@harbour-enterprises/superdoc 0.24.0 → 0.25.0-next.1

package/dist/chunks/{PdfViewer-BiHh3x6b.es.js → PdfViewer-BEbvklge.es.js}

@@ -1,5 +1,5 @@
 import { m as defineComponent, B as h, O as Transition, $ as process$1, I as watchEffect, d as computed, r as ref, j as onMounted, W as onUnmounted, c as createElementBlock, o as openBlock, a as createBaseVNode, f as createCommentVNode, v as createVNode, x as unref } from "./vue-ZWZLQtoU.es.js";
-import { d as derived, c, a as cB, f as fadeInTransition, b as cM, N as NBaseLoading, w as warnOnce, u as useConfig, e as useTheme, p as pxfy, g as createKey, h as useThemeClass, i as useCompitable, _ as _export_sfc, j as useSuperdocStore, s as storeToRefs, k as useSelection } from "./index-aMnFs35I.es.js";
+import { d as derived, c, a as cB, f as fadeInTransition, b as cM, N as NBaseLoading, w as warnOnce, u as useConfig, e as useTheme, p as pxfy, g as createKey, h as useThemeClass, i as useCompitable, _ as _export_sfc, j as useSuperdocStore, s as storeToRefs, k as useSelection } from "./index-B9Ad3j3k.es.js";
 function self(vars) {
   const {
     opacityDisabled,

package/dist/chunks/{PdfViewer-qk_hITc5.cjs → PdfViewer-CvksDDwi.cjs}

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const vue = require("./vue-DKMj1I9B.cjs");
-const superdoc = require("./index-Di6nG2sc.cjs");
+const superdoc = require("./index-Bf3lSVG2.cjs");
 function self(vars) {
   const {
     opacityDisabled,

package/dist/chunks/{index-aMnFs35I.es.js → index-B9Ad3j3k.es.js}

@@ -1,4 +1,4 @@
-import { q as index, C as CommentsPluginKey, h as TrackChangesBasePluginKey, E as Editor, n as getRichTextExtensions, f as SuperInput, e as SuperEditor, A as AIWriter, g as SuperToolbar, i as createZip } from "./super-editor.es-Dz7y81Yr.es.js";
+import { q as index, C as CommentsPluginKey, h as TrackChangesBasePluginKey, E as Editor, n as getRichTextExtensions, f as SuperInput, e as SuperEditor, A as AIWriter, g as SuperToolbar, i as createZip } from "./super-editor.es--RpCOiR4.es.js";
 import { a0 as effectScope, r as ref, _ as markRaw, $ as process$1, a1 as toRaw, d as computed, a2 as isRef, a3 as isReactive, C as toRef, i as inject, p as getCurrentInstance, l as watch, x as unref, a4 as hasInjectionContext, M as reactive, s as nextTick, a5 as getCurrentScope, a6 as onScopeDispose, a7 as toRefs, g as global$1, J as shallowRef, N as readonly, j as onMounted, k as onBeforeUnmount, h as onBeforeMount, S as onActivated, q as onDeactivated, z as createTextVNode, F as Fragment, Q as Comment, m as defineComponent, D as provide, H as withDirectives, B as h, U as Teleport, R as renderSlot, V as isVNode, I as watchEffect, O as Transition, a8 as TransitionGroup, E as mergeProps, P as vShow, G as cloneVNode, T as Text, c as createElementBlock, o as openBlock, t as toDisplayString, v as createVNode, y as withCtx, a as createBaseVNode, A as normalizeStyle, f as createCommentVNode, u as createBlock, w as withModifiers, n as normalizeClass, a9 as resolveDirective, e as renderList, b as createApp, X as resolveDynamicComponent, aa as defineAsyncComponent } from "./vue-ZWZLQtoU.es.js";
 import { B as BlankDOCX } from "./blank-docx-ABm6XYAA.es.js";
 import { E as EventEmitter } from "./eventemitter3-BWEnUdTY.es.js";
@@ -15319,69 +15319,6 @@ const superdocIcons = {
   rejectChange: xmarkIconSvg,
   overflow: ellipsisVerticalSvg
 };
-const PERMISSIONS = Object.freeze({
-  RESOLVE_OWN: "RESOLVE_OWN",
-  RESOLVE_OTHER: "RESOLVE_OTHER",
-  REJECT_OWN: "REJECT_OWN",
-  REJECT_OTHER: "REJECT_OTHER",
-  COMMENTS_OVERFLOW_OWN: "COMMENTS_OVERFLOW",
-  COMMENTS_OVERFLOW_OTHER: "COMMENTS_OVERFLOW_OTHER",
-  COMMENTS_DELETE_OWN: "COMMENTS_DELETE_OWN",
-  COMMENTS_DELETE_OTHER: "COMMENTS_DELETE_OTHER",
-  UPLOAD_VERSION: "UPLOAD_VERSION",
-  VERSION_HISTORY: "VERSION_HISTORY"
-});
-const ROLES = Object.freeze({
-  EDITOR: "editor",
-  SUGGESTER: "suggester",
-  VIEWER: "viewer"
