@pyreon/permissions 0.11.4 → 0.11.6

package/README.md

@@ -20,19 +20,23 @@ const can = createPermissions({
   'users.manage': false,
 })
 
-can('posts.read')              // true — reactive in effects/JSX
-can('posts.update', myPost)    // evaluates predicate
-can.not('billing.export')      // true if denied
-can.all('posts.read', 'posts.create')  // true if both granted
-can.any('posts.read', 'users.manage')  // true if any granted
+can('posts.read') // true — reactive in effects/JSX
+can('posts.update', myPost) // evaluates predicate
+can.not('billing.export') // true if denied
+can.all('posts.read', 'posts.create') // true if both granted
+can.any('posts.read', 'users.manage') // true if any granted
 
 // Update after login / role change
 can.set(fromRole(user.role))
 can.patch({ 'billing.export': true })
 
 // Reactive in JSX
-{() => can('posts.delete') && <DeleteButton />}
-{() => can('users.manage') && <AdminPanel />}
+{
+  ;() => can('posts.delete') && <DeleteButton />
+}
+{
+  ;() => can('users.manage') && <AdminPanel />
+}
 ```
 
 ## Wildcards
@@ -44,7 +48,7 @@ can.patch({ 'billing.export': true })
 ```tsx
 import { PermissionsProvider, usePermissions } from '@pyreon/permissions'
 
-<PermissionsProvider instance={can}>
+;<PermissionsProvider instance={can}>
   <App />
 </PermissionsProvider>
 
@@ -58,16 +62,16 @@ const can = usePermissions()
 
 Create a reactive permissions instance. Permission values are `boolean` (static) or `(context?) => boolean` (predicate).
 
-| Method | Description |
-| --- | --- |
-| `can(key, context?)` | Check a permission (reactive) |
-| `can.not(key)` | Inverse check |
-| `can.all(...keys)` | True if all granted |
-| `can.any(...keys)` | True if any granted |
-| `can.set(map)` | Replace all permissions |
-| `can.patch(map)` | Merge permissions |
-| `can.granted()` | `Computed<string[]>` of all granted keys |
-| `can.entries()` | `Computed<[key, value][]>` for introspection |
+| Method               | Description                                  |
+| -------------------- | -------------------------------------------- |
+| `can(key, context?)` | Check a permission (reactive)                |
+| `can.not(key)`       | Inverse check                                |
+| `can.all(...keys)`   | True if all granted                          |
+| `can.any(...keys)`   | True if any granted                          |
+| `can.set(map)`       | Replace all permissions                      |
+| `can.patch(map)`     | Merge permissions                            |
+| `can.granted()`      | `Computed<string[]>` of all granted keys     |
+| `can.entries()`      | `Computed<[key, value][]>` for introspection |
 
