@lunora/studio 1.0.0-alpha.4 → 1.0.0-alpha.41

package/dist/packem_chunks/rls-panel.js

@@ -0,0 +1,315 @@
+import { c } from 'react/compiler-runtime';
+import { E as ErrorAlert } from '../packem_shared/error-alert-CXjqyGw9.js';
+import { B as Badge } from '../packem_shared/badge-B2PKA1-5.js';
+import { a as CardContent, C as Card } from '../packem_shared/card-DURq3ElK.js';
+import { E as EmptyState } from '../packem_shared/empty-state-DY_oe0k6.js';
+import { T as Table, a as TableHeader, b as TableRow, c as TableHead, d as TableBody, e as TableCell } from '../packem_shared/table-DsCa9Qp9.js';
+import { u as useAdminQuery } from '../packem_shared/use-admin-query-CfHYWx5n.js';
+import { useT } from '../packem_shared/DEFAULT_LOCALE-CiX4W7Kr.js';
+import { ADMIN_FUNCTIONS } from '../packem_shared/ADMIN_FUNCTIONS-BHHJi3Gb.js';
+import { jsxDEV } from 'react/jsx-dev-runtime';
+
+const OPERATIONS = ["read", "insert", "update", "delete"];
+const operationLabel = (t, operation) => ({
+  delete: t("Delete"),
+  insert: t("Insert"),
+  read: t("Read"),
+  update: t("Update")
+})[operation];
+const groupByTable = (policies) => {
+  const byTable = /* @__PURE__ */ new Map();
+  for (const policy of policies) {
+    const coverage = byTable.get(policy.table) ?? {
+      operations: /* @__PURE__ */ new Set(),
+      procedures: [],
+      table: policy.table
+    };
+    coverage.operations.add(policy.on);
+    if (!coverage.procedures.includes(policy.procedure)) {
+      coverage.procedures.push(policy.procedure);
+    }
+    byTable.set(policy.table, coverage);
+  }
+  return [...byTable.values()].toSorted((a, b) => a.table.localeCompare(b.table));
+};
+const RlsPanel = () => {
+  const $ = c(49);
+  const t = useT();
+  let t0;
+  if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
+    t0 = {};
+    $[0] = t0;
+  } else {
+    t0 = $[0];
+  }
+  const {
+    data,
+    error,
+    errorSource
+  } = useAdminQuery(ADMIN_FUNCTIONS.rlsPolicies, t0);
+  const loaded = data !== void 0;
+  let T0;
+  let roles;
+  let t1;
+  let t2;
+  let t3;
+  let t4;
+  let t5;
+  let t6;
+  let t7;
+  if ($[1] !== data || $[2] !== error || $[3] !== errorSource || $[4] !== loaded || $[5] !== t) {
+    const tables = groupByTable(Array.isArray(data?.policies) ? data.policies : []);
+    let t82;
+    if ($[15] !== data) {
+      t82 = Array.isArray(data?.roles) ? data.roles : [];
+      $[15] = data;
+      $[16] = t82;
+    } else {
+      t82 = $[16];
+    }
+    roles = t82;
+    t5 = "flex flex-col gap-6";
+    t6 = "lunora-rls-panel";
+    if ($[17] !== error || $[18] !== errorSource) {
+      t7 = error !== null && /* @__PURE__ */ jsxDEV(ErrorAlert, {
+        error: errorSource,
+        testId: "rls-error"
+      }, void 0, false);
+      $[17] = error;
+      $[18] = errorSource;
+      $[19] = t7;
+    } else {
+      t7 = $[19];
+    }
+    t4 = "flex flex-col gap-2";
+    T0 = Card;
+    t1 = "overflow-hidden py-0";
+    let t92;
+    if ($[20] !== t) {
+      t92 = t("Policies");
+      $[20] = t;
+      $[21] = t92;
+    } else {
+      t92 = $[21];
+    }
+    if ($[22] !== t92) {
+      t2 = /* @__PURE__ */ jsxDEV("header", {
+        className: "border-b border-border px-4 py-3",
+        children: /* @__PURE__ */ jsxDEV("span", {
+          className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+          children: t92
+        }, void 0, false)
+      }, void 0, false);
+      $[22] = t92;
