@goplusvn/core 0.1.1 → 0.1.3

package/dist/crud/server.d.mts

@@ -1,20 +0,0 @@
-import { CrudPermissions, EntityConfig } from '../types/index.mjs';
-import { Session } from 'next-auth';
-import 'lucide-react';
-import 'react';
-import 'zod';
-
-/**
- * Get CRUD permissions for a user based on their session
- * Permissions are read from session (loaded from cache in session callback)
- * Uses memoization to return stable object references with TTL
- */
-declare function getCrudPermissions(session: Session | null, entity: string): Promise<CrudPermissions>;
-/**
- * Merge config permissions with user permissions
- * User permissions take precedence
- * Config permissions are optional, so undefined means "allow if user has permission"
- */
-declare function mergePermissions(configPermissions: EntityConfig["permissions"], userPermissions: CrudPermissions): CrudPermissions;
-
-export { getCrudPermissions, mergePermissions };

package/dist/crud/server.d.ts

@@ -1,20 +0,0 @@
-import { CrudPermissions, EntityConfig } from '../types/index.js';
-import { Session } from 'next-auth';
-import 'lucide-react';
-import 'react';
-import 'zod';
-
-/**
- * Get CRUD permissions for a user based on their session
- * Permissions are read from session (loaded from cache in session callback)
- * Uses memoization to return stable object references with TTL
- */
-declare function getCrudPermissions(session: Session | null, entity: string): Promise<CrudPermissions>;
-/**
- * Merge config permissions with user permissions
- * User permissions take precedence
- * Config permissions are optional, so undefined means "allow if user has permission"
- */
-declare function mergePermissions(configPermissions: EntityConfig["permissions"], userPermissions: CrudPermissions): CrudPermissions;
-
-export { getCrudPermissions, mergePermissions };

package/dist/crud/server.js

@@ -1,123 +0,0 @@
-'use strict';
-
-// src/rbac/permissions.ts
-var CRUD_ACTIONS = {
-  create: "create",
-  view: "view",
-  update: "update",
-  delete: "delete",
-  export: "export",
-  import: "import",
-  approve: "approve",
-  reject: "reject"
-};
-function getActionCode(operation) {
-  return CRUD_ACTIONS[operation];
-}
-var BYPASS_AUTH = process.env.BYPASS_AUTH === "true" || process.env.BYPASS_AUTH === "1";
-var ADMIN_ROLE_CODES = ["admin", "SUPER_ADMIN"];
-function getCrudPermissionsFromSession(session, entity) {
-  if (BYPASS_AUTH) {
-    return {
-      create: true,
-      view: true,
-      update: true,
-      delete: true,
-      export: true,
-      import: true,
-      approve: true,
-      reject: true
-    };
-  }
-  if (!session?.user) {
-    return {
-      create: false,
-      view: false,
-      update: false,
-      delete: false,
-      export: false,
-      import: false,
-      approve: false,
-      reject: false
-    };
-  }
-  const user = session.user;
-  if (!user.id) {
-    return {
-      create: false,
-      view: false,
-      update: false,
-      delete: false,
-      export: false,
-      import: false,
-      approve: false,
-      reject: false
-    };
-  }
-  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));
-  if (isAdmin) {
-    return {
-      create: true,
-      view: true,
-      update: true,
-      delete: true,
-      export: true,
-      import: true,
-      approve: true,
-      reject: true
-    };
-  }
-  const permissions = user.permissions || [];
-  const permissionKeys = new Set(
-    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`)
-  );
-  const hasPermission = (action) => {
-    const key = `${entity}:${action}`;
-    return permissionKeys.has(key);
-  };
-  return {
-    create: hasPermission(getActionCode("create")),
-    view: hasPermission(getActionCode("view")),
-    update: hasPermission(getActionCode("update")),
-    delete: hasPermission(getActionCode("delete")),
-    export: hasPermission(getActionCode("export")),
-    import: hasPermission(getActionCode("import")),
-    approve: hasPermission(getActionCode("approve")),
-    reject: hasPermission(getActionCode("reject"))
-  };
-}
-
-// src/crud/lib/permissions.ts
-async function getCrudPermissions(session, entity) {
-  const perms = getCrudPermissionsFromSession(session, entity);
-  return {
-    create: perms.create,
-    read: perms.view,
-    update: perms.update,
-    delete: perms.delete,
-    export: perms.export,
-    import: perms.import,
-    approve: perms.approve,
-    reject: perms.reject
-  };
-}
-function mergePermissions(configPermissions, userPermissions) {
-  if (!configPermissions) {
-    return userPermissions;
-  }
-  return {
-    create: (configPermissions.create ?? true) && userPermissions.create,
-    read: (configPermissions.read ?? true) && userPermissions.read,
-    update: (configPermissions.update ?? true) && userPermissions.update,
-    delete: (configPermissions.delete ?? true) && userPermissions.delete,
-    export: (configPermissions.export ?? true) && userPermissions.export,
-    import: (configPermissions.import ?? true) && userPermissions.import,
-    approve: (configPermissions.approve ?? true) && userPermissions.approve,
-    reject: (configPermissions.reject ?? true) && userPermissions.reject
-  };
-}
-
-exports.getCrudPermissions = getCrudPermissions;
-exports.mergePermissions = mergePermissions;
-//# sourceMappingURL=server.js.map
-//# sourceMappingURL=server.js.map