 ### `PermissionsProvider` / `usePermissions()`
 

package/lib/analysis/index.js.html

@@ -5386,7 +5386,7 @@ var drawChart = (function (exports) {
   </script>
   <script>
     /*<!--*/
-    const data = {"version":2,"tree":{"name":"root","children":[{"name":"index.js","children":[{"name":"src","children":[{"uid":"54dceade-1","name":"context.ts"},{"uid":"54dceade-3","name":"permissions.ts"},{"uid":"54dceade-5","name":"index.ts"}]}]}],"isRoot":true},"nodeParts":{"54dceade-1":{"renderedLength":933,"gzipLength":457,"brotliLength":0,"metaUid":"54dceade-0"},"54dceade-3":{"renderedLength":2767,"gzipLength":1113,"brotliLength":0,"metaUid":"54dceade-2"},"54dceade-5":{"renderedLength":0,"gzipLength":0,"brotliLength":0,"metaUid":"54dceade-4"}},"nodeMetas":{"54dceade-0":{"id":"/src/context.ts","moduleParts":{"index.js":"54dceade-1"},"imported":[{"uid":"54dceade-6"}],"importedBy":[{"uid":"54dceade-4"}]},"54dceade-2":{"id":"/src/permissions.ts","moduleParts":{"index.js":"54dceade-3"},"imported":[{"uid":"54dceade-7"}],"importedBy":[{"uid":"54dceade-4"}]},"54dceade-4":{"id":"/src/index.ts","moduleParts":{"index.js":"54dceade-5"},"imported":[{"uid":"54dceade-0"},{"uid":"54dceade-2"}],"importedBy":[],"isEntry":true},"54dceade-6":{"id":"@pyreon/core","moduleParts":{},"imported":[],"importedBy":[{"uid":"54dceade-0"}]},"54dceade-7":{"id":"@pyreon/reactivity","moduleParts":{},"imported":[],"importedBy":[{"uid":"54dceade-2"}]}},"env":{"rollup":"4.23.0"},"options":{"gzip":true,"brotli":false,"sourcemap":false}};
+    const data = {"version":2,"tree":{"name":"root","children":[{"name":"index.js","children":[{"name":"src","children":[{"uid":"5071c99d-1","name":"context.ts"},{"uid":"5071c99d-3","name":"permissions.ts"},{"uid":"5071c99d-5","name":"index.ts"}]}]}],"isRoot":true},"nodeParts":{"5071c99d-1":{"renderedLength":933,"gzipLength":457,"brotliLength":0,"metaUid":"5071c99d-0"},"5071c99d-3":{"renderedLength":2817,"gzipLength":1123,"brotliLength":0,"metaUid":"5071c99d-2"},"5071c99d-5":{"renderedLength":0,"gzipLength":0,"brotliLength":0,"metaUid":"5071c99d-4"}},"nodeMetas":{"5071c99d-0":{"id":"/src/context.ts","moduleParts":{"index.js":"5071c99d-1"},"imported":[{"uid":"5071c99d-6"}],"importedBy":[{"uid":"5071c99d-4"}]},"5071c99d-2":{"id":"/src/permissions.ts","moduleParts":{"index.js":"5071c99d-3"},"imported":[{"uid":"5071c99d-7"}],"importedBy":[{"uid":"5071c99d-4"}]},"5071c99d-4":{"id":"/src/index.ts","moduleParts":{"index.js":"5071c99d-5"},"imported":[{"uid":"5071c99d-0"},{"uid":"5071c99d-2"}],"importedBy":[],"isEntry":true},"5071c99d-6":{"id":"@pyreon/core","moduleParts":{},"imported":[],"importedBy":[{"uid":"5071c99d-0"}]},"5071c99d-7":{"id":"@pyreon/reactivity","moduleParts":{},"imported":[],"importedBy":[{"uid":"5071c99d-2"}]}},"env":{"rollup":"4.23.0"},"options":{"gzip":true,"brotli":false,"sourcemap":false}};
 
     const run = () => {
       const width = window.innerWidth;

package/lib/index.js

@@ -1,5 +1,5 @@
 import { createContext, provide, useContext } from "@pyreon/core";
-import { computed, signal } from "@pyreon/reactivity";
+import { batch, computed, signal } from "@pyreon/reactivity";
 
 //#region src/context.ts
 const PermissionsContext = createContext(null);
@@ -116,14 +116,18 @@ function createPermissions(initial) {
 		return keys.some((key) => can(key));
 	};
 	can.set = (permissions) => {
-		store.set(toMap(permissions));
-		version.update((v) => v + 1);
+		batch(() => {
+			store.set(toMap(permissions));
+			version.update((v) => v + 1);
+		});
 	};
 	can.patch = (permissions) => {
-		const current = store.peek();
-		for (const [key, value] of Object.entries(permissions)) current.set(key, value);
-		store.set(current);
-		version.update((v) => v + 1);
+		batch(() => {
+			const current = store.peek();
+			for (const [key, value] of Object.entries(permissions)) current.set(key, value);
+			store.set(current);
+			version.update((v) => v + 1);
+		});
 	};
 	can.granted = computed(() => {
 		version();

