@btst/stack 3.0.0-rc.2 → 3.0.0-rc.3

package/dist/packages/stack/src/plugins/blog/client/components/forms/post-forms.cjs

@@ -18,6 +18,8 @@ const reactHookForm = require('react-hook-form');
 const z = require('zod');
 const imageField = require('./image-field.cjs');
 const context = require('@btst/stack/context');
+const plugins_blog_permissions = require('../../../../../../../../plugins/blog/permissions.cjs');
+const constants = require('../../constants.cjs');
 const emptyList = require('../shared/empty-list.cjs');
 const tagsMultiselect = require('./tags-multiselect.cjs');
 
@@ -53,10 +55,11 @@ function PostFormBody({
   disabled,
   errorMessage,
   setFeaturedImageUploading,
-  initialSlugTouched = false
+  initialSlugTouched = false,
+  publishedPermission
 }) {
   const t = context.useTranslate();
-  const { localization } = context.usePluginOverrides("blog");
+  const { localization } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const [slugTouched, setSlugTouched] = React.useState(initialSlugTouched);
   const requiredAsterisk = localization?.BLOG_FORMS_REQUIRED_ASTERISK ?? t("blog.forms.requiredAsterisk", " *");
   const nameTitle = "title";
@@ -66,6 +69,23 @@ function PostFormBody({
   const nameTags = "tags";
   const nameContent = "content";
   const namePublished = "published";
+  const publishedField = /* @__PURE__ */ jsxRuntime.jsx(
+    form.FormField,
+    {
+      control: form$1.control,
+      name: namePublished,
+      render: ({ field }) => /* @__PURE__ */ jsxRuntime.jsxs(form.FormItem, { className: "flex flex-row items-center justify-between rounded-lg border p-3 shadow-sm", children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-0.5", children: [
+          /* @__PURE__ */ jsxRuntime.jsx(form.FormLabel, { children: localization?.BLOG_FORMS_PUBLISHED_LABEL ?? t("blog.forms.publishedLabel", "Published") }),
+          /* @__PURE__ */ jsxRuntime.jsx(form.FormDescription, { children: localization?.BLOG_FORMS_PUBLISHED_DESCRIPTION ?? t(
+            "blog.forms.publishedDescription",
+            "Toggle to publish immediately"
+          ) })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(form.FormControl, { children: /* @__PURE__ */ jsxRuntime.jsx(_switch.Switch, { checked: !!field.value, onCheckedChange: field.onChange }) })
+      ] })
+    }
+  );
   return /* @__PURE__ */ jsxRuntime.jsx(form.Form, { ...form$1, children: /* @__PURE__ */ jsxRuntime.jsxs("form", { className: "w-full space-y-4", onSubmit: form$1.handleSubmit(onSubmit), children: [
     errorMessage && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "rounded-md border border-red-200 bg-red-50 p-3 text-red-600 text-sm", children: errorMessage }),
     /* @__PURE__ */ jsxRuntime.jsx(
@@ -222,29 +242,7 @@ function PostFormBody({
         ] })
       }
     ),
-    /* @__PURE__ */ jsxRuntime.jsx(
-      form.FormField,
-      {
-        control: form$1.control,
-        name: namePublished,
-        render: ({ field }) => /* @__PURE__ */ jsxRuntime.jsxs(form.FormItem, { className: "flex flex-row items-center justify-between rounded-lg border p-3 shadow-sm", children: [
-          /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-0.5", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(form.FormLabel, { children: localization?.BLOG_FORMS_PUBLISHED_LABEL ?? t("blog.forms.publishedLabel", "Published") }),
-            /* @__PURE__ */ jsxRuntime.jsx(form.FormDescription, { children: localization?.BLOG_FORMS_PUBLISHED_DESCRIPTION ?? t(
-              "blog.forms.publishedDescription",
-              "Toggle to publish immediately"
-            ) })
-          ] }),
-          /* @__PURE__ */ jsxRuntime.jsx(form.FormControl, { children: /* @__PURE__ */ jsxRuntime.jsx(
-            _switch.Switch,
-            {
-              checked: !!field.value,
-              onCheckedChange: field.onChange
-            }
-          ) })
-        ] })
-      }
-    ),
+    publishedPermission ? /* @__PURE__ */ jsxRuntime.jsx(context.PermissionAccess, { permission: publishedPermission, children: publishedField }) : publishedField,
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex gap-2 pt-4", children: [
       /* @__PURE__ */ jsxRuntime.jsx(button.Button, { type: "submit", disabled, children: submitLabel }),
       /* @__PURE__ */ jsxRuntime.jsx(
@@ -298,7 +296,7 @@ const AddPostFormComponent = ({
 }) => {
   const [featuredImageUploading, setFeaturedImageUploading] = React.useState(false);
   const t = context.useTranslate();
-  const { localization } = context.usePluginOverrides("blog");
+  const { localization } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const schema = React.useMemo(() => {
     const required = localizedRequiredFields(t);
     return CustomPostCreateSchema.extend({
@@ -353,7 +351,10 @@ const AddPostFormComponent = ({
       onCancel: onClose,
       disabled: resourceForm.isSubmitting || featuredImageUploading,
       errorMessage: hasFieldErrors ? void 0 : resourceForm.error?.message,
-      setFeaturedImageUploading
+      setFeaturedImageUploading,
+      publishedPermission: plugins_blog_permissions.blogPermissions.post.create({
+        publish: "published"
+      })
     }
   );
 };
@@ -376,7 +377,7 @@ const EditPostFormComponent = ({
   const [featuredImageUploading, setFeaturedImageUploading] = React.useState(false);
   const [deleteDialogOpen, setDeleteDialogOpen] = React.useState(false);
   const t = context.useTranslate();
-  const { localization } = context.usePluginOverrides("blog");
+  const { localization } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const { post } = blogHooks.useSuspensePost(postSlug);
   const notify = context.useNotify();
   const schema = React.useMemo(
@@ -486,51 +487,65 @@ const EditPostFormComponent = ({