package/dist/crud/server.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/rbac/permissions.ts","../../src/crud/lib/permissions.ts"],"names":[],"mappings":";;;AAWO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ,QAAA;AAAA,EACR,IAAA,EAAM,MAAA;AAAA,EACN,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAIO,SAAS,cAAc,SAAA,EAA+B;AAC3D,EAAA,OAAO,aAAa,SAAS,CAAA;AAC/B;AAeA,IAAM,cACJ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,MAAA,IAAU,OAAA,CAAQ,IAAI,WAAA,KAAgB,GAAA;AAEpE,IAAM,gBAAA,GAAmB,CAAC,OAAA,EAAS,aAAa,CAAA;AAEzC,SAAS,6BAAA,CACd,SACA,MAAA,EAUA;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AAErB,EAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,EAAO,IAAA,CAAK,CAAC,IAAA,KAAS,gBAAA,CAAiB,QAAA,CAAS,IAAI,CAAC,CAAA;AAC1E,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,IAAe,EAAC;AACzC,EAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,IACzB,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,YAAY,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE;AAAA,GAC5D;AAEA,EAAA,MAAM,aAAA,GAAgB,CAAC,MAAA,KAAmB;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,OAAO,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,IAAA,EAAM,aAAA,CAAc,aAAA,CAAc,MAAM,CAAC,CAAA;AAAA,IACzC,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,aAAA,CAAc,aAAA,CAAc,SAAS,CAAC,CAAA;AAAA,IAC/C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC;AAAA,GAC/C;AACF;;;AC5HA,eAAsB,kBAAA,CACpB,SACA,MAAA,EAC0B;AAE1B,EAAA,MAAM,KAAA,GAAQ,6BAAA,CAA8B,OAAA,EAAS,MAAM,CAAA;AAC3D,EAAA,OAAO;AAAA,IACL,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAQ,KAAA,CAAM;AAAA,GAChB;AACF;AAOO,SAAS,gBAAA,CACd,mBACA,eAAA,EACiB;AACjB,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,IAAA,EAAA,CAAO,iBAAA,CAAkB,IAAA,IAAQ,IAAA,KAAS,eAAA,CAAgB,IAAA;AAAA,IAC1D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,OAAA,EAAA,CAAU,iBAAA,CAAkB,OAAA,IAAW,IAAA,KAAS,eAAA,CAAgB,OAAA;AAAA,IAChE,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB;AAAA,GAChE;AACF","file":"server.js","sourcesContent":["// @goerp/core/rbac/permissions\n// Server-only permission utilities - no client/UI imports\n// Use this in Server Components and API routes to avoid bundling client code\n\nimport type { Permission } from \"../types\";\nimport type { Session } from \"next-auth\";\n\n// ============================================================================\n// Action Mapping\n// ============================================================================\n\nexport const CRUD_ACTIONS = {\n  create: \"create\",\n  view: \"view\",\n  update: \"update\",\n  delete: \"delete\",\n  export: \"export\",\n  import: \"import\",\n  approve: \"approve\",\n  reject: \"reject\",\n} as const;\n\nexport type CrudAction = keyof typeof CRUD_ACTIONS;\n\nexport function getActionCode(operation: CrudAction): string {\n  return CRUD_ACTIONS[operation];\n}\n\n// ============================================================================\n// Permission Helpers\n// ============================================================================\n\ninterface ExtendedUser {\n  id: string;\n  name?: string | null;\n  email?: string | null;\n  image?: string | null;\n  roles?: string[];\n  permissions?: Permission[];\n}\n\nconst BYPASS_AUTH =\n  process.env.BYPASS_AUTH === \"true\" || process.env.BYPASS_AUTH === \"1\";\n\nconst