@webiny/app-admin 0.0.0-unstable.e53eceafb5 → 0.0.0-unstable.e6f0dc8ca7

package/permissions/types.d.ts

@@ -0,0 +1,267 @@
+import type React from "react";
+import type { NonEmptyArray } from "@webiny/app/types.js";
+/**
+ * A single permission object from the API.
+ */
+export interface Permission {
+    name: string;
+    [key: string]: any;
+}
+/**
+ * An action definition on an entity.
+ *
+ * Built-in actions:
+ * - `{ name: "rwd" }` — read/write/delete single-select (serialized as joined string, e.g. "rw")
+ * - `{ name: "pw" }` — publish/unpublish multi-select (serialized as joined string, e.g. "pu")
+ *
+ * Custom actions:
+ * - `{ name: "install", label: "Install" }` — boolean flag (serialized as `install: true`)
+ */
+export interface ActionDefinition {
+    /** Key on the permission object (e.g. "rwd", "pw", "install") */
+    name: string;
+    /** Display label for the UI. Required for custom actions; ignored for built-in "rwd"/"pw". */
+    label?: string;
+}
+/**
+ * Defines an entity within a permission schema.
+ */
+export interface EntityDefinition {
+    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */
+    id: string;
+    /** Display title for the UI renderer (e.g. "Files", "Settings") */
+    title?: string;
+    /** Permission name emitted for this entity (e.g. "fm.file") */
+    permission: string;
+    /** Available access scopes */
+    scopes: ("full" | "own")[];
+    /** Action definitions for this entity */
+    actions?: ActionDefinition[];
+    /** Dependency on another entity */
+    dependsOn?: {
+        /** ID of parent entity */
+        entity: string;
+        /** Required action character (e.g. "r") */
+        requires: string;
+    };
+}
+/**
+ * Configuration for creating a permission schema.
+ */
+export interface PermissionSchemaConfig {
+    /** Permission prefix — used to filter permissions from the array */
+    prefix: string;
+    /**
+     * Full access configuration.
+     * - `true` — emits `{ name: "${prefix}.*" }`.
+     * - `{ ...extras }` — emits `{ name: "${prefix}.*", ...extras }`.
+     */
+    fullAccess: boolean | {
+        [key: string]: any;
+    };
+    /**
+     * Read-only access configuration. When defined, the schema supports a read-only tier.
+     * - `true` — emits `{ name: "${prefix}.*", rwd: "r" }`.
+     * - `Permission[]` — emits the array as-is.
+     */
+    readOnlyAccess?: boolean | Permission[];
+    /** Entity definitions (optional — simple apps have none) */
+    entities?: EntityDefinition[];
+}
+/**
+ * A compiled permission schema returned by `createPermissionSchema`.
+ */
+export interface PermissionSchema {
+    prefix: string;
+    /**
+     * Full access configuration.
+     * - `true` — emits `{ name: "${prefix}.*" }`.
+     * - `{ ...extras }` — emits `{ name: "${prefix}.*", ...extras }`.
+     */
+    fullAccess: boolean | {
+        [key: string]: any;
+    };
+    /**
+     * Read-only access configuration. When defined, the schema supports a read-only tier.
+     * - `true` — emits `{ name: "${prefix}.*", rwd: "r" }`.
+     * - `Permission[]` — emits the array as-is.
+     */
+    readOnlyAccess?: boolean | Permission[];
+    entities?: EntityDefinition[];
+}
+/**
+ * Options passed to the `usePermissionForm` hook.
+ */
+export interface UsePermissionFormOptions {
+    value: Permission[];
+    onChange: (value: Permission[]) => void;
+    /** Merge extra fields into deserialized form data (for CMS endpoints, resource scopes, etc.) */
+    deserialize?: (permissions: Permission[]) => Record<string, any>;
+    /** Transform or extend the core-serialized permissions (for CMS endpoints, resource scopes, etc.) */
+    serialize?: (formData: Record<string, any>, corePermissions: Permission[]) => Permission[];
+}
+/**
+ * Return value of `usePermissionForm`.
+ */
+export interface UsePermissionFormResult {
+    formData: Record<string, any>;
+    onFormChange: (data: Record<string, any>) => void;
+}
+/**
+ * Configuration for a permission renderer registered via AdminConfig.
+ *
+ * Either `schema` or `element` must be provided:
+ * - `schema`: uses the built-in PermissionRenderer for auto-generated UI.
+ * - `element`: uses a custom React element for full control.
+ */
+export type PermissionRendererConfig = PermissionRendererConfigBase & ({
+    schema: PermissionSchema;
+    element?: never;
+} | {
+    schema?: never;
+    element: React.ReactElement;
+});
+interface PermissionRendererConfigBase {
+    name: string;
+    title: string;
+    description?: string;
+    icon?: React.ReactElement;
+    system?: boolean;
+}
+/**
+ * Item that may have an owner (used for own-scope permission checks).
+ */
+export interface OwnableItem {
+    createdBy?: {
+        id: string;
+    } | null;
+}
+/**
+ * Extract the union of entity definitions from a schema config type.
+ */
+type EntitiesOf<S extends PermissionSchemaConfig> = S extends {
+    entities: ReadonlyArray<infer E extends EntityDefinition>;
+} ? E : never;
+/**
+ * Extract entity IDs whose actions array contains an action with the given name.
+ */
+type EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {
+    [K in EntitiesOf<S> as K extends {
+        actions: ReadonlyArray<infer Act>;
+    } ? Act extends {
+        name: A;
+    } ? K["id"] : never : never]: never;
+} extends infer M ? keyof M & string : never;
+/**
+ * Entity IDs that have the "rwd" action.
+ */
+export type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "rwd">;
+/**
+ * Entity IDs that have the "pw" action.
+ */
+export type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "pw">;
+/**
+ * All entity IDs in the schema.
+ */
+export type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>["id"];
+/**
+ * Custom (non-builtin) action names across all entities.
+ */
+export type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<EntitiesOf<S> extends {
+    actions: ReadonlyArray<infer Act extends ActionDefinition>;
+} ? Act["name"] : never, "rwd" | "pw">;
+/**
+ * The return type of `usePermissions(schema)`.
+ *
+ * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.
+ * When the schema is dynamically typed, all methods accept `string`.
+ */
+export type UsePermissionsResult<S extends PermissionSchemaConfig> = string extends AllEntityIds<S> ? UsePermissionsResultUntyped : UsePermissionsResultTyped<S>;
+/**
+ * Canonical type for DI-resolved permissions.
+ * Same underlying type as `UsePermissionsResult<S>`.
+ */
+export type Permissions<S extends PermissionSchemaConfig> = UsePermissionsResult<S>;
+export interface UsePermissionsResultUntyped {
+    canAccess: (entityId: string) => boolean;
+    canRead: (entityId: string) => boolean;
+    canCreate: (entityId: string) => boolean;
+    canEdit: (entityId: string, item?: OwnableItem) => boolean;
+    canDelete: (entityId: string, item?: OwnableItem) => boolean;
+    canPublish: (entityId: string) => boolean;
+    canUnpublish: (entityId: string) => boolean;
+    canAction: (action: string, entityId: string) => boolean;
+}
+/**
+ * Action values accepted by `HasPermission`.
+ *
+ * Built-in actions are always available; custom action names from the schema are inferred automatically.
+ */
+export type HasPermissionAction<S extends PermissionSchemaConfig> = "read" | "create" | "edit" | "delete" | "publish" | "unpublish" | CustomActionNames<S>;
+/**
+ * Action constraint for `HasPermission`.
+ *
+ * Exactly one of `action`, `someActions`, or `allActions` may be provided:
+ * - `action` — single action; grants access if it passes.
+ * - `someActions` — array; grants access if ANY action passes (OR).
+ * - `allActions` — array; grants access only if ALL actions pass (AND).
+ */
+type ActionConstraint<S extends PermissionSchemaConfig> = {
+    action?: HasPermissionAction<S>;
+    someActions?: never;
+    allActions?: never;
+} | {
+    action?: never;
+    someActions: NonEmptyArray<HasPermissionAction<S>>;
+    allActions?: never;
+} | {
+    action?: never;
+    someActions?: never;
+    allActions: NonEmptyArray<HasPermissionAction<S>>;
+};
+/**
+ * Props for a schema-bound `HasPermission` component created via `createHasPermission`.
+ *
+ * Exactly one of `entity`, `any`, or `all` must be provided.
+ * Optionally combine with `action`, `someActions`, or `allActions`.
+ */
+export type HasPermissionProps<S extends PermissionSchemaConfig> = (SingleEntityProps<S> | AnyEntitiesProps<S> | AllEntitiesProps<S>) & ActionConstraint<S>;
+interface SingleEntityProps<S extends PermissionSchemaConfig> {
+    entity: AllEntityIds<S>;
+    any?: never;
+    all?: never;
+    children: React.ReactNode;
+}
+interface AnyEntitiesProps<S extends PermissionSchemaConfig> {
+    entity?: never;
+    any: AllEntityIds<S>[];
+    all?: never;
+    children: React.ReactNode;
+}
+interface AllEntitiesProps<S extends PermissionSchemaConfig> {
+    entity?: never;
+    any?: never;
+    all: AllEntityIds<S>[];
+    children: React.ReactNode;
+}
+type UsePermissionsResultTyped<S extends PermissionSchemaConfig> = {
+    canAccess: (entityId: AllEntityIds<S>) => boolean;
+    canAction: (action: CustomActionNames<S> extends never ? string : CustomActionNames<S>, entityId: AllEntityIds<S>) => boolean;
+} & ([RwdEntityId<S>] extends [never] ? {
+    canRead: (entityId: string) => boolean;
+    canCreate: (entityId: string) => boolean;
+    canEdit: (entityId: string, item?: OwnableItem) => boolean;
+    canDelete: (entityId: string, item?: OwnableItem) => boolean;
+} : {
+    canRead: (entityId: RwdEntityId<S>) => boolean;
+    canCreate: (entityId: RwdEntityId<S>) => boolean;
+    canEdit: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;
+    canDelete: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;
+}) & ([PwEntityId<S>] extends [never] ? {
+    canPublish: (entityId: string) => boolean;
+    canUnpublish: (entityId: string) => boolean;
+} : {
+    canPublish: (entityId: PwEntityId<S>) => boolean;
+    canUnpublish: (entityId: PwEntityId<S>) => boolean;
+});
+export {};

