@cedarjs/router 8.0.0-canary.3541 → 8.0.0-canary.3542

package/dist/AuthenticatedRoute.d.ts

@@ -1,9 +1,11 @@
 import React from 'react';
-import type { GeneratedRoutesMap } from './analyzeRoutes.js';
 interface AuthenticatedRouteProps {
     children: React.ReactNode | Thenable<React.ReactNode>;
     roles?: string | string[];
-    unauthenticated: keyof GeneratedRoutesMap;
+    userRoles?: string | string[];
+    orgRoles?: string | string[];
+    unauthenticated: string;
+    unauthorized?: string;
     whileLoadingAuth?: () => React.ReactElement | null;
 }
 export declare const AuthenticatedRoute: React.FC<AuthenticatedRouteProps>;

package/dist/AuthenticatedRoute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticatedRoute.d.ts","sourceRoot":"","sources":["../src/AuthenticatedRoute.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAsB,MAAM,OAAO,CAAA;AAE1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAK5D,UAAU,uBAAuB;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACzB,eAAe,EAAE,MAAM,kBAAkB,CAAA;IACzC,gBAAgB,CAAC,EAAE,MAAM,KAAK,CAAC,YAAY,GAAG,IAAI,CAAA;CACnD;AAED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CA6DhE,CAAA"}
+{"version":3,"file":"AuthenticatedRoute.d.ts","sourceRoot":"","sources":["../src/AuthenticatedRoute.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAA;AAQzB,UAAU,uBAAuB;IAC/B,QAAQ,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACrD,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,KAAK,CAAC,YAAY,GAAG,IAAI,CAAA;CACnD;AAsED,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,EAAE,CAAC,uBAAuB,CA4FhE,CAAA"}

