@webiny/app-admin 0.0.0-unstable.bca7b3e350 → 0.0.0-unstable.c27f4d8a31

package/permissions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type React from \"react\";\n\n/**\n * A single permission object from the API.\n */\nexport interface Permission {\n    name: string;\n    [key: string]: any;\n}\n\n/**\n * An action definition on an entity.\n *\n * Built-in actions:\n * - `{ name: \"rwd\" }` — read/write/delete single-select (serialized as joined string, e.g. \"rw\")\n * - `{ name: \"pw\" }` — publish/unpublish multi-select (serialized as joined string, e.g. \"pu\")\n *\n * Custom actions:\n * - `{ name: \"install\", label: \"Install\" }` — boolean flag (serialized as `install: true`)\n */\nexport interface ActionDefinition {\n    /** Key on the permission object (e.g. \"rwd\", \"pw\", \"install\") */\n    name: string;\n    /** Display label for the UI. Required for custom actions; ignored for built-in \"rwd\"/\"pw\". */\n    label?: string;\n}\n\n/**\n * Defines an entity within a permission schema.\n */\nexport interface EntityDefinition {\n    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */\n    id: string;\n    /** Display title for the UI renderer (e.g. \"Files\", \"Settings\") */\n    title?: string;\n    /** Permission name emitted for this entity (e.g. \"fm.file\") */\n    permission: string;\n    /** Available access scopes */\n    scopes: (\"full\" | \"own\")[];\n    /** Action definitions for this entity */\n    actions?: ActionDefinition[];\n    /** Dependency on another entity */\n    dependsOn?: {\n        /** ID of parent entity */\n        entity: string;\n        /** Required action character (e.g. \"r\") */\n        requires: string;\n    };\n}\n\n/**\n * Configuration for creating a permission schema.\n */\nexport interface PermissionSchemaConfig {\n    /** Permission prefix — used to filter permissions from the array */\n    prefix: string;\n    /**\n     * Full access configuration.\n     * - `true` — emits `{ name: \"${prefix}.*\" }`.\n     * - `{ ...extras }` — emits `{ name: \"${prefix}.*\", ...extras }`.\n     */\n    fullAccess: boolean | { [key: string]: any };\n    /**\n     * Read-only access configuration. When defined, the schema supports a read-only tier.\n     * - `true` — emits `{ name: \"${prefix}.*\", rwd: \"r\" }`.\n     * - `Permission[]` — emits the array as-is.\n     */\n    readOnlyAccess?: boolean | Permission[];\n    /** Entity definitions (optional — simple apps have none) */\n    entities?: EntityDefinition[];\n}\n\n/**\n * A compiled permission schema returned by `createPermissionSchema`.\n */\nexport interface PermissionSchema {\n    prefix: string;\n    /**\n     * Full access configuration.\n     * - `true` — emits `{ name: \"${prefix}.*\" }`.\n     * - `{ ...extras }` — emits `{ name: \"${prefix}.*\", ...extras }`.\n     */\n    fullAccess: boolean | { [key: string]: any };\n    /**\n     * Read-only access configuration. When defined, the schema supports a read-only tier.\n     * - `true` — emits `{ name: \"${prefix}.*\", rwd: \"r\" }`.\n     * - `Permission[]` — emits the array as-is.\n     */\n    readOnlyAccess?: boolean | Permission[];\n    entities?: EntityDefinition[];\n}\n\n/**\n * Options passed to the `usePermissionForm` hook.\n */\nexport interface UsePermissionFormOptions {\n    value: Permission[];\n    onChange: (value: Permission[]) => void;\n    /** Merge extra fields into deserialized form data (for CMS endpoints, resource scopes, etc.) */\n    deserialize?: (permissions: Permission[]) => Record<string, any>;\n    /** Transform or extend the core-serialized permissions (for CMS endpoints, resource scopes, etc.) */\n    serialize?: (formData: Record<string, any>, corePermissions: Permission[]) => Permission[];\n}\n\n/**\n * Return value of `usePermissionForm`.\n */\nexport interface UsePermissionFormResult {\n    formData: Record<string, any>;\n    onFormChange: (data: Record<string, any>) => void;\n}\n\n/**\n * Configuration for a permission renderer registered via AdminConfig.\n *\n * Either `schema` or `element` must be provided:\n * - `schema`: uses the built-in PermissionRenderer for auto-generated UI.\n * - `element`: uses a custom React element for full control.\n */\nexport type PermissionRendererConfig = PermissionRendererConfigBase &\n    (\n        | { schema: PermissionSchema; element?: never }\n        | { schema?: never; element: React.ReactElement }\n    );\n\ninterface PermissionRendererConfigBase {\n    name: string;\n    title: string;\n    description?: string;\n    icon?: React.ReactElement;\n    system?: boolean;\n}\n\n/**\n * Item that may have an owner (used for own-scope permission checks).\n */\nexport interface OwnableItem {\n    createdBy?: { id: string } | null;\n}\n\n/**\n * Extract the union of entity definitions from a schema config type.\n */\ntype EntitiesOf<S extends PermissionSchemaConfig> = S extends {\n    entities: ReadonlyArray<infer E extends EntityDefinition>;\n}\n    ? E\n    : never;\n\n/**\n * Extract entity IDs whose actions array contains an action with the given name.\n */\ntype EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {\n    [K in EntitiesOf<S> as K extends { actions: ReadonlyArray<infer Act> }\n        ? Act extends { name: A }\n            ? K[\"id\"]\n            : never\n        : never]: never;\n} extends infer M\n    ? keyof M & string\n    : never;\n\n/**\n * Entity IDs that have the \"rwd\" action.\n */\nexport type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"rwd\">;\n\n/**\n * Entity IDs that have the \"pw\" action.\n */\nexport type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"pw\">;\n\n/**\n * All entity IDs in the schema.\n */\nexport type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>[\"id\"];\n\n/**\n * Custom (non-builtin) action names across all entities.\n */\nexport type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<\n    EntitiesOf<S> extends { actions: ReadonlyArray<infer Act extends ActionDefinition> }\n        ? Act[\"name\"]\n        : never,\n    \"rwd\" | \"pw\"\n>;\n\n/**\n * The return type of `usePermissions(schema)`.\n *\n * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.\n * When the schema is dynamically typed, all methods accept `string`.\n */\nexport type UsePermissionsResult<S extends PermissionSchemaConfig> =\n    string extends AllEntityIds<S> ? UsePermissionsResultUntyped : UsePermissionsResultTyped<S>;\n\nexport interface UsePermissionsResultUntyped {\n    canAccess: (entityId: string) => boolean;\n    canRead: (entityId: string) => boolean;\n    canCreate: (entityId: string) => boolean;\n    canEdit: (entityId: string, item?: OwnableItem) => boolean;\n    canDelete: (entityId: string, item?: OwnableItem) => boolean;\n    canPublish: (entityId: string) => boolean;\n    canUnpublish: (entityId: string) => boolean;\n    canAction: (action: string, entityId: string) => boolean;\n}\n\n/**\n * Action values accepted by `HasPermission`.\n *\n * Built-in actions are always available; custom action names from the schema are inferred automatically.\n */\nexport type HasPermissionAction<S extends PermissionSchemaConfig> =\n    | \"read\"\n    | \"create\"\n    | \"edit\"\n    | \"delete\"\n    | \"publish\"\n    | \"unpublish\"\n    | CustomActionNames<S>;\n\n/**\n * Props for a schema-bound `HasPermission` component created via `createHasPermission`.\n *\n * Exactly one of `entity`, `any`, or `all` must be provided.\n */\nexport type HasPermissionProps<S extends PermissionSchemaConfig> =\n    | SingleEntityProps<S>\n    | AnyEntitiesProps<S>\n    | AllEntitiesProps<S>;\n\ninterface SingleEntityProps<S extends PermissionSchemaConfig> {\n    entity: AllEntityIds<S>;\n    any?: never;\n    all?: never;\n    action?: HasPermissionAction<S>;\n    children: React.ReactNode;\n}\n\ninterface AnyEntitiesProps<S extends PermissionSchemaConfig> {\n    entity?: never;\n    any: AllEntityIds<S>[];\n    all?: never;\n    action?: HasPermissionAction<S>;\n    children: React.ReactNode;\n}\n\ninterface AllEntitiesProps<S extends PermissionSchemaConfig> {\n    entity?: never;\n    any?: never;\n    all: AllEntityIds<S>[];\n    action?: HasPermissionAction<S>;\n    children: React.ReactNode;\n}\n\ntype UsePermissionsResultTyped<S extends PermissionSchemaConfig> = {\n    canAccess: (entityId: AllEntityIds<S>) => boolean;\n    canAction: (\n        action: CustomActionNames<S> extends never ? string : CustomActionNames<S>,\n        entityId: AllEntityIds<S>\n    ) => boolean;\n} & ([RwdEntityId<S>] extends [never]\n    ? {\n          canRead: (entityId: string) => boolean;\n          canCreate: (entityId: string) => boolean;\n          canEdit: (entityId: string, item?: OwnableItem) => boolean;\n          canDelete: (entityId: string, item?: OwnableItem) => boolean;\n      }\n    : {\n          canRead: (entityId: RwdEntityId<S>) => boolean;\n          canCreate: (entityId: RwdEntityId<S>) => boolean;\n          canEdit: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;\n          canDelete: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;\n      }) &\n    ([PwEntityId<S>] extends [never]\n        ? {\n              canPublish: (entityId: string) => boolean;\n              canUnpublish: (entityId: string) => boolean;\n          }\n        : {\n              canPublish: (entityId: PwEntityId<S>) => boolean;\n              canUnpublish: (entityId: PwEntityId<S>) => boolean;\n          });\n"],"mappings":"","ignoreList":[]}