+      $[23] = t2;
+    } else {
+      t2 = $[23];
+    }
+    t3 = loaded && tables.length === 0 ? /* @__PURE__ */ jsxDEV(EmptyState, {
+      description: t("No `definePolicy` is wired through `.use(rls(...))` in this deployment. Add one to guard a table's rows."),
+      testId: "rls-policies-empty",
+      title: t("No policies defined")
+    }, void 0, false) : /* @__PURE__ */ jsxDEV(CardContent, {
+      className: "px-0",
+      children: /* @__PURE__ */ jsxDEV(Table, {
+        "data-testid": "rls-policies-table",
+        children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+          children: /* @__PURE__ */ jsxDEV(TableRow, {
+            children: [/* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("Table")
+            }, void 0, false), OPERATIONS.map((operation) => /* @__PURE__ */ jsxDEV(TableHead, {
+              children: operationLabel(t, operation)
+            }, operation, false)), /* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("Guarded by")
+            }, void 0, false)]
+          }, void 0, true)
+        }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+          children: tables.map((coverage) => /* @__PURE__ */ jsxDEV(TableRow, {
+            "data-testid": `rls-table-${coverage.table}`,
+            children: [/* @__PURE__ */ jsxDEV(TableCell, {
+              className: "font-mono text-xs",
+              children: coverage.table
+            }, void 0, false), OPERATIONS.map((operation_0) => /* @__PURE__ */ jsxDEV(TableCell, {
+              children: coverage.operations.has(operation_0) ? /* @__PURE__ */ jsxDEV(Badge, {
+                variant: "secondary",
+                children: t("Guarded")
+              }, void 0, false) : /* @__PURE__ */ jsxDEV("span", {
+                "aria-hidden": "true",
+                className: "text-muted-foreground",
+                children: "—"
+              }, void 0, false)
+            }, operation_0, false)), /* @__PURE__ */ jsxDEV(TableCell, {
+              className: "font-mono text-xs text-muted-foreground",
+              children: coverage.procedures.join(", ")
+            }, void 0, false)]
+          }, coverage.table, true))
+        }, void 0, false)]
+      }, void 0, true)
+    }, void 0, false);
+    $[1] = data;
+    $[2] = error;
+    $[3] = errorSource;
+    $[4] = loaded;
+    $[5] = t;
+    $[6] = T0;
+    $[7] = roles;
+    $[8] = t1;
+    $[9] = t2;
+    $[10] = t3;
+    $[11] = t4;
+    $[12] = t5;
+    $[13] = t6;
+    $[14] = t7;
+  } else {
+    T0 = $[6];
+    roles = $[7];
+    t1 = $[8];
+    t2 = $[9];
+    t3 = $[10];
+    t4 = $[11];
+    t5 = $[12];
+    t6 = $[13];
+    t7 = $[14];
+  }
+  let t8;
+  if ($[24] !== T0 || $[25] !== t1 || $[26] !== t2 || $[27] !== t3) {
+    t8 = /* @__PURE__ */ jsxDEV(T0, {
+      className: t1,
+      children: [t2, t3]
+    }, void 0, true);
+    $[24] = T0;
+    $[25] = t1;
+    $[26] = t2;
+    $[27] = t3;
+    $[28] = t8;
+  } else {
+    t8 = $[28];
+  }
+  let t9;
+  if ($[29] !== t4 || $[30] !== t8) {
+    t9 = /* @__PURE__ */ jsxDEV("section", {
+      className: t4,
+      children: t8
+    }, void 0, false);
+    $[29] = t4;
+    $[30] = t8;
+    $[31] = t9;
+  } else {
+    t9 = $[31];
+  }
+  let t10;
+  if ($[32] !== t) {
+    t10 = t("Roles");
+    $[32] = t;
+    $[33] = t10;
+  } else {
+    t10 = $[33];
+  }
+  let t11;
+  if ($[34] !== t10) {
+    t11 = /* @__PURE__ */ jsxDEV("header", {
