@webiny/app-admin 0.0.0-unstable.bca7b3e350 → 0.0.0-unstable.c27f4d8a31

package/permissions/PermissionRenderer.js

@@ -0,0 +1,219 @@
+import React, { Fragment, useCallback, useMemo } from "react";
+import { CheckboxGroup, Grid, Select } from "@webiny/admin-ui";
+import { Form } from "@webiny/form";
+import { CannotUseAaclAlert, PermissionInfo, PermissionsGroup } from "../components/Permissions/index.js";
+import { usePermissionForm } from "./usePermissionForm.js";
+import { usePermissionValue } from "./PermissionValueContext.js";
+import { useAuthentication } from "../exports/admin/security.js";
+const NO_ACCESS = "no";
+const FULL_ACCESS = "full";
+const READ_ONLY_ACCESS = "read-only";
+const CUSTOM_ACCESS = "custom";
+const RWD_OPTIONS = [{
+  value: "r",
+  label: "Read"
+}, {
+  value: "rw",
+  label: "Read, write"
+}, {
+  value: "rwd",
+  label: "Read, write, delete"
+}];
+const PW_OPTIONS = [{
+  value: "p",
+  label: "Publish"
+}, {
+  value: "u",
+  label: "Unpublish"
+}];
+function hasAction(entity, name) {
+  return entity.actions?.some(a => a.name === name) ?? false;
+}
+function buildScopeOptions(entity) {
+  const options = [{
+    value: NO_ACCESS,
+    label: "No access"
+  }];
+  if (entity.scopes.includes("full")) {
+    options.push({
+      value: FULL_ACCESS,
+      label: "Full access"
+    });
+  }
+  if (entity.scopes.includes("own")) {
+    options.push({
+      value: "own",
+      label: "Only entries created by the user"
+    });
+  }
+  return options;
+}
+const BUILTIN_ACTIONS = new Set(["rwd", "pw"]);
+function getCustomActions(entity) {
+  return (entity.actions ?? []).filter(a => !BUILTIN_ACTIONS.has(a.name));
+}
+function EntitySection({
+  entity,
+  data,
+  cannotUseAAcl,
+  Bind,
+  setValue
+}) {
+  const scopeField = `${entity.id}AccessScope`;
+  const currentScope = data[scopeField];
+  const scopeDisabled = cannotUseAAcl || !currentScope || currentScope === NO_ACCESS;
+  const customActions = useMemo(() => getCustomActions(entity), [entity]);
+
+  // Derive the selected values array from individual boolean form fields.
+  const customActionsValue = useMemo(() => {
+    return customActions.filter(a => data[`${entity.id}Action_${a.name}`]).map(a => a.name);
+  }, [data, customActions, entity.id]);
+  const onCustomActionsChange = useCallback(selected => {
+    const selectedSet = new Set(selected);
+    for (const action of customActions) {
+      setValue(`${entity.id}Action_${action.name}`, selectedSet.has(action.name));
+    }
+  }, [customActions, entity.id, setValue]);
+  const columns = [/*#__PURE__*/React.createElement(Grid.Column, {
+    span: 12,
+    key: "access"
+  }, /*#__PURE__*/React.createElement(Bind, {
+    name: scopeField,
+    beforeChange: (value, cb) => {
+      if (value === "own" && hasAction(entity, "rwd")) {
+        setValue(`${entity.id}RWD`, "rwd");
+      }
+      cb(value);
+    }
+  }, /*#__PURE__*/React.createElement(Select, {
+    label: "Access Scope",
+    disabled: cannotUseAAcl,
+    options: buildScopeOptions(entity)
+  })))];
+  if (hasAction(entity, "rwd")) {
+    columns.push(/*#__PURE__*/React.createElement(Grid.Column, {
+      span: 12,
+      key: "rwd"
+    }, /*#__PURE__*/React.createElement(Bind, {
+      name: `${entity.id}RWD`
+    }, /*#__PURE__*/React.createElement(Select, {
+      label: "Primary Actions",
+      disabled: scopeDisabled || currentScope === "own",
+      options: RWD_OPTIONS
+    }))));
+  }
+  if (hasAction(entity, "pw")) {
+    columns.push(/*#__PURE__*/React.createElement(Grid.Column, {
+      span: 12,
+      key: "pw"
+    }, /*#__PURE__*/React.createElement(Bind, {
+      name: `${entity.id}PW`
+    }, /*#__PURE__*/React.createElement(CheckboxGroup, {
+      label: "Publishing actions",
+      description: "Publishing-related actions that can be performed on entries.",
+      items: PW_OPTIONS.map(opt => ({
+        ...opt,
+        disabled: scopeDisabled
+      }))
+    }))));
+  }
+  if (customActions.length > 0) {
+    columns.push(/*#__PURE__*/React.createElement(Grid.Column, {
+      span: 12,
+      key: "other"
+    }, /*#__PURE__*/React.createElement(CheckboxGroup, {
+      label: "Other Actions",
+      value: customActionsValue,
+      onChange: onCustomActionsChange,
+      items: customActions.map(action => ({
+        value: action.name,
+        label: action.label || action.name,
+        disabled: scopeDisabled
+      }))
+    })));
+  }
+  return /*#__PURE__*/React.createElement(PermissionsGroup, {
+    title: entity.title || entity.id
+  }, /*#__PURE__*/React.createElement(Grid, null, columns));
+}
+export const PermissionRenderer = ({
+  schema
+}) => {
+  const {
+    value,
+    onChange
+  } = usePermissionValue();
+  const {
+    identity
+  } = useAuthentication();
+  const cannotUseAAcl = useMemo(() => {
+    return !identity.getPermission("aacl", true);
+  }, []);
+  const {
+    formData,
+    onFormChange
+  } = usePermissionForm(schema, {
+    value,
+    onChange
+  });
+  const entities = schema.entities || [];
+  const hasEntities = entities.length > 0;
+  const accessLevelOptions = useMemo(() => {
+    const options = [{
+      value: NO_ACCESS,
+      label: "No access"
+    }];
+    if (schema.readOnlyAccess) {
+      options.push({
+        value: READ_ONLY_ACCESS,
+        label: "Read-only access"
+      });
+    }
+    options.push({
+      value: FULL_ACCESS,
+      label: "Full access"
+    });
+    if (hasEntities) {
+      options.push({
+        value: CUSTOM_ACCESS,
+        label: "Custom access"
+      });
+    }
+    return options;
+  }, [schema, hasEntities]);
+  return /*#__PURE__*/React.createElement(Form, {
+    data: formData,
+    onChange: onFormChange
+  }, ({
+    data,
+    Bind,
+    setValue
+  }) => /*#__PURE__*/React.createElement(Fragment, null, /*#__PURE__*/React.createElement(Grid, {
+    className: "pt-md"
+  }, /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 12
+  }, data.accessLevel === CUSTOM_ACCESS && cannotUseAAcl && /*#__PURE__*/React.createElement(CannotUseAaclAlert, null))), /*#__PURE__*/React.createElement(Grid, {
+    className: "pt-md"
+  }, /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 6
+  }, /*#__PURE__*/React.createElement(PermissionInfo, {
+    title: "Access Level"
+  })), /*#__PURE__*/React.createElement(Grid.Column, {
+    span: 6
+  }, /*#__PURE__*/React.createElement(Bind, {
+    name: "accessLevel"
+  }, /*#__PURE__*/React.createElement(Select, {
+    options: accessLevelOptions
+  })))), data.accessLevel === CUSTOM_ACCESS && hasEntities && /*#__PURE__*/React.createElement("div", {
+    className: "mt-lg"
+  }, entities.map(entity => /*#__PURE__*/React.createElement(EntitySection, {
+    key: entity.id,
+    entity: entity,
+    data: data,
+    cannotUseAAcl: cannotUseAAcl,
+    Bind: Bind,
+    setValue: setValue
+  })))));
+};
+
+//# sourceMappingURL=PermissionRenderer.js.map