         disabled: resourceForm.isSubmitting || featuredImageUploading,
         errorMessage: hasFieldErrors ? void 0 : resourceForm.error?.message,
         setFeaturedImageUploading,
-        initialSlugTouched: !!post?.slug
+        initialSlugTouched: !!post?.slug,
+        publishedPermission: plugins_blog_permissions.blogPermissions.post.update({
+          id: post.id,
+          ...post.authorId ? { authorId: post.authorId } : {},
+          publish: post.published ? "unpublish" : "publish"
+        })
       }
     ),
-    /* @__PURE__ */ jsxRuntime.jsx(context.CanAccess, { resource: "blog:post", action: "delete", params: { id: post.id }, children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full", children: /* @__PURE__ */ jsxRuntime.jsxs(
-      alertDialog.AlertDialog,
+    /* @__PURE__ */ jsxRuntime.jsx(
+      context.PermissionAccess,
       {
-        open: deleteDialogOpen,
-        onOpenChange: setDeleteDialogOpen,
-        children: [
-          /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsxRuntime.jsx(
-            button.Button,
-            {
-              variant: "destructive",
-              type: "button",
-              disabled: resourceForm.isSubmitting || featuredImageUploading || isDeletingPost,
-              className: "mt-4",
-              children: localization?.BLOG_FORMS_DELETE_BUTTON ?? t("blog.forms.deleteButton", "Delete Post")
-            }
-          ) }),
-          /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogContent, { children: [
-            /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogHeader, { children: [
-              /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogTitle, { children: localization?.BLOG_FORMS_DELETE_DIALOG_TITLE ?? t("blog.forms.deleteDialogTitle", "Delete Post") }),
-              /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogDescription, { children: localization?.BLOG_FORMS_DELETE_DIALOG_DESCRIPTION ?? t(
-                "blog.forms.deleteDialogDescription",
-                "Are you sure you want to delete this post? This action cannot be undone."
-              ) })
-            ] }),
-            /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogFooter, { children: [
-              /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogCancel, { disabled: isDeletingPost, children: localization?.BLOG_FORMS_DELETE_DIALOG_CANCEL ?? t("blog.forms.deleteDialogCancel", "Cancel") }),
-              /* @__PURE__ */ jsxRuntime.jsx(
-                alertDialog.AlertDialogAction,
+        permission: plugins_blog_permissions.blogPermissions.post.delete({
+          id: post.id,
+          ...post.authorId ? { authorId: post.authorId } : {}
+        }),
+        children: /* @__PURE__ */ jsxRuntime.jsx("div", { className: "w-full", children: /* @__PURE__ */ jsxRuntime.jsxs(
+          alertDialog.AlertDialog,
+          {
+            open: deleteDialogOpen,
+            onOpenChange: setDeleteDialogOpen,
+            children: [
+              /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsxRuntime.jsx(
+                button.Button,
                 {
-                  onClick: (e) => {
-                    e.preventDefault();
-                    void handleDelete();
-                  },
-                  disabled: isDeletingPost,
-                  children: isDeletingPost ? localization?.BLOG_FORMS_DELETE_PENDING ?? t("blog.forms.deletePending", "Deleting...") : localization?.BLOG_FORMS_DELETE_DIALOG_CONFIRM ?? t("blog.forms.deleteDialogConfirm", "Delete")
+                  variant: "destructive",
+                  type: "button",
+                  disabled: resourceForm.isSubmitting || featuredImageUploading || isDeletingPost,
+                  className: "mt-4",
+                  children: localization?.BLOG_FORMS_DELETE_BUTTON ?? t("blog.forms.deleteButton", "Delete Post")
                 }
-              )
-            ] })
-          ] })
-        ]
+              ) }),
+              /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogContent, { children: [
+                /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogHeader, { children: [
+                  /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogTitle, { children: localization?.BLOG_FORMS_DELETE_DIALOG_TITLE ?? t("blog.forms.deleteDialogTitle", "Delete Post") }),
+                  /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogDescription, { children: localization?.BLOG_FORMS_DELETE_DIALOG_DESCRIPTION ?? t(
+                    "blog.forms.deleteDialogDescription",
+                    "Are you sure you want to delete this post? This action cannot be undone."
+                  ) })
+                ] }),
+                /* @__PURE__ */ jsxRuntime.jsxs(alertDialog.AlertDialogFooter, { children: [
+                  /* @__PURE__ */ jsxRuntime.jsx(alertDialog.AlertDialogCancel, { disabled: isDeletingPost, children: localization?.BLOG_FORMS_DELETE_DIALOG_CANCEL ?? t("blog.forms.deleteDialogCancel", "Cancel") }),
+                  /* @__PURE__ */ jsxRuntime.jsx(
+                    alertDialog.AlertDialogAction,
+                    {
+                      onClick: (e) => {
+                        e.preventDefault();
+                        void handleDelete();
+                      },
+                      disabled: isDeletingPost,
+                      children: isDeletingPost ? localization?.BLOG_FORMS_DELETE_PENDING ?? t("blog.forms.deletePending", "Deleting...") : localization?.BLOG_FORMS_DELETE_DIALOG_CONFIRM ?? t("blog.forms.deleteDialogConfirm", "Delete")
+                    }
+                  )
+                ] })
+              ] })
+            ]
+          }
+        ) })
       }
-    ) }) })
+    )
   ] });
 };
 const EditPostForm = React.memo(

