@invect/rbac 0.0.1

package/dist/frontend/stores/accessControlStore.d.ts

@@ -0,0 +1,49 @@
+import type { MovePreviewResponse, ScopeTreeNode } from '../../shared/types';
+import type { PendingMove, SelectedItem } from '../components/access-control/types';
+export type HierarchyDragItem = {
+    type: 'scope' | 'flow';
+    id: string;
+    name: string;
+    /** Current parent scope id, or null if at root */
+    parentId: string | null;
+};
+interface AccessControlState {
+    selected: SelectedItem | null;
+    setSelected: (item: SelectedItem | null) => void;
+    expandedNodes: Set<string>;
+    setExpandedNodes: (nodes: Set<string>) => void;
+    toggleNode: (scopeId: string) => void;
+    expandAll: (ids: string[]) => void;
+    search: string;
+    setSearch: (q: string) => void;
+    showNewTeam: boolean;
+    setShowNewTeam: (show: boolean) => void;
+    newTeamName: string;
+    setNewTeamName: (name: string) => void;
+    draggedItem: HierarchyDragItem | null;
+    dropTarget: string | null;
+    startDrag: (item: HierarchyDragItem) => void;
+    endDrag: () => void;
+    /**
+     * Called on dragover for a specific target.
+     * Returns true if the drop is valid (caller should call event.preventDefault).
+     */
+    setDropTarget: (targetId: string | null) => void;
+    pendingMove: PendingMove | null;
+    movePreview: MovePreviewResponse | null;
+    moveError: string | null;
+    setPendingMove: (move: PendingMove | null) => void;
+    setMovePreview: (preview: MovePreviewResponse | null) => void;
+    setMoveError: (error: string | null) => void;
+    clearMove: () => void;
+}
+export declare const useAccessControlStore: import("zustand").UseBoundStore<import("zustand").StoreApi<AccessControlState>>;
+declare function collectScopeIds(scopes: ScopeTreeNode[]): string[];
+export declare function isDescendantScope(scopes: ScopeTreeNode[], draggedScopeId: string, potentialTargetId: string): boolean;
+export { collectScopeIds };
+/**
+ * Returns true if dropping `dragged` onto `targetId` is a valid move.
+ * targetId of null means "move to root".
+ */
+export declare function canDropOnTarget(dragged: HierarchyDragItem, targetId: string | null, allScopes: ScopeTreeNode[]): boolean;
+//# sourceMappingURL=accessControlStore.d.ts.map

package/dist/frontend/stores/accessControlStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessControlStore.d.ts","sourceRoot":"","sources":["../../../src/frontend/stores/accessControlStore.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAEpF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,UAAU,kBAAkB;IAE1B,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,KAAK,IAAI,CAAC;IAGjD,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC/C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAGnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAG/B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAGvC,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB;;;OAGG;IACH,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAGjD,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,KAAK,IAAI,CAAC;IACnD,cAAc,EAAE,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9D,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC7C,SAAS,EAAE,MAAM,IAAI,CAAC;CACvB;AAED,eAAO,MAAM,qBAAqB,iFA6C/B,CAAC;AAIJ,iBAAS,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,EAAE,CAE1D;AAwBD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,aAAa,EAAE,EACvB,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAMT;AAED,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,SAAS,EAAE,aAAa,EAAE,GACzB,OAAO,CAkBT"}

