@cat-factory/app 0.128.0 → 0.130.0

package/app/components/layout/CommandBar.vue

@@ -23,6 +23,7 @@ const slack = useSlackStore()
 const documents = useDocumentsStore()
 const tasks = useTasksStore()
 const library = useFragmentLibraryStore()
+const access = useWorkspaceAccess()
 
 const open = computed({
   get: () => ui.commandBarOpen,
@@ -42,17 +43,21 @@ const commands = computed<Command[]>(() => {
   const groupAccount = t('layout.commandBar.groups.account')
 
   // ---- Create -------------------------------------------------------------
-  list.push({
-    id: 'new-pipeline',
-    label: t('layout.commandBar.cmd.newPipeline'),
-    group: groupCreate,
-    icon: 'i-lucide-workflow',
-    keywords: t('layout.commandBar.keywords.newPipeline'),
-    run: () => ui.openBuilder(),
-  })
+  // Command entries mirror the SideBar nav gating: each is listed only when the caller
+  // holds the permission its action's writes require (dev-open ⇒ every `can*` is true).
+  if (access.canWriteBoard.value) {
+    list.push({
+      id: 'new-pipeline',
+      label: t('layout.commandBar.cmd.newPipeline'),
+      group: groupCreate,
+      icon: 'i-lucide-workflow',
+      keywords: t('layout.commandBar.keywords.newPipeline'),
+      run: () => ui.openBuilder(),
+    })
+  }
 