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/context.ts","../src/permissions.ts"],"sourcesContent":["import type { VNodeChild } from \"@pyreon/core\"\nimport { createContext, provide, useContext } from \"@pyreon/core\"\nimport type { Permissions } from \"./types\"\n\nconst PermissionsContext = createContext<Permissions | null>(null)\n\n/**\n * Provide a permissions instance to descendant components.\n * Use this for SSR isolation or testing — each request/test gets its own instance.\n *\n * @example\n * ```tsx\n * const can = createPermissions({ ... })\n *\n * <PermissionsProvider instance={can}>\n *   <App />\n * </PermissionsProvider>\n * ```\n */\nexport function PermissionsProvider(props: {\n  instance: Permissions\n  children?: VNodeChild\n}): VNodeChild {\n  provide(PermissionsContext, props.instance)\n\n  return props.children ?? null\n}\n\n/**\n * Access the nearest permissions instance from context.\n * Must be used within a `<PermissionsProvider>`.\n *\n * @example\n * ```tsx\n * const can = usePermissions()\n * {() => can('posts.read') && <PostList />}\n * ```\n */\nexport function usePermissions(): Permissions {\n  const instance = useContext(PermissionsContext)\n  if (!instance) {\n    throw new Error(\n      \"[@pyreon/permissions] usePermissions() must be used within <PermissionsProvider>.\",\n    )\n  }\n  return instance\n}\n","import { computed, signal } from \"@pyreon/reactivity\"\nimport type { PermissionMap, Permissions, PermissionValue } from \"./types\"\n\n/**\n * Resolve a permission key against the map.\n * Resolution order: exact match → wildcard (e.g., 'posts.*') → global wildcard ('*') → false.\n */\n/**\n * Safely evaluate a permission value. Predicates that throw are treated as denied.\n */\nfunction evaluate(value: PermissionValue, context?: unknown): boolean {\n  if (typeof value === \"function\") {\n    try {\n      return value(context)\n    } catch {\n      return false\n    }\n  }\n  return value\n}\n\nfunction resolve(map: Map<string, PermissionValue>, key: string, context?: unknown): boolean {\n  // 1. Exact match\n  const exact = map.get(key)\n  if (exact !== undefined) {\n    return evaluate(exact, context)\n  }\n\n  // 2. Wildcard match — 'posts.read' matches 'posts.*'\n  const dotIndex = key.lastIndexOf(\".\")\n  if (dotIndex !== -1) {\n    const prefix = key.slice(0, dotIndex)\n    const wildcard = map.get(`${prefix}.*`)\n    if (wildcard !== undefined) {\n      return evaluate(wildcard, context)\n    }\n  }\n\n  // 3. Global wildcard\n  const global = map.get(\"*\")\n  if (global !== undefined) {\n    return evaluate(global, context)\n  }\n\n  // 4. No match → denied\n  return false\n}\n\n/**\n * Create a reactive permissions instance.\n *\n * The returned `can` function checks permissions reactively —\n * reads update automatically when permissions change via `set()` or `patch()`.\n *\n * @param initial - Optional initial permission map\n * @returns A callable `Permissions` instance\n *\n * @example\n * ```tsx\n * const can = createPermissions({\n *   'posts.read': true,\n *   'posts.update': (post: Post) => post.authorId === userId(),\n *   'users.manage': false,\n * })\n *\n * // Check (reactive in effects/computeds/JSX)\n * can('posts.read')              // true\n * can('posts.update', myPost)    // evaluates predicate\n *\n * // JSX\n * {() => can('posts.delete') && <DeleteButton />}\n *\n * // Update\n * can.set({ 'posts.read': true, 'admin': true })\n * can.patch({ 'users.manage': true })\n * ```\n */\nexport function createPermissions(initial?: PermissionMap): Permissions {\n  // Internal