package/permissions/usePermissionForm.d.ts

@@ -0,0 +1,17 @@
+import type { Permission, PermissionSchema, UsePermissionFormOptions, UsePermissionFormResult } from "./types.js";
+/**
+ * Deserialize Permission[] into form data based on the schema.
+ */
+declare function deserializePermissions(schema: PermissionSchema, value: Permission[]): Record<string, any>;
+/**
+ * Serialize form data into Permission[] based on the schema.
+ */
+declare function serializePermissions(schema: PermissionSchema, formData: Record<string, any>, currentValue: Permission[]): Permission[];
+/**
+ * Hook that bridges a permission schema with a Form component.
+ *
+ * Handles bidirectional transformation between Permission[] and form data,
+ * with optional custom serialize/deserialize callbacks for app-specific needs.
+ */
+export declare function usePermissionForm(schema: PermissionSchema, options: UsePermissionFormOptions): UsePermissionFormResult;
+export { deserializePermissions, serializePermissions };

package/permissions/usePermissionForm.js

@@ -0,0 +1,256 @@
+import { useMemo, useCallback } from "react";
+function hasAction(entity, name) {
+  return entity.actions?.some(a => a.name === name) ?? false;
+}
+
+/** Resolve fullAccess config into a concrete Permission object. */
+function resolveFullAccess(schema) {
+  const name = `${schema.prefix}.*`;
+  if (schema.fullAccess === true) {
+    return {
+      name
+    };
+  }
+  return {
+    name,
+    ...schema.fullAccess
+  };
+}
+
+/** Resolve readOnlyAccess config into a concrete Permission[]. */
+function resolveReadOnlyAccess(schema) {
+  if (!schema.readOnlyAccess) {
+    return undefined;
+  }
+  if (schema.readOnlyAccess === true) {
+    return [{
+      name: `${schema.prefix}.*`,
+      rwd: "r"
+    }];
+  }
+  return schema.readOnlyAccess;
+}
+
+/**
+ * Deserialize Permission[] into form data based on the schema.
+ */
+function deserializePermissions(schema, value) {
+  if (!Array.isArray(value)) {
+    return {
+      accessLevel: "no"
+    };
+  }
+
+  // Check for read-only access by looking for the synthetic marker permission.
+  if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {
+    return {
+      accessLevel: "read-only"
+    };
+  }
+
+  // Check for full access: either wildcard or the schema's fullAccess permission.
+  const fullAccessName = `${schema.prefix}.*`;
+  const hasFullAccess = value.some(p => p.name === "*" || p.name === fullAccessName);
+  if (hasFullAccess) {
+    return {
+      accessLevel: "full"
+    };
+  }
+
+  // Filter permissions that belong to this schema's prefix.
+  const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));
+  if (ownPermissions.length === 0) {
+    return {
+      accessLevel: "no"
+    };
+  }
+
+  // Custom access level — extract per-entity form fields.
+  const data = {
+    accessLevel: "custom"
+  };
+  const entities = schema.entities || [];
+  for (const entity of entities) {
+    const perm = ownPermissions.find(p => p.name === entity.permission);
+    if (!perm) {
+      continue;
+    }
+
+    // Access scope: "own" if perm.own === true, else "full".
+    if (perm.own === true) {
+      data[`${entity.id}AccessScope`] = "own";
+    } else {
+      data[`${entity.id}AccessScope`] = "full";
+    }
+
+    // Process actions.
+    for (const action of entity.actions ?? []) {
+      if (action.name === "rwd") {
+        data[`${entity.id}RWD`] = perm.rwd || "r";
+      } else if (action.name === "pw") {
+        data[`${entity.id}PW`] = perm.pw ? perm.pw.split("") : [];
+      } else {
+        // Custom boolean action.
+        data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;
+      }
+    }
+  }
+  return data;
+}
+
+/**
+ * Serialize form data into Permission[] based on the schema.
+ */
+function serializePermissions(schema, formData, currentValue) {
+  // Start by filtering out all permissions belonging to this schema's prefix.
+  const filtered = Array.isArray(currentValue) ? currentValue.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+  if (formData.accessLevel === "no" || !formData.accessLevel) {
+    return filtered;
+  }
+  if (formData.accessLevel === "full") {
+    return [...filtered, resolveFullAccess(schema)];
+  }
+  const readOnlyPermissions = resolveReadOnlyAccess(schema);
+  if (formData.accessLevel === "read-only" && readOnlyPermissions) {
+    return [...filtered, {
+      name: `$${schema.prefix}.readonly`
+    }, ...readOnlyPermissions];
+  }
+  const entities = schema.entities || [];
+
+  // Custom access — build entity permissions.
+  // First, build a map of entity definitions by ID for dependency lookups.
+  const entityMap = new Map();
+  for (const entity of entities) {
+    entityMap.set(entity.id, entity);
+  }
+
+  // Resolve cascading "own" scopes: if a parent is "own", children must be "own" too.
+  const resolvedScopes = new Map();
+  for (const entity of entities) {
+    const scope = formData[`${entity.id}AccessScope`];
+    if (!scope || scope === "no") {
+      continue;
+    }
+    let resolvedScope = scope;
+
+    // If this entity depends on a parent and the parent scope is "own",
+    // force this entity's scope to "own" as well.
+    if (entity.dependsOn) {
+      const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+      if (parentScope === "own") {
+        resolvedScope = "own";
+      }
+    }
+    resolvedScopes.set(entity.id, resolvedScope);
+  }
+
+  // Prune resolved scopes based on dependencies (must run before building permissions
+  // so that transitive dependencies are properly pruned).
+  for (const entity of entities) {
+    if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {
+      continue;
+    }
+    const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+    if (!parentScope) {
+      // Parent entity is not enabled — prune child.
+      resolvedScopes.delete(entity.id);
+      continue;
+    }
+    const parentEntity = entityMap.get(entity.dependsOn.entity);
+    if (parentEntity && hasAction(parentEntity, "rwd")) {
+      const parentRwd = parentScope === "own" ? "rwd" : formData[`${entity.dependsOn.entity}RWD`] || "r";
+      if (!parentRwd.includes(entity.dependsOn.requires)) {
+        // Parent doesn't have the required action — prune child.
+        resolvedScopes.delete(entity.id);
+      }
+    }
+  }
+
+  // Build permissions from the pruned resolved scopes.
+  const permissions = [];
+  for (const entity of entities) {
+    const scope = resolvedScopes.get(entity.id);
+    if (!scope) {
+      continue;
+    }
+    const perm = {
+      name: entity.permission
+    };
+    if (scope === "own") {
+      perm.own = true;
+      if (hasAction(entity, "rwd")) {
+        perm.rwd = "rwd";
+      }
+    } else if (hasAction(entity, "rwd")) {
+      perm.rwd = formData[`${entity.id}RWD`] || "r";
+    }
+
+    // Process non-rwd actions.
+    for (const action of entity.actions ?? []) {
+      if (action.name === "rwd") {
+        continue; // Already handled above.
+      }
+      if (action.name === "pw") {
+        const pw = formData[`${entity.id}PW`] || [];
+        if (pw.length > 0) {
+          perm.pw = pw.join("");
+        }
+      } else {
+        // Custom boolean action.
+        if (formData[`${entity.id}Action_${action.name}`]) {
+          perm[action.name] = true;
+        }
+      }
+    }
+    permissions.push(perm);
+  }
+  return [...filtered, ...permissions];
+}
+
+/**
+ * Hook that bridges a permission schema with a Form component.
+ *
+ * Handles bidirectional transformation between Permission[] and form data,
+ * with optional custom serialize/deserialize callbacks for app-specific needs.
+ */
+export function usePermissionForm(schema, options) {
+  const {
+    value,
+    onChange
+  } = options;
+  const formData = useMemo(() => {
+    let data = deserializePermissions(schema, value);
+
+    // Merge custom deserialized data if provided.
+    if (options.deserialize) {
+      const extra = options.deserialize(Array.isArray(value) ? value : []);
+      data = {
+        ...data,
+        ...extra
+      };
+    }
+    return data;
+  }, []);
+  const onFormChange = useCallback(data => {
+    let result = serializePermissions(schema, data, value);
+
+    // Apply custom serializer if provided.
+    if (options.serialize) {
+      result = options.serialize(data, result.filter(p => p.name.startsWith(schema.prefix)));
+      // Re-add non-schema permissions that were filtered out.
+      const nonSchemaPermissions = Array.isArray(value) ? value.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+      result = [...nonSchemaPermissions, ...result];
+    }
+    onChange(result);
+  }, [value]);
+  return {
+    formData,
+    onFormChange
+  };
+}
+
+// Export the pure functions for unit testing.
+export { deserializePermissions, serializePermissions };
+
+//# sourceMappingURL=usePermissionForm.js.map