   // ---- Repositories -------------------------------------------------------
-  if (github.available) {
+  if (github.available && access.canWriteBoard.value) {
     list.push({
       id: 'add-from-repo',
       label: t('layout.commandBar.cmd.addFromRepo'),
@@ -62,132 +67,139 @@ const commands = computed<Command[]>(() => {
       run: () => ui.openAddService(),
     })
   }
-  list.push({
-    id: 'bootstrap-repo',
-    label: t('layout.commandBar.cmd.bootstrapRepo'),
-    group: groupRepositories,
-    icon: 'i-lucide-git-branch-plus',
-    keywords: t('layout.commandBar.keywords.bootstrapRepo'),
-    run: () => ui.openBootstrap(),
-  })
-
-  // ---- Integrations -------------------------------------------------------
-  if (github.available) {
-    list.push({
-      id: 'github',
-      label: github.connected
-        ? t('layout.commandBar.cmd.githubManage')
-        : t('layout.commandBar.cmd.githubConnect'),
-      group: groupIntegrations,
-      icon: 'i-lucide-github',
-      keywords: t('layout.commandBar.keywords.github'),
-      run: () => ui.openGitHub(),
-    })
-  }
-  if (slack.available) {
+  if (access.canManageIntegrations.value) {
     list.push({
-      id: 'slack',
-      label: slack.connected
-        ? t('layout.commandBar.cmd.slackManage')
-        : t('layout.commandBar.cmd.slackConnect'),
-      group: groupIntegrations,
-      icon: 'i-lucide-slack',
-      keywords: t('layout.commandBar.keywords.slack'),
-      run: () => ui.openSlack(),
+      id: 'bootstrap-repo',
+      label: t('layout.commandBar.cmd.bootstrapRepo'),
+      group: groupRepositories,
+      icon: 'i-lucide-git-branch-plus',
+      keywords: t('layout.commandBar.keywords.bootstrapRepo'),
+      run: () => ui.openBootstrap(),
     })
   }
-  if (documents.available) {
-    for (const src of documents.sources) {
+
+  // ---- Integrations (connection management — `integrations.manage`) --------
+  if (access.canManageIntegrations.value) {
+    if (github.available) {
       list.push({
-        id: `doc-connect-${src.source}`,
-        label: documents.isConnected(src.source)
-          ? t('layout.commandBar.cmd.sourceManage', { source: src.label })
-          : t('layout.commandBar.cmd.sourceConnect', { source: src.label }),
+        id: 'github',
+        label: github.connected
+          ? t('layout.commandBar.cmd.githubManage')
+          : t('layout.commandBar.cmd.githubConnect'),
         group: groupIntegrations,
-        icon: src.icon,
-        keywords: t('layout.commandBar.keywords.documentSource'),
-        run: () => ui.openDocumentConnect(src.source),
+        icon: 'i-lucide-github',
+        keywords: t('layout.commandBar.keywords.github'),
+        run: () => ui.openGitHub(),
       })
     }
-    if (documents.anyConnected) {
+    if (slack.available) {
       list.push({
-        id: 'doc-import',
-        label: t('layout.commandBar.cmd.documentImport'),
+        id: 'slack',
+        label: slack.connected
+          ? t('layout.commandBar.cmd.slackManage')
+          : t('layout.commandBar.cmd.slackConnect'),
         group: groupIntegrations,
-        icon: 'i-lucide-file-down',
-        keywords: t('layout.commandBar.keywords.documentImport'),
-        run: () => ui.openDocumentImport(null),
+        icon: 'i-lucide-slack',
+        keywords: t('layout.commandBar.keywords.slack'),
+        run: () => ui.openSlack(),
       })
     }
-  }
-  if (tasks.available) {
-    for (const src of tasks.sources) {
-      list.push({
-        id: `task-connect-${src.source}`,
-        label: src.available
-          ? t('layout.commandBar.cmd.sourceManage', { source: src.label })
-          : t('layout.commandBar.cmd.sourceConnect', { source: src.label }),
-        group: groupIntegrations,
-        icon: src.icon,
-        keywords: t('layout.commandBar.keywords.taskSource'),
-        run: () => ui.openTaskConnect(src.source),
-      })
+    if (documents.available) {
+      for (const src of documents.sources) {
+        list.push({
+          id: `doc-connect-${src.source}`,
+          label: documents.isConnected(src.source)
+            ? t('layout.commandBar.cmd.sourceManage', { source: src.label })
+            : t('layout.commandBar.cmd.sourceConnect', { source: src.label }),
+          group: groupIntegrations,
+          icon: src.icon,
+          keywords: t('layout.commandBar.keywords.documentSource'),
+          run: () => ui.openDocumentConnect(src.source),
+        })
+      }
+      if (documents.anyConnected) {
+        list.push({
+          id: 'doc-import',
+          label: t('layout.commandBar.cmd.documentImport'),
+          group: groupIntegrations,
+          icon: 'i-lucide-file-down',
+          keywords: t('layout.commandBar.keywords.documentImport'),
+          run: () => ui.openDocumentImport(null),
+        })
+      }
     }
-    if (tasks.anyOffered) {
-      list.push({
-        id: 'task-import',
-        label: t('layout.commandBar.cmd.taskImport'),
-        group: groupIntegrations,
-        icon: 'i-lucide-file-down',
-        keywords: t('layout.commandBar.keywords.taskImport'),
-        run: () => ui.openTaskImport(null),
-      })
+    if (tasks.available) {
+      for (const src of tasks.sources) {
+        list.push({
+          id: `task-connect-${src.source}`,
+          label: src.available
+            ? t('layout.commandBar.cmd.sourceManage', { source: src.label })
+            : t('layout.commandBar.cmd.sourceConnect', { source: src.label }),
+          group: groupIntegrations,
+          icon: src.icon,
+          keywords: t('layout.commandBar.keywords.taskSource'),
+          run: () => ui.openTaskConnect(src.source),
+        })
+      }
+      if (tasks.anyOffered) {
+        list.push({
+          id: 'task-import',
+          label: t('layout.commandBar.cmd.taskImport'),
+          group: groupIntegrations,
+          icon: 'i-lucide-file-down',
+          keywords: t('layout.commandBar.keywords.taskImport'),
+          run: () => ui.openTaskImport(null),
+        })
+      }
     }
   }
 
