@kernhq/module-quire 0.16.2 → 0.16.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kernhq/module-quire",
-  "version": "0.16.2",
+  "version": "0.16.4",
   "description": "Kern Quire: collaborative documents, spaces and page trees",
   "homepage": "https://github.com/KernAIO/module-quire#readme",
   "license": "AGPL-3.0-only",
@@ -71,6 +71,7 @@
     "@changesets/cli": "^2.27.0",
     "@kernhq/contracts": "^0.7.0",
     "@kernhq/kernel": "^0.9.0",
+    "@kernhq/testing": "^0.1.12",
     "@kernhq/tsconfig": "^0.1.0",
     "@kernhq/ui": "^0.14.0",
     "@tanstack/svelte-query": "^6.1.0",

package/src/client/i18n.ts

@@ -90,6 +90,12 @@ export const en: Record<string, Message> = {
   'quire.unarchive': 'Take out of the archive',
   'quire.unpublished': 'This draft has changes readers cannot see yet',
   'quire.untitled': 'Untitled',
+  'quire.macro_pick_page': 'Pick a page',
+  'quire.macro_pick_page_desc': 'The page this block will show. Search by title, or browse a space.',
+  'quire.macro_pick_search': 'Search pages',
+  'quire.macro_pick_space': 'Space',
+  'quire.macro_pick_none': 'No page matches',
+  'quire.macro_pick_none_desc': 'Try another word, or pick a different space.',
   'quire.version_auto': 'While writing',
   'quire.version_imported': 'Imported',
   'quire.version_live': 'What readers see',
@@ -802,6 +808,12 @@ const ar: Record<string, Message> = {
   'quire.unarchive': 'إخراج من الأرشيف',
   'quire.unpublished': 'تحتوي هذه المسودة على تغييرات لا يراها القرّاء بعد',
   'quire.untitled': 'بلا عنوان',
+  'quire.macro_pick_page': 'اختر صفحة',
+  'quire.macro_pick_page_desc': 'الصفحة التي سيعرضها هذا العنصر. ابحث بالعنوان أو تصفّح مساحة.',
+  'quire.macro_pick_search': 'البحث في الصفحات',
+  'quire.macro_pick_space': 'المساحة',
+  'quire.macro_pick_none': 'لا توجد صفحة مطابقة',
+  'quire.macro_pick_none_desc': 'جرّب كلمة أخرى، أو اختر مساحة مختلفة.',
   'quire.version_auto': 'أثناء الكتابة',
   'quire.version_imported': 'مستوردة',
   'quire.version_live': 'ما يراه القرّاء',
@@ -1519,6 +1531,13 @@ const de: Record<string, Message> = {
   'quire.unarchive': 'Aus dem Archiv holen',
   'quire.unpublished': 'Dieser Entwurf hat Änderungen, die Lesende noch nicht sehen',
   'quire.untitled': 'Ohne Titel',
+  'quire.macro_pick_page': 'Seite auswählen',
+  'quire.macro_pick_page_desc':
+    'Die Seite, die dieser Block zeigt. Nach Titel suchen oder einen Bereich durchsehen.',
+  'quire.macro_pick_search': 'Seiten durchsuchen',
+  'quire.macro_pick_space': 'Bereich',
+  'quire.macro_pick_none': 'Keine passende Seite',
+  'quire.macro_pick_none_desc': 'Ein anderes Wort versuchen oder einen anderen Bereich wählen.',
   'quire.version_auto': 'Beim Schreiben',
   'quire.version_imported': 'Importiert',
   'quire.version_live': 'Was Lesende sehen',
@@ -2213,6 +2232,12 @@ const fa: Record<string, Message> = {
   'quire.unarchive': 'خارج کردن از بایگانی',
   'quire.unpublished': 'این پیش‌نویس تغییرهایی دارد که خوانندگان هنوز نمی‌بینند',
   'quire.untitled': 'بی‌عنوان',
+  'quire.macro_pick_page': 'انتخاب صفحه',
+  'quire.macro_pick_page_desc': 'صفحه‌ای که این بلوک نشان می‌دهد. با عنوان جست‌وجو کنید یا در یک فضا بگردید.',
+  'quire.macro_pick_search': 'جست‌وجوی صفحه‌ها',
+  'quire.macro_pick_space': 'فضا',
+  'quire.macro_pick_none': 'صفحه‌ای پیدا نشد',
+  'quire.macro_pick_none_desc': 'واژهٔ دیگری را امتحان کنید یا فضای دیگری را برگزینید.',
   'quire.version_auto': 'هنگام نوشتن',
   'quire.version_imported': 'وارد شد',
   'quire.version_live': 'آنچه خوانندگان می‌بینند',
@@ -2880,6 +2905,12 @@ const tr: Record<string, Message> = {
   'quire.unarchive': 'Arşivden çıkar',
   'quire.unpublished': 'Bu taslakta okuyucuların henüz göremediği değişiklikler var',
   'quire.untitled': 'Adsız',
+  'quire.macro_pick_page': 'Sayfa seç',
+  'quire.macro_pick_page_desc': 'Bu bloğun göstereceği sayfa. Başlığa göre arayın ya da bir alana göz atın.',
+  'quire.macro_pick_search': 'Sayfalarda ara',
+  'quire.macro_pick_space': 'Alan',
+  'quire.macro_pick_none': 'Eşleşen sayfa yok',
+  'quire.macro_pick_none_desc': 'Başka bir sözcük deneyin ya da farklı bir alan seçin.',
   'quire.version_auto': 'Yazarken',
   'quire.version_imported': 'İçe aktarıldı',
   'quire.version_live': 'Okuyucuların gördüğü',

