@invect/rbac 0.0.1 → 0.0.3

package/dist/frontend/index.d.cts

@@ -0,0 +1,227 @@
+import { C as ScopeTreeResponse, D as UpdateTeamRequest, E as TeamWithMembers, T as TeamMember, c as FlowAccessRecord, d as GrantScopeAccessRequest, i as CreateTeamRequest, m as MovePreviewResponse, n as AddTeamMemberRequest, o as EffectiveFlowAccessResponse, p as MovePreviewRequest, r as AuthMeResponse, t as AccessibleFlowsResponse, u as GrantFlowAccessRequest, w as Team, x as ScopeAccessRecord } from "../types-D4DI2gyU.cjs";
+import * as react_jsx_runtime0 from "react/jsx-runtime";
+import { ComponentType, ReactNode } from "react";
+import * as _tanstack_react_query0 from "@tanstack/react-query";
+
+//#region src/frontend/providers/RbacProvider.d.ts
+interface RbacContextValue {
+  /** Current user identity, null if not authenticated */
+  user: AuthMeResponse['identity'];
+  /** Whether the user is authenticated */
+  isAuthenticated: boolean;
+  /** Set of all permissions the user has */
+  permissions: Set<string>;
+  /** Check if the user has a specific permission */
+  checkPermission: (permission: string) => boolean;
+  /** Whether the auth/me query is still loading */
+  isLoading: boolean;
+}
+declare function RbacProvider({
+  children
+}: {
+  children: ReactNode;
+}): react_jsx_runtime0.JSX.Element;
+/**
+ * Access RBAC context — current user, permissions, and permission checking.
+ *
+ * Must be used within an `<RbacProvider>`.
+ * Returns a safe fallback (unauthenticated, allow all) if provider is missing.
+ */
+declare function useRbac(): RbacContextValue;
+//#endregion
+//#region src/frontend/types.d.ts
+/**
+ * A frontend plugin that contributes UI to the Invect application.
+ * Plugins are registered via `<Invect plugins={[myPlugin]} />`.
+ */
+interface InvectFrontendPlugin {
+  /** Unique plugin ID — should match backend plugin ID for manifest resolution */
+  id: string;
+  /** Display name */
+  name?: string;
+  /** Add items to the sidebar navigation */
+  sidebar?: PluginSidebarContribution[];
+  /** Add top-level routes (pages) */
+  routes?: PluginRouteContribution[];
+  /** Add tabs to contextual panels (flow editor right panel, etc.) */
+  panelTabs?: PluginPanelTabContribution[];
+  /** Add action buttons/components to contextual headers */
+  headerActions?: PluginHeaderActionContribution[];
+  /**
+   * Named component implementations — resolved from backend componentIds.
+   * Key = componentId (e.g. 'rbac.FlowAccessPanel'), value = React component.
+   */
+  components?: Record<string, ComponentType<Record<string, unknown>>>;
+  /** Wrap the React tree with additional providers (auth context, etc.) */
+  providers?: ComponentType<{
+    children: ReactNode;
+  }>[];
+  /**
+   * Inject headers into every API request.
+   * Called before each request. Return headers to merge.
+   */
+  apiHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+  /**
+   * Check if the current user has a specific permission.
+   * Returns true/false to override, or undefined to defer to default.
+   */
+  checkPermission?: (permission: string, context?: PermissionContext) => boolean | undefined;
+}
+interface PluginSidebarContribution {
+  label: string;
+  icon: ComponentType<{
+    className?: string;
+  }>;
+  path: string;
+  /** Position hint: 'top' (after defaults), 'bottom' (before theme toggle) */
+  position?: 'top' | 'bottom';
+  /** Required permission — item hidden if check fails */
+  permission?: string;
+}
+interface PluginRouteContribution {
+  path: string;
+  component: ComponentType<{
+    basePath: string;
+  }>;
+  /** If true, route is nested under the flow layout */
+  flowScoped?: boolean;
+}
+interface PluginPanelTabContribution {
+  /** Where the tab appears */
+  context: 'flowEditor' | 'nodeConfig';
+  label: string;
+  icon?: ComponentType<{
+    className?: string;
+  }>;
+  component: ComponentType<PanelTabProps>;
+  /** Required permission — tab hidden if check fails */
+  permission?: string;
+}
+interface PluginHeaderActionContribution {
+  /** Where the action appears */
+  context: 'flowHeader' | 'flowList';
+  component: ComponentType<HeaderActionProps>;
+  /** Required permission — action hidden if check fails */
+  permission?: string;
+}
+interface PanelTabProps {
+  flowId: string;
+  basePath: string;
+}
+interface HeaderActionProps {
+  flowId?: string;
+  basePath: string;
+}
+interface PermissionContext {
+  resourceType?: string;
+  resourceId?: string;
+  flowId?: string;
+}
+//#endregion
+//#region src/frontend/components/ShareButton.d.ts
+declare function ShareButton({
+  flowId
+}: HeaderActionProps): react_jsx_runtime0.JSX.Element | null;
+//#endregion
+//#region src/frontend/components/ShareFlowModal.d.ts
+/**
+ * ShareFlowModal — Modal for managing flow access permissions.
+ *
+ * Shows current access records and allows granting/revoking access.