package/dist/packages/stack/src/plugins/blog/client/components/forms/post-forms.mjs

@@ -2,7 +2,7 @@
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 import { createPostSchema, updatePostSchema } from '../../../schemas.mjs';
 import { Button } from '../../../../../../../ui/src/components/button.mjs';
-import { Form, FormField, FormItem, FormLabel, FormControl, FormMessage, FormDescription } from '../../../../../../../ui/src/components/form.mjs';
+import { FormField, FormItem, FormLabel, FormDescription, FormControl, Form, FormMessage } from '../../../../../../../ui/src/components/form.mjs';
 import { Input } from '../../../../../../../ui/src/components/input.mjs';
 import { Switch } from '../../../../../../../ui/src/components/switch.mjs';
 import { Textarea } from '../../../../../../../ui/src/components/textarea.mjs';
@@ -15,7 +15,9 @@ import { memo, useState, useMemo, useEffect, useRef, Suspense, lazy } from 'reac
 import { useForm } from 'react-hook-form';
 import { z } from 'zod';
 import { FeaturedImageField } from './image-field.mjs';
-import { useTranslate, usePluginOverrides, useNotify, CanAccess } from '@btst/stack/context';
+import { useTranslate, usePluginOverrides, PermissionAccess, useNotify } from '@btst/stack/context';
+import { blogPermissions } from '../../../../../../../../plugins/blog/permissions.mjs';
+import { BLOG_PLUGIN_ID } from '../../constants.mjs';
 import { EmptyList } from '../shared/empty-list.mjs';
 import { TagsMultiSelect } from './tags-multiselect.mjs';
 