package/permissions/PermissionRenderer.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","Fragment","useCallback","useMemo","CheckboxGroup","Grid","Select","Form","CannotUseAaclAlert","PermissionInfo","PermissionsGroup","usePermissionForm","usePermissionValue","useAuthentication","NO_ACCESS","FULL_ACCESS","READ_ONLY_ACCESS","CUSTOM_ACCESS","RWD_OPTIONS","value","label","PW_OPTIONS","hasAction","entity","name","actions","some","a","buildScopeOptions","options","scopes","includes","push","BUILTIN_ACTIONS","Set","getCustomActions","filter","has","EntitySection","data","cannotUseAAcl","Bind","setValue","scopeField","id","currentScope","scopeDisabled","customActions","customActionsValue","map","onCustomActionsChange","selected","selectedSet","action","columns","createElement","Column","span","key","beforeChange","cb","disabled","description","items","opt","length","onChange","title","PermissionRenderer","schema","identity","getPermission","formData","onFormChange","entities","hasEntities","accessLevelOptions","readOnlyAccess","className","accessLevel"],"sources":["PermissionRenderer.tsx"],"sourcesContent":["import React, { Fragment, useCallback, useMemo } from \"react\";\nimport { CheckboxGroup, Grid, Select } from \"@webiny/admin-ui\";\nimport { Form } from \"@webiny/form\";\nimport type { BindComponent } from \"@webiny/form\";\nimport {\n    CannotUseAaclAlert,\n    PermissionInfo,\n    PermissionsGroup\n} from \"../components/Permissions/index.js\";\nimport { usePermissionForm } from \"./usePermissionForm.js\";\nimport type { AaclPermission } from \"../features/wcp/types.js\";\nimport type { ActionDefinition, PermissionSchema, EntityDefinition } from \"./types.js\";\nimport { usePermissionValue } from \"./PermissionValueContext.js\";\nimport { useAuthentication } from \"~/exports/admin/security.js\";\n\nexport interface PermissionRendererProps {\n    schema: PermissionSchema;\n}\n\nconst NO_ACCESS = \"no\";\nconst FULL_ACCESS = \"full\";\nconst READ_ONLY_ACCESS = \"read-only\";\nconst CUSTOM_ACCESS = \"custom\";\n\nconst RWD_OPTIONS = [\n    { value: \"r\", label: \"Read\" },\n    { value: \"rw\", label: \"Read, write\" },\n    { value: \"rwd\", label: \"Read, write, delete\" }\n];\n\nconst PW_OPTIONS = [\n    { value: \"p\", label: \"Publish\" },\n    { value: \"u\", label: \"Unpublish\" }\n];\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\nfunction buildScopeOptions(entity: EntityDefinition) {\n    const options = [{ value: NO_ACCESS, label: \"No access\" }];\n\n    if (entity.scopes.includes(\"full\")) {\n        options.push({ value: FULL_ACCESS, label: \"Full access\" });\n    }\n\n    if (entity.scopes.includes(\"own\")) {\n        options.push({ value: \"own\", label: \"Only entries created by the user\" });\n    }\n\n    return options;\n}\n\nconst BUILTIN_ACTIONS = new Set([\"rwd\", \"pw\"]);\n\nfunction getCustomActions(entity: EntityDefinition): ActionDefinition[] {\n    return (entity.actions ?? []).filter(a => !BUILTIN_ACTIONS.has(a.name));\n}\n\ninterface EntitySectionProps {\n    entity: EntityDefinition;\n    data: Record<string, any>;\n    cannotUseAAcl: boolean;\n    Bind: BindComponent;\n    setValue: (name: string, value: any) => void;\n}\n\nfunction EntitySection({ entity, data, cannotUseAAcl, Bind, setValue }: EntitySectionProps) {\n    const scopeField = `${entity.id}AccessScope`;\n    const currentScope = data[scopeField];\n    const scopeDisabled = cannotUseAAcl || !currentScope || currentScope === NO_ACCESS;\n    const customActions = useMemo(() => getCustomActions(entity), [entity]);\n\n    // Derive the selected values array from individual boolean form fields.