+ */
+interface ShareFlowModalProps {
+  flowId: string;
+  onClose: () => void;
+}
+declare function ShareFlowModal({
+  flowId,
+  onClose
+}: ShareFlowModalProps): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/FlowAccessPanel.d.ts
+declare function FlowAccessPanel({
+  flowId
+}: PanelTabProps): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/access-control/AccessControlPage.d.ts
+declare function AccessControlPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/TeamsPage.d.ts
+/**
+ * TeamsPage — Team management page with create/edit/delete teams and member management.
+ */
+declare function TeamsPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/UserMenuSection.d.ts
+/**
+ * UserMenuSection — Sidebar footer component showing current user info.
+ *
+ * Displays the authenticated user's name and role in the sidebar footer area.
+ * This is a standalone component — not directly injected via plugin system
+ * but available for host apps to use in custom sidebar layouts.
+ */
+declare function UserMenuSection({
+  collapsed
+}: {
+  collapsed?: boolean;
+}): react_jsx_runtime0.JSX.Element | null;
+declare function UserAvatar({
+  className
+}: {
+  className?: string;
+}): react_jsx_runtime0.JSX.Element | null;
+//#endregion
+//#region src/frontend/hooks/useFlowAccess.d.ts
+/** Fetch access records for a specific flow */
+declare function useFlowAccess(flowId: string | undefined): _tanstack_react_query0.UseQueryResult<{
+  access: FlowAccessRecord[];
+}, Error>;
+/** Fetch all flow IDs accessible to the current user with their effective permission */
+declare function useAccessibleFlows(): _tanstack_react_query0.UseQueryResult<AccessibleFlowsResponse, Error>;
+/** Grant access to a flow */
+declare function useGrantFlowAccess(flowId: string): _tanstack_react_query0.UseMutationResult<any, Error, GrantFlowAccessRequest, unknown>;
+/** Revoke a specific access record */
+declare function useRevokeFlowAccess(flowId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+//#endregion
+//#region src/frontend/hooks/useTeams.d.ts
+/** List all teams */
+declare function useTeams(): _tanstack_react_query0.UseQueryResult<{
+  teams: Team[];
+}, Error>;
+/** Get a single team with members */
+declare function useTeam(teamId: string | undefined): _tanstack_react_query0.UseQueryResult<TeamWithMembers, Error>;
+/** Get current user's teams */
+declare function useMyTeams(): _tanstack_react_query0.UseQueryResult<{
+  teams: Team[];
+}, Error>;
+/** Create a team */
+declare function useCreateTeam(): _tanstack_react_query0.UseMutationResult<Team, Error, CreateTeamRequest, unknown>;
+/** Update a team */
+declare function useUpdateTeam(teamId: string): _tanstack_react_query0.UseMutationResult<any, Error, UpdateTeamRequest, unknown>;
+/** Delete a team */
+declare function useDeleteTeam(): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+/** Add a member to a team */
+declare function useAddTeamMember(teamId: string): _tanstack_react_query0.UseMutationResult<TeamMember, Error, AddTeamMemberRequest, unknown>;
+/** Remove a member from a team */
+declare function useRemoveTeamMember(teamId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+//#endregion
+//#region src/frontend/hooks/useScopes.d.ts
+declare function useScopeTree(): _tanstack_react_query0.UseQueryResult<ScopeTreeResponse, Error>;
+declare function useScopeAccess(scopeId: string | undefined): _tanstack_react_query0.UseQueryResult<{
+  access: ScopeAccessRecord[];
+}, Error>;
+declare function useGrantScopeAccess(scopeId: string): _tanstack_react_query0.UseMutationResult<ScopeAccessRecord, Error, GrantScopeAccessRequest, unknown>;
+declare function useRevokeScopeAccess(scopeId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+declare function useEffectiveFlowAccess(flowId: string | undefined): _tanstack_react_query0.UseQueryResult<EffectiveFlowAccessResponse, Error>;
+declare function useMoveFlow(flowId: string): _tanstack_react_query0.UseMutationResult<{