ADMIN_ROLE_CODES = [\"admin\", \"SUPER_ADMIN\"];\n\nexport function getCrudPermissionsFromSession(\n  session: Session | null,\n  entity: string,\n): {\n  create: boolean;\n  view: boolean;\n  update: boolean;\n  delete: boolean;\n  export: boolean;\n  import: boolean;\n  approve: boolean;\n  reject: boolean;\n} {\n  if (BYPASS_AUTH) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  if (!session?.user) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const user = session.user as ExtendedUser;\n\n  if (!user.id) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));\n  if (isAdmin) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  const permissions = user.permissions || [];\n  const permissionKeys = new Set(\n    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`),\n  );\n\n  const hasPermission = (action: string) => {\n    const key = `${entity}:${action}`;\n    return permissionKeys.has(key);\n  };\n\n  return {\n    create: hasPermission(getActionCode(\"create\")),\n    view: hasPermission(getActionCode(\"view\")),\n    update: hasPermission(getActionCode(\"update\")),\n    delete: hasPermission(getActionCode(\"delete\")),\n    export: hasPermission(getActionCode(\"export\")),\n    import: hasPermission(getActionCode(\"import\")),\n    approve: hasPermission(getActionCode(\"approve\")),\n    reject: hasPermission(getActionCode(\"reject\")),\n  };\n}\n","import type { CrudPermissions, EntityConfig } from \"../../types\";\nimport type { Session } from \"next-auth\";\n\nimport { getCrudPermissionsFromSession } from \"../../rbac/permissions\";\n\n/**\n * Get CRUD permissions for a user based on their session\n * Permissions are read from session (loaded from cache in session callback)\n * Uses memoization to return stable object references with TTL\n */\nexport async function getCrudPermissions(\n  session: Session | null,\n  entity: string,\n): Promise<CrudPermissions> {\n  // Get permissions from session (already loaded in JWT)\n  const perms = getCrudPermissionsFromSession(session, entity);\n  return {\n    create: perms.create,\n    read: perms.view,\n    update: perms.update,\n    delete: perms.delete,\n    export: perms.export,\n    import: perms.import,\n    approve: perms.approve,\n    reject: perms.reject,\n  };\n}\n\n/**\n * Merge config permissions with user permissions\n * User permissions take precedence\n * Config permissions are optional, so undefined means \"allow if user has permission\"\n */\nexport function mergePermissions(\n  configPermissions: EntityConfig[\"permissions\"],\n  userPermissions: CrudPermissions,\n): CrudPermissions {\n  if (!configPermissions) {\n    return userPermissions;\n  }\n\n  return {\n    create: (configPermissions.create ?? true) && userPermissions.create,\n    read: (configPermissions.read ?? true) && userPermissions.read,\n    update: (configPermissions.update ?? true) && userPermissions.update,\n    delete: (configPermissions.delete ?? true) && userPermissions.delete,\n    export: (configPermissions.export ?? true) && userPermissions.export,\n    import: (configPermissions.import ?? true) && userPermissions.import,\n    approve: (configPermissions.approve ?? true) && userPermissions.approve,\n    reject: (configPermissions.reject ?? true) && userPermissions.reject,\n  };\n}\n"]}