package/permissions/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map

package/permissions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["import type React from \"react\";\nimport type { NonEmptyArray } from \"@webiny/app/types.js\";\n\n/**\n * A single permission object from the API.\n */\nexport interface Permission {\n    name: string;\n    [key: string]: any;\n}\n\n/**\n * An action definition on an entity.\n *\n * Built-in actions:\n * - `{ name: \"rwd\" }` — read/write/delete single-select (serialized as joined string, e.g. \"rw\")\n * - `{ name: \"pw\" }` — publish/unpublish multi-select (serialized as joined string, e.g. \"pu\")\n *\n * Custom actions:\n * - `{ name: \"install\", label: \"Install\" }` — boolean flag (serialized as `install: true`)\n */\nexport interface ActionDefinition {\n    /** Key on the permission object (e.g. \"rwd\", \"pw\", \"install\") */\n    name: string;\n    /** Display label for the UI. Required for custom actions; ignored for built-in \"rwd\"/\"pw\". */\n    label?: string;\n}\n\n/**\n * Defines an entity within a permission schema.\n */\nexport interface EntityDefinition {\n    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */\n    id: string;\n    /** Display title for the UI renderer (e.g. \"Files\", \"Settings\") */\n    title?: string;\n    /** Permission name emitted for this entity (e.g. \"fm.file\") */\n    permission: string;\n    /** Available access scopes */\n    scopes: (\"full\" | \"own\")[];\n    /** Action definitions for this entity */\n    actions?: ActionDefinition[];\n    /** Dependency on another entity */\n    dependsOn?: {\n        /** ID of parent entity */\n        entity: string;\n        /** Required action character (e.g. \"r\") */\n        requires: string;\n    };\n}\n\n/**\n * Configuration for creating a permission schema.\n */\nexport interface PermissionSchemaConfig {\n    /** Permission prefix — used to filter permissions from the array */\n    prefix: string;\n    /**\n     * Full access configuration.\n     * - `true` — emits `{ name: \"${prefix}.*\" }`.\n     * - `{ ...extras }` — emits `{ name: \"${prefix}.*\", ...extras }`.\n     */\n    fullAccess: boolean | { [key: string]: any };\n    /**\n     * Read-only access configuration. When defined, the schema supports a read-only tier.\n     * - `true` — emits `{ name: \"${prefix}.*\", rwd: \"r\" }`.\n     * - `Permission[]` — emits the array as-is.\n     */\n    readOnlyAccess?: boolean | Permission[];\n    /** Entity definitions (optional — simple apps have none) */\n    entities?: EntityDefinition[];\n}\n\n/**\n * A compiled permission schema returned by `createPermissionSchema`.\n */\nexport interface PermissionSchema {\n    prefix: string;\n    /**\n     * Full access configuration.\n     * - `true` — emits `{ name: \"${prefix}.*\" }`.\n     * - `{ ...extras }` — emits `{ name: \"${prefix}.*\", ...extras }`.\n     */\n    fullAccess: boolean | { [key: string]: any };\n    /**\n     * Read-only access configuration. When defined, the schema supports a read-only tier.\n     * - `true` — emits `{ name: \"${prefix}.*\", rwd: \"r\" }`.\n     * - `Permission[]` — emits the array as-is.\n     */\n    readOnlyAccess?: boolean | Permission[];\n    entities?: EntityDefinition[];\n}\n\n/**\n * Options passed to the `usePermissionForm` hook.\n */\nexport interface UsePermissionFormOptions {\n    value: Permission[];\n    onChange: (value: Permission[]) => void;\n    /** Merge extra fields into deserialized form data (for CMS endpoints, resource scopes, etc.) */\n    deserialize?: (permissions: Permission[]) => Record<string, any>;\n    /** Transform or extend the core-serialized permissions (for CMS endpoints, resource scopes, etc.) */\n    serialize?: (formData: Record<string, any>, corePermissions: Permission[]) => Permission[];\n}\n\n/**\n * Return value of `usePermissionForm`.\n */\nexport interface UsePermissionFormResult {\n    formData: Record<string, any>;\n    onFormChange: (data: Record<string, any>) => void;\n}\n\n/**\n * Configuration for a permission renderer registered via AdminConfig.\n *\n * Either `schema` or `element` must be provided:\n * - `schema`: uses the built-in PermissionRenderer for auto-generated UI.\n * - `element`: uses a custom React element for full control.\n */\nexport type PermissionRendererConfig = PermissionRendererConfigBase &\n    (\n        | { schema: PermissionSchema; element?: never }\n        | { schema?: never; element: React.ReactElement }\n    );\n\ninterface PermissionRendererConfigBase {\n    name: string;\n    title: string;\n    description?: string;\n    icon?: React.ReactElement;\n    system?: boolean;\n}\n\n/**\n * Item that may have an owner (used for own-scope permission checks).\n */\nexport interface OwnableItem {\n    createdBy?: { id: string } | null;\n}\n\n/**\n * Extract the union of entity definitions from a schema config type.\n */\ntype EntitiesOf<S extends PermissionSchemaConfig> = S extends {\n    entities: ReadonlyArray<infer E extends EntityDefinition>;\n}\n    ? E\n    : never;\n\n/**\n * Extract entity IDs whose actions array contains an action with the given name.