@svadmin/ui 0.18.0 → 0.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svadmin/ui",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "Pre-built admin UI components — AdminApp, AutoTable, AutoForm, Sidebar, Layout",
   "type": "module",
   "sideEffects": [
@@ -26,7 +26,25 @@
     "bits-ui": "^2.0.0",
     "tailwind-variants": "^3.0.0",
     "clsx": "^2.0.0",
-    "tailwind-merge": "^3.0.0"
+    "tailwind-merge": "^3.0.0",
+    "marked": "^15.0.0",
+    "marked-highlight": "^2.2.0",
+    "highlight.js": "^11.0.0",
+    "isomorphic-dompurify": "^2.0.0"
+  },
+  "peerDependenciesMeta": {
+    "marked": {
+      "optional": true
+    },
+    "marked-highlight": {
+      "optional": true
+    },
+    "highlight.js": {
+      "optional": true
+    },
+    "isomorphic-dompurify": {
+      "optional": true
+    }
   },
   "dependencies": {
     "@lucide/svelte": "^0.577.0",

package/src/components/AuditLogViewer.svelte

@@ -0,0 +1,226 @@
+<script lang="ts">
+  import { t } from '@svadmin/core/i18n';
+  import { getAuthProvider } from '@svadmin/core';
+  import type { AuditLog } from '@svadmin/core';
+  import { toast } from '@svadmin/core/toast';
+  import * as Table from './ui/table/index.js';
+  import { Badge } from './ui/badge/index.js';
+  import { Button } from './ui/button/index.js';
+  import { Input } from './ui/input/index.js';
+  import { Loader2, ChevronLeft, ChevronRight, Search, FileSearch, Eye, X } from 'lucide-svelte';
+
+  const authProvider = getAuthProvider();
+
+  let logs = $state<AuditLog[]>([]);
+  let total = $state(0);
+  let page = $state(1);
+  let pageSize = 20;
+  let loading = $state(true);
+  let error = $state<string | null>(null);
+  let searchQuery = $state('');
+
+  // Snapshot drawer
+  let drawerOpen = $state(false);
+  let drawerLog = $state<AuditLog | null>(null);
+
+  async function loadLogs() {
+    if (!authProvider?.getAuditLogs) {
+      error = t('settings.auditNotSupported') ?? 'Audit logs are not supported by the current AuthProvider';
+      loading = false;
+      return;
+    }
+    loading = true;
+    try {
+      const result = await authProvider.getAuditLogs({ page, pageSize });
+      logs = result.data;
+      total = result.total;
+    } catch (e) {
+      toast.error((e as Error).message);
+    } finally {
+      loading = false;
+    }
+  }
+
+  $effect(() => {
+    loadLogs();
+  });
+
+  let totalPages = $derived(Math.ceil(total / pageSize) || 1);
+
+  let filteredLogs = $derived(
+    searchQuery.trim()
+      ? logs.filter(l =>
+          (l.userName ?? '').toLowerCase().includes(searchQuery.toLowerCase()) ||
+          l.action.toLowerCase().includes(searchQuery.toLowerCase()) ||
+          (l.resource ?? '').toLowerCase().includes(searchQuery.toLowerCase())
+        )
+      : logs
+  );
+
+  function openSnapshot(log: AuditLog) {
+    drawerLog = log;
+    drawerOpen = true;
+  }
+
+  function formatDate(d: string | Date) {
+    return new Date(d).toLocaleString();
+  }
+
+  function getActionColor(action: string): 'default' | 'secondary' | 'destructive' | 'outline' {
+    const a = action.toLowerCase();
+    if (a.includes('delete') || a.includes('remove')) return 'destructive';
+    if (a.includes('create') || a.includes('add')) return 'default';
+    if (a.includes('update') || a.includes('edit')) return 'secondary';
+    return 'outline';
+  }
+</script>
+
+<div class="h-full flex flex-col">
+  <!-- Header -->
+  <div class="mb-6">
+    <h2 class="text-xl font-semibold text-foreground flex items-center gap-2">
+      <FileSearch class="h-5 w-5 text-muted-foreground" />
+      {t('settings.auditLogs') ?? 'Audit Logs'}
+    </h2>
+    <p class="text-sm text-muted-foreground mt-1">
+      {t('settings.auditDescription') ?? 'Track and review all system operations for compliance and debugging.'}
+    </p>
+  </div>
+
+  {#if error}
+    <div class="p-6 border border-destructive/20 bg-destructive/5 text-destructive rounded-lg text-center">
+      <p>{error}</p>
+    </div>
+  {:else}
+    <!-- Search Bar -->
+    <div class="mb-4 relative">
+      <Search class="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground" />
+      <Input
+        bind:value={searchQuery}
+        placeholder={t('settings.searchLogs') ?? 'Search by user, action, or resource...'}
+        class="pl-9"
+      />
+    </div>
+
+    <!-- Table -->
+    <div class="flex-1 border rounded-lg bg-card overflow-hidden">
+      {#if loading}
+        <div class="flex items-center justify-center h-48 text-muted-foreground">
+          <Loader2 class="h-5 w-5 animate-spin mr-2" />
+          {t('common.loading')}
+        </div>
+      {:else}
+        <div class="overflow-auto">
+          <Table.Root>
+            <Table.Header>
+              <Table.Row>
+                <Table.Head class="w-[160px]">{t('settings.auditTime') ?? 'Time'}</Table.Head>
+                <Table.Head>{t('settings.auditUser') ?? 'User'}</Table.Head>
+                <Table.Head>{t('settings.auditAction') ?? 'Action'}</Table.Head>