\n    const customActionsValue = useMemo(() => {\n        return customActions.filter(a => data[`${entity.id}Action_${a.name}`]).map(a => a.name);\n    }, [data, customActions, entity.id]);\n\n    const onCustomActionsChange = useCallback(\n        (selected: string[]) => {\n            const selectedSet = new Set(selected);\n            for (const action of customActions) {\n                setValue(`${entity.id}Action_${action.name}`, selectedSet.has(action.name));\n            }\n        },\n        [customActions, entity.id, setValue]\n    );\n\n    const columns = [\n        <Grid.Column span={12} key={\"access\"}>\n            <Bind\n                name={scopeField}\n                beforeChange={(value: string, cb: (v: string) => void) => {\n                    if (value === \"own\" && hasAction(entity, \"rwd\")) {\n                        setValue(`${entity.id}RWD`, \"rwd\");\n                    }\n                    cb(value);\n                }}\n            >\n                <Select\n                    label={\"Access Scope\"}\n                    disabled={cannotUseAAcl}\n                    options={buildScopeOptions(entity)}\n                />\n            </Bind>\n        </Grid.Column>\n    ];\n\n    if (hasAction(entity, \"rwd\")) {\n        columns.push(\n            <Grid.Column span={12} key={\"rwd\"}>\n                <Bind name={`${entity.id}RWD`}>\n                    <Select\n                        label={\"Primary Actions\"}\n                        disabled={scopeDisabled || currentScope === \"own\"}\n                        options={RWD_OPTIONS}\n                    />\n                </Bind>\n            </Grid.Column>\n        );\n    }\n\n    if (hasAction(entity, \"pw\")) {\n        columns.push(\n            <Grid.Column span={12} key={\"pw\"}>\n                <Bind name={`${entity.id}PW`}>\n                    <CheckboxGroup\n                        label={\"Publishing actions\"}\n                        description={\"Publishing-related actions that can be performed on entries.\"}\n                        items={PW_OPTIONS.map(opt => ({\n                            ...opt,\n                            disabled: scopeDisabled\n                        }))}\n                    />\n                </Bind>\n            </Grid.Column>\n        );\n    }\n\n    if (customActions.length > 0) {\n        columns.push(\n            <Grid.Column span={12} key={\"other\"}>\n                <CheckboxGroup\n                    label={\"Other Actions\"}\n                    value={customActionsValue}\n                    onChange={onCustomActionsChange}\n                    items={customActions.map(action => ({\n                        value: action.name,\n                        label: action.label || action.name,\n                        disabled: scopeDisabled\n                    }))}\n                />\n            </Grid.Column>\n        );\n    }\n\n    return (\n        <PermissionsGroup title={entity.title || entity.id}>\n            <Grid>{columns}</Grid>\n        </PermissionsGroup>\n    );\n}\n\nexport const PermissionRenderer = ({ schema }: PermissionRendererProps) => {\n    const { value, onChange } = usePermissionValue();\n    const { identity } = useAuthentication();\n\n    const cannotUseAAcl = useMemo(() => {\n        return !identity.getPermission<AaclPermission>(\"aacl\", true);\n    }, []);\n\n    const { formData, onFormChange } = usePermissionForm(schema, { value, onChange });\n\n    const entities = schema.entities || [];\n    const hasEntities = entities.length > 0;\n\n    const accessLevelOptions = useMemo(() => {\n        const options = [{ value: NO_ACCESS, label: \"No access\" }];\n\n        if (schema.readOnlyAccess) {\n            options.push({ value: READ_ONLY_ACCESS, label: \"Read-only access\" });\n        }\n\n        options.push({ value: FULL_ACCESS, label: \"Full access\" });\n\n        if (hasEntities) {\n            options.push({ value: CUSTOM_ACCESS, label: \"Custom access\" });\n        }\n\n        return options;\n    }, [schema, hasEntities]);\n\n    return (\n        <Form data={formData} onChange={onFormChange}>\n            {({ data, Bind, setValue }) => (\n                <Fragment>\n                    <Grid className={\"pt-md\"}>\n                        <Grid.Column span={12}>\n                            {data.accessLevel === CUSTOM_ACCESS && cannotUseAAcl && (\n                                <CannotUseAaclAlert />\n                            )}\n                        </Grid.Column>\n                    </Grid>\n                    <Grid className={\"pt-md\"}>\n                        <Grid.Column span={6}>\n                            <PermissionInfo title={\"Access Level\"} />\n                        </Grid.Column>\n                        <Grid.Column span={6}>\n                            <Bind name={\"accessLevel\"}>\n                                <Select options={accessLevelOptions} />\n                            </Bind>\n                        </Grid.Column>\n                    </Grid>\n                    {data.accessLevel === CUSTOM_ACCESS && hasEntities && (\n                        <div className={\"mt-lg\"}>\n                            {entities.map(entity => (\n                                <EntitySection\n                                    key={entity.id}\n                                    entity={entity}\n                                    data={data}\n                                    cannotUseAAcl={cannotUseAAcl}\n                                    Bind={Bind}\n                                    setValue={setValue}\n                                />\n                            ))}\n                        </div>\n                    )}\n                </Fragment>\n            )}\n        </Form>\n    );\n};\n"],"mappings":"AAAA,OAAOA,KAAK,IAAIC,QAAQ,EAAEC,WAAW,EAAEC,OAAO,QAAQ,OAAO;AAC7D,SAASC,aAAa,EAAEC,IAAI,EAAEC,MAAM,QAAQ,kBAAkB;AAC9D,SAASC,IAAI,QAAQ,cAAc;AAEnC,SACIC,kBAAkB,EAClBC,cAAc,EACdC,gBAAgB;AAEpB,SAASC,iBAAiB;AAG1B,SAASC,kBAAkB;AAC3B,SAASC,iBAAiB;AAM1B,MAAMC,SAAS,GAAG,IAAI;AACtB,MAAMC,WAAW,GAAG,MAAM;AAC1B,MAAMC,gBAAgB,GAAG,WAAW;AACpC,MAAMC,aAAa,GAAG,QAAQ;AAE9B,MAAMC,WAAW,GAAG,CAChB;EAAEC,KAAK,EAAE,GAAG;EAAEC,KAAK,EAAE;AAAO,CAAC,EAC7B;EAAED,KAAK,EAAE,IAAI;EAAEC,KAAK,EAAE;AAAc,CAAC,EACrC;EAAED,KAAK,EAAE,KAAK;EAAEC,KAAK,EAAE;AAAsB,CAAC,CACjD;AAED,MAAMC,UAAU,GAAG,CACf;EAAEF,KAAK,EAAE,GAAG;EAAEC,KAAK,EAAE;AAAU,CAAC,EAChC;EAAED,KAAK,EAAE,GAAG;EAAEC,KAAK,EAAE;AAAY,CAAC,CACrC;AAED,SAASE,SAASA,CAACC,MAAwB,EAAEC,IAAY,EAAW;EAChE,OAAOD,MAAM,CAACE,OAAO,EAAEC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACH,IAAI,KAAKA,IAAI,CAAC,IAAI,KAAK;AAC9D;AAEA,SAASI,iBAAiBA,CAACL,MAAwB,EAAE;EACjD,MAAMM,OAAO,GAAG,CAAC;IAAEV,KAAK,EAAEL,SAAS;IAAEM,KAAK,EAAE;EAAY,CAAC,CAAC;EAE1D,IAAIG,MAAM,CAACO,MAAM,CAACC,QAAQ,CAAC,MAAM,CAAC,EAAE;IAChCF,OAAO,CAACG,IAAI,CAAC;MAAEb,KAAK,EAAEJ,WAAW;MAAEK,KAAK,EAAE;IAAc,CAAC,CAAC;EAC9D;EAEA,IAAIG,MAAM,CAACO,MAAM,CAACC,QAAQ,CAAC,KAAK,CAAC,EAAE;IAC/BF,OAAO,CAACG,IAAI,CAAC;MAAEb,KAAK,EAAE,KAAK;MAAEC,KAAK,EAAE;IAAmC,CAAC,CAAC;EAC7E;EAEA,OAAOS,OAAO;AAClB;AAEA,MAAMI,eAAe,GAAG,IAAIC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAE9C,SAASC,gBAAgBA,CAACZ,MAAwB,EAAsB;EACpE,OAAO,CAACA,MAAM,CAACE,OAAO,IAAI,EAAE,EAAEW,MAAM,CAACT,CAAC,IAAI,CAACM,eAAe,CAACI,GAAG,CAACV,CAAC,CAACH,IAAI,CAAC,CAAC;AAC3E;AAUA,SAASc,aAAaA,CAAC;EAAEf,MAAM;EAAEgB,IAAI;EAAEC,aAAa;EAAEC,IAAI;EAAEC;AAA6B,CAAC,EAAE;EACxF,MAAMC,UAAU,GAAG,GAAGpB,MAAM,CAACqB,EAAE,aAAa;EAC5C,MAAMC,YAAY,GAAGN,IAAI,CAACI,UAAU,CAAC;EACrC,MAAMG,aAAa,GAAGN,aAAa,IAAI,CAACK,YAAY,IAAIA,YAAY,KAAK/B,SAAS;EAClF,MAAMiC,aAAa,GAAG5C,OAAO,CAAC,MAAMgC,gBAAgB,CAACZ,MAAM,CAAC,EAAE,CAACA,MAAM,CAAC,CAAC;;EAEvE;EACA,MAAMyB,kBAAkB,GAAG7C,OAAO,CAAC,MAAM;IACrC,OAAO4C,aAAa,CAACX,MAAM,CAACT,CAAC,IAAIY,IAAI,CAAC,GAAGhB,MAAM,CAACqB,EAAE,UAAUjB,CAAC,CAACH,IAAI,EAAE,CAAC,CAAC,CAACyB,GAAG,CAACtB,CAAC,IAAIA,CAAC,CAACH,IAAI,CAAC;EAC3F,CAAC,EAAE,CAACe,IAAI,EAAEQ,aAAa,EAAExB,MAAM,CAACqB,EAAE,CAAC,CAAC;EAEpC,MAAMM,qBAAqB,GAAGhD,WAAW,CACpCiD,QAAkB,IAAK;IACpB,MAAMC,WAAW,GAAG,IAAIlB,GAAG,CAACiB,QAAQ,CAAC;IACrC,KAAK,MAAME,MAAM,IAAIN,aAAa,EAAE;MAChCL,QAAQ,CAAC,GAAGnB,MAAM,CAACqB,EAAE,UAAUS,MAAM,CAAC7B,IAAI,EAAE,EAAE4B,WAAW,CAACf,GAAG,CAACgB,MAAM,CAAC7B,IAAI,CAAC,CAAC;IAC/E;EACJ,CAAC,EACD,CAACuB,aAAa,EAAExB,MAAM,CAACqB,EAAE,EAAEF,QAAQ,CACvC,CAAC;EAED,MAAMY,OAAO,GAAG,cACZtD,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;IAACC,IAAI,EAAE,EAAG;IAACC,GAAG,EAAE;EAAS,gBACjC1D,KAAA,CAAAuD,aAAA,CAACd,IAAI;IACDjB,IAAI,EAAEmB,UAAW;IACjBgB,YAAY,EAAEA,CAACxC,KAAa,EAAEyC,EAAuB,KAAK;MACtD,IAAIzC,KAAK,KAAK,KAAK,IAAIG,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