package/dist/frontend/types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * @invect/rbac/ui — Frontend Plugin Types
+ *
+ * Types for the frontend plugin system. These are consumed by
+ * @invect/frontend to render plugin-contributed UI.
+ */
+import type { ComponentType, ReactNode } from 'react';
+/**
+ * A frontend plugin that contributes UI to the Invect application.
+ * Plugins are registered via `<Invect plugins={[myPlugin]} />`.
+ */
+export interface InvectFrontendPlugin {
+    /** Unique plugin ID — should match backend plugin ID for manifest resolution */
+    id: string;
+    /** Display name */
+    name?: string;
+    /** Add items to the sidebar navigation */
+    sidebar?: PluginSidebarContribution[];
+    /** Add top-level routes (pages) */
+    routes?: PluginRouteContribution[];
+    /** Add tabs to contextual panels (flow editor right panel, etc.) */
+    panelTabs?: PluginPanelTabContribution[];
+    /** Add action buttons/components to contextual headers */
+    headerActions?: PluginHeaderActionContribution[];
+    /**
+     * Named component implementations — resolved from backend componentIds.
+     * Key = componentId (e.g. 'rbac.FlowAccessPanel'), value = React component.
+     */
+    components?: Record<string, ComponentType<Record<string, unknown>>>;
+    /** Wrap the React tree with additional providers (auth context, etc.) */
+    providers?: ComponentType<{
+        children: ReactNode;
+    }>[];
+    /**
+     * Inject headers into every API request.
+     * Called before each request. Return headers to merge.
+     */
+    apiHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /**
+     * Check if the current user has a specific permission.
+     * Returns true/false to override, or undefined to defer to default.
+     */
+    checkPermission?: (permission: string, context?: PermissionContext) => boolean | undefined;
+}
+export interface PluginSidebarContribution {
+    label: string;
+    icon: ComponentType<{
+        className?: string;
+    }>;
+    path: string;
+    /** Position hint: 'top' (after defaults), 'bottom' (before theme toggle) */
+    position?: 'top' | 'bottom';
+    /** Required permission — item hidden if check fails */
+    permission?: string;
+}
+export interface PluginRouteContribution {
+    path: string;
+    component: ComponentType<{
+        basePath: string;
+    }>;
+    /** If true, route is nested under the flow layout */
+    flowScoped?: boolean;
+}
+export interface PluginPanelTabContribution {
+    /** Where the tab appears */
+    context: 'flowEditor' | 'nodeConfig';
+    label: string;
+    icon?: ComponentType<{
+        className?: string;
+    }>;
+    component: ComponentType<PanelTabProps>;
+    /** Required permission — tab hidden if check fails */
+    permission?: string;
+}
+export interface PluginHeaderActionContribution {
+    /** Where the action appears */
+    context: 'flowHeader' | 'flowList';
+    component: ComponentType<HeaderActionProps>;
+    /** Required permission — action hidden if check fails */
+    permission?: string;
+}
+export interface PanelTabProps {
+    flowId: string;
+    basePath: string;
+}
+export interface HeaderActionProps {
+    flowId?: string;
+    basePath: string;
+}
+export interface PermissionContext {
+    resourceType?: string;
+    resourceId?: string;
+    flowId?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/frontend/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/frontend/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAMtD;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IAEX,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,0CAA0C;IAC1C,OAAO,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAEtC,mCAAmC;IACnC,MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAEnC,oEAAoE;IACpE,SAAS,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAEzC,0DAA0D;IAC1D,aAAa,CAAC,EAAE,8BAA8B,EAAE,CAAC;IAEjD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAEpE,yEAAyE;IACzE,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,CAAC,EAAE,CAAC;IAErD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5E;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,KAAK,OAAO,GAAG,SAAS,CAAC;CAC5F;AAMD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC5B,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,4BAA4B;IAC5B,OAAO,EAAE,YAAY,GAAG,YAAY,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,aAAa,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,SAAS,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACxC,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,8BAA8B;IAC7C,+BAA+B;IAC/B,OAAO,EAAE,YAAY,GAAG,UAAU,CAAC;IACnC,SAAS,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC5C,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/shared/types.d.ts

@@ -0,0 +1,172 @@
+/**
+ * @invect/rbac — Shared Types
+ *
+ * Serializable types shared between backend and frontend.
+ * No runtime code, no React, no Node.js dependencies.
+ */
+export interface Team {
+    id: string;
+    name: string;
+    description?: string | null;
+    parentId?: string | null;
+    createdBy?: string | null;
+    createdAt: string;
+    updatedAt?: string | null;
+}
+export interface TeamMember {
+    id: string;
+    teamId: string;
+    userId: string;
+    createdAt: string;
+}
+export interface CreateTeamRequest {
+    name: string;
+    description?: string;
+    parentId?: string | null;
+}
+export interface UpdateTeamRequest {
+    name?: string;
+    description?: string;
+    parentId?: string | null;
+}
+export interface AddTeamMemberRequest {
+    userId: string;
+}
+export interface TeamWithMembers extends Team {
+    members: TeamMember[];
+}
+export interface FlowSummary {
+    id: string;
+    name: string;
+    scopeId?: string | null;
+}
+export interface ScopeTreeNode extends Team {
+    children: ScopeTreeNode[];
+    flows: FlowSummary[];
+    directAccessCount: number;
+    memberCount: number;
+    teamPermission?: FlowAccessPermission | null;
+}
+export interface ScopeTreeResponse {
+    scopes: ScopeTreeNode[];
+    unscopedFlows: FlowSummary[];
+}
+export type FlowAccessPermission = 'owner' | 'editor' | 'operator' | 'viewer';
+export interface FlowAccessRecord {
+    id: string;
+    flowId: string;
+    userId?: string | null;
+    teamId?: string | null;
+    permission: FlowAccessPermission;
+    grantedBy?: string | null;
+    grantedAt: string;
+    expiresAt?: string | null;
+}
+export interface ScopeAccessRecord {
+    id: string;
+    scopeId: string;
+    userId?: string | null;
+    teamId?: string | null;
+    permission: FlowAccessPermission;
+    grantedBy?: string | null;
+    grantedAt: string;
+}
+export interface EffectiveAccessRecord extends FlowAccessRecord {
+    source: 'direct' | 'inherited';
+    scopeId?: string | null;
+    scopeName?: string | null;
+}
+export interface GrantFlowAccessRequest {
+    userId?: string;
+    teamId?: string;
+    permission: FlowAccessPermission;
+    expiresAt?: string;
+}
+export interface GrantScopeAccessRequest {
+    userId?: string;
+    teamId?: string;
+    permission: FlowAccessPermission;
+}
+export interface AccessibleFlowsResponse {
+    flowIds: string[];
+    permissions: Record<string, FlowAccessPermission | null>;
+    isAdmin?: boolean;
+}
+export interface EffectiveFlowAccessResponse {
+    flowId: string;
+    scopeId?: string | null;
+    records: EffectiveAccessRecord[];
+}
+export interface MovePreviewRequest {
+    type: 'flow' | 'scope';
+    id: string;
+    targetScopeId: string | null;
+}
+export interface MovePreviewAccessChange {
+    userId?: string;
+    teamId?: string;
+    name: string;
+    permission: FlowAccessPermission;
+    source: string;
+}
+export interface MovePreviewResponse {
+    item: {
+        id: string;
+        name: string;
+        type: 'flow' | 'scope';
+    };
+    target: {
+        id: string | null;
+        name: string;
+        path: string[];
+    };
+    affectedFlows: number;
+    accessChanges: {
+        gained: MovePreviewAccessChange[];
+        unchanged: number;
+    };
+}
+export type RolePermissionEntry = {
+    role: string;
+    permissions: string[];
+};
+export interface AuthMeResponse {
+    identity: {
+        id: string;
+        name?: string;
+        role?: string;
+        resolvedRole: string | null;
+    } | null;
+    permissions: string[];
+    isAuthenticated: boolean;
+}
+export interface PluginUIManifest {
+    sidebar?: PluginUISidebarItem[];
+    pages?: PluginUIPage[];
+    panelTabs?: PluginUIPanelTab[];
+    headerActions?: PluginUIHeaderAction[];
+}
+export interface PluginUISidebarItem {
+    label: string;
+    /** Lucide icon name as string (e.g. 'Shield', 'Users') */
+    icon: string;
+    path: string;
+    permission?: string;
+}
+export interface PluginUIPage {
+    path: string;
+    componentId: string;
+    title?: string;
+}
+export interface PluginUIPanelTab {
+    context: string;
+    label: string;
+    componentId: string;
+    permission?: string;
+}
+export interface PluginUIHeaderAction {
+    context: string;
+    componentId: string;
+    permission?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAgB,SAAQ,IAAI;IAC3C,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,IAAI;IACzC,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,aAAa,EAAE,WAAW,EAAE,CAAC;CAC9B;AAMD,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE9E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,oBAAoB,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,EAAE,CAAC;KAChB,CAAC;IACF,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE;QACb,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAClC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAMD,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAMF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/shared/types.mjs

