     const moduleGranted = activeModule && draft ? grantedCountForModule(draft, activeModule) : 0;
     const moduleTotal = activeModule?.actions.length ?? 0;
     const checksDisabled = !activeRole || !draft || loadingPerms || saving;
-    const activeModuleGroupTitle = React.useMemo(() => moduleAtEntry(groups, activeModuleKey)?.group.title ?? '', [groups, activeModuleKey]);
+    const activeModuleGroupTitle = React.useMemo(() => moduleAtEntry(pickerGroups, activeModuleKey)?.group.title ?? '', [pickerGroups, activeModuleKey]);
     // ---- render --------------------------------------------------------------
     if (loadError) {
         return (_jsxs("div", { className: cn('flex flex-col items-center justify-center gap-2 py-16 text-muted-foreground', className), children: [_jsx(Shield, { className: "h-8 w-8 opacity-40" }), _jsx("p", { className: "text-sm", children: "No se pudo cargar el cat\u00E1logo de permisos." })] }));
@@ -528,23 +561,23 @@ export function PermissionsManager({ loadModules, loadRoles, loadRolePermissions
                                     color: DEFAULT_ROLE_COLOR,
                                     icon: 'Shield',
                                     grantAll: false,
-                                }), children: [_jsx(Plus, { className: "mr-1.5 h-4 w-4" }), " Nuevo rol"] })), _jsxs(Button, { variant: "outline", onClick: () => setAllPermissions(true), disabled: checksDisabled || !allCatalogCapabilities.length, title: "Marca todos los permisos de todos los m\u00F3dulos", children: [_jsx(CheckCheck, { className: "mr-1.5 h-4 w-4" }), " Otorgar todo"] }), _jsxs(Button, { variant: "outline", onClick: () => setAllPermissions(false), disabled: checksDisabled || !draft?.size, title: "Quita todos los permisos del rol", children: [_jsx(Eraser, { className: "mr-1.5 h-4 w-4" }), " Quitar todo"] }), _jsxs(Button, { onClick: handleSave, disabled: !dirty || saving || !activeRole, className: "bg-emerald-600 text-white hover:bg-emerald-700", children: [_jsx(Save, { className: "mr-1.5 h-4 w-4" }), saving ? 'Guardando…' : 'Guardar permisos'] })] })] }), _jsxs("div", { className: "grid items-start gap-4 lg:grid-cols-[340px_1fr]", children: [_jsxs("div", { className: "flex flex-col gap-4", children: [_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-base", children: "Rol" }), _jsx(CardDescription, { children: "Selecciona el rol a configurar." })] }), _jsxs(CardContent, { className: "flex flex-col gap-3", children: [_jsxs("div", { className: "flex items-center gap-1.5", children: [_jsxs(Popover, { open: roleOpen, onOpenChange: setRoleOpen, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", role: "combobox", "aria-expanded": roleOpen, className: "min-w-0 flex-1 justify-between font-normal", children: [_jsxs("span", { className: "flex min-w-0 items-center gap-2", children: [activeRole && (_jsx("span", { className: "flex h-6 w-6 shrink-0 items-center justify-center rounded-md", style: {
-                                                                                        background: `${activeRole.color || '#64748b'}22`,
-                                                                                        color: activeRole.color || '#64748b',
-                                                                                    }, "aria-hidden": "true", children: _jsx(DynamicIcon, { name: activeRole.icon || 'Shield', className: "h-3.5 w-3.5" }) })), _jsx("span", { className: "truncate", children: activeRole
-                                                                                        ? activeRole.label || activeRole.name
-                                                                                        : 'Seleccionar rol…' })] }), _jsx(ChevronsUpDown, { className: "ml-2 h-4 w-4 shrink-0 opacity-50" })] }) }), _jsx(PopoverContent, { className: "w-[280px] p-0", align: "start", children: _jsxs(Command, { children: [_jsx(CommandInput, { placeholder: "Buscar rol\u2026" }), _jsxs(CommandList, { children: [_jsx(CommandEmpty, { children: "Sin resultados." }), _jsx(CommandGroup, { children: (roles ?? []).map((role) => (_jsxs(CommandItem, { value: `${role.label || ''} ${role.name}`, onSelect: () => {
-                                                                                            requestRoleSwitch(role.id);
