@flaredev/core 0.12.2 → 0.14.0

package/dist/{chunk-BTVEH5AU.js → chunk-QEK4KWKL.js}

@@ -907,6 +907,46 @@ function allowedActions(policy, role) {
   };
 }
 
+// src/resource/grants.ts
+function isRestricted(policy) {
+  return Boolean(policy);
+}
+function withGrants(policy, resource, grants) {
+  if (!policy) return void 0;
+  const added = {
+    read: new Set(policy.read),
+    create: new Set(policy.create),
+    update: new Set(policy.update),
+    delete: new Set(policy.delete)
+  };
+  let changed = false;
+  for (const grant of grants) {
+    if (grant.resource !== resource) continue;
+    const bucket = added[grant.action];
+    if (!bucket || bucket.has(grant.role)) continue;
+    bucket.add(grant.role);
+    changed = true;
+  }
+  if (!changed) return policy;
+  return {
+    ...policy,
+    read: [...added.read],
+    create: [...added.create],
+    update: [...added.update],
+    delete: [...added.delete]
+  };
+}
+function grantIndex(grants) {
+  const index = /* @__PURE__ */ new Map();
+  for (const grant of grants) {
+    const key = `${grant.resource}.${grant.action}`;
+    const roles = index.get(key) ?? /* @__PURE__ */ new Set();
+    roles.add(grant.role);
+    index.set(key, roles);
+  }
+  return index;
+}
+
 export {
   STRING_FORMATS,
   TEXT_FORMATS,
@@ -972,5 +1012,8 @@ export {
   definePolicy,
   can,
   ownershipFilter,
-  allowedActions
+  allowedActions,
+  isRestricted,
+  withGrants,
+  grantIndex
 };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { R as Rate, b as RateLimitConfig, a as RateLimitDecision, c as RateLimitStore, d as RateLimitedAction, e as RateSyntaxError, f as fixedWindow, p as parseRate, r as rateFor, g as rateLimitKey, h as ratesIn } from './rate-limit-ClbdZioJ.js';
-import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField } from './policy-b4FXN3ZJ.js';
-export { B as BelongsToField, f as BooleanField, g as ClientResource, D as DEFAULT_FILE_MAX_BYTES, h as DateField, i as DateTimeField, E as EnumField, j as FILE_CATEGORIES, k as FieldCondition, l as FieldKind, m as FieldValue, n as FileCategory, o as FileField, q as FloatField, H as HasManyField, I as ISSUE_CODES, r as IntField, c as IssueCode, J as JsonField, s as JsonOptions, M as MultiSelectField, N as NUMBER_FORMATS, t as NumberFormat, d as PROBLEM_CODES, b as Policy, u as PolicyAction, v as PolicyConfig, x as PolicyError, y as PolicyOwnership, e as ProblemBody, P as ProblemCode, a as ProblemIssue, z as RESERVED_FIELD_NAMES, A as RecordOf, G as ResourceConfig, K as ResourceDefinitionError, L as STRING_FORMATS, O as StringField, Q as StringFormat, T as TEXT_FORMATS, V as TagsField, W as TagsOptions, X as TextField, Y as TextFormat, Z as allowedActions, _ as can, $ as clientResource, a0 as columnName, a1 as conditionHolds, a2 as defaultFieldLabel, a3 as definePolicy, a4 as defineResource, a5 as describeCondition, a6 as field, a7 as fileMaxBytes, a8 as mimeTypesFor, a9 as ownershipFilter, p as problemResponse, aa as storedFields, w as wantsJson } from './policy-b4FXN3ZJ.js';
+import { F as Field, C as CreateInput, U as UpdateInput, R as Resource, S as StoredField, f as PolicyAction, b as Policy } from './policy-eVpUpYxV.js';
+export { B as BelongsToField, g as BooleanField, h as ClientResource, D as DEFAULT_FILE_MAX_BYTES, i as DateField, j as DateTimeField, E as EnumField, k as FILE_CATEGORIES, l as FieldCondition, m as FieldKind, n as FieldValue, o as FileCategory, q as FileField, r as FloatField, H as HasManyField, I as ISSUE_CODES, s as IntField, c as IssueCode, J as JsonField, t as JsonOptions, M as MultiSelectField, N as NUMBER_FORMATS, u as NumberFormat, d as PROBLEM_CODES, v as PolicyConfig, x as PolicyError, y as PolicyOwnership, e as ProblemBody, P as ProblemCode, a as ProblemIssue, z as RESERVED_FIELD_NAMES, A as RecordOf, G as ResourceConfig, K as ResourceDefinitionError, L as STRING_FORMATS, O as StringField, Q as StringFormat, T as TEXT_FORMATS, V as TagsField, W as TagsOptions, X as TextField, Y as TextFormat, Z as allowedActions, _ as can, $ as clientResource, a0 as columnName, a1 as conditionHolds, a2 as defaultFieldLabel, a3 as definePolicy, a4 as defineResource, a5 as describeCondition, a6 as field, a7 as fileMaxBytes, a8 as mimeTypesFor, a9 as ownershipFilter, p as problemResponse, aa as storedFields, w as wantsJson } from './policy-eVpUpYxV.js';
 import { z } from 'zod';
 
