@hexagramio/saga-ts 0.9.589-0 → 0.9.590-0

package/dist/cjs/index.d.ts

@@ -8,4 +8,5 @@ export * from './commands/test_data';
 export * from './commands/requests';
 export * from './commands/analytics';
 export * from './shared/types';
+export * from './shared/permissions';
 //# sourceMappingURL=index.d.ts.map

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,sBAAsB,CAAA"}

package/dist/cjs/index.js

@@ -24,4 +24,5 @@ __exportStar(require("./commands/test_data"), exports);
 __exportStar(require("./commands/requests"), exports);
 __exportStar(require("./commands/analytics"), exports);
 __exportStar(require("./shared/types"), exports);
+__exportStar(require("./shared/permissions"), exports);
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,mDAAgC;AAChC,kDAA+B;AAC/B,mDAAgC;AAChC,qDAAkC;AAClC,oDAAiC;AACjC,uDAAoC;AACpC,sDAAmC;AACnC,uDAAoC;AACpC,iDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA8B;AAC9B,mDAAgC;AAChC,kDAA+B;AAC/B,mDAAgC;AAChC,qDAAkC;AAClC,oDAAiC;AACjC,uDAAoC;AACpC,sDAAmC;AACnC,uDAAoC;AACpC,iDAA8B;AAC9B,uDAAoC"}

package/dist/cjs/shared/permissions.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Permission Object
+ */
+export interface Permission {
+    path: string;
+    action: string;
+    allow: boolean;
+}
+/**
+ * Check if user has access to a resource
+ * Client-side version of the server's permit() function
+ *
+ * @param path - the path to resource (e.g., "/bots/123/properties")
+ * @param action - HTTP method or action (e.g., "GET", "POST", "DELETE")
+ * @param permissions - array of user permissions
+ * @returns true if permitted, false otherwise
+ *
+ * @example
+ * ```typescript
+ * const permissions = authResponse.permissions;
+ *
+ * if (hasAccess('/bots/123', 'DELETE', permissions)) {
+ *   // Show delete button
+ * }
+ * ```
+ */
+export declare const hasAccess: (path: string, action: string, permissions: Permission[]) => boolean;
+/**
+ * Helper to create permission checks for specific resources
+ * Useful for UI components that need to check multiple actions
+ *
+ * @example
+ * ```typescript
+ * const botAccess = createAccessChecker('/bots/123', permissions);
+ *
+ * return (
+ *   <div>
+ *     {botAccess('GET') && <ViewButton />}
+ *     {botAccess('PUT') && <EditButton />}
+ *     {botAccess('DELETE') && <DeleteButton />}
+ *   </div>
+ * );
+ * ```
+ */
+export declare const createAccessChecker: (path: string, permissions: Permission[]) => (action: string) => boolean;
+/**
+ * Hook-friendly permission checker factory
+ * Memoizes permission checks for a resource
+ *
+ * @example
+ * ```typescript
+ * function BotActions({ botId, permissions }) {
+ *   const can = useAccessChecker(`/bots/${botId}`, permissions);
+ *
+ *   return (
+ *     <div>
+ *       {can.read && <ViewButton />}
+ *       {can.update && <EditButton />}
+ *       {can.delete && <DeleteButton />}
+ *     </div>
+ *   );
+ * }
+ * ```
+ */
+export declare const createRestAccessChecker: (path: string, permissions: Permission[]) => {
+    read: boolean;
+    create: boolean;
+    update: boolean;
+    delete: boolean;
+    patch: boolean;
+};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/cjs/shared/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../src/shared/permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,SAAS,SACd,MAAM,UACJ,MAAM,eACD,UAAU,EAAE,KACxB,OAcF,CAAC;AAoEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,SACxB,MAAM,eACC,UAAU,EAAE,cAET,MAAM,YACvB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,SAC5B,MAAM,eACC,UAAU,EAAE;;;;;;CAS1B,CAAC"}

