@goplusvn/core 0.1.0

package/dist/crud/server.d.mts

@@ -0,0 +1,20 @@
+import { CrudPermissions, EntityConfig } from '../types/index.mjs';
+import { Session } from 'next-auth';
+import 'lucide-react';
+import 'react';
+import 'zod';
+
+/**
+ * Get CRUD permissions for a user based on their session
+ * Permissions are read from session (loaded from cache in session callback)
+ * Uses memoization to return stable object references with TTL
+ */
+declare function getCrudPermissions(session: Session | null, entity: string): Promise<CrudPermissions>;
+/**
+ * Merge config permissions with user permissions
+ * User permissions take precedence
+ * Config permissions are optional, so undefined means "allow if user has permission"
+ */
+declare function mergePermissions(configPermissions: EntityConfig["permissions"], userPermissions: CrudPermissions): CrudPermissions;
+
+export { getCrudPermissions, mergePermissions };

package/dist/crud/server.d.ts

@@ -0,0 +1,20 @@
+import { CrudPermissions, EntityConfig } from '../types/index.js';
+import { Session } from 'next-auth';
+import 'lucide-react';
+import 'react';
+import 'zod';
+
+/**
+ * Get CRUD permissions for a user based on their session
+ * Permissions are read from session (loaded from cache in session callback)
+ * Uses memoization to return stable object references with TTL
+ */
+declare function getCrudPermissions(session: Session | null, entity: string): Promise<CrudPermissions>;
+/**
+ * Merge config permissions with user permissions
+ * User permissions take precedence
+ * Config permissions are optional, so undefined means "allow if user has permission"
+ */
+declare function mergePermissions(configPermissions: EntityConfig["permissions"], userPermissions: CrudPermissions): CrudPermissions;
+
+export { getCrudPermissions, mergePermissions };

package/dist/crud/server.js

@@ -0,0 +1,123 @@
+'use strict';
+
+// src/rbac/permissions.ts
+var CRUD_ACTIONS = {
+  create: "create",
+  view: "view",
+  update: "update",
+  delete: "delete",
+  export: "export",
+  import: "import",
+  approve: "approve",
+  reject: "reject"
+};
+function getActionCode(operation) {
+  return CRUD_ACTIONS[operation];
+}
+var BYPASS_AUTH = process.env.BYPASS_AUTH === "true" || process.env.BYPASS_AUTH === "1";
+var ADMIN_ROLE_CODES = ["admin", "SUPER_ADMIN"];
+function getCrudPermissionsFromSession(session, entity) {
+  if (BYPASS_AUTH) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true
+    };
+  }
+  if (!session?.user) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false
+    };
+  }
+  const user = session.user;
+  if (!user.id) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false
+    };
+  }
+  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));
+  if (isAdmin) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true
+    };
+  }
+  const permissions = user.permissions || [];
+  const permissionKeys = new Set(
+    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`)
+  );
+  const hasPermission = (action) => {
+    const key = `${entity}:${action}`;
+    return permissionKeys.has(key);
+  };
+  return {
+    create: hasPermission(getActionCode("create")),
+    view: hasPermission(getActionCode("view")),
+    update: hasPermission(getActionCode("update")),
+    delete: hasPermission(getActionCode("delete")),
+    export: hasPermission(getActionCode("export")),
+    import: hasPermission(getActionCode("import")),
+    approve: hasPermission(getActionCode("approve")),
+    reject: hasPermission(getActionCode("reject"))
+  };
+}
+
+// src/crud/lib/permissions.ts
+async function getCrudPermissions(session, entity) {
+  const perms = getCrudPermissionsFromSession(session, entity);
+  return {
+    create: perms.create,
+    read: perms.view,
+    update: perms.update,
+    delete: perms.delete,
+    export: perms.export,
+    import: perms.import,
+    approve: perms.approve,
+    reject: perms.reject
+  };
+}
+function mergePermissions(configPermissions, userPermissions) {
+  if (!configPermissions) {
+    return userPermissions;
+  }
+  return {
+    create: (configPermissions.create ?? true) && userPermissions.create,
+    read: (configPermissions.read ?? true) && userPermissions.read,
+    update: (configPermissions.update ?? true) && userPermissions.update,
+    delete: (configPermissions.delete ?? true) && userPermissions.delete,
+    export: (configPermissions.export ?? true) && userPermissions.export,
+    import: (configPermissions.import ?? true) && userPermissions.import,
+    approve: (configPermissions.approve ?? true) && userPermissions.approve,
+    reject: (configPermissions.reject ?? true) && userPermissions.reject
+  };
+}
+
+exports.getCrudPermissions = getCrudPermissions;
+exports.mergePermissions = mergePermissions;
+//# sourceMappingURL=server.js.map
+//# sourceMappingURL=server.js.map

