@ethisyscore/plugin-ui 1.27.1 → 1.30.0

package/dist/index.cjs

@@ -3,7 +3,20 @@
 var plugin = require('@ethisyscore/extension-runtime/plugin');
 var componentsReact = require('@ethisyscore/components-react');
 
-
+// src/index.ts
+function useCurrentUser() {
+  const identity = plugin.useHostIdentity();
+  const user = identity?.user ?? null;
+  if (!user) {
+    return null;
+  }
+  return {
+    id: user.id,
+    // The host binds `fullName`; fall back to composing first + last so a host
+    // that only sets the parts still yields a usable display name.
+    displayName: user.fullName?.trim() || `${user.firstName ?? ""} ${user.lastName ?? ""}`.trim()
+  };
+}
 
 Object.defineProperty(exports, "BridgeClientContext", {
   enumerable: true,
@@ -13,6 +26,10 @@ Object.defineProperty(exports, "ExtensionRuntimeProvider", {
   enumerable: true,
   get: function () { return plugin.ExtensionRuntimeProvider; }
 });
+Object.defineProperty(exports, "HostIdentityContext", {
+  enumerable: true,
+  get: function () { return plugin.HostIdentityContext; }
+});
 Object.defineProperty(exports, "createPortBridgeClient", {
   enumerable: true,
   get: function () { return plugin.createPortBridgeClient; }
@@ -33,6 +50,10 @@ Object.defineProperty(exports, "useBridgeTheme", {
   enumerable: true,
   get: function () { return plugin.useBridgeTheme; }
 });
+Object.defineProperty(exports, "useHostIdentity", {
+  enumerable: true,
+  get: function () { return plugin.useHostIdentity; }
+});
 Object.defineProperty(exports, "useMcpQuery", {
   enumerable: true,
   get: function () { return plugin.useMcpQuery; }
@@ -53,5 +74,6 @@ Object.defineProperty(exports, "emitNavigation", {
   enumerable: true,
   get: function () { return componentsReact.emitNavigation; }
 });
+exports.useCurrentUser = useCurrentUser;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.cjs","sourcesContent":[]}
+{"version":3,"sources":["../src/currentUser.ts"],"names":["useHostIdentity"],"mappings":";;;;;;AAiDO,SAAS,cAAA,GAAqC;AACnD,EAAA,MAAM,WAAWA,sBAAA,EAAgB;AACjC,EAAA,MAAM,IAAA,GAAO,UAAU,IAAA,IAAQ,IAAA;AAC/B,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,IAAI,IAAA,CAAK,EAAA;AAAA;AAAA;AAAA,IAGT,WAAA,EACE,IAAA,CAAK,QAAA,EAAU,IAAA,MAAU,CAAA,EAAG,IAAA,CAAK,SAAA,IAAa,EAAE,CAAA,CAAA,EAAI,IAAA,CAAK,QAAA,IAAY,EAAE,GAAG,IAAA;AAAK,GACnF;AACF","file":"index.cjs","sourcesContent":["/**\n * `useCurrentUser` — the display-only current-user hook for plugin frontends\n * (WI 5154 follow-up #2, plugin-ui host-identity).\n *\n * A plugin page often needs the signed-in user for UX bits — a \"you are signed\n * in as …\" hint, pre-selecting the caller in a sign-off panel, or a\n * \"my acknowledgements\" heading. This hook surfaces that identity from the\n * host without the plugin importing the lower-level {@link useHostIdentity}\n * seam directly.\n *\n * It is a thin adapter over the host-provided {@link HostIdentity} context\n * (bound by the host through `ExtensionRuntimeProvider`'s `identity` prop):\n * it projects the host's richer {@link HostIdentityUser} down to the minimal\n * `{ id, displayName }` shape a plugin page needs for display.\n *\n * ⚠️ SECURITY — DISPLAY ONLY. This is presentation/UX data, NOT an\n * authorization source. Authorization is enforced HOST-SIDE at the MCP\n * boundary: the plugin backend re-authorises every tool/resource call from the\n * trusted server session. Never gate a mutation or a data read on this value.\n *\n * Returns `null` when the host has not provided an identity — standalone / mock\n * hosts, a host that predates the identity seam, or while host auth is still\n * loading or the caller is unauthenticated. Callers MUST handle `null`\n * (this matches the pre-existing plugin `useAuth().user` shim, which returned\n * `undefined`, so adopting this hook is a no-regression change).\n */\nimport { useHostIdentity } from \"@ethisyscore/extension-runtime/plugin\";\n\n/**\n * Minimal current-user shape a plugin page reads for display. Mirrors the\n * identity the host authenticates: a stable `id` and a human-readable\n * `displayName`. (No email — the host identity seam does not currently\n * forward one; if that changes, extend {@link HostIdentityUser} first and\n * project it here.)\n */\nexport interface CurrentUser {\n  /** Stable user id (matches the host's authenticated caller id). */\n  id: string;\n  /** Human-readable display name (the host's full name). */\n  displayName: string;\n}\n\n/**\n * Returns the host-authenticated current user projected to the display-only\n * {@link CurrentUser} shape, or `null` when no host identity is available.\n *\n * Display-only — see the module doc: authorization stays host-enforced at the\n * MCP boundary. Do NOT use the returned value as an authorization decision.\n */\nexport function useCurrentUser(): CurrentUser | null {\n  const identity = useHostIdentity();\n  const user = identity?.user ?? null;\n  if (!user) {\n    return null;\n  }\n  return {\n    id: user.id,\n    // The host binds `fullName`; fall back to composing first + last so a host\n    // that only sets the parts still yields a usable display name.\n    displayName:\n      user.fullName?.trim() || `${user.firstName ?? \"\"} ${user.lastName ?? \"\"}`.trim(),\n  };\n}\n"]}