-                                                                                            setRoleOpen(false);
-                                                                                        }, children: [_jsx("span", { className: "mr-2 flex h-6 w-6 shrink-0 items-center justify-center rounded-md", style: {
-                                                                                                    background: `${role.color || '#64748b'}22`,
-                                                                                                    color: role.color || '#64748b',
-                                                                                                }, "aria-hidden": "true", children: _jsx(DynamicIcon, { name: role.icon || 'Shield', className: "h-3.5 w-3.5" }) }), _jsx("span", { className: "truncate", children: role.label || role.name }), role.id === activeRoleId && (_jsx(Check, { className: "ml-auto h-4 w-4" }))] }, role.id))) })] })] }) })] }), updateRole && (_jsx(Button, { variant: "outline", size: "icon", className: "h-9 w-9 shrink-0", "aria-label": "Editar rol", disabled: !activeRole, onClick: openEditRole, children: _jsx(Pencil, { className: "h-4 w-4" }) })), deleteRole && (_jsx(Button, { variant: "outline", size: "icon", className: "h-9 w-9 shrink-0 text-destructive hover:text-destructive", "aria-label": "Eliminar rol", disabled: !activeRole, onClick: () => setDeleteOpen(true), children: _jsx(Trash2, { className: "h-4 w-4" }) }))] }), (general?.length ?? 0) > 0 && (_jsxs(_Fragment, { children: [_jsx(Separator, {}), _jsxs("div", { children: [_jsx("h3", { className: "mb-2 text-sm font-semibold", children: "Permisos Generales" }), _jsx("div", { className: "flex flex-col gap-2", children: general.map((g) => (_jsx(CapabilityCheck, { checked: draft?.has(g.key) ?? false, disabled: checksDisabled, onToggle: () => toggleCapability(g.key), label: g.label, description: g.description }, g.key))) })] })] }))] })] }), _jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-base", children: "M\u00F3dulo" }), _jsx(CardDescription, { children: "Elige el m\u00F3dulo cuyas acciones quieres configurar." })] }), _jsx(CardContent, { children: _jsxs(Popover, { open: moduleOpen, onOpenChange: setModuleOpen, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", role: "combobox", "aria-expanded": moduleOpen, className: "w-full justify-between font-normal", children: [_jsxs("span", { className: "flex min-w-0 items-center gap-2", children: [activeModule && (_jsx(DynamicIcon, { name: activeModule.icon ||
+                                }), children: [_jsx(Plus, { className: "mr-1.5 h-4 w-4" }), " Nuevo rol"] })), _jsxs(Button, { variant: "outline", onClick: () => setAllPermissions(true), disabled: checksDisabled || !allCatalogCapabilities.length, title: "Marca todos los permisos de todos los m\u00F3dulos", children: [_jsx(CheckCheck, { className: "mr-1.5 h-4 w-4" }), " Otorgar todo"] }), _jsxs(Button, { variant: "outline", onClick: () => setAllPermissions(false), disabled: checksDisabled || !draft?.size, title: "Quita todos los permisos del rol", children: [_jsx(Eraser, { className: "mr-1.5 h-4 w-4" }), " Quitar todo"] }), _jsxs(Button, { onClick: handleSave, disabled: !dirty || saving || !activeRole, className: "bg-emerald-600 text-white hover:bg-emerald-700", children: [_jsx(Save, { className: "mr-1.5 h-4 w-4" }), saving ? 'Guardando…' : 'Guardar permisos'] })] })] }), _jsxs("div", { className: "grid items-start gap-4 lg:grid-cols-[340px_1fr]", children: [_jsxs("div", { className: "flex flex-col gap-4", children: [_jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-base", children: "Rol" }), _jsx(CardDescription, { children: "Selecciona el rol a configurar." })] }), _jsx(CardContent, { className: "flex flex-col gap-3", children: _jsxs("div", { className: "flex items-center gap-1.5", children: [_jsxs(Popover, { open: roleOpen, onOpenChange: setRoleOpen, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", role: "combobox", "aria-expanded": roleOpen, className: "min-w-0 flex-1 justify-between font-normal", children: [_jsxs("span", { className: "flex min-w-0 items-center gap-2", children: [activeRole && (_jsx("span", { className: "flex h-6 w-6 shrink-0 items-center justify-center rounded-md", style: {