package/permissions/usePermissionForm.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useMemo","useCallback","hasAction","entity","name","actions","some","a","resolveFullAccess","schema","prefix","fullAccess","resolveReadOnlyAccess","readOnlyAccess","undefined","rwd","deserializePermissions","value","Array","isArray","accessLevel","p","fullAccessName","hasFullAccess","ownPermissions","filter","startsWith","length","data","entities","perm","find","permission","own","id","action","pw","split","serializePermissions","formData","currentValue","filtered","readOnlyPermissions","entityMap","Map","set","resolvedScopes","scope","resolvedScope","dependsOn","parentScope","get","has","delete","parentEntity","parentRwd","includes","requires","permissions","join","push","usePermissionForm","options","onChange","deserialize","extra","onFormChange","result","serialize","nonSchemaPermissions"],"sources":["usePermissionForm.ts"],"sourcesContent":["import { useMemo, useCallback } from \"react\";\nimport type {\n    Permission,\n    PermissionSchema,\n    EntityDefinition,\n    UsePermissionFormOptions,\n    UsePermissionFormResult\n} from \"./types.js\";\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\n/** Resolve fullAccess config into a concrete Permission object. */\nfunction resolveFullAccess(schema: PermissionSchema): Permission {\n    const name = `${schema.prefix}.*`;\n    if (schema.fullAccess === true) {\n        return { name };\n    }\n    return { name, ...schema.fullAccess };\n}\n\n/** Resolve readOnlyAccess config into a concrete Permission[]. */\nfunction resolveReadOnlyAccess(schema: PermissionSchema): Permission[] | undefined {\n    if (!schema.readOnlyAccess) {\n        return undefined;\n    }\n    if (schema.readOnlyAccess === true) {\n        return [{ name: `${schema.prefix}.*`, rwd: \"r\" }];\n    }\n    return schema.readOnlyAccess;\n}\n\n/**\n * Deserialize Permission[] into form data based on the schema.\n */\nfunction deserializePermissions(\n    schema: PermissionSchema,\n    value: Permission[]\n): Record<string, any> {\n    if (!Array.isArray(value)) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Check for read-only access by looking for the synthetic marker permission.\n    if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {\n        return { accessLevel: \"read-only\" };\n    }\n\n    // Check for full access: either wildcard or the schema's fullAccess permission.\n    const fullAccessName = `${schema.prefix}.*`;\n    const hasFullAccess = value.some(p => p.name === \"*\" || p.name === fullAccessName);\n    if (hasFullAccess) {\n        return { accessLevel: \"full\" };\n    }\n\n    // Filter permissions that belong to this schema's prefix.\n    const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));\n    if (ownPermissions.length === 0) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Custom access level — extract per-entity form fields.\n    const data: Record<string, any> = { accessLevel: \"custom\" };\n    const entities = schema.entities || [];\n\n    for (const entity of entities) {\n        const perm = ownPermissions.find(p => p.name === entity.permission);\n        if (!perm) {\n            continue;\n        }\n\n        // Access scope: \"own\" if perm.own === true, else \"full\".\n        if (perm.own === true) {\n            data[`${entity.id}AccessScope`] = \"own\";\n        } else {\n            data[`${entity.id}AccessScope`] = \"full\";\n        }\n\n        // Process actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                data[`${entity.id}RWD`] = perm.rwd || \"r\";\n            } else if (action.name === \"pw\") {\n                data[`${entity.id}PW`] = perm.pw ? perm.pw.split(\"\") : [];\n            } else {\n                // Custom boolean action.\n                data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;\n            }\n        }\n    }\n\n    return data;\n}\n\n/**\n * Serialize form data into Permission[] based on the schema.\n */\nfunction serializePermissions(\n    schema: PermissionSchema,\n    formData: Record<string, any>,\n    currentValue: Permission[]\n): Permission[] {\n    // Start by filtering out all permissions belonging to this schema's prefix.\n    const filtered = Array.isArray(currentValue)\n        ? currentValue.filter(\n              p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)\n          )\n        : [];\n\n    if (formData.accessLevel === \"no\" || !formData.accessLevel) {\n        return filtered;\n    }\n\n    if (formData.accessLevel === \"full\") {\n        return [...filtered, resolveFullAccess(schema)];\n    }\n\n    const readOnlyPermissions = resolveReadOnlyAccess(schema);\n    if (formData.accessLevel === \"read-only\" && readOnlyPermissions) {\n        return [...filtered, { name: `$${schema.prefix}.readonly` }, ...readOnlyPermissions];\n    }\n\n    const entities = schema.entities || [];\n\n    // Custom access — build entity permissions.\n    // First, build a map of entity definitions by ID for dependency lookups.\n    const entityMap = new Map<string, EntityDefinition>();\n    for (const entity of entities) {\n        entityMap.set(entity.id, entity);\n    }\n\n    // Resolve cascading \"own\" scopes: if a parent is \"own\", children must be \"own\" too.\n    const resolvedScopes = new Map<string, string>();\n    for (const entity of entities) {\n        const scope = formData[`${entity.id}AccessScope`];\n        if (!scope || scope === \"no\") {\n            continue;\n        }\n\n        let resolvedScope = scope;\n\n        // If this entity depends on a parent and the parent scope is \"own\",\n        // force this entity's scope to \"own\" as well.