+  success: boolean;
+  flowId: string;
+  scopeId: string | null;
+}, Error, string | null, unknown>;
+declare function usePreviewMove(): _tanstack_react_query0.UseMutationResult<MovePreviewResponse, Error, MovePreviewRequest, unknown>;
+//#endregion
+//#region src/frontend/index.d.ts
+declare const rbacFrontend: InvectFrontendPlugin;
+//#endregion
+export { AccessControlPage, FlowAccessPanel, type HeaderActionProps, type InvectFrontendPlugin, type PanelTabProps, type PermissionContext, type PluginHeaderActionContribution, type PluginPanelTabContribution, type PluginRouteContribution, type PluginSidebarContribution, RbacProvider, ShareButton, ShareFlowModal, TeamsPage, UserAvatar, UserMenuSection, rbacFrontend, useAccessibleFlows, useAddTeamMember, useCreateTeam, useDeleteTeam, useEffectiveFlowAccess, useFlowAccess, useGrantFlowAccess, useGrantScopeAccess, useMoveFlow, useMyTeams, usePreviewMove, useRbac, useRemoveTeamMember, useRevokeFlowAccess, useRevokeScopeAccess, useScopeAccess, useScopeTree, useTeam, useTeams, useUpdateTeam };
+//# sourceMappingURL=index.d.cts.map

package/dist/frontend/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/frontend/providers/RbacProvider.tsx","../../src/frontend/types.ts","../../src/frontend/components/ShareButton.tsx","../../src/frontend/components/ShareFlowModal.tsx","../../src/frontend/components/FlowAccessPanel.tsx","../../src/frontend/components/access-control/AccessControlPage.tsx","../../src/frontend/components/TeamsPage.tsx","../../src/frontend/components/UserMenuSection.tsx","../../src/frontend/hooks/useFlowAccess.ts","../../src/frontend/hooks/useTeams.ts","../../src/frontend/hooks/useScopes.ts","../../src/frontend/index.ts"],"mappings":";;;;;;UAkBiB,gBAAA;EAET;EAAN,IAAA,EAAM,cAAA;EAIN;EAFA,eAAA;EAIA;EAFA,WAAA,EAAa,GAAA;EAIb;EAFA,eAAA,GAAkB,UAAA;EAET;EAAT,SAAA;AAAA;AAAA,iBAac,YAAA,CAAA;EAAe;AAAA;EAAc,QAAA,EAAU,SAAA;AAAA,IAAW,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;iBA2DlD,OAAA,CAAA,GAAW,gBAAA;;;;;;;UCnFV,oBAAA;EDKf;ECHA,EAAA;EDKa;ECFb,IAAA;EDIkB;ECDlB,OAAA,GAAU,yBAAA;EDGD;ECAT,MAAA,GAAS,uBAAA;EDaK;ECVd,SAAA,GAAY,0BAAA;;EAGZ,aAAA,GAAgB,8BAAA;EDOqC;;;;ECDrD,UAAA,GAAa,MAAA,SAAe,aAAA,CAAc,MAAA;EDCb;ECE7B,SAAA,GAAY,aAAA;IAAgB,QAAA,EAAU,SAAA;EAAA;EDF0B;;;AA2DlE;ECnDE,UAAA,SAAmB,MAAA,mBAAyB,OAAA,CAAQ,MAAA;;;;;EAMpD,eAAA,IAAmB,UAAA,UAAoB,OAAA,GAAU,iBAAA;AAAA;AAAA,UAOlC,yBAAA;EACf,KAAA;EACA,IAAA,EAAM,aAAA;IAAgB,SAAA;EAAA;EACtB,IAAA;EA/BgB;EAiChB,QAAA;EA3B4B;EA6B5B,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,IAAA;EACA,SAAA,EAAW,aAAA;IAAgB,QAAA;EAAA;EAnBuC;EAqBlE,UAAA;AAAA;AAAA,UAGe,0BAAA;EAtDf;EAwDA,OAAA;EACA,KAAA;EACA,IAAA,GAAO,aAAA;IAAgB,SAAA;EAAA;EACvB,SAAA,EAAW,aAAA,CAAc,aAAA;EAlDT;EAoDhB,UAAA;AAAA;AAAA,UAGe,8BAAA;EAjD2B;EAmD1C,OAAA;EACA,SAAA,EAAW,aAAA,CAAc,iBAAA;EAjDG;EAmD5B,UAAA;AAAA;AAAA,UAGe,aAAA;EACf,MAAA;EACA,QAAA;AAAA;AAAA,UAGe,iBAAA;EACf,MAAA;EACA,QAAA;AAAA;AAAA,UAGe,iBAAA;EACf,YAAA;EACA,UAAA;EACA,MAAA;AAAA;;;iBChGc,WAAA,CAAA;EAAc;AAAA,GAAU,iBAAA,GAAiB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;;UC0C/C,mBAAA;EACR,MAAA;EACA,OAAA;AAAA;AAAA,iBAGc,cAAA,CAAA;EAAiB,MAAA;EAAQ;AAAA,GAAW,mBAAA,GAAmB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;iBChDvD,eAAA,CAAA;EAAkB;AAAA,GAAU,aAAA,GAAa,kBAAA,CAAA,GAAA,CAAA,OAAA;;;iBCiRzC,iBAAA,CAAA,GAAiB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;iBCvOjB,SAAA,CAAA,GAAS,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;;;ANrCzB;iBORgB,eAAA,CAAA;EAAkB;AAAA;EAAuB,SAAA;AAAA,IAAqB,kBAAA,CAAA,GAAA,CAAA,OAAA;AAAA,iBAqC9D,UAAA,CAAA;EAAa;AAAA;EAAe,SAAA;AAAA,IAAoB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;iBClChD,aAAA,CAAc,MAAA,8CAA0B,cAAA;UAG5B,gBAAA;AAAA;;iBAgBZ,kBAAA,CAAA,GAAkB,sBAAA,CAAA,cAAA,CAAA,uBAAA,EAAA,KAAA;;iBAqBlB,kBAAA,CAAmB,MAAA,WAAc,sBAAA,CAAA,iBAAA,MAAA,KAAA,EAAA,sBAAA;;iBA4BjC,mBAAA,CAAoB,MAAA,WAAc,sBAAA,CAAA,iBAAA,OAAA,KAAA;;;;iBCjElC,QAAA,CAAA,0BAAQ,cAAA;SAGG,IAAA;AAAA;;iBAeX,OAAA,CAAQ,MAAA,uBAA0B,