package/dist/AuthenticatedRoute.js

@@ -1,10 +1,51 @@
-import React, { useCallback } from "react";
-import { namedRoutes } from "./namedRoutes.js";
+import React from "react";
+import { useLocation } from "./location.js";
 import { Redirect } from "./redirect.js";
 import { useRouterState } from "./router-context.js";
+import { paramsForRoute, pathParamsText } from "./util.js";
+const REPLACE = { replace: true };
+const useNoOrgRoles = () => null;
+function currentPathParams(routerState, pathname) {
+  const route = Object.values(routerState.routes.pathRouteMap).find(
+    (candidate) => candidate.name === routerState.activeRouteName
+  );
+  if (!route?.path) {
+    return {};
+  }
+  return pathParamsText(route.path, pathname, routerState.paramTypes);
+}
+function redirectPath(routes, name, params) {
+  if (!Object.hasOwn(routes.namedRoutesMap, name)) {
+    throw new Error(`We could not find a route named ${name}`);
+  }
+  const route = Object.values(routes.pathRouteMap).find(
+    (candidate) => candidate.name === name
+  );
+  if (!route) {
+    return routes.namedRoutesMap[name]();
+  }
+  const routeParams = {};
+  for (const [paramName] of paramsForRoute(route.path)) {
+    const value = params[paramName];
+    if (value === void 0) {
+      throw new Error(
+        `Redirecting to route "${name}" requires the route parameter "${paramName}", which the current route doesn't have. Please choose a different route`
+      );
+    }
+    routeParams[paramName] = value;
+  }
+  try {
+    return routes.namedRoutesMap[name](routeParams);
+  } catch {
+    throw new Error(`Could not redirect to the route named ${name}`);
+  }
+}
 const AuthenticatedRoute = ({
   unauthenticated,
+  unauthorized,
   roles,
+  userRoles,
+  orgRoles,
   whileLoadingAuth,
   children
 }) => {
@@ -14,35 +55,48 @@ const AuthenticatedRoute = ({
     isAuthenticated,
     hasRole
   } = routerState.useAuth();
-  const unauthorized = useCallback(() => {
-    return !(isAuthenticated && (!roles || hasRole(roles)));
-  }, [isAuthenticated, roles, hasRole]);
-  if (unauthorized()) {
-    if (authLoading) {
-      return whileLoadingAuth?.() || null;
-    } else {
-      const currentLocation = globalThis.location.pathname + encodeURIComponent(globalThis.location.search);
-      const generatedRoutesMap = namedRoutes;
-      if (!generatedRoutesMap[unauthenticated]) {
-        throw new Error(`We could not find a route named ${unauthenticated}`);
-      }
-      let unauthenticatedPath;
-      try {
-        unauthenticatedPath = generatedRoutesMap[unauthenticated]();
-      } catch (e) {
-        if (e instanceof Error && /Missing parameter .* for route/.test(e.message)) {
-          throw new Error(
-            `Redirecting to route "${unauthenticated}" would require route parameters, which currently is not supported. Please choose a different route`
-          );
-        }
-        throw new Error(
-          `Could not redirect to the route named ${unauthenticated}`
-        );
-      }
-      return /* @__PURE__ */ React.createElement(Redirect, { to: `${unauthenticatedPath}?redirectTo=${currentLocation}` });
+  const { pathname } = useLocation();
+  const pathParams = currentPathParams(routerState, pathname);
+  const useOrgRoles = routerState.useOrgRoles ?? useNoOrgRoles;
+  const hasOrgRole = useOrgRoles(routerState.useAuth, pathParams);
+  if (orgRoles !== void 0 && !hasOrgRole) {
+    if (!routerState.useOrgRoles) {
+      throw new Error(
+        "A PrivateSet with `orgRoles` needs `useOrgRoles` on the Router to check the role with. Please pass `useOrgRoles` from `@cedarjs/tenancy/web`: <Router useAuth={useAuth} useOrgRoles={useOrgRoles}>"
+      );
+    }
+    if (pathParams["orgSlug"] === void 0) {
+      throw new Error(
+        "A PrivateSet with `orgRoles` needs an organization to check the role in, and the route has no `orgSlug` param. Please only use `orgRoles` on routes with `{orgSlug}` in their path, or pass the Router a `useOrgRoles` that finds the organization another way"
+      );
     }
+    throw new Error(
+      "A PrivateSet with `orgRoles` got no role check from the Router's `useOrgRoles` for this route, so there is no organization to check the role in"
+    );
+  }
+  const hasRequiredRoles = (!roles || hasRole(roles)) && (!userRoles || hasRole(userRoles)) && (orgRoles === void 0 || !!hasOrgRole && hasOrgRole(orgRoles));
+  if (isAuthenticated && hasRequiredRoles) {
+    return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+  }
+  if (authLoading) {
+    return whileLoadingAuth?.() || null;
+  }
+  if (isAuthenticated && unauthorized) {
+    return /* @__PURE__ */ React.createElement(
+      Redirect,
+      {
+        to: redirectPath(routerState.routes, unauthorized, pathParams),
+        options: REPLACE
+      }
+    );
   }
-  return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
+  const currentLocation = globalThis.location.pathname + encodeURIComponent(globalThis.location.search);
+  const unauthenticatedPath = redirectPath(
+    routerState.routes,
+    unauthenticated,
+    pathParams
+  );
+  return /* @__PURE__ */ React.createElement(Redirect, { to: `${unauthenticatedPath}?redirectTo=${currentLocation}` });
 };
 export {
   AuthenticatedRoute

