@grantjs/client 1.0.0 → 1.0.1

package/dist/react.cjs

@@ -1,139 +1,249 @@
-"use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const jsxRuntime = require("react/jsx-runtime");
-const react = require("react");
-const index = require("./index.cjs");
-const GrantContext = react.createContext(null);
+const require_grant_client = require("./grant-client-zE-9zy3m.cjs");
+let react = require("react");
+let react_jsx_runtime = require("react/jsx-runtime");
+//#region src/react/context.tsx
+/**
+* Context for the Grant client
+*/
+var GrantContext = (0, react.createContext)(null);
+/**
+* Provider component that makes the Grant client available to child components
+*
+* @example
+* ```tsx
+* // Option 1: Pass config (cookie-based refresh)
+* <GrantProvider
+*   config={{
+*     apiUrl: 'https://api.grant.com',
+*     getAccessToken: () => localStorage.getItem('accessToken'),
+*     onRefreshWithCredentials: async () => {
+*       const res = await fetch('https://api.grant.com/api/auth/refresh', { method: 'POST', credentials: 'include' });
+*       if (!res.ok) return false;
+*       const { data } = await res.json();
+*       if (data?.accessToken) { localStorage.setItem('accessToken', data.accessToken); return true; }
+*       return false;
+*     },
+*     onTokenRefresh: (tokens) => { localStorage.setItem('accessToken', tokens.accessToken); },
+*     onUnauthorized: () => { window.location.href = '/login'; },
+*   }}
+* >
+*   <App />
+* </GrantProvider>
+*
+* // Option 2: Pass pre-configured client
+* const grant = new GrantClient({ ... });
+* <GrantProvider client={grant}>
+*   <App />
+* </GrantProvider>
+* ```
+*/
 function GrantProvider({ config, client, children }) {
-  const grantClient = react.useMemo(() => {
-    if (client) return client;
-    return new index.GrantClient(config);
-  }, [client, config]);
-  return /* @__PURE__ */ jsxRuntime.jsx(GrantContext.Provider, { value: grantClient, children });
+	const grantClient = (0, react.useMemo)(() => {
+		if (client) return client;
+		return new require_grant_client.GrantClient(config);
+	}, [client, config]);
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(GrantContext.Provider, {
+		value: grantClient,
+		children
+	});
 }
+/**
+* Hook to access the Grant client from context
+*
+* @throws Error if used outside of GrantProvider
+*
+* @example
+* ```tsx
+* const grant = useGrantClient();
+* const hasPermission = await grant.can('resource', 'action');
+* ```
+*/
 function useGrantClient() {
-  const client = react.useContext(GrantContext);
-  if (!client) {
-    throw new Error(
-      "useGrantClient must be used within a GrantProvider. Wrap your app with <GrantProvider config={...}> to fix this error."
-    );
-  }
-  return client;
+	const client = (0, react.useContext)(GrantContext);
+	if (!client) throw new Error("useGrantClient must be used within a GrantProvider. Wrap your app with <GrantProvider config={...}> to fix this error.");
+	return client;
 }
+/**
+* Hook to optionally access the Grant client
+* Returns null if not in a GrantProvider context
+*
+* Use this when you want to gracefully handle missing provider
+*/
 function useGrantClientOptional() {
-  return react.useContext(GrantContext);
+	return (0, react.useContext)(GrantContext);
 }
+//#endregion
+//#region src/react/hooks/useGrant.ts
+/**
+* Serialize scope for stable dependency comparison
+* This prevents re-fetching when scope object reference changes but values are the same
+*/
 function serializeScope(scope) {
-  if (!scope) return "";
-  return `${scope.tenant}:${scope.id}`;
+	if (!scope) return "";
+	return `${scope.tenant}:${scope.id}`;
 }
+/**
+* Hook to check if a user is granted permission for a specific resource and action
+*
+* By default, returns a simple boolean, defaulting to false while loading.
+* Set `returnLoading: true` to get an object with `isGranted` and `isLoading`.
+*
+* @param resource - The resource slug to check
+* @param action - The action to check
+* @param options - Additional options
+*
+* @example
+* ```tsx
+* // Simple boolean (default)
+* const canEdit = useGrant('document', 'update');
+*
+* return (
+*   <div>
+*     {canEdit && <EditButton />}
+*   </div>
+* );
+*
+* // With loading state
+* const { isGranted, isLoading } = useGrant('document', 'update', {
+*   returnLoading: true,
+* });
+*
+* if (isLoading) return <Spinner />;
+* if (!isGranted) return null;
+*
+* return <EditButton />;
+* ```
+*/
 function useGrant(resource, action, options = {}) {
-  const { scope, enabled = true, useCache = true, returnLoading = false, context } = options;
-  const client = useGrantClient();
-  const scopeWasProvidedRef = react.useRef("scope" in options);
-  const isEffectivelyEnabled = react.useMemo(() => {
-    const hasValidScope = scope && typeof scope === "object" && "tenant" in scope && "id" in scope && scope.id;
-    const shouldWaitForScope = scopeWasProvidedRef.current && !hasValidScope;
-    return enabled && !shouldWaitForScope;
-  }, [scope, enabled]);
-  const [data, setData] = react.useState(null);
-  const [isLoading, setIsLoading] = react.useState(isEffectivelyEnabled);
-  const [prevEffectivelyEnabled, setPrevEffectivelyEnabled] = react.useState(isEffectivelyEnabled);