sBAAA,CAAA,cAAA,CAAA,eAAA,EAAA,KAAA;;iBAmBlC,UAAA,CAAA,0BAAU,cAAA;SAGC,IAAA;AAAA;;iBAeX,aAAA,CAAA,GAAa,sBAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,KAAA,EAAA,iBAAA;;iBA0Bb,aAAA,CAAc,MAAA,WAAc,sBAAA,CAAA,iBAAA,MAAA,KAAA,EAAA,iBAAA;;iBA2B5B,aAAA,CAAA,GAAa,sBAAA,CAAA,iBAAA,OAAA,KAAA;ATnF7B;AAAA,iBS0GgB,gBAAA,CAAiB,MAAA,WAAc,sBAAA,CAAA,iBAAA,CAAA,UAAA,EAAA,KAAA,EAAA,oBAAA;;iBA2B/B,mBAAA,CAAoB,MAAA,WAAc,sBAAA,CAAA,iBAAA,OAAA,KAAA;;;iBCnKlC,YAAA,CAAA,GAAY,sBAAA,CAAA,cAAA,CAAA,iBAAA,EAAA,KAAA;AAAA,iBAkBZ,cAAA,CAAe,OAAA,8CAA2B,cAAA;UAG9B,iBAAA;AAAA;iBAgBZ,mBAAA,CAAoB,OAAA,WAAe,sBAAA,CAAA,iBAAA,CAAA,iBAAA,EAAA,KAAA,EAAA,uBAAA;AAAA,iBAyBnC,oBAAA,CAAqB,OAAA,WAAe,sBAAA,CAAA,iBAAA,OAAA,KAAA;AAAA,iBAyBpC,sBAAA,CAAuB,MAAA,uBAA0B,sBAAA,CAAA,cAAA,CAAA,2BAAA,EAAA,KAAA;AAAA,iBAoBjD,WAAA,CAAY,MAAA,WAAD,sBAAA,CAAe,iBAAA;;;;GAAf,KAAA;AAAA,iBA8BX,cAAA,CAAA,GAAc,sBAAA,CAAA,iBAAA,CAAA,mBAAA,EAAA,KAAA,EAAA,kBAAA;;;cChIjB,YAAA,EAAc,oBAAA"}

package/dist/frontend/index.d.mts

@@ -0,0 +1,227 @@
+import { C as ScopeTreeResponse, D as UpdateTeamRequest, E as TeamWithMembers, T as TeamMember, c as FlowAccessRecord, d as GrantScopeAccessRequest, i as CreateTeamRequest, m as MovePreviewResponse, n as AddTeamMemberRequest, o as EffectiveFlowAccessResponse, p as MovePreviewRequest, r as AuthMeResponse, t as AccessibleFlowsResponse, u as GrantFlowAccessRequest, w as Team, x as ScopeAccessRecord } from "../types-DxJoguYy.mjs";
+import { ComponentType, ReactNode } from "react";
+import * as _tanstack_react_query0 from "@tanstack/react-query";
+import * as react_jsx_runtime0 from "react/jsx-runtime";
+
+//#region src/frontend/providers/RbacProvider.d.ts
+interface RbacContextValue {
+  /** Current user identity, null if not authenticated */
+  user: AuthMeResponse['identity'];
+  /** Whether the user is authenticated */
+  isAuthenticated: boolean;
+  /** Set of all permissions the user has */
+  permissions: Set<string>;
+  /** Check if the user has a specific permission */
+  checkPermission: (permission: string) => boolean;
+  /** Whether the auth/me query is still loading */
+  isLoading: boolean;
+}
+declare function RbacProvider({
+  children
+}: {
+  children: ReactNode;
+}): react_jsx_runtime0.JSX.Element;
+/**
+ * Access RBAC context — current user, permissions, and permission checking.
+ *
+ * Must be used within an `<RbacProvider>`.
+ * Returns a safe fallback (unauthenticated, allow all) if provider is missing.
+ */
+declare function useRbac(): RbacContextValue;
+//#endregion
+//#region src/frontend/types.d.ts
+/**
+ * A frontend plugin that contributes UI to the Invect application.
+ * Plugins are registered via `<Invect plugins={[myPlugin]} />`.
+ */
+interface InvectFrontendPlugin {
+  /** Unique plugin ID — should match backend plugin ID for manifest resolution */
+  id: string;
+  /** Display name */
+  name?: string;
+  /** Add items to the sidebar navigation */
+  sidebar?: PluginSidebarContribution[];
+  /** Add top-level routes (pages) */
+  routes?: PluginRouteContribution[];
+  /** Add tabs to contextual panels (flow editor right panel, etc.) */
+  panelTabs?: PluginPanelTabContribution[];
+  /** Add action buttons/components to contextual headers */
+  headerActions?: PluginHeaderActionContribution[];
+  /**
+   * Named component implementations — resolved from backend componentIds.
+   * Key = componentId (e.g. 'rbac.FlowAccessPanel'), value = React component.
+   */
+  components?: Record<string, ComponentType<Record<string, unknown>>>;
+  /** Wrap the React tree with additional providers (auth context, etc.) */
+  providers?: ComponentType<{
+    children: ReactNode;
+  }>[];
+  /**
+   * Inject headers into every API request.
+   * Called before each request. Return headers to merge.
+   */
+  apiHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+  /**
+   * Check if the current user has a specific permission.
+   * Returns true/false to override, or undefined to defer to default.