reactive state — a signal holding the permission map\n  const store = signal(toMap(initial))\n  // Version counter — incremented on every set/patch to trigger reactive updates\n  const version = signal(0)\n\n  function toMap(obj?: PermissionMap): Map<string, PermissionValue> {\n    if (!obj) return new Map()\n    return new Map(Object.entries(obj))\n  }\n\n  // The main check function — reads `version` to subscribe in reactive contexts\n  function can(key: string, context?: unknown): boolean {\n    // Reading version subscribes this call to reactive updates\n    version()\n    return resolve(store.peek(), key, context)\n  }\n\n  can.not = (key: string, context?: unknown): boolean => {\n    return !can(key, context)\n  }\n\n  can.all = (...keys: string[]): boolean => {\n    return keys.every((key) => can(key))\n  }\n\n  can.any = (...keys: string[]): boolean => {\n    return keys.some((key) => can(key))\n  }\n\n  can.set = (permissions: PermissionMap): void => {\n    store.set(toMap(permissions))\n    version.update((v) => v + 1)\n  }\n\n  can.patch = (permissions: PermissionMap): void => {\n    const current = store.peek()\n    for (const [key, value] of Object.entries(permissions)) {\n      current.set(key, value)\n    }\n    store.set(current)\n    version.update((v) => v + 1)\n  }\n\n  can.granted = computed(() => {\n    version()\n    const keys: string[] = []\n    for (const [key, value] of store.peek()) {\n      // Static true or predicate (capability exists)\n      if (value === true || typeof value === \"function\") {\n        keys.push(key)\n      }\n    }\n    return keys\n  })\n\n  can.entries = computed(() => {\n    version()\n    return [...store.peek().entries()]\n  })\n\n  return can as Permissions\n}\n"],"mappings":";;;;AAIA,MAAM,qBAAqB,cAAkC,KAAK;;;;;;;;;;;;;;AAelE,SAAgB,oBAAoB,OAGrB;AACb,SAAQ,oBAAoB,MAAM,SAAS;AAE3C,QAAO,MAAM,YAAY;;;;;;;;;;;;AAa3B,SAAgB,iBAA8B;CAC5C,MAAM,WAAW,WAAW,mBAAmB;AAC/C,KAAI,CAAC,SACH,OAAM,IAAI,MACR,oFACD;AAEH,QAAO;;;;;;;;;;;;ACnCT,SAAS,SAAS,OAAwB,SAA4B;AACpE,KAAI,OAAO,UAAU,WACnB,KAAI;AACF,SAAO,MAAM,QAAQ;SACf;AACN,SAAO;;AAGX,QAAO;;AAGT,SAAS,QAAQ,KAAmC,KAAa,SAA4B;CAE3F,MAAM,QAAQ,IAAI,IAAI,IAAI;AAC1B,KAAI,UAAU,OACZ,QAAO,SAAS,OAAO,QAAQ;CAIjC,MAAM,WAAW,IAAI,YAAY,IAAI;AACrC,KAAI,aAAa,IAAI;EACnB,MAAM,SAAS,IAAI,MAAM,GAAG,SAAS;EACrC,MAAM,WAAW,IAAI,IAAI,GAAG,OAAO,IAAI;AACvC,MAAI,aAAa,OACf,QAAO,SAAS,UAAU,QAAQ;;CAKtC,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,KAAI,WAAW,OACb,QAAO,SAAS,QAAQ,QAAQ;AAIlC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCT,SAAgB,kBAAkB,SAAsC;CAEtE,MAAM,QAAQ,OAAO,MAAM,QAAQ,CAAC;CAEpC,MAAM,UAAU,OAAO,EAAE;CAEzB,SAAS,MAAM,KAAmD;AAChE,MAAI,CAAC,IAAK,wBAAO,IAAI,KAAK;AAC1B,SAAO,IAAI,IAAI,OAAO,QAAQ,IAAI,CAAC;;CAIrC,SAAS,IAAI,KAAa,SAA4B;AAEpD,WAAS;AACT,SAAO,QAAQ,MAAM,MAAM,EAAE,KAAK,QAAQ;;AAG5C,KAAI,OAAO,KAAa,YAA+B;AACrD,SAAO,CAAC,IAAI,KAAK,QAAQ;;AAG3B,KAAI,OAAO,GAAG,SAA4B;AACxC,SAAO,KAAK,OAAO,QAAQ,IAAI,IAAI,CAAC;;AAGtC,KAAI,OAAO,GAAG,SAA4B;AACxC,SAAO,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC;;AAGrC,KAAI,OAAO,gBAAqC;AAC9C,QAAM,IAAI,MAAM,YAAY,CAAC;AAC7B,UAAQ,QAAQ,MAAM,IAAI,EAAE;;AAG9B,KAAI,SAAS,gBAAqC;EAChD,MAAM,UAAU,MAAM,MAAM;AAC5B,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,CACpD,SAAQ,IAAI,KAAK,MAAM;AAEzB,QAAM,IAAI,QAAQ;AAClB,UAAQ,QAAQ,MAAM,IAAI,EAAE;;AAG9B,KAAI,UAAU,eAAe;AAC3B,WAAS;EACT,MAAM,OAAiB,EAAE;AACzB,OAAK,MAAM,CAAC,KAAK,UAAU,MAAM,MAAM,CAErC,KAAI,UAAU,QAAQ,OAAO,UAAU,WACrC,MAAK,KAAK,IAAI;AAGlB,SAAO;GACP;AAEF,KAAI,UAAU,eAAe;AAC3B,WAAS;AACT,SAAO,CAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;GAClC;AAEF,QAAO"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/context.ts","../src/permissions.ts"],"sourcesContent":["import type { VNodeChild } from '@pyreon/core'\nimport { createContext, provide, useContext } from '@pyreon/core'\nimport type { Permissions } from './types'\n\nconst PermissionsContext = createContext<Permissions | null>(null)\n\n/**\n * Provide a permissions instance to descendant components.