;QAC7CmB,QAAQ,CAAC,GAAGnB,MAAM,CAACqB,EAAE,KAAK,EAAE,KAAK,CAAC;MACtC;MACAgB,EAAE,CAACzC,KAAK,CAAC;IACb;EAAE,gBAEFnB,KAAA,CAAAuD,aAAA,CAACjD,MAAM;IACHc,KAAK,EAAE,cAAe;IACtByC,QAAQ,EAAErB,aAAc;IACxBX,OAAO,EAAED,iBAAiB,CAACL,MAAM;EAAE,CACtC,CACC,CACG,CAAC,CACjB;EAED,IAAID,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;IAC1B+B,OAAO,CAACtB,IAAI,cACRhC,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;MAACC,IAAI,EAAE,EAAG;MAACC,GAAG,EAAE;IAAM,gBAC9B1D,KAAA,CAAAuD,aAAA,CAACd,IAAI;MAACjB,IAAI,EAAE,GAAGD,MAAM,CAACqB,EAAE;IAAM,gBAC1B5C,KAAA,CAAAuD,aAAA,CAACjD,MAAM;MACHc,KAAK,EAAE,iBAAkB;MACzByC,QAAQ,EAAEf,aAAa,IAAID,YAAY,KAAK,KAAM;MAClDhB,OAAO,EAAEX;IAAY,CACxB,CACC,CACG,CACjB,CAAC;EACL;EAEA,IAAII,SAAS,CAACC,MAAM,EAAE,IAAI,CAAC,EAAE;IACzB+B,OAAO,CAACtB,IAAI,cACRhC,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;MAACC,IAAI,EAAE,EAAG;MAACC,GAAG,EAAE;IAAK,gBAC7B1D,KAAA,CAAAuD,aAAA,CAACd,IAAI;MAACjB,IAAI,EAAE,GAAGD,MAAM,CAACqB,EAAE;IAAK,gBACzB5C,KAAA,CAAAuD,aAAA,CAACnD,aAAa;MACVgB,KAAK,EAAE,oBAAqB;MAC5B0C,WAAW,EAAE,8DAA+D;MAC5EC,KAAK,EAAE1C,UAAU,CAAC4B,GAAG,CAACe,GAAG,KAAK;QAC1B,GAAGA,GAAG;QACNH,QAAQ,EAAEf;MACd,CAAC,CAAC;IAAE,CACP,CACC,CACG,CACjB,CAAC;EACL;EAEA,IAAIC,aAAa,CAACkB,MAAM,GAAG,CAAC,EAAE;IAC1BX,OAAO,CAACtB,IAAI,cACRhC,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;MAACC,IAAI,EAAE,EAAG;MAACC,GAAG,EAAE;IAAQ,gBAChC1D,KAAA,CAAAuD,aAAA,CAACnD,aAAa;MACVgB,KAAK,EAAE,eAAgB;MACvBD,KAAK,EAAE6B,kBAAmB;MAC1BkB,QAAQ,EAAEhB,qBAAsB;MAChCa,KAAK,EAAEhB,aAAa,CAACE,GAAG,CAACI,MAAM,KAAK;QAChClC,KAAK,EAAEkC,MAAM,CAAC7B,IAAI;QAClBJ,KAAK,EAAEiC,MAAM,CAACjC,KAAK,IAAIiC,MAAM,CAAC7B,IAAI;QAClCqC,QAAQ,EAAEf;MACd,CAAC,CAAC;IAAE,CACP,CACQ,CACjB,CAAC;EACL;EAEA,oBACI9C,KAAA,CAAAuD,aAAA,CAAC7C,gBAAgB;IAACyD,KAAK,EAAE5C,MAAM,CAAC4C,KAAK,IAAI5C,MAAM,CAACqB;EAAG,gBAC/C5C,KAAA,CAAAuD,aAAA,CAAClD,IAAI,QAAEiD,OAAc,CACP,CAAC;AAE3B;AAEA,OAAO,MAAMc,kBAAkB,GAAGA,CAAC;EAAEC;AAAgC,CAAC,KAAK;EACvE,MAAM;IAAElD,KAAK;IAAE+C;EAAS,CAAC,GAAGtD,kBAAkB,CAAC,CAAC;EAChD,MAAM;IAAE0D;EAAS,CAAC,GAAGzD,iBAAiB,CAAC,CAAC;EAExC,MAAM2B,aAAa,GAAGrC,OAAO,CAAC,MAAM;IAChC,OAAO,CAACmE,QAAQ,CAACC,aAAa,CAAiB,MAAM,EAAE,IAAI,CAAC;EAChE,CAAC,EAAE,EAAE,CAAC;EAEN,MAAM;IAAEC,QAAQ;IAAEC;EAAa,CAAC,GAAG9D,iBAAiB,CAAC0D,MAAM,EAAE;IAAElD,KAAK;IAAE+C;EAAS,CAAC,CAAC;EAEjF,MAAMQ,QAAQ,GAAGL,MAAM,CAACK,QAAQ,IAAI,EAAE;EACtC,MAAMC,WAAW,GAAGD,QAAQ,CAACT,MAAM,GAAG,CAAC;EAEvC,MAAMW,kBAAkB,GAAGzE,OAAO,CAAC,MAAM;IACrC,MAAM0B,OAAO,GAAG,CAAC;MAAEV,KAAK,EAAEL,SAAS;MAAEM,KAAK,EAAE;IAAY,CAAC,CAAC;IAE1D,IAAIiD,MAAM,CAACQ,cAAc,EAAE;MACvBhD,OAAO,CAACG,IAAI,CAAC;QAAEb,KAAK,EAAEH,gBAAgB;QAAEI,KAAK,EAAE;MAAmB,CAAC,CAAC;IACxE;IAEAS,OAAO,CAACG,IAAI,CAAC;MAAEb,KAAK,EAAEJ,WAAW;MAAEK,KAAK,EAAE;IAAc,CAAC,CAAC;IAE1D,IAAIuD,WAAW,EAAE;MACb9C,OAAO,CAACG,IAAI,CAAC;QAAEb,KAAK,EAAEF,aAAa;QAAEG,KAAK,EAAE;MAAgB,CAAC,CAAC;IAClE;IAEA,OAAOS,OAAO;EAClB,CAAC,EAAE,CAACwC,MAAM,EAAEM,WAAW,CAAC,CAAC;EAEzB,oBACI3E,KAAA,CAAAuD,aAAA,CAAChD,IAAI;IAACgC,IAAI,EAAEiC,QAAS;IAACN,QAAQ,EAAEO;EAAa,GACxC,CAAC;IAAElC,IAAI;IAAEE,IAAI;IAAEC;EAAS,CAAC,kBACtB1C,KAAA,CAAAuD,aAAA,CAACtD,QAAQ,qBACLD,KAAA,CAAAuD,aAAA,CAAClD,IAAI;IAACyE,SAAS,EAAE;EAAQ,gBACrB9E,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;IAACC,IAAI,EAAE;EAAG,GACjBlB,IAAI,CAACwC,WAAW,KAAK9D,aAAa,IAAIuB,aAAa,iBAChDxC,KAAA,CAAAuD,aAAA,CAAC/C,kBAAkB,MAAE,CAEhB,CACX,CAAC,eACPR,KAAA,CAAAuD,aAAA,CAAClD,IAAI;IAACyE,SAAS,EAAE;EAAQ,gBACrB9E,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;IAACC,IAAI,EAAE;EAAE,gBACjBzD,KAAA,CAAAuD,aAAA,CAAC9C,cAAc;IAAC0D,KAAK,EAAE;EAAe,CAAE,CAC/B,CAAC,eACdnE,KAAA,CAAAuD,aAAA,CAAClD,IAAI,CAACmD,MAAM;IAACC,IAAI,EAAE;EAAE,gBACjBzD,KAAA,CAAAuD,aAAA,CAACd,IAAI;IAACjB,IAAI,EAAE;EAAc,gBACtBxB,KAAA,CAAAuD,aAAA,CAACjD,MAAM;IAACuB,OAAO,EAAE+C;EAAmB,CAAE,CACpC,CACG,CACX,CAAC,EACNrC,IAAI,CAACwC,WAAW,KAAK9D,aAAa,IAAI0D,WAAW,iBAC9C3E,KAAA,CAAAuD,aAAA;IAAKuB,SAAS,EAAE;EAAQ,GACnBJ,QAAQ,CAACzB,GAAG,CAAC1B,MAAM,iBAChBvB,KAAA,CAAAuD,aAAA,CAACjB,aAAa;IACVoB,GAAG,EAAEnC,MAAM,CAACqB,EAAG;IACfrB,MAAM,EAAEA,MAAO;IACfgB,IAAI,EAAEA,IAAK;IACXC,aAAa,EAAEA,aAAc;IAC7BC,IAAI,EAAEA,IAAK;IACXC,QAAQ,EAAEA;EAAS,CACtB,CACJ,CACA,CAEH,CAEZ,CAAC;AAEf,CAAC","ignoreList":[]}