-});
-const permissions = Object.freeze({
-  [PERMISSIONS.RESOLVE_OWN]: {
-    internal: [ROLES.EDITOR],
-    external: [ROLES.EDITOR]
-  },
-  [PERMISSIONS.RESOLVE_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.REJECT_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.REJECT_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.COMMENTS_OVERFLOW_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.COMMENTS_OVERFLOW_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.COMMENTS_DELETE_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.COMMENTS_DELETE_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.UPLOAD_VERSION]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.VERSION_HISTORY]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  }
-});
-const isAllowed = (permission, role, isInternal) => {
-  const internalExternal = isInternal ? "internal" : "external";
-  return permissions[permission]?.[internalExternal]?.includes(role);
-};
 const _export_sfc = (sfc, props) => {
   const target = sfc.__vccOpts || sfc;
   for (const [key, val] of props) {
@@ -15537,6 +15474,96 @@ function formatDate(timestamp) {
   const formattedDate = `${formattedTime} ${month} ${day}`;
   return formattedDate;
 }
+const PERMISSIONS = Object.freeze({
+  RESOLVE_OWN: "RESOLVE_OWN",
+  RESOLVE_OTHER: "RESOLVE_OTHER",
+  REJECT_OWN: "REJECT_OWN",
+  REJECT_OTHER: "REJECT_OTHER",
+  COMMENTS_OVERFLOW_OWN: "COMMENTS_OVERFLOW",
+  COMMENTS_OVERFLOW_OTHER: "COMMENTS_OVERFLOW_OTHER",
+  COMMENTS_DELETE_OWN: "COMMENTS_DELETE_OWN",
+  COMMENTS_DELETE_OTHER: "COMMENTS_DELETE_OTHER",
+  UPLOAD_VERSION: "UPLOAD_VERSION",
+  VERSION_HISTORY: "VERSION_HISTORY"
+});
+const ROLES = Object.freeze({
+  EDITOR: "editor",
+  SUGGESTER: "suggester",
+  VIEWER: "viewer"
+});
+const PERMISSION_MATRIX = Object.freeze({
+  [PERMISSIONS.RESOLVE_OWN]: {
+    internal: [ROLES.EDITOR],
+    external: [ROLES.EDITOR]
+  },
+  [PERMISSIONS.RESOLVE_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.REJECT_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.REJECT_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.COMMENTS_OVERFLOW_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.COMMENTS_OVERFLOW_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.COMMENTS_DELETE_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.COMMENTS_DELETE_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.UPLOAD_VERSION]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.VERSION_HISTORY]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  }
+});
+const pickResolver = (context = {}) => {
+  if (typeof context.permissionResolver === "function") return context.permissionResolver;
+  if (context.superdoc?.config?.modules?.comments?.permissionResolver) {
+    const resolver = context.superdoc.config.modules.comments.permissionResolver;
+    if (typeof resolver === "function") return resolver;
+  }
+  if (typeof context.superdoc?.config?.permissionResolver === "function") {
+    return context.superdoc.config.permissionResolver;
+  }
+  return null;
+};
+const defaultDecisionFor = (permission, role, isInternal) => {
+  const internalExternal = isInternal ? "internal" : "external";
+  return PERMISSION_MATRIX[permission]?.[internalExternal]?.includes(role) ?? false;
+};
+const isAllowed = (permission, role, isInternal, context = {}) => {
+  const defaultDecision = defaultDecisionFor(permission, role, isInternal);
+  const resolver = pickResolver(context);
+  if (typeof resolver !== "function") return defaultDecision;
+  const decision = resolver({
+    permission,
+    role,
+    isInternal,
+    defaultDecision,
+    comment: context.comment ?? null,
+    currentUser: context.currentUser ?? context.superdoc?.config?.user ?? null,
+    superdoc: context.superdoc ?? null,
+    trackedChange: context.trackedChange ?? null
+  });
+  return typeof decision === "boolean" ? decision : defaultDecision;