-  if (isEffectivelyEnabled !== prevEffectivelyEnabled) {
-    setPrevEffectivelyEnabled(isEffectivelyEnabled);
-    if (isEffectivelyEnabled) {
-      setIsLoading(true);
-    } else {
-      setIsLoading(false);
-      setData(null);
-    }
-  }
-  const isMounted = react.useRef(true);
-  const scopeRef = react.useRef(scope);
-  scopeRef.current = scope;
-  const contextRef = react.useRef(context);
-  contextRef.current = context;
-  const scopeKey = serializeScope(scope);
-  const contextKey = react.useMemo(
-    () => context?.resource != null ? JSON.stringify(context.resource) : "",
-    [context?.resource]
-  );
-  const fetchPermission = react.useCallback(async () => {
-    if (!isEffectivelyEnabled) {
-      setIsLoading(false);
-      return;
-    }
-    setIsLoading(true);
-    try {
-      const result = await client.isAuthorized(resource, action, {
-        scope: scopeRef.current ?? void 0,
-        useCache,
-        context: contextRef.current
-      });
-      if (isMounted.current) {
-        setData(result);
-      }
-    } catch {
-      if (isMounted.current) {
-        setData(null);
-      }
-    } finally {
-      if (isMounted.current) {
-        setIsLoading(false);
-      }
-    }
-  }, [client, resource, action, scopeKey, isEffectivelyEnabled, useCache, contextKey]);
-  react.useEffect(() => {
-    isMounted.current = true;
-    if (!isEffectivelyEnabled && scopeWasProvidedRef.current) {
-      setData(null);
-      setIsLoading(false);
-    } else {
-      fetchPermission();
-    }
-    return () => {
-      isMounted.current = false;
-    };
-  }, [fetchPermission, isEffectivelyEnabled]);
-  const isGranted = data?.authorized ?? false;
-  if (returnLoading) {
-    return { isGranted, isLoading };
-  }
-  return isGranted;
+	const { scope, enabled = true, useCache = true, returnLoading = false, context } = options;
+	const client = useGrantClient();
+	const scopeWasProvidedRef = (0, react.useRef)("scope" in options);
+	const isEffectivelyEnabled = (0, react.useMemo)(() => {
+		const hasValidScope = scope && typeof scope === "object" && "tenant" in scope && "id" in scope && scope.id;
+		const shouldWaitForScope = scopeWasProvidedRef.current && !hasValidScope;
+		return enabled && !shouldWaitForScope;
+	}, [scope, enabled]);
+	const [data, setData] = (0, react.useState)(null);
+	const [isLoading, setIsLoading] = (0, react.useState)(isEffectivelyEnabled);
+	const [prevEffectivelyEnabled, setPrevEffectivelyEnabled] = (0, react.useState)(isEffectivelyEnabled);
+	if (isEffectivelyEnabled !== prevEffectivelyEnabled) {
+		setPrevEffectivelyEnabled(isEffectivelyEnabled);
+		if (isEffectivelyEnabled) setIsLoading(true);
+		else {
+			setIsLoading(false);
+			setData(null);
+		}
+	}
+	const isMounted = (0, react.useRef)(true);
+	const scopeRef = (0, react.useRef)(scope);
+	scopeRef.current = scope;
+	const contextRef = (0, react.useRef)(context);
+	contextRef.current = context;
+	const fetchPermission = (0, react.useCallback)(async () => {
+		if (!isEffectivelyEnabled) {
+			setIsLoading(false);
+			return;
+		}
+		setIsLoading(true);
+		try {
+			const result = await client.isAuthorized(resource, action, {
+				scope: scopeRef.current ?? void 0,
+				useCache,
+				context: contextRef.current
+			});
+			if (isMounted.current) setData(result);
+		} catch {
+			if (isMounted.current) setData(null);
+		} finally {
+			if (isMounted.current) setIsLoading(false);
+		}
+	}, [
+		client,
+		resource,
+		action,
+		serializeScope(scope),
+		isEffectivelyEnabled,
+		useCache,
+		(0, react.useMemo)(() => context?.resource != null ? JSON.stringify(context.resource) : "", [context?.resource])
+	]);
+	(0, react.useEffect)(() => {
+		isMounted.current = true;
+		if (!isEffectivelyEnabled && scopeWasProvidedRef.current) {
+			setData(null);
+			setIsLoading(false);
+		} else fetchPermission();
+		return () => {
+			isMounted.current = false;
+		};
+	}, [fetchPermission, isEffectivelyEnabled]);
+	const isGranted = data?.authorized ?? false;
+	if (returnLoading) return {
+		isGranted,
+		isLoading
+	};
+	return isGranted;
 }
-function GrantGate({
-  resource,
-  action,
-  scope,
-  enabled,
-  useCache,
-  children,
-  fallback = null,
-  loading = null
-}) {
-  const options = {
-    enabled,
-    useCache,
-    returnLoading: loading !== null
-  };
-  if (scope !== void 0) {
-    options.scope = scope;
-  }
-  const result = useGrant(resource, action, options);
-  const isGranted = typeof result === "boolean" ? result : result.isGranted;
-  const isLoading = typeof result === "boolean" ? false : result.isLoading;
-  if (isLoading && loading !== null) {
-    return loading;
-  }
-  if (isGranted) {
-    return children;
-  }
-  return fallback;
+//#endregion
+//#region src/react/components/GrantGate.tsx
+/**
+* Component that conditionally renders children based on permissions
+*
+* @example
+* ```tsx
+* // Basic usage - hide element if no permission
+* <GrantGate resource="document" action="update">
+*   <EditButton />
+* </GrantGate>
+*
+* // With fallback for denied access
+* <GrantGate
+*   resource="admin"
+*   action="access"
+*   fallback={<p>You don't have admin access</p>}
+* >
+*   <AdminPanel />
+* </GrantGate>
+*
+* // With loading state
+* <GrantGate
+*   resource="report"