@@ -51,10 +53,11 @@ function PostFormBody({
   disabled,
   errorMessage,
   setFeaturedImageUploading,
-  initialSlugTouched = false
+  initialSlugTouched = false,
+  publishedPermission
 }) {
   const t = useTranslate();
-  const { localization } = usePluginOverrides("blog");
+  const { localization } = usePluginOverrides(BLOG_PLUGIN_ID);
   const [slugTouched, setSlugTouched] = useState(initialSlugTouched);
   const requiredAsterisk = localization?.BLOG_FORMS_REQUIRED_ASTERISK ?? t("blog.forms.requiredAsterisk", " *");
   const nameTitle = "title";
@@ -64,6 +67,23 @@ function PostFormBody({
   const nameTags = "tags";
   const nameContent = "content";
   const namePublished = "published";
+  const publishedField = /* @__PURE__ */ jsx(
+    FormField,
+    {
+      control: form.control,
+      name: namePublished,
+      render: ({ field }) => /* @__PURE__ */ jsxs(FormItem, { className: "flex flex-row items-center justify-between rounded-lg border p-3 shadow-sm", children: [
+        /* @__PURE__ */ jsxs("div", { className: "space-y-0.5", children: [
+          /* @__PURE__ */ jsx(FormLabel, { children: localization?.BLOG_FORMS_PUBLISHED_LABEL ?? t("blog.forms.publishedLabel", "Published") }),
+          /* @__PURE__ */ jsx(FormDescription, { children: localization?.BLOG_FORMS_PUBLISHED_DESCRIPTION ?? t(
+            "blog.forms.publishedDescription",
+            "Toggle to publish immediately"
+          ) })
+        ] }),
+        /* @__PURE__ */ jsx(FormControl, { children: /* @__PURE__ */ jsx(Switch, { checked: !!field.value, onCheckedChange: field.onChange }) })
+      ] })
+    }
+  );
   return /* @__PURE__ */ jsx(Form, { ...form, children: /* @__PURE__ */ jsxs("form", { className: "w-full space-y-4", onSubmit: form.handleSubmit(onSubmit), children: [
     errorMessage && /* @__PURE__ */ jsx("div", { className: "rounded-md border border-red-200 bg-red-50 p-3 text-red-600 text-sm", children: errorMessage }),
     /* @__PURE__ */ jsx(
@@ -220,29 +240,7 @@ function PostFormBody({
         ] })
       }
     ),
-    /* @__PURE__ */ jsx(
-      FormField,
-      {
-        control: form.control,
-        name: namePublished,
-        render: ({ field }) => /* @__PURE__ */ jsxs(FormItem, { className: "flex flex-row items-center justify-between rounded-lg border p-3 shadow-sm", children: [
-          /* @__PURE__ */ jsxs("div", { className: "space-y-0.5", children: [
-            /* @__PURE__ */ jsx(FormLabel, { children: localization?.BLOG_FORMS_PUBLISHED_LABEL ?? t("blog.forms.publishedLabel", "Published") }),
-            /* @__PURE__ */ jsx(FormDescription, { children: localization?.BLOG_FORMS_PUBLISHED_DESCRIPTION ?? t(
-              "blog.forms.publishedDescription",
-              "Toggle to publish immediately"
-            ) })
-          ] }),
-          /* @__PURE__ */ jsx(FormControl, { children: /* @__PURE__ */ jsx(
-            Switch,
-            {
-              checked: !!field.value,
-              onCheckedChange: field.onChange
-            }
-          ) })
-        ] })
-      }
-    ),
+    publishedPermission ? /* @__PURE__ */ jsx(PermissionAccess, { permission: publishedPermission, children: publishedField }) : publishedField,
     /* @__PURE__ */ jsxs("div", { className: "flex gap-2 pt-4", children: [
       /* @__PURE__ */ jsx(Button, { type: "submit", disabled, children: submitLabel }),
       /* @__PURE__ */ jsx(
@@ -296,7 +294,7 @@ const AddPostFormComponent = ({
 }) => {
   const [featuredImageUploading, setFeaturedImageUploading] = useState(false);
   const t = useTranslate();
-  const { localization } = usePluginOverrides("blog");
+  const { localization } = usePluginOverrides(BLOG_PLUGIN_ID);
   const schema = useMemo(() => {
     const required = localizedRequiredFields(t);
     return CustomPostCreateSchema.extend({
@@ -351,7 +349,10 @@ const AddPostFormComponent = ({
       onCancel: onClose,
       disabled: resourceForm.isSubmitting || featuredImageUploading,
       errorMessage: hasFieldErrors ? void 0 : resourceForm.error?.message,
-      setFeaturedImageUploading
+      setFeaturedImageUploading,
+      publishedPermission: blogPermissions.post.create({
+        publish: "published"
+      })
     }
   );
 };
@@ -374,7 +375,7 @@ const EditPostFormComponent = ({
   const [featuredImageUploading, setFeaturedImageUploading] = useState(false);
   const [deleteDialogOpen, setDeleteDialogOpen] = useState(false);
   const t = useTranslate();
-  const { localization } = usePluginOverrides("blog");
+  const { localization } = usePluginOverrides(BLOG_PLUGIN_ID);
   const { post } = useSuspensePost(postSlug);
   const notify = useNotify();
   const schema = useMemo(
@@ -484,51 +485,65 @@ const EditPostFormComponent = ({
         disabled: resourceForm.isSubmitting || featuredImageUploading,
         errorMessage: hasFieldErrors ? void 0 : resourceForm.error?.message,
         setFeaturedImageUploading,
-        initialSlugTouched: !!post?.slug
+        initialSlugTouched: !!post?.slug,
