@svadmin/ui 0.40.3 → 0.40.4

package/dist/components/Sidebar.svelte

@@ -1,5 +1,5 @@
 <script lang="ts">
-  import { captureAdminContext, getResources, canAccessAsync } from '@svadmin/core';
+  import { captureAdminContext, getResources, canAccessAsync, getAccessControlProvider } from '@svadmin/core';
   import type { Identity, MenuItem } from '@svadmin/core';
   import { getPath } from '../router-state.svelte.js';
   import { useTranslation } from '@svadmin/core/i18n';
@@ -103,6 +103,62 @@
     items: NavItem[];
   }
 
+  async function hasCustomMenuAccess(menuItem: MenuItem): Promise<boolean> {
+    const resource = menuItem.meta?.resource;
+    if (!resource) return true;
+
+    try {
+      const { can } = await canAccessAsync(resource, menuItem.meta?.action ?? 'list');
+      return can;
+    } catch {
+      // Permission-provider failures must not expose protected navigation.
+      return false;
+    }
+  }
+
+  function isVisibleCustomMenuItem(candidate: MenuItem | null): candidate is MenuItem {
+    return candidate !== null;
+  }
+
+  function snapshotCustomMenuItems(menuItems: MenuItem[]): MenuItem[] {
+    return menuItems.map((menuItem) => ({
+      ...menuItem,
+      meta: menuItem.meta ? { ...menuItem.meta } : undefined,
+      children: menuItem.children ? snapshotCustomMenuItems(menuItem.children) : undefined,
+    }));
+  }
+
+  async function visibleCustomMenuItem(menuItem: MenuItem): Promise<MenuItem | null> {
+    if (menuItem.meta?.hidden || !await hasCustomMenuAccess(menuItem)) return null;
+    if (!menuItem.children) return menuItem;
+
+    const children = await visibleCustomMenuItems(menuItem.children);
+    if (children.length === 0 && !menuItem.href) return null;
+    return { ...menuItem, children };
+  }
+
+  async function visibleCustomMenuItems(menuItems: MenuItem[]): Promise<MenuItem[]> {
+    const filteredItems = await Promise.all(menuItems.map(visibleCustomMenuItem));
+    return filteredItems.filter(isVisibleCustomMenuItem);
+  }
+
+  let customMenuItems = $state.raw<MenuItem[]>([]);
+
+  $effect(() => {
+    const configuredMenu = menu?.length ? snapshotCustomMenuItems(menu) : [];
+    // Provider swaps must invalidate checks nested below public menu groups.
+    getAccessControlProvider();
+    customMenuItems = [];
+    if (configuredMenu.length === 0) return;
+
+    let cancelled = false;
+    void visibleCustomMenuItems(configuredMenu).then((visibleItems) => {
+      if (!cancelled) customMenuItems = visibleItems;
+    });
+
+    return () => { cancelled = true; };
+  });
+
   let navItems = $state.raw<NavItem[]>([]);
 
   $effect(() => {
@@ -239,7 +295,7 @@
   <nav aria-label="Main menu" class="pb-4" class:px-[10px]={!collapsed} class:px-2={collapsed}>
     {#if menu && menu.length > 0}
       <div class="space-y-[2px]">
-        {#each menu as item, _i (_i)}
+        {#each customMenuItems as item (item.name)}
           <SidebarItem {item} currentPath={path} {collapsed} depth={0} />
         {/each}
       </div>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@svadmin/ui",
-  "version": "0.40.3",
+  "version": "0.40.4",
   "description": "Pre-built admin UI components — AdminApp, AutoTable, AutoForm, Sidebar, Layout",
   "type": "module",
   "sideEffects": [
@@ -39,11 +39,11 @@
     "./components/*": "./dist/components/*"
   },
   "peerDependencies": {
-    "@svadmin/core": "^0.34.1",
+    "@svadmin/core": "^0.34.2",
     "@tanstack/svelte-query": "^6.1.38",
     "highlight.js": "^11.11.1",
-    "isomorphic-dompurify": "^3.20.0",
-    "marked": "^18.0.7",
+    "isomorphic-dompurify": "^3.22.0",
+    "marked": "^18.0.9",
     "marked-highlight": "^2.2.4",
     "svelte": "^5.56.8"
   },
@@ -75,15 +75,15 @@
   },
   "dependencies": {
     "@floating-ui/dom": "^1.8.0",
-    "@lucide/svelte": "^1.28.0",
-    "@tanstack/svelte-store": "^0.12.0",
-    "@tanstack/svelte-table": "9.0.0",
-    "@tanstack/table-core": "9.0.0",
+    "@lucide/svelte": "^1.30.0",
+    "@tanstack/svelte-store": "^0.12.1",
+    "@tanstack/svelte-table": "9.1.2",
+    "@tanstack/table-core": "9.1.2",
     "bits-ui": "^2.18.1",
     "clsx": "^2.1.1",
     "svelte-sonner": "^1.1.1",
     "tailwind-merge": "^3.6.0",
-    "tailwind-variants": "^3.3.0"
+    "tailwind-variants": "^3.3.1"
   },
   "license": "MIT",
   "author": "zuohuadong",
@@ -97,12 +97,12 @@
     "url": "https://github.com/zuohuadong/svadmin/issues"
   },
   "devDependencies": {
-    "@happy-dom/global-registrator": "^20.11.1",
-    "@sveltejs/vite-plugin-svelte": "^7.2.0",
+    "@happy-dom/global-registrator": "^20.11.2",
+    "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/svelte": "^5.4.2",
-    "@testing-library/user-event": "^14.6.1",
-    "happy-dom": "^20.11.1",
+    "@testing-library/user-event": "^14.6.3",
+    "happy-dom": "^20.11.2",
     "vitest": "^4.1.10"
   },
   "scripts": {