package/dist/Set.d.ts

@@ -26,12 +26,35 @@ export interface WrapperProps {
  */
 export type WrapperType = ComponentType<WrapperProps>;
 /**
- * The `roles` prop, which an app with tenancy doesn't have (see
- * `AuthTenancy`): there, every role check says which kind it is.
+ * The role props. An app with tenancy (see `AuthTenancy`) has `userRoles` and
+ * `orgRoles` instead of `roles`: there, every role check says which kind it
+ * is.
  */
 type SetRoles = AuthTenancy extends {
     enabled: true;
-} ? Record<never, never> : {
+} ? {
+    /**
+     * Route is permitted when authenticated and user has any of the
+     * provided roles such as "admin" or ["admin", "editor"], in
+     * `currentUser.roles`, as opposed to a role in the organization they're
+     * in (see `orgRoles`). With `orgRoles` as well, they need both.
+     */
+    userRoles?: string | string[];
+    /**
+     * Route is permitted when authenticated and user has any of the
+     * provided roles such as "owner" or ["owner", "admin"] in the current
+     * organization. With `userRoles` as well, they need both.
+     *
+     * The organization is the one with the route's `orgSlug` param, and
+     * the router checks the role with the `useOrgRoles` passed to it:
+     *
+     *   <Router useAuth={useAuth} useOrgRoles={useOrgRoles}>
+     *
+     * A `PrivateSet` with `orgRoles` throws without `useOrgRoles` on the
+     * router, or on a route without `{orgSlug}` in its path.
+     */
+    orgRoles?: string | string[];
+} : {
     /**
      * Route is permitted when authenticated and user has any of the
      * provided roles such as "admin" or ["admin", "editor"], in
@@ -61,6 +84,13 @@ interface SetProps extends SetRoles {
      * @deprecated Please use `<PrivateSet>` instead and specify this prop there
      */
     unauthenticated?: string;
+    /**
+     * The page name where a user will be redirected when authenticated but
+     * without the required roles
+     *
+     * @deprecated Please use `<PrivateSet>` instead and specify this prop there
+     */
+    unauthorized?: string;
     /** Prerender all pages in the set */
     prerender?: boolean;
     children: ReactNode;
@@ -77,16 +107,28 @@ interface SetProps extends SetRoles {
  *   </Set>
  */
 export declare function Set(props: SetProps): React.JSX.Element;
-type PrivateSetProps = Omit<SetProps, 'private' | 'unauthenticated'> & {
-    /** The page name where a user will be redirected when not authenticated */
+type PrivateSetProps = Omit<SetProps, 'private' | 'unauthenticated' | 'unauthorized'> & {
+    /**
+     * The page name where a user will be redirected when not authenticated.
+     * Also where one without the required roles is redirected, unless the set
+     * has `unauthorized`.
+     */
     unauthenticated: string;
+    /**
+     * The page name where a user will be redirected when authenticated but
+     * without the required roles. Without it, they're redirected to
+     * `unauthenticated`.
+     */
+    unauthorized?: string;
 };
 /** @deprecated Please use `<PrivateSet>` instead */
 export declare function Private(props: PrivateSetProps): React.JSX.Element;
 /**
  * Wraps a set of routes that require the user to be authenticated before
  * rendering. Unauthenticated users are redirected to the route named by
- * `unauthenticated`.
+ * `unauthenticated`, and users without the required roles to the one named by
+ * `unauthorized`. Either route can have path params the current route has,
+ * like `orgSlug`: they're filled in from the current route.
  *
  * Coming from React Router or a similar library and looking for something
  * like `RequireAuth` or `ProtectedRoute`? This is the Cedar equivalent.