+                <Table.Head>{t('settings.auditResource') ?? 'Resource'}</Table.Head>
+                <Table.Head class="w-[120px]">{t('settings.auditIp') ?? 'IP Address'}</Table.Head>
+                <Table.Head class="w-[60px] text-center">{t('common.detail') ?? 'Detail'}</Table.Head>
+              </Table.Row>
+            </Table.Header>
+            <Table.Body>
+              {#each filteredLogs as log}
+                <Table.Row class="hover:bg-muted/50 transition-colors">
+                  <Table.Cell class="text-xs text-muted-foreground font-mono">
+                    {formatDate(log.createdAt)}
+                  </Table.Cell>
+                  <Table.Cell class="text-sm font-medium">{log.userName ?? log.userId ?? '—'}</Table.Cell>
+                  <Table.Cell>
+                    <Badge variant={getActionColor(log.action)}>{log.action}</Badge>
+                  </Table.Cell>
+                  <Table.Cell class="text-sm text-muted-foreground">{log.resource ?? '—'}</Table.Cell>
+                  <Table.Cell class="text-xs text-muted-foreground font-mono">{log.ipAddress ?? '—'}</Table.Cell>
+                  <Table.Cell class="text-center">
+                    {#if log.details}
+                      <Button variant="ghost" size="icon" class="h-7 w-7" onclick={() => openSnapshot(log)}>
+                        <Eye class="h-3.5 w-3.5" />
+                      </Button>
+                    {/if}
+                  </Table.Cell>
+                </Table.Row>
+              {:else}
+                <Table.Row>
+                  <Table.Cell colspan={6} class="h-24 text-center text-muted-foreground">
+                    {t('common.noData')}
+                  </Table.Cell>
+                </Table.Row>
+              {/each}
+            </Table.Body>
+          </Table.Root>
+        </div>
+      {/if}
+    </div>
+
+    <!-- Pagination -->
+    <div class="mt-4 flex items-center justify-between text-sm text-muted-foreground">
+      <span>{total} {t('settings.auditTotal') ?? 'total records'}</span>
+      <div class="flex items-center gap-2">
+        <Button
+          variant="outline" size="sm"
+          disabled={page <= 1}
+          onclick={() => { page--; loadLogs(); }}
+        >
+          <ChevronLeft class="h-4 w-4" />
+        </Button>
+        <span>{page} / {totalPages}</span>
+        <Button
+          variant="outline" size="sm"
+          disabled={page >= totalPages}
+          onclick={() => { page++; loadLogs(); }}
+        >
+          <ChevronRight class="h-4 w-4" />
+        </Button>
+      </div>
+    </div>
+  {/if}
+</div>
+
+<!-- Snapshot Drawer -->
+{#if drawerOpen && drawerLog}
+  <!-- svelte-ignore a11y_no_static_element_interactions -->
+  <!-- svelte-ignore a11y_click_events_have_key_events -->
+  <div class="fixed inset-0 z-[100] flex justify-end bg-black/40 backdrop-blur-sm" onclick={() => drawerOpen = false}>
+    <!-- svelte-ignore a11y_no_static_element_interactions -->
+    <!-- svelte-ignore a11y_click_events_have_key_events -->
+    <div class="bg-card shadow-2xl w-full max-w-2xl h-full flex flex-col animate-in slide-in-from-right duration-300" onclick={(e) => e.stopPropagation()}>
+      <!-- Drawer Header -->
+      <div class="p-6 border-b border-border flex items-center justify-between bg-muted/30">
+        <div>
+          <h2 class="text-lg font-bold text-foreground flex items-center gap-2">
+            <FileSearch class="h-5 w-5 text-primary" />
+            {t('settings.auditSnapshot') ?? 'Change Snapshot'}
+          </h2>
+          <p class="text-xs text-muted-foreground mt-1">{formatDate(drawerLog.createdAt)} · {drawerLog.userName ?? drawerLog.userId}</p>
+        </div>
+        <button onclick={() => drawerOpen = false} class="text-muted-foreground hover:text-foreground transition p-2 rounded-lg hover:bg-muted">
+          <X class="w-5 h-5" />
+        </button>
+      </div>
+
+      <!-- Meta Tags -->
+      <div class="px-6 py-3 border-b border-border flex items-center gap-2 flex-wrap">
+        <Badge variant="outline">{drawerLog.action}</Badge>
+        {#if drawerLog.resource}
+          <Badge variant="secondary">{drawerLog.resource}</Badge>
+        {/if}
+        {#if drawerLog.ipAddress}
+          <Badge variant="outline" class="font-mono text-xs">{drawerLog.ipAddress}</Badge>
+        {/if}
+      </div>
+
+      <!-- JSON Diff Viewer -->
+      <div class="flex-1 p-6 overflow-y-auto bg-foreground/[0.03] dark:bg-background/50">
+        <pre class="whitespace-pre-wrap text-xs font-mono leading-relaxed text-foreground/80 bg-muted/30 rounded-lg p-4 border border-border">{typeof drawerLog.details === 'object' ? JSON.stringify(drawerLog.details, null, 2) : drawerLog.details}</pre>
+      </div>
+
+      <!-- Footer -->
+      <div class="p-4 border-t border-border bg-muted/20 text-right text-[11px] text-muted-foreground font-medium">
+        System audit snapshot · Read-only
+      </div>
+    </div>
+  </div>
+{/if}