\n */\ntype EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {\n    [K in EntitiesOf<S> as K extends { actions: ReadonlyArray<infer Act> }\n        ? Act extends { name: A }\n            ? K[\"id\"]\n            : never\n        : never]: never;\n} extends infer M\n    ? keyof M & string\n    : never;\n\n/**\n * Entity IDs that have the \"rwd\" action.\n */\nexport type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"rwd\">;\n\n/**\n * Entity IDs that have the \"pw\" action.\n */\nexport type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"pw\">;\n\n/**\n * All entity IDs in the schema.\n */\nexport type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>[\"id\"];\n\n/**\n * Custom (non-builtin) action names across all entities.\n */\nexport type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<\n    EntitiesOf<S> extends { actions: ReadonlyArray<infer Act extends ActionDefinition> }\n        ? Act[\"name\"]\n        : never,\n    \"rwd\" | \"pw\"\n>;\n\n/**\n * The return type of `usePermissions(schema)`.\n *\n * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.\n * When the schema is dynamically typed, all methods accept `string`.\n */\nexport type UsePermissionsResult<S extends PermissionSchemaConfig> =\n    string extends AllEntityIds<S> ? UsePermissionsResultUntyped : UsePermissionsResultTyped<S>;\n\n/**\n * Canonical type for DI-resolved permissions.\n * Same underlying type as `UsePermissionsResult<S>`.\n */\nexport type Permissions<S extends PermissionSchemaConfig> = UsePermissionsResult<S>;\n\nexport interface UsePermissionsResultUntyped {\n    canAccess: (entityId: string) => boolean;\n    canRead: (entityId: string) => boolean;\n    canCreate: (entityId: string) => boolean;\n    canEdit: (entityId: string, item?: OwnableItem) => boolean;\n    canDelete: (entityId: string, item?: OwnableItem) => boolean;\n    canPublish: (entityId: string) => boolean;\n    canUnpublish: (entityId: string) => boolean;\n    canAction: (action: string, entityId: string) => boolean;\n}\n\n/**\n * Action values accepted by `HasPermission`.\n *\n * Built-in actions are always available; custom action names from the schema are inferred automatically.\n */\nexport type HasPermissionAction<S extends PermissionSchemaConfig> =\n    | \"read\"\n    | \"create\"\n    | \"edit\"\n    | \"delete\"\n    | \"publish\"\n    | \"unpublish\"\n    | CustomActionNames<S>;\n\n/**\n * Action constraint for `HasPermission`.\n *\n * Exactly one of `action`, `someActions`, or `allActions` may be provided:\n * - `action` — single action; grants access if it passes.\n * - `someActions` — array; grants access if ANY action passes (OR).\n * - `allActions` — array; grants access only if ALL actions pass (AND).\n */\ntype ActionConstraint<S extends PermissionSchemaConfig> =\n    | { action?: HasPermissionAction<S>; someActions?: never; allActions?: never }\n    | { action?: never; someActions: NonEmptyArray<HasPermissionAction<S>>; allActions?: never }\n    | { action?: never; someActions?: never; allActions: NonEmptyArray<HasPermissionAction<S>> };\n\n/**\n * Props for a schema-bound `HasPermission` component created via `createHasPermission`.\n *\n * Exactly one of `entity`, `any`, or `all` must be provided.\n * Optionally combine with `action`, `someActions`, or `allActions`.\n */\nexport type HasPermissionProps<S extends PermissionSchemaConfig> = (\n    | SingleEntityProps<S>\n    | AnyEntitiesProps<S>\n    | AllEntitiesProps<S>\n) &\n    ActionConstraint<S>;\n\ninterface SingleEntityProps<S extends PermissionSchemaConfig> {\n    entity: AllEntityIds<S>;\n    any?: never;\n    all?: never;\n    children: React.ReactNode;\n}\n\ninterface AnyEntitiesProps<S extends PermissionSchemaConfig> {\n    entity?: never;\n    any: AllEntityIds<S>[];\n    all?: never;\n    children: React.ReactNode;\n}\n\ninterface AllEntitiesProps<S extends PermissionSchemaConfig> {\n    entity?: never;\n    any?: never;\n    all: AllEntityIds<S>[];\n    children: React.ReactNode;\n}\n\ntype UsePermissionsResultTyped<S extends PermissionSchemaConfig> = {\n    canAccess: (entityId: AllEntityIds<S>) => boolean;\n    canAction: (\n        action: CustomActionNames<S> extends never ? string : CustomActionNames<S>,\n        entityId: AllEntityIds<S>\n    ) => boolean;\n} & ([RwdEntityId<S>] extends [never]\n    ? {\n          canRead: (entityId: string) => boolean;\n          canCreate: (entityId: string) => boolean;\n          canEdit: (entityId: string, item?: OwnableItem) => boolean;\n          canDelete: (entityId: string, item?: OwnableItem) => boolean;\n      }\n    : {\n          canRead: (entityId: RwdEntityId<S>) => boolean;\n          canCreate: (entityId: RwdEntityId<S>) => boolean;\n          canEdit: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;\n          canDelete: (entityId: RwdEntityId<S>, item?: OwnableItem) => boolean;\n      }) &\n    ([PwEntityId<S>] extends [never]\n        ? {\n              canPublish: (entityId: string) => boolean;\n              canUnpublish: (entityId: string) => boolean;\n          }\n        : {\n              canPublish: (entityId: PwEntityId<S>) => boolean;\n              canUnpublish: (entityId: PwEntityId<S>) => boolean;\n          });\n"],"mappings":"","ignoreList":[]}