package/dist/Set.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Set.d.ts","sourceRoot":"","sources":["../src/Set.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACnE,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;IAC/C,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC,CAAA;AAErD;;;GAGG;AACH,KAAK,QAAQ,GAAG,WAAW,SAAS;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GACpB;IACE;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC1B,CAAA;AAEL,UAAU,QAAS,SAAQ,QAAQ;IACjC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAA;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;IAC5C,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;CAC7C;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,qBAIlC;AAED,KAAK,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,GAAG,iBAAiB,CAAC,GAAG;IACrE,2EAA2E;IAC3E,eAAe,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,oDAAoD;AACpD,wBAAgB,OAAO,CAAC,KAAK,EAAE,eAAe,qBAI7C;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,qBAIhD;AAED,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,KAAG,IAAI,IAAI,YAAY,CAAC,QAAQ,CAOxE,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,MAAM,SAAS,KACd,IAAI,IAAI,YAAY,CAAC,eAAe,CAEtC,CAAA;AAGD,eAAO,MAAM,aAAa,GACxB,MAAM,SAAS,KACd,IAAI,IAAI,YAAY,CAAC,eAAe,CAEtC,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,aAKpB"}
+{"version":3,"file":"Set.d.ts","sourceRoot":"","sources":["../src/Set.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AACnE,OAAO,KAAK,MAAM,OAAO,CAAA;AAEzB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;IAC/C,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC,CAAA;AAErD;;;;GAIG;AACH,KAAK,QAAQ,GAAG,WAAW,SAAS;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjD;IACE;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC7B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC7B,GACD;IACE;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC1B,CAAA;AAEL,UAAU,QAAS,SAAQ,QAAQ;IACjC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,SAAS,WAAW,EAAE,CAAA;IAC3C;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,SAAS,CAAA;IACnB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;IAC5C,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;CAC7C;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,qBAIlC;AAED,KAAK,eAAe,GAAG,IAAI,CACzB,QAAQ,EACR,SAAS,GAAG,iBAAiB,GAAG,cAAc,CAC/C,GAAG;IACF;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,oDAAoD;AACpD,wBAAgB,OAAO,CAAC,KAAK,EAAE,eAAe,qBAI7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,qBAIhD;AAED,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,KAAG,IAAI,IAAI,YAAY,CAAC,QAAQ,CAOxE,CAAA;AAED,eAAO,MAAM,gBAAgB,GAC3B,MAAM,SAAS,KACd,IAAI,IAAI,YAAY,CAAC,eAAe,CAEtC,CAAA;AAGD,eAAO,MAAM,aAAa,GACxB,MAAM,SAAS,KACd,IAAI,IAAI,YAAY,CAAC,eAAe,CAEtC,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,aAKpB"}

package/dist/analyzeRoutes.d.ts

@@ -14,7 +14,10 @@ export type Wrappers = readonly WrapperType[];
 interface SetRenderProps {
     private?: boolean;
     unauthenticated?: string;
+    unauthorized?: string;
     roles?: string | string[];
+    userRoles?: string | string[];
+    orgRoles?: string | string[];
     whileLoadingAuth?: () => ReactElement | null;
 }
 interface Set {

package/dist/analyzeRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyzeRoutes.d.ts","sourceRoot":"","sources":["../src/analyzeRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAQzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,WAAW,CAAA;AAElB,KAAK,gBAAgB,GAAG,MAAM,YAAY,GAAG,IAAI,CAAA;AAIjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,CACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KACtD,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG,SAAS,WAAW,EAAE,CAAA;AAE7C;;;GAGG;AACH,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACzB,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;CAC7C;AAED,UAAU,GAAG;IACX,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,cAAc,CAAA;CACtB;AAuCD,KAAK,SAAS,GAAG,MAAM,CAAA;AAEvB;;;;GAIG;AACH,UAAU,aAAa;IACrB,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAA;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,GAAG,EAAE,CAAA;CACZ;AAED,UAAU,oBAAoB;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAC3C;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,EACnB,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,oBAAoB;;;;;;EAqK1D"}
+{"version":3,"file":"analyzeRoutes.d.ts","sourceRoot":"","sources":["../src/analyzeRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAGpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAQzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,WAAW,CAAA;AAElB,KAAK,gBAAgB,GAAG,MAAM,YAAY,GAAG,IAAI,CAAA;AAIjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,CACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KACtD,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG,SAAS,WAAW,EAAE,CAAA;AAE7C;;;GAGG;AACH,UAAU,cAAc;IACtB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAEzB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,YAAY,GAAG,IAAI,CAAA;CAC7C;AAED,UAAU,GAAG;IACX,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,cAAc,CAAA;CACtB;AAmDD,KAAK,SAAS,GAAG,MAAM,CAAA;AAEvB;;;;GAIG;AACH,UAAU,aAAa;IACrB,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAA;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,GAAG,EAAE,CAAA;CACZ;AAED,UAAU,oBAAoB;IAC5B,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAC3C;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,EACnB,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,oBAAoB;;;;;;EAqK1D"}