package/dist/crud/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/rbac/permissions.ts","../../src/crud/lib/permissions.ts"],"names":[],"mappings":";;;AAWO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ,QAAA;AAAA,EACR,IAAA,EAAM,MAAA;AAAA,EACN,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAIO,SAAS,cAAc,SAAA,EAA+B;AAC3D,EAAA,OAAO,aAAa,SAAS,CAAA;AAC/B;AAeA,IAAM,cACJ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,MAAA,IAAU,OAAA,CAAQ,IAAI,WAAA,KAAgB,GAAA;AAEpE,IAAM,gBAAA,GAAmB,CAAC,OAAA,EAAS,aAAa,CAAA;AAEzC,SAAS,6BAAA,CACd,SACA,MAAA,EAUA;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AAErB,EAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,EAAO,IAAA,CAAK,CAAC,IAAA,KAAS,gBAAA,CAAiB,QAAA,CAAS,IAAI,CAAC,CAAA;AAC1E,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,IAAe,EAAC;AACzC,EAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,IACzB,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,YAAY,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE;AAAA,GAC5D;AAEA,EAAA,MAAM,aAAA,GAAgB,CAAC,MAAA,KAAmB;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,OAAO,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,IAAA,EAAM,aAAA,CAAc,aAAA,CAAc,MAAM,CAAC,CAAA;AAAA,IACzC,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,aAAA,CAAc,aAAA,CAAc,SAAS,CAAC,CAAA;AAAA,IAC/C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC;AAAA,GAC/C;AACF;;;AC5HA,eAAsB,kBAAA,CACpB,SACA,MAAA,EAC0B;AAE1B,EAAA,MAAM,KAAA,GAAQ,6BAAA,CAA8B,OAAA,EAAS,MAAM,CAAA;AAC3D,EAAA,OAAO;AAAA,IACL,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAQ,KAAA,CAAM;AAAA,GAChB;AACF;AAOO,SAAS,gBAAA,CACd,mBACA,eAAA,EACiB;AACjB,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,IAAA,EAAA,CAAO,iBAAA,CAAkB,IAAA,IAAQ,IAAA,KAAS,eAAA,CAAgB,IAAA;AAAA,IAC1D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,OAAA,EAAA,CAAU,iBAAA,CAAkB,OAAA,IAAW,IAAA,KAAS,eAAA,CAAgB,OAAA;AAAA,IAChE,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB;AAAA,GAChE;AACF","file":"server.js","sourcesContent":["// @goerp/core/rbac/permissions\n// Server-only permission utilities - no client/UI imports\n// Use this in Server Components and API routes to avoid bundling client code\n\nimport type { Permission } from \"../types\";\nimport type { Session } from \"next-auth\";\n\n// ============================================================================\n// Action Mapping\n// ============================================================================\n\nexport const CRUD_ACTIONS = {\n  create: \"create\",\n  view: \"view\",\n  update: \"update\",\n  delete: \"delete\",\n  export: \"export\",\n  import: \"import\",\n  approve: \"approve\",\n  reject: \"reject\",\n} as const;\n\nexport type CrudAction = keyof typeof CRUD_ACTIONS;\n\nexport function getActionCode(operation: CrudAction): string {\n  return CRUD_ACTIONS[operation];\n}\n\n// ============================================================================\n// Permission Helpers\n// ============================================================================\n\ninterface ExtendedUser {\n  id: string;\n  name?: string | null;\n  email?: string | null;\n  image?: string | null;\n  roles?: string[];\n  permissions?: Permission[];\n}\n\nconst BYPASS_AUTH =\n  process.env.BYPASS_AUTH === \"true\" || process.env.BYPASS_AUTH === \"1\";\n\nconst ADMIN_ROLE_CODES = [\"admin\", \"SUPER_ADMIN\"];\n\nexport function getCrudPermissionsFromSession(\n  session: Session | null,\n  entity: string,\n): {\n  create: boolean;\n  view: boolean;\n  update: boolean;\n  delete: boolean;\n  export: boolean;\n  import: boolean;\n  approve: boolean;\n  reject: boolean;\n} {\n  if (BYPASS_AUTH) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  if (!session?.user) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const user = session.user as ExtendedUser;\n\n  if (!user.id) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));\n  if (isAdmin) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  const permissions = user.permissions || [];\n  const permissionKeys = new Set(\n    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`),\n  );\n\n  const hasPermission = (action: string) => {\n    const key = `${entity}:${action}`;\n    return permissionKeys.has(key);\n  };\n\n  return {\n    create: hasPermission(getActionCode(\"create\")),\n    view: hasPermission(getActionCode(\"view\")),\n    update: hasPermission(getActionCode(\"update\")),\n    delete: hasPermission(getActionCode(\"delete\")),\n    export: hasPermission(getActionCode(\"export\")),\n    import: hasPermission(getActionCode(\"import\")),\n    approve: hasPermission(getActionCode(\"approve\")),\n    reject: hasPermission(getActionCode(\"reject\")),\n  };\n}\n","import type { CrudPermissions, EntityConfig } from \"../../types\";\nimport type { Session } from \"next-auth\";\n\nimport { getCrudPermissionsFromSession } from \"../../rbac/permissions\";\n\n/**\n * Get CRUD permissions for a user based on their session\n * Permissions are read from session (loaded from cache in session callback)\n * Uses memoization to return stable object references with TTL\n */\nexport async function getCrudPermissions(\n  session: Session | null,\n  entity: string,\n): Promise<CrudPermissions> {\n  // Get permissions from session (already loaded in JWT)\n  const perms = getCrudPermissionsFromSession(session, entity);\n  return {\n    create: perms.create,\n    read: perms.view,\n    update: perms.update,\n    delete: perms.delete,\n    export: perms.export,\n    import: perms.import,\n    approve: perms.approve,\n    reject: perms.reject,\n  };\n}\n\n/**\n * Merge config permissions with user permissions\n * User permissions take precedence\n * Config permissions are optional, so undefined means \"allow if user has permission\"\n */\nexport function mergePermissions(\n  configPermissions: EntityConfig[\"permissions\"],\n  userPermissions: CrudPermissions,\n): CrudPermissions {\n  if (!configPermissions) {\n    return userPermissions;\n  }\n\n  return {\n    create: (configPermissions.create ?? true) && userPermissions.create,\n    read: (configPermissions.read ?? true) && userPermissions.read,\n    update: (configPermissions.update ?? true) && userPermissions.update,\n    delete: (configPermissions.delete ?? true) && userPermissions.delete,\n    export: (configPermissions.export ?? true) && userPermissions.export,\n    import: (configPermissions.import ?? true) && userPermissions.import,\n    approve: (configPermissions.approve ?? true) && userPermissions.approve,\n    reject: (configPermissions.reject ?? true) && userPermissions.reject,\n  };\n}\n"]}