+        publishedPermission: blogPermissions.post.update({
+          id: post.id,
+          ...post.authorId ? { authorId: post.authorId } : {},
+          publish: post.published ? "unpublish" : "publish"
+        })
       }
     ),
-    /* @__PURE__ */ jsx(CanAccess, { resource: "blog:post", action: "delete", params: { id: post.id }, children: /* @__PURE__ */ jsx("div", { className: "w-full", children: /* @__PURE__ */ jsxs(
-      AlertDialog,
+    /* @__PURE__ */ jsx(
+      PermissionAccess,
       {
-        open: deleteDialogOpen,
-        onOpenChange: setDeleteDialogOpen,
-        children: [
-          /* @__PURE__ */ jsx(AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsx(
-            Button,
-            {
-              variant: "destructive",
-              type: "button",
-              disabled: resourceForm.isSubmitting || featuredImageUploading || isDeletingPost,
-              className: "mt-4",
-              children: localization?.BLOG_FORMS_DELETE_BUTTON ?? t("blog.forms.deleteButton", "Delete Post")
-            }
-          ) }),
-          /* @__PURE__ */ jsxs(AlertDialogContent, { children: [
-            /* @__PURE__ */ jsxs(AlertDialogHeader, { children: [
-              /* @__PURE__ */ jsx(AlertDialogTitle, { children: localization?.BLOG_FORMS_DELETE_DIALOG_TITLE ?? t("blog.forms.deleteDialogTitle", "Delete Post") }),
-              /* @__PURE__ */ jsx(AlertDialogDescription, { children: localization?.BLOG_FORMS_DELETE_DIALOG_DESCRIPTION ?? t(
-                "blog.forms.deleteDialogDescription",
-                "Are you sure you want to delete this post? This action cannot be undone."
-              ) })
-            ] }),
-            /* @__PURE__ */ jsxs(AlertDialogFooter, { children: [
-              /* @__PURE__ */ jsx(AlertDialogCancel, { disabled: isDeletingPost, children: localization?.BLOG_FORMS_DELETE_DIALOG_CANCEL ?? t("blog.forms.deleteDialogCancel", "Cancel") }),
-              /* @__PURE__ */ jsx(
-                AlertDialogAction,
+        permission: blogPermissions.post.delete({
+          id: post.id,
+          ...post.authorId ? { authorId: post.authorId } : {}
+        }),
+        children: /* @__PURE__ */ jsx("div", { className: "w-full", children: /* @__PURE__ */ jsxs(
+          AlertDialog,
+          {
+            open: deleteDialogOpen,
+            onOpenChange: setDeleteDialogOpen,
+            children: [
+              /* @__PURE__ */ jsx(AlertDialogTrigger, { asChild: true, children: /* @__PURE__ */ jsx(
+                Button,
                 {
-                  onClick: (e) => {
-                    e.preventDefault();
-                    void handleDelete();
-                  },
-                  disabled: isDeletingPost,
-                  children: isDeletingPost ? localization?.BLOG_FORMS_DELETE_PENDING ?? t("blog.forms.deletePending", "Deleting...") : localization?.BLOG_FORMS_DELETE_DIALOG_CONFIRM ?? t("blog.forms.deleteDialogConfirm", "Delete")
+                  variant: "destructive",
+                  type: "button",
+                  disabled: resourceForm.isSubmitting || featuredImageUploading || isDeletingPost,
+                  className: "mt-4",
+                  children: localization?.BLOG_FORMS_DELETE_BUTTON ?? t("blog.forms.deleteButton", "Delete Post")
                 }
-              )
-            ] })
-          ] })
-        ]
+              ) }),
+              /* @__PURE__ */ jsxs(AlertDialogContent, { children: [
+                /* @__PURE__ */ jsxs(AlertDialogHeader, { children: [
+                  /* @__PURE__ */ jsx(AlertDialogTitle, { children: localization?.BLOG_FORMS_DELETE_DIALOG_TITLE ?? t("blog.forms.deleteDialogTitle", "Delete Post") }),
+                  /* @__PURE__ */ jsx(AlertDialogDescription, { children: localization?.BLOG_FORMS_DELETE_DIALOG_DESCRIPTION ?? t(
+                    "blog.forms.deleteDialogDescription",
+                    "Are you sure you want to delete this post? This action cannot be undone."
+                  ) })
+                ] }),
+                /* @__PURE__ */ jsxs(AlertDialogFooter, { children: [
+                  /* @__PURE__ */ jsx(AlertDialogCancel, { disabled: isDeletingPost, children: localization?.BLOG_FORMS_DELETE_DIALOG_CANCEL ?? t("blog.forms.deleteDialogCancel", "Cancel") }),
+                  /* @__PURE__ */ jsx(
+                    AlertDialogAction,
+                    {
+                      onClick: (e) => {
+                        e.preventDefault();
+                        void handleDelete();
+                      },
+                      disabled: isDeletingPost,
+                      children: isDeletingPost ? localization?.BLOG_FORMS_DELETE_PENDING ?? t("blog.forms.deletePending", "Deleting...") : localization?.BLOG_FORMS_DELETE_DIALOG_CONFIRM ?? t("blog.forms.deleteDialogConfirm", "Delete")
+                    }
+                  )
+                ] })
+              ] })
+            ]
+          }
+        ) })
       }
-    ) }) })
+    )
   ] });
 };
 const EditPostForm = memo(