package/dist/analyzeRoutes.js

@@ -19,9 +19,18 @@ function pickSetRenderProps(props) {
   if (props.unauthenticated !== void 0) {
     picked.unauthenticated = props.unauthenticated;
   }
+  if (props.unauthorized !== void 0) {
+    picked.unauthorized = props.unauthorized;
+  }
   if (props.roles !== void 0) {
     picked.roles = props.roles;
   }
+  if (props.userRoles !== void 0) {
+    picked.userRoles = props.userRoles;
+  }
+  if (props.orgRoles !== void 0) {
+    picked.orgRoles = props.orgRoles;
+  }
   if (props.whileLoadingAuth !== void 0) {
     picked.whileLoadingAuth = props.whileLoadingAuth;
   }

package/dist/index.d.ts

@@ -6,6 +6,7 @@ export { Redirect } from './redirect.js';
 export { usePageLoadingContext, PageLoadingContextProvider, } from './PageLoadingContext.js';
 export { useParams, ParamsProvider, ParamsContext } from './params.js';
 export { Router } from './router.js';
+export type { UseOrgRoles } from './router-context.js';
 export { Route } from './Route.js';
 export { namedRoutes as routes } from './namedRoutes.js';
 export { Set, Private, PrivateSet, isSetNode, isPrivateSetNode, isPrivateNode, } from './Set.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,WAAW,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EACL,GAAG,EACH,OAAO,EACP,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEzD,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACtE,cAAc,yBAAyB,CAAA;AACvC,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACxD,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAE/B,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE1E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE1D;;;;;;;;;GASG;AAGH,MAAM,WAAW,eAAe;CAAG;AAGnC,cAAc,uBAAuB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,WAAW,IAAI,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EACL,GAAG,EACH,OAAO,EACP,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEzD,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACtE,cAAc,yBAAyB,CAAA;AACvC,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAA;AACxD,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAE/B,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE1E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE1D;;;;;;;;;GASG;AAGH,MAAM,WAAW,eAAe;CAAG;AAGnC,cAAc,uBAAuB,CAAA"}

package/dist/router-context.d.ts

@@ -5,9 +5,28 @@ import type { AuthContextInterface } from '@cedarjs/auth' with {
 import type { analyzeRoutes } from './analyzeRoutes.js';
 import type { ParamType } from './util.js';
 type UseAuth = () => AuthContextInterface<unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown, unknown>;
+/**
+ * Checks the user's role in the organization of the current route, for
+ * `<PrivateSet orgRoles>`, given the router's `useAuth` and the route's path
+ * params: `null` when the route isn't in an organization. In apps with
+ * tenancy, `useOrgRoles` from `@cedarjs/tenancy/web` is one. The router
+ * calls it like a hook, on every render of a private set.
+ *
+ * One of the app's own can answer in three ways:
+ * - a check, which the router uses for `orgRoles`. One that always returns
+ *   `false` denies access and redirects to `unauthorized`.
+ * - `null`, for no organization: a set with `orgRoles` then throws the
+ *   router's own error.
+ * - throw an error of its own, such as for an organization that's been
+ *   suspended. It reaches the app's error boundary like any error thrown
+ *   while rendering.
+ */
+export type UseOrgRoles = (useAuth: UseAuth, params: Record<string, string>) => ((roles: string | string[]) => boolean) | null;
 export interface RouterState {
     paramTypes?: Record<string, ParamType>;
     useAuth: UseAuth;
+    /** Unset in apps that don't pass one to the router */
+    useOrgRoles?: UseOrgRoles;
     routes: ReturnType<typeof analyzeRoutes>;
     activeRouteName?: string | undefined | null;
 }

package/dist/router-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router-context.d.ts","sourceRoot":"","sources":["../src/router-context.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA6C,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;IACxD,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AAGD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE1C,KAAK,OAAO,GAAG,MAAM,oBAAoB,CACvC,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,CACR,CAAA;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;CAC5C;AAID,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,WAAW,EACX,SAAS,CACV;IACC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAsBtE,CAAA;AAED,eAAO,MAAM,cAAc,mBAU1B,CAAA"}
+{"version":3,"file":"router-context.d.ts","sourceRoot":"","sources":["../src/router-context.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA6C,MAAM,OAAO,CAAA;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;IACxD,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AAGD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE1C,KAAK,OAAO,GAAG,MAAM,oBAAoB,CACvC,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,EACP,OAAO,CACR,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,IAAI,CAAA;AAEnD,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,sDAAsD;IACtD,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,MAAM,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;CAC5C;AAID,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CACtD,WAAW,EACX,SAAS,CACV;IACC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;IAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B;AAED,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAwBtE,CAAA;AAED,eAAO,MAAM,cAAc,mBAU1B,CAAA"}