\n * Use this for SSR isolation or testing — each request/test gets its own instance.\n *\n * @example\n * ```tsx\n * const can = createPermissions({ ... })\n *\n * <PermissionsProvider instance={can}>\n *   <App />\n * </PermissionsProvider>\n * ```\n */\nexport function PermissionsProvider(props: {\n  instance: Permissions\n  children?: VNodeChild\n}): VNodeChild {\n  provide(PermissionsContext, props.instance)\n\n  return props.children ?? null\n}\n\n/**\n * Access the nearest permissions instance from context.\n * Must be used within a `<PermissionsProvider>`.\n *\n * @example\n * ```tsx\n * const can = usePermissions()\n * {() => can('posts.read') && <PostList />}\n * ```\n */\nexport function usePermissions(): Permissions {\n  const instance = useContext(PermissionsContext)\n  if (!instance) {\n    throw new Error(\n      '[@pyreon/permissions] usePermissions() must be used within <PermissionsProvider>.',\n    )\n  }\n  return instance\n}\n","import { batch, computed, signal } from '@pyreon/reactivity'\nimport type { PermissionMap, Permissions, PermissionValue } from './types'\n\n/**\n * Resolve a permission key against the map.\n * Resolution order: exact match → wildcard (e.g., 'posts.*') → global wildcard ('*') → false.\n */\n/**\n * Safely evaluate a permission value. Predicates that throw are treated as denied.\n */\nfunction evaluate(value: PermissionValue, context?: unknown): boolean {\n  if (typeof value === 'function') {\n    try {\n      return value(context)\n    } catch {\n      return false\n    }\n  }\n  return value\n}\n\nfunction resolve(map: Map<string, PermissionValue>, key: string, context?: unknown): boolean {\n  // 1. Exact match\n  const exact = map.get(key)\n  if (exact !== undefined) {\n    return evaluate(exact, context)\n  }\n\n  // 2. Wildcard match — 'posts.read' matches 'posts.*'\n  const dotIndex = key.lastIndexOf('.')\n  if (dotIndex !== -1) {\n    const prefix = key.slice(0, dotIndex)\n    const wildcard = map.get(`${prefix}.*`)\n    if (wildcard !== undefined) {\n      return evaluate(wildcard, context)\n    }\n  }\n\n  // 3. Global wildcard\n  const global = map.get('*')\n  if (global !== undefined) {\n    return evaluate(global, context)\n  }\n\n  // 4. No match → denied\n  return false\n}\n\n/**\n * Create a reactive permissions instance.\n *\n * The returned `can` function checks permissions reactively —\n * reads update automatically when permissions change via `set()` or `patch()`.\n *\n * @param initial - Optional initial permission map\n * @returns A callable `Permissions` instance\n *\n * @example\n * ```tsx\n * const can = createPermissions({\n *   'posts.read': true,\n *   'posts.update': (post: Post) => post.authorId === userId(),\n *   'users.manage': false,\n * })\n *\n * // Check (reactive in effects/computeds/JSX)\n * can('posts.read')              // true\n * can('posts.update', myPost)    // evaluates predicate\n *\n * // JSX\n * {() => can('posts.delete') && <DeleteButton />}\n *\n * // Update\n * can.set({ 'posts.read': true, 'admin': true })\n * can.patch({ 'users.manage': true })\n * ```\n */\nexport function createPermissions(initial?: PermissionMap): Permissions {\n  // Internal reactive state — a signal holding the