@mohasinac/appkit 4.41.0 → 4.41.2

package/dist/security/rbac/Can.d.ts

@@ -1,31 +0,0 @@
-import React from "react";
-import type { Permission } from "./types";
-import type { RbacHookReturn } from "./hook";
-interface CanProps {
-    /** Single required permission */
-    permission?: Permission;
-    /** Multiple permissions to check */
-    permissions?: Permission[];
-    /** When multiple permissions are provided: "all" (default) or "any" */
-    mode?: "all" | "any";
-    /** Rendered when the check fails */
-    fallback?: React.ReactNode;
-    children: React.ReactNode;
-    /** The resolved rbac hook return value — pass from useRBAC() */
-    rbac: Pick<RbacHookReturn, "can" | "canAll" | "canAny">;
-}
-/**
- * Conditionally renders children based on RBAC permissions.
- *
- * The consumer's `useRBAC()` hook must be called in the parent component and
- * passed as the `rbac` prop; this avoids coupling `<Can>` to a specific context.
- *
- * @example
- * const rbac = useRBAC();
- * <Can rbac={rbac} permission="admin:payouts"><PayoutsTable /></Can>
- * <Can rbac={rbac} permissions={["seller:products:write", "seller:store"]} mode="any">
- *   <SellerActions />
- * </Can>
- */
-export declare function Can({ permission, permissions, mode, fallback, children, rbac, }: CanProps): React.ReactElement | null;
-export {};

package/dist/security/rbac/Can.js

@@ -1,22 +0,0 @@
-import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
-/**
- * Conditionally renders children based on RBAC permissions.
- *
- * The consumer's `useRBAC()` hook must be called in the parent component and
- * passed as the `rbac` prop; this avoids coupling `<Can>` to a specific context.
- *
- * @example
- * const rbac = useRBAC();
- * <Can rbac={rbac} permission="admin:payouts"><PayoutsTable /></Can>
- * <Can rbac={rbac} permissions={["seller:products:write", "seller:store"]} mode="any">
- *   <SellerActions />
- * </Can>
- */
-export function Can({ permission, permissions, mode = "all", fallback = null, children, rbac, }) {
-    const allowed = permission
-        ? rbac.can(permission)
-        : mode === "all"
-            ? rbac.canAll(permissions ?? [])
-            : rbac.canAny(permissions ?? []);
-    return allowed ? _jsx(_Fragment, { children: children }) : _jsx(_Fragment, { children: fallback });
-}

package/dist/security/rbac/default-roles.d.ts

@@ -1,2 +0,0 @@
-import type { RoleDefinition } from "./types";
-export declare const DEFAULT_ROLES: Record<string, RoleDefinition>;

package/dist/security/rbac/default-roles.js

@@ -1,83 +0,0 @@
-export const DEFAULT_ROLES = {
-    super_admin: {
-        label: "Super Admin",
-        permissions: ["*"],
-        inherits: [],
-    },
-    admin: {
-        label: "Admin",
-        permissions: [
-            "admin:access",
-            "admin:settings",
-            "admin:users",
-            "admin:orders",
-            "admin:orders:refund",
-            "admin:products",
-            "admin:reviews",
-            "admin:analytics",
-            "admin:activity",
-            "admin:sessions",
-            "admin:newsletter",
-            "admin:search",
-            "admin:feature-flags",
-            "admin:cms",
-            "admin:payouts",
-            "admin:kyc",
-        ],
-        inherits: ["moderator"],
-    },
-    moderator: {
-        label: "Moderator",
-        permissions: [
-            "admin:access",
-            "admin:reviews",
-            "admin:products",
-            "content:reviews:moderate",
-            "content:products:moderate",
-            "content:orders:support",
-        ],
-        inherits: [],
-    },
-    seller: {
-        label: "Seller",
-        permissions: [
-            "seller:access",
-            "seller:products:read",
-            "seller:products:write",
-            "seller:products:delete",
-            "seller:orders:read",
-            "seller:orders:fulfill",
-            "seller:analytics",
-            "seller:coupons",
-            "seller:store",
-            "seller:payouts:read",
-            "seller:shipping",
-        ],
-        inherits: ["user"],
-    },
-    user: {
-        label: "User",
-        permissions: [
-            "user:profile",
-            "user:orders",
-            "user:orders:cancel",
-            "user:reviews",
-            "user:wishlist",
-            "user:addresses",
-            "user:chat",
-            "user:offers",
-            "user:auctions",
-        ],
-        inherits: [],
-    },
-    support_agent: {
-        label: "Support Agent",
-        permissions: [
-            "admin:access",
-            "admin:orders",
-            "content:orders:support",
-            "admin:users",
-        ],
-        inherits: [],
-    },
-};

