@morscherlab/mint-sdk 1.2.0-beta.8 → 1.2.0-beta.9

package/dist/permissions.d.ts

@@ -1,5 +1,5 @@
 export declare const ADMIN_ROLE = "admin";
-export declare const ADMIN_PANEL_PERMISSIONS: readonly ["users.view", "users.invite", "users.manage", "platform.configure", "platform.view_logs", "plugins.configure", "plugins.install", "notices.publish"];
+export declare const ADMIN_PANEL_PERMISSIONS: readonly ["users.view", "users.manage", "platform.configure", "platform.view_logs", "plugins.configure", "plugins.install", "notices.publish"];
 export type AccessAudience = 'all' | 'admin' | 'user';
 export type AccessAudienceInput = AccessAudience | readonly AccessAudience[];
 export interface RoleInfo {
@@ -26,11 +26,36 @@ export interface AccessPolicy {
     anyPermissions?: readonly string[];
     plugin?: string;
 }
+/**
+ * An object that carries an access rule.
+ *
+ * The nested `access` policy is the supported shape. The four flat fields are
+ * the pre-1.2 spelling of the same four `AccessPolicy` fields; they still work
+ * but are deprecated, and `normalizeAccessPolicy()` lets the nested policy win
+ * wherever both are given.
+ */
 export interface AccessControlled {
+    /** The access policy. Preferred over the flat fields below. */
     access?: AccessPolicy;
+    /**
+     * @deprecated Since MINT 1.2; use `access.visibleFor` instead. The flat
+     * duplicate is removed in 1.3.
+     */
     visibleFor?: AccessAudienceInput;
+    /**
+     * @deprecated Since MINT 1.2; use `access.requiresAdmin` instead. The flat
+     * duplicate is removed in 1.3.
+     */
     requiresAdmin?: boolean;
+    /**
+     * @deprecated Since MINT 1.2; use `access.permissions` instead. The flat
+     * duplicate is removed in 1.3.
+     */
     permissions?: readonly string[];
+    /**
+     * @deprecated Since MINT 1.2; use `access.anyPermissions` instead. The flat
+     * duplicate is removed in 1.3.
+     */
     anyPermissions?: readonly string[];
 }
 export declare function getRoleInfo(user: PermissionUser | null | undefined): RoleInfo | null;
@@ -42,5 +67,21 @@ export declare function hasAllPermissions(user: PermissionUser | null | undefine
 export declare function hasAnyPermission(user: PermissionUser | null | undefined, permissions?: readonly string[]): boolean;
 export declare function canAccessAdmin(user: PermissionUser | null | undefined): boolean;
 export declare function canAccessPlugin(user: PermissionUser | null | undefined, pluginName: string | null | undefined): boolean;
+/**
+ * Flatten an access rule — either shape, or a mix of both — into one policy.
+ *
+ * ## Precedence
+ *
+ * 1. A defined field on the nested `access` policy wins. It is the supported
+ *    spelling, so an object that carries both shapes is read as "the nested
+ *    policy, with the deprecated flat fields as leftovers".
+ * 2. Otherwise the flat field on the rule itself is used.
+ * 3. A field set to `undefined` on either side counts as unset and never
+ *    masks the other side.
+ *
+ * Only `AccessPolicy` fields the flat shape never had (`audience`,
+ * `requiresAuth`, `plugin`) can come from the nested policy alone; the four
+ * duplicated fields are the ones this ordering exists for.
+ */
 export declare function normalizeAccessPolicy(rule: AccessControlled | AccessPolicy | undefined): AccessPolicy;
 export declare function canAccessByPolicy(user: PermissionUser | null | undefined, rule: AccessControlled | AccessPolicy | undefined, isAuthenticated?: boolean): boolean;

package/dist/permissions.js

@@ -2,7 +2,6 @@
 var ADMIN_ROLE = "admin";
 var ADMIN_PANEL_PERMISSIONS = [
 	"users.view",
-	"users.invite",
 	"users.manage",
 	"platform.configure",
 	"platform.view_logs",
@@ -48,17 +47,28 @@ function canAccessPlugin(user, pluginName) {
 	if (!access || access === "all") return true;
 	return Array.isArray(access) && access.includes(pluginName);
 }
+/**
+* Flatten an access rule — either shape, or a mix of both — into one policy.