package/dist/crud/server.mjs

@@ -0,0 +1,120 @@
+// src/rbac/permissions.ts
+var CRUD_ACTIONS = {
+  create: "create",
+  view: "view",
+  update: "update",
+  delete: "delete",
+  export: "export",
+  import: "import",
+  approve: "approve",
+  reject: "reject"
+};
+function getActionCode(operation) {
+  return CRUD_ACTIONS[operation];
+}
+var BYPASS_AUTH = process.env.BYPASS_AUTH === "true" || process.env.BYPASS_AUTH === "1";
+var ADMIN_ROLE_CODES = ["admin", "SUPER_ADMIN"];
+function getCrudPermissionsFromSession(session, entity) {
+  if (BYPASS_AUTH) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true
+    };
+  }
+  if (!session?.user) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false
+    };
+  }
+  const user = session.user;
+  if (!user.id) {
+    return {
+      create: false,
+      view: false,
+      update: false,
+      delete: false,
+      export: false,
+      import: false,
+      approve: false,
+      reject: false
+    };
+  }
+  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));
+  if (isAdmin) {
+    return {
+      create: true,
+      view: true,
+      update: true,
+      delete: true,
+      export: true,
+      import: true,
+      approve: true,
+      reject: true
+    };
+  }
+  const permissions = user.permissions || [];
+  const permissionKeys = new Set(
+    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`)
+  );
+  const hasPermission = (action) => {
+    const key = `${entity}:${action}`;
+    return permissionKeys.has(key);
+  };
+  return {
+    create: hasPermission(getActionCode("create")),
+    view: hasPermission(getActionCode("view")),
+    update: hasPermission(getActionCode("update")),
+    delete: hasPermission(getActionCode("delete")),
+    export: hasPermission(getActionCode("export")),
+    import: hasPermission(getActionCode("import")),
+    approve: hasPermission(getActionCode("approve")),
+    reject: hasPermission(getActionCode("reject"))
+  };
+}
+
+// src/crud/lib/permissions.ts
+async function getCrudPermissions(session, entity) {
+  const perms = getCrudPermissionsFromSession(session, entity);
+  return {
+    create: perms.create,
+    read: perms.view,
+    update: perms.update,
+    delete: perms.delete,
+    export: perms.export,
+    import: perms.import,
+    approve: perms.approve,
+    reject: perms.reject
+  };
+}
+function mergePermissions(configPermissions, userPermissions) {
+  if (!configPermissions) {
+    return userPermissions;
+  }
+  return {
+    create: (configPermissions.create ?? true) && userPermissions.create,
+    read: (configPermissions.read ?? true) && userPermissions.read,
+    update: (configPermissions.update ?? true) && userPermissions.update,
+    delete: (configPermissions.delete ?? true) && userPermissions.delete,
+    export: (configPermissions.export ?? true) && userPermissions.export,
+    import: (configPermissions.import ?? true) && userPermissions.import,
+    approve: (configPermissions.approve ?? true) && userPermissions.approve,
+    reject: (configPermissions.reject ?? true) && userPermissions.reject
+  };
+}
+
+export { getCrudPermissions, mergePermissions };
+//# sourceMappingURL=server.mjs.map
+//# sourceMappingURL=server.mjs.map