 /**
@@ -591,6 +591,49 @@ declare const isSlug: (value: string) => boolean;
 /** "My First Post!" → "my-first-post". */
 declare function slugify(value: string): string;
 
+/**
+ * Permissions granted from the dashboard, on top of the policies in your code.
+ *
+ * Flare's policies are files — `policies/invoice.policy.ts` — and that is deliberate:
+ * who may do what is reviewable in a pull request, travels with the repository, and is
+ * the same on every machine before anything is deployed. Managing roles from a running
+ * app means permissions in a database, and a database is none of those things.
+ *
+ * So the two compose rather than compete. **The policy file is the floor and the
+ * database only ever widens it.** A grant adds a role to an action; nothing in the
+ * dashboard can take away access the code gives, and nothing in the dashboard can make
+ * a resource restricted that the code left open. That last point matters more than it
+ * sounds — see {@link withGrants}.
+ */
+/** One row of "this role may do this to this resource". */
+interface PermissionGrant {
+    role: string;
+    /** The resource's descriptor name, e.g. "Invoice". */
+    resource: string;
+    /** "list" is read, so it is not a grant of its own. */
+    action: Exclude<PolicyAction, "list">;
+}
+/** Whether a resource is restricted at all — i.e. whether granting on it does anything. */
+declare function isRestricted(policy: Policy | undefined | null): boolean;
+/**
+ * A resource's policy with dashboard grants folded in.
+ *
+ * Returns `undefined` unchanged when there is no policy file, and that is the whole
+ * subtlety of this feature: a resource with no policy is open to every signed-in user,
+ * so a grant on it would be a tick-box that changes nothing. Pretending otherwise — by
+ * inventing a policy from the grants — would be worse than useless: an app would start
+ * refusing people the moment somebody opened the roles screen, and the reason would be
+ * in a table nobody reads. The UI's job is to say "this resource is open; restrict it
+ * with `flare gen policy`", and this function's job is to not lie.
+ */
+declare function withGrants(policy: Policy | undefined | null, resource: string, grants: Iterable<PermissionGrant>): Policy | undefined;
+/**
+ * Every (resource, action) a role is granted, as a lookup the UI can tick boxes from.
+ *
+ * Keyed `"Resource.action"` because that is what a matrix cell is.
+ */
+declare function grantIndex(grants: Iterable<PermissionGrant>): Map<string, Set<string>>;
+
 /**
  * Sample data for seeds. Small on purpose: a handful of word lists and a seeded
  * random number generator, so a million rows cost nothing to produce and the same
@@ -742,6 +785,6 @@ type SeedUser = (user: SeedUserInput) => Promise<CredentialUserRows["user"]>;
 type Seed = (context: SeedContext) => void | Promise<void>;
 declare function defineSeed(seed: Seed): Seed;
 
-declare const FLARE_VERSION = "0.12.2";
+declare const FLARE_VERSION = "0.14.0";
 