+*
+* ## Precedence
+*
+* 1. A defined field on the nested `access` policy wins. It is the supported
+*    spelling, so an object that carries both shapes is read as "the nested
+*    policy, with the deprecated flat fields as leftovers".
+* 2. Otherwise the flat field on the rule itself is used.
+* 3. A field set to `undefined` on either side counts as unset and never
+*    masks the other side.
+*
+* Only `AccessPolicy` fields the flat shape never had (`audience`,
+* `requiresAuth`, `plugin`) can come from the nested policy alone; the four
+* duplicated fields are the ones this ordering exists for.
+*/
 function normalizeAccessPolicy(rule) {
 	if (!rule) return {};
-	const { access: nested, ...direct } = rule;
-	return {
-		...nested ?? {},
-		...direct,
-		..."visibleFor" in rule && rule.visibleFor !== void 0 ? { visibleFor: rule.visibleFor } : {},
-		..."requiresAdmin" in rule && rule.requiresAdmin !== void 0 ? { requiresAdmin: rule.requiresAdmin } : {},
-		..."permissions" in rule && rule.permissions !== void 0 ? { permissions: rule.permissions } : {},
-		..."anyPermissions" in rule && rule.anyPermissions !== void 0 ? { anyPermissions: rule.anyPermissions } : {}
-	};
+	const { access: nested, ...flat } = rule;
+	const policy = { ...flat };
+	for (const [field, value] of Object.entries(nested ?? {})) if (value !== void 0) policy[field] = value;
+	return policy;
 }
 function canAccessByPolicy(user, rule, isAuthenticated = user !== null && user !== void 0) {
 	const policy = normalizeAccessPolicy(rule);

package/dist/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","names":[],"sources":["../src/permissions.ts"],"sourcesContent":["export const ADMIN_ROLE = 'admin'\n\nexport const ADMIN_PANEL_PERMISSIONS = [\n  'users.view',\n  'users.invite',\n  'users.manage',\n  'platform.configure',\n  'platform.view_logs',\n  'plugins.configure',\n  'plugins.install',\n  'notices.publish',\n] as const\n\nexport type AccessAudience = 'all' | 'admin' | 'user'\nexport type AccessAudienceInput = AccessAudience | readonly AccessAudience[]\n\nexport interface RoleInfo {\n  id?: number\n  slug: string\n  name?: string\n  color?: string\n  permissions?: readonly string[] | null\n  project_scope?: 'all' | 'assigned' | string\n  plugin_access?: readonly string[] | 'all' | null\n}\n\nexport interface PermissionUser {\n  role?: string | null\n  role_obj?: RoleInfo | null\n  roleObj?: RoleInfo | null\n  permissions?: readonly string[] | null\n}\n\nexport interface AccessPolicy {\n  audience?: AccessAudienceInput\n  visibleFor?: AccessAudienceInput\n  requiresAuth?: boolean\n  requiresAdmin?: boolean\n  permissions?: readonly string[]\n  anyPermissions?: readonly string[]\n  plugin?: string\n}\n\nexport interface AccessControlled {\n  access?: AccessPolicy\n  visibleFor?: AccessAudienceInput\n  requiresAdmin?: boolean\n  permissions?: readonly string[]\n  anyPermissions?: readonly string[]\n}\n\nexport function getRoleInfo(user: PermissionUser | null | undefined): RoleInfo | null {\n  return user?.roleObj ?? user?.role_obj ?? null\n}\n\nexport function isAdminRole(role: string | null | undefined): boolean {\n  return role === ADMIN_ROLE\n}\n\nexport function isAdminUser(user: PermissionUser | null | undefined): boolean {\n  return isAdminRole(user?.role) || getRoleInfo(user)?.slug === ADMIN_ROLE\n}\n\nexport function getAccessAudience(user: PermissionUser | null | undefined): Exclude<AccessAudience, 'all'> {\n  return isAdminUser(user) ? 