+                                                                                    background: `${activeRole.color || '#64748b'}22`,
+                                                                                    color: activeRole.color || '#64748b',
+                                                                                }, "aria-hidden": "true", children: _jsx(DynamicIcon, { name: activeRole.icon || 'Shield', className: "h-3.5 w-3.5" }) })), _jsx("span", { className: "truncate", children: activeRole
+                                                                                    ? activeRole.label || activeRole.name
+                                                                                    : 'Seleccionar rol…' })] }), _jsx(ChevronsUpDown, { className: "ml-2 h-4 w-4 shrink-0 opacity-50" })] }) }), _jsx(PopoverContent, { className: "w-[280px] p-0", align: "start", children: _jsxs(Command, { children: [_jsx(CommandInput, { placeholder: "Buscar rol\u2026" }), _jsxs(CommandList, { children: [_jsx(CommandEmpty, { children: "Sin resultados." }), _jsx(CommandGroup, { children: (roles ?? []).map((role) => (_jsxs(CommandItem, { value: `${role.label || ''} ${role.name}`, onSelect: () => {
+                                                                                        requestRoleSwitch(role.id);
+                                                                                        setRoleOpen(false);
+                                                                                    }, children: [_jsx("span", { className: "mr-2 flex h-6 w-6 shrink-0 items-center justify-center rounded-md", style: {
+                                                                                                background: `${role.color || '#64748b'}22`,
+                                                                                                color: role.color || '#64748b',
+                                                                                            }, "aria-hidden": "true", children: _jsx(DynamicIcon, { name: role.icon || 'Shield', className: "h-3.5 w-3.5" }) }), _jsx("span", { className: "truncate", children: role.label || role.name }), role.id === activeRoleId && (_jsx(Check, { className: "ml-auto h-4 w-4" }))] }, role.id))) })] })] }) })] }), updateRole && (_jsx(Button, { variant: "outline", size: "icon", className: "h-9 w-9 shrink-0", "aria-label": "Editar rol", disabled: !activeRole, onClick: openEditRole, children: _jsx(Pencil, { className: "h-4 w-4" }) })), deleteRole && (_jsx(Button, { variant: "outline", size: "icon", className: "h-9 w-9 shrink-0 text-destructive hover:text-destructive", "aria-label": "Eliminar rol", disabled: !activeRole, onClick: () => setDeleteOpen(true), children: _jsx(Trash2, { className: "h-4 w-4" }) }))] }) })] }), _jsxs(Card, { children: [_jsxs(CardHeader, { children: [_jsx(CardTitle, { className: "text-base", children: "M\u00F3dulo" }), _jsx(CardDescription, { children: "Elige el m\u00F3dulo cuyas acciones quieres configurar." })] }), _jsx(CardContent, { children: _jsxs(Popover, { open: moduleOpen, onOpenChange: setModuleOpen, children: [_jsx(PopoverTrigger, { asChild: true, children: _jsxs(Button, { variant: "outline", role: "combobox", "aria-expanded": moduleOpen, className: "w-full justify-between font-normal", children: [_jsxs("span", { className: "flex min-w-0 items-center gap-2", children: [activeModule && (_jsx(DynamicIcon, { name: activeModule.icon ||
                                                                             (activeModule.kind === 'screen'
                                                                                 ? 'Eye'
                                                                                 : 'Square'), className: "h-4 w-4 shrink-0 opacity-70" })), _jsx("span", { className: "truncate", children: activeModule
                                                                             ? activeModule.label
-                                                                            : 'Seleccionar módulo…' })] }), _jsx(ChevronsUpDown, { className: "ml-2 h-4 w-4 shrink-0 opacity-50" })] }) }), _jsx(PopoverContent, { className: "w-[var(--radix-popover-trigger-width)] min-w-[280px] p-0", align: "start", children: _jsxs(Command, { children: [_jsx(CommandInput, { placeholder: "Buscar m\u00F3dulo\u2026" }), _jsxs(CommandList, { className: "max-h-[360px]", children: [_jsx(CommandEmpty, { children: "Sin m\u00F3dulos." }), (groups ?? []).map((group, gi) => (_jsx(CommandGroup, { heading: group.title || undefined, children: group.modules.map((mod, mi) => (_jsxs(CommandItem, { value: `${group.title} ${mod.label} ${mod.key} ${moduleEntryId(gi, mi)}`, onSelect: () => {