package/permissions/PermissionValueContext.d.ts

@@ -0,0 +1,11 @@
+import React from "react";
+import type { Permission } from "./types.js";
+interface PermissionValueContextValue {
+    value: Permission[];
+    onChange: (value: Permission[]) => void;
+}
+export declare const PermissionValueProvider: ({ value, onChange, children }: PermissionValueContextValue & {
+    children: React.ReactNode;
+}) => React.JSX.Element;
+export declare function usePermissionValue(): PermissionValueContextValue;
+export {};

package/permissions/PermissionValueContext.js

@@ -0,0 +1,23 @@
+import React, { useContext } from "react";
+const PermissionValueContext = /*#__PURE__*/React.createContext(null);
+export const PermissionValueProvider = ({
+  value,
+  onChange,
+  children
+}) => {
+  return /*#__PURE__*/React.createElement(PermissionValueContext.Provider, {
+    value: {
+      value,
+      onChange
+    }
+  }, children);
+};
+export function usePermissionValue() {
+  const ctx = useContext(PermissionValueContext);
+  if (!ctx) {
+    throw new Error("usePermissionValue must be used within a PermissionValueProvider");
+  }
+  return ctx;
+}
+
+//# sourceMappingURL=PermissionValueContext.js.map

package/permissions/PermissionValueContext.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","useContext","PermissionValueContext","createContext","PermissionValueProvider","value","onChange","children","createElement","Provider","usePermissionValue","ctx","Error"],"sources":["PermissionValueContext.tsx"],"sourcesContent":["import React, { useContext } from \"react\";\nimport type { Permission } from \"./types.js\";\n\ninterface PermissionValueContextValue {\n    value: Permission[];\n    onChange: (value: Permission[]) => void;\n}\n\nconst PermissionValueContext = React.createContext<PermissionValueContextValue | null>(null);\n\nexport const PermissionValueProvider = ({\n    value,\n    onChange,\n    children\n}: PermissionValueContextValue & { children: React.ReactNode }) => {\n    return (\n        <PermissionValueContext.Provider value={{ value, onChange }}>\n            {children}\n        </PermissionValueContext.Provider>\n    );\n};\n\nexport function usePermissionValue(): PermissionValueContextValue {\n    const ctx = useContext(PermissionValueContext);\n    if (!ctx) {\n        throw new Error(\"usePermissionValue must be used within a PermissionValueProvider\");\n    }\n    return ctx;\n}\n"],"mappings":"AAAA,OAAOA,KAAK,IAAIC,UAAU,QAAQ,OAAO;AAQzC,MAAMC,sBAAsB,gBAAGF,KAAK,CAACG,aAAa,CAAqC,IAAI,CAAC;AAE5F,OAAO,MAAMC,uBAAuB,GAAGA,CAAC;EACpCC,KAAK;EACLC,QAAQ;EACRC;AACyD,CAAC,KAAK;EAC/D,oBACIP,KAAA,CAAAQ,aAAA,CAACN,sBAAsB,CAACO,QAAQ;IAACJ,KAAK,EAAE;MAAEA,KAAK;MAAEC;IAAS;EAAE,GACvDC,QAC4B,CAAC;AAE1C,CAAC;AAED,OAAO,SAASG,kBAAkBA,CAAA,EAAgC;EAC9D,MAAMC,GAAG,GAAGV,UAAU,CAACC,sBAAsB,CAAC;EAC9C,IAAI,CAACS,GAAG,EAAE;IACN,MAAM,IAAIC,KAAK,CAAC,kEAAkE,CAAC;EACvF;EACA,OAAOD,GAAG;AACd","ignoreList":[]}

package/permissions/createHasPermission.d.ts

@@ -0,0 +1,3 @@
+import React from "react";
+import type { PermissionSchemaConfig, HasPermissionProps } from "./types.js";
+export declare function createHasPermission<const S extends PermissionSchemaConfig>(schema: S): React.FC<HasPermissionProps<S>>;

package/permissions/createHasPermission.js

@@ -0,0 +1,36 @@
+import React from "react";
+import { createUsePermissions } from "./usePermissions.js";
+const BUILT_IN_ACTIONS = {
+  read: "canRead",
+  create: "canCreate",
+  edit: "canEdit",
+  delete: "canDelete",
+  publish: "canPublish",
+  unpublish: "canUnpublish"
+};
+export function createHasPermission(schema) {
+  const usePermissions = createUsePermissions(schema);
+  return function HasPermission({
+    children,
+    ...props
+  }) {
+    const permissions = usePermissions();
+    const action = props.action;
+    const entities = props.entity ? [props.entity] : props.any ?? props.all ?? [];
+    const requireAll = !!props.all;
+    const check = entityId => {
+      if (!action) {
+        return permissions.canAccess(entityId);
+      }
+      const method = BUILT_IN_ACTIONS[action];
+      if (method) {
+        return permissions[method](entityId);
+      }
+      return permissions.canAction(action, entityId);
+    };
+    const allowed = requireAll ? entities.every(check) : entities.some(check);
+    return allowed ? /*#__PURE__*/React.createElement(React.Fragment, null, children) : null;
+  };
+}
+
+//# sourceMappingURL=createHasPermission.js.map

package/permissions/createHasPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["React","createUsePermissions","BUILT_IN_ACTIONS","read","create","edit","delete","publish","unpublish","createHasPermission","schema","usePermissions","HasPermission","children","props","permissions","action","entities","entity","any","all","requireAll","check","entityId","canAccess","method","canAction","allowed","every","some","createElement","Fragment"],"sources":["createHasPermission.tsx"],"sourcesContent":["import React from \"react\";\nimport { createUsePermissions } from \"./usePermissions.js\";\nimport type { PermissionSchemaConfig, HasPermissionProps } from \"./types.js\";\n\nconst BUILT_IN_ACTIONS: Record<string, string> = {\n    read: \"canRead\",\n    create: \"canCreate\",\n    edit: \"canEdit\",\n    delete: \"canDelete\",\n    publish: \"canPublish\",\n    unpublish: \"canUnpublish\"\n};\n\nexport function createHasPermission<const S extends PermissionSchemaConfig>(\n    schema: S\n): React.FC<HasPermissionProps<S>> {\n    const usePermissions = createUsePermissions(schema);\n\n    return function HasPermission({ children, ...props }) {\n        const permissions = usePermissions();\n\n        const action = props.action as string | undefined;\n        const entities: string[] = props.entity ? [props.entity] : (props.any ?? props.all ?? []);\n        const requireAll = !!props.all;\n\n        const check = (entityId: string): boolean => {\n            if (!action) {\n                return permissions.canAccess(entityId as any);\n            }\n            const method = BUILT_IN_ACTIONS[action];\n            if (method) {\n                return (permissions as any)[method](entityId);\n            }\n            return permissions.canAction(action as any, entityId as any);\n        };\n\n        const allowed = requireAll ? entities.every(check) : entities.some(check);\n\n        return allowed ? <>{children}</> : null;\n    };\n}\n"],"mappings":"AAAA,OAAOA,KAAK,MAAM,OAAO;AACzB,SAASC,oBAAoB;AAG7B,MAAMC,gBAAwC,GAAG;EAC7CC,IAAI,EAAE,SAAS;EACfC,MAAM,EAAE,WAAW;EACnBC,IAAI,EAAE,SAAS;EACfC,MAAM,EAAE,WAAW;EACnBC,OAAO,EAAE,YAAY;EACrBC,SAAS,EAAE;AACf,CAAC;AAED,OAAO,SAASC,mBAAmBA,CAC/BC,MAAS,EACsB;EAC/B,MAAMC,cAAc,GAAGV,oBAAoB,CAACS,MAAM,CAAC;EAEnD,OAAO,SAASE,aAAaA,CAAC;IAAEC,QAAQ;IAAE,GAAGC;EAAM,CAAC,EAAE;IAClD,MAAMC,WAAW,GAAGJ,cAAc,CAAC,CAAC;IAEpC,MAAMK,MAAM,GAAGF,KAAK,CAACE,MAA4B;IACjD,MAAMC,QAAkB,GAAGH,KAAK,CAACI,MAAM,GAAG,CAACJ,KAAK,CAACI,MAAM,CAAC,GAAIJ,KAAK,CAACK,GAAG,IAAIL,KAAK,CAACM,GAAG,IAAI,EAAG;IACzF,MAAMC,UAAU,GAAG,CAAC,CAACP,KAAK,CAACM,GAAG;IAE9B,MAAME,KAAK,GAAIC,QAAgB,IAAc;MACzC,IAAI,CAACP,MAAM,EAAE;QACT,OAAOD,WAAW,CAACS,SAAS,CAACD,QAAe,CAAC;MACjD;MACA,MAAME,MAAM,GAAGvB,gBAAgB,CAACc,MAAM,CAAC;MACvC,IAAIS,MAAM,EAAE;QACR,OAAQV,WAAW,CAASU,MAAM,CAAC,CAACF,QAAQ,CAAC;MACjD;MACA,OAAOR,WAAW,CAACW,SAAS,CAACV,MAAM,EAASO,QAAe,CAAC;IAChE,CAAC;IAED,MAAMI,OAAO,GAAGN,UAAU,GAAGJ,QAAQ,CAACW,KAAK,CAACN,KAAK,CAAC,GAAGL,QAAQ,CAACY,IAAI,CAACP,KAAK,CAAC;IAEzE,OAAOK,OAAO,gBAAG3B,KAAA,CAAA8B,aAAA,CAAA9B,KAAA,CAAA+B,QAAA,QAAGlB,QAAW,CAAC,GAAG,IAAI;EAC3C,CAAC;AACL","ignoreList":[]}