'admin' : 'user'\n}\n\nexport function getUserPermissions(user: PermissionUser | null | undefined): string[] {\n  const rolePermissions = getRoleInfo(user)?.permissions\n  if (rolePermissions?.length) return [...rolePermissions]\n  return [...(user?.permissions ?? [])]\n}\n\nexport function hasAllPermissions(\n  user: PermissionUser | null | undefined,\n  permissions: readonly string[] = [],\n): boolean {\n  if (permissions.length === 0) return true\n  if (isAdminUser(user)) return true\n  const granted = new Set(getUserPermissions(user))\n  return permissions.every(permission => granted.has(permission))\n}\n\nexport function hasAnyPermission(\n  user: PermissionUser | null | undefined,\n  permissions: readonly string[] = [],\n): boolean {\n  if (permissions.length === 0) return true\n  if (isAdminUser(user)) return true\n  const granted = new Set(getUserPermissions(user))\n  return permissions.some(permission => granted.has(permission))\n}\n\nexport function canAccessAdmin(user: PermissionUser | null | undefined): boolean {\n  return isAdminUser(user) || hasAnyPermission(user, ADMIN_PANEL_PERMISSIONS)\n}\n\nexport function canAccessPlugin(\n  user: PermissionUser | null | undefined,\n  pluginName: string | null | undefined,\n): boolean {\n  if (!pluginName) return true\n  const access = getRoleInfo(user)?.plugin_access\n  if (!access || access === 'all') return true\n  return Array.isArray(access) && access.includes(pluginName)\n}\n\nexport function normalizeAccessPolicy(rule: AccessControlled | AccessPolicy | undefined): AccessPolicy {\n  if (!rule) return {}\n  const { access: nested, ...direct } = rule as AccessPolicy & { access?: AccessPolicy }\n  return {\n    ...(nested ?? {}),\n    ...direct,\n    ...('visibleFor' in rule && rule.visibleFor !== undefined ? { visibleFor: rule.visibleFor } : {}),\n    ...('requiresAdmin' in rule && rule.requiresAdmin !== undefined ? { requiresAdmin: rule.requiresAdmin } : {}),\n    ...('permissions' in rule && rule.permissions !== undefined ? { permissions: rule.permissions } : {}),\n    ...('anyPermissions' in rule && rule.anyPermissions !== undefined ? { anyPermissions: rule.anyPermissions } : {}),\n  }\n}\n\nexport function canAccessByPolicy(\n  user: PermissionUser | null | undefined,\n  rule: AccessControlled | AccessPolicy | undefined,\n  isAuthenticated = user !== null && user !