-export { AUTH_USER, type BelongsToRelation, type Country, CreateInput, type CredentialUserRows, DEFAULT_MONEY_EXPONENT, type EnumTranslation, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type SeedUser, type SeedUserInput, type Storage, type StorageBucket, type StorageObjectBody, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, credentialUserRows, currentPeriodEnd, defaultAuthUserOnDelete, defineSeed, enumMemberCollision, enumTranslations, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, fromMinorUnits, grantsAccess, hasTooManyPlaces, hashPassword, humanize, importSigningKey, initialFormValues, isAuthUserTarget, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isSlug, issuesByField, kebabCase, matchesContentType, moneyExponent, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, prismaEnumMember, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toMinorUnits, toSubscriptionStatus, verifyPassword, verifyToken, words };
+export { AUTH_USER, type BelongsToRelation, type Country, CreateInput, type CredentialUserRows, DEFAULT_MONEY_EXPONENT, type EnumTranslation, FLARE_VERSION, type Fake, Field, type FormValues, type FormatOptions, type HasManyRelation, type InsertMany, type MailMessage, type MailResult, type Mailer, type MailerOptions, PBKDF2_ITERATIONS, type PermissionGrant, Policy, PolicyAction, type ReadUrlOptions, RelationError, type RelationGraph, Resource, type ResourceRelations, type ResourceValidators, SNIFF_BYTES, SUBSCRIPTION_STATUSES, type Seed, type SeedContext, type SeedUser, type SeedUserInput, type Storage, type StorageBucket, type StorageObjectBody, type StorageOptions, StoredField, type SubscriptionLike, type SubscriptionState, type SubscriptionStatus, type Tone, type TransactionalEmail, UpdateInput, type UploadUrlOptions, camelCase, checkoutPaid, countries, countryName, createFake, createMailer, createObjectKey, createStorage, createValidators, credentialUserRows, currentPeriodEnd, defaultAuthUserOnDelete, defineSeed, enumMemberCollision, enumTranslations, fake, fieldSchema, fileKeyPrefix, flagEmoji, formValuesToInput, formatPhone, formatValue, fromMinorUnits, grantIndex, grantsAccess, hasTooManyPlaces, hashPassword, humanize, importSigningKey, initialFormValues, isAuthUserTarget, isColor, isCountryCode, isDomain, isLiveSubscription, isPhoneNumber, isRestricted, isSlug, issuesByField, kebabCase, matchesContentType, moneyExponent, normalizeDomain, optionLabel, parseMultiValue, pascalCase, pluralize, prismaEnumMember, randomLetters, relationGraph, renderTransactionalEmail, shouldApplySubscription, signToken, slugify, snakeCase, sniffMatches, splitPhone, statusTone, subscriptionPriceId, subscriptionState, toE164, toMinorUnits, toSubscriptionStatus, verifyPassword, verifyToken, withGrants, words };

package/dist/index.js

@@ -35,6 +35,7 @@ import {
   formatPhone,
   formatValue,
   fromMinorUnits,
+  grantIndex,
   hasTooManyPlaces,
   humanize,
   initialFormValues,
@@ -43,6 +44,7 @@ import {
   isCountryCode,
   isDomain,
   isPhoneNumber,
+  isRestricted,
   isSlug,
   issuesByField,
   kebabCase,
@@ -63,8 +65,9 @@ import {
   storedFields,
   toE164,
   toMinorUnits,
+  withGrants,
   words
-} from "./chunk-BTVEH5AU.js";
+} from "./chunk-QEK4KWKL.js";
 import {
   ISSUE_CODES,
   PROBLEM_CODES,
@@ -892,7 +895,7 @@ function createFake(seed = 20260101) {
 var fake = createFake();
 
 // src/index.ts
-var FLARE_VERSION = "0.12.2";
+var FLARE_VERSION = "0.14.0";
 export {
   AUTH_USER,
   DEFAULT_FILE_MAX_BYTES,
@@ -947,6 +950,7 @@ export {
   formatPhone,
   formatValue,
   fromMinorUnits,
+  grantIndex,
   grantsAccess,
   hasTooManyPlaces,
   hashPassword,
@@ -959,6 +963,7 @@ export {
   isDomain,
   isLiveSubscription,
   isPhoneNumber,
+  isRestricted,
   isSlug,
   issuesByField,
   kebabCase,
@@ -996,5 +1001,6 @@ export {
   verifyPassword,
   verifyToken,
   wantsJson,
+  withGrants,
   words
 };

package/dist/{policy-b4FXN3ZJ.d.ts → policy-eVpUpYxV.d.ts}

@@ -702,4 +702,4 @@ declare function ownershipFilter(policy: Policy | undefined | null, user: {
 /** Actions `role` may perform, for hiding UI it can't use. */
 declare function allowedActions(policy: Policy | undefined | null, role: string | null | undefined): Record<Exclude<PolicyAction, "list">, boolean>;
 