package/permissions/createPermissionSchema.d.ts

@@ -0,0 +1,2 @@
+import type { PermissionSchemaConfig } from "./types.js";
+export declare function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T;

package/permissions/createPermissionSchema.js

@@ -0,0 +1,8 @@
+export function createPermissionSchema(config) {
+  return {
+    ...config,
+    entities: config.entities ?? []
+  };
+}
+
+//# sourceMappingURL=createPermissionSchema.js.map

package/permissions/createPermissionSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissionSchema","config","entities"],"sources":["createPermissionSchema.ts"],"sourcesContent":["import type { PermissionSchemaConfig } from \"./types.js\";\n\nexport function createPermissionSchema<const T extends PermissionSchemaConfig>(config: T): T {\n    return {\n        ...config,\n        entities: config.entities ?? []\n    };\n}\n"],"mappings":"AAEA,OAAO,SAASA,sBAAsBA,CAAyCC,MAAS,EAAK;EACzF,OAAO;IACH,GAAGA,MAAM;IACTC,QAAQ,EAAED,MAAM,CAACC,QAAQ,IAAI;EACjC,CAAC;AACL","ignoreList":[]}

package/permissions/index.d.ts

@@ -0,0 +1,8 @@
+export { createPermissionSchema } from "./createPermissionSchema.js";
+export { createUsePermissions } from "./usePermissions.js";
+export { usePermissionForm, deserializePermissions, serializePermissions } from "./usePermissionForm.js";
+export { PermissionRenderer } from "./PermissionRenderer.js";
+export type { PermissionRendererProps } from "./PermissionRenderer.js";
+export { usePermissionValue, PermissionValueProvider } from "./PermissionValueContext.js";
+export { createHasPermission } from "./createHasPermission.js";
+export type { Permission, ActionDefinition, EntityDefinition, OwnableItem, PermissionSchemaConfig, PermissionSchema, UsePermissionFormOptions, UsePermissionFormResult, UsePermissionsResult, PermissionRendererConfig, HasPermissionAction, HasPermissionProps } from "./types.js";

package/permissions/index.js

@@ -0,0 +1,8 @@
+export { createPermissionSchema } from "./createPermissionSchema.js";
+export { createUsePermissions } from "./usePermissions.js";
+export { usePermissionForm, deserializePermissions, serializePermissions } from "./usePermissionForm.js";
+export { PermissionRenderer } from "./PermissionRenderer.js";
+export { usePermissionValue, PermissionValueProvider } from "./PermissionValueContext.js";
+export { createHasPermission } from "./createHasPermission.js";
+
+//# sourceMappingURL=index.js.map

package/permissions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createPermissionSchema","createUsePermissions","usePermissionForm","deserializePermissions","serializePermissions","PermissionRenderer","usePermissionValue","PermissionValueProvider","createHasPermission"],"sources":["index.ts"],"sourcesContent":["export { createPermissionSchema } from \"./createPermissionSchema.js\";\nexport { createUsePermissions } from \"./usePermissions.js\";\nexport {\n    usePermissionForm,\n    deserializePermissions,\n    serializePermissions\n} from \"./usePermissionForm.js\";\nexport { PermissionRenderer } from \"./PermissionRenderer.js\";\nexport type { PermissionRendererProps } from \"./PermissionRenderer.js\";\nexport { usePermissionValue, PermissionValueProvider } from \"./PermissionValueContext.js\";\nexport { createHasPermission } from \"./createHasPermission.js\";\nexport type {\n    Permission,\n    ActionDefinition,\n    EntityDefinition,\n    OwnableItem,\n    PermissionSchemaConfig,\n    PermissionSchema,\n    UsePermissionFormOptions,\n    UsePermissionFormResult,\n    UsePermissionsResult,\n    PermissionRendererConfig,\n    HasPermissionAction,\n    HasPermissionProps\n} from \"./types.js\";\n"],"mappings":"AAAA,SAASA,sBAAsB;AAC/B,SAASC,oBAAoB;AAC7B,SACIC,iBAAiB,EACjBC,sBAAsB,EACtBC,oBAAoB;AAExB,SAASC,kBAAkB;AAE3B,SAASC,kBAAkB,EAAEC,uBAAuB;AACpD,SAASC,mBAAmB","ignoreList":[]}