== undefined,\n): boolean {\n  const policy = normalizeAccessPolicy(rule)\n  if (policy.requiresAuth && !isAuthenticated) return false\n  if (policy.requiresAdmin && !isAdminUser(user)) return false\n  if (!audienceAllowsUser(policy.visibleFor ?? policy.audience, user)) return false\n  if (!hasAllPermissions(user, policy.permissions)) return false\n  if (!hasAnyPermission(user, policy.anyPermissions)) return false\n  if (policy.plugin && !canAccessPlugin(user, policy.plugin)) return false\n  return true\n}\n\nfunction audienceAllowsUser(\n  audience: AccessAudienceInput | undefined,\n  user: PermissionUser | null | undefined,\n): boolean {\n  if (audience === undefined) return true\n  const allowed = Array.isArray(audience) ? audience : [audience]\n  if (allowed.includes('all')) return true\n  return allowed.includes(getAccessAudience(user))\n}\n"],"mappings":";AAAA,IAAa,aAAa;AAE1B,IAAa,0BAA0B;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAwCD,SAAgB,YAAY,MAA0D;AACpF,QAAO,MAAM,WAAW,MAAM,YAAY;;AAG5C,SAAgB,YAAY,MAA0C;AACpE,QAAO,SAAS;;AAGlB,SAAgB,YAAY,MAAkD;AAC5E,QAAO,YAAY,MAAM,KAAK,IAAI,YAAY,KAAK,EAAE,SAAA;;AAGvD,SAAgB,kBAAkB,MAAyE;AACzG,QAAO,YAAY,KAAK,GAAG,UAAU;;AAGvC,SAAgB,mBAAmB,MAAmD;CACpF,MAAM,kBAAkB,YAAY,KAAK,EAAE;AAC3C,KAAI,iBAAiB,OAAQ,QAAO,CAAC,GAAG,gBAAgB;AACxD,QAAO,CAAC,GAAI,MAAM,eAAe,EAAE,CAAE;;AAGvC,SAAgB,kBACd,MACA,cAAiC,EAAE,EAC1B;AACT,KAAI,YAAY,WAAW,EAAG,QAAO;AACrC,KAAI,YAAY,KAAK,CAAE,QAAO;CAC9B,MAAM,UAAU,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACjD,QAAO,YAAY,OAAM,eAAc,QAAQ,IAAI,WAAW,CAAC;;AAGjE,SAAgB,iBACd,MACA,cAAiC,EAAE,EAC1B;AACT,KAAI,YAAY,WAAW,EAAG,QAAO;AACrC,KAAI,YAAY,KAAK,CAAE,QAAO;CAC9B,MAAM,UAAU,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACjD,QAAO,YAAY,MAAK,eAAc,QAAQ,IAAI,WAAW,CAAC;;AAGhE,SAAgB,eAAe,MAAkD;AAC/E,QAAO,YAAY,KAAK,IAAI,iBAAiB,MAAM,wBAAwB;;AAG7E,SAAgB,gBACd,MACA,YACS;AACT,KAAI,CAAC,WAAY,QAAO;CACxB,MAAM,SAAS,YAAY,KAAK,EAAE;AAClC,KAAI,CAAC,UAAU,WAAW,MAAO,QAAO;AACxC,QAAO,MAAM,QAAQ,OAAO,IAAI,OAAO,SAAS,WAAW;;AAG7D,SAAgB,sBAAsB,MAAiE;AACrG,KAAI,CAAC,KAAM,QAAO,EAAE;CACpB,MAAM,EAAE,QAAQ,QAAQ,GAAG,WAAW;AACtC,QAAO;EACL,GAAI,UAAU,EAAE;EAChB,GAAG;EACH,GAAI,gBAAgB,QAAQ,KAAK,eAAe,KAAA,IAAY,EAAE,YAAY,KAAK,YAAY,GAAG,EAAE;EAChG,GAAI,mBAAmB,QAAQ,KAAK,kBAAkB,KAAA,IAAY,EAAE,eAAe,KAAK,eAAe,GAAG,EAAE;EAC5G,GAAI,iBAAiB,QAAQ,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,aAAa,GAAG,EAAE;EACpG,GAAI,oBAAoB,QAAQ,KAAK,mBAAmB,KAAA,IAAY,EAAE,gBAAgB,KAAK,gBAAgB,GAAG,EAAE;EACjH;;AAGH,SAAgB,kBACd,MACA,MACA,kBAAkB,SAAS,QAAQ,SAAS,KAAA,GACnC;CACT,MAAM,SAAS,sBAAsB,KAAK;AAC1C,KAAI,OAAO,gBAAgB,CAAC,gBAAiB,QAAO;AACpD,KAAI,OAAO,iBAAiB,CAAC,YAAY,KAAK,CAAE,QAAO;AACvD,KAAI,CAAC,mBAAmB,OAAO,cAAc,OAAO,UAAU,KAAK,CAAE,QAAO;AAC5E,KAAI,CAAC,kBAAkB,MAAM,OAAO,YAAY,CAAE,QAAO;AACzD,KAAI,CAAC,iBAAiB,MAAM,OAAO,eAAe,CAAE,QAAO;AAC3D,KAAI,OAAO,UAAU,CAAC,gBAAgB,MAAM,OAAO,OAAO,CAAE,QAAO;AACnE,QAAO;;AAGT,SAAS,mBACP,UACA,MACS;AACT,KAAI,aAAa,KAAA,EAAW,QAAO;CACnC,MAAM,UAAU,MAAM,QAAQ,SAAS,GAAG,WAAW,CAAC,SAAS;AAC/D,KAAI,QAAQ,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,QAAQ,SAAS,kBAAkB,KAAK,CAAC"}