+*   action="view"
+*   loading={<Spinner />}
+*   fallback={<AccessDenied />}
+* >
+*   <ReportViewer />
+* </GrantGate>
+*
+* // With scope for multi-tenant
+* <GrantGate
+*   resource="project"
+*   action="delete"
+*   scope={{ tenant: 'project', id: projectId }}
+* >
+*   <DeleteProjectButton />
+* </GrantGate>
+* ```
+*/
+function GrantGate({ resource, action, scope, enabled, useCache, children, fallback = null, loading = null }) {
+	const options = {
+		enabled,
+		useCache,
+		returnLoading: loading !== null
+	};
+	if (scope !== void 0) options.scope = scope;
+	const result = useGrant(resource, action, options);
+	const isGranted = typeof result === "boolean" ? result : result.isGranted;
+	if ((typeof result === "boolean" ? false : result.isLoading) && loading !== null) return loading;
+	if (isGranted) return children;
+	return fallback;
 }
-exports.GrantClient = index.GrantClient;
+//#endregion
+exports.GrantClient = require_grant_client.GrantClient;
 exports.GrantGate = GrantGate;
 exports.GrantProvider = GrantProvider;
 exports.useGrant = useGrant;
 exports.useGrantClient = useGrantClient;
 exports.useGrantClientOptional = useGrantClientOptional;
-//# sourceMappingURL=react.cjs.map
+
+//# sourceMappingURL=react.cjs.map

package/dist/react.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"react.cjs","sources":["../src/react/context.tsx","../src/react/hooks/useGrant.ts","../src/react/components/GrantGate.tsx"],"sourcesContent":["'use client';\n\nimport { createContext, useContext, useMemo, type ReactNode } from 'react';\n\nimport { GrantClient } from '../grant-client';\n\nimport type { GrantClientConfig } from '../types';\n\n/**\n * Context for the Grant client\n */\nconst GrantContext = createContext<GrantClient | null>(null);\n\n/**\n * Props for the GrantProvider component\n */\nexport interface GrantProviderProps {\n  /**\n   * Grant client configuration\n   */\n  config: GrantClientConfig;\n\n  /**\n   * Pre-configured GrantClient instance (alternative to config)\n   * If provided, config is ignored\n   */\n  client?: GrantClient;\n\n  /**\n   * Child components\n   */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the Grant client available to child components\n *\n * @example\n * ```tsx\n * // Option 1: Pass config (cookie-based refresh)\n * <GrantProvider\n *   config={{\n *     apiUrl: 'https://api.grant.com',\n *     getAccessToken: () => localStorage.getItem('accessToken'),\n *     onRefreshWithCredentials: async () => {\n *       const res = await fetch('https://api.grant.com/api/auth/refresh', { method: 'POST', credentials: 'include' });\n *       if (!res.ok) return false;\n *       const { data } = await res.json();\n *       if (data?.accessToken) { localStorage.setItem('accessToken', data.accessToken); return true; }\n *       return false;\n *     },\n *     onTokenRefresh: (tokens) => { localStorage.setItem('accessToken', tokens.accessToken); },\n *     onUnauthorized: () => { window.location.href = '/login'; },\n *   }}\n * >\n *   <App />\n * </GrantProvider>\n *\n * // Option 2: Pass pre-configured client\n * const grant = new GrantClient({ ... });\n * <GrantProvider client={grant}>\n *   <App />\n * </GrantProvider>\n * ```\n */\nexport function GrantProvider({ config, client, children }: GrantProviderProps) {\n  const grantClient = useMemo(() => {\n    if (client) return client;\n    return new GrantClient(config);\n  }, [client, config]);\n\n  return <GrantContext.Provider value={grantClient}>{children}</GrantContext.Provider>;\n}\n\n/**\n * Hook to access the Grant client from context\n *\n * @throws Error if used outside of GrantProvider\n *\n * @example\n * ```tsx\n * const grant = useGrantClient();\n * const hasPermission = await grant.can('resource', 'action');\n * ```\n */\nexport function useGrantClient(): GrantClient {\n  const client = useContext(GrantContext);\n\n  if (!client) {\n    throw new Error(\n      'useGrantClient must be used within a GrantProvider. ' +\n        'Wrap your app with <GrantProvider config={...}> to fix this error.'\n    );\n  }\n\n  return client;\n}\n\n/**\n * Hook to optionally access the Grant client\n * Returns null if not in a GrantProvider context\n *\n * Use this when you want to gracefully handle missing provider\n */\nexport function useGrantClientOptional(): GrantClient | null {\n  return useContext(GrantContext);\n}\n","'use client';\n\nimport { useState, useEffect, useCallback, useRef, useMemo } from 'react';\n\nimport { useGrantClient } from '../context';\n\nimport type { AuthorizationResult, Scope } from '../../types';\n\n/**\n * Options for the useGrant hook\n */\nexport interface UseGrantOptions {\n  /** Scope to check the permission in. If provided but null/undefined, hook waits for it to become valid. */\n  scope?: Scope | null;\n  /** Whether to skip the permission check */\n  enabled?: boolean;\n  /** Whether to use cached results (default: true) */\n  useCache?: boolean;\n  /** Whether to return loading state (default: false) */\n  returnLoading?: boolean;\n  /** Context to check permissions for */\n  context?: {\n    resource?: Record<string, unknown> | null;\n  };\n}\n\n/**\n * Result when returnLoading is true\n */\nexport interface UseGrantResult {\n  /** Whether the user is granted permission */\n  isGranted: boolean;\n  /** Whether the permission check is loading */\n  isLoading: boolean;\n}\n\n/**\n * Serialize scope for stable dependency comparison\n * This prevents re-fetching when scope object reference changes but values are the same\n */\nfunction serializeScope(scope?: Scope | null): string {\n  if (!scope) return '';\n  return `${scope.tenant}:${scope.id}`;\n}\n\n/**\n * Hook to check if a user is granted permission for a specific resource and action\n *\n * By default, returns a simple boolean, defaulting to false while loading.