-export { clientResource as $, type RecordOf as A, type BelongsToField as B, type CreateInput as C, DEFAULT_FILE_MAX_BYTES as D, type EnumField as E, type Field as F, type ResourceConfig as G, type HasManyField as H, ISSUE_CODES as I, type JsonField as J, ResourceDefinitionError as K, STRING_FORMATS as L, type MultiSelectField as M, NUMBER_FORMATS as N, type StringField as O, type ProblemCode as P, type StringFormat as Q, type Resource as R, type StoredField as S, TEXT_FORMATS as T, type UpdateInput as U, type TagsField as V, type TagsOptions as W, type TextField as X, type TextFormat as Y, allowedActions as Z, can as _, type ProblemIssue as a, columnName as a0, conditionHolds as a1, defaultFieldLabel as a2, definePolicy as a3, defineResource as a4, describeCondition as a5, field as a6, fileMaxBytes as a7, mimeTypesFor as a8, ownershipFilter as a9, storedFields as aa, type Policy as b, type IssueCode as c, PROBLEM_CODES as d, type ProblemBody as e, type BooleanField as f, type ClientResource as g, type DateField as h, type DateTimeField as i, FILE_CATEGORIES as j, type FieldCondition as k, type FieldKind as l, type FieldValue as m, type FileCategory as n, type FileField as o, problemResponse as p, type FloatField as q, type IntField as r, type JsonOptions as s, type NumberFormat as t, type PolicyAction as u, type PolicyConfig as v, wantsJson as w, PolicyError as x, type PolicyOwnership as y, RESERVED_FIELD_NAMES as z };
+export { clientResource as $, type RecordOf as A, type BelongsToField as B, type CreateInput as C, DEFAULT_FILE_MAX_BYTES as D, type EnumField as E, type Field as F, type ResourceConfig as G, type HasManyField as H, ISSUE_CODES as I, type JsonField as J, ResourceDefinitionError as K, STRING_FORMATS as L, type MultiSelectField as M, NUMBER_FORMATS as N, type StringField as O, type ProblemCode as P, type StringFormat as Q, type Resource as R, type StoredField as S, TEXT_FORMATS as T, type UpdateInput as U, type TagsField as V, type TagsOptions as W, type TextField as X, type TextFormat as Y, allowedActions as Z, can as _, type ProblemIssue as a, columnName as a0, conditionHolds as a1, defaultFieldLabel as a2, definePolicy as a3, defineResource as a4, describeCondition as a5, field as a6, fileMaxBytes as a7, mimeTypesFor as a8, ownershipFilter as a9, storedFields as aa, type Policy as b, type IssueCode as c, PROBLEM_CODES as d, type ProblemBody as e, type PolicyAction as f, type BooleanField as g, type ClientResource as h, type DateField as i, type DateTimeField as j, FILE_CATEGORIES as k, type FieldCondition as l, type FieldKind as m, type FieldValue as n, type FileCategory as o, problemResponse as p, type FileField as q, type FloatField as r, type IntField as s, type JsonOptions as t, type NumberFormat as u, type PolicyConfig as v, wantsJson as w, PolicyError as x, type PolicyOwnership as y, RESERVED_FIELD_NAMES as z };

package/dist/server.d.ts

@@ -1,7 +1,7 @@
 import * as drizzle_orm_sqlite_core from 'drizzle-orm/sqlite-core';
 import { BaseSQLiteDatabase, SQLiteTable, SQLiteColumn } from 'drizzle-orm/sqlite-core';
-import { P as ProblemCode, a as ProblemIssue, R as Resource, F as Field, S as StoredField, b as Policy } from './policy-b4FXN3ZJ.js';
-export { I as ISSUE_CODES, c as IssueCode, d as PROBLEM_CODES, e as ProblemBody, p as problemResponse, w as wantsJson } from './policy-b4FXN3ZJ.js';
+import { P as ProblemCode, a as ProblemIssue, R as Resource, F as Field, S as StoredField, b as Policy } from './policy-eVpUpYxV.js';
+export { I as ISSUE_CODES, c as IssueCode, d as PROBLEM_CODES, e as ProblemBody, p as problemResponse, w as wantsJson } from './policy-eVpUpYxV.js';
 import './rate-limit-ClbdZioJ.js';
 
 /**

package/dist/server.js

@@ -5,7 +5,7 @@ import {
   enumTranslations,
   moneyExponent,
   storedFields
-} from "./chunk-BTVEH5AU.js";
+} from "./chunk-QEK4KWKL.js";
 import {
   ISSUE_CODES,
   PROBLEM_CODES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flaredev/core",
-  "version": "0.12.2",
+  "version": "0.14.0",
   "description": "Flare runtime: resource descriptors, field grammar, and Cloudflare-native helpers",
   "license": "MIT",
   "author": "Muke Johnbaptist",