@svadmin/core 0.10.0 → 0.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svadmin/core",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Core SDK — hooks, types, context, i18n, permissions, router",
   "type": "module",
   "sideEffects": false,

package/src/auth-hooks.svelte.ts

@@ -290,3 +290,61 @@ export function usePermissions<T = unknown>() {
     get error() { return error; },
   };
 }
+
+// ─── useHasPermission ────────────────────────────────────────
+
+/**
+ * Reactive permission checker — returns a closure that re-evaluates
+ * when the underlying permissions data changes.
+ *
+ * Works with Casbin-style permission arrays, Sets, or permission objects.
+ * The returned function is safe to use inside `$derived()` for reactive UI updates.
+ *
+ * @example
+ * ```svelte
+ * <script>
+ *   import { useHasPermission } from '@svadmin/core';
+ *
+ *   const hasPermission = useHasPermission();
+ *   // ✅ Reactive — UI updates when permissions finish loading
+ *   const canDelete = $derived(hasPermission('admin'));
+ *   const canExport = $derived(hasPermission('data:export'));
+ * </script>
+ *
+ * {#if canDelete}
+ *   <Button variant="destructive">Delete</Button>
+ * {/if}
+ * ```
+ */
+export function useHasPermission() {
+  const provider = getAuthProvider();
+  let permissions = $state<unknown>(null);
+  let loaded = $state(false);
+
+  if (provider?.getPermissions) {
+    provider.getPermissions().then(p => {
+      permissions = p;
+      loaded = true;
+    }).catch(err => {
+      console.warn('[svadmin] useHasPermission: getPermissions failed', err);
+      loaded = true;
+    });
+  } else {
+    loaded = true;
+  }
+
+  /**
+   * Check if the current user has a specific permission.
+   * Supports: `string[]`, `Set<string>`, `Record<string, boolean>`, or any object with `.includes` / `.has`.
+   */
+  function hasPermission(perm: string): boolean {
+    if (!loaded || permissions == null) return false;
+    if (Array.isArray(permissions)) return permissions.includes(perm);
+    if (permissions instanceof Set) return (permissions as Set<string>).has(perm);
+    if (typeof permissions === 'object') return !!(permissions as Record<string, boolean>)[perm];
+    return false;
+  }
+
+  return hasPermission;
+}
+

package/src/index.ts

@@ -59,7 +59,7 @@ export type {
   DeleteParams, DeleteResult,
   DeleteManyParams, DeleteManyResult,
   Pagination, Sort, Filter, Identity,
-  ResourceDefinition, FieldDefinition,
+  ResourceDefinition, FieldDefinition, MenuItem,
   AuthActionResult, CheckResult,
   ResourceTypeMap, KnownResources, InferData,
   BaseRecord,
@@ -79,7 +79,7 @@ export {
   useLogin, useLogout,
   useRegister, useForgotPassword, useUpdatePassword,
   useGetIdentity, useIsAuthenticated,
-  useOnError, usePermissions,
+  useOnError, usePermissions, useHasPermission,
 } from './auth-hooks.svelte';
 export { useParsed } from './useParsed.svelte';
 export * from './useStepsForm.svelte';

package/src/types.ts

@@ -260,6 +260,30 @@ export interface ResourceDefinition {
   meta?: Record<string, unknown> & { dataProviderName?: string; parent?: string };
 }
 
+// ─── MenuItem (Multi-Level Menu) ──────────────────────────────
+
+export interface MenuItem {
+  /** Unique identifier, also used as i18n fallback key: t(`menu.${name}`) */
+  name: string;
+  /** Display label. Falls back to `t('menu.${name}')` if omitted */
+  label?: string;
+  /** Icon name string (maps to lucide icon set) or Svelte component */
+  icon?: string;
+  /** Navigation path — omit for parent-only menu nodes */
+  href?: string;
+  /** Open in new tab (useful for external links) */
+  target?: '_blank' | '_self';
+  /** Permission check metadata */
+  meta?: {
+    resource?: string;
+    action?: string;
+    /** Hide this item from the menu entirely */
+    hidden?: boolean;
+  };
+  /** Sub-menu items — supports infinite nesting */
+  children?: MenuItem[];
+}
+
 export interface FieldDefinition {
   key: string;
   label: string;