package/dist/security/rbac/hook.d.ts

@@ -1,20 +0,0 @@
-import type { RbacConfig, Permission } from "./types";
-export interface RbacHookReturn {
-    can: (permission: Permission) => boolean;
-    canAll: (permissions: Permission[]) => boolean;
-    canAny: (permissions: Permission[]) => boolean;
-    roles: string[];
-    permissions: Set<Permission>;
-    isAdmin: boolean;
-    isSeller: boolean;
-}
-/**
- * Factory that creates a typed `useRBAC` hook bound to the given config.
- *
- * @example
- * // src/hooks/useRBAC.ts
- * import { createRbacHook } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * export const useRBAC = createRbacHook(RBAC_CONFIG);
- */
-export declare function createRbacHook(config: RbacConfig, getUserRoles: () => string[] | null | undefined): () => RbacHookReturn;

package/dist/security/rbac/hook.js

@@ -1,30 +0,0 @@
-"use client";
-// appkit/src/security/rbac/hook.ts
-import { useMemo } from "react";
-import { resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, } from "./resolver";
-/**
- * Factory that creates a typed `useRBAC` hook bound to the given config.
- *
- * @example
- * // src/hooks/useRBAC.ts
- * import { createRbacHook } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * export const useRBAC = createRbacHook(RBAC_CONFIG);
- */
-export function createRbacHook(config, getUserRoles) {
-    return function useRBAC() {
-        const userRoles = getUserRoles() ?? [];
-        const permissions = useMemo(() => resolvePermissions(userRoles, config), 
-        // eslint-disable-next-line react-hooks/exhaustive-deps
-        [userRoles.join(",")]);
-        return {
-            can: (permission) => hasPermission(permissions, permission),
-            canAll: (perms) => hasAllPermissions(permissions, perms),
-            canAny: (perms) => hasAnyPermission(permissions, perms),
-            roles: userRoles,
-            permissions,
-            isAdmin: hasPermission(permissions, "admin:access"),
-            isSeller: hasPermission(permissions, "seller:access"),
-        };
-    };
-}

package/dist/security/rbac/index.d.ts

@@ -1,8 +0,0 @@
-export type { Permission, RoleDefinition, RbacConfig, ResolvedUser } from "./types";
-export { DEFAULT_ROLES } from "./default-roles";
-export { resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, } from "./resolver";
-export type { RbacHookReturn } from "./hook";
-export { createRbacHook } from "./hook";
-export { Can } from "./Can";
-export { createRequirePermission, createRequirePermissionSync } from "./server";
-export { createRbacMiddleware } from "./middleware";

package/dist/security/rbac/index.js

@@ -1,6 +0,0 @@
-export { DEFAULT_ROLES } from "./default-roles";
-export { resolvePermissions, hasPermission, hasAllPermissions, hasAnyPermission, } from "./resolver";
-export { createRbacHook } from "./hook";
-export { Can } from "./Can";
-export { createRequirePermission, createRequirePermissionSync } from "./server";
-export { createRbacMiddleware } from "./middleware";

package/dist/security/rbac/middleware.d.ts

@@ -1,51 +0,0 @@
-import type { RbacConfig, Permission } from "./types";
-type NextRequest = {
-    nextUrl: {
-        pathname: string;
-    };
-    headers: {
-        get: (name: string) => string | null;
-    };
-    cookies: {
-        get: (name: string) => {
-            value: string;
-        } | undefined;
-    };
-    url: string;
-};
-type NextResponse = {
-    redirect: (url: URL | string) => NextResponse;
-    next: () => NextResponse;
-};
-type GetSessionUser = (request: NextRequest) => Promise<{
-    uid: string;
-    roles: string[];
-} | null>;
-/**
- * Factory that creates a Next.js middleware function for route-level RBAC.
- *
- * @example
- * // letitrip: middleware.ts
- * import { createRbacMiddleware } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * import { ADMIN_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/admin";
- * import { SELLER_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/seller";
- * import { getSessionUser } from "@/lib/auth/session";
- *
- * export const middleware = createRbacMiddleware(
- *   RBAC_CONFIG,
- *   { ...ADMIN_PAGE_PERMISSIONS, ...SELLER_PAGE_PERMISSIONS },
- *   getSessionUser,
- *   { loginPath: "/auth/login", unauthorizedPath: "/unauthorized" }
- * );
- */
-export declare function createRbacMiddleware(config: RbacConfig, pageMap: Record<string, Permission>, getSessionUser: GetSessionUser, options?: {
-    loginPath?: string;
-    unauthorizedPath?: string;
-    NextURL?: new (url: string, base: string) => URL;
-    NextResponse?: NextResponse;
-}): (request: NextRequest, NextResponseLib: {
-    redirect: (url: URL | string) => NextResponse;
-    next: () => NextResponse;
-}) => Promise<NextResponse>;
-export {};

