@k3-universe/react-kit 0.0.41 → 0.0.42

package/src/kit/builder/auth/utils/client-adapters/urql-exchange.ts

@@ -1,76 +1,76 @@
-export function createUrqlAuthExchange(
-  getToken: () => string | null,
-  options?: {
-    tokenType?: string
-    refreshToken?: () => Promise<void>
-    onTokenExpired?: () => void
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    willAuthError?: (params: { authState: any; operation: any }) => boolean
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    didAuthError?: (params: { error: any; operation: any }) => boolean
-  },
-) {
-  const tokenType = options?.tokenType ?? 'Bearer'
-
-  // Avoid direct dependency on @urql/exchange-auth. Return a factory that accepts it.
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any
-  return (authExchange: any) =>
-    authExchange({
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      addAuthToOperation: ({ authState, operation }: any) => {
-        const token = authState?.token ?? getToken()
-        if (!token) return operation
-
-        const fetchOptions =
-          typeof operation.context.fetchOptions === 'function'
-            ? operation.context.fetchOptions()
-            : operation.context.fetchOptions || {}
-
-        return {
-          ...operation,
-          context: {
-            ...operation.context,
-            fetchOptions: {
-              ...fetchOptions,
-              headers: {
-                ...fetchOptions.headers,
-                Authorization: `${tokenType} ${token}`,
-              },
-            },
-          },
-        }
-      },
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      getAuth: async ({ authState }: any) => {
-        if (!authState) {
-          const token = getToken()
-          if (token) return { token }
-          return null
-        }
-
-        if (options?.refreshToken) {
-          try {
-            await options.refreshToken()
-            const token = getToken()
-            if (token) return { token }
-          } catch (_e) {
-            options.onTokenExpired?.()
-            return null
-          }
-        }
-        return null
-      },
-      willAuthError: options?.willAuthError,
-      // eslint-disable-next-line @typescript-eslint/no-explicit-any
-      didAuthError: (params: { error: any; operation: any }) => {
-        if (options?.didAuthError) return options.didAuthError(params)
-        const { error } = params
-        return (
-          error?.graphQLErrors?.some(
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            (e: any) => e.extensions?.code === 'UNAUTHENTICATED',
-          ) || error?.response?.status === 401
-        )
-      },
-    })
-}
+export function createUrqlAuthExchange(
+  getToken: () => string | null,
+  options?: {
+    tokenType?: string
+    refreshToken?: () => Promise<void>
+    onTokenExpired?: () => void
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    willAuthError?: (params: { authState: any; operation: any }) => boolean
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    didAuthError?: (params: { error: any; operation: any }) => boolean
+  },
+) {
+  const tokenType = options?.tokenType ?? 'Bearer'
+
+  // Avoid direct dependency on @urql/exchange-auth. Return a factory that accepts it.
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  return (authExchange: any) =>
+    authExchange({
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      addAuthToOperation: ({ authState, operation }: any) => {
+        const token = authState?.token ?? getToken()
+        if (!token) return operation
+
+        const fetchOptions =
+          typeof operation.context.fetchOptions === 'function'
+            ? operation.context.fetchOptions()
+            : operation.context.fetchOptions || {}
+
+        return {
+          ...operation,
+          context: {
+            ...operation.context,
+            fetchOptions: {
+              ...fetchOptions,
+              headers: {
+                ...fetchOptions.headers,
+                Authorization: `${tokenType} ${token}`,
+              },
+            },
+          },
+        }
+      },
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      getAuth: async ({ authState }: any) => {
+        if (!authState) {
+          const token = getToken()
+          if (token) return { token }
+          return null
+        }
+
+        if (options?.refreshToken) {
+          try {
+            await options.refreshToken()
+            const token = getToken()
+            if (token) return { token }
+          } catch (_e) {
+            options.onTokenExpired?.()
+            return null
+          }
+        }
+        return null
+      },
+      willAuthError: options?.willAuthError,