\n        if (entity.dependsOn) {\n            const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n            if (parentScope === \"own\") {\n                resolvedScope = \"own\";\n            }\n        }\n\n        resolvedScopes.set(entity.id, resolvedScope);\n    }\n\n    // Prune resolved scopes based on dependencies (must run before building permissions\n    // so that transitive dependencies are properly pruned).\n    for (const entity of entities) {\n        if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {\n            continue;\n        }\n\n        const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n        if (!parentScope) {\n            // Parent entity is not enabled — prune child.\n            resolvedScopes.delete(entity.id);\n            continue;\n        }\n\n        const parentEntity = entityMap.get(entity.dependsOn.entity);\n        if (parentEntity && hasAction(parentEntity, \"rwd\")) {\n            const parentRwd =\n                parentScope === \"own\" ? \"rwd\" : formData[`${entity.dependsOn.entity}RWD`] || \"r\";\n            if (!parentRwd.includes(entity.dependsOn.requires)) {\n                // Parent doesn't have the required action — prune child.\n                resolvedScopes.delete(entity.id);\n            }\n        }\n    }\n\n    // Build permissions from the pruned resolved scopes.\n    const permissions: Permission[] = [];\n\n    for (const entity of entities) {\n        const scope = resolvedScopes.get(entity.id);\n        if (!scope) {\n            continue;\n        }\n\n        const perm: Permission = {\n            name: entity.permission\n        };\n\n        if (scope === \"own\") {\n            perm.own = true;\n            if (hasAction(entity, \"rwd\")) {\n                perm.rwd = \"rwd\";\n            }\n        } else if (hasAction(entity, \"rwd\")) {\n            perm.rwd = formData[`${entity.id}RWD`] || \"r\";\n        }\n\n        // Process non-rwd actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                continue; // Already handled above.\n            }\n\n            if (action.name === \"pw\") {\n                const pw: string[] = formData[`${entity.id}PW`] || [];\n                if (pw.length > 0) {\n                    perm.pw = pw.join(\"\");\n                }\n            } else {\n                // Custom boolean action.\n                if (formData[`${entity.id}Action_${action.name}`]) {\n                    perm[action.name] = true;\n                }\n            }\n        }\n\n        permissions.push(perm);\n    }\n\n    return [...filtered, ...permissions];\n}\n\n/**\n * Hook that bridges a permission schema with a Form component.\n *\n * Handles bidirectional transformation between Permission[] and form data,\n * with optional custom serialize/deserialize callbacks for app-specific needs.\n */\nexport function usePermissionForm(\n    schema: PermissionSchema,\n    options: UsePermissionFormOptions\n): UsePermissionFormResult {\n    const { value, onChange } = options;\n\n    const formData = useMemo(() => {\n        let data = deserializePermissions(schema, value);\n\n        // Merge custom deserialized data if provided.\n        if (options.deserialize) {\n            const extra = options.deserialize(Array.isArray(value) ? value : []);\n            data = { ...data, ...extra };\n        }\n\n        return data;\n    }, []);\n\n    const onFormChange = useCallback(\n        (data: Record<string, any>) => {\n            let result = serializePermissions(schema, data, value);\n\n            // Apply custom serializer if provided.\n            if (options.serialize) {\n                result = options.serialize(\n                    data,\n                    result.filter(p => p.name.startsWith(schema.prefix))\n                );\n                // Re-add non-schema permissions that were filtered out.\n                const nonSchemaPermissions = Array.isArray(value)\n                    ? value.filter(\n                          p =>\n                              !p.name.startsWith(schema.prefix) &&\n                              !p.name.startsWith(`$${schema.prefix}`)\n                      )\n                    : [];\n                result = [...nonSchemaPermissions, ...result];\n            }\n\n            onChange(result);\n        },\n        [value]\n    );\n\n    return { formData, onFormChange };\n}\n\n// Export the pure functions for unit testing.\nexport { deserializePermissions, serializePermissions };\n"],"mappings":"AAAA,SAASA,OAAO,EAAEC,WAAW,QAAQ,OAAO;AAS5C,SAASC,SAASA,CAACC,MAAwB,EAAEC,IAAY,EAAW;EAChE,OAAOD,MAAM,CAACE,OAAO,EAAEC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACH,IAAI,KAAKA,IAAI,CAAC,IAAI,KAAK;AAC9D;;AAEA;AACA,SAASI,iBAAiBA,CAACC,MAAwB,EAAc;EAC7D,MAAML,IAAI,GAAG,GAAGK,MAAM,CAACC,MAAM,IAAI;EACjC,IAAID,MAAM,CAACE,UAAU,KAAK,IAAI,EAAE;IAC5B,OAAO;MAAEP;IAAK,CAAC;EACnB;EACA,OAAO;IAAEA,IAAI;IAAE,GAAGK,MAAM,CAACE;EAAW,CAAC;AACzC;;AAEA;AACA,SAASC,qBAAqBA,CAACH,MAAwB,EAA4B;EAC/E,IAAI,CAACA,MAAM,CAACI,cAAc,EAAE;IACxB,OAAOC,SAAS;EACpB;EACA,IAAIL,MAAM,CAACI,cAAc,KAAK,IAAI,EAAE;IAChC,OAAO,CAAC;MAAET,IAAI,EAAE,GAAGK,MAAM,CAACC,MAAM,IAAI;MAAEK,GAAG,EAAE;IAAI,CAAC,CAAC;EACrD;EACA,OAAON,MAAM,CAACI,cAAc;AAChC;;AAEA;AACA;AACA;AACA,SAASG,sBAAsBA,CAC3BP,MAAwB,EACxBQ,KAAmB,EACA;EACnB,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,EAAE;IACvB,OAAO;MAAEG,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,IAAIH,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,IAAIK,MAAM,CAACC,MAAM,WAAW,CAAC,EAAE;IAC1D,OAAO;MAAEU,WAAW,EAAE;IAAY,CAAC;EACvC;;EAEA;EACA,MAAME,cAAc,GAAG,GAAGb,MAAM,CAACC,MAAM,IAAI;EAC3C,MAAMa,aAAa,GAAGN,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,GAAG,IAAIiB,CAAC,CAACjB,IAAI,KAAKkB,cAAc,CAAC;EAClF,IAAIC,aAAa,EAAE;IACf,OAAO;MAAEH,WAAW,EAAE;IAAO,CAAC;EAClC;;EAEA;EACA,MAAMI,cAAc,GAAGP,KAAK,CAACQ,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CAAC;EAC1E,IAAIc,cAAc,CAACG,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO;MAAEP,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,MAAMQ,IAAyB,GAAG;IAAER,WAAW,EAAE;EAAS,CAAC;EAC3D,MAAMS,