package/dist/index.d.cts

@@ -1,2 +1,26 @@
-export { A11yPayload, BridgeClientContext, BridgePortShim, DensityPayload, ExtensionRuntimeProvider, ExtensionRuntimeProviderProps, ItemsResponse, LocalePayload, McpTransport, NavPayload, PortBridgeClient, SessionTokenPayload, ThemePayload, UseMcpQueryOptions, UseMcpQueryResult, UseMcpResourceOptions, UseMcpResourceResult, UseMcpToolOptions, UseMcpToolResult, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
+export { A11yPayload, BridgeClientContext, BridgePortShim, DensityPayload, ExtensionRuntimeProvider, ExtensionRuntimeProviderProps, HostIdentity, HostIdentityContext, HostIdentityUser, HostPermission, ItemsResponse, LocalePayload, McpTransport, NavPayload, PortBridgeClient, SessionTokenPayload, ThemePayload, UseMcpQueryOptions, UseMcpQueryResult, UseMcpResourceOptions, UseMcpResourceResult, UseMcpToolOptions, UseMcpToolResult, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useHostIdentity, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
 export { PlatformReactPageProps, definePlatformReactPage, emitNavigation } from '@ethisyscore/components-react';
+
+/**
+ * Minimal current-user shape a plugin page reads for display. Mirrors the
+ * identity the host authenticates: a stable `id` and a human-readable
+ * `displayName`. (No email — the host identity seam does not currently
+ * forward one; if that changes, extend {@link HostIdentityUser} first and
+ * project it here.)
+ */
+interface CurrentUser {
+    /** Stable user id (matches the host's authenticated caller id). */
+    id: string;
+    /** Human-readable display name (the host's full name). */
+    displayName: string;
+}
+/**
+ * Returns the host-authenticated current user projected to the display-only
+ * {@link CurrentUser} shape, or `null` when no host identity is available.
+ *
+ * Display-only — see the module doc: authorization stays host-enforced at the
+ * MCP boundary. Do NOT use the returned value as an authorization decision.
+ */
+declare function useCurrentUser(): CurrentUser | null;
+
+export { type CurrentUser, useCurrentUser };