+};
 const _hoisted_1$d = { class: "card-section comment-header" };
 const _hoisted_2$7 = { class: "comment-header-left" };
 const _hoisted_3$5 = { class: "user-info" };
@@ -15593,14 +15620,30 @@ const _sfc_main$e = {
     const allowResolve = computed(() => {
       if (!generallyAllowed.value) return false;
       if (props.comment.parentCommentId) return false;
-      if (isOwnComment || props.comment.trackedChange) return isAllowed(PERMISSIONS.RESOLVE_OWN, role, isInternal);
-      else return isAllowed(PERMISSIONS.RESOLVE_OTHER, role, isInternal);
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment || props.comment.trackedChange) {
+        return isAllowed(PERMISSIONS.RESOLVE_OWN, role, isInternal, context);
+      } else {
+        return isAllowed(PERMISSIONS.RESOLVE_OTHER, role, isInternal, context);
+      }
     });
     const allowReject = computed(() => {
       if (!generallyAllowed.value) return false;
       if (!props.comment.trackedChange) return false;
-      if (isOwnComment || props.comment.trackedChange) return isAllowed(PERMISSIONS.REJECT_OWN, role, isInternal);
-      else return isAllowed(PERMISSIONS.REJECT_OTHER, role, isInternal);
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment || props.comment.trackedChange) {
+        return isAllowed(PERMISSIONS.REJECT_OWN, role, isInternal, context);
+      } else {
+        return isAllowed(PERMISSIONS.REJECT_OTHER, role, isInternal, context);
+      }
     });
     const allowOverflow = computed(() => {
       if (!generallyAllowed.value) return false;
@@ -15617,9 +15660,14 @@ const _sfc_main$e = {
         options.add("edit");
       }
       const isOwnComment2 = props.comment.creatorEmail === proxy.$superdoc.config.user.email;
-      if (isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OWN, role, isInternal)) {
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OWN, role, isInternal, context)) {
         options.add("delete");
-      } else if (!isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OTHER, role, isInternal)) {
+      } else if (!isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OTHER, role, isInternal, context)) {
         options.add("delete");
       }
       options.forEach((option) => allowedOptions.push(OVERFLOW_OPTIONS[option]));
@@ -15682,7 +15730,7 @@ const _sfc_main$e = {
     };
   }
 };
-const CommentHeader = /* @__PURE__ */ _export_sfc(_sfc_main$e, [["__scopeId", "data-v-27b7739c"]]);
+const CommentHeader = /* @__PURE__ */ _export_sfc(_sfc_main$e, [["__scopeId", "data-v-0f4f53ef"]]);
 const _hoisted_1$c = { class: "input-section" };
 const _sfc_main$d = {
   __name: "CommentInput",
@@ -16102,7 +16150,7 @@ const _sfc_main$c = {
     };
   }
 };
-const CommentDialog = /* @__PURE__ */ _export_sfc(_sfc_main$c, [["__scopeId", "data-v-e07f3426"]]);
+const CommentDialog = /* @__PURE__ */ _export_sfc(_sfc_main$c, [["__scopeId", "data-v-36e5f63e"]]);
 const _hoisted_1$a = { class: "comments-list" };
 const _hoisted_2$5 = { key: 0 };
 const _hoisted_3$3 = { class: "comment-item" };
@@ -17099,7 +17147,7 @@ const _sfc_main = {
   __name: "SuperDoc",
   emits: ["selection-update"],
   setup(__props, { emit: __emit }) {
-    const PdfViewer = defineAsyncComponent(() => import("./PdfViewer-BiHh3x6b.es.js"));
+    const PdfViewer = defineAsyncComponent(() => import("./PdfViewer-BEbvklge.es.js"));
     const superdocStore = useSuperdocStore();
     const commentsStore = useCommentsStore();
     const {
@@ -17321,7 +17369,12 @@ const _sfc_main = {
         externalExtensions: proxy.$superdoc.config.editorExtensions || [],
         suppressDefaultDocxStyles: proxy.$superdoc.config.suppressDefaultDocxStyles,
         disableContextMenu: proxy.$superdoc.config.disableContextMenu,
-        jsonOverride: proxy.$superdoc.config.jsonOverride
+        jsonOverride: proxy.$superdoc.config.jsonOverride,