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;EAEtC,KAAK,MAAM1B,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMC,IAAI,GAAGN,cAAc,CAACO,IAAI,CAACV,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAKD,MAAM,CAAC6B,UAAU,CAAC;IACnE,IAAI,CAACF,IAAI,EAAE;MACP;IACJ;;IAEA;IACA,IAAIA,IAAI,CAACG,GAAG,KAAK,IAAI,EAAE;MACnBL,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,KAAK;IAC3C,CAAC,MAAM;MACHN,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,MAAM;IAC5C;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvBwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,KAAK,CAAC,GAAGJ,IAAI,CAACf,GAAG,IAAI,GAAG;MAC7C,CAAC,MAAM,IAAIoB,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QAC7BwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,IAAI,CAAC,GAAGJ,IAAI,CAACM,EAAE,GAAGN,IAAI,CAACM,EAAE,CAACC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;MAC7D,CAAC,MAAM;QACH;QACAT,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,GAAG0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,KAAK,IAAI;MAC1E;IACJ;EACJ;EAEA,OAAOwB,IAAI;AACf;;AAEA;AACA;AACA;AACA,SAASU,oBAAoBA,CACzB7B,MAAwB,EACxB8B,QAA6B,EAC7BC,YAA0B,EACd;EACZ;EACA,MAAMC,QAAQ,GAAGvB,KAAK,CAACC,OAAO,CAACqB,YAAY,CAAC,GACtCA,YAAY,CAACf,MAAM,CACfJ,CAAC,IAAI,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IAAI,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CACpF,CAAC,GACD,EAAE;EAER,IAAI6B,QAAQ,CAACnB,WAAW,KAAK,IAAI,IAAI,CAACmB,QAAQ,CAACnB,WAAW,EAAE;IACxD,OAAOqB,QAAQ;EACnB;EAEA,IAAIF,QAAQ,CAACnB,WAAW,KAAK,MAAM,EAAE;IACjC,OAAO,CAAC,GAAGqB,QAAQ,EAAEjC,iBAAiB,CAACC,MAAM,CAAC,CAAC;EACnD;EAEA,MAAMiC,mBAAmB,GAAG9B,qBAAqB,CAACH,MAAM,CAAC;EACzD,IAAI8B,QAAQ,CAACnB,WAAW,KAAK,WAAW,IAAIsB,mBAAmB,EAAE;IAC7D,OAAO,CAAC,GAAGD,QAAQ,EAAE;MAAErC,IAAI,EAAE,IAAIK,MAAM,CAACC,MAAM;IAAY,CAAC,EAAE,GAAGgC,mBAAmB,CAAC;EACxF;EAEA,MAAMb,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;;EAEtC;EACA;EACA,MAAMc,SAAS,GAAG,IAAIC,GAAG,CAA2B,CAAC;EACrD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3Bc,SAAS,CAACE,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAE/B,MAAM,CAAC;EACpC;;EAEA;EACA,MAAM2C,cAAc,GAAG,IAAIF,GAAG,CAAiB,CAAC;EAChD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGR,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,aAAa,CAAC;IACjD,IAAI,CAACa,KAAK,IAAIA,KAAK,KAAK,IAAI,EAAE;MAC1B;IACJ;IAEA,IAAIC,aAAa,GAAGD,KAAK;;IAEzB;IACA;IACA,IAAI5C,MAAM,CAAC8C,SAAS,EAAE;MAClB,MAAMC,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;MAC/D,IAAI+C,WAAW,KAAK,KAAK,EAAE;QACvBF,aAAa,GAAG,KAAK;MACzB;IACJ;IAEAF,cAAc,CAACD,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAEc,aAAa,CAAC;EAChD;;EAEA;EACA;EACA,KAAK,MAAM7C,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,IAAI,CAAC1B,MAAM,CAAC8C,SAAS,IAAI,CAACH,cAAc,CAACM,GAAG,CAACjD,MAAM,CAAC+B,EAAE,CAAC,EAAE;MACrD;IACJ;IAEA,MAAMgB,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC/D,IAAI,CAAC+C,WAAW,EAAE;MACd;MACAJ,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MAChC;IACJ;IAEA,MAAMoB,YAAY,GAAGX,SAAS,CAACQ,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC3D,IAAImD,YAAY,IAAIpD,SAAS,CAACoD,YAAY,EAAE,KAAK,CAAC,EAAE;MAChD,MAAMC,SAAS,GACXL,WAAW,KAAK,KAAK,GAAG,KAAK,GAAGX,QAAQ,CAAC,GAAGpC,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,KAAK,CAAC,IAAI,GAAG;MACpF,IAAI,CAACoD,SAAS,CAACC,QAAQ,CAACrD,MAAM,CAAC8C,SAAS,CAACQ,QAAQ,CAAC,EAAE;QAChD;QACAX,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MACpC;IACJ;EACJ;;EAEA;EACA,MAAMwB,WAAyB,GAAG,EAAE;EAEpC,KAAK,MAAMvD,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGD,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC+B,EAAE,CAAC;IAC3C,IAAI,CAACa,KAAK,EAAE;MACR;IACJ;IAEA,MAAMjB,IAAgB,GAAG;MACrB1B,IAAI,EAAED,MAAM,CAAC6B;IACjB,CAAC;IAED,IAAIe,KAAK,KAAK,KAAK,EAAE;MACjBjB,IAAI,CAACG,GAAG,GAAG,IAAI;MACf,IAAI/B,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;QAC1B2B,IAAI,CAACf,GAAG,GAAG,KAAK;MACpB;IACJ,CAAC,MAAM,IAAIb,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;MACjC2B,IAAI,CAACf,GAAG,GAAGwB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,KAAK,CAAC,IAAI,GAAG;IACjD;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvB,SAAS,CAAC;MACd;MAEA,IAAI+B,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QACtB,MAAMgC,EAAY,GAAGG,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,IAAI,CAAC,IAAI,EAAE;QACrD,IAAIE,EAAE,CAACT,MAAM,GAAG,CAAC,EAAE;UACfG,IAAI,CAACM,EAAE,GAAGA,EAAE,CAACuB,IAAI,CAAC,EAAE,CAAC;QACzB;MACJ,CAAC,MAAM;QACH;QACA,IAAIpB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,EAAE;UAC/C0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,GAAG,IAAI;QAC5B;MACJ;IACJ;IAEAsD,WAAW,CAACE,IAAI,CAAC9B,IAAI,CAAC;EAC1B;EAEA,OAAO,CAAC,GAAGW,QAAQ,EAAE,GAAGiB,WAAW,CAAC;AACxC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,iBAAiBA,CAC7BpD,MAAwB,EACxBqD,OAAiC,EACV;EACvB,MAAM;IAAE7C,KAAK;IAAE8C;EAAS,CAAC,GAAGD,OAAO;EAEnC,MAAMvB,QAAQ,GAAGvC,OAAO,CAAC,MAAM;IAC3B,IAAI4B,IAAI,GAAGZ,sBAAsB,CAACP,MAAM,EAAEQ,KAAK,CAAC;;IAEhD;IACA,IAAI6C,OAAO,CAACE,WAAW,EAAE;MACrB,MAAMC,KAAK,GAAGH,OAAO,CAACE,WAAW,CAAC9C,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAAGA,KAAK,GAAG,EAAE,CAAC;MACpEW,IAAI,GAAG;QAAE,GAAGA,IAAI;QAAE,GAAGqC;MAAM,CAAC;IAChC;IAEA,OAAOrC,IAAI;EACf,CAAC,EAAE,EAAE,CAAC;EAEN,MAAMsC,YAAY,GAAGjE,WAAW,CAC3B2B,IAAyB,IAAK;IAC3B,IAAIuC,MAAM,GAAG7B,oBAAoB,CAAC7B,MAAM,EAAEmB,IAAI,EAAEX,KAAK,CAAC;;IAEtD;IACA,IAAI6C,OAAO,CAACM,SAAS,EAAE;MACnBD,MAAM,GAAGL,OAAO,CAACM,SAAS,CACtBxC,IAAI,EACJuC,MAAM,CAAC1C,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CACvD,CAAC;MACD;MACA,MAAM2D,oBAAoB,GAAGnD,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAC3CA,KAAK,CAACQ,MAAM,CACRJ,CAAC,IACG,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IACjC,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CAC9C,CAAC,GACD,EAAE;MACRyD,MAAM,GAAG,CAAC,GAAGE,oBAAoB,EAAE,GAAGF,MAAM,CAAC;IACjD;IAEAJ,QAAQ,CAACI,MAAM,CAAC;EACpB,CAAC,EACD,CAAClD,KAAK,CACV,CAAC;EAED,OAAO;IAAEsB,QAAQ;IAAE2B;EAAa,CAAC;AACrC;;AAEA;AACA,SAASlD,sBAAsB,EAAEsB,oBAAoB","ignoreList":[]}