package/dist/index.d.ts

@@ -1,2 +1,26 @@
-export { A11yPayload, BridgeClientContext, BridgePortShim, DensityPayload, ExtensionRuntimeProvider, ExtensionRuntimeProviderProps, ItemsResponse, LocalePayload, McpTransport, NavPayload, PortBridgeClient, SessionTokenPayload, ThemePayload, UseMcpQueryOptions, UseMcpQueryResult, UseMcpResourceOptions, UseMcpResourceResult, UseMcpToolOptions, UseMcpToolResult, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
+export { A11yPayload, BridgeClientContext, BridgePortShim, DensityPayload, ExtensionRuntimeProvider, ExtensionRuntimeProviderProps, HostIdentity, HostIdentityContext, HostIdentityUser, HostPermission, ItemsResponse, LocalePayload, McpTransport, NavPayload, PortBridgeClient, SessionTokenPayload, ThemePayload, UseMcpQueryOptions, UseMcpQueryResult, UseMcpResourceOptions, UseMcpResourceResult, UseMcpToolOptions, UseMcpToolResult, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useHostIdentity, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
 export { PlatformReactPageProps, definePlatformReactPage, emitNavigation } from '@ethisyscore/components-react';
+
+/**
+ * Minimal current-user shape a plugin page reads for display. Mirrors the
+ * identity the host authenticates: a stable `id` and a human-readable
+ * `displayName`. (No email — the host identity seam does not currently
+ * forward one; if that changes, extend {@link HostIdentityUser} first and
+ * project it here.)
+ */
+interface CurrentUser {
+    /** Stable user id (matches the host's authenticated caller id). */
+    id: string;
+    /** Human-readable display name (the host's full name). */
+    displayName: string;
+}
+/**
+ * Returns the host-authenticated current user projected to the display-only
+ * {@link CurrentUser} shape, or `null` when no host identity is available.
+ *
+ * Display-only — see the module doc: authorization stays host-enforced at the
+ * MCP boundary. Do NOT use the returned value as an authorization decision.
+ */
+declare function useCurrentUser(): CurrentUser | null;
+
+export { type CurrentUser, useCurrentUser };

