@vindentech/api-client 0.3.0-next.2 → 0.3.0-next.3

package/dist/permissions.js

@@ -0,0 +1,46 @@
+import { OPERATION_PERMISSIONS, } from "./generated/_permissions.js";
+export { OPERATION_PERMISSIONS };
+/**
+ * The access rule for an operation — what a caller needs to invoke it. A closed
+ * discriminated union, so every operation is classified and none reads as
+ * "open by omission":
+ *  - `{ kind: "permissions", permissions }` — caller must hold ALL of them;
+ *  - `{ kind: "authenticated" }` — any authenticated user;
+ *  - `{ kind: "public" }` — no authentication required.
+ *
+ * Keyed by the operation-function name as a typed string literal (e.g.
+ * `"billingAccountsControllerCreateAccountV1"`), so a renamed or removed
+ * operation is a compile error. Pass the name string, not the function — name
+ * lookup is bundler-safe where `Function.name` is not.
+ *
+ * @example
+ * import { requiredPermissions } from "@vindentech/api-client";
+ * requiredPermissions("billingAccountsControllerCreateAccountV1");
+ * // → { kind: "permissions", permissions: ["billingaccount:write"] }
+ */
+export function requiredPermissions(operation) {
+    return OPERATION_PERMISSIONS[operation];
+}
+/**
+ * Whether the given capabilities (e.g. `me.capabilities` from `GET /v1/me`)
+ * satisfy an operation's access rule. `true` for public and authenticated-only
+ * operations (they require no specific permission); for permission-gated ones
+ * the caller must hold ALL required permissions — mirroring the backend
+ * PermissionGuard exactly. Use to gate UI before calling.
+ *
+ * For logged-out rendering, read `requiredPermissions(op).kind` to distinguish
+ * `"public"` from `"authenticated"`.
+ *
+ * @example
+ * if (hasRequiredPermissions(me.capabilities, "billingAccountsControllerCreateAccountV1")) {
+ *   // show the "Create account" button
+ * }
+ */
+export function hasRequiredPermissions(capabilities, operation) {
+    const access = OPERATION_PERMISSIONS[operation];
+    if (access.kind !== "permissions")
+        return true;
+    const held = new Set(capabilities);
+    return access.permissions.every((p) => held.has(p));
+}
+//# sourceMappingURL=permissions.js.map

package/dist/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,GAItB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAGjC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAA+B,EAC/B,SAAwB;IAExB,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vindentech/api-client",
-  "version": "0.3.0-next.2",
+  "version": "0.3.0-next.3",
   "description": "TypeScript SDK for the Vinden Core API. Generated from OpenAPI via orval.",
   "license": "UNLICENSED",
   "type": "module",