@vertz/ui-server 0.2.26 → 0.2.29

package/dist/bun-dev-server.js

@@ -593,14 +593,16 @@ function createSourceMapResolver(projectRoot) {
 }
 
 // src/ssr-access-evaluator.ts
-function toPrefetchSession(ssrAuth) {
+function toPrefetchSession(ssrAuth, accessSet) {
   if (!ssrAuth || ssrAuth.status !== "authenticated" || !ssrAuth.user) {
     return { status: "unauthenticated" };
   }
   const roles = ssrAuth.user.role ? [ssrAuth.user.role] : undefined;
+  const entitlements = accessSet != null ? Object.fromEntries(Object.entries(accessSet.entitlements).map(([name, check]) => [name, check.allowed])) : undefined;
   return {
     status: "authenticated",
     roles,
+    entitlements,
     tenantId: ssrAuth.user.tenantId
   };
 }
@@ -3583,6 +3585,7 @@ data: {}
           }) : null;
           let sessionScript = "";
           let ssrAuth;
+          let ssrAccessSet;
           if (sessionResolver) {
             try {
               const sessionResult = await sessionResolver(request);
@@ -3592,6 +3595,7 @@ data: {}
                   user: sessionResult.session.user,
                   expiresAt: sessionResult.session.expiresAt
                 };
+                ssrAccessSet = sessionResult.accessSet;
                 const scripts = [];
                 scripts.push(createSessionScript(sessionResult.session));
                 if (sessionResult.accessSet != null) {
@@ -3626,7 +3630,7 @@ data: {}
               fallbackMetrics: fontFallbackMetrics,
               ssrAuth,
               manifest: prefetchManager?.getSSRManifest(),
-              prefetchSession: toPrefetchSession(ssrAuth)
+              prefetchSession: toPrefetchSession(ssrAuth, ssrAccessSet)
             });
             logger.log("ssr", "render-done", {
               url: pathname,

package/dist/index.d.ts

@@ -381,8 +381,20 @@ type PrefetchSession = {
 	status: "unauthenticated";
 };
 /**
+* Minimal shape of an AccessSet for entitlement extraction.
+* Avoids importing @vertz/server types into the SSR pipeline.
+*/
+interface AccessSetLike {
+	entitlements: Record<string, {
+		allowed: boolean;
+	}>;
+}
+/**
 * Convert SSRAuth (from the JWT/session resolver) to PrefetchSession
 * for entity access evaluation during SSR prefetching.
+*
+* @param ssrAuth - Auth state from session resolver
+* @param accessSet - Access set from JWT acl claim (null = overflow, undefined = not configured)
 */
 declare function toPrefetchSession(ssrAuth: {
 	status: string;
@@ -390,7 +402,7 @@ declare function toPrefetchSession(ssrAuth: {
 		role?: string;
 		[key: string]: unknown;
 	};
-} | undefined): PrefetchSession;
+} | undefined, accessSet?: AccessSetLike | null): PrefetchSession;
 /**
 * Evaluate a serialized access rule against the current session.
 *

package/dist/index.js

@@ -484,14 +484,16 @@ async function renderToHTML(appOrOptions, maybeOptions) {
   });
 }
 // src/ssr-access-evaluator.ts
-function toPrefetchSession(ssrAuth) {
+function toPrefetchSession(ssrAuth, accessSet) {
   if (!ssrAuth || ssrAuth.status !== "authenticated" || !ssrAuth.user) {
     return { status: "unauthenticated" };
   }
   const roles = ssrAuth.user.role ? [ssrAuth.user.role] : undefined;
+  const entitlements = accessSet != null ? Object.fromEntries(Object.entries(accessSet.entitlements).map(([name, check]) => [name, check.allowed])) : undefined;
   return {
     status: "authenticated",
     roles,
+    entitlements,
     tenantId: ssrAuth.user.tenantId
   };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vertz/ui-server",
-  "version": "0.2.26",
+  "version": "0.2.29",
   "type": "module",
   "license": "MIT",
   "description": "Vertz UI server-side rendering runtime",
@@ -58,15 +58,15 @@
     "@ampproject/remapping": "^2.3.0",
     "@capsizecss/unpack": "^4.0.0",
     "@jridgewell/trace-mapping": "^0.3.31",
-    "@vertz/core": "^0.2.25",
-    "@vertz/ui": "^0.2.25",
-    "@vertz/ui-compiler": "^0.2.25",
+    "@vertz/core": "^0.2.28",
+    "@vertz/ui": "^0.2.28",
+    "@vertz/ui-compiler": "^0.2.28",
     "magic-string": "^0.30.0",
     "sharp": "^0.34.5",
     "ts-morph": "^27.0.2"
   },
   "devDependencies": {
-    "@vertz/codegen": "^0.2.25",
+    "@vertz/codegen": "^0.2.28",
     "@vertz/ui-auth": "^0.2.19",
     "bun-types": "^1.3.10",
     "bunup": "^0.16.31",