@btst/stack 3.0.0-rc.1 → 3.0.0-rc.3

package/dist/packages/stack/src/plugins/comments/client/components/pages/moderation-page.internal.mjs

@@ -1,6 +1,6 @@
 "use client";
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
-import { useState } from 'react';
+import { useState, useEffect } from 'react';
 import { Table, TableHeader, TableRow, TableHead, TableBody, TableCell } from '../../../../../../../ui/src/components/table.mjs';
 import { Dialog, DialogContent, DialogHeader, DialogTitle } from '../../../../../../../ui/src/components/dialog.mjs';
 import { AlertDialog, AlertDialogContent, AlertDialogHeader, AlertDialogTitle, AlertDialogDescription, AlertDialogFooter, AlertDialogCancel, AlertDialogAction } from '../../../../../../../ui/src/components/alert-dialog.mjs';
@@ -11,17 +11,23 @@ import { Checkbox } from '../../../../../../../ui/src/components/checkbox.mjs';
 import { Avatar, AvatarImage, AvatarFallback } from '../../../../../../../ui/src/components/avatar.mjs';
 import { CheckCircle, Trash2, Eye, ShieldOff } from 'lucide-react';
 import { formatDistanceToNow } from 'date-fns';
-import { useTranslate, useNotify, useStack, CanAccess } from '@btst/stack/context';
-import { useListState } from '@btst/stack/client';
+import { useTranslate, useNotify, PermissionAccess } from '@btst/stack/context';
+import { useListState } from '@btst/stack/client/hooks';
 import { useRegisterPageAIContext } from '@btst/stack/plugins/ai-chat/client/context';
 import { useSuspenseModerationComments, useUpdateCommentStatus, useDeleteComment } from '../../hooks/use-comments.mjs';
 import { getInitials } from '../../utils.mjs';
 import { Pagination } from '../shared/pagination.mjs';
+import { commentsPermissions } from '../../../../../../../../plugins/comments/permissions.mjs';
+import { MODERATION_LIST_STATE_SCHEMA, resolveModerationStatus } from './moderation-state.mjs';
 