+{"version":3,"file":"permissions.js","names":[],"sources":["../src/permissions.ts"],"sourcesContent":["export const ADMIN_ROLE = 'admin'\n\nexport const ADMIN_PANEL_PERMISSIONS = [\n  'users.view',\n  'users.manage',\n  'platform.configure',\n  'platform.view_logs',\n  'plugins.configure',\n  'plugins.install',\n  'notices.publish',\n] as const\n\nexport type AccessAudience = 'all' | 'admin' | 'user'\nexport type AccessAudienceInput = AccessAudience | readonly AccessAudience[]\n\nexport interface RoleInfo {\n  id?: number\n  slug: string\n  name?: string\n  color?: string\n  permissions?: readonly string[] | null\n  project_scope?: 'all' | 'assigned' | string\n  plugin_access?: readonly string[] | 'all' | null\n}\n\nexport interface PermissionUser {\n  role?: string | null\n  role_obj?: RoleInfo | null\n  roleObj?: RoleInfo | null\n  permissions?: readonly string[] | null\n}\n\nexport interface AccessPolicy {\n  audience?: AccessAudienceInput\n  visibleFor?: AccessAudienceInput\n  requiresAuth?: boolean\n  requiresAdmin?: boolean\n  permissions?: readonly string[]\n  anyPermissions?: readonly string[]\n  plugin?: string\n}\n\n/**\n * An object that carries an access rule.\n *\n * The nested `access` policy is the supported shape. The four flat fields are\n * the pre-1.2 spelling of the same four `AccessPolicy` fields; they still work\n * but are deprecated, and `normalizeAccessPolicy()` lets the nested policy win\n * wherever both are given.\n */\nexport interface AccessControlled {\n  /** The access policy. Preferred over the flat fields below. */\n  access?: AccessPolicy\n  /**\n   * @deprecated Since MINT 1.2; use `access.visibleFor` instead. The flat\n   * duplicate is removed in 1.3.\n   */\n  visibleFor?: AccessAudienceInput\n  /**\n   * @deprecated Since MINT 1.2; use `access.requiresAdmin` instead. The flat\n   * duplicate is removed in 1.3.\n   */\n  requiresAdmin?: boolean\n  /**\n   * @deprecated Since MINT 1.2; use `access.permissions` instead. The flat\n   * duplicate is removed in 1.3.\n   */\n  permissions?: readonly string[]\n  /**\n   * @deprecated Since MINT 1.2; use `access.anyPermissions` instead. The flat\n   * duplicate is removed in 1.3.\n   */\n  anyPermissions?: readonly string[]\n}\n\nexport function getRoleInfo(user: PermissionUser | null | undefined): RoleInfo | null {\n  return user?.roleObj ?? user?.role_obj ?? null\n}\n\nexport function isAdminRole(role: string | null | undefined): boolean {\n  return role === ADMIN_ROLE\n}\n\nexport function isAdminUser(user: PermissionUser | null | undefined): boolean {\n  return isAdminRole(user?.role) || getRoleInfo(user)?.slug === ADMIN_ROLE\n}\n\nexport function getAccessAudience(user: PermissionUser | null | undefined): Exclude<AccessAudience, 'all'> {\n  return isAdminUser(user) ? 'admin' : 'user'\n}\n\nexport function getUserPermissions(user: PermissionUser | null | undefined): string[] {\n  const rolePermissions = getRoleInfo(user)?.permissions\n  if (rolePermissions?.length) return [...rolePermissions]\n  return [...(user?.permissions ?? [])]\n}\n\nexport function hasAllPermissions(\n  user: PermissionUser | null | undefined,\n  permissions: readonly string[] = [],\n): boolean {\n  if (permissions.length === 0) return true\n  if (isAdminUser(user)) return true\n  const granted = new Set(getUserPermissions(user))\n  return permissions.every(permission => granted.has(permission))\n}\n\nexport function hasAnyPermission(\n  user: PermissionUser | null | undefined,\n  permissions: readonly string[] = [],\n): boolean {\n  if (permissions.length === 0) return true\n  if (isAdminUser(user)) return true\n  const granted = new Set(getUserPermissions(user))\n  return permissions.some(permission => granted.has(permission))\n}\n\nexport function canAccessAdmin(user: PermissionUser | null | undefined): boolean {\n  return isAdminUser(user) || hasAnyPermission(user, ADMIN_PANEL_PERMISSIONS)\n}\n\nexport function canAccessPlugin(\n  user: PermissionUser | null | undefined,\n  pluginName: string | null | undefined,\n): boolean {\n  if (!pluginName) return true\n  const access = getRoleInfo(user)?.plugin_access\n  if (!access || access === 'all') return true\n  return Array.isArray(access) && access.includes(pluginName)\n}\n\n/**\n * Flatten an access rule — either shape, or a mix of both — into one policy.\n *\n * ## Precedence\n *\n * 1. A defined field on the nested `access` policy wins. It is the supported\n *    spelling, so an object that carries both shapes is read as \"the nested\n *    policy, with the deprecated flat fields as leftovers\".\n * 2. Otherwise the flat field on the rule itself is used.\n * 3. A field set to `undefined` on either side counts as unset and never\n *    masks the other side.\n *\n * Only `AccessPolicy` fields the flat shape never had (`audience`,\n * `requiresAuth`, `plugin`) can come from the nested policy alone; the four\n * duplicated fields are the ones this ordering exists for.\n */\nexport function normalizeAccessPolicy(rule: AccessControlled | AccessPolicy | undefined): AccessPolicy {\n  if (!rule) return {}\n  const { access: nested, ...flat } = rule as AccessPolicy & { access?: AccessPolicy }\n  const policy = { ...flat } as Record<string, unknown>\n\n  for (const [field, value] of Object.entries(nested ?? {})) {\n    if (value !== undefined) policy[field] = value\n  }\n\n  return policy as AccessPolicy\n}\n\nexport function canAccessByPolicy(\n  user: PermissionUser | null | undefined,\n  rule: AccessControlled | AccessPolicy | undefined,\n  isAuthenticated = user !== null && user !== undefined,\n): boolean {\n  const policy = normalizeAccessPolicy(rule)\n  if (policy.requiresAuth && !isAuthenticated) return false\n  if (policy.requiresAdmin && !isAdminUser(user)) return false\n  if (!audienceAllowsUser(policy.visibleFor ?? policy.audience, user)) return false\n  if (!hasAllPermissions(user, policy.permissions)) return false\n  if (!hasAnyPermission(user, policy.anyPermissions)) return false\n  if (policy.plugin && !canAccessPlugin(user, policy.plugin)) return false\n  return true\n}\n\nfunction audienceAllowsUser(\n  audience: AccessAudienceInput | undefined,\n  user: PermissionUser | null | undefined,\n): boolean {\n  if (audience === undefined) return true\n  const allowed = Array.isArray(audience) ? audience : [audience]\n  if (allowed.includes('all')) return true\n  return