package/src/components/AutoTable.svelte

@@ -13,7 +13,7 @@
   import { useList, useDelete, getResource } from '@svadmin/core';
   import type { Pagination as PaginationState, Sort, Filter, FieldDefinition } from '@svadmin/core';
   import { navigate } from '@svadmin/core/router';
-  import { canAccess } from '@svadmin/core/permissions';
+  import { useCan, getAccessControlProvider } from '@svadmin/core';
   import { readURLState, writeURLState } from '@svadmin/core';
   import { t } from '@svadmin/core/i18n';
   import { fade } from 'svelte/transition';
@@ -136,10 +136,15 @@
   const deleteMutation = deleteResult.mutation;
 
   // ─── Permissions ──────────────────────────────────────────────
-  const canCreate = $derived(canAccess(resourceName, 'create').can && resource.canCreate !== false);
-  const canEdit = $derived(canAccess(resourceName, 'edit').can && resource.canEdit !== false);
-  const canDelete = $derived(canAccess(resourceName, 'delete').can && resource.canDelete !== false);
-  const canExport = $derived(canAccess(resourceName, 'export').can);
+  const acEnabled = $derived(!!getAccessControlProvider());
+  const canCreatePerm = useCan(() => ({ resource: resourceName, action: 'create', queryOptions: { enabled: acEnabled } }));
+  const canEditPerm = useCan(() => ({ resource: resourceName, action: 'edit', queryOptions: { enabled: acEnabled } }));
+  const canDeletePerm = useCan(() => ({ resource: resourceName, action: 'delete', queryOptions: { enabled: acEnabled } }));
+  const canExportPerm = useCan(() => ({ resource: resourceName, action: 'export', queryOptions: { enabled: acEnabled } }));
+  const canCreate = $derived(canCreatePerm.allowed && resource.canCreate !== false);
+  const canEdit = $derived(canEditPerm.allowed && resource.canEdit !== false);
+  const canDelete = $derived(canDeletePerm.allowed && resource.canDelete !== false);
+  const canExport = $derived(canExportPerm.allowed);
 
   // ─── TanStack Table state ────────────────────────────────────
   let sorting = $state<SortingState>(untrack(() =>

package/src/components/CanAccess.svelte

@@ -11,7 +11,7 @@
     fallback?: Snippet;
   }>();
 