package/src/contract/permissions.test.ts

@@ -0,0 +1,49 @@
+/**
+ * The Quire permission matrix, blessed rather than assumed.
+ *
+ * Defaults are declared one permission at a time, which makes the whole picture — which built-in
+ * role ends up holding what — impossible to read from any single line. This writes it out in full
+ * and compares it against what the module declares. Rows list the *effective* grants, cascade
+ * included: the kernel expands declared `defaultRoles` upward through guest ⊆ member ⊆ admin ⊆
+ * owner, and `permissionMatrixDiff` applies the same expansion.
+ *
+ * Changing a default is meant to be deliberate: edit `defaultRoles` → this fails naming every row
+ * that moved → confirm that is what you meant → update `BLESSED` in the same commit.
+ */
+import { permissionMatrixDiff } from '@kernhq/testing'
+import { describe, expect, it } from 'vitest'
+import { quirePermissions } from './permissions.js'
+
+/** Every built-in role that holds the permission by default, lowest role first. */
+const BLESSED: Record<string, readonly string[]> = {
+  'quire.space.view': ['guest', 'member', 'admin', 'owner'],
+  'quire.space.manage': ['admin', 'owner'],
+  'quire.page.view': ['guest', 'member', 'admin', 'owner'],
+  'quire.page.create': ['member', 'admin', 'owner'],
+  'quire.page.edit': ['member', 'admin', 'owner'],
+  'quire.page.comment': ['guest', 'member', 'admin', 'owner'],
+  'quire.page.publish': ['member', 'admin', 'owner'],
+  'quire.page.export': ['member', 'admin', 'owner'],
+  'quire.page.import': ['admin', 'owner'],
+  'quire.page.delete': ['admin', 'owner'],
+}
+
+/** Permissions whose misuse costs data: an import overwrites, a delete removes. */
+const DANGEROUS = ['quire.page.import', 'quire.page.delete']
+
+describe('quire permissions', () => {
+  it('grants each permission to exactly the blessed roles', () => {
+    expect(permissionMatrixDiff(quirePermissions, BLESSED)).toEqual([])
+  })
+
+  it('namespaces every key under the module id and declares it once', () => {
+    const keys = quirePermissions.map((p) => p.key)
+    expect(keys.filter((key) => !key.startsWith('quire.'))).toEqual([])
+    expect(keys.filter((key, i) => keys.indexOf(key) !== i)).toEqual([])
+  })
+
+  it('marks exactly the destructive permissions dangerous', () => {
+    const flagged = quirePermissions.filter((p) => p.dangerous).map((p) => p.key)
+    expect(flagged.toSorted()).toEqual(DANGEROUS.toSorted())
+  })
+})