@svadmin/core 0.22.0 → 0.23.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svadmin/core",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "author": "zuohuadong",
   "repository": {
     "type": "git",

package/src/audit.ts

@@ -45,6 +45,11 @@ export function getAuditLogProvider(): AuditLogProvider | null {
   return auditLogProvider;
 }
 
+export function resetAuditLogProvider(): void {
+  auditLogProvider = null;
+  handler = (entry) => { console.info('[audit]', entry.action, entry.resource, entry.recordId); };
+}
+
 export function audit(entry: Omit<AuditEntry, 'timestamp'>): void {
   const fullEntry: AuditEntry = { ...entry, timestamp: new Date().toISOString() };
   try {

package/src/auth-hooks.svelte.ts

@@ -13,7 +13,7 @@ import type { AuthActionResult, CheckResult, Identity, AuthProvider } from './ty
 interface CreateAuthMutationOptions {
   method: keyof AuthProvider;
   successMessage?: string | null;
-  errorMessage?: string;
+  errorMessage?: string | false;
   onSuccess?: (result: AuthActionResult) => void;
 }
 
@@ -33,13 +33,13 @@ function createAuthMutation(options: CreateAuthMutationOptions) {
         if (options.successMessage) notify({ type: 'success', message: options.successMessage });
         if (options.onSuccess) options.onSuccess(result);
       } else {
-        const msg = result.error?.message ?? options.errorMessage ?? t('common.operationFailed');
-        notify({ type: 'error', message: msg });
+        const msg = result.error?.message ?? (typeof options.errorMessage === 'string' ? options.errorMessage : t('common.operationFailed'));
+        if (options.errorMessage !== false) notify({ type: 'error', message: msg });
       }
       return result;
     } catch (err) {
-      const msg = err instanceof Error ? err.message : (options.errorMessage ?? t('common.operationFailed'));
-      notify({ type: 'error', message: msg });
+      const msg = err instanceof Error ? err.message : (typeof options.errorMessage === 'string' ? options.errorMessage : t('common.operationFailed'));
+      if (options.errorMessage !== false) notify({ type: 'error', message: msg });
       return { success: false, error: { message: msg } };
     } finally {
       isLoading = false;
@@ -54,11 +54,11 @@ function createAuthMutation(options: CreateAuthMutationOptions) {
 
 // ─── useLogin ─────────────────────────────────────────────────
 
-export function useLogin() {
+export function useLogin(opts?: { errorMessage?: string | false }) {
   return createAuthMutation({
     method: 'login',
     successMessage: t('common.operationSuccess'),
-    errorMessage: t('common.loginFailed'),
+    errorMessage: opts?.errorMessage ?? t('common.loginFailed'),
     onSuccess: (result) => { if (result.redirectTo) navigate(result.redirectTo); }
   });
 }
@@ -105,7 +105,7 @@ export function useUpdatePassword() {
 // ─── useGetIdentity ──────────────────────────────────────────
 
 export function useGetIdentity() {
-  const provider = getAuthProvider();
+  const provider = getAuthProvider({ optional: true });
   let data = $state<Identity | null>(null);
   let isLoading = $state(true);
   let error = $state<Error | null>(null);
@@ -138,33 +138,43 @@ export function useGetIdentity() {
 // ─── useIsAuthenticated ──────────────────────────────────────
 
 export function useIsAuthenticated() {
-  const provider = getAuthProvider();
+  const provider = getAuthProvider({ optional: true });
   let isAuthenticated = $state(false);
   let isLoading = $state(true);
+  let checkResult = $state<CheckResult | null>(null);
 
-  if (provider) {
-    if (typeof window !== 'undefined') {
-      provider.check().then((result: CheckResult) => {
-        isAuthenticated = result.authenticated;
-        isLoading = false;
-      }).catch(() => {
-        isAuthenticated = false;
-        isLoading = false;
-      });
-    } else {
+  function check() {
+    if (!provider) {
+      isAuthenticated = true;
+      isLoading = false;
+      return;
+    }
+    if (typeof window === 'undefined') {
       // In SSR we assume false to prevent hydration mismatch before check
       isAuthenticated = false;
       isLoading = false;
+      return;
     }
-  } else {
-    // No auth provider — treat as authenticated
-    isAuthenticated = true;
-    isLoading = false;
+    isLoading = true;
+    provider.check().then((result: CheckResult) => {
+      isAuthenticated = result.authenticated;
+      checkResult = result;
+      isLoading = false;
+    }).catch(() => {
+      isAuthenticated = false;
+      checkResult = { authenticated: false };
+      isLoading = false;
+    });
   }
 
+  // Initial check
+  check();
+
   return {
     get isAuthenticated() { return isAuthenticated; },
     get isLoading() { return isLoading; },
+    get data() { return checkResult; },
+    refetch: check,
   };
 }
 
@@ -176,7 +186,7 @@ export function useIsAuthenticated() {
  * If it returns { redirectTo }, navigates there.
  */
 export function useOnError() {
-  const provider = getAuthProvider();
+  const provider = getAuthProvider({ optional: true });
 
   async function mutate(error: unknown) {
     if (!provider?.onError) {
@@ -242,6 +252,14 @@ export function usePermissions<T = unknown>() {
     fetch();
   }
 