-  const can = $derived(useCan(resource, action, params));
+  const can = useCan(() => ({ resource, action, params }));
 </script>
 
 {#if can.isLoading}

package/src/components/DraggableGrid.svelte

@@ -0,0 +1,90 @@
+<script lang="ts">
+  import type { Snippet } from 'svelte';
+
+  export interface GridModule {
+    id: string;
+    [key: string]: unknown;
+  }
+
+  let {
+    modules = $bindable<GridModule[]>([]),
+    onOrderSave,
+    renderItem,
+    class: className = '',
+    columns = 'grid-cols-1 md:grid-cols-2 lg:grid-cols-3',
+    gap = 'gap-4',
+  }: {
+    modules?: GridModule[];
+    onOrderSave?: (orderedIds: string[]) => void;
+    renderItem: Snippet<[{ module: GridModule; index: number; dragging: boolean }]>;
+    class?: string;
+    columns?: string;
+    gap?: string;
+  } = $props();
+
+  let draggingId = $state<string | null>(null);
+  let dragOverId = $state<string | null>(null);
+
+  function handleDragStart(e: DragEvent, id: string) {
+    draggingId = id;
+    if (e.dataTransfer) {
+      e.dataTransfer.effectAllowed = 'move';
+      e.dataTransfer.setData('text/plain', id);
+    }
+  }
+
+  function handleDragOver(e: DragEvent, id: string) {
+    e.preventDefault();
+    if (draggingId && draggingId !== id) {
+      dragOverId = id;
+    }
+  }
+
+  function handleDrop(e: DragEvent, targetId: string) {
+    e.preventDefault();
+    if (!draggingId || draggingId === targetId) {
+      dragOverId = null;
+      return;
+    }
+
+    const sourceIdx = modules.findIndex(m => m.id === draggingId);
+    const targetIdx = modules.findIndex(m => m.id === targetId);
+
+    if (sourceIdx === -1 || targetIdx === -1) {
+      dragOverId = null;
+      return;
+    }
+
+    const newModules = [...modules];
+    const [dragged] = newModules.splice(sourceIdx, 1);
+    newModules.splice(targetIdx, 0, dragged);
+
+    modules = newModules;
+    dragOverId = null;
+    onOrderSave?.(modules.map(m => m.id));
+  }
+
+  function handleDragEnd() {
+    draggingId = null;
+    dragOverId = null;
+  }
+</script>
+
+<div class="grid {columns} {gap} {className}">
+  {#each modules as mod, i (mod.id)}
+    <!-- svelte-ignore a11y_no_static_element_interactions -->
+    <div
+      draggable="true"
+      ondragstart={(e) => handleDragStart(e, mod.id)}
+      ondragover={(e) => handleDragOver(e, mod.id)}
+      ondrop={(e) => handleDrop(e, mod.id)}
+      ondragend={handleDragEnd}
+      ondragleave={() => { if (dragOverId === mod.id) dragOverId = null; }}
+      class="transition-all duration-200
+        {draggingId === mod.id ? 'opacity-40 scale-[0.97] cursor-grabbing' : 'cursor-grab'}
+        {dragOverId === mod.id ? 'ring-2 ring-primary/40 ring-offset-2 ring-offset-background rounded-lg scale-[1.02]' : ''}"
+    >
+      {@render renderItem({ module: mod, index: i, dragging: draggingId === mod.id })}
+    </div>
+  {/each}
+</div>

package/src/components/FieldRenderer.svelte

@@ -15,6 +15,7 @@
   import { Button } from './ui/button/index.js';
   import TooltipButton from './TooltipButton.svelte';
   import ComboboxField from './ComboboxField.svelte';
+  import ArrayField from './fields/ArrayField.svelte';
   import { Plus, X } from 'lucide-svelte';
   import type { Snippet } from 'svelte';
 
@@ -86,6 +87,9 @@
   {#if children}
     {@render children()}
 
+  {:else if field.type === 'array'}
+    <ArrayField {field} {value} {onchange} />
+
   {:else if field.type === 'text' || field.type === 'image'}
     <Input
       id={field.key}

package/src/components/MarkdownRenderer.svelte

@@ -1,13 +1,9 @@
 <script lang="ts">
-  // @ts-expect-error - missing types
   import { Marked } from "marked";
-  // @ts-expect-error - missing types
   import { markedHighlight } from "marked-highlight";
-  // @ts-expect-error - missing types
   import * as hljsModule from "highlight.js";
   const hljs = "default" in hljsModule ? hljsModule.default : hljsModule;
   import "highlight.js/styles/github-dark.css"; // or your preferred theme
-  // @ts-expect-error - missing types
   import DOMPurify from "isomorphic-dompurify";
   import { Check, Copy } from "lucide-svelte";
   import { Button } from "./ui/button/index.js";