package/permissions/usePermissions.d.ts

@@ -0,0 +1,3 @@
+import type { PermissionSchemaConfig } from "./types.js";
+import type { UsePermissionsResult } from "./types.js";
+export declare function createUsePermissions<const S extends PermissionSchemaConfig>(schema: S): () => UsePermissionsResult<S>;

package/permissions/usePermissions.js

@@ -0,0 +1,180 @@
+import { useIdentity } from "../presentation/security/hooks/useIdentity.js";
+// Module-level cache: schema -> identityId -> result.
+const cache = new WeakMap();
+function buildEntityMap(schema) {
+  const map = new Map();
+  for (const entity of schema.entities ?? []) {
+    const actions = new Set();
+    for (const action of entity.actions ?? []) {
+      actions.add(action.name);
+    }
+    map.set(entity.id, {
+      permission: entity.permission,
+      actions,
+      hasOwn: entity.scopes.includes("own")
+    });
+  }
+  return map;
+}
+function getEntity(entityMap, entityId) {
+  const entity = entityMap.get(entityId);
+  if (!entity) {
+    throw new Error(`Unknown entity "${entityId}" in permission schema.`);
+  }
+  return entity;
+}
+function buildResult(schema, identity) {
+  const fullAccessName = `${schema.prefix}.*`;
+  const hasFullAccess = !!identity.getPermission(fullAccessName);
+  const entityMap = buildEntityMap(schema);
+  const canAccess = entityId => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    return permissions.length > 0;
+  };
+  const canRead = entityId => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("r");
+    });
+  };
+  const canCreate = entityId => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("w");
+    });
+  };
+  const canEdit = (entityId, item) => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (permission.own) {
+        if (!item?.createdBy) {
+          return true;
+        }
+        return item.createdBy.id === identity.id;
+      }
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("w");
+    });
+  };
+  const canDelete = (entityId, item) => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      if (permission.own) {
+        return item?.createdBy?.id === identity.id;
+      }
+      if (typeof permission.rwd !== "string") {
+        return true;
+      }
+      return permission.rwd.includes("d");
+    });
+  };
+  const canPublish = entityId => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission.pw?.includes("p");
+    });
+  };
+  const canUnpublish = entityId => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission.pw?.includes("u");
+    });
+  };
+  const canAction = (action, entityId) => {
+    if (hasFullAccess) {
+      return true;
+    }
+    const entity = getEntity(entityMap, entityId);
+    const permissions = identity.getPermissions(entity.permission);
+    if (!permissions.length) {
+      return false;
+    }
+    return permissions.some(permission => {
+      return permission[action] === true;
+    });
+  };
+  return {
+    canAccess,
+    canRead,
+    canCreate,
+    canEdit,
+    canDelete,
+    canPublish,
+    canUnpublish,
+    canAction
+  };
+}
+export function createUsePermissions(schema) {
+  return function usePermissions() {
+    const {
+      identity
+    } = useIdentity();
+    let byIdentityId = cache.get(schema);
+    if (!byIdentityId) {
+      byIdentityId = new Map();
+      cache.set(schema, byIdentityId);
+    }
+    let result = byIdentityId.get(identity.id);
+    if (!result) {
+      result = buildResult(schema, identity);
+      byIdentityId.set(identity.id, result);
+    }
+    return result;
+  };
+}
+
+//# sourceMappingURL=usePermissions.js.map