package/dist/packages/stack/src/plugins/blog/client/components/pages/404-page.cjs

@@ -4,11 +4,12 @@
 const jsxRuntime = require('react/jsx-runtime');
 const context = require('@btst/stack/context');
 const errorPlaceholder = require('../shared/error-placeholder.cjs');
+const constants = require('../../constants.cjs');
 const pageWrapper = require('../shared/page-wrapper.cjs');
 
 function NotFoundPage({ message }) {
   const t = context.useTranslate();
-  const { localization } = context.usePluginOverrides("blog");
+  const { localization } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const title = localization?.BLOG_PAGE_NOT_FOUND_TITLE ?? t("blog.common.pageNotFoundTitle", "Not Found");
   const desc = message || (localization?.BLOG_PAGE_NOT_FOUND_DESCRIPTION ?? t(
     "blog.common.pageNotFoundDescription",

package/dist/packages/stack/src/plugins/blog/client/components/pages/404-page.mjs

@@ -2,11 +2,12 @@
 import { jsx } from 'react/jsx-runtime';
 import { useTranslate, usePluginOverrides } from '@btst/stack/context';
 import { ErrorPlaceholder } from '../shared/error-placeholder.mjs';
+import { BLOG_PLUGIN_ID } from '../../constants.mjs';
 import { PageWrapper } from '../shared/page-wrapper.mjs';
 
 function NotFoundPage({ message }) {
   const t = useTranslate();
-  const { localization } = usePluginOverrides("blog");
+  const { localization } = usePluginOverrides(BLOG_PLUGIN_ID);
   const title = localization?.BLOG_PAGE_NOT_FOUND_TITLE ?? t("blog.common.pageNotFoundTitle", "Not Found");
   const desc = message || (localization?.BLOG_PAGE_NOT_FOUND_DESCRIPTION ?? t(
     "blog.common.pageNotFoundDescription",

package/dist/packages/stack/src/plugins/blog/client/components/pages/edit-post-page.cjs

