@burdenoff/microfe-devportal 2026.717.1 → 2026.720.2

package/dist/devportal/components/PermissionGuard.d.ts

@@ -2,7 +2,20 @@ import { FC, ReactNode } from 'react';
 import { DevportalPermission } from '../constants/permissions';
 
 interface PermissionGuardProps {
-    permission: DevportalPermission;
+    /**
+     * Required RBAC permission. Optional when `authOnly` is set — self-scoped
+     * developer surfaces gate on authentication only (see `authOnly`).
+     */
+    permission?: DevportalPermission;
+    /**
+     * Self-scoped mode. The corresponding backend fields are gated with
+     * `@rbac(scopeType: "self")` — an authentication gate whose resolvers filter
+     * strictly to the caller's own resources. Such fields carry no RBAC
+     * permission in `myPermissions`, so a permission check would wrongly deny
+     * every normal member. In this mode we render for any authenticated user and
+     * let the backend self-enforce per resource.
+     */
+    authOnly?: boolean;
     children: ReactNode;
 }
 /**

package/dist/devportal/components/PermissionGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionGuard.d.ts","sourceRoot":"","sources":["../../../src/devportal/components/PermissionGuard.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAM3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,oBAAoB;IAC5B,UAAU,EAAE,mBAAmB,CAAC;IAChC,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CAwEpD,CAAC"}
+{"version":3,"file":"PermissionGuard.d.ts","sourceRoot":"","sources":["../../../src/devportal/components/PermissionGuard.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAM3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,UAAU,oBAAoB;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,SAAS,CAAC;CACrB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,EAAE,CAAC,oBAAoB,CA6FpD,CAAC"}

package/dist/devportal/components/PermissionGuard.js

@@ -5,30 +5,33 @@ import { usePermissions as r } from "@burdenoff/fe-libs/shared/providers/shell";
 import { Fragment as i, jsx as a } from "react/jsx-runtime";
 import { useAuth as o } from "@burdenoff/fe-libs/shared/providers/shell/AuthProvider";
 //#region src/devportal/components/PermissionGuard.tsx
-var s = ({ permission: s, children: c }) => {
-	let l = null, u = !1, d = !1, f = !1;
+var s = ({ permission: s, authOnly: c = !1, children: l }) => {
+	let u = null, d = !1, f = !1, p = !1;
 	try {
 		let e = r();
-		l = e.hasPermission, u = e.isLoading, d = e.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1;
+		u = e.hasPermission, d = e.isLoading, f = e.permissions?.permissions?.some((e) => e.resourceType === "rbac" && e.level === "ADMIN") ?? !1;
 	} catch {
-		l = null, u = !1, d = !1;
+		u = null, d = !1, f = !1;
 	}
 	try {
-		f = o().isAuthenticated;
+		p = o().isAuthenticated;
 	} catch {
-		f = !1;
+		p = !1;
 	}
-	let p = typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname.endsWith(".local.burdenoff.com")) && f, { t: m } = n(), h = (e, t) => {
-		let n = m(e);
+	let m = typeof window < "u" && (window.location.hostname === "localhost" || window.location.hostname.endsWith(".local.burdenoff.com")) && p, { t: h } = n(), g = (e, t) => {
+		let n = h(e);
 		return n === e ? t : n;
 	};
-	return u ? /* @__PURE__ */ a("div", {
+	return d ? /* @__PURE__ */ a("div", {
 		className: "flex min-h-screen items-center justify-center bg-bg-canvas",
 		children: /* @__PURE__ */ a(e, {})
-	}) : l && !l(s) && !d && !p ? /* @__PURE__ */ a(t, {
-		title: h("devportal.accessDenied", "Access Denied"),
-		description: h("devportal.noPermissionView", "You don't have permission to view this page.")
-	}) : /* @__PURE__ */ a(i, { children: c });
+	}) : c ? u !== null && !p && !m ? /* @__PURE__ */ a(t, {
+		title: g("devportal.accessDenied", "Access Denied"),
+		description: g("devportal.noPermissionView", "You don't have permission to view this page.")
+	}) : /* @__PURE__ */ a(i, { children: l }) : s && u && !u(s) && !f && !m ? /* @__PURE__ */ a(t, {
+		title: g("devportal.accessDenied", "Access Denied"),
+		description: g("devportal.noPermissionView", "You don't have permission to view this page.")
+	}) : /* @__PURE__ */ a(i, { children: l });
 };
 //#endregion
 export { s as PermissionGuard };