-const LIST_STATE_SCHEMA = {
-  tab: { type: "string", default: "pending" },
-  page: { type: "number", default: 1 }
-};
+function PermissionAccessAll({
+  permissions,
+  children
+}) {
+  const [permission, ...rest] = permissions;
+  if (!permission) return /* @__PURE__ */ jsx(Fragment, { children });
+  return /* @__PURE__ */ jsx(PermissionAccess, { permission, children: /* @__PURE__ */ jsx(PermissionAccessAll, { permissions: rest, children }) });
+}
 function StatusBadge({ status }) {
   const variants = {
     pending: "secondary",
@@ -33,28 +39,35 @@ function StatusBadge({ status }) {
 function ModerationPage({ localization }) {
   const t = useTranslate();
   const notify = useNotify();
-  const { api } = useStack();
   const [listState, setListState] = useListState(
     "comments-moderation",
-    LIST_STATE_SCHEMA
+    MODERATION_LIST_STATE_SCHEMA
   );
-  const activeTab = listState.tab === "approved" || listState.tab === "spam" ? listState.tab : "pending";
+  const activeTab = resolveModerationStatus(listState.tab);
   const currentPage = Math.max(1, Math.floor(listState.page) || 1);
   const [selected, setSelected] = useState(/* @__PURE__ */ new Set());
   const [viewComment, setViewComment] = useState(
     null
   );
   const [deleteIds, setDeleteIds] = useState([]);
-  const config = {
-    apiBaseURL: api?.baseURL ?? "",
-    apiBasePath: api?.basePath ?? ""
-  };
-  const { comments, total, limit, offset, totalPages, refetch } = useSuspenseModerationComments(config, {
+  const { comments, total, limit, offset, totalPages, refetch } = useSuspenseModerationComments({
     status: activeTab,
     page: currentPage
   });
-  const updateStatus = useUpdateCommentStatus(config);
-  const deleteMutation = useDeleteComment(config);
+  const selectedComments = comments.filter(
+    (comment) => selected.has(comment.id)
+  );
+  const hasResolvedSelection = selected.size > 0 && selectedComments.length === selected.size;
+  const deleteComments = comments.filter(
+    (comment) => deleteIds.includes(comment.id)
+  );
+  const hasResolvedDeleteScope = deleteIds.length > 0 && deleteComments.length === deleteIds.length;
+  useEffect(() => {
+    setSelected(/* @__PURE__ */ new Set());
+    setDeleteIds([]);
+  }, [activeTab, currentPage]);
+  const updateStatus = useUpdateCommentStatus();
+  const deleteMutation = useDeleteComment();
   useRegisterPageAIContext({
     routeName: "comments-moderation",
     pageDescription: `${total} ${activeTab} comments in the moderation queue.
@@ -134,7 +147,7 @@ ${comments.slice(0, 5).map(
     }
   };
   const handleBulkApprove = async () => {
-    const ids = [...selected];
+    const ids = selectedComments.map((comment) => comment.id);
     try {
       await Promise.all(
         ids.map((id) => updateStatus.mutateAsync({ id, status: "approved" }))
@@ -176,34 +189,59 @@ ${comments.slice(0, 5).map(
         ] })
       }
     ),
-    selected.size > 0 && /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 p-3 bg-muted rounded-lg", children: [
+    hasResolvedSelection && /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2 p-3 bg-muted rounded-lg", children: [
       /* @__PURE__ */ jsx("span", { className: "text-sm text-muted-foreground", children: (localization?.COMMENTS_MODERATION_SELECTED ?? t("comments.moderation.selected", "{n} selected")).replace("{n}", String(selected.size)) }),
-      activeTab !== "approved" && /* @__PURE__ */ jsx(CanAccess, { resource: "comments:comment", action: "moderate", children: /* @__PURE__ */ jsxs(
-        Button,
+      activeTab !== "approved" && /* @__PURE__ */ jsx(
+        PermissionAccessAll,
         {
-          size: "sm",
-          variant: "outline",
-          onClick: handleBulkApprove,
-          disabled: updateStatus.isPending,
-          children: [
-            /* @__PURE__ */ jsx(CheckCircle, { className: "h-4 w-4 mr-1" }),
-            localization?.COMMENTS_MODERATION_APPROVE_SELECTED ?? t("comments.moderation.approveSelected", "Approve selected")
-          ]
+          permissions: selectedComments.map(
+            (comment) => commentsPermissions.comment.moderate({
+              commentId: comment.id,
+              resourceId: comment.resourceId,
+              resourceType: comment.resourceType,
+              currentStatus: comment.status,
+              nextStatus: "approved"
+            })
+          ),
+          children: /* @__PURE__ */ jsxs(
+            Button,
+            {
+              size: "sm",
+              variant: "outline",
+              onClick: handleBulkApprove,
+              disabled: updateStatus.isPending,
+              children: [
+                /* @__PURE__ */ jsx(CheckCircle, { className: "h-4 w-4 mr-1" }),
+                localization?.COMMENTS_MODERATION_APPROVE_SELECTED ?? t("comments.moderation.approveSelected", "Approve selected")
+              ]
+            }
+          )
         }
-      ) }),
-      /* @__PURE__ */ jsx(CanAccess, { resource: "comments:comment", action: "delete", children: /* @__PURE__ */ jsxs(
-        Button,
+      ),
+      /* @__PURE__ */ jsx(
+        PermissionAccessAll,
         {
-          size: "sm",
-          variant: "outline",
-          className: "text-destructive border-destructive hover:bg-destructive hover:text-destructive-foreground",
-          onClick: () => setDeleteIds([...selected]),
-          children: [
-            /* @__PURE__ */ jsx(Trash2, { className: "h-4 w-4 mr-1" }),
-            localization?.COMMENTS_MODERATION_DELETE_SELECTED ?? t("comments.moderation.deleteSelected", "Delete selected")
-          ]
+          permissions: selectedComments.map(
+            (comment) => commentsPermissions.comment.delete({
+              commentId: comment.id,
+              authorId: comment.authorId
+            })
+          ),
+          children: /* @__PURE__ */ jsxs(
+            Button,
+            {
+              size: "sm",
+              variant: "outline",
+              className: "text-destructive border-destructive hover:bg-destructive hover:text-destructive-foreground",
+              onClick: () => setDeleteIds(selectedComments.map((comment) => comment.id)),
+              children: [
+                /* @__PURE__ */ jsx(Trash2, { className: "h-4 w-4 mr-1" }),
+                localization?.COMMENTS_MODERATION_DELETE_SELECTED ?? t("comments.moderation.deleteSelected", "Delete selected")
+              ]
+            }
+          )
         }
-      ) })
+      )
     ] }),
     comments.length === 0 ? /* @__PURE__ */ jsxs("div", { className: "flex flex-col items-center gap-2 py-16 text-muted-foreground", children: [
       /* @__PURE__ */ jsx(CheckCircle, { className: "h-8 w-8" }),
@@ -269,11 +307,15 @@ ${comments.slice(0, 5).map(
                   }
                 ),
                 activeTab !== "approved" && /* @__PURE__ */ jsx(
-                  CanAccess,