package/dist/crud/server.mjs

@@ -1,120 +0,0 @@
-// src/rbac/permissions.ts
-var CRUD_ACTIONS = {
-  create: "create",
-  view: "view",
-  update: "update",
-  delete: "delete",
-  export: "export",
-  import: "import",
-  approve: "approve",
-  reject: "reject"
-};
-function getActionCode(operation) {
-  return CRUD_ACTIONS[operation];
-}
-var BYPASS_AUTH = process.env.BYPASS_AUTH === "true" || process.env.BYPASS_AUTH === "1";
-var ADMIN_ROLE_CODES = ["admin", "SUPER_ADMIN"];
-function getCrudPermissionsFromSession(session, entity) {
-  if (BYPASS_AUTH) {
-    return {
-      create: true,
-      view: true,
-      update: true,
-      delete: true,
-      export: true,
-      import: true,
-      approve: true,
-      reject: true
-    };
-  }
-  if (!session?.user) {
-    return {
-      create: false,
-      view: false,
-      update: false,
-      delete: false,
-      export: false,
-      import: false,
-      approve: false,
-      reject: false
-    };
-  }
-  const user = session.user;
-  if (!user.id) {
-    return {
-      create: false,
-      view: false,
-      update: false,
-      delete: false,
-      export: false,
-      import: false,
-      approve: false,
-      reject: false
-    };
-  }
-  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));
-  if (isAdmin) {
-    return {
-      create: true,
-      view: true,
-      update: true,
-      delete: true,
-      export: true,
-      import: true,
-      approve: true,
-      reject: true
-    };
-  }
-  const permissions = user.permissions || [];
-  const permissionKeys = new Set(
-    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`)
-  );
-  const hasPermission = (action) => {
-    const key = `${entity}:${action}`;
-    return permissionKeys.has(key);
-  };
-  return {
-    create: hasPermission(getActionCode("create")),
-    view: hasPermission(getActionCode("view")),
-    update: hasPermission(getActionCode("update")),
-    delete: hasPermission(getActionCode("delete")),
-    export: hasPermission(getActionCode("export")),
-    import: hasPermission(getActionCode("import")),
-    approve: hasPermission(getActionCode("approve")),
-    reject: hasPermission(getActionCode("reject"))
-  };
-}
-
-// src/crud/lib/permissions.ts
-async function getCrudPermissions(session, entity) {
-  const perms = getCrudPermissionsFromSession(session, entity);
-  return {
-    create: perms.create,
-    read: perms.view,
-    update: perms.update,
-    delete: perms.delete,
-    export: perms.export,
-    import: perms.import,
-    approve: perms.approve,
-    reject: perms.reject
-  };
-}
-function mergePermissions(configPermissions, userPermissions) {
-  if (!configPermissions) {
-    return userPermissions;
-  }
-  return {
-    create: (configPermissions.create ?? true) && userPermissions.create,
-    read: (configPermissions.read ?? true) && userPermissions.read,
-    update: (configPermissions.update ?? true) && userPermissions.update,
-    delete: (configPermissions.delete ?? true) && userPermissions.delete,
-    export: (configPermissions.export ?? true) && userPermissions.export,
-    import: (configPermissions.import ?? true) && userPermissions.import,
-    approve: (configPermissions.approve ?? true) && userPermissions.approve,
-    reject: (configPermissions.reject ?? true) && userPermissions.reject
-  };
-}
-
-export { getCrudPermissions, mergePermissions };
-//# sourceMappingURL=server.mjs.map
-//# sourceMappingURL=server.mjs.map

