@trebired/frontend 6.14.1 → 6.15.0

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable package changes are documented here.
 
+## 6.15.0
+
+- Added a configurable server React permission-state builder so apps can keep permission scope policy in config while the package owns render-shell serialization.
+
 ## 6.14.1
 
 - Closed stale package modals and popovers before removing portaled overlay nodes during live DOM updates so overlay runtime state stays consistent.

package/dist/server/index.d.ts

@@ -14,6 +14,7 @@ export * from "./live-socket.js";
 export * from "./navigation.js";
 export * from "./page-task.js";
 export * from "./react/render.d.ts";
+export * from "./react/permissions.js";
 export * from "./render/mode.js";
 export * from "./render/mode-toolkit.js";
 export * from "./security.js";

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/server/index.js

@@ -14,6 +14,7 @@ export * from "./live-socket.js";
 export * from "./navigation.js";
 export * from "./page-task.js";
 export * from "./react/render.js";
+export * from "./react/permissions.js";
 export * from "./render/mode.js";
 export * from "./render/mode-toolkit.js";
 export * from "./security.js";

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/server/react/permissions.d.ts

@@ -0,0 +1,32 @@
+type PermissionStateContext = {
+    res?: {
+        locals?: Record<string, unknown>;
+    };
+    shellInput?: {
+        permissionState?: Record<string, unknown>;
+    };
+};
+type PermissionStateScope = {
+    allOutputKey?: string;
+    allToken?: string;
+    key: string;
+    outputKey?: string;
+    viewerPath?: readonly string[];
+};
+type PermissionStateFlag = {
+    allScope?: string;
+    key: string;
+    permission?: string;
+    requireScope?: string;
+};
+type PermissionStateBuilderOptions = {
+    flags?: readonly PermissionStateFlag[];
+    requirePermissionLocalKey?: string;
+    scopes?: readonly PermissionStateScope[];
+    viewerLocalKey?: string;
+};
+declare function buildPermissionState(context: PermissionStateContext, options: PermissionStateBuilderOptions): Record<string, unknown>;
+declare function createPermissionStateBuilder(options?: PermissionStateBuilderOptions): (context: PermissionStateContext) => Record<string, unknown>;
+export { buildPermissionState, createPermissionStateBuilder };
+export type { PermissionStateBuilderOptions, PermissionStateContext, PermissionStateFlag, PermissionStateScope, };
+//# sourceMappingURL=permissions.d.ts.map

package/dist/server/react/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/server/react/permissions.ts"],"names":[],"mappings":"AAEA,KAAK,sBAAsB,GAAG;IAC5B,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IACF,UAAU,CAAC,EAAE;QACX,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,CAAC;CACH,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACnC,KAAK,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAqFF,iBAAS,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,2BAYpG;AAED,iBAAS,4BAA4B,CAAC,OAAO,GAAE,6BAAkC,IAMvE,SAAS,sBAAsB,6BACxC;AAED,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,CAAC;AAC9D,YAAY,EACV,6BAA6B,EAC7B,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,GACrB,CAAC"}

package/dist/server/react/permissions.js

@@ -0,0 +1,76 @@
+import { serverObject } from "../http.js";
+function stringList(input) {
+    return Array.isArray(input)
+        ? input.map((item) => String(item == null ? "" : item).trim()).filter(Boolean)
+        : [];
+}
+function pathValue(input, path = []) {
+    let current = input;
+    for (const segment of path) {
+        current = serverObject(current)[segment];
+    }
+    return current;
+}
+function readLocal(context, key) {
+    return serverObject(context.res?.locals)[key];
+}
+function explicitPermissionState(context) {
+    const provided = context.shellInput?.permissionState;
+    return provided && typeof provided === "object"
+        ? provided
+        : null;
+}
+function readRequirePermission(context, options) {
+    return serverObject(readLocal(context, options.requirePermissionLocalKey || "requirePermission"));
+}
+function requirePermissionPasses(permissions, scope, permission) {
+    const fn = permissions[String(scope || "")];
+    return typeof fn === "function" && fn(String(permission || "")) === true;
+}
+function hasPermissionFunctions(permissions) {
+    return Object.keys(permissions).some((key) => typeof permissions[key] === "function");
+}
+function buildScopeState(viewer, scopes, state) {
+    const values = new Map();
+    for (const scope of scopes) {
+        const list = stringList(pathValue(viewer, scope.viewerPath));
+        const outputKey = scope.outputKey || `${scope.key}Permissions`;
+        state[outputKey] = list;
+        values.set(scope.key, list);
+        if (scope.allOutputKey) {
+            state[scope.allOutputKey] = list.includes(scope.allToken || "all");
+        }
+    }
+    return values;
+}
+function applyPermissionFlags(state, values, flags, permissions) {
+    for (const flag of flags) {
+        const allList = flag.allScope ? values.get(flag.allScope) || [] : [];
+        const hasAll = allList.includes("all");
+        state[flag.key] = Boolean(hasAll ||
+            (flag.permission &&
+                requirePermissionPasses(permissions, flag.requireScope || flag.allScope, flag.permission)));
+    }
+}
+function buildPermissionState(context, options) {
+    const explicit = explicitPermissionState(context);
+    if (explicit)
+        return explicit;
+    const viewer = readLocal(context, options.viewerLocalKey || "viewer");
+    const permissions = readRequirePermission(context, options);
+    const state = {};
+    const values = buildScopeState(viewer, options.scopes || [], state);
+    applyPermissionFlags(state, values, options.flags || [], permissions);
+    state.hasRequirePermissionFunctions = hasPermissionFunctions(permissions);
+    return state;
+}
+function createPermissionStateBuilder(options = {}) {
+    const config = {
+        ...options,
+        flags: options.flags ? [...options.flags] : [],
+        scopes: options.scopes ? [...options.scopes] : [],
+    };
+    return (context) => buildPermissionState(context, config);
+}
+export { buildPermissionState, createPermissionStateBuilder };
+//# sourceMappingURL=permissions.js.map