package/permissions/usePermissionForm.d.ts

@@ -0,0 +1,17 @@
+import type { Permission, PermissionSchema, UsePermissionFormOptions, UsePermissionFormResult } from "./types.js";
+/**
+ * Deserialize Permission[] into form data based on the schema.
+ */
+declare function deserializePermissions(schema: PermissionSchema, value: Permission[]): Record<string, any>;
+/**
+ * Serialize form data into Permission[] based on the schema.
+ */
+declare function serializePermissions(schema: PermissionSchema, formData: Record<string, any>, currentValue: Permission[]): Permission[];
+/**
+ * Hook that bridges a permission schema with a Form component.
+ *
+ * Handles bidirectional transformation between Permission[] and form data,
+ * with optional custom serialize/deserialize callbacks for app-specific needs.
+ */
+export declare function usePermissionForm(schema: PermissionSchema, options: UsePermissionFormOptions): UsePermissionFormResult;
+export { deserializePermissions, serializePermissions };

package/permissions/usePermissionForm.js

@@ -0,0 +1,256 @@
+import { useMemo, useCallback } from "react";
+function hasAction(entity, name) {
+  return entity.actions?.some(a => a.name === name) ?? false;
+}
+
+/** Resolve fullAccess config into a concrete Permission object. */
+function resolveFullAccess(schema) {
+  const name = `${schema.prefix}.*`;
+  if (schema.fullAccess === true) {
+    return {
+      name
+    };
+  }
+  return {
+    name,
+    ...schema.fullAccess
+  };
+}
+
+/** Resolve readOnlyAccess config into a concrete Permission[]. */
+function resolveReadOnlyAccess(schema) {
+  if (!schema.readOnlyAccess) {
+    return undefined;
+  }
+  if (schema.readOnlyAccess === true) {
+    return [{
+      name: `${schema.prefix}.*`,
+      rwd: "r"
+    }];
+  }
+  return schema.readOnlyAccess;
+}
+
+/**
+ * Deserialize Permission[] into form data based on the schema.
+ */
+function deserializePermissions(schema, value) {
+  if (!Array.isArray(value)) {
+    return {
+      accessLevel: "no"
+    };
+  }
+
+  // Check for read-only access by looking for the synthetic marker permission.
+  if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {
+    return {
+      accessLevel: "read-only"
+    };
+  }
+
+  // Check for full access: either wildcard or the schema's fullAccess permission.
+  const fullAccessName = `${schema.prefix}.*`;
+  const hasFullAccess = value.some(p => p.name === "*" || p.name === fullAccessName);
+  if (hasFullAccess) {
+    return {
+      accessLevel: "full"
+    };
+  }
+
+  // Filter permissions that belong to this schema's prefix.
+  const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));
+  if (ownPermissions.length === 0) {
+    return {
+      accessLevel: "no"
+    };
+  }
+
+  // Custom access level — extract per-entity form fields.
+  const data = {
+    accessLevel: "custom"
+  };
+  const entities = schema.entities || [];
+  for (const entity of entities) {
+    const perm = ownPermissions.find(p => p.name === entity.permission);
+    if (!perm) {
+      continue;
+    }
+
+    // Access scope: "own" if perm.own === true, else "full".
+    if (perm.own === true) {
+      data[`${entity.id}AccessScope`] = "own";
+    } else {
+      data[`${entity.id}AccessScope`] = "full";
+    }
+
+    // Process actions.
+    for (const action of entity.actions ?? []) {
+      if (action.name === "rwd") {
+        data[`${entity.id}RWD`] = perm.rwd || "r";
+      } else if (action.name === "pw") {
+        data[`${entity.id}PW`] = perm.pw ? perm.pw.split("") : [];
+      } else {
+        // Custom boolean action.
+        data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;
+      }
+    }
+  }
+  return data;
+}
+
+/**
+ * Serialize form data into Permission[] based on the schema.
+ */
+function serializePermissions(schema, formData, currentValue) {
+  // Start by filtering out all permissions belonging to this schema's prefix.
+  const filtered = Array.isArray(currentValue) ? currentValue.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+  if (formData.accessLevel === "no" || !formData.accessLevel) {
+    return filtered;
+  }
+  if (formData.accessLevel === "full") {
+    return [...filtered, resolveFullAccess(schema)];
+  }
+  const readOnlyPermissions = resolveReadOnlyAccess(schema);
+  if (formData.accessLevel === "read-only" && readOnlyPermissions) {
+    return [...filtered, {
+      name: `$${schema.prefix}.readonly`
+    }, ...readOnlyPermissions];
+  }
+  const entities = schema.entities || [];
+
+  // Custom access — build entity permissions.
+  // First, build a map of entity definitions by ID for dependency lookups.
+  const entityMap = new Map();
+  for (const entity of entities) {
+    entityMap.set(entity.id, entity);
+  }
+
+  // Resolve cascading "own" scopes: if a parent is "own", children must be "own" too.
+  const resolvedScopes = new Map();
+  for (const entity of entities) {
+    const scope = formData[`${entity.id}AccessScope`];
+    if (!scope || scope === "no") {
+      continue;
+    }
+    let resolvedScope = scope;
+
+    // If this entity depends on a parent and the parent scope is "own",
+    // force this entity's scope to "own" as well.
+    if (entity.dependsOn) {
+      const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+      if (parentScope === "own") {
+        resolvedScope = "own";
+      }
+    }
+    resolvedScopes.set(entity.id, resolvedScope);
+  }
+
+  // Prune resolved scopes based on dependencies (must run before building permissions
+  // so that transitive dependencies are properly pruned).
+  for (const entity of entities) {
+    if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {
+      continue;
+    }
+    const parentScope = resolvedScopes.get(entity.dependsOn.entity);
+    if (!parentScope) {
+      // Parent entity is not enabled — prune child.
+      resolvedScopes.delete(entity.id);
+      continue;
+    }
+    const parentEntity = entityMap.get(entity.dependsOn.entity);
+    if (parentEntity && hasAction(parentEntity, "rwd")) {
+      const parentRwd = parentScope === "own" ? "rwd" : formData[`${entity.dependsOn.entity}RWD`] || "r";
+      if (!parentRwd.includes(entity.dependsOn.requires)) {
+        // Parent doesn't have the required action — prune child.
+        resolvedScopes.delete(entity.id);
+      }
+    }
+  }
+
+  // Build permissions from the pruned resolved scopes.
+  const permissions = [];
+  for (const entity of entities) {
+    const scope = resolvedScopes.get(entity.id);
+    if (!scope) {
+      continue;
+    }
+    const perm = {
+      name: entity.permission
+    };
+    if (scope === "own") {
+      perm.own = true;
+      if (hasAction(entity, "rwd")) {
+        perm.rwd = "rwd";
+      }
+    } else if (hasAction(entity, "rwd")) {
+      perm.rwd = formData[`${entity.id}RWD`] || "r";
+    }
+
+    // Process non-rwd actions.
+    for (const action of entity.actions ?? []) {
+      if (action.name === "rwd") {
+        continue; // Already handled above.
+      }
+      if (action.name === "pw") {
+        const pw = formData[`${entity.id}PW`] || [];
+        if (pw.length > 0) {
+          perm.pw = pw.join("");
+        }
+      } else {
+        // Custom boolean action.
+        if (formData[`${entity.id}Action_${action.name}`]) {
+          perm[action.name] = true;
+        }
+      }
+    }
+    permissions.push(perm);
+  }
+  return [...filtered, ...permissions];
+}
+
+/**
+ * Hook that bridges a permission schema with a Form component.
+ *
+ * Handles bidirectional transformation between Permission[] and form data,
+ * with optional custom serialize/deserialize callbacks for app-specific needs.
+ */
+export function usePermissionForm(schema, options) {
+  const {
+    value,
+    onChange
+  } = options;
+  const formData = useMemo(() => {
+    let data = deserializePermissions(schema, value);
+
+    // Merge custom deserialized data if provided.
+    if (options.deserialize) {
+      const extra = options.deserialize(Array.isArray(value) ? value : []);
+      data = {
+        ...data,
+        ...extra
+      };
+    }
+    return data;
+  }, []);
+  const onFormChange = useCallback(data => {
+    let result = serializePermissions(schema, data, value);
+
+    // Apply custom serializer if provided.
+    if (options.serialize) {
+      result = options.serialize(data, result.filter(p => p.name.startsWith(schema.prefix)));
+      // Re-add non-schema permissions that were filtered out.
+      const nonSchemaPermissions = Array.isArray(value) ? value.filter(p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)) : [];
+      result = [...nonSchemaPermissions, ...result];
+    }
+    onChange(result);
+  }, [value]);
+  return {
+    formData,
+    onFormChange
+  };
+}
+
+// Export the pure functions for unit testing.
+export { deserializePermissions, serializePermissions };
+
+//# sourceMappingURL=usePermissionForm.js.map