package/dist/index.js

@@ -1,4 +1,22 @@
-export { BridgeClientContext, ExtensionRuntimeProvider, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
+import { useHostIdentity } from '@ethisyscore/extension-runtime/plugin';
+export { BridgeClientContext, ExtensionRuntimeProvider, HostIdentityContext, createPortBridgeClient, unwrapItems, useBridgeClient, useBridgeLocale, useBridgeTheme, useHostIdentity, useMcpQuery, useMcpResource, useMcpTool } from '@ethisyscore/extension-runtime/plugin';
 export { definePlatformReactPage, emitNavigation } from '@ethisyscore/components-react';
+
+// src/index.ts
+function useCurrentUser() {
+  const identity = useHostIdentity();
+  const user = identity?.user ?? null;
+  if (!user) {
+    return null;
+  }
+  return {
+    id: user.id,
+    // The host binds `fullName`; fall back to composing first + last so a host
+    // that only sets the parts still yields a usable display name.
+    displayName: user.fullName?.trim() || `${user.firstName ?? ""} ${user.lastName ?? ""}`.trim()
+  };
+}
+
+export { useCurrentUser };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"index.js","sourcesContent":[]}
+{"version":3,"sources":["../src/currentUser.ts"],"names":[],"mappings":";;;;;AAiDO,SAAS,cAAA,GAAqC;AACnD,EAAA,MAAM,WAAW,eAAA,EAAgB;AACjC,EAAA,MAAM,IAAA,GAAO,UAAU,IAAA,IAAQ,IAAA;AAC/B,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO;AAAA,IACL,IAAI,IAAA,CAAK,EAAA;AAAA;AAAA;AAAA,IAGT,WAAA,EACE,IAAA,CAAK,QAAA,EAAU,IAAA,MAAU,CAAA,EAAG,IAAA,CAAK,SAAA,IAAa,EAAE,CAAA,CAAA,EAAI,IAAA,CAAK,QAAA,IAAY,EAAE,GAAG,IAAA;AAAK,GACnF;AACF","file":"index.js","sourcesContent":["/**\n * `useCurrentUser` — the display-only current-user hook for plugin frontends\n * (WI 5154 follow-up #2, plugin-ui host-identity).\n *\n * A plugin page often needs the signed-in user for UX bits — a \"you are signed\n * in as …\" hint, pre-selecting the caller in a sign-off panel, or a\n * \"my acknowledgements\" heading. This hook surfaces that identity from the\n * host without the plugin importing the lower-level {@link useHostIdentity}\n * seam directly.\n *\n * It is a thin adapter over the host-provided {@link HostIdentity} context\n * (bound by the host through `ExtensionRuntimeProvider`'s `identity` prop):\n * it projects the host's richer {@link HostIdentityUser} down to the minimal\n * `{ id, displayName }` shape a plugin page needs for display.\n *\n * ⚠️ SECURITY — DISPLAY ONLY. This is presentation/UX data, NOT an\n * authorization source. Authorization is enforced HOST-SIDE at the MCP\n * boundary: the plugin backend re-authorises every tool/resource call from the\n * trusted server session. Never gate a mutation or a data read on this value.\n *\n * Returns `null` when the host has not provided an identity — standalone / mock\n * hosts, a host that predates the identity seam, or while host auth is still\n * loading or the caller is unauthenticated. Callers MUST handle `null`\n * (this matches the pre-existing plugin `useAuth().user` shim, which returned\n * `undefined`, so adopting this hook is a no-regression change).\n */\nimport { useHostIdentity } from \"@ethisyscore/extension-runtime/plugin\";\n\n/**\n * Minimal current-user shape a plugin page reads for display. Mirrors the\n * identity the host authenticates: a stable `id` and a human-readable\n * `displayName`. (No email — the host identity seam does not currently\n * forward one; if that changes, extend {@link HostIdentityUser} first and\n * project it here.)\n */\nexport interface CurrentUser {\n  /** Stable user id (matches the host's authenticated caller id). */\n  id: string;\n  /** Human-readable display name (the host's full name). */\n  displayName: string;\n}\n\n/**\n * Returns the host-authenticated current user projected to the display-only\n * {@link CurrentUser} shape, or `null` when no host identity is available.\n *\n * Display-only — see the module doc: authorization stays host-enforced at the\n * MCP boundary. Do NOT use the returned value as an authorization decision.\n */\nexport function useCurrentUser(): CurrentUser | null {\n  const identity = useHostIdentity();\n  const user = identity?.user ?? null;\n  if (!user) {\n    return null;\n  }\n  return {\n    id: user.id,\n    // The host binds `fullName`; fall back to composing first + last so a host\n    // that only sets the parts still yields a usable display name.\n    displayName:\n      user.fullName?.trim() || `${user.firstName ?? \"\"} ${user.lastName ?? \"\"}`.trim(),\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ethisyscore/plugin-ui",
-  "version": "1.27.1",
+  "version": "1.30.0",
   "description": "Plugin-UI umbrella SDK: client bridge + a11y/l10n primitives + brokered-MCP client (WI 4858).",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -77,7 +77,7 @@
     "lint": "tsc --noEmit"
   },
   "dependencies": {
-    "@ethisyscore/components-react": "^1.10.0",
+    "@ethisyscore/components-react": "^1.27.0",
     "@ethisyscore/extension-runtime": "^1.27.0"
   },
   "peerDependencies": {