package/dist/devportal/components/PermissionGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"PermissionGuard.js","names":[],"sources":["../../../src/devportal/components/PermissionGuard.tsx"],"sourcesContent":["import type { FC, ReactNode } from \"react\";\nimport { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useAuth } from \"@burdenoff/fe-libs/shared/providers/shell/AuthProvider\";\nimport { AccessDenied } from \"@burdenoff/fe-libs/shared/components\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell/I18nProvider\";\nimport { PageLoadingState } from \"./LoadingState\";\nimport type { DevportalPermission } from \"../constants/permissions\";\n\ninterface PermissionGuardProps {\n  permission: DevportalPermission;\n  children: ReactNode;\n}\n\n/**\n * Wraps page content with a permission check.\n * Shows a loading state while permissions resolve, then either\n * renders children (if permitted) or an AccessDenied screen.\n */\nexport const PermissionGuard: FC<PermissionGuardProps> = ({\n  permission,\n  children,\n}) => {\n  let hasPermission: ((permission: DevportalPermission) => boolean) | null =\n    null;\n  let isLoading = false;\n  let isRbacAdmin = false;\n  let isAuthenticated = false;\n\n  try {\n    const permissions = usePermissions();\n    hasPermission = permissions.hasPermission as (\n      permission: DevportalPermission,\n    ) => boolean;\n    isLoading = permissions.isLoading;\n    isRbacAdmin =\n      permissions.permissions?.permissions?.some(\n        (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n      ) ?? false;\n  } catch {\n    // Standalone/dev mode intentionally allows rendering without shell RBAC context.\n    hasPermission = null;\n    isLoading = false;\n    isRbacAdmin = false;\n  }\n\n  try {\n    const auth = useAuth();\n    isAuthenticated = auth.isAuthenticated;\n  } catch {\n    isAuthenticated = false;\n  }\n\n  const isLocalShellDev =\n    typeof window !== \"undefined\" &&\n    (window.location.hostname === \"localhost\" ||\n      window.location.hostname.endsWith(\".local.burdenoff.com\"));\n\n  const allowLocalShellBypass = isLocalShellDev && isAuthenticated;\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const value = t(key);\n    return value === key ? fallback : value;\n  };\n\n  if (isLoading) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center bg-bg-canvas\">\n        <PageLoadingState />\n      </div>\n    );\n  }\n\n  if (\n    hasPermission &&\n    !hasPermission(permission) &&\n    !isRbacAdmin &&\n    !allowLocalShellBypass\n  ) {\n    return (\n      <AccessDenied\n        title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n        description={tr(\n          \"devportal.noPermissionView\",\n          \"You don't have permission to view this page.\",\n        )}\n      />\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"mappings":";;;;;;;AAkBA,IAAa,KAA6C,EACxD,eACA,kBACI;CACJ,IAAI,IACF,MACE,IAAY,IACZ,IAAc,IACd,IAAkB;AAEtB,KAAI;EACF,IAAM,IAAc,GAAgB;AAKpC,EAJA,IAAgB,EAAY,eAG5B,IAAY,EAAY,WACxB,IACE,EAAY,aAAa,aAAa,MACnC,MAAU,EAAM,iBAAiB,UAAU,EAAM,UAAU,QAC7D,IAAI;SACD;AAIN,EAFA,IAAgB,MAChB,IAAY,IACZ,IAAc;;AAGhB,KAAI;AAEF,MADa,GAAS,CACC;SACjB;AACN,MAAkB;;CAQpB,IAAM,IAJJ,OAAO,SAAW,QACjB,OAAO,SAAS,aAAa,eAC5B,OAAO,SAAS,SAAS,SAAS,uBAAuB,KAEZ,GAC3C,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAQ,EAAE,EAAI;AACpB,SAAO,MAAU,IAAM,IAAW;;AA4BpC,QAzBI,IAEA,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,GAAD,EAAoB,CAAA;EAChB,CAAA,GAKR,KACA,CAAC,EAAc,EAAW,IAC1B,CAAC,KACD,CAAC,IAGC,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAIC,kBAAA,GAAA,EAAG,aAAY,CAAA"}
+{"version":3,"file":"PermissionGuard.js","names":[],"sources":["../../../src/devportal/components/PermissionGuard.tsx"],"sourcesContent":["import type { FC, ReactNode } from \"react\";\nimport { usePermissions } from \"@burdenoff/fe-libs/shared/providers/shell\";\nimport { useAuth } from \"@burdenoff/fe-libs/shared/providers/shell/AuthProvider\";\nimport { AccessDenied } from \"@burdenoff/fe-libs/shared/components\";\nimport { useI18n } from \"@burdenoff/fe-libs/shared/providers/shell/I18nProvider\";\nimport { PageLoadingState } from \"./LoadingState\";\nimport type { DevportalPermission } from \"../constants/permissions\";\n\ninterface PermissionGuardProps {\n  /**\n   * Required RBAC permission. Optional when `authOnly` is set — self-scoped\n   * developer surfaces gate on authentication only (see `authOnly`).