package/permissions/types.d.ts

@@ -0,0 +1,242 @@
+import type React from "react";
+/**
+ * A single permission object from the API.
+ */
+export interface Permission {
+    name: string;
+    [key: string]: any;
+}
+/**
+ * An action definition on an entity.
+ *
+ * Built-in actions:
+ * - `{ name: "rwd" }` — read/write/delete single-select (serialized as joined string, e.g. "rw")
+ * - `{ name: "pw" }` — publish/unpublish multi-select (serialized as joined string, e.g. "pu")
+ *
+ * Custom actions:
+ * - `{ name: "install", label: "Install" }` — boolean flag (serialized as `install: true`)
+ */
+export interface ActionDefinition {
+    /** Key on the permission object (e.g. "rwd", "pw", "install") */
+    name: string;
+    /** Display label for the UI. Required for custom actions; ignored for built-in "rwd"/"pw". */
+    label?: string;
+}
+/**
+ * Defines an entity within a permission schema.
+ */
+export interface EntityDefinition {
+    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */
+    id: string;
+    /** Display title for the UI renderer (e.g. "Files", "Settings") */
+    title?: string;
+    /** Permission name emitted for this entity (e.g. "fm.file") */
+    permission: string;
+    /** Available access scopes */
+    scopes: ("full" | "own")[];
+    /** Action definitions for this entity */
+    actions?: ActionDefinition[];
+    /** Dependency on another entity */
+    dependsOn?: {
+        /** ID of parent entity */
+        entity: string;
+        /** Required action character (e.g. "r") */
+        requires: string;
+    };
+}
+/**
+ * Configuration for creating a permission schema.
+ */
+export interface PermissionSchemaConfig {
+    /** Permission prefix — used to filter permissions from the array */
+    prefix: string;
+    /**
+     * Full access configuration.
+     * - `true` — emits `{ name: "${prefix}.*" }`.
+     * - `{ ...extras }` — emits `{ name: "${prefix}.*", ...extras }`.
+     */
+    fullAccess: boolean | {
+        [key: string]: any;
+    };
+    /**
+     * Read-only access configuration. When defined, the schema supports a read-only tier.
+     * - `true` — emits `{ name: "${prefix}.*", rwd: "r" }`.
+     * - `Permission[]` — emits the array as-is.
+     */
+    readOnlyAccess?: boolean | Permission[];
+    /** Entity definitions (optional — simple apps have none) */
+    entities?: EntityDefinition[];
+}
+/**
+ * A compiled permission schema returned by `createPermissionSchema`.
+ */
+export interface PermissionSchema {
+    prefix: string;
+    /**
+     * Full access configuration.
+     * - `true` — emits `{ name: "${prefix}.*" }`.
+     * - `{ ...extras }` — emits `{ name: "${prefix}.*", ...extras }`.
+     */
+    fullAccess: boolean | {
+        [key: string]: any;
+    };
+    /**
+     * Read-only access configuration. When defined, the schema supports a read-only tier.
+     * - `true` — emits `{ name: "${prefix}.*", rwd: "r" }`.
+     * - `Permission[]` — emits the array as-is.
+     */
+    readOnlyAccess?: boolean | Permission[];
+    entities?: EntityDefinition[];
+}
+/**
+ * Options passed to the `usePermissionForm` hook.
+ */
+export interface UsePermissionFormOptions {
+    value: Permission[];
+    onChange: (value: Permission[]) => void;
+    /** Merge extra fields into deserialized form data (for CMS endpoints, resource scopes, etc.) */
+    deserialize?: (permissions: Permission[]) => Record<string, any>;
+    /** Transform or extend the core-serialized permissions (for CMS endpoints, resource scopes, etc.) */
+    serialize?: (formData: Record<string, any>, corePermissions: Permission[]) => Permission[];
+}
+/**
+ * Return value of `usePermissionForm`.
+ */
+export interface UsePermissionFormResult {
+    formData: Record<string, any>;
+    onFormChange: (data: Record<string, any>) => void;
+}
+/**
+ * Configuration for a permission renderer registered via AdminConfig.
+ *
+ * Either `schema` or `element` must be provided:
+ * - `schema`: uses the built-in PermissionRenderer for auto-generated UI.
+ * - `element`: uses a custom React element for full control.
+ */
+export type PermissionRendererConfig = PermissionRendererConfigBase & ({
+    schema: PermissionSchema;
+    element?: never;
+} | {
+    schema?: never;
+    element: React.ReactElement;
+});
+interface PermissionRendererConfigBase {
+    name: string;
+    title: string;
+    description?: string;
+    icon?: React.ReactElement;
+    system?: boolean;
+}
+/**
+ * Item that may have an owner (used for own-scope permission checks).
+ */
+export interface OwnableItem {
+    createdBy?: {
+        id: string;
+    } | null;
+}
+/**
+ * Extract the union of entity definitions from a schema config type.
+ */
+type EntitiesOf<S extends PermissionSchemaConfig> = S extends {
+    entities: ReadonlyArray<infer E extends EntityDefinition>;
+} ? E : never;
+/**
+ * Extract entity IDs whose actions array contains an action with the given name.
+ */
+type EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {
+    [K in EntitiesOf<S> as K extends {
+        actions: ReadonlyArray<infer Act>;
+    } ? Act extends {
+        name: A;
+    } ? K["id"] : never : never]: never;
+} extends infer M ? keyof M & string : never;
+/**
+ * Entity IDs that have the "rwd" action.
+ */
+export type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "rwd">;
+/**
+ * Entity IDs that have the "pw" action.
+ */
+export type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "pw">;
+/**
+ * All entity IDs in the schema.
+ */
+export type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>["id"];
+/**
+ * Custom (non-builtin) action names across all entities.
+ */
+export type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<EntitiesOf<S> extends {
+    actions: ReadonlyArray<infer Act extends ActionDefinition>;
+} ? Act["name"] : never, "rwd" | "pw">;
+/**
+ * The return type of `usePermissions(schema)`.
+ *
+ * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.
+ * When the schema is dynamically typed, all methods accept `string`.
+ */
+export type UsePermissionsResult<S extends PermissionSchemaConfig> = string extends AllEntityIds<S> ? UsePermissionsResultUntyped : UsePermissionsResultTyped<S>;
+export interface UsePermissionsResultUntyped {
+    canAccess: (entityId: string) => boolean;
+    canRead: (entityId: string) => boolean;
+    canCreate: (entityId: string) => boolean;
+    canEdit: (entityId: string, item?: OwnableItem) => boolean;
+    canDelete: (entityId: string, item?: OwnableItem) => boolean;
+    canPublish: (entityId: string) => boolean;
+    canUnpublish: (entityId: string) => boolean;
+    canAction: (action: string, entityId: string) => boolean;
+}
+/**
+ * Action values accepted by `HasPermission`.
+ *
+ * Built-in actions are always available; custom action names from the schema are inferred automatically.
+ */
+export type HasPermissionAction<S extends PermissionSchemaConfig> = "read" | "create" | "edit" | "delete" | "publish" | "unpublish" | CustomActionNames<S>;
+/**
+ * Props for a schema-bound `HasPermission` component created via `createHasPermission`.
+ *
+ * Exactly one of `entity`, `any`, or `all` must be provided.
+ */
+export type HasPermissionProps<S extends PermissionSchemaConfig> = SingleEntityProps<S> | AnyEntitiesProps<S> | AllEntitiesProps<S>;
+interface SingleEntityProps<S extends PermissionSchemaConfig> {
+    entity: AllEntityIds<S>;
+    any?: never;
+    all?: never;
+    action?: HasPermissionAction<S>;
+    children: React.ReactNode;
+}
+interface AnyEntitiesProps<S extends PermissionSchemaConfig> {
+    entity?: never;
+    any: AllEntityIds<S>[];
+    all?: never;
+    action?: HasPermissionAction<S>;
+    children: React.ReactNode;
+}
+interface AllEntitiesProps<S extends PermissionSchemaConfig> {
+    entity?: never;
+    any?: never;
+    all: AllEntityIds<S>[];
+    action?: HasPermissionAction<S>;
+    children: React.ReactNode;
+}
+type UsePermissionsResultTyped<S extends PermissionSchemaConfig> = {
+    canAccess: (entityId: AllEntityIds<S>) => boolean;
+    canAction: (action: CustomActionNames<S> extends never ? string : CustomActionNames<S>, entityId: AllEntityIds<S>) => boolean;
+} & ([RwdEntityId<S>] extends [never] ? {
+    canRead: (entityId: string) => boolean;
+    canCreate: (entityId: string) => boolean;
+    canEdit: (entityId: string, item?: OwnableItem) => boolean;
+    canDelete: (entityId: string, item?: OwnableItem) => boolean;
+} : {
+    canRead: (entityId: RwdEntityId<S>) => boolean;
+    canCreate: (entityId: RwdEntityId<S>) => boolean;
+    canEdit: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;
+    canDelete: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;
+}) & ([PwEntityId<S>] extends [never] ? {
+    canPublish: (entityId: string) => boolean;
+    canUnpublish: (entityId: string) => boolean;
+} : {
+    canPublish: (entityId: PwEntityId<S>) => boolean;
+    canUnpublish: (entityId: PwEntityId<S>) => boolean;
+});
+export {};

package/permissions/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map