package/dist/crud/server.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/rbac/permissions.ts","../../src/crud/lib/permissions.ts"],"names":[],"mappings":";AAWO,IAAM,YAAA,GAAe;AAAA,EAC1B,MAAA,EAAQ,QAAA;AAAA,EACR,IAAA,EAAM,MAAA;AAAA,EACN,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,MAAA,EAAQ,QAAA;AAAA,EACR,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ;AACV,CAAA;AAIO,SAAS,cAAc,SAAA,EAA+B;AAC3D,EAAA,OAAO,aAAa,SAAS,CAAA;AAC/B;AAeA,IAAM,cACJ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,MAAA,IAAU,OAAA,CAAQ,IAAI,WAAA,KAAgB,GAAA;AAEpE,IAAM,gBAAA,GAAmB,CAAC,OAAA,EAAS,aAAa,CAAA;AAEzC,SAAS,6BAAA,CACd,SACA,MAAA,EAUA;AACA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,SAAS,IAAA,EAAM;AAClB,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,OAAA,CAAQ,IAAA;AAErB,EAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,KAAA;AAAA,MACN,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,EAAO,IAAA,CAAK,CAAC,IAAA,KAAS,gBAAA,CAAiB,QAAA,CAAS,IAAI,CAAC,CAAA;AAC1E,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,IAAA;AAAA,MACR,IAAA,EAAM,IAAA;AAAA,MACN,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,IAAA;AAAA,MACT,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GAAc,IAAA,CAAK,WAAA,IAAe,EAAC;AACzC,EAAA,MAAM,iBAAiB,IAAI,GAAA;AAAA,IACzB,WAAA,CAAY,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,YAAY,CAAA,CAAA,EAAI,CAAA,CAAE,UAAU,CAAA,CAAE;AAAA,GAC5D;AAEA,EAAA,MAAM,aAAA,GAAgB,CAAC,MAAA,KAAmB;AACxC,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA;AAC/B,IAAA,OAAO,cAAA,CAAe,IAAI,GAAG,CAAA;AAAA,EAC/B,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,IAAA,EAAM,aAAA,CAAc,aAAA,CAAc,MAAM,CAAC,CAAA;AAAA,IACzC,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC,CAAA;AAAA,IAC7C,OAAA,EAAS,aAAA,CAAc,aAAA,CAAc,SAAS,CAAC,CAAA;AAAA,IAC/C,MAAA,EAAQ,aAAA,CAAc,aAAA,CAAc,QAAQ,CAAC;AAAA,GAC/C;AACF;;;AC5HA,eAAsB,kBAAA,CACpB,SACA,MAAA,EAC0B;AAE1B,EAAA,MAAM,KAAA,GAAQ,6BAAA,CAA8B,OAAA,EAAS,MAAM,CAAA;AAC3D,EAAA,OAAO;AAAA,IACL,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,MAAM,KAAA,CAAM,IAAA;AAAA,IACZ,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,QAAQ,KAAA,CAAM,MAAA;AAAA,IACd,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,QAAQ,KAAA,CAAM;AAAA,GAChB;AACF;AAOO,SAAS,gBAAA,CACd,mBACA,eAAA,EACiB;AACjB,EAAA,IAAI,CAAC,iBAAA,EAAmB;AACtB,IAAA,OAAO,eAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,IAAA,EAAA,CAAO,iBAAA,CAAkB,IAAA,IAAQ,IAAA,KAAS,eAAA,CAAgB,IAAA;AAAA,IAC1D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB,MAAA;AAAA,IAC9D,OAAA,EAAA,CAAU,iBAAA,CAAkB,OAAA,IAAW,IAAA,KAAS,eAAA,CAAgB,OAAA;AAAA,IAChE,MAAA,EAAA,CAAS,iBAAA,CAAkB,MAAA,IAAU,IAAA,KAAS,eAAA,CAAgB;AAAA,GAChE;AACF","file":"server.mjs","sourcesContent":["// @goerp/core/rbac/permissions\n// Server-only permission utilities - no client/UI imports\n// Use this in Server Components and API routes to avoid bundling client code\n\nimport type { Permission } from \"../types\";\nimport type { Session } from \"next-auth\";\n\n// ============================================================================\n// Action Mapping\n// ============================================================================\n\nexport const CRUD_ACTIONS = {\n  create: \"create\",\n  view: \"view\",\n  update: \"update\",\n  delete: \"delete\",\n  export: \"export\",\n  import: \"import\",\n  approve: \"approve\",\n  reject: \"reject\",\n} as const;\n\nexport type CrudAction = keyof typeof CRUD_ACTIONS;\n\nexport function getActionCode(operation: CrudAction): string {\n  return CRUD_ACTIONS[operation];\n}\n\n// ============================================================================\n// Permission Helpers\n// ============================================================================\n\ninterface ExtendedUser {\n  id: string;\n  name?: string | null;\n  email?: string | null;\n  image?: string | null;\n  