package/src/components/PermissionMatrix.svelte

@@ -0,0 +1,190 @@
+<script module context="module">
+  export type RoleInfo = { code: string; name: string; [key: string]: any };
+  export type ResourceInfo = { code: string; name: string; section?: string; [key: string]: any };
+  export type ActionInfo = { code: string; name: string; [key: string]: any };
+</script>
+
+<script lang="ts">
+  import { Shield, AlertCircle, Check } from 'lucide-svelte';
+  import type { Snippet } from 'svelte';
+  
+  let {
+    // Basic metadata lists
+    roles = [],
+    resources = [],
+    actions = [],
+    
+    // Authorization state resolver
+    // isGranted(roleCode, resourceCode, actionCode) => boolean
+    isGranted,
+    
+    // Interactive states
+    selectedRole = $bindable(roles[0]?.code || ''),
+    loading = false,
+    
+    // Feedback and alerts (passed down from upper business logic)
+    message = '',
+    messageType = 'success', // 'success' | 'error' | 'warning'
+    conflictCount = 0,
+    
+    // Custom slots for injecting multi-tenant switchers or security filters
+    sidebarExtra,
+    headerExtra,
+
+    // Callback event
+    onToggle
+  }: {
+    roles: RoleInfo[];
+    resources: ResourceInfo[];
+    actions: ActionInfo[];
+    isGranted: (role: string, resource: string, action: string) => boolean;
+    selectedRole?: string;
+    loading?: boolean;
+    message?: string;
+    messageType?: 'success' | 'error' | 'warning';
+    conflictCount?: number;
+    sidebarExtra?: Snippet;
+    headerExtra?: Snippet;
+    onToggle: (role: string, resource: string, action: string, grant: boolean) => void;
+  } = $props();
+
+</script>
+
+<div class="h-full flex flex-col pt-2">
+  <!-- Header Title -->
+  <div class="mb-6 flex items-center justify-between">
+    <div>
+      <h1 class="text-2xl font-bold text-foreground flex items-center gap-2">
+        <Shield class="w-6 h-6 text-primary" />
+        统一操作权限矩阵
+      </h1>
+      <p class="text-muted-foreground mt-1 text-sm">直观配置系统模块与角色的鉴权规则网络。</p>
+    </div>
+    
+    <!-- Toast Feedback -->
+    {#if message}
+      <div class={`px-4 py-2 rounded-lg text-sm font-medium shadow-sm transition-all flex items-center gap-2 ${messageType === 'success' ? 'bg-green-500/10 text-green-600 dark:text-green-400 ring-1 ring-green-500/20' : 'bg-destructive/10 text-destructive ring-1 ring-destructive/20'}`}>
+        {#if messageType === 'success'}
+           <Check class="w-4 h-4" />
+        {:else}
+           <AlertCircle class="w-4 h-4" />
+        {/if}
+        {message}
+      </div>
+    {/if}
+  </div>
+
+  <div class="flex flex-col md:flex-row gap-6 flex-1 min-h-[500px]">
+    <!-- Left: Role Selector Sidebar -->
+    <div class="w-full md:w-64 flex-shrink-0 bg-card rounded-xl shadow-sm border border-border p-4 flex flex-col">
+      <h2 class="text-sm font-semibold text-muted-foreground uppercase tracking-wider mb-4 px-2">业务受众角色</h2>
+      <div class="space-y-1 flex-1 overflow-y-auto">
+        {#each roles as role}
+          <button 
+            onclick={() => selectedRole = role.code}
+            class="w-full text-left px-3 py-2.5 rounded-lg text-sm transition-all duration-200 {selectedRole === role.code ? 'bg-primary/10 text-primary font-medium shadow-sm ring-1 ring-primary/20' : 'text-foreground hover:bg-muted'}"
+          >
+            {role.name}
+            <div class="text-[10px] mt-0.5 opacity-60 font-mono tracking-tighter">{role.code}</div>
+          </button>
+        {/each}
+        {#if roles.length === 0}
+          <p class="text-center text-muted-foreground text-sm p-4">暂无角色</p>
+        {/if}
+      </div>
+      
+      <!-- Slot for Upper Logic inject (e.g. Org Switcher, Security Level Filter) -->
+      {#if sidebarExtra}
+         <div class="mt-4 pt-4 border-t border-border">
+           {@render sidebarExtra()}
+         </div>
+      {/if}
+    </div>
+
+    <!-- Right: Matrix Grid -->
+    <div class="flex-1 bg-card rounded-xl shadow-sm border border-border overflow-hidden flex flex-col">
+      <!-- Matrix Header -->
+      <div class="p-5 border-b border-border bg-muted/30 flex items-center justify-between">
+        <div class="flex items-center gap-4">