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      didAuthError: (params: { error: any; operation: any }) => {
+        if (options?.didAuthError) return options.didAuthError(params)
+        const { error } = params
+        return (
+          error?.graphQLErrors?.some(
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            (e: any) => e.extensions?.code === 'UNAUTHENTICATED',
+          ) || error?.response?.status === 401
+        )
+      },
+    })
+}

package/src/kit/builder/auth/utils/permission-checker.ts

@@ -1,150 +1,150 @@
-import type {
-  PermissionHierarchy,
-  PermissionPolicy,
-  PermissionRule,
-  RoleHierarchy,
-} from '../types';
-
-/**
- * Expands permissions based on hierarchy
- * e.g., if user has 'admin' and hierarchy defines admin: ['read', 'write'],
- * user effectively has ['admin', 'read', 'write']
- */
-export function expandPermissions<T extends string>(
-  permissions: T[],
-  hierarchy?: PermissionHierarchy<T>,
-): T[] {
-  if (!hierarchy) return permissions;
-
-  const expanded = new Set<T>(permissions);
-  const queue = [...permissions];
-
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current) continue;
-    const children = hierarchy[current];
-
-    if (children) {
-      for (const child of children) {
-        if (!expanded.has(child)) {
-          expanded.add(child);
-          queue.push(child);
-        }
-      }
-    }
-  }
-
-  return Array.from(expanded);
-}
-
-/**
- * Expands roles based on hierarchy
- * e.g., if user has 'admin' and hierarchy defines admin: ['moderator', 'user'],
- * user effectively has ['admin', 'moderator', 'user']
- */
-export function expandRoles<T extends string>(
-  roles: T[],
-  hierarchy?: RoleHierarchy<T>,
-): T[] {
-  if (!hierarchy) return roles;
-
-  const expanded = new Set<T>(roles);
-  const queue = [...roles];
-
-  while (queue.length > 0) {
-    const current = queue.shift();
-    if (!current) continue;
-    const children = hierarchy[current];
-
-    if (children) {
-      for (const child of children) {
-        if (!expanded.has(child)) {
-          expanded.add(child);
-          queue.push(child);
-        }
-      }
-    }
-  }
-
-  return Array.from(expanded);
-}
-
-/**
- * Checks if target permissions match against user permissions
- * Supports both array of permissions and permission policies (AND/OR operations)
- */
-export function checkPermissions<T extends string>(
-  userPermissions: T[],
-  target: T | T[] | PermissionPolicy<T>,
-  options?: { requireAll?: boolean },
-): boolean {
-  // Handle permission policy (with AND/OR operator)
-  if (typeof target === 'object' && 'permissions' in target) {
-    const policy = target as PermissionPolicy<T>;
-    const operator = policy.operator ?? 'AND';
-
-    if (operator === 'AND') {
-      return policy.permissions.every((p) => userPermissions.includes(p));
-    } else {
-      return policy.permissions.some((p) => userPermissions.includes(p));
-    }
-  }
-
-  // Handle simple string or array
-  const targets = Array.isArray(target) ? target : [target];
-  const requireAll = options?.requireAll ?? true;
-
-  if (targets.length === 0) return true;
-
-  return requireAll
-    ? targets.every((p) => userPermissions.includes(p))
-    : targets.some((p) => userPermissions.includes(p));
-}
-
-/**
- * Checks if target roles match against user roles
- */
-export function checkRoles<T extends string>(
-  userRoles: T[],
-  target: T | T[],
-  options?: { requireAll?: boolean },
-): boolean {
-  const targets = Array.isArray(target) ? target : [target];
-  const requireAll = options?.requireAll ?? true;
-
-  if (targets.length === 0) return true;
-
-  return requireAll
-    ? targets.every((r) => userRoles.includes(r))
-    : targets.some((r) => userRoles.includes(r));
-}
-
-/**
- * Evaluates a permission rule (combination of roles and permissions)
- */
-export function evaluatePermissionRule<
-  TRole extends string = string,
-  TPermission extends string = string,
->(
-  userRoles: TRole[],
-  userPermissions: TPermission[],
-  rule: PermissionRule<TRole, TPermission>,
-): boolean {
-  if (!rule.roles && !rule.permissions) {
-    return true;
-  }
-
-  const requireAll = rule.requireAll ?? true;
-
-  const roleAllowed = rule.roles
-    ? checkRoles(userRoles, rule.roles, { requireAll })
-    : true;
-
-  const permissionAllowed = rule.permissions
-    ? checkPermissions(userPermissions, rule.permissions, { requireAll })
-    : true;
-
-  return requireAll
-    ? roleAllowed && permissionAllowed
-    : roleAllowed || permissionAllowed;
-}
+import type {
+  PermissionHierarchy,
+  PermissionPolicy,
+  PermissionRule,
+  RoleHierarchy,
+} from '../types';
+
+/**
+ * Expands permissions based on hierarchy
+ * e.g., if user has 'admin' and hierarchy defines admin: ['read', 'write'],