@@ -4,27 +4,45 @@
 const jsxRuntime = require('react/jsx-runtime');
 const React = require('react');
 const context = require('@btst/stack/context');
+const constants = require('../../constants.cjs');
 const components = require('@btst/stack/client/components');
 const defaultError = require('../shared/default-error.cjs');
 const index = require('../loading/index.cjs');
 const _404Page = require('./404-page.cjs');
+const blogHooks = require('../../hooks/blog-hooks.cjs');
+const plugins_blog_permissions = require('../../../../../../../../plugins/blog/permissions.cjs');
 
-const EditPostPage = React.lazy(
+const EditPostPageContent = React.lazy(
   () => import('./edit-post-page.internal.cjs').then((m) => ({
     default: m.EditPostPage
   }))
 );
+function AuthorizedEditPostPage({ slug }) {
+  const { post } = blogHooks.useSuspensePost(slug);
+  if (!post) return /* @__PURE__ */ jsxRuntime.jsx(EditPostPageContent, { slug });
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    components.PermissionRouteAccess,
+    {
+      permission: plugins_blog_permissions.blogPermissions.post.update({
+        id: post.id,
+        ...post.authorId ? { authorId: post.authorId } : {},
+        publish: "unchanged"
+      }),
+      LoadingComponent: index.FormLoading,
+      children: /* @__PURE__ */ jsxRuntime.jsx(EditPostPageContent, { slug })
+    }
+  );
+}
 function EditPostPageComponent({ slug }) {
-  const { onRouteError } = context.usePluginOverrides("blog");
+  const { onRouteError } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   return /* @__PURE__ */ jsxRuntime.jsx(
     components.ComposedRoute,
     {
       path: `/blog/${slug}/edit`,
-      PageComponent: EditPostPage,
+      PageComponent: AuthorizedEditPostPage,
       ErrorComponent: defaultError.DefaultError,
       LoadingComponent: index.FormLoading,
       NotFoundComponent: _404Page.NotFoundPage,
-      permission: { resource: "blog:post", action: "update" },
       props: { slug },
       onError: (error) => {
         if (onRouteError) {

package/dist/packages/stack/src/plugins/blog/client/components/pages/edit-post-page.internal.cjs

@@ -6,6 +6,7 @@ const context = require('@btst/stack/context');
 const postForms = require('../forms/post-forms.cjs');
 const pageHeader = require('../shared/page-header.cjs');
 const pageWrapper = require('../shared/page-wrapper.cjs');
+const constants = require('../../constants.cjs');
 const useRouteLifecycle = require('../../../../../../../ui/src/hooks/use-route-lifecycle.cjs');
 const context$1 = require('@btst/stack/plugins/ai-chat/client/context');
 const React = require('react');
@@ -13,7 +14,7 @@ const fillBlogFormHandler = require('./fill-blog-form-handler.cjs');
 
 function EditPostPage({ slug }) {
   const t = context.useTranslate();
-  const overrides = context.usePluginOverrides("blog");
+  const overrides = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const { localization } = overrides;
   const { router } = context.useStack();
   const navigate = router?.navigate;

package/dist/packages/stack/src/plugins/blog/client/components/pages/edit-post-page.internal.mjs

@@ -4,6 +4,7 @@ import { useTranslate, usePluginOverrides, useStack, useBasePath } from '@btst/s
 import { EditPostForm } from '../forms/post-forms.mjs';
 import { PageHeader } from '../shared/page-header.mjs';
 import { PageWrapper } from '../shared/page-wrapper.mjs';
+import { BLOG_PLUGIN_ID } from '../../constants.mjs';
 import { useRouteLifecycle } from '../../../../../../../ui/src/hooks/use-route-lifecycle.mjs';
 import { useRegisterPageAIContext } from '@btst/stack/plugins/ai-chat/client/context';
 import { useRef, useCallback } from 'react';
@@ -11,7 +12,7 @@ import { createFillBlogFormHandler } from './fill-blog-form-handler.mjs';
 
 function EditPostPage({ slug }) {
   const t = useTranslate();
-  const overrides = usePluginOverrides("blog");
+  const overrides = usePluginOverrides(BLOG_PLUGIN_ID);
   const { localization } = overrides;
   const { router } = useStack();
   const navigate = router?.navigate;

package/dist/packages/stack/src/plugins/blog/client/components/pages/edit-post-page.mjs