roles?: string[];\n  permissions?: Permission[];\n}\n\nconst BYPASS_AUTH =\n  process.env.BYPASS_AUTH === \"true\" || process.env.BYPASS_AUTH === \"1\";\n\nconst ADMIN_ROLE_CODES = [\"admin\", \"SUPER_ADMIN\"];\n\nexport function getCrudPermissionsFromSession(\n  session: Session | null,\n  entity: string,\n): {\n  create: boolean;\n  view: boolean;\n  update: boolean;\n  delete: boolean;\n  export: boolean;\n  import: boolean;\n  approve: boolean;\n  reject: boolean;\n} {\n  if (BYPASS_AUTH) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  if (!session?.user) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const user = session.user as ExtendedUser;\n\n  if (!user.id) {\n    return {\n      create: false,\n      view: false,\n      update: false,\n      delete: false,\n      export: false,\n      import: false,\n      approve: false,\n      reject: false,\n    };\n  }\n\n  const isAdmin = user.roles?.some((role) => ADMIN_ROLE_CODES.includes(role));\n  if (isAdmin) {\n    return {\n      create: true,\n      view: true,\n      update: true,\n      delete: true,\n      export: true,\n      import: true,\n      approve: true,\n      reject: true,\n    };\n  }\n\n  const permissions = user.permissions || [];\n  const permissionKeys = new Set(\n    permissions.map((p) => `${p.resourceCode}:${p.actionCode}`),\n  );\n\n  const hasPermission = (action: string) => {\n    const key = `${entity}:${action}`;\n    return permissionKeys.has(key);\n  };\n\n  return {\n    create: hasPermission(getActionCode(\"create\")),\n    view: hasPermission(getActionCode(\"view\")),\n    update: hasPermission(getActionCode(\"update\")),\n    delete: hasPermission(getActionCode(\"delete\")),\n    export: hasPermission(getActionCode(\"export\")),\n    import: hasPermission(getActionCode(\"import\")),\n    approve: hasPermission(getActionCode(\"approve\")),\n    reject: hasPermission(getActionCode(\"reject\")),\n  };\n}\n","import type { CrudPermissions, EntityConfig } from \"../../types\";\nimport type { Session } from \"next-auth\";\n\nimport { getCrudPermissionsFromSession } from \"../../rbac/permissions\";\n\n/**\n * Get CRUD permissions for a user based on their session\n * Permissions are read from session (loaded from cache in session callback)\n * Uses memoization to return stable object references with TTL\n */\nexport async function getCrudPermissions(\n  session: Session | null,\n  entity: string,\n): Promise<CrudPermissions> {\n  // Get permissions from session (already loaded in JWT)\n  const perms = getCrudPermissionsFromSession(session, entity);\n  return {\n    create: perms.create,\n    read: perms.view,\n    update: perms.update,\n    delete: perms.delete,\n    export: perms.export,\n    import: perms.import,\n    approve: perms.approve,\n    reject: perms.reject,\n  };\n}\n\n/**\n * Merge config permissions with user permissions\n * User permissions take precedence\n * Config permissions are optional, so undefined means \"allow if user has permission\"\n */\nexport function mergePermissions(\n  configPermissions: EntityConfig[\"permissions\"],\n  userPermissions: CrudPermissions,\n): CrudPermissions {\n  if (!configPermissions) {\n    return userPermissions;\n  }\n\n  return {\n    create: (configPermissions.create ?? true) && userPermissions.create,\n    read: (configPermissions.read ?? true) && userPermissions.read,\n    update: (configPermissions.update ?? true) && userPermissions.update,\n    delete: (configPermissions.delete ?? true) && userPermissions.delete,\n    export: (configPermissions.export ?? true) && userPermissions.export,\n    import: (configPermissions.import ?? true) && userPermissions.import,\n    approve: (configPermissions.approve ?? true) && userPermissions.approve,\n    reject: (configPermissions.reject ?? true) && userPermissions.reject,\n  };\n}\n"]}