+      className: "border-b border-border px-4 py-3",
+      children: /* @__PURE__ */ jsxDEV("span", {
+        className: "font-mono text-[11px] tracking-wide text-muted-foreground uppercase",
+        children: t10
+      }, void 0, false)
+    }, void 0, false);
+    $[34] = t10;
+    $[35] = t11;
+  } else {
+    t11 = $[35];
+  }
+  let t12;
+  if ($[36] !== loaded || $[37] !== roles || $[38] !== t) {
+    t12 = loaded && roles.length === 0 ? /* @__PURE__ */ jsxDEV(EmptyState, {
+      description: t("No `defineRole` is registered via `rls(policies, { roles })`. Roles back `ctx.auth.can(...)` permission checks."),
+      testId: "rls-roles-empty",
+      title: t("No roles defined")
+    }, void 0, false) : /* @__PURE__ */ jsxDEV(CardContent, {
+      className: "px-0",
+      children: /* @__PURE__ */ jsxDEV(Table, {
+        "data-testid": "rls-roles-table",
+        children: [/* @__PURE__ */ jsxDEV(TableHeader, {
+          children: /* @__PURE__ */ jsxDEV(TableRow, {
+            children: [/* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("Role")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("Description")
+            }, void 0, false), /* @__PURE__ */ jsxDEV(TableHead, {
+              children: t("Permissions")
+            }, void 0, false)]
+          }, void 0, true)
+        }, void 0, false), /* @__PURE__ */ jsxDEV(TableBody, {
+          children: roles.map(_temp2)
+        }, void 0, false)]
+      }, void 0, true)
+    }, void 0, false);
+    $[36] = loaded;
+    $[37] = roles;
+    $[38] = t;
+    $[39] = t12;
+  } else {
+    t12 = $[39];
+  }
+  let t13;
+  if ($[40] !== t11 || $[41] !== t12) {
+    t13 = /* @__PURE__ */ jsxDEV("section", {
+      className: "flex flex-col gap-2",
+      children: /* @__PURE__ */ jsxDEV(Card, {
+        className: "overflow-hidden py-0",
+        children: [t11, t12]
+      }, void 0, true)
+    }, void 0, false);
+    $[40] = t11;
+    $[41] = t12;
+    $[42] = t13;
+  } else {
+    t13 = $[42];
+  }
+  let t14;
+  if ($[43] !== t13 || $[44] !== t5 || $[45] !== t6 || $[46] !== t7 || $[47] !== t9) {
+    t14 = /* @__PURE__ */ jsxDEV("div", {
+      className: t5,
+      "data-testid": t6,
+      children: [t7, t9, t13]
+    }, void 0, true);
+    $[43] = t13;
+    $[44] = t5;
+    $[45] = t6;
+    $[46] = t7;
+    $[47] = t9;
+    $[48] = t14;
+  } else {
+    t14 = $[48];
+  }
+  return t14;
+};
+function _temp(permission) {
+  return /* @__PURE__ */ jsxDEV(Badge, {
+    variant: "outline",
+    children: permission
+  }, permission, false);
+}
+function _temp2(role) {
+  return /* @__PURE__ */ jsxDEV(TableRow, {
+    "data-testid": `rls-role-${role.name}`,
+    children: [/* @__PURE__ */ jsxDEV(TableCell, {
+      className: "font-mono text-xs",
+      children: role.name
+    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+      className: "text-muted-foreground",
+      children: role.description ?? ""
+    }, void 0, false), /* @__PURE__ */ jsxDEV(TableCell, {
+      children: role.permissions.length === 0 ? /* @__PURE__ */ jsxDEV("span", {
+        "aria-hidden": "true",
+        className: "text-muted-foreground",
+        children: "—"
+      }, void 0, false) : /* @__PURE__ */ jsxDEV("span", {
+        className: "flex flex-wrap gap-1",
+        children: role.permissions.map(_temp)
+      }, void 0, false)
+    }, void 0, false)]
+  }, role.name, true);
+}
+
+export { RlsPanel as default };