package/permissions/usePermissionForm.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useMemo","useCallback","hasAction","entity","name","actions","some","a","resolveFullAccess","schema","prefix","fullAccess","resolveReadOnlyAccess","readOnlyAccess","undefined","rwd","deserializePermissions","value","Array","isArray","accessLevel","p","fullAccessName","hasFullAccess","ownPermissions","filter","startsWith","length","data","entities","perm","find","permission","own","id","action","pw","split","serializePermissions","formData","currentValue","filtered","readOnlyPermissions","entityMap","Map","set","resolvedScopes","scope","resolvedScope","dependsOn","parentScope","get","has","delete","parentEntity","parentRwd","includes","requires","permissions","join","push","usePermissionForm","options","onChange","deserialize","extra","onFormChange","result","serialize","nonSchemaPermissions"],"sources":["usePermissionForm.ts"],"sourcesContent":["import { useMemo, useCallback } from \"react\";\nimport type {\n    Permission,\n    PermissionSchema,\n    EntityDefinition,\n    UsePermissionFormOptions,\n    UsePermissionFormResult\n} from \"./types.js\";\n\nfunction hasAction(entity: EntityDefinition, name: string): boolean {\n    return entity.actions?.some(a => a.name === name) ?? false;\n}\n\n/** Resolve fullAccess config into a concrete Permission object. */\nfunction resolveFullAccess(schema: PermissionSchema): Permission {\n    const name = `${schema.prefix}.*`;\n    if (schema.fullAccess === true) {\n        return { name };\n    }\n    return { name, ...schema.fullAccess };\n}\n\n/** Resolve readOnlyAccess config into a concrete Permission[]. */\nfunction resolveReadOnlyAccess(schema: PermissionSchema): Permission[] | undefined {\n    if (!schema.readOnlyAccess) {\n        return undefined;\n    }\n    if (schema.readOnlyAccess === true) {\n        return [{ name: `${schema.prefix}.*`, rwd: \"r\" }];\n    }\n    return schema.readOnlyAccess;\n}\n\n/**\n * Deserialize Permission[] into form data based on the schema.\n */\nfunction deserializePermissions(\n    schema: PermissionSchema,\n    value: Permission[]\n): Record<string, any> {\n    if (!Array.isArray(value)) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Check for read-only access by looking for the synthetic marker permission.\n    if (value.some(p => p.name === `$${schema.prefix}.readonly`)) {\n        return { accessLevel: \"read-only\" };\n    }\n\n    // Check for full access: either wildcard or the schema's fullAccess permission.\n    const fullAccessName = `${schema.prefix}.*`;\n    const hasFullAccess = value.some(p => p.name === \"*\" || p.name === fullAccessName);\n    if (hasFullAccess) {\n        return { accessLevel: \"full\" };\n    }\n\n    // Filter permissions that belong to this schema's prefix.\n    const ownPermissions = value.filter(p => p.name.startsWith(schema.prefix));\n    if (ownPermissions.length === 0) {\n        return { accessLevel: \"no\" };\n    }\n\n    // Custom access level — extract per-entity form fields.\n    const data: Record<string, any> = { accessLevel: \"custom\" };\n    const entities = schema.entities || [];\n\n    for (const entity of entities) {\n        const perm = ownPermissions.find(p => p.name === entity.permission);\n        if (!perm) {\n            continue;\n        }\n\n        // Access scope: \"own\" if perm.own === true, else \"full\".\n        if (perm.own === true) {\n            data[`${entity.id}AccessScope`] = \"own\";\n        } else {\n            data[`${entity.id}AccessScope`] = \"full\";\n        }\n\n        // Process actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                data[`${entity.id}RWD`] = perm.rwd || \"r\";\n            } else if (action.name === \"pw\") {\n                data[`${entity.id}PW`] = perm.pw ? perm.pw.split(\"\") : [];\n            } else {\n                // Custom boolean action.\n                data[`${entity.id}Action_${action.name}`] = perm[action.name] === true;\n            }\n        }\n    }\n\n    return data;\n}\n\n/**\n * Serialize form data into Permission[] based on the schema.\n */\nfunction serializePermissions(\n    schema: PermissionSchema,\n    formData: Record<string, any>,\n    currentValue: Permission[]\n): Permission[] {\n    // Start by filtering out all permissions belonging to this schema's prefix.\n    const filtered = Array.isArray(currentValue)\n        ? currentValue.filter(\n              p => !p.name.startsWith(schema.prefix) && !p.name.startsWith(`$${schema.prefix}`)\n          )\n        : [];\n\n    if (formData.accessLevel === \"no\" || !formData.accessLevel) {\n        return filtered;\n    }\n\n    if (formData.accessLevel === \"full\") {\n        return [...filtered, resolveFullAccess(schema)];\n    }\n\n    const readOnlyPermissions = resolveReadOnlyAccess(schema);\n    if (formData.accessLevel === \"read-only\" && readOnlyPermissions) {\n        return [...filtered, { name: `$${schema.prefix}.readonly` }, ...readOnlyPermissions];\n    }\n\n    const entities = schema.entities || [];\n\n    // Custom access — build entity permissions.\n    // First, build a map of entity definitions by ID for dependency lookups.\n    const entityMap = new Map<string, EntityDefinition>();\n    for (const entity of entities) {\n        entityMap.set(entity.id, entity);\n    }\n\n    // Resolve cascading \"own\" scopes: if a parent is \"own\", children must be \"own\" too.\n    const resolvedScopes = new Map<string, string>();\n    for (const entity of entities) {\n        const scope = formData[`${entity.id}AccessScope`];\n        if (!scope || scope === \"no\") {\n            continue;\n        }\n\n        let resolvedScope = scope;\n\n        // If this entity depends on a parent and the parent scope is \"own\",\n        // force this entity's scope to \"own\" as well.