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -0,0 +1,107 @@
+{
+  "name": "@invect/rbac",
+  "version": "0.0.1",
+  "description": "RBAC plugin for Invect — adds role-based access control UI, flow sharing, and permission management. Requires @invect/user-auth.",
+  "author": "robase",
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/backend/index.cjs",
+  "module": "dist/backend/index.mjs",
+  "types": "dist/backend/index.d.ts",
+  "files": [
+    "dist/**/*"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/backend/index.d.ts",
+      "import": "./dist/backend/index.mjs",
+      "require": "./dist/backend/index.cjs"
+    },
+    "./ui": {
+      "types": "./dist/frontend/index.d.ts",
+      "import": "./dist/frontend/index.mjs",
+      "require": "./dist/frontend/index.cjs"
+    },
+    "./types": {
+      "types": "./dist/shared/types.d.ts",
+      "import": "./dist/shared/types.mjs",
+      "require": "./dist/shared/types.cjs"
+    }
+  },
+  "dependencies": {
+    "@invect/core": "0.0.1"
+  },
+  "peerDependencies": {
+    "@invect/user-auth": ">=0.1.0",
+    "@invect/frontend": ">=2.0.0",
+    "react": ">=18.0.0",
+    "react-dom": ">=18.0.0",
+    "@tanstack/react-query": ">=5.0.0",
+    "clsx": ">=2.0.0",
+    "tailwind-merge": ">=2.0.0",
+    "zustand": ">=4.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@invect/frontend": {
+      "optional": true
+    },
+    "clsx": {
+      "optional": true
+    },
+    "zustand": {
+      "optional": true
+    },
+    "tailwind-merge": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    },
+    "@tanstack/react-query": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@tanstack/react-query": "^5.0.0",
+    "@types/node": "^20.11.20",
+    "@types/react": "18.3.7",
+    "@types/react-dom": "18.3.7",
+    "lucide-react": "^0.475.0",
+    "prettier": "^3.6.2",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "tsdown": "^0.21.1",
+    "typescript": "^5.3.3",
+    "vitest": "^1.2.2",
+    "zustand": "^4.5.7",
+    "@invect/user-auth": "0.0.1",
+    "@invect/frontend": "0.0.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/robase/invect.git",
+    "directory": "pkg/plugins/rbac"
+  },
+  "bugs": {
+    "url": "https://github.com/robase/invect/issues"
+  },
+  "homepage": "https://invect.dev",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsdown && tsc --emitDeclarationOnly --outDir dist",
+    "build:w": "tsdown --watch",
+    "dev": "tsdown --watch",
+    "clean": "rm -rf dist",
+    "format": "prettier --write \"src/**/*.{ts,tsx}\"",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint src",
+    "lint:fix": "eslint src --fix",
+    "test": "echo \"No tests configured\"",
+    "test:watch": "vitest --watch"
+  }
+}