+                  PermissionAccess,
                   {
-                    resource: "comments:comment",
-                    action: "moderate",
-                    params: { id: comment.id },
+                    permission: commentsPermissions.comment.moderate({
+                      commentId: comment.id,
+                      resourceId: comment.resourceId,
+                      resourceType: comment.resourceType,
+                      currentStatus: comment.status,
+                      nextStatus: "approved"
+                    }),
                     children: /* @__PURE__ */ jsx(
                       Button,
                       {
@@ -293,11 +335,15 @@ ${comments.slice(0, 5).map(
                   }
                 ),
                 activeTab !== "spam" && /* @__PURE__ */ jsx(
-                  CanAccess,
+                  PermissionAccess,
                   {
-                    resource: "comments:comment",
-                    action: "moderate",
-                    params: { id: comment.id },
+                    permission: commentsPermissions.comment.moderate({
+                      commentId: comment.id,
+                      resourceId: comment.resourceId,
+                      resourceType: comment.resourceType,
+                      currentStatus: comment.status,
+                      nextStatus: "spam"
+                    }),
                     children: /* @__PURE__ */ jsx(
                       Button,
                       {
@@ -317,11 +363,12 @@ ${comments.slice(0, 5).map(
                   }
                 ),
                 /* @__PURE__ */ jsx(
-                  CanAccess,
+                  PermissionAccess,
                   {
-                    resource: "comments:comment",
-                    action: "delete",
-                    params: { id: comment.id },
+                    permission: commentsPermissions.comment.delete({
+                      commentId: comment.id,
+                      authorId: comment.authorId
+                    }),
                     children: /* @__PURE__ */ jsx(
                       Button,
                       {
@@ -347,7 +394,10 @@ ${comments.slice(0, 5).map(
         {
           currentPage,
           totalPages,
-          onPageChange: (p) => setListState({ page: p }),
+          onPageChange: (p) => {
+            setListState({ page: p });
+            setSelected(/* @__PURE__ */ new Set());
+          },
           total,
           limit,
           offset
@@ -396,11 +446,15 @@ ${comments.slice(0, 5).map(
         ] }),
         /* @__PURE__ */ jsxs("div", { className: "flex justify-end gap-2", children: [
           viewComment.status !== "approved" && /* @__PURE__ */ jsx(
-            CanAccess,
+            PermissionAccess,
             {
-              resource: "comments:comment",
-              action: "moderate",
-              params: { id: viewComment.id },
+              permission: commentsPermissions.comment.moderate({
+                commentId: viewComment.id,
+                resourceId: viewComment.resourceId,
+                resourceType: viewComment.resourceType,
+                currentStatus: viewComment.status,
+                nextStatus: "approved"
+              }),
               children: /* @__PURE__ */ jsxs(
                 Button,
                 {
@@ -420,11 +474,15 @@ ${comments.slice(0, 5).map(
             }
           ),
           viewComment.status !== "spam" && /* @__PURE__ */ jsx(
-            CanAccess,
+            PermissionAccess,
             {
-              resource: "comments:comment",
-              action: "moderate",
-              params: { id: viewComment.id },
+              permission: commentsPermissions.comment.moderate({
+                commentId: viewComment.id,
+                resourceId: viewComment.resourceId,
+                resourceType: viewComment.resourceType,
+                currentStatus: viewComment.status,
+                nextStatus: "spam"
+              }),
               children: /* @__PURE__ */ jsxs(
                 Button,
                 {
@@ -444,11 +502,12 @@ ${comments.slice(0, 5).map(
             }
           ),
           /* @__PURE__ */ jsx(
-            CanAccess,
+            PermissionAccess,
             {
-              resource: "comments:comment",
-              action: "delete",
-              params: { id: viewComment.id },
+              permission: commentsPermissions.comment.delete({
+                commentId: viewComment.id,
+                authorId: viewComment.authorId
+              }),
               children: /* @__PURE__ */ jsxs(
                 Button,
                 {
@@ -472,7 +531,7 @@ ${comments.slice(0, 5).map(
     /* @__PURE__ */ jsx(
       AlertDialog,
       {
-        open: deleteIds.length > 0,
+        open: hasResolvedDeleteScope,
         onOpenChange: (open) => !open && setDeleteIds([]),
         children: /* @__PURE__ */ jsxs(AlertDialogContent, { children: [
           /* @__PURE__ */ jsxs(AlertDialogHeader, { children: [
@@ -494,12 +553,23 @@ ${comments.slice(0, 5).map(
           /* @__PURE__ */ jsxs(AlertDialogFooter, { children: [
             /* @__PURE__ */ jsx(AlertDialogCancel, { children: localization?.COMMENTS_MODERATION_DELETE_CANCEL ?? t("comments.moderation.deleteCancel", "Cancel") }),
             /* @__PURE__ */ jsx(
-              AlertDialogAction,
+              PermissionAccessAll,
               {
-                className: "bg-destructive text-destructive-foreground hover:bg-destructive/90",
-                onClick: () => handleDelete(deleteIds),
-                "data-testid": "confirm-delete-button",
-                children: deleteMutation.isPending ? localization?.COMMENTS_MODERATION_DELETE_DELETING ?? t("comments.moderation.deleteDeleting", "Deleting\u2026") : localization?.COMMENTS_MODERATION_DELETE_CONFIRM ?? t("comments.moderation.deleteConfirm", "Delete")
+                permissions: deleteComments.map(
+                  (comment) => commentsPermissions.comment.delete({
+                    commentId: comment.id,
+                    authorId: comment.authorId
+                  })
+                ),
+                children: /* @__PURE__ */ jsx(
+                  AlertDialogAction,
+                  {
+                    className: "bg-destructive text-destructive-foreground hover:bg-destructive/90",
+                    onClick: () => handleDelete(deleteComments.map((comment) => comment.id)),
+                    "data-testid": "confirm-delete-button",
+                    children: deleteMutation.isPending ? localization?.COMMENTS_MODERATION_DELETE_DELETING ?? t("comments.moderation.deleteDeleting", "Deleting\u2026") : localization?.COMMENTS_MODERATION_DELETE_CONFIRM ?? t("comments.moderation.deleteConfirm", "Delete")
+                  }
+                )
               }
             )
           ] })