+   */
+  checkPermission?: (permission: string, context?: PermissionContext) => boolean | undefined;
+}
+interface PluginSidebarContribution {
+  label: string;
+  icon: ComponentType<{
+    className?: string;
+  }>;
+  path: string;
+  /** Position hint: 'top' (after defaults), 'bottom' (before theme toggle) */
+  position?: 'top' | 'bottom';
+  /** Required permission — item hidden if check fails */
+  permission?: string;
+}
+interface PluginRouteContribution {
+  path: string;
+  component: ComponentType<{
+    basePath: string;
+  }>;
+  /** If true, route is nested under the flow layout */
+  flowScoped?: boolean;
+}
+interface PluginPanelTabContribution {
+  /** Where the tab appears */
+  context: 'flowEditor' | 'nodeConfig';
+  label: string;
+  icon?: ComponentType<{
+    className?: string;
+  }>;
+  component: ComponentType<PanelTabProps>;
+  /** Required permission — tab hidden if check fails */
+  permission?: string;
+}
+interface PluginHeaderActionContribution {
+  /** Where the action appears */
+  context: 'flowHeader' | 'flowList';
+  component: ComponentType<HeaderActionProps>;
+  /** Required permission — action hidden if check fails */
+  permission?: string;
+}
+interface PanelTabProps {
+  flowId: string;
+  basePath: string;
+}
+interface HeaderActionProps {
+  flowId?: string;
+  basePath: string;
+}
+interface PermissionContext {
+  resourceType?: string;
+  resourceId?: string;
+  flowId?: string;
+}
+//#endregion
+//#region src/frontend/components/ShareButton.d.ts
+declare function ShareButton({
+  flowId
+}: HeaderActionProps): react_jsx_runtime0.JSX.Element | null;
+//#endregion
+//#region src/frontend/components/ShareFlowModal.d.ts
+/**
+ * ShareFlowModal — Modal for managing flow access permissions.
+ *
+ * Shows current access records and allows granting/revoking access.
+ */
+interface ShareFlowModalProps {
+  flowId: string;
+  onClose: () => void;
+}
+declare function ShareFlowModal({
+  flowId,
+  onClose
+}: ShareFlowModalProps): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/FlowAccessPanel.d.ts
+declare function FlowAccessPanel({
+  flowId
+}: PanelTabProps): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/access-control/AccessControlPage.d.ts
+declare function AccessControlPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/TeamsPage.d.ts
+/**
+ * TeamsPage — Team management page with create/edit/delete teams and member management.
+ */
+declare function TeamsPage(): react_jsx_runtime0.JSX.Element;
+//#endregion
+//#region src/frontend/components/UserMenuSection.d.ts
+/**
+ * UserMenuSection — Sidebar footer component showing current user info.
+ *
+ * Displays the authenticated user's name and role in the sidebar footer area.
+ * This is a standalone component — not directly injected via plugin system
+ * but available for host apps to use in custom sidebar layouts.
+ */
+declare function UserMenuSection({
+  collapsed
+}: {
+  collapsed?: boolean;
+}): react_jsx_runtime0.JSX.Element | null;
+declare function UserAvatar({
+  className
+}: {
+  className?: string;
+}): react_jsx_runtime0.JSX.Element | null;
+//#endregion
+//#region src/frontend/hooks/useFlowAccess.d.ts
+/** Fetch access records for a specific flow */
+declare function useFlowAccess(flowId: string | undefined): _tanstack_react_query0.UseQueryResult<{
+  access: FlowAccessRecord[];
+}, Error>;
+/** Fetch all flow IDs accessible to the current user with their effective permission */
+declare function useAccessibleFlows(): _tanstack_react_query0.UseQueryResult<AccessibleFlowsResponse, Error>;
+/** Grant access to a flow */
+declare function useGrantFlowAccess(flowId: string): _tanstack_react_query0.UseMutationResult<any, Error, GrantFlowAccessRequest, unknown>;