package/dist/router-context.js

@@ -3,6 +3,7 @@ import { useNoAuth } from "@cedarjs/auth";
 const RouterStateContext = createContext(void 0);
 const RouterContextProvider = ({
   useAuth,
+  useOrgRoles,
   paramTypes,
   routes,
   activeRouteName,
@@ -11,11 +12,12 @@ const RouterContextProvider = ({
   const state = useMemo(
     () => ({
       useAuth: useAuth || useNoAuth,
+      useOrgRoles,
       paramTypes,
       routes,
       activeRouteName
     }),
-    [useAuth, paramTypes, routes, activeRouteName]
+    [useAuth, useOrgRoles, paramTypes, routes, activeRouteName]
   );
   return /* @__PURE__ */ React.createElement(RouterStateContext.Provider, { value: state }, children);
 };

package/dist/router.d.ts

@@ -1,11 +1,31 @@
 import type { ReactNode } from 'react';
 import React from 'react';
-import type { RouterContextProviderProps } from './router-context.js';
+import type { AuthTenancy } from '@cedarjs/auth' with {
+    'resolution-mode': 'import'
+};
+import type { RouterContextProviderProps, UseOrgRoles } from './router-context.js';
 import type { TrailingSlashesTypes } from './util.js';
-export interface RouterProps extends Omit<RouterContextProviderProps, 'routes' | 'activeRouteName'> {
+/**
+ * `useOrgRoles`, only in an app with tenancy (see `AuthTenancy`), where sets
+ * have `orgRoles`
+ */
+type RouterOrgRoles = AuthTenancy extends {
+    enabled: true;
+} ? {
+    /**
+     * Checks the user's role in the organization of the current route, for
+     * `<PrivateSet orgRoles>`. Pass `useOrgRoles` from
+     * `@cedarjs/tenancy/web`:
+     *
+     *   <Router useAuth={useAuth} useOrgRoles={useOrgRoles}>
+     */
+    useOrgRoles?: UseOrgRoles;
+} : Record<never, never>;
+export interface RouterProps extends Omit<RouterContextProviderProps, 'routes' | 'activeRouteName' | 'useOrgRoles'>, RouterOrgRoles {
     trailingSlashes?: TrailingSlashesTypes;
     pageLoadingDelay?: number;
     children: ReactNode;
 }
 export declare const Router: React.FC<RouterProps>;
+export {};
 //# sourceMappingURL=router.d.ts.map

package/dist/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AACpD,OAAO,KAAwB,MAAM,OAAO,CAAA;AAY5C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAKrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAErD,MAAM,WAAW,WAAY,SAAQ,IAAI,CACvC,0BAA0B,EAC1B,QAAQ,GAAG,iBAAiB,CAC7B;IACC,eAAe,CAAC,EAAE,oBAAoB,CAAA;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,WAAW,CAoBxC,CAAA"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AACpD,OAAO,KAAwB,MAAM,OAAO,CAAA;AAE5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;IAC/C,iBAAiB,EAAE,QAAQ;CAC5B,CAAA;AAYD,OAAO,KAAK,EACV,0BAA0B,EAC1B,WAAW,EACZ,MAAM,qBAAqB,CAAA;AAK5B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAErD;;;GAGG;AACH,KAAK,cAAc,GAAG,WAAW,SAAS;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACvD;IACE;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B,GACD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;AAExB,MAAM,WAAW,WACf,SACE,IAAI,CACF,0BAA0B,EAC1B,QAAQ,GAAG,iBAAiB,GAAG,aAAa,CAC7C,EACD,cAAc;IAChB,eAAe,CAAC,EAAE,oBAAoB,CAAA;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,SAAS,CAAA;CACpB;AAsCD,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,WAAW,CAAwB,CAAA"}