\n * Set `returnLoading: true` to get an object with `isGranted` and `isLoading`.\n *\n * @param resource - The resource slug to check\n * @param action - The action to check\n * @param options - Additional options\n *\n * @example\n * ```tsx\n * // Simple boolean (default)\n * const canEdit = useGrant('document', 'update');\n *\n * return (\n *   <div>\n *     {canEdit && <EditButton />}\n *   </div>\n * );\n *\n * // With loading state\n * const { isGranted, isLoading } = useGrant('document', 'update', {\n *   returnLoading: true,\n * });\n *\n * if (isLoading) return <Spinner />;\n * if (!isGranted) return null;\n *\n * return <EditButton />;\n * ```\n */\nexport function useGrant(\n  resource: string,\n  action: string,\n  options: UseGrantOptions = {}\n): boolean | UseGrantResult {\n  const { scope, enabled = true, useCache = true, returnLoading = false, context } = options;\n  const client = useGrantClient();\n\n  // Track if scope was explicitly provided (even if null/undefined)\n  // This allows us to distinguish between \"scope not provided\" (optional) vs \"scope provided but falsy\" (wait for it)\n  // Check this once at the start - if scope key exists in options, it was provided\n  // Note: { scope: undefined } has the key, { } does not have the key\n  const scopeWasProvidedRef = useRef('scope' in options);\n\n  // Determine if we should wait for scope to become valid\n  // If scope was provided but is falsy or invalid, wait for it to become truthy\n  // Recalculate when scope changes\n  const isEffectivelyEnabled = useMemo(() => {\n    const hasValidScope =\n      scope && typeof scope === 'object' && 'tenant' in scope && 'id' in scope && scope.id;\n    const shouldWaitForScope = scopeWasProvidedRef.current && !hasValidScope;\n    return enabled && !shouldWaitForScope;\n  }, [scope, enabled]);\n\n  const [data, setData] = useState<AuthorizationResult | null>(null);\n  const [isLoading, setIsLoading] = useState(isEffectivelyEnabled);\n\n  // Synchronously correct isLoading when isEffectivelyEnabled transitions.\n  // useState only uses its initializer on first render, so subsequent transitions\n  // leave isLoading stale for one render cycle (the effect hasn't run yet).\n  // This uses React's \"storing information from previous renders\" pattern to\n  // immediately set isLoading before the render completes.\n  // See: https://react.dev/reference/react/useState#storing-information-from-previous-renders\n  const [prevEffectivelyEnabled, setPrevEffectivelyEnabled] = useState(isEffectivelyEnabled);\n  if (isEffectivelyEnabled !== prevEffectivelyEnabled) {\n    setPrevEffectivelyEnabled(isEffectivelyEnabled);\n    if (isEffectivelyEnabled) {\n      setIsLoading(true);\n    } else {\n      setIsLoading(false);\n      setData(null);\n    }\n  }\n\n  // Track mounted state to prevent state updates after unmount\n  const isMounted = useRef(true);\n\n  // Store scope in a ref so we always have the latest value without triggering re-renders\n  const scopeRef = useRef(scope);\n  scopeRef.current = scope;\n\n  // Store context in a ref so the callback always sends the latest context\n  const contextRef = useRef(context);\n  contextRef.current = context;\n\n  // Serialize scope to get a stable string for dependency comparison\n  const scopeKey = serializeScope(scope);\n\n  // Serialize context so we re-create the callback when context meaningfully changes\n  const contextKey = useMemo(\n    () => (context?.resource != null ? JSON.stringify(context.resource) : ''),\n    [context?.resource]\n  );\n\n  const fetchPermission = useCallback(async () => {\n    if (!isEffectivelyEnabled) {\n      setIsLoading(false);\n      return;\n    }\n\n    setIsLoading(true);\n\n    try {\n      // Use scopeRef.current and contextRef.current to get the latest values\n      // Convert null to undefined for the client (which expects Scope | undefined)\n      const result = await client.isAuthorized(resource, action, {\n        scope: scopeRef.current ?? undefined,\n        useCache,\n        context: contextRef.current,\n      });\n      if (isMounted.current) {\n        setData(result);\n      }\n    } catch {\n      // On error, set data to null (will return false)\n      if (isMounted.current) {\n        setData(null);\n      }\n    } finally {\n      if (isMounted.current) {\n        setIsLoading(false);\n      }\n    }\n    // contextKey ensures we re-run when context (e.g. resource) changes so the request gets the latest context\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client, resource, action, scopeKey, isEffectivelyEnabled, useCache, contextKey]);\n\n  useEffect(() => {\n    isMounted.current = true;\n\n    // Clear data when scope becomes invalid (waiting for valid scope)\n    if (!isEffectivelyEnabled && scopeWasProvidedRef.current) {\n      setData(null);\n      setIsLoading(false);\n    } else {\n      fetchPermission();\n    }\n\n    return () => {\n      isMounted.current = false;\n    };\n  }, [fetchPermission, isEffectivelyEnabled]);\n\n  const isGranted = data?.authorized ?? false;\n\n  // Return object with loading state if requested, otherwise just boolean\n  if (returnLoading) {\n    return { isGranted, isLoading };\n  }\n\n  return isGranted;\n}\n","'use client';\n\nimport type { ReactNode } from 'react';\n\nimport { useGrant, type UseGrantOptions } from '../hooks/useGrant';\n\n/**\n * Props for the GrantGate component\n */\nexport interface GrantGateProps extends UseGrantOptions {\n  /** The resource slug to check permission for */\n  resource: string;\n  /** The action to check */\n  action: string;\n  /** Content to render if permission is granted */\n  children: ReactNode;\n  /** Content to render if permission is denied (optional) */\n  fallback?: ReactNode;\n  /** Content to render while loading (optional) */\n  loading?: ReactNode;\n}\n\n/**\n * Component that conditionally renders children based on permissions\n *\n * @example\n * ```tsx\n * // Basic usage - hide element if no permission\n * <GrantGate resource=\"document\" action=\"update\">\n *   <EditButton />\n * </GrantGate>\n *\n * // With fallback for denied access\n * <GrantGate\n *   resource=\"admin\"\n *   action=\"access\"\n *   fallback={<p>You don't have admin access</p>}\n * >\n *   <AdminPanel />\n * </GrantGate>\n *\n * // With loading state\n * <GrantGate\n *   resource=\"report\"\n *   action=\"view\"\n *   loading={<Spinner />}\n *   fallback={<AccessDenied />}\n * >\n *   <ReportViewer />\n * </GrantGate>\n *\n * // With scope for multi-tenant\n * <GrantGate\n *   resource=\"project\"\n *   action=\"delete\"\n *   scope={{ tenant: 'project', id: projectId }}\n * >\n *   <DeleteProjectButton />\n * </GrantGate>\n * ```\n */\nexport function GrantGate({\n  resource,\n  action,\n  scope,\n  enabled,\n  useCache,\n  children,\n  fallback = null,\n  loading = null,\n}: GrantGateProps): ReactNode {\n  // Build options object conditionally\n  // Only include scope in options if it's not undefined (null is valid and means \"wait for it\")\n  // This allows the hook to distinguish between \"scope not provided\" (undefined) vs \"scope provided but null\"\n  const options: Parameters<typeof useGrant>[2] = {\n    enabled,\n    useCache,\n    returnLoading: loading !== null,\n  };\n\n  // Only add scope to options if it's explicitly null or a valid object\n  // If scope is undefined, don't include it so hook treats it as optional\n  if (scope !== undefined) {\n    options.scope = scope;\n  }\n\n  // Use loading state if loading prop is provided\n  const result = useGrant(resource, action, options);\n\n  const isGranted = typeof result === 'boolean' ? result : result.isGranted;\n  const isLoading = typeof result === 'boolean' ? false : result.isLoading;\n\n  if (isLoading && loading !== null) {\n    return loading;\n  }\n\n  if (isGranted) {\n    return children;\n  }\n\n  return fallback;\n}\n"],"names":["createContext","useMemo","GrantClient","useContext","useRef","useState","useCallback","useEffect"],"mappings":";;;;;AAWA,MAAM,eAAeA,MAAAA,cAAkC,IAAI;AAsDpD,SAAS,cAAc,EAAE,QAAQ,QAAQ,YAAgC;AAC9E,QAAM,cAAcC,MAAAA,QAAQ,MAAM;AAChC,QAAI,OAAQ,QAAO;AACnB,WAAO,IAAIC,MAAAA,YAAY,MAAM;AAAA,EAC/B,GAAG,CAAC,QAAQ,MAAM,CAAC;AAEnB,wCAAQ,aAAa,UAAb,EAAsB,OAAO,aAAc,UAAS;AAC9D;AAaO,SAAS,iBAA8B;AAC5C,QAAM,SAASC,MAAAA,WAAW,YAAY;AAEtC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAGJ;AAEA,SAAO;AACT;AAQO,SAAS,yBAA6C;AAC3D,SAAOA,MAAAA,WAAW,YAAY;AAChC;AClEA,SAAS,eAAe,OAA8B;AACpD,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,GAAG,MAAM,MAAM,IAAI,MAAM,EAAE;AACpC;AAkCO,SAAS,SACd,UACA,QACA,UAA2B,CAAA,GACD;AAC1B,QAAM,EAAE,OAAO,UAAU,MAAM,WAAW,MAAM,gBAAgB,OAAO,QAAA,IAAY;AACnF,QAAM,SAAS,eAAA;AAMf,QAAM,sBAAsBC,MAAAA,OAAO,WAAW,OAAO;AAKrD,QAAM,uBAAuBH,MAAAA,QAAQ,MAAM;AACzC,UAAM,gBACJ,SAAS,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,MAAM;AACpF,UAAM,qBAAqB,oBAAoB,WAAW,CAAC;AAC3D,WAAO,WAAW,CAAC;AAAA,EACrB,GAAG,CAAC,OAAO,OAAO,CAAC;AAEnB,QAAM,CAAC,MAAM,OAAO,IAAII,MAAAA,SAAqC,IAAI;AACjE,QAAM,CAAC,WAAW,YAAY,IAAIA,MAAAA,SAAS,oBAAoB;AAQ/D,QAAM,CAAC,wBAAwB,yBAAyB,IAAIA,MAAAA,SAAS,oBAAoB;AACzF,MAAI,yBAAyB,wBAAwB;AACnD,8BAA0B,oBAAoB;AAC9C,QAAI,sBAAsB;AACxB,mBAAa,IAAI;AAAA,IACnB,OAAO;AACL,mBAAa,KAAK;AAClB,cAAQ,IAAI;AAAA,IACd;AAAA,EACF;AAGA,QAAM,YAAYD,MAAAA,OAAO,IAAI;AAG7B,QAAM,WAAWA,MAAAA,OAAO,KAAK;AAC7B,WAAS,UAAU;AAGnB,QAAM,aAAaA,MAAAA,OAAO,OAAO;AACjC,aAAW,UAAU;AAGrB,QAAM,WAAW,eAAe,KAAK;AAGrC,QAAM,aAAaH,MAAAA;AAAAA,IACjB,MAAO,SAAS,YAAY,OAAO,KAAK,UAAU,QAAQ,QAAQ,IAAI;AAAA,IACtE,CAAC,SAAS,QAAQ;AAAA,EAAA;AAGpB,QAAM,kBAAkBK,MAAAA,YAAY,YAAY;AAC9C,QAAI,CAAC,sBAAsB;AACzB,mBAAa,KAAK;AAClB;AAAA,IACF;AAEA,iBAAa,IAAI;AAEjB,QAAI;AAGF,YAAM,SAAS,MAAM,OAAO,aAAa,UAAU,QAAQ;AAAA,QACzD,OAAO,SAAS,WAAW;AAAA,QAC3B;AAAA,QACA,SAAS,WAAW;AAAA,MAAA,CACrB;AACD,UAAI,UAAU,SAAS;AACrB,gBAAQ,MAAM;AAAA,MAChB;AAAA,IACF,QAAQ;AAEN,UAAI,UAAU,SAAS;AACrB,gBAAQ,IAAI;AAAA,MACd;AAAA,IACF,UAAA;AACE,UAAI,UAAU,SAAS;AACrB,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF;AAAA,EAGF,GAAG,CAAC,QAAQ,UAAU,QAAQ,UAAU,sBAAsB,UAAU,UAAU,CAAC;AAEnFC,QAAAA,UAAU,MAAM;AACd,cAAU,UAAU;AAGpB,QAAI,CAAC,wBAAwB,oBAAoB,SAAS;AACxD,cAAQ,IAAI;AACZ,mBAAa,KAAK;AAAA,IACpB,OAAO;AACL,sBAAA;AAAA,IACF;AAEA,WAAO,MAAM;AACX,gBAAU,UAAU;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,iBAAiB,oBAAoB,CAAC;AAE1C,QAAM,YAAY,MAAM,cAAc;AAGtC,MAAI,eAAe;AACjB,WAAO,EAAE,WAAW,UAAA;AAAA,EACtB;AAEA,SAAO;AACT;ACzIO,SAAS,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,UAAU;AACZ,GAA8B;AAI5B,QAAM,UAA0C;AAAA,IAC9C;AAAA,IACA;AAAA,IACA,eAAe,YAAY;AAAA,EAAA;AAK7B,MAAI,UAAU,QAAW;AACvB,YAAQ,QAAQ;AAAA,EAClB;AAGA,QAAM,SAAS,SAAS,UAAU,QAAQ,OAAO;AAEjD,QAAM,YAAY,OAAO,WAAW,YAAY,SAAS,OAAO;AAChE,QAAM,YAAY,OAAO,WAAW,YAAY,QAAQ,OAAO;AAE/D,MAAI,aAAa,YAAY,MAAM;AACjC,WAAO;AAAA,EACT;AAEA,MAAI,WAAW;AACb,WAAO;AAAA,EACT;AAEA,SAAO;AACT;;;;;;;"}
+{"version":3,"file":"react.cjs","names":[],"sources":["../src/react/context.tsx","../src/react/hooks/useGrant.ts","../src/react/components/GrantGate.tsx"],"sourcesContent":["'use client';\n\nimport { createContext, type ReactNode, useContext, useMemo } from 'react';\n\nimport { GrantClient } from '../grant-client';\nimport type { GrantClientConfig } from '../types';\n\n/**\n * Context for the Grant client\n */\nconst GrantContext = createContext<GrantClient | null>(null);\n\n/**\n * Props for the GrantProvider component\n */\nexport interface GrantProviderProps {\n  /**\n   * Grant client configuration\n   */\n  config: GrantClientConfig;\n\n  /**\n   * Pre-configured GrantClient instance (alternative to config)\n   * If provided, config is ignored\n   */\n  client?: GrantClient;\n\n  /**\n   * Child components\n   */\n  children: ReactNode;\n}\n\n/**\n * Provider component that makes the Grant client available to child components\n *\n * @example\n * ```tsx\n * // Option 1: Pass config (cookie-based refresh)\n * <GrantProvider\n *   config={{\n *     apiUrl: 'https://api.grant.com',\n *     getAccessToken: () => localStorage.getItem('accessToken'),\n *     onRefreshWithCredentials: async () => {\n *       const res = await fetch('https://api.grant.com/api/auth/refresh', { method: 'POST', credentials: 'include' });\n *       if (!res.ok) return false;\n *       const { data } = await res.json();\n *       if (data?.accessToken) { localStorage.setItem('accessToken', data.accessToken); return true; }\n *       return false;\n *     },\n *     onTokenRefresh: (tokens) => { localStorage.setItem('accessToken', tokens.accessToken); },\n *     onUnauthorized: () => { window.location.href = '/login'; },\n *   }}\n * >\n *   <App />\n * </GrantProvider>\n *\n * // Option 2: Pass pre-configured client\n * const grant = new GrantClient({ ... });\n * <GrantProvider client={grant}>\n *   <App />\n * </GrantProvider>\n * ```\n */\nexport function GrantProvider({ config, client, children }: GrantProviderProps) {\n  const grantClient = useMemo(() => {\n    if (client) return client;\n    return new GrantClient(config);\n  }, [client, config]);\n\n  return <GrantContext.Provider value={grantClient}>{children}</GrantContext.Provider>;\n}\n\n/**\n * Hook to access the Grant client from context\n *\n * @throws Error if used outside of GrantProvider\n *\n * @example\n * ```tsx\n * const grant = useGrantClient();\n * const hasPermission = await grant.can('resource', 'action');\n * ```\n */\nexport function useGrantClient(): GrantClient {\n  const client = useContext(GrantContext);\n\n  if (!client) {\n    throw new Error(\n      'useGrantClient must be used within a GrantProvider. ' +\n        'Wrap your app with <GrantProvider config={...}> to fix this error.'\n    );\n  }\n\n  return client;\n}\n\n/**\n * Hook to optionally access the Grant client\n * Returns null if not in a GrantProvider context\n *\n * Use this when you want to gracefully handle missing provider\n */\nexport function useGrantClientOptional(): GrantClient | null {\n  return useContext(GrantContext);\n}\n","'use client';\n\nimport { useCallback, useEffect, useMemo, useRef, useState } from 'react';\n\nimport type { AuthorizationResult, Scope } from '../../types';\nimport { useGrantClient } from '../context';\n\n/**\n * Options for the useGrant hook\n */\nexport interface UseGrantOptions {\n  /** Scope to check the permission in. If provided but null/undefined, hook waits for it to become valid. */\n  scope?: Scope | null;\n  /** Whether to skip the permission check */\n  enabled?: boolean;\n  /** Whether to use cached results (default: true) */\n  useCache?: boolean;\n  /** Whether to return loading state (default: false) */\n  returnLoading?: boolean;\n  /** Context to check permissions for */\n  context?: {\n    resource?: Record<string, unknown> | null;\n  };\n}\n\n/**\n * Result when returnLoading is true\n */\nexport interface UseGrantResult {\n  /** Whether the user is granted permission */\n  isGranted: boolean;\n  /** Whether the permission check is loading */\n  isLoading: boolean;\n}\n\n/**\n * Serialize scope for stable dependency comparison\n * This prevents re-fetching when scope object reference changes but values are the same\n */\nfunction serializeScope(scope?: Scope | null): string {\n  if (!scope) return '';\n  return `${scope.tenant}:${scope.id}`;\n}\n\n/**\n * Hook to check if a user is granted permission for a specific resource and action\n *\n * By default, returns a simple boolean, defaulting to false while loading.