+/** Revoke a specific access record */
+declare function useRevokeFlowAccess(flowId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+//#endregion
+//#region src/frontend/hooks/useTeams.d.ts
+/** List all teams */
+declare function useTeams(): _tanstack_react_query0.UseQueryResult<{
+  teams: Team[];
+}, Error>;
+/** Get a single team with members */
+declare function useTeam(teamId: string | undefined): _tanstack_react_query0.UseQueryResult<TeamWithMembers, Error>;
+/** Get current user's teams */
+declare function useMyTeams(): _tanstack_react_query0.UseQueryResult<{
+  teams: Team[];
+}, Error>;
+/** Create a team */
+declare function useCreateTeam(): _tanstack_react_query0.UseMutationResult<Team, Error, CreateTeamRequest, unknown>;
+/** Update a team */
+declare function useUpdateTeam(teamId: string): _tanstack_react_query0.UseMutationResult<any, Error, UpdateTeamRequest, unknown>;
+/** Delete a team */
+declare function useDeleteTeam(): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+/** Add a member to a team */
+declare function useAddTeamMember(teamId: string): _tanstack_react_query0.UseMutationResult<TeamMember, Error, AddTeamMemberRequest, unknown>;
+/** Remove a member from a team */
+declare function useRemoveTeamMember(teamId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+//#endregion
+//#region src/frontend/hooks/useScopes.d.ts
+declare function useScopeTree(): _tanstack_react_query0.UseQueryResult<ScopeTreeResponse, Error>;
+declare function useScopeAccess(scopeId: string | undefined): _tanstack_react_query0.UseQueryResult<{
+  access: ScopeAccessRecord[];
+}, Error>;
+declare function useGrantScopeAccess(scopeId: string): _tanstack_react_query0.UseMutationResult<ScopeAccessRecord, Error, GrantScopeAccessRequest, unknown>;
+declare function useRevokeScopeAccess(scopeId: string): _tanstack_react_query0.UseMutationResult<void, Error, string, unknown>;
+declare function useEffectiveFlowAccess(flowId: string | undefined): _tanstack_react_query0.UseQueryResult<EffectiveFlowAccessResponse, Error>;
+declare function useMoveFlow(flowId: string): _tanstack_react_query0.UseMutationResult<{
+  success: boolean;
+  flowId: string;
+  scopeId: string | null;
+}, Error, string | null, unknown>;
+declare function usePreviewMove(): _tanstack_react_query0.UseMutationResult<MovePreviewResponse, Error, MovePreviewRequest, unknown>;
+//#endregion
+//#region src/frontend/index.d.ts
+declare const rbacFrontend: InvectFrontendPlugin;
+//#endregion
+export { AccessControlPage, FlowAccessPanel, type HeaderActionProps, type InvectFrontendPlugin, type PanelTabProps, type PermissionContext, type PluginHeaderActionContribution, type PluginPanelTabContribution, type PluginRouteContribution, type PluginSidebarContribution, RbacProvider, ShareButton, ShareFlowModal, TeamsPage, UserAvatar, UserMenuSection, rbacFrontend, useAccessibleFlows, useAddTeamMember, useCreateTeam, useDeleteTeam, useEffectiveFlowAccess, useFlowAccess, useGrantFlowAccess, useGrantScopeAccess, useMoveFlow, useMyTeams, usePreviewMove, useRbac, useRemoveTeamMember, useRevokeFlowAccess, useRevokeScopeAccess, useScopeAccess, useScopeTree, useTeam, useTeams, useUpdateTeam };
+//# sourceMappingURL=index.d.mts.map