+        permissionResolver: (payload = {}) => proxy.$superdoc.canPerformPermission({
+          role: proxy.$superdoc.config.role,
+          isInternal: proxy.$superdoc.config.isInternal,
+          ...payload
+        })
       };
       return options;
     };
@@ -17690,7 +17743,7 @@ const _sfc_main = {
     };
   }
 };
-const App = /* @__PURE__ */ _export_sfc(_sfc_main, [["__scopeId", "data-v-6de7ff3a"]]);
+const App = /* @__PURE__ */ _export_sfc(_sfc_main, [["__scopeId", "data-v-ac4ea6eb"]]);
 const createSuperdocVueApp = () => {
   const app = createApp(App);
   const pinia = createPinia();
@@ -17785,6 +17838,8 @@ class SuperDoc extends EventEmitter {
     users: [],
     modules: {},
     // Optional: Modules to load. Use modules.ai.{your_key} to pass in your key
+    permissionResolver: null,
+    // Optional: Override for permission checks
     title: "SuperDoc",
     conversations: [],
     pagination: false,
@@ -17842,7 +17897,7 @@ class SuperDoc extends EventEmitter {
     this.config.colors = shuffleArray(this.config.colors);
     this.userColorMap = /* @__PURE__ */ new Map();
     this.colorIndex = 0;
-    this.version = "0.23.0";
+    this.version = "0.24.0";
     this.#log("🦋 [superdoc] Using SuperDoc version:", this.version);
     this.superdocId = config.superdocId || v4();
     this.colors = this.config.colors;
@@ -18148,6 +18203,41 @@ class SuperDoc extends EventEmitter {
       }
     });
   }
+  /**
+   * Determine whether the current configuration allows a given permission.
+   * Used by downstream consumers (toolbar, context menu, commands) to keep
+   * tracked-change affordances consistent with customer overrides.
+   *
+   * @param {Object} params
+   * @param {string} params.permission Permission key to evaluate
+   * @param {string} [params.role=this.config.role] Role to evaluate against
+   * @param {boolean} [params.isInternal=this.config.isInternal] Internal/external flag
+   * @param {Object|null} [params.comment] Comment object (if already resolved)
+   * @param {Object|null} [params.trackedChange] Tracked change metadata (id, attrs, etc.)
+   * @returns {boolean}
+   */
+  canPerformPermission({
+    permission,
+    role = this.config.role,
+    isInternal = this.config.isInternal,
+    comment = null,
+    trackedChange = null
+  } = {}) {
+    if (!permission) return false;
+    let resolvedComment = comment ?? trackedChange?.comment ?? null;
+    const commentId = trackedChange?.commentId || trackedChange?.id;
+    if (!resolvedComment && commentId && this.commentsStore?.getComment) {
+      const storeComment = this.commentsStore.getComment(commentId);
+      resolvedComment = storeComment?.getValues ? storeComment.getValues() : storeComment;
+    }
+    const context = {
+      superdoc: this,
+      currentUser: this.config.user,
+      comment: resolvedComment ?? null,
+      trackedChange: trackedChange ?? null
+    };
+    return isAllowed(permission, role, isInternal, context);
+  }
   #addToolbar() {
     const moduleConfig = this.config.modules?.toolbar || {};
     this.toolbarElement = this.config.modules?.toolbar?.selector || this.config.toolbar;

package/dist/chunks/{index-Di6nG2sc.cjs → index-Bf3lSVG2.cjs}

@@ -1,5 +1,5 @@
 "use strict";
-const superEditor_es = require("./super-editor.es-BKZvTraR.cjs");
+const superEditor_es = require("./super-editor.es-Bh07I_ue.cjs");
 const vue = require("./vue-DKMj1I9B.cjs");
 const blankDocx = require("./blank-docx-DfW3Eeh2.cjs");
 const eventemitter3 = require("./eventemitter3-DkXkH2rT.cjs");
@@ -15336,69 +15336,6 @@ const superdocIcons = {
   rejectChange: xmarkIconSvg,
   overflow: ellipsisVerticalSvg
 };
-const PERMISSIONS = Object.freeze({
-  RESOLVE_OWN: "RESOLVE_OWN",
-  RESOLVE_OTHER: "RESOLVE_OTHER",
-  REJECT_OWN: "REJECT_OWN",
-  REJECT_OTHER: "REJECT_OTHER",
-  COMMENTS_OVERFLOW_OWN: "COMMENTS_OVERFLOW",
-  COMMENTS_OVERFLOW_OTHER: "COMMENTS_OVERFLOW_OTHER",