package/dist/data-table-skeleton-12NA8Mjx.d.mts

@@ -1,39 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-
-interface DataTableSkeletonProps {
-    /**
-     * Number of columns to render
-     */
-    columns: number;
-    /**
-     * Number of rows to render
-     * @default 5
-     */
-    rows?: number;
-    /**
-     * Height of each skeleton cell
-     * @default "h-5"
-     */
-    cellHeight?: string;
-    /**
-     * Show checkbox column skeleton
-     * @default false
-     */
-    showCheckbox?: boolean;
-    /**
-     * Show row number column skeleton
-     * @default false
-     */
-    showRowNumber?: boolean;
-}
-/**
- * Skeleton loading state for DataTable
- * Renders loading placeholder rows while data is being fetched
- */
-declare function DataTableSkeleton({ columns, rows, cellHeight, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
-/**
- * Full table skeleton including header
- */
-declare function DataTableFullSkeleton({ columns, rows, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
-
-export { DataTableFullSkeleton as D, DataTableSkeleton as a, type DataTableSkeletonProps as b };

package/dist/data-table-skeleton-12NA8Mjx.d.ts

@@ -1,39 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-
-interface DataTableSkeletonProps {
-    /**
-     * Number of columns to render
-     */
-    columns: number;
-    /**
-     * Number of rows to render
-     * @default 5
-     */
-    rows?: number;
-    /**
-     * Height of each skeleton cell
-     * @default "h-5"
-     */
-    cellHeight?: string;
-    /**
-     * Show checkbox column skeleton
-     * @default false
-     */
-    showCheckbox?: boolean;
-    /**
-     * Show row number column skeleton
-     * @default false
-     */
-    showRowNumber?: boolean;
-}
-/**
- * Skeleton loading state for DataTable
- * Renders loading placeholder rows while data is being fetched
- */
-declare function DataTableSkeleton({ columns, rows, cellHeight, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
-/**
- * Full table skeleton including header
- */
-declare function DataTableFullSkeleton({ columns, rows, showCheckbox, showRowNumber, }: DataTableSkeletonProps): react_jsx_runtime.JSX.Element;
-
-export { DataTableFullSkeleton as D, DataTableSkeleton as a, type DataTableSkeletonProps as b };