package/dist/packages/stack/src/plugins/comments/client/components/pages/moderation-page.mjs

@@ -1,10 +1,14 @@
 "use client";
 import { jsx, jsxs } from 'react/jsx-runtime';
 import { lazy } from 'react';
+import { useListState } from '@btst/stack/client/hooks';
 import { ComposedRoute } from '@btst/stack/client/components';
 import { usePluginOverrides } from '@btst/stack/context';
+import { COMMENTS_PLUGIN_ID } from '../../constants.mjs';
 import { useRouteLifecycle } from '../../../../../../../ui/src/hooks/use-route-lifecycle.mjs';
 import { PageWrapper } from '../shared/page-wrapper.mjs';
+import { commentsPermissions } from '../../../../../../../../plugins/comments/permissions.mjs';
+import { MODERATION_LIST_STATE_SCHEMA, resolveModerationStatus } from './moderation-state.mjs';
 
 const ModerationPageInternal = lazy(
   () => import('./moderation-page.internal.mjs').then((m) => ({
@@ -20,19 +24,27 @@ function ModerationPageSkeleton() {
   ] });
 }
 function ModerationPageComponent() {
+  const [listState] = useListState(
+    "comments-moderation",
+    MODERATION_LIST_STATE_SCHEMA
+  );
+  const status = resolveModerationStatus(listState.tab);
   return /* @__PURE__ */ jsx(
     ComposedRoute,
     {
       path: "/comments/moderation",
       PageComponent: ModerationPageWrapper,
       LoadingComponent: ModerationPageSkeleton,
-      permission: { resource: "comments:comment", action: "moderate" },
+      permission: commentsPermissions.thread.read({
+        scope: "moderation",
+        status
+      }),
       onError: (error) => console.error("[btst/comments] Moderation error:", error)
     }
   );
 }
 function ModerationPageWrapper() {
-  const overrides = usePluginOverrides("comments");
+  const overrides = usePluginOverrides(COMMENTS_PLUGIN_ID);
   useRouteLifecycle({
     routeName: "moderation",
     context: {

package/dist/packages/stack/src/plugins/comments/client/components/pages/moderation-state.cjs

