@jchat/addon-sdk 1.0.0-alpha.27 → 1.0.0-alpha.28

package/dist/testing.mjs

@@ -1,144 +1,2 @@
-//#region src/testing.ts
-/**
-* Creates an in-memory, zero-dependency AddonServerContext mock for testing addon server factories
-* and pipeline hooks offline in CI without requiring live databases or Redis.
-*/
-function createMockAddonServerContext(addonId, options = {}) {
-	const { config = {}, user = {}, isEntitled = true } = options;
-	const emittedEvents = [];
-	const registeredHooks = [];
-	const cacheEntries = /* @__PURE__ */ new Map();
-	const cacheSets = /* @__PURE__ */ new Map();
-	const cacheTtld = /* @__PURE__ */ new Map();
-	const rateLimitTimestamps = /* @__PURE__ */ new Map();
-	const prefix = `addon:${addonId}:`;
-	const cache = {
-		async get(key) {
-			const fullKey = prefix + key;
-			const exp = cacheTtld.get(fullKey);
-			if (exp && Date.now() > exp) {
-				cacheEntries.delete(fullKey);
-				cacheTtld.delete(fullKey);
-				return null;
-			}
-			const val = cacheEntries.get(fullKey);
-			return val !== void 0 ? val : null;
-		},
-		async set(key, value, ttlSeconds) {
-			const fullKey = prefix + key;
-			cacheEntries.set(fullKey, value);
-			if (ttlSeconds && ttlSeconds > 0) cacheTtld.set(fullKey, Date.now() + ttlSeconds * 1e3);
-			else cacheTtld.delete(fullKey);
-		},
-		async del(...keys) {
-			let count = 0;
-			for (const k of keys) {
-				const fullKey = prefix + k;
-				if (cacheEntries.delete(fullKey)) count++;
-				cacheTtld.delete(fullKey);
-				cacheSets.delete(fullKey);
-			}
-			return count;
-		},
-		async incr(key) {
-			const fullKey = prefix + key;
-			const next = (Number(cacheEntries.get(fullKey)) || 0) + 1;
-			cacheEntries.set(fullKey, next);
-			return next;
-		},
-		async expire(key, ttlSeconds) {
-			const fullKey = prefix + key;
-			if (!cacheEntries.has(fullKey) && !cacheSets.has(fullKey)) return false;
-			cacheTtld.set(fullKey, Date.now() + ttlSeconds * 1e3);
-			return true;
-		},
-		async ttl(key) {
-			const fullKey = prefix + key;
-			if (!cacheEntries.has(fullKey) && !cacheSets.has(fullKey)) return -2;
-			const exp = cacheTtld.get(fullKey);
-			if (!exp) return -1;
-			const remaining = Math.ceil((exp - Date.now()) / 1e3);
-			return remaining > 0 ? remaining : -2;
-		},
-		async setAdd(key, member) {
-			const fullKey = prefix + key;
-			let set = cacheSets.get(fullKey);
-			if (!set) {
-				set = /* @__PURE__ */ new Set();
-				cacheSets.set(fullKey, set);
-			}
-			const initialSize = set.size;
-			set.add(member);
-			return set.size > initialSize ? 1 : 0;
-		},
-		async setRemove(key, member) {
-			const fullKey = prefix + key;
-			const set = cacheSets.get(fullKey);
-			if (!set) return 0;
-			return set.delete(member) ? 1 : 0;
-		},
-		async setMembers(key) {
-			const fullKey = prefix + key;
-			const set = cacheSets.get(fullKey);
-			return set ? Array.from(set) : [];
-		}
-	};
-	const rateLimiter = { async consume(key, opts) {
-		const fullKey = `addon:${addonId}:ratelimit:${key}`;
-		const now = Date.now();
-		const windowStart = now - opts.windowMs;
-		const valid = (rateLimitTimestamps.get(fullKey) ?? []).filter((t) => t > windowStart);
-		if (valid.length >= opts.limit) {
-			rateLimitTimestamps.set(fullKey, valid);
-			return false;
-		}
-		valid.push(now);
-		rateLimitTimestamps.set(fullKey, valid);
-		return true;
-	} };
-	const defaultUser = {
-		id: user.id ?? "mock-user-1",
-		name: user.name ?? "Mock User",
-		displayName: user.displayName ?? "Mock User",
-		avatar: user.avatar ?? "https://example.com/avatar.png",
-		gender: user.gender ?? "neutral"
-	};
-	return {
-		context: {
-			t: {},
-			db: {},
-			cache,
-			rateLimiter,
-			emit: async (event, payload, target) => {
-				emittedEvents.push({
-					event: `addon:${addonId}:${event}`,
-					payload,
-					target
-				});
-			},
-			pipeline: { register: (hooks) => {
-				registeredHooks.push(hooks);
-			} },
-			getConfig: async (_targetSiteId) => config,
-			getUser: async (userId) => userId === defaultUser.id ? defaultUser : null,
-			getUsers: async (userIds) => {
-				const map = /* @__PURE__ */ new Map();
-				for (const id of userIds) if (id === defaultUser.id) map.set(id, defaultUser);
-				return map;
-			},
-			hasPermission: (reqUser, permission) => {
-				return (reqUser?.permissions ?? []).includes(permission);
-			},
-			verifyEntitlement: (expectedAddonId) => {
-				if (expectedAddonId && expectedAddonId !== addonId) return false;
-				return isEntitled;
-			}
-		},
-		emittedEvents,
-		registeredHooks,
-		cacheEntries,
-		cacheSets
-	};
-}
-//#endregion
+import { s as createMockAddonServerContext } from "./src.mjs";
 export { createMockAddonServerContext };