\n        if (entity.dependsOn) {\n            const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n            if (parentScope === \"own\") {\n                resolvedScope = \"own\";\n            }\n        }\n\n        resolvedScopes.set(entity.id, resolvedScope);\n    }\n\n    // Prune resolved scopes based on dependencies (must run before building permissions\n    // so that transitive dependencies are properly pruned).\n    for (const entity of entities) {\n        if (!entity.dependsOn || !resolvedScopes.has(entity.id)) {\n            continue;\n        }\n\n        const parentScope = resolvedScopes.get(entity.dependsOn.entity);\n        if (!parentScope) {\n            // Parent entity is not enabled — prune child.\n            resolvedScopes.delete(entity.id);\n            continue;\n        }\n\n        const parentEntity = entityMap.get(entity.dependsOn.entity);\n        if (parentEntity && hasAction(parentEntity, \"rwd\")) {\n            const parentRwd =\n                parentScope === \"own\" ? \"rwd\" : formData[`${entity.dependsOn.entity}RWD`] || \"r\";\n            if (!parentRwd.includes(entity.dependsOn.requires)) {\n                // Parent doesn't have the required action — prune child.\n                resolvedScopes.delete(entity.id);\n            }\n        }\n    }\n\n    // Build permissions from the pruned resolved scopes.\n    const permissions: Permission[] = [];\n\n    for (const entity of entities) {\n        const scope = resolvedScopes.get(entity.id);\n        if (!scope) {\n            continue;\n        }\n\n        const perm: Permission = {\n            name: entity.permission\n        };\n\n        if (scope === \"own\") {\n            perm.own = true;\n            if (hasAction(entity, \"rwd\")) {\n                perm.rwd = \"rwd\";\n            }\n        } else if (hasAction(entity, \"rwd\")) {\n            perm.rwd = formData[`${entity.id}RWD`] || \"r\";\n        }\n\n        // Process non-rwd actions.\n        for (const action of entity.actions ?? []) {\n            if (action.name === \"rwd\") {\n                continue; // Already handled above.\n            }\n\n            if (action.name === \"pw\") {\n                const pw: string[] = formData[`${entity.id}PW`] || [];\n                if (pw.length > 0) {\n                    perm.pw = pw.join(\"\");\n                }\n            } else {\n                // Custom boolean action.\n                if (formData[`${entity.id}Action_${action.name}`]) {\n                    perm[action.name] = true;\n                }\n            }\n        }\n\n        permissions.push(perm);\n    }\n\n    return [...filtered, ...permissions];\n}\n\n/**\n * Hook that bridges a permission schema with a Form component.\n *\n * Handles bidirectional transformation between Permission[] and form data,\n * with optional custom serialize/deserialize callbacks for app-specific needs.\n */\nexport function usePermissionForm(\n    schema: PermissionSchema,\n    options: UsePermissionFormOptions\n): UsePermissionFormResult {\n    const { value, onChange } = options;\n\n    const formData = useMemo(() => {\n        let data = deserializePermissions(schema, value);\n\n        // Merge custom deserialized data if provided.\n        if (options.deserialize) {\n            const extra = options.deserialize(Array.isArray(value) ? value : []);\n            data = { ...data, ...extra };\n        }\n\n        return data;\n    }, []);\n\n    const onFormChange = useCallback(\n        (data: Record<string, any>) => {\n            let result = serializePermissions(schema, data, value);\n\n            // Apply custom serializer if provided.\n            if (options.serialize) {\n                result = options.serialize(\n                    data,\n                    result.filter(p => p.name.startsWith(schema.prefix))\n                );\n                // Re-add non-schema permissions that were filtered out.\n                const nonSchemaPermissions = Array.isArray(value)\n                    ? value.filter(\n                          p =>\n                              !p.name.startsWith(schema.prefix) &&\n                              !p.name.startsWith(`$${schema.prefix}`)\n                      )\n                    : [];\n                result = [...nonSchemaPermissions, ...result];\n            }\n\n            onChange(result);\n        },\n        [value]\n    );\n\n    return { formData, onFormChange };\n}\n\n// Export the pure functions for unit testing.\nexport { deserializePermissions, serializePermissions };\n"],"mappings":"AAAA,SAASA,OAAO,EAAEC,WAAW,QAAQ,OAAO;AAS5C,SAASC,SAASA,CAACC,MAAwB,EAAEC,IAAY,EAAW;EAChE,OAAOD,MAAM,CAACE,OAAO,EAAEC,IAAI,CAACC,CAAC,IAAIA,CAAC,CAACH,IAAI,KAAKA,IAAI,CAAC,IAAI,KAAK;AAC9D;;AAEA;AACA,SAASI,iBAAiBA,CAACC,MAAwB,EAAc;EAC7D,MAAML,IAAI,GAAG,GAAGK,MAAM,CAACC,MAAM,IAAI;EACjC,IAAID,MAAM,CAACE,UAAU,KAAK,IAAI,EAAE;IAC5B,OAAO;MAAEP;IAAK,CAAC;EACnB;EACA,OAAO;IAAEA,IAAI;IAAE,GAAGK,MAAM,CAACE;EAAW,CAAC;AACzC;;AAEA;AACA,SAASC,qBAAqBA,CAACH,MAAwB,EAA4B;EAC/E,IAAI,CAACA,MAAM,CAACI,cAAc,EAAE;IACxB,OAAOC,SAAS;EACpB;EACA,IAAIL,MAAM,CAACI,cAAc,KAAK,IAAI,EAAE;IAChC,OAAO,CAAC;MAAET,IAAI,EAAE,GAAGK,MAAM,CAACC,MAAM,IAAI;MAAEK,GAAG,EAAE;IAAI,CAAC,CAAC;EACrD;EACA,OAAON,MAAM,CAACI,cAAc;AAChC;;AAEA;AACA;AACA;AACA,SAASG,sBAAsBA,CAC3BP,MAAwB,EACxBQ,KAAmB,EACA;EACnB,IAAI,CAACC,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,EAAE;IACvB,OAAO;MAAEG,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,IAAIH,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,IAAIK,MAAM,CAACC,MAAM,WAAW,CAAC,EAAE;IAC1D,OAAO;MAAEU,WAAW,EAAE;IAAY,CAAC;EACvC;;EAEA;EACA,MAAME,cAAc,GAAG,GAAGb,MAAM,CAACC,MAAM,IAAI;EAC3C,MAAMa,aAAa,GAAGN,KAAK,CAACX,IAAI,CAACe,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAK,GAAG,IAAIiB,CAAC,CAACjB,IAAI,KAAKkB,cAAc,CAAC;EAClF,IAAIC,aAAa,EAAE;IACf,OAAO;MAAEH,WAAW,EAAE;IAAO,CAAC;EAClC;;EAEA;EACA,MAAMI,cAAc,GAAGP,KAAK,CAACQ,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CAAC;EAC1E,IAAIc,cAAc,CAACG,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO;MAAEP,WAAW,EAAE;IAAK,CAAC;EAChC;;EAEA;EACA,MAAMQ,IAAyB,GAAG;IAAER,WAAW,EAAE;EAAS,CAAC;EAC3D,MAAMS,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;EAEtC,KAAK,MAAM1B,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMC,IAAI,GAAGN,cAAc,CAACO,IAAI,CAACV,CAAC,IAAIA,CAAC,CAACjB,IAAI,KAAKD,MAAM,CAAC6B,UAAU,CAAC;IACnE,IAAI,CAACF,IAAI,EAAE;MACP;IACJ;;IAEA;IACA,IAAIA,IAAI,CAACG,GAAG,KAAK,IAAI,EAAE;MACnBL,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,KAAK;IAC3C,CAAC,MAAM;MACHN,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,aAAa,CAAC,GAAG,MAAM;IAC5C;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvBwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,KAAK,CAAC,GAAGJ,IAAI,CAACf,GAAG,IAAI,GAAG;MAC7C,CAAC,MAAM,IAAIoB,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QAC7BwB,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,IAAI,CAAC,GAAGJ,IAAI,CAACM,EAAE,GAAGN,IAAI,CAACM,EAAE,CAACC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE;MAC7D,CAAC,MAAM;QACH;QACAT,IAAI,CAAC,GAAGzB,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,GAAG0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,KAAK,IAAI;MAC1E;IACJ;EACJ;EAEA,OAAOwB,IAAI;AACf;;AAEA;AACA;AACA;AACA,SAASU,oBAAoBA,CACzB7B,MAAwB,EACxB8B,QAA6B,EAC7BC,YAA0B,EACd;EACZ;EACA,MAAMC,QAAQ,GAAGvB,KAAK,CAACC,OAAO,CAACqB,YAAY,CAAC,GACtCA,YAAY,CAACf,MAAM,CACfJ,CAAC,IAAI,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IAAI,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CACpF,CAAC,GACD,EAAE;EAER,IAAI6B,QAAQ,CAACnB,WAAW,KAAK,IAAI,IAAI,CAACmB,QAAQ,CAACnB,WAAW,EAAE;IACxD,OAAOqB,QAAQ;EACnB;EAEA,IAAIF,QAAQ,CAACnB,WAAW,KAAK,MAAM,EAAE;IACjC,OAAO,CAAC,GAAGqB,QAAQ,EAAEjC,iBAAiB,CAACC,MAAM,CAAC,CAAC;EACnD;EAEA,MAAMiC,mBAAmB,GAAG9B,qBAAqB,CAACH,MAAM,CAAC;EACzD,IAAI8B,QAAQ,CAACnB,WAAW,KAAK,WAAW,IAAIsB,mBAAmB,EAAE;IAC7D,OAAO,CAAC,GAAGD,QAAQ,EAAE;MAAErC,IAAI,EAAE,IAAIK,MAAM,CAACC,MAAM;IAAY,CAAC,EAAE,GAAGgC,mBAAmB,CAAC;EACxF;EAEA,MAAMb,QAAQ,GAAGpB,MAAM,CAACoB,QAAQ,IAAI,EAAE;;EAEtC;EACA;EACA,MAAMc,SAAS,GAAG,IAAIC,GAAG,CAA2B,CAAC;EACrD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3Bc,SAAS,CAACE,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAE/B,MAAM,CAAC;EACpC;;EAEA;EACA,MAAM2C,cAAc,GAAG,IAAIF,GAAG,CAAiB,CAAC;EAChD,KAAK,MAAMzC,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGR,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,aAAa,CAAC;IACjD,IAAI,CAACa,KAAK,IAAIA,KAAK,KAAK,IAAI,EAAE;MAC1B;IACJ;IAEA,IAAIC,aAAa,GAAGD,KAAK;;IAEzB;IACA;IACA,IAAI5C,MAAM,CAAC8C,SAAS,EAAE;MAClB,MAAMC,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;MAC/D,IAAI+C,WAAW,KAAK,KAAK,EAAE;QACvBF,aAAa,GAAG,KAAK;MACzB;IACJ;IAEAF,cAAc,CAACD,GAAG,CAAC1C,MAAM,CAAC+B,EAAE,EAAEc,aAAa,CAAC;EAChD;;EAEA;EACA;EACA,KAAK,MAAM7C,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,IAAI,CAAC1B,MAAM,CAAC8C,SAAS,IAAI,CAACH,cAAc,CAACM,GAAG,CAACjD,MAAM,CAAC+B,EAAE,CAAC,EAAE;MACrD;IACJ;IAEA,MAAMgB,WAAW,GAAGJ,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC/D,IAAI,CAAC+C,WAAW,EAAE;MACd;MACAJ,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MAChC;IACJ;IAEA,MAAMoB,YAAY,GAAGX,SAAS,CAACQ,GAAG,CAAChD,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,CAAC;IAC3D,IAAImD,YAAY,IAAIpD,SAAS,CAACoD,YAAY,EAAE,KAAK,CAAC,EAAE;MAChD,MAAMC,SAAS,GACXL,WAAW,KAAK,KAAK,GAAG,KAAK,GAAGX,QAAQ,CAAC,GAAGpC,MAAM,CAAC8C,SAAS,CAAC9C,MAAM,KAAK,CAAC,IAAI,GAAG;MACpF,IAAI,CAACoD,SAAS,CAACC,QAAQ,CAACrD,MAAM,CAAC8C,SAAS,CAACQ,QAAQ,CAAC,EAAE;QAChD;QACAX,cAAc,CAACO,MAAM,CAAClD,MAAM,CAAC+B,EAAE,CAAC;MACpC;IACJ;EACJ;;EAEA;EACA,MAAMwB,WAAyB,GAAG,EAAE;EAEpC,KAAK,MAAMvD,MAAM,IAAI0B,QAAQ,EAAE;IAC3B,MAAMkB,KAAK,GAAGD,cAAc,CAACK,GAAG,CAAChD,MAAM,CAAC+B,EAAE,CAAC;IAC3C,IAAI,CAACa,KAAK,EAAE;MACR;IACJ;IAEA,MAAMjB,IAAgB,GAAG;MACrB1B,IAAI,EAAED,MAAM,CAAC6B;IACjB,CAAC;IAED,IAAIe,KAAK,KAAK,KAAK,EAAE;MACjBjB,IAAI,CAACG,GAAG,GAAG,IAAI;MACf,IAAI/B,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;QAC1B2B,IAAI,CAACf,GAAG,GAAG,KAAK;MACpB;IACJ,CAAC,MAAM,IAAIb,SAAS,CAACC,MAAM,EAAE,KAAK,CAAC,EAAE;MACjC2B,IAAI,CAACf,GAAG,GAAGwB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,KAAK,CAAC,IAAI,GAAG;IACjD;;IAEA;IACA,KAAK,MAAMC,MAAM,IAAIhC,MAAM,CAACE,OAAO,IAAI,EAAE,EAAE;MACvC,IAAI8B,MAAM,CAAC/B,IAAI,KAAK,KAAK,EAAE;QACvB,SAAS,CAAC;MACd;MAEA,IAAI+B,MAAM,CAAC/B,IAAI,KAAK,IAAI,EAAE;QACtB,MAAMgC,EAAY,GAAGG,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,IAAI,CAAC,IAAI,EAAE;QACrD,IAAIE,EAAE,CAACT,MAAM,GAAG,CAAC,EAAE;UACfG,IAAI,CAACM,EAAE,GAAGA,EAAE,CAACuB,IAAI,CAAC,EAAE,CAAC;QACzB;MACJ,CAAC,MAAM;QACH;QACA,IAAIpB,QAAQ,CAAC,GAAGpC,MAAM,CAAC+B,EAAE,UAAUC,MAAM,CAAC/B,IAAI,EAAE,CAAC,EAAE;UAC/C0B,IAAI,CAACK,MAAM,CAAC/B,IAAI,CAAC,GAAG,IAAI;QAC5B;MACJ;IACJ;IAEAsD,WAAW,CAACE,IAAI,CAAC9B,IAAI,CAAC;EAC1B;EAEA,OAAO,CAAC,GAAGW,QAAQ,EAAE,GAAGiB,WAAW,CAAC;AACxC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASG,iBAAiBA,CAC7BpD,MAAwB,EACxBqD,OAAiC,EACV;EACvB,MAAM;IAAE7C,KAAK;IAAE8C;EAAS,CAAC,GAAGD,OAAO;EAEnC,MAAMvB,QAAQ,GAAGvC,OAAO,CAAC,MAAM;IAC3B,IAAI4B,IAAI,GAAGZ,sBAAsB,CAACP,MAAM,EAAEQ,KAAK,CAAC;;IAEhD;IACA,IAAI6C,OAAO,CAACE,WAAW,EAAE;MACrB,MAAMC,KAAK,GAAGH,OAAO,CAACE,WAAW,CAAC9C,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAAGA,KAAK,GAAG,EAAE,CAAC;MACpEW,IAAI,GAAG;QAAE,GAAGA,IAAI;QAAE,GAAGqC;MAAM,CAAC;IAChC;IAEA,OAAOrC,IAAI;EACf,CAAC,EAAE,EAAE,CAAC;EAEN,MAAMsC,YAAY,GAAGjE,WAAW,CAC3B2B,IAAyB,IAAK;IAC3B,IAAIuC,MAAM,GAAG7B,oBAAoB,CAAC7B,MAAM,EAAEmB,IAAI,EAAEX,KAAK,CAAC;;IAEtD;IACA,IAAI6C,OAAO,CAACM,SAAS,EAAE;MACnBD,MAAM,GAAGL,OAAO,CAACM,SAAS,CACtBxC,IAAI,EACJuC,MAAM,CAAC1C,MAAM,CAACJ,CAAC,IAAIA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,CACvD,CAAC;MACD;MACA,MAAM2D,oBAAoB,GAAGnD,KAAK,CAACC,OAAO,CAACF,KAAK,CAAC,GAC3CA,KAAK,CAACQ,MAAM,CACRJ,CAAC,IACG,CAACA,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAACjB,MAAM,CAACC,MAAM,CAAC,IACjC,CAACW,CAAC,CAACjB,IAAI,CAACsB,UAAU,CAAC,IAAIjB,MAAM,CAACC,MAAM,EAAE,CAC9C,CAAC,GACD,EAAE;MACRyD,MAAM,GAAG,CAAC,GAAGE,oBAAoB,EAAE,GAAGF,MAAM,CAAC;IACjD;IAEAJ,QAAQ,CAACI,MAAM,CAAC;EACpB,CAAC,EACD,CAAClD,KAAK,CACV,CAAC;EAED,OAAO;IAAEsB,QAAQ;IAAE2B;EAAa,CAAC;AACrC;;AAEA;AACA,SAASlD,sBAAsB,EAAEsB,oBAAoB","ignoreList":[]}