+ * user effectively has ['admin', 'read', 'write']
+ */
+export function expandPermissions<T extends string>(
+  permissions: T[],
+  hierarchy?: PermissionHierarchy<T>,
+): T[] {
+  if (!hierarchy) return permissions;
+
+  const expanded = new Set<T>(permissions);
+  const queue = [...permissions];
+
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current) continue;
+    const children = hierarchy[current];
+
+    if (children) {
+      for (const child of children) {
+        if (!expanded.has(child)) {
+          expanded.add(child);
+          queue.push(child);
+        }
+      }
+    }
+  }
+
+  return Array.from(expanded);
+}
+
+/**
+ * Expands roles based on hierarchy
+ * e.g., if user has 'admin' and hierarchy defines admin: ['moderator', 'user'],
+ * user effectively has ['admin', 'moderator', 'user']
+ */
+export function expandRoles<T extends string>(
+  roles: T[],
+  hierarchy?: RoleHierarchy<T>,
+): T[] {
+  if (!hierarchy) return roles;
+
+  const expanded = new Set<T>(roles);
+  const queue = [...roles];
+
+  while (queue.length > 0) {
+    const current = queue.shift();
+    if (!current) continue;
+    const children = hierarchy[current];
+
+    if (children) {
+      for (const child of children) {
+        if (!expanded.has(child)) {
+          expanded.add(child);
+          queue.push(child);
+        }
+      }
+    }
+  }
+
+  return Array.from(expanded);
+}
+
+/**
+ * Checks if target permissions match against user permissions
+ * Supports both array of permissions and permission policies (AND/OR operations)
+ */
+export function checkPermissions<T extends string>(
+  userPermissions: T[],
+  target: T | T[] | PermissionPolicy<T>,
+  options?: { requireAll?: boolean },
+): boolean {
+  // Handle permission policy (with AND/OR operator)
+  if (typeof target === 'object' && 'permissions' in target) {
+    const policy = target as PermissionPolicy<T>;
+    const operator = policy.operator ?? 'AND';
+
+    if (operator === 'AND') {
+      return policy.permissions.every((p) => userPermissions.includes(p));
+    } else {
+      return policy.permissions.some((p) => userPermissions.includes(p));
+    }
+  }
+
+  // Handle simple string or array
+  const targets = Array.isArray(target) ? target : [target];
+  const requireAll = options?.requireAll ?? true;
+
+  if (targets.length === 0) return true;
+
+  return requireAll
+    ? targets.every((p) => userPermissions.includes(p))
+    : targets.some((p) => userPermissions.includes(p));
+}
+
+/**
+ * Checks if target roles match against user roles
+ */
+export function checkRoles<T extends string>(
+  userRoles: T[],
+  target: T | T[],
+  options?: { requireAll?: boolean },
+): boolean {
+  const targets = Array.isArray(target) ? target : [target];
+  const requireAll = options?.requireAll ?? true;
+
+  if (targets.length === 0) return true;
+
+  return requireAll
+    ? targets.every((r) => userRoles.includes(r))
+    : targets.some((r) => userRoles.includes(r));
+}
+
+/**
+ * Evaluates a permission rule (combination of roles and permissions)
+ */
+export function evaluatePermissionRule<
+  TRole extends string = string,
+  TPermission extends string = string,
+>(
+  userRoles: TRole[],
+  userPermissions: TPermission[],
+  rule: PermissionRule<TRole, TPermission>,
+): boolean {
+  if (!rule.roles && !rule.permissions) {
+    return true;
+  }
+
+  const requireAll = rule.requireAll ?? true;
+
+  const roleAllowed = rule.roles
+    ? checkRoles(userRoles, rule.roles, { requireAll })
+    : true;
+
+  const permissionAllowed = rule.permissions
+    ? checkPermissions(userPermissions, rule.permissions, { requireAll })
+    : true;
+
+  return requireAll
+    ? roleAllowed && permissionAllowed
+    : roleAllowed || permissionAllowed;
+}

package/src/kit/builder/auth/utils/storage/browser.ts

@@ -1,99 +1,99 @@
-import type { AuthStorage } from '../../types'
-import { isBrowser } from './env'
-import { createMemoryStorage } from './memory'
-import { SimpleEncryption } from './encryption'
-
-export type BrowserStorageOptions<T> = {
-  key: string
-  serialize?: (value: T | null) => Promise<string | null> | string | null
-  deserialize?: (value: string | null) => Promise<T | null> | T | null
-  storage?: Storage
-  encrypt?: boolean
-  encryptionKey?: string
-}
-
-export const createBrowserStorage = <T>(
-  options: BrowserStorageOptions<T>,
-): AuthStorage<T> => {
-  const fallback = createMemoryStorage<T>()
-  const targetStorage =
-    options.storage ?? (isBrowser ? window.localStorage : undefined)
-
-  const encryption =
-    options.encrypt && options.encryptionKey
-      ? new SimpleEncryption(options.encryptionKey)
-      : null
-
-  const defaultSerialize = async (value: T | null): Promise<string | null> => {
-    if (value === null) return null
