@posiwise/common-services 0.2.7 → 0.2.8

package/fesm2022/posiwise-common-services.mjs

@@ -1452,6 +1452,9 @@ class PermissionService {
         if (!permission) {
             return false;
         }
+        if (typeof permission === 'boolean') {
+            return permission;
+        }
         let expr = '';
         if (permission === PERMISSION_NAMES.SuperAdmin) {
             return this.isSuperAdmin();
@@ -1478,7 +1481,24 @@ class PermissionService {
         expr = this.handleNonBooleanPermissions(permission, expr, productKey, permission_key, productSlug);
         // Now expr is made of true/false values with &&, ||, ()
         // Safe parser: no eval() - CSP 'unsafe-eval' not required
-        return this.evaluateBooleanExpression(expr);
+        const ourResult = this.evaluateBooleanExpression(expr);
+        // Comparison: warn if result differs from legacy eval (for verification, no behavior change)
+        try {
+            // eslint-disable-next-line no-eval
+            const evalResult = eval(expr);
+            const evalAsBool = !!evalResult;
+            if (evalAsBool !== ourResult) {
+                console.warn('[PermissionService] Result diff vs eval:', {
+                    expr,
+                    ourResult,
+                    evalResult
+                });
+            }
+        }
+        catch {
+            // eval blocked (CSP) or invalid - skip comparison
+        }
+        return ourResult;
     }
     /** Safe boolean expression parser - replaces eval() for CSP compliance. */
     evaluateBooleanExpression(expr) {