permission map\n  const store = signal(toMap(initial))\n  // Version counter — incremented on every set/patch to trigger reactive updates\n  const version = signal(0)\n\n  function toMap(obj?: PermissionMap): Map<string, PermissionValue> {\n    if (!obj) return new Map()\n    return new Map(Object.entries(obj))\n  }\n\n  // The main check function — reads `version` to subscribe in reactive contexts\n  function can(key: string, context?: unknown): boolean {\n    // Reading version subscribes this call to reactive updates\n    version()\n    return resolve(store.peek(), key, context)\n  }\n\n  can.not = (key: string, context?: unknown): boolean => {\n    return !can(key, context)\n  }\n\n  can.all = (...keys: string[]): boolean => {\n    return keys.every((key) => can(key))\n  }\n\n  can.any = (...keys: string[]): boolean => {\n    return keys.some((key) => can(key))\n  }\n\n  can.set = (permissions: PermissionMap): void => {\n    batch(() => {\n      store.set(toMap(permissions))\n      version.update((v) => v + 1)\n    })\n  }\n\n  can.patch = (permissions: PermissionMap): void => {\n    batch(() => {\n      const current = store.peek()\n      for (const [key, value] of Object.entries(permissions)) {\n        current.set(key, value)\n      }\n      store.set(current)\n      version.update((v) => v + 1)\n    })\n  }\n\n  can.granted = computed(() => {\n    version()\n    const keys: string[] = []\n    for (const [key, value] of store.peek()) {\n      // Static true or predicate (capability exists)\n      if (value === true || typeof value === 'function') {\n        keys.push(key)\n      }\n    }\n    return keys\n  })\n\n  can.entries = computed(() => {\n    version()\n    return [...store.peek().entries()]\n  })\n\n  return can as Permissions\n}\n"],"mappings":";;;;AAIA,MAAM,qBAAqB,cAAkC,KAAK;;;;;;;;;;;;;;AAelE,SAAgB,oBAAoB,OAGrB;AACb,SAAQ,oBAAoB,MAAM,SAAS;AAE3C,QAAO,MAAM,YAAY;;;;;;;;;;;;AAa3B,SAAgB,iBAA8B;CAC5C,MAAM,WAAW,WAAW,mBAAmB;AAC/C,KAAI,CAAC,SACH,OAAM,IAAI,MACR,oFACD;AAEH,QAAO;;;;;;;;;;;;ACnCT,SAAS,SAAS,OAAwB,SAA4B;AACpE,KAAI,OAAO,UAAU,WACnB,KAAI;AACF,SAAO,MAAM,QAAQ;SACf;AACN,SAAO;;AAGX,QAAO;;AAGT,SAAS,QAAQ,KAAmC,KAAa,SAA4B;CAE3F,MAAM,QAAQ,IAAI,IAAI,IAAI;AAC1B,KAAI,UAAU,OACZ,QAAO,SAAS,OAAO,QAAQ;CAIjC,MAAM,WAAW,IAAI,YAAY,IAAI;AACrC,KAAI,aAAa,IAAI;EACnB,MAAM,SAAS,IAAI,MAAM,GAAG,SAAS;EACrC,MAAM,WAAW,IAAI,IAAI,GAAG,OAAO,IAAI;AACvC,MAAI,aAAa,OACf,QAAO,SAAS,UAAU,QAAQ;;CAKtC,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,KAAI,WAAW,OACb,QAAO,SAAS,QAAQ,QAAQ;AAIlC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCT,SAAgB,kBAAkB,SAAsC;CAEtE,MAAM,QAAQ,OAAO,MAAM,QAAQ,CAAC;CAEpC,MAAM,UAAU,OAAO,EAAE;CAEzB,SAAS,MAAM,KAAmD;AAChE,MAAI,CAAC,IAAK,wBAAO,IAAI,KAAK;AAC1B,SAAO,IAAI,IAAI,OAAO,QAAQ,IAAI,CAAC;;CAIrC,SAAS,IAAI,KAAa,SAA4B;AAEpD,WAAS;AACT,SAAO,QAAQ,MAAM,MAAM,EAAE,KAAK,QAAQ;;AAG5C,KAAI,OAAO,KAAa,YAA+B;AACrD,SAAO,CAAC,IAAI,KAAK,QAAQ;;AAG3B,KAAI,OAAO,GAAG,SAA4B;AACxC,SAAO,KAAK,OAAO,QAAQ,IAAI,IAAI,CAAC;;AAGtC,KAAI,OAAO,GAAG,SAA4B;AACxC,SAAO,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC;;AAGrC,KAAI,OAAO,gBAAqC;AAC9C,cAAY;AACV,SAAM,IAAI,MAAM,YAAY,CAAC;AAC7B,WAAQ,QAAQ,MAAM,IAAI,EAAE;IAC5B;;AAGJ,KAAI,SAAS,gBAAqC;AAChD,cAAY;GACV,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,YAAY,CACpD,SAAQ,IAAI,KAAK,MAAM;AAEzB,SAAM,IAAI,QAAQ;AAClB,WAAQ,QAAQ,MAAM,IAAI,EAAE;IAC5B;;AAGJ,KAAI,UAAU,eAAe;AAC3B,WAAS;EACT,MAAM,OAAiB,EAAE;AACzB,OAAK,MAAM,CAAC,KAAK,UAAU,MAAM,MAAM,CAErC,KAAI,UAAU,QAAQ,OAAO,UAAU,WACrC,MAAK,KAAK,IAAI;AAGlB,SAAO;GACP;AAEF,KAAI,UAAU,eAAe;AAC3B,WAAS;AACT,SAAO,CAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;GAClC;AAEF,QAAO"}