package/dist/crud/server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/rbac/permissions.ts","../../src/crud/lib/permissions.ts"],"names":[],"mappings":";AAWO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ,QAAA;AAAA,EACR,IAAA,EAAM,MAAA;AAAA,EACN,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAIO,SAAS,cAAc,SAAA,EAA+B;AAC3D,EAAA,OAAO,aAAa,SAAS,CAAA;AAC/B;AAeA,IAAM,cACJ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,MAAA,IAAU,OAAA,CAAQ,IAAI,WAAA,KAAgB,GAAA;AAEpE,IAAM,gBAAA,GAAmB,CAAC,OAAA,EAAS,aAAa,CAAA;AAEzC,SAAS,6BAAA,CACd,SACA,MAAA,EAUA;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AAErB,EAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,EAAO,IAAA,CAAK,CAAC,IAAA,KAAS,gBAAA,CAAiB,QAAA,CAAS,IAAI,CAAC,CAAA;AAC1E,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,IAAe,EAAC;AACzC,EAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,IACzB,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,YAAY,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE;AAAA,GAC5D;AAEA,EAAA,MAAM,aAAA,GAAgB,CAAC,MAAA,KAAmB;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,OAAO,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,IAAA,EAAM,aAAA,CAAc,aAAA,CAAc,MAAM,CAAC,CAAA;AAAA,IACzC,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,aAAA,CAAc,aAAA,CAAc,SAAS,CAAC,CAAA;AAAA,IAC/C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC;AAAA,GAC/C;AACF;;;AC5HA,eAAsB,kBAAA,CACpB,SACA,MAAA,EAC0B;AAE1B,EAAA,MAAM,KAAA,GAAQ,6BAAA,CAA8B,OAAA,EAAS,MAAM,CAAA;AAC3D,EAAA,OAAO;AAAA,IACL,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAQ,KAAA,CAAM;AAAA,GAChB;AACF;AAOO,SAAS,gBAAA,CACd,mBACA,eAAA,EACiB;AACjB,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,IAAA,EAAA,CAAO,iBAAA,CAAkB,IAAA,IAAQ,IAAA,KAAS,eAAA,CAAgB,IAAA;AAAA,IAC1D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,OAAA,EAAA,CAAU,iBAAA,CAAkB,OAAA,IAAW,IAAA,KAAS,eAAA,CAAgB,OAAA;AAAA,IAChE,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB;AAAA,GAChE;AACF","file":"server.mjs","sourcesContent":["// @goerp/core/rbac/permissions\n// Server-only permission utilities - no client/UI imports\n// Use this in Server Components and API routes to avoid bundling client code\n\nimport type { Permission } from \"../types\";\nimport type { Session } from \"next-auth\";\n\n// ============================================================================\n// Action Mapping\n// ============================================================================\n\nexport const CRUD_ACTIONS = {\n  create: \"create\",\n  view: \"view\",\n  update: \"update\",\n  delete: \"delete\",\n  export: \"export\",\n  import: \"import\",\n  approve: \"approve\",\n  reject: \"reject\",\n} as const;\n\nexport type CrudAction = keyof typeof CRUD_ACTIONS;\n\nexport function getActionCode(operation: CrudAction): string {\n  return CRUD_ACTIONS[operation];\n}\n\n// ============================================================================\n// Permission Helpers\n// ============================================================================\n\ninterface ExtendedUser {\n  id: string;\n  name?: string | null;\n  email?: string | null;\n  image?: string | null;\n  roles?: string[];\n  permissions?: Permission[];\n}\n\nconst BYPASS_AUTH =\n  process.env.BYPASS_AUTH === \"true\" || process.env.BYPASS_AUTH === \"1\";\n\nconst