package/dist/router.js

@@ -12,8 +12,9 @@ import { RouterContextProvider } from "./router-context.js";
 import { wrapWithSetWrappers } from "./Set.js";
 import { SplashPage } from "./splash-page.js";
 import { matchPath, parseSearch, replaceParams, validatePath } from "./util.js";
-const Router = ({
+const RouterImplementation = ({
   useAuth,
+  useOrgRoles,
   paramTypes,
   pageLoadingDelay,
   trailingSlashes = "never",
@@ -26,6 +27,7 @@ const Router = ({
       LocationAwareRouter,
       {
         useAuth,
+        useOrgRoles,
         paramTypes,
         pageLoadingDelay
       },
@@ -33,8 +35,11 @@ const Router = ({
     ))
   );
 };
+RouterImplementation.displayName = "Router";
+const Router = RouterImplementation;
 const LocationAwareRouter = ({
   useAuth,
+  useOrgRoles,
   paramTypes,
   pageLoadingDelay,
   children
@@ -78,6 +83,7 @@ const LocationAwareRouter = ({
         RouterContextProvider,
         {
           useAuth,
+          useOrgRoles,
           paramTypes,
           routes: analyzeRoutesResult
         },
@@ -122,6 +128,7 @@ const LocationAwareRouter = ({
     RouterContextProvider,
     {
       useAuth,
+      useOrgRoles,
       paramTypes,
       routes: analyzeRoutesResult,
       activeRouteName: name
@@ -154,7 +161,10 @@ const WrappedPage = memo(({ sets, children }) => {
         AuthenticatedRoute,
         {
           unauthenticated,
+          unauthorized: set.props.unauthorized,
           roles: set.props.roles,
+          userRoles: set.props.userRoles,
+          orgRoles: set.props.orgRoles,
           whileLoadingAuth: set.props.whileLoadingAuth
         },
         wrapped

package/dist/rsc/ServerRouter.js

@@ -96,10 +96,15 @@ function hasRole(requiredRoles) {
 }
 const AuthenticatedRoute = ({
   children,
-  roles
+  roles,
+  userRoles,
+  orgRoles
 }) => {
   const { isAuthenticated } = getAuthState();
-  const isAuthorized = isAuthenticated && (!roles || hasRole(roles));
+  if (orgRoles !== void 0) {
+    throw new Error("`orgRoles` is not supported with RSC yet");
+  }
+  const isAuthorized = isAuthenticated && (!roles || hasRole(roles)) && (!userRoles || hasRole(userRoles));
   if (isAuthorized) {
     return /* @__PURE__ */ React.createElement(React.Fragment, null, children);
   }
@@ -126,6 +131,8 @@ const WrappedPage = ({ routeLoaderElement, sets }) => {
         {
           unauthenticated,
           roles: set.props.roles,
+          userRoles: set.props.userRoles,
+          orgRoles: set.props.orgRoles,
           whileLoadingAuth: set.props.whileLoadingAuth
         },
         wrapped

package/dist/util.d.ts

@@ -50,6 +50,16 @@ export declare function matchPath(routeDefinition: string, pathname: string, { u
     match: boolean;
     params: Record<string, unknown>;
 };
+/**
+ * The path params of `pathname` for the route `routeDefinition`, as the text
+ * in the path, without parsing them with their param types. For putting into
+ * another route's path, where a parsed value (whatever a custom type's `parse`
+ * returns, say) wouldn't be the same text.
+ *
+ *  pathParamsText('/post/{id:Int}', '/post/7')
+ *  => { id: '7' }
+ */
+export declare function pathParamsText(routeDefinition: string, pathname: string, userParamTypes?: Record<string, ParamType>): Record<string, string>;
 interface GetRouteRegexOptions {
     matchSubPaths?: boolean;
     allParamTypes?: Record<string, ParamType>;