package/dist/security/rbac/middleware.js

@@ -1,51 +0,0 @@
-import { resolvePermissions, hasPermission } from "./resolver";
-function matchesRoute(pathname, pattern) {
-    // Convert route pattern like "/admin/:path*" to a testable form
-    const escaped = pattern
-        .replace(/\[.*?\]/g, "[^/]+")
-        .replace(/:\w+\*/g, ".*")
-        .replace(/:\w+/g, "[^/]+");
-    return new RegExp(`^${escaped}(/|$)`).test(pathname);
-}
-/**
- * Factory that creates a Next.js middleware function for route-level RBAC.
- *
- * @example
- * // letitrip: middleware.ts
- * import { createRbacMiddleware } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * import { ADMIN_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/admin";
- * import { SELLER_PAGE_PERMISSIONS } from "@mohasinac/appkit/features/seller";
- * import { getSessionUser } from "@/lib/auth/session";
- *
- * export const middleware = createRbacMiddleware(
- *   RBAC_CONFIG,
- *   { ...ADMIN_PAGE_PERMISSIONS, ...SELLER_PAGE_PERMISSIONS },
- *   getSessionUser,
- *   { loginPath: "/auth/login", unauthorizedPath: "/unauthorized" }
- * );
- */
-export function createRbacMiddleware(config, pageMap, getSessionUser, options = {}) {
-    const loginPath = options.loginPath ?? "/auth/login";
-    const unauthorizedPath = options.unauthorizedPath ?? "/unauthorized";
-    return async function rbacMiddleware(request, NextResponseLib) {
-        const { pathname } = request.nextUrl;
-        // Find the most specific matching route (longest match wins)
-        const entry = Object.entries(pageMap)
-            .filter(([route]) => matchesRoute(pathname, route))
-            .sort((a, b) => b[0].length - a[0].length)[0];
-        if (!entry)
-            return NextResponseLib.next();
-        const [, requiredPermission] = entry;
-        const user = await getSessionUser(request);
-        if (!user) {
-            return NextResponseLib.redirect(new URL(loginPath + `?from=${encodeURIComponent(pathname)}`, request.url));
-        }
-        const perms = resolvePermissions(user.roles, config);
-        if (!hasPermission(perms, requiredPermission)) {
-            return NextResponseLib.redirect(new URL(unauthorizedPath +
-                `?required=${encodeURIComponent(requiredPermission)}`, request.url));
-        }
-        return NextResponseLib.next();
-    };
-}

package/dist/security/rbac/resolver.d.ts

@@ -1,5 +0,0 @@
-import type { Permission, RbacConfig } from "./types";
-export declare function resolvePermissions(userRoles: string[], config: RbacConfig): Set<Permission>;
-export declare function hasPermission(permissions: Set<Permission>, required: Permission): boolean;
-export declare function hasAllPermissions(permissions: Set<Permission>, required: Permission[]): boolean;
-export declare function hasAnyPermission(permissions: Set<Permission>, required: Permission[]): boolean;