ADMIN_ROLE_CODES = [\"admin\", \"SUPER_ADMIN\"];\n\nexport function getCrudPermissionsFromSession(\n  session: Session | null,\n  entity: string,\n): {\n  create: boolean;\n  view: boolean;\n  update: boolean;\n  delete: boolean;\n  export: boolean;\n  import: boolean;\n  approve: boolean;\n  reject: boolean;\n} {\n  if (BYPASS_AUTH) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  if (!session?.user) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const user = session.user as ExtendedUser;\n\n  if (!user.id) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));\n  if (isAdmin) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  const permissions = user.permissions || [];\n  const permissionKeys = new Set(\n    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`),\n  );\n\n  const hasPermission = (action: string) => {\n    const key = `${entity}:${action}`;\n    return permissionKeys.has(key);\n  };\n\n  return {\n    create: hasPermission(getActionCode(\"create\")),\n    view: hasPermission(getActionCode(\"view\")),\n    update: hasPermission(getActionCode(\"update\")),\n    delete: hasPermission(getActionCode(\"delete\")),\n    export: hasPermission(getActionCode(\"export\")),\n    import: hasPermission(getActionCode(\"import\")),\n    approve: hasPermission(getActionCode(\"approve\")),\n    reject: hasPermission(getActionCode(\"reject\")),\n  };\n}\n","import type { CrudPermissions, EntityConfig } from \"../../types\";\nimport type { Session } from \"next-auth\";\n\nimport { getCrudPermissionsFromSession } from \"../../rbac/permissions\";\n\n/**\n * Get CRUD permissions for a user based on their session\n * Permissions are read from session (loaded from cache in session callback)\n * Uses memoization to return stable object references with TTL\n */\nexport async function getCrudPermissions(\n  session: Session | null,\n  entity: string,\n): Promise<CrudPermissions> {\n  // Get permissions from session (already loaded in JWT)\n  const perms = getCrudPermissionsFromSession(session, entity);\n  return {\n    create: perms.create,\n    read: perms.view,\n    update: perms.update,\n    delete: perms.delete,\n    export: perms.export,\n    import: perms.import,\n    approve: perms.approve,\n    reject: perms.reject,\n  };\n}\n\n/**\n * Merge config permissions with user permissions\n * User permissions take precedence\n * Config permissions are optional, so undefined means \"allow if user has permission\"\n */\nexport function mergePermissions(\n  configPermissions: EntityConfig[\"permissions\"],\n  userPermissions: CrudPermissions,\n): CrudPermissions {\n  if (!configPermissions) {\n    return userPermissions;\n  }\n\n  return {\n    create: (configPermissions.create ?? true) && userPermissions.create,\n    read: (configPermissions.read ?? true) && userPermissions.read,\n    update: (configPermissions.update ?? true) && userPermissions.update,\n    delete: (configPermissions.delete ?? true) && userPermissions.delete,\n    export: (configPermissions.export ?? true) && userPermissions.export,\n    import: (configPermissions.import ?? true) && userPermissions.import,\n    approve: (configPermissions.approve ?? true) && userPermissions.approve,\n    reject: (configPermissions.reject ?? true) && userPermissions.reject,\n  };\n}\n"]}