package/dist/util.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,cAyB3C;AAED,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAA;AAElE,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAA;CAChC;AAwBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,SAAS,CACvB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,EACE,cAAc,EACd,aAAa,GACd,GAAE;IACD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAA;CAIxB;;;;;;EA2CF;AAED,UAAU,oBAAoB;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAC1C;AACD;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,EACE,aAAqB,EACrB,aAA8B,GAC/B,GAAE,oBAAoB,GAAG,SAAc;;;;EA+BzC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,MAAM,EACJ,MAAM,GAAG,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,SAAS,MAW7E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAyC3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,UAgCnC;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAExE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,6BAQtD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,YAMvB"}
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,cA0B3C;AAED,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAA;AAElE,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAA;CAChC;AAwBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,SAAS,CACvB,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,EACE,cAAc,EACd,aAAa,GACd,GAAE;IACD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAA;CAIxB;;;;;;EA2CF;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,MAAM,EAChB,cAAc,GAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAM,0BAgB/C;AAED,UAAU,oBAAoB;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAC1C;AACD;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,EACE,aAAqB,EACrB,aAA8B,GAC/B,GAAE,oBAAoB,GAAG,SAAc;;;;EA+BzC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,MAAM,EACJ,MAAM,GAAG,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,SAAS,MAW7E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAyC3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,UAiCnC;AAED,MAAM,MAAM,mBAAmB,GAAG,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAExE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,6BAQtD;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,YAMvB"}

package/dist/util.js

@@ -1,5 +1,5 @@
 function paramsForRoute(route) {
-  const params = [...route.matchAll(/\{([^}]+)\}/g)];
+  const params = [...route.matchAll(/\{([^{}]+)\}/g)];
   return params.map((match) => match[1]).map((match) => {
     const parts = match.split(":");
     let name = parts[0];
@@ -70,6 +70,19 @@ function matchPath(routeDefinition, pathname, {
   }
   return { match: true };
 }
+function pathParamsText(routeDefinition, pathname, userParamTypes = {}) {
+  const { matchRegex, routeParams } = getRouteRegexAndParams(routeDefinition, {
+    allParamTypes: { ...coreParamTypes, ...userParamTypes }
+  });
+  const match = matchRegex.exec(pathname);
+  const params = {};
+  if (match) {
+    routeParams.forEach(([name], index) => {
+      params[name] = match[index + 1];
+    });
+  }
+  return params;
+}
 function getRouteRegexAndParams(route, {
   matchSubPaths = false,
   allParamTypes = coreParamTypes
@@ -140,7 +153,7 @@ function replaceParams(route, args = {}) {
     const [name, _type, match] = param;
     const value = args[name];
     if (value !== void 0) {
-      path = path.replace(match, value);
+      path = path.replace(match, () => String(value));
     } else {
       throw new Error(
         `Missing parameter '${name}' for route '${route}' when generating a navigation URL.`
@@ -178,6 +191,7 @@ export {
   matchPath,
   paramsForRoute,
   parseSearch,
+  pathParamsText,
   replaceParams,
   validatePath
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cedarjs/router",
-  "version": "8.0.0-canary.3541",
+  "version": "8.0.0-canary.3542",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cedarjs/cedar.git",
@@ -52,15 +52,15 @@
     "test:watch": "vitest watch"
   },
   "dependencies": {
-    "@cedarjs/project-config": "8.0.0-canary.3541",
-    "@cedarjs/server-store": "8.0.0-canary.3541",
+    "@cedarjs/project-config": "8.0.0-canary.3542",
+    "@cedarjs/server-store": "8.0.0-canary.3542",
     "react-server-dom-webpack": "19.3.1",
     "ts-toolbelt": "9.6.0"
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",
-    "@cedarjs/auth": "8.0.0-canary.3541",
-    "@cedarjs/framework-tools": "8.0.0-canary.3541",
+    "@cedarjs/auth": "8.0.0-canary.3542",
+    "@cedarjs/framework-tools": "8.0.0-canary.3542",
     "@testing-library/jest-dom": "6.9.1",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
@@ -74,7 +74,7 @@
     "vitest": "4.1.12"
   },
   "peerDependencies": {
-    "@cedarjs/auth": "8.0.0-canary.3541",
+    "@cedarjs/auth": "8.0.0-canary.3542",
     "react": "19.3.1",
     "react-dom": "19.3.1"
   },