package/dist/cjs/shared/permissions.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRestAccessChecker = exports.createAccessChecker = exports.hasAccess = void 0;
+/**
+ * Check if user has access to a resource
+ * Client-side version of the server's permit() function
+ *
+ * @param path - the path to resource (e.g., "/bots/123/properties")
+ * @param action - HTTP method or action (e.g., "GET", "POST", "DELETE")
+ * @param permissions - array of user permissions
+ * @returns true if permitted, false otherwise
+ *
+ * @example
+ * ```typescript
+ * const permissions = authResponse.permissions;
+ *
+ * if (hasAccess('/bots/123', 'DELETE', permissions)) {
+ *   // Show delete button
+ * }
+ * ```
+ */
+const hasAccess = (path, action, permissions) => {
+    let allowed = false;
+    for (const permission of permissions) {
+        const given = checkPermission(path, action.toLowerCase(), permission);
+        if (!permission.allow && given === false) {
+            return false;
+        }
+        else if (permission.allow && given === true) {
+            allowed = true;
+        }
+    }
+    return allowed;
+};
+exports.hasAccess = hasAccess;
+/**
+ * Check a single permission against a path and action
+ * @internal
+ */
+const checkPermission = (path, action, permission) => {
+    const pathElements = path.substring(1).split('/');
+    const permissionElements = permission.path.substring(1).split('/');
+    // Root wildcard match
+    if (permissionElements[0] === '*' &&
+        (action === permission.action || permission.action === '*')) {
+        return true;
+    }
+    // No overlap (e.g., testing /users for /bots permission)
+    else if (pathElements[0] !== permissionElements[0]) {
+        return null;
+    }
+    if (permission.allow) {
+        for (let i = 0; i < permissionElements.length; i++) {
+            const permissionElement = permissionElements[i];
+            const pathElement = pathElements.shift();
+            if (pathElement) {
+                // Permission path does not apply
+                if (permissionElement !== pathElement && permissionElement !== '*') {
+                    return null;
+                }
+                // Path matches but action is not permitted
+                else if (action !== permission.action && permission.action !== '*') {
+                    return false;
+                }
+            }
+            else {
+                // Permission only allows access at deeper level
+                return null;
+            }
+        }
+        return true;
+    }
+    else {
+        let response = true;
+        for (let i = 0; i < permissionElements.length; i++) {
+            const permissionElement = permissionElements[i];
+            const pathElement = pathElements.shift();
+            if ((permissionElement === pathElement || permissionElement === '*') &&
+                (action === permission.action || permission.action === '*')) {
+                response = false;
+            }
+            else {
+                response = true;
+            }
+        }
+        return response;
+    }
+};
+/**
+ * Helper to create permission checks for specific resources
+ * Useful for UI components that need to check multiple actions
+ *
+ * @example
+ * ```typescript
+ * const botAccess = createAccessChecker('/bots/123', permissions);
+ *
+ * return (
+ *   <div>
+ *     {botAccess('GET') && <ViewButton />}
+ *     {botAccess('PUT') && <EditButton />}
+ *     {botAccess('DELETE') && <DeleteButton />}
+ *   </div>
+ * );
+ * ```
+ */
+const createAccessChecker = (path, permissions) => {
+    return (action) => (0, exports.hasAccess)(path, action, permissions);
+};
+exports.createAccessChecker = createAccessChecker;
+/**
+ * Hook-friendly permission checker factory
+ * Memoizes permission checks for a resource
+ *
+ * @example
+ * ```typescript
+ * function BotActions({ botId, permissions }) {
+ *   const can = useAccessChecker(`/bots/${botId}`, permissions);
+ *
+ *   return (
+ *     <div>
+ *       {can.read && <ViewButton />}
+ *       {can.update && <EditButton />}
+ *       {can.delete && <DeleteButton />}
+ *     </div>
+ *   );
+ * }
+ * ```
+ */
+const createRestAccessChecker = (path, permissions) => {
+    return {
+        read: (0, exports.hasAccess)(path, 'GET', permissions),
+        create: (0, exports.hasAccess)(path, 'POST', permissions),
+        update: (0, exports.hasAccess)(path, 'PUT', permissions),
+        delete: (0, exports.hasAccess)(path, 'DELETE', permissions),
+        patch: (0, exports.hasAccess)(path, 'PATCH', permissions),
+    };
+};
+exports.createRestAccessChecker = createRestAccessChecker;
+//# sourceMappingURL=permissions.js.map

package/dist/cjs/shared/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../src/shared/permissions.ts"],"names":[],"mappings":";;;AASA;;;;;;;;;;;;;;;;;GAiBG;AACI,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,MAAc,EACd,WAAyB,EAChB,EAAE;IACX,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAlBW,QAAA,SAAS,aAkBpB;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CACtB,IAAY,EACZ,MAAc,EACd,UAAsB,EACN,EAAE;IAClB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnE,sBAAsB;IACtB,IACE,kBAAkB,CAAC,CAAC,CAAC,KAAK,GAAG;QAC7B,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,EAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yDAAyD;SACpD,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,IAAI,WAAW,EAAE,CAAC;gBAChB,iCAAiC;gBACjC,IAAI,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,2CAA2C;qBACtC,IAAI,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,IACE,CAAC,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,KAAK,GAAG,CAAC;gBAChE,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,EAC3D,CAAC;gBACD,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACI,MAAM,mBAAmB,GAAG,CACjC,IAAY,EACZ,WAAyB,EACzB,EAAE;IACF,OAAO,CAAC,MAAc,EAAE,EAAE,CAAC,IAAA,iBAAS,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC,CAAC;AALW,QAAA,mBAAmB,uBAK9B;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACI,MAAM,uBAAuB,GAAG,CACrC,IAAY,EACZ,WAAyB,EACzB,EAAE;IACF,OAAO;QACL,IAAI,EAAE,IAAA,iBAAS,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;QACzC,MAAM,EAAE,IAAA,iBAAS,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC;QAC5C,MAAM,EAAE,IAAA,iBAAS,EAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3C,MAAM,EAAE,IAAA,iBAAS,EAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC9C,KAAK,EAAE,IAAA,iBAAS,EAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,uBAAuB,2BAWlC"}