package/dist/data-table-skeleton-12NA8Mjx.d.mts

@@ -0,0 +1,39 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+interface DataTableSkeletonProps {
+    /**
+     * Number of columns to render
+     */
+    columns: number;
+    /**
+     * Number of rows to render
+     * @default 5
+     */
+    rows?: number;
+    /**
+     * Height of each skeleton cell
+     * @default "h-5"
+     */
+    cellHeight?: string;
+    /**
+     * Show checkbox column skeleton
+     * @default false
+     */
+    showCheckbox?: boolean;
+    /**
+     * Show row number column skeleton
+     * @default false
+     */
+    showRowNumber?: boolean;
+}
+/**
+ * Skeleton loading state for DataTable
+ * Renders loading placeholder rows while data is being fetched
+ */
+declare function DataTableSkeleton({ columns, rows, cellHeight, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
+/**
+ * Full table skeleton including header
+ */
+declare function DataTableFullSkeleton({ columns, rows, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
+
+export { DataTableFullSkeleton as D, DataTableSkeleton as a, type DataTableSkeletonProps as b };

package/dist/data-table-skeleton-12NA8Mjx.d.ts

@@ -0,0 +1,39 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+
+interface DataTableSkeletonProps {
+    /**
+     * Number of columns to render
+     */
+    columns: number;
+    /**
+     * Number of rows to render
+     * @default 5
+     */
+    rows?: number;
+    /**
+     * Height of each skeleton cell
+     * @default "h-5"
+     */
+    cellHeight?: string;
+    /**
+     * Show checkbox column skeleton
+     * @default false
+     */
+    showCheckbox?: boolean;
+    /**
+     * Show row number column skeleton
+     * @default false
+     */
+    showRowNumber?: boolean;
+}
+/**
+ * Skeleton loading state for DataTable
+ * Renders loading placeholder rows while data is being fetched
+ */
+declare function DataTableSkeleton({ columns, rows, cellHeight, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
+/**
+ * Full table skeleton including header
+ */
+declare function DataTableFullSkeleton({ columns, rows, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
+
+export { DataTableFullSkeleton as D, DataTableSkeleton as a, type DataTableSkeletonProps as b };