-  COMMENTS_DELETE_OWN: "COMMENTS_DELETE_OWN",
-  COMMENTS_DELETE_OTHER: "COMMENTS_DELETE_OTHER",
-  UPLOAD_VERSION: "UPLOAD_VERSION",
-  VERSION_HISTORY: "VERSION_HISTORY"
-});
-const ROLES = Object.freeze({
-  EDITOR: "editor",
-  SUGGESTER: "suggester",
-  VIEWER: "viewer"
-});
-const permissions = Object.freeze({
-  [PERMISSIONS.RESOLVE_OWN]: {
-    internal: [ROLES.EDITOR],
-    external: [ROLES.EDITOR]
-  },
-  [PERMISSIONS.RESOLVE_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.REJECT_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.REJECT_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.COMMENTS_OVERFLOW_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.COMMENTS_OVERFLOW_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.COMMENTS_DELETE_OWN]: {
-    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
-    external: [ROLES.EDITOR, ROLES.SUGGESTER]
-  },
-  [PERMISSIONS.COMMENTS_DELETE_OTHER]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.UPLOAD_VERSION]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  },
-  [PERMISSIONS.VERSION_HISTORY]: {
-    internal: [ROLES.EDITOR],
-    external: []
-  }
-});
-const isAllowed = (permission, role, isInternal) => {
-  const internalExternal = isInternal ? "internal" : "external";
-  return permissions[permission]?.[internalExternal]?.includes(role);
-};
 const _export_sfc = (sfc, props) => {
   const target = sfc.__vccOpts || sfc;
   for (const [key, val] of props) {
@@ -15554,6 +15491,96 @@ function formatDate(timestamp) {
   const formattedDate = `${formattedTime} ${month} ${day}`;
   return formattedDate;
 }
+const PERMISSIONS = Object.freeze({
+  RESOLVE_OWN: "RESOLVE_OWN",
+  RESOLVE_OTHER: "RESOLVE_OTHER",
+  REJECT_OWN: "REJECT_OWN",
+  REJECT_OTHER: "REJECT_OTHER",
+  COMMENTS_OVERFLOW_OWN: "COMMENTS_OVERFLOW",
+  COMMENTS_OVERFLOW_OTHER: "COMMENTS_OVERFLOW_OTHER",
+  COMMENTS_DELETE_OWN: "COMMENTS_DELETE_OWN",
+  COMMENTS_DELETE_OTHER: "COMMENTS_DELETE_OTHER",
+  UPLOAD_VERSION: "UPLOAD_VERSION",
+  VERSION_HISTORY: "VERSION_HISTORY"
+});
+const ROLES = Object.freeze({
+  EDITOR: "editor",
+  SUGGESTER: "suggester",
+  VIEWER: "viewer"
+});
+const PERMISSION_MATRIX = Object.freeze({
+  [PERMISSIONS.RESOLVE_OWN]: {
+    internal: [ROLES.EDITOR],
+    external: [ROLES.EDITOR]
+  },
+  [PERMISSIONS.RESOLVE_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.REJECT_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.REJECT_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.COMMENTS_OVERFLOW_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.COMMENTS_OVERFLOW_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.COMMENTS_DELETE_OWN]: {
+    internal: [ROLES.EDITOR, ROLES.SUGGESTER],
+    external: [ROLES.EDITOR, ROLES.SUGGESTER]
+  },
+  [PERMISSIONS.COMMENTS_DELETE_OTHER]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.UPLOAD_VERSION]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  },
+  [PERMISSIONS.VERSION_HISTORY]: {
+    internal: [ROLES.EDITOR],
+    external: []
+  }
+});
+const pickResolver = (context = {}) => {
+  if (typeof context.permissionResolver === "function") return context.permissionResolver;
+  if (context.superdoc?.config?.modules?.comments?.permissionResolver) {
+    const resolver = context.superdoc.config.modules.comments.permissionResolver;
+    if (typeof resolver === "function") return resolver;
+  }
+  if (typeof context.superdoc?.config?.permissionResolver === "function") {
+    return context.superdoc.config.permissionResolver;
+  }
+  return null;
+};
+const defaultDecisionFor = (permission, role, isInternal) => {
+  const internalExternal = isInternal ? "internal" : "external";
+  return PERMISSION_MATRIX[permission]?.[internalExternal]?.includes(role) ?? false;
+};
+const isAllowed = (permission, role, isInternal, context = {}) => {
+  const defaultDecision = defaultDecisionFor(permission, role, isInternal);