package/dist/index.d.ts

@@ -8,4 +8,5 @@ export * from './commands/test_data';
 export * from './commands/requests';
 export * from './commands/analytics';
 export * from './shared/types';
+export * from './shared/permissions';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,sBAAsB,CAAA"}

package/dist/index.js

@@ -8,4 +8,5 @@ export * from './commands/test_data';
 export * from './commands/requests';
 export * from './commands/analytics';
 export * from './shared/types';
+export * from './shared/permissions';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,sBAAsB,CAAA;AACpC,cAAc,qBAAqB,CAAA;AACnC,cAAc,sBAAsB,CAAA;AACpC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,sBAAsB,CAAA"}

package/dist/shared/permissions.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Permission Object
+ */
+export interface Permission {
+    path: string;
+    action: string;
+    allow: boolean;
+}
+/**
+ * Check if user has access to a resource
+ * Client-side version of the server's permit() function
+ *
+ * @param path - the path to resource (e.g., "/bots/123/properties")
+ * @param action - HTTP method or action (e.g., "GET", "POST", "DELETE")
+ * @param permissions - array of user permissions
+ * @returns true if permitted, false otherwise
+ *
+ * @example
+ * ```typescript
+ * const permissions = authResponse.permissions;
+ *
+ * if (hasAccess('/bots/123', 'DELETE', permissions)) {
+ *   // Show delete button
+ * }
+ * ```
+ */
+export declare const hasAccess: (path: string, action: string, permissions: Permission[]) => boolean;
+/**
+ * Helper to create permission checks for specific resources
+ * Useful for UI components that need to check multiple actions
+ *
+ * @example
+ * ```typescript
+ * const botAccess = createAccessChecker('/bots/123', permissions);
+ *
+ * return (
+ *   <div>
+ *     {botAccess('GET') && <ViewButton />}
+ *     {botAccess('PUT') && <EditButton />}
+ *     {botAccess('DELETE') && <DeleteButton />}
+ *   </div>
+ * );
+ * ```
+ */
+export declare const createAccessChecker: (path: string, permissions: Permission[]) => (action: string) => boolean;
+/**
+ * Hook-friendly permission checker factory
+ * Memoizes permission checks for a resource
+ *
+ * @example
+ * ```typescript
+ * function BotActions({ botId, permissions }) {
+ *   const can = useAccessChecker(`/bots/${botId}`, permissions);
+ *
+ *   return (
+ *     <div>
+ *       {can.read && <ViewButton />}
+ *       {can.update && <EditButton />}
+ *       {can.delete && <DeleteButton />}
+ *     </div>
+ *   );
+ * }
+ * ```
+ */
+export declare const createRestAccessChecker: (path: string, permissions: Permission[]) => {
+    read: boolean;
+    create: boolean;
+    update: boolean;
+    delete: boolean;
+    patch: boolean;
+};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/shared/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/shared/permissions.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,SAAS,SACd,MAAM,UACJ,MAAM,eACD,UAAU,EAAE,KACxB,OAcF,CAAC;AAoEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,mBAAmB,SACxB,MAAM,eACC,UAAU,EAAE,cAET,MAAM,YACvB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,uBAAuB,SAC5B,MAAM,eACC,UAAU,EAAE;;;;;;CAS1B,CAAC"}