@@ -2,27 +2,45 @@
 import { jsx } from 'react/jsx-runtime';
 import { lazy } from 'react';
 import { usePluginOverrides } from '@btst/stack/context';
-import { ComposedRoute } from '@btst/stack/client/components';
+import { BLOG_PLUGIN_ID } from '../../constants.mjs';
+import { ComposedRoute, PermissionRouteAccess } from '@btst/stack/client/components';
 import { DefaultError } from '../shared/default-error.mjs';
 import { FormLoading } from '../loading/index.mjs';
 import { NotFoundPage } from './404-page.mjs';
+import { useSuspensePost } from '../../hooks/blog-hooks.mjs';
+import { blogPermissions } from '../../../../../../../../plugins/blog/permissions.mjs';
 
-const EditPostPage = lazy(
+const EditPostPageContent = lazy(
   () => import('./edit-post-page.internal.mjs').then((m) => ({
     default: m.EditPostPage
   }))
 );
+function AuthorizedEditPostPage({ slug }) {
+  const { post } = useSuspensePost(slug);
+  if (!post) return /* @__PURE__ */ jsx(EditPostPageContent, { slug });
+  return /* @__PURE__ */ jsx(
+    PermissionRouteAccess,
+    {
+      permission: blogPermissions.post.update({
+        id: post.id,
+        ...post.authorId ? { authorId: post.authorId } : {},
+        publish: "unchanged"
+      }),
+      LoadingComponent: FormLoading,
+      children: /* @__PURE__ */ jsx(EditPostPageContent, { slug })
+    }
+  );
+}
 function EditPostPageComponent({ slug }) {
-  const { onRouteError } = usePluginOverrides("blog");
+  const { onRouteError } = usePluginOverrides(BLOG_PLUGIN_ID);
   return /* @__PURE__ */ jsx(
     ComposedRoute,
     {
       path: `/blog/${slug}/edit`,
-      PageComponent: EditPostPage,
+      PageComponent: AuthorizedEditPostPage,
       ErrorComponent: DefaultError,
       LoadingComponent: FormLoading,
       NotFoundComponent: NotFoundPage,
-      permission: { resource: "blog:post", action: "update" },
       props: { slug },
       onError: (error) => {
         if (onRouteError) {

package/dist/packages/stack/src/plugins/blog/client/components/pages/home-page.cjs

@@ -4,10 +4,12 @@
 const jsxRuntime = require('react/jsx-runtime');
 const React = require('react');
 const context = require('@btst/stack/context');
+const constants = require('../../constants.cjs');
 const components = require('@btst/stack/client/components');
 const defaultError = require('../shared/default-error.cjs');
 const index = require('../loading/index.cjs');
 const _404Page = require('./404-page.cjs');
+const plugins_blog_permissions = require('../../../../../../../../plugins/blog/permissions.cjs');
 
 const HomePage = React.lazy(
   () => import('./home-page.internal.cjs').then((m) => ({ default: m.HomePage }))
@@ -15,7 +17,7 @@ const HomePage = React.lazy(
 function HomePageComponent({
   published = true
 }) {
-  const { onRouteError } = context.usePluginOverrides("blog");
+  const { onRouteError } = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   return /* @__PURE__ */ jsxRuntime.jsx(
     components.ComposedRoute,
     {
@@ -24,7 +26,9 @@ function HomePageComponent({
       ErrorComponent: defaultError.DefaultError,
       LoadingComponent: index.PostsLoading,
       NotFoundComponent: _404Page.NotFoundPage,
-      permission: published ? void 0 : { resource: "blog:draft", action: "read" },
+      permission: plugins_blog_permissions.blogPermissions.post.read({
+        scope: published ? "published" : "drafts"
+      }),
       props: { published },
       onError: (error) => {
         if (onRouteError) {

package/dist/packages/stack/src/plugins/blog/client/components/pages/home-page.internal.cjs

@@ -8,11 +8,12 @@ const postsList = require('../shared/posts-list.cjs');
 const tagsList = require('../shared/tags-list.cjs');
 const blogHooks = require('../../hooks/blog-hooks.cjs');
 const context = require('@btst/stack/context');
+const constants = require('../../constants.cjs');
 const useRouteLifecycle = require('../../../../../../../ui/src/hooks/use-route-lifecycle.cjs');
 
 function HomePage({ published }) {
   const t = context.useTranslate();
-  const overrides = context.usePluginOverrides("blog");
+  const overrides = context.usePluginOverrides(constants.BLOG_PLUGIN_ID);
   const { localization } = overrides;
   useRouteLifecycle.useRouteLifecycle({
     routeName: published ? "posts" : "drafts",