   // ---- Workspace ----------------------------------------------------------
-  if (library.available) {
+  // Workspace + model configuration and the fragment library are `settings.manage`.
+  if (access.canManageSettings.value) {
+    if (library.available) {
+      list.push({
+        id: 'fragments',
+        label: t('layout.commandBar.cmd.fragments'),
+        group: groupWorkspace,
+        icon: 'i-lucide-book-marked',
+        keywords: t('layout.commandBar.keywords.fragments'),
+        run: () => ui.openFragmentLibrary(),
+      })
+    }
+    list.push({
+      id: 'merge-thresholds',
+      label: t('layout.commandBar.cmd.mergeThresholds'),
+      group: groupWorkspace,
+      icon: 'i-lucide-git-merge',
+      keywords: t('layout.commandBar.keywords.mergeThresholds'),
+      run: () => ui.openWorkspaceSettings('merge'),
+    })
     list.push({
-      id: 'fragments',
-      label: t('layout.commandBar.cmd.fragments'),
+      id: 'workspace-settings',
+      label: t('layout.commandBar.cmd.workspaceSettings'),
       group: groupWorkspace,
-      icon: 'i-lucide-book-marked',
-      keywords: t('layout.commandBar.keywords.fragments'),
-      run: () => ui.openFragmentLibrary(),
+      icon: 'i-lucide-sliders-horizontal',
+      keywords: t('layout.commandBar.keywords.workspaceSettings'),
+      run: () => ui.openWorkspaceSettings(),
+    })
+    list.push({
+      id: 'model-configuration',
+      label: t('layout.commandBar.cmd.modelConfiguration'),
+      group: groupWorkspace,
+      icon: 'i-lucide-cpu',
+      keywords: t('layout.commandBar.keywords.modelConfiguration'),
+      run: () => ui.openModelConfig(),
+    })
+    list.push({
+      id: 'service-fragment-defaults',
+      label: t('layout.commandBar.cmd.serviceFragmentDefaults'),
+      group: groupWorkspace,
+      icon: 'i-lucide-book-open-check',
+      keywords: t('layout.commandBar.keywords.serviceFragmentDefaults'),
+      run: () => ui.openWorkspaceSettings('fragments'),
     })
   }
-  list.push({
-    id: 'merge-thresholds',
-    label: t('layout.commandBar.cmd.mergeThresholds'),
-    group: groupWorkspace,
-    icon: 'i-lucide-git-merge',
-    keywords: t('layout.commandBar.keywords.mergeThresholds'),
-    run: () => ui.openWorkspaceSettings('merge'),
-  })
-  list.push({
-    id: 'workspace-settings',
-    label: t('layout.commandBar.cmd.workspaceSettings'),
-    group: groupWorkspace,
-    icon: 'i-lucide-sliders-horizontal',
-    keywords: t('layout.commandBar.keywords.workspaceSettings'),
-    run: () => ui.openWorkspaceSettings(),
-  })
-  list.push({
-    id: 'model-configuration',
-    label: t('layout.commandBar.cmd.modelConfiguration'),
-    group: groupWorkspace,
-    icon: 'i-lucide-cpu',
-    keywords: t('layout.commandBar.keywords.modelConfiguration'),
-    run: () => ui.openModelConfig(),
-  })
-  list.push({
-    id: 'service-fragment-defaults',
-    label: t('layout.commandBar.cmd.serviceFragmentDefaults'),
-    group: groupWorkspace,
-    icon: 'i-lucide-book-open-check',
-    keywords: t('layout.commandBar.keywords.serviceFragmentDefaults'),
-    run: () => ui.openWorkspaceSettings('fragments'),
-  })
   list.push({
     id: 'account-settings',
     label: t('layout.commandBar.cmd.accountSettings'),
@@ -204,14 +216,16 @@ const commands = computed<Command[]>(() => {
     keywords: t('layout.commandBar.keywords.localModels'),
     run: () => ui.openLocalModels(),
   })
-  list.push({
-    id: 'sandbox',
-    label: t('layout.commandBar.cmd.sandbox'),
-    group: groupWorkspace,
-    icon: 'i-lucide-flask-conical',
-    keywords: t('layout.commandBar.keywords.sandbox'),
-    run: () => ui.openSandbox(),
-  })
+  if (access.canManageIntegrations.value) {
+    list.push({
+      id: 'sandbox',
+      label: t('layout.commandBar.cmd.sandbox'),
+      group: groupWorkspace,
+      icon: 'i-lucide-flask-conical',
+      keywords: t('layout.commandBar.keywords.sandbox'),
+      run: () => ui.openSandbox(),
+    })
+  }
   list.push({
     id: 'keyboard-shortcuts',
     label: t('layout.commandBar.cmd.shortcuts'),

package/app/components/layout/NotificationsInbox.vue

@@ -11,6 +11,7 @@ const { t, te } = useI18n()
 
 const notifications = useNotificationsStore()
 const ui = useUiStore()
+const access = useWorkspaceAccess()
 const execution = useExecutionStore()
 const toast = useToast()
 
@@ -328,6 +329,8 @@ function revealDecision(n: Notification) {
                   variant="soft"
                   size="xs"
                   :loading="busy === n.id"
+                  :disabled="!access.canExecuteRuns.value"
+                  :title="access.canExecuteRuns.value ? undefined : t('access.noRunExecute')"
                   @click="act(n)"
                 >
                   {{ actionLabel(n) }}
@@ -337,7 +340,8 @@ function revealDecision(n: Notification) {
                   color="neutral"
                   variant="ghost"
                   size="xs"
-                  :disabled="busy === n.id"
+                  :disabled="busy === n.id || !access.canExecuteRuns.value"
+                  :title="access.canExecuteRuns.value ? undefined : t('access.noRunExecute')"
                   @click="dismiss(n)"
                 >
                   {{ t('layout.notifications.dismiss') }}