+                                                                            : 'Seleccionar módulo…' })] }), _jsx(ChevronsUpDown, { className: "ml-2 h-4 w-4 shrink-0 opacity-50" })] }) }), _jsx(PopoverContent, { className: "w-[var(--radix-popover-trigger-width)] min-w-[280px] p-0", align: "start", children: _jsxs(Command, { children: [_jsx(CommandInput, { placeholder: "Buscar m\u00F3dulo\u2026" }), _jsxs(CommandList, { className: "max-h-[360px]", children: [_jsx(CommandEmpty, { children: "Sin m\u00F3dulos." }), (pickerGroups ?? []).map((group, gi) => (_jsx(CommandGroup, { heading: group.title || undefined, children: group.modules.map((mod, mi) => (_jsxs(CommandItem, { value: `${group.title} ${mod.label} ${mod.key} ${moduleEntryId(gi, mi)}`, onSelect: () => {
                                                                                 setActiveModuleKey(moduleEntryId(gi, mi));
                                                                                 setModuleOpen(false);
                                                                             }, children: [_jsx(DynamicIcon, { name: mod.icon ||

package/dist/print-document-button.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"print-document-button.d.ts","sourceRoot":"","sources":["../src/print-document-button.tsx"],"names":[],"mappings":"AASA,OAAO,KAAgC,MAAM,OAAO,CAAA;AACpD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE/E,MAAM,WAAW,wBACb,SAAQ,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IACtE,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,IAAI,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;IAChC,qEAAqE;IACrE,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC9B,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;CAC7B;AAED,wBAAgB,mBAAmB,CAAC,EAChC,KAAK,EACL,EAAE,EACF,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,GAAG,IAAI,EACV,EAAE,wBAAwB,qBA+B1B"}
+{"version":3,"file":"print-document-button.d.ts","sourceRoot":"","sources":["../src/print-document-button.tsx"],"names":[],"mappings":"AASA,OAAO,KAAgC,MAAM,OAAO,CAAA;AACpD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE/E,MAAM,WAAW,wBACb,SAAQ,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IACtE,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,IAAI,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAA;IAChC,qEAAqE;IACrE,YAAY,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC9B,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;CAC7B;AAED,wBAAgB,mBAAmB,CAAC,EAChC,KAAK,EACL,EAAE,EACF,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,GAAG,IAAI,EACV,EAAE,wBAAwB,qBAuC1B"}

package/dist/print-document-button.js

@@ -19,7 +19,15 @@ export function PrintDocumentButton({ model, id, documentKey, mode, filename, on
             return;
         setBusy(true);
         try {
-            await printDocument({ model, id, key: documentKey, mode, filename });
+            // A caller that handles errors itself keeps ownership of the error toast.
+            await printDocument({
+                model,
+                id,
+                key: documentKey,
+                mode,
+                filename,
+                feedback: onError ? { progress: true, success: true, error: false } : true,
+            });
         }
         catch (err) {
             onError?.(err);

package/dist/record-mutation-events.d.ts

@@ -0,0 +1,14 @@
+export type RecordMutationKind = 'create' | 'update' | 'delete';
+export declare const RECORD_MUTATION_EVENT = "metacore:record-mutated";
+export interface RecordMutationDetail {
+    /** Model key as the emitter knows it (matched case-insensitively). */
+    model: string;
+    kind: RecordMutationKind;
+}
+/** Announce a successful mutation. Safe to call outside a browser (no-op). */
+export declare function emitRecordMutation(model: string | undefined | null, kind: RecordMutationKind): void;
+/**
+ * Listen for mutations of `model` (case-insensitive). Returns an unsubscribe.