package/dist/frontend/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/frontend/providers/RbacProvider.tsx","../../src/frontend/types.ts","../../src/frontend/components/ShareButton.tsx","../../src/frontend/components/ShareFlowModal.tsx","../../src/frontend/components/FlowAccessPanel.tsx","../../src/frontend/components/access-control/AccessControlPage.tsx","../../src/frontend/components/TeamsPage.tsx","../../src/frontend/components/UserMenuSection.tsx","../../src/frontend/hooks/useFlowAccess.ts","../../src/frontend/hooks/useTeams.ts","../../src/frontend/hooks/useScopes.ts","../../src/frontend/index.ts"],"mappings":";;;;;;UAkBiB,gBAAA;EAET;EAAN,IAAA,EAAM,cAAA;EAIN;EAFA,eAAA;EAIA;EAFA,WAAA,EAAa,GAAA;EAIb;EAFA,eAAA,GAAkB,UAAA;EAET;EAAT,SAAA;AAAA;AAAA,iBAac,YAAA,CAAA;EAAe;AAAA;EAAc,QAAA,EAAU,SAAA;AAAA,IAAW,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;iBA2DlD,OAAA,CAAA,GAAW,gBAAA;;;;;;;UCnFV,oBAAA;EDKf;ECHA,EAAA;EDKa;ECFb,IAAA;EDIkB;ECDlB,OAAA,GAAU,yBAAA;EDGD;ECAT,MAAA,GAAS,uBAAA;EDaK;ECVd,SAAA,GAAY,0BAAA;;EAGZ,aAAA,GAAgB,8BAAA;EDOqC;;;;ECDrD,UAAA,GAAa,MAAA,SAAe,aAAA,CAAc,MAAA;EDCb;ECE7B,SAAA,GAAY,aAAA;IAAgB,QAAA,EAAU,SAAA;EAAA;EDF0B;;;AA2DlE;ECnDE,UAAA,SAAmB,MAAA,mBAAyB,OAAA,CAAQ,MAAA;;;;;EAMpD,eAAA,IAAmB,UAAA,UAAoB,OAAA,GAAU,iBAAA;AAAA;AAAA,UAOlC,yBAAA;EACf,KAAA;EACA,IAAA,EAAM,aAAA;IAAgB,SAAA;EAAA;EACtB,IAAA;EA/BgB;EAiChB,QAAA;EA3B4B;EA6B5B,UAAA;AAAA;AAAA,UAGe,uBAAA;EACf,IAAA;EACA,SAAA,EAAW,aAAA;IAAgB,QAAA;EAAA;EAnBuC;EAqBlE,UAAA;AAAA;AAAA,UAGe,0BAAA;EAtDf;EAwDA,OAAA;EACA,KAAA;EACA,IAAA,GAAO,aAAA;IAAgB,SAAA;EAAA;EACvB,SAAA,EAAW,aAAA,CAAc,aAAA;EAlDT;EAoDhB,UAAA;AAAA;AAAA,UAGe,8BAAA;EAjD2B;EAmD1C,OAAA;EACA,SAAA,EAAW,aAAA,CAAc,iBAAA;EAjDG;EAmD5B,UAAA;AAAA;AAAA,UAGe,aAAA;EACf,MAAA;EACA,QAAA;AAAA;AAAA,UAGe,iBAAA;EACf,MAAA;EACA,QAAA;AAAA;AAAA,UAGe,iBAAA;EACf,YAAA;EACA,UAAA;EACA,MAAA;AAAA;;;iBChGc,WAAA,CAAA;EAAc;AAAA,GAAU,iBAAA,GAAiB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;;UC0C/C,mBAAA;EACR,MAAA;EACA,OAAA;AAAA;AAAA,iBAGc,cAAA,CAAA;EAAiB,MAAA;EAAQ;AAAA,GAAW,mBAAA,GAAmB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;iBChDvD,eAAA,CAAA;EAAkB;AAAA,GAAU,aAAA,GAAa,kBAAA,CAAA,GAAA,CAAA,OAAA;;;iBCiRzC,iBAAA,CAAA,GAAiB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;iBCvOjB,SAAA,CAAA,GAAS,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;;;;;;ANrCzB;iBORgB,eAAA,CAAA;EAAkB;AAAA;EAAuB,SAAA;AAAA,IAAqB,kBAAA,CAAA,GAAA,CAAA,OAAA;AAAA,iBAqC9D,UAAA,CAAA;EAAa;AAAA;EAAe,SAAA;AAAA,IAAoB,kBAAA,CAAA,GAAA,CAAA,OAAA;;;;iBClChD,aAAA,CAAc,MAAA,8CAA0B,cAAA;UAG5B,gBAAA;AAAA;;iBAgBZ,kBAAA,CAAA,GAAkB,sBAAA,CAAA,cAAA,CAAA,uBAAA,EAAA,KAAA;;iBAqBlB,kBAAA,CAAmB,MAAA,WAAc,sBAAA,CAAA,iBAAA,MAAA,KAAA,EAAA,sBAAA;;iBA4BjC,mBAAA,CAAoB,MAAA,WAAc,sBAAA,CAAA,iBAAA,OAAA,KAAA;;;;iBCjElC,QAAA,CAAA,0BAAQ,cAAA;SAGG,IAAA;AAAA;;iBAeX,OAAA,CAAQ,MAAA,uBAA0B,sBAAA,CAAA,cAAA,CAAA,eAAA,EAAA,KAAA;;iBAmBlC,UAAA,CAAA,0BAAU,cAAA;SAGC,IAAA;AAAA;;iBAeX,aAAA,CAAA,GAAa,sBAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,KAAA,EAAA,iBAAA;;iBA0Bb,aAAA,CAAc,MAAA,WAAc,sBAAA,CAAA,iBAAA,MAAA,KAAA,EAAA,iBAAA;;iBA2B5B,aAAA,CAAA,GAAa,sBAAA,CAAA,iBAAA,OAAA,KAAA;ATnF7B;AAAA,iBS0GgB,gBAAA,CAAiB,MAAA,WAAc,sBAAA,CAAA,iBAAA,CAAA,UAAA,EAAA,KAAA,EAAA,oBAAA;;iBA2B/B,mBAAA,CAAoB,MAAA,WAAc,sBAAA,CAAA,iBAAA,OAAA,KAAA;;;iBCnKlC,YAAA,CAAA,GAAY,sBAAA,CAAA,cAAA,CAAA,iBAAA,EAAA,KAAA;AAAA,iBAkBZ,cAAA,CAAe,OAAA,8CAA2B,cAAA;UAG9B,iBAAA;AAAA;iBAgBZ,mBAAA,CAAoB,OAAA,WAAe,sBAAA,CAAA,iBAAA,CAAA,iBAAA,EAAA,KAAA,EAAA,uBAAA;AAAA,iBAyBnC,oBAAA,CAAqB,OAAA,WAAe,sBAAA,CAAA,iBAAA,OAAA,KAAA;AAAA,iBAyBpC,sBAAA,CAAuB,MAAA,uBAA0B,sBAAA,CAAA,cAAA,CAAA,2BAAA,EAAA,KAAA;AAAA,iBAoBjD,WAAA,CAAY,MAAA,WAAD,sBAAA,CAAe,iBAAA;;;;GAAf,KAAA;AAAA,iBA8BX,cAAA,CAAA,GAAc,sBAAA,CAAA,iBAAA,CAAA,mBAAA,EAAA,KAAA,EAAA,kBAAA;;;cChIjB,YAAA,EAAc,oBAAA"}

package/dist/frontend/index.d.ts

@@ -2,13 +2,13 @@
  * @invect/rbac/ui — Frontend Plugin Entry Point
  *
  * This is the browser-safe entry point that exports the RBAC frontend plugin.
- * Import via: `import { rbacFrontendPlugin } from '@invect/rbac/ui'`
+ * Import via: `import { rbacFrontend } from '@invect/rbac/ui'`
  *
  * No Node.js dependencies. No @invect/core runtime imports.