package/dist/server/react/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../src/server/react/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAiC7C,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,OAA0B,EAAE;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B,EAAE,GAAW;IAC7D,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA+B;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC;IACrD,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAC/C,CAAC,CAAC,QAAmC;QACrC,CAAC,CAAC,IAAI,CAAC;AACT,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA+B,EAAE,OAAsC;IACpG,OAAO,YAAY,CACjB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAAoC,EACpC,KAAc,EACd,UAAmB;IAEnB,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAoC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CACtB,MAAe,EACf,MAAuC,EACvC,KAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,KAAK,CAAC,GAAG,aAAa,CAAC;QAC/D,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,MAA6B,EAC7B,KAAqC,EACrC,WAAoC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CACvB,MAAM;YACJ,CAAC,IAAI,CAAC,UAAU;gBACd,uBAAuB,CACvB,WAAW,EACX,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,EAClC,IAAI,CAAC,UAAU,CAClB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA+B,EAAE,OAAsC;IACnG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAEpE,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACtE,KAAK,CAAC,6BAA6B,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAyC,EAAE;IAC/E,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAClD,CAAC;IACF,OAAO,CAAC,OAA+B,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,CAAC"}

package/dist/src/server/index.d.ts

@@ -14,6 +14,7 @@ export * from "./live-socket.js";
 export * from "./navigation.js";
 export * from "./page-task.js";
 export * from "../../server/react/render.d.ts";
+export * from "./react/permissions.js";
 export * from "./render/mode.js";
 export * from "./render/mode-toolkit.js";
 export * from "./security.js";

package/dist/src/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/src/server/index.js

@@ -14,6 +14,7 @@ export * from "./live-socket.js";
 export * from "./navigation.js";
 export * from "./page-task.js";
 export * from "../../server/react/render.js";
+export * from "./react/permissions.js";
 export * from "./render/mode.js";
 export * from "./render/mode-toolkit.js";
 export * from "./security.js";

package/dist/src/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/src/server/react/permissions.d.ts

@@ -0,0 +1,32 @@
+type PermissionStateContext = {
+    res?: {
+        locals?: Record<string, unknown>;
+    };
+    shellInput?: {
+        permissionState?: Record<string, unknown>;
+    };
+};
+type PermissionStateScope = {
+    allOutputKey?: string;
+    allToken?: string;
+    key: string;
+    outputKey?: string;
+    viewerPath?: readonly string[];
+};
+type PermissionStateFlag = {
+    allScope?: string;
+    key: string;
+    permission?: string;
+    requireScope?: string;
+};
+type PermissionStateBuilderOptions = {
+    flags?: readonly PermissionStateFlag[];
+    requirePermissionLocalKey?: string;
+    scopes?: readonly PermissionStateScope[];
+    viewerLocalKey?: string;
+};
+declare function buildPermissionState(context: PermissionStateContext, options: PermissionStateBuilderOptions): Record<string, unknown>;
+declare function createPermissionStateBuilder(options?: PermissionStateBuilderOptions): (context: PermissionStateContext) => Record<string, unknown>;
+export { buildPermissionState, createPermissionStateBuilder };
+export type { PermissionStateBuilderOptions, PermissionStateContext, PermissionStateFlag, PermissionStateScope, };
+//# sourceMappingURL=permissions.d.ts.map

package/dist/src/server/react/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/server/react/permissions.ts"],"names":[],"mappings":"AAEA,KAAK,sBAAsB,GAAG;IAC5B,GAAG,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IACF,UAAU,CAAC,EAAE;QACX,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3C,CAAC;CACH,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC;AAEF,KAAK,mBAAmB,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,6BAA6B,GAAG;IACnC,KAAK,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACvC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAqFF,iBAAS,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,2BAYpG;AAED,iBAAS,4BAA4B,CAAC,OAAO,GAAE,6BAAkC,IAMvE,SAAS,sBAAsB,6BACxC;AAED,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,CAAC;AAC9D,YAAY,EACV,6BAA6B,EAC7B,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,GACrB,CAAC"}