@@ -0,0 +1,12 @@
+'use strict';
+
+const MODERATION_LIST_STATE_SCHEMA = {
+  tab: { type: "string", default: "pending" },
+  page: { type: "number", default: 1 }
+};
+function resolveModerationStatus(tab) {
+  return tab === "approved" || tab === "spam" ? tab : "pending";
+}
+
+exports.MODERATION_LIST_STATE_SCHEMA = MODERATION_LIST_STATE_SCHEMA;
+exports.resolveModerationStatus = resolveModerationStatus;

package/dist/packages/stack/src/plugins/comments/client/components/pages/moderation-state.mjs

@@ -0,0 +1,9 @@
+const MODERATION_LIST_STATE_SCHEMA = {
+  tab: { type: "string", default: "pending" },
+  page: { type: "number", default: 1 }
+};
+function resolveModerationStatus(tab) {
+  return tab === "approved" || tab === "spam" ? tab : "pending";
+}
+
+export { MODERATION_LIST_STATE_SCHEMA, resolveModerationStatus };

package/dist/packages/stack/src/plugins/comments/client/components/pages/my-comments-page.cjs

@@ -5,6 +5,7 @@ const jsxRuntime = require('react/jsx-runtime');
 const React = require('react');
 const components = require('@btst/stack/client/components');
 const context = require('@btst/stack/context');
+const constants = require('../../constants.cjs');
 const useRouteLifecycle = require('../../../../../../../ui/src/hooks/use-route-lifecycle.cjs');
 const pageWrapper = require('../shared/page-wrapper.cjs');
 
@@ -32,7 +33,7 @@ function UserCommentsPageComponent() {
   );
 }
 function UserCommentsPageWrapper() {
-  const overrides = context.usePluginOverrides("comments");
+  const overrides = context.usePluginOverrides(constants.COMMENTS_PLUGIN_ID);
   useRouteLifecycle.useRouteLifecycle({
     routeName: "userComments",
     context: {

package/dist/packages/stack/src/plugins/comments/client/components/pages/my-comments-page.internal.cjs

@@ -11,10 +11,12 @@ const avatar = require('../../../../../../../ui/src/components/avatar.cjs');
 const LucideIcons = require('lucide-react');
 const dateFns = require('date-fns');
 const context = require('@btst/stack/context');
-const client = require('@btst/stack/client');
+const hooks = require('@btst/stack/client/hooks');
+const components = require('@btst/stack/client/components');
 const paginationControls = require('../../../../../../../ui/src/components/pagination-controls.cjs');
 const useComments = require('../../hooks/use-comments.cjs');
 const utils = require('../../utils.cjs');
+const plugins_comments_permissions = require('../../../../../../../../plugins/comments/permissions.cjs');
 
