@kernhq/module-quire 0.16.2 → 0.16.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kernhq/module-quire",
-  "version": "0.16.2",
+  "version": "0.16.3",
   "description": "Kern Quire: collaborative documents, spaces and page trees",
   "homepage": "https://github.com/KernAIO/module-quire#readme",
   "license": "AGPL-3.0-only",
@@ -71,6 +71,7 @@
     "@changesets/cli": "^2.27.0",
     "@kernhq/contracts": "^0.7.0",
     "@kernhq/kernel": "^0.9.0",
+    "@kernhq/testing": "^0.1.12",
     "@kernhq/tsconfig": "^0.1.0",
     "@kernhq/ui": "^0.14.0",
     "@tanstack/svelte-query": "^6.1.0",

package/src/contract/permissions.test.ts

@@ -0,0 +1,49 @@
+/**
+ * The Quire permission matrix, blessed rather than assumed.
+ *
+ * Defaults are declared one permission at a time, which makes the whole picture — which built-in
+ * role ends up holding what — impossible to read from any single line. This writes it out in full
+ * and compares it against what the module declares. Rows list the *effective* grants, cascade
+ * included: the kernel expands declared `defaultRoles` upward through guest ⊆ member ⊆ admin ⊆
+ * owner, and `permissionMatrixDiff` applies the same expansion.
+ *
+ * Changing a default is meant to be deliberate: edit `defaultRoles` → this fails naming every row
+ * that moved → confirm that is what you meant → update `BLESSED` in the same commit.
+ */
+import { permissionMatrixDiff } from '@kernhq/testing'
+import { describe, expect, it } from 'vitest'
+import { quirePermissions } from './permissions.js'
+
+/** Every built-in role that holds the permission by default, lowest role first. */
+const BLESSED: Record<string, readonly string[]> = {
+  'quire.space.view': ['guest', 'member', 'admin', 'owner'],
+  'quire.space.manage': ['admin', 'owner'],
+  'quire.page.view': ['guest', 'member', 'admin', 'owner'],
+  'quire.page.create': ['member', 'admin', 'owner'],
+  'quire.page.edit': ['member', 'admin', 'owner'],
+  'quire.page.comment': ['guest', 'member', 'admin', 'owner'],
+  'quire.page.publish': ['member', 'admin', 'owner'],
+  'quire.page.export': ['member', 'admin', 'owner'],
+  'quire.page.import': ['admin', 'owner'],
+  'quire.page.delete': ['admin', 'owner'],
+}
+
+/** Permissions whose misuse costs data: an import overwrites, a delete removes. */
+const DANGEROUS = ['quire.page.import', 'quire.page.delete']
+
+describe('quire permissions', () => {
+  it('grants each permission to exactly the blessed roles', () => {
+    expect(permissionMatrixDiff(quirePermissions, BLESSED)).toEqual([])
+  })
+
+  it('namespaces every key under the module id and declares it once', () => {
+    const keys = quirePermissions.map((p) => p.key)
+    expect(keys.filter((key) => !key.startsWith('quire.'))).toEqual([])
+    expect(keys.filter((key, i) => keys.indexOf(key) !== i)).toEqual([])
+  })
+
+  it('marks exactly the destructive permissions dangerous', () => {
+    const flagged = quirePermissions.filter((p) => p.dangerous).map((p) => p.key)
+    expect(flagged.toSorted()).toEqual(DANGEROUS.toSorted())
+  })
+})