package/permissions/usePermissions.d.ts

@@ -0,0 +1,4 @@
+import type { Abstraction } from "@webiny/di";
+import type { PermissionSchemaConfig } from "./types.js";
+import type { UsePermissionsResult } from "./types.js";
+export declare function createUsePermissions<const S extends PermissionSchemaConfig>(abstraction: Abstraction<UsePermissionsResult<S>>): () => UsePermissionsResult<S>;

package/permissions/usePermissions.js

@@ -0,0 +1,9 @@
+import { useContainer } from "@webiny/app";
+export function createUsePermissions(abstraction) {
+  return function usePermissions() {
+    const container = useContainer();
+    return container.resolve(abstraction);
+  };
+}
+
+//# sourceMappingURL=usePermissions.js.map

package/permissions/usePermissions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useContainer","createUsePermissions","abstraction","usePermissions","container","resolve"],"sources":["usePermissions.ts"],"sourcesContent":["import { useContainer } from \"@webiny/app\";\nimport type { Abstraction } from \"@webiny/di\";\nimport type { PermissionSchemaConfig } from \"./types.js\";\nimport type { UsePermissionsResult } from \"./types.js\";\n\nexport function createUsePermissions<const S extends PermissionSchemaConfig>(\n    abstraction: Abstraction<UsePermissionsResult<S>>\n): () => UsePermissionsResult<S> {\n    return function usePermissions(): UsePermissionsResult<S> {\n        const container = useContainer();\n        return container.resolve(abstraction);\n    };\n}\n"],"mappings":"AAAA,SAASA,YAAY,QAAQ,aAAa;AAK1C,OAAO,SAASC,oBAAoBA,CAChCC,WAAiD,EACpB;EAC7B,OAAO,SAASC,cAAcA,CAAA,EAA4B;IACtD,MAAMC,SAAS,GAAGJ,YAAY,CAAC,CAAC;IAChC,OAAOI,SAAS,CAACC,OAAO,CAACH,WAAW,CAAC;EACzC,CAAC;AACL","ignoreList":[]}

package/presentation/buildParams/useBuildParams.d.ts

@@ -0,0 +1 @@
+export declare const useBuildParams: () => import("../../features/buildParams/abstractions").IBuildParams;

package/presentation/buildParams/useBuildParams.js

@@ -0,0 +1,7 @@
+import { useFeature } from "@webiny/app";
+import { BuildParamsFeature } from "../../features/buildParams/feature.js";
+export const useBuildParams = () => {
+  return useFeature(BuildParamsFeature);
+};
+
+//# sourceMappingURL=useBuildParams.js.map

package/presentation/buildParams/useBuildParams.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useFeature","BuildParamsFeature","useBuildParams"],"sources":["useBuildParams.ts"],"sourcesContent":["import { useFeature } from \"@webiny/app\";\nimport { BuildParamsFeature } from \"~/features/buildParams/feature.js\";\n\nexport const useBuildParams = () => {\n    return useFeature(BuildParamsFeature);\n};\n"],"mappings":"AAAA,SAASA,UAAU,QAAQ,aAAa;AACxC,SAASC,kBAAkB;AAE3B,OAAO,MAAMC,cAAc,GAAGA,CAAA,KAAM;EAChC,OAAOF,UAAU,CAACC,kBAAkB,CAAC;AACzC,CAAC","ignoreList":[]}

package/presentation/installation/components/SystemInstaller/SystemInstaller.d.ts

@@ -0,0 +1,8 @@
+import React from "react";
+interface SystemInstallerProps {
+    children: React.ReactNode;
+}
+export declare const SystemInstaller: (({ children }: SystemInstallerProps) => React.JSX.Element) & {
+    displayName: string;
+};
+export {};