+  const resolver = pickResolver(context);
+  if (typeof resolver !== "function") return defaultDecision;
+  const decision = resolver({
+    permission,
+    role,
+    isInternal,
+    defaultDecision,
+    comment: context.comment ?? null,
+    currentUser: context.currentUser ?? context.superdoc?.config?.user ?? null,
+    superdoc: context.superdoc ?? null,
+    trackedChange: context.trackedChange ?? null
+  });
+  return typeof decision === "boolean" ? decision : defaultDecision;
+};
 const _hoisted_1$d = { class: "card-section comment-header" };
 const _hoisted_2$7 = { class: "comment-header-left" };
 const _hoisted_3$5 = { class: "user-info" };
@@ -15610,14 +15637,30 @@ const _sfc_main$e = {
     const allowResolve = vue.computed(() => {
       if (!generallyAllowed.value) return false;
       if (props.comment.parentCommentId) return false;
-      if (isOwnComment || props.comment.trackedChange) return isAllowed(PERMISSIONS.RESOLVE_OWN, role, isInternal);
-      else return isAllowed(PERMISSIONS.RESOLVE_OTHER, role, isInternal);
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment || props.comment.trackedChange) {
+        return isAllowed(PERMISSIONS.RESOLVE_OWN, role, isInternal, context);
+      } else {
+        return isAllowed(PERMISSIONS.RESOLVE_OTHER, role, isInternal, context);
+      }
     });
     const allowReject = vue.computed(() => {
       if (!generallyAllowed.value) return false;
       if (!props.comment.trackedChange) return false;
-      if (isOwnComment || props.comment.trackedChange) return isAllowed(PERMISSIONS.REJECT_OWN, role, isInternal);
-      else return isAllowed(PERMISSIONS.REJECT_OTHER, role, isInternal);
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment || props.comment.trackedChange) {
+        return isAllowed(PERMISSIONS.REJECT_OWN, role, isInternal, context);
+      } else {
+        return isAllowed(PERMISSIONS.REJECT_OTHER, role, isInternal, context);
+      }
     });
     const allowOverflow = vue.computed(() => {
       if (!generallyAllowed.value) return false;
@@ -15634,9 +15677,14 @@ const _sfc_main$e = {
         options.add("edit");
       }
       const isOwnComment2 = props.comment.creatorEmail === proxy.$superdoc.config.user.email;
-      if (isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OWN, role, isInternal)) {
+      const context = {
+        comment: props.comment,
+        currentUser: proxy.$superdoc.config.user,
+        superdoc: proxy.$superdoc
+      };
+      if (isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OWN, role, isInternal, context)) {
         options.add("delete");
-      } else if (!isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OTHER, role, isInternal)) {
+      } else if (!isOwnComment2 && isAllowed(PERMISSIONS.COMMENTS_DELETE_OTHER, role, isInternal, context)) {
         options.add("delete");
       }
       options.forEach((option) => allowedOptions.push(OVERFLOW_OPTIONS[option]));
@@ -15699,7 +15747,7 @@ const _sfc_main$e = {
     };
   }
 };
-const CommentHeader = /* @__PURE__ */ _export_sfc(_sfc_main$e, [["__scopeId", "data-v-27b7739c"]]);
+const CommentHeader = /* @__PURE__ */ _export_sfc(_sfc_main$e, [["__scopeId", "data-v-0f4f53ef"]]);
 const _hoisted_1$c = { class: "input-section" };
 const _sfc_main$d = {
   __name: "CommentInput",
@@ -16119,7 +16167,7 @@ const _sfc_main$c = {
     };
   }
 };
-const CommentDialog = /* @__PURE__ */ _export_sfc(_sfc_main$c, [["__scopeId", "data-v-e07f3426"]]);
+const CommentDialog = /* @__PURE__ */ _export_sfc(_sfc_main$c, [["__scopeId", "data-v-36e5f63e"]]);
 const _hoisted_1$a = { class: "comments-list" };
 const _hoisted_2$5 = { key: 0 };
 const _hoisted_3$3 = { class: "comment-item" };
@@ -17116,7 +17164,7 @@ const _sfc_main = {
   __name: "SuperDoc",
   emits: ["selection-update"],
   setup(__props, { emit: __emit }) {