package/package.json

@@ -1,20 +1,17 @@
 {
   "name": "@pyreon/permissions",
-  "version": "0.11.4",
+  "version": "0.11.6",
   "description": "Reactive permissions for Pyreon — type-safe, signal-driven, universal",
+  "homepage": "https://github.com/pyreon/pyreon/tree/main/packages/permissions#readme",
+  "bugs": {
+    "url": "https://github.com/pyreon/pyreon/issues"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "https://github.com/pyreon/pyreon.git",
     "directory": "packages/fundamentals/permissions"
   },
-  "homepage": "https://github.com/pyreon/pyreon/tree/main/packages/permissions#readme",
-  "bugs": {
-    "url": "https://github.com/pyreon/pyreon/issues"
-  },
-  "publishConfig": {
-    "access": "public"
-  },
   "files": [
     "lib",
     "src",
@@ -22,6 +19,7 @@
     "LICENSE"
   ],
   "type": "module",
+  "sideEffects": false,
   "main": "./lib/index.js",
   "module": "./lib/index.js",
   "types": "./lib/types/index.d.ts",
@@ -32,22 +30,24 @@
       "types": "./lib/types/index.d.ts"
     }
   },
-  "sideEffects": false,
+  "publishConfig": {
+    "access": "public"
+  },
   "scripts": {
     "build": "vl_rolldown_build",
     "dev": "vl_rolldown_build-watch",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
-    "lint": "biome check ."
-  },
-  "peerDependencies": {
-    "@pyreon/core": "^0.11.4",
-    "@pyreon/reactivity": "^0.11.4"
+    "lint": "oxlint ."
   },
   "devDependencies": {
     "@happy-dom/global-registrator": "^20.8.3",
-    "@pyreon/core": "^0.11.4",
-    "@pyreon/reactivity": "^0.11.4",
+    "@pyreon/core": "^0.11.6",
+    "@pyreon/reactivity": "^0.11.6",
     "@vitus-labs/tools-lint": "^1.11.0"
+  },
+  "peerDependencies": {
+    "@pyreon/core": "^0.11.6",
+    "@pyreon/reactivity": "^0.11.6"
   }
 }

package/src/context.ts

@@ -1,6 +1,6 @@
-import type { VNodeChild } from "@pyreon/core"
-import { createContext, provide, useContext } from "@pyreon/core"
-import type { Permissions } from "./types"
+import type { VNodeChild } from '@pyreon/core'
+import { createContext, provide, useContext } from '@pyreon/core'
+import type { Permissions } from './types'
 
 const PermissionsContext = createContext<Permissions | null>(null)
 