-    const json = JSON.stringify(value)
-    return encryption ? await encryption.encrypt(json) : json
-  }
-
-  const defaultDeserialize = async (
-    value: string | null,
-  ): Promise<T | null> => {
-    if (!value) return null
-    try {
-      const decrypted = encryption ? await encryption.decrypt(value) : value
-      return JSON.parse(decrypted) as T
-    } catch {
-      return null
-    }
-  }
-
-  const serialize = options.serialize
-    ? async (value: T | null) => {
-        const result = await options.serialize?.(value)
-        return result ?? null
-      }
-    : defaultSerialize
-
-  const deserialize = options.deserialize
-    ? async (value: string | null) => {
-        const result = await options.deserialize?.(value)
-        return result ?? null
-      }
-    : defaultDeserialize
-
-  if (!targetStorage) {
-    return fallback
-  }
-
-  return {
-    get: async () => {
-      try {
-        const raw = targetStorage.getItem(options.key)
-        const value = await deserialize(raw)
-        fallback.set(value)
-        return value
-      } catch (error) {
-        console.warn('[auth2][storage] Failed to read from storage', error)
-        return fallback.get()
-      }
-    },
-    set: async (value) => {
-      try {
-        const serialized = await serialize(value)
-        if (serialized === null) {
-          targetStorage.removeItem(options.key)
-        } else {
-          targetStorage.setItem(options.key, serialized)
-        }
-        fallback.set(value)
-      } catch (error) {
-        console.warn('[auth2][storage] Failed to write to storage', error)
-        fallback.set(value)
-      }
-    },
-    clear: () => {
-      try {
-        targetStorage.removeItem(options.key)
-      } catch (error) {
-        console.warn('[auth2][storage] Failed to clear storage', error)
-      } finally {
-        fallback.clear()
-      }
-    },
-  }
-}
+import type { AuthStorage } from '../../types'
+import { isBrowser } from './env'
+import { createMemoryStorage } from './memory'
+import { SimpleEncryption } from './encryption'
+
+export type BrowserStorageOptions<T> = {
+  key: string
+  serialize?: (value: T | null) => Promise<string | null> | string | null
+  deserialize?: (value: string | null) => Promise<T | null> | T | null
+  storage?: Storage
+  encrypt?: boolean
+  encryptionKey?: string
+}
+
+export const createBrowserStorage = <T>(
+  options: BrowserStorageOptions<T>,
+): AuthStorage<T> => {
+  const fallback = createMemoryStorage<T>()
+  const targetStorage =
+    options.storage ?? (isBrowser ? window.localStorage : undefined)
+
+  const encryption =
+    options.encrypt && options.encryptionKey
+      ? new SimpleEncryption(options.encryptionKey)
+      : null
+
+  const defaultSerialize = async (value: T | null): Promise<string | null> => {
+    if (value === null) return null
+    const json = JSON.stringify(value)
+    return encryption ? await encryption.encrypt(json) : json
+  }
+
+  const defaultDeserialize = async (
+    value: string | null,
+  ): Promise<T | null> => {
+    if (!value) return null
+    try {
+      const decrypted = encryption ? await encryption.decrypt(value) : value
+      return JSON.parse(decrypted) as T
+    } catch {
+      return null
+    }
+  }
+
+  const serialize = options.serialize
+    ? async (value: T | null) => {
+        const result = await options.serialize?.(value)
+        return result ?? null
+      }
+    : defaultSerialize
+
+  const deserialize = options.deserialize
+    ? async (value: string | null) => {
+        const result = await options.deserialize?.(value)
+        return result ?? null
+      }
+    : defaultDeserialize
+
+  if (!targetStorage) {
+    return fallback
+  }
+
+  return {
+    get: async () => {
+      try {
+        const raw = targetStorage.getItem(options.key)
+        const value = await deserialize(raw)
+        fallback.set(value)
+        return value
+      } catch (error) {
+        console.warn('[auth2][storage] Failed to read from storage', error)
+        return fallback.get()
+      }
+    },
+    set: async (value) => {
+      try {
+        const serialized = await serialize(value)
+        if (serialized === null) {
+          targetStorage.removeItem(options.key)
+        } else {
+          targetStorage.setItem(options.key, serialized)
+        }
+        fallback.set(value)
+      } catch (error) {
+        console.warn('[auth2][storage] Failed to write to storage', error)
+        fallback.set(value)
+      }
+    },
+    clear: () => {
+      try {
+        targetStorage.removeItem(options.key)
+      } catch (error) {
+        console.warn('[auth2][storage] Failed to clear storage', error)
+      } finally {
+        fallback.clear()
+      }
+    },
+  }
+}