package/permissions/usePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useIdentity","cache","WeakMap","buildEntityMap","schema","map","Map","entity","entities","actions","Set","action","add","name","set","id","permission","hasOwn","scopes","includes","getEntity","entityMap","entityId","get","Error","buildResult","identity","fullAccessName","prefix","hasFullAccess","getPermission","canAccess","permissions","getPermissions","length","canRead","some","rwd","canCreate","canEdit","item","own","createdBy","canDelete","canPublish","pw","canUnpublish","canAction","createUsePermissions","usePermissions","byIdentityId","result"],"sources":["usePermissions.ts"],"sourcesContent":["import { useIdentity } from \"~/presentation/security/hooks/useIdentity.js\";\nimport type { Identity } from \"~/domain/Identity.js\";\nimport type { PermissionSchemaConfig } from \"./types.js\";\nimport type { OwnableItem } from \"./types.js\";\nimport type { UsePermissionsResult } from \"./types.js\";\n\ninterface EntityLookup {\n    permission: string;\n    actions: Set<string>;\n    hasOwn: boolean;\n}\n\n// Module-level cache: schema -> identityId -> result.\nconst cache = new WeakMap<PermissionSchemaConfig, Map<string, UsePermissionsResult<any>>>();\n\nfunction buildEntityMap(schema: PermissionSchemaConfig): Map<string, EntityLookup> {\n    const map = new Map<string, EntityLookup>();\n    for (const entity of schema.entities ?? []) {\n        const actions = new Set<string>();\n        for (const action of entity.actions ?? []) {\n            actions.add(action.name);\n        }\n        map.set(entity.id, {\n            permission: entity.permission,\n            actions,\n            hasOwn: entity.scopes.includes(\"own\")\n        });\n    }\n    return map;\n}\n\nfunction getEntity(entityMap: Map<string, EntityLookup>, entityId: string): EntityLookup {\n    const entity = entityMap.get(entityId);\n    if (!entity) {\n        throw new Error(`Unknown entity \"${entityId}\" in permission schema.`);\n    }\n    return entity;\n}\n\nfunction buildResult<S extends PermissionSchemaConfig>(\n    schema: S,\n    identity: Identity\n): UsePermissionsResult<S> {\n    const fullAccessName = `${schema.prefix}.*`;\n    const hasFullAccess = !!identity.getPermission(fullAccessName);\n    const entityMap = buildEntityMap(schema);\n\n    const canAccess = (entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        return permissions.length > 0;\n    };\n\n    const canRead = (entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"r\");\n        });\n    };\n\n    const canCreate = (entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    const canEdit = (entityId: string, item?: OwnableItem): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                if (!item?.createdBy) {\n                    return true;\n                }\n                return item.createdBy.id === identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"w\");\n        });\n    };\n\n    const canDelete = (entityId: string, item?: OwnableItem): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            if (permission.own) {\n                return item?.createdBy?.id === identity.id;\n            }\n            if (typeof permission.rwd !== \"string\") {\n                return true;\n            }\n            return permission.rwd.includes(\"d\");\n        });\n    };\n\n    const canPublish = (entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"p\");\n        });\n    };\n\n    const canUnpublish = (entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission.pw?.includes(\"u\");\n        });\n    };\n\n    const canAction = (action: string, entityId: string): boolean => {\n        if (hasFullAccess) {\n            return true;\n        }\n        const entity = getEntity(entityMap, entityId);\n        const permissions = identity.getPermissions(entity.permission);\n        if (!permissions.length) {\n            return false;\n        }\n        return permissions.some(permission => {\n            return permission[action] === true;\n        });\n    };\n\n    return {\n        canAccess,\n        canRead,\n        canCreate,\n        canEdit,\n        canDelete,\n        canPublish,\n        canUnpublish,\n        canAction\n    } as UsePermissionsResult<S>;\n}\n\nexport function createUsePermissions<const S extends PermissionSchemaConfig>(\n    schema: S\n): () => UsePermissionsResult<S> {\n    return function usePermissions(): UsePermissionsResult<S> {\n        const { identity } = useIdentity();\n\n        let byIdentityId = cache.get(schema);\n        if (!byIdentityId) {\n            byIdentityId = new Map();\n            cache.set(schema, byIdentityId);\n        }\n\n        let result = byIdentityId.get(identity.id) as UsePermissionsResult<S> | undefined;\n        if (!result) {\n            result = buildResult(schema, identity);\n            byIdentityId.set(identity.id, result as UsePermissionsResult<any>);\n        }\n\n        return result;\n    };\n}\n"],"mappings":"AAAA,SAASA,WAAW;AAYpB;AACA,MAAMC,KAAK,GAAG,IAAIC,OAAO,CAAiE,CAAC;AAE3F,SAASC,cAAcA,CAACC,MAA8B,EAA6B;EAC/E,MAAMC,GAAG,GAAG,IAAIC,GAAG,CAAuB,CAAC;EAC3C,KAAK,MAAMC,MAAM,IAAIH,MAAM,CAACI,QAAQ,IAAI,EAAE,EAAE;IACxC,MAAMC,OAAO,GAAG,IAAIC,GAAG,CAAS,CAAC;IACjC,KAAK,MAAMC,MAAM,IAAIJ,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvCA,OAAO,CAACG,GAAG,CAACD,MAAM,CAACE,IAAI,CAAC;IAC5B;IACAR,GAAG,CAACS,GAAG,CAACP,MAAM,CAACQ,EAAE,EAAE;MACfC,UAAU,EAAET,MAAM,CAACS,UAAU;MAC7BP,OAAO;MACPQ,MAAM,EAAEV,MAAM,CAACW,MAAM,CAACC,QAAQ,CAAC,KAAK;IACxC,CAAC,CAAC;EACN;EACA,OAAOd,GAAG;AACd;AAEA,SAASe,SAASA,CAACC,SAAoC,EAAEC,QAAgB,EAAgB;EACrF,MAAMf,MAAM,GAAGc,SAAS,CAACE,GAAG,CAACD,QAAQ,CAAC;EACtC,IAAI,CAACf,MAAM,EAAE;IACT,MAAM,IAAIiB,KAAK,CAAC,mBAAmBF,QAAQ,yBAAyB,CAAC;EACzE;EACA,OAAOf,MAAM;AACjB;AAEA,SAASkB,WAAWA,CAChBrB,MAAS,EACTsB,QAAkB,EACK;EACvB,MAAMC,cAAc,GAAG,GAAGvB,MAAM,CAACwB,MAAM,IAAI;EAC3C,MAAMC,aAAa,GAAG,CAAC,CAACH,QAAQ,CAACI,aAAa,CAACH,cAAc,CAAC;EAC9D,MAAMN,SAAS,GAAGlB,cAAc,CAACC,MAAM,CAAC;EAExC,MAAM2B,SAAS,GAAIT,QAAgB,IAAc;IAC7C,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,OAAOgB,WAAW,CAACE,MAAM,GAAG,CAAC;EACjC,CAAC;EAED,MAAMC,OAAO,GAAIb,QAAgB,IAAc;IAC3C,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,IAAI,OAAOA,UAAU,CAACqB,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOrB,UAAU,CAACqB,GAAG,CAAClB,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAMmB,SAAS,GAAIhB,QAAgB,IAAc;IAC7C,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,IAAI,OAAOA,UAAU,CAACqB,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOrB,UAAU,CAACqB,GAAG,CAAClB,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAMoB,OAAO,GAAGA,CAACjB,QAAgB,EAAEkB,IAAkB,KAAc;IAC/D,IAAIX,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,IAAIA,UAAU,CAACyB,GAAG,EAAE;QAChB,IAAI,CAACD,IAAI,EAAEE,SAAS,EAAE;UAClB,OAAO,IAAI;QACf;QACA,OAAOF,IAAI,CAACE,SAAS,CAAC3B,EAAE,KAAKW,QAAQ,CAACX,EAAE;MAC5C;MACA,IAAI,OAAOC,UAAU,CAACqB,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOrB,UAAU,CAACqB,GAAG,CAAClB,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAMwB,SAAS,GAAGA,CAACrB,QAAgB,EAAEkB,IAAkB,KAAc;IACjE,IAAIX,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,IAAIA,UAAU,CAACyB,GAAG,EAAE;QAChB,OAAOD,IAAI,EAAEE,SAAS,EAAE3B,EAAE,KAAKW,QAAQ,CAACX,EAAE;MAC9C;MACA,IAAI,OAAOC,UAAU,CAACqB,GAAG,KAAK,QAAQ,EAAE;QACpC,OAAO,IAAI;MACf;MACA,OAAOrB,UAAU,CAACqB,GAAG,CAAClB,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAMyB,UAAU,GAAItB,QAAgB,IAAc;IAC9C,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,OAAOA,UAAU,CAAC6B,EAAE,EAAE1B,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAM2B,YAAY,GAAIxB,QAAgB,IAAc;IAChD,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,OAAOA,UAAU,CAAC6B,EAAE,EAAE1B,QAAQ,CAAC,GAAG,CAAC;IACvC,CAAC,CAAC;EACN,CAAC;EAED,MAAM4B,SAAS,GAAGA,CAACpC,MAAc,EAAEW,QAAgB,KAAc;IAC7D,IAAIO,aAAa,EAAE;MACf,OAAO,IAAI;IACf;IACA,MAAMtB,MAAM,GAAGa,SAAS,CAACC,SAAS,EAAEC,QAAQ,CAAC;IAC7C,MAAMU,WAAW,GAAGN,QAAQ,CAACO,cAAc,CAAC1B,MAAM,CAACS,UAAU,CAAC;IAC9D,IAAI,CAACgB,WAAW,CAACE,MAAM,EAAE;MACrB,OAAO,KAAK;IAChB;IACA,OAAOF,WAAW,CAACI,IAAI,CAACpB,UAAU,IAAI;MAClC,OAAOA,UAAU,CAACL,MAAM,CAAC,KAAK,IAAI;IACtC,CAAC,CAAC;EACN,CAAC;EAED,OAAO;IACHoB,SAAS;IACTI,OAAO;IACPG,SAAS;IACTC,OAAO;IACPI,SAAS;IACTC,UAAU;IACVE,YAAY;IACZC;EACJ,CAAC;AACL;AAEA,OAAO,SAASC,oBAAoBA,CAChC5C,MAAS,EACoB;EAC7B,OAAO,SAAS6C,cAAcA,CAAA,EAA4B;IACtD,MAAM;MAAEvB;IAAS,CAAC,GAAG1B,WAAW,CAAC,CAAC;IAElC,IAAIkD,YAAY,GAAGjD,KAAK,CAACsB,GAAG,CAACnB,MAAM,CAAC;IACpC,IAAI,CAAC8C,YAAY,EAAE;MACfA,YAAY,GAAG,IAAI5C,GAAG,CAAC,CAAC;MACxBL,KAAK,CAACa,GAAG,CAACV,MAAM,EAAE8C,YAAY,CAAC;IACnC;IAEA,IAAIC,MAAM,GAAGD,YAAY,CAAC3B,GAAG,CAACG,QAAQ,CAACX,EAAE,CAAwC;IACjF,IAAI,CAACoC,MAAM,EAAE;MACTA,MAAM,GAAG1B,WAAW,CAACrB,MAAM,EAAEsB,QAAQ,CAAC;MACtCwB,YAAY,CAACpC,GAAG,CAACY,QAAQ,CAACX,EAAE,EAAEoC,MAAmC,CAAC;IACtE;IAEA,OAAOA,MAAM;EACjB,CAAC;AACL","ignoreList":[]}