package/dist/dialog-bKfjZMTd.d.mts

@@ -1,22 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import * as React from 'react';
-import * as DialogPrimitive from '@radix-ui/react-dialog';
-
-declare const Dialog: React.FC<DialogPrimitive.DialogProps>;
-declare const DialogTrigger: React.ForwardRefExoticComponent<DialogPrimitive.DialogTriggerProps & React.RefAttributes<HTMLButtonElement>>;
-declare const DialogPortal: React.FC<DialogPrimitive.DialogPortalProps>;
-declare const DialogClose: React.ForwardRefExoticComponent<DialogPrimitive.DialogCloseProps & React.RefAttributes<HTMLButtonElement>>;
-declare const DialogOverlay: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogOverlayProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
-declare const DialogContent: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogContentProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
-declare const DialogHeader: {
-    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
-    displayName: string;
-};
-declare const DialogFooter: {
-    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
-    displayName: string;
-};
-declare const DialogTitle: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogTitleProps & React.RefAttributes<HTMLHeadingElement>, "ref"> & React.RefAttributes<HTMLHeadingElement>>;
-declare const DialogDescription: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogDescriptionProps & React.RefAttributes<HTMLParagraphElement>, "ref"> & React.RefAttributes<HTMLParagraphElement>>;
-
-export { Dialog as D, DialogClose as a, DialogContent as b, DialogDescription as c, DialogFooter as d, DialogHeader as e, DialogOverlay as f, DialogPortal as g, DialogTitle as h, DialogTrigger as i };

package/dist/dialog-bKfjZMTd.d.ts

@@ -1,22 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import * as React from 'react';
-import * as DialogPrimitive from '@radix-ui/react-dialog';
-
-declare const Dialog: React.FC<DialogPrimitive.DialogProps>;
-declare const DialogTrigger: React.ForwardRefExoticComponent<DialogPrimitive.DialogTriggerProps & React.RefAttributes<HTMLButtonElement>>;
-declare const DialogPortal: React.FC<DialogPrimitive.DialogPortalProps>;
-declare const DialogClose: React.ForwardRefExoticComponent<DialogPrimitive.DialogCloseProps & React.RefAttributes<HTMLButtonElement>>;
-declare const DialogOverlay: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogOverlayProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
-declare const DialogContent: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogContentProps & React.RefAttributes<HTMLDivElement>, "ref"> & React.RefAttributes<HTMLDivElement>>;
-declare const DialogHeader: {
-    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
-    displayName: string;
-};
-declare const DialogFooter: {
-    ({ className, ...props }: React.HTMLAttributes<HTMLDivElement>): react_jsx_runtime.JSX.Element;
-    displayName: string;
-};
-declare const DialogTitle: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogTitleProps & React.RefAttributes<HTMLHeadingElement>, "ref"> & React.RefAttributes<HTMLHeadingElement>>;
-declare const DialogDescription: React.ForwardRefExoticComponent<Omit<DialogPrimitive.DialogDescriptionProps & React.RefAttributes<HTMLParagraphElement>, "ref"> & React.RefAttributes<HTMLParagraphElement>>;
-
-export { Dialog as D, DialogClose as a, DialogContent as b, DialogDescription as c, DialogFooter as d, DialogHeader as e, DialogOverlay as f, DialogPortal as g, DialogTitle as h, DialogTrigger as i };

package/dist/dynamic-icon-DrGIiu2N.d.mts

@@ -1,10 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { LucideProps, icons } from 'lucide-react';
-
-type DynamicIconNameType = keyof typeof icons;
-interface DynamicIconProps extends LucideProps {
-    name?: DynamicIconNameType;
-}
-declare function DynamicIcon({ name, ...props }: DynamicIconProps): react_jsx_runtime.JSX.Element | null;
-
-export { DynamicIcon as D, type DynamicIconNameType as a };

package/dist/dynamic-icon-DrGIiu2N.d.ts

@@ -1,10 +0,0 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { LucideProps, icons } from 'lucide-react';
-
-type DynamicIconNameType = keyof typeof icons;
-interface DynamicIconProps extends LucideProps {
-    name?: DynamicIconNameType;
-}
-declare function DynamicIcon({ name, ...props }: DynamicIconProps): react_jsx_runtime.JSX.Element | null;
-
-export { DynamicIcon as D, type DynamicIconNameType as a };