@fuzdev/fuz_app 0.17.1 → 0.18.0

package/dist/actions/register_action_ws.d.ts

@@ -96,8 +96,8 @@ export interface RegisterActionWsResult {
  * - Notifications (method + no id) are silently dropped per JSON-RPC spec.
  * - Per-action auth: `public` / `authenticated` pass through (upgrade auth
  *   already verified identity); `keeper` requires `daemon_token` credential
- *   type *and* the keeper role; role-based `{role}` is currently rejected as
- *   not-yet-supported.
+ *   type *and* the keeper role; role-based `{role}` requires the named role
+ *   via `has_role`, matching the HTTP path in `action_rpc.ts`.
  * - DEV mode validates handler output against the spec's `output` schema and
  *   warns on mismatches.
  *

package/dist/actions/register_action_ws.js

@@ -42,8 +42,8 @@ import { BackendWebsocketTransport } from './transports_ws_backend.js';
  * - Notifications (method + no id) are silently dropped per JSON-RPC spec.
  * - Per-action auth: `public` / `authenticated` pass through (upgrade auth
  *   already verified identity); `keeper` requires `daemon_token` credential
- *   type *and* the keeper role; role-based `{role}` is currently rejected as
- *   not-yet-supported.
+ *   type *and* the keeper role; role-based `{role}` requires the named role
+ *   via `has_role`, matching the HTTP path in `action_rpc.ts`.
  * - DEV mode validates handler output against the spec's `output` schema and
  *   warns on mismatches.
  *
@@ -118,8 +118,10 @@ export const register_action_ws = (options) => {
                     }
                 }
                 else if (typeof auth === 'object' && auth !== null) {
-                    ws.send(JSON.stringify(create_jsonrpc_error_response(id, jsonrpc_error_messages.internal_error('role-based action auth is not yet supported on WebSocket'))));
-                    return;
+                    if (!has_role(request_context, auth.role)) {
+                        ws.send(JSON.stringify(create_jsonrpc_error_response(id, jsonrpc_error_messages.forbidden(`requires role: ${auth.role}`))));
+                        return;
+                    }
                 }
                 // Look up handler — method is validated against spec_by_method above.
                 const handler = handlers[method];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_app",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "description": "fullstack app library",
   "glyph": "🗝",
   "logo": "logo.svg",