\n   */\n  permission?: DevportalPermission;\n  /**\n   * Self-scoped mode. The corresponding backend fields are gated with\n   * `@rbac(scopeType: \"self\")` — an authentication gate whose resolvers filter\n   * strictly to the caller's own resources. Such fields carry no RBAC\n   * permission in `myPermissions`, so a permission check would wrongly deny\n   * every normal member. In this mode we render for any authenticated user and\n   * let the backend self-enforce per resource.\n   */\n  authOnly?: boolean;\n  children: ReactNode;\n}\n\n/**\n * Wraps page content with a permission check.\n * Shows a loading state while permissions resolve, then either\n * renders children (if permitted) or an AccessDenied screen.\n */\nexport const PermissionGuard: FC<PermissionGuardProps> = ({\n  permission,\n  authOnly = false,\n  children,\n}) => {\n  let hasPermission: ((permission: DevportalPermission) => boolean) | null =\n    null;\n  let isLoading = false;\n  let isRbacAdmin = false;\n  let isAuthenticated = false;\n\n  try {\n    const permissions = usePermissions();\n    hasPermission = permissions.hasPermission as (\n      permission: DevportalPermission,\n    ) => boolean;\n    isLoading = permissions.isLoading;\n    isRbacAdmin =\n      permissions.permissions?.permissions?.some(\n        (entry) => entry.resourceType === \"rbac\" && entry.level === \"ADMIN\",\n      ) ?? false;\n  } catch {\n    // Standalone/dev mode intentionally allows rendering without shell RBAC context.\n    hasPermission = null;\n    isLoading = false;\n    isRbacAdmin = false;\n  }\n\n  try {\n    const auth = useAuth();\n    isAuthenticated = auth.isAuthenticated;\n  } catch {\n    isAuthenticated = false;\n  }\n\n  const isLocalShellDev =\n    typeof window !== \"undefined\" &&\n    (window.location.hostname === \"localhost\" ||\n      window.location.hostname.endsWith(\".local.burdenoff.com\"));\n\n  const allowLocalShellBypass = isLocalShellDev && isAuthenticated;\n  const { t } = useI18n();\n  const tr = (key: string, fallback: string): string => {\n    const value = t(key);\n    return value === key ? fallback : value;\n  };\n\n  if (isLoading) {\n    return (\n      <div className=\"flex min-h-screen items-center justify-center bg-bg-canvas\">\n        <PageLoadingState />\n      </div>\n    );\n  }\n\n  // Self-scoped surface: gate on authentication only. The backend\n  // (@rbac scopeType: \"self\") filters to the caller's own resources, so we\n  // must not require an RBAC permission the member legitimately lacks.\n  if (authOnly) {\n    // When the shell RBAC context is unavailable (standalone/dev), render.\n    if (hasPermission !== null && !isAuthenticated && !allowLocalShellBypass) {\n      return (\n        <AccessDenied\n          title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n          description={tr(\n            \"devportal.noPermissionView\",\n            \"You don't have permission to view this page.\",\n          )}\n        />\n      );\n    }\n    return <>{children}</>;\n  }\n\n  if (\n    permission &&\n    hasPermission &&\n    !hasPermission(permission) &&\n    !isRbacAdmin &&\n    !allowLocalShellBypass\n  ) {\n    return (\n      <AccessDenied\n        title={tr(\"devportal.accessDenied\", \"Access Denied\")}\n        description={tr(\n          \"devportal.noPermissionView\",\n          \"You don't have permission to view this page.\",\n        )}\n      />\n    );\n  }\n\n  return <>{children}</>;\n};\n"],"mappings":";;;;;;;AA+BA,IAAa,KAA6C,EACxD,eACA,cAAW,IACX,kBACI;CACJ,IAAI,IACF,MACE,IAAY,IACZ,IAAc,IACd,IAAkB;AAEtB,KAAI;EACF,IAAM,IAAc,GAAgB;AAKpC,EAJA,IAAgB,EAAY,eAG5B,IAAY,EAAY,WACxB,IACE,EAAY,aAAa,aAAa,MACnC,MAAU,EAAM,iBAAiB,UAAU,EAAM,UAAU,QAC7D,IAAI;SACD;AAIN,EAFA,IAAgB,MAChB,IAAY,IACZ,IAAc;;AAGhB,KAAI;AAEF,MADa,GAAS,CACC;SACjB;AACN,MAAkB;;CAQpB,IAAM,IAJJ,OAAO,SAAW,QACjB,OAAO,SAAS,aAAa,eAC5B,OAAO,SAAS,SAAS,SAAS,uBAAuB,KAEZ,GAC3C,EAAE,SAAM,GAAS,EACjB,KAAM,GAAa,MAA6B;EACpD,IAAM,IAAQ,EAAE,EAAI;AACpB,SAAO,MAAU,IAAM,IAAW;;AAgDpC,QA7CI,IAEA,kBAAC,OAAD;EAAK,WAAU;YACb,kBAAC,GAAD,EAAoB,CAAA;EAChB,CAAA,GAON,IAEE,MAAkB,QAAQ,CAAC,KAAmB,CAAC,IAE/C,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAGC,kBAAA,GAAA,EAAG,aAAY,CAAA,GAItB,KACA,KACA,CAAC,EAAc,EAAW,IAC1B,CAAC,KACD,CAAC,IAGC,kBAAC,GAAD;EACE,OAAO,EAAG,0BAA0B,gBAAgB;EACpD,aAAa,EACX,8BACA,+CACD;EACD,CAAA,GAIC,kBAAA,GAAA,EAAG,aAAY,CAAA"}