allowed.includes(getAccessAudience(user))\n}\n"],"mappings":";AAAA,IAAa,aAAa;AAE1B,IAAa,0BAA0B;CACrC;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAiED,SAAgB,YAAY,MAA0D;AACpF,QAAO,MAAM,WAAW,MAAM,YAAY;;AAG5C,SAAgB,YAAY,MAA0C;AACpE,QAAO,SAAS;;AAGlB,SAAgB,YAAY,MAAkD;AAC5E,QAAO,YAAY,MAAM,KAAK,IAAI,YAAY,KAAK,EAAE,SAAA;;AAGvD,SAAgB,kBAAkB,MAAyE;AACzG,QAAO,YAAY,KAAK,GAAG,UAAU;;AAGvC,SAAgB,mBAAmB,MAAmD;CACpF,MAAM,kBAAkB,YAAY,KAAK,EAAE;AAC3C,KAAI,iBAAiB,OAAQ,QAAO,CAAC,GAAG,gBAAgB;AACxD,QAAO,CAAC,GAAI,MAAM,eAAe,EAAE,CAAE;;AAGvC,SAAgB,kBACd,MACA,cAAiC,EAAE,EAC1B;AACT,KAAI,YAAY,WAAW,EAAG,QAAO;AACrC,KAAI,YAAY,KAAK,CAAE,QAAO;CAC9B,MAAM,UAAU,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACjD,QAAO,YAAY,OAAM,eAAc,QAAQ,IAAI,WAAW,CAAC;;AAGjE,SAAgB,iBACd,MACA,cAAiC,EAAE,EAC1B;AACT,KAAI,YAAY,WAAW,EAAG,QAAO;AACrC,KAAI,YAAY,KAAK,CAAE,QAAO;CAC9B,MAAM,UAAU,IAAI,IAAI,mBAAmB,KAAK,CAAC;AACjD,QAAO,YAAY,MAAK,eAAc,QAAQ,IAAI,WAAW,CAAC;;AAGhE,SAAgB,eAAe,MAAkD;AAC/E,QAAO,YAAY,KAAK,IAAI,iBAAiB,MAAM,wBAAwB;;AAG7E,SAAgB,gBACd,MACA,YACS;AACT,KAAI,CAAC,WAAY,QAAO;CACxB,MAAM,SAAS,YAAY,KAAK,EAAE;AAClC,KAAI,CAAC,UAAU,WAAW,MAAO,QAAO;AACxC,QAAO,MAAM,QAAQ,OAAO,IAAI,OAAO,SAAS,WAAW;;;;;;;;;;;;;;;;;;AAmB7D,SAAgB,sBAAsB,MAAiE;AACrG,KAAI,CAAC,KAAM,QAAO,EAAE;CACpB,MAAM,EAAE,QAAQ,QAAQ,GAAG,SAAS;CACpC,MAAM,SAAS,EAAE,GAAG,MAAM;AAE1B,MAAK,MAAM,CAAC,OAAO,UAAU,OAAO,QAAQ,UAAU,EAAE,CAAC,CACvD,KAAI,UAAU,KAAA,EAAW,QAAO,SAAS;AAG3C,QAAO;;AAGT,SAAgB,kBACd,MACA,MACA,kBAAkB,SAAS,QAAQ,SAAS,KAAA,GACnC;CACT,MAAM,SAAS,sBAAsB,KAAK;AAC1C,KAAI,OAAO,gBAAgB,CAAC,gBAAiB,QAAO;AACpD,KAAI,OAAO,iBAAiB,CAAC,YAAY,KAAK,CAAE,QAAO;AACvD,KAAI,CAAC,mBAAmB,OAAO,cAAc,OAAO,UAAU,KAAK,CAAE,QAAO;AAC5E,KAAI,CAAC,kBAAkB,MAAM,OAAO,YAAY,CAAE,QAAO;AACzD,KAAI,CAAC,iBAAiB,MAAM,OAAO,eAAe,CAAE,QAAO;AAC3D,KAAI,OAAO,UAAU,CAAC,gBAAgB,MAAM,OAAO,OAAO,CAAE,QAAO;AACnE,QAAO;;AAGT,SAAS,mBACP,UACA,MACS;AACT,KAAI,aAAa,KAAA,EAAW,QAAO;CACnC,MAAM,UAAU,MAAM,QAAQ,SAAS,GAAG,WAAW,CAAC,SAAS;AAC/D,KAAI,QAAQ,SAAS,MAAM,CAAE,QAAO;AACpC,QAAO,QAAQ,SAAS,kBAAkB,KAAK,CAAC"}

package/dist/stores/index.d.ts

@@ -1,3 +1,3 @@
 export { useAuthStore } from './auth';
-export { useSettingsStore, colorPalettes, type SettingsState } from './settings';
+export { useSettingsStore, tryUseSettingsStore, colorPalettes, paletteCssVariables, tableDensityToSize, PALETTE_CSS_VARIABLES, type SettingsState, } from './settings';
 export { useExperimentStore } from './experiment';

package/dist/stores/index.js

@@ -1,3 +1,3 @@
-import { a as colorPalettes, i as useAuthStore, o as useSettingsStore } from "../useApi-CDBq6z23.js";
-import { t as useExperimentStore } from "../experiment-Y9Iz7KYi.js";
-export { colorPalettes, useAuthStore, useExperimentStore, useSettingsStore };
+import { a as useAuthStore, c as paletteCssVariables, d as useSettingsStore, l as tableDensityToSize, o as PALETTE_CSS_VARIABLES, s as colorPalettes, u as tryUseSettingsStore } from "../errors-_W0-LbA6.js";
+import { t as useExperimentStore } from "../experiment-Cwl9AYxw.js";
+export { PALETTE_CSS_VARIABLES, colorPalettes, paletteCssVariables, tableDensityToSize, tryUseSettingsStore, useAuthStore, useExperimentStore, useSettingsStore };

package/dist/stores/settings.d.ts

@@ -21,6 +21,18 @@ export declare const colorPalettes: Record<ColorPalette, {
     name: string;
     hues: [number, number];
 }>;
+/**
+ * Custom properties a non-default palette overrides on `<html>`.