package/plugins/MenuPlugin.d.ts

@@ -1,4 +1,4 @@
-import * as React from "react";
+import type * as React from "react";
 import { Plugin } from "@webiny/plugins";
 export interface MenuProps {
     name: string;

package/plugins/MenuPlugin.js

@@ -1,43 +1,19 @@
-"use strict";
-
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault").default;
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.MenuPlugin = void 0;
-var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
-var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
-var _assertThisInitialized2 = _interopRequireDefault(require("@babel/runtime/helpers/assertThisInitialized"));
-var _inherits2 = _interopRequireDefault(require("@babel/runtime/helpers/inherits"));
-var _createSuper2 = _interopRequireDefault(require("@babel/runtime/helpers/createSuper"));
-var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _plugins = require("@webiny/plugins");
-var MenuPlugin = /*#__PURE__*/function (_Plugin) {
-  (0, _inherits2.default)(MenuPlugin, _Plugin);
-  var _super = (0, _createSuper2.default)(MenuPlugin);
-  function MenuPlugin(config) {
-    var _this;
-    (0, _classCallCheck2.default)(this, MenuPlugin);
-    _this = _super.call(this);
-    (0, _defineProperty2.default)((0, _assertThisInitialized2.default)(_this), "_config", void 0);
-    _this._config = config || {};
-    return _this;
+import { Plugin } from "@webiny/plugins";
+export class MenuPlugin extends Plugin {
+  static type = "admin-menu";
+  constructor(config) {
+    super();
+    this._config = config || {};
   }
-  (0, _createClass2.default)(MenuPlugin, [{
-    key: "order",
-    get: function get() {
-      return this._config.order;
-    }
-  }, {
-    key: "render",
-    value: function render(props) {
-      if (!this._config.render) {
-        return null;
-      }
-      return this._config.render(props);
+  get order() {
+    return this._config.order;
+  }
+  render(props) {
+    if (!this._config.render) {
+      return null;
     }
-  }]);
-  return MenuPlugin;
-}(_plugins.Plugin);
-exports.MenuPlugin = MenuPlugin;
-(0, _defineProperty2.default)(MenuPlugin, "type", "admin-menu");
+    return this._config.render(props);
+  }
+}
+
+//# sourceMappingURL=MenuPlugin.js.map

package/plugins/MenuPlugin.js.map

@@ -1 +1 @@
-{"version":3,"names":["MenuPlugin","config","_config","order","props","render","Plugin"],"sources":["MenuPlugin.ts"],"sourcesContent":["import * as React from \"react\";\nimport { Plugin } from \"@webiny/plugins\";\n\nexport interface MenuProps {\n    name: string;\n    label: React.ReactNode;\n    icon: React.ReactElement;\n    children: React.ReactNode;\n    onClick?: (toggleSection: () => void) => void;\n}\n\nexport interface SectionProps {\n    label: React.ReactNode;\n    children: React.ReactNode;\n    icon?: React.ReactElement;\n}\n\nexport interface ItemProps {\n    label: React.ReactNode;\n    path: string;\n    style?: React.CSSProperties;\n    onClick?: () => any;\n}\n\ninterface Props {\n    Menu: React.ComponentType<MenuProps>;\n    Section: React.ComponentType<SectionProps>;\n    Item: React.ComponentType<ItemProps>;\n}\n\ninterface Config {\n    render(props: Props): React.ReactNode;\n    order?: number;\n}\n\nexport class MenuPlugin extends Plugin {\n    public static override readonly type: string = \"admin-menu\";\n    private readonly _config: Partial<Config>;\n\n    public constructor(config?: Config) {\n        super();\n        this._config = config || {};\n    }\n\n    get order() {\n        return this._config.order;\n    }\n\n    public render(props: Props): React.ReactNode {\n        if (!this._config.render) {\n            return null;\n        }\n        return this._config.render(props);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AACA;AAAyC,IAkC5BA,UAAU;EAAA;EAAA;EAInB,oBAAmBC,MAAe,EAAE;IAAA;IAAA;IAChC;IAAQ;IACR,MAAKC,OAAO,GAAGD,MAAM,IAAI,CAAC,CAAC;IAAC;EAChC;EAAC;IAAA;IAAA,KAED,eAAY;MACR,OAAO,IAAI,CAACC,OAAO,CAACC,KAAK;IAC7B;EAAC;IAAA;IAAA,OAED,gBAAcC,KAAY,EAAmB;MACzC,IAAI,CAAC,IAAI,CAACF,OAAO,CAACG,MAAM,EAAE;QACtB,OAAO,IAAI;MACf;MACA,OAAO,IAAI,CAACH,OAAO,CAACG,MAAM,CAACD,KAAK,CAAC;IACrC;EAAC;EAAA;AAAA,EAlB2BE,eAAM;AAAA;AAAA,8BAAzBN,UAAU,UAC4B,YAAY"}
+{"version":3,"names":["Plugin","MenuPlugin","type","constructor","config","_config","order","render","props"],"sources":["MenuPlugin.ts"],"sourcesContent":["import type * as React from \"react\";\nimport { Plugin } from \"@webiny/plugins\";\n\nexport interface MenuProps {\n    name: string;\n    label: React.ReactNode;\n    icon: React.ReactElement;\n    children: React.ReactNode;\n    onClick?: (toggleSection: () => void) => void;\n}\n\nexport interface SectionProps {\n    label: React.ReactNode;\n    children: React.ReactNode;\n    icon?: React.ReactElement;\n}\n\nexport interface ItemProps {\n    label: React.ReactNode;\n    path: string;\n    style?: React.CSSProperties;\n    onClick?: () => any;\n}\n\ninterface Props {\n    Menu: React.ComponentType<MenuProps>;\n    Section: React.ComponentType<SectionProps>;\n    Item: React.ComponentType<ItemProps>;\n}\n\ninterface Config {\n    render(props: Props): React.ReactNode;\n    order?: number;\n}\n\nexport class MenuPlugin extends Plugin {\n    public static override readonly type: string = \"admin-menu\";\n    private readonly _config: Partial<Config>;\n\n    public constructor(config?: Config) {\n        super();\n        this._config = config || {};\n    }\n\n    get order() {\n        return this._config.order;\n    }\n\n    public render(props: Props): React.ReactNode {\n        if (!this._config.render) {\n            return null;\n        }\n        return this._config.render(props);\n    }\n}\n"],"mappings":"AACA,SAASA,MAAM,QAAQ,iBAAiB;AAkCxC,OAAO,MAAMC,UAAU,SAASD,MAAM,CAAC;EACnC,OAAgCE,IAAI,GAAW,YAAY;EAGpDC,WAAWA,CAACC,MAAe,EAAE;IAChC,KAAK,CAAC,CAAC;IACP,IAAI,CAACC,OAAO,GAAGD,MAAM,IAAI,CAAC,CAAC;EAC/B;EAEA,IAAIE,KAAKA,CAAA,EAAG;IACR,OAAO,IAAI,CAACD,OAAO,CAACC,KAAK;EAC7B;EAEOC,MAAMA,CAACC,KAAY,EAAmB;IACzC,IAAI,CAAC,IAAI,CAACH,OAAO,CAACE,MAAM,EAAE;MACtB,OAAO,IAAI;IACf;IACA,OAAO,IAAI,CAACF,OAAO,CAACE,MAAM,CAACC,KAAK,CAAC;EACrC;AACJ","ignoreList":[]}

package/presentation/installation/components/SystemInstaller/SystemInstaller.d.ts

@@ -0,0 +1,8 @@
+import React from "react";
+interface SystemInstallerProps {
+    children: React.ReactNode;
+}
+export declare const SystemInstaller: (({ children }: SystemInstallerProps) => React.JSX.Element) & {
+    displayName: string;
+};
+export {};