package/dist/devportal/pages/AdminReviewPage.js

@@ -5,9 +5,9 @@ import { getErrorMessage as l } from "../hooks/useGraphQL.js";
 import { PageLayout as u, PageSection as d } from "../components/PageLayout.js";
 import { PermissionGuard as f } from "../components/PermissionGuard.js";
 import "../components/index.js";
-import { DEVPORTAL_PERMISSIONS as p } from "../constants/permissions.js";
-import { useDevportalPermission as m } from "../hooks/usePermission.js";
+import { useDevportalPermission as p } from "../hooks/usePermission.js";
 import "../hooks/index.js";
+import { DEVPORTAL_PERMISSIONS as m } from "../constants/permissions.js";
 import { useState as h } from "react";
 import { useI18n as g } from "@burdenoff/fe-libs/shared/providers/shell/I18nProvider";
 import { AlertCircle as _, CheckCircle as v, ChevronDown as y, ChevronUp as b, Clock as x, Download as S, Eye as C, FileJson as w, GitBranch as T, Loader2 as E, Package as D, Search as O, XCircle as k } from "lucide-react";
@@ -66,7 +66,7 @@ var M = ({ manifest: e, tr: t }) => {
 	let { navigate: s, basePath: c } = e(), { t: l } = g(), u = (e, t) => {
 		let n = l(e);
 		return n === e ? t : n;
-	}, [d, f] = h(!1), [_, x] = h(""), w = m(p.APP_APPROVE), D = m(p.APP_REJECT), { data: O } = i({
+	}, [d, f] = h(!1), [_, x] = h(""), w = p(m.APP_APPROVE), D = p(m.APP_REJECT), { data: O } = i({
 		variables: { id: t.id },
 		skip: !d,
 		fetchPolicy: "cache-first"
@@ -380,7 +380,7 @@ var M = ({ manifest: e, tr: t }) => {
 		})]
 	});
 }, L = ({ version: e, appId: t, appType: n, onApprove: r, onReject: i, processing: a, tr: o }) => {
-	let [s, c] = h(""), l = m(p.APP_APPROVE), u = m(p.APP_REJECT);
+	let [s, c] = h(""), l = p(m.APP_APPROVE), u = p(m.APP_REJECT);
 	return /* @__PURE__ */ j("div", {
 		className: "rounded-md border bg-bg-surface p-4 space-y-3",
 		children: [
@@ -487,7 +487,7 @@ var M = ({ manifest: e, tr: t }) => {
 	let { t: e } = g(), i = (t, n) => {
 		let r = e(t);
 		return r === t ? n : r;
-	}, [m, y] = h(""), [b, S] = h(/* @__PURE__ */ new Set()), [C, w] = h(/* @__PURE__ */ new Set()), [D, k] = h(null), [M, N] = h(null), P = (e) => S((t) => new Set(t).add(e)), L = (e) => S((t) => {
+	}, [p, y] = h(""), [b, S] = h(/* @__PURE__ */ new Set()), [C, w] = h(/* @__PURE__ */ new Set()), [D, k] = h(null), [M, N] = h(null), P = (e) => S((t) => new Set(t).add(e)), L = (e) => S((t) => {
 		let n = new Set(t);
 		return n.delete(e), n;
 	}), R = (e) => w((t) => new Set(t).add(e)), z = (e) => w((t) => {