package/dist/ui.d.mts

@@ -1 +1,42 @@
-export * from "@jchat/ui";
+import { d as AddonRequestUser, g as AddonUser } from "./contracts2.mjs";
+import React from "react";
+import { Can } from "@casl/react";
+export * from "@jchat/ui";
+//#region src/ui.d.ts
+export interface AddonCanProps {
+  /** The current user attempting the action */
+  actor?: (Partial<AddonRequestUser | AddonUser> & {
+    permissions?: string[];
+    isOwner?: boolean;
+  }) | null;
+  /** The owner ID of the target resource, if evaluating an ownership-restricted action */
+  ownerId?: string;
+  /** Permission required if actor is the resource owner (e.g. 'addon.pollwise.close.own') */
+  ownPermission?: string;
+  /** Permission required if actor is NOT the resource owner (e.g. 'addon.pollwise.close.any') */
+  anyPermission?: string;
+  /** Simple permission string when not evaluating ownership (e.g. 'addon.pollwise.create') */
+  permission?: string;
+  /** Fallback content rendered when permission is denied (defaults to null) */
+  fallback?: React.ReactNode;
+  /** Content rendered when access is granted */
+  children: React.ReactNode;
+}
+/**
+ * Declarative component for conditional UI rendering based on RBAC/ABAC permissions and resource
+ * ownership.
+ *
+ * @param actor The current user attempting the action
+ * @param ownerId The owner ID of the target resource, if evaluating an ownership-restricted action
+ * @param ownPermission Permission required if actor is the resource owner (e.g.
+ *   'addon.pollwise.close.own')
+ * @param anyPermission Permission required if actor is NOT the resource owner (e.g.
+ *   'addon.pollwise.close.any')
+ * @param permission Simple permission string when not evaluating ownership (e.g.
+ *   'addon.pollwise.create')
+ * @param fallback Fallback content rendered when permission is denied (defaults to null)
+ * @param children Content rendered when access is granted
+ */
+export declare function AddonCan({ actor, ownerId, ownPermission, anyPermission, permission, fallback, children }: AddonCanProps): React.ReactElement | null;
+//#endregion
+export { Can };

package/dist/ui.mjs

@@ -1,2 +1,33 @@
+import { _ as hasPermission } from "./src.mjs";
+import { Can } from "@casl/react";
 export * from "@jchat/ui";
-export {};
+//#region src/ui.ts
+/**
+* Declarative component for conditional UI rendering based on RBAC/ABAC permissions and resource
+* ownership.
+*
+* @param actor The current user attempting the action
+* @param ownerId The owner ID of the target resource, if evaluating an ownership-restricted action
+* @param ownPermission Permission required if actor is the resource owner (e.g.
+*   'addon.pollwise.close.own')
+* @param anyPermission Permission required if actor is NOT the resource owner (e.g.
+*   'addon.pollwise.close.any')
+* @param permission Simple permission string when not evaluating ownership (e.g.
+*   'addon.pollwise.create')
+* @param fallback Fallback content rendered when permission is denied (defaults to null)
+* @param children Content rendered when access is granted
+*/
+function AddonCan({ actor, ownerId, ownPermission, anyPermission, permission, fallback = null, children }) {
+	if (!actor) return fallback;
+	const perms = actor.permissions ?? [];
+	if (actor.isOwner || hasPermission(perms, "*")) return children;
+	if (permission && !hasPermission(perms, permission)) return fallback;
+	if (ownPermission || anyPermission) {
+		if (Boolean(actor.id && ownerId && actor.id === ownerId) && ownPermission && hasPermission(perms, ownPermission)) return children;
+		if (anyPermission && hasPermission(perms, anyPermission)) return children;
+		return fallback;
+	}
+	return children;
+}
+//#endregion
+export { AddonCan, Can };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jchat/addon-sdk",
-  "version": "1.0.0-alpha.27",
+  "version": "1.0.0-alpha.28",
   "private": false,
   "description": "JChat Addon SDK for building JChat addons.",
   "keywords": [
@@ -156,6 +156,8 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
+    "@casl/ability": "catalog:",
+    "@casl/react": "catalog:",
     "lucide-react": "catalog:"
   },
   "devDependencies": {