package/dist/security/rbac/resolver.js

@@ -1,38 +0,0 @@
-export function resolvePermissions(userRoles, config) {
-    const { roles, multiRoleStrategy = "union" } = config;
-    function getPermissionsForRole(roleKey, visited = new Set()) {
-        if (visited.has(roleKey))
-            return new Set();
-        visited.add(roleKey);
-        const def = roles[roleKey];
-        if (!def)
-            return new Set();
-        const own = new Set(def.permissions);
-        // Wildcard — super_admin gets everything
-        if (own.has("*"))
-            return new Set(["*"]);
-        for (const inherited of def.inherits ?? []) {
-            for (const p of getPermissionsForRole(inherited, visited)) {
-                own.add(p);
-            }
-        }
-        return own;
-    }
-    if (userRoles.length === 0)
-        return new Set();
-    const sets = userRoles.map((r) => getPermissionsForRole(r));
-    if (multiRoleStrategy === "intersection") {
-        return sets.reduce((acc, set) => new Set([...acc].filter((p) => set.has(p))));
-    }
-    // union (default)
-    return sets.reduce((acc, set) => new Set([...acc, ...set]), new Set());
-}
-export function hasPermission(permissions, required) {
-    return permissions.has("*") || permissions.has(required);
-}
-export function hasAllPermissions(permissions, required) {
-    return required.every((p) => hasPermission(permissions, p));
-}
-export function hasAnyPermission(permissions, required) {
-    return required.some((p) => hasPermission(permissions, p));
-}

package/dist/security/rbac/server.d.ts

@@ -1,24 +0,0 @@
-import type { RbacConfig, Permission } from "./types";
-/**
- * Factory creating a server-side permission guard for API routes + Server Actions.
- *
- * @example
- * // src/lib/auth/require-permission.ts
- * import { createRequirePermission } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * export const requirePermission = createRequirePermission(RBAC_CONFIG);
- *
- * // In Server Action:
- * await requirePermission(authUser, "admin:payouts");
- */
-export declare function createRequirePermission(config: RbacConfig): (user: {
-    uid: string;
-    roles: string[];
-} | null | undefined, permission: Permission) => Promise<void>;
-/**
- * Synchronous variant — use when errors cannot be imported directly.
- */
-export declare function createRequirePermissionSync(config: RbacConfig): (user: {
-    uid: string;
-    roles: string[];
-} | null | undefined, permission: Permission) => void;

package/dist/security/rbac/server.js

@@ -1,42 +0,0 @@
-import { resolvePermissions, hasPermission } from "./resolver";
-/**
- * Factory creating a server-side permission guard for API routes + Server Actions.
- *
- * @example
- * // src/lib/auth/require-permission.ts
- * import { createRequirePermission } from "@mohasinac/appkit/security";
- * import { RBAC_CONFIG } from "@/constants/rbac";
- * export const requirePermission = createRequirePermission(RBAC_CONFIG);
- *
- * // In Server Action:
- * await requirePermission(authUser, "admin:payouts");
- */
-export function createRequirePermission(config) {
-    return async function requirePermission(user, permission) {
-        if (!user) {
-            const { AuthenticationError } = await import("../../errors");
-            throw new AuthenticationError("Not authenticated");
-        }
-        const perms = resolvePermissions(user.roles, config);
-        if (!hasPermission(perms, permission)) {
-            const { AuthorizationError } = await import("../../errors");
-            throw new AuthorizationError(`Missing permission: ${permission}`);
-        }
-    };
-}
-/**
- * Synchronous variant — use when errors cannot be imported directly.
- */
-export function createRequirePermissionSync(config) {
-    return function requirePermission(user, permission) {
-        if (!user) {
-            throw Object.assign(new Error("Not authenticated"), { status: 401 });
-        }
-        const perms = resolvePermissions(user.roles, config);
-        if (!hasPermission(perms, permission)) {
-            throw Object.assign(new Error(`Missing permission: ${permission}`), {
-                status: 403,
-            });
-        }
-    };
-}

package/dist/security/rbac/types.d.ts

@@ -1,22 +0,0 @@
-export type Permission = string;
-export interface RoleDefinition {
-    label: string;
-    permissions: Permission[];
-    /** Other role keys whose permissions are inherited */
-    inherits?: string[];
-}
-export interface RbacConfig {
-    /** App-defined roles — merges with or replaces DEFAULT_ROLES */
-    roles: Record<string, RoleDefinition>;
-    /**
-     * How to resolve permissions when a user has multiple roles.
-     * default: "union" — user gets the union of all roles' permissions
-     */
-    multiRoleStrategy?: "union" | "intersection";
-}
-export interface ResolvedUser {
-    uid: string;
-    roles: string[];
-    /** Flat resolved permission set (after role inheritance + multi-role strategy) */
-    permissions: Set<Permission>;
-}

package/dist/security/rbac/types.js

@@ -1,2 +0,0 @@
-// appkit/src/security/rbac/types.ts
-export {};

package/dist/seed/conversations-seed-data.d.ts

@@ -1,2 +0,0 @@
-import type { ConversationDocument } from "../features/messages/schemas/firestore";
-export declare const conversationsSeedData: Partial<ConversationDocument>[];