package/dist/shared/permissions.js

@@ -0,0 +1,133 @@
+/**
+ * Check if user has access to a resource
+ * Client-side version of the server's permit() function
+ *
+ * @param path - the path to resource (e.g., "/bots/123/properties")
+ * @param action - HTTP method or action (e.g., "GET", "POST", "DELETE")
+ * @param permissions - array of user permissions
+ * @returns true if permitted, false otherwise
+ *
+ * @example
+ * ```typescript
+ * const permissions = authResponse.permissions;
+ *
+ * if (hasAccess('/bots/123', 'DELETE', permissions)) {
+ *   // Show delete button
+ * }
+ * ```
+ */
+export const hasAccess = (path, action, permissions) => {
+    let allowed = false;
+    for (const permission of permissions) {
+        const given = checkPermission(path, action.toLowerCase(), permission);
+        if (!permission.allow && given === false) {
+            return false;
+        }
+        else if (permission.allow && given === true) {
+            allowed = true;
+        }
+    }
+    return allowed;
+};
+/**
+ * Check a single permission against a path and action
+ * @internal
+ */
+const checkPermission = (path, action, permission) => {
+    const pathElements = path.substring(1).split('/');
+    const permissionElements = permission.path.substring(1).split('/');
+    // Root wildcard match
+    if (permissionElements[0] === '*' &&
+        (action === permission.action || permission.action === '*')) {
+        return true;
+    }
+    // No overlap (e.g., testing /users for /bots permission)
+    else if (pathElements[0] !== permissionElements[0]) {
+        return null;
+    }
+    if (permission.allow) {
+        for (let i = 0; i < permissionElements.length; i++) {
+            const permissionElement = permissionElements[i];
+            const pathElement = pathElements.shift();
+            if (pathElement) {
+                // Permission path does not apply
+                if (permissionElement !== pathElement && permissionElement !== '*') {
+                    return null;
+                }
+                // Path matches but action is not permitted
+                else if (action !== permission.action && permission.action !== '*') {
+                    return false;
+                }
+            }
+            else {
+                // Permission only allows access at deeper level
+                return null;
+            }
+        }
+        return true;
+    }
+    else {
+        let response = true;
+        for (let i = 0; i < permissionElements.length; i++) {
+            const permissionElement = permissionElements[i];
+            const pathElement = pathElements.shift();
+            if ((permissionElement === pathElement || permissionElement === '*') &&
+                (action === permission.action || permission.action === '*')) {
+                response = false;
+            }
+            else {
+                response = true;
+            }
+        }
+        return response;
+    }
+};
+/**
+ * Helper to create permission checks for specific resources
+ * Useful for UI components that need to check multiple actions
+ *
+ * @example
+ * ```typescript
+ * const botAccess = createAccessChecker('/bots/123', permissions);
+ *
+ * return (
+ *   <div>
+ *     {botAccess('GET') && <ViewButton />}
+ *     {botAccess('PUT') && <EditButton />}
+ *     {botAccess('DELETE') && <DeleteButton />}
+ *   </div>
+ * );
+ * ```
+ */
+export const createAccessChecker = (path, permissions) => {
+    return (action) => hasAccess(path, action, permissions);
+};
+/**
+ * Hook-friendly permission checker factory
+ * Memoizes permission checks for a resource
+ *
+ * @example
+ * ```typescript
+ * function BotActions({ botId, permissions }) {
+ *   const can = useAccessChecker(`/bots/${botId}`, permissions);
+ *
+ *   return (
+ *     <div>
+ *       {can.read && <ViewButton />}
+ *       {can.update && <EditButton />}
+ *       {can.delete && <DeleteButton />}
+ *     </div>
+ *   );
+ * }
+ * ```
+ */
+export const createRestAccessChecker = (path, permissions) => {
+    return {
+        read: hasAccess(path, 'GET', permissions),
+        create: hasAccess(path, 'POST', permissions),
+        update: hasAccess(path, 'PUT', permissions),
+        delete: hasAccess(path, 'DELETE', permissions),
+        patch: hasAccess(path, 'PATCH', permissions),
+    };
+};
+//# sourceMappingURL=permissions.js.map

package/dist/shared/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/shared/permissions.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,MAAc,EACd,WAAyB,EAChB,EAAE;IACX,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;QAEtE,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CACtB,IAAY,EACZ,MAAc,EACd,UAAsB,EACN,EAAE;IAClB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEnE,sBAAsB;IACtB,IACE,kBAAkB,CAAC,CAAC,CAAC,KAAK,GAAG;QAC7B,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,EAC3D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yDAAyD;SACpD,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,IAAI,WAAW,EAAE,CAAC;gBAChB,iCAAiC;gBACjC,IAAI,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,KAAK,GAAG,EAAE,CAAC;oBACnE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,2CAA2C;qBACtC,IAAI,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;YAEzC,IACE,CAAC,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,KAAK,GAAG,CAAC;gBAChE,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,EAC3D,CAAC;gBACD,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAAY,EACZ,WAAyB,EACzB,EAAE;IACF,OAAO,CAAC,MAAc,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAClE,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,IAAY,EACZ,WAAyB,EACzB,EAAE;IACF,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;QACzC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC;QAC5C,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3C,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC;QAC9C,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC;KAC7C,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hexagramio/saga-ts",
-  "version": "0.9.589-0",
+  "version": "0.9.590-0",
   "description": "Saga SDK",
   "types": "./dist/index.d.ts",
   "main": "./dist/index.js",