 const PAGE_LIMIT = 20;
 const LIST_STATE_SCHEMA = {
@@ -38,7 +40,6 @@ function UserCommentsPage({
   localization
 }) {
   const t = context.useTranslate();
-  const { api } = context.useStack();
   const { currentUserId: resolvedUserId, isPending: isIdentityPending } = utils.useCurrentUserId();
   if (isIdentityPending) {
     return /* @__PURE__ */ jsxRuntime.jsxs(
@@ -71,40 +72,44 @@ function UserCommentsPage({
     );
   }
   return /* @__PURE__ */ jsxRuntime.jsx(
-    UserCommentsList,
+    components.PermissionRouteAccess,
     {
-      apiBaseURL: api?.baseURL ?? "",
-      apiBasePath: api?.basePath ?? "",
-      currentUserId: resolvedUserId,
-      resourceLinks,
-      localization
+      permission: plugins_comments_permissions.commentsPermissions.thread.read({
+        scope: "own",
+        authorId: resolvedUserId
+      }),
+      children: /* @__PURE__ */ jsxRuntime.jsx(
+        UserCommentsList,
+        {
+          currentUserId: resolvedUserId,
+          resourceLinks,
+          localization
+        }
+      )
     }
   );
 }
 function UserCommentsList({
-  apiBaseURL,
-  apiBasePath,
   currentUserId,
   resourceLinks,
   localization
 }) {
   const t = context.useTranslate();
   const notify = context.useNotify();
-  const [listState, setListState] = client.useListState(
+  const [listState, setListState] = hooks.useListState(
     "comments-my",
     LIST_STATE_SCHEMA
   );
   const page = Math.max(1, Math.floor(listState.page) || 1);
   const [deleteId, setDeleteId] = React.useState(null);
-  const config = { apiBaseURL, apiBasePath };
   const offset = (page - 1) * PAGE_LIMIT;
-  const { comments, total, refetch } = useComments.useSuspenseComments(config, {
+  const { comments, total, refetch } = useComments.useSuspenseComments({
     authorId: currentUserId,
     sort: "desc",
     limit: PAGE_LIMIT,
     offset
   });
-  const deleteMutation = useComments.useDeleteComment(config);
+  const deleteMutation = useComments.useDeleteComment();
   const totalPages = Math.max(1, Math.ceil(total / PAGE_LIMIT));
   const handleDelete = async () => {
     if (!deleteId) return;
@@ -267,19 +272,28 @@ function CommentRow({
     ] }) }),
     /* @__PURE__ */ jsxRuntime.jsx(table.TableCell, { children: /* @__PURE__ */ jsxRuntime.jsx(StatusBadge, { status: comment.status, localization }) }),
     /* @__PURE__ */ jsxRuntime.jsx(table.TableCell, { className: "hidden md:table-cell text-xs text-muted-foreground", children: dateFns.formatDistanceToNow(new Date(comment.createdAt), { addSuffix: true }) }),
-    /* @__PURE__ */ jsxRuntime.jsx(table.TableCell, { children: /* @__PURE__ */ jsxRuntime.jsxs(
-      button.Button,
+    /* @__PURE__ */ jsxRuntime.jsx(table.TableCell, { children: /* @__PURE__ */ jsxRuntime.jsx(
+      context.PermissionAccess,
       {
-        variant: "ghost",
-        size: "icon",
-        className: "h-7 w-7 text-muted-foreground hover:text-destructive",
-        onClick: onDelete,
-        disabled: isDeleting,
-        "data-testid": "my-comment-delete-button",
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Trash2, { className: "h-4 w-4" }),
-          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "sr-only", children: localization?.COMMENTS_MY_DELETE_BUTTON_SR ?? t("comments.my.deleteButtonSr", "Delete comment") })
-        ]
+        permission: plugins_comments_permissions.commentsPermissions.comment.delete({
+          commentId: comment.id,
+          authorId: comment.authorId
+        }),
+        children: /* @__PURE__ */ jsxRuntime.jsxs(
+          button.Button,
+          {
+            variant: "ghost",
+            size: "icon",
+            className: "h-7 w-7 text-muted-foreground hover:text-destructive",
+            onClick: onDelete,
+            disabled: isDeleting,
+            "data-testid": "my-comment-delete-button",
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx(LucideIcons.Trash2, { className: "h-4 w-4" }),
+              /* @__PURE__ */ jsxRuntime.jsx("span", { className: "sr-only", children: localization?.COMMENTS_MY_DELETE_BUTTON_SR ?? t("comments.my.deleteButtonSr", "Delete comment") })
+            ]
+          }
+        )
       }
     ) })
   ] });

package/dist/packages/stack/src/plugins/comments/client/components/pages/my-comments-page.internal.mjs

@@ -8,11 +8,13 @@ import { Badge } from '../../../../../../../ui/src/components/badge.mjs';
 import { Avatar, AvatarImage, AvatarFallback } from '../../../../../../../ui/src/components/avatar.mjs';
 import { LogIn, MessageSquareOff, ExternalLink, Trash2 } from 'lucide-react';
 import { formatDistanceToNow } from 'date-fns';
-import { useTranslate, useStack, useNotify } from '@btst/stack/context';
-import { useListState } from '@btst/stack/client';
+import { useTranslate, useNotify, PermissionAccess } from '@btst/stack/context';
+import { useListState } from '@btst/stack/client/hooks';
+import { PermissionRouteAccess } from '@btst/stack/client/components';
 import { PaginationControls } from '../../../../../../../ui/src/components/pagination-controls.mjs';
 import { useSuspenseComments, useDeleteComment } from '../../hooks/use-comments.mjs';
 import { useCurrentUserId, getInitials } from '../../utils.mjs';
+import { commentsPermissions } from '../../../../../../../../plugins/comments/permissions.mjs';
 