+ */
+export declare function subscribeRecordMutations(model: string | undefined | null, cb: (detail: RecordMutationDetail) => void): () => void;
+//# sourceMappingURL=record-mutation-events.d.ts.map

package/dist/record-mutation-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-mutation-events.d.ts","sourceRoot":"","sources":["../src/record-mutation-events.ts"],"names":[],"mappings":"AASA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE/D,eAAO,MAAM,qBAAqB,4BAA4B,CAAA;AAE9D,MAAM,WAAW,oBAAoB;IACjC,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,kBAAkB,CAAA;CAC3B;AAID,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CASnG;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACpC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAChC,EAAE,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,GAC3C,MAAM,IAAI,CAUZ"}

package/dist/record-mutation-events.js

@@ -0,0 +1,37 @@
+// record-mutation-events — a tiny window-level bus that tells every mounted
+// list (DynamicTable, DynamicKanban) "a record of model X just changed".
+//
+// Why: the lists only reloaded when the *caller* bumped `refreshTrigger`. A
+// create/edit/delete done from a dialog the shell opens (the dynamic record
+// dialog, a federated action modal, a wizard, a confirmation) never reached
+// the table, so the row stayed stale until a manual refresh (#1020). Emitting
+// here decouples the mutation site from the list that displays the model.
+export const RECORD_MUTATION_EVENT = 'metacore:record-mutated';
+const norm = (m) => (m ?? '').trim().toLowerCase();
+/** Announce a successful mutation. Safe to call outside a browser (no-op). */
+export function emitRecordMutation(model, kind) {
+    if (!model || typeof window === 'undefined' || typeof CustomEvent === 'undefined')
+        return;
+    try {
+        window.dispatchEvent(new CustomEvent(RECORD_MUTATION_EVENT, { detail: { model, kind } }));
+    }
+    catch {
+        /* a listener must never break the save flow */
+    }
+}
+/**
+ * Listen for mutations of `model` (case-insensitive). Returns an unsubscribe.
+ */
+export function subscribeRecordMutations(model, cb) {
+    if (typeof window === 'undefined')
+        return () => { };
+    const want = norm(model);
+    const handler = (e) => {
+        const d = e.detail;
+        if (!d || !want || norm(d.model) !== want)
+            return;
+        cb(d);
+    };
+    window.addEventListener(RECORD_MUTATION_EVENT, handler);
+    return () => window.removeEventListener(RECORD_MUTATION_EVENT, handler);
+}

package/dist/types.d.ts

@@ -1,3 +1,4 @@
+import type { OptionFilter } from './option-filter';
 /** One spreadsheet column of a model's import template. Mirrors the kernel's
  *  `modelbase.ImportColumn`. */
 export interface ImportColumnMeta {
@@ -17,6 +18,59 @@ export interface ImportSpecMeta {
     sheetName?: string;
     instructions?: string[];
 }
+/** Paso de renglones de un tipo de documento (usa el editor de renglones del SDK). */
+export interface DocumentFormLines {
+    /** Campo del payload que recibe los renglones. Default: `lines` (o `lines_field` del manifest). */
+    field?: string;
+    /** Columnas opcionales del editor (`discount`, `tax`, `unit`…). */
+    columns?: string[];
+    /** `sale` (precio de lista) o `cost` (compras). Default `sale`. */
+    price_source?: 'sale' | 'cost';
+    /** Al menos un renglón para guardar. Default true. */
+    required?: boolean;
+    /** Título del paso. Default «Renglones». */
+    title?: string;
+}
+/** Un tipo de documento (Factura, Nota de crédito, REP, Global, Traslado…). */
+export interface DocumentFormType {
+    key: string;
+    label: string;
+    description?: string;
+    icon?: string;
+    /** Valor que se escribe en `type_field` (p. ej. `"E"`). Default: `key`. */
+    value?: string;
+    /** Campos del tipo, en el mismo vocabulario que los campos de una acción. */
+    fields: ActionFieldDef[];
+    /** Valores fijos que viajan en el alta de este tipo. */
+    defaults?: Record<string, unknown>;
+    /** Con esto el tipo tiene paso de renglones. */
+    lines?: DocumentFormLines | boolean;
+    /** Endpoint de alta propio de este tipo. Default: el del modelo. */
+    endpoint?: string;
+    /** Texto del botón final. Default «Crear». */
+    submit_label?: string;
+}
+export interface DocumentFormsManifest {
+    /** Columna discriminadora del modelo (p. ej. `"type"`). Sin ella no se escribe el tipo. */
+    type_field?: string;
+    /** Campo por defecto de los renglones. Default `lines`. */
+    lines_field?: string;
+    types: DocumentFormType[];
+}
+/**
+ * Audit columns of a model, served by the kernel (>= v0.188) on the table
+ * metadata. Each value is the COLUMN NAME (the key in the row), not a value;
+ * a key is omitted when the model lacks that column (append-only ledgers have
+ * only `created_*`). Purely additive — older kernels omit `audit` entirely.