-    const PdfViewer = vue.defineAsyncComponent(() => Promise.resolve().then(() => require("./PdfViewer-qk_hITc5.cjs")));
+    const PdfViewer = vue.defineAsyncComponent(() => Promise.resolve().then(() => require("./PdfViewer-CvksDDwi.cjs")));
     const superdocStore = useSuperdocStore();
     const commentsStore = useCommentsStore();
     const {
@@ -17338,7 +17386,12 @@ const _sfc_main = {
         externalExtensions: proxy.$superdoc.config.editorExtensions || [],
         suppressDefaultDocxStyles: proxy.$superdoc.config.suppressDefaultDocxStyles,
         disableContextMenu: proxy.$superdoc.config.disableContextMenu,
-        jsonOverride: proxy.$superdoc.config.jsonOverride
+        jsonOverride: proxy.$superdoc.config.jsonOverride,
+        permissionResolver: (payload = {}) => proxy.$superdoc.canPerformPermission({
+          role: proxy.$superdoc.config.role,
+          isInternal: proxy.$superdoc.config.isInternal,
+          ...payload
+        })
       };
       return options;
     };
@@ -17707,7 +17760,7 @@ const _sfc_main = {
     };
   }
 };
-const App = /* @__PURE__ */ _export_sfc(_sfc_main, [["__scopeId", "data-v-6de7ff3a"]]);
+const App = /* @__PURE__ */ _export_sfc(_sfc_main, [["__scopeId", "data-v-ac4ea6eb"]]);
 const createSuperdocVueApp = () => {
   const app = vue.createApp(App);
   const pinia = createPinia();
@@ -17802,6 +17855,8 @@ class SuperDoc extends eventemitter3.EventEmitter {
     users: [],
     modules: {},
     // Optional: Modules to load. Use modules.ai.{your_key} to pass in your key
+    permissionResolver: null,
+    // Optional: Override for permission checks
     title: "SuperDoc",
     conversations: [],
     pagination: false,
@@ -17859,7 +17914,7 @@ class SuperDoc extends eventemitter3.EventEmitter {
     this.config.colors = shuffleArray(this.config.colors);
     this.userColorMap = /* @__PURE__ */ new Map();
     this.colorIndex = 0;
-    this.version = "0.23.0";
+    this.version = "0.24.0";
     this.#log("🦋 [superdoc] Using SuperDoc version:", this.version);
     this.superdocId = config.superdocId || uuid.v4();
     this.colors = this.config.colors;
@@ -18165,6 +18220,41 @@ class SuperDoc extends eventemitter3.EventEmitter {
       }
     });
   }
+  /**
+   * Determine whether the current configuration allows a given permission.
+   * Used by downstream consumers (toolbar, context menu, commands) to keep
+   * tracked-change affordances consistent with customer overrides.
+   *
+   * @param {Object} params
+   * @param {string} params.permission Permission key to evaluate
+   * @param {string} [params.role=this.config.role] Role to evaluate against
+   * @param {boolean} [params.isInternal=this.config.isInternal] Internal/external flag
+   * @param {Object|null} [params.comment] Comment object (if already resolved)
+   * @param {Object|null} [params.trackedChange] Tracked change metadata (id, attrs, etc.)
+   * @returns {boolean}
+   */
+  canPerformPermission({
+    permission,
+    role = this.config.role,
+    isInternal = this.config.isInternal,
+    comment = null,
+    trackedChange = null
+  } = {}) {
+    if (!permission) return false;
+    let resolvedComment = comment ?? trackedChange?.comment ?? null;
+    const commentId = trackedChange?.commentId || trackedChange?.id;
+    if (!resolvedComment && commentId && this.commentsStore?.getComment) {
+      const storeComment = this.commentsStore.getComment(commentId);
+      resolvedComment = storeComment?.getValues ? storeComment.getValues() : storeComment;
+    }
+    const context = {
+      superdoc: this,
+      currentUser: this.config.user,
+      comment: resolvedComment ?? null,
+      trackedChange: trackedChange ?? null
+    };
+    return isAllowed(permission, role, isInternal, context);
+  }
   #addToolbar() {
     const moduleConfig = this.config.modules?.toolbar || {};
     this.toolbarElement = this.config.modules?.toolbar?.selector || this.config.toolbar;