\n * Set `returnLoading: true` to get an object with `isGranted` and `isLoading`.\n *\n * @param resource - The resource slug to check\n * @param action - The action to check\n * @param options - Additional options\n *\n * @example\n * ```tsx\n * // Simple boolean (default)\n * const canEdit = useGrant('document', 'update');\n *\n * return (\n *   <div>\n *     {canEdit && <EditButton />}\n *   </div>\n * );\n *\n * // With loading state\n * const { isGranted, isLoading } = useGrant('document', 'update', {\n *   returnLoading: true,\n * });\n *\n * if (isLoading) return <Spinner />;\n * if (!isGranted) return null;\n *\n * return <EditButton />;\n * ```\n */\nexport function useGrant(\n  resource: string,\n  action: string,\n  options: UseGrantOptions = {}\n): boolean | UseGrantResult {\n  const { scope, enabled = true, useCache = true, returnLoading = false, context } = options;\n  const client = useGrantClient();\n\n  // Track if scope was explicitly provided (even if null/undefined)\n  // This allows us to distinguish between \"scope not provided\" (optional) vs \"scope provided but falsy\" (wait for it)\n  // Check this once at the start - if scope key exists in options, it was provided\n  // Note: { scope: undefined } has the key, { } does not have the key\n  const scopeWasProvidedRef = useRef('scope' in options);\n\n  // Determine if we should wait for scope to become valid\n  // If scope was provided but is falsy or invalid, wait for it to become truthy\n  // Recalculate when scope changes\n  const isEffectivelyEnabled = useMemo(() => {\n    const hasValidScope =\n      scope && typeof scope === 'object' && 'tenant' in scope && 'id' in scope && scope.id;\n    const shouldWaitForScope = scopeWasProvidedRef.current && !hasValidScope;\n    return enabled && !shouldWaitForScope;\n  }, [scope, enabled]);\n\n  const [data, setData] = useState<AuthorizationResult | null>(null);\n  const [isLoading, setIsLoading] = useState(isEffectivelyEnabled);\n\n  // Synchronously correct isLoading when isEffectivelyEnabled transitions.\n  // useState only uses its initializer on first render, so subsequent transitions\n  // leave isLoading stale for one render cycle (the effect hasn't run yet).\n  // This uses React's \"storing information from previous renders\" pattern to\n  // immediately set isLoading before the render completes.\n  // See: https://react.dev/reference/react/useState#storing-information-from-previous-renders\n  const [prevEffectivelyEnabled, setPrevEffectivelyEnabled] = useState(isEffectivelyEnabled);\n  if (isEffectivelyEnabled !== prevEffectivelyEnabled) {\n    setPrevEffectivelyEnabled(isEffectivelyEnabled);\n    if (isEffectivelyEnabled) {\n      setIsLoading(true);\n    } else {\n      setIsLoading(false);\n      setData(null);\n    }\n  }\n\n  // Track mounted state to prevent state updates after unmount\n  const isMounted = useRef(true);\n\n  // Store scope in a ref so we always have the latest value without triggering re-renders\n  const scopeRef = useRef(scope);\n  scopeRef.current = scope;\n\n  // Store context in a ref so the callback always sends the latest context\n  const contextRef = useRef(context);\n  contextRef.current = context;\n\n  // Serialize scope to get a stable string for dependency comparison\n  const scopeKey = serializeScope(scope);\n\n  // Serialize context so we re-create the callback when context meaningfully changes\n  const contextKey = useMemo(\n    () => (context?.resource != null ? JSON.stringify(context.resource) : ''),\n    [context?.resource]\n  );\n\n  const fetchPermission = useCallback(async () => {\n    if (!isEffectivelyEnabled) {\n      setIsLoading(false);\n      return;\n    }\n\n    setIsLoading(true);\n\n    try {\n      // Use scopeRef.current and contextRef.current to get the latest values\n      // Convert null to undefined for the client (which expects Scope | undefined)\n      const result = await client.isAuthorized(resource, action, {\n        scope: scopeRef.current ?? undefined,\n        useCache,\n        context: contextRef.current,\n      });\n      if (isMounted.current) {\n        setData(result);\n      }\n    } catch {\n      // On error, set data to null (will return false)\n      if (isMounted.current) {\n        setData(null);\n      }\n    } finally {\n      if (isMounted.current) {\n        setIsLoading(false);\n      }\n    }\n    // contextKey ensures we re-run when context (e.g. resource) changes so the request gets the latest context\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [client, resource, action, scopeKey, isEffectivelyEnabled, useCache, contextKey]);\n\n  useEffect(() => {\n    isMounted.current = true;\n\n    // Clear data when scope becomes invalid (waiting for valid scope)\n    if (!isEffectivelyEnabled && scopeWasProvidedRef.current) {\n      setData(null);\n      setIsLoading(false);\n    } else {\n      fetchPermission();\n    }\n\n    return () => {\n      isMounted.current = false;\n    };\n  }, [fetchPermission, isEffectivelyEnabled]);\n\n  const isGranted = data?.authorized ?? false;\n\n  // Return object with