@@ -502,7 +502,7 @@ var M = ({ manifest: e, tr: t }) => {
 	}), { data: W, refetch: G } = o({
 		variables: { limit: 100 },
 		fetchPolicy: "cache-and-network"
-	}), [K] = n(), [q] = s(), [J] = r(), [Y] = c(), X = B?.applications?.edges?.map((e) => e.node) ?? [], Z = W?.applicationsWithPendingVersions?.edges?.map((e) => e.node) ?? [], Q = new Set(Z.map((e) => e.id)), $ = m ? X.filter((e) => e.name.toLowerCase().includes(m.toLowerCase()) || (e.shortDescription ?? "").toLowerCase().includes(m.toLowerCase())) : X, ee = async (e, t) => {
+	}), [K] = n(), [q] = s(), [J] = r(), [Y] = c(), X = B?.applications?.edges?.map((e) => e.node) ?? [], Z = W?.applicationsWithPendingVersions?.edges?.map((e) => e.node) ?? [], Q = new Set(Z.map((e) => e.id)), $ = p ? X.filter((e) => e.name.toLowerCase().includes(p.toLowerCase()) || (e.shortDescription ?? "").toLowerCase().includes(p.toLowerCase())) : X, ee = async (e, t) => {
 		P(e), k(null), N(null);
 		try {
 			let n = await K({ variables: {
@@ -589,7 +589,7 @@ var M = ({ manifest: e, tr: t }) => {
 			]
 		})
 	}) : /* @__PURE__ */ A(f, {
-		permission: p.REVIEW_MANAGE,
+		permission: m.REVIEW_MANAGE,
 		children: /* @__PURE__ */ j(u, {
 			title: i("devportal.appReviewQueue", "App Review Queue"),
 			description: i("devportal.appReviewQueueFullDescription", "Review submitted applications for approval or rejection"),
@@ -658,7 +658,7 @@ var M = ({ manifest: e, tr: t }) => {
 					}), /* @__PURE__ */ A("input", {
 						type: "text",
 						placeholder: i("devportal.searchSubmittedApps", "Search submitted apps..."),
-						value: m,
+						value: p,
 						onChange: (e) => y(e.target.value),
 						className: "w-full rounded-md border bg-bg-surface pl-9 pr-4 py-2 text-sm focus:outline-none focus:ring-2 focus:ring-primary"
 					})]
@@ -669,7 +669,7 @@ var M = ({ manifest: e, tr: t }) => {
 						illustration: "empty-data",
 						icon: /* @__PURE__ */ A(v, { size: 32 }),
 						title: i("devportal.noAppsPendingReview", "No apps pending review"),
-						description: m ? i("devportal.noAppsMatchSearch", "No apps match your search") : i("devportal.allApplicationsReviewed", "All submitted applications have been reviewed")
+						description: p ? i("devportal.noAppsMatchSearch", "No apps match your search") : i("devportal.allApplicationsReviewed", "All submitted applications have been reviewed")
 					}) : /* @__PURE__ */ A("div", {
 						className: "space-y-3",
 						children: $.map((e) => /* @__PURE__ */ A(F, {