package/dist/dialog-bKfjZMTd.d.mts

@@ -0,0 +1,22 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as React from 'react';
+import * as DialogPrimitive from '@radix-ui/react-dialog';
+
+declare const Dialog: React.FC<DialogPrimitive.DialogProps>;
+declare const DialogTrigger: React.ForwardRefExoticComponent<DialogPrimitive.DialogTriggerProps & React.RefAttributes<HTMLButtonElement>>;
+declare const DialogPortal: React.FC<DialogPrimitive.DialogPortalProps>;
+declare const DialogClose: React.ForwardRefExoticComponent<DialogPrimitive.DialogCloseProps & React.RefAttributes<HTMLButtonElement>>;
+declare const DialogOverlay: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogOverlayProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
+declare const DialogContent: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogContentProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
+declare const DialogHeader: {
+    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
+    displayName: string;
+};
+declare const DialogFooter: {
+    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
+    displayName: string;
+};
+declare const DialogTitle: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogTitleProps & React.RefAttributes<HTMLHeadingElement>, "ref"> & React.RefAttributes<HTMLHeadingElement>>;
+declare const DialogDescription: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogDescriptionProps & React.RefAttributes<HTMLParagraphElement>, "ref"> & React.RefAttributes<HTMLParagraphElement>>;
+
+export { Dialog as D, DialogClose as a, DialogContent as b, DialogDescription as c, DialogFooter as d, DialogHeader as e, DialogOverlay as f, DialogPortal as g, DialogTitle as h, DialogTrigger as i };

package/dist/dialog-bKfjZMTd.d.ts

@@ -0,0 +1,22 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as React from 'react';
+import * as DialogPrimitive from '@radix-ui/react-dialog';
+
+declare const Dialog: React.FC<DialogPrimitive.DialogProps>;
+declare const DialogTrigger: React.ForwardRefExoticComponent<DialogPrimitive.DialogTriggerProps & React.RefAttributes<HTMLButtonElement>>;
+declare const DialogPortal: React.FC<DialogPrimitive.DialogPortalProps>;
+declare const DialogClose: React.ForwardRefExoticComponent<DialogPrimitive.DialogCloseProps & React.RefAttributes<HTMLButtonElement>>;
+declare const DialogOverlay: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogOverlayProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
+declare const DialogContent: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogContentProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
+declare const DialogHeader: {
+    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
+    displayName: string;
+};
+declare const DialogFooter: {
+    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
+    displayName: string;
+};
+declare const DialogTitle: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogTitleProps & React.RefAttributes<HTMLHeadingElement>, "ref"> & React.RefAttributes<HTMLHeadingElement>>;
+declare const DialogDescription: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogDescriptionProps & React.RefAttributes<HTMLParagraphElement>, "ref"> & React.RefAttributes<HTMLParagraphElement>>;
+
+export { Dialog as D, DialogClose as a, DialogContent as b, DialogDescription as c, DialogFooter as d, DialogHeader as e, DialogOverlay as f, DialogPortal as g, DialogTitle as h, DialogTrigger as i };

package/dist/dynamic-icon-DrGIiu2N.d.mts

@@ -0,0 +1,10 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { LucideProps, icons } from 'lucide-react';
+
+type DynamicIconNameType = keyof typeof icons;
+interface DynamicIconProps extends LucideProps {
+    name?: DynamicIconNameType;
+}
+declare function DynamicIcon({ name, ...props }: DynamicIconProps): react_jsx_runtime.JSX.Element | null;
+
+export { DynamicIcon as D, type DynamicIconNameType as a };

package/dist/dynamic-icon-DrGIiu2N.d.ts

@@ -0,0 +1,10 @@
+import * as react_jsx_runtime from 'react/jsx-runtime';
+import { LucideProps, icons } from 'lucide-react';
+
+type DynamicIconNameType = keyof typeof icons;
+interface DynamicIconProps extends LucideProps {
+    name?: DynamicIconNameType;
+}
+declare function DynamicIcon({ name, ...props }: DynamicIconProps): react_jsx_runtime.JSX.Element | null;
+
+export { DynamicIcon as D, type DynamicIconNameType as a };