+ *
+ * The saturation/lightness pairs are lifted from the canonical indigo/orange
+ * tokens in `styles/variables.css` so only the hue moves; the `default`
+ * palette writes nothing at all and the stylesheet values stand.
+ */
+export declare const PALETTE_CSS_VARIABLES: readonly ["--color-primary", "--color-primary-hover", "--color-primary-soft", "--color-cta", "--color-cta-hover"];
+/** Build the `<html>` custom-property overrides for a palette. */
+export declare function paletteCssVariables(palette: ColorPalette): Record<string, string>;
+/** Map a table density onto the `size` prop shared by the SDK table components. */
+export declare function tableDensityToSize(density: TableDensity): 'sm' | 'md' | 'lg';
 export declare const useSettingsStore: import('pinia').StoreDefinition<"mint-settings", Pick<{
     serverHost: import('vue').Ref<string, string>;
     serverPort: import('vue').Ref<number, number>;
@@ -33,9 +45,12 @@ export declare const useSettingsStore: import('pinia').StoreDefinition<"mint-set
     tableDensity: import('vue').Ref<TableDensity, TableDensity>;
     initialize: () => void;
     applyTheme: () => void;
+    applyPalette: () => void;
+    applyDensity: () => void;
     persistSettings: () => void;
     resetToDefaults: () => void;
     getPaletteHues: () => [number, number];
+    getTableSize: () => "sm" | "md" | "lg";
     isDark: () => boolean;
     getApiBaseUrl: () => string;
     getWsBaseUrl: () => string;
@@ -51,9 +66,12 @@ export declare const useSettingsStore: import('pinia').StoreDefinition<"mint-set
     tableDensity: import('vue').Ref<TableDensity, TableDensity>;
     initialize: () => void;
     applyTheme: () => void;
+    applyPalette: () => void;
+    applyDensity: () => void;
     persistSettings: () => void;
     resetToDefaults: () => void;
     getPaletteHues: () => [number, number];
+    getTableSize: () => "sm" | "md" | "lg";
     isDark: () => boolean;
     getApiBaseUrl: () => string;
     getWsBaseUrl: () => string;
@@ -69,10 +87,22 @@ export declare const useSettingsStore: import('pinia').StoreDefinition<"mint-set
     tableDensity: import('vue').Ref<TableDensity, TableDensity>;
     initialize: () => void;
     applyTheme: () => void;
+    applyPalette: () => void;
+    applyDensity: () => void;
     persistSettings: () => void;
     resetToDefaults: () => void;
     getPaletteHues: () => [number, number];
+    getTableSize: () => "sm" | "md" | "lg";
     isDark: () => boolean;
     getApiBaseUrl: () => string;
     getWsBaseUrl: () => string;
-}, "initialize" | "applyTheme" | "persistSettings" | "resetToDefaults" | "getPaletteHues" | "isDark" | "getApiBaseUrl" | "getWsBaseUrl">>;
+}, "initialize" | "applyTheme" | "applyPalette" | "applyDensity" | "persistSettings" | "resetToDefaults" | "getPaletteHues" | "getTableSize" | "isDark" | "getApiBaseUrl" | "getWsBaseUrl">>;
+/**
+ * Read the settings store without requiring Pinia to be installed.
+ *
+ * SDK components are mounted standalone (unit tests, Histoire stories, plugin
+ * previews) where no Pinia instance exists. They use this to pick up a user's
+ * preferences when the platform is running and fall back to their own defaults
+ * otherwise, instead of throwing.
+ */
+export declare function tryUseSettingsStore(): ReturnType<typeof useSettingsStore> | null;