+ */
+export interface AuditMeta {
+    created_at?: string;
+    created_by?: string;
+    updated_at?: string;
+    updated_by?: string;
+    deleted_at?: string;
+    deleted_by?: string;
+}
 export interface TableMetadata {
     title: string;
     endpoint: string;
@@ -31,6 +85,18 @@ export interface TableMetadata {
     canExport?: boolean;
     canImport?: boolean;
     canCreate?: boolean;
+    /**
+     * Audit columns (when/who) of the model. Feeds `<AuditInfo>`; absent on
+     * older kernels or models without audit columns.
+     */
+    audit?: AuditMeta;
+    /**
+     * Formularios de alta guiados por tipo de documento (FAC-12). Cuando trae
+     * al menos un tipo, `DynamicCRUDPage` abre `DocumentFormDialog` en lugar del
+     * formulario genérico del modelo. Lo sirve el kernel o el addon; el SDK no
+     * conoce campos fiscales.
+     */
+    document_forms?: DocumentFormsManifest;
     /**
      * Cómo se pinta el alta genérica. `generic` (o ausente) es el botón Crear.
      * `hidden` lo quita. `action` lo quita porque el módulo trae la suya
@@ -303,6 +369,16 @@ export interface ColumnDefinition {
      * widgets — `searchEndpoint` stays as the legacy escape hatch.
      */
     ref?: string;
+    /**
+     * Hides options of this relation/dynamic picker (e.g. cancelled invoices in
+     * the payments selector). One rule or a list (AND), tested client-side
+     * against the option's extra columns (`meta`): `{ field: 'status', not_in:
+     * ['cancelada'] }`. The options endpoint must return that column. Absent →
+     * the picker lists everything (retrocompat). See `option-filter.ts`.
+     */
+    optionFilter?: OptionFilter;
+    /** snake_case alias served by the kernel manifest for `optionFilter`. */
+    option_filter?: OptionFilter;
     /**
      * Write-time rules the SDK also pre-flights. Object form `{regex,min,max,custom}`
      * or a Laravel / go-playground string (`required|min:2|email`).
@@ -443,6 +519,16 @@ export interface ActionFieldDef {
      * `useOptionsResolver` against `/api/options/<ref>?field=id`.
      */
     ref?: string;
+    /**
+     * Hides options of this relation/dynamic picker (e.g. cancelled invoices in
+     * the payments selector). One rule or a list (AND), tested client-side
+     * against the option's extra columns (`meta`): `{ field: 'status', not_in:
+     * ['cancelada'] }`. The options endpoint must return that column. Absent →
+     * the picker lists everything (retrocompat). See `option-filter.ts`.
+     */
+    optionFilter?: OptionFilter;
+    /** snake_case alias served by the kernel manifest for `optionFilter`. */
+    option_filter?: OptionFilter;
     /**
      * snake_case aliases the kernel manifest may serve for a belongs_to FK
      * target instead of `ref`. Treated as equivalent to `ref` by the SDK so a