  */
 import { RbacProvider, useRbac } from './providers/RbacProvider';
 import type { InvectFrontendPlugin } from './types';
-export declare const rbacFrontendPlugin: InvectFrontendPlugin;
+export declare const rbacFrontend: InvectFrontendPlugin;
 export { RbacProvider, useRbac };
 export { ShareButton } from './components/ShareButton';
 export { ShareFlowModal } from './components/ShareFlowModal';

package/dist/frontend/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/frontend/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAMpD,eAAO,MAAM,kBAAkB,EAAE,oBAqEhC,CAAC;AAOF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAG3E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACX,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,aAAa,EACb,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/frontend/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAMpD,eAAO,MAAM,YAAY,EAAE,oBAqE1B,CAAC;AAOF,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AAGjC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAG3E,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,QAAQ,EACR,OAAO,EACP,UAAU,EACV,aAAa,EACb,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,WAAW,EACX,cAAc,GACf,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,8BAA8B,EAC9B,aAAa,EACb,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,SAAS,CAAC"}

package/dist/frontend/index.mjs

@@ -1,7 +1,7 @@
 import { ChevronDown, ChevronRight, ExternalLink, FolderInput, GripVertical, Move, Plus, Search, Share2, Shield, Trash2, User, Users, Workflow, X } from "lucide-react";
 import { Fragment, createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
-import { Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, PageLayout, useApiClient } from "@invect/frontend";
+import { Dialog, DialogContent, DialogFooter, DialogHeader, DialogTitle, DropdownMenu, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuTrigger, PageLayout, useApiClient } from "@invect/ui";
 import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
 import { clsx } from "clsx";
 import { twMerge } from "tailwind-merge";
@@ -339,7 +339,7 @@ function ShareFlowModal({ flowId, onClose }) {
 											/* @__PURE__ */ jsx("div", { className: "my-1 border-t border-imp-border" }),
 											/* @__PURE__ */ jsx("button", {
 												type: "button",
-												className: "w-full px-3 py-1.5 text-left text-xs text-red-600 hover:bg-red-500/10 dark:text-red-400",
+												className: "w-full px-3 py-1.5 text-left text-xs text-imp-destructive hover:bg-imp-destructive/10",
 												onClick: () => {
 													handleRevoke(record.id);
 													setOpenRoleDropdown(null);
@@ -1097,7 +1097,7 @@ function AccessTable({ rows, isLoading, emptyLabel }) {
 					children: row.canRemove && row.onRemove ? /* @__PURE__ */ jsx("button", {
 						type: "button",
 						onClick: () => setPendingRemovalRow(row),
-						className: "p-1 rounded text-imp-muted-foreground hover:bg-red-500/10 hover:text-red-500",
+						className: "p-1 rounded text-imp-muted-foreground hover:bg-imp-destructive/10 hover:text-imp-destructive",
 						children: /* @__PURE__ */ jsx(Trash2, { className: "h-3.5 w-3.5" })
 					}) : null
 				})
@@ -1341,7 +1341,7 @@ function ScopeDetailPanel({ scopeId, scopeName, users, userMap, teams, isAdmin }
 								children: /* @__PURE__ */ jsxs("button", {
 									type: "button",
 									onClick: () => setShowDeleteConfirm(true),
-									className: "flex items-center gap-1.5 rounded-md border border-red-200 px-3 py-1.5 text-xs font-medium text-red-600 transition-colors hover:bg-red-500/10 dark:border-red-500/20 dark:text-red-400",
+									className: "flex items-center gap-1.5 rounded-md border border-imp-destructive/30 px-3 py-1.5 text-xs font-medium text-imp-destructive transition-colors hover:bg-imp-destructive/10",
 									children: [/* @__PURE__ */ jsx(Trash2, { className: "w-4 h-4" }), " Delete team"]
 								})
 							}) : null]
@@ -2855,11 +2855,11 @@ function UserAvatar({ className }) {
 * @invect/rbac/ui — Frontend Plugin Entry Point
 *
 * This is the browser-safe entry point that exports the RBAC frontend plugin.
-* Import via: `import { rbacFrontendPlugin } from '@invect/rbac/ui'`
+* Import via: `import { rbacFrontend } from '@invect/rbac/ui'`
 *
 * No Node.js dependencies. No @invect/core runtime imports.
 */
-const rbacFrontendPlugin = {
+const rbacFrontend = {
 	id: "rbac",
 	name: "Role-Based Access Control",
 	providers: [RbacProvider],
@@ -2894,6 +2894,6 @@ const rbacFrontendPlugin = {
 	checkPermission: (_permission, _context) => {}
 };
 //#endregion
-export { AccessControlPage, FlowAccessPanel, RbacProvider, ShareButton, ShareFlowModal, TeamsPage, UserAvatar, UserMenuSection, rbacFrontendPlugin, useAccessibleFlows, useAddTeamMember, useCreateTeam, useDeleteTeam, useEffectiveFlowAccess, useFlowAccess, useGrantFlowAccess, useGrantScopeAccess, useMoveFlow, useMyTeams, usePreviewMove, useRbac, useRemoveTeamMember, useRevokeFlowAccess, useRevokeScopeAccess, useScopeAccess, useScopeTree, useTeam, useTeams, useUpdateTeam };
+export { AccessControlPage, FlowAccessPanel, RbacProvider, ShareButton, ShareFlowModal, TeamsPage, UserAvatar, UserMenuSection, rbacFrontend, useAccessibleFlows, useAddTeamMember, useCreateTeam, useDeleteTeam, useEffectiveFlowAccess, useFlowAccess, useGrantFlowAccess, useGrantScopeAccess, useMoveFlow, useMyTeams, usePreviewMove, useRbac, useRemoveTeamMember, useRevokeFlowAccess, useRevokeScopeAccess, useScopeAccess, useScopeTree, useTeam, useTeams, useUpdateTeam };
 
 //# sourceMappingURL=index.mjs.map