@@ -40,7 +40,7 @@ export function usePermissions(): Permissions {
   const instance = useContext(PermissionsContext)
   if (!instance) {
     throw new Error(
-      "[@pyreon/permissions] usePermissions() must be used within <PermissionsProvider>.",
+      '[@pyreon/permissions] usePermissions() must be used within <PermissionsProvider>.',
     )
   }
   return instance

package/src/index.ts

@@ -23,13 +23,8 @@
  * ```
  */
 
-export { PermissionsProvider, usePermissions } from "./context"
-export { createPermissions } from "./permissions"
+export { PermissionsProvider, usePermissions } from './context'
+export { createPermissions } from './permissions'
 
 // Types
-export type {
-  PermissionMap,
-  PermissionPredicate,
-  Permissions,
-  PermissionValue,
-} from "./types"
+export type { PermissionMap, PermissionPredicate, Permissions, PermissionValue } from './types'

package/src/permissions.ts

@@ -1,5 +1,5 @@
-import { computed, signal } from "@pyreon/reactivity"
-import type { PermissionMap, Permissions, PermissionValue } from "./types"
+import { batch, computed, signal } from '@pyreon/reactivity'
+import type { PermissionMap, Permissions, PermissionValue } from './types'
 
 /**
  * Resolve a permission key against the map.
@@ -9,7 +9,7 @@ import type { PermissionMap, Permissions, PermissionValue } from "./types"
  * Safely evaluate a permission value. Predicates that throw are treated as denied.
  */
 function evaluate(value: PermissionValue, context?: unknown): boolean {
-  if (typeof value === "function") {
+  if (typeof value === 'function') {
     try {
       return value(context)
     } catch {
@@ -27,7 +27,7 @@ function resolve(map: Map<string, PermissionValue>, key: string, context?: unkno
   }
 
   // 2. Wildcard match — 'posts.read' matches 'posts.*'
-  const dotIndex = key.lastIndexOf(".")
+  const dotIndex = key.lastIndexOf('.')
   if (dotIndex !== -1) {
     const prefix = key.slice(0, dotIndex)
     const wildcard = map.get(`${prefix}.*`)
@@ -37,7 +37,7 @@ function resolve(map: Map<string, PermissionValue>, key: string, context?: unkno
   }
 
   // 3. Global wildcard
-  const global = map.get("*")
+  const global = map.get('*')
   if (global !== undefined) {
     return evaluate(global, context)
   }
@@ -106,17 +106,21 @@ export function createPermissions(initial?: PermissionMap): Permissions {
   }
 
   can.set = (permissions: PermissionMap): void => {
-    store.set(toMap(permissions))
-    version.update((v) => v + 1)
+    batch(() => {
+      store.set(toMap(permissions))
+      version.update((v) => v + 1)
+    })
   }
 
   can.patch = (permissions: PermissionMap): void => {
-    const current = store.peek()
-    for (const [key, value] of Object.entries(permissions)) {
-      current.set(key, value)
-    }
-    store.set(current)
-    version.update((v) => v + 1)
+    batch(() => {
+      const current = store.peek()
+      for (const [key, value] of Object.entries(permissions)) {
+        current.set(key, value)
+      }
+      store.set(current)
+      version.update((v) => v + 1)
+    })
   }
 
   can.granted = computed(() => {
@@ -124,7 +128,7 @@ export function createPermissions(initial?: PermissionMap): Permissions {
     const keys: string[] = []
     for (const [key, value] of store.peek()) {
       // Static true or predicate (capability exists)
-      if (value === true || typeof value === "function") {
+      if (value === true || typeof value === 'function') {
         keys.push(key)
       }
     }