+  const hasFn = (perm: string): boolean => {
+    if (!permissions) return false;
+    if (Array.isArray(permissions)) return permissions.includes(perm);
+    if (permissions instanceof Set) return (permissions as Set<string>).has(perm);
+    if (typeof permissions === 'object') return !!(permissions as Record<string, boolean>)[perm];
+    return false;
+  };
+
   return {
     get isLoading() { return isLoading; },
     get error() { return error; },
@@ -250,18 +268,10 @@ export function usePermissions<T = unknown>() {
     refetch: fetch,
 
     /** Check if a specific permission string exists */
-    has(perm: string): boolean {
-      if (!permissions) return false;
-      if (Array.isArray(permissions)) return permissions.includes(perm);
-      if (permissions instanceof Set) return (permissions as Set<string>).has(perm);
-      if (typeof permissions === 'object') return !!(permissions as Record<string, boolean>)[perm];
-      return false;
-    },
+    has: hasFn,
 
     /** Check resource:action style permission */
-    can(resource: string, action: string): boolean {
-      return this.has(`${resource}:${action}`);
-    },
+    can: (resource: string, action: string): boolean => hasFn(`${resource}:${action}`),
   };
 }
 

package/src/chatProvider.svelte.ts

@@ -186,36 +186,23 @@ export function getAgentProvider(): AgentProvider | null {
 interface ApprovalCallback {
   (approved: boolean): void;
 }
-const pendingApprovals = new Map<string, ApprovalCallback>();
+interface ApprovalEntry { id: string; callback: ApprovalCallback }
+let pendingApprovals = $state<ApprovalEntry[]>([]);
 
-/**
- * Register a pending approval request. Called internally by the framework
- * when an `approval_request` event is received from the agent.
- */
 export function registerApproval(id: string, callback: ApprovalCallback): void {
-  pendingApprovals.set(id, callback);
+  pendingApprovals = [...pendingApprovals, { id, callback }];
 }
 
-/**
- * Approve or reject a pending tool call.
- *
- * @example
- * ```svelte
- * <button onclick={() => resolveApproval('req-1', true)}>Approve</button>
- * <button onclick={() => resolveApproval('req-1', false)}>Reject</button>
- * ```
- */
 export function resolveApproval(id: string, approved: boolean): boolean {
-  const cb = pendingApprovals.get(id);
-  if (!cb) return false;
-  cb(approved);
-  pendingApprovals.delete(id);
+  const entry = pendingApprovals.find(e => e.id === id);
+  if (!entry) return false;
+  entry.callback(approved);
+  pendingApprovals = pendingApprovals.filter(e => e.id !== id);
   return true;
 }
 
-/** Check if there are any pending approval requests. */
 export function hasPendingApprovals(): boolean {
-  return pendingApprovals.size > 0;
+  return pendingApprovals.length > 0;
 }
 
 // ─── Chat Context singleton ────────────────────────────────────

package/src/context.svelte.ts

@@ -3,6 +3,11 @@
 
 import type { DataProvider, AuthProvider, ResourceDefinition } from './types';
 import type { RouterProvider } from './router-provider';
+import { resetNotificationProvider } from './notification.svelte';
+import { resetAuditLogProvider } from './audit';
+import { resetAccessControlProvider } from './permissions';
+import { resetAdminOptions } from './options.svelte';
+import { resetI18n } from './i18n.svelte';
 
 // ─── DataProvider (supports single or multiple) ─────────────────
 
@@ -68,8 +73,8 @@ function isDataProvider(value: unknown): value is DataProvider {
 
 let authProvider = $state<AuthProvider | null>(null);
 
-export function setAuthProvider(provider: AuthProvider): void {
-  authProvider = provider;
+export function setAuthProvider(provider: AuthProvider | null | undefined): void {
+  authProvider = provider || null;
 }
 
 export function getAuthProvider(): AuthProvider;
@@ -122,3 +127,18 @@ export function setLiveProvider(provider: import('./live.svelte').LiveProvider):
 export function getLiveProvider(): import('./live.svelte').LiveProvider | undefined {
   return liveProviderState;
 }
+
+// ─── Reset — for testing / HMR ─────────────────────────────────
+
+export function resetContext(): void {
+  providers = null;
+  authProvider = null;
+  resources = [];
+  routerProvider = undefined;
+  liveProviderState = undefined;
+  resetNotificationProvider();
+  resetAuditLogProvider();
+  resetAccessControlProvider();
+  resetAdminOptions();
+  resetI18n();
+}

package/src/data-transfer.svelte.ts

@@ -57,14 +57,13 @@ export function useExport<TData extends BaseRecord = BaseRecord>(options: UseExp
 
       if (options.download !== false && typeof document !== 'undefined') {
         const fields = Object.keys(mapped[0]);
-        const header = fields.join(',');
+        const escapeCsvField = (s: string) => s.includes(',') || s.includes('"') || s.includes('\n') || s.includes('\r') ? `"${s.replace(/"/g, '""')}"` : s;
+        const header = fields.map(escapeCsvField).join(',');
         const rows = mapped.map(record =>
           fields.map(f => {
             const val = record[f];
-            const str = val === null || val === undefined ? '' : String(val);
-            return str.includes(',') || str.includes('"') || str.includes('\n')
-              ? `"${str.replace(/"/g, '""')}"`
-              : str;
+            const str = val === null || val === undefined ? '' : typeof val === 'object' ? JSON.stringify(val) : String(val);
+            return escapeCsvField(str);
           }).join(',')
         );
 