+          <div>
+            <h2 class="text-lg font-bold text-foreground">当前视角: 
+              <span class="text-primary">{roles.find(r => r.code === selectedRole)?.name || '未选择'}</span>
+            </h2>
+            <p class="text-xs text-muted-foreground mt-1">勾选以即时挂载/收回操作权限</p>
+          </div>
+          
+          <!-- Slot for header extra logic -->
+          {#if headerExtra}
+            {@render headerExtra()}
+          {/if}
+        </div>
+        
+        {#if conflictCount > 0}
+          <div class="px-3 py-1.5 bg-destructive/10 text-destructive rounded-lg text-xs font-medium ring-1 ring-destructive/20 flex items-center gap-1.5">
+            <AlertCircle class="w-4 h-4" /> {conflictCount} 重叠/冲突规则
+          </div>
+        {/if}
+      </div>
+      
+      <!-- Table Area -->
+      <div class="flex-1 overflow-auto p-4">
+        <table class="min-w-full divide-y divide-border border border-border rounded-lg overflow-hidden">
+          <thead class="bg-muted/50">
+            <tr>
+              <th scope="col" class="py-3 pr-3 pl-4 text-left text-sm font-semibold text-foreground border-r border-border w-48">模块域与资源点</th>
+              {#each actions as action}
+                <th scope="col" class="px-2 py-3 text-center text-sm font-semibold text-foreground border-r border-border">
+                  <div class="flex flex-col items-center">
+                    <span>{action.name}</span>
+                    <span class="text-[10px] text-muted-foreground font-mono">{action.code}</span>
+                  </div>
+                </th>
+              {/each}
+            </tr>
+          </thead>
+          <tbody class="divide-y divide-border bg-card">
+            {#if resources.length === 0}
+              <tr>
+                 <td colspan={actions.length + 1} class="py-10 text-center text-muted-foreground">暂无可用资源</td>
+              </tr>
+            {/if}
+            {#each resources as resource, i}
+              <!-- Section Grouping Header -->
+              {#if resource.section && (i === 0 || resource.section !== resources[i-1].section)}
+                <tr class="bg-primary/5">
+                  <td colspan="{actions.length + 1}" class="px-4 py-2 text-xs font-bold text-primary uppercase tracking-wider">{resource.section}</td>
+                </tr>
+              {/if}
+              
+              <tr class="hover:bg-muted/50 transition-colors">
+                <td class="whitespace-nowrap py-3 pl-4 pr-3 text-sm border-r border-border">
+                  <div class="font-medium text-foreground">{resource.name}</div>
+                  <div class="text-xs text-muted-foreground font-mono">{resource.code}</div>
+                </td>
+                
+                <!-- Action Checkboxes -->
+                {#each actions as action}
+                  {@const granted = selectedRole ? isGranted(selectedRole, resource.code, action.code) : false}
+                  <td class="whitespace-nowrap px-3 py-3 text-center border-r border-border">
+                    <div class="flex items-center justify-center">
+                      <button 
+                        disabled={loading || !selectedRole}
+                        aria-label="Toggle {action.name}"
+                        onclick={() => onToggle(selectedRole!, resource.code, action.code, !granted)}
+                        class="w-6 h-6 rounded border flex items-center justify-center transition-all focus:outline-none focus:ring-2 focus:ring-primary/50 {granted ? 'bg-primary border-primary text-primary-foreground' : 'border-input bg-background hover:bg-accent'} {loading || !selectedRole ? 'opacity-50 cursor-not-allowed' : 'cursor-pointer'}"
+                      >
+                        <svg class="w-3.5 h-3.5 {granted ? 'block' : 'hidden'}" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="3">
+                          <path stroke-linecap="round" stroke-linejoin="round" d="M5 13l4 4L19 7" />
+                        </svg>
+                      </button>
+                    </div>
+                  </td>
+                {/each}
+              </tr>
+            {/each}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  </div>
+</div>