package/dist/src/server/react/permissions.js

@@ -0,0 +1,76 @@
+import { serverObject } from "../../../server/http.js";
+function stringList(input) {
+    return Array.isArray(input)
+        ? input.map((item) => String(item == null ? "" : item).trim()).filter(Boolean)
+        : [];
+}
+function pathValue(input, path = []) {
+    let current = input;
+    for (const segment of path) {
+        current = serverObject(current)[segment];
+    }
+    return current;
+}
+function readLocal(context, key) {
+    return serverObject(context.res?.locals)[key];
+}
+function explicitPermissionState(context) {
+    const provided = context.shellInput?.permissionState;
+    return provided && typeof provided === "object"
+        ? provided
+        : null;
+}
+function readRequirePermission(context, options) {
+    return serverObject(readLocal(context, options.requirePermissionLocalKey || "requirePermission"));
+}
+function requirePermissionPasses(permissions, scope, permission) {
+    const fn = permissions[String(scope || "")];
+    return typeof fn === "function" && fn(String(permission || "")) === true;
+}
+function hasPermissionFunctions(permissions) {
+    return Object.keys(permissions).some((key) => typeof permissions[key] === "function");
+}
+function buildScopeState(viewer, scopes, state) {
+    const values = new Map();
+    for (const scope of scopes) {
+        const list = stringList(pathValue(viewer, scope.viewerPath));
+        const outputKey = scope.outputKey || `${scope.key}Permissions`;
+        state[outputKey] = list;
+        values.set(scope.key, list);
+        if (scope.allOutputKey) {
+            state[scope.allOutputKey] = list.includes(scope.allToken || "all");
+        }
+    }
+    return values;
+}
+function applyPermissionFlags(state, values, flags, permissions) {
+    for (const flag of flags) {
+        const allList = flag.allScope ? values.get(flag.allScope) || [] : [];
+        const hasAll = allList.includes("all");
+        state[flag.key] = Boolean(hasAll ||
+            (flag.permission &&
+                requirePermissionPasses(permissions, flag.requireScope || flag.allScope, flag.permission)));
+    }
+}
+function buildPermissionState(context, options) {
+    const explicit = explicitPermissionState(context);
+    if (explicit)
+        return explicit;
+    const viewer = readLocal(context, options.viewerLocalKey || "viewer");
+    const permissions = readRequirePermission(context, options);
+    const state = {};
+    const values = buildScopeState(viewer, options.scopes || [], state);
+    applyPermissionFlags(state, values, options.flags || [], permissions);
+    state.hasRequirePermissionFunctions = hasPermissionFunctions(permissions);
+    return state;
+}
+function createPermissionStateBuilder(options = {}) {
+    const config = {
+        ...options,
+        flags: options.flags ? [...options.flags] : [],
+        scopes: options.scopes ? [...options.scopes] : [],
+    };
+    return (context) => buildPermissionState(context, config);
+}
+export { buildPermissionState, createPermissionStateBuilder };
+//# sourceMappingURL=permissions.js.map

package/dist/src/server/react/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../../../src/server/react/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAiC7C,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,OAA0B,EAAE;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B,EAAE,GAAW;IAC7D,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA+B;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC;IACrD,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAC/C,CAAC,CAAC,QAAmC;QACrC,CAAC,CAAC,IAAI,CAAC;AACT,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA+B,EAAE,OAAsC;IACpG,OAAO,YAAY,CACjB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAAoC,EACpC,KAAc,EACd,UAAmB;IAEnB,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,OAAO,OAAO,EAAE,KAAK,UAAU,IAAI,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED,SAAS,sBAAsB,CAAC,WAAoC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CACtB,MAAe,EACf,MAAuC,EACvC,KAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,KAAK,CAAC,GAAG,aAAa,CAAC;QAC/D,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,MAA6B,EAC7B,KAAqC,EACrC,WAAoC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CACvB,MAAM;YACJ,CAAC,IAAI,CAAC,UAAU;gBACd,uBAAuB,CACvB,WAAW,EACX,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,EAClC,IAAI,CAAC,UAAU,CAClB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA+B,EAAE,OAAsC;IACnG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAEpE,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IACtE,KAAK,CAAC,6BAA6B,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAyC,EAAE;IAC/E,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAClD,CAAC;IACF,OAAO,CAAC,OAA+B,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpF,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trebired/frontend",
-  "version": "6.14.1",
+  "version": "6.15.0",
   "description": "Generic browser runtime systems for Trebired frontend packages and applications.",
   "type": "module",
   "private": false,