@@ -120,15 +119,20 @@ export function useImport<TData = Record<string, unknown>>(options: UseImportOpt
     const errored: { request: unknown; error: unknown }[] = [];
 
     try {
-      const text = await info.file.text();
-      const lines = text.split('\n').filter(l => l.trim() !== '');
-      if (lines.length < 2) return;
+      let text = await info.file.text();
+      // Strip BOM
+      if (text.charCodeAt(0) === 0xFEFF) {
+        text = text.slice(1);
+      }
+
+      const rows = parseCSV(text);
+      if (rows.length < 2) return;
 
-      const headers = parseCSVLine(lines[0]);
+      const headers = rows[0];
       const records: Record<string, unknown>[] = [];
 
-      for (let i = 1; i < lines.length; i++) {
-        const values = parseCSVLine(lines[i]);
+      for (let i = 1; i < rows.length; i++) {
+        const values = rows[i];
         const record: Record<string, unknown> = {};
         headers.forEach((h, idx) => { record[h] = values[idx] ?? ''; });
         records.push(options.mapData ? (options.mapData(record) as unknown as Record<string, unknown>) : record);
@@ -151,18 +155,23 @@ export function useImport<TData = Record<string, unknown>>(options: UseImportOpt
       } else {
         for (let i = 0; i < records.length; i += batchSize) {
           const batch = records.slice(i, i + batchSize);
-          try {
-            if (provider.createMany) {
+          if (provider.createMany) {
+            try {
               const res = await provider.createMany({ resource, variables: batch, meta: options.meta });
               succeeded.push(res);
-            } else {
-              for (const record of batch) {
+            } catch (error) {
+              errored.push({ request: batch, error });
+            }
+          } else {
+            // Fallback: loop internal items inside batch securely instead of breaking whole batch
+            for (const record of batch) {
+              try {
                 const res = await provider.create({ resource, variables: record, meta: options.meta });
                 succeeded.push(res);
+              } catch (error) {
+                errored.push({ request: record, error });
               }
             }
-          } catch (error) {
-            errored.push({ request: batch, error });
           }
           processed += batch.length;
           options.onProgress?.({ totalAmount: records.length, processedAmount: processed });
@@ -184,34 +193,57 @@ export function useImport<TData = Record<string, unknown>>(options: UseImportOpt
   };
 }
 
-/** Parse a single CSV line respecting quoted fields */
-function parseCSVLine(line: string): string[] {
-  const result: string[] = [];
-  let current = '';
+/** Parse full CSV text respecting quoted multi-line fields */
+function parseCSV(text: string): string[][] {
+  const rows: string[][] = [];
+  let currentRow: string[] = [];
+  let currentVal = '';
   let inQuotes = false;
+  let wasQuoted = false;
 
-  for (let i = 0; i < line.length; i++) {
-    const ch = line[i];
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
     if (inQuotes) {
-      if (ch === '"' && line[i + 1] === '"') {
-        current += '"';
-        i++;
-      } else if (ch === '"') {
-        inQuotes = false;
+      if (ch === '"') {
+        if (i + 1 < text.length && text[i + 1] === '"') {
+          currentVal += '"';
+          i++;
+        } else {
+          inQuotes = false;
+        }
       } else {
-        current += ch;
+        currentVal += ch;
       }
     } else {
       if (ch === '"') {
         inQuotes = true;
+        wasQuoted = true;
       } else if (ch === ',') {
-        result.push(current.trim());
-        current = '';
+        currentRow.push(wasQuoted ? currentVal : currentVal.trim());
+        currentVal = '';
+        wasQuoted = false;
+      } else if (ch === '\n' || ch === '\r') {
+        currentRow.push(wasQuoted ? currentVal : currentVal.trim());
+        if (currentRow.some(v => v !== '')) {
+          rows.push(currentRow);
+        }
+        currentRow = [];
+        currentVal = '';
+        wasQuoted = false;
+        if (ch === '\r' && i + 1 < text.length && text[i + 1] === '\n') {
+          i++;
+        }
       } else {
-        current += ch;
+        currentVal += ch;
       }
     }
   }
-  result.push(current.trim());
-  return result;
+  
+  if (currentVal || currentRow.length > 0) {
+    currentRow.push(wasQuoted ? currentVal : currentVal.trim());
+    if (currentRow.some(v => v !== '')) {
+      rows.push(currentRow);
+    }
+  }
+  return rows;
 }