 const PAGE_LIMIT = 20;
 const LIST_STATE_SCHEMA = {
@@ -36,7 +38,6 @@ function UserCommentsPage({
   localization
 }) {
   const t = useTranslate();
-  const { api } = useStack();
   const { currentUserId: resolvedUserId, isPending: isIdentityPending } = useCurrentUserId();
   if (isIdentityPending) {
     return /* @__PURE__ */ jsxs(
@@ -69,19 +70,24 @@ function UserCommentsPage({
     );
   }
   return /* @__PURE__ */ jsx(
-    UserCommentsList,
+    PermissionRouteAccess,
     {
-      apiBaseURL: api?.baseURL ?? "",
-      apiBasePath: api?.basePath ?? "",
-      currentUserId: resolvedUserId,
-      resourceLinks,
-      localization
+      permission: commentsPermissions.thread.read({
+        scope: "own",
+        authorId: resolvedUserId
+      }),
+      children: /* @__PURE__ */ jsx(
+        UserCommentsList,
+        {
+          currentUserId: resolvedUserId,
+          resourceLinks,
+          localization
+        }
+      )
     }
   );
 }
 function UserCommentsList({
-  apiBaseURL,
-  apiBasePath,
   currentUserId,
   resourceLinks,
   localization
@@ -94,15 +100,14 @@ function UserCommentsList({
   );
   const page = Math.max(1, Math.floor(listState.page) || 1);
   const [deleteId, setDeleteId] = useState(null);
-  const config = { apiBaseURL, apiBasePath };
   const offset = (page - 1) * PAGE_LIMIT;
-  const { comments, total, refetch } = useSuspenseComments(config, {
+  const { comments, total, refetch } = useSuspenseComments({
     authorId: currentUserId,
     sort: "desc",
     limit: PAGE_LIMIT,
     offset
   });
-  const deleteMutation = useDeleteComment(config);
+  const deleteMutation = useDeleteComment();
   const totalPages = Math.max(1, Math.ceil(total / PAGE_LIMIT));
   const handleDelete = async () => {
     if (!deleteId) return;
@@ -265,19 +270,28 @@ function CommentRow({
     ] }) }),
     /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(StatusBadge, { status: comment.status, localization }) }),
     /* @__PURE__ */ jsx(TableCell, { className: "hidden md:table-cell text-xs text-muted-foreground", children: formatDistanceToNow(new Date(comment.createdAt), { addSuffix: true }) }),
-    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsxs(
-      Button,
+    /* @__PURE__ */ jsx(TableCell, { children: /* @__PURE__ */ jsx(
+      PermissionAccess,
       {
-        variant: "ghost",
-        size: "icon",
-        className: "h-7 w-7 text-muted-foreground hover:text-destructive",
-        onClick: onDelete,
-        disabled: isDeleting,
-        "data-testid": "my-comment-delete-button",
-        children: [
-          /* @__PURE__ */ jsx(Trash2, { className: "h-4 w-4" }),
-          /* @__PURE__ */ jsx("span", { className: "sr-only", children: localization?.COMMENTS_MY_DELETE_BUTTON_SR ?? t("comments.my.deleteButtonSr", "Delete comment") })
-        ]
+        permission: commentsPermissions.comment.delete({
+          commentId: comment.id,
+          authorId: comment.authorId
+        }),
+        children: /* @__PURE__ */ jsxs(
+          Button,
+          {
+            variant: "ghost",
+            size: "icon",
+            className: "h-7 w-7 text-muted-foreground hover:text-destructive",
+            onClick: onDelete,
+            disabled: isDeleting,
+            "data-testid": "my-comment-delete-button",
+            children: [
+              /* @__PURE__ */ jsx(Trash2, { className: "h-4 w-4" }),
+              /* @__PURE__ */ jsx("span", { className: "sr-only", children: localization?.COMMENTS_MY_DELETE_BUTTON_SR ?? t("comments.my.deleteButtonSr", "Delete comment") })
+            ]
+          }
+        )
       }
     ) })
   ] });