loading state if requested, otherwise just boolean\n  if (returnLoading) {\n    return { isGranted, isLoading };\n  }\n\n  return isGranted;\n}\n","'use client';\n\nimport type { ReactNode } from 'react';\n\nimport { useGrant, type UseGrantOptions } from '../hooks/useGrant';\n\n/**\n * Props for the GrantGate component\n */\nexport interface GrantGateProps extends UseGrantOptions {\n  /** The resource slug to check permission for */\n  resource: string;\n  /** The action to check */\n  action: string;\n  /** Content to render if permission is granted */\n  children: ReactNode;\n  /** Content to render if permission is denied (optional) */\n  fallback?: ReactNode;\n  /** Content to render while loading (optional) */\n  loading?: ReactNode;\n}\n\n/**\n * Component that conditionally renders children based on permissions\n *\n * @example\n * ```tsx\n * // Basic usage - hide element if no permission\n * <GrantGate resource=\"document\" action=\"update\">\n *   <EditButton />\n * </GrantGate>\n *\n * // With fallback for denied access\n * <GrantGate\n *   resource=\"admin\"\n *   action=\"access\"\n *   fallback={<p>You don't have admin access</p>}\n * >\n *   <AdminPanel />\n * </GrantGate>\n *\n * // With loading state\n * <GrantGate\n *   resource=\"report\"\n *   action=\"view\"\n *   loading={<Spinner />}\n *   fallback={<AccessDenied />}\n * >\n *   <ReportViewer />\n * </GrantGate>\n *\n * // With scope for multi-tenant\n * <GrantGate\n *   resource=\"project\"\n *   action=\"delete\"\n *   scope={{ tenant: 'project', id: projectId }}\n * >\n *   <DeleteProjectButton />\n * </GrantGate>\n * ```\n */\nexport function GrantGate({\n  resource,\n  action,\n  scope,\n  enabled,\n  useCache,\n  children,\n  fallback = null,\n  loading = null,\n}: GrantGateProps): ReactNode {\n  // Build options object conditionally\n  // Only include scope in options if it's not undefined (null is valid and means \"wait for it\")\n  // This allows the hook to distinguish between \"scope not provided\" (undefined) vs \"scope provided but null\"\n  const options: Parameters<typeof useGrant>[2] = {\n    enabled,\n    useCache,\n    returnLoading: loading !== null,\n  };\n\n  // Only add scope to options if it's explicitly null or a valid object\n  // If scope is undefined, don't include it so hook treats it as optional\n  if (scope !== undefined) {\n    options.scope = scope;\n  }\n\n  // Use loading state if loading prop is provided\n  const result = useGrant(resource, action, options);\n\n  const isGranted = typeof result === 'boolean' ? result : result.isGranted;\n  const isLoading = typeof result === 'boolean' ? false : result.isLoading;\n\n  if (isLoading && loading !== null) {\n    return loading;\n  }\n\n  if (isGranted) {\n    return children;\n  }\n\n  return fallback;\n}\n"],"mappings":";;;;;;;;AAUA,IAAM,gBAAA,GAAA,MAAA,eAAiD,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsD5D,SAAgB,cAAc,EAAE,QAAQ,QAAQ,YAAgC;CAC9E,MAAM,eAAA,GAAA,MAAA,eAA4B;AAChC,MAAI,OAAQ,QAAO;AACnB,SAAO,IAAI,qBAAA,YAAY,OAAO;IAC7B,CAAC,QAAQ,OAAO,CAAC;AAEpB,QAAO,iBAAA,GAAA,kBAAA,KAAC,aAAa,UAAd;EAAuB,OAAO;EAAc;EAAiC,CAAA;;;;;;;;;;;;;AActF,SAAgB,iBAA8B;CAC5C,MAAM,UAAA,GAAA,MAAA,YAAoB,aAAa;AAEvC,KAAI,CAAC,OACH,OAAM,IAAI,MACR,yHAED;AAGH,QAAO;;;;;;;;AAST,SAAgB,yBAA6C;AAC3D,SAAA,GAAA,MAAA,YAAkB,aAAa;;;;;;;;ACjEjC,SAAS,eAAe,OAA8B;AACpD,KAAI,CAAC,MAAO,QAAO;AACnB,QAAO,GAAG,MAAM,OAAO,GAAG,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmClC,SAAgB,SACd,UACA,QACA,UAA2B,EAAE,EACH;CAC1B,MAAM,EAAE,OAAO,UAAU,MAAM,WAAW,MAAM,gBAAgB,OAAO,YAAY;CACnF,MAAM,SAAS,gBAAgB;CAM/B,MAAM,uBAAA,GAAA,MAAA,QAA6B,WAAW,QAAQ;CAKtD,MAAM,wBAAA,GAAA,MAAA,eAAqC;EACzC,MAAM,gBACJ,SAAS,OAAO,UAAU,YAAY,YAAY,SAAS,QAAQ,SAAS,MAAM;EACpF,MAAM,qBAAqB,oBAAoB,WAAW,CAAC;AAC3D,SAAO,WAAW,CAAC;IAClB,CAAC,OAAO,QAAQ,CAAC;CAEpB,MAAM,CAAC,MAAM,YAAA,GAAA,MAAA,UAAgD,KAAK;CAClE,MAAM,CAAC,WAAW,iBAAA,GAAA,MAAA,UAAyB,qBAAqB;CAQhE,MAAM,CAAC,wBAAwB,8BAAA,GAAA,MAAA,UAAsC,qBAAqB;AAC1F,KAAI,yBAAyB,wBAAwB;AACnD,4BAA0B,qBAAqB;AAC/C,MAAI,qBACF,cAAa,KAAK;OACb;AACL,gBAAa,MAAM;AACnB,WAAQ,KAAK;;;CAKjB,MAAM,aAAA,GAAA,MAAA,QAAmB,KAAK;CAG9B,MAAM,YAAA,GAAA,MAAA,QAAkB,MAAM;AAC9B,UAAS,UAAU;CAGnB,MAAM,cAAA,GAAA,MAAA,QAAoB,QAAQ;AAClC,YAAW,UAAU;CAWrB,MAAM,mBAAA,GAAA,MAAA,aAA8B,YAAY;AAC9C,MAAI,CAAC,sBAAsB;AACzB,gBAAa,MAAM;AACnB;;AAGF,eAAa,KAAK;AAElB,MAAI;GAGF,MAAM,SAAS,MAAM,OAAO,aAAa,UAAU,QAAQ;IACzD,OAAO,SAAS,WAAW,KAAA;IAC3B;IACA,SAAS,WAAW;IACrB,CAAC;AACF,OAAI,UAAU,QACZ,SAAQ,OAAO;UAEX;AAEN,OAAI,UAAU,QACZ,SAAQ,KAAK;YAEP;AACR,OAAI,UAAU,QACZ,cAAa,MAAM;;IAKtB;EAAC;EAAQ;EAAU;EAvCL,eAAe,MAAM;EAuCE;EAAsB;2BAnCrD,SAAS,YAAY,OAAO,KAAK,UAAU,QAAQ,SAAS,GAAG,IACtE,CAAC,SAAS,SAAS,CACpB;EAiCkF,CAAC;AAEpF,EAAA,GAAA,MAAA,iBAAgB;AACd,YAAU,UAAU;AAGpB,MAAI,CAAC,wBAAwB,oBAAoB,SAAS;AACxD,WAAQ,KAAK;AACb,gBAAa,MAAM;QAEnB,kBAAiB;AAGnB,eAAa;AACX,aAAU,UAAU;;IAErB,CAAC,iBAAiB,qBAAqB,CAAC;CAE3C,MAAM,YAAY,MAAM,cAAc;AAGtC,KAAI,cACF,QAAO;EAAE;EAAW;EAAW;AAGjC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACvIT,SAAgB,UAAU,EACxB,UACA,QACA,OACA,SACA,UACA,UACA,WAAW,MACX,UAAU,QACkB;CAI5B,MAAM,UAA0C;EAC9C;EACA;EACA,eAAe,YAAY;EAC5B;AAID,KAAI,UAAU,KAAA,EACZ,SAAQ,QAAQ;CAIlB,MAAM,SAAS,SAAS,UAAU,QAAQ,QAAQ;CAElD,MAAM,YAAY,OAAO,WAAW,YAAY,SAAS,OAAO;AAGhE,MAFkB,OAAO,WAAW,YAAY,QAAQ,OAAO,cAE9C,